@lightdash/common 0.1936.2 → 0.1937.1

package/dist/cjs/authorization/index.d.ts

@@ -1,18 +1,22 @@
 import { AbilityBuilder } from '@casl/ability';
 import { type ProjectMemberProfile } from '../types/projectMemberProfile';
+import { type Role, type RoleWithScopes } from '../types/roles';
 import { type LightdashUser } from '../types/user';
 import { type OrganizationMemberAbilitiesArgs } from './organizationMemberAbility';
 import { type MemberAbility } from './types';
 type UserAbilityBuilderArgs = {
-    user: Pick<LightdashUser, 'role' | 'organizationUuid' | 'userUuid'>;
-    projectProfiles: Pick<ProjectMemberProfile, 'projectUuid' | 'role' | 'userUuid'>[];
+    user: Pick<LightdashUser, 'role' | 'organizationUuid' | 'userUuid' | 'roleUuid'>;
+    projectProfiles: Pick<ProjectMemberProfile, 'projectUuid' | 'role' | 'userUuid' | 'roleUuid'>[];
     permissionsConfig: OrganizationMemberAbilitiesArgs['permissionsConfig'];
+    customRoleScopes?: Record<Role['roleUuid'], RoleWithScopes['scopes']>;
+    customRolesEnabled?: boolean;
+    isEnterprise?: boolean;
 };
 export * from './buildAccountHelpers';
 export * from './jwtAbility';
 export * from './parseAccount';
 export * from './serviceAccountAbility';
 export declare const JWT_HEADER_NAME = "lightdash-embed-token";
-export declare const getUserAbilityBuilder: ({ user, projectProfiles, permissionsConfig, }: UserAbilityBuilderArgs) => AbilityBuilder<MemberAbility>;
-export declare const defineUserAbility: (user: Pick<LightdashUser, "role" | "organizationUuid" | "userUuid">, projectProfiles: Pick<ProjectMemberProfile, "projectUuid" | "role" | "userUuid">[]) => MemberAbility;
+export declare const getUserAbilityBuilder: ({ user, projectProfiles, permissionsConfig, customRoleScopes, customRolesEnabled, isEnterprise, }: UserAbilityBuilderArgs) => AbilityBuilder<MemberAbility>;
+export declare const defineUserAbility: (user: Pick<LightdashUser, "role" | "organizationUuid" | "userUuid" | "roleUuid">, projectProfiles: Pick<ProjectMemberProfile, "projectUuid" | "role" | "userUuid" | "roleUuid">[], customRoleScopes?: Record<Role["roleUuid"], RoleWithScopes["scopes"]>) => MemberAbility;
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACpE,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,kDAI/B,sBAAsB,kCAoBxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,mBAClD,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,KACJ,aAYF,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,sGAO/B,sBAAsB,kCAgDxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,mBACgB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,qBACgB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}

package/dist/cjs/authorization/index.js

@@ -3,16 +3,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.defineUserAbility = exports.getUserAbilityBuilder = exports.JWT_HEADER_NAME = void 0;
 const tslib_1 = require("tslib");
 const ability_1 = require("@casl/ability");
+const errors_1 = require("../types/errors");
 const organizationMemberAbility_1 = tslib_1.__importDefault(require("./organizationMemberAbility"));
 const projectMemberAbility_1 = require("./projectMemberAbility");
+const scopeAbilityBuilder_1 = require("./scopeAbilityBuilder");
 tslib_1.__exportStar(require("./buildAccountHelpers"), exports);
 tslib_1.__exportStar(require("./jwtAbility"), exports);
 tslib_1.__exportStar(require("./parseAccount"), exports);
 tslib_1.__exportStar(require("./serviceAccountAbility"), exports);
 exports.JWT_HEADER_NAME = 'lightdash-embed-token';
-const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, }) => {
+const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, customRoleScopes, customRolesEnabled, isEnterprise, }) => {
     const builder = new ability_1.AbilityBuilder(ability_1.Ability);
     if (user.role && user.organizationUuid) {
+        // TODO custom roles at organization level are not supported yet
         (0, organizationMemberAbility_1.default)({
             role: user.role,
             member: {
@@ -23,14 +26,33 @@ const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, }) =>
             permissionsConfig,
         });
         projectProfiles.forEach((projectProfile) => {
-            projectMemberAbility_1.projectMemberAbilities[projectProfile.role](projectProfile, builder);
+            if (projectProfile.roleUuid && customRolesEnabled) {
+                const scopes = customRoleScopes?.[projectProfile.roleUuid];
+                if (!scopes) {
+                    throw new errors_1.NotFoundError(`Custom role with uuid ${user.roleUuid} was not found`);
+                }
+                if (!user.organizationUuid) {
+                    throw new errors_1.NotFoundError(`Organization with uuid ${user.organizationUuid} was not found`);
+                }
+                (0, scopeAbilityBuilder_1.buildAbilityFromScopes)({
+                    projectUuid: projectProfile.projectUuid,
+                    userUuid: user.userUuid,
+                    scopes,
+                    isEnterprise,
+                    organizationRole: user.role,
+                    permissionsConfig,
+                }, builder);
+            }
+            else {
+                projectMemberAbility_1.projectMemberAbilities[projectProfile.role](projectProfile, builder);
+            }
         });
     }
     return builder;
 };
 exports.getUserAbilityBuilder = getUserAbilityBuilder;
 // Defines user ability for test purposes
-const defineUserAbility = (user, projectProfiles) => {
+const defineUserAbility = (user, projectProfiles, customRoleScopes) => {
     const builder = (0, exports.getUserAbilityBuilder)({
         user,
         projectProfiles,
@@ -40,6 +62,7 @@ const defineUserAbility = (user, projectProfiles) => {
                 allowedOrgRoles: [],
             },
         },
+        customRoleScopes,
     });
     return builder.build();
 };

package/dist/cjs/authorization/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AAGxD,oGAEqC;AACrC,iEAAgE;AAYhE,gEAAsC;AACtC,uDAA6B;AAC7B,yDAA+B;AAC/B,kEAAwC;AAE3B,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAEhD,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,GACI,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,IAAA,mCAAgC,EAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAxBW,QAAA,qBAAqB,yBAwBhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAAmE,EACnE,eAGG,EACU,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;KACJ,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAlBW,QAAA,iBAAiB,qBAkB5B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AACxD,4CAAgD;AAIhD,oGAEqC;AACrC,iEAAgE;AAChE,+DAA+D;AAkB/D,gEAAsC;AACtC,uDAA6B;AAC7B,yDAA+B;AAC/B,kEAAwC;AAE3B,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAEhD,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,gEAAgE;QAChE,IAAA,mCAAgC,EAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QAEH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,IAAI,cAAc,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,MAAM,IAAI,sBAAa,CACnB,yBAAyB,IAAI,CAAC,QAAQ,gBAAgB,CACzD,CAAC;gBACN,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,sBAAa,CACnB,0BAA0B,IAAI,CAAC,gBAAgB,gBAAgB,CAClE,CAAC;gBACN,CAAC;gBACD,IAAA,4CAAsB,EAClB;oBACI,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,YAAY;oBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;oBAC3B,iBAAiB;iBACpB,EACD,OAAO,CACV,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAvDW,QAAA,qBAAqB,yBAuDhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAGC,EACD,eAGG,EACH,gBAAqE,EACxD,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;QACD,gBAAgB;KACnB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAvBW,QAAA,iBAAiB,qBAuB5B"}

package/dist/cjs/authorization/index.mock.d.ts

@@ -15,6 +15,7 @@ export declare const adminOrgProfile: {
     firstName: string;
     lastName: string;
     email: string;
+    roleUuid: string | undefined;
     isActive: boolean;
     isInviteExpired?: boolean;
     isPending?: boolean;
@@ -23,6 +24,7 @@ export declare const adminProjectProfile: {
     role: ProjectMemberRole;
     projectUuid: string;
     userUuid: string;
+    roleUuid: string | undefined;
     email: string;
     firstName: string;
     lastName: string;

package/dist/cjs/authorization/index.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,sBAAsB,EACtB,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,eAAO,MAAM,cAAc;;CAE1B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,yBAUxB,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,oBAO5B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;CAI3B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;CAI/B,CAAC;AAEF,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}
+{"version":3,"file":"index.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,sBAAsB,EACtB,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,eAAO,MAAM,cAAc;;CAE1B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,yBAWxB,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,oBAQ5B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAI3B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;CAI/B,CAAC;AAEF,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}

package/dist/cjs/authorization/index.mock.js

@@ -9,6 +9,7 @@ exports.userWithoutOrg = {
 exports.orgProfile = {
     userUuid: 'user-uuid-1234',
     role: organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
+    roleUuid: undefined,
     email: '',
     firstName: '',
     lastName: '',
@@ -21,6 +22,7 @@ exports.projectProfile = {
     userUuid: 'user-uuid-1234',
     role: projectMemberRole_1.ProjectMemberRole.VIEWER,
     projectUuid: 'project-uuid-view',
+    roleUuid: undefined,
     email: '',
     firstName: '',
     lastName: '',

package/dist/cjs/authorization/index.mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.mock.js","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":";;;AAAA,kFAG4C;AAE5C,kEAA+D;AAElD,QAAA,cAAc,GAAG;IAC1B,QAAQ,EAAE,gBAAgB;CAC7B,CAAC;AACW,QAAA,UAAU,GAA8B;IACjD,QAAQ,EAAE,gBAAgB;IAC1B,IAAI,EAAE,kDAAsB,CAAC,MAAM;IACnC,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,wBAAwB;IAC1C,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI,IAAI,EAAE;IACzB,aAAa,EAAE,IAAI,IAAI,EAAE;CAC5B,CAAC;AACW,QAAA,cAAc,GAAyB;IAChD,QAAQ,EAAE,gBAAgB;IAC1B,IAAI,EAAE,qCAAiB,CAAC,MAAM;IAC9B,WAAW,EAAE,mBAAmB;IAChC,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACf,CAAC;AAEW,QAAA,eAAe,GAAG;IAC3B,GAAG,kBAAU;IACb,IAAI,EAAE,kDAAsB,CAAC,KAAK;IAClC,gBAAgB,EAAE,yBAAyB;CAC9C,CAAC;AAEW,QAAA,mBAAmB,GAAG;IAC/B,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,KAAK;IAC7B,WAAW,EAAE,oBAAoB;CACpC,CAAC;AAEW,QAAA,UAAU,GAAG;IACtB,gBAAgB,EAAE,kBAAU,CAAC,gBAAgB;IAC7C,WAAW,EAAE,sBAAc,CAAC,WAAW;IACvC,SAAS,EAAE,KAAK;CACnB,CAAC"}
+{"version":3,"file":"index.mock.js","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":";;;AAAA,kFAG4C;AAE5C,kEAA+D;AAElD,QAAA,cAAc,GAAG;IAC1B,QAAQ,EAAE,gBAAgB;CAC7B,CAAC;AACW,QAAA,UAAU,GAA8B;IACjD,QAAQ,EAAE,gBAAgB;IAC1B,IAAI,EAAE,kDAAsB,CAAC,MAAM;IACnC,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;IACZ,gBAAgB,EAAE,wBAAwB;IAC1C,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI,IAAI,EAAE;IACzB,aAAa,EAAE,IAAI,IAAI,EAAE;CAC5B,CAAC;AACW,QAAA,cAAc,GAAyB;IAChD,QAAQ,EAAE,gBAAgB;IAC1B,IAAI,EAAE,qCAAiB,CAAC,MAAM;IAC9B,WAAW,EAAE,mBAAmB;IAChC,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACf,CAAC;AAEW,QAAA,eAAe,GAAG;IAC3B,GAAG,kBAAU;IACb,IAAI,EAAE,kDAAsB,CAAC,KAAK;IAClC,gBAAgB,EAAE,yBAAyB;CAC9C,CAAC;AAEW,QAAA,mBAAmB,GAAG;IAC/B,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,KAAK;IAC7B,WAAW,EAAE,oBAAoB;CACpC,CAAC;AAEW,QAAA,UAAU,GAAG;IACtB,gBAAgB,EAAE,kBAAU,CAAC,gBAAgB;IAC7C,WAAW,EAAE,sBAAc,CAAC,WAAW;IACvC,SAAS,EAAE,KAAK;CACnB,CAAC"}

package/dist/cjs/authorization/organizationMemberAbility.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,mBAAmB,EAAE,yBAUjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,+BAA+B,EAAE,yBAG7C,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,sBAAsB,EAAE,yBAGpC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,yBAGhC,CAAC"}
+{"version":3,"file":"organizationMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,mBAAmB,EAAE,yBAWjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,+BAA+B,EAAE,yBAG7C,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,sBAAsB,EAAE,yBAGpC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,yBAGhC,CAAC"}

package/dist/cjs/authorization/organizationMemberAbility.mock.js

@@ -6,6 +6,7 @@ exports.ORGANIZATION_MEMBER = {
     userUuid: 'b264d83a-9000-426a-85ec-3f9c20f368ce', // when insert to space_user_access table, a dummy value like '123' will fail uuid format check
     organizationUuid: '456',
     role: organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
+    roleUuid: undefined,
     firstName: 'jane',
     lastName: 'jackson',
     email: 'jane@gmail.com',

package/dist/cjs/authorization/organizationMemberAbility.mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationMemberAbility.mock.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":";;;AAAA,kFAG4C;AAE/B,QAAA,mBAAmB,GAA8B;IAC1D,QAAQ,EAAE,sCAAsC,EAAE,+FAA+F;IACjJ,gBAAgB,EAAE,KAAK;IACvB,IAAI,EAAE,kDAAsB,CAAC,MAAM;IACnC,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI,IAAI,EAAE;IACzB,aAAa,EAAE,IAAI,IAAI,EAAE;CAC5B,CAAC;AAEW,QAAA,mBAAmB,GAA8B;IAC1D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,MAAM;CACtC,CAAC;AACW,QAAA,+BAA+B,GAA8B;IACtE,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,kBAAkB;CAClD,CAAC;AACW,QAAA,mBAAmB,GAA8B;IAC1D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,MAAM;CACtC,CAAC;AACW,QAAA,sBAAsB,GAA8B;IAC7D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,SAAS;CACzC,CAAC;AAEW,QAAA,kBAAkB,GAA8B;IACzD,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,KAAK;CACrC,CAAC"}
+{"version":3,"file":"organizationMemberAbility.mock.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":";;;AAAA,kFAG4C;AAE/B,QAAA,mBAAmB,GAA8B;IAC1D,QAAQ,EAAE,sCAAsC,EAAE,+FAA+F;IACjJ,gBAAgB,EAAE,KAAK;IACvB,IAAI,EAAE,kDAAsB,CAAC,MAAM;IACnC,QAAQ,EAAE,SAAS;IACnB,SAAS,EAAE,MAAM;IACjB,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI,IAAI,EAAE;IACzB,aAAa,EAAE,IAAI,IAAI,EAAE;CAC5B,CAAC;AAEW,QAAA,mBAAmB,GAA8B;IAC1D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,MAAM;CACtC,CAAC;AACW,QAAA,+BAA+B,GAA8B;IACtE,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,kBAAkB;CAClD,CAAC;AACW,QAAA,mBAAmB,GAA8B;IAC1D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,MAAM;CACtC,CAAC;AACW,QAAA,sBAAsB,GAA8B;IAC7D,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,SAAS;CACzC,CAAC;AAEW,QAAA,kBAAkB,GAA8B;IACzD,GAAG,2BAAmB;IACtB,IAAI,EAAE,kDAAsB,CAAC,KAAK;CACrC,CAAC"}

package/dist/cjs/authorization/parseScopes.d.ts

@@ -1,6 +1,7 @@
-import { type ScopeName } from '../types/scopes';
+import { type ScopeModifer, type ScopeName } from '../types/scopes';
 import { type AbilityAction, type CaslSubjectNames } from './types';
-export declare const parseScope: (scope: string) => [AbilityAction, CaslSubjectNames];
+export declare const parseScope: (scope: string) => [AbilityAction, CaslSubjectNames, ScopeModifer | undefined];
+export declare const normalizeScopeName: (scope: string) => ScopeName;
 export declare const parseScopes: ({ scopes, isEnterprise, }: {
     scopes: string[];
     isEnterprise: boolean;

package/dist/cjs/authorization/parseScopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parseScopes.d.ts","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEpE,eAAO,MAAM,UAAU,UACZ,MAAM,KACd,CAAC,aAAa,EAAE,gBAAgB,CAKlC,CAAC;AAEF,eAAO,MAAM,WAAW,8BAGrB;IACC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACzB,KAAG,GAAG,CAAC,SAAS,CAiBhB,CAAC"}
+{"version":3,"file":"parseScopes.d.ts","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEpE,eAAO,MAAM,UAAU,UACZ,MAAM,KACd,CAAC,aAAa,EAAE,gBAAgB,EAAE,YAAY,GAAG,SAAS,CAU5D,CAAC;AAEF,eAAO,MAAM,kBAAkB,UAAW,MAAM,KAAG,SAGlD,CAAC;AAEF,eAAO,MAAM,WAAW,8BAGrB;IACC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACzB,KAAG,GAAG,CAAC,SAAS,CAiBhB,CAAC"}

package/dist/cjs/authorization/parseScopes.js

@@ -1,23 +1,32 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseScopes = exports.parseScope = void 0;
+exports.parseScopes = exports.normalizeScopeName = exports.parseScope = void 0;
 const lodash_1 = require("lodash");
-const errors_1 = require("../types/errors");
 const scopes_1 = require("./scopes");
 const parseScope = (scope) => {
-    const [action, subjectPart] = scope.split(':');
+    const [action, predicate] = scope.split(':');
+    const [subjectPart, modifier] = predicate.split('@');
     const subject = (0, lodash_1.upperFirst)((0, lodash_1.camelCase)(subjectPart));
-    return [action, subject];
+    return [
+        action,
+        subject,
+        modifier,
+    ];
 };
 exports.parseScope = parseScope;
+const normalizeScopeName = (scope) => {
+    const [action, subject, modifier] = (0, exports.parseScope)(scope);
+    return `${action}:${subject}${modifier ? `@${modifier}` : ''}`;
+};
+exports.normalizeScopeName = normalizeScopeName;
 const parseScopes = ({ scopes, isEnterprise, }) => {
     const scopeMap = (0, scopes_1.getAllScopeMap)({ isEnterprise });
-    const filtered = scopes
-        .map((scope) => (0, exports.parseScope)(scope).join(':'))
-        .filter((scope) => {
+    const filtered = scopes.map(exports.normalizeScopeName).filter((scope) => {
         const foundScope = scopeMap[scope];
         if (!foundScope) {
-            throw new errors_1.ParameterError(`Invalid scope: ${scope}. Please check the scope name and try again.`);
+            // eslint-disable-next-line no-console
+            console.warn(`Invalid scope: ${scope}. Please check the scope name and try again.`);
+            return false;
         }
         return true;
     });

package/dist/cjs/authorization/parseScopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"parseScopes.js","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":";;;AAAA,mCAA+C;AAC/C,4CAAiD;AAEjD,qCAA0C;AAGnC,MAAM,UAAU,GAAG,CACtB,KAAa,EACoB,EAAE;IACnC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,IAAA,kBAAS,EAAC,WAAW,CAAC,CAAC,CAAC;IAEnD,OAAO,CAAC,MAAuB,EAAE,OAA2B,CAAC,CAAC;AAClE,CAAC,CAAC;AAPW,QAAA,UAAU,cAOrB;AAEK,MAAM,WAAW,GAAG,CAAC,EACxB,MAAM,EACN,YAAY,GAIf,EAAkB,EAAE;IACjB,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM;SAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAc,CAAC;SACxD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACd,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,uBAAc,CACpB,kBAAkB,KAAK,8CAA8C,CACxE,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IAEP,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC,CAAC;AAvBW,QAAA,WAAW,eAuBtB"}
+{"version":3,"file":"parseScopes.js","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":";;;AAAA,mCAA+C;AAE/C,qCAA0C;AAGnC,MAAM,UAAU,GAAG,CACtB,KAAa,EAC8C,EAAE;IAC7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAA,mBAAU,EAAC,IAAA,kBAAS,EAAC,WAAW,CAAC,CAAC,CAAC;IAEnD,OAAO;QACH,MAAuB;QACvB,OAA2B;QAC3B,QAAwB;KAC3B,CAAC;AACN,CAAC,CAAC;AAZW,QAAA,UAAU,cAYrB;AAEK,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAa,EAAE;IAC3D,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC;IACtD,OAAO,GAAG,MAAM,IAAI,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAe,CAAC;AAChF,CAAC,CAAC;AAHW,QAAA,kBAAkB,sBAG7B;AAEK,MAAM,WAAW,GAAG,CAAC,EACxB,MAAM,EACN,YAAY,GAIf,EAAkB,EAAE;IACjB,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,0BAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAkB,CAAC,CAAC;QAEhD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACR,kBAAkB,KAAK,8CAA8C,CACxE,CAAC;YACF,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC,CAAC;AAvBW,QAAA,WAAW,eAuBtB"}

package/dist/cjs/authorization/parseScopes.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const errors_1 = require("../types/errors");
 const parseScopes_1 = require("./parseScopes");
 describe('parseScopes', () => {
     describe('with valid scopes', () => {
@@ -54,25 +53,21 @@ describe('parseScopes', () => {
         });
     });
     describe('with invalid scopes', () => {
-        it('should throw ParameterError for invalid scope name', () => {
-            expect(() => (0, parseScopes_1.parseScopes)({
+        it('should filter out invalid scope names', () => {
+            expect((0, parseScopes_1.parseScopes)({
                 scopes: ['view:dashboard', 'invalid:scope'],
                 isEnterprise: false,
-            })).toThrow(errors_1.ParameterError);
-            expect(() => (0, parseScopes_1.parseScopes)({
-                scopes: ['view:dashboard', 'invalid:scope'],
-                isEnterprise: false,
-            })).toThrow('Invalid scope: invalid:Scope. Please check the scope name and try again.');
+            })).toEqual(new Set(['view:Dashboard']));
         });
-        it('should throw ParameterError for enterprise scope when not enterprise', () => {
-            expect(() => (0, parseScopes_1.parseScopes)({
+        it('should filter out enterprise scopes when not enterprise', () => {
+            expect((0, parseScopes_1.parseScopes)({
                 scopes: ['view:dashboard', 'view:ai_agent'],
                 isEnterprise: false,
-            })).toThrow(errors_1.ParameterError);
-            expect(() => (0, parseScopes_1.parseScopes)({
+            })).toEqual(new Set(['view:Dashboard']));
+            expect((0, parseScopes_1.parseScopes)({
                 scopes: ['view:dashboard', 'view:ai_agent'],
-                isEnterprise: false,
-            })).toThrow('Invalid scope: view:AiAgent. Please check the scope name and try again.');
+                isEnterprise: true,
+            })).toEqual(new Set(['view:Dashboard', 'view:AiAgent']));
         });
     });
     describe('scope parsing logic', () => {

package/dist/cjs/authorization/parseScopes.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"parseScopes.test.js","sourceRoot":"","sources":["../../../src/authorization/parseScopes.test.ts"],"names":[],"mappings":";;AAAA,4CAAiD;AACjD,+CAA4C;AAE5C,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IACzB,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;gBAC9C,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAC/D,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;gBAC5C,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE;oBACJ,sBAAsB;oBACtB,8BAA8B;iBACjC;gBACD,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,cAAc,CAAC;gBACxB,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,EAAE;gBACV,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC1D,MAAM,CAAC,GAAG,EAAE,CACR,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CAAC,uBAAc,CAAC,CAAC;YAE1B,MAAM,CAAC,GAAG,EAAE,CACR,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CACL,0EAA0E,CAC7E,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC5E,MAAM,CAAC,GAAG,EAAE,CACR,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CAAC,uBAAc,CAAC,CAAC;YAE1B,MAAM,CAAC,GAAG,EAAE,CACR,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CACL,yEAAyE,CAC5E,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC3D,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE;oBACJ,sBAAsB;oBACtB,8BAA8B;oBAC9B,sBAAsB;iBACzB;gBACD,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YAC/C,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;gBAC/C,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,sBAAsB,CAAC;gBAChC,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
+{"version":3,"file":"parseScopes.test.js","sourceRoot":"","sources":["../../../src/authorization/parseScopes.test.ts"],"names":[],"mappings":";;AAAA,+CAA4C;AAE5C,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IACzB,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;gBAC9C,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAC/D,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;gBAC5C,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE;oBACJ,sBAAsB;oBACtB,8BAA8B;iBACjC;gBACD,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,cAAc,CAAC;gBACxB,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,EAAE;gBACV,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC7C,MAAM,CACF,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAC/D,MAAM,CACF,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,KAAK;aACtB,CAAC,CACL,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAEvC,MAAM,CACF,IAAA,yBAAW,EAAC;gBACR,MAAM,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;gBAC3C,YAAY,EAAE,IAAI;aACrB,CAAC,CACL,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC3D,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE;oBACJ,sBAAsB;oBACtB,8BAA8B;oBAC9B,sBAAsB;iBACzB;gBACD,YAAY,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YAC/C,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;gBAC/C,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC;gBACvB,MAAM,EAAE,CAAC,sBAAsB,CAAC;gBAChC,YAAY,EAAE,KAAK;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/cjs/authorization/projectMemberAbility.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,eAAO,MAAM,cAAc,EAAE,oBAO5B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,oBAGxC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,oBAG5B,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,oBAG/B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC"}
+{"version":3,"file":"projectMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,eAAO,MAAM,cAAc,EAAE,oBAQ5B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,oBAGxC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,oBAG5B,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,oBAG/B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC"}

package/dist/cjs/authorization/projectMemberAbility.mock.js

@@ -6,6 +6,7 @@ exports.PROJECT_VIEWER = {
     userUuid: 'user-uuid-1234',
     projectUuid: 'project-uuid-1234',
     role: projectMemberRole_1.ProjectMemberRole.VIEWER,
+    roleUuid: undefined,
     email: '',
     firstName: '',
     lastName: '',

package/dist/cjs/authorization/projectMemberAbility.mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"projectMemberAbility.mock.js","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":";;;AACA,kEAA+D;AAElD,QAAA,cAAc,GAAyB;IAChD,QAAQ,EAAE,gBAAgB;IAC1B,WAAW,EAAE,mBAAmB;IAChC,IAAI,EAAE,qCAAiB,CAAC,MAAM;IAC9B,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACf,CAAC;AAEW,QAAA,0BAA0B,GAAyB;IAC5D,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,kBAAkB;CAC7C,CAAC;AAEW,QAAA,cAAc,GAAyB;IAChD,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,MAAM;CACjC,CAAC;AACW,QAAA,iBAAiB,GAAyB;IACnD,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,SAAS;CACpC,CAAC;AACW,QAAA,aAAa,GAAyB;IAC/C,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,KAAK;CAChC,CAAC"}
+{"version":3,"file":"projectMemberAbility.mock.js","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":";;;AACA,kEAA+D;AAElD,QAAA,cAAc,GAAyB;IAChD,QAAQ,EAAE,gBAAgB;IAC1B,WAAW,EAAE,mBAAmB;IAChC,IAAI,EAAE,qCAAiB,CAAC,MAAM;IAC9B,QAAQ,EAAE,SAAS;IACnB,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACf,CAAC;AAEW,QAAA,0BAA0B,GAAyB;IAC5D,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,kBAAkB;CAC7C,CAAC;AAEW,QAAA,cAAc,GAAyB;IAChD,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,MAAM;CACjC,CAAC;AACW,QAAA,iBAAiB,GAAyB;IACnD,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,SAAS;CACpC,CAAC;AACW,QAAA,aAAa,GAAyB;IAC/C,GAAG,sBAAc;IACjB,IAAI,EAAE,qCAAiB,CAAC,KAAK;CAChC,CAAC"}

package/dist/cjs/authorization/roleToScopeMapping.d.ts

@@ -0,0 +1,19 @@
+import { ProjectMemberRole } from '../types/projectMemberRole';
+/**
+ * Maps project member roles to their equivalent scopes based on projectMemberAbility.ts analysis
+ * Each role inherits permissions from the roles below it in the hierarchy
+ */
+export declare const PROJECT_ROLE_TO_SCOPES_MAP: Record<ProjectMemberRole, string[]>;
+/**
+ * Gets the scopes required for a specific project member role
+ */
+export declare const getScopesForRole: (role: ProjectMemberRole) => string[];
+/**
+ * Gets only the non-enterprise scopes for a role (filters out enterprise-only features)
+ */
+export declare const getNonEnterpriseScopesForRole: (role: ProjectMemberRole) => string[];
+/**
+ * Gets the incremental scopes added by a specific role (not inherited from lower roles)
+ */
+export declare const getIncrementalScopesForRole: (role: ProjectMemberRole) => string[];
+//# sourceMappingURL=roleToScopeMapping.d.ts.map

package/dist/cjs/authorization/roleToScopeMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleToScopeMapping.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA0G/D;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAoBnE,CAAC;AAET;;GAEG;AACH,eAAO,MAAM,gBAAgB,SAAU,iBAAiB,KAAG,MAAM,EAEhE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,SAChC,iBAAiB,KACxB,MAAM,EAkBR,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,SAC9B,iBAAiB,KACxB,MAAM,EAqBR,CAAC"}

package/dist/cjs/authorization/roleToScopeMapping.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIncrementalScopesForRole = exports.getNonEnterpriseScopesForRole = exports.getScopesForRole = exports.PROJECT_ROLE_TO_SCOPES_MAP = void 0;
+const projectMemberRole_1 = require("../types/projectMemberRole");
+/**
+ * Utility functions to convert project member roles to equivalent scope sets
+ * for testing migration compatibility between role-based and scope-based authorization
+ */
+/**
+ * Base scopes for each role level (without inheritance)
+ */
+const BASE_ROLE_SCOPES = {
+    [projectMemberRole_1.ProjectMemberRole.VIEWER]: [
+        // Basic viewing permissions
+        'view:Dashboard',
+        'view:SavedChart',
+        'view:Space',
+        'view:Project',
+        'view:PinnedItems',
+        'view:DashboardComments',
+        'view:Tags',
+        'view:Job', // For viewing job status created by user
+        'manage:ExportCsv',
+        // Enterprise scopes (when available)
+        'view:MetricsTree',
+        'view:SpotlightTableConfig',
+        'view:AiAgentThread',
+    ],
+    [projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER]: [
+        // Additional interactive viewer permissions
+        'view:UnderlyingData',
+        'view:SemanticViewer',
+        'manage:Explore',
+        'manage:ChangeCsvResults',
+        'create:ScheduledDeliveries',
+        'create:DashboardComments',
+        'create:Job',
+        // Space-level content management (requires space admin/editor role)
+        'manage:Dashboard', // Via space access
+        'manage:SavedChart', // Via space access
+        'manage:Space', // Via space access (admin role)
+        // Enterprise scopes
+        'view:AiAgent',
+        'create:AiAgentThread',
+    ],
+    [projectMemberRole_1.ProjectMemberRole.EDITOR]: [
+        // Editor-specific permissions
+        'create:Space',
+        'manage:Space', // For non-private spaces (requires manage:Project)
+        'manage:Job',
+        'manage:PinnedItems',
+        'manage:ScheduledDeliveries',
+        'manage:DashboardComments',
+        'manage:Tags',
+        // Enterprise scopes
+        'manage:MetricsTree',
+        'manage:AiAgentThread', // User's own threads
+    ],
+    [projectMemberRole_1.ProjectMemberRole.DEVELOPER]: [
+        // Developer-specific permissions
+        'manage:VirtualView',
+        'manage:CustomSql',
+        'manage:SqlRunner',
+        'manage:Validation',
+        'manage:CompileProject',
+        'create:Project', // Preview projects
+        'delete:Project', // Preview projects created by user
+        'update:Project',
+        'view:JobStatus', // All jobs in project
+        // Enterprise scopes
+        'manage:SpotlightTableConfig',
+        'manage:ContentAsCode',
+        'manage:AiAgent',
+        'manage:AiAgentThread', // User's own threads
+    ],
+    [projectMemberRole_1.ProjectMemberRole.ADMIN]: [
+        // Admin-specific permissions
+        'delete:Project', // Any project
+        'view:Analytics',
+        'manage:Dashboard', // All dashboards
+        'manage:Project', // Required for managing non-private spaces
+        'manage:SavedChart', // All saved charts
+        'view:AiAgentThread', // All threads in project
+        'manage:AiAgentThread', // All threads in project
+    ],
+};
+/**
+ * Role hierarchy for inheritance
+ */
+const ROLE_HIERARCHY = [
+    projectMemberRole_1.ProjectMemberRole.VIEWER,
+    projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER,
+    projectMemberRole_1.ProjectMemberRole.EDITOR,
+    projectMemberRole_1.ProjectMemberRole.DEVELOPER,
+    projectMemberRole_1.ProjectMemberRole.ADMIN,
+];
+/**
+ * Maps project member roles to their equivalent scopes based on projectMemberAbility.ts analysis
+ * Each role inherits permissions from the roles below it in the hierarchy
+ */
+exports.PROJECT_ROLE_TO_SCOPES_MAP = (() => {
+    const result = {};
+    for (const role of ROLE_HIERARCHY) {
+        const roleIndex = ROLE_HIERARCHY.indexOf(role);
+        const inheritedScopes = new Set();
+        // Add scopes from all lower-level roles
+        for (let i = 0; i <= roleIndex; i += 1) {
+            const currentRole = ROLE_HIERARCHY[i];
+            BASE_ROLE_SCOPES[currentRole].forEach((scope) => inheritedScopes.add(scope));
+        }
+        result[role] = Array.from(inheritedScopes);
+    }
+    return result;
+})();
+/**
+ * Gets the scopes required for a specific project member role
+ */
+const getScopesForRole = (role) => [
+    ...exports.PROJECT_ROLE_TO_SCOPES_MAP[role],
+];
+exports.getScopesForRole = getScopesForRole;
+/**
+ * Gets only the non-enterprise scopes for a role (filters out enterprise-only features)
+ */
+const getNonEnterpriseScopesForRole = (role) => {
+    const enterpriseScopes = new Set([
+        'view:MetricsTree',
+        'manage:MetricsTree',
+        'view:SpotlightTableConfig',
+        'manage:SpotlightTableConfig',
+        'view:AiAgent',
+        'view:AiAgentThread',
+        'create:AiAgentThread',
+        'manage:AiAgent',
+        'manage:AiAgentThread',
+        'manage:ContentAsCode',
+        'manage:PersonalAccessToken',
+    ]);
+    return exports.PROJECT_ROLE_TO_SCOPES_MAP[role].filter((scope) => !enterpriseScopes.has(scope));
+};
+exports.getNonEnterpriseScopesForRole = getNonEnterpriseScopesForRole;
+/**
+ * Gets the incremental scopes added by a specific role (not inherited from lower roles)
+ */
+const getIncrementalScopesForRole = (role) => {
+    const roleOrder = [
+        projectMemberRole_1.ProjectMemberRole.VIEWER,
+        projectMemberRole_1.ProjectMemberRole.INTERACTIVE_VIEWER,
+        projectMemberRole_1.ProjectMemberRole.EDITOR,
+        projectMemberRole_1.ProjectMemberRole.DEVELOPER,
+        projectMemberRole_1.ProjectMemberRole.ADMIN,
+    ];
+    const roleIndex = roleOrder.indexOf(role);
+    if (roleIndex === 0) {
+        return (0, exports.getScopesForRole)(role);
+    }
+    const previousRole = roleOrder[roleIndex - 1];
+    const currentScopes = new Set((0, exports.getScopesForRole)(role));
+    const previousScopes = new Set((0, exports.getScopesForRole)(previousRole));
+    return Array.from(currentScopes).filter((scope) => !previousScopes.has(scope));
+};
+exports.getIncrementalScopesForRole = getIncrementalScopesForRole;
+//# sourceMappingURL=roleToScopeMapping.js.map

package/dist/cjs/authorization/roleToScopeMapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleToScopeMapping.js","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":";;;AAAA,kEAA+D;AAE/D;;;GAGG;AAEH;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACrB,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE;QACxB,4BAA4B;QAC5B,gBAAgB;QAChB,iBAAiB;QACjB,YAAY;QACZ,cAAc;QACd,kBAAkB;QAClB,wBAAwB;QACxB,WAAW;QACX,UAAU,EAAE,yCAAyC;QACrD,kBAAkB;QAElB,qCAAqC;QACrC,kBAAkB;QAClB,2BAA2B;QAC3B,oBAAoB;KACvB;IAED,CAAC,qCAAiB,CAAC,kBAAkB,CAAC,EAAE;QACpC,4CAA4C;QAC5C,qBAAqB;QACrB,qBAAqB;QACrB,gBAAgB;QAChB,yBAAyB;QACzB,4BAA4B;QAC5B,0BAA0B;QAC1B,YAAY;QAEZ,oEAAoE;QACpE,kBAAkB,EAAE,mBAAmB;QACvC,mBAAmB,EAAE,mBAAmB;QACxC,cAAc,EAAE,gCAAgC;QAEhD,oBAAoB;QACpB,cAAc;QACd,sBAAsB;KACzB;IAED,CAAC,qCAAiB,CAAC,MAAM,CAAC,EAAE;QACxB,8BAA8B;QAC9B,cAAc;QACd,cAAc,EAAE,mDAAmD;QACnE,YAAY;QACZ,oBAAoB;QACpB,4BAA4B;QAC5B,0BAA0B;QAC1B,aAAa;QAEb,oBAAoB;QACpB,oBAAoB;QACpB,sBAAsB,EAAE,qBAAqB;KAChD;IAED,CAAC,qCAAiB,CAAC,SAAS,CAAC,EAAE;QAC3B,iCAAiC;QACjC,oBAAoB;QACpB,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,uBAAuB;QACvB,gBAAgB,EAAE,mBAAmB;QACrC,gBAAgB,EAAE,mCAAmC;QACrD,gBAAgB;QAChB,gBAAgB,EAAE,sBAAsB;QAExC,oBAAoB;QACpB,6BAA6B;QAC7B,sBAAsB;QACtB,gBAAgB;QAChB,sBAAsB,EAAE,qBAAqB;KAChD;IAED,CAAC,qCAAiB,CAAC,KAAK,CAAC,EAAE;QACvB,6BAA6B;QAC7B,gBAAgB,EAAE,cAAc;QAChC,gBAAgB;QAChB,kBAAkB,EAAE,iBAAiB;QACrC,gBAAgB,EAAE,2CAA2C;QAC7D,mBAAmB,EAAE,mBAAmB;QACxC,oBAAoB,EAAE,yBAAyB;QAC/C,sBAAsB,EAAE,yBAAyB;KACpD;CACK,CAAC;AAEX;;GAEG;AACH,MAAM,cAAc,GAAG;IACnB,qCAAiB,CAAC,MAAM;IACxB,qCAAiB,CAAC,kBAAkB;IACpC,qCAAiB,CAAC,MAAM;IACxB,qCAAiB,CAAC,SAAS;IAC3B,qCAAiB,CAAC,KAAK;CACjB,CAAC;AAEX;;;GAGG;AACU,QAAA,0BAA0B,GACnC,CAAC,GAAG,EAAE;IACF,MAAM,MAAM,GAAG,EAAyC,CAAC;IAEzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAE1C,wCAAwC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACtC,gBAAgB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAC7B,CAAC;QACN,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC,EAAE,CAAC;AAET;;GAEG;AACI,MAAM,gBAAgB,GAAG,CAAC,IAAuB,EAAY,EAAE,CAAC;IACnE,GAAG,kCAA0B,CAAC,IAAI,CAAC;CACtC,CAAC;AAFW,QAAA,gBAAgB,oBAE3B;AAEF;;GAEG;AACI,MAAM,6BAA6B,GAAG,CACzC,IAAuB,EACf,EAAE;IACV,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC7B,kBAAkB;QAClB,oBAAoB;QACpB,2BAA2B;QAC3B,6BAA6B;QAC7B,cAAc;QACd,oBAAoB;QACpB,sBAAsB;QACtB,gBAAgB;QAChB,sBAAsB;QACtB,sBAAsB;QACtB,4BAA4B;KAC/B,CAAC,CAAC;IAEH,OAAO,kCAA0B,CAAC,IAAI,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAC1C,CAAC;AACN,CAAC,CAAC;AApBW,QAAA,6BAA6B,iCAoBxC;AAEF;;GAEG;AACI,MAAM,2BAA2B,GAAG,CACvC,IAAuB,EACf,EAAE;IACV,MAAM,SAAS,GAAG;QACd,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,kBAAkB;QACpC,qCAAiB,CAAC,MAAM;QACxB,qCAAiB,CAAC,SAAS;QAC3B,qCAAiB,CAAC,KAAK;KAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,IAAA,wBAAgB,EAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,IAAA,wBAAgB,EAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAA,wBAAgB,EAAC,YAAY,CAAC,CAAC,CAAC;IAE/D,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CACxC,CAAC;AACN,CAAC,CAAC;AAvBW,QAAA,2BAA2B,+BAuBtC"}

package/dist/cjs/authorization/roleToScopeMapping.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=roleToScopeMapping.test.d.ts.map

package/dist/cjs/authorization/roleToScopeMapping.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleToScopeMapping.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.test.ts"],"names":[],"mappings":""}