agentfootprint/dist/doors/security.js

The explainable agent framework — backtrack a wrong answer to the exact context that caused it (evidence, not guesses). Built on footprintjs.

"use strict";
/**
 * agentfootprint/security — who may do what, and with whose credentials.
 *
 * Two halves of the same question:
 *
 *   • Authorization — `PermissionPolicy`, `PolicyHaltError`, the
 *     `PermissionChecker` port, and thinking-block redaction.
 *   • Identity — the `CredentialProvider` port, the credential kinds
 *     (`bearer`, `apiKey`, `basic`, `headers`), `staticTokens`,
 *     `withCredentialRetry`, `agentCoreIdentity`, and `requestCredentials`
 *     over a run's sealed `requestContext`.
 *   • Who is calling — the inbound verifiers `jwksIdentity` and
 *     `oidcIdentity`, and `identityFromConfig` / `identityConfigFromEnv`,
 *     which pick one strategy per deployment from config at boot.
 *   • What the record keeps out — `conversationRedaction()`, the names an
 *     agent's record carries the conversation under, as the policy for the
 *     agent's one redaction door, `Agent.create({ redact })`.
 *
 * A vended credential is a secret: use it locally inside a tool's `execute`
 * and never write it to tracked scope.
 *
 * @example
 * ```ts
 * import { PermissionPolicy, agentCoreIdentity } from 'agentfootprint/security';
 * ```
 */
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    var desc = Object.getOwnPropertyDescriptor(m, k);
    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
      desc = { enumerable: true, get: function() { return m[k]; } };
    }
    Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    o[k2] = m[k];
}));
var __exportStar = (this && this.__exportStar) || function(m, exports) {
    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
};
Object.defineProperty(exports, "__esModule", { value: true });
__exportStar(require("../security/index.js"), exports);
__exportStar(require("../identity.js"), exports);
//# sourceMappingURL=security.js.map