feat: build vehicle data platform and production pipeline

vehicle-data-platform/apps/web/src/v2/auth/session.test.ts

@@ -0,0 +1,22 @@
+import { afterEach, expect, test } from 'vitest';
+import { canAdminister, canOperate, clearAccessToken, getAccessToken, setAccessToken } from './session';
+
+afterEach(() => {
+  window.sessionStorage.clear();
+  window.localStorage.clear();
+});
+
+test('access token is scoped to the browser session and can be cleared', () => {
+  setAccessToken('  secret-token  ');
+  expect(getAccessToken()).toBe('secret-token');
+  expect(window.localStorage.length).toBe(0);
+  clearAccessToken();
+  expect(getAccessToken()).toBe('');
+});
+
+test('role helpers follow the server permission hierarchy', () => {
+  expect(canOperate({ name: 'v', role: 'viewer', authMode: 'enforce' })).toBe(false);
+  expect(canOperate({ name: 'o', role: 'operator', authMode: 'enforce' })).toBe(true);
+  expect(canAdminister({ name: 'o', role: 'operator', authMode: 'enforce' })).toBe(false);
+  expect(canAdminister({ name: 'a', role: 'admin', authMode: 'enforce' })).toBe(true);
+});