refactor: simplify authorization boundaries

This commit is contained in:
morluto committed 2026-07-18 05:49:14 +00:00
1 parent b537ebfa34
commit 2e5b44365f
59 files changed
+381 -6286

No files matched your search

@@ -14,7 +14,7 @@
<section class="tsd-panel">
<ul class="tsd-signatures">
<li class="">
<div class="tsd-signature tsd-anchor-link" id="authorizeprocesscapturewithelicitation"><span class="tsd-kind-call-signature">authorizeProcessCaptureWithElicitation</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">authority</span><span class="tsd-signature-symbol">:</span> <a href="../classes/application_PermissionAuthority.PermissionAuthority.html" class="tsd-signature-type tsd-kind-class">PermissionAuthority</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">request</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/domain_permissionPolicy.PermissionRequest.html" class="tsd-signature-type tsd-kind-interface">PermissionRequest</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">context</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ProcessCaptureElicitationContext</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">elicitation</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/server_ProcessCaptureElicitation.ProcessCaptureElicitation.html" class="tsd-signature-type tsd-kind-interface">ProcessCaptureElicitation</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><br/>    <span class="tsd-signature-symbol">|</span> <a href="../types/domain_result.Result.html" class="tsd-signature-type tsd-kind-type-alias">Result</a><span class="tsd-signature-symbol">&lt;</span><br/>        (<br/>            PermissionDecision &amp; { readonly allowed: true; readonly request: PermissionRequest; }<br/>        )<span class="tsd-signature-symbol">,</span><br/>        <a href="../classes/domain_errors.PermissionRequiredError.html" class="tsd-signature-type tsd-kind-class">PermissionRequiredError</a><br/>        <span class="tsd-signature-symbol">|</span> <a href="../classes/application_PermissionAuthority.PermissionPathError.html" class="tsd-signature-type tsd-kind-class">PermissionPathError</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-signature-symbol">&gt;</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">InputRequiredResult</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">&gt;</span><a href="#authorizeprocesscapturewithelicitation" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-signature tsd-anchor-link" id="authorizeprocesscapturewithelicitation"><span class="tsd-kind-call-signature">authorizeProcessCaptureWithElicitation</span><span class="tsd-signature-symbol">(</span><br/>    <span class="tsd-kind-parameter">authority</span><span class="tsd-signature-symbol">:</span> <a href="../classes/application_PermissionAuthority.PermissionAuthority.html" class="tsd-signature-type tsd-kind-class">PermissionAuthority</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">request</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/domain_permissionPolicy.PermissionRequest.html" class="tsd-signature-type tsd-kind-interface">PermissionRequest</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">context</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">ProcessCaptureElicitationContext</span><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-kind-parameter">elicitation</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/server_ProcessCaptureElicitation.ProcessCaptureElicitation.html" class="tsd-signature-type tsd-kind-interface">ProcessCaptureElicitation</a><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">)</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><br/>    <span class="tsd-signature-symbol">|</span> <a href="../types/domain_result.Result.html" class="tsd-signature-type tsd-kind-type-alias">Result</a><span class="tsd-signature-symbol">&lt;</span><br/>        <span class="tsd-signature-symbol">{</span><br/>            <span class="tsd-kind-property">allowed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">true</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">grant_id</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">lifetime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;once&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;project&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;administrator&quot;</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">request</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/domain_permissionPolicy.PermissionRequest.html" class="tsd-signature-type tsd-kind-interface">PermissionRequest</a><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/>        <a href="../classes/domain_errors.PermissionRequiredError.html" class="tsd-signature-type tsd-kind-class">PermissionRequiredError</a><br/>        <span class="tsd-signature-symbol">|</span> <a href="../classes/application_PermissionAuthority.PermissionPathError.html" class="tsd-signature-type tsd-kind-class">PermissionPathError</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-signature-symbol">&gt;</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">InputRequiredResult</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">&gt;</span><a href="#authorizeprocesscapturewithelicitation" aria-label="Permalink" class="tsd-anchor-icon"><svg viewBox="0 0 24 24" aria-hidden="true"><use href="../assets/icons.svg#icon-anchor"></use></svg></a></div>
<div class="tsd-description">
<div class="tsd-comment tsd-typography"><p>Authorize capture or return a signed MCP input-required continuation.</p>
</div>
@@ -25,9 +25,9 @@
<li><span><span class="tsd-kind-parameter">request</span>: <a href="../interfaces/domain_permissionPolicy.PermissionRequest.html" class="tsd-signature-type tsd-kind-interface">PermissionRequest</a></span></li>
<li><span><span class="tsd-kind-parameter">context</span>: <span class="tsd-signature-type">ProcessCaptureElicitationContext</span></span></li>
<li><span><span class="tsd-kind-parameter">elicitation</span>: <a href="../interfaces/server_ProcessCaptureElicitation.ProcessCaptureElicitation.html" class="tsd-signature-type tsd-kind-interface">ProcessCaptureElicitation</a></span></li></ul></div>
<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><br/>    <span class="tsd-signature-symbol">|</span> <a href="../types/domain_result.Result.html" class="tsd-signature-type tsd-kind-type-alias">Result</a><span class="tsd-signature-symbol">&lt;</span><br/>        (<br/>            PermissionDecision &amp; { readonly allowed: true; readonly request: PermissionRequest; }<br/>        )<span class="tsd-signature-symbol">,</span><br/>        <a href="../classes/domain_errors.PermissionRequiredError.html" class="tsd-signature-type tsd-kind-class">PermissionRequiredError</a><br/>        <span class="tsd-signature-symbol">|</span> <a href="../classes/application_PermissionAuthority.PermissionPathError.html" class="tsd-signature-type tsd-kind-class">PermissionPathError</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-signature-symbol">&gt;</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">InputRequiredResult</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
<h4 class="tsd-returns-title">Returns <span class="tsd-signature-type">Promise</span><span class="tsd-signature-symbol">&lt;</span><br/>    <span class="tsd-signature-symbol">|</span> <a href="../types/domain_result.Result.html" class="tsd-signature-type tsd-kind-type-alias">Result</a><span class="tsd-signature-symbol">&lt;</span><br/>        <span class="tsd-signature-symbol">{</span><br/>            <span class="tsd-kind-property">allowed</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">true</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">grant_id</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">string</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">lifetime</span><span class="tsd-signature-symbol">:</span> <span class="tsd-signature-type">&quot;once&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;session&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;project&quot;</span><br/>            <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">&quot;administrator&quot;</span><span class="tsd-signature-symbol">;</span><br/>            <span class="tsd-kind-property">request</span><span class="tsd-signature-symbol">:</span> <a href="../interfaces/domain_permissionPolicy.PermissionRequest.html" class="tsd-signature-type tsd-kind-interface">PermissionRequest</a><span class="tsd-signature-symbol">;</span><br/>        <span class="tsd-signature-symbol">}</span><span class="tsd-signature-symbol">,</span><br/>        <a href="../classes/domain_errors.PermissionRequiredError.html" class="tsd-signature-type tsd-kind-class">PermissionRequiredError</a><br/>        <span class="tsd-signature-symbol">|</span> <a href="../classes/application_PermissionAuthority.PermissionPathError.html" class="tsd-signature-type tsd-kind-class">PermissionPathError</a><span class="tsd-signature-symbol">,</span><br/>    <span class="tsd-signature-symbol">&gt;</span><br/>    <span class="tsd-signature-symbol">|</span> <span class="tsd-signature-type">InputRequiredResult</span><span class="tsd-signature-symbol">,</span><br/><span class="tsd-signature-symbol">&gt;</span></h4><aside class="tsd-sources">
<ul>
<li>Defined in <a href="https://github.com/morluto/rea/blob/main/src/server/ProcessCaptureElicitation.ts#L76">src/server/ProcessCaptureElicitation.ts:76</a></li></ul></aside></div></li></ul></section></div>
<li>Defined in <a href="https://github.com/morluto/rea/blob/main/src/server/ProcessCaptureElicitation.ts#L78">src/server/ProcessCaptureElicitation.ts:78</a></li></ul></aside></div></li></ul></section></div>
<div class="col-sidebar">
<div class="page-menu">
<div class="tsd-navigation settings">