export enum RoleType {
  PLATFORM_SUPER_ADMIN = 'platform_super_admin',
  PLATFORM_ADMIN = 'platform_admin',
  ADMIN = 'admin',
  OPERATOR = 'operator',
  VIEWER = 'viewer',
}

export const DEFAULT_ROLE_PERMISSIONS: Record<RoleType, string[]> = {
  [RoleType.PLATFORM_SUPER_ADMIN]: [], // Highest platform level: all platform_admin ops + destructive ops
  [RoleType.PLATFORM_ADMIN]: [], // Daily platform ops: view/edit tenants, app versions, billing plans
  [RoleType.ADMIN]: Object.values({} as any), // All permissions
  [RoleType.OPERATOR]: [
    'dashboard:view',
    'agent:execute',
    'task:create',
    'task:view',
    'server:view',
    'server:ssh',
    'standing_order:view',
  ],
  [RoleType.VIEWER]: [
    'dashboard:view',
    'task:view',
    'server:view',
    'standing_order:view',
  ],
};
