<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Member roles
    |--------------------------------------------------------------------------
    |
    | Accounts whose roles fall entirely inside this list are members, not
    | staff: parents and players using the portal. Branch enforcement stays off
    | for them, because their data is scoped by membership instead — a guardian
    | must see their own child's invoices and attendance wherever that child
    | trains, and a branch filter would hide a family's own records from them.
    |
    */

    'member_roles' => ['parent', 'player'],

    /*
    |--------------------------------------------------------------------------
    | Routes that are never branch-scoped
    |--------------------------------------------------------------------------
    |
    | Matched with Str::is() against the route name. Everything here is either
    | cross-academy maintenance, member-facing, or public — surfaces with no
    | back-office branch to enforce. Operational staff routes are absent on
    | purpose: they are exactly what the scope exists for.
    |
    | Note this is a different list from config('branch_lock.unlocked'), which
    | answers a different question — which pages a user in "all branches" mode
    | may open. A page can be locked and unscoped (the portal) or unlocked and
    | scoped (reports, which must show the selected branch only).
    |
    */

    'unscoped_routes' => [
        // Member portal and its legacy redirect surface.
        'portal.*',
        'parent.*',

        // Public: the academy website, signed document links, the login screen.
        'home',
        'login',
        'logout',
        'health',
        'website.*',
        'public.*',
        'self-register.*',

        // Cross-academy maintenance. The super-admin panel lists every tenant;
        // narrowing it to one branch of one academy would empty it.
        'admin.panel',
    ],

];
