v3: added a roles/permissions system, added user management tab on user profile

src/utils/permissions.ts

@@ -0,0 +1,24 @@
+import type { PublicUser, Role } from "../model.ts";
+
+// Mirror of api/lib/permissions.ts. Keep the two in sync.
+export type Permission = "dump:moderate" | "comment:moderate" | "user:manage";
+
+const ALL_PERMISSIONS: readonly Permission[] = [
+  "dump:moderate",
+  "comment:moderate",
+  "user:manage",
+];
+
+const ROLE_PERMISSIONS: Record<Role, readonly Permission[]> = {
+  admin: ALL_PERMISSIONS,
+  moderator: ["dump:moderate", "comment:moderate"],
+  user: [],
+};
+
+export function can(
+  user: Pick<PublicUser, "role"> | null | undefined,
+  permission: Permission,
+): boolean {
+  if (!user) return false;
+  return ROLE_PERMISSIONS[user.role].includes(permission);
+}