"""Workspace read capabilities (AP0.7)."""

from __future__ import annotations

from rights_registry import CapabilityRegistration, register_capability

register_capability(
    CapabilityRegistration(
        key="kairo.actor.read",
        module="tenant",
        description="Actors im aktiven Tenant lesen (Directory)",
        default_grants=(
            ("portal", "admin"),
            ("portal", "user"),
            ("tenant", "owner"),
            ("tenant", "admin"),
            ("tenant", "member"),
        ),
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.workspace.read",
        module="workspace",
        description="Workspace-Übersichten und aggregierte Read-Models lesen",
        default_grants=(
            ("portal", "admin"),
            ("portal", "user"),
            ("tenant", "owner"),
            ("tenant", "admin"),
            ("tenant", "member"),
        ),
    )
)