feat(portal): add SSR operations and exclusive groups

packages/auth/src/index.ts

@@ -111,8 +111,8 @@ export function hashToken(token: string) {
   return createHash("sha256").update(token).digest("hex");
 }
 
-export function enabledAccessGroup<T extends { accessEnabled: boolean }>(assignedGroups: T[]) {
-  return assignedGroups.find((group) => group.accessEnabled) ?? null;
+export function resolveEffectiveGroup<T>(explicitGroup: T | null, defaultGroup: T | null) {
+  return explicitGroup ?? defaultGroup;
 }
 
 export function verifyHashedToken(providedToken: string, expectedHash: string) {