feat: Complete target system with C# bindings and resource inference (microsoft#458)

* feat: Add Schema Registry and Validation Framework

This commit introduces a comprehensive schema registry and validation framework, providing schema-based validation of resources and policy effects.

- Thread-safe, in-memory registry for schema storage and management
- Global registry patterns for effects and resources
- Concurrent access with proper error handling
- Unicode schema names support

- JSON Schema-compliant validation for all primitive types
- Advanced constraint validation (patterns, ranges, length limits)
- Discriminated union support with anyOf schemas
- Detailed error reporting with nested validation paths
- Discriminated subobject validation for polymorphic schemas

- **Registry Tests**: All registry operations
- **Effect Tests**: Policy effect validation
- **Resource Tests**: Resource validation
- **Validation Tests**: Core validation engine
- Thread-safety, error handling, integration scenarios, edge cases

- **Dependencies**: dashmap, once_cell, regex
- **Thread Safety**: Minimal locking with Rc<Schema> sharing
- **Error Types**: TypeMismatch, OutOfRange, PatternMismatch, etc.

- Complete schema registry and validation subsystem
- Comprehensive test coverage
- Foundation for policy validation in Regorus

Benchmarks:

- Criterion benchmarks for basic types, effects and Azure resources
- Performance range: 3.22ns (string) to 34.74µs (Azure VM resource schema validation)
- String withs patterns validation: 30.2µs. Need to explore whether regex caching helps
  bring this down.
- Azure policy effects: 188ns-1.4µs

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

* feat: Complete target system with C# bindings and resource inference

- Add comprehensive target system with TargetRegistry and target-aware compilation
- Implement resource type inference from policy equality expressions
- Create modular C# bindings with separate wrapper classes for each concept
- Add thread-safe CompiledPolicy with reference counting for safe disposal
- Enhance FFI with detailed error propagation and target functionality
- Create TargetExampleApp demonstrating Azure Policy integration
- Add CI/CD pipeline testing for all C# applications
- Support target definitions with schema validation and resource selectors
- Implement PolicyModule struct and target-aware compilation methods
- Add comprehensive test coverage for target functionality

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

---------

Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>

Author: anakrish

.github/workflows/test-csharp.yml

@@ -140,12 +140,38 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: regorus-nuget
-          path: ./bindings/csharp/Regorus.Tests/regorus-nuget/
+          path: ./bindings/csharp/regorus-nuget/
 
       - name: Restore Regorus.Tests
-        run: dotnet restore /p:RestoreAdditionalProjectSources=./regorus-nuget
+        run: dotnet restore /p:RestoreAdditionalProjectSources=../regorus-nuget
         working-directory: ./bindings/csharp/Regorus.Tests
 
       - name: Run Regorus.Tests
         run: dotnet test --no-restore
         working-directory: ./bindings/csharp/Regorus.Tests
+
+      - name: Restore TestApp
+        run: dotnet restore /p:RestoreAdditionalProjectSources=../regorus-nuget
+        working-directory: ./bindings/csharp/TestApp
+
+      - name: Build TestApp
+        run: dotnet build --no-restore
+        working-directory: ./bindings/csharp/TestApp
+
+      - name: Run TestApp
+        run: dotnet run --no-build --framework net8.0
+        working-directory: ./bindings/csharp/TestApp
+
+      - name: Restore TargetExampleApp
+        run: dotnet restore /p:RestoreAdditionalProjectSources=../regorus-nuget
+        working-directory: ./bindings/csharp/TargetExampleApp
+
+      - name: Build TargetExampleApp
+        run: dotnet build --no-restore
+        working-directory: ./bindings/csharp/TargetExampleApp
+
+      - name: Run TargetExampleApp
+        run: dotnet run --no-build --framework net8.0
+        working-directory: ./bindings/csharp/TargetExampleApp
+
+      

Cargo.lock

@@ -93,6 +93,7 @@ anyhow = { version = "1.0.45", default-features = false }
 serde = {version = "1.0.150", default-features = false, features = ["derive", "rc"] }
 serde_json = { version = "1.0.89", default-features = false, features = ["alloc"] }
 lazy_static =  { version = "1.4.0", default-features = false }
+thiserror = { version = "2.0", default-features = false }
 
 data-encoding = { version = "2.8.0", optional = true, default-features=false, features = ["alloc"] }
 scientific = { version = "0.5.3" }

Cargo.toml

@@ -43,48 +43,48 @@ int main() {
 
     // Turn on rego v0 since policy uses v0.
     r = regorus_engine_set_rego_v0(engine, true);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
 
     // Load policies.
     r = regorus_engine_add_policy(engine, "framework.rego", (buffer = file_to_string("../../../tests/aci/framework.rego")));
     free(buffer);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
     printf("Loaded package %s\n", r.output);
     regorus_result_drop(r);
 
     r = regorus_engine_add_policy(engine, "api.rego", (buffer = file_to_string("../../../tests/aci/api.rego")));
     free(buffer);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
     printf("Loaded package %s\n", r.output);
     regorus_result_drop(r);
 
     r = regorus_engine_add_policy(engine, "policy.rego", (buffer = file_to_string("../../../tests/aci/policy.rego")));
     free(buffer);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
     printf("Loaded package %s\n", r.output);
     regorus_result_drop(r);
 
     // Add data
     r = regorus_engine_add_data_json(engine, (buffer = file_to_string("../../../tests/aci/data.json")));
     free(buffer);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
     regorus_result_drop(r);
 
     // Set input
     r = regorus_engine_set_input_json(engine, (buffer = file_to_string("../../../tests/aci/input.json")));
     free(buffer);
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
     regorus_result_drop(r);
 
     // Eval rule.
     r = regorus_engine_eval_rule(engine, "data.framework.mount_overlay");
-    if (r.status != RegorusStatusOk)
+    if (r.status != Ok)
 	goto error;
 
     // Print output