// Preview never promotes a user or changes server-side account permissions.
export function getEffectiveRole(role: string | null | undefined, preview: boolean) {
  return preview && role === "admin" ? "user" : role;
}

export function isAdminPage(pathname: string, includeSetup = true): boolean {
  let path = pathname.split(/[?#]/, 1)[0];
  try {
    path = decodeURIComponent(path);
  } catch {
    // Let the router handle malformed URLs; never infer a more privileged role.
  }
  path = path.replace(/\/{2,}/g, "/");
  const roots = includeSetup ? ["/admin", "/users", "/setup"] : ["/admin", "/users"];
  return roots.some((root) => path === root || path.startsWith(`${root}/`));
}