@drodil/backstage-plugin-qeta-node 3.26.0 → 3.28.0

package/dist/defaultPermissionPolicy.cjs.js

@@ -22,19 +22,26 @@ class DefaultQetaPermissionPolicy {
     if (request.permission.attributes.action === "update" || request.permission.attributes.action === "delete") {
       if (pluginPermissionCommon.isResourcePermission(request.permission, backstagePluginQetaCommon.POST_RESOURCE_TYPE)) {
         return backstagePluginQetaNode.createPostConditionalDecision(request.permission, {
-          allOf: [
+          anyOf: [
             // Can edit and delete own questions
             backstagePluginQetaNode.postAuthorConditionFactory({
               userRef: user.identity.userEntityRef
+            }),
+            // Can edit and delete if tag expert
+            backstagePluginQetaNode.postTagExpertConditionFactory({
+              userRef: user.identity.userEntityRef
             })
           ]
         });
       }
       if (pluginPermissionCommon.isResourcePermission(request.permission, backstagePluginQetaCommon.ANSWER_RESOURCE_TYPE)) {
         return backstagePluginQetaNode.createAnswerConditionalDecision(request.permission, {
-          allOf: [
+          anyOf: [
             backstagePluginQetaNode.answerAuthorConditionFactory({
               userRef: user.identity.userEntityRef
+            }),
+            backstagePluginQetaNode.answerTagExpertConditionFactory({
+              userRef: user.identity.userEntityRef
             })
           ]
         });
@@ -50,9 +57,14 @@ class DefaultQetaPermissionPolicy {
       }
       if (pluginPermissionCommon.isResourcePermission(request.permission, backstagePluginQetaCommon.COLLECTION_RESOUCE_TYPE)) {
         return backstagePluginQetaNode.createCollectionConditionalDecision(request.permission, {
-          allOf: [
+          anyOf: [
+            // Allow deleting and updating only own collections
             backstagePluginQetaNode.collectionOwnerConditionFactory({
               userRef: user.identity.userEntityRef
+            }),
+            // Allow deleting and updating if tag expert
+            backstagePluginQetaNode.collectionTagExpertConditionFactory({
+              userRef: user.identity.userEntityRef
             })
           ]
         });

package/dist/defaultPermissionPolicy.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaultPermissionPolicy.cjs.js","sources":["../src/defaultPermissionPolicy.ts"],"sourcesContent":["/*\n * SPDX-FileCopyrightText: Copyright 2024 OP Financial Group (https://op.fi). All Rights Reserved.\n * SPDX-License-Identifier: LicenseRef-OpAllRightsReserved\n */\nimport { BackstageIdentityResponse } from '@backstage/plugin-auth-node';\nimport {\n  AuthorizeResult,\n  isPermission,\n  isResourcePermission,\n  isUpdatePermission,\n  PolicyDecision,\n} from '@backstage/plugin-permission-common';\nimport {\n  PermissionPolicy,\n  PolicyQuery,\n} from '@backstage/plugin-permission-node';\nimport {\n  ANSWER_RESOURCE_TYPE,\n  COLLECTION_RESOUCE_TYPE,\n  COMMENT_RESOURCE_TYPE,\n  POST_RESOURCE_TYPE,\n  qetaModeratePermission,\n  TAG_RESOURCE_TYPE,\n} from '@drodil/backstage-plugin-qeta-common';\nimport {\n  answerAuthorConditionFactory,\n  collectionOwnerConditionFactory,\n  commentAuthorConditionFactory,\n  createAnswerConditionalDecision,\n  createCollectionConditionalDecision,\n  createCommentConditionalDecision,\n  createPostConditionalDecision,\n  postAuthorConditionFactory,\n} from '@drodil/backstage-plugin-qeta-node';\nimport { Config } from '@backstage/config';\n\nexport class DefaultQetaPermissionPolicy implements PermissionPolicy {\n  constructor(private readonly config?: Config) {}\n\n  async handle(\n    request: PolicyQuery,\n    user?: BackstageIdentityResponse,\n  ): Promise<PolicyDecision> {\n    // We cannot do anything without a user\n    if (!user) {\n      return { result: AuthorizeResult.DENY };\n    }\n\n    // Moderators can modify anything\n    const moderators =\n      this.config?.getOptionalStringArray('qeta.moderators') ?? [];\n    if (\n      isPermission(request.permission, qetaModeratePermission) &&\n      (moderators.includes(user.identity.userEntityRef) ||\n        user.identity.ownershipEntityRefs.some(ref => moderators.includes(ref)))\n    ) {\n      return { result: AuthorizeResult.ALLOW };\n    }\n\n    if (\n      request.permission.attributes.action === 'create' ||\n      request.permission.attributes.action === 'read'\n    ) {\n      return { result: AuthorizeResult.ALLOW };\n    }\n\n    // Allow updating and deleting only own posts/answers/comments\n    if (\n      request.permission.attributes.action === 'update' ||\n      request.permission.attributes.action === 'delete'\n    ) {\n      if (isResourcePermission(request.permission, POST_RESOURCE_TYPE)) {\n        return createPostConditionalDecision(request.permission, {\n          allOf: [\n            // Can edit and delete own questions\n            postAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      if (isResourcePermission(request.permission, ANSWER_RESOURCE_TYPE)) {\n        return createAnswerConditionalDecision(request.permission, {\n          allOf: [\n            answerAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      // Allow deleting and updating only own comments\n      if (isResourcePermission(request.permission, COMMENT_RESOURCE_TYPE)) {\n        return createCommentConditionalDecision(request.permission, {\n          allOf: [\n            commentAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      // Allow deleting and updating only own collections\n      if (isResourcePermission(request.permission, COLLECTION_RESOUCE_TYPE)) {\n        return createCollectionConditionalDecision(request.permission, {\n          allOf: [\n            collectionOwnerConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      // Allow updating any tag by anyone\n      if (\n        isResourcePermission(request.permission, TAG_RESOURCE_TYPE) &&\n        isUpdatePermission(request.permission)\n      ) {\n        return { result: AuthorizeResult.ALLOW };\n      }\n    }\n\n    return { result: AuthorizeResult.DENY };\n  }\n}\n"],"names":["AuthorizeResult","isPermission","qetaModeratePermission","isResourcePermission","POST_RESOURCE_TYPE","createPostConditionalDecision","postAuthorConditionFactory","ANSWER_RESOURCE_TYPE","createAnswerConditionalDecision","answerAuthorConditionFactory","COMMENT_RESOURCE_TYPE","createCommentConditionalDecision","commentAuthorConditionFactory","COLLECTION_RESOUCE_TYPE","createCollectionConditionalDecision","collectionOwnerConditionFactory","TAG_RESOURCE_TYPE","isUpdatePermission"],"mappings":";;;;;;AAoCO,MAAM,2BAAwD,CAAA;AAAA,EACnE,YAA6B,MAAiB,EAAA;AAAjB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA;AAAkB,EAE/C,MAAM,MACJ,CAAA,OAAA,EACA,IACyB,EAAA;AAEzB,IAAA,IAAI,CAAC,IAAM,EAAA;AACT,MAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,IAAK,EAAA;AAAA;AAIxC,IAAA,MAAM,aACJ,IAAK,CAAA,MAAA,EAAQ,sBAAuB,CAAA,iBAAiB,KAAK,EAAC;AAC7D,IACE,IAAAC,mCAAA,CAAa,QAAQ,UAAY,EAAAC,gDAAsB,MACtD,UAAW,CAAA,QAAA,CAAS,KAAK,QAAS,CAAA,aAAa,KAC9C,IAAK,CAAA,QAAA,CAAS,oBAAoB,IAAK,CAAA,CAAA,GAAA,KAAO,WAAW,QAAS,CAAA,GAAG,CAAC,CACxE,CAAA,EAAA;AACA,MAAO,OAAA,EAAE,MAAQ,EAAAF,sCAAA,CAAgB,KAAM,EAAA;AAAA;AAGzC,IACE,IAAA,OAAA,CAAQ,WAAW,UAAW,CAAA,MAAA,KAAW,YACzC,OAAQ,CAAA,UAAA,CAAW,UAAW,CAAA,MAAA,KAAW,MACzC,EAAA;AACA,MAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,KAAM,EAAA;AAAA;AAIzC,IACE,IAAA,OAAA,CAAQ,WAAW,UAAW,CAAA,MAAA,KAAW,YACzC,OAAQ,CAAA,UAAA,CAAW,UAAW,CAAA,MAAA,KAAW,QACzC,EAAA;AACA,MAAA,IAAIG,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAC,4CAAkB,CAAG,EAAA;AAChE,QAAO,OAAAC,qDAAA,CAA8B,QAAQ,UAAY,EAAA;AAAA,UACvD,KAAO,EAAA;AAAA;AAAA,YAELC,kDAA2B,CAAA;AAAA,cACzB,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAGH,MAAA,IAAIH,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAI,8CAAoB,CAAG,EAAA;AAClE,QAAO,OAAAC,uDAAA,CAAgC,QAAQ,UAAY,EAAA;AAAA,UACzD,KAAO,EAAA;AAAA,YACLC,oDAA6B,CAAA;AAAA,cAC3B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAIH,MAAA,IAAIN,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAO,+CAAqB,CAAG,EAAA;AACnE,QAAO,OAAAC,wDAAA,CAAiC,QAAQ,UAAY,EAAA;AAAA,UAC1D,KAAO,EAAA;AAAA,YACLC,qDAA8B,CAAA;AAAA,cAC5B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAIH,MAAA,IAAIT,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAU,iDAAuB,CAAG,EAAA;AACrE,QAAO,OAAAC,2DAAA,CAAoC,QAAQ,UAAY,EAAA;AAAA,UAC7D,KAAO,EAAA;AAAA,YACLC,uDAAgC,CAAA;AAAA,cAC9B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAIH,MACE,IAAAZ,2CAAA,CAAqB,QAAQ,UAAY,EAAAa,2CAAiB,KAC1DC,yCAAmB,CAAA,OAAA,CAAQ,UAAU,CACrC,EAAA;AACA,QAAO,OAAA,EAAE,MAAQ,EAAAjB,sCAAA,CAAgB,KAAM,EAAA;AAAA;AACzC;AAGF,IAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,IAAK,EAAA;AAAA;AAE1C;;;;"}
+{"version":3,"file":"defaultPermissionPolicy.cjs.js","sources":["../src/defaultPermissionPolicy.ts"],"sourcesContent":["/*\n * SPDX-FileCopyrightText: Copyright 2024 OP Financial Group (https://op.fi). All Rights Reserved.\n * SPDX-License-Identifier: LicenseRef-OpAllRightsReserved\n */\nimport { BackstageIdentityResponse } from '@backstage/plugin-auth-node';\nimport {\n  AuthorizeResult,\n  isPermission,\n  isResourcePermission,\n  isUpdatePermission,\n  PolicyDecision,\n} from '@backstage/plugin-permission-common';\nimport {\n  PermissionPolicy,\n  PolicyQuery,\n} from '@backstage/plugin-permission-node';\nimport {\n  ANSWER_RESOURCE_TYPE,\n  COLLECTION_RESOUCE_TYPE,\n  COMMENT_RESOURCE_TYPE,\n  POST_RESOURCE_TYPE,\n  qetaModeratePermission,\n  TAG_RESOURCE_TYPE,\n} from '@drodil/backstage-plugin-qeta-common';\nimport {\n  answerAuthorConditionFactory,\n  answerTagExpertConditionFactory,\n  collectionOwnerConditionFactory,\n  collectionTagExpertConditionFactory,\n  commentAuthorConditionFactory,\n  createAnswerConditionalDecision,\n  createCollectionConditionalDecision,\n  createCommentConditionalDecision,\n  createPostConditionalDecision,\n  postAuthorConditionFactory,\n  postTagExpertConditionFactory,\n} from '@drodil/backstage-plugin-qeta-node';\nimport { Config } from '@backstage/config';\n\nexport class DefaultQetaPermissionPolicy implements PermissionPolicy {\n  constructor(private readonly config?: Config) {}\n\n  async handle(\n    request: PolicyQuery,\n    user?: BackstageIdentityResponse,\n  ): Promise<PolicyDecision> {\n    // We cannot do anything without a user\n    if (!user) {\n      return { result: AuthorizeResult.DENY };\n    }\n\n    // Moderators can modify anything\n    const moderators =\n      this.config?.getOptionalStringArray('qeta.moderators') ?? [];\n    if (\n      isPermission(request.permission, qetaModeratePermission) &&\n      (moderators.includes(user.identity.userEntityRef) ||\n        user.identity.ownershipEntityRefs.some(ref => moderators.includes(ref)))\n    ) {\n      return { result: AuthorizeResult.ALLOW };\n    }\n\n    if (\n      request.permission.attributes.action === 'create' ||\n      request.permission.attributes.action === 'read'\n    ) {\n      return { result: AuthorizeResult.ALLOW };\n    }\n\n    if (\n      request.permission.attributes.action === 'update' ||\n      request.permission.attributes.action === 'delete'\n    ) {\n      if (isResourcePermission(request.permission, POST_RESOURCE_TYPE)) {\n        return createPostConditionalDecision(request.permission, {\n          anyOf: [\n            // Can edit and delete own questions\n            postAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n            // Can edit and delete if tag expert\n            postTagExpertConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      if (isResourcePermission(request.permission, ANSWER_RESOURCE_TYPE)) {\n        return createAnswerConditionalDecision(request.permission, {\n          anyOf: [\n            answerAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n            answerTagExpertConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      // Allow deleting and updating only own comments\n      if (isResourcePermission(request.permission, COMMENT_RESOURCE_TYPE)) {\n        return createCommentConditionalDecision(request.permission, {\n          allOf: [\n            commentAuthorConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      if (isResourcePermission(request.permission, COLLECTION_RESOUCE_TYPE)) {\n        return createCollectionConditionalDecision(request.permission, {\n          anyOf: [\n            // Allow deleting and updating only own collections\n            collectionOwnerConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n            // Allow deleting and updating if tag expert\n            collectionTagExpertConditionFactory({\n              userRef: user.identity.userEntityRef,\n            }),\n          ],\n        });\n      }\n\n      // Allow updating any tag by anyone\n      if (\n        isResourcePermission(request.permission, TAG_RESOURCE_TYPE) &&\n        isUpdatePermission(request.permission)\n      ) {\n        return { result: AuthorizeResult.ALLOW };\n      }\n    }\n\n    return { result: AuthorizeResult.DENY };\n  }\n}\n"],"names":["AuthorizeResult","isPermission","qetaModeratePermission","isResourcePermission","POST_RESOURCE_TYPE","createPostConditionalDecision","postAuthorConditionFactory","postTagExpertConditionFactory","ANSWER_RESOURCE_TYPE","createAnswerConditionalDecision","answerAuthorConditionFactory","answerTagExpertConditionFactory","COMMENT_RESOURCE_TYPE","createCommentConditionalDecision","commentAuthorConditionFactory","COLLECTION_RESOUCE_TYPE","createCollectionConditionalDecision","collectionOwnerConditionFactory","collectionTagExpertConditionFactory","TAG_RESOURCE_TYPE","isUpdatePermission"],"mappings":";;;;;;AAuCO,MAAM,2BAAwD,CAAA;AAAA,EACnE,YAA6B,MAAiB,EAAA;AAAjB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA;AAAkB,EAE/C,MAAM,MACJ,CAAA,OAAA,EACA,IACyB,EAAA;AAEzB,IAAA,IAAI,CAAC,IAAM,EAAA;AACT,MAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,IAAK,EAAA;AAAA;AAIxC,IAAA,MAAM,aACJ,IAAK,CAAA,MAAA,EAAQ,sBAAuB,CAAA,iBAAiB,KAAK,EAAC;AAC7D,IACE,IAAAC,mCAAA,CAAa,QAAQ,UAAY,EAAAC,gDAAsB,MACtD,UAAW,CAAA,QAAA,CAAS,KAAK,QAAS,CAAA,aAAa,KAC9C,IAAK,CAAA,QAAA,CAAS,oBAAoB,IAAK,CAAA,CAAA,GAAA,KAAO,WAAW,QAAS,CAAA,GAAG,CAAC,CACxE,CAAA,EAAA;AACA,MAAO,OAAA,EAAE,MAAQ,EAAAF,sCAAA,CAAgB,KAAM,EAAA;AAAA;AAGzC,IACE,IAAA,OAAA,CAAQ,WAAW,UAAW,CAAA,MAAA,KAAW,YACzC,OAAQ,CAAA,UAAA,CAAW,UAAW,CAAA,MAAA,KAAW,MACzC,EAAA;AACA,MAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,KAAM,EAAA;AAAA;AAGzC,IACE,IAAA,OAAA,CAAQ,WAAW,UAAW,CAAA,MAAA,KAAW,YACzC,OAAQ,CAAA,UAAA,CAAW,UAAW,CAAA,MAAA,KAAW,QACzC,EAAA;AACA,MAAA,IAAIG,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAC,4CAAkB,CAAG,EAAA;AAChE,QAAO,OAAAC,qDAAA,CAA8B,QAAQ,UAAY,EAAA;AAAA,UACvD,KAAO,EAAA;AAAA;AAAA,YAELC,kDAA2B,CAAA;AAAA,cACzB,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB,CAAA;AAAA;AAAA,YAEDC,qDAA8B,CAAA;AAAA,cAC5B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAGH,MAAA,IAAIJ,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAK,8CAAoB,CAAG,EAAA;AAClE,QAAO,OAAAC,uDAAA,CAAgC,QAAQ,UAAY,EAAA;AAAA,UACzD,KAAO,EAAA;AAAA,YACLC,oDAA6B,CAAA;AAAA,cAC3B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB,CAAA;AAAA,YACDC,uDAAgC,CAAA;AAAA,cAC9B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAIH,MAAA,IAAIR,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAS,+CAAqB,CAAG,EAAA;AACnE,QAAO,OAAAC,wDAAA,CAAiC,QAAQ,UAAY,EAAA;AAAA,UAC1D,KAAO,EAAA;AAAA,YACLC,qDAA8B,CAAA;AAAA,cAC5B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAGH,MAAA,IAAIX,2CAAqB,CAAA,OAAA,CAAQ,UAAY,EAAAY,iDAAuB,CAAG,EAAA;AACrE,QAAO,OAAAC,2DAAA,CAAoC,QAAQ,UAAY,EAAA;AAAA,UAC7D,KAAO,EAAA;AAAA;AAAA,YAELC,uDAAgC,CAAA;AAAA,cAC9B,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB,CAAA;AAAA;AAAA,YAEDC,2DAAoC,CAAA;AAAA,cAClC,OAAA,EAAS,KAAK,QAAS,CAAA;AAAA,aACxB;AAAA;AACH,SACD,CAAA;AAAA;AAIH,MACE,IAAAf,2CAAA,CAAqB,QAAQ,UAAY,EAAAgB,2CAAiB,KAC1DC,yCAAmB,CAAA,OAAA,CAAQ,UAAU,CACrC,EAAA;AACA,QAAO,OAAA,EAAE,MAAQ,EAAApB,sCAAA,CAAgB,KAAM,EAAA;AAAA;AACzC;AAGF,IAAO,OAAA,EAAE,MAAQ,EAAAA,sCAAA,CAAgB,IAAK,EAAA;AAAA;AAE1C;;;;"}

package/dist/index.cjs.js

@@ -16,19 +16,25 @@ exports.answerQuestionHasEntityRefs = permissionRules.answerQuestionHasEntityRef
 exports.answerQuestionHasTags = permissionRules.answerQuestionHasTags;
 exports.answerQuestionTagsConditionFactory = permissionRules.answerQuestionTagsConditionFactory;
 exports.answerRules = permissionRules.answerRules;
+exports.answerTagExpertConditionFactory = permissionRules.answerTagExpertConditionFactory;
 exports.collectionHasEntities = permissionRules.collectionHasEntities;
 exports.collectionHasEntitiesConditionFactory = permissionRules.collectionHasEntitiesConditionFactory;
 exports.collectionHasTags = permissionRules.collectionHasTags;
 exports.collectionHasTagsConditionFactory = permissionRules.collectionHasTagsConditionFactory;
 exports.collectionOwnerConditionFactory = permissionRules.collectionOwnerConditionFactory;
 exports.collectionRules = permissionRules.collectionRules;
+exports.collectionTagExpertConditionFactory = permissionRules.collectionTagExpertConditionFactory;
 exports.commentAuthorConditionFactory = permissionRules.commentAuthorConditionFactory;
 exports.commentRules = permissionRules.commentRules;
 exports.isAnswerAuthor = permissionRules.isAnswerAuthor;
+exports.isAnswerTagExpert = permissionRules.isAnswerTagExpert;
 exports.isCollectionOwner = permissionRules.isCollectionOwner;
+exports.isCollectionTagExpert = permissionRules.isCollectionTagExpert;
 exports.isCommentAuthor = permissionRules.isCommentAuthor;
 exports.isPostAuthor = permissionRules.isPostAuthor;
+exports.isPostTagExpert = permissionRules.isPostTagExpert;
 exports.isTag = permissionRules.isTag;
+exports.isTagExpert = permissionRules.isTagExpert;
 exports.postAuthorConditionFactory = permissionRules.postAuthorConditionFactory;
 exports.postHasEntities = permissionRules.postHasEntities;
 exports.postHasEntitiesConditionFactory = permissionRules.postHasEntitiesConditionFactory;
@@ -37,8 +43,10 @@ exports.postHasTagsConditionFactory = permissionRules.postHasTagsConditionFactor
 exports.postHasType = permissionRules.postHasType;
 exports.postHasTypeConditionFactory = permissionRules.postHasTypeConditionFactory;
 exports.postRules = permissionRules.postRules;
+exports.postTagExpertConditionFactory = permissionRules.postTagExpertConditionFactory;
 exports.rules = permissionRules.rules;
 exports.tagConditionFactory = permissionRules.tagConditionFactory;
+exports.tagExpertConditionFactory = permissionRules.tagExpertConditionFactory;
 exports.tagRules = permissionRules.tagRules;
 exports.answerConditions = conditionExports.answerConditions;
 exports.collectionConditions = conditionExports.collectionConditions;

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.d.ts

@@ -2,11 +2,11 @@ import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
 import { BackstageCredentials, BackstageUserPrincipal } from '@backstage/backend-plugin-api';
 import * as _drodil_backstage_plugin_qeta_common from '@drodil/backstage-plugin-qeta-common';
 import { Question, AIResponse, Article, Post, PostFilter, Answer, AnswerFilter, Comment, CommentFilter, TagResponse, TagFilter, Collection, CollectionFilter } from '@drodil/backstage-plugin-qeta-common';
-import * as _backstage_plugin_permission_common_index from '@backstage/plugin-permission-common/index';
+import * as _backstage_plugin_permission_common from '@backstage/plugin-permission-common';
+import { PolicyDecision } from '@backstage/plugin-permission-common';
 import * as _backstage_plugin_permission_node from '@backstage/plugin-permission-node';
 import { PermissionPolicy, PolicyQuery } from '@backstage/plugin-permission-node';
 import { BackstageIdentityResponse } from '@backstage/plugin-auth-node';
-import { PolicyDecision } from '@backstage/plugin-permission-common';
 import { Config } from '@backstage/config';
 
 interface AIHandler {
@@ -73,7 +73,7 @@ declare const isPostAuthor: _backstage_plugin_permission_node.PermissionRule<Pos
 declare const postAuthorConditionFactory: (params: {
     userRef?: string | undefined;
     claims?: string[] | undefined;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"post", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"post", {
     userRef?: string | undefined;
     claims?: string[] | undefined;
 }>;
@@ -82,7 +82,7 @@ declare const postHasTags: _backstage_plugin_permission_node.PermissionRule<Post
 }>;
 declare const postHasTagsConditionFactory: (params: {
     tags: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"post", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"post", {
     tags: string[];
 }>;
 declare const postHasEntities: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
@@ -90,7 +90,7 @@ declare const postHasEntities: _backstage_plugin_permission_node.PermissionRule<
 }>;
 declare const postHasEntitiesConditionFactory: (params: {
     entityRefs: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"post", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"post", {
     entityRefs: string[];
 }>;
 declare const postHasType: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
@@ -98,9 +98,20 @@ declare const postHasType: _backstage_plugin_permission_node.PermissionRule<Post
 }>;
 declare const postHasTypeConditionFactory: (params: {
     type: string;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"post", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"post", {
     type: string;
 }>;
+declare const isPostTagExpert: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
+declare const postTagExpertConditionFactory: (params: {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}) => _backstage_plugin_permission_common.PermissionCondition<"post", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
 declare const postRules: {
     isPostAuthor: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
         userRef?: string | undefined;
@@ -115,6 +126,10 @@ declare const postRules: {
     postHasType: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
         type: string;
     }>;
+    isPostTagExpert: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 };
 declare const isAnswerAuthor: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
     userRef?: string | undefined;
@@ -123,7 +138,7 @@ declare const isAnswerAuthor: _backstage_plugin_permission_node.PermissionRule<A
 declare const answerAuthorConditionFactory: (params: {
     userRef?: string | undefined;
     claims?: string[] | undefined;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"answer", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"answer", {
     userRef?: string | undefined;
     claims?: string[] | undefined;
 }>;
@@ -132,7 +147,7 @@ declare const answerQuestionHasTags: _backstage_plugin_permission_node.Permissio
 }>;
 declare const answerQuestionTagsConditionFactory: (params: {
     tags: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"answer", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"answer", {
     tags: string[];
 }>;
 declare const answerQuestionHasEntityRefs: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
@@ -140,9 +155,20 @@ declare const answerQuestionHasEntityRefs: _backstage_plugin_permission_node.Per
 }>;
 declare const answerQuestionEntitiesConditionFactory: (params: {
     entityRefs: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"answer", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"answer", {
     entityRefs: string[];
 }>;
+declare const isAnswerTagExpert: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
+declare const answerTagExpertConditionFactory: (params: {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}) => _backstage_plugin_permission_common.PermissionCondition<"answer", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
 declare const answerRules: {
     isAnswerAuthor: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
         userRef?: string | undefined;
@@ -154,6 +180,10 @@ declare const answerRules: {
     answerQuestionHasEntityRefs: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
         entityRefs: string[];
     }>;
+    isAnswerTagExpert: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 };
 declare const isCommentAuthor: _backstage_plugin_permission_node.PermissionRule<Comment, CommentFilter, "comment", {
     userRef?: string | undefined;
@@ -162,7 +192,7 @@ declare const isCommentAuthor: _backstage_plugin_permission_node.PermissionRule<
 declare const commentAuthorConditionFactory: (params: {
     userRef?: string | undefined;
     claims?: string[] | undefined;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"comment", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"comment", {
     userRef?: string | undefined;
     claims?: string[] | undefined;
 }>;
@@ -177,13 +207,28 @@ declare const isTag: _backstage_plugin_permission_node.PermissionRule<TagRespons
 }>;
 declare const tagConditionFactory: (params: {
     tag: string;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"tag", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"tag", {
     tag: string;
 }>;
+declare const isTagExpert: _backstage_plugin_permission_node.PermissionRule<TagResponse, TagFilter, "tag", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
+declare const tagExpertConditionFactory: (params: {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}) => _backstage_plugin_permission_common.PermissionCondition<"tag", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
 declare const tagRules: {
     isTag: _backstage_plugin_permission_node.PermissionRule<TagResponse, TagFilter, "tag", {
         tag: string;
     }>;
+    isTagExpert: _backstage_plugin_permission_node.PermissionRule<TagResponse, TagFilter, "tag", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 };
 declare const isCollectionOwner: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
     userRef?: string | undefined;
@@ -192,7 +237,7 @@ declare const isCollectionOwner: _backstage_plugin_permission_node.PermissionRul
 declare const collectionOwnerConditionFactory: (params: {
     userRef?: string | undefined;
     claims?: string[] | undefined;
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"collection", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"collection", {
     userRef?: string | undefined;
     claims?: string[] | undefined;
 }>;
@@ -201,7 +246,7 @@ declare const collectionHasTags: _backstage_plugin_permission_node.PermissionRul
 }>;
 declare const collectionHasTagsConditionFactory: (params: {
     tags: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"collection", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"collection", {
     tags: string[];
 }>;
 declare const collectionHasEntities: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
@@ -209,9 +254,20 @@ declare const collectionHasEntities: _backstage_plugin_permission_node.Permissio
 }>;
 declare const collectionHasEntitiesConditionFactory: (params: {
     entityRefs: string[];
-}) => _backstage_plugin_permission_common_index.PermissionCondition<"collection", {
+}) => _backstage_plugin_permission_common.PermissionCondition<"collection", {
     entityRefs: string[];
 }>;
+declare const isCollectionTagExpert: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
+declare const collectionTagExpertConditionFactory: (params: {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}) => _backstage_plugin_permission_common.PermissionCondition<"collection", {
+    userRef?: string | undefined;
+    claims?: string[] | undefined;
+}>;
 declare const collectionRules: {
     isCollectionOwner: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
         userRef?: string | undefined;
@@ -223,6 +279,10 @@ declare const collectionRules: {
     collectionHasEntities: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
         entityRefs: string[];
     }>;
+    isCollectionTagExpert: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 };
 declare const rules: {
     isCollectionOwner: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
@@ -235,9 +295,17 @@ declare const rules: {
     collectionHasEntities: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
         entityRefs: string[];
     }>;
+    isCollectionTagExpert: _backstage_plugin_permission_node.PermissionRule<Collection, CollectionFilter, "collection", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
     isTag: _backstage_plugin_permission_node.PermissionRule<TagResponse, TagFilter, "tag", {
         tag: string;
     }>;
+    isTagExpert: _backstage_plugin_permission_node.PermissionRule<TagResponse, TagFilter, "tag", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
     isPostAuthor: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
         userRef?: string | undefined;
         claims?: string[] | undefined;
@@ -251,6 +319,10 @@ declare const rules: {
     postHasType: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
         type: string;
     }>;
+    isPostTagExpert: _backstage_plugin_permission_node.PermissionRule<Post, PostFilter, "post", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
     isAnswerAuthor: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
         userRef?: string | undefined;
         claims?: string[] | undefined;
@@ -261,6 +333,10 @@ declare const rules: {
     answerQuestionHasEntityRefs: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
         entityRefs: string[];
     }>;
+    isAnswerTagExpert: _backstage_plugin_permission_node.PermissionRule<Answer, AnswerFilter, "answer", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
     isCommentAuthor: _backstage_plugin_permission_node.PermissionRule<Comment, CommentFilter, "comment", {
         userRef?: string | undefined;
         claims?: string[] | undefined;
@@ -281,8 +357,12 @@ declare const questionConditions: _backstage_plugin_permission_node.Conditions<{
     postHasType: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Post, _drodil_backstage_plugin_qeta_common.PostFilter, "post", {
         type: string;
     }>;
+    isPostTagExpert: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Post, _drodil_backstage_plugin_qeta_common.PostFilter, "post", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 }>;
-declare const createPostConditionalDecision: (permission: _backstage_plugin_permission_common_index.ResourcePermission<"post">, conditions: _backstage_plugin_permission_common_index.PermissionCriteria<_backstage_plugin_permission_common_index.PermissionCondition<"post">>) => _backstage_plugin_permission_common_index.ConditionalPolicyDecision;
+declare const createPostConditionalDecision: (permission: _backstage_plugin_permission_common.ResourcePermission<"post">, conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition<"post">>) => _backstage_plugin_permission_common.ConditionalPolicyDecision;
 declare const answerConditions: _backstage_plugin_permission_node.Conditions<{
     isAnswerAuthor: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Answer, _drodil_backstage_plugin_qeta_common.AnswerFilter, "answer", {
         userRef?: string | undefined;
@@ -294,21 +374,29 @@ declare const answerConditions: _backstage_plugin_permission_node.Conditions<{
     answerQuestionHasEntityRefs: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Answer, _drodil_backstage_plugin_qeta_common.AnswerFilter, "answer", {
         entityRefs: string[];
     }>;
+    isAnswerTagExpert: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Answer, _drodil_backstage_plugin_qeta_common.AnswerFilter, "answer", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 }>;
-declare const createAnswerConditionalDecision: (permission: _backstage_plugin_permission_common_index.ResourcePermission<"answer">, conditions: _backstage_plugin_permission_common_index.PermissionCriteria<_backstage_plugin_permission_common_index.PermissionCondition<"answer">>) => _backstage_plugin_permission_common_index.ConditionalPolicyDecision;
+declare const createAnswerConditionalDecision: (permission: _backstage_plugin_permission_common.ResourcePermission<"answer">, conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition<"answer">>) => _backstage_plugin_permission_common.ConditionalPolicyDecision;
 declare const commentConditions: _backstage_plugin_permission_node.Conditions<{
     isCommentAuthor: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Comment, _drodil_backstage_plugin_qeta_common.CommentFilter, "comment", {
         userRef?: string | undefined;
         claims?: string[] | undefined;
     }>;
 }>;
-declare const createCommentConditionalDecision: (permission: _backstage_plugin_permission_common_index.ResourcePermission<"comment">, conditions: _backstage_plugin_permission_common_index.PermissionCriteria<_backstage_plugin_permission_common_index.PermissionCondition<"comment">>) => _backstage_plugin_permission_common_index.ConditionalPolicyDecision;
+declare const createCommentConditionalDecision: (permission: _backstage_plugin_permission_common.ResourcePermission<"comment">, conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition<"comment">>) => _backstage_plugin_permission_common.ConditionalPolicyDecision;
 declare const tagConditions: _backstage_plugin_permission_node.Conditions<{
     isTag: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.TagResponse, _drodil_backstage_plugin_qeta_common.TagFilter, "tag", {
         tag: string;
     }>;
+    isTagExpert: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.TagResponse, _drodil_backstage_plugin_qeta_common.TagFilter, "tag", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 }>;
-declare const createTagConditionalDecision: (permission: _backstage_plugin_permission_common_index.ResourcePermission<"tag">, conditions: _backstage_plugin_permission_common_index.PermissionCriteria<_backstage_plugin_permission_common_index.PermissionCondition<"tag">>) => _backstage_plugin_permission_common_index.ConditionalPolicyDecision;
+declare const createTagConditionalDecision: (permission: _backstage_plugin_permission_common.ResourcePermission<"tag">, conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition<"tag">>) => _backstage_plugin_permission_common.ConditionalPolicyDecision;
 declare const collectionConditions: _backstage_plugin_permission_node.Conditions<{
     isCollectionOwner: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Collection, _drodil_backstage_plugin_qeta_common.CollectionFilter, "collection", {
         userRef?: string | undefined;
@@ -320,8 +408,12 @@ declare const collectionConditions: _backstage_plugin_permission_node.Conditions
     collectionHasEntities: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Collection, _drodil_backstage_plugin_qeta_common.CollectionFilter, "collection", {
         entityRefs: string[];
     }>;
+    isCollectionTagExpert: _backstage_plugin_permission_node.PermissionRule<_drodil_backstage_plugin_qeta_common.Collection, _drodil_backstage_plugin_qeta_common.CollectionFilter, "collection", {
+        userRef?: string | undefined;
+        claims?: string[] | undefined;
+    }>;
 }>;
-declare const createCollectionConditionalDecision: (permission: _backstage_plugin_permission_common_index.ResourcePermission<"collection">, conditions: _backstage_plugin_permission_common_index.PermissionCriteria<_backstage_plugin_permission_common_index.PermissionCondition<"collection">>) => _backstage_plugin_permission_common_index.ConditionalPolicyDecision;
+declare const createCollectionConditionalDecision: (permission: _backstage_plugin_permission_common.ResourcePermission<"collection">, conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition<"collection">>) => _backstage_plugin_permission_common.ConditionalPolicyDecision;
 
 declare const postPermissionResourceRef: _backstage_plugin_permission_node.PermissionResourceRef<Post, PostFilter, "post", "qeta">;
 declare const answerPermissionResourceRef: _backstage_plugin_permission_node.PermissionResourceRef<Answer, AnswerFilter, "answer", "qeta">;
@@ -335,4 +427,4 @@ declare class DefaultQetaPermissionPolicy implements PermissionPolicy {
     handle(request: PolicyQuery, user?: BackstageIdentityResponse): Promise<PolicyDecision>;
 }
 
-export { type AIHandler, DefaultQetaPermissionPolicy, type QetaAIExtensionPoint, type QetaTagDatabaseExtensionPoint, type TagDatabase, answerAuthorConditionFactory, answerConditions, answerPermissionResourceRef, answerQuestionEntitiesConditionFactory, answerQuestionHasEntityRefs, answerQuestionHasTags, answerQuestionTagsConditionFactory, answerRules, collectionConditions, collectionHasEntities, collectionHasEntitiesConditionFactory, collectionHasTags, collectionHasTagsConditionFactory, collectionOwnerConditionFactory, collectionPermissionResourceRef, collectionRules, commentAuthorConditionFactory, commentConditions, commentPermissionResourceRef, commentRules, createAnswerConditionalDecision, createCollectionConditionalDecision, createCommentConditionalDecision, createPostConditionalDecision, createTagConditionalDecision, isAnswerAuthor, isCollectionOwner, isCommentAuthor, isPostAuthor, isTag, postAuthorConditionFactory, postHasEntities, postHasEntitiesConditionFactory, postHasTags, postHasTagsConditionFactory, postHasType, postHasTypeConditionFactory, postPermissionResourceRef, postRules, qetaAIExtensionPoint, qetaTagDatabaseExtensionPoint, questionConditions, rules, tagConditionFactory, tagConditions, tagPermissionResourceRef, tagRules };
+export { type AIHandler, DefaultQetaPermissionPolicy, type QetaAIExtensionPoint, type QetaTagDatabaseExtensionPoint, type TagDatabase, answerAuthorConditionFactory, answerConditions, answerPermissionResourceRef, answerQuestionEntitiesConditionFactory, answerQuestionHasEntityRefs, answerQuestionHasTags, answerQuestionTagsConditionFactory, answerRules, answerTagExpertConditionFactory, collectionConditions, collectionHasEntities, collectionHasEntitiesConditionFactory, collectionHasTags, collectionHasTagsConditionFactory, collectionOwnerConditionFactory, collectionPermissionResourceRef, collectionRules, collectionTagExpertConditionFactory, commentAuthorConditionFactory, commentConditions, commentPermissionResourceRef, commentRules, createAnswerConditionalDecision, createCollectionConditionalDecision, createCommentConditionalDecision, createPostConditionalDecision, createTagConditionalDecision, isAnswerAuthor, isAnswerTagExpert, isCollectionOwner, isCollectionTagExpert, isCommentAuthor, isPostAuthor, isPostTagExpert, isTag, isTagExpert, postAuthorConditionFactory, postHasEntities, postHasEntitiesConditionFactory, postHasTags, postHasTagsConditionFactory, postHasType, postHasTypeConditionFactory, postPermissionResourceRef, postRules, postTagExpertConditionFactory, qetaAIExtensionPoint, qetaTagDatabaseExtensionPoint, questionConditions, rules, tagConditionFactory, tagConditions, tagExpertConditionFactory, tagPermissionResourceRef, tagRules };

package/dist/permissionRules.cjs.js

@@ -77,11 +77,33 @@ const postHasType = pluginPermissionNode.createPermissionRule({
   }
 });
 const postHasTypeConditionFactory = pluginPermissionNode.createConditionFactory(postHasType);
+const isPostTagExpert = pluginPermissionNode.createPermissionRule({
+  name: "IS_POST_TAG_EXPERT",
+  description: "Allows if post has tags the user is expert of",
+  resourceRef: permissionResources.postPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    userRef: zod.z.string().describe("User ID to match on the tag expert").optional(),
+    claims: zod.z.array(zod.z.string()).optional().describe("List of claims to match at least one on within tag expert")
+  }),
+  apply: (resource, { userRef, claims }) => {
+    return Boolean(
+      resource?.experts?.some((e) => e === userRef || claims?.includes(e))
+    );
+  },
+  toQuery: ({ claims = [], userRef }) => {
+    return {
+      property: "tag.experts",
+      values: [userRef, ...claims].filter(Boolean)
+    };
+  }
+});
+const postTagExpertConditionFactory = pluginPermissionNode.createConditionFactory(isPostTagExpert);
 const postRules = {
   isPostAuthor,
   postHasTags,
   postHasEntities,
-  postHasType
+  postHasType,
+  isPostTagExpert
 };
 const isAnswerAuthor = pluginPermissionNode.createPermissionRule({
   name: "IS_AUTHOR",
@@ -142,10 +164,32 @@ const answerQuestionHasEntityRefs = pluginPermissionNode.createPermissionRule({
 const answerQuestionEntitiesConditionFactory = pluginPermissionNode.createConditionFactory(
   answerQuestionHasEntityRefs
 );
+const isAnswerTagExpert = pluginPermissionNode.createPermissionRule({
+  name: "IS_ANSWER_TAG_EXPERT",
+  description: "Allows if answers post has tags the user is expert of",
+  resourceRef: permissionResources.answerPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    userRef: zod.z.string().describe("User ID to match on the tag expert").optional(),
+    claims: zod.z.array(zod.z.string()).optional().describe("List of claims to match at least one on within tag expert")
+  }),
+  apply: (resource, { userRef, claims }) => {
+    return Boolean(
+      resource?.experts?.some((e) => e === userRef || claims?.includes(e))
+    );
+  },
+  toQuery: ({ claims = [], userRef }) => {
+    return {
+      property: "tag.experts",
+      values: [userRef, ...claims].filter(Boolean)
+    };
+  }
+});
+const answerTagExpertConditionFactory = pluginPermissionNode.createConditionFactory(isAnswerTagExpert);
 const answerRules = {
   isAnswerAuthor,
   answerQuestionHasTags,
-  answerQuestionHasEntityRefs
+  answerQuestionHasEntityRefs,
+  isAnswerTagExpert
 };
 const isCommentAuthor = pluginPermissionNode.createPermissionRule({
   name: "IS_AUTHOR",
@@ -185,7 +229,28 @@ const isTag = pluginPermissionNode.createPermissionRule({
   }
 });
 const tagConditionFactory = pluginPermissionNode.createConditionFactory(isTag);
-const tagRules = { isTag };
+const isTagExpert = pluginPermissionNode.createPermissionRule({
+  name: "IS_TAG_EXPERT",
+  description: "Allows only if user is tag expert",
+  resourceRef: permissionResources.tagPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    userRef: zod.z.string().describe("User ID to match on the tag expert").optional(),
+    claims: zod.z.array(zod.z.string()).optional().describe("List of claims to match at least one on within tag expert")
+  }),
+  apply: (resource, { userRef, claims }) => {
+    return Boolean(
+      resource?.experts?.some((e) => e === userRef || claims?.includes(e))
+    );
+  },
+  toQuery: ({ claims = [], userRef }) => {
+    return {
+      property: "tag.experts",
+      values: [userRef, ...claims].filter(Boolean)
+    };
+  }
+});
+const tagExpertConditionFactory = pluginPermissionNode.createConditionFactory(isTagExpert);
+const tagRules = { isTag, isTagExpert };
 const isCollectionOwner = pluginPermissionNode.createPermissionRule({
   name: "IS_OWNER",
   description: "Should allow only if the collection is owned by the user",
@@ -243,10 +308,34 @@ const collectionHasEntities = pluginPermissionNode.createPermissionRule({
 const collectionHasEntitiesConditionFactory = pluginPermissionNode.createConditionFactory(
   collectionHasEntities
 );
+const isCollectionTagExpert = pluginPermissionNode.createPermissionRule({
+  name: "IS_COLLECTION_TAG_EXPERT",
+  description: "Allows if collection has tags the user is expert of",
+  resourceRef: permissionResources.collectionPermissionResourceRef,
+  paramsSchema: zod.z.object({
+    userRef: zod.z.string().describe("User ID to match on the tag expert").optional(),
+    claims: zod.z.array(zod.z.string()).optional().describe("List of claims to match at least one on within tag expert")
+  }),
+  apply: (resource, { userRef, claims }) => {
+    return Boolean(
+      resource?.experts?.some((e) => e === userRef || claims?.includes(e))
+    );
+  },
+  toQuery: ({ claims = [], userRef }) => {
+    return {
+      property: "tag.experts",
+      values: [userRef, ...claims].filter(Boolean)
+    };
+  }
+});
+const collectionTagExpertConditionFactory = pluginPermissionNode.createConditionFactory(
+  isCollectionTagExpert
+);
 const collectionRules = {
   isCollectionOwner,
   collectionHasTags,
-  collectionHasEntities
+  collectionHasEntities,
+  isCollectionTagExpert
 };
 const rules = {
   ...commentRules,
@@ -262,19 +351,25 @@ exports.answerQuestionHasEntityRefs = answerQuestionHasEntityRefs;
 exports.answerQuestionHasTags = answerQuestionHasTags;
 exports.answerQuestionTagsConditionFactory = answerQuestionTagsConditionFactory;
 exports.answerRules = answerRules;
+exports.answerTagExpertConditionFactory = answerTagExpertConditionFactory;
 exports.collectionHasEntities = collectionHasEntities;
 exports.collectionHasEntitiesConditionFactory = collectionHasEntitiesConditionFactory;
 exports.collectionHasTags = collectionHasTags;
 exports.collectionHasTagsConditionFactory = collectionHasTagsConditionFactory;
 exports.collectionOwnerConditionFactory = collectionOwnerConditionFactory;
 exports.collectionRules = collectionRules;
+exports.collectionTagExpertConditionFactory = collectionTagExpertConditionFactory;
 exports.commentAuthorConditionFactory = commentAuthorConditionFactory;
 exports.commentRules = commentRules;
 exports.isAnswerAuthor = isAnswerAuthor;
+exports.isAnswerTagExpert = isAnswerTagExpert;
 exports.isCollectionOwner = isCollectionOwner;
+exports.isCollectionTagExpert = isCollectionTagExpert;
 exports.isCommentAuthor = isCommentAuthor;
 exports.isPostAuthor = isPostAuthor;
+exports.isPostTagExpert = isPostTagExpert;
 exports.isTag = isTag;
+exports.isTagExpert = isTagExpert;
 exports.postAuthorConditionFactory = postAuthorConditionFactory;
 exports.postHasEntities = postHasEntities;
 exports.postHasEntitiesConditionFactory = postHasEntitiesConditionFactory;
@@ -283,7 +378,9 @@ exports.postHasTagsConditionFactory = postHasTagsConditionFactory;
 exports.postHasType = postHasType;
 exports.postHasTypeConditionFactory = postHasTypeConditionFactory;
 exports.postRules = postRules;
+exports.postTagExpertConditionFactory = postTagExpertConditionFactory;
 exports.rules = rules;
 exports.tagConditionFactory = tagConditionFactory;
+exports.tagExpertConditionFactory = tagExpertConditionFactory;
 exports.tagRules = tagRules;
 //# sourceMappingURL=permissionRules.cjs.js.map

package/dist/permissionRules.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissionRules.cjs.js","sources":["../src/permissionRules.ts"],"sourcesContent":["import {\n  createConditionFactory,\n  createPermissionRule,\n} from '@backstage/plugin-permission-node';\nimport { z } from 'zod';\nimport {\n  Answer,\n  AnswerFilter,\n  Collection,\n  CollectionFilter,\n  Comment,\n  CommentFilter,\n  Post,\n  PostFilter,\n  TagFilter,\n  TagResponse,\n} from '@drodil/backstage-plugin-qeta-common';\nimport {\n  answerPermissionResourceRef,\n  collectionPermissionResourceRef,\n  commentPermissionResourceRef,\n  postPermissionResourceRef,\n  tagPermissionResourceRef,\n} from './permissionResources';\n\nexport const isPostAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the post is created by the user',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Post, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'posts.author' as PostFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const postAuthorConditionFactory = createConditionFactory(isPostAuthor);\n\nexport const postHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description: 'Should allow only if the post has all the specific tags',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the post'),\n  }),\n  apply: (resource: Post, { tags }) => {\n    return tags.every(t => resource?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as PostFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const postHasTagsConditionFactory = createConditionFactory(postHasTags);\n\nexport const postHasEntities = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description: 'Should allow only if the post has all the specific entities',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z.array(z.string()).describe('Entity refs to match the post'),\n  }),\n  apply: (resource: Post, { entityRefs }) => {\n    return entityRefs.every(t => resource?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as PostFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const postHasEntitiesConditionFactory =\n  createConditionFactory(postHasEntities);\n\nexport const postHasType = createPermissionRule({\n  name: 'HAS_TYPE',\n  description: 'Should allow only if the post has the specific type',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    type: z.string().describe('Type to match the post'),\n  }),\n  apply: (resource: Post, { type }) => {\n    return resource?.type === type;\n  },\n  toQuery: ({ type }) => {\n    return {\n      property: 'posts.type' as PostFilter['property'],\n      values: [type],\n    };\n  },\n});\n\nexport const postHasTypeConditionFactory = createConditionFactory(postHasType);\n\nexport const postRules = {\n  isPostAuthor,\n  postHasTags,\n  postHasEntities,\n  postHasType,\n};\n\nexport const isAnswerAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the answer is created by the user',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Answer, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'answers.author' as AnswerFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const answerAuthorConditionFactory =\n  createConditionFactory(isAnswerAuthor);\n\nexport const answerQuestionHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description:\n    'Should allow only if the answers question has all the specific tags',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the question'),\n  }),\n  apply: (resource: Answer, { tags }) => {\n    return tags.every(t => resource?.post?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as AnswerFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const answerQuestionTagsConditionFactory = createConditionFactory(\n  answerQuestionHasTags,\n);\n\nexport const answerQuestionHasEntityRefs = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description:\n    'Should allow only if the answers question has all the specific entities',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z.array(z.string()).describe('Tag to match the question'),\n  }),\n  apply: (resource: Answer, { entityRefs }) => {\n    return entityRefs.every(t => resource?.post?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as AnswerFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const answerQuestionEntitiesConditionFactory = createConditionFactory(\n  answerQuestionHasEntityRefs,\n);\n\nexport const answerRules = {\n  isAnswerAuthor,\n  answerQuestionHasTags,\n  answerQuestionHasEntityRefs,\n};\n\nexport const isCommentAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the comment is created by the user',\n  resourceRef: commentPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Comment, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'comments.author' as CommentFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const commentAuthorConditionFactory =\n  createConditionFactory(isCommentAuthor);\n\nexport const commentRules = { isCommentAuthor };\n\nexport const isTag = createPermissionRule({\n  name: 'IS_TAG',\n  description: 'Should allow only if the tag exists',\n  resourceRef: tagPermissionResourceRef,\n  paramsSchema: z.object({\n    tag: z.string().describe('Tag to match the post'),\n  }),\n  apply: (resource: TagResponse, { tag }) => {\n    return resource?.tag === tag;\n  },\n  toQuery: ({ tag }) => {\n    return {\n      property: 'tags.tag' as TagFilter['property'],\n      values: [tag],\n    };\n  },\n});\n\nexport const tagConditionFactory = createConditionFactory(isTag);\n\nexport const tagRules = { isTag };\n\nexport const isCollectionOwner = createPermissionRule({\n  name: 'IS_OWNER',\n  description: 'Should allow only if the collection is owned by the user',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User reference to match on the owner')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within owner'),\n  }),\n  apply: (resource: Collection, { userRef, claims = [] }) => {\n    return resource?.owner === userRef || claims.includes(resource?.owner);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'collections.owner' as CollectionFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const collectionOwnerConditionFactory =\n  createConditionFactory(isCollectionOwner);\n\nexport const collectionHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description:\n    'Should allow only if the posts in the collection have the specific tags',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the collection'),\n  }),\n  apply: (resource: Collection, { tags }) => {\n    return tags.every(t => resource?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as CollectionFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const collectionHasTagsConditionFactory =\n  createConditionFactory(collectionHasTags);\n\nexport const collectionHasEntities = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description:\n    'Should allow only if the posts in the collection have the specific entities',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z\n      .array(z.string())\n      .describe('Entity refs to match the collection'),\n  }),\n  apply: (resource: Collection, { entityRefs }) => {\n    return entityRefs.every(t => resource?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as CollectionFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const collectionHasEntitiesConditionFactory = createConditionFactory(\n  collectionHasEntities,\n);\n\nexport const collectionRules = {\n  isCollectionOwner,\n  collectionHasTags,\n  collectionHasEntities,\n};\n\nexport const rules = {\n  ...commentRules,\n  ...answerRules,\n  ...postRules,\n  ...tagRules,\n  ...collectionRules,\n};\n"],"names":["createPermissionRule","postPermissionResourceRef","z","createConditionFactory","answerPermissionResourceRef","commentPermissionResourceRef","tagPermissionResourceRef","collectionPermissionResourceRef"],"mappings":";;;;;;AAyBO,MAAM,eAAeA,yCAAqB,CAAA;AAAA,EAC/C,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,sDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAgB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACnD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,cAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,0BAAA,GAA6BC,4CAAuB,YAAY;AAEtE,MAAM,cAAcH,yCAAqB,CAAA;AAAA,EAC9C,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,yDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,uBAAuB;AAAA,GAC3D,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,MAAW,KAAA;AACnC,IAAA,OAAO,KAAK,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpD;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,2BAAA,GAA8BC,4CAAuB,WAAW;AAEtE,MAAM,kBAAkBH,yCAAqB,CAAA;AAAA,EAClD,IAAM,EAAA,cAAA;AAAA,EACN,WAAa,EAAA,6DAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,+BAA+B;AAAA,GACzE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,YAAiB,KAAA;AACzC,IAAA,OAAO,WAAW,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC9D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,+BAAA,GACXC,4CAAuB,eAAe;AAEjC,MAAM,cAAcH,yCAAqB,CAAA;AAAA,EAC9C,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,qDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,IAAM,EAAAA,KAAA,CAAE,MAAO,EAAA,CAAE,SAAS,wBAAwB;AAAA,GACnD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,MAAW,KAAA;AACnC,IAAA,OAAO,UAAU,IAAS,KAAA,IAAA;AAAA,GAC5B;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAA,EAAQ,CAAC,IAAI;AAAA,KACf;AAAA;AAEJ,CAAC;AAEY,MAAA,2BAAA,GAA8BC,4CAAuB,WAAW;AAEtE,MAAM,SAAY,GAAA;AAAA,EACvB,YAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAEO,MAAM,iBAAiBH,yCAAqB,CAAA;AAAA,EACjD,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,wDAAA;AAAA,EACb,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAkB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,gBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,4BAAA,GACXC,4CAAuB,cAAc;AAEhC,MAAM,wBAAwBH,yCAAqB,CAAA;AAAA,EACxD,IAAM,EAAA,UAAA;AAAA,EACN,WACE,EAAA,qEAAA;AAAA,EACF,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,2BAA2B;AAAA,GAC/D,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAkB,EAAA,EAAE,MAAW,KAAA;AACrC,IAAO,OAAA,IAAA,CAAK,MAAM,CAAK,CAAA,KAAA,QAAA,EAAU,MAAM,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC1D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,kCAAqC,GAAAC,2CAAA;AAAA,EAChD;AACF;AAEO,MAAM,8BAA8BH,yCAAqB,CAAA;AAAA,EAC9D,IAAM,EAAA,cAAA;AAAA,EACN,WACE,EAAA,yEAAA;AAAA,EACF,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,2BAA2B;AAAA,GACrE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAkB,EAAA,EAAE,YAAiB,KAAA;AAC3C,IAAO,OAAA,UAAA,CAAW,MAAM,CAAK,CAAA,KAAA,QAAA,EAAU,MAAM,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpE;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,sCAAyC,GAAAC,2CAAA;AAAA,EACpD;AACF;AAEO,MAAM,WAAc,GAAA;AAAA,EACzB,cAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF;AAEO,MAAM,kBAAkBH,yCAAqB,CAAA;AAAA,EAClD,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,yDAAA;AAAA,EACb,WAAa,EAAAK,gDAAA;AAAA,EACb,YAAA,EAAcH,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAmB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACtD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,iBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,6BAAA,GACXC,4CAAuB,eAAe;AAE3B,MAAA,YAAA,GAAe,EAAE,eAAgB;AAEvC,MAAM,QAAQH,yCAAqB,CAAA;AAAA,EACxC,IAAM,EAAA,QAAA;AAAA,EACN,WAAa,EAAA,qCAAA;AAAA,EACb,WAAa,EAAAM,4CAAA;AAAA,EACb,YAAA,EAAcJ,MAAE,MAAO,CAAA;AAAA,IACrB,GAAK,EAAAA,KAAA,CAAE,MAAO,EAAA,CAAE,SAAS,uBAAuB;AAAA,GACjD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAuB,EAAA,EAAE,KAAU,KAAA;AACzC,IAAA,OAAO,UAAU,GAAQ,KAAA,GAAA;AAAA,GAC3B;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,GAAA,EAAU,KAAA;AACpB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,UAAA;AAAA,MACV,MAAA,EAAQ,CAAC,GAAG;AAAA,KACd;AAAA;AAEJ,CAAC;AAEY,MAAA,mBAAA,GAAsBC,4CAAuB,KAAK;AAElD,MAAA,QAAA,GAAW,EAAE,KAAM;AAEzB,MAAM,oBAAoBH,yCAAqB,CAAA;AAAA,EACpD,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,0DAAA;AAAA,EACb,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,sCAAsC,EAC/C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,sDAAsD;AAAA,GACnE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAsB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACzD,IAAA,OAAO,UAAU,KAAU,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,KAAK,CAAA;AAAA,GACvE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,mBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,+BAAA,GACXC,4CAAuB,iBAAiB;AAEnC,MAAM,oBAAoBH,yCAAqB,CAAA;AAAA,EACpD,IAAM,EAAA,UAAA;AAAA,EACN,WACE,EAAA,yEAAA;AAAA,EACF,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,6BAA6B;AAAA,GACjE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAsB,EAAA,EAAE,MAAW,KAAA;AACzC,IAAA,OAAO,KAAK,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpD;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,iCAAA,GACXC,4CAAuB,iBAAiB;AAEnC,MAAM,wBAAwBH,yCAAqB,CAAA;AAAA,EACxD,IAAM,EAAA,cAAA;AAAA,EACN,WACE,EAAA,6EAAA;AAAA,EACF,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MACT,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAChB,SAAS,qCAAqC;AAAA,GAClD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAsB,EAAA,EAAE,YAAiB,KAAA;AAC/C,IAAA,OAAO,WAAW,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC9D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,qCAAwC,GAAAC,2CAAA;AAAA,EACnD;AACF;AAEO,MAAM,eAAkB,GAAA;AAAA,EAC7B,iBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAEO,MAAM,KAAQ,GAAA;AAAA,EACnB,GAAG,YAAA;AAAA,EACH,GAAG,WAAA;AAAA,EACH,GAAG,SAAA;AAAA,EACH,GAAG,QAAA;AAAA,EACH,GAAG;AACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"permissionRules.cjs.js","sources":["../src/permissionRules.ts"],"sourcesContent":["import {\n  createConditionFactory,\n  createPermissionRule,\n} from '@backstage/plugin-permission-node';\nimport { z } from 'zod';\nimport {\n  Answer,\n  AnswerFilter,\n  Collection,\n  CollectionFilter,\n  Comment,\n  CommentFilter,\n  Post,\n  PostFilter,\n  TagFilter,\n  TagResponse,\n} from '@drodil/backstage-plugin-qeta-common';\nimport {\n  answerPermissionResourceRef,\n  collectionPermissionResourceRef,\n  commentPermissionResourceRef,\n  postPermissionResourceRef,\n  tagPermissionResourceRef,\n} from './permissionResources';\n\nexport const isPostAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the post is created by the user',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Post, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'posts.author' as PostFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const postAuthorConditionFactory = createConditionFactory(isPostAuthor);\n\nexport const postHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description: 'Should allow only if the post has all the specific tags',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the post'),\n  }),\n  apply: (resource: Post, { tags }) => {\n    return tags.every(t => resource?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as PostFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const postHasTagsConditionFactory = createConditionFactory(postHasTags);\n\nexport const postHasEntities = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description: 'Should allow only if the post has all the specific entities',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z.array(z.string()).describe('Entity refs to match the post'),\n  }),\n  apply: (resource: Post, { entityRefs }) => {\n    return entityRefs.every(t => resource?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as PostFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const postHasEntitiesConditionFactory =\n  createConditionFactory(postHasEntities);\n\nexport const postHasType = createPermissionRule({\n  name: 'HAS_TYPE',\n  description: 'Should allow only if the post has the specific type',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    type: z.string().describe('Type to match the post'),\n  }),\n  apply: (resource: Post, { type }) => {\n    return resource?.type === type;\n  },\n  toQuery: ({ type }) => {\n    return {\n      property: 'posts.type' as PostFilter['property'],\n      values: [type],\n    };\n  },\n});\n\nexport const postHasTypeConditionFactory = createConditionFactory(postHasType);\n\nexport const isPostTagExpert = createPermissionRule({\n  name: 'IS_POST_TAG_EXPERT',\n  description: 'Allows if post has tags the user is expert of',\n  resourceRef: postPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User ID to match on the tag expert')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within tag expert'),\n  }),\n  apply: (resource: Post, { userRef, claims }) => {\n    return Boolean(\n      resource?.experts?.some(e => e === userRef || claims?.includes(e)),\n    );\n  },\n  toQuery: ({ claims = [], userRef }) => {\n    return {\n      property: 'tag.experts' as PostFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const postTagExpertConditionFactory =\n  createConditionFactory(isPostTagExpert);\n\nexport const postRules = {\n  isPostAuthor,\n  postHasTags,\n  postHasEntities,\n  postHasType,\n  isPostTagExpert,\n};\n\nexport const isAnswerAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the answer is created by the user',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Answer, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'answers.author' as AnswerFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const answerAuthorConditionFactory =\n  createConditionFactory(isAnswerAuthor);\n\nexport const answerQuestionHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description:\n    'Should allow only if the answers question has all the specific tags',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the question'),\n  }),\n  apply: (resource: Answer, { tags }) => {\n    return tags.every(t => resource?.post?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as AnswerFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const answerQuestionTagsConditionFactory = createConditionFactory(\n  answerQuestionHasTags,\n);\n\nexport const answerQuestionHasEntityRefs = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description:\n    'Should allow only if the answers question has all the specific entities',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z.array(z.string()).describe('Tag to match the question'),\n  }),\n  apply: (resource: Answer, { entityRefs }) => {\n    return entityRefs.every(t => resource?.post?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as AnswerFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const answerQuestionEntitiesConditionFactory = createConditionFactory(\n  answerQuestionHasEntityRefs,\n);\n\nexport const isAnswerTagExpert = createPermissionRule({\n  name: 'IS_ANSWER_TAG_EXPERT',\n  description: 'Allows if answers post has tags the user is expert of',\n  resourceRef: answerPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User ID to match on the tag expert')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within tag expert'),\n  }),\n  apply: (resource: Answer, { userRef, claims }) => {\n    return Boolean(\n      resource?.experts?.some(e => e === userRef || claims?.includes(e)),\n    );\n  },\n  toQuery: ({ claims = [], userRef }) => {\n    return {\n      property: 'tag.experts' as AnswerFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const answerTagExpertConditionFactory =\n  createConditionFactory(isAnswerTagExpert);\n\nexport const answerRules = {\n  isAnswerAuthor,\n  answerQuestionHasTags,\n  answerQuestionHasEntityRefs,\n  isAnswerTagExpert,\n};\n\nexport const isCommentAuthor = createPermissionRule({\n  name: 'IS_AUTHOR',\n  description: 'Should allow only if the comment is created by the user',\n  resourceRef: commentPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z.string().describe('User ID to match on the author').optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within author'),\n  }),\n  apply: (resource: Comment, { userRef, claims = [] }) => {\n    return resource?.author === userRef || claims.includes(resource?.author);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'comments.author' as CommentFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const commentAuthorConditionFactory =\n  createConditionFactory(isCommentAuthor);\n\nexport const commentRules = { isCommentAuthor };\n\nexport const isTag = createPermissionRule({\n  name: 'IS_TAG',\n  description: 'Should allow only if the tag exists',\n  resourceRef: tagPermissionResourceRef,\n  paramsSchema: z.object({\n    tag: z.string().describe('Tag to match the post'),\n  }),\n  apply: (resource: TagResponse, { tag }) => {\n    return resource?.tag === tag;\n  },\n  toQuery: ({ tag }) => {\n    return {\n      property: 'tags.tag' as TagFilter['property'],\n      values: [tag],\n    };\n  },\n});\n\nexport const tagConditionFactory = createConditionFactory(isTag);\n\nexport const isTagExpert = createPermissionRule({\n  name: 'IS_TAG_EXPERT',\n  description: 'Allows only if user is tag expert',\n  resourceRef: tagPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User ID to match on the tag expert')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within tag expert'),\n  }),\n  apply: (resource: TagResponse, { userRef, claims }) => {\n    return Boolean(\n      resource?.experts?.some(e => e === userRef || claims?.includes(e)),\n    );\n  },\n  toQuery: ({ claims = [], userRef }) => {\n    return {\n      property: 'tag.experts' as TagFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const tagExpertConditionFactory = createConditionFactory(isTagExpert);\n\nexport const tagRules = { isTag, isTagExpert };\n\nexport const isCollectionOwner = createPermissionRule({\n  name: 'IS_OWNER',\n  description: 'Should allow only if the collection is owned by the user',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User reference to match on the owner')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within owner'),\n  }),\n  apply: (resource: Collection, { userRef, claims = [] }) => {\n    return resource?.owner === userRef || claims.includes(resource?.owner);\n  },\n  toQuery: ({ userRef, claims = [] }) => {\n    return {\n      property: 'collections.owner' as CollectionFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const collectionOwnerConditionFactory =\n  createConditionFactory(isCollectionOwner);\n\nexport const collectionHasTags = createPermissionRule({\n  name: 'HAS_TAGS',\n  description:\n    'Should allow only if the posts in the collection have the specific tags',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    tags: z.array(z.string()).describe('Tag to match the collection'),\n  }),\n  apply: (resource: Collection, { tags }) => {\n    return tags.every(t => resource?.tags?.includes(t));\n  },\n  toQuery: ({ tags }) => {\n    return {\n      property: 'tags' as CollectionFilter['property'],\n      values: tags,\n    };\n  },\n});\n\nexport const collectionHasTagsConditionFactory =\n  createConditionFactory(collectionHasTags);\n\nexport const collectionHasEntities = createPermissionRule({\n  name: 'HAS_ENTITIES',\n  description:\n    'Should allow only if the posts in the collection have the specific entities',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    entityRefs: z\n      .array(z.string())\n      .describe('Entity refs to match the collection'),\n  }),\n  apply: (resource: Collection, { entityRefs }) => {\n    return entityRefs.every(t => resource?.entities?.includes(t));\n  },\n  toQuery: ({ entityRefs }) => {\n    return {\n      property: 'entityRefs' as CollectionFilter['property'],\n      values: entityRefs,\n    };\n  },\n});\n\nexport const collectionHasEntitiesConditionFactory = createConditionFactory(\n  collectionHasEntities,\n);\n\nexport const isCollectionTagExpert = createPermissionRule({\n  name: 'IS_COLLECTION_TAG_EXPERT',\n  description: 'Allows if collection has tags the user is expert of',\n  resourceRef: collectionPermissionResourceRef,\n  paramsSchema: z.object({\n    userRef: z\n      .string()\n      .describe('User ID to match on the tag expert')\n      .optional(),\n    claims: z\n      .array(z.string())\n      .optional()\n      .describe('List of claims to match at least one on within tag expert'),\n  }),\n  apply: (resource: Collection, { userRef, claims }) => {\n    return Boolean(\n      resource?.experts?.some(e => e === userRef || claims?.includes(e)),\n    );\n  },\n  toQuery: ({ claims = [], userRef }) => {\n    return {\n      property: 'tag.experts' as CollectionFilter['property'],\n      values: [userRef, ...claims].filter(Boolean),\n    };\n  },\n});\n\nexport const collectionTagExpertConditionFactory = createConditionFactory(\n  isCollectionTagExpert,\n);\n\nexport const collectionRules = {\n  isCollectionOwner,\n  collectionHasTags,\n  collectionHasEntities,\n  isCollectionTagExpert,\n};\n\nexport const rules = {\n  ...commentRules,\n  ...answerRules,\n  ...postRules,\n  ...tagRules,\n  ...collectionRules,\n};\n"],"names":["createPermissionRule","postPermissionResourceRef","z","createConditionFactory","answerPermissionResourceRef","commentPermissionResourceRef","tagPermissionResourceRef","collectionPermissionResourceRef"],"mappings":";;;;;;AAyBO,MAAM,eAAeA,yCAAqB,CAAA;AAAA,EAC/C,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,sDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAgB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACnD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,cAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,0BAAA,GAA6BC,4CAAuB,YAAY;AAEtE,MAAM,cAAcH,yCAAqB,CAAA;AAAA,EAC9C,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,yDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,uBAAuB;AAAA,GAC3D,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,MAAW,KAAA;AACnC,IAAA,OAAO,KAAK,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpD;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,2BAAA,GAA8BC,4CAAuB,WAAW;AAEtE,MAAM,kBAAkBH,yCAAqB,CAAA;AAAA,EAClD,IAAM,EAAA,cAAA;AAAA,EACN,WAAa,EAAA,6DAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,+BAA+B;AAAA,GACzE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,YAAiB,KAAA;AACzC,IAAA,OAAO,WAAW,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC9D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,+BAAA,GACXC,4CAAuB,eAAe;AAEjC,MAAM,cAAcH,yCAAqB,CAAA;AAAA,EAC9C,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,qDAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,IAAM,EAAAA,KAAA,CAAE,MAAO,EAAA,CAAE,SAAS,wBAAwB;AAAA,GACnD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAgB,EAAA,EAAE,MAAW,KAAA;AACnC,IAAA,OAAO,UAAU,IAAS,KAAA,IAAA;AAAA,GAC5B;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAA,EAAQ,CAAC,IAAI;AAAA,KACf;AAAA;AAEJ,CAAC;AAEY,MAAA,2BAAA,GAA8BC,4CAAuB,WAAW;AAEtE,MAAM,kBAAkBH,yCAAqB,CAAA;AAAA,EAClD,IAAM,EAAA,oBAAA;AAAA,EACN,WAAa,EAAA,+CAAA;AAAA,EACb,WAAa,EAAAC,6CAAA;AAAA,EACb,YAAA,EAAcC,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,oCAAoC,EAC7C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,2DAA2D;AAAA,GACxE,CAAA;AAAA,EACD,OAAO,CAAC,QAAA,EAAgB,EAAE,OAAA,EAAS,QAAa,KAAA;AAC9C,IAAO,OAAA,OAAA;AAAA,MACL,QAAA,EAAU,SAAS,IAAK,CAAA,CAAA,CAAA,KAAK,MAAM,OAAW,IAAA,MAAA,EAAQ,QAAS,CAAA,CAAC,CAAC;AAAA,KACnE;AAAA,GACF;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,EAAC,EAAG,SAAc,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,aAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,6BAAA,GACXC,4CAAuB,eAAe;AAEjC,MAAM,SAAY,GAAA;AAAA,EACvB,YAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAEO,MAAM,iBAAiBH,yCAAqB,CAAA;AAAA,EACjD,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,wDAAA;AAAA,EACb,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAkB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,gBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,4BAAA,GACXC,4CAAuB,cAAc;AAEhC,MAAM,wBAAwBH,yCAAqB,CAAA;AAAA,EACxD,IAAM,EAAA,UAAA;AAAA,EACN,WACE,EAAA,qEAAA;AAAA,EACF,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,2BAA2B;AAAA,GAC/D,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAkB,EAAA,EAAE,MAAW,KAAA;AACrC,IAAO,OAAA,IAAA,CAAK,MAAM,CAAK,CAAA,KAAA,QAAA,EAAU,MAAM,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC1D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,kCAAqC,GAAAC,2CAAA;AAAA,EAChD;AACF;AAEO,MAAM,8BAA8BH,yCAAqB,CAAA;AAAA,EAC9D,IAAM,EAAA,cAAA;AAAA,EACN,WACE,EAAA,yEAAA;AAAA,EACF,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,2BAA2B;AAAA,GACrE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAkB,EAAA,EAAE,YAAiB,KAAA;AAC3C,IAAO,OAAA,UAAA,CAAW,MAAM,CAAK,CAAA,KAAA,QAAA,EAAU,MAAM,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpE;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,sCAAyC,GAAAC,2CAAA;AAAA,EACpD;AACF;AAEO,MAAM,oBAAoBH,yCAAqB,CAAA;AAAA,EACpD,IAAM,EAAA,sBAAA;AAAA,EACN,WAAa,EAAA,uDAAA;AAAA,EACb,WAAa,EAAAI,+CAAA;AAAA,EACb,YAAA,EAAcF,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,oCAAoC,EAC7C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,2DAA2D;AAAA,GACxE,CAAA;AAAA,EACD,OAAO,CAAC,QAAA,EAAkB,EAAE,OAAA,EAAS,QAAa,KAAA;AAChD,IAAO,OAAA,OAAA;AAAA,MACL,QAAA,EAAU,SAAS,IAAK,CAAA,CAAA,CAAA,KAAK,MAAM,OAAW,IAAA,MAAA,EAAQ,QAAS,CAAA,CAAC,CAAC;AAAA,KACnE;AAAA,GACF;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,EAAC,EAAG,SAAc,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,aAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,+BAAA,GACXC,4CAAuB,iBAAiB;AAEnC,MAAM,WAAc,GAAA;AAAA,EACzB,cAAA;AAAA,EACA,qBAAA;AAAA,EACA,2BAAA;AAAA,EACA;AACF;AAEO,MAAM,kBAAkBH,yCAAqB,CAAA;AAAA,EAClD,IAAM,EAAA,WAAA;AAAA,EACN,WAAa,EAAA,yDAAA;AAAA,EACb,WAAa,EAAAK,gDAAA;AAAA,EACb,YAAA,EAAcH,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KAAE,CAAA,MAAA,GAAS,QAAS,CAAA,gCAAgC,EAAE,QAAS,EAAA;AAAA,IACxE,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,uDAAuD;AAAA,GACpE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAmB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACtD,IAAA,OAAO,UAAU,MAAW,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,MAAM,CAAA;AAAA,GACzE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,iBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,6BAAA,GACXC,4CAAuB,eAAe;AAE3B,MAAA,YAAA,GAAe,EAAE,eAAgB;AAEvC,MAAM,QAAQH,yCAAqB,CAAA;AAAA,EACxC,IAAM,EAAA,QAAA;AAAA,EACN,WAAa,EAAA,qCAAA;AAAA,EACb,WAAa,EAAAM,4CAAA;AAAA,EACb,YAAA,EAAcJ,MAAE,MAAO,CAAA;AAAA,IACrB,GAAK,EAAAA,KAAA,CAAE,MAAO,EAAA,CAAE,SAAS,uBAAuB;AAAA,GACjD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAuB,EAAA,EAAE,KAAU,KAAA;AACzC,IAAA,OAAO,UAAU,GAAQ,KAAA,GAAA;AAAA,GAC3B;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,GAAA,EAAU,KAAA;AACpB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,UAAA;AAAA,MACV,MAAA,EAAQ,CAAC,GAAG;AAAA,KACd;AAAA;AAEJ,CAAC;AAEY,MAAA,mBAAA,GAAsBC,4CAAuB,KAAK;AAExD,MAAM,cAAcH,yCAAqB,CAAA;AAAA,EAC9C,IAAM,EAAA,eAAA;AAAA,EACN,WAAa,EAAA,mCAAA;AAAA,EACb,WAAa,EAAAM,4CAAA;AAAA,EACb,YAAA,EAAcJ,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,oCAAoC,EAC7C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,2DAA2D;AAAA,GACxE,CAAA;AAAA,EACD,OAAO,CAAC,QAAA,EAAuB,EAAE,OAAA,EAAS,QAAa,KAAA;AACrD,IAAO,OAAA,OAAA;AAAA,MACL,QAAA,EAAU,SAAS,IAAK,CAAA,CAAA,CAAA,KAAK,MAAM,OAAW,IAAA,MAAA,EAAQ,QAAS,CAAA,CAAC,CAAC;AAAA,KACnE;AAAA,GACF;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,EAAC,EAAG,SAAc,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,aAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,yBAAA,GAA4BC,4CAAuB,WAAW;AAE9D,MAAA,QAAA,GAAW,EAAE,KAAA,EAAO,WAAY;AAEtC,MAAM,oBAAoBH,yCAAqB,CAAA;AAAA,EACpD,IAAM,EAAA,UAAA;AAAA,EACN,WAAa,EAAA,0DAAA;AAAA,EACb,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,sCAAsC,EAC/C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,sDAAsD;AAAA,GACnE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAsB,EAAA,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACzD,IAAA,OAAO,UAAU,KAAU,KAAA,OAAA,IAAW,MAAO,CAAA,QAAA,CAAS,UAAU,KAAK,CAAA;AAAA,GACvE;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,MAAS,GAAA,IAAS,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,mBAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEY,MAAA,+BAAA,GACXC,4CAAuB,iBAAiB;AAEnC,MAAM,oBAAoBH,yCAAqB,CAAA;AAAA,EACpD,IAAM,EAAA,UAAA;AAAA,EACN,WACE,EAAA,yEAAA;AAAA,EACF,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,IAAA,EAAMA,MAAE,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,6BAA6B;AAAA,GACjE,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAsB,EAAA,EAAE,MAAW,KAAA;AACzC,IAAA,OAAO,KAAK,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,IAAM,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GACpD;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,IAAA,EAAW,KAAA;AACrB,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,MAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEY,MAAA,iCAAA,GACXC,4CAAuB,iBAAiB;AAEnC,MAAM,wBAAwBH,yCAAqB,CAAA;AAAA,EACxD,IAAM,EAAA,cAAA;AAAA,EACN,WACE,EAAA,6EAAA;AAAA,EACF,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,UAAA,EAAYA,MACT,KAAM,CAAAA,KAAA,CAAE,QAAQ,CAAA,CAChB,SAAS,qCAAqC;AAAA,GAClD,CAAA;AAAA,EACD,KAAO,EAAA,CAAC,QAAsB,EAAA,EAAE,YAAiB,KAAA;AAC/C,IAAA,OAAO,WAAW,KAAM,CAAA,CAAA,CAAA,KAAK,UAAU,QAAU,EAAA,QAAA,CAAS,CAAC,CAAC,CAAA;AAAA,GAC9D;AAAA,EACA,OAAS,EAAA,CAAC,EAAE,UAAA,EAAiB,KAAA;AAC3B,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,YAAA;AAAA,MACV,MAAQ,EAAA;AAAA,KACV;AAAA;AAEJ,CAAC;AAEM,MAAM,qCAAwC,GAAAC,2CAAA;AAAA,EACnD;AACF;AAEO,MAAM,wBAAwBH,yCAAqB,CAAA;AAAA,EACxD,IAAM,EAAA,0BAAA;AAAA,EACN,WAAa,EAAA,qDAAA;AAAA,EACb,WAAa,EAAAO,mDAAA;AAAA,EACb,YAAA,EAAcL,MAAE,MAAO,CAAA;AAAA,IACrB,SAASA,KACN,CAAA,MAAA,GACA,QAAS,CAAA,oCAAoC,EAC7C,QAAS,EAAA;AAAA,IACZ,MAAA,EAAQA,KACL,CAAA,KAAA,CAAMA,KAAE,CAAA,MAAA,EAAQ,CAChB,CAAA,QAAA,EACA,CAAA,QAAA,CAAS,2DAA2D;AAAA,GACxE,CAAA;AAAA,EACD,OAAO,CAAC,QAAA,EAAsB,EAAE,OAAA,EAAS,QAAa,KAAA;AACpD,IAAO,OAAA,OAAA;AAAA,MACL,QAAA,EAAU,SAAS,IAAK,CAAA,CAAA,CAAA,KAAK,MAAM,OAAW,IAAA,MAAA,EAAQ,QAAS,CAAA,CAAC,CAAC;AAAA,KACnE;AAAA,GACF;AAAA,EACA,SAAS,CAAC,EAAE,SAAS,EAAC,EAAG,SAAc,KAAA;AACrC,IAAO,OAAA;AAAA,MACL,QAAU,EAAA,aAAA;AAAA,MACV,QAAQ,CAAC,OAAA,EAAS,GAAG,MAAM,CAAA,CAAE,OAAO,OAAO;AAAA,KAC7C;AAAA;AAEJ,CAAC;AAEM,MAAM,mCAAsC,GAAAC,2CAAA;AAAA,EACjD;AACF;AAEO,MAAM,eAAkB,GAAA;AAAA,EAC7B,iBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA;AACF;AAEO,MAAM,KAAQ,GAAA;AAAA,EACnB,GAAG,YAAA;AAAA,EACH,GAAG,WAAA;AAAA,EACH,GAAG,SAAA;AAAA,EACH,GAAG,QAAA;AAAA,EACH,GAAG;AACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/package.json

@@ -7,7 +7,7 @@
     "backstage.io",
     "node"
   ],
-  "version": "3.26.0",
+  "version": "3.28.0",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "prepublishOnly": "yarn tsc && yarn build",
@@ -47,20 +47,20 @@
     "tsc": "tsc"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.32.0"
+    "@backstage/cli": "^0.32.1"
   },
   "files": [
     "dist"
   ],
   "dependencies": {
-    "@backstage/backend-plugin-api": "^1.3.0",
-    "@backstage/catalog-client": "^1.9.1",
-    "@backstage/catalog-model": "^1.7.3",
+    "@backstage/backend-plugin-api": "^1.3.1",
+    "@backstage/catalog-client": "^1.10.0",
+    "@backstage/catalog-model": "^1.7.4",
     "@backstage/config": "^1.3.2",
-    "@backstage/plugin-auth-node": "^0.6.2",
-    "@backstage/plugin-permission-common": "^0.8.4",
-    "@backstage/plugin-permission-node": "^0.9.1",
-    "@drodil/backstage-plugin-qeta-common": "^3.26.0",
+    "@backstage/plugin-auth-node": "^0.6.3",
+    "@backstage/plugin-permission-common": "^0.9.0",
+    "@backstage/plugin-permission-node": "^0.10.0",
+    "@drodil/backstage-plugin-qeta-common": "^3.28.0",
     "zod": "^3.22.4"
   },
   "typesVersions": {