Kairo-Jinkendo/backend/rights_registrations/operating_model_ops.py

"""Operating model capabilities (AP0.8)."""

from __future__ import annotations

from rights_registry import CapabilityRegistration, register_capability

_MEMBER_READ = (
    ("portal", "admin"),
    ("portal", "user"),
    ("tenant", "owner"),
    ("tenant", "admin"),
    ("tenant", "member"),
)

_MEMBER_MANAGE = (
    ("portal", "admin"),
    ("tenant", "owner"),
    ("tenant", "admin"),
    ("tenant", "member"),
)

register_capability(
    CapabilityRegistration(
        key="kairo.attention.read",
        module="attention",
        description="Attention- und NextAction-Sichten lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.blocker.read",
        module="blocker",
        description="Blocker im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.blocker.manage",
        module="blocker",
        description="Blocker anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.backlog.read",
        module="backlog",
        description="Backlog-Items im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.backlog.manage",
        module="backlog",
        description="Backlog-Items anlegen, bearbeiten und konvertieren",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.milestone.read",
        module="milestone",
        description="Meilensteine im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.milestone.manage",
        module="milestone",
        description="Meilensteine anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.evidence.read",
        module="evidence",
        description="Evidence im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.evidence.manage",
        module="evidence",
        description="Evidence anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.decision.read",
        module="decision",
        description="Entscheidungen im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.decision.manage",
        module="decision",
        description="Entscheidungen anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.review.read",
        module="review",
        description="Reviews im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.review.manage",
        module="review",
        description="Reviews anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.recurring.read",
        module="recurring",
        description="Recurring-Elemente im aktiven Tenant lesen",
        default_grants=_MEMBER_READ,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.recurring.manage",
        module="recurring",
        description="Recurring-Elemente anlegen und bearbeiten",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.roadmap.reopen",
        module="roadmap",
        description="Erreichte Plan-Elemente wieder öffnen (Reopen)",
        default_grants=_MEMBER_MANAGE,
    )
)

register_capability(
    CapabilityRegistration(
        key="kairo.roadmap.reopen.emergency",
        module="roadmap",
        description="Plan-Reopen als Portal-Admin (Notfall)",
        default_grants=(("portal", "admin"),),
    )
)