Struct WasmPolicyStore 

pub struct WasmPolicyStore { /* private fields */ }

PolicyStore — situation-matching authorization + change-cost policies. Wraps agentstategraph_policy::PolicyStore.

Construct from a WasmAgentStateGraph, a path prefix (e.g. /policies), and an agent id.

Implementations

impl WasmPolicyStore

pub fn new( asg: &WasmAgentStateGraph, prefix: &str, agent_id: &str, ) -> WasmPolicyStore

Create a PolicyStore bound to an AgentStateGraph instance.

pub fn propose( &self, ref_name: &str, policy_json: &str, ) -> Result<String, JsValue>

Write a proposed (unratified) policy. Returns "path@version". policy_json is the serialized Policy struct.

pub fn ratify( &self, ref_name: &str, path: &str, ratifier: &str, reasoning: &str, ) -> Result<(), JsValue>

Ratify an unratified proposal at path.

pub fn supersede( &self, ref_name: &str, path: &str, new_policy_json: &str, ) -> Result<String, JsValue>

Replace the active policy at path with new_policy_json. Returns the new "path@version" handle.

pub fn list( &self, ref_name: &str, prefix_filter: Option<String>, tenant_filter: Option<String>, ) -> Result<String, JsValue>

List every policy (active versions, ratified or not). Returns a JSON array.

tenantFilter (0.7.5 §3b / §5d): None/undefined keeps back-compat (all policies considered). When provided, routes through the Rust list_scoped variant so only policies whose tenant_id is unset (global) or equal to the filter are returned.

pub fn active( &self, ref_name: &str, prefix_filter: Option<String>, tenant_filter: Option<String>, ) -> Result<String, JsValue>

List currently-active policies (ratified AND active_from <= now).

tenantFilter (0.7.5 §3b / §5d) matches Self::list semantics.

pub fn get( &self, ref_name: &str, path: &str, version: Option<u64>, ) -> Result<String, JsValue>

Fetch a policy at path. If version is provided, returns the pinned historical version; otherwise the current active version.

pub fn history(&self, ref_name: &str, path: &str) -> Result<String, JsValue>

Walk the supersedes chain (oldest first → current).

pub fn evaluate( &self, ref_name: &str, situation_json: &str, action: &str, agent_id: &str, tenant_filter: Option<String>, ) -> Result<String, JsValue>

Authorization evaluation (POLICY_V1.md §5). Returns a Decision JSON object.

tenantFilter (0.7.5 §3b / §5d) routes through the Rust evaluate_scoped variant: None/undefined considers every policy (back-compat); Some("acme") restricts matching to policies whose tenant_id is unset (global) or equal to "acme".

pub fn evaluate_change( &self, ref_name: &str, proposal_json: &str, tenant_filter: Option<String>, ) -> Result<String, JsValue>

Change-proposal evaluation (POLICY_V1.md §22.2). Returns a Decision JSON object.

tenantFilter (0.7.5 §3b / §5d) matches Self::evaluate semantics.

pub fn sign( &self, ref_name: &str, path: &str, signer_key_id: &str, private_key_hex: &str, ) -> Result<String, JsValue>

Sign the active policy at path with an Ed25519 private key. private_key_hex is a 32-byte seed encoded as 64 hex chars. Returns a JSON string {algorithm, signer_key_id, signature_hex}.

pub fn verify( &self, ref_name: &str, path: &str, public_key_hex: &str, ) -> Result<String, JsValue>

Verify the Ed25519 signature on the policy at path using public_key_hex (64-char hex / 32-byte key). Returns {valid: true, algorithm, signer_key_id} on success, {valid: false, reason} otherwise.

pub fn set_external_evaluator( &self, ref_name: &str, path: &str, config_json: Option<String>, ) -> Result<String, JsValue>

Attach or update the external evaluator reference on the policy at path (stub). Returns the same envelope as sign / verify. Until the runtime-side mutator lands, callers can set external_evaluator on the policy JSON before propose / supersede — the field is preserved by serde round-trip.

pub fn check_tokens( &self, ref_name: &str, tokens_json: &str, ) -> Result<String, JsValue>

List ratified policies whose triggers intersect tokens_json (a JSON array of strings). Convenience wrapper exposing the filter evaluate_change uses internally.

Trait Implementations

impl From<WasmPolicyStore> for JsValue

fn from(value: WasmPolicyStore) -> Self

Converts to this type from the input type.

impl FromWasmAbi for WasmPolicyStore

type Abi = WasmPtr<WasmRefCell<WasmPolicyStore>>

The Wasm ABI type that this converts from when coming back out from the ABI boundary.

unsafe fn from_abi(js: Self::Abi) -> Self

Recover a Self from Self::Abi.

impl IntoWasmAbi for WasmPolicyStore

type Abi = WasmPtr<WasmRefCell<WasmPolicyStore>>

The Wasm ABI type that this converts into when crossing the ABI boundary.

fn into_abi(self) -> Self::Abi

Convert self into Self::Abi so that it can be sent across the wasm ABI boundary.

impl LongRefFromWasmAbi for WasmPolicyStore

type Abi = WasmPtr<WasmRefCell<WasmPolicyStore>>

Same as RefFromWasmAbi::Abi

type Anchor = RcRef<WasmPolicyStore>

Same as RefFromWasmAbi::Anchor

unsafe fn long_ref_from_abi(js: Self::Abi) -> Self::Anchor

Same as RefFromWasmAbi::ref_from_abi

impl OptionFromWasmAbi for WasmPolicyStore

fn is_none(abi: &Self::Abi) -> bool

Tests whether the argument is a “none” instance. If so it will be deserialized as None, and otherwise it will be passed to FromWasmAbi.

impl OptionIntoWasmAbi for WasmPolicyStore

fn none() -> Self::Abi

Returns an ABI instance indicating “none”, which JS will interpret as the None branch of this option.

impl RefFromWasmAbi for WasmPolicyStore

type Abi = WasmPtr<WasmRefCell<WasmPolicyStore>>

The Wasm ABI type references to Self are recovered from.

type Anchor = RcRef<WasmPolicyStore>

The type that holds the reference to Self for the duration of the invocation of the function that has an &Self parameter. This is required to ensure that the lifetimes don’t persist beyond one function call, and so that they remain anonymous.

unsafe fn ref_from_abi(js: Self::Abi) -> Self::Anchor

Recover a Self::Anchor from Self::Abi.

impl RefMutFromWasmAbi for WasmPolicyStore

type Abi = WasmPtr<WasmRefCell<WasmPolicyStore>>

Same as RefFromWasmAbi::Abi

type Anchor = RcRefMut<WasmPolicyStore>

Same as RefFromWasmAbi::Anchor

unsafe fn ref_mut_from_abi(js: Self::Abi) -> Self::Anchor

Same as RefFromWasmAbi::ref_from_abi

impl SupportsConstructor for WasmPolicyStore

impl SupportsInstanceProperty for WasmPolicyStore

impl SupportsStaticProperty for WasmPolicyStore

impl TryFromJsValue for WasmPolicyStore

fn try_from_js_value(value: JsValue) -> Result<Self, JsValue>

Performs the conversion.

fn try_from_js_value_ref(value: &JsValue) -> Option<Self>

Performs the conversion.

impl VectorFromWasmAbi for WasmPolicyStore

type Abi = <Box<[JsValue]> as FromWasmAbi>::Abi

unsafe fn vector_from_abi(js: Self::Abi) -> Box<[WasmPolicyStore]>

impl VectorIntoWasmAbi for WasmPolicyStore

type Abi = <Box<[JsValue]> as IntoWasmAbi>::Abi

fn vector_into_abi(vector: Box<[WasmPolicyStore]>) -> Self::Abi

impl WasmDescribe for WasmPolicyStore

fn describe()

impl WasmDescribeVector for WasmPolicyStore

fn describe_vector()