@mog-sdk/spreadsheet-contracts 0.1.12

package/dist/capabilities/gated-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gated-api.d.ts","sourceRoot":"","sources":["../../src/capabilities/gated-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAM9C;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;OAQG;IACH,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;IAEzC;;;;;;OAMG;IACH,IAAI,IAAI,cAAc,EAAE,CAAC;IAEzB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;IAE9C;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,eAAe,GAAG,IAAI,CAAC;IAE7D;;;;;;;;;OASG;IACH,WAAW,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAE3F;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtE;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAEzE;;;;;;;;OAQG;IACH,UAAU,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC7F;AAMD;;GAEG;AACH,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,EAAE,EAAE,CAAC;IAGpE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC;CACnF;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAE9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAGxE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAGjE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAG5C,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAG5E,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAGtF,QAAQ,CAAC,GAAG,CAAC,EAAE,CACb,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,IAAI,CAAC;CACX;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAG7E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAGpF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAGpD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAGnE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QACzB,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAG/B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;KACzD,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAGlD,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3E;;OAEG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAE5C;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAG9E,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAGjF,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAG1D,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,kBAAkB;IAKjC;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAMhD,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAEhC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAElC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAEtC,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;KAC9B,CAAC;IAMF;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAEzC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3C;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3C;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAM/C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAEhC;;OAEG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE/C;;OAEG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAC3B,qBAAqB,EACrB,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CACpD,CAAC;IAEF;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAM5C;;OAEG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IAE1C;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAMhC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAM5C;;;;;;;;;OASG;IACH,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;CAChD"}

package/dist/capabilities/grants.d.ts

@@ -0,0 +1,239 @@
+/**
+ * Capability Grants - Grant storage and management interfaces
+ *
+ * This file defines:
+ * - CapabilityGrant interface
+ * - GrantOptions interface (scope, sessionOnly, expiresAt)
+ * - IGrantsStore interface
+ *
+ * @see plans/active/permission/CAPABILITY-IMPLEMENTATION.md
+ */
+import type { CapabilityScope } from './scope';
+import type { CapabilityType } from './types';
+/**
+ * Opaque app identifier.
+ */
+export type AppId = string & {
+    readonly __brand?: 'AppId';
+};
+/**
+ * Source of a capability grant.
+ *
+ * - 'user': Granted via consent dialog
+ * - 'auto': Auto-granted for first-party apps
+ * - 'migration': Auto-granted during migration from non-capability system
+ */
+export type GrantSource = 'user' | 'auto' | 'migration';
+/**
+ * A capability grant to an app.
+ *
+ * Represents a single permission granted to an app, optionally
+ * scoped to specific resources.
+ */
+export interface CapabilityGrant {
+    /** The app this grant belongs to */
+    readonly appId: AppId;
+    /** The capability being granted */
+    readonly capability: CapabilityType;
+    /** Optional scope limiting access (e.g., "table:contacts,table:deals") */
+    readonly scope?: CapabilityScope;
+    /** Timestamp when granted (Unix ms) */
+    readonly grantedAt: number;
+    /** Who/what granted this capability */
+    readonly grantedBy: GrantSource;
+    /** Whether this is a session-only grant (not persisted) */
+    readonly sessionOnly?: boolean;
+    /** When this grant expires (Unix ms), for session-only grants */
+    readonly expiresAt?: number;
+    /**
+     * User ID who granted this (for audit).
+     * Null for auto/migration grants.
+     */
+    readonly userId?: string | null;
+}
+/**
+ * Options for granting a capability.
+ */
+export interface GrantOptions {
+    /** Scope to limit the grant to specific resources */
+    readonly scope?: CapabilityScope;
+    /** Make this a session-only grant (not persisted, expires on session end) */
+    readonly sessionOnly?: boolean;
+    /** Custom expiration timestamp (Unix ms) */
+    readonly expiresAt?: number;
+    /** Duration in ms (alternative to expiresAt) */
+    readonly duration?: number;
+    /** Source of the grant */
+    readonly source?: GrantSource;
+    /** User ID for audit trail */
+    readonly userId?: string | null;
+}
+/**
+ * A denied capability record.
+ *
+ * When a user explicitly denies a capability request, we record it
+ * to avoid repeatedly asking (respects rate limiting).
+ */
+export interface CapabilityDenial {
+    /** The app this denial belongs to */
+    readonly appId: AppId;
+    /** The capability that was denied */
+    readonly capability: CapabilityType;
+    /** Timestamp when denied (Unix ms) */
+    readonly deniedAt: number;
+    /** Reason for denial (if provided) */
+    readonly reason?: string;
+}
+/**
+ * Storage interface for capability grants.
+ *
+ * Implementations:
+ * - MemoryGrantsStore: In-memory for tests
+ * - SQLiteGrantsStore: Local SQLite for desktop
+ * - CloudGrantsStore: Server-side for web (with conflict resolution)
+ */
+export interface IGrantsStore {
+    /**
+     * Check if an app has a specific capability granted.
+     *
+     * @param appId - The app to check
+     * @param capability - The capability to check for
+     * @param scope - Optional scope to check (resource type and ID)
+     * @returns True if the capability is granted (and not expired)
+     */
+    hasGrant(appId: AppId, capability: CapabilityType, scope?: {
+        resourceType: string;
+        resourceId: string;
+    }): boolean;
+    /**
+     * Get all grants for an app.
+     *
+     * @param appId - The app to get grants for
+     * @returns Array of all grants for this app (including expired for audit)
+     */
+    getGrants(appId: AppId): readonly CapabilityGrant[];
+    /**
+     * Get active (non-expired) grants for an app.
+     *
+     * @param appId - The app to get grants for
+     * @returns Array of active grants
+     */
+    getActiveGrants(appId: AppId): readonly CapabilityGrant[];
+    /**
+     * Get a specific grant.
+     *
+     * @param appId - The app ID
+     * @param capability - The capability
+     * @returns The grant if found, undefined otherwise
+     */
+    getGrant(appId: AppId, capability: CapabilityType): CapabilityGrant | undefined;
+    /**
+     * Check if a capability was explicitly denied.
+     *
+     * @param appId - The app to check
+     * @param capability - The capability to check
+     * @returns True if the capability was explicitly denied
+     */
+    isDenied(appId: AppId, capability: CapabilityType): boolean;
+    /**
+     * Get the denial record for a capability.
+     *
+     * @param appId - The app to check
+     * @param capability - The capability to check
+     * @returns The denial record if found
+     */
+    getDenial(appId: AppId, capability: CapabilityType): CapabilityDenial | undefined;
+    /**
+     * Grant a capability to an app.
+     *
+     * If the capability is already granted, this updates the existing grant
+     * (e.g., extending scope or expiration).
+     *
+     * @param appId - The app to grant to
+     * @param capability - The capability to grant
+     * @param options - Grant options (scope, session, expiration)
+     * @returns The created/updated grant
+     */
+    grant(appId: AppId, capability: CapabilityType, options?: GrantOptions): CapabilityGrant;
+    /**
+     * Grant multiple capabilities to an app.
+     *
+     * @param appId - The app to grant to
+     * @param capabilities - The capabilities to grant
+     * @param options - Shared grant options
+     * @returns Array of created grants
+     */
+    grantBatch(appId: AppId, capabilities: readonly CapabilityType[], options?: GrantOptions): readonly CapabilityGrant[];
+    /**
+     * Revoke a capability from an app.
+     *
+     * @param appId - The app to revoke from
+     * @param capability - The capability to revoke
+     * @returns True if a grant was revoked
+     */
+    revoke(appId: AppId, capability: CapabilityType): boolean;
+    /**
+     * Revoke all capabilities from an app.
+     *
+     * @param appId - The app to revoke from
+     * @returns Number of grants revoked
+     */
+    revokeAll(appId: AppId): number;
+    /**
+     * Record a capability denial.
+     *
+     * @param appId - The app that was denied
+     * @param capability - The capability that was denied
+     * @param reason - Optional reason for denial
+     */
+    deny(appId: AppId, capability: CapabilityType, reason?: string): void;
+    /**
+     * Clear a denial record (allow re-prompting).
+     *
+     * @param appId - The app ID
+     * @param capability - The capability to clear denial for
+     */
+    clearDenial(appId: AppId, capability: CapabilityType): void;
+    /**
+     * Clean up expired grants.
+     * Called periodically to remove stale session grants.
+     *
+     * @returns Number of grants cleaned up
+     */
+    cleanupExpired(): number;
+    /**
+     * Subscribe to grant changes for an app.
+     *
+     * @param appId - The app to watch
+     * @param callback - Called when grants change
+     * @returns Unsubscribe function
+     */
+    subscribe(appId: AppId, callback: (event: GrantChangeEvent) => void): () => void;
+    /**
+     * Subscribe to all grant changes (for admin UI).
+     *
+     * @param callback - Called when any grants change
+     * @returns Unsubscribe function
+     */
+    subscribeAll(callback: (event: GrantChangeEvent) => void): () => void;
+}
+/**
+ * Event type for grant changes.
+ */
+export type GrantChangeType = 'granted' | 'revoked' | 'expired' | 'denied' | 'denial-cleared';
+/**
+ * Event emitted when grants change.
+ */
+export interface GrantChangeEvent {
+    /** Type of change */
+    readonly type: GrantChangeType;
+    /** App affected */
+    readonly appId: AppId;
+    /** Capability affected */
+    readonly capability: CapabilityType;
+    /** The grant (for 'granted' events) */
+    readonly grant?: CapabilityGrant;
+    /** Timestamp of the event */
+    readonly timestamp: number;
+}
+//# sourceMappingURL=grants.d.ts.map

package/dist/capabilities/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/capabilities/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAM9C;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAM5D;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;AAExD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAEpC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAEjC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAEhC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAEjC,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAE9B,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAEpC,sCAAsC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,sCAAsC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAK3B;;;;;;;OAOG;IACH,QAAQ,CACN,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,cAAc,EAC1B,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC;IAEX;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,eAAe,EAAE,CAAC;IAEpD;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,eAAe,EAAE,CAAC;IAE1D;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,GAAG,eAAe,GAAG,SAAS,CAAC;IAEhF;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;IAE5D;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAMlF;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,eAAe,CAAC;IAEzF;;;;;;;OAOG;IACH,UAAU,CACR,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,SAAS,cAAc,EAAE,EACvC,OAAO,CAAC,EAAE,YAAY,GACrB,SAAS,eAAe,EAAE,CAAC;IAE9B;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;IAE1D;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;IAEhC;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtE;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC;IAE5D;;;;;OAKG;IACH,cAAc,IAAI,MAAM,CAAC;IAMzB;;;;;;OAMG;IACH,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAEjF;;;;;OAKG;IACH,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACvE;AAMD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE9F;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB;IACrB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAE/B,mBAAmB;IACnB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB,0BAA0B;IAC1B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAEpC,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAEjC,6BAA6B;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/capabilities/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Capability System - Public API (Types Only)
+ *
+ * This module exports ONLY type definitions for the capability system.
+ * Runtime implementation has been moved to @mog/kernel/services/capabilities.
+ *
+ * For runtime code (scope matching, taxonomy expansion, error classes,
+ * grant utilities, manifest validation, etc.), import from:
+ * @mog/kernel/services/capabilities
+ *
+ * @see plans/active/permission/CAPABILITY-SYSTEM.md
+ * @see plans/active/permission/CAPABILITY-TAXONOMY.md
+ * @see plans/active/permission/CAPABILITY-IMPLEMENTATION.md
+ */
+export type { CapabilityInfo, CapabilityRiskLevel, CapabilityTier, CapabilityType, Tier0Capability, Tier1Capability, Tier2Capability, Tier3Capability, Tier4Capability, Tier5Capability, } from './types';
+export type { CompositeCapability } from './taxonomy';
+export type { CapabilityScope, ParsedScope, ScopeValidationResult } from './scope';
+export type { AppCapabilityManifest, AppManifestWithCapabilities, CapabilityTrigger, ManifestValidationError, ManifestValidationResult, OptionalCapabilityRequest, RuntimeCapabilityRequest, ScopedCapabilityRequest, } from './manifest';
+export type { AppId, CapabilityDenial, CapabilityGrant, GrantChangeEvent, GrantChangeType, GrantOptions, GrantSource, IGrantsStore, } from './grants';
+export type { ICapabilityIntrospection, IGatedAppKernelAPI, IGatedCellsAPI, IGatedCheckpointsAPI, IGatedConnectionsAPI, IGatedDialogsAPI, IGatedFilesystemAPI, IGatedFormattingAPI, IGatedFormulasAPI, IGatedNetworkAPI, IGatedSheetsAPI, IGatedShellAPI, } from './gated-api';
+export type { CapabilityErrorCode } from './errors';
+export type { CapabilityDenialReason, CapabilityPromptFn, CapabilityPromptRequest, CapabilityPromptResult, CapabilityRequest, CapabilityRequestResult, ICapabilityRequester, SingleRequestResult, } from './requester';
+export type { AuthMethod, ExpiryWarning, IReAuthProvider, ISensitiveCapabilityHandler, RateLimitStatus, ReAuthOptions, ReAuthResult, SessionGrant, SessionOptions, } from './sensitive';
+//# sourceMappingURL=index.d.ts.map

package/dist/capabilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capabilities/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,SAAS,CAAC;AAMjB,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtD,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAMnF,YAAY,EACV,qBAAqB,EACrB,2BAA2B,EAC3B,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,KAAK,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,UAAU,CAAC;AAMlB,YAAY,EACV,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,aAAa,CAAC;AAMrB,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAMpD,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAMrB,YAAY,EACV,UAAU,EACV,aAAa,EACb,eAAe,EACf,2BAA2B,EAC3B,eAAe,EACf,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,aAAa,CAAC"}

package/dist/capabilities/manifest.d.ts

@@ -0,0 +1,128 @@
+/**
+ * App Capability Manifest - App capability declarations
+ *
+ * This file defines:
+ * - AppCapabilityManifest interface (required, optional, runtime, scoped)
+ * - AppManifest extension with capabilities
+ *
+ * @see plans/active/permission/CAPABILITY-TAXONOMY.md
+ */
+import type { CapabilityScope } from './scope';
+import type { CompositeCapability } from './taxonomy';
+import type { CapabilityType } from './types';
+/**
+ * Trigger type for runtime capability requests.
+ *
+ * - 'user-action': User explicitly initiated an action requiring the capability
+ * - 'feature-access': User accessed a feature that requires the capability
+ */
+export type CapabilityTrigger = 'user-action' | 'feature-access';
+/**
+ * An optional capability request in the manifest.
+ * The app works without this capability but with reduced features.
+ */
+export interface OptionalCapabilityRequest {
+    /** The capability being requested */
+    readonly capability: CapabilityType | CompositeCapability;
+    /** User-facing reason why this capability is needed */
+    readonly reason: string;
+}
+/**
+ * A runtime capability request in the manifest.
+ * This capability is requested during execution, not at launch.
+ */
+export interface RuntimeCapabilityRequest {
+    /** The capability being requested */
+    readonly capability: CapabilityType;
+    /** User-facing reason why this capability is needed */
+    readonly reason: string;
+    /** What triggers this request */
+    readonly trigger: CapabilityTrigger;
+}
+/**
+ * A scoped capability request in the manifest.
+ * Access is limited to specific resources.
+ */
+export interface ScopedCapabilityRequest {
+    /** The capability being requested */
+    readonly capability: CapabilityType;
+    /** Scope limiting access to specific resources */
+    readonly scope: CapabilityScope;
+    /** User-facing reason why this scope is needed */
+    readonly reason: string;
+}
+/**
+ * Capability manifest for an app.
+ *
+ * Declares all capabilities the app needs:
+ * - required: App won't launch without these
+ * - optional: App works without, reduced features (shown in consent)
+ * - runtime: Requested during execution (not at launch)
+ * - scoped: Access limited to specific resources
+ */
+export interface AppCapabilityManifest {
+    /**
+     * Required capabilities - app won't launch without these.
+     * Can be individual capabilities or composite capabilities.
+     */
+    readonly required: readonly (CapabilityType | CompositeCapability)[];
+    /**
+     * Optional capabilities - app works without, with reduced features.
+     * Shown in consent dialog, user can skip.
+     */
+    readonly optional?: readonly OptionalCapabilityRequest[];
+    /**
+     * Runtime capabilities - requested during execution.
+     * Not shown at launch, requested when needed.
+     */
+    readonly runtime?: readonly RuntimeCapabilityRequest[];
+    /**
+     * Scoped capabilities - access limited to specific resources.
+     * More restrictive than general capability grants.
+     */
+    readonly scoped?: readonly ScopedCapabilityRequest[];
+}
+/**
+ * Extended app manifest with capability declarations.
+ *
+ * This extends the base AppManifest from apps/api.ts with capability support.
+ * Apps declare their capabilities here for the consent flow.
+ */
+export interface AppManifestWithCapabilities {
+    /** Unique app identifier */
+    readonly id: string;
+    /** Display name */
+    readonly name: string;
+    /** App version (semver) */
+    readonly version: string;
+    /** Icon (emoji or icon identifier) */
+    readonly icon?: string;
+    /** Description */
+    readonly description?: string;
+    /** Author */
+    readonly author?: string;
+    /**
+     * Capability manifest declaring what permissions this app needs.
+     */
+    readonly capabilities: AppCapabilityManifest;
+    /**
+     * Whether this is a first-party (trusted) app.
+     * First-party apps have their required capabilities auto-granted on first launch.
+     */
+    readonly firstParty?: boolean;
+}
+/**
+ * Validation error for app manifests.
+ */
+export interface ManifestValidationError {
+    readonly field: string;
+    readonly message: string;
+}
+/**
+ * Manifest validation result.
+ */
+export interface ManifestValidationResult {
+    readonly valid: boolean;
+    readonly errors: readonly ManifestValidationError[];
+}
+//# sourceMappingURL=manifest.d.ts.map

package/dist/capabilities/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/capabilities/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAM9C;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,mBAAmB,CAAC;IAC1D,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC;IAErE;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAEzD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAEvD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACtD;AAMD;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,mBAAmB;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,kBAAkB;IAClB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,aAAa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAUD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD"}

package/dist/capabilities/requester.d.ts

@@ -0,0 +1,209 @@
+/**
+ * Capability Requester - Runtime capability request interfaces
+ *
+ * This file defines:
+ * - ICapabilityRequester interface for runtime capability requests
+ * - CapabilityRequest and CapabilityRequestResult types
+ *
+ * Apps use the requester to request additional capabilities during execution.
+ *
+ * @see plans/active/permission/CAPABILITY-IMPLEMENTATION.md
+ */
+import type { AppId } from './grants';
+import type { CapabilityScope } from './scope';
+import type { CapabilityType } from './types';
+/**
+ * A single capability request.
+ */
+export interface CapabilityRequest {
+    /** The capability being requested */
+    readonly capability: CapabilityType;
+    /** User-facing reason why this capability is needed */
+    readonly reason: string;
+    /** Optional scope for scoped access */
+    readonly scope?: CapabilityScope;
+}
+/**
+ * Result of a single capability request.
+ */
+export interface SingleRequestResult {
+    /** The capability that was requested */
+    readonly capability: CapabilityType;
+    /** Whether the capability was granted */
+    readonly granted: boolean;
+    /** If not granted, why (user denied, rate limited, requires auth, etc.) */
+    readonly denialReason?: CapabilityDenialReason;
+    /** If rate limited, when the request can be retried (Unix ms) */
+    readonly retryAfter?: number;
+}
+/**
+ * Reason why a capability request was denied.
+ */
+export type CapabilityDenialReason = 
+/** User explicitly denied in the consent dialog */
+'user-denied'
+/** Request was rate-limited (too many requests) */
+ | 'rate-limited'
+/** Capability requires re-authentication */
+ | 'requires-auth'
+/** User failed re-authentication */
+ | 'auth-failed'
+/** Capability was previously denied and denial is still active */
+ | 'previously-denied'
+/** The capability is not declared in the app's manifest */
+ | 'not-declared'
+/** The capability has been revoked by admin */
+ | 'admin-revoked'
+/** Session expired before request completed */
+ | 'session-expired';
+/**
+ * Result of a multiple capability request.
+ */
+export interface CapabilityRequestResult {
+    /** Whether all requested capabilities were granted */
+    readonly allGranted: boolean;
+    /** Results for each requested capability */
+    readonly results: readonly SingleRequestResult[];
+    /** List of capabilities that were granted */
+    readonly granted: readonly CapabilityType[];
+    /** List of capabilities that were denied */
+    readonly denied: readonly CapabilityType[];
+}
+/**
+ * Interface for requesting capabilities at runtime.
+ *
+ * Apps use this to request additional capabilities during execution.
+ * The request triggers the consent flow, which may show a dialog to the user.
+ *
+ * Usage:
+ * ```typescript
+ * async function handleExport() {
+ *   if (!requester.has('filesystem:write')) {
+ *     const granted = await requester.request(
+ *       'filesystem:write',
+ *       'Save the exported file to your computer'
+ *     );
+ *     if (!granted) {
+ *       showError('Cannot export without file access');
+ *       return;
+ *     }
+ *     // API hot-reloads - api.filesystem is now defined
+ *   }
+ *   await api.filesystem!.write('export.csv', data);
+ * }
+ * ```
+ */
+export interface ICapabilityRequester {
+    /**
+     * Check if the app currently has a capability.
+     *
+     * This includes both directly granted capabilities and implied capabilities
+     * (e.g., cells:write implies cells:read).
+     *
+     * @param capability - The capability to check
+     * @returns True if the app has this capability
+     */
+    has(capability: CapabilityType): boolean;
+    /**
+     * Request a single capability.
+     *
+     * This triggers the consent flow, which may:
+     * - Grant immediately (if already granted)
+     * - Show a consent dialog (for normal capabilities)
+     * - Require re-authentication (for sensitive capabilities)
+     *
+     * @param capability - The capability to request
+     * @param reason - User-facing reason for the request
+     * @returns True if granted, false if denied
+     */
+    request(capability: CapabilityType, reason: string): Promise<boolean>;
+    /**
+     * Request multiple capabilities at once.
+     *
+     * All capabilities are shown in a single consent dialog.
+     * If any are denied, the entire batch fails.
+     *
+     * @param requests - Array of capability requests
+     * @returns Result object with granted/denied status for each
+     */
+    requestMultiple(requests: readonly CapabilityRequest[]): Promise<CapabilityRequestResult>;
+    /**
+     * Request a scoped capability.
+     *
+     * @param capability - The capability to request
+     * @param scope - The scope limiting access (e.g., "table:contacts")
+     * @param reason - User-facing reason for the request
+     * @returns True if granted, false if denied
+     */
+    requestScoped(capability: CapabilityType, scope: CapabilityScope, reason: string): Promise<boolean>;
+    /**
+     * Check if a request can be made (not rate limited).
+     *
+     * @param capability - The capability to check
+     * @returns Object with canRequest flag and optional retryAfter timestamp
+     */
+    canRequest(capability: CapabilityType): {
+        readonly canRequest: boolean;
+        readonly retryAfter?: number;
+    };
+    /**
+     * Clear a previous denial, allowing re-prompting.
+     *
+     * This is typically called after user clicks "Grant Permission" in settings.
+     *
+     * @param capability - The capability to clear denial for
+     */
+    clearDenial(capability: CapabilityType): void;
+    /**
+     * Get the denial status for a capability.
+     *
+     * @param capability - The capability to check
+     * @returns Denial info if denied, undefined if not denied
+     */
+    getDenialStatus(capability: CapabilityType): {
+        readonly reason: CapabilityDenialReason;
+        readonly deniedAt: number;
+    } | undefined;
+    /**
+     * Check if a capability was explicitly denied.
+     *
+     * @param capability - The capability to check
+     * @returns True if the capability was explicitly denied
+     */
+    isDenied(capability: CapabilityType): boolean;
+}
+/**
+ * Request for showing a capability consent dialog.
+ *
+ * This is passed to the shell's prompt function.
+ */
+export interface CapabilityPromptRequest {
+    /** The app requesting the capability */
+    readonly appId: AppId;
+    /** App display name */
+    readonly appName: string;
+    /** The capabilities being requested */
+    readonly requests: readonly CapabilityRequest[];
+    /** Whether any capabilities are sensitive (require extra warning) */
+    readonly hasSensitive: boolean;
+    /** Whether re-authentication is required */
+    readonly requiresAuth: boolean;
+}
+/**
+ * Result of a capability prompt dialog.
+ */
+export interface CapabilityPromptResult {
+    /** User's decision */
+    readonly decision: 'grant' | 'deny' | 'cancel';
+    /** If partial grant, which capabilities were granted */
+    readonly grantedCapabilities?: readonly CapabilityType[];
+    /** Whether to remember this decision */
+    readonly remember?: boolean;
+}
+/**
+ * Callback function for prompting the user.
+ *
+ * The shell provides this to the requester to show UI.
+ */
+export type CapabilityPromptFn = (request: CapabilityPromptRequest) => Promise<CapabilityPromptResult>;
+//# sourceMappingURL=requester.d.ts.map

package/dist/capabilities/requester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requester.d.ts","sourceRoot":"","sources":["../../src/capabilities/requester.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAM9C;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAEpC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,uCAAuC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAEpC,yCAAyC;IACzC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAE/C,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,MAAM,sBAAsB;AAChC,mDAAmD;AACjD,aAAa;AACf,mDAAmD;GACjD,cAAc;AAChB,4CAA4C;GAC1C,eAAe;AACjB,oCAAoC;GAClC,aAAa;AACf,kEAAkE;GAChE,mBAAmB;AACrB,2DAA2D;GACzD,cAAc;AAChB,+CAA+C;GAC7C,eAAe;AACjB,+CAA+C;GAC7C,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAE7B,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAEjD,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAE5C,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;IAEzC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtE;;;;;;;;OAQG;IACH,eAAe,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAE1F;;;;;;;OAOG;IACH,aAAa,CACX,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;;OAKG;IACH,UAAU,CAAC,UAAU,EAAE,cAAc,GAAG;QACtC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IAEF;;;;;;OAMG;IACH,WAAW,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC;IAE9C;;;;;OAKG;IACH,eAAe,CAAC,UAAU,EAAE,cAAc,GACtC;QACE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;QACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GACD,SAAS,CAAC;IAEd;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC;CAC/C;AAMD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB,uBAAuB;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAEhD,qEAAqE;IACrE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,4CAA4C;IAC5C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sBAAsB;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAE/C,wDAAwD;IACxD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAEzD,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAC/B,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAC"}