schema

May 11, 2026 GO-2026-5133

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

Apr 29, 2026 GO-2026-5133

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

Apr 14, 2026 GO-2026-5133 +1 more

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Mar 23, 2026 GO-2026-5133 +2 more

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Mar 18, 2026 GO-2026-5133 +2 more

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Feb 27, 2026 GO-2026-5133 +2 more

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

type DatastoreResolver

+ func ResolverFor(sr datalayer.SchemaReader) *DatastoreResolver

+ func ResolverForSchemaReader(reader datalayer.RevisionedReader) (*DatastoreResolver, error)

type TypeSystem

+ func (ts *TypeSystem) Validate(ctx context.Context, def *Definition) (*ValidatedDefinition, error)

Feb 6, 2026 GO-2026-5133 +2 more

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Feb 3, 2026 GO-2026-4465 +3 more

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

type ArrowInformation

+ ParentNamespace string

type ArrowSet

+ func (as *ArrowSet) LookupArrowsWithComputedUserset(namespaceName string, relationName string) []ArrowInformation

type Graph

+ func NewGraph(ctx context.Context, compiledSchemaResolver *CompiledSchemaResolver) (*Graph, error)

type ReachabilityEntrypoint

+ func (re ReachabilityEntrypoint) SelfRelation() (*core.RelationReference, error)

type TypeSystem

+ func (ts *TypeSystem) GetCaveat(ctx context.Context, caveatName string) (*Caveat, error)

+ type TypeSystemResolver interface

+ LookupCaveat func(ctx context.Context, name string) (*Caveat, error)

+ LookupDefinition func(ctx context.Context, name string) (*core.NamespaceDefinition, bool, error)

Dec 9, 2025 GO-2026-4465 +2 more

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Nov 21, 2025 GO-2026-4465 +2 more

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Oct 24, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Oct 24, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Oct 23, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Oct 6, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

+ func NewKnownEmptyFilterErr(warningMessage string) error

type Definition

+ func (def *Definition) PossibleTraitsForAnyRelation() (Traits, error)

+ type KnownEmptyFilterError struct

+ func (err KnownEmptyFilterError) DetailsMetadata() map[string]string

+ func (err KnownEmptyFilterError) MarshalZerologObject(e *zerolog.Event)

+ func (err KnownEmptyFilterError) WarningMessage() string

type TypeSystem

+ func (ts *TypeSystem) PossibleTraitsForFilter(ctx context.Context, filter datastore.RelationshipsFilter) (Traits, error)

Sep 12, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

type Definition

+ func (def *Definition) PossibleTraitsForAnySubject(relationName string) (Traits, error)

type ReachabilityEntrypoint

+ func (re ReachabilityEntrypoint) DebugStringOrEmpty() string

+ func (re ReachabilityEntrypoint) HashKey() (string, error)

Aug 15, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Aug 8, 2025 GO-2025-4151 +3 more

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Jul 10, 2025 GO-2025-4120 +4 more

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Jul 8, 2025 GO-2025-4120 +4 more

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Jun 16, 2025 GO-2025-4120 +4 more

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

type Definition

+ func (def *Definition) PossibleTraitsForSubject(relationName string, subjectTypeName string) (Traits, error)

+ type Traits struct

+ AllowsCaveats bool

+ AllowsExpiration bool

Jun 9, 2025 GO-2025-4120 +4 more

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

type TypeSystem

+ func (ts *TypeSystem) GetFullRecursiveSubjectTypesForRelation(ctx context.Context, defName string, relationName string) ([]string, error)

+ func (ts *TypeSystem) GetRecursiveTerminalTypesForRelation(ctx context.Context, defName string, relationName string) ([]string, error)

Jun 5, 2025 GO-2025-4120 +4 more

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

May 19, 2025 GO-2025-3744 +5 more

  GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

May 1, 2025 GO-2025-3744 +5 more

  GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Apr 2, 2025 GO-2025-3744 +5 more

  GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Mar 31, 2025 GO-2025-3744 +5 more

  GO-2025-3744: SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

  GO-2025-4120: SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

  GO-2025-4151: SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

  GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Changes in this version

+ func NewCaveatNotFoundErr(caveatName string) error

+ func NewDefinitionNotFoundErr(nsName string) error

+ func NewDuplicateAllowedRelationErr(nsName string, relationName string, allowedRelationSource string) error

+ func NewDuplicateRelationError(nsName string, relationName string) error

+ func NewMissingAllowedRelationsErr(nsName string, relationName string) error

+ func NewPermissionUsedOnLeftOfArrowErr(nsName string, parentPermissionName string, foundPermissionName string) error

+ func NewPermissionsCycleErr(nsName string, permissionNames []string) error

+ func NewRelationNotFoundErr(nsName string, relationName string) error

+ func NewTransitiveWildcardErr(nsName string, relationName string, foundRelationNamespace string, ...) error

+ func NewTypeWithSourceError(wrapped error, withSource nspkg.WithSourcePosition, sourceCodeString string) error

+ func NewUnusedCaveatParameterErr(caveatName string, paramName string) error

+ func NewWildcardUsedInArrowErr(nsName string, parentPermissionName string, foundRelationName string, ...) error

+ func SourceForAllowedRelation(allowedRelation *core.AllowedRelation) string

+ type AllowedDefinitionOption int

+ const AllowedDefinitionNotValid

+ const AllowedDefinitionValid

+ const UnknownIfAllowedDefinition

+ type AllowedDirectRelation int

+ const DirectRelationNotValid

+ const DirectRelationValid

+ const UnknownIfRelationAllowed

+ type AllowedPublicSubject int

+ const PublicSubjectAllowed

+ const PublicSubjectNotAllowed

+ const UnknownIfPublicAllowed

+ type AllowedRelationOption int

+ const AllowedRelationNotValid

+ const AllowedRelationValid

+ const UnknownIfAllowed

+ type ArrowInformation struct

+ Arrow *core.TupleToUserset

+ ParentRelationName string

+ Path string

+ type ArrowSet struct

+ func (as *ArrowSet) AllReachableRelations() *mapz.Set[string]

+ func (as *ArrowSet) HasPossibleArrowWithComputedUserset(namespaceName string, relationName string) bool

+ func (as *ArrowSet) LookupTuplesetArrows(namespaceName string, relationName string) []ArrowInformation

+ type Caveat = core.CaveatDefinition

+ type CaveatNotFoundError struct

+ func (err CaveatNotFoundError) CaveatName() string

+ func (err CaveatNotFoundError) DetailsMetadata() map[string]string

+ func (err CaveatNotFoundError) MarshalZerologObject(e *zerolog.Event)

+ type CompiledSchemaResolver struct

+ func ResolverForCompiledSchema(schema compiler.CompiledSchema) *CompiledSchemaResolver

+ func (c CompiledSchemaResolver) AllDefinitionNames() []string

+ func (c CompiledSchemaResolver) LookupCaveat(ctx context.Context, name string) (*Caveat, error)

+ func (c CompiledSchemaResolver) LookupDefinition(ctx context.Context, name string) (*core.NamespaceDefinition, bool, error)

+ type DatastoreResolver struct

+ func ResolverForDatastoreReader(ds datastore.Reader) *DatastoreResolver

+ func (r *DatastoreResolver) LookupCaveat(ctx context.Context, name string) (*Caveat, error)

+ func (r *DatastoreResolver) LookupDefinition(ctx context.Context, name string) (*core.NamespaceDefinition, bool, error)

+ func (r *DatastoreResolver) WithPredefinedElements(predefined PredefinedElements) Resolver

+ type Definition struct

+ func NewDefinition(ts *TypeSystem, nsDef *core.NamespaceDefinition) (*Definition, error)

+ func (def *Definition) AllowedDirectRelationsAndWildcards(sourceRelationName string) ([]*core.AllowedRelation, error)

+ func (def *Definition) AllowedSubjectRelations(sourceRelationName string) ([]*core.RelationReference, error)

+ func (def *Definition) GetAllowedDirectNamespaceSubjectRelations(sourceRelationName string, targetNamespaceName string) (*mapz.Set[string], error)

+ func (def *Definition) GetRelation(relationName string) (*core.Relation, bool)

+ func (def *Definition) HasAllowedRelation(sourceRelationName string, toCheck *core.AllowedRelation) (AllowedRelationOption, error)

+ func (def *Definition) HasRelation(relationName string) bool

+ func (def *Definition) HasTypeInformation(relationName string) bool

+ func (def *Definition) IsAllowedDirectNamespace(sourceRelationName string, targetNamespaceName string) (AllowedDefinitionOption, error)

+ func (def *Definition) IsAllowedDirectRelation(sourceRelationName string, targetNamespaceName string, ...) (AllowedDirectRelation, error)

+ func (def *Definition) IsAllowedPublicNamespace(sourceRelationName string, targetNamespaceName string) (AllowedPublicSubject, error)

+ func (def *Definition) IsPermission(relationName string) bool

+ func (def *Definition) Namespace() *core.NamespaceDefinition

+ func (def *Definition) Reachability() *DefinitionReachability

+ func (def *Definition) RelationDoesNotAllowCaveatsOrTraitsForSubject(relationName string, subjectTypeName string) (bool, error)

+ func (def *Definition) TypeSystem() *TypeSystem

+ func (def *Definition) Validate(ctx context.Context) (*ValidatedDefinition, error)

+ type DefinitionNotFoundError struct

+ func (err DefinitionNotFoundError) DetailsMetadata() map[string]string

+ func (err DefinitionNotFoundError) MarshalZerologObject(e *zerolog.Event)

+ func (err DefinitionNotFoundError) NotFoundNamespaceName() string

+ type DefinitionReachability struct

+ func (rg *DefinitionReachability) AllEntrypointsForSubjectToResource(ctx context.Context, subjectType *core.RelationReference, ...) ([]ReachabilityEntrypoint, error)

+ func (rg *DefinitionReachability) FirstEntrypointsForSubjectToResource(ctx context.Context, subjectType *core.RelationReference, ...) ([]ReachabilityEntrypoint, error)

+ func (rg *DefinitionReachability) HasOptimizedEntrypointsForSubjectToResource(ctx context.Context, subjectType *core.RelationReference, ...) (bool, error)

+ func (rg *DefinitionReachability) RelationsEncounteredForResource(ctx context.Context, resourceType *core.RelationReference) ([]*core.RelationReference, error)

+ func (rg *DefinitionReachability) RelationsEncounteredForSubject(ctx context.Context, allDefinitions []*core.NamespaceDefinition, ...) ([]*core.RelationReference, error)

+ type DuplicateAllowedRelationError struct

+ func (err DuplicateAllowedRelationError) DetailsMetadata() map[string]string

+ func (err DuplicateAllowedRelationError) MarshalZerologObject(e *zerolog.Event)

+ type DuplicateRelationError struct

+ func (err DuplicateRelationError) DetailsMetadata() map[string]string

+ func (err DuplicateRelationError) MarshalZerologObject(e *zerolog.Event)

+ type FullSchemaResolver interface

+ AllDefinitionNames func() []string

+ type Graph struct

+ func BuildGraph(ctx context.Context, r *CompiledSchemaResolver) (*Graph, error)

+ func (g *Graph) Arrows() *ArrowSet

+ func (g *Graph) RelationsReferencing(namespaceName string, relationName string) []RelationReferenceInfo

+ type MissingAllowedRelationsError struct

+ func (err MissingAllowedRelationsError) DetailsMetadata() map[string]string

+ func (err MissingAllowedRelationsError) MarshalZerologObject(e *zerolog.Event)

+ type PermissionUsedOnLeftOfArrowError struct

+ func (err PermissionUsedOnLeftOfArrowError) DetailsMetadata() map[string]string

+ func (err PermissionUsedOnLeftOfArrowError) MarshalZerologObject(e *zerolog.Event)

+ type PermissionsCycleError struct

+ func (err PermissionsCycleError) DetailsMetadata() map[string]string

+ func (err PermissionsCycleError) MarshalZerologObject(e *zerolog.Event)

+ type PredefinedElements struct

+ Caveats []*Caveat

+ Definitions []*core.NamespaceDefinition

+ type ReachabilityEntrypoint struct

+ func (re ReachabilityEntrypoint) ComputedUsersetRelation() (string, error)

+ func (re ReachabilityEntrypoint) ContainingRelationOrPermission() *core.RelationReference

+ func (re ReachabilityEntrypoint) DebugString() (string, error)

+ func (re ReachabilityEntrypoint) DirectRelation() (*core.RelationReference, error)

+ func (re ReachabilityEntrypoint) EntrypointKind() core.ReachabilityEntrypoint_ReachabilityEntrypointKind

+ func (re ReachabilityEntrypoint) Hash() (uint64, error)

+ func (re ReachabilityEntrypoint) IsDirectResult() bool

+ func (re ReachabilityEntrypoint) MustDebugString() string

+ func (re ReachabilityEntrypoint) String() string

+ func (re ReachabilityEntrypoint) TargetNamespace() string

+ func (re ReachabilityEntrypoint) TuplesetRelation() (string, error)

+ type ReferenceType int

+ const RelationInExpression

+ const RelationIsComputedUsersetForArrow

+ const RelationIsSubjectType

+ const RelationIsTuplesetForArrow

+ type Relation = core.Relation

+ type RelationNotFoundError struct

+ func (err RelationNotFoundError) DetailsMetadata() map[string]string

+ func (err RelationNotFoundError) MarshalZerologObject(e *zerolog.Event)

+ func (err RelationNotFoundError) NamespaceName() string

+ func (err RelationNotFoundError) NotFoundRelationName() string

+ type RelationReferenceInfo struct

+ Arrow *ArrowInformation

+ Relation *core.RelationReference

+ Type ReferenceType

+ type Resolver interface

+ LookupCaveat func(ctx context.Context, name string) (*Caveat, error)

+ LookupDefinition func(ctx context.Context, name string) (*core.NamespaceDefinition, bool, error)

+ func ResolverForPredefinedDefinitions(predefined PredefinedElements) Resolver

+ func ResolverForSchema(schema compiler.CompiledSchema) Resolver

+ type TransitiveWildcardError struct

+ func (err TransitiveWildcardError) DetailsMetadata() map[string]string

+ func (err TransitiveWildcardError) MarshalZerologObject(e *zerolog.Event)

+ type TypeError struct

+ func (err TypeError) Unwrap() error

+ type TypeSystem struct

+ func NewTypeSystem(resolver Resolver) *TypeSystem

+ func (ts *TypeSystem) GetDefinition(ctx context.Context, definition string) (*Definition, error)

+ func (ts *TypeSystem) GetValidatedDefinition(ctx context.Context, definition string) (*ValidatedDefinition, error)

+ type UnusedCaveatParameterError struct

+ func (err UnusedCaveatParameterError) DetailsMetadata() map[string]string

+ func (err UnusedCaveatParameterError) MarshalZerologObject(e *zerolog.Event)

+ type ValidatedDefinition struct

+ type WildcardTypeReference struct

+ ReferencingRelation *core.RelationReference

+ WildcardType *core.AllowedRelation

+ type WildcardUsedInArrowError struct

+ func (err WildcardUsedInArrowError) DetailsMetadata() map[string]string

+ func (err WildcardUsedInArrowError) MarshalZerologObject(e *zerolog.Event)