Type Alias GrantSourceConfig

GrantSourceConfig:
    | { grants: readonly StaticGrant[]; kind: "static" }
    | { kind: "claims"; map: ClaimsGrantMapper }
    | { kind: "custom"; source: IGrantSource | RegistryFactory<IGrantSource> }

A source of scoped grants. Several are UNIONED; one failing source makes the whole check deny.

static — grants listed in configuration, indexed by subject.
claims — grants read from the principal's own claims by map.
custom — any IGrantSource, or a factory resolved once every plugin has registered (how createDatabaseGrantSource() plugs in).

Since

0.9.0