@janssenproject/cedarling_wasm 0.0.404 → 0.0.405

package/README.md

@@ -53,7 +53,9 @@ async function main() {
   await initWasm(); // Initialize the WebAssembly module
 
   let instance = await init(BOOTSTRAP_CONFIG);
-  let result = await instance.authorize_unsigned(REQUEST_UNSIGNED);
+  // authorize calls take the request as a JSON string: it crosses the
+  // JS/WASM boundary as one string copy parsed by serde_json
+  let result = await instance.authorize_unsigned(JSON.stringify(REQUEST_UNSIGNED));
   console.log("result:", result);
 }
 main().catch(console.error);
@@ -110,12 +112,13 @@ export class Cedarling {
    * residual-dependent requests fail closed with `Decision::Deny` and surface
    * residual policy ids in `response.diagnostics.reason`.
    */
-  authorize_unsigned(request: any): Promise<AuthorizeResult>;
+  authorize_unsigned(request: string): Promise<AuthorizeResult>;
   /**
    * Authorize multi-issuer request.
    * Makes authorization decision based on multiple JWT tokens from different issuers
+   * The request is passed as a JSON string.
    */
-  authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
+  authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
   /**
    * Get logs and remove them from the storage.
    * Returns `Array` of `Map`
@@ -418,6 +421,10 @@ Cedarling supports multiple ways to load policy stores. **In WASM environments,
 // Option 1: Fetch policy store from URL (simple)
 const BOOTSTRAP_CONFIG = {
   CEDARLING_POLICY_STORE_URI: "https://example.com/policy-store.cjar",
+  // Optional: re-fetch every 60s and atomically swap on change.
+  // Default is 0 (load-once-at-startup). See "Refreshing the policy store"
+  // in docs/cedarling/reference/cedarling-properties.md for details.
+  CEDARLING_POLICY_STORE_REFRESH_INTERVAL: 60,
   // ... other config
 };
 const cedarling = await init(BOOTSTRAP_CONFIG);

package/cedarling_wasm.d.ts

@@ -65,9 +65,19 @@ export class Cedarling {
     [Symbol.dispose](): void;
     /**
      * Authorize multi-issuer request.
-     * Makes authorization decision based on multiple JWT tokens from different issuers
+     * Makes authorization decision based on multiple JWT tokens from different issuers.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`AuthorizeMultiIssuerRequest`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_multi_issuer(JSON.stringify(request));
+     * ```
      */
-    authorize_multi_issuer(request: any): Promise<MultiIssuerAuthorizeResult>;
+    authorize_multi_issuer(request: string): Promise<MultiIssuerAuthorizeResult>;
     /**
      * Authorize an unsigned request carrying an optional single principal.
      * Makes an authorization decision based on the [`RequestUnsigned`].
@@ -76,8 +86,18 @@ export class Cedarling {
      * partial evaluation; residual-dependent requests fail closed with
      * `Decision::Deny` and surface residual policy ids in
      * `response.diagnostics.reason`.
+     *
+     * # Arguments
+     *
+     * * `request` - JSON string representation of [`RequestUnsigned`].
+     *
+     * # Example
+     *
+     * ```javascript
+     * const result = await cedarling.authorize_unsigned(JSON.stringify(request));
+     * ```
      */
-    authorize_unsigned(request: any): Promise<AuthorizeResult>;
+    authorize_unsigned(request: string): Promise<AuthorizeResult>;
     /**
      * Clear all entries from the data store.
      *
@@ -536,13 +556,13 @@ export interface InitOutput {
     readonly __wbg_datastorestats_free: (a: number, b: number) => void;
     readonly __wbg_diagnostics_free: (a: number, b: number) => void;
     readonly __wbg_get_authorizeresult_decision: (a: number) => number;
-    readonly __wbg_get_authorizeresult_request_id: (a: number) => [number, number];
+    readonly __wbg_get_authorizeresult_request_id: (a: number, b: number) => void;
     readonly __wbg_get_authorizeresult_response: (a: number) => number;
     readonly __wbg_get_dataentry_access_count: (a: number) => bigint;
-    readonly __wbg_get_dataentry_created_at: (a: number) => [number, number];
-    readonly __wbg_get_dataentry_data_type: (a: number) => [number, number];
-    readonly __wbg_get_dataentry_expires_at: (a: number) => [number, number];
-    readonly __wbg_get_dataentry_key: (a: number) => [number, number];
+    readonly __wbg_get_dataentry_created_at: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_data_type: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_expires_at: (a: number, b: number) => void;
+    readonly __wbg_get_dataentry_key: (a: number, b: number) => void;
     readonly __wbg_get_datastorestats_avg_entry_size_bytes: (a: number) => number;
     readonly __wbg_get_datastorestats_capacity_usage_percent: (a: number) => number;
     readonly __wbg_get_datastorestats_entry_count: (a: number) => number;
@@ -570,63 +590,55 @@ export interface InitOutput {
     readonly __wbg_set_datastorestats_memory_alert_triggered: (a: number, b: number) => void;
     readonly __wbg_set_datastorestats_metrics_enabled: (a: number, b: number) => void;
     readonly __wbg_set_datastorestats_total_size_bytes: (a: number, b: number) => void;
-    readonly authorizeresult_json_string: (a: number) => [number, number];
+    readonly authorizeresult_json_string: (a: number, b: number) => void;
     readonly authorizeresultresponse_decision: (a: number) => number;
     readonly authorizeresultresponse_diagnostics: (a: number) => number;
-    readonly cedarling_authorize_multi_issuer: (a: number, b: any) => any;
-    readonly cedarling_authorize_unsigned: (a: number, b: any) => any;
-    readonly cedarling_clear_data_ctx: (a: number) => [number, number];
-    readonly cedarling_failed_trusted_issuer_ids: (a: number) => any;
-    readonly cedarling_get_data_ctx: (a: number, b: number, c: number) => [number, number, number];
-    readonly cedarling_get_data_entry_ctx: (a: number, b: number, c: number) => [number, number, number];
-    readonly cedarling_get_log_by_id: (a: number, b: number, c: number) => [number, number, number];
-    readonly cedarling_get_log_ids: (a: number) => any;
-    readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
-    readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly cedarling_get_stats_ctx: (a: number) => [number, number, number];
+    readonly cedarling_authorize_multi_issuer: (a: number, b: number, c: number) => number;
+    readonly cedarling_authorize_unsigned: (a: number, b: number, c: number) => number;
+    readonly cedarling_clear_data_ctx: (a: number, b: number) => void;
+    readonly cedarling_failed_trusted_issuer_ids: (a: number) => number;
+    readonly cedarling_get_data_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_data_entry_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_log_by_id: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_log_ids: (a: number) => number;
+    readonly cedarling_get_logs_by_request_id: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_get_logs_by_request_id_and_tag: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly cedarling_get_stats_ctx: (a: number, b: number) => void;
     readonly cedarling_is_trusted_issuer_loaded_by_iss: (a: number, b: number, c: number) => number;
     readonly cedarling_is_trusted_issuer_loaded_by_name: (a: number, b: number, c: number) => number;
-    readonly cedarling_list_data_ctx: (a: number) => [number, number, number];
-    readonly cedarling_loaded_trusted_issuer_ids: (a: number) => any;
+    readonly cedarling_list_data_ctx: (a: number, b: number) => void;
+    readonly cedarling_loaded_trusted_issuer_ids: (a: number) => number;
     readonly cedarling_loaded_trusted_issuers_count: (a: number) => number;
-    readonly cedarling_new: (a: any) => any;
-    readonly cedarling_new_from_map: (a: any) => any;
-    readonly cedarling_pop_logs: (a: number) => [number, number, number];
-    readonly cedarling_push_data_ctx: (a: number, b: number, c: number, d: any, e: number, f: bigint) => [number, number];
-    readonly cedarling_remove_data_ctx: (a: number, b: number, c: number) => [number, number, number];
-    readonly cedarling_shut_down: (a: number) => any;
+    readonly cedarling_new: (a: number) => number;
+    readonly cedarling_new_from_map: (a: number) => number;
+    readonly cedarling_pop_logs: (a: number, b: number) => void;
+    readonly cedarling_push_data_ctx: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => void;
+    readonly cedarling_remove_data_ctx: (a: number, b: number, c: number, d: number) => void;
+    readonly cedarling_shut_down: (a: number) => number;
     readonly cedarling_total_issuers: (a: number) => number;
-    readonly dataentry_json_string: (a: number) => [number, number];
-    readonly dataentry_value: (a: number) => [number, number, number];
-    readonly datastorestats_json_string: (a: number) => [number, number];
-    readonly diagnostics_errors: (a: number) => [number, number];
-    readonly diagnostics_reason: (a: number) => [number, number];
-    readonly init: (a: any) => any;
-    readonly init_from_archive_bytes: (a: any, b: any) => any;
-    readonly multiissuerauthorizeresult_json_string: (a: number) => [number, number];
-    readonly policyevaluationerror_error: (a: number) => [number, number];
-    readonly policyevaluationerror_id: (a: number) => [number, number];
-    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
-    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
-    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
-    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number) => [number, number];
-    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
+    readonly dataentry_json_string: (a: number, b: number) => void;
+    readonly dataentry_value: (a: number, b: number) => void;
+    readonly datastorestats_json_string: (a: number, b: number) => void;
+    readonly diagnostics_errors: (a: number, b: number) => void;
+    readonly diagnostics_reason: (a: number, b: number) => void;
+    readonly init: (a: number) => number;
+    readonly init_from_archive_bytes: (a: number, b: number) => number;
+    readonly multiissuerauthorizeresult_json_string: (a: number, b: number) => void;
+    readonly policyevaluationerror_error: (a: number, b: number) => void;
+    readonly policyevaluationerror_id: (a: number, b: number) => void;
     readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
     readonly __wbg_intounderlyingsink_free: (a: number, b: number) => void;
     readonly __wbg_intounderlyingsource_free: (a: number, b: number) => void;
     readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
     readonly intounderlyingbytesource_cancel: (a: number) => void;
-    readonly intounderlyingbytesource_pull: (a: number, b: any) => any;
-    readonly intounderlyingbytesource_start: (a: number, b: any) => void;
+    readonly intounderlyingbytesource_pull: (a: number, b: number) => number;
+    readonly intounderlyingbytesource_start: (a: number, b: number) => void;
     readonly intounderlyingbytesource_type: (a: number) => number;
-    readonly intounderlyingsink_abort: (a: number, b: any) => any;
-    readonly intounderlyingsink_close: (a: number) => any;
-    readonly intounderlyingsink_write: (a: number, b: any) => any;
+    readonly intounderlyingsink_abort: (a: number, b: number) => number;
+    readonly intounderlyingsink_close: (a: number) => number;
+    readonly intounderlyingsink_write: (a: number, b: number) => number;
     readonly intounderlyingsource_cancel: (a: number) => void;
-    readonly intounderlyingsource_pull: (a: number, b: any) => any;
+    readonly intounderlyingsource_pull: (a: number, b: number) => number;
     readonly rust_zstd_wasm_shim_calloc: (a: number, b: number) => number;
     readonly rust_zstd_wasm_shim_free: (a: number) => void;
     readonly rust_zstd_wasm_shim_malloc: (a: number) => number;
@@ -635,22 +647,24 @@ export interface InitOutput {
     readonly rust_zstd_wasm_shim_memmove: (a: number, b: number, c: number) => number;
     readonly rust_zstd_wasm_shim_memset: (a: number, b: number, c: number) => number;
     readonly rust_zstd_wasm_shim_qsort: (a: number, b: number, c: number, d: number) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__he0d1df4f45812a75: (a: number, b: number, c: any) => [number, number];
-    readonly wasm_bindgen__convert__closures_____invoke__h03fb46086606eb61: (a: number, b: number, c: any, d: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hdd4256d54acb8ff1: (a: number, b: number, c: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hc7b60e1a5fd69b6e: (a: number, b: number) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__h6f2d88ffbcba67ef: (a: number, b: number) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__h32cbe4603be323e5: (a: number, b: number) => void;
-    readonly __wbindgen_malloc: (a: number, b: number) => number;
-    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
-    readonly __wbindgen_exn_store: (a: number) => void;
-    readonly __externref_table_alloc: () => number;
-    readonly __wbindgen_externrefs: WebAssembly.Table;
-    readonly __wbindgen_destroy_closure: (a: number, b: number) => void;
-    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
-    readonly __externref_table_dealloc: (a: number) => void;
-    readonly __externref_drop_slice: (a: number, b: number) => void;
-    readonly __wbindgen_start: () => void;
+    readonly __wbg_get_multiissuerauthorizeresult_decision: (a: number) => number;
+    readonly __wbg_set_multiissuerauthorizeresult_response: (a: number, b: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_request_id: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_multiissuerauthorizeresult_decision: (a: number, b: number) => void;
+    readonly __wbg_get_multiissuerauthorizeresult_response: (a: number) => number;
+    readonly __wbg_get_multiissuerauthorizeresult_request_id: (a: number, b: number) => void;
+    readonly __wbg_multiissuerauthorizeresult_free: (a: number, b: number) => void;
+    readonly cedarling_get_logs_by_tag: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_8728: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_8782: (a: number, b: number, c: number, d: number) => void;
+    readonly __wasm_bindgen_func_elem_12191: (a: number, b: number, c: number) => void;
+    readonly __wasm_bindgen_func_elem_8563: (a: number, b: number) => void;
+    readonly __wbindgen_export: (a: number, b: number) => number;
+    readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_export3: (a: number) => void;
+    readonly __wbindgen_export4: (a: number, b: number) => void;
+    readonly __wbindgen_add_to_stack_pointer: (a: number) => number;
+    readonly __wbindgen_export5: (a: number, b: number, c: number) => void;
 }
 
 export type SyncInitInput = BufferSource | WebAssembly.Module;