ServerDecideOptions
ServerDecideOptions =
object
Per-call options for decide().
Properties
Section titled “Properties”asUser?
Section titled “asUser?”
optionalasUser?:string
The user this decision is for, sent as the request’s userId. An
unverified assertion: the route takes it at face value and reads that
user’s grants, and nothing checks that the caller is that user. Take it
from a session your backend has verified, never from a value on the
incoming request, or the requester can claim any user’s grants.
context?
Section titled “context?”
optionalcontext?:Record<string,unknown>
Facts sent as given. The engine reads them at the unverified tier.
giftLink?
Section titled “giftLink?”
optionalgiftLink?:string
The _gt query parameter from your own incoming request, verbatim. The
client never reads a URL itself. An invalid, forged or expired token means
no gift, never an error.
signal?
Section titled “signal?”
optionalsignal?:AbortSignal
Aborts the request early. The timeout still applies.