@synchronized-console/shared 2.25.7 → 2.31.14

package/dist/commonjs/authz/policies/dashboard/canRead.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canReadDashboardPolicy = void 0;
+const result_1 = require("true-myth/result");
+const authErrors_js_1 = require("../../domain/authErrors.js");
+const dashboards_js_1 = require("../../fragments/dashboards.js");
+const workspaceRole_js_1 = require("../../checks/workspaceRole.js");
+const constants_js_1 = require("../../../core/constants.js");
+const server_js_1 = require("../../fragments/server.js");
+const canReadDashboardPolicy = (loaders) => async ({ userId, dashboardId }) => {
+    const ensuredServerRole = await (0, server_js_1.ensureMinimumServerRoleFragment)(loaders)({
+        userId,
+        role: constants_js_1.Roles.Server.User
+    });
+    if (ensuredServerRole.isErr)
+        return (0, result_1.err)(ensuredServerRole.error);
+    const isDashboardsEnabled = await (0, dashboards_js_1.ensureDashboardsEnabledFragment)(loaders)({});
+    if (isDashboardsEnabled.isErr)
+        return (0, result_1.err)(isDashboardsEnabled.error);
+    const dashboard = await loaders.getDashboard({ dashboardId });
+    if (!dashboard)
+        return (0, result_1.err)(new authErrors_js_1.DashboardNotFoundError());
+    const { workspaceId } = dashboard;
+    const ensuredFeatureAccess = await (0, dashboards_js_1.ensureWorkspaceDashboardsFeatureAccessFragment)(loaders)({ workspaceId });
+    if (ensuredFeatureAccess.isErr)
+        return (0, result_1.err)(ensuredFeatureAccess.error);
+    const hasAdminAccess = await (0, server_js_1.checkIfAdminOverrideEnabledFragment)(loaders)({
+        userId
+    });
+    if (hasAdminAccess.isOk && hasAdminAccess.value)
+        return (0, result_1.ok)();
+    const isWorkspaceMember = await (0, workspaceRole_js_1.hasMinimumWorkspaceRole)(loaders)({
+        userId: userId,
+        workspaceId,
+        role: constants_js_1.Roles.Workspace.Member
+    });
+    if (!isWorkspaceMember)
+        return (0, result_1.err)(new authErrors_js_1.WorkspaceNotEnoughPermissionsError());
+    return (0, result_1.ok)();
+};
+exports.canReadDashboardPolicy = canReadDashboardPolicy;
+//# sourceMappingURL=canRead.js.map

package/dist/commonjs/authz/policies/dashboard/canRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canRead.js","sourceRoot":"","sources":["../../../../../src/authz/policies/dashboard/canRead.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAG1C,8DAQmC;AAEnC,iEAGsC;AACtC,oEAAuE;AACvE,6DAAkD;AAClD,yDAGkC;AAsB3B,MAAM,sBAAsB,GAKjC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;IAChC,MAAM,iBAAiB,GAAG,MAAM,IAAA,2CAA+B,EAAC,OAAO,CAAC,CAAC;QACvE,MAAM;QACN,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,IAAI;KACxB,CAAC,CAAA;IACF,IAAI,iBAAiB,CAAC,KAAK;QAAE,OAAO,IAAA,YAAG,EAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAChE,MAAM,mBAAmB,GAAG,MAAM,IAAA,+CAA+B,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAA;IAC9E,IAAI,mBAAmB,CAAC,KAAK;QAAE,OAAO,IAAA,YAAG,EAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAA,YAAG,EAAC,IAAI,sCAAsB,EAAE,CAAC,CAAA;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAA;IAEjC,MAAM,oBAAoB,GAAG,MAAM,IAAA,8DAA8C,EAC/E,OAAO,CACR,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAClB,IAAI,oBAAoB,CAAC,KAAK;QAAE,OAAO,IAAA,YAAG,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAEtE,MAAM,cAAc,GAAG,MAAM,IAAA,+CAAmC,EAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK;QAAE,OAAO,IAAA,WAAE,GAAE,CAAA;IAE5D,MAAM,iBAAiB,GAAG,MAAM,IAAA,0CAAuB,EAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,MAAO;QACf,WAAW;QACX,IAAI,EAAE,oBAAK,CAAC,SAAS,CAAC,MAAM;KAC7B,CAAC,CAAA;IACF,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAA,YAAG,EAAC,IAAI,kDAAkC,EAAE,CAAC,CAAA;IAE5E,OAAO,IAAA,WAAE,GAAE,CAAA;AACb,CAAC,CAAA;AAtCU,QAAA,sBAAsB,0BAsChC"}

package/dist/commonjs/authz/policies/index.d.ts

@@ -1,5 +1,18 @@
 import { AllAuthCheckContextLoaders } from '../domain/loaders.js';
 export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders) => {
+    automate: {
+        function: {
+            canRegenerateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").AutomateFunctionContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"AutomateNotEnabled", undefined> | import("../index.js").AuthError<"AutomateFunctionNotFound", undefined> | import("../index.js").AuthError<"AutomateFunctionNotCreator", undefined>>>;
+        };
+    };
+    dashboard: {
+        canCreateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined> | import("../index.js").AuthError<"DashboardNoProjects", undefined> | import("../index.js").AuthError<"DashboardProjectsNotEnoughPermissions", {
+            projectIds: string[];
+        }>>>;
+        canDelete: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined> | import("../index.js").AuthError<"DashboardNotOwner", undefined>>>;
+        canEdit: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined>>>;
+        canRead: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").DashboardContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined> | import("../index.js").AuthError<"DashboardNotFound", undefined>>>;
+    };
     project: {
         automation: {
             canCreate: (args: import("../domain/context.js").ProjectContext & import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
@@ -53,6 +66,37 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
                 workspaceSlug: string;
             }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
         };
+        savedViews: {
+            canCreate: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+            canUpdate: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canUpdateGroup: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewGroupContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewGroupNotFound", undefined> | import("../index.js").AuthError<"UngroupedSavedViewGroupLock", undefined>>>;
+            canCreateToken: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewGroupContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewGroupNotFound", undefined> | import("../index.js").AuthError<"UngroupedSavedViewGroupLock", undefined>>>;
+            canRead: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext & {
+                allowNonExistent?: boolean;
+            }) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canMove: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canEditTitle: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canEditDescription: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined>>>;
+            canSetAsHomeView: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").SavedViewContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+                workspaceSlug: string;
+            }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"SavedViewNotFound", undefined> | import("../index.js").AuthError<"SavedViewNoAccess", undefined> | import("../index.js").AuthError<"SavedViewInvalidUpdate", undefined>>>;
+        };
         canBroadcastActivity: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
@@ -92,6 +136,18 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
         canLoad: (args: import("../domain/context.js").ProjectContext & import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canReadEmbedTokens: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canUpdateEmbedTokens: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canReadAccIntegrationSettings: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"AccIntegrationNotEnabled", undefined>>>;
+        canUpdateAccIntegrationSettings: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+            workspaceSlug: string;
+        }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined> | import("../index.js").AuthError<"AccIntegrationNotEnabled", undefined>>>;
     };
     workspace: {
         canCreateProject: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceLimitsReached", {
@@ -105,12 +161,17 @@ export declare const authPoliciesFactory: (loaders: AllAuthCheckContextLoaders)
         canReceiveProjectsUpdatedMessage: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").ProjectContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"ProjectNotFound", undefined> | import("../index.js").AuthError<"ProjectNoAccess", undefined> | import("../index.js").AuthError<"ProjectNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
-        canUpdateEmbedOptions: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceNoFeatureAccess", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
+        canUseWorkspacePlanFeature: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext & {
+            feature: import("../../index.js").WorkspacePlanFeatures;
+        }) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceReadOnly", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
         canReadMemberEmail: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"WorkspaceNoAccess", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceSsoSessionNoAccess", {
             workspaceSlug: string;
         }> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canCreateWorkspace: (args: import("../domain/context.js").MaybeUserContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacesNotEnabled", undefined> | import("../index.js").AuthError<"UserEligibleForExclusiveWorkspace", undefined> | import("../index.js").AuthError<"ServerNoAccess", undefined> | import("../index.js").AuthError<"ServerNotEnoughPermissions", undefined> | import("../index.js").AuthError<"ServerNoSession", undefined>>>;
+        canCreateDashboards: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"WorkspaceNoEditorSeat", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined>>>;
+        canListDashboards: (args: import("../domain/context.js").MaybeUserContext & import("../domain/context.js").WorkspaceContext) => Promise<import("true-myth").Result<import("true-myth").Unit, import("../index.js").AuthError<"WorkspacePlanNoFeatureAccessError", undefined> | import("../index.js").AuthError<"WorkspaceNotEnoughPermissions", undefined> | import("../index.js").AuthError<"DashboardsNotEnabled", undefined>>>;
     };
 };
 export type AuthPolicies = ReturnType<typeof authPoliciesFactory>;

package/dist/commonjs/authz/policies/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AAiCjE,eAAO,MAAM,mBAAmB,YAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8CrE,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AAoDjE,eAAO,MAAM,mBAAmB,YAAa,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2ErE,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA"}

package/dist/commonjs/authz/policies/index.js

@@ -30,9 +30,39 @@ const canDelete_js_2 = require("./project/canDelete.js");
 const canDelete_js_3 = require("./project/automation/canDelete.js");
 const canPublish_js_1 = require("./project/canPublish.js");
 const canLoad_js_1 = require("./project/canLoad.js");
-const canUpdateEmbedOptions_js_1 = require("./workspace/canUpdateEmbedOptions.js");
 const canReadMemberEmail_js_1 = require("./workspace/canReadMemberEmail.js");
+const canCreateWorkspace_js_1 = require("./workspace/canCreateWorkspace.js");
+const canUseWorkspacePlanFeature_js_1 = require("./workspace/canUseWorkspacePlanFeature.js");
+const canEditFunction_js_1 = require("./automate/function/canEditFunction.js");
+const canUpdateEmbedTokens_js_1 = require("./project/canUpdateEmbedTokens.js");
+const canReadAccIntegrationSettings_js_1 = require("./project/canReadAccIntegrationSettings.js");
+const canCreate_js_5 = require("./project/savedViews/canCreate.js");
+const canUpdate_js_5 = require("./project/savedViews/canUpdate.js");
+const canUpdateGroup_js_1 = require("./project/savedViews/canUpdateGroup.js");
+const canRead_js_3 = require("./project/savedViews/canRead.js");
+const canListDashboards_js_1 = require("./workspace/canListDashboards.js");
+const canDelete_js_4 = require("./dashboard/canDelete.js");
+const canCreateDashboards_js_1 = require("./workspace/canCreateDashboards.js");
+const canCreateToken_js_1 = require("./dashboard/canCreateToken.js");
+const canEdit_js_2 = require("./dashboard/canEdit.js");
+const canRead_js_4 = require("./dashboard/canRead.js");
+const canMove_js_1 = require("./project/savedViews/canMove.js");
+const canEditTitle_js_1 = require("./project/savedViews/canEditTitle.js");
+const canEditDescription_js_1 = require("./project/savedViews/canEditDescription.js");
+const canCreateSavedViewGroupToken_js_1 = require("./project/savedViews/canCreateSavedViewGroupToken.js");
+const canSetAsHomeView_js_1 = require("./project/savedViews/canSetAsHomeView.js");
 const authPoliciesFactory = (loaders) => ({
+    automate: {
+        function: {
+            canRegenerateToken: (0, canEditFunction_js_1.canEditFunctionPolicy)(loaders)
+        }
+    },
+    dashboard: {
+        canCreateToken: (0, canCreateToken_js_1.canCreateDashboardTokenPolicy)(loaders),
+        canDelete: (0, canDelete_js_4.canDeleteDashboardPolicy)(loaders),
+        canEdit: (0, canEdit_js_2.canEditDashboardPolicy)(loaders),
+        canRead: (0, canRead_js_4.canReadDashboardPolicy)(loaders)
+    },
     project: {
         automation: {
             canCreate: (0, canCreate_js_4.canCreateAutomationPolicy)(loaders),
@@ -56,6 +86,17 @@ const authPoliciesFactory = (loaders) => ({
             canReceive: (0, canLoad_js_1.canLoadPolicy)(loaders),
             canRequestRender: (0, canRequestRender_js_1.canRequestProjectVersionRenderPolicy)(loaders)
         },
+        savedViews: {
+            canCreate: (0, canCreate_js_5.canCreateSavedViewPolicy)(loaders),
+            canUpdate: (0, canUpdate_js_5.canUpdateSavedViewPolicy)(loaders),
+            canUpdateGroup: (0, canUpdateGroup_js_1.canUpdateSavedViewGroupPolicy)(loaders),
+            canCreateToken: (0, canCreateSavedViewGroupToken_js_1.canCreateSavedViewGroupTokenPolicy)(loaders),
+            canRead: (0, canRead_js_3.canReadSavedViewPolicy)(loaders),
+            canMove: (0, canMove_js_1.canMoveSavedViewPolicy)(loaders),
+            canEditTitle: (0, canEditTitle_js_1.canEditSavedViewTitlePolicy)(loaders),
+            canEditDescription: (0, canEditDescription_js_1.canEditSavedViewDescriptionPolicy)(loaders),
+            canSetAsHomeView: (0, canSetAsHomeView_js_1.canSetSavedViewAsHomeViewPolicy)(loaders)
+        },
         canBroadcastActivity: (0, canBroadcastActivity_js_1.canBroadcastProjectActivityPolicy)(loaders),
         canRead: (0, canRead_js_1.canReadProjectPolicy)(loaders),
         canMoveToWorkspace: (0, canMoveToWorkspace_js_1.canMoveToWorkspacePolicy)(loaders),
@@ -68,14 +109,21 @@ const authPoliciesFactory = (loaders) => ({
         canLeave: (0, canLeave_js_1.canLeaveProjectPolicy)(loaders),
         canInvite: (0, canInvite_js_2.canInviteToProjectPolicy)(loaders),
         canPublish: (0, canPublish_js_1.canPublishPolicy)(loaders),
-        canLoad: (0, canLoad_js_1.canLoadPolicy)(loaders)
+        canLoad: (0, canLoad_js_1.canLoadPolicy)(loaders),
+        canReadEmbedTokens: (0, canUpdateEmbedTokens_js_1.canUpdateEmbedTokensPolicy)(loaders),
+        canUpdateEmbedTokens: (0, canUpdateEmbedTokens_js_1.canUpdateEmbedTokensPolicy)(loaders),
+        canReadAccIntegrationSettings: (0, canReadAccIntegrationSettings_js_1.canReadAccIntegrationSettingsPolicy)(loaders),
+        canUpdateAccIntegrationSettings: (0, canReadAccIntegrationSettings_js_1.canReadAccIntegrationSettingsPolicy)(loaders)
     },
     workspace: {
         canCreateProject: (0, canCreateWorkspaceProject_js_1.canCreateWorkspaceProjectPolicy)(loaders),
         canInvite: (0, canInvite_js_1.canInviteToWorkspacePolicy)(loaders),
         canReceiveProjectsUpdatedMessage: (0, canReceiveProjectsUpdatedMessage_js_1.canReceiveWorkspaceProjectsUpdatedMessagePolicy)(loaders),
-        canUpdateEmbedOptions: (0, canUpdateEmbedOptions_js_1.canUpdateEmbedOptionsPolicy)(loaders),
-        canReadMemberEmail: (0, canReadMemberEmail_js_1.canReadMemberEmailPolicy)(loaders)
+        canUseWorkspacePlanFeature: (0, canUseWorkspacePlanFeature_js_1.canUseWorkspacePlanFeature)(loaders),
+        canReadMemberEmail: (0, canReadMemberEmail_js_1.canReadMemberEmailPolicy)(loaders),
+        canCreateWorkspace: (0, canCreateWorkspace_js_1.canCreateWorkspacePolicy)(loaders),
+        canCreateDashboards: (0, canCreateDashboards_js_1.canCreateDashboardsPolicy)(loaders),
+        canListDashboards: (0, canListDashboards_js_1.canListDashboardsPolicy)(loaders)
     }
 });
 exports.authPoliciesFactory = authPoliciesFactory;

package/dist/commonjs/authz/policies/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":";;;AACA,2FAA0F;AAC1F,qDAA2D;AAC3D,+DAAmE;AACnE,2EAA0E;AAC1E,yEAA+E;AAC/E,yDAA+D;AAC/D,qEAA2E;AAC3E,qEAA2E;AAC3E,+FAAqG;AACrG,uDAA6D;AAC7D,2DAAqE;AACrE,yDAAiE;AACjE,+EAAqF;AACrF,iEAA8E;AAC9E,mEAAgF;AAChF,6DAA0E;AAC1E,+DAAmE;AACnE,+DAAmE;AACnE,iEAA8E;AAC9E,iEAA8E;AAC9E,+EAA4F;AAC5F,oEAA6E;AAC7E,oEAA6E;AAC7E,gEAAyE;AACzE,yGAAiH;AACjH,yDAA+D;AAC/D,oEAA6E;AAC7E,2DAA0D;AAC1D,qDAAoD;AACpD,mFAAkF;AAClF,6EAA4E;AAErE,MAAM,mBAAmB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;YAC7C,OAAO,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;YACzC,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;YAC7C,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;SAC9C;QACD,KAAK,EAAE;YACL,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;YACxC,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;YACxC,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;SACzC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,UAAU,EAAE,IAAA,8CAA8B,EAAC,OAAO,CAAC;YACnD,OAAO,EAAE,IAAA,wCAA2B,EAAC,OAAO,CAAC;SAC9C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,UAAU,EAAE,IAAA,0BAAa,EAAC,OAAO,CAAC;YAClC,gBAAgB,EAAE,IAAA,0DAAoC,EAAC,OAAO,CAAC;SAChE;QACD,oBAAoB,EAAE,IAAA,2DAAiC,EAAC,OAAO,CAAC;QAChE,OAAO,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QACtC,kBAAkB,EAAE,IAAA,gDAAwB,EAAC,OAAO,CAAC;QACrD,iBAAiB,EAAE,IAAA,qDAA8B,EAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,IAAA,qCAAsB,EAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,IAAA,qCAAsB,EAAC,OAAO,CAAC;QAC1C,4BAA4B,EAAE,IAAA,2EAAyC,EAAC,OAAO,CAAC;QAChF,eAAe,EAAE,IAAA,iDAA4B,EAAC,OAAO,CAAC;QACtD,eAAe,EAAE,IAAA,iDAA4B,EAAC,OAAO,CAAC;QACtD,QAAQ,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QACxC,SAAS,EAAE,IAAA,uCAAwB,EAAC,OAAO,CAAC;QAC5C,UAAU,EAAE,IAAA,gCAAgB,EAAC,OAAO,CAAC;QACrC,OAAO,EAAE,IAAA,0BAAa,EAAC,OAAO,CAAC;KAChC;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE,IAAA,8DAA+B,EAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,IAAA,yCAA0B,EAAC,OAAO,CAAC;QAC9C,gCAAgC,EAC9B,IAAA,qFAA+C,EAAC,OAAO,CAAC;QAC1D,qBAAqB,EAAE,IAAA,sDAA2B,EAAC,OAAO,CAAC;QAC3D,kBAAkB,EAAE,IAAA,gDAAwB,EAAC,OAAO,CAAC;KACtD;CACF,CAAC,CAAA;AA9CW,QAAA,mBAAmB,uBA8C9B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authz/policies/index.ts"],"names":[],"mappings":";;;AACA,2FAA0F;AAC1F,qDAA2D;AAC3D,+DAAmE;AACnE,2EAA0E;AAC1E,yEAA+E;AAC/E,yDAA+D;AAC/D,qEAA2E;AAC3E,qEAA2E;AAC3E,+FAAqG;AACrG,uDAA6D;AAC7D,2DAAqE;AACrE,yDAAiE;AACjE,+EAAqF;AACrF,iEAA8E;AAC9E,mEAAgF;AAChF,6DAA0E;AAC1E,+DAAmE;AACnE,+DAAmE;AACnE,iEAA8E;AAC9E,iEAA8E;AAC9E,+EAA4F;AAC5F,oEAA6E;AAC7E,oEAA6E;AAC7E,gEAAyE;AACzE,yGAAiH;AACjH,yDAA+D;AAC/D,oEAA6E;AAC7E,2DAA0D;AAC1D,qDAAoD;AACpD,6EAA4E;AAC5E,6EAA4E;AAC5E,6FAAsF;AACtF,+EAA8E;AAC9E,+EAA8E;AAC9E,iGAAgG;AAChG,oEAA4E;AAC5E,oEAA4E;AAC5E,8EAAsF;AACtF,gEAAwE;AACxE,2EAA0E;AAC1E,2DAAmE;AACnE,+EAA8E;AAC9E,qEAA6E;AAC7E,uDAA+D;AAC/D,uDAA+D;AAC/D,gEAAwE;AACxE,0EAAkF;AAClF,sFAA8F;AAC9F,0GAAyG;AACzG,kFAA0F;AAEnF,MAAM,mBAAmB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAAC,CAAC;IAC3E,QAAQ,EAAE;QACR,QAAQ,EAAE;YACR,kBAAkB,EAAE,IAAA,0CAAqB,EAAC,OAAO,CAAC;SACnD;KACF;IACD,SAAS,EAAE;QACT,cAAc,EAAE,IAAA,iDAA6B,EAAC,OAAO,CAAC;QACtD,SAAS,EAAE,IAAA,uCAAwB,EAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,IAAA,mCAAsB,EAAC,OAAO,CAAC;QACxC,OAAO,EAAE,IAAA,mCAAsB,EAAC,OAAO,CAAC;KACzC;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;YAC7C,OAAO,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;YACzC,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;YAC7C,SAAS,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;SAC9C;QACD,KAAK,EAAE;YACL,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;YACxC,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;YACxC,SAAS,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;SACzC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,UAAU,EAAE,IAAA,8CAA8B,EAAC,OAAO,CAAC;YACnD,OAAO,EAAE,IAAA,wCAA2B,EAAC,OAAO,CAAC;SAC9C;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,SAAS,EAAE,IAAA,4CAA6B,EAAC,OAAO,CAAC;YACjD,UAAU,EAAE,IAAA,0BAAa,EAAC,OAAO,CAAC;YAClC,gBAAgB,EAAE,IAAA,0DAAoC,EAAC,OAAO,CAAC;SAChE;QACD,UAAU,EAAE;YACV,SAAS,EAAE,IAAA,uCAAwB,EAAC,OAAO,CAAC;YAC5C,SAAS,EAAE,IAAA,uCAAwB,EAAC,OAAO,CAAC;YAC5C,cAAc,EAAE,IAAA,iDAA6B,EAAC,OAAO,CAAC;YACtD,cAAc,EAAE,IAAA,oEAAkC,EAAC,OAAO,CAAC;YAC3D,OAAO,EAAE,IAAA,mCAAsB,EAAC,OAAO,CAAC;YACxC,OAAO,EAAE,IAAA,mCAAsB,EAAC,OAAO,CAAC;YACxC,YAAY,EAAE,IAAA,6CAA2B,EAAC,OAAO,CAAC;YAClD,kBAAkB,EAAE,IAAA,yDAAiC,EAAC,OAAO,CAAC;YAC9D,gBAAgB,EAAE,IAAA,qDAA+B,EAAC,OAAO,CAAC;SAC3D;QACD,oBAAoB,EAAE,IAAA,2DAAiC,EAAC,OAAO,CAAC;QAChE,OAAO,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QACtC,kBAAkB,EAAE,IAAA,gDAAwB,EAAC,OAAO,CAAC;QACrD,iBAAiB,EAAE,IAAA,qDAA8B,EAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,IAAA,qCAAsB,EAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,IAAA,qCAAsB,EAAC,OAAO,CAAC;QAC1C,4BAA4B,EAAE,IAAA,2EAAyC,EAAC,OAAO,CAAC;QAChF,eAAe,EAAE,IAAA,iDAA4B,EAAC,OAAO,CAAC;QACtD,eAAe,EAAE,IAAA,iDAA4B,EAAC,OAAO,CAAC;QACtD,QAAQ,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QACxC,SAAS,EAAE,IAAA,uCAAwB,EAAC,OAAO,CAAC;QAC5C,UAAU,EAAE,IAAA,gCAAgB,EAAC,OAAO,CAAC;QACrC,OAAO,EAAE,IAAA,0BAAa,EAAC,OAAO,CAAC;QAC/B,kBAAkB,EAAE,IAAA,oDAA0B,EAAC,OAAO,CAAC;QACvD,oBAAoB,EAAE,IAAA,oDAA0B,EAAC,OAAO,CAAC;QACzD,6BAA6B,EAAE,IAAA,sEAAmC,EAAC,OAAO,CAAC;QAC3E,+BAA+B,EAAE,IAAA,sEAAmC,EAAC,OAAO,CAAC;KAC9E;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE,IAAA,8DAA+B,EAAC,OAAO,CAAC;QAC1D,SAAS,EAAE,IAAA,yCAA0B,EAAC,OAAO,CAAC;QAC9C,gCAAgC,EAC9B,IAAA,qFAA+C,EAAC,OAAO,CAAC;QAC1D,0BAA0B,EAAE,IAAA,0DAA0B,EAAC,OAAO,CAAC;QAC/D,kBAAkB,EAAE,IAAA,gDAAwB,EAAC,OAAO,CAAC;QACrD,kBAAkB,EAAE,IAAA,gDAAwB,EAAC,OAAO,CAAC;QACrD,mBAAmB,EAAE,IAAA,kDAAyB,EAAC,OAAO,CAAC;QACvD,iBAAiB,EAAE,IAAA,8CAAuB,EAAC,OAAO,CAAC;KACpD;CACF,CAAC,CAAA;AA3EW,QAAA,mBAAmB,uBA2E9B"}

package/dist/commonjs/authz/policies/project/canLoad.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canLoad.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAGrD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AAGnC,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,CAAA;AAEjC,KAAK,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,gCAAgC,CAC1C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CA2B9E,CAAA"}
+{"version":3,"file":"canLoad.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAGrD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AAGnC,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,CAAA;AAEjC,KAAK,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,gCAAgC,CAC1C,CAAA;AAED,eAAO,MAAM,aAAa,EAAE,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,CA8B9E,CAAA"}

package/dist/commonjs/authz/policies/project/canLoad.js

@@ -7,6 +7,9 @@ const projects_js_1 = require("../../fragments/projects.js");
 const authErrors_js_1 = require("../../domain/authErrors.js");
 const server_js_1 = require("../../fragments/server.js");
 const canLoadPolicy = (loaders) => async ({ userId, projectId }) => {
+    if (publiclyLoadableProjects.includes(projectId)) {
+        return (0, result_1.ok)();
+    }
     const hasAdminAccess = await (0, server_js_1.checkIfAdminOverrideEnabledFragment)(loaders)({
         userId
     });
@@ -28,4 +31,7 @@ const canLoadPolicy = (loaders) => async ({ userId, projectId }) => {
     return (0, result_1.ok)();
 };
 exports.canLoadPolicy = canLoadPolicy;
+const publiclyLoadableProjects = [
+    '8be1007be1' // Demo models
+];
 //# sourceMappingURL=canLoad.js.map

package/dist/commonjs/authz/policies/project/canLoad.js.map

@@ -1 +1 @@
-{"version":3,"file":"canLoad.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAG1C,6DAAkD;AAClD,6DAAgG;AAEhG,8DAUmC;AACnC,yDAA+E;AA2BxE,MAAM,aAAa,GACxB,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,cAAc,GAAG,MAAM,IAAA,+CAAmC,EAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,IAAA,WAAE,GAAE,CAAA;IACb,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,IAAA,gEAAkD,EACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,IAAA,YAAG,EACR,IAAI,gDAAgC,CAAC;gBACnC,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CACH,CAAA;QACH,OAAO,IAAA,YAAG,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,IAAA,WAAE,GAAE,CAAA;AACb,CAAC,CAAA;AA3BU,QAAA,aAAa,iBA2BvB"}
+{"version":3,"file":"canLoad.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canLoad.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAG1C,6DAAkD;AAClD,6DAAgG;AAEhG,8DAUmC;AACnC,yDAA+E;AA2BxE,MAAM,aAAa,GACxB,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,IAAI,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,IAAA,WAAE,GAAE,CAAA;IACb,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,IAAA,+CAAmC,EAAC,OAAO,CAAC,CAAC;QACxE,MAAM;KACP,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,IAAA,WAAE,GAAE,CAAA;IACb,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,IAAA,gEAAkD,EACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,IAAA,YAAG,EACR,IAAI,gDAAgC,CAAC;gBACnC,OAAO,EAAE,gEAAgE;aAC1E,CAAC,CACH,CAAA;QACH,OAAO,IAAA,YAAG,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,IAAA,WAAE,GAAE,CAAA;AACb,CAAC,CAAA;AA9BU,QAAA,aAAa,iBA8BvB;AAEH,MAAM,wBAAwB,GAAG;IAC/B,YAAY,CAAC,cAAc;CAC5B,CAAA"}

package/dist/commonjs/authz/policies/project/canReadAccIntegrationSettings.d.ts

@@ -0,0 +1,10 @@
+import { ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, ProjectNotFoundError, ProjectNoAccessError, WorkspaceNoAccessError, WorkspaceSsoSessionNoAccessError, ProjectNotEnoughPermissionsError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, AccIntegrationNotEnabledError } from '../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../domain/context.js';
+import { Loaders } from '../../domain/loaders.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getAdminOverrideEnabled | typeof Loaders.getProject | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole | typeof Loaders.getWorkspacePlan;
+type PolicyArgs = MaybeUserContext & ProjectContext;
+type PolicyErrors = InstanceType<typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotFoundError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof AccIntegrationNotEnabledError>;
+export declare const canReadAccIntegrationSettingsPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canReadAccIntegrationSettings.d.ts.map

package/dist/commonjs/authz/policies/project/canReadAccIntegrationSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canReadAccIntegrationSettings.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canReadAccIntegrationSettings.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,6BAA6B,EAC9B,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAOrD,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,gBAAgB,CAAA;AAEnC,KAAK,UAAU,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,6BAA6B,CACvC,CAAA;AAED,eAAO,MAAM,mCAAmC,EAAE,UAAU,CAC1D,gBAAgB,EAChB,UAAU,EACV,YAAY,CAgCX,CAAA"}

package/dist/commonjs/authz/policies/project/canReadAccIntegrationSettings.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canReadAccIntegrationSettingsPolicy = void 0;
+const result_1 = require("true-myth/result");
+const authErrors_js_1 = require("../../domain/authErrors.js");
+const projects_js_1 = require("../../fragments/projects.js");
+const index_js_1 = require("../../../workspaces/index.js");
+const canReadAccIntegrationSettingsPolicy = (loaders) => async ({ userId, projectId }) => {
+    const env = await loaders.getEnv();
+    const project = await loaders.getProject({ projectId });
+    if (!env.FF_ACC_INTEGRATION_ENABLED || !project?.workspaceId) {
+        return (0, result_1.err)(new authErrors_js_1.AccIntegrationNotEnabledError());
+    }
+    const ensuredProjectRole = await (0, projects_js_1.ensureImplicitProjectMemberWithReadAccessFragment)(loaders)({
+        userId,
+        projectId
+    });
+    if (ensuredProjectRole.isErr) {
+        return (0, result_1.err)(ensuredProjectRole.error);
+    }
+    const workspacePlan = await loaders.getWorkspacePlan({
+        workspaceId: project.workspaceId
+    });
+    if (!workspacePlan)
+        return (0, result_1.err)(new authErrors_js_1.WorkspacePlanNoFeatureAccessError());
+    const canUseFeature = (0, index_js_1.isWorkspaceFeatureFlagOn)({
+        workspaceFeatureFlags: workspacePlan.featureFlags,
+        feature: index_js_1.WorkspaceFeatureFlags.accIntegration
+    });
+    if (!canUseFeature)
+        return (0, result_1.err)(new authErrors_js_1.WorkspacePlanNoFeatureAccessError());
+    return (0, result_1.ok)();
+};
+exports.canReadAccIntegrationSettingsPolicy = canReadAccIntegrationSettingsPolicy;
+//# sourceMappingURL=canReadAccIntegrationSettings.js.map

package/dist/commonjs/authz/policies/project/canReadAccIntegrationSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canReadAccIntegrationSettings.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canReadAccIntegrationSettings.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAC1C,8DAYmC;AAInC,6DAA+F;AAC/F,2DAGqC;AA8B9B,MAAM,mCAAmC,GAK9C,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7D,OAAO,IAAA,YAAG,EAAC,IAAI,6CAA6B,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,IAAA,+DAAiD,EAChF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;KACV,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,IAAA,YAAG,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;QACnD,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAA;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAA,YAAG,EAAC,IAAI,iDAAiC,EAAE,CAAC,CAAA;IACvE,MAAM,aAAa,GAAG,IAAA,mCAAwB,EAAC;QAC7C,qBAAqB,EAAE,aAAa,CAAC,YAAY;QACjD,OAAO,EAAE,gCAAqB,CAAC,cAAc;KAC9C,CAAC,CAAA;IACF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAA,YAAG,EAAC,IAAI,iDAAiC,EAAE,CAAC,CAAA;IAEvE,OAAO,IAAA,WAAE,GAAE,CAAA;AACb,CAAC,CAAA;AAnCU,QAAA,mCAAmC,uCAmC7C"}

package/dist/commonjs/authz/policies/project/canUpdateEmbedTokens.d.ts

@@ -0,0 +1,10 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspacePlanNoFeatureAccessError, WorkspaceNotEnoughPermissionsError, WorkspaceSsoSessionNoAccessError } from '../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../domain/context.js';
+import { Loaders } from '../../domain/loaders.js';
+import { AuthPolicy } from '../../domain/policies.js';
+type PolicyLoaderKeys = typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getProject | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole | typeof Loaders.getWorkspacePlan;
+type PolicyArgs = MaybeUserContext & ProjectContext;
+type PolicyErrors = InstanceType<typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotFoundError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError>;
+export declare const canUpdateEmbedTokensPolicy: AuthPolicy<PolicyLoaderKeys, PolicyArgs, PolicyErrors>;
+export {};
+//# sourceMappingURL=canUpdateEmbedTokens.d.ts.map

package/dist/commonjs/authz/policies/project/canUpdateEmbedTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canUpdateEmbedTokens.d.ts","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canUpdateEmbedTokens.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAOrD,KAAK,gBAAgB,GACjB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,GAC7B,OAAO,OAAO,CAAC,gBAAgB,CAAA;AAEnC,KAAK,UAAU,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAEnD,KAAK,YAAY,GAAG,YAAY,CAC5B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,+BAA+B,GACtC,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,CAC3C,CAAA;AAED,eAAO,MAAM,0BAA0B,EAAE,UAAU,CACjD,gBAAgB,EAChB,UAAU,EACV,YAAY,CAiDX,CAAA"}

package/dist/commonjs/authz/policies/project/canUpdateEmbedTokens.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canUpdateEmbedTokensPolicy = void 0;
+const result_1 = require("true-myth/result");
+const authErrors_js_1 = require("../../domain/authErrors.js");
+const projects_js_1 = require("../../fragments/projects.js");
+const constants_js_1 = require("../../../core/constants.js");
+const canUpdateEmbedTokensPolicy = (loaders) => async ({ userId, projectId }) => {
+    const env = await loaders.getEnv();
+    const project = await loaders.getProject({ projectId });
+    if (!!project?.workspaceId && env.FF_WORKSPACES_MODULE_ENABLED) {
+        // Ensure owner-level access and valid plan
+        const ensuredProjectRole = await (0, projects_js_1.ensureImplicitProjectMemberWithWriteAccessFragment)(loaders)({
+            userId,
+            projectId,
+            role: constants_js_1.Roles.Stream.Owner
+        });
+        if (ensuredProjectRole.isErr) {
+            return (0, result_1.err)(ensuredProjectRole.error);
+        }
+        const plan = await loaders.getWorkspacePlan({ workspaceId: project.workspaceId });
+        switch (plan?.name) {
+            case 'academia':
+            case 'enterprise':
+            case 'pro':
+            case 'proUnlimited':
+            case 'proUnlimitedInvoiced':
+            case 'team':
+            case 'teamUnlimited':
+            case 'teamUnlimitedInvoiced':
+            case 'unlimited':
+                return (0, result_1.ok)();
+            case 'free':
+            default:
+                return (0, result_1.err)(new authErrors_js_1.WorkspacePlanNoFeatureAccessError());
+        }
+    }
+    else {
+        // Ensure project owner
+        const isProjectOwner = await (0, projects_js_1.ensureMinimumProjectRoleFragment)(loaders)({
+            userId: userId,
+            projectId,
+            role: constants_js_1.Roles.Stream.Owner
+        });
+        if (isProjectOwner.isErr) {
+            return (0, result_1.err)(isProjectOwner.error);
+        }
+        return (0, result_1.ok)();
+    }
+};
+exports.canUpdateEmbedTokensPolicy = canUpdateEmbedTokensPolicy;
+//# sourceMappingURL=canUpdateEmbedTokens.js.map

package/dist/commonjs/authz/policies/project/canUpdateEmbedTokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canUpdateEmbedTokens.js","sourceRoot":"","sources":["../../../../../src/authz/policies/project/canUpdateEmbedTokens.ts"],"names":[],"mappings":";;;AAAA,6CAA0C;AAC1C,8DAWmC;AAInC,6DAGoC;AACpC,6DAAkD;AA4B3C,MAAM,0BAA0B,GAKrC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAA;IAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,GAAG,CAAC,4BAA4B,EAAE,CAAC;QAC/D,2CAA2C;QAC3C,MAAM,kBAAkB,GACtB,MAAM,IAAA,gEAAkD,EAAC,OAAO,CAAC,CAAC;YAChE,MAAM;YACN,SAAS;YACT,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACJ,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,IAAA,YAAG,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;QAEjF,QAAQ,IAAI,EAAE,IAAI,EAAE,CAAC;YACnB,KAAK,UAAU,CAAC;YAChB,KAAK,YAAY,CAAC;YAClB,KAAK,KAAK,CAAC;YACX,KAAK,cAAc,CAAC;YACpB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,MAAM,CAAC;YACZ,KAAK,eAAe,CAAC;YACrB,KAAK,uBAAuB,CAAC;YAC7B,KAAK,WAAW;gBACd,OAAO,IAAA,WAAE,GAAE,CAAA;YACb,KAAK,MAAM,CAAC;YACZ;gBACE,OAAO,IAAA,YAAG,EAAC,IAAI,iDAAiC,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,uBAAuB;QACvB,MAAM,cAAc,GAAG,MAAM,IAAA,8CAAgC,EAAC,OAAO,CAAC,CAAC;YACrE,MAAM,EAAE,MAAO;YACf,SAAS;YACT,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,KAAK;SACzB,CAAC,CAAA;QACF,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,IAAA,YAAG,EAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QAClC,CAAC;QAED,OAAO,IAAA,WAAE,GAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AApDU,QAAA,0BAA0B,8BAoDpC"}

package/dist/commonjs/authz/policies/project/savedViews/canCreate.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canCreateSavedViewPolicy: AuthPolicy<typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext, InstanceType<typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacePlanNoFeatureAccessError | typeof WorkspaceReadOnlyError | typeof WorkspacesNotEnabledError>>;
+//# sourceMappingURL=canCreate.d.ts.map

package/dist/commonjs/authz/policies/project/savedViews/canCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreate.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreate.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAOxD,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAC7C,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,EACjC,YAAY,CACR,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,iCAAiC,GACxC,OAAO,sBAAsB,GAC7B,OAAO,yBAAyB,CACnC,CA+BA,CAAA"}

package/dist/commonjs/authz/policies/project/savedViews/canCreate.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canCreateSavedViewPolicy = void 0;
+const constants_js_1 = require("../../../../core/constants.js");
+const index_js_1 = require("../../../../workspaces/index.js");
+const authErrors_js_1 = require("../../../domain/authErrors.js");
+const projects_js_1 = require("../../../fragments/projects.js");
+const result_1 = require("true-myth/result");
+const canCreateSavedViewPolicy = (loaders) => async ({ userId, projectId }) => {
+    const canUseSavedViews = await (0, projects_js_1.ensureCanUseProjectWorkspacePlanFeatureFragment)(loaders)({
+        projectId,
+        feature: index_js_1.WorkspacePlanFeatures.SavedViews
+    });
+    if (canUseSavedViews.isErr)
+        return (0, result_1.err)(canUseSavedViews.error);
+    const ensuredWriteAccess = await (0, projects_js_1.ensureImplicitProjectMemberWithWriteAccessFragment)(loaders)({
+        userId,
+        projectId,
+        role: constants_js_1.Roles.Stream.Contributor
+    });
+    if (ensuredWriteAccess.isErr) {
+        if (ensuredWriteAccess.error.code === 'ProjectNotEnoughPermissions')
+            return (0, result_1.err)(new authErrors_js_1.ProjectNotEnoughPermissionsError({
+                message: "Your role on this project doesn't give you permission to save views. You need the Can edit or Project owner role."
+            }));
+        return (0, result_1.err)(ensuredWriteAccess.error);
+    }
+    return (0, result_1.ok)();
+};
+exports.canCreateSavedViewPolicy = canCreateSavedViewPolicy;
+//# sourceMappingURL=canCreate.js.map

package/dist/commonjs/authz/policies/project/savedViews/canCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreate.js","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreate.ts"],"names":[],"mappings":";;;AAAA,gEAAqD;AACrD,8DAAuE;AACvE,iEAasC;AAItC,gEAGuC;AACvC,6CAA0C;AAEnC,MAAM,wBAAwB,GA0BnC,CAAC,OAAO,EAAE,EAAE,CACZ,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IAC9B,MAAM,gBAAgB,GAAG,MAAM,IAAA,6DAA+C,EAC5E,OAAO,CACR,CAAC;QACA,SAAS;QACT,OAAO,EAAE,gCAAqB,CAAC,UAAU;KAC1C,CAAC,CAAA;IACF,IAAI,gBAAgB,CAAC,KAAK;QAAE,OAAO,IAAA,YAAG,EAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAE9D,MAAM,kBAAkB,GAAG,MAAM,IAAA,gEAAkD,EACjF,OAAO,CACR,CAAC;QACA,MAAM;QACN,SAAS;QACT,IAAI,EAAE,oBAAK,CAAC,MAAM,CAAC,WAAW;KAC/B,CAAC,CAAA;IACF,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;YACjE,OAAO,IAAA,YAAG,EACR,IAAI,gDAAgC,CAAC;gBACnC,OAAO,EACL,mHAAmH;aACtH,CAAC,CACH,CAAA;QACH,OAAO,IAAA,YAAG,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,IAAA,WAAE,GAAE,CAAA;AACb,CAAC,CAAA;AAvDU,QAAA,wBAAwB,4BAuDlC"}

package/dist/commonjs/authz/policies/project/savedViews/canCreateSavedViewGroupToken.d.ts

@@ -0,0 +1,6 @@
+import { ProjectNoAccessError, ProjectNotEnoughPermissionsError, ProjectNotFoundError, SavedViewGroupNotFoundError, ServerNoAccessError, ServerNoSessionError, ServerNotEnoughPermissionsError, UngroupedSavedViewGroupLockError, WorkspaceNoAccessError, WorkspaceNotEnoughPermissionsError, WorkspacePlanNoFeatureAccessError, WorkspaceReadOnlyError, WorkspacesNotEnabledError, WorkspaceSsoSessionNoAccessError } from '../../../domain/authErrors.js';
+import { MaybeUserContext, ProjectContext, SavedViewGroupContext } from '../../../domain/context.js';
+import { Loaders } from '../../../domain/loaders.js';
+import { AuthPolicy } from '../../../domain/policies.js';
+export declare const canCreateSavedViewGroupTokenPolicy: AuthPolicy<typeof Loaders.getSavedViewGroup | typeof Loaders.getProject | typeof Loaders.getEnv | typeof Loaders.getServerRole | typeof Loaders.getWorkspaceRole | typeof Loaders.getWorkspace | typeof Loaders.getWorkspacePlan | typeof Loaders.getWorkspaceSsoProvider | typeof Loaders.getWorkspaceSsoSession | typeof Loaders.getProjectRole, MaybeUserContext & ProjectContext & SavedViewGroupContext, InstanceType<typeof SavedViewGroupNotFoundError | typeof ProjectNotFoundError | typeof ServerNoAccessError | typeof ServerNoSessionError | typeof ProjectNoAccessError | typeof WorkspaceNoAccessError | typeof WorkspaceSsoSessionNoAccessError | typeof ServerNotEnoughPermissionsError | typeof ProjectNotEnoughPermissionsError | typeof WorkspaceNotEnoughPermissionsError | typeof WorkspacesNotEnabledError | typeof WorkspaceReadOnlyError | typeof WorkspacePlanNoFeatureAccessError | typeof UngroupedSavedViewGroupLockError>>;
+//# sourceMappingURL=canCreateSavedViewGroupToken.d.ts.map

package/dist/commonjs/authz/policies/project/savedViews/canCreateSavedViewGroupToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateSavedViewGroupToken.d.ts","sourceRoot":"","sources":["../../../../../../src/authz/policies/project/savedViews/canCreateSavedViewGroupToken.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,yBAAyB,EACzB,gCAAgC,EACjC,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAQxD,eAAO,MAAM,kCAAkC,EAAE,UAAU,CACvD,OAAO,OAAO,CAAC,iBAAiB,GAChC,OAAO,OAAO,CAAC,UAAU,GACzB,OAAO,OAAO,CAAC,MAAM,GACrB,OAAO,OAAO,CAAC,aAAa,GAC5B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,YAAY,GAC3B,OAAO,OAAO,CAAC,gBAAgB,GAC/B,OAAO,OAAO,CAAC,uBAAuB,GACtC,OAAO,OAAO,CAAC,sBAAsB,GACrC,OAAO,OAAO,CAAC,cAAc,EAC/B,gBAAgB,GAAG,cAAc,GAAG,qBAAqB,EACzD,YAAY,CACR,OAAO,2BAA2B,GAClC,OAAO,oBAAoB,GAC3B,OAAO,mBAAmB,GAC1B,OAAO,oBAAoB,GAC3B,OAAO,oBAAoB,GAC3B,OAAO,sBAAsB,GAC7B,OAAO,gCAAgC,GACvC,OAAO,+BAA+B,GACtC,OAAO,gCAAgC,GACvC,OAAO,kCAAkC,GACzC,OAAO,yBAAyB,GAChC,OAAO,sBAAsB,GAC7B,OAAO,iCAAiC,GACxC,OAAO,gCAAgC,CAC1C,CA0DA,CAAA"}