@webiny/api-aco 6.4.11 → 6.6.0-alpha.1

package/features/ai/RevokeFolderAccessTool.d.ts

@@ -0,0 +1,58 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { GetFolderUseCase } from "../../features/folder/GetFolder/index.js";
+import { UpdateFolderUseCase } from "../../features/folder/UpdateFolder/index.js";
+declare const inputSchema: z.ZodObject<{
+    folderId: z.ZodString;
+    target: z.ZodString;
+}, z.core.$strip>;
+type Input = z.infer<typeof inputSchema>;
+interface RevokeResult {
+    folderId: string;
+    title: string;
+    path: string;
+    removed: {
+        target: string;
+        level: string;
+    };
+    /**
+     * Every direct rule remaining afterwards.
+     *
+     * This is the set the update was asked to store, not an independent read of it:
+     * `UpdateFolderWithFolderLevelPermissions` returns the permissions it derived from the input
+     * rather than the ones the repository wrote. Treating it as a verification would let the tool
+     * confirm its own request back to itself.
+     */
+    permissions: {
+        target: string;
+        level: string;
+    }[];
+}
+/**
+ * Removes one target's direct access to one folder.
+ *
+ * Destructive: somebody loses access, and there is no undo. Refuses when the target has no DIRECT rule
+ * rather than reporting a removal that changed nothing — an inherited grant cannot be revoked here,
+ * only where it is defined, and saying otherwise would leave the user believing access was withdrawn.
+ */
+declare class RevokeFolderAccessToolImpl implements IAiSdkTool<Input> {
+    private getFolder;
+    private updateFolder;
+    readonly name = "revokeFolderAccess";
+    readonly title = "Revoke folder access";
+    readonly description = "Removes one team's or user's direct access to one folder, leaving all other permissions untouched. Cannot remove inherited access. Requires user approval.";
+    readonly inputSchema: z.ZodObject<{
+        folderId: z.ZodString;
+        target: z.ZodString;
+    }, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+    };
+    constructor(getFolder: GetFolderUseCase.Interface, updateFolder: UpdateFolderUseCase.Interface);
+    execute(input: Input): Promise<RevokeResult>;
+}
+export declare const RevokeFolderAccessTool: typeof RevokeFolderAccessToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/RevokeFolderAccessTool.js

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { GetFolderUseCase } from "../folder/GetFolder/index.js";
+import { UpdateFolderUseCase } from "../folder/UpdateFolder/index.js";
+import { loadFolderPermissions } from "./loadFolderPermissions.js";
+const inputSchema = z.object({
+    folderId: z.string().describe("Folder id as returned by listFolders."),
+    target: z.string().describe("Whose access to remove: 'team:<slug>' or 'admin:<userId>', exactly as listFolders reports it.")
+});
+class RevokeFolderAccessToolImpl {
+    constructor(getFolder, updateFolder){
+        this.getFolder = getFolder;
+        this.updateFolder = updateFolder;
+        this.name = "revokeFolderAccess";
+        this.title = "Revoke folder access";
+        this.description = "Removes one team's or user's direct access to one folder, leaving all other permissions untouched. Cannot remove inherited access. Requires user approval.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: false,
+            destructiveHint: true
+        };
+    }
+    async execute(input) {
+        const loaded = await loadFolderPermissions(this.getFolder, input.folderId);
+        const existing = loaded.direct.find((permission)=>String(permission.target) === input.target);
+        if (!existing) {
+            if (loaded.inheritedTargets.has(input.target)) throw new Error(`"${input.target}" has inherited access to this folder, not a direct rule, so it cannot be revoked here. Change it where it is defined.`);
+            throw new Error(`"${input.target}" has no direct access to this folder, so there is nothing to revoke.`);
+        }
+        const permissions = loaded.direct.filter((permission)=>String(permission.target) !== input.target);
+        const result = await this.updateFolder.execute(input.folderId, {
+            permissions
+        });
+        if (result.isFail()) throw new Error(`Could not revoke access: ${result.error.message}`);
+        const folder = result.value;
+        return {
+            folderId: folder.id,
+            title: folder.title,
+            path: folder.path,
+            removed: {
+                target: input.target,
+                level: existing.level
+            },
+            permissions: (folder.permissions ?? []).filter((permission)=>!permission.inheritedFrom).map((permission)=>({
+                    target: String(permission.target),
+                    level: permission.level
+                }))
+        };
+    }
+}
+const RevokeFolderAccessTool = AiSdkTool.createImplementation({
+    implementation: RevokeFolderAccessToolImpl,
+    dependencies: [
+        GetFolderUseCase,
+        UpdateFolderUseCase
+    ]
+});
+export { RevokeFolderAccessTool };
+
+//# sourceMappingURL=RevokeFolderAccessTool.js.map

package/features/ai/RevokeFolderAccessTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/RevokeFolderAccessTool.js","sources":["../../../src/features/ai/RevokeFolderAccessTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { GetFolderUseCase } from \"~/features/folder/GetFolder/index.js\";\nimport { UpdateFolderUseCase } from \"~/features/folder/UpdateFolder/index.js\";\nimport { loadFolderPermissions } from \"./loadFolderPermissions.js\";\n\nconst inputSchema = z.object({\n    folderId: z.string().describe(\"Folder id as returned by listFolders.\"),\n    target: z\n        .string()\n        .describe(\n            \"Whose access to remove: 'team:<slug>' or 'admin:<userId>', exactly as listFolders reports it.\"\n        )\n});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface RevokeResult {\n    folderId: string;\n    title: string;\n    path: string;\n    removed: { target: string; level: string };\n    /**\n     * Every direct rule remaining afterwards.\n     *\n     * This is the set the update was asked to store, not an independent read of it:\n     * `UpdateFolderWithFolderLevelPermissions` returns the permissions it derived from the input\n     * rather than the ones the repository wrote. Treating it as a verification would let the tool\n     * confirm its own request back to itself.\n     */\n    permissions: { target: string; level: string }[];\n}\n\n/**\n * Removes one target's direct access to one folder.\n *\n * Destructive: somebody loses access, and there is no undo. Refuses when the target has no DIRECT rule\n * rather than reporting a removal that changed nothing — an inherited grant cannot be revoked here,\n * only where it is defined, and saying otherwise would leave the user believing access was withdrawn.\n */\nclass RevokeFolderAccessToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"revokeFolderAccess\";\n    readonly title = \"Revoke folder access\";\n    readonly description =\n        \"Removes one team's or user's direct access to one folder, leaving all other permissions untouched. Cannot remove inherited access. Requires user approval.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: false, destructiveHint: true };\n\n    constructor(\n        private getFolder: GetFolderUseCase.Interface,\n        private updateFolder: UpdateFolderUseCase.Interface\n    ) {}\n\n    async execute(input: Input): Promise<RevokeResult> {\n        const loaded = await loadFolderPermissions(this.getFolder, input.folderId);\n\n        const existing = loaded.direct.find(\n            permission => String(permission.target) === input.target\n        );\n\n        if (!existing) {\n            if (loaded.inheritedTargets.has(input.target)) {\n                throw new Error(\n                    `\"${input.target}\" has inherited access to this folder, not a direct rule, so it cannot be revoked here. Change it where it is defined.`\n                );\n            }\n\n            throw new Error(\n                `\"${input.target}\" has no direct access to this folder, so there is nothing to revoke.`\n            );\n        }\n\n        const permissions = loaded.direct.filter(\n            permission => String(permission.target) !== input.target\n        );\n\n        const result = await this.updateFolder.execute(input.folderId, { permissions });\n\n        if (result.isFail()) {\n            throw new Error(`Could not revoke access: ${result.error.message}`);\n        }\n\n        const folder = result.value;\n\n        return {\n            folderId: folder.id,\n            title: folder.title,\n            path: folder.path,\n            removed: { target: input.target, level: existing.level },\n            permissions: (folder.permissions ?? [])\n                .filter(permission => !permission.inheritedFrom)\n                .map(permission => ({ target: String(permission.target), level: permission.level }))\n        };\n    }\n}\n\nexport const RevokeFolderAccessTool = AiSdkTool.createImplementation({\n    implementation: RevokeFolderAccessToolImpl,\n    dependencies: [GetFolderUseCase, UpdateFolderUseCase]\n});\n"],"names":["inputSchema","z","RevokeFolderAccessToolImpl","getFolder","updateFolder","input","loaded","loadFolderPermissions","existing","permission","String","Error","permissions","result","folder","RevokeFolderAccessTool","AiSdkTool","GetFolderUseCase","UpdateFolderUseCase"],"mappings":";;;;;AAOA,MAAMA,cAAcC,EAAE,MAAM,CAAC;IACzB,UAAUA,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,QAAQA,EAAAA,MACG,GACN,QAAQ,CACL;AAEZ;AA2BA,MAAMC;IAQF,YACYC,SAAqC,EACrCC,YAA2C,CACrD;aAFUD,SAAS,GAATA;aACAC,YAAY,GAAZA;aATH,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGJ;aACd,WAAW,GAAG;YAAE,cAAc;YAAO,iBAAiB;QAAK;IAKjE;IAEH,MAAM,QAAQK,KAAY,EAAyB;QAC/C,MAAMC,SAAS,MAAMC,sBAAsB,IAAI,CAAC,SAAS,EAAEF,MAAM,QAAQ;QAEzE,MAAMG,WAAWF,OAAO,MAAM,CAAC,IAAI,CAC/BG,CAAAA,aAAcC,OAAOD,WAAW,MAAM,MAAMJ,MAAM,MAAM;QAG5D,IAAI,CAACG,UAAU;YACX,IAAIF,OAAO,gBAAgB,CAAC,GAAG,CAACD,MAAM,MAAM,GACxC,MAAM,IAAIM,MACN,CAAC,CAAC,EAAEN,MAAM,MAAM,CAAC,sHAAsH,CAAC;YAIhJ,MAAM,IAAIM,MACN,CAAC,CAAC,EAAEN,MAAM,MAAM,CAAC,qEAAqE,CAAC;QAE/F;QAEA,MAAMO,cAAcN,OAAO,MAAM,CAAC,MAAM,CACpCG,CAAAA,aAAcC,OAAOD,WAAW,MAAM,MAAMJ,MAAM,MAAM;QAG5D,MAAMQ,SAAS,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAACR,MAAM,QAAQ,EAAE;YAAEO;QAAY;QAE7E,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIF,MAAM,CAAC,yBAAyB,EAAEE,OAAO,KAAK,CAAC,OAAO,EAAE;QAGtE,MAAMC,SAASD,OAAO,KAAK;QAE3B,OAAO;YACH,UAAUC,OAAO,EAAE;YACnB,OAAOA,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjB,SAAS;gBAAE,QAAQT,MAAM,MAAM;gBAAE,OAAOG,SAAS,KAAK;YAAC;YACvD,aAAcM,AAAAA,CAAAA,OAAO,WAAW,IAAI,EAAC,EAChC,MAAM,CAACL,CAAAA,aAAc,CAACA,WAAW,aAAa,EAC9C,GAAG,CAACA,CAAAA,aAAe;oBAAE,QAAQC,OAAOD,WAAW,MAAM;oBAAG,OAAOA,WAAW,KAAK;gBAAC;QACzF;IACJ;AACJ;AAEO,MAAMM,yBAAyBC,UAAU,oBAAoB,CAAC;IACjE,gBAAgBd;IAChB,cAAc;QAACe;QAAkBC;KAAoB;AACzD"}

package/features/ai/assertTargetIsUsable.d.ts

@@ -0,0 +1,10 @@
+import type { ListTeamsUseCase } from "@webiny/api-core/features/security/teams/ListTeams/index.js";
+/**
+ * Rejects a permission target that would be stored happily and then match nobody.
+ *
+ * A folder rule identifies a team by SLUG (`team:<slug>`) and a user by id (`admin:<userId>`) — see
+ * ListFolderLevelPermissionsTargets. The field is only typed as a template string, so a team id where
+ * a slug belongs is accepted and silently grants nothing. Also refuses a target the folder inherits,
+ * since rewriting it as a direct rule detaches the folder from where the grant came from.
+ */
+export declare const assertTargetIsUsable: (listTeams: ListTeamsUseCase.Interface, target: string, inheritedTargets: Set<string>) => Promise<void>;

package/features/ai/assertTargetIsUsable.js

@@ -0,0 +1,14 @@
+const assertTargetIsUsable = async (listTeams, target, inheritedTargets)=>{
+    if (inheritedTargets.has(target)) throw new Error(`"${target}" is inherited from an ancestor folder or a role, so it cannot be changed on this folder. Change it where it is defined.`);
+    if (!target.startsWith("team:")) return;
+    const result = await listTeams.execute();
+    if (result.isFail()) throw new Error(`Could not verify the teams: ${result.error.message}`);
+    const value = target.slice(5);
+    if (result.value.some((team)=>team.slug === value)) return;
+    const byId = result.value.find((team)=>team.id === value);
+    if (byId) throw new Error(`"${target}" uses a team id. Use the slug instead: "team:${byId.slug}".`);
+    throw new Error(`"${target}" is not a known team. Call listTeams first.`);
+};
+export { assertTargetIsUsable };
+
+//# sourceMappingURL=assertTargetIsUsable.js.map

package/features/ai/assertTargetIsUsable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/assertTargetIsUsable.js","sources":["../../../src/features/ai/assertTargetIsUsable.ts"],"sourcesContent":["import type { ListTeamsUseCase } from \"@webiny/api-core/features/security/teams/ListTeams/index.js\";\n\n/**\n * Rejects a permission target that would be stored happily and then match nobody.\n *\n * A folder rule identifies a team by SLUG (`team:<slug>`) and a user by id (`admin:<userId>`) — see\n * ListFolderLevelPermissionsTargets. The field is only typed as a template string, so a team id where\n * a slug belongs is accepted and silently grants nothing. Also refuses a target the folder inherits,\n * since rewriting it as a direct rule detaches the folder from where the grant came from.\n */\nexport const assertTargetIsUsable = async (\n    listTeams: ListTeamsUseCase.Interface,\n    target: string,\n    inheritedTargets: Set<string>\n): Promise<void> => {\n    if (inheritedTargets.has(target)) {\n        throw new Error(\n            `\"${target}\" is inherited from an ancestor folder or a role, so it cannot be changed on this folder. Change it where it is defined.`\n        );\n    }\n\n    if (!target.startsWith(\"team:\")) {\n        return;\n    }\n\n    const result = await listTeams.execute();\n\n    if (result.isFail()) {\n        throw new Error(`Could not verify the teams: ${result.error.message}`);\n    }\n\n    const value = target.slice(\"team:\".length);\n\n    if (result.value.some(team => team.slug === value)) {\n        return;\n    }\n\n    const byId = result.value.find(team => team.id === value);\n\n    if (byId) {\n        throw new Error(`\"${target}\" uses a team id. Use the slug instead: \"team:${byId.slug}\".`);\n    }\n\n    throw new Error(`\"${target}\" is not a known team. Call listTeams first.`);\n};\n"],"names":["assertTargetIsUsable","listTeams","target","inheritedTargets","Error","result","value","team","byId"],"mappings":"AAUO,MAAMA,uBAAuB,OAChCC,WACAC,QACAC;IAEA,IAAIA,iBAAiB,GAAG,CAACD,SACrB,MAAM,IAAIE,MACN,CAAC,CAAC,EAAEF,OAAO,wHAAwH,CAAC;IAI5I,IAAI,CAACA,OAAO,UAAU,CAAC,UACnB;IAGJ,MAAMG,SAAS,MAAMJ,UAAU,OAAO;IAEtC,IAAII,OAAO,MAAM,IACb,MAAM,IAAID,MAAM,CAAC,4BAA4B,EAAEC,OAAO,KAAK,CAAC,OAAO,EAAE;IAGzE,MAAMC,QAAQJ,OAAO,KAAK,CAAC;IAE3B,IAAIG,OAAO,KAAK,CAAC,IAAI,CAACE,CAAAA,OAAQA,KAAK,IAAI,KAAKD,QACxC;IAGJ,MAAME,OAAOH,OAAO,KAAK,CAAC,IAAI,CAACE,CAAAA,OAAQA,KAAK,EAAE,KAAKD;IAEnD,IAAIE,MACA,MAAM,IAAIJ,MAAM,CAAC,CAAC,EAAEF,OAAO,8CAA8C,EAAEM,KAAK,IAAI,CAAC,EAAE,CAAC;IAG5F,MAAM,IAAIJ,MAAM,CAAC,CAAC,EAAEF,OAAO,4CAA4C,CAAC;AAC5E"}

package/features/ai/feature.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Folder and team tools for AI callers.
+ *
+ * The list tools are read-only and run unattended. Anything that creates or changes access is a write,
+ * so it pauses for the user to approve the exact arguments. Access changes are deliberately one target
+ * per call — granting and revoking separately means the approval block shows the entire change, rather
+ * than a desired end state whose omissions quietly remove somebody's access.
+ */
+export declare const AcoAiToolsFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/ai/feature.js

@@ -0,0 +1,23 @@
+import { createFeature } from "@webiny/feature/api";
+import { ListTeamsTool } from "./ListTeamsTool.js";
+import { ListFoldersTool } from "./ListFoldersTool.js";
+import { GrantFolderAccessTool } from "./GrantFolderAccessTool.js";
+import { RevokeFolderAccessTool } from "./RevokeFolderAccessTool.js";
+import { CreateFolderTool } from "./CreateFolderTool.js";
+import { CreateTeamTool } from "./CreateTeamTool.js";
+import { ListRolesTool } from "./ListRolesTool.js";
+const AcoAiToolsFeature = createFeature({
+    name: "Aco/AiTools",
+    register (container) {
+        container.register(ListTeamsTool);
+        container.register(ListFoldersTool);
+        container.register(GrantFolderAccessTool);
+        container.register(RevokeFolderAccessTool);
+        container.register(CreateFolderTool);
+        container.register(CreateTeamTool);
+        container.register(ListRolesTool);
+    }
+});
+export { AcoAiToolsFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/ai/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/feature.js","sources":["../../../src/features/ai/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { ListTeamsTool } from \"./ListTeamsTool.js\";\nimport { ListFoldersTool } from \"./ListFoldersTool.js\";\nimport { GrantFolderAccessTool } from \"./GrantFolderAccessTool.js\";\nimport { RevokeFolderAccessTool } from \"./RevokeFolderAccessTool.js\";\nimport { CreateFolderTool } from \"./CreateFolderTool.js\";\nimport { CreateTeamTool } from \"./CreateTeamTool.js\";\nimport { ListRolesTool } from \"./ListRolesTool.js\";\n\n/**\n * Folder and team tools for AI callers.\n *\n * The list tools are read-only and run unattended. Anything that creates or changes access is a write,\n * so it pauses for the user to approve the exact arguments. Access changes are deliberately one target\n * per call — granting and revoking separately means the approval block shows the entire change, rather\n * than a desired end state whose omissions quietly remove somebody's access.\n */\nexport const AcoAiToolsFeature = createFeature({\n    name: \"Aco/AiTools\",\n    register(container) {\n        container.register(ListTeamsTool);\n        container.register(ListFoldersTool);\n        container.register(GrantFolderAccessTool);\n        container.register(RevokeFolderAccessTool);\n        container.register(CreateFolderTool);\n        container.register(CreateTeamTool);\n        container.register(ListRolesTool);\n    }\n});\n"],"names":["AcoAiToolsFeature","createFeature","container","ListTeamsTool","ListFoldersTool","GrantFolderAccessTool","RevokeFolderAccessTool","CreateFolderTool","CreateTeamTool","ListRolesTool"],"mappings":";;;;;;;;AAiBO,MAAMA,oBAAoBC,cAAc;IAC3C,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;QACnBD,UAAU,QAAQ,CAACE;QACnBF,UAAU,QAAQ,CAACG;QACnBH,UAAU,QAAQ,CAACI;QACnBJ,UAAU,QAAQ,CAACK;QACnBL,UAAU,QAAQ,CAACM;QACnBN,UAAU,QAAQ,CAACO;IACvB;AACJ"}

package/features/ai/index.d.ts

@@ -0,0 +1,8 @@
+export { AcoAiToolsFeature } from "./feature.js";
+export { ListTeamsTool } from "./ListTeamsTool.js";
+export { ListFoldersTool } from "./ListFoldersTool.js";
+export { ListRolesTool } from "./ListRolesTool.js";
+export { GrantFolderAccessTool } from "./GrantFolderAccessTool.js";
+export { RevokeFolderAccessTool } from "./RevokeFolderAccessTool.js";
+export { CreateFolderTool } from "./CreateFolderTool.js";
+export { CreateTeamTool } from "./CreateTeamTool.js";

package/features/ai/index.js

@@ -0,0 +1,8 @@
+export { AcoAiToolsFeature } from "./feature.js";
+export { ListTeamsTool } from "./ListTeamsTool.js";
+export { ListFoldersTool } from "./ListFoldersTool.js";
+export { ListRolesTool } from "./ListRolesTool.js";
+export { GrantFolderAccessTool } from "./GrantFolderAccessTool.js";
+export { RevokeFolderAccessTool } from "./RevokeFolderAccessTool.js";
+export { CreateFolderTool } from "./CreateFolderTool.js";
+export { CreateTeamTool } from "./CreateTeamTool.js";

package/features/ai/loadFolderPermissions.d.ts

@@ -0,0 +1,16 @@
+import type { GetFolderUseCase } from "../../features/folder/GetFolder/index.js";
+import type { Folder, FolderPermission } from "../../types.js";
+export interface LoadedFolderPermissions {
+    folder: Folder;
+    /** Rules set on this folder. The only ones it may change. */
+    direct: FolderPermission[];
+    /** Targets granted by an ancestor or a role. Writing these back would detach the inheritance. */
+    inheritedTargets: Set<string>;
+}
+/**
+ * Reads a folder and separates the rules it owns from the ones it merely inherits.
+ *
+ * Every permission write starts here, because the field holds both kinds and a change has to preserve
+ * the direct rules while leaving the inherited ones alone.
+ */
+export declare const loadFolderPermissions: (getFolder: GetFolderUseCase.Interface, folderId: string) => Promise<LoadedFolderPermissions>;

package/features/ai/loadFolderPermissions.js

@@ -0,0 +1,14 @@
+const loadFolderPermissions = async (getFolder, folderId)=>{
+    const result = await getFolder.execute(folderId);
+    if (result.isFail()) throw new Error(`Folder "${folderId}" not found: ${result.error.message}. Call listFolders for valid ids.`);
+    const folder = result.value;
+    const permissions = folder.permissions ?? [];
+    return {
+        folder,
+        direct: permissions.filter((permission)=>!permission.inheritedFrom),
+        inheritedTargets: new Set(permissions.filter((permission)=>permission.inheritedFrom).map((p)=>String(p.target)))
+    };
+};
+export { loadFolderPermissions };
+
+//# sourceMappingURL=loadFolderPermissions.js.map

package/features/ai/loadFolderPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/loadFolderPermissions.js","sources":["../../../src/features/ai/loadFolderPermissions.ts"],"sourcesContent":["import type { GetFolderUseCase } from \"~/features/folder/GetFolder/index.js\";\nimport type { Folder, FolderPermission } from \"~/types.js\";\n\nexport interface LoadedFolderPermissions {\n    folder: Folder;\n    /** Rules set on this folder. The only ones it may change. */\n    direct: FolderPermission[];\n    /** Targets granted by an ancestor or a role. Writing these back would detach the inheritance. */\n    inheritedTargets: Set<string>;\n}\n\n/**\n * Reads a folder and separates the rules it owns from the ones it merely inherits.\n *\n * Every permission write starts here, because the field holds both kinds and a change has to preserve\n * the direct rules while leaving the inherited ones alone.\n */\nexport const loadFolderPermissions = async (\n    getFolder: GetFolderUseCase.Interface,\n    folderId: string\n): Promise<LoadedFolderPermissions> => {\n    const result = await getFolder.execute(folderId);\n\n    if (result.isFail()) {\n        throw new Error(\n            `Folder \"${folderId}\" not found: ${result.error.message}. Call listFolders for valid ids.`\n        );\n    }\n\n    const folder = result.value;\n    const permissions = folder.permissions ?? [];\n\n    return {\n        folder,\n        direct: permissions.filter(permission => !permission.inheritedFrom),\n        inheritedTargets: new Set(\n            permissions.filter(permission => permission.inheritedFrom).map(p => String(p.target))\n        )\n    };\n};\n"],"names":["loadFolderPermissions","getFolder","folderId","result","Error","folder","permissions","permission","Set","p","String"],"mappings":"AAiBO,MAAMA,wBAAwB,OACjCC,WACAC;IAEA,MAAMC,SAAS,MAAMF,UAAU,OAAO,CAACC;IAEvC,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIC,MACN,CAAC,QAAQ,EAAEF,SAAS,aAAa,EAAEC,OAAO,KAAK,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAIlG,MAAME,SAASF,OAAO,KAAK;IAC3B,MAAMG,cAAcD,OAAO,WAAW,IAAI,EAAE;IAE5C,OAAO;QACHA;QACA,QAAQC,YAAY,MAAM,CAACC,CAAAA,aAAc,CAACA,WAAW,aAAa;QAClE,kBAAkB,IAAIC,IAClBF,YAAY,MAAM,CAACC,CAAAA,aAAcA,WAAW,aAAa,EAAE,GAAG,CAACE,CAAAA,IAAKC,OAAOD,EAAE,MAAM;IAE3F;AACJ"}

package/features/cms/decorators/MoveEntryWithFlpDecorator.d.ts

@@ -9,7 +9,7 @@ declare class MoveEntryWithFlpDecoratorImpl implements MoveEntryUseCase.Interfac
     private getRevisionById;
     private decoratee;
     constructor(folderLevelPermissions: FolderLevelPermissions.Interface, getRevisionById: GetRevisionByIdUseCase.Interface, decoratee: MoveEntryUseCase.Interface);
-    execute<T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, id: string, targetFolderId: string): Promise<Result<import("@webiny/api-headless-cms/types/types").CmsEntry<T>, EntryNotAuthorizedError | import("@webiny/api-headless-cms/domain/contentEntry/errors.js").EntryPersistenceError | import("@webiny/api-headless-cms/domain/contentEntry/errors.js").EntryNotFoundError>>;
+    execute<T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, id: string, targetFolderId: string): Promise<Result<import("@webiny/api-headless-cms/types/types").CmsEntry<T>, EntryNotAuthorizedError | import("@webiny/api-headless-cms/domain/contentEntry/errors.js").EntryNotFoundError | import("@webiny/api-headless-cms/domain/contentEntry/errors.js").EntryPersistenceError>>;
 }
 export declare const MoveEntryWithFlpDecorator: typeof MoveEntryWithFlpDecoratorImpl;
 export {};

package/features/flp/CreateFlp/CreateFlpUseCase.d.ts

@@ -1,8 +1,8 @@
 import type { CreateFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
 import type { Folder } from "../../../folder/folder.types.js";
-import type { AcoContext } from "../../../types.js";
+import type { AcoFlpCrud } from "../../../features/folder/shared/abstractions.js";
 export declare class CreateFlpUseCase implements UseCaseAbstraction.Interface {
-    private context;
-    constructor(context: AcoContext);
+    private flpCrud;
+    constructor(flpCrud: AcoFlpCrud.Interface);
     execute(folder: Folder): Promise<void>;
 }

package/features/flp/CreateFlp/CreateFlpUseCase.js

@@ -2,18 +2,18 @@ import { WebinyError } from "@webiny/error";
 import { Path } from "../../../utils/Path.js";
 import { Permissions, ROOT_FOLDER } from "@webiny/shared-aco";
 class CreateFlpUseCase {
-    constructor(context){
-        this.context = context;
+    constructor(flpCrud){
+        this.flpCrud = flpCrud;
     }
     async execute(folder) {
         try {
             const { id, type, slug, parentId, permissions } = folder;
             let parentFlp = null;
             if (parentId) {
-                parentFlp = await this.context.aco.flp.get(parentId);
+                parentFlp = await this.flpCrud.get(parentId);
                 if (!parentFlp) throw new WebinyError("Parent folder level permission not found. Unable to create a new record in the FLP catalog.", "ERROR_CREATE_FLP_USE_CASE_PARENT_FLP_NOT_FOUND");
             }
-            await this.context.aco.flp.create({
+            await this.flpCrud.create({
                 id,
                 type,
                 slug,

package/features/flp/CreateFlp/CreateFlpUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/flp/CreateFlp/CreateFlpUseCase.js","sources":["../../../../src/features/flp/CreateFlp/CreateFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport { Path } from \"~/utils/Path.js\";\nimport { Permissions, ROOT_FOLDER } from \"@webiny/shared-aco\";\nimport type { CreateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { FolderLevelPermission as IFolderLevelPermission } from \"~/flp/flp.types.js\";\nimport type { Folder } from \"~/folder/folder.types.js\";\nimport type { AcoContext } from \"~/types.js\";\n\nexport class CreateFlpUseCase implements UseCaseAbstraction.Interface {\n    constructor(private context: AcoContext) {}\n\n    async execute(folder: Folder): Promise<void> {\n        try {\n            const { id, type, slug, parentId, permissions } = folder;\n            let parentFlp: IFolderLevelPermission | null = null;\n\n            if (parentId) {\n                parentFlp = await this.context.aco.flp.get(parentId);\n\n                if (!parentFlp) {\n                    throw new WebinyError(\n                        \"Parent folder level permission not found. Unable to create a new record in the FLP catalog.\",\n                        \"ERROR_CREATE_FLP_USE_CASE_PARENT_FLP_NOT_FOUND\"\n                    );\n                }\n            }\n\n            await this.context.aco.flp.create({\n                id,\n                type,\n                slug,\n                parentId: parentId ?? ROOT_FOLDER,\n                path: Path.create(slug, parentFlp?.path),\n                permissions: Permissions.create(permissions, parentFlp)\n            });\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while creating FLP\",\n                code: \"ERROR_CREATE_FLP_USE_CASE\"\n            });\n        }\n    }\n}\n"],"names":["CreateFlpUseCase","context","folder","id","type","slug","parentId","permissions","parentFlp","WebinyError","ROOT_FOLDER","Path","Permissions","error"],"mappings":";;;AAQO,MAAMA;IACT,YAAoBC,OAAmB,CAAE;aAArBA,OAAO,GAAPA;IAAsB;IAE1C,MAAM,QAAQC,MAAc,EAAiB;QACzC,IAAI;YACA,MAAM,EAAEC,EAAE,EAAEC,IAAI,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GAAGL;YAClD,IAAIM,YAA2C;YAE/C,IAAIF,UAAU;gBACVE,YAAY,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAACF;gBAE3C,IAAI,CAACE,WACD,MAAM,IAAIC,YACN,+FACA;YAGZ;YAEA,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC9BN;gBACAC;gBACAC;gBACA,UAAUC,YAAYI;gBACtB,MAAMC,KAAK,MAAM,CAACN,MAAMG,WAAW;gBACnC,aAAaI,YAAY,MAAM,CAACL,aAAaC;YACjD;QACJ,EAAE,OAAOK,OAAO;YACZ,MAAMJ,YAAY,IAAI,CAACI,OAAO;gBAC1B,SAAS;gBACT,MAAM;YACV;QACJ;IACJ;AACJ"}
+{"version":3,"file":"features/flp/CreateFlp/CreateFlpUseCase.js","sources":["../../../../src/features/flp/CreateFlp/CreateFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport { Path } from \"~/utils/Path.js\";\nimport { Permissions, ROOT_FOLDER } from \"@webiny/shared-aco\";\nimport type { CreateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { FolderLevelPermission as IFolderLevelPermission } from \"~/flp/flp.types.js\";\nimport type { Folder } from \"~/folder/folder.types.js\";\nimport type { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\n\nexport class CreateFlpUseCase implements UseCaseAbstraction.Interface {\n    constructor(private flpCrud: AcoFlpCrud.Interface) {}\n\n    async execute(folder: Folder): Promise<void> {\n        try {\n            const { id, type, slug, parentId, permissions } = folder;\n            let parentFlp: IFolderLevelPermission | null = null;\n\n            if (parentId) {\n                parentFlp = await this.flpCrud.get(parentId);\n\n                if (!parentFlp) {\n                    throw new WebinyError(\n                        \"Parent folder level permission not found. Unable to create a new record in the FLP catalog.\",\n                        \"ERROR_CREATE_FLP_USE_CASE_PARENT_FLP_NOT_FOUND\"\n                    );\n                }\n            }\n\n            await this.flpCrud.create({\n                id,\n                type,\n                slug,\n                parentId: parentId ?? ROOT_FOLDER,\n                path: Path.create(slug, parentFlp?.path),\n                permissions: Permissions.create(permissions, parentFlp)\n            });\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while creating FLP\",\n                code: \"ERROR_CREATE_FLP_USE_CASE\"\n            });\n        }\n    }\n}\n"],"names":["CreateFlpUseCase","flpCrud","folder","id","type","slug","parentId","permissions","parentFlp","WebinyError","ROOT_FOLDER","Path","Permissions","error"],"mappings":";;;AAQO,MAAMA;IACT,YAAoBC,OAA6B,CAAE;aAA/BA,OAAO,GAAPA;IAAgC;IAEpD,MAAM,QAAQC,MAAc,EAAiB;QACzC,IAAI;YACA,MAAM,EAAEC,EAAE,EAAEC,IAAI,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GAAGL;YAClD,IAAIM,YAA2C;YAE/C,IAAIF,UAAU;gBACVE,YAAY,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAACF;gBAEnC,IAAI,CAACE,WACD,MAAM,IAAIC,YACN,+FACA;YAGZ;YAEA,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtBN;gBACAC;gBACAC;gBACA,UAAUC,YAAYI;gBACtB,MAAMC,KAAK,MAAM,CAACN,MAAMG,WAAW;gBACnC,aAAaI,YAAY,MAAM,CAACL,aAAaC;YACjD;QACJ,EAAE,OAAOK,OAAO;YACZ,MAAMJ,YAAY,IAAI,CAACI,OAAO;gBAC1B,SAAS;gBACT,MAAM;YACV;QACJ;IACJ;AACJ"}

package/features/flp/CreateFlp/feature.d.ts

@@ -1,10 +1,5 @@
 import type { Container } from "@webiny/di";
-import type { AcoContext } from "../../../types.js";
-interface LegacyDeps {
-    context: AcoContext;
-}
 export declare const CreateFlpFeature: {
     name: string;
-    register(container: Container, context: LegacyDeps): void;
+    register(container: Container): void;
 };
-export {};

package/features/flp/CreateFlp/feature.js

@@ -1,10 +1,11 @@
 import { createFeature } from "@webiny/feature/api";
 import { CreateFlpUseCase } from "./CreateFlpUseCase.js";
 import { CreateFlpUseCase as external_abstractions_js_CreateFlpUseCase } from "./abstractions.js";
+import { AcoFlpCrud } from "../../folder/shared/abstractions.js";
 const CreateFlpFeature = createFeature({
     name: "CreateFlp",
-    register (container, deps) {
-        container.registerFactory(external_abstractions_js_CreateFlpUseCase, ()=>new CreateFlpUseCase(deps.context));
+    register (container) {
+        container.registerFactory(external_abstractions_js_CreateFlpUseCase, ()=>new CreateFlpUseCase(container.resolve(AcoFlpCrud)));
     }
 });
 export { CreateFlpFeature };

package/features/flp/CreateFlp/feature.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/flp/CreateFlp/feature.js","sources":["../../../../src/features/flp/CreateFlp/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { CreateFlpUseCase } from \"./CreateFlpUseCase.js\";\nimport { CreateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { AcoContext } from \"~/types.js\";\n\ninterface LegacyDeps {\n    context: AcoContext;\n}\n\nexport const CreateFlpFeature = createFeature({\n    name: \"CreateFlp\",\n    register(container: Container, deps: LegacyDeps) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new CreateFlpUseCase(deps.context);\n        });\n    }\n});\n"],"names":["CreateFlpFeature","createFeature","container","deps","UseCaseAbstraction","CreateFlpUseCase"],"mappings":";;;AAUO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAoB,EAAEC,IAAgB;QAC3CD,UAAU,eAAe,CAACE,2CAAoB,IACnC,IAAIC,iBAAiBF,KAAK,OAAO;IAEhD;AACJ"}
+{"version":3,"file":"features/flp/CreateFlp/feature.js","sources":["../../../../src/features/flp/CreateFlp/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { CreateFlpUseCase } from \"./CreateFlpUseCase.js\";\nimport { CreateFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\n\nexport const CreateFlpFeature = createFeature({\n    name: \"CreateFlp\",\n    register(container: Container) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new CreateFlpUseCase(container.resolve(AcoFlpCrud));\n        });\n    }\n});\n"],"names":["CreateFlpFeature","createFeature","container","UseCaseAbstraction","CreateFlpUseCase","AcoFlpCrud"],"mappings":";;;;AAMO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAoB;QACzBA,UAAU,eAAe,CAACC,2CAAoB,IACnC,IAAIC,iBAAiBF,UAAU,OAAO,CAACG;IAEtD;AACJ"}

package/features/flp/DeleteFlp/DeleteFlpUseCase.d.ts

@@ -1,8 +1,8 @@
 import type { DeleteFlpUseCase as UseCaseAbstraction } from "./abstractions.js";
 import type { Folder } from "../../../folder/folder.types.js";
-import type { AcoContext } from "../../../types.js";
+import type { AcoFlpCrud } from "../../../features/folder/shared/abstractions.js";
 export declare class DeleteFlpUseCase implements UseCaseAbstraction.Interface {
-    private context;
-    constructor(context: AcoContext);
+    private flpCrud;
+    constructor(flpCrud: AcoFlpCrud.Interface);
     execute(folder: Folder): Promise<void>;
 }

package/features/flp/DeleteFlp/DeleteFlpUseCase.js

@@ -1,14 +1,14 @@
 import { WebinyError } from "@webiny/error";
 class DeleteFlpUseCase {
-    constructor(context){
-        this.context = context;
+    constructor(flpCrud){
+        this.flpCrud = flpCrud;
     }
     async execute(folder) {
         try {
             if (!folder) throw new WebinyError("Missing `folder` from the task input, I can't delete the record from the FLP catalog.", "ERROR_DELETE_FLP_USE_CASE_FOLDER_NOT_PROVIDED", {
                 folder
             });
-            await this.context.aco.flp.delete(folder.id);
+            await this.flpCrud.delete(folder.id);
         } catch (error) {
             throw WebinyError.from(error, {
                 message: "Error while deleting FLP",

package/features/flp/DeleteFlp/DeleteFlpUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/flp/DeleteFlp/DeleteFlpUseCase.js","sources":["../../../../src/features/flp/DeleteFlp/DeleteFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport type { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { Folder } from \"~/folder/folder.types.js\";\nimport type { AcoContext } from \"~/types.js\";\n\nexport class DeleteFlpUseCase implements UseCaseAbstraction.Interface {\n    constructor(private context: AcoContext) {}\n\n    async execute(folder: Folder): Promise<void> {\n        try {\n            if (!folder) {\n                throw new WebinyError(\n                    \"Missing `folder` from the task input, I can't delete the record from the FLP catalog.\",\n                    \"ERROR_DELETE_FLP_USE_CASE_FOLDER_NOT_PROVIDED\",\n                    { folder }\n                );\n            }\n            await this.context.aco.flp.delete(folder.id);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while deleting FLP\",\n                code: \"ERROR_DELETE_FLP_USE_CASE\"\n            });\n        }\n    }\n}\n"],"names":["DeleteFlpUseCase","context","folder","WebinyError","error"],"mappings":";AAKO,MAAMA;IACT,YAAoBC,OAAmB,CAAE;aAArBA,OAAO,GAAPA;IAAsB;IAE1C,MAAM,QAAQC,MAAc,EAAiB;QACzC,IAAI;YACA,IAAI,CAACA,QACD,MAAM,IAAIC,YACN,yFACA,iDACA;gBAAED;YAAO;YAGjB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAACA,OAAO,EAAE;QAC/C,EAAE,OAAOE,OAAO;YACZ,MAAMD,YAAY,IAAI,CAACC,OAAO;gBAC1B,SAAS;gBACT,MAAM;YACV;QACJ;IACJ;AACJ"}
+{"version":3,"file":"features/flp/DeleteFlp/DeleteFlpUseCase.js","sources":["../../../../src/features/flp/DeleteFlp/DeleteFlpUseCase.ts"],"sourcesContent":["import { WebinyError } from \"@webiny/error\";\nimport type { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { Folder } from \"~/folder/folder.types.js\";\nimport type { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\n\nexport class DeleteFlpUseCase implements UseCaseAbstraction.Interface {\n    constructor(private flpCrud: AcoFlpCrud.Interface) {}\n\n    async execute(folder: Folder): Promise<void> {\n        try {\n            if (!folder) {\n                throw new WebinyError(\n                    \"Missing `folder` from the task input, I can't delete the record from the FLP catalog.\",\n                    \"ERROR_DELETE_FLP_USE_CASE_FOLDER_NOT_PROVIDED\",\n                    { folder }\n                );\n            }\n            await this.flpCrud.delete(folder.id);\n        } catch (error) {\n            throw WebinyError.from(error, {\n                message: \"Error while deleting FLP\",\n                code: \"ERROR_DELETE_FLP_USE_CASE\"\n            });\n        }\n    }\n}\n"],"names":["DeleteFlpUseCase","flpCrud","folder","WebinyError","error"],"mappings":";AAKO,MAAMA;IACT,YAAoBC,OAA6B,CAAE;aAA/BA,OAAO,GAAPA;IAAgC;IAEpD,MAAM,QAAQC,MAAc,EAAiB;QACzC,IAAI;YACA,IAAI,CAACA,QACD,MAAM,IAAIC,YACN,yFACA,iDACA;gBAAED;YAAO;YAGjB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAACA,OAAO,EAAE;QACvC,EAAE,OAAOE,OAAO;YACZ,MAAMD,YAAY,IAAI,CAACC,OAAO;gBAC1B,SAAS;gBACT,MAAM;YACV;QACJ;IACJ;AACJ"}

package/features/flp/DeleteFlp/feature.d.ts

@@ -1,10 +1,5 @@
 import type { Container } from "@webiny/di";
-import type { AcoContext } from "../../../types.js";
-interface LegacyDeps {
-    context: AcoContext;
-}
 export declare const DeleteFlpFeature: {
     name: string;
-    register(container: Container, context: LegacyDeps): void;
+    register(container: Container): void;
 };
-export {};

package/features/flp/DeleteFlp/feature.js

@@ -1,10 +1,11 @@
 import { createFeature } from "@webiny/feature/api";
 import { DeleteFlpUseCase } from "./DeleteFlpUseCase.js";
 import { DeleteFlpUseCase as external_abstractions_js_DeleteFlpUseCase } from "./abstractions.js";
+import { AcoFlpCrud } from "../../folder/shared/abstractions.js";
 const DeleteFlpFeature = createFeature({
     name: "DeleteFlp",
-    register (container, deps) {
-        container.registerFactory(external_abstractions_js_DeleteFlpUseCase, ()=>new DeleteFlpUseCase(deps.context));
+    register (container) {
+        container.registerFactory(external_abstractions_js_DeleteFlpUseCase, ()=>new DeleteFlpUseCase(container.resolve(AcoFlpCrud)));
     }
 });
 export { DeleteFlpFeature };

package/features/flp/DeleteFlp/feature.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/flp/DeleteFlp/feature.js","sources":["../../../../src/features/flp/DeleteFlp/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { DeleteFlpUseCase } from \"./DeleteFlpUseCase.js\";\nimport { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport type { AcoContext } from \"~/types.js\";\n\ninterface LegacyDeps {\n    context: AcoContext;\n}\n\nexport const DeleteFlpFeature = createFeature({\n    name: \"DeleteFlp\",\n    register(container: Container, deps: LegacyDeps) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new DeleteFlpUseCase(deps.context);\n        });\n    }\n});\n"],"names":["DeleteFlpFeature","createFeature","container","deps","UseCaseAbstraction","DeleteFlpUseCase"],"mappings":";;;AAUO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAoB,EAAEC,IAAgB;QAC3CD,UAAU,eAAe,CAACE,2CAAoB,IACnC,IAAIC,iBAAiBF,KAAK,OAAO;IAEhD;AACJ"}
+{"version":3,"file":"features/flp/DeleteFlp/feature.js","sources":["../../../../src/features/flp/DeleteFlp/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport type { Container } from \"@webiny/di\";\nimport { DeleteFlpUseCase } from \"./DeleteFlpUseCase.js\";\nimport { DeleteFlpUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AcoFlpCrud } from \"~/features/folder/shared/abstractions.js\";\n\nexport const DeleteFlpFeature = createFeature({\n    name: \"DeleteFlp\",\n    register(container: Container) {\n        container.registerFactory(UseCaseAbstraction, () => {\n            return new DeleteFlpUseCase(container.resolve(AcoFlpCrud));\n        });\n    }\n});\n"],"names":["DeleteFlpFeature","createFeature","container","UseCaseAbstraction","DeleteFlpUseCase","AcoFlpCrud"],"mappings":";;;;AAMO,MAAMA,mBAAmBC,cAAc;IAC1C,MAAM;IACN,UAASC,SAAoB;QACzBA,UAAU,eAAe,CAACC,2CAAoB,IACnC,IAAIC,iBAAiBF,UAAU,OAAO,CAACG;IAEtD;AACJ"}

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.d.ts

@@ -1,5 +1,5 @@
 import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
-import { WcpContext } from "@webiny/api-core/features/wcp/WcpContext/index.js";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
 import { ListUserTeamsUseCase } from "@webiny/api-core/features/users/ListUserTeams/index.js";
 import { type CanAccessFolderContentParams, type CanAccessFolderParams } from "./useCases/index.js";
 import { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from "./abstractions.js";
@@ -8,11 +8,11 @@ import { ListFlpsUseCase } from "../../../features/flp/ListFlps/index.js";
 import { GetFlpUseCase } from "../../../features/flp/GetFlp/index.js";
 declare class FolderLevelPermissionsImpl implements FolderLevelPermissionsAbstraction.Interface {
     private identityContext;
-    private wcpContext;
+    private featureFlags;
     private listUserTeamsUseCase;
     private getFlpUseCase;
     private listFlpsUseCase;
-    constructor(identityContext: IdentityContext.Interface, wcpContext: WcpContext.Interface, listUserTeamsUseCase: ListUserTeamsUseCase.Interface, getFlpUseCase: GetFlpUseCase.Interface, listFlpsUseCase: ListFlpsUseCase.Interface);
+    constructor(identityContext: IdentityContext.Interface, featureFlags: FeatureFlags.Interface, listUserTeamsUseCase: ListUserTeamsUseCase.Interface, getFlpUseCase: GetFlpUseCase.Interface, listFlpsUseCase: ListFlpsUseCase.Interface);
     canUseFolderLevelPermissions(enabled?: boolean): boolean;
     canUseTeams(): boolean;
     canCreateFolderInRoot(): boolean;

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.js

@@ -1,6 +1,6 @@
 import { createImplementation } from "@webiny/di";
 import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
-import { WcpContext } from "@webiny/api-core/features/wcp/WcpContext/index.js";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
 import { ListUserTeamsUseCase } from "@webiny/api-core/features/users/ListUserTeams/index.js";
 import { NotAuthorizedError } from "@webiny/api-core/features/security/shared/index.js";
 import { CanAccessFolder, CanAccessFolderContent, CanCreateFolderInRoot, CheckNotInheritedPermissions, GetDefaultPermissions, GetDefaultPermissionsWithTeams } from "./useCases/index.js";
@@ -8,9 +8,9 @@ import { FolderLevelPermissions } from "./abstractions.js";
 import { ListFlpsUseCase } from "../ListFlps/index.js";
 import { GetFlpUseCase } from "../GetFlp/index.js";
 class FolderLevelPermissionsImpl {
-    constructor(identityContext, wcpContext, listUserTeamsUseCase, getFlpUseCase, listFlpsUseCase){
+    constructor(identityContext, featureFlags, listUserTeamsUseCase, getFlpUseCase, listFlpsUseCase){
         this.identityContext = identityContext;
-        this.wcpContext = wcpContext;
+        this.featureFlags = featureFlags;
         this.listUserTeamsUseCase = listUserTeamsUseCase;
         this.getFlpUseCase = getFlpUseCase;
         this.listFlpsUseCase = listFlpsUseCase;
@@ -20,10 +20,10 @@ class FolderLevelPermissionsImpl {
         const identity = this.identityContext.getIdentity();
         if (!identity) return false;
         if ("admin" !== identity.type) return false;
-        return this.wcpContext.canUseFolderLevelPermissions();
+        return this.featureFlags.get().isEnabled("advancedAccessControlLayer.folderLevelPermissions");
     }
     canUseTeams() {
-        return this.wcpContext.canUseTeams();
+        return this.featureFlags.get().isEnabled("advancedAccessControlLayer.teams");
     }
     canCreateFolderInRoot() {
         const canCreateFolderInRootUseCase = new CanCreateFolderInRoot();
@@ -101,7 +101,7 @@ const FolderLevelPermissions_FolderLevelPermissions = createImplementation({
     implementation: FolderLevelPermissionsImpl,
     dependencies: [
         IdentityContext,
-        WcpContext,
+        FeatureFlags,
         ListUserTeamsUseCase,
         GetFlpUseCase,
         ListFlpsUseCase

package/features/flp/FolderLevelPermissions/FolderLevelPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/flp/FolderLevelPermissions/FolderLevelPermissions.js","sources":["../../../../src/features/flp/FolderLevelPermissions/FolderLevelPermissions.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { WcpContext } from \"@webiny/api-core/features/wcp/WcpContext/index.js\";\nimport { ListUserTeamsUseCase } from \"@webiny/api-core/features/users/ListUserTeams/index.js\";\nimport { NotAuthorizedError } from \"@webiny/api-core/features/security/shared/index.js\";\nimport {\n    CanAccessFolder,\n    CanAccessFolderContent,\n    type CanAccessFolderContentParams,\n    type CanAccessFolderParams,\n    CanCreateFolderInRoot,\n    CheckNotInheritedPermissions,\n    GetDefaultPermissions,\n    GetDefaultPermissionsWithTeams\n} from \"./useCases/index.js\";\nimport { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from \"./abstractions.js\";\nimport type { FolderLevelPermission, FolderPermission, ListFlpsParams } from \"~/types.js\";\nimport { ListFlpsUseCase } from \"~/features/flp/ListFlps/index.js\";\nimport { GetFlpUseCase } from \"~/features/flp/GetFlp/index.js\";\n\nclass FolderLevelPermissionsImpl implements FolderLevelPermissionsAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private wcpContext: WcpContext.Interface,\n        private listUserTeamsUseCase: ListUserTeamsUseCase.Interface,\n        private getFlpUseCase: GetFlpUseCase.Interface,\n        private listFlpsUseCase: ListFlpsUseCase.Interface\n    ) {}\n\n    public canUseFolderLevelPermissions(enabled?: boolean): boolean {\n        if (enabled === false) {\n            return false;\n        }\n\n        const identity = this.identityContext.getIdentity();\n\n        // FLPs only work with authenticated identities (logged-in users).\n        if (!identity) {\n            return false;\n        }\n\n        // At the moment, we only want FLP to be used with identities of type \"admin\".\n        // This temporarily addresses the issue of API keys not being able to access content, because\n        // FLPs doesn't work with them. Once we start adding FLPs to API keys, we can remove this check.\n        if (identity.type !== \"admin\") {\n            return false;\n        }\n\n        return this.wcpContext.canUseFolderLevelPermissions();\n    }\n\n    public canUseTeams(): boolean {\n        return this.wcpContext.canUseTeams();\n    }\n\n    public canCreateFolderInRoot(): boolean {\n        const canCreateFolderInRootUseCase = new CanCreateFolderInRoot();\n        return canCreateFolderInRootUseCase.execute();\n    }\n\n    public permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean {\n        const checkNotInheritedPermissionsUseCase = new CheckNotInheritedPermissions();\n        return checkNotInheritedPermissionsUseCase.execute(permissions);\n    }\n\n    public async canAccessFolder(params: CanAccessFolderParams): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        const canAccessFolderUseCase = new CanAccessFolder(this.identityContext);\n        return await canAccessFolderUseCase.execute(params);\n    }\n\n    public async canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean> {\n        const canUseFlp = this.canUseFolderLevelPermissions();\n        const authEnabled = this.identityContext.isAuthorizationEnabled();\n\n        if (!canUseFlp || !authEnabled) {\n            return true;\n        }\n\n        const canAccessFolderContentUseCase = new CanAccessFolderContent(this.identityContext);\n        return await canAccessFolderContentUseCase.execute(params);\n    }\n\n    public async ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void> {\n        const result = await this.canAccessFolder(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void> {\n        const result = await this.canAccessFolderContent(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async canManageFolderContent(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolderContent({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolder({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean> {\n        if (!this.canUseFolderLevelPermissions()) {\n            return false;\n        }\n\n        if (!this.identityContext.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return await this.canAccessFolder({\n            permissions: flp.permissions,\n            rwd: \"w\",\n            managePermissions: true\n        });\n    }\n\n    public getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]> {\n        const getDefaultPermissionsUseCase = new GetDefaultPermissions(this.identityContext);\n\n        if (this.canUseTeams()) {\n            const getDefaultPermissionsWithTeams = new GetDefaultPermissionsWithTeams(\n                this.identityContext,\n                this.listUserTeamsUseCase,\n                getDefaultPermissionsUseCase\n            );\n\n            return getDefaultPermissionsWithTeams.execute(permissions);\n        }\n\n        return getDefaultPermissionsUseCase.execute(permissions);\n    }\n\n    public async listFolderLevelPermissions(params: ListFlpsParams): Promise<\n        Array<{\n            id: string;\n            permissions: FolderPermission[];\n        }>\n    > {\n        const flps = await this.listFlpsUseCase.execute(params);\n\n        return Promise.all(\n            flps.map(async flp => ({\n                id: flp.id,\n                permissions: await this.getDefaultPermissions(flp.permissions)\n            }))\n        );\n    }\n\n    public async getFolderLevelPermissions(id: string): Promise<FolderPermission[]> {\n        const flp = await this.getFlpUseCase.execute(id);\n        return await this.getDefaultPermissions(flp?.permissions ?? []);\n    }\n}\n\nexport const FolderLevelPermissions = createImplementation({\n    abstraction: FolderLevelPermissionsAbstraction,\n    implementation: FolderLevelPermissionsImpl,\n    dependencies: [\n        IdentityContext,\n        WcpContext,\n        ListUserTeamsUseCase,\n        GetFlpUseCase,\n        ListFlpsUseCase\n    ]\n});\n"],"names":["FolderLevelPermissionsImpl","identityContext","wcpContext","listUserTeamsUseCase","getFlpUseCase","listFlpsUseCase","enabled","identity","canCreateFolderInRootUseCase","CanCreateFolderInRoot","permissions","checkNotInheritedPermissionsUseCase","CheckNotInheritedPermissions","params","canAccessFolderUseCase","CanAccessFolder","canUseFlp","authEnabled","canAccessFolderContentUseCase","CanAccessFolderContent","result","NotAuthorizedError","flp","getDefaultPermissionsUseCase","GetDefaultPermissions","getDefaultPermissionsWithTeams","GetDefaultPermissionsWithTeams","flps","Promise","id","FolderLevelPermissions","createImplementation","FolderLevelPermissionsAbstraction","IdentityContext","WcpContext","ListUserTeamsUseCase","GetFlpUseCase","ListFlpsUseCase"],"mappings":";;;;;;;;;AAoBA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,UAAgC,EAChCC,oBAAoD,EACpDC,aAAsC,EACtCC,eAA0C,CACpD;aALUJ,eAAe,GAAfA;aACAC,UAAU,GAAVA;aACAC,oBAAoB,GAApBA;aACAC,aAAa,GAAbA;aACAC,eAAe,GAAfA;IACT;IAEI,6BAA6BC,OAAiB,EAAW;QAC5D,IAAIA,AAAY,UAAZA,SACA,OAAO;QAGX,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QAGjD,IAAI,CAACA,UACD,OAAO;QAMX,IAAIA,AAAkB,YAAlBA,SAAS,IAAI,EACb,OAAO;QAGX,OAAO,IAAI,CAAC,UAAU,CAAC,4BAA4B;IACvD;IAEO,cAAuB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW;IACtC;IAEO,wBAAiC;QACpC,MAAMC,+BAA+B,IAAIC;QACzC,OAAOD,6BAA6B,OAAO;IAC/C;IAEO,0CAA0CE,WAA+B,EAAW;QACvF,MAAMC,sCAAsC,IAAIC;QAChD,OAAOD,oCAAoC,OAAO,CAACD;IACvD;IAEA,MAAa,gBAAgBG,MAA6B,EAAoB;QAC1E,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,MAAMC,yBAAyB,IAAIC,gBAAgB,IAAI,CAAC,eAAe;QACvE,OAAO,MAAMD,uBAAuB,OAAO,CAACD;IAChD;IAEA,MAAa,uBAAuBA,MAAoC,EAAoB;QACxF,MAAMG,YAAY,IAAI,CAAC,4BAA4B;QACnD,MAAMC,cAAc,IAAI,CAAC,eAAe,CAAC,sBAAsB;QAE/D,IAAI,CAACD,aAAa,CAACC,aACf,OAAO;QAGX,MAAMC,gCAAgC,IAAIC,uBAAuB,IAAI,CAAC,eAAe;QACrF,OAAO,MAAMD,8BAA8B,OAAO,CAACL;IACvD;IAEA,MAAa,sBAAsBA,MAA6B,EAAiB;QAC7E,MAAMO,SAAS,MAAM,IAAI,CAAC,eAAe,CAACP;QAC1C,IAAI,CAACO,QACD,MAAM,IAAIC;IAElB;IAEA,MAAa,6BAA6BR,MAAoC,EAAiB;QAC3F,MAAMO,SAAS,MAAM,IAAI,CAAC,sBAAsB,CAACP;QACjD,IAAI,CAACO,QACD,MAAM,IAAIC;IAElB;IAEA,MAAa,uBAAuBC,GAA0B,EAAoB;QAC9E,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC;YAAE,aAAaA,IAAI,WAAW;YAAE,KAAK;QAAI;IACtF;IAEA,MAAa,yBAAyBA,GAA0B,EAAoB;QAChF,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC;YAAE,aAAaA,IAAI,WAAW;YAAE,KAAK;QAAI;IAC/E;IAEA,MAAa,2BAA2BA,GAA0B,EAAoB;QAClF,IAAI,CAAC,IAAI,CAAC,4BAA4B,IAClC,OAAO;QAGX,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAC5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC;YAC9B,aAAaA,IAAI,WAAW;YAC5B,KAAK;YACL,mBAAmB;QACvB;IACJ;IAEO,sBAAsBZ,WAA+B,EAA+B;QACvF,MAAMa,+BAA+B,IAAIC,sBAAsB,IAAI,CAAC,eAAe;QAEnF,IAAI,IAAI,CAAC,WAAW,IAAI;YACpB,MAAMC,iCAAiC,IAAIC,+BACvC,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,oBAAoB,EACzBH;YAGJ,OAAOE,+BAA+B,OAAO,CAACf;QAClD;QAEA,OAAOa,6BAA6B,OAAO,CAACb;IAChD;IAEA,MAAa,2BAA2BG,MAAsB,EAK5D;QACE,MAAMc,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAACd;QAEhD,OAAOe,QAAQ,GAAG,CACdD,KAAK,GAAG,CAAC,OAAML,MAAQ;gBACnB,IAAIA,IAAI,EAAE;gBACV,aAAa,MAAM,IAAI,CAAC,qBAAqB,CAACA,IAAI,WAAW;YACjE;IAER;IAEA,MAAa,0BAA0BO,EAAU,EAA+B;QAC5E,MAAMP,MAAM,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAACO;QAC7C,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAACP,KAAK,eAAe,EAAE;IAClE;AACJ;AAEO,MAAMQ,gDAAyBC,qBAAqB;IACvD,aAAaC;IACb,gBAAgBhC;IAChB,cAAc;QACViC;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}
+{"version":3,"file":"features/flp/FolderLevelPermissions/FolderLevelPermissions.js","sources":["../../../../src/features/flp/FolderLevelPermissions/FolderLevelPermissions.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/di\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { FeatureFlags } from \"@webiny/api-core/features/featureFlags/abstractions.js\";\nimport { ListUserTeamsUseCase } from \"@webiny/api-core/features/users/ListUserTeams/index.js\";\nimport { NotAuthorizedError } from \"@webiny/api-core/features/security/shared/index.js\";\nimport {\n    CanAccessFolder,\n    CanAccessFolderContent,\n    type CanAccessFolderContentParams,\n    type CanAccessFolderParams,\n    CanCreateFolderInRoot,\n    CheckNotInheritedPermissions,\n    GetDefaultPermissions,\n    GetDefaultPermissionsWithTeams\n} from \"./useCases/index.js\";\nimport { FolderLevelPermissions as FolderLevelPermissionsAbstraction } from \"./abstractions.js\";\nimport type { FolderLevelPermission, FolderPermission, ListFlpsParams } from \"~/types.js\";\nimport { ListFlpsUseCase } from \"~/features/flp/ListFlps/index.js\";\nimport { GetFlpUseCase } from \"~/features/flp/GetFlp/index.js\";\n\nclass FolderLevelPermissionsImpl implements FolderLevelPermissionsAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private featureFlags: FeatureFlags.Interface,\n        private listUserTeamsUseCase: ListUserTeamsUseCase.Interface,\n        private getFlpUseCase: GetFlpUseCase.Interface,\n        private listFlpsUseCase: ListFlpsUseCase.Interface\n    ) {}\n\n    public canUseFolderLevelPermissions(enabled?: boolean): boolean {\n        if (enabled === false) {\n            return false;\n        }\n\n        const identity = this.identityContext.getIdentity();\n\n        // FLPs only work with authenticated identities (logged-in users).\n        if (!identity) {\n            return false;\n        }\n\n        // At the moment, we only want FLP to be used with identities of type \"admin\".\n        // This temporarily addresses the issue of API keys not being able to access content, because\n        // FLPs doesn't work with them. Once we start adding FLPs to API keys, we can remove this check.\n        if (identity.type !== \"admin\") {\n            return false;\n        }\n\n        return this.featureFlags\n            .get()\n            .isEnabled(\"advancedAccessControlLayer.folderLevelPermissions\");\n    }\n\n    public canUseTeams(): boolean {\n        return this.featureFlags.get().isEnabled(\"advancedAccessControlLayer.teams\");\n    }\n\n    public canCreateFolderInRoot(): boolean {\n        const canCreateFolderInRootUseCase = new CanCreateFolderInRoot();\n        return canCreateFolderInRootUseCase.execute();\n    }\n\n    public permissionsIncludeNonInheritedPermissions(permissions: FolderPermission[]): boolean {\n        const checkNotInheritedPermissionsUseCase = new CheckNotInheritedPermissions();\n        return checkNotInheritedPermissionsUseCase.execute(permissions);\n    }\n\n    public async canAccessFolder(params: CanAccessFolderParams): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        const canAccessFolderUseCase = new CanAccessFolder(this.identityContext);\n        return await canAccessFolderUseCase.execute(params);\n    }\n\n    public async canAccessFolderContent(params: CanAccessFolderContentParams): Promise<boolean> {\n        const canUseFlp = this.canUseFolderLevelPermissions();\n        const authEnabled = this.identityContext.isAuthorizationEnabled();\n\n        if (!canUseFlp || !authEnabled) {\n            return true;\n        }\n\n        const canAccessFolderContentUseCase = new CanAccessFolderContent(this.identityContext);\n        return await canAccessFolderContentUseCase.execute(params);\n    }\n\n    public async ensureCanAccessFolder(params: CanAccessFolderParams): Promise<void> {\n        const result = await this.canAccessFolder(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async ensureCanAccessFolderContent(params: CanAccessFolderContentParams): Promise<void> {\n        const result = await this.canAccessFolderContent(params);\n        if (!result) {\n            throw new NotAuthorizedError();\n        }\n    }\n\n    public async canManageFolderContent(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolderContent({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderStructure(flp: FolderLevelPermission): Promise<boolean> {\n        if (\n            !this.canUseFolderLevelPermissions() ||\n            !this.identityContext.isAuthorizationEnabled()\n        ) {\n            return true;\n        }\n\n        return await this.canAccessFolder({ permissions: flp.permissions, rwd: \"w\" });\n    }\n\n    public async canManageFolderPermissions(flp: FolderLevelPermission): Promise<boolean> {\n        if (!this.canUseFolderLevelPermissions()) {\n            return false;\n        }\n\n        if (!this.identityContext.isAuthorizationEnabled()) {\n            return true;\n        }\n\n        return await this.canAccessFolder({\n            permissions: flp.permissions,\n            rwd: \"w\",\n            managePermissions: true\n        });\n    }\n\n    public getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]> {\n        const getDefaultPermissionsUseCase = new GetDefaultPermissions(this.identityContext);\n\n        if (this.canUseTeams()) {\n            const getDefaultPermissionsWithTeams = new GetDefaultPermissionsWithTeams(\n                this.identityContext,\n                this.listUserTeamsUseCase,\n                getDefaultPermissionsUseCase\n            );\n\n            return getDefaultPermissionsWithTeams.execute(permissions);\n        }\n\n        return getDefaultPermissionsUseCase.execute(permissions);\n    }\n\n    public async listFolderLevelPermissions(params: ListFlpsParams): Promise<\n        Array<{\n            id: string;\n            permissions: FolderPermission[];\n        }>\n    > {\n        const flps = await this.listFlpsUseCase.execute(params);\n\n        return Promise.all(\n            flps.map(async flp => ({\n                id: flp.id,\n                permissions: await this.getDefaultPermissions(flp.permissions)\n            }))\n        );\n    }\n\n    public async getFolderLevelPermissions(id: string): Promise<FolderPermission[]> {\n        const flp = await this.getFlpUseCase.execute(id);\n        return await this.getDefaultPermissions(flp?.permissions ?? []);\n    }\n}\n\nexport const FolderLevelPermissions = createImplementation({\n    abstraction: FolderLevelPermissionsAbstraction,\n    implementation: FolderLevelPermissionsImpl,\n    dependencies: [\n        IdentityContext,\n        FeatureFlags,\n        ListUserTeamsUseCase,\n        GetFlpUseCase,\n        ListFlpsUseCase\n    ]\n});\n"],"names":["FolderLevelPermissionsImpl","identityContext","featureFlags","listUserTeamsUseCase","getFlpUseCase","listFlpsUseCase","enabled","identity","canCreateFolderInRootUseCase","CanCreateFolderInRoot","permissions","checkNotInheritedPermissionsUseCase","CheckNotInheritedPermissions","params","canAccessFolderUseCase","CanAccessFolder","canUseFlp","authEnabled","canAccessFolderContentUseCase","CanAccessFolderContent","result","NotAuthorizedError","flp","getDefaultPermissionsUseCase","GetDefaultPermissions","getDefaultPermissionsWithTeams","GetDefaultPermissionsWithTeams","flps","Promise","id","FolderLevelPermissions","createImplementation","FolderLevelPermissionsAbstraction","IdentityContext","FeatureFlags","ListUserTeamsUseCase","GetFlpUseCase","ListFlpsUseCase"],"mappings":";;;;;;;;;AAoBA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,YAAoC,EACpCC,oBAAoD,EACpDC,aAAsC,EACtCC,eAA0C,CACpD;aALUJ,eAAe,GAAfA;aACAC,YAAY,GAAZA;aACAC,oBAAoB,GAApBA;aACAC,aAAa,GAAbA;aACAC,eAAe,GAAfA;IACT;IAEI,6BAA6BC,OAAiB,EAAW;QAC5D,IAAIA,AAAY,UAAZA,SACA,OAAO;QAGX,MAAMC,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QAGjD,IAAI,CAACA,UACD,OAAO;QAMX,IAAIA,AAAkB,YAAlBA,SAAS,IAAI,EACb,OAAO;QAGX,OAAO,IAAI,CAAC,YAAY,CACnB,GAAG,GACH,SAAS,CAAC;IACnB;IAEO,cAAuB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,SAAS,CAAC;IAC7C;IAEO,wBAAiC;QACpC,MAAMC,+BAA+B,IAAIC;QACzC,OAAOD,6BAA6B,OAAO;IAC/C;IAEO,0CAA0CE,WAA+B,EAAW;QACvF,MAAMC,sCAAsC,IAAIC;QAChD,OAAOD,oCAAoC,OAAO,CAACD;IACvD;IAEA,MAAa,gBAAgBG,MAA6B,EAAoB;QAC1E,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,MAAMC,yBAAyB,IAAIC,gBAAgB,IAAI,CAAC,eAAe;QACvE,OAAO,MAAMD,uBAAuB,OAAO,CAACD;IAChD;IAEA,MAAa,uBAAuBA,MAAoC,EAAoB;QACxF,MAAMG,YAAY,IAAI,CAAC,4BAA4B;QACnD,MAAMC,cAAc,IAAI,CAAC,eAAe,CAAC,sBAAsB;QAE/D,IAAI,CAACD,aAAa,CAACC,aACf,OAAO;QAGX,MAAMC,gCAAgC,IAAIC,uBAAuB,IAAI,CAAC,eAAe;QACrF,OAAO,MAAMD,8BAA8B,OAAO,CAACL;IACvD;IAEA,MAAa,sBAAsBA,MAA6B,EAAiB;QAC7E,MAAMO,SAAS,MAAM,IAAI,CAAC,eAAe,CAACP;QAC1C,IAAI,CAACO,QACD,MAAM,IAAIC;IAElB;IAEA,MAAa,6BAA6BR,MAAoC,EAAiB;QAC3F,MAAMO,SAAS,MAAM,IAAI,CAAC,sBAAsB,CAACP;QACjD,IAAI,CAACO,QACD,MAAM,IAAIC;IAElB;IAEA,MAAa,uBAAuBC,GAA0B,EAAoB;QAC9E,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC;YAAE,aAAaA,IAAI,WAAW;YAAE,KAAK;QAAI;IACtF;IAEA,MAAa,yBAAyBA,GAA0B,EAAoB;QAChF,IACI,CAAC,IAAI,CAAC,4BAA4B,MAClC,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAE5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC;YAAE,aAAaA,IAAI,WAAW;YAAE,KAAK;QAAI;IAC/E;IAEA,MAAa,2BAA2BA,GAA0B,EAAoB;QAClF,IAAI,CAAC,IAAI,CAAC,4BAA4B,IAClC,OAAO;QAGX,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,sBAAsB,IAC5C,OAAO;QAGX,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC;YAC9B,aAAaA,IAAI,WAAW;YAC5B,KAAK;YACL,mBAAmB;QACvB;IACJ;IAEO,sBAAsBZ,WAA+B,EAA+B;QACvF,MAAMa,+BAA+B,IAAIC,sBAAsB,IAAI,CAAC,eAAe;QAEnF,IAAI,IAAI,CAAC,WAAW,IAAI;YACpB,MAAMC,iCAAiC,IAAIC,+BACvC,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,oBAAoB,EACzBH;YAGJ,OAAOE,+BAA+B,OAAO,CAACf;QAClD;QAEA,OAAOa,6BAA6B,OAAO,CAACb;IAChD;IAEA,MAAa,2BAA2BG,MAAsB,EAK5D;QACE,MAAMc,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAACd;QAEhD,OAAOe,QAAQ,GAAG,CACdD,KAAK,GAAG,CAAC,OAAML,MAAQ;gBACnB,IAAIA,IAAI,EAAE;gBACV,aAAa,MAAM,IAAI,CAAC,qBAAqB,CAACA,IAAI,WAAW;YACjE;IAER;IAEA,MAAa,0BAA0BO,EAAU,EAA+B;QAC5E,MAAMP,MAAM,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAACO;QAC7C,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAACP,KAAK,eAAe,EAAE;IAClE;AACJ;AAEO,MAAMQ,gDAAyBC,qBAAqB;IACvD,aAAaC;IACb,gBAAgBhC;IAChB,cAAc;QACViC;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/features/flp/FolderLevelPermissions/NoopFolderLevelPermissions.d.ts

@@ -0,0 +1,25 @@
+import { type IFolderLevelPermissions } from "./abstractions.js";
+import type { FolderPermission } from "../../../types.js";
+declare class NoopFolderLevelPermissionsImpl implements IFolderLevelPermissions {
+    canUseFolderLevelPermissions(): boolean;
+    canUseTeams(): boolean;
+    canCreateFolderInRoot(): boolean;
+    permissionsIncludeNonInheritedPermissions(): boolean;
+    canAccessFolder(): Promise<boolean>;
+    canAccessFolderContent(): Promise<boolean>;
+    ensureCanAccessFolder(): Promise<void>;
+    ensureCanAccessFolderContent(): Promise<void>;
+    canManageFolderContent(): Promise<boolean>;
+    canManageFolderStructure(): Promise<boolean>;
+    canManageFolderPermissions(): Promise<boolean>;
+    getDefaultPermissions(permissions: FolderPermission[]): Promise<FolderPermission[]>;
+    listFolderLevelPermissions(): Promise<Array<{
+        id: string;
+        permissions: FolderPermission[];
+    }>>;
+    getFolderLevelPermissions(): Promise<FolderPermission[]>;
+}
+export declare const NoopFolderLevelPermissions: typeof NoopFolderLevelPermissionsImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IFolderLevelPermissions>;
+};
+export {};