@tinycloud/operations 0.3.4-beta.6 → 0.4.0-beta.8

package/dist/authority-ofwbEqmj.d.cts

@@ -0,0 +1,30 @@
+import { PermissionEntry } from '@tinycloud/sdk-core';
+
+/**
+ * A capability in the canonical form persisted in a v1 request artifact.
+ *
+ * The SDK remains the semantic authority for containment. This module only
+ * establishes deterministic exact identity for persistence and display.
+ */
+type CanonicalPermissionEntry = Readonly<PermissionEntry>;
+interface AuthorityEvaluation {
+    readonly satisfied: boolean;
+    readonly missing: readonly CanonicalPermissionEntry[];
+}
+/**
+ * Operation-owned space resolution. The SDK's general capability evaluator
+ * intentionally preserves its historical short/full-space compatibility; the
+ * operation kernel supplies this narrower resolver when a space identifies a
+ * remote owner's resource.
+ */
+type OperationSpaceResolver = (space: string) => string;
+/**
+ * Evaluates required authority with the SDK's public subset primitive.
+ *
+ * In particular, this intentionally does not implement matching rules or
+ * manufacture wildcards. A wildcard can cover a requirement only when it was
+ * already present in the supplied granted authority and the SDK says so.
+ */
+declare function evaluateAuthority(granted: readonly PermissionEntry[], required: readonly PermissionEntry[]): AuthorityEvaluation;
+
+export { type OperationSpaceResolver as O, evaluateAuthority as e };

package/dist/authority-ofwbEqmj.d.ts

@@ -0,0 +1,30 @@
+import { PermissionEntry } from '@tinycloud/sdk-core';
+
+/**
+ * A capability in the canonical form persisted in a v1 request artifact.
+ *
+ * The SDK remains the semantic authority for containment. This module only
+ * establishes deterministic exact identity for persistence and display.
+ */
+type CanonicalPermissionEntry = Readonly<PermissionEntry>;
+interface AuthorityEvaluation {
+    readonly satisfied: boolean;
+    readonly missing: readonly CanonicalPermissionEntry[];
+}
+/**
+ * Operation-owned space resolution. The SDK's general capability evaluator
+ * intentionally preserves its historical short/full-space compatibility; the
+ * operation kernel supplies this narrower resolver when a space identifies a
+ * remote owner's resource.
+ */
+type OperationSpaceResolver = (space: string) => string;
+/**
+ * Evaluates required authority with the SDK's public subset primitive.
+ *
+ * In particular, this intentionally does not implement matching rules or
+ * manufacture wildcards. A wildcard can cover a requirement only when it was
+ * already present in the supplied granted authority and the SDK says so.
+ */
+declare function evaluateAuthority(granted: readonly PermissionEntry[], required: readonly PermissionEntry[]): AuthorityEvaluation;
+
+export { type OperationSpaceResolver as O, evaluateAuthority as e };