v3: added playlist moderation permission

api/lib/permissions.ts

@@ -2,11 +2,16 @@ import { type AuthPayload, type Role } from "../model/interfaces.ts";
 
 // Named capabilities checked at enforcement points. Extend this union as new
 // gated capabilities are added (e.g. "invite:manage").
-export type Permission = "dump:moderate" | "comment:moderate" | "user:manage";
+export type Permission =
+  | "dump:moderate"
+  | "comment:moderate"
+  | "playlist:moderate"
+  | "user:manage";
 
 const ALL_PERMISSIONS: readonly Permission[] = [
   "dump:moderate",
   "comment:moderate",
+  "playlist:moderate",
   "user:manage",
 ];
 
@@ -14,7 +19,7 @@ const ALL_PERMISSIONS: readonly Permission[] = [
 // and future); `moderator` gets the content-moderation permissions only.
 export const ROLE_PERMISSIONS: Record<Role, readonly Permission[]> = {
   admin: ALL_PERMISSIONS,
-  moderator: ["dump:moderate", "comment:moderate"],
+  moderator: ["dump:moderate", "comment:moderate", "playlist:moderate"],
   user: [],
 };