@highflame/policy 2.2.43 → 2.2.44

package/dist/condition-groups.js

@@ -251,11 +251,13 @@ export function expressionToCedar(expr, optionalFields) {
                 .join(' || ');
         }
         case 'not': {
-            const inner = expressionToCedar(expr.child, optionalFields);
-            // If inner is a simple leaf, no parens needed after !
-            if (isLeaf(expr.child))
-                return `!${inner}`;
-            return `!(${inner})`;
+            // Always parenthesized. `!` binds tighter than every operator a
+            // leaf renders with, so dropping the parens re-associates the
+            // expression: `!context.score > 70` is `(!context.score) > 70`,
+            // which the Cedar validator rejects as "expected Bool but saw
+            // Long", and `!context has x` is `(!context) has x`. A leaf is not
+            // an atom.
+            return `!(${expressionToCedar(expr.child, optionalFields)})`;
         }
         case 'raw': {
             if (isValidRawCondition(expr.text)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.43",
+  "version": "2.2.44",
   "engines": {
     "node": ">=18"
   },