mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
- FFI: add RVM/Program APIs, execution state accessors, HostAwait handling, and buffer/result helpers in rvm.rs, common.rs, engine.rs. - Compiler: emit HostAwait for __builtin_host_await in function_calls.rs. - RVM tests: add HostAwait regression cases and extend harness for suspend/resume responses in host_await.yaml and mod.rs. - C/C++: add RVM tests/examples and wrapper updates in rvm_tests.c, rvm_tests.cpp, regorus.hpp, plus CMake wiring. - C#: add Program/Rvm bindings, SafeHandle/PInvoke, tests, and example usage in Regorus, RvmProgramTests.cs, Program.cs, and README updates. - Go: add Program/Rvm bindings, tests, and examples in rvm.go, rvm_test.go, main.go. - Java: add Program/Rvm bindings, JNI glue, and examples in lib.rs, regorus, Test.java. - Python: add Program/Rvm bindings and examples in lib.rs, test.py. - WASM: add Program/Rvm bindings and examples in lib.rs, test.js. - Tooling: wire binding tests in xtask and ignore generated Java artifacts in .gitignore. Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
163 lines
2.9 KiB
JavaScript
163 lines
2.9 KiB
JavaScript
// Copyright (c) Microsoft Corporation.
|
|
// Licensed under the MIT License.
|
|
|
|
var regorus = require('./pkg/regorusjs');
|
|
|
|
// Create an engine.
|
|
var engine = new regorus.Engine();
|
|
|
|
// Enable code coverage
|
|
engine.setEnableCoverage(true);
|
|
|
|
// Add Rego policy.
|
|
var pkg = engine.addPolicy(
|
|
// Associate this file name with policy
|
|
'hello.rego',
|
|
|
|
// Rego policy
|
|
`
|
|
package test
|
|
|
|
x = 10
|
|
|
|
# Join messages
|
|
message = concat(", ", [input.message, data.message])
|
|
`);
|
|
|
|
console.log(pkg);
|
|
// data.test
|
|
|
|
// Set policy data
|
|
engine.addDataJson(`
|
|
{
|
|
"message" : "World!"
|
|
}
|
|
`);
|
|
|
|
// Set policy input
|
|
engine.setInputJson(`
|
|
{
|
|
"message" : "Hello"
|
|
}
|
|
`);
|
|
|
|
// Eval rule as json
|
|
var value = engine.evalRule('data.test.message');
|
|
value = JSON.parse(value);
|
|
|
|
// Display value
|
|
console.log(value);
|
|
// Hello, World!
|
|
|
|
// Eval query
|
|
results = engine.evalQuery('data.test.message');
|
|
|
|
// Display
|
|
console.log(results);
|
|
// {
|
|
// "result": [
|
|
// {
|
|
// "expressions": [
|
|
// {
|
|
// "value": "Hello, World!",
|
|
// "text": "data.test.message",
|
|
// "location": {
|
|
// "row": 1,
|
|
// "col": 1
|
|
// }
|
|
// }
|
|
// ]
|
|
// }
|
|
// ]
|
|
// }
|
|
|
|
// Convert results to object
|
|
results = JSON.parse(results);
|
|
|
|
// Process result
|
|
console.log(results.result[0].expressions[0].value);
|
|
// Hello, World!
|
|
|
|
// Print coverage report
|
|
report = engine.getCoverageReport();
|
|
console.log(report);
|
|
|
|
// Print pretty report.
|
|
report = engine.getCoverageReportPretty();
|
|
console.log(report);
|
|
|
|
// RVM regular example
|
|
{
|
|
const policy = `
|
|
package demo
|
|
import rego.v1
|
|
|
|
default allow := false
|
|
|
|
allow if {
|
|
input.user == "alice"
|
|
input.active == true
|
|
}
|
|
`;
|
|
|
|
const modules = JSON.stringify([
|
|
{ id: "demo.rego", content: policy }
|
|
]);
|
|
const entryPoints = JSON.stringify(["data.demo.allow"]);
|
|
|
|
const program = regorus.Program.compileFromModules(
|
|
"{}",
|
|
modules,
|
|
entryPoints
|
|
);
|
|
|
|
console.log(program.generateListing());
|
|
|
|
const binary = program.serializeBinary();
|
|
const deserialized = regorus.Program.deserializeBinary(binary);
|
|
if (deserialized.isPartial) {
|
|
throw new Error("Deserialized program marked partial");
|
|
}
|
|
const rehydrated = deserialized.program();
|
|
|
|
const vm = new regorus.Rvm();
|
|
vm.loadProgram(rehydrated);
|
|
vm.setInputJson('{"user":"alice","active":true}');
|
|
console.log(vm.execute());
|
|
}
|
|
|
|
// RVM HostAwait example
|
|
{
|
|
const policy = `
|
|
package demo
|
|
import rego.v1
|
|
|
|
default allow := false
|
|
|
|
allow if {
|
|
input.account.active == true
|
|
details := __builtin_host_await(input.account.id, "account")
|
|
details.tier == "gold"
|
|
}
|
|
`;
|
|
|
|
const modules = JSON.stringify([
|
|
{ id: "await.rego", content: policy }
|
|
]);
|
|
const entryPoints = JSON.stringify(["data.demo.allow"]);
|
|
|
|
const program = regorus.Program.compileFromModules(
|
|
"{}",
|
|
modules,
|
|
entryPoints
|
|
);
|
|
|
|
const vm = new regorus.Rvm();
|
|
vm.setExecutionMode(1);
|
|
vm.loadProgram(program);
|
|
vm.setInputJson('{"account":{"id":"acct-1","active":true}}');
|
|
vm.execute();
|
|
console.log(vm.getExecutionState());
|
|
console.log(vm.resume('{"tier":"gold"}'));
|
|
}
|