@lightdash/common 0.1789.2 → 0.1791.0

package/dist/cjs/authorization/index.d.ts

@@ -8,6 +8,7 @@ type UserAbilityBuilderArgs = {
     projectProfiles: Pick<ProjectMemberProfile, 'projectUuid' | 'role' | 'userUuid'>[];
     permissionsConfig: OrganizationMemberAbilitiesArgs['permissionsConfig'];
 };
+export * from './scopeAbility';
 export * from './serviceAccountAbility';
 export declare const getUserAbilityBuilder: ({ user, projectProfiles, permissionsConfig, }: UserAbilityBuilderArgs) => AbilityBuilder<MemberAbility>;
 export declare const defineUserAbility: (user: Pick<LightdashUser, "role" | "organizationUuid" | "userUuid">, projectProfiles: Pick<ProjectMemberProfile, "projectUuid" | "role" | "userUuid">[]) => MemberAbility;

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACpE,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,qBAAqB,kDAI/B,sBAAsB,kCAoBxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,mBAClD,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,KACJ,aAYF,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACpE,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,qBAAqB,kDAI/B,sBAAsB,kCAoBxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,mBAClD,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,KACJ,aAYF,CAAC"}

package/dist/cjs/authorization/index.js

@@ -5,6 +5,7 @@ const tslib_1 = require("tslib");
 const ability_1 = require("@casl/ability");
 const organizationMemberAbility_1 = tslib_1.__importDefault(require("./organizationMemberAbility"));
 const projectMemberAbility_1 = require("./projectMemberAbility");
+tslib_1.__exportStar(require("./scopeAbility"), exports);
 tslib_1.__exportStar(require("./serviceAccountAbility"), exports);
 const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, }) => {
     const builder = new ability_1.AbilityBuilder(ability_1.Ability);

package/dist/cjs/authorization/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AAGxD,oGAEqC;AACrC,iEAAgE;AAYhE,kEAAwC;AAEjC,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,GACI,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAA,mCAAgC,EAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAxBW,QAAA,qBAAqB,yBAwBhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAAmE,EACnE,eAGG,EACU,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;KACJ,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAlBW,QAAA,iBAAiB,qBAkB5B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AAGxD,oGAEqC;AACrC,iEAAgE;AAYhE,yDAA+B;AAC/B,kEAAwC;AAEjC,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,GACI,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAA,mCAAgC,EAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAxBW,QAAA,qBAAqB,yBAwBhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAAmE,EACnE,eAGG,EACU,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;KACJ,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAlBW,QAAA,iBAAiB,qBAkB5B"}

package/dist/cjs/authorization/scopeAbility.d.ts

@@ -0,0 +1,5 @@
+import { type AbilityBuilder } from '@casl/ability';
+import { type CreateEmbedJwt, type Embed } from '../ee';
+import type { MemberAbility } from './types';
+export declare function applyEmbeddedAbility(embedUser: CreateEmbedJwt, dashboardUuid: string, organization: Embed['organization'], builder: AbilityBuilder<MemberAbility>): void;
+//# sourceMappingURL=scopeAbility.d.ts.map

package/dist/cjs/authorization/scopeAbility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/scopeAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,OAAO,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAkF7C,wBAAgB,oBAAoB,CAChC,SAAS,EAAE,cAAc,EACzB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EACnC,OAAO,EAAE,cAAc,CAAC,aAAa,CAAC,QAGzC"}

package/dist/cjs/authorization/scopeAbility.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyEmbeddedAbility = applyEmbeddedAbility;
+const lodash_1 = require("lodash");
+const addBaseAbilities = ({ embedUser, dashboardUuid, organization, builder, }) => {
+    const { can } = builder;
+    can('view', 'Dashboard', {
+        dashboardUuid,
+        organizationUuid: organization.organizationUuid,
+    });
+    return { embedUser, dashboardUuid, organization, builder };
+};
+const exportAbilities = ({ embedUser, dashboardUuid, organization, builder, }) => {
+    const { content } = embedUser;
+    const { can } = builder;
+    if (content.canExportCsv) {
+        can('export', 'Dashboard', {
+            organizationUuid: organization.organizationUuid,
+            type: 'csv',
+        });
+    }
+    if (content.canExportPagePdf) {
+        can('export', 'Dashboard', {
+            organizationUuid: organization.organizationUuid,
+            type: 'pdf',
+        });
+    }
+    if (content.canExportImages) {
+        can('export', 'Dashboard', {
+            organizationUuid: organization.organizationUuid,
+            type: 'images',
+        });
+    }
+    return { embedUser, dashboardUuid, organization, builder };
+};
+const dashboardAbilities = ({ embedUser, dashboardUuid, organization, builder, }) => {
+    const { content } = embedUser;
+    const { can } = builder;
+    can('view', 'Dashboard', {
+        dateZoom: content.canDateZoom ?? false,
+        organizationUuid: organization.organizationUuid,
+    });
+    return { embedUser, dashboardUuid, organization, builder };
+};
+const applyAbilities = (0, lodash_1.flow)(addBaseAbilities, exportAbilities, dashboardAbilities);
+function applyEmbeddedAbility(embedUser, dashboardUuid, organization, builder) {
+    applyAbilities({ embedUser, dashboardUuid, organization, builder });
+}
+//# sourceMappingURL=scopeAbility.js.map

package/dist/cjs/authorization/scopeAbility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAbility.js","sourceRoot":"","sources":["../../../src/authorization/scopeAbility.ts"],"names":[],"mappings":";;AAqFA,oDAOC;AA3FD,mCAA8B;AAe9B,MAAM,gBAAgB,GAA2B,CAAC,EAC9C,SAAS,EACT,aAAa,EACb,YAAY,EACZ,OAAO,GACV,EAAE,EAAE;IACD,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACxB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,aAAa;QACb,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,eAAe,GAA2B,CAAC,EAC7C,SAAS,EACT,aAAa,EACb,YAAY,EACZ,OAAO,GACV,EAAE,EAAE;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAExB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;YAC/C,IAAI,EAAE,KAAK;SACd,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;YAC/C,IAAI,EAAE,KAAK;SACd,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;YAC/C,IAAI,EAAE,QAAQ;SACjB,CAAC,CAAC;IACP,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAA2B,CAAC,EAChD,SAAS,EACT,aAAa,EACb,YAAY,EACZ,OAAO,GACV,EAAE,EAAE;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAExB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QACtC,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,IAAA,aAAI,EACvB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,CACrB,CAAC;AAEF,SAAgB,oBAAoB,CAChC,SAAyB,EACzB,aAAqB,EACrB,YAAmC,EACnC,OAAsC;IAEtC,cAAc,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/cjs/authorization/scopeAbility.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scopeAbility.test.d.ts.map

package/dist/cjs/authorization/scopeAbility.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAbility.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/scopeAbility.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authorization/scopeAbility.test.js

@@ -0,0 +1,259 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const ability_1 = require("@casl/ability");
+const scopeAbility_1 = require("./scopeAbility");
+const createEmbedJwt = (overrides) => {
+    const baseContent = {
+        type: 'dashboard',
+        projectUuid: 'project-uuid-1',
+        dashboardUuid: 'dashboard-uuid-1',
+        canExportCsv: false,
+        canExportImages: false,
+        canExportPagePdf: false,
+        canDateZoom: false,
+    };
+    const { content: contentOverrides, ...otherOverrides } = overrides || {};
+    return {
+        content: {
+            ...baseContent,
+            ...contentOverrides,
+        },
+        exp: Date.now() / 1000 + 3600, // 1 hour from now
+        ...otherOverrides,
+    };
+};
+const organization = {
+    organizationUuid: 'organization-uuid-1',
+    name: 'Organization 1',
+};
+const defineAbilityForEmbedUser = (embedUser, dashboardUuid) => {
+    const builder = new ability_1.AbilityBuilder(ability_1.Ability);
+    (0, scopeAbility_1.applyEmbeddedAbility)(embedUser, dashboardUuid, organization, builder);
+    return builder.build();
+};
+describe('Embedded dashboard abilities', () => {
+    const dashboardUuid = 'dashboard-uuid-1';
+    const projectUuid = 'project-uuid-1';
+    describe('Base abilities', () => {
+        it('should allow viewing the specified dashboard', () => {
+            const embedUser = createEmbedJwt();
+            const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+            expect(ability.can('view', (0, ability_1.subject)('Dashboard', {
+                dashboardUuid,
+                organizationUuid: organization.organizationUuid,
+            }))).toBe(true);
+        });
+        it('should not allow viewing private saved charts', () => {
+            const embedUser = createEmbedJwt();
+            const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+            expect(ability.can('view', (0, ability_1.subject)('SavedChart', {
+                projectUuid,
+                isPrivate: true,
+            }))).toBe(false);
+        });
+        it('should not allow viewing saved charts from different projects', () => {
+            const embedUser = createEmbedJwt();
+            const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+            expect(ability.can('view', (0, ability_1.subject)('SavedChart', {
+                projectUuid: 'different-project-uuid',
+                isPrivate: false,
+            }))).toBe(false);
+        });
+        it('should handle missing optional properties gracefully', () => {
+            const embedUser = {
+                content: {
+                    type: 'dashboard',
+                    projectUuid: 'project-uuid-1',
+                    dashboardUuid: 'dashboard-uuid-1',
+                },
+                exp: Date.now() / 1000 + 3600,
+            };
+            const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+            // Base abilities should still work
+            expect(ability.can('view', (0, ability_1.subject)('Dashboard', {
+                dashboardUuid,
+                organizationUuid: organization.organizationUuid,
+            }))).toBe(true);
+            // Export abilities should default to false
+            expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                type: 'csv',
+                organizationUuid: organization.organizationUuid,
+            }))).toBe(false);
+            expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                type: 'pdf',
+                organizationUuid: organization.organizationUuid,
+            }))).toBe(false);
+            expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                type: 'images',
+                organizationUuid: organization.organizationUuid,
+            }))).toBe(false);
+            // Date zoom should default to false
+            expect(ability.can('view', (0, ability_1.subject)('Dashboard', { canDateZoom: true }))).toBe(false);
+        });
+    });
+    describe('Export abilities', () => {
+        describe('CSV export', () => {
+            it('should allow CSV export when canExportCsv is true', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportCsv: true },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'csv',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+            });
+            it('should not allow CSV export when canExportCsv is false', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportCsv: false },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'csv',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+            });
+        });
+        describe('PDF export', () => {
+            it('should allow PDF export when canExportPagePdf is true', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportPagePdf: true },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'pdf',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+            });
+            it('should not allow PDF export when canExportPagePdf is false', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportPagePdf: false },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'pdf',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+            });
+        });
+        describe('Images export', () => {
+            it('should allow images export when canExportImages is true', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportImages: true },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'images',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+            });
+            it('should not allow images export when canExportImages is false', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canExportImages: false },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'images',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+            });
+        });
+        describe('Multiple export formats', () => {
+            it('should allow all export formats when all are enabled', () => {
+                const embedUser = createEmbedJwt({
+                    content: {
+                        canExportCsv: true,
+                        canExportPagePdf: true,
+                        canExportImages: true,
+                    },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'csv',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'pdf',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'images',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+            });
+            it('should allow only CSV and PDF when images is disabled', () => {
+                const embedUser = createEmbedJwt({
+                    content: {
+                        canExportCsv: true,
+                        canExportPagePdf: true,
+                        canExportImages: false,
+                    },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'csv',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'pdf',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'images',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+            });
+            it('should not allow any exports when all are disabled', () => {
+                const embedUser = createEmbedJwt({
+                    content: {
+                        canExportCsv: false,
+                        canExportPagePdf: false,
+                        canExportImages: false,
+                    },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'csv',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'pdf',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+                expect(ability.can('export', (0, ability_1.subject)('Dashboard', {
+                    type: 'images',
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(false);
+            });
+        });
+    });
+    describe('Dashboard abilities', () => {
+        describe('Date zoom', () => {
+            it('should allow date zoom when canDateZoom is true', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canDateZoom: true },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('view', (0, ability_1.subject)('Dashboard', {
+                    dateZoom: true,
+                    organizationUuid: organization.organizationUuid,
+                }))).toBe(true);
+            });
+            it('should not allow date zoom when canDateZoom is false', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canDateZoom: false },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('view', (0, ability_1.subject)('Dashboard', { dateZoom: true }))).toBe(false);
+            });
+            it('should handle undefined canDateZoom as false', () => {
+                const embedUser = createEmbedJwt({
+                    content: { canDateZoom: undefined },
+                });
+                const ability = defineAbilityForEmbedUser(embedUser, dashboardUuid);
+                expect(ability.can('view', (0, ability_1.subject)('Dashboard', { canDateZoom: true }))).toBe(false);
+            });
+        });
+    });
+});
+//# sourceMappingURL=scopeAbility.test.js.map

package/dist/cjs/authorization/scopeAbility.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeAbility.test.js","sourceRoot":"","sources":["../../../src/authorization/scopeAbility.test.ts"],"names":[],"mappings":";;AAAA,2CAAiE;AAEjE,iDAAsD;AAGtD,MAAM,cAAc,GAAG,CAAC,SAMvB,EAAkB,EAAE;IACjB,MAAM,WAAW,GAAG;QAChB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,gBAAgB;QAC7B,aAAa,EAAE,kBAAkB;QACjC,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,KAAK;QACtB,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE,KAAK;KACrB,CAAC;IAEF,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,GAAG,SAAS,IAAI,EAAE,CAAC;IAEzE,OAAO;QACH,OAAO,EAAE;YACL,GAAG,WAAW;YACd,GAAG,gBAAgB;SACO;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,kBAAkB;QACjD,GAAG,cAAc;KACpB,CAAC;AACN,CAAC,CAAC;AACF,MAAM,YAAY,GAAG;IACjB,gBAAgB,EAAE,qBAAqB;IACvC,IAAI,EAAE,gBAAgB;CACzB,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAC9B,SAAyB,EACzB,aAAqB,EACR,EAAE;IACf,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAA,mCAAoB,EAAC,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC1C,MAAM,aAAa,GAAG,kBAAkB,CAAC;IACzC,MAAM,WAAW,GAAG,gBAAgB,CAAC;IAErC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACpD,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAEpE,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE;gBACjB,aAAa;gBACb,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;aAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACrD,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAEpE,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,YAAY,EAAE;gBAClB,WAAW;gBACX,SAAS,EAAE,IAAI;aAClB,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACrE,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAEpE,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,YAAY,EAAE;gBAClB,WAAW,EAAE,wBAAwB;gBACrC,SAAS,EAAE,KAAK;aACnB,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC5D,MAAM,SAAS,GAAmB;gBAC9B,OAAO,EAAE;oBACL,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,gBAAgB;oBAC7B,aAAa,EAAE,kBAAkB;iBACpC;gBACD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;aAChC,CAAC;YACF,MAAM,OAAO,GAAG,yBAAyB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAEpE,mCAAmC;YACnC,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE;gBACjB,aAAa;gBACb,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;aAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEb,2CAA2C;YAC3C,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;gBACjB,IAAI,EAAE,KAAK;gBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;aAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;gBACjB,IAAI,EAAE,KAAK;gBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;aAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;aAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAEd,oCAAoC;YACpC,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC9C,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC9B,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;YACxB,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;gBACzD,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;iBAClC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;gBAC9D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE;iBACnC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;YACxB,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;gBAC7D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE;iBACtC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;gBAClE,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE;iBACvC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;YAC3B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;gBAC/D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;iBACrC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;gBACpE,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;iBACtC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACrC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;gBAC5D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE;wBACL,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,IAAI;wBACtB,eAAe,EAAE,IAAI;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;gBAC7D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE;wBACL,YAAY,EAAE,IAAI;wBAClB,gBAAgB,EAAE,IAAI;wBACtB,eAAe,EAAE,KAAK;qBACzB;iBACJ,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACb,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;gBAC1D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE;wBACL,YAAY,EAAE,KAAK;wBACnB,gBAAgB,EAAE,KAAK;wBACvB,eAAe,EAAE,KAAK;qBACzB;iBACJ,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,KAAK;oBACX,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,MAAM,CACF,OAAO,CAAC,GAAG,CACP,QAAQ,EACR,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACjC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;YACvB,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;gBACvD,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;iBACjC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE;oBACjB,QAAQ,EAAE,IAAI;oBACd,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;iBAClD,CAAC,CACL,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;gBAC5D,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;iBAClC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC3C,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;gBACpD,MAAM,SAAS,GAAG,cAAc,CAAC;oBAC7B,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;iBACtC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,yBAAyB,CACrC,SAAS,EACT,aAAa,CAChB,CAAC;gBAEF,MAAM,CACF,OAAO,CAAC,GAAG,CACP,MAAM,EACN,IAAA,iBAAO,EAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAC9C,CACJ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/cjs/authorization/types.d.ts

@@ -1,6 +1,6 @@
 import { type Ability, type ForcedSubject } from '@casl/ability';
 import { type OrganizationMemberProfile } from '../types/organizationMemberProfile';
-export type AbilityAction = 'manage' | 'update' | 'view' | 'create' | 'delete' | 'promote';
+export type AbilityAction = 'create' | 'delete' | 'export' | 'manage' | 'promote' | 'update' | 'view';
 interface Project {
     organizationUuid: string;
     projectUuid: string;
@@ -8,7 +8,7 @@ interface Project {
 interface Organization {
     organizationUuid: string;
 }
-export type CaslSubjectNames = 'Project' | 'Organization' | 'OrganizationMemberProfile' | 'Dashboard' | 'Space' | 'SavedChart' | 'InviteLink' | 'Job' | 'SqlRunner' | 'Analytics' | 'Explore' | 'UnderlyingData' | 'ExportCsv' | 'JobStatus' | 'PinnedItems' | 'Validation' | 'Group' | 'ChangeCsvResults' | 'ScheduledDeliveries' | 'DashboardComments' | 'CustomSql' | 'CompileProject' | 'SemanticViewer' | 'VirtualView' | 'Tags' | 'PersonalAccessToken' | 'MetricsTree' | 'SpotlightTableConfig' | 'ContentAsCode' | 'AiAgent' | 'AiAgentThread';
+export type CaslSubjectNames = 'AiAgent' | 'AiAgentThread' | 'Analytics' | 'ChangeCsvResults' | 'CompileProject' | 'ContentAsCode' | 'CustomSql' | 'Dashboard' | 'DashboardComments' | 'Explore' | 'ExportCsv' | 'Group' | 'InviteLink' | 'Job' | 'JobStatus' | 'MetricsTree' | 'Organization' | 'OrganizationMemberProfile' | 'PersonalAccessToken' | 'PinnedItems' | 'Project' | 'SavedChart' | 'ScheduledDeliveries' | 'SemanticViewer' | 'Space' | 'SpotlightTableConfig' | 'SqlRunner' | 'Tags' | 'UnderlyingData' | 'Validation' | 'VirtualView';
 export type Subject = CaslSubjectNames | Project | Organization | OrganizationMemberProfile | 'all';
 export type PossibleAbilities = [
     AbilityAction,

package/dist/cjs/authorization/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/authorization/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,MAAM,MAAM,aAAa,GACnB,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEhB,UAAU,OAAO;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,YAAY;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACtB,SAAS,GACT,cAAc,GACd,2BAA2B,GAC3B,WAAW,GACX,OAAO,GACP,YAAY,GACZ,YAAY,GACZ,KAAK,GACL,WAAW,GACX,WAAW,GACX,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,WAAW,GACX,aAAa,GACb,YAAY,GACZ,OAAO,GACP,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,WAAW,GACX,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,qBAAqB,GACrB,aAAa,GACb,sBAAsB,GACtB,eAAe,GACf,SAAS,GACT,eAAe,CAAC;AAEtB,MAAM,MAAM,OAAO,GACb,gBAAgB,GAChB,OAAO,GACP,YAAY,GACZ,yBAAyB,GACzB,KAAK,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG;IAC5B,aAAa;IACb,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/authorization/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,MAAM,MAAM,aAAa,GACnB,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,MAAM,CAAC;AAEb,UAAU,OAAO;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,YAAY;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACtB,SAAS,GACT,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,GACf,WAAW,GACX,WAAW,GACX,mBAAmB,GACnB,SAAS,GACT,WAAW,GACX,OAAO,GACP,YAAY,GACZ,KAAK,GACL,WAAW,GACX,aAAa,GACb,cAAc,GACd,2BAA2B,GAC3B,qBAAqB,GACrB,aAAa,GACb,SAAS,GACT,YAAY,GACZ,qBAAqB,GACrB,gBAAgB,GAChB,OAAO,GACP,sBAAsB,GACtB,WAAW,GACX,MAAM,GACN,gBAAgB,GAChB,YAAY,GACZ,aAAa,CAAC;AAEpB,MAAM,MAAM,OAAO,GACb,gBAAgB,GAChB,OAAO,GACP,YAAY,GACZ,yBAAyB,GACzB,KAAK,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG;IAC5B,aAAa;IACb,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/cjs/ee/AiAgent/index.d.ts

@@ -38,9 +38,9 @@ export declare const baseAgentSchema: z.ZodObject<{
     name: string;
     tags: string[] | null;
     description: string;
+    model: string;
     uuid: string;
     organizationUuid: string;
-    model: string;
     imageUrl: string | null;
     integrations: {
         type: "slack";
@@ -55,9 +55,9 @@ export declare const baseAgentSchema: z.ZodObject<{
     name: string;
     tags: string[] | null;
     description: string;
+    model: string;
     uuid: string;
     organizationUuid: string;
-    model: string;
     imageUrl: string | null;
     integrations: {
         type: "slack";

package/dist/cjs/ee/AiAgent/schemas/filters/dateFilters.d.ts

@@ -30,18 +30,18 @@ declare const dateFilterSchema: z.ZodUnion<[z.ZodObject<{
     }>;
 }, "strip", z.ZodTypeAny, {
     values: number[];
+    operator: FilterOperator.IN_THE_PAST | FilterOperator.NOT_IN_THE_PAST | FilterOperator.IN_THE_NEXT;
     settings: {
         completed: boolean;
         unitOfTime: UnitOfTime.days | UnitOfTime.weeks | UnitOfTime.months | UnitOfTime.quarters | UnitOfTime.years;
     };
-    operator: FilterOperator.IN_THE_PAST | FilterOperator.NOT_IN_THE_PAST | FilterOperator.IN_THE_NEXT;
 }, {
     values: number[];
+    operator: FilterOperator.IN_THE_PAST | FilterOperator.NOT_IN_THE_PAST | FilterOperator.IN_THE_NEXT;
     settings: {
         completed: boolean;
         unitOfTime: UnitOfTime.days | UnitOfTime.weeks | UnitOfTime.months | UnitOfTime.quarters | UnitOfTime.years;
     };
-    operator: FilterOperator.IN_THE_PAST | FilterOperator.NOT_IN_THE_PAST | FilterOperator.IN_THE_NEXT;
 }>, z.ZodObject<{
     operator: z.ZodUnion<[z.ZodLiteral<FilterOperator.IN_THE_CURRENT>, z.ZodLiteral<FilterOperator.NOT_IN_THE_CURRENT>]>;
     values: z.ZodArray<z.ZodLiteral<1>, "many">;
@@ -57,18 +57,18 @@ declare const dateFilterSchema: z.ZodUnion<[z.ZodObject<{
     }>;
 }, "strip", z.ZodTypeAny, {
     values: 1[];
+    operator: FilterOperator.IN_THE_CURRENT | FilterOperator.NOT_IN_THE_CURRENT;
     settings: {
         completed: false;
         unitOfTime: UnitOfTime.days | UnitOfTime.weeks | UnitOfTime.months | UnitOfTime.quarters | UnitOfTime.years;
     };
-    operator: FilterOperator.IN_THE_CURRENT | FilterOperator.NOT_IN_THE_CURRENT;
 }, {
     values: 1[];
+    operator: FilterOperator.IN_THE_CURRENT | FilterOperator.NOT_IN_THE_CURRENT;
     settings: {
         completed: false;
         unitOfTime: UnitOfTime.days | UnitOfTime.weeks | UnitOfTime.months | UnitOfTime.quarters | UnitOfTime.years;
     };
-    operator: FilterOperator.IN_THE_CURRENT | FilterOperator.NOT_IN_THE_CURRENT;
 }>, z.ZodObject<{
     operator: z.ZodUnion<[z.ZodLiteral<FilterOperator.LESS_THAN>, z.ZodLiteral<FilterOperator.LESS_THAN_OR_EQUAL>, z.ZodLiteral<FilterOperator.GREATER_THAN>, z.ZodLiteral<FilterOperator.GREATER_THAN_OR_EQUAL>]>;
     values: z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodString]>, "many">;