var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; import { Injectable, computed, inject } from '@angular/core'; import { ROLE_PERMISSIONS } from './models/permission.model'; import { SessionService } from './session.service'; /** * Derives the current admin's permission set from their JWT `role` claim. * UI-only gate (hide/disable) - the backend must independently enforce * every mutation server-side. */ let PermissionService = class PermissionService { constructor() { this.session = inject(SessionService); this.permissions = computed(() => { const role = this.session.role(); return role ? ROLE_PERMISSIONS[role] : []; }); } has(permission) { return this.permissions().includes(permission); } hasAny(permissions) { return permissions.some(permission => this.has(permission)); } }; PermissionService = __decorate([ Injectable({ providedIn: 'root' }) ], PermissionService); export { PermissionService };