Export policy compiler.

Co-authored-by: Dmitri Plotnikov <dplotnikov@google.com>
PiperOrigin-RevId: 930699321

Author: 2 people

MODULE.bazel

@@ -31,6 +31,7 @@ bazel_dep(
     name = "rules_python",
     version = "1.6.3",
 )
+bazel_dep(name = "rules_license", version = "1.0.0")
 bazel_dep(
     name = "protobuf",
     version = "34.1",
@@ -96,3 +97,16 @@ bazel_dep(
     name = "yaml-cpp",
     version = "0.9.0",
 )
+
+_CEL_POLICY_TAG = "ebfb2361f47080af643c14cf4da4c2b551a68740"
+
+_CEL_POLICY_SHA = "ea69e9c6b7bd5bc37d358148aebd2fcca38bc7c45a23feb635de72338e0327c1"
+
+http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+http_archive(
+    name = "cel_policy",
+    sha256 = _CEL_POLICY_SHA,
+    strip_prefix = "cel-policy-%s" % _CEL_POLICY_TAG,
+    url = "https://github.com/cel-expr/cel-policy/archive/%s.tar.gz" % _CEL_POLICY_TAG,
+)

conformance/policy/BUILD

@@ -0,0 +1,78 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+load("@rules_cc//cc:cc_library.bzl", "cc_library")
+load(
+    "//conformance/policy:policy_conformance_test.bzl",
+    "cel_policy_conformance_test",
+)
+
+package(default_visibility = ["//visibility:public"])
+
+cc_library(
+    name = "policy_conformance_test_lib",
+    testonly = True,
+    srcs = ["policy_conformance_test.cc"],
+    deps = [
+        "//common:ast",
+        "//common:source",
+        "//common:value",
+        "//common/internal:value_conversion",
+        "//compiler",
+        "//env",
+        "//env:config",
+        "//env:env_runtime",
+        "//env:env_std_extensions",
+        "//env:env_yaml",
+        "//env:runtime_std_extensions",
+        "//extensions/protobuf:bind_proto_to_activation",
+        "//extensions/protobuf:enum_adapter",
+        "//internal:runfiles",
+        "//internal:status_macros",
+        "//internal:testing_descriptor_pool",
+        "//internal:testing_no_main",
+        "//policy:cel_policy",
+        "//policy:cel_policy_parser",
+        "//policy:cel_policy_validation_result",
+        "//policy:compiler",
+        "//policy:test_util",
+        "//policy:yaml_policy_parser",
+        "//runtime",
+        "//runtime:activation",
+        "//runtime:function_adapter",
+        "@com_google_absl//absl/flags:flag",
+        "@com_google_absl//absl/log:absl_check",
+        "@com_google_absl//absl/memory",
+        "@com_google_absl//absl/status",
+        "@com_google_absl//absl/status:statusor",
+        "@com_google_absl//absl/strings",
+        "@com_google_cel_spec//proto/cel/expr:value_cc_proto",
+        "@com_google_cel_spec//proto/cel/expr/conformance/test:suite_cc_proto",
+        "@com_google_protobuf//:protobuf",
+    ],
+    alwayslink = True,
+)
+
+cel_policy_conformance_test(
+    name = "policy_conformance_test",
+    example = "@cel_policy//conformance:testdata/nested_rule/policy.yaml",
+    skip_tests = [
+        # TODO(b/506179116): Fix these.
+        # Need to add k8s custom yaml parser and mock runtime.
+        "k8s",
+    ],
+    test_files = [
+        "@cel_policy//conformance:testdata",
+    ],
+)

conformance/policy/policy_conformance_test.bzl

@@ -0,0 +1,46 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""
+This module contains build rules for generating policy conformance test targets.
+"""
+
+load("@rules_cc//cc:cc_test.bzl", "cc_test")
+
+def cel_policy_conformance_test(name, test_files, example, skip_tests = [], **kwargs):
+    """Generates a policy conformance test target.
+
+    Args:
+        name: Name of the test target.
+        test_files: List of targets or files representing the test data.
+        example: A specific example file from test_files used for runfiles resolution.
+        skip_tests: List of test cases to skip.
+        testdata_dir: Path to testdata directory under runfiles.
+        **kwargs: Additional arguments passed to the underlying cc_test.
+    """
+    args = ["--gunit_fail_if_no_test_linked"]
+    args.append("--testdata_example='$(rlocationpath {})'".format(example))
+
+    if skip_tests:
+        args.append("--skip_tests=" + ",".join(skip_tests))
+
+    cc_test(
+        name = name,
+        data = test_files + [example],
+        deps = [
+            "//conformance/policy:policy_conformance_test_lib",
+        ],
+        args = args,
+        **kwargs
+    )