Skip to content
TypeWire

@tahanabavi/type-permission

v0.1.0

Framework-less, dependency-free capability permissions: one shared bit map, evaluated identically on client and server, with layered resolution, codecs, a lock file and contract-linkable requirements.

Roles, and the escalation guard

ts
const roles = P.defineRoles({
  viewer: ['chat.VIEW_CHANNEL'],
  moderator: ['chat.VIEW_CHANNEL', 'chat.MANAGE_MESSAGES'],
})

P.canGrant(actorPerms, roles.moderator) // false unless the actor holds every bit

canGrant closes the classic hole where a moderator mints an ADMINISTRATOR role and assigns it to themselves.