@naylence/runtime 0.4.2 → 0.4.3

package/dist/browser/index.cjs

@@ -525,12 +525,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 let initialized = false;
 const runtimePlugin = {
@@ -21926,6 +21926,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$1 = 'FAME_JWT_ALGORITHM';
@@ -21933,18 +21934,21 @@ const ENV_VAR_JWT_AUDIENCE$2 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -21989,11 +21993,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: factory.Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: factory.Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -22007,6 +22022,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -22082,6 +22100,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -22097,6 +22117,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/browser/index.mjs

@@ -523,12 +523,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 let initialized = false;
 const runtimePlugin = {
@@ -21924,6 +21924,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$1 = 'FAME_JWT_ALGORITHM';
@@ -21931,18 +21932,21 @@ const ENV_VAR_JWT_AUDIENCE$2 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -21987,11 +21991,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -22005,6 +22020,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -22080,6 +22098,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -22095,6 +22115,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/cjs/naylence/fame/security/auth/authorization-profile-factory.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationProfileFactory = exports.FACTORY_META = exports.ENV_VAR_HMAC_SECRET = exports.ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE = exports.ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER = exports.ENV_VAR_TRUSTED_CLIENT_SCOPE = exports.ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY = exports.ENV_VAR_JWKS_URL = exports.ENV_VAR_JWT_AUDIENCE = exports.ENV_VAR_JWT_ALGORITHM = exports.ENV_VAR_JWT_TRUSTED_ISSUER = exports.PROFILE_NAME_NOOP = exports.PROFILE_NAME_OAUTH2_CALLBACK = exports.PROFILE_NAME_OAUTH2_GATED = exports.PROFILE_NAME_OAUTH2 = exports.PROFILE_NAME_DEFAULT = void 0;
+exports.AuthorizationProfileFactory = exports.FACTORY_META = exports.ENV_VAR_HMAC_SECRET = exports.ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE = exports.ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER = exports.ENV_VAR_AUTH_POLICY_FORMAT = exports.ENV_VAR_AUTH_POLICY_PATH = exports.ENV_VAR_TRUSTED_CLIENT_SCOPE = exports.ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY = exports.ENV_VAR_JWKS_URL = exports.ENV_VAR_JWT_AUDIENCE = exports.ENV_VAR_JWT_ALGORITHM = exports.ENV_VAR_JWT_TRUSTED_ISSUER = exports.PROFILE_NAME_NOOP = exports.PROFILE_NAME_POLICY_LOCALFILE = exports.PROFILE_NAME_OAUTH2_CALLBACK = exports.PROFILE_NAME_OAUTH2_GATED = exports.PROFILE_NAME_OAUTH2 = exports.PROFILE_NAME_DEFAULT = void 0;
 const factory_1 = require("@naylence/factory");
 const logging_js_1 = require("../../util/logging.js");
 const authorizer_factory_js_1 = require("./authorizer-factory.js");
@@ -9,6 +9,7 @@ exports.PROFILE_NAME_DEFAULT = 'jwt';
 exports.PROFILE_NAME_OAUTH2 = 'oauth2';
 exports.PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 exports.PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+exports.PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 exports.PROFILE_NAME_NOOP = 'noop';
 exports.ENV_VAR_JWT_TRUSTED_ISSUER = 'FAME_JWT_TRUSTED_ISSUER';
 exports.ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
@@ -16,18 +17,21 @@ exports.ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
 exports.ENV_VAR_JWKS_URL = 'FAME_JWKS_URL';
 exports.ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 exports.ENV_VAR_TRUSTED_CLIENT_SCOPE = 'FAME_TRUSTED_CLIENT_SCOPE';
+exports.ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+exports.ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 exports.ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 exports.ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 exports.ENV_VAR_HMAC_SECRET = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: factory_1.Expressions.env(exports.ENV_VAR_JWKS_URL),
+    issuer: factory_1.Expressions.env(exports.ENV_VAR_JWT_TRUSTED_ISSUER),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: factory_1.Expressions.env(exports.ENV_VAR_JWKS_URL),
-        issuer: factory_1.Expressions.env(exports.ENV_VAR_JWT_TRUSTED_ISSUER),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -72,11 +76,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: factory_1.Expressions.env(exports.ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: factory_1.Expressions.env(exports.ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP = {
     [exports.PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [exports.PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [exports.PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [exports.PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [exports.PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [exports.PROFILE_NAME_NOOP]: NOOP_PROFILE,
 };
 const PROFILE_ALIASES = {
@@ -90,6 +105,9 @@ const PROFILE_ALIASES = {
     'oauth2-callback': exports.PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: exports.PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': exports.PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: exports.PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': exports.PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: exports.PROFILE_NAME_POLICY_LOCALFILE,
     noop: exports.PROFILE_NAME_NOOP,
     'no-op': exports.PROFILE_NAME_NOOP,
     no_op: exports.PROFILE_NAME_NOOP,

package/dist/cjs/version.js

@@ -1,10 +1,10 @@
 "use strict";
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 /**
  * The package version, injected at build time.
  * @internal
  */
-exports.VERSION = '0.4.2';
+exports.VERSION = '0.4.3';

package/dist/esm/naylence/fame/security/auth/authorization-profile-factory.js

@@ -6,6 +6,7 @@ export const PROFILE_NAME_DEFAULT = 'jwt';
 export const PROFILE_NAME_OAUTH2 = 'oauth2';
 export const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 export const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+export const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 export const PROFILE_NAME_NOOP = 'noop';
 export const ENV_VAR_JWT_TRUSTED_ISSUER = 'FAME_JWT_TRUSTED_ISSUER';
 export const ENV_VAR_JWT_ALGORITHM = 'FAME_JWT_ALGORITHM';
@@ -13,18 +14,21 @@ export const ENV_VAR_JWT_AUDIENCE = 'FAME_JWT_AUDIENCE';
 export const ENV_VAR_JWKS_URL = 'FAME_JWKS_URL';
 export const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 export const ENV_VAR_TRUSTED_CLIENT_SCOPE = 'FAME_TRUSTED_CLIENT_SCOPE';
+export const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+export const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 export const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 export const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 export const ENV_VAR_HMAC_SECRET = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: Expressions.env(ENV_VAR_JWKS_URL),
+    issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: Expressions.env(ENV_VAR_JWKS_URL),
-        issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -69,11 +73,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP]: NOOP_PROFILE,
 };
 const PROFILE_ALIASES = {
@@ -87,6 +102,9 @@ const PROFILE_ALIASES = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP,
     'no-op': PROFILE_NAME_NOOP,
     no_op: PROFILE_NAME_NOOP,

package/dist/esm/version.js

@@ -1,7 +1,7 @@
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-export const VERSION = '0.4.2';
+export const VERSION = '0.4.3';

package/dist/node/index.cjs

@@ -14,12 +14,12 @@ var fastify = require('fastify');
 var websocketPlugin = require('@fastify/websocket');
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -21813,6 +21813,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$1 = 'FAME_JWT_ALGORITHM';
@@ -21820,18 +21821,21 @@ const ENV_VAR_JWT_AUDIENCE$2 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -21876,11 +21880,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: factory.Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: factory.Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -21894,6 +21909,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -21969,6 +21987,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -21984,6 +22004,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/node/index.mjs

@@ -13,12 +13,12 @@ import fastify from 'fastify';
 import websocketPlugin from '@fastify/websocket';
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -21812,6 +21812,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$1 = 'FAME_JWT_ALGORITHM';
@@ -21819,18 +21820,21 @@ const ENV_VAR_JWT_AUDIENCE$2 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -21875,11 +21879,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -21893,6 +21908,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -21968,6 +21986,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -21983,6 +22003,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/node/node.cjs

@@ -4436,12 +4436,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 let initialized = false;
 const runtimePlugin = {
@@ -23018,6 +23018,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$3 = 'FAME_JWT_ALGORITHM';
@@ -23025,18 +23026,21 @@ const ENV_VAR_JWT_AUDIENCE$3 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: factory.Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: factory.Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -23081,11 +23085,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: factory.Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: factory.Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -23099,6 +23114,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -23174,6 +23192,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -23189,6 +23209,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/node/node.mjs

@@ -4435,12 +4435,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.2
+// Generated from package.json version: 0.4.3
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.2';
+const VERSION = '0.4.3';
 
 let initialized = false;
 const runtimePlugin = {
@@ -23017,6 +23017,7 @@ const PROFILE_NAME_DEFAULT = 'jwt';
 const PROFILE_NAME_OAUTH2 = 'oauth2';
 const PROFILE_NAME_OAUTH2_GATED = 'oauth2-gated';
 const PROFILE_NAME_OAUTH2_CALLBACK = 'oauth2-callback';
+const PROFILE_NAME_POLICY_LOCALFILE = 'policy-localfile';
 const PROFILE_NAME_NOOP$2 = 'noop';
 const ENV_VAR_JWT_TRUSTED_ISSUER$1 = 'FAME_JWT_TRUSTED_ISSUER';
 const ENV_VAR_JWT_ALGORITHM$3 = 'FAME_JWT_ALGORITHM';
@@ -23024,18 +23025,21 @@ const ENV_VAR_JWT_AUDIENCE$3 = 'FAME_JWT_AUDIENCE';
 const ENV_VAR_JWKS_URL$1 = 'FAME_JWKS_URL';
 const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1 = 'FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY';
 const ENV_VAR_TRUSTED_CLIENT_SCOPE$1 = 'FAME_TRUSTED_CLIENT_SCOPE';
+const ENV_VAR_AUTH_POLICY_PATH = 'FAME_AUTH_POLICY_PATH';
+const ENV_VAR_AUTH_POLICY_FORMAT = 'FAME_AUTH_POLICY_FORMAT';
 const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER$1 = 'FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER';
 const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE$1 = 'FAME_JWT_REVERSE_AUTH_AUDIENCE';
 const ENV_VAR_HMAC_SECRET$1 = 'FAME_HMAC_SECRET';
 const DEFAULT_REVERSE_AUTH_ISSUER = 'reverse-auth.naylence.ai';
 const DEFAULT_REVERSE_AUTH_AUDIENCE = 'dev.naylence.ai';
+const DEFAULT_VERIFIER_CONFIG = {
+    type: 'JWKSJWTTokenVerifier',
+    jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
+    issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
+};
 const DEFAULT_PROFILE = {
     type: 'DefaultAuthorizer',
-    verifier: {
-        type: 'JWKSJWTTokenVerifier',
-        jwks_url: Expressions.env(ENV_VAR_JWKS_URL$1),
-        issuer: Expressions.env(ENV_VAR_JWT_TRUSTED_ISSUER$1),
-    },
+    verifier: DEFAULT_VERIFIER_CONFIG,
 };
 const OAUTH2_PROFILE = {
     type: 'OAuth2Authorizer',
@@ -23080,11 +23084,22 @@ const OAUTH2_CALLBACK_PROFILE = {
 const NOOP_PROFILE$2 = {
     type: 'NoopAuthorizer',
 };
+const DEFAULT_POLICY_SOURCE = {
+    type: 'LocalFileAuthorizationPolicySource',
+    path: Expressions.env(ENV_VAR_AUTH_POLICY_PATH, './auth-policy.yaml'),
+    format: Expressions.env(ENV_VAR_AUTH_POLICY_FORMAT, 'auto'),
+};
+const POLICY_LOCALFILE_PROFILE = {
+    type: 'PolicyAuthorizer',
+    verifier: DEFAULT_VERIFIER_CONFIG,
+    policySource: DEFAULT_POLICY_SOURCE,
+};
 const PROFILE_MAP$5 = {
     [PROFILE_NAME_DEFAULT]: DEFAULT_PROFILE,
     [PROFILE_NAME_OAUTH2]: OAUTH2_PROFILE,
     [PROFILE_NAME_OAUTH2_GATED]: OAUTH2_GATED_PROFILE,
     [PROFILE_NAME_OAUTH2_CALLBACK]: OAUTH2_CALLBACK_PROFILE,
+    [PROFILE_NAME_POLICY_LOCALFILE]: POLICY_LOCALFILE_PROFILE,
     [PROFILE_NAME_NOOP$2]: NOOP_PROFILE$2,
 };
 const PROFILE_ALIASES$1 = {
@@ -23098,6 +23113,9 @@ const PROFILE_ALIASES$1 = {
     'oauth2-callback': PROFILE_NAME_OAUTH2_CALLBACK,
     oauth2_callback: PROFILE_NAME_OAUTH2_CALLBACK,
     'reverse-auth': PROFILE_NAME_OAUTH2_CALLBACK,
+    policy: PROFILE_NAME_POLICY_LOCALFILE,
+    'policy-localfile': PROFILE_NAME_POLICY_LOCALFILE,
+    policy_localfile: PROFILE_NAME_POLICY_LOCALFILE,
     noop: PROFILE_NAME_NOOP$2,
     'no-op': PROFILE_NAME_NOOP$2,
     no_op: PROFILE_NAME_NOOP$2,
@@ -23173,6 +23191,8 @@ function deepClone$4(value) {
 var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     __proto__: null,
     AuthorizationProfileFactory: AuthorizationProfileFactory,
+    ENV_VAR_AUTH_POLICY_FORMAT: ENV_VAR_AUTH_POLICY_FORMAT,
+    ENV_VAR_AUTH_POLICY_PATH: ENV_VAR_AUTH_POLICY_PATH,
     ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY: ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY$1,
     ENV_VAR_HMAC_SECRET: ENV_VAR_HMAC_SECRET$1,
     ENV_VAR_JWKS_URL: ENV_VAR_JWKS_URL$1,
@@ -23188,6 +23208,7 @@ var authorizationProfileFactory = /*#__PURE__*/Object.freeze({
     PROFILE_NAME_OAUTH2: PROFILE_NAME_OAUTH2,
     PROFILE_NAME_OAUTH2_CALLBACK: PROFILE_NAME_OAUTH2_CALLBACK,
     PROFILE_NAME_OAUTH2_GATED: PROFILE_NAME_OAUTH2_GATED,
+    PROFILE_NAME_POLICY_LOCALFILE: PROFILE_NAME_POLICY_LOCALFILE,
     default: AuthorizationProfileFactory
 });
 

package/dist/types/naylence/fame/security/auth/authorization-profile-factory.d.ts

@@ -8,6 +8,7 @@ export declare const PROFILE_NAME_DEFAULT = "jwt";
 export declare const PROFILE_NAME_OAUTH2 = "oauth2";
 export declare const PROFILE_NAME_OAUTH2_GATED = "oauth2-gated";
 export declare const PROFILE_NAME_OAUTH2_CALLBACK = "oauth2-callback";
+export declare const PROFILE_NAME_POLICY_LOCALFILE = "policy-localfile";
 export declare const PROFILE_NAME_NOOP = "noop";
 export declare const ENV_VAR_JWT_TRUSTED_ISSUER = "FAME_JWT_TRUSTED_ISSUER";
 export declare const ENV_VAR_JWT_ALGORITHM = "FAME_JWT_ALGORITHM";
@@ -15,6 +16,8 @@ export declare const ENV_VAR_JWT_AUDIENCE = "FAME_JWT_AUDIENCE";
 export declare const ENV_VAR_JWKS_URL = "FAME_JWKS_URL";
 export declare const ENV_VAR_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY = "FAME_ENFORCE_TOKEN_SUBJECT_NODE_IDENTITY";
 export declare const ENV_VAR_TRUSTED_CLIENT_SCOPE = "FAME_TRUSTED_CLIENT_SCOPE";
+export declare const ENV_VAR_AUTH_POLICY_PATH = "FAME_AUTH_POLICY_PATH";
+export declare const ENV_VAR_AUTH_POLICY_FORMAT = "FAME_AUTH_POLICY_FORMAT";
 export declare const ENV_VAR_JWT_REVERSE_AUTH_TRUSTED_ISSUER = "FAME_JWT_REVERSE_AUTH_TRUSTED_ISSUER";
 export declare const ENV_VAR_JWT_REVERSE_AUTH_AUDIENCE = "FAME_JWT_REVERSE_AUTH_AUDIENCE";
 export declare const ENV_VAR_HMAC_SECRET = "FAME_HMAC_SECRET";

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.4.2";
+export declare const VERSION = "0.4.3";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naylence/runtime",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "type": "module",
   "description": "Naylence Runtime - Complete TypeScript runtime",
   "author": "Naylence Dev <naylencedev@gmail.com>",