export type UserRole = 'ADMIN' | 'MANAGER' | 'OPERATOR' | 'FINANCE' | 'SOURCING' | 'LOGISTICS' | 'ANALYST';

export interface User {
  id: string;
  username: string;
  passwordHash: string; // bcrypt
  role: UserRole;
  tenantId: string;
  shopId?: string; // Optional: restrict to specific shop
  status: 'ACTIVE' | 'DISABLED';
  createdAt: Date;
  updatedAt: Date;
}

export interface AuthPayload {
  userId: string;
  username: string;
  role: UserRole;
  tenantId: string;
  shopId?: string;
}
