@cedar-policy/cedar-wasm 4.8.0 → 4.8.2

package/esm/cedar_wasm.d.ts

@@ -1,125 +1,55 @@
 /* tslint:disable */
 /* eslint-disable */
-export function getCedarVersion(): string;
-export function getCedarSDKVersion(): string;
-/**
- * Get valid request environment
- */
-export function getValidRequestEnvsPolicy(t: Policy, s: Schema): GetValidRequestEnvsResult;
-/**
- * Get valid request environment
- */
-export function getValidRequestEnvsTemplate(t: Template, s: Schema): GetValidRequestEnvsResult;
-/**
- * Preparse and cache a schema in thread-local storage
- *
- * # Errors
- *
- * Will return `Err` if the input cannot be parsed. Side-effect free on error.
- */
-export function preparseSchema(schema_name: string, schema: Schema): CheckParseAnswer;
-/**
- * Preparse and cache a policy set in thread-local storage
- *
- * # Errors
- *
- * Will return `Err` if the input cannot be parsed. Side-effect free on error.
- */
-export function preparsePolicySet(pset_id: string, policies: PolicySet): CheckParseAnswer;
-/**
- * Basic interface, using [`AuthorizationCall`] and [`AuthorizationAnswer`] types
- */
-export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
-/**
- * Stateful authorization using preparsed schemas and policy sets.
- *
- * This function works like [`is_authorized`] but retrieves schemas and policy sets
- * from thread-local cache instead of parsing them on each call.
- */
-export function statefulIsAuthorized(call: StatefulAuthorizationCall): AuthorizationAnswer;
-/**
- * Get language version of Cedar
- */
-export function getCedarLangVersion(): string;
-/**
- * Apply the Cedar policy formatter to a policy set in the Cedar policy format
- */
-export function formatPolicies(call: FormattingCall): FormattingAnswer;
-/**
- * Parse a policy set and optionally validate it against a provided schema
- *
- * This is the basic validator interface, using [`ValidationCall`] and
- * [`ValidationAnswer`] types
- */
-export function validate(call: ValidationCall): ValidationAnswer;
-/**
- * Check whether a context successfully parses.
- */
-export function checkParseContext(call: ContextParsingCall): CheckParseAnswer;
-/**
- * Check whether a schema successfully parses.
- */
-export function checkParseSchema(schema: Schema): CheckParseAnswer;
-/**
- * Check whether a policy set successfully parses.
- */
-export function checkParsePolicySet(policies: PolicySet): CheckParseAnswer;
-/**
- * Check whether a set of entities successfully parses.
- */
-export function checkParseEntities(call: EntitiesParsingCall): CheckParseAnswer;
-/**
- * Return the JSON representation of a schema.
- */
-export function schemaToJson(schema: Schema): SchemaToJsonAnswer;
-/**
- * Return the Cedar (textual) representation of a schema.
- */
-export function schemaToText(schema: Schema): SchemaToTextAnswer;
-/**
- * Takes a `PolicySet` represented as string and return the policies
- * and templates split into vecs and sorted by id.
- */
-export function policySetTextToParts(policyset_str: string): PolicySetTextToPartsAnswer;
-/**
- * Return the Cedar (textual) representation of a policy.
- */
-export function policyToText(policy: Policy): PolicyToTextAnswer;
-/**
- * Return the JSON representation of a policy.
- */
-export function policyToJson(policy: Policy): PolicyToJsonAnswer;
-/**
- * Return the Cedar (textual) representation of a template.
- */
-export function templateToText(template: Template): PolicyToTextAnswer;
-/**
- * Return the JSON representation of a template.
- */
-export function templateToJson(template: Template): PolicyToJsonAnswer;
 export type GetValidRequestEnvsResult = { type: "success"; principals: string[]; actions: string[]; resources: string[] } | { type: "failure"; error: string };
 
-export type SlotId = string;
+export type FormattingAnswer = { type: "failure"; errors: DetailedError[] } | { type: "success"; formatted_policy: string };
 
-export type PolicyId = string;
+export interface FormattingCall {
+    policyText: string;
+    lineWidth?: number;
+    indentWidth?: number;
+}
 
-export type EntityUid = EntityUidJson;
+export type ValidationMode = "strict";
 
-export type Schema = string | SchemaJson<string>;
+export interface AuthorizationCall {
+    principal: EntityUid;
+    action: EntityUid;
+    resource: EntityUid;
+    context: Context;
+    schema?: Schema;
+    validateRequest?: boolean;
+    policies: PolicySet;
+    entities: Entities;
+}
 
-export interface SourceLabel extends SourceLocation {
-    label: string | null;
+export type AuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "success"; response: Response; warnings: DetailedError[] };
+
+export interface AuthorizationError {
+    policyId: string;
+    error: DetailedError;
 }
 
-export type Context = Record<string, CedarValueJson>;
+export interface StatefulAuthorizationCall {
+    principal: EntityUid;
+    action: EntityUid;
+    resource: EntityUid;
+    context: Context;
+    preparsedSchemaName?: string;
+    validateRequest?: boolean;
+    preparsedPolicySetId: string;
+    entities: Entities;
+}
 
-export interface PolicySet {
-    staticPolicies?: StaticPolicySet;
-    templates?: Record<PolicyId, Template>;
-    templateLinks?: TemplateLink[];
+export interface Diagnostics {
+    reason: PolicyId[];
+    errors: AuthorizationError[];
 }
 
-export type Policy = string | PolicyJson;
+export interface Response {
+    decision: Decision;
+    diagnostics: Diagnostics;
+}
 
 export interface DetailedError {
     message: string;
@@ -131,10 +61,16 @@ export interface DetailedError {
     related?: DetailedError[];
 }
 
-export type Severity = "advice" | "warning" | "error";
+export type StaticPolicySet = string | Policy[] | Record<PolicyId, Policy>;
 
 export type Entities = Array<EntityJson>;
 
+export interface PolicySet {
+    staticPolicies?: StaticPolicySet;
+    templates?: Record<PolicyId, Template>;
+    templateLinks?: TemplateLink[];
+}
+
 export interface SourceLocation {
     start: number;
     end: number;
@@ -146,64 +82,21 @@ export interface TemplateLink {
     values: Record<SlotId, EntityUid>;
 }
 
-export type Template = string | PolicyJson;
-
-export type StaticPolicySet = string | Policy[] | Record<PolicyId, Policy>;
-
-export interface StatefulAuthorizationCall {
-    principal: EntityUid;
-    action: EntityUid;
-    resource: EntityUid;
-    context: Context;
-    preparsedSchemaName?: string;
-    validateRequest?: boolean;
-    preparsedPolicySetId: string;
-    entities: Entities;
-}
+export type Severity = "advice" | "warning" | "error";
 
-export interface AuthorizationError {
-    policyId: string;
-    error: DetailedError;
-}
+export type Schema = string | SchemaJson<string>;
 
-export interface Diagnostics {
-    reason: PolicyId[];
-    errors: AuthorizationError[];
-}
+export type Context = Record<string, CedarValueJson>;
 
-export interface Response {
-    decision: Decision;
-    diagnostics: Diagnostics;
-}
+export type Policy = string | PolicyJson;
 
-export interface AuthorizationCall {
-    principal: EntityUid;
-    action: EntityUid;
-    resource: EntityUid;
-    context: Context;
-    schema?: Schema;
-    validateRequest?: boolean;
-    policies: PolicySet;
-    entities: Entities;
+export interface SourceLabel extends SourceLocation {
+    label: string | null;
 }
 
-export type AuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "success"; response: Response; warnings: DetailedError[] };
-
-export type ValidationMode = "strict";
-
-export type FormattingAnswer = { type: "failure"; errors: DetailedError[] } | { type: "success"; formatted_policy: string };
-
-export interface FormattingCall {
-    policyText: string;
-    lineWidth?: number;
-    indentWidth?: number;
-}
+export type EntityUid = EntityUidJson;
 
-export interface ValidationCall {
-    validationSettings?: ValidationSettings;
-    schema: Schema;
-    policies: PolicySet;
-}
+export type Template = string | PolicyJson;
 
 export type ValidationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "success"; validationErrors: ValidationError[]; validationWarnings: ValidationError[]; otherWarnings: DetailedError[] };
 
@@ -216,6 +109,12 @@ export interface ValidationSettings {
     mode: ValidationMode;
 }
 
+export interface ValidationCall {
+    validationSettings?: ValidationSettings;
+    schema: Schema;
+    policies: PolicySet;
+}
+
 export interface ContextParsingCall {
     context: Context;
     schema?: Schema | null;
@@ -229,49 +128,23 @@ export interface EntitiesParsingCall {
 
 export type CheckParseAnswer = { type: "success" } | { type: "failure"; errors: DetailedError[] };
 
-export type PolicyToJsonAnswer = { type: "success"; json: PolicyJson } | { type: "failure"; errors: DetailedError[] };
+export type PolicyId = string;
 
-export type SchemaToTextAnswer = { type: "success"; text: string; warnings: DetailedError[] } | { type: "failure"; errors: DetailedError[] };
+export type SlotId = string;
 
 export type SchemaToJsonAnswer = { type: "success"; json: SchemaJson<string>; warnings: DetailedError[] } | { type: "failure"; errors: DetailedError[] };
 
-export type PolicyToTextAnswer = { type: "success"; text: string } | { type: "failure"; errors: DetailedError[] };
+export type PolicyToJsonAnswer = { type: "success"; json: PolicyJson } | { type: "failure"; errors: DetailedError[] };
 
 export type PolicySetTextToPartsAnswer = { type: "success"; policies: string[]; policy_templates: string[] } | { type: "failure"; errors: DetailedError[] };
 
-export type Annotations = Record<string, Annotation>;
-
-export type Decision = "allow" | "deny";
-
-export type Effect = "permit" | "forbid";
-
-export type ActionInConstraint = { entity: EntityUidJson } | { entities: EntityUidJson[] };
-
-export type ActionConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & ActionInConstraint);
-
-export type EqConstraint = { entity: EntityUidJson } | { slot: string };
-
-export type ResourceConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
-
-export type PrincipalConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
-
-export interface PrincipalOrResourceIsConstraint {
-    entity_type: string;
-    in?: PrincipalOrResourceInConstraint;
-}
+export type PolicyToTextAnswer = { type: "success"; text: string } | { type: "failure"; errors: DetailedError[] };
 
-export type PrincipalOrResourceInConstraint = { entity: EntityUidJson } | { slot: string };
+export type SchemaToTextAnswer = { type: "success"; text: string; warnings: DetailedError[] } | { type: "failure"; errors: DetailedError[] };
 
-export type Clause = { kind: "when"; body: Expr } | { kind: "unless"; body: Expr };
+export type Annotation = SmolStr;
 
-export interface PolicyJson {
-    effect: Effect;
-    principal: PrincipalConstraint;
-    action: ActionConstraint;
-    resource: ResourceConstraint;
-    conditions: Clause[];
-    annotations?: Annotations;
-}
+export type Annotations = Record<string, Annotation>;
 
 export interface EntityJson {
     uid: EntityUidJson;
@@ -280,30 +153,26 @@ export interface EntityJson {
     tags?: Record<string, CedarValueJson>;
 }
 
-export type ExprNoExt = { Value: CedarValueJson } | { Var: Var } | { Slot: string } | { "!": { arg: Expr } } | { neg: { arg: Expr } } | { "==": { left: Expr; right: Expr } } | { "!=": { left: Expr; right: Expr } } | { in: { left: Expr; right: Expr } } | { "<": { left: Expr; right: Expr } } | { "<=": { left: Expr; right: Expr } } | { ">": { left: Expr; right: Expr } } | { ">=": { left: Expr; right: Expr } } | { "&&": { left: Expr; right: Expr } } | { "||": { left: Expr; right: Expr } } | { "+": { left: Expr; right: Expr } } | { "-": { left: Expr; right: Expr } } | { "*": { left: Expr; right: Expr } } | { contains: { left: Expr; right: Expr } } | { containsAll: { left: Expr; right: Expr } } | { containsAny: { left: Expr; right: Expr } } | { isEmpty: { arg: Expr } } | { getTag: { left: Expr; right: Expr } } | { hasTag: { left: Expr; right: Expr } } | { ".": { left: Expr; attr: SmolStr } } | { has: { left: Expr; attr: SmolStr } } | { like: { left: Expr; pattern: PatternElem[] } } | { is: { left: Expr; entity_type: SmolStr; in?: Expr } } | { "if-then-else": { if: Expr; then: Expr; else: Expr } } | { Set: Expr[] } | { Record: Record<string, Expr> };
+export type Var = "principal" | "action" | "resource" | "context";
 
-export type PatternElem = "Wildcard" | { Literal: SmolStr };
+export type Decision = "allow" | "deny";
 
-export type Expr = ExprNoExt | ExtFuncCall;
+export type AnyId = SmolStr;
 
-export type ExtFuncCall = {} & Record<string, Array<Expr>>;
+export type UnreservedId = string;
 
-export type Var = "principal" | "action" | "resource" | "context";
+export type TypeVariant<N> = { type: "String" } | { type: "Long" } | { type: "Boolean" } | { type: "Set"; element: Type<N> } | ({ type: "Record" } & RecordType<N>) | { type: "Entity"; name: N } | { type: "EntityOrCommon"; name: N } | { type: "Extension"; name: UnreservedId };
 
-export type EntityUidJson = { __entity: TypeAndId } | TypeAndId;
+export type Type<N> = ({} & TypeVariant<N>) | { type: N };
 
-export interface TypeAndId {
-    type: string;
-    id: string;
+export interface RecordType<N> {
+    attributes: Record<SmolStr, TypeOfAttribute<N>>;
+    additionalAttributes?: boolean;
 }
 
-export type FnAndArgs = { fn: string; arg: CedarValueJson } | { fn: string; args: CedarValueJson[] };
-
-export type CedarValueJson = { __entity: TypeAndId } | { __extn: FnAndArgs } | boolean | number | string | CedarValueJson[] | { [key: string]: CedarValueJson } | null;
-
-export type AnyId = SmolStr;
+export type CommonTypeId = string;
 
-export type UnreservedId = string;
+export type AttributesOrContext<N> = Type<N>;
 
 export interface ActionEntityUID<N> {
     id: SmolStr;
@@ -317,7 +186,9 @@ export interface ActionType<N> {
     annotations?: Annotations;
 }
 
-export type Type<N> = ({} & TypeVariant<N>) | { type: N };
+export type SchemaJson<N> = Record<string, NamespaceDefinition<N>>;
+
+export type EntityTypeKind<N> = StandardEntityType<N> | { enum: NonEmpty<SmolStr> };
 
 export interface NamespaceDefinition<N> {
     commonTypes?: Record<CommonTypeId, CommonType<N>>;
@@ -326,7 +197,11 @@ export interface NamespaceDefinition<N> {
     annotations?: Annotations;
 }
 
-export type AttributesOrContext<N> = Type<N>;
+export interface StandardEntityType<N> {
+    memberOfTypes?: N[];
+    shape?: AttributesOrContext<N>;
+    tags?: Type<N>;
+}
 
 export interface ApplySpec<N> {
     resourceTypes: N[];
@@ -334,27 +209,174 @@ export interface ApplySpec<N> {
     context?: AttributesOrContext<N>;
 }
 
-export type TypeVariant<N> = { type: "String" } | { type: "Long" } | { type: "Boolean" } | { type: "Set"; element: Type<N> } | ({ type: "Record" } & RecordType<N>) | { type: "Entity"; name: N } | { type: "EntityOrCommon"; name: N } | { type: "Extension"; name: UnreservedId };
+export type Effect = "permit" | "forbid";
 
-export type SchemaJson<N> = Record<string, NamespaceDefinition<N>>;
+export type PrincipalConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
 
-export interface RecordType<N> {
-    attributes: Record<SmolStr, TypeOfAttribute<N>>;
-    additionalAttributes?: boolean;
+export interface PrincipalOrResourceIsConstraint {
+    entity_type: string;
+    in?: PrincipalOrResourceInConstraint;
 }
 
-export type CommonTypeId = string;
+export type ActionConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & ActionInConstraint);
 
-export type EntityTypeKind<N> = StandardEntityType<N> | { enum: NonEmpty<SmolStr> };
+export type ActionInConstraint = { entity: EntityUidJson } | { entities: EntityUidJson[] };
 
-export interface StandardEntityType<N> {
-    memberOfTypes?: N[];
-    shape?: AttributesOrContext<N>;
-    tags?: Type<N>;
+export type PrincipalOrResourceInConstraint = { entity: EntityUidJson } | { slot: string };
+
+export type ResourceConstraint = { op: "All" } | ({ op: "==" } & EqConstraint) | ({ op: "in" } & PrincipalOrResourceInConstraint) | ({ op: "is" } & PrincipalOrResourceIsConstraint);
+
+export type EqConstraint = { entity: EntityUidJson } | { slot: string };
+
+export type Clause = { kind: "when"; body: Expr } | { kind: "unless"; body: Expr };
+
+export interface PolicyJson {
+    effect: Effect;
+    principal: PrincipalConstraint;
+    action: ActionConstraint;
+    resource: ResourceConstraint;
+    conditions: Clause[];
+    annotations?: Annotations;
 }
 
-export type Annotation = SmolStr;
+export type ExtFuncCall = {} & Record<string, Array<Expr>>;
+
+export type Expr = ExprNoExt | ExtFuncCall;
+
+export type PatternElem = "Wildcard" | { Literal: SmolStr };
+
+export type ExprNoExt = { Value: CedarValueJson } | { Var: Var } | { Slot: string } | { "!": { arg: Expr } } | { neg: { arg: Expr } } | { "==": { left: Expr; right: Expr } } | { "!=": { left: Expr; right: Expr } } | { in: { left: Expr; right: Expr } } | { "<": { left: Expr; right: Expr } } | { "<=": { left: Expr; right: Expr } } | { ">": { left: Expr; right: Expr } } | { ">=": { left: Expr; right: Expr } } | { "&&": { left: Expr; right: Expr } } | { "||": { left: Expr; right: Expr } } | { "+": { left: Expr; right: Expr } } | { "-": { left: Expr; right: Expr } } | { "*": { left: Expr; right: Expr } } | { contains: { left: Expr; right: Expr } } | { containsAll: { left: Expr; right: Expr } } | { containsAny: { left: Expr; right: Expr } } | { isEmpty: { arg: Expr } } | { getTag: { left: Expr; right: Expr } } | { hasTag: { left: Expr; right: Expr } } | { ".": { left: Expr; attr: SmolStr } } | { has: { left: Expr; attr: SmolStr } } | { like: { left: Expr; pattern: PatternElem[] } } | { is: { left: Expr; entity_type: SmolStr; in?: Expr } } | { "if-then-else": { if: Expr; then: Expr; else: Expr } } | { Set: Expr[] } | { Record: Record<string, Expr> };
+
+export interface TypeAndId {
+    type: string;
+    id: string;
+}
+
+export type CedarValueJson = { __entity: TypeAndId } | { __extn: FnAndArgs } | boolean | number | string | CedarValueJson[] | { [key: string]: CedarValueJson } | null;
+
+export type EntityUidJson = { __entity: TypeAndId } | TypeAndId;
+
+export type FnAndArgs = { fn: string; arg: CedarValueJson } | { fn: string; args: CedarValueJson[] };
+
+
+/**
+ * Check whether a context successfully parses.
+ */
+export function checkParseContext(call: ContextParsingCall): CheckParseAnswer;
+
+/**
+ * Check whether a set of entities successfully parses.
+ */
+export function checkParseEntities(call: EntitiesParsingCall): CheckParseAnswer;
+
+/**
+ * Check whether a policy set successfully parses.
+ */
+export function checkParsePolicySet(policies: PolicySet): CheckParseAnswer;
+
+/**
+ * Check whether a schema successfully parses.
+ */
+export function checkParseSchema(schema: Schema): CheckParseAnswer;
+
+/**
+ * Apply the Cedar policy formatter to a policy set in the Cedar policy format
+ */
+export function formatPolicies(call: FormattingCall): FormattingAnswer;
+
+/**
+ * Get language version of Cedar
+ */
+export function getCedarLangVersion(): string;
+
+export function getCedarSDKVersion(): string;
+
+export function getCedarVersion(): string;
+
+/**
+ * Get valid request environment
+ */
+export function getValidRequestEnvsPolicy(t: Policy, s: Schema): GetValidRequestEnvsResult;
+
+/**
+ * Get valid request environment
+ */
+export function getValidRequestEnvsTemplate(t: Template, s: Schema): GetValidRequestEnvsResult;
+
+/**
+ * Basic interface, using [`AuthorizationCall`] and [`AuthorizationAnswer`] types
+ */
+export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
+
+/**
+ * Takes a `PolicySet` represented as string and return the policies
+ * and templates split into vecs and sorted by id.
+ */
+export function policySetTextToParts(policyset_str: string): PolicySetTextToPartsAnswer;
+
+/**
+ * Return the JSON representation of a policy.
+ */
+export function policyToJson(policy: Policy): PolicyToJsonAnswer;
 
+/**
+ * Return the Cedar (textual) representation of a policy.
+ */
+export function policyToText(policy: Policy): PolicyToTextAnswer;
+
+/**
+ * Preparse and cache a policy set in thread-local storage
+ *
+ * # Errors
+ *
+ * Will return `Err` if the input cannot be parsed. Side-effect free on error.
+ */
+export function preparsePolicySet(pset_id: string, policies: PolicySet): CheckParseAnswer;
+
+/**
+ * Preparse and cache a schema in thread-local storage
+ *
+ * # Errors
+ *
+ * Will return `Err` if the input cannot be parsed. Side-effect free on error.
+ */
+export function preparseSchema(schema_name: string, schema: Schema): CheckParseAnswer;
+
+/**
+ * Return the JSON representation of a schema.
+ */
+export function schemaToJson(schema: Schema): SchemaToJsonAnswer;
+
+/**
+ * Return the Cedar (textual) representation of a schema.
+ */
+export function schemaToText(schema: Schema): SchemaToTextAnswer;
+
+/**
+ * Stateful authorization using preparsed schemas and policy sets.
+ *
+ * This function works like [`is_authorized`] but retrieves schemas and policy sets
+ * from thread-local cache instead of parsing them on each call.
+ */
+export function statefulIsAuthorized(call: StatefulAuthorizationCall): AuthorizationAnswer;
+
+/**
+ * Return the JSON representation of a template.
+ */
+export function templateToJson(template: Template): PolicyToJsonAnswer;
+
+/**
+ * Return the Cedar (textual) representation of a template.
+ */
+export function templateToText(template: Template): PolicyToTextAnswer;
+
+/**
+ * Parse a policy set and optionally validate it against a provided schema
+ *
+ * This is the basic validator interface, using [`ValidationCall`] and
+ * [`ValidationAnswer`] types
+ */
+export function validate(call: ValidationCall): ValidationAnswer;
 type SmolStr = string;
 export type TypeOfAttribute<N> = Type<N> & { required?: boolean };
 export type CommonType<N> = Type<N> & { annotations?: Annotations };