@lightdash/common 0.2884.2 → 0.2885.0

package/dist/cjs/authorization/getUserAbilityBuilder.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=getUserAbilityBuilder.test.d.ts.map

package/dist/cjs/authorization/getUserAbilityBuilder.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAbilityBuilder.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/getUserAbilityBuilder.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authorization/getUserAbilityBuilder.test.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const ability_1 = require("@casl/ability");
+const organizationMemberProfile_1 = require("../types/organizationMemberProfile");
+const index_1 = require("./index");
+const organizationMemberAbility_1 = tslib_1.__importDefault(require("./organizationMemberAbility"));
+const ORG_UUID = 'test-org-uuid';
+const USER_UUID = 'test-user-uuid';
+const CUSTOM_ROLE_UUID = '11111111-1111-4111-a111-111111111111';
+const PERMISSIONS_CONFIG = {
+    pat: { enabled: false, allowedOrgRoles: [] },
+};
+const buildExpected = (role) => {
+    const builder = new ability_1.AbilityBuilder(ability_1.Ability);
+    (0, organizationMemberAbility_1.default)({
+        role,
+        member: { organizationUuid: ORG_UUID, userUuid: USER_UUID },
+        builder,
+        permissionsConfig: PERMISSIONS_CONFIG,
+    });
+    return builder.build().rules;
+};
+const ruleSetEqual = (a, b) => {
+    expect(a.length).toBe(b.length);
+    expect(JSON.stringify(a.slice().sort())).toBe(JSON.stringify(b.slice().sort()));
+};
+describe('getUserAbilityBuilder — org-level role resolution', () => {
+    describe('Backwards compatibility with system roles', () => {
+        it.each([
+            organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
+            organizationMemberProfile_1.OrganizationMemberRole.VIEWER,
+            organizationMemberProfile_1.OrganizationMemberRole.INTERACTIVE_VIEWER,
+            organizationMemberProfile_1.OrganizationMemberRole.EDITOR,
+            organizationMemberProfile_1.OrganizationMemberRole.DEVELOPER,
+            organizationMemberProfile_1.OrganizationMemberRole.ADMIN,
+        ])('%s user without roleUuid uses the system role path (unchanged)', (role) => {
+            const builder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: undefined,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+            });
+            ruleSetEqual(builder.build().rules, buildExpected(role));
+        });
+    });
+    describe('Custom-roles feature flag', () => {
+        it('falls through to the system role path when customRolesEnabled=false (even if roleUuid is set)', () => {
+            const builder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.ADMIN,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: CUSTOM_ROLE_UUID,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+                customRoleScopes: { [CUSTOM_ROLE_UUID]: ['view:Dashboard'] },
+                customRolesEnabled: false, // gate off
+            });
+            ruleSetEqual(builder.build().rules, buildExpected(organizationMemberProfile_1.OrganizationMemberRole.ADMIN));
+        });
+        it('falls through to the system role path when customRolesEnabled=true but the role has no scopes loaded', () => {
+            const builder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.ADMIN,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: CUSTOM_ROLE_UUID,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+                customRoleScopes: {}, // no scopes for this role
+                customRolesEnabled: true,
+            });
+            ruleSetEqual(builder.build().rules, buildExpected(organizationMemberProfile_1.OrganizationMemberRole.ADMIN));
+        });
+    });
+    describe('Org-level custom role active', () => {
+        it('uses the scope-derived path when roleUuid + customRolesEnabled + scopes are all present', () => {
+            // A custom role granting only view:Dashboard. Admin's normal
+            // abilities should NOT appear (e.g. manage:InviteLink).
+            const builder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.ADMIN, // ignored — custom role wins
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: CUSTOM_ROLE_UUID,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+                customRoleScopes: { [CUSTOM_ROLE_UUID]: ['view:Dashboard'] },
+                customRolesEnabled: true,
+            });
+            const ability = builder.build();
+            // Custom role grants what the scope says
+            expect(ability.rules.find((r) => r.subject === 'Dashboard')).toBeDefined();
+            // Admin abilities are NOT present
+            expect(ability.rules.find((r) => r.subject === 'InviteLink')).toBeUndefined();
+            expect(ability.rules.find((r) => r.subject === 'Organization')).toBeUndefined();
+        });
+        it('different custom roles produce different abilities (smoke)', () => {
+            const READ_ONLY_UUID = '22222222-2222-4222-a222-222222222222';
+            const EDIT_UUID = '33333333-3333-4333-a333-333333333333';
+            const readOnlyBuilder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: READ_ONLY_UUID,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+                customRoleScopes: {
+                    [READ_ONLY_UUID]: ['view:Dashboard'],
+                    [EDIT_UUID]: ['view:Dashboard', 'manage:Dashboard'],
+                },
+                customRolesEnabled: true,
+            });
+            const editBuilder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: EDIT_UUID,
+                },
+                projectProfiles: [],
+                permissionsConfig: PERMISSIONS_CONFIG,
+                customRoleScopes: {
+                    [READ_ONLY_UUID]: ['view:Dashboard'],
+                    [EDIT_UUID]: ['view:Dashboard', 'manage:Dashboard'],
+                },
+                customRolesEnabled: true,
+            });
+            const readOnlyRules = readOnlyBuilder.build().rules;
+            const editRules = editBuilder.build().rules;
+            // Edit role has manage rules; readOnly does not
+            expect(editRules.some((r) => r.action === 'manage')).toBe(true);
+            expect(readOnlyRules.some((r) => r.action === 'manage')).toBe(false);
+        });
+    });
+    describe('Project profile resolution still works alongside org-level custom roles', () => {
+        it('combines org system role with project-level system role', () => {
+            const PROJECT_UUID = 'test-project-uuid';
+            const builder = (0, index_1.getUserAbilityBuilder)({
+                user: {
+                    role: organizationMemberProfile_1.OrganizationMemberRole.MEMBER,
+                    organizationUuid: ORG_UUID,
+                    userUuid: USER_UUID,
+                    roleUuid: undefined,
+                },
+                projectProfiles: [
+                    {
+                        projectUuid: PROJECT_UUID,
+                        role: 'admin', // ProjectMemberRole.ADMIN
+                        userUuid: USER_UUID,
+                        roleUuid: undefined,
+                    },
+                ],
+                permissionsConfig: PERMISSIONS_CONFIG,
+            });
+            const { rules } = builder.build();
+            // Org member abilities (minimal) plus project admin abilities
+            expect(rules.length).toBeGreaterThan(0);
+        });
+    });
+});
+//# sourceMappingURL=getUserAbilityBuilder.test.js.map

package/dist/cjs/authorization/getUserAbilityBuilder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserAbilityBuilder.test.js","sourceRoot":"","sources":["../../../src/authorization/getUserAbilityBuilder.test.ts"],"names":[],"mappings":";;;AAAA,2CAAwD;AACxD,kFAA4E;AAC5E,mCAAgD;AAChD,oGAA2E;AAG3E,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,MAAM,kBAAkB,GAAG;IACvB,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE;CAC/C,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAA4B,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAA,mCAAgC,EAAC;QAC7B,IAAI;QACJ,MAAM,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;QAC3D,OAAO;QACP,iBAAiB,EAAE,kBAAkB;KACxC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE;IAChD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACzC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC;AACN,CAAC,CAAC;AAEF,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC/D,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,IAAI,CAAC;YACJ,kDAAsB,CAAC,MAAM;YAC7B,kDAAsB,CAAC,MAAM;YAC7B,kDAAsB,CAAC,kBAAkB;YACzC,kDAAsB,CAAC,MAAM;YAC7B,kDAAsB,CAAC,SAAS;YAChC,kDAAsB,CAAC,KAAK;SAC/B,CAAC,CACE,gEAAgE,EAChE,CAAC,IAAI,EAAE,EAAE;YACL,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;gBAClC,IAAI,EAAE;oBACF,IAAI;oBACJ,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;aACxC,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;YACrG,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,KAAK;oBAClC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE;gBAC5D,kBAAkB,EAAE,KAAK,EAAE,WAAW;aACzC,CAAC,CAAC;YACH,YAAY,CACR,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EACrB,aAAa,CAAC,kDAAsB,CAAC,KAAK,CAAC,CAC9C,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sGAAsG,EAAE,GAAG,EAAE;YAC5G,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,KAAK;oBAClC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,EAAE,0BAA0B;gBAChD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,YAAY,CACR,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EACrB,aAAa,CAAC,kDAAsB,CAAC,KAAK,CAAC,CAC9C,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;YAC/F,6DAA6D;YAC7D,wDAAwD;YACxD,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,KAAK,EAAE,6BAA6B;oBACjE,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE;gBAC5D,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,yCAAyC;YACzC,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CACvD,CAAC,WAAW,EAAE,CAAC;YAChB,kCAAkC;YAClC,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,CACxD,CAAC,aAAa,EAAE,CAAC;YAClB,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAC1D,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YAClE,MAAM,cAAc,GAAG,sCAAsC,CAAC;YAC9D,MAAM,SAAS,GAAG,sCAAsC,CAAC;YAEzD,MAAM,eAAe,GAAG,IAAA,6BAAqB,EAAC;gBAC1C,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,cAAc;iBAC3B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE;oBACd,CAAC,cAAc,CAAC,EAAE,CAAC,gBAAgB,CAAC;oBACpC,CAAC,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;iBACtD;gBACD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,IAAA,6BAAqB,EAAC;gBACtC,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE;oBACd,CAAC,cAAc,CAAC,EAAE,CAAC,gBAAgB,CAAC;oBACpC,CAAC,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;iBACtD;gBACD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;YACpD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;YAC5C,gDAAgD;YAChD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CACzD,KAAK,CACR,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACrF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAC/D,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACzC,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,kDAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE;oBACb;wBACI,WAAW,EAAE,YAAY;wBACzB,IAAI,EAAE,OAAgB,EAAE,0BAA0B;wBAClD,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,SAAS;qBACtB;iBACJ;gBACD,iBAAiB,EAAE,kBAAkB;aACxC,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,8DAA8D;YAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,GAAI,mGAOnC,sBAAsB,kCAmDxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,GAC1B,MAAM,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,EACD,iBAAiB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,EACH,mBAAmB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,GAAI,mGAOnC,sBAAsB,kCA0ExB,CAAC;AAGF,eAAO,MAAM,iBAAiB,GAC1B,MAAM,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,EACD,iBAAiB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,EACH,mBAAmB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}

package/dist/cjs/authorization/index.js

@@ -11,16 +11,35 @@ exports.JWT_HEADER_NAME = 'lightdash-embed-token';
 const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, customRoleScopes, customRolesEnabled, isEnterprise, }) => {
     const builder = new ability_1.AbilityBuilder(ability_1.Ability);
     if (user.role && user.organizationUuid) {
-        // TODO custom roles at organization level are not supported yet
-        (0, organizationMemberAbility_1.default)({
-            role: user.role,
-            member: {
+        // Org-level custom role: if the user's organization_memberships row
+        // points at a role_uuid AND custom roles are enabled AND we have the
+        // role's scopes, build CASL from those scopes (same path as
+        // project-level custom roles below). Falls back to the system role
+        // path otherwise.
+        const orgCustomRoleScopes = customRolesEnabled && user.roleUuid
+            ? customRoleScopes?.[user.roleUuid]
+            : undefined;
+        if (orgCustomRoleScopes) {
+            (0, scopeAbilityBuilder_1.buildAbilityFromScopes)({
                 organizationUuid: user.organizationUuid,
                 userUuid: user.userUuid,
-            },
-            builder,
-            permissionsConfig,
-        });
+                scopes: orgCustomRoleScopes,
+                isEnterprise,
+                organizationRole: user.role,
+                permissionsConfig,
+            }, builder);
+        }
+        else {
+            (0, organizationMemberAbility_1.default)({
+                role: user.role,
+                member: {
+                    organizationUuid: user.organizationUuid,
+                    userUuid: user.userUuid,
+                },
+                builder,
+                permissionsConfig,
+            });
+        }
         projectProfiles.forEach((projectProfile) => {
             if (projectProfile.roleUuid && customRolesEnabled) {
                 if (!user.organizationUuid) {

package/dist/cjs/authorization/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AACxD,4CAAgD;AAIhD,oGAEqC;AACrC,iEAAgE;AAChE,+DAA+D;AAkBlD,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAEhD,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,gEAAgE;QAChE,IAAA,mCAAgC,EAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QAEH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,IAAI,cAAc,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,sBAAa,CACnB,0BAA0B,IAAI,CAAC,gBAAgB,gBAAgB,CAClE,CAAC;gBACN,CAAC;gBAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACT,yBAAyB,cAAc,CAAC,QAAQ,gBAAgB,CACnE,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,IAAA,4CAAsB,EAClB;oBACI,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,YAAY;oBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;oBAC3B,iBAAiB;iBACpB,EACD,OAAO,CACV,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AA1DW,QAAA,qBAAqB,yBA0DhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAGC,EACD,eAGG,EACH,gBAAqE,EACxD,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;QACD,gBAAgB;KACnB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAvBW,QAAA,iBAAiB,qBAuB5B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":";;;;AAAA,2CAAwD;AACxD,4CAAgD;AAIhD,oGAEqC;AACrC,iEAAgE;AAChE,+DAA+D;AAkBlD,QAAA,eAAe,GAAG,uBAAuB,CAAC;AAEhD,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,wBAAc,CAAgB,iBAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,oEAAoE;QACpE,qEAAqE;QACrE,4DAA4D;QAC5D,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,mBAAmB,GACrB,kBAAkB,IAAI,IAAI,CAAC,QAAQ;YAC/B,CAAC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,CAAC,CAAC,SAAS,CAAC;QAEpB,IAAI,mBAAmB,EAAE,CAAC;YACtB,IAAA,4CAAsB,EAClB;gBACI,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,mBAAmB;gBAC3B,YAAY;gBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;gBAC3B,iBAAiB;aACpB,EACD,OAAO,CACV,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,IAAA,mCAAgC,EAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE;oBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBAC1B;gBACD,OAAO;gBACP,iBAAiB;aACpB,CAAC,CAAC;QACP,CAAC;QAED,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,IAAI,cAAc,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,sBAAa,CACnB,0BAA0B,IAAI,CAAC,gBAAgB,gBAAgB,CAClE,CAAC;gBACN,CAAC;gBAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACT,yBAAyB,cAAc,CAAC,QAAQ,gBAAgB,CACnE,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,IAAA,4CAAsB,EAClB;oBACI,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,YAAY;oBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;oBAC3B,iBAAiB;iBACpB,EACD,OAAO,CACV,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,6CAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAjFW,QAAA,qBAAqB,yBAiFhC;AAEF,yCAAyC;AAClC,MAAM,iBAAiB,GAAG,CAC7B,IAGC,EACD,eAGG,EACH,gBAAqE,EACxD,EAAE;IACf,MAAM,OAAO,GAAG,IAAA,6BAAqB,EAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;QACD,gBAAgB;KACnB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC;AAvBW,QAAA,iBAAiB,qBAuB5B"}

package/dist/cjs/authorization/organizationMemberAbility.d.ts

@@ -1,6 +1,7 @@
 import { type AbilityBuilder } from '@casl/ability';
 import { type OrganizationMemberProfile, type OrganizationMemberRole } from '../types/organizationMemberProfile';
 import { type MemberAbility } from './types';
+export declare const applyOrganizationMemberStaticAbilities: Record<OrganizationMemberRole, (member: OrganizationMemberAbilitiesArgs['member'], builder: OrganizationMemberAbilitiesArgs['builder']) => void>;
 export type OrganizationMemberAbilitiesArgs = {
     role: OrganizationMemberRole;
     member: Pick<OrganizationMemberProfile, 'organizationUuid' | 'userUuid'>;

package/dist/cjs/authorization/organizationMemberAbility.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizationMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACH,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC9B,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AA+Z7C,MAAM,MAAM,+BAA+B,GAAG;IAC1C,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,iBAAiB,EAAE;QACf,GAAG,EAAE;YACD,OAAO,EAAE,OAAO,CAAC;YACjB,eAAe,EAAE,sBAAsB,EAAE,CAAC;SAC7C,CAAC;KACL,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACpB,EAAE,+BAA+B,QAQjC"}
+{"version":3,"file":"organizationMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACH,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC9B,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAe7C,eAAO,MAAM,sCAAsC,EAAE,MAAM,CACvD,sBAAsB,EACtB,CACI,MAAM,EAAE,+BAA+B,CAAC,QAAQ,CAAC,EACjD,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,KAClD,IAAI,CAyYZ,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,iBAAiB,EAAE;QACf,GAAG,EAAE;YACD,OAAO,EAAE,OAAO,CAAC;YACjB,eAAe,EAAE,sBAAsB,EAAE,CAAC;SAC7C,CAAC;KACL,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACpB,EAAE,+BAA+B,QAQjC"}

package/dist/cjs/authorization/organizationMemberAbility.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyOrganizationMemberStaticAbilities = void 0;
 exports.default = applyOrganizationMemberAbilities;
 const projects_1 = require("../types/projects");
 const space_1 = require("../types/space");
@@ -9,7 +10,7 @@ const applyOrganizationMemberDynamicAbilities = ({ role, builder: { can }, permi
         can('manage', 'PersonalAccessToken', {});
     }
 };
-const applyOrganizationMemberStaticAbilities = {
+exports.applyOrganizationMemberStaticAbilities = {
     member(member, { can }) {
         can('view', 'OrganizationMemberProfile', {
             organizationUuid: member.organizationUuid,
@@ -22,7 +23,7 @@ const applyOrganizationMemberStaticAbilities = {
         });
     },
     viewer(member, { can }) {
-        applyOrganizationMemberStaticAbilities.member(member, { can });
+        exports.applyOrganizationMemberStaticAbilities.member(member, { can });
         can('view', 'Dashboard', {
             organizationUuid: member.organizationUuid,
             inheritsFromOrgOrProject: true,
@@ -90,7 +91,7 @@ const applyOrganizationMemberStaticAbilities = {
         });
     },
     interactive_viewer(member, { can }) {
-        applyOrganizationMemberStaticAbilities.viewer(member, { can });
+        exports.applyOrganizationMemberStaticAbilities.viewer(member, { can });
         can('create', 'Job');
         can('view', 'Job', { userUuid: member.userUuid });
         can('view', 'UnderlyingData', {
@@ -212,7 +213,7 @@ const applyOrganizationMemberStaticAbilities = {
         });
     },
     editor(member, { can }) {
-        applyOrganizationMemberStaticAbilities.interactive_viewer(member, {
+        exports.applyOrganizationMemberStaticAbilities.interactive_viewer(member, {
             can,
         });
         can('manage', 'Space', {
@@ -243,7 +244,7 @@ const applyOrganizationMemberStaticAbilities = {
         });
     },
     developer(member, { can }) {
-        applyOrganizationMemberStaticAbilities.editor(member, { can });
+        exports.applyOrganizationMemberStaticAbilities.editor(member, { can });
         can('manage', 'PreAggregation', {
             organizationUuid: member.organizationUuid,
         });
@@ -323,7 +324,7 @@ const applyOrganizationMemberStaticAbilities = {
         });
     },
     admin(member, { can }) {
-        applyOrganizationMemberStaticAbilities.developer(member, { can });
+        exports.applyOrganizationMemberStaticAbilities.developer(member, { can });
         can('manage', 'DataApp', {
             organizationUuid: member.organizationUuid,
         });
@@ -395,7 +396,7 @@ const applyOrganizationMemberStaticAbilities = {
     },
 };
 function applyOrganizationMemberAbilities({ role, member, builder, permissionsConfig, }) {
-    applyOrganizationMemberStaticAbilities[role](member, builder);
+    exports.applyOrganizationMemberStaticAbilities[role](member, builder);
     applyOrganizationMemberDynamicAbilities({
         role,
         member,

package/dist/cjs/authorization/organizationMemberAbility.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":";;AAkbA,mDAaC;AA1bD,gDAAgD;AAChD,0CAAiD;AAGjD,MAAM,uCAAuC,GAAG,CAAC,EAC7C,IAAI,EACJ,OAAO,EAAE,EAAE,GAAG,EAAE,EAChB,iBAAiB,GACa,EAAE,EAAE;IAClC,IACI,iBAAiB,CAAC,GAAG,CAAC,OAAO;QAC7B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtD,CAAC;QACC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAMxC;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,kEAAkE;QAClE,4DAA4D;QAC5D,gDAAgD;QAChD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YAC9D,GAAG;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACjB,sCAAsC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAElE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,OAAO,EAAE,sBAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kCAAkC,EAAE;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAcF,SAAwB,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACa;IAC9B,sCAAsC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,uCAAuC,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,iBAAiB;KACpB,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"organizationMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":";;;AAkbA,mDAaC;AA1bD,gDAAgD;AAChD,0CAAiD;AAGjD,MAAM,uCAAuC,GAAG,CAAC,EAC7C,IAAI,EACJ,OAAO,EAAE,EAAE,GAAG,EAAE,EAChB,iBAAiB,GACa,EAAE,EAAE;IAClC,IACI,iBAAiB,CAAC,GAAG,CAAC,OAAO;QAC7B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtD,CAAC;QACC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEW,QAAA,sCAAsC,GAM/C;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,8CAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,8CAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,kEAAkE;QAClE,4DAA4D;QAC5D,gDAAgD;QAChD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,8CAAsC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YAC9D,GAAG;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,8CAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,uBAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACjB,8CAAsC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAElE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,OAAO,EAAE,sBAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kCAAkC,EAAE;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAcF,SAAwB,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACa;IAC9B,8CAAsC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,uCAAuC,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,iBAAiB;KACpB,CAAC,CAAC;AACP,CAAC"}

package/dist/cjs/authorization/serviceAccountAbility.d.ts

@@ -4,8 +4,9 @@ import { type MemberAbility } from './types';
 type ServiceAccountAbilitiesArgs = {
     organizationUuid: string;
     builder: Pick<AbilityBuilder<MemberAbility>, 'can'>;
+    userUuid: string;
 };
-export declare const applyServiceAccountAbilities: ({ organizationUuid, builder, scopes, }: ServiceAccountAbilitiesArgs & {
+export declare const applyServiceAccountAbilities: ({ organizationUuid, userUuid, builder, scopes, }: ServiceAccountAbilitiesArgs & {
     scopes: ServiceAccountScope[];
 }) => void;
 export {};

package/dist/cjs/authorization/serviceAccountAbility.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serviceAccountAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,2BAA2B,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;CACvD,CAAC;AAoVF,eAAO,MAAM,4BAA4B,GAAI,wCAI1C,2BAA2B,GAAG;IAC7B,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC,SAOA,CAAC"}
+{"version":3,"file":"serviceAccountAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIlE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,2BAA2B,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IAMpD,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAmZF,eAAO,MAAM,4BAA4B,GAAI,kDAK1C,2BAA2B,GAAG;IAC7B,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC,SAQA,CAAC"}

package/dist/cjs/authorization/serviceAccountAbility.js

@@ -2,7 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.applyServiceAccountAbilities = void 0;
 const types_1 = require("../ee/serviceAccounts/types");
+const organizationMemberProfile_1 = require("../types/organizationMemberProfile");
 const projects_1 = require("../types/projects");
+const organizationMemberAbility_1 = require("./organizationMemberAbility");
 const applyServiceAccountStaticAbilities = {
     [types_1.ServiceAccountScope.ORG_READ]: ({ organizationUuid, builder: { can }, }) => {
         can('view', 'OrganizationMemberProfile', {
@@ -151,9 +153,10 @@ const applyServiceAccountStaticAbilities = {
             organizationUuid,
         });
     },
-    [types_1.ServiceAccountScope.ORG_EDIT]: ({ organizationUuid, builder: { can }, }) => {
+    [types_1.ServiceAccountScope.ORG_EDIT]: ({ organizationUuid, userUuid, builder: { can }, }) => {
         applyServiceAccountStaticAbilities[types_1.ServiceAccountScope.ORG_READ]({
             organizationUuid,
+            userUuid,
             builder: { can },
         });
         can('manage', 'Space', {
@@ -182,10 +185,19 @@ const applyServiceAccountStaticAbilities = {
         can('manage', 'MetricsTree', {
             organizationUuid,
         });
+        // CLI-driven content-as-code upload (`lightdash upload`) runs as an
+        // SA with `org:edit`. Pre-Phase-C the auth middleware spoofed the
+        // admin user so the call was implicitly allowed; the cutover to a
+        // dedicated SA identity dropped that side-effect, so we restore it
+        // here explicitly to preserve the existing CI workflow.
+        can('manage', 'ContentAsCode', {
+            organizationUuid,
+        });
     },
-    [types_1.ServiceAccountScope.ORG_ADMIN]: ({ organizationUuid, builder: { can }, }) => {
+    [types_1.ServiceAccountScope.ORG_ADMIN]: ({ organizationUuid, userUuid, builder: { can }, }) => {
         applyServiceAccountStaticAbilities[types_1.ServiceAccountScope.ORG_EDIT]({
             organizationUuid,
+            userUuid,
             builder: { can },
         });
         can('manage', 'PreAggregation', {
@@ -315,11 +327,30 @@ const applyServiceAccountStaticAbilities = {
             organizationUuid,
         });
     },
+    // System-role aliases. Each one delegates to the matching org-member
+    // ability builder so the SA's CASL is exactly the user-with-this-role
+    // shape — no parallel scope mapping to drift out of sync.
+    [types_1.ServiceAccountScope.SYSTEM_ADMIN]: ({ organizationUuid, userUuid, builder: { can }, }) => {
+        organizationMemberAbility_1.applyOrganizationMemberStaticAbilities[organizationMemberProfile_1.OrganizationMemberRole.ADMIN]({ organizationUuid, userUuid }, { can });
+    },
+    [types_1.ServiceAccountScope.SYSTEM_DEVELOPER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
+        organizationMemberAbility_1.applyOrganizationMemberStaticAbilities[organizationMemberProfile_1.OrganizationMemberRole.DEVELOPER]({ organizationUuid, userUuid }, { can });
+    },
+    [types_1.ServiceAccountScope.SYSTEM_EDITOR]: ({ organizationUuid, userUuid, builder: { can }, }) => {
+        organizationMemberAbility_1.applyOrganizationMemberStaticAbilities[organizationMemberProfile_1.OrganizationMemberRole.EDITOR]({ organizationUuid, userUuid }, { can });
+    },
+    [types_1.ServiceAccountScope.SYSTEM_INTERACTIVE_VIEWER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
+        organizationMemberAbility_1.applyOrganizationMemberStaticAbilities[organizationMemberProfile_1.OrganizationMemberRole.INTERACTIVE_VIEWER]({ organizationUuid, userUuid }, { can });
+    },
+    [types_1.ServiceAccountScope.SYSTEM_VIEWER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
+        organizationMemberAbility_1.applyOrganizationMemberStaticAbilities[organizationMemberProfile_1.OrganizationMemberRole.VIEWER]({ organizationUuid, userUuid }, { can });
+    },
 };
-const applyServiceAccountAbilities = ({ organizationUuid, builder, scopes, }) => {
+const applyServiceAccountAbilities = ({ organizationUuid, userUuid, builder, scopes, }) => {
     scopes.forEach((scope) => {
         applyServiceAccountStaticAbilities[scope]({
             organizationUuid,
+            userUuid,
             builder,
         });
     });

package/dist/cjs/authorization/serviceAccountAbility.js.map

@@ -1 +1 @@
-{"version":3,"file":"serviceAccountAbility.js","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":";;;AACA,uDAAkE;AAClE,gDAAgD;AAQhD,MAAM,kCAAkC,GAGpC;IACA,CAAC,2BAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,+BAA+B;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB;;;iBAGK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;YAChB,sBAAsB;SACzB,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CACC,MAAM,EACN,KAAK,CAER,CAAC;QACF,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,2BAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAC9B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,2BAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;YAChB,uBAAuB;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,OAAO,EAAE,sBAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,WAAW,CAAC,EAAE,CAAC,EAChC,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAEK,MAAM,4BAA4B,GAAG,CAAC,EACzC,gBAAgB,EAChB,OAAO,EACP,MAAM,GAGT,EAAE,EAAE;IACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,kCAAkC,CAAC,KAAK,CAAC,CAAC;YACtC,gBAAgB;YAChB,OAAO;SACV,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAbW,QAAA,4BAA4B,gCAavC"}
+{"version":3,"file":"serviceAccountAbility.js","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":";;;AACA,uDAAkE;AAClE,kFAA4E;AAC5E,gDAAgD;AAChD,2EAAqF;AAcrF,MAAM,kCAAkC,GAGpC;IACA,CAAC,2BAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,+BAA+B;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB;;;iBAGK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;YAChB,sBAAsB;SACzB,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CACC,MAAM,EACN,KAAK,CAER,CAAC;QACF,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,2BAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,wDAAwD;QACxD,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAC9B,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,2BAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,sBAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;YAChB,uBAAuB;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,OAAO,EAAE,sBAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,2BAAmB,CAAC,WAAW,CAAC,EAAE,CAAC,EAChC,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,qEAAqE;IACrE,sEAAsE;IACtE,0DAA0D;IAC1D,CAAC,2BAAmB,CAAC,YAAY,CAAC,EAAE,CAAC,EACjC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kEAAsC,CAAC,kDAAsB,CAAC,KAAK,CAAC,CAChE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IACD,CAAC,2BAAmB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EACrC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kEAAsC,CAClC,kDAAsB,CAAC,SAAS,CACnC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,CAAC,2BAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAClC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kEAAsC,CAAC,kDAAsB,CAAC,MAAM,CAAC,CACjE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IACD,CAAC,2BAAmB,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAC9C,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kEAAsC,CAClC,kDAAsB,CAAC,kBAAkB,CAC5C,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,CAAC,2BAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAClC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kEAAsC,CAAC,kDAAsB,CAAC,MAAM,CAAC,CACjE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;CACJ,CAAC;AAEK,MAAM,4BAA4B,GAAG,CAAC,EACzC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EACP,MAAM,GAGT,EAAE,EAAE;IACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,kCAAkC,CAAC,KAAK,CAAC,CAAC;YACtC,gBAAgB;YAChB,QAAQ;YACR,OAAO;SACV,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAfW,QAAA,4BAA4B,gCAevC"}

package/dist/cjs/ee/serviceAccounts/types.d.ts

@@ -2,7 +2,12 @@ export declare enum ServiceAccountScope {
     SCIM_MANAGE = "scim:manage",
     ORG_ADMIN = "org:admin",
     ORG_EDIT = "org:edit",
-    ORG_READ = "org:read"
+    ORG_READ = "org:read",
+    SYSTEM_ADMIN = "system:admin",
+    SYSTEM_DEVELOPER = "system:developer",
+    SYSTEM_EDITOR = "system:editor",
+    SYSTEM_INTERACTIVE_VIEWER = "system:interactive_viewer",
+    SYSTEM_VIEWER = "system:viewer"
 }
 export type ServiceAccount = {
     uuid: string;
@@ -15,14 +20,21 @@ export type ServiceAccount = {
     rotatedAt: Date | null;
     scopes: ServiceAccountScope[];
     userUuid: string;
+    roleUuid: string | null;
 };
 export type ServiceAccountWithToken = ServiceAccount & {
     token: string;
 };
-export type ApiCreateServiceAccountRequest = Pick<ServiceAccount, 'expiresAt' | 'description' | 'scopes'>;
+export type ApiCreateServiceAccountRequest = Pick<ServiceAccount, 'expiresAt' | 'description'> & {
+    scopes?: ServiceAccountScope[];
+    roleUuid?: string | null;
+};
 export type ApiCreateServiceAccountResponse = {
     token: string;
     expiresAt: Date;
 };
-export type CreateServiceAccount = Pick<ServiceAccount, 'organizationUuid' | 'expiresAt' | 'description' | 'scopes'>;
+export type CreateServiceAccount = Pick<ServiceAccount, 'organizationUuid' | 'expiresAt' | 'description'> & {
+    scopes?: ServiceAccountScope[];
+    roleUuid?: string | null;
+};
 //# sourceMappingURL=types.d.ts.map

package/dist/cjs/ee/serviceAccounts/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC3B,WAAW,gBAAgB;IAC3B,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACxB;AAED,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAK9B,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC7C,cAAc,EACd,WAAW,GAAG,aAAa,GAAG,QAAQ,CACzC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACnC,cAAc,EACd,kBAAkB,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,CAC9D,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC3B,WAAW,gBAAgB;IAK3B,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IAMrB,YAAY,iBAAiB;IAC7B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,yBAAyB,8BAA8B;IACvD,aAAa,kBAAkB;CAClC;AAED,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAK9B,QAAQ,EAAE,MAAM,CAAC;IAKjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC7C,cAAc,EACd,WAAW,GAAG,aAAa,CAC9B,GAAG;IAGA,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACnC,cAAc,EACd,kBAAkB,GAAG,WAAW,GAAG,aAAa,CACnD,GAAG;IACA,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC"}

package/dist/cjs/ee/serviceAccounts/types.js

@@ -4,8 +4,22 @@ exports.ServiceAccountScope = void 0;
 var ServiceAccountScope;
 (function (ServiceAccountScope) {
     ServiceAccountScope["SCIM_MANAGE"] = "scim:manage";
+    // Legacy coarse-grained SA scopes — kept on the wire for back-compat
+    // with tokens minted before system-role aliases existed. New tokens use
+    // the `SYSTEM_*` aliases below, which give the SA exactly the same CASL
+    // grants as a human user with that organization role.
     ServiceAccountScope["ORG_ADMIN"] = "org:admin";
     ServiceAccountScope["ORG_EDIT"] = "org:edit";
     ServiceAccountScope["ORG_READ"] = "org:read";
+    // System-role aliases. Each one delegates to the matching
+    // `applyOrganizationMemberStaticAbilities` block so the SA's runtime
+    // ability set is identical to a user assigned that org role. Member is
+    // intentionally not exposed — it grants near-zero abilities and isn't
+    // a useful SA shape.
+    ServiceAccountScope["SYSTEM_ADMIN"] = "system:admin";
+    ServiceAccountScope["SYSTEM_DEVELOPER"] = "system:developer";
+    ServiceAccountScope["SYSTEM_EDITOR"] = "system:editor";
+    ServiceAccountScope["SYSTEM_INTERACTIVE_VIEWER"] = "system:interactive_viewer";
+    ServiceAccountScope["SYSTEM_VIEWER"] = "system:viewer";
 })(ServiceAccountScope || (exports.ServiceAccountScope = ServiceAccountScope = {}));
 //# sourceMappingURL=types.js.map

package/dist/cjs/ee/serviceAccounts/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":";;;AAAA,IAAY,mBAKX;AALD,WAAY,mBAAmB;IAC3B,kDAA2B,CAAA;IAC3B,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,4CAAqB,CAAA;AACzB,CAAC,EALW,mBAAmB,mCAAnB,mBAAmB,QAK9B"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":";;;AAAA,IAAY,mBAmBX;AAnBD,WAAY,mBAAmB;IAC3B,kDAA2B,CAAA;IAC3B,qEAAqE;IACrE,wEAAwE;IACxE,wEAAwE;IACxE,sDAAsD;IACtD,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,4CAAqB,CAAA;IACrB,0DAA0D;IAC1D,qEAAqE;IACrE,uEAAuE;IACvE,sEAAsE;IACtE,qBAAqB;IACrB,oDAA6B,CAAA;IAC7B,4DAAqC,CAAA;IACrC,sDAA+B,CAAA;IAC/B,8EAAuD,CAAA;IACvD,sDAA+B,CAAA;AACnC,CAAC,EAnBW,mBAAmB,mCAAnB,mBAAmB,QAmB9B"}

package/dist/cjs/index.d.ts

@@ -15,6 +15,7 @@ export { defineUserAbility, getUserAbilityBuilder, JWT_HEADER_NAME, } from './au
 export * from './authorization/jwtAbility';
 export * from './authorization/parseAccount';
 export * from './authorization/roleToScopeMapping';
+export * from './authorization/scopeAbilityBuilder';
 export * from './authorization/scopes';
 export * from './authorization/serviceAccountAbility';
 export * from './authorization/space/spaceAccessResolver';