gdc-common-utils-ts 1.24.0 → 1.24.1

package/dist/models/confidential-storage.d.ts

@@ -39,6 +39,11 @@ export interface AuditInfo {
     updated?: string;
     /** True if removed/deactivated (deactivation time is typically `updated`). */
     deactivated?: boolean;
+    /**
+     * Optional lightweight lifecycle disposition copied outside encrypted
+     * content, for example `purged`.
+     */
+    disposition?: string;
     /** Name of the channel/network where the data is audited/anchored. */
     channel?: string;
     /** Base58/Base64Url transaction identifier, depending on the attestation layer. */
@@ -46,6 +51,34 @@ export interface AuditInfo {
     /** Transaction timestamp (ISO 8601). */
     txTime?: string;
 }
+/**
+ * Public runtime projection kept outside encrypted `content`.
+ *
+ * These values are not the canonical business payload. They are copied or
+ * generated from the protected content so runtime flows can answer lightweight
+ * queries without hydrating the confidential JWE blob.
+ *
+ * Rules:
+ * - Keep this object strictly minimal.
+ * - Only place data here when it is intentionally public or deployment-safe.
+ * - Never treat these fields as the source of truth if the encrypted content
+ *   carries the canonical value.
+ */
+export interface PublicInfo {
+    /**
+     * Optional lightweight role or technical marker copied outside encrypted
+     * content for routing, gating, or lifecycle inspection.
+     *
+     * This is a convenience projection for lookup. The canonical role still
+     * belongs to the protected business payload and/or indexed attributes.
+     *
+     * Example:
+     * - hosting may copy a synthetic bootstrap-controller marker here so tenant
+     *   lifecycle scans can ignore that technical employee without hydrating the
+     *   confidential JWE payload.
+     */
+    role?: string;
+}
 /**
  * Defines the structure of an attribute to be indexed for blind, searchable queries.
  * @see https://identity.foundation/confidential-storage/#indexed-attributes
@@ -157,6 +190,19 @@ export interface ConfidentialStorageDoc {
     tag?: MetaTagCoding[];
     /** Policy-dependent research/analytics metadata, kept outside encrypted `content`. */
     research?: ResearchInfo;
+    /**
+     * Optional public runtime projection copied or generated for lightweight
+     * reads outside encrypted `content`.
+     *
+     * This object is intended for lookup, routing, and operational gating.
+     * It must not become a second canonical payload.
+     *
+     * Typical usage:
+     * - copy a small public or deployment-safe value out of protected content
+     * - or generate a technical marker needed for lightweight runtime scans
+     * - never treat this object as the source of truth for business semantics
+     */
+    public?: PublicInfo;
 }
 /**
  * Represents a document whose sensitive content has been decrypted and is held

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "1.24.0",
+  "version": "1.24.1",
   "publishConfig": {
     "access": "public"
   },