@voltro/protocol 0.80.0 → 0.82.0

package/dist/apikey.d.ts

@@ -52,7 +52,7 @@ export declare interface ApiKeyRecord {
 export declare const apiKeyStrategy: (options: ApiKeyStrategyOptions) => AuthStrategy;
 
 export declare interface ApiKeyStrategyOptions {
-    /** Token prefix gate, e.g. `'awb_'`. A bearer token without it is
+    /** Token prefix gate, e.g. `'acme_'`. A bearer token without it is
      *  SKIPPED (another strategy may own it). Empty = match any bearer. */
     readonly prefix?: string;
     /**
@@ -107,7 +107,7 @@ declare interface AuthStrategy {
     readonly resolve: (input: AuthStrategyInput) => Promise<StrategyResolution> | StrategyResolution;
     /**
      * The bearer-token PREFIX this strategy claims, when it gates on one
-     * (`'sk_'`, `'awb_'`). Declared so a collision is DETECTABLE.
+     * (`'sk_'`, `'acme_'`). Declared so a collision is DETECTABLE.
      *
      * Two strategies claiming the same prefix is not a harmless duplicate: the
      * chain is first-match-wins, so whichever runs first decides the Subject —
@@ -244,6 +244,14 @@ declare const Subject: Schema.Union<[Schema.Struct<{
     tenantId: typeof Schema.Null;
     scopes: Schema.optional<Schema.Array$<typeof Schema.String>>;
     metadata: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
+}>, Schema.Struct<{
+    type: Schema.Literal<["service"]>;
+    id: typeof Schema.String;
+    /** The calling app's name, as the callee lists it in `serviceCallers`. */
+    service: typeof Schema.String;
+    tenantId: typeof Schema.Null;
+    scopes: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    metadata: Schema.optional<Schema.Record$<typeof Schema.String, typeof Schema.Unknown>>;
 }>]>;
 
 declare type Subject = typeof Subject.Type;