@lightdash/common 0.2438.0 → 0.2439.0

package/dist/esm/authorization/space/spaceAccessResolver.d.ts

@@ -0,0 +1,4 @@
+import { type SpaceAccessInput, type SpaceShare } from '../../types/space';
+export type SpaceAccess = Pick<SpaceShare, 'userUuid' | 'role' | 'hasDirectAccess' | 'inheritedFrom' | 'projectRole' | 'inheritedRole'>;
+export declare const resolveSpaceAccess: (input: SpaceAccessInput) => SpaceAccess[];
+//# sourceMappingURL=spaceAccessResolver.d.ts.map

package/dist/esm/authorization/space/spaceAccessResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaceAccessResolver.d.ts","sourceRoot":"","sources":["../../../../src/authorization/space/spaceAccessResolver.ts"],"names":[],"mappings":"AAOA,OAAO,EAOH,KAAK,gBAAgB,EACrB,KAAK,UAAU,EAClB,MAAM,mBAAmB,CAAC;AAS3B,MAAM,MAAM,WAAW,GAAG,IAAI,CAC1B,UAAU,EACR,UAAU,GACV,MAAM,GACN,iBAAiB,GACjB,eAAe,GACf,aAAa,GACb,eAAe,CACpB,CAAC;AA8JF,eAAO,MAAM,kBAAkB,UAAW,gBAAgB,KAAG,WAAW,EAavE,CAAC"}

package/dist/esm/authorization/space/spaceAccessResolver.js

@@ -0,0 +1,100 @@
+import { ProjectMemberRole, } from '../../types/projectMemberRole';
+import { DirectSpaceAccessOrigin, ProjectSpaceAccessOrigin, SpaceMemberRole, } from '../../types/space';
+import { convertOrganizationRoleToProjectRole, convertProjectRoleToSpaceRole, convertSpaceRoleToProjectRole, getHighestProjectRole, getHighestSpaceRole, } from '../../utils/projectMemberRole';
+const getUserOrganizationRole = (organizationAccess, userUuid) => {
+    const userOrgAccess = organizationAccess.filter((a) => a.userUuid === userUuid);
+    return {
+        type: 'organization',
+        role: userOrgAccess.length > 0
+            ? convertOrganizationRoleToProjectRole(userOrgAccess[0].role)
+            : undefined,
+    };
+};
+const getUserProjectRole = (projectAccess, userUuid) => {
+    const userProjectAccess = projectAccess.filter((a) => a.userUuid === userUuid &&
+        a.from === ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP);
+    return {
+        type: 'project',
+        role: userProjectAccess.length > 0
+            ? userProjectAccess[0].role
+            : undefined,
+    };
+};
+const getUserProjectGroupRoles = (projectAccess, userUuid) => {
+    const userProjectGroups = projectAccess.filter((a) => a.userUuid === userUuid &&
+        a.from === ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP);
+    return userProjectGroups.map((entry) => ({
+        type: 'group',
+        role: entry.role,
+    }));
+};
+const getUserDirectGroupAccess = (directAccess, userUuid) => {
+    const userDirectGroups = directAccess.filter((a) => a.userUuid === userUuid &&
+        a.from === DirectSpaceAccessOrigin.GROUP_ACCESS);
+    return userDirectGroups.map((entry) => ({
+        type: 'space_group',
+        role: convertSpaceRoleToProjectRole(entry.role),
+    }));
+};
+const getSpaceRole = (highestRole, userDirectAccess, isPrivate) => {
+    const userAccessEntries = userDirectAccess.filter((a) => a.from === DirectSpaceAccessOrigin.USER_ACCESS);
+    const groupAccessEntries = userDirectAccess.filter((a) => a.from === DirectSpaceAccessOrigin.GROUP_ACCESS);
+    const hasDirectAccess = userDirectAccess.length > 0;
+    if (highestRole === ProjectMemberRole.ADMIN) {
+        return SpaceMemberRole.ADMIN;
+    }
+    if (hasDirectAccess) {
+        // If user has explicit user role in space, use that; otherwise use highest group role
+        const userSpaceRole = userAccessEntries.length > 0
+            ? userAccessEntries[0].role
+            : undefined;
+        return (userSpaceRole ??
+            getHighestSpaceRole(groupAccessEntries.map((e) => e.role)));
+    }
+    if (!isPrivate) {
+        return convertProjectRoleToSpaceRole(highestRole);
+    }
+    return undefined;
+};
+const resolveUserSpaceAccess = (userUuid, input) => {
+    const { isPrivate, directAccess, projectAccess, organizationAccess } = input;
+    const organizationRole = getUserOrganizationRole(organizationAccess, userUuid);
+    const projectRole = getUserProjectRole(projectAccess, userUuid);
+    const groupRoles = getUserProjectGroupRoles(projectAccess, userUuid);
+    const spaceGroupAccessRoles = getUserDirectGroupAccess(directAccess, userUuid);
+    // Compute highest role across all sources
+    const highestRole = getHighestProjectRole([
+        organizationRole,
+        projectRole,
+        ...groupRoles,
+        ...spaceGroupAccessRoles,
+    ]);
+    if (!highestRole)
+        return undefined;
+    const userDirectAccess = directAccess.filter((a) => a.userUuid === userUuid);
+    const spaceRole = getSpaceRole(highestRole.role, userDirectAccess, isPrivate);
+    if (!spaceRole)
+        return undefined;
+    // Compute highest project role (org + direct project membership only)
+    const highestProjectRole = getHighestProjectRole([
+        organizationRole,
+        projectRole,
+    ]);
+    return {
+        userUuid,
+        role: spaceRole,
+        hasDirectAccess: userDirectAccess.length > 0,
+        inheritedRole: highestRole.role,
+        inheritedFrom: highestRole.type,
+        projectRole: highestProjectRole?.role,
+    };
+};
+export const resolveSpaceAccess = (input) => {
+    const { directAccess, projectAccess, organizationAccess } = input;
+    // Collect all unique user UUIDs
+    const uniqueUserUuids = new Set([...directAccess, ...projectAccess, ...organizationAccess].map((e) => e.userUuid));
+    return Array.from(uniqueUserUuids)
+        .map((userUuid) => resolveUserSpaceAccess(userUuid, input))
+        .filter((share) => share !== undefined);
+};
+//# sourceMappingURL=spaceAccessResolver.js.map

package/dist/esm/authorization/space/spaceAccessResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaceAccessResolver.js","sourceRoot":"","sources":["../../../../src/authorization/space/spaceAccessResolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,iBAAiB,GAKpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACH,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,GAMlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACH,oCAAoC,EACpC,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,GACtB,MAAM,+BAA+B,CAAC;AAYvC,MAAM,uBAAuB,GAAG,CAC5B,kBAA6C,EAC7C,QAAgB,EACA,EAAE;IAClB,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACjC,CAAC;IACF,OAAO;QACH,IAAI,EAAE,cAAc;QACpB,IAAI,EACA,aAAa,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,oCAAoC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,CAAC,CAAC,SAAS;KACtB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACvB,aAAmC,EACnC,QAAgB,EACL,EAAE;IACb,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,QAAQ,KAAK,QAAQ;QACvB,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,kBAAkB,CAC7D,CAAC;IAEF,OAAO;QACH,IAAI,EAAE,SAAS;QACf,IAAI,EACA,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;YAC3B,CAAC,CAAC,SAAS;KACtB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC7B,aAAmC,EACnC,QAAgB,EACL,EAAE;IACb,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,QAAQ,KAAK,QAAQ;QACvB,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,gBAAgB,CAC3D,CAAC;IAEF,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;KACnB,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC7B,YAAiC,EACjC,QAAgB,EACM,EAAE;IACxB,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,QAAQ,KAAK,QAAQ;QACvB,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,YAAY,CACtD,CAAC;IAEF,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC;KAClD,CAAC,CAAC,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACjB,WAA8B,EAC9B,gBAAqC,EACrC,SAAkB,EACS,EAAE;IAC7B,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,WAAW,CACxD,CAAC;IACF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,YAAY,CACzD,CAAC;IAEF,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IAEpD,IAAI,WAAW,KAAK,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,eAAe,CAAC,KAAK,CAAC;IACjC,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QAClB,sFAAsF;QACtF,MAAM,aAAa,GACf,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACxB,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI;YAC3B,CAAC,CAAC,SAAS,CAAC;QACpB,OAAO,CACH,aAAa;YACb,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC7D,CAAC;IACN,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,6BAA6B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC3B,QAAgB,EAChB,KAAuB,EACA,EAAE;IACzB,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAChE,KAAK,CAAC;IACV,MAAM,gBAAgB,GAAG,uBAAuB,CAC5C,kBAAkB,EAClB,QAAQ,CACX,CAAC;IACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,wBAAwB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,qBAAqB,GAAG,wBAAwB,CAClD,YAAY,EACZ,QAAQ,CACX,CAAC;IAEF,0CAA0C;IAC1C,MAAM,WAAW,GAAG,qBAAqB,CAAC;QACtC,gBAAgB;QAChB,WAAW;QACX,GAAG,UAAU;QACb,GAAG,qBAAqB;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAEnC,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACjC,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAC1B,WAAW,CAAC,IAAI,EAChB,gBAAgB,EAChB,SAAS,CACZ,CAAC;IACF,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;QAC7C,gBAAgB;QAChB,WAAW;KACd,CAAC,CAAC;IAEH,OAAO;QACH,QAAQ;QACR,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC5C,aAAa,EAAE,WAAW,CAAC,IAAI;QAC/B,aAAa,EAAE,WAAW,CAAC,IAAI;QAC/B,WAAW,EAAE,kBAAkB,EAAE,IAAI;KACxC,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAuB,EAAiB,EAAE;IACzE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAElE,gCAAgC;IAChC,MAAM,eAAe,GAAG,IAAI,GAAG,CAC3B,CAAC,GAAG,YAAY,EAAE,GAAG,aAAa,EAAE,GAAG,kBAAkB,CAAC,CAAC,GAAG,CAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CACpB,CACJ,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;SAC7B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;SAC1D,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AACtE,CAAC,CAAC"}

package/dist/esm/authorization/space/spaceAccessResolver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=spaceAccessResolver.test.d.ts.map

package/dist/esm/authorization/space/spaceAccessResolver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaceAccessResolver.test.d.ts","sourceRoot":"","sources":["../../../../src/authorization/space/spaceAccessResolver.test.ts"],"names":[],"mappings":""}

package/dist/esm/authorization/space/spaceAccessResolver.test.js

@@ -0,0 +1,484 @@
+import { OrganizationMemberRole } from '../../types/organizationMemberProfile';
+import { ProjectMemberRole } from '../../types/projectMemberRole';
+import { DirectSpaceAccessOrigin, ProjectSpaceAccessOrigin, SpaceMemberRole, } from '../../types/space';
+import { resolveSpaceAccess } from './spaceAccessResolver';
+const makeInput = (overrides = {}) => ({
+    spaceUuid: 'space-1',
+    isPrivate: false,
+    directAccess: [],
+    projectAccess: [],
+    organizationAccess: [],
+    ...overrides,
+});
+describe('resolveSpaceAccess', () => {
+    it('returns empty array for empty inputs', () => {
+        const result = resolveSpaceAccess(makeInput());
+        expect(result).toEqual([]);
+    });
+    describe('admin override', () => {
+        it('org admin gets space ADMIN', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.ADMIN,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
+            expect(result[0].inheritedFrom).toBe('organization');
+        });
+        it('project admin gets space ADMIN', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.MEMBER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.ADMIN,
+                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
+        });
+        it('group admin (project group) gets space ADMIN', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.MEMBER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.ADMIN,
+                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
+        });
+        it('admin can access private space even without direct access', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: true,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.ADMIN,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.ADMIN);
+        });
+    });
+    describe('direct access', () => {
+        it('USER_ACCESS role used directly', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                directAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.EDITOR,
+                        from: DirectSpaceAccessOrigin.USER_ACCESS,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+            expect(result[0].hasDirectAccess).toBe(true);
+        });
+        it('GROUP_ACCESS role used when no user role', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                directAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.EDITOR,
+                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+            expect(result[0].hasDirectAccess).toBe(true);
+        });
+        it('user + group direct access: user role wins when higher', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                directAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.EDITOR,
+                        from: DirectSpaceAccessOrigin.USER_ACCESS,
+                    },
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.VIEWER,
+                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            // User access takes precedence over group access
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+    });
+    describe('public space inheritance', () => {
+        it('viewer gets viewer space role', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.VIEWER);
+            expect(result[0].hasDirectAccess).toBe(false);
+            expect(result[0].inheritedFrom).toBe('organization');
+        });
+        it('editor gets editor space role', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.EDITOR,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+        it('developer gets editor space role', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.DEVELOPER,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+        it('interactive_viewer gets viewer space role', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.INTERACTIVE_VIEWER,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.VIEWER);
+        });
+    });
+    describe('private space exclusion', () => {
+        it('non-admin without direct access excluded from private space', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: true,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.EDITOR,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(0);
+        });
+        it('private space with direct access works', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: true,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                directAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.EDITOR,
+                        from: DirectSpaceAccessOrigin.USER_ACCESS,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+    });
+    describe('org MEMBER role', () => {
+        it('org MEMBER with no other access is excluded', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.MEMBER,
+                    },
+                ],
+            }));
+            // MEMBER converts to undefined project role, so no highest role → excluded
+            expect(result).toHaveLength(0);
+        });
+        it('org MEMBER with project access is included', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.MEMBER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.EDITOR,
+                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+    });
+    describe('multiple group roles', () => {
+        it('highest group role wins', () => {
+            const result = resolveSpaceAccess(makeInput({
+                isPrivate: false,
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.MEMBER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.VIEWER,
+                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
+                    },
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.EDITOR,
+                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result).toHaveLength(1);
+            expect(result[0].role).toBe(SpaceMemberRole.EDITOR);
+        });
+    });
+    describe('inheritedFrom metadata', () => {
+        it('reports organization when org role is highest', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.EDITOR,
+                    },
+                ],
+            }));
+            expect(result[0].inheritedFrom).toBe('organization');
+        });
+        it('reports project when project role is highest', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.EDITOR,
+                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result[0].inheritedFrom).toBe('project');
+        });
+        it('reports group when group project role is highest', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.DEVELOPER,
+                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result[0].inheritedFrom).toBe('group');
+        });
+        it('reports space_group when space group access role is highest', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                directAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: SpaceMemberRole.EDITOR,
+                        from: DirectSpaceAccessOrigin.GROUP_ACCESS,
+                    },
+                ],
+            }));
+            expect(result[0].inheritedFrom).toBe('space_group');
+        });
+    });
+    describe('projectRole field', () => {
+        it('only considers org + direct project membership (not groups)', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.DEVELOPER,
+                        from: ProjectSpaceAccessOrigin.GROUP_MEMBERSHIP,
+                    },
+                ],
+            }));
+            // projectRole should be VIEWER (from org), not DEVELOPER (from group)
+            expect(result[0].projectRole).toBe(ProjectMemberRole.VIEWER);
+        });
+        it('includes direct project membership in projectRole', () => {
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: OrganizationMemberRole.VIEWER,
+                    },
+                ],
+                projectAccess: [
+                    {
+                        userUuid: 'user-1',
+                        spaceUuid: 'space-1',
+                        role: ProjectMemberRole.EDITOR,
+                        from: ProjectSpaceAccessOrigin.PROJECT_MEMBERSHIP,
+                    },
+                ],
+            }));
+            expect(result[0].projectRole).toBe(ProjectMemberRole.EDITOR);
+        });
+    });
+    describe('multiple users', () => {
+        it('resolves access for multiple users independently', () => {
+            const orgAccess = [
+                {
+                    userUuid: 'user-1',
+                    spaceUuid: 'space-1',
+                    role: OrganizationMemberRole.EDITOR,
+                },
+                {
+                    userUuid: 'user-2',
+                    spaceUuid: 'space-1',
+                    role: OrganizationMemberRole.VIEWER,
+                },
+            ];
+            const directAccess = [
+                {
+                    userUuid: 'user-2',
+                    spaceUuid: 'space-1',
+                    role: SpaceMemberRole.ADMIN,
+                    from: DirectSpaceAccessOrigin.USER_ACCESS,
+                },
+            ];
+            const projectAccess = [];
+            const result = resolveSpaceAccess(makeInput({
+                organizationAccess: orgAccess,
+                directAccess,
+                projectAccess,
+            }));
+            expect(result).toHaveLength(2);
+            const user1 = result.find((r) => r.userUuid === 'user-1');
+            const user2 = result.find((r) => r.userUuid === 'user-2');
+            expect(user1?.role).toBe(SpaceMemberRole.EDITOR);
+            expect(user1?.hasDirectAccess).toBe(false);
+            expect(user2?.role).toBe(SpaceMemberRole.ADMIN);
+            expect(user2?.hasDirectAccess).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=spaceAccessResolver.test.js.map

package/dist/esm/authorization/space/spaceAccessResolver.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spaceAccessResolver.test.js","sourceRoot":"","sources":["../../../../src/authorization/space/spaceAccessResolver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACH,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,GAKlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,SAAS,GAAG,CACd,YAAuC,EAAE,EACzB,EAAE,CAAC,CAAC;IACpB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,kBAAkB,EAAE,EAAE;IACtB,GAAG,SAAS;CACf,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YAClC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,KAAK;qBACrC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,KAAK;wBAC7B,IAAI,EAAE,wBAAwB,CAAC,kBAAkB;qBACpD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,KAAK;wBAC7B,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;qBAClD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACjE,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,IAAI;gBACf,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,KAAK;qBACrC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,YAAY,EAAE;oBACV;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,WAAW;qBAC5C;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAChD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,YAAY,EAAE;oBACV;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,YAAY;qBAC7C;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAC9D,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,YAAY,EAAE;oBACV;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,WAAW;qBAC5C;oBACD;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,YAAY;qBAC7C;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,iDAAiD;YACjD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YACxC,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,SAAS;qBACzC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACjD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,kBAAkB;qBAClD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,IAAI;gBACf,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAC9C,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,IAAI;gBACf,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,YAAY,EAAE;oBACV;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,WAAW;qBAC5C;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACnD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,2EAA2E;YAC3E,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,IAAI,EAAE,wBAAwB,CAAC,kBAAkB;qBACpD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YAC/B,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;qBAClD;oBACD;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;qBAClD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACrD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,IAAI,EAAE,wBAAwB,CAAC,kBAAkB;qBACpD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YACxD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,SAAS;wBACjC,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;qBAClD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,YAAY,EAAE;oBACV;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,eAAe,CAAC,MAAM;wBAC5B,IAAI,EAAE,uBAAuB,CAAC,YAAY;qBAC7C;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACnE,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,SAAS;wBACjC,IAAI,EAAE,wBAAwB,CAAC,gBAAgB;qBAClD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,sEAAsE;YACtE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YACzD,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE;oBAChB;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;qBACtC;iBACJ;gBACD,aAAa,EAAE;oBACX;wBACI,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,SAAS;wBACpB,IAAI,EAAE,iBAAiB,CAAC,MAAM;wBAC9B,IAAI,EAAE,wBAAwB,CAAC,kBAAkB;qBACpD;iBACJ;aACJ,CAAC,CACL,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YACxD,MAAM,SAAS,GAA8B;gBACzC;oBACI,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;iBACtC;gBACD;oBACI,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,sBAAsB,CAAC,MAAM;iBACtC;aACJ,CAAC;YACF,MAAM,YAAY,GAAwB;gBACtC;oBACI,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,eAAe,CAAC,KAAK;oBAC3B,IAAI,EAAE,uBAAuB,CAAC,WAAW;iBAC5C;aACJ,CAAC;YACF,MAAM,aAAa,GAAyB,EAAE,CAAC;YAE/C,MAAM,MAAM,GAAG,kBAAkB,CAC7B,SAAS,CAAC;gBACN,kBAAkB,EAAE,SAAS;gBAC7B,YAAY;gBACZ,aAAa;aAChB,CAAC,CACL,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAE1D,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE3C,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/esm/index.d.ts

@@ -17,6 +17,7 @@ export * from './authorization/parseAccount';
 export * from './authorization/roleToScopeMapping';
 export * from './authorization/scopes';
 export * from './authorization/serviceAccountAbility';
+export * from './authorization/space/spaceAccessResolver';
 export * from './authorization/types';
 export * from './compiler/compilationReport';
 export * from './compiler/exploreCompiler';