app/lib/roles.ts

Functions

Imports

It imports no other module of this repo. Imported by app/lib/ai.server.ts, app/lib/binder.server.ts, app/lib/book-history.server.ts, app/lib/books.server.ts, app/lib/bulk.server.ts, app/lib/content.server.ts, app/lib/google/drive.server.ts, app/lib/history.server.ts, app/lib/legal.server.ts, app/lib/mcp/tools.ts, app/lib/media.server.ts, app/lib/mentions.server.ts, app/lib/people-admin.server.ts, app/lib/people.server.ts, app/lib/projects.server.ts, app/lib/voice.server.ts, app/lib/waiting.server.ts, app/lib/writing.server.ts, app/routes/ai-draft.tsx, app/routes/book.chapter.tsx, app/routes/book.corkboard.tsx, app/routes/book.file.tsx, app/routes/book.outliner.tsx, app/routes/book.tsx, app/routes/editor.tsx, app/routes/legal.tsx, app/routes/media.tsx, app/routes/project.flags.tsx, app/routes/project.tsx, app/routes/project.voice.tsx.

Source

1// Who may do what on a project. Pure, so every caller (UI loaders now, MCP tools later) asks the
2// same question the same way.
3
4export type Role = "reader" | "editor" | "owner";
5
6/**
7 * `delete_media` removes a file from a site's storage (stage 3). It is the Owner's alone: a file can
8 * be in use on pages the site's reference check cannot see, such as another site linking it.
9 * `delete_content` removes a post from a site. Also the Owner's alone: unlike unpublish, it takes the
10 * post off the site's list altogether.
11 * `read_mentions` and `decide_mention` are the Owner's alone: Dustin ruled (2026-09-26) that the inbox belongs to
12 * Dustin alone (a mention is text a stranger sent, and the site reserves deleting one to its admin).
13 * They are two actions so the page can be opened to Editors and Readers by changing one line here.
14 */
15export type Action =
16  | "read"
17  | "comment"
18  | "edit"
19  | "publish"
20  | "send_external"
21  | "manage"
22  | "delete_media"
23  | "delete_content"
24  | "read_mentions"
25  | "decide_mention";
26
27const ALLOWED: Record<Role, ReadonlySet<Action>> = {
28  reader: new Set(["read", "comment"]),
29  editor: new Set(["read", "comment", "edit"]),
30  owner: new Set(["read", "comment", "edit", "publish", "send_external", "manage", "delete_media", "delete_content", "read_mentions", "decide_mention"]),
31};
32
33/** A person with no role on a project may do nothing on it, including read it. */
34export function can(role: Role | null, action: Action): boolean {
35  return role !== null && ALLOWED[role].has(action);
36}