shoc-backend/SeaHaven.Services/Interfaces/ITeamPermissionPolicy.cs

using Data.SeaHavenIndustries.Enums;

namespace SeaHaven.Services.Interfaces
{
    /// <summary>
    /// Pure evaluator for team-members permissions. Applies explicit
    /// per-person overrides on top of role defaults; Admin has effective access
    /// to every canonical key regardless of stored values. Unknown or legacy
    /// roles receive no permissions.
    /// </summary>
    public interface ITeamPermissionPolicy
    {
        /// <summary>
        /// Resolves whether a user in <paramref name="roleName"/> holds
        /// <paramref name="permissionKey"/>. <paramref name="overrides"/> is the
        /// person's stored override set (missing key behaves as Unset).
        /// </summary>
        bool IsAllowed(
            string? roleName,
            string permissionKey,
            IReadOnlyDictionary<string, UserPermissionState>? overrides = null);
    }
}