Interface: DecisionTraceEntry

Defined in: shared/access/types.ts:112

One entry in a decision trace — every grant the kernel consulted.

PropertiesCopy Anchor Link

conditionPassed?Copy Anchor Link

optional conditionPassed?: boolean;

Defined in: shared/access/types.ts:124

conditionResults?Copy Anchor Link

optional conditionResults?: ConditionResult[];

Defined in: shared/access/types.ts:125

grantIdCopy Anchor Link

grantId: string;

Defined in: shared/access/types.ts:113

matchedCopy Anchor Link

matched: boolean;

Defined in: shared/access/types.ts:120

Did this grant authorize the action?

permissionCopy Anchor Link

permission: `${string}.${string}`;

Defined in: shared/access/types.ts:116

reasonCopy Anchor Link

reason: string;

Defined in: shared/access/types.ts:122

Why it did/didn't, for human-readable explanation.

roleIdCopy Anchor Link

roleId: string;

Defined in: shared/access/types.ts:114

roleIdentifier?Copy Anchor Link

optional roleIdentifier?: string;

Defined in: shared/access/types.ts:115

scopeKeyCopy Anchor Link

scopeKey: string;

Defined in: shared/access/types.ts:118

scopeKeyOf of the consulted grant's own CompiledGrant.scope.

selectorMatched?Copy Anchor Link

optional selectorMatched?: boolean;

Defined in: shared/access/types.ts:123