@kuadrant/kuadrant-backstage-plugin-frontend 0.0.1-test.1-2bfd8489 → 0.0.1-test.1-57ace816

package/dist/components/PermissionGate/PermissionGate.esm.js

@@ -1,30 +1,21 @@
 import React from 'react';
 import { Box, Typography } from '@material-ui/core';
 import { Progress } from '@backstage/core-components';
-import { useUserRole } from '../../hooks/useUserRole.esm.js';
+import { useKuadrantPermission } from '../../utils/permissions.esm.js';
 
-const PermissionGate = ({ children, requireRole, requireAnyRole, fallback }) => {
-  const { userInfo, loading } = useUserRole();
+const PermissionGate = ({ children, permission, fallback, errorMessage }) => {
+  const { allowed, loading, error } = useKuadrantPermission(permission);
   if (loading) {
     return /* @__PURE__ */ React.createElement(Progress, null);
   }
-  if (!userInfo) {
-    return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+  if (error) {
+    return /* @__PURE__ */ React.createElement(Box, { p: 4 }, /* @__PURE__ */ React.createElement(Typography, { color: "error" }, "Unable to check permissions: ", error.message), /* @__PURE__ */ React.createElement(Typography, { variant: "body2", color: "textSecondary" }, "Please try again or contact your administrator"));
   }
-  const hasPermission = () => {
-    if (requireRole) {
-      return userInfo.role === requireRole;
-    }
-    if (requireAnyRole) {
-      return requireAnyRole.includes(userInfo.role);
-    }
-    return true;
-  };
-  if (!hasPermission()) {
+  if (!allowed) {
     if (fallback) {
       return /* @__PURE__ */ React.createElement(React.Fragment, null, fallback);
     }
-    return /* @__PURE__ */ React.createElement(Box, { p: 4 }, /* @__PURE__ */ React.createElement(Typography, { color: "textSecondary" }, "you don't have permission to view this page"), /* @__PURE__ */ React.createElement(Box, { mt: 1 }, /* @__PURE__ */ React.createElement(Typography, { variant: "caption", color: "textSecondary" }, "required role: ", requireRole || requireAnyRole?.join(" or "))), /* @__PURE__ */ React.createElement(Typography, { variant: "caption", color: "textSecondary" }, "your role: ", userInfo.role));
+    return /* @__PURE__ */ React.createElement(Box, { p: 4 }, /* @__PURE__ */ React.createElement(Typography, { color: "textSecondary" }, errorMessage || "You don't have permission to view this page"), /* @__PURE__ */ React.createElement(Box, { mt: 1 }, /* @__PURE__ */ React.createElement(Typography, { variant: "caption", color: "textSecondary" }, "Required permission: ", permission.name)));
   }
   return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
 };

package/dist/components/PermissionGate/PermissionGate.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionGate.esm.js","sources":["../../../src/components/PermissionGate/PermissionGate.tsx"],"sourcesContent":["import React from 'react';\nimport { Typography, Box } from '@material-ui/core';\nimport { Progress } from '@backstage/core-components';\nimport { useUserRole } from '../../hooks/useUserRole';\n\ninterface PermissionGateProps {\n  children: React.ReactNode;\n  requireRole?: 'platform-engineer' | 'api-owner' | 'api-consumer';\n  requireAnyRole?: Array<'platform-engineer' | 'api-owner' | 'api-consumer'>;\n  fallback?: React.ReactNode;\n}\n\nexport const PermissionGate = ({ children, requireRole, requireAnyRole, fallback }: PermissionGateProps) => {\n  const { userInfo, loading } = useUserRole();\n\n  if (loading) {\n    return <Progress />;\n  }\n\n  if (!userInfo) {\n    // in dev mode without auth backend, allow access\n    return <>{children}</>;\n  }\n\n  const hasPermission = () => {\n    if (requireRole) {\n      return userInfo.role === requireRole;\n    }\n    if (requireAnyRole) {\n      return requireAnyRole.includes(userInfo.role as any);\n    }\n    return true;\n  };\n\n  if (!hasPermission()) {\n    if (fallback) {\n      return <>{fallback}</>;\n    }\n    return (\n      <Box p={4}>\n        <Typography color=\"textSecondary\">\n          you don't have permission to view this page\n        </Typography>\n        <Box mt={1}>\n          <Typography variant=\"caption\" color=\"textSecondary\">\n            required role: {requireRole || requireAnyRole?.join(' or ')}\n          </Typography>\n        </Box>\n        <Typography variant=\"caption\" color=\"textSecondary\">\n          your role: {userInfo.role}\n        </Typography>\n      </Box>\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"names":[],"mappings":";;;;;AAYO,MAAM,iBAAiB,CAAC,EAAE,UAAU,WAAa,EAAA,cAAA,EAAgB,UAAoC,KAAA;AAC1G,EAAA,MAAM,EAAE,QAAA,EAAU,OAAQ,EAAA,GAAI,WAAY,EAAA;AAE1C,EAAA,IAAI,OAAS,EAAA;AACX,IAAA,2CAAQ,QAAS,EAAA,IAAA,CAAA;AAAA;AAGnB,EAAA,IAAI,CAAC,QAAU,EAAA;AAEb,IAAA,iEAAU,QAAS,CAAA;AAAA;AAGrB,EAAA,MAAM,gBAAgB,MAAM;AAC1B,IAAA,IAAI,WAAa,EAAA;AACf,MAAA,OAAO,SAAS,IAAS,KAAA,WAAA;AAAA;AAE3B,IAAA,IAAI,cAAgB,EAAA;AAClB,MAAO,OAAA,cAAA,CAAe,QAAS,CAAA,QAAA,CAAS,IAAW,CAAA;AAAA;AAErD,IAAO,OAAA,IAAA;AAAA,GACT;AAEA,EAAI,IAAA,CAAC,eAAiB,EAAA;AACpB,IAAA,IAAI,QAAU,EAAA;AACZ,MAAA,iEAAU,QAAS,CAAA;AAAA;AAErB,IAAA,2CACG,GAAI,EAAA,EAAA,CAAA,EAAG,CACN,EAAA,kBAAA,KAAA,CAAA,aAAA,CAAC,cAAW,KAAM,EAAA,eAAA,EAAA,EAAgB,6CAElC,CAAA,sCACC,GAAI,EAAA,EAAA,EAAA,EAAI,CACP,EAAA,kBAAA,KAAA,CAAA,aAAA,CAAC,cAAW,OAAQ,EAAA,SAAA,EAAU,KAAM,EAAA,eAAA,EAAA,EAAgB,mBAClC,WAAe,IAAA,cAAA,EAAgB,IAAK,CAAA,MAAM,CAC5D,CACF,CAAA,kBACC,KAAA,CAAA,aAAA,CAAA,UAAA,EAAA,EAAW,SAAQ,SAAU,EAAA,KAAA,EAAM,mBAAgB,aACtC,EAAA,QAAA,CAAS,IACvB,CACF,CAAA;AAAA;AAIJ,EAAA,iEAAU,QAAS,CAAA;AACrB;;;;"}
+{"version":3,"file":"PermissionGate.esm.js","sources":["../../../src/components/PermissionGate/PermissionGate.tsx"],"sourcesContent":["import React from 'react';\nimport { Typography, Box } from '@material-ui/core';\nimport { Progress } from '@backstage/core-components';\nimport { Permission } from '@backstage/plugin-permission-common';\nimport { useKuadrantPermission } from '../../utils/permissions';\n\ninterface PermissionGateProps {\n  children: React.ReactNode;\n  permission: Permission;\n  fallback?: React.ReactNode;\n  errorMessage?: string;\n}\n\nexport const PermissionGate = ({ children, permission, fallback, errorMessage }: PermissionGateProps) => {\n  const { allowed, loading, error } = useKuadrantPermission(permission);\n\n  if (loading) {\n    return <Progress />;\n  }\n\n  if (error) {\n    return (\n      <Box p={4}>\n        <Typography color=\"error\">\n          Unable to check permissions: {error.message}\n        </Typography>\n        <Typography variant=\"body2\" color=\"textSecondary\">\n          Please try again or contact your administrator\n        </Typography>\n      </Box>\n    );\n  }\n\n  if (!allowed) {\n    if (fallback) {\n      return <>{fallback}</>;\n    }\n    return (\n      <Box p={4}>\n        <Typography color=\"textSecondary\">\n          {errorMessage || 'You don\\'t have permission to view this page'}\n        </Typography>\n        <Box mt={1}>\n          <Typography variant=\"caption\" color=\"textSecondary\">\n            Required permission: {permission.name}\n          </Typography>\n        </Box>\n      </Box>\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"names":[],"mappings":";;;;;AAaO,MAAM,iBAAiB,CAAC,EAAE,UAAU,UAAY,EAAA,QAAA,EAAU,cAAwC,KAAA;AACvG,EAAA,MAAM,EAAE,OAAS,EAAA,OAAA,EAAS,KAAM,EAAA,GAAI,sBAAsB,UAAU,CAAA;AAEpE,EAAA,IAAI,OAAS,EAAA;AACX,IAAA,2CAAQ,QAAS,EAAA,IAAA,CAAA;AAAA;AAGnB,EAAA,IAAI,KAAO,EAAA;AACT,IAAA,2CACG,GAAI,EAAA,EAAA,CAAA,EAAG,qBACL,KAAA,CAAA,aAAA,CAAA,UAAA,EAAA,EAAW,OAAM,OAAQ,EAAA,EAAA,+BAAA,EACM,MAAM,OACtC,CAAA,sCACC,UAAW,EAAA,EAAA,OAAA,EAAQ,SAAQ,KAAM,EAAA,eAAA,EAAA,EAAgB,gDAElD,CACF,CAAA;AAAA;AAIJ,EAAA,IAAI,CAAC,OAAS,EAAA;AACZ,IAAA,IAAI,QAAU,EAAA;AACZ,MAAA,iEAAU,QAAS,CAAA;AAAA;AAErB,IACE,uBAAA,KAAA,CAAA,aAAA,CAAC,GAAI,EAAA,EAAA,CAAA,EAAG,CACN,EAAA,kBAAA,KAAA,CAAA,aAAA,CAAC,cAAW,KAAM,EAAA,eAAA,EAAA,EACf,YAAgB,IAAA,6CACnB,CACA,kBAAA,KAAA,CAAA,aAAA,CAAC,OAAI,EAAI,EAAA,CAAA,EAAA,kBACN,KAAA,CAAA,aAAA,CAAA,UAAA,EAAA,EAAW,OAAQ,EAAA,SAAA,EAAU,KAAM,EAAA,eAAA,EAAA,EAAgB,uBAC5B,EAAA,UAAA,CAAW,IACnC,CACF,CACF,CAAA;AAAA;AAIJ,EAAA,iEAAU,QAAS,CAAA;AACrB;;;;"}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import * as react from 'react';
 import react__default from 'react';
 import * as _backstage_core_plugin_api from '@backstage/core-plugin-api';
+import * as _backstage_plugin_permission_common from '@backstage/plugin-permission-common';
 
 interface ApiKeyManagementTabProps {
     namespace?: string;
@@ -28,4 +29,83 @@ declare const ApiProductInfoCard: () => react__default.JSX.Element;
 
 declare const ApprovalQueueCard: () => react__default.JSX.Element;
 
-export { ApiAccessCard, ApiKeyManagementTab, ApiProductInfoCard, ApprovalQueueCard, EntityKuadrantApiAccessCard, EntityKuadrantApiKeyManagementTab, EntityKuadrantApiKeysContent, EntityKuadrantApiProductInfoContent, KuadrantApprovalQueueCard, KuadrantPage, PlanPolicyDetailPage, kuadrantPlugin };
+/**
+ * permission definitions for the kuadrant plugin
+ *
+ * these permissions control access to kuadrant resources and operations.
+ * they must match the permissions defined in the backend plugin.
+ *
+ * permission types:
+ * - BasicPermission: standard permission that applies globally
+ * - ResourcePermission: permission scoped to specific resource types (e.g., apiproduct)
+ *
+ * permission patterns:
+ * - `.create` - create new resources
+ * - `.read` - read resource details
+ * - `.read.own` - read only resources owned by the user
+ * - `.read.all` - read all resources regardless of ownership
+ * - `.update` - modify existing resources
+ * - `.delete` - delete resources
+ * - `.delete.own` - delete only resources owned by the user
+ * - `.delete.all` - delete any resource regardless of ownership
+ * - `.list` - list/view collections of resources
+ */
+declare const kuadrantPlanPolicyCreatePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantPlanPolicyReadPermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantPlanPolicyUpdatePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantPlanPolicyDeletePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantPlanPolicyListPermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiProductCreatePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiProductReadPermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiProductUpdatePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiProductDeletePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiProductListPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to create API key requests
+ *
+ * this is a ResourcePermission scoped to 'apiproduct', allowing
+ * fine-grained control over which API products users can request access to.
+ *
+ * use in frontend: useKuadrantPermission(kuadrantApiKeyRequestCreatePermission)
+ * use in backend with resource: { permission, resourceRef: 'apiproduct:namespace/name' }
+ */
+declare const kuadrantApiKeyRequestCreatePermission: _backstage_plugin_permission_common.ResourcePermission<"apiproduct">;
+/**
+ * permission to read API key requests created by the current user
+ * use this for allowing users to see their own request history
+ */
+declare const kuadrantApiKeyRequestReadOwnPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to read all API key requests regardless of who created them
+ * use this for platform engineers/admins who need to view the approval queue
+ */
+declare const kuadrantApiKeyRequestReadAllPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to approve or reject API key requests
+ * typically granted to API owners and platform engineers
+ */
+declare const kuadrantApiKeyRequestUpdatePermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantApiKeyRequestListPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to read API keys owned by the current user
+ * allows users to view their own active API keys
+ */
+declare const kuadrantApiKeyReadOwnPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to read all API keys regardless of ownership
+ * for platform engineers/admins who need to audit keys
+ */
+declare const kuadrantApiKeyReadAllPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to delete API keys owned by the current user
+ * allows users to revoke their own access
+ */
+declare const kuadrantApiKeyDeleteOwnPermission: _backstage_plugin_permission_common.BasicPermission;
+/**
+ * permission to delete any API key regardless of ownership
+ * for platform engineers/admins who need to revoke access
+ */
+declare const kuadrantApiKeyDeleteAllPermission: _backstage_plugin_permission_common.BasicPermission;
+declare const kuadrantPermissions: (_backstage_plugin_permission_common.BasicPermission | _backstage_plugin_permission_common.ResourcePermission<"apiproduct">)[];
+
+export { ApiAccessCard, ApiKeyManagementTab, ApiProductInfoCard, ApprovalQueueCard, EntityKuadrantApiAccessCard, EntityKuadrantApiKeyManagementTab, EntityKuadrantApiKeysContent, EntityKuadrantApiProductInfoContent, KuadrantApprovalQueueCard, KuadrantPage, PlanPolicyDetailPage, kuadrantApiKeyDeleteAllPermission, kuadrantApiKeyDeleteOwnPermission, kuadrantApiKeyReadAllPermission, kuadrantApiKeyReadOwnPermission, kuadrantApiKeyRequestCreatePermission, kuadrantApiKeyRequestListPermission, kuadrantApiKeyRequestReadAllPermission, kuadrantApiKeyRequestReadOwnPermission, kuadrantApiKeyRequestUpdatePermission, kuadrantApiProductCreatePermission, kuadrantApiProductDeletePermission, kuadrantApiProductListPermission, kuadrantApiProductReadPermission, kuadrantApiProductUpdatePermission, kuadrantPermissions, kuadrantPlanPolicyCreatePermission, kuadrantPlanPolicyDeletePermission, kuadrantPlanPolicyListPermission, kuadrantPlanPolicyReadPermission, kuadrantPlanPolicyUpdatePermission, kuadrantPlugin };

package/dist/index.esm.js

@@ -3,4 +3,5 @@ export { ApiAccessCard } from './components/ApiAccessCard/ApiAccessCard.esm.js';
 export { ApiKeyManagementTab } from './components/ApiKeyManagementTab/ApiKeyManagementTab.esm.js';
 export { ApiProductInfoCard } from './components/ApiProductInfoCard/ApiProductInfoCard.esm.js';
 export { ApprovalQueueCard } from './components/ApprovalQueueCard/ApprovalQueueCard.esm.js';
+export { kuadrantApiKeyDeleteAllPermission, kuadrantApiKeyDeleteOwnPermission, kuadrantApiKeyReadAllPermission, kuadrantApiKeyReadOwnPermission, kuadrantApiKeyRequestCreatePermission, kuadrantApiKeyRequestListPermission, kuadrantApiKeyRequestReadAllPermission, kuadrantApiKeyRequestReadOwnPermission, kuadrantApiKeyRequestUpdatePermission, kuadrantApiProductCreatePermission, kuadrantApiProductDeletePermission, kuadrantApiProductListPermission, kuadrantApiProductReadPermission, kuadrantApiProductUpdatePermission, kuadrantPermissions, kuadrantPlanPolicyCreatePermission, kuadrantPlanPolicyDeletePermission, kuadrantPlanPolicyListPermission, kuadrantPlanPolicyReadPermission, kuadrantPlanPolicyUpdatePermission } from './permissions.esm.js';
 //# sourceMappingURL=index.esm.js.map

package/dist/index.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;"}
+{"version":3,"file":"index.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;"}

package/dist/permissions.esm.js

@@ -0,0 +1,103 @@
+import { createPermission } from '@backstage/plugin-permission-common';
+
+const kuadrantPlanPolicyCreatePermission = createPermission({
+  name: "kuadrant.planpolicy.create",
+  attributes: { action: "create" }
+});
+const kuadrantPlanPolicyReadPermission = createPermission({
+  name: "kuadrant.planpolicy.read",
+  attributes: { action: "read" }
+});
+const kuadrantPlanPolicyUpdatePermission = createPermission({
+  name: "kuadrant.planpolicy.update",
+  attributes: { action: "update" }
+});
+const kuadrantPlanPolicyDeletePermission = createPermission({
+  name: "kuadrant.planpolicy.delete",
+  attributes: { action: "delete" }
+});
+const kuadrantPlanPolicyListPermission = createPermission({
+  name: "kuadrant.planpolicy.list",
+  attributes: { action: "read" }
+});
+const kuadrantApiProductCreatePermission = createPermission({
+  name: "kuadrant.apiproduct.create",
+  attributes: { action: "create" }
+});
+const kuadrantApiProductReadPermission = createPermission({
+  name: "kuadrant.apiproduct.read",
+  attributes: { action: "read" }
+});
+const kuadrantApiProductUpdatePermission = createPermission({
+  name: "kuadrant.apiproduct.update",
+  attributes: { action: "update" }
+});
+const kuadrantApiProductDeletePermission = createPermission({
+  name: "kuadrant.apiproduct.delete",
+  attributes: { action: "delete" }
+});
+const kuadrantApiProductListPermission = createPermission({
+  name: "kuadrant.apiproduct.list",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyRequestCreatePermission = createPermission({
+  name: "kuadrant.apikeyrequest.create",
+  attributes: { action: "create" },
+  resourceType: "apiproduct"
+});
+const kuadrantApiKeyRequestReadOwnPermission = createPermission({
+  name: "kuadrant.apikeyrequest.read.own",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyRequestReadAllPermission = createPermission({
+  name: "kuadrant.apikeyrequest.read.all",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyRequestUpdatePermission = createPermission({
+  name: "kuadrant.apikeyrequest.update",
+  attributes: { action: "update" }
+});
+const kuadrantApiKeyRequestListPermission = createPermission({
+  name: "kuadrant.apikeyrequest.list",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyReadOwnPermission = createPermission({
+  name: "kuadrant.apikey.read.own",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyReadAllPermission = createPermission({
+  name: "kuadrant.apikey.read.all",
+  attributes: { action: "read" }
+});
+const kuadrantApiKeyDeleteOwnPermission = createPermission({
+  name: "kuadrant.apikey.delete.own",
+  attributes: { action: "delete" }
+});
+const kuadrantApiKeyDeleteAllPermission = createPermission({
+  name: "kuadrant.apikey.delete.all",
+  attributes: { action: "delete" }
+});
+const kuadrantPermissions = [
+  kuadrantPlanPolicyCreatePermission,
+  kuadrantPlanPolicyReadPermission,
+  kuadrantPlanPolicyUpdatePermission,
+  kuadrantPlanPolicyDeletePermission,
+  kuadrantPlanPolicyListPermission,
+  kuadrantApiProductCreatePermission,
+  kuadrantApiProductReadPermission,
+  kuadrantApiProductUpdatePermission,
+  kuadrantApiProductDeletePermission,
+  kuadrantApiProductListPermission,
+  kuadrantApiKeyRequestCreatePermission,
+  kuadrantApiKeyRequestReadOwnPermission,
+  kuadrantApiKeyRequestReadAllPermission,
+  kuadrantApiKeyRequestUpdatePermission,
+  kuadrantApiKeyRequestListPermission,
+  kuadrantApiKeyReadOwnPermission,
+  kuadrantApiKeyReadAllPermission,
+  kuadrantApiKeyDeleteOwnPermission,
+  kuadrantApiKeyDeleteAllPermission
+];
+
+export { kuadrantApiKeyDeleteAllPermission, kuadrantApiKeyDeleteOwnPermission, kuadrantApiKeyReadAllPermission, kuadrantApiKeyReadOwnPermission, kuadrantApiKeyRequestCreatePermission, kuadrantApiKeyRequestListPermission, kuadrantApiKeyRequestReadAllPermission, kuadrantApiKeyRequestReadOwnPermission, kuadrantApiKeyRequestUpdatePermission, kuadrantApiProductCreatePermission, kuadrantApiProductDeletePermission, kuadrantApiProductListPermission, kuadrantApiProductReadPermission, kuadrantApiProductUpdatePermission, kuadrantPermissions, kuadrantPlanPolicyCreatePermission, kuadrantPlanPolicyDeletePermission, kuadrantPlanPolicyListPermission, kuadrantPlanPolicyReadPermission, kuadrantPlanPolicyUpdatePermission };
+//# sourceMappingURL=permissions.esm.js.map

package/dist/permissions.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.esm.js","sources":["../src/permissions.ts"],"sourcesContent":["import { createPermission } from '@backstage/plugin-permission-common';\n\n/**\n * permission definitions for the kuadrant plugin\n *\n * these permissions control access to kuadrant resources and operations.\n * they must match the permissions defined in the backend plugin.\n *\n * permission types:\n * - BasicPermission: standard permission that applies globally\n * - ResourcePermission: permission scoped to specific resource types (e.g., apiproduct)\n *\n * permission patterns:\n * - `.create` - create new resources\n * - `.read` - read resource details\n * - `.read.own` - read only resources owned by the user\n * - `.read.all` - read all resources regardless of ownership\n * - `.update` - modify existing resources\n * - `.delete` - delete resources\n * - `.delete.own` - delete only resources owned by the user\n * - `.delete.all` - delete any resource regardless of ownership\n * - `.list` - list/view collections of resources\n */\n\n// planpolicy permissions\nexport const kuadrantPlanPolicyCreatePermission = createPermission({\n  name: 'kuadrant.planpolicy.create',\n  attributes: { action: 'create' },\n});\n\nexport const kuadrantPlanPolicyReadPermission = createPermission({\n  name: 'kuadrant.planpolicy.read',\n  attributes: { action: 'read' },\n});\n\nexport const kuadrantPlanPolicyUpdatePermission = createPermission({\n  name: 'kuadrant.planpolicy.update',\n  attributes: { action: 'update' },\n});\n\nexport const kuadrantPlanPolicyDeletePermission = createPermission({\n  name: 'kuadrant.planpolicy.delete',\n  attributes: { action: 'delete' },\n});\n\nexport const kuadrantPlanPolicyListPermission = createPermission({\n  name: 'kuadrant.planpolicy.list',\n  attributes: { action: 'read' },\n});\n\n// apiproduct permissions\nexport const kuadrantApiProductCreatePermission = createPermission({\n  name: 'kuadrant.apiproduct.create',\n  attributes: { action: 'create' },\n});\n\nexport const kuadrantApiProductReadPermission = createPermission({\n  name: 'kuadrant.apiproduct.read',\n  attributes: { action: 'read' },\n});\n\nexport const kuadrantApiProductUpdatePermission = createPermission({\n  name: 'kuadrant.apiproduct.update',\n  attributes: { action: 'update' },\n});\n\nexport const kuadrantApiProductDeletePermission = createPermission({\n  name: 'kuadrant.apiproduct.delete',\n  attributes: { action: 'delete' },\n});\n\nexport const kuadrantApiProductListPermission = createPermission({\n  name: 'kuadrant.apiproduct.list',\n  attributes: { action: 'read' },\n});\n\n// apikeyrequest permissions\n\n/**\n * permission to create API key requests\n *\n * this is a ResourcePermission scoped to 'apiproduct', allowing\n * fine-grained control over which API products users can request access to.\n *\n * use in frontend: useKuadrantPermission(kuadrantApiKeyRequestCreatePermission)\n * use in backend with resource: { permission, resourceRef: 'apiproduct:namespace/name' }\n */\nexport const kuadrantApiKeyRequestCreatePermission = createPermission({\n  name: 'kuadrant.apikeyrequest.create',\n  attributes: { action: 'create' },\n  resourceType: 'apiproduct',\n});\n\n/**\n * permission to read API key requests created by the current user\n * use this for allowing users to see their own request history\n */\nexport const kuadrantApiKeyRequestReadOwnPermission = createPermission({\n  name: 'kuadrant.apikeyrequest.read.own',\n  attributes: { action: 'read' },\n});\n\n/**\n * permission to read all API key requests regardless of who created them\n * use this for platform engineers/admins who need to view the approval queue\n */\nexport const kuadrantApiKeyRequestReadAllPermission = createPermission({\n  name: 'kuadrant.apikeyrequest.read.all',\n  attributes: { action: 'read' },\n});\n\n/**\n * permission to approve or reject API key requests\n * typically granted to API owners and platform engineers\n */\nexport const kuadrantApiKeyRequestUpdatePermission = createPermission({\n  name: 'kuadrant.apikeyrequest.update',\n  attributes: { action: 'update' },\n});\n\nexport const kuadrantApiKeyRequestListPermission = createPermission({\n  name: 'kuadrant.apikeyrequest.list',\n  attributes: { action: 'read' },\n});\n\n// api key permissions\n\n/**\n * permission to read API keys owned by the current user\n * allows users to view their own active API keys\n */\nexport const kuadrantApiKeyReadOwnPermission = createPermission({\n  name: 'kuadrant.apikey.read.own',\n  attributes: { action: 'read' },\n});\n\n/**\n * permission to read all API keys regardless of ownership\n * for platform engineers/admins who need to audit keys\n */\nexport const kuadrantApiKeyReadAllPermission = createPermission({\n  name: 'kuadrant.apikey.read.all',\n  attributes: { action: 'read' },\n});\n\n/**\n * permission to delete API keys owned by the current user\n * allows users to revoke their own access\n */\nexport const kuadrantApiKeyDeleteOwnPermission = createPermission({\n  name: 'kuadrant.apikey.delete.own',\n  attributes: { action: 'delete' },\n});\n\n/**\n * permission to delete any API key regardless of ownership\n * for platform engineers/admins who need to revoke access\n */\nexport const kuadrantApiKeyDeleteAllPermission = createPermission({\n  name: 'kuadrant.apikey.delete.all',\n  attributes: { action: 'delete' },\n});\n\nexport const kuadrantPermissions = [\n  kuadrantPlanPolicyCreatePermission,\n  kuadrantPlanPolicyReadPermission,\n  kuadrantPlanPolicyUpdatePermission,\n  kuadrantPlanPolicyDeletePermission,\n  kuadrantPlanPolicyListPermission,\n  kuadrantApiProductCreatePermission,\n  kuadrantApiProductReadPermission,\n  kuadrantApiProductUpdatePermission,\n  kuadrantApiProductDeletePermission,\n  kuadrantApiProductListPermission,\n  kuadrantApiKeyRequestCreatePermission,\n  kuadrantApiKeyRequestReadOwnPermission,\n  kuadrantApiKeyRequestReadAllPermission,\n  kuadrantApiKeyRequestUpdatePermission,\n  kuadrantApiKeyRequestListPermission,\n  kuadrantApiKeyReadOwnPermission,\n  kuadrantApiKeyReadAllPermission,\n  kuadrantApiKeyDeleteOwnPermission,\n  kuadrantApiKeyDeleteAllPermission,\n];\n"],"names":[],"mappings":";;AAyBO,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,mCAAmC,gBAAiB,CAAA;AAAA,EAC/D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAEM,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,mCAAmC,gBAAiB,CAAA;AAAA,EAC/D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAGM,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,mCAAmC,gBAAiB,CAAA;AAAA,EAC/D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAEM,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,qCAAqC,gBAAiB,CAAA;AAAA,EACjE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,mCAAmC,gBAAiB,CAAA;AAAA,EAC/D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAaM,MAAM,wCAAwC,gBAAiB,CAAA;AAAA,EACpE,IAAM,EAAA,+BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS,EAAA;AAAA,EAC/B,YAAc,EAAA;AAChB,CAAC;AAMM,MAAM,yCAAyC,gBAAiB,CAAA;AAAA,EACrE,IAAM,EAAA,iCAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAMM,MAAM,yCAAyC,gBAAiB,CAAA;AAAA,EACrE,IAAM,EAAA,iCAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAMM,MAAM,wCAAwC,gBAAiB,CAAA;AAAA,EACpE,IAAM,EAAA,+BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,sCAAsC,gBAAiB,CAAA;AAAA,EAClE,IAAM,EAAA,6BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAQM,MAAM,kCAAkC,gBAAiB,CAAA;AAAA,EAC9D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAMM,MAAM,kCAAkC,gBAAiB,CAAA;AAAA,EAC9D,IAAM,EAAA,0BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,MAAO;AAC/B,CAAC;AAMM,MAAM,oCAAoC,gBAAiB,CAAA;AAAA,EAChE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAMM,MAAM,oCAAoC,gBAAiB,CAAA;AAAA,EAChE,IAAM,EAAA,4BAAA;AAAA,EACN,UAAA,EAAY,EAAE,MAAA,EAAQ,QAAS;AACjC,CAAC;AAEM,MAAM,mBAAsB,GAAA;AAAA,EACjC,kCAAA;AAAA,EACA,gCAAA;AAAA,EACA,kCAAA;AAAA,EACA,kCAAA;AAAA,EACA,gCAAA;AAAA,EACA,kCAAA;AAAA,EACA,gCAAA;AAAA,EACA,kCAAA;AAAA,EACA,kCAAA;AAAA,EACA,gCAAA;AAAA,EACA,qCAAA;AAAA,EACA,sCAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA,EACA,mCAAA;AAAA,EACA,+BAAA;AAAA,EACA,+BAAA;AAAA,EACA,iCAAA;AAAA,EACA;AACF;;;;"}

package/dist/utils/permissions.esm.js

@@ -0,0 +1,19 @@
+import { usePermission } from '@backstage/plugin-permission-react';
+
+function useKuadrantPermission(permission, resourceRef) {
+  const permissionRequest = "resourceType" in permission ? { permission, resourceRef } : { permission };
+  const result = usePermission(permissionRequest);
+  return {
+    allowed: result.allowed,
+    loading: result.loading,
+    error: result.error
+  };
+}
+function canDeleteResource(ownerId, currentUserId, canDeleteOwn, canDeleteAll) {
+  if (canDeleteAll) return true;
+  if (canDeleteOwn && ownerId === currentUserId) return true;
+  return false;
+}
+
+export { canDeleteResource, useKuadrantPermission };
+//# sourceMappingURL=permissions.esm.js.map

package/dist/utils/permissions.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.esm.js","sources":["../../src/utils/permissions.ts"],"sourcesContent":["import { usePermission } from '@backstage/plugin-permission-react';\nimport { Permission, ResourcePermission } from '@backstage/plugin-permission-common';\n\n/**\n * result of a permission check including error state\n */\nexport interface PermissionCheckResult {\n  allowed: boolean;\n  loading: boolean;\n  error?: Error;\n}\n\n/**\n * custom hook for checking kuadrant permissions that handles both\n * BasicPermission and ResourcePermission types without type bypasses\n *\n * @param permission - the permission to check\n * @param resourceRef - optional resource reference for ResourcePermissions\n * @returns permission check result with error handling\n *\n * @example\n * // basic permission\n * const { allowed, loading, error } = useKuadrantPermission(\n *   kuadrantApiProductListPermission\n * );\n *\n * @example\n * // resource permission\n * const { allowed, loading, error } = useKuadrantPermission(\n *   kuadrantApiKeyRequestCreatePermission,\n *   'apiproduct:namespace/name'\n * );\n */\nexport function useKuadrantPermission(\n  permission: Permission,\n  resourceRef?: string,\n): PermissionCheckResult {\n  // construct the permission request based on whether it's a ResourcePermission\n  const permissionRequest = 'resourceType' in permission\n    ? { permission: permission as ResourcePermission, resourceRef }\n    : { permission };\n\n  const result = usePermission(permissionRequest as any);\n\n  return {\n    allowed: result.allowed,\n    loading: result.loading,\n    error: result.error,\n  };\n}\n\n/**\n * helper to determine if a user can delete a specific API key or request\n *\n * @param ownerId - the user id who owns the key/request\n * @param currentUserId - the current user's id\n * @param canDeleteOwn - whether user has permission to delete their own keys\n * @param canDeleteAll - whether user has permission to delete all keys\n * @returns true if user can delete this specific key/request\n */\nexport function canDeleteResource(\n  ownerId: string,\n  currentUserId: string,\n  canDeleteOwn: boolean,\n  canDeleteAll: boolean,\n): boolean {\n  if (canDeleteAll) return true;\n  if (canDeleteOwn && ownerId === currentUserId) return true;\n  return false;\n}\n"],"names":[],"mappings":";;AAiCgB,SAAA,qBAAA,CACd,YACA,WACuB,EAAA;AAEvB,EAAM,MAAA,iBAAA,GAAoB,kBAAkB,UACxC,GAAA,EAAE,YAA8C,WAAY,EAAA,GAC5D,EAAE,UAAW,EAAA;AAEjB,EAAM,MAAA,MAAA,GAAS,cAAc,iBAAwB,CAAA;AAErD,EAAO,OAAA;AAAA,IACL,SAAS,MAAO,CAAA,OAAA;AAAA,IAChB,SAAS,MAAO,CAAA,OAAA;AAAA,IAChB,OAAO,MAAO,CAAA;AAAA,GAChB;AACF;AAWO,SAAS,iBACd,CAAA,OAAA,EACA,aACA,EAAA,YAAA,EACA,YACS,EAAA;AACT,EAAA,IAAI,cAAqB,OAAA,IAAA;AACzB,EAAI,IAAA,YAAA,IAAgB,OAAY,KAAA,aAAA,EAAsB,OAAA,IAAA;AACtD,EAAO,OAAA,KAAA;AACT;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kuadrant/kuadrant-backstage-plugin-frontend",
-  "version": "0.0.1-test.1-2bfd8489",
+  "version": "0.0.1-test.1-57ace816",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",

package/dist/hooks/useUserRole.esm.js

@@ -1,49 +0,0 @@
-import { useApi, identityApiRef } from '@backstage/core-plugin-api';
-import useAsync from 'react-use/lib/useAsync';
-
-function useUserRole() {
-  const identityApi = useApi(identityApiRef);
-  const { value, loading } = useAsync(async () => {
-    try {
-      const identity = await identityApi.getBackstageIdentity();
-      const userId = identity.userEntityRef.split("/")[1] || "guest";
-      const ownershipRefs = identity.ownershipEntityRefs || [];
-      console.log("useUserRole debug:", { userId, ownershipRefs });
-      const isPlatformEngineer = ownershipRefs.includes("group:default/platform-engineers") || ownershipRefs.includes("group:default/platform-admins");
-      const isApiOwner = ownershipRefs.includes("group:default/api-owners") || ownershipRefs.includes("group:default/app-developers");
-      const isApiConsumer = ownershipRefs.includes("group:default/api-consumers");
-      let role = "unknown";
-      if (isPlatformEngineer) {
-        role = "platform-engineer";
-      } else if (isApiOwner) {
-        role = "api-owner";
-      } else if (isApiConsumer) {
-        role = "api-consumer";
-      }
-      console.log("useUserRole result:", { role, isPlatformEngineer, isApiOwner, isApiConsumer });
-      return {
-        userId,
-        role,
-        isPlatformEngineer,
-        isApiOwner,
-        isApiConsumer
-      };
-    } catch (error) {
-      console.log("useUserRole error, returning guest with full access:", error);
-      return {
-        userId: "guest",
-        role: "platform-engineer",
-        isPlatformEngineer: true,
-        isApiOwner: true,
-        isApiConsumer: true
-      };
-    }
-  }, [identityApi]);
-  return {
-    userInfo: value || null,
-    loading
-  };
-}
-
-export { useUserRole };
-//# sourceMappingURL=useUserRole.esm.js.map

package/dist/hooks/useUserRole.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"useUserRole.esm.js","sources":["../../src/hooks/useUserRole.ts"],"sourcesContent":["import { useApi, identityApiRef } from '@backstage/core-plugin-api';\nimport useAsync from 'react-use/lib/useAsync';\n\nexport type UserRole = 'platform-engineer' | 'api-owner' | 'api-consumer' | 'unknown';\n\nexport interface UserInfo {\n  userId: string;\n  role: UserRole;\n  isPlatformEngineer: boolean;\n  isApiOwner: boolean;\n  isApiConsumer: boolean;\n}\n\nexport function useUserRole(): { userInfo: UserInfo | null; loading: boolean } {\n  const identityApi = useApi(identityApiRef);\n\n  const { value, loading } = useAsync(async () => {\n    try {\n      const identity = await identityApi.getBackstageIdentity();\n      const userId = identity.userEntityRef.split('/')[1] || 'guest';\n      const ownershipRefs = identity.ownershipEntityRefs || [];\n\n      console.log('useUserRole debug:', { userId, ownershipRefs });\n\n      // determine roles based on group membership (not hierarchical)\n      const isPlatformEngineer = ownershipRefs.includes('group:default/platform-engineers') ||\n                                 ownershipRefs.includes('group:default/platform-admins');\n\n      const isApiOwner = ownershipRefs.includes('group:default/api-owners') ||\n                         ownershipRefs.includes('group:default/app-developers');\n\n      const isApiConsumer = ownershipRefs.includes('group:default/api-consumers');\n\n      // primary role (for display)\n      let role: UserRole = 'unknown';\n      if (isPlatformEngineer) {\n        role = 'platform-engineer';\n      } else if (isApiOwner) {\n        role = 'api-owner';\n      } else if (isApiConsumer) {\n        role = 'api-consumer';\n      }\n\n      console.log('useUserRole result:', { role, isPlatformEngineer, isApiOwner, isApiConsumer });\n\n      return {\n        userId,\n        role,\n        isPlatformEngineer,\n        isApiOwner,\n        isApiConsumer,\n      };\n    } catch (error) {\n      console.log('useUserRole error, returning guest with full access:', error);\n      // in dev mode without auth backend, return default guest with full access\n      return {\n        userId: 'guest',\n        role: 'platform-engineer' as UserRole,\n        isPlatformEngineer: true,\n        isApiOwner: true,\n        isApiConsumer: true,\n      };\n    }\n  }, [identityApi]);\n\n  return {\n    userInfo: value || null,\n    loading,\n  };\n}\n"],"names":[],"mappings":";;;AAaO,SAAS,WAA+D,GAAA;AAC7E,EAAM,MAAA,WAAA,GAAc,OAAO,cAAc,CAAA;AAEzC,EAAA,MAAM,EAAE,KAAA,EAAO,OAAQ,EAAA,GAAI,SAAS,YAAY;AAC9C,IAAI,IAAA;AACF,MAAM,MAAA,QAAA,GAAW,MAAM,WAAA,CAAY,oBAAqB,EAAA;AACxD,MAAA,MAAM,SAAS,QAAS,CAAA,aAAA,CAAc,MAAM,GAAG,CAAA,CAAE,CAAC,CAAK,IAAA,OAAA;AACvD,MAAM,MAAA,aAAA,GAAgB,QAAS,CAAA,mBAAA,IAAuB,EAAC;AAEvD,MAAA,OAAA,CAAQ,GAAI,CAAA,oBAAA,EAAsB,EAAE,MAAA,EAAQ,eAAe,CAAA;AAG3D,MAAA,MAAM,qBAAqB,aAAc,CAAA,QAAA,CAAS,kCAAkC,CACzD,IAAA,aAAA,CAAc,SAAS,+BAA+B,CAAA;AAEjF,MAAA,MAAM,aAAa,aAAc,CAAA,QAAA,CAAS,0BAA0B,CACjD,IAAA,aAAA,CAAc,SAAS,8BAA8B,CAAA;AAExE,MAAM,MAAA,aAAA,GAAgB,aAAc,CAAA,QAAA,CAAS,6BAA6B,CAAA;AAG1E,MAAA,IAAI,IAAiB,GAAA,SAAA;AACrB,MAAA,IAAI,kBAAoB,EAAA;AACtB,QAAO,IAAA,GAAA,mBAAA;AAAA,iBACE,UAAY,EAAA;AACrB,QAAO,IAAA,GAAA,WAAA;AAAA,iBACE,aAAe,EAAA;AACxB,QAAO,IAAA,GAAA,cAAA;AAAA;AAGT,MAAA,OAAA,CAAQ,IAAI,qBAAuB,EAAA,EAAE,MAAM,kBAAoB,EAAA,UAAA,EAAY,eAAe,CAAA;AAE1F,MAAO,OAAA;AAAA,QACL,MAAA;AAAA,QACA,IAAA;AAAA,QACA,kBAAA;AAAA,QACA,UAAA;AAAA,QACA;AAAA,OACF;AAAA,aACO,KAAO,EAAA;AACd,MAAQ,OAAA,CAAA,GAAA,CAAI,wDAAwD,KAAK,CAAA;AAEzE,MAAO,OAAA;AAAA,QACL,MAAQ,EAAA,OAAA;AAAA,QACR,IAAM,EAAA,mBAAA;AAAA,QACN,kBAAoB,EAAA,IAAA;AAAA,QACpB,UAAY,EAAA,IAAA;AAAA,QACZ,aAAe,EAAA;AAAA,OACjB;AAAA;AACF,GACF,EAAG,CAAC,WAAW,CAAC,CAAA;AAEhB,EAAO,OAAA;AAAA,IACL,UAAU,KAAS,IAAA,IAAA;AAAA,IACnB;AAAA,GACF;AACF;;;;"}