permdock 0.17.0 → 0.18.1

package/dist/{operation-findings-CXtFzlKJ.js → operation-findings-CVwJHEu_.js}

@@ -1,4 +1,4 @@
-import { n as OPERATION_RISKS } from "./permissions-CVXmRILq.js";
+import { t as OPERATION_RISKS } from "./operation-risks-BKOcTv8J.js";
 //#region src/catalog/operation-findings.ts
 function rank(risk) {
 	return OPERATION_RISKS.indexOf(risk ?? "low");

package/dist/operation-risks-BKOcTv8J.js

@@ -0,0 +1,13 @@
+//#region src/core/operation-risks.ts
+/** Every `meta.risk` level, lowest first. */
+const OPERATION_RISKS = Object.freeze([
+	"low",
+	"medium",
+	"high",
+	"critical"
+]);
+function isOperationRisk(value) {
+	return OPERATION_RISKS.some((risk) => risk === value);
+}
+//#endregion
+export { isOperationRisk as n, OPERATION_RISKS as t };

package/dist/operations-Bm9HFecz.js

@@ -0,0 +1,89 @@
+import { n as isForbiddenKey } from "./paths-CUvURzHp.js";
+import { c as listPermissions, o as isPermission } from "./permission-registry-B8tYxPIt.js";
+import { n as isOperationRisk, t as OPERATION_RISKS } from "./operation-risks-BKOcTv8J.js";
+//#region src/core/operations.ts
+const OPERATION_EFFECTS = Object.freeze([
+	"read",
+	"write",
+	"delete",
+	"send",
+	"spend",
+	"external"
+]);
+/**
+* MCP tool-name characters (MCP 2025-11-25, Tools: Tool names), so a name works
+* as a tool name unchanged.
+*/
+const NAME = /^[A-Za-z0-9_.-]{1,128}$/u;
+const META_KEYS = /* @__PURE__ */ new Set([
+	"risk",
+	"effects",
+	"title"
+]);
+function isOperationEffect(value) {
+	return OPERATION_EFFECTS.some((effect) => effect === value);
+}
+function readMeta(name, value) {
+	if (value === void 0) return Object.freeze({});
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new TypeError(`Operation "${name}": meta must be an object.`);
+	for (const key of Object.keys(value)) if (!META_KEYS.has(key)) throw new TypeError(`Operation "${name}": meta.${key} is not one of risk, effects, title.`);
+	const meta = {};
+	const risk = Reflect.get(value, "risk");
+	if (risk !== void 0) {
+		if (!isOperationRisk(risk)) throw new TypeError(`Operation "${name}": meta.risk must be one of ${OPERATION_RISKS.join(", ")}.`);
+		meta.risk = risk;
+	}
+	const effects = Reflect.get(value, "effects");
+	if (effects !== void 0) {
+		if (!Array.isArray(effects) || !effects.every(isOperationEffect) || new Set(effects).size !== effects.length) throw new TypeError(`Operation "${name}": meta.effects must list distinct values of ${OPERATION_EFFECTS.join(", ")}.`);
+		meta.effects = Object.freeze([...effects]);
+	}
+	const title = Reflect.get(value, "title");
+	if (title !== void 0) {
+		if (typeof title !== "string" || title.trim() === "") throw new TypeError(`Operation "${name}": meta.title must be a non-empty string.`);
+		meta.title = title;
+	}
+	return Object.freeze(meta);
+}
+function treeLeaf(keys, name, field, value) {
+	if (!isPermission(value)) throw new TypeError(`Operation "${name}": ${field} must be a permission from the tree.`);
+	if (!keys.has(value.key)) throw new TypeError(`Operation "${name}": ${field} ${value.key} is not a permission of the tree passed to defineOperations.`);
+	return value;
+}
+/**
+* Binds each named operation to a permission of `permissions`. Throws at
+* definition time for a permission or `results` outside the tree, a name that
+* is not 1 to 128 of `A-Z a-z 0-9 _ . -` or repeats another case-insensitively,
+* a `data` that is not a function, or meta outside the closed lists.
+*/
+function defineOperations(permissions, definitions) {
+	const keys = new Map(listPermissions(permissions).map((leaf) => [leaf.key, leaf]));
+	const seen = /* @__PURE__ */ new Map();
+	const out = {};
+	for (const name of Object.keys(definitions)) {
+		if (!NAME.test(name) || isForbiddenKey(name)) throw new TypeError(`Operation name "${name}" must be 1 to 128 of A-Z a-z 0-9 _ . -.`);
+		const folded = name.toLowerCase();
+		const previous = seen.get(folded);
+		if (previous !== void 0) throw new TypeError(`Operation name "${name}" is a duplicate of "${previous}".`);
+		seen.set(folded, name);
+		const definition = definitions[name];
+		if (definition === null || typeof definition !== "object" || Array.isArray(definition)) throw new TypeError(`Operation "${name}" must be an object.`);
+		const permission = treeLeaf(keys, name, "permission", Reflect.get(definition, "permission"));
+		const value = Reflect.get(definition, "data");
+		if (value !== void 0 && typeof value !== "function") throw new TypeError(`Operation "${name}": data must be a function.`);
+		const data = value;
+		const resultsValue = Reflect.get(definition, "results");
+		const results = resultsValue === void 0 ? void 0 : treeLeaf(keys, name, "results", resultsValue);
+		const meta = readMeta(name, Reflect.get(definition, "meta"));
+		out[name] = Object.freeze({
+			name,
+			permission,
+			...data === void 0 ? {} : { data },
+			...results === void 0 ? {} : { results },
+			meta
+		});
+	}
+	return Object.freeze(out);
+}
+//#endregion
+export { isOperationEffect as n, defineOperations as t };

package/dist/orpc/index.d.ts

@@ -1,11 +1,11 @@
-import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
+import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-D-GwfQTc.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
 import { a as OperationInput, t as Operation } from "../operations-Ci_rT6Uo.js";
-import { a as PermDock } from "../permdock-DUWZEOLR.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
 import { n as RevocationFeed } from "../revocations-BaUXHM1N.js";
-import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-Bw-lWqzR.js";
-import { t as ServerAdapterOptions } from "../bind-DjFNX0Pq.js";
-import { t as StreamProtectOptions } from "../stream-BMJg56jU.js";
+import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-3OnXjZ2D.js";
+import { t as ServerAdapterOptions } from "../bind-DR6ku3A9.js";
+import { t as StreamProtectOptions } from "../stream-W2RuUYly.js";
 import { AnySchema, MetaPlugin, Middleware, Procedure, Schema } from "@orpc/server";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/orpc/operations.d.ts

package/dist/orpc/index.js

@@ -1,10 +1,10 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { o as isPermission } from "../permission-registry-B8tYxPIt.js";
 import { o as problemMessage } from "../http-DKLXrFGk.js";
-import { t as problemFromError } from "../map-error-B_f3C5cs.js";
-import { n as attached } from "../bind-BJFeLX1V.js";
+import { t as problemFromError } from "../map-error-BH16Ah8P.js";
+import { n as attached } from "../bind-B4pMH9bm.js";
 import { i as isAsyncIterable, o as reloadAfter } from "../stream-CDvF0sJm.js";
-import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-BOu3FD6X.js";
+import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-KwX_Jcxz.js";
 import { ORPCError, os } from "@orpc/server";
 //#region src/orpc/operations.ts
 const root = os;

package/dist/otel/index.d.ts

@@ -1,6 +1,6 @@
-import { M as PolicyVocabulary } from "../policy-types-IRJVABmm.js";
-import { a as PermDock } from "../permdock-DUWZEOLR.js";
-import { a as OtelOptions, i as OtelApi, n as GEN_AI_TOOL_CALL_ID, o as OtelWrap, r as GEN_AI_TOOL_NAME, s as StructuralLogger, t as GENAI_SEMCONV_PIN } from "../types-Sj1U8HMm.js";
+import { M as PolicyVocabulary } from "../policy-types-D-GwfQTc.js";
+import { a as PermDock } from "../permdock-ffY4CMd9.js";
+import { a as OtelOptions, i as OtelApi, n as GEN_AI_TOOL_CALL_ID, o as OtelWrap, r as GEN_AI_TOOL_NAME, s as StructuralLogger, t as GENAI_SEMCONV_PIN } from "../types-DGf_cpKF.js";
 //#region src/otel/instrument.d.ts
 /**
  * Listens on one instance. Spans carry no duration and no histogram is

package/dist/{output-DhTpe8v1.js → output-BFWLER4r.js}

@@ -1,5 +1,5 @@
 import { s as cliVersion } from "./version-DMQ0dnN5.js";
-import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
+import { t as DOCS_BASE } from "./manifest-wclLWBVH.js";
 //#region src/cli/core/output.ts
 const CLI_RESULT_SCHEMA = "https://permdock.com/schemas/cli-result-v1.json";
 function envelope(input) {

package/dist/{ownership-moSRhxl_.js → ownership-D-mIt-w0.js}

@@ -11,7 +11,7 @@ import { i as qualifySqlTable } from "./sql-0WjxIp9g.js";
 import { a as scopeMembershipTable, i as scopeColumn, s as relatedSql } from "./compile-B_oJqmIg.js";
 import { l as roleColumn } from "./sources-C4vkzZJV.js";
 import { A as quoteQualified, D as qualified, E as helperSchema, L as sqlType, M as textArrayLiteral, O as quoteIdent, R as tenantTypeOf, S as CLAIM, T as declaredArray, _ as subjectClaimJsonSql, b as tenantClaimSql, d as keyTenantSql, f as kindFilterSql, h as roleKindSql, j as quoteTable, k as quoteLiteral, m as memberVia, p as liveSessionSql, s as signedIn, t as CUSTOM_ROLES, u as globalKindFilterSql, v as subjectClaimSql, y as subjectIdSql } from "./shared-DyYVEjKC.js";
-import { $ as graphSqlText, A as claimKeptLines, B as hasCustomRoleChecksFor, F as globalRoleRows, I as membershipRows, L as roleRows, M as memberColumn, N as sourceFilters, P as sourcesKeep, U as storedTenant, X as CLOSURE, Z as graphHelper, _t as activeMembershipSql, c as holderSources, ct as memberIdsHelper, d as sourceRowsSql, f as sourceTransferTriggerSql, g as OWNERSHIP, gt as activeInstancesSql, h as ASSIGNMENTS, ht as scopeTable, it as linkHelper, j as disabledColumn, l as pairsSql, m as transferTriggerSql, mt as scopeSources, nt as inheritedRowsHelper, p as holdersTriggerSql, pt as restrictedHelper, st as memberForTable, u as sourceHoldersTriggerSql, ut as memberRoleOf, yt as activeUserSql } from "./tables-BsGE6HBR.js";
+import { $ as graphSqlText, A as claimKeptLines, B as hasCustomRoleChecksFor, F as globalRoleRows, I as membershipRows, L as roleRows, M as memberColumn, N as sourceFilters, P as sourcesKeep, U as storedTenant, X as CLOSURE, Z as graphHelper, _t as activeMembershipSql, c as holderSources, ct as memberIdsHelper, d as sourceRowsSql, f as sourceTransferTriggerSql, g as OWNERSHIP, gt as activeInstancesSql, h as ASSIGNMENTS, ht as scopeTable, it as linkHelper, j as disabledColumn, l as pairsSql, m as transferTriggerSql, mt as scopeSources, nt as inheritedRowsHelper, p as holdersTriggerSql, pt as restrictedHelper, st as memberForTable, u as sourceHoldersTriggerSql, ut as memberRoleOf, yt as activeUserSql } from "./tables-BfOk0ymL.js";
 //#region src/cli/sql/conditions.ts
 const MAX_CLAIM_DEPTH = 8;
 /**

package/dist/{parse-local-manifest-DEiCF4ah.js → parse-local-manifest-CxcSMQgl.js}

@@ -54,8 +54,8 @@ function isMembershipRows(value) {
 }
 function isRows(value) {
 	if (!isRecord(value)) return false;
-	const { memberships, roles, customRoles } = value;
-	return Array.isArray(memberships) && memberships.every(isMembershipRows) && (roles === void 0 || isRecord(roles) && isText(roles["table"]) && isText(roles["user"]) && Array.isArray(roles["roles"]) && roles["roles"].length > 0 && roles["roles"].every(isColumn)) && (customRoles === void 0 || isRecord(customRoles) && isText(customRoles["permissions"]) && isText(customRoles["includes"]));
+	const { memberships, roles, customRoles, version } = value;
+	return Array.isArray(memberships) && memberships.every(isMembershipRows) && (roles === void 0 || isRecord(roles) && isText(roles["table"]) && isText(roles["user"]) && Array.isArray(roles["roles"]) && roles["roles"].length > 0 && roles["roles"].every(isColumn)) && (customRoles === void 0 || isRecord(customRoles) && isText(customRoles["permissions"]) && isText(customRoles["includes"])) && (version === void 0 || isRecord(version) && isText(version["table"]) && isText(version["user"]) && isText(version["version"]));
 }
 /**
 * Whether `value` has the shape `localSnapshotManifest(policy)` writes, with no

package/dist/{parse-local-manifest-BgTYdR3q.d.ts → parse-local-manifest-DvjTQNuO.d.ts}

@@ -1,4 +1,4 @@
-import { Zt as LocalSnapshotManifest } from "./policy-types-IRJVABmm.js";
+import { Zt as LocalSnapshotManifest } from "./policy-types-D-GwfQTc.js";
 //#region src/core/parse-local-manifest.d.ts
 /**
  * Whether `value` has the shape `localSnapshotManifest(policy)` writes, with no

package/dist/pdp/index.d.ts

@@ -1,6 +1,6 @@
-import { E as Policy, J as DecisionProvider, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
-import { o as PermDockOptions } from "../permdock-DUWZEOLR.js";
-import { a as RelationMap, c as RemotePdpEndpoints, d as SpiceDbCheck, f as SpiceDbOptions, i as PdpPermDock, l as RemotePdpMapping, n as OpenFgaTuple, o as RemotePdpAuth, r as PdpFactory, s as RemotePdpCache, t as OpenFgaOptions, u as RemotePdpOptions } from "../types-B3BOcI0J.js";
+import { E as Policy, J as DecisionProvider, M as PolicyVocabulary, _r as Principal } from "../policy-types-D-GwfQTc.js";
+import { o as PermDockOptions } from "../permdock-ffY4CMd9.js";
+import { a as RelationMap, c as RemotePdpEndpoints, d as SpiceDbCheck, f as SpiceDbOptions, i as PdpPermDock, l as RemotePdpMapping, n as OpenFgaTuple, o as RemotePdpAuth, r as PdpFactory, s as RemotePdpCache, t as OpenFgaOptions, u as RemotePdpOptions } from "../types-B8qUkGja.js";
 //#region src/pdp/create.d.ts
 /**
  * The PDP-aware instance, built synchronously like core `getPermDockSync`; use

package/dist/pdp/index.js

@@ -6,7 +6,7 @@ import { n as internalsOf, t as attachInternals } from "../internals-B3IgHrvo.js
 import { a as getResource, c as listPermissions } from "../permission-registry-B8tYxPIt.js";
 import { n as toWireDelegation } from "../wire-delegation-Cv3W2eaM.js";
 import { r as decideAllAsync, t as canAllAsync } from "../checks-fyDOhcz0.js";
-import { n as getPermDockSync$1, t as getPermDock$1 } from "../permdock-DdzMv5-F.js";
+import { n as getPermDockSync$1, t as getPermDock$1 } from "../permdock-D-_WrdKu.js";
 import { a as postJson, c as ttlMs, i as joinUrl, n as denied, o as resourceIdOf, r as granted, s as ttlCache, t as cacheKey } from "../shared-BRmCJxDK.js";
 //#region src/pdp/create.ts
 function withoutProviders(policy) {

package/dist/{permdock-DdzMv5-F.js → permdock-D-_WrdKu.js}

@@ -10,10 +10,10 @@ import { d as scopeList, o as normalizeMemberships, p as tenantOf } from "./scop
 import { o as pickVisible, s as sanitizeContext } from "./validity-Buc7w8E9.js";
 import { t as byCodePoint } from "./compare-DTfyUunF.js";
 import { c as nowSeconds, d as resolveActiveTenant, m as tenantsOf, p as scopeField, t as heldRoleNamesIn, u as relatesTo } from "./tenancy-DvOHHk3-.js";
-import { d as policyX } from "./policy-DxQyHKPB.js";
+import { d as policyX } from "./policy-cV_wwPb8.js";
 import { r as isSubject, t as anonymousSubject } from "./subject-C7RddW0G.js";
-import { D as emptyListeners, E as emitSafe, N as contactMemberships, O as finish, P as isContact, i as customRolesFor, o as roleSourceFor, r as assignableNamesFor, s as sourceName, t as evaluate, u as customGrantsFor, w as unknownLevelsFor } from "./evaluate-CsjXeLRo.js";
-import { c as heldRoleNames, d as audiencesOf, g as asMembershipSource, i as assignableIn, l as roleLeaf, o as collectSnapshotGrants, s as whereGrant, t as snapshotOf, u as applyRoleKinds } from "./instance-snapshot-BgOGtyCy.js";
+import { D as emptyListeners, E as emitSafe, N as contactMemberships, O as finish, P as isContact, i as customRolesFor, o as roleSourceFor, r as assignableNamesFor, s as sourceName, t as evaluate, u as customGrantsFor, w as unknownLevelsFor } from "./evaluate-Czbj7thS.js";
+import { c as heldRoleNames, d as audiencesOf, g as asMembershipSource, i as assignableIn, l as roleLeaf, o as collectSnapshotGrants, s as whereGrant, t as snapshotOf, u as applyRoleKinds } from "./instance-snapshot-BWa71my8.js";
 import { r as relationReader, t as pendingRelations } from "./relations-BxvRvDHK.js";
 import { i as snapshotGrant } from "./snapshot-DN_8J27z.js";
 import { a as decideForTarget, i as permittedIds, o as deniedFor, r as mayUse, s as signSnapshot, t as whereFromGrants } from "./where-scope-BKrqUDVk.js";
@@ -139,7 +139,6 @@ function staleness(policy, principal, source, given, auth) {
 /** Options that shape an instance by value; the rest by identity. */
 const DATA_KEYS = /* @__PURE__ */ new Set([
 	"tenant",
-	"intent",
 	"actor",
 	"delegation",
 	"session",
@@ -178,12 +177,12 @@ async function cacheKey(policy, user, options) {
 		return;
 	}
 	if (!isVersion(version)) return;
-	const data = {};
+	const data = { intent };
 	const owners = [policy];
 	for (const name of Object.keys(options).toSorted()) {
 		const value = Reflect.get(options, name);
 		if (DATA_KEYS.has(name)) data[name] = value;
-		else if (name !== "version") owners.push(value);
+		else if (name !== "version" && name !== "intent") owners.push(value);
 	}
 	return {
 		key: compact({
@@ -203,18 +202,29 @@ async function cacheKey(policy, user, options) {
 		}
 	};
 }
+function cachedFactory(factory, instances) {
+	return (subject) => {
+		const source = factory(subject);
+		const principal = subject.principal?.id;
+		return source === void 0 || principal === void 0 ? source : instances.customRoles(source, {
+			owner: factory,
+			principal
+		});
+	};
+}
 function cachedSources(options, instances) {
 	const { customRoles, entitlements } = options;
 	return {
 		...options,
-		...customRoles === void 0 || typeof customRoles === "function" ? {} : { customRoles: instances.customRoles(customRoles) },
+		...customRoles === void 0 ? {} : { customRoles: typeof customRoles === "function" ? cachedFactory(customRoles, instances) : instances.customRoles(customRoles) },
 		...entitlements === void 0 ? {} : { entitlements: instances.entitlements(entitlements) }
 	};
 }
 /**
 * `create` through `instances`: a subject whose authorization version is known
 * gets the instance built for it at that version, with the cache's custom-role
-* and entitlement memos; any other subject gets a new one.
+* and entitlement memos; a custom-role factory's answers are kept per factory
+* and principal. Any other subject gets a new one.
 */
 async function cachedInstance(policy, user, options, instances, create) {
 	const cached = await cacheKey(policy, user, options);

package/dist/{permdock-DUWZEOLR.d.ts → permdock-ffY4CMd9.d.ts}

@@ -1,9 +1,9 @@
-import { $t as Snapshot, E as Policy, K as CustomRoleSource, Kt as Instant, M as PolicyVocabulary, Qn as ExplainedDecision, Sr as AdapterId, X as EntitlementSource, Y as DecisionSink, Z as Intent, _r as Principal, bn as Scope, cn as DecisionEvent, ct as SettingsSource, er as LimitDetail, gr as Membership, gt as TokenSigner, nr as Obligation, pr as Delegation, q as CustomRoleSourceFactory, qn as Decision, rr as Quota, rt as MembershipSource, sr as Actor, st as RelationSource, tt as LimitStore, v as GrantLimit, wr as Condition, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { $t as Snapshot, E as Policy, K as CustomRoleSource, Kt as Instant, M as PolicyVocabulary, Qn as ExplainedDecision, Sr as AdapterId, X as EntitlementSource, Y as DecisionSink, Z as Intent, _r as Principal, bn as Scope, cn as DecisionEvent, ct as SettingsSource, er as LimitDetail, gr as Membership, gt as TokenSigner, nr as Obligation, pr as Delegation, q as CustomRoleSourceFactory, qn as Decision, rr as Quota, rt as MembershipSource, sr as Actor, st as RelationSource, tt as LimitStore, v as GrantLimit, wr as Condition, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { D as RowOf, M as AppData, b as ResourceNode, u as Permission } from "./permission-types-CAY-GU7e.js";
 import { a as RoleTree, n as PlanTree, r as Role } from "./vocabulary-DEJ5j4mR.js";
 import { t as Operation } from "./operations-Ci_rT6Uo.js";
-import { t as ApprovalPolicies } from "./approval-policies-9VagPixq.js";
-import { a as HostedPolicies } from "./hosted-DxRLLiFU.js";
+import { t as ApprovalPolicies } from "./approval-policies-oNnckT12.js";
+import { a as HostedPolicies } from "./hosted-BFNXwcjd.js";
 //#region src/core/checks.d.ts
 /**
  * One check of `canAll` or `decideAll`: a permission alone, or with the row it
@@ -55,14 +55,27 @@ type InstanceCache = {
    * rejected build is not stored.
    */
   instance: <T>(key: InstanceCacheKey, owners: readonly unknown[], build: () => Promise<T>) => Promise<T>;
-  /** `source` with every answer kept for `maxAgeMs`, keyed by its arguments. */
-  customRoles: (source: CustomRoleSource) => CustomRoleSource;
+  /**
+   * `source` with every answer kept for `maxAgeMs`, keyed by its arguments.
+   * With `of`, the answers are keyed by `of.owner` and `of.principal` instead
+   * of `source`, so the new source a `CustomRoleSourceFactory` returns per
+   * subject reuses them, and `evict(of.principal)` drops them.
+   */
+  customRoles: (source: CustomRoleSource, of?: CustomRoleOwner) => CustomRoleSource;
   /** `source` with every answer kept for `maxAgeMs`, per principal and tenant. */
   entitlements: (source: EntitlementSource) => EntitlementSource;
-  /** Drops `principal`'s instances and entitlements. */
+  /**
+   * Drops `principal`'s instances, entitlements and the answers of custom-role
+   * sources cached for it.
+   */
   evict: (principal: string) => void;
   stats: () => InstanceCacheStats;
 };
+/** The factory and principal a per-subject custom-role source belongs to. */
+type CustomRoleOwner = {
+  readonly owner: object;
+  readonly principal: string;
+};
 type InstanceCacheOptions = {
   /** Entries kept; the least recently used goes first. Default 10,000. */
   readonly maxEntries?: number;
@@ -616,4 +629,4 @@ declare function getPermDockSync<TUser, TPrincipal extends Principal = Principal
  */
 declare function getPermDock<TUser, TPrincipal extends Principal = Principal, V extends PolicyVocabulary = PolicyVocabulary>(policy: Policy<TUser, TPrincipal, V>, user: TUser | Subject | null, options?: PermDockOptions): Promise<PermDock<V>>;
 //#endregion
-export { InstanceCache as C, instanceCache as D, InstanceCacheStats as E, PermissionCheck as O, memoryLimitStore as S, InstanceCacheOptions as T, PrincipalSource as _, PermDock as a, Limits as b, RowPair as c, UncheckedData as d, WhereResult as f, PrincipalIdentityLink as g, PrincipalIdentity as h, LoadedRows as i, PermissionState as k, SimulateOptions as l, getPermDockSync as m, DecideOptions as n, PermDockOptions as o, getPermDock as p, DeriveOptions as r, RowData as s, DecideIdsOptions as t, SnapshotOptions as u, memoryPrincipalSource as v, InstanceCacheKey as w, limits as x, PermittedIdsOptions as y };
+export { PermissionState as A, CustomRoleOwner as C, InstanceCacheStats as D, InstanceCacheOptions as E, instanceCache as O, memoryLimitStore as S, InstanceCacheKey as T, PrincipalSource as _, PermDock as a, Limits as b, RowPair as c, UncheckedData as d, WhereResult as f, PrincipalIdentityLink as g, PrincipalIdentity as h, LoadedRows as i, PermissionCheck as k, SimulateOptions as l, getPermDockSync as m, DecideOptions as n, PermDockOptions as o, getPermDock as p, DeriveOptions as r, RowData as s, DecideIdsOptions as t, SnapshotOptions as u, memoryPrincipalSource as v, InstanceCache as w, limits as x, PermittedIdsOptions as y };

package/dist/{permissions-CvpPtz5O.js → permissions-B3ggI88M.js}

@@ -1,7 +1,7 @@
-import { c as crud } from "./src-nYNBfmgq.js";
+import { c as crud } from "./src-Brzq_0in.js";
 import { v as resource } from "./permission-registry-B8tYxPIt.js";
 import { f as definePlans, p as defineRoles } from "./grantee-Dke-9rd1.js";
-import { t as definePermissions } from "./permissions-CVXmRILq.js";
+import { t as definePermissions } from "./permissions-BaoLxy66.js";
 //#region src/testing/saas/schema.ts
 function accepts(kind, value) {
 	switch (kind) {

package/dist/{permissions-CVXmRILq.js → permissions-BaoLxy66.js}

@@ -1,18 +1,6 @@
 import { n as freezeDeep } from "./freeze-jjan0lCv.js";
 import { d as attachRegistry, p as walk, r as formerByKey, t as assertKeys } from "./permission-registry-B8tYxPIt.js";
 import { r as assertGraphTargets } from "./resource-relations-8-pCScBO.js";
-//#region src/core/operation-risks.ts
-/** Every `meta.risk` level, lowest first. */
-const OPERATION_RISKS = Object.freeze([
-	"low",
-	"medium",
-	"high",
-	"critical"
-]);
-function isOperationRisk(value) {
-	return OPERATION_RISKS.some((risk) => risk === value);
-}
-//#endregion
 //#region src/core/permissions.ts
 function definePermissions(input, options) {
 	const registry = /* @__PURE__ */ new Map();
@@ -27,4 +15,4 @@ function definePermissions(input, options) {
 	return freezeDeep(attachRegistry(tree, registry, leaves));
 }
 //#endregion
-export { OPERATION_RISKS as n, isOperationRisk as r, definePermissions as t };
+export { definePermissions as t };

package/dist/{policy-CTNl7pvN.d.ts → policy-BtKSApSt.d.ts}

@@ -1,4 +1,4 @@
-import { E as Policy, _r as Principal, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { E as Policy, _r as Principal, yr as Subject } from "./policy-types-D-GwfQTc.js";
 import { c as saasPlans, l as saasRoles, s as saasPermissions } from "./permissions-Bx6UI8n1.js";
 //#region src/testing/saas/policy.d.ts
 /** Daily API-key quota per subject; the bucket should be per tenant too. */

package/dist/{policy-DxQyHKPB.js → policy-cV_wwPb8.js}

@@ -1,13 +1,13 @@
 import { t as compact } from "./compact-CAf557ZB.js";
 import { n as freezeDeep } from "./freeze-jjan0lCv.js";
-import { c as withGrantSchema, i as completeGrant, l as normalizeWhere, o as flattenGrants, s as flattenPermissions } from "./role-builder-BrmOcXch.js";
+import { c as withGrantSchema, i as completeGrant, l as normalizeWhere, o as flattenGrants, s as flattenPermissions } from "./role-builder-CMW4wWzn.js";
 import { c as listPermissions, i as getRegistry, m as annotationsFor, n as findPermission, s as isRegistryTree } from "./permission-registry-B8tYxPIt.js";
 import { d as isSelfParented, l as isFieldRelation } from "./resource-relations-8-pCScBO.js";
 import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
 import { r as sha256Digest } from "./sha256-C-4WXKIu.js";
 import { n as defineScopes, s as resolveScope } from "./scopes-BSdYaGHs.js";
 import { o as flattenGrantee, r as asGrantee, v as listRoles } from "./grantee-Dke-9rd1.js";
-import { i as assertApprovalVersions, r as assertApprovalRelations } from "./approval-normalize-4KxMRdJC.js";
+import { i as assertApprovalVersions, r as assertApprovalRelations } from "./approval-normalize-CUjgSsOl.js";
 import { n as normalizeValidity } from "./validity-Buc7w8E9.js";
 import { t as byCodePoint } from "./compare-DTfyUunF.js";
 import { a as relationStart, i as relationHops, n as isGraphRelation, t as inheritCondition } from "./grantee-conditions-DX4K_gGI.js";

package/dist/{policy-from-catalog-DVa1faOr.js → policy-from-catalog-B68hGC0S.js}

@@ -1,18 +1,18 @@
 import { r as isRecord, t as compact } from "./compact-CAf557ZB.js";
 import { n as freezeDeep } from "./freeze-jjan0lCv.js";
-import { l as normalizeWhere } from "./role-builder-BrmOcXch.js";
+import { l as normalizeWhere } from "./role-builder-CMW4wWzn.js";
 import { n as PermDockValidationError } from "./validation-error-CYg2kJEw.js";
 import { i as getRegistry, n as findPermission, v as resource } from "./permission-registry-B8tYxPIt.js";
 import { n as defineScopes } from "./scopes-BSdYaGHs.js";
 import { f as definePlans, p as defineRoles } from "./grantee-Dke-9rd1.js";
-import { o as readWireApproval } from "./approval-normalize-4KxMRdJC.js";
+import { o as readWireApproval } from "./approval-normalize-CUjgSsOl.js";
 import { r as readWireValidity } from "./validity-Buc7w8E9.js";
-import { a as indexPolicy, f as normalizeDelegation } from "./policy-DxQyHKPB.js";
-import { o as isPortableCondition } from "./hosted-tPZnyjQS.js";
-import { t as definePermissions } from "./permissions-CVXmRILq.js";
+import { a as indexPolicy, f as normalizeDelegation } from "./policy-cV_wwPb8.js";
+import { o as isPortableCondition } from "./hosted-waouw2V-.js";
+import { t as definePermissions } from "./permissions-BaoLxy66.js";
 import { n as copyJson, t as checkSchema } from "./json-schema-BPGa-RjQ.js";
 import { t as parseCatalog } from "./parse-UTC-sDrt.js";
-import { n as parsePushedPolicy } from "./pushed-policy-DMXAOmEW.js";
+import { n as parsePushedPolicy } from "./pushed-policy-BecMsTtM.js";
 //#region src/catalog/json-schema-validator.ts
 const ANNOTATIONS = /* @__PURE__ */ new Set([
 	"$schema",

package/dist/{policy-types-IRJVABmm.d.ts → policy-types-D-GwfQTc.d.ts}

@@ -1396,6 +1396,15 @@ type LocalSnapshotRows = {
     readonly permissions: string;
     readonly includes: string;
   };
+  /**
+   * The user's authorization version row (`permdock_authz_version`), the value
+   * the token hook stamps `authz_ver` from.
+   */
+  readonly version?: {
+    readonly table: string;
+    readonly user: string;
+    readonly version: string;
+  };
 };
 /**
  * Grants a custom role entry resolves to, held by a placeholder role the client

package/dist/{postgrest-B_cEDd4e.d.ts → postgrest-D84p5dbA.d.ts}

@@ -1,4 +1,4 @@
-import { E as Policy, K as CustomRoleSource, _r as Principal, dr as CustomRole, gr as Membership, nt as MemberEntry, rt as MembershipSource, ut as SourceCall, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { E as Policy, K as CustomRoleSource, _r as Principal, dr as CustomRole, gr as Membership, nt as MemberEntry, rt as MembershipSource, ut as SourceCall, yr as Subject } from "./policy-types-D-GwfQTc.js";
 //#region src/supabase/postgrest.d.ts
 /**
  * What a supabase-js `rpc` call resolves to: `data` or an `error` with a