@cedar-policy/cedar-wasm 4.9.0 → 4.9.1

package/esm/cedar_wasm.d.ts

@@ -80,6 +80,17 @@ export interface NamespaceDefinition<N> {
     annotations?: Annotations;
 }
 
+export interface PartialAuthorizationCall {
+    principal: EntityUid | null;
+    action: EntityUid | null;
+    resource: EntityUid | null;
+    context: Context;
+    schema?: Schema;
+    validateRequest?: boolean;
+    policies: PolicySet;
+    entities: Entities;
+}
+
 export interface PolicyJson {
     effect: Effect;
     principal: PrincipalConstraint;
@@ -105,6 +116,16 @@ export interface RecordType<N> {
     additionalAttributes?: boolean;
 }
 
+export interface ResidualResponse {
+    decision: Decision | null;
+    satisfied: PolicyId[];
+    errored: PolicyId[];
+    mayBeDetermining: PolicyId[];
+    mustBeDetermining: PolicyId[];
+    residuals: Record<string, PolicyJson>;
+    nontrivialResiduals: PolicyId[];
+}
+
 export interface Response {
     decision: Decision;
     diagnostics: Diagnostics;
@@ -212,6 +233,8 @@ export type FormattingAnswer = { type: "failure"; errors: DetailedError[] } | {
 
 export type GetValidRequestEnvsResult = { type: "success"; principals: string[]; actions: string[]; resources: string[] } | { type: "failure"; error: string };
 
+export type PartialAuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "residuals"; response: ResidualResponse; warnings: DetailedError[] };
+
 export type PatternElem = "Wildcard" | { Literal: SmolStr };
 
 export type Policy = string | PolicyJson;
@@ -310,6 +333,12 @@ export function getValidRequestEnvsTemplate(t: Template, s: Schema): GetValidReq
  */
 export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ */
+export function isAuthorizedPartial(call: PartialAuthorizationCall): PartialAuthorizationAnswer;
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.

package/esm/cedar_wasm.js

@@ -5,5 +5,5 @@ import { __wbg_set_wasm } from "./cedar_wasm_bg.js";
 __wbg_set_wasm(wasm);
 wasm.__wbindgen_start();
 export {
-    checkParseContext, checkParseEntities, checkParsePolicySet, checkParseSchema, formatPolicies, getCedarLangVersion, getCedarSDKVersion, getCedarVersion, getValidRequestEnvsPolicy, getValidRequestEnvsTemplate, isAuthorized, policySetTextToParts, policyToJson, policyToText, preparsePolicySet, preparseSchema, schemaToJson, schemaToJsonWithResolvedTypes, schemaToText, statefulIsAuthorized, templateToJson, templateToText, validate
+    checkParseContext, checkParseEntities, checkParsePolicySet, checkParseSchema, formatPolicies, getCedarLangVersion, getCedarSDKVersion, getCedarVersion, getValidRequestEnvsPolicy, getValidRequestEnvsTemplate, isAuthorized, isAuthorizedPartial, policySetTextToParts, policyToJson, policyToText, preparsePolicySet, preparseSchema, schemaToJson, schemaToJsonWithResolvedTypes, schemaToText, statefulIsAuthorized, templateToJson, templateToText, validate
 } from "./cedar_wasm_bg.js";

package/esm/cedar_wasm_bg.js

@@ -129,6 +129,17 @@ export function isAuthorized(call) {
     return ret;
 }
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ * @param {PartialAuthorizationCall} call
+ * @returns {PartialAuthorizationAnswer}
+ */
+export function isAuthorizedPartial(call) {
+    const ret = wasm.isAuthorizedPartial(call);
+    return ret;
+}
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.

package/esm/cedar_wasm_bg.wasm.d.ts

@@ -5,10 +5,16 @@ export const getCedarSDKVersion: () => [number, number];
 export const getValidRequestEnvsPolicy: (a: any, b: any) => any;
 export const getValidRequestEnvsTemplate: (a: any, b: any) => any;
 export const getCedarVersion: () => [number, number];
+export const isAuthorized: (a: any) => any;
+export const isAuthorizedPartial: (a: any) => any;
+export const preparsePolicySet: (a: number, b: number, c: any) => any;
+export const preparseSchema: (a: number, b: number, c: any) => any;
+export const statefulIsAuthorized: (a: any) => any;
 export const checkParseContext: (a: any) => any;
 export const checkParseEntities: (a: any) => any;
 export const checkParsePolicySet: (a: any) => any;
 export const checkParseSchema: (a: any) => any;
+export const formatPolicies: (a: any) => any;
 export const validate: (a: any) => any;
 export const policySetTextToParts: (a: number, b: number) => any;
 export const policyToJson: (a: any) => any;
@@ -19,11 +25,6 @@ export const schemaToText: (a: any) => any;
 export const templateToJson: (a: any) => any;
 export const templateToText: (a: any) => any;
 export const getCedarLangVersion: () => [number, number];
-export const formatPolicies: (a: any) => any;
-export const isAuthorized: (a: any) => any;
-export const preparsePolicySet: (a: number, b: number, c: any) => any;
-export const preparseSchema: (a: number, b: number, c: any) => any;
-export const statefulIsAuthorized: (a: any) => any;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/esm/package.json

@@ -2,7 +2,7 @@
   "name": "@cedar-policy/cedar-wasm",
   "type": "module",
   "description": "Wasm bindings and typescript types for Cedar lib",
-  "version": "4.9.0",
+  "version": "4.9.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",

package/nodejs/cedar_wasm.d.ts

@@ -80,6 +80,17 @@ export interface NamespaceDefinition<N> {
     annotations?: Annotations;
 }
 
+export interface PartialAuthorizationCall {
+    principal: EntityUid | null;
+    action: EntityUid | null;
+    resource: EntityUid | null;
+    context: Context;
+    schema?: Schema;
+    validateRequest?: boolean;
+    policies: PolicySet;
+    entities: Entities;
+}
+
 export interface PolicyJson {
     effect: Effect;
     principal: PrincipalConstraint;
@@ -105,6 +116,16 @@ export interface RecordType<N> {
     additionalAttributes?: boolean;
 }
 
+export interface ResidualResponse {
+    decision: Decision | null;
+    satisfied: PolicyId[];
+    errored: PolicyId[];
+    mayBeDetermining: PolicyId[];
+    mustBeDetermining: PolicyId[];
+    residuals: Record<string, PolicyJson>;
+    nontrivialResiduals: PolicyId[];
+}
+
 export interface Response {
     decision: Decision;
     diagnostics: Diagnostics;
@@ -212,6 +233,8 @@ export type FormattingAnswer = { type: "failure"; errors: DetailedError[] } | {
 
 export type GetValidRequestEnvsResult = { type: "success"; principals: string[]; actions: string[]; resources: string[] } | { type: "failure"; error: string };
 
+export type PartialAuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "residuals"; response: ResidualResponse; warnings: DetailedError[] };
+
 export type PatternElem = "Wildcard" | { Literal: SmolStr };
 
 export type Policy = string | PolicyJson;
@@ -310,6 +333,12 @@ export function getValidRequestEnvsTemplate(t: Template, s: Schema): GetValidReq
  */
 export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ */
+export function isAuthorizedPartial(call: PartialAuthorizationCall): PartialAuthorizationAnswer;
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.

package/nodejs/cedar_wasm.js

@@ -142,6 +142,18 @@ function isAuthorized(call) {
 }
 exports.isAuthorized = isAuthorized;
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ * @param {PartialAuthorizationCall} call
+ * @returns {PartialAuthorizationAnswer}
+ */
+function isAuthorizedPartial(call) {
+    const ret = wasm.isAuthorizedPartial(call);
+    return ret;
+}
+exports.isAuthorizedPartial = isAuthorizedPartial;
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.

package/nodejs/cedar_wasm_bg.wasm.d.ts

@@ -5,10 +5,16 @@ export const getCedarSDKVersion: () => [number, number];
 export const getValidRequestEnvsPolicy: (a: any, b: any) => any;
 export const getValidRequestEnvsTemplate: (a: any, b: any) => any;
 export const getCedarVersion: () => [number, number];
+export const isAuthorized: (a: any) => any;
+export const isAuthorizedPartial: (a: any) => any;
+export const preparsePolicySet: (a: number, b: number, c: any) => any;
+export const preparseSchema: (a: number, b: number, c: any) => any;
+export const statefulIsAuthorized: (a: any) => any;
 export const checkParseContext: (a: any) => any;
 export const checkParseEntities: (a: any) => any;
 export const checkParsePolicySet: (a: any) => any;
 export const checkParseSchema: (a: any) => any;
+export const formatPolicies: (a: any) => any;
 export const validate: (a: any) => any;
 export const policySetTextToParts: (a: number, b: number) => any;
 export const policyToJson: (a: any) => any;
@@ -19,11 +25,6 @@ export const schemaToText: (a: any) => any;
 export const templateToJson: (a: any) => any;
 export const templateToText: (a: any) => any;
 export const getCedarLangVersion: () => [number, number];
-export const formatPolicies: (a: any) => any;
-export const isAuthorized: (a: any) => any;
-export const preparsePolicySet: (a: number, b: number, c: any) => any;
-export const preparseSchema: (a: number, b: number, c: any) => any;
-export const statefulIsAuthorized: (a: any) => any;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/nodejs/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cedar-policy/cedar-wasm",
   "description": "Wasm bindings and typescript types for Cedar lib",
-  "version": "4.9.0",
+  "version": "4.9.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@cedar-policy/cedar-wasm",
   "type": "module",
   "description": "Wasm bindings and typescript types for Cedar lib",
-  "version": "4.9.0",
+  "version": "4.9.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",

package/web/cedar_wasm.d.ts

@@ -80,6 +80,17 @@ export interface NamespaceDefinition<N> {
     annotations?: Annotations;
 }
 
+export interface PartialAuthorizationCall {
+    principal: EntityUid | null;
+    action: EntityUid | null;
+    resource: EntityUid | null;
+    context: Context;
+    schema?: Schema;
+    validateRequest?: boolean;
+    policies: PolicySet;
+    entities: Entities;
+}
+
 export interface PolicyJson {
     effect: Effect;
     principal: PrincipalConstraint;
@@ -105,6 +116,16 @@ export interface RecordType<N> {
     additionalAttributes?: boolean;
 }
 
+export interface ResidualResponse {
+    decision: Decision | null;
+    satisfied: PolicyId[];
+    errored: PolicyId[];
+    mayBeDetermining: PolicyId[];
+    mustBeDetermining: PolicyId[];
+    residuals: Record<string, PolicyJson>;
+    nontrivialResiduals: PolicyId[];
+}
+
 export interface Response {
     decision: Decision;
     diagnostics: Diagnostics;
@@ -212,6 +233,8 @@ export type FormattingAnswer = { type: "failure"; errors: DetailedError[] } | {
 
 export type GetValidRequestEnvsResult = { type: "success"; principals: string[]; actions: string[]; resources: string[] } | { type: "failure"; error: string };
 
+export type PartialAuthorizationAnswer = { type: "failure"; errors: DetailedError[]; warnings: DetailedError[] } | { type: "residuals"; response: ResidualResponse; warnings: DetailedError[] };
+
 export type PatternElem = "Wildcard" | { Literal: SmolStr };
 
 export type Policy = string | PolicyJson;
@@ -310,6 +333,12 @@ export function getValidRequestEnvsTemplate(t: Template, s: Schema): GetValidReq
  */
 export function isAuthorized(call: AuthorizationCall): AuthorizationAnswer;
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ */
+export function isAuthorizedPartial(call: PartialAuthorizationCall): PartialAuthorizationAnswer;
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.
@@ -398,10 +427,16 @@ export interface InitOutput {
     readonly getValidRequestEnvsPolicy: (a: any, b: any) => any;
     readonly getValidRequestEnvsTemplate: (a: any, b: any) => any;
     readonly getCedarVersion: () => [number, number];
+    readonly isAuthorized: (a: any) => any;
+    readonly isAuthorizedPartial: (a: any) => any;
+    readonly preparsePolicySet: (a: number, b: number, c: any) => any;
+    readonly preparseSchema: (a: number, b: number, c: any) => any;
+    readonly statefulIsAuthorized: (a: any) => any;
     readonly checkParseContext: (a: any) => any;
     readonly checkParseEntities: (a: any) => any;
     readonly checkParsePolicySet: (a: any) => any;
     readonly checkParseSchema: (a: any) => any;
+    readonly formatPolicies: (a: any) => any;
     readonly validate: (a: any) => any;
     readonly policySetTextToParts: (a: number, b: number) => any;
     readonly policyToJson: (a: any) => any;
@@ -412,11 +447,6 @@ export interface InitOutput {
     readonly templateToJson: (a: any) => any;
     readonly templateToText: (a: any) => any;
     readonly getCedarLangVersion: () => [number, number];
-    readonly formatPolicies: (a: any) => any;
-    readonly isAuthorized: (a: any) => any;
-    readonly preparsePolicySet: (a: number, b: number, c: any) => any;
-    readonly preparseSchema: (a: number, b: number, c: any) => any;
-    readonly statefulIsAuthorized: (a: any) => any;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/web/cedar_wasm.js

@@ -131,6 +131,17 @@ export function isAuthorized(call) {
     return ret;
 }
 
+/**
+ * Basic interface for partial evaluation, using [`AuthorizationCall`] and
+ * [`PartialAuthorizationAnswer`] types
+ * @param {PartialAuthorizationCall} call
+ * @returns {PartialAuthorizationAnswer}
+ */
+export function isAuthorizedPartial(call) {
+    const ret = wasm.isAuthorizedPartial(call);
+    return ret;
+}
+
 /**
  * Takes a `PolicySet` represented as string and return the policies
  * and templates split into vecs and sorted by id.

package/web/cedar_wasm_bg.wasm.d.ts

@@ -5,10 +5,16 @@ export const getCedarSDKVersion: () => [number, number];
 export const getValidRequestEnvsPolicy: (a: any, b: any) => any;
 export const getValidRequestEnvsTemplate: (a: any, b: any) => any;
 export const getCedarVersion: () => [number, number];
+export const isAuthorized: (a: any) => any;
+export const isAuthorizedPartial: (a: any) => any;
+export const preparsePolicySet: (a: number, b: number, c: any) => any;
+export const preparseSchema: (a: number, b: number, c: any) => any;
+export const statefulIsAuthorized: (a: any) => any;
 export const checkParseContext: (a: any) => any;
 export const checkParseEntities: (a: any) => any;
 export const checkParsePolicySet: (a: any) => any;
 export const checkParseSchema: (a: any) => any;
+export const formatPolicies: (a: any) => any;
 export const validate: (a: any) => any;
 export const policySetTextToParts: (a: number, b: number) => any;
 export const policyToJson: (a: any) => any;
@@ -19,11 +25,6 @@ export const schemaToText: (a: any) => any;
 export const templateToJson: (a: any) => any;
 export const templateToText: (a: any) => any;
 export const getCedarLangVersion: () => [number, number];
-export const formatPolicies: (a: any) => any;
-export const isAuthorized: (a: any) => any;
-export const preparsePolicySet: (a: number, b: number, c: any) => any;
-export const preparseSchema: (a: number, b: number, c: any) => any;
-export const statefulIsAuthorized: (a: any) => any;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/web/package.json

@@ -2,7 +2,7 @@
   "name": "@cedar-policy/cedar-wasm",
   "type": "module",
   "description": "Wasm bindings and typescript types for Cedar lib",
-  "version": "4.9.0",
+  "version": "4.9.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",