permdock 0.5.0 → 0.6.0

package/dist/mcp/index.js

@@ -3,16 +3,16 @@ import { n as freezeDeep } from "../freeze-CrU8nQeX.js";
 import { i as stepUpOf } from "../problem-details-cn5X30gZ.js";
 import { t as describe } from "../describe-BybMRY7A.js";
 import { m as annotationsFor } from "../permission-registry-Br4jSNVi.js";
-import { t as actorMayCallTool } from "../delegation-DaXVdDhM.js";
+import { t as actorMayCallTool } from "../delegation-j6-rc37o.js";
 import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
-import { a as hasScope, c as withApp, i as challengeScope, o as scopesReaching } from "../permdock-B9JxkBwC.js";
+import { a as hasScope, c as withApp, i as challengeScope, o as scopesReaching } from "../permdock-BrAscV28.js";
 import { t as anonymousSubject } from "../subject-BGoM5o8B.js";
 import { t as composeWraps } from "../wrap-gX61EtpB.js";
 import { l as protectedResourceMetadataUrl, r as bearerChallenge } from "../problem-CTviyH5L.js";
 import { t as clientNameOf } from "../clients-DjU5ABMy.js";
 import { n as mapClaimsToSubject } from "../map-claims-D3oRmTk0.js";
-import { r as instanceOptions } from "../build-instance-BMnAudHn.js";
-import { n as createAgentKernel, r as refusalText } from "../kernel-5JatXyND.js";
+import { r as instanceOptions } from "../build-instance-Bu_eDqYw.js";
+import { n as createAgentKernel, r as refusalText } from "../kernel-D0NVb1cK.js";
 import { t as boundedMap } from "../lru-8q4WZjBV.js";
 import { t as delegationFrom } from "../delegation-input-FTxMK3ji.js";
 import { n as deniedToolRefusal, r as toolErrorResult, t as approvalToolRefusal } from "../tool-refusal-CMLN5xhn.js";

package/dist/{migrate-BShP7Vf4.js → migrate-CIq4-E9F.js}

@@ -7,7 +7,7 @@ import "./sources-vs5dGOsS.js";
 import { a as RETIRE_MARKER } from "./markers-C6joDI3o.js";
 import { r as refuseDirty, t as applyFiles } from "./files-C5ZI27eV.js";
 import { f as writeOutputFiles, n as dataMigrationFile } from "./output-files-DhRBBE4n.js";
-import { r as HELPERS } from "./shared-CD11nBbC.js";
+import { r as HELPERS } from "./shared-BAK8t4Uo.js";
 import { o as sqlStatements } from "./deciding-columns-Sq12mEA6.js";
 import { i as retireSql, r as retirePlan } from "./retire-CALjIQ7e.js";
 import { existsSync, readFileSync } from "node:fs";

package/dist/nest/index.d.ts

@@ -1,9 +1,9 @@
-import { T as Policy, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
+import { T as Policy, rr as Principal } from "../policy-types-n0uRTsW8.js";
+import { w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
 import { n as RevocationFeed } from "../revocations-R07lFBnX.js";
-import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-BLd4MnBX.js";
-import { t as ServerAdapterOptions } from "../bind--9EFVYWF.js";
+import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CKQiCnON.js";
+import { t as ServerAdapterOptions } from "../bind-DOyrv6zi.js";
 import { r as sendResponse, t as NodeRequest } from "../http-B_LphE5Y.js";
 import { CanActivate, DynamicModule, ExceptionFilter, ExecutionContext, Type } from "@nestjs/common";
 //#region src/nest/http.d.ts

package/dist/nest/index.js

@@ -2,9 +2,9 @@ import { t as compact } from "../compact-CAf557ZB.js";
 import { n as PermDockValidationError } from "../validation-error-ZfUHbKvf.js";
 import { n as PermDockDeniedError, r as PermDockRevokedError, t as PermDockApprovalRequiredError } from "../errors-BKy0EfhN.js";
 import { c as writeReply, r as hasCredentials } from "../http-BBoKefeS.js";
-import { d as discoverViaSignatureAgent, m as webBotAuthVerifier, u as InvalidSignatureError } from "../evaluations-DZ2CbV5k.js";
-import { t as problemFromError } from "../map-error-TCAdw-eW.js";
-import { a as socketConnection, r as bindKernel } from "../bind-CZzhx-Vj.js";
+import { d as discoverViaSignatureAgent, m as webBotAuthVerifier, u as InvalidSignatureError } from "../evaluations-beAooV0n.js";
+import { t as problemFromError } from "../map-error-Dr70oA_3.js";
+import { a as socketConnection, r as bindKernel } from "../bind-CAvgUuKs.js";
 import { a as onRevoked, n as closeReason, t as POLICY_VIOLATION } from "../stream-CvdUS9V1.js";
 import { n as sendResponse, r as toRequest$1, t as isServerResponse } from "../http-ujKm0JXE.js";
 import { Catch, Controller, Get, Inject, Injectable, Module, Post, Req, Res, createParamDecorator } from "@nestjs/common";

package/dist/next/index.d.ts

@@ -1,12 +1,12 @@
-import { In as DenialReason, Nn as Decision, T as Policy, Vt as Snapshot, ir as Subject, j as PolicyVocabulary, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
-import { m as ApprovalStore } from "../types-CCpc2Dcv.js";
-import { t as InstanceOptions } from "../instance-options-Omfd793B.js";
-import { n as PermDockWrap } from "../wrap-Bd1Tejur.js";
-import { o as OtelWrap } from "../types-BqAKcRNW.js";
-import { n as DescribeMessages } from "../describe-BZUsixiL.js";
-import { a as snapshotHeaders, i as cacheLifeFor, n as SnapshotHeaders, o as snapshotTag, r as SnapshotHeadersOptions, t as CacheLifeForOptions } from "../snapshot-cache-DqK9eDmM.js";
+import { In as DenialReason, Nn as Decision, T as Policy, Vt as Snapshot, ar as Subject, j as PolicyVocabulary, rr as Principal } from "../policy-types-n0uRTsW8.js";
+import { w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
+import { m as ApprovalStore } from "../types-BdtSDbBO.js";
+import { t as InstanceOptions } from "../instance-options-BsVpyGIk.js";
+import { n as PermDockWrap } from "../wrap-C5jC6sKI.js";
+import { o as OtelWrap } from "../types-lUlG3TVd.js";
+import { n as DescribeMessages } from "../describe-B5qgDvEW.js";
+import { a as snapshotHeaders, i as cacheLifeFor, n as SnapshotHeaders, o as snapshotTag, r as SnapshotHeadersOptions, t as CacheLifeForOptions } from "../snapshot-cache-PXI-vGpY.js";
 import { ReactElement, ReactNode } from "react";
 //#region src/next/types.d.ts
 type NextSubjectInput = unknown;

package/dist/next/index.js

@@ -1,9 +1,9 @@
 import { t as compact } from "../compact-CAf557ZB.js";
-import { c as withApp } from "../permdock-B9JxkBwC.js";
+import { c as withApp } from "../permdock-BrAscV28.js";
 import { n as wrapPermDock } from "../wrap-gX61EtpB.js";
 import { n as snapshotHeaders, r as snapshotTag, t as cacheLifeFor } from "../snapshot-cache-DZHQ0KF6.js";
-import { n as resolveOrNull, t as buildInstance } from "../build-instance-BMnAudHn.js";
-import { o as evaluationsHandler, v as NO_GRANT } from "../evaluations-DZ2CbV5k.js";
+import { n as resolveOrNull, t as buildInstance } from "../build-instance-Bu_eDqYw.js";
+import { o as evaluationsHandler, v as NO_GRANT } from "../evaluations-beAooV0n.js";
 import { cache } from "react";
 import { jsx } from "react/jsx-runtime";
 import { forbidden, unauthorized, unstable_rethrow } from "#next/navigation";

package/dist/next/plugin.d.ts

@@ -1,4 +1,4 @@
-import { a as PermDockPluginOptions } from "../types-5Ut_pbKy.js";
+import { a as PermDockPluginOptions } from "../types-Dfv0aTER.js";
 //#region src/cli/plugin.d.ts
 /** Any object: Next's `NextConfig` is an interface, so no index signature. */
 type NextConfigLike = object;

package/dist/next/plugin.js

@@ -1,5 +1,5 @@
 import { a as describeError } from "../errors-CWTY6uih.js";
-import { n as createCollectScheduler, r as report, t as collectOnce } from "../watch-CszoTJMq.js";
+import { n as createCollectScheduler, r as report, t as collectOnce } from "../watch-vea54PRw.js";
 //#region src/cli/plugin.ts
 const PHASE_BUILD = "phase-production-build";
 const PHASE_DEV = "phase-development-server";

package/dist/node/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
-import { f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, r as Guard, s as ScopeGuard, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-BLd4MnBX.js";
-import { t as ServerAdapterOptions } from "../bind--9EFVYWF.js";
+import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-n0uRTsW8.js";
+import { w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
+import { f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, r as Guard, s as ScopeGuard, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CKQiCnON.js";
+import { t as ServerAdapterOptions } from "../bind-DOyrv6zi.js";
 import { i as toRequest, n as isServerResponse, r as sendResponse, t as NodeRequest } from "../http-B_LphE5Y.js";
 import { IncomingMessage, ServerResponse } from "node:http";
 //#region src/node/create.d.ts

package/dist/node/index.js

@@ -1,5 +1,5 @@
-import { d as discoverViaSignatureAgent, m as webBotAuthVerifier, u as InvalidSignatureError } from "../evaluations-DZ2CbV5k.js";
-import { r as bindKernel } from "../bind-CZzhx-Vj.js";
+import { d as discoverViaSignatureAgent, m as webBotAuthVerifier, u as InvalidSignatureError } from "../evaluations-beAooV0n.js";
+import { r as bindKernel } from "../bind-CAvgUuKs.js";
 import { n as sendResponse, r as toRequest, t as isServerResponse } from "../http-ujKm0JXE.js";
 //#region src/node/create.ts
 const nodeRequest = (req) => req;

package/dist/openai/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
-import { u as ApprovalRequest } from "../types-CCpc2Dcv.js";
-import { o as AgentAdapterOptions, t as AgentPermDock } from "../create-BDS7wc3y.js";
+import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-n0uRTsW8.js";
+import { w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
+import { u as ApprovalRequest } from "../types-BdtSDbBO.js";
+import { o as AgentAdapterOptions, t as AgentPermDock } from "../create-CBMmFie-.js";
 //#region src/openai/create.d.ts
 /** The app context passed to `run(agent, input, { context })`. */
 type OpenAiContext = {

package/dist/openai/index.js

@@ -1,7 +1,7 @@
 import { t as compact } from "../compact-CAf557ZB.js";
-import { c as withApp } from "../permdock-B9JxkBwC.js";
-import { t as approvalTokenOf } from "../kernel-5JatXyND.js";
-import { t as agentRuntime } from "../create-C3b4B5eF.js";
+import { c as withApp } from "../permdock-BrAscV28.js";
+import { t as approvalTokenOf } from "../kernel-D0NVb1cK.js";
+import { t as agentRuntime } from "../create-CGm28gyI.js";
 //#region src/openai/create.ts
 function appContext(runContext) {
 	const context = runContext?.context;

package/dist/openapi/index.d.ts

@@ -1,6 +1,6 @@
-import { T as Policy, lr as Condition, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { E as PermissionTree, w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { a as ProblemDetails } from "../errors-C2PXIv4c.js";
+import { T as Policy, rr as Principal, ur as Condition } from "../policy-types-n0uRTsW8.js";
+import { E as PermissionTree, w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { a as ProblemDetails } from "../errors-DH5QEGXh.js";
 import { StandardJSONSchemaV1, StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/openapi/types.d.ts
 type OpenApiTarget = "3.1" | "3.2" | "3.3";

package/dist/{openapi-ahr8rHu3.js → openapi-C4dDTVEd.js}

@@ -80,7 +80,7 @@ const emit = defineLeaf({
 		}
 	},
 	async run(ctx, { flags }) {
-		return (await import("./openapi-DTaEmTSW.js")).runOpenapi({
+		return (await import("./openapi-DD1SV-5-.js")).runOpenapi({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			rest: ["emit"],

package/dist/{openapi-DTaEmTSW.js → openapi-DD1SV-5-.js}

@@ -1,6 +1,6 @@
 import { r as isRecord } from "./compact-CAf557ZB.js";
 import { a as getResource, n as findPermission } from "./permission-registry-Br4jSNVi.js";
-import { n as definePolicy } from "./policy-DLZJ5gAp.js";
+import { n as definePolicy } from "./policy-DbM5YYtV.js";
 import { i as configError } from "./errors-CWTY6uih.js";
 import { i as readJsonFile, s as writeFileEnsuringDir } from "./files-D_JIzUrP.js";
 import { a as loadModule, n as asPolicy, s as pickNamed, t as asPermissionTree } from "./load-DFS_ry0W.js";

package/dist/{operations-CxybZErY.d.ts → operations-X0VM7F3m.d.ts}

@@ -1,4 +1,4 @@
-import { E as PermissionTree, w as Permission } from "./vocabulary-D6lPdb4Z.js";
+import { E as PermissionTree, w as Permission } from "./vocabulary-CN8H_9UF.js";
 //#region src/core/operation-risks.d.ts
 type OperationRisk = "low" | "medium" | "high" | "critical";
 /** Every `meta.risk` level, lowest first. */

package/dist/orpc/index.d.ts

@@ -1,10 +1,10 @@
-import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-DzwivBgR.js";
-import { w as Permission } from "../vocabulary-D6lPdb4Z.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
+import { T as Policy, j as PolicyVocabulary, rr as Principal } from "../policy-types-n0uRTsW8.js";
+import { w as Permission } from "../vocabulary-CN8H_9UF.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
 import { n as RevocationFeed } from "../revocations-R07lFBnX.js";
-import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-BLd4MnBX.js";
-import { t as ServerAdapterOptions } from "../bind--9EFVYWF.js";
-import { t as StreamProtectOptions } from "../stream-7-xmnf3U.js";
+import { D as ConnectionOptions, T as Connection, i as OpenApiHooks } from "../server-types-CKQiCnON.js";
+import { t as ServerAdapterOptions } from "../bind-DOyrv6zi.js";
+import { t as StreamProtectOptions } from "../stream-CeCMJmBB.js";
 import { Middleware } from "@orpc/server";
 //#region src/orpc/create.d.ts
 type OrpcMiddlewareOpts<TCtx extends object = object, TInput = unknown> = {

package/dist/orpc/index.js

@@ -1,10 +1,10 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { o as isPermission } from "../permission-registry-Br4jSNVi.js";
 import { o as problemMessage } from "../http-BBoKefeS.js";
-import { t as problemFromError } from "../map-error-TCAdw-eW.js";
-import { n as attached } from "../bind-CZzhx-Vj.js";
+import { t as problemFromError } from "../map-error-Dr70oA_3.js";
+import { n as attached } from "../bind-CAvgUuKs.js";
 import { i as isAsyncIterable, o as reloadAfter } from "../stream-CvdUS9V1.js";
-import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-aPyNi6tA.js";
+import { i as rpcCode, n as guardStream, r as problemBody, t as bindRpcKernel } from "../rpc-VSl5ylaQ.js";
 import { ORPCError } from "@orpc/server";
 //#region src/orpc/create.ts
 function toOpts(mw, input, next) {

package/dist/otel/index.d.ts

@@ -1,6 +1,6 @@
-import { j as PolicyVocabulary } from "../policy-types-DzwivBgR.js";
-import { r as PermDock } from "../permdock-D7eeLJER.js";
-import { a as OtelOptions, i as OtelApi, n as GEN_AI_TOOL_CALL_ID, o as OtelWrap, r as GEN_AI_TOOL_NAME, s as StructuralLogger, t as GENAI_SEMCONV_PIN } from "../types-BqAKcRNW.js";
+import { j as PolicyVocabulary } from "../policy-types-n0uRTsW8.js";
+import { r as PermDock } from "../permdock-SV8ZINYT.js";
+import { a as OtelOptions, i as OtelApi, n as GEN_AI_TOOL_CALL_ID, o as OtelWrap, r as GEN_AI_TOOL_NAME, s as StructuralLogger, t as GENAI_SEMCONV_PIN } from "../types-lUlG3TVd.js";
 //#region src/otel/instrument.d.ts
 /**
  * Listens on one instance. Spans carry no duration and no histogram is

package/dist/{output-Dyw8fyPF.js → output-1im__-08.js}

@@ -1,5 +1,5 @@
 import { s as cliVersion } from "./version-CEbQ5UeM.js";
-import { t as DOCS_BASE } from "./manifest-CtKR3GXL.js";
+import { t as DOCS_BASE } from "./manifest-dvL2XEe1.js";
 //#region src/cli/core/output.ts
 const CLI_RESULT_SCHEMA = "https://permdock.com/schemas/cli-result-v1.json";
 function envelope(input) {