node: v2.0.0

2.0.0 (2026-09-24)

⚠ BREAKING CHANGES

• node: add support for location-based includes
• node: The API of generatePolicy() has changed; instead of resolving with a LavaMoatPolicy, it now resolves with an object having properties policy: LavaMoatPolicy and hasWarnings: boolean. This only affects programmatic consumption of @lavamoat/node. To migrate, destructure policy from the resolved object. generatePolicy() no longer accepts write/writableFs options and does not write policy to disk; to write a policy, use writePolicy imported from @lavamoat/node.

Features

• node: add support for location-based includes (a6edddd)
• node: use @endo/parser-pipeline (9fe2cce)

Bug Fixes

• deps: update endo (#2048) (e07902b)
• deps: upgrade ses (83f704a)
• deps: upgrade ses This upgrades ses to v2.3.0 across the board. (#2111) (32d830b)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @lavamoat/types bumped from ^1.0.2 to ^2.0.0
    • lavamoat-core bumped from ^18.0.6 to ^19.0.0
    • lavamoat-tofu bumped from ^9.0.3 to ^9.0.4