@visiq/core-wasm 0.1.8 → 0.1.10

package/index.d.ts

@@ -53,6 +53,25 @@ export interface CoreNoCoverage {
 }
 export type SessionEvalState = Record<string, unknown>;
 
+/**
+ * `input.session` IS TOTAL AT ALL THREE ENTRYPOINTS BELOW (since 0.1.10).
+ *
+ * Whatever a caller supplies — absent, null, a bare `{}`, a partial object, or a
+ * type-confused leaf at any depth — is HYDRATED into the SSOT-shaped session state
+ * before evaluation. This matters for exactly one class of rule and it is the class
+ * that grants authority: a relational identity binding
+ * (`not input.normalized.write.subject_id in input.session.identity.attested_subjects`)
+ * cannot be satisfied against an ABSENT right operand, because the relational hard stop
+ * refuses a non-array before negation — so before hydration the deny arm did not fire
+ * and a confused-deputy action was PERMITTED. Hydration degrades an out-of-shape leaf to
+ * the EMPTY set, which is the protective direction, and preserves a well-formed attested
+ * set unchanged. A caller therefore does NOT need to pre-materialize the session, and a
+ * partial one can no longer authorize.
+ *
+ * Proven against the COMMITTED wasm — the bytes in this package, not just the Rust
+ * source — by this package's own session-materialization gate, a required CI
+ * context. A correct fix that was never rebuilt reds there rather than shipping.
+ */
 export function evaluate(event: unknown, bundle: unknown): CoreDecision;
 export function evaluateUnifiedRulesRaw(
   op: 'action' | 'retrieval' | 'delegation',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visiq/core-wasm",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "VisIQ governance core for Node.js — the one compiled Rust rule engine behind every VisIQ SDK, prebuilt to WebAssembly; evaluate(event, bundle) takes plain objects and synchronously returns a decision object.",
   "type": "commonjs",
   "main": "index.js",
@@ -8,7 +8,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/VISIQ-LABS/xy.git",
+    "url": "https://github.com/VISIQ-LABS/visiq-platform.git",
     "directory": "packages/core-wasm"
   },
   "homepage": "https://docs.visiqlabs.com",