Initial commit of Balout Pastry admin dashboards.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/lib/auth.ts

@@ -0,0 +1,67 @@
+import type { UserRole } from '../data/users'
+
+const AUTH_KEY = 'balout.admin.auth'
+
+export type AuthUser = {
+  id: string
+  title: string
+  firstName: string
+  lastName: string
+  cellNumber: string
+  role: UserRole
+  name: string
+}
+
+export type AuthSession = {
+  accessToken: string
+  refreshToken: string
+  user: AuthUser
+}
+
+function isSession(value: unknown): value is AuthSession {
+  if (!value || typeof value !== 'object') return false
+  const session = value as Partial<AuthSession>
+  return (
+    typeof session.accessToken === 'string' &&
+    typeof session.refreshToken === 'string' &&
+    !!session.user &&
+    typeof session.user === 'object' &&
+    typeof session.user.name === 'string' &&
+    typeof session.user.id === 'string'
+  )
+}
+
+export function getSession(): AuthSession | null {
+  try {
+    const raw = localStorage.getItem(AUTH_KEY)
+    if (!raw) return null
+    const parsed = JSON.parse(raw) as unknown
+    return isSession(parsed) ? parsed : null
+  } catch {
+    return null
+  }
+}
+
+export function setSession(session: AuthSession) {
+  localStorage.setItem(AUTH_KEY, JSON.stringify(session))
+}
+
+export function clearSession() {
+  localStorage.removeItem(AUTH_KEY)
+}
+
+export function isAuthenticated(): boolean {
+  return getSession() !== null
+}
+
+export function getAccessToken(): string | null {
+  return getSession()?.accessToken ?? null
+}
+
+export function getRefreshToken(): string | null {
+  return getSession()?.refreshToken ?? null
+}
+
+export function getAuthUser(): AuthUser | null {
+  return getSession()?.user ?? null
+}