@myrjfa/state 2.2.0 → 2.3.1

package/dist/lib/models/authorization.d.ts

@@ -0,0 +1,107 @@
+export declare const AUTHORIZATION_ROLES: readonly ["user", "host", "hr", "sales", "developer", "customer_support", "admin"];
+export type AuthorizationRole = (typeof AUTHORIZATION_ROLES)[number] | string;
+export declare const AUTHORIZATION_PERMISSIONS: readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage", "users.read", "users.manage", "hosts.read", "hosts.manage", "staff.read", "staff.manage", "listings.read", "listings.create", "listings.update.own", "listings.delete.own", "listings.moderate", "content.moderate", "opportunities.applications.read", "opportunities.membership_requirements.approve", "bookings.read.own", "bookings.read.host", "bookings.read.all", "bookings.manage.host", "bookings.manage.all", "pricing.read", "pricing.manage.own", "pricing.manage.platform", "discounts.read", "discounts.manage.own", "discounts.manage.platform", "partner_programs.read", "partner_programs.manage", "rewards.read.own", "rewards.read.all", "rewards.manage", "rewards.adjust", "memberships.read.all", "memberships.manage", "host_performance.read.all", "host_performance.manage", "payouts.read", "payouts.record", "platform.settings.read", "platform.settings.manage", "verification.read", "verification.manage", "support.contacts.read", "audit.read", "developer.diagnostics.read", "database.collections.read"];
+export type AuthorizationPermission = (typeof AUTHORIZATION_PERMISSIONS)[number] | string;
+export type BaseAccountType = "user" | "host";
+export type AccountType = BaseAccountType | "staff";
+export type PermissionAwareActor = {
+    role?: string | null;
+    legacyRole?: string | null;
+    permissions?: string[] | null;
+    accountType?: AccountType | string | null;
+    baseAccountType?: BaseAccountType | string | null;
+    staffProfileId?: string | null;
+};
+export declare const STAFF_DASHBOARD_PERMISSIONS: readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage", "users.read", "users.manage", "hosts.read", "hosts.manage", "staff.read", "staff.manage", "listings.read", "listings.moderate", "content.moderate", "opportunities.applications.read", "bookings.read.all", "bookings.manage.all", "payouts.read", "payouts.record", "platform.settings.read", "platform.settings.manage", "discounts.manage.platform", "partner_programs.read", "partner_programs.manage", "rewards.read.all", "rewards.manage", "memberships.read.all", "memberships.manage", "host_performance.read.all", "host_performance.manage", "verification.read", "verification.manage", "support.contacts.read", "audit.read", "developer.diagnostics.read"];
+export declare const MODERATION_DASHBOARD_PERMISSIONS: readonly ["listings.read", "listings.moderate", "content.moderate", "opportunities.applications.read"];
+export declare const PAYOUT_DASHBOARD_PERMISSIONS: readonly ["payouts.read", "payouts.record"];
+export declare const PLATFORM_DASHBOARD_PERMISSIONS: readonly ["platform.settings.read", "platform.settings.manage", "discounts.manage.platform", "partner_programs.read", "partner_programs.manage", "rewards.read.all", "rewards.manage", "memberships.read.all", "memberships.manage", "host_performance.read.all", "host_performance.manage"];
+export declare const AUTHORIZATION_DASHBOARD_PERMISSIONS: readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage"];
+export declare const ADMIN_ROUTE_PERMISSION_GROUPS: {
+    readonly authorization: readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage"];
+    readonly moderation: readonly ["listings.read", "listings.moderate", "content.moderate", "opportunities.applications.read"];
+    readonly payouts: readonly ["payouts.read", "payouts.record"];
+    readonly platform: readonly ["platform.settings.read", "platform.settings.manage", "discounts.manage.platform", "partner_programs.read", "partner_programs.manage", "rewards.read.all", "rewards.manage", "memberships.read.all", "memberships.manage", "host_performance.read.all", "host_performance.manage"];
+    readonly registrations: readonly ["bookings.read.all", "bookings.manage.all"];
+    readonly staffAssignment: readonly ["roles.manage"];
+};
+export type AuthorizationRoleDto = {
+    _id?: string;
+    slug: string;
+    name: string;
+    description?: string;
+    permissions: string[];
+    system?: boolean;
+    isActive?: boolean;
+};
+export type AuthorizationPermissionDto = {
+    _id?: string;
+    key: string;
+    name: string;
+    description?: string;
+    category?: string;
+    system?: boolean;
+    isActive?: boolean;
+};
+export type StaffRoleAssignmentDto = {
+    staffProfileId: string;
+    baseAccountType: BaseAccountType;
+    baseAccountId: string;
+    baseAccountModel: "User" | "HostProfile";
+    username?: string;
+    email?: string;
+    staffRole: string;
+    baseUserId?: string | null;
+    baseHostId?: string | null;
+};
+export type StaffProfileDto = {
+    _id: string;
+    baseUserId?: string | null;
+    baseHostId?: string | null;
+    staffRole: string;
+    permissionOverrides?: string[];
+    isActive?: boolean;
+    baseUser?: Pick<AssignableAccountDto, "username" | "email" | "firstName" | "lastName"> & {
+        _id: string;
+    } | null;
+    baseHost?: Pick<AssignableAccountDto, "username" | "email" | "firstName" | "lastName"> & {
+        _id: string;
+    } | null;
+};
+export type AssignableAccountDto = {
+    baseAccountType: BaseAccountType;
+    baseAccountId: string;
+    baseAccountModel: "User" | "HostProfile";
+    username?: string;
+    email?: string;
+    firstName?: string;
+    lastName?: string;
+    phoneNumber?: string;
+    legacyRole?: string;
+    staffProfileId?: string | null;
+    staffRole?: string | null;
+    permissionOverrides?: string[];
+};
+export declare function getActorRole(actor?: PermissionAwareActor | null): string | null;
+export declare function getActorBaseAccountType(actor?: PermissionAwareActor | null): BaseAccountType;
+export declare function isTravellerAccount(actor?: PermissionAwareActor | null): boolean;
+export declare function isStaffSession(actor?: PermissionAwareActor | null): boolean;
+export declare function isHostSession(actor?: PermissionAwareActor | null): boolean;
+export declare function canUseTravellerFlows(actor?: PermissionAwareActor | null): boolean;
+export declare function getActorRoles(actor?: PermissionAwareActor | null): string[];
+export declare function getActorPermissions(actor?: PermissionAwareActor | null): string[];
+export declare function hasRole(actor: PermissionAwareActor | null | undefined, role: string): boolean;
+export declare function hasPermission(actor: PermissionAwareActor | null | undefined, permission: string): boolean;
+export declare function hasAnyPermission(actor: PermissionAwareActor | null | undefined, permissions: readonly string[]): boolean;
+export declare function hasAllPermissions(actor: PermissionAwareActor | null | undefined, permissions: readonly string[]): boolean;
+export declare function hasStaffDashboardAccess(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function hasHostDashboardAccess(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function getActorDashboardRoute(actor: PermissionAwareActor | null | undefined): "/dashboard/staff/overview" | "/dashboard/host/overview" | "/dashboard/user";
+export declare function canCreateListing(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function canCreateListingForHost(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function canAccessListingEditor(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function canAccessOpportunityApplicationReview(actor: PermissionAwareActor | null | undefined): boolean;
+export declare function getOpportunityApplicationApprovalStatus(actor: PermissionAwareActor | null | undefined): "adminApproved" | "approved";
+export declare function getAdminDashboardRoutePermissions(pathname: string): readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage", "users.read", "users.manage", "hosts.read", "hosts.manage", "staff.read", "staff.manage", "listings.read", "listings.moderate", "content.moderate", "opportunities.applications.read", "bookings.read.all", "bookings.manage.all", "payouts.read", "payouts.record", "platform.settings.read", "platform.settings.manage", "discounts.manage.platform", "partner_programs.read", "partner_programs.manage", "rewards.read.all", "rewards.manage", "memberships.read.all", "memberships.manage", "host_performance.read.all", "host_performance.manage", "verification.read", "verification.manage", "support.contacts.read", "audit.read", "developer.diagnostics.read"] | readonly ["listings.read", "listings.moderate", "content.moderate", "opportunities.applications.read"] | readonly ["payouts.read", "payouts.record"] | readonly ["roles.read", "roles.manage", "permissions.read", "permissions.manage"] | readonly ["bookings.read.all", "bookings.manage.all"];
+export declare function hasAdminDashboardRouteAccess(actor: PermissionAwareActor | null | undefined, pathname: string): boolean;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/lib/models/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../src/lib/models/authorization.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,oFAQtB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAE9E,eAAO,MAAM,yBAAyB,+jCAkD5B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAE1F,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,OAAO,CAAC;AAEpD,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1C,eAAe,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,2BAA2B,4tBAmC9B,CAAC;AAEX,eAAO,MAAM,gCAAgC,wGAKnC,CAAC;AAEX,eAAO,MAAM,4BAA4B,6CAG/B,CAAC;AAEX,eAAO,MAAM,8BAA8B,8RAYjC,CAAC;AAEX,eAAO,MAAM,mCAAmC,mFAKtC,CAAC;AAEX,eAAO,MAAM,6BAA6B;;;;;;;CAOhC,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChH,QAAQ,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACjH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,iBAG/D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAAG,eAAe,CAI5F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,WAOrE;AAED,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,WAMjE;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,WAEhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,WAEvE;AAED,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,YAGhE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,IAAI,YAQtE;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,WAGnF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,WAM/F;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC9C,WAAW,EAAE,SAAS,MAAM,EAAE,WAG/B;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC9C,WAAW,EAAE,SAAS,MAAM,EAAE,WAG/B;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAErF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAEpF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,gFAIpF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAM9E;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAErF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAMpF;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,WAO/C;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,gCAK/C;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,igCAiCjE;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC9C,QAAQ,EAAE,MAAM,WAOjB"}

package/dist/lib/models/authorization.js

@@ -0,0 +1,263 @@
+export const AUTHORIZATION_ROLES = [
+    "user",
+    "host",
+    "hr",
+    "sales",
+    "developer",
+    "customer_support",
+    "admin",
+];
+export const AUTHORIZATION_PERMISSIONS = [
+    "roles.read",
+    "roles.manage",
+    "permissions.read",
+    "permissions.manage",
+    "users.read",
+    "users.manage",
+    "hosts.read",
+    "hosts.manage",
+    "staff.read",
+    "staff.manage",
+    "listings.read",
+    "listings.create",
+    "listings.update.own",
+    "listings.delete.own",
+    "listings.moderate",
+    "content.moderate",
+    "opportunities.applications.read",
+    "opportunities.membership_requirements.approve",
+    "bookings.read.own",
+    "bookings.read.host",
+    "bookings.read.all",
+    "bookings.manage.host",
+    "bookings.manage.all",
+    "pricing.read",
+    "pricing.manage.own",
+    "pricing.manage.platform",
+    "discounts.read",
+    "discounts.manage.own",
+    "discounts.manage.platform",
+    "partner_programs.read",
+    "partner_programs.manage",
+    "rewards.read.own",
+    "rewards.read.all",
+    "rewards.manage",
+    "rewards.adjust",
+    "memberships.read.all",
+    "memberships.manage",
+    "host_performance.read.all",
+    "host_performance.manage",
+    "payouts.read",
+    "payouts.record",
+    "platform.settings.read",
+    "platform.settings.manage",
+    "verification.read",
+    "verification.manage",
+    "support.contacts.read",
+    "audit.read",
+    "developer.diagnostics.read",
+    "database.collections.read",
+];
+export const STAFF_DASHBOARD_PERMISSIONS = [
+    "roles.read",
+    "roles.manage",
+    "permissions.read",
+    "permissions.manage",
+    "users.read",
+    "users.manage",
+    "hosts.read",
+    "hosts.manage",
+    "staff.read",
+    "staff.manage",
+    "listings.read",
+    "listings.moderate",
+    "content.moderate",
+    "opportunities.applications.read",
+    "bookings.read.all",
+    "bookings.manage.all",
+    "payouts.read",
+    "payouts.record",
+    "platform.settings.read",
+    "platform.settings.manage",
+    "discounts.manage.platform",
+    "partner_programs.read",
+    "partner_programs.manage",
+    "rewards.read.all",
+    "rewards.manage",
+    "memberships.read.all",
+    "memberships.manage",
+    "host_performance.read.all",
+    "host_performance.manage",
+    "verification.read",
+    "verification.manage",
+    "support.contacts.read",
+    "audit.read",
+    "developer.diagnostics.read",
+];
+export const MODERATION_DASHBOARD_PERMISSIONS = [
+    "listings.read",
+    "listings.moderate",
+    "content.moderate",
+    "opportunities.applications.read",
+];
+export const PAYOUT_DASHBOARD_PERMISSIONS = [
+    "payouts.read",
+    "payouts.record",
+];
+export const PLATFORM_DASHBOARD_PERMISSIONS = [
+    "platform.settings.read",
+    "platform.settings.manage",
+    "discounts.manage.platform",
+    "partner_programs.read",
+    "partner_programs.manage",
+    "rewards.read.all",
+    "rewards.manage",
+    "memberships.read.all",
+    "memberships.manage",
+    "host_performance.read.all",
+    "host_performance.manage",
+];
+export const AUTHORIZATION_DASHBOARD_PERMISSIONS = [
+    "roles.read",
+    "roles.manage",
+    "permissions.read",
+    "permissions.manage",
+];
+export const ADMIN_ROUTE_PERMISSION_GROUPS = {
+    authorization: AUTHORIZATION_DASHBOARD_PERMISSIONS,
+    moderation: MODERATION_DASHBOARD_PERMISSIONS,
+    payouts: PAYOUT_DASHBOARD_PERMISSIONS,
+    platform: PLATFORM_DASHBOARD_PERMISSIONS,
+    registrations: ["bookings.read.all", "bookings.manage.all"],
+    staffAssignment: ["roles.manage"],
+};
+export function getActorRole(actor) {
+    const role = String(actor?.role || "").trim().toLowerCase();
+    return role || null;
+}
+export function getActorBaseAccountType(actor) {
+    if (actor?.baseAccountType === "host")
+        return "host";
+    if (actor?.baseAccountType === "user")
+        return "user";
+    return getActorRole(actor) === "host" ? "host" : "user";
+}
+export function isTravellerAccount(actor) {
+    return Boolean(actor &&
+        getActorBaseAccountType(actor) === "user" &&
+        actor.accountType !== "staff" &&
+        getActorRole(actor) === "user");
+}
+export function isStaffSession(actor) {
+    return Boolean(actor &&
+        actor.accountType === "staff" &&
+        actor.staffProfileId);
+}
+export function isHostSession(actor) {
+    return Boolean(actor && actor.accountType === "host");
+}
+export function canUseTravellerFlows(actor) {
+    return !actor || isTravellerAccount(actor);
+}
+export function getActorRoles(actor) {
+    const role = getActorRole(actor);
+    return role ? [role] : [];
+}
+export function getActorPermissions(actor) {
+    return [
+        ...new Set((actor?.permissions || [])
+            .map((permission) => String(permission || "").trim().toLowerCase())
+            .filter(Boolean)),
+    ];
+}
+export function hasRole(actor, role) {
+    const roleKey = String(role || "").trim().toLowerCase();
+    return Boolean(roleKey && getActorRoles(actor).includes(roleKey));
+}
+export function hasPermission(actor, permission) {
+    const permissionKey = String(permission || "").trim().toLowerCase();
+    return Boolean(permissionKey &&
+        (hasRole(actor, "admin") || getActorPermissions(actor).includes(permissionKey)));
+}
+export function hasAnyPermission(actor, permissions) {
+    return permissions.some((permission) => hasPermission(actor, permission));
+}
+export function hasAllPermissions(actor, permissions) {
+    return permissions.every((permission) => hasPermission(actor, permission));
+}
+export function hasStaffDashboardAccess(actor) {
+    return isStaffSession(actor);
+}
+export function hasHostDashboardAccess(actor) {
+    return isHostSession(actor) && hasRole(actor, "host");
+}
+export function getActorDashboardRoute(actor) {
+    if (hasStaffDashboardAccess(actor))
+        return "/dashboard/staff/overview";
+    if (isHostSession(actor))
+        return "/dashboard/host/overview";
+    return "/dashboard/user";
+}
+export function canCreateListing(actor) {
+    return Boolean(actor &&
+        (isHostSession(actor) ||
+            hasPermission(actor, "listings.create")));
+}
+export function canCreateListingForHost(actor) {
+    return hasPermission(actor, "listings.create");
+}
+export function canAccessListingEditor(actor) {
+    return Boolean(actor &&
+        (isHostSession(actor) ||
+            hasPermission(actor, "listings.moderate")));
+}
+export function canAccessOpportunityApplicationReview(actor) {
+    return Boolean(actor &&
+        (isHostSession(actor) ||
+            hasPermission(actor, "opportunities.applications.read")));
+}
+export function getOpportunityApplicationApprovalStatus(actor) {
+    return hasPermission(actor, "opportunities.applications.read")
+        ? "adminApproved"
+        : "approved";
+}
+export function getAdminDashboardRoutePermissions(pathname) {
+    const path = String(pathname || "").toLowerCase();
+    if (path.includes("/registrations"))
+        return ADMIN_ROUTE_PERMISSION_GROUPS.registrations;
+    if (path.startsWith("/dashboard/staff/authorization") || path.startsWith("/dashboard/admin/authorization")) {
+        return ADMIN_ROUTE_PERMISSION_GROUPS.authorization;
+    }
+    if (path.startsWith("/dashboard/staff/payouts") || path.startsWith("/dashboard/admin/payouts"))
+        return ADMIN_ROUTE_PERMISSION_GROUPS.payouts;
+    if (path.startsWith("/dashboard/staff/host-listings") || path.startsWith("/dashboard/admin/host-listings")) {
+        return ADMIN_ROUTE_PERMISSION_GROUPS.moderation;
+    }
+    if ([
+        "/dashboard/admin/stays",
+        "/dashboard/admin/adventures",
+        "/dashboard/admin/rentals",
+        "/dashboard/admin/packages",
+        "/dashboard/admin/events",
+        "/dashboard/admin/opportunities",
+        "/dashboard/admin/blogs",
+        "/dashboard/staff/stays",
+        "/dashboard/staff/adventures",
+        "/dashboard/staff/rentals",
+        "/dashboard/staff/packages",
+        "/dashboard/staff/events",
+        "/dashboard/staff/opportunities",
+        "/dashboard/staff/blogs",
+    ].some((prefix) => path.startsWith(prefix))) {
+        return ADMIN_ROUTE_PERMISSION_GROUPS.moderation;
+    }
+    return STAFF_DASHBOARD_PERMISSIONS;
+}
+export function hasAdminDashboardRouteAccess(actor, pathname) {
+    if (!isStaffSession(actor))
+        return false;
+    if (/^\/dashboard\/(staff|admin)(\/overview)?\/?$/.test(pathname.toLowerCase())) {
+        return true;
+    }
+    return hasAnyPermission(actor, getAdminDashboardRoutePermissions(pathname));
+}

package/dist/lib/models/blog.d.ts

@@ -19,7 +19,7 @@ export declare const BlogSchema: z.ZodObject<{
     authorImage: z.ZodString;
     authorRole: z.ZodEnum<["host", "admin", "user"]>;
 }, "strict", z.ZodTypeAny, {
-    status: "pending" | "denied" | "draft" | "posted" | "archived";
+    status: "pending" | "draft" | "posted" | "archived" | "denied";
     title: string;
     createdAt: Date;
     updatedAt: Date;
@@ -36,7 +36,7 @@ export declare const BlogSchema: z.ZodObject<{
     authorRole: "host" | "user" | "admin";
     hashtags?: string | undefined;
 }, {
-    status: "pending" | "denied" | "draft" | "posted" | "archived";
+    status: "pending" | "draft" | "posted" | "archived" | "denied";
     title: string;
     createdAt: Date;
     updatedAt: Date;

package/dist/lib/models/booking.d.ts

@@ -12,7 +12,7 @@ export interface Booking {
         phoneNumber?: string;
     } | null;
     entityId: any;
-    entityType: "Rental" | "Adventure" | "Event" | "Stay" | "TravelPackage";
+    entityType: "Rental" | "Adventure" | "Guide" | "Event" | "Stay" | "TravelPackage";
     roomId?: string;
     roomQty?: number;
     hostId: string;
@@ -39,6 +39,8 @@ export interface Booking {
     };
     specialRequests?: string;
     selectedPricingIndex?: number;
+    pricingSnapshot?: Record<string, unknown> | null;
+    discountSnapshot?: import("./discount").DiscountQuote | null;
     selectedActivities?: Array<{
         activityName?: string;
         name?: string;
@@ -53,7 +55,7 @@ export interface Booking {
 }
 export interface CreateBookingRequest {
     entityId: string;
-    entityType: "Rental" | "Adventure" | "Event" | "Stay" | "TravelPackage";
+    entityType: "Rental" | "Adventure" | "Guide" | "Event" | "Stay" | "TravelPackage";
     roomId?: string;
     roomQty?: number;
     startDate: string;
@@ -73,6 +75,9 @@ export interface CreateBookingRequest {
     };
     specialRequests?: string;
     selectedPricingIndex?: number;
+    selectedPricingId?: string;
+    couponCode?: string;
+    checkoutStartedAt?: string;
     selectedActivities?: Array<{
         activityName?: string;
         name?: string;

package/dist/lib/models/booking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"booking.d.ts","sourceRoot":"","sources":["../../../src/lib/models/booking.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAC7F,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE,MAAM,WAAW,OAAO;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,QAAQ,EAAE,GAAG,CAAC;IACd,UAAU,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAAC;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAAC;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"booking.d.ts","sourceRoot":"","sources":["../../../src/lib/models/booking.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAC7F,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEvE,MAAM,WAAW,OAAO;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,GAAG;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI,CAAC;IACT,QAAQ,EAAE,GAAG,CAAC;IACd,UAAU,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjD,gBAAgB,CAAC,EAAE,OAAO,YAAY,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7D,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,eAAe,CAAC;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB"}