terse-types 0.0.33 → 0.0.34

package/dist/getConfigACLRules.js

@@ -0,0 +1,314 @@
+import { ConfigType } from "./Configs.js";
+import { IntegrationType } from "./Integrations.js";
+function assertNever(value) {
+    throw new Error(`Unhandled config type: ${JSON.stringify(value)}`);
+}
+// Slack
+function getSlackOutputConfigACLRules(config) {
+    const rules = [];
+    if (config.channelId) {
+        rules.push({
+            integrationType: IntegrationType.SLACK,
+            integrationId: config.integrationId,
+            resourceType: "channel",
+            resourceId: config.channelId
+        });
+    }
+    for (const userId of config.userIds ?? []) {
+        rules.push({
+            integrationType: IntegrationType.SLACK,
+            integrationId: config.integrationId,
+            resourceType: "dm_user",
+            resourceId: userId
+        });
+    }
+    return rules;
+}
+function getSlackInputConfigACLRules(config) {
+    const rules = [];
+    if (config.channelId) {
+        rules.push({
+            integrationType: IntegrationType.SLACK,
+            integrationId: config.integrationId,
+            resourceType: "channel",
+            resourceId: config.channelId
+        });
+    }
+    for (const userId of config.userIds ?? []) {
+        rules.push({
+            integrationType: IntegrationType.SLACK,
+            integrationId: config.integrationId,
+            resourceType: "dm_user",
+            resourceId: userId
+        });
+    }
+    return rules;
+}
+// Notion
+function getNotionConfigACLRules(config) {
+    return [
+        ...(config.pageIds ?? []).map((pageId) => ({
+            integrationType: IntegrationType.NOTION,
+            integrationId: config.integrationId,
+            resourceType: "page",
+            resourceId: pageId
+        })),
+        ...(config.databaseIds ?? []).map((databaseId) => ({
+            integrationType: IntegrationType.NOTION,
+            integrationId: config.integrationId,
+            resourceType: "database",
+            resourceId: databaseId
+        }))
+    ];
+}
+// Gmail
+function getGmailOutputConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.GMAIL,
+            integrationId: config.integrationId,
+            resourceType: "send",
+            resourceId: "send"
+        }
+    ];
+}
+function getGmailDraftOutputConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.GMAIL,
+            integrationId: config.integrationId,
+            resourceType: "draft",
+            resourceId: "draft"
+        }
+    ];
+}
+// Terse built-in capabilities
+function getWebConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.TERSE,
+            integrationId: config.integrationId,
+            resourceType: "web_capability",
+            resourceId: "system"
+        }
+    ];
+}
+function getImageEditConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.TERSE,
+            integrationId: config.integrationId,
+            resourceType: "image_edit_capability",
+            resourceId: "system"
+        }
+    ];
+}
+// Linear
+function getLinearInputConfigACLRules(config) {
+    const rules = [
+        {
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+    if (config.teamId) {
+        rules.push({
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "team",
+            resourceId: config.teamId
+        });
+    }
+    if (config.projectId) {
+        rules.push({
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "project",
+            resourceId: config.projectId
+        });
+    }
+    return rules;
+}
+function getLinearOutputConfigACLRules(config) {
+    const rules = [
+        {
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+    if (config.teamId) {
+        rules.push({
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "team",
+            resourceId: config.teamId
+        });
+    }
+    if (config.projectId) {
+        rules.push({
+            integrationType: IntegrationType.LINEAR,
+            integrationId: config.integrationId,
+            resourceType: "project",
+            resourceId: config.projectId
+        });
+    }
+    return rules;
+}
+// PostHog
+function getPosthogConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.POSTHOG,
+            integrationId: config.integrationId,
+            resourceType: "project",
+            resourceId: config.projectId
+        }
+    ];
+}
+// Datadog
+function getDatadogConfigACLRules(config) {
+    const rules = [
+        {
+            integrationType: IntegrationType.DATADOG,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+    for (const indexName of config.defaultIndexes ?? []) {
+        rules.push({
+            integrationType: IntegrationType.DATADOG,
+            integrationId: config.integrationId,
+            resourceType: "index",
+            resourceId: indexName
+        });
+    }
+    return rules;
+}
+// LaunchDarkly
+function getLaunchDarklyConfigACLRules(config) {
+    const rules = [
+        {
+            integrationType: IntegrationType.LAUNCHDARKLY,
+            integrationId: config.integrationId,
+            resourceType: "project",
+            resourceId: config.projectKey
+        }
+    ];
+    for (const envKey of config.environmentKeys) {
+        rules.push({
+            integrationType: IntegrationType.LAUNCHDARKLY,
+            integrationId: config.integrationId,
+            resourceType: "environment",
+            resourceId: `${config.projectKey}:${envKey}`
+        });
+    }
+    return rules;
+}
+// WorkOS
+function getWorkOSInputConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.WORKOS,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+}
+function getWorkOSOutputConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.WORKOS,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+}
+// Attio
+function getAttioOutputConfigACLRules(config) {
+    const rules = [
+        {
+            integrationType: IntegrationType.ATTIO,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+    if (config.objectSlug) {
+        rules.push({
+            integrationType: IntegrationType.ATTIO,
+            integrationId: config.integrationId,
+            resourceType: "object",
+            resourceId: config.objectSlug
+        });
+    }
+    return rules;
+}
+// Snowflake
+function getSnowflakeOutputConfigACLRules(config) {
+    return [
+        {
+            integrationType: IntegrationType.SNOWFLAKE,
+            integrationId: config.integrationId,
+            resourceType: "integration",
+            resourceId: config.integrationId
+        }
+    ];
+}
+export function getConfigACLRules(config) {
+    switch (config.configType) {
+        // Input/trigger-only configs do not grant model-selected output tool ACL.
+        case ConfigType.GMAIL:
+        case ConfigType.TIME_TRIGGER:
+        case ConfigType.WEBHOOK_INPUT:
+        case ConfigType.WEBMONITOR:
+        case ConfigType.HEY_REACH_INPUT:
+            return [];
+        case ConfigType.SLACK:
+            return getSlackInputConfigACLRules(config);
+        case ConfigType.SLACK_OUTPUT:
+            return getSlackOutputConfigACLRules(config);
+        case ConfigType.NOTION:
+            return getNotionConfigACLRules(config);
+        case ConfigType.LINEAR_INPUT:
+            return getLinearInputConfigACLRules(config);
+        case ConfigType.LINEAR_OUTPUT:
+            return getLinearOutputConfigACLRules(config);
+        case ConfigType.GITHUB:
+            // GitHub repository IDs require backend hydration to owner/repo names.
+            return [];
+        case ConfigType.GMAIL_OUTPUT:
+            return getGmailOutputConfigACLRules(config);
+        case ConfigType.GMAIL_DRAFT_OUTPUT:
+            return getGmailDraftOutputConfigACLRules(config);
+        case ConfigType.POSTHOG:
+            return getPosthogConfigACLRules(config);
+        case ConfigType.DATADOG:
+            return getDatadogConfigACLRules(config);
+        case ConfigType.LAUNCHDARKLY:
+            return getLaunchDarklyConfigACLRules(config);
+        case ConfigType.WEB:
+            return getWebConfigACLRules(config);
+        case ConfigType.IMAGE_EDIT:
+            return getImageEditConfigACLRules(config);
+        case ConfigType.WORKOS_INPUT:
+            return getWorkOSInputConfigACLRules(config);
+        case ConfigType.WORKOS_OUTPUT:
+            return getWorkOSOutputConfigACLRules(config);
+        case ConfigType.ATTIO_OUTPUT:
+            return getAttioOutputConfigACLRules(config);
+        case ConfigType.SNOWFLAKE_OUTPUT:
+            return getSnowflakeOutputConfigACLRules(config);
+        default:
+            return assertNever(config);
+    }
+}
+export function getMergedACLRules(configs) {
+    return configs.flatMap(getConfigACLRules);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "terse-types",
-  "version": "0.0.33",
+  "version": "0.0.34",
   "type": "module",
   "description": "Shared Terse TypeScript types, enums, constants, and helpers.",
   "main": "./dist/index.js",