@brite-future-schools-contracts/contracts 2.0.32 → 2.0.36

package/dist/contracts/index.d.ts

@@ -207,6 +207,7 @@ declare const createStaffContract: _orpc_contract.ContractProcedureBuilderWithIn
     nationalId: z.ZodString;
     roleName: z.ZodString;
     isPrimaryRole: z.ZodDefault<z.ZodBoolean>;
+    branchId: z.ZodOptional<z.ZodUUID>;
     departmentId: z.ZodOptional<z.ZodUUID>;
     designation: z.ZodString;
     employmentType: z.ZodEnum<{
@@ -339,6 +340,7 @@ declare const hrContract: {
         nationalId: z.ZodString;
         roleName: z.ZodString;
         isPrimaryRole: z.ZodDefault<z.ZodBoolean>;
+        branchId: z.ZodOptional<z.ZodUUID>;
         departmentId: z.ZodOptional<z.ZodUUID>;
         designation: z.ZodString;
         employmentType: z.ZodEnum<{

package/dist/contracts/index.js

@@ -78,8 +78,8 @@ import {
   updateBankAccountContract,
   updateCategoryContract,
   updateStaffStatusContract
-} from "../chunk-2B5AQI2I.js";
-import "../chunk-7AJ4LRST.js";
+} from "../chunk-RV423CEB.js";
+import "../chunk-E3VLQFEY.js";
 export {
   acknowledgeContract,
   acknowledgeDiaryEntryContract,

package/dist/index.cjs

@@ -407,6 +407,10 @@ var CreateStaffInputSchema = z3.object({
     description: "Role code from the roles table \u2014 e.g. TEACHER, HEAD_TEACHER"
   }),
   isPrimaryRole: z3.boolean().default(true),
+  // Oversight-only override — Proprietor/Director/System Admin can
+  // target a branch other than their own active one. Ignored server-side
+  // for non-oversight callers, who are always scoped to their own branch.
+  branchId: UuidSchema.optional(),
   // Employment details
   departmentId: UuidSchema.optional(),
   designation: z3.string().min(1).max(100).meta({
@@ -1335,7 +1339,15 @@ var blocksContract = {
 };
 
 // src/roles/helpers.ts
+var ORG_SCOPED_ROLES = /* @__PURE__ */ new Set([
+  "PROPRIETOR",
+  "DIRECTOR",
+  "SYSTEM_ADMIN"
+]);
 function hasRole(user, role) {
+  if (ORG_SCOPED_ROLES.has(role)) {
+    return user.roles.some((r) => r.name === role);
+  }
   return user.roles.some(
     (r) => r.name === role && (!user.activeBranchId || r.branchId === user.activeBranchId)
   );