permdock 0.3.1 → 0.5.0

package/dist/testing/index.d.ts

@@ -1,15 +1,26 @@
-import { At as SnapshotSource, C as Policy, Ct as SettingsSource, Dr as CustomRole, Ft as TokenVerifier, Mr as Membership, Nr as Principal, Pr as Subject, Pt as TokenSigner, Rt as WhereCompiler, Tt as Snapshot, Wn as ApprovalPolicySource, at as DecisionSink, bn as PolicySource, bt as RelationSource, dt as LimitStore, gt as MembershipSource, jt as SubjectResolver, ln as PermDock, mn as WhereResult, nt as CredentialVerifier, st as EntitlementSource, un as PermDockOptions, xt as RoleSource } from "../policy-IB6yxpC3.js";
-import { f as Permission, g as ResourceInit, u as InferPermissionTree } from "../permissions-DttnqqxC.js";
-import { r as Role } from "../vocabulary-DA8a8zif.js";
-import { f as ApprovalStore } from "../types-aqOHTHcp.js";
-import { t as ToolMap } from "../types-Bvc4oWT6.js";
-import { n as SupabaseHookManifest } from "../manifest-uDS9y5de.js";
+import { J as EntitlementSource, K as DecisionProvider, Q as LimitStore, T as Policy, U as CredentialVerifier, Vt as Snapshot, W as CustomRoleSource, Zn as CustomRole, Zt as DeliveryChannel, at as SettingsSource, dt as TokenVerifier, et as MembershipSource, ir as Subject, it as RelationSource, mt as WhereCompiler, nr as Membership, ot as SnapshotSource, q as DecisionSink, rr as Principal, st as SubjectResolver, ut as TokenSigner } from "../policy-types-DzwivBgR.js";
+import { C as InferPermissionTree, k as ResourceInit, r as Role, w as Permission } from "../vocabulary-D6lPdb4Z.js";
+import { Q as LegacyCheck } from "../index-DOVf7RJv.js";
+import { S as ApprovalPolicySource, c as WhereResult, d as PrincipalIdentity, g as Limits, i as PermDockOptions, p as PrincipalSource, r as PermDock } from "../permdock-D7eeLJER.js";
+import { o as PolicySource } from "../hosted-DBDX0M-P.js";
+import { a as ApprovalDelegationSource, m as ApprovalStore } from "../types-CCpc2Dcv.js";
+import { a as ProblemDetails } from "../errors-C2PXIv4c.js";
+import { c as ModelMap, t as AgentPermDock, u as ToolMap } from "../create-BDS7wc3y.js";
+import { c as AccessReviewStore } from "../types-_sHy8BQf.js";
+import { F as IdempotencyStore } from "../index-CxGUswIC.js";
+import { n as RevocationFeed } from "../revocations-R07lFBnX.js";
+import { s as SupportSessionSource } from "../index-Chrs5fQ-.js";
+import { a as AutomationSource, t as Automation } from "../automation-BMZPIVUM.js";
+import { c as DeliveryTransport, g as TransportMessages } from "../types-DX0LaKTb.js";
+import { n as SupabaseHookManifest } from "../manifest-mx5ghSFM.js";
 import { t as supabaseMembershipsBudget } from "../budget-JqcRqyhK.js";
-import { n as RevocationFeed } from "../revocations-Cy06JNx2.js";
-import { g as ReplayStore } from "../types-Cq_H8N_X.js";
-import { v as DirectoryStore } from "../index-C8z4RjQV.js";
-import { a as SaasProject } from "../permissions-CDgvKG5L.js";
-import { n as saasPolicy } from "../policy-D2W7uv19.js";
+import { t as CloudApproverOptions } from "../types-C8-KNsFf.js";
+import { n as ApprovalWaiter } from "../waiter-CKy4MQSY.js";
+import { g as SetQueue, l as ReplayStore } from "../types-DiQjupG2.js";
+import { r as SnapshotStorage } from "../types-BjV-fqcA.js";
+import { y as DirectoryStore } from "../index-SGdIQyzc.js";
+import { a as SaasProject } from "../permissions-oEWfl-kl.js";
+import { n as saasPolicy } from "../policy-Czo4n3Hs.js";
 import { expectTypeOf } from "vitest";
 //#region src/testing/describe-policy.d.ts
 type MatrixOutcome = "granted" | "denied" | "approval-required";
@@ -81,7 +92,7 @@ type RlsParityOptions = {
   readonly role?: "authenticated" | "anon";
   /**
    * Tenant-defined roles the subjects' memberships may hold. `decide` resolves them through a
-   * `RoleSource`; each membership's claim carries them as the compact `grants` map, which the
+   * `CustomRoleSource`; each membership's claim carries them as the compact `grants` map, which the
    * helpers read in `jwt` mode. Seeding the `database`-mode tables is the caller's job.
    */
   readonly customRoles?: readonly CustomRole[];
@@ -113,7 +124,7 @@ type RlsParityReport = {
   readonly ok: boolean;
   readonly results: readonly RlsParityCase[];
 };
-export declare function rlsParity<TUser>(policy: Policy<TUser>, options: RlsParityOptions): Promise<RlsParityReport>;
+export declare function testRlsParity<TUser>(policy: Policy<TUser>, options: RlsParityOptions): Promise<RlsParityReport>;
 //#endregion
 //#region src/testing/orm-parity.d.ts
 type OrmParityScenario<TUser = unknown> = {
@@ -161,7 +172,7 @@ type OrmParityReport = {
  * A partial `where()` (a closure grant it cannot compile) may be refused or
  * return fewer rows, never more.
  */
-export declare function ormParity<TUser>(policy: Policy<TUser>, scenarios: readonly OrmParityScenario<TUser>[], options: OrmParityOptions<TUser>): Promise<OrmParityReport>;
+export declare function testOrmParity<TUser>(policy: Policy<TUser>, scenarios: readonly OrmParityScenario<TUser>[], options: OrmParityOptions<TUser>): Promise<OrmParityReport>;
 //#endregion
 //#region src/testing/client-parity.d.ts
 type ClientParityCase = {
@@ -178,7 +189,7 @@ type ClientParityCase = {
   readonly stricter?: boolean;
 };
 type ClientParityOptions = {
-  readonly customRoles?: RoleSource;
+  readonly customRoles?: CustomRoleSource;
 };
 /**
  * Asserts that `fromSnapshot(permdock.snapshot())` never grants what the
@@ -186,6 +197,26 @@ type ClientParityOptions = {
  */
 export declare function testClientParity(policy: Policy, cases: readonly ClientParityCase[], options?: ClientParityOptions): void;
 //#endregion
+//#region src/testing/legacy-parity.d.ts
+type LegacyParityCase = {
+  readonly name: string;
+  /** The value the policy's `subject` function receives. */
+  readonly user: unknown;
+  readonly permission: Permission;
+  readonly row?: unknown;
+  /**
+   * The answer PermDock should give where it intentionally differs from the
+   * legacy check; absent means the two must agree.
+   */
+  readonly expect?: boolean;
+};
+/**
+ * Asserts that the policy answers each case as the application's legacy
+ * check does, or as the case's `expect` says where the difference is
+ * intended. Run it before enforcing a permission with `shadowMode`.
+ */
+export declare function testLegacyParity(policy: Policy, legacy: LegacyCheck, cases: readonly LegacyParityCase[]): void;
+//#endregion
 //#region src/testing/client-store.d.ts
 type ClientStoreStatus = "ready" | "pending" | "stale" | "server-only";
 /** The client surface every UI adapter hands to components. */
@@ -229,7 +260,7 @@ export declare function snapshotFixture(policy: Policy, subject: unknown, option
   readonly simulated?: boolean;
 }): Promise<Snapshot>;
 //#endregion
-//#region src/testing/http-adapter.d.ts
+//#region src/testing/http-adapter/domain.d.ts
 /**
  * What a mount wires into its framework. Every value is server-side: the
  * subject comes from a verified bearer token, memberships and plans from the
@@ -254,9 +285,9 @@ type HttpScenarioDomain = {
   readonly ticks: (org: string | undefined, signal: AbortSignal) => AsyncIterable<SaasProject>;
   /** The `:org` segment of a path; mounts may read their route param instead. */
   readonly org: (path: string) => string | undefined;
-  readonly customRoles: RoleSource;
+  readonly customRoles: CustomRoleSource;
   readonly store: ApprovalStore;
-  readonly limits: LimitStore;
+  readonly limits: Limits;
   /** A project row by id, whatever its org: tenant checks belong to the policy. */
   readonly project: (id: string | undefined) => SaasProject | null;
 };
@@ -352,6 +383,8 @@ type HttpAdapterOptions = {
   /** The mount serves the events stream; the `stream-*` scenarios run only then. */
   readonly streams?: boolean;
 };
+//#endregion
+//#region src/testing/http-adapter/scenarios.d.ts
 /**
  * Real-life HTTP scenarios over the shared SaaS domain. `mount` builds the
  * application once with the adapter under test; every expectation below is
@@ -383,7 +416,7 @@ type AgentScenarioDomain = {
    * approval.
    */
   readonly tools: ToolMap & { readonly [K in AgentToolName]: ToolMap[K]; };
-  readonly customRoles: RoleSource;
+  readonly customRoles: CustomRoleSource;
   readonly store: ApprovalStore;
 };
 type AgentCall = {
@@ -414,13 +447,55 @@ type AgentAdapterOptions = {
  */
 export declare function testAgentAdapter(options: AgentAdapterOptions): void;
 //#endregion
+//#region src/testing/agent-runtime.d.ts
+/** The server-side context of one call; the subject and tenant come from here, never from arguments. */
+type AgentRuntimeContext = {
+  /** `null` for a call with no authenticated user. */
+  readonly user: string | null;
+  readonly org: string;
+};
+type AgentRuntimeOperation = "project_read" | "project_search" | "api_keys_revoke_all";
+type AgentRuntimeModel = "standard" | "frontier";
+/** What a mount wires into its `AgentPermDock`. */
+type AgentRuntimeDomain = {
+  readonly policy: typeof saasPolicy;
+  /** The principal for `user` with the plans of `org`, or `null`. Throws for `AGENT_THROWING_USER`. */
+  readonly subject: (user: string | null, org: string) => Principal | null;
+  /**
+   * `project_read` loads the row named by `args.id`; `project_search` has a
+   * `results` permission; `api_keys_revoke_all` needs approval.
+   */
+  readonly operations: ToolMap & { readonly [K in AgentRuntimeOperation]: ToolMap[K]; };
+  /** `standard` for any reader, `frontier` for an admin on the `pro` plan. */
+  readonly models: ModelMap & { readonly [K in AgentRuntimeModel]: ModelMap[K]; };
+  readonly customRoles: CustomRoleSource;
+  readonly store: ApprovalStore;
+};
+type AgentRuntimeMounted = {
+  readonly agent: AgentPermDock<AgentRuntimeContext>;
+  readonly close?: () => Promise<void> | void;
+};
+type AgentRuntimeScenarioName = "granted" | "denied" | "cross-tenant" | "anonymous" | "subject-throws" | "loader-throws" | "missing-row" | "approval-required" | "unmapped-operation" | "allowed-operations" | "model-gate" | "permitted-models" | "results-filter" | "gateway-options";
+type AgentRuntimeOptions = {
+  readonly name: string;
+  readonly mount: (domain: AgentRuntimeDomain) => AgentRuntimeMounted | Promise<AgentRuntimeMounted>;
+  /** Scenarios the runtime cannot express, each with a reason. */
+  readonly skip?: Readonly<Partial<Record<AgentRuntimeScenarioName, string>>>;
+};
+/**
+ * Runs the `AgentPermDock` contract against a runtime: operations decided by
+ * name, the listing hint, the model gate, the results filter and gateway
+ * attribution. Every failure denies, and no method throws.
+ */
+export declare function testAgentRuntime(options: AgentRuntimeOptions): void;
+//#endregion
 //#region src/testing/authzen.d.ts
 type Entity = {
   readonly type: string;
   readonly id?: string;
   readonly properties?: Readonly<Record<string, unknown>>;
 };
-type AuthZenEvaluationVector = {
+type AuthzenEvaluationVector = {
   readonly request: {
     readonly subject: Entity;
     readonly action: {
@@ -431,7 +506,7 @@ type AuthZenEvaluationVector = {
   };
   readonly expected: boolean;
 };
-type AuthZenEvaluationsVector = {
+type AuthzenEvaluationsVector = {
   readonly request: {
     readonly subject?: Entity;
     readonly action?: {
@@ -450,7 +525,7 @@ type AuthZenEvaluationsVector = {
     readonly decision: boolean;
   }[];
 };
-type AuthZenSearchVector = {
+type AuthzenSearchVector = {
   readonly request: Readonly<Record<string, unknown>>;
   readonly expected: {
     readonly results: readonly Readonly<Record<string, unknown>>[];
@@ -461,17 +536,17 @@ type AuthZenSearchVector = {
  * (`decisions-*.json` for Basic and Batch, `search/{subject,resource,action}`
  * `results.json` for Search), so the official files load unchanged.
  */
-type AuthZenVectors = {
-  readonly evaluation?: readonly AuthZenEvaluationVector[];
-  readonly evaluations?: readonly AuthZenEvaluationsVector[];
+type AuthzenVectors = {
+  readonly evaluation?: readonly AuthzenEvaluationVector[];
+  readonly evaluations?: readonly AuthzenEvaluationsVector[];
   readonly search?: {
-    readonly subject?: readonly AuthZenSearchVector[];
-    readonly resource?: readonly AuthZenSearchVector[];
-    readonly action?: readonly AuthZenSearchVector[];
+    readonly subject?: readonly AuthzenSearchVector[];
+    readonly resource?: readonly AuthzenSearchVector[];
+    readonly action?: readonly AuthzenSearchVector[];
   };
 };
-type TestAuthZenOptions = {
-  readonly vectors: AuthZenVectors;
+type TestAuthzenOptions = {
+  readonly vectors: AuthzenVectors;
   /** Origin the requests are addressed to; the discovery document must name it. */
   readonly origin?: string;
   readonly headers?: Readonly<Record<string, string>>;
@@ -479,7 +554,7 @@ type TestAuthZenOptions = {
   readonly discovery?: boolean;
 };
 /** Runs AuthZEN 1.0 interop vectors against an Authorization API endpoint. */
-export declare function testAuthZen(handle: (request: Request) => Promise<Response>, options: TestAuthZenOptions): void;
+export declare function testAuthzen(handle: (request: Request) => Promise<Response>, options: TestAuthzenOptions): void;
 type TodoUser = {
   readonly id: string;
   readonly identity: string;
@@ -509,23 +584,156 @@ export declare const authzenTodoData: {
  * every user against every action on their own and on Rick's todo, one batch
  * per user, and the three searches.
  */
-export declare function authzenTodoVectors(): AuthZenVectors;
+export declare function authzenTodoVectors(): AuthzenVectors;
 //#endregion
-//#region src/testing/conformance.d.ts
-export declare function testSubjectResolver<TInput>(resolver: SubjectResolver<TInput>, options: {
-  readonly invalid: TInput;
+//#region src/testing/cloud-api/platform-checks.d.ts
+type TestCloudPlatformOptions = {
+  /** A `PERMDOCK_CLOUD_TOKEN` for `project`: read-only, pinned to one environment. */
+  readonly token: string;
+  /** The project the token reads; defaults to the environment. */
+  readonly project?: string;
+  /** A project with no `cloud push` yet and a login token that reads it; the `policy-not-published` check is skipped without it. */
+  readonly unpublished?: {
+    readonly project: string;
+    readonly token: string;
+  };
+  /** Registers a test MCP client with RFC 7591; skipped unless true. */
+  readonly registration?: boolean;
+};
+//#endregion
+//#region src/testing/cloud-api/index.d.ts
+type CloudApiKeys = {
+  /** The `client` key the application deploys (`PERMDOCK_CLOUD_KEY`). */
+  readonly client: string;
+  /** The `admin` key; the authoring checks are skipped without it. */
+  readonly admin?: string;
+  /** An `export` key; its key-kind check is skipped without it. */
+  readonly export?: string;
+};
+type TestCloudApiOptions = {
+  readonly environment?: string;
+  readonly fetch?: typeof globalThis.fetch;
+  /** Signs the `PermDock-Approver` tokens; its issuer is a trusted issuer for `approver`. */
+  readonly approver: CloudApproverOptions;
+  /** A fresh `PermDock-Subject` token per call; the snapshot checks are skipped without it. */
+  readonly subject?: () => string | Promise<string>;
+  /** Verifies the environment's policy documents for `testPolicySource`. */
+  readonly verifier?: TokenVerifier;
+  /** AuthZEN vectors for the hosted ADS, with the caller's credentials as `headers`. */
+  readonly authzen?: {
+    readonly vectors: AuthzenVectors;
+    readonly headers?: Readonly<Record<string, string>>;
+  };
+  /** The platform issuer and project read API at `baseUrl`; skipped without it. */
+  readonly platform?: TestCloudPlatformOptions;
+};
+/**
+ * Runs the conformance runners and the HTTP contract checks against one
+ * PermDock Cloud environment, and validates every response body against
+ * `cloud-api-v1.json`. Point it at a test environment: it creates approvals,
+ * sends decision events and deliveries to `.invalid` addresses, and pushes
+ * the catalog the environment already holds.
+ */
+export declare function testCloudApi(baseUrl: string, keys: CloudApiKeys, options: TestCloudApiOptions): void;
+//#endregion
+//#region src/testing/conformance/approvals.d.ts
+type ApprovalStoreOptions = {
+  /**
+   * Opens a second store over the same backing storage, as a restarted process
+   * would. Omit it for stores that do not persist (the resume-after-restart
+   * case is then skipped).
+   */
+  readonly reopen?: () => ApprovalStore | Promise<ApprovalStore>;
+};
+export declare function testApprovalStore(store: ApprovalStore, options?: ApprovalStoreOptions): void;
+/**
+ * Checks an `ApprovalPolicySource`: entries are plain JSON, belong to the
+ * queried tenant or to none, and every entry loads against `policy` (an
+ * entry that does not would deny every call).
+ */
+export declare function testApprovalPolicySource(source: ApprovalPolicySource, options: {
+  readonly policy: Policy;
+  readonly tenant: string;
+  readonly unknown?: string;
 }): void;
-export declare function testMembershipSource(source: MembershipSource, options: {
-  readonly principals: readonly {
-    readonly id: string;
-    readonly kind?: string;
-  }[];
-  readonly expect?: Record<string, readonly Membership[]>;
-  /** With the policy, every membership must name one of its scopes and carry its parent ids. */
-  readonly policy?: Policy;
-  /** Passed to every `membershipsFor`; a source keyed by tenant answers nothing without one. */
+/**
+ * Checks an `AccessReviewStore`: create is kept, items page, a decision is
+ * recorded once, only a revoked item can be marked applied, and close is once.
+ */
+export declare function testAccessReviewStore(store: AccessReviewStore): void;
+/**
+ * Checks an `ApprovalDelegationSource`: entries are plain JSON, name the
+ * delegate, and are active at `at`. A query for another delegate is empty.
+ */
+export declare function testApprovalDelegationSource(source: ApprovalDelegationSource, options: {
+  readonly delegate: string;
+  readonly delegator: string;
   readonly tenant?: string;
+  readonly at?: string;
+}): void;
+/**
+ * Checks an `IdempotencyStore`: a stored response comes back as written
+ * until it expires, keys never share an entry, and a later `set` replaces an
+ * earlier one.
+ */
+export declare function testIdempotencyStore(store: IdempotencyStore): void;
+//#endregion
+//#region src/testing/conformance/where.d.ts
+type WhereRow = Readonly<Record<string, unknown>>;
+/**
+ * `matches` answers whether the compiled output selects `row`, for example
+ * by running it against a table holding only that row. With it, every case
+ * must select the rows the in-memory evaluator keeps, including rows whose
+ * fields are NULL.
+ */
+export declare function testWhereCompiler<TTarget>(compiler: WhereCompiler<TTarget>, options: {
+  readonly target: TTarget;
+  readonly isFailClosed?: (compiled: unknown) => boolean;
+  readonly matches?: (compiled: unknown, row: WhereRow) => boolean | Promise<boolean>;
+}): void;
+//#endregion
+//#region src/testing/conformance/credentials.d.ts
+export declare function testReplayStore(store: ReplayStore): void;
+export declare function testSetQueue(queue: SetQueue): void;
+export declare function testRevocationFeed(feed: RevocationFeed): void;
+export declare function testTokenVerifier(verifier: TokenVerifier, options?: {
+  readonly audience?: string;
+  readonly issuer?: string;
 }): void;
+/**
+ * `key` is a live key the verifier knows, or a function issuing one (called
+ * once). `revoke`, when given, revokes it; the runner then expects the key
+ * to stop verifying.
+ */
+export declare function testCredentialVerifier(verifier: CredentialVerifier, options: {
+  readonly key: string | (() => string | Promise<string>);
+  readonly revoke?: () => void | Promise<void>;
+}): void;
+export declare function testTokenSigner(signer: TokenSigner, options: {
+  readonly verifier: TokenVerifier;
+}): void;
+//#endregion
+//#region src/testing/conformance/runtime-stores.d.ts
+export declare function testLimitStore(store: LimitStore): void;
+export declare function testDecisionSink(sink: DecisionSink): void;
+export declare function testSnapshotSource(source: SnapshotSource): void;
+export declare function testPolicySource(source: PolicySource, options?: {
+  readonly policy?: Policy;
+}): void;
+//#endregion
+//#region src/testing/conformance/providers.d.ts
+type DecisionProviderRunnerOptions = {
+  /** A permission the provider handles. */
+  readonly permission: Permission;
+  readonly subject: Subject;
+  readonly data?: unknown;
+  /** The same provider wired to a transport that fails; it must deny. */
+  readonly unavailable?: DecisionProvider;
+};
+export declare function testDecisionProvider(provider: DecisionProvider, options: DecisionProviderRunnerOptions): void;
+export declare function testSnapshotStorage(storage: SnapshotStorage): void;
+//#endregion
+//#region src/testing/conformance/relations.d.ts
 /**
  * A `RelationSource` answers facts only: well-formed chains nearest first and
  * no longer than `depth`, holders with principal ids or group references and
@@ -548,6 +756,119 @@ export declare function testRelationSource(source: RelationSource, options: {
     readonly links?: Readonly<Record<string, string>>;
   };
 }): void;
+//#endregion
+//#region src/testing/conformance/principals.d.ts
+/**
+ * Checks a `PrincipalSource`: `principal` answers each listed id with the
+ * expected principal or `null`, never another id; `principalByIdentity`
+ * resolves each listed identity to the expected principal id or `null`, and
+ * an email matches trimmed and in any case.
+ */
+export declare function testPrincipalSource(source: PrincipalSource, options: {
+  readonly principals: readonly {
+    readonly id: string;
+    readonly tenant?: string;
+    /** The principal `principal(id)` returns, or `null` for none; omit to check only the shape. */
+    readonly expect?: Principal | null;
+  }[];
+  readonly identities?: readonly {
+    readonly identity: PrincipalIdentity;
+    /** The id of the principal the identity resolves to, or `null` for none. */
+    readonly expect: string | null;
+  }[];
+}): void;
+//#endregion
+//#region src/testing/conformance/automations.d.ts
+/**
+ * Checks an `AutomationSource`: `automation(id)` answers each listed id
+ * with a valid Automation v1 record of that id or `null`, never another id;
+ * a record held to one tenant is `null` when asked for another; an empty or
+ * unknown id is `null`.
+ */
+export declare function testAutomationSource(source: AutomationSource, options: {
+  readonly automations: readonly {
+    readonly id: string;
+    readonly tenant?: string;
+    /** The record `automation(id)` returns, or `null` for none; omit to check only the shape. */
+    readonly expect?: Automation | null;
+  }[];
+}): void;
+/**
+ * Checks a `SupportSessionSource`: `session(id)` answers each listed id
+ * with a record of that id or `null`, never another id; `ended` is a
+ * boolean when present; an empty or unknown id is `null`.
+ */
+export declare function testSupportSessionSource(source: SupportSessionSource, options: {
+  readonly sessions: readonly {
+    readonly id: string;
+    /** `true` for an ended session, `false` for a live one, `null` for an unknown one. */
+    readonly ended?: boolean | null;
+  }[];
+}): void;
+/**
+ * Checks an `ApprovalWaiter`: a wait ends when its token is woken and not
+ * when another token is; waking a token nobody waits on resolves; a wait
+ * whose `expiresAt` has passed ends; an aborted `signal` rejects the wait with its reason.
+ * Pass `expiry: false` or `abort: false` for a waiter whose runner offers no
+ * timer or no cancellation, `pending` when the waiter reads a store, and
+ * `parked` when a wait parks asynchronously.
+ */
+export declare function testApprovalWaiter(waiter: ApprovalWaiter, options?: {
+  /** Opens a pending approval request and returns its token; a fixed token per label when absent. */
+  readonly pending?: (label: string) => string | Promise<string>;
+  /** Resolves once `wait(token)` has parked; one macrotask when absent. */
+  readonly parked?: (token: string) => Promise<void>;
+  readonly expiry?: boolean;
+  readonly abort?: boolean;
+  /** Milliseconds a wait may take to end after its trigger. Defaults to 1000. */
+  readonly timeout?: number;
+}): void;
+//#endregion
+//#region src/testing/delivery-transport.d.ts
+/** How a provider fails on its next call: a retryable error, a final error, or a throw from its client. */
+type DeliveryFailureKind = "retryable" | "final" | "throw";
+type DeliveryTransportHarness<C extends DeliveryChannel> = {
+  readonly transport: DeliveryTransport<C>;
+  /** What the provider accepted, one entry per delivery, with the idempotency key it received. */
+  received(): readonly {
+    readonly idempotencyKey: string;
+  }[] | Promise<readonly {
+    readonly idempotencyKey: string;
+  }[]>;
+  /** Makes the provider's next call fail this way. */
+  fail(kind: DeliveryFailureKind): void;
+};
+type DeliveryTransportOptions<C extends DeliveryChannel> = {
+  readonly channel: C;
+  /** An address the provider accepts on `channel`. */
+  readonly address: string;
+  readonly message: TransportMessages[C];
+  /** A fresh harness per test. */
+  create(): DeliveryTransportHarness<C>;
+};
+/**
+ * Conformance for a `DeliveryTransport`: it sends a checked target with its
+ * idempotency key, keeps the key on a retry, refuses a target without a
+ * granted decision before calling the provider, and maps provider errors to
+ * retryable or final failures without rejecting.
+ */
+export declare function testDeliveryTransport<C extends DeliveryChannel>(name: string, options: DeliveryTransportOptions<C>): void;
+//#endregion
+//#region src/testing/conformance/identity.d.ts
+export declare function testSubjectResolver<TInput>(resolver: SubjectResolver<TInput>, options: {
+  readonly invalid: TInput;
+}): void;
+export declare function testMembershipSource(source: MembershipSource, options: {
+  readonly principals: readonly {
+    readonly id: string;
+    readonly kind?: string;
+  }[];
+  readonly expect?: Record<string, readonly Membership[]>;
+  /** With the policy, every membership must name one of its scopes and carry its parent ids. */
+  readonly policy?: Policy;
+  /** Passed to every `membershipsFor`; a source keyed by tenant answers nothing without one. */
+  readonly tenant?: string;
+}): void;
 export declare function testEntitlementSource(source: EntitlementSource, options: {
   readonly principal: {
     readonly id: string;
@@ -555,7 +876,7 @@ export declare function testEntitlementSource(source: EntitlementSource, options
   readonly tenant: string;
   readonly expect?: readonly string[];
 }): void;
-export declare function testRoleSource(source: RoleSource, options: {
+export declare function testCustomRoleSource(source: CustomRoleSource, options: {
   readonly tenant: string;
   readonly declared: readonly (string | Role)[];
   /** When set, every custom role's `grants` must resolve inside the ceiling. */
@@ -566,69 +887,14 @@ export declare function testRoleSource(source: RoleSource, options: {
    */
   readonly every?: readonly string[];
 }): void;
-export declare function testLimitStore(store: LimitStore): void;
-export declare function testDecisionSink(sink: DecisionSink): void;
-export declare function testSnapshotSource(source: SnapshotSource): void;
-export declare function testPolicySource(source: PolicySource, options?: {
-  readonly policy?: Policy;
-}): void;
-export declare function testReplayStore(store: ReplayStore): void;
-export declare function testRevocationFeed(feed: RevocationFeed): void;
 export declare function testDirectoryStore(store: DirectoryStore, options: {
   readonly tenants: readonly [string, string];
 }): void;
-type ApprovalStoreOptions = {
-  /**
-   * Opens a second store over the same backing storage, as a restarted process
-   * would. Omit it for stores that do not persist (the resume-after-restart
-   * case is then skipped).
-   */
-  readonly reopen?: () => ApprovalStore | Promise<ApprovalStore>;
-};
-export declare function testApprovalStore(store: ApprovalStore, options?: ApprovalStoreOptions): void;
-export declare function testTokenVerifier(verifier: TokenVerifier, options?: {
-  readonly audience?: string;
-  readonly issuer?: string;
-}): void;
 /** Settings for `tenant`, or `undefined`; a thrown source fails the runner. */
 export declare function testSettingsSource(source: SettingsSource, options: {
   readonly tenant: string;
   readonly unknown?: string;
 }): void;
-/**
- * Checks an `ApprovalPolicySource`: entries are plain JSON, belong to the
- * queried tenant or to none, and every entry loads against `policy` (an
- * entry that does not would deny every call).
- */
-export declare function testApprovalPolicySource(source: ApprovalPolicySource, options: {
-  readonly policy: Policy;
-  readonly tenant: string;
-  readonly unknown?: string;
-}): void;
-/**
- * `key` is a live key the verifier knows, or a function issuing one (called
- * once). `revoke`, when given, revokes it; the runner then expects the key
- * to stop verifying.
- */
-export declare function testCredentialVerifier(verifier: CredentialVerifier, options: {
-  readonly key: string | (() => string | Promise<string>);
-  readonly revoke?: () => void | Promise<void>;
-}): void;
-export declare function testTokenSigner(signer: TokenSigner, options: {
-  readonly verifier: TokenVerifier;
-}): void;
-type WhereRow = Readonly<Record<string, unknown>>;
-/**
- * `matches` answers whether the compiled output selects `row`, for example
- * by running it against a table holding only that row. With it, every case
- * must select the rows the in-memory evaluator keeps, including rows whose
- * fields are NULL.
- */
-export declare function testWhereCompiler<TTarget>(compiler: WhereCompiler<TTarget>, options: {
-  readonly target: TTarget;
-  readonly isFailClosed?: (compiled: unknown) => boolean;
-  readonly matches?: (compiled: unknown, row: WhereRow) => boolean | Promise<boolean>;
-}): void;
 //#endregion
 //#region src/testing/jwt-fixtures.d.ts
 export declare const jwtFixtureJwks: {
@@ -650,9 +916,9 @@ export declare const jwtFixtureTokens: {
   readonly wrongIss: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6ImF0K2p3dCJ9.eyJzdWIiOiJ1XzEiLCJpc3MiOiJodHRwczovL2V2aWwuZXhhbXBsZS5jb20iLCJhdWQiOiJodHRwczovL2FwaS5leGFtcGxlLmNvbSIsImlhdCI6MTcwMDAwMDAwMCwiZXhwIjoyMDAwMDAwMDAwfQ.tIcLHLa9JLtKz1gqjRGdr5DFbUzRDs5KsoPsJCxspvbBcsFfRFG2G0XJnd1h4QHyZ_5B4OhY3W_jIIsnOPD9Bg";
   readonly unknownKid: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoibm9wZSIsInR5cCI6ImF0K2p3dCJ9.eyJzdWIiOiJ1XzEiLCJpc3MiOiJodHRwczovL2xvZ2luLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJpYXQiOjE3MDAwMDAwMDAsImV4cCI6MjAwMDAwMDAwMH0.walgG5GvpCVBnkMtkdw-epi5c93JqfvAM_N4EWR9Tqhiw_cnzITnlQyoVfihECmV1fqtFrhwM1RCIRJvd38zAQ";
   readonly none: "eyJhbGciOiJub25lIn0.eyJzdWIiOiJ1XzEiLCJpc3MiOiJodHRwczovL2xvZ2luLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJleHAiOjIwMDAwMDAwMDAsImlhdCI6MTcwMDAwMDAwMH0.";
-  readonly snapshot: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InBlcm1kb2NrLXNuYXBzaG90K2p3dCJ9.eyJzbmFwc2hvdCI6eyJ2IjoyLCJpc3N1ZWRBdCI6MTcwMDAwMDAwMCwic3ViamVjdCI6eyJwcmluY2lwYWwiOnsiaWQiOiJ1XzEiLCJyb2xlcyI6WyJtZW1iZXIiXX0sImNvbnRleHQiOnt9fSwicm9sZXMiOlsibWVtYmVyIl0sImdyYW50cyI6W10sInRlbmFudHMiOltdfSwic3ViIjoidV8xIiwiaXNzIjoiaHR0cHM6Ly9hcHAuZXhhbXBsZS5jb20iLCJhdWQiOiJodHRwczovL2FwcC5leGFtcGxlLmNvbSIsImlhdCI6MTcwMDAwMDAwMCwiZXhwIjoyMDAwMDAwMDAwLCJqdGkiOiJzbmFwX2ZpeHR1cmUifQ.4itaYctluoCwU-syytUxArtS_FRyNAti2SZxuSH-nKIMr7-Sb3h1Q3xugn_vPR1eupV4fVNIe6dH27_EiyDvCA";
-  readonly approval: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InBlcm1kb2NrLWFwcHJvdmFsK2p3dCJ9.eyJhcHByb3ZhbCI6eyJ0b2tlbiI6InBkMS5hYmMiLCJwZXJtaXNzaW9uIjoicG9zdC5kZWxldGUiLCJyZXNvdXJjZSI6eyJ0eXBlIjoicG9zdCIsImlkIjoiNDIifSwic3RhdHVzIjoiYXBwcm92ZWQifSwic3ViIjoidV8xIiwiaXNzIjoiaHR0cHM6Ly9hcHAuZXhhbXBsZS5jb20iLCJhdWQiOiJodHRwczovL2FwcC5leGFtcGxlLmNvbSIsImlhdCI6MTcwMDAwMDAwMCwiZXhwIjoyMDAwMDAwMDAwLCJqdGkiOiJhcHJfZml4dHVyZSJ9.UHsoSzQCo68G7ee-EFqdzMLvmqaKlFIMdQKFuqZEM4yUQnJsJJTXbld_aCXcyfN-IdjF9cj2F5EHzsV4nLKbBg";
-  readonly decisions: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InBlcm1kb2NrLWRlY2lzaW9ucytqd3QifQ.eyJldmVudHMiOltdLCJpc3MiOiJodHRwczovL2FwcC5leGFtcGxlLmNvbSIsImlhdCI6MTcwMDAwMDAwMCwiZXhwIjoyMDAwMDAwMDAwLCJqdGkiOiJkZWNfZml4dHVyZSJ9.UZhJd72yFGxHOdjYbzcGYUPgYjvLwOPCtHKxEbLu56SdKSKUDCREXmEBI9WaCPKWjlTBnnIKMYwjG8I8RATJCg";
+  readonly snapshot: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InZuZC5wZXJtZG9jay5zbmFwc2hvdCtqd3QifQ.eyJzbmFwc2hvdCI6eyJ2IjoxLCJzdWJqZWN0Ijp7InByaW5jaXBhbCI6eyJpZCI6InVfMSIsInJvbGVzIjpbIm1lbWJlciJdfSwiY29udGV4dCI6e319LCJyb2xlcyI6WyJtZW1iZXIiXSwiZ3JhbnRzIjpbXSwidGVuYW50cyI6W119LCJzdWIiOiJ1XzEiLCJpYXQiOjE3MDAwMDAwMDAsImp0aSI6InNuYXBfZml4dHVyZSIsImlzcyI6Imh0dHBzOi8vYXBwLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcHAuZXhhbXBsZS5jb20iLCJleHAiOjIwMDAwMDAwMDB9.41KijBuOn1Ehodp60-Pn6qx_WrHQ-BiVUmYy2vjcHjO3o1dopXxjnHJP7P1c-6ghYgrvucPu7hZrDjTtPhxWBw";
+  readonly approval: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InZuZC5wZXJtZG9jay5hcHByb3ZhbCtqd3QifQ.eyJzdWIiOiJ1XzEiLCJ0b2tlbiI6InNoYS0yNTY6NDdERVFwajhIQlNhLV9USW1XLTVKQ2V1UWVSa201Tk1wSldaRzNoU3VGVSIsInJlc29sdmVkX2J5IjoidV8yIiwiYXBwcm92YWxzIjpbeyJieSI6InVfMiIsImF0IjoiMjAyMy0xMS0xNFQyMjoxMzoyMFoifV0sImF1dGhvcml6YXRpb25fZGV0YWlscyI6W3sidHlwZSI6InBvc3QiLCJhY3Rpb25zIjpbImRlbGV0ZSJdLCJpZGVudGlmaWVyIjoiNDIifV0sImlhdCI6MTcwMDAwMDAwMCwianRpIjoiYXByX2ZpeHR1cmUiLCJpc3MiOiJodHRwczovL2FwcC5leGFtcGxlLmNvbSIsImF1ZCI6Imh0dHBzOi8vYXBwLmV4YW1wbGUuY29tIiwiZXhwIjoyMDAwMDAwMDAwfQ.Q76F3tDT2FrEnxD9TjdLfEayJEyyGUWHu6bTCCl5Flegcl9-o370agNVhcV03Khfidm-lK7gPg05ZiYcpCfyBQ";
+  readonly decisions: "eyJhbGciOiJFZDI1NTE5Iiwia2lkIjoiMjAyNi0wOSIsInR5cCI6InZuZC5wZXJtZG9jay5ldmlkZW5jZStqd3QifQ.eyJldmVudHMiOltdLCJpYXQiOjE3MDAwMDAwMDAsImp0aSI6ImRlY19maXh0dXJlIiwiaXNzIjoiaHR0cHM6Ly9hcHAuZXhhbXBsZS5jb20iLCJhdWQiOiJodHRwczovL2FwcC5leGFtcGxlLmNvbSIsImV4cCI6MjAwMDAwMDAwMH0.oGiFmCEFWUAEBtLO3F_rnGMSKBhb9rIxng4YLwRbBTA3fudrbJMcJD2BhNH99cjcBa1xCmADfdOnTc-Ltq-kAA";
 };
 //#endregion
 //#region src/testing/supabase-fixtures.d.ts
@@ -660,7 +926,7 @@ export declare const jwtFixtureTokens: {
  * Claim sets in the shape the Supabase custom access token hook produces (the RBAC guide's
  * `user_role` claim, optionally mirrored into `app_metadata`, plus a `memberships` array for
  * multi-org apps). `tenantPlans` has scoped memberships, `tenant_id` and per-tenant plans in
- * `features`, read with `plans: 'features'`. `full` sets every field of the
+ * `features`, read with `claims: { plans: 'features' }`. `full` sets every field of the
  * claim contract plus a `hook.claims` extra claim; `portalContact`, `oauthClient` and
  * `actChain` cover a customer contact, a Supabase OAuth server token and an RFC 8693 chain.
  * `supportSession`, `supportSessionReadOnly` and `impersonation` are the `act.kind` tokens
@@ -672,7 +938,9 @@ type SupabaseClaimFixture = {
   readonly claims: Readonly<Record<string, unknown>>;
   /** `subjectFromSupabase` options the case needs. */
   readonly options?: {
-    readonly plans?: string;
+    readonly claims?: {
+      readonly plans?: string;
+    };
     readonly anonymousSignIns?: "deny";
   };
   readonly expect: {
@@ -742,4 +1010,21 @@ export declare const supabaseClaimVectors: SupabaseClaimVectors;
  */
 export declare const supabaseHookManifestFixture: SupabaseHookManifest;
 //#endregion
-export { type AgentAdapterOptions, type AgentCall, type AgentMounted, type AgentOutcome, type AgentScenarioDomain, type AgentScenarioName, type AgentToolName, type ApprovalStoreOptions, type AuthZenEvaluationVector, type AuthZenEvaluationsVector, type AuthZenSearchVector, type AuthZenVectors, type ClientParityCase, type ClientParityOptions, type ClientStoreFactory, type ClientStoreFactoryOptions, type ClientStoreHandle, type ClientStorePermDock, type ClientStoreStatus, type DescribePolicyConfig, type HttpAdapterOptions, type HttpCall, type HttpMounted, type HttpOp, type HttpResult, type HttpScenarioDomain, type HttpScenarioName, type MatrixCell, type MatrixOutcome, type OrmParityCase, type OrmParityOptions, type OrmParityReport, type OrmParityRunInput, type OrmParityScenario, type RlsDbOutcome, type RlsFieldsOutcome, type RlsParityCase, type RlsParityFixture, type RlsParityOptions, type RlsParityReport, type RlsParitySubject, type RlsQueryFn, type RlsQueryResult, type SupabaseClaimFixture, type SupabaseClaimFixtureName, type SupabaseClaimVectors, type TestAuthZenOptions, expectTypeOf, supabaseMembershipsBudget };
+//#region src/core/problem-types.d.ts
+/**
+ * The Problem Details types PermDock defines (RFC 9457 section 4). Every
+ * other status answers with `about:blank` and its RFC 9110 reason phrase.
+ */
+declare const PROBLEM_TYPES: readonly ["denied", "approval-required", "validation", "step-up-required", "not-entitled", "rate-limited", "limit-unavailable", "invalid-signature", "approver-not-eligible"];
+type ProblemType = (typeof PROBLEM_TYPES)[number];
+//#endregion
+//#region src/testing/problem-examples.d.ts
+/**
+ * One RFC 9457 body per PermDock problem type, exactly as the HTTP adapters
+ * write it for a `post.delete` request by subject `u_123`. A client tests its
+ * error handling against these; `tests/standards/problem-details.test.ts`
+ * rebuilds each from the code that emits it, and the docs show the same JSON.
+ */
+export declare const PROBLEM_EXAMPLES: Readonly<Record<ProblemType, ProblemDetails>>;
+//#endregion
+export { type AgentAdapterOptions, type AgentCall, type AgentMounted, type AgentOutcome, type AgentRuntimeContext, type AgentRuntimeDomain, type AgentRuntimeModel, type AgentRuntimeMounted, type AgentRuntimeOperation, type AgentRuntimeOptions, type AgentRuntimeScenarioName, type AgentScenarioDomain, type AgentScenarioName, type AgentToolName, type ApprovalStoreOptions, type AuthzenEvaluationVector, type AuthzenEvaluationsVector, type AuthzenSearchVector, type AuthzenVectors, type ClientParityCase, type ClientParityOptions, type ClientStoreFactory, type ClientStoreFactoryOptions, type ClientStoreHandle, type ClientStorePermDock, type ClientStoreStatus, type CloudApiKeys, type DecisionProviderRunnerOptions, type DeliveryFailureKind, type DeliveryTransportHarness, type DeliveryTransportOptions, type DescribePolicyConfig, type HttpAdapterOptions, type HttpCall, type HttpMounted, type HttpOp, type HttpResult, type HttpScenarioDomain, type HttpScenarioName, type LegacyParityCase, type MatrixCell, type MatrixOutcome, type OrmParityCase, type OrmParityOptions, type OrmParityReport, type OrmParityRunInput, type OrmParityScenario, type RlsDbOutcome, type RlsFieldsOutcome, type RlsParityCase, type RlsParityFixture, type RlsParityOptions, type RlsParityReport, type RlsParitySubject, type RlsQueryFn, type RlsQueryResult, type SupabaseClaimFixture, type SupabaseClaimFixtureName, type SupabaseClaimVectors, type TestAuthzenOptions, type TestCloudApiOptions, type TestCloudPlatformOptions, expectTypeOf, supabaseMembershipsBudget };