@lightdash/common 0.2884.3 → 0.2885.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (73) hide show
  1. package/dist/cjs/.tsbuildinfo +1 -1
  2. package/dist/cjs/authorization/getUserAbilityBuilder.test.d.ts +2 -0
  3. package/dist/cjs/authorization/getUserAbilityBuilder.test.d.ts.map +1 -0
  4. package/dist/cjs/authorization/getUserAbilityBuilder.test.js +172 -0
  5. package/dist/cjs/authorization/getUserAbilityBuilder.test.js.map +1 -0
  6. package/dist/cjs/authorization/index.d.ts.map +1 -1
  7. package/dist/cjs/authorization/index.js +27 -8
  8. package/dist/cjs/authorization/index.js.map +1 -1
  9. package/dist/cjs/authorization/organizationMemberAbility.d.ts +1 -0
  10. package/dist/cjs/authorization/organizationMemberAbility.d.ts.map +1 -1
  11. package/dist/cjs/authorization/organizationMemberAbility.js +8 -7
  12. package/dist/cjs/authorization/organizationMemberAbility.js.map +1 -1
  13. package/dist/cjs/authorization/serviceAccountAbility.d.ts +2 -1
  14. package/dist/cjs/authorization/serviceAccountAbility.d.ts.map +1 -1
  15. package/dist/cjs/authorization/serviceAccountAbility.js +34 -3
  16. package/dist/cjs/authorization/serviceAccountAbility.js.map +1 -1
  17. package/dist/cjs/ee/serviceAccounts/types.d.ts +15 -3
  18. package/dist/cjs/ee/serviceAccounts/types.d.ts.map +1 -1
  19. package/dist/cjs/ee/serviceAccounts/types.js +14 -0
  20. package/dist/cjs/ee/serviceAccounts/types.js.map +1 -1
  21. package/dist/cjs/index.d.ts +1 -0
  22. package/dist/cjs/index.d.ts.map +1 -1
  23. package/dist/cjs/index.js +1 -0
  24. package/dist/cjs/index.js.map +1 -1
  25. package/dist/esm/.tsbuildinfo +1 -1
  26. package/dist/esm/authorization/getUserAbilityBuilder.test.d.ts +2 -0
  27. package/dist/esm/authorization/getUserAbilityBuilder.test.d.ts.map +1 -0
  28. package/dist/esm/authorization/getUserAbilityBuilder.test.js +169 -0
  29. package/dist/esm/authorization/getUserAbilityBuilder.test.js.map +1 -0
  30. package/dist/esm/authorization/index.d.ts.map +1 -1
  31. package/dist/esm/authorization/index.js +27 -8
  32. package/dist/esm/authorization/index.js.map +1 -1
  33. package/dist/esm/authorization/organizationMemberAbility.d.ts +1 -0
  34. package/dist/esm/authorization/organizationMemberAbility.d.ts.map +1 -1
  35. package/dist/esm/authorization/organizationMemberAbility.js +1 -1
  36. package/dist/esm/authorization/organizationMemberAbility.js.map +1 -1
  37. package/dist/esm/authorization/serviceAccountAbility.d.ts +2 -1
  38. package/dist/esm/authorization/serviceAccountAbility.d.ts.map +1 -1
  39. package/dist/esm/authorization/serviceAccountAbility.js +34 -3
  40. package/dist/esm/authorization/serviceAccountAbility.js.map +1 -1
  41. package/dist/esm/ee/serviceAccounts/types.d.ts +15 -3
  42. package/dist/esm/ee/serviceAccounts/types.d.ts.map +1 -1
  43. package/dist/esm/ee/serviceAccounts/types.js +14 -0
  44. package/dist/esm/ee/serviceAccounts/types.js.map +1 -1
  45. package/dist/esm/index.d.ts +1 -0
  46. package/dist/esm/index.d.ts.map +1 -1
  47. package/dist/esm/index.js +1 -0
  48. package/dist/esm/index.js.map +1 -1
  49. package/dist/types/.tsbuildinfo +1 -1
  50. package/dist/types/authorization/getUserAbilityBuilder.test.d.ts +2 -0
  51. package/dist/types/authorization/getUserAbilityBuilder.test.d.ts.map +1 -0
  52. package/dist/types/authorization/getUserAbilityBuilder.test.js +169 -0
  53. package/dist/types/authorization/getUserAbilityBuilder.test.js.map +1 -0
  54. package/dist/types/authorization/index.d.ts.map +1 -1
  55. package/dist/types/authorization/index.js +27 -8
  56. package/dist/types/authorization/index.js.map +1 -1
  57. package/dist/types/authorization/organizationMemberAbility.d.ts +1 -0
  58. package/dist/types/authorization/organizationMemberAbility.d.ts.map +1 -1
  59. package/dist/types/authorization/organizationMemberAbility.js +1 -1
  60. package/dist/types/authorization/organizationMemberAbility.js.map +1 -1
  61. package/dist/types/authorization/serviceAccountAbility.d.ts +2 -1
  62. package/dist/types/authorization/serviceAccountAbility.d.ts.map +1 -1
  63. package/dist/types/authorization/serviceAccountAbility.js +34 -3
  64. package/dist/types/authorization/serviceAccountAbility.js.map +1 -1
  65. package/dist/types/ee/serviceAccounts/types.d.ts +15 -3
  66. package/dist/types/ee/serviceAccounts/types.d.ts.map +1 -1
  67. package/dist/types/ee/serviceAccounts/types.js +14 -0
  68. package/dist/types/ee/serviceAccounts/types.js.map +1 -1
  69. package/dist/types/index.d.ts +1 -0
  70. package/dist/types/index.d.ts.map +1 -1
  71. package/dist/types/index.js +1 -0
  72. package/dist/types/index.js.map +1 -1
  73. package/package.json +1 -1
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=getUserAbilityBuilder.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"getUserAbilityBuilder.test.d.ts","sourceRoot":"","sources":["../../../src/authorization/getUserAbilityBuilder.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,169 @@
1
+ import { Ability, AbilityBuilder } from '@casl/ability';
2
+ import { OrganizationMemberRole } from '../types/organizationMemberProfile';
3
+ import { getUserAbilityBuilder } from './index';
4
+ import applyOrganizationMemberAbilities from './organizationMemberAbility';
5
+ const ORG_UUID = 'test-org-uuid';
6
+ const USER_UUID = 'test-user-uuid';
7
+ const CUSTOM_ROLE_UUID = '11111111-1111-4111-a111-111111111111';
8
+ const PERMISSIONS_CONFIG = {
9
+ pat: { enabled: false, allowedOrgRoles: [] },
10
+ };
11
+ const buildExpected = (role) => {
12
+ const builder = new AbilityBuilder(Ability);
13
+ applyOrganizationMemberAbilities({
14
+ role,
15
+ member: { organizationUuid: ORG_UUID, userUuid: USER_UUID },
16
+ builder,
17
+ permissionsConfig: PERMISSIONS_CONFIG,
18
+ });
19
+ return builder.build().rules;
20
+ };
21
+ const ruleSetEqual = (a, b) => {
22
+ expect(a.length).toBe(b.length);
23
+ expect(JSON.stringify(a.slice().sort())).toBe(JSON.stringify(b.slice().sort()));
24
+ };
25
+ describe('getUserAbilityBuilder — org-level role resolution', () => {
26
+ describe('Backwards compatibility with system roles', () => {
27
+ it.each([
28
+ OrganizationMemberRole.MEMBER,
29
+ OrganizationMemberRole.VIEWER,
30
+ OrganizationMemberRole.INTERACTIVE_VIEWER,
31
+ OrganizationMemberRole.EDITOR,
32
+ OrganizationMemberRole.DEVELOPER,
33
+ OrganizationMemberRole.ADMIN,
34
+ ])('%s user without roleUuid uses the system role path (unchanged)', (role) => {
35
+ const builder = getUserAbilityBuilder({
36
+ user: {
37
+ role,
38
+ organizationUuid: ORG_UUID,
39
+ userUuid: USER_UUID,
40
+ roleUuid: undefined,
41
+ },
42
+ projectProfiles: [],
43
+ permissionsConfig: PERMISSIONS_CONFIG,
44
+ });
45
+ ruleSetEqual(builder.build().rules, buildExpected(role));
46
+ });
47
+ });
48
+ describe('Custom-roles feature flag', () => {
49
+ it('falls through to the system role path when customRolesEnabled=false (even if roleUuid is set)', () => {
50
+ const builder = getUserAbilityBuilder({
51
+ user: {
52
+ role: OrganizationMemberRole.ADMIN,
53
+ organizationUuid: ORG_UUID,
54
+ userUuid: USER_UUID,
55
+ roleUuid: CUSTOM_ROLE_UUID,
56
+ },
57
+ projectProfiles: [],
58
+ permissionsConfig: PERMISSIONS_CONFIG,
59
+ customRoleScopes: { [CUSTOM_ROLE_UUID]: ['view:Dashboard'] },
60
+ customRolesEnabled: false, // gate off
61
+ });
62
+ ruleSetEqual(builder.build().rules, buildExpected(OrganizationMemberRole.ADMIN));
63
+ });
64
+ it('falls through to the system role path when customRolesEnabled=true but the role has no scopes loaded', () => {
65
+ const builder = getUserAbilityBuilder({
66
+ user: {
67
+ role: OrganizationMemberRole.ADMIN,
68
+ organizationUuid: ORG_UUID,
69
+ userUuid: USER_UUID,
70
+ roleUuid: CUSTOM_ROLE_UUID,
71
+ },
72
+ projectProfiles: [],
73
+ permissionsConfig: PERMISSIONS_CONFIG,
74
+ customRoleScopes: {}, // no scopes for this role
75
+ customRolesEnabled: true,
76
+ });
77
+ ruleSetEqual(builder.build().rules, buildExpected(OrganizationMemberRole.ADMIN));
78
+ });
79
+ });
80
+ describe('Org-level custom role active', () => {
81
+ it('uses the scope-derived path when roleUuid + customRolesEnabled + scopes are all present', () => {
82
+ // A custom role granting only view:Dashboard. Admin's normal
83
+ // abilities should NOT appear (e.g. manage:InviteLink).
84
+ const builder = getUserAbilityBuilder({
85
+ user: {
86
+ role: OrganizationMemberRole.ADMIN, // ignored — custom role wins
87
+ organizationUuid: ORG_UUID,
88
+ userUuid: USER_UUID,
89
+ roleUuid: CUSTOM_ROLE_UUID,
90
+ },
91
+ projectProfiles: [],
92
+ permissionsConfig: PERMISSIONS_CONFIG,
93
+ customRoleScopes: { [CUSTOM_ROLE_UUID]: ['view:Dashboard'] },
94
+ customRolesEnabled: true,
95
+ });
96
+ const ability = builder.build();
97
+ // Custom role grants what the scope says
98
+ expect(ability.rules.find((r) => r.subject === 'Dashboard')).toBeDefined();
99
+ // Admin abilities are NOT present
100
+ expect(ability.rules.find((r) => r.subject === 'InviteLink')).toBeUndefined();
101
+ expect(ability.rules.find((r) => r.subject === 'Organization')).toBeUndefined();
102
+ });
103
+ it('different custom roles produce different abilities (smoke)', () => {
104
+ const READ_ONLY_UUID = '22222222-2222-4222-a222-222222222222';
105
+ const EDIT_UUID = '33333333-3333-4333-a333-333333333333';
106
+ const readOnlyBuilder = getUserAbilityBuilder({
107
+ user: {
108
+ role: OrganizationMemberRole.MEMBER,
109
+ organizationUuid: ORG_UUID,
110
+ userUuid: USER_UUID,
111
+ roleUuid: READ_ONLY_UUID,
112
+ },
113
+ projectProfiles: [],
114
+ permissionsConfig: PERMISSIONS_CONFIG,
115
+ customRoleScopes: {
116
+ [READ_ONLY_UUID]: ['view:Dashboard'],
117
+ [EDIT_UUID]: ['view:Dashboard', 'manage:Dashboard'],
118
+ },
119
+ customRolesEnabled: true,
120
+ });
121
+ const editBuilder = getUserAbilityBuilder({
122
+ user: {
123
+ role: OrganizationMemberRole.MEMBER,
124
+ organizationUuid: ORG_UUID,
125
+ userUuid: USER_UUID,
126
+ roleUuid: EDIT_UUID,
127
+ },
128
+ projectProfiles: [],
129
+ permissionsConfig: PERMISSIONS_CONFIG,
130
+ customRoleScopes: {
131
+ [READ_ONLY_UUID]: ['view:Dashboard'],
132
+ [EDIT_UUID]: ['view:Dashboard', 'manage:Dashboard'],
133
+ },
134
+ customRolesEnabled: true,
135
+ });
136
+ const readOnlyRules = readOnlyBuilder.build().rules;
137
+ const editRules = editBuilder.build().rules;
138
+ // Edit role has manage rules; readOnly does not
139
+ expect(editRules.some((r) => r.action === 'manage')).toBe(true);
140
+ expect(readOnlyRules.some((r) => r.action === 'manage')).toBe(false);
141
+ });
142
+ });
143
+ describe('Project profile resolution still works alongside org-level custom roles', () => {
144
+ it('combines org system role with project-level system role', () => {
145
+ const PROJECT_UUID = 'test-project-uuid';
146
+ const builder = getUserAbilityBuilder({
147
+ user: {
148
+ role: OrganizationMemberRole.MEMBER,
149
+ organizationUuid: ORG_UUID,
150
+ userUuid: USER_UUID,
151
+ roleUuid: undefined,
152
+ },
153
+ projectProfiles: [
154
+ {
155
+ projectUuid: PROJECT_UUID,
156
+ role: 'admin', // ProjectMemberRole.ADMIN
157
+ userUuid: USER_UUID,
158
+ roleUuid: undefined,
159
+ },
160
+ ],
161
+ permissionsConfig: PERMISSIONS_CONFIG,
162
+ });
163
+ const { rules } = builder.build();
164
+ // Org member abilities (minimal) plus project admin abilities
165
+ expect(rules.length).toBeGreaterThan(0);
166
+ });
167
+ });
168
+ });
169
+ //# sourceMappingURL=getUserAbilityBuilder.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"getUserAbilityBuilder.test.js","sourceRoot":"","sources":["../../../src/authorization/getUserAbilityBuilder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,gCAAgC,MAAM,6BAA6B,CAAC;AAG3E,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,MAAM,kBAAkB,GAAG;IACvB,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE;CAC/C,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAA4B,EAAE,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAgB,OAAO,CAAC,CAAC;IAC3D,gCAAgC,CAAC;QAC7B,IAAI;QACJ,MAAM,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;QAC3D,OAAO;QACP,iBAAiB,EAAE,kBAAkB;KACxC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAY,EAAE,CAAY,EAAE,EAAE;IAChD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACzC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC;AACN,CAAC,CAAC;AAEF,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC/D,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,IAAI,CAAC;YACJ,sBAAsB,CAAC,MAAM;YAC7B,sBAAsB,CAAC,MAAM;YAC7B,sBAAsB,CAAC,kBAAkB;YACzC,sBAAsB,CAAC,MAAM;YAC7B,sBAAsB,CAAC,SAAS;YAChC,sBAAsB,CAAC,KAAK;SAC/B,CAAC,CACE,gEAAgE,EAChE,CAAC,IAAI,EAAE,EAAE;YACL,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBAClC,IAAI,EAAE;oBACF,IAAI;oBACJ,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;aACxC,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC,CACJ,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;YACrG,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,KAAK;oBAClC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE;gBAC5D,kBAAkB,EAAE,KAAK,EAAE,WAAW;aACzC,CAAC,CAAC;YACH,YAAY,CACR,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EACrB,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAC9C,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sGAAsG,EAAE,GAAG,EAAE;YAC5G,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,KAAK;oBAClC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,EAAE,0BAA0B;gBAChD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,YAAY,CACR,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EACrB,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAC9C,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;YAC/F,6DAA6D;YAC7D,wDAAwD;YACxD,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,KAAK,EAAE,6BAA6B;oBACjE,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,gBAAgB;iBAC7B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE;gBAC5D,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,yCAAyC;YACzC,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CACvD,CAAC,WAAW,EAAE,CAAC;YAChB,kCAAkC;YAClC,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,CACxD,CAAC,aAAa,EAAE,CAAC;YAClB,MAAM,CACF,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAC1D,CAAC,aAAa,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YAClE,MAAM,cAAc,GAAG,sCAAsC,CAAC;YAC9D,MAAM,SAAS,GAAG,sCAAsC,CAAC;YAEzD,MAAM,eAAe,GAAG,qBAAqB,CAAC;gBAC1C,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,cAAc;iBAC3B;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE;oBACd,CAAC,cAAc,CAAC,EAAE,CAAC,gBAAgB,CAAC;oBACpC,CAAC,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;iBACtD;gBACD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,qBAAqB,CAAC;gBACtC,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,kBAAkB;gBACrC,gBAAgB,EAAE;oBACd,CAAC,cAAc,CAAC,EAAE,CAAC,gBAAgB,CAAC;oBACpC,CAAC,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;iBACtD;gBACD,kBAAkB,EAAE,IAAI;aAC3B,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;YACpD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC;YAC5C,gDAAgD;YAChD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CACzD,KAAK,CACR,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACrF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAC/D,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC;gBAClC,IAAI,EAAE;oBACF,IAAI,EAAE,sBAAsB,CAAC,MAAM;oBACnC,gBAAgB,EAAE,QAAQ;oBAC1B,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACtB;gBACD,eAAe,EAAE;oBACb;wBACI,WAAW,EAAE,YAAY;wBACzB,IAAI,EAAE,OAAgB,EAAE,0BAA0B;wBAClD,QAAQ,EAAE,SAAS;wBACnB,QAAQ,EAAE,SAAS;qBACtB;iBACJ;gBACD,iBAAiB,EAAE,kBAAkB;aACxC,CAAC,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,8DAA8D;YAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,GAAI,mGAOnC,sBAAsB,kCAmDxB,CAAC;AAGF,eAAO,MAAM,iBAAiB,GAC1B,MAAM,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,EACD,iBAAiB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,EACH,mBAAmB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,cAAc,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAyC,EACrC,KAAK,+BAA+B,EACvC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,sBAAsB,GAAG;IAC1B,IAAI,EAAE,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,CAAC;IACF,eAAe,EAAE,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,CAAC;IACJ,iBAAiB,EAAE,+BAA+B,CAAC,mBAAmB,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,qBAAqB,GAAI,mGAOnC,sBAAsB,kCA0ExB,CAAC;AAGF,eAAO,MAAM,iBAAiB,GAC1B,MAAM,IAAI,CACN,aAAa,EACb,MAAM,GAAG,kBAAkB,GAAG,UAAU,GAAG,UAAU,CACxD,EACD,iBAAiB,IAAI,CACjB,oBAAoB,EACpB,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CACnD,EAAE,EACH,mBAAmB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,KACtE,aAaF,CAAC"}
@@ -7,16 +7,35 @@ export const JWT_HEADER_NAME = 'lightdash-embed-token';
7
7
  export const getUserAbilityBuilder = ({ user, projectProfiles, permissionsConfig, customRoleScopes, customRolesEnabled, isEnterprise, }) => {
8
8
  const builder = new AbilityBuilder(Ability);
9
9
  if (user.role && user.organizationUuid) {
10
- // TODO custom roles at organization level are not supported yet
11
- applyOrganizationMemberAbilities({
12
- role: user.role,
13
- member: {
10
+ // Org-level custom role: if the user's organization_memberships row
11
+ // points at a role_uuid AND custom roles are enabled AND we have the
12
+ // role's scopes, build CASL from those scopes (same path as
13
+ // project-level custom roles below). Falls back to the system role
14
+ // path otherwise.
15
+ const orgCustomRoleScopes = customRolesEnabled && user.roleUuid
16
+ ? customRoleScopes?.[user.roleUuid]
17
+ : undefined;
18
+ if (orgCustomRoleScopes) {
19
+ buildAbilityFromScopes({
14
20
  organizationUuid: user.organizationUuid,
15
21
  userUuid: user.userUuid,
16
- },
17
- builder,
18
- permissionsConfig,
19
- });
22
+ scopes: orgCustomRoleScopes,
23
+ isEnterprise,
24
+ organizationRole: user.role,
25
+ permissionsConfig,
26
+ }, builder);
27
+ }
28
+ else {
29
+ applyOrganizationMemberAbilities({
30
+ role: user.role,
31
+ member: {
32
+ organizationUuid: user.organizationUuid,
33
+ userUuid: user.userUuid,
34
+ },
35
+ builder,
36
+ permissionsConfig,
37
+ });
38
+ }
20
39
  projectProfiles.forEach((projectProfile) => {
21
40
  if (projectProfile.roleUuid && customRolesEnabled) {
22
41
  if (!user.organizationUuid) {
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,gCAEN,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAkB/D,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,cAAc,CAAgB,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,gEAAgE;QAChE,gCAAgC,CAAC;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE;gBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;aAC1B;YACD,OAAO;YACP,iBAAiB;SACpB,CAAC,CAAC;QAEH,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,IAAI,cAAc,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,aAAa,CACnB,0BAA0B,IAAI,CAAC,gBAAgB,gBAAgB,CAClE,CAAC;gBACN,CAAC;gBAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACT,yBAAyB,cAAc,CAAC,QAAQ,gBAAgB,CACnE,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,sBAAsB,CAClB;oBACI,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,YAAY;oBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;oBAC3B,iBAAiB;iBACpB,EACD,OAAO,CACV,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,sBAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAEF,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC7B,IAGC,EACD,eAGG,EACH,gBAAqE,EACxD,EAAE;IACf,MAAM,OAAO,GAAG,qBAAqB,CAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;QACD,gBAAgB;KACnB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,gCAEN,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAkB/D,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAClC,IAAI,EACJ,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,GACS,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,IAAI,cAAc,CAAgB,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACrC,oEAAoE;QACpE,qEAAqE;QACrE,4DAA4D;QAC5D,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,mBAAmB,GACrB,kBAAkB,IAAI,IAAI,CAAC,QAAQ;YAC/B,CAAC,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnC,CAAC,CAAC,SAAS,CAAC;QAEpB,IAAI,mBAAmB,EAAE,CAAC;YACtB,sBAAsB,CAClB;gBACI,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,mBAAmB;gBAC3B,YAAY;gBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;gBAC3B,iBAAiB;aACpB,EACD,OAAO,CACV,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,gCAAgC,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE;oBACJ,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBAC1B;gBACD,OAAO;gBACP,iBAAiB;aACpB,CAAC,CAAC;QACP,CAAC;QAED,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;YACvC,IAAI,cAAc,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,aAAa,CACnB,0BAA0B,IAAI,CAAC,gBAAgB,gBAAgB,CAClE,CAAC;gBACN,CAAC;gBAED,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;oBACV,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACT,yBAAyB,cAAc,CAAC,QAAQ,gBAAgB,CACnE,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,sBAAsB,CAClB;oBACI,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM;oBACN,YAAY;oBACZ,gBAAgB,EAAE,IAAI,CAAC,IAAI;oBAC3B,iBAAiB;iBACpB,EACD,OAAO,CACV,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,sBAAsB,CAAC,cAAc,CAAC,IAAI,CAAC,CACvC,cAAc,EACd,OAAO,CACV,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAEF,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC7B,IAGC,EACD,eAGG,EACH,gBAAqE,EACxD,EAAE;IACf,MAAM,OAAO,GAAG,qBAAqB,CAAC;QAClC,IAAI;QACJ,eAAe;QACf,iBAAiB,EAAE;YACf,GAAG,EAAE;gBACD,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,EAAE;aACtB;SACJ;QACD,gBAAgB;KACnB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC,CAAC"}
@@ -1,6 +1,7 @@
1
1
  import { type AbilityBuilder } from '@casl/ability';
2
2
  import { type OrganizationMemberProfile, type OrganizationMemberRole } from '../types/organizationMemberProfile';
3
3
  import { type MemberAbility } from './types';
4
+ export declare const applyOrganizationMemberStaticAbilities: Record<OrganizationMemberRole, (member: OrganizationMemberAbilitiesArgs['member'], builder: OrganizationMemberAbilitiesArgs['builder']) => void>;
4
5
  export type OrganizationMemberAbilitiesArgs = {
5
6
  role: OrganizationMemberRole;
6
7
  member: Pick<OrganizationMemberProfile, 'organizationUuid' | 'userUuid'>;
@@ -1 +1 @@
1
- {"version":3,"file":"organizationMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACH,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC9B,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AA+Z7C,MAAM,MAAM,+BAA+B,GAAG;IAC1C,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,iBAAiB,EAAE;QACf,GAAG,EAAE;YACD,OAAO,EAAE,OAAO,CAAC;YACjB,eAAe,EAAE,sBAAsB,EAAE,CAAC;SAC7C,CAAC;KACL,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACpB,EAAE,+BAA+B,QAQjC"}
1
+ {"version":3,"file":"organizationMemberAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACH,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC9B,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAe7C,eAAO,MAAM,sCAAsC,EAAE,MAAM,CACvD,sBAAsB,EACtB,CACI,MAAM,EAAE,+BAA+B,CAAC,QAAQ,CAAC,EACjD,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,KAClD,IAAI,CAyYZ,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,yBAAyB,EAAE,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,iBAAiB,EAAE;QACf,GAAG,EAAE;YACD,OAAO,EAAE,OAAO,CAAC;YACjB,eAAe,EAAE,sBAAsB,EAAE,CAAC;SAC7C,CAAC;KACL,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACpB,EAAE,+BAA+B,QAQjC"}
@@ -6,7 +6,7 @@ const applyOrganizationMemberDynamicAbilities = ({ role, builder: { can }, permi
6
6
  can('manage', 'PersonalAccessToken', {});
7
7
  }
8
8
  };
9
- const applyOrganizationMemberStaticAbilities = {
9
+ export const applyOrganizationMemberStaticAbilities = {
10
10
  member(member, { can }) {
11
11
  can('view', 'OrganizationMemberProfile', {
12
12
  organizationUuid: member.organizationUuid,
@@ -1 +1 @@
1
- {"version":3,"file":"organizationMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,MAAM,uCAAuC,GAAG,CAAC,EAC7C,IAAI,EACJ,OAAO,EAAE,EAAE,GAAG,EAAE,EAChB,iBAAiB,GACa,EAAE,EAAE;IAClC,IACI,iBAAiB,CAAC,GAAG,CAAC,OAAO;QAC7B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtD,CAAC;QACC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAMxC;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,kEAAkE;QAClE,4DAA4D;QAC5D,gDAAgD;QAChD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YAC9D,GAAG;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACjB,sCAAsC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAElE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kCAAkC,EAAE;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAcF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACa;IAC9B,sCAAsC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,uCAAuC,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,iBAAiB;KACpB,CAAC,CAAC;AACP,CAAC"}
1
+ {"version":3,"file":"organizationMemberAbility.js","sourceRoot":"","sources":["../../../src/authorization/organizationMemberAbility.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGjD,MAAM,uCAAuC,GAAG,CAAC,EAC7C,IAAI,EACJ,OAAO,EAAE,EAAE,GAAG,EAAE,EAChB,iBAAiB,GACa,EAAE,EAAE;IAClC,IACI,iBAAiB,CAAC,GAAG,CAAC,OAAO;QAC7B,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtD,CAAC;QACC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAM/C;IACA,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC5C;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAC9B,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QACH,kEAAkE;QAClE,4DAA4D;QAC5D,gDAAgD;QAChD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,KAAK;iBAC9B;aACJ;SACJ,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QAClB,sCAAsC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YAC9D,GAAG;SACN,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,kCAAkC,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACrB,sCAAsC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE;gBACJ,UAAU,EAAE;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,eAAe,CAAC,MAAM;iBAC/B;aACJ;SACJ,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;YACzB,iBAAiB,EAAE,MAAM,CAAC,QAAQ;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;QACjB,sCAAsC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAElE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kCAAkC,EAAE;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE;YACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAcF,MAAM,CAAC,OAAO,UAAU,gCAAgC,CAAC,EACrD,IAAI,EACJ,MAAM,EACN,OAAO,EACP,iBAAiB,GACa;IAC9B,sCAAsC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,uCAAuC,CAAC;QACpC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,iBAAiB;KACpB,CAAC,CAAC;AACP,CAAC"}
@@ -4,8 +4,9 @@ import { type MemberAbility } from './types';
4
4
  type ServiceAccountAbilitiesArgs = {
5
5
  organizationUuid: string;
6
6
  builder: Pick<AbilityBuilder<MemberAbility>, 'can'>;
7
+ userUuid: string;
7
8
  };
8
- export declare const applyServiceAccountAbilities: ({ organizationUuid, builder, scopes, }: ServiceAccountAbilitiesArgs & {
9
+ export declare const applyServiceAccountAbilities: ({ organizationUuid, userUuid, builder, scopes, }: ServiceAccountAbilitiesArgs & {
9
10
  scopes: ServiceAccountScope[];
10
11
  }) => void;
11
12
  export {};
@@ -1 +1 @@
1
- {"version":3,"file":"serviceAccountAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,2BAA2B,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;CACvD,CAAC;AAoVF,eAAO,MAAM,4BAA4B,GAAI,wCAI1C,2BAA2B,GAAG;IAC7B,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC,SAOA,CAAC"}
1
+ {"version":3,"file":"serviceAccountAbility.d.ts","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIlE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,2BAA2B,GAAG;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IAMpD,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAmZF,eAAO,MAAM,4BAA4B,GAAI,kDAK1C,2BAA2B,GAAG;IAC7B,MAAM,EAAE,mBAAmB,EAAE,CAAC;CACjC,SAQA,CAAC"}
@@ -1,5 +1,7 @@
1
1
  import { ServiceAccountScope } from '../ee/serviceAccounts/types';
2
+ import { OrganizationMemberRole } from '../types/organizationMemberProfile';
2
3
  import { ProjectType } from '../types/projects';
4
+ import { applyOrganizationMemberStaticAbilities } from './organizationMemberAbility';
3
5
  const applyServiceAccountStaticAbilities = {
4
6
  [ServiceAccountScope.ORG_READ]: ({ organizationUuid, builder: { can }, }) => {
5
7
  can('view', 'OrganizationMemberProfile', {
@@ -148,9 +150,10 @@ const applyServiceAccountStaticAbilities = {
148
150
  organizationUuid,
149
151
  });
150
152
  },
151
- [ServiceAccountScope.ORG_EDIT]: ({ organizationUuid, builder: { can }, }) => {
153
+ [ServiceAccountScope.ORG_EDIT]: ({ organizationUuid, userUuid, builder: { can }, }) => {
152
154
  applyServiceAccountStaticAbilities[ServiceAccountScope.ORG_READ]({
153
155
  organizationUuid,
156
+ userUuid,
154
157
  builder: { can },
155
158
  });
156
159
  can('manage', 'Space', {
@@ -179,10 +182,19 @@ const applyServiceAccountStaticAbilities = {
179
182
  can('manage', 'MetricsTree', {
180
183
  organizationUuid,
181
184
  });
185
+ // CLI-driven content-as-code upload (`lightdash upload`) runs as an
186
+ // SA with `org:edit`. Pre-Phase-C the auth middleware spoofed the
187
+ // admin user so the call was implicitly allowed; the cutover to a
188
+ // dedicated SA identity dropped that side-effect, so we restore it
189
+ // here explicitly to preserve the existing CI workflow.
190
+ can('manage', 'ContentAsCode', {
191
+ organizationUuid,
192
+ });
182
193
  },
183
- [ServiceAccountScope.ORG_ADMIN]: ({ organizationUuid, builder: { can }, }) => {
194
+ [ServiceAccountScope.ORG_ADMIN]: ({ organizationUuid, userUuid, builder: { can }, }) => {
184
195
  applyServiceAccountStaticAbilities[ServiceAccountScope.ORG_EDIT]({
185
196
  organizationUuid,
197
+ userUuid,
186
198
  builder: { can },
187
199
  });
188
200
  can('manage', 'PreAggregation', {
@@ -312,11 +324,30 @@ const applyServiceAccountStaticAbilities = {
312
324
  organizationUuid,
313
325
  });
314
326
  },
327
+ // System-role aliases. Each one delegates to the matching org-member
328
+ // ability builder so the SA's CASL is exactly the user-with-this-role
329
+ // shape — no parallel scope mapping to drift out of sync.
330
+ [ServiceAccountScope.SYSTEM_ADMIN]: ({ organizationUuid, userUuid, builder: { can }, }) => {
331
+ applyOrganizationMemberStaticAbilities[OrganizationMemberRole.ADMIN]({ organizationUuid, userUuid }, { can });
332
+ },
333
+ [ServiceAccountScope.SYSTEM_DEVELOPER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
334
+ applyOrganizationMemberStaticAbilities[OrganizationMemberRole.DEVELOPER]({ organizationUuid, userUuid }, { can });
335
+ },
336
+ [ServiceAccountScope.SYSTEM_EDITOR]: ({ organizationUuid, userUuid, builder: { can }, }) => {
337
+ applyOrganizationMemberStaticAbilities[OrganizationMemberRole.EDITOR]({ organizationUuid, userUuid }, { can });
338
+ },
339
+ [ServiceAccountScope.SYSTEM_INTERACTIVE_VIEWER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
340
+ applyOrganizationMemberStaticAbilities[OrganizationMemberRole.INTERACTIVE_VIEWER]({ organizationUuid, userUuid }, { can });
341
+ },
342
+ [ServiceAccountScope.SYSTEM_VIEWER]: ({ organizationUuid, userUuid, builder: { can }, }) => {
343
+ applyOrganizationMemberStaticAbilities[OrganizationMemberRole.VIEWER]({ organizationUuid, userUuid }, { can });
344
+ },
315
345
  };
316
- export const applyServiceAccountAbilities = ({ organizationUuid, builder, scopes, }) => {
346
+ export const applyServiceAccountAbilities = ({ organizationUuid, userUuid, builder, scopes, }) => {
317
347
  scopes.forEach((scope) => {
318
348
  applyServiceAccountStaticAbilities[scope]({
319
349
  organizationUuid,
350
+ userUuid,
320
351
  builder,
321
352
  });
322
353
  });
@@ -1 +1 @@
1
- {"version":3,"file":"serviceAccountAbility.js","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQhD,MAAM,kCAAkC,GAGpC;IACA,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,+BAA+B;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB;;;iBAGK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;YAChB,sBAAsB;SACzB,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CACC,MAAM,EACN,KAAK,CAER,CAAC;QACF,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAC9B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;YAChB,uBAAuB;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC,EAChC,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,EACzC,gBAAgB,EAChB,OAAO,EACP,MAAM,GAGT,EAAE,EAAE;IACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,kCAAkC,CAAC,KAAK,CAAC,CAAC;YACtC,gBAAgB;YAChB,OAAO;SACV,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC"}
1
+ {"version":3,"file":"serviceAccountAbility.js","sourceRoot":"","sources":["../../../src/authorization/serviceAccountAbility.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAC;AAcrF,MAAM,kCAAkC,GAGpC;IACA,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,MAAM,EAAE,2BAA2B,EAAE;YACrC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;QACrB,+BAA+B;SAClC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE;YACtB,gBAAgB;YAChB;;;iBAGK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;YACjB,gBAAgB;YAChB;;iBAEK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE;YAC7B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE;YAChB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE;YAChC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;YAChB,sBAAsB;SACzB,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CACC,MAAM,EACN,KAAK,CAER,CAAC;QACF,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE;YAC9B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC7B,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;YAChB,wBAAwB,EAAE,IAAI;SACjC,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE;YAC/B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE;YAClB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,wDAAwD;QACxD,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAC9B,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,kCAAkC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC7D,gBAAgB;YAChB,QAAQ;YACR,OAAO,EAAE,EAAE,GAAG,EAAE;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE;YACzB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE;YACxB,gBAAgB;YAChB;;;;;iBAKK;SACR,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE;YAC5B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,WAAW,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE;YAClC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,qBAAqB,EAAE;YACjC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;YAChB,uBAAuB;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE;YACvB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;YAChB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SAC5D,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE;YACxB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC1B,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE;YACrB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;YACzB,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC3B,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC,EAChC,gBAAgB,EAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE;YACvC,gBAAgB;SACnB,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE;YACnB,gBAAgB;SACnB,CAAC,CAAC;IACP,CAAC;IACD,qEAAqE;IACrE,sEAAsE;IACtE,0DAA0D;IAC1D,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC,EACjC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,sCAAsC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAChE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IACD,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,EAAE,CAAC,EACrC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,sCAAsC,CAClC,sBAAsB,CAAC,SAAS,CACnC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAClC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,sCAAsC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CACjE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;IACD,CAAC,mBAAmB,CAAC,yBAAyB,CAAC,EAAE,CAAC,EAC9C,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,sCAAsC,CAClC,sBAAsB,CAAC,kBAAkB,CAC5C,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAClC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EAAE,EAAE,GAAG,EAAE,GACnB,EAAE,EAAE;QACD,sCAAsC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CACjE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAC9B,EAAE,GAAG,EAAE,CACV,CAAC;IACN,CAAC;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,EACzC,gBAAgB,EAChB,QAAQ,EACR,OAAO,EACP,MAAM,GAGT,EAAE,EAAE;IACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,kCAAkC,CAAC,KAAK,CAAC,CAAC;YACtC,gBAAgB;YAChB,QAAQ;YACR,OAAO;SACV,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC"}
@@ -2,7 +2,12 @@ export declare enum ServiceAccountScope {
2
2
  SCIM_MANAGE = "scim:manage",
3
3
  ORG_ADMIN = "org:admin",
4
4
  ORG_EDIT = "org:edit",
5
- ORG_READ = "org:read"
5
+ ORG_READ = "org:read",
6
+ SYSTEM_ADMIN = "system:admin",
7
+ SYSTEM_DEVELOPER = "system:developer",
8
+ SYSTEM_EDITOR = "system:editor",
9
+ SYSTEM_INTERACTIVE_VIEWER = "system:interactive_viewer",
10
+ SYSTEM_VIEWER = "system:viewer"
6
11
  }
7
12
  export type ServiceAccount = {
8
13
  uuid: string;
@@ -15,14 +20,21 @@ export type ServiceAccount = {
15
20
  rotatedAt: Date | null;
16
21
  scopes: ServiceAccountScope[];
17
22
  userUuid: string;
23
+ roleUuid: string | null;
18
24
  };
19
25
  export type ServiceAccountWithToken = ServiceAccount & {
20
26
  token: string;
21
27
  };
22
- export type ApiCreateServiceAccountRequest = Pick<ServiceAccount, 'expiresAt' | 'description' | 'scopes'>;
28
+ export type ApiCreateServiceAccountRequest = Pick<ServiceAccount, 'expiresAt' | 'description'> & {
29
+ scopes?: ServiceAccountScope[];
30
+ roleUuid?: string | null;
31
+ };
23
32
  export type ApiCreateServiceAccountResponse = {
24
33
  token: string;
25
34
  expiresAt: Date;
26
35
  };
27
- export type CreateServiceAccount = Pick<ServiceAccount, 'organizationUuid' | 'expiresAt' | 'description' | 'scopes'>;
36
+ export type CreateServiceAccount = Pick<ServiceAccount, 'organizationUuid' | 'expiresAt' | 'description'> & {
37
+ scopes?: ServiceAccountScope[];
38
+ roleUuid?: string | null;
39
+ };
28
40
  //# sourceMappingURL=types.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC3B,WAAW,gBAAgB;IAC3B,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACxB;AAED,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAK9B,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC7C,cAAc,EACd,WAAW,GAAG,aAAa,GAAG,QAAQ,CACzC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACnC,cAAc,EACd,kBAAkB,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,CAC9D,CAAC"}
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,oBAAY,mBAAmB;IAC3B,WAAW,gBAAgB;IAK3B,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IAMrB,YAAY,iBAAiB;IAC7B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,yBAAyB,8BAA8B;IACvD,aAAa,kBAAkB;CAClC;AAED,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAK9B,QAAQ,EAAE,MAAM,CAAC;IAKjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC7C,cAAc,EACd,WAAW,GAAG,aAAa,CAC9B,GAAG;IAGA,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACnC,cAAc,EACd,kBAAkB,GAAG,WAAW,GAAG,aAAa,CACnD,GAAG;IACA,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC"}
@@ -1,8 +1,22 @@
1
1
  export var ServiceAccountScope;
2
2
  (function (ServiceAccountScope) {
3
3
  ServiceAccountScope["SCIM_MANAGE"] = "scim:manage";
4
+ // Legacy coarse-grained SA scopes — kept on the wire for back-compat
5
+ // with tokens minted before system-role aliases existed. New tokens use
6
+ // the `SYSTEM_*` aliases below, which give the SA exactly the same CASL
7
+ // grants as a human user with that organization role.
4
8
  ServiceAccountScope["ORG_ADMIN"] = "org:admin";
5
9
  ServiceAccountScope["ORG_EDIT"] = "org:edit";
6
10
  ServiceAccountScope["ORG_READ"] = "org:read";
11
+ // System-role aliases. Each one delegates to the matching
12
+ // `applyOrganizationMemberStaticAbilities` block so the SA's runtime
13
+ // ability set is identical to a user assigned that org role. Member is
14
+ // intentionally not exposed — it grants near-zero abilities and isn't
15
+ // a useful SA shape.
16
+ ServiceAccountScope["SYSTEM_ADMIN"] = "system:admin";
17
+ ServiceAccountScope["SYSTEM_DEVELOPER"] = "system:developer";
18
+ ServiceAccountScope["SYSTEM_EDITOR"] = "system:editor";
19
+ ServiceAccountScope["SYSTEM_INTERACTIVE_VIEWER"] = "system:interactive_viewer";
20
+ ServiceAccountScope["SYSTEM_VIEWER"] = "system:viewer";
7
21
  })(ServiceAccountScope || (ServiceAccountScope = {}));
8
22
  //# sourceMappingURL=types.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,mBAKX;AALD,WAAY,mBAAmB;IAC3B,kDAA2B,CAAA;IAC3B,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,4CAAqB,CAAA;AACzB,CAAC,EALW,mBAAmB,KAAnB,mBAAmB,QAK9B"}
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/ee/serviceAccounts/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,mBAmBX;AAnBD,WAAY,mBAAmB;IAC3B,kDAA2B,CAAA;IAC3B,qEAAqE;IACrE,wEAAwE;IACxE,wEAAwE;IACxE,sDAAsD;IACtD,8CAAuB,CAAA;IACvB,4CAAqB,CAAA;IACrB,4CAAqB,CAAA;IACrB,0DAA0D;IAC1D,qEAAqE;IACrE,uEAAuE;IACvE,sEAAsE;IACtE,qBAAqB;IACrB,oDAA6B,CAAA;IAC7B,4DAAqC,CAAA;IACrC,sDAA+B,CAAA;IAC/B,8EAAuD,CAAA;IACvD,sDAA+B,CAAA;AACnC,CAAC,EAnBW,mBAAmB,KAAnB,mBAAmB,QAmB9B"}
@@ -15,6 +15,7 @@ export { defineUserAbility, getUserAbilityBuilder, JWT_HEADER_NAME, } from './au
15
15
  export * from './authorization/jwtAbility';
16
16
  export * from './authorization/parseAccount';
17
17
  export * from './authorization/roleToScopeMapping';
18
+ export * from './authorization/scopeAbilityBuilder';
18
19
  export * from './authorization/scopes';
19
20
  export * from './authorization/serviceAccountAbility';
20
21
  export * from './authorization/space/spaceAccessResolver';
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EASH,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EACH,cAAc,EACd,WAAW,EACX,KAAK,gBAAgB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAOlE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACH,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACnF,cAAc,kBAAkB,CAAC;AACjC,cAAc,MAAM,CAAC;AACrB,cAAc,iBAAiB,CAAC;AAChC,cAAc,oCAAoC,CAAC;AACnD,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kCAAkC,CAAC;AACjD,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0CAA0C,CAAC;AACzD,cAAc,0DAA0D,CAAC;AACzE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,OAAO,KAAK,cAAc,MAAM,6CAA6C,CAAC;AAC9E,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AAEtD,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,OAQ7C,CAAC;AAEF,eAAO,MAAM,cAAc,+EAQjB,CAAC;AAEX,eAAO,MAAM,iBAAiB,mBAK2C,CAAC;AAE1E,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,KAAG,OACD,CAAC;AAEpD,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,EAAE,EAAE,OAAO,MAAM,EAAE,KAAG,OAGjE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,CAAC,GAAG,MAAM,EACvC,cAAc,CAAC,EAAE,EACjB,OAAO,CAAC,KACT,CAAC,EASH,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC7B,eAAe,MAAM,EAAE,EACvB,gBAAgB,MAAM,EACtB,UAAU,MAAM,aAE2D,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG;IAC1B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,IAAI,EAAE,aAAa,EAAE,CAAC;CACzB,CAAC;AAEF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASvE;AAID,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;CAQ5B,CAAC;AACF,eAAO,MAAM,sBAAsB;;;CAGlC,CAAC;AACF,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AACF,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;;;;;CAQ7B,CAAC;AACF,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AACF,eAAO,MAAM,0BAA0B;;CAEtC,CAAC;AACF,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;;;;;CAQ7B,CAAC;AACF,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AACF,eAAO,MAAM,0BAA0B;;CAEtC,CAAC;AACF,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAGpE,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB;;;;;;;;CAQ5B,CAAC;AACF,eAAO,MAAM,sBAAsB;;;CAGlC,CAAC;AACF,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AACF,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAClE,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAIzD,eAAO,MAAM,QAAQ;;;CAGpB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAQxB,CAAC;AACF,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AAEF,eAAO,MAAM,YAAY;;;CAGxB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,QAAQ,IAAI,CAAC,SAAS,CACpD,GAAG,IAAI,EAAE,MAAM,CAAC,KACf,OAAO,GACN,CAAC,GACD,KAAK,CAAC;AAEZ,eAAO,MAAM,gBAAgB,GAAI,SAAS,OAAO,KAAG,aAAa,EACX,CAAC;AAEvD,eAAO,MAAM,sBAAsB,GAC/B,SAAS,OAAO,EAChB,IAAI,OAAO,KACZ,KAAK,GAAG,SACoD,CAAC;AAEhE,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAK3B,CAAC;AAEnB,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,YAA6B,CAAC;AAE/E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,KAAG,CAAC,IAAI,aACG,CAAC;AAErD,oBAAY,oBAAoB;IAC5B,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,OAAO,YAAY;CACtB;AAED,eAAO,MAAM,mBAAmB,GAC5B,MAAM,SAAS,EAAE,EACjB,YAAW,OAAe,EAC1B,qBAAoB,OAAe,EACnC,eAAc,OAAe,KAC9B;IACC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAyC/D,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,UAAU,QAAQ,CAAC,MAAM,CAAC,uBAuB3D,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,yGAQzB;IACC,yBAAyB,EAAE,OAAO,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;CAClC,KAAG,MAAM,GAAG,SAeZ,CAAC;AAEF,wBAAgB,WAAW,CACvB,OAAO,EAAE,OAAO,EAChB,iBAAiB,GAAE,gBAAgB,EAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAAC,CAQlD;AAED,wBAAgB,UAAU,CACtB,OAAO,EAAE,OAAO,EAChB,iBAAiB,GAAE,gBAAgB,EAAO,EAC1C,iBAAiB,GAAE,gBAAgB,EAAO,EAC1C,gBAAgB,GAAE,eAAe,EAAO,GACzC,QAAQ,CAuBV;AAED,eAAO,MAAM,wBAAwB,GACjC,aAAa,WAAW,EACxB,SAAS,OAAO,KACjB,QAiBF,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAI,UAAU,QAAQ,gDAQlD,CAAC;AAEX,eAAO,MAAM,mCAAmC,GAAI,UAAU,QAAQ,wCASjE,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAC/B,UAAU,QAAQ,EAClB,SAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAoB,2BAUxD,CAAC;AAEN,eAAO,MAAM,gCAAgC,GAAI,WAAW,QAAQ,qCAS/D,CAAC;AAEN,wBAAgB,kBAAkB,CAC9B,WAAW,EAAE,WAAW,GAAG,SAAS,GACrC,MAAM,EAAE,CAQV;AAED,wBAAgB,cAAc,CAC1B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAAS,EACtE,KAAK,EAAE,OAAO,OAajB;AAGD,wBAAgB,aAAa,CACzB,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,EAClC,QAAQ,EAAE,QAAQ,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAc3B;AAED,wBAAgB,SAAS,CACrB,GAAG,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC/B,QAAQ,EAAE,QAAQ,EAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,IAAI,EAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,MAAM,GAClB,SAAS,CAwBX;AAED,wBAAgB,UAAU,CACtB,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,EAClC,QAAQ,EAAE,QAAQ,EAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,IAAI,EAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,MAAM,GAClB,SAAS,EAAE,CAIb;AAID,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,wBASpE,CAAC;AACF,eAAO,MAAM,SAAS,GAClB,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACjC,OAeF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC5B,gBAAgB,gBAAgB,KACjC,MAAM,GAAG,SAiBX,CAAC;AAEF,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAE5D;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,eAAe,CAAC;KACzB,EAAE,CAAC;CACP,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,eAAe,EA6FhC,CAAC;AAEX,eAAO,MAAM,YAAY,EAAE,eAAe,EAWhC,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EASH,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EACH,cAAc,EACd,WAAW,EACX,KAAK,gBAAgB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAOlE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACH,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oCAAoC,CAAC;AACnD,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACnF,cAAc,kBAAkB,CAAC;AACjC,cAAc,MAAM,CAAC;AACrB,cAAc,iBAAiB,CAAC;AAChC,cAAc,oCAAoC,CAAC;AACnD,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,4BAA4B,EAAE,MAAM,kDAAkD,CAAC;AAC3G,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AACrF,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kCAAkC,CAAC;AACjD,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACzE,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mCAAmC,CAAC;AAClD,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0CAA0C,CAAC;AACzD,cAAc,0DAA0D,CAAC;AACzE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qDAAqD,CAAC;AACpE,OAAO,KAAK,cAAc,MAAM,6CAA6C,CAAC;AAC9E,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kDAAkD,CAAC;AACjE,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yCAAyC,CAAC;AACxD,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AAEtD,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,OAQ7C,CAAC;AAEF,eAAO,MAAM,cAAc,+EAQjB,CAAC;AAEX,eAAO,MAAM,iBAAiB,mBAK2C,CAAC;AAE1E,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,KAAG,OACD,CAAC;AAEpD,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,EAAE,EAAE,OAAO,MAAM,EAAE,KAAG,OAGjE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,CAAC,GAAG,MAAM,EACvC,cAAc,CAAC,EAAE,EACjB,OAAO,CAAC,KACT,CAAC,EASH,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC7B,eAAe,MAAM,EAAE,EACvB,gBAAgB,MAAM,EACtB,UAAU,MAAM,aAE2D,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7D,MAAM,MAAM,eAAe,GAAG;IAC1B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,IAAI,EAAE,aAAa,EAAE,CAAC;CACzB,CAAC;AAEF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CASvE;AAID,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;;;CAQ5B,CAAC;AACF,eAAO,MAAM,sBAAsB;;;CAGlC,CAAC;AACF,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AACF,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;;;;;CAQ7B,CAAC;AACF,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AACF,eAAO,MAAM,0BAA0B;;CAEtC,CAAC;AACF,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;;;;;CAQ7B,CAAC;AACF,eAAO,MAAM,uBAAuB;;;CAGnC,CAAC;AACF,eAAO,MAAM,0BAA0B;;CAEtC,CAAC;AACF,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAGpE,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AACF,eAAO,MAAM,gBAAgB;;;;;;;;CAQ5B,CAAC;AACF,eAAO,MAAM,sBAAsB;;;CAGlC,CAAC;AACF,eAAO,MAAM,yBAAyB;;CAErC,CAAC;AACF,eAAO,MAAM,qBAAqB,+BAA+B,CAAC;AAClE,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAIzD,eAAO,MAAM,QAAQ;;;CAGpB,CAAC;AAEF,eAAO,MAAM,YAAY;;;;;;;;CAQxB,CAAC;AACF,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,eAAO,MAAM,UAAU;;;CAGtB,CAAC;AAEF,eAAO,MAAM,YAAY;;;CAGxB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,QAAQ,IAAI,CAAC,SAAS,CACpD,GAAG,IAAI,EAAE,MAAM,CAAC,KACf,OAAO,GACN,CAAC,GACD,KAAK,CAAC;AAEZ,eAAO,MAAM,gBAAgB,GAAI,SAAS,OAAO,KAAG,aAAa,EACX,CAAC;AAEvD,eAAO,MAAM,sBAAsB,GAC/B,SAAS,OAAO,EAChB,IAAI,OAAO,KACZ,KAAK,GAAG,SACoD,CAAC;AAEhE,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAK3B,CAAC;AAEnB,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,YAA6B,CAAC;AAE/E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,KAAG,CAAC,IAAI,aACG,CAAC;AAErD,oBAAY,oBAAoB;IAC5B,YAAY,iBAAiB;IAC7B,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,OAAO,YAAY;CACtB;AAED,eAAO,MAAM,mBAAmB,GAC5B,MAAM,SAAS,EAAE,EACjB,YAAW,OAAe,EAC1B,qBAAoB,OAAe,EACnC,eAAc,OAAe,KAC9B;IACC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAyC/D,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,UAAU,QAAQ,CAAC,MAAM,CAAC,uBAuB3D,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,yGAQzB;IACC,yBAAyB,EAAE,OAAO,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC;CAClC,KAAG,MAAM,GAAG,SAeZ,CAAC;AAEF,wBAAgB,WAAW,CACvB,OAAO,EAAE,OAAO,EAChB,iBAAiB,GAAE,gBAAgB,EAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAAC,CAQlD;AAED,wBAAgB,UAAU,CACtB,OAAO,EAAE,OAAO,EAChB,iBAAiB,GAAE,gBAAgB,EAAO,EAC1C,iBAAiB,GAAE,gBAAgB,EAAO,EAC1C,gBAAgB,GAAE,eAAe,EAAO,GACzC,QAAQ,CAuBV;AAED,eAAO,MAAM,wBAAwB,GACjC,aAAa,WAAW,EACxB,SAAS,OAAO,KACjB,QAiBF,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAI,UAAU,QAAQ,gDAQlD,CAAC;AAEX,eAAO,MAAM,mCAAmC,GAAI,UAAU,QAAQ,wCASjE,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAC/B,UAAU,QAAQ,EAClB,SAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAoB,2BAUxD,CAAC;AAEN,eAAO,MAAM,gCAAgC,GAAI,WAAW,QAAQ,qCAS/D,CAAC;AAEN,wBAAgB,kBAAkB,CAC9B,WAAW,EAAE,WAAW,GAAG,SAAS,GACrC,MAAM,EAAE,CAQV;AAED,wBAAgB,cAAc,CAC1B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAAS,EACtE,KAAK,EAAE,OAAO,OAajB;AAGD,wBAAgB,aAAa,CACzB,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,EAClC,QAAQ,EAAE,QAAQ,GACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAc3B;AAED,wBAAgB,SAAS,CACrB,GAAG,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC/B,QAAQ,EAAE,QAAQ,EAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,IAAI,EAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,MAAM,GAClB,SAAS,CAwBX;AAED,wBAAgB,UAAU,CACtB,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,EAClC,QAAQ,EAAE,QAAQ,EAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,IAAI,EAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,QAAQ,CAAC,EAAE,MAAM,GAClB,SAAS,EAAE,CAIb;AAID,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,wBASpE,CAAC;AACF,eAAO,MAAM,SAAS,GAClB,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACjC,OAeF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC5B,gBAAgB,gBAAgB,KACjC,MAAM,GAAG,SAiBX,CAAC;AAEF,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAE5D;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG;IACxC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,eAAe,CAAC;KACzB,EAAE,CAAC;CACP,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,eAAe,EA6FhC,CAAC;AAEX,eAAO,MAAM,YAAY,EAAE,eAAe,EAWhC,CAAC"}
package/dist/esm/index.js CHANGED
@@ -18,6 +18,7 @@ export { defineUserAbility, getUserAbilityBuilder, JWT_HEADER_NAME, } from './au
18
18
  export * from './authorization/jwtAbility';
19
19
  export * from './authorization/parseAccount';
20
20
  export * from './authorization/roleToScopeMapping';
21
+ export * from './authorization/scopeAbilityBuilder';
21
22
  export * from './authorization/scopes';
22
23
  export * from './authorization/serviceAccountAbility';
23
24
  export * from './authorization/space/spaceAccessResolver';