permdock 0.7.0 → 0.9.0

package/dist/{create-Cb86Z8Im.js → create-6EwRQlig.js}

@@ -1,10 +1,10 @@
 import { t as compact } from "./compact-CAf557ZB.js";
-import { n as freezeDeep } from "./freeze-CrU8nQeX.js";
-import { o as deniedFor } from "./where-scope-wq2coopv.js";
-import { l as withApp } from "./permdock-BfWEeMqk.js";
-import { t as composeWraps } from "./wrap-CiSc_KCq.js";
-import { r as instanceOptions } from "./build-instance-DxE7czo9.js";
-import { n as createAgentKernel } from "./kernel-DVExUwkp.js";
+import { n as freezeDeep } from "./freeze-jjan0lCv.js";
+import { o as deniedFor } from "./where-scope-DlCdCM_8.js";
+import { l as withApp } from "./permdock-BvjivVb9.js";
+import { t as composeWraps } from "./wrap-B2wziJI_.js";
+import { r as instanceOptions } from "./build-instance-BWXqwQYU.js";
+import { n as createAgentKernel } from "./kernel-qv4cr9w8.js";
 //#region src/agent/create.ts
 function modelRow(modelId) {
 	return { id: modelId };
@@ -34,7 +34,10 @@ function decideModelOn(permdock, models, modelId, adapter) {
 		return deniedFor(permission, "closure-error");
 	}
 }
-/** Builds the agent contract and its kernel for an adapter named `adapter`; `runtime.stepUp` sets `stepUp` on denied verdicts. */
+/**
+* Builds the agent contract and its kernel for an adapter named `adapter`;
+* `runtime.stepUp` sets `stepUp` on denied verdicts.
+*/
 function agentRuntime(policy, options, adapter, runtime = {}) {
 	const kernel = createAgentKernel(policy, {
 		...compact({

package/dist/{create-DJrlhEp9.js → create-BLPKnJKa.js}

@@ -1,15 +1,15 @@
 import { t as compact } from "./compact-CAf557ZB.js";
-import { n as freezeDeep } from "./freeze-CrU8nQeX.js";
-import { n as problemDetails } from "./problem-details-cn5X30gZ.js";
-import { c as listPermissions } from "./permission-registry-DpPtSKNZ.js";
+import { n as freezeDeep } from "./freeze-jjan0lCv.js";
+import { n as problemDetails } from "./problem-details-CLDgX1KV.js";
+import { c as listPermissions } from "./permission-registry-B8tYxPIt.js";
 import { n as resourceRef } from "./resource-ref-CaS9yVPi.js";
-import { i as challengeScope, l as withApp } from "./permdock-BfWEeMqk.js";
-import { r as hasCredentials } from "./http-BBoKefeS.js";
-import { i as decisionResponse, o as notFoundProblem, s as problemFromDecision, t as ANONYMOUS, u as unauthenticatedProblem } from "./problem-CTviyH5L.js";
-import { n as resolveOrNull } from "./build-instance-DxE7czo9.js";
-import { l as InvalidSignatureError, n as applyApprovalResume, o as evaluationsHandler } from "./evaluations-DReoiVBw.js";
-import { n as tenantScope, t as actorFrom } from "./adapter-context-CRhqyzCk.js";
-import { n as requestContext, t as buildReportingInstance } from "./request-context-BykKLmyE.js";
+import { i as challengeScope, l as withApp } from "./permdock-BvjivVb9.js";
+import { r as hasCredentials } from "./http-DKLXrFGk.js";
+import { a as decisionResponse, c as problemFromDecision, d as unauthenticatedProblem, s as notFoundProblem, t as ANONYMOUS } from "./problem-BVLHFK33.js";
+import { n as resolveOrNull } from "./build-instance-BWXqwQYU.js";
+import { _ as LOAD_FAILED, l as InvalidSignatureError, n as applyApprovalResume, o as evaluationsHandler } from "./evaluations-IBceAeKT.js";
+import { n as tenantScope, t as actorFrom } from "./adapter-context-CIQpQxbE.js";
+import { n as requestContext, t as buildReportingInstance } from "./request-context-Duzdf0cd.js";
 //#region src/server/kernel-problems.ts
 const NOT_DELEGATED = freezeDeep({
 	outcome: "denied",
@@ -19,14 +19,6 @@ const NOT_DELEGATED = freezeDeep({
 	}],
 	alternatives: []
 });
-const LOAD_FAILED = freezeDeep({
-	outcome: "denied",
-	denials: [{
-		role: null,
-		reason: "validation"
-	}],
-	alternatives: []
-});
 /** The `403` for a loader that threw: the check fails closed, as on MCP. */
 function loadFailedProblem(permission) {
 	const key = permission?.key ?? "the route";
@@ -36,7 +28,10 @@ function loadFailedProblem(permission) {
 		permission: permission?.key
 	})), LOAD_FAILED);
 }
-/** The `403` `insufficient_scope` for a token that holds none of a route's OAuth scopes. */
+/**
+* The `403` `insufficient_scope` for a token that holds none of a route's OAuth
+* scopes.
+*/
 function scopeProblem(permission, subject, credentials, scope) {
 	return permission === null ? decisionResponse(problemDetails(compact({
 		decision: NOT_DELEGATED,
@@ -175,6 +170,11 @@ async function resolveActor(request, options) {
 	return (options.webBotAuth === void 0 ? void 0 : await options.webBotAuth.verify(request)) ?? actorFrom(options.actor, request);
 }
 const NO_TENANT = "\0";
+const READ_METHODS = /* @__PURE__ */ new Set([
+	"GET",
+	"HEAD",
+	"OPTIONS"
+]);
 /**
 * The Fetch factory behind every HTTP adapter. The subject and actor are
 * resolved once per `Request`; one instance is cached per `(Request, tenant)`,
@@ -205,7 +205,17 @@ function createPermDock(policy, given) {
 		return resolved;
 	};
 	const reporters = /* @__PURE__ */ new WeakMap();
-	const instanceFor = async ({ user, actor, context, errors }, tenant) => {
+	const intentOf = (request) => {
+		let chosen;
+		try {
+			chosen = options.intent?.(request);
+		} catch {
+			return "write";
+		}
+		if (chosen === void 0) return READ_METHODS.has(request.method) ? "read" : "write";
+		return chosen === "read" ? "read" : "write";
+	};
+	const instanceFor = async ({ user, actor, context, errors }, tenant, intent) => {
 		const built = await buildReportingInstance({
 			policy,
 			user,
@@ -213,7 +223,8 @@ function createPermDock(policy, given) {
 			scope: {
 				tenant,
 				actor,
-				context
+				context,
+				intent
 			},
 			errors,
 			wrap: (created) => options.wrap === void 0 ? created : options.wrap(created)
@@ -236,16 +247,15 @@ function createPermDock(policy, given) {
 		const key = tenant ?? NO_TENANT;
 		const hit = byTenant.get(key);
 		if (hit !== void 0) return hit;
-		const built = (async () => instanceFor(await resolveSubject(request), tenant))();
+		const built = (async () => instanceFor(await resolveSubject(request), tenant, intentOf(request)))();
 		byTenant.set(key, built);
 		return built;
 	};
 	const connection = async (request, connectionOptions = {}, scope) => {
 		const { tenant } = scope ?? await tenantScope(options.tenant, request);
-		const { openConnection } = await import("./connection-DjhIJSs2.js");
-		return openConnection({
+		return (await import("./connection-B72dg5Q2.js")).openConnection({
 			open: async () => (await build(request, { tenant })).permdock,
-			rebuild: async () => (await instanceFor(await freshSubject(request), tenant)).permdock,
+			rebuild: async () => (await instanceFor(await freshSubject(request), tenant, "write")).permdock,
 			tenant,
 			...options.revocations === void 0 ? {} : { feed: options.revocations },
 			adapter,

package/dist/{create-UTnUVETj.d.ts → create-BPUopdfL.d.ts}

@@ -1,18 +1,18 @@
-import { Ln as Decision, T as Policy, j as PolicyVocabulary, lr as Subject, rr as Delegation, sr as Principal } from "./policy-types-B-F-qAZk.js";
-import { u as Permission } from "./permission-types-DhNEmoRG.js";
-import { t as Operation } from "./operations-BNLes61x.js";
-import { a as PermDock } from "./permdock-Dco6dyCK.js";
-import { m as ApprovalStore } from "./types-DC44-hqb.js";
-import { t as InstanceOptions } from "./instance-options-CU0YQCLH.js";
+import { T as Policy, Un as Decision, hr as Subject, j as PolicyVocabulary, lr as Delegation, pr as Principal } from "./policy-types-DGIO_gxq.js";
+import { u as Permission } from "./permission-types-CAY-GU7e.js";
+import { t as Operation } from "./operations-Ci_rT6Uo.js";
+import { a as PermDock } from "./permdock-CprAPN3w.js";
+import { m as ApprovalStore } from "./types-DLvhVm1r.js";
+import { t as InstanceOptions } from "./instance-options-CoHn-0e8.js";
 import { t as RequestContext } from "./request-context-C2_1lchh.js";
-import { n as PermDockWrap } from "./wrap-B6R0cMRL.js";
-import { o as OtelWrap } from "./types-CIeZcG8v.js";
-import { t as DeniedText } from "./denied-text-D4qkEtFz.js";
+import { n as PermDockWrap } from "./wrap-DxXB54Wu.js";
+import { o as OtelWrap } from "./types-B6ExllNo.js";
+import { t as DeniedText } from "./denied-text-DHldhVUv.js";
 //#region src/agent/step-up.d.ts
 /**
- * What the user can do to lift a denial: authenticate again with the `acr`
- * and `maxAge` the failing grants ask for, or activate a role they are
- * eligible for. A hint for the user; the call is decided again afterwards.
+ * What the user can do to lift a denial: authenticate again with the `acr` and
+ * `maxAge` the failing grants ask for, or activate a role they are eligible
+ * for. A hint for the user; the call is decided again afterwards.
  */
 type StepUp = {
   readonly kind: "authentication";
@@ -27,43 +27,55 @@ type StepUp = {
 };
 //#endregion
 //#region src/agent/types.d.ts
-/** The part of an operation a tool decision reads; an `OperationMap` entry is one. */
+/**
+ * The part of an operation a tool decision reads; an `OperationMap` entry is
+ * one.
+ */
 type ToolBinding = Pick<Operation, "permission" | "data" | "results"> & Partial<Pick<Operation, "name" | "meta">>;
 type ToolMap = Readonly<Record<string, ToolBinding>>;
 /**
  * The models an agent may call, by model id (`'openai/gpt-5'`), each bound to
- * the permission that grants it. An instance permission is decided on the
- * row `{ id }`.
+ * the permission that grants it. An instance permission is decided on the row
+ * `{ id }`.
  */
 type ModelMap = Readonly<Record<string, Permission>>;
-/** The options `permdock/ai-sdk`, `permdock/openai`, `permdock/claude-agent` and `permdock/eve` share. */
+/**
+ * The options `permdock/ai-sdk`, `permdock/openai`, `permdock/claude-agent` and
+ * `permdock/eve` share.
+ */
 type AgentAdapterOptions<TContext, TUser = unknown> = InstanceOptions & {
   /** The user, or a full `Subject` (core then skips `policy.subject`). */
   readonly subject: (context: TContext) => TUser | Subject | Promise<TUser | Subject>;
   readonly actor?: (context: TContext) => unknown;
   readonly delegation?: (context: TContext) => Delegation | undefined | Promise<Delegation | undefined>;
   readonly tenant?: string | ((context: TContext) => string | undefined | Promise<string | undefined>);
-  /** The tools the agent may call, by tool name: the map `defineOperations` returns. */
+  /**
+   * The tools the agent may call, by tool name: the map `defineOperations`
+   * returns.
+   */
   readonly operations: ToolMap;
   /**
-   * The model gate. Absent: the adapter never checks a model. Present: a
-   * model id it does not name is denied.
+   * The model gate. Absent: the adapter never checks a model. Present: a model
+   * id it does not name is denied.
    */
   readonly models?: ModelMap;
   readonly store?: ApprovalStore;
   /**
-   * Tools `operations` does not name. `'deny'` (default) denies them.
-   * `'allow'` leaves them to the runtime's own approval.
+   * Tools `operations` does not name. `'deny'` (default) denies them. `'allow'`
+   * leaves them to the runtime's own approval.
    */
   readonly unmapped?: "deny" | "allow";
   /**
-   * Request values merged into `subject.context`, under `policy.context`.
-   * Only values the server derived belong here, never model output.
+   * Request values merged into `subject.context`, under `policy.context`. Only
+   * values the server derived belong here, never model output.
    */
   readonly context?: (context: TContext) => RequestContext | undefined | Promise<RequestContext | undefined>;
   /** `(permdock) => withOtel(permdock, options)` from `permdock/otel`. */
   readonly otel?: OtelWrap;
-  /** Wraps each instance after `otel`; build it with `wrapPermDock` to cover derived instances. */
+  /**
+   * Wraps each instance after `otel`; build it with `wrapPermDock` to cover
+   * derived instances.
+   */
   readonly wrap?: PermDockWrap;
   /** Replaces the denial reason or approval summary text; nothing else. */
   readonly deniedText?: DeniedText;
@@ -82,7 +94,10 @@ type ToolVerdict = {
   }> | null;
   readonly permission: Permission | undefined;
   readonly reason: string;
-  /** What the user can do to lift the denial; set only by an adapter with step-ups on (`permdock/ai-sdk` `stepUp`). */
+  /**
+   * What the user can do to lift the denial; set only by an adapter with
+   * step-ups on (`permdock/ai-sdk` `stepUp`).
+   */
   readonly stepUp?: StepUp;
 } | {
   readonly outcome: "approval-required";
@@ -107,9 +122,15 @@ type DecideToolOptions = {
 //#endregion
 //#region src/agent/create.d.ts
 type AgentPermDockOptions<TContext, TUser = unknown> = AgentAdapterOptions<TContext, TUser>;
-/** What one operation call decides: granted with the loaded row, denied with the text a model reads, or parked for approval. */
+/**
+ * What one operation call decides: granted with the loaded row, denied with the
+ * text a model reads, or parked for approval.
+ */
 type OperationVerdict = ToolVerdict;
-/** `providerOptions` for the Vercel AI Gateway: spend and usage attributed to the caller. */
+/**
+ * `providerOptions` for the Vercel AI Gateway: spend and usage attributed to
+ * the caller.
+ */
 type GatewayOptions = {
   readonly gateway: {
     readonly user?: string;
@@ -123,29 +144,41 @@ type GatewayOptions = {
  * their runtime calls.
  */
 type AgentPermDock<TContext, V extends PolicyVocabulary = PolicyVocabulary> = {
-  /** One instance per context object while a call is in flight; later calls re-read the subject. */
+  /**
+   * One instance per context object while a call is in flight; later calls
+   * re-read the subject.
+   */
   readonly getPermDock: (context: TContext) => Promise<PermDock<V>>;
   /**
-   * Decides operation `name` on `input`: loads the row through the
-   * operation's `data`, validates it, decides and resumes an approval. Never
-   * throws; an operation `operations` does not name is denied.
+   * Decides operation `name` on `input`: loads the row through the operation's
+   * `data`, validates it, decides and resumes an approval. Never throws; an
+   * operation `operations` does not name is denied.
    */
   readonly decideOperation: (name: string, input: unknown, context: TContext, options?: DecideToolOptions) => Promise<OperationVerdict>;
-  /** Operation names the subject could be granted for some row; a listing hint, never a decision. */
+  /**
+   * Operation names the subject could be granted for some row; a listing hint,
+   * never a decision.
+   */
   readonly allowedOperations: (context: TContext) => Promise<ReadonlySet<string>>;
   /** The approval token a call would park under, without touching the store. */
   readonly tokenFor: (name: string, input: unknown, context: TContext) => Promise<string | undefined>;
-  /** Decides whether the subject may call model `modelId`. A model `models` does not name is denied. */
+  /**
+   * Decides whether the subject may call model `modelId`. A model `models` does
+   * not name is denied.
+   */
   readonly decideModel: (modelId: string, context: TContext) => Promise<Decision>;
   /** The ids in `models` the subject is granted, in declaration order. */
   readonly permittedModels: (context: TContext) => Promise<readonly string[]>;
   /**
-   * The rows of an operation's output the subject may see, by the
-   * operation's `results` permission. Without `results` the rows come back
-   * unchanged; an operation `operations` does not name returns none.
+   * The rows of an operation's output the subject may see, by the operation's
+   * `results` permission. Without `results` the rows come back unchanged; an
+   * operation `operations` does not name returns none.
    */
   readonly filterResults: <T>(name: string, rows: readonly T[], context: TContext) => Promise<T[]>;
-  /** `providerOptions.gateway` with the principal as `user` and the tenant and actor as tags. */
+  /**
+   * `providerOptions.gateway` with the principal as `user` and the tenant and
+   * actor as tags.
+   */
   readonly gatewayOptions: (context: TContext) => Promise<GatewayOptions>;
 };
 /**

package/dist/{create-QHuuPw3q.d.ts → create-BamXmeob.d.ts}

@@ -1,10 +1,10 @@
-import { Ln as Decision, Rn as Denial, Rt as Instant, T as Policy, Zt as AuthEvent, dt as TokenVerifier, j as PolicyVocabulary, sr as Principal, ut as TokenSigner } from "./policy-types-B-F-qAZk.js";
-import { u as Permission } from "./permission-types-DhNEmoRG.js";
-import { a as PermDock, h as PrincipalSource, n as DecideOptions, o as PermDockOptions } from "./permdock-Dco6dyCK.js";
-import { m as ApprovalStore } from "./types-DC44-hqb.js";
-import { a as AutomationSource } from "./automation-DOtAFWdy.js";
-import { n as ApprovalWaiter } from "./waiter-DwEyouan.js";
-import { i as RunBinding, r as RunAutomation } from "./run-ticket-BpNi7BCi.js";
+import { T as Policy, Un as Decision, Wn as Denial, Wt as Instant, ht as TokenVerifier, j as PolicyVocabulary, mt as TokenSigner, pr as Principal, rn as AuthEvent } from "./policy-types-DGIO_gxq.js";
+import { u as Permission } from "./permission-types-CAY-GU7e.js";
+import { _ as PrincipalSource, a as PermDock, n as DecideOptions, o as PermDockOptions } from "./permdock-CprAPN3w.js";
+import { m as ApprovalStore } from "./types-DLvhVm1r.js";
+import { a as AutomationSource } from "./automation-C6Jg75xq.js";
+import { n as ApprovalWaiter } from "./waiter-CqUKX6CY.js";
+import { i as RunBinding, r as RunAutomation } from "./run-ticket-B2o2Kxz8.js";
 //#region src/workflow/create.d.ts
 type WorkflowPermDockOptions = PermDockOptions & {
   /** Signs the run tickets `start` mints. */
@@ -15,7 +15,10 @@ type WorkflowPermDockOptions = PermDockOptions & {
   readonly principals: PrincipalSource;
   /** The live automation records, read by `start` and on every `getPermDock`. */
   readonly automations: AutomationSource;
-  /** Where `awaitApproval` opens and resumes requests; the same option name as every other adapter. */
+  /**
+   * Where `awaitApproval` opens and resumes requests; the same option name as
+   * every other adapter.
+   */
   readonly store?: ApprovalStore;
   /** Suspends `awaitApproval` until a request is decided. */
   readonly waiter?: ApprovalWaiter;
@@ -36,7 +39,10 @@ type AutomationOptions = {
   readonly caller?: PermDock;
   /** The row `run` is decided on, when it is an instance permission. */
   readonly row?: unknown;
-  /** The event that started the run, as JSON. Kept in `subject.context.trigger`; never a grant. */
+  /**
+   * The event that started the run, as JSON. Kept in `subject.context.trigger`;
+   * never a grant.
+   */
   readonly trigger?: Readonly<Record<string, unknown>>;
   /** The run id (`jti`); a fresh UUID when absent. */
   readonly id?: string;
@@ -55,7 +61,10 @@ type StartAutomationResult = {
   readonly denials: readonly Denial[];
 };
 type AwaitApprovalOptions = DecideOptions & {
-  /** The resource the approval request names; defaults to the permission's resource and the row's `id`. */
+  /**
+   * The resource the approval request names; defaults to the permission's
+   * resource and the row's `id`.
+   */
   readonly resource?: {
     readonly type: string;
     readonly id?: string;
@@ -66,30 +75,29 @@ type AwaitApprovalOptions = DecideOptions & {
 };
 type WorkflowPermDock<V extends PolicyVocabulary = PolicyVocabulary> = {
   /**
-   * Starts a run of the automation `id` and returns its run ticket. Denied
-   * when the automation is unknown or revoked (`validation`) or when the
-   * caller is not granted its `run` permission.
+   * Starts a run of the automation `id` and returns its run ticket. Denied when
+   * the automation is unknown or revoked (`validation`) or when the caller is
+   * not granted its `run` permission.
    */
   readonly start: (id: string, options?: AutomationOptions) => Promise<StartAutomationResult>;
   /**
-   * The PermDock of a run, rebuilt from its ticket: the principal loaded
-   * live, narrowed to the automation's permissions and to any policy
-   * delegation to `actor('automation')`. A changed, revoked or unknown
-   * automation, or a publisher who is gone, gives an anonymous instance
-   * that denies everything.
+   * The PermDock of a run, rebuilt from its ticket: the principal loaded live,
+   * narrowed to the automation's permissions and to any policy delegation to
+   * `actor('automation')`. A changed, revoked or unknown automation, or a
+   * publisher who is gone, gives an anonymous instance that denies everything.
    */
   readonly getPermDock: (ticket: string) => Promise<PermDock<V>>;
   /**
-   * Decides `permission`; on `approval-required` opens a request, waits on
-   * the `waiter`, then rebuilds the run from its ticket and decides again
-   * with the token. The second decision reads the publisher's rights as of
-   * then, so a demotion while waiting denies.
+   * Decides `permission`; on `approval-required` opens a request, waits on the
+   * `waiter`, then rebuilds the run from its ticket and decides again with the
+   * token. The second decision reads the publisher's rights as of then, so a
+   * demotion while waiting denies.
    */
   readonly awaitApproval: (ticket: string, permission: Permission, data?: unknown, options?: AwaitApprovalOptions) => Promise<Decision>;
   /**
-   * The first half of `awaitApproval`, for runners that wait outside the
-   * call: decides, and on `approval-required` opens the request and returns
-   * the decision with its token.
+   * The first half of `awaitApproval`, for runners that wait outside the call:
+   * decides, and on `approval-required` opens the request and returns the
+   * decision with its token.
    */
   readonly openApproval: (ticket: string, permission: Permission, data?: unknown, options?: AwaitApprovalOptions) => Promise<Decision>;
   /**
@@ -100,10 +108,10 @@ type WorkflowPermDock<V extends PolicyVocabulary = PolicyVocabulary> = {
   readonly resumeApproval: (ticket: string, permission: Permission, token: string, data?: unknown, options?: AwaitApprovalOptions) => Promise<Decision>;
 };
 /**
- * Creates the PermDock for durable runs of published automations. A run
- * acts as the automation's principal with that principal's rights at each
- * step, narrowed to the automation's operations; the trigger is recorded
- * and never grants.
+ * Creates the PermDock for durable runs of published automations. A run acts as
+ * the automation's principal with that principal's rights at each step,
+ * narrowed to the automation's operations; the trigger is recorded and never
+ * grants.
  */
 declare function createPermDock<TUser, TPrincipal extends Principal = Principal, V extends PolicyVocabulary = PolicyVocabulary>(policy: Policy<TUser, TPrincipal, V>, given: WorkflowPermDockOptions): WorkflowPermDock<V>;
 //#endregion

package/dist/{create-B2-CQqCI.d.ts → create-DBvUsgzK.d.ts}

@@ -1,14 +1,14 @@
-import { In as ApprovalRequiredDecision, T as Policy, Un as GrantedDecision, Vn as DeniedDecision, j as PolicyVocabulary, lr as Subject, sr as Principal } from "./policy-types-B-F-qAZk.js";
-import { t as Operation } from "./operations-BNLes61x.js";
-import { a as PermDock, h as PrincipalSource, o as PermDockOptions } from "./permdock-Dco6dyCK.js";
-import { m as ApprovalStore, p as ApprovalStatus } from "./types-DC44-hqb.js";
-import { n as ApprovalErrorCode } from "./errors-BWXBMaKK.js";
-import { t as ApprovalPrompt } from "./approval-prompt-K0faOLFp.js";
+import { Hn as ApprovalRequiredDecision, T as Policy, Yn as GrantedDecision, hr as Subject, j as PolicyVocabulary, pr as Principal, qn as DeniedDecision } from "./policy-types-DGIO_gxq.js";
+import { t as Operation } from "./operations-Ci_rT6Uo.js";
+import { _ as PrincipalSource, a as PermDock, o as PermDockOptions } from "./permdock-CprAPN3w.js";
+import { m as ApprovalStore, p as ApprovalStatus } from "./types-DLvhVm1r.js";
+import { n as ApprovalErrorCode } from "./errors-CHwoRRpB.js";
+import { t as ApprovalPrompt } from "./approval-prompt-3BqWczTt.js";
 //#region src/chat/subject.d.ts
 /**
- * The platform user behind a chat message or action. Fill it only from an
- * event whose platform signature the transport verified; a body field or a
- * model argument is never an author.
+ * The platform user behind a chat message or action. Fill it only from an event
+ * whose platform signature the transport verified; a body field or a model
+ * argument is never an author.
  */
 type ChatAuthor = {
   /** The chat platform (`slack`, `teams`, `discord`, …). */
@@ -18,7 +18,10 @@ type ChatAuthor = {
   /** The workspace, team or tenant id on the platform. */
   readonly workspace?: string;
 };
-/** The principal a chat author's identity link names, as the `PrincipalSource` returns it. */
+/**
+ * The principal a chat author's identity link names, as the `PrincipalSource`
+ * returns it.
+ */
 type ChatPrincipal = Principal;
 type SubjectFromChatOptions = {
   /** Resolves the author through `principalByIdentity({ kind: 'chat', … })`. */
@@ -26,16 +29,22 @@ type SubjectFromChatOptions = {
 };
 declare function isChatAuthor(value: unknown): value is ChatAuthor;
 /**
- * The subject a chat author acts as: the principal its identity link
- * names, or anonymous when there is no link. Never throws.
+ * The subject a chat author acts as: the principal its identity link names, or
+ * anonymous when there is no link. Never throws.
  */
 declare function subjectFromChat(author: ChatAuthor | null | undefined, options: SubjectFromChatOptions): Promise<Subject>;
 //#endregion
 //#region src/chat/create.d.ts
 type ChatPermDockOptions = PermDockOptions & {
-  /** Resolves chat authors through `principalByIdentity`; also the instance's principal source. */
+  /**
+   * Resolves chat authors through `principalByIdentity`; also the instance's
+   * principal source.
+   */
   readonly principals: PrincipalSource;
-  /** Where approval requests open and resolve. Without it an approval-required command only reports the decision. */
+  /**
+   * Where approval requests open and resolve. Without it an approval-required
+   * command only reports the decision.
+   */
   readonly store?: ApprovalStore;
 };
 /** What a protected command's handler receives once the author is granted. */
@@ -56,12 +65,21 @@ type ChatCommandResult<T> = {
 } | {
   readonly outcome: "approval-required";
   readonly decision: ApprovalRequiredDecision;
-  /** The open request to deliver to approvers; `null` without an approval store. */
+  /**
+   * The open request to deliver to approvers; `null` without an approval
+   * store.
+   */
   readonly prompt: ApprovalPrompt | null;
 };
-/** A command guarded by `protect`. Never throws for a refusal; the handler's own errors propagate. */
+/**
+ * A command guarded by `protect`. Never throws for a refusal; the handler's own
+ * errors propagate.
+ */
 type ChatCommand<TInput, T> = (author: ChatAuthor | null | undefined, input: TInput) => Promise<ChatCommandResult<T>>;
-/** A verdict from a chat button or reaction, by approval request `id`; the token never leaves the server. */
+/**
+ * A verdict from a chat button or reaction, by approval request `id`; the token
+ * never leaves the server.
+ */
 type ChatAction = {
   readonly approval: string;
   readonly status: "approved" | "rejected";
@@ -76,24 +94,27 @@ type ChatActionResult = {
   readonly cause: ApprovalErrorCode | "invalid-action";
 };
 /**
- * The runtime-neutral chat contract: commands decided as the linked
- * principal of a verified chat author, and approval verdicts from chat
- * actions. `permdock/chat-sdk` implements it for Chat SDK bots.
+ * The runtime-neutral chat contract: commands decided as the linked principal
+ * of a verified chat author, and approval verdicts from chat actions.
+ * `permdock/chat-sdk` implements it for Chat SDK bots.
  */
 type ChatPermDock<V extends PolicyVocabulary = PolicyVocabulary> = {
-  /** The instance for `author`; anonymous, and so denying, when the author is unlinked. */
+  /**
+   * The instance for `author`; anonymous, and so denying, when the author is
+   * unlinked.
+   */
   readonly getPermDock: (author: ChatAuthor | null | undefined) => Promise<PermDock<V>>;
   /**
-   * Guards `handler` with `operation`: loads the row through the
-   * operation's `data`, decides as the author, and on `approval-required`
-   * opens one request per author, permission and row. The handler runs only
-   * when granted; an approved request runs it once.
+   * Guards `handler` with `operation`: loads the row through the operation's
+   * `data`, decides as the author, and on `approval-required` opens one request
+   * per author, permission and row. The handler runs only when granted; an
+   * approved request runs it once.
    */
   readonly protect: <TInput, T>(operation: Operation<TInput>, handler: (context: ChatCommandContext<TInput, V>) => T | Promise<T>) => ChatCommand<TInput, T>;
   /**
-   * Resolves approval request `action.approval` as `author`. The author must
-   * be linked and an eligible, distinct approver; the request's requester
-   * never approves their own request.
+   * Resolves approval request `action.approval` as `author`. The author must be
+   * linked and an eligible, distinct approver; the request's requester never
+   * approves their own request.
    */
   readonly resolveAction: (author: ChatAuthor | null | undefined, action: ChatAction) => Promise<ChatActionResult>;
 };