Function requireAdmin

src/server/web/admin.ts:17–24

* Admin dashboard routes. * * All routes under /admin require the requesting user to have isAdmin = true. * The caller (pty-server.ts) is responsible for applying the auth middleware * before mounting this router.

(req: Request, res: Response, next: () => void)

 */

function requireAdmin(req: Request, res: Response, next: () => void): void {
  const user = (req as AuthenticatedRequest).user;
  if (!user?.isAdmin) {
    res.status(403).json({ error: "Forbidden" });
    return;
  }
  next();
}

export function createAdminRouter(
  sessionManager: SessionManager,