permdock 0.7.0 → 0.8.0

package/dist/{types-BfVmNJO5.d.ts → types-ah9NlU6j.d.ts}

@@ -1,9 +1,12 @@
-import { Zt as AuthEvent, sr as Principal } from "./policy-types-B-F-qAZk.js";
-import { t as ClaimsMap } from "./claims-map-Ca-QX8C6.js";
-import { t as ClientNames } from "./clients-C7zLFuWT.js";
+import { Zt as AuthEvent, sr as Principal } from "./policy-types-CCiDRZBH.js";
+import { t as ClaimsMap } from "./claims-map-D1Pb5oRq.js";
+import { t as ClientNames } from "./clients-C_NOET3z.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/supabase/claims.d.ts
-/** One entry of the `memberships` claim, as `schemas/supabase-claims-v1.json` defines it. */
+/**
+ * One entry of the `memberships` claim, as `schemas/supabase-claims-v1.json`
+ * defines it.
+ */
 type SupabaseMembershipClaim = {
   readonly scope?: string;
   /** Canonical text of the scope instance id, compared exactly. */
@@ -28,7 +31,10 @@ type SupabaseMembershipClaim = {
   };
   readonly managed_by?: "idp";
   readonly entitlements?: readonly string[];
-  /** The instance or an ancestor is suspended: the permission keys the membership still grants. */
+  /**
+   * The instance or an ancestor is suspended: the permission keys the
+   * membership still grants.
+   */
   readonly keep?: readonly string[];
   /** Custom roles in compact form, read by the RLS helpers in `jwt` mode. */
   readonly grants?: Readonly<Record<string, unknown>>;
@@ -47,9 +53,15 @@ type SupabasePermDockClaims<TenantClaim extends string = "tenant_id"> = {
   readonly memberships?: readonly SupabaseMembershipClaim[];
   /** `true` when the size budget cut `memberships` or `attrs`. */
   readonly memberships_truncated?: boolean;
-  /** Allow-listed server-owned attributes, read as `principal.claims.attrs.<key>`. */
+  /**
+   * Allow-listed server-owned attributes, read as
+   * `principal.claims.attrs.<key>`.
+   */
   readonly attrs?: Readonly<Record<string, unknown>>;
-  /** The uuid of every team the user belongs to (`supabase.hook.teams`), cut by the same budget as `memberships`. */
+  /**
+   * The uuid of every team the user belongs to (`supabase.hook.teams`), cut by
+   * the same budget as `memberships`.
+   */
   readonly team_ids?: readonly string[];
   /** The principal's authorization version. */
   readonly authz_ver?: number;
@@ -75,10 +87,13 @@ type SupabaseClaims<TenantClaim extends string = "tenant_id"> = SupabasePermDock
  * are combined, and the app's output is merged over the base.
  */
 type SupabaseClaimsSchema<TenantClaim extends string = "tenant_id", Extra = unknown> = StandardSchemaV1<unknown, SupabaseClaims<TenantClaim> & Extra> & {
-  extend<App extends StandardSchemaV1>(app: App): SupabaseClaimsSchema<TenantClaim, Extra & StandardSchemaV1.InferOutput<App>>;
+  extend: <App extends StandardSchemaV1>(app: App) => SupabaseClaimsSchema<TenantClaim, Extra & StandardSchemaV1.InferOutput<App>>;
 };
 type SupabaseClaimsOptions<TenantClaim extends string = "tenant_id"> = {
-  /** The claim holding the active tenant; `rls.tenantClaim`, default `tenant_id`. */
+  /**
+   * The claim holding the active tenant; `rls.tenantClaim`, default
+   * `tenant_id`.
+   */
   readonly tenantClaim?: TenantClaim;
 };
 /**
@@ -88,7 +103,9 @@ type SupabaseClaimsOptions<TenantClaim extends string = "tenant_id"> = {
  * Needs no validation library.
  *
  * ```ts
- * sb.claims(supabaseClaims().extend(z.object({ datetime_preferences: Prefs })))
+ * sb.claims(
+ *   supabaseClaims().extend(z.object({ datetime_preferences: Prefs })),
+ * );
  * ```
  */
 declare function supabaseClaims<TenantClaim extends string = "tenant_id">(options?: SupabaseClaimsOptions<TenantClaim>): SupabaseClaimsSchema<TenantClaim>;
@@ -102,14 +119,17 @@ type SupabasePrincipal = Principal & {
 };
 type SupabaseInclude = "email" | "phone" | "is_anonymous";
 /**
- * A column that holds a foreign key: the value is `column` of `through`,
- * joined on `on`. A role reads its key from a roles table
- * (`{ through: 'roles', on: { role_id: 'id' }, column: 'key' }`); a
- * membership source's user can read its user id from a profile table
- * (`{ through: 'contact_profiles', on: { contact_profile_id: 'id' }, column: 'user_id' }`).
+ * A column that holds a foreign key: the value is `column` of `through`, joined
+ * on `on`. A role reads its key from a roles table (`{ through: 'roles', on: {
+ * role_id: 'id' }, column: 'key' }`); a membership source's user can read its
+ * user id from a profile table (`{ through: 'contact_profiles', on: {
+ * contact_profile_id: 'id' }, column: 'user_id' }`).
  */
 type RoleThrough = {
-  /** The referenced table; unqualified, it is in the schema of the table that references it. */
+  /**
+   * The referenced table; unqualified, it is in the schema of the table that
+   * references it.
+   */
   readonly through: string;
   /** One entry: the referencing column to the column of `through` it references. */
   readonly on: Readonly<Record<string, string>>;
@@ -118,8 +138,8 @@ type RoleThrough = {
 };
 /**
  * A role column whose values are not role keys: each value maps to a role key,
- * or to `null` for no role, and an unlisted value is no role
- * (`{ column: 'kind', map: { admin: 'owner', user: null } }`).
+ * or to `null` for no role, and an unlisted value is no role (`{ column:
+ * 'kind', map: { admin: 'owner', user: null } }`).
  */
 type RoleMap = {
   readonly column: string;
@@ -133,7 +153,10 @@ type SupabaseMembershipTable = {
    * several of them: the row holds every non-null key.
    */
   readonly role: string | RoleThrough | RoleMap | readonly (string | RoleThrough | RoleMap)[];
-  /** Per scope name, the column holding that scope's id: the table's own scope and its ancestors. */
+  /**
+   * Per scope name, the column holding that scope's id: the table's own scope
+   * and its ancestors.
+   */
   readonly columns?: Readonly<Record<string, string>>;
   readonly tenant?: string;
   readonly team?: string;
@@ -141,7 +164,10 @@ type SupabaseMembershipTable = {
   readonly expiresAt?: string;
   readonly disabledAt?: string;
 };
-/** A table whose row says whether a user or a scope instance is active. A missing row counts as suspended. */
+/**
+ * A table whose row says whether a user or a scope instance is active. A
+ * missing row counts as suspended.
+ */
 type SupabaseActiveRow = {
   readonly table: string;
   /** Column holding the user id or the scope instance id. */
@@ -152,12 +178,15 @@ type SupabaseActiveRow = {
   readonly status?: string;
   readonly active?: readonly string[];
 };
-/** A scope's active-row table, with the permissions its suspended instances keep. */
+/**
+ * A scope's active-row table, with the permissions its suspended instances
+ * keep.
+ */
 type SupabaseSuspendedScope = SupabaseActiveRow & {
   /**
    * Permissions (references or keys) members of a suspended instance, and of
-   * every instance nested in it, still hold; such a membership carries them
-   * as `keep`.
+   * every instance nested in it, still hold; such a membership carries them as
+   * `keep`.
    */
   readonly keep?: readonly (string | {
     readonly key: string;
@@ -171,7 +200,10 @@ type SupabaseSuspendedMembership = {
 type SupabaseSuspension = {
   /** A suspended user holds no role and no membership. */
   readonly users?: SupabaseActiveRow;
-  /** Per scope name: a suspended instance voids its memberships and every membership nested under it, except for `keep`. */
+  /**
+   * Per scope name: a suspended instance voids its memberships and every
+   * membership nested under it, except for `keep`.
+   */
   readonly scopes?: Readonly<Record<string, SupabaseSuspendedScope>>;
   readonly memberships?: SupabaseSuspendedMembership;
 };
@@ -183,25 +215,42 @@ type SupabaseMemberships = {
   readonly resource?: Readonly<Record<string, SupabaseMembershipTable>>;
 };
 type AuthorizeSqlOptions = {
-  /** Postgres schema of `authorize`, `user_roles`, `role_permissions` and `app_permission`. Default `permdock`. */
+  /**
+   * Postgres schema of `authorize`, `user_roles`, `role_permissions` and
+   * `app_permission`. Default `permdock`.
+   */
   readonly schema?: string;
-  /** `database` (default) reads the tables on every call; `jwt` reads the hook-injected claims. */
+  /**
+   * `database` (default) reads the tables on every call; `jwt` reads the
+   * hook-injected claims.
+   */
   readonly authorize?: "database" | "jwt";
-  /** The policy's first scope, which `requested_tenant` is an instance of. Default `tenant`. */
+  /**
+   * The policy's first scope, which `requested_tenant` is an instance of.
+   * Default `tenant`.
+   */
   readonly scope?: string;
-  /** Membership table for tenant requests in `database` mode; without one they deny. */
+  /**
+   * Membership table for tenant requests in `database` mode; without one they
+   * deny.
+   */
   readonly tenant?: boolean | SupabaseMembershipTable;
   /**
-   * Tenant requests also answer from custom roles, through the `permdock_custom_keys` function
-   * `permdock rls generate --custom-roles` emits: the `custom_role_*` tables in `database` mode,
-   * the `memberships[].grants` claim in `jwt` mode. `declared` role names never resolve as custom.
+   * Tenant requests also answer from custom roles, through the
+   * `permdock_custom_keys` function `permdock rls generate --custom-roles`
+   * emits: the `custom_role_*` tables in `database` mode, the
+   * `memberships[].grants` claim in `jwt` mode. `declared` role names never
+   * resolve as custom.
    */
   readonly customRoles?: {
     readonly declared: readonly string[];
     /** Stored allows may carry a level (`custom_role_permissions.level`). */
     readonly levels?: true;
   };
-  /** A suspended user, or a suspended instance of `scope` for a tenant request, answers `false`. */
+  /**
+   * A suspended user, or a suspended instance of `scope` for a tenant request,
+   * answers `false`.
+   */
   readonly suspension?: SupabaseSuspension;
 };
 /** A permission reference; `rls generate` reads only its `key`. */
@@ -220,7 +269,10 @@ type SupabaseRealtime = {
     readonly write?: SupabasePermissionRef;
   }>>;
 };
-/** Storage buckets whose object paths hold a scope instance id in folder `folder` (default 1). */
+/**
+ * Storage buckets whose object paths hold a scope instance id in folder
+ * `folder` (default 1).
+ */
 type SupabaseStorage = {
   readonly buckets: Readonly<Record<string, {
     readonly scope: string;
@@ -233,26 +285,39 @@ type SupabaseStorage = {
 type SupabaseRlsOptions = {
   readonly roleClaim?: string;
   readonly tenantClaim?: string;
-  /** Postgres type of tenant columns; the tenant claim is cast to it. `rls generate` defaults to `uuid`. */
+  /**
+   * Postgres type of tenant columns; the tenant claim is cast to it. `rls
+   * generate` defaults to `uuid`.
+   */
   readonly tenantType?: string;
   readonly memberships?: SupabaseMembershipTable | SupabaseMemberships;
   readonly suspension?: SupabaseSuspension;
   readonly realtime?: SupabaseRealtime;
   readonly storage?: SupabaseStorage;
 };
+/**
+ * A membership table as `permdock.config.ts` names it: scope columns in
+ * `columns`.
+ */
+type SupabaseRlsMembershipTable = Omit<SupabaseMembershipTable, "tenant" | "team">;
 type SupabaseRlsConfig = {
   readonly dialect: "supabase";
   readonly roleClaim: string;
   readonly tenantClaim: string;
-  readonly tenantType?: string;
-  readonly memberships?: SupabaseMemberships;
+  /** `tenantType` as the type of the first scope, under its `tenant` alias. */
+  readonly scopeTypes?: Readonly<Record<string, string>>;
+  readonly memberships?: {
+    readonly scopes?: Readonly<Record<string, SupabaseRlsMembershipTable>>;
+    readonly resource?: Readonly<Record<string, SupabaseRlsMembershipTable>>;
+  };
   readonly suspension?: SupabaseSuspension;
   readonly realtime?: SupabaseRealtime;
   readonly storage?: SupabaseStorage;
 };
 /**
- * The structural shape `subjectFromSupabaseSession` reads: a discriminant and the verified JWT claims.
- * Matches any session object of that shape without importing its library.
+ * The structural shape `subjectFromSupabaseSession` reads: a discriminant and
+ * the verified JWT claims. Matches any session object of that shape without
+ * importing its library.
  */
 type SupabaseSessionLike = {
   readonly kind: string;
@@ -270,25 +335,38 @@ type SupabaseSubjectOptions = {
   readonly schema?: StandardSchemaV1;
   readonly include?: readonly SupabaseInclude[];
   readonly declared?: readonly string[];
-  /** Names for OAuth client ids: an `oauth-client` actor gets `client` set to the name of its id, which a policy delegation matches with `to: { kind: 'oauth-client', client }`. */
+  /**
+   * Names for OAuth client ids: an `oauth-client` actor gets `client` set to
+   * the name of its id, which a policy delegation matches with `to: { kind:
+   * 'oauth-client', client }`.
+   */
   readonly clients?: ClientNames;
-  /** `'deny'` maps a token with `is_anonymous: true` (`signInAnonymously()`) to the anonymous subject, as `rls.anonymousSignIns: 'deny'` does in RLS. */
+  /**
+   * `'deny'` maps a token with `is_anonymous: true` (`signInAnonymously()`) to
+   * the anonymous subject, as `rls.anonymousSignIns: 'deny'` does in RLS.
+   */
   readonly anonymousSignIns?: "deny";
   /**
-   * `true` once the caller checked the session against the Auth server for this request
-   * (`auth.getUser()` or an equivalent session check): a token with a `session_id` gets
-   * `subject.liveSession`, which `{ subject: { session: { live: true } } }` requires. Never read from claims.
+   * `true` once the caller checked the session against the Auth server for this
+   * request (`auth.getUser()` or an equivalent session check): a token with a
+   * `session_id` gets `subject.liveSession`, which `{ subject: { session: {
+   * live: true } } }` requires. Never read from claims.
    */
   readonly liveSession?: boolean;
-  /** Audit hook: `membership-dropped` for a `memberships` entry that could not be read, `invalid-chain` for a malformed `act`. */
+  /**
+   * Audit hook: `membership-dropped` for a `memberships` entry that could not
+   * be read, `invalid-chain` for a malformed `act`.
+   */
   readonly onAuth?: (event: AuthEvent) => void;
 };
 /**
- * Who acts for the user. `oauth-client`: a third-party app or an agent chain (`client_id`, or an
- * `act` without `kind`). `support`: a support session (`act.kind: "support"` with `session_id`).
- * `impersonation`: an admin acting as the user (`act.kind: "impersonation"`). `agent`: an agent
- * run better-supabase's `agentClaims` minted (`act.kind: "agent"`), with the `tools` it may call.
- * `chain` is a copy of the token's `act` claim when it has one.
+ * Who acts for the user. `oauth-client`: a third-party app or an agent chain
+ * (`client_id`, or an `act` without `kind`). `support`: a support session
+ * (`act.kind: "support"` with `session_id`). `impersonation`: an admin acting
+ * as the user (`act.kind: "impersonation"`). `agent`: an agent run
+ * better-supabase's `agentClaims` minted (`act.kind: "agent"`), with the
+ * `tools` it may call. `chain` is a copy of the token's `act` claim when it has
+ * one.
  */
 type SupabaseActor = {
   readonly id: string;
@@ -326,4 +404,4 @@ type SupabaseDelegation = {
   readonly scopes: readonly string[];
 };
 //#endregion
-export { SupabaseClaimsOptions as C, supabaseClaims as D, SupabasePermDockClaims as E, SupabaseClaims as S, SupabaseMembershipClaim as T, SupabaseSubjectOptions as _, SupabaseActor as a, SupabaseSuspension as b, SupabaseInclude as c, SupabasePrincipal as d, SupabaseRealtime as f, SupabaseStorage as g, SupabaseSessionLike as h, SupabaseActiveRow as i, SupabaseMembershipTable as l, SupabaseRlsOptions as m, RoleMap as n, SupabaseActorResult as o, SupabaseRlsConfig as p, RoleThrough as r, SupabaseDelegation as s, AuthorizeSqlOptions as t, SupabasePermissionRef as u, SupabaseSuspendedMembership as v, SupabaseClaimsSchema as w, SupabaseActClaim as x, SupabaseSuspendedScope as y };
+export { SupabaseClaims as C, SupabasePermDockClaims as D, SupabaseMembershipClaim as E, supabaseClaims as O, SupabaseActClaim as S, SupabaseClaimsSchema as T, SupabaseStorage as _, SupabaseActor as a, SupabaseSuspendedScope as b, SupabaseInclude as c, SupabasePrincipal as d, SupabaseRealtime as f, SupabaseSessionLike as g, SupabaseRlsOptions as h, SupabaseActiveRow as i, SupabaseMembershipTable as l, SupabaseRlsMembershipTable as m, RoleMap as n, SupabaseActorResult as o, SupabaseRlsConfig as p, RoleThrough as r, SupabaseDelegation as s, AuthorizeSqlOptions as t, SupabasePermissionRef as u, SupabaseSubjectOptions as v, SupabaseClaimsOptions as w, SupabaseSuspension as x, SupabaseSuspendedMembership as y };

package/dist/{types-DXmwu78Z.d.ts → types-djVzLlIV.d.ts}

@@ -1,15 +1,15 @@
-import { Gt as Snapshot, In as ApprovalRequiredDecision, Ln as Decision, Un as GrantedDecision, dt as TokenVerifier } from "./policy-types-B-F-qAZk.js";
-import { u as Permission } from "./permission-types-DhNEmoRG.js";
-import { a as PermDock } from "./permdock-Dco6dyCK.js";
-import { t as PermissionBoundaryState } from "./boundary-BmHxVH1J.js";
-import { l as PermissionState, m as ClientStore, u as ProviderOptionsBase } from "./types-CKV71kKh.js";
+import { Gt as Snapshot, In as ApprovalRequiredDecision, Ln as Decision, Un as GrantedDecision, dt as TokenVerifier } from "./policy-types-CCiDRZBH.js";
+import { u as Permission } from "./permission-types-CAY-GU7e.js";
+import { a as PermDock } from "./permdock-B6Sf4T_S.js";
+import { t as PermissionBoundaryState } from "./boundary-C9ck-3uK.js";
+import { t as ActionResult } from "./action-result-CL-QCITA.js";
+import { d as ProtectedActionView, f as ProviderOptionsBase, g as ClientStore, l as PermissionState } from "./types-B_d_g7T3.js";
 import { Snippet } from "svelte";
 import { Readable } from "svelte/store";
 //#region src/client/views.d.ts
 /**
  * What `Protected` renders: `pending` while an endpoint answer is in flight,
- * `approval` for an approval-required decision, `denied` for any other
- * denial.
+ * `approval` for an approval-required decision, `denied` for any other denial.
  */
 type ProtectedView = (PermissionState & {
   readonly slot: "pending" | "denied";
@@ -59,21 +59,30 @@ type ProtectedProps = {
   /** Rendered for an approval-required decision; defaults to `denied`. */
   readonly approval?: Snippet<[ApprovalRequiredDecision]>;
 };
-/** The instance for `tenant`, built once per store change rather than once per check. */
+/**
+ * The instance for `tenant`, built once per store change rather than once per
+ * check.
+ */
 declare function scopedFor(store: ClientStore, tenant: string | undefined, _generation?: number): PermDock | undefined;
 declare function viewFor(store: ClientStore, reference: Permission, data: unknown, scoped: PermDock | undefined, _generation?: number): ProtectedView;
 //#endregion
 //#region src/svelte/types.d.ts
 type SveltePermDockOptions = ProviderOptionsBase & {
   /**
-   * A getter (`() => data.snapshot`) or a readable store re-hydrates the
-   * store when it changes; a promise keeps the store `pending` until it
-   * settles (render the same promise with `{#await}`).
+   * A getter (`() => data.snapshot`) or a readable store re-hydrates the store
+   * when it changes; a promise keeps the store `pending` until it settles
+   * (render the same promise with `{#await}`).
    */
   readonly snapshot: Snapshot | string | (() => Snapshot | string) | Readable<Snapshot | string> | PromiseLike<Snapshot | string>;
-  /** A getter (`() => page.params.org`) switches the active tenant (`refresh({ tenant })`) when it changes. */
+  /**
+   * A getter (`() => page.params.org`) switches the active tenant (`refresh({
+   * tenant })`) when it changes.
+   */
   readonly tenant?: string | (() => string | undefined);
-  /** A getter is read on every request, so a rotated token applies without a new store. */
+  /**
+   * A getter is read on every request, so a rotated token applies without a new
+   * store.
+   */
   readonly headers?: Readonly<Record<string, string>> | (() => Readonly<Record<string, string>> | undefined);
   readonly verifier?: TokenVerifier;
   /** What every `<Protected>` renders for a snippet it leaves out. */
@@ -85,5 +94,13 @@ type PermDockDefaults = {
   readonly denied?: Snippet<[Decision]>;
   readonly approval?: Snippet<[ApprovalRequiredDecision]>;
 };
+/**
+ * `protectedAction` in Svelte: a readable store of the view, with `run` and
+ * `retry`.
+ */
+type ProtectedActionReadable<T> = Readable<ProtectedActionView<T>> & {
+  readonly run: (input: unknown) => Promise<ActionResult<T>>;
+  readonly retry: () => Promise<ActionResult<T> | undefined>;
+};
 //#endregion
-export { viewFor as a, scopedFor as i, SveltePermDockOptions as n, PermissionBoundaryProps as o, ProtectedProps as r, slotContent as s, PermDockDefaults as t };
+export { scopedFor as a, slotContent as c, ProtectedProps as i, ProtectedActionReadable as n, viewFor as o, SveltePermDockOptions as r, PermissionBoundaryProps as s, PermDockDefaults as t };

package/dist/{types-g7Oy6Zg4.d.ts → types-yUuPR5Hy.d.ts}

@@ -1,20 +1,22 @@
-import { Un as GrantedDecision, an as EmailCategory, nn as DeliveryEvent, rn as DeliveryFailureCause, tn as DeliveryChannel } from "./policy-types-B-F-qAZk.js";
-import { s as CloudEvent } from "./sink-Cp_Eot9W.js";
-import { t as ApprovalPrompt } from "./approval-prompt-K0faOLFp.js";
+import { Un as GrantedDecision, an as EmailCategory, nn as DeliveryEvent, rn as DeliveryFailureCause, tn as DeliveryChannel } from "./policy-types-CCiDRZBH.js";
+import { s as CloudEvent } from "./sink-Dvi7YZG_.js";
+import { t as ApprovalPrompt } from "./approval-prompt-PYagyQUj.js";
 //#region src/delivery/types.d.ts
 /**
  * Who a delivery goes to. `{ principal }` names an app principal and the
  * address the server loaded for it on `channel`. `{ address }` alone is an
  * email or chat identity that resolves through
- * `PrincipalSource.principalByIdentity`; with no principal linked it is
- * refused unless `trusted` is set for an address the server loaded itself,
- * such as a customer's billing email, and then the sender must hold the
- * permission.
+ * `PrincipalSource.principalByIdentity`; with no principal linked it is refused
+ * unless `trusted` is set for an address the server loaded itself, such as a
+ * customer's billing email, and then the sender must hold the permission.
  */
 type Recipient = {
   readonly principal: string;
   readonly channel: DeliveryChannel;
-  /** An RFC 5322 `addr-spec`, a chat platform user id, or an https webhook endpoint. */
+  /**
+   * An RFC 5322 `addr-spec`, a chat platform user id, or an https webhook
+   * endpoint.
+   */
   readonly address: string;
   /** The chat platform (`slack`, `teams`, …). */
   readonly provider?: string;
@@ -26,28 +28,43 @@ type Recipient = {
   /** The chat platform; required for a chat address. */
   readonly provider?: string;
   readonly workspace?: string;
-  /** `true` only for an address the server loaded itself, never one from a request. */
+  /**
+   * `true` only for an address the server loaded itself, never one from a
+   * request.
+   */
   readonly trusted?: boolean;
 };
-/** One-click unsubscribe (RFC 8058): an https URL, plus an optional `mailto:` address. */
+/**
+ * One-click unsubscribe (RFC 8058): an https URL, plus an optional `mailto:`
+ * address.
+ */
 type EmailUnsubscribe = {
   readonly url: string;
   readonly mailto?: string;
 };
 type EmailMessage = {
-  /** Defaults to the router's `from`. A name-addr (`Acme <billing@acme.test>`) is allowed here. */
+  /**
+   * Defaults to the router's `from`. A name-addr (`Acme <billing@acme.test>`)
+   * is allowed here.
+   */
   readonly from?: string;
   readonly replyTo?: string;
   readonly subject: string;
   readonly text: string;
   readonly html?: string;
-  /** Extra headers. `Auto-Submitted` and the `List-Unsubscribe` pair are the router's. */
+  /**
+   * Extra headers. `Auto-Submitted` and the `List-Unsubscribe` pair are the
+   * router's.
+   */
   readonly headers?: Readonly<Record<string, string>>;
   readonly category: EmailCategory;
   /** Required on `notification`, ignored on every other category. */
   readonly unsubscribe?: EmailUnsubscribe | ((target: DeliveryTarget<"email">) => EmailUnsubscribe);
 };
-/** An email as a transport receives it: `from` set and the standards headers added. */
+/**
+ * An email as a transport receives it: `from` set and the standards headers
+ * added.
+ */
 type OutgoingEmail = Omit<EmailMessage, "from" | "unsubscribe" | "headers"> & {
   readonly from: string;
   readonly headers: Readonly<Record<string, string>>;
@@ -76,9 +93,9 @@ type TransportMessages = {
   readonly webhook: WebhookMessage;
 };
 /**
- * A recipient the router checked: the granted decision that let it through
- * and the address in the form the channel compares. A transport refuses a
- * target without a granted `decision` (`isDeliveryTarget`).
+ * A recipient the router checked: the granted decision that let it through and
+ * the address in the form the channel compares. A transport refuses a target
+ * without a granted `decision` (`isDeliveryTarget`).
  */
 type DeliveryTarget<C extends DeliveryChannel = DeliveryChannel> = {
   readonly channel: C;
@@ -91,7 +108,10 @@ type DeliveryTarget<C extends DeliveryChannel = DeliveryChannel> = {
   readonly decision: GrantedDecision;
 };
 type TransportOptions = {
-  /** Stable for one delivery id and recipient: the provider's `Idempotency-Key` and the `webhook-id`. */
+  /**
+   * Stable for one delivery id and recipient: the provider's `Idempotency-Key`
+   * and the `webhook-id`.
+   */
   readonly idempotencyKey: string;
   /** The delivery id every recipient of one `deliver` call shares. */
   readonly delivery: string;
@@ -113,19 +133,19 @@ type TransportItem<C extends DeliveryChannel = DeliveryChannel> = {
   readonly options: TransportOptions;
 };
 /**
- * One channel's sender. `deliver` resolves to a result; a throw or a
- * rejection counts as a retryable `unavailable` failure.
+ * One channel's sender. `deliver` resolves to a result; a throw or a rejection
+ * counts as a retryable `unavailable` failure.
  */
 type DeliveryTransport<C extends DeliveryChannel = DeliveryChannel> = {
   readonly channel: C;
   /** The provider name delivery events carry (`resend`, `chat-sdk`, `webhook`). */
   readonly name: string;
-  deliver(target: DeliveryTarget<C>, message: TransportMessages[C], options: TransportOptions): DeliveryResult | Promise<DeliveryResult>;
+  deliver: (target: DeliveryTarget<C>, message: TransportMessages[C], options: TransportOptions) => DeliveryResult | Promise<DeliveryResult>;
   /**
-   * Sends several deliveries in one provider call, one result per item in
-   * item order. The router uses it for two or more ready recipients.
+   * Sends several deliveries in one provider call, one result per item in item
+   * order. The router uses it for two or more ready recipients.
    */
-  deliverBatch?(items: readonly TransportItem<C>[]): readonly DeliveryResult[] | Promise<readonly DeliveryResult[]>;
+  deliverBatch?: (items: readonly TransportItem<C>[]) => readonly DeliveryResult[] | Promise<readonly DeliveryResult[]>;
   /** The most items one `deliverBatch` call takes. Defaults to 100. */
   readonly batchSize?: number;
 };
@@ -141,7 +161,10 @@ type DeliveryTransports = {
   readonly webhook?: WebhookTransport;
 };
 type DeliverOptions = {
-  /** Keep it across retries so each recipient's idempotency key repeats. Defaults to `dlv_` and a random UUID. */
+  /**
+   * Keep it across retries so each recipient's idempotency key repeats.
+   * Defaults to `dlv_` and a random UUID.
+   */
   readonly id?: string;
   /** The approval request id a prompt is delivered for, on every event. */
   readonly approval?: string;

package/dist/unplugin/index.d.ts

@@ -1,4 +1,4 @@
-import { a as PermDockPluginOptions } from "../types-BWZybqs9.js";
+import { s as PermDockPluginOptions } from "../types-DC1Loeh3.js";
 import { createUnplugin } from "unplugin";
 //#region src/unplugin/index.d.ts
 type CreateUnplugin = typeof createUnplugin<PermDockPluginOptions | undefined>;

package/dist/unplugin/index.js

@@ -1,5 +1,5 @@
-import { n as createCollectScheduler, r as report } from "../watch-C-4VmFlL.js";
-import { r as peerHint } from "../peer-12Q5I_RH.js";
+import { n as createCollectScheduler, r as report } from "../watch-Cx_WciLE.js";
+import { r as peerHint } from "../peer-Q0fuZ6hx.js";
 import { createRequire } from "node:module";
 //#region src/unplugin/index.ts
 function loadCreateUnplugin() {

package/dist/usage-CYeXek0p.js

@@ -0,0 +1 @@
+export { t as runUsage } from "./usage-CxEzS4ey.js";