Variable: authzMinter

const authzMinter: ScopeFromActor<Scope, PlatformScope>

Defined in: packages/messaging/src/mint.ts:28

The estate's minter: scopeFromActor from @oktoid/authz/mint, which only this package may import. A service passes it as scopeFromActor to its Receiver and never calls it; it never imports @oktoid/authz/mint itself (lint fence).

It adds one check of its own: a platform grant is minted only for a key that has a row in the permission table. The parameter's type already says so, and the type is all that said so until slice 3, when a module's wiring minted for a standing grant that was not in the registry yet by casting the key (step 3.13; the grant has since been added). A cast satisfies the compiler and nothing else, so the same question is asked here of the value. It does not check that holder is the participant the row names: the receiver does that for a request, and a module's wiring for a standing grant (standingGrantHolders).

Exported from @oktoid/messaging/wiring only, never from the package root: it mints any scope, a PlatformScope included, so it is handed to a Receiver by a module's wiring (*.module.ts) or a script, and a handler cannot reach it (lint fence).

Throws

platform_grant_missing for a grant on a key the permission table has no row for; otherwise as scopeFromActor.