[package]
name = "act-policy"
version.workspace = true
edition = "2024"
license = "MIT OR Apache-2.0"
description = "Capability policy decision core (PDP) for the ACT toolchain"
repository = "https://github.com/actcore/act-cli"
homepage = "https://actcore.dev"
keywords = ["act", "capability", "policy", "wasm", "security"]

[dependencies]
act-types.workspace = true
serde.workspace = true
serde_json.workspace = true
globset.workspace = true
tracing.workspace = true
shellexpand = "3"
thiserror = "2"
cidr = "0.3"
tokio = { workspace = true, features = ["net"], optional = true }
# Regular (not host-gated): the provider trait's `resolve` is async and the
# providers live in the wasm-clean core, so async-trait must compile for wasm
# too. The generated futures capture only `Send` data, so the default `Send`
# bound holds on both native and wasm.
async-trait = "0.1"

[features]
default = ["host"]
# Host-only consent prompting (ConsentPrompter/DecisionCache) and the
# tokio-backed DNS resolution used by net.rs + the sockets provider's resolve.
host = ["tokio"]

[dev-dependencies]
tokio = { workspace = true, features = ["full"] }
