post:
  operationId: getCreatableStaffRoles
  summary: Get roles that a staff role can create
  description: |
    Permission: **ADMIN, OWNER**

    Returns the user roles that can be created by the staff user sent in the request.
    The server loads the staff role from `staff_id`, then maps that role per BA:
    - `OWNER` can create admin-portal roles: `OWNER`, `ADMIN`, `STAFF`.
    - `ADMIN` can create client users only: `CLIENT`.
  tags: [staffManagement]
  requestBody:
    required: true
    content:
      application/json:
        schema:
          $ref: "../../components.yaml#/components/schemas/GetCreatableStaffRolesRequest"
        example:
          staff_id: "6643f1a2b4c5d60012e34abc"
  responses:
    "200":
      description: Creatable roles — DTO returned directly
      content:
        application/json:
          schema:
            $ref: "../../components.yaml#/components/schemas/GetCreatableStaffRolesResponse"
          examples:
            owner:
              value:
                roles: ["OWNER", "ADMIN", "STAFF"]
            admin:
              value:
                roles: ["CLIENT"]
    "400":
      $ref: "../../components.yaml#/components/responses/Failure"