permdock 0.17.0 → 0.18.1

package/dist/testing/fixtures/index.js

@@ -1,4 +1,4 @@
-import { n as parseSupabaseManifest } from "../../manifest-BXTbHNIV.js";
+import { n as parseSupabaseManifest } from "../../manifest-BdzBobNK.js";
 import { t as parseCatalog } from "../../parse-UTC-sDrt.js";
 //#region src/testing/fixtures/better-supabase.catalog.json
 var better_supabase_catalog_default = {

package/dist/testing/index.d.ts

@@ -1,31 +1,31 @@
-import { $t as Snapshot, E as Policy, J as DecisionProvider, K as CustomRoleSource, St as WhereCompiler, W as CredentialVerifier, X as EntitlementSource, Y as DecisionSink, _r as Principal, _t as TokenVerifier, ct as SettingsSource, gr as Membership, gt as TokenSigner, ln as DeliveryChannel, lt as SnapshotSource, pt as SubjectResolver, rt as MembershipSource, st as RelationSource, tt as LimitStore, yr as Subject } from "../policy-types-IRJVABmm.js";
+import { $t as Snapshot, E as Policy, J as DecisionProvider, K as CustomRoleSource, St as WhereCompiler, W as CredentialVerifier, X as EntitlementSource, Y as DecisionSink, _r as Principal, _t as TokenVerifier, ct as SettingsSource, gr as Membership, gt as TokenSigner, ln as DeliveryChannel, lt as SnapshotSource, pt as SubjectResolver, rt as MembershipSource, st as RelationSource, tt as LimitStore, yr as Subject } from "../policy-types-D-GwfQTc.js";
 import { g as ResourceInit, l as InferPermissionTree, u as Permission } from "../permission-types-CAY-GU7e.js";
 import { r as Role } from "../vocabulary-DEJ5j4mR.js";
-import { st as LegacyCheck } from "../index-Bt-UoBWu.js";
-import { i as ApprovalPolicySource } from "../approval-policies-9VagPixq.js";
-import { C as InstanceCache, _ as PrincipalSource, a as PermDock, b as Limits, h as PrincipalIdentity } from "../permdock-DUWZEOLR.js";
-import { s as PolicySource } from "../hosted-DxRLLiFU.js";
-import { a as ApprovalDelegationSource, m as ApprovalStore } from "../types-BvBbkAu1.js";
-import { a as ProblemDetails } from "../errors-Dc9FdamT.js";
-import { c as ModelMap, t as AgentPermDock, u as ToolMap } from "../create-bzQlBzG4.js";
-import { c as AccessReviewStore } from "../types-AOP5HQku.js";
-import { R as IdempotencyStore } from "../index-CXXUFWtG.js";
+import { st as LegacyCheck } from "../index-CdUTE6qd.js";
+import { i as ApprovalPolicySource } from "../approval-policies-oNnckT12.js";
+import { _ as PrincipalSource, a as PermDock, b as Limits, h as PrincipalIdentity, w as InstanceCache } from "../permdock-ffY4CMd9.js";
+import { s as PolicySource } from "../hosted-BFNXwcjd.js";
+import { a as ApprovalDelegationSource, m as ApprovalStore } from "../types-CqcsNCaN.js";
+import { a as ProblemDetails } from "../errors-TpzkEKgJ.js";
+import { c as ModelMap, t as AgentPermDock, u as ToolMap } from "../create-BzwjZuRS.js";
+import { c as AccessReviewStore } from "../types-CDVXR6YD.js";
+import { R as IdempotencyStore } from "../index-CdMOd-GY.js";
 import { n as RevocationFeed } from "../revocations-BaUXHM1N.js";
-import { s as SupportSessionSource } from "../index-DtGtDzjb.js";
+import { s as SupportSessionSource } from "../index-rFp6X_QP.js";
+import { n as VersionCache } from "../version-cache-DzNKWiI6.js";
 import { r as SupabaseHookManifest } from "../manifest-B5yF3CIq.js";
-import { n as VersionCache } from "../version-cache-9Vq5QVFC.js";
 import { t as supabaseMembershipsBudget } from "../budget-CNLsV2SL.js";
-import { a as AutomationSource, t as Automation } from "../automation-DCWuVKtd.js";
-import { c as DeliveryTransport, g as TransportMessages } from "../types-UfpcY575.js";
-import { t as CloudApproverOptions } from "../types-CA-A33Q5.js";
-import { n as ApprovalWaiter } from "../waiter-C2cXXLFZ.js";
-import { g as SetQueue, l as ReplayStore } from "../types-CJC1aaoJ.js";
-import { r as SnapshotStorage } from "../types-D29K5ZNP.js";
-import { x as DirectoryStore } from "../index-CZ5mixHO.js";
-import { S as SsfStreamStore } from "../index-z44pfWar.js";
-import { S as policyMatrix, _ as DescribePolicyConfig, a as OrmParityScenario, b as PolicyMatrixCell, c as RlsFieldsOutcome, d as RlsParityOptions, f as RlsParityReport, g as testRlsParity, h as RlsQueryResult, i as OrmParityRunInput, l as RlsParityCase, m as RlsQueryFn, n as OrmParityOptions, o as testOrmParity, p as RlsParitySubject, r as OrmParityReport, s as RlsDbOutcome, t as OrmParityCase, u as RlsParityFixture, v as MatrixCell, x as PolicyMatrixReport, y as MatrixOutcome } from "../core-0iYZ5HUx.js";
+import { a as AutomationSource, t as Automation } from "../automation-Bfa_wD1h.js";
+import { c as DeliveryTransport, g as TransportMessages } from "../types-CCEeSCMB.js";
+import { t as CloudApproverOptions } from "../types-D-JO7lh8.js";
+import { n as ApprovalWaiter } from "../waiter-NK_UuZbb.js";
+import { g as SetQueue, l as ReplayStore } from "../types-Ck1KOfug.js";
+import { r as SnapshotStorage } from "../types-o1vu6Ks3.js";
+import { x as DirectoryStore } from "../index-Dfv9Toct.js";
+import { S as SsfStreamStore } from "../index-BhnOOnp9.js";
+import { S as policyMatrix, _ as DescribePolicyConfig, a as OrmParityScenario, b as PolicyMatrixCell, c as RlsFieldsOutcome, d as RlsParityOptions, f as RlsParityReport, g as testRlsParity, h as RlsQueryResult, i as OrmParityRunInput, l as RlsParityCase, m as RlsQueryFn, n as OrmParityOptions, o as testOrmParity, p as RlsParitySubject, r as OrmParityReport, s as RlsDbOutcome, t as OrmParityCase, u as RlsParityFixture, v as MatrixCell, x as PolicyMatrixReport, y as MatrixOutcome } from "../core-D87h2kpR.js";
 import { a as SaasProject } from "../permissions-Bx6UI8n1.js";
-import { n as saasPolicy } from "../policy-CTNl7pvN.js";
+import { n as saasPolicy } from "../policy-BtKSApSt.js";
 import { expectTypeOf } from "vitest";
 //#region src/testing/describe-policy.d.ts
 /** `policyMatrix` under Vitest: one test per cell, plus the exhaustive check. */

package/dist/testing/index.js

@@ -1,8 +1,8 @@
 import { r as isRecord } from "../compact-CAf557ZB.js";
 import { n as freezeDeep } from "../freeze-jjan0lCv.js";
 import { i as principal } from "../refs-C8BKxc_e.js";
-import { n as role, r as allow } from "../role-builder-BrmOcXch.js";
-import { C as limits, D as approvalPoliciesFor, M as memoryCustomRoleSource, d as snapshotFor, w as memoryLimitStore } from "../src-nYNBfmgq.js";
+import { n as role, r as allow } from "../role-builder-CMW4wWzn.js";
+import { A as memoryCustomRoleSource, C as limits, D as approvalPoliciesFor, d as snapshotFor, w as memoryLimitStore } from "../src-Brzq_0in.js";
 import { t as memoryRevocationFeed } from "../revocations-Bhr0aMIC.js";
 import { n as loadPrincipalByIdentity, t as loadPrincipal } from "../principal-source-C6N60GtM.js";
 import { v as resource } from "../permission-registry-B8tYxPIt.js";
@@ -12,20 +12,20 @@ import { d as scopeList, o as normalizeMemberships } from "../scopes-BSdYaGHs.js
 import { u as evaluateCondition } from "../delegation-aK4T_5WU.js";
 import { a as authenticated } from "../grantee-Dke-9rd1.js";
 import { t as byCodePoint } from "../compare-DTfyUunF.js";
-import { r as definePolicy } from "../policy-DxQyHKPB.js";
-import { c as mergeHostedGrants, l as parsePolicyDocument } from "../hosted-tPZnyjQS.js";
-import { t as definePermissions } from "../permissions-CVXmRILq.js";
+import { r as definePolicy } from "../policy-cV_wwPb8.js";
+import { c as mergeHostedGrants, l as parsePolicyDocument } from "../hosted-waouw2V-.js";
 import { i as rootMembershipId } from "../subject-C7RddW0G.js";
-import { T as validateCustomRole } from "../evaluate-CsjXeLRo.js";
+import { T as validateCustomRole } from "../evaluate-Czbj7thS.js";
 import { n as parseSnapshot } from "../snapshot-DN_8J27z.js";
 import { n as fromSnapshot } from "../from-snapshot-DMlSSo9b.js";
-import { t as getPermDock } from "../permdock-DdzMv5-F.js";
+import { t as getPermDock } from "../permdock-D-_WrdKu.js";
 import { t as APPROVAL_HEADER } from "../types-CcUXciSj.js";
-import { i as memoryApprovalStore } from "../store-XgBMbfDy.js";
+import { i as memoryApprovalStore } from "../store-DmVqy74I.js";
+import { t as definePermissions } from "../permissions-BaoLxy66.js";
 import { t as catalogFingerprint } from "../catalog-fingerprint-e6aCWosn.js";
 import { s as parseCredential } from "../credential-B3Hj4puZ.js";
 import { c as problemFromDecision } from "../problem-BVLHFK33.js";
-import { o as resolveApproval } from "../helpers-DNnZffrI.js";
+import { o as resolveApproval } from "../helpers-DmqGy63f.js";
 import { t as APPROVAL_REQUEST_SCHEMA } from "../request-schema-CMP8Cmxd.js";
 import { t as catalogSchema } from "../schema-CuX70xgH.js";
 import { t as supabaseMembershipsBudget } from "../budget-BBCPDOGP.js";
@@ -34,12 +34,12 @@ import { n as discoverAuthorizationServer } from "../device-BwbJNmb2.js";
 import { t as CONNECTOR_SCHEMA } from "../connector-schema-CYLQNMYq.js";
 import { l as sha256Hex, n as scimHandler, t as directoryMembershipSource } from "../scim-C30QBBoF.js";
 import { c as quoteSqlTable, o as quoteSqlIdent } from "../sql-0WjxIp9g.js";
-import { i as cloudEndpoints, n as cloud, s as approverHeaders, t as bearerChallenge } from "../challenge-M_ghKJnT.js";
-import { t as supabaseManifestSchema } from "../manifest-schema-DQkBK2Mr.js";
-import { t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-DMXAOmEW.js";
-import { i as policyMatrixLayout, n as testRlsParity, r as policyMatrix, t as testOrmParity } from "../core-W5f4Rjt0.js";
-import { i as saasPermissions } from "../permissions-CvpPtz5O.js";
-import { C as saasOrg, E as saasSeed, S as saasMemberships, a as saasProject, g as verifySaasSession, h as signSaasToken, k as saasPolicy, t as saasDoc, w as saasPrincipal, x as saasCustomRoles } from "../saas-BqM9mJkk.js";
+import { i as cloudEndpoints, n as cloud, s as approverHeaders, t as bearerChallenge } from "../challenge-B2O2OLEk.js";
+import { t as supabaseManifestSchema } from "../manifest-schema-CsFsYLF-.js";
+import { t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-BecMsTtM.js";
+import { i as policyMatrixLayout, n as testRlsParity, r as policyMatrix, t as testOrmParity } from "../core-B8sLve3z.js";
+import { i as saasPermissions } from "../permissions-B3ggI88M.js";
+import { C as saasOrg, E as saasSeed, S as saasMemberships, a as saasProject, g as verifySaasSession, h as signSaasToken, k as saasPolicy, t as saasDoc, w as saasPrincipal, x as saasCustomRoles } from "../saas-B8H1MsQ3.js";
 import { t as POLICY_NOT_PUBLISHED } from "../problem-types-DSsRfONQ.js";
 import { t as require__2020 } from "../2020-CJbO8Bvz.js";
 import { afterAll, assert, beforeAll, describe, expect, expectTypeOf, it, vi } from "vitest";

package/dist/testing/saas/index.d.ts

@@ -1,8 +1,8 @@
-import { Kt as Instant, _r as Principal, dr as CustomRole, gr as Membership, pr as Delegation, sr as Actor, st as RelationSource, tt as LimitStore, yr as Subject } from "../../policy-types-IRJVABmm.js";
+import { Kt as Instant, _r as Principal, dr as CustomRole, gr as Membership, pr as Delegation, sr as Actor, st as RelationSource, tt as LimitStore, yr as Subject } from "../../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../../permission-types-CAY-GU7e.js";
-import { o as PermDockOptions } from "../../permdock-DUWZEOLR.js";
+import { o as PermDockOptions } from "../../permdock-ffY4CMd9.js";
 import { a as SaasProject, c as saasPlans, i as SaasFolderSchema, l as saasRoles, n as SaasDocSchema, o as SaasProjectSchema, r as SaasFolder, s as saasPermissions, t as SaasDoc, u as saasTenantRoleNames } from "../../permissions-Bx6UI8n1.js";
-import { n as saasPolicy, t as SAAS_API_KEY_LIMIT } from "../../policy-CTNl7pvN.js";
+import { n as saasPolicy, t as SAAS_API_KEY_LIMIT } from "../../policy-BtKSApSt.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/testing/saas/schema.d.ts
 type FieldKind = "string" | "boolean" | "nullable-string";

package/dist/testing/saas/index.js

@@ -1,3 +1,3 @@
-import { a as saasPlans, c as rowSchema, i as saasPermissions, n as SaasFolderSchema, o as saasRoles, r as SaasProjectSchema, s as saasTenantRoleNames, t as SaasDocSchema } from "../../permissions-CvpPtz5O.js";
-import { C as saasOrg, D as saasUsers, E as saasSeed, O as SAAS_API_KEY_LIMIT, S as saasMemberships, T as saasRelations, _ as verifySaasToken, a as saasProject, b as SAAS_EXPIRED_AT, c as saasUser, d as saasIssuer, f as saasJwks, g as verifySaasSession, h as signSaasToken, i as saasLimitStore, k as saasPolicy, l as SAAS_TOKEN_TTL_SECONDS, m as saasPublicJwk, n as saasFolder, o as saasScenarioOptions, p as saasPrivateJwk, r as saasFolderScenarios, s as saasScenarios, t as saasDoc, u as saasAudience, v as saasSchemaSql, w as saasPrincipal, x as saasCustomRoles, y as saasSeedSql } from "../../saas-BqM9mJkk.js";
+import { a as saasPlans, c as rowSchema, i as saasPermissions, n as SaasFolderSchema, o as saasRoles, r as SaasProjectSchema, s as saasTenantRoleNames, t as SaasDocSchema } from "../../permissions-B3ggI88M.js";
+import { C as saasOrg, D as saasUsers, E as saasSeed, O as SAAS_API_KEY_LIMIT, S as saasMemberships, T as saasRelations, _ as verifySaasToken, a as saasProject, b as SAAS_EXPIRED_AT, c as saasUser, d as saasIssuer, f as saasJwks, g as verifySaasSession, h as signSaasToken, i as saasLimitStore, k as saasPolicy, l as SAAS_TOKEN_TTL_SECONDS, m as saasPublicJwk, n as saasFolder, o as saasScenarioOptions, p as saasPrivateJwk, r as saasFolderScenarios, s as saasScenarios, t as saasDoc, u as saasAudience, v as saasSchemaSql, w as saasPrincipal, x as saasCustomRoles, y as saasSeedSql } from "../../saas-B8H1MsQ3.js";
 export { SAAS_API_KEY_LIMIT, SAAS_EXPIRED_AT, SAAS_TOKEN_TTL_SECONDS, SaasDocSchema, SaasFolderSchema, SaasProjectSchema, rowSchema, saasAudience, saasCustomRoles, saasDoc, saasFolder, saasFolderScenarios, saasIssuer, saasJwks, saasLimitStore, saasMemberships, saasOrg, saasPermissions, saasPlans, saasPolicy, saasPrincipal, saasPrivateJwk, saasProject, saasPublicJwk, saasRelations, saasRoles, saasScenarioOptions, saasScenarios, saasSchemaSql, saasSeed, saasSeedSql, saasTenantRoleNames, saasUser, saasUsers, signSaasToken, verifySaasSession, verifySaasToken };

package/dist/testing/saas/permissions.js

@@ -1 +1 @@
-export { t as SaasDocSchema, n as SaasFolderSchema, r as SaasProjectSchema, i as saasPermissions, a as saasPlans, o as saasRoles, s as saasTenantRoleNames } from "../../permissions-CvpPtz5O.js";
+export { t as SaasDocSchema, n as SaasFolderSchema, r as SaasProjectSchema, i as saasPermissions, a as saasPlans, o as saasRoles, s as saasTenantRoleNames } from "../../permissions-B3ggI88M.js";

package/dist/{tool-refusal-C1UlhU0V.js → tool-refusal-D4spOJ7I.js}

@@ -1,5 +1,5 @@
 import { t as wireDenials } from "./wire-denial-C7PaVYEM.js";
-import { n as describe } from "./describe-CogP1loh.js";
+import { n as describe } from "./describe-BZAlPHxT.js";
 //#region src/core/tool-refusal.ts
 function deniedToolRefusal(decision, permission, resource) {
 	const alternatives = decision.alternatives.map((leaf) => leaf.key);

package/dist/trpc/index.d.ts

@@ -1,10 +1,10 @@
-import { E as Policy, _r as Principal } from "../policy-types-IRJVABmm.js";
+import { E as Policy, _r as Principal } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { a as PermDock } from "../permdock-DUWZEOLR.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
 import { n as RevocationFeed } from "../revocations-BaUXHM1N.js";
-import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-Bw-lWqzR.js";
-import { t as ServerAdapterOptions } from "../bind-DjFNX0Pq.js";
-import { t as StreamProtectOptions } from "../stream-BMJg56jU.js";
+import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-3OnXjZ2D.js";
+import { t as ServerAdapterOptions } from "../bind-DR6ku3A9.js";
+import { t as StreamProtectOptions } from "../stream-W2RuUYly.js";
 import { AnyTRPCMiddlewareFunction } from "@trpc/server";
 //#region src/trpc/create.d.ts
 type TrpcMiddlewareOpts<TCtx = object, TInput = unknown> = {

package/dist/trpc/index.js

@@ -1,8 +1,8 @@
 import { o as problemMessage } from "../http-DKLXrFGk.js";
-import { t as problemFromError } from "../map-error-B_f3C5cs.js";
-import { n as attached } from "../bind-BJFeLX1V.js";
+import { t as problemFromError } from "../map-error-BH16Ah8P.js";
+import { n as attached } from "../bind-B4pMH9bm.js";
 import { i as isAsyncIterable, o as reloadAfter } from "../stream-CDvF0sJm.js";
-import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-BOu3FD6X.js";
+import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-KwX_Jcxz.js";
 import { TRPCError, isTrackedEnvelope } from "@trpc/server";
 //#region src/trpc/create.ts
 const PROBLEM = Symbol.for("permdock.problem");

package/dist/{type-helpers-C_OnZW8c.d.ts → type-helpers-i1EJ3Eb1.d.ts}

@@ -1,4 +1,4 @@
-import { M as PolicyVocabulary, Sn as ScopeNames } from "./policy-types-IRJVABmm.js";
+import { M as PolicyVocabulary, Sn as ScopeNames } from "./policy-types-D-GwfQTc.js";
 import { k as POLICY_SCOPES, u as Permission } from "./permission-types-CAY-GU7e.js";
 import { n as PlanTree } from "./vocabulary-DEJ5j4mR.js";
 import { o as OperationMap } from "./operations-Ci_rT6Uo.js";

package/dist/{types-CAAN7evk.d.ts → types-3Y8UpFkF.d.ts}

@@ -1,4 +1,4 @@
-import { h as RoleThrough, m as RoleMap, s as SqlMembershipSource } from "./sources-CXY05xtB.js";
+import { h as RoleThrough, m as RoleMap, s as SqlMembershipSource } from "./sources-xdQShLDU.js";
 //#region src/cli/core/errors.d.ts
 /**
  * 0 success, 1 failure, 2 usage, 3 action required, 130 interrupted (SIGINT or
@@ -435,6 +435,15 @@ type RlsConfig = {
    */
   readonly shims?: boolean | RlsShimsConfig;
 };
+/** `rls.approvals.managers`: one row per user and manager. */
+type RlsApprovalManagers = {
+  /** `table` or `schema.table`. */
+  readonly table: string;
+  /** The column holding the user's id. */
+  readonly user: string;
+  /** The column holding the id of that user's manager. */
+  readonly manager: string;
+};
 /**
  * `rls.approvals` on a table the app already has: the store functions keep each
  * request's body in `body` and its token in `token` (both added when missing)
@@ -442,6 +451,7 @@ type RlsConfig = {
  * app's own columns on each write, converted to their types.
  */
 type RlsApprovalsAdopt = {
+  readonly store?: boolean;
   /**
    * `table` or `schema.table`. Without it the store is the generated
    * `approval_requests`.
@@ -464,6 +474,12 @@ type RlsApprovalsAdopt = {
   readonly tenantPolicies?: {
     readonly manage: string;
   };
+  /**
+   * The app's table that names each user's manager, so `manager()` approvers
+   * match in SQL: `permdock_manages` walks it and the four-argument
+   * `permdock_is_approver` calls it. Off by default.
+   */
+  readonly managers?: RlsApprovalManagers;
   /** A text column unique per request. Default `token`. */
   readonly token?: string;
   /** A jsonb column holding the `ApprovalRequest`. Default `body`. */

package/dist/{types-B3BOcI0J.d.ts → types-B8qUkGja.d.ts}

@@ -1,6 +1,6 @@
-import { E as Policy, M as PolicyVocabulary, Qn as ExplainedDecision, _r as Principal, gr as Membership, qn as Decision, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { E as Policy, M as PolicyVocabulary, Qn as ExplainedDecision, _r as Principal, gr as Membership, qn as Decision, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { f as PermissionTree, u as Permission } from "./permission-types-CAY-GU7e.js";
-import { O as PermissionCheck, a as PermDock, f as WhereResult, l as SimulateOptions, n as DecideOptions, o as PermDockOptions, r as DeriveOptions } from "./permdock-DUWZEOLR.js";
+import { a as PermDock, f as WhereResult, k as PermissionCheck, l as SimulateOptions, n as DecideOptions, o as PermDockOptions, r as DeriveOptions } from "./permdock-ffY4CMd9.js";
 //#region src/pdp/types.d.ts
 type RemotePdpAuth = {
   readonly bearer: string | (() => string | Promise<string>);

package/dist/{types-UfpcY575.d.ts → types-CCEeSCMB.d.ts}

@@ -1,6 +1,6 @@
-import { $n as GrantedDecision, dn as DeliveryFailureCause, ln as DeliveryChannel, pn as EmailCategory, un as DeliveryEvent } from "./policy-types-IRJVABmm.js";
-import { s as CloudEvent } from "./sink-DUzt0e4B.js";
-import { t as ApprovalPrompt } from "./approval-prompt-BSh-yxbH.js";
+import { $n as GrantedDecision, dn as DeliveryFailureCause, ln as DeliveryChannel, pn as EmailCategory, un as DeliveryEvent } from "./policy-types-D-GwfQTc.js";
+import { s as CloudEvent } from "./sink-ogbVkyeo.js";
+import { t as ApprovalPrompt } from "./approval-prompt-Bg7gDSqd.js";
 //#region src/delivery/types.d.ts
 /**
  * Who a delivery goes to. `{ principal }` names an app principal and the

package/dist/{types-AOP5HQku.d.ts → types-CDVXR6YD.d.ts}

@@ -1,4 +1,4 @@
-import { wn as Approver } from "./policy-types-IRJVABmm.js";
+import { wn as Approver } from "./policy-types-D-GwfQTc.js";
 //#region src/approvals/access-reviews/types.d.ts
 type AccessReviewStatus = "open" | "closed";
 type AccessReviewItemStatus = "pending" | "kept" | "revoked";

package/dist/{types-CJC1aaoJ.d.ts → types-Ck1KOfug.d.ts}

@@ -1,5 +1,5 @@
-import { Q as JwtClaims, _r as Principal, _t as TokenVerifier, an as AuthEvent, ht as TokenFailureCause, rt as MembershipSource, sr as Actor, yr as Subject } from "./policy-types-IRJVABmm.js";
-import { m as ApprovalStore } from "./types-BvBbkAu1.js";
+import { Q as JwtClaims, _r as Principal, _t as TokenVerifier, an as AuthEvent, ht as TokenFailureCause, rt as MembershipSource, sr as Actor, yr as Subject } from "./policy-types-D-GwfQTc.js";
+import { m as ApprovalStore } from "./types-CqcsNCaN.js";
 import { n as RevocationFeed } from "./revocations-BaUXHM1N.js";
 import { t as ClaimsMap } from "./claims-map-D1Pb5oRq.js";
 import { t as ClientNames } from "./clients-C_NOET3z.js";

package/dist/{types-BvBbkAu1.d.ts → types-CqcsNCaN.d.ts}

@@ -1,4 +1,4 @@
-import { Kt as Instant, Ln as RelationGrantee, Sr as AdapterId, gr as Membership, i as ApprovalMode, n as ApprovalCombine, s as ApprovalStage, vn as WireDelegation, wn as Approver, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { Kt as Instant, Ln as RelationGrantee, Sr as AdapterId, gr as Membership, i as ApprovalMode, n as ApprovalCombine, s as ApprovalStage, vn as WireDelegation, wn as Approver, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { M as AppData } from "./permission-types-CAY-GU7e.js";
 //#region src/approvals/types.d.ts
 type ApprovalStatus = "pending" | "approved" | "rejected" | "expired";

package/dist/{types-CA-A33Q5.d.ts → types-D-JO7lh8.d.ts}

@@ -1,8 +1,8 @@
-import { Y as DecisionSink, _t as TokenVerifier, gt as TokenSigner, lt as SnapshotSource, yr as Subject } from "./policy-types-IRJVABmm.js";
-import { s as PolicySource } from "./hosted-DxRLLiFU.js";
-import { m as ApprovalStore, u as ApprovalRequest } from "./types-BvBbkAu1.js";
+import { Y as DecisionSink, _t as TokenVerifier, gt as TokenSigner, lt as SnapshotSource, yr as Subject } from "./policy-types-D-GwfQTc.js";
+import { s as PolicySource } from "./hosted-BFNXwcjd.js";
+import { m as ApprovalStore, u as ApprovalRequest } from "./types-CqcsNCaN.js";
 import { a as CatalogDocument } from "./types-NYoj8JBm.js";
-import { a as CatalogFinding } from "./sink-DUzt0e4B.js";
+import { a as CatalogFinding } from "./sink-ogbVkyeo.js";
 //#region src/cloud/types.d.ts
 type CloudEndpointOptions = {
   readonly url?: string;

package/dist/{types-DVZNTkU0.d.ts → types-D19MK4t-.d.ts}

@@ -1,8 +1,8 @@
-import { $n as GrantedDecision, $t as Snapshot, Kn as ApprovalRequiredDecision, _t as TokenVerifier, qn as Decision } from "./policy-types-IRJVABmm.js";
+import { $n as GrantedDecision, $t as Snapshot, Kn as ApprovalRequiredDecision, _t as TokenVerifier, qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
-import { a as PermDock } from "./permdock-DUWZEOLR.js";
+import { a as PermDock } from "./permdock-ffY4CMd9.js";
 import { t as PermissionBoundaryState } from "./boundary-C9ck-3uK.js";
-import { d as PermissionState, m as ProviderOptionsBase, p as ProtectedActionView, t as ClientStore, v as ActionResult } from "./store-g5ctUrOI.js";
+import { d as PermissionState, m as ProviderOptionsBase, p as ProtectedActionView, t as ClientStore, v as ActionResult } from "./store-DYeB-_U3.js";
 import { Snippet } from "svelte";
 import { Readable } from "svelte/store";
 //#region src/client/views.d.ts

package/dist/{types-Sj1U8HMm.d.ts → types-DGf_cpKF.d.ts}

@@ -1,5 +1,5 @@
-import { M as PolicyVocabulary, cn as DecisionEvent } from "./policy-types-IRJVABmm.js";
-import { a as PermDock } from "./permdock-DUWZEOLR.js";
+import { M as PolicyVocabulary, cn as DecisionEvent } from "./policy-types-D-GwfQTc.js";
+import { a as PermDock } from "./permdock-ffY4CMd9.js";
 //#region src/otel/types.d.ts
 declare const GENAI_SEMCONV_PIN = "1.37.0";
 declare const GEN_AI_TOOL_NAME = "gen_ai.tool.name";

package/dist/{types-e82uzrTn.d.ts → types-DmbfLu2p.d.ts}

@@ -1,8 +1,8 @@
-import { $n as GrantedDecision, $t as Snapshot, Kn as ApprovalRequiredDecision, _t as TokenVerifier, qn as Decision } from "./policy-types-IRJVABmm.js";
+import { $n as GrantedDecision, $t as Snapshot, Kn as ApprovalRequiredDecision, _t as TokenVerifier, qn as Decision } from "./policy-types-D-GwfQTc.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
-import { s as RowData } from "./permdock-DUWZEOLR.js";
-import { n as DescribeMessages } from "./describe-nalX_HHE.js";
-import { n as ClientStoreOptions } from "./store-g5ctUrOI.js";
+import { s as RowData } from "./permdock-ffY4CMd9.js";
+import { n as DescribeMessages } from "./describe-BKtC_8PG.js";
+import { n as ClientStoreOptions } from "./store-DYeB-_U3.js";
 import { ReactNode } from "react";
 //#region src/react/types.d.ts
 type PermDockProviderProps = ({

package/dist/{types-D29K5ZNP.d.ts → types-o1vu6Ks3.d.ts}

@@ -1,7 +1,7 @@
-import { $t as Snapshot, _t as TokenVerifier, lt as SnapshotSource } from "./policy-types-IRJVABmm.js";
-import { n as DescribeMessages } from "./describe-nalX_HHE.js";
-import { n as ClientStoreOptions } from "./store-g5ctUrOI.js";
-import { t as PermDockDefaults } from "./types-e82uzrTn.js";
+import { $t as Snapshot, _t as TokenVerifier, lt as SnapshotSource } from "./policy-types-D-GwfQTc.js";
+import { n as DescribeMessages } from "./describe-BKtC_8PG.js";
+import { n as ClientStoreOptions } from "./store-DYeB-_U3.js";
+import { t as PermDockDefaults } from "./types-DmbfLu2p.js";
 import { ReactNode } from "react";
 //#region src/react-native/types.d.ts
 type SnapshotStorage = {

package/dist/unplugin/index.d.ts

@@ -1,4 +1,4 @@
-import { s as PermDockPluginOptions } from "../types-CAAN7evk.js";
+import { s as PermDockPluginOptions } from "../types-3Y8UpFkF.js";
 import { createUnplugin } from "unplugin";
 //#region src/unplugin/index.d.ts
 type CreateUnplugin = typeof createUnplugin<PermDockPluginOptions | undefined>;

package/dist/unplugin/index.js

@@ -1,4 +1,4 @@
-import { n as createCollectScheduler, r as report } from "../watch-DXRDBSCu.js";
+import { n as createCollectScheduler, r as report } from "../watch-CBHADqBH.js";
 import { r as peerHint } from "../peer-BuK9F53f.js";
 import { createRequire } from "node:module";
 //#region src/unplugin/index.ts

package/dist/usage-Cl5eb-e1.js

@@ -0,0 +1 @@
+export { t as runUsage } from "./usage-DC0UKe6C.js";

package/dist/{usage-COsGLht5.js → usage-DC0UKe6C.js}

@@ -4,10 +4,10 @@ import { a as rel, r as listSourceFiles } from "./files-BSjrtIHw.js";
 import { o as USAGE_REPORT_SCHEMA } from "./version-DMQ0dnN5.js";
 import { c as jsonSchemaOf } from "./catalog-doc-C4DGfJCO.js";
 import { a as loadModule, n as asPolicy, s as pickNamed } from "./load-BaEamml-.js";
-import { r as runCollect } from "./collect-HfJXl8Tr.js";
+import { r as runCollect } from "./collect-D878zLDP.js";
 import { t as beforeFirst } from "./text-BMFRfBqc.js";
-import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
-import { r as findingOf } from "./output-DhTpe8v1.js";
+import { t as DOCS_BASE } from "./manifest-wclLWBVH.js";
+import { r as findingOf } from "./output-BFWLER4r.js";
 import { existsSync, readFileSync, realpathSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";

package/dist/{usage-CqcMeQgX.js → usage-DYtRVkcN.js}

@@ -16,7 +16,7 @@ const usage = defineLeaf({
 		}
 	},
 	async run(ctx, { flags }) {
-		return (await import("./usage-D1cpHO7p.js")).runUsage({
+		return (await import("./usage-Cl5eb-e1.js")).runUsage({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			ignore: flags.ignore,

package/dist/{validation-error-DpvsBwZJ.d.ts → validation-error-Dx8PipbO.d.ts}

@@ -1,4 +1,4 @@
-import { a as ProblemDetails } from "./errors-Dc9FdamT.js";
+import { a as ProblemDetails } from "./errors-TpzkEKgJ.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/core/validation-error.d.ts
 /**

package/dist/{verify-C8G8D5mk.js → verify-Bpj0hauG.js}

@@ -1,6 +1,6 @@
 import { a as sole, r as isRecord } from "./compact-CAf557ZB.js";
 import { l as isConditionRef, o as hasConditionOp } from "./refs-C8BKxc_e.js";
-import { M as memoryCustomRoleSource, S as memoryRelationSource } from "./src-nYNBfmgq.js";
+import { A as memoryCustomRoleSource, S as memoryRelationSource } from "./src-Brzq_0in.js";
 import { c as listPermissions, h as formerKeys, n as findPermission } from "./permission-registry-B8tYxPIt.js";
 import { c as isEdgeRelation, l as isFieldRelation, u as isPrincipalRelation } from "./resource-relations-8-pCScBO.js";
 import { f as nowMillis, u as isoAt } from "./time-nR1JesoH.js";
@@ -8,10 +8,10 @@ import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
 import { c as rootScope, d as scopeList, o as normalizeMemberships } from "./scopes-BSdYaGHs.js";
 import { o as requiresStandIn } from "./delegation-aK4T_5WU.js";
 import { p as scopeField } from "./tenancy-DvOHHk3-.js";
-import { l as policyLevels, t as coveredLevels } from "./policy-DxQyHKPB.js";
+import { l as policyLevels, t as coveredLevels } from "./policy-cV_wwPb8.js";
 import { t as requiresApproval } from "./approval-required-TzNB9oQA.js";
-import { c as andWhere, m as customRoleScope, v as leveled, y as membershipsClaim } from "./evaluate-CsjXeLRo.js";
-import { t as getPermDock } from "./permdock-DdzMv5-F.js";
+import { c as andWhere, m as customRoleScope, v as leveled, y as membershipsClaim } from "./evaluate-Czbj7thS.js";
+import { t as getPermDock } from "./permdock-D-_WrdKu.js";
 import { a as describeError, i as configError, u as usageResult } from "./errors-BhRkoNS7.js";
 import { t as policyRowConditionKeys } from "./row-conditions-BAGHOmVq.js";
 import { s as writeFileEnsuringDir } from "./files-BSjrtIHw.js";
@@ -22,11 +22,11 @@ import { i as qualifySqlTable, n as defaultSqlCommand, t as SQL_IDENT } from "./
 import { a as scopeMembershipTable, i as scopeColumn } from "./compile-B_oJqmIg.js";
 import "./sources-C4vkzZJV.js";
 import { t as beforeFirst } from "./text-BMFRfBqc.js";
-import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
-import { n as fixtureSubject, r as loadFixtures, t as fixtureRow } from "./fixtures-0VTW5oNq.js";
+import { t as DOCS_BASE } from "./manifest-wclLWBVH.js";
+import { n as fixtureSubject, r as loadFixtures, t as fixtureRow } from "./fixtures-Cemqurt8.js";
 import { A as quoteQualified, N as arrayColumnsOf, O as quoteIdent, P as columnTypesOf, _ as subjectClaimJsonSql, a as customRolesOn, j as quoteTable, k as quoteLiteral, r as HELPERS, v as subjectClaimSql } from "./shared-DyYVEjKC.js";
-import { C as accessSql, D as tokenScopeAllowsCall, S as requiresSql, ht as scopeTable, k as capabilityAccessSql, n as tableNameOf, o as graphPlan, q as apiKeyAllowsCall, r as tableNames } from "./tables-BsGE6HBR.js";
-import { c as breakGlassKey, f as compileConditionSql, l as collectGrants, m as sqlFunctionNames, p as contextRefs, s as breakGlassHolder } from "./ownership-moSRhxl_.js";
+import { C as accessSql, D as tokenScopeAllowsCall, S as requiresSql, ht as scopeTable, k as capabilityAccessSql, n as tableNameOf, o as graphPlan, q as apiKeyAllowsCall, r as tableNames } from "./tables-BfOk0ymL.js";
+import { c as breakGlassKey, f as compileConditionSql, l as collectGrants, m as sqlFunctionNames, p as contextRefs, s as breakGlassHolder } from "./ownership-D-mIt-w0.js";
 import { t as membershipSourcesOf } from "./sources-qoIJQrJv.js";
 import { n as pgConnector, t as connectPgPool } from "./pg-Ddxsd5ZB.js";
 import { _ as wrapSql, g as validitySql, m as andSql, s as viewName, t as FIELD_VIEWS } from "./fields-CrjL6A49.js";

package/dist/{version-cache-9Vq5QVFC.d.ts → version-cache-DzNKWiI6.d.ts}

@@ -1,4 +1,4 @@
-import { Kt as Instant, xt as VersionQuery } from "./policy-types-IRJVABmm.js";
+import { Kt as Instant, xt as VersionQuery } from "./policy-types-D-GwfQTc.js";
 //#region src/core/version-cache.d.ts
 type VersionCacheStats = {
   /** Version reads the cache started. */

package/dist/{views-TrZYlDnM.js → views-MWmJ6Y4P.js}

@@ -1,5 +1,5 @@
 import { r as requiredPlans } from "./problem-details-CLDgX1KV.js";
-import { n as describe } from "./describe-CogP1loh.js";
+import { n as describe } from "./describe-BZAlPHxT.js";
 //#region src/client/views.ts
 function permissionSet(store, permissions, data) {
 	const granted = [];

package/dist/vue/index.d.ts

@@ -1,11 +1,11 @@
-import { $t as Snapshot, Kn as ApprovalRequiredDecision, M as PolicyVocabulary, _t as TokenVerifier, gr as Membership, qn as Decision } from "../policy-types-IRJVABmm.js";
+import { $t as Snapshot, Kn as ApprovalRequiredDecision, M as PolicyVocabulary, _t as TokenVerifier, gr as Membership, qn as Decision } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
 import { r as Role } from "../vocabulary-DEJ5j4mR.js";
-import { d as UncheckedData, s as RowData } from "../permdock-DUWZEOLR.js";
-import { c as requiredPlans } from "../errors-Dc9FdamT.js";
-import { i as describe, r as DescribeOptions, t as DecisionDescription } from "../describe-nalX_HHE.js";
+import { d as UncheckedData, s as RowData } from "../permdock-ffY4CMd9.js";
+import { c as requiredPlans } from "../errors-TpzkEKgJ.js";
+import { i as describe, r as DescribeOptions, t as DecisionDescription } from "../describe-BKtC_8PG.js";
 import { t as PermissionBoundaryState } from "../boundary-C9ck-3uK.js";
-import { _ as TenantView, a as ClientPermDock, c as GateMode, d as PermissionState, g as SubjectView, h as RolesOptions, i as ApprovalState, l as GateView, m as ProviderOptionsBase, o as ClientStatus, p as ProtectedActionView, r as ApprovalHandle, s as FilterResult, u as PermissionSet, v as ActionResult, y as ProtectedAction } from "../store-g5ctUrOI.js";
+import { _ as TenantView, a as ClientPermDock, c as GateMode, d as PermissionState, g as SubjectView, h as RolesOptions, i as ApprovalState, l as GateView, m as ProviderOptionsBase, o as ClientStatus, p as ProtectedActionView, r as ApprovalHandle, s as FilterResult, u as PermissionSet, v as ActionResult, y as ProtectedAction } from "../store-DYeB-_U3.js";
 import { a as broadcastChannelRefresh, c as visibilityRefresh, i as authzChangeRefresh, n as EventSourceRefreshOptions, o as eventSourceRefresh, r as RefreshTrigger, s as focusRefresh, t as AuthzChangeRefresh } from "../refresh-on-L9UOwATg.js";
 import { t as approvalHeaders } from "../headers-B9jQxjtW.js";
 import { ComputedRef, DefineComponent, MaybeRefOrGetter, Plugin, VNode } from "vue";

package/dist/vue/index.js

@@ -1,8 +1,8 @@
 import { r as requiredPlans } from "../problem-details-CLDgX1KV.js";
-import { n as describe } from "../describe-CogP1loh.js";
+import { n as describe } from "../describe-BZAlPHxT.js";
 import { n as boundaryFallback, t as boundaryDigest } from "../boundary-BV3O1eud.js";
-import { n as actionRunner, r as approvalHeaders, t as actionApproval } from "../protected-action-B6n6w7Rl.js";
-import { a as livePermDock, c as rolesView, d as subjectView, f as tenantView, i as gateView, l as scopedTenant, n as describeWith, o as permissionSet, r as filterResult, s as protectedView, t as approvalHandle, u as slotContent } from "../views-TrZYlDnM.js";
+import { n as actionRunner, r as approvalHeaders, t as actionApproval } from "../protected-action-OpOxtTsN.js";
+import { a as livePermDock, c as rolesView, d as subjectView, f as tenantView, i as gateView, l as scopedTenant, n as describeWith, o as permissionSet, r as filterResult, s as protectedView, t as approvalHandle, u as slotContent } from "../views-MWmJ6Y4P.js";
 import { a as eventSourceRefresh, i as broadcastChannelRefresh, l as isPromiseLike, o as focusRefresh, r as authzChangeRefresh, s as visibilityRefresh } from "../store-options--zWn48PK.js";
 import { n as switchTenant, t as providerStore } from "../provider-store-BQP_pp8s.js";
 import { computed, defineComponent, effectScope, getCurrentScope, inject, isRef, onErrorCaptured, onScopeDispose, provide, shallowRef, toValue, watch } from "vue";

package/dist/{waiter-C2cXXLFZ.d.ts → waiter-NK_UuZbb.d.ts}

@@ -1,5 +1,5 @@
-import { Kt as Instant } from "./policy-types-IRJVABmm.js";
-import { m as ApprovalStore } from "./types-BvBbkAu1.js";
+import { Kt as Instant } from "./policy-types-D-GwfQTc.js";
+import { m as ApprovalStore } from "./types-CqcsNCaN.js";
 //#region src/workflow/waiter.d.ts
 type ApprovalWaitOptions = {
   /**

package/dist/{watch-DXRDBSCu.js → watch-CBHADqBH.js}

@@ -1,7 +1,7 @@
 import { i as dateAt } from "./time-nR1JesoH.js";
 import { a as describeError } from "./errors-BhRkoNS7.js";
 import { t as defaultSrcPath } from "./files-BSjrtIHw.js";
-import { r as runCollect } from "./collect-HfJXl8Tr.js";
+import { r as runCollect } from "./collect-D878zLDP.js";
 import { n as isConfigFile, r as loadConfig } from "./config-COHmivz9.js";
 import { watch } from "node:fs";
 import { basename, dirname, relative, resolve, sep } from "node:path";

package/dist/watch-OYwAPCzx.js

@@ -0,0 +1 @@
+export { i as watchCollect } from "./watch-CBHADqBH.js";

package/dist/webmcp/index.d.ts

@@ -1,4 +1,4 @@
-import { $t as Snapshot, qn as Decision } from "../policy-types-IRJVABmm.js";
+import { $t as Snapshot, qn as Decision } from "../policy-types-D-GwfQTc.js";
 import { f as PermissionTree, u as Permission } from "../permission-types-CAY-GU7e.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/webmcp/types.d.ts

package/dist/webmcp/index.js

@@ -3,7 +3,7 @@ import { n as PermDockValidationError } from "../validation-error-CYg2kJEw.js";
 import { c as listPermissions, f as resourceOfNode, i as getRegistry, m as annotationsFor, s as isRegistryTree } from "../permission-registry-B8tYxPIt.js";
 import { n as isThenable, t as ignoreRejection } from "../thenable-BNSM1U2R.js";
 import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
-import { n as deniedToolRefusal, r as toolErrorResult, t as approvalToolRefusal } from "../tool-refusal-C1UlhU0V.js";
+import { n as deniedToolRefusal, r as toolErrorResult, t as approvalToolRefusal } from "../tool-refusal-D4spOJ7I.js";
 //#region src/webmcp/register.ts
 const MISSING_CONTEXT = "permdock/webmcp: document.modelContext is absent; registerTools is a no-op.";
 const CURRENT = Symbol.for("permdock.current");

package/dist/{who-can-BY5d3HPw.js → who-can-KhVWMxtf.js}

@@ -10,7 +10,7 @@ import { o as flattenGrantee } from "./grantee-Dke-9rd1.js";
 import { t as byCodePoint } from "./compare-DTfyUunF.js";
 import { r as relationCondition } from "./grantee-conditions-DX4K_gGI.js";
 import { c as nowSeconds, p as scopeField } from "./tenancy-DvOHHk3-.js";
-import { D as emptyListeners, t as evaluate } from "./evaluate-CsjXeLRo.js";
+import { D as emptyListeners, t as evaluate } from "./evaluate-Czbj7thS.js";
 import { n as relationId, t as pendingRelations } from "./relations-BxvRvDHK.js";
 import { t as relationWalk } from "./relation-walk-DK_gkgL7.js";
 //#region src/core/who-can.ts

package/dist/workflow/index.d.ts

@@ -1,5 +1,5 @@
-import { a as AutomationSource, i as AutomationRequest, l as memoryAutomationSource, n as AutomationDecision, r as AutomationMode, s as MemoryAutomationSource, t as Automation, u as parseAutomation } from "../automation-DCWuVKtd.js";
-import { i as pollingApprovalWaiter, n as ApprovalWaiter, r as PollingApprovalWaiterOptions, t as ApprovalWaitOptions } from "../waiter-C2cXXLFZ.js";
-import { a as WorkflowPermDockOptions, i as WorkflowPermDock, n as AwaitApprovalOptions, o as createPermDock, r as StartAutomationResult, t as AutomationOptions } from "../create-DrHUmKvG.js";
+import { a as AutomationSource, i as AutomationRequest, l as memoryAutomationSource, n as AutomationDecision, r as AutomationMode, s as MemoryAutomationSource, t as Automation, u as parseAutomation } from "../automation-Bfa_wD1h.js";
+import { i as pollingApprovalWaiter, n as ApprovalWaiter, r as PollingApprovalWaiterOptions, t as ApprovalWaitOptions } from "../waiter-NK_UuZbb.js";
+import { a as WorkflowPermDockOptions, i as WorkflowPermDock, n as AwaitApprovalOptions, o as createPermDock, r as StartAutomationResult, t as AutomationOptions } from "../create-BrQXL-Wt.js";
 import "../index-CaxrMD1A.js";
 export { type ApprovalWaitOptions, type ApprovalWaiter, type Automation, type AutomationDecision, type AutomationMode, type AutomationOptions, type AutomationRequest, type AutomationSource, type AwaitApprovalOptions, type MemoryAutomationSource, type PollingApprovalWaiterOptions, type StartAutomationResult, type WorkflowPermDock, type WorkflowPermDockOptions, createPermDock, memoryAutomationSource, parseAutomation, pollingApprovalWaiter };

package/dist/workflow/index.js

@@ -4,9 +4,9 @@ import { a as isId } from "../expiry-6XByK0dm.js";
 import { n as findPermission } from "../permission-registry-B8tYxPIt.js";
 import { n as isThenable } from "../thenable-BNSM1U2R.js";
 import { n as memoryAutomationSource, r as parseAutomation } from "../automation-x3KEUusw.js";
-import { l as withApp, t as getPermDock } from "../permdock-DdzMv5-F.js";
+import { l as withApp, t as getPermDock } from "../permdock-D-_WrdKu.js";
 import { o as automationEvent } from "../sink-D9_vh372.js";
-import { a as requestApproval, s as resumeDecision } from "../helpers-DNnZffrI.js";
+import { a as requestApproval, s as resumeDecision } from "../helpers-DmqGy63f.js";
 import { i as subjectFromRunTicket, r as signRunTicket } from "../run-ticket-CjvXr6wj.js";
 import { t as pollingApprovalWaiter } from "../waiter-aBLM63_f.js";
 //#region src/workflow/create.ts

package/dist/workflow-sdk/index.d.ts

@@ -1,8 +1,8 @@
-import { qn as Decision } from "../policy-types-IRJVABmm.js";
+import { qn as Decision } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { a as PermDock } from "../permdock-DUWZEOLR.js";
-import { n as ApprovalWaiter } from "../waiter-C2cXXLFZ.js";
-import { i as WorkflowPermDock, r as StartAutomationResult, t as AutomationOptions } from "../create-DrHUmKvG.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
+import { n as ApprovalWaiter } from "../waiter-NK_UuZbb.js";
+import { i as WorkflowPermDock, r as StartAutomationResult, t as AutomationOptions } from "../create-BrQXL-Wt.js";
 //#region src/workflow-sdk/index.d.ts
 /**
  * The part of a Workflow SDK `Hook` the waiter reads: awaiting it suspends the