@synchronized-console/shared 2.25.7 → 2.31.14

package/dist/esm/authz/helpers/graphql.d.ts

@@ -4,7 +4,7 @@ export type GraphqlPermissionCheckResult = {
     authorized: boolean;
     code: string;
     message: string;
-    payload: unknown;
+    payload: Record<string, unknown> | null;
 };
 export declare const toGraphqlResult: (authResult: Result<unknown, AuthError<string, any>>) => GraphqlPermissionCheckResult;
 //# sourceMappingURL=graphql.d.ts.map

package/dist/esm/authz/helpers/graphql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../../../src/authz/helpers/graphql.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEnD,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,eAAe,eACd,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAClD,4BAiBF,CAAA"}
+{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../../../../src/authz/helpers/graphql.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEnD,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,OAAO,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACxC,CAAA;AAED,eAAO,MAAM,eAAe,eACd,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAClD,4BAiBF,CAAA"}

package/dist/esm/authz/helpers/graphql.js

@@ -13,7 +13,7 @@ export const toGraphqlResult = (authResult) => {
             authorized: false,
             code: error.code,
             message: error.message,
-            payload: error.payload || null
+            payload: (error.payload || null)
         };
     }
 };

package/dist/esm/authz/helpers/graphql.js.map

@@ -1 +1 @@
-{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../../../src/authz/helpers/graphql.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,UAAmD,EACrB,EAAE;IAChC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;QAC9B,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;SAC/B,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../../../src/authz/helpers/graphql.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,UAAmD,EACrB,EAAE;IAChC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;QAC9B,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAmC;SACnE,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/esm/authz/index.d.ts

@@ -4,4 +4,5 @@ export * from './helpers/graphql.js';
 export * from './domain/authErrors.js';
 export { AuthPolicyResult } from './domain/policies.js';
 export { PersonalProjectsLimits } from './domain/projects/limits.js';
+export * from './domain/workspaces/operations.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/authz/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,cAAc,mCAAmC,CAAA"}

package/dist/esm/authz/index.js

@@ -3,4 +3,5 @@ export { AuthCheckContextLoaderKeys } from './domain/loaders.js';
 export * from './helpers/graphql.js';
 export * from './domain/authErrors.js';
 export { PersonalProjectsLimits } from './domain/projects/limits.js';
+export * from './domain/workspaces/operations.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/authz/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAgB,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAGL,0BAA0B,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authz/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAgB,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAGL,0BAA0B,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,cAAc,sBAAsB,CAAA;AACpC,cAAc,wBAAwB,CAAA;AAEtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACpE,cAAc,mCAAmC,CAAA"}

package/dist/esm/authz/policies/automate/function/canEditFunction.d.ts

@@ -0,0 +1,10 @@
+import { AutomateFunctionNotCreatorError, AutomateFunctionNotFoundError, AutomateNotEnabledError } from '../../../domain/authErrors.js';
+import { AutomateFunctionContext, MaybeUserContext } from '../../../domain/context.js';
+import { AuthCheckContextLoaderKeys } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+type PolicyLoaderKeys = typeof AuthCheckContextLoaderKeys.getEnv | typeof AuthCheckContextLoaderKeys.getAutomateFunction;
+type PolicyArgs = MaybeUserContext & AutomateFunctionContext;
+type PolicyErrors = InstanceType<typeof AutomateNotEnabledError | typeof AutomateFunctionNotFoundError | typeof AutomateFunctionNotCreatorError>;
+export declare const canEditFunctionPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canEditFunction.d.ts.map

package/dist/esm/authz/policies/automate/function/canEditFunction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditFunction.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/automate/function/canEditFunction.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AACtF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAMxD,KAAK,gBAAgB,GACjB,OAAO,0BAA0B,CAAC,MAAM,GACxC,OAAO,0BAA0B,CAAC,mBAAmB,CAAA;AAEzD,KAAK,UAAU,GAAG,gBAAgB,GAAG,uBAAuB,CAAA;AAE5D,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,uBAAuB,GAC9B,OAAO,6BAA6B,GACpC,OAAO,+BAA+B,CACzC,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,UAAU,CAC5C,gBAAgB,EAChB,UAAU,EACV,YAAY,CAgBX,CAAA"}

package/dist/esm/authz/policies/automate/function/canEditFunction.js

@@ -0,0 +1,15 @@
+import { err, ok } from 'true-myth/result';
+import { ensureAutomateEnabledFragment, ensureAutomateFunctionCreatorFragment } from '../../../fragments/automate.js';
+export const canEditFunctionPolicy = (loaders) => async ({ userId, functionId }) => {
+    const isAutomateEnabled = await ensureAutomateEnabledFragment(loaders)({});
+    if (isAutomateEnabled.isErr)
+        return err(isAutomateEnabled.error);
+    const isAutomateFunctionCreator = await ensureAutomateFunctionCreatorFragment(loaders)({
+        userId,
+        functionId
+    });
+    if (isAutomateFunctionCreator.isErr)
+        return err(isAutomateFunctionCreator.error);
+    return ok();
+};
+//# sourceMappingURL=canEditFunction.js.map

package/dist/esm/authz/policies/automate/function/canEditFunction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditFunction.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/automate/function/canEditFunction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAS1C,OAAO,EACL,6BAA6B,EAC7B,qCAAqC,EACtC,MAAM,gCAAgC,CAAA;AAcvC,MAAM,CAAC,MAAM,qBAAqB,GAKhC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/B,MAAM,iBAAiB,GAAG,MAAM,6BAA6B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC1E,IAAI,iBAAiB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAEhE,MAAM,yBAAyB,GAAG,MAAM,qCAAqC,CAC3E,OAAO,CACR,CAAC;QACA,MAAM;QACN,UAAU;KACX,CAAC,CAAA;IACF,IAAI,yBAAyB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAEhF,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/dashboard/canCreateToken.d.ts

@@ -0,0 +1,10 @@
+import { AuthCheckContextLoaderKeys } from '../../domain/loaders.js';
+import { DashboardContext, MaybeUserContext } from '../../domain/context.js';
+import { DashboardNoProjectsError, DashboardNotFoundError, DashboardProjectsNotEnoughPermissionsError, DashboardsNotEnabledError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError } from '../../domain/authErrors.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof AuthCheckContextLoaderKeys.getEnv | typeof AuthCheckContextLoaderKeys.getDashboard | typeof AuthCheckContextLoaderKeys.getWorkspacePlan | typeof AuthCheckContextLoaderKeys.getWorkspaceRole | typeof AuthCheckContextLoaderKeys.getWorkspaceSeat | typeof AuthCheckContextLoaderKeys.getProjectRole | typeof AuthCheckContextLoaderKeys.getProject | typeof AuthCheckContextLoaderKeys.getServerRole | typeof AuthCheckContextLoaderKeys.getWorkspace | typeof AuthCheckContextLoaderKeys.getWorkspaceSsoProvider | typeof AuthCheckContextLoaderKeys.getWorkspaceSsoSession;
+type PolicyArgs = MaybeUserContext & DashboardContext;
+type PolicyErrors = InstanceType<typeof DashboardsNotEnabledError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof WorkspaceNoEditorSeatError | typeof DashboardNotFoundError | typeof DashboardNoProjectsError | typeof DashboardProjectsNotEnoughPermissionsError>;
+export declare const canCreateDashboardTokenPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canCreateToken.d.ts.map

package/dist/esm/authz/policies/dashboard/canCreateToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateToken.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canCreateToken.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,0CAA0C,EAC1C,yBAAyB,EACzB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAUrD,KAAK,gBAAgB,GACjB,OAAO,0BAA0B,CAAC,MAAM,GACxC,OAAO,0BAA0B,CAAC,YAAY,GAC9C,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,cAAc,GAChD,OAAO,0BAA0B,CAAC,UAAU,GAC5C,OAAO,0BAA0B,CAAC,aAAa,GAC/C,OAAO,0BAA0B,CAAC,YAAY,GAC9C,OAAO,0BAA0B,CAAC,uBAAuB,GACzD,OAAO,0BAA0B,CAAC,sBAAsB,CAAA;AAE5D,KAAK,UAAU,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;AAErD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,yBAAyB,GAChC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,0BAA0B,GACjC,OAAO,sBAAsB,GAC7B,OAAO,wBAAwB,GAC/B,OAAO,0CAA0C,CACpD,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,UAAU,CACpD,gBAAgB,EAChB,UAAU,EACV,YAAY,CAsCX,CAAA"}

package/dist/esm/authz/policies/dashboard/canCreateToken.js

@@ -0,0 +1,41 @@
+import { err, ok } from 'true-myth/result';
+import { DashboardNoProjectsError, DashboardNotFoundError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError } from '../../domain/authErrors.js';
+import { ensureDashboardProjectsReadAccess, ensureDashboardsEnabledFragment, ensureWorkspaceDashboardsFeatureAccessFragment } from '../../fragments/dashboards.js';
+import { hasMinimumWorkspaceRole } from '../../checks/workspaceRole.js';
+import { Roles } from '../../../core/constants.js';
+import { hasEditorSeat } from '../../checks/workspaceSeat.js';
+export const canCreateDashboardTokenPolicy = (loaders) => async ({ userId, dashboardId }) => {
+    const isDashboardsEnabled = await ensureDashboardsEnabledFragment(loaders)({});
+    if (isDashboardsEnabled.isErr)
+        return err(isDashboardsEnabled.error);
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return err(new DashboardNotFoundError());
+    const { workspaceId } = dashboard;
+    const ensuredFeatureAccess = await ensureWorkspaceDashboardsFeatureAccessFragment(loaders)({ workspaceId });
+    if (ensuredFeatureAccess.isErr)
+        return err(ensuredFeatureAccess.error);
+    const isWorkspaceMember = await hasMinimumWorkspaceRole(loaders)({
+        userId: userId,
+        workspaceId,
+        role: Roles.Workspace.Member
+    });
+    if (!isWorkspaceMember)
+        return err(new WorkspaceNotEnoughPermissionsError());
+    const isWorkspaceEditorSeat = await hasEditorSeat(loaders)({
+        userId: userId,
+        workspaceId
+    });
+    if (!isWorkspaceEditorSeat)
+        return err(new WorkspaceNoEditorSeatError());
+    if (!dashboard.projectIds.length)
+        return err(new DashboardNoProjectsError());
+    const ensuredProjectAccess = await ensureDashboardProjectsReadAccess(loaders)({
+        userId: userId,
+        dashboardId
+    });
+    if (ensuredProjectAccess.isErr)
+        return err(ensuredProjectAccess.error);
+    return ok();
+};
+//# sourceMappingURL=canCreateToken.js.map

package/dist/esm/authz/policies/dashboard/canCreateToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateToken.js","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canCreateToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EAGtB,0BAA0B,EAC1B,kCAAkC,EAEnC,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,iCAAiC,EACjC,+BAA+B,EAC/B,8CAA8C,EAC/C,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AA2B7D,MAAM,CAAC,MAAM,6BAA6B,GAKxC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,mBAAmB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,mBAAmB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAA;IAEjC,MAAM,oBAAoB,GAAG,MAAM,8CAA8C,CAC/E,OAAO,CACR,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAClB,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,MAAM,iBAAiB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;KAC7B,CAAC,CAAA;IACF,IAAI,CAAC,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,kCAAkC,EAAE,CAAC,CAAA;IAE5E,MAAM,qBAAqB,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,MAAO;QACf,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAExE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAA;IAC5E,MAAM,oBAAoB,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM,EAAE,MAAO;QACf,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/dashboard/canDelete.d.ts

@@ -0,0 +1,10 @@
+import { AuthCheckContextLoaderKeys } from '../../domain/loaders.js';
+import { DashboardContext, MaybeUserContext } from '../../domain/context.js';
+import { DashboardNotFoundError, DashboardNotOwnerError, DashboardsNotEnabledError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError } from '../../domain/authErrors.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof AuthCheckContextLoaderKeys.getEnv | typeof AuthCheckContextLoaderKeys.getServerRole | typeof AuthCheckContextLoaderKeys.getAdminOverrideEnabled | typeof AuthCheckContextLoaderKeys.getDashboard | typeof AuthCheckContextLoaderKeys.getWorkspacePlan | typeof AuthCheckContextLoaderKeys.getWorkspaceRole | typeof AuthCheckContextLoaderKeys.getWorkspaceSeat;
+type PolicyArgs = MaybeUserContext & DashboardContext;
+type PolicyErrors = InstanceType<typeof DashboardsNotEnabledError | typeof DashboardNotOwnerError | typeof DashboardNotFoundError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof WorkspaceNoEditorSeatError>;
+export declare const canDeleteDashboardPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canDelete.d.ts.map

package/dist/esm/authz/policies/dashboard/canDelete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canDelete.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canDelete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAWrD,KAAK,gBAAgB,GACjB,OAAO,0BAA0B,CAAC,MAAM,GACxC,OAAO,0BAA0B,CAAC,aAAa,GAC/C,OAAO,0BAA0B,CAAC,uBAAuB,GACzD,OAAO,0BAA0B,CAAC,YAAY,GAC9C,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,CAAA;AAEtD,KAAK,UAAU,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;AAErD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,0BAA0B,CACpC,CAAA;AAED,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAC/C,gBAAgB,EAChB,UAAU,EACV,YAAY,CAsCX,CAAA"}

package/dist/esm/authz/policies/dashboard/canDelete.js

@@ -0,0 +1,41 @@
+import { err, ok } from 'true-myth/result';
+import { DashboardNotFoundError, DashboardNotOwnerError, WorkspaceNoEditorSeatError } from '../../domain/authErrors.js';
+import { ensureDashboardsEnabledFragment, ensureWorkspaceDashboardsFeatureAccessFragment } from '../../fragments/dashboards.js';
+import { hasMinimumWorkspaceRole } from '../../checks/workspaceRole.js';
+import { Roles } from '../../../core/constants.js';
+import { hasEditorSeat } from '../../checks/workspaceSeat.js';
+import { isDashboardOwner } from '../../checks/dashboards.js';
+import { checkIfAdminOverrideEnabledFragment } from '../../fragments/server.js';
+export const canDeleteDashboardPolicy = (loaders) => async ({ userId, dashboardId }) => {
+    const isDashboardsEnabled = await ensureDashboardsEnabledFragment(loaders)({});
+    if (isDashboardsEnabled.isErr)
+        return err(isDashboardsEnabled.error);
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return err(new DashboardNotFoundError());
+    const { workspaceId } = dashboard;
+    const ensuredFeatureAccess = await ensureWorkspaceDashboardsFeatureAccessFragment(loaders)({ workspaceId });
+    if (ensuredFeatureAccess.isErr)
+        return err(ensuredFeatureAccess.error);
+    const hasAdminAccess = await checkIfAdminOverrideEnabledFragment(loaders)({
+        userId
+    });
+    if (hasAdminAccess.isOk && hasAdminAccess.value)
+        return ok();
+    const isWorkspaceEditorSeat = await hasEditorSeat(loaders)({
+        userId: userId,
+        workspaceId
+    });
+    if (!isWorkspaceEditorSeat)
+        return err(new WorkspaceNoEditorSeatError());
+    const isWorkspaceAdmin = await hasMinimumWorkspaceRole(loaders)({
+        userId: userId,
+        workspaceId,
+        role: Roles.Workspace.Admin
+    });
+    const isOwner = await isDashboardOwner(loaders)({ userId: userId, dashboardId });
+    if (!isWorkspaceAdmin && !isOwner)
+        return err(new DashboardNotOwnerError());
+    return ok();
+};
+//# sourceMappingURL=canDelete.js.map

package/dist/esm/authz/policies/dashboard/canDelete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canDelete.js","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canDelete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EAEtB,0BAA0B,EAG3B,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,+BAA+B,EAC/B,8CAA8C,EAC/C,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAA;AAsB/E,MAAM,CAAC,MAAM,wBAAwB,GAKnC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,mBAAmB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,mBAAmB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAA;IAEjC,MAAM,oBAAoB,GAAG,MAAM,8CAA8C,CAC/E,OAAO,CACR,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAClB,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,CAAA;IAE5D,MAAM,qBAAqB,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,MAAO;QACf,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAExE,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK;KAC5B,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IAEjF,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAE3E,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/dashboard/canEdit.d.ts

@@ -0,0 +1,10 @@
+import { AuthCheckContextLoaderKeys } from '../../domain/loaders.js';
+import { MaybeUserContext, DashboardContext } from '../../domain/context.js';
+import { DashboardNotFoundError, DashboardsNotEnabledError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError } from '../../domain/authErrors.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof AuthCheckContextLoaderKeys.getEnv | typeof AuthCheckContextLoaderKeys.getServerRole | typeof AuthCheckContextLoaderKeys.getAdminOverrideEnabled | typeof AuthCheckContextLoaderKeys.getDashboard | typeof AuthCheckContextLoaderKeys.getWorkspacePlan | typeof AuthCheckContextLoaderKeys.getWorkspaceRole | typeof AuthCheckContextLoaderKeys.getWorkspaceSeat;
+type PolicyArgs = MaybeUserContext & DashboardContext;
+type PolicyErrors = InstanceType<typeof DashboardsNotEnabledError | typeof DashboardNotFoundError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof WorkspaceNoEditorSeatError>;
+export declare const canEditDashboardPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canEdit.d.ts.map

package/dist/esm/authz/policies/dashboard/canEdit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEdit.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canEdit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAUrD,KAAK,gBAAgB,GACjB,OAAO,0BAA0B,CAAC,MAAM,GACxC,OAAO,0BAA0B,CAAC,aAAa,GAC/C,OAAO,0BAA0B,CAAC,uBAAuB,GACzD,OAAO,0BAA0B,CAAC,YAAY,GAC9C,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,CAAA;AAEtD,KAAK,UAAU,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;AAErD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,0BAA0B,CACpC,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAC7C,gBAAgB,EAChB,UAAU,EACV,YAAY,CAoCX,CAAA"}

package/dist/esm/authz/policies/dashboard/canEdit.js

@@ -0,0 +1,39 @@
+import { err, ok } from 'true-myth/result';
+import { DashboardNotFoundError, WorkspaceNoEditorSeatError, WorkspaceNotEnoughPermissionsError } from '../../domain/authErrors.js';
+import { ensureDashboardsEnabledFragment, ensureWorkspaceDashboardsFeatureAccessFragment } from '../../fragments/dashboards.js';
+import { hasMinimumWorkspaceRole } from '../../checks/workspaceRole.js';
+import { Roles } from '../../../core/constants.js';
+import { hasEditorSeat } from '../../checks/workspaceSeat.js';
+import { checkIfAdminOverrideEnabledFragment } from '../../fragments/server.js';
+export const canEditDashboardPolicy = (loaders) => async ({ userId, dashboardId }) => {
+    const isDashboardsEnabled = await ensureDashboardsEnabledFragment(loaders)({});
+    if (isDashboardsEnabled.isErr)
+        return err(isDashboardsEnabled.error);
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return err(new DashboardNotFoundError());
+    const { workspaceId } = dashboard;
+    const ensuredFeatureAccess = await ensureWorkspaceDashboardsFeatureAccessFragment(loaders)({ workspaceId });
+    if (ensuredFeatureAccess.isErr)
+        return err(ensuredFeatureAccess.error);
+    const hasAdminAccess = await checkIfAdminOverrideEnabledFragment(loaders)({
+        userId
+    });
+    if (hasAdminAccess.isOk && hasAdminAccess.value)
+        return ok();
+    const isWorkspaceMember = await hasMinimumWorkspaceRole(loaders)({
+        userId: userId,
+        workspaceId,
+        role: Roles.Workspace.Member
+    });
+    if (!isWorkspaceMember)
+        return err(new WorkspaceNotEnoughPermissionsError());
+    const isWorkspaceEditorSeat = await hasEditorSeat(loaders)({
+        userId: userId,
+        workspaceId
+    });
+    if (!isWorkspaceEditorSeat)
+        return err(new WorkspaceNoEditorSeatError());
+    return ok();
+};
+//# sourceMappingURL=canEdit.js.map

package/dist/esm/authz/policies/dashboard/canEdit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEdit.js","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canEdit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,EAC1B,kCAAkC,EAEnC,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,+BAA+B,EAC/B,8CAA8C,EAC/C,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAA;AAqB/E,MAAM,CAAC,MAAM,sBAAsB,GAKjC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,mBAAmB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,mBAAmB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAA;IAEjC,MAAM,oBAAoB,GAAG,MAAM,8CAA8C,CAC/E,OAAO,CACR,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAClB,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,CAAA;IAE5D,MAAM,iBAAiB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;KAC7B,CAAC,CAAA;IACF,IAAI,CAAC,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,kCAAkC,EAAE,CAAC,CAAA;IAE5E,MAAM,qBAAqB,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,MAAO;QACf,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAA;IAExE,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/dashboard/canRead.d.ts

@@ -0,0 +1,10 @@
+import { AuthCheckContextLoaderKeys } from '../../domain/loaders.js';
+import { DashboardContext, MaybeUserContext } from '../../domain/context.js';
+import { DashboardNotFoundError, DashboardsNotEnabledError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError } from '../../domain/authErrors.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof AuthCheckContextLoaderKeys.getEnv | typeof AuthCheckContextLoaderKeys.getServerRole | typeof AuthCheckContextLoaderKeys.getAdminOverrideEnabled | typeof AuthCheckContextLoaderKeys.getDashboard | typeof AuthCheckContextLoaderKeys.getWorkspaceRole | typeof AuthCheckContextLoaderKeys.getWorkspacePlan;
+type PolicyArgs = MaybeUserContext & DashboardContext;
+type PolicyErrors = InstanceType<typeof DashboardsNotEnabledError | typeof DashboardNotFoundError | typeof ServerNoSessionError | typeof ServerNoAccessError | typeof ServerNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError>;
+export declare const canReadDashboardPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canRead.d.ts.map

package/dist/esm/authz/policies/dashboard/canRead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canRead.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canRead.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAYrD,KAAK,gBAAgB,GACjB,OAAO,0BAA0B,CAAC,MAAM,GACxC,OAAO,0BAA0B,CAAC,aAAa,GAC/C,OAAO,0BAA0B,CAAC,uBAAuB,GACzD,OAAO,0BAA0B,CAAC,YAAY,GAC9C,OAAO,0BAA0B,CAAC,gBAAgB,GAClD,OAAO,0BAA0B,CAAC,gBAAgB,CAAA;AAEtD,KAAK,UAAU,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;AAErD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,+BAA+B,GACtC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,CAC3C,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAC7C,gBAAgB,EAChB,UAAU,EACV,YAAY,CAmCX,CAAA"}

package/dist/esm/authz/policies/dashboard/canRead.js

@@ -0,0 +1,38 @@
+import { err, ok } from 'true-myth/result';
+import { DashboardNotFoundError, WorkspaceNotEnoughPermissionsError } from '../../domain/authErrors.js';
+import { ensureDashboardsEnabledFragment, ensureWorkspaceDashboardsFeatureAccessFragment } from '../../fragments/dashboards.js';
+import { hasMinimumWorkspaceRole } from '../../checks/workspaceRole.js';
+import { Roles } from '../../../core/constants.js';
+import { checkIfAdminOverrideEnabledFragment, ensureMinimumServerRoleFragment } from '../../fragments/server.js';
+export const canReadDashboardPolicy = (loaders) => async ({ userId, dashboardId }) => {
+    const ensuredServerRole = await ensureMinimumServerRoleFragment(loaders)({
+        userId,
+        role: Roles.Server.User
+    });
+    if (ensuredServerRole.isErr)
+        return err(ensuredServerRole.error);
+    const isDashboardsEnabled = await ensureDashboardsEnabledFragment(loaders)({});
+    if (isDashboardsEnabled.isErr)
+        return err(isDashboardsEnabled.error);
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return err(new DashboardNotFoundError());
+    const { workspaceId } = dashboard;
+    const ensuredFeatureAccess = await ensureWorkspaceDashboardsFeatureAccessFragment(loaders)({ workspaceId });
+    if (ensuredFeatureAccess.isErr)
+        return err(ensuredFeatureAccess.error);
+    const hasAdminAccess = await checkIfAdminOverrideEnabledFragment(loaders)({
+        userId
+    });
+    if (hasAdminAccess.isOk && hasAdminAccess.value)
+        return ok();
+    const isWorkspaceMember = await hasMinimumWorkspaceRole(loaders)({
+        userId: userId,
+        workspaceId,
+        role: Roles.Workspace.Member
+    });
+    if (!isWorkspaceMember)
+        return err(new WorkspaceNotEnoughPermissionsError());
+    return ok();
+};
+//# sourceMappingURL=canRead.js.map

package/dist/esm/authz/policies/dashboard/canRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canRead.js","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canRead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EACL,sBAAsB,EAKtB,kCAAkC,EAEnC,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EACL,+BAA+B,EAC/B,8CAA8C,EAC/C,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EACL,mCAAmC,EACnC,+BAA+B,EAChC,MAAM,2BAA2B,CAAA;AAsBlC,MAAM,CAAC,MAAM,sBAAsB,GAKjC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,iBAAiB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;KACxB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAChE,MAAM,mBAAmB,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,mBAAmB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAA;IAEjC,MAAM,oBAAoB,GAAG,MAAM,8CAA8C,CAC/E,OAAO,CACR,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAClB,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,CAAA;IAE5D,MAAM,iBAAiB,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;KAC7B,CAAC,CAAA;IACF,IAAI,CAAC,iBAAiB;QAAE,OAAO,GAAG,CAAC,IAAI,kCAAkC,EAAE,CAAC,CAAA;IAE5E,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/index.d.ts

@@ -1,5 +1,18 @@
 import { AllAuthCheckContextLoaders } from '../domain/loaders.js';
 export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders) => {
+    automate: {
+        function: {
+            canRegenerateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").AutomateFunctionContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"AutomateNotEnabled", undefined> | import("../index.js").AuthError<"AutomateFunctionNotFound", undefined> | import("../index.js").AuthError<"AutomateFunctionNotCreator", undefined>>>;
+        };
+    };
+    dashboard: {
+        canCreateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined> | import("../index.js").AuthError<"DashboardNoProjects", undefined> | import("../index.js").AuthError<"DashboardProjectsNotEnoughPermissions", {
+            projectIds: string[];
+        }>>>;
+        canDelete: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined> | import("../index.js").AuthError<"DashboardNotOwner", undefined>>>;
+        canEdit: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined>>>;
+        canRead: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined>>>;
+    };
     project: {
         automation: {
             canCreate: (args: import("../domain/context.js").ProjectContext & import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
@@ -53,6 +66,37 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
                 workspaceSlug: string;
             }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
         };
+        savedViews: {
+            canCreate: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+            canUpdate: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canUpdateGroup: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewGroupContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewGroupNotFound", undefined> | import("../index.js").AuthError<"UngroupedSavedViewGroupLock", undefined>>>;
+            canCreateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewGroupContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewGroupNotFound", undefined> | import("../index.js").AuthError<"UngroupedSavedViewGroupLock", undefined>>>;
+            canRead: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext & {
+                allowNonExistent?: boolean;
+            }) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canMove: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canEditTitle: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canEditDescription: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canSetAsHomeView: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined> | import("../index.js").AuthError<"SavedViewInvalidUpdate", undefined>>>;
+        };
         canBroadcastActivity: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
@@ -92,6 +136,18 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
         canLoad: (args: import("../domain/context.js").ProjectContext & import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canReadEmbedTokens: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canUpdateEmbedTokens: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canReadAccIntegrationSettings: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"AccIntegrationNotEnabled", undefined>>>;
+        canUpdateAccIntegrationSettings: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"AccIntegrationNotEnabled", undefined>>>;
     };
     workspace: {
         canCreateProject: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceLimitsReached", {
@@ -105,12 +161,17 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
         canReceiveProjectsUpdatedMessage: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
-        canUpdateEmbedOptions: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceNoFeatureAccess", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+        canUseWorkspacePlanFeature: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext & {
+            feature: import("../../index.js").WorkspacePlanFeatures;
+        }) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
         canReadMemberEmail: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canCreateWorkspace: (args: import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"UserEligibleForExclusiveWorkspace", undefined> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canCreateDashboards: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined>>>;
+        canListDashboards: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined>>>;
     };
 };
 export type AuthPolicies = ReturnType<typeof authPoliciesFactory>;

package/dist/esm/authz/policies/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AAiCjE,eAAO,MAAM,mBAAmB,YAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CrE,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AAoDjE,eAAO,MAAM,mBAAmB,YAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2ErE,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA"}