@synchronized-console/shared 2.25.7 → 2.31.14

package/dist/esm/authz/domain/savedViews/operations.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=operations.js.map

package/dist/esm/authz/domain/savedViews/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../../../../src/authz/domain/savedViews/operations.ts"],"names":[],"mappings":""}

package/dist/esm/authz/domain/savedViews/types.d.ts

@@ -0,0 +1,26 @@
+import { StringEnumValues } from '../../../core/helpers/utility.js';
+export declare const SavedViewVisibility: Readonly<{
+    public: "public";
+    authorOnly: "authorOnly";
+}>;
+export type SavedViewVisibility = StringEnumValues<typeof SavedViewVisibility>;
+export type SavedView = {
+    id: string;
+    name: string;
+    authorId: string | null;
+    groupId: string | null;
+    projectId: string;
+    visibility: SavedViewVisibility;
+    resourceIds: string[];
+};
+export type SavedViewGroup = {
+    id: string;
+    projectId: string;
+    /**
+     * null means default/ungrouped group
+     */
+    name: string | null;
+    authorId: string | null;
+    resourceIds: string[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/authz/domain/savedViews/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/authz/domain/savedViews/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AAE/E,eAAO,MAAM,mBAAmB;;;EAAuC,CAAA;AACvE,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE9E,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,mBAAmB,CAAA;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB,CAAA"}

package/dist/esm/authz/domain/savedViews/types.js

@@ -0,0 +1,3 @@
+import { StringEnum } from '../../../core/helpers/utility.js';
+export const SavedViewVisibility = StringEnum(['public', 'authorOnly']);
+//# sourceMappingURL=types.js.map

package/dist/esm/authz/domain/savedViews/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/authz/domain/savedViews/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,kCAAkC,CAAA;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA"}

package/dist/esm/authz/domain/workspaces/operations.d.ts

@@ -1,10 +1,11 @@
 import { WorkspaceRoles, WorkspaceSeatType } from '../../../core/constants.js';
-import { FeatureFlags } from '../../../environment/index.js';
+import { FeatureFlags } from '../../../environment/featureFlags.js';
 import { WorkspaceLimits } from '../../../workspaces/helpers/limits.js';
 import { WorkspacePlan } from '../../../workspaces/index.js';
 import { UserContext, WorkspaceContext } from '../context.js';
 import { Workspace, WorkspaceSsoProvider, WorkspaceSsoSession } from './types.js';
 export type GetWorkspace = (args: WorkspaceContext) => Promise<Workspace | null>;
+export type GetUserWorkspaces = (args: UserContext) => Promise<Workspace[]>;
 export type GetWorkspaceRole = (args: UserContext & WorkspaceContext) => Promise<WorkspaceRoles | null>;
 export type GetWorkspaceLimits = (args: WorkspaceContext) => Promise<WorkspaceLimits | null>;
 export type GetWorkspacePlan = (args: WorkspaceContext) => Promise<WorkspacePlan | null>;

package/dist/esm/authz/domain/workspaces/operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../../../src/authz/domain/workspaces/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEjF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;AAEhF,MAAM,MAAM,gBAAgB,GAAG,CAC7B,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;AAEnC,MAAM,MAAM,kBAAkB,GAAG,CAC/B,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;AAEpC,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;AAExF,MAAM,MAAM,wBAAwB,GAAG,CACrC,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AAE3B,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AAEvF,MAAM,MAAM,gBAAgB,GAAG,CAC7B,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;AAEtC,MAAM,MAAM,uBAAuB,GAAG,CACpC,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;AAEzC,MAAM,MAAM,sBAAsB,GAAG,CACnC,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;AAExC,MAAM,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;AAEhD,MAAM,MAAM,uBAAuB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA"}
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../../../src/authz/domain/workspaces/operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEjF,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;AAEhF,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;AAE3E,MAAM,MAAM,gBAAgB,GAAG,CAC7B,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;AAEnC,MAAM,MAAM,kBAAkB,GAAG,CAC/B,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;AAEpC,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;AAExF,MAAM,MAAM,wBAAwB,GAAG,CACrC,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AAE3B,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AAEvF,MAAM,MAAM,gBAAgB,GAAG,CAC7B,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;AAEtC,MAAM,MAAM,uBAAuB,GAAG,CACpC,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAA;AAEzC,MAAM,MAAM,sBAAsB,GAAG,CACnC,IAAI,EAAE,WAAW,GAAG,gBAAgB,KACjC,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAA;AAExC,MAAM,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;AAEhD,MAAM,MAAM,uBAAuB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA"}

package/dist/esm/authz/domain/workspaces/types.d.ts

@@ -1,6 +1,9 @@
+import { WorkspaceRoles } from '../../../core/constants.js';
 export type Workspace = {
     id: string;
     slug: string;
+    isExclusive: boolean;
+    role?: WorkspaceRoles | null;
 };
 export type WorkspaceSsoProvider = {
     providerId: string;

package/dist/esm/authz/domain/workspaces/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/authz/domain/workspaces/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,IAAI,CAAA;CACjB,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/authz/domain/workspaces/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,OAAO,CAAA;IACpB,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,IAAI,CAAA;CACjB,CAAA"}

package/dist/esm/authz/fragments/automate.d.ts

@@ -0,0 +1,7 @@
+import { AutomateFunctionNotCreatorError, AutomateFunctionNotFoundError, AutomateNotEnabledError } from '../domain/authErrors.js';
+import { Loaders } from '../domain/loaders.js';
+import { AuthPolicyEnsureFragment } from '../domain/policies.js';
+import { AutomateFunctionContext, MaybeUserContext } from '../domain/context.js';
+export declare const ensureAutomateEnabledFragment: AuthPolicyEnsureFragment<typeof Loaders.getEnv, {}, InstanceType<typeof AutomateNotEnabledError>>;
+export declare const ensureAutomateFunctionCreatorFragment: AuthPolicyEnsureFragment<typeof Loaders.getAutomateFunction, MaybeUserContext & AutomateFunctionContext, InstanceType<typeof AutomateFunctionNotFoundError | typeof AutomateFunctionNotCreatorError>>;
+//# sourceMappingURL=automate.d.ts.map

package/dist/esm/authz/fragments/automate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"automate.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/automate.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEhF,eAAO,MAAM,6BAA6B,EAAE,wBAAwB,CAClE,OAAO,OAAO,CAAC,MAAM,EAErB,EAAE,EACF,YAAY,CAAC,OAAO,uBAAuB,CAAC,CAK7C,CAAA;AAED,eAAO,MAAM,qCAAqC,EAAE,wBAAwB,CAC1E,OAAO,OAAO,CAAC,mBAAmB,EAClC,gBAAgB,GAAG,uBAAuB,EAC1C,YAAY,CACV,OAAO,6BAA6B,GAAG,OAAO,+BAA+B,CAC9E,CASA,CAAA"}

package/dist/esm/authz/fragments/automate.js

@@ -0,0 +1,17 @@
+import { err, ok } from 'true-myth/result';
+import { AutomateFunctionNotCreatorError, AutomateFunctionNotFoundError, AutomateNotEnabledError } from '../domain/authErrors.js';
+export const ensureAutomateEnabledFragment = (loaders) => async () => {
+    const env = await loaders.getEnv();
+    if (!env.FF_AUTOMATE_MODULE_ENABLED)
+        return err(new AutomateNotEnabledError());
+    return ok();
+};
+export const ensureAutomateFunctionCreatorFragment = (loaders) => async ({ userId, functionId }) => {
+    const automateFunction = await loaders.getAutomateFunction({ functionId });
+    if (!automateFunction)
+        return err(new AutomateFunctionNotFoundError());
+    if (!userId || automateFunction.functionCreator?.synchronizedUserId !== userId)
+        return err(new AutomateFunctionNotCreatorError());
+    return ok();
+};
+//# sourceMappingURL=automate.js.map

package/dist/esm/authz/fragments/automate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automate.js","sourceRoot":"","sources":["../../../../src/authz/fragments/automate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,yBAAyB,CAAA;AAKhC,MAAM,CAAC,MAAM,6BAA6B,GAKtC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;IAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,0BAA0B;QAAE,OAAO,GAAG,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAA;IAC9E,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qCAAqC,GAOhD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/B,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,gBAAgB;QAAE,OAAO,GAAG,CAAC,IAAI,6BAA6B,EAAE,CAAC,CAAA;IACtE,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,eAAe,EAAE,aAAa,KAAK,MAAM;QACvE,OAAO,GAAG,CAAC,IAAI,+BAA+B,EAAE,CAAC,CAAA;IACnD,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/fragments/dashboards.d.ts

@@ -0,0 +1,8 @@
+import { DashboardNotFoundError, DashboardProjectsNotEnoughPermissionsError, DashboardsNotEnabledError, WorkspacePlanNoFeatureAccessError } from '../domain/authErrors.js';
+import { Loaders } from '../domain/loaders.js';
+import { AuthPolicyEnsureFragment } from '../domain/policies.js';
+import { DashboardContext, UserContext, WorkspaceContext } from '../domain/context.js';
+export declare const ensureDashboardsEnabledFragment: AuthPolicyEnsureFragment<typeof Loaders.getEnv, {}, InstanceType<typeof DashboardsNotEnabledError>>;
+export declare const ensureWorkspaceDashboardsFeatureAccessFragment: AuthPolicyEnsureFragment<typeof Loaders.getWorkspacePlan, WorkspaceContext, InstanceType<typeof WorkspacePlanNoFeatureAccessError>>;
+export declare const ensureDashboardProjectsReadAccess: AuthPolicyEnsureFragment<typeof Loaders.getDashboard | typeof Loaders.getProjectRole | typeof Loaders.getProject | typeof Loaders.getServerRole | typeof Loaders.getEnv | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession, DashboardContext & UserContext, InstanceType<typeof DashboardNotFoundError | typeof DashboardProjectsNotEnoughPermissionsError>>;
+//# sourceMappingURL=dashboards.d.ts.map

package/dist/esm/authz/fragments/dashboards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboards.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/dashboards.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,0CAA0C,EAC1C,yBAAyB,EACzB,iCAAiC,EAClC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAOtF,eAAO,MAAM,+BAA+B,EAAE,wBAAwB,CACpE,OAAO,OAAO,CAAC,MAAM,EAErB,EAAE,EACF,YAAY,CAAC,OAAO,yBAAyB,CAAC,CAK/C,CAAA;AAED,eAAO,MAAM,8CAA8C,EAAE,wBAAwB,CACnF,OAAO,OAAO,CAAC,gBAAgB,EAC/B,gBAAgB,EAChB,YAAY,CAAC,OAAO,iCAAiC,CAAC,CAcrD,CAAA;AAEH,eAAO,MAAM,iCAAiC,EAAE,wBAAwB,CACpE,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,EACvC,gBAAgB,GAAG,WAAW,EAC9B,YAAY,CACV,OAAO,sBAAsB,GAAG,OAAO,0CAA0C,CAClF,CA8BA,CAAA"}

package/dist/esm/authz/fragments/dashboards.js

@@ -0,0 +1,42 @@
+import { err, ok } from 'true-myth/result';
+import { DashboardNotFoundError, DashboardProjectsNotEnoughPermissionsError, DashboardsNotEnabledError, WorkspacePlanNoFeatureAccessError } from '../domain/authErrors.js';
+import { isWorkspaceFeatureFlagOn, WorkspaceFeatureFlags } from '../../workspaces/index.js';
+import { ensureMinimumProjectRoleFragment } from './projects.js';
+export const ensureDashboardsEnabledFragment = (loaders) => async () => {
+    const env = await loaders.getEnv();
+    if (!env.FF_DASHBOARDS_MODULE_ENABLED)
+        return err(new DashboardsNotEnabledError());
+    return ok();
+};
+export const ensureWorkspaceDashboardsFeatureAccessFragment = (loaders) => async ({ workspaceId }) => {
+    const plan = await loaders.getWorkspacePlan({ workspaceId });
+    if (!plan)
+        return err(new WorkspacePlanNoFeatureAccessError());
+    const isFlagOn = isWorkspaceFeatureFlagOn({
+        workspaceFeatureFlags: plan.featureFlags,
+        feature: WorkspaceFeatureFlags.dashboards
+    });
+    if (!isFlagOn)
+        return err(new WorkspacePlanNoFeatureAccessError());
+    return ok();
+};
+export const ensureDashboardProjectsReadAccess = (loaders) => async ({ userId, dashboardId }) => {
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return err(new DashboardNotFoundError());
+    const allProjectResults = await Promise.all(dashboard.projectIds.map(async (projectId) => {
+        return [
+            projectId,
+            await ensureMinimumProjectRoleFragment(loaders)({ projectId, userId })
+        ];
+    }));
+    const projectAccessErrors = allProjectResults.filter(([, e]) => e.isErr);
+    return projectAccessErrors.length
+        ? err(new DashboardProjectsNotEnoughPermissionsError({
+            payload: {
+                projectIds: projectAccessErrors.map(([projectId]) => projectId)
+            }
+        }))
+        : ok();
+};
+//# sourceMappingURL=dashboards.js.map

package/dist/esm/authz/fragments/dashboards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboards.js","sourceRoot":"","sources":["../../../../src/authz/fragments/dashboards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EACL,sBAAsB,EACtB,0CAA0C,EAC1C,yBAAyB,EACzB,iCAAiC,EAClC,MAAM,yBAAyB,CAAA;AAIhC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAA;AAEhE,MAAM,CAAC,MAAM,+BAA+B,GAKxC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;IAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,4BAA4B;QAAE,OAAO,GAAG,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAA;IAClF,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,8CAA8C,GAKzD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;IACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;IAE9D,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACxC,qBAAqB,EAAE,IAAI,CAAC,YAAY;QACxC,OAAO,EAAE,qBAAqB,CAAC,UAAU;KAC1C,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;IAElE,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAe5C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,iBAAiB,GAGjB,MAAM,OAAO,CAAC,GAAG,CACrB,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3C,OAAO;YACL,SAAS;YACT,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;SACvE,CAAA;IACH,CAAC,CAAC,CACH,CAAA;IAED,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAExE,OAAO,mBAAmB,CAAC,MAAM;QAC/B,CAAC,CAAC,GAAG,CACD,IAAI,0CAA0C,CAAC;YAC7C,OAAO,EAAE;gBACP,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC;aAChE;SACF,CAAC,CACH;QACH,CAAC,CAAC,EAAE,EAAE,CAAA;AACV,CAAC,CAAA"}

package/dist/esm/authz/fragments/projects.d.ts

@@ -1,8 +1,9 @@
 import { MaybeUserContext, ProjectContext, UserContext } from '../domain/context.js';
 import { Loaders } from '../domain/loaders.js';
 import { AuthPolicyCheckFragment, AuthPolicyEnsureFragment } from '../domain/policies.js';
-import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
 import { StreamRoles } from '../../core/constants.js';
+import { WorkspacePlanFeatures } from '../../workspaces/index.js';
 /**
  * Ensure user has a minimum explicit or implicit project role
  */
@@ -46,4 +47,15 @@ export declare const ensureImplicitProjectMemberWithWriteAccessFragment: AuthPol
      */
     role?: StreamRoles;
 }, InstanceType<typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError>>;
+/**
+ * Ensure project is workspaced and has access to a specific plan feature
+ */
+export declare const ensureCanUseProjectWorkspacePlanFeatureFragment: AuthPolicyEnsureFragment<typeof Loaders.getEnv | typeof Loaders.getProject | typeof Loaders.getWorkspacePlan, ProjectContext & {
+    feature: WorkspacePlanFeatures;
+    /**
+     * Whether to also allow if project is not workspaced at all
+     * Default: false
+     */
+    allowUnworkspaced?: boolean;
+}, InstanceType<typeof WorkspacesNotEnabledError | typeof ProjectNotFoundError | typeof WorkspaceNoAccessError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
 //# sourceMappingURL=projects.d.ts.map

package/dist/esm/authz/fragments/projects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/projects.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAS,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAoB5D;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,wBAAwB,CACnE,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,cAAc,GACZ,WAAW,GAAG;IACZ;;OAEG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,gCAAgC,CAC1C,CAiDA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,oCAAoC,EAAE,wBAAwB,CACvE,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,EACjC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACrC,YAAY,CACR,OAAO,gCAAgC,GACvC,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,GACzC,OAAO,oBAAoB,CAC9B,CA6BA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,sCAAsC,EAAE,uBAAuB,CAC1E,OAAO,OAAO,CAAC,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,EACjD,cAAc,EACd,YAAY,CAAC,OAAO,oBAAoB,CAAC,CAQxC,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,iDAAiD,EAAE,wBAAwB,CACpF,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,uBAAuB,EACxC,gBAAgB,GACd,cAAc,GAAG;IACf;;OAEG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,CAC5C,CA0CA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,kDAAkD,EAAE,wBAAwB,CACrF,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GACd,cAAc,GAAG;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,CAC5C,CAuCA,CAAA"}
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/projects.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAS,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAY5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAYjE;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,wBAAwB,CACnE,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,cAAc,GACZ,WAAW,GAAG;IACZ;;OAEG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,gCAAgC,CAC1C,CAiDA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,oCAAoC,EAAE,wBAAwB,CACvE,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,EACjC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EACrC,YAAY,CACR,OAAO,gCAAgC,GACvC,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,GACzC,OAAO,oBAAoB,CAC9B,CA6BA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,sCAAsC,EAAE,uBAAuB,CAC1E,OAAO,OAAO,CAAC,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,EACjD,cAAc,EACd,YAAY,CAAC,OAAO,oBAAoB,CAAC,CAQxC,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,iDAAiD,EAAE,wBAAwB,CACpF,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,uBAAuB,EACxC,gBAAgB,GACd,cAAc,GAAG;IACf;;OAEG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,CAC5C,CA0CA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,kDAAkD,EAAE,wBAAwB,CACrF,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GACd,cAAc,GAAG;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,WAAW,CAAA;CACnB,EACH,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,CAC5C,CAuCA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,+CAA+C,EAAE,wBAAwB,CACpF,OAAO,OAAO,CAAC,MAAM,GAAG,OAAO,OAAO,CAAC,UAAU,GAAG,OAAO,OAAO,CAAC,gBAAgB,EACnF,cAAc,GAAG;IACf,OAAO,EAAE,qBAAqB,CAAA;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B,EACD,YAAY,CACR,OAAO,yBAAyB,GAChC,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAwBA,CAAA"}

package/dist/esm/authz/fragments/projects.js

@@ -3,7 +3,7 @@ import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFound
 import { Roles } from '../../core/constants.js';
 import { isMinimumProjectRole } from '../domain/logic/roles.js';
 import { hasMinimumProjectRole, isPubliclyReadableProject } from '../checks/projects.js';
-import { ensureWorkspaceRoleAndSessionFragment } from './workspaces.js';
+import { ensureCanUseWorkspacePlanFeatureFragment, ensureWorkspaceRoleAndSessionFragment } from './workspaces.js';
 import { checkIfAdminOverrideEnabledFragment, ensureMinimumServerRoleFragment } from './server.js';
 import { ProjectVisibility } from '../domain/projects/types.js';
 const workspaceRoleImplicitProjectRoleMap = (projectVisibility) => {
@@ -168,4 +168,27 @@ export const ensureImplicitProjectMemberWithWriteAccessFragment = (loaders) => a
     }
     return ok();
 };
+/**
+ * Ensure project is workspaced and has access to a specific plan feature
+ */
+export const ensureCanUseProjectWorkspacePlanFeatureFragment = (loaders) => async ({ projectId, feature, allowUnworkspaced = false }) => {
+    const project = await loaders.getProject({ projectId });
+    if (!project)
+        return err(new ProjectNotFoundError());
+    const workspaceId = project.workspaceId;
+    if (!workspaceId) {
+        if (allowUnworkspaced)
+            return ok();
+        return err(new WorkspaceNoAccessError({
+            message: 'The project must be in a workspace'
+        }));
+    }
+    const canUseFeature = await ensureCanUseWorkspacePlanFeatureFragment(loaders)({
+        workspaceId,
+        feature
+    });
+    if (canUseFeature.isErr)
+        return err(canUseFeature.error);
+    return ok();
+};
 //# sourceMappingURL=projects.js.map

package/dist/esm/authz/fragments/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../../src/authz/fragments/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAO1C,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EAIpB,sBAAsB,EAGvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,KAAK,EAAe,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACxF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iBAAiB,CAAA;AACvE,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,MAAM,mCAAmC,GAAG,CAAC,iBAAoC,EAAE,EAAE;IACnF,MAAM,cAAc,GAAG,iBAAiB,KAAK,iBAAiB,CAAC,OAAO,CAAA;IAEtE,OAAc;QACZ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QAC3C,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;QACvE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI;KAC9B,CAAA;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GA0B3C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC9C,MAAM,mBAAmB,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAA;IACzD,MAAM,yBAAyB,GAAG,mBAAmB,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAA;IAE/E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,wCAAwC;IACxC,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM;QACN,SAAS;QACT,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAA;IACF,IAAI,sBAAsB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEvC,uCAAuC;IACvC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAE/B,IAAI,GAAG,CAAC,4BAA4B,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACjF,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,mBAAmB,GAAG,QAAQ;gBAClC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,CAAA;YAC9E,IAAI,mBAAmB,EAAE,CAAC;gBACxB,uBAAuB;gBACvB,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EAAE,CAAC;oBACnE,OAAO,EAAE,EAAE,CAAA;gBACb,CAAC;qBAAM,CAAC;oBACN,wCAAwC;oBACxC,OAAO,GAAG,CAAC,IAAI,gCAAgC,EAAE,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAExE,OAAO,GAAG,CACR,yBAAyB,IAAI,CAAC,YAAY;QACxC,CAAC,CAAC,IAAI,oBAAoB,EAAE;QAC5B,CAAC,CAAC,IAAI,gCAAgC,EAAE,CAC3C,CAAA;AACH,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAe/C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/B,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,4BAA4B;QAAE,OAAO,EAAE,EAAE,CAAA;IAElE,MAAM,oBAAoB,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM;QACN,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,oBAAoB,CAAC,KAAK,EAAE,CAAC;QAC/B,QAAQ,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxC,KAAK,sBAAsB,CAAC,IAAI;gBAC9B,OAAO,GAAG,CACR,IAAI,sBAAsB,CACxB,oDAAoD,CACrD,CACF,CAAA;YACH;gBACE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAA;AAC7B,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAKjD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,OAAO,EAAE,CAAC,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;AACpE,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GA6B5D,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;IACpC,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;KACzB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,2CAA2C;IAC3C,MAAM,sBAAsB,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM;KACP,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,sBAAsB,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,CAAA;IAE7C,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,EAAE,MAAO;QACf,SAAS;QACT,IAAI;KACL,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,uCAAuC;IACvC,MAAM,sBAAsB,GAAG,MAAM,oCAAoC,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,EAAE,MAAO;QACf,SAAS;KACV,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GA6B7D,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;IACpC,MAAM,mBAAmB,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAA;IAC5D,MAAM,kBAAkB,GACtB,mBAAmB,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;QACxC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI;QACnB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA;IAExB,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,EAAE,MAAO;QACf,SAAS;QACT,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,0BAA0B;IAC1B,MAAM,sBAAsB,GAAG,MAAM,oCAAoC,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,EAAE,MAAO;QACf,SAAS;KACV,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../../src/authz/fragments/projects.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAO1C,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EAIpB,sBAAsB,EAMvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,KAAK,EAAe,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACxF,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACtC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAG/D,MAAM,mCAAmC,GAAG,CAAC,iBAAoC,EAAE,EAAE;IACnF,MAAM,cAAc,GAAG,iBAAiB,KAAK,iBAAiB,CAAC,OAAO,CAAA;IAEtE,OAAc;QACZ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QAC3C,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;QACvE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI;KAC9B,CAAA;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GA0B3C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC9C,MAAM,mBAAmB,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAA;IACzD,MAAM,yBAAyB,GAAG,mBAAmB,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAA;IAE/E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,wCAAwC;IACxC,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM;QACN,SAAS;QACT,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAA;IACF,IAAI,sBAAsB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEvC,uCAAuC;IACvC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAE/B,IAAI,GAAG,CAAC,4BAA4B,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QACjF,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,mBAAmB,GAAG,QAAQ;gBAClC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,CAAA;YAC9E,IAAI,mBAAmB,EAAE,CAAC;gBACxB,uBAAuB;gBACvB,IAAI,oBAAoB,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,EAAE,CAAC;oBACnE,OAAO,EAAE,EAAE,CAAA;gBACb,CAAC;qBAAM,CAAC;oBACN,wCAAwC;oBACxC,OAAO,GAAG,CAAC,IAAI,gCAAgC,EAAE,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAExE,OAAO,GAAG,CACR,yBAAyB,IAAI,CAAC,YAAY;QACxC,CAAC,CAAC,IAAI,oBAAoB,EAAE;QAC5B,CAAC,CAAC,IAAI,gCAAgC,EAAE,CAC3C,CAAA;AACH,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAe/C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAC/B,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,4BAA4B;QAAE,OAAO,EAAE,EAAE,CAAA;IAElE,MAAM,oBAAoB,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM;QACN,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,oBAAoB,CAAC,KAAK,EAAE,CAAC;QAC/B,QAAQ,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxC,KAAK,sBAAsB,CAAC,IAAI;gBAC9B,OAAO,GAAG,CACR,IAAI,sBAAsB,CACxB,oDAAoD,CACrD,CACF,CAAA;YACH;gBACE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,oBAAoB,CAAA;AAC7B,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAKjD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,OAAO,EAAE,CAAC,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;AACpE,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,iDAAiD,GA6B5D,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;IACpC,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;KACzB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,2CAA2C;IAC3C,MAAM,sBAAsB,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM;KACP,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,sBAAsB,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,CAAA;IAE7C,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,EAAE,MAAO;QACf,SAAS;QACT,IAAI;KACL,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,uCAAuC;IACvC,MAAM,sBAAsB,GAAG,MAAM,oCAAoC,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,EAAE,MAAO;QACf,SAAS;KACV,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kDAAkD,GA6B7D,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;IACpC,MAAM,mBAAmB,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAA;IAC5D,MAAM,kBAAkB,GACtB,mBAAmB,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;QACxC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI;QACnB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA;IAExB,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IAED,8CAA8C;IAC9C,MAAM,kBAAkB,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACzE,MAAM,EAAE,MAAO;QACf,SAAS;QACT,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,0BAA0B;IAC1B,MAAM,sBAAsB,GAAG,MAAM,oCAAoC,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,EAAE,MAAO;QACf,SAAS;KACV,CAAC,CAAA;IACF,IAAI,sBAAsB,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+CAA+C,GAkB1D,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE,EAAE,EAAE;IAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;IACvC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,iBAAiB;YAAE,OAAO,EAAE,EAAE,CAAA;QAElC,OAAO,GAAG,CACR,IAAI,sBAAsB,CAAC;YACzB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,wCAAwC,CAAC,OAAO,CAAC,CAAC;QAC5E,WAAW;QACX,OAAO;KACR,CAAC,CAAA;IACF,IAAI,aAAa,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACxD,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/fragments/savedViews.d.ts

@@ -0,0 +1,30 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewGroupNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, UngroupedSavedViewGroupLockError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext, SavedViewGroupContext } from '../domain/context.js';
+import { Loaders } from '../domain/loaders.js';
+import { AuthPolicyEnsureFragment } from '../domain/policies.js';
+import { StringEnumValues } from '../../core/index.js';
+export declare const WriteTypes: Readonly<{
+    UpdateGeneral: "UpdateGeneral";
+    MoveView: "MoveView";
+    EditTitle: "EditTitle";
+    EditDescription: "EditDescription";
+    SetHomeView: "SetHomeView";
+}>;
+export type WriteTypes = StringEnumValues<typeof WriteTypes>;
+/**
+ * Ensure the user can access the view
+ */
+export declare const ensureCanAccessSavedViewFragment: AuthPolicyEnsureFragment<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext & {
+    access: 'read' | WriteTypes;
+    /**
+     * In some cases we want to just ignore a view being non-existant, instead of throwing
+     */
+    allowNonExistent?: boolean;
+}, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
+/**
+ * Ensure the user can access the view group
+ */
+export declare const ensureCanAccessSavedViewGroupFragment: AuthPolicyEnsureFragment<typeof Loaders.getSavedViewGroup | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewGroupContext & {
+    access: 'read' | 'write';
+}, InstanceType<typeof SavedViewGroupNotFoundError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError | typeof UngroupedSavedViewGroupLockError>>;
+//# sourceMappingURL=savedViews.d.ts.map

package/dist/esm/authz/fragments/savedViews.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"savedViews.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/savedViews.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAShE,OAAO,EAAc,gBAAgB,EAAuB,MAAM,qBAAqB,CAAA;AAEvF,eAAO,MAAM,UAAU;;;;;;EAMrB,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,UAAU,CAAC,CAAA;AAE5D;;GAEG;AACH,eAAO,MAAM,gCAAgC,EAAE,wBAAwB,CACnE,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GACd,cAAc,GACd,gBAAgB,GAAG;IACjB,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IAC3B;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,EACH,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAyEA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,qCAAqC,EAAE,wBAAwB,CACxE,OAAO,OAAO,CAAC,iBAAiB,GAChC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GACd,cAAc,GACd,qBAAqB,GAAG;IACtB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;CACzB,EACH,YAAY,CACR,OAAO,2BAA2B,GAClC,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,GACxC,OAAO,gCAAgC,CAC1C,CAkDA,CAAA"}

package/dist/esm/authz/fragments/savedViews.js

@@ -0,0 +1,117 @@
+import { err, ok } from 'true-myth/result';
+import { ProjectNotEnoughPermissionsError, SavedViewGroupNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, UngroupedSavedViewGroupLockError } from '../domain/authErrors.js';
+import { SavedViewVisibility } from '../domain/savedViews/types.js';
+import { ensureCanUseProjectWorkspacePlanFeatureFragment, ensureImplicitProjectMemberWithWriteAccessFragment } from './projects.js';
+import { Roles } from '../../core/constants.js';
+import { WorkspacePlanFeatures } from '../../workspaces/index.js';
+import { isUngroupedGroup } from '../../saved-views/index.js';
+import { StringEnum, throwUncoveredError } from '../../core/index.js';
+export const WriteTypes = StringEnum([
+    'UpdateGeneral',
+    'MoveView',
+    'EditTitle',
+    'EditDescription',
+    'SetHomeView'
+]);
+/**
+ * Ensure the user can access the view
+ */
+export const ensureCanAccessSavedViewFragment = (loaders) => async ({ userId, projectId, savedViewId, access, allowNonExistent }) => {
+    const canUseSavedViews = await ensureCanUseProjectWorkspacePlanFeatureFragment(loaders)({
+        projectId,
+        feature: WorkspacePlanFeatures.SavedViews
+    });
+    if (canUseSavedViews.isErr)
+        return err(canUseSavedViews.error);
+    const savedView = await loaders.getSavedView({ projectId, savedViewId });
+    if (!savedView) {
+        if (allowNonExistent)
+            return ok();
+        return err(new SavedViewNotFoundError());
+    }
+    const isPublic = savedView.visibility === SavedViewVisibility.public;
+    const isAuthor = savedView.authorId === userId;
+    // Validate read access
+    if (access === 'read') {
+        if (isAuthor || isPublic) {
+            return ok();
+        }
+        else {
+            return err(new SavedViewNoAccessError({
+                message: 'You do not have permission to read this saved view.'
+            }));
+        }
+    }
+    // Validate write access
+    // Check for write access to project first
+    const ensuredWriteAccess = await ensureImplicitProjectMemberWithWriteAccessFragment(loaders)({
+        userId,
+        projectId
+    });
+    if (ensuredWriteAccess.isErr) {
+        if (ensuredWriteAccess.error.code === ProjectNotEnoughPermissionsError.code)
+            return err(new ProjectNotEnoughPermissionsError({
+                message: "Your role on this project doesn't give you permission to update views."
+            }));
+        return err(ensuredWriteAccess.error);
+    }
+    if (isAuthor) {
+        // authors can write whatever
+        return ok();
+    }
+    // Non-author project writers can make specific changes
+    switch (access) {
+        case WriteTypes.MoveView:
+        case WriteTypes.EditTitle:
+        case WriteTypes.EditDescription:
+        case WriteTypes.SetHomeView:
+            return ok();
+        case WriteTypes.UpdateGeneral:
+            return err(new SavedViewNoAccessError({
+                message: 'You do not have permission to edit the view in this way'
+            }));
+        default:
+            throwUncoveredError(access);
+    }
+};
+/**
+ * Ensure the user can access the view group
+ */
+export const ensureCanAccessSavedViewGroupFragment = (loaders) => async ({ userId, projectId, savedViewGroupId, access }) => {
+    const canUseSavedViews = await ensureCanUseProjectWorkspacePlanFeatureFragment(loaders)({
+        projectId,
+        feature: WorkspacePlanFeatures.SavedViews
+    });
+    if (canUseSavedViews.isErr)
+        return err(canUseSavedViews.error);
+    const savedViewGroup = await loaders.getSavedViewGroup({
+        projectId,
+        groupId: savedViewGroupId
+    });
+    if (!savedViewGroup)
+        return err(new SavedViewGroupNotFoundError());
+    if (access === 'read') {
+        return ok(); // read access available to everyone who has access to project
+    }
+    // Prevent default group updates (as it doesnt exist)
+    if (isUngroupedGroup(savedViewGroup.id)) {
+        return err(new UngroupedSavedViewGroupLockError());
+    }
+    // groups have no visibility (yet), so authors AND project owners can mutate
+    const isAuthor = savedViewGroup.authorId === userId;
+    const expectedProjectRole = isAuthor ? Roles.Stream.Contributor : Roles.Stream.Owner;
+    const ensuredWriteAccess = await ensureImplicitProjectMemberWithWriteAccessFragment(loaders)({
+        userId,
+        projectId,
+        role: expectedProjectRole
+    });
+    if (ensuredWriteAccess.isErr) {
+        if (ensuredWriteAccess.error.code === ProjectNotEnoughPermissionsError.code)
+            return err(new ProjectNotEnoughPermissionsError({
+                message: "Your role on this project doesn't give you permission to update view groups."
+            }));
+        return err(ensuredWriteAccess.error);
+    }
+    return ok();
+};
+//# sourceMappingURL=savedViews.js.map

package/dist/esm/authz/fragments/savedViews.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"savedViews.js","sourceRoot":"","sources":["../../../../src/authz/fragments/savedViews.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAEL,gCAAgC,EAEhC,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EAItB,gCAAgC,EAOjC,MAAM,yBAAyB,CAAA;AAShC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EACL,+CAA+C,EAC/C,kDAAkD,EACnD,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAoB,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEvF,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;IACnC,eAAe;IACf,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,aAAa;CACd,CAAC,CAAA;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAsC3C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE;IACrE,MAAM,gBAAgB,GAAG,MAAM,+CAA+C,CAC5E,OAAO,CACR,CAAC;QACA,SAAS;QACT,OAAO,EAAE,qBAAqB,CAAC,UAAU;KAC1C,CAAC,CAAA;IACF,IAAI,gBAAgB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAE9D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,gBAAgB;YAAE,OAAO,EAAE,EAAE,CAAA;QACjC,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,KAAK,mBAAmB,CAAC,MAAM,CAAA;IACpE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAA;IAE9C,uBAAuB;IACvB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,CAAA;QACb,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,CACR,IAAI,sBAAsB,CAAC;gBACzB,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CACH,CAAA;QACH,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,0CAA0C;IAC1C,MAAM,kBAAkB,GAAG,MAAM,kDAAkD,CACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;KACV,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAgC,CAAC,IAAI;YACzE,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;gBACnC,OAAO,EACL,wEAAwE;aAC3E,CAAC,CACH,CAAA;QACH,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,6BAA6B;QAC7B,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;IAED,uDAAuD;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU,CAAC,QAAQ,CAAC;QACzB,KAAK,UAAU,CAAC,SAAS,CAAC;QAC1B,KAAK,UAAU,CAAC,eAAe,CAAC;QAChC,KAAK,UAAU,CAAC,WAAW;YACzB,OAAO,EAAE,EAAE,CAAA;QACb,KAAK,UAAU,CAAC,aAAa;YAC3B,OAAO,GAAG,CACR,IAAI,sBAAsB,CAAC;gBACzB,OAAO,EAAE,yDAAyD;aACnE,CAAC,CACH,CAAA;QACH;YACE,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;AACH,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAiChD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE;IACxD,MAAM,gBAAgB,GAAG,MAAM,+CAA+C,CAC5E,OAAO,CACR,CAAC;QACA,SAAS;QACT,OAAO,EAAE,qBAAqB,CAAC,UAAU;KAC1C,CAAC,CAAA;IACF,IAAI,gBAAgB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAE9D,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QACrD,SAAS;QACT,OAAO,EAAE,gBAAgB;KAC1B,CAAC,CAAA;IACF,IAAI,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAC,CAAA;IAElE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,CAAA,CAAC,8DAA8D;IAC5E,CAAC;IAED,qDAAqD;IACrD,IAAI,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC,IAAI,gCAAgC,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,KAAK,MAAM,CAAA;IACnD,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAA;IAEpF,MAAM,kBAAkB,GAAG,MAAM,kDAAkD,CACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAgC,CAAC,IAAI;YACzE,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;gBACnC,OAAO,EACL,8EAA8E;aACjF,CAAC,CACH,CAAA;QACH,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/fragments/workspaces.d.ts

@@ -1,8 +1,9 @@
 import { AuthPolicyEnsureFragment } from '../domain/policies.js';
-import { PersonalProjectsLimitedError, ProjectNotFoundError, WorkspaceLimitsReachedError, WorkspaceNoAccessError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
+import { PersonalProjectsLimitedError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceLimitsReachedError, WorkspaceNoAccessError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
 import { Loaders } from '../domain/loaders.js';
 import { WorkspaceRoles } from '../../core/constants.js';
 import { MaybeUserContext, MaybeWorkspaceContext, ProjectContext, WorkspaceContext } from '../domain/context.js';
+import { WorkspacePlanFeatures } from '../../workspaces/helpers/features.js';
 /**
  * Ensure user has a workspace role, and a valid SSO session (if SSO is configured)
  */
@@ -34,4 +35,11 @@ export declare const ensureModelCanBeCreatedFragment: AuthPolicyEnsureFragment<t
      */
     addedModelCount?: number;
 }, InstanceType<typeof WorkspaceNoAccessError | typeof WorkspaceReadOnlyError | typeof WorkspaceLimitsReachedError | typeof ProjectNotFoundError | typeof PersonalProjectsLimitedError>>;
+export declare const ensureUserIsWorkspaceAdminFragment: AuthPolicyEnsureFragment<typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getWorkspacePlan, WorkspaceContext & MaybeUserContext, InstanceType<typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof WorkspacesNotEnabledError | typeof ServerNoSessionError | typeof ServerNoAccessError | typeof ServerNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError>>;
+/**
+ * Check if workspace has access to a specific feature
+ */
+export declare const ensureCanUseWorkspacePlanFeatureFragment: AuthPolicyEnsureFragment<typeof Loaders.getWorkspacePlan | typeof Loaders.getEnv, WorkspaceContext & {
+    feature: WorkspacePlanFeatures;
+}, InstanceType<typeof WorkspaceNoAccessError> | InstanceType<typeof WorkspaceReadOnlyError> | InstanceType<typeof WorkspacePlanNoFeatureAccessError> | InstanceType<typeof WorkspacesNotEnabledError>>;
 //# sourceMappingURL=workspaces.d.ts.map

package/dist/esm/authz/fragments/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/workspaces.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAKhE,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAS,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EACjB,MAAM,sBAAsB,CAAA;AAI7B;;GAEG;AACH,eAAO,MAAM,qCAAqC,EAAE,wBAAwB,CACxE,kBAAkB,GAClB,yBAAyB,GACzB,wBAAwB,GACxB,cAAc,EAChB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,cAAc,CAAA;CAAE,EAC9D,YAAY,CACR,OAAO,gCAAgC,GACvC,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,CAC5C,CA2DA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,+BAA+B,EAAE,wBAAwB,CACpE,OAAO,OAAO,CAAC,MAAM,EAErB,EAAE,EACF,YAAY,CAAC,OAAO,yBAAyB,CAAC,CAK/C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,kCAAkC,EAAE,wBAAwB,CACvE,OAAO,OAAO,CAAC,gBAAgB,EAC/B,gBAAgB,EAChB,YAAY,CAAC,OAAO,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,CAU1E,CAAA;AAEH;;;GAGG;AACH,eAAO,MAAM,0CAA0C,EAAE,wBAAwB,CAC7E,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,kBAAkB,GACjC,OAAO,OAAO,CAAC,wBAAwB,EACzC,gBAAgB,GAAG,gBAAgB,EACnC,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,2BAA2B,GAClC,OAAO,0BAA0B,GACjC,OAAO,kCAAkC,CAC5C,CA2DA,CAAA;AAEH;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAE,wBAAwB,CAClE,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,kBAAkB,GACjC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,sBAAsB,EACvC,cAAc,GACZ,qBAAqB,GACrB,gBAAgB,GAAG;IACjB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,EACH,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,2BAA2B,GAClC,OAAO,oBAAoB,GAC3B,OAAO,4BAA4B,CACtC,CAmEA,CAAA"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../../src/authz/fragments/workspaces.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAKhE,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAS,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EACjB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EACL,qBAAqB,EAEtB,MAAM,sCAAsC,CAAA;AAE7C;;GAEG;AACH,eAAO,MAAM,qCAAqC,EAAE,wBAAwB,CACxE,kBAAkB,GAClB,yBAAyB,GACzB,wBAAwB,GACxB,cAAc,EAChB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,cAAc,CAAA;CAAE,EAC9D,YAAY,CACR,OAAO,gCAAgC,GACvC,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,CAC5C,CA2DA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,+BAA+B,EAAE,wBAAwB,CACpE,OAAO,OAAO,CAAC,MAAM,EAErB,EAAE,EACF,YAAY,CAAC,OAAO,yBAAyB,CAAC,CAK/C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,kCAAkC,EAAE,wBAAwB,CACvE,OAAO,OAAO,CAAC,gBAAgB,EAC/B,gBAAgB,EAChB,YAAY,CAAC,OAAO,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,CAU1E,CAAA;AAEH;;;GAGG;AACH,eAAO,MAAM,0CAA0C,EAAE,wBAAwB,CAC7E,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,kBAAkB,GACjC,OAAO,OAAO,CAAC,wBAAwB,EACzC,gBAAgB,GAAG,gBAAgB,EACnC,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,2BAA2B,GAClC,OAAO,0BAA0B,GACjC,OAAO,kCAAkC,CAC5C,CA2DA,CAAA;AAEH;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAE,wBAAwB,CAClE,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,kBAAkB,GACjC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,sBAAsB,EACvC,cAAc,GACZ,qBAAqB,GACrB,gBAAgB,GAAG;IACjB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,EACH,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,2BAA2B,GAClC,OAAO,oBAAoB,GAC3B,OAAO,4BAA4B,CACtC,CAmEA,CAAA;AAEH,eAAO,MAAM,kCAAkC,EAAE,wBAAwB,CACrE,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,gBAAgB,EACjC,gBAAgB,GAAG,gBAAgB,EACnC,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,yBAAyB,GAChC,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,+BAA+B,GACtC,OAAO,kCAAkC,CAC5C,CAuBA,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,wCAAwC,EAAE,wBAAwB,CAC7E,OAAO,OAAO,CAAC,gBAAgB,GAAG,OAAO,OAAO,CAAC,MAAM,EACvD,gBAAgB,GAAG;IAAE,OAAO,EAAE,qBAAqB,CAAA;CAAE,EACnD,YAAY,CAAC,OAAO,sBAAsB,CAAC,GAC3C,YAAY,CAAC,OAAO,sBAAsB,CAAC,GAC3C,YAAY,CAAC,OAAO,iCAAiC,CAAC,GACtD,YAAY,CAAC,OAAO,yBAAyB,CAAC,CAsB/C,CAAA"}

package/dist/esm/authz/fragments/workspaces.js

@@ -1,9 +1,11 @@
 import { err, ok } from 'true-myth/result';
 import { hasAnyWorkspaceRole, hasMinimumWorkspaceRole } from '../checks/workspaceRole.js';
-import { PersonalProjectsLimitedError, ProjectNotFoundError, WorkspaceLimitsReachedError, WorkspaceNoAccessError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
+import { PersonalProjectsLimitedError, ProjectNotFoundError, WorkspaceLimitsReachedError, WorkspaceNoAccessError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../domain/authErrors.js';
 import { Roles } from '../../core/constants.js';
 import { isWorkspacePlanStatusReadOnly } from '../../workspaces/helpers/plans.js';
 import { hasEditorSeat } from '../checks/workspaceSeat.js';
+import { ensureMinimumServerRoleFragment } from './server.js';
+import { workspacePlanHasAccessToFeature } from '../../workspaces/helpers/features.js';
 /**
  * Ensure user has a workspace role, and a valid SSO session (if SSO is configured)
  */
@@ -182,4 +184,46 @@ export const ensureModelCanBeCreatedFragment = (loaders) => async ({ projectId,
         return ok();
     }
 };
+export const ensureUserIsWorkspaceAdminFragment = (loaders) => async ({ userId, workspaceId }) => {
+    const ensuredWorkspacesEnabled = await ensureWorkspacesEnabledFragment(loaders)({});
+    if (ensuredWorkspacesEnabled.isErr)
+        return err(ensuredWorkspacesEnabled.error);
+    const ensuredServerRole = await ensureMinimumServerRoleFragment(loaders)({
+        userId,
+        role: Roles.Server.User
+    });
+    if (ensuredServerRole.isErr)
+        return err(ensuredServerRole.error);
+    const ensuredWorkspaceAccess = await ensureWorkspaceRoleAndSessionFragment(loaders)({
+        userId: userId,
+        workspaceId,
+        role: Roles.Workspace.Admin
+    });
+    if (ensuredWorkspaceAccess.isErr)
+        return err(ensuredWorkspaceAccess.error);
+    return ok();
+};
+/**
+ * Check if workspace has access to a specific feature
+ */
+export const ensureCanUseWorkspacePlanFeatureFragment = (loaders) => async ({ workspaceId, feature }) => {
+    const ensuredWorkspacesEnabled = await ensureWorkspacesEnabledFragment(loaders)({});
+    if (ensuredWorkspacesEnabled.isErr)
+        return err(ensuredWorkspacesEnabled.error);
+    const ensuredNotReadOnly = await ensureWorkspaceNotReadOnlyFragment(loaders)({
+        workspaceId
+    });
+    if (ensuredNotReadOnly.isErr)
+        return err(ensuredNotReadOnly.error);
+    const workspacePlan = await loaders.getWorkspacePlan({ workspaceId });
+    if (!workspacePlan)
+        return err(new WorkspaceNoAccessError());
+    const featureFlags = await loaders.getEnv();
+    const canUseFeature = workspacePlanHasAccessToFeature({
+        plan: workspacePlan.name,
+        feature,
+        featureFlags
+    });
+    return canUseFeature ? ok() : err(new WorkspacePlanNoFeatureAccessError());
+};
 //# sourceMappingURL=workspaces.js.map

package/dist/esm/authz/fragments/workspaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../../src/authz/fragments/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAE1C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,KAAK,EAAkB,MAAM,yBAAyB,CAAA;AAO/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAYhD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;IACtC,MAAM,UAAU,GAAG,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAA;IAChD,MAAM,qBAAqB,GAAG,UAAU,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAA;IAElE,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,oDAAoD;IACpD,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM;QACN,WAAW;QACX,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IACF,IAAI,CAAC,cAAc;QACjB,OAAO,GAAG,CACR,qBAAqB;YACnB,CAAC,CAAC,IAAI,sBAAsB,EAAE;YAC9B,CAAC,CAAC,IAAI,kCAAkC,EAAE,CAC7C,CAAA;IAEH,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM;QACN,WAAW;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,yCAAyC;IACzC,IAAI,CAAC,oBAAoB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEtC,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC;QACjE,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,oBAAoB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEtC,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC;QAC/D,MAAM;QACN,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,mBAAmB;QACtB,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;YACnC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE;SAC3C,CAAC,CACH,CAAA;IAEH,MAAM,gBAAgB,GACpB,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAA;IAEjE,IAAI,gBAAgB;QAClB,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;YACnC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE;SAC3C,CAAC,CACH,CAAA;IAEH,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAKxC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;IAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,4BAA4B;QAAE,OAAO,GAAG,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAA;IAClF,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAK7C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;IACxB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAC5D,IAAI,6BAA6B,CAAC,aAAa,CAAC,MAAM,CAAC;QACrD,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE1C,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAerD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;IAChC,mCAAmC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,aAAa;QACb,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM;YACN,WAAW;YACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;SAC7B,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,GAAG,CACR,IAAI,kCAAkC,CACpC,gDAAgD,CACjD,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,CAAC;QAC3E,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAElE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE5D,wBAAwB;IACxB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM;YACN,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACzE,IAAI,CAAC,eAAe;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE9D,oBAAoB;IACpB,IAAI,eAAe,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,CAAA;IACtD,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC;QACjE,WAAW;KACZ,CAAC,CAAA;IAEF,mCAAmC;IACnC,IAAI,mBAAmB,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE1E,OAAO,mBAAmB,GAAG,eAAe,CAAC,YAAY;QACvD,CAAC,CAAC,EAAE,EAAE;QACN,CAAC,CAAC,GAAG,CACD,IAAI,2BAA2B,CAAC;YAC9B,OAAO,EACL,wFAAwF;YAC1F,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;SACnC,CAAC,CACH,CAAA;AACP,CAAC,CAAA;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAuB1C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5D,eAAe,GAAG,eAAe,IAAI,CAAC,CAAA;IAEtC,MAAM,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,GACzE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,wFAAwF;IACxF,WAAW,GAAG,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,SAAS,CAAA;IAE7D,eAAe;IACf,IAAI,WAAW,IAAI,4BAA4B,EAAE,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,qBAAqB;YACrB,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACvD,MAAM;gBACN,WAAW;aACZ,CAAC,CAAA;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,CAAC;YAC3E,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,kBAAkB,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAElE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,aAAa;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAE5D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAE9D,IAAI,eAAe,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,CAAA;QAEpD,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAE/E,IAAI,iBAAiB,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAExE,OAAO,iBAAiB,GAAG,eAAe,IAAI,eAAe,CAAC,UAAU;YACtE,CAAC,CAAC,EAAE,EAAE;YACN,CAAC,CAAC,GAAG,CACD,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EACL,sFAAsF;gBACxF,OAAO,EAAE;oBACP,KAAK,EAAE,YAAY;iBACpB;aACF,CAAC,CACH,CAAA;IACP,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,IAAI,mCAAmC,EAAE,CAAC;YACxC,OAAO,GAAG,CACR,IAAI,4BAA4B,CAC9B,iDAAiD,CAClD,CACF,CAAA;QACH,CAAC;QAED,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../../src/authz/fragments/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAE1C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EAIpB,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,KAAK,EAAkB,MAAM,yBAAyB,CAAA;AAO/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAEL,+BAA+B,EAChC,MAAM,sCAAsC,CAAA;AAE7C;;GAEG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAYhD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;IACtC,MAAM,UAAU,GAAG,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAA;IAChD,MAAM,qBAAqB,GAAG,UAAU,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAA;IAElE,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,oDAAoD;IACpD,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM;QACN,WAAW;QACX,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IACF,IAAI,CAAC,cAAc;QACjB,OAAO,GAAG,CACR,qBAAqB;YACnB,CAAC,CAAC,IAAI,sBAAsB,EAAE;YAC9B,CAAC,CAAC,IAAI,kCAAkC,EAAE,CAC7C,CAAA;IAEH,MAAM,oBAAoB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM;QACN,WAAW;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAA;IACF,yCAAyC;IACzC,IAAI,CAAC,oBAAoB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEtC,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC;QACjE,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,oBAAoB;QAAE,OAAO,EAAE,EAAE,CAAA;IAEtC,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC;QAC/D,MAAM;QACN,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,mBAAmB;QACtB,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;YACnC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE;SAC3C,CAAC,CACH,CAAA;IAEH,MAAM,gBAAgB,GACpB,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAA;IAEjE,IAAI,gBAAgB;QAClB,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;YACnC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE;SAC3C,CAAC,CACH,CAAA;IAEH,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAKxC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;IAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,4BAA4B;QAAE,OAAO,GAAG,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAA;IAClF,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAK7C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;IACxB,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAC5D,IAAI,6BAA6B,CAAC,aAAa,CAAC,MAAM,CAAC;QACrD,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE1C,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAerD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;IAChC,mCAAmC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,aAAa;QACb,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM;YACN,WAAW;YACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;SAC7B,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,GAAG,CACR,IAAI,kCAAkC,CACpC,gDAAgD,CACjD,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,CAAC;QAC3E,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAElE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE5D,wBAAwB;IACxB,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM;YACN,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACzE,IAAI,CAAC,eAAe;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE9D,oBAAoB;IACpB,IAAI,eAAe,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,CAAA;IACtD,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC;QACjE,WAAW;KACZ,CAAC,CAAA;IAEF,mCAAmC;IACnC,IAAI,mBAAmB,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE1E,OAAO,mBAAmB,GAAG,eAAe,CAAC,YAAY;QACvD,CAAC,CAAC,EAAE,EAAE;QACN,CAAC,CAAC,GAAG,CACD,IAAI,2BAA2B,CAAC;YAC9B,OAAO,EACL,wFAAwF;YAC1F,OAAO,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;SACnC,CAAC,CACH,CAAA;AACP,CAAC,CAAA;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAuB1C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,EAAE,EAAE;IAC5D,eAAe,GAAG,eAAe,IAAI,CAAC,CAAA;IAEtC,MAAM,EAAE,4BAA4B,EAAE,mCAAmC,EAAE,GACzE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAEpD,wFAAwF;IACxF,WAAW,GAAG,WAAW,IAAI,OAAO,CAAC,WAAW,IAAI,SAAS,CAAA;IAE7D,eAAe;IACf,IAAI,WAAW,IAAI,4BAA4B,EAAE,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,qBAAqB;YACrB,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBACvD,MAAM;gBACN,WAAW;aACZ,CAAC,CAAA;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,CAAC;YAC3E,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,kBAAkB,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QAElE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,aAAa;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAE5D,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,eAAe;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAE9D,IAAI,eAAe,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,CAAA;QAEpD,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAE/E,IAAI,iBAAiB,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;QAExE,OAAO,iBAAiB,GAAG,eAAe,IAAI,eAAe,CAAC,UAAU;YACtE,CAAC,CAAC,EAAE,EAAE;YACN,CAAC,CAAC,GAAG,CACD,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EACL,sFAAsF;gBACxF,OAAO,EAAE;oBACP,KAAK,EAAE,YAAY;iBACpB;aACF,CAAC,CACH,CAAA;IACP,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,IAAI,mCAAmC,EAAE,CAAC;YACxC,OAAO,GAAG,CACR,IAAI,4BAA4B,CAC9B,iDAAiD,CAClD,CACF,CAAA;QACH,CAAC;QAED,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAmB7C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,wBAAwB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IACnF,IAAI,wBAAwB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAA;IAE9E,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;KACxB,CAAC,CAAA;IAEF,IAAI,iBAAiB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEhE,MAAM,sBAAsB,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CACjF;QACE,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK;KAC5B,CACF,CAAA;IACD,IAAI,sBAAsB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1E,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAQnD,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;IACjC,MAAM,wBAAwB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IACnF,IAAI,wBAAwB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAA;IAE9E,MAAM,kBAAkB,GAAG,MAAM,kCAAkC,CAAC,OAAO,CAAC,CAAC;QAC3E,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAElE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACrE,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE5D,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAC3C,MAAM,aAAa,GAAG,+BAA+B,CAAC;QACpD,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,OAAO;QACP,YAAY;KACb,CAAC,CAAA;IACF,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;AAC5E,CAAC,CAAA"}