enterprise/flex-auth integration layer

2026-05-04 17:54:52 +02:00
parent e33f296bdb
commit 6cb3b7b172
17 changed files with 1240 additions and 23 deletions
--- a/src/markitect_tool/extension/builtins.py
+++ b/src/markitect_tool/extension/builtins.py
@@ -200,6 +200,9 @@ def _local_label_policy_descriptor() -> ExtensionDescriptor:
        capabilities=[
            ProcessingCapability(id="policy", kind="authorize"),
            ProcessingCapability(id="policy_filter", kind="filter"),
+            ProcessingCapability(id="identity_claims", kind="normalize"),
+            ProcessingCapability(id="resource_manifest", kind="register"),
+            ProcessingCapability(id="decision_log", kind="emit"),
            ProcessingCapability(id="diagnostics", kind="emit"),
            ProcessingCapability(id="provenance", kind="emit"),
        ],
@@ -211,6 +214,8 @@ def _local_label_policy_descriptor() -> ExtensionDescriptor:
        cli={
            "commands": [
                "mkt policy check",
+                "mkt policy subject",
+                "mkt policy resource-manifest",
                "mkt cache query --policy",
                "mkt search --policy",
            ]