Agent Surface Permissions

ELEVATED_AGENCY_ROLE_IDS = {1, 2, 8, 9, 11}

def agent_surface_allowed(user) -> bool:
    if user is None or not getattr(user, 'is_authenticated', False):
        return False
    if getattr(user, 'is_superuser', False):
        return True
    role_id = getattr(user, 'role_id', None)
    return role_id is not None and role_id in ELEVATED_AGENCY_ROLE_IDS

const ELEVATED_AGENCY_ROLE_IDS = [1, 2, 8, 9, 11];

canActivate(): boolean {
    const userInfo = this.authenticationService.currentUserInfo;
    const user = userInfo?.user;
    if (!user) {
        this.router.navigate(['/login']);
        return false;
    }
    const allowed = !!user.is_superuser
        || (typeof user.role_id === 'number'
            && ELEVATED_AGENCY_ROLE_IDS.includes(user.role_id));
    if (!allowed) {
        this.router.navigate(['/']);
        return false;
    }
    return true;
}

if (['automations', 'operations', 'automations-history',
     'agent-builder', 'skills', 'knowledge-bases'].includes(item.name)) {
    const u = this.authService.currentUserInfo?.user;
    if (!u) return false;
    if (u.is_superuser) return true;
    return typeof u.role_id === 'number'
        && [1, 2, 8, 9, 11].includes(u.role_id);
}