@intentius/chant-lexicon-cedar 0.49.0 → 0.51.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/integrity.json +2 -2
- package/dist/manifest.json +1 -1
- package/dist/okf/index.md +1 -1
- package/dist/okf/rules/CEDC014.md +2 -2
- package/dist/okf/types/Policy.md +1 -1
- package/package.json +2 -2
package/dist/integrity.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"algorithm": "sha256",
|
|
3
3
|
"artifacts": {
|
|
4
|
-
"manifest.json": "
|
|
4
|
+
"manifest.json": "1c9dd1e01747bf878ab5bcaf10f389e995483115bfca73635b0898820bf8afb8",
|
|
5
5
|
"meta.json": "b218779260169a193882aeee76e5ac559588f1682657a001fb0982cffb5843fc",
|
|
6
6
|
"types/index.d.ts": "9e53a1cb3c9ee38f9de2f3c0db9cc28a0b67c3649be410c341e2451b9b0076cd",
|
|
7
7
|
"rules/policy-shape.ts": "1654730d188b7163dbad3051c75a562198a96eda6d36ce35701f2b729bf45194",
|
|
@@ -30,5 +30,5 @@
|
|
|
30
30
|
"skills/chant-cedar-meta-policy.md": "050b310a87196a48c827f1129698e4c6bbcd96dc963782e22bf1a640bbc20a1a",
|
|
31
31
|
"skills/chant-cedar-dogwood.md": "fc8c9a2ea9cd7bf87037c156b0b419397d46fbf5cd201c09be721249ac91b8da"
|
|
32
32
|
},
|
|
33
|
-
"composite": "
|
|
33
|
+
"composite": "5695a22c75d47cf36bbc2c7d55c6d237c765b744b4742643e0581e004d80b091"
|
|
34
34
|
}
|
package/dist/manifest.json
CHANGED
package/dist/okf/index.md
CHANGED
|
@@ -29,7 +29,7 @@ okf_version: '0.2'
|
|
|
29
29
|
* [CEDC011](/rules/CEDC011.md) - Every when/unless condition expression in an emitted policy must parse as a Cedar expression
|
|
30
30
|
* [CEDC012](/rules/CEDC012.md) - No two emitted Cedar policies may claim the same policy id
|
|
31
31
|
* [CEDC013](/rules/CEDC013.md) - An emitted policy's @id annotation must match its policy id, and annotation values must be non-empty strings
|
|
32
|
-
* [CEDC014](/rules/CEDC014.md) - An entity reference in a policy scope must be a well-formed Namespace::Type
|
|
32
|
+
* [CEDC014](/rules/CEDC014.md) - An entity reference in a policy scope must be a well-formed Namespace::Type::"id" UID
|
|
33
33
|
* [CEDE010](/rules/CEDE010.md) - Every emitted Cedar policy set validates clean against the project schema (cedar-wasm validate)
|
|
34
34
|
* [CEDE011](/rules/CEDE011.md) - Cedar validation warnings (impossible policies, shadowed conditions) on an emitted policy set
|
|
35
35
|
* [CEDS010](/rules/CEDS010.md) - A bare permit(principal, action, resource) with no scope constraints and no conditions grants everything
|
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
---
|
|
2
2
|
type: post-synth-check
|
|
3
3
|
title: CEDC014
|
|
4
|
-
description: An entity reference in a policy scope must be a well-formed Namespace::Type
|
|
4
|
+
description: An entity reference in a policy scope must be a well-formed Namespace::Type::"id" UID
|
|
5
5
|
id: CEDC014
|
|
6
6
|
severity: error
|
|
7
7
|
category: post-synth
|
|
8
8
|
lexicon: cedar
|
|
9
9
|
docs: https://intentius.io/chant/lexicons/cedar/rules/
|
|
10
10
|
---
|
|
11
|
-
An entity reference in a policy scope must be a well-formed Namespace::Type
|
|
11
|
+
An entity reference in a policy scope must be a well-formed Namespace::Type::"id" UID
|
|
12
12
|
|
|
13
13
|
## Applies to
|
|
14
14
|
|
package/dist/okf/types/Policy.md
CHANGED
|
@@ -22,7 +22,7 @@ A Cedar policy — the unit this lexicon serializes to .cedar text and the JSON
|
|
|
22
22
|
|
|
23
23
|
- [CEDC011](/rules/CEDC011.md): Every when/unless condition expression in an emitted policy must parse as a Cedar expression
|
|
24
24
|
- [CEDC013](/rules/CEDC013.md): An emitted policy's @id annotation must match its policy id, and annotation values must be non-empty strings
|
|
25
|
-
- [CEDC014](/rules/CEDC014.md): An entity reference in a policy scope must be a well-formed Namespace::Type
|
|
25
|
+
- [CEDC014](/rules/CEDC014.md): An entity reference in a policy scope must be a well-formed Namespace::Type::"id" UID
|
|
26
26
|
- [CEDE010](/rules/CEDE010.md): Every emitted Cedar policy set validates clean against the project schema (cedar-wasm validate)
|
|
27
27
|
- [CEDE011](/rules/CEDE011.md): Cedar validation warnings (impossible policies, shadowed conditions) on an emitted policy set
|
|
28
28
|
- [CEDS010](/rules/CEDS010.md): A bare permit(principal, action, resource) with no scope constraints and no conditions grants everything
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intentius/chant-lexicon-cedar",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.51.0",
|
|
4
4
|
"description": "Cedar lexicon for chant — typed authoring for Cedar authorization policies",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"homepage": "https://intentius.io/chant",
|
|
@@ -74,7 +74,7 @@
|
|
|
74
74
|
},
|
|
75
75
|
"peerDependencies": {
|
|
76
76
|
"zod": "^4.3.6",
|
|
77
|
-
"@intentius/chant": "^0.
|
|
77
|
+
"@intentius/chant": "^0.51.0",
|
|
78
78
|
"typescript": "^5.9.3"
|
|
79
79
|
}
|
|
80
80
|
}
|