OptionalallowedExact principal kinds authorized to call the agent. Defaults to
['human'], so an existing configuration denies every automated principal
without changing a line — the caller must name the automation it wants.
Exact roles authorized to call the agent. Consulted for humans only.
OptionalauditOptional audit logger for authorization decisions and lookup failures.
OptionalgetOverride actor sourcing. Default reads ACTOR_CONTEXT_KEY from requestContext.
OptionalresourceAudit resource. Defaults to the stable processor identifier.
Configuration for
RBACMiddleware.