@lightdash/common 0.1936.2 → 0.1937.1

package/dist/types/authorization/index.d.ts

@@ -1,18 +1,22 @@
 import { AbilityBuilder } from '@casl/ability';
 import { type ProjectMemberProfile } from '../types/projectMemberProfile';
+import { type Role, type RoleWithScopes } from '../types/roles';
 import { type LightdashUser } from '../types/user';
 import { type OrganizationMemberAbilitiesArgs } from './organizationMemberAbility';
 import { type MemberAbility } from './types';
 type UserAbilityBuilderArgs = {
-    user: Pick<LightdashUser, 'role' | 'organizationUuid' | 'userUuid'>;
-    projectProfiles: Pick<ProjectMemberProfile, 'projectUuid' | 'role' | 'userUuid'>[];
+    user: Pick<LightdashUser, 'role' | 'organizationUuid' | 'userUuid' | 'roleUuid'>;
+    projectProfiles: Pick<ProjectMemberProfile, 'projectUuid' | 'role' | 'userUuid' | 'roleUuid'>[];
     permissionsConfig: OrganizationMemberAbilitiesArgs['permissionsConfig'];
+    customRoleScopes?: Record<Role['roleUuid'], RoleWithScopes['scopes']>;
+    customRolesEnabled?: boolean;
+    isEnterprise?: boolean;
 };
 export * from './buildAccountHelpers';
 export * from './jwtAbility';
 export * from './parseAccount';
 export * from './serviceAccountAbility';
 export declare const JWT_HEADER_NAME = "lightdash-embed-token";
-export declare const getUserAbilityBuilder: ({ user, projectProfiles, permissionsConfig, }: UserAbilityBuilderArgs) => AbilityBuilder<MemberAbility>;
-export declare const defineUserAbility: (user: Pick<LightdashUser, "role" | "organizationUuid" | "userUuid">, projectProfiles: Pick<ProjectMemberProfile, "projectUuid" | "role" | "userUuid">[]) => MemberAbility;
+export declare const getUserAbilityBuilder: ({ user, projectProfiles, permissionsConfig, customRoleScopes, customRolesEnabled, isEnterprise, }: UserAbilityBuilderArgs) => AbilityBuilder<MemberAbility>;
+export declare const defineUserAbility: (user: Pick<LightdashUser, "role" | "organizationUuid" | "userUuid" | "roleUuid">, projectProfiles: Pick<ProjectMemberProfile, "projectUuid" | "role" | "userUuid" | "roleUuid">[], customRoleScopes?: Record<Role["roleUuid"], RoleWithScopes["scopes"]>) => MemberAbility;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACpE,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,kDAI/B,sBAAsB,kCAoBxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,UAAU,CAAC,mBAClD,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,CACtC,EAAE,KACJ,aAYF,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AAExC,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,sGAO/B,sBAAsB,kCAgDxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,SACpB,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,mBACgB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,qBACgB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}

package/dist/types/authorization/index.mock.d.ts

@@ -15,6 +15,7 @@ export declare const adminOrgProfile: {
     firstName: string;
     lastName: string;
     email: string;
+    roleUuid: string | undefined;
     isActive: boolean;
     isInviteExpired?: boolean;
     isPending?: boolean;
@@ -23,6 +24,7 @@ export declare const adminProjectProfile: {
     role: ProjectMemberRole;
     projectUuid: string;
     userUuid: string;
+    roleUuid: string | undefined;
     email: string;
     firstName: string;
     lastName: string;

package/dist/types/authorization/index.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,sBAAsB,EACtB,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,eAAO,MAAM,cAAc;;CAE1B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,yBAUxB,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,oBAO5B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;CAI3B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;CAI/B,CAAC;AAEF,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}
+{"version":3,"file":"index.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,sBAAsB,EACtB,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,eAAO,MAAM,cAAc;;CAE1B,CAAC;AACF,eAAO,MAAM,UAAU,EAAE,yBAWxB,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,oBAQ5B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAI3B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;CAI/B,CAAC;AAEF,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}

package/dist/types/authorization/organizationMemberAbility.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,mBAAmB,EAAE,yBAUjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,+BAA+B,EAAE,yBAG7C,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,sBAAsB,EAAE,yBAGpC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,yBAGhC,CAAC"}
+{"version":3,"file":"organizationMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,yBAAyB,EACjC,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,mBAAmB,EAAE,yBAWjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,+BAA+B,EAAE,yBAG7C,CAAC;AACF,eAAO,MAAM,mBAAmB,EAAE,yBAGjC,CAAC;AACF,eAAO,MAAM,sBAAsB,EAAE,yBAGpC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,yBAGhC,CAAC"}

package/dist/types/authorization/parseScopes.d.ts

@@ -1,6 +1,7 @@
-import { type ScopeName } from '../types/scopes';
+import { type ScopeModifer, type ScopeName } from '../types/scopes';
 import { type AbilityAction, type CaslSubjectNames } from './types';
-export declare const parseScope: (scope: string) => [AbilityAction, CaslSubjectNames];
+export declare const parseScope: (scope: string) => [AbilityAction, CaslSubjectNames, ScopeModifer | undefined];
+export declare const normalizeScopeName: (scope: string) => ScopeName;
 export declare const parseScopes: ({ scopes, isEnterprise, }: {
     scopes: string[];
     isEnterprise: boolean;

package/dist/types/authorization/parseScopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parseScopes.d.ts","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEpE,eAAO,MAAM,UAAU,UACZ,MAAM,KACd,CAAC,aAAa,EAAE,gBAAgB,CAKlC,CAAC;AAEF,eAAO,MAAM,WAAW,8BAGrB;IACC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACzB,KAAG,GAAG,CAAC,SAAS,CAiBhB,CAAC"}
+{"version":3,"file":"parseScopes.d.ts","sourceRoot":"","sources":["../../../src/authorization/parseScopes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEpE,eAAO,MAAM,UAAU,UACZ,MAAM,KACd,CAAC,aAAa,EAAE,gBAAgB,EAAE,YAAY,GAAG,SAAS,CAU5D,CAAC;AAEF,eAAO,MAAM,kBAAkB,UAAW,MAAM,KAAG,SAGlD,CAAC;AAEF,eAAO,MAAM,WAAW,8BAGrB;IACC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACzB,KAAG,GAAG,CAAC,SAAS,CAiBhB,CAAC"}

package/dist/types/authorization/projectMemberAbility.mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,eAAO,MAAM,cAAc,EAAE,oBAO5B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,oBAGxC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,oBAG5B,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,oBAG/B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC"}
+{"version":3,"file":"projectMemberAbility.mock.d.ts","sourceRoot":"","sources":["../../../src/authorization/projectMemberAbility.mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,eAAO,MAAM,cAAc,EAAE,oBAQ5B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,oBAGxC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,oBAG5B,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,oBAG/B,CAAC;AACF,eAAO,MAAM,aAAa,EAAE,oBAG3B,CAAC"}

package/dist/types/authorization/roleToScopeMapping.d.ts

@@ -0,0 +1,19 @@
+import { ProjectMemberRole } from '../types/projectMemberRole';
+/**
+ * Maps project member roles to their equivalent scopes based on projectMemberAbility.ts analysis
+ * Each role inherits permissions from the roles below it in the hierarchy
+ */
+export declare const PROJECT_ROLE_TO_SCOPES_MAP: Record<ProjectMemberRole, string[]>;
+/**
+ * Gets the scopes required for a specific project member role
+ */
+export declare const getScopesForRole: (role: ProjectMemberRole) => string[];
+/**
+ * Gets only the non-enterprise scopes for a role (filters out enterprise-only features)
+ */
+export declare const getNonEnterpriseScopesForRole: (role: ProjectMemberRole) => string[];
+/**
+ * Gets the incremental scopes added by a specific role (not inherited from lower roles)
+ */
+export declare const getIncrementalScopesForRole: (role: ProjectMemberRole) => string[];
+//# sourceMappingURL=roleToScopeMapping.d.ts.map

package/dist/types/authorization/roleToScopeMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleToScopeMapping.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA0G/D;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAoBnE,CAAC;AAET;;GAEG;AACH,eAAO,MAAM,gBAAgB,SAAU,iBAAiB,KAAG,MAAM,EAEhE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,SAChC,iBAAiB,KACxB,MAAM,EAkBR,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,2BAA2B,SAC9B,iBAAiB,KACxB,MAAM,EAqBR,CAAC"}

package/dist/types/authorization/roleToScopeMapping.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=roleToScopeMapping.test.d.ts.map

package/dist/types/authorization/roleToScopeMapping.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleToScopeMapping.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/roleToScopeMapping.test.ts"],"names":[],"mappings":""}