@janssenproject/cedarling_wasm 0.0.369 → 0.0.370

package/README.md

@@ -104,8 +104,11 @@ export class Cedarling {
    */
   static new_from_map(config: Map<any, any>): Promise<Cedarling>;
   /**
-   * Authorize request for unsigned principals.
-   * makes authorization decision based on the [`RequestUnsigned`]
+   * Authorize an unsigned request carrying an optional single principal.
+   * Makes an authorization decision based on the [`RequestUnsigned`].
+   * When `principal` is omitted / `null` the core uses Cedar partial evaluation;
+   * residual-dependent requests fail closed with `Decision::Deny` and surface
+   * residual policy ids in `response.diagnostics.reason`.
    */
   authorize_unsigned(request: any): Promise<AuthorizeResult>;
   /**
@@ -261,13 +264,9 @@ export class AuthorizeResult {
    */
   json_string(): string;
   /**
-   * Get authorization responses for all principals
+   * Cedar authorization response for the request.
    */
-  principals: Record<string, AuthorizeResultResponse>;
-  /**
-   * Get result for a specific principal
-   */
-  principal(principal: string): AuthorizeResultResponse | undefined;
+  response: AuthorizeResultResponse;
   /**
    * Result of authorization
    * true means `ALLOW`

package/cedarling_wasm.d.ts

@@ -20,7 +20,6 @@ export class AuthorizeResult {
      * Convert `AuthorizeResult` to json string value
      */
     json_string(): string;
-    principal(principal: string): AuthorizeResultResponse | undefined;
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -33,6 +32,10 @@ export class AuthorizeResult {
      * Request ID of the authorization request
      */
     request_id: string;
+    /**
+     * Cedar authorization response for the request.
+     */
+    response: AuthorizeResultResponse;
 }
 
 /**
@@ -66,8 +69,13 @@ export class Cedarling {
      */
     authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
     /**
-     * Authorize request for unsigned principals.
-     * makes authorization decision based on the [`RequestUnsigned`]
+     * Authorize an unsigned request carrying an optional single principal.
+     * Makes an authorization decision based on the [`RequestUnsigned`].
+     *
+     * When `principal` is omitted / `null` on the JS side the core uses Cedar
+     * partial evaluation; residual-dependent requests fail closed with
+     * `Decision::Deny` and surface residual policy ids in
+     * `response.diagnostics.reason`.
      */
     authorize_unsigned(request: any): Promise<AuthorizeResult>;
     /**
@@ -522,13 +530,7 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
     readonly __wbg_cedarling_free: (a: number, b: number) => void;
-    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
-    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
-    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
     readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number) => [number, number];
-    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
     readonly multiissuerauthorizeresult_json_string: (a: number) => [number, number];
     readonly init: (a: any) => any;
     readonly init_from_archive_bytes: (a: any, b: any) => any;
@@ -557,12 +559,13 @@ export interface InitOutput {
     readonly cedarling_loaded_trusted_issuer_ids: (a: number) => any;
     readonly cedarling_failed_trusted_issuer_ids: (a: number) => any;
     readonly __wbg_authorizeresult_free: (a: number, b: number) => void;
+    readonly __wbg_get_authorizeresult_response: (a: number) => number;
+    readonly __wbg_set_authorizeresult_response: (a: number, b: number) => void;
     readonly __wbg_get_authorizeresult_decision: (a: number) => number;
     readonly __wbg_set_authorizeresult_decision: (a: number, b: number) => void;
     readonly __wbg_get_authorizeresult_request_id: (a: number) => [number, number];
     readonly __wbg_set_authorizeresult_request_id: (a: number, b: number, c: number) => void;
     readonly authorizeresult_json_string: (a: number) => [number, number];
-    readonly authorizeresult_principal: (a: number, b: number, c: number) => number;
     readonly __wbg_authorizeresultresponse_free: (a: number, b: number) => void;
     readonly authorizeresultresponse_decision: (a: number) => number;
     readonly authorizeresultresponse_diagnostics: (a: number) => number;
@@ -605,6 +608,12 @@ export interface InitOutput {
     readonly __wbg_get_datastorestats_memory_alert_triggered: (a: number) => number;
     readonly __wbg_set_datastorestats_memory_alert_triggered: (a: number, b: number) => void;
     readonly datastorestats_json_string: (a: number) => [number, number];
+    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
+    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
+    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
+    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
+    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
     readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
     readonly intounderlyingbytesource_type: (a: number) => number;
     readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
@@ -629,7 +638,7 @@ export interface InitOutput {
     readonly wasm_bindgen__convert__closures_____invoke__h10797b50422db1d9: (a: number, b: number, c: any) => [number, number];
     readonly wasm_bindgen__convert__closures_____invoke__h034cae6b5dd12778: (a: number, b: number, c: any, d: any) => void;
     readonly wasm_bindgen__convert__closures_____invoke__hc1f7fa9b168b3277: (a: number, b: number, c: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb: (a: number, b: number) => void;
+    readonly wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66: (a: number, b: number) => void;
     readonly wasm_bindgen__convert__closures_____invoke__h1de102d8396d84e7: (a: number, b: number) => void;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;

package/cedarling_wasm.js

@@ -38,16 +38,6 @@ export class AuthorizeResult {
             wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
         }
     }
-    /**
-     * @param {string} principal
-     * @returns {AuthorizeResultResponse | undefined}
-     */
-    principal(principal) {
-        const ptr0 = passStringToWasm0(principal, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.authorizeresult_principal(this.__wbg_ptr, ptr0, len0);
-        return ret === 0 ? undefined : AuthorizeResultResponse.__wrap(ret);
-    }
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -76,6 +66,14 @@ export class AuthorizeResult {
             wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
         }
     }
+    /**
+     * Cedar authorization response for the request.
+     * @returns {AuthorizeResultResponse}
+     */
+    get response() {
+        const ret = wasm.__wbg_get_authorizeresult_response(this.__wbg_ptr);
+        return AuthorizeResultResponse.__wrap(ret);
+    }
     /**
      * Result of authorization
      * true means `ALLOW`
@@ -96,6 +94,15 @@ export class AuthorizeResult {
         const len0 = WASM_VECTOR_LEN;
         wasm.__wbg_set_authorizeresult_request_id(this.__wbg_ptr, ptr0, len0);
     }
+    /**
+     * Cedar authorization response for the request.
+     * @param {AuthorizeResultResponse} arg0
+     */
+    set response(arg0) {
+        _assertClass(arg0, AuthorizeResultResponse);
+        var ptr0 = arg0.__destroy_into_raw();
+        wasm.__wbg_set_authorizeresult_response(this.__wbg_ptr, ptr0);
+    }
 }
 if (Symbol.dispose) AuthorizeResult.prototype[Symbol.dispose] = AuthorizeResult.prototype.free;
 
@@ -172,8 +179,13 @@ export class Cedarling {
         return ret;
     }
     /**
-     * Authorize request for unsigned principals.
-     * makes authorization decision based on the [`RequestUnsigned`]
+     * Authorize an unsigned request carrying an optional single principal.
+     * Makes an authorization decision based on the [`RequestUnsigned`].
+     *
+     * When `principal` is omitted / `null` on the JS side the core uses Cedar
+     * partial evaluation; residual-dependent requests fail closed with
+     * `Decision::Deny` and surface residual policy ids in
+     * `response.diagnostics.reason`.
      * @param {any} request
      * @returns {Promise<AuthorizeResult>}
      */
@@ -1877,22 +1889,22 @@ function __wbg_get_imports() {
             console.warn(...arg0);
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2231, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2202, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h10797b50422db1d9);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 656, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 631, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hc1f7fa9b168b3277);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 611, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 587, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 772, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 748, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1de102d8396d84e7);
             return ret;
         },
@@ -1937,8 +1949,8 @@ function __wbg_get_imports() {
     };
 }
 
-function wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb(arg0, arg1) {
-    wasm.wasm_bindgen__convert__closures_____invoke__h0cd1ac4ce5b742bb(arg0, arg1);
+function wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66(arg0, arg1) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h6f3d4b30895d4f66(arg0, arg1);
 }
 
 function wasm_bindgen__convert__closures_____invoke__h1de102d8396d84e7(arg0, arg1) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@janssenproject/cedarling_wasm",
   "type": "module",
   "description": "The Cedarling is a performant local authorization service that runs the Rust Cedar Engine",
-  "version": "0.0.369",
+  "version": "0.0.370",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",