feat: add policy bundles for defining max-grant-duration

max-grant-duration/1d/.manifest

@@ -0,0 +1 @@
+{ "roots": ["policy"] }

max-grant-duration/1d/policy.rego

@@ -0,0 +1,8 @@
+package time
+
+import data.abbey.functions
+
+allow[msg] {
+    functions.expire_after("24h")
+    msg := "granting access for 1 day"
+}

max-grant-duration/1h/.manifest

@@ -0,0 +1 @@
+{ "roots": ["policy"] }

max-grant-duration/1h/policy.rego

@@ -0,0 +1,8 @@
+package time
+
+import data.abbey.functions
+
+allow[msg] {
+    functions.expire_after("1h")
+    msg := "granting access for 1 hour"
+}

max-grant-duration/1w/.manifest

@@ -0,0 +1 @@
+{ "roots": ["policy"] }

max-grant-duration/1w/policy.rego

@@ -0,0 +1,8 @@
+package time
+
+import data.abbey.functions
+
+allow[msg] {
+    functions.expire_after("168h")
+    msg := "granting access for 1 week"
+}

max-grant-duration/8h/.manifest

@@ -0,0 +1 @@
+{ "roots": ["policy"] }

max-grant-duration/8h/policy.rego

@@ -0,0 +1,8 @@
+package time
+
+import data.abbey.functions
+
+allow[msg] {
+    functions.expire_after("8h")
+    msg := "granting access for 8 hours"
+}