@spotify/backstage-plugin-rbac-common 0.5.13 → 0.5.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/CHANGELOG.md +8 -0
  2. package/dist/api.esm.js +2 -0
  3. package/dist/index.cjs.js +1 -1
  4. package/dist/index.d.ts +1174 -1849
  5. package/dist/index.esm.js +1 -1
  6. package/dist/matching.esm.js +2 -0
  7. package/dist/permissionSchema.esm.js +2 -0
  8. package/dist/schema.esm.js +2 -0
  9. package/dist/utils.esm.js +2 -0
  10. package/dist/validationMessages.esm.js +2 -0
  11. package/package.json +13 -6
package/dist/index.d.ts CHANGED
@@ -17,11 +17,11 @@ declare const ConditionalDecisionParser: z.ZodObject<{
17
17
  resourceType: z.ZodString;
18
18
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
19
19
  }, "strip", z.ZodTypeAny, {
20
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
20
+ conditions: PermissionCriteria<RBACPermissionCondition>;
21
21
  pluginId: string;
22
22
  resourceType: string;
23
23
  }, {
24
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
24
+ conditions: PermissionCriteria<RBACPermissionCondition>;
25
25
  pluginId: string;
26
26
  resourceType: string;
27
27
  }>;
@@ -33,11 +33,11 @@ declare const PermissionDecisionParser: z.ZodUnion<[z.ZodUnion<[z.ZodLiteral<"al
33
33
  resourceType: z.ZodString;
34
34
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
35
35
  }, "strip", z.ZodTypeAny, {
36
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
36
+ conditions: PermissionCriteria<RBACPermissionCondition>;
37
37
  pluginId: string;
38
38
  resourceType: string;
39
39
  }, {
40
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
40
+ conditions: PermissionCriteria<RBACPermissionCondition>;
41
41
  pluginId: string;
42
42
  resourceType: string;
43
43
  }>]>;
@@ -76,93 +76,61 @@ declare const RolePermissionParser: z.ZodEffects<z.ZodObject<{
76
76
  resourceType: z.ZodString;
77
77
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
78
78
  }, "strip", z.ZodTypeAny, {
79
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
79
+ conditions: PermissionCriteria<RBACPermissionCondition>;
80
80
  pluginId: string;
81
81
  resourceType: string;
82
82
  }, {
83
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
83
+ conditions: PermissionCriteria<RBACPermissionCondition>;
84
84
  pluginId: string;
85
85
  resourceType: string;
86
86
  }>]>;
87
87
  }, "strip", z.ZodTypeAny, {
88
88
  id: string;
89
- match: ("*" | {
89
+ match: "*" | {
90
90
  name?: string | undefined;
91
91
  actions?: string[] | undefined;
92
92
  resourceType?: string | undefined;
93
- }) & ("*" | {
94
- name?: string | undefined;
95
- actions?: string[] | undefined;
96
- resourceType?: string | undefined;
97
- } | undefined);
98
- decision: ("allow" | {
99
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
100
- pluginId: string;
101
- resourceType: string;
102
- } | "deny") & ("allow" | {
103
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
93
+ };
94
+ decision: "allow" | {
95
+ conditions: PermissionCriteria<RBACPermissionCondition>;
104
96
  pluginId: string;
105
97
  resourceType: string;
106
- } | "deny" | undefined);
98
+ } | "deny";
107
99
  }, {
108
- match: ("*" | {
109
- name?: string | undefined;
110
- actions?: string[] | undefined;
111
- resourceType?: string | undefined;
112
- }) & ("*" | {
100
+ match: "*" | {
113
101
  name?: string | undefined;
114
102
  actions?: string[] | undefined;
115
103
  resourceType?: string | undefined;
116
- } | undefined);
117
- decision: ("allow" | {
118
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
119
- pluginId: string;
120
- resourceType: string;
121
- } | "deny") & ("allow" | {
122
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
104
+ };
105
+ decision: "allow" | {
106
+ conditions: PermissionCriteria<RBACPermissionCondition>;
123
107
  pluginId: string;
124
108
  resourceType: string;
125
- } | "deny" | undefined);
109
+ } | "deny";
126
110
  id?: string | undefined;
127
111
  }>, {
128
112
  id: string;
129
- match: ("*" | {
113
+ match: "*" | {
130
114
  name?: string | undefined;
131
115
  actions?: string[] | undefined;
132
116
  resourceType?: string | undefined;
133
- }) & ("*" | {
134
- name?: string | undefined;
135
- actions?: string[] | undefined;
136
- resourceType?: string | undefined;
137
- } | undefined);
138
- decision: ("allow" | {
139
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
140
- pluginId: string;
141
- resourceType: string;
142
- } | "deny") & ("allow" | {
143
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
117
+ };
118
+ decision: "allow" | {
119
+ conditions: PermissionCriteria<RBACPermissionCondition>;
144
120
  pluginId: string;
145
121
  resourceType: string;
146
- } | "deny" | undefined);
122
+ } | "deny";
147
123
  }, {
148
- match: ("*" | {
149
- name?: string | undefined;
150
- actions?: string[] | undefined;
151
- resourceType?: string | undefined;
152
- }) & ("*" | {
124
+ match: "*" | {
153
125
  name?: string | undefined;
154
126
  actions?: string[] | undefined;
155
127
  resourceType?: string | undefined;
156
- } | undefined);
157
- decision: ("allow" | {
158
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
159
- pluginId: string;
160
- resourceType: string;
161
- } | "deny") & ("allow" | {
162
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
128
+ };
129
+ decision: "allow" | {
130
+ conditions: PermissionCriteria<RBACPermissionCondition>;
163
131
  pluginId: string;
164
132
  resourceType: string;
165
- } | "deny" | undefined);
133
+ } | "deny";
166
134
  id?: string | undefined;
167
135
  }>;
168
136
  /** @public */
@@ -186,133 +154,85 @@ declare const RolePermissionsParser: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
186
154
  resourceType: z.ZodString;
187
155
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
188
156
  }, "strip", z.ZodTypeAny, {
189
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
157
+ conditions: PermissionCriteria<RBACPermissionCondition>;
190
158
  pluginId: string;
191
159
  resourceType: string;
192
160
  }, {
193
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
161
+ conditions: PermissionCriteria<RBACPermissionCondition>;
194
162
  pluginId: string;
195
163
  resourceType: string;
196
164
  }>]>;
197
165
  }, "strip", z.ZodTypeAny, {
198
166
  id: string;
199
- match: ("*" | {
167
+ match: "*" | {
200
168
  name?: string | undefined;
201
169
  actions?: string[] | undefined;
202
170
  resourceType?: string | undefined;
203
- }) & ("*" | {
204
- name?: string | undefined;
205
- actions?: string[] | undefined;
206
- resourceType?: string | undefined;
207
- } | undefined);
208
- decision: ("allow" | {
209
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
210
- pluginId: string;
211
- resourceType: string;
212
- } | "deny") & ("allow" | {
213
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
171
+ };
172
+ decision: "allow" | {
173
+ conditions: PermissionCriteria<RBACPermissionCondition>;
214
174
  pluginId: string;
215
175
  resourceType: string;
216
- } | "deny" | undefined);
176
+ } | "deny";
217
177
  }, {
218
- match: ("*" | {
219
- name?: string | undefined;
220
- actions?: string[] | undefined;
221
- resourceType?: string | undefined;
222
- }) & ("*" | {
178
+ match: "*" | {
223
179
  name?: string | undefined;
224
180
  actions?: string[] | undefined;
225
181
  resourceType?: string | undefined;
226
- } | undefined);
227
- decision: ("allow" | {
228
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
229
- pluginId: string;
230
- resourceType: string;
231
- } | "deny") & ("allow" | {
232
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
182
+ };
183
+ decision: "allow" | {
184
+ conditions: PermissionCriteria<RBACPermissionCondition>;
233
185
  pluginId: string;
234
186
  resourceType: string;
235
- } | "deny" | undefined);
187
+ } | "deny";
236
188
  id?: string | undefined;
237
189
  }>, {
238
190
  id: string;
239
- match: ("*" | {
191
+ match: "*" | {
240
192
  name?: string | undefined;
241
193
  actions?: string[] | undefined;
242
194
  resourceType?: string | undefined;
243
- }) & ("*" | {
244
- name?: string | undefined;
245
- actions?: string[] | undefined;
246
- resourceType?: string | undefined;
247
- } | undefined);
248
- decision: ("allow" | {
249
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
250
- pluginId: string;
251
- resourceType: string;
252
- } | "deny") & ("allow" | {
253
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
195
+ };
196
+ decision: "allow" | {
197
+ conditions: PermissionCriteria<RBACPermissionCondition>;
254
198
  pluginId: string;
255
199
  resourceType: string;
256
- } | "deny" | undefined);
200
+ } | "deny";
257
201
  }, {
258
- match: ("*" | {
259
- name?: string | undefined;
260
- actions?: string[] | undefined;
261
- resourceType?: string | undefined;
262
- }) & ("*" | {
202
+ match: "*" | {
263
203
  name?: string | undefined;
264
204
  actions?: string[] | undefined;
265
205
  resourceType?: string | undefined;
266
- } | undefined);
267
- decision: ("allow" | {
268
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
269
- pluginId: string;
270
- resourceType: string;
271
- } | "deny") & ("allow" | {
272
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
206
+ };
207
+ decision: "allow" | {
208
+ conditions: PermissionCriteria<RBACPermissionCondition>;
273
209
  pluginId: string;
274
210
  resourceType: string;
275
- } | "deny" | undefined);
211
+ } | "deny";
276
212
  id?: string | undefined;
277
213
  }>, "many">, {
278
214
  id: string;
279
- match: ("*" | {
215
+ match: "*" | {
280
216
  name?: string | undefined;
281
217
  actions?: string[] | undefined;
282
218
  resourceType?: string | undefined;
283
- }) & ("*" | {
284
- name?: string | undefined;
285
- actions?: string[] | undefined;
286
- resourceType?: string | undefined;
287
- } | undefined);
288
- decision: ("allow" | {
289
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
290
- pluginId: string;
291
- resourceType: string;
292
- } | "deny") & ("allow" | {
293
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
219
+ };
220
+ decision: "allow" | {
221
+ conditions: PermissionCriteria<RBACPermissionCondition>;
294
222
  pluginId: string;
295
223
  resourceType: string;
296
- } | "deny" | undefined);
224
+ } | "deny";
297
225
  }[], {
298
- match: ("*" | {
299
- name?: string | undefined;
300
- actions?: string[] | undefined;
301
- resourceType?: string | undefined;
302
- }) & ("*" | {
226
+ match: "*" | {
303
227
  name?: string | undefined;
304
228
  actions?: string[] | undefined;
305
229
  resourceType?: string | undefined;
306
- } | undefined);
307
- decision: ("allow" | {
308
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
309
- pluginId: string;
310
- resourceType: string;
311
- } | "deny") & ("allow" | {
312
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
230
+ };
231
+ decision: "allow" | {
232
+ conditions: PermissionCriteria<RBACPermissionCondition>;
313
233
  pluginId: string;
314
234
  resourceType: string;
315
- } | "deny" | undefined);
235
+ } | "deny";
316
236
  id?: string | undefined;
317
237
  }[]>;
318
238
  /** @public */
@@ -340,182 +260,118 @@ declare const RoleParser: z.ZodObject<{
340
260
  resourceType: z.ZodString;
341
261
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
342
262
  }, "strip", z.ZodTypeAny, {
343
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
263
+ conditions: PermissionCriteria<RBACPermissionCondition>;
344
264
  pluginId: string;
345
265
  resourceType: string;
346
266
  }, {
347
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
267
+ conditions: PermissionCriteria<RBACPermissionCondition>;
348
268
  pluginId: string;
349
269
  resourceType: string;
350
270
  }>]>;
351
271
  }, "strip", z.ZodTypeAny, {
352
272
  id: string;
353
- match: ("*" | {
273
+ match: "*" | {
354
274
  name?: string | undefined;
355
275
  actions?: string[] | undefined;
356
276
  resourceType?: string | undefined;
357
- }) & ("*" | {
358
- name?: string | undefined;
359
- actions?: string[] | undefined;
360
- resourceType?: string | undefined;
361
- } | undefined);
362
- decision: ("allow" | {
363
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
364
- pluginId: string;
365
- resourceType: string;
366
- } | "deny") & ("allow" | {
367
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
277
+ };
278
+ decision: "allow" | {
279
+ conditions: PermissionCriteria<RBACPermissionCondition>;
368
280
  pluginId: string;
369
281
  resourceType: string;
370
- } | "deny" | undefined);
282
+ } | "deny";
371
283
  }, {
372
- match: ("*" | {
373
- name?: string | undefined;
374
- actions?: string[] | undefined;
375
- resourceType?: string | undefined;
376
- }) & ("*" | {
284
+ match: "*" | {
377
285
  name?: string | undefined;
378
286
  actions?: string[] | undefined;
379
287
  resourceType?: string | undefined;
380
- } | undefined);
381
- decision: ("allow" | {
382
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
383
- pluginId: string;
384
- resourceType: string;
385
- } | "deny") & ("allow" | {
386
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
288
+ };
289
+ decision: "allow" | {
290
+ conditions: PermissionCriteria<RBACPermissionCondition>;
387
291
  pluginId: string;
388
292
  resourceType: string;
389
- } | "deny" | undefined);
293
+ } | "deny";
390
294
  id?: string | undefined;
391
295
  }>, {
392
296
  id: string;
393
- match: ("*" | {
297
+ match: "*" | {
394
298
  name?: string | undefined;
395
299
  actions?: string[] | undefined;
396
300
  resourceType?: string | undefined;
397
- }) & ("*" | {
398
- name?: string | undefined;
399
- actions?: string[] | undefined;
400
- resourceType?: string | undefined;
401
- } | undefined);
402
- decision: ("allow" | {
403
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
404
- pluginId: string;
405
- resourceType: string;
406
- } | "deny") & ("allow" | {
407
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
301
+ };
302
+ decision: "allow" | {
303
+ conditions: PermissionCriteria<RBACPermissionCondition>;
408
304
  pluginId: string;
409
305
  resourceType: string;
410
- } | "deny" | undefined);
306
+ } | "deny";
411
307
  }, {
412
- match: ("*" | {
413
- name?: string | undefined;
414
- actions?: string[] | undefined;
415
- resourceType?: string | undefined;
416
- }) & ("*" | {
308
+ match: "*" | {
417
309
  name?: string | undefined;
418
310
  actions?: string[] | undefined;
419
311
  resourceType?: string | undefined;
420
- } | undefined);
421
- decision: ("allow" | {
422
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
423
- pluginId: string;
424
- resourceType: string;
425
- } | "deny") & ("allow" | {
426
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
312
+ };
313
+ decision: "allow" | {
314
+ conditions: PermissionCriteria<RBACPermissionCondition>;
427
315
  pluginId: string;
428
316
  resourceType: string;
429
- } | "deny" | undefined);
317
+ } | "deny";
430
318
  id?: string | undefined;
431
319
  }>, "many">, {
432
320
  id: string;
433
- match: ("*" | {
321
+ match: "*" | {
434
322
  name?: string | undefined;
435
323
  actions?: string[] | undefined;
436
324
  resourceType?: string | undefined;
437
- }) & ("*" | {
438
- name?: string | undefined;
439
- actions?: string[] | undefined;
440
- resourceType?: string | undefined;
441
- } | undefined);
442
- decision: ("allow" | {
443
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
444
- pluginId: string;
445
- resourceType: string;
446
- } | "deny") & ("allow" | {
447
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
325
+ };
326
+ decision: "allow" | {
327
+ conditions: PermissionCriteria<RBACPermissionCondition>;
448
328
  pluginId: string;
449
329
  resourceType: string;
450
- } | "deny" | undefined);
330
+ } | "deny";
451
331
  }[], {
452
- match: ("*" | {
453
- name?: string | undefined;
454
- actions?: string[] | undefined;
455
- resourceType?: string | undefined;
456
- }) & ("*" | {
332
+ match: "*" | {
457
333
  name?: string | undefined;
458
334
  actions?: string[] | undefined;
459
335
  resourceType?: string | undefined;
460
- } | undefined);
461
- decision: ("allow" | {
462
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
463
- pluginId: string;
464
- resourceType: string;
465
- } | "deny") & ("allow" | {
466
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
336
+ };
337
+ decision: "allow" | {
338
+ conditions: PermissionCriteria<RBACPermissionCondition>;
467
339
  pluginId: string;
468
340
  resourceType: string;
469
- } | "deny" | undefined);
341
+ } | "deny";
470
342
  id?: string | undefined;
471
343
  }[]>;
472
344
  }, "strip", z.ZodTypeAny, {
473
345
  id: string;
474
346
  name: string;
475
- members: (string[] | "*") & (string[] | "*" | undefined);
347
+ members: string[] | "*";
476
348
  permissions: {
477
349
  id: string;
478
- match: ("*" | {
350
+ match: "*" | {
479
351
  name?: string | undefined;
480
352
  actions?: string[] | undefined;
481
353
  resourceType?: string | undefined;
482
- }) & ("*" | {
483
- name?: string | undefined;
484
- actions?: string[] | undefined;
485
- resourceType?: string | undefined;
486
- } | undefined);
487
- decision: ("allow" | {
488
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
489
- pluginId: string;
490
- resourceType: string;
491
- } | "deny") & ("allow" | {
492
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
354
+ };
355
+ decision: "allow" | {
356
+ conditions: PermissionCriteria<RBACPermissionCondition>;
493
357
  pluginId: string;
494
358
  resourceType: string;
495
- } | "deny" | undefined);
359
+ } | "deny";
496
360
  }[];
497
361
  }, {
498
362
  name: string;
499
- members: (string[] | "*") & (string[] | "*" | undefined);
363
+ members: string[] | "*";
500
364
  permissions: {
501
- match: ("*" | {
502
- name?: string | undefined;
503
- actions?: string[] | undefined;
504
- resourceType?: string | undefined;
505
- }) & ("*" | {
365
+ match: "*" | {
506
366
  name?: string | undefined;
507
367
  actions?: string[] | undefined;
508
368
  resourceType?: string | undefined;
509
- } | undefined);
510
- decision: ("allow" | {
511
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
512
- pluginId: string;
513
- resourceType: string;
514
- } | "deny") & ("allow" | {
515
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
369
+ };
370
+ decision: "allow" | {
371
+ conditions: PermissionCriteria<RBACPermissionCondition>;
516
372
  pluginId: string;
517
373
  resourceType: string;
518
- } | "deny" | undefined);
374
+ } | "deny";
519
375
  id?: string | undefined;
520
376
  }[];
521
377
  id?: string | undefined;
@@ -545,232 +401,152 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
545
401
  resourceType: z.ZodString;
546
402
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
547
403
  }, "strip", z.ZodTypeAny, {
548
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
404
+ conditions: PermissionCriteria<RBACPermissionCondition>;
549
405
  pluginId: string;
550
406
  resourceType: string;
551
407
  }, {
552
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
408
+ conditions: PermissionCriteria<RBACPermissionCondition>;
553
409
  pluginId: string;
554
410
  resourceType: string;
555
411
  }>]>;
556
412
  }, "strip", z.ZodTypeAny, {
557
413
  id: string;
558
- match: ("*" | {
414
+ match: "*" | {
559
415
  name?: string | undefined;
560
416
  actions?: string[] | undefined;
561
417
  resourceType?: string | undefined;
562
- }) & ("*" | {
563
- name?: string | undefined;
564
- actions?: string[] | undefined;
565
- resourceType?: string | undefined;
566
- } | undefined);
567
- decision: ("allow" | {
568
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
569
- pluginId: string;
570
- resourceType: string;
571
- } | "deny") & ("allow" | {
572
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
418
+ };
419
+ decision: "allow" | {
420
+ conditions: PermissionCriteria<RBACPermissionCondition>;
573
421
  pluginId: string;
574
422
  resourceType: string;
575
- } | "deny" | undefined);
423
+ } | "deny";
576
424
  }, {
577
- match: ("*" | {
578
- name?: string | undefined;
579
- actions?: string[] | undefined;
580
- resourceType?: string | undefined;
581
- }) & ("*" | {
425
+ match: "*" | {
582
426
  name?: string | undefined;
583
427
  actions?: string[] | undefined;
584
428
  resourceType?: string | undefined;
585
- } | undefined);
586
- decision: ("allow" | {
587
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
588
- pluginId: string;
589
- resourceType: string;
590
- } | "deny") & ("allow" | {
591
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
429
+ };
430
+ decision: "allow" | {
431
+ conditions: PermissionCriteria<RBACPermissionCondition>;
592
432
  pluginId: string;
593
433
  resourceType: string;
594
- } | "deny" | undefined);
434
+ } | "deny";
595
435
  id?: string | undefined;
596
436
  }>, {
597
437
  id: string;
598
- match: ("*" | {
438
+ match: "*" | {
599
439
  name?: string | undefined;
600
440
  actions?: string[] | undefined;
601
441
  resourceType?: string | undefined;
602
- }) & ("*" | {
603
- name?: string | undefined;
604
- actions?: string[] | undefined;
605
- resourceType?: string | undefined;
606
- } | undefined);
607
- decision: ("allow" | {
608
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
609
- pluginId: string;
610
- resourceType: string;
611
- } | "deny") & ("allow" | {
612
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
442
+ };
443
+ decision: "allow" | {
444
+ conditions: PermissionCriteria<RBACPermissionCondition>;
613
445
  pluginId: string;
614
446
  resourceType: string;
615
- } | "deny" | undefined);
447
+ } | "deny";
616
448
  }, {
617
- match: ("*" | {
618
- name?: string | undefined;
619
- actions?: string[] | undefined;
620
- resourceType?: string | undefined;
621
- }) & ("*" | {
449
+ match: "*" | {
622
450
  name?: string | undefined;
623
451
  actions?: string[] | undefined;
624
452
  resourceType?: string | undefined;
625
- } | undefined);
626
- decision: ("allow" | {
627
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
628
- pluginId: string;
629
- resourceType: string;
630
- } | "deny") & ("allow" | {
631
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
453
+ };
454
+ decision: "allow" | {
455
+ conditions: PermissionCriteria<RBACPermissionCondition>;
632
456
  pluginId: string;
633
457
  resourceType: string;
634
- } | "deny" | undefined);
458
+ } | "deny";
635
459
  id?: string | undefined;
636
460
  }>, "many">, {
637
461
  id: string;
638
- match: ("*" | {
462
+ match: "*" | {
639
463
  name?: string | undefined;
640
464
  actions?: string[] | undefined;
641
465
  resourceType?: string | undefined;
642
- }) & ("*" | {
643
- name?: string | undefined;
644
- actions?: string[] | undefined;
645
- resourceType?: string | undefined;
646
- } | undefined);
647
- decision: ("allow" | {
648
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
649
- pluginId: string;
650
- resourceType: string;
651
- } | "deny") & ("allow" | {
652
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
466
+ };
467
+ decision: "allow" | {
468
+ conditions: PermissionCriteria<RBACPermissionCondition>;
653
469
  pluginId: string;
654
470
  resourceType: string;
655
- } | "deny" | undefined);
471
+ } | "deny";
656
472
  }[], {
657
- match: ("*" | {
658
- name?: string | undefined;
659
- actions?: string[] | undefined;
660
- resourceType?: string | undefined;
661
- }) & ("*" | {
473
+ match: "*" | {
662
474
  name?: string | undefined;
663
475
  actions?: string[] | undefined;
664
476
  resourceType?: string | undefined;
665
- } | undefined);
666
- decision: ("allow" | {
667
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
668
- pluginId: string;
669
- resourceType: string;
670
- } | "deny") & ("allow" | {
671
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
477
+ };
478
+ decision: "allow" | {
479
+ conditions: PermissionCriteria<RBACPermissionCondition>;
672
480
  pluginId: string;
673
481
  resourceType: string;
674
- } | "deny" | undefined);
482
+ } | "deny";
675
483
  id?: string | undefined;
676
484
  }[]>;
677
485
  }, "strip", z.ZodTypeAny, {
678
486
  id: string;
679
487
  name: string;
680
- members: (string[] | "*") & (string[] | "*" | undefined);
488
+ members: string[] | "*";
681
489
  permissions: {
682
490
  id: string;
683
- match: ("*" | {
491
+ match: "*" | {
684
492
  name?: string | undefined;
685
493
  actions?: string[] | undefined;
686
494
  resourceType?: string | undefined;
687
- }) & ("*" | {
688
- name?: string | undefined;
689
- actions?: string[] | undefined;
690
- resourceType?: string | undefined;
691
- } | undefined);
692
- decision: ("allow" | {
693
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
694
- pluginId: string;
695
- resourceType: string;
696
- } | "deny") & ("allow" | {
697
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
495
+ };
496
+ decision: "allow" | {
497
+ conditions: PermissionCriteria<RBACPermissionCondition>;
698
498
  pluginId: string;
699
499
  resourceType: string;
700
- } | "deny" | undefined);
500
+ } | "deny";
701
501
  }[];
702
502
  }, {
703
503
  name: string;
704
- members: (string[] | "*") & (string[] | "*" | undefined);
504
+ members: string[] | "*";
705
505
  permissions: {
706
- match: ("*" | {
707
- name?: string | undefined;
708
- actions?: string[] | undefined;
709
- resourceType?: string | undefined;
710
- }) & ("*" | {
506
+ match: "*" | {
711
507
  name?: string | undefined;
712
508
  actions?: string[] | undefined;
713
509
  resourceType?: string | undefined;
714
- } | undefined);
715
- decision: ("allow" | {
716
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
717
- pluginId: string;
718
- resourceType: string;
719
- } | "deny") & ("allow" | {
720
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
510
+ };
511
+ decision: "allow" | {
512
+ conditions: PermissionCriteria<RBACPermissionCondition>;
721
513
  pluginId: string;
722
514
  resourceType: string;
723
- } | "deny" | undefined);
515
+ } | "deny";
724
516
  id?: string | undefined;
725
517
  }[];
726
518
  id?: string | undefined;
727
519
  }>, "many">>, {
728
520
  id: string;
729
521
  name: string;
730
- members: (string[] | "*") & (string[] | "*" | undefined);
522
+ members: string[] | "*";
731
523
  permissions: {
732
524
  id: string;
733
- match: ("*" | {
525
+ match: "*" | {
734
526
  name?: string | undefined;
735
527
  actions?: string[] | undefined;
736
528
  resourceType?: string | undefined;
737
- }) & ("*" | {
738
- name?: string | undefined;
739
- actions?: string[] | undefined;
740
- resourceType?: string | undefined;
741
- } | undefined);
742
- decision: ("allow" | {
743
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
744
- pluginId: string;
745
- resourceType: string;
746
- } | "deny") & ("allow" | {
747
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
529
+ };
530
+ decision: "allow" | {
531
+ conditions: PermissionCriteria<RBACPermissionCondition>;
748
532
  pluginId: string;
749
533
  resourceType: string;
750
- } | "deny" | undefined);
534
+ } | "deny";
751
535
  }[];
752
536
  }[], {
753
537
  name: string;
754
- members: (string[] | "*") & (string[] | "*" | undefined);
538
+ members: string[] | "*";
755
539
  permissions: {
756
- match: ("*" | {
757
- name?: string | undefined;
758
- actions?: string[] | undefined;
759
- resourceType?: string | undefined;
760
- }) & ("*" | {
540
+ match: "*" | {
761
541
  name?: string | undefined;
762
542
  actions?: string[] | undefined;
763
543
  resourceType?: string | undefined;
764
- } | undefined);
765
- decision: ("allow" | {
766
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
767
- pluginId: string;
768
- resourceType: string;
769
- } | "deny") & ("allow" | {
770
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
544
+ };
545
+ decision: "allow" | {
546
+ conditions: PermissionCriteria<RBACPermissionCondition>;
771
547
  pluginId: string;
772
548
  resourceType: string;
773
- } | "deny" | undefined);
549
+ } | "deny";
774
550
  id?: string | undefined;
775
551
  }[];
776
552
  id?: string | undefined;
@@ -782,38 +558,30 @@ declare const RoleDecisionParser: z.ZodObject<{
782
558
  resourceType: z.ZodString;
783
559
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
784
560
  }, "strip", z.ZodTypeAny, {
785
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
561
+ conditions: PermissionCriteria<RBACPermissionCondition>;
786
562
  pluginId: string;
787
563
  resourceType: string;
788
564
  }, {
789
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
565
+ conditions: PermissionCriteria<RBACPermissionCondition>;
790
566
  pluginId: string;
791
567
  resourceType: string;
792
568
  }>]>;
793
569
  roleId: z.ZodDefault<z.ZodString>;
794
570
  rolePermissionId: z.ZodDefault<z.ZodString>;
795
571
  }, "strip", z.ZodTypeAny, {
796
- decision: ("allow" | {
797
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
572
+ decision: "allow" | {
573
+ conditions: PermissionCriteria<RBACPermissionCondition>;
798
574
  pluginId: string;
799
575
  resourceType: string;
800
- } | "deny") & ("allow" | {
801
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
802
- pluginId: string;
803
- resourceType: string;
804
- } | "deny" | undefined);
576
+ } | "deny";
805
577
  roleId: string;
806
578
  rolePermissionId: string;
807
579
  }, {
808
- decision: ("allow" | {
809
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
810
- pluginId: string;
811
- resourceType: string;
812
- } | "deny") & ("allow" | {
813
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
580
+ decision: "allow" | {
581
+ conditions: PermissionCriteria<RBACPermissionCondition>;
814
582
  pluginId: string;
815
583
  resourceType: string;
816
- } | "deny" | undefined);
584
+ } | "deny";
817
585
  roleId?: string | undefined;
818
586
  rolePermissionId?: string | undefined;
819
587
  }>;
@@ -863,232 +631,152 @@ declare const PolicyConfigParser: z.ZodObject<{
863
631
  resourceType: z.ZodString;
864
632
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
865
633
  }, "strip", z.ZodTypeAny, {
866
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
634
+ conditions: PermissionCriteria<RBACPermissionCondition>;
867
635
  pluginId: string;
868
636
  resourceType: string;
869
637
  }, {
870
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
638
+ conditions: PermissionCriteria<RBACPermissionCondition>;
871
639
  pluginId: string;
872
640
  resourceType: string;
873
641
  }>]>;
874
642
  }, "strip", z.ZodTypeAny, {
875
643
  id: string;
876
- match: ("*" | {
644
+ match: "*" | {
877
645
  name?: string | undefined;
878
646
  actions?: string[] | undefined;
879
647
  resourceType?: string | undefined;
880
- }) & ("*" | {
881
- name?: string | undefined;
882
- actions?: string[] | undefined;
883
- resourceType?: string | undefined;
884
- } | undefined);
885
- decision: ("allow" | {
886
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
887
- pluginId: string;
888
- resourceType: string;
889
- } | "deny") & ("allow" | {
890
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
648
+ };
649
+ decision: "allow" | {
650
+ conditions: PermissionCriteria<RBACPermissionCondition>;
891
651
  pluginId: string;
892
652
  resourceType: string;
893
- } | "deny" | undefined);
653
+ } | "deny";
894
654
  }, {
895
- match: ("*" | {
896
- name?: string | undefined;
897
- actions?: string[] | undefined;
898
- resourceType?: string | undefined;
899
- }) & ("*" | {
655
+ match: "*" | {
900
656
  name?: string | undefined;
901
657
  actions?: string[] | undefined;
902
658
  resourceType?: string | undefined;
903
- } | undefined);
904
- decision: ("allow" | {
905
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
659
+ };
660
+ decision: "allow" | {
661
+ conditions: PermissionCriteria<RBACPermissionCondition>;
906
662
  pluginId: string;
907
663
  resourceType: string;
908
- } | "deny") & ("allow" | {
909
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
910
- pluginId: string;
911
- resourceType: string;
912
- } | "deny" | undefined);
664
+ } | "deny";
913
665
  id?: string | undefined;
914
666
  }>, {
915
667
  id: string;
916
- match: ("*" | {
917
- name?: string | undefined;
918
- actions?: string[] | undefined;
919
- resourceType?: string | undefined;
920
- }) & ("*" | {
668
+ match: "*" | {
921
669
  name?: string | undefined;
922
670
  actions?: string[] | undefined;
923
671
  resourceType?: string | undefined;
924
- } | undefined);
925
- decision: ("allow" | {
926
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
927
- pluginId: string;
928
- resourceType: string;
929
- } | "deny") & ("allow" | {
930
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
672
+ };
673
+ decision: "allow" | {
674
+ conditions: PermissionCriteria<RBACPermissionCondition>;
931
675
  pluginId: string;
932
676
  resourceType: string;
933
- } | "deny" | undefined);
677
+ } | "deny";
934
678
  }, {
935
- match: ("*" | {
936
- name?: string | undefined;
937
- actions?: string[] | undefined;
938
- resourceType?: string | undefined;
939
- }) & ("*" | {
679
+ match: "*" | {
940
680
  name?: string | undefined;
941
681
  actions?: string[] | undefined;
942
682
  resourceType?: string | undefined;
943
- } | undefined);
944
- decision: ("allow" | {
945
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
946
- pluginId: string;
947
- resourceType: string;
948
- } | "deny") & ("allow" | {
949
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
683
+ };
684
+ decision: "allow" | {
685
+ conditions: PermissionCriteria<RBACPermissionCondition>;
950
686
  pluginId: string;
951
687
  resourceType: string;
952
- } | "deny" | undefined);
688
+ } | "deny";
953
689
  id?: string | undefined;
954
690
  }>, "many">, {
955
691
  id: string;
956
- match: ("*" | {
692
+ match: "*" | {
957
693
  name?: string | undefined;
958
694
  actions?: string[] | undefined;
959
695
  resourceType?: string | undefined;
960
- }) & ("*" | {
961
- name?: string | undefined;
962
- actions?: string[] | undefined;
963
- resourceType?: string | undefined;
964
- } | undefined);
965
- decision: ("allow" | {
966
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
967
- pluginId: string;
968
- resourceType: string;
969
- } | "deny") & ("allow" | {
970
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
696
+ };
697
+ decision: "allow" | {
698
+ conditions: PermissionCriteria<RBACPermissionCondition>;
971
699
  pluginId: string;
972
700
  resourceType: string;
973
- } | "deny" | undefined);
701
+ } | "deny";
974
702
  }[], {
975
- match: ("*" | {
976
- name?: string | undefined;
977
- actions?: string[] | undefined;
978
- resourceType?: string | undefined;
979
- }) & ("*" | {
703
+ match: "*" | {
980
704
  name?: string | undefined;
981
705
  actions?: string[] | undefined;
982
706
  resourceType?: string | undefined;
983
- } | undefined);
984
- decision: ("allow" | {
985
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
707
+ };
708
+ decision: "allow" | {
709
+ conditions: PermissionCriteria<RBACPermissionCondition>;
986
710
  pluginId: string;
987
711
  resourceType: string;
988
- } | "deny") & ("allow" | {
989
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
990
- pluginId: string;
991
- resourceType: string;
992
- } | "deny" | undefined);
712
+ } | "deny";
993
713
  id?: string | undefined;
994
714
  }[]>;
995
715
  }, "strip", z.ZodTypeAny, {
996
716
  id: string;
997
717
  name: string;
998
- members: (string[] | "*") & (string[] | "*" | undefined);
718
+ members: string[] | "*";
999
719
  permissions: {
1000
720
  id: string;
1001
- match: ("*" | {
1002
- name?: string | undefined;
1003
- actions?: string[] | undefined;
1004
- resourceType?: string | undefined;
1005
- }) & ("*" | {
721
+ match: "*" | {
1006
722
  name?: string | undefined;
1007
723
  actions?: string[] | undefined;
1008
724
  resourceType?: string | undefined;
1009
- } | undefined);
1010
- decision: ("allow" | {
1011
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1012
- pluginId: string;
1013
- resourceType: string;
1014
- } | "deny") & ("allow" | {
1015
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
725
+ };
726
+ decision: "allow" | {
727
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1016
728
  pluginId: string;
1017
729
  resourceType: string;
1018
- } | "deny" | undefined);
730
+ } | "deny";
1019
731
  }[];
1020
732
  }, {
1021
733
  name: string;
1022
- members: (string[] | "*") & (string[] | "*" | undefined);
734
+ members: string[] | "*";
1023
735
  permissions: {
1024
- match: ("*" | {
1025
- name?: string | undefined;
1026
- actions?: string[] | undefined;
1027
- resourceType?: string | undefined;
1028
- }) & ("*" | {
736
+ match: "*" | {
1029
737
  name?: string | undefined;
1030
738
  actions?: string[] | undefined;
1031
739
  resourceType?: string | undefined;
1032
- } | undefined);
1033
- decision: ("allow" | {
1034
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1035
- pluginId: string;
1036
- resourceType: string;
1037
- } | "deny") & ("allow" | {
1038
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
740
+ };
741
+ decision: "allow" | {
742
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1039
743
  pluginId: string;
1040
744
  resourceType: string;
1041
- } | "deny" | undefined);
745
+ } | "deny";
1042
746
  id?: string | undefined;
1043
747
  }[];
1044
748
  id?: string | undefined;
1045
749
  }>, "many">>, {
1046
750
  id: string;
1047
751
  name: string;
1048
- members: (string[] | "*") & (string[] | "*" | undefined);
752
+ members: string[] | "*";
1049
753
  permissions: {
1050
754
  id: string;
1051
- match: ("*" | {
755
+ match: "*" | {
1052
756
  name?: string | undefined;
1053
757
  actions?: string[] | undefined;
1054
758
  resourceType?: string | undefined;
1055
- }) & ("*" | {
1056
- name?: string | undefined;
1057
- actions?: string[] | undefined;
1058
- resourceType?: string | undefined;
1059
- } | undefined);
1060
- decision: ("allow" | {
1061
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1062
- pluginId: string;
1063
- resourceType: string;
1064
- } | "deny") & ("allow" | {
1065
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
759
+ };
760
+ decision: "allow" | {
761
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1066
762
  pluginId: string;
1067
763
  resourceType: string;
1068
- } | "deny" | undefined);
764
+ } | "deny";
1069
765
  }[];
1070
766
  }[], {
1071
767
  name: string;
1072
- members: (string[] | "*") & (string[] | "*" | undefined);
768
+ members: string[] | "*";
1073
769
  permissions: {
1074
- match: ("*" | {
1075
- name?: string | undefined;
1076
- actions?: string[] | undefined;
1077
- resourceType?: string | undefined;
1078
- }) & ("*" | {
770
+ match: "*" | {
1079
771
  name?: string | undefined;
1080
772
  actions?: string[] | undefined;
1081
773
  resourceType?: string | undefined;
1082
- } | undefined);
1083
- decision: ("allow" | {
1084
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
774
+ };
775
+ decision: "allow" | {
776
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1085
777
  pluginId: string;
1086
778
  resourceType: string;
1087
- } | "deny") & ("allow" | {
1088
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1089
- pluginId: string;
1090
- resourceType: string;
1091
- } | "deny" | undefined);
779
+ } | "deny";
1092
780
  id?: string | undefined;
1093
781
  }[];
1094
782
  id?: string | undefined;
@@ -1101,27 +789,19 @@ declare const PolicyConfigParser: z.ZodObject<{
1101
789
  roles: {
1102
790
  id: string;
1103
791
  name: string;
1104
- members: (string[] | "*") & (string[] | "*" | undefined);
792
+ members: string[] | "*";
1105
793
  permissions: {
1106
794
  id: string;
1107
- match: ("*" | {
1108
- name?: string | undefined;
1109
- actions?: string[] | undefined;
1110
- resourceType?: string | undefined;
1111
- }) & ("*" | {
795
+ match: "*" | {
1112
796
  name?: string | undefined;
1113
797
  actions?: string[] | undefined;
1114
798
  resourceType?: string | undefined;
1115
- } | undefined);
1116
- decision: ("allow" | {
1117
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1118
- pluginId: string;
1119
- resourceType: string;
1120
- } | "deny") & ("allow" | {
1121
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
799
+ };
800
+ decision: "allow" | {
801
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1122
802
  pluginId: string;
1123
803
  resourceType: string;
1124
- } | "deny" | undefined);
804
+ } | "deny";
1125
805
  }[];
1126
806
  }[];
1127
807
  }, {
@@ -1131,26 +811,18 @@ declare const PolicyConfigParser: z.ZodObject<{
1131
811
  } | undefined;
1132
812
  roles?: {
1133
813
  name: string;
1134
- members: (string[] | "*") & (string[] | "*" | undefined);
814
+ members: string[] | "*";
1135
815
  permissions: {
1136
- match: ("*" | {
1137
- name?: string | undefined;
1138
- actions?: string[] | undefined;
1139
- resourceType?: string | undefined;
1140
- }) & ("*" | {
816
+ match: "*" | {
1141
817
  name?: string | undefined;
1142
818
  actions?: string[] | undefined;
1143
819
  resourceType?: string | undefined;
1144
- } | undefined);
1145
- decision: ("allow" | {
1146
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1147
- pluginId: string;
1148
- resourceType: string;
1149
- } | "deny") & ("allow" | {
1150
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
820
+ };
821
+ decision: "allow" | {
822
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1151
823
  pluginId: string;
1152
824
  resourceType: string;
1153
- } | "deny" | undefined);
825
+ } | "deny";
1154
826
  id?: string | undefined;
1155
827
  }[];
1156
828
  id?: string | undefined;
@@ -1190,232 +862,152 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
1190
862
  resourceType: z.ZodString;
1191
863
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
1192
864
  }, "strip", z.ZodTypeAny, {
1193
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
865
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1194
866
  pluginId: string;
1195
867
  resourceType: string;
1196
868
  }, {
1197
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
869
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1198
870
  pluginId: string;
1199
871
  resourceType: string;
1200
872
  }>]>;
1201
873
  }, "strip", z.ZodTypeAny, {
1202
874
  id: string;
1203
- match: ("*" | {
875
+ match: "*" | {
1204
876
  name?: string | undefined;
1205
877
  actions?: string[] | undefined;
1206
878
  resourceType?: string | undefined;
1207
- }) & ("*" | {
1208
- name?: string | undefined;
1209
- actions?: string[] | undefined;
1210
- resourceType?: string | undefined;
1211
- } | undefined);
1212
- decision: ("allow" | {
1213
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1214
- pluginId: string;
1215
- resourceType: string;
1216
- } | "deny") & ("allow" | {
1217
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
879
+ };
880
+ decision: "allow" | {
881
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1218
882
  pluginId: string;
1219
883
  resourceType: string;
1220
- } | "deny" | undefined);
884
+ } | "deny";
1221
885
  }, {
1222
- match: ("*" | {
1223
- name?: string | undefined;
1224
- actions?: string[] | undefined;
1225
- resourceType?: string | undefined;
1226
- }) & ("*" | {
886
+ match: "*" | {
1227
887
  name?: string | undefined;
1228
888
  actions?: string[] | undefined;
1229
889
  resourceType?: string | undefined;
1230
- } | undefined);
1231
- decision: ("allow" | {
1232
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
890
+ };
891
+ decision: "allow" | {
892
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1233
893
  pluginId: string;
1234
894
  resourceType: string;
1235
- } | "deny") & ("allow" | {
1236
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1237
- pluginId: string;
1238
- resourceType: string;
1239
- } | "deny" | undefined);
895
+ } | "deny";
1240
896
  id?: string | undefined;
1241
897
  }>, {
1242
898
  id: string;
1243
- match: ("*" | {
1244
- name?: string | undefined;
1245
- actions?: string[] | undefined;
1246
- resourceType?: string | undefined;
1247
- }) & ("*" | {
899
+ match: "*" | {
1248
900
  name?: string | undefined;
1249
901
  actions?: string[] | undefined;
1250
902
  resourceType?: string | undefined;
1251
- } | undefined);
1252
- decision: ("allow" | {
1253
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1254
- pluginId: string;
1255
- resourceType: string;
1256
- } | "deny") & ("allow" | {
1257
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
903
+ };
904
+ decision: "allow" | {
905
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1258
906
  pluginId: string;
1259
907
  resourceType: string;
1260
- } | "deny" | undefined);
908
+ } | "deny";
1261
909
  }, {
1262
- match: ("*" | {
1263
- name?: string | undefined;
1264
- actions?: string[] | undefined;
1265
- resourceType?: string | undefined;
1266
- }) & ("*" | {
910
+ match: "*" | {
1267
911
  name?: string | undefined;
1268
912
  actions?: string[] | undefined;
1269
913
  resourceType?: string | undefined;
1270
- } | undefined);
1271
- decision: ("allow" | {
1272
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1273
- pluginId: string;
1274
- resourceType: string;
1275
- } | "deny") & ("allow" | {
1276
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
914
+ };
915
+ decision: "allow" | {
916
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1277
917
  pluginId: string;
1278
918
  resourceType: string;
1279
- } | "deny" | undefined);
919
+ } | "deny";
1280
920
  id?: string | undefined;
1281
921
  }>, "many">, {
1282
922
  id: string;
1283
- match: ("*" | {
923
+ match: "*" | {
1284
924
  name?: string | undefined;
1285
925
  actions?: string[] | undefined;
1286
926
  resourceType?: string | undefined;
1287
- }) & ("*" | {
927
+ };
928
+ decision: "allow" | {
929
+ conditions: PermissionCriteria<RBACPermissionCondition>;
930
+ pluginId: string;
931
+ resourceType: string;
932
+ } | "deny";
933
+ }[], {
934
+ match: "*" | {
1288
935
  name?: string | undefined;
1289
936
  actions?: string[] | undefined;
1290
937
  resourceType?: string | undefined;
1291
- } | undefined);
1292
- decision: ("allow" | {
1293
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
938
+ };
939
+ decision: "allow" | {
940
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1294
941
  pluginId: string;
1295
942
  resourceType: string;
1296
- } | "deny") & ("allow" | {
1297
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1298
- pluginId: string;
1299
- resourceType: string;
1300
- } | "deny" | undefined);
1301
- }[], {
1302
- match: ("*" | {
1303
- name?: string | undefined;
1304
- actions?: string[] | undefined;
1305
- resourceType?: string | undefined;
1306
- }) & ("*" | {
1307
- name?: string | undefined;
1308
- actions?: string[] | undefined;
1309
- resourceType?: string | undefined;
1310
- } | undefined);
1311
- decision: ("allow" | {
1312
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1313
- pluginId: string;
1314
- resourceType: string;
1315
- } | "deny") & ("allow" | {
1316
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1317
- pluginId: string;
1318
- resourceType: string;
1319
- } | "deny" | undefined);
943
+ } | "deny";
1320
944
  id?: string | undefined;
1321
945
  }[]>;
1322
946
  }, "strip", z.ZodTypeAny, {
1323
947
  id: string;
1324
948
  name: string;
1325
- members: (string[] | "*") & (string[] | "*" | undefined);
949
+ members: string[] | "*";
1326
950
  permissions: {
1327
951
  id: string;
1328
- match: ("*" | {
952
+ match: "*" | {
1329
953
  name?: string | undefined;
1330
954
  actions?: string[] | undefined;
1331
955
  resourceType?: string | undefined;
1332
- }) & ("*" | {
1333
- name?: string | undefined;
1334
- actions?: string[] | undefined;
1335
- resourceType?: string | undefined;
1336
- } | undefined);
1337
- decision: ("allow" | {
1338
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1339
- pluginId: string;
1340
- resourceType: string;
1341
- } | "deny") & ("allow" | {
1342
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
956
+ };
957
+ decision: "allow" | {
958
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1343
959
  pluginId: string;
1344
960
  resourceType: string;
1345
- } | "deny" | undefined);
961
+ } | "deny";
1346
962
  }[];
1347
963
  }, {
1348
964
  name: string;
1349
- members: (string[] | "*") & (string[] | "*" | undefined);
965
+ members: string[] | "*";
1350
966
  permissions: {
1351
- match: ("*" | {
967
+ match: "*" | {
1352
968
  name?: string | undefined;
1353
969
  actions?: string[] | undefined;
1354
970
  resourceType?: string | undefined;
1355
- }) & ("*" | {
1356
- name?: string | undefined;
1357
- actions?: string[] | undefined;
1358
- resourceType?: string | undefined;
1359
- } | undefined);
1360
- decision: ("allow" | {
1361
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
971
+ };
972
+ decision: "allow" | {
973
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1362
974
  pluginId: string;
1363
975
  resourceType: string;
1364
- } | "deny") & ("allow" | {
1365
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1366
- pluginId: string;
1367
- resourceType: string;
1368
- } | "deny" | undefined);
976
+ } | "deny";
1369
977
  id?: string | undefined;
1370
978
  }[];
1371
979
  id?: string | undefined;
1372
980
  }>, "many">>, {
1373
981
  id: string;
1374
982
  name: string;
1375
- members: (string[] | "*") & (string[] | "*" | undefined);
983
+ members: string[] | "*";
1376
984
  permissions: {
1377
985
  id: string;
1378
- match: ("*" | {
1379
- name?: string | undefined;
1380
- actions?: string[] | undefined;
1381
- resourceType?: string | undefined;
1382
- }) & ("*" | {
986
+ match: "*" | {
1383
987
  name?: string | undefined;
1384
988
  actions?: string[] | undefined;
1385
989
  resourceType?: string | undefined;
1386
- } | undefined);
1387
- decision: ("allow" | {
1388
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1389
- pluginId: string;
1390
- resourceType: string;
1391
- } | "deny") & ("allow" | {
1392
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
990
+ };
991
+ decision: "allow" | {
992
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1393
993
  pluginId: string;
1394
994
  resourceType: string;
1395
- } | "deny" | undefined);
995
+ } | "deny";
1396
996
  }[];
1397
997
  }[], {
1398
998
  name: string;
1399
- members: (string[] | "*") & (string[] | "*" | undefined);
999
+ members: string[] | "*";
1400
1000
  permissions: {
1401
- match: ("*" | {
1001
+ match: "*" | {
1402
1002
  name?: string | undefined;
1403
1003
  actions?: string[] | undefined;
1404
1004
  resourceType?: string | undefined;
1405
- }) & ("*" | {
1406
- name?: string | undefined;
1407
- actions?: string[] | undefined;
1408
- resourceType?: string | undefined;
1409
- } | undefined);
1410
- decision: ("allow" | {
1411
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1005
+ };
1006
+ decision: "allow" | {
1007
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1412
1008
  pluginId: string;
1413
1009
  resourceType: string;
1414
- } | "deny") & ("allow" | {
1415
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1416
- pluginId: string;
1417
- resourceType: string;
1418
- } | "deny" | undefined);
1010
+ } | "deny";
1419
1011
  id?: string | undefined;
1420
1012
  }[];
1421
1013
  id?: string | undefined;
@@ -1428,27 +1020,19 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
1428
1020
  roles: {
1429
1021
  id: string;
1430
1022
  name: string;
1431
- members: (string[] | "*") & (string[] | "*" | undefined);
1023
+ members: string[] | "*";
1432
1024
  permissions: {
1433
1025
  id: string;
1434
- match: ("*" | {
1435
- name?: string | undefined;
1436
- actions?: string[] | undefined;
1437
- resourceType?: string | undefined;
1438
- }) & ("*" | {
1026
+ match: "*" | {
1439
1027
  name?: string | undefined;
1440
1028
  actions?: string[] | undefined;
1441
1029
  resourceType?: string | undefined;
1442
- } | undefined);
1443
- decision: ("allow" | {
1444
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1445
- pluginId: string;
1446
- resourceType: string;
1447
- } | "deny") & ("allow" | {
1448
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1030
+ };
1031
+ decision: "allow" | {
1032
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1449
1033
  pluginId: string;
1450
1034
  resourceType: string;
1451
- } | "deny" | undefined);
1035
+ } | "deny";
1452
1036
  }[];
1453
1037
  }[];
1454
1038
  }, {
@@ -1458,26 +1042,18 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
1458
1042
  } | undefined;
1459
1043
  roles?: {
1460
1044
  name: string;
1461
- members: (string[] | "*") & (string[] | "*" | undefined);
1045
+ members: string[] | "*";
1462
1046
  permissions: {
1463
- match: ("*" | {
1047
+ match: "*" | {
1464
1048
  name?: string | undefined;
1465
1049
  actions?: string[] | undefined;
1466
1050
  resourceType?: string | undefined;
1467
- }) & ("*" | {
1468
- name?: string | undefined;
1469
- actions?: string[] | undefined;
1470
- resourceType?: string | undefined;
1471
- } | undefined);
1472
- decision: ("allow" | {
1473
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1051
+ };
1052
+ decision: "allow" | {
1053
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1474
1054
  pluginId: string;
1475
1055
  resourceType: string;
1476
- } | "deny") & ("allow" | {
1477
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1478
- pluginId: string;
1479
- resourceType: string;
1480
- } | "deny" | undefined);
1056
+ } | "deny";
1481
1057
  id?: string | undefined;
1482
1058
  }[];
1483
1059
  id?: string | undefined;
@@ -1492,7 +1068,7 @@ declare function isAnyOfPermissionCriteria(conditions: PermissionCriteria<RBACPe
1492
1068
  /** @public */
1493
1069
  declare function isNotPermissionCriteria(conditions: PermissionCriteria<RBACPermissionCondition>): conditions is NotCriteria<RBACPermissionCondition>;
1494
1070
  /** @public */
1495
- declare const PolicyParser: z.ZodObject<{
1071
+ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
1496
1072
  name: z.ZodDefault<z.ZodString>;
1497
1073
  options: z.ZodDefault<z.ZodObject<{
1498
1074
  resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
@@ -1525,246 +1101,194 @@ declare const PolicyParser: z.ZodObject<{
1525
1101
  resourceType: z.ZodString;
1526
1102
  conditions: z.ZodType<PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, PermissionCriteria<RBACPermissionCondition>>;
1527
1103
  }, "strip", z.ZodTypeAny, {
1528
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1104
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1529
1105
  pluginId: string;
1530
1106
  resourceType: string;
1531
1107
  }, {
1532
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1108
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1533
1109
  pluginId: string;
1534
1110
  resourceType: string;
1535
1111
  }>]>;
1536
1112
  }, "strip", z.ZodTypeAny, {
1537
1113
  id: string;
1538
- match: ("*" | {
1539
- name?: string | undefined;
1540
- actions?: string[] | undefined;
1541
- resourceType?: string | undefined;
1542
- }) & ("*" | {
1114
+ match: "*" | {
1543
1115
  name?: string | undefined;
1544
1116
  actions?: string[] | undefined;
1545
1117
  resourceType?: string | undefined;
1546
- } | undefined);
1547
- decision: ("allow" | {
1548
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1118
+ };
1119
+ decision: "allow" | {
1120
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1549
1121
  pluginId: string;
1550
1122
  resourceType: string;
1551
- } | "deny") & ("allow" | {
1552
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1553
- pluginId: string;
1554
- resourceType: string;
1555
- } | "deny" | undefined);
1123
+ } | "deny";
1556
1124
  }, {
1557
- match: ("*" | {
1125
+ match: "*" | {
1558
1126
  name?: string | undefined;
1559
1127
  actions?: string[] | undefined;
1560
1128
  resourceType?: string | undefined;
1561
- }) & ("*" | {
1562
- name?: string | undefined;
1563
- actions?: string[] | undefined;
1564
- resourceType?: string | undefined;
1565
- } | undefined);
1566
- decision: ("allow" | {
1567
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1568
- pluginId: string;
1569
- resourceType: string;
1570
- } | "deny") & ("allow" | {
1571
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1129
+ };
1130
+ decision: "allow" | {
1131
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1572
1132
  pluginId: string;
1573
1133
  resourceType: string;
1574
- } | "deny" | undefined);
1134
+ } | "deny";
1575
1135
  id?: string | undefined;
1576
1136
  }>, {
1577
1137
  id: string;
1578
- match: ("*" | {
1579
- name?: string | undefined;
1580
- actions?: string[] | undefined;
1581
- resourceType?: string | undefined;
1582
- }) & ("*" | {
1138
+ match: "*" | {
1583
1139
  name?: string | undefined;
1584
1140
  actions?: string[] | undefined;
1585
1141
  resourceType?: string | undefined;
1586
- } | undefined);
1587
- decision: ("allow" | {
1588
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1589
- pluginId: string;
1590
- resourceType: string;
1591
- } | "deny") & ("allow" | {
1592
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1142
+ };
1143
+ decision: "allow" | {
1144
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1593
1145
  pluginId: string;
1594
1146
  resourceType: string;
1595
- } | "deny" | undefined);
1147
+ } | "deny";
1596
1148
  }, {
1597
- match: ("*" | {
1149
+ match: "*" | {
1598
1150
  name?: string | undefined;
1599
1151
  actions?: string[] | undefined;
1600
1152
  resourceType?: string | undefined;
1601
- }) & ("*" | {
1602
- name?: string | undefined;
1603
- actions?: string[] | undefined;
1604
- resourceType?: string | undefined;
1605
- } | undefined);
1606
- decision: ("allow" | {
1607
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1608
- pluginId: string;
1609
- resourceType: string;
1610
- } | "deny") & ("allow" | {
1611
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1153
+ };
1154
+ decision: "allow" | {
1155
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1612
1156
  pluginId: string;
1613
1157
  resourceType: string;
1614
- } | "deny" | undefined);
1158
+ } | "deny";
1615
1159
  id?: string | undefined;
1616
1160
  }>, "many">, {
1617
1161
  id: string;
1618
- match: ("*" | {
1619
- name?: string | undefined;
1620
- actions?: string[] | undefined;
1621
- resourceType?: string | undefined;
1622
- }) & ("*" | {
1162
+ match: "*" | {
1623
1163
  name?: string | undefined;
1624
1164
  actions?: string[] | undefined;
1625
1165
  resourceType?: string | undefined;
1626
- } | undefined);
1627
- decision: ("allow" | {
1628
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1166
+ };
1167
+ decision: "allow" | {
1168
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1629
1169
  pluginId: string;
1630
1170
  resourceType: string;
1631
- } | "deny") & ("allow" | {
1632
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1633
- pluginId: string;
1634
- resourceType: string;
1635
- } | "deny" | undefined);
1171
+ } | "deny";
1636
1172
  }[], {
1637
- match: ("*" | {
1173
+ match: "*" | {
1638
1174
  name?: string | undefined;
1639
1175
  actions?: string[] | undefined;
1640
1176
  resourceType?: string | undefined;
1641
- }) & ("*" | {
1642
- name?: string | undefined;
1643
- actions?: string[] | undefined;
1644
- resourceType?: string | undefined;
1645
- } | undefined);
1646
- decision: ("allow" | {
1647
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1648
- pluginId: string;
1649
- resourceType: string;
1650
- } | "deny") & ("allow" | {
1651
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1177
+ };
1178
+ decision: "allow" | {
1179
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1652
1180
  pluginId: string;
1653
1181
  resourceType: string;
1654
- } | "deny" | undefined);
1182
+ } | "deny";
1655
1183
  id?: string | undefined;
1656
1184
  }[]>;
1657
1185
  }, "strip", z.ZodTypeAny, {
1658
1186
  id: string;
1659
1187
  name: string;
1660
- members: (string[] | "*") & (string[] | "*" | undefined);
1188
+ members: string[] | "*";
1661
1189
  permissions: {
1662
1190
  id: string;
1663
- match: ("*" | {
1664
- name?: string | undefined;
1665
- actions?: string[] | undefined;
1666
- resourceType?: string | undefined;
1667
- }) & ("*" | {
1191
+ match: "*" | {
1668
1192
  name?: string | undefined;
1669
1193
  actions?: string[] | undefined;
1670
1194
  resourceType?: string | undefined;
1671
- } | undefined);
1672
- decision: ("allow" | {
1673
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1195
+ };
1196
+ decision: "allow" | {
1197
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1674
1198
  pluginId: string;
1675
1199
  resourceType: string;
1676
- } | "deny") & ("allow" | {
1677
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1678
- pluginId: string;
1679
- resourceType: string;
1680
- } | "deny" | undefined);
1200
+ } | "deny";
1681
1201
  }[];
1682
1202
  }, {
1683
1203
  name: string;
1684
- members: (string[] | "*") & (string[] | "*" | undefined);
1204
+ members: string[] | "*";
1685
1205
  permissions: {
1686
- match: ("*" | {
1687
- name?: string | undefined;
1688
- actions?: string[] | undefined;
1689
- resourceType?: string | undefined;
1690
- }) & ("*" | {
1206
+ match: "*" | {
1691
1207
  name?: string | undefined;
1692
1208
  actions?: string[] | undefined;
1693
1209
  resourceType?: string | undefined;
1694
- } | undefined);
1695
- decision: ("allow" | {
1696
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1697
- pluginId: string;
1698
- resourceType: string;
1699
- } | "deny") & ("allow" | {
1700
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1210
+ };
1211
+ decision: "allow" | {
1212
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1701
1213
  pluginId: string;
1702
1214
  resourceType: string;
1703
- } | "deny" | undefined);
1215
+ } | "deny";
1704
1216
  id?: string | undefined;
1705
1217
  }[];
1706
1218
  id?: string | undefined;
1707
1219
  }>, "many">>, {
1708
1220
  id: string;
1709
1221
  name: string;
1710
- members: (string[] | "*") & (string[] | "*" | undefined);
1222
+ members: string[] | "*";
1711
1223
  permissions: {
1712
1224
  id: string;
1713
- match: ("*" | {
1714
- name?: string | undefined;
1715
- actions?: string[] | undefined;
1716
- resourceType?: string | undefined;
1717
- }) & ("*" | {
1225
+ match: "*" | {
1718
1226
  name?: string | undefined;
1719
1227
  actions?: string[] | undefined;
1720
1228
  resourceType?: string | undefined;
1721
- } | undefined);
1722
- decision: ("allow" | {
1723
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1229
+ };
1230
+ decision: "allow" | {
1231
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1724
1232
  pluginId: string;
1725
1233
  resourceType: string;
1726
- } | "deny") & ("allow" | {
1727
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1728
- pluginId: string;
1729
- resourceType: string;
1730
- } | "deny" | undefined);
1234
+ } | "deny";
1731
1235
  }[];
1732
1236
  }[], {
1733
1237
  name: string;
1734
- members: (string[] | "*") & (string[] | "*" | undefined);
1238
+ members: string[] | "*";
1735
1239
  permissions: {
1736
- match: ("*" | {
1737
- name?: string | undefined;
1738
- actions?: string[] | undefined;
1739
- resourceType?: string | undefined;
1740
- }) & ("*" | {
1240
+ match: "*" | {
1741
1241
  name?: string | undefined;
1742
1242
  actions?: string[] | undefined;
1743
1243
  resourceType?: string | undefined;
1744
- } | undefined);
1745
- decision: ("allow" | {
1746
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1747
- pluginId: string;
1748
- resourceType: string;
1749
- } | "deny") & ("allow" | {
1750
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1244
+ };
1245
+ decision: "allow" | {
1246
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1751
1247
  pluginId: string;
1752
1248
  resourceType: string;
1753
- } | "deny" | undefined);
1249
+ } | "deny";
1754
1250
  id?: string | undefined;
1755
1251
  }[];
1756
1252
  id?: string | undefined;
1757
1253
  }[] | undefined>;
1254
+ }, {
1255
+ /**
1256
+ * Internal ID for lookups/references.
1257
+ */
1758
1258
  id: z.ZodString;
1259
+ /**
1260
+ * Date that the version was created in ISO-8601 format.
1261
+ */
1759
1262
  createdAt: z.ZodString;
1263
+ /**
1264
+ * Entity ref of the user that created the version.
1265
+ */
1760
1266
  createdBy: z.ZodString;
1267
+ /**
1268
+ * Latest date on which the version was updated in ISO-8601 format.
1269
+ */
1761
1270
  updatedAt: z.ZodString;
1271
+ /**
1272
+ * Entity ref of the latest user that updated the version.
1273
+ */
1762
1274
  updatedBy: z.ZodString;
1275
+ /**
1276
+ * Description of the changes introduced with the version.
1277
+ */
1763
1278
  description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
1279
+ /**
1280
+ * Latest date on which the version was published in ISO-8601 format.
1281
+ */
1764
1282
  lastPublishedAt: z.ZodNullable<z.ZodOptional<z.ZodString>>;
1283
+ /**
1284
+ * Entity ref of the latest user that published the version.
1285
+ */
1765
1286
  lastPublishedBy: z.ZodNullable<z.ZodOptional<z.ZodString>>;
1287
+ /**
1288
+ * Current status of the policy.
1289
+ */
1766
1290
  status: z.ZodEnum<["draft", "active", "inactive"]>;
1767
- }, "strip", z.ZodTypeAny, {
1291
+ }>, "strip", z.ZodTypeAny, {
1768
1292
  id: string;
1769
1293
  name: string;
1770
1294
  status: "active" | "inactive" | "draft";
@@ -1776,27 +1300,19 @@ declare const PolicyParser: z.ZodObject<{
1776
1300
  roles: {
1777
1301
  id: string;
1778
1302
  name: string;
1779
- members: (string[] | "*") & (string[] | "*" | undefined);
1303
+ members: string[] | "*";
1780
1304
  permissions: {
1781
1305
  id: string;
1782
- match: ("*" | {
1306
+ match: "*" | {
1783
1307
  name?: string | undefined;
1784
1308
  actions?: string[] | undefined;
1785
1309
  resourceType?: string | undefined;
1786
- }) & ("*" | {
1787
- name?: string | undefined;
1788
- actions?: string[] | undefined;
1789
- resourceType?: string | undefined;
1790
- } | undefined);
1791
- decision: ("allow" | {
1792
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1793
- pluginId: string;
1794
- resourceType: string;
1795
- } | "deny") & ("allow" | {
1796
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1310
+ };
1311
+ decision: "allow" | {
1312
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1797
1313
  pluginId: string;
1798
1314
  resourceType: string;
1799
- } | "deny" | undefined);
1315
+ } | "deny";
1800
1316
  }[];
1801
1317
  }[];
1802
1318
  createdBy: string;
@@ -1815,33 +1331,25 @@ declare const PolicyParser: z.ZodObject<{
1815
1331
  options?: {
1816
1332
  resolutionStrategy: "first-match" | "any-allow";
1817
1333
  } | undefined;
1334
+ description?: string | null | undefined;
1818
1335
  roles?: {
1819
1336
  name: string;
1820
- members: (string[] | "*") & (string[] | "*" | undefined);
1337
+ members: string[] | "*";
1821
1338
  permissions: {
1822
- match: ("*" | {
1339
+ match: "*" | {
1823
1340
  name?: string | undefined;
1824
1341
  actions?: string[] | undefined;
1825
1342
  resourceType?: string | undefined;
1826
- }) & ("*" | {
1827
- name?: string | undefined;
1828
- actions?: string[] | undefined;
1829
- resourceType?: string | undefined;
1830
- } | undefined);
1831
- decision: ("allow" | {
1832
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1833
- pluginId: string;
1834
- resourceType: string;
1835
- } | "deny") & ("allow" | {
1836
- conditions: PermissionCriteria<RBACPermissionCondition> & (PermissionCriteria<RBACPermissionCondition> | undefined);
1343
+ };
1344
+ decision: "allow" | {
1345
+ conditions: PermissionCriteria<RBACPermissionCondition>;
1837
1346
  pluginId: string;
1838
1347
  resourceType: string;
1839
- } | "deny" | undefined);
1348
+ } | "deny";
1840
1349
  id?: string | undefined;
1841
1350
  }[];
1842
1351
  id?: string | undefined;
1843
1352
  }[] | undefined;
1844
- description?: string | null | undefined;
1845
1353
  lastPublishedAt?: string | null | undefined;
1846
1354
  lastPublishedBy?: string | null | undefined;
1847
1355
  }>;
@@ -1908,232 +1416,152 @@ declare const CreateDraftRequestParser: z.ZodObject<{
1908
1416
  resourceType: z.ZodString;
1909
1417
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
1910
1418
  }, "strip", z.ZodTypeAny, {
1911
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1419
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1912
1420
  pluginId: string;
1913
1421
  resourceType: string;
1914
1422
  }, {
1915
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1423
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1916
1424
  pluginId: string;
1917
1425
  resourceType: string;
1918
1426
  }>]>;
1919
1427
  }, "strip", z.ZodTypeAny, {
1920
1428
  id: string;
1921
- match: ("*" | {
1922
- name?: string | undefined;
1923
- actions?: string[] | undefined;
1924
- resourceType?: string | undefined;
1925
- }) & ("*" | {
1429
+ match: "*" | {
1926
1430
  name?: string | undefined;
1927
1431
  actions?: string[] | undefined;
1928
1432
  resourceType?: string | undefined;
1929
- } | undefined);
1930
- decision: ("allow" | {
1931
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1932
- pluginId: string;
1933
- resourceType: string;
1934
- } | "deny") & ("allow" | {
1935
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1433
+ };
1434
+ decision: "allow" | {
1435
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1936
1436
  pluginId: string;
1937
1437
  resourceType: string;
1938
- } | "deny" | undefined);
1438
+ } | "deny";
1939
1439
  }, {
1940
- match: ("*" | {
1440
+ match: "*" | {
1941
1441
  name?: string | undefined;
1942
1442
  actions?: string[] | undefined;
1943
1443
  resourceType?: string | undefined;
1944
- }) & ("*" | {
1945
- name?: string | undefined;
1946
- actions?: string[] | undefined;
1947
- resourceType?: string | undefined;
1948
- } | undefined);
1949
- decision: ("allow" | {
1950
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1951
- pluginId: string;
1952
- resourceType: string;
1953
- } | "deny") & ("allow" | {
1954
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1444
+ };
1445
+ decision: "allow" | {
1446
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1955
1447
  pluginId: string;
1956
1448
  resourceType: string;
1957
- } | "deny" | undefined);
1449
+ } | "deny";
1958
1450
  id?: string | undefined;
1959
1451
  }>, {
1960
1452
  id: string;
1961
- match: ("*" | {
1962
- name?: string | undefined;
1963
- actions?: string[] | undefined;
1964
- resourceType?: string | undefined;
1965
- }) & ("*" | {
1453
+ match: "*" | {
1966
1454
  name?: string | undefined;
1967
1455
  actions?: string[] | undefined;
1968
1456
  resourceType?: string | undefined;
1969
- } | undefined);
1970
- decision: ("allow" | {
1971
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1457
+ };
1458
+ decision: "allow" | {
1459
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1972
1460
  pluginId: string;
1973
1461
  resourceType: string;
1974
- } | "deny") & ("allow" | {
1975
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1976
- pluginId: string;
1977
- resourceType: string;
1978
- } | "deny" | undefined);
1462
+ } | "deny";
1979
1463
  }, {
1980
- match: ("*" | {
1464
+ match: "*" | {
1981
1465
  name?: string | undefined;
1982
1466
  actions?: string[] | undefined;
1983
1467
  resourceType?: string | undefined;
1984
- }) & ("*" | {
1985
- name?: string | undefined;
1986
- actions?: string[] | undefined;
1987
- resourceType?: string | undefined;
1988
- } | undefined);
1989
- decision: ("allow" | {
1990
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1991
- pluginId: string;
1992
- resourceType: string;
1993
- } | "deny") & ("allow" | {
1994
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1468
+ };
1469
+ decision: "allow" | {
1470
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1995
1471
  pluginId: string;
1996
1472
  resourceType: string;
1997
- } | "deny" | undefined);
1473
+ } | "deny";
1998
1474
  id?: string | undefined;
1999
1475
  }>, "many">, {
2000
1476
  id: string;
2001
- match: ("*" | {
2002
- name?: string | undefined;
2003
- actions?: string[] | undefined;
2004
- resourceType?: string | undefined;
2005
- }) & ("*" | {
1477
+ match: "*" | {
2006
1478
  name?: string | undefined;
2007
1479
  actions?: string[] | undefined;
2008
1480
  resourceType?: string | undefined;
2009
- } | undefined);
2010
- decision: ("allow" | {
2011
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1481
+ };
1482
+ decision: "allow" | {
1483
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2012
1484
  pluginId: string;
2013
1485
  resourceType: string;
2014
- } | "deny") & ("allow" | {
2015
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2016
- pluginId: string;
2017
- resourceType: string;
2018
- } | "deny" | undefined);
1486
+ } | "deny";
2019
1487
  }[], {
2020
- match: ("*" | {
2021
- name?: string | undefined;
2022
- actions?: string[] | undefined;
2023
- resourceType?: string | undefined;
2024
- }) & ("*" | {
1488
+ match: "*" | {
2025
1489
  name?: string | undefined;
2026
1490
  actions?: string[] | undefined;
2027
1491
  resourceType?: string | undefined;
2028
- } | undefined);
2029
- decision: ("allow" | {
2030
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2031
- pluginId: string;
2032
- resourceType: string;
2033
- } | "deny") & ("allow" | {
2034
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1492
+ };
1493
+ decision: "allow" | {
1494
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2035
1495
  pluginId: string;
2036
1496
  resourceType: string;
2037
- } | "deny" | undefined);
1497
+ } | "deny";
2038
1498
  id?: string | undefined;
2039
1499
  }[]>;
2040
1500
  }, "strip", z.ZodTypeAny, {
2041
1501
  id: string;
2042
1502
  name: string;
2043
- members: (string[] | "*") & (string[] | "*" | undefined);
1503
+ members: string[] | "*";
2044
1504
  permissions: {
2045
1505
  id: string;
2046
- match: ("*" | {
2047
- name?: string | undefined;
2048
- actions?: string[] | undefined;
2049
- resourceType?: string | undefined;
2050
- }) & ("*" | {
1506
+ match: "*" | {
2051
1507
  name?: string | undefined;
2052
1508
  actions?: string[] | undefined;
2053
1509
  resourceType?: string | undefined;
2054
- } | undefined);
2055
- decision: ("allow" | {
2056
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1510
+ };
1511
+ decision: "allow" | {
1512
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2057
1513
  pluginId: string;
2058
1514
  resourceType: string;
2059
- } | "deny") & ("allow" | {
2060
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2061
- pluginId: string;
2062
- resourceType: string;
2063
- } | "deny" | undefined);
1515
+ } | "deny";
2064
1516
  }[];
2065
1517
  }, {
2066
1518
  name: string;
2067
- members: (string[] | "*") & (string[] | "*" | undefined);
1519
+ members: string[] | "*";
2068
1520
  permissions: {
2069
- match: ("*" | {
2070
- name?: string | undefined;
2071
- actions?: string[] | undefined;
2072
- resourceType?: string | undefined;
2073
- }) & ("*" | {
1521
+ match: "*" | {
2074
1522
  name?: string | undefined;
2075
1523
  actions?: string[] | undefined;
2076
1524
  resourceType?: string | undefined;
2077
- } | undefined);
2078
- decision: ("allow" | {
2079
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2080
- pluginId: string;
2081
- resourceType: string;
2082
- } | "deny") & ("allow" | {
2083
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1525
+ };
1526
+ decision: "allow" | {
1527
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2084
1528
  pluginId: string;
2085
1529
  resourceType: string;
2086
- } | "deny" | undefined);
1530
+ } | "deny";
2087
1531
  id?: string | undefined;
2088
1532
  }[];
2089
1533
  id?: string | undefined;
2090
1534
  }>, "many">>, {
2091
1535
  id: string;
2092
1536
  name: string;
2093
- members: (string[] | "*") & (string[] | "*" | undefined);
1537
+ members: string[] | "*";
2094
1538
  permissions: {
2095
1539
  id: string;
2096
- match: ("*" | {
2097
- name?: string | undefined;
2098
- actions?: string[] | undefined;
2099
- resourceType?: string | undefined;
2100
- }) & ("*" | {
1540
+ match: "*" | {
2101
1541
  name?: string | undefined;
2102
1542
  actions?: string[] | undefined;
2103
1543
  resourceType?: string | undefined;
2104
- } | undefined);
2105
- decision: ("allow" | {
2106
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1544
+ };
1545
+ decision: "allow" | {
1546
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2107
1547
  pluginId: string;
2108
1548
  resourceType: string;
2109
- } | "deny") & ("allow" | {
2110
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2111
- pluginId: string;
2112
- resourceType: string;
2113
- } | "deny" | undefined);
1549
+ } | "deny";
2114
1550
  }[];
2115
1551
  }[], {
2116
1552
  name: string;
2117
- members: (string[] | "*") & (string[] | "*" | undefined);
1553
+ members: string[] | "*";
2118
1554
  permissions: {
2119
- match: ("*" | {
1555
+ match: "*" | {
2120
1556
  name?: string | undefined;
2121
1557
  actions?: string[] | undefined;
2122
1558
  resourceType?: string | undefined;
2123
- }) & ("*" | {
2124
- name?: string | undefined;
2125
- actions?: string[] | undefined;
2126
- resourceType?: string | undefined;
2127
- } | undefined);
2128
- decision: ("allow" | {
2129
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2130
- pluginId: string;
2131
- resourceType: string;
2132
- } | "deny") & ("allow" | {
2133
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1559
+ };
1560
+ decision: "allow" | {
1561
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2134
1562
  pluginId: string;
2135
1563
  resourceType: string;
2136
- } | "deny" | undefined);
1564
+ } | "deny";
2137
1565
  id?: string | undefined;
2138
1566
  }[];
2139
1567
  id?: string | undefined;
@@ -2146,27 +1574,19 @@ declare const CreateDraftRequestParser: z.ZodObject<{
2146
1574
  roles: {
2147
1575
  id: string;
2148
1576
  name: string;
2149
- members: (string[] | "*") & (string[] | "*" | undefined);
1577
+ members: string[] | "*";
2150
1578
  permissions: {
2151
1579
  id: string;
2152
- match: ("*" | {
1580
+ match: "*" | {
2153
1581
  name?: string | undefined;
2154
1582
  actions?: string[] | undefined;
2155
1583
  resourceType?: string | undefined;
2156
- }) & ("*" | {
2157
- name?: string | undefined;
2158
- actions?: string[] | undefined;
2159
- resourceType?: string | undefined;
2160
- } | undefined);
2161
- decision: ("allow" | {
2162
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1584
+ };
1585
+ decision: "allow" | {
1586
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2163
1587
  pluginId: string;
2164
1588
  resourceType: string;
2165
- } | "deny") & ("allow" | {
2166
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2167
- pluginId: string;
2168
- resourceType: string;
2169
- } | "deny" | undefined);
1589
+ } | "deny";
2170
1590
  }[];
2171
1591
  }[];
2172
1592
  }, {
@@ -2176,42 +1596,34 @@ declare const CreateDraftRequestParser: z.ZodObject<{
2176
1596
  } | undefined;
2177
1597
  roles?: {
2178
1598
  name: string;
2179
- members: (string[] | "*") & (string[] | "*" | undefined);
1599
+ members: string[] | "*";
2180
1600
  permissions: {
2181
- match: ("*" | {
2182
- name?: string | undefined;
2183
- actions?: string[] | undefined;
2184
- resourceType?: string | undefined;
2185
- }) & ("*" | {
1601
+ match: "*" | {
2186
1602
  name?: string | undefined;
2187
1603
  actions?: string[] | undefined;
2188
1604
  resourceType?: string | undefined;
2189
- } | undefined);
2190
- decision: ("allow" | {
2191
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2192
- pluginId: string;
2193
- resourceType: string;
2194
- } | "deny") & ("allow" | {
2195
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1605
+ };
1606
+ decision: "allow" | {
1607
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2196
1608
  pluginId: string;
2197
1609
  resourceType: string;
2198
- } | "deny" | undefined);
1610
+ } | "deny";
2199
1611
  id?: string | undefined;
2200
1612
  }[];
2201
1613
  id?: string | undefined;
2202
1614
  }[] | undefined;
2203
1615
  }>;
2204
1616
  /** @public */
2205
- declare const UpdateDraftRequestParser: z.ZodObject<{
2206
- name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
2207
- options: z.ZodOptional<z.ZodDefault<z.ZodObject<{
1617
+ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
1618
+ name: z.ZodDefault<z.ZodString>;
1619
+ options: z.ZodDefault<z.ZodObject<{
2208
1620
  resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
2209
1621
  }, "strip", z.ZodTypeAny, {
2210
1622
  resolutionStrategy: "first-match" | "any-allow";
2211
1623
  }, {
2212
1624
  resolutionStrategy: "first-match" | "any-allow";
2213
- }>>>;
2214
- roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
1625
+ }>>;
1626
+ roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
2215
1627
  name: z.ZodString;
2216
1628
  id: z.ZodDefault<z.ZodString>;
2217
1629
  members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
@@ -2235,237 +1647,340 @@ declare const UpdateDraftRequestParser: z.ZodObject<{
2235
1647
  resourceType: z.ZodString;
2236
1648
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
2237
1649
  }, "strip", z.ZodTypeAny, {
2238
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1650
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2239
1651
  pluginId: string;
2240
1652
  resourceType: string;
2241
1653
  }, {
2242
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1654
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2243
1655
  pluginId: string;
2244
1656
  resourceType: string;
2245
1657
  }>]>;
2246
1658
  }, "strip", z.ZodTypeAny, {
2247
1659
  id: string;
2248
- match: ("*" | {
1660
+ match: "*" | {
2249
1661
  name?: string | undefined;
2250
1662
  actions?: string[] | undefined;
2251
1663
  resourceType?: string | undefined;
2252
- }) & ("*" | {
1664
+ };
1665
+ decision: "allow" | {
1666
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1667
+ pluginId: string;
1668
+ resourceType: string;
1669
+ } | "deny";
1670
+ }, {
1671
+ match: "*" | {
2253
1672
  name?: string | undefined;
2254
1673
  actions?: string[] | undefined;
2255
1674
  resourceType?: string | undefined;
2256
- } | undefined);
2257
- decision: ("allow" | {
2258
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1675
+ };
1676
+ decision: "allow" | {
1677
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2259
1678
  pluginId: string;
2260
1679
  resourceType: string;
2261
- } | "deny") & ("allow" | {
2262
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1680
+ } | "deny";
1681
+ id?: string | undefined;
1682
+ }>, {
1683
+ id: string;
1684
+ match: "*" | {
1685
+ name?: string | undefined;
1686
+ actions?: string[] | undefined;
1687
+ resourceType?: string | undefined;
1688
+ };
1689
+ decision: "allow" | {
1690
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2263
1691
  pluginId: string;
2264
1692
  resourceType: string;
2265
- } | "deny" | undefined);
1693
+ } | "deny";
2266
1694
  }, {
2267
- match: ("*" | {
1695
+ match: "*" | {
2268
1696
  name?: string | undefined;
2269
1697
  actions?: string[] | undefined;
2270
1698
  resourceType?: string | undefined;
2271
- }) & ("*" | {
1699
+ };
1700
+ decision: "allow" | {
1701
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1702
+ pluginId: string;
1703
+ resourceType: string;
1704
+ } | "deny";
1705
+ id?: string | undefined;
1706
+ }>, "many">, {
1707
+ id: string;
1708
+ match: "*" | {
2272
1709
  name?: string | undefined;
2273
1710
  actions?: string[] | undefined;
2274
1711
  resourceType?: string | undefined;
2275
- } | undefined);
2276
- decision: ("allow" | {
2277
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1712
+ };
1713
+ decision: "allow" | {
1714
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2278
1715
  pluginId: string;
2279
1716
  resourceType: string;
2280
- } | "deny") & ("allow" | {
2281
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1717
+ } | "deny";
1718
+ }[], {
1719
+ match: "*" | {
1720
+ name?: string | undefined;
1721
+ actions?: string[] | undefined;
1722
+ resourceType?: string | undefined;
1723
+ };
1724
+ decision: "allow" | {
1725
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2282
1726
  pluginId: string;
2283
1727
  resourceType: string;
2284
- } | "deny" | undefined);
1728
+ } | "deny";
2285
1729
  id?: string | undefined;
2286
- }>, {
1730
+ }[]>;
1731
+ }, "strip", z.ZodTypeAny, {
1732
+ id: string;
1733
+ name: string;
1734
+ members: string[] | "*";
1735
+ permissions: {
2287
1736
  id: string;
2288
- match: ("*" | {
1737
+ match: "*" | {
2289
1738
  name?: string | undefined;
2290
1739
  actions?: string[] | undefined;
2291
1740
  resourceType?: string | undefined;
2292
- }) & ("*" | {
1741
+ };
1742
+ decision: "allow" | {
1743
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1744
+ pluginId: string;
1745
+ resourceType: string;
1746
+ } | "deny";
1747
+ }[];
1748
+ }, {
1749
+ name: string;
1750
+ members: string[] | "*";
1751
+ permissions: {
1752
+ match: "*" | {
2293
1753
  name?: string | undefined;
2294
1754
  actions?: string[] | undefined;
2295
1755
  resourceType?: string | undefined;
2296
- } | undefined);
2297
- decision: ("allow" | {
2298
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1756
+ };
1757
+ decision: "allow" | {
1758
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2299
1759
  pluginId: string;
2300
1760
  resourceType: string;
2301
- } | "deny") & ("allow" | {
2302
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1761
+ } | "deny";
1762
+ id?: string | undefined;
1763
+ }[];
1764
+ id?: string | undefined;
1765
+ }>, "many">>, {
1766
+ id: string;
1767
+ name: string;
1768
+ members: string[] | "*";
1769
+ permissions: {
1770
+ id: string;
1771
+ match: "*" | {
1772
+ name?: string | undefined;
1773
+ actions?: string[] | undefined;
1774
+ resourceType?: string | undefined;
1775
+ };
1776
+ decision: "allow" | {
1777
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2303
1778
  pluginId: string;
2304
1779
  resourceType: string;
2305
- } | "deny" | undefined);
2306
- }, {
2307
- match: ("*" | {
1780
+ } | "deny";
1781
+ }[];
1782
+ }[], {
1783
+ name: string;
1784
+ members: string[] | "*";
1785
+ permissions: {
1786
+ match: "*" | {
1787
+ name?: string | undefined;
1788
+ actions?: string[] | undefined;
1789
+ resourceType?: string | undefined;
1790
+ };
1791
+ decision: "allow" | {
1792
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1793
+ pluginId: string;
1794
+ resourceType: string;
1795
+ } | "deny";
1796
+ id?: string | undefined;
1797
+ }[];
1798
+ id?: string | undefined;
1799
+ }[] | undefined>;
1800
+ }, {
1801
+ name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
1802
+ options: z.ZodOptional<z.ZodDefault<z.ZodObject<{
1803
+ resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
1804
+ }, "strip", z.ZodTypeAny, {
1805
+ resolutionStrategy: "first-match" | "any-allow";
1806
+ }, {
1807
+ resolutionStrategy: "first-match" | "any-allow";
1808
+ }>>>;
1809
+ roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
1810
+ name: z.ZodString;
1811
+ id: z.ZodDefault<z.ZodString>;
1812
+ members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
1813
+ permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
1814
+ id: z.ZodDefault<z.ZodString>;
1815
+ match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
1816
+ name: z.ZodOptional<z.ZodString>;
1817
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1818
+ resourceType: z.ZodOptional<z.ZodString>;
1819
+ }, "strip", z.ZodTypeAny, {
2308
1820
  name?: string | undefined;
2309
1821
  actions?: string[] | undefined;
2310
1822
  resourceType?: string | undefined;
2311
- }) & ("*" | {
1823
+ }, {
2312
1824
  name?: string | undefined;
2313
1825
  actions?: string[] | undefined;
2314
1826
  resourceType?: string | undefined;
2315
- } | undefined);
2316
- decision: ("allow" | {
2317
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1827
+ }>]>;
1828
+ decision: z.ZodUnion<[z.ZodUnion<[z.ZodLiteral<"allow">, z.ZodLiteral<"deny">]>, z.ZodObject<{
1829
+ pluginId: z.ZodString;
1830
+ resourceType: z.ZodString;
1831
+ conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
1832
+ }, "strip", z.ZodTypeAny, {
1833
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2318
1834
  pluginId: string;
2319
1835
  resourceType: string;
2320
- } | "deny") & ("allow" | {
2321
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1836
+ }, {
1837
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2322
1838
  pluginId: string;
2323
1839
  resourceType: string;
2324
- } | "deny" | undefined);
2325
- id?: string | undefined;
2326
- }>, "many">, {
1840
+ }>]>;
1841
+ }, "strip", z.ZodTypeAny, {
2327
1842
  id: string;
2328
- match: ("*" | {
1843
+ match: "*" | {
2329
1844
  name?: string | undefined;
2330
1845
  actions?: string[] | undefined;
2331
1846
  resourceType?: string | undefined;
2332
- }) & ("*" | {
1847
+ };
1848
+ decision: "allow" | {
1849
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1850
+ pluginId: string;
1851
+ resourceType: string;
1852
+ } | "deny";
1853
+ }, {
1854
+ match: "*" | {
2333
1855
  name?: string | undefined;
2334
1856
  actions?: string[] | undefined;
2335
1857
  resourceType?: string | undefined;
2336
- } | undefined);
2337
- decision: ("allow" | {
2338
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1858
+ };
1859
+ decision: "allow" | {
1860
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2339
1861
  pluginId: string;
2340
1862
  resourceType: string;
2341
- } | "deny") & ("allow" | {
2342
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1863
+ } | "deny";
1864
+ id?: string | undefined;
1865
+ }>, {
1866
+ id: string;
1867
+ match: "*" | {
1868
+ name?: string | undefined;
1869
+ actions?: string[] | undefined;
1870
+ resourceType?: string | undefined;
1871
+ };
1872
+ decision: "allow" | {
1873
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2343
1874
  pluginId: string;
2344
1875
  resourceType: string;
2345
- } | "deny" | undefined);
2346
- }[], {
2347
- match: ("*" | {
1876
+ } | "deny";
1877
+ }, {
1878
+ match: "*" | {
2348
1879
  name?: string | undefined;
2349
1880
  actions?: string[] | undefined;
2350
1881
  resourceType?: string | undefined;
2351
- }) & ("*" | {
1882
+ };
1883
+ decision: "allow" | {
1884
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
1885
+ pluginId: string;
1886
+ resourceType: string;
1887
+ } | "deny";
1888
+ id?: string | undefined;
1889
+ }>, "many">, {
1890
+ id: string;
1891
+ match: "*" | {
2352
1892
  name?: string | undefined;
2353
1893
  actions?: string[] | undefined;
2354
1894
  resourceType?: string | undefined;
2355
- } | undefined);
2356
- decision: ("allow" | {
2357
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1895
+ };
1896
+ decision: "allow" | {
1897
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2358
1898
  pluginId: string;
2359
1899
  resourceType: string;
2360
- } | "deny") & ("allow" | {
2361
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1900
+ } | "deny";
1901
+ }[], {
1902
+ match: "*" | {
1903
+ name?: string | undefined;
1904
+ actions?: string[] | undefined;
1905
+ resourceType?: string | undefined;
1906
+ };
1907
+ decision: "allow" | {
1908
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2362
1909
  pluginId: string;
2363
1910
  resourceType: string;
2364
- } | "deny" | undefined);
1911
+ } | "deny";
2365
1912
  id?: string | undefined;
2366
1913
  }[]>;
2367
1914
  }, "strip", z.ZodTypeAny, {
2368
1915
  id: string;
2369
1916
  name: string;
2370
- members: (string[] | "*") & (string[] | "*" | undefined);
1917
+ members: string[] | "*";
2371
1918
  permissions: {
2372
1919
  id: string;
2373
- match: ("*" | {
2374
- name?: string | undefined;
2375
- actions?: string[] | undefined;
2376
- resourceType?: string | undefined;
2377
- }) & ("*" | {
1920
+ match: "*" | {
2378
1921
  name?: string | undefined;
2379
1922
  actions?: string[] | undefined;
2380
1923
  resourceType?: string | undefined;
2381
- } | undefined);
2382
- decision: ("allow" | {
2383
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1924
+ };
1925
+ decision: "allow" | {
1926
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2384
1927
  pluginId: string;
2385
1928
  resourceType: string;
2386
- } | "deny") & ("allow" | {
2387
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2388
- pluginId: string;
2389
- resourceType: string;
2390
- } | "deny" | undefined);
1929
+ } | "deny";
2391
1930
  }[];
2392
1931
  }, {
2393
1932
  name: string;
2394
- members: (string[] | "*") & (string[] | "*" | undefined);
1933
+ members: string[] | "*";
2395
1934
  permissions: {
2396
- match: ("*" | {
1935
+ match: "*" | {
2397
1936
  name?: string | undefined;
2398
1937
  actions?: string[] | undefined;
2399
1938
  resourceType?: string | undefined;
2400
- }) & ("*" | {
2401
- name?: string | undefined;
2402
- actions?: string[] | undefined;
2403
- resourceType?: string | undefined;
2404
- } | undefined);
2405
- decision: ("allow" | {
2406
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2407
- pluginId: string;
2408
- resourceType: string;
2409
- } | "deny") & ("allow" | {
2410
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1939
+ };
1940
+ decision: "allow" | {
1941
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2411
1942
  pluginId: string;
2412
1943
  resourceType: string;
2413
- } | "deny" | undefined);
1944
+ } | "deny";
2414
1945
  id?: string | undefined;
2415
1946
  }[];
2416
1947
  id?: string | undefined;
2417
1948
  }>, "many">>, {
2418
1949
  id: string;
2419
1950
  name: string;
2420
- members: (string[] | "*") & (string[] | "*" | undefined);
1951
+ members: string[] | "*";
2421
1952
  permissions: {
2422
1953
  id: string;
2423
- match: ("*" | {
1954
+ match: "*" | {
2424
1955
  name?: string | undefined;
2425
1956
  actions?: string[] | undefined;
2426
1957
  resourceType?: string | undefined;
2427
- }) & ("*" | {
2428
- name?: string | undefined;
2429
- actions?: string[] | undefined;
2430
- resourceType?: string | undefined;
2431
- } | undefined);
2432
- decision: ("allow" | {
2433
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1958
+ };
1959
+ decision: "allow" | {
1960
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2434
1961
  pluginId: string;
2435
1962
  resourceType: string;
2436
- } | "deny") & ("allow" | {
2437
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2438
- pluginId: string;
2439
- resourceType: string;
2440
- } | "deny" | undefined);
1963
+ } | "deny";
2441
1964
  }[];
2442
1965
  }[], {
2443
1966
  name: string;
2444
- members: (string[] | "*") & (string[] | "*" | undefined);
1967
+ members: string[] | "*";
2445
1968
  permissions: {
2446
- match: ("*" | {
2447
- name?: string | undefined;
2448
- actions?: string[] | undefined;
2449
- resourceType?: string | undefined;
2450
- }) & ("*" | {
1969
+ match: "*" | {
2451
1970
  name?: string | undefined;
2452
1971
  actions?: string[] | undefined;
2453
1972
  resourceType?: string | undefined;
2454
- } | undefined);
2455
- decision: ("allow" | {
2456
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2457
- pluginId: string;
2458
- resourceType: string;
2459
- } | "deny") & ("allow" | {
2460
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1973
+ };
1974
+ decision: "allow" | {
1975
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2461
1976
  pluginId: string;
2462
1977
  resourceType: string;
2463
- } | "deny" | undefined);
1978
+ } | "deny";
2464
1979
  id?: string | undefined;
2465
1980
  }[];
2466
1981
  id?: string | undefined;
2467
1982
  }[] | undefined>>;
2468
- }, "strip", z.ZodTypeAny, {
1983
+ }>, "strip", z.ZodTypeAny, {
2469
1984
  name?: string | undefined;
2470
1985
  options?: {
2471
1986
  resolutionStrategy: "first-match" | "any-allow";
@@ -2473,27 +1988,19 @@ declare const UpdateDraftRequestParser: z.ZodObject<{
2473
1988
  roles?: {
2474
1989
  id: string;
2475
1990
  name: string;
2476
- members: (string[] | "*") & (string[] | "*" | undefined);
1991
+ members: string[] | "*";
2477
1992
  permissions: {
2478
1993
  id: string;
2479
- match: ("*" | {
2480
- name?: string | undefined;
2481
- actions?: string[] | undefined;
2482
- resourceType?: string | undefined;
2483
- }) & ("*" | {
1994
+ match: "*" | {
2484
1995
  name?: string | undefined;
2485
1996
  actions?: string[] | undefined;
2486
1997
  resourceType?: string | undefined;
2487
- } | undefined);
2488
- decision: ("allow" | {
2489
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2490
- pluginId: string;
2491
- resourceType: string;
2492
- } | "deny") & ("allow" | {
2493
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
1998
+ };
1999
+ decision: "allow" | {
2000
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2494
2001
  pluginId: string;
2495
2002
  resourceType: string;
2496
- } | "deny" | undefined);
2003
+ } | "deny";
2497
2004
  }[];
2498
2005
  }[] | undefined;
2499
2006
  }, {
@@ -2503,35 +2010,210 @@ declare const UpdateDraftRequestParser: z.ZodObject<{
2503
2010
  } | undefined;
2504
2011
  roles?: {
2505
2012
  name: string;
2506
- members: (string[] | "*") & (string[] | "*" | undefined);
2013
+ members: string[] | "*";
2507
2014
  permissions: {
2508
- match: ("*" | {
2015
+ match: "*" | {
2509
2016
  name?: string | undefined;
2510
2017
  actions?: string[] | undefined;
2511
2018
  resourceType?: string | undefined;
2512
- }) & ("*" | {
2513
- name?: string | undefined;
2514
- actions?: string[] | undefined;
2515
- resourceType?: string | undefined;
2516
- } | undefined);
2517
- decision: ("allow" | {
2518
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2019
+ };
2020
+ decision: "allow" | {
2021
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2519
2022
  pluginId: string;
2520
2023
  resourceType: string;
2521
- } | "deny") & ("allow" | {
2522
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2523
- pluginId: string;
2524
- resourceType: string;
2525
- } | "deny" | undefined);
2024
+ } | "deny";
2025
+ id?: string | undefined;
2026
+ }[];
2027
+ id?: string | undefined;
2028
+ }[] | undefined;
2029
+ }>;
2030
+ /** @public */
2031
+ declare const PublishVersionRequestParser: z.ZodObject<{
2032
+ description: z.ZodOptional<z.ZodString>;
2033
+ update: z.ZodOptional<z.ZodObject<z.objectUtil.extendShape<{
2034
+ name: z.ZodDefault<z.ZodString>;
2035
+ options: z.ZodDefault<z.ZodObject<{
2036
+ resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
2037
+ }, "strip", z.ZodTypeAny, {
2038
+ resolutionStrategy: "first-match" | "any-allow";
2039
+ }, {
2040
+ resolutionStrategy: "first-match" | "any-allow";
2041
+ }>>;
2042
+ roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
2043
+ name: z.ZodString;
2044
+ id: z.ZodDefault<z.ZodString>;
2045
+ members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
2046
+ permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
2047
+ id: z.ZodDefault<z.ZodString>;
2048
+ match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
2049
+ name: z.ZodOptional<z.ZodString>;
2050
+ actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2051
+ resourceType: z.ZodOptional<z.ZodString>;
2052
+ }, "strip", z.ZodTypeAny, {
2053
+ name?: string | undefined;
2054
+ actions?: string[] | undefined;
2055
+ resourceType?: string | undefined;
2056
+ }, {
2057
+ name?: string | undefined;
2058
+ actions?: string[] | undefined;
2059
+ resourceType?: string | undefined;
2060
+ }>]>;
2061
+ decision: z.ZodUnion<[z.ZodUnion<[z.ZodLiteral<"allow">, z.ZodLiteral<"deny">]>, z.ZodObject<{
2062
+ pluginId: z.ZodString;
2063
+ resourceType: z.ZodString;
2064
+ conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
2065
+ }, "strip", z.ZodTypeAny, {
2066
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2067
+ pluginId: string;
2068
+ resourceType: string;
2069
+ }, {
2070
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2071
+ pluginId: string;
2072
+ resourceType: string;
2073
+ }>]>;
2074
+ }, "strip", z.ZodTypeAny, {
2075
+ id: string;
2076
+ match: "*" | {
2077
+ name?: string | undefined;
2078
+ actions?: string[] | undefined;
2079
+ resourceType?: string | undefined;
2080
+ };
2081
+ decision: "allow" | {
2082
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2083
+ pluginId: string;
2084
+ resourceType: string;
2085
+ } | "deny";
2086
+ }, {
2087
+ match: "*" | {
2088
+ name?: string | undefined;
2089
+ actions?: string[] | undefined;
2090
+ resourceType?: string | undefined;
2091
+ };
2092
+ decision: "allow" | {
2093
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2094
+ pluginId: string;
2095
+ resourceType: string;
2096
+ } | "deny";
2097
+ id?: string | undefined;
2098
+ }>, {
2099
+ id: string;
2100
+ match: "*" | {
2101
+ name?: string | undefined;
2102
+ actions?: string[] | undefined;
2103
+ resourceType?: string | undefined;
2104
+ };
2105
+ decision: "allow" | {
2106
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2107
+ pluginId: string;
2108
+ resourceType: string;
2109
+ } | "deny";
2110
+ }, {
2111
+ match: "*" | {
2112
+ name?: string | undefined;
2113
+ actions?: string[] | undefined;
2114
+ resourceType?: string | undefined;
2115
+ };
2116
+ decision: "allow" | {
2117
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2118
+ pluginId: string;
2119
+ resourceType: string;
2120
+ } | "deny";
2121
+ id?: string | undefined;
2122
+ }>, "many">, {
2123
+ id: string;
2124
+ match: "*" | {
2125
+ name?: string | undefined;
2126
+ actions?: string[] | undefined;
2127
+ resourceType?: string | undefined;
2128
+ };
2129
+ decision: "allow" | {
2130
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2131
+ pluginId: string;
2132
+ resourceType: string;
2133
+ } | "deny";
2134
+ }[], {
2135
+ match: "*" | {
2136
+ name?: string | undefined;
2137
+ actions?: string[] | undefined;
2138
+ resourceType?: string | undefined;
2139
+ };
2140
+ decision: "allow" | {
2141
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2142
+ pluginId: string;
2143
+ resourceType: string;
2144
+ } | "deny";
2145
+ id?: string | undefined;
2146
+ }[]>;
2147
+ }, "strip", z.ZodTypeAny, {
2148
+ id: string;
2149
+ name: string;
2150
+ members: string[] | "*";
2151
+ permissions: {
2152
+ id: string;
2153
+ match: "*" | {
2154
+ name?: string | undefined;
2155
+ actions?: string[] | undefined;
2156
+ resourceType?: string | undefined;
2157
+ };
2158
+ decision: "allow" | {
2159
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2160
+ pluginId: string;
2161
+ resourceType: string;
2162
+ } | "deny";
2163
+ }[];
2164
+ }, {
2165
+ name: string;
2166
+ members: string[] | "*";
2167
+ permissions: {
2168
+ match: "*" | {
2169
+ name?: string | undefined;
2170
+ actions?: string[] | undefined;
2171
+ resourceType?: string | undefined;
2172
+ };
2173
+ decision: "allow" | {
2174
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2175
+ pluginId: string;
2176
+ resourceType: string;
2177
+ } | "deny";
2178
+ id?: string | undefined;
2179
+ }[];
2180
+ id?: string | undefined;
2181
+ }>, "many">>, {
2182
+ id: string;
2183
+ name: string;
2184
+ members: string[] | "*";
2185
+ permissions: {
2186
+ id: string;
2187
+ match: "*" | {
2188
+ name?: string | undefined;
2189
+ actions?: string[] | undefined;
2190
+ resourceType?: string | undefined;
2191
+ };
2192
+ decision: "allow" | {
2193
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2194
+ pluginId: string;
2195
+ resourceType: string;
2196
+ } | "deny";
2197
+ }[];
2198
+ }[], {
2199
+ name: string;
2200
+ members: string[] | "*";
2201
+ permissions: {
2202
+ match: "*" | {
2203
+ name?: string | undefined;
2204
+ actions?: string[] | undefined;
2205
+ resourceType?: string | undefined;
2206
+ };
2207
+ decision: "allow" | {
2208
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2209
+ pluginId: string;
2210
+ resourceType: string;
2211
+ } | "deny";
2212
+ id?: string | undefined;
2213
+ }[];
2526
2214
  id?: string | undefined;
2527
- }[];
2528
- id?: string | undefined;
2529
- }[] | undefined;
2530
- }>;
2531
- /** @public */
2532
- declare const PublishVersionRequestParser: z.ZodObject<{
2533
- description: z.ZodOptional<z.ZodString>;
2534
- update: z.ZodOptional<z.ZodObject<{
2215
+ }[] | undefined>;
2216
+ }, {
2535
2217
  name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
2536
2218
  options: z.ZodOptional<z.ZodDefault<z.ZodObject<{
2537
2219
  resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
@@ -2564,237 +2246,157 @@ declare const PublishVersionRequestParser: z.ZodObject<{
2564
2246
  resourceType: z.ZodString;
2565
2247
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
2566
2248
  }, "strip", z.ZodTypeAny, {
2567
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2249
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2568
2250
  pluginId: string;
2569
2251
  resourceType: string;
2570
2252
  }, {
2571
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2253
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2572
2254
  pluginId: string;
2573
2255
  resourceType: string;
2574
2256
  }>]>;
2575
2257
  }, "strip", z.ZodTypeAny, {
2576
2258
  id: string;
2577
- match: ("*" | {
2578
- name?: string | undefined;
2579
- actions?: string[] | undefined;
2580
- resourceType?: string | undefined;
2581
- }) & ("*" | {
2259
+ match: "*" | {
2582
2260
  name?: string | undefined;
2583
2261
  actions?: string[] | undefined;
2584
2262
  resourceType?: string | undefined;
2585
- } | undefined);
2586
- decision: ("allow" | {
2587
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2588
- pluginId: string;
2589
- resourceType: string;
2590
- } | "deny") & ("allow" | {
2591
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2263
+ };
2264
+ decision: "allow" | {
2265
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2592
2266
  pluginId: string;
2593
2267
  resourceType: string;
2594
- } | "deny" | undefined);
2268
+ } | "deny";
2595
2269
  }, {
2596
- match: ("*" | {
2597
- name?: string | undefined;
2598
- actions?: string[] | undefined;
2599
- resourceType?: string | undefined;
2600
- }) & ("*" | {
2270
+ match: "*" | {
2601
2271
  name?: string | undefined;
2602
2272
  actions?: string[] | undefined;
2603
2273
  resourceType?: string | undefined;
2604
- } | undefined);
2605
- decision: ("allow" | {
2606
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2607
- pluginId: string;
2608
- resourceType: string;
2609
- } | "deny") & ("allow" | {
2610
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2274
+ };
2275
+ decision: "allow" | {
2276
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2611
2277
  pluginId: string;
2612
2278
  resourceType: string;
2613
- } | "deny" | undefined);
2279
+ } | "deny";
2614
2280
  id?: string | undefined;
2615
2281
  }>, {
2616
2282
  id: string;
2617
- match: ("*" | {
2283
+ match: "*" | {
2618
2284
  name?: string | undefined;
2619
2285
  actions?: string[] | undefined;
2620
2286
  resourceType?: string | undefined;
2621
- }) & ("*" | {
2622
- name?: string | undefined;
2623
- actions?: string[] | undefined;
2624
- resourceType?: string | undefined;
2625
- } | undefined);
2626
- decision: ("allow" | {
2627
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2628
- pluginId: string;
2629
- resourceType: string;
2630
- } | "deny") & ("allow" | {
2631
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2287
+ };
2288
+ decision: "allow" | {
2289
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2632
2290
  pluginId: string;
2633
2291
  resourceType: string;
2634
- } | "deny" | undefined);
2292
+ } | "deny";
2635
2293
  }, {
2636
- match: ("*" | {
2637
- name?: string | undefined;
2638
- actions?: string[] | undefined;
2639
- resourceType?: string | undefined;
2640
- }) & ("*" | {
2294
+ match: "*" | {
2641
2295
  name?: string | undefined;
2642
2296
  actions?: string[] | undefined;
2643
2297
  resourceType?: string | undefined;
2644
- } | undefined);
2645
- decision: ("allow" | {
2646
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2298
+ };
2299
+ decision: "allow" | {
2300
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2647
2301
  pluginId: string;
2648
2302
  resourceType: string;
2649
- } | "deny") & ("allow" | {
2650
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2651
- pluginId: string;
2652
- resourceType: string;
2653
- } | "deny" | undefined);
2303
+ } | "deny";
2654
2304
  id?: string | undefined;
2655
2305
  }>, "many">, {
2656
2306
  id: string;
2657
- match: ("*" | {
2658
- name?: string | undefined;
2659
- actions?: string[] | undefined;
2660
- resourceType?: string | undefined;
2661
- }) & ("*" | {
2307
+ match: "*" | {
2662
2308
  name?: string | undefined;
2663
2309
  actions?: string[] | undefined;
2664
2310
  resourceType?: string | undefined;
2665
- } | undefined);
2666
- decision: ("allow" | {
2667
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2668
- pluginId: string;
2669
- resourceType: string;
2670
- } | "deny") & ("allow" | {
2671
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2311
+ };
2312
+ decision: "allow" | {
2313
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2672
2314
  pluginId: string;
2673
2315
  resourceType: string;
2674
- } | "deny" | undefined);
2316
+ } | "deny";
2675
2317
  }[], {
2676
- match: ("*" | {
2677
- name?: string | undefined;
2678
- actions?: string[] | undefined;
2679
- resourceType?: string | undefined;
2680
- }) & ("*" | {
2318
+ match: "*" | {
2681
2319
  name?: string | undefined;
2682
2320
  actions?: string[] | undefined;
2683
2321
  resourceType?: string | undefined;
2684
- } | undefined);
2685
- decision: ("allow" | {
2686
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2687
- pluginId: string;
2688
- resourceType: string;
2689
- } | "deny") & ("allow" | {
2690
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2322
+ };
2323
+ decision: "allow" | {
2324
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2691
2325
  pluginId: string;
2692
2326
  resourceType: string;
2693
- } | "deny" | undefined);
2327
+ } | "deny";
2694
2328
  id?: string | undefined;
2695
2329
  }[]>;
2696
2330
  }, "strip", z.ZodTypeAny, {
2697
2331
  id: string;
2698
2332
  name: string;
2699
- members: (string[] | "*") & (string[] | "*" | undefined);
2333
+ members: string[] | "*";
2700
2334
  permissions: {
2701
2335
  id: string;
2702
- match: ("*" | {
2336
+ match: "*" | {
2703
2337
  name?: string | undefined;
2704
2338
  actions?: string[] | undefined;
2705
2339
  resourceType?: string | undefined;
2706
- }) & ("*" | {
2707
- name?: string | undefined;
2708
- actions?: string[] | undefined;
2709
- resourceType?: string | undefined;
2710
- } | undefined);
2711
- decision: ("allow" | {
2712
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2713
- pluginId: string;
2714
- resourceType: string;
2715
- } | "deny") & ("allow" | {
2716
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2340
+ };
2341
+ decision: "allow" | {
2342
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2717
2343
  pluginId: string;
2718
2344
  resourceType: string;
2719
- } | "deny" | undefined);
2345
+ } | "deny";
2720
2346
  }[];
2721
2347
  }, {
2722
2348
  name: string;
2723
- members: (string[] | "*") & (string[] | "*" | undefined);
2349
+ members: string[] | "*";
2724
2350
  permissions: {
2725
- match: ("*" | {
2726
- name?: string | undefined;
2727
- actions?: string[] | undefined;
2728
- resourceType?: string | undefined;
2729
- }) & ("*" | {
2351
+ match: "*" | {
2730
2352
  name?: string | undefined;
2731
2353
  actions?: string[] | undefined;
2732
2354
  resourceType?: string | undefined;
2733
- } | undefined);
2734
- decision: ("allow" | {
2735
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2355
+ };
2356
+ decision: "allow" | {
2357
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2736
2358
  pluginId: string;
2737
2359
  resourceType: string;
2738
- } | "deny") & ("allow" | {
2739
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2740
- pluginId: string;
2741
- resourceType: string;
2742
- } | "deny" | undefined);
2360
+ } | "deny";
2743
2361
  id?: string | undefined;
2744
2362
  }[];
2745
2363
  id?: string | undefined;
2746
2364
  }>, "many">>, {
2747
2365
  id: string;
2748
2366
  name: string;
2749
- members: (string[] | "*") & (string[] | "*" | undefined);
2367
+ members: string[] | "*";
2750
2368
  permissions: {
2751
2369
  id: string;
2752
- match: ("*" | {
2753
- name?: string | undefined;
2754
- actions?: string[] | undefined;
2755
- resourceType?: string | undefined;
2756
- }) & ("*" | {
2370
+ match: "*" | {
2757
2371
  name?: string | undefined;
2758
2372
  actions?: string[] | undefined;
2759
2373
  resourceType?: string | undefined;
2760
- } | undefined);
2761
- decision: ("allow" | {
2762
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2763
- pluginId: string;
2764
- resourceType: string;
2765
- } | "deny") & ("allow" | {
2766
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2374
+ };
2375
+ decision: "allow" | {
2376
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2767
2377
  pluginId: string;
2768
2378
  resourceType: string;
2769
- } | "deny" | undefined);
2379
+ } | "deny";
2770
2380
  }[];
2771
2381
  }[], {
2772
2382
  name: string;
2773
- members: (string[] | "*") & (string[] | "*" | undefined);
2383
+ members: string[] | "*";
2774
2384
  permissions: {
2775
- match: ("*" | {
2776
- name?: string | undefined;
2777
- actions?: string[] | undefined;
2778
- resourceType?: string | undefined;
2779
- }) & ("*" | {
2385
+ match: "*" | {
2780
2386
  name?: string | undefined;
2781
2387
  actions?: string[] | undefined;
2782
2388
  resourceType?: string | undefined;
2783
- } | undefined);
2784
- decision: ("allow" | {
2785
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2786
- pluginId: string;
2787
- resourceType: string;
2788
- } | "deny") & ("allow" | {
2789
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2389
+ };
2390
+ decision: "allow" | {
2391
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2790
2392
  pluginId: string;
2791
2393
  resourceType: string;
2792
- } | "deny" | undefined);
2394
+ } | "deny";
2793
2395
  id?: string | undefined;
2794
2396
  }[];
2795
2397
  id?: string | undefined;
2796
2398
  }[] | undefined>>;
2797
- }, "strip", z.ZodTypeAny, {
2399
+ }>, "strip", z.ZodTypeAny, {
2798
2400
  name?: string | undefined;
2799
2401
  options?: {
2800
2402
  resolutionStrategy: "first-match" | "any-allow";
@@ -2802,27 +2404,19 @@ declare const PublishVersionRequestParser: z.ZodObject<{
2802
2404
  roles?: {
2803
2405
  id: string;
2804
2406
  name: string;
2805
- members: (string[] | "*") & (string[] | "*" | undefined);
2407
+ members: string[] | "*";
2806
2408
  permissions: {
2807
2409
  id: string;
2808
- match: ("*" | {
2809
- name?: string | undefined;
2810
- actions?: string[] | undefined;
2811
- resourceType?: string | undefined;
2812
- }) & ("*" | {
2410
+ match: "*" | {
2813
2411
  name?: string | undefined;
2814
2412
  actions?: string[] | undefined;
2815
2413
  resourceType?: string | undefined;
2816
- } | undefined);
2817
- decision: ("allow" | {
2818
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2414
+ };
2415
+ decision: "allow" | {
2416
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2819
2417
  pluginId: string;
2820
2418
  resourceType: string;
2821
- } | "deny") & ("allow" | {
2822
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2823
- pluginId: string;
2824
- resourceType: string;
2825
- } | "deny" | undefined);
2419
+ } | "deny";
2826
2420
  }[];
2827
2421
  }[] | undefined;
2828
2422
  }, {
@@ -2832,26 +2426,18 @@ declare const PublishVersionRequestParser: z.ZodObject<{
2832
2426
  } | undefined;
2833
2427
  roles?: {
2834
2428
  name: string;
2835
- members: (string[] | "*") & (string[] | "*" | undefined);
2429
+ members: string[] | "*";
2836
2430
  permissions: {
2837
- match: ("*" | {
2838
- name?: string | undefined;
2839
- actions?: string[] | undefined;
2840
- resourceType?: string | undefined;
2841
- }) & ("*" | {
2431
+ match: "*" | {
2842
2432
  name?: string | undefined;
2843
2433
  actions?: string[] | undefined;
2844
2434
  resourceType?: string | undefined;
2845
- } | undefined);
2846
- decision: ("allow" | {
2847
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2848
- pluginId: string;
2849
- resourceType: string;
2850
- } | "deny") & ("allow" | {
2851
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2435
+ };
2436
+ decision: "allow" | {
2437
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2852
2438
  pluginId: string;
2853
2439
  resourceType: string;
2854
- } | "deny" | undefined);
2440
+ } | "deny";
2855
2441
  id?: string | undefined;
2856
2442
  }[];
2857
2443
  id?: string | undefined;
@@ -2867,27 +2453,19 @@ declare const PublishVersionRequestParser: z.ZodObject<{
2867
2453
  roles?: {
2868
2454
  id: string;
2869
2455
  name: string;
2870
- members: (string[] | "*") & (string[] | "*" | undefined);
2456
+ members: string[] | "*";
2871
2457
  permissions: {
2872
2458
  id: string;
2873
- match: ("*" | {
2874
- name?: string | undefined;
2875
- actions?: string[] | undefined;
2876
- resourceType?: string | undefined;
2877
- }) & ("*" | {
2459
+ match: "*" | {
2878
2460
  name?: string | undefined;
2879
2461
  actions?: string[] | undefined;
2880
2462
  resourceType?: string | undefined;
2881
- } | undefined);
2882
- decision: ("allow" | {
2883
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2884
- pluginId: string;
2885
- resourceType: string;
2886
- } | "deny") & ("allow" | {
2887
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2463
+ };
2464
+ decision: "allow" | {
2465
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2888
2466
  pluginId: string;
2889
2467
  resourceType: string;
2890
- } | "deny" | undefined);
2468
+ } | "deny";
2891
2469
  }[];
2892
2470
  }[] | undefined;
2893
2471
  } | undefined;
@@ -2900,26 +2478,18 @@ declare const PublishVersionRequestParser: z.ZodObject<{
2900
2478
  } | undefined;
2901
2479
  roles?: {
2902
2480
  name: string;
2903
- members: (string[] | "*") & (string[] | "*" | undefined);
2481
+ members: string[] | "*";
2904
2482
  permissions: {
2905
- match: ("*" | {
2483
+ match: "*" | {
2906
2484
  name?: string | undefined;
2907
2485
  actions?: string[] | undefined;
2908
2486
  resourceType?: string | undefined;
2909
- }) & ("*" | {
2910
- name?: string | undefined;
2911
- actions?: string[] | undefined;
2912
- resourceType?: string | undefined;
2913
- } | undefined);
2914
- decision: ("allow" | {
2915
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2916
- pluginId: string;
2917
- resourceType: string;
2918
- } | "deny") & ("allow" | {
2919
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2487
+ };
2488
+ decision: "allow" | {
2489
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2920
2490
  pluginId: string;
2921
2491
  resourceType: string;
2922
- } | "deny" | undefined);
2492
+ } | "deny";
2923
2493
  id?: string | undefined;
2924
2494
  }[];
2925
2495
  id?: string | undefined;
@@ -2934,19 +2504,21 @@ declare const TestPolicyDecisionResponseParser: z.ZodObject<{
2934
2504
  result: _backstage_plugin_permission_common.AuthorizeResult.DENY | _backstage_plugin_permission_common.AuthorizeResult.ALLOW;
2935
2505
  }, {
2936
2506
  result: _backstage_plugin_permission_common.AuthorizeResult.DENY | _backstage_plugin_permission_common.AuthorizeResult.ALLOW;
2937
- }>, z.ZodObject<{
2507
+ }>, z.ZodObject<z.objectUtil.extendShape<{
2938
2508
  pluginId: z.ZodString;
2939
2509
  resourceType: z.ZodString;
2510
+ conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
2511
+ }, {
2940
2512
  result: z.ZodLiteral<_backstage_plugin_permission_common.AuthorizeResult.CONDITIONAL>;
2941
2513
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>>;
2942
- }, "strip", z.ZodTypeAny, {
2514
+ }>, "strip", z.ZodTypeAny, {
2943
2515
  result: _backstage_plugin_permission_common.AuthorizeResult.CONDITIONAL;
2944
- conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> | undefined);
2516
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>;
2945
2517
  pluginId: string;
2946
2518
  resourceType: string;
2947
2519
  }, {
2948
2520
  result: _backstage_plugin_permission_common.AuthorizeResult.CONDITIONAL;
2949
- conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> | undefined);
2521
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>;
2950
2522
  pluginId: string;
2951
2523
  resourceType: string;
2952
2524
  }>]>;
@@ -2956,38 +2528,30 @@ declare const TestPolicyDecisionResponseParser: z.ZodObject<{
2956
2528
  resourceType: z.ZodString;
2957
2529
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
2958
2530
  }, "strip", z.ZodTypeAny, {
2959
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2531
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2960
2532
  pluginId: string;
2961
2533
  resourceType: string;
2962
2534
  }, {
2963
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2535
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2964
2536
  pluginId: string;
2965
2537
  resourceType: string;
2966
2538
  }>]>;
2967
2539
  roleId: z.ZodDefault<z.ZodString>;
2968
2540
  rolePermissionId: z.ZodDefault<z.ZodString>;
2969
2541
  }, "strip", z.ZodTypeAny, {
2970
- decision: ("allow" | {
2971
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2542
+ decision: "allow" | {
2543
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2972
2544
  pluginId: string;
2973
2545
  resourceType: string;
2974
- } | "deny") & ("allow" | {
2975
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2976
- pluginId: string;
2977
- resourceType: string;
2978
- } | "deny" | undefined);
2546
+ } | "deny";
2979
2547
  roleId: string;
2980
2548
  rolePermissionId: string;
2981
2549
  }, {
2982
- decision: ("allow" | {
2983
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2984
- pluginId: string;
2985
- resourceType: string;
2986
- } | "deny") & ("allow" | {
2987
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2550
+ decision: "allow" | {
2551
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
2988
2552
  pluginId: string;
2989
2553
  resourceType: string;
2990
- } | "deny" | undefined);
2554
+ } | "deny";
2991
2555
  roleId?: string | undefined;
2992
2556
  rolePermissionId?: string | undefined;
2993
2557
  }>, "many">;
@@ -2996,20 +2560,16 @@ declare const TestPolicyDecisionResponseParser: z.ZodObject<{
2996
2560
  result: _backstage_plugin_permission_common.AuthorizeResult.DENY | _backstage_plugin_permission_common.AuthorizeResult.ALLOW;
2997
2561
  } | {
2998
2562
  result: _backstage_plugin_permission_common.AuthorizeResult.CONDITIONAL;
2999
- conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> | undefined);
2563
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>;
3000
2564
  pluginId: string;
3001
2565
  resourceType: string;
3002
2566
  };
3003
2567
  decisionOrigin: {
3004
- decision: ("allow" | {
3005
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2568
+ decision: "allow" | {
2569
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3006
2570
  pluginId: string;
3007
2571
  resourceType: string;
3008
- } | "deny") & ("allow" | {
3009
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3010
- pluginId: string;
3011
- resourceType: string;
3012
- } | "deny" | undefined);
2572
+ } | "deny";
3013
2573
  roleId: string;
3014
2574
  rolePermissionId: string;
3015
2575
  }[];
@@ -3018,20 +2578,16 @@ declare const TestPolicyDecisionResponseParser: z.ZodObject<{
3018
2578
  result: _backstage_plugin_permission_common.AuthorizeResult.DENY | _backstage_plugin_permission_common.AuthorizeResult.ALLOW;
3019
2579
  } | {
3020
2580
  result: _backstage_plugin_permission_common.AuthorizeResult.CONDITIONAL;
3021
- conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition> | undefined);
2581
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<_backstage_plugin_permission_common.PermissionCondition>;
3022
2582
  pluginId: string;
3023
2583
  resourceType: string;
3024
2584
  };
3025
2585
  decisionOrigin: {
3026
- decision: ("allow" | {
3027
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3028
- pluginId: string;
3029
- resourceType: string;
3030
- } | "deny") & ("allow" | {
3031
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2586
+ decision: "allow" | {
2587
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3032
2588
  pluginId: string;
3033
2589
  resourceType: string;
3034
- } | "deny" | undefined);
2590
+ } | "deny";
3035
2591
  roleId?: string | undefined;
3036
2592
  rolePermissionId?: string | undefined;
3037
2593
  }[];
@@ -3099,232 +2655,152 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
3099
2655
  resourceType: z.ZodString;
3100
2656
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
3101
2657
  }, "strip", z.ZodTypeAny, {
3102
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2658
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3103
2659
  pluginId: string;
3104
2660
  resourceType: string;
3105
2661
  }, {
3106
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2662
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3107
2663
  pluginId: string;
3108
2664
  resourceType: string;
3109
2665
  }>]>;
3110
2666
  }, "strip", z.ZodTypeAny, {
3111
2667
  id: string;
3112
- match: ("*" | {
2668
+ match: "*" | {
3113
2669
  name?: string | undefined;
3114
2670
  actions?: string[] | undefined;
3115
2671
  resourceType?: string | undefined;
3116
- }) & ("*" | {
3117
- name?: string | undefined;
3118
- actions?: string[] | undefined;
3119
- resourceType?: string | undefined;
3120
- } | undefined);
3121
- decision: ("allow" | {
3122
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3123
- pluginId: string;
3124
- resourceType: string;
3125
- } | "deny") & ("allow" | {
3126
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2672
+ };
2673
+ decision: "allow" | {
2674
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3127
2675
  pluginId: string;
3128
2676
  resourceType: string;
3129
- } | "deny" | undefined);
2677
+ } | "deny";
3130
2678
  }, {
3131
- match: ("*" | {
3132
- name?: string | undefined;
3133
- actions?: string[] | undefined;
3134
- resourceType?: string | undefined;
3135
- }) & ("*" | {
2679
+ match: "*" | {
3136
2680
  name?: string | undefined;
3137
2681
  actions?: string[] | undefined;
3138
2682
  resourceType?: string | undefined;
3139
- } | undefined);
3140
- decision: ("allow" | {
3141
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2683
+ };
2684
+ decision: "allow" | {
2685
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3142
2686
  pluginId: string;
3143
2687
  resourceType: string;
3144
- } | "deny") & ("allow" | {
3145
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3146
- pluginId: string;
3147
- resourceType: string;
3148
- } | "deny" | undefined);
2688
+ } | "deny";
3149
2689
  id?: string | undefined;
3150
2690
  }>, {
3151
2691
  id: string;
3152
- match: ("*" | {
3153
- name?: string | undefined;
3154
- actions?: string[] | undefined;
3155
- resourceType?: string | undefined;
3156
- }) & ("*" | {
2692
+ match: "*" | {
3157
2693
  name?: string | undefined;
3158
2694
  actions?: string[] | undefined;
3159
2695
  resourceType?: string | undefined;
3160
- } | undefined);
3161
- decision: ("allow" | {
3162
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3163
- pluginId: string;
3164
- resourceType: string;
3165
- } | "deny") & ("allow" | {
3166
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2696
+ };
2697
+ decision: "allow" | {
2698
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3167
2699
  pluginId: string;
3168
2700
  resourceType: string;
3169
- } | "deny" | undefined);
2701
+ } | "deny";
3170
2702
  }, {
3171
- match: ("*" | {
3172
- name?: string | undefined;
3173
- actions?: string[] | undefined;
3174
- resourceType?: string | undefined;
3175
- }) & ("*" | {
2703
+ match: "*" | {
3176
2704
  name?: string | undefined;
3177
2705
  actions?: string[] | undefined;
3178
2706
  resourceType?: string | undefined;
3179
- } | undefined);
3180
- decision: ("allow" | {
3181
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3182
- pluginId: string;
3183
- resourceType: string;
3184
- } | "deny") & ("allow" | {
3185
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2707
+ };
2708
+ decision: "allow" | {
2709
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3186
2710
  pluginId: string;
3187
2711
  resourceType: string;
3188
- } | "deny" | undefined);
2712
+ } | "deny";
3189
2713
  id?: string | undefined;
3190
2714
  }>, "many">, {
3191
2715
  id: string;
3192
- match: ("*" | {
2716
+ match: "*" | {
3193
2717
  name?: string | undefined;
3194
2718
  actions?: string[] | undefined;
3195
2719
  resourceType?: string | undefined;
3196
- }) & ("*" | {
3197
- name?: string | undefined;
3198
- actions?: string[] | undefined;
3199
- resourceType?: string | undefined;
3200
- } | undefined);
3201
- decision: ("allow" | {
3202
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3203
- pluginId: string;
3204
- resourceType: string;
3205
- } | "deny") & ("allow" | {
3206
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2720
+ };
2721
+ decision: "allow" | {
2722
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3207
2723
  pluginId: string;
3208
2724
  resourceType: string;
3209
- } | "deny" | undefined);
2725
+ } | "deny";
3210
2726
  }[], {
3211
- match: ("*" | {
3212
- name?: string | undefined;
3213
- actions?: string[] | undefined;
3214
- resourceType?: string | undefined;
3215
- }) & ("*" | {
2727
+ match: "*" | {
3216
2728
  name?: string | undefined;
3217
2729
  actions?: string[] | undefined;
3218
2730
  resourceType?: string | undefined;
3219
- } | undefined);
3220
- decision: ("allow" | {
3221
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2731
+ };
2732
+ decision: "allow" | {
2733
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3222
2734
  pluginId: string;
3223
2735
  resourceType: string;
3224
- } | "deny") & ("allow" | {
3225
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3226
- pluginId: string;
3227
- resourceType: string;
3228
- } | "deny" | undefined);
2736
+ } | "deny";
3229
2737
  id?: string | undefined;
3230
2738
  }[]>;
3231
2739
  }, "strip", z.ZodTypeAny, {
3232
2740
  id: string;
3233
2741
  name: string;
3234
- members: (string[] | "*") & (string[] | "*" | undefined);
2742
+ members: string[] | "*";
3235
2743
  permissions: {
3236
2744
  id: string;
3237
- match: ("*" | {
3238
- name?: string | undefined;
3239
- actions?: string[] | undefined;
3240
- resourceType?: string | undefined;
3241
- }) & ("*" | {
2745
+ match: "*" | {
3242
2746
  name?: string | undefined;
3243
2747
  actions?: string[] | undefined;
3244
2748
  resourceType?: string | undefined;
3245
- } | undefined);
3246
- decision: ("allow" | {
3247
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3248
- pluginId: string;
3249
- resourceType: string;
3250
- } | "deny") & ("allow" | {
3251
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2749
+ };
2750
+ decision: "allow" | {
2751
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3252
2752
  pluginId: string;
3253
2753
  resourceType: string;
3254
- } | "deny" | undefined);
2754
+ } | "deny";
3255
2755
  }[];
3256
2756
  }, {
3257
2757
  name: string;
3258
- members: (string[] | "*") & (string[] | "*" | undefined);
2758
+ members: string[] | "*";
3259
2759
  permissions: {
3260
- match: ("*" | {
3261
- name?: string | undefined;
3262
- actions?: string[] | undefined;
3263
- resourceType?: string | undefined;
3264
- }) & ("*" | {
2760
+ match: "*" | {
3265
2761
  name?: string | undefined;
3266
2762
  actions?: string[] | undefined;
3267
2763
  resourceType?: string | undefined;
3268
- } | undefined);
3269
- decision: ("allow" | {
3270
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3271
- pluginId: string;
3272
- resourceType: string;
3273
- } | "deny") & ("allow" | {
3274
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2764
+ };
2765
+ decision: "allow" | {
2766
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3275
2767
  pluginId: string;
3276
2768
  resourceType: string;
3277
- } | "deny" | undefined);
2769
+ } | "deny";
3278
2770
  id?: string | undefined;
3279
2771
  }[];
3280
2772
  id?: string | undefined;
3281
2773
  }>, "many">>, {
3282
2774
  id: string;
3283
2775
  name: string;
3284
- members: (string[] | "*") & (string[] | "*" | undefined);
2776
+ members: string[] | "*";
3285
2777
  permissions: {
3286
2778
  id: string;
3287
- match: ("*" | {
2779
+ match: "*" | {
3288
2780
  name?: string | undefined;
3289
2781
  actions?: string[] | undefined;
3290
2782
  resourceType?: string | undefined;
3291
- }) & ("*" | {
3292
- name?: string | undefined;
3293
- actions?: string[] | undefined;
3294
- resourceType?: string | undefined;
3295
- } | undefined);
3296
- decision: ("allow" | {
3297
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3298
- pluginId: string;
3299
- resourceType: string;
3300
- } | "deny") & ("allow" | {
3301
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2783
+ };
2784
+ decision: "allow" | {
2785
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3302
2786
  pluginId: string;
3303
2787
  resourceType: string;
3304
- } | "deny" | undefined);
2788
+ } | "deny";
3305
2789
  }[];
3306
2790
  }[], {
3307
2791
  name: string;
3308
- members: (string[] | "*") & (string[] | "*" | undefined);
2792
+ members: string[] | "*";
3309
2793
  permissions: {
3310
- match: ("*" | {
3311
- name?: string | undefined;
3312
- actions?: string[] | undefined;
3313
- resourceType?: string | undefined;
3314
- }) & ("*" | {
2794
+ match: "*" | {
3315
2795
  name?: string | undefined;
3316
2796
  actions?: string[] | undefined;
3317
2797
  resourceType?: string | undefined;
3318
- } | undefined);
3319
- decision: ("allow" | {
3320
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2798
+ };
2799
+ decision: "allow" | {
2800
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3321
2801
  pluginId: string;
3322
2802
  resourceType: string;
3323
- } | "deny") & ("allow" | {
3324
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3325
- pluginId: string;
3326
- resourceType: string;
3327
- } | "deny" | undefined);
2803
+ } | "deny";
3328
2804
  id?: string | undefined;
3329
2805
  }[];
3330
2806
  id?: string | undefined;
@@ -3337,27 +2813,19 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
3337
2813
  roles: {
3338
2814
  id: string;
3339
2815
  name: string;
3340
- members: (string[] | "*") & (string[] | "*" | undefined);
2816
+ members: string[] | "*";
3341
2817
  permissions: {
3342
2818
  id: string;
3343
- match: ("*" | {
3344
- name?: string | undefined;
3345
- actions?: string[] | undefined;
3346
- resourceType?: string | undefined;
3347
- }) & ("*" | {
2819
+ match: "*" | {
3348
2820
  name?: string | undefined;
3349
2821
  actions?: string[] | undefined;
3350
2822
  resourceType?: string | undefined;
3351
- } | undefined);
3352
- decision: ("allow" | {
3353
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3354
- pluginId: string;
3355
- resourceType: string;
3356
- } | "deny") & ("allow" | {
3357
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2823
+ };
2824
+ decision: "allow" | {
2825
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3358
2826
  pluginId: string;
3359
2827
  resourceType: string;
3360
- } | "deny" | undefined);
2828
+ } | "deny";
3361
2829
  }[];
3362
2830
  }[];
3363
2831
  }, {
@@ -3367,26 +2835,18 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
3367
2835
  } | undefined;
3368
2836
  roles?: {
3369
2837
  name: string;
3370
- members: (string[] | "*") & (string[] | "*" | undefined);
2838
+ members: string[] | "*";
3371
2839
  permissions: {
3372
- match: ("*" | {
3373
- name?: string | undefined;
3374
- actions?: string[] | undefined;
3375
- resourceType?: string | undefined;
3376
- }) & ("*" | {
2840
+ match: "*" | {
3377
2841
  name?: string | undefined;
3378
2842
  actions?: string[] | undefined;
3379
2843
  resourceType?: string | undefined;
3380
- } | undefined);
3381
- decision: ("allow" | {
3382
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3383
- pluginId: string;
3384
- resourceType: string;
3385
- } | "deny") & ("allow" | {
3386
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2844
+ };
2845
+ decision: "allow" | {
2846
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3387
2847
  pluginId: string;
3388
2848
  resourceType: string;
3389
- } | "deny" | undefined);
2849
+ } | "deny";
3390
2850
  id?: string | undefined;
3391
2851
  }[];
3392
2852
  id?: string | undefined;
@@ -3412,27 +2872,19 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
3412
2872
  roles: {
3413
2873
  id: string;
3414
2874
  name: string;
3415
- members: (string[] | "*") & (string[] | "*" | undefined);
2875
+ members: string[] | "*";
3416
2876
  permissions: {
3417
2877
  id: string;
3418
- match: ("*" | {
2878
+ match: "*" | {
3419
2879
  name?: string | undefined;
3420
2880
  actions?: string[] | undefined;
3421
2881
  resourceType?: string | undefined;
3422
- }) & ("*" | {
3423
- name?: string | undefined;
3424
- actions?: string[] | undefined;
3425
- resourceType?: string | undefined;
3426
- } | undefined);
3427
- decision: ("allow" | {
3428
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3429
- pluginId: string;
3430
- resourceType: string;
3431
- } | "deny") & ("allow" | {
3432
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2882
+ };
2883
+ decision: "allow" | {
2884
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3433
2885
  pluginId: string;
3434
2886
  resourceType: string;
3435
- } | "deny" | undefined);
2887
+ } | "deny";
3436
2888
  }[];
3437
2889
  }[];
3438
2890
  };
@@ -3455,26 +2907,18 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
3455
2907
  } | undefined;
3456
2908
  roles?: {
3457
2909
  name: string;
3458
- members: (string[] | "*") & (string[] | "*" | undefined);
2910
+ members: string[] | "*";
3459
2911
  permissions: {
3460
- match: ("*" | {
3461
- name?: string | undefined;
3462
- actions?: string[] | undefined;
3463
- resourceType?: string | undefined;
3464
- }) & ("*" | {
2912
+ match: "*" | {
3465
2913
  name?: string | undefined;
3466
2914
  actions?: string[] | undefined;
3467
2915
  resourceType?: string | undefined;
3468
- } | undefined);
3469
- decision: ("allow" | {
3470
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
2916
+ };
2917
+ decision: "allow" | {
2918
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3471
2919
  pluginId: string;
3472
2920
  resourceType: string;
3473
- } | "deny") & ("allow" | {
3474
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3475
- pluginId: string;
3476
- resourceType: string;
3477
- } | "deny" | undefined);
2921
+ } | "deny";
3478
2922
  id?: string | undefined;
3479
2923
  }[];
3480
2924
  id?: string | undefined;
@@ -3520,11 +2964,11 @@ declare const MemberResponseParser: z.ZodObject<{
3520
2964
  type: z.ZodEnum<["user", "group", "all", "unknown"]>;
3521
2965
  entityRef: z.ZodString;
3522
2966
  }, "strip", z.ZodTypeAny, {
3523
- type: "unknown" | "all" | "group" | "user";
2967
+ type: "unknown" | "user" | "group" | "all";
3524
2968
  entityRef: string;
3525
2969
  name?: string | undefined;
3526
2970
  }, {
3527
- type: "unknown" | "all" | "group" | "user";
2971
+ type: "unknown" | "user" | "group" | "all";
3528
2972
  entityRef: string;
3529
2973
  name?: string | undefined;
3530
2974
  }>;
@@ -3542,23 +2986,23 @@ declare const SearchMemberResponseParser: z.ZodObject<{
3542
2986
  type: z.ZodEnum<["user", "group", "all", "unknown"]>;
3543
2987
  entityRef: z.ZodString;
3544
2988
  }, "strip", z.ZodTypeAny, {
3545
- type: "unknown" | "all" | "group" | "user";
2989
+ type: "unknown" | "user" | "group" | "all";
3546
2990
  entityRef: string;
3547
2991
  name?: string | undefined;
3548
2992
  }, {
3549
- type: "unknown" | "all" | "group" | "user";
2993
+ type: "unknown" | "user" | "group" | "all";
3550
2994
  entityRef: string;
3551
2995
  name?: string | undefined;
3552
2996
  }>, "many">;
3553
2997
  }, "strip", z.ZodTypeAny, {
3554
2998
  members: {
3555
- type: "unknown" | "all" | "group" | "user";
2999
+ type: "unknown" | "user" | "group" | "all";
3556
3000
  entityRef: string;
3557
3001
  name?: string | undefined;
3558
3002
  }[];
3559
3003
  }, {
3560
3004
  members: {
3561
- type: "unknown" | "all" | "group" | "user";
3005
+ type: "unknown" | "user" | "group" | "all";
3562
3006
  entityRef: string;
3563
3007
  name?: string | undefined;
3564
3008
  }[];
@@ -3576,7 +3020,7 @@ type PaginatedResponse<T> = {
3576
3020
  type PoliciesResponse = PaginatedResponse<Policy>;
3577
3021
  /** @public */
3578
3022
  declare const PolicyResponseParser: z.ZodObject<{
3579
- items: z.ZodArray<z.ZodObject<{
3023
+ items: z.ZodArray<z.ZodObject<z.objectUtil.extendShape<{
3580
3024
  name: z.ZodDefault<z.ZodString>;
3581
3025
  options: z.ZodDefault<z.ZodObject<{
3582
3026
  resolutionStrategy: z.ZodUnion<[z.ZodLiteral<"first-match">, z.ZodLiteral<"any-allow">]>;
@@ -3609,236 +3053,157 @@ declare const PolicyResponseParser: z.ZodObject<{
3609
3053
  resourceType: z.ZodString;
3610
3054
  conditions: z.ZodType<_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>, z.ZodTypeDef, _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>>;
3611
3055
  }, "strip", z.ZodTypeAny, {
3612
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3056
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3613
3057
  pluginId: string;
3614
3058
  resourceType: string;
3615
3059
  }, {
3616
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3060
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3617
3061
  pluginId: string;
3618
3062
  resourceType: string;
3619
3063
  }>]>;
3620
3064
  }, "strip", z.ZodTypeAny, {
3621
3065
  id: string;
3622
- match: ("*" | {
3623
- name?: string | undefined;
3624
- actions?: string[] | undefined;
3625
- resourceType?: string | undefined;
3626
- }) & ("*" | {
3066
+ match: "*" | {
3627
3067
  name?: string | undefined;
3628
3068
  actions?: string[] | undefined;
3629
3069
  resourceType?: string | undefined;
3630
- } | undefined);
3631
- decision: ("allow" | {
3632
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3633
- pluginId: string;
3634
- resourceType: string;
3635
- } | "deny") & ("allow" | {
3636
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3070
+ };
3071
+ decision: "allow" | {
3072
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3637
3073
  pluginId: string;
3638
3074
  resourceType: string;
3639
- } | "deny" | undefined);
3075
+ } | "deny";
3640
3076
  }, {
3641
- match: ("*" | {
3642
- name?: string | undefined;
3643
- actions?: string[] | undefined;
3644
- resourceType?: string | undefined;
3645
- }) & ("*" | {
3077
+ match: "*" | {
3646
3078
  name?: string | undefined;
3647
3079
  actions?: string[] | undefined;
3648
3080
  resourceType?: string | undefined;
3649
- } | undefined);
3650
- decision: ("allow" | {
3651
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3652
- pluginId: string;
3653
- resourceType: string;
3654
- } | "deny") & ("allow" | {
3655
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3081
+ };
3082
+ decision: "allow" | {
3083
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3656
3084
  pluginId: string;
3657
3085
  resourceType: string;
3658
- } | "deny" | undefined);
3086
+ } | "deny";
3659
3087
  id?: string | undefined;
3660
3088
  }>, {
3661
3089
  id: string;
3662
- match: ("*" | {
3090
+ match: "*" | {
3663
3091
  name?: string | undefined;
3664
3092
  actions?: string[] | undefined;
3665
3093
  resourceType?: string | undefined;
3666
- }) & ("*" | {
3667
- name?: string | undefined;
3668
- actions?: string[] | undefined;
3669
- resourceType?: string | undefined;
3670
- } | undefined);
3671
- decision: ("allow" | {
3672
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3673
- pluginId: string;
3674
- resourceType: string;
3675
- } | "deny") & ("allow" | {
3676
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3094
+ };
3095
+ decision: "allow" | {
3096
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3677
3097
  pluginId: string;
3678
3098
  resourceType: string;
3679
- } | "deny" | undefined);
3099
+ } | "deny";
3680
3100
  }, {
3681
- match: ("*" | {
3682
- name?: string | undefined;
3683
- actions?: string[] | undefined;
3684
- resourceType?: string | undefined;
3685
- }) & ("*" | {
3101
+ match: "*" | {
3686
3102
  name?: string | undefined;
3687
3103
  actions?: string[] | undefined;
3688
3104
  resourceType?: string | undefined;
3689
- } | undefined);
3690
- decision: ("allow" | {
3691
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3105
+ };
3106
+ decision: "allow" | {
3107
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3692
3108
  pluginId: string;
3693
3109
  resourceType: string;
3694
- } | "deny") & ("allow" | {
3695
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3696
- pluginId: string;
3697
- resourceType: string;
3698
- } | "deny" | undefined);
3110
+ } | "deny";
3699
3111
  id?: string | undefined;
3700
3112
  }>, "many">, {
3701
3113
  id: string;
3702
- match: ("*" | {
3703
- name?: string | undefined;
3704
- actions?: string[] | undefined;
3705
- resourceType?: string | undefined;
3706
- }) & ("*" | {
3114
+ match: "*" | {
3707
3115
  name?: string | undefined;
3708
3116
  actions?: string[] | undefined;
3709
3117
  resourceType?: string | undefined;
3710
- } | undefined);
3711
- decision: ("allow" | {
3712
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3713
- pluginId: string;
3714
- resourceType: string;
3715
- } | "deny") & ("allow" | {
3716
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3118
+ };
3119
+ decision: "allow" | {
3120
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3717
3121
  pluginId: string;
3718
3122
  resourceType: string;
3719
- } | "deny" | undefined);
3123
+ } | "deny";
3720
3124
  }[], {
3721
- match: ("*" | {
3722
- name?: string | undefined;
3723
- actions?: string[] | undefined;
3724
- resourceType?: string | undefined;
3725
- }) & ("*" | {
3125
+ match: "*" | {
3726
3126
  name?: string | undefined;
3727
3127
  actions?: string[] | undefined;
3728
3128
  resourceType?: string | undefined;
3729
- } | undefined);
3730
- decision: ("allow" | {
3731
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3732
- pluginId: string;
3733
- resourceType: string;
3734
- } | "deny") & ("allow" | {
3735
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3129
+ };
3130
+ decision: "allow" | {
3131
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3736
3132
  pluginId: string;
3737
3133
  resourceType: string;
3738
- } | "deny" | undefined);
3134
+ } | "deny";
3739
3135
  id?: string | undefined;
3740
3136
  }[]>;
3741
3137
  }, "strip", z.ZodTypeAny, {
3742
3138
  id: string;
3743
3139
  name: string;
3744
- members: (string[] | "*") & (string[] | "*" | undefined);
3140
+ members: string[] | "*";
3745
3141
  permissions: {
3746
3142
  id: string;
3747
- match: ("*" | {
3143
+ match: "*" | {
3748
3144
  name?: string | undefined;
3749
3145
  actions?: string[] | undefined;
3750
3146
  resourceType?: string | undefined;
3751
- }) & ("*" | {
3752
- name?: string | undefined;
3753
- actions?: string[] | undefined;
3754
- resourceType?: string | undefined;
3755
- } | undefined);
3756
- decision: ("allow" | {
3757
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3758
- pluginId: string;
3759
- resourceType: string;
3760
- } | "deny") & ("allow" | {
3761
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3147
+ };
3148
+ decision: "allow" | {
3149
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3762
3150
  pluginId: string;
3763
3151
  resourceType: string;
3764
- } | "deny" | undefined);
3152
+ } | "deny";
3765
3153
  }[];
3766
3154
  }, {
3767
3155
  name: string;
3768
- members: (string[] | "*") & (string[] | "*" | undefined);
3156
+ members: string[] | "*";
3769
3157
  permissions: {
3770
- match: ("*" | {
3771
- name?: string | undefined;
3772
- actions?: string[] | undefined;
3773
- resourceType?: string | undefined;
3774
- }) & ("*" | {
3158
+ match: "*" | {
3775
3159
  name?: string | undefined;
3776
3160
  actions?: string[] | undefined;
3777
3161
  resourceType?: string | undefined;
3778
- } | undefined);
3779
- decision: ("allow" | {
3780
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3162
+ };
3163
+ decision: "allow" | {
3164
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3781
3165
  pluginId: string;
3782
3166
  resourceType: string;
3783
- } | "deny") & ("allow" | {
3784
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3785
- pluginId: string;
3786
- resourceType: string;
3787
- } | "deny" | undefined);
3167
+ } | "deny";
3788
3168
  id?: string | undefined;
3789
3169
  }[];
3790
3170
  id?: string | undefined;
3791
3171
  }>, "many">>, {
3792
3172
  id: string;
3793
3173
  name: string;
3794
- members: (string[] | "*") & (string[] | "*" | undefined);
3174
+ members: string[] | "*";
3795
3175
  permissions: {
3796
3176
  id: string;
3797
- match: ("*" | {
3798
- name?: string | undefined;
3799
- actions?: string[] | undefined;
3800
- resourceType?: string | undefined;
3801
- }) & ("*" | {
3177
+ match: "*" | {
3802
3178
  name?: string | undefined;
3803
3179
  actions?: string[] | undefined;
3804
3180
  resourceType?: string | undefined;
3805
- } | undefined);
3806
- decision: ("allow" | {
3807
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3808
- pluginId: string;
3809
- resourceType: string;
3810
- } | "deny") & ("allow" | {
3811
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3181
+ };
3182
+ decision: "allow" | {
3183
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3812
3184
  pluginId: string;
3813
3185
  resourceType: string;
3814
- } | "deny" | undefined);
3186
+ } | "deny";
3815
3187
  }[];
3816
3188
  }[], {
3817
3189
  name: string;
3818
- members: (string[] | "*") & (string[] | "*" | undefined);
3190
+ members: string[] | "*";
3819
3191
  permissions: {
3820
- match: ("*" | {
3821
- name?: string | undefined;
3822
- actions?: string[] | undefined;
3823
- resourceType?: string | undefined;
3824
- }) & ("*" | {
3192
+ match: "*" | {
3825
3193
  name?: string | undefined;
3826
3194
  actions?: string[] | undefined;
3827
3195
  resourceType?: string | undefined;
3828
- } | undefined);
3829
- decision: ("allow" | {
3830
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3831
- pluginId: string;
3832
- resourceType: string;
3833
- } | "deny") & ("allow" | {
3834
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3196
+ };
3197
+ decision: "allow" | {
3198
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3835
3199
  pluginId: string;
3836
3200
  resourceType: string;
3837
- } | "deny" | undefined);
3201
+ } | "deny";
3838
3202
  id?: string | undefined;
3839
3203
  }[];
3840
3204
  id?: string | undefined;
3841
3205
  }[] | undefined>;
3206
+ }, {
3842
3207
  id: z.ZodString;
3843
3208
  createdAt: z.ZodString;
3844
3209
  createdBy: z.ZodString;
@@ -3848,7 +3213,7 @@ declare const PolicyResponseParser: z.ZodObject<{
3848
3213
  lastPublishedAt: z.ZodNullable<z.ZodOptional<z.ZodString>>;
3849
3214
  lastPublishedBy: z.ZodNullable<z.ZodOptional<z.ZodString>>;
3850
3215
  status: z.ZodEnum<["draft", "active", "inactive"]>;
3851
- }, "strip", z.ZodTypeAny, {
3216
+ }>, "strip", z.ZodTypeAny, {
3852
3217
  id: string;
3853
3218
  name: string;
3854
3219
  status: "active" | "inactive" | "draft";
@@ -3860,27 +3225,19 @@ declare const PolicyResponseParser: z.ZodObject<{
3860
3225
  roles: {
3861
3226
  id: string;
3862
3227
  name: string;
3863
- members: (string[] | "*") & (string[] | "*" | undefined);
3228
+ members: string[] | "*";
3864
3229
  permissions: {
3865
3230
  id: string;
3866
- match: ("*" | {
3867
- name?: string | undefined;
3868
- actions?: string[] | undefined;
3869
- resourceType?: string | undefined;
3870
- }) & ("*" | {
3231
+ match: "*" | {
3871
3232
  name?: string | undefined;
3872
3233
  actions?: string[] | undefined;
3873
3234
  resourceType?: string | undefined;
3874
- } | undefined);
3875
- decision: ("allow" | {
3876
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3877
- pluginId: string;
3878
- resourceType: string;
3879
- } | "deny") & ("allow" | {
3880
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3235
+ };
3236
+ decision: "allow" | {
3237
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3881
3238
  pluginId: string;
3882
3239
  resourceType: string;
3883
- } | "deny" | undefined);
3240
+ } | "deny";
3884
3241
  }[];
3885
3242
  }[];
3886
3243
  createdBy: string;
@@ -3899,33 +3256,25 @@ declare const PolicyResponseParser: z.ZodObject<{
3899
3256
  options?: {
3900
3257
  resolutionStrategy: "first-match" | "any-allow";
3901
3258
  } | undefined;
3259
+ description?: string | null | undefined;
3902
3260
  roles?: {
3903
3261
  name: string;
3904
- members: (string[] | "*") & (string[] | "*" | undefined);
3262
+ members: string[] | "*";
3905
3263
  permissions: {
3906
- match: ("*" | {
3264
+ match: "*" | {
3907
3265
  name?: string | undefined;
3908
3266
  actions?: string[] | undefined;
3909
3267
  resourceType?: string | undefined;
3910
- }) & ("*" | {
3911
- name?: string | undefined;
3912
- actions?: string[] | undefined;
3913
- resourceType?: string | undefined;
3914
- } | undefined);
3915
- decision: ("allow" | {
3916
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3917
- pluginId: string;
3918
- resourceType: string;
3919
- } | "deny") & ("allow" | {
3920
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3268
+ };
3269
+ decision: "allow" | {
3270
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3921
3271
  pluginId: string;
3922
3272
  resourceType: string;
3923
- } | "deny" | undefined);
3273
+ } | "deny";
3924
3274
  id?: string | undefined;
3925
3275
  }[];
3926
3276
  id?: string | undefined;
3927
3277
  }[] | undefined;
3928
- description?: string | null | undefined;
3929
3278
  lastPublishedAt?: string | null | undefined;
3930
3279
  lastPublishedBy?: string | null | undefined;
3931
3280
  }>, "many">;
@@ -3945,27 +3294,19 @@ declare const PolicyResponseParser: z.ZodObject<{
3945
3294
  roles: {
3946
3295
  id: string;
3947
3296
  name: string;
3948
- members: (string[] | "*") & (string[] | "*" | undefined);
3297
+ members: string[] | "*";
3949
3298
  permissions: {
3950
3299
  id: string;
3951
- match: ("*" | {
3952
- name?: string | undefined;
3953
- actions?: string[] | undefined;
3954
- resourceType?: string | undefined;
3955
- }) & ("*" | {
3300
+ match: "*" | {
3956
3301
  name?: string | undefined;
3957
3302
  actions?: string[] | undefined;
3958
3303
  resourceType?: string | undefined;
3959
- } | undefined);
3960
- decision: ("allow" | {
3961
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3962
- pluginId: string;
3963
- resourceType: string;
3964
- } | "deny") & ("allow" | {
3965
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3304
+ };
3305
+ decision: "allow" | {
3306
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
3966
3307
  pluginId: string;
3967
3308
  resourceType: string;
3968
- } | "deny" | undefined);
3309
+ } | "deny";
3969
3310
  }[];
3970
3311
  }[];
3971
3312
  createdBy: string;
@@ -3989,33 +3330,25 @@ declare const PolicyResponseParser: z.ZodObject<{
3989
3330
  options?: {
3990
3331
  resolutionStrategy: "first-match" | "any-allow";
3991
3332
  } | undefined;
3333
+ description?: string | null | undefined;
3992
3334
  roles?: {
3993
3335
  name: string;
3994
- members: (string[] | "*") & (string[] | "*" | undefined);
3336
+ members: string[] | "*";
3995
3337
  permissions: {
3996
- match: ("*" | {
3338
+ match: "*" | {
3997
3339
  name?: string | undefined;
3998
3340
  actions?: string[] | undefined;
3999
3341
  resourceType?: string | undefined;
4000
- }) & ("*" | {
4001
- name?: string | undefined;
4002
- actions?: string[] | undefined;
4003
- resourceType?: string | undefined;
4004
- } | undefined);
4005
- decision: ("allow" | {
4006
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
4007
- pluginId: string;
4008
- resourceType: string;
4009
- } | "deny") & ("allow" | {
4010
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3342
+ };
3343
+ decision: "allow" | {
3344
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
4011
3345
  pluginId: string;
4012
3346
  resourceType: string;
4013
- } | "deny" | undefined);
3347
+ } | "deny";
4014
3348
  id?: string | undefined;
4015
3349
  }[];
4016
3350
  id?: string | undefined;
4017
3351
  }[] | undefined;
4018
- description?: string | null | undefined;
4019
3352
  lastPublishedAt?: string | null | undefined;
4020
3353
  lastPublishedBy?: string | null | undefined;
4021
3354
  }[];
@@ -4029,24 +3362,16 @@ declare const isMatchingPermission: (permission: Permission, match: PermissionMa
4029
3362
  /** @public */
4030
3363
  declare const getMatchingRolePermissions: (role: Role, permission: Permission) => {
4031
3364
  id: string;
4032
- match: ("*" | {
4033
- name?: string | undefined;
4034
- actions?: string[] | undefined;
4035
- resourceType?: string | undefined;
4036
- }) & ("*" | {
3365
+ match: "*" | {
4037
3366
  name?: string | undefined;
4038
3367
  actions?: string[] | undefined;
4039
3368
  resourceType?: string | undefined;
4040
- } | undefined);
4041
- decision: ("allow" | {
4042
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
4043
- pluginId: string;
4044
- resourceType: string;
4045
- } | "deny") & ("allow" | {
4046
- conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> & (_backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition> | undefined);
3369
+ };
3370
+ decision: "allow" | {
3371
+ conditions: _backstage_plugin_permission_common.PermissionCriteria<RBACPermissionCondition>;
4047
3372
  pluginId: string;
4048
3373
  resourceType: string;
4049
- } | "deny" | undefined);
3374
+ } | "deny";
4050
3375
  }[];
4051
3376
  /**
4052
3377
  * Compares a user entity ref to an entry from a list of