Audit Capabilities for Staff and DOC

/transactions (playerName)

/transactions export (playerName)

Code context — There's no audit/role surface in treasury-rest-api (no audit controller; VerifiedToken only distinguishes PERSONAL/BUSINESS/GOVERNMENT, not a staff/DOC role) and all endpoints are owner-scoped. Per Prestige's note, regular players should see only their own transactions while staff/auditors need broader read access.

Decision needed before estimating — land this as (a) an in-game permission tier on /transactions in Treasury, (b) a staff/DOC role + audit-read endpoints in treasury-rest-api, or (c) the economy-explorer audit surface (which already has audit() writes wired). Recommend deciding the surface first, then this splits into concrete sub-tasks.

State corrected Planned → Pending Release: implemented in treasury cf1b806 ("Add in-game /transactions audit tier for staff/DOC"), which is on develop only (2 commits ahead of main), so it's built but not yet released.

Delivered across both surfaces.

In-game (treasury @ cf1b806, develop): new treasury.transactions.audit permission tier — /transactions audit <player> [page] and /transactions auditaccount <accountId> [page] let staff/DOC view any player's/account's history (read-only personal-account resolution; each access logged at INFO).

Web: the explorer already let staff (admin/government) audit any account, gated by isStaff + audit-logged. To make "staff/DOC" manageable, we built a group + capability RBAC layer (the surface decision evolved into this — see the new RBAC initiative):

• economy-schema V10: explorer_group / explorer_group_capability / explorer_group_member.
• economy-explorer: getViewer() now yields viewer.capabilities (groups ∪ legacy roles); isStaff = hasCapability('staff.audit'); a /admin/groups admin tool to define groups, attach capabilities, set a LuckPerms source node, and manage members.
• treasury-api-plugin: an opt-in reconciliation cron that syncs LuckPerms group membership into explorer groups.

DOC-audit is now configuration: a "DOC" group granting staff.audit, fed from the doc LuckPerms group.

Committed on develop in all repos; tests green (treasury unit; explorer typecheck/lint/unit; plugin compile + diff test). Not yet pushed. Recommend splitting the RBAC/groups initiative into its own issue for tracking.