permdock 0.8.0 → 0.9.0

package/dist/a2a/index.d.ts

@@ -1,8 +1,8 @@
-import { $n as AuthorizationDetail, T as Policy, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { T as Policy, ar as AuthorizationDetail, pr as Principal } from "../policy-types-DGIO_gxq.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { m as ApprovalStore } from "../types-B_tiYvk8.js";
-import { a as ProblemDetails } from "../errors-zi_4T-rx.js";
-import { t as InstanceOptions } from "../instance-options-B0KXqTrJ.js";
+import { m as ApprovalStore } from "../types-DLvhVm1r.js";
+import { a as ProblemDetails } from "../errors-BIM4MFsJ.js";
+import { t as InstanceOptions } from "../instance-options-CoHn-0e8.js";
 //#region src/a2a/types.d.ts
 type A2aAuth = {
   readonly clientId?: string;

package/dist/a2a/index.js

@@ -5,10 +5,10 @@ import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "..
 import { t as canonicalJson } from "../canonical-json-DwilZ1iB.js";
 import { t as bytesToBase64Url } from "../sha256-C-4WXKIu.js";
 import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
-import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-L-_I_3zP.js";
+import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-BvjivVb9.js";
 import { p as wwwAuthenticate, r as bearerChallenge } from "../problem-BVLHFK33.js";
-import { r as instanceOptions } from "../build-instance-CNWaYJyr.js";
-import { n as createAgentKernel } from "../kernel-C-fYydV2.js";
+import { r as instanceOptions } from "../build-instance-BWXqwQYU.js";
+import { n as createAgentKernel } from "../kernel-qv4cr9w8.js";
 import { t as delegationFrom } from "../delegation-input-FTxMK3ji.js";
 //#region src/a2a/create.ts
 function firstScheme(options) {

package/dist/{action-result-CL-QCITA.d.ts → action-result-BcudBQOF.d.ts}

@@ -1,4 +1,4 @@
-import { a as ProblemDetails } from "./errors-zi_4T-rx.js";
+import { a as ProblemDetails } from "./errors-BIM4MFsJ.js";
 //#region src/core/action-result.d.ts
 /** What a `protectAction` action resolves to; both members cross to the client. */
 type ActionResult<T> = {

package/dist/{adoption-scan-BLs67P1l.js → adoption-scan-Ch07MdxN.js}

@@ -1,5 +1,5 @@
 import { r as listSourceFiles } from "./files-BSjrtIHw.js";
-import { t as DOCS_BASE } from "./manifest-Cgiq5oqc.js";
+import { t as DOCS_BASE } from "./manifest-B2QPh19C.js";
 import { readFileSync } from "node:fs";
 import { relative } from "node:path";
 //#region src/cli/adoption-scan.ts

package/dist/agent/index.d.ts

@@ -1,3 +1,3 @@
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-CHNlVInN.js";
-import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-BSNrVuxh.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DHldhVUv.js";
+import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-BPUopdfL.js";
 export { type AgentAdapterOptions, type AgentPermDock, type AgentPermDockOptions, type DecideToolOptions, type DeniedText, type DeniedTextEvent, type GatewayOptions, type ModelMap, type OperationVerdict, type StepUp, type ToolBinding, type ToolMap, createPermDock };

package/dist/agent/index.js

@@ -1 +1 @@
-export { n as createPermDock } from "../create-Cq4Uox0f.js";
+export { n as createPermDock } from "../create-6EwRQlig.js";

package/dist/ai-sdk/index.d.ts

@@ -1,7 +1,7 @@
-import { T as Policy, j as PolicyVocabulary, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { T as Policy, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-CHNlVInN.js";
-import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-BSNrVuxh.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DHldhVUv.js";
+import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-BPUopdfL.js";
 //#region src/ai-sdk/create.d.ts
 type AiSdkContext = {
   readonly runtimeContext?: unknown;

package/dist/ai-sdk/index.js

@@ -1,8 +1,8 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "../errors-B6R_lg2a.js";
-import { l as withApp } from "../permdock-L-_I_3zP.js";
-import { r as stepUpText, t as approvalTokenOf } from "../kernel-C-fYydV2.js";
-import { t as agentRuntime } from "../create-Cq4Uox0f.js";
+import { l as withApp } from "../permdock-BvjivVb9.js";
+import { r as stepUpText, t as approvalTokenOf } from "../kernel-qv4cr9w8.js";
+import { t as agentRuntime } from "../create-6EwRQlig.js";
 //#region src/ai-sdk/create.ts
 const APPROVAL_STATUSES = /* @__PURE__ */ new Set([
 	"approved",

package/dist/{approval-prompt-PYagyQUj.d.ts → approval-prompt-3BqWczTt.d.ts}

@@ -1,5 +1,5 @@
 import { s as OperationMeta, t as Operation } from "./operations-Ci_rT6Uo.js";
-import { u as ApprovalRequest } from "./types-B_tiYvk8.js";
+import { u as ApprovalRequest } from "./types-DLvhVm1r.js";
 //#region src/delivery/approval-prompt.d.ts
 /**
  * What an email or chat prompt shows an approver, wire format v1. It carries no

package/dist/approvals/index.d.ts

@@ -1,5 +1,5 @@
-import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-B_tiYvk8.js";
+import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-DLvhVm1r.js";
 import { n as ApprovalErrorCode, r as isApprovalError, t as ApprovalError } from "../errors-CHwoRRpB.js";
-import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-B2mlGuhW.js";
-import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-_9UiQIkt.js";
+import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-B2efzoSX.js";
+import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-DJwEgYzA.js";
 export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, type AccessReview, type AccessReviewDecision, AccessReviewError, type AccessReviewErrorCode, type AccessReviewHolder, type AccessReviewItem, type AccessReviewItemPage, type AccessReviewItemQuery, type AccessReviewItemStatus, type AccessReviewOptions, type AccessReviewStatus, type AccessReviewStore, type AccessReviewVerdict, type AccessReviewsHandlerOptions, type ApprovalApprovers, type ApprovalCancelMeta, type ApprovalCursorPosition, type ApprovalDelegation, type ApprovalDelegationMatch, type ApprovalDelegationSource, ApprovalError, type ApprovalErrorCode, type ApprovalInspectResult, type ApprovalListFilter, type ApprovalListQuery, type ApprovalPage, type ApprovalRequest, type ApprovalResumeFailureCause, type ApprovalSignature, type ApprovalSignatureClaims, type ApprovalSignatureEntry, type ApprovalStatus, type ApprovalStore, type ApprovalSubjectSummary, type ApprovalVerdict, type ApprovalView, type ApprovalsHandlerOptions, type ApproverRelationsOptions, DEFAULT_APPROVAL_TTL, type IdempotencyRecord, type IdempotencyStore, type IdempotentCall, type IdempotentResponse, type MatchDelegationOptions, type MemoryAccessReviewStore, type MemoryApprovalStore, type SignApprovalOptions, type StartAccessReviewInput, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };

package/dist/{arazzo-3RhGfkAK.js → arazzo-BpS7LnV0.js}

@@ -21,7 +21,7 @@ const check = defineLeaf({
 		...permissionsFlag
 	},
 	async run(ctx, { flags }) {
-		return (await import("./arazzo-B5-ulWif.js")).runArazzo({
+		return (await import("./arazzo-CmQaGPkM.js")).runArazzo({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			doc: given(flags.doc),

package/dist/{arazzo-B5-ulWif.js → arazzo-CmQaGPkM.js}

@@ -1,9 +1,9 @@
-import { _ as arazzoFindings } from "./src-DZ0l9UAg.js";
+import { _ as arazzoFindings } from "./src-C_pi2Rnh.js";
 import { c as missingInput } from "./errors-Vpu6rKHl.js";
 import { i as readJsonFile } from "./files-BSjrtIHw.js";
 import { t as ARAZZO_REPORT_SCHEMA } from "./version-DMQ0dnN5.js";
 import { a as loadModule, s as pickNamed, t as asPermissionTree } from "./load-DjSU5KXO.js";
-import { t as DOCS_BASE } from "./manifest-Cgiq5oqc.js";
+import { t as DOCS_BASE } from "./manifest-B2QPh19C.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/arazzo.ts

package/dist/astro/index.d.ts

@@ -1,9 +1,9 @@
-import { Gt as Snapshot, T as Policy, j as PolicyVocabulary, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { T as Policy, Zt as Snapshot, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
 import { a as OperationInput, t as Operation } from "../operations-Ci_rT6Uo.js";
-import { a as PermDock } from "../permdock-B6Sf4T_S.js";
-import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CIlpSA2G.js";
-import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-C1DCvpqV.js";
+import { a as PermDock } from "../permdock-CprAPN3w.js";
+import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CyRN0-Cd.js";
+import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-BIbBAtPZ.js";
 import { APIContext, MiddlewareHandler } from "astro";
 //#region src/astro/create.d.ts
 type AstroPermDockOptions<TUser = unknown> = FetchAdapterOptions<APIContext, TUser>;

package/dist/astro/index.js

@@ -1,5 +1,5 @@
 import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-IBceAeKT.js";
-import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-JL43jD3E.js";
+import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-dPTgJVHd.js";
 //#region src/astro/create.ts
 const route = {
 	context: (context) => context,

package/dist/{audience-BAkBDMqn.js → audience-DTjR8xet.js}

@@ -1,4 +1,4 @@
-import { t as whoCan } from "./who-can-rI7dCR9Q.js";
+import { t as whoCan } from "./who-can-BoDJm0Nc.js";
 //#region src/delivery/audience.ts
 async function granted(permdock, ids, permission, row) {
 	const unique = [...new Set(ids.filter((id) => typeof id === "string" && id !== ""))];

package/dist/authzen/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, Zn as Actor, rr as Delegation, sr as Principal } from "../policy-types-CCiDRZBH.js";
-import { m as ApprovalStore } from "../types-B_tiYvk8.js";
-import { a as ProblemDetails } from "../errors-zi_4T-rx.js";
-import { t as InstanceOptions } from "../instance-options-B0KXqTrJ.js";
-import { a as evaluationsSemantic, n as EvaluationsSemantic, r as evaluateBatch, t as EVALUATIONS_SEMANTICS } from "../evaluations-z8dQFDaN.js";
+import { T as Policy, lr as Delegation, pr as Principal, rr as Actor } from "../policy-types-DGIO_gxq.js";
+import { m as ApprovalStore } from "../types-DLvhVm1r.js";
+import { a as ProblemDetails } from "../errors-BIM4MFsJ.js";
+import { t as InstanceOptions } from "../instance-options-CoHn-0e8.js";
+import { a as evaluationsSemantic, n as EvaluationsSemantic, r as evaluateBatch, t as EVALUATIONS_SEMANTICS } from "../evaluations-DOWuBpWv.js";
 //#region src/authzen/map.d.ts
 type AuthzenEntity = {
   readonly type?: unknown;

package/dist/authzen/index.js

@@ -7,7 +7,7 @@ import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
 import { n as readBodyText, t as MAX_BODY_BYTES } from "../body-text-DQhcmqdY.js";
 import { r as hasCredentials } from "../http-DKLXrFGk.js";
 import { d as unauthenticatedProblem, l as problemResponse, o as methodNotAllowed } from "../problem-BVLHFK33.js";
-import { n as resolveOrNull, t as buildInstance } from "../build-instance-CNWaYJyr.js";
+import { n as resolveOrNull, t as buildInstance } from "../build-instance-BWXqwQYU.js";
 import { a as evaluationReasons, c as withRequestId, g as wireResourceId, h as permissionLookup, i as evaluateBatch, m as itemResourceData, n as applyApprovalResume, r as authzenMetadata, s as evaluationsSemantic, t as EVALUATIONS_SEMANTICS } from "../evaluations-IBceAeKT.js";
 //#region src/authzen/map.ts
 const UNKNOWN = {

package/dist/{automation-DqEoWHBc.d.ts → automation-C6Jg75xq.d.ts}

@@ -1,4 +1,4 @@
-import { Lt as InstanceHandle, Rn as Denial, Rt as Instant } from "./policy-types-CCiDRZBH.js";
+import { Ut as InstanceHandle, Wn as Denial, Wt as Instant } from "./policy-types-DGIO_gxq.js";
 import { u as Permission } from "./permission-types-CAY-GU7e.js";
 import { t as Operation } from "./operations-Ci_rT6Uo.js";
 //#region src/core/automation.d.ts

package/dist/better-auth/index.d.ts

@@ -1,4 +1,4 @@
-import { N as RoleBinding, W as CustomRoleSource, lr as Subject, q as DecisionSink, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { G as CustomRoleSource, J as DecisionSink, N as RoleBinding, hr as Subject, pr as Principal } from "../policy-types-DGIO_gxq.js";
 import { f as PermissionTree } from "../permission-types-CAY-GU7e.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/better-auth/types.d.ts

package/dist/better-supabase/index.d.ts

@@ -1,11 +1,11 @@
-import { Rt as Instant, St as ApiKeyPrincipal, T as Policy, U as CredentialVerifier, Zt as AuthEvent, _n as ApproverInput, gt as SupportSession, lr as Subject, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { Cn as ApproverInput, Ot as ApiKeyPrincipal, St as SupportSession, T as Policy, U as CredentialVerifier, Wt as Instant, hr as Subject, pr as Principal, rn as AuthEvent } from "../policy-types-DGIO_gxq.js";
 import { f as PermissionTree, u as Permission } from "../permission-types-CAY-GU7e.js";
-import { _ as PrincipalSource, a as PermDock, h as PrincipalIdentity, o as PermDockOptions } from "../permdock-B6Sf4T_S.js";
-import { c as AccessReviewStore } from "../types-B2mlGuhW.js";
-import { i as SupabaseRpcCaller } from "../postgrest-DicQyqm-.js";
+import { _ as PrincipalSource, a as PermDock, h as PrincipalIdentity, o as PermDockOptions } from "../permdock-CprAPN3w.js";
+import { c as AccessReviewStore } from "../types-B2efzoSX.js";
+import { i as SupabaseRpcCaller } from "../postgrest-D5nUGm-c.js";
 import { a as CatalogDocument } from "../types-ZzRGoViD.js";
-import { d as SupabasePrincipal, g as SupabaseSessionLike, v as SupabaseSubjectOptions } from "../types-ah9NlU6j.js";
-import { c as LinkPolicy, o as CapabilityPrincipal, t as Capability } from "../capability-ChuiONQU.js";
+import { d as SupabasePrincipal, g as SupabaseSessionLike, v as SupabaseSubjectOptions } from "../types-BMVDHvI0.js";
+import { c as LinkPolicy, o as CapabilityPrincipal, t as Capability } from "../capability-Di9tiUvi.js";
 import { AuthorizationProvider } from "better-supabase/config";
 import { AuthSession, AuthorizationHooks, Authorizer, SupportAuthorize, SupportAuthorizeInput } from "better-supabase/server";
 import { EntitlementClaimOptions } from "better-supabase/blocks/entitlements";

package/dist/better-supabase/index.js

@@ -11,16 +11,16 @@ import { r as sha256Digest } from "../sha256-C-4WXKIu.js";
 import { t as decideSupportSession } from "../support-session-BsmPCbz8.js";
 import { f as scopeList } from "../scopes-0Up_UA2t.js";
 import { o as flattenGrantee } from "../grantee-Dke-9rd1.js";
-import { a as delegatedScopeMap, s as scopesReaching, t as getPermDock } from "../permdock-L-_I_3zP.js";
+import { a as delegatedScopeMap, s as scopesReaching, t as getPermDock } from "../permdock-BvjivVb9.js";
 import { t as anonymousSubject } from "../subject-BGoM5o8B.js";
 import { i as linkPolicyViolation, n as capabilityOf, r as capabilitySubject } from "../capability-BqX94r07.js";
 import { r as credentialSubject, s as parseCredential } from "../credential-CyyyvCsL.js";
 import { t as AccessReviewError } from "../errors-BDUwg2qC.js";
 import { t as policyRowConditionKeys } from "../row-conditions-BAGHOmVq.js";
-import { n as subscribersFor } from "../audience-BAkBDMqn.js";
+import { n as subscribersFor } from "../audience-DTjR8xet.js";
 import { l as sqlIdent, s as quoteSqlLiteral } from "../sql-0WjxIp9g.js";
 import "../sources-CMAM-2A3.js";
-import { c as subjectFromSupabaseSession, t as callRpc } from "../postgrest-D4nuPXIQ.js";
+import { c as subjectFromSupabaseSession, t as callRpc } from "../postgrest-5Dr3W64L.js";
 import { n as parseSupabaseManifest, t as hasTokenHook } from "../manifest-wg8WkkpD.js";
 import { t as parseCatalog } from "../parse-1_ZheTW5.js";
 import { AsyncResult, dbError } from "better-supabase";

package/dist/{bind-D_sZSVA3.js → bind-BNQA9JK9.js}

@@ -1,10 +1,10 @@
 import { t as compact } from "./compact-CAf557ZB.js";
-import { l as withApp } from "./permdock-L-_I_3zP.js";
+import { l as withApp } from "./permdock-BvjivVb9.js";
 import { t as composeWraps } from "./wrap-B2wziJI_.js";
-import { r as instanceOptions } from "./build-instance-CNWaYJyr.js";
+import { r as instanceOptions } from "./build-instance-BWXqwQYU.js";
 import { f as invalidSignatureResponse } from "./evaluations-IBceAeKT.js";
 import { n as tenantScope } from "./adapter-context-CIQpQxbE.js";
-import { t as createPermDock } from "./create-_noSrY1T.js";
+import { t as createPermDock } from "./create-BLPKnJKa.js";
 //#region src/server/bind.ts
 /**
 * The server kernel with the subject and actor callbacks reading the context
@@ -24,6 +24,10 @@ function adapterKernel(policy, options, adapter, contextOf) {
 			const context = contextOf(request);
 			return context === void 0 ? void 0 : options.context?.(context);
 		},
+		intent: options.intent === void 0 ? void 0 : (request) => {
+			const context = contextOf(request);
+			return context === void 0 ? void 0 : options.intent?.(context);
+		},
 		...instanceOptions(options),
 		store: options.store,
 		pdp: options.pdp,

package/dist/{bind-Cp2hBHzP.d.ts → bind-YYjvfpB9.d.ts}

@@ -1,11 +1,11 @@
-import { lr as Subject } from "./policy-types-CCiDRZBH.js";
-import { m as ApprovalStore } from "./types-B_tiYvk8.js";
-import { t as InstanceOptions } from "./instance-options-B0KXqTrJ.js";
+import { X as Intent, hr as Subject } from "./policy-types-DGIO_gxq.js";
+import { m as ApprovalStore } from "./types-DLvhVm1r.js";
+import { t as InstanceOptions } from "./instance-options-CoHn-0e8.js";
 import { t as RequestContext } from "./request-context-C2_1lchh.js";
-import { n as PermDockWrap } from "./wrap-DlJE3gS_.js";
-import { o as OtelWrap } from "./types-DHKPcqzr.js";
-import { r as PdpFactory } from "./types-B4uqKDnp.js";
-import { S as TenantOption, _ as WebBotAuthVerifier, t as DeniedResponse } from "./server-types-CIlpSA2G.js";
+import { n as PermDockWrap } from "./wrap-DxXB54Wu.js";
+import { o as OtelWrap } from "./types-B6ExllNo.js";
+import { r as PdpFactory } from "./types-DlelvQk4.js";
+import { S as TenantOption, _ as WebBotAuthVerifier, t as DeniedResponse } from "./server-types-CyRN0-Cd.js";
 //#region src/server/bind.d.ts
 /**
  * The options of every framework adapter; `TContext` is what its callbacks
@@ -25,6 +25,11 @@ type ServerAdapterOptions<TContext, TUser = unknown> = InstanceOptions & ServerA
    * Only values the server derived belong here, never client input.
    */
   readonly context?: (context: TContext) => RequestContext | undefined | Promise<RequestContext | undefined>;
+  /**
+   * Overrides the default: `'read'` for `GET`, `HEAD` and `OPTIONS`,
+   * `'write'` for every other method.
+   */
+  readonly intent?: (context: TContext) => Intent;
 };
 /** The services an adapter hands to its kernel unchanged. */
 type ServerAdapterServices = {

package/dist/{build-instance-CNWaYJyr.js → build-instance-BWXqwQYU.js}

@@ -1,5 +1,5 @@
 import { t as compact } from "./compact-CAf557ZB.js";
-import { t as getPermDock } from "./permdock-L-_I_3zP.js";
+import { t as getPermDock } from "./permdock-BvjivVb9.js";
 //#region src/core/instance-options.ts
 const INSTANCE_KEYS = {
 	memberships: true,

package/dist/{capability-ChuiONQU.d.ts → capability-Di9tiUvi.d.ts}

@@ -1,4 +1,4 @@
-import { Rt as Instant, sr as Principal, ut as TokenSigner } from "./policy-types-CCiDRZBH.js";
+import { Wt as Instant, mt as TokenSigner, pr as Principal } from "./policy-types-DGIO_gxq.js";
 import { f as PermissionTree, u as Permission } from "./permission-types-CAY-GU7e.js";
 //#region src/core/capability.d.ts
 /**

package/dist/{casbin-cbSbhT_k.js → casbin-B7_yS-oo.js}

@@ -16,7 +16,7 @@ const casbinImport = defineLeaf({
 		...outFlag
 	},
 	async run(ctx, { flags }) {
-		const { runCasbinImport } = await import("./casbin-H0rKxBx2.js");
+		const { runCasbinImport } = await import("./casbin-bHyIxTNQ.js");
 		return runCasbinImport({
 			cwd: ctx.cwd,
 			model: given(flags.model),

package/dist/{casbin-H0rKxBx2.js → casbin-bHyIxTNQ.js}

@@ -1,4 +1,4 @@
-import { a as nonEmptyOr } from "./output-tkju6U7R.js";
+import { a as nonEmptyOr } from "./output-DV5dwOTs.js";
 import { t as applyFiles } from "./files-B3AA05f1.js";
 import { n as isIdentifier, t as emitPolicyModule } from "./policy-module-xym9fnSq.js";
 import { existsSync, readFileSync } from "node:fs";

package/dist/catalog/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, a as ApprovalRequirement, sr as Principal } from "../policy-types-CCiDRZBH.js";
-import { c as checkHostedGrant, n as HostedGrantCheck, o as PolicyDocument } from "../hosted-Cmtxogd0.js";
+import { T as Policy, a as ApprovalRequirement, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { c as checkHostedGrant, n as HostedGrantCheck, o as PolicyDocument } from "../hosted-DVxlLZMe.js";
 import { a as CatalogDocument, c as CatalogOperation, d as CatalogRole, f as CatalogScope, h as CatalogValidity, i as CatalogDelegation, l as CatalogPermission, m as CatalogUsage, n as CatalogApproval, o as CatalogGrant, p as CatalogSupportAccess, r as CatalogBreakGlass, s as CatalogOAuthScope, t as CatalogActivation, u as CatalogResource } from "../types-ZzRGoViD.js";
-import { a as CatalogFinding, i as CatalogEventData } from "../sink-Dvi7YZG_.js";
-import { a as pushedPolicy, i as parsePushedPolicy, n as PushedGrant, r as PushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-D1Eoi6NM.js";
+import { a as CatalogFinding, i as CatalogEventData } from "../sink-B5zoUW_O.js";
+import { a as pushedPolicy, i as parsePushedPolicy, n as PushedGrant, r as PushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-CryQheKq.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/catalog/drift.d.ts
 /**

package/dist/catalog/index.js

@@ -7,8 +7,8 @@ import { n as declaredRoleNames } from "../policy-CLQ8__GF.js";
 import { i as hostedGrantDrops, n as codeApprovals, r as declaredGrantee, t as checkHostedGrant } from "../hosted-D0IzESu_.js";
 import { n as rowConditionKeys, t as parseCatalog } from "../parse-1_ZheTW5.js";
 import { t as operationFindings } from "../operation-findings-CXtFzlKJ.js";
-import { n as resourceSchemaFromJson, t as policyFromCatalog } from "../policy-from-catalog-CJgOm6aq.js";
-import { n as parsePushedPolicy, r as pushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-ITwYKvvH.js";
+import { n as resourceSchemaFromJson, t as policyFromCatalog } from "../policy-from-catalog-CU3An8uP.js";
+import { n as parsePushedPolicy, r as pushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-CDuOL2de.js";
 //#region src/catalog/drift.ts
 /**
 * The finding a drop reason becomes; `null` for a reason the catalog did not

package/dist/{catalog-BFpz2EmT.js → catalog-CGlSwU6j.js}

@@ -2,8 +2,8 @@ import { r as isRecord } from "./compact-CAf557ZB.js";
 import { r as listSourceFiles, t as defaultSrcPath } from "./files-BSjrtIHw.js";
 import { a as catalogSchemaDocument, n as catalogForCompare, o as formatCatalogJson, r as catalogForDrift, s as formatCatalogMarkdown, t as buildCatalog } from "./catalog-doc-DjMKzJp9.js";
 import { a as loadModule, i as loadConfiguredPolicy, r as leavesOf, s as pickNamed, t as asPermissionTree } from "./load-DjSU5KXO.js";
-import { t as loadConfiguredOperations } from "./catalog-operations-Dadrl7Z-.js";
-import { i as scanSources, r as runCollect } from "./collect-B7ZFAJU3.js";
+import { t as loadConfiguredOperations } from "./catalog-operations-DeHTrJSV.js";
+import { i as scanSources, r as runCollect } from "./collect-WCl8cJQV.js";
 import { n as fileSummary, t as applyFiles } from "./files-B3AA05f1.js";
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";

package/dist/catalog-D3oS2GH3.js

@@ -0,0 +1 @@
+export { t as catalogFile, n as runCatalog } from "./catalog-CGlSwU6j.js";

package/dist/{catalog-DCspHDc8.js → catalog-amPDr0JQ.js}

@@ -30,7 +30,7 @@ const catalog = defineLeaf({
 		...checkFlag
 	},
 	async run(ctx, { flags }) {
-		const { catalogFile, runCatalog } = await import("./catalog-mRQQQhNK.js");
+		const { catalogFile, runCatalog } = await import("./catalog-D3oS2GH3.js");
 		const result = await runCatalog({
 			cwd: ctx.cwd,
 			config: ctx.config,

package/dist/{catalog-operations-Dadrl7Z-.js → catalog-operations-DeHTrJSV.js}

@@ -1,5 +1,5 @@
 import { r as isRecord } from "./compact-CAf557ZB.js";
-import { k as isOperationEffect } from "./src-DZ0l9UAg.js";
+import { A as isOperationEffect } from "./src-C_pi2Rnh.js";
 import { o as isPermission } from "./permission-registry-B8tYxPIt.js";
 import { r as isOperationRisk } from "./permissions-CVXmRILq.js";
 import { i as configError } from "./errors-Vpu6rKHl.js";

package/dist/chat/index.d.ts

@@ -1,2 +1,2 @@
-import { a as ChatCommandResult, c as createPermDock, d as SubjectFromChatOptions, f as isChatAuthor, i as ChatCommandContext, l as ChatAuthor, n as ChatActionResult, o as ChatPermDock, p as subjectFromChat, r as ChatCommand, s as ChatPermDockOptions, t as ChatAction, u as ChatPrincipal } from "../create-BVq1lNQE.js";
+import { a as ChatCommandResult, c as createPermDock, d as SubjectFromChatOptions, f as isChatAuthor, i as ChatCommandContext, l as ChatAuthor, n as ChatActionResult, o as ChatPermDock, p as subjectFromChat, r as ChatCommand, s as ChatPermDockOptions, t as ChatAction, u as ChatPrincipal } from "../create-DBvUsgzK.js";
 export { type ChatAction, type ChatActionResult, type ChatAuthor, type ChatCommand, type ChatCommandContext, type ChatCommandResult, type ChatPermDock, type ChatPermDockOptions, type ChatPrincipal, type SubjectFromChatOptions, createPermDock, isChatAuthor, subjectFromChat };

package/dist/chat/index.js

@@ -2,7 +2,7 @@ import { t as compact } from "../compact-CAf557ZB.js";
 import { n as freezeDeep } from "../freeze-jjan0lCv.js";
 import { n as loadPrincipalByIdentity } from "../principal-source-C6N60GtM.js";
 import { f as nowMillis } from "../time-nR1JesoH.js";
-import { l as withApp, t as getPermDock } from "../permdock-L-_I_3zP.js";
+import { l as withApp, t as getPermDock } from "../permdock-BvjivVb9.js";
 import { c as isApprovalError } from "../types-CcUXciSj.js";
 import { a as requestApproval, o as resolveApproval, s as resumeDecision } from "../helpers-DJicaG6f.js";
 import { t as approvalPrompt } from "../approval-prompt-B8hQY69x.js";

package/dist/chat-sdk/index.d.ts

@@ -1,6 +1,6 @@
-import { n as ApprovalUrl, t as ApprovalPrompt } from "../approval-prompt-PYagyQUj.js";
-import { l as ChatAuthor, n as ChatActionResult, o as ChatPermDock } from "../create-BVq1lNQE.js";
-import { n as ChatTransport } from "../types-yUuPR5Hy.js";
+import { n as ApprovalUrl, t as ApprovalPrompt } from "../approval-prompt-3BqWczTt.js";
+import { l as ChatAuthor, n as ChatActionResult, o as ChatPermDock } from "../create-DBvUsgzK.js";
+import { n as ChatTransport } from "../types-CN0LsqbK.js";
 import { ActionEvent, Author, CardElement } from "chat";
 //#region src/chat-sdk/author.d.ts
 type ChatSdkAuthorOptions = {

package/dist/claude-agent/index.d.ts

@@ -1,6 +1,6 @@
-import { T as Policy, j as PolicyVocabulary, sr as Principal } from "../policy-types-CCiDRZBH.js";
-import { a as PermDock } from "../permdock-B6Sf4T_S.js";
-import { o as AgentAdapterOptions, t as AgentPermDock } from "../create-BSNrVuxh.js";
+import { T as Policy, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { a as PermDock } from "../permdock-CprAPN3w.js";
+import { o as AgentAdapterOptions, t as AgentPermDock } from "../create-BPUopdfL.js";
 //#region src/claude-agent/create.d.ts
 /** Structural `McpServerProvenance` from `@anthropic-ai/claude-agent-sdk`. */
 type ClaudeMcpServer = {

package/dist/claude-agent/index.js

@@ -1,6 +1,6 @@
 import { r as isRecord, t as compact } from "../compact-CAf557ZB.js";
-import { l as withApp } from "../permdock-L-_I_3zP.js";
-import { t as agentRuntime } from "../create-Cq4Uox0f.js";
+import { l as withApp } from "../permdock-BvjivVb9.js";
+import { t as agentRuntime } from "../create-6EwRQlig.js";
 //#region src/claude-agent/create.ts
 const MCP_PREFIX = "mcp__";
 function asInput(input) {

package/dist/clerk/index.d.ts

@@ -1,6 +1,6 @@
-import { W as CustomRoleSource, lr as Subject, sr as Principal } from "../policy-types-CCiDRZBH.js";
+import { G as CustomRoleSource, hr as Subject, pr as Principal } from "../policy-types-DGIO_gxq.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { s as RemotePdpCache } from "../types-B4uqKDnp.js";
+import { s as RemotePdpCache } from "../types-DlelvQk4.js";
 import { t as ClaimsMap } from "../claims-map-D1Pb5oRq.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/clerk/types.d.ts

package/dist/cli/bin.js

@@ -11,7 +11,7 @@ if (argv.length === 1 && (argv[0] === "--version" || argv[0] === "-v")) {
 	const [{ isCi }, { trapSignals }, { run }, { streamHasColors }] = await Promise.all([
 		import("../env-DJZrPjRi.js"),
 		import("../signals-B1vHR3fN.js"),
-		import("../run-D-JE8QWb.js"),
+		import("../run-Ck22anC2.js"),
 		import("../style-DblOtSga.js")
 	]);
 	const signals = trapSignals();

package/dist/cli/index.d.ts

@@ -1,10 +1,10 @@
-import { T as Policy } from "../policy-types-CCiDRZBH.js";
+import { T as Policy } from "../policy-types-DGIO_gxq.js";
 import { f as PermissionTree } from "../permission-types-CAY-GU7e.js";
 import { o as OperationMap } from "../operations-Ci_rT6Uo.js";
 import { a as CatalogDocument, d as CatalogRole, f as CatalogScope, l as CatalogPermission, m as CatalogUsage, n as CatalogApproval, p as CatalogSupportAccess, r as CatalogBreakGlass, t as CatalogActivation, u as CatalogResource } from "../types-ZzRGoViD.js";
-import { a as pushedPolicy, i as parsePushedPolicy, n as PushedGrant, r as PushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-D1Eoi6NM.js";
-import { _ as RlsSuspension, a as GenKind, c as RlsActiveRow, d as RlsDialect, f as RlsFunctionMapping, g as RlsSuspendedScope, h as RlsSuspendedMembership, i as GenConfig, l as RlsApiKeys, m as RlsMemberships, n as CliIo, o as PermDockConfig, p as RlsMembershipTable, r as CollectConfig, t as CatalogConfig, u as RlsConfig, v as RlsTarget, y as RunResult } from "../types-DC1Loeh3.js";
-import { o as ResourceNameOf, r as PermissionKeyOf, s as ScopeNameOf, t as ActionNameOf } from "../type-helpers-BIPIDa6a.js";
+import { a as pushedPolicy, i as parsePushedPolicy, n as PushedGrant, r as PushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-CryQheKq.js";
+import { _ as RlsSuspension, a as GenKind, c as RlsActiveRow, d as RlsDialect, f as RlsFunctionMapping, g as RlsSuspendedScope, h as RlsSuspendedMembership, i as GenConfig, l as RlsApiKeys, m as RlsMemberships, n as CliIo, o as PermDockConfig, p as RlsMembershipTable, r as CollectConfig, t as CatalogConfig, u as RlsConfig, v as RlsTarget, y as RunResult } from "../types-CzOeVvcC.js";
+import { o as ResourceNameOf, r as PermissionKeyOf, s as ScopeNameOf, t as ActionNameOf } from "../type-helpers-c7Xo_2Cu.js";
 //#region src/cli/catalog-path.d.ts
 /**
  * The absolute path `permdock collect` writes the catalog to: `collect.out`,

package/dist/cli/index.js

@@ -1,8 +1,8 @@
 import { t as catalogPath } from "../catalog-path-CnI0XTFK.js";
 import { t as defineConfig } from "../config-BwPBfN0t.js";
-import { n as parsePushedPolicy, r as pushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-ITwYKvvH.js";
+import { n as parsePushedPolicy, r as pushedPolicy, t as PUSHED_POLICY_SCHEMA } from "../pushed-policy-CDuOL2de.js";
 import { c as parseGrantsMarker, l as parseHookMarker } from "../markers-BeHZ4x9Q.js";
-import { t as run } from "../run-Bz26OTfO.js";
+import { t as run } from "../run-PbRlXTfh.js";
 //#region src/cli/token-schemas.ts
 const ID = {
 	type: "string",

package/dist/cloud/index.d.ts

@@ -1,11 +1,11 @@
-import { $t as CredentialEvent, Qt as AutomationEvent, Rt as Instant, Xt as AccessEvent, en as DecisionEvent, in as DirectoryEvent, nn as DeliveryEvent, on as MembershipEvent, tn as DeliveryChannel, ut as TokenSigner } from "../policy-types-CCiDRZBH.js";
-import { m as ApprovalStore } from "../types-B_tiYvk8.js";
-import { i as CatalogEventData, l as CloudEventType, r as CLOUD_EVENT_TYPES, s as CloudEvent } from "../sink-Dvi7YZG_.js";
-import { c as DeliveryTransport } from "../types-yUuPR5Hy.js";
-import { a as CloudConnectionOptions, c as CloudOptions, i as CloudClient, l as CloudSignerOptions, n as CloudCatalog, o as CloudEndpointOptions, r as CloudCatalogPush, s as CloudEndpoints, t as CloudApproverOptions } from "../types-AMJ5qoU_.js";
-import { n as ApprovalWaiter } from "../waiter-Bu9zAlE0.js";
-import { l as ReplayStore } from "../types-DjuMBNF9.js";
-import { f as WebhookVerifier, r as WebhookFailureCause$1, s as WebhookJwks } from "../standard-webhooks-C-qX4mJW.js";
+import { Wt as Instant, an as CredentialEvent, cn as DeliveryEvent, fn as MembershipEvent, in as AutomationEvent, mt as TokenSigner, nn as AccessEvent, on as DecisionEvent, sn as DeliveryChannel, un as DirectoryEvent } from "../policy-types-DGIO_gxq.js";
+import { m as ApprovalStore } from "../types-DLvhVm1r.js";
+import { i as CatalogEventData, l as CloudEventType, r as CLOUD_EVENT_TYPES, s as CloudEvent } from "../sink-B5zoUW_O.js";
+import { c as DeliveryTransport } from "../types-CN0LsqbK.js";
+import { a as CloudConnectionOptions, c as CloudOptions, i as CloudClient, l as CloudSignerOptions, n as CloudCatalog, o as CloudEndpointOptions, r as CloudCatalogPush, s as CloudEndpoints, t as CloudApproverOptions } from "../types-BB-zWDcR.js";
+import { n as ApprovalWaiter } from "../waiter-CqUKX6CY.js";
+import { l as ReplayStore } from "../types-DsHGPtkR.js";
+import { f as WebhookVerifier, r as WebhookFailureCause$1, s as WebhookJwks } from "../standard-webhooks-DOYEuOLx.js";
 //#region src/cloud/base-url.d.ts
 /**
  * The one base URL of PermDock Cloud. The platform issuer is this URL; its

package/dist/{cloud-BFlGMaak.js → cloud-3kWfjnYy.js}

@@ -41,7 +41,7 @@ const push = defineLeaf({
 	},
 	async run(ctx, { flags }) {
 		const env = await withStdinSecret(ctx, "key", flags["key-stdin"], "PERMDOCK_CLOUD_KEY");
-		return (await import("./push-DgssgzkK.js")).runCloud({
+		return (await import("./push-Bn-lMEmI.js")).runCloud({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			url: given(flags.url),
@@ -70,7 +70,7 @@ const pull = defineLeaf({
 	},
 	async run(ctx, { flags }) {
 		const env = await withStdinSecret(ctx, "token", flags["token-stdin"], "PERMDOCK_CLOUD_TOKEN");
-		return (await import("./pull-B65ndFNZ.js")).runCloudPull({
+		return (await import("./pull-C3EEGzSw.js")).runCloudPull({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			url: given(flags.url),

package/dist/{codemod-DWSN2erG.js → codemod-Bv5i-Mzo.js}

@@ -1,7 +1,7 @@
 import { n as CliError } from "./errors-Vpu6rKHl.js";
 import { a as rel } from "./files-BSjrtIHw.js";
 import { t as beforeFirst } from "./text-BMFRfBqc.js";
-import { n as ROOT } from "./manifest-Cgiq5oqc.js";
+import { n as ROOT } from "./manifest-B2QPh19C.js";
 import { i as renameMessage, n as DEFAULT_CHANGES, r as flagRename, t as COMMAND_MOVES } from "./renames-CGj7YwcQ.js";
 import { i as refuseDirty, t as applyFiles } from "./files-B3AA05f1.js";
 import { readFileSync, readdirSync, statSync } from "node:fs";

package/dist/{codemod-DLQ9Zpo4.js → codemod-D9Aiii1r.js}

@@ -7,7 +7,7 @@ const codemod = defineLeaf({
 		description: "The release to migrate to (0.5)",
 		required: true,
 		async complete() {
-			return (await import("./codemod-DWSN2erG.js")).codemodVersions();
+			return (await import("./codemod-Bv5i-Mzo.js")).codemodVersions();
 		}
 	}, {
 		name: "paths",
@@ -22,7 +22,7 @@ const codemod = defineLeaf({
 		}
 	},
 	async run(ctx, { flags, args, rest }) {
-		return (await import("./codemod-DWSN2erG.js")).runCodemod({
+		return (await import("./codemod-Bv5i-Mzo.js")).runCodemod({
 			cwd: ctx.cwd,
 			version: args["version"],
 			paths: rest,

package/dist/{collect-Bzv3le0A.js → collect-B80GYEot.js}

@@ -29,9 +29,9 @@ const collect = defineLeaf({
 		};
 		if (flags.watch) {
 			if (flags.check) throw new CliError("usage", "collect: --watch writes the catalog; drop --check", { code: "invalid_value" });
-			return (await import("./watch-DB42U1ib.js")).watchCollect(ctx, overrides);
+			return (await import("./watch-ClLuO2TL.js")).watchCollect(ctx, overrides);
 		}
-		const result = await (await import("./collect-B5BL3klN.js")).runCollect({
+		const result = await (await import("./collect-D-eroIfV.js")).runCollect({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			collect: overrides,