deepgram-enterprise-rbac

# Deepgram Enterprise RBAC ## Overview Role-based access control for enterprise Deepgram deployments. Maps five application roles to Deepgram API key scopes, implements scoped key provisioning via the Deepgram Management API, Express permission middleware, team management with auto-provisioned keys, and automated key rotation. ## Deepgram Scope Reference | Scope | Permission | Used By | |-------|-----------|---------| | `member` | Full access (all scopes) | Admin only | | `listen` | STT transcription | Developers, Services | | `speak` | TTS synthesis | Developers, Services | | `manage` | Project/key management | Admin | | `usage:read` | View usage metrics | Analysts, Auditors | | `keys:read` | List API keys | Auditors | | `keys:write` | Create/delete keys | Admin | ## Instructions ### Step 1: Define Roles and Scope Mapping ```typescript interface Role { name: string; deepgramScopes: string[]; keyExpiry: number; // Days description: string; } const ROLES: Record<string, Role> = { admin: { name: 'Admin', deepgramScopes: ['member'], keyExpiry: 90, description: 'Full access — project and key management', }, developer: { name: 'Developer', deepgramScopes: ['listen', 'speak'], keyExpiry: 90, description: 'STT and TTS — no management access', }, analyst: { name: 'Analyst', deepgramScopes: ['usage:read'], keyExpiry: 365, description: 'Read-only usage metrics', }, service: { name: 'Service Account'...