add dist

dist/modules/access/predicates.js

@@ -0,0 +1,32 @@
+import { ROLE_HIERARCHY } from './types.js';
+/** Safely extracts the roles array from a loosely-typed user. */ function getRoles(user) {
+    if (!user || typeof user !== 'object') {
+        return [];
+    }
+    const roles = user.roles;
+    if (!Array.isArray(roles)) {
+        return [];
+    }
+    return roles.filter((role)=>ROLE_HIERARCHY.includes(role));
+}
+/** Highest-privilege role index the user holds, or -1 if none. */ function highestRoleIndex(user) {
+    const roles = getRoles(user);
+    if (!roles.length) {
+        return -1;
+    }
+    return Math.max(...roles.map((role)=>ROLE_HIERARCHY.indexOf(role)));
+}
+/**
+ * True if the user holds at least the given role in the hierarchy.
+ * admin satisfies 'editor' and 'user'; editor satisfies 'user'.
+ */ export function hasMinimumRole(user, minimum) {
+    return highestRoleIndex(user) >= ROLE_HIERARCHY.indexOf(minimum);
+}
+/** True if the user is an admin. */ export function isAdmin(user) {
+    return hasMinimumRole(user, 'admin');
+}
+/** True if the user is an editor or higher (editor, admin). */ export function isEditor(user) {
+    return hasMinimumRole(user, 'editor');
+}
+
+//# sourceMappingURL=predicates.js.map