@spotify/backstage-plugin-rbac-common 0.6.4 → 0.6.6

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @spotify/backstage-plugin-rbac-common
 
+## 0.6.6
+
+### Patch Changes
+
+- Update to Backstage `v1.36.0`
+- The role members table and members search now shows entity display names instead of refs when available.
+- Added the ability to provide descriptions for roles.
+
+## 0.6.5
+
+### Patch Changes
+
+- Update to Backstage `v1.35.0`
+
 ## 0.6.4
 
 ### Patch Changes

package/dist/api.cjs.js

@@ -1,2 +1,2 @@
-"use strict";var e=require("zod"),s=require("./permissionSchema.cjs.js"),r=require("./schema.cjs.js");const a=r.PolicyConfigParser,o=r.PolicyConfigParser.extend({name:r.PolicyTitleParser.optional(),options:r.PolicyConfigOptionsParser.optional(),roles:r.RolesParser.optional()}),t=e.z.object({description:e.z.string().optional(),update:o.optional()}),n=e.z.object({decision:s.PolicyDecisionParser,decisionOrigin:e.z.array(r.RoleDecisionParser)}),P=e.z.object({permission:s.PermissionParser,policyConfig:r.PolicyConfigParser,roleIds:e.z.array(e.z.string())}),c=e.z.object({id:e.z.string()}),l=e.z.object({authorized:e.z.boolean()}),i=e.z.object({name:e.z.string().optional(),type:e.z.enum(["user","group","all","unknown"]),entityRef:e.z.string()}),p=e.z.object({members:e.z.array(i)}),z=e.z.object({items:e.z.array(r.PolicyParser),nextCursor:e.z.string().optional(),prevCursor:e.z.string().optional(),totalItems:e.z.number()});exports.AuthorizeResponseParser=l,exports.CreateDraftRequestParser=a,exports.DraftResponseParser=c,exports.MemberResponseParser=i,exports.PolicyResponseParser=z,exports.PublishVersionRequestParser=t,exports.SearchMemberResponseParser=p,exports.TestPolicyDecisionRequestParser=P,exports.TestPolicyDecisionResponseParser=n,exports.UpdateDraftRequestParser=o;
+"use strict";var e=require("zod"),s=require("./permissionSchema.cjs.js"),r=require("./schema.cjs.js");const a=r.PolicyConfigParser,o=r.PolicyConfigParser.extend({name:r.PolicyTitleParser.optional(),options:r.PolicyConfigOptionsParser.optional(),roles:r.RolesParser.optional()}),t=e.z.object({description:e.z.string().optional(),update:o.optional()}),n=e.z.object({decision:s.PolicyDecisionParser,decisionOrigin:e.z.array(r.RoleDecisionParser)}),P=e.z.object({permission:s.PermissionParser,policyConfig:r.PolicyConfigParser,roleIds:e.z.array(e.z.string())}),p=e.z.object({id:e.z.string()}),c=e.z.object({authorized:e.z.boolean()}),i=e.z.object({name:e.z.string().optional(),namespace:e.z.string().optional(),description:e.z.string().optional(),type:e.z.enum(["user","group","all","unknown"]),entityRef:e.z.string(),spec:e.z.object({type:e.z.string().optional(),profile:e.z.object({displayName:e.z.string().optional()}).optional()}).optional()}),l=e.z.object({members:e.z.array(i)}),z=e.z.object({items:e.z.array(r.PolicyParser),nextCursor:e.z.string().optional(),prevCursor:e.z.string().optional(),totalItems:e.z.number()});exports.AuthorizeResponseParser=c,exports.CreateDraftRequestParser=a,exports.DraftResponseParser=p,exports.MemberResponseParser=i,exports.PolicyResponseParser=z,exports.PublishVersionRequestParser=t,exports.SearchMemberResponseParser=l,exports.TestPolicyDecisionRequestParser=P,exports.TestPolicyDecisionResponseParser=n,exports.UpdateDraftRequestParser=o;
 //# sourceMappingURL=api.cjs.js.map

package/dist/api.esm.js

@@ -1,2 +1,2 @@
-import{z as e}from"zod";import{PolicyDecisionParser as i,PermissionParser as t}from"./permissionSchema.esm.js";import{PolicyConfigParser as r,PolicyTitleParser as n,PolicyConfigOptionsParser as a,RolesParser as p,RoleDecisionParser as P,PolicyParser as l}from"./schema.esm.js";const c=r,o=r.extend({name:n.optional(),options:a.optional(),roles:p.optional()}),m=e.object({description:e.string().optional(),update:o.optional()}),u=e.object({decision:i,decisionOrigin:e.array(P)}),y=e.object({permission:t,policyConfig:r,roleIds:e.array(e.string())}),b=e.object({id:e.string()}),R=e.object({authorized:e.boolean()}),s=e.object({name:e.string().optional(),type:e.enum(["user","group","all","unknown"]),entityRef:e.string()}),g=e.object({members:e.array(s)}),f=e.object({items:e.array(l),nextCursor:e.string().optional(),prevCursor:e.string().optional(),totalItems:e.number()});export{R as AuthorizeResponseParser,c as CreateDraftRequestParser,b as DraftResponseParser,s as MemberResponseParser,f as PolicyResponseParser,m as PublishVersionRequestParser,g as SearchMemberResponseParser,y as TestPolicyDecisionRequestParser,u as TestPolicyDecisionResponseParser,o as UpdateDraftRequestParser};
+import{z as e}from"zod";import{PolicyDecisionParser as i,PermissionParser as t}from"./permissionSchema.esm.js";import{PolicyConfigParser as o,PolicyTitleParser as n,PolicyConfigOptionsParser as a,RolesParser as p,RoleDecisionParser as l,PolicyParser as c}from"./schema.esm.js";const P=o,r=o.extend({name:n.optional(),options:a.optional(),roles:p.optional()}),m=e.object({description:e.string().optional(),update:r.optional()}),y=e.object({decision:i,decisionOrigin:e.array(l)}),b=e.object({permission:t,policyConfig:o,roleIds:e.array(e.string())}),g=e.object({id:e.string()}),u=e.object({authorized:e.boolean()}),s=e.object({name:e.string().optional(),namespace:e.string().optional(),description:e.string().optional(),type:e.enum(["user","group","all","unknown"]),entityRef:e.string(),spec:e.object({type:e.string().optional(),profile:e.object({displayName:e.string().optional()}).optional()}).optional()}),R=e.object({members:e.array(s)}),d=e.object({items:e.array(c),nextCursor:e.string().optional(),prevCursor:e.string().optional(),totalItems:e.number()});export{u as AuthorizeResponseParser,P as CreateDraftRequestParser,g as DraftResponseParser,s as MemberResponseParser,d as PolicyResponseParser,m as PublishVersionRequestParser,R as SearchMemberResponseParser,b as TestPolicyDecisionRequestParser,y as TestPolicyDecisionResponseParser,r as UpdateDraftRequestParser};
 //# sourceMappingURL=api.esm.js.map

package/dist/index.d.ts

@@ -239,6 +239,7 @@ declare const RolePermissionsParser: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
 /** @public */
 declare const RoleParser: z.ZodObject<{
     name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
     id: z.ZodDefault<z.ZodString>;
     members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
     permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -359,6 +360,7 @@ declare const RoleParser: z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }, {
     name: string;
     members: string[] | "*";
@@ -376,10 +378,12 @@ declare const RoleParser: z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }>;
 /** @public */
 declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
     name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
     id: z.ZodDefault<z.ZodString>;
     members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
     permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -500,6 +504,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }, {
     name: string;
     members: string[] | "*";
@@ -517,6 +522,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }>, "many">>, {
     id: string;
     name: string;
@@ -534,6 +540,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }[], {
     name: string;
     members: string[] | "*";
@@ -551,6 +558,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }[] | undefined>;
 /** @public */
 declare const RoleDecisionParser: z.ZodObject<{
@@ -610,6 +618,7 @@ declare const PolicyConfigParser: z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -730,6 +739,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -747,6 +757,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -764,6 +775,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -781,6 +793,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -804,6 +817,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -827,6 +841,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -841,6 +856,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -961,6 +977,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -978,6 +995,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -995,6 +1013,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1012,6 +1031,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -1035,6 +1055,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -1058,6 +1079,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>>;
 /** @public */
@@ -1080,6 +1102,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1200,6 +1223,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1217,6 +1241,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1234,6 +1259,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1251,6 +1277,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, {
     /**
@@ -1315,6 +1342,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
     createdBy: string;
     updatedBy: string;
@@ -1350,6 +1378,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
     lastPublishedAt?: string | null | undefined;
     lastPublishedBy?: string | null | undefined;
@@ -1395,6 +1424,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1402,7 +1432,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1515,6 +1545,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1532,6 +1563,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1549,6 +1581,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1566,6 +1599,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -1589,6 +1623,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -1612,6 +1647,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -1626,6 +1662,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1633,7 +1670,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1746,6 +1783,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1763,6 +1801,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1780,6 +1819,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1797,6 +1837,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, {
     name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
@@ -1809,6 +1850,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>>;
     roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1816,7 +1858,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1929,6 +1971,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1946,6 +1989,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1963,6 +2007,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1980,6 +2025,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>>;
 }>, "strip", z.ZodTypeAny, {
     name?: string | undefined;
@@ -2003,6 +2049,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[] | undefined;
 }, {
     name?: string | undefined;
@@ -2026,6 +2073,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -2042,6 +2090,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2049,7 +2098,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2162,6 +2211,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2179,6 +2229,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2196,6 +2247,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2213,6 +2265,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, {
         name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
@@ -2225,6 +2278,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
         }>>>;
         roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2232,7 +2286,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2345,6 +2399,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2362,6 +2417,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2379,6 +2435,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2396,6 +2453,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>>;
     }>, "strip", z.ZodTypeAny, {
         name?: string | undefined;
@@ -2419,6 +2477,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[] | undefined;
     }, {
         name?: string | undefined;
@@ -2442,6 +2501,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
@@ -2468,6 +2528,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[] | undefined;
     } | undefined;
 }, {
@@ -2494,6 +2555,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     } | undefined;
 }>;
@@ -2634,6 +2696,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2641,7 +2704,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2754,6 +2817,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2771,6 +2835,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2788,6 +2853,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2805,6 +2871,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -2828,6 +2895,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
     }, {
         name?: string | undefined;
@@ -2851,6 +2919,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     }>;
     roleIds: z.ZodArray<z.ZodString, "many">;
@@ -2887,6 +2956,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
     };
     roleIds: string[];
@@ -2923,6 +2993,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     };
     roleIds: string[];
@@ -2962,16 +3033,54 @@ type AuthorizeResponse = z.infer<typeof AuthorizeResponseParser>;
 /** @public */
 declare const MemberResponseParser: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
+    namespace: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
     type: z.ZodEnum<["user", "group", "all", "unknown"]>;
     entityRef: z.ZodString;
+    spec: z.ZodOptional<z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        profile: z.ZodOptional<z.ZodObject<{
+            displayName: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            displayName?: string | undefined;
+        }, {
+            displayName?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    }, {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     type: "unknown" | "all" | "user" | "group";
     entityRef: string;
     name?: string | undefined;
+    description?: string | undefined;
+    namespace?: string | undefined;
+    spec?: {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    } | undefined;
 }, {
     type: "unknown" | "all" | "user" | "group";
     entityRef: string;
     name?: string | undefined;
+    description?: string | undefined;
+    namespace?: string | undefined;
+    spec?: {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    } | undefined;
 }>;
 /** @public */
 type MemberResponse = z.infer<typeof MemberResponseParser>;
@@ -2984,28 +3093,82 @@ type PolicyMember = {
 declare const SearchMemberResponseParser: z.ZodObject<{
     members: z.ZodArray<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
+        namespace: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
         type: z.ZodEnum<["user", "group", "all", "unknown"]>;
         entityRef: z.ZodString;
+        spec: z.ZodOptional<z.ZodObject<{
+            type: z.ZodOptional<z.ZodString>;
+            profile: z.ZodOptional<z.ZodObject<{
+                displayName: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                displayName?: string | undefined;
+            }, {
+                displayName?: string | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        }, {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }, {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     members: {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[];
 }, {
     members: {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[];
 }>;
 /** @public */
@@ -3032,6 +3195,7 @@ declare const PolicyResponseParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -3039,7 +3203,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -3152,6 +3316,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -3169,6 +3334,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -3186,6 +3352,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -3203,6 +3370,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, {
         id: z.ZodString;
@@ -3240,6 +3408,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
         createdBy: string;
         updatedBy: string;
@@ -3275,6 +3444,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
         lastPublishedAt?: string | null | undefined;
         lastPublishedBy?: string | null | undefined;
@@ -3309,6 +3479,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
         createdBy: string;
         updatedBy: string;
@@ -3349,6 +3520,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
         lastPublishedAt?: string | null | undefined;
         lastPublishedBy?: string | null | undefined;

package/dist/schema.cjs.js

@@ -1,2 +1,2 @@
-"use strict";var a=require("@backstage/catalog-model"),m=require("uuid"),e=require("zod"),o=require("./validationMessages.cjs.js");const P="Untitled policy",q=":backstageUser",f=e.z.object({rule:e.z.string(),params:e.z.record(e.z.any()).optional()}),n=e.z.lazy(()=>e.z.union([e.z.object({allOf:e.z.array(n).nonempty()}).strict(),e.z.object({anyOf:e.z.array(n).nonempty()}).strict(),e.z.object({not:n}).strict(),f])),h=e.z.object({pluginId:e.z.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.z.string().min(1).describe("Resource type associated with the conditions used."),conditions:n}),y=e.z.union([e.z.literal("allow"),e.z.literal("deny")]),c=e.z.union([y,h]),g=e.z.union([e.z.literal("*"),e.z.object({name:e.z.string().optional().describe("Name that must match the incoming permission request."),actions:e.z.array(e.z.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.z.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),z=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the permission."),p=e.z.object({id:z,match:g.describe("Values used to match against the incoming permission request."),decision:c.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:i,match:s})=>O(i)?s!=="*"&&s?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),b=e.z.array(p).superRefine((i,s)=>{const r=d(i,"id");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Permission ids must be unique",path:[r,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.z.string().refine(x,{message:"Invalid entity ref for member.",path:[]}).transform(i=>a.stringifyEntityRef(a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}))),C=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the role."),R=e.z.object({name:e.z.string().min(1,{message:o.minCharacters("Role name",1)}).max(1024,{message:o.maxCharacters("Role name",1024)}).describe("Name of the role."),id:C,members:e.z.union([e.z.literal("*"),e.z.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:b}),D=e.z.array(R).default([]).superRefine((i,s)=>{const r=d(i,"name");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role names must be unique",path:[r,"name"]});const t=d(i,"id");t>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role ids must be unique",path:[t,"id"]})}),T=e.z.object({decision:c.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:z.describe("The id of the role permission that resulted in the decisions.")}),A=e.z.string().min(1,{message:o.minCharacters("Policy name",1)}).max(1024,{message:o.maxCharacters("Policy name",1024)}).default(P).describe("Name of the policy."),j=e.z.union([e.z.literal("first-match"),e.z.literal("any-allow")]),I=e.z.object({resolutionStrategy:j}).default({resolutionStrategy:"first-match"}),l=e.z.object({name:A,options:I,roles:D}),N=l.default({roles:[]});function x(i){try{return a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function d(i,s){let r=0;const t=new Set;for(;r<i.length;){const u=i[r][s];if(t.has(u))return r;t.add(u),r++}return-1}function O(i){return typeof i!="string"}function B(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="allOf"&&Array.isArray(s[0][1])}function S(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="anyOf"&&Array.isArray(s[0][1])}function w(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="not"&&!Array.isArray(s[0][1])}const E=l.extend({id:e.z.string(),createdAt:e.z.string(),createdBy:e.z.string(),updatedAt:e.z.string(),updatedBy:e.z.string(),description:e.z.string().optional().nullable(),lastPublishedAt:e.z.string().optional().nullable(),lastPublishedBy:e.z.string().optional().nullable(),status:e.z.enum(["draft","active","inactive"])});exports.BackstageUserPlaceholder=q,exports.ConditionalDecisionParser=h,exports.DefaultingPolicyConfigParser=N,exports.LiteralDecisionParser=y,exports.PermissionConditionParser=f,exports.PermissionDecisionParser=c,exports.PermissionMatchParser=g,exports.PolicyConfigOptionsParser=I,exports.PolicyConfigParser=l,exports.PolicyDefaultName=P,exports.PolicyParser=E,exports.PolicyRoleResolutionStrategyParser=j,exports.PolicyTitleParser=A,exports.RoleDecisionParser=T,exports.RoleParser=R,exports.RolePermissionParser=p,exports.RolePermissionsParser=b,exports.RolesParser=D,exports.isAllOfPermissionCriteria=B,exports.isAnyOfPermissionCriteria=S,exports.isConditionalDecision=O,exports.isNotPermissionCriteria=w;
+"use strict";var a=require("@backstage/catalog-model"),m=require("uuid"),e=require("zod"),o=require("./validationMessages.cjs.js");const P="Untitled policy",q=":backstageUser",f=e.z.object({rule:e.z.string(),params:e.z.record(e.z.any()).optional()}),n=e.z.lazy(()=>e.z.union([e.z.object({allOf:e.z.array(n).nonempty()}).strict(),e.z.object({anyOf:e.z.array(n).nonempty()}).strict(),e.z.object({not:n}).strict(),f])),h=e.z.object({pluginId:e.z.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.z.string().min(1).describe("Resource type associated with the conditions used."),conditions:n}),g=e.z.union([e.z.literal("allow"),e.z.literal("deny")]),c=e.z.union([g,h]),y=e.z.union([e.z.literal("*"),e.z.object({name:e.z.string().optional().describe("Name that must match the incoming permission request."),actions:e.z.array(e.z.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.z.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),z=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the permission."),p=e.z.object({id:z,match:y.describe("Values used to match against the incoming permission request."),decision:c.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:i,match:s})=>O(i)?s!=="*"&&s?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),b=e.z.array(p).superRefine((i,s)=>{const r=d(i,"id");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Permission ids must be unique",path:[r,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.z.string().refine(x,{message:"Invalid entity ref for member.",path:[]}).transform(i=>a.stringifyEntityRef(a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}))),C=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the role."),R=e.z.object({name:e.z.string().min(1,{message:o.minCharacters("Role name",1)}).max(1024,{message:o.maxCharacters("Role name",1024)}).describe("Name of the role."),description:e.z.string().optional().describe("Description of the role."),id:C,members:e.z.union([e.z.literal("*"),e.z.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:b}),D=e.z.array(R).default([]).superRefine((i,s)=>{const r=d(i,"name");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role names must be unique",path:[r,"name"]});const t=d(i,"id");t>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role ids must be unique",path:[t,"id"]})}),T=e.z.object({decision:c.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:z.describe("The id of the role permission that resulted in the decisions.")}),A=e.z.string().min(1,{message:o.minCharacters("Policy name",1)}).max(1024,{message:o.maxCharacters("Policy name",1024)}).default(P).describe("Name of the policy."),j=e.z.union([e.z.literal("first-match"),e.z.literal("any-allow")]),I=e.z.object({resolutionStrategy:j}).default({resolutionStrategy:"first-match"}),l=e.z.object({name:A,options:I,roles:D}),N=l.default({roles:[]});function x(i){try{return a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function d(i,s){let r=0;const t=new Set;for(;r<i.length;){const u=i[r][s];if(t.has(u))return r;t.add(u),r++}return-1}function O(i){return typeof i!="string"}function B(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="allOf"&&Array.isArray(s[0][1])}function S(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="anyOf"&&Array.isArray(s[0][1])}function w(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="not"&&!Array.isArray(s[0][1])}const E=l.extend({id:e.z.string(),createdAt:e.z.string(),createdBy:e.z.string(),updatedAt:e.z.string(),updatedBy:e.z.string(),description:e.z.string().optional().nullable(),lastPublishedAt:e.z.string().optional().nullable(),lastPublishedBy:e.z.string().optional().nullable(),status:e.z.enum(["draft","active","inactive"])});exports.BackstageUserPlaceholder=q,exports.ConditionalDecisionParser=h,exports.DefaultingPolicyConfigParser=N,exports.LiteralDecisionParser=g,exports.PermissionConditionParser=f,exports.PermissionDecisionParser=c,exports.PermissionMatchParser=y,exports.PolicyConfigOptionsParser=I,exports.PolicyConfigParser=l,exports.PolicyDefaultName=P,exports.PolicyParser=E,exports.PolicyRoleResolutionStrategyParser=j,exports.PolicyTitleParser=A,exports.RoleDecisionParser=T,exports.RoleParser=R,exports.RolePermissionParser=p,exports.RolePermissionsParser=b,exports.RolesParser=D,exports.isAllOfPermissionCriteria=B,exports.isAnyOfPermissionCriteria=S,exports.isConditionalDecision=O,exports.isNotPermissionCriteria=w;
 //# sourceMappingURL=schema.cjs.js.map

package/dist/schema.esm.js

@@ -1,2 +1,2 @@
-import{stringifyEntityRef as N,parseEntityRef as d}from"@backstage/catalog-model";import{v4 as u}from"uuid";import{z as e}from"zod";import{minCharacters as m,maxCharacters as f}from"./validationMessages.esm.js";const p="Untitled policy",x=":backstageUser",h=e.object({rule:e.string(),params:e.record(e.any()).optional()}),o=e.lazy(()=>e.union([e.object({allOf:e.array(o).nonempty()}).strict(),e.object({anyOf:e.array(o).nonempty()}).strict(),e.object({not:o}).strict(),h])),g=e.object({pluginId:e.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.string().min(1).describe("Resource type associated with the conditions used."),conditions:o}),y=e.union([e.literal("allow"),e.literal("deny")]),n=e.union([y,g]),b=e.union([e.literal("*"),e.object({name:e.string().optional().describe("Name that must match the incoming permission request."),actions:e.array(e.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),P=e.string().default(()=>u().split("-")[0]).describe("ID of the permission."),R=e.object({id:P,match:b.describe("Values used to match against the incoming permission request."),decision:n.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:t,match:i})=>q(t)?i!=="*"&&i?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),j=e.array(R).superRefine((t,i)=>{const s=c(t,"id");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Permission ids must be unique",path:[s,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.string().refine(B,{message:"Invalid entity ref for member.",path:[]}).transform(t=>N(d(t,{defaultKind:"group",defaultNamespace:"default"}))),C=e.string().default(()=>u().split("-")[0]).describe("ID of the role."),A=e.object({name:e.string().min(1,{message:m("Role name",1)}).max(1024,{message:f("Role name",1024)}).describe("Name of the role."),id:C,members:e.union([e.literal("*"),e.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:j}),I=e.array(A).default([]).superRefine((t,i)=>{const s=c(t,"name");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role names must be unique",path:[s,"name"]});const r=c(t,"id");r>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role ids must be unique",path:[r,"id"]})}),z=e.object({decision:n.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:P.describe("The id of the role permission that resulted in the decisions.")}),D=e.string().min(1,{message:m("Policy name",1)}).max(1024,{message:f("Policy name",1024)}).default(p).describe("Name of the policy."),O=e.union([e.literal("first-match"),e.literal("any-allow")]),T=e.object({resolutionStrategy:O}).default({resolutionStrategy:"first-match"}),a=e.object({name:D,options:T,roles:I}),w=a.default({roles:[]});function B(t){try{return d(t,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function c(t,i){let s=0;const r=new Set;for(;s<t.length;){const l=t[s][i];if(r.has(l))return s;r.add(l),s++}return-1}function q(t){return typeof t!="string"}function S(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="allOf"&&Array.isArray(i[0][1])}function E(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="anyOf"&&Array.isArray(i[0][1])}function U(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="not"&&!Array.isArray(i[0][1])}const Z=a.extend({id:e.string(),createdAt:e.string(),createdBy:e.string(),updatedAt:e.string(),updatedBy:e.string(),description:e.string().optional().nullable(),lastPublishedAt:e.string().optional().nullable(),lastPublishedBy:e.string().optional().nullable(),status:e.enum(["draft","active","inactive"])});export{x as BackstageUserPlaceholder,g as ConditionalDecisionParser,w as DefaultingPolicyConfigParser,y as LiteralDecisionParser,h as PermissionConditionParser,n as PermissionDecisionParser,b as PermissionMatchParser,T as PolicyConfigOptionsParser,a as PolicyConfigParser,p as PolicyDefaultName,Z as PolicyParser,O as PolicyRoleResolutionStrategyParser,D as PolicyTitleParser,z as RoleDecisionParser,A as RoleParser,R as RolePermissionParser,j as RolePermissionsParser,I as RolesParser,S as isAllOfPermissionCriteria,E as isAnyOfPermissionCriteria,q as isConditionalDecision,U as isNotPermissionCriteria};
+import{stringifyEntityRef as N,parseEntityRef as d}from"@backstage/catalog-model";import{v4 as u}from"uuid";import{z as e}from"zod";import{minCharacters as m,maxCharacters as p}from"./validationMessages.esm.js";const f="Untitled policy",x=":backstageUser",h=e.object({rule:e.string(),params:e.record(e.any()).optional()}),o=e.lazy(()=>e.union([e.object({allOf:e.array(o).nonempty()}).strict(),e.object({anyOf:e.array(o).nonempty()}).strict(),e.object({not:o}).strict(),h])),g=e.object({pluginId:e.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.string().min(1).describe("Resource type associated with the conditions used."),conditions:o}),y=e.union([e.literal("allow"),e.literal("deny")]),n=e.union([y,g]),b=e.union([e.literal("*"),e.object({name:e.string().optional().describe("Name that must match the incoming permission request."),actions:e.array(e.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),P=e.string().default(()=>u().split("-")[0]).describe("ID of the permission."),R=e.object({id:P,match:b.describe("Values used to match against the incoming permission request."),decision:n.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:t,match:i})=>q(t)?i!=="*"&&i?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),j=e.array(R).superRefine((t,i)=>{const s=c(t,"id");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Permission ids must be unique",path:[s,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.string().refine(B,{message:"Invalid entity ref for member.",path:[]}).transform(t=>N(d(t,{defaultKind:"group",defaultNamespace:"default"}))),C=e.string().default(()=>u().split("-")[0]).describe("ID of the role."),A=e.object({name:e.string().min(1,{message:m("Role name",1)}).max(1024,{message:p("Role name",1024)}).describe("Name of the role."),description:e.string().optional().describe("Description of the role."),id:C,members:e.union([e.literal("*"),e.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:j}),I=e.array(A).default([]).superRefine((t,i)=>{const s=c(t,"name");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role names must be unique",path:[s,"name"]});const r=c(t,"id");r>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role ids must be unique",path:[r,"id"]})}),z=e.object({decision:n.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:P.describe("The id of the role permission that resulted in the decisions.")}),D=e.string().min(1,{message:m("Policy name",1)}).max(1024,{message:p("Policy name",1024)}).default(f).describe("Name of the policy."),O=e.union([e.literal("first-match"),e.literal("any-allow")]),T=e.object({resolutionStrategy:O}).default({resolutionStrategy:"first-match"}),a=e.object({name:D,options:T,roles:I}),w=a.default({roles:[]});function B(t){try{return d(t,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function c(t,i){let s=0;const r=new Set;for(;s<t.length;){const l=t[s][i];if(r.has(l))return s;r.add(l),s++}return-1}function q(t){return typeof t!="string"}function S(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="allOf"&&Array.isArray(i[0][1])}function E(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="anyOf"&&Array.isArray(i[0][1])}function U(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="not"&&!Array.isArray(i[0][1])}const Z=a.extend({id:e.string(),createdAt:e.string(),createdBy:e.string(),updatedAt:e.string(),updatedBy:e.string(),description:e.string().optional().nullable(),lastPublishedAt:e.string().optional().nullable(),lastPublishedBy:e.string().optional().nullable(),status:e.enum(["draft","active","inactive"])});export{x as BackstageUserPlaceholder,g as ConditionalDecisionParser,w as DefaultingPolicyConfigParser,y as LiteralDecisionParser,h as PermissionConditionParser,n as PermissionDecisionParser,b as PermissionMatchParser,T as PolicyConfigOptionsParser,a as PolicyConfigParser,f as PolicyDefaultName,Z as PolicyParser,O as PolicyRoleResolutionStrategyParser,D as PolicyTitleParser,z as RoleDecisionParser,A as RoleParser,R as RolePermissionParser,j as RolePermissionsParser,I as RolesParser,S as isAllOfPermissionCriteria,E as isAnyOfPermissionCriteria,q as isConditionalDecision,U as isNotPermissionCriteria};
 //# sourceMappingURL=schema.esm.js.map

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@spotify/backstage-plugin-rbac-common",
   "description": "Control access to actions and data in Backstage with ease.",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://backstage.spotify.com",
   "main": "dist/index.cjs.js",
@@ -31,14 +31,14 @@
     "postpack": "backstage-cli package postpack"
   },
   "dependencies": {
-    "@backstage/catalog-model": "^1.7.2",
-    "@backstage/plugin-permission-common": "^0.8.3",
-    "@backstage/types": "^1.2.0",
+    "@backstage/catalog-model": "^1.7.3",
+    "@backstage/plugin-permission-common": "^0.8.4",
+    "@backstage/types": "^1.2.1",
     "uuid": "^11.0.0",
     "zod": "^3.20.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.29.4"
+    "@backstage/cli": "^0.30.0"
   },
   "files": [
     "dist",