From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001
From: mo khan <mo@mokhan.ca>
Date: Tue, 15 Jul 2025 16:37:08 -0600
Subject: feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.
---
 vendor/rustix/src/process/chdir.rs | 98 --------------------------------------
 1 file changed, 98 deletions(-)
 delete mode 100644 vendor/rustix/src/process/chdir.rs

(limited to 'vendor/rustix/src/process/chdir.rs')

diff --git a/vendor/rustix/src/process/chdir.rs b/vendor/rustix/src/process/chdir.rs
deleted file mode 100644
index 8c373979..00000000
--- a/vendor/rustix/src/process/chdir.rs
+++ /dev/null
@@ -1,98 +0,0 @@
-#[cfg(not(target_os = "fuchsia"))]
-use crate::backend::fd::AsFd;
-#[cfg(feature = "fs")]
-use crate::path;
-#[cfg(any(feature = "fs", not(target_os = "fuchsia")))]
-use crate::{backend, io};
-#[cfg(all(feature = "alloc", feature = "fs"))]
-use {
-    crate::ffi::{CStr, CString},
-    crate::path::SMALL_PATH_BUFFER_SIZE,
-    alloc::vec::Vec,
-};
-
-/// `chdir(path)`—Change the current working directory.
-///
-/// # References
-///  - [POSIX]
-///  - [Linux]
-///
-/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/chdir.html
-/// [Linux]: https://man7.org/linux/man-pages/man2/chdir.2.html
-#[inline]
-#[cfg(feature = "fs")]
-#[cfg_attr(docsrs, doc(cfg(feature = "fs")))]
-pub fn chdir<P: path::Arg>(path: P) -> io::Result<()> {
-    path.into_with_c_str(backend::process::syscalls::chdir)
-}
-
-/// `fchdir(fd)`—Change the current working directory.
-///
-/// # References
-///  - [POSIX]
-///  - [Linux]
-///
-/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/fchdir.html
-/// [Linux]: https://man7.org/linux/man-pages/man2/fchdir.2.html
-#[cfg(not(target_os = "fuchsia"))]
-#[inline]
-pub fn fchdir<Fd: AsFd>(fd: Fd) -> io::Result<()> {
-    backend::process::syscalls::fchdir(fd.as_fd())
-}
-
-/// `getcwd`—Return the current working directory.
-///
-/// If `reuse` already has available capacity, reuse it if possible.
-///
-/// # References
-///  - [POSIX]
-///  - [Linux]
-///
-/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/getcwd.html
-/// [Linux]: https://man7.org/linux/man-pages/man3/getcwd.3.html
-#[cfg(all(feature = "alloc", feature = "fs"))]
-#[cfg(not(target_os = "wasi"))]
-#[cfg_attr(docsrs, doc(cfg(feature = "fs")))]
-#[cfg_attr(docsrs, doc(cfg(feature = "alloc")))]
-#[inline]
-pub fn getcwd<B: Into<Vec<u8>>>(reuse: B) -> io::Result<CString> {
-    _getcwd(reuse.into())
-}
-
-#[cfg(all(feature = "alloc", feature = "fs"))]
-#[allow(unsafe_code)]
-fn _getcwd(mut buffer: Vec<u8>) -> io::Result<CString> {
-    buffer.clear();
-    buffer.reserve(SMALL_PATH_BUFFER_SIZE);
-
-    loop {
-        match backend::process::syscalls::getcwd(buffer.spare_capacity_mut()) {
-            Err(io::Errno::RANGE) => {
-                // Use `Vec` reallocation strategy to grow capacity
-                // exponentially.
-                buffer.reserve(buffer.capacity() + 1);
-            }
-            Ok(_) => {
-                // SAFETY:
-                // - “These functions return a null-terminated string”
-                // - [POSIX definition 3.375: String]: “A contiguous sequence
-                //   of bytes terminated by and including the first null byte.”
-                //
-                // Thus, there will be a single NUL byte at the end of the
-                // string.
-                //
-                // [POSIX definition 3.375: String]: https://pubs.opengroup.org/onlinepubs/9799919799/basedefs/V1_chap03.html#tag_03_375
-                unsafe {
-                    buffer.set_len(
-                        CStr::from_ptr(buffer.as_ptr().cast())
-                            .to_bytes_with_nul()
-                            .len(),
-                    );
-
-                    return Ok(CString::from_vec_with_nul_unchecked(buffer));
-                }
-            }
-            Err(errno) => return Err(errno),
-        }
-    }
-}
-- 
cgit v1.2.3