@vallum/policy-gateway

Fail-closed sponsorship policy evaluation helpers for Vallum gateways.

Install

For the npm release, install:

npm install @vallum/policy-gateway

See https://github.com/0xCozart/vallum/blob/main/docs/vallum/package-integration-guide.md for package selection, configuration, and when to use the gateway package instead of the SDK.

Usage

import { evaluateSponsorshipPolicy } from "@vallum/policy-gateway";

const decision = evaluateSponsorshipPolicy(
  {
    appId: "demo-app",
    appStatus: "active",
    allowedPackages: ["0xpackage"],
    maxGasBudgetPerTx: 10_000_000,
  },
  {
    authenticated: true,
    appId: "demo-app",
    packageId: "0xpackage",
    gasBudget: 1_000_000,
  },
);

if (!decision.allowed) {
  console.error(decision.reasonCode, decision.message);
}

The evaluator is deterministic and local. It does not reserve gas, execute transactions, call IOTA RPC, or enforce quotas beyond the request context values supplied by the caller.

Mock Agent Gateway

createAgentMockGatewayServer() is a local/test helper for deterministic manifest and SDK flows. It is not the production policy gateway and does not enforce production app API authentication or Gas Station sponsorship.

The server refuses non-loopback listen hosts by default. Bind it to 127.0.0.1, ::1, or localhost; setting allowUnsafeNonLoopback: true is an explicit unsafe opt-in for controlled test harnesses only.