@bitbaum/accountkit 0.0.0-stage → 0.8.0

package/dist/auth/roles.js

@@ -0,0 +1,29 @@
+/**
+ * What a person is to this product. One account, one role, held in the app's
+ * own `users` table — customers, the people who help them, professionals,
+ * staff and admins all sign in the same way (fleet STACK.md, "Identity").
+ *
+ * Adding a role is one line here. A role is never chosen by the person it
+ * describes: sign-up ignores it, and only `pnpm run role:grant` changes it.
+ */
+export const ROLES = [
+    "customer",
+    "helper",
+    "professional",
+    "staff",
+    "admin",
+];
+export const DEFAULT_ROLE = "customer";
+export function isRole(value) {
+    return (typeof value === "string" && ROLES.includes(value));
+}
+/** Roles that may see other people's records. Everyone else sees only their own. */
+const STAFF = ["staff", "admin"];
+export function isStaff(role) {
+    return isRole(role) && STAFF.includes(role);
+}
+/** Only an admin may change roles, and nobody may change their own. */
+export function mayGrantRole(actor, targetId) {
+    return actor.role === "admin" && actor.id !== targetId;
+}
+//# sourceMappingURL=roles.js.map

package/dist/auth/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/auth/roles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,UAAU;IACV,QAAQ;IACR,cAAc;IACd,OAAO;IACP,OAAO;CACC,CAAC;AAGX,MAAM,CAAC,MAAM,YAAY,GAAS,UAAU,CAAC;AAE7C,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,KAAK,GAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC1B,KAAoC,EACpC,QAAgB;IAEhB,OAAO,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC;AACzD,CAAC"}