@intentius/chant-lexicon-cedar 0.78.0 → 0.79.0

package/dist/gate-policy.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Cedar as a gate's approval policy (chant#2508).
+ *
+ * Two halves, one per side of the build:
+ *
+ * - {@link gatePolicy} renders a set of cedar `Policy` declarables to Cedar
+ *   text at authoring time and returns core's `GatePolicyRef`, plain data that
+ *   lands in the Op's build output. A gate names it as `approval.policy`.
+ * - {@link evaluateGatePolicy} is what core's `loadGatePolicyEvaluator("cedar")`
+ *   imports from `@intentius/chant-lexicon-cedar/gate-policy`. `chant approve`
+ *   calls it once per approval with a `PassGate` request, through the same
+ *   `cedar-wasm` the post-synth checks load (`./lint/post-synth/wasm-helpers.ts`).
+ *
+ * The request uses these entity types, so a policy is written against them:
+ *
+ * | Position  | Entity                                   | Attributes / parents |
+ * |-----------|------------------------------------------|----------------------|
+ * | principal | `Chant::Human::"<name>"` or `Chant::Agent::"<name>"` | parents: one `Chant::Role::"<role>"` per claimed role |
+ * | action    | `Chant::Action::"PassGate"`              | |
+ * | resource  | `Chant::Gate::"<op>/<gate>"`             | `op`, `gate` |
+ * | context   | `planDigest` when the gate binds a plan, plus the gate's `approval.context` | |
+ *
+ * So `principal is Chant::Agent` picks out an agent, `principal in
+ * Chant::Role::"maintainer"` a role, and `context.risk == "low"` a declared
+ * plan attribute.
+ */
+import type { Declarable } from "@intentius/chant/declarable";
+import { type GatePolicyAnswer, type GatePolicyRef, type GatePolicyRequest } from "@intentius/chant/op";
+export declare const GATE_HUMAN_TYPE = "Chant::Human";
+export declare const GATE_AGENT_TYPE = "Chant::Agent";
+export declare const GATE_ROLE_TYPE = "Chant::Role";
+export declare const GATE_RESOURCE_TYPE = "Chant::Gate";
+/** `action == Chant::Action::"PassGate"`, ready for a `Policy`'s `action` scope. */
+export declare const PASS_GATE_ACTION = "Chant::Action::\"PassGate\"";
+/** The policies a gate policy set is made of: one, a list, or a record whose keys become their logical names. */
+export type GatePolicies = Declarable | readonly Declarable[] | Readonly<Record<string, Declarable>>;
+/**
+ * A gate policy set from cedar `Policy` declarables. `name` is recorded with
+ * every decision; ids come from each policy's `annotations.id`, else its
+ * record key, else `<name>-<index>`.
+ *
+ * Throws when a member is not a cedar policy, or when the rendered set does
+ * not parse, so a broken policy fails where it is written and not at the
+ * first `chant approve`.
+ *
+ * @example
+ * ```ts
+ * export const shipPolicy = gatePolicy("ship", {
+ *   agentLowRisk: new Policy({
+ *     effect: "permit",
+ *     principal: { is: GATE_AGENT_TYPE },
+ *     action: { eq: PASS_GATE_ACTION },
+ *     when: ['context.risk == "low"'],
+ *   }),
+ * });
+ * ```
+ */
+export declare function gatePolicy(name: string, policies: GatePolicies): GatePolicyRef;
+/**
+ * Evaluate one `PassGate` request. Called by core through
+ * `loadGatePolicyEvaluator("cedar")`; see the module doc for the entity model.
+ *
+ * Throws when the wasm cannot be loaded or the request cannot be evaluated at
+ * all, so `chant approve` refuses rather than recording a decision nobody
+ * made. A policy that errors on this request is reported in `errors` and does
+ * not apply, which is Cedar's own rule.
+ */
+export declare function evaluateGatePolicy(policy: GatePolicyRef, request: GatePolicyRequest): GatePolicyAnswer;
+//# sourceMappingURL=gate-policy.d.ts.map

package/dist/gate-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-policy.d.ts","sourceRoot":"","sources":["../src/gate-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAK7B,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAC9C,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAChD,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,gCAA8B,CAAC;AAE5D,iHAAiH;AACjH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAcrG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,aAAa,CA0B9E;AA0CD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CA+BtG"}

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export { cedarPlugin } from "./plugin.js";
 export { cedarSerializer, policyIdFromLogicalName, resolvePolicyId, cedarPolicyRecords } from "./serializer.js";
 export { CEDAR_POLICY_TYPE, CEDAR_JSON_FILENAME } from "./serializer.js";
+export { gatePolicy, evaluateGatePolicy, GATE_HUMAN_TYPE, GATE_AGENT_TYPE, GATE_ROLE_TYPE, GATE_RESOURCE_TYPE, PASS_GATE_ACTION, } from "./gate-policy.js";
+export type { GatePolicies } from "./gate-policy.js";
 export type { CedarEffect, CedarScope, CedarPolicyProps, CedarPolicyRecord } from "./serializer.js";
 export { avpStatement, avpStatementJSON, avpPolicyDefinition, avpPolicyResource, avpPolicySet, } from "./avp/embed.js";
 export type { AvpEmbedOptions, AvpPolicyDefinition, AvpPolicyResource, AvpStaticDefinition, } from "./avp/embed.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACtE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjG,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACnG,YAAY,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAWhG,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAMtD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAClI,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIzE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACpF,YAAY,EACV,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGtE,OAAO,EACL,UAAU,EAAE,kBAAkB,EAC9B,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,GACvF,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAIjG,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACnG,YAAY,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAWhG,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAMtD,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAClI,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIzD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIpE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC7F,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIzE,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACpF,YAAY,EACV,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,cAAc,mBAAmB,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "2d77ad212b518e17145307ca82a5fc68f466b61a5d304e6afa28b7997a6b6f5a",
+    "manifest.json": "2334a9f9352afbbd0b353415f0aa6e172cb35905cb368f2b9dae082c64382d40",
     "meta.json": "b218779260169a193882aeee76e5ac559588f1682657a001fb0982cffb5843fc",
     "types/index.d.ts": "9e53a1cb3c9ee38f9de2f3c0db9cc28a0b67c3649be410c341e2451b9b0076cd",
     "rules/policy-shape.ts": "1654730d188b7163dbad3051c75a562198a96eda6d36ce35701f2b729bf45194",
@@ -30,5 +30,5 @@
     "skills/chant-cedar-meta-policy.md": "050b310a87196a48c827f1129698e4c6bbcd96dc963782e22bf1a640bbc20a1a",
     "skills/chant-cedar-dogwood.md": "7e52d3f045c1c34e00fdef76014a05483fb9dd58cc41037621a76bc298776d8f"
   },
-  "composite": "0bc5bd90e0b4ae42dcb5f8aa9981b60545b85b8e572fe4c3ed02442df2ab0044"
+  "composite": "0abe9aeea8c2cb18fdee0e0bbc3cba769f3796642ec3243a492131a557cc49a7"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "cedar",
-  "version": "0.78.0",
+  "version": "0.79.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Cedar",
   "intrinsics": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-cedar",
-  "version": "0.78.0",
+  "version": "0.79.0",
   "description": "Cedar lexicon for chant — typed authoring for Cedar authorization policies",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -74,7 +74,7 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.78.0",
+    "@intentius/chant": "^0.79.0",
     "typescript": "^5.9.3"
   }
 }

package/src/gate-policy.test.ts

@@ -0,0 +1,101 @@
+/**
+ * A cedar policy set as a gate's approval policy (chant#2508), evaluated by
+ * the real cedar-wasm, and reached through core's loader the way `chant
+ * approve` reaches it.
+ */
+import { describe, test, expect } from "vitest";
+import { gatePolicyRequest, gatePolicyVersion, loadGatePolicyEvaluator, gateApprovalProblems } from "@intentius/chant/op";
+import { Policy, type EntityTypeName, type PolicyRef } from "./generated/index";
+import { DenyByDefaultSet } from "./composites/deny-by-default-set";
+import { evaluateGatePolicy, gatePolicy, GATE_AGENT_TYPE, PASS_GATE_ACTION } from "./gate-policy";
+
+const PLAN = `sha256:${"a".repeat(64)}`;
+
+// The generated scope types are narrowed to this package's sample `App::`
+// schema. A project writing gate policies declares the `Chant` namespace in
+// its own schema, and then these names type-check without a cast.
+const AGENT = GATE_AGENT_TYPE as EntityTypeName;
+const PASS_GATE = PASS_GATE_ACTION as unknown as PolicyRef;
+const MAINTAINER = 'Chant::Role::"maintainer"' as unknown as PolicyRef;
+
+const agentLowRisk = new Policy({
+  effect: "permit",
+  principal: { is: AGENT },
+  action: { eq: PASS_GATE },
+  when: ['context.risk == "low"'],
+});
+const maintainers = new Policy({
+  effect: "permit",
+  principal: { in: MAINTAINER },
+  action: { eq: PASS_GATE },
+});
+
+function ask(kind: "human" | "agent", name: string, context: Record<string, unknown>, roles: string[] = []) {
+  return gatePolicyRequest({
+    op: "release", gate: "ship", resolvedBy: name, approver: { kind, roles }, planDigest: PLAN, context,
+  });
+}
+
+describe("gatePolicy (chant#2508)", () => {
+  test("renders the set to Cedar text with ids from the record keys, stamped with its digest", () => {
+    const ref = gatePolicy("ship", { agentLowRisk, maintainers });
+    expect(ref.kind).toBe("gate-policy");
+    expect(ref.lexicon).toBe("cedar");
+    expect(ref.text).toContain('@id("agent-low-risk")');
+    expect(ref.text).toContain('@id("maintainers")');
+    expect(ref.text).toContain("principal is Chant::Agent");
+    expect(ref.version).toBe(gatePolicyVersion(ref.text));
+    expect(gateApprovalProblems({ policy: ref, mode: "enforce" })).toEqual([]);
+  });
+
+  test("refuses a member that is not a cedar policy", () => {
+    expect(() => gatePolicy("ship", [{ entityType: "Other::Thing" } as never])).toThrow("not a Cedar::Policy");
+  });
+
+  test("refuses a set that does not parse", () => {
+    const broken = new Policy({ effect: "permit", when: ["context.risk =="] });
+    expect(() => gatePolicy("ship", [broken])).toThrow("does not parse");
+  });
+});
+
+describe("evaluateGatePolicy (chant#2508)", () => {
+  const ref = gatePolicy("ship", { agentLowRisk, maintainers });
+
+  test("permits an agent on a low-risk plan, naming the rule", () => {
+    expect(evaluateGatePolicy(ref, ask("agent", "release-bot", { risk: "low" }))).toEqual({
+      decision: "allow", determining: ["agent-low-risk"], errors: [],
+    });
+  });
+
+  test("denies the same agent on a high-risk plan", () => {
+    expect(evaluateGatePolicy(ref, ask("agent", "release-bot", { risk: "high" })).decision).toBe("deny");
+  });
+
+  test("reads a claimed role as a parent entity", () => {
+    expect(evaluateGatePolicy(ref, ask("human", "alex", {}, ["maintainer"])).determining).toEqual(["maintainers"]);
+    expect(evaluateGatePolicy(ref, ask("human", "pat", {}, ["viewer"])).decision).toBe("deny");
+  });
+
+  test("a policy that errors on a request does not apply, and the error is reported", () => {
+    // `context.risk` is absent, so the agent rule errors rather than matching.
+    const answer = evaluateGatePolicy(ref, ask("agent", "release-bot", {}));
+    expect(answer.decision).toBe("deny");
+    expect(answer.errors.join("\n")).toContain("agent-low-risk");
+  });
+
+  test("a DenyByDefaultSet floor overrides the agent permit, so only human approvals count", () => {
+    const floored = gatePolicy("ship", DenyByDefaultSet({
+      policies: [agentLowRisk],
+      principal: AGENT,
+      when: ["true"],
+    }).all);
+    const answer = evaluateGatePolicy(floored, ask("agent", "release-bot", { risk: "low" }));
+    expect(answer.decision).toBe("deny");
+    expect(answer.determining).toHaveLength(1);
+  });
+
+  test("core's loader finds this module by the lexicon-name convention", async () => {
+    const evaluator = await loadGatePolicyEvaluator("cedar");
+    expect((await evaluator.evaluateGatePolicy(ref, ask("agent", "release-bot", { risk: "low" }))).decision).toBe("allow");
+  });
+});

package/src/gate-policy.ts

@@ -0,0 +1,190 @@
+/**
+ * Cedar as a gate's approval policy (chant#2508).
+ *
+ * Two halves, one per side of the build:
+ *
+ * - {@link gatePolicy} renders a set of cedar `Policy` declarables to Cedar
+ *   text at authoring time and returns core's `GatePolicyRef`, plain data that
+ *   lands in the Op's build output. A gate names it as `approval.policy`.
+ * - {@link evaluateGatePolicy} is what core's `loadGatePolicyEvaluator("cedar")`
+ *   imports from `@intentius/chant-lexicon-cedar/gate-policy`. `chant approve`
+ *   calls it once per approval with a `PassGate` request, through the same
+ *   `cedar-wasm` the post-synth checks load (`./lint/post-synth/wasm-helpers.ts`).
+ *
+ * The request uses these entity types, so a policy is written against them:
+ *
+ * | Position  | Entity                                   | Attributes / parents |
+ * |-----------|------------------------------------------|----------------------|
+ * | principal | `Chant::Human::"<name>"` or `Chant::Agent::"<name>"` | parents: one `Chant::Role::"<role>"` per claimed role |
+ * | action    | `Chant::Action::"PassGate"`              | |
+ * | resource  | `Chant::Gate::"<op>/<gate>"`             | `op`, `gate` |
+ * | context   | `planDigest` when the gate binds a plan, plus the gate's `approval.context` | |
+ *
+ * So `principal is Chant::Agent` picks out an agent, `principal in
+ * Chant::Role::"maintainer"` a role, and `context.risk == "low"` a declared
+ * plan attribute.
+ */
+
+import type { Declarable } from "@intentius/chant/declarable";
+import {
+  gatePolicyVersion,
+  type GatePolicyAnswer,
+  type GatePolicyRef,
+  type GatePolicyRequest,
+} from "@intentius/chant/op";
+import { getProps, resolvePolicyId } from "./policy-text";
+import { CEDAR_POLICY_TYPE, renderPolicyText } from "./serializer";
+import { describeError, loadWasm, wasmLoadError } from "./lint/post-synth/wasm-helpers";
+
+export const GATE_HUMAN_TYPE = "Chant::Human";
+export const GATE_AGENT_TYPE = "Chant::Agent";
+export const GATE_ROLE_TYPE = "Chant::Role";
+export const GATE_RESOURCE_TYPE = "Chant::Gate";
+/** `action == Chant::Action::"PassGate"`, ready for a `Policy`'s `action` scope. */
+export const PASS_GATE_ACTION = 'Chant::Action::"PassGate"';
+
+/** The policies a gate policy set is made of: one, a list, or a record whose keys become their logical names. */
+export type GatePolicies = Declarable | readonly Declarable[] | Readonly<Record<string, Declarable>>;
+
+function entries(name: string, policies: GatePolicies): Array<[string, Declarable]> {
+  if (Array.isArray(policies)) {
+    return (policies as readonly Declarable[]).map((p, i) => [`${name}-${i}`, p]);
+  }
+  if (isDeclarable(policies)) return [[name, policies]];
+  return Object.entries(policies as Record<string, Declarable>);
+}
+
+function isDeclarable(value: unknown): value is Declarable {
+  return typeof value === "object" && value !== null && "entityType" in value;
+}
+
+/**
+ * A gate policy set from cedar `Policy` declarables. `name` is recorded with
+ * every decision; ids come from each policy's `annotations.id`, else its
+ * record key, else `<name>-<index>`.
+ *
+ * Throws when a member is not a cedar policy, or when the rendered set does
+ * not parse, so a broken policy fails where it is written and not at the
+ * first `chant approve`.
+ *
+ * @example
+ * ```ts
+ * export const shipPolicy = gatePolicy("ship", {
+ *   agentLowRisk: new Policy({
+ *     effect: "permit",
+ *     principal: { is: GATE_AGENT_TYPE },
+ *     action: { eq: PASS_GATE_ACTION },
+ *     when: ['context.risk == "low"'],
+ *   }),
+ * });
+ * ```
+ */
+export function gatePolicy(name: string, policies: GatePolicies): GatePolicyRef {
+  const members = entries(name, policies);
+  if (members.length === 0) throw new Error(`gatePolicy("${name}"): the policy set is empty`);
+
+  const texts = members.map(([logical, entity]) => {
+    if (entity.entityType !== CEDAR_POLICY_TYPE) {
+      throw new Error(
+        `gatePolicy("${name}"): "${logical}" is a ${entity.entityType}, not a ${CEDAR_POLICY_TYPE}`,
+      );
+    }
+    const props = getProps(entity);
+    return renderPolicyText(resolvePolicyId(logical, props), props);
+  });
+  const text = texts.join("\n\n") + "\n";
+
+  const wasm = loadWasm();
+  if (wasm) {
+    const parsed = wasm.checkParsePolicySet({ staticPolicies: text });
+    if (parsed.type === "failure") {
+      throw new Error(
+        `gatePolicy("${name}"): the policy set does not parse: ${parsed.errors.map(describeError).join("; ")}`,
+      );
+    }
+  }
+
+  return { kind: "gate-policy", lexicon: "cedar", name, version: gatePolicyVersion(text), text };
+}
+
+type CedarValue = string | number | boolean | CedarValue[] | { [key: string]: CedarValue };
+
+/** A context value as Cedar JSON. Cedar has no floats or null, so those become strings or are dropped. */
+function cedarValue(value: unknown): CedarValue | undefined {
+  if (typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") return Number.isInteger(value) ? value : String(value);
+  if (Array.isArray(value)) {
+    return value.map(cedarValue).filter((v): v is CedarValue => v !== undefined);
+  }
+  if (typeof value === "object" && value !== null) {
+    const out: Record<string, CedarValue> = {};
+    for (const [k, v] of Object.entries(value)) {
+      const converted = cedarValue(v);
+      if (converted !== undefined) out[k] = converted;
+    }
+    return out;
+  }
+  return undefined;
+}
+
+/**
+ * The set as a record keyed by each policy's `@id`. Handed the text whole,
+ * cedar-wasm names policies by position (`policy0`), and a recorded decision
+ * would then name a rule nobody wrote. A policy with no `@id` keeps its
+ * positional name.
+ */
+function keyedById(wasm: NonNullable<ReturnType<typeof loadWasm>>, policy: GatePolicyRef): Record<string, string> {
+  const parts = wasm.policySetTextToParts(policy.text);
+  if (parts.type === "failure") {
+    throw new Error(`policy "${policy.name}" does not parse: ${parts.errors.map(describeError).join("; ")}`);
+  }
+  const keyed: Record<string, string> = {};
+  parts.policies.forEach((text, index) => {
+    const id = /@id\(\s*"((?:[^"\\]|\\.)*)"\s*\)/.exec(text)?.[1] ?? `policy${index}`;
+    if (id in keyed) throw new Error(`policy "${policy.name}" has two policies with id "${id}"`);
+    keyed[id] = text;
+  });
+  return keyed;
+}
+
+/**
+ * Evaluate one `PassGate` request. Called by core through
+ * `loadGatePolicyEvaluator("cedar")`; see the module doc for the entity model.
+ *
+ * Throws when the wasm cannot be loaded or the request cannot be evaluated at
+ * all, so `chant approve` refuses rather than recording a decision nobody
+ * made. A policy that errors on this request is reported in `errors` and does
+ * not apply, which is Cedar's own rule.
+ */
+export function evaluateGatePolicy(policy: GatePolicyRef, request: GatePolicyRequest): GatePolicyAnswer {
+  const wasm = loadWasm();
+  if (!wasm) throw new Error(`@cedar-policy/cedar-wasm could not be loaded: ${wasmLoadError()}`);
+
+  const principalType = request.principal.kind === "agent" ? GATE_AGENT_TYPE : GATE_HUMAN_TYPE;
+  const roles = [...new Set(request.principal.roles)];
+  const principal = { type: principalType, id: request.principal.name };
+  const resource = { type: GATE_RESOURCE_TYPE, id: `${request.resource.op}/${request.resource.gate}` };
+
+  const answer = wasm.isAuthorized({
+    principal,
+    action: { type: "Chant::Action", id: request.action },
+    resource,
+    context: (cedarValue(request.context) ?? {}) as Record<string, never>,
+    policies: { staticPolicies: keyedById(wasm, policy) },
+    entities: [
+      { uid: principal, attrs: {}, parents: roles.map((id) => ({ type: GATE_ROLE_TYPE, id })) },
+      ...roles.map((id) => ({ uid: { type: GATE_ROLE_TYPE, id }, attrs: {}, parents: [] })),
+      { uid: resource, attrs: { op: request.resource.op, gate: request.resource.gate }, parents: [] },
+    ],
+  });
+
+  if (answer.type === "failure") {
+    throw new Error(`policy "${policy.name}" could not be evaluated: ${answer.errors.map(describeError).join("; ")}`);
+  }
+  const { decision, diagnostics } = answer.response;
+  return {
+    decision,
+    determining: [...diagnostics.reason].sort(),
+    errors: diagnostics.errors.map((e) => `${e.policyId}: ${describeError(e.error)}`),
+  };
+}

package/src/index.ts

@@ -4,6 +4,13 @@ export { cedarPlugin } from "./plugin";
 // Serializer
 export { cedarSerializer, policyIdFromLogicalName, resolvePolicyId, cedarPolicyRecords } from "./serializer";
 export { CEDAR_POLICY_TYPE, CEDAR_JSON_FILENAME } from "./serializer";
+
+// Gate approval policy (chant#2508) — a cedar policy set as a gate's `approval.policy`.
+export {
+  gatePolicy, evaluateGatePolicy,
+  GATE_HUMAN_TYPE, GATE_AGENT_TYPE, GATE_ROLE_TYPE, GATE_RESOURCE_TYPE, PASS_GATE_ACTION,
+} from "./gate-policy";
+export type { GatePolicies } from "./gate-policy";
 export type { CedarEffect, CedarScope, CedarPolicyProps, CedarPolicyRecord } from "./serializer";
 
 // AVP embedding (#1652) — the typed statement an `AWS::VerifiedPermissions::Policy`