namespace StellaOps.Scanner.WebService.Security;

internal static class ScannerPolicies
{
    public const string ScansEnqueue = "scanner.api";
    public const string ScansRead = "scanner.scans.read";
    public const string ScansWrite = "scanner.scans.write";
    public const string ScansApprove = "scanner.scans.approve";
    public const string Reports = "scanner.reports";
    public const string RuntimeIngest = "scanner.runtime.ingest";
    public const string CallGraphIngest = "scanner.callgraph.ingest";

    public const string OfflineKitImport = "scanner.offline-kit.import";
    public const string OfflineKitStatusRead = "scanner.offline-kit.status.read";
    public const string OfflineKitManifestRead = "scanner.offline-kit.manifest.read";
    public const string OfflineKitValidate = "scanner.offline-kit.validate";

    // Triage policies
    public const string TriageRead = "scanner.triage.read";
    public const string TriageWrite = "scanner.triage.write";

    // Admin policies
    public const string Admin = "scanner.admin";

    // Sources policies
    public const string SourcesRead = "scanner.sources.read";
    public const string SourcesWrite = "scanner.sources.write";
    public const string SourcesAdmin = "scanner.sources.admin";

    // Secret detection settings policies
    public const string SecretSettingsRead = "scanner.secrets.settings.read";
    public const string SecretSettingsWrite = "scanner.secrets.settings.write";
    public const string SecretExceptionsRead = "scanner.secrets.exceptions.read";
    public const string SecretExceptionsWrite = "scanner.secrets.exceptions.write";
}