@webiny/api-core 0.0.0-unstable.0d717d18dd

package/features/security/teams/shared/TeamProvider.js

@@ -0,0 +1,35 @@
+import { TeamsProvider } from "../../shared/abstractions.js";
+import { TeamFactory } from "./abstractions.js";
+class TeamProviderImpl {
+    constructor(teamFactories){
+        this.teamFactories = teamFactories;
+    }
+    async getTeams() {
+        if (void 0 === this.cache) {
+            const results = await Promise.all(this.teamFactories.map((factory)=>factory.execute()));
+            this.cache = results.flat().map((codeTeam)=>({
+                    ...codeTeam,
+                    id: codeTeam.slug,
+                    createdOn: null,
+                    createdBy: null,
+                    system: codeTeam.system ?? false,
+                    plugin: true
+                }));
+        }
+        return this.cache;
+    }
+}
+const TeamProvider = TeamsProvider.createImplementation({
+    implementation: TeamProviderImpl,
+    dependencies: [
+        [
+            TeamFactory,
+            {
+                multiple: true
+            }
+        ]
+    ]
+});
+export { TeamProvider };
+
+//# sourceMappingURL=TeamProvider.js.map

package/features/security/teams/shared/TeamProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/TeamProvider.js","sources":["../../../../../src/features/security/teams/shared/TeamProvider.ts"],"sourcesContent":["import { TeamsProvider } from \"~/features/security/shared/abstractions.js\";\nimport { TeamFactory } from \"./abstractions.js\";\nimport type { Team } from \"./types.js\";\n\nclass TeamProviderImpl implements TeamsProvider.Interface {\n    private cache: Team[] | undefined;\n\n    constructor(private teamFactories: TeamFactory.Interface[]) {}\n\n    async getTeams(): Promise<Team[]> {\n        if (this.cache === undefined) {\n            const results = await Promise.all(this.teamFactories.map(factory => factory.execute()));\n            this.cache = results.flat().map<Team>(codeTeam => ({\n                ...codeTeam,\n                id: codeTeam.slug,\n                createdOn: null,\n                createdBy: null,\n                system: codeTeam.system ?? false,\n                plugin: true\n            }));\n        }\n\n        return this.cache;\n    }\n}\n\nexport const TeamProvider = TeamsProvider.createImplementation({\n    implementation: TeamProviderImpl,\n    dependencies: [[TeamFactory, { multiple: true }]]\n});\n"],"names":["TeamProviderImpl","teamFactories","undefined","results","Promise","factory","codeTeam","TeamProvider","TeamsProvider","TeamFactory"],"mappings":";;AAIA,MAAMA;IAGF,YAAoBC,aAAsC,CAAE;aAAxCA,aAAa,GAAbA;IAAyC;IAE7D,MAAM,WAA4B;QAC9B,IAAI,AAAeC,WAAf,IAAI,CAAC,KAAK,EAAgB;YAC1B,MAAMC,UAAU,MAAMC,QAAQ,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAACC,CAAAA,UAAWA,QAAQ,OAAO;YACnF,IAAI,CAAC,KAAK,GAAGF,QAAQ,IAAI,GAAG,GAAG,CAAOG,CAAAA,WAAa;oBAC/C,GAAGA,QAAQ;oBACX,IAAIA,SAAS,IAAI;oBACjB,WAAW;oBACX,WAAW;oBACX,QAAQA,SAAS,MAAM,IAAI;oBAC3B,QAAQ;gBACZ;QACJ;QAEA,OAAO,IAAI,CAAC,KAAK;IACrB;AACJ;AAEO,MAAMC,eAAeC,cAAc,oBAAoB,CAAC;IAC3D,gBAAgBR;IAChB,cAAc;QAAC;YAACS;YAAa;gBAAE,UAAU;YAAK;SAAE;KAAC;AACrD"}

package/features/security/teams/shared/TeamsRepository.d.ts

@@ -0,0 +1,18 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { TeamsRepository as RepositoryAbstraction } from "./abstractions.js";
+import type { Team, GetTeamInput, ListTeamsInput } from "./types.js";
+import { SecurityStorageOperations, TeamsProvider } from "../../../../features/security/shared/abstractions.js";
+declare class TeamsRepositoryImpl implements RepositoryAbstraction.Interface {
+    private tenantContext;
+    private storageOperations;
+    private teamsProvider;
+    constructor(tenantContext: TenantContext.Interface, storageOperations: SecurityStorageOperations.Interface, teamsProvider: TeamsProvider.Interface);
+    get(params: GetTeamInput): Promise<Result<Team, RepositoryAbstraction.Error>>;
+    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryAbstraction.Error>>;
+    create(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+    update(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+    delete(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+}
+export declare const TeamsRepository: import("@webiny/di").Implementation<typeof TeamsRepositoryImpl>;
+export {};

package/features/security/teams/shared/TeamsRepository.js

@@ -0,0 +1,117 @@
+import { Result, createImplementation } from "@webiny/feature/api";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { TeamsRepository } from "./abstractions.js";
+import { SecurityStorageOperations, TeamsProvider } from "../../shared/abstractions.js";
+import { TeamNotFoundError, TeamStorageError } from "./errors.js";
+class TeamsRepositoryImpl {
+    constructor(tenantContext, storageOperations, teamsProvider){
+        this.tenantContext = tenantContext;
+        this.storageOperations = storageOperations;
+        this.teamsProvider = teamsProvider;
+    }
+    async get(params) {
+        try {
+            const tenant = this.tenantContext.getTenant();
+            const pluginTeams = await this.teamsProvider.getTeams();
+            const pluginTeam = pluginTeams.find((t)=>{
+                if (params.id && t.id === params.id) return true;
+                if (params.slug && t.slug === params.slug) return true;
+                return false;
+            });
+            if (pluginTeam) return Result.ok(pluginTeam);
+            const team = await this.storageOperations.getTeam({
+                where: {
+                    ...params,
+                    tenant: tenant.id
+                }
+            });
+            if (team) return Result.ok(team);
+            return Result.fail(new TeamNotFoundError());
+        } catch (error) {
+            return Result.fail(new TeamStorageError(error));
+        }
+    }
+    async list(params) {
+        try {
+            const tenant = this.tenantContext.getTenant();
+            const teamsFromDatabase = await this.storageOperations.listTeams({
+                where: {
+                    tenant: tenant.id,
+                    ...params.where
+                },
+                sort: params.sort || [
+                    "createdOn_ASC"
+                ]
+            });
+            const pluginTeams = await this.teamsProvider.getTeams();
+            const teamsFromPlugins = pluginTeams.filter((team)=>{
+                const { id_in, slug_in } = params.where || {};
+                if (id_in && !id_in.includes(team.id)) return false;
+                if (slug_in && !slug_in.includes(team.slug)) return false;
+                return true;
+            });
+            return Result.ok([
+                ...teamsFromPlugins,
+                ...teamsFromDatabase
+            ]);
+        } catch (error) {
+            return Result.fail(new TeamStorageError(error));
+        }
+    }
+    async create(team) {
+        try {
+            const tenant = this.tenantContext.getTenant();
+            await this.storageOperations.createTeam({
+                team: {
+                    ...team,
+                    tenant: tenant.id
+                }
+            });
+            return Result.ok();
+        } catch (error) {
+            return Result.fail(new TeamStorageError(error));
+        }
+    }
+    async update(team) {
+        try {
+            const tenant = this.tenantContext.getTenant();
+            const teamWithTenant = {
+                ...team,
+                tenant: tenant.id
+            };
+            await this.storageOperations.updateTeam({
+                team: teamWithTenant,
+                original: teamWithTenant
+            });
+            return Result.ok();
+        } catch (error) {
+            return Result.fail(new TeamStorageError(error));
+        }
+    }
+    async delete(team) {
+        try {
+            const tenant = this.tenantContext.getTenant();
+            await this.storageOperations.deleteTeam({
+                team: {
+                    ...team,
+                    tenant: tenant.id
+                }
+            });
+            return Result.ok();
+        } catch (error) {
+            return Result.fail(new TeamStorageError(error));
+        }
+    }
+}
+const TeamsRepository_TeamsRepository = createImplementation({
+    abstraction: TeamsRepository,
+    implementation: TeamsRepositoryImpl,
+    dependencies: [
+        TenantContext,
+        SecurityStorageOperations,
+        TeamsProvider
+    ]
+});
+export { TeamsRepository_TeamsRepository as TeamsRepository };
+
+//# sourceMappingURL=TeamsRepository.js.map

package/features/security/teams/shared/TeamsRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/TeamsRepository.js","sources":["../../../../../src/features/security/teams/shared/TeamsRepository.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { TeamsRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"./types.js\";\nimport {\n    SecurityStorageOperations,\n    TeamsProvider\n} from \"~/features/security/shared/abstractions.js\";\nimport { TeamNotFoundError, TeamStorageError } from \"./errors.js\";\n\nclass TeamsRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private storageOperations: SecurityStorageOperations.Interface,\n        private teamsProvider: TeamsProvider.Interface\n    ) {}\n\n    async get(params: GetTeamInput): Promise<Result<Team, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // First check plugin teams\n            const pluginTeams = await this.teamsProvider.getTeams();\n            const pluginTeam = pluginTeams.find(t => {\n                // Match by ID or slug\n                if (params.id && t.id === params.id) {\n                    return true;\n                }\n\n                if (params.slug && t.slug === params.slug) {\n                    return true;\n                }\n\n                return false;\n            });\n\n            if (pluginTeam) {\n                return Result.ok(pluginTeam);\n            }\n\n            // Then check storage\n            const team = await this.storageOperations.getTeam({\n                where: {\n                    ...params,\n                    tenant: tenant.id\n                }\n            });\n\n            if (team) {\n                return Result.ok(team);\n            }\n\n            return Result.fail(new TeamNotFoundError());\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async list(params: ListTeamsInput): Promise<Result<Team[], RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // Get teams from storage\n            const teamsFromDatabase = await this.storageOperations.listTeams({\n                where: {\n                    tenant: tenant.id,\n                    ...params.where\n                },\n                sort: params.sort || [\"createdOn_ASC\"]\n            });\n\n            // Get teams from plugins\n            const pluginTeams = await this.teamsProvider.getTeams();\n            const teamsFromPlugins = pluginTeams.filter(team => {\n                // Apply where filters if provided\n                const { id_in, slug_in } = params.where || {};\n                if (id_in && !id_in.includes(team.id)) {\n                    return false;\n                }\n                if (slug_in && !slug_in.includes(team.slug)) {\n                    return false;\n                }\n\n                return true;\n            });\n\n            // Plugin teams come first (they don't have createdOn), then database teams\n            return Result.ok([...teamsFromPlugins, ...teamsFromDatabase]);\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async create(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            await this.storageOperations.createTeam({ team: { ...team, tenant: tenant.id } });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async update(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            const teamWithTenant = { ...team, tenant: tenant.id };\n            await this.storageOperations.updateTeam({\n                team: teamWithTenant,\n                original: teamWithTenant\n            });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async delete(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n            await this.storageOperations.deleteTeam({ team: { ...team, tenant: tenant.id } });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n}\n\nexport const TeamsRepository = createImplementation({\n    abstraction: RepositoryAbstraction,\n    implementation: TeamsRepositoryImpl,\n    dependencies: [TenantContext, SecurityStorageOperations, TeamsProvider]\n});\n"],"names":["TeamsRepositoryImpl","tenantContext","storageOperations","teamsProvider","params","tenant","pluginTeams","pluginTeam","t","Result","team","TeamNotFoundError","error","TeamStorageError","teamsFromDatabase","teamsFromPlugins","id_in","slug_in","teamWithTenant","TeamsRepository","createImplementation","RepositoryAbstraction","TenantContext","SecurityStorageOperations","TeamsProvider"],"mappings":";;;;;AAWA,MAAMA;IACF,YACYC,aAAsC,EACtCC,iBAAsD,EACtDC,aAAsC,CAChD;aAHUF,aAAa,GAAbA;aACAC,iBAAiB,GAAjBA;aACAC,aAAa,GAAbA;IACT;IAEH,MAAM,IAAIC,MAAoB,EAAsD;QAChF,IAAI;YACA,MAAMC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;YAG3C,MAAMC,cAAc,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ;YACrD,MAAMC,aAAaD,YAAY,IAAI,CAACE,CAAAA;gBAEhC,IAAIJ,OAAO,EAAE,IAAII,EAAE,EAAE,KAAKJ,OAAO,EAAE,EAC/B,OAAO;gBAGX,IAAIA,OAAO,IAAI,IAAII,EAAE,IAAI,KAAKJ,OAAO,IAAI,EACrC,OAAO;gBAGX,OAAO;YACX;YAEA,IAAIG,YACA,OAAOE,OAAO,EAAE,CAACF;YAIrB,MAAMG,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAC9C,OAAO;oBACH,GAAGN,MAAM;oBACT,QAAQC,OAAO,EAAE;gBACrB;YACJ;YAEA,IAAIK,MACA,OAAOD,OAAO,EAAE,CAACC;YAGrB,OAAOD,OAAO,IAAI,CAAC,IAAIE;QAC3B,EAAE,OAAOC,OAAO;YACZ,OAAOH,OAAO,IAAI,CAAC,IAAII,iBAAiBD;QAC5C;IACJ;IAEA,MAAM,KAAKR,MAAsB,EAAwD;QACrF,IAAI;YACA,MAAMC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;YAG3C,MAAMS,oBAAoB,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBAC7D,OAAO;oBACH,QAAQT,OAAO,EAAE;oBACjB,GAAGD,OAAO,KAAK;gBACnB;gBACA,MAAMA,OAAO,IAAI,IAAI;oBAAC;iBAAgB;YAC1C;YAGA,MAAME,cAAc,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ;YACrD,MAAMS,mBAAmBT,YAAY,MAAM,CAACI,CAAAA;gBAExC,MAAM,EAAEM,KAAK,EAAEC,OAAO,EAAE,GAAGb,OAAO,KAAK,IAAI,CAAC;gBAC5C,IAAIY,SAAS,CAACA,MAAM,QAAQ,CAACN,KAAK,EAAE,GAChC,OAAO;gBAEX,IAAIO,WAAW,CAACA,QAAQ,QAAQ,CAACP,KAAK,IAAI,GACtC,OAAO;gBAGX,OAAO;YACX;YAGA,OAAOD,OAAO,EAAE,CAAC;mBAAIM;mBAAqBD;aAAkB;QAChE,EAAE,OAAOF,OAAO;YACZ,OAAOH,OAAO,IAAI,CAAC,IAAII,iBAAiBD;QAC5C;IACJ;IAEA,MAAM,OAAOF,IAAU,EAAsD;QACzE,IAAI;YACA,MAAML,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;YAC3C,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAAE,MAAM;oBAAE,GAAGK,IAAI;oBAAE,QAAQL,OAAO,EAAE;gBAAC;YAAE;YAC/E,OAAOI,OAAO,EAAE;QACpB,EAAE,OAAOG,OAAO;YACZ,OAAOH,OAAO,IAAI,CAAC,IAAII,iBAAiBD;QAC5C;IACJ;IAEA,MAAM,OAAOF,IAAU,EAAsD;QACzE,IAAI;YACA,MAAML,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;YAC3C,MAAMa,iBAAiB;gBAAE,GAAGR,IAAI;gBAAE,QAAQL,OAAO,EAAE;YAAC;YACpD,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBACpC,MAAMa;gBACN,UAAUA;YACd;YACA,OAAOT,OAAO,EAAE;QACpB,EAAE,OAAOG,OAAO;YACZ,OAAOH,OAAO,IAAI,CAAC,IAAII,iBAAiBD;QAC5C;IACJ;IAEA,MAAM,OAAOF,IAAU,EAAsD;QACzE,IAAI;YACA,MAAML,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;YAC3C,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAAE,MAAM;oBAAE,GAAGK,IAAI;oBAAE,QAAQL,OAAO,EAAE;gBAAC;YAAE;YAC/E,OAAOI,OAAO,EAAE;QACpB,EAAE,OAAOG,OAAO;YACZ,OAAOH,OAAO,IAAI,CAAC,IAAII,iBAAiBD;QAC5C;IACJ;AACJ;AAEO,MAAMO,kCAAkBC,qBAAqB;IAChD,aAAaC;IACb,gBAAgBrB;IAChB,cAAc;QAACsB;QAAeC;QAA2BC;KAAc;AAC3E"}

package/features/security/teams/shared/abstractions.d.ts

@@ -0,0 +1,38 @@
+import { Result } from "@webiny/feature/api";
+import type { Team, GetTeamInput, ListTeamsInput } from "./types.js";
+import { TeamNotFoundError, TeamStorageError } from "./errors.js";
+export interface ITeamsRepositoryErrors {
+    base: TeamNotFoundError | TeamStorageError;
+}
+type RepositoryError = ITeamsRepositoryErrors[keyof ITeamsRepositoryErrors];
+export interface ITeamsRepository {
+    get(params: GetTeamInput): Promise<Result<Team, RepositoryError>>;
+    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryError>>;
+    create(data: Team): Promise<Result<void, RepositoryError>>;
+    update(data: Team): Promise<Result<void, RepositoryError>>;
+    delete(team: Team): Promise<Result<void, RepositoryError>>;
+}
+/** Persist and retrieve teams. */
+export declare const TeamsRepository: import("@webiny/di").Abstraction<ITeamsRepository>;
+export declare namespace TeamsRepository {
+    type Interface = ITeamsRepository;
+    type Error = RepositoryError;
+}
+export type CodeTeam = {
+    name: string;
+    slug: string;
+    description: string;
+    roles: string[];
+    system?: boolean;
+};
+export interface ITeamFactory {
+    execute(): Promise<CodeTeam[]>;
+}
+/** Provide code-defined teams. */
+export declare const TeamFactory: import("@webiny/di").Abstraction<ITeamFactory>;
+export declare namespace TeamFactory {
+    type Interface = ITeamFactory;
+    type Return = Promise<CodeTeam[]>;
+    type Team = CodeTeam;
+}
+export {};

package/features/security/teams/shared/abstractions.js

@@ -0,0 +1,6 @@
+import { createAbstraction } from "@webiny/feature/api";
+const TeamsRepository = createAbstraction("TeamsRepository");
+const TeamFactory = createAbstraction("TeamFactory");
+export { TeamFactory, TeamsRepository };
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/teams/shared/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/abstractions.js","sources":["../../../../../src/features/security/teams/shared/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"./types.js\";\nimport { TeamNotFoundError, TeamStorageError } from \"./errors.js\";\n\nexport interface ITeamsRepositoryErrors {\n    base: TeamNotFoundError | TeamStorageError;\n}\n\ntype RepositoryError = ITeamsRepositoryErrors[keyof ITeamsRepositoryErrors];\n\nexport interface ITeamsRepository {\n    get(params: GetTeamInput): Promise<Result<Team, RepositoryError>>;\n    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryError>>;\n    create(data: Team): Promise<Result<void, RepositoryError>>;\n    update(data: Team): Promise<Result<void, RepositoryError>>;\n    delete(team: Team): Promise<Result<void, RepositoryError>>;\n}\n\n/** Persist and retrieve teams. */\nexport const TeamsRepository = createAbstraction<ITeamsRepository>(\"TeamsRepository\");\n\nexport namespace TeamsRepository {\n    export type Interface = ITeamsRepository;\n    export type Error = RepositoryError;\n}\n\nexport type CodeTeam = {\n    name: string;\n    slug: string;\n    description: string;\n    roles: string[];\n    system?: boolean;\n};\n\nexport interface ITeamFactory {\n    execute(): Promise<CodeTeam[]>;\n}\n\n/** Provide code-defined teams. */\nexport const TeamFactory = createAbstraction<ITeamFactory>(\"TeamFactory\");\n\nexport namespace TeamFactory {\n    export type Interface = ITeamFactory;\n    export type Return = Promise<CodeTeam[]>;\n    export type Team = CodeTeam;\n}\n"],"names":["TeamsRepository","createAbstraction","TeamFactory"],"mappings":";AAoBO,MAAMA,kBAAkBC,kBAAoC;AAoB5D,MAAMC,cAAcD,kBAAgC"}

package/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { TeamsRepository } from "../abstractions.js";
+import type { Team, GetTeamInput, ListTeamsInput } from "../types.js";
+declare class TeamsRepositoryCachingDecoratorImpl implements TeamsRepository.Interface {
+    private decoratee;
+    private readonly cache;
+    constructor(decoratee: TeamsRepository.Interface);
+    get(params: GetTeamInput): Promise<Result<Team, TeamsRepository.Error>>;
+    list(params: ListTeamsInput): Promise<Result<Team[], TeamsRepository.Error>>;
+    create(team: Team): Promise<Result<void, TeamsRepository.Error>>;
+    update(team: Team): Promise<Result<void, TeamsRepository.Error>>;
+    delete(team: Team): Promise<Result<void, TeamsRepository.Error>>;
+}
+export declare const TeamsRepositoryCachingDecorator: typeof TeamsRepositoryCachingDecoratorImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("../abstractions.js").ITeamsRepository>;
+};
+export {};

package/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js

@@ -0,0 +1,54 @@
+import { Result } from "@webiny/feature/api";
+import { TeamsRepository } from "../abstractions.js";
+import { ListCache } from "../../../roles/shared/decorators/ListCache.js";
+class TeamsRepositoryCachingDecoratorImpl {
+    constructor(decoratee){
+        this.decoratee = decoratee;
+        this.cache = new ListCache();
+    }
+    async get(params) {
+        if (this.cache.hasItems()) {
+            const cachedTeam = this.cache.getItems().find((t)=>{
+                if (params.id && t.id === params.id) return true;
+                if (params.slug && t.slug === params.slug) return true;
+                return false;
+            });
+            if (cachedTeam) return Result.ok(cachedTeam);
+        }
+        const result = await this.decoratee.get(params);
+        if (result.isOk()) this.cache.addItems([
+            result.value
+        ]);
+        return result;
+    }
+    async list(params) {
+        return this.decoratee.list(params);
+    }
+    async create(team) {
+        const result = await this.decoratee.create(team);
+        if (result.isOk()) this.cache.addItems([
+            team
+        ]);
+        return result;
+    }
+    async update(team) {
+        const result = await this.decoratee.update(team);
+        if (result.isOk()) this.cache.updateItems((item)=>{
+            if (item.id === team.id) return team;
+            return item;
+        });
+        return result;
+    }
+    async delete(team) {
+        const result = await this.decoratee.delete(team);
+        if (result.isOk()) this.cache.removeItems((item)=>item.id === team.id);
+        return result;
+    }
+}
+const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({
+    decorator: TeamsRepositoryCachingDecoratorImpl,
+    dependencies: []
+});
+export { TeamsRepositoryCachingDecorator };
+
+//# sourceMappingURL=TeamsRepositoryCachingDecorator.js.map

package/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.js","sources":["../../../../../../src/features/security/teams/shared/decorators/TeamsRepositoryCachingDecorator.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { TeamsRepository } from \"../abstractions.js\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"../types.js\";\nimport { ListCache } from \"~/features/security/roles/shared/decorators/ListCache.js\";\n\nclass TeamsRepositoryCachingDecoratorImpl implements TeamsRepository.Interface {\n    private readonly cache = new ListCache<Team>();\n\n    constructor(private decoratee: TeamsRepository.Interface) {}\n\n    async get(params: GetTeamInput): Promise<Result<Team, TeamsRepository.Error>> {\n        // Check cache first\n        if (this.cache.hasItems()) {\n            const cachedTeam = this.cache.getItems().find(t => {\n                if (params.id && t.id === params.id) {\n                    return true;\n                }\n                if (params.slug && t.slug === params.slug) {\n                    return true;\n                }\n                return false;\n            });\n\n            if (cachedTeam) {\n                return Result.ok(cachedTeam);\n            }\n        }\n\n        // Delegate to decoratee\n        const result = await this.decoratee.get(params);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([result.value]);\n        }\n\n        return result;\n    }\n\n    async list(params: ListTeamsInput): Promise<Result<Team[], TeamsRepository.Error>> {\n        return this.decoratee.list(params);\n    }\n\n    async create(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.create(team);\n\n        // Add to cache on success\n        if (result.isOk()) {\n            this.cache.addItems([team]);\n        }\n\n        return result;\n    }\n\n    async update(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.update(team);\n\n        // Update in cache on success\n        if (result.isOk()) {\n            this.cache.updateItems(item => {\n                if (item.id === team.id) {\n                    return team;\n                }\n                return item;\n            });\n        }\n\n        return result;\n    }\n\n    async delete(team: Team): Promise<Result<void, TeamsRepository.Error>> {\n        const result = await this.decoratee.delete(team);\n\n        // Remove from cache on success\n        if (result.isOk()) {\n            this.cache.removeItems(item => item.id === team.id);\n        }\n\n        return result;\n    }\n}\n\nexport const TeamsRepositoryCachingDecorator = TeamsRepository.createDecorator({\n    decorator: TeamsRepositoryCachingDecoratorImpl,\n    dependencies: []\n});\n"],"names":["TeamsRepositoryCachingDecoratorImpl","decoratee","ListCache","params","cachedTeam","t","Result","result","team","item","TeamsRepositoryCachingDecorator","TeamsRepository"],"mappings":";;;AAKA,MAAMA;IAGF,YAAoBC,SAAoC,CAAE;aAAtCA,SAAS,GAATA;aAFH,KAAK,GAAG,IAAIC;IAE8B;IAE3D,MAAM,IAAIC,MAAoB,EAAgD;QAE1E,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI;YACvB,MAAMC,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAACC,CAAAA;gBAC1C,IAAIF,OAAO,EAAE,IAAIE,EAAE,EAAE,KAAKF,OAAO,EAAE,EAC/B,OAAO;gBAEX,IAAIA,OAAO,IAAI,IAAIE,EAAE,IAAI,KAAKF,OAAO,IAAI,EACrC,OAAO;gBAEX,OAAO;YACX;YAEA,IAAIC,YACA,OAAOE,OAAO,EAAE,CAACF;QAEzB;QAGA,MAAMG,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAACJ;QAGxC,IAAII,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAACA,OAAO,KAAK;SAAC;QAGtC,OAAOA;IACX;IAEA,MAAM,KAAKJ,MAAsB,EAAkD;QAC/E,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAACA;IAC/B;IAEA,MAAM,OAAOK,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAACC;SAAK;QAG9B,OAAOD;IACX;IAEA,MAAM,OAAOC,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,WAAW,CAACE,CAAAA;YACnB,IAAIA,KAAK,EAAE,KAAKD,KAAK,EAAE,EACnB,OAAOA;YAEX,OAAOC;QACX;QAGJ,OAAOF;IACX;IAEA,MAAM,OAAOC,IAAU,EAAgD;QACnE,MAAMD,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAACC;QAG3C,IAAID,OAAO,IAAI,IACX,IAAI,CAAC,KAAK,CAAC,WAAW,CAACE,CAAAA,OAAQA,KAAK,EAAE,KAAKD,KAAK,EAAE;QAGtD,OAAOD;IACX;AACJ;AAEO,MAAMG,kCAAkCC,gBAAgB,eAAe,CAAC;IAC3E,WAAWX;IACX,cAAc,EAAE;AACpB"}

package/features/security/teams/shared/errors.d.ts

@@ -0,0 +1,47 @@
+import { BaseError } from "@webiny/feature/api";
+export declare class TeamStorageError extends BaseError {
+    readonly code: "TEAM_STORAGE_ERROR";
+    constructor(error: Error);
+}
+export declare class TeamNotFoundError extends BaseError {
+    readonly code: "TEAM_NOT_FOUND";
+    constructor();
+}
+type NotAuthorizedErrorData = {
+    message?: string;
+};
+export declare class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {
+    readonly code: "NOT_AUTHORIZED";
+    constructor(data?: NotAuthorizedErrorData);
+}
+type TeamExistsErrorData = {
+    slug: string;
+};
+export declare class TeamExistsError extends BaseError<TeamExistsErrorData> {
+    readonly code: "TEAM_EXISTS";
+    constructor(slug: string);
+}
+export declare class CannotUpdatePluginTeamsError extends BaseError {
+    readonly code: "CANNOT_UPDATE_PLUGIN_TEAMS";
+    constructor();
+}
+export declare class CannotDeletePluginTeamsError extends BaseError {
+    readonly code: "CANNOT_DELETE_PLUGIN_TEAMS";
+    constructor();
+}
+export declare class CannotUpdateSystemTeamsError extends BaseError {
+    readonly code: "CANNOT_UPDATE_SYSTEM_TEAMS";
+    constructor();
+}
+export declare class CannotDeleteSystemTeamsError extends BaseError {
+    readonly code: "CANNOT_DELETE_SYSTEM_TEAMS";
+    constructor();
+}
+type TeamValidationErrorData = {
+    message: string;
+};
+export declare class TeamValidationError extends BaseError<TeamValidationErrorData> {
+    readonly code: "TEAM_VALIDATION_ERROR";
+    constructor(message: string);
+}
+export {};

package/features/security/teams/shared/errors.js

@@ -0,0 +1,74 @@
+import { BaseError } from "@webiny/feature/api";
+class TeamStorageError extends BaseError {
+    constructor(error){
+        super({
+            message: error.message
+        }), this.code = "TEAM_STORAGE_ERROR";
+    }
+}
+class TeamNotFoundError extends BaseError {
+    constructor(){
+        super({
+            message: "Team was not found!"
+        }), this.code = "TEAM_NOT_FOUND";
+    }
+}
+class NotAuthorizedError extends BaseError {
+    constructor(data = {}){
+        super({
+            message: data.message || "Not authorized!",
+            data
+        }), this.code = "NOT_AUTHORIZED";
+    }
+}
+class TeamExistsError extends BaseError {
+    constructor(slug){
+        super({
+            message: `Team with slug "${slug}" already exists.`,
+            data: {
+                slug
+            }
+        }), this.code = "TEAM_EXISTS";
+    }
+}
+class CannotUpdatePluginTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot update teams created via plugins."
+        }), this.code = "CANNOT_UPDATE_PLUGIN_TEAMS";
+    }
+}
+class CannotDeletePluginTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot delete teams created via plugins."
+        }), this.code = "CANNOT_DELETE_PLUGIN_TEAMS";
+    }
+}
+class CannotUpdateSystemTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot update system teams."
+        }), this.code = "CANNOT_UPDATE_SYSTEM_TEAMS";
+    }
+}
+class CannotDeleteSystemTeamsError extends BaseError {
+    constructor(){
+        super({
+            message: "Cannot delete system teams."
+        }), this.code = "CANNOT_DELETE_SYSTEM_TEAMS";
+    }
+}
+class TeamValidationError extends BaseError {
+    constructor(message){
+        super({
+            message,
+            data: {
+                message
+            }
+        }), this.code = "TEAM_VALIDATION_ERROR";
+    }
+}
+export { CannotDeletePluginTeamsError, CannotDeleteSystemTeamsError, CannotUpdatePluginTeamsError, CannotUpdateSystemTeamsError, NotAuthorizedError, TeamExistsError, TeamNotFoundError, TeamStorageError, TeamValidationError };
+
+//# sourceMappingURL=errors.js.map

package/features/security/teams/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/teams/shared/errors.js","sources":["../../../../../src/features/security/teams/shared/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class TeamStorageError extends BaseError {\n    override readonly code = \"TEAM_STORAGE_ERROR\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class TeamNotFoundError extends BaseError {\n    override readonly code = \"TEAM_NOT_FOUND\" as const;\n\n    constructor() {\n        super({\n            message: `Team was not found!`\n        });\n    }\n}\n\ntype NotAuthorizedErrorData = {\n    message?: string;\n};\n\nexport class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {\n    override readonly code = \"NOT_AUTHORIZED\" as const;\n\n    constructor(data: NotAuthorizedErrorData = {}) {\n        super({\n            message: data.message || \"Not authorized!\",\n            data\n        });\n    }\n}\n\ntype TeamExistsErrorData = {\n    slug: string;\n};\n\nexport class TeamExistsError extends BaseError<TeamExistsErrorData> {\n    override readonly code = \"TEAM_EXISTS\" as const;\n\n    constructor(slug: string) {\n        super({\n            message: `Team with slug \"${slug}\" already exists.`,\n            data: { slug }\n        });\n    }\n}\n\nexport class CannotUpdatePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotDeletePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotUpdateSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update system teams.\"\n        });\n    }\n}\n\nexport class CannotDeleteSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete system teams.\"\n        });\n    }\n}\n\ntype TeamValidationErrorData = {\n    message: string;\n};\n\nexport class TeamValidationError extends BaseError<TeamValidationErrorData> {\n    override readonly code = \"TEAM_VALIDATION_ERROR\" as const;\n\n    constructor(message: string) {\n        super({\n            message,\n            data: { message }\n        });\n    }\n}\n"],"names":["TeamStorageError","BaseError","error","TeamNotFoundError","NotAuthorizedError","data","TeamExistsError","slug","CannotUpdatePluginTeamsError","CannotDeletePluginTeamsError","CannotUpdateSystemTeamsError","CannotDeleteSystemTeamsError","TeamValidationError","message"],"mappings":";AAEO,MAAMA,yBAAyBC;IAGlC,YAAYC,KAAY,CAAE;QACtB,KAAK,CAAC;YACF,SAASA,MAAM,OAAO;QAC1B,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMC,0BAA0BF;IAGnC,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAMO,MAAMG,2BAA2BH;IAGpC,YAAYI,OAA+B,CAAC,CAAC,CAAE;QAC3C,KAAK,CAAC;YACF,SAASA,KAAK,OAAO,IAAI;YACzBA;QACJ,SANc,IAAI,GAAG;IAOzB;AACJ;AAMO,MAAMC,wBAAwBL;IAGjC,YAAYM,IAAY,CAAE;QACtB,KAAK,CAAC;YACF,SAAS,CAAC,gBAAgB,EAAEA,KAAK,iBAAiB,CAAC;YACnD,MAAM;gBAAEA;YAAK;QACjB,SANc,IAAI,GAAG;IAOzB;AACJ;AAEO,MAAMC,qCAAqCP;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMQ,qCAAqCR;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMS,qCAAqCT;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAEO,MAAMU,qCAAqCV;IAG9C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ;AAMO,MAAMW,4BAA4BX;IAGrC,YAAYY,OAAe,CAAE;QACzB,KAAK,CAAC;YACFA;YACA,MAAM;gBAAEA;YAAQ;QACpB,SANc,IAAI,GAAG;IAOzB;AACJ"}

package/features/security/teams/shared/types.d.ts

@@ -0,0 +1,28 @@
+import type { Team } from "../../../../types/security.js";
+export type { Team };
+export interface CreateTeamInput {
+    name: string;
+    slug: string;
+    description: string;
+    roles: string[];
+    system?: boolean;
+}
+export interface UpdateTeamInput {
+    name?: string;
+    description?: string;
+    roles?: string[];
+}
+export type GetTeamInput = {
+    id: string;
+    slug?: never;
+} | {
+    slug: string;
+    id?: never;
+};
+export interface ListTeamsInput {
+    where?: {
+        id_in?: string[];
+        slug_in?: string[];
+    };
+    sort?: string[];
+}

package/features/security/utils/AppPermissions.d.ts

@@ -0,0 +1,27 @@
+import type { SecurityPermission, SecurityIdentity, CreatedBy } from "../../../types/security.js";
+export interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {
+    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;
+    getPermissions: () => TPermission[] | Promise<TPermission[]>;
+    fullAccessPermissionName?: string;
+}
+export type EnsureParams = Partial<{
+    rwd: string;
+    pw: string;
+    owns: CreatedBy;
+}>;
+export declare class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {
+    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;
+    getPermissions: () => TPermission[] | Promise<TPermission[]>;
+    private fullAccessPermissions;
+    constructor({ getIdentity, getPermissions, fullAccessPermissionName }: AppPermissionsParams<TPermission>);
+    ensure(params?: EnsureParams): Promise<boolean>;
+    hasFullAccess(): Promise<boolean>;
+    canAccessNonOwnedRecords(): Promise<boolean>;
+    canAccessOnlyOwnRecords(): Promise<boolean>;
+    private hasRwd;
+    private hasPw;
+    /**
+     * Filters out base `name` and `_src` properties from the permission object.
+     */
+    private filterOutSystemPermissionsObjectProperties;
+}

package/features/security/utils/AppPermissions.js

@@ -0,0 +1,60 @@
+const FULL_ACCESS_PERMISSION_NAME = "*";
+class AppPermissions {
+    constructor({ getIdentity, getPermissions, fullAccessPermissionName }){
+        this.getIdentity = getIdentity;
+        this.getPermissions = getPermissions;
+        this.fullAccessPermissions = [
+            FULL_ACCESS_PERMISSION_NAME,
+            fullAccessPermissionName || ""
+        ].filter(Boolean);
+    }
+    async ensure(params = {}) {
+        if (await this.hasFullAccess()) return true;
+        if (params.owns) {
+            if (await this.canAccessNonOwnedRecords()) return true;
+            const identity = await this.getIdentity();
+            if (identity.id === params.owns.id) return true;
+            return false;
+        }
+        const permissions = await this.getPermissions();
+        const hasPermission = permissions.some((current)=>{
+            if (params.rwd && !this.hasRwd(current, params.rwd)) return false;
+            if (params.pw && !this.hasPw(current, params.pw)) return false;
+            return true;
+        });
+        return hasPermission;
+    }
+    async hasFullAccess() {
+        const permissions = await this.getPermissions();
+        return permissions.some((p)=>this.fullAccessPermissions.filter(Boolean).includes(p.name));
+    }
+    async canAccessNonOwnedRecords() {
+        if (await this.hasFullAccess()) return true;
+        const permissions = await this.getPermissions();
+        return permissions.some((p)=>!p.own);
+    }
+    async canAccessOnlyOwnRecords() {
+        if (await this.hasFullAccess()) return false;
+        const permissions = await this.getPermissions();
+        return !permissions.some((p)=>!p.own);
+    }
+    hasRwd(permission, rwd) {
+        return "string" != typeof permission.rwd || permission.rwd.includes(rwd);
+    }
+    hasPw(permission, pw) {
+        const permissionWithoutSystemProperties = this.filterOutSystemPermissionsObjectProperties(permission);
+        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;
+        if (!isCustom) return true;
+        if ("string" != typeof permission["pw"]) return false;
+        return permission["pw"].includes(pw);
+    }
+    filterOutSystemPermissionsObjectProperties(permission) {
+        return Object.keys(permission).reduce((acc, key)=>{
+            if ("name" !== key && "_src" !== key) acc[key] = permission[key];
+            return acc;
+        }, {});
+    }
+}
+export { AppPermissions };
+
+//# sourceMappingURL=AppPermissions.js.map

package/features/security/utils/AppPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/utils/AppPermissions.js","sources":["../../../../src/features/security/utils/AppPermissions.ts"],"sourcesContent":["import type { SecurityPermission, SecurityIdentity, CreatedBy } from \"~/types/security.js\";\n\nconst FULL_ACCESS_PERMISSION_NAME = \"*\";\n\nexport interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    fullAccessPermissionName?: string;\n}\n\nexport type EnsureParams = Partial<{\n    rwd: string;\n    pw: string;\n    owns: CreatedBy;\n}>;\n\nexport class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    private fullAccessPermissions: string[];\n\n    constructor({\n        getIdentity,\n        getPermissions,\n        fullAccessPermissionName\n    }: AppPermissionsParams<TPermission>) {\n        this.getIdentity = getIdentity;\n        this.getPermissions = getPermissions;\n        this.fullAccessPermissions = [\n            FULL_ACCESS_PERMISSION_NAME,\n            fullAccessPermissionName || \"\"\n        ].filter(Boolean);\n    }\n\n    async ensure(params: EnsureParams = {}): Promise<boolean> {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        if (params.owns) {\n            if (await this.canAccessNonOwnedRecords()) {\n                return true;\n            }\n\n            // If we got here, that means we didn't encounter a permission object\n            // that gives us the ability to access non-owned records.\n            const identity = await this.getIdentity();\n            if (identity.id === params.owns.id) {\n                return true;\n            }\n\n            return false;\n        }\n\n        const permissions = await this.getPermissions();\n        const hasPermission = permissions.some(current => {\n            if (params.rwd && !this.hasRwd(current, params.rwd)) {\n                return false;\n            }\n\n            if (params.pw && !this.hasPw(current, params.pw)) {\n                return false;\n            }\n\n            return true;\n        });\n\n        return hasPermission;\n    }\n\n    async hasFullAccess() {\n        const permissions = await this.getPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    async canAccessNonOwnedRecords() {\n        // First pass - check if we have full access.\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return permissions.some(p => !p.own);\n    }\n\n    async canAccessOnlyOwnRecords() {\n        // First pass - check if we have full access to Page Builder.\n        if (await this.hasFullAccess()) {\n            return false;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return !permissions.some(p => !p.own);\n    }\n\n    private hasRwd(permission: TPermission, rwd: string) {\n        return typeof permission.rwd !== \"string\" || permission.rwd.includes(rwd);\n    }\n\n    // Has publishing workflow permissions?\n    private hasPw(permission: TPermission, pw: string) {\n        // `name` and `_src` properties are always present.\n        const permissionWithoutSystemProperties =\n            this.filterOutSystemPermissionsObjectProperties(permission);\n\n        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;\n\n        if (!isCustom) {\n            // Means it's a \"full-access\" permission.\n            return true;\n        }\n\n        if (typeof permission[\"pw\"] !== \"string\") {\n            return false;\n        }\n\n        return permission[\"pw\"].includes(pw);\n    }\n\n    /**\n     * Filters out base `name` and `_src` properties from the permission object.\n     */\n    private filterOutSystemPermissionsObjectProperties(permission: SecurityPermission) {\n        return Object.keys(permission).reduce(\n            (acc, key) => {\n                if (key !== \"name\" && key !== \"_src\") {\n                    acc[key] = permission[key];\n                }\n                return acc;\n            },\n            {} as Record<string, any>\n        );\n    }\n}\n"],"names":["FULL_ACCESS_PERMISSION_NAME","AppPermissions","getIdentity","getPermissions","fullAccessPermissionName","Boolean","params","identity","permissions","hasPermission","current","p","permission","rwd","pw","permissionWithoutSystemProperties","isCustom","Object","acc","key"],"mappings":"AAEA,MAAMA,8BAA8B;AAc7B,MAAMC;IAKT,YAAY,EACRC,WAAW,EACXC,cAAc,EACdC,wBAAwB,EACQ,CAAE;QAClC,IAAI,CAAC,WAAW,GAAGF;QACnB,IAAI,CAAC,cAAc,GAAGC;QACtB,IAAI,CAAC,qBAAqB,GAAG;YACzBH;YACAI,4BAA4B;SAC/B,CAAC,MAAM,CAACC;IACb;IAEA,MAAM,OAAOC,SAAuB,CAAC,CAAC,EAAoB;QACtD,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAGX,IAAIA,OAAO,IAAI,EAAE;YACb,IAAI,MAAM,IAAI,CAAC,wBAAwB,IACnC,OAAO;YAKX,MAAMC,WAAW,MAAM,IAAI,CAAC,WAAW;YACvC,IAAIA,SAAS,EAAE,KAAKD,OAAO,IAAI,CAAC,EAAE,EAC9B,OAAO;YAGX,OAAO;QACX;QAEA,MAAME,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,MAAMC,gBAAgBD,YAAY,IAAI,CAACE,CAAAA;YACnC,IAAIJ,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAACI,SAASJ,OAAO,GAAG,GAC9C,OAAO;YAGX,IAAIA,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAACI,SAASJ,OAAO,EAAE,GAC3C,OAAO;YAGX,OAAO;QACX;QAEA,OAAOG;IACX;IAEA,MAAM,gBAAgB;QAClB,MAAMD,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAOA,YAAY,IAAI,CAACG,CAAAA,IAAK,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAACN,SAAS,QAAQ,CAACM,EAAE,IAAI;IAC3F;IAEA,MAAM,2BAA2B;QAE7B,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAKX,MAAMH,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAOA,YAAY,IAAI,CAACG,CAAAA,IAAK,CAACA,EAAE,GAAG;IACvC;IAEA,MAAM,0BAA0B;QAE5B,IAAI,MAAM,IAAI,CAAC,aAAa,IACxB,OAAO;QAKX,MAAMH,cAAc,MAAM,IAAI,CAAC,cAAc;QAC7C,OAAO,CAACA,YAAY,IAAI,CAACG,CAAAA,IAAK,CAACA,EAAE,GAAG;IACxC;IAEQ,OAAOC,UAAuB,EAAEC,GAAW,EAAE;QACjD,OAAO,AAA0B,YAA1B,OAAOD,WAAW,GAAG,IAAiBA,WAAW,GAAG,CAAC,QAAQ,CAACC;IACzE;IAGQ,MAAMD,UAAuB,EAAEE,EAAU,EAAE;QAE/C,MAAMC,oCACF,IAAI,CAAC,0CAA0C,CAACH;QAEpD,MAAMI,WAAWC,OAAO,IAAI,CAACF,mCAAmC,MAAM,GAAG;QAEzE,IAAI,CAACC,UAED,OAAO;QAGX,IAAI,AAA4B,YAA5B,OAAOJ,UAAU,CAAC,KAAK,EACvB,OAAO;QAGX,OAAOA,UAAU,CAAC,KAAK,CAAC,QAAQ,CAACE;IACrC;IAKQ,2CAA2CF,UAA8B,EAAE;QAC/E,OAAOK,OAAO,IAAI,CAACL,YAAY,MAAM,CACjC,CAACM,KAAKC;YACF,IAAIA,AAAQ,WAARA,OAAkBA,AAAQ,WAARA,KAClBD,GAAG,CAACC,IAAI,GAAGP,UAAU,CAACO,IAAI;YAE9B,OAAOD;QACX,GACA,CAAC;IAET;AACJ"}

package/features/security/utils/IdentityValue.d.ts

@@ -0,0 +1,18 @@
+import type { SecurityIdentity } from "../../../types/security.js";
+type IdentityInput = SecurityIdentity | null | undefined;
+export declare class IdentityValue {
+    private readonly value;
+    private constructor();
+    static create(identity: IdentityInput): IdentityValue;
+    getValue(): {
+        id: string;
+        displayName: string;
+        type: string;
+    } | null;
+    getValueOrFallback(fallback: IdentityInput): {
+        id: string;
+        displayName: string;
+        type: string;
+    } | null;
+}
+export {};

package/features/security/utils/IdentityValue.js

@@ -0,0 +1,24 @@
+class IdentityValue {
+    constructor(value){
+        this.value = value;
+    }
+    static create(identity) {
+        return new IdentityValue(identity);
+    }
+    getValue() {
+        if (!this.value) return null;
+        return {
+            id: this.value.id,
+            displayName: this.value.displayName,
+            type: this.value.type
+        };
+    }
+    getValueOrFallback(fallback) {
+        const value = this.getValue();
+        if (value) return value;
+        return IdentityValue.create(fallback).getValue();
+    }
+}
+export { IdentityValue };
+
+//# sourceMappingURL=IdentityValue.js.map