SecretAccessStrategy

interface SecretAccessStrategy extends InjectableStrategy {    canAccessSecret(ctx: RequestContext, input: SecretAccessInput): boolean | Promise<boolean>;}

class PermissionSecretAccessStrategy implements SecretAccessStrategy {    canAccessSecret(ctx: RequestContext, input: SecretAccessInput) => boolean;}

type SecretAccessInput = | {          kind: 'customField';          /**           * @description           * The name of the entity type the custom field belongs to, e.g. `'Product'` or           * `'PaymentMethod'`.           */          entityType: string;          /**           * @description           * The name of the `secret` custom field being accessed.           */          fieldName: string;          /**           * @description           * The entity instance carrying the custom field. Available for the common case where the           * entity's `customFields` are resolved by the built-in entity resolver, but may be           * `undefined` for types whose `customFields` are resolved by GraphQL's default resolver           * (e.g. `ShippingMethodQuote`/`PaymentMethodQuote`, or some plugin-defined types).           */          entity: VendureEntity | undefined;      }    | {          kind: 'configArg';          /**           * @description           * The code of the configurable operation the arg belongs to, e.g. the payment method           * handler or collection filter code. Always defined, and together with `argName` uniquely           * identifies which secret is being accessed.           */          code: string;          /**           * @description           * The name of the entity type the operation belongs to, e.g. `'PaymentMethod'` or           * `'Collection'`. This is derived from the GraphQL query path, so in rare cases (e.g. an           * operation exposed via an unusual schema shape) it may be `undefined`. The owning entity           * instance itself is not available in this context.           */          entityType: string | undefined;          /**           * @description           * The name of the field on the owning entity that holds the operation, e.g. `'handler'`           * or `'filters'`. Derived from the GraphQL query path, so it may be `undefined` in the           * same rare cases as `entityType`.           */          field: string | undefined;          /**           * @description           * The name of the `secret` config arg being accessed.           */          argName: string;      }