permdock 0.16.0 → 0.18.0

package/dist/convex/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { a as PermDock } from "../permdock-CprAPN3w.js";
-import { a as ProblemDetails, r as PermDockDeniedError } from "../errors-BIM4MFsJ.js";
-import { t as InstanceOptions } from "../instance-options-CoHn-0e8.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
+import { a as ProblemDetails, r as PermDockDeniedError } from "../errors-TpzkEKgJ.js";
+import { t as InstanceOptions } from "../instance-options-2sFGSdsf.js";
 //#region src/convex/types.d.ts
 type ConvexContextLike = {
   readonly auth?: {

package/dist/convex/index.js

@@ -1,9 +1,9 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { n as PermDockValidationError } from "../validation-error-CYg2kJEw.js";
 import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "../errors-B6R_lg2a.js";
-import { l as withApp } from "../permdock-BvjivVb9.js";
-import { n as resolveOrNull, t as buildInstance } from "../build-instance-BWXqwQYU.js";
-import { n as tenantScope, t as actorFrom } from "../adapter-context-CIQpQxbE.js";
+import { l as withApp } from "../permdock-D-_WrdKu.js";
+import { n as resolveOrNull, t as buildInstance } from "../build-instance-BFMFQdE_.js";
+import { n as tenantScope, t as actorFrom } from "../adapter-context-OHikyRqV.js";
 //#region src/convex/create.ts
 /**
 * Convex's runtime sends `data` to the client only for an error carrying this

package/dist/{core-lxoANyai.js → core-B8sLve3z.js}

@@ -1,11 +1,11 @@
-import { j as memoryCustomRoleSource } from "./src-C_pi2Rnh.js";
+import { A as memoryCustomRoleSource } from "./src-Brzq_0in.js";
 import { c as listPermissions } from "./permission-registry-B8tYxPIt.js";
-import { f as scopeList } from "./scopes-0Up_UA2t.js";
-import { y as membershipsClaim } from "./evaluate-BAmf_AQd.js";
-import { n as parseSnapshot } from "./snapshot-CXlzi69u.js";
-import { n as fromSnapshot } from "./from-snapshot-DCakWRsr.js";
-import { t as getPermDock } from "./permdock-BvjivVb9.js";
-import "./budget-BELja5A9.js";
+import { d as scopeList } from "./scopes-BSdYaGHs.js";
+import { y as membershipsClaim } from "./evaluate-Czbj7thS.js";
+import { n as parseSnapshot } from "./snapshot-DN_8J27z.js";
+import { n as fromSnapshot } from "./from-snapshot-DMlSSo9b.js";
+import { t as getPermDock } from "./permdock-D-_WrdKu.js";
+import "./budget-BBCPDOGP.js";
 import { c as quoteSqlTable, n as defaultSqlCommand, o as quoteSqlIdent, t as SQL_IDENT } from "./sql-0WjxIp9g.js";
 //#region src/testing/policy-matrix.ts
 function isOutcomeCell(value) {

package/dist/{core-CFepFiDP.d.ts → core-D87h2kpR.d.ts}

@@ -1,6 +1,6 @@
-import { T as Policy, Un as Decision, fr as Membership, sr as CustomRole } from "./policy-types-DGIO_gxq.js";
+import { E as Policy, dr as CustomRole, gr as Membership, qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
-import { f as WhereResult, o as PermDockOptions } from "./permdock-CprAPN3w.js";
+import { f as WhereResult, o as PermDockOptions } from "./permdock-ffY4CMd9.js";
 //#region src/testing/policy-matrix.d.ts
 type MatrixOutcome = "granted" | "denied" | "approval-required";
 type MatrixCell = MatrixOutcome | {

package/dist/{create-BLPKnJKa.js → create-3A7J9KRR.js}

@@ -3,13 +3,14 @@ import { n as freezeDeep } from "./freeze-jjan0lCv.js";
 import { n as problemDetails } from "./problem-details-CLDgX1KV.js";
 import { c as listPermissions } from "./permission-registry-B8tYxPIt.js";
 import { n as resourceRef } from "./resource-ref-CaS9yVPi.js";
-import { i as challengeScope, l as withApp } from "./permdock-BvjivVb9.js";
+import { i as challengeScope, l as withApp } from "./permdock-D-_WrdKu.js";
 import { r as hasCredentials } from "./http-DKLXrFGk.js";
 import { a as decisionResponse, c as problemFromDecision, d as unauthenticatedProblem, s as notFoundProblem, t as ANONYMOUS } from "./problem-BVLHFK33.js";
-import { n as resolveOrNull } from "./build-instance-BWXqwQYU.js";
-import { _ as LOAD_FAILED, l as InvalidSignatureError, n as applyApprovalResume, o as evaluationsHandler } from "./evaluations-IBceAeKT.js";
-import { n as tenantScope, t as actorFrom } from "./adapter-context-CIQpQxbE.js";
-import { n as requestContext, t as buildReportingInstance } from "./request-context-Duzdf0cd.js";
+import { n as resolveOrNull } from "./build-instance-BFMFQdE_.js";
+import { t as LOAD_FAILED } from "./decision-CaG5_eNJ.js";
+import { l as InvalidSignatureError, n as applyApprovalResume, o as evaluationsHandler } from "./evaluations-h3KoJAPa.js";
+import { n as tenantScope, t as actorFrom } from "./adapter-context-OHikyRqV.js";
+import { n as requestContext, t as buildReportingInstance } from "./request-context-DM6_jY1n.js";
 //#region src/server/kernel-problems.ts
 const NOT_DELEGATED = freezeDeep({
 	outcome: "denied",

package/dist/{create-CDd9c22W.d.ts → create-BrQXL-Wt.d.ts}

@@ -1,10 +1,10 @@
-import { T as Policy, Un as Decision, Wn as Denial, Wt as Instant, ht as TokenVerifier, j as PolicyVocabulary, mt as TokenSigner, pr as Principal, rn as AuthEvent } from "./policy-types-DGIO_gxq.js";
+import { E as Policy, Jn as Denial, Kt as Instant, M as PolicyVocabulary, _r as Principal, _t as TokenVerifier, an as AuthEvent, gt as TokenSigner, qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
-import { _ as PrincipalSource, a as PermDock, n as DecideOptions, o as PermDockOptions } from "./permdock-CprAPN3w.js";
-import { m as ApprovalStore } from "./types-DLvhVm1r.js";
-import { a as AutomationSource } from "./automation-C6Jg75xq.js";
-import { n as ApprovalWaiter } from "./waiter-CqUKX6CY.js";
-import { c as RunResource, i as RunBinding, r as RunAutomation } from "./run-ticket-ylovhyFQ.js";
+import { _ as PrincipalSource, a as PermDock, n as DecideOptions, o as PermDockOptions } from "./permdock-ffY4CMd9.js";
+import { m as ApprovalStore } from "./types-CqcsNCaN.js";
+import { a as AutomationSource } from "./automation-Bfa_wD1h.js";
+import { n as ApprovalWaiter } from "./waiter-NK_UuZbb.js";
+import { c as RunResource, i as RunBinding, r as RunAutomation } from "./run-ticket-DPaD27_r.js";
 //#region src/workflow/create.d.ts
 type WorkflowPermDockOptions = PermDockOptions & {
   /** Signs the run tickets `start` mints. */

package/dist/{create-BPUopdfL.d.ts → create-BzwjZuRS.d.ts}

@@ -1,13 +1,13 @@
-import { T as Policy, Un as Decision, hr as Subject, j as PolicyVocabulary, lr as Delegation, pr as Principal } from "./policy-types-DGIO_gxq.js";
+import { E as Policy, M as PolicyVocabulary, _r as Principal, pr as Delegation, qn as Decision, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
 import { t as Operation } from "./operations-Ci_rT6Uo.js";
-import { a as PermDock } from "./permdock-CprAPN3w.js";
-import { m as ApprovalStore } from "./types-DLvhVm1r.js";
-import { t as InstanceOptions } from "./instance-options-CoHn-0e8.js";
+import { a as PermDock } from "./permdock-ffY4CMd9.js";
+import { m as ApprovalStore } from "./types-CqcsNCaN.js";
+import { t as InstanceOptions } from "./instance-options-2sFGSdsf.js";
 import { t as RequestContext } from "./request-context-C2_1lchh.js";
-import { n as PermDockWrap } from "./wrap-DxXB54Wu.js";
-import { o as OtelWrap } from "./types-B6ExllNo.js";
-import { t as DeniedText } from "./denied-text-DHldhVUv.js";
+import { n as PermDockWrap } from "./wrap-BHGA-SMM.js";
+import { o as OtelWrap } from "./types-DGf_cpKF.js";
+import { t as DeniedText } from "./denied-text-DlIxt8fh.js";
 //#region src/agent/step-up.d.ts
 /**
  * What the user can do to lift a denial: authenticate again with the `acr` and

package/dist/{create-Coq5fIrq.js → create-C-tm3KIF.js}

@@ -1,10 +1,10 @@
 import { t as compact } from "./compact-CAf557ZB.js";
 import { n as freezeDeep } from "./freeze-jjan0lCv.js";
-import { o as deniedFor } from "./where-scope-DlCdCM_8.js";
-import { l as withApp } from "./permdock-BvjivVb9.js";
-import { t as composeWraps } from "./wrap-B2wziJI_.js";
-import { r as instanceOptions } from "./build-instance-BWXqwQYU.js";
-import { n as createAgentKernel } from "./kernel-BD8QuMnv.js";
+import { o as deniedFor } from "./where-scope-BKrqUDVk.js";
+import { l as withApp } from "./permdock-D-_WrdKu.js";
+import { t as composeWraps } from "./wrap-C5PWzgkq.js";
+import { r as instanceOptions } from "./build-instance-BFMFQdE_.js";
+import { n as createAgentKernel } from "./kernel-30Z2zM_d.js";
 //#region src/agent/create.ts
 function modelRow(modelId) {
 	return { id: modelId };

package/dist/{create-DBvUsgzK.d.ts → create-CtoT1lIQ.d.ts}

@@ -1,9 +1,9 @@
-import { Hn as ApprovalRequiredDecision, T as Policy, Yn as GrantedDecision, hr as Subject, j as PolicyVocabulary, pr as Principal, qn as DeniedDecision } from "./policy-types-DGIO_gxq.js";
+import { $n as GrantedDecision, E as Policy, Kn as ApprovalRequiredDecision, M as PolicyVocabulary, Zn as DeniedDecision, _r as Principal, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { t as Operation } from "./operations-Ci_rT6Uo.js";
-import { _ as PrincipalSource, a as PermDock, o as PermDockOptions } from "./permdock-CprAPN3w.js";
-import { m as ApprovalStore, p as ApprovalStatus } from "./types-DLvhVm1r.js";
+import { _ as PrincipalSource, a as PermDock, o as PermDockOptions } from "./permdock-ffY4CMd9.js";
+import { m as ApprovalStore, p as ApprovalStatus } from "./types-CqcsNCaN.js";
 import { n as ApprovalErrorCode } from "./errors-CHwoRRpB.js";
-import { t as ApprovalPrompt } from "./approval-prompt-3BqWczTt.js";
+import { t as ApprovalPrompt } from "./approval-prompt-Bg7gDSqd.js";
 //#region src/chat/subject.d.ts
 /**
  * The platform user behind a chat message or action. Fill it only from an event

package/dist/{credential-CyyyvCsL.js → credential-B3Hj4puZ.js}

@@ -7,9 +7,9 @@ import { c as listPermissions, h as formerKeys } from "./permission-registry-B8t
 import { g as secondsOf, l as isRfc3339, m as rfc3339, p as nowSeconds } from "./time-nR1JesoH.js";
 import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
 import { r as sha256Digest } from "./sha256-C-4WXKIu.js";
-import { n as coveredByDelegation } from "./delegation-CDB6_keF.js";
+import { n as coveredByDelegation } from "./delegation-aK4T_5WU.js";
 import { o as flattenGrantee } from "./grantee-Dke-9rd1.js";
-import { t as anonymousSubject } from "./subject-BGoM5o8B.js";
+import { t as anonymousSubject } from "./subject-C7RddW0G.js";
 //#region src/core/credential.ts
 /**
 * A feed id: lowercase, so a mail system that lowercases a local part still
@@ -181,7 +181,8 @@ function credentialSubject(credential, options) {
 		});
 	} else {
 		const membership = compact({
-			tenant: credential.tenant,
+			scope: "tenant",
+			id: credential.tenant,
 			roles: credential.roles ?? [],
 			via: "credential"
 		});

package/dist/{credentials-CdDxp7jN.js → credentials-dkycUsY3.js}

@@ -1,4 +1,4 @@
-import { n as CliError } from "./errors-Vpu6rKHl.js";
+import { n as CliError } from "./errors-BhRkoNS7.js";
 //#region src/cli/core/io.ts
 const FRAMES = [
 	"⠋",

package/dist/decision-CaG5_eNJ.js

@@ -0,0 +1,21 @@
+//#region src/core/decision.ts
+/** The denial for a check that failed or named no declared permission. */
+const NO_GRANT = Object.freeze({
+	outcome: "denied",
+	denials: Object.freeze([Object.freeze({
+		role: null,
+		reason: "no-grant"
+	})]),
+	alternatives: Object.freeze([])
+});
+/** The denial for a check whose row loader threw: it fails closed. */
+const LOAD_FAILED = Object.freeze({
+	outcome: "denied",
+	denials: Object.freeze([Object.freeze({
+		role: null,
+		reason: "validation"
+	})]),
+	alternatives: Object.freeze([])
+});
+//#endregion
+export { NO_GRANT as n, LOAD_FAILED as t };

package/dist/{delegation-CDB6_keF.js → delegation-aK4T_5WU.js}

@@ -4,11 +4,11 @@ import { a as resolveConditionRef, c as isConditionDate, d as parentHop, l as is
 import { o as sameId, t as expiredAt } from "./expiry-6XByK0dm.js";
 import { g as formerScopes, m as annotationsFor, n as findPermission } from "./permission-registry-B8tYxPIt.js";
 import { o as epochSeconds } from "./time-nR1JesoH.js";
-import { f as scopeList, h as tenantOf, m as subjectMemberships, s as resolveScope } from "./scopes-0Up_UA2t.js";
+import { d as scopeList, p as tenantOf, s as resolveScope } from "./scopes-BSdYaGHs.js";
 import { t as isoInstant } from "./instant-DK3Iz83e.js";
 import { o as flattenGrantee } from "./grantee-Dke-9rd1.js";
 import { t as isActive } from "./validity-Buc7w8E9.js";
-import { n as matchGrantee } from "./grantee-match-7RZZvoT_.js";
+import { n as matchGrantee } from "./grantee-match-BP-k4vRJ.js";
 //#region src/conditions/evaluate.ts
 function resolveRef(ref, subject) {
 	return resolveConditionRef(ref, subject);
@@ -73,7 +73,7 @@ function evaluateMemberOf(condition, data, subject, now, scopes) {
 	if (data === null || typeof data !== "object") return false;
 	const rowValue = ownGet(data, condition.field);
 	if (rowValue === void 0 || rowValue === null) return false;
-	const memberships = subjectMemberships(subject.principal?.memberships, scopes);
+	const memberships = subject.principal?.memberships ?? [];
 	const wanted = new Set(condition.roles);
 	const active = subject.principal?.tenant === "" ? void 0 : subject.principal?.tenant;
 	const scope = condition.scope === "resource" ? void 0 : resolveScope(scopes, condition.scope);

package/dist/delivery/index.d.ts

@@ -1,5 +1,5 @@
-import { dn as EmailCategory, ln as DeliveryFailureCause, sn as DeliveryChannel } from "../policy-types-DGIO_gxq.js";
-import { i as approvalUrlFor, n as ApprovalUrl, r as approvalPrompt, t as ApprovalPrompt } from "../approval-prompt-3BqWczTt.js";
-import { _ as TransportOptions, a as DeliveryReport, c as DeliveryTransport, d as EmailTransport, f as EmailUnsubscribe, g as TransportMessages, h as TransportItem, i as DeliveryMessages, l as DeliveryTransports, m as Recipient, n as ChatTransport, o as DeliveryResult, p as OutgoingEmail, r as DeliverOptions, s as DeliveryTarget, t as ChatMessage, u as EmailMessage, v as WebhookMessage, y as WebhookTransport } from "../types-CN0LsqbK.js";
-import { C as audience, S as SubscriberEvent, _ as ParseConnectorResult, a as DeliveryPermDock, b as Audience, c as MemoryDelivery, d as memoryDeliveryTransport, f as CONNECTOR_SCHEMA, g as ConnectorKind, h as ConnectorIssue, i as isDeliveryTarget, l as MemoryDeliveryTransport, m as Connector, n as webhookTransport, o as DeliveryPermDockOptions, p as CONNECTOR_KINDS, r as isAddrSpec, s as createPermDock, t as WebhookTransportOptions, u as MemoryDeliveryTransportOptions, v as SiemDestination, w as subscribersFor, x as AudienceOptions, y as parseConnector } from "../index-ymept53A.js";
+import { dn as DeliveryFailureCause, ln as DeliveryChannel, pn as EmailCategory } from "../policy-types-D-GwfQTc.js";
+import { i as approvalUrlFor, n as ApprovalUrl, r as approvalPrompt, t as ApprovalPrompt } from "../approval-prompt-Bg7gDSqd.js";
+import { _ as TransportOptions, a as DeliveryReport, c as DeliveryTransport, d as EmailTransport, f as EmailUnsubscribe, g as TransportMessages, h as TransportItem, i as DeliveryMessages, l as DeliveryTransports, m as Recipient, n as ChatTransport, o as DeliveryResult, p as OutgoingEmail, r as DeliverOptions, s as DeliveryTarget, t as ChatMessage, u as EmailMessage, v as WebhookMessage, y as WebhookTransport } from "../types-CCEeSCMB.js";
+import { C as audience, S as SubscriberEvent, _ as ParseConnectorResult, a as DeliveryPermDock, b as Audience, c as MemoryDelivery, d as memoryDeliveryTransport, f as CONNECTOR_SCHEMA, g as ConnectorKind, h as ConnectorIssue, i as isDeliveryTarget, l as MemoryDeliveryTransport, m as Connector, n as webhookTransport, o as DeliveryPermDockOptions, p as CONNECTOR_KINDS, r as isAddrSpec, s as createPermDock, t as WebhookTransportOptions, u as MemoryDeliveryTransportOptions, v as SiemDestination, w as subscribersFor, x as AudienceOptions, y as parseConnector } from "../index-CVGio3cH.js";
 export { type ApprovalPrompt, type ApprovalUrl, type Audience, type AudienceOptions, CONNECTOR_KINDS, CONNECTOR_SCHEMA, type ChatMessage, type ChatTransport, type Connector, type ConnectorIssue, type ConnectorKind, type DeliverOptions, type DeliveryChannel, type DeliveryFailureCause, type DeliveryMessages, type DeliveryPermDock, type DeliveryPermDockOptions, type DeliveryReport, type DeliveryResult, type DeliveryTarget, type DeliveryTransport, type DeliveryTransports, type EmailCategory, type EmailMessage, type EmailTransport, type EmailUnsubscribe, type MemoryDelivery, type MemoryDeliveryTransport, type MemoryDeliveryTransportOptions, type OutgoingEmail, type ParseConnectorResult, type Recipient, type SiemDestination, type SubscriberEvent, type TransportItem, type TransportMessages, type TransportOptions, type WebhookMessage, type WebhookTransport, type WebhookTransportOptions, approvalPrompt, approvalUrlFor, audience, createPermDock, isAddrSpec, isDeliveryTarget, memoryDeliveryTransport, parseConnector, subscribersFor, webhookTransport };

package/dist/delivery/index.js

@@ -1,5 +1,5 @@
 import { n as approvalUrlFor, t as approvalPrompt } from "../approval-prompt-B8hQY69x.js";
-import { n as subscribersFor, t as audience } from "../audience-DTjR8xet.js";
+import { n as subscribersFor, t as audience } from "../audience-B4YR9UpV.js";
 import { t as CONNECTOR_SCHEMA } from "../connector-schema-CYLQNMYq.js";
 import { a as parseConnector, i as CONNECTOR_KINDS, n as createPermDock, r as memoryDeliveryTransport, t as webhookTransport } from "../delivery-BupfvJIV.js";
 import { i as isDeliveryTarget, n as isAddrSpec } from "../target-qdEAnnhU.js";

package/dist/{denied-text-DHldhVUv.d.ts → denied-text-DlIxt8fh.d.ts}

@@ -1,4 +1,4 @@
-import { Un as Decision } from "./policy-types-DGIO_gxq.js";
+import { qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
 //#region src/agent/denied-text.d.ts
 /**

package/dist/{describe-BbFPBSms.d.ts → describe-BKtC_8PG.d.ts}

@@ -1,4 +1,4 @@
-import { Kn as DenialReason, Un as Decision, qn as DeniedDecision } from "./policy-types-DGIO_gxq.js";
+import { Xn as DenialReason, Zn as DeniedDecision, qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
 //#region src/core/describe.d.ts
 type DecisionDescription = {

package/dist/{describe-Bb4hGK5d.js → describe-BZAlPHxT.js}

@@ -1,4 +1,4 @@
-import { i as flattenApprovers } from "./approvers-B4r0N_Uz.js";
+import { a as flattenApprovers } from "./approvers-BaNwKYgd.js";
 import { r as requiredPlans } from "./problem-details-CLDgX1KV.js";
 //#region src/core/describe.ts
 const TENANT_REASONS = /* @__PURE__ */ new Set([
@@ -43,6 +43,7 @@ const DESCRIBE_TITLES = {
 function labelApprover(approver) {
 	if (approver.kind === "user") return `user ${approver.id}`;
 	if (approver.kind === "permission") return `a holder of ${approver.permission}`;
+	if (approver.kind === "manager") return approver.levels === void 0 ? "the requester's manager" : `a manager up to ${approver.levels} levels above the requester`;
 	if (approver.kind === "any-of") return `one of (${approver.of.map((entry) => flattenApprovers(entry).map(labelApprover).join(" and ")).join(", ")})`;
 	return labelGrantee(approver);
 }

package/dist/{diff-DfmYaIhB.js → diff-BnNHqtHj.js}

@@ -1,14 +1,14 @@
-import { j as memoryCustomRoleSource } from "./src-C_pi2Rnh.js";
+import { A as memoryCustomRoleSource } from "./src-Brzq_0in.js";
 import { n as findPermission } from "./permission-registry-B8tYxPIt.js";
 import { g as secondsOf } from "./time-nR1JesoH.js";
 import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
-import { t as getPermDock } from "./permdock-BvjivVb9.js";
-import { i as configError, u as usageResult } from "./errors-Vpu6rKHl.js";
-import { t as buildCatalog } from "./catalog-doc-DjMKzJp9.js";
-import { a as loadModule, n as asPolicy, s as pickNamed } from "./load-DjSU5KXO.js";
-import { t as parseCatalog } from "./parse-1_ZheTW5.js";
-import { t as operationFindings } from "./operation-findings-CXtFzlKJ.js";
-import { n as fixtureSubject, r as loadFixtures, t as fixtureRow } from "./fixtures-Bm4_K1ke.js";
+import { t as getPermDock } from "./permdock-D-_WrdKu.js";
+import { i as configError, u as usageResult } from "./errors-BhRkoNS7.js";
+import { t as buildCatalog } from "./catalog-doc-C4DGfJCO.js";
+import { a as loadModule, n as asPolicy, s as pickNamed } from "./load-BaEamml-.js";
+import { t as parseCatalog } from "./parse-UTC-sDrt.js";
+import { t as operationFindings } from "./operation-findings-CVwJHEu_.js";
+import { n as fixtureSubject, r as loadFixtures, t as fixtureRow } from "./fixtures-Cemqurt8.js";
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/diff/format.ts

package/dist/{diff-CxtbOi2l.js → diff-CBCzOTWM.js}

@@ -1,5 +1,5 @@
 import { t as defineLeaf } from "./command-L8EstFNm.js";
-import { c as given } from "./flags-DXjoTVbS.js";
+import { c as given } from "./flags-BlmpmXoY.js";
 //#region src/cli/commands/diff.ts
 const diff = defineLeaf({
 	positionals: [{
@@ -21,7 +21,7 @@ const diff = defineLeaf({
 		}
 	},
 	async run(ctx, { flags, args }) {
-		return (await import("./diff-DfmYaIhB.js")).runDiff({
+		return (await import("./diff-BnNHqtHj.js")).runDiff({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			sources: [args["before"], args["after"]].filter((value) => value !== void 0),