@vess-id/ai-identity 0.16.0-alpha.2 → 0.16.0-alpha.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent/agent-did-manager.d.ts +48 -1
- package/dist/agent/agent-did-manager.d.ts.map +1 -1
- package/dist/client.d.ts +2 -2
- package/dist/client.d.ts.map +1 -1
- package/dist/config/index.d.ts +54 -0
- package/dist/config/index.d.ts.map +1 -1
- package/dist/did/agent.d.ts +7 -1
- package/dist/did/agent.d.ts.map +1 -1
- package/dist/identity/user-identity-manager.d.ts +55 -1
- package/dist/identity/user-identity-manager.d.ts.map +1 -1
- package/dist/index.d.mts +1336 -22738
- package/dist/index.d.ts +25 -14
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +30496 -3235
- package/dist/index.js.map +1 -1
- package/dist/index.mjs +30482 -3233
- package/dist/index.mjs.map +1 -1
- package/dist/registry/action-registry-json.d.ts +54 -22447
- package/dist/registry/action-registry-json.d.ts.map +1 -1
- package/dist/registry/action-registry.d.ts +34 -0
- package/dist/registry/action-registry.d.ts.map +1 -1
- package/dist/registry/action-risk.d.ts +64 -18
- package/dist/registry/action-risk.d.ts.map +1 -1
- package/dist/registry/action-summary.d.ts +23 -0
- package/dist/registry/action-summary.d.ts.map +1 -1
- package/dist/registry/index.d.ts +3 -3
- package/dist/registry/index.d.ts.map +1 -1
- package/dist/registry/providers.d.ts +22 -1
- package/dist/registry/providers.d.ts.map +1 -1
- package/dist/registry/resource-types.d.ts +17 -4
- package/dist/registry/resource-types.d.ts.map +1 -1
- package/dist/resolver/approval-time-resolution.d.ts +72 -0
- package/dist/resolver/approval-time-resolution.d.ts.map +1 -0
- package/dist/resolver/canonical-resource-id.d.ts +13 -0
- package/dist/resolver/canonical-resource-id.d.ts.map +1 -1
- package/dist/resolver/hierarchical-match.d.ts +60 -0
- package/dist/resolver/hierarchical-match.d.ts.map +1 -0
- package/dist/resolver/salient-digest.d.ts +48 -0
- package/dist/resolver/salient-digest.d.ts.map +1 -0
- package/dist/resolver/target-resolver.d.ts +25 -0
- package/dist/resolver/target-resolver.d.ts.map +1 -1
- package/dist/tool/tool-manager.d.ts.map +1 -1
- package/dist/types/connector-plugin.d.ts +72 -2
- package/dist/types/connector-plugin.d.ts.map +1 -1
- package/dist/types/grant.d.ts +27 -4
- package/dist/types/grant.d.ts.map +1 -1
- package/dist/types/intent.d.ts +2 -2
- package/dist/types/intent.d.ts.map +1 -1
- package/dist/types/permission-mode.d.ts +1 -1
- package/dist/types/permission-mode.d.ts.map +1 -1
- package/dist/types/permission-vc.d.ts +94 -0
- package/dist/types/permission-vc.d.ts.map +1 -1
- package/dist/types/target-binding.d.ts +29 -1
- package/dist/types/target-binding.d.ts.map +1 -1
- package/dist/types/vc.d.ts +11 -1
- package/dist/types/vc.d.ts.map +1 -1
- package/dist/utils/sdjwt-client.d.ts +242 -5
- package/dist/utils/sdjwt-client.d.ts.map +1 -1
- package/dist/utils/sdjwt-disclosure.d.ts.map +1 -1
- package/dist/vc/api-vc-manager.d.ts +5 -0
- package/dist/vc/api-vc-manager.d.ts.map +1 -1
- package/dist/vc/vc-manager.d.ts.map +1 -1
- package/dist/vp/vp-manager.d.ts +35 -0
- package/dist/vp/vp-manager.d.ts.map +1 -1
- package/package.json +14 -3
- package/dist/constraint/__tests__/fixtures/constraint.fixtures.d.ts +0 -56
- package/dist/constraint/__tests__/fixtures/constraint.fixtures.d.ts.map +0 -1
- package/dist/internal-signature/__tests__/canonical.spec.d.ts +0 -2
- package/dist/internal-signature/__tests__/canonical.spec.d.ts.map +0 -1
- package/dist/internal-signature/__tests__/signer-roundtrip.spec.d.ts +0 -2
- package/dist/internal-signature/__tests__/signer-roundtrip.spec.d.ts.map +0 -1
- package/dist/internal-signature/__tests__/signer.spec.d.ts +0 -2
- package/dist/internal-signature/__tests__/signer.spec.d.ts.map +0 -1
- package/dist/monitoring/metrics-manager.d.ts +0 -74
- package/dist/monitoring/metrics-manager.d.ts.map +0 -1
- package/dist/policy/__tests__/cedar-engine.spec.d.ts +0 -17
- package/dist/policy/__tests__/cedar-engine.spec.d.ts.map +0 -1
- package/dist/policy/__tests__/cedar-entities.spec.d.ts +0 -14
- package/dist/policy/__tests__/cedar-entities.spec.d.ts.map +0 -1
- package/dist/policy/__tests__/decision-enum.spec.d.ts +0 -16
- package/dist/policy/__tests__/decision-enum.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-input-validator.spec.d.ts +0 -10
- package/dist/registry/__tests__/action-input-validator.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-registry-freebusy.spec.d.ts +0 -13
- package/dist/registry/__tests__/action-registry-freebusy.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-registry-inbox.spec.d.ts +0 -9
- package/dist/registry/__tests__/action-registry-inbox.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-registry-scheduling.spec.d.ts +0 -13
- package/dist/registry/__tests__/action-registry-scheduling.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-registry-validation.spec.d.ts +0 -13
- package/dist/registry/__tests__/action-registry-validation.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-risk-registry-driven.spec.d.ts +0 -15
- package/dist/registry/__tests__/action-risk-registry-driven.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/action-risk.spec.d.ts +0 -17
- package/dist/registry/__tests__/action-risk.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/guidance-examples.spec.d.ts +0 -2
- package/dist/registry/__tests__/guidance-examples.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/high-risk-resource-binding-invariant.spec.d.ts +0 -30
- package/dist/registry/__tests__/high-risk-resource-binding-invariant.spec.d.ts.map +0 -1
- package/dist/registry/__tests__/reauth-constants.spec.d.ts +0 -2
- package/dist/registry/__tests__/reauth-constants.spec.d.ts.map +0 -1
- package/dist/types/__tests__/cedar-policy.spec.d.ts +0 -8
- package/dist/types/__tests__/cedar-policy.spec.d.ts.map +0 -1
- package/dist/types/__tests__/permission-vc-v3.spec.d.ts +0 -9
- package/dist/types/__tests__/permission-vc-v3.spec.d.ts.map +0 -1
- package/dist/types/__tests__/phase1-vc-factory.spec.d.ts +0 -9
- package/dist/types/__tests__/phase1-vc-factory.spec.d.ts.map +0 -1
- package/dist/types/__tests__/policy-ref.spec.d.ts +0 -9
- package/dist/types/__tests__/policy-ref.spec.d.ts.map +0 -1
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Produce the deterministic canonical JSON string over ONLY the given salient
|
|
3
|
+
* `fields` of `params`. Field-list-explicit variant — the pure core that the
|
|
4
|
+
* golden vectors pin and that the action-aware wrappers delegate to.
|
|
5
|
+
*
|
|
6
|
+
* @throws if any selected value violates the number rules (float / non-finite)
|
|
7
|
+
* or contains an unsupported value type.
|
|
8
|
+
*/
|
|
9
|
+
export declare function canonicalizeWithFields(fields: string[], params: Record<string, unknown>): string;
|
|
10
|
+
/**
|
|
11
|
+
* `sha256:` + lowercase-hex sha256 of {@link canonicalizeWithFields}.
|
|
12
|
+
* Field-list-explicit variant.
|
|
13
|
+
*/
|
|
14
|
+
export declare function digestWithFields(fields: string[], params: Record<string, unknown>): string;
|
|
15
|
+
/**
|
|
16
|
+
* Look up the action's declared approval-salient fields.
|
|
17
|
+
*
|
|
18
|
+
* As of Step 2 the registry declares `approval_salient_fields` (typed on
|
|
19
|
+
* `ActionMeta`) for every approval-gated action. The runtime guards below still
|
|
20
|
+
* defend against a malformed literal (the registry JSON is a widened object
|
|
21
|
+
* literal, not schema-validated at import time), returning `undefined` when the
|
|
22
|
+
* action is unknown or has no well-formed string[] salient set.
|
|
23
|
+
*
|
|
24
|
+
* @returns the declared salient field names, or `undefined` if the action is
|
|
25
|
+
* unknown or has not declared a salient set.
|
|
26
|
+
*/
|
|
27
|
+
export declare function salientFieldsFor(action: string): string[] | undefined;
|
|
28
|
+
/**
|
|
29
|
+
* Canonical JSON string over the action's declared salient set.
|
|
30
|
+
*
|
|
31
|
+
* Thin wrapper: resolves the field list via {@link salientFieldsFor} then
|
|
32
|
+
* delegates to {@link canonicalizeWithFields}.
|
|
33
|
+
*
|
|
34
|
+
* @throws if the action has no declared salient set — callers that may hit an
|
|
35
|
+
* action without a set should gate on {@link salientFieldsFor} /
|
|
36
|
+
* {@link salientDigest} (which returns `undefined`) first. Throwing here keeps
|
|
37
|
+
* the "no set" case loud rather than silently canonicalizing `{}`.
|
|
38
|
+
*/
|
|
39
|
+
export declare function canonicalizeSalient(action: string, params: Record<string, unknown>): string;
|
|
40
|
+
/**
|
|
41
|
+
* `sha256:` digest over the action's declared salient set.
|
|
42
|
+
*
|
|
43
|
+
* Thin wrapper: resolves the field list via {@link salientFieldsFor} then
|
|
44
|
+
* delegates to {@link digestWithFields}. Returns `undefined` when the action has
|
|
45
|
+
* no salient set (issuer omits `params_hash`; PEP skips the salient gate).
|
|
46
|
+
*/
|
|
47
|
+
export declare function salientDigest(action: string, params: Record<string, unknown>): string | undefined;
|
|
48
|
+
//# sourceMappingURL=salient-digest.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"salient-digest.d.ts","sourceRoot":"","sources":["../../src/resolver/salient-digest.ts"],"names":[],"mappings":"AA4HA;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CA4BhG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAI1F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAOrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAM3F;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAIjG"}
|
|
@@ -5,6 +5,21 @@ import { TargetBindings, ResolvedTargets } from '../types/target-binding';
|
|
|
5
5
|
*
|
|
6
6
|
* @remarks Project keys must be at least 2 uppercase characters, matching Jira's requirement.
|
|
7
7
|
* Single-letter keys (e.g., "A-1") return null.
|
|
8
|
+
*
|
|
9
|
+
* 🔴 承認の「この grant はこの資源を覆うか」判定にこれを**直接**呼ばないこと。
|
|
10
|
+
* その用途では `hierarchical-match.ts` の `hierarchicalResourceIdMatches()` /
|
|
11
|
+
* `getHierarchicalParentExtractor()` を使う —— provider ごとに pattern が
|
|
12
|
+
* 違い(Backlog は先頭数字・1 文字を許すぶん Jira より緩い)、この関数は
|
|
13
|
+
* **Jira の pattern 固定**なので、backlog の id に当てると親を取り損ねて
|
|
14
|
+
* 承認済みの grant を取りこぼす。逆に backlog の pattern を Jira に当てると
|
|
15
|
+
* 承認範囲が広がる。どちらも階層テーブル経由なら起こらない。
|
|
16
|
+
*
|
|
17
|
+
* この export 自体は SDK の公開面なので残しているが、新規の呼び出し元は
|
|
18
|
+
* 階層テーブル側を使うこと。
|
|
19
|
+
*
|
|
20
|
+
* @deprecated 承認の階層判定には使わないこと。
|
|
21
|
+
* `getHierarchicalParentExtractor(provider)` / `hierarchicalResourceIdMatches()`
|
|
22
|
+
* (`./hierarchical-match`)を使う。Jira の抽出そのものが要る場面でのみ可。
|
|
8
23
|
*/
|
|
9
24
|
export declare function extractProjectKey(value: string): string | null;
|
|
10
25
|
/**
|
|
@@ -22,6 +37,16 @@ export declare class TargetResolver {
|
|
|
22
37
|
* @param context - Optional pre-resolved context values (e.g., resource_id from URL)
|
|
23
38
|
*/
|
|
24
39
|
resolve(bindings: TargetBindings, params: Record<string, unknown>, context?: Record<string, string>): ResolvedTargets;
|
|
40
|
+
/**
|
|
41
|
+
* §9.2: param が非空文字列ならその値、それ以外(束縛無し / param 無し / 空 /
|
|
42
|
+
* 非文字列)は undefined = fallback 'connection_default'。
|
|
43
|
+
*
|
|
44
|
+
* 🔴 trim only — `toLowerCase()` は SDK では «やらない»。大文字小文字の正規化は
|
|
45
|
+
* api 側の normalizeStoredTenantRef / validateTenantRefInput が所有する(§11.6)。
|
|
46
|
+
* ここで小文字化すると、保存時の正規化と突き合わせ時の正規化が 2 箇所に分かれ、
|
|
47
|
+
* 片方だけ変わったときに黙ってテナント不一致(= 認可の取り違え)になる。
|
|
48
|
+
*/
|
|
49
|
+
private resolveTenantRefBinding;
|
|
25
50
|
private resolveBinding;
|
|
26
51
|
private resolveSecondary;
|
|
27
52
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"target-resolver.d.ts","sourceRoot":"","sources":["../../src/resolver/target-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,
|
|
1
|
+
{"version":3,"file":"target-resolver.d.ts","sourceRoot":"","sources":["../../src/resolver/target-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,EAKhB,MAAM,yBAAyB,CAAA;AAShC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB;;;;;;OAMG;IACH,OAAO,CACL,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,eAAe;IAuBlB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,cAAc;IAgDtB,OAAO,CAAC,gBAAgB;CAmBzB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tool-manager.d.ts","sourceRoot":"","sources":["../../src/tool/tool-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAG5C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAChC,EAAE,CAAA;CACJ;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,WAAW,CAAQ;gBAEf,SAAS,CAAC,EAAE,SAAS;IAOjC;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,EAAE,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAgHhC;;OAEG;IACH,IAAI,IAAI,cAAc,EAAE;IAIxB;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIxC;;OAEG;IACG,kBAAkB,CACtB,GAAG,EAAE,MAAM,EAAE,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAClC,OAAO,CAAC,OAAO,CAAC;IAyBnB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,oBAAoB;
|
|
1
|
+
{"version":3,"file":"tool-manager.d.ts","sourceRoot":"","sources":["../../src/tool/tool-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAG5C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAChC,EAAE,CAAA;CACJ;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,SAAS,CAAW;IAC5B,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,WAAW,CAAQ;gBAEf,SAAS,CAAC,EAAE,SAAS;IAOjC;;OAEG;IACG,MAAM,CAAC,CAAC,GAAG,GAAG,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,EAAE,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAgHhC;;OAEG;IACH,IAAI,IAAI,cAAc,EAAE;IAIxB;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIxC;;OAEG;IACG,kBAAkB,CACtB,GAAG,EAAE,MAAM,EAAE,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAClC,OAAO,CAAC,OAAO,CAAC;IAyBnB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,oBAAoB;CAwO7B"}
|
|
@@ -13,8 +13,31 @@ import { ConnectorResponse } from './connectors';
|
|
|
13
13
|
* - 'low': Read-only operations, no side effects
|
|
14
14
|
* - 'medium': Write operations with limited scope
|
|
15
15
|
* - 'high': Destructive or high-impact operations
|
|
16
|
+
* - 'critical': Irreversible or wide-blast-radius operations (deleting a
|
|
17
|
+
* project, removing a user from an organization). Every strictness seam MUST
|
|
18
|
+
* treat 'critical' at least as strictly as 'high' — never compare
|
|
19
|
+
* `=== 'high'` alone.
|
|
20
|
+
*
|
|
21
|
+
* 'critical' was added by the Backlog connector work (PR ⑤b-0), which brings 23
|
|
22
|
+
* critical actions. It removes an existing asymmetry rather than inventing a
|
|
23
|
+
* new tier: the registry JSON schema already allowed `risk: 'critical'`
|
|
24
|
+
* (`registry/action-registry.ts` → `risk: { enum: ['low','medium','high','critical'] }`)
|
|
25
|
+
* and `ActionRisk` (`registry/action-risk.ts`) already resolved it, so an action
|
|
26
|
+
* could be REGISTERED 'critical' while the `ConnectorAction` describing that very
|
|
27
|
+
* same action to MCP could not express it.
|
|
28
|
+
*
|
|
29
|
+
* 🔴 Three other same-shaped unions exist and are NOT this type — do not
|
|
30
|
+
* "consolidate" them without reading their docblocks first:
|
|
31
|
+
* - `RiskLevel` (`types/context.ts`) — Cedar `context.action.risk_level`
|
|
32
|
+
* - `SuggestionRiskLevel` (`types/permission-mode.ts`) — permission-mode UI
|
|
33
|
+
* - `ActionRisk` (`registry/action-risk.ts`) — ACTION_REGISTRY resolution
|
|
34
|
+
*
|
|
35
|
+
* Drive コネクタ側からも同じ結論に到達している: 完全削除系
|
|
36
|
+
* (`drive.file.delete` 等) が critical で、**registry の `risk` と adapter の
|
|
37
|
+
* `riskLevel` を `risk-level-consistency.spec` が突き合わせる**ため、adapter 側も
|
|
38
|
+
* critical を宣言できなければならない。
|
|
16
39
|
*/
|
|
17
|
-
export type ActionRiskLevel = 'low' | 'medium' | 'high';
|
|
40
|
+
export type ActionRiskLevel = 'low' | 'medium' | 'high' | 'critical';
|
|
18
41
|
/**
|
|
19
42
|
* JSON Schema compatible input schema for connector actions.
|
|
20
43
|
* Defines the expected parameters for an action.
|
|
@@ -34,6 +57,21 @@ export interface ActionInputSchema {
|
|
|
34
57
|
default?: unknown;
|
|
35
58
|
/** Allowed values for enum types */
|
|
36
59
|
enum?: unknown[];
|
|
60
|
+
/** Minimum value for numbers */
|
|
61
|
+
minimum?: number;
|
|
62
|
+
/** Maximum value for numbers */
|
|
63
|
+
maximum?: number;
|
|
64
|
+
/** Minimum length for strings */
|
|
65
|
+
minLength?: number;
|
|
66
|
+
/** Maximum length for strings */
|
|
67
|
+
maxLength?: number;
|
|
68
|
+
/** Items schema for arrays */
|
|
69
|
+
items?: {
|
|
70
|
+
type: string;
|
|
71
|
+
[key: string]: unknown;
|
|
72
|
+
};
|
|
73
|
+
/** Additional JSON Schema properties */
|
|
74
|
+
[key: string]: unknown;
|
|
37
75
|
}>;
|
|
38
76
|
/** Array of required property names */
|
|
39
77
|
required?: string[];
|
|
@@ -68,6 +106,23 @@ export interface ConnectorTokenConfig {
|
|
|
68
106
|
* This allows connectors to store additional context needed for API calls.
|
|
69
107
|
*/
|
|
70
108
|
providerMetadata?: Record<string, unknown>;
|
|
109
|
+
/**
|
|
110
|
+
* OAuth provider this token was issued by (e.g. 'google', 'microsoft').
|
|
111
|
+
*
|
|
112
|
+
* Needed by connectors that one tool name can reach through more than one
|
|
113
|
+
* provider — `calendar` runs on both Google Calendar and Microsoft Graph, and
|
|
114
|
+
* the adapter cannot pick the right API client from the access token alone.
|
|
115
|
+
* Optional so single-provider connectors and older callers are unaffected;
|
|
116
|
+
* a connector that reads it must define its own default when absent.
|
|
117
|
+
*/
|
|
118
|
+
provider?: string;
|
|
119
|
+
/**
|
|
120
|
+
* Scopes granted to this token, as stored by the API.
|
|
121
|
+
*
|
|
122
|
+
* Lets a connector report a capability gap itself instead of failing with the
|
|
123
|
+
* provider's raw error. Optional: absent means "unknown", never "none".
|
|
124
|
+
*/
|
|
125
|
+
scopes?: string[];
|
|
71
126
|
}
|
|
72
127
|
/**
|
|
73
128
|
* Extended metadata for connector response.
|
|
@@ -160,8 +215,23 @@ export interface ConnectorExecutionContext {
|
|
|
160
215
|
export interface IConnectorService {
|
|
161
216
|
/** Unique identifier for this connector (e.g., 'slack', 'jira', 'github') */
|
|
162
217
|
readonly name: string;
|
|
163
|
-
/**
|
|
218
|
+
/**
|
|
219
|
+
* OAuth provider identifier used for token management.
|
|
220
|
+
* For a connector reachable through several providers this is the DEFAULT
|
|
221
|
+
* one; see {@link IConnectorService.oauthProviders}.
|
|
222
|
+
*/
|
|
164
223
|
readonly oauthProvider: string;
|
|
224
|
+
/**
|
|
225
|
+
* Every OAuth provider this connector can execute against, most preferred
|
|
226
|
+
* first, starting with `oauthProvider`.
|
|
227
|
+
*
|
|
228
|
+
* Optional and additive: a connector that omits it is treated as
|
|
229
|
+
* `[oauthProvider]`. Declare it only when one tool name can run on more than
|
|
230
|
+
* one provider (e.g. a calendar connector serving both Google Calendar and
|
|
231
|
+
* Microsoft Graph), so the host can pick the provider from the user's actual
|
|
232
|
+
* connections instead of a fixed tool→provider map.
|
|
233
|
+
*/
|
|
234
|
+
readonly oauthProviders?: readonly string[];
|
|
165
235
|
/** Semantic version of the connector implementation */
|
|
166
236
|
readonly version?: string;
|
|
167
237
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connector-plugin.d.ts","sourceRoot":"","sources":["../../src/types/connector-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD
|
|
1
|
+
{"version":3,"file":"connector-plugin.d.ts","sourceRoot":"","sources":["../../src/types/connector-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAEpE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,IAAI,EAAE,QAAQ,CAAA;IACd,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAChB,MAAM,EACN;QACE,gEAAgE;QAChE,IAAI,EAAE,MAAM,CAAA;QACZ,kDAAkD;QAClD,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,oFAAoF;QACpF,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,oCAAoC;QACpC,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,oCAAoC;QACpC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA;QAChB,gCAAgC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,gCAAgC;QAChC,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,iCAAiC;QACjC,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,iCAAiC;QACjC,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,8BAA8B;QAC9B,KAAK,CAAC,EAAE;YACN,IAAI,EAAE,MAAM,CAAA;YACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SACvB,CAAA;QACD,wCAAwC;QACxC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CACF,CAAA;IACD,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,iBAAiB,CAAA;IAC9B,iDAAiD;IACjD,SAAS,EAAE,eAAe,CAAA;IAC1B,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAA;IACnB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,KAAK,CAAC,EAAE,oBAAoB,CAAA;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,EAAE;QACN,6CAA6C;QAC7C,MAAM,EAAE,MAAM,CAAA;QACd,2DAA2D;QAC3D,GAAG,EAAE,MAAM,CAAA;QACX,8CAA8C;QAC9C,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,WAAW,iBAAiB;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;;OAKG;IACH,mBAAmB,IAAI,eAAe,EAAE,CAAA;IAExC;;;;;;;;;;;;OAYG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAA;IAElD;;;;;OAKG;IACH,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CACnC"}
|
package/dist/types/grant.d.ts
CHANGED
|
@@ -33,8 +33,6 @@ export declare enum GrantResourceType {
|
|
|
33
33
|
GITHUB_REPO = "github:repo",
|
|
34
34
|
GITHUB_ORG = "github:org",
|
|
35
35
|
GITHUB_ISSUE = "github:issue",
|
|
36
|
-
GOOGLE_DRIVE_FILE = "google:drive:file",
|
|
37
|
-
GOOGLE_DRIVE_FOLDER = "google:drive:folder",
|
|
38
36
|
GMAIL_THREAD = "gmail:thread",
|
|
39
37
|
GMAIL_LABEL = "gmail:label",
|
|
40
38
|
JIRA_PROJECT = "jira:project",
|
|
@@ -48,6 +46,20 @@ export declare enum GrantResourceType {
|
|
|
48
46
|
HUBSPOT_WORKFLOW = "hubspot:workflow",
|
|
49
47
|
HUBSPOT_ACCOUNT = "hubspot:account",
|
|
50
48
|
OS_SECRET = "os:secret",
|
|
49
|
+
BACKLOG_SPACE = "backlog:space",
|
|
50
|
+
BACKLOG_USER = "backlog:user",
|
|
51
|
+
BACKLOG_PROJECT = "backlog:project",
|
|
52
|
+
BACKLOG_ISSUE = "backlog:issue",
|
|
53
|
+
BACKLOG_WIKI = "backlog:wiki",
|
|
54
|
+
BACKLOG_DOCUMENT = "backlog:document",
|
|
55
|
+
BACKLOG_REPOSITORY = "backlog:repository",
|
|
56
|
+
BACKLOG_PULLREQUEST = "backlog:pullrequest",
|
|
57
|
+
BACKLOG_TEAM = "backlog:team",
|
|
58
|
+
BACKLOG_WATCHING = "backlog:watching",
|
|
59
|
+
BACKLOG_NOTIFICATION = "backlog:notification",
|
|
60
|
+
DRIVE_FILE = "drive:file",
|
|
61
|
+
DRIVE_SHAREDDRIVE = "drive:shareddrive",
|
|
62
|
+
DRIVE_ACCOUNT = "drive:account",
|
|
51
63
|
ANY = "*"
|
|
52
64
|
}
|
|
53
65
|
/**
|
|
@@ -297,7 +309,7 @@ export interface CreateGrantRequest {
|
|
|
297
309
|
userId?: string;
|
|
298
310
|
/** 許可するリソース範囲 */
|
|
299
311
|
resources: GrantResource[];
|
|
300
|
-
/** 許可するアクション(例: slack
|
|
312
|
+
/** 許可するアクション(例: slack.message.post) */
|
|
301
313
|
actions: string[];
|
|
302
314
|
/** 制約 */
|
|
303
315
|
constraints: GrantConstraints;
|
|
@@ -444,7 +456,7 @@ export declare function grantConstraintsToPermissionConstraints(constraints: Gra
|
|
|
444
456
|
* ```typescript
|
|
445
457
|
* const grant = {
|
|
446
458
|
* resources: [{ type: 'slack:channel', id: 'C123' }],
|
|
447
|
-
* actions: ['slack
|
|
459
|
+
* actions: ['slack.message.post', 'slack.channel.read'],
|
|
448
460
|
* constraints: { maxInvocations: 100, timeWindow: { start: '09:00', end: '18:00' } }
|
|
449
461
|
* }
|
|
450
462
|
*
|
|
@@ -507,5 +519,16 @@ export interface ApprovalContext {
|
|
|
507
519
|
granted_at: string;
|
|
508
520
|
/** user id or `'system'` for auto-approve. */
|
|
509
521
|
granted_by: string;
|
|
522
|
+
/**
|
|
523
|
+
* HOW the consent was obtained — `'explicit'` (the user acted) or `'auto'`
|
|
524
|
+
* (consent given on their behalf). Distinct from `granted_by`, which
|
|
525
|
+
* records WHO: booking start writes `'system'` for both, because the
|
|
526
|
+
* visitor's identity is gone by issuance time.
|
|
527
|
+
*
|
|
528
|
+
* Optional and nullable on purpose. Absent means "not recorded" — rows
|
|
529
|
+
* predating the column, which are deliberately not backfilled. Readers must
|
|
530
|
+
* treat that as a third state rather than defaulting it either way.
|
|
531
|
+
*/
|
|
532
|
+
consent_type?: 'explicit' | 'auto';
|
|
510
533
|
}
|
|
511
534
|
//# sourceMappingURL=grant.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/types/grant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,oBAAY,WAAW;IACrB,OAAO,YAAY,CAAE,4BAA4B;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED;;;;;GAKG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY,CAAE,iCAAiC;IACtD,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAE3B,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,eAAe,oBAAoB;IAEnC,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,YAAY,iBAAiB;IAE7B,
|
|
1
|
+
{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/types/grant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,oBAAY,WAAW;IACrB,OAAO,YAAY,CAAE,4BAA4B;IACjD,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED;;;;;GAKG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY,CAAE,iCAAiC;IACtD,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAE3B,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,eAAe,oBAAoB;IAEnC,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,YAAY,iBAAiB;IAE7B,YAAY,iBAAiB;IAC7B,WAAW,gBAAgB;IAE3B,YAAY,iBAAiB;IAC7B,UAAU,eAAe;IACzB,UAAU,eAAe;IAEzB,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IACrC,cAAc,mBAAmB;IACjC,mBAAmB,wBAAwB;IAC3C,kBAAkB,uBAAuB;IACzC,gBAAgB,qBAAqB;IACrC,eAAe,oBAAoB;IAEnC,SAAS,cAAc;IAEvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,gBAAgB,qBAAqB;IACrC,kBAAkB,uBAAuB;IACzC,mBAAmB,wBAAwB;IAC3C,YAAY,iBAAiB;IAC7B,gBAAgB,qBAAqB;IACrC,oBAAoB,yBAAyB;IAE7C,UAAU,eAAe;IACzB,iBAAiB,sBAAsB;IACvC,aAAa,kBAAkB;IAE/B,GAAG,MAAM;CACV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiGG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;;;;;OAeG;IACH,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAEhC;;;;;;;;;;OAUG;IACH,EAAE,CAAC,EAAE,MAAM,CAAA;IAEX;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IAEb;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,uBAAuB;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,kBAAkB;IAClB,OAAO,EAAE,OAAO,CAAA;IAChB,yCAAyC;IACzC,YAAY,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAA;IAC/B,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY;IACZ,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sBAAsB;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,wBAAwB;IACxB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,kBAAkB,EAAE,gBAAgB,EAAE,CAAA;IACvD,aAAa;IACb,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,eAAe;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mCAAmC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iBAAiB;IACjB,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B,uCAAuC;IACvC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS;IACT,WAAW,EAAE,gBAAgB,CAAA;IAC7B,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,aAAa;IACb,SAAS,CAAC,EAAE,aAAa,EAAE,CAAA;IAC3B,YAAY;IACZ,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,SAAS;IACT,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B,YAAY;IACZ,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,YAAY;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,YAAY;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,UAAU;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,mCAAmC;IACnC,UAAU,EAAE,UAAU,CAAA;IACtB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY;IACZ,MAAM,EAAE,WAAW,CAAA;IACnB,aAAa;IACb,SAAS,EAAE,aAAa,EAAE,CAAA;IAC1B,cAAc;IACd,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS;IACT,WAAW,EAAE,gBAAgB,CAAA;IAC7B,cAAc;IACd,kBAAkB,EAAE,MAAM,CAAA;IAC1B,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gBAAgB;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW;IACX,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW;IACX,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,uCAAuC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB;IACjB,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,CAAC,EAAE,MAAM,CAAA;KACZ,CAAA;IACD,eAAe;IACf,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,eAAe;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,aAAa;IACb,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,cAAc;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAMD,OAAO,EACL,cAAc,EACd,qBAAqB,EAItB,MAAM,iBAAiB,CAAA;AAExB;;;;;;;;GAQG;AACH,wBAAgB,uCAAuC,CACrD,WAAW,EAAE,gBAAgB,GAC5B,qBAAqB,GAAG,SAAS,CA0CnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,aAAa,EAAE,EAC1B,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,EAAE,gBAAgB,EAC7B,OAAO,CAAC,EAAE,MAAM,GACf,cAAc,EAAE,CA2ElB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,eAAe;IAC9B;;iCAE6B;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB;8EAC0E;IAC1E,UAAU,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAA;IACb;4EACwE;IACxE,OAAO,EAAE,OAAO,CAAA;IAChB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,CAAA;CACnC"}
|
package/dist/types/intent.d.ts
CHANGED
|
@@ -6,7 +6,7 @@
|
|
|
6
6
|
* リソース情報
|
|
7
7
|
*/
|
|
8
8
|
export interface IntentResource {
|
|
9
|
-
/** リソースタイプ(
|
|
9
|
+
/** リソースタイプ(slack:channel, drive:file 等。registry の resource_type と同じ 2 セグメント) */
|
|
10
10
|
type: string;
|
|
11
11
|
/** リソース識別子 */
|
|
12
12
|
id?: string;
|
|
@@ -24,7 +24,7 @@ export interface Intent {
|
|
|
24
24
|
subject: string;
|
|
25
25
|
/** 実行者のDID(Agent/User) */
|
|
26
26
|
actor: string;
|
|
27
|
-
/** 正規化アクション名(例: slack
|
|
27
|
+
/** 正規化アクション名(例: slack.message.post) */
|
|
28
28
|
action: string;
|
|
29
29
|
/** リソース情報 */
|
|
30
30
|
resource: IntentResource;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../../src/types/intent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,
|
|
1
|
+
{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../../src/types/intent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAA;IACZ,cAAc;IACd,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,aAAa;IACb,QAAQ,EAAE,cAAc,CAAA;IACxB,YAAY;IACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,MAAM;IAC9C,aAAa;IACb,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,kBAAkB;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB,6BAA6B;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,YAAY;IACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,aAAa;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW;IACX,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB;IAChB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,eAAe;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,oBAAoB;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,wBAAwB;IACxB,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAChC,SAAS;IACT,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,IAAI,EAAE,gBAAgB,GAAG,WAAW,GAAG,kBAAkB,GAAG,YAAY,GAAG,QAAQ,CAAA;IACnF,WAAW;IACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,oBAAY,sBAAsB;IAChC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,KAAK,UAAU;CAChB;AAED;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAA"}
|
|
@@ -17,7 +17,7 @@ export type SuggestionRiskLevel = 'low' | 'medium' | 'high' | 'critical';
|
|
|
17
17
|
* 推奨アクション(リスクレベル付き)
|
|
18
18
|
*/
|
|
19
19
|
export interface SuggestedAction {
|
|
20
|
-
/** アクション名 (例: slack
|
|
20
|
+
/** アクション名 (例: slack.message.post) */
|
|
21
21
|
action: string;
|
|
22
22
|
/** リスクレベル */
|
|
23
23
|
riskLevel: SuggestionRiskLevel;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"permission-mode.d.ts","sourceRoot":"","sources":["../../src/types/permission-mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAExE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,
|
|
1
|
+
{"version":3,"file":"permission-mode.d.ts","sourceRoot":"","sources":["../../src/types/permission-mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAA;AAEjE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAExE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,aAAa;IACb,SAAS,EAAE,mBAAmB,CAAA;IAC9B,YAAY;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mBAAmB;IACnB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B;IAC3B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe;IACf,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,cAAc;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,eAAe;IACf,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY;IACZ,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,CAAA;QACb,GAAG,EAAE,MAAM,CAAA;QACX,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,MAAM,EAAE,CAAA;KACrB,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sBAAsB;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,eAAe;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,kBAAkB;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB;IAChB,gBAAgB,EAAE,eAAe,EAAE,CAAA;IACnC,aAAa;IACb,kBAAkB,EAAE,iBAAiB,EAAE,CAAA;IACvC,WAAW;IACX,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,kBAAkB;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,eAAe;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB;IAChB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,eAAe;IACf,iBAAiB,EAAE,iBAAiB,EAAE,CAAA;IACtC,aAAa;IACb,WAAW,EAAE;QACX,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE;YACX,KAAK,EAAE,MAAM,CAAA;YACb,GAAG,EAAE,MAAM,CAAA;YACX,QAAQ,EAAE,MAAM,CAAA;YAChB,UAAU,EAAE,MAAM,EAAE,CAAA;SACrB,CAAA;KACF,CAAA;IACD,iBAAiB;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,mBAAmB,EAAE,oBAAoB,CA6BzF,CAAA"}
|
|
@@ -233,6 +233,24 @@ export interface PermissionRule {
|
|
|
233
233
|
actions: string[];
|
|
234
234
|
/** Rule-level constraints */
|
|
235
235
|
constraints?: PermissionConstraints;
|
|
236
|
+
/**
|
|
237
|
+
* RAR authorization-details type (RFC 9396 §2), carried verbatim (#952).
|
|
238
|
+
*
|
|
239
|
+
* A free-form URN naming the kind of authorization this delegate represents,
|
|
240
|
+
* for consumers that speak RAR. Deliberately unvalidated: the registry of
|
|
241
|
+
* types belongs to whoever issues them, and rejecting an unrecognised URN
|
|
242
|
+
* here would make this service the gatekeeper of a vocabulary it does not
|
|
243
|
+
* own.
|
|
244
|
+
*
|
|
245
|
+
* NOT an authorization input. Gate-2 authorises on `provider`, `actions`,
|
|
246
|
+
* `resource.type` and `resource.id`; a credential must not be able to widen
|
|
247
|
+
* or narrow what it may do by naming a type. Note how close this sits to
|
|
248
|
+
* `resource.type`, which Gate-2 *does* read — the two are one level apart
|
|
249
|
+
* and the format is unchecked, so a line reaching for the wrong one would
|
|
250
|
+
* not be caught by the compiler or at runtime. Pinned in
|
|
251
|
+
* `gate2-fast-path.spec.ts` ("delegates[].type is inert at Gate-2").
|
|
252
|
+
*/
|
|
253
|
+
type?: string;
|
|
236
254
|
/**
|
|
237
255
|
* Cedar policy binding (Phase 1).
|
|
238
256
|
*
|
|
@@ -364,6 +382,16 @@ export interface VcApprovalClaim {
|
|
|
364
382
|
* approved (action, resource) tuple. Optional for backward compatibility.
|
|
365
383
|
*/
|
|
366
384
|
action?: string;
|
|
385
|
+
/**
|
|
386
|
+
* #1205 P1 (decision-bound authorization) — `sha256:` hex of the
|
|
387
|
+
* canonicalized approved salient params. Binds the issued VC to the CONCRETE
|
|
388
|
+
* parameter values the approver consented to, so a caller cannot execute with
|
|
389
|
+
* different (e.g. tampered `body`/`to`) parameters under the same approval.
|
|
390
|
+
* Computed at claimVC (Step 4) from the final persisted `actionParams`;
|
|
391
|
+
* verified fail-closed at the PEP (Step 5). Absent on legacy VCs and on
|
|
392
|
+
* actions that declare no salient set.
|
|
393
|
+
*/
|
|
394
|
+
params_hash?: string;
|
|
367
395
|
}
|
|
368
396
|
/**
|
|
369
397
|
* Scheduling Wow Phase 1 §5.3 (Task 7) — the delegation-policy snapshot baked
|
|
@@ -417,6 +445,19 @@ export interface VcSchedulingDelegationClaim {
|
|
|
417
445
|
* which negotiation the write was for.
|
|
418
446
|
*/
|
|
419
447
|
itemId?: string;
|
|
448
|
+
/**
|
|
449
|
+
* Scheduling Phase 2 §A / Plan A' (Task A6, spec §7 / §8.3) — the id of the
|
|
450
|
+
* standing booking link this automated calendar write was booked THROUGH. Present
|
|
451
|
+
* on the pull-type booking confirm path (a visitor 1-clicks a slot from an
|
|
452
|
+
* owner's booking link); ADDITIVE / OPTIONAL — absent on the push-type
|
|
453
|
+
* `scheduling.request` / confirm (§7) / hold (§6) contexts, which have no link.
|
|
454
|
+
*
|
|
455
|
+
* AUDIT-ONLY, same principle as the rest of this claim: no enforcement gate
|
|
456
|
+
* reads it. The audit evidence names which booking link the write belonged to
|
|
457
|
+
* so an auditor can reconstruct the standing pull-type authority; invoke-time
|
|
458
|
+
* authorization is unaffected (#884 unchanged).
|
|
459
|
+
*/
|
|
460
|
+
linkId?: string;
|
|
420
461
|
/**
|
|
421
462
|
* Scheduling Phase 2 Plan B (Task 3 bakes this) — the Policy Registry id of
|
|
422
463
|
* the signed delegation-policy document the auto-issuance relied on. Lets an
|
|
@@ -480,6 +521,59 @@ export interface PermissionVcClaims_V3 extends Omit<PermissionVcClaims_V2, 'v'>
|
|
|
480
521
|
* no enforcement gate reads it. {@link VcSchedulingDelegationClaim}.
|
|
481
522
|
*/
|
|
482
523
|
schedulingDelegation?: VcSchedulingDelegationClaim;
|
|
524
|
+
/**
|
|
525
|
+
* How this credential came to exist (#954).
|
|
526
|
+
*
|
|
527
|
+
* - `'user_approved'` — a person consented. Paired with {@link approval},
|
|
528
|
+
* which carries the back-reference to the approval request and outcome.
|
|
529
|
+
* - `'auto_issued'` — consent was given on the user's behalf: a Cedar
|
|
530
|
+
* permit, an advance delegation policy, or a signup funnel.
|
|
531
|
+
* - `'unrecorded'` — provenance is genuinely unknown. Credentials issued
|
|
532
|
+
* before the consent type was recorded, and any path where no approval
|
|
533
|
+
* assertion reaches the issuer, land here.
|
|
534
|
+
*
|
|
535
|
+
* Derived from the approval's `consent_type` — HOW the consent was
|
|
536
|
+
* obtained — and never from `granted_by`, which records WHO. Those come
|
|
537
|
+
* apart in practice: booking start writes `granted_by: 'system'` for both
|
|
538
|
+
* an explicit human click and an automatic funnel, because the visitor's
|
|
539
|
+
* identity is gone by the time the credential is issued.
|
|
540
|
+
*
|
|
541
|
+
* The third value is not a placeholder to be tidied away later. Guessing
|
|
542
|
+
* between the other two would fabricate audit data, and this claim is
|
|
543
|
+
* signed — it cannot be corrected once issued.
|
|
544
|
+
*
|
|
545
|
+
* Never taken from the request: `approvalAssertion` is an internal-only
|
|
546
|
+
* extension on `issueVC` precisely so this stays true (see the comment on
|
|
547
|
+
* `IssueVCRequestDto`).
|
|
548
|
+
*
|
|
549
|
+
* Optional, and permanently so. The type describes credentials that are
|
|
550
|
+
* already signed and in circulation; those cannot be re-issued to carry a
|
|
551
|
+
* new field, so a required one would invalidate them at the type layer.
|
|
552
|
+
* Absent means "issued before #954", not "auto-issued".
|
|
553
|
+
*
|
|
554
|
+
* Audit and disclosure metadata — no gate reads it to decide anything. If a
|
|
555
|
+
* gate ever should, the decision belongs in policy, against `approval`,
|
|
556
|
+
* rather than against a label the issuer wrote about itself.
|
|
557
|
+
*/
|
|
558
|
+
issuance_mode?: 'user_approved' | 'auto_issued' | 'unrecorded';
|
|
559
|
+
/**
|
|
560
|
+
* Why this credential was requested, in the requester's own words (#955).
|
|
561
|
+
*
|
|
562
|
+
* Free text, deliberately. Narrowing it to a vocabulary would turn a
|
|
563
|
+
* description into a decision input, and Phase 1 neither records nor
|
|
564
|
+
* evaluates it (DEV-INSTRUCTIONS §256) — no gate reads it, and none should
|
|
565
|
+
* without that being a decision someone makes on purpose.
|
|
566
|
+
*
|
|
567
|
+
* SD-protected at issuance. Natural language written by a person tends to
|
|
568
|
+
* name people, accounts and circumstances, so a verifier gets it only when
|
|
569
|
+
* the holder chooses to disclose it. Keep it out of audit logs and error
|
|
570
|
+
* messages for the same reason.
|
|
571
|
+
*
|
|
572
|
+
* Optional, and permanently so: the type describes credentials already
|
|
573
|
+
* signed and in circulation, which cannot be re-issued to carry a new
|
|
574
|
+
* field.
|
|
575
|
+
*/
|
|
576
|
+
intent_description?: string;
|
|
483
577
|
}
|
|
484
578
|
/**
|
|
485
579
|
* Permission VC Claims (canonical union of v2 + v3).
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"permission-vc.d.ts","sourceRoot":"","sources":["../../src/types/permission-vc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;AAEjF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,uBAAuB;IACvB,IAAI,CAAC,EAAE,wBAAwB,CAAA;IAC/B,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,0CAA0C;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,kBAAkB,EAAE,gBAAgB,EAAE,CAAA;CACxD;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAA;IACd,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,WAAW,CAAA;IACjB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,kBAAkB,CAAA;AAE5D,8CAA8C;AAC9C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,IAAI,eAAe,CAExE;AAED,iDAAiD;AACjD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,IAAI,kBAAkB,CAE9E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX;;;;;OAKG;IACH,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uBAAuB;IACvB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAA;IAC3B,sBAAsB;IACtB,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,SAAS,CAAA;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,SAAS,EAAE,CAAA;CAC1B;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,qBAAqB;IACpC,qBAAqB;IACrB,CAAC,EAAE,GAAG,CAAA;IACN,oCAAoC;IACpC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAA;IACX,iBAAiB;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iDAAiD;IACjD,GAAG,CAAC,EAAE;QACJ,2DAA2D;QAC3D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAC7B,CAAA;IACD,+DAA+D;IAC/D,SAAS,EAAE,cAAc,EAAE,CAAA;CAC5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;
|
|
1
|
+
{"version":3,"file":"permission-vc.d.ts","sourceRoot":"","sources":["../../src/types/permission-vc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAA;AAEjF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,uBAAuB;IACvB,IAAI,CAAC,EAAE,wBAAwB,CAAA;IAC/B,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,0CAA0C;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,kBAAkB,EAAE,gBAAgB,EAAE,CAAA;CACxD;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAA;IACd,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,WAAW,CAAA;IACjB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,kBAAkB,CAAA;AAE5D,8CAA8C;AAC9C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,IAAI,eAAe,CAExE;AAED,iDAAiD;AACjD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,GAAG,IAAI,kBAAkB,CAE9E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,EAAE,CAAC,EAAE,MAAM,CAAA;IACX;;;;;OAKG;IACH,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,uBAAuB;IACvB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAA;IAC3B,sBAAsB;IACtB,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,SAAS,CAAA;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,SAAS,EAAE,CAAA;CAC1B;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,qBAAqB;IACpC,qBAAqB;IACrB,CAAC,EAAE,GAAG,CAAA;IACN,oCAAoC;IACpC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAA;IACX,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAA;IACX,iBAAiB;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,iDAAiD;IACjD,GAAG,CAAC,EAAE;QACJ,2DAA2D;QAC3D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAC7B,CAAA;IACD,+DAA+D;IAC/D,SAAS,EAAE,cAAc,EAAE,CAAA;CAC5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,2BAA2B;IAC1C,2DAA2D;IAC3D,UAAU,EAAE;QACV,2CAA2C;QAC3C,UAAU,EAAE,MAAM,EAAE,CAAA;QACpB,yDAAyD;QACzD,WAAW,EAAE,MAAM,CAAA;QACnB,uDAAuD;QACvD,SAAS,EAAE,MAAM,CAAA;QACjB,iEAAiE;QACjE,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAA;IACD,oEAAoE;IACpE,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mEAAmE;IACnE,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAA;IAC5D,wEAAwE;IACxE,eAAe,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC;IAC7E,oFAAoF;IACpF,CAAC,EAAE,GAAG,CAAA;IACN;;;OAGG;IACH,gBAAgB,CAAC,EAAE;QACjB,yCAAyC;QACzC,SAAS,EAAE,MAAM,CAAA;QACjB,2CAA2C;QAC3C,WAAW,EAAE,MAAM,CAAA;KACpB,CAAA;IACD;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,kBAAkB,GAAG,sBAAsB,CAAA;IACjF;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,2BAA2B,CAAA;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,aAAa,CAAC,EAAE,eAAe,GAAG,aAAa,GAAG,YAAY,CAAA;IAC9D;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,GAAG,qBAAqB,CAAA;AAE9E;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAKhG;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,OAAO,EAAE;QACP,gBAAgB;QAChB,SAAS,EAAE,MAAM,CAAA;QACjB,iBAAiB;QACjB,UAAU,EAAE,MAAM,CAAA;QAClB,2BAA2B;QAC3B,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,qBAAqB;IACrB,MAAM,EAAE;QACN,iBAAiB;QACjB,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,gDAAgD;IAChD,OAAO,EAAE;QACP,uBAAuB;QACvB,QAAQ,EAAE,MAAM,CAAA;QAChB,wBAAwB;QACxB,MAAM,EAAE,MAAM,CAAA;QACd,sBAAsB;QACtB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM,CAAA;YACZ,EAAE,EAAE,MAAM,CAAA;YACV,2EAA2E;YAC3E,UAAU,CAAC,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,0EAA0E;QAC1E,OAAO,CAAC,EAAE,OAAO,kBAAkB,EAAE,YAAY,EAAE,CAAA;QACnD,oDAAoD;QACpD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACjC,CAAA;IACD,uCAAuC;IACvC,WAAW,EAAE;QACX,aAAa;QACb,GAAG,EAAE,MAAM,CAAA;QACX,uBAAuB;QACvB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,uBAAuB;QACvB,QAAQ,EAAE,MAAM,CAAA;QAChB,0BAA0B;QAC1B,SAAS,EAAE,MAAM,CAAA;QACjB,2BAA2B;QAC3B,UAAU,EAAE,MAAM,CAAA;QAClB,yCAAyC;QACzC,SAAS,EAAE,cAAc,EAAE,CAAA;KAC5B,CAAA;IACD,sDAAsD;IACtD,WAAW,EAAE;QACX,+BAA+B;QAC/B,GAAG,EAAE,MAAM,CAAA;QACX,wBAAwB;QACxB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,yBAAyB;QACzB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,6CAA6C;QAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mCAAmC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,uBAAuB;IACvB,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAA;IAC3B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,sBAAsB;IACtB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,EAAE,MAAM,CAAA;KACX,CAAA;IACD,iBAAiB;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC;AAMD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAY5E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqB1F;AAMD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAG,kBAA2B,CAAA;AAE3D,gDAAgD;AAChD,MAAM,MAAM,aAAa,GAAG,OAAO,gBAAgB,CAAA;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,GACzC,qBAAqB,GAAG;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,CAElD"}
|
|
@@ -105,11 +105,27 @@ export interface SecondaryBinding {
|
|
|
105
105
|
* ],
|
|
106
106
|
* }
|
|
107
107
|
*/
|
|
108
|
+
/**
|
|
109
|
+
* テナント(インスタンス)束縛。'multi' プロバイダの action のみが持つ(設計 §9.2)。
|
|
110
|
+
* 'connection_default' フォールバックは「param が来なければ既定コネクション」
|
|
111
|
+
* (= api 側 resolveConnection の (2)(3) に委ねる)を意味し、値そのものではない。
|
|
112
|
+
* ParamBindingSource.default(リテラル値の欄)では表現しない — 'connection_default' という
|
|
113
|
+
* 名前のテナントを canonicalResourceId 系が作ってしまうため。
|
|
114
|
+
*/
|
|
115
|
+
export interface TenantRefBinding {
|
|
116
|
+
source: 'param';
|
|
117
|
+
/** どのパラメータからテナントを読むか(Backlog は 'space') */
|
|
118
|
+
param: string;
|
|
119
|
+
/** param が無い場合の挙動。'connection_default' のみ許可。 */
|
|
120
|
+
fallback?: 'connection_default';
|
|
121
|
+
}
|
|
108
122
|
export interface TargetBindings {
|
|
109
123
|
/** Primary resource ID binding */
|
|
110
124
|
resource_id: ResourceIdBinding;
|
|
111
125
|
/** Secondary target bindings (alpha: type-only, not evaluated) */
|
|
112
126
|
secondary?: SecondaryBinding[];
|
|
127
|
+
/** NEW: multi プロバイダの action のみ(§9.2) */
|
|
128
|
+
tenant_ref?: TenantRefBinding;
|
|
113
129
|
}
|
|
114
130
|
/**
|
|
115
131
|
* Constraint on a secondary target value.
|
|
@@ -155,7 +171,19 @@ export interface ResolvedTargets {
|
|
|
155
171
|
resource_id_required: boolean;
|
|
156
172
|
/** Resolved values for multi-value resource_id params */
|
|
157
173
|
resource_id_values?: string[];
|
|
158
|
-
/**
|
|
174
|
+
/**
|
|
175
|
+
* Tenant/workspace reference for multi-account disambiguation.
|
|
176
|
+
* TargetResolver が `TargetBindings.tenant_ref` 束縛から埋める(§9.2)。
|
|
177
|
+
* 束縛が無い / param が無い(fallback 'connection_default')ときは未設定。
|
|
178
|
+
*
|
|
179
|
+
* 🔴 未設定のとき、このキーは «存在しない»(`'tenant_ref' in resolved === false`)。
|
|
180
|
+
* すぐ上の `resource_id_values` が undefined でも «常に代入される» のとは
|
|
181
|
+
* 意図的に非対称。tenant_ref は「テナント未指定 = 既定コネクションに委ねる」を
|
|
182
|
+
* キーの不在で表し、api 側が `in` / スプレッドで «指定されなかった» を
|
|
183
|
+
* «空文字が指定された» と区別できるようにしている。
|
|
184
|
+
* 既存の `resource_id_values` の側を「揃える」ために直さないこと —
|
|
185
|
+
* そちらの無条件代入は既存の呼び出し側が依存している挙動。
|
|
186
|
+
*/
|
|
159
187
|
tenant_ref?: string;
|
|
160
188
|
/** Secondary targets (alpha: always empty) */
|
|
161
189
|
targets: PolicyTarget[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"target-binding.d.ts","sourceRoot":"","sources":["../../src/types/target-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAA;IACf,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAA;IACb,gHAAgH;IAChH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uIAAuI;IACvI,MAAM,CAAC,EAAE,aAAa,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,CAAA;IACjB,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,kDAAkD;AAClD,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG,oBAAoB,CAAA;AAMrE;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,CAAA;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,MAAM,EAAE,aAAa,CAAA;IACrB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,kEAAkE;IAClE,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAA;
|
|
1
|
+
{"version":3,"file":"target-binding.d.ts","sourceRoot":"","sources":["../../src/types/target-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAA;IACf,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAA;IACb,gHAAgH;IAChH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uIAAuI;IACvI,MAAM,CAAC,EAAE,aAAa,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,CAAA;IACjB,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,kDAAkD;AAClD,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG,oBAAoB,CAAA;AAMrE;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,CAAA;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,MAAM,EAAE,aAAa,CAAA;IACrB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAA;IACf,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAA;IACb,gDAAgD;IAChD,QAAQ,CAAC,EAAE,oBAAoB,CAAA;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,kCAAkC;IAClC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,kEAAkE;IAClE,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC9B,wCAAwC;IACxC,UAAU,CAAC,EAAE,gBAAgB,CAAA;CAC9B;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAEjB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,sBAAsB;IACtB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iEAAiE;IACjE,oBAAoB,EAAE,OAAO,CAAA;IAC7B,yDAAyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8CAA8C;IAC9C,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB"}
|
package/dist/types/vc.d.ts
CHANGED
|
@@ -8,7 +8,17 @@ export declare enum CredentialType {
|
|
|
8
8
|
DEVELOPER = "DeveloperCredential",
|
|
9
9
|
TEMPORARY = "TemporaryCredential",
|
|
10
10
|
ADMIN = "AdminCredential",
|
|
11
|
-
RECEIPT = "ReceiptCredential"
|
|
11
|
+
RECEIPT = "ReceiptCredential",
|
|
12
|
+
/**
|
|
13
|
+
* Account attributes asserted by an organisation about the account holder
|
|
14
|
+
* (OEM ⑯). Issued server-to-server, never from a user's own grants.
|
|
15
|
+
*/
|
|
16
|
+
ACCOUNT = "AccountCredential",
|
|
17
|
+
/**
|
|
18
|
+
* Agent instance card (OEM ⑯, Model C). Carries a pointer to the service
|
|
19
|
+
* card and the hash that pins it — not the capability description itself.
|
|
20
|
+
*/
|
|
21
|
+
AGENT_CARD = "AgentCardCredential"
|
|
12
22
|
}
|
|
13
23
|
/**
|
|
14
24
|
* Credential Status enumeration
|
package/dist/types/vc.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"vc.d.ts","sourceRoot":"","sources":["../../src/types/vc.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,cAAc;IACxB,cAAc,4BAA4B;IAC1C,WAAW,yBAAyB;IACpC,SAAS,wBAAwB;IACjC,SAAS,wBAAwB;IACjC,KAAK,oBAAoB;IACzB,OAAO,sBAAsB;
|
|
1
|
+
{"version":3,"file":"vc.d.ts","sourceRoot":"","sources":["../../src/types/vc.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,cAAc;IACxB,cAAc,4BAA4B;IAC1C,WAAW,yBAAyB;IACpC,SAAS,wBAAwB;IACjC,SAAS,wBAAwB;IACjC,KAAK,oBAAoB;IACzB,OAAO,sBAAsB;IAC7B;;;OAGG;IACH,OAAO,sBAAsB;IAC7B;;;OAGG;IACH,UAAU,wBAAwB;CACnC;AAED;;;GAGG;AACH,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED;;;;;;;GAOG;AACH,oBAAY,MAAM;IAChB,iBAAiB,qBAAqB;IACtC,OAAO,YAAY;CACpB;AAED;;;;;;;;;;GAUG;AACH,oBAAY,QAAQ;IAClB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,gBAAgB,GAAG,QAAQ,CAe7E;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,QAAQ,GAAG,gBAAgB,CAgB7E;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE;QACjB,EAAE,EAAE,MAAM,CAAA;QACV,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KACnB,CAAA;IACD,gBAAgB,CAAC,EAAE;QACjB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,eAAe,EAAE,MAAM,CAAA;QACvB,oBAAoB,EAAE,MAAM,CAAA;KAC7B,CAAA;CACF;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,sBAAsB;IACtB,IAAI,EAAE,cAAc,CAAA;IACpB,wBAAwB;IACxB,MAAM,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;QACtB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;QAChB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KACnB,CAAA;IACD,wBAAwB;IACxB,MAAM,EAAE,gBAAgB,CAAA;IACxB,4BAA4B;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yBAAyB;IACzB,QAAQ,EAAE,IAAI,CAAA;IACd,2BAA2B;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,yBAAyB;IACzB,SAAS,EAAE,IAAI,CAAA;IACf,uBAAuB;IACvB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,sBAAsB;IACtB,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,sBAAsB;IACtB,cAAc,CAAC,EAAE,IAAI,CAAA;IACrB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6CAA6C;IAC7C,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAA;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,KAAK,EAAE,OAAO,CAAA;IACd,+BAA+B;IAC/B,OAAO,CAAC,EAAE;QACR,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;QAEZ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KACnB,CAAA;IACD,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,iBAAiB;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,sBAAsB;IACtB,IAAI,EAAE,cAAc,CAAA;IACpB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,iBAAiB,EAAE;QACjB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACnC,GAAG,EAAE,MAAM,CAAA;KACZ,CAAA;CACF;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,iBAAiB,EAAE;QACjB,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAA;KACzC,CAAA;CACF;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAA;CAC9B"}
|