npm - @spotify/backstage-plugin-rbac-common - Versions diffs - 0.6.5 → 0.6.6 - Mend

@spotify/backstage-plugin-rbac-common 0.6.5 → 0.6.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/CHANGELOG.md CHANGED Viewed

@@ -1,5 +1,13 @@
 # @spotify/backstage-plugin-rbac-common
+## 0.6.6
+### Patch Changes
+- Update to Backstage `v1.36.0`
+- The role members table and members search now shows entity display names instead of refs when available.
+- Added the ability to provide descriptions for roles.
 ## 0.6.5
 ### Patch Changes

package/dist/api.cjs.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var e=require("zod"),s=require("./permissionSchema.cjs.js"),r=require("./schema.cjs.js");const a=r.PolicyConfigParser,o=r.PolicyConfigParser.extend({name:r.PolicyTitleParser.optional(),options:r.PolicyConfigOptionsParser.optional(),roles:r.RolesParser.optional()}),t=e.z.object({description:e.z.string().optional(),update:o.optional()}),n=e.z.object({decision:s.PolicyDecisionParser,decisionOrigin:e.z.array(r.RoleDecisionParser)}),P=e.z.object({permission:s.PermissionParser,policyConfig:r.PolicyConfigParser,roleIds:e.z.array(e.z.string())}),c=e.z.object({id:e.z.string()}),l=e.z.object({authorized:e.z.boolean()}),i=e.z.object({name:e.z.string().optional(),type:e.z.enum(["user","group","all","unknown"]),entityRef:e.z.string()}),p=e.z.object({members:e.z.array(i)}),z=e.z.object({items:e.z.array(r.PolicyParser),nextCursor:e.z.string().optional(),prevCursor:e.z.string().optional(),totalItems:e.z.number()});exports.AuthorizeResponseParser=l,exports.CreateDraftRequestParser=a,exports.DraftResponseParser=c,exports.MemberResponseParser=i,exports.PolicyResponseParser=z,exports.PublishVersionRequestParser=t,exports.SearchMemberResponseParser=p,exports.TestPolicyDecisionRequestParser=P,exports.TestPolicyDecisionResponseParser=n,exports.UpdateDraftRequestParser=o;
+"use strict";var e=require("zod"),s=require("./permissionSchema.cjs.js"),r=require("./schema.cjs.js");const a=r.PolicyConfigParser,o=r.PolicyConfigParser.extend({name:r.PolicyTitleParser.optional(),options:r.PolicyConfigOptionsParser.optional(),roles:r.RolesParser.optional()}),t=e.z.object({description:e.z.string().optional(),update:o.optional()}),n=e.z.object({decision:s.PolicyDecisionParser,decisionOrigin:e.z.array(r.RoleDecisionParser)}),P=e.z.object({permission:s.PermissionParser,policyConfig:r.PolicyConfigParser,roleIds:e.z.array(e.z.string())}),p=e.z.object({id:e.z.string()}),c=e.z.object({authorized:e.z.boolean()}),i=e.z.object({name:e.z.string().optional(),namespace:e.z.string().optional(),description:e.z.string().optional(),type:e.z.enum(["user","group","all","unknown"]),entityRef:e.z.string(),spec:e.z.object({type:e.z.string().optional(),profile:e.z.object({displayName:e.z.string().optional()}).optional()}).optional()}),l=e.z.object({members:e.z.array(i)}),z=e.z.object({items:e.z.array(r.PolicyParser),nextCursor:e.z.string().optional(),prevCursor:e.z.string().optional(),totalItems:e.z.number()});exports.AuthorizeResponseParser=c,exports.CreateDraftRequestParser=a,exports.DraftResponseParser=p,exports.MemberResponseParser=i,exports.PolicyResponseParser=z,exports.PublishVersionRequestParser=t,exports.SearchMemberResponseParser=l,exports.TestPolicyDecisionRequestParser=P,exports.TestPolicyDecisionResponseParser=n,exports.UpdateDraftRequestParser=o;
 //# sourceMappingURL=api.cjs.js.map

package/dist/api.esm.js CHANGED Viewed

@@ -1,2 +1,2 @@
-import{z as e}from"zod";import{PolicyDecisionParser as i,PermissionParser as t}from"./permissionSchema.esm.js";import{PolicyConfigParser as r,PolicyTitleParser as n,PolicyConfigOptionsParser as a,RolesParser as p,RoleDecisionParser as P,PolicyParser as l}from"./schema.esm.js";const c=r,o=r.extend({name:n.optional(),options:a.optional(),roles:p.optional()}),m=e.object({description:e.string().optional(),update:o.optional()}),u=e.object({decision:i,decisionOrigin:e.array(P)}),y=e.object({permission:t,policyConfig:r,roleIds:e.array(e.string())}),b=e.object({id:e.string()}),R=e.object({authorized:e.boolean()}),s=e.object({name:e.string().optional(),type:e.enum(["user","group","all","unknown"]),entityRef:e.string()}),g=e.object({members:e.array(s)}),f=e.object({items:e.array(l),nextCursor:e.string().optional(),prevCursor:e.string().optional(),totalItems:e.number()});export{R as AuthorizeResponseParser,c as CreateDraftRequestParser,b as DraftResponseParser,s as MemberResponseParser,f as PolicyResponseParser,m as PublishVersionRequestParser,g as SearchMemberResponseParser,y as TestPolicyDecisionRequestParser,u as TestPolicyDecisionResponseParser,o as UpdateDraftRequestParser};
+import{z as e}from"zod";import{PolicyDecisionParser as i,PermissionParser as t}from"./permissionSchema.esm.js";import{PolicyConfigParser as o,PolicyTitleParser as n,PolicyConfigOptionsParser as a,RolesParser as p,RoleDecisionParser as l,PolicyParser as c}from"./schema.esm.js";const P=o,r=o.extend({name:n.optional(),options:a.optional(),roles:p.optional()}),m=e.object({description:e.string().optional(),update:r.optional()}),y=e.object({decision:i,decisionOrigin:e.array(l)}),b=e.object({permission:t,policyConfig:o,roleIds:e.array(e.string())}),g=e.object({id:e.string()}),u=e.object({authorized:e.boolean()}),s=e.object({name:e.string().optional(),namespace:e.string().optional(),description:e.string().optional(),type:e.enum(["user","group","all","unknown"]),entityRef:e.string(),spec:e.object({type:e.string().optional(),profile:e.object({displayName:e.string().optional()}).optional()}).optional()}),R=e.object({members:e.array(s)}),d=e.object({items:e.array(c),nextCursor:e.string().optional(),prevCursor:e.string().optional(),totalItems:e.number()});export{u as AuthorizeResponseParser,P as CreateDraftRequestParser,g as DraftResponseParser,s as MemberResponseParser,d as PolicyResponseParser,m as PublishVersionRequestParser,R as SearchMemberResponseParser,b as TestPolicyDecisionRequestParser,y as TestPolicyDecisionResponseParser,r as UpdateDraftRequestParser};
 //# sourceMappingURL=api.esm.js.map

package/dist/index.d.ts CHANGED Viewed

@@ -239,6 +239,7 @@ declare const RolePermissionsParser: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodO
 /** @public */
 declare const RoleParser: z.ZodObject<{
     name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
     id: z.ZodDefault<z.ZodString>;
     members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
     permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -359,6 +360,7 @@ declare const RoleParser: z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }, {
     name: string;
     members: string[] | "*";
@@ -376,10 +378,12 @@ declare const RoleParser: z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }>;
 /** @public */
 declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
     name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
     id: z.ZodDefault<z.ZodString>;
     members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
     permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -500,6 +504,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }, {
     name: string;
     members: string[] | "*";
@@ -517,6 +522,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }>, "many">>, {
     id: string;
     name: string;
@@ -534,6 +540,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             resourceType: string;
         } | "deny";
     }[];
+    description?: string | undefined;
 }[], {
     name: string;
     members: string[] | "*";
@@ -551,6 +558,7 @@ declare const RolesParser: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         id?: string | undefined;
     }[];
     id?: string | undefined;
+    description?: string | undefined;
 }[] | undefined>;
 /** @public */
 declare const RoleDecisionParser: z.ZodObject<{
@@ -610,6 +618,7 @@ declare const PolicyConfigParser: z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -730,6 +739,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -747,6 +757,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -764,6 +775,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -781,6 +793,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -804,6 +817,7 @@ declare const PolicyConfigParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -827,6 +841,7 @@ declare const PolicyConfigParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -841,6 +856,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -961,6 +977,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -978,6 +995,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -995,6 +1013,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1012,6 +1031,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -1035,6 +1055,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -1058,6 +1079,7 @@ declare const DefaultingPolicyConfigParser: z.ZodDefault<z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>>;
 /** @public */
@@ -1080,6 +1102,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1200,6 +1223,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1217,6 +1241,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1234,6 +1259,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1251,6 +1277,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, {
     /**
@@ -1315,6 +1342,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
     createdBy: string;
     updatedBy: string;
@@ -1350,6 +1378,7 @@ declare const PolicyParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
     lastPublishedAt?: string | null | undefined;
     lastPublishedBy?: string | null | undefined;
@@ -1395,6 +1424,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1402,7 +1432,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1515,6 +1545,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1532,6 +1563,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1549,6 +1581,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1566,6 +1599,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, "strip", z.ZodTypeAny, {
     name: string;
@@ -1589,6 +1623,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[];
 }, {
     name?: string | undefined;
@@ -1612,6 +1647,7 @@ declare const CreateDraftRequestParser: z.ZodObject<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -1626,6 +1662,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>;
     roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1633,7 +1670,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1746,6 +1783,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1763,6 +1801,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1780,6 +1819,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1797,6 +1837,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>;
 }, {
     name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
@@ -1809,6 +1850,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
     }>>>;
     roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         id: z.ZodDefault<z.ZodString>;
         members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
         permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -1816,7 +1858,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
                 actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                resourceType: z.ZodOptional<z.ZodString>;
+                resourceType: z.ZodOptional<z.ZodString>; /** @public */
             }, "strip", z.ZodTypeAny, {
                 name?: string | undefined;
                 actions?: string[] | undefined;
@@ -1929,6 +1971,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }, {
         name: string;
         members: string[] | "*";
@@ -1946,6 +1989,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }>, "many">>, {
         id: string;
         name: string;
@@ -1963,6 +2007,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[], {
         name: string;
         members: string[] | "*";
@@ -1980,6 +2025,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined>>;
 }>, "strip", z.ZodTypeAny, {
     name?: string | undefined;
@@ -2003,6 +2049,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
                 resourceType: string;
             } | "deny";
         }[];
+        description?: string | undefined;
     }[] | undefined;
 }, {
     name?: string | undefined;
@@ -2026,6 +2073,7 @@ declare const UpdateDraftRequestParser: z.ZodObject<z.objectUtil.extendShape<{
             id?: string | undefined;
         }[];
         id?: string | undefined;
+        description?: string | undefined;
     }[] | undefined;
 }>;
 /** @public */
@@ -2042,6 +2090,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2049,7 +2098,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2162,6 +2211,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2179,6 +2229,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2196,6 +2247,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2213,6 +2265,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, {
         name: z.ZodOptional<z.ZodDefault<z.ZodString>>;
@@ -2225,6 +2278,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
         }>>>;
         roles: z.ZodOptional<z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2232,7 +2286,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2345,6 +2399,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2362,6 +2417,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2379,6 +2435,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2396,6 +2453,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>>;
     }>, "strip", z.ZodTypeAny, {
         name?: string | undefined;
@@ -2419,6 +2477,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[] | undefined;
     }, {
         name?: string | undefined;
@@ -2442,6 +2501,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
@@ -2468,6 +2528,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[] | undefined;
     } | undefined;
 }, {
@@ -2494,6 +2555,7 @@ declare const PublishVersionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     } | undefined;
 }>;
@@ -2634,6 +2696,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -2641,7 +2704,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -2754,6 +2817,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -2771,6 +2835,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -2788,6 +2853,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -2805,6 +2871,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, "strip", z.ZodTypeAny, {
         name: string;
@@ -2828,6 +2895,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
     }, {
         name?: string | undefined;
@@ -2851,6 +2919,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     }>;
     roleIds: z.ZodArray<z.ZodString, "many">;
@@ -2887,6 +2956,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
     };
     roleIds: string[];
@@ -2923,6 +2993,7 @@ declare const TestPolicyDecisionRequestParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
     };
     roleIds: string[];
@@ -2962,16 +3033,54 @@ type AuthorizeResponse = z.infer<typeof AuthorizeResponseParser>;
 /** @public */
 declare const MemberResponseParser: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
+    namespace: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
     type: z.ZodEnum<["user", "group", "all", "unknown"]>;
     entityRef: z.ZodString;
+    spec: z.ZodOptional<z.ZodObject<{
+        type: z.ZodOptional<z.ZodString>;
+        profile: z.ZodOptional<z.ZodObject<{
+            displayName: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            displayName?: string | undefined;
+        }, {
+            displayName?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    }, {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     type: "unknown" | "all" | "user" | "group";
     entityRef: string;
     name?: string | undefined;
+    description?: string | undefined;
+    namespace?: string | undefined;
+    spec?: {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    } | undefined;
 }, {
     type: "unknown" | "all" | "user" | "group";
     entityRef: string;
     name?: string | undefined;
+    description?: string | undefined;
+    namespace?: string | undefined;
+    spec?: {
+        type?: string | undefined;
+        profile?: {
+            displayName?: string | undefined;
+        } | undefined;
+    } | undefined;
 }>;
 /** @public */
 type MemberResponse = z.infer<typeof MemberResponseParser>;
@@ -2984,28 +3093,82 @@ type PolicyMember = {
 declare const SearchMemberResponseParser: z.ZodObject<{
     members: z.ZodArray<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
+        namespace: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
         type: z.ZodEnum<["user", "group", "all", "unknown"]>;
         entityRef: z.ZodString;
+        spec: z.ZodOptional<z.ZodObject<{
+            type: z.ZodOptional<z.ZodString>;
+            profile: z.ZodOptional<z.ZodObject<{
+                displayName: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                displayName?: string | undefined;
+            }, {
+                displayName?: string | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        }, {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }, {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     members: {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[];
 }, {
     members: {
         type: "unknown" | "all" | "user" | "group";
         entityRef: string;
         name?: string | undefined;
+        description?: string | undefined;
+        namespace?: string | undefined;
+        spec?: {
+            type?: string | undefined;
+            profile?: {
+                displayName?: string | undefined;
+            } | undefined;
+        } | undefined;
     }[];
 }>;
 /** @public */
@@ -3032,6 +3195,7 @@ declare const PolicyResponseParser: z.ZodObject<{
         }>>;
         roles: z.ZodEffects<z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             id: z.ZodDefault<z.ZodString>;
             members: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">]>;
             permissions: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodObject<{
@@ -3039,7 +3203,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 match: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                     actions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-                    resourceType: z.ZodOptional<z.ZodString>;
+                    resourceType: z.ZodOptional<z.ZodString>; /** @public */
                 }, "strip", z.ZodTypeAny, {
                     name?: string | undefined;
                     actions?: string[] | undefined;
@@ -3152,6 +3316,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }, {
             name: string;
             members: string[] | "*";
@@ -3169,6 +3334,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }>, "many">>, {
             id: string;
             name: string;
@@ -3186,6 +3352,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[], {
             name: string;
             members: string[] | "*";
@@ -3203,6 +3370,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined>;
     }, {
         id: z.ZodString;
@@ -3240,6 +3408,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
         createdBy: string;
         updatedBy: string;
@@ -3275,6 +3444,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
         lastPublishedAt?: string | null | undefined;
         lastPublishedBy?: string | null | undefined;
@@ -3309,6 +3479,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                     resourceType: string;
                 } | "deny";
             }[];
+            description?: string | undefined;
         }[];
         createdBy: string;
         updatedBy: string;
@@ -3349,6 +3520,7 @@ declare const PolicyResponseParser: z.ZodObject<{
                 id?: string | undefined;
             }[];
             id?: string | undefined;
+            description?: string | undefined;
         }[] | undefined;
         lastPublishedAt?: string | null | undefined;
         lastPublishedBy?: string | null | undefined;

package/dist/schema.cjs.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";var a=require("@backstage/catalog-model"),m=require("uuid"),e=require("zod"),o=require("./validationMessages.cjs.js");const P="Untitled policy",q=":backstageUser",f=e.z.object({rule:e.z.string(),params:e.z.record(e.z.any()).optional()}),n=e.z.lazy(()=>e.z.union([e.z.object({allOf:e.z.array(n).nonempty()}).strict(),e.z.object({anyOf:e.z.array(n).nonempty()}).strict(),e.z.object({not:n}).strict(),f])),h=e.z.object({pluginId:e.z.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.z.string().min(1).describe("Resource type associated with the conditions used."),conditions:n}),y=e.z.union([e.z.literal("allow"),e.z.literal("deny")]),c=e.z.union([y,h]),g=e.z.union([e.z.literal("*"),e.z.object({name:e.z.string().optional().describe("Name that must match the incoming permission request."),actions:e.z.array(e.z.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.z.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),z=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the permission."),p=e.z.object({id:z,match:g.describe("Values used to match against the incoming permission request."),decision:c.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:i,match:s})=>O(i)?s!=="*"&&s?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),b=e.z.array(p).superRefine((i,s)=>{const r=d(i,"id");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Permission ids must be unique",path:[r,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.z.string().refine(x,{message:"Invalid entity ref for member.",path:[]}).transform(i=>a.stringifyEntityRef(a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}))),C=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the role."),R=e.z.object({name:e.z.string().min(1,{message:o.minCharacters("Role name",1)}).max(1024,{message:o.maxCharacters("Role name",1024)}).describe("Name of the role."),id:C,members:e.z.union([e.z.literal("*"),e.z.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:b}),D=e.z.array(R).default([]).superRefine((i,s)=>{const r=d(i,"name");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role names must be unique",path:[r,"name"]});const t=d(i,"id");t>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role ids must be unique",path:[t,"id"]})}),T=e.z.object({decision:c.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:z.describe("The id of the role permission that resulted in the decisions.")}),A=e.z.string().min(1,{message:o.minCharacters("Policy name",1)}).max(1024,{message:o.maxCharacters("Policy name",1024)}).default(P).describe("Name of the policy."),j=e.z.union([e.z.literal("first-match"),e.z.literal("any-allow")]),I=e.z.object({resolutionStrategy:j}).default({resolutionStrategy:"first-match"}),l=e.z.object({name:A,options:I,roles:D}),N=l.default({roles:[]});function x(i){try{return a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function d(i,s){let r=0;const t=new Set;for(;r<i.length;){const u=i[r][s];if(t.has(u))return r;t.add(u),r++}return-1}function O(i){return typeof i!="string"}function B(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="allOf"&&Array.isArray(s[0][1])}function S(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="anyOf"&&Array.isArray(s[0][1])}function w(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="not"&&!Array.isArray(s[0][1])}const E=l.extend({id:e.z.string(),createdAt:e.z.string(),createdBy:e.z.string(),updatedAt:e.z.string(),updatedBy:e.z.string(),description:e.z.string().optional().nullable(),lastPublishedAt:e.z.string().optional().nullable(),lastPublishedBy:e.z.string().optional().nullable(),status:e.z.enum(["draft","active","inactive"])});exports.BackstageUserPlaceholder=q,exports.ConditionalDecisionParser=h,exports.DefaultingPolicyConfigParser=N,exports.LiteralDecisionParser=y,exports.PermissionConditionParser=f,exports.PermissionDecisionParser=c,exports.PermissionMatchParser=g,exports.PolicyConfigOptionsParser=I,exports.PolicyConfigParser=l,exports.PolicyDefaultName=P,exports.PolicyParser=E,exports.PolicyRoleResolutionStrategyParser=j,exports.PolicyTitleParser=A,exports.RoleDecisionParser=T,exports.RoleParser=R,exports.RolePermissionParser=p,exports.RolePermissionsParser=b,exports.RolesParser=D,exports.isAllOfPermissionCriteria=B,exports.isAnyOfPermissionCriteria=S,exports.isConditionalDecision=O,exports.isNotPermissionCriteria=w;
+"use strict";var a=require("@backstage/catalog-model"),m=require("uuid"),e=require("zod"),o=require("./validationMessages.cjs.js");const P="Untitled policy",q=":backstageUser",f=e.z.object({rule:e.z.string(),params:e.z.record(e.z.any()).optional()}),n=e.z.lazy(()=>e.z.union([e.z.object({allOf:e.z.array(n).nonempty()}).strict(),e.z.object({anyOf:e.z.array(n).nonempty()}).strict(),e.z.object({not:n}).strict(),f])),h=e.z.object({pluginId:e.z.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.z.string().min(1).describe("Resource type associated with the conditions used."),conditions:n}),g=e.z.union([e.z.literal("allow"),e.z.literal("deny")]),c=e.z.union([g,h]),y=e.z.union([e.z.literal("*"),e.z.object({name:e.z.string().optional().describe("Name that must match the incoming permission request."),actions:e.z.array(e.z.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.z.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),z=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the permission."),p=e.z.object({id:z,match:y.describe("Values used to match against the incoming permission request."),decision:c.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:i,match:s})=>O(i)?s!=="*"&&s?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),b=e.z.array(p).superRefine((i,s)=>{const r=d(i,"id");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Permission ids must be unique",path:[r,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.z.string().refine(x,{message:"Invalid entity ref for member.",path:[]}).transform(i=>a.stringifyEntityRef(a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}))),C=e.z.string().default(()=>m.v4().split("-")[0]).describe("ID of the role."),R=e.z.object({name:e.z.string().min(1,{message:o.minCharacters("Role name",1)}).max(1024,{message:o.maxCharacters("Role name",1024)}).describe("Name of the role."),description:e.z.string().optional().describe("Description of the role."),id:C,members:e.z.union([e.z.literal("*"),e.z.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:b}),D=e.z.array(R).default([]).superRefine((i,s)=>{const r=d(i,"name");r>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role names must be unique",path:[r,"name"]});const t=d(i,"id");t>=0&&s.addIssue({code:e.z.ZodIssueCode.custom,message:"Role ids must be unique",path:[t,"id"]})}),T=e.z.object({decision:c.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:z.describe("The id of the role permission that resulted in the decisions.")}),A=e.z.string().min(1,{message:o.minCharacters("Policy name",1)}).max(1024,{message:o.maxCharacters("Policy name",1024)}).default(P).describe("Name of the policy."),j=e.z.union([e.z.literal("first-match"),e.z.literal("any-allow")]),I=e.z.object({resolutionStrategy:j}).default({resolutionStrategy:"first-match"}),l=e.z.object({name:A,options:I,roles:D}),N=l.default({roles:[]});function x(i){try{return a.parseEntityRef(i,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function d(i,s){let r=0;const t=new Set;for(;r<i.length;){const u=i[r][s];if(t.has(u))return r;t.add(u),r++}return-1}function O(i){return typeof i!="string"}function B(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="allOf"&&Array.isArray(s[0][1])}function S(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="anyOf"&&Array.isArray(s[0][1])}function w(i){const s=Object.entries(i);return s.length===1&&s[0][0]==="not"&&!Array.isArray(s[0][1])}const E=l.extend({id:e.z.string(),createdAt:e.z.string(),createdBy:e.z.string(),updatedAt:e.z.string(),updatedBy:e.z.string(),description:e.z.string().optional().nullable(),lastPublishedAt:e.z.string().optional().nullable(),lastPublishedBy:e.z.string().optional().nullable(),status:e.z.enum(["draft","active","inactive"])});exports.BackstageUserPlaceholder=q,exports.ConditionalDecisionParser=h,exports.DefaultingPolicyConfigParser=N,exports.LiteralDecisionParser=g,exports.PermissionConditionParser=f,exports.PermissionDecisionParser=c,exports.PermissionMatchParser=y,exports.PolicyConfigOptionsParser=I,exports.PolicyConfigParser=l,exports.PolicyDefaultName=P,exports.PolicyParser=E,exports.PolicyRoleResolutionStrategyParser=j,exports.PolicyTitleParser=A,exports.RoleDecisionParser=T,exports.RoleParser=R,exports.RolePermissionParser=p,exports.RolePermissionsParser=b,exports.RolesParser=D,exports.isAllOfPermissionCriteria=B,exports.isAnyOfPermissionCriteria=S,exports.isConditionalDecision=O,exports.isNotPermissionCriteria=w;
 //# sourceMappingURL=schema.cjs.js.map

package/dist/schema.esm.js CHANGED Viewed

@@ -1,2 +1,2 @@
-import{stringifyEntityRef as N,parseEntityRef as d}from"@backstage/catalog-model";import{v4 as u}from"uuid";import{z as e}from"zod";import{minCharacters as m,maxCharacters as f}from"./validationMessages.esm.js";const p="Untitled policy",x=":backstageUser",h=e.object({rule:e.string(),params:e.record(e.any()).optional()}),o=e.lazy(()=>e.union([e.object({allOf:e.array(o).nonempty()}).strict(),e.object({anyOf:e.array(o).nonempty()}).strict(),e.object({not:o}).strict(),h])),g=e.object({pluginId:e.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.string().min(1).describe("Resource type associated with the conditions used."),conditions:o}),y=e.union([e.literal("allow"),e.literal("deny")]),n=e.union([y,g]),b=e.union([e.literal("*"),e.object({name:e.string().optional().describe("Name that must match the incoming permission request."),actions:e.array(e.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),P=e.string().default(()=>u().split("-")[0]).describe("ID of the permission."),R=e.object({id:P,match:b.describe("Values used to match against the incoming permission request."),decision:n.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:t,match:i})=>q(t)?i!=="*"&&i?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),j=e.array(R).superRefine((t,i)=>{const s=c(t,"id");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Permission ids must be unique",path:[s,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.string().refine(B,{message:"Invalid entity ref for member.",path:[]}).transform(t=>N(d(t,{defaultKind:"group",defaultNamespace:"default"}))),C=e.string().default(()=>u().split("-")[0]).describe("ID of the role."),A=e.object({name:e.string().min(1,{message:m("Role name",1)}).max(1024,{message:f("Role name",1024)}).describe("Name of the role."),id:C,members:e.union([e.literal("*"),e.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:j}),I=e.array(A).default([]).superRefine((t,i)=>{const s=c(t,"name");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role names must be unique",path:[s,"name"]});const r=c(t,"id");r>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role ids must be unique",path:[r,"id"]})}),z=e.object({decision:n.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:P.describe("The id of the role permission that resulted in the decisions.")}),D=e.string().min(1,{message:m("Policy name",1)}).max(1024,{message:f("Policy name",1024)}).default(p).describe("Name of the policy."),O=e.union([e.literal("first-match"),e.literal("any-allow")]),T=e.object({resolutionStrategy:O}).default({resolutionStrategy:"first-match"}),a=e.object({name:D,options:T,roles:I}),w=a.default({roles:[]});function B(t){try{return d(t,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function c(t,i){let s=0;const r=new Set;for(;s<t.length;){const l=t[s][i];if(r.has(l))return s;r.add(l),s++}return-1}function q(t){return typeof t!="string"}function S(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="allOf"&&Array.isArray(i[0][1])}function E(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="anyOf"&&Array.isArray(i[0][1])}function U(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="not"&&!Array.isArray(i[0][1])}const Z=a.extend({id:e.string(),createdAt:e.string(),createdBy:e.string(),updatedAt:e.string(),updatedBy:e.string(),description:e.string().optional().nullable(),lastPublishedAt:e.string().optional().nullable(),lastPublishedBy:e.string().optional().nullable(),status:e.enum(["draft","active","inactive"])});export{x as BackstageUserPlaceholder,g as ConditionalDecisionParser,w as DefaultingPolicyConfigParser,y as LiteralDecisionParser,h as PermissionConditionParser,n as PermissionDecisionParser,b as PermissionMatchParser,T as PolicyConfigOptionsParser,a as PolicyConfigParser,p as PolicyDefaultName,Z as PolicyParser,O as PolicyRoleResolutionStrategyParser,D as PolicyTitleParser,z as RoleDecisionParser,A as RoleParser,R as RolePermissionParser,j as RolePermissionsParser,I as RolesParser,S as isAllOfPermissionCriteria,E as isAnyOfPermissionCriteria,q as isConditionalDecision,U as isNotPermissionCriteria};
+import{stringifyEntityRef as N,parseEntityRef as d}from"@backstage/catalog-model";import{v4 as u}from"uuid";import{z as e}from"zod";import{minCharacters as m,maxCharacters as p}from"./validationMessages.esm.js";const f="Untitled policy",x=":backstageUser",h=e.object({rule:e.string(),params:e.record(e.any()).optional()}),o=e.lazy(()=>e.union([e.object({allOf:e.array(o).nonempty()}).strict(),e.object({anyOf:e.array(o).nonempty()}).strict(),e.object({not:o}).strict(),h])),g=e.object({pluginId:e.string().min(1).describe("Plugin ID that defines the permission and rules used."),resourceType:e.string().min(1).describe("Resource type associated with the conditions used."),conditions:o}),y=e.union([e.literal("allow"),e.literal("deny")]),n=e.union([y,g]),b=e.union([e.literal("*"),e.object({name:e.string().optional().describe("Name that must match the incoming permission request."),actions:e.array(e.string()).optional().describe("Actions that must be present on the incoming permission's attributes."),resourceType:e.string().min(1).optional().describe("Resource type that must match that of the incoming permission request.")})]),P=e.string().default(()=>u().split("-")[0]).describe("ID of the permission."),R=e.object({id:P,match:b.describe("Values used to match against the incoming permission request."),decision:n.describe("Authorization result or conditions to send if this role permission applies.")}).refine(({decision:t,match:i})=>q(t)?i!=="*"&&i?.resourceType!==void 0:!0,{path:["match","resourceType"],message:"match.resourceType is required for conditional decisions."}),j=e.array(R).superRefine((t,i)=>{const s=c(t,"id");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Permission ids must be unique",path:[s,"id"]})}).describe("Permission decisions used to determine authorization responses."),v=e.string().refine(B,{message:"Invalid entity ref for member.",path:[]}).transform(t=>N(d(t,{defaultKind:"group",defaultNamespace:"default"}))),C=e.string().default(()=>u().split("-")[0]).describe("ID of the role."),A=e.object({name:e.string().min(1,{message:m("Role name",1)}).max(1024,{message:p("Role name",1024)}).describe("Name of the role."),description:e.string().optional().describe("Description of the role."),id:C,members:e.union([e.literal("*"),e.array(v).min(1)]).describe("Entity references used to map users to this role. These entities don't need to exist in the catalog."),permissions:j}),I=e.array(A).default([]).superRefine((t,i)=>{const s=c(t,"name");s>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role names must be unique",path:[s,"name"]});const r=c(t,"id");r>=0&&i.addIssue({code:e.ZodIssueCode.custom,message:"Role ids must be unique",path:[r,"id"]})}),z=e.object({decision:n.describe("The authorization result or conditions the corresponding role resulted in"),roleId:C.describe("The id of the role that resulted in the decision"),rolePermissionId:P.describe("The id of the role permission that resulted in the decisions.")}),D=e.string().min(1,{message:m("Policy name",1)}).max(1024,{message:p("Policy name",1024)}).default(f).describe("Name of the policy."),O=e.union([e.literal("first-match"),e.literal("any-allow")]),T=e.object({resolutionStrategy:O}).default({resolutionStrategy:"first-match"}),a=e.object({name:D,options:T,roles:I}),w=a.default({roles:[]});function B(t){try{return d(t,{defaultKind:"group",defaultNamespace:"default"}),!0}catch{return!1}}function c(t,i){let s=0;const r=new Set;for(;s<t.length;){const l=t[s][i];if(r.has(l))return s;r.add(l),s++}return-1}function q(t){return typeof t!="string"}function S(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="allOf"&&Array.isArray(i[0][1])}function E(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="anyOf"&&Array.isArray(i[0][1])}function U(t){const i=Object.entries(t);return i.length===1&&i[0][0]==="not"&&!Array.isArray(i[0][1])}const Z=a.extend({id:e.string(),createdAt:e.string(),createdBy:e.string(),updatedAt:e.string(),updatedBy:e.string(),description:e.string().optional().nullable(),lastPublishedAt:e.string().optional().nullable(),lastPublishedBy:e.string().optional().nullable(),status:e.enum(["draft","active","inactive"])});export{x as BackstageUserPlaceholder,g as ConditionalDecisionParser,w as DefaultingPolicyConfigParser,y as LiteralDecisionParser,h as PermissionConditionParser,n as PermissionDecisionParser,b as PermissionMatchParser,T as PolicyConfigOptionsParser,a as PolicyConfigParser,f as PolicyDefaultName,Z as PolicyParser,O as PolicyRoleResolutionStrategyParser,D as PolicyTitleParser,z as RoleDecisionParser,A as RoleParser,R as RolePermissionParser,j as RolePermissionsParser,I as RolesParser,S as isAllOfPermissionCriteria,E as isAnyOfPermissionCriteria,q as isConditionalDecision,U as isNotPermissionCriteria};
 //# sourceMappingURL=schema.esm.js.map

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@spotify/backstage-plugin-rbac-common",
   "description": "Control access to actions and data in Backstage with ease.",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://backstage.spotify.com",
   "main": "dist/index.cjs.js",
@@ -38,7 +38,7 @@
     "zod": "^3.20.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.29.5"
+    "@backstage/cli": "^0.30.0"
   },
   "files": [
     "dist",