feat: Celest Auth

packages/cedar/.gitignore

@@ -0,0 +1,7 @@
+# https://dart.dev/guides/libraries/private-files
+# Created by `dart pub`
+.dart_tool/
+
+# Avoid committing pubspec.lock for library packages; see
+# https://dart.dev/guides/libraries/private-files#pubspeclock.
+pubspec.lock

packages/cedar/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial version.

packages/cedar/README.md

@@ -0,0 +1,5 @@
+# cedar
+
+Base types and utilities of the Cedar language in Dart.
+
+This is separate from `package:cedar` so that the types can be used without bundling the native assets of `package:cedar`.

packages/cedar/analysis_options.yaml

@@ -0,0 +1,30 @@
+# This file configures the static analysis results for your project (errors,
+# warnings, and lints).
+#
+# This enables the 'recommended' set of lints from `package:lints`.
+# This set helps identify many issues that may lead to problems when running
+# or consuming Dart code, and enforces writing Dart using a single, idiomatic
+# style and format.
+#
+# If you want a smaller set of lints you can change this to specify
+# 'package:lints/core.yaml'. These are just the most critical lints
+# (the recommended set includes the core lints).
+# The core lints are also what is used by pub.dev for scoring packages.
+
+include: package:lints/recommended.yaml
+
+# Uncomment the following section to specify additional rules.
+
+# linter:
+#   rules:
+#     - camel_case_types
+
+# analyzer:
+#   exclude:
+#     - path/to/excluded/files/**
+
+# For more information about the core and recommended set of lints, see
+# https://dart.dev/go/core-lints
+
+# For additional information about configuring this file, see
+# https://dart.dev/guides/language/analysis-options

packages/cedar/lib/cedar.dart

@@ -0,0 +1,17 @@
+/// Core types and interfaces of the Cedar policy language in Dart.
+///
+/// This is separate from `package:cedar_ffi` so that the types can be used
+/// without bundling the native assets of `package:cedar_ffi`.
+library;
+
+export 'src/ast/cedar_entity.dart';
+export 'src/ast/cedar_entity_id.dart';
+export 'src/ast/cedar_node.dart';
+export 'src/ast/cedar_schema.dart';
+export 'src/authorization/cedar_authorization_request.dart';
+export 'src/authorization/cedar_authorization_response.dart';
+export 'src/authorization/cedar_authorizer.dart';
+export 'src/policy/cedar_policy.dart';
+export 'src/policy/cedar_policy_set.dart';
+export 'src/policy/json_expr.dart';
+export 'src/serializers.dart';

packages/cedar/lib/src/ast/cedar_entity.dart

@@ -0,0 +1,54 @@
+import 'package:built_collection/built_collection.dart';
+import 'package:built_value/built_value.dart';
+import 'package:built_value/serializer.dart';
+import 'package:cedar/src/ast/cedar_entity_id.dart';
+import 'package:cedar/src/ast/cedar_node.dart';
+import 'package:cedar/src/policy/json_expr.dart';
+
+part 'cedar_entity.g.dart';
+
+abstract class CedarEntity
+    implements Built<CedarEntity, CedarEntityBuilder>, CedarNode {
+  factory CedarEntity({
+    required CedarEntityId id,
+    List<CedarEntityId> parents = const [],
+    Map<String, CedarValueJson> attributes = const {},
+  }) {
+    return _$CedarEntity._(
+      id: id,
+      parents: parents.build(),
+      attributes: attributes.build(),
+    );
+  }
+
+  factory CedarEntity.build([
+    void Function(CedarEntityBuilder) updates,
+  ]) = _$CedarEntity;
+
+  factory CedarEntity.fromJson(Map<String, Object?> json) => CedarEntity(
+        id: CedarEntityId.fromJson(json['uid'] as Map<String, Object?>),
+        parents: (json['parents'] as List<Object?>)
+            .map((e) => CedarEntityId.fromJson(e as Map<String, Object?>))
+            .toList(),
+        attributes: (json['attrs'] as Map<Object?, Object?>)
+            .cast<String, Object?>()
+            .map((key, value) => MapEntry(key, CedarValueJson.fromJson(value))),
+      );
+
+  const CedarEntity._();
+
+  CedarEntityId get id;
+  BuiltList<CedarEntityId> get parents;
+  BuiltMap<String, CedarValueJson> get attributes;
+
+  @override
+  Map<String, Object?> toJson() => {
+        'uid': id.toJson(),
+        'parents': parents.map((e) => e.toJson()).toList(),
+        'attrs': attributes
+            .map((key, value) => MapEntry(key, value.toJson()))
+            .asMap(),
+      };
+
+  static Serializer<CedarEntity> get serializer => _$cedarEntitySerializer;
+}

packages/cedar/lib/src/ast/cedar_entity_id.dart

@@ -0,0 +1,70 @@
+import 'package:built_value/built_value.dart';
+import 'package:built_value/serializer.dart';
+import 'package:cedar/src/ast/cedar_node.dart';
+
+part 'cedar_entity_id.g.dart';
+
+abstract class CedarEntityId
+    implements Built<CedarEntityId, CedarEntityIdBuilder>, CedarNode {
+  factory CedarEntityId(String type, String id) =>
+      _$CedarEntityId._(type: type, id: id);
+
+  factory CedarEntityId.build([
+    void Function(CedarEntityIdBuilder) updates,
+  ]) = _$CedarEntityId;
+
+  factory CedarEntityId.fromJson(Map<String, Object?> json) {
+    switch (json) {
+      case {'type': final String type, 'id': final String id} ||
+            {'__entity': {'type': final String type, 'id': final String id}}:
+        return CedarEntityId(type, id);
+      default:
+        throw FormatException('Invalid entity ID JSON: $json');
+    }
+  }
+
+  const CedarEntityId._();
+
+  String get type;
+  String get id;
+
+  /// Returns a normalized version of this entity ID.
+  ///
+  /// Cedar prohibits whitespace in entity IDs, so this method removes all
+  /// whitespace from the [type] and [id].
+  ///
+  /// See [RFC 9](https://github.com/cedar-policy/rfcs/blob/main/text/0009-disallow-whitespace-in-entityuid.md)
+  /// for more information.
+  CedarEntityId get normalized => CedarEntityId(
+        type,
+        String.fromCharCodes(
+          id.runes.expand((char) {
+            return switch (char) {
+              0 => '\\0'.codeUnits,
+              0x9 => '\\t'.codeUnits,
+              0xa => '\\n'.codeUnits,
+              0xd => '\\r'.codeUnits,
+              0x22 => '\\"'.codeUnits,
+              0x27 => "\\'".codeUnits,
+              < 0x20 ||
+              0x7f || // Delete
+              0x96 || // Non-breaking space
+              > 0xffff =>
+                '\\u{${char.toRadixString(16)}}'.codeUnits,
+              _ => [char],
+            };
+          }),
+        ),
+      );
+
+  @override
+  String toString() => '$type::"$id"';
+
+  @override
+  Map<String, Object?> toJson() => {
+        'type': type,
+        'id': id,
+      };
+
+  static Serializer<CedarEntityId> get serializer => _$cedarEntityIdSerializer;
+}