@intentius/chant-lexicon-cedar 0.58.0 → 0.60.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -147,11 +147,11 @@ export declare function agentCorePolicyDefinition(name: string, source: AgentCor
|
|
|
147
147
|
/**
|
|
148
148
|
* A policy and its rollout stage, ready to spread into the generated class.
|
|
149
149
|
*
|
|
150
|
-
* The staged-rollout pattern in one call, which is the point (#1660
|
|
151
|
-
*
|
|
152
|
-
*
|
|
153
|
-
*
|
|
154
|
-
*
|
|
150
|
+
* The staged-rollout pattern in one call, which is the point (#1660): shipping
|
|
151
|
+
* log-only and promoting to enforcing is a one-token diff, not a hand-edited
|
|
152
|
+
* `EnforcementMode` string somewhere else in the template. See
|
|
153
|
+
* ./enforcement.ts for why observe-before-enforce is the default reading of a
|
|
154
|
+
* temporal policy rather than an optional nicety.
|
|
155
155
|
*/
|
|
156
156
|
export declare function agentCoreStagedPolicy(name: string, source: AgentCorePolicySource, stage: AgentCoreStage, options?: AgentCoreEmbedOptions): AgentCoreStagedPolicy;
|
|
157
157
|
/**
|
|
@@ -26,11 +26,11 @@
|
|
|
26
26
|
* translation happens. The wire values are exported as well, for a caller that
|
|
27
27
|
* has one in hand from a live read.
|
|
28
28
|
*
|
|
29
|
-
* ### The showcase seam
|
|
29
|
+
* ### The showcase seam
|
|
30
30
|
*
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
*
|
|
31
|
+
* A staged policy rollout has to be demonstrable end to end: ship the policy
|
|
32
|
+
* log-only, watch what it would have denied, promote it. This module is that
|
|
33
|
+
* seam. The whole rollout is one argument —
|
|
34
34
|
* `agentCoreStagedPolicy(name, policy, stage)` — so the promotion is a
|
|
35
35
|
* one-token diff a reviewer can see, rather than a hand-edited string in a
|
|
36
36
|
* CloudFormation resource. Anything more elaborate (which environments are
|
package/dist/integrity.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"algorithm": "sha256",
|
|
3
3
|
"artifacts": {
|
|
4
|
-
"manifest.json": "
|
|
4
|
+
"manifest.json": "1110ea395be77e4ab1d75c5ee4a720679c9bde2461de0c54f3bc38ae21805a42",
|
|
5
5
|
"meta.json": "b218779260169a193882aeee76e5ac559588f1682657a001fb0982cffb5843fc",
|
|
6
6
|
"types/index.d.ts": "9e53a1cb3c9ee38f9de2f3c0db9cc28a0b67c3649be410c341e2451b9b0076cd",
|
|
7
7
|
"rules/policy-shape.ts": "1654730d188b7163dbad3051c75a562198a96eda6d36ce35701f2b729bf45194",
|
|
@@ -30,5 +30,5 @@
|
|
|
30
30
|
"skills/chant-cedar-meta-policy.md": "050b310a87196a48c827f1129698e4c6bbcd96dc963782e22bf1a640bbc20a1a",
|
|
31
31
|
"skills/chant-cedar-dogwood.md": "7e52d3f045c1c34e00fdef76014a05483fb9dd58cc41037621a76bc298776d8f"
|
|
32
32
|
},
|
|
33
|
-
"composite": "
|
|
33
|
+
"composite": "0f47bedad356e394b102b2442b7cba2761f73f4556b8ea06e8effa59582b7196"
|
|
34
34
|
}
|
package/dist/manifest.json
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intentius/chant-lexicon-cedar",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.60.0",
|
|
4
4
|
"description": "Cedar lexicon for chant — typed authoring for Cedar authorization policies",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"homepage": "https://intentius.io/chant",
|
|
@@ -74,7 +74,7 @@
|
|
|
74
74
|
},
|
|
75
75
|
"peerDependencies": {
|
|
76
76
|
"zod": "^4.3.6",
|
|
77
|
-
"@intentius/chant": "^0.
|
|
77
|
+
"@intentius/chant": "^0.60.0",
|
|
78
78
|
"typescript": "^5.9.3"
|
|
79
79
|
}
|
|
80
80
|
}
|
package/src/agentcore/embed.ts
CHANGED
|
@@ -307,11 +307,11 @@ export function agentCorePolicyDefinition(
|
|
|
307
307
|
/**
|
|
308
308
|
* A policy and its rollout stage, ready to spread into the generated class.
|
|
309
309
|
*
|
|
310
|
-
* The staged-rollout pattern in one call, which is the point (#1660
|
|
311
|
-
*
|
|
312
|
-
*
|
|
313
|
-
*
|
|
314
|
-
*
|
|
310
|
+
* The staged-rollout pattern in one call, which is the point (#1660): shipping
|
|
311
|
+
* log-only and promoting to enforcing is a one-token diff, not a hand-edited
|
|
312
|
+
* `EnforcementMode` string somewhere else in the template. See
|
|
313
|
+
* ./enforcement.ts for why observe-before-enforce is the default reading of a
|
|
314
|
+
* temporal policy rather than an optional nicety.
|
|
315
315
|
*/
|
|
316
316
|
export function agentCoreStagedPolicy(
|
|
317
317
|
name: string,
|
|
@@ -26,11 +26,11 @@
|
|
|
26
26
|
* translation happens. The wire values are exported as well, for a caller that
|
|
27
27
|
* has one in hand from a live read.
|
|
28
28
|
*
|
|
29
|
-
* ### The showcase seam
|
|
29
|
+
* ### The showcase seam
|
|
30
30
|
*
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
*
|
|
31
|
+
* A staged policy rollout has to be demonstrable end to end: ship the policy
|
|
32
|
+
* log-only, watch what it would have denied, promote it. This module is that
|
|
33
|
+
* seam. The whole rollout is one argument —
|
|
34
34
|
* `agentCoreStagedPolicy(name, policy, stage)` — so the promotion is a
|
|
35
35
|
* one-token diff a reviewer can see, rather than a hand-edited string in a
|
|
36
36
|
* CloudFormation resource. Anything more elaborate (which environments are
|