@intentius/chant-lexicon-cedar 0.44.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (265) hide show
  1. package/README.md +190 -0
  2. package/dist/avp/ambient.d.ts +54 -0
  3. package/dist/avp/ambient.d.ts.map +1 -0
  4. package/dist/avp/client.d.ts +127 -0
  5. package/dist/avp/client.d.ts.map +1 -0
  6. package/dist/avp/describe-resources.d.ts +42 -0
  7. package/dist/avp/describe-resources.d.ts.map +1 -0
  8. package/dist/avp/embed.d.ts +120 -0
  9. package/dist/avp/embed.d.ts.map +1 -0
  10. package/dist/avp/live-export.d.ts +94 -0
  11. package/dist/avp/live-export.d.ts.map +1 -0
  12. package/dist/avp/ownership.d.ts +97 -0
  13. package/dist/avp/ownership.d.ts.map +1 -0
  14. package/dist/avp/statement.d.ts +22 -0
  15. package/dist/avp/statement.d.ts.map +1 -0
  16. package/dist/avp/store.d.ts +82 -0
  17. package/dist/avp/store.d.ts.map +1 -0
  18. package/dist/avp/testdata/mock-transport.d.ts +55 -0
  19. package/dist/avp/testdata/mock-transport.d.ts.map +1 -0
  20. package/dist/codegen/docs-cli.d.ts +3 -0
  21. package/dist/codegen/docs-cli.d.ts.map +1 -0
  22. package/dist/codegen/docs.d.ts +26 -0
  23. package/dist/codegen/docs.d.ts.map +1 -0
  24. package/dist/codegen/emit.d.ts +85 -0
  25. package/dist/codegen/emit.d.ts.map +1 -0
  26. package/dist/codegen/generate-cli.d.ts +3 -0
  27. package/dist/codegen/generate-cli.d.ts.map +1 -0
  28. package/dist/codegen/generate.d.ts +37 -0
  29. package/dist/codegen/generate.d.ts.map +1 -0
  30. package/dist/codegen/naming.d.ts +48 -0
  31. package/dist/codegen/naming.d.ts.map +1 -0
  32. package/dist/codegen/package.d.ts +10 -0
  33. package/dist/codegen/package.d.ts.map +1 -0
  34. package/dist/composites/deny-by-default-set.d.ts +58 -0
  35. package/dist/composites/deny-by-default-set.d.ts.map +1 -0
  36. package/dist/composites/index.d.ts +12 -0
  37. package/dist/composites/index.d.ts.map +1 -0
  38. package/dist/composites/owner-can-manage.d.ts +48 -0
  39. package/dist/composites/owner-can-manage.d.ts.map +1 -0
  40. package/dist/config.d.ts +102 -0
  41. package/dist/config.d.ts.map +1 -0
  42. package/dist/coverage.d.ts +59 -0
  43. package/dist/coverage.d.ts.map +1 -0
  44. package/dist/detect.d.ts +18 -0
  45. package/dist/detect.d.ts.map +1 -0
  46. package/dist/generated/index.d.ts +251 -0
  47. package/dist/generated/index.d.ts.map +1 -0
  48. package/dist/generated/runtime.d.ts +2 -0
  49. package/dist/generated/runtime.d.ts.map +1 -0
  50. package/dist/import/adapter.d.ts +21 -0
  51. package/dist/import/adapter.d.ts.map +1 -0
  52. package/dist/import/clause-text.d.ts +38 -0
  53. package/dist/import/clause-text.d.ts.map +1 -0
  54. package/dist/import/generator.d.ts +53 -0
  55. package/dist/import/generator.d.ts.map +1 -0
  56. package/dist/import/parser.d.ts +57 -0
  57. package/dist/import/parser.d.ts.map +1 -0
  58. package/dist/index.d.ts +34 -0
  59. package/dist/index.d.ts.map +1 -0
  60. package/dist/init-templates.d.ts +32 -0
  61. package/dist/init-templates.d.ts.map +1 -0
  62. package/dist/integrity.json +22 -0
  63. package/dist/lint/audit-catalog.d.ts +29 -0
  64. package/dist/lint/audit-catalog.d.ts.map +1 -0
  65. package/dist/lint/post-synth/cedar-helpers.d.ts +97 -0
  66. package/dist/lint/post-synth/cedar-helpers.d.ts.map +1 -0
  67. package/dist/lint/post-synth/cedc010.d.ts +17 -0
  68. package/dist/lint/post-synth/cedc010.d.ts.map +1 -0
  69. package/dist/lint/post-synth/cedc011.d.ts +17 -0
  70. package/dist/lint/post-synth/cedc011.d.ts.map +1 -0
  71. package/dist/lint/post-synth/cedc012.d.ts +21 -0
  72. package/dist/lint/post-synth/cedc012.d.ts.map +1 -0
  73. package/dist/lint/post-synth/cedc013.d.ts +20 -0
  74. package/dist/lint/post-synth/cedc013.d.ts.map +1 -0
  75. package/dist/lint/post-synth/cedc014.d.ts +19 -0
  76. package/dist/lint/post-synth/cedc014.d.ts.map +1 -0
  77. package/dist/lint/post-synth/cede010.d.ts +34 -0
  78. package/dist/lint/post-synth/cede010.d.ts.map +1 -0
  79. package/dist/lint/post-synth/cede011.d.ts +22 -0
  80. package/dist/lint/post-synth/cede011.d.ts.map +1 -0
  81. package/dist/lint/post-synth/ceds010.d.ts +24 -0
  82. package/dist/lint/post-synth/ceds010.d.ts.map +1 -0
  83. package/dist/lint/post-synth/ceds011.d.ts +19 -0
  84. package/dist/lint/post-synth/ceds011.d.ts.map +1 -0
  85. package/dist/lint/post-synth/ceds012.d.ts +17 -0
  86. package/dist/lint/post-synth/ceds012.d.ts.map +1 -0
  87. package/dist/lint/post-synth/index.d.ts +3 -0
  88. package/dist/lint/post-synth/index.d.ts.map +1 -0
  89. package/dist/lint/post-synth/wasm-helpers.d.ts +108 -0
  90. package/dist/lint/post-synth/wasm-helpers.d.ts.map +1 -0
  91. package/dist/lint/rules/index.d.ts +10 -0
  92. package/dist/lint/rules/index.d.ts.map +1 -0
  93. package/dist/lint/rules/policy-shape.d.ts +31 -0
  94. package/dist/lint/rules/policy-shape.d.ts.map +1 -0
  95. package/dist/lsp/completions.d.ts +24 -0
  96. package/dist/lsp/completions.d.ts.map +1 -0
  97. package/dist/lsp/hover.d.ts +11 -0
  98. package/dist/lsp/hover.d.ts.map +1 -0
  99. package/dist/lsp/registry.d.ts +45 -0
  100. package/dist/lsp/registry.d.ts.map +1 -0
  101. package/dist/manifest.json +8 -0
  102. package/dist/mcp/index.d.ts +34 -0
  103. package/dist/mcp/index.d.ts.map +1 -0
  104. package/dist/mcp/policy-coverage.d.ts +81 -0
  105. package/dist/mcp/policy-coverage.d.ts.map +1 -0
  106. package/dist/meta.json +699 -0
  107. package/dist/okf/index.md +37 -0
  108. package/dist/okf/rules/CEDC001.md +11 -0
  109. package/dist/okf/rules/CEDC010.md +11 -0
  110. package/dist/okf/rules/CEDC011.md +15 -0
  111. package/dist/okf/rules/CEDC012.md +11 -0
  112. package/dist/okf/rules/CEDC013.md +15 -0
  113. package/dist/okf/rules/CEDC014.md +15 -0
  114. package/dist/okf/rules/CEDE010.md +15 -0
  115. package/dist/okf/rules/CEDE011.md +15 -0
  116. package/dist/okf/rules/CEDS010.md +15 -0
  117. package/dist/okf/rules/CEDS011.md +11 -0
  118. package/dist/okf/rules/CEDS012.md +15 -0
  119. package/dist/okf/types/AdminAction.md +14 -0
  120. package/dist/okf/types/Application.md +14 -0
  121. package/dist/okf/types/ApproveAction.md +13 -0
  122. package/dist/okf/types/CommentAction.md +14 -0
  123. package/dist/okf/types/CreateAction.md +14 -0
  124. package/dist/okf/types/DeleteAction.md +14 -0
  125. package/dist/okf/types/Document.md +18 -0
  126. package/dist/okf/types/Folder.md +15 -0
  127. package/dist/okf/types/Group.md +14 -0
  128. package/dist/okf/types/ListAction.md +14 -0
  129. package/dist/okf/types/Policy.md +29 -0
  130. package/dist/okf/types/ReadAction.md +14 -0
  131. package/dist/okf/types/ServiceAccount.md +15 -0
  132. package/dist/okf/types/ShareAction.md +14 -0
  133. package/dist/okf/types/Team.md +14 -0
  134. package/dist/okf/types/User.md +18 -0
  135. package/dist/okf/types/WriteAction.md +14 -0
  136. package/dist/package-cli.d.ts +3 -0
  137. package/dist/package-cli.d.ts.map +1 -0
  138. package/dist/plugin.d.ts +8 -0
  139. package/dist/plugin.d.ts.map +1 -0
  140. package/dist/rules/cedar-helpers.ts +209 -0
  141. package/dist/rules/cedc010.ts +80 -0
  142. package/dist/rules/cedc011.ts +47 -0
  143. package/dist/rules/cedc012.ts +64 -0
  144. package/dist/rules/cedc013.ts +68 -0
  145. package/dist/rules/cedc014.ts +73 -0
  146. package/dist/rules/cede010.ts +89 -0
  147. package/dist/rules/cede011.ts +58 -0
  148. package/dist/rules/ceds010.ts +57 -0
  149. package/dist/rules/ceds011.ts +42 -0
  150. package/dist/rules/ceds012.ts +50 -0
  151. package/dist/rules/policy-shape.ts +148 -0
  152. package/dist/rules/wasm-helpers.ts +315 -0
  153. package/dist/serializer.d.ts +138 -0
  154. package/dist/serializer.d.ts.map +1 -0
  155. package/dist/spec/fetch.d.ts +71 -0
  156. package/dist/spec/fetch.d.ts.map +1 -0
  157. package/dist/spec/parse.d.ts +113 -0
  158. package/dist/spec/parse.d.ts.map +1 -0
  159. package/dist/spec/pin.d.ts +116 -0
  160. package/dist/spec/pin.d.ts.map +1 -0
  161. package/dist/spec/pinned-names.json +18 -0
  162. package/dist/spec/wasm.d.ts +143 -0
  163. package/dist/spec/wasm.d.ts.map +1 -0
  164. package/dist/types/index.d.ts +219 -0
  165. package/dist/validate-cli.d.ts +3 -0
  166. package/dist/validate-cli.d.ts.map +1 -0
  167. package/dist/validate.d.ts +25 -0
  168. package/dist/validate.d.ts.map +1 -0
  169. package/package.json +75 -0
  170. package/src/avp/OWNERSHIP.md +125 -0
  171. package/src/avp/ambient.test.ts +113 -0
  172. package/src/avp/ambient.ts +124 -0
  173. package/src/avp/client.ts +310 -0
  174. package/src/avp/describe-resources.test.ts +316 -0
  175. package/src/avp/describe-resources.ts +215 -0
  176. package/src/avp/embed.test.ts +114 -0
  177. package/src/avp/embed.ts +190 -0
  178. package/src/avp/live-export.test.ts +232 -0
  179. package/src/avp/live-export.ts +185 -0
  180. package/src/avp/ownership.test.ts +101 -0
  181. package/src/avp/ownership.ts +170 -0
  182. package/src/avp/statement.ts +50 -0
  183. package/src/avp/store.ts +152 -0
  184. package/src/avp/testdata/mock-transport.ts +147 -0
  185. package/src/codegen/docs-cli.ts +7 -0
  186. package/src/codegen/docs.ts +873 -0
  187. package/src/codegen/emit.ts +496 -0
  188. package/src/codegen/generate-cli.ts +18 -0
  189. package/src/codegen/generate.test.ts +128 -0
  190. package/src/codegen/generate.ts +123 -0
  191. package/src/codegen/naming.ts +101 -0
  192. package/src/codegen/package.ts +52 -0
  193. package/src/composites/composites.test.ts +206 -0
  194. package/src/composites/deny-by-default-set.ts +98 -0
  195. package/src/composites/index.ts +13 -0
  196. package/src/composites/owner-can-manage.ts +80 -0
  197. package/src/config-namespace.test.ts +44 -0
  198. package/src/config.test.ts +82 -0
  199. package/src/config.ts +119 -0
  200. package/src/coverage.test.ts +61 -0
  201. package/src/coverage.ts +166 -0
  202. package/src/detect.test.ts +64 -0
  203. package/src/detect.ts +59 -0
  204. package/src/generated/index.d.ts +219 -0
  205. package/src/generated/index.ts +279 -0
  206. package/src/generated/lexicon-cedar.json +699 -0
  207. package/src/generated/runtime.ts +2 -0
  208. package/src/import/adapter.ts +63 -0
  209. package/src/import/clause-text.ts +178 -0
  210. package/src/import/generator.test.ts +133 -0
  211. package/src/import/generator.ts +219 -0
  212. package/src/import/parser.test.ts +265 -0
  213. package/src/import/parser.ts +352 -0
  214. package/src/import/roundtrip.test.ts +127 -0
  215. package/src/import/testdata/full.cedar +36 -0
  216. package/src/import/testdata/full.cedar.json +238 -0
  217. package/src/import/testdata/realistic.cedar +35 -0
  218. package/src/import/testdata/simple.cedar +6 -0
  219. package/src/index.ts +94 -0
  220. package/src/init-templates.test.ts +158 -0
  221. package/src/init-templates.ts +358 -0
  222. package/src/lint/audit-catalog.ts +130 -0
  223. package/src/lint/post-synth/cedar-helpers.ts +209 -0
  224. package/src/lint/post-synth/cedc010.ts +80 -0
  225. package/src/lint/post-synth/cedc011.ts +47 -0
  226. package/src/lint/post-synth/cedc012.ts +64 -0
  227. package/src/lint/post-synth/cedc013.ts +68 -0
  228. package/src/lint/post-synth/cedc014.ts +73 -0
  229. package/src/lint/post-synth/cede010.ts +89 -0
  230. package/src/lint/post-synth/cede011.ts +58 -0
  231. package/src/lint/post-synth/ceds010.ts +57 -0
  232. package/src/lint/post-synth/ceds011.ts +42 -0
  233. package/src/lint/post-synth/ceds012.ts +50 -0
  234. package/src/lint/post-synth/index.ts +25 -0
  235. package/src/lint/post-synth/post-synth.test.ts +474 -0
  236. package/src/lint/post-synth/wasm-helpers.ts +315 -0
  237. package/src/lint/rules/index.ts +12 -0
  238. package/src/lint/rules/policy-shape.test.ts +90 -0
  239. package/src/lint/rules/policy-shape.ts +148 -0
  240. package/src/lsp/completions.test.ts +111 -0
  241. package/src/lsp/completions.ts +55 -0
  242. package/src/lsp/hover.test.ts +82 -0
  243. package/src/lsp/hover.ts +75 -0
  244. package/src/lsp/registry.ts +74 -0
  245. package/src/mcp/index.ts +103 -0
  246. package/src/mcp/policy-coverage.test.ts +176 -0
  247. package/src/mcp/policy-coverage.ts +205 -0
  248. package/src/package-cli.ts +22 -0
  249. package/src/plugin.test.ts +115 -0
  250. package/src/plugin.ts +312 -0
  251. package/src/serializer.test.ts +502 -0
  252. package/src/serializer.ts +335 -0
  253. package/src/skills/chant-cedar-authoring.md +180 -0
  254. package/src/skills/chant-cedar-avp-embedding.md +125 -0
  255. package/src/skills/chant-cedar-meta-policy.md +119 -0
  256. package/src/spec/default-schema.cedarschema +108 -0
  257. package/src/spec/fetch.ts +107 -0
  258. package/src/spec/parse.test.ts +123 -0
  259. package/src/spec/parse.ts +253 -0
  260. package/src/spec/pin.test.ts +88 -0
  261. package/src/spec/pin.ts +243 -0
  262. package/src/spec/pinned-names.json +18 -0
  263. package/src/spec/wasm.ts +283 -0
  264. package/src/validate-cli.ts +8 -0
  265. package/src/validate.ts +85 -0
@@ -0,0 +1,699 @@
1
+ {
2
+ "AdminAction": {
3
+ "resourceType": "App::Action::\"admin\"",
4
+ "kind": "resource",
5
+ "lexicon": "cedar",
6
+ "namespace": "App",
7
+ "principalTypes": [
8
+ "App::User"
9
+ ],
10
+ "resourceTypes": [
11
+ "App::Application"
12
+ ],
13
+ "properties": {
14
+ "breakGlass": {
15
+ "type": "Bool",
16
+ "required": false
17
+ },
18
+ "mfa": {
19
+ "type": "Bool",
20
+ "required": true
21
+ }
22
+ }
23
+ },
24
+ "AdminContext": {
25
+ "resourceType": "App::Action::\"admin\".Context",
26
+ "kind": "property",
27
+ "lexicon": "cedar",
28
+ "namespace": "App",
29
+ "properties": {
30
+ "breakGlass": {
31
+ "type": "Bool",
32
+ "required": false
33
+ },
34
+ "mfa": {
35
+ "type": "Bool",
36
+ "required": true
37
+ }
38
+ }
39
+ },
40
+ "Application": {
41
+ "resourceType": "App::Application",
42
+ "kind": "resource",
43
+ "lexicon": "cedar",
44
+ "namespace": "App",
45
+ "memberOfTypes": [],
46
+ "properties": {
47
+ "name": {
48
+ "type": "String",
49
+ "required": true
50
+ },
51
+ "owner": {
52
+ "type": "App::Team",
53
+ "required": true
54
+ }
55
+ }
56
+ },
57
+ "ApplicationAttributes": {
58
+ "resourceType": "App::Application.Attributes",
59
+ "kind": "property",
60
+ "lexicon": "cedar",
61
+ "namespace": "App",
62
+ "properties": {
63
+ "name": {
64
+ "type": "String",
65
+ "required": true
66
+ },
67
+ "owner": {
68
+ "type": "App::Team",
69
+ "required": true
70
+ }
71
+ }
72
+ },
73
+ "ApproveAction": {
74
+ "resourceType": "App::Action::\"approve\"",
75
+ "kind": "resource",
76
+ "lexicon": "cedar",
77
+ "namespace": "App",
78
+ "principalTypes": [
79
+ "App::User"
80
+ ],
81
+ "resourceTypes": [
82
+ "App::Document"
83
+ ],
84
+ "properties": {
85
+ "mfa": {
86
+ "type": "Bool",
87
+ "required": true
88
+ }
89
+ }
90
+ },
91
+ "ApproveContext": {
92
+ "resourceType": "App::Action::\"approve\".Context",
93
+ "kind": "property",
94
+ "lexicon": "cedar",
95
+ "namespace": "App",
96
+ "properties": {
97
+ "mfa": {
98
+ "type": "Bool",
99
+ "required": true
100
+ }
101
+ }
102
+ },
103
+ "CommentAction": {
104
+ "resourceType": "App::Action::\"comment\"",
105
+ "kind": "resource",
106
+ "lexicon": "cedar",
107
+ "namespace": "App",
108
+ "principalTypes": [
109
+ "App::User"
110
+ ],
111
+ "resourceTypes": [
112
+ "App::Document",
113
+ "App::Folder"
114
+ ],
115
+ "properties": {
116
+ "mfa": {
117
+ "type": "Bool",
118
+ "required": true
119
+ },
120
+ "reason": {
121
+ "type": "String",
122
+ "required": false
123
+ }
124
+ }
125
+ },
126
+ "CommentContext": {
127
+ "resourceType": "App::Action::\"comment\".Context",
128
+ "kind": "property",
129
+ "lexicon": "cedar",
130
+ "namespace": "App",
131
+ "properties": {
132
+ "mfa": {
133
+ "type": "Bool",
134
+ "required": true
135
+ },
136
+ "reason": {
137
+ "type": "String",
138
+ "required": false
139
+ }
140
+ }
141
+ },
142
+ "CreateAction": {
143
+ "resourceType": "App::Action::\"create\"",
144
+ "kind": "resource",
145
+ "lexicon": "cedar",
146
+ "namespace": "App",
147
+ "principalTypes": [
148
+ "App::User"
149
+ ],
150
+ "resourceTypes": [
151
+ "App::Document",
152
+ "App::Folder"
153
+ ],
154
+ "properties": {
155
+ "mfa": {
156
+ "type": "Bool",
157
+ "required": true
158
+ },
159
+ "reason": {
160
+ "type": "String",
161
+ "required": false
162
+ }
163
+ }
164
+ },
165
+ "CreateContext": {
166
+ "resourceType": "App::Action::\"create\".Context",
167
+ "kind": "property",
168
+ "lexicon": "cedar",
169
+ "namespace": "App",
170
+ "properties": {
171
+ "mfa": {
172
+ "type": "Bool",
173
+ "required": true
174
+ },
175
+ "reason": {
176
+ "type": "String",
177
+ "required": false
178
+ }
179
+ }
180
+ },
181
+ "DeleteAction": {
182
+ "resourceType": "App::Action::\"delete\"",
183
+ "kind": "resource",
184
+ "lexicon": "cedar",
185
+ "namespace": "App",
186
+ "principalTypes": [
187
+ "App::User"
188
+ ],
189
+ "resourceTypes": [
190
+ "App::Document"
191
+ ],
192
+ "properties": {
193
+ "approvedBy": {
194
+ "type": "App::User",
195
+ "required": false
196
+ },
197
+ "mfa": {
198
+ "type": "Bool",
199
+ "required": true
200
+ }
201
+ }
202
+ },
203
+ "DeleteContext": {
204
+ "resourceType": "App::Action::\"delete\".Context",
205
+ "kind": "property",
206
+ "lexicon": "cedar",
207
+ "namespace": "App",
208
+ "properties": {
209
+ "approvedBy": {
210
+ "type": "App::User",
211
+ "required": false
212
+ },
213
+ "mfa": {
214
+ "type": "Bool",
215
+ "required": true
216
+ }
217
+ }
218
+ },
219
+ "Document": {
220
+ "resourceType": "App::Document",
221
+ "kind": "resource",
222
+ "lexicon": "cedar",
223
+ "namespace": "App",
224
+ "memberOfTypes": [
225
+ "App::Folder"
226
+ ],
227
+ "properties": {
228
+ "classification": {
229
+ "type": "String",
230
+ "required": true
231
+ },
232
+ "folder": {
233
+ "type": "App::Folder",
234
+ "required": true
235
+ },
236
+ "owner": {
237
+ "type": "App::User",
238
+ "required": true
239
+ },
240
+ "public": {
241
+ "type": "Bool",
242
+ "required": true
243
+ },
244
+ "tags": {
245
+ "type": "Set<String>",
246
+ "required": true
247
+ },
248
+ "title": {
249
+ "type": "String",
250
+ "required": true
251
+ }
252
+ }
253
+ },
254
+ "DocumentAttributes": {
255
+ "resourceType": "App::Document.Attributes",
256
+ "kind": "property",
257
+ "lexicon": "cedar",
258
+ "namespace": "App",
259
+ "properties": {
260
+ "classification": {
261
+ "type": "String",
262
+ "required": true
263
+ },
264
+ "folder": {
265
+ "type": "App::Folder",
266
+ "required": true
267
+ },
268
+ "owner": {
269
+ "type": "App::User",
270
+ "required": true
271
+ },
272
+ "public": {
273
+ "type": "Bool",
274
+ "required": true
275
+ },
276
+ "tags": {
277
+ "type": "Set<String>",
278
+ "required": true
279
+ },
280
+ "title": {
281
+ "type": "String",
282
+ "required": true
283
+ }
284
+ }
285
+ },
286
+ "Folder": {
287
+ "resourceType": "App::Folder",
288
+ "kind": "resource",
289
+ "lexicon": "cedar",
290
+ "namespace": "App",
291
+ "memberOfTypes": [],
292
+ "properties": {
293
+ "name": {
294
+ "type": "String",
295
+ "required": true
296
+ },
297
+ "owner": {
298
+ "type": "App::User",
299
+ "required": true
300
+ },
301
+ "tags": {
302
+ "type": "Set<String>",
303
+ "required": true
304
+ }
305
+ }
306
+ },
307
+ "FolderAttributes": {
308
+ "resourceType": "App::Folder.Attributes",
309
+ "kind": "property",
310
+ "lexicon": "cedar",
311
+ "namespace": "App",
312
+ "properties": {
313
+ "name": {
314
+ "type": "String",
315
+ "required": true
316
+ },
317
+ "owner": {
318
+ "type": "App::User",
319
+ "required": true
320
+ },
321
+ "tags": {
322
+ "type": "Set<String>",
323
+ "required": true
324
+ }
325
+ }
326
+ },
327
+ "Group": {
328
+ "resourceType": "App::Group",
329
+ "kind": "resource",
330
+ "lexicon": "cedar",
331
+ "namespace": "App",
332
+ "memberOfTypes": [],
333
+ "properties": {
334
+ "description": {
335
+ "type": "String",
336
+ "required": false
337
+ },
338
+ "name": {
339
+ "type": "String",
340
+ "required": true
341
+ }
342
+ }
343
+ },
344
+ "GroupAttributes": {
345
+ "resourceType": "App::Group.Attributes",
346
+ "kind": "property",
347
+ "lexicon": "cedar",
348
+ "namespace": "App",
349
+ "properties": {
350
+ "description": {
351
+ "type": "String",
352
+ "required": false
353
+ },
354
+ "name": {
355
+ "type": "String",
356
+ "required": true
357
+ }
358
+ }
359
+ },
360
+ "ListAction": {
361
+ "resourceType": "App::Action::\"list\"",
362
+ "kind": "resource",
363
+ "lexicon": "cedar",
364
+ "namespace": "App",
365
+ "principalTypes": [
366
+ "App::ServiceAccount",
367
+ "App::User"
368
+ ],
369
+ "resourceTypes": [
370
+ "App::Document",
371
+ "App::Folder"
372
+ ],
373
+ "properties": {
374
+ "mfa": {
375
+ "type": "Bool",
376
+ "required": true
377
+ },
378
+ "sourceIp": {
379
+ "type": "String",
380
+ "required": false
381
+ }
382
+ }
383
+ },
384
+ "ListContext": {
385
+ "resourceType": "App::Action::\"list\".Context",
386
+ "kind": "property",
387
+ "lexicon": "cedar",
388
+ "namespace": "App",
389
+ "properties": {
390
+ "mfa": {
391
+ "type": "Bool",
392
+ "required": true
393
+ },
394
+ "sourceIp": {
395
+ "type": "String",
396
+ "required": false
397
+ }
398
+ }
399
+ },
400
+ "Policy": {
401
+ "resourceType": "Cedar::Policy",
402
+ "kind": "resource",
403
+ "lexicon": "cedar",
404
+ "description": "A Cedar policy — the unit this lexicon serializes to .cedar text and the JSON policy format.",
405
+ "properties": {
406
+ "effect": {
407
+ "type": "permit | forbid",
408
+ "required": false
409
+ },
410
+ "principal": {
411
+ "type": "scope",
412
+ "required": false
413
+ },
414
+ "action": {
415
+ "type": "scope",
416
+ "required": false
417
+ },
418
+ "resource": {
419
+ "type": "scope",
420
+ "required": false
421
+ },
422
+ "when": {
423
+ "type": "Set<expression>",
424
+ "required": false
425
+ },
426
+ "unless": {
427
+ "type": "Set<expression>",
428
+ "required": false
429
+ },
430
+ "annotations": {
431
+ "type": "Record<String, String>",
432
+ "required": false
433
+ }
434
+ }
435
+ },
436
+ "ReadAction": {
437
+ "resourceType": "App::Action::\"read\"",
438
+ "kind": "resource",
439
+ "lexicon": "cedar",
440
+ "namespace": "App",
441
+ "principalTypes": [
442
+ "App::ServiceAccount",
443
+ "App::User"
444
+ ],
445
+ "resourceTypes": [
446
+ "App::Document",
447
+ "App::Folder"
448
+ ],
449
+ "properties": {
450
+ "mfa": {
451
+ "type": "Bool",
452
+ "required": true
453
+ },
454
+ "sourceIp": {
455
+ "type": "String",
456
+ "required": false
457
+ }
458
+ }
459
+ },
460
+ "ReadContext": {
461
+ "resourceType": "App::Action::\"read\".Context",
462
+ "kind": "property",
463
+ "lexicon": "cedar",
464
+ "namespace": "App",
465
+ "properties": {
466
+ "mfa": {
467
+ "type": "Bool",
468
+ "required": true
469
+ },
470
+ "sourceIp": {
471
+ "type": "String",
472
+ "required": false
473
+ }
474
+ }
475
+ },
476
+ "ServiceAccount": {
477
+ "resourceType": "App::ServiceAccount",
478
+ "kind": "resource",
479
+ "lexicon": "cedar",
480
+ "namespace": "App",
481
+ "memberOfTypes": [
482
+ "App::Group"
483
+ ],
484
+ "properties": {
485
+ "name": {
486
+ "type": "String",
487
+ "required": true
488
+ },
489
+ "owner": {
490
+ "type": "App::User",
491
+ "required": true
492
+ },
493
+ "rotatedAt": {
494
+ "type": "String",
495
+ "required": false
496
+ }
497
+ }
498
+ },
499
+ "ServiceAccountAttributes": {
500
+ "resourceType": "App::ServiceAccount.Attributes",
501
+ "kind": "property",
502
+ "lexicon": "cedar",
503
+ "namespace": "App",
504
+ "properties": {
505
+ "name": {
506
+ "type": "String",
507
+ "required": true
508
+ },
509
+ "owner": {
510
+ "type": "App::User",
511
+ "required": true
512
+ },
513
+ "rotatedAt": {
514
+ "type": "String",
515
+ "required": false
516
+ }
517
+ }
518
+ },
519
+ "ShareAction": {
520
+ "resourceType": "App::Action::\"share\"",
521
+ "kind": "resource",
522
+ "lexicon": "cedar",
523
+ "namespace": "App",
524
+ "principalTypes": [
525
+ "App::User"
526
+ ],
527
+ "resourceTypes": [
528
+ "App::Document"
529
+ ],
530
+ "properties": {
531
+ "approvedBy": {
532
+ "type": "App::User",
533
+ "required": false
534
+ },
535
+ "mfa": {
536
+ "type": "Bool",
537
+ "required": true
538
+ }
539
+ }
540
+ },
541
+ "ShareContext": {
542
+ "resourceType": "App::Action::\"share\".Context",
543
+ "kind": "property",
544
+ "lexicon": "cedar",
545
+ "namespace": "App",
546
+ "properties": {
547
+ "approvedBy": {
548
+ "type": "App::User",
549
+ "required": false
550
+ },
551
+ "mfa": {
552
+ "type": "Bool",
553
+ "required": true
554
+ }
555
+ }
556
+ },
557
+ "Team": {
558
+ "resourceType": "App::Team",
559
+ "kind": "resource",
560
+ "lexicon": "cedar",
561
+ "namespace": "App",
562
+ "memberOfTypes": [
563
+ "App::Group"
564
+ ],
565
+ "properties": {
566
+ "costCenter": {
567
+ "type": "String",
568
+ "required": false
569
+ },
570
+ "name": {
571
+ "type": "String",
572
+ "required": true
573
+ }
574
+ }
575
+ },
576
+ "TeamAttributes": {
577
+ "resourceType": "App::Team.Attributes",
578
+ "kind": "property",
579
+ "lexicon": "cedar",
580
+ "namespace": "App",
581
+ "properties": {
582
+ "costCenter": {
583
+ "type": "String",
584
+ "required": false
585
+ },
586
+ "name": {
587
+ "type": "String",
588
+ "required": true
589
+ }
590
+ }
591
+ },
592
+ "User": {
593
+ "resourceType": "App::User",
594
+ "kind": "resource",
595
+ "lexicon": "cedar",
596
+ "namespace": "App",
597
+ "memberOfTypes": [
598
+ "App::Group",
599
+ "App::Team"
600
+ ],
601
+ "properties": {
602
+ "department": {
603
+ "type": "String",
604
+ "required": true
605
+ },
606
+ "email": {
607
+ "type": "String",
608
+ "required": true
609
+ },
610
+ "level": {
611
+ "type": "Long",
612
+ "required": true
613
+ },
614
+ "manager": {
615
+ "type": "App::User",
616
+ "required": false
617
+ },
618
+ "mfaEnabled": {
619
+ "type": "Bool",
620
+ "required": true
621
+ },
622
+ "roles": {
623
+ "type": "Set<String>",
624
+ "required": true
625
+ }
626
+ }
627
+ },
628
+ "UserAttributes": {
629
+ "resourceType": "App::User.Attributes",
630
+ "kind": "property",
631
+ "lexicon": "cedar",
632
+ "namespace": "App",
633
+ "properties": {
634
+ "department": {
635
+ "type": "String",
636
+ "required": true
637
+ },
638
+ "email": {
639
+ "type": "String",
640
+ "required": true
641
+ },
642
+ "level": {
643
+ "type": "Long",
644
+ "required": true
645
+ },
646
+ "manager": {
647
+ "type": "App::User",
648
+ "required": false
649
+ },
650
+ "mfaEnabled": {
651
+ "type": "Bool",
652
+ "required": true
653
+ },
654
+ "roles": {
655
+ "type": "Set<String>",
656
+ "required": true
657
+ }
658
+ }
659
+ },
660
+ "WriteAction": {
661
+ "resourceType": "App::Action::\"write\"",
662
+ "kind": "resource",
663
+ "lexicon": "cedar",
664
+ "namespace": "App",
665
+ "principalTypes": [
666
+ "App::User"
667
+ ],
668
+ "resourceTypes": [
669
+ "App::Document",
670
+ "App::Folder"
671
+ ],
672
+ "properties": {
673
+ "mfa": {
674
+ "type": "Bool",
675
+ "required": true
676
+ },
677
+ "reason": {
678
+ "type": "String",
679
+ "required": false
680
+ }
681
+ }
682
+ },
683
+ "WriteContext": {
684
+ "resourceType": "App::Action::\"write\".Context",
685
+ "kind": "property",
686
+ "lexicon": "cedar",
687
+ "namespace": "App",
688
+ "properties": {
689
+ "mfa": {
690
+ "type": "Bool",
691
+ "required": true
692
+ },
693
+ "reason": {
694
+ "type": "String",
695
+ "required": false
696
+ }
697
+ }
698
+ }
699
+ }
@@ -0,0 +1,2 @@
1
+ // Code generated by chant generate. DO NOT EDIT.
2
+ export { createProperty, createResource } from "@intentius/chant/runtime";