openclaw/dist/role-policy-B0ZcgXv3.js

Multi-channel AI gateway with extensible messaging integrations

import { o as isNodeRoleMethod } from "./method-scopes-K6J_UQGL.js";
//#region src/gateway/role-policy.ts
/** Parses the untrusted role claim from connect params into the closed role set. */
function parseGatewayRole(roleRaw) {
	if (roleRaw === "operator" || roleRaw === "node") return roleRaw;
	return null;
}
/** Operators using shared auth may connect before device identity is established. */
function roleCanSkipDeviceIdentity(role, sharedAuthOk) {
	return role === "operator" && sharedAuthOk;
}
/** Keeps node-originated notifications off the operator RPC surface, and vice versa. */
function isRoleAuthorizedForMethod(role, method) {
	if (isNodeRoleMethod(method)) return role === "node";
	return role === "operator";
}
//#endregion
export { parseGatewayRole as n, roleCanSkipDeviceIdentity as r, isRoleAuthorizedForMethod as t };