feat: add role negation and negate some routes to admins

app/utils/roles.ts

@@ -5,6 +5,8 @@ export const ROLES = {
 } as const
 
 export type Role = keyof typeof ROLES
+export type NegatedRole = `!${Role}`
+export type MetaRoleRequirement = Role | NegatedRole | Array<Role | NegatedRole>
 
 export const ROLE_LEVELS: Record<string, number> = {
   [ROLES.CITIZEN]: 1,
@@ -17,12 +19,12 @@ export function normalizeRole(role?: string | null): string {
 }
 
 export function isRole(userRole: string | undefined | null, targetRole: string): boolean {
-  return normalizeRole(userRole) === targetRole.toUpperCase()
+  return normalizeRole(userRole) === normalizeRole(targetRole)
 }
 
 export function hasMinimumRole(userRole: string | undefined | null, requiredRole: string): boolean {
   const userLvl = ROLE_LEVELS[normalizeRole(userRole)] || 0
-  const reqLvl = ROLE_LEVELS[requiredRole.toUpperCase()] || 0
+  const reqLvl = ROLE_LEVELS[normalizeRole(requiredRole)] || 0
   return userLvl >= reqLvl
 }
 
@@ -41,3 +43,32 @@ export function isCitizen(userRole?: string | null): boolean {
 export function canAccess(userRole: string | undefined | null, requiredRole: string): boolean {
   return hasMinimumRole(userRole, requiredRole)
 }
+
+export function checkRoleAccess(userRole: string | undefined | null, requirement: MetaRoleRequirement | undefined): boolean {
+  if (!requirement) return true
+
+  const normalizedUserRole = normalizeRole(userRole)
+  if (!normalizedUserRole) return false
+
+  const requirements = Array.isArray(requirement) ? requirement : [requirement]
+
+  for (const req of requirements) {
+    const isNegated = req.startsWith('!')
+
+    const rawTarget = isNegated ? req.substring(1) : req
+    const targetRole = normalizeRole(rawTarget)
+
+    if (isNegated) {
+      console.log("negated", normalizedUserRole, targetRole)
+      if (normalizedUserRole === targetRole) {
+        return false
+      }
+    } else {
+      if (!hasMinimumRole(normalizedUserRole, targetRole)) {
+        return false
+      }
+    }
+  }
+
+  return true
+}