permdock 0.17.0 → 0.18.1

package/dist/a2a/index.d.ts

@@ -1,8 +1,8 @@
-import { E as Policy, _r as Principal, lr as AuthorizationDetail } from "../policy-types-IRJVABmm.js";
+import { E as Policy, _r as Principal, lr as AuthorizationDetail } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { m as ApprovalStore } from "../types-BvBbkAu1.js";
-import { a as ProblemDetails } from "../errors-Dc9FdamT.js";
-import { t as InstanceOptions } from "../instance-options-BOCRxEFb.js";
+import { m as ApprovalStore } from "../types-CqcsNCaN.js";
+import { a as ProblemDetails } from "../errors-TpzkEKgJ.js";
+import { t as InstanceOptions } from "../instance-options-2sFGSdsf.js";
 //#region src/a2a/types.d.ts
 type A2aAuth = {
   readonly clientId?: string;

package/dist/a2a/index.js

@@ -5,10 +5,10 @@ import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "..
 import { t as canonicalJson } from "../canonical-json-DwilZ1iB.js";
 import { t as bytesToBase64Url } from "../sha256-C-4WXKIu.js";
 import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
-import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-DdzMv5-F.js";
+import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-D-_WrdKu.js";
 import { p as wwwAuthenticate, r as bearerChallenge } from "../problem-BVLHFK33.js";
-import { r as instanceOptions } from "../build-instance-lye7oEqf.js";
-import { n as createAgentKernel } from "../kernel-CDDU93dI.js";
+import { r as instanceOptions } from "../build-instance-BFMFQdE_.js";
+import { n as createAgentKernel } from "../kernel-30Z2zM_d.js";
 import { t as delegationFrom } from "../delegation-input-FTxMK3ji.js";
 //#region src/a2a/create.ts
 function firstScheme(options) {

package/dist/{adoption-scan-Ci0xiJ3T.js → adoption-scan-CxExBYSJ.js}

@@ -1,5 +1,5 @@
 import { r as listSourceFiles } from "./files-BSjrtIHw.js";
-import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
+import { t as DOCS_BASE } from "./manifest-wclLWBVH.js";
 import { readFileSync } from "node:fs";
 import { relative } from "node:path";
 //#region src/cli/adoption-scan.ts

package/dist/agent/index.d.ts

@@ -1,3 +1,3 @@
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DyzWwxEB.js";
-import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-bzQlBzG4.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DlIxt8fh.js";
+import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-BzwjZuRS.js";
 export { type AgentAdapterOptions, type AgentPermDock, type AgentPermDockOptions, type DecideToolOptions, type DeniedText, type DeniedTextEvent, type GatewayOptions, type ModelMap, type OperationVerdict, type StepUp, type ToolBinding, type ToolMap, createPermDock };

package/dist/agent/index.js

@@ -1 +1 @@
-export { n as createPermDock } from "../create-gqtDb1nU.js";
+export { n as createPermDock } from "../create-C-tm3KIF.js";

package/dist/ai-sdk/index.d.ts

@@ -1,7 +1,7 @@
-import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
+import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DyzWwxEB.js";
-import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-bzQlBzG4.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DlIxt8fh.js";
+import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-BzwjZuRS.js";
 //#region src/ai-sdk/create.d.ts
 type AiSdkContext = {
   readonly runtimeContext?: unknown;

package/dist/ai-sdk/index.js

@@ -1,8 +1,8 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "../errors-B6R_lg2a.js";
-import { l as withApp } from "../permdock-DdzMv5-F.js";
-import { r as stepUpText, t as approvalTokenOf } from "../kernel-CDDU93dI.js";
-import { t as agentRuntime } from "../create-gqtDb1nU.js";
+import { l as withApp } from "../permdock-D-_WrdKu.js";
+import { r as stepUpText, t as approvalTokenOf } from "../kernel-30Z2zM_d.js";
+import { t as agentRuntime } from "../create-C-tm3KIF.js";
 //#region src/ai-sdk/create.ts
 const APPROVAL_STATUSES = /* @__PURE__ */ new Set([
 	"approved",

package/dist/{approval-normalize-4KxMRdJC.js → approval-normalize-CUjgSsOl.js}

@@ -1,5 +1,5 @@
 import { n as isReadonlyArray, t as compact } from "./compact-CAf557ZB.js";
-import { a as flattenApprovers, c as isManagerApprover, d as manager, f as user, l as isPermissionApprover, r as approverLeaves, s as isAnyOfInput, u as isUserApprover } from "./approvers-CNtl4Vc5.js";
+import { a as flattenApprovers, c as isManagerApprover, d as manager, f as user, l as isPermissionApprover, r as approverLeaves, s as isAnyOfInput, u as isUserApprover } from "./approvers-BaNwKYgd.js";
 import { d as isSelfParented } from "./resource-relations-8-pCScBO.js";
 import { r as assertDuration } from "./time-nR1JesoH.js";
 import { a as authenticated, r as asGrantee } from "./grantee-Dke-9rd1.js";

package/dist/{approval-policies-9VagPixq.d.ts → approval-policies-oNnckT12.d.ts}

@@ -1,4 +1,4 @@
-import { E as Policy, a as ApprovalOption, an as AuthEvent, bn as Scope, g as Grant, wr as Condition, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { E as Policy, a as ApprovalOption, an as AuthEvent, bn as Scope, g as Grant, wr as Condition, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { i as OperationEffect, s as OperationMeta, u as OperationRisk } from "./operations-Ci_rT6Uo.js";
 //#region src/core/approval-policies.d.ts
 /**

package/dist/{approval-prompt-BSh-yxbH.d.ts → approval-prompt-Bg7gDSqd.d.ts}

@@ -1,5 +1,5 @@
 import { s as OperationMeta, t as Operation } from "./operations-Ci_rT6Uo.js";
-import { u as ApprovalRequest } from "./types-BvBbkAu1.js";
+import { u as ApprovalRequest } from "./types-CqcsNCaN.js";
 //#region src/delivery/approval-prompt.d.ts
 /**
  * What an email or chat prompt shows an approver, wire format v1. It carries no

package/dist/approvals/index.d.ts

@@ -1,6 +1,6 @@
-import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-BvBbkAu1.js";
+import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-CqcsNCaN.js";
 import { n as ApprovalErrorCode, r as isApprovalError, t as ApprovalError } from "../errors-CHwoRRpB.js";
-import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-AOP5HQku.js";
-import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-CXXUFWtG.js";
+import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-CDVXR6YD.js";
+import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-CdMOd-GY.js";
 import { t as approvalFingerprint } from "../token-D6pWn8Uj.js";
 export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, type AccessReview, type AccessReviewDecision, AccessReviewError, type AccessReviewErrorCode, type AccessReviewHolder, type AccessReviewItem, type AccessReviewItemPage, type AccessReviewItemQuery, type AccessReviewItemStatus, type AccessReviewOptions, type AccessReviewStatus, type AccessReviewStore, type AccessReviewVerdict, type AccessReviewsHandlerOptions, type ApprovalApprovers, type ApprovalCancelMeta, type ApprovalCursorPosition, type ApprovalDelegation, type ApprovalDelegationMatch, type ApprovalDelegationSource, ApprovalError, type ApprovalErrorCode, type ApprovalInspectResult, type ApprovalListFilter, type ApprovalListQuery, type ApprovalPage, type ApprovalRequest, type ApprovalResumeFailureCause, type ApprovalSignature, type ApprovalSignatureClaims, type ApprovalSignatureEntry, type ApprovalStatus, type ApprovalStore, type ApprovalSubjectSummary, type ApprovalVerdict, type ApprovalView, type ApprovalsHandlerOptions, type ApproverRelationsOptions, DEFAULT_APPROVAL_TTL, type IdempotencyRecord, type IdempotencyStore, type IdempotentCall, type IdempotentResponse, type MatchDelegationOptions, type MemoryAccessReviewStore, type MemoryApprovalStore, type SignApprovalOptions, type StartAccessReviewInput, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalFingerprint, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };

package/dist/approvals/index.js

@@ -1,9 +1,9 @@
 import { t as approvalFingerprint } from "../token-DaMnIU9O.js";
 import { a as escalationOpenAt, c as isApprovalError, i as approverRelationKey, n as DEFAULT_APPROVAL_TTL, r as approvalQuorum, s as ApprovalError, t as APPROVAL_HEADER } from "../types-CcUXciSj.js";
-import { c as decodeApprovalCursor, d as pageApprovals, i as memoryApprovalStore, l as encodeApprovalCursor, n as assertApprover, s as approvalPageSize, t as applyApprovalVerdict, u as listAllApprovals } from "../store-XgBMbfDy.js";
-import { a as requestApproval, c as resumeFromHeader, d as vouchApproval, f as approverPermissions, i as readApprovalHeader, l as storedApprovalToken, m as approverRelations, n as consumeApproval, o as resolveApproval, r as inspectApproval, s as resumeDecision, t as cancelApprovals, u as summarizeSubject } from "../helpers-DNnZffrI.js";
+import { c as decodeApprovalCursor, d as pageApprovals, i as memoryApprovalStore, l as encodeApprovalCursor, n as assertApprover, s as approvalPageSize, t as applyApprovalVerdict, u as listAllApprovals } from "../store-DmVqy74I.js";
+import { a as requestApproval, c as resumeFromHeader, d as vouchApproval, f as approverPermissions, i as readApprovalHeader, l as storedApprovalToken, m as approverRelations, n as consumeApproval, o as resolveApproval, r as inspectApproval, s as resumeDecision, t as cancelApprovals, u as summarizeSubject } from "../helpers-DmqGy63f.js";
 import { n as isAccessReviewError, t as AccessReviewError } from "../errors-BDUwg2qC.js";
-import { _ as accessReviewerEligible, a as idempotencyRecordKey, c as approvalEntityTag, d as memoryApprovalDelegationSource, f as parseApprovalDelegation, g as accessReviewsHandler, h as startAccessReview, i as idempotencyRecord, l as approvalView, m as pageAccessReviewItems, n as approvalSignatureClaims, o as matchesIdempotencyRecord, p as memoryAccessReviewStore, r as signApproval, s as memoryIdempotencyStore, t as approvalsHandler, u as matchDelegation, v as decideAccessReviewItem } from "../approvals-DdFcTncq.js";
+import { _ as accessReviewerEligible, a as idempotencyRecordKey, c as approvalEntityTag, d as memoryApprovalDelegationSource, f as parseApprovalDelegation, g as accessReviewsHandler, h as startAccessReview, i as idempotencyRecord, l as approvalView, m as pageAccessReviewItems, n as approvalSignatureClaims, o as matchesIdempotencyRecord, p as memoryAccessReviewStore, r as signApproval, s as memoryIdempotencyStore, t as approvalsHandler, u as matchDelegation, v as decideAccessReviewItem } from "../approvals-DGId_hgJ.js";
 import { t as APPROVAL_REQUEST_SCHEMA } from "../request-schema-CMP8Cmxd.js";
 import { t as parseApprovalRequest } from "../parse-request-DOBVaeiQ.js";
 export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, AccessReviewError, ApprovalError, DEFAULT_APPROVAL_TTL, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalFingerprint, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };

package/dist/{approvals-DdFcTncq.js → approvals-DGId_hgJ.js}

@@ -9,11 +9,11 @@ import { r as sha256Digest } from "./sha256-C-4WXKIu.js";
 import { o as flattenGrantee } from "./grantee-Dke-9rd1.js";
 import { i as rootMembershipId } from "./subject-C7RddW0G.js";
 import { c as isApprovalError, s as ApprovalError } from "./types-CcUXciSj.js";
-import { a as belongsToTenant, c as decodeApprovalCursor, n as assertApprover, o as membershipTenants, r as matchesApprovers, s as approvalPageSize, u as listAllApprovals } from "./store-XgBMbfDy.js";
+import { a as belongsToTenant, c as decodeApprovalCursor, n as assertApprover, o as membershipTenants, r as matchesApprovers, s as approvalPageSize, u as listAllApprovals } from "./store-DmVqy74I.js";
 import { n as readBodyText } from "./body-text-DQhcmqdY.js";
 import { r as hasCredentials } from "./http-DKLXrFGk.js";
 import { d as unauthenticatedProblem, f as validationProblem, l as problemResponse, o as methodNotAllowed } from "./problem-BVLHFK33.js";
-import { f as approverPermissions, m as approverRelations, p as heldPermissions } from "./helpers-DNnZffrI.js";
+import { f as approverPermissions, m as approverRelations, p as heldPermissions } from "./helpers-DmqGy63f.js";
 import { n as isAccessReviewError, t as AccessReviewError } from "./errors-BDUwg2qC.js";
 import { t as bodyTooLarge } from "./body-CJQwYVa8.js";
 //#region src/approvals/access-reviews/decide.ts

package/dist/{approvers-CNtl4Vc5.js → approvers-BaNwKYgd.js}

@@ -33,15 +33,13 @@ function user(id) {
 		id
 	});
 }
-/** The most `manager({ levels })` walks up the chain. */
-const MAX_MANAGER_LEVELS = 8;
 /**
 * Approves when the approver manages the requester, directly or within `levels`
 * steps up the chain (1 to `MAX_MANAGER_LEVELS`, default 1).
 */
 function manager(options = {}) {
 	const levels = options.levels ?? 1;
-	if (!Number.isInteger(levels) || levels < 1 || levels > MAX_MANAGER_LEVELS) throw new Error(`PermDock: manager() levels must be a whole number from 1 to ${MAX_MANAGER_LEVELS}, got ${String(options.levels)}`);
+	if (!Number.isInteger(levels) || levels < 1 || levels > 8) throw new Error(`PermDock: manager() levels must be a whole number from 1 to 8, got ${String(options.levels)}`);
 	return Object.freeze(levels === 1 ? { kind: "manager" } : {
 		kind: "manager",
 		levels

package/dist/{arazzo-_zUmT8ZT.js → arazzo--riLuGY0.js}

@@ -1,9 +1,9 @@
-import { _ as arazzoFindings } from "./src-nYNBfmgq.js";
+import { _ as arazzoFindings } from "./src-Brzq_0in.js";
 import { c as missingInput } from "./errors-BhRkoNS7.js";
 import { i as readJsonFile } from "./files-BSjrtIHw.js";
 import { t as ARAZZO_REPORT_SCHEMA } from "./version-DMQ0dnN5.js";
 import { a as loadModule, s as pickNamed, t as asPermissionTree } from "./load-BaEamml-.js";
-import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
+import { t as DOCS_BASE } from "./manifest-wclLWBVH.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/arazzo.ts

package/dist/{arazzo-7kbeh1yi.js → arazzo-CEDbb-uM.js}

@@ -21,7 +21,7 @@ const check = defineLeaf({
 		...permissionsFlag
 	},
 	async run(ctx, { flags }) {
-		return (await import("./arazzo-_zUmT8ZT.js")).runArazzo({
+		return (await import("./arazzo--riLuGY0.js")).runArazzo({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			doc: given(flags.doc),

package/dist/astro/index.d.ts

@@ -1,9 +1,9 @@
-import { $t as Snapshot, E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
+import { $t as Snapshot, E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
 import { a as OperationInput, t as Operation } from "../operations-Ci_rT6Uo.js";
-import { a as PermDock } from "../permdock-DUWZEOLR.js";
-import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-Bw-lWqzR.js";
-import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-BgqpOOpd.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
+import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-3OnXjZ2D.js";
+import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-BdmfnbJM.js";
 import { APIContext, MiddlewareHandler } from "astro";
 //#region src/astro/create.d.ts
 type AstroPermDockOptions<TUser = unknown> = FetchAdapterOptions<APIContext, TUser>;

package/dist/astro/index.js

@@ -1,5 +1,5 @@
-import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-DG40eSJa.js";
-import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-UZOW0PRC.js";
+import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-h3KoJAPa.js";
+import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-DH-NJPbL.js";
 //#region src/astro/create.ts
 const route = {
 	context: (context) => context,

package/dist/{audience-jRO819i3.js → audience-B4YR9UpV.js}

@@ -1,4 +1,4 @@
-import { t as whoCan } from "./who-can-BY5d3HPw.js";
+import { t as whoCan } from "./who-can-KhVWMxtf.js";
 //#region src/delivery/audience.ts
 async function granted(permdock, ids, permission, row) {
 	const unique = [...new Set(ids.filter((id) => typeof id === "string" && id !== ""))];

package/dist/authzen/index.d.ts

@@ -1,8 +1,8 @@
-import { E as Policy, _r as Principal, pr as Delegation, sr as Actor } from "../policy-types-IRJVABmm.js";
-import { m as ApprovalStore } from "../types-BvBbkAu1.js";
-import { a as ProblemDetails } from "../errors-Dc9FdamT.js";
-import { t as InstanceOptions } from "../instance-options-BOCRxEFb.js";
-import { a as evaluationsSemantic, n as EvaluationsSemantic, r as evaluateBatch, t as EVALUATIONS_SEMANTICS } from "../evaluations-BasA9zXp.js";
+import { E as Policy, _r as Principal, pr as Delegation, sr as Actor } from "../policy-types-D-GwfQTc.js";
+import { m as ApprovalStore } from "../types-CqcsNCaN.js";
+import { a as ProblemDetails } from "../errors-TpzkEKgJ.js";
+import { t as InstanceOptions } from "../instance-options-2sFGSdsf.js";
+import { a as evaluationsSemantic, n as EvaluationsSemantic, r as evaluateBatch, t as EVALUATIONS_SEMANTICS } from "../evaluations-CisTTURl.js";
 //#region src/authzen/map.d.ts
 type AuthzenEntity = {
   readonly type?: unknown;

package/dist/authzen/index.js

@@ -7,8 +7,8 @@ import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
 import { n as readBodyText, t as MAX_BODY_BYTES } from "../body-text-DQhcmqdY.js";
 import { r as hasCredentials } from "../http-DKLXrFGk.js";
 import { d as unauthenticatedProblem, l as problemResponse, o as methodNotAllowed } from "../problem-BVLHFK33.js";
-import { n as resolveOrNull, t as buildInstance } from "../build-instance-lye7oEqf.js";
-import { a as evaluationReasons, c as withRequestId, g as wireResourceId, h as permissionLookup, i as evaluateBatch, m as itemResourceData, n as applyApprovalResume, r as authzenMetadata, s as evaluationsSemantic, t as EVALUATIONS_SEMANTICS } from "../evaluations-DG40eSJa.js";
+import { n as resolveOrNull, t as buildInstance } from "../build-instance-BFMFQdE_.js";
+import { a as evaluationReasons, c as withRequestId, g as wireResourceId, h as permissionLookup, i as evaluateBatch, m as itemResourceData, n as applyApprovalResume, r as authzenMetadata, s as evaluationsSemantic, t as EVALUATIONS_SEMANTICS } from "../evaluations-h3KoJAPa.js";
 //#region src/authzen/map.ts
 const UNKNOWN = {
 	outcome: "denied",

package/dist/{automation-DCWuVKtd.d.ts → automation-Bfa_wD1h.d.ts}

@@ -1,4 +1,4 @@
-import { Gt as InstanceHandle, Jn as Denial, Kt as Instant } from "./policy-types-IRJVABmm.js";
+import { Gt as InstanceHandle, Jn as Denial, Kt as Instant } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
 import { t as Operation } from "./operations-Ci_rT6Uo.js";
 //#region src/core/automation.d.ts

package/dist/better-auth/index.d.ts

@@ -1,4 +1,4 @@
-import { K as CustomRoleSource, P as RoleBinding, Y as DecisionSink, _r as Principal, yr as Subject } from "../policy-types-IRJVABmm.js";
+import { K as CustomRoleSource, P as RoleBinding, Y as DecisionSink, _r as Principal, yr as Subject } from "../policy-types-D-GwfQTc.js";
 import { f as PermissionTree } from "../permission-types-CAY-GU7e.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/better-auth/types.d.ts

package/dist/better-auth/index.js

@@ -1,6 +1,6 @@
 import { n as isReadonlyArray, r as isRecord, t as compact } from "../compact-CAf557ZB.js";
 import { n as freezeDeep } from "../freeze-jjan0lCv.js";
-import { n as role, r as allow } from "../role-builder-BrmOcXch.js";
+import { n as role, r as allow } from "../role-builder-CMW4wWzn.js";
 import { c as listPermissions } from "../permission-registry-B8tYxPIt.js";
 import { r as validateRecord } from "../thenable-BNSM1U2R.js";
 import { i as rootMembershipId, t as anonymousSubject } from "../subject-C7RddW0G.js";