AnnotateNamespace annotates the namespace in the type system with computed aliasing and cache key metadata for more efficient dispatching.

CheckNamespaceAndRelation checks that the specified namespace and relation exist in the datastore.

CheckNamespaceAndRelations ensures that the given namespace+relation checks all succeed.

ListReferencedNamespaces returns the names of all namespaces referenced in the given namespace definitions.

NewDuplicateRelationError constructs an error indicating that a relation was defined more than once in a namespace.

NewNamespaceNotFoundErr constructs a new namespace not found error.

NewPermissionsCycleErr constructs an error indicating that a cycle exists amongst permissions.

NewRelationNotFoundErr constructs a new relation not found error.

NewUnusedCaveatParameterErr constructs indicating that a parameter was unused in a caveat expression.

ReadNamespaceAndRelation checks that the specified namespace and relation exist in the datastore.

ValidateCaveatDefinition validates the parameters and types within the given caveat definition, including usage of the parameters.

DuplicateRelationError occurs when a duplicate relation was found inside a namespace.

NamespaceNotFoundError occurs when a namespace was not found.

PermissionsCycleError occurs when a cycle exists within permissions.

RelationNotFoundError occurs when a relation was not found under a namespace.

TypeAndRelationToCheck is a single check of a namespace+relation pair.

UnusedCaveatParameterError indicates that a caveat parameter is unused in the caveat expression.