@o3co/auth.policy-verifier.cedar-wasm 0.12.0 → 0.13.0

package/README.md

@@ -1,5 +1,7 @@
 # @o3co/auth.policy-verifier.cedar-wasm
 
+Last updated: 2026-09-23
+
 The in-process Cedar engine for
 [`@o3co/auth.policy-verifier.cedar`](../cedar/README.md): the official
 [`@cedar-policy/cedar-wasm`](https://www.npmjs.com/package/@cedar-policy/cedar-wasm)
@@ -25,6 +27,34 @@ cannot have come from any other policies. It is the engine
 `requireConfirmedRevision = true` boots over; see cedar's [Policy
 revision](../cedar/README.md#policy-revision-which-policies-decided).
 
+## Responsibility
+
+**Role.** One engine behind cedar's `CedarEngine` port
+([`engine.mts`](../cedar/src/engine.mts)). It depends on
+`@o3co/auth.policy-verifier.cedar` and on `@cedar-policy/cedar-wasm`. No
+package in this repository depends on it (only the integration tests do); a
+deployment imports it.
+
+**Owns** ([`src/wasmEngine.mts`](src/wasmEngine.mts)):
+
+- Parse-checking each policy file at boot, so a syntax error names its file,
+  and compiling the set once into wasm memory under an id minted per load.
+- Evaluating each request against that compiled set, synchronously, and
+  rendering the bindings' answer as a `CedarDecision`.
+- Naming the revision of the source it compiled on every answer.
+- The exact version of `@cedar-policy/cedar-wasm`.
+- Registering itself as `"wasm"` when imported
+  ([`src/index.mts`](src/index.mts)).
+
+**Does not own.** Policy loading, the policy revision itself, the
+attribute-to-request mapping, what an answer means (the answer table,
+`onNoDeterminingPolicy`, the revision check) and which engine is selected. All
+of that is cedar's, and is identical whichever engine runs.
+
+**Why a separate package.** The cost below: about 12 MB of wasm instantiated
+on import. Kept out of cedar, it is carried only by a deployment that
+evaluates in-process; one that runs cedar's `http` engine never loads it.
+
 ## What it costs, and when to choose it
 
 The policy set is compiled once, at boot, into wasm memory; each request

package/dist/wasmEngine.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"wasmEngine.d.mts","sourceRoot":"","sources":["../src/wasmEngine.mts"],"names":[],"mappings":"AASA,OAAO,EAEN,KAAK,WAAW,EAGhB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,MAAM,kCAAkC,CAAC;AAE1C,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,EAAG,MAAe,CAAC;AAEtD,oFAAoF;AACpF,MAAM,WAAW,eAAgB,SAAQ,WAAW;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,sBAAsB,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAAC;CAC/C;AAKD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,eAAe,EAAE,eA0C7B,CAAC"}
+{"version":3,"file":"wasmEngine.d.mts","sourceRoot":"","sources":["../src/wasmEngine.mts"],"names":[],"mappings":"AAeA,OAAO,EAEN,KAAK,WAAW,EAGhB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,MAAM,kCAAkC,CAAC;AAE1C,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,EAAG,MAAe,CAAC;AAEtD,oFAAoF;AACpF,MAAM,WAAW,eAAgB,SAAQ,WAAW;IACnD,QAAQ,CAAC,IAAI,EAAE,OAAO,sBAAsB,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,kBAAkB,CAAC;CAC/C;AAKD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,eAAe,EAAE,eA0C7B,CAAC"}

package/dist/wasmEngine.mjs

@@ -1,5 +1,10 @@
 // SPDX-FileCopyrightText: 2026 1o1 Co. Ltd.
 // SPDX-License-Identifier: Apache-2.0
+/*
+ * The `wasm` engine: evaluates the policy set in process through the official
+ * `@cedar-policy/cedar-wasm` bindings, compiling it once at load and answering
+ * synchronously. The package index registers it.
+ */
 import { checkParsePolicySet, preparsePolicySet, statefulIsAuthorized, } from "@cedar-policy/cedar-wasm/nodejs";
 import { CedarEngineError, } from "@o3co/auth.policy-verifier.cedar";
 /** The name this engine registers under, and the config value that selects it. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@o3co/auth.policy-verifier.cedar-wasm",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "license": "Apache-2.0",
   "type": "module",
   "engines": {
@@ -25,14 +25,14 @@
     "directory": "packages/cedar-wasm"
   },
   "dependencies": {
-    "@cedar-policy/cedar-wasm": "4.12.0",
-    "@o3co/auth.policy-verifier.cedar": "0.12.0"
+    "@cedar-policy/cedar-wasm": "4.13.0",
+    "@o3co/auth.policy-verifier.cedar": "0.13.0"
   },
   "devDependencies": {
-    "@types/node": "^26.5.1",
-    "@vitest/coverage-v8": "^5.0.0",
-    "vitest": "^5.0.0",
-    "@o3co/auth.policy-verifier.core": "0.12.0"
+    "@types/node": "^26.6.2",
+    "@vitest/coverage-v8": "^5.0.1",
+    "vitest": "^5.0.1",
+    "@o3co/auth.policy-verifier.core": "0.13.0"
   },
   "scripts": {
     "prebuild": "rimraf dist",