Interface: AccessFeatureDeps

Defined in: server/access/deps.ts:60

Dependencies the access services consume. Construct via createAccessServices rather than instantiating manually.

PropertiesCopy Anchor Link

attributes?Copy Anchor Link

optional attributes?: AttributeRegistry;

Defined in: server/access/deps.ts:66

Authorization attribute allowlist; source/type metadata does not validate values.

audit?Copy Anchor Link

optional audit?: AuditLevel;

Defined in: server/access/deps.ts:70

Decision-audit level. Defaults to "sensitive".

catalog?Copy Anchor Link

optional catalog?: PermissionCatalog<`${string}.${string}`>;

Defined in: server/access/deps.ts:64

In-code permission catalog (deny-by-default; delegability source of truth).

identityCopy Anchor Link

identity: IdentityProvider;

Defined in: server/access/deps.ts:62

logger?Copy Anchor Link

optional logger?: Pick<Logger, "warn">;

Defined in: server/access/deps.ts:74

Diagnostic sink for invalid persisted access data. Defaults to console.

onDecision?Copy Anchor Link

optional onDecision?: OnDecision;

Defined in: server/access/deps.ts:72

Off-hot-path decision-audit hook (defaults to a no-op).

reposCopy Anchor Link

repos: AccessRepositories;

Defined in: server/access/deps.ts:61

resources?Copy Anchor Link

optional resources?: ResourceAuthzRegistry;

Defined in: server/access/deps.ts:68

Resource authz registry powering authorizedWhere.