toolpass-client 0.11.2 → 0.12.0

package/README.md

@@ -48,6 +48,7 @@ Without a wrapper:
 ```ts
 const d = await tp.check("dana@example.com", "jira-main", "DELETE_ISSUES", "issue:PAY-123");
 d.decision, d.reason;   // "deny", "denied: ..."
+d.identity;             // the account the email resolved to (a GitHub login), "" if none
 await tp.require(...);  // rejects with PermissionDenied unless allow
 ```
 

package/dist/index.d.ts

@@ -38,13 +38,15 @@ export type DecisionValue = typeof ALLOW | typeof DENY | typeof UNKNOWN;
  * `decision` is `allow`, `deny` or `unknown`. `reason` is `"<code>: <text>"`
  * as toolpass sent it, or `"client_error: ..."` when the request never
  * produced a usable answer. `status` is the HTTP status, 0 when no response
- * arrived.
+ * arrived. `identity` is the account the user's email resolved to in the
+ * system (a GitHub login), "" when none was resolved.
  */
 export declare class Decision {
     readonly decision: DecisionValue;
     readonly reason: string;
     readonly status: number;
-    constructor(decision: DecisionValue, reason: string, status?: number);
+    readonly identity: string;
+    constructor(decision: DecisionValue, reason: string, status?: number, identity?: string);
     /** True only for a positive `allow`. `unknown` is not allowed. */
     get allowed(): boolean;
     /** The machine-readable code in front of the colon, e.g. `user_not_found`. */

package/dist/index.js

@@ -38,16 +38,19 @@ export const UNKNOWN = "unknown";
  * `decision` is `allow`, `deny` or `unknown`. `reason` is `"<code>: <text>"`
  * as toolpass sent it, or `"client_error: ..."` when the request never
  * produced a usable answer. `status` is the HTTP status, 0 when no response
- * arrived.
+ * arrived. `identity` is the account the user's email resolved to in the
+ * system (a GitHub login), "" when none was resolved.
  */
 export class Decision {
     decision;
     reason;
     status;
-    constructor(decision, reason, status = 200) {
+    identity;
+    constructor(decision, reason, status = 200, identity = "") {
         this.decision = decision;
         this.reason = reason;
         this.status = status;
+        this.identity = identity;
         Object.freeze(this);
     }
     /** True only for a positive `allow`. `unknown` is not allowed. */
@@ -251,7 +254,7 @@ function parse(status, raw) {
     if (typeof data !== "object" || data === null || !("decision" in data)) {
         return new Decision(UNKNOWN, `client_error: unexpected response (HTTP ${status})`, status);
     }
-    const { decision, reason } = data;
+    const { decision, reason, identity } = data;
     if (decision !== ALLOW && decision !== DENY && decision !== UNKNOWN) {
         return new Decision(UNKNOWN, `client_error: unexpected decision ${JSON.stringify(decision)}`, status);
     }
@@ -259,7 +262,7 @@ function parse(status, raw) {
         // toolpass never allows with a non-200 status; do not trust a proxy that does.
         return new Decision(UNKNOWN, `client_error: allow with HTTP ${status}`, status);
     }
-    return new Decision(decision, reason === undefined ? "" : String(reason), status);
+    return new Decision(decision, reason === undefined ? "" : String(reason), status, typeof identity === "string" ? identity : "");
 }
 /**
  * Resolve a user or groups source now.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolpass-client",
-  "version": "0.11.2",
+  "version": "0.12.0",
   "description": "Check with toolpass whether a user may do something before your AI agent does it for them.",
   "keywords": [
     "ai-agents",