Trasversale · Package · Active seed

@platform/contracts-integration

Shared integration contract for capability descriptors, direct endpoint bindings, principals, credentials, token exchange and error envelopes.

• TypeScript declarations
• Dual package exports

Spec sheet

Package name

@platform/contracts-integration

Repository path

platform-shared-packages/packages/contracts-integration

Exports

CommonJS and ESM entrypoints plus type declarations

Responsibilities

• Define the product-agnostic capability descriptor and canonical endpoint binding.
• Define human and service-account principal context, credential summaries and token exchange shapes.
• Keep integration error envelopes versioned without owning grants or ACL decisions.

Interfaces and contract surface

• Package root export

Consumers

• platform-auth-service
• cs-portal backend
• codestorm-management

Notes

• The package describes transport and contract shapes; platform-auth-service and CS Portal remain the authorities for identity, grants and endpoint authorization.

Source references

• platform-shared-packages/packages/contracts-integration/package.json
• platform-shared-packages/packages/contracts-integration/index.d.ts

Contratto

@platform/contracts-integration è il contratto product-agnostic tra platform-auth-service, i BFF EXPERIENCE e consumer come codestorm-management. Espone i tipi versionati per:

• capability descriptor ed endpoint binding;
• principal context human/service account e owner delegante;
• credential summary, secret one-time e token exchange;
• token resolution ed error envelope con requestId, policyVersion e retryable.

Il package definisce la forma dei dati, non concede grant. platform-auth-service resta autorità per credenziale e identità; il BFF mantiene la projection degli endpoint applicativi e la propria ACL. I consumer non devono duplicare ruoli, scope, capability grant o router applicativi.

Issuance verificata

La risoluzione token include verifiedIssuedAt obbligatorio, in millisecondi, dal JWT verificato. Il BFF ricontrolla accesso e permessi correnti e puo invalidare un token anteriore alla revoca del proprio subject. Il campo non concede nuove capability.