v3: added a roles/permissions system, added user management tab on user profile

api/model/db.ts

@@ -3,10 +3,12 @@ import { DatabaseSync, type SQLOutputValue } from "node:sqlite";
 import {
   type Comment,
   Dump,
+  isRole,
   type Notification,
   type NotificationType,
   type Playlist,
   type RichContent,
+  type Role,
   type User,
 } from "./interfaces.ts";
 import {
@@ -53,7 +55,7 @@ if (userCount.count === 0) {
   const hash = scryptSync("admin", salt, 64).toString("hex");
   const passwordHash = `${hash}.${salt}`;
   db.prepare(
-    `INSERT INTO users (id, username, password_hash, is_admin, created_at, email) VALUES (?, 'admin', ?, 1, datetime('now'), 'admin@localhost')`,
+    `INSERT INTO users (id, username, password_hash, role, created_at, email) VALUES (?, 'admin', ?, 'admin', datetime('now'), 'admin@localhost')`,
   ).run(crypto.randomUUID(), passwordHash);
   console.log("Created default admin user (username: admin, password: admin)");
 }
@@ -101,7 +103,7 @@ export interface UserRow {
   id: string;
   username: string;
   password_hash: string;
-  is_admin: number;
+  role: Role;
   created_at: string;
   updated_at: string | null;
   avatar_mime: string | null;
@@ -153,7 +155,7 @@ export function isUserRow(obj: unknown): obj is UserRow {
     "id" in obj && typeof obj.id === "string" &&
     "username" in obj && typeof obj.username === "string" &&
     "password_hash" in obj && typeof obj.password_hash === "string" &&
-    "is_admin" in obj && typeof obj.is_admin === "number" &&
+    "role" in obj && isRole(obj.role) &&
     "created_at" in obj && typeof obj.created_at === "string" &&
     "updated_at" in obj &&
     (typeof obj.updated_at === "string" || obj.updated_at === null) &&
@@ -221,7 +223,7 @@ export function userRowToApi(row: UserRow): User {
     id: row.id,
     username: row.username,
     passwordHash: row.password_hash,
-    isAdmin: Boolean(row.is_admin),
+    role: row.role,
     createdAt: new Date(row.created_at),
     updatedAt: row.updated_at ? new Date(row.updated_at) : undefined,
     avatarMime: row.avatar_mime ?? undefined,
@@ -238,7 +240,7 @@ export function userApiToRow(user: User): UserRow {
     id: user.id,
     username: user.username,
     password_hash: user.passwordHash,
-    is_admin: user.isAdmin ? 1 : 0,
+    role: user.role,
     created_at: user.createdAt.toISOString(),
     updated_at: user.updatedAt?.toISOString() ?? null,
     avatar_mime: user.avatarMime ?? null,