Name of the top-tier system role. Treated as a glass-break super-user:
auth checks short-circuit to "allowed" when the user holds this role,
regardless of the DB-side permission set. Cannot be edited via the
permission matrix (the seed/migration is_system=true flag is the
server-side enforcement; the matrix UI hides cells for system roles).
Lives in its own module so AdminDashboardUserService can read it
without importing AdminDashboardRoleService — the two services
reference each other for types and helpers, and routing a runtime
constant through either of them creates a circular module-evaluation
order that Turbopack resolves non-deterministically.
Name of the top-tier system role. Treated as a glass-break super-user: auth checks short-circuit to "allowed" when the user holds this role, regardless of the DB-side permission set. Cannot be edited via the permission matrix (the seed/migration
is_system=trueflag is the server-side enforcement; the matrix UI hides cells for system roles).Lives in its own module so
AdminDashboardUserServicecan read it without importingAdminDashboardRoleService— the two services reference each other for types and helpers, and routing a runtime constant through either of them creates a circular module-evaluation order that Turbopack resolves non-deterministically.