release: @marketplaces/auth 0.1.0 (built from main)

dist/ed25519/permission.service.js

@@ -0,0 +1,33 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Injectable, computed, inject } from '@angular/core';
+import { ROLE_PERMISSIONS } from './models/permission.model';
+import { SessionService } from './session.service';
+/**
+ * Derives the current admin's permission set from their JWT `role` claim.
+ * UI-only gate (hide/disable) - the backend must independently enforce
+ * every mutation server-side.
+ */
+let PermissionService = class PermissionService {
+    constructor() {
+        this.session = inject(SessionService);
+        this.permissions = computed(() => {
+            const role = this.session.role();
+            return role ? ROLE_PERMISSIONS[role] : [];
+        });
+    }
+    has(permission) {
+        return this.permissions().includes(permission);
+    }
+    hasAny(permissions) {
+        return permissions.some(permission => this.has(permission));
+    }
+};
+PermissionService = __decorate([
+    Injectable({ providedIn: 'root' })
+], PermissionService);
+export { PermissionService };