@timardex/cluemart-shared 1.5.825 → 1.5.828

package/dist/index.cjs

@@ -91,6 +91,7 @@ __export(index_exports, {
   KNOWN_EVENT_SCHEDULE_STATUSES: () => KNOWN_EVENT_SCHEDULE_STATUSES,
   NETWORK_USER_FACING_ERROR: () => NETWORK_USER_FACING_ERROR,
   OG_DESCRIPTION_LINE_BREAK: () => OG_DESCRIPTION_LINE_BREAK,
+  PERMISSIONS: () => PERMISSIONS,
   POST_SHARE_RESOURCE_TYPES: () => POST_SHARE_RESOURCE_TYPES,
   PROMO_CODE_PREFIX: () => PROMO_CODE_PREFIX,
   PUBLIC_SHARE_PATH_TYPES: () => PUBLIC_SHARE_PATH_TYPES,
@@ -100,6 +101,7 @@ __export(index_exports, {
   RELATION_SHARE_INVITATION: () => RELATION_SHARE_INVITATION,
   RELATION_SHARE_RESOURCE_TYPES: () => RELATION_SHARE_RESOURCE_TYPES,
   RESOURCE_SHARE_TYPES: () => RESOURCE_SHARE_TYPES,
+  ROLE_PERMISSIONS: () => ROLE_PERMISSIONS,
   SAVED_EMAIL_KEY: () => SAVED_EMAIL_KEY,
   SAVED_PASSWORD_KEY: () => SAVED_PASSWORD_KEY,
   SAVED_REFRESH_TOKEN_KEY: () => SAVED_REFRESH_TOKEN_KEY,
@@ -134,6 +136,7 @@ __export(index_exports, {
   TIER_DISPLAY_LABELS: () => TIER_DISPLAY_LABELS,
   TIER_FROM_LICENCE: () => TIER_FROM_LICENCE,
   USER_STORAGE_KEY: () => USER_STORAGE_KEY,
+  WILDCARD_PERMISSION: () => WILDCARD_PERMISSION,
   appendShareMoreInfoLine: () => appendShareMoreInfoLine,
   availableCategories: () => availableCategories,
   availableRegionOptions: () => availableRegionOptions,
@@ -216,6 +219,7 @@ __export(index_exports, {
   getEventScheduleStatusPresentation: () => getEventScheduleStatusPresentation,
   getEventScheduleStatusTone: () => getEventScheduleStatusTone,
   getEventStallholderEmptyMessage: () => getEventStallholderEmptyMessage,
+  getPermissionsForRoles: () => getPermissionsForRoles,
   getRegisteredVendorCategoryNames: () => getRegisteredVendorCategoryNames,
   getRegisteredVendorStartDates: () => getRegisteredVendorStartDates,
   getStallholderCategoryNames: () => getStallholderCategoryNames,
@@ -225,7 +229,12 @@ __export(index_exports, {
   getVendorEventRelationDateOptions: () => getVendorEventRelationDateOptions,
   getVendorEventRelationStartDates: () => getVendorEventRelationStartDates,
   getVendorEventsEmptyMessage: () => getVendorEventsEmptyMessage,
+  hasAllPermissions: () => hasAllPermissions,
+  hasAnyPermission: () => hasAnyPermission,
+  hasAnyRole: () => hasAnyRole,
   hasMatchingEventDate: () => hasMatchingEventDate,
+  hasPermission: () => hasPermission,
+  hasRole: () => hasRole,
   iconFiles: () => iconFiles,
   iconIds: () => iconIds,
   icons: () => icons,
@@ -261,6 +270,7 @@ __export(index_exports, {
   packagingOptions: () => packagingOptions,
   partnerBasicInfoFields: () => partnerBasicInfoFields,
   paymentMethodOptions: () => paymentMethodOptions,
+  permissionListIncludes: () => permissionListIncludes,
   posterFiles: () => posterFiles,
   posterIds: () => posterIds,
   posters: () => posters,
@@ -658,13 +668,13 @@ var EnumUserLicence = /* @__PURE__ */ ((EnumUserLicence2) => {
 })(EnumUserLicence || {});
 var EnumUserRole = /* @__PURE__ */ ((EnumUserRole2) => {
   EnumUserRole2["ADMIN"] = "admin";
-  EnumUserRole2["SUPER_ADMIN"] = "super_admin";
-  EnumUserRole2["CUSTOMER"] = "customer";
-  EnumUserRole2["MARKETING"] = "marketing";
-  EnumUserRole2["MODERATOR"] = "moderator";
-  EnumUserRole2["SUPPORT"] = "support";
   EnumUserRole2["AFFILIATE"] = "affiliate";
+  EnumUserRole2["CUSTOMER"] = "customer";
+  EnumUserRole2["EVENT"] = "event";
+  EnumUserRole2["PARTNER"] = "partner";
   EnumUserRole2["SCHOOL"] = "school";
+  EnumUserRole2["SUPER_ADMIN"] = "super_admin";
+  EnumUserRole2["VENDOR"] = "vendor";
   return EnumUserRole2;
 })(EnumUserRole || {});
 var EnumSocialMedia = /* @__PURE__ */ ((EnumSocialMedia2) => {
@@ -3856,8 +3866,9 @@ var USER_FIELDS_FRAGMENT = import_client.gql`
     overallPoints
     platform
     preferredRegion
+    permissions
     promoCodes
-    role
+    roles
     redeemedRewards {
       ...RedeemedRewardFields
     }
@@ -8430,6 +8441,161 @@ var fonts = {
     fontWeight: "400"
   }
 };
+
+// src/auth/permissions/permissions.ts
+var PERMISSIONS = [
+  "*",
+  // Dashboards
+  "dashboard.admin",
+  "dashboard.affiliate",
+  "dashboard.customer",
+  "dashboard.event",
+  "dashboard.partner",
+  "dashboard.school",
+  "dashboard.vendor",
+  // Admin: users
+  "users.delete",
+  "users.read",
+  "users.update",
+  // Admin: events
+  "events.create",
+  "events.delete",
+  "events.read",
+  "events.update",
+  // Admin: vendors
+  "vendors.create",
+  "vendors.delete",
+  "vendors.read",
+  "vendors.update",
+  // Admin: partners
+  "partners.create",
+  "partners.delete",
+  "partners.read",
+  "partners.update",
+  // Admin: schools
+  "schools.create",
+  "schools.delete",
+  "schools.read",
+  "schools.update",
+  // Admin: affiliates
+  "affiliates.create",
+  "affiliates.delete",
+  "affiliates.read",
+  "affiliates.update",
+  // Admin: ads / posts / settings
+  "ads.create",
+  "ads.delete",
+  "ads.read",
+  "ads.update",
+  "posts.create",
+  "posts.delete",
+  "posts.read",
+  "posts.update",
+  "settings.read",
+  "settings.update",
+  // Product: own-resource management
+  "affiliates.manage_own",
+  "events.manage_own",
+  "partners.manage_own",
+  "schools.manage_own",
+  "vendors.manage_own"
+];
+var WILDCARD_PERMISSION = "*";
+
+// src/auth/permissions/rolePermissions.ts
+var ADMIN_PERMISSIONS = [
+  "dashboard.admin",
+  "users.read",
+  "users.update",
+  "users.delete",
+  "events.read",
+  "events.create",
+  "events.update",
+  "events.delete",
+  "vendors.read",
+  "vendors.create",
+  "vendors.update",
+  "vendors.delete",
+  "partners.read",
+  "partners.create",
+  "partners.update",
+  "partners.delete",
+  "schools.read",
+  "schools.create",
+  "schools.update",
+  "schools.delete",
+  "affiliates.read",
+  "affiliates.create",
+  "affiliates.update",
+  "affiliates.delete",
+  "ads.read",
+  "ads.create",
+  "ads.update",
+  "ads.delete",
+  "posts.read",
+  "posts.create",
+  "posts.update",
+  "posts.delete",
+  "settings.read",
+  "settings.update"
+];
+var ROLE_PERMISSIONS = {
+  ["super_admin" /* SUPER_ADMIN */]: ["*"],
+  ["admin" /* ADMIN */]: ADMIN_PERMISSIONS,
+  ["customer" /* CUSTOMER */]: ["dashboard.customer"],
+  ["event" /* EVENT */]: ["dashboard.event", "events.manage_own"],
+  ["vendor" /* VENDOR */]: ["dashboard.vendor", "vendors.manage_own"],
+  ["partner" /* PARTNER */]: ["dashboard.partner", "partners.manage_own"],
+  ["school" /* SCHOOL */]: ["dashboard.school", "schools.manage_own"],
+  ["affiliate" /* AFFILIATE */]: ["dashboard.affiliate", "affiliates.manage_own"]
+};
+
+// src/auth/permissions/helpers.ts
+function normalizeRoles(roles) {
+  if (!roles?.length) return [];
+  return roles;
+}
+function getPermissionsForRoles(roles) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const role of normalizeRoles(roles)) {
+    const perms = ROLE_PERMISSIONS[role] ?? [];
+    for (const perm of perms) {
+      if (!seen.has(perm)) {
+        seen.add(perm);
+        result.push(perm);
+      }
+    }
+  }
+  return result;
+}
+function permissionListIncludes(permissions, permission) {
+  if (!permissions?.length) return false;
+  const set = new Set(permissions);
+  if (set.has(WILDCARD_PERMISSION)) return true;
+  return set.has(permission);
+}
+function hasPermission(roles, permission) {
+  return permissionListIncludes(getPermissionsForRoles(roles), permission);
+}
+function hasAnyPermission(roles, permissions) {
+  if (permissions.length === 0) return false;
+  const granted = getPermissionsForRoles(roles);
+  return permissions.some((p) => permissionListIncludes(granted, p));
+}
+function hasAllPermissions(roles, permissions) {
+  if (permissions.length === 0) return true;
+  const granted = getPermissionsForRoles(roles);
+  return permissions.every((p) => permissionListIncludes(granted, p));
+}
+function hasRole(roles, role) {
+  return normalizeRoles(roles).includes(role);
+}
+function hasAnyRole(roles, checkRoles) {
+  if (checkRoles.length === 0) return false;
+  const set = new Set(normalizeRoles(roles));
+  return checkRoles.some((r) => set.has(r));
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AFFILIATE_PARTICIPANT_TYPE_LABELS,
@@ -8493,6 +8659,7 @@ var fonts = {
   KNOWN_EVENT_SCHEDULE_STATUSES,
   NETWORK_USER_FACING_ERROR,
   OG_DESCRIPTION_LINE_BREAK,
+  PERMISSIONS,
   POST_SHARE_RESOURCE_TYPES,
   PROMO_CODE_PREFIX,
   PUBLIC_SHARE_PATH_TYPES,
@@ -8502,6 +8669,7 @@ var fonts = {
   RELATION_SHARE_INVITATION,
   RELATION_SHARE_RESOURCE_TYPES,
   RESOURCE_SHARE_TYPES,
+  ROLE_PERMISSIONS,
   SAVED_EMAIL_KEY,
   SAVED_PASSWORD_KEY,
   SAVED_REFRESH_TOKEN_KEY,
@@ -8536,6 +8704,7 @@ var fonts = {
   TIER_DISPLAY_LABELS,
   TIER_FROM_LICENCE,
   USER_STORAGE_KEY,
+  WILDCARD_PERMISSION,
   appendShareMoreInfoLine,
   availableCategories,
   availableRegionOptions,
@@ -8618,6 +8787,7 @@ var fonts = {
   getEventScheduleStatusPresentation,
   getEventScheduleStatusTone,
   getEventStallholderEmptyMessage,
+  getPermissionsForRoles,
   getRegisteredVendorCategoryNames,
   getRegisteredVendorStartDates,
   getStallholderCategoryNames,
@@ -8627,7 +8797,12 @@ var fonts = {
   getVendorEventRelationDateOptions,
   getVendorEventRelationStartDates,
   getVendorEventsEmptyMessage,
+  hasAllPermissions,
+  hasAnyPermission,
+  hasAnyRole,
   hasMatchingEventDate,
+  hasPermission,
+  hasRole,
   iconFiles,
   iconIds,
   icons,
@@ -8663,6 +8838,7 @@ var fonts = {
   packagingOptions,
   partnerBasicInfoFields,
   paymentMethodOptions,
+  permissionListIncludes,
   posterFiles,
   posterIds,
   posters,