Source PR: #454 · docs/rfcs/granted-scopes.md · @filvecchiato
Description
Granted gains storage and context alongside all, so a publisher can pre-approve a narrow scope list per product. trustedProducts keeps its shape — no new field, no $v bump.
Motivation
The only value today is all, which pre-approves every cross-product interaction the Host mediates, including ones added after publication. "Read my stored data, prompt for anything else" is not expressible.
Requirements
Granted = 'all' | 'storage' | 'context' — storage is read-only storage, context is account and identity.all stays a superset; a narrower value never restricts it.- Unrecognised values are ignored, never a validation failure.
- A grant never overrides a denial the user already gave.
Tasks
Source PR: #454 ·
docs/rfcs/granted-scopes.md· @filvecchiatoDescription
Grantedgainsstorageandcontextalongsideall, so a publisher can pre-approve a narrow scope list per product.trustedProductskeeps its shape — no new field, no$vbump.Motivation
The only value today is
all, which pre-approves every cross-product interaction the Host mediates, including ones added after publication. "Read my stored data, prompt for anything else" is not expressible.Requirements
Granted = 'all' | 'storage' | 'context'—storageis read-only storage,contextis account and identity.allstays a superset; a narrower value never restricts it.Tasks