Policymaker fundamentals

Use this skill when

• You encounter import { createPolicy } from 'policymaker' in a codebase.
• You need to add authorization checks to an API route, middleware, resolver, background job, or server-side handler.
• You must review, explain, or modify a Policymaker-based access control layer.
• The user asks about authorization, permissions, roles, or access control in a project that uses Policymaker.

What Policymaker is

Policymaker is a synchronous, type-safe, embedded authorization policy engine for JavaScript and TypeScript. It compiles roles, action patterns, direct permissions, and contextual rules into a frozen policy engine at application startup.

What it does