@vertesia/common 1.4.0-dev.20260615.051508Z → 1.4.0-dev.20260629.130134Z

package/lib/roles.js

@@ -1,228 +0,0 @@
-import { Permission } from './access-control.js';
-import { ProjectRoles } from './project.js';
-export class Role {
-    name;
-    permissions;
-    constructor(name, permissions) {
-        this.name = name;
-        this.permissions = new Set(permissions);
-    }
-    hasPermission(permission) {
-        return this.permissions.has(permission);
-    }
-}
-export class RoleList {
-    roles;
-    constructor(roles) {
-        this.roles = roles;
-    }
-    static fromRoleNames(roleNames) {
-        const roles = roleNames.map((r) => getRoleByName(r));
-        return new RoleList(roles);
-    }
-    static fromRoleName(roleName) {
-        const roles = [getRoleByName(roleName)];
-        return new RoleList(roles);
-    }
-    hasPermission(perm) {
-        return this.roles.some((role) => role.hasPermission(perm));
-    }
-}
-class OrgMemberRole extends Role {
-    name;
-    constructor(name, permissions) {
-        super(name, [Permission.account_member, ...permissions]);
-        this.name = name;
-    }
-}
-class OwnerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.owner, Object.values(Permission));
-    }
-}
-class AdminRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.admin, Object.values(Permission));
-    }
-}
-class ManagerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.manager, Object.values(Permission));
-        this.permissions.delete(Permission.account_admin);
-        this.permissions.delete(Permission.manage_billing);
-        this.permissions.delete(Permission.audit_read);
-        this.permissions.delete(Permission.agent_run_read);
-        this.permissions.delete(Permission.content_read_all);
-        this.permissions.delete(Permission.content_superadmin);
-        this.permissions.delete(Permission.workflow_superadmin);
-    }
-}
-class DeveloperRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.developer, Object.values(Permission));
-        this.permissions.delete(Permission.account_admin);
-        this.permissions.delete(Permission.project_admin);
-        this.permissions.delete(Permission.project_settings_write);
-        this.permissions.delete(Permission.env_admin);
-        this.permissions.delete(Permission.manage_billing);
-        this.permissions.delete(Permission.audit_read);
-        this.permissions.delete(Permission.agent_run_read);
-        this.permissions.delete(Permission.content_read_all);
-        this.permissions.delete(Permission.content_superadmin);
-        this.permissions.delete(Permission.workflow_superadmin);
-    }
-}
-class ApplicationRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.application, [
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.int_write,
-            Permission.run_read,
-            Permission.content_write,
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin, // required for now as we need to create types
-            Permission.project_admin,
-            Permission.workflow_run,
-            Permission.project_settings_write,
-            Permission.account_write,
-        ]);
-    }
-}
-class AutomationRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.automation, [
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin,
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.run_read,
-            Permission.workflow_run,
-            Permission.project_integration_read,
-        ]);
-    }
-}
-class ContentProcessorRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.content_processor, [
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin,
-            Permission.content_superadmin,
-            Permission.int_execute,
-            Permission.workflow_read,
-            Permission.workflow_run,
-            Permission.run_read,
-        ]);
-    }
-}
-class ConsumerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.consumer, [
-            Permission.content_admin, // Temporary permission; micro apps will need to create types instead via user roles
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_delete,
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.run_read,
-            Permission.workflow_run,
-        ]);
-    }
-}
-class ExecutorRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.executor, [Permission.int_execute, Permission.run_read, Permission.workflow_run]);
-    }
-}
-class ReaderRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.reader, [Permission.int_read, Permission.run_read, Permission.content_read]);
-    }
-}
-const READ_ONLY_AUDIT_PERMISSIONS = [
-    Permission.studio_access,
-    Permission.account_read,
-    Permission.project_integration_read,
-    Permission.api_key_read,
-    Permission.billing_read,
-    Permission.audit_read,
-    Permission.int_read,
-    Permission.run_read,
-    Permission.content_read,
-    Permission.content_read_all,
-    Permission.task_read,
-    Permission.workflow_read,
-    Permission.agent_run_read,
-];
-class ReadOnlyAuditRole extends OrgMemberRole {
-    constructor(name) {
-        super(name, READ_ONLY_AUDIT_PERMISSIONS);
-    }
-}
-class BillingRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.billing, [Permission.manage_billing]);
-    }
-}
-class AppMemberRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.app_member, [
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.int_write,
-            Permission.run_read,
-            Permission.content_write,
-            Permission.content_read,
-            Permission.content_delete,
-            Permission.workflow_run,
-        ]);
-    }
-}
-class ContentSuperAdmin extends DeveloperRole {
-    constructor() {
-        super();
-        this.name = ProjectRoles.content_superadmin;
-        this.permissions.add(Permission.content_superadmin);
-    }
-}
-const roles = {
-    [ProjectRoles.owner]: new OwnerRole(),
-    [ProjectRoles.admin]: new AdminRole(),
-    [ProjectRoles.manager]: new ManagerRole(),
-    [ProjectRoles.developer]: new DeveloperRole(),
-    [ProjectRoles.application]: new ApplicationRole(),
-    [ProjectRoles.automation]: new AutomationRole(),
-    [ProjectRoles.content_processor]: new ContentProcessorRole(),
-    [ProjectRoles.consumer]: new ConsumerRole(),
-    [ProjectRoles.executor]: new ExecutorRole(),
-    [ProjectRoles.reader]: new ReaderRole(),
-    [ProjectRoles.auditor]: new ReadOnlyAuditRole(ProjectRoles.auditor),
-    [ProjectRoles.support]: new ReadOnlyAuditRole(ProjectRoles.support),
-    [ProjectRoles.billing]: new BillingRole(),
-    [ProjectRoles.app_member]: new AppMemberRole(),
-    [ProjectRoles.member]: new OrgMemberRole(ProjectRoles.member, []),
-    [ProjectRoles.content_superadmin]: new ContentSuperAdmin(),
-};
-export function getRoleByName(name) {
-    const role = roles[name];
-    if (!role)
-        throw new Error(`Role ${name} not found`);
-    return role;
-}
-export function listRoles() {
-    return Object.values(roles);
-}
-export function getPermissionsForRoles(roleNames) {
-    const permissions = new Set();
-    for (const roleName of roleNames) {
-        const role = getRoleByName(roleName);
-        for (const permission of role.permissions) {
-            permissions.add(permission);
-        }
-    }
-    return Array.from(permissions);
-}
-//# sourceMappingURL=roles.js.map

package/lib/roles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,OAAO,IAAI;IAGF;IAFX,WAAW,CAAkB;IAC7B,YACW,IAAkB,EACzB,WAAyB;QADlB,SAAI,GAAJ,IAAI,CAAc;QAGzB,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,aAAa,CAAC,UAAsB;QAChC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,OAAO,QAAQ;IACmB;IAApC,YAAoC,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAErD,MAAM,CAAC,aAAa,CAAC,SAAyB;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,QAAsB;QACtC,MAAM,KAAK,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,aAAa,CAAC,IAAgB;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;CACJ;AAED,MAAM,aAAc,SAAQ,IAAI;IAEjB;IADX,YACW,IAAkB,EACzB,WAAyB;QAEzB,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;QAHlD,SAAI,GAAJ,IAAI,CAAc;IAI7B,CAAC;CACJ;AAED,MAAM,SAAU,SAAQ,aAAa;IACjC;QACI,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,CAAC;CACJ;AAED,MAAM,SAAU,SAAQ,aAAa;IACjC;QACI,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,CAAC;CACJ;AAED,MAAM,WAAY,SAAQ,aAAa;IACnC;QACI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC;CACJ;AAED,MAAM,aAAc,SAAQ,aAAa;IACrC;QACI,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC;CACJ;AAED,MAAM,eAAgB,SAAQ,aAAa;IACvC;QACI,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE;YAC5B,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,SAAS;YACpB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,aAAa,EAAE,8CAA8C;YACxE,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,sBAAsB;YACjC,UAAU,CAAC,aAAa;SAC3B,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,cAAe,SAAQ,aAAa;IACtC;QACI,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;YAC3B,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,wBAAwB;SACtC,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,oBAAqB,SAAQ,aAAa;IAC5C;QACI,KAAK,CAAC,YAAY,CAAC,iBAAiB,EAAE;YAClC,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,kBAAkB;YAC7B,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,QAAQ;SACtB,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,YAAa,SAAQ,aAAa;IACpC;QACI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE;YACzB,UAAU,CAAC,aAAa,EAAE,oFAAoF;YAC9G,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,cAAc;YACzB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,YAAY;SAC1B,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,YAAa,SAAQ,aAAa;IACpC;QACI,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACzG,CAAC;CACJ;AAED,MAAM,UAAW,SAAQ,aAAa;IAClC;QACI,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACpG,CAAC;CACJ;AAED,MAAM,2BAA2B,GAAG;IAChC,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,wBAAwB;IACnC,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,UAAU;IACrB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,QAAQ;IACnB,UAAU,CAAC,YAAY;IACvB,UAAU,CAAC,gBAAgB;IAC3B,UAAU,CAAC,SAAS;IACpB,UAAU,CAAC,aAAa;IACxB,UAAU,CAAC,cAAc;CAC5B,CAAC;AAEF,MAAM,iBAAkB,SAAQ,aAAa;IACzC,YAAY,IAAiD;QACzD,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAC7C,CAAC;CACJ;AAED,MAAM,WAAY,SAAQ,aAAa;IACnC;QACI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7D,CAAC;CACJ;AAED,MAAM,aAAc,SAAQ,aAAa;IACrC;QACI,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;YAC3B,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,SAAS;YACpB,UAAU,CAAC,QAAQ;YACnB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,YAAY;YACvB,UAAU,CAAC,cAAc;YACzB,UAAU,CAAC,YAAY;SAC1B,CAAC,CAAC;IACP,CAAC;CACJ;AAED,MAAM,iBAAkB,SAAQ,aAAa;IACzC;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,kBAAkB,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACxD,CAAC;CACJ;AAED,MAAM,KAAK,GAA+B;IACtC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,SAAS,EAAE;IACrC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,SAAS,EAAE;IACrC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,WAAW,EAAE;IACzC,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,IAAI,aAAa,EAAE;IAC7C,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,IAAI,eAAe,EAAE;IACjD,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,cAAc,EAAE;IAC/C,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,IAAI,oBAAoB,EAAE;IAC5D,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,YAAY,EAAE;IAC3C,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,YAAY,EAAE;IAC3C,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,EAAE;IACvC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,iBAAiB,CAAC,YAAY,CAAC,OAAO,CAAC;IACnE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,iBAAiB,CAAC,YAAY,CAAC,OAAO,CAAC;IACnE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,WAAW,EAAE;IACzC,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,aAAa,EAAE;IAC9C,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,aAAa,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,IAAI,iBAAiB,EAAE;CAC7D,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS;IACrB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiC;IACpE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACnC,CAAC"}

package/src/roles.test.ts

@@ -1,30 +0,0 @@
-import { describe, expect, test } from 'vitest';
-import { Permission } from './access-control.js';
-import { ProjectRoles } from './project.js';
-import { getPermissionsForRoles, getRoleByName, listRoles } from './roles.js';
-
-describe('role permission catalog', () => {
-    test('lists all project roles', () => {
-        expect(
-            listRoles()
-                .map((role) => role.name)
-                .sort(),
-        ).toEqual(Object.values(ProjectRoles).sort());
-    });
-
-    test('derives developer permissions without administrative grants', () => {
-        const developer = getRoleByName(ProjectRoles.developer);
-
-        expect(developer.hasPermission(Permission.int_read)).toBe(true);
-        expect(developer.hasPermission(Permission.account_admin)).toBe(false);
-        expect(developer.hasPermission(Permission.project_admin)).toBe(false);
-    });
-
-    test('deduplicates permissions across multiple roles', () => {
-        const permissions = getPermissionsForRoles([ProjectRoles.reader, ProjectRoles.executor]);
-
-        expect(permissions).toContain(Permission.account_member);
-        expect(permissions).toContain(Permission.content_read);
-        expect(permissions.filter((permission) => permission === Permission.account_member)).toHaveLength(1);
-    });
-});

package/src/roles.ts

@@ -1,251 +0,0 @@
-import { Permission } from './access-control.js';
-import { ProjectRoles } from './project.js';
-
-export class Role {
-    permissions: Set<Permission>;
-    constructor(
-        public name: ProjectRoles,
-        permissions: Permission[],
-    ) {
-        this.permissions = new Set(permissions);
-    }
-
-    hasPermission(permission: Permission) {
-        return this.permissions.has(permission);
-    }
-}
-
-export class RoleList {
-    private constructor(public readonly roles: Role[]) {}
-
-    static fromRoleNames(roleNames: ProjectRoles[]): RoleList {
-        const roles = roleNames.map((r) => getRoleByName(r));
-        return new RoleList(roles);
-    }
-
-    static fromRoleName(roleName: ProjectRoles): RoleList {
-        const roles = [getRoleByName(roleName)];
-        return new RoleList(roles);
-    }
-
-    hasPermission(perm: Permission): boolean {
-        return this.roles.some((role) => role.hasPermission(perm));
-    }
-}
-
-class OrgMemberRole extends Role {
-    constructor(
-        public name: ProjectRoles,
-        permissions: Permission[],
-    ) {
-        super(name, [Permission.account_member, ...permissions]);
-    }
-}
-
-class OwnerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.owner, Object.values(Permission));
-    }
-}
-
-class AdminRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.admin, Object.values(Permission));
-    }
-}
-
-class ManagerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.manager, Object.values(Permission));
-        this.permissions.delete(Permission.account_admin);
-        this.permissions.delete(Permission.manage_billing);
-        this.permissions.delete(Permission.audit_read);
-        this.permissions.delete(Permission.agent_run_read);
-        this.permissions.delete(Permission.content_read_all);
-        this.permissions.delete(Permission.content_superadmin);
-        this.permissions.delete(Permission.workflow_superadmin);
-    }
-}
-
-class DeveloperRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.developer, Object.values(Permission));
-        this.permissions.delete(Permission.account_admin);
-        this.permissions.delete(Permission.project_admin);
-        this.permissions.delete(Permission.project_settings_write);
-        this.permissions.delete(Permission.env_admin);
-        this.permissions.delete(Permission.manage_billing);
-        this.permissions.delete(Permission.audit_read);
-        this.permissions.delete(Permission.agent_run_read);
-        this.permissions.delete(Permission.content_read_all);
-        this.permissions.delete(Permission.content_superadmin);
-        this.permissions.delete(Permission.workflow_superadmin);
-    }
-}
-
-class ApplicationRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.application, [
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.int_write,
-            Permission.run_read,
-            Permission.content_write,
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin, // required for now as we need to create types
-            Permission.project_admin,
-            Permission.workflow_run,
-            Permission.project_settings_write,
-            Permission.account_write,
-        ]);
-    }
-}
-
-class AutomationRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.automation, [
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin,
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.run_read,
-            Permission.workflow_run,
-            Permission.project_integration_read,
-        ]);
-    }
-}
-
-class ContentProcessorRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.content_processor, [
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_admin,
-            Permission.content_superadmin,
-            Permission.int_execute,
-            Permission.workflow_read,
-            Permission.workflow_run,
-            Permission.run_read,
-        ]);
-    }
-}
-
-class ConsumerRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.consumer, [
-            Permission.content_admin, // Temporary permission; micro apps will need to create types instead via user roles
-            Permission.content_read,
-            Permission.content_write,
-            Permission.content_delete,
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.run_read,
-            Permission.workflow_run,
-        ]);
-    }
-}
-
-class ExecutorRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.executor, [Permission.int_execute, Permission.run_read, Permission.workflow_run]);
-    }
-}
-
-class ReaderRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.reader, [Permission.int_read, Permission.run_read, Permission.content_read]);
-    }
-}
-
-const READ_ONLY_AUDIT_PERMISSIONS = [
-    Permission.studio_access,
-    Permission.account_read,
-    Permission.project_integration_read,
-    Permission.api_key_read,
-    Permission.billing_read,
-    Permission.audit_read,
-    Permission.int_read,
-    Permission.run_read,
-    Permission.content_read,
-    Permission.content_read_all,
-    Permission.task_read,
-    Permission.workflow_read,
-    Permission.agent_run_read,
-];
-
-class ReadOnlyAuditRole extends OrgMemberRole {
-    constructor(name: ProjectRoles.auditor | ProjectRoles.support) {
-        super(name, READ_ONLY_AUDIT_PERMISSIONS);
-    }
-}
-
-class BillingRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.billing, [Permission.manage_billing]);
-    }
-}
-
-class AppMemberRole extends OrgMemberRole {
-    constructor() {
-        super(ProjectRoles.app_member, [
-            Permission.int_read,
-            Permission.int_execute,
-            Permission.int_write,
-            Permission.run_read,
-            Permission.content_write,
-            Permission.content_read,
-            Permission.content_delete,
-            Permission.workflow_run,
-        ]);
-    }
-}
-
-class ContentSuperAdmin extends DeveloperRole {
-    constructor() {
-        super();
-        this.name = ProjectRoles.content_superadmin;
-        this.permissions.add(Permission.content_superadmin);
-    }
-}
-
-const roles: Record<ProjectRoles, Role> = {
-    [ProjectRoles.owner]: new OwnerRole(),
-    [ProjectRoles.admin]: new AdminRole(),
-    [ProjectRoles.manager]: new ManagerRole(),
-    [ProjectRoles.developer]: new DeveloperRole(),
-    [ProjectRoles.application]: new ApplicationRole(),
-    [ProjectRoles.automation]: new AutomationRole(),
-    [ProjectRoles.content_processor]: new ContentProcessorRole(),
-    [ProjectRoles.consumer]: new ConsumerRole(),
-    [ProjectRoles.executor]: new ExecutorRole(),
-    [ProjectRoles.reader]: new ReaderRole(),
-    [ProjectRoles.auditor]: new ReadOnlyAuditRole(ProjectRoles.auditor),
-    [ProjectRoles.support]: new ReadOnlyAuditRole(ProjectRoles.support),
-    [ProjectRoles.billing]: new BillingRole(),
-    [ProjectRoles.app_member]: new AppMemberRole(),
-    [ProjectRoles.member]: new OrgMemberRole(ProjectRoles.member, []),
-    [ProjectRoles.content_superadmin]: new ContentSuperAdmin(),
-};
-
-export function getRoleByName(name: ProjectRoles): Role {
-    const role = roles[name];
-    if (!role) throw new Error(`Role ${name} not found`);
-    return role;
-}
-
-export function listRoles(): Role[] {
-    return Object.values(roles);
-}
-
-export function getPermissionsForRoles(roleNames: Iterable<ProjectRoles>): Permission[] {
-    const permissions = new Set<Permission>();
-    for (const roleName of roleNames) {
-        const role = getRoleByName(roleName);
-        for (const permission of role.permissions) {
-            permissions.add(permission);
-        }
-    }
-    return Array.from(permissions);
-}