@vess-id/ai-identity 0.5.0-alpha.8 → 0.5.0-alpha.9

package/dist/index.d.mts

@@ -4230,6 +4230,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -4322,6 +4323,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -4417,6 +4419,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -4522,6 +4525,110 @@ declare const ACTION_REGISTRY: {
                 icon_emoji?: undefined;
                 blocks?: undefined;
                 userId?: undefined;
+                cursor?: undefined;
+                ts?: undefined;
+                title?: undefined;
+                body?: undefined;
+                labels?: undefined;
+                assignees?: undefined;
+                state?: undefined;
+                sort?: undefined;
+                direction?: undefined;
+                per_page?: undefined;
+                page?: undefined;
+                issue_number?: undefined;
+                query?: undefined;
+                maxResults?: undefined;
+                messageId?: undefined;
+                to?: undefined;
+                subject?: undefined;
+                cc?: undefined;
+                bcc?: undefined;
+                messageIds?: undefined;
+                calendarId?: undefined;
+                timeMin?: undefined;
+                timeMax?: undefined;
+                eventId?: undefined;
+                summary?: undefined;
+                description?: undefined;
+                start?: undefined;
+                end?: undefined;
+                attendees?: undefined;
+                location?: undefined;
+                recent?: undefined;
+                projectKeyOrId?: undefined;
+                type?: undefined;
+                boardId?: undefined;
+                sprintId?: undefined;
+                jql?: undefined;
+                startAt?: undefined;
+                issueIdOrKey?: undefined;
+                projectKey?: undefined;
+                issueTypeName?: undefined;
+                priority?: undefined;
+                assigneeAccountId?: undefined;
+                transitionId?: undefined;
+                file_path?: undefined;
+                content?: undefined;
+                command?: undefined;
+                working_directory?: undefined;
+                env_profile?: undefined;
+                timeout_seconds?: undefined;
+            };
+            required: string[];
+            additionalProperties: boolean;
+        };
+        constraints: {
+            rate_bucket: string;
+        };
+        effects: string[];
+        risk: string;
+        target_bindings: {
+            resource_id: {
+                source: "param";
+                param: string;
+                required?: undefined;
+                key?: undefined;
+                multi?: undefined;
+                separator?: undefined;
+                default?: undefined;
+                fallback_param?: undefined;
+                derive?: undefined;
+            };
+            secondary?: undefined;
+        };
+        version: string;
+    } | {
+        action: string;
+        resource_type: string;
+        required_relations: string[];
+        required_scopes: string[];
+        capability: string;
+        input_schema: {
+            type: string;
+            properties: {
+                channel: {
+                    type: string;
+                    description: string;
+                };
+                cursor: {
+                    type: string;
+                    description: string;
+                };
+                limit: {
+                    type: string;
+                    minimum: number;
+                    maximum: number;
+                };
+                text?: undefined;
+                thread_ts?: undefined;
+                username?: undefined;
+                icon_emoji?: undefined;
+                blocks?: undefined;
+                userId?: undefined;
+                latest?: undefined;
+                oldest?: undefined;
+                inclusive?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -4621,6 +4728,7 @@ declare const ACTION_REGISTRY: {
                 latest?: undefined;
                 oldest?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -4724,6 +4832,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 title?: undefined;
                 body?: undefined;
                 labels?: undefined;
@@ -4822,6 +4931,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 title?: undefined;
                 body?: undefined;
                 labels?: undefined;
@@ -4933,6 +5043,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 state?: undefined;
                 sort?: undefined;
@@ -5046,6 +5157,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5136,6 +5248,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5255,6 +5368,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 sort?: undefined;
                 direction?: undefined;
@@ -5351,6 +5465,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5445,6 +5560,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5554,6 +5670,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 labels?: undefined;
@@ -5657,6 +5774,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5766,6 +5884,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -5863,6 +5982,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6018,6 +6138,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6180,6 +6301,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6280,6 +6402,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6373,6 +6496,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6470,6 +6594,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6568,6 +6693,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6668,6 +6794,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6772,6 +6899,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6865,6 +6993,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -6986,6 +7115,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7096,6 +7226,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7186,6 +7317,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7285,6 +7417,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 labels?: undefined;
@@ -7383,6 +7516,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7488,6 +7622,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7579,6 +7714,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7676,6 +7812,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -7783,6 +7920,7 @@ declare const ACTION_REGISTRY: {
                 oldest?: undefined;
                 limit?: undefined;
                 inclusive?: undefined;
+                cursor?: undefined;
                 ts?: undefined;
                 title?: undefined;
                 body?: undefined;
@@ -8266,6 +8404,14 @@ declare function getKeyIdFromDid(did: string): string;
  */
 declare function publicKeysMatch(a: Record<string, unknown>, b: Record<string, unknown>): boolean;
 
+/**
+ * Extract the project key from a Jira issue key.
+ * Returns the project prefix (e.g., "AIDENTITY" from "AIDENTITY-35") or null if not a valid issue key.
+ *
+ * @remarks Project keys must be at least 2 uppercase characters, matching Jira's requirement.
+ * Single-letter keys (e.g., "A-1") return null.
+ */
+declare function extractProjectKey(value: string): string | null;
 /**
  * TargetResolver — extracts resource IDs and secondary targets from tool parameters.
  *
@@ -8314,4 +8460,4 @@ declare function getTierLimits(tier: string | undefined | null): TierLimits;
 
 declare const version = "0.0.1";
 
-export { type ABACPolicyEngine, ACTION_PARAMS_MAX_SIZE, ACTION_PREFIXES, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, AIdentityError, type APIAgent, type APICredential, APIVCManager, type AbacDecision, type AbacInput, type AcceptInvitationRequest, type AckEventResponse, type ActionInputSchema, type ActionMapping, type ActionMeta, type ActionParamDisplay, type ActionRegistry, type ActionRiskLevel, type Agent, type AgentCreateOptions, type AgentDIDConfig, AgentDIDManager, AgentManager, AgentStatus, AgentType, type AgentWithId, AllowAllAbac, type AnyProvider, type ApiKeyValidationResult, type AuditEvent, type AuditQuery, AuthProvider, type AuthState, AuthenticationError, type AutoApproveConfig, type BindingSource, CANONICAL_PROVIDERS, type CanonicalProvider, type CapabilityMeta, type CheckGrantPermissionRequest, type CheckGrantPermissionResult, type CheckPermissionInput, type CheckPermissionResult, type CollectContextRequest, type ConfirmGrantSuggestionRequest, type ConnectorAction, type ConnectorConfig, type ConnectorExecutionContext, type ConnectorResponse, type ConnectorResponseMetadata, type ConnectorTokenConfig, type ConstraintEvaluationResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type ConstraintViolation, type ConstraintWarning, type ContextBindingSource, type ContextProvider, type CreateGrantRequest, type CreateInvitationRequest, type CreateReceiptRequest, type CredentialRef, CredentialStatus, type CredentialStore, CredentialType, DEFAULT_CONSTRAINTS_BY_RISK, type DIDDocument, type DataAccessVC, type DecisionTrace, type DelegationVC, DeviceEnrollManager, type DeviceEnrollPollResult, type DeviceEnrollServerSideParams, type DeviceEnrollStartParams, type DeviceEnrollStartResult, type DisclosureFields, DummyCreds, DummyVpVerifier, type EmployeeVPRequest, type EvaluationContext, type ExternalActionRequest, FilesystemKeyStorage, GatewayClient, GatewayError, type GatewayEvent, type GetEventsOptions, type GetEventsResponse, type GitHubConfig, type GoogleConfig, type Grant, type GrantConstraints, type GrantResource, GrantResourceType, GrantScope, GrantStatus, type GrantUsage, type IConnectorService, type IStateStore, type Intent, type IntentEvaluationResult, type IntentObligation, type IntentResource, InvalidVPError, type Invitation, type InvitationRole, InvitationStatus, type IssueSDJWTVCRequest, type IssueSDJWTVCResult, type JiraBoard, type JiraConfig, type JiraIssue, type JiraIssueType, type JiraProject, type JiraSprint, type JiraStatus, type JiraUser, type JiraWorklog, type JsonSchema, JsonStateStore, KeyManager, type KeyPairGenerationResult, type KeyStorageConfig, type KeyStorageProvider, LEGACY_RESOURCE_TYPE_MAP, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, NetworkError, type NormalizeIntentRequest, type NormalizedIntent, type OAuthAuthorizeRequest, type OAuthCallbackParams, type OAuthConnection, OAuthProvider, type OAuthToken, type OrganizationConfig, type OrganizationPermission, type OrganizationPolicy, type OrganizationVC, PROVIDER_ALIASES, type ParamBindingSource, type ParsedResourceType, type PermissionConstraints, type PermissionMode, type PermissionResource, type PermissionRule, type PermissionTimeConstraint, type PermissionVcClaims, type PlanDelegationInput, type PlanDelegationResult, type PolicyCondition, type PolicyEvaluationResult, type PolicyInput, type PolicyRule, type PolicyTarget, type Provider, RESOURCE_TYPES, type ReBACChecker, type Receipt, type ReceiptListResult, type ReceiptOutcome, type ReceiptSearchQuery, ReceiptStatus, type Relation, type ResolvedTargets, type ResourceIdBinding, type ResourceRef, type ResourceScope, type ResourceType, type RiskAssessmentResult, type RiskFactor, type RiskLevel, SDJwtClient, ScopeUnmatchedError, type SecondaryBinding, SimpleRebac, type SlackConfig, StandardActionCategory, type SuggestGrantRequest, type SuggestedAction, type SuggestedConstraints, type SuggestedGrant, type SuggestedResource, type SuggestionRiskLevel, TIER_LIMITS, type TargetBindings, type TargetConstraint, TargetResolver, type TierLimits, type TimeWindowCheckResult, type TimeWindowConstraint, type ToolDefinition, type ToolInvocation, ToolManager, type ToolPermissionRequest, type ToolPermissionVC, type UnifiedResourceType, type UpdateGrantRequest, type UserIdentity, type UserIdentityConfig, type UserIdentityCreateOptions, UserIdentityManager, UserKeyPairManager, type UserTier, VALID_MCP_ACTIONS, VALID_MCP_TOOLS, VCExpiredError, VCManager, VCRevokedError, VCStatus, type VCTemplate, VCType, VPManager, type VPRequest, type VerifiablePresentation, type VerificationMethod, type VerifiedVcClaims, type VerifyInvitationResponse, type VerifyReceiptRequest, type VerifyReceiptResult, type VerifySDJWTVCResult, type VpVerifier, WRITE_ACTION_NAMES, type WeeklyReportData, type WeeklyReportSummary, buildGrantIdFields, canonicalizeAction, checkPermissionWithVP, configure, createAjv, createDidJwk, credentialStatusToVCStatus, defaultConstraintEvaluator, evaluateConstraints, extractPublicKey, extractPublicKeyFromDid, generateActionParamsDisplay, generateActionSummary, generateKeyPair, generateNonce, getActionAliases, getAllActionForms, getAllValidMcpActionNames, getClient, getDefaultDisclosureFields, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, getTierLimits, getValidMcpActionNames, grantConstraintsToPermissionConstraints, grantToPermissionRules, indexActions, indexCapabilities, isActionEquivalent, isCanonicalProvider, isUnlimited, isValidDidJwk, isValidProvider, isWriteAction, loadActionRegistryFromFile, loadActionRegistryFromObject, normalizeMcpActionName, parseGrantAction, parseGrantResourceType, planDelegationForVC, publicKeysMatch, resolveActionsFromSelection, resolveProvider, resolveResourceType, resolveUserTier, signJWT, validateRegistryObject, vcStatusToCredentialStatus, verifyJWT, version };
+export { type ABACPolicyEngine, ACTION_PARAMS_MAX_SIZE, ACTION_PREFIXES, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, AIdentityError, type APIAgent, type APICredential, APIVCManager, type AbacDecision, type AbacInput, type AcceptInvitationRequest, type AckEventResponse, type ActionInputSchema, type ActionMapping, type ActionMeta, type ActionParamDisplay, type ActionRegistry, type ActionRiskLevel, type Agent, type AgentCreateOptions, type AgentDIDConfig, AgentDIDManager, AgentManager, AgentStatus, AgentType, type AgentWithId, AllowAllAbac, type AnyProvider, type ApiKeyValidationResult, type AuditEvent, type AuditQuery, AuthProvider, type AuthState, AuthenticationError, type AutoApproveConfig, type BindingSource, CANONICAL_PROVIDERS, type CanonicalProvider, type CapabilityMeta, type CheckGrantPermissionRequest, type CheckGrantPermissionResult, type CheckPermissionInput, type CheckPermissionResult, type CollectContextRequest, type ConfirmGrantSuggestionRequest, type ConnectorAction, type ConnectorConfig, type ConnectorExecutionContext, type ConnectorResponse, type ConnectorResponseMetadata, type ConnectorTokenConfig, type ConstraintEvaluationResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type ConstraintViolation, type ConstraintWarning, type ContextBindingSource, type ContextProvider, type CreateGrantRequest, type CreateInvitationRequest, type CreateReceiptRequest, type CredentialRef, CredentialStatus, type CredentialStore, CredentialType, DEFAULT_CONSTRAINTS_BY_RISK, type DIDDocument, type DataAccessVC, type DecisionTrace, type DelegationVC, DeviceEnrollManager, type DeviceEnrollPollResult, type DeviceEnrollServerSideParams, type DeviceEnrollStartParams, type DeviceEnrollStartResult, type DisclosureFields, DummyCreds, DummyVpVerifier, type EmployeeVPRequest, type EvaluationContext, type ExternalActionRequest, FilesystemKeyStorage, GatewayClient, GatewayError, type GatewayEvent, type GetEventsOptions, type GetEventsResponse, type GitHubConfig, type GoogleConfig, type Grant, type GrantConstraints, type GrantResource, GrantResourceType, GrantScope, GrantStatus, type GrantUsage, type IConnectorService, type IStateStore, type Intent, type IntentEvaluationResult, type IntentObligation, type IntentResource, InvalidVPError, type Invitation, type InvitationRole, InvitationStatus, type IssueSDJWTVCRequest, type IssueSDJWTVCResult, type JiraBoard, type JiraConfig, type JiraIssue, type JiraIssueType, type JiraProject, type JiraSprint, type JiraStatus, type JiraUser, type JiraWorklog, type JsonSchema, JsonStateStore, KeyManager, type KeyPairGenerationResult, type KeyStorageConfig, type KeyStorageProvider, LEGACY_RESOURCE_TYPE_MAP, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, NetworkError, type NormalizeIntentRequest, type NormalizedIntent, type OAuthAuthorizeRequest, type OAuthCallbackParams, type OAuthConnection, OAuthProvider, type OAuthToken, type OrganizationConfig, type OrganizationPermission, type OrganizationPolicy, type OrganizationVC, PROVIDER_ALIASES, type ParamBindingSource, type ParsedResourceType, type PermissionConstraints, type PermissionMode, type PermissionResource, type PermissionRule, type PermissionTimeConstraint, type PermissionVcClaims, type PlanDelegationInput, type PlanDelegationResult, type PolicyCondition, type PolicyEvaluationResult, type PolicyInput, type PolicyRule, type PolicyTarget, type Provider, RESOURCE_TYPES, type ReBACChecker, type Receipt, type ReceiptListResult, type ReceiptOutcome, type ReceiptSearchQuery, ReceiptStatus, type Relation, type ResolvedTargets, type ResourceIdBinding, type ResourceRef, type ResourceScope, type ResourceType, type RiskAssessmentResult, type RiskFactor, type RiskLevel, SDJwtClient, ScopeUnmatchedError, type SecondaryBinding, SimpleRebac, type SlackConfig, StandardActionCategory, type SuggestGrantRequest, type SuggestedAction, type SuggestedConstraints, type SuggestedGrant, type SuggestedResource, type SuggestionRiskLevel, TIER_LIMITS, type TargetBindings, type TargetConstraint, TargetResolver, type TierLimits, type TimeWindowCheckResult, type TimeWindowConstraint, type ToolDefinition, type ToolInvocation, ToolManager, type ToolPermissionRequest, type ToolPermissionVC, type UnifiedResourceType, type UpdateGrantRequest, type UserIdentity, type UserIdentityConfig, type UserIdentityCreateOptions, UserIdentityManager, UserKeyPairManager, type UserTier, VALID_MCP_ACTIONS, VALID_MCP_TOOLS, VCExpiredError, VCManager, VCRevokedError, VCStatus, type VCTemplate, VCType, VPManager, type VPRequest, type VerifiablePresentation, type VerificationMethod, type VerifiedVcClaims, type VerifyInvitationResponse, type VerifyReceiptRequest, type VerifyReceiptResult, type VerifySDJWTVCResult, type VpVerifier, WRITE_ACTION_NAMES, type WeeklyReportData, type WeeklyReportSummary, buildGrantIdFields, canonicalizeAction, checkPermissionWithVP, configure, createAjv, createDidJwk, credentialStatusToVCStatus, defaultConstraintEvaluator, evaluateConstraints, extractProjectKey, extractPublicKey, extractPublicKeyFromDid, generateActionParamsDisplay, generateActionSummary, generateKeyPair, generateNonce, getActionAliases, getAllActionForms, getAllValidMcpActionNames, getClient, getDefaultDisclosureFields, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, getTierLimits, getValidMcpActionNames, grantConstraintsToPermissionConstraints, grantToPermissionRules, indexActions, indexCapabilities, isActionEquivalent, isCanonicalProvider, isUnlimited, isValidDidJwk, isValidProvider, isWriteAction, loadActionRegistryFromFile, loadActionRegistryFromObject, normalizeMcpActionName, parseGrantAction, parseGrantResourceType, planDelegationForVC, publicKeysMatch, resolveActionsFromSelection, resolveProvider, resolveResourceType, resolveUserTier, signJWT, validateRegistryObject, vcStatusToCredentialStatus, verifyJWT, version };

package/dist/index.d.ts

@@ -27,7 +27,7 @@ export type { ActionParamDisplay } from './registry/action-summary';
 export { generateKeyPair, signJWT, verifyJWT, generateNonce } from './utils/crypto';
 export { SDJwtClient } from './utils/sdjwt-client';
 export { createDidJwk, extractPublicKey, extractPublicKeyFromDid, isValidDidJwk, getKeyIdFromDid, publicKeysMatch, } from './did/did-utils';
-export { TargetResolver } from './resolver/target-resolver';
+export { TargetResolver, extractProjectKey } from './resolver/target-resolver';
 export * from './types';
 export { isWriteAction, WRITE_ACTION_NAMES } from './utils/action-classifier';
 export { resolveUserTier, getTierLimits, isUnlimited } from './utils/tier-utils';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAGrD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAGrD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACrE,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC/E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EACL,aAAa,EACb,cAAc,EACd,WAAW,EACX,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,mCAAmC,CAAA;AAG1C,cAAc,WAAW,CAAA;AAGzB,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAGzD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACtE,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,cAAc,YAAY,CAAA;AAG1B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AACtH,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAGnE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGlD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAG3D,cAAc,SAAS,CAAA;AAGvB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAG7E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhF,eAAO,MAAM,OAAO,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAGrD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAGrD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAA;AACrE,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC/E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EACL,aAAa,EACb,cAAc,EACd,WAAW,EACX,iBAAiB,GAClB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,mCAAmC,CAAA;AAG1C,cAAc,WAAW,CAAA;AAGzB,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAGzD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACtE,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnD,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,cAAc,YAAY,CAAA;AAG1B,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AACtH,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAGnE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGlD,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAG9E,cAAc,SAAS,CAAA;AAGvB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAG7E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhF,eAAO,MAAM,OAAO,UAAU,CAAA"}

package/dist/index.js

@@ -96,6 +96,7 @@ __export(index_exports, {
   credentialStatusToVCStatus: () => credentialStatusToVCStatus,
   defaultConstraintEvaluator: () => defaultConstraintEvaluator,
   evaluateConstraints: () => evaluateConstraints,
+  extractProjectKey: () => extractProjectKey,
   extractPublicKey: () => extractPublicKey,
   extractPublicKeyFromDid: () => extractPublicKeyFromDid,
   generateActionParamsDisplay: () => generateActionParamsDisplay,
@@ -4686,11 +4687,39 @@ var ACTION_REGISTRY = {
       },
       version: "1.0.0"
     },
+    {
+      action: "slack.message.read_paginated",
+      resource_type: "slack:channel",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["channels:history", "groups:history"],
+      capability: "slack.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          channel: { type: "string", description: "Channel ID, channel name, or channel name with # prefix" },
+          cursor: { type: "string", description: "Pagination cursor from previous response" },
+          limit: { type: "integer", minimum: 1, maximum: 30 }
+        },
+        required: ["channel"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "slack.read" },
+      effects: ["Read:Message"],
+      risk: "low",
+      target_bindings: {
+        resource_id: { source: "param", param: "channel" }
+      },
+      version: "1.0.0"
+    },
     {
       action: "slack.batch.read",
       resource_type: "slack:channel",
       required_relations: ["viewer", "editor", "admin", "owner"],
-      required_scopes: ["channels:read", "groups:read", "channels:history", "groups:history"],
+      // Documentation only — NOT used for runtime access control.
+      // Actual permission granting uses parseSlackScopes (oauth.service.ts) with OR-logic:
+      // any read scope + any history scope grants slack.batch.read.
+      // Tokens with partial scopes (e.g. channels:read + channels:history) will still receive this permission.
+      required_scopes: ["channels:read", "groups:read", "im:read", "mpim:read", "channels:history", "groups:history", "im:history", "mpim:history"],
       capability: "slack.read.basic",
       input_schema: {
         type: "object",
@@ -5656,7 +5685,7 @@ var ACTION_REGISTRY = {
     {
       capability: "slack.read.basic",
       description: "Read channels, messages, and user info",
-      includes: ["slack.channel.read", "slack.user.read", "slack.message.read", "slack.batch.read"],
+      includes: ["slack.channel.read", "slack.user.read", "slack.message.read", "slack.message.read_paginated", "slack.batch.read"],
       version: "1.0.0"
     },
     {
@@ -6028,6 +6057,11 @@ function generateActionParamsDisplay(action, params) {
 }
 
 // src/resolver/target-resolver.ts
+var PROJECT_KEY_PATTERN = /^([A-Z][A-Z0-9_]+)-\d+$/;
+function extractProjectKey(value) {
+  const match = value.match(PROJECT_KEY_PATTERN);
+  return match ? match[1] : null;
+}
 var TargetResolver = class {
   /**
    * Resolve target bindings against tool invocation parameters.
@@ -6065,10 +6099,7 @@ var TargetResolver = class {
     if (typeof rawValue !== "string") return { value: null };
     let strValue = rawValue;
     if (paramBinding.derive === "project_key") {
-      const match = strValue.match(/^([A-Z][A-Z0-9_]+)-\d+$/);
-      if (match) {
-        strValue = match[1];
-      }
+      strValue = extractProjectKey(strValue) ?? strValue;
     }
     if (paramBinding.multi) {
       const separator = paramBinding.separator ?? ",";
@@ -6197,6 +6228,7 @@ var version = "0.0.1";
   credentialStatusToVCStatus,
   defaultConstraintEvaluator,
   evaluateConstraints,
+  extractProjectKey,
   extractPublicKey,
   extractPublicKeyFromDid,
   generateActionParamsDisplay,