permdock 0.6.0 → 0.8.0

package/dist/{catalog-fingerprint-CCP0-yQS.js → catalog-fingerprint-e6aCWosn.js}

@@ -1,11 +1,11 @@
 import { r as isRecord, t as compact } from "./compact-CAf557ZB.js";
-import { n as freezeDeep } from "./freeze-CrU8nQeX.js";
-import { n as isForbiddenKey } from "./paths-DXSHAMIa.js";
-import { l as isRfc3339 } from "./time-DkWjdL98.js";
-import { t as canonicalJson } from "./canonical-json-BC8_nMTw.js";
-import { r as sha256Digest } from "./sha256-D9ihqmvd.js";
-import { C as EVENT_SCHEMA_IDS, T as SINK_EVENT_SCHEMAS, i as RESERVED_CLOUD_EVENT_TYPES, l as isAbsoluteUri, r as CLOUD_EVENT_TYPES, s as cloudEventType, u as isTraceparent, v as CATALOG_EVENT_SCHEMA } from "./sink-BEZSlMS_.js";
-import { n as copyJson, t as checkSchema } from "./json-schema-B-vAwlde.js";
+import { n as freezeDeep } from "./freeze-jjan0lCv.js";
+import { n as isForbiddenKey } from "./paths-CUvURzHp.js";
+import { l as isRfc3339 } from "./time-nR1JesoH.js";
+import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
+import { r as sha256Digest } from "./sha256-C-4WXKIu.js";
+import { C as EVENT_SCHEMA_IDS, T as SINK_EVENT_SCHEMAS, i as RESERVED_CLOUD_EVENT_TYPES, l as isAbsoluteUri, r as CLOUD_EVENT_TYPES, s as cloudEventType, u as isTraceparent, v as CATALOG_EVENT_SCHEMA } from "./sink-D9_vh372.js";
+import { n as copyJson, t as checkSchema } from "./json-schema-BPGa-RjQ.js";
 //#region src/core/parse-sink-events.ts
 function hasUnsafeKey(value) {
 	if (Array.isArray(value)) return value.some(hasUnsafeKey);
@@ -32,8 +32,8 @@ function rulesHold(event) {
 	return true;
 }
 /**
-* Validates one untrusted sink event against its family's schema and returns
-* a frozen copy, or `null` for anything else. Never throws.
+* Validates one untrusted sink event against its family's schema and returns a
+* frozen copy, or `null` for anything else. Never throws.
 */
 function parseSinkEvent(value) {
 	if (!isRecord(value)) return null;
@@ -46,8 +46,8 @@ function parseSinkEvent(value) {
 }
 /**
 * Validates an untrusted list of sink events, such as a request body a sink
-* receiver read. Each event that fails its schema is dropped, and a value
-* that is not an array yields no events. Never throws.
+* receiver read. Each event that fails its schema is dropped, and a value that
+* is not an array yields no events. Never throws.
 */
 function parseSinkEvents(value) {
 	if (!Array.isArray(value)) return Object.freeze([]);
@@ -56,7 +56,10 @@ function parseSinkEvents(value) {
 		return event === null ? [] : [event];
 	}));
 }
-/** Validates the data of a `com.permdock.catalog.*` CloudEvent; `null` when it does not match. */
+/**
+* Validates the data of a `com.permdock.catalog.*` CloudEvent; `null` when it
+* does not match.
+*/
 function parseCatalogEventData(value) {
 	const copy = jsonMatching(value, CATALOG_EVENT_SCHEMA);
 	return copy === null ? null : freezeDeep(copy);
@@ -141,9 +144,10 @@ function fingerprintInput(catalog) {
 	return out;
 }
 /**
-* The catalog v1 fingerprint: the `sha-256:` digest of its RFC 8785 JSON without `generatedAt`, `generator`, `fingerprint`
-* and every `permissions[].usages`, so neither the CLI version, the clock nor
-* call sites change it.
+* The catalog v1 fingerprint: the `sha-256:` digest of its RFC 8785 JSON
+* without `generatedAt`, `generator`, `fingerprint` and every
+* `permissions[].usages`, so neither the CLI version, the clock nor call sites
+* change it.
 */
 function catalogFingerprint(catalog) {
 	if (!isRecord(catalog)) throw new TypeError("PermDock: a catalog must be an object");

package/dist/catalog-mRQQQhNK.js

@@ -0,0 +1 @@
+export { t as catalogFile, n as runCatalog } from "./catalog-BFpz2EmT.js";

package/dist/catalog-operations-Dadrl7Z-.js

@@ -0,0 +1,60 @@
+import { r as isRecord } from "./compact-CAf557ZB.js";
+import { k as isOperationEffect } from "./src-DZ0l9UAg.js";
+import { o as isPermission } from "./permission-registry-B8tYxPIt.js";
+import { r as isOperationRisk } from "./permissions-CVXmRILq.js";
+import { i as configError } from "./errors-Vpu6rKHl.js";
+import { a as rel } from "./files-BSjrtIHw.js";
+import { a as loadModule, s as pickNamed } from "./load-DjSU5KXO.js";
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+//#region src/cli/catalog-operations.ts
+function metaOf(name, value) {
+	const fail = (field) => {
+		throw configError(`PermDock CLI: operations.${name}.meta${field} is invalid`);
+	};
+	if (!isRecord(value)) return fail("");
+	const { risk, effects, title } = value;
+	if (risk !== void 0 && !isOperationRisk(risk)) return fail(".risk");
+	if (effects !== void 0 && (!Array.isArray(effects) || !effects.every(isOperationEffect))) return fail(".effects");
+	if (title !== void 0 && typeof title !== "string") return fail(".title");
+	return {
+		...risk === void 0 ? {} : { risk },
+		...effects === void 0 ? {} : { effects },
+		...title === void 0 ? {} : { title }
+	};
+}
+/**
+* The catalog entries of a `defineOperations` map, in definition order. Throws
+* for a value that is not one, such as a module that exports the definitions
+* object instead of the map.
+*/
+function catalogOperations(value) {
+	if (!isRecord(value)) throw configError("PermDock CLI: operations export is not an operation map");
+	const out = [];
+	for (const name of Object.keys(value)) {
+		const operation = value[name];
+		if (!isRecord(operation) || operation["name"] !== name || !isPermission(operation["permission"])) throw configError(`PermDock CLI: operations.${name} is not an operation; export the defineOperations result`);
+		const results = operation["results"];
+		if (results !== void 0 && !isPermission(results)) throw configError(`PermDock CLI: operations.${name}.results is not a permission`);
+		out.push({
+			name,
+			permission: operation["permission"].key,
+			...results === void 0 ? {} : { results: results.key },
+			meta: metaOf(name, operation["meta"])
+		});
+	}
+	return out;
+}
+/**
+* The configured operations module's catalog entries; `undefined` without one.
+* Throws when it is missing or does not load.
+*/
+async function loadConfiguredOperations(cwd, path, options) {
+	if (path === void 0) return;
+	const abs = resolve(cwd, path);
+	if (!existsSync(abs)) throw configError(`PermDock CLI: operations module not found: ${rel(cwd, abs)}`);
+	const mod = await loadModule(abs, options);
+	return catalogOperations(pickNamed(mod, ["operations"]));
+}
+//#endregion
+export { loadConfiguredOperations as t };

package/dist/{create-CQWIpUG-.js → challenge-DImNcR7B.js}

@@ -1,17 +1,24 @@
 import { r as isRecord, t as compact } from "./compact-CAf557ZB.js";
-import { n as freezeDeep } from "./freeze-CrU8nQeX.js";
-import { i as dateAt, p as nowSeconds } from "./time-DkWjdL98.js";
-import { s as policyDocumentFromClaims } from "./hosted-B46-5LYE.js";
-import { l as isApprovalErrorCode, s as ApprovalError, t as APPROVAL_HEADER } from "./types-DqzsnlSA.js";
-import { h as toCloudEvent, l as isAbsoluteUri } from "./sink-BEZSlMS_.js";
-import { n as parseCatalogEventData, t as catalogFingerprint } from "./catalog-fingerprint-CCP0-yQS.js";
-import { t as parseApprovalRequest } from "./parse-request-D_tUXG6M.js";
+import { n as freezeDeep } from "./freeze-jjan0lCv.js";
+import { i as dateAt, p as nowSeconds } from "./time-nR1JesoH.js";
+import { u as policyDocumentFromClaims } from "./hosted-D0IzESu_.js";
+import { l as isApprovalErrorCode, s as ApprovalError, t as APPROVAL_HEADER } from "./types-CcUXciSj.js";
+import { h as toCloudEvent, l as isAbsoluteUri } from "./sink-D9_vh372.js";
+import { n as parseCatalogEventData, t as catalogFingerprint } from "./catalog-fingerprint-e6aCWosn.js";
+import { t as parseApprovalRequest } from "./parse-request-CwCZpyjV.js";
 import { t as timeoutSignal } from "./timeout-D51niuQP.js";
+import { t as CLOUD_BASE_URL } from "./base-url-BQbddZO5.js";
 //#region src/cloud/approver.ts
 const APPROVER_HEADER = "PermDock-Approver";
-/** The RFC 9396 `authorization_details` type that binds an approver token to one verdict. */
+/**
+* The RFC 9396 `authorization_details` type that binds an approver token to one
+* verdict.
+*/
 const APPROVAL_DETAIL_TYPE = "permdock_approval";
-/** Seconds an approver token lives: it proves one resolve call, and the Cloud refuses a replayed `jti`. */
+/**
+* Seconds an approver token lives: it proves one resolve call, and the Cloud
+* refuses a replayed `jti`.
+*/
 const APPROVER_TTL = 60;
 async function facts(read, request, verdict, fallback) {
 	if (read === void 0) return fallback ?? [];
@@ -24,7 +31,10 @@ async function facts(read, request, verdict, fallback) {
 function unauthenticated(detail) {
 	return new ApprovalError("approver-unauthenticated", detail);
 }
-/** A rejection only denies, so the Cloud takes a `system` one without an approver token. */
+/**
+* A rejection only denies, so the Cloud takes a `system` one without an
+* approver token.
+*/
 function isSystemRejection(verdict) {
 	return verdict.status === "rejected" && verdict.by.actor?.kind === "system";
 }
@@ -35,10 +45,10 @@ function isSystemRejection(verdict) {
 * the request id, the verdict status, `vouched`, and the approver's
 * `permissions` and `relations`. With the `roles`, `memberships` and `tenant`
 * claims they are the only facts the Cloud checks a request's `approvers`
-* against in bring-your-own mode. `target` runs only after the
-* approver checks pass. Throws an `ApprovalError` before any resolve when the
-* approver cannot be proven: no signer, no principal, an actor, a failed
-* lookup or a signer failure.
+* against in bring-your-own mode. `target` runs only after the approver checks
+* pass. Throws an `ApprovalError` before any resolve when the approver cannot
+* be proven: no signer, no principal, an actor, a failed lookup or a signer
+* failure.
 */
 async function approverHeaders(verdict, options, issuer, target) {
 	if (isSystemRejection(verdict)) return {};
@@ -79,7 +89,10 @@ async function approverHeaders(verdict, options, issuer, target) {
 }
 //#endregion
 //#region src/cloud/request.ts
-/** Milliseconds a PermDock Cloud request may take; a slower one fails like an unreachable Cloud. */
+/**
+* Milliseconds a PermDock Cloud request may take; a slower one fails like an
+* unreachable Cloud.
+*/
 const CLOUD_TIMEOUT_MS = 1e4;
 function readEnv(name) {
 	const value = globalThis.process?.env?.[name];
@@ -92,44 +105,99 @@ function firstNonEmpty(...values) {
 function trimSlash(value) {
 	return value.endsWith("/") ? value.slice(0, -1) : value;
 }
-/**
-* The environment URL and JWK Set URL `cloud()` uses, resolved with the same
-* fallbacks (`PERMDOCK_CLOUD_URL`; `PERMDOCK_CLOUD_ENV`, `VERCEL_ENV`, `production`).
-*/
-function cloudEndpoints(options = {}) {
-	const url = trimSlash(firstNonEmpty(options.url, readEnv("PERMDOCK_CLOUD_URL")));
-	if (url === "") throw new Error("PermDock: cloud() requires url and key.");
-	const environment = firstNonEmpty(options.environment, readEnv("PERMDOCK_CLOUD_ENV"), readEnv("VERCEL_ENV"), "production");
+function cloudUrl(options) {
+	return trimSlash(firstNonEmpty(options.url, readEnv("PERMDOCK_CLOUD_URL"), CLOUD_BASE_URL));
+}
+function endpointsOf(url, environment) {
 	const issuer = `${url}/v1/environments/${encodeURIComponent(environment)}`;
 	return Object.freeze({
 		issuer,
 		jwks: `${issuer}/.well-known/jwks.json`
 	});
 }
-/** The authenticated connection every `permdock/cloud` client shares. Throws without a URL or key. */
+/**
+* `options.environment`, else `PERMDOCK_CLOUD_ENV`, else `""` for the key-bound
+* lookup.
+*/
+function configuredEnvironment(options) {
+	return firstNonEmpty(options.environment, readEnv("PERMDOCK_CLOUD_ENV"));
+}
+/**
+* The environment URL and JWK Set URL `cloud()` uses when the environment is
+* configured: `environment`, else `PERMDOCK_CLOUD_ENV`. Throws when neither is
+* set; `resolveCloudEndpoints` then asks the Cloud which environment the key
+* belongs to.
+*/
+function cloudEndpoints(options = {}) {
+	const url = cloudUrl(options);
+	const environment = configuredEnvironment(options);
+	if (environment === "") throw new Error("PermDock: cloudEndpoints() requires environment or PERMDOCK_CLOUD_ENV; resolveCloudEndpoints() asks the Cloud for the key's environment.");
+	return endpointsOf(url, environment);
+}
+async function keyEnvironment(url, key, fetchFn) {
+	const response = await fetchFn(`${url}/v1/environment`, {
+		headers: {
+			authorization: `Bearer ${key}`,
+			accept: "application/json"
+		},
+		signal: timeoutSignal(CLOUD_TIMEOUT_MS)
+	});
+	if (!response.ok) throw new Error(`PermDock Cloud did not name the key's environment: HTTP ${String(response.status)}`);
+	const body = await response.json();
+	if (!isRecord(body) || typeof body["environment"] !== "string") throw new Error("PermDock Cloud answered GET /v1/environment in an unknown shape");
+	const endpoints = endpointsOf(url, body["environment"]);
+	if (body["issuer"] !== endpoints.issuer) throw new Error(`PermDock Cloud named issuer ${String(body["issuer"])}, not ${endpoints.issuer}`);
+	return endpoints;
+}
+/**
+* The authenticated connection every `permdock/cloud` client shares. Throws
+* without a key.
+*/
 function cloudConnection(options) {
 	const key = firstNonEmpty(options.key, readEnv("PERMDOCK_CLOUD_KEY"));
-	if (key === "") throw new Error("PermDock: cloud() requires url and key.");
-	const endpoints = cloudEndpoints(options);
+	const url = cloudUrl(options);
+	if (key === "") throw new Error("PermDock: cloud() requires a key (PERMDOCK_CLOUD_KEY).");
+	const environment = configuredEnvironment(options);
+	const known = environment === "" ? void 0 : endpointsOf(url, environment);
 	const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);
-	const request = (path, init = {}, accept, contentType) => {
+	let pending;
+	const endpoints = () => {
+		if (known !== void 0) return Promise.resolve(known);
+		pending ??= keyEnvironment(url, key, fetchFn).catch((error) => {
+			pending = void 0;
+			throw error;
+		});
+		return pending;
+	};
+	const request = async (path, init = {}, accept, contentType) => {
+		const { issuer } = await endpoints();
 		const headers = new Headers();
 		headers.set("authorization", `Bearer ${key}`);
 		headers.set("content-type", "application/json");
 		for (const [name, value] of new Headers(init.headers)) headers.set(name, value);
 		if (accept !== void 0) headers.set("accept", accept);
 		if (contentType !== void 0) headers.set("content-type", contentType);
-		return fetchFn(`${endpoints.issuer}${path}`, {
+		return fetchFn(`${issuer}${path}`, {
 			...init,
 			headers,
 			signal: timeoutSignal(CLOUD_TIMEOUT_MS, init.signal)
 		});
 	};
 	return Object.freeze({
-		...endpoints,
+		known,
+		endpoints,
 		request
 	});
 }
+/**
+* The environment URL and JWK Set URL for a key: `cloudEndpoints(options)` when
+* the environment is configured, else the environment `GET /v1/environment`
+* names for `key` (`PERMDOCK_CLOUD_KEY`). Rejects when the Cloud does not
+* answer or answers another issuer.
+*/
+async function resolveCloudEndpoints(options = {}) {
+	return await cloudConnection(options).endpoints();
+}
 /** `true` for a compact JWS: three dot-separated parts, not JSON. */
 function isCompactJws(value) {
 	return !value.startsWith("{") && value.split(".").length === 3;
@@ -162,7 +230,10 @@ function asApproval(value) {
 	if (!isRecord(value) || value["v"] !== 1 || typeof value["token"] !== "string") return null;
 	return value;
 }
-/** The refusal PermDock Cloud names in its body, else the one its status implies. */
+/**
+* The refusal PermDock Cloud names in its body, else the one its status
+* implies.
+*/
 async function approvalErrorFrom(response) {
 	let body;
 	try {
@@ -182,7 +253,7 @@ function approvalErrorFromStatus(status) {
 	return new ApprovalError("approval-not-found", "approval was not found");
 }
 function cloud(options = {}) {
-	const { issuer: root, jwks, request } = cloudConnection(options);
+	const { known, endpoints, request } = cloudConnection(options);
 	const flushAt = options.flushAt ?? 32;
 	const waitUntil = options.waitUntil;
 	const approvals = {
@@ -211,7 +282,7 @@ function cloud(options = {}) {
 			}
 		},
 		async resolve(token, verdict) {
-			const approver = await approverHeaders(verdict, options.approver, root, async () => {
+			const approver = await approverHeaders(verdict, options.approver, (await endpoints()).issuer, async () => {
 				const response = await request("/approvals/by-token", { headers: { [APPROVAL_HEADER]: token } });
 				if (!response.ok) throw await approvalErrorFrom(response);
 				const found = parseApprovalRequest(await response.json());
@@ -306,8 +377,7 @@ function cloud(options = {}) {
 		}
 	};
 	const capacity = options.capacity ?? 1e4;
-	const source = options.source ?? root;
-	if (!isAbsoluteUri(source)) throw new TypeError("PermDock: cloud() source is an absolute URI");
+	if (options.source !== void 0 && !isAbsoluteUri(options.source)) throw new TypeError("PermDock: cloud() source is an absolute URI");
 	const pending = [];
 	const bound = () => {
 		if (pending.length > capacity) pending.splice(0, pending.length - capacity);
@@ -316,6 +386,7 @@ function cloud(options = {}) {
 		if (pending.length === 0) return;
 		const events = pending.splice(0);
 		try {
+			const source = options.source ?? (await endpoints()).issuer;
 			if (!(await request("/decisions", {
 				method: "POST",
 				body: JSON.stringify(events.map((event) => toCloudEvent(event, { source })))
@@ -342,6 +413,13 @@ function cloud(options = {}) {
 		return text;
 	} });
 	let document = null;
+	let built;
+	const policyVerifier = (resolved) => {
+		const verifier = options.verifier;
+		if (typeof verifier !== "function") return verifier;
+		built ??= verifier(resolved);
+		return built;
+	};
 	return freezeDeep({
 		approvals,
 		sink,
@@ -351,10 +429,15 @@ function cloud(options = {}) {
 				return document;
 			},
 			async refresh() {
-				const verifier = options.verifier;
-				if (verifier === void 0) return;
+				if (options.verifier === void 0) return;
 				let response;
+				let root;
+				let verifier;
 				try {
+					const resolved = await endpoints();
+					root = resolved.issuer;
+					verifier = policyVerifier(resolved);
+					if (verifier === void 0) return;
 					response = await request("/policy");
 				} catch {
 					return;
@@ -395,9 +478,44 @@ function cloud(options = {}) {
 			if (parsed === null) throw new Error("PermDock Cloud answered the catalog push in an unknown shape");
 			return parsed;
 		} },
-		issuer: root,
-		jwks
+		endpoints,
+		...known
 	});
 }
 //#endregion
-export { approverHeaders as a, isCompactJws as i, cloudConnection as n, cloudEndpoints as r, cloud as t };
+//#region src/cloud/challenge.ts
+const SCHEME = /^[\s,]*([!#$%&'*+.^_`|~0-9A-Za-z-]+)(?=[\s,]|$)/u;
+const PARAM = /^\s*([!#$%&'*+.^_`|~0-9A-Za-z-]+)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([!#$%&'*+.^_`|~0-9A-Za-z-]+))\s*(?:,|$)/u;
+const TOKEN68 = /^\s*[A-Za-z0-9._~+/-]+=*\s*(?:,|$)/u;
+/**
+* The first `Bearer` challenge in `header` (RFC 9110 section 11.6.1 syntax), or
+* `null`. Other schemes in the same field are skipped.
+*/
+function bearerChallenge(header) {
+	if (header === null) return null;
+	let rest = header;
+	while (rest.trim() !== "") {
+		const scheme = SCHEME.exec(rest);
+		if (scheme === null) return null;
+		rest = rest.slice(scheme[0].length);
+		const entries = [];
+		let param = PARAM.exec(rest);
+		if (param === null) {
+			const token68 = TOKEN68.exec(rest);
+			rest = token68 === null ? rest : rest.slice(token68[0].length);
+		}
+		while (param !== null) {
+			const quoted = param[2];
+			entries.push([(param[1] ?? "").toLowerCase(), quoted === void 0 ? param[3] ?? "" : quoted.replaceAll(/\\(.)/gu, "$1")]);
+			rest = rest.slice(param[0].length);
+			param = PARAM.exec(rest);
+		}
+		if ((scheme[1] ?? "").toLowerCase() === "bearer") return Object.freeze({
+			scheme: "bearer",
+			params: Object.freeze(Object.fromEntries(entries))
+		});
+	}
+	return null;
+}
+//#endregion
+export { isCompactJws as a, cloudEndpoints as i, cloud as n, resolveCloudEndpoints as o, cloudConnection as r, approverHeaders as s, bearerChallenge as t };

package/dist/chat/index.d.ts

@@ -1,2 +1,2 @@
-import { a as ChatCommandResult, c as createPermDock, d as SubjectFromChatOptions, f as isChatAuthor, i as ChatCommandContext, l as ChatAuthor, n as ChatActionResult, o as ChatPermDock, p as subjectFromChat, r as ChatCommand, s as ChatPermDockOptions, t as ChatAction, u as ChatPrincipal } from "../create-B30OMUOJ.js";
+import { a as ChatCommandResult, c as createPermDock, d as SubjectFromChatOptions, f as isChatAuthor, i as ChatCommandContext, l as ChatAuthor, n as ChatActionResult, o as ChatPermDock, p as subjectFromChat, r as ChatCommand, s as ChatPermDockOptions, t as ChatAction, u as ChatPrincipal } from "../create-BVq1lNQE.js";
 export { type ChatAction, type ChatActionResult, type ChatAuthor, type ChatCommand, type ChatCommandContext, type ChatCommandResult, type ChatPermDock, type ChatPermDockOptions, type ChatPrincipal, type SubjectFromChatOptions, createPermDock, isChatAuthor, subjectFromChat };

package/dist/chat/index.js

@@ -1,11 +1,11 @@
 import { t as compact } from "../compact-CAf557ZB.js";
-import { n as freezeDeep } from "../freeze-CrU8nQeX.js";
-import { n as loadPrincipalByIdentity } from "../principal-source-pHneukrx.js";
-import { f as nowMillis } from "../time-DkWjdL98.js";
-import { c as withApp, t as getPermDock } from "../permdock-BrAscV28.js";
-import { c as isApprovalError } from "../types-DqzsnlSA.js";
-import { a as requestApproval, o as resolveApproval, s as resumeDecision } from "../helpers-CBYVMjwh.js";
-import { t as approvalPrompt } from "../approval-prompt-Dg5LeAcT.js";
+import { n as freezeDeep } from "../freeze-jjan0lCv.js";
+import { n as loadPrincipalByIdentity } from "../principal-source-C6N60GtM.js";
+import { f as nowMillis } from "../time-nR1JesoH.js";
+import { l as withApp, t as getPermDock } from "../permdock-L-_I_3zP.js";
+import { c as isApprovalError } from "../types-CcUXciSj.js";
+import { a as requestApproval, o as resolveApproval, s as resumeDecision } from "../helpers-DJicaG6f.js";
+import { t as approvalPrompt } from "../approval-prompt-B8hQY69x.js";
 //#region src/chat/subject.ts
 function nonEmpty(value) {
 	return typeof value === "string" && value !== "";
@@ -17,7 +17,10 @@ function isChatAuthor(value) {
 	const workspace = Reflect.get(value, "workspace");
 	return nonEmpty(provider) && nonEmpty(userId) && (workspace === void 0 || nonEmpty(workspace));
 }
-/** The principal linked to `author`, or `null` for an unlinked or malformed author. Never throws. */
+/**
+* The principal linked to `author`, or `null` for an unlinked or malformed
+* author. Never throws.
+*/
 function principalFromChat(author, principals) {
 	if (!isChatAuthor(author)) return Promise.resolve(null);
 	return loadPrincipalByIdentity(principals, compact({
@@ -28,8 +31,8 @@ function principalFromChat(author, principals) {
 	}));
 }
 /**
-* The subject a chat author acts as: the principal its identity link
-* names, or anonymous when there is no link. Never throws.
+* The subject a chat author acts as: the principal its identity link names, or
+* anonymous when there is no link. Never throws.
 */
 async function subjectFromChat(author, options) {
 	return {

package/dist/chat-sdk/index.d.ts

@@ -1,17 +1,20 @@
-import { n as ApprovalUrl, t as ApprovalPrompt } from "../approval-prompt-DvSSPQJX.js";
-import { l as ChatAuthor, n as ChatActionResult, o as ChatPermDock } from "../create-B30OMUOJ.js";
-import { n as ChatTransport } from "../types-BtHtcKMr.js";
+import { n as ApprovalUrl, t as ApprovalPrompt } from "../approval-prompt-PYagyQUj.js";
+import { l as ChatAuthor, n as ChatActionResult, o as ChatPermDock } from "../create-BVq1lNQE.js";
+import { n as ChatTransport } from "../types-yUuPR5Hy.js";
 import { ActionEvent, Author, CardElement } from "chat";
 //#region src/chat-sdk/author.d.ts
 type ChatSdkAuthorOptions = {
-  /** The platform workspace the bot is installed in, matched against identity links. */
+  /**
+   * The platform workspace the bot is installed in, matched against identity
+   * links.
+   */
   readonly workspace?: string;
 };
 /**
  * The `ChatAuthor` of a Chat SDK message or action, named by its adapter
- * (`adapter.name`, such as `slack`). `null` for a bot, this bot, the
- * platform itself or an empty id. Reads only `userId`: the email and display
- * name never identify anyone.
+ * (`adapter.name`, such as `slack`). `null` for a bot, this bot, the platform
+ * itself or an empty id. Reads only `userId`: the email and display name never
+ * identify anyone.
  */
 export declare function chatSdkAuthor(user: Pick<Author, "userId" | "isBot" | "isMe" | "isSystem">, adapter: {
   readonly name: string;
@@ -23,17 +26,23 @@ export declare const APPROVE_ACTION = "permdock:approve";
 /** The `actionId` of the card's reject button; its `value` is the request id. */
 export declare const REJECT_ACTION = "permdock:reject";
 type ApprovalCardOptions = {
-  /** The app's approval page: a base URL the request id is appended to, or a function of the prompt. Must be https. */
+  /**
+   * The app's approval page: a base URL the request id is appended to, or a
+   * function of the prompt. Must be https.
+   */
   readonly approvalUrl: ApprovalUrl;
-  /** `false` leaves out the approve and reject buttons, so the page is the only place to decide. Defaults to `true`. */
+  /**
+   * `false` leaves out the approve and reject buttons, so the page is the only
+   * place to decide. Defaults to `true`.
+   */
   readonly buttons?: boolean;
 };
 /**
- * A Chat SDK card for an approval prompt: the detail, who asked, the
- * permission and the expiry, a link to the approval page, and approve and
- * reject buttons that carry the request id, never its token. A click is
- * applied by `approvalActions` as the verified clicking user. Throws a
- * `TypeError` for an approval page that is not https.
+ * A Chat SDK card for an approval prompt: the detail, who asked, the permission
+ * and the expiry, a link to the approval page, and approve and reject buttons
+ * that carry the request id, never its token. A click is applied by
+ * `approvalActions` as the verified clicking user. Throws a `TypeError` for an
+ * approval page that is not https.
  */
 export declare function approvalCard(prompt: ApprovalPrompt, options: ApprovalCardOptions): CardElement;
 //#endregion
@@ -46,31 +55,40 @@ type ApprovalActionsOptions = ChatSdkAuthorOptions & {
   readonly onResult?: (result: ChatActionResult, event: ActionEvent) => void | Promise<void>;
 };
 type ApprovalActions = {
-  /** The action ids to register: `chat.onAction(actions.actionIds, actions.onAction)`. */
+  /**
+   * The action ids to register: `chat.onAction(actions.actionIds,
+   * actions.onAction)`.
+   */
   readonly actionIds: readonly [typeof APPROVE_ACTION, typeof REJECT_ACTION];
   readonly onAction: (event: ActionEvent) => Promise<void>;
 };
 /**
- * Applies the approve and reject buttons of `approvalCard`. The clicking
- * user, as the Chat SDK adapter verified them, is resolved through
- * `ChatPermDock.resolveAction`; the button value names the request by id.
- * A click from an unlinked user, the requester or a bot records nothing.
+ * Applies the approve and reject buttons of `approvalCard`. The clicking user,
+ * as the Chat SDK adapter verified them, is resolved through
+ * `ChatPermDock.resolveAction`; the button value names the request by id. A
+ * click from an unlinked user, the requester or a bot records nothing.
  */
 export declare function approvalActions(permdock: ChatPermDock, options?: ApprovalActionsOptions): ApprovalActions;
 //#endregion
 //#region src/chat-sdk/transport.d.ts
 /** The part of a Chat SDK `Chat` the transport calls; a `new Chat(...)` fits. */
 type ChatSdkClient = {
-  openDM(user: string): Promise<{
-    post(message: string | CardElement): Promise<{
+  openDM: (user: string) => Promise<{
+    post: (message: string | CardElement) => Promise<{
       readonly id: string;
     }>;
   }>;
 };
 type ChatSdkTransportOptions = {
-  /** The adapter name recipients are on (`slack`, `teams`, …); a target for another provider is rejected. */
+  /**
+   * The adapter name recipients are on (`slack`, `teams`, …); a target for
+   * another provider is rejected.
+   */
   readonly provider: string;
-  /** The workspace the bot is installed in; a target for another workspace is rejected. */
+  /**
+   * The workspace the bot is installed in; a target for another workspace is
+   * rejected.
+   */
   readonly workspace?: string;
   /** Keys this transport remembers to skip a repeat post. Defaults to 1000. */
   readonly remember?: number;
@@ -78,9 +96,9 @@ type ChatSdkTransportOptions = {
 /**
  * The chat channel of `permdock/delivery` over the Chat SDK: opens a direct
  * message with the target's platform user id and posts the text, or the
- * approval card when the message carries an approval prompt. The Chat SDK
- * takes no idempotency key, so the transport skips a key it already sent,
- * per instance and in memory only.
+ * approval card when the message carries an approval prompt. The Chat SDK takes
+ * no idempotency key, so the transport skips a key it already sent, per
+ * instance and in memory only.
  */
 export declare function chatSdkTransport(chat: ChatSdkClient, options: ChatSdkTransportOptions): ChatTransport;
 //#endregion