permdock 0.3.1 → 0.5.0

package/dist/claude-agent/index.js

@@ -1,11 +1,10 @@
-import { t as compact } from "../compact-y6vfu2_f.js";
-import { t as instanceOptions } from "../instance-options-Dhhcnm3y.js";
-import { n as createAgentKernel } from "../kernel-_RRHmnMY.js";
+import { r as isRecord, t as compact } from "../compact-CAf557ZB.js";
+import { c as withApp } from "../permdock-B9JxkBwC.js";
+import { t as agentRuntime } from "../create-C3b4B5eF.js";
 //#region src/claude-agent/create.ts
 const MCP_PREFIX = "mcp__";
 function asInput(input) {
-	if (input !== null && typeof input === "object" && !Array.isArray(input)) return input;
-	return {};
+	return isRecord(input) ? input : {};
 }
 function untrustedServer(context, sources) {
 	if (!context.toolName.startsWith(MCP_PREFIX)) return;
@@ -28,50 +27,47 @@ function toResult(verdict, input) {
 		message: `${verdict.summary} Approval ${verdict.token} is pending; retry the call once it is approved.`
 	};
 }
-function createPermDock(policy, options) {
+function createPermDock(policy, given) {
+	const options = withApp(policy, given);
 	const sources = options.mcpSources ?? ["sdk"];
-	const kernel = createAgentKernel(policy, {
-		...compact({
-			actor: options.actor,
-			delegation: options.delegation,
-			tenant: options.tenant,
-			store: options.store
-		}),
-		...instanceOptions(options),
-		subject: options.subject,
-		tools: options.tools,
-		adapter: "claude-agent"
-	});
+	const { agent, kernel } = agentRuntime(policy, options, "claude-agent");
+	/** `null`: an unmapped tool under `unmapped: 'allow'`, which PermDock does not decide. */
 	const decide = async (context, input) => {
 		const untrusted = untrustedServer(context, sources);
 		if (untrusted !== void 0) return {
 			behavior: "deny",
 			message: untrusted
 		};
+		if (options.unmapped === "allow" && !Object.hasOwn(options.operations, context.toolName)) return null;
 		return toResult(await kernel.decideTool(context.toolName, input, context), input);
 	};
-	const canUseTool = (toolName, input, sdkOptions = {}) => decide(compact({
+	const canUseTool = async (toolName, input, sdkOptions = {}) => await decide(compact({
 		toolName,
 		mcpServer: sdkOptions.mcpServer,
 		agentId: sdkOptions.agentID
-	}), input);
+	}), input) ?? {
+		behavior: "allow",
+		updatedInput: input
+	};
 	const permissionRequestHook = async (input) => {
 		if (input.hook_event_name !== "PermissionRequest" || typeof input.tool_name !== "string") return {};
+		const decision = await decide(compact({
+			toolName: input.tool_name,
+			mcpServer: input.mcp_server,
+			sessionId: input.session_id,
+			agentId: input.agent_id
+		}), input.tool_input);
+		if (decision === null) return {};
 		return { hookSpecificOutput: {
 			hookEventName: "PermissionRequest",
-			decision: await decide(compact({
-				toolName: input.tool_name,
-				mcpServer: input.mcp_server,
-				sessionId: input.session_id,
-				agentId: input.agent_id
-			}), input.tool_input)
+			decision
 		} };
 	};
-	return {
+	return Object.freeze({
+		...agent,
 		canUseTool,
-		permissionRequestHook,
-		permdock: (context) => kernel.instance(context)
-	};
+		permissionRequestHook
+	});
 }
 //#endregion
 export { createPermDock };

package/dist/clerk/index.d.ts

@@ -1,6 +1,7 @@
-import { Nr as Principal, Pr as Subject, xt as RoleSource } from "../policy-IB6yxpC3.js";
-import { f as Permission } from "../permissions-DttnqqxC.js";
-import { s as RemotePdpCache } from "../types-DxiCGmmd.js";
+import { W as CustomRoleSource, ir as Subject, rr as Principal } from "../policy-types-DzwivBgR.js";
+import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
+import { s as RemotePdpCache } from "../types-ClZaWzfb.js";
+import { t as ClaimsMap } from "../claims-map-Ca-QX8C6.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/clerk/types.d.ts
 type ClerkPrincipal = Principal & {
@@ -30,14 +31,14 @@ type ClerkBackend = {
     } | readonly ClerkMembershipListItem[]>;
   };
 };
-type ClerkGlobalRoles = string | ((claims: Readonly<Record<string, unknown>>) => readonly string[]);
 type ClerkSubjectOptions = {
   readonly memberships?: "active" | "all";
   readonly backend?: ClerkBackend;
-  readonly customRoles?: RoleSource;
+  readonly customRoles?: CustomRoleSource;
   readonly permissions?: Readonly<Record<string, Permission>>;
   readonly schema?: StandardSchemaV1;
-  readonly globalRoles?: ClerkGlobalRoles;
+  /** Where the session token carries platform roles (`claims.roles`): a path such as `publicMetadata.staff`, or a function. Organization roles come from the `o` claim. */
+  readonly claims?: Pick<ClaimsMap, "roles">;
   readonly features?: Readonly<Record<string, string>>;
   readonly declared?: readonly string[];
 };
@@ -60,6 +61,6 @@ export declare function subjectFromClerk(authObject: unknown, options?: ClerkSub
  * A resolver that keeps each user's `memberships: 'all'` list for
  * `cache.ttl` (at most 30 seconds), so a removed membership grants until then.
  */
-export declare function createClerkSubjectResolver(options?: ClerkSubjectResolverOptions): (authObject: unknown) => Promise<Subject<ClerkPrincipal>>;
+export declare function clerkSubjectResolver(options?: ClerkSubjectResolverOptions): (authObject: unknown) => Promise<Subject<ClerkPrincipal>>;
 //#endregion
-export type { ClerkAuthObject, ClerkBackend, ClerkGlobalRoles, ClerkMembershipListItem, ClerkPrincipal, ClerkSubjectOptions, ClerkSubjectResolverOptions };
+export type { ClerkAuthObject, ClerkBackend, ClerkMembershipListItem, ClerkPrincipal, ClerkSubjectOptions, ClerkSubjectResolverOptions };

package/dist/clerk/index.js

@@ -1,36 +1,17 @@
-import { t as compact } from "../compact-y6vfu2_f.js";
+import { i as omitKeys, r as isRecord, t as compact } from "../compact-CAf557ZB.js";
 import { n as freezeDeep } from "../freeze-CrU8nQeX.js";
-import { t as ignoreRejection } from "../thenable-okc2xDsj.js";
-import { t as anonymousSubject } from "../subject-C6dLxqHU.js";
-import { c as ttlMs, s as ttlCache } from "../shared-DRu8VFVM.js";
+import { r as validateRecord } from "../thenable-yD7SabqG.js";
+import { t as anonymousSubject } from "../subject-BGoM5o8B.js";
+import { t as readClaim } from "../claims-map-7oQ3ue4X.js";
+import { c as ttlMs, s as ttlCache } from "../shared-DvvFzYXe.js";
 //#region src/clerk/subject.ts
-function isRecord(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value);
-}
 function asRoles(value) {
 	if (typeof value === "string") return value === "" ? [] : [value];
 	if (!Array.isArray(value)) return [];
 	return value.filter((item) => typeof item === "string");
 }
-function readPath(record, path) {
-	let current = record;
-	for (const part of path.split(".")) {
-		if (!isRecord(current) || !Object.hasOwn(current, part)) return;
-		current = current[part];
-	}
-	return current;
-}
-function validateClaims(extra, schema) {
-	const result = schema["~standard"].validate(extra);
-	if (result instanceof Promise) {
-		ignoreRejection(result);
-		return;
-	}
-	if ("issues" in result && result.issues !== void 0) return;
-	const value = result.value;
-	return isRecord(value) ? value : void 0;
-}
-const REGISTERED_CLAIMS = /* @__PURE__ */ new Set([
+/** Registered claims plus `unsafeMetadata`, which the user can edit. */
+const NOT_EXTRA = /* @__PURE__ */ new Set([.../* @__PURE__ */ new Set([
 	"iss",
 	"sub",
 	"aud",
@@ -47,14 +28,9 @@ const REGISTERED_CLAIMS = /* @__PURE__ */ new Set([
 	"fea",
 	"o",
 	"v"
-]);
+]), "unsafeMetadata"]);
 function extraClaims(claims) {
-	const extra = {};
-	for (const [key, value] of Object.entries(claims)) {
-		if (REGISTERED_CLAIMS.has(key) || key === "unsafeMetadata") continue;
-		extra[key] = value;
-	}
-	return extra;
+	return omitKeys(claims, NOT_EXTRA);
 }
 /**
 * Plan slugs from `pla`, split by owner: `o:` plans belong to the session's
@@ -105,14 +81,8 @@ function featureRoles(fea, map) {
 		sources
 	};
 }
-function globalRolesFrom(claims, option) {
-	if (option === void 0) return [];
-	if (typeof option === "function") try {
-		return asRoles(option(claims));
-	} catch {
-		return [];
-	}
-	return asRoles(readPath(claims, option));
+function globalRolesFrom(claims, path) {
+	return path === void 0 ? [] : asRoles(readClaim(claims, path));
 }
 function splitList(value) {
 	return typeof value === "string" ? value.split(",").map((item) => item.trim()).filter((item) => item !== "") : [];
@@ -231,7 +201,7 @@ function subjectFromClerk(authObject, options = {}) {
 * A resolver that keeps each user's `memberships: 'all'` list for
 * `cache.ttl` (at most 30 seconds), so a removed membership grants until then.
 */
-function createClerkSubjectResolver(options = {}) {
+function clerkSubjectResolver(options = {}) {
 	const { cache, ...rest } = options;
 	const lists = ttlCache(ttlMs(cache));
 	const load = async (backend, userId) => {
@@ -273,8 +243,8 @@ async function fromClerk(authObject, options, loadMemberships) {
 			return true;
 		})];
 		let claims = extraClaims(mapped.claims);
-		if (options.schema !== void 0) claims = validateClaims(claims, options.schema) ?? {};
-		const global = [...globalRolesFrom(mapped.claims, options.globalRoles), ...features.user];
+		if (options.schema !== void 0) claims = validateRecord(options.schema, claims) ?? {};
+		const global = [...globalRolesFrom(mapped.claims, options.claims?.roles), ...features.user];
 		const exp = mapped.claims["exp"];
 		const principal = compact({
 			id: mapped.id,
@@ -298,4 +268,4 @@ async function fromClerk(authObject, options, loadMemberships) {
 	}
 }
 //#endregion
-export { createClerkSubjectResolver, subjectFromClerk };
+export { clerkSubjectResolver, subjectFromClerk };

package/dist/cli/bin.js

@@ -1,20 +1,39 @@
 #!/usr/bin/env node
-import { t as run } from "../run-BWc9qqvE.js";
-import { n as streamHasColors } from "../style-CTm1AXDT.js";
+import module from "node:module";
+import { text } from "node:stream/consumers";
 //#region src/cli/bin.ts
-const result = await run(process.argv.slice(2), {
-	cwd: process.cwd(),
-	io: {
-		env: process.env,
-		stdout: (text) => {
-			process.stdout.write(text.endsWith("\n") ? text : `${text}\n`);
-		},
-		stderr: (text) => {
-			process.stderr.write(text.endsWith("\n") ? text : `${text}\n`);
-		},
-		color: streamHasColors(process.stdout),
-		interactive: process.stdin.isTTY === true && process.stdout.isTTY === true && process.env["CI"] === void 0
-	}
-});
-process.exitCode ??= result.code;
+module.enableCompileCache?.();
+const argv = process.argv.slice(2);
+if (argv.length === 1 && (argv[0] === "--version" || argv[0] === "-v")) {
+	const { cliVersion } = await import("../version-DXkYUISx.js");
+	process.stdout.write(`${cliVersion()}\n`);
+} else {
+	const [{ isCi }, { trapSignals }, { run }, { streamHasColors }] = await Promise.all([
+		import("../env-DJZrPjRi.js"),
+		import("../signals-D3NcTKUS.js"),
+		import("../run-CNsApDpd.js"),
+		import("../style-DiKWnAvn.js")
+	]);
+	const signals = trapSignals();
+	const result = await run(argv, {
+		cwd: process.cwd(),
+		io: {
+			env: process.env,
+			signal: signals.signal,
+			stdout: (chunk) => {
+				process.stdout.write(chunk);
+			},
+			stderr: (chunk) => {
+				process.stderr.write(chunk);
+			},
+			color: streamHasColors(process.stdout),
+			errColor: streamHasColors(process.stderr),
+			stdoutIsTty: process.stdout.isTTY === true,
+			stderrIsTty: process.stderr.isTTY === true,
+			readStdin: () => text(process.stdin),
+			interactive: process.stdin.isTTY === true && process.stdout.isTTY === true && !isCi(process.env)
+		}
+	});
+	process.exitCode ??= result.code;
+}
 //#endregion

package/dist/cli/index.d.ts

@@ -1,5 +1,6 @@
-import { a as CatalogDocument, c as CatalogResource, d as CatalogSupportAccess, f as CatalogUsage, l as CatalogRole, n as CatalogApproval, r as CatalogBreakGlass, s as CatalogPermission, t as CatalogActivation, u as CatalogScope } from "../types-Dnemwd77.js";
-import { _ as RunResult, c as RlsConfig, d as RlsMembershipTable, f as RlsMemberships, g as RlsTarget, h as RlsSuspension, i as PermDockConfig, l as RlsDialect, m as RlsSuspendedScope, n as CliIo, o as RlsActiveRow, p as RlsSuspendedMembership, r as CollectConfig, s as RlsApiKeys, t as CatalogConfig, u as RlsFunctionMapping } from "../types-DbjRN55U.js";
+import { a as CatalogDocument, d as CatalogRole, f as CatalogScope, l as CatalogPermission, m as CatalogUsage, n as CatalogApproval, p as CatalogSupportAccess, r as CatalogBreakGlass, t as CatalogActivation, u as CatalogResource } from "../types-CZTnPFzM.js";
+import { a as pushedPolicy, i as parsePushedPolicy, n as PushedGrant, r as PushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-BImMTTIM.js";
+import { _ as RunResult, c as RlsConfig, d as RlsMembershipTable, f as RlsMemberships, g as RlsTarget, h as RlsSuspension, i as PermDockConfig, l as RlsDialect, m as RlsSuspendedScope, n as CliIo, o as RlsActiveRow, p as RlsSuspendedMembership, r as CollectConfig, s as RlsApiKeys, t as CatalogConfig, u as RlsFunctionMapping } from "../types-5Ut_pbKy.js";
 //#region src/cli/catalog-path.d.ts
 /**
  * The absolute path `permdock collect` writes the catalog to: `collect.out`,
@@ -8,10 +9,10 @@ import { _ as RunResult, c as RlsConfig, d as RlsMembershipTable, f as RlsMember
  */
 export declare function catalogPath(config: PermDockConfig, cwd: string, out?: string): string;
 //#endregion
-//#region src/cli/config.d.ts
+//#region src/cli/project/config.d.ts
 export declare function defineConfig<T extends PermDockConfig>(config: T): T;
 //#endregion
-//#region src/cli/markers.d.ts
+//#region src/cli/sql/markers.d.ts
 /** The first line of a hook migration `permdock supabase hook generate` wrote. */
 type SupabaseHookMarker = {
   /** The marker's major: `1` for `-- permdock:hook v1`. */
@@ -37,10 +38,23 @@ export declare function parseHookMarker(sql: string): SupabaseHookMarker | undef
  */
 export declare function parseGrantsMarker(sql: string): SupabaseGrantsMarker | undefined;
 //#endregion
-//#region src/cli/run.d.ts
+//#region src/cli/token-schemas.d.ts
+/**
+ * `schemas/run-v1.json`: the claims of a `vnd.permdock.run+jwt`, as
+ * `signRunTicket` writes them and `parseRunTicket` accepts them. Unknown
+ * claims are allowed; `parseRunTicket` drops them.
+ */
+export declare const RUN_TICKET_SCHEMA: Readonly<Record<string, unknown>>;
+/**
+ * `schemas/support-session-v1.json`: the claims of a
+ * `vnd.permdock.support-session+jwt`, as `signSupportSession` writes them.
+ */
+export declare const SUPPORT_SESSION_SCHEMA: Readonly<Record<string, unknown>>;
+//#endregion
+//#region src/cli/core/run.d.ts
 export declare function run(argv: readonly string[], options?: {
   readonly cwd?: string;
   readonly io?: CliIo;
 }): Promise<RunResult>;
 //#endregion
-export type { CatalogActivation, CatalogApproval, CatalogBreakGlass, CatalogConfig, CatalogDocument, CatalogPermission, CatalogResource, CatalogRole, CatalogScope, CatalogSupportAccess, CatalogUsage, CollectConfig, PermDockConfig, RlsActiveRow, RlsApiKeys, RlsConfig, RlsDialect, RlsFunctionMapping, RlsMembershipTable, RlsMemberships, RlsSuspendedMembership, RlsSuspendedScope, RlsSuspension, RlsTarget, RunResult, SupabaseGrantsMarker, SupabaseHookMarker };
+export { type CatalogActivation, type CatalogApproval, type CatalogBreakGlass, type CatalogConfig, type CatalogDocument, type CatalogPermission, type CatalogResource, type CatalogRole, type CatalogScope, type CatalogSupportAccess, type CatalogUsage, type CollectConfig, PUSHED_POLICY_SCHEMA, type PermDockConfig, type PushedGrant, type PushedPolicy, type RlsActiveRow, type RlsApiKeys, type RlsConfig, type RlsDialect, type RlsFunctionMapping, type RlsMembershipTable, type RlsMemberships, type RlsSuspendedMembership, type RlsSuspendedScope, type RlsSuspension, type RlsTarget, type RunResult, type SupabaseGrantsMarker, type SupabaseHookMarker, parsePushedPolicy, pushedPolicy };

package/dist/cli/index.js

@@ -1,5 +1,165 @@
 import { t as catalogPath } from "../catalog-path-CnI0XTFK.js";
-import { t as defineConfig } from "../config-BJiM-xAm.js";
-import { o as parseGrantsMarker, s as parseHookMarker } from "../markers-B0hYLvMD.js";
-import { t as run } from "../run-BWc9qqvE.js";
-export { catalogPath, defineConfig, parseGrantsMarker, parseHookMarker, run };
+import { t as defineConfig } from "../config-bs_kZeYq.js";
+import { n as parsePushedPolicy, r as pushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-DobP7AHI.js";
+import { c as parseGrantsMarker, l as parseHookMarker } from "../markers-C6joDI3o.js";
+import { t as run } from "../run-DOfMtc9V.js";
+//#region src/cli/token-schemas.ts
+const ID = {
+	type: "string",
+	minLength: 1,
+	maxLength: 256
+};
+const NUMERIC_DATE = {
+	type: "integer",
+	minimum: 0
+};
+const AUDIENCE = { anyOf: [ID, {
+	type: "array",
+	items: ID,
+	minItems: 1
+}] };
+/**
+* `schemas/run-v1.json`: the claims of a `vnd.permdock.run+jwt`, as
+* `signRunTicket` writes them and `parseRunTicket` accepts them. Unknown
+* claims are allowed; `parseRunTicket` drops them.
+*/
+const RUN_TICKET_SCHEMA = {
+	$schema: "https://json-schema.org/draft/2020-12/schema",
+	$id: "https://permdock.com/schemas/run-v1.json",
+	title: "PermDock run ticket",
+	description: "The claims of a vnd.permdock.run+jwt, wire format v1. At least one of scope and authorization_details is present; automation is present exactly when kind is automation.",
+	type: "object",
+	required: [
+		"v",
+		"iss",
+		"sub",
+		"aud",
+		"jti",
+		"iat",
+		"exp",
+		"kind"
+	],
+	properties: {
+		v: { const: 1 },
+		iss: ID,
+		sub: ID,
+		aud: AUDIENCE,
+		jti: ID,
+		iat: NUMERIC_DATE,
+		exp: NUMERIC_DATE,
+		kind: { enum: [
+			"automation",
+			"job",
+			"caller"
+		] },
+		act: { $ref: "#/$defs/act" },
+		scope: { type: "string" },
+		authorization_details: {
+			type: "array",
+			items: {
+				type: "object",
+				required: ["type"],
+				properties: { type: { type: "string" } }
+			}
+		},
+		automation: {
+			type: "object",
+			required: ["id", "version"],
+			properties: {
+				id: ID,
+				version: { anyOf: [ID, {
+					type: "integer",
+					minimum: 0
+				}] }
+			}
+		},
+		tenant: ID,
+		trigger: { type: "object" },
+		binding: {
+			type: "object",
+			properties: {
+				connector: ID,
+				tools: {
+					type: "array",
+					items: ID,
+					maxItems: 64
+				}
+			}
+		}
+	},
+	anyOf: [{
+		required: ["scope"],
+		properties: { scope: true }
+	}, {
+		required: ["authorization_details"],
+		properties: { authorization_details: true }
+	}],
+	$defs: { act: {
+		description: "RFC 8693 act: the party running the work; at most 8 nested levels.",
+		type: "object",
+		required: ["sub"],
+		properties: {
+			sub: ID,
+			kind: ID,
+			act: { $ref: "#/$defs/act" }
+		}
+	} }
+};
+/**
+* `schemas/support-session-v1.json`: the claims of a
+* `vnd.permdock.support-session+jwt`, as `signSupportSession` writes them.
+*/
+const SUPPORT_SESSION_SCHEMA = {
+	$schema: "https://json-schema.org/draft/2020-12/schema",
+	$id: "https://permdock.com/schemas/support-session-v1.json",
+	title: "PermDock support session",
+	description: "The claims of a vnd.permdock.support-session+jwt, wire format v1: sub is the viewed principal, act the support actor, jti the session id. exp is after iat, by at most one day.",
+	type: "object",
+	required: [
+		"v",
+		"iss",
+		"sub",
+		"aud",
+		"jti",
+		"iat",
+		"exp",
+		"act",
+		"tenant",
+		"reason",
+		"permissions"
+	],
+	properties: {
+		v: { const: 1 },
+		iss: ID,
+		sub: ID,
+		aud: AUDIENCE,
+		jti: ID,
+		iat: NUMERIC_DATE,
+		exp: NUMERIC_DATE,
+		act: {
+			type: "object",
+			required: ["sub", "kind"],
+			additionalProperties: false,
+			properties: {
+				sub: ID,
+				kind: { const: "support" }
+			}
+		},
+		tenant: ID,
+		reason: {
+			type: "string",
+			minLength: 1,
+			maxLength: 1e3
+		},
+		permissions: {
+			type: "array",
+			items: ID,
+			minItems: 1,
+			maxItems: 64
+		},
+		approved_by: ID,
+		reference: ID
+	}
+};
+//#endregion
+export { PUSHED_POLICY_SCHEMA, RUN_TICKET_SCHEMA, SUPPORT_SESSION_SCHEMA, catalogPath, defineConfig, parseGrantsMarker, parseHookMarker, parsePushedPolicy, pushedPolicy, run };