permdock 0.7.0 → 0.8.0

package/dist/{sink-Cp_Eot9W.d.ts → sink-Dvi7YZG_.d.ts}

@@ -1,7 +1,7 @@
-import { $t as CredentialEvent, Ct as Credential, Qt as AutomationEvent, Xt as AccessEvent, gt as SupportSession, on as MembershipEvent, q as DecisionSink, sn as SinkEvent, ut as TokenSigner } from "./policy-types-B-F-qAZk.js";
-import { O as AppData } from "./permission-types-DhNEmoRG.js";
-import { u as OperationRisk } from "./operations-BNLes61x.js";
-import { t as Automation } from "./automation-DOtAFWdy.js";
+import { $t as CredentialEvent, Ct as Credential, Qt as AutomationEvent, Xt as AccessEvent, gt as SupportSession, on as MembershipEvent, q as DecisionSink, sn as SinkEvent, ut as TokenSigner } from "./policy-types-CCiDRZBH.js";
+import { M as AppData } from "./permission-types-CAY-GU7e.js";
+import { u as OperationRisk } from "./operations-Ci_rT6Uo.js";
+import { t as Automation } from "./automation-DqEoWHBc.js";
 //#region src/core/sink.d.ts
 /**
  * The closed list of CloudEvents `type` values, `com.permdock.<family>` or
@@ -40,7 +40,10 @@ declare const CLOUD_EVENT_TYPES: {
   readonly deliveryFailed: "com.permdock.delivery.failed";
 };
 type CloudEventType = (typeof CLOUD_EVENT_TYPES)[keyof typeof CLOUD_EVENT_TYPES];
-/** Types named for a later release; a receiver refuses them until then. None are reserved now. */
+/**
+ * Types named for a later release; a receiver refuses them until then. None are
+ * reserved now.
+ */
 declare const RESERVED_CLOUD_EVENT_TYPES: readonly CloudEventType[];
 /** The CloudEvents JSON format media type for one event (structured mode). */
 declare const CLOUDEVENTS_CONTENT_TYPE = "application/cloudevents+json";
@@ -51,27 +54,42 @@ declare const CLOUDEVENTS_BATCH_CONTENT_TYPE = "application/cloudevents-batch+js
  * which the Cloud then suspends; the `operation-*` codes only report.
  */
 type CatalogFindingCode = "permission-removed" | "not-hostable" | "grantee-removed" | "approval-tightened" | "operation-risk-raised" | "operation-approval-removed";
-/** One drift finding: the permission key and, when one broke, the hosted grant id. */
+/**
+ * One drift finding: the permission key and, when one broke, the hosted grant
+ * id.
+ */
 type CatalogFinding = {
   readonly code: CatalogFindingCode;
   readonly permission: string;
   readonly grant?: string;
   /** The operation name, on the `operation-*` codes. */
   readonly operation?: string;
-  /** `meta.risk` before the publish, on `operation-risk-raised`; an unset risk is `low`. */
+  /**
+   * `meta.risk` before the publish, on `operation-risk-raised`; an unset risk
+   * is `low`.
+   */
   readonly previous?: OperationRisk;
   /** `meta.risk` after the publish, on `operation-risk-raised`. */
   readonly risk?: OperationRisk;
 };
-/** `data` of a `com.permdock.catalog.*` event: a `permdock cloud push` or a drift against live hosted grants. */
+/**
+ * `data` of a `com.permdock.catalog.*` event: a `permdock cloud push` or a
+ * drift against live hosted grants.
+ */
 type CatalogEventData = {
   readonly kind: "publish" | "drift";
-  /** The catalog fingerprint after the publish, or the one drift was measured against. */
+  /**
+   * The catalog fingerprint after the publish, or the one drift was measured
+   * against.
+   */
   readonly fingerprint: string;
   readonly previous?: string;
   readonly findings?: readonly CatalogFinding[];
 };
-/** A CloudEvents 1.0 event in the JSON format, with the distributed-tracing extension. */
+/**
+ * A CloudEvents 1.0 event in the JSON format, with the distributed-tracing
+ * extension.
+ */
 type CloudEvent = {
   readonly specversion: "1.0";
   readonly type: CloudEventType;
@@ -82,9 +100,15 @@ type CloudEvent = {
   /** An RFC 3339 instant: the sink event's `at`. */
   readonly time: string;
   readonly datacontenttype: "application/json";
-  /** The published JSON Schema of `data`, `https://permdock.com/schemas/<family>-event-v1.json`. */
+  /**
+   * The published JSON Schema of `data`,
+   * `https://permdock.com/schemas/<family>-event-v1.json`.
+   */
   readonly dataschema: string;
-  /** W3C Trace Context `traceparent`, the CloudEvents distributed-tracing extension. */
+  /**
+   * W3C Trace Context `traceparent`, the CloudEvents distributed-tracing
+   * extension.
+   */
   readonly traceparent?: string;
   readonly tracestate?: string;
   readonly data: SinkEvent | CatalogEventData;
@@ -141,9 +165,9 @@ declare function automationEvent(input: {
   readonly x?: AppData;
 }): AutomationEvent;
 /**
- * The `access` event of a `SupportSession`: `started` when it begins,
- * `ended` when it lapses, `revoked` when it is ended early. `principal` is
- * the staff member, as for a support membership.
+ * The `access` event of a `SupportSession`: `started` when it begins, `ended`
+ * when it lapses, `revoked` when it is ended early. `principal` is the staff
+ * member, as for a support membership.
  */
 declare function supportSessionEvent(input: {
   readonly operation: AccessEvent["operation"];
@@ -155,8 +179,8 @@ declare function supportSessionEvent(input: {
   readonly x?: AppData;
 }): AccessEvent;
 /**
- * A `credential` sink event for `credential`. `sample` belongs on `used`
- * events only and must be in `(0, 1]`.
+ * A `credential` sink event for `credential`. `sample` belongs on `used` events
+ * only and must be in `(0, 1]`.
  */
 declare function credentialEvent(input: {
   readonly operation: CredentialEvent["operation"];
@@ -215,9 +239,9 @@ declare function accessEvent(input: {
  */
 declare function toCloudEvent(event: SinkEvent, options: CloudEventOptions): CloudEvent;
 /**
- * Signs sink events as an offline evidence export: a compact JWS with
- * `typ: vnd.permdock.evidence+jwt` whose `events` claim holds CloudEvents.
- * Live deliveries use Standard Webhooks instead.
+ * Signs sink events as an offline evidence export: a compact JWS with `typ:
+ * vnd.permdock.evidence+jwt` whose `events` claim holds CloudEvents. Live
+ * deliveries use Standard Webhooks instead.
  */
 declare function signDecisionBatch(events: readonly SinkEvent[], signer: TokenSigner, options: SignDecisionBatchOptions): Promise<string>;
 declare function memoryDecisionSink(options?: MemoryDecisionSinkOptions): MemoryDecisionSink;

package/dist/{skills-Dcjw9_1C.js → skills-Bjj7BNEQ.js}

@@ -1,7 +1,8 @@
-import { t as byCodePoint } from "./compare-pfyVnBjE.js";
-import { i as readJsonFile } from "./files-D_JIzUrP.js";
-import { t as packageRoot } from "./package-root-Dk_ETdkp.js";
-import { t as didYouMean } from "./args-CC3OwyHW.js";
+import { t as byCodePoint } from "./compare-DTfyUunF.js";
+import { i as readJsonFile } from "./files-BSjrtIHw.js";
+import { l as packageRoot } from "./version-DMQ0dnN5.js";
+import { t as didYouMean } from "./args-0FrVs5EH.js";
+import { a as nonEmptyOr } from "./output-tkju6U7R.js";
 import { cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, readlinkSync, realpathSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -24,7 +25,10 @@ const AGENT_FOLDERS = {
 };
 /** The `--for` names `skills install` knows, with the folder each writes. */
 const SKILL_AGENTS = AGENT_FOLDERS;
-/** Agents whose config folder (`.claude`, `.cursor`, `.agents`) the project already has. */
+/**
+* Agents whose config folder (`.claude`, `.cursor`, `.agents`) the project
+* already has.
+*/
 function detectedAgents(cwd) {
 	return Object.entries(AGENT_FOLDERS).filter(([, folder]) => existsSync(join(cwd, dirname(folder)))).map(([agent]) => agent);
 }
@@ -80,13 +84,13 @@ function runSkillsInstall(input) {
 	const links = linked.length === 0 ? "" : `; linked ${linked.join(", ")}`;
 	return {
 		code: 0,
-		output: `installed ${copied.join(", ") || "no skills"}${links} (permdock@${version})`
+		output: `installed ${nonEmptyOr(copied.join(", "), "no skills")}${links} (permdock@${version})`
 	};
 }
 /**
 * Compares the installed skills with the ones this version ships and writes
-* nothing: exit 1 lists every file that is missing or differs. Without
-* agents it checks the agent folders the project has, else every folder.
+* nothing: exit 1 lists every file that is missing or differs. Without agents
+* it checks the agent folders the project has, else every folder.
 */
 function runSkillsCheck(input) {
 	const source = resolveSkillsRoot(input.cwd, input.bundled ?? join(packageRoot(), "skills"));

package/dist/{skills-g_3BS9NC.js → skills-OuoMR49L.js}

@@ -1,7 +1,7 @@
 import { t as defineLeaf } from "./command-L8EstFNm.js";
-import { t as checkFlag } from "./flags-aaeRAdiD.js";
-import { r as pick, t as CANCELLED } from "./prompt-DwtVemER.js";
-import { n as detectedAgents, r as runSkills, t as SKILL_AGENTS } from "./skills-Dcjw9_1C.js";
+import { t as checkFlag } from "./flags-DXjoTVbS.js";
+import { r as pick, t as CANCELLED } from "./prompt-BYc6drYW.js";
+import { n as detectedAgents, r as runSkills, t as SKILL_AGENTS } from "./skills-Bjj7BNEQ.js";
 //#region src/cli/commands/skills.ts
 const forFlag = { for: {
 	type: "string",

package/dist/{snapshot-CbGmYiJx.js → snapshot-CXlzi69u.js}

@@ -1,12 +1,12 @@
 import { t as compact } from "./compact-CAf557ZB.js";
-import { n as freezeDeep } from "./freeze-CrU8nQeX.js";
-import { n as isForbiddenKey } from "./paths-DXSHAMIa.js";
-import { a as resolveConditionRef, l as isConditionRef } from "./refs-CNJBiTFo.js";
-import { l as isRfc3339, m as rfc3339, p as nowSeconds } from "./time-DkWjdL98.js";
-import { f as scopeList } from "./scopes-BHsc-wp-.js";
-import { _ as listPlans, v as listRoles } from "./grantee-BrRANrpT.js";
-import { i as wireValidity } from "./validity-CZ7-y0Cj.js";
-import { m as tenantsOf } from "./tenancy-CmeBQ6Nv.js";
+import { n as freezeDeep } from "./freeze-jjan0lCv.js";
+import { n as isForbiddenKey } from "./paths-CUvURzHp.js";
+import { a as resolveConditionRef, l as isConditionRef } from "./refs-C8BKxc_e.js";
+import { l as isRfc3339, m as rfc3339, p as nowSeconds } from "./time-nR1JesoH.js";
+import { f as scopeList } from "./scopes-0Up_UA2t.js";
+import { _ as listPlans, v as listRoles } from "./grantee-Dke-9rd1.js";
+import { i as wireValidity } from "./validity-Buc7w8E9.js";
+import { m as tenantsOf } from "./tenancy-5d1zVBvK.js";
 import { n as toWireDelegation } from "./wire-delegation-Cv3W2eaM.js";
 //#region src/conditions/bind.ts
 function isPrimitive(value) {
@@ -36,10 +36,10 @@ function bindArg(arg, subject, only) {
 }
 /**
 * Replaces every `principal.*` / `context.*` ref with the subject's value, and
-* a `liveSession` node with a constant, so a `where()` result compiles the
-* same without the subject. A ref the subject
-* does not hold binds to `null` (or `[]` in a list), which never matches, as
-* in `evaluateCondition`. With `only`, refs it rejects stay refs.
+* a `liveSession` node with a constant, so a `where()` result compiles the same
+* without the subject. A ref the subject does not hold binds to `null` (or `[]`
+* in a list), which never matches, as in `evaluateCondition`. With `only`, refs
+* it rejects stay refs.
 */
 function bindConditionRefs(condition, subject, only) {
 	switch (condition.op) {
@@ -141,7 +141,10 @@ const CARRIED = /* @__PURE__ */ new Set([
 	"tenant",
 	"memberships"
 ]);
-/** Principal refs the snapshot principal does not carry (`claims`, `teamIds`, …) are bound to the subject's values. */
+/**
+* Principal refs the snapshot principal does not carry (`claims`, `teamIds`, …)
+* are bound to the subject's values.
+*/
 function isClaimRef(ref) {
 	const [root, head] = ref.split(".", 2);
 	return root === "principal" && !CARRIED.has(String(head));
@@ -229,10 +232,10 @@ function buildSnapshot(input) {
 	}));
 }
 /**
-* The token delegation as the client sees it. An actor with no token
-* delegation gets an empty `scopes` list so the client ceiling agrees with
-* `no-delegation`, unless a policy delegation applies (`delegated`), which
-* then is the ceiling.
+* The token delegation as the client sees it. An actor with no token delegation
+* gets an empty `scopes` list so the client ceiling agrees with
+* `no-delegation`, unless a policy delegation applies (`delegated`), which then
+* is the ceiling.
 */
 function snapshotDelegation(subject, delegated) {
 	const delegation = subject.delegation;
@@ -266,4 +269,4 @@ function parseSnapshot(json) {
 	return freezeDeep(value);
 }
 //#endregion
-export { bindConditionRefs as i, parseSnapshot as n, snapshotGrant as r, buildSnapshot as t };
+export { bindConditionRefs as a, snapshotGrant as i, parseSnapshot as n, plainPermission as r, buildSnapshot as t };

package/dist/{snapshot-cache-Pahd3IYJ.d.ts → snapshot-cache-BAXZ0KOp.d.ts}

@@ -1,7 +1,10 @@
-import { Gt as Snapshot, Rt as Instant } from "./policy-types-B-F-qAZk.js";
+import { Gt as Snapshot, Rt as Instant } from "./policy-types-CCiDRZBH.js";
 //#region src/core/snapshot-cache.d.ts
 type CacheLifeForOptions = {
-  /** Lower bound in seconds. Next.js includes a private entry in per-link prefetches from 30. */
+  /**
+   * Lower bound in seconds. Next.js includes a private entry in per-link
+   * prefetches from 30.
+   */
   readonly min?: number;
   /** Upper bound in seconds. Next.js keeps a per-session App Shell entry from 300. */
   readonly max?: number;
@@ -9,9 +12,10 @@ type CacheLifeForOptions = {
   readonly now?: Instant;
 };
 /**
- * `{ stale }` in seconds: `max` when the value never expires, otherwise the seconds left, clamped
- * to `[min, max]`. A value with less than `min` seconds left gets its real remainder, so Next.js
- * leaves it out of prefetches and an HTTP cache does not serve it past `expiresAt`.
+ * `{ stale }` in seconds: `max` when the value never expires, otherwise the
+ * seconds left, clamped to `[min, max]`. A value with less than `min` seconds
+ * left gets its real remainder, so Next.js leaves it out of prefetches and an
+ * HTTP cache does not serve it past `expiresAt`.
  */
 declare function cacheLifeFor(value: {
   /** RFC 3339, or a NumericDate. */
@@ -22,13 +26,17 @@ declare function cacheLifeFor(value: {
   readonly stale: number;
 };
 /**
- * The `cacheTag` for one subject's cached snapshots: `permdock:<sub>`, or `permdock:anon`
- * without a subject. Tag the private cache with it and pass it to `updateTag` or
- * `revalidateTag` on every write that changes the subject's snapshot.
+ * The `cacheTag` for one subject's cached snapshots: `permdock:<sub>`, or
+ * `permdock:anon` without a subject. Tag the private cache with it and pass it
+ * to `updateTag` or `revalidateTag` on every write that changes the subject's
+ * snapshot.
  */
 declare function snapshotTag(sub?: string | null): string;
 type SnapshotHeadersOptions = CacheLifeForOptions & {
-  /** Sent in `Cache-Tag` after `snapshotTag(sub)`, such as the app's own organisation tag. */
+  /**
+   * Sent in `Cache-Tag` after `snapshotTag(sub)`, such as the app's own
+   * organisation tag.
+   */
   readonly tags?: readonly string[];
 };
 type SnapshotHeaders = {
@@ -38,9 +46,10 @@ type SnapshotHeaders = {
   readonly "Cache-Tag": string;
 };
 /**
- * Response headers for a loader or route that returns `snapshot`: `Cache-Control: private` with
- * `max-age` from `cacheLifeFor`, `Vary: Authorization, Cookie`, an `ETag` over everything but
- * `issuedAt`, and `Cache-Tag` with `snapshotTag(sub)` and `tags`.
+ * Response headers for a loader or route that returns `snapshot`:
+ * `Cache-Control: private` with `max-age` from `cacheLifeFor`, `Vary:
+ * Authorization, Cookie`, an `ETag` over everything but `issuedAt`, and
+ * `Cache-Tag` with `snapshotTag(sub)` and `tags`.
  */
 declare function snapshotHeaders(snapshot: Snapshot, options?: SnapshotHeadersOptions): SnapshotHeaders;
 //#endregion

package/dist/{snapshot-cache-DT2Kx1F8.js → snapshot-cache-Bx_4xC_6.js}

@@ -1,14 +1,15 @@
-import { g as secondsOf, p as nowSeconds } from "./time-DkWjdL98.js";
-import { n as payloadDigest } from "./token-2qYDvXz2.js";
+import { g as secondsOf, p as nowSeconds } from "./time-nR1JesoH.js";
+import { n as payloadDigest } from "./token-DC9EQiet.js";
 //#region src/core/snapshot-cache.ts
 /** Seconds since the epoch of a NumericDate or an RFC 3339 instant. */
 function epochSeconds(value) {
 	return typeof value === "number" ? value : secondsOf(value);
 }
 /**
-* `{ stale }` in seconds: `max` when the value never expires, otherwise the seconds left, clamped
-* to `[min, max]`. A value with less than `min` seconds left gets its real remainder, so Next.js
-* leaves it out of prefetches and an HTTP cache does not serve it past `expiresAt`.
+* `{ stale }` in seconds: `max` when the value never expires, otherwise the
+* seconds left, clamped to `[min, max]`. A value with less than `min` seconds
+* left gets its real remainder, so Next.js leaves it out of prefetches and an
+* HTTP cache does not serve it past `expiresAt`.
 */
 function cacheLifeFor(value, options = {}) {
 	const min = options.min ?? 30;
@@ -23,17 +24,19 @@ function cacheLifeFor(value, options = {}) {
 	return { stale: Math.min(max, remaining) };
 }
 /**
-* The `cacheTag` for one subject's cached snapshots: `permdock:<sub>`, or `permdock:anon`
-* without a subject. Tag the private cache with it and pass it to `updateTag` or
-* `revalidateTag` on every write that changes the subject's snapshot.
+* The `cacheTag` for one subject's cached snapshots: `permdock:<sub>`, or
+* `permdock:anon` without a subject. Tag the private cache with it and pass it
+* to `updateTag` or `revalidateTag` on every write that changes the subject's
+* snapshot.
 */
 function snapshotTag(sub) {
 	return `permdock:${sub === void 0 || sub === null || sub === "" ? "anon" : sub}`;
 }
 /**
-* Response headers for a loader or route that returns `snapshot`: `Cache-Control: private` with
-* `max-age` from `cacheLifeFor`, `Vary: Authorization, Cookie`, an `ETag` over everything but
-* `issuedAt`, and `Cache-Tag` with `snapshotTag(sub)` and `tags`.
+* Response headers for a loader or route that returns `snapshot`:
+* `Cache-Control: private` with `max-age` from `cacheLifeFor`, `Vary:
+* Authorization, Cookie`, an `ETag` over everything but `issuedAt`, and
+* `Cache-Tag` with `snapshotTag(sub)` and `tags`.
 */
 function snapshotHeaders(snapshot, options = {}) {
 	const content = {};

package/dist/solid/index.d.ts

@@ -1,11 +1,13 @@
-import { Gt as Snapshot, In as ApprovalRequiredDecision, Ln as Decision, Un as GrantedDecision, dt as TokenVerifier, or as Membership } from "../policy-types-B-F-qAZk.js";
-import { u as Permission } from "../permission-types-DhNEmoRG.js";
-import { r as Role } from "../vocabulary-Bg3eeT2H.js";
-import { n as requiredPlans } from "../problem-details-Tcfmj3bV.js";
-import { i as describe, r as DescribeOptions, t as DecisionDescription } from "../describe-O0SwYIK8.js";
-import { t as PermissionBoundaryState } from "../boundary-BmHxVH1J.js";
-import { t as approvalHeaders } from "../headers-CIbDTUTK.js";
-import { a as FilterResult, c as PermissionSet, d as RolesOptions, f as SubjectView, i as ClientStatus, l as PermissionState, n as ApprovalState, p as TenantView, r as ClientPermDock, t as ApprovalHandle, u as ProviderOptionsBase } from "../types-CKV71kKh.js";
+import { Gt as Snapshot, In as ApprovalRequiredDecision, Ln as Decision, Un as GrantedDecision, dt as TokenVerifier, j as PolicyVocabulary, or as Membership } from "../policy-types-CCiDRZBH.js";
+import { u as Permission } from "../permission-types-CAY-GU7e.js";
+import { r as Role } from "../vocabulary-DEJ5j4mR.js";
+import { d as UncheckedData, s as RowData } from "../permdock-B6Sf4T_S.js";
+import { c as requiredPlans } from "../errors-zi_4T-rx.js";
+import { i as describe, r as DescribeOptions, t as DecisionDescription } from "../describe-ByS9LgHK.js";
+import { t as PermissionBoundaryState } from "../boundary-C9ck-3uK.js";
+import { n as ProtectedAction, t as ActionResult } from "../action-result-CL-QCITA.js";
+import { t as approvalHeaders } from "../headers-B9jQxjtW.js";
+import { a as FilterResult, b as eventSourceRefresh, c as PermissionSet, d as ProtectedActionView, f as ProviderOptionsBase, h as TenantView, i as ClientStatus, l as PermissionState, m as SubjectView, n as ApprovalState, o as GateMode, p as RolesOptions, r as ClientPermDock, s as GateView, t as ApprovalHandle, v as EventSourceRefreshOptions, y as RefreshTrigger } from "../types-B_d_g7T3.js";
 import { Accessor, Accessor as Accessor$1, JSX } from "solid-js";
 //#region src/solid/types.d.ts
 /** Structural `JSX.Element`: text, a DOM node or a list of children. */
@@ -21,7 +23,10 @@ type PermDockProviderProps = ProviderOptionsBase & {
   readonly snapshot: Snapshot | string | Accessor$1<Snapshot | string | undefined> | PromiseLike<Snapshot | string>;
   /** A change switches the active tenant (`refresh({ tenant })`). */
   readonly tenant?: string;
-  /** Read on every request, with `verifier`, so a rotated token applies without a new store. */
+  /**
+   * Read on every request, with `verifier`, so a rotated token applies without
+   * a new store.
+   */
   readonly headers?: Readonly<Record<string, string>>;
   readonly verifier?: TokenVerifier;
   /** What every `<Protected>` below renders for a slot it leaves out. */
@@ -51,12 +56,35 @@ type ProtectedProps = {
   readonly approval?: SolidChild | ((decision: ApprovalRequiredDecision) => SolidChild);
   readonly children: SolidChild | ((decision: GrantedDecision) => SolidChild);
 };
+/**
+ * `useProtectedAction` in Solid: the fields of `ProtectedActionView` as
+ * accessors.
+ */
+type ProtectedActionAccessors<T> = {
+  readonly gate: Accessor$1<GateView>;
+  readonly result: Accessor$1<ActionResult<T> | undefined>;
+  readonly pending: Accessor$1<boolean>;
+  readonly approval: Accessor$1<ApprovalHandle | undefined>;
+  readonly run: (input: unknown) => Promise<ActionResult<T>>;
+  readonly retry: () => Promise<ActionResult<T> | undefined>;
+};
 //#endregion
 //#region src/solid/hooks.d.ts
-export declare function usePermDock(): ClientPermDock;
-export declare function usePermission(permission: Permission | Accessor<Permission>, data?: Accessor<unknown>): Accessor<PermissionState>;
+export declare function usePermDock<V extends PolicyVocabulary = PolicyVocabulary>(): ClientPermDock<V>;
+export declare function usePermission<D>(permission: Permission | Accessor<Permission>, data?: Accessor<UncheckedData<D>>): Accessor<PermissionState>;
+export declare function usePermission<P extends Permission>(permission: P | Accessor<P>, data?: Accessor<RowData<P>>): Accessor<PermissionState>;
+/**
+ * What a permission-gated control renders, as `useGate` in React: `hidden`,
+ * `disabled`, `needsApproval`, `upgrade` and a localised `reason`.
+ */
+export declare function useGate<D>(permission: Permission | Accessor<Permission>, data?: Accessor<UncheckedData<D>>, options?: {
+  readonly mode?: GateMode;
+}): Accessor<GateView>;
+export declare function useGate<P extends Permission>(permission: P | Accessor<P>, data?: Accessor<RowData<P>>, options?: {
+  readonly mode?: GateMode;
+}): Accessor<GateView>;
 export declare function usePermissions(permissions: Accessor<readonly Permission[]>, data?: Accessor<unknown>): Accessor<PermissionSet>;
-export declare function useFilter<T>(permission: Permission<string, T, "instance">, rows: Accessor<readonly T[]>): Accessor<FilterResult<T>>;
+export declare function useFilter<T>(permission: Permission<string, NoInfer<T>, "instance">, rows: Accessor<readonly T[]>): Accessor<FilterResult<T>>;
 export declare function useTenant(): Accessor<TenantView>;
 export declare function useMemberships(): Accessor<readonly Membership[]>;
 export declare function useRoles(options?: Accessor<RolesOptions>): Accessor<{
@@ -72,13 +100,24 @@ export declare function useSubject(): Accessor<SubjectView>;
 export declare function useApproval(decision: Accessor<Decision>): Accessor<ApprovalHandle>;
 /** `describe` with the provider's `messages`; a call's own `messages` win. */
 export declare function useDescribe(): (decision: Decision, options?: DescribeOptions) => DecisionDescription;
+/**
+ * A `protectAction` server action wired to a control, as `useProtectedAction`
+ * in React: accessors for `gate`, `result`, `pending` and `approval`, plus
+ * `run` and `retry`.
+ */
+export declare function useProtectedAction<T, D>(action: ProtectedAction<T>, permission: Permission | Accessor<Permission>, data?: Accessor<UncheckedData<D>>, options?: {
+  readonly mode?: GateMode;
+}): ProtectedActionAccessors<T>;
+export declare function useProtectedAction<T, P extends Permission>(action: ProtectedAction<T>, permission: P | Accessor<P>, data?: Accessor<RowData<P>>, options?: {
+  readonly mode?: GateMode;
+}): ProtectedActionAccessors<T>;
 //#endregion
 //#region src/solid/boundary.d.ts
 /**
  * Catches `PermDockDeniedError` and `PermDockApprovalRequiredError` thrown
- * below it and renders `denied`, or `approval` for an approval request
- * (default `denied`), with the refused permission and `retry()`. Any other
- * error goes to the next `ErrorBoundary` up.
+ * below it and renders `denied`, or `approval` for an approval request (default
+ * `denied`), with the refused permission and `retry()`. Any other error goes to
+ * the next `ErrorBoundary` up.
  */
 export declare function PermissionBoundary(props: PermissionBoundaryProps): JSX.Element;
 /** Inside a `PermissionBoundary` fallback: what was refused and `retry()`. */
@@ -90,4 +129,4 @@ export declare function Protected(props: ProtectedProps): JSX.Element;
 //#region src/solid/provider.d.ts
 export declare function PermDockProvider(props: PermDockProviderProps): JSX.Element;
 //#endregion
-export { type ApprovalHandle, type ApprovalState, type ClientPermDock, type ClientStatus, type FilterResult, type PermDockDefaults, type PermDockProviderProps, type PermissionBoundaryProps, type PermissionBoundaryState, type PermissionSet, type PermissionState, type ProtectedProps, type RolesOptions, type SolidChild, type SubjectView, type TenantView, approvalHeaders, describe, requiredPlans };
+export { type ActionResult, type ApprovalHandle, type ApprovalState, type ClientPermDock, type ClientStatus, type EventSourceRefreshOptions, type FilterResult, type GateMode, type GateView, type PermDockDefaults, type PermDockProviderProps, type PermissionBoundaryProps, type PermissionBoundaryState, type PermissionSet, type PermissionState, type ProtectedAction, type ProtectedActionAccessors, type ProtectedActionView, type ProtectedProps, type RefreshTrigger, type RolesOptions, type SolidChild, type SubjectView, type TenantView, approvalHeaders, describe, eventSourceRefresh, requiredPlans };

package/dist/solid/index.js

@@ -1,11 +1,11 @@
 import { t as compact } from "../compact-CAf557ZB.js";
-import { r as requiredPlans } from "../problem-details-cn5X30gZ.js";
-import { t as describe } from "../describe-DZlnEtLy.js";
-import { n as boundaryFallback, t as boundaryDigest } from "../boundary-BM8a_P6E.js";
-import { t as approvalHeaders } from "../headers-BIjfMaoC.js";
-import { i as isPromiseLike } from "../store-options-B_poyYvg.js";
-import { n as switchTenant, t as providerStore } from "../provider-store-IgqQipCO.js";
-import { a as livePermDock, c as rolesView, d as subjectView, f as tenantView, l as scopedTenant, n as describeWith, o as permissionSet, r as filterResult, s as protectedView, t as approvalHandle, u as slotContent } from "../views-BB8E9dTP.js";
+import { r as requiredPlans } from "../problem-details-CLDgX1KV.js";
+import { n as describe } from "../describe-Bb4hGK5d.js";
+import { n as boundaryFallback, t as boundaryDigest } from "../boundary-BV3O1eud.js";
+import { n as actionRunner, r as approvalHeaders, t as actionApproval } from "../protected-action-DUYqb-Ma.js";
+import { a as livePermDock, c as rolesView, d as subjectView, f as tenantView, i as gateView, l as scopedTenant, n as describeWith, o as permissionSet, r as filterResult, s as protectedView, t as approvalHandle, u as slotContent } from "../views-CD8wuL4Z.js";
+import { a as isPromiseLike, r as eventSourceRefresh } from "../store-options-Dil3lraY.js";
+import { n as switchTenant, t as providerStore } from "../provider-store-CaTv00tr.js";
 import { ErrorBoundary, createComponent, createComputed, createContext, createMemo, createSignal, getOwner, on, onCleanup, useContext } from "solid-js";
 //#region src/solid/context.ts
 const PermDockContext = createContext(void 0);
@@ -42,6 +42,16 @@ function usePermission(permission, data) {
 		return store.permissionState(current, data?.());
 	});
 }
+function useGate(permission, data, options = {}) {
+	const store = useStore();
+	const version = useVersion(store);
+	const describeDecision = useDescribe();
+	return createMemo(() => {
+		version();
+		const current = typeof permission === "function" ? permission() : permission;
+		return gateView(store.permissionState(current, data?.()), (decision) => describeDecision(decision, { permission: current }), options.mode);
+	});
+}
 function usePermissions(permissions, data) {
 	const store = useStore();
 	const version = useVersion(store);
@@ -91,14 +101,37 @@ function useDescribe() {
 	const ui = useContext(PermDockUiContext);
 	return (decision, options) => describeWith(ui.messages)(decision, options);
 }
+function useProtectedAction(action, permission, data, options = {}) {
+	const store = useStore();
+	const version = useVersion(store);
+	const gate = useGate(permission, data, options);
+	const [state, setState] = createSignal({
+		result: void 0,
+		pending: false
+	});
+	const runner = actionRunner(() => action, (next) => {
+		setState(next);
+	});
+	return {
+		gate,
+		result: () => state().result,
+		pending: () => state().pending,
+		approval: createMemo(() => {
+			version();
+			return actionApproval(store, state().result);
+		}),
+		run: runner.run,
+		retry: runner.retry
+	};
+}
 //#endregion
 //#region src/solid/boundary.ts
 const BoundaryContext = createContext(null);
 /**
 * Catches `PermDockDeniedError` and `PermDockApprovalRequiredError` thrown
-* below it and renders `denied`, or `approval` for an approval request
-* (default `denied`), with the refused permission and `retry()`. Any other
-* error goes to the next `ErrorBoundary` up.
+* below it and renders `denied`, or `approval` for an approval request (default
+* `denied`), with the refused permission and `retry()`. Any other error goes to
+* the next `ErrorBoundary` up.
 */
 function PermissionBoundary(props) {
 	return createComponent(ErrorBoundary, {
@@ -164,7 +197,8 @@ function PermDockProvider(props) {
 		maxAge: props.maxAge,
 		onSnapshot: props.onSnapshot,
 		onClear: props.onClear,
-		approvalInterval: props.approvalInterval
+		approvalInterval: props.approvalInterval,
+		refreshOn: props.refreshOn
 	}), () => ({
 		headers: props.headers,
 		fetch: props.fetch,
@@ -215,4 +249,4 @@ function uiProvider(ui, props) {
 	});
 }
 //#endregion
-export { PermDockProvider, PermissionBoundary, Protected, approvalHeaders, describe, requiredPlans, useApproval, useAssignablePermissions, useAssignableRoles, useDescribe, useFilter, useMemberships, usePermDock, usePermission, usePermissionBoundary, usePermissions, useRoles, useSubject, useTenant };
+export { PermDockProvider, PermissionBoundary, Protected, approvalHeaders, describe, eventSourceRefresh, requiredPlans, useApproval, useAssignablePermissions, useAssignableRoles, useDescribe, useFilter, useGate, useMemberships, usePermDock, usePermission, usePermissionBoundary, usePermissions, useProtectedAction, useRoles, useSubject, useTenant };

package/dist/solid-start/index.d.ts

@@ -1,9 +1,9 @@
-import { Gt as Snapshot, T as Policy, j as PolicyVocabulary, sr as Principal } from "../policy-types-B-F-qAZk.js";
-import { u as Permission } from "../permission-types-DhNEmoRG.js";
-import { a as OperationInput, t as Operation } from "../operations-BNLes61x.js";
-import { a as PermDock } from "../permdock-Dco6dyCK.js";
-import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-C4gZUEZy.js";
-import { a as ProtectTarget, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-CuhyYwC1.js";
+import { Gt as Snapshot, T as Policy, j as PolicyVocabulary, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { u as Permission } from "../permission-types-CAY-GU7e.js";
+import { a as OperationInput, t as Operation } from "../operations-Ci_rT6Uo.js";
+import { a as PermDock } from "../permdock-B6Sf4T_S.js";
+import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CIlpSA2G.js";
+import { a as ProtectTarget, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-C1DCvpqV.js";
 import { APIEvent, FetchEvent } from "@solidjs/start/server";
 //#region src/solid-start/create.d.ts
 /** The h3 event under every SolidStart request; `subject` and `scope` read it. */
@@ -16,7 +16,10 @@ type SolidStartPermDockLocals<TData = unknown, V extends PolicyVocabulary = Poli
   readonly permdock: PermDock<V>;
   readonly permdockData: TData;
 };
-/** The event a wrapped API route receives: its own `APIEvent` with typed `locals`. */
+/**
+ * The event a wrapped API route receives: its own `APIEvent` with typed
+ * `locals`.
+ */
 type SolidStartPermDockEvent<TEvent extends FetchEvent = APIEvent, TData = unknown, V extends PolicyVocabulary = PolicyVocabulary> = TEvent & {
   readonly locals: SolidStartPermDockLocals<TData, V>;
 };
@@ -32,18 +35,33 @@ type SolidStartPermDockHandlers = {
   readonly POST: (event: FetchEvent) => Promise<Response>;
 };
 type SolidStartPermDock<V extends PolicyVocabulary = PolicyVocabulary> = {
-  /** Sets `event.context.permdock` on the h3 event; a bad Web Bot Auth signature is a `401`. */
+  /**
+   * Sets `event.context.permdock` on the h3 event; a bad Web Bot Auth
+   * signature is a `401`.
+   */
   readonly middleware: () => SolidStartMiddleware;
-  /** `export const DELETE = protect(permissions.post.delete, loadPost)(handler)`. */
+  /**
+   * `export const DELETE = protect(permissions.post.delete,
+   * loadPost)(handler)`.
+   */
   readonly protect: SolidStartProtect<V>;
-  /** Types `event.locals.permdock` for an API route and answers a thrown PermDock error with Problem Details. */
+  /**
+   * Types `event.locals.permdock` for an API route and answers a thrown
+   * PermDock error with Problem Details.
+   */
   readonly withPermDock: SolidStartGuarded<unknown, V>;
-  /** The instance for an API route, or a server function through `getRequestEvent()`. */
+  /**
+   * The instance for an API route, or a server function through
+   * `getRequestEvent()`.
+   */
   readonly getPermDock: (event: FetchEvent) => Promise<PermDock<V>>;
   /** The snapshot a route `query` returns for `permdock/solid`. */
   readonly getSnapshot: (event: FetchEvent, query?: SnapshotQuery) => Promise<Snapshot>;
   readonly connection: (event: FetchEvent, connectionOptions?: ConnectionOptions) => Promise<Connection>;
-  /** `export const { GET, POST } = permdockHandler()` in `src/routes/api/permdock.ts`. */
+  /**
+   * `export const { GET, POST } = permdockHandler()` in
+   * `src/routes/api/permdock.ts`.
+   */
   readonly permdockHandler: () => SolidStartPermDockHandlers;
   readonly openapi: OpenApiHooks;
 };

package/dist/solid-start/index.js

@@ -1,6 +1,6 @@
-import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-DReoiVBw.js";
-import { i as decorate } from "../bind-D1nO6fiC.js";
-import { n as guardedRoute, t as fetchAdapter } from "../fetch-adapter-De-u6vhJ.js";
+import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-IBceAeKT.js";
+import { i as decorate } from "../bind-D_sZSVA3.js";
+import { n as guardedRoute, t as fetchAdapter } from "../fetch-adapter-JL43jD3E.js";
 //#region src/solid-start/create.ts
 /**
 * `event.locals`. Its type, `App.RequestEventLocals`, is declared by