permdock 0.4.0 → 0.5.0

package/dist/commands-Cpip4ULx.js

@@ -1,97 +0,0 @@
-//#region src/cli/commands/context.ts
-/** Flags every command accepts. `run()` reads them from anywhere in argv. */
-const globalArgs = {
-	cwd: {
-		type: "string",
-		description: "Run as if started in this directory",
-		valueHint: "dir"
-	},
-	config: {
-		type: "string",
-		description: "Config file (default permdock.config.{ts,mts,js,mjs})",
-		valueHint: "file"
-	},
-	json: {
-		type: "boolean",
-		description: "Machine-readable output"
-	},
-	yes: {
-		type: "boolean",
-		alias: "y",
-		description: "Never prompt; take the answer the flags give"
-	},
-	color: {
-		type: "boolean",
-		description: "Styled output on a colour terminal",
-		default: true,
-		negativeDescription: "Plain output"
-	}
-};
-/**
-* A list flag: every `--name a,b` and `--name=c` occurrence, comma-split and
-* trimmed, in order. citty keeps only the last occurrence of a string flag.
-*/
-function listArg(rawArgs, name) {
-	const values = [];
-	const flag = `--${name}`;
-	for (const [i, token] of rawArgs.entries()) {
-		if (token === "--") break;
-		let value;
-		if (token.startsWith(`${flag}=`)) value = token.slice(flag.length + 1);
-		else if (token === flag) {
-			const next = rawArgs[i + 1];
-			if (next !== void 0 && (next === "-" || !next.startsWith("-"))) value = next;
-		}
-		if (value !== void 0) values.push(...value.split(",").map((item) => item.trim()));
-	}
-	return values;
-}
-/** A command's flag and positional definitions, whatever form it declared them in. */
-function resolveArgs(command) {
-	const args = command.args;
-	if (args === void 0) return {};
-	return typeof args === "function" ? args() : args;
-}
-/** A string flag, `undefined` when absent or given without a value. */
-function stringArg(value) {
-	return typeof value === "string" && value !== "" ? value : void 0;
-}
-//#endregion
-//#region src/cli/commands/index.ts
-/** What `permdock --help` lists, without loading any command module. */
-const COMMAND_DESCRIPTIONS = {
-	collect: "Scan the sources for definePermissions() and permission references; write the catalog and barrel",
-	catalog: "Export the catalog as JSON, JSON Schema or Markdown",
-	diff: "Compare two policies or catalogs; exit 1 on a breaking change",
-	usage: "Report unused, ungranted and role-less permissions and conditions on undeclared fields",
-	doctor: "Check a PermDock installation and print a fix for each finding",
-	config: "Check permdock.config.ts for unknown keys, or print the effective config",
-	skills: "Install, update or list the PermDock Agent Skills",
-	openapi: "Emit security into an OpenAPI document, or import one into a generated definition",
-	rls: "Generate, import, verify or migrate Postgres RLS policies from the policy",
-	arazzo: "Resolve every Arazzo step to x-permdock-permissions",
-	cloud: "Publish the catalog, hostable flags and role assignability to a PermDock Cloud environment",
-	supabase: "Generate the Supabase Custom Access Token Hook, or inspect its manifest",
-	powersync: "Generate PowerSync Sync Streams from the policy, or verify them against the fixtures"
-};
-/** Every top-level command, loaded only when it runs or its own `--help` is asked for. */
-const commands = {
-	collect: async () => (await import("./collect-CQx4hX4N.js")).collect,
-	catalog: async () => (await import("./catalog-WHG4kBq7.js")).catalog,
-	diff: async () => (await import("./diff-Cnghh_Ip.js")).diff,
-	usage: async () => (await import("./usage-4G6t643F.js")).usage,
-	doctor: async () => (await import("./doctor-CuVJvhV_.js")).doctor,
-	config: async () => (await import("./config-DLt6BvV7.js")).config,
-	skills: async () => (await import("./skills-Dle4ZoLF.js")).skills,
-	openapi: async () => (await import("./openapi-DcQ1Kg40.js")).openapi,
-	rls: async () => (await import("./rls-55DQTuf5.js")).rls,
-	arazzo: async () => (await import("./arazzo-CD8d0WLb.js")).arazzo,
-	cloud: async () => (await import("./cloud-C7bSDgX4.js")).cloud,
-	supabase: async () => (await import("./supabase-Dbqr141s.js")).supabase,
-	powersync: async () => (await import("./powersync-BFSbSElQ.js")).powersync
-};
-function isCommand(name) {
-	return Object.hasOwn(commands, name);
-}
-//#endregion
-export { listArg as a, globalArgs as i, commands as n, resolveArgs as o, isCommand as r, stringArg as s, COMMAND_DESCRIPTIONS as t };

package/dist/config-DLt6BvV7.js

@@ -1,36 +0,0 @@
-import { i as globalArgs, t as COMMAND_DESCRIPTIONS } from "./commands-Cpip4ULx.js";
-import { defineCommand } from "citty";
-//#region src/cli/commands/config.ts
-function config(ctx) {
-	return defineCommand({
-		meta: {
-			name: "config",
-			description: COMMAND_DESCRIPTIONS.config
-		},
-		args: {
-			...globalArgs,
-			print: {
-				type: "boolean",
-				description: "Print the effective config as JSON: the file, as written, and each default"
-			},
-			strict: {
-				type: "boolean",
-				description: "Exit 1 on warnings"
-			}
-		},
-		async run({ args: parsed }) {
-			const { runConfig } = await import("./config-report--Xb9APJS.js");
-			ctx.report(runConfig({
-				cwd: ctx.cwd,
-				config: ctx.config,
-				file: ctx.configPath,
-				warnings: ctx.configWarnings,
-				print: parsed.print === true,
-				json: ctx.json,
-				strict: parsed.strict === true
-			}));
-		}
-	});
-}
-//#endregion
-export { config };

package/dist/diff-Cnghh_Ip.js

@@ -1,48 +0,0 @@
-import { i as globalArgs, s as stringArg, t as COMMAND_DESCRIPTIONS } from "./commands-Cpip4ULx.js";
-import { defineCommand } from "citty";
-//#region src/cli/commands/diff.ts
-function diff(ctx) {
-	return defineCommand({
-		meta: {
-			name: "diff",
-			description: COMMAND_DESCRIPTIONS.diff
-		},
-		args: {
-			...globalArgs,
-			before: {
-				type: "positional",
-				required: false,
-				description: "A permissions.catalog.json or a module exporting policy"
-			},
-			after: {
-				type: "positional",
-				required: false,
-				description: "The same, for the new side"
-			},
-			impact: {
-				type: "boolean",
-				description: "Run the fixtures through both sides and report changed outcomes"
-			},
-			fixtures: {
-				type: "string",
-				description: "Fixtures file for --impact",
-				valueHint: "file"
-			}
-		},
-		async run({ args: parsed }) {
-			const result = await (await import("./diff-rpqoe7Ag.js")).runDiff({
-				cwd: ctx.cwd,
-				config: ctx.config,
-				sources: parsed._,
-				impact: parsed.impact === true,
-				fixtures: stringArg(parsed.fixtures),
-				json: ctx.json,
-				now: ctx.now,
-				io: ctx.io
-			});
-			ctx.report(result);
-		}
-	});
-}
-//#endregion
-export { diff };

package/dist/doctor-CuVJvhV_.js

@@ -1,53 +0,0 @@
-import { a as listArg, i as globalArgs, t as COMMAND_DESCRIPTIONS } from "./commands-Cpip4ULx.js";
-import { n as ask, t as CANCELLED } from "./prompt-CXYhLfsS.js";
-import { defineCommand } from "citty";
-//#region src/cli/commands/doctor.ts
-function doctor(ctx) {
-	return defineCommand({
-		meta: {
-			name: "doctor",
-			description: COMMAND_DESCRIPTIONS.doctor
-		},
-		args: {
-			...globalArgs,
-			only: {
-				type: "string",
-				description: "Check codes or groups to run, repeatable",
-				valueHint: "codes"
-			},
-			fix: {
-				type: "boolean",
-				description: "Apply safe fixes: install skills, regenerate the catalog"
-			},
-			strict: {
-				type: "boolean",
-				description: "Exit 1 on warnings too"
-			}
-		},
-		async run({ args: parsed, rawArgs }) {
-			let fix = parsed.fix === true;
-			if (fix && ctx.interactive) {
-				const answer = await ask(`Install the Agent Skills and regenerate the catalog in ${ctx.cwd}?`);
-				if (answer === void 0) {
-					ctx.report(CANCELLED);
-					return;
-				}
-				fix = answer;
-			}
-			const result = await (await import("./doctor-owlv6ddh.js")).runDoctor({
-				cwd: ctx.cwd,
-				config: ctx.config,
-				only: listArg(rawArgs, "only"),
-				json: ctx.json,
-				fix,
-				strict: parsed.strict === true,
-				color: ctx.color,
-				now: ctx.now,
-				io: ctx.io
-			});
-			ctx.report(result);
-		}
-	});
-}
-//#endregion
-export { doctor };

package/dist/duration-xK2jGFVc.js

@@ -1,25 +0,0 @@
-//#region src/core/duration.ts
-/**
-* Parses a duration string (`'30s'`, `'15m'`, `'4h'`, `'7d'`, `'2w'`) into
-* whole seconds. Fail-closed: a malformed or non-positive duration is
-* `undefined`, and every caller treats that as "no bound", never a default.
-*/
-const UNITS = {
-	s: 1,
-	m: 60,
-	h: 3600,
-	d: 86400,
-	w: 604800
-};
-function parseDuration(input) {
-	if (typeof input === "number") return Number.isFinite(input) && input > 0 ? Math.floor(input) : void 0;
-	if (typeof input !== "string") return;
-	const match = /^(\d+)(s|m|h|d|w)$/u.exec(input.trim());
-	if (match === null) return;
-	const amount = Number(match[1]);
-	const unit = UNITS[match[2] ?? ""];
-	if (unit === void 0 || !Number.isFinite(amount) || amount <= 0) return;
-	return amount * unit;
-}
-//#endregion
-export { parseDuration as t };

package/dist/errors-CWfoNg9N.js

@@ -1,47 +0,0 @@
-import { stripVTControlCharacters } from "node:util";
-//#region src/cli/errors.ts
-var CliError = class extends Error {
-	kind;
-	constructor(kind, message, options) {
-		super(message, options);
-		this.name = "CliError";
-		this.kind = kind;
-	}
-};
-const TITLES = {
-	usage: "Usage or configuration error",
-	unavailable: "A database or service the command needs did not answer",
-	failed: "The check the command ran found a problem"
-};
-function describeError(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-/** An unclassified error is a usage error: a module that throws while loading is the project's to fix. */
-function cliErrorKind(error) {
-	return error instanceof CliError ? error.kind : "usage";
-}
-function exitCodeOf(kind) {
-	return kind === "usage" ? 2 : 1;
-}
-function cliProblem(kind, message, command) {
-	return {
-		type: `https://permdock.com/problems/cli-${kind}`,
-		title: TITLES[kind],
-		detail: stripVTControlCharacters(message),
-		...command === void 0 ? {} : { command },
-		exitCode: exitCodeOf(kind)
-	};
-}
-/**
-* The result a command reports for a usage error it caught. A `CliError`
-* propagates instead, so `run()` prints it, as Problem Details under `--json`.
-*/
-function usageResult(error) {
-	if (error instanceof CliError) throw error;
-	return {
-		code: 2,
-		output: describeError(error)
-	};
-}
-//#endregion
-export { exitCodeOf as a, describeError as i, cliErrorKind as n, usageResult as o, cliProblem as r, CliError as t };

package/dist/errors-DRnGZHzF.js

@@ -1,30 +0,0 @@
-//#region src/approvals/errors.ts
-var ApprovalError = class extends Error {
-	name = "ApprovalError";
-	code;
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-	}
-};
-const CODES = /* @__PURE__ */ new Set([
-	"approval-not-found",
-	"approval-not-pending",
-	"approval-expired",
-	"approver-unauthenticated",
-	"approver-is-actor",
-	"approver-is-principal",
-	"approver-not-eligible",
-	"approver-repeated"
-]);
-function isApprovalErrorCode(value) {
-	return typeof value === "string" && CODES.has(value);
-}
-/** Matches by `name` and `code`, so an error from another copy of the module still maps. */
-function isApprovalError(value) {
-	if (!(value instanceof Error) || value.name !== "ApprovalError") return false;
-	const code = Reflect.get(value, "code");
-	return typeof code === "string" && CODES.has(code);
-}
-//#endregion
-export { isApprovalError as n, isApprovalErrorCode as r, ApprovalError as t };

package/dist/expiry-BoBJ8Tvc.js

@@ -1,7 +0,0 @@
-//#region src/core/expiry.ts
-/** `expiresAt` is Unix seconds; a membership with none never expires. */
-function expiredAt(item, now) {
-	return item.expiresAt !== void 0 && item.expiresAt <= now;
-}
-//#endregion
-export { expiredAt as t };