From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001
From: mo khan <mo@mokhan.ca>
Date: Tue, 15 Jul 2025 16:37:08 -0600
Subject: feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.
---
 vendor/tempfile/src/error.rs | 45 --------------------------------------------
 1 file changed, 45 deletions(-)
 delete mode 100644 vendor/tempfile/src/error.rs

(limited to 'vendor/tempfile/src/error.rs')

diff --git a/vendor/tempfile/src/error.rs b/vendor/tempfile/src/error.rs
deleted file mode 100644
index ed6b6cc8..00000000
--- a/vendor/tempfile/src/error.rs
+++ /dev/null
@@ -1,45 +0,0 @@
-use std::path::PathBuf;
-use std::{error, fmt, io};
-
-#[derive(Debug)]
-struct PathError {
-    path: PathBuf,
-    err: io::Error,
-}
-
-impl fmt::Display for PathError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{} at path {:?}", self.err, self.path)
-    }
-}
-
-impl error::Error for PathError {
-    fn source(&self) -> Option<&(dyn error::Error + 'static)> {
-        self.err.source()
-    }
-}
-
-pub(crate) trait IoResultExt<T> {
-    fn with_err_path<F, P>(self, path: F) -> Self
-    where
-        F: FnOnce() -> P,
-        P: Into<PathBuf>;
-}
-
-impl<T> IoResultExt<T> for Result<T, io::Error> {
-    fn with_err_path<F, P>(self, path: F) -> Self
-    where
-        F: FnOnce() -> P,
-        P: Into<PathBuf>,
-    {
-        self.map_err(|e| {
-            io::Error::new(
-                e.kind(),
-                PathError {
-                    path: path().into(),
-                    err: e,
-                },
-            )
-        })
-    }
-}
-- 
cgit v1.2.3