@cedar-policy/cedar-wasm 3.2.1 → 3.2.2

package/nodejs/cedar_wasm.d.ts

@@ -0,0 +1,270 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+* @param {string} json_str
+* @returns {JsonToPolicyResult}
+*/
+export function policyTextFromJson(json_str: string): JsonToPolicyResult;
+/**
+* @param {string} cedar_str
+* @returns {PolicyToJsonResult}
+*/
+export function policyTextToJson(cedar_str: string): PolicyToJsonResult;
+/**
+* @param {string} input_policies_str
+* @returns {CheckParsePolicySetResult}
+*/
+export function checkParsePolicySet(input_policies_str: string): CheckParsePolicySetResult;
+/**
+* @param {string} template_str
+* @returns {CheckParseTemplateResult}
+*/
+export function checkParseTemplate(template_str: string): CheckParseTemplateResult;
+/**
+* @param {string} input_schema
+* @returns {CheckParseResult}
+*/
+export function checkParseSchema(input_schema: string): CheckParseResult;
+/**
+* @param {string} entities_str
+* @param {string} schema_str
+* @returns {CheckParseResult}
+*/
+export function checkParseEntities(entities_str: string, schema_str: string): CheckParseResult;
+/**
+* @param {string} context_str
+* @param {string} action_str
+* @param {string} schema_str
+* @returns {CheckParseResult}
+*/
+export function checkParseContext(context_str: string, action_str: string, schema_str: string): CheckParseResult;
+/**
+* @param {string} policies_str
+* @param {number} line_width
+* @param {number} indent_width
+* @returns {FormattingResult}
+*/
+export function formatPolicies(policies_str: string, line_width: number, indent_width: number): FormattingResult;
+/**
+* @returns {string}
+*/
+export function getCedarVersion(): string;
+/**
+* @param {AuthorizationCall} call
+* @returns {AuthorizationAnswer}
+*/
+export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
+/**
+* @param {ValidationCall} call
+* @returns {ValidationAnswer}
+*/
+export function validate(call: ValidationCall): ValidationAnswer;
+export type JsonToPolicyResult = { type: "success"; policyText: string } | { type: "error"; errors: string[] };
+
+export type PolicyToJsonResult = { type: "success"; policy: Policy } | { type: "error"; errors: string[] };
+
+export type CheckParsePolicySetResult = { type: "success"; policies: number; templates: number } | { type: "error"; errors: string[] };
+
+export type CheckParseTemplateResult = { type: "success"; slots: string[] } | { type: "error"; errors: string[] };
+
+export type CheckParseResult = { type: "success" } | { type: "error"; errors: string[] };
+
+export type FormattingResult = { type: "success"; formatted_policy: string } | { type: "error"; errors: string[] };
+
+export type Schema = { human: string } | { json: SchemaJson };
+
+export type PolicySet = string | Record<string, string>;
+
+export interface SourceLocation {
+    start: number;
+    end: number;
+}
+
+export interface SourceLabel extends SourceLocation {
+    label: string | null;
+}
+
+export type Severity = "advice" | "warning" | "error";
+
+export interface DetailedError {
+    message: string;
+    help: string | null;
+    code: string | null;
+    url: string | null;
+    severity: Severity | null;
+    sourceLocations?: SourceLabel[];
+    related?: DetailedError[];
+}
+
+export type ValidationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "success"; validationErrors: ValidationError[]; validationWarnings: ValidationError[]; otherWarnings: DetailedError[] };
+
+export interface ValidationError {
+    policyId: SmolStr;
+    error: DetailedError;
+}
+
+export type ValidationEnabled = "on" | "off";
+
+export interface ValidationSettings {
+    enabled: ValidationEnabled;
+}
+
+export interface ValidationCall {
+    validationSettings?: ValidationSettings;
+    schema: Schema;
+    policySet: PolicySet;
+}
+
+export interface RecvdSlice {
+    policies: PolicySet;
+    entities: Array<EntityJson>;
+    templates?: Record<string, string> | null;
+    templateInstantiations: TemplateLink[] | null;
+}
+
+export type Links = Link[];
+
+export interface TemplateLink {
+    templateId: string;
+    resultPolicyId: string;
+    instantiations: Links;
+}
+
+export interface Link {
+    slot: string;
+    value: EntityUIDStrings;
+}
+
+export interface EntityUIDStrings {
+    ty: string;
+    eid: string;
+}
+
+export interface AuthorizationCall {
+    principal: {type: string, id: string};
+    action: {type: string, id: string};
+    resource: {type: string, id: string};
+    context: Record<string, CedarValueJson>;
+    schema?: Schema;
+    enableRequestValidation?: boolean;
+    slice: RecvdSlice;
+}
+
+export type AuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "success"; response: Response; warnings: DetailedError[] };
+
+export interface AuthorizationError {
+    policyId: SmolStr;
+    error: DetailedError;
+}
+
+export interface Diagnostics {
+    reason: Set<String>;
+    errors: AuthorizationError[];
+}
+
+export interface Response {
+    decision: Decision;
+    diagnostics: Diagnostics;
+}
+
+export type SchemaTypeVariant = { type: "String" } | { type: "Long" } | { type: "Boolean" } | { type: "Set"; element: SchemaType } | { type: "Record"; attributes: Record<SmolStr, TypeOfAttribute>; additionalAttributes: boolean } | { type: "Entity"; name: Name } | { type: "Extension"; name: Id };
+
+export type SchemaType = SchemaTypeVariant | { type: Name };
+
+export interface ActionEntityUID {
+    id: SmolStr;
+    type?: Name;
+}
+
+export interface ApplySpec {
+    resourceTypes?: Name[];
+    principalTypes?: Name[];
+    context?: AttributesOrContext;
+}
+
+export interface ActionType {
+    attributes?: Record<SmolStr, CedarValueJson>;
+    appliesTo?: ApplySpec;
+    memberOf?: ActionEntityUID[];
+}
+
+export type AttributesOrContext = SchemaType;
+
+export interface EntityType {
+    memberOfTypes?: Name[];
+    shape?: AttributesOrContext;
+}
+
+export interface NamespaceDefinition {
+    commonTypes?: Record<Id, SchemaType>;
+    entityTypes: Record<Id, EntityType>;
+    actions: Record<SmolStr, ActionType>;
+}
+
+export type SchemaJson = Record<string, NamespaceDefinition>;
+
+export type EntityUidJson = { __expr: string } | { __entity: TypeAndId } | TypeAndId;
+
+export interface FnAndArg {
+    fn: string;
+    arg: CedarValueJson;
+}
+
+export interface TypeAndId {
+    type: string;
+    id: string;
+}
+
+export type CedarValueJson = { __expr: string } | { __entity: TypeAndId } | { __extn: FnAndArg } | boolean | number | string | CedarValueJson[] | { [key: string]: CedarValueJson } | null;
+
+export type Var = "principal" | "action" | "resource" | "context";
+
+export type Effect = "permit" | "forbid";
+
+export type Clause = { kind: "when"; body: Expr } | { kind: "unless"; body: Expr };
+
+export interface Policy {
+    effect: Effect;
+    principal: PrincipalConstraint;
+    action: ActionConstraint;
+    resource: ResourceConstraint;
+    conditions: Clause[];
+    annotations?: Record<string, string>;
+}
+
+export interface EntityJson {
+    uid: EntityUidJson;
+    attrs: Record<string, CedarValueJson>;
+    parents: EntityUidJson[];
+}
+
+export type Decision = "Allow" | "Deny";
+
+export type ActionInConstraint = { entity: EntityUidJson } | { entities: EntityUidJson[] };
+
+export interface PrincipalOrResourceIsConstraint {
+    entity_type: string;
+    in?: PrincipalOrResourceInConstraint;
+}
+
+export type PrincipalOrResourceInConstraint = { entity: EntityUidJson } | { slot: string };
+
+export type EqConstraint = { entity: EntityUidJson } | { slot: string };
+
+export type ResourceConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
+
+export type ActionConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & ActionInConstraint);
+
+export type PrincipalConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
+
+export type ExtFuncCall = {} & Record<string, Array<Expr>>;
+
+export type ExprNoExt = { Value: CedarValueJson } | { Var: Var } | { Slot: string } | { Unknown: { name: string } } | { "!": { arg: Expr } } | { neg: { arg: Expr } } | { "==": { left: Expr; right: Expr } } | { "!=": { left: Expr; right: Expr } } | { in: { left: Expr; right: Expr } } | { "<": { left: Expr; right: Expr } } | { "<=": { left: Expr; right: Expr } } | { ">": { left: Expr; right: Expr } } | { ">=": { left: Expr; right: Expr } } | { "&&": { left: Expr; right: Expr } } | { "||": { left: Expr; right: Expr } } | { "+": { left: Expr; right: Expr } } | { "-": { left: Expr; right: Expr } } | { "*": { left: Expr; right: Expr } } | { contains: { left: Expr; right: Expr } } | { containsAll: { left: Expr; right: Expr } } | { containsAny: { left: Expr; right: Expr } } | { ".": { left: Expr; attr: SmolStr } } | { has: { left: Expr; attr: SmolStr } } | { like: { left: Expr; pattern: SmolStr } } | { is: { left: Expr; entity_type: SmolStr; in?: Expr } } | { "if-then-else": { if: Expr; then: Expr; else: Expr } } | { Set: Expr[] } | { Record: Record<string, Expr> };
+
+export type Expr = ExprNoExt | ExtFuncCall;
+
+type SmolStr = string;
+type Name = string;
+type Id = string;
+export type TypeOfAttribute = SchemaType & { required?: boolean };
+export type Context = Record<string, CedarValueJson>;

package/nodejs/cedar_wasm.js

@@ -0,0 +1,310 @@
+let imports = {};
+imports['__wbindgen_placeholder__'] = module.exports;
+let wasm;
+const { TextEncoder, TextDecoder } = require(`util`);
+
+const heap = new Array(128).fill(undefined);
+
+heap.push(undefined, null, true, false);
+
+function getObject(idx) { return heap[idx]; }
+
+let heap_next = heap.length;
+
+function addHeapObject(obj) {
+    if (heap_next === heap.length) heap.push(heap.length + 1);
+    const idx = heap_next;
+    heap_next = heap[idx];
+
+    heap[idx] = obj;
+    return idx;
+}
+
+function dropObject(idx) {
+    if (idx < 132) return;
+    heap[idx] = heap_next;
+    heap_next = idx;
+}
+
+function takeObject(idx) {
+    const ret = getObject(idx);
+    dropObject(idx);
+    return ret;
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let cachedUint8Memory0 = null;
+
+function getUint8Memory0() {
+    if (cachedUint8Memory0 === null || cachedUint8Memory0.byteLength === 0) {
+        cachedUint8Memory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8Memory0;
+}
+
+let cachedTextEncoder = new TextEncoder('utf-8');
+
+const encodeString = (typeof cachedTextEncoder.encodeInto === 'function'
+    ? function (arg, view) {
+    return cachedTextEncoder.encodeInto(arg, view);
+}
+    : function (arg, view) {
+    const buf = cachedTextEncoder.encode(arg);
+    view.set(buf);
+    return {
+        read: arg.length,
+        written: buf.length
+    };
+});
+
+function passStringToWasm0(arg, malloc, realloc) {
+
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8Memory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8Memory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8Memory0().subarray(ptr + offset, ptr + len);
+        const ret = encodeString(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+let cachedInt32Memory0 = null;
+
+function getInt32Memory0() {
+    if (cachedInt32Memory0 === null || cachedInt32Memory0.byteLength === 0) {
+        cachedInt32Memory0 = new Int32Array(wasm.memory.buffer);
+    }
+    return cachedInt32Memory0;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+
+cachedTextDecoder.decode();
+
+function getStringFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return cachedTextDecoder.decode(getUint8Memory0().subarray(ptr, ptr + len));
+}
+/**
+* @param {string} json_str
+* @returns {JsonToPolicyResult}
+*/
+module.exports.policyTextFromJson = function(json_str) {
+    const ptr0 = passStringToWasm0(json_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.policyTextFromJson(ptr0, len0);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} cedar_str
+* @returns {PolicyToJsonResult}
+*/
+module.exports.policyTextToJson = function(cedar_str) {
+    const ptr0 = passStringToWasm0(cedar_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.policyTextToJson(ptr0, len0);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} input_policies_str
+* @returns {CheckParsePolicySetResult}
+*/
+module.exports.checkParsePolicySet = function(input_policies_str) {
+    const ptr0 = passStringToWasm0(input_policies_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParsePolicySet(ptr0, len0);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} template_str
+* @returns {CheckParseTemplateResult}
+*/
+module.exports.checkParseTemplate = function(template_str) {
+    const ptr0 = passStringToWasm0(template_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParseTemplate(ptr0, len0);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} input_schema
+* @returns {CheckParseResult}
+*/
+module.exports.checkParseSchema = function(input_schema) {
+    const ptr0 = passStringToWasm0(input_schema, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParseSchema(ptr0, len0);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} entities_str
+* @param {string} schema_str
+* @returns {CheckParseResult}
+*/
+module.exports.checkParseEntities = function(entities_str, schema_str) {
+    const ptr0 = passStringToWasm0(entities_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(schema_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParseEntities(ptr0, len0, ptr1, len1);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} context_str
+* @param {string} action_str
+* @param {string} schema_str
+* @returns {CheckParseResult}
+*/
+module.exports.checkParseContext = function(context_str, action_str, schema_str) {
+    const ptr0 = passStringToWasm0(context_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(action_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(schema_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.checkParseContext(ptr0, len0, ptr1, len1, ptr2, len2);
+    return takeObject(ret);
+};
+
+/**
+* @param {string} policies_str
+* @param {number} line_width
+* @param {number} indent_width
+* @returns {FormattingResult}
+*/
+module.exports.formatPolicies = function(policies_str, line_width, indent_width) {
+    const ptr0 = passStringToWasm0(policies_str, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.formatPolicies(ptr0, len0, line_width, indent_width);
+    return takeObject(ret);
+};
+
+/**
+* @returns {string}
+*/
+module.exports.getCedarVersion = function() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.getCedarVersion(retptr);
+        var r0 = getInt32Memory0()[retptr / 4 + 0];
+        var r1 = getInt32Memory0()[retptr / 4 + 1];
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+};
+
+/**
+* @param {AuthorizationCall} call
+* @returns {AuthorizationAnswer}
+*/
+module.exports.isAuthorized = function(call) {
+    const ret = wasm.isAuthorized(addHeapObject(call));
+    return takeObject(ret);
+};
+
+/**
+* @param {ValidationCall} call
+* @returns {ValidationAnswer}
+*/
+module.exports.validate = function(call) {
+    const ret = wasm.validate(addHeapObject(call));
+    return takeObject(ret);
+};
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        wasm.__wbindgen_exn_store(addHeapObject(e));
+    }
+}
+
+module.exports.__wbindgen_is_undefined = function(arg0) {
+    const ret = getObject(arg0) === undefined;
+    return ret;
+};
+
+module.exports.__wbindgen_object_clone_ref = function(arg0) {
+    const ret = getObject(arg0);
+    return addHeapObject(ret);
+};
+
+module.exports.__wbindgen_object_drop_ref = function(arg0) {
+    takeObject(arg0);
+};
+
+module.exports.__wbindgen_string_get = function(arg0, arg1) {
+    const obj = getObject(arg1);
+    const ret = typeof(obj) === 'string' ? obj : undefined;
+    var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    getInt32Memory0()[arg0 / 4 + 1] = len1;
+    getInt32Memory0()[arg0 / 4 + 0] = ptr1;
+};
+
+module.exports.__wbg_parse_66d1801634e099ac = function() { return handleError(function (arg0, arg1) {
+    const ret = JSON.parse(getStringFromWasm0(arg0, arg1));
+    return addHeapObject(ret);
+}, arguments) };
+
+module.exports.__wbg_stringify_8887fe74e1c50d81 = function() { return handleError(function (arg0) {
+    const ret = JSON.stringify(getObject(arg0));
+    return addHeapObject(ret);
+}, arguments) };
+
+module.exports.__wbindgen_throw = function(arg0, arg1) {
+    throw new Error(getStringFromWasm0(arg0, arg1));
+};
+
+const path = require('path').join(__dirname, 'cedar_wasm_bg.wasm');
+const bytes = require('fs').readFileSync(path);
+
+const wasmModule = new WebAssembly.Module(bytes);
+const wasmInstance = new WebAssembly.Instance(wasmModule, imports);
+wasm = wasmInstance.exports;
+module.exports.__wasm = wasm;
+

package/nodejs/cedar_wasm_bg.wasm.d.ts

@@ -0,0 +1,19 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export function policyTextFromJson(a: number, b: number): number;
+export function policyTextToJson(a: number, b: number): number;
+export function checkParsePolicySet(a: number, b: number): number;
+export function checkParseTemplate(a: number, b: number): number;
+export function checkParseSchema(a: number, b: number): number;
+export function checkParseEntities(a: number, b: number, c: number, d: number): number;
+export function checkParseContext(a: number, b: number, c: number, d: number, e: number, f: number): number;
+export function formatPolicies(a: number, b: number, c: number, d: number): number;
+export function getCedarVersion(a: number): void;
+export function isAuthorized(a: number): number;
+export function validate(a: number): number;
+export function __wbindgen_malloc(a: number, b: number): number;
+export function __wbindgen_realloc(a: number, b: number, c: number, d: number): number;
+export function __wbindgen_add_to_stack_pointer(a: number): number;
+export function __wbindgen_free(a: number, b: number, c: number): void;
+export function __wbindgen_exn_store(a: number): void;

package/nodejs/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@cedar-policy/cedar-wasm",
+  "description": "Wasm bindings and typescript types for Cedar lib",
+  "version": "3.2.2",
+  "license": "Apache-2.0",
+  "files": [
+    "cedar_wasm_bg.wasm",
+    "cedar_wasm_bg.wasm.d.ts",
+    "cedar_wasm.js",
+    "cedar_wasm.d.ts"
+  ],
+  "main": "cedar_wasm.js",
+  "types": "cedar_wasm.d.ts",
+  "type": "commonjs"
+}

package/package.json

@@ -1,12 +1,28 @@
 {
   "name": "@cedar-policy/cedar-wasm",
-  "description": "WASM bindings and typescript types for Cedar lib",
-  "version": "3.2.1",
+  "description": "Wasm bindings and typescript types for Cedar lib",
+  "version": "3.2.2",
   "license": "Apache-2.0",
   "files": [
-    "esm/*",
-    "nodejs/*",
-    "web/*"
+    "esm/package.json",
+    "esm/README.md",
+    "esm/cedar_wasm_bg.wasm",
+    "esm/cedar_wasm_bg.wasm.d.ts",
+    "esm/cedar_wasm.js",
+    "esm/cedar_wasm_bg.js",
+    "esm/cedar_wasm.d.ts",
+    "nodejs/package.json",
+    "nodejs/README.md",
+    "nodejs/cedar_wasm_bg.wasm",
+    "nodejs/cedar_wasm_bg.wasm.d.ts",
+    "nodejs/cedar_wasm.js",
+    "nodejs/cedar_wasm.d.ts",
+    "web/package.json",
+    "web/README.md",
+    "web/cedar_wasm_bg.wasm",
+    "web/cedar_wasm_bg.wasm.d.ts",
+    "web/cedar_wasm.js",
+    "web/cedar_wasm.d.ts"
   ],
   "module": "esm/cedar_wasm.js",
   "types": "esm/cedar_wasm.d.ts",