Skip to content

EventStreamIdentityField

Defined in: packages/contracts/src/event-stream.ts:27

One claim-derived identity field of an Event stream: the JSON path into the verified request claims the value is stamped from at ingest.

The same addressing as a managed field’s authClaim strategy (ManagedFieldSpec.claimPath) — ["sub"] for the auth subject, ["app_metadata", "person_id"] for an app-minted identity — so the two claim-stamping surfaces of the toolkit read identically. Identity is server-stamped, never client-trusted: the client’s envelope carries no identity at all (see eventEnvelopeSchema), and the stamped value reaches the consumer callback on the queue envelope (stampedEventSchema).

claimPath: readonly string[]

Defined in: packages/contracts/src/event-stream.ts:29

JSON path into the verified claims; each segment a plain identifier. Must be non-empty.