@synchronized-console/shared 2.25.7 → 2.31.14

package/dist/esm/authz/policies/index.js

@@ -27,9 +27,39 @@ import { canDeleteProjectPolicy } from './project/canDelete.js';
 import { canDeleteAutomationPolicy } from './project/automation/canDelete.js';
 import { canPublishPolicy } from './project/canPublish.js';
 import { canLoadPolicy } from './project/canLoad.js';
-import { canUpdateEmbedOptionsPolicy } from './workspace/canUpdateEmbedOptions.js';
 import { canReadMemberEmailPolicy } from './workspace/canReadMemberEmail.js';
+import { canCreateWorkspacePolicy } from './workspace/canCreateWorkspace.js';
+import { canUseWorkspacePlanFeature } from './workspace/canUseWorkspacePlanFeature.js';
+import { canEditFunctionPolicy } from './automate/function/canEditFunction.js';
+import { canUpdateEmbedTokensPolicy } from './project/canUpdateEmbedTokens.js';
+import { canReadAccIntegrationSettingsPolicy } from './project/canReadAccIntegrationSettings.js';
+import { canCreateSavedViewPolicy } from './project/savedViews/canCreate.js';
+import { canUpdateSavedViewPolicy } from './project/savedViews/canUpdate.js';
+import { canUpdateSavedViewGroupPolicy } from './project/savedViews/canUpdateGroup.js';
+import { canReadSavedViewPolicy } from './project/savedViews/canRead.js';
+import { canListDashboardsPolicy } from './workspace/canListDashboards.js';
+import { canDeleteDashboardPolicy } from './dashboard/canDelete.js';
+import { canCreateDashboardsPolicy } from './workspace/canCreateDashboards.js';
+import { canCreateDashboardTokenPolicy } from './dashboard/canCreateToken.js';
+import { canEditDashboardPolicy } from './dashboard/canEdit.js';
+import { canReadDashboardPolicy } from './dashboard/canRead.js';
+import { canMoveSavedViewPolicy } from './project/savedViews/canMove.js';
+import { canEditSavedViewTitlePolicy } from './project/savedViews/canEditTitle.js';
+import { canEditSavedViewDescriptionPolicy } from './project/savedViews/canEditDescription.js';
+import { canCreateSavedViewGroupTokenPolicy } from './project/savedViews/canCreateSavedViewGroupToken.js';
+import { canSetSavedViewAsHomeViewPolicy } from './project/savedViews/canSetAsHomeView.js';
 export const authPoliciesFactory = (loaders) => ({
+    automate: {
+        function: {
+            canRegenerateToken: canEditFunctionPolicy(loaders)
+        }
+    },
+    dashboard: {
+        canCreateToken: canCreateDashboardTokenPolicy(loaders),
+        canDelete: canDeleteDashboardPolicy(loaders),
+        canEdit: canEditDashboardPolicy(loaders),
+        canRead: canReadDashboardPolicy(loaders)
+    },
     project: {
         automation: {
             canCreate: canCreateAutomationPolicy(loaders),
@@ -53,6 +83,17 @@ export const authPoliciesFactory = (loaders) => ({
             canReceive: canLoadPolicy(loaders),
             canRequestRender: canRequestProjectVersionRenderPolicy(loaders)
         },
+        savedViews: {
+            canCreate: canCreateSavedViewPolicy(loaders),
+            canUpdate: canUpdateSavedViewPolicy(loaders),
+            canUpdateGroup: canUpdateSavedViewGroupPolicy(loaders),
+            canCreateToken: canCreateSavedViewGroupTokenPolicy(loaders),
+            canRead: canReadSavedViewPolicy(loaders),
+            canMove: canMoveSavedViewPolicy(loaders),
+            canEditTitle: canEditSavedViewTitlePolicy(loaders),
+            canEditDescription: canEditSavedViewDescriptionPolicy(loaders),
+            canSetAsHomeView: canSetSavedViewAsHomeViewPolicy(loaders)
+        },
         canBroadcastActivity: canBroadcastProjectActivityPolicy(loaders),
         canRead: canReadProjectPolicy(loaders),
         canMoveToWorkspace: canMoveToWorkspacePolicy(loaders),
@@ -65,14 +106,21 @@ export const authPoliciesFactory = (loaders) => ({
         canLeave: canLeaveProjectPolicy(loaders),
         canInvite: canInviteToProjectPolicy(loaders),
         canPublish: canPublishPolicy(loaders),
-        canLoad: canLoadPolicy(loaders)
+        canLoad: canLoadPolicy(loaders),
+        canReadEmbedTokens: canUpdateEmbedTokensPolicy(loaders),
+        canUpdateEmbedTokens: canUpdateEmbedTokensPolicy(loaders),
+        canReadAccIntegrationSettings: canReadAccIntegrationSettingsPolicy(loaders),
+        canUpdateAccIntegrationSettings: canReadAccIntegrationSettingsPolicy(loaders)
     },
     workspace: {
         canCreateProject: canCreateWorkspaceProjectPolicy(loaders),
         canInvite: canInviteToWorkspacePolicy(loaders),
         canReceiveProjectsUpdatedMessage: canReceiveWorkspaceProjectsUpdatedMessagePolicy(loaders),
-        canUpdateEmbedOptions: canUpdateEmbedOptionsPolicy(loaders),
-        canReadMemberEmail: canReadMemberEmailPolicy(loaders)
+        canUseWorkspacePlanFeature: canUseWorkspacePlanFeature(loaders),
+        canReadMemberEmail: canReadMemberEmailPolicy(loaders),
+        canCreateWorkspace: canCreateWorkspacePolicy(loaders),
+        canCreateDashboards: canCreateDashboardsPolicy(loaders),
+        canListDashboards: canListDashboardsPolicy(loaders)
     }
 });
 //# sourceMappingURL=index.js.map

package/dist/esm/authz/policies/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,yCAAyC,EAAE,MAAM,2CAA2C,CAAA;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAA;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAA;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,EAAE,+CAA+C,EAAE,MAAM,iDAAiD,CAAA;AACjH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAA;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAE5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;YAC7C,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;YACzC,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;YAC7C,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;SAC9C;QACD,KAAK,EAAE;YACL,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACxC,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACxC,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;SACzC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,UAAU,EAAE,8BAA8B,CAAC,OAAO,CAAC;YACnD,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC;SAC9C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC;YAClC,gBAAgB,EAAE,oCAAoC,CAAC,OAAO,CAAC;SAChE;QACD,oBAAoB,EAAE,iCAAiC,CAAC,OAAO,CAAC;QAChE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC;QACtC,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACrD,iBAAiB,EAAE,8BAA8B,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC1C,4BAA4B,EAAE,yCAAyC,CAAC,OAAO,CAAC;QAChF,eAAe,EAAE,4BAA4B,CAAC,OAAO,CAAC;QACtD,eAAe,EAAE,4BAA4B,CAAC,OAAO,CAAC;QACtD,QAAQ,EAAE,qBAAqB,CAAC,OAAO,CAAC;QACxC,SAAS,EAAE,wBAAwB,CAAC,OAAO,CAAC;QAC5C,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;KAChC;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE,+BAA+B,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,0BAA0B,CAAC,OAAO,CAAC;QAC9C,gCAAgC,EAC9B,+CAA+C,CAAC,OAAO,CAAC;QAC1D,qBAAqB,EAAE,2BAA2B,CAAC,OAAO,CAAC;QAC3D,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC;KACtD;CACF,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,EAAE,yCAAyC,EAAE,MAAM,2CAA2C,CAAA;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAA;AACrF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAA;AAC5F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,EAAE,+CAA+C,EAAE,MAAM,iDAAiD,CAAA;AACjH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AAC9E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4CAA4C,CAAA;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,wCAAwC,CAAA;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAA;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAA;AAClF,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAA;AAC9F,OAAO,EAAE,kCAAkC,EAAE,MAAM,sDAAsD,CAAA;AACzG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAA;AAE1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAAC,CAAC;IAC3E,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,kBAAkB,EAAE,qBAAqB,CAAC,OAAO,CAAC;SACnD;KACF;IACD,SAAS,EAAE;QACT,cAAc,EAAE,6BAA6B,CAAC,OAAO,CAAC;QACtD,SAAS,EAAE,wBAAwB,CAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC;KACzC;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;YAC7C,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;YACzC,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;YAC7C,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;SAC9C;QACD,KAAK,EAAE;YACL,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACxC,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACxC,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC;SACzC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,UAAU,EAAE,8BAA8B,CAAC,OAAO,CAAC;YACnD,OAAO,EAAE,2BAA2B,CAAC,OAAO,CAAC;SAC9C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,SAAS,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACjD,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC;YAClC,gBAAgB,EAAE,oCAAoC,CAAC,OAAO,CAAC;SAChE;QACD,UAAU,EAAE;YACV,SAAS,EAAE,wBAAwB,CAAC,OAAO,CAAC;YAC5C,SAAS,EAAE,wBAAwB,CAAC,OAAO,CAAC;YAC5C,cAAc,EAAE,6BAA6B,CAAC,OAAO,CAAC;YACtD,cAAc,EAAE,kCAAkC,CAAC,OAAO,CAAC;YAC3D,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC;YACxC,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC;YACxC,YAAY,EAAE,2BAA2B,CAAC,OAAO,CAAC;YAClD,kBAAkB,EAAE,iCAAiC,CAAC,OAAO,CAAC;YAC9D,gBAAgB,EAAE,+BAA+B,CAAC,OAAO,CAAC;SAC3D;QACD,oBAAoB,EAAE,iCAAiC,CAAC,OAAO,CAAC;QAChE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC;QACtC,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACrD,iBAAiB,EAAE,8BAA8B,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC1C,4BAA4B,EAAE,yCAAyC,CAAC,OAAO,CAAC;QAChF,eAAe,EAAE,4BAA4B,CAAC,OAAO,CAAC;QACtD,eAAe,EAAE,4BAA4B,CAAC,OAAO,CAAC;QACtD,QAAQ,EAAE,qBAAqB,CAAC,OAAO,CAAC;QACxC,SAAS,EAAE,wBAAwB,CAAC,OAAO,CAAC;QAC5C,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;QAC/B,kBAAkB,EAAE,0BAA0B,CAAC,OAAO,CAAC;QACvD,oBAAoB,EAAE,0BAA0B,CAAC,OAAO,CAAC;QACzD,6BAA6B,EAAE,mCAAmC,CAAC,OAAO,CAAC;QAC3E,+BAA+B,EAAE,mCAAmC,CAAC,OAAO,CAAC;KAC9E;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE,+BAA+B,CAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,0BAA0B,CAAC,OAAO,CAAC;QAC9C,gCAAgC,EAC9B,+CAA+C,CAAC,OAAO,CAAC;QAC1D,0BAA0B,EAAE,0BAA0B,CAAC,OAAO,CAAC;QAC/D,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACrD,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC;QACrD,mBAAmB,EAAE,yBAAyB,CAAC,OAAO,CAAC;QACvD,iBAAiB,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACpD;CACF,CAAC,CAAA"}

package/dist/esm/authz/policies/project/canLoad.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canLoad.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAGrD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AAGnC,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,CAAA;AAEjC,KAAK,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,gCAAgC,CAC1C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CA2B9E,CAAA"}
+{"version":3,"file":"canLoad.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAGrD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AAGnC,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,CAAA;AAEjC,KAAK,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,gCAAgC,CAC1C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CA8B9E,CAAA"}

package/dist/esm/authz/policies/project/canLoad.js

@@ -4,6 +4,9 @@ import { ensureImplicitProjectMemberWithWriteAccessFragment } from '../../fragme
 import { ProjectNotEnoughPermissionsError } from '../../domain/authErrors.js';
 import { checkIfAdminOverrideEnabledFragment } from '../../fragments/server.js';
 export const canLoadPolicy = (loaders) => async ({ userId, projectId }) => {
+    if (publiclyLoadableProjects.includes(projectId)) {
+        return ok();
+    }
     const hasAdminAccess = await checkIfAdminOverrideEnabledFragment(loaders)({
         userId
     });
@@ -24,4 +27,7 @@ export const canLoadPolicy = (loaders) => async ({ userId, projectId }) => {
     }
     return ok();
 };
+const publiclyLoadableProjects = [
+    '8be1007be1' // Demo models
+];
 //# sourceMappingURL=canLoad.js.map

package/dist/esm/authz/policies/project/canLoad.js.map

@@ -1 +1 @@
-{"version":3,"file":"canLoad.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,kDAAkD,EAAE,MAAM,6BAA6B,CAAA;AAEhG,OAAO,EAEL,gCAAgC,EAQjC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAA;AA2B/E,MAAM,CAAC,MAAM,aAAa,GACxB,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,kDAAkD,CACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;gBACnC,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CACH,CAAA;QACH,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}
+{"version":3,"file":"canLoad.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,kDAAkD,EAAE,MAAM,6BAA6B,CAAA;AAEhG,OAAO,EAEL,gCAAgC,EAQjC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAA;AA2B/E,MAAM,CAAC,MAAM,aAAa,GACxB,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,IAAI,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,kDAAkD,CACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;gBACnC,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CACH,CAAA;QACH,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA;AAEH,MAAM,wBAAwB,GAAG;IAC/B,YAAY,CAAC,cAAc;CAC5B,CAAA"}

package/dist/esm/authz/policies/project/canReadAccIntegrationSettings.d.ts

@@ -0,0 +1,10 @@
+import { ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, ProjectNotFoundError, ProjectNoAccessError, WorkspaceNoAccessError, WorkspaceSsoSessionNoAccessError, ProjectNotEnoughPermissionsError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, AccIntegrationNotEnabledError } from '../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../domain/context.js';
+import { Loaders } from '../../domain/loaders.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProject | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole | typeof Loaders.getWorkspacePlan;
+type PolicyArgs = MaybeUserContext & ProjectContext;
+type PolicyErrors = InstanceType<typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotFoundError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof AccIntegrationNotEnabledError>;
+export declare const canReadAccIntegrationSettingsPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canReadAccIntegrationSettings.d.ts.map

package/dist/esm/authz/policies/project/canReadAccIntegrationSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canReadAccIntegrationSettings.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canReadAccIntegrationSettings.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,6BAA6B,EAC9B,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAOrD,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,gBAAgB,CAAA;AAEnC,KAAK,UAAU,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,6BAA6B,CACvC,CAAA;AAED,eAAO,MAAM,mCAAmC,EAAE,UAAU,CAC1D,gBAAgB,EAChB,UAAU,EACV,YAAY,CAgCX,CAAA"}

package/dist/esm/authz/policies/project/canReadAccIntegrationSettings.js

@@ -0,0 +1,31 @@
+import { err, ok } from 'true-myth/result';
+import { WorkspacePlanNoFeatureAccessError, AccIntegrationNotEnabledError } from '../../domain/authErrors.js';
+import { ensureImplicitProjectMemberWithReadAccessFragment } from '../../fragments/projects.js';
+import { isWorkspaceFeatureFlagOn, WorkspaceFeatureFlags } from '../../../workspaces/index.js';
+export const canReadAccIntegrationSettingsPolicy = (loaders) => async ({ userId, projectId }) => {
+    const env = await loaders.getEnv();
+    const project = await loaders.getProject({ projectId });
+    if (!env.FF_ACC_INTEGRATION_ENABLED || !project?.workspaceId) {
+        return err(new AccIntegrationNotEnabledError());
+    }
+    const ensuredProjectRole = await ensureImplicitProjectMemberWithReadAccessFragment(loaders)({
+        userId,
+        projectId
+    });
+    if (ensuredProjectRole.isErr) {
+        return err(ensuredProjectRole.error);
+    }
+    const workspacePlan = await loaders.getWorkspacePlan({
+        workspaceId: project.workspaceId
+    });
+    if (!workspacePlan)
+        return err(new WorkspacePlanNoFeatureAccessError());
+    const canUseFeature = isWorkspaceFeatureFlagOn({
+        workspaceFeatureFlags: workspacePlan.featureFlags,
+        feature: WorkspaceFeatureFlags.accIntegration
+    });
+    if (!canUseFeature)
+        return err(new WorkspacePlanNoFeatureAccessError());
+    return ok();
+};
+//# sourceMappingURL=canReadAccIntegrationSettings.js.map

package/dist/esm/authz/policies/project/canReadAccIntegrationSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canReadAccIntegrationSettings.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canReadAccIntegrationSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAUL,iCAAiC,EACjC,6BAA6B,EAC9B,MAAM,4BAA4B,CAAA;AAInC,OAAO,EAAE,iDAAiD,EAAE,MAAM,6BAA6B,CAAA;AAC/F,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,8BAA8B,CAAA;AA8BrC,MAAM,CAAC,MAAM,mCAAmC,GAK9C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7D,OAAO,GAAG,CAAC,IAAI,6BAA6B,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,iDAAiD,CAChF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;KACV,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;QACnD,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAA;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;IACvE,MAAM,aAAa,GAAG,wBAAwB,CAAC;QAC7C,qBAAqB,EAAE,aAAa,CAAC,YAAY;QACjD,OAAO,EAAE,qBAAqB,CAAC,cAAc;KAC9C,CAAC,CAAA;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;IAEvE,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/project/canUpdateEmbedTokens.d.ts

@@ -0,0 +1,10 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspacePlanNoFeatureAccessError, WorkspaceNotEnoughPermissionsError, WorkspaceSsoSessionNoAccessError } from '../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../domain/context.js';
+import { Loaders } from '../../domain/loaders.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getProject | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole | typeof Loaders.getWorkspacePlan;
+type PolicyArgs = MaybeUserContext & ProjectContext;
+type PolicyErrors = InstanceType<typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotFoundError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError>;
+export declare const canUpdateEmbedTokensPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canUpdateEmbedTokens.d.ts.map

package/dist/esm/authz/policies/project/canUpdateEmbedTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canUpdateEmbedTokens.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canUpdateEmbedTokens.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAOrD,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,gBAAgB,CAAA;AAEnC,KAAK,UAAU,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,CAC3C,CAAA;AAED,eAAO,MAAM,0BAA0B,EAAE,UAAU,CACjD,gBAAgB,EAChB,UAAU,EACV,YAAY,CAiDX,CAAA"}

package/dist/esm/authz/policies/project/canUpdateEmbedTokens.js

@@ -0,0 +1,48 @@
+import { err, ok } from 'true-myth/result';
+import { WorkspacePlanNoFeatureAccessError } from '../../domain/authErrors.js';
+import { ensureImplicitProjectMemberWithWriteAccessFragment, ensureMinimumProjectRoleFragment } from '../../fragments/projects.js';
+import { Roles } from '../../../core/constants.js';
+export const canUpdateEmbedTokensPolicy = (loaders) => async ({ userId, projectId }) => {
+    const env = await loaders.getEnv();
+    const project = await loaders.getProject({ projectId });
+    if (!!project?.workspaceId && env.FF_WORKSPACES_MODULE_ENABLED) {
+        // Ensure owner-level access and valid plan
+        const ensuredProjectRole = await ensureImplicitProjectMemberWithWriteAccessFragment(loaders)({
+            userId,
+            projectId,
+            role: Roles.Stream.Owner
+        });
+        if (ensuredProjectRole.isErr) {
+            return err(ensuredProjectRole.error);
+        }
+        const plan = await loaders.getWorkspacePlan({ workspaceId: project.workspaceId });
+        switch (plan?.name) {
+            case 'academia':
+            case 'enterprise':
+            case 'pro':
+            case 'proUnlimited':
+            case 'proUnlimitedInvoiced':
+            case 'team':
+            case 'teamUnlimited':
+            case 'teamUnlimitedInvoiced':
+            case 'unlimited':
+                return ok();
+            case 'free':
+            default:
+                return err(new WorkspacePlanNoFeatureAccessError());
+        }
+    }
+    else {
+        // Ensure project owner
+        const isProjectOwner = await ensureMinimumProjectRoleFragment(loaders)({
+            userId: userId,
+            projectId,
+            role: Roles.Stream.Owner
+        });
+        if (isProjectOwner.isErr) {
+            return err(isProjectOwner.error);
+        }
+        return ok();
+    }
+};
+//# sourceMappingURL=canUpdateEmbedTokens.js.map

package/dist/esm/authz/policies/project/canUpdateEmbedTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canUpdateEmbedTokens.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canUpdateEmbedTokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAQL,iCAAiC,EAGlC,MAAM,4BAA4B,CAAA;AAInC,OAAO,EACL,kDAAkD,EAClD,gCAAgC,EACjC,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AA4BlD,MAAM,CAAC,MAAM,0BAA0B,GAKrC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC,4BAA4B,EAAE,CAAC;QAC/D,2CAA2C;QAC3C,MAAM,kBAAkB,GACtB,MAAM,kDAAkD,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM;YACN,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACJ,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAEjF,QAAQ,IAAI,EAAE,IAAI,EAAE,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,YAAY,CAAC;YAClB,KAAK,KAAK,CAAC;YACX,KAAK,cAAc,CAAC;YACpB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,MAAM,CAAC;YACZ,KAAK,eAAe,CAAC;YACrB,KAAK,uBAAuB,CAAC;YAC7B,KAAK,WAAW;gBACd,OAAO,EAAE,EAAE,CAAA;YACb,KAAK,MAAM,CAAC;YACZ;gBACE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,uBAAuB;QACvB,MAAM,cAAc,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,EAAE,MAAO;YACf,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACF,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;QAED,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canCreate.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canCreateSavedViewPolicy: AuthPolicy<typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext, InstanceType<typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof WorkspaceReadOnlyError | typeof WorkspacesNotEnabledError>>;
+//# sourceMappingURL=canCreate.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreate.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreate.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAOxD,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAC7C,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,EACjC,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,sBAAsB,GAC7B,OAAO,yBAAyB,CACnC,CA+BA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canCreate.js

@@ -0,0 +1,27 @@
+import { Roles } from '../../../../core/constants.js';
+import { WorkspacePlanFeatures } from '../../../../workspaces/index.js';
+import { ProjectNotEnoughPermissionsError } from '../../../domain/authErrors.js';
+import { ensureCanUseProjectWorkspacePlanFeatureFragment, ensureImplicitProjectMemberWithWriteAccessFragment } from '../../../fragments/projects.js';
+import { err, ok } from 'true-myth/result';
+export const canCreateSavedViewPolicy = (loaders) => async ({ userId, projectId }) => {
+    const canUseSavedViews = await ensureCanUseProjectWorkspacePlanFeatureFragment(loaders)({
+        projectId,
+        feature: WorkspacePlanFeatures.SavedViews
+    });
+    if (canUseSavedViews.isErr)
+        return err(canUseSavedViews.error);
+    const ensuredWriteAccess = await ensureImplicitProjectMemberWithWriteAccessFragment(loaders)({
+        userId,
+        projectId,
+        role: Roles.Stream.Contributor
+    });
+    if (ensuredWriteAccess.isErr) {
+        if (ensuredWriteAccess.error.code === 'ProjectNotEnoughPermissions')
+            return err(new ProjectNotEnoughPermissionsError({
+                message: "Your role on this project doesn't give you permission to save views. You need the Can edit or Project owner role."
+            }));
+        return err(ensuredWriteAccess.error);
+    }
+    return ok();
+};
+//# sourceMappingURL=canCreate.js.map

package/dist/esm/authz/policies/project/savedViews/canCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreate.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,OAAO,EAEL,gCAAgC,EAWjC,MAAM,+BAA+B,CAAA;AAItC,OAAO,EACL,+CAA+C,EAC/C,kDAAkD,EACnD,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAE1C,MAAM,CAAC,MAAM,wBAAwB,GA0BnC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,gBAAgB,GAAG,MAAM,+CAA+C,CAC5E,OAAO,CACR,CAAC;QACA,SAAS;QACT,OAAO,EAAE,qBAAqB,CAAC,UAAU;KAC1C,CAAC,CAAA;IACF,IAAI,gBAAgB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAE9D,MAAM,kBAAkB,GAAG,MAAM,kDAAkD,CACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,GAAG,CACR,IAAI,gCAAgC,CAAC;gBACnC,OAAO,EACL,mHAAmH;aACtH,CAAC,CACH,CAAA;QACH,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canCreateSavedViewGroupToken.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewGroupNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, UngroupedSavedViewGroupLockError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewGroupContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canCreateSavedViewGroupTokenPolicy: AuthPolicy<typeof Loaders.getSavedViewGroup | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewGroupContext, InstanceType<typeof SavedViewGroupNotFoundError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError | typeof UngroupedSavedViewGroupLockError>>;
+//# sourceMappingURL=canCreateSavedViewGroupToken.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canCreateSavedViewGroupToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateSavedViewGroupToken.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreateSavedViewGroupToken.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAQxD,eAAO,MAAM,kCAAkC,EAAE,UAAU,CACvD,OAAO,OAAO,CAAC,iBAAiB,GAChC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,qBAAqB,EACzD,YAAY,CACR,OAAO,2BAA2B,GAClC,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,GACxC,OAAO,gCAAgC,CAC1C,CA0DA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canCreateSavedViewGroupToken.js

@@ -0,0 +1,57 @@
+import { Roles } from '../../../../core/constants.js';
+import { WorkspacePlanNoFeatureAccessError } from '../../../domain/authErrors.js';
+import { ensureImplicitProjectMemberWithWriteAccessFragment, ensureMinimumProjectRoleFragment } from '../../../fragments/projects.js';
+import { ensureCanAccessSavedViewGroupFragment } from '../../../fragments/savedViews.js';
+import { err, ok } from 'true-myth/result';
+export const canCreateSavedViewGroupTokenPolicy = (loaders) => async ({ userId, projectId, savedViewGroupId }) => {
+    const canUseSavedViews = await ensureCanAccessSavedViewGroupFragment(loaders)({
+        userId,
+        projectId,
+        savedViewGroupId,
+        access: 'write'
+    });
+    if (canUseSavedViews.isErr)
+        return err(canUseSavedViews.error);
+    const env = await loaders.getEnv();
+    const project = await loaders.getProject({ projectId });
+    if (!!project?.workspaceId && env.FF_WORKSPACES_MODULE_ENABLED) {
+        // Ensure owner-level access and valid plan
+        const ensuredProjectRole = await ensureImplicitProjectMemberWithWriteAccessFragment(loaders)({
+            userId,
+            projectId,
+            role: Roles.Stream.Owner
+        });
+        if (ensuredProjectRole.isErr) {
+            return err(ensuredProjectRole.error);
+        }
+        const plan = await loaders.getWorkspacePlan({ workspaceId: project.workspaceId });
+        switch (plan?.name) {
+            case 'academia':
+            case 'enterprise':
+            case 'pro':
+            case 'proUnlimited':
+            case 'proUnlimitedInvoiced':
+            case 'team':
+            case 'teamUnlimited':
+            case 'teamUnlimitedInvoiced':
+            case 'unlimited':
+                return ok();
+            case 'free':
+            default:
+                return err(new WorkspacePlanNoFeatureAccessError());
+        }
+    }
+    else {
+        // Ensure project owner
+        const isProjectOwner = await ensureMinimumProjectRoleFragment(loaders)({
+            userId: userId,
+            projectId,
+            role: Roles.Stream.Owner
+        });
+        if (isProjectOwner.isErr) {
+            return err(isProjectOwner.error);
+        }
+        return ok();
+    }
+};
+//# sourceMappingURL=canCreateSavedViewGroupToken.js.map

package/dist/esm/authz/policies/project/savedViews/canCreateSavedViewGroupToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateSavedViewGroupToken.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreateSavedViewGroupToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AACrD,OAAO,EAWL,iCAAiC,EAIlC,MAAM,+BAA+B,CAAA;AAQtC,OAAO,EACL,kDAAkD,EAClD,gCAAgC,EACjC,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAA;AACxF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAE1C,MAAM,CAAC,MAAM,kCAAkC,GA6B7C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,EAAE;IAChD,MAAM,gBAAgB,GAAG,MAAM,qCAAqC,CAAC,OAAO,CAAC,CAAC;QAC5E,MAAM;QACN,SAAS;QACT,gBAAgB;QAChB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAA;IAEF,IAAI,gBAAgB,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC,4BAA4B,EAAE,CAAC;QAC/D,2CAA2C;QAC3C,MAAM,kBAAkB,GACtB,MAAM,kDAAkD,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM;YACN,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACJ,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAEjF,QAAQ,IAAI,EAAE,IAAI,EAAE,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,YAAY,CAAC;YAClB,KAAK,KAAK,CAAC;YACX,KAAK,cAAc,CAAC;YACpB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,MAAM,CAAC;YACZ,KAAK,eAAe,CAAC;YACrB,KAAK,uBAAuB,CAAC;YAC7B,KAAK,WAAW;gBACd,OAAO,EAAE,EAAE,CAAA;YACb,KAAK,MAAM,CAAC;YACZ;gBACE,OAAO,GAAG,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,uBAAuB;QACvB,MAAM,cAAc,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,EAAE,MAAO;YACf,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACF,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;QAED,OAAO,EAAE,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canEditDescription.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canEditSavedViewDescriptionPolicy: AuthPolicy<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
+//# sourceMappingURL=canEditDescription.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canEditDescription.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditDescription.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canEditDescription.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAMxD,eAAO,MAAM,iCAAiC,EAAE,UAAU,CACtD,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,EACpD,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAUA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canEditDescription.js

@@ -0,0 +1,10 @@
+import { ensureCanAccessSavedViewFragment, WriteTypes } from '../../../fragments/savedViews.js';
+export const canEditSavedViewDescriptionPolicy = (loaders) => async ({ userId, projectId, savedViewId }) => {
+    return await ensureCanAccessSavedViewFragment(loaders)({
+        userId,
+        projectId,
+        savedViewId,
+        access: WriteTypes.EditDescription
+    });
+};
+//# sourceMappingURL=canEditDescription.js.map

package/dist/esm/authz/policies/project/savedViews/canEditDescription.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditDescription.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canEditDescription.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,gCAAgC,EAChC,UAAU,EACX,MAAM,kCAAkC,CAAA;AAEzC,MAAM,CAAC,MAAM,iCAAiC,GA8B5C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;IAC3C,OAAO,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM;QACN,SAAS;QACT,WAAW;QACX,MAAM,EAAE,UAAU,CAAC,eAAe;KACnC,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canEditTitle.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canEditSavedViewTitlePolicy: AuthPolicy<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
+//# sourceMappingURL=canEditTitle.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canEditTitle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditTitle.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canEditTitle.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAMxD,eAAO,MAAM,2BAA2B,EAAE,UAAU,CAChD,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,EACpD,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAUA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canEditTitle.js

@@ -0,0 +1,10 @@
+import { ensureCanAccessSavedViewFragment, WriteTypes } from '../../../fragments/savedViews.js';
+export const canEditSavedViewTitlePolicy = (loaders) => async ({ userId, projectId, savedViewId }) => {
+    return await ensureCanAccessSavedViewFragment(loaders)({
+        userId,
+        projectId,
+        savedViewId,
+        access: WriteTypes.EditTitle
+    });
+};
+//# sourceMappingURL=canEditTitle.js.map

package/dist/esm/authz/policies/project/savedViews/canEditTitle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canEditTitle.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canEditTitle.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,gCAAgC,EAChC,UAAU,EACX,MAAM,kCAAkC,CAAA;AAEzC,MAAM,CAAC,MAAM,2BAA2B,GA8BtC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;IAC3C,OAAO,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM;QACN,SAAS;QACT,WAAW;QACX,MAAM,EAAE,UAAU,CAAC,SAAS;KAC7B,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canMove.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canMoveSavedViewPolicy: AuthPolicy<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
+//# sourceMappingURL=canMove.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canMove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canMove.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canMove.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAMxD,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAC3C,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,EACpD,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAUA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canMove.js

@@ -0,0 +1,10 @@
+import { ensureCanAccessSavedViewFragment, WriteTypes } from '../../../fragments/savedViews.js';
+export const canMoveSavedViewPolicy = (loaders) => async ({ userId, projectId, savedViewId }) => {
+    return await ensureCanAccessSavedViewFragment(loaders)({
+        userId,
+        projectId,
+        savedViewId,
+        access: WriteTypes.MoveView
+    });
+};
+//# sourceMappingURL=canMove.js.map

package/dist/esm/authz/policies/project/savedViews/canMove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canMove.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canMove.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,gCAAgC,EAChC,UAAU,EACX,MAAM,kCAAkC,CAAA;AAEzC,MAAM,CAAC,MAAM,sBAAsB,GA8BjC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;IAC3C,OAAO,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM;QACN,SAAS;QACT,WAAW;QACX,MAAM,EAAE,UAAU,CAAC,QAAQ;KAC5B,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canRead.d.ts

@@ -0,0 +1,11 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canReadSavedViewPolicy: AuthPolicy<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext & {
+    /**
+     * In some cases we want to just ignore a view being non-existant, instead of throwing
+     */
+    allowNonExistent?: boolean;
+}, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError>>;
+//# sourceMappingURL=canRead.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canRead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canRead.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canRead.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAGxD,eAAO,MAAM,sBAAsB,EAAE,UAAU,CAC3C,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GACd,cAAc,GACd,gBAAgB,GAAG;IACjB;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,EACH,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,CAC3C,CAWA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canRead.js

@@ -0,0 +1,11 @@
+import { ensureCanAccessSavedViewFragment } from '../../../fragments/savedViews.js';
+export const canReadSavedViewPolicy = (loaders) => async ({ userId, projectId, savedViewId, allowNonExistent }) => {
+    return await ensureCanAccessSavedViewFragment(loaders)({
+        userId,
+        projectId,
+        savedViewId,
+        access: 'read',
+        allowNonExistent
+    });
+};
+//# sourceMappingURL=canRead.js.map

package/dist/esm/authz/policies/project/savedViews/canRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canRead.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canRead.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAA;AAEnF,MAAM,CAAC,MAAM,sBAAsB,GAqCjC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,EAAE;IAC7D,OAAO,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM;QACN,SAAS;QACT,WAAW;QACX,MAAM,EAAE,MAAM;QACd,gBAAgB;KACjB,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canSetAsHomeView.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewInvalidUpdateError, SavedViewNoAccessError, SavedViewNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canSetSavedViewAsHomeViewPolicy: AuthPolicy<typeof Loaders.getSavedView | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewContext, InstanceType<typeof SavedViewNotFoundError | typeof SavedViewNoAccessError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError | typeof SavedViewInvalidUpdateError>>;
+//# sourceMappingURL=canSetAsHomeView.d.ts.map

package/dist/esm/authz/policies/project/savedViews/canSetAsHomeView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canSetAsHomeView.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canSetAsHomeView.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAQxD,eAAO,MAAM,+BAA+B,EAAE,UAAU,CACpD,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,gBAAgB,EACpD,YAAY,CACR,OAAO,sBAAsB,GAC7B,OAAO,sBAAsB,GAC7B,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,GACxC,OAAO,2BAA2B,CACrC,CA8CA,CAAA"}

package/dist/esm/authz/policies/project/savedViews/canSetAsHomeView.js

@@ -0,0 +1,41 @@
+import { err, ok } from 'true-myth/result';
+import { SavedViewInvalidUpdateError, SavedViewNotFoundError } from '../../../domain/authErrors.js';
+import { ensureCanAccessSavedViewFragment, WriteTypes } from '../../../fragments/savedViews.js';
+import { SavedViewVisibility } from '../../../domain/savedViews/types.js';
+import { isModelResource, resourceBuilder } from '../../../../viewer/helpers/route.js';
+export const canSetSavedViewAsHomeViewPolicy = (loaders) => async ({ userId, projectId, savedViewId }) => {
+    const canDoUpdate = await ensureCanAccessSavedViewFragment(loaders)({
+        userId,
+        projectId,
+        savedViewId,
+        access: WriteTypes.SetHomeView
+    });
+    if (canDoUpdate.isErr) {
+        return err(canDoUpdate.error);
+    }
+    const view = await loaders.getSavedView({
+        projectId,
+        savedViewId
+    });
+    if (!view)
+        return err(new SavedViewNotFoundError());
+    // Must be a shared view to be set as home view
+    const isAuthorOnly = view.visibility === SavedViewVisibility.authorOnly;
+    if (isAuthorOnly) {
+        return err(new SavedViewInvalidUpdateError({
+            message: 'A view must be shared to be set as a home view'
+        }));
+    }
+    // Must not be federated
+    const resourceIds = resourceBuilder().addResources(view.resourceIds);
+    const firstResource = resourceIds.toResources().at(0);
+    const modelResource = firstResource && isModelResource(firstResource) ? firstResource : undefined;
+    const isSingleModelView = resourceIds.length === 1 && modelResource;
+    if (!isSingleModelView) {
+        return err(new SavedViewInvalidUpdateError({
+            message: 'Only single model views can be set as home views'
+        }));
+    }
+    return ok();
+};
+//# sourceMappingURL=canSetAsHomeView.js.map

package/dist/esm/authz/policies/project/savedViews/canSetAsHomeView.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canSetAsHomeView.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canSetAsHomeView.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAIL,2BAA2B,EAE3B,sBAAsB,EAUvB,MAAM,+BAA+B,CAAA;AAQtC,OAAO,EACL,gCAAgC,EAChC,UAAU,EACX,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAEtF,MAAM,CAAC,MAAM,+BAA+B,GA+B1C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;IAC3C,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM;QACN,SAAS;QACT,WAAW;QACX,MAAM,EAAE,UAAU,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;QACtC,SAAS;QACT,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAEnD,+CAA+C;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,KAAK,mBAAmB,CAAC,UAAU,CAAA;IACvE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,GAAG,CACR,IAAI,2BAA2B,CAAC;YAC9B,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CACH,CAAA;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACpE,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACrD,MAAM,aAAa,GACjB,aAAa,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;IAE7E,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAA;IACnE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,GAAG,CACR,IAAI,2BAA2B,CAAC;YAC9B,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,CAAA;AACb,CAAC,CAAA"}