## Turtle Start ##
@prefix schema: .
@prefix xsd: .
@prefix rdfs: .
@prefix wdrs: .
@prefix foaf: .
@prefix acl: .
@prefix filter: .
@prefix oplacl: .
@prefix oplres: .
@prefix oplofr: .
@prefix source: .
# --- Document Metadata ---
source: a schema:CreativeWork ;
schema:name "OPAL, Graph, and File Access Authorization, Groups and Restrictions Definitions" ;
schema:comment "This document describes the rules, groups and restrictions required for the OPAL and graph access offers." ;
schema:author ;
schema:datePublished "2026-01-14T00:00:00Z"^^xsd:dateTime .
# --- Offer Groups ---
a oplofr:OfferGroup ;
schema:name "OPAL Chat Service Offers" ;
rdfs:label "OPAL Chat Service Offers" .
a oplofr:OfferGroup ;
schema:name "OPAL API Access Offers" ;
rdfs:label "OPAL API Access Offers" ;
schema:description "Offers for sessions instantiated via the /chat/api endpoints." .
a oplofr:OfferGroup ;
schema:name "Specific Knowledge Graph Access Offers" ;
rdfs:label "Specific Knowledge Graph Access Offers" .
a oplofr:OfferGroup ;
schema:name "Specific Knowledge File Access Offers" ;
rdfs:label "Specific Knowledge File Access Offers" .
## --- Opal Chat Access ---
# ==============================================================================
# Conditonal Group Definitions for each offer type
# ==============================================================================
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:DataTwinglerSpecificModuleEntryLevelOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:DataTwinglerSpecificModulePlusOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:DataTwinglerSpecificModuleProOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:DataTwinglerSpecificModuleMaxOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:SupportAssistantSpecificModuleEntryLevelOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:SupportAssistantSpecificModulePlusOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Data Twingler Assistant offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:SupportAssistantSpecificModuleProOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased access to the Support Assistant chat offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:SupportAssistantSpecificModuleMaxOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Entry level offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:BringYourOwnKeyEntryLevelOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Plus level offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:BringYourOwnKeyPlusOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Pro level offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:BringYourOwnKeyProOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "OPAL Users identified using a NetID based Identifier who have purchased the Max level offer and whose license is in date" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:MaxOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
# ==============================================================================
# Restrictions
# ==============================================================================
# ------------------------------------------------------------------------------
# A. Session & Token Limits
# ------------------------------------------------------------------------------
# --- Entry Level Limits ---
# Max Prompts per session : 20
# Max Input Tokens per prompt: 2,000
# Max Total Tokens per session: 4,000
# Rate limit per hour: 1500 (25 per minute)
oplres:max-prompt-count-per-session a oplres:Restriction ;
schema:name "Max prompts per session" ;
schema:description "Users are limited to a maximum of 20 prompts within a single session" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "20"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-token-usage-per-prompt a oplres:Restriction ;
schema:name "Max tokens per prompt" ;
schema:description "Each prompt can use up to 2000 tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "2000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-total-token-usage-per-session a oplres:Restriction ;
schema:name "Max total tokens per session" ;
schema:description "The total token usage for an entire session is capped at 4000 tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "4000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-prompt-interval-count-entry a oplres:Restriction ;
schema:name "Max 25 prompts for min" ;
schema:description "Up to 25 prompts" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "1500"^^xsd:int ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
### Average prompts for interval of 1h
oplres:max-prompt-interval-1h a oplres:Restriction ;
schema:name "Interval of 1 hour" ;
schema:description "Interval used for all limits" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "3600"^^xsd:int ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgentClass foaf:Agent ;
wdrs:describedby <#source> .
# --- Plus Level Limits ---
# Max Prompts per session: 200
# Max Input Tokens per prompt: 20,000
# Max Total Tokens per session: 40,000
# Rate limit per hour: 15000 (250 per minute)
oplres:max-prompt-count-per-session-plus-offer a oplres:Restriction ;
schema:name "Max prompts per session" ;
schema:description "Users are limited to a maximum of 200 prompts within a single session" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "200"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-token-usage-per-prompti-plus-offer a oplres:Restriction ;
schema:name "Max tokens per prompt" ;
schema:description "Each prompt can use up to 20000 tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "20000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-total-token-usage-per-session-plus-offer a oplres:Restriction ;
schema:name "Max total tokens per session" ;
schema:description "The total token usage for an entire session is capped at 40000 tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "40000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-prompt-interval-count-plus a oplres:Restriction ;
schema:name "Max 250 prompts for interval 1 min" ;
schema:description "Up to 250 prompts" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "15000"^^xsd:int ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
# --- Pro Level Limits ---
# Max Prompts: 400
# Max Input Tokens: 100,000
# Max Total Tokens: 200,000
# Rate limit per hour: 30000 (500 per minute)
oplres:max-prompt-count-per-session-pro-offer a oplres:Restriction ;
schema:name "Max prompts per session" ;
schema:description "Users are limited to a maximum of 400 prompts within a single session" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "400"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-token-usage-per-prompt-pro-offer a oplres:Restriction ;
schema:name "Max tokens per prompt" ;
schema:description "Each prompt can use up to 100k tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "100000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-total-token-usage-per-session-pro-offer a oplres:Restriction ;
schema:name "Max total tokens per session" ;
schema:description "The total token usage for an entire session is capped at 200k tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "200000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-prompt-interval-count-pro a oplres:Restriction ;
schema:name "Max 500 prompts for interval 1 min" ;
schema:description "Up to 500 prompts" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "3000"^^xsd:int ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
# --- Max Level Limits ---
# Max Prompts per session: 1,000
# Max Input Tokens per prompt: 500,000
# Max Total Tokens per session: 1,000,000
# Rate limit per hour: 60000 (1000 per minute)
oplres:max-prompt-count-per-session-max-offer a oplres:Restriction ;
schema:name "Max prompts per session" ;
schema:description "Users are limited to a maximum of 1k prompts within a single session" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "1000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-token-usage-per-prompt-max-offer a oplres:Restriction ;
schema:name "Max tokens per prompt" ;
schema:description "Each prompt can use up to 500k tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "500000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-total-token-usage-per-session-max-offer a oplres:Restriction ;
schema:name "Max total tokens per session" ;
schema:description "The total token usage for an entire session is capped at 1M tokens" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "1000000"^^xsd:decimal ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:max-prompt-interval-count-max a oplres:Restriction ;
schema:name "Max 1000 prompts for interval 1 min" ;
schema:description "Up to 1000 prompts" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasMaxValue "60000"^^xsd:int ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
# ------------------------------------------------------------------------------
# Module & Tool Restrictions
# ------------------------------------------------------------------------------
oplres:use-data-twingler a oplres:Restriction ;
schema:name "Session Scoped to Data Twingler module" ;
schema:description "OPAL Sessions that use the Data Twingler module" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasRestrictedValue "data-twingler-config"^^xsd:string ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
oplres:use-support-assistant a oplres:Restriction ;
schema:name "Session Scoped to the Support Assistant" ;
schema:description "OPAL Sessions that use the Support Assistant" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasRestrictedValue "virtuoso-support-assistant-config"^^xsd:string ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
# --- Requiring a value ---
# --- Entry Level Features ---
oplres:entry-level-assistant-access a oplres:Restriction ;
schema:name "Entry Level assistant access" ;
schema:description "Entry Level assistant access" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasRestrictedValue "cello-config,data-twingler-config,opml-rss-news-reader,uda-support-assistant-config,virtuoso-support-assistant-config,data-twingler-uniprot" ;
wdrs:describedby <#source> .
oplres:entry-level-assistant-access-tools a oplres:Restriction ;
schema:name "Entry Level assistant access for tools" ;
schema:description "Entry Level assistant access to the tools" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasRestrictedValue "UB.DBA.sparqlQuery,Demo.demo.execute_spasql_query,Demo.demo.execute_sql_query" ;
oplres:hasMaxValue 1 ;
wdrs:describedby <#source> .
# --- Plus Level Features ---
oplres:plus-level-assistant-access a oplres:Restriction ;
schema:name "Plus assistant access" ;
schema:description "Plus assistant access" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasRestrictedValue "cello-config,data-twingler-config,opml-rss-news-reader,uda-support-assistant-config,virtuoso-support-assistant-config,data-twingler-uniprot" ;
wdrs:describedby <#source> .
oplres:plus-level-assistant-access-tools a oplres:Restriction ;
schema:name "Plus assistant access for tools" ;
schema:description "Plus assistant access to the tools" ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasAgent ;
oplres:hasRestrictedValue "UB.DBA.sparqlQuery,Demo.demo.execute_spasql_query,Demo.demo.execute_sql_query,OAI.DBA.WEB_FETCH,OAI.DBA.SPONGE_URL,FCT.DBA.FacetSearch" ;
oplres:hasMaxValue 2 ;
wdrs:describedby <#source> .
# --- Pro Level Features ---
# --- Max Level Features ---
oplres:restrict-enable-api-keys a oplres:Restriction ;
schema:name "Enable system-wide API key" ;
schema:description "Allow use of system-wide API key." ;
oplres:hasRestrictedResource ;
oplres:hasRestrictedParameter ;
oplres:hasRealm oplacl:DefaultRealm ;
oplres:hasRestrictedValue "1"^^xsd:string ;
oplres:hasAgent ;
oplres:hasAgent ;
oplres:hasAgent ;
wdrs:describedby <#source> .
# ==============================================================================
# Rules
# ==============================================================================
# --- Chat access rule ---
oplacl:chat-access-offers a acl:Authorization ;
schema:name "Rule to allow access to /chat when an offer is purchased" ;
acl:accessTo ;
oplacl:hasAccessMode oplacl:Read, oplacl:Write ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
acl:agent ;
oplacl:hasRealm oplacl:DefaultRealm ;
oplacl:hasScope oplacl:Query .
## --- OPAL Chat API Access
# ==============================================================================
# Conditional Group Definitions for each offer type
# ==============================================================================
a oplacl:ConditionalGroup ;
foaf:name "Users with API Access Entry Level License" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:ApiAccessEntryLevelOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "Users with API Access Medium Level License" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr:
prefix schema:
prefix oplshop:
prefix owl:
ask where {
{
select ?license where {
{ graph { ?shop oplshop:hasPurchaseCache ?cg } }
union
{ bind( as ?cg) }
graph ?cg {
{ ^{uri}^ oplprchs:madePurchase ?purchase . }
union
{ ?o owl:sameAs ^{uri}^ ; oplprchs:madePurchase ?purchase . }
?purchase oplprchs:contains ?offer ;
oplprchs:purchaseDate ?purchaseDate .
?offer a oplofr:ApiAccessMediumLevelOffer ;
schema:itemOffered ?license .
?license opllic:hasDuration ?duration .
?duration opllic:durationYears ?years .
filter (bif:dateadd ('day', xsd:integer(?years) * 365, ?purchaseDate) > bif:now()) .
}
} limit 1
}
filter (sql:stripe_customer_has_active_product_subscription (str(^{uri}^), ?license) > 0) .
}"""
] .
a oplacl:ConditionalGroup ;
foaf:name "Users with API Access Advanced Level License" ;
oplacl:hasCondition [
a oplacl:GroupCondition, oplacl:QueryCondition ;
oplacl:hasQuery """prefix oplprchs:
prefix opllic:
prefix oplofr: