"""Platform-level Kairo capabilities."""

from __future__ import annotations

from rights_registry import CapabilityRegistration, register_capability

register_capability(
    CapabilityRegistration(
        key="kairo.admin.access",
        module="platform",
        description="Zugriff auf Portal-Administration und Admin-Endpunkte",
        default_grants=(("portal", "admin"),),
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.context.read",
        module="platform",
        description="TenantContext und Session-Kontext lesen",
        default_grants=(
            ("portal", "admin"),
            ("portal", "user"),
            ("tenant", "owner"),
            ("tenant", "admin"),
            ("tenant", "member"),
        ),
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.entitlements.read",
        module="platform",
        description="Entitlements-Snapshot lesen",
        default_grants=(
            ("portal", "admin"),
            ("portal", "user"),
            ("tenant", "owner"),
            ("tenant", "admin"),
            ("tenant", "member"),
        ),
    )
)