// Copyright (c) StellaOps. Licensed under the BUSL-1.1.

namespace StellaOps.Integrations.WebService.Security;

/// <summary>
/// Named authorization policy constants for the Integration Catalog service.
/// Policies are registered via AddStellaOpsScopePolicy in Program.cs.
/// </summary>
internal static class IntegrationPolicies
{
    /// <summary>Policy for listing integrations, providers, health, and impact. Requires integration:read scope.</summary>
    public const string Read = "Integration.Read";

    /// <summary>Policy for creating, updating, and deleting integrations. Requires integration:write scope.</summary>
    public const string Write = "Integration.Write";

    /// <summary>Policy for executing integration operations (test connections, AI Code Guard runs). Requires integration:operate scope.</summary>
    public const string Operate = "Integration.Operate";
}