@shapeshift-labs/frontier-policy

Serializable policy and capability decisions for Frontier apps, effects, views, sync, routes, traces, and AI tools.

frontier-policy turns permission checks, redaction, projection, effect allowlists, tool allowlists, and external identity lookup into inspectable Frontier-shaped data. It is not an auth server. It is the shared decision layer an app can call before editing a view, entering a route, firing an effect, syncing a field, exposing trace data, or handing an action surface to an agent.

Source repository: https://github.com/siliconjungle/-shapeshift-labs-frontier-policy

Related Packages

The published Frontier package family is generated from one shared package catalog so READMEs stay in sync across packages:

• @shapeshift-labs/frontier: Core JSON diff/apply, compact patch tuples, JSON Pointer, equality, clone, validation, Unicode helpers, and tiny dependency-free runtime budget/scheduler primitives.
• @shapeshift-labs/frontier-query: Shared query-key, selector path, condition, entity identity, and table-shape primitives.
• @shapeshift-labs/frontier-codec: Patch serialization, binary frames, canonical JSON, and patch-history codecs.
• @shapeshift-labs/frontier-engine: Stateful planned diff engine, adaptive profiles, schema plans, and engine-level history helpers.
• @shapeshift-labs/frontier-state: Patch-routed app-state subscriptions, owned commits, maintained views, and path mapping.
• @shapeshift-labs/frontier-state-cache: Normalized query-result cache with entity/query watchers, persistence, change logs, optimistic layers, scheduled persistence, and mutation bridge.
• @shapeshift-labs/frontier-state-cache-idb: IndexedDB persistence adapter for Frontier state-cache snapshots and durable change logs.
• @shapeshift-labs/frontier-state-cache-file: Structured file persistence adapter for Frontier state-cache snapshots and change logs.
• @shapeshift-labs/frontier-state-cache-sql: SQL persistence adapter for Frontier state-cache snapshots and change logs.
• @shapeshift-labs/frontier-schema: JSON Schema validation, Frontier profile generation, CloudEvent envelopes, and query/table schema helpers.
• @shapeshift-labs/frontier-migrations: Boundary-first data migrations, import normalization, plugin/API version mapping, versioned envelopes, graph diagnostics, patch path rewrites, dry-run reports, and current-shape rehydration.
• @shapeshift-labs/frontier-event-log: Bounded event logs, replay cursors, consumer acknowledgements, keyed compaction, checkpoints, and Frontier patch event records.
• @shapeshift-labs/frontier-inspect: Cross-package inspection/evidence bundles, registry graph snapshots, feature/resource impact reports, timeline/event normalization, redaction, JSONL import/export, and AI-readable app feature maps.
• @shapeshift-labs/frontier-scheduler: Deterministic work scheduling, lanes, cancellation, backpressure, frame policies, replay snapshots, and work graphs.
• @shapeshift-labs/frontier-logging: Opt-in structured logging, browser telemetry, scheduled sinks, file sinks, exporters, benchmark traces, and Frontier patch/update summaries.
• @shapeshift-labs/frontier-mutation: Explicit mutation and selector plans compiled to Frontier patches or CRDT operations.
• @shapeshift-labs/frontier-triggers: Capability-gated event trigger registry, scoped event envelopes, listener/reaction rules, structured rejection, deterministic event-to-action scheduling, replay/provenance records, and registry graph output.
• @shapeshift-labs/frontier-virtual: DOM-neutral virtualization, layout providers, range materialization, grids, spatial/frustum indexes, patch invalidation, camera anchors, and serializable layout state.
• @shapeshift-labs/frontier-scene: Patch-native 2D/3D scene graph, transform propagation, bounds queries, virtual/culling adapters, spatial invalidation, and camera/frustum materialization.
• @shapeshift-labs/frontier-pathfinding: Patch-native grid pathfinding, typed-array A*/Dijkstra search, flow fields, connected components, line-of-sight smoothing, dirty-cell invalidation, and scheduler-friendly path jobs.
• @shapeshift-labs/frontier-lod: Patch-native level-of-detail and significance selection for rendering and computation workloads, compact typed hot paths, multi-observer selection, budget degradation, materialization frames, and scheduler work plans.
• @shapeshift-labs/frontier-route: DOM-neutral app/game route resources, route and scene manifests, match/resolve/transition planning, dependency metadata, sessions, registry graph output, and impact queries.
• @shapeshift-labs/frontier-trace: Serializable traces, spans, events, causal links, W3C trace context helpers, timeline/resource/path queries, critical-path analysis, registry graph output, JSONL/proof helpers, Chrome trace export, and redaction for app-wide feature observability.
• @shapeshift-labs/frontier-manifest: Build/static feature manifests for owners, routes, actions, states, migrations, tests, source files, assets, resources, tasks, dependency metadata, registry graph output, feature maps, JSONL export, and impact queries.
• @shapeshift-labs/frontier-view: Renderer-neutral view manifests, type defaults, validation frames, action bindings, visual channels, virtual/LOD hints, and data-to-representation mapping for Frontier apps.
• @shapeshift-labs/frontier-dom: Patch-native DOM and host renderer bindings, manifest hydration, JSX runtime/compiler helpers, SSR, devtools, and logging bridges.
• @shapeshift-labs/frontier-playwright: Playwright/headless automation probes for Frontier state, DOM, devtools, marks, and timeline queries.
• @shapeshift-labs/frontier-crdt: Native CRDT documents, update tooling, awareness, branches, conflict introspection, version frames, and undo.
• @shapeshift-labs/frontier-crdt-sync: CRDT sync endpoints, repo/storage/provider contracts, scheduled sync work, document URLs, local networks, model checking, forensics, and text binding contracts.
• @shapeshift-labs/frontier-crdt-websocket: WebSocket client/server transports for Frontier CRDT sync providers.
• @shapeshift-labs/frontier-react: React external-store hooks and adapters for Frontier state, cache, and CRDT surfaces.
• @shapeshift-labs/frontier-richtext: Rich text Delta normalization/application, marks, embeds, ranges, and cursor/selection transforms for local editor integrations.
• @shapeshift-labs/frontier-realtime: Shared realtime command, tick, snapshot, prediction, reconciliation, interpolation, rollback, message, and delta primitives.
• @shapeshift-labs/frontier-realtime-server: Authoritative realtime room, tick, command validation, rate-limit, session, and snapshot-history runtime.
• @shapeshift-labs/frontier-realtime-websocket: WebSocket client, wire, and Node room-server transport for Frontier realtime.
• @shapeshift-labs/frontier-game: Game-facing entity, component, player, room, ownership, spatial interest, rollback, physics, and replication helpers above realtime.

Package source repositories:

• siliconjungle/-shapeshift-labs-frontier
• siliconjungle/-shapeshift-labs-frontier-query
• siliconjungle/-shapeshift-labs-frontier-codec
• siliconjungle/-shapeshift-labs-frontier-engine
• siliconjungle/-shapeshift-labs-frontier-state
• siliconjungle/-shapeshift-labs-frontier-state-cache
• siliconjungle/-shapeshift-labs-frontier-state-cache-idb
• siliconjungle/-shapeshift-labs-frontier-state-cache-file
• siliconjungle/-shapeshift-labs-frontier-state-cache-sql
• siliconjungle/-shapeshift-labs-frontier-schema
• siliconjungle/-shapeshift-labs-frontier-migrations
• siliconjungle/-shapeshift-labs-frontier-event-log
• siliconjungle/-shapeshift-labs-frontier-inspect
• siliconjungle/-shapeshift-labs-frontier-scheduler
• siliconjungle/-shapeshift-labs-frontier-logging
• siliconjungle/-shapeshift-labs-frontier-mutation
• siliconjungle/-shapeshift-labs-frontier-policy
• siliconjungle/-shapeshift-labs-frontier-triggers
• siliconjungle/-shapeshift-labs-frontier-virtual
• siliconjungle/-shapeshift-labs-frontier-scene
• siliconjungle/-shapeshift-labs-frontier-pathfinding
• siliconjungle/-shapeshift-labs-frontier-lod
• siliconjungle/-shapeshift-labs-frontier-route
• siliconjungle/-shapeshift-labs-frontier-trace
• siliconjungle/-shapeshift-labs-frontier-manifest
• siliconjungle/-shapeshift-labs-frontier-view
• siliconjungle/-shapeshift-labs-frontier-dom
• siliconjungle/-shapeshift-labs-frontier-playwright
• siliconjungle/-shapeshift-labs-frontier-crdt
• siliconjungle/-shapeshift-labs-frontier-crdt-sync
• siliconjungle/-shapeshift-labs-frontier-crdt-websocket
• siliconjungle/-shapeshift-labs-frontier-react
• siliconjungle/-shapeshift-labs-frontier-richtext
• siliconjungle/-shapeshift-labs-frontier-realtime
• siliconjungle/-shapeshift-labs-frontier-realtime-server
• siliconjungle/-shapeshift-labs-frontier-realtime-websocket
• siliconjungle/-shapeshift-labs-frontier-game

Install

npm install @shapeshift-labs/frontier-policy

Usage

import {
  createPolicyManifest,
  evaluatePolicyAsync,
  redactPolicyValue
} from '@shapeshift-labs/frontier-policy';

const policy = createPolicyManifest({
  id: 'profile.policy',
  rules: [
    {
      id: 'email-write',
      effect: 'allow',
      action: 'write',
      resources: ['path:/profile/email'],
      capabilities: ['profile.email.write']
    },
    {
      id: 'private-notes-redaction',
      effect: 'redact',
      action: 'agent.read',
      resources: ['path:/profile/privateNotes'],
      redact: '/profile/privateNotes'
    }
  ]
});

const decision = await evaluatePolicyAsync(policy, {
  subject: { provider: 'external-idp', externalId: 'user-123' },
  action: 'agent.read',
  resources: ['path:/profile/privateNotes']
}, {
  subjectResolver: async (subject) => ({
    id: 'user:u1',
    provider: subject.provider,
    externalId: subject.externalId,
    capabilities: ['profile.email.write']
  })
});

const visible = redactPolicyValue({
  profile: { email: '[email protected]', privateNotes: 'internal' }
}, decision);

Decisions include allowed, access, requiresApproval, matched rule ids, reasons, redaction paths, projection paths, sync projection, allowed/denied effects, allowed/denied tools, and the normalized subject.

External Identity

Policy subjects are not limited to actors stored inside the policy manifest. Evaluation accepts a structural subjectResolver so an app can resolve users from Clerk, Auth0, WorkOS, internal sessions, service accounts, token claims, or any other identity source without adding that provider as a package dependency.

The normalized subject shape supports id, kind, provider, externalId, roles, groups, capabilities, claims, attributes, tags, and metadata.

Surfaces

• createPolicyManifest and definePolicy normalize serializable policy data.
• compilePolicy, evaluatePolicy, and evaluatePolicyAsync produce decision records.
• createPolicyRegistryGraph and tracePolicyImpact make rules, subjects, resources, and capabilities queryable as graph data.
• redactPolicyValue and projectPolicyValue apply decision redactions and projections to JSON values.
• createPolicyRecord, encodePolicyJsonl, decodePolicyJsonl, and createPolicyProof support replay, audit, and evidence bundles.

Benchmarks

Run the package-local benchmark:

npm run bench

The benchmark reports Frontier-only package measurements for manifest creation, compiled evaluation, one-shot evaluation, policy queries, impact tracing, registry graph creation, redaction/projection, JSONL, manifest redaction, and proof generation.

Competitor comparison fixtures are intentionally kept out of the package README claims. Use npm run bench:competitors and the repository research notes when evaluating tradeoffs against CASL, accesscontrol, and node-casbin.

Development

npm test
npm run fuzz
npm run pack:dry

Runtime dependencies stay limited to @shapeshift-labs/frontier.

License

MIT