cerbos-synapse-extension
Installation
SKILL.md
Cerbos Synapse Extension
Synapse extends the Cerbos authorization pipeline. Five extension kinds × multiple runtimes. Pick kind → runtime → load the matching reference.
Extension Kinds
| Kind | Purpose | Entry points |
|---|---|---|
| Call mapper | HTTP ↔ Cerbos mapping. CEL only, no code. | routeExtensions.builtinRouteExtension routes or envoyExternalAuthz in config.yaml |
| Data source | Attribute lookups for other extensions. | Export lookup; consumed via cerbos.data_source_lookup() (Starlark) / dataSourceLookup (WASM) |
| Proxy extension | Modify CheckResources / PlanResources / AuthZEN requests+responses. | augment{Check,Plan,AuthzenEvaluation,AuthzenEvaluationBatch}{Request,Response} (Starlark: snake_case) |
| Route extension | Custom HTTP endpoints under /ext/. |
handleHTTPRoute, optional handleCerbosResponse callback (Starlark: handle_http_route / handle_cerbos_response) |
| Envoy extension | Envoy ext_authz → Cerbos. | envoyCheck, optional envoyMapCerbosResponse callback (Starlark: envoy_check / map_cerbos_response — not envoy_map_cerbos_response) |