@webiny/api-core 0.0.0-unstable.61c048f412

package/features/security/teams/UpdateTeam/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","updateTeamValidation","object","name","string","min","optional","description","max","roles","array"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const updateTeamValidation = z.object({\n    name: z.string().min(3).optional(),\n    description: z.string().max(500).optional(),\n    roles: z.array(z.string()).optional()\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,oBAAoB,GAAGD,CAAC,CAACE,MAAM,CAAC;EACzCC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAClCC,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACI,GAAG,CAAC,GAAG,CAAC,CAACF,QAAQ,CAAC,CAAC;EAC3CG,KAAK,EAAET,CAAC,CAACU,KAAK,CAACV,CAAC,CAACI,MAAM,CAAC,CAAC,CAAC,CAACE,QAAQ,CAAC;AACxC,CAAC,CAAC","ignoreList":[]}

package/features/security/teams/feature.d.ts

@@ -0,0 +1 @@
+export declare const TeamsFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/teams/feature.js

@@ -0,0 +1,23 @@
+import { createFeature } from "@webiny/feature/api";
+import { TeamsRepository } from "./shared/TeamsRepository.js";
+import { GetTeamFeature } from "./GetTeam/feature.js";
+import { ListTeamsFeature } from "./ListTeams/feature.js";
+import { CreateTeamFeature } from "./CreateTeam/feature.js";
+import { UpdateTeamFeature } from "./UpdateTeam/feature.js";
+import { DeleteTeamFeature } from "./DeleteTeam/feature.js";
+export const TeamsFeature = createFeature({
+  name: "Teams",
+  register(container) {
+    // Register repository in singleton scope
+    container.register(TeamsRepository).inSingletonScope();
+
+    // Register all use cases
+    GetTeamFeature.register(container);
+    ListTeamsFeature.register(container);
+    CreateTeamFeature.register(container);
+    UpdateTeamFeature.register(container);
+    DeleteTeamFeature.register(container);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/teams/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","TeamsRepository","GetTeamFeature","ListTeamsFeature","CreateTeamFeature","UpdateTeamFeature","DeleteTeamFeature","TeamsFeature","name","register","container","inSingletonScope"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { TeamsRepository } from \"./shared/TeamsRepository.js\";\nimport { GetTeamFeature } from \"./GetTeam/feature.js\";\nimport { ListTeamsFeature } from \"./ListTeams/feature.js\";\nimport { CreateTeamFeature } from \"./CreateTeam/feature.js\";\nimport { UpdateTeamFeature } from \"./UpdateTeam/feature.js\";\nimport { DeleteTeamFeature } from \"./DeleteTeam/feature.js\";\n\nexport const TeamsFeature = createFeature({\n    name: \"Teams\",\n    register(container) {\n        // Register repository in singleton scope\n        container.register(TeamsRepository).inSingletonScope();\n\n        // Register all use cases\n        GetTeamFeature.register(container);\n        ListTeamsFeature.register(container);\n        CreateTeamFeature.register(container);\n        UpdateTeamFeature.register(container);\n        DeleteTeamFeature.register(container);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,eAAe;AACxB,SAASC,cAAc;AACvB,SAASC,gBAAgB;AACzB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,YAAY,GAAGP,aAAa,CAAC;EACtCQ,IAAI,EAAE,OAAO;EACbC,QAAQA,CAACC,SAAS,EAAE;IAChB;IACAA,SAAS,CAACD,QAAQ,CAACR,eAAe,CAAC,CAACU,gBAAgB,CAAC,CAAC;;IAEtD;IACAT,cAAc,CAACO,QAAQ,CAACC,SAAS,CAAC;IAClCP,gBAAgB,CAACM,QAAQ,CAACC,SAAS,CAAC;IACpCN,iBAAiB,CAACK,QAAQ,CAACC,SAAS,CAAC;IACrCL,iBAAiB,CAACI,QAAQ,CAACC,SAAS,CAAC;IACrCJ,iBAAiB,CAACG,QAAQ,CAACC,SAAS,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/teams/shared/TeamsRepository.d.ts

@@ -0,0 +1,18 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { TeamsRepository as RepositoryAbstraction } from "./abstractions.js";
+import type { Team, GetTeamInput, ListTeamsInput } from "./types.js";
+import { SecurityStorageOperations, TeamsProvider } from "../../../../features/security/shared/abstractions.js";
+declare class TeamsRepositoryImpl implements RepositoryAbstraction.Interface {
+    private tenantContext;
+    private storageOperations;
+    private teamsProvider;
+    constructor(tenantContext: TenantContext.Interface, storageOperations: SecurityStorageOperations.Interface, teamsProvider: TeamsProvider.Interface);
+    get(params: GetTeamInput): Promise<Result<Team, RepositoryAbstraction.Error>>;
+    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryAbstraction.Error>>;
+    create(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+    update(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+    delete(team: Team): Promise<Result<void, RepositoryAbstraction.Error>>;
+}
+export declare const TeamsRepository: import("@webiny/di").Implementation<typeof TeamsRepositoryImpl>;
+export {};

package/features/security/teams/shared/TeamsRepository.js

@@ -0,0 +1,133 @@
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { TeamsRepository as RepositoryAbstraction } from "./abstractions.js";
+import { SecurityStorageOperations, TeamsProvider } from "../../shared/abstractions.js";
+import { TeamNotFoundError, TeamStorageError } from "./errors.js";
+class TeamsRepositoryImpl {
+  constructor(tenantContext, storageOperations, teamsProvider) {
+    this.tenantContext = tenantContext;
+    this.storageOperations = storageOperations;
+    this.teamsProvider = teamsProvider;
+  }
+  async get(params) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+
+      // First check plugin teams
+      const pluginTeams = await this.teamsProvider();
+      const pluginTeam = pluginTeams.find(t => {
+        // Match by ID or slug
+        if (params.id && t.id === params.id) {
+          return true;
+        }
+        if (params.slug && t.slug === params.slug) {
+          return true;
+        }
+        return false;
+      });
+
+      // Filter by tenant if team has one
+      if (pluginTeam) {
+        if (!pluginTeam.tenant || pluginTeam.tenant === tenant.id) {
+          return Result.ok(pluginTeam);
+        }
+      }
+
+      // Then check storage
+      const team = await this.storageOperations.getTeam({
+        where: {
+          ...params,
+          tenant: tenant.id
+        }
+      });
+      if (team) {
+        return Result.ok(team);
+      }
+      return Result.fail(new TeamNotFoundError());
+    } catch (error) {
+      return Result.fail(new TeamStorageError(error));
+    }
+  }
+  async list(params) {
+    try {
+      const tenant = this.tenantContext.getTenant();
+
+      // Get teams from storage
+      const teamsFromDatabase = await this.storageOperations.listTeams({
+        where: {
+          tenant: tenant.id,
+          ...params.where
+        },
+        sort: params.sort || ["createdOn_ASC"]
+      });
+
+      // Get teams from plugins
+      const pluginTeams = await this.teamsProvider();
+      const teamsFromPlugins = pluginTeams.filter(team => {
+        // Filter by tenant - plugin teams with no tenant or matching tenant
+        if (team.tenant && team.tenant !== tenant.id) {
+          return false;
+        }
+
+        // Apply where filters if provided
+        const {
+          id_in,
+          slug_in
+        } = params.where || {};
+        if (id_in && !id_in.includes(team.id)) {
+          return false;
+        }
+        if (slug_in && !slug_in.includes(team.slug)) {
+          return false;
+        }
+        return true;
+      });
+
+      // Plugin teams come first (they don't have createdOn), then database teams
+      return Result.ok([...teamsFromPlugins, ...teamsFromDatabase]);
+    } catch (error) {
+      return Result.fail(new TeamStorageError(error));
+    }
+  }
+  async create(team) {
+    try {
+      await this.storageOperations.createTeam({
+        team
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new TeamStorageError(error));
+    }
+  }
+  async update(team) {
+    try {
+      // Note: The old implementation passes both `original` and `team` to updateTeam.
+      // We'll need to handle this in the use case layer.
+      await this.storageOperations.updateTeam({
+        team,
+        original: team
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new TeamStorageError(error));
+    }
+  }
+  async delete(team) {
+    try {
+      await this.storageOperations.deleteTeam({
+        team
+      });
+      return Result.ok();
+    } catch (error) {
+      return Result.fail(new TeamStorageError(error));
+    }
+  }
+}
+export const TeamsRepository = createImplementation({
+  abstraction: RepositoryAbstraction,
+  implementation: TeamsRepositoryImpl,
+  dependencies: [TenantContext, SecurityStorageOperations, TeamsProvider]
+});
+
+//# sourceMappingURL=TeamsRepository.js.map

package/features/security/teams/shared/TeamsRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","Result","TenantContext","TeamsRepository","RepositoryAbstraction","SecurityStorageOperations","TeamsProvider","TeamNotFoundError","TeamStorageError","TeamsRepositoryImpl","constructor","tenantContext","storageOperations","teamsProvider","get","params","tenant","getTenant","pluginTeams","pluginTeam","find","t","id","slug","ok","team","getTeam","where","fail","error","list","teamsFromDatabase","listTeams","sort","teamsFromPlugins","filter","id_in","slug_in","includes","create","createTeam","update","updateTeam","original","delete","deleteTeam","abstraction","implementation","dependencies"],"sources":["TeamsRepository.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { TeamsRepository as RepositoryAbstraction } from \"./abstractions.js\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"./types.js\";\nimport {\n    SecurityStorageOperations,\n    TeamsProvider\n} from \"~/features/security/shared/abstractions.js\";\nimport { TeamNotFoundError, TeamStorageError } from \"./errors.js\";\n\nclass TeamsRepositoryImpl implements RepositoryAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private storageOperations: SecurityStorageOperations.Interface,\n        private teamsProvider: TeamsProvider.Interface\n    ) {}\n\n    async get(params: GetTeamInput): Promise<Result<Team, RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // First check plugin teams\n            const pluginTeams = await this.teamsProvider();\n            const pluginTeam = pluginTeams.find(t => {\n                // Match by ID or slug\n                if (params.id && t.id === params.id) {\n                    return true;\n                }\n\n                if (params.slug && t.slug === params.slug) {\n                    return true;\n                }\n\n                return false;\n            });\n\n            // Filter by tenant if team has one\n            if (pluginTeam) {\n                if (!pluginTeam.tenant || pluginTeam.tenant === tenant.id) {\n                    return Result.ok(pluginTeam);\n                }\n            }\n\n            // Then check storage\n            const team = await this.storageOperations.getTeam({\n                where: {\n                    ...params,\n                    tenant: tenant.id\n                }\n            });\n\n            if (team) {\n                return Result.ok(team);\n            }\n\n            return Result.fail(new TeamNotFoundError());\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async list(params: ListTeamsInput): Promise<Result<Team[], RepositoryAbstraction.Error>> {\n        try {\n            const tenant = this.tenantContext.getTenant();\n\n            // Get teams from storage\n            const teamsFromDatabase = await this.storageOperations.listTeams({\n                where: {\n                    tenant: tenant.id,\n                    ...params.where\n                },\n                sort: params.sort || [\"createdOn_ASC\"]\n            });\n\n            // Get teams from plugins\n            const pluginTeams = await this.teamsProvider();\n            const teamsFromPlugins = pluginTeams.filter(team => {\n                // Filter by tenant - plugin teams with no tenant or matching tenant\n                if (team.tenant && team.tenant !== tenant.id) {\n                    return false;\n                }\n\n                // Apply where filters if provided\n                const { id_in, slug_in } = params.where || {};\n                if (id_in && !id_in.includes(team.id)) {\n                    return false;\n                }\n                if (slug_in && !slug_in.includes(team.slug)) {\n                    return false;\n                }\n\n                return true;\n            });\n\n            // Plugin teams come first (they don't have createdOn), then database teams\n            return Result.ok([...teamsFromPlugins, ...teamsFromDatabase]);\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async create(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            await this.storageOperations.createTeam({ team });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async update(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            // Note: The old implementation passes both `original` and `team` to updateTeam.\n            // We'll need to handle this in the use case layer.\n            await this.storageOperations.updateTeam({ team, original: team });\n\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n\n    async delete(team: Team): Promise<Result<void, RepositoryAbstraction.Error>> {\n        try {\n            await this.storageOperations.deleteTeam({ team });\n            return Result.ok();\n        } catch (error) {\n            return Result.fail(new TeamStorageError(error));\n        }\n    }\n}\n\nexport const TeamsRepository = createImplementation({\n    abstraction: RepositoryAbstraction,\n    implementation: TeamsRepositoryImpl,\n    dependencies: [TenantContext, SecurityStorageOperations, TeamsProvider]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,aAAa;AACtB,SAASC,eAAe,IAAIC,qBAAqB;AAEjD,SACIC,yBAAyB,EACzBC,aAAa;AAEjB,SAASC,iBAAiB,EAAEC,gBAAgB;AAE5C,MAAMC,mBAAmB,CAA4C;EACjEC,WAAWA,CACCC,aAAsC,EACtCC,iBAAsD,EACtDC,aAAsC,EAChD;IAAA,KAHUF,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,iBAAsD,GAAtDA,iBAAsD;IAAA,KACtDC,aAAsC,GAAtCA,aAAsC;EAC/C;EAEH,MAAMC,GAAGA,CAACC,MAAoB,EAAsD;IAChF,IAAI;MACA,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;;MAE7C;MACA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACL,aAAa,CAAC,CAAC;MAC9C,MAAMM,UAAU,GAAGD,WAAW,CAACE,IAAI,CAACC,CAAC,IAAI;QACrC;QACA,IAAIN,MAAM,CAACO,EAAE,IAAID,CAAC,CAACC,EAAE,KAAKP,MAAM,CAACO,EAAE,EAAE;UACjC,OAAO,IAAI;QACf;QAEA,IAAIP,MAAM,CAACQ,IAAI,IAAIF,CAAC,CAACE,IAAI,KAAKR,MAAM,CAACQ,IAAI,EAAE;UACvC,OAAO,IAAI;QACf;QAEA,OAAO,KAAK;MAChB,CAAC,CAAC;;MAEF;MACA,IAAIJ,UAAU,EAAE;QACZ,IAAI,CAACA,UAAU,CAACH,MAAM,IAAIG,UAAU,CAACH,MAAM,KAAKA,MAAM,CAACM,EAAE,EAAE;UACvD,OAAOrB,MAAM,CAACuB,EAAE,CAACL,UAAU,CAAC;QAChC;MACJ;;MAEA;MACA,MAAMM,IAAI,GAAG,MAAM,IAAI,CAACb,iBAAiB,CAACc,OAAO,CAAC;QAC9CC,KAAK,EAAE;UACH,GAAGZ,MAAM;UACTC,MAAM,EAAEA,MAAM,CAACM;QACnB;MACJ,CAAC,CAAC;MAEF,IAAIG,IAAI,EAAE;QACN,OAAOxB,MAAM,CAACuB,EAAE,CAACC,IAAI,CAAC;MAC1B;MAEA,OAAOxB,MAAM,CAAC2B,IAAI,CAAC,IAAIrB,iBAAiB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,OAAOsB,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMC,IAAIA,CAACf,MAAsB,EAAwD;IACrF,IAAI;MACA,MAAMC,MAAM,GAAG,IAAI,CAACL,aAAa,CAACM,SAAS,CAAC,CAAC;;MAE7C;MACA,MAAMc,iBAAiB,GAAG,MAAM,IAAI,CAACnB,iBAAiB,CAACoB,SAAS,CAAC;QAC7DL,KAAK,EAAE;UACHX,MAAM,EAAEA,MAAM,CAACM,EAAE;UACjB,GAAGP,MAAM,CAACY;QACd,CAAC;QACDM,IAAI,EAAElB,MAAM,CAACkB,IAAI,IAAI,CAAC,eAAe;MACzC,CAAC,CAAC;;MAEF;MACA,MAAMf,WAAW,GAAG,MAAM,IAAI,CAACL,aAAa,CAAC,CAAC;MAC9C,MAAMqB,gBAAgB,GAAGhB,WAAW,CAACiB,MAAM,CAACV,IAAI,IAAI;QAChD;QACA,IAAIA,IAAI,CAACT,MAAM,IAAIS,IAAI,CAACT,MAAM,KAAKA,MAAM,CAACM,EAAE,EAAE;UAC1C,OAAO,KAAK;QAChB;;QAEA;QACA,MAAM;UAAEc,KAAK;UAAEC;QAAQ,CAAC,GAAGtB,MAAM,CAACY,KAAK,IAAI,CAAC,CAAC;QAC7C,IAAIS,KAAK,IAAI,CAACA,KAAK,CAACE,QAAQ,CAACb,IAAI,CAACH,EAAE,CAAC,EAAE;UACnC,OAAO,KAAK;QAChB;QACA,IAAIe,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,CAACb,IAAI,CAACF,IAAI,CAAC,EAAE;UACzC,OAAO,KAAK;QAChB;QAEA,OAAO,IAAI;MACf,CAAC,CAAC;;MAEF;MACA,OAAOtB,MAAM,CAACuB,EAAE,CAAC,CAAC,GAAGU,gBAAgB,EAAE,GAAGH,iBAAiB,CAAC,CAAC;IACjE,CAAC,CAAC,OAAOF,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMU,MAAMA,CAACd,IAAU,EAAsD;IACzE,IAAI;MACA,MAAM,IAAI,CAACb,iBAAiB,CAAC4B,UAAU,CAAC;QAAEf;MAAK,CAAC,CAAC;MACjD,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMY,MAAMA,CAAChB,IAAU,EAAsD;IACzE,IAAI;MACA;MACA;MACA,MAAM,IAAI,CAACb,iBAAiB,CAAC8B,UAAU,CAAC;QAAEjB,IAAI;QAAEkB,QAAQ,EAAElB;MAAK,CAAC,CAAC;MAEjE,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;EAEA,MAAMe,MAAMA,CAACnB,IAAU,EAAsD;IACzE,IAAI;MACA,MAAM,IAAI,CAACb,iBAAiB,CAACiC,UAAU,CAAC;QAAEpB;MAAK,CAAC,CAAC;MACjD,OAAOxB,MAAM,CAACuB,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,OAAOK,KAAK,EAAE;MACZ,OAAO5B,MAAM,CAAC2B,IAAI,CAAC,IAAIpB,gBAAgB,CAACqB,KAAK,CAAC,CAAC;IACnD;EACJ;AACJ;AAEA,OAAO,MAAM1B,eAAe,GAAGH,oBAAoB,CAAC;EAChD8C,WAAW,EAAE1C,qBAAqB;EAClC2C,cAAc,EAAEtC,mBAAmB;EACnCuC,YAAY,EAAE,CAAC9C,aAAa,EAAEG,yBAAyB,EAAEC,aAAa;AAC1E,CAAC,CAAC","ignoreList":[]}

package/features/security/teams/shared/abstractions.d.ts

@@ -0,0 +1,20 @@
+import { Result } from "@webiny/feature/api";
+import type { Team, GetTeamInput, ListTeamsInput } from "./types.js";
+import { TeamNotFoundError, TeamStorageError } from "./errors.js";
+export interface ITeamsRepositoryErrors {
+    base: TeamNotFoundError | TeamStorageError;
+}
+type RepositoryError = ITeamsRepositoryErrors[keyof ITeamsRepositoryErrors];
+export interface ITeamsRepository {
+    get(params: GetTeamInput): Promise<Result<Team, RepositoryError>>;
+    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryError>>;
+    create(data: Team): Promise<Result<void, RepositoryError>>;
+    update(data: Team): Promise<Result<void, RepositoryError>>;
+    delete(team: Team): Promise<Result<void, RepositoryError>>;
+}
+export declare const TeamsRepository: import("@webiny/di").Abstraction<ITeamsRepository>;
+export declare namespace TeamsRepository {
+    type Interface = ITeamsRepository;
+    type Error = RepositoryError;
+}
+export {};

package/features/security/teams/shared/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const TeamsRepository = createAbstraction("TeamsRepository");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/teams/shared/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","TeamsRepository"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Team, GetTeamInput, ListTeamsInput } from \"./types.js\";\nimport { TeamNotFoundError, TeamStorageError } from \"./errors.js\";\n\nexport interface ITeamsRepositoryErrors {\n    base: TeamNotFoundError | TeamStorageError;\n}\n\ntype RepositoryError = ITeamsRepositoryErrors[keyof ITeamsRepositoryErrors];\n\nexport interface ITeamsRepository {\n    get(params: GetTeamInput): Promise<Result<Team, RepositoryError>>;\n    list(params: ListTeamsInput): Promise<Result<Team[], RepositoryError>>;\n    create(data: Team): Promise<Result<void, RepositoryError>>;\n    update(data: Team): Promise<Result<void, RepositoryError>>;\n    delete(team: Team): Promise<Result<void, RepositoryError>>;\n}\n\nexport const TeamsRepository = createAbstraction<ITeamsRepository>(\"TeamsRepository\");\n\nexport namespace TeamsRepository {\n    export type Interface = ITeamsRepository;\n    export type Error = RepositoryError;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAmBvD,OAAO,MAAMC,eAAe,GAAGD,iBAAiB,CAAmB,iBAAiB,CAAC","ignoreList":[]}

package/features/security/teams/shared/errors.d.ts

@@ -0,0 +1,47 @@
+import { BaseError } from "@webiny/feature/api";
+export declare class TeamStorageError extends BaseError {
+    readonly code: "TEAM_STORAGE_ERROR";
+    constructor(error: Error);
+}
+export declare class TeamNotFoundError extends BaseError {
+    readonly code: "TEAM_NOT_FOUND";
+    constructor();
+}
+type NotAuthorizedErrorData = {
+    message?: string;
+};
+export declare class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {
+    readonly code: "NOT_AUTHORIZED";
+    constructor(data?: NotAuthorizedErrorData);
+}
+type TeamExistsErrorData = {
+    slug: string;
+};
+export declare class TeamExistsError extends BaseError<TeamExistsErrorData> {
+    readonly code: "TEAM_EXISTS";
+    constructor(slug: string);
+}
+export declare class CannotUpdatePluginTeamsError extends BaseError {
+    readonly code: "CANNOT_UPDATE_PLUGIN_TEAMS";
+    constructor();
+}
+export declare class CannotDeletePluginTeamsError extends BaseError {
+    readonly code: "CANNOT_DELETE_PLUGIN_TEAMS";
+    constructor();
+}
+export declare class CannotUpdateSystemTeamsError extends BaseError {
+    readonly code: "CANNOT_UPDATE_SYSTEM_TEAMS";
+    constructor();
+}
+export declare class CannotDeleteSystemTeamsError extends BaseError {
+    readonly code: "CANNOT_DELETE_SYSTEM_TEAMS";
+    constructor();
+}
+type TeamValidationErrorData = {
+    message: string;
+};
+export declare class TeamValidationError extends BaseError<TeamValidationErrorData> {
+    readonly code: "TEAM_VALIDATION_ERROR";
+    constructor(message: string);
+}
+export {};

package/features/security/teams/shared/errors.js

@@ -0,0 +1,82 @@
+import { BaseError } from "@webiny/feature/api";
+export class TeamStorageError extends BaseError {
+  code = "TEAM_STORAGE_ERROR";
+  constructor(error) {
+    super({
+      message: error.message
+    });
+  }
+}
+export class TeamNotFoundError extends BaseError {
+  code = "TEAM_NOT_FOUND";
+  constructor() {
+    super({
+      message: `Team was not found!`
+    });
+  }
+}
+export class NotAuthorizedError extends BaseError {
+  code = "NOT_AUTHORIZED";
+  constructor(data = {}) {
+    super({
+      message: data.message || "Not authorized!",
+      data
+    });
+  }
+}
+export class TeamExistsError extends BaseError {
+  code = "TEAM_EXISTS";
+  constructor(slug) {
+    super({
+      message: `Team with slug "${slug}" already exists.`,
+      data: {
+        slug
+      }
+    });
+  }
+}
+export class CannotUpdatePluginTeamsError extends BaseError {
+  code = "CANNOT_UPDATE_PLUGIN_TEAMS";
+  constructor() {
+    super({
+      message: "Cannot update teams created via plugins."
+    });
+  }
+}
+export class CannotDeletePluginTeamsError extends BaseError {
+  code = "CANNOT_DELETE_PLUGIN_TEAMS";
+  constructor() {
+    super({
+      message: "Cannot delete teams created via plugins."
+    });
+  }
+}
+export class CannotUpdateSystemTeamsError extends BaseError {
+  code = "CANNOT_UPDATE_SYSTEM_TEAMS";
+  constructor() {
+    super({
+      message: "Cannot update system teams."
+    });
+  }
+}
+export class CannotDeleteSystemTeamsError extends BaseError {
+  code = "CANNOT_DELETE_SYSTEM_TEAMS";
+  constructor() {
+    super({
+      message: "Cannot delete system teams."
+    });
+  }
+}
+export class TeamValidationError extends BaseError {
+  code = "TEAM_VALIDATION_ERROR";
+  constructor(message) {
+    super({
+      message,
+      data: {
+        message
+      }
+    });
+  }
+}
+
+//# sourceMappingURL=errors.js.map

package/features/security/teams/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BaseError","TeamStorageError","code","constructor","error","message","TeamNotFoundError","NotAuthorizedError","data","TeamExistsError","slug","CannotUpdatePluginTeamsError","CannotDeletePluginTeamsError","CannotUpdateSystemTeamsError","CannotDeleteSystemTeamsError","TeamValidationError"],"sources":["errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class TeamStorageError extends BaseError {\n    override readonly code = \"TEAM_STORAGE_ERROR\" as const;\n\n    constructor(error: Error) {\n        super({\n            message: error.message\n        });\n    }\n}\n\nexport class TeamNotFoundError extends BaseError {\n    override readonly code = \"TEAM_NOT_FOUND\" as const;\n\n    constructor() {\n        super({\n            message: `Team was not found!`\n        });\n    }\n}\n\ntype NotAuthorizedErrorData = {\n    message?: string;\n};\n\nexport class NotAuthorizedError extends BaseError<NotAuthorizedErrorData> {\n    override readonly code = \"NOT_AUTHORIZED\" as const;\n\n    constructor(data: NotAuthorizedErrorData = {}) {\n        super({\n            message: data.message || \"Not authorized!\",\n            data\n        });\n    }\n}\n\ntype TeamExistsErrorData = {\n    slug: string;\n};\n\nexport class TeamExistsError extends BaseError<TeamExistsErrorData> {\n    override readonly code = \"TEAM_EXISTS\" as const;\n\n    constructor(slug: string) {\n        super({\n            message: `Team with slug \"${slug}\" already exists.`,\n            data: { slug }\n        });\n    }\n}\n\nexport class CannotUpdatePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotDeletePluginTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_PLUGIN_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete teams created via plugins.\"\n        });\n    }\n}\n\nexport class CannotUpdateSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_UPDATE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot update system teams.\"\n        });\n    }\n}\n\nexport class CannotDeleteSystemTeamsError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_SYSTEM_TEAMS\" as const;\n\n    constructor() {\n        super({\n            message: \"Cannot delete system teams.\"\n        });\n    }\n}\n\ntype TeamValidationErrorData = {\n    message: string;\n};\n\nexport class TeamValidationError extends BaseError<TeamValidationErrorData> {\n    override readonly code = \"TEAM_VALIDATION_ERROR\" as const;\n\n    constructor(message: string) {\n        super({\n            message,\n            data: { message }\n        });\n    }\n}\n"],"mappings":"AAAA,SAASA,SAAS,QAAQ,qBAAqB;AAE/C,OAAO,MAAMC,gBAAgB,SAASD,SAAS,CAAC;EAC1BE,IAAI,GAAG,oBAAoB;EAE7CC,WAAWA,CAACC,KAAY,EAAE;IACtB,KAAK,CAAC;MACFC,OAAO,EAAED,KAAK,CAACC;IACnB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMC,iBAAiB,SAASN,SAAS,CAAC;EAC3BE,IAAI,GAAG,gBAAgB;EAEzCC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAME,kBAAkB,SAASP,SAAS,CAAyB;EACpDE,IAAI,GAAG,gBAAgB;EAEzCC,WAAWA,CAACK,IAA4B,GAAG,CAAC,CAAC,EAAE;IAC3C,KAAK,CAAC;MACFH,OAAO,EAAEG,IAAI,CAACH,OAAO,IAAI,iBAAiB;MAC1CG;IACJ,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAMC,eAAe,SAAST,SAAS,CAAsB;EAC9CE,IAAI,GAAG,aAAa;EAEtCC,WAAWA,CAACO,IAAY,EAAE;IACtB,KAAK,CAAC;MACFL,OAAO,EAAE,mBAAmBK,IAAI,mBAAmB;MACnDF,IAAI,EAAE;QAAEE;MAAK;IACjB,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMC,4BAA4B,SAASX,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMO,4BAA4B,SAASZ,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMQ,4BAA4B,SAASb,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAEA,OAAO,MAAMS,4BAA4B,SAASd,SAAS,CAAC;EACtCE,IAAI,GAAG,4BAA4B;EAErDC,WAAWA,CAAA,EAAG;IACV,KAAK,CAAC;MACFE,OAAO,EAAE;IACb,CAAC,CAAC;EACN;AACJ;AAMA,OAAO,MAAMU,mBAAmB,SAASf,SAAS,CAA0B;EACtDE,IAAI,GAAG,uBAAuB;EAEhDC,WAAWA,CAACE,OAAe,EAAE;IACzB,KAAK,CAAC;MACFA,OAAO;MACPG,IAAI,EAAE;QAAEH;MAAQ;IACpB,CAAC,CAAC;EACN;AACJ","ignoreList":[]}

package/features/security/teams/shared/types.d.ts

@@ -0,0 +1,28 @@
+import type { Team } from "../../../../types/security.js";
+export type { Team };
+export interface CreateTeamInput {
+    name: string;
+    slug: string;
+    description: string;
+    roles: string[];
+    system?: boolean;
+}
+export interface UpdateTeamInput {
+    name?: string;
+    description?: string;
+    roles?: string[];
+}
+export type GetTeamInput = {
+    id: string;
+    slug?: never;
+} | {
+    slug: string;
+    id?: never;
+};
+export interface ListTeamsInput {
+    where?: {
+        id_in?: string[];
+        slug_in?: string[];
+    };
+    sort?: string[];
+}

package/features/security/teams/shared/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map

package/features/security/teams/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type { Team } from \"~/types/security.js\";\n\nexport type { Team };\n\nexport interface CreateTeamInput {\n    name: string;\n    slug: string;\n    description: string;\n    roles: string[];\n    system?: boolean;\n}\n\nexport interface UpdateTeamInput {\n    name?: string;\n    description?: string;\n    roles?: string[];\n}\n\nexport type GetTeamInput =\n    | {\n          id: string;\n          slug?: never;\n      }\n    | {\n          slug: string;\n          id?: never;\n      };\n\nexport interface ListTeamsInput {\n    where?: {\n        id_in?: string[];\n        slug_in?: string[];\n    };\n    sort?: string[];\n}\n"],"mappings":"","ignoreList":[]}

package/features/security/utils/AppPermissions.d.ts

@@ -0,0 +1,27 @@
+import type { SecurityPermission, SecurityIdentity, CreatedBy } from "../../../types/security.js";
+export interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {
+    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;
+    getPermissions: () => TPermission[] | Promise<TPermission[]>;
+    fullAccessPermissionName?: string;
+}
+export type EnsureParams = Partial<{
+    rwd: string;
+    pw: string;
+    owns: CreatedBy;
+}>;
+export declare class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {
+    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;
+    getPermissions: () => TPermission[] | Promise<TPermission[]>;
+    private fullAccessPermissions;
+    constructor({ getIdentity, getPermissions, fullAccessPermissionName }: AppPermissionsParams<TPermission>);
+    ensure(params?: EnsureParams): Promise<boolean>;
+    hasFullAccess(): Promise<boolean>;
+    canAccessNonOwnedRecords(): Promise<boolean>;
+    canAccessOnlyOwnRecords(): Promise<boolean>;
+    private hasRwd;
+    private hasPw;
+    /**
+     * Filters out base `name` and `_src` properties from the permission object.
+     */
+    private filterOutSystemPermissionsObjectProperties;
+}

package/features/security/utils/AppPermissions.js

@@ -0,0 +1,99 @@
+const FULL_ACCESS_PERMISSION_NAME = "*";
+export class AppPermissions {
+  constructor({
+    getIdentity,
+    getPermissions,
+    fullAccessPermissionName
+  }) {
+    this.getIdentity = getIdentity;
+    this.getPermissions = getPermissions;
+    this.fullAccessPermissions = [FULL_ACCESS_PERMISSION_NAME, fullAccessPermissionName || ""].filter(Boolean);
+  }
+  async ensure(params = {}) {
+    if (await this.hasFullAccess()) {
+      return true;
+    }
+    if (params.owns) {
+      if (await this.canAccessNonOwnedRecords()) {
+        return true;
+      }
+
+      // If we got here, that means we didn't encounter a permission object
+      // that gives us the ability to access non-owned records.
+      const identity = await this.getIdentity();
+      if (identity.id === params.owns.id) {
+        return true;
+      }
+      return false;
+    }
+    const permissions = await this.getPermissions();
+    const hasPermission = permissions.some(current => {
+      if (params.rwd && !this.hasRwd(current, params.rwd)) {
+        return false;
+      }
+      if (params.pw && !this.hasPw(current, params.pw)) {
+        return false;
+      }
+      return true;
+    });
+    return hasPermission;
+  }
+  async hasFullAccess() {
+    const permissions = await this.getPermissions();
+    return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));
+  }
+  async canAccessNonOwnedRecords() {
+    // First pass - check if we have full access.
+    if (await this.hasFullAccess()) {
+      return true;
+    }
+
+    // Second pass - if there's at least one permission that doesn't
+    // prevent us from accessing non-owned records, then we grant access.
+    const permissions = await this.getPermissions();
+    return permissions.some(p => !p.own);
+  }
+  async canAccessOnlyOwnRecords() {
+    // First pass - check if we have full access to Page Builder.
+    if (await this.hasFullAccess()) {
+      return false;
+    }
+
+    // Second pass - if there's at least one permission that doesn't
+    // prevent us from accessing non-owned records, then we grant access.
+    const permissions = await this.getPermissions();
+    return !permissions.some(p => !p.own);
+  }
+  hasRwd(permission, rwd) {
+    return typeof permission.rwd !== "string" || permission.rwd.includes(rwd);
+  }
+
+  // Has publishing workflow permissions?
+  hasPw(permission, pw) {
+    // `name` and `_src` properties are always present.
+    const permissionWithoutSystemProperties = this.filterOutSystemPermissionsObjectProperties(permission);
+    const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;
+    if (!isCustom) {
+      // Means it's a "full-access" permission.
+      return true;
+    }
+    if (typeof permission["pw"] !== "string") {
+      return false;
+    }
+    return permission["pw"].includes(pw);
+  }
+
+  /**
+   * Filters out base `name` and `_src` properties from the permission object.
+   */
+  filterOutSystemPermissionsObjectProperties(permission) {
+    return Object.keys(permission).reduce((acc, key) => {
+      if (key !== "name" && key !== "_src") {
+        acc[key] = permission[key];
+      }
+      return acc;
+    }, {});
+  }
+}
+
+//# sourceMappingURL=AppPermissions.js.map

package/features/security/utils/AppPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["FULL_ACCESS_PERMISSION_NAME","AppPermissions","constructor","getIdentity","getPermissions","fullAccessPermissionName","fullAccessPermissions","filter","Boolean","ensure","params","hasFullAccess","owns","canAccessNonOwnedRecords","identity","id","permissions","hasPermission","some","current","rwd","hasRwd","pw","hasPw","p","includes","name","own","canAccessOnlyOwnRecords","permission","permissionWithoutSystemProperties","filterOutSystemPermissionsObjectProperties","isCustom","Object","keys","length","reduce","acc","key"],"sources":["AppPermissions.ts"],"sourcesContent":["import type { SecurityPermission, SecurityIdentity, CreatedBy } from \"~/types/security.js\";\n\nconst FULL_ACCESS_PERMISSION_NAME = \"*\";\n\nexport interface AppPermissionsParams<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    fullAccessPermissionName?: string;\n}\n\nexport type EnsureParams = Partial<{\n    rwd: string;\n    pw: string;\n    owns: CreatedBy;\n}>;\n\nexport class AppPermissions<TPermission extends SecurityPermission = SecurityPermission> {\n    getIdentity: () => SecurityIdentity | Promise<SecurityIdentity>;\n    getPermissions: () => TPermission[] | Promise<TPermission[]>;\n    private fullAccessPermissions: string[];\n\n    constructor({\n        getIdentity,\n        getPermissions,\n        fullAccessPermissionName\n    }: AppPermissionsParams<TPermission>) {\n        this.getIdentity = getIdentity;\n        this.getPermissions = getPermissions;\n        this.fullAccessPermissions = [\n            FULL_ACCESS_PERMISSION_NAME,\n            fullAccessPermissionName || \"\"\n        ].filter(Boolean);\n    }\n\n    async ensure(params: EnsureParams = {}): Promise<boolean> {\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        if (params.owns) {\n            if (await this.canAccessNonOwnedRecords()) {\n                return true;\n            }\n\n            // If we got here, that means we didn't encounter a permission object\n            // that gives us the ability to access non-owned records.\n            const identity = await this.getIdentity();\n            if (identity.id === params.owns.id) {\n                return true;\n            }\n\n            return false;\n        }\n\n        const permissions = await this.getPermissions();\n        const hasPermission = permissions.some(current => {\n            if (params.rwd && !this.hasRwd(current, params.rwd)) {\n                return false;\n            }\n\n            if (params.pw && !this.hasPw(current, params.pw)) {\n                return false;\n            }\n\n            return true;\n        });\n\n        return hasPermission;\n    }\n\n    async hasFullAccess() {\n        const permissions = await this.getPermissions();\n        return permissions.some(p => this.fullAccessPermissions.filter(Boolean).includes(p.name));\n    }\n\n    async canAccessNonOwnedRecords() {\n        // First pass - check if we have full access.\n        if (await this.hasFullAccess()) {\n            return true;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return permissions.some(p => !p.own);\n    }\n\n    async canAccessOnlyOwnRecords() {\n        // First pass - check if we have full access to Page Builder.\n        if (await this.hasFullAccess()) {\n            return false;\n        }\n\n        // Second pass - if there's at least one permission that doesn't\n        // prevent us from accessing non-owned records, then we grant access.\n        const permissions = await this.getPermissions();\n        return !permissions.some(p => !p.own);\n    }\n\n    private hasRwd(permission: TPermission, rwd: string) {\n        return typeof permission.rwd !== \"string\" || permission.rwd.includes(rwd);\n    }\n\n    // Has publishing workflow permissions?\n    private hasPw(permission: TPermission, pw: string) {\n        // `name` and `_src` properties are always present.\n        const permissionWithoutSystemProperties =\n            this.filterOutSystemPermissionsObjectProperties(permission);\n\n        const isCustom = Object.keys(permissionWithoutSystemProperties).length > 0;\n\n        if (!isCustom) {\n            // Means it's a \"full-access\" permission.\n            return true;\n        }\n\n        if (typeof permission[\"pw\"] !== \"string\") {\n            return false;\n        }\n\n        return permission[\"pw\"].includes(pw);\n    }\n\n    /**\n     * Filters out base `name` and `_src` properties from the permission object.\n     */\n    private filterOutSystemPermissionsObjectProperties(permission: SecurityPermission) {\n        return Object.keys(permission).reduce(\n            (acc, key) => {\n                if (key !== \"name\" && key !== \"_src\") {\n                    acc[key] = permission[key];\n                }\n                return acc;\n            },\n            {} as Record<string, any>\n        );\n    }\n}\n"],"mappings":"AAEA,MAAMA,2BAA2B,GAAG,GAAG;AAcvC,OAAO,MAAMC,cAAc,CAA8D;EAKrFC,WAAWA,CAAC;IACRC,WAAW;IACXC,cAAc;IACdC;EAC+B,CAAC,EAAE;IAClC,IAAI,CAACF,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,cAAc,GAAGA,cAAc;IACpC,IAAI,CAACE,qBAAqB,GAAG,CACzBN,2BAA2B,EAC3BK,wBAAwB,IAAI,EAAE,CACjC,CAACE,MAAM,CAACC,OAAO,CAAC;EACrB;EAEA,MAAMC,MAAMA,CAACC,MAAoB,GAAG,CAAC,CAAC,EAAoB;IACtD,IAAI,MAAM,IAAI,CAACC,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;IAEA,IAAID,MAAM,CAACE,IAAI,EAAE;MACb,IAAI,MAAM,IAAI,CAACC,wBAAwB,CAAC,CAAC,EAAE;QACvC,OAAO,IAAI;MACf;;MAEA;MACA;MACA,MAAMC,QAAQ,GAAG,MAAM,IAAI,CAACX,WAAW,CAAC,CAAC;MACzC,IAAIW,QAAQ,CAACC,EAAE,KAAKL,MAAM,CAACE,IAAI,CAACG,EAAE,EAAE;QAChC,OAAO,IAAI;MACf;MAEA,OAAO,KAAK;IAChB;IAEA,MAAMC,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,MAAMa,aAAa,GAAGD,WAAW,CAACE,IAAI,CAACC,OAAO,IAAI;MAC9C,IAAIT,MAAM,CAACU,GAAG,IAAI,CAAC,IAAI,CAACC,MAAM,CAACF,OAAO,EAAET,MAAM,CAACU,GAAG,CAAC,EAAE;QACjD,OAAO,KAAK;MAChB;MAEA,IAAIV,MAAM,CAACY,EAAE,IAAI,CAAC,IAAI,CAACC,KAAK,CAACJ,OAAO,EAAET,MAAM,CAACY,EAAE,CAAC,EAAE;QAC9C,OAAO,KAAK;MAChB;MAEA,OAAO,IAAI;IACf,CAAC,CAAC;IAEF,OAAOL,aAAa;EACxB;EAEA,MAAMN,aAAaA,CAAA,EAAG;IAClB,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAOY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,IAAI,CAAClB,qBAAqB,CAACC,MAAM,CAACC,OAAO,CAAC,CAACiB,QAAQ,CAACD,CAAC,CAACE,IAAI,CAAC,CAAC;EAC7F;EAEA,MAAMb,wBAAwBA,CAAA,EAAG;IAC7B;IACA,IAAI,MAAM,IAAI,CAACF,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,IAAI;IACf;;IAEA;IACA;IACA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAOY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,CAACA,CAAC,CAACG,GAAG,CAAC;EACxC;EAEA,MAAMC,uBAAuBA,CAAA,EAAG;IAC5B;IACA,IAAI,MAAM,IAAI,CAACjB,aAAa,CAAC,CAAC,EAAE;MAC5B,OAAO,KAAK;IAChB;;IAEA;IACA;IACA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACZ,cAAc,CAAC,CAAC;IAC/C,OAAO,CAACY,WAAW,CAACE,IAAI,CAACM,CAAC,IAAI,CAACA,CAAC,CAACG,GAAG,CAAC;EACzC;EAEQN,MAAMA,CAACQ,UAAuB,EAAET,GAAW,EAAE;IACjD,OAAO,OAAOS,UAAU,CAACT,GAAG,KAAK,QAAQ,IAAIS,UAAU,CAACT,GAAG,CAACK,QAAQ,CAACL,GAAG,CAAC;EAC7E;;EAEA;EACQG,KAAKA,CAACM,UAAuB,EAAEP,EAAU,EAAE;IAC/C;IACA,MAAMQ,iCAAiC,GACnC,IAAI,CAACC,0CAA0C,CAACF,UAAU,CAAC;IAE/D,MAAMG,QAAQ,GAAGC,MAAM,CAACC,IAAI,CAACJ,iCAAiC,CAAC,CAACK,MAAM,GAAG,CAAC;IAE1E,IAAI,CAACH,QAAQ,EAAE;MACX;MACA,OAAO,IAAI;IACf;IAEA,IAAI,OAAOH,UAAU,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE;MACtC,OAAO,KAAK;IAChB;IAEA,OAAOA,UAAU,CAAC,IAAI,CAAC,CAACJ,QAAQ,CAACH,EAAE,CAAC;EACxC;;EAEA;AACJ;AACA;EACYS,0CAA0CA,CAACF,UAA8B,EAAE;IAC/E,OAAOI,MAAM,CAACC,IAAI,CAACL,UAAU,CAAC,CAACO,MAAM,CACjC,CAACC,GAAG,EAAEC,GAAG,KAAK;MACV,IAAIA,GAAG,KAAK,MAAM,IAAIA,GAAG,KAAK,MAAM,EAAE;QAClCD,GAAG,CAACC,GAAG,CAAC,GAAGT,UAAU,CAACS,GAAG,CAAC;MAC9B;MACA,OAAOD,GAAG;IACd,CAAC,EACD,CAAC,CACL,CAAC;EACL;AACJ","ignoreList":[]}

package/features/security/utils/IdentityValue.d.ts

@@ -0,0 +1,18 @@
+import type { SecurityIdentity } from "../../../types/security.js";
+type IdentityInput = SecurityIdentity | null | undefined;
+export declare class IdentityValue {
+    private readonly value;
+    private constructor();
+    static create(identity: IdentityInput): IdentityValue;
+    getValue(): {
+        id: string;
+        displayName: string;
+        type: string;
+    } | null;
+    getValueOrFallback(fallback: IdentityInput): {
+        id: string;
+        displayName: string;
+        type: string;
+    } | null;
+}
+export {};

package/features/security/utils/IdentityValue.js

@@ -0,0 +1,27 @@
+export class IdentityValue {
+  constructor(value) {
+    this.value = value;
+  }
+  static create(identity) {
+    return new IdentityValue(identity);
+  }
+  getValue() {
+    if (!this.value) {
+      return null;
+    }
+    return {
+      id: this.value.id,
+      displayName: this.value.displayName,
+      type: this.value.type
+    };
+  }
+  getValueOrFallback(fallback) {
+    const value = this.getValue();
+    if (value) {
+      return value;
+    }
+    return IdentityValue.create(fallback).getValue();
+  }
+}
+
+//# sourceMappingURL=IdentityValue.js.map

package/features/security/utils/IdentityValue.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["IdentityValue","constructor","value","create","identity","getValue","id","displayName","type","getValueOrFallback","fallback"],"sources":["IdentityValue.ts"],"sourcesContent":["import type { SecurityIdentity } from \"~/types/security.js\";\n\ntype IdentityInput = SecurityIdentity | null | undefined;\n\nexport class IdentityValue {\n    private readonly value: IdentityInput;\n\n    private constructor(value: IdentityInput) {\n        this.value = value;\n    }\n\n    static create(identity: IdentityInput) {\n        return new IdentityValue(identity);\n    }\n\n    getValue() {\n        if (!this.value) {\n            return null;\n        }\n\n        return {\n            id: this.value.id,\n            displayName: this.value.displayName,\n            type: this.value.type\n        };\n    }\n\n    getValueOrFallback(fallback: IdentityInput) {\n        const value = this.getValue();\n\n        if (value) {\n            return value;\n        }\n\n        return IdentityValue.create(fallback).getValue();\n    }\n}\n"],"mappings":"AAIA,OAAO,MAAMA,aAAa,CAAC;EAGfC,WAAWA,CAACC,KAAoB,EAAE;IACtC,IAAI,CAACA,KAAK,GAAGA,KAAK;EACtB;EAEA,OAAOC,MAAMA,CAACC,QAAuB,EAAE;IACnC,OAAO,IAAIJ,aAAa,CAACI,QAAQ,CAAC;EACtC;EAEAC,QAAQA,CAAA,EAAG;IACP,IAAI,CAAC,IAAI,CAACH,KAAK,EAAE;MACb,OAAO,IAAI;IACf;IAEA,OAAO;MACHI,EAAE,EAAE,IAAI,CAACJ,KAAK,CAACI,EAAE;MACjBC,WAAW,EAAE,IAAI,CAACL,KAAK,CAACK,WAAW;MACnCC,IAAI,EAAE,IAAI,CAACN,KAAK,CAACM;IACrB,CAAC;EACL;EAEAC,kBAAkBA,CAACC,QAAuB,EAAE;IACxC,MAAMR,KAAK,GAAG,IAAI,CAACG,QAAQ,CAAC,CAAC;IAE7B,IAAIH,KAAK,EAAE;MACP,OAAOA,KAAK;IAChB;IAEA,OAAOF,aAAa,CAACG,MAAM,CAACO,QAAQ,CAAC,CAACL,QAAQ,CAAC,CAAC;EACpD;AACJ","ignoreList":[]}

package/features/security/utils/filterOutCustomWbyAppsPermissions.d.ts

@@ -0,0 +1,2 @@
+import type { SecurityPermission } from "../../../types/security.js";
+export declare const filterOutCustomWbyAppsPermissions: (permissions: SecurityPermission[]) => SecurityPermission[];