use serde::{Deserialize, Serialize};

/// Workspace-level RBAC role (spec §14: User.role Owner|Member).
#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash, Serialize, Deserialize)]
#[serde(rename_all = "lowercase")]
pub enum Role {
    Owner,
    Member,
}

impl Role {
    /// Owners administer provisioning, billing, and access policy (spec §1).
    pub fn is_owner(&self) -> bool {
        matches!(self, Role::Owner)
    }
}