Initial commit: Pireon Admin — headless admin panel and public API

Laravel 13 + Filament 5 admin panel and REST API for a non-profit developer
collective, backed by the Pireon OAuth identity server. The public site is a
separate, server-rendered application consuming /api/public/v1.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

app/Http/Controllers/Api/V1/RoleController.php

@@ -0,0 +1,50 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Resources\RoleResource;
+use App\Support\Permissions;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Spatie\Permission\Models\Role;
+
+/**
+ * Read-only view of the local authorisation model, so clients can render
+ * permission-aware UI without hard-coding role names.
+ */
+class RoleController extends Controller
+{
+    public function index(): AnonymousResourceCollection
+    {
+        $this->authorize('viewAny', Role::class);
+
+        $roles = Role::query()
+            ->with('permissions')
+            ->withCount('users')
+            ->orderBy('name')
+            ->get();
+
+        return RoleResource::collection($roles);
+    }
+
+    public function show(Role $role): RoleResource
+    {
+        $this->authorize('view', $role);
+
+        return RoleResource::make($role->load('permissions')->loadCount('users'));
+    }
+
+    /**
+     * The full permission catalogue, grouped by resource — useful for building
+     * a role editor outside the panel.
+     */
+    public function catalogue(): JsonResponse
+    {
+        $this->authorize('viewAny', Role::class);
+
+        return response()->json(['data' => Permissions::grouped()]);
+    }
+}