"""Audit action names introduced by the org-platform workstream.

Kept in the identity domain instead of the shared ``app.domain.audit`` module so
the parallel workstreams never edit the same file (``app.domain.audit`` is
foundation-owned). Values are free-form strings — ``AuditAction`` accepts any.
"""

from __future__ import annotations

# --- platform invites (owner creates a new manager account) ----------------
PLATFORM_INVITE_CREATE = "platform_invite.create"
PLATFORM_INVITE_REVOKE = "platform_invite.revoke"
PLATFORM_INVITE_ACCEPT = "platform_invite.accept"

# --- org sharing -----------------------------------------------------------
ORG_TRANSFER_OWNERSHIP = "organization.transfer_ownership"
ORG_LEAVE = "organization.leave"
ORG_INVITE_REVOKE = "member.invite_revoke"

# --- wizard ----------------------------------------------------------------
ORG_CREATED_VIA_WIZARD = "organization.created_via_wizard"
APP_PROFILE_UPDATE = "app_profile.update"
APP_GIT_ROTATE = "app_git.rotate"
APP_DEPLOY_TARGET_SET = "app_deploy_target.set"

# --- owner model grants and org policy -------------------------------------
MODEL_GRANT_SET = "model_grant.set"
MODEL_GRANT_REVOKE = "model_grant.revoke"
DEFAULT_MODEL_GRANT_SET = "default_model_grant.set"
DEFAULT_MODEL_GRANT_REMOVE = "default_model_grant.remove"
ORG_POLICY_UPDATE = "org_policy.update"

# --- org memory ------------------------------------------------------------
MEMORY_CREATE = "memory.create"
MEMORY_UPDATE = "memory.update"
MEMORY_PIN = "memory.pin"
MEMORY_CONFIRM = "memory.confirm"
MEMORY_DELETE = "memory.delete"

# --- MCP gateway -----------------------------------------------------------
MCP_TOKEN_CREATE = "mcp_token.create"
MCP_TOKEN_REVOKE = "mcp_token.revoke"
MCP_GLOBAL_SWITCH = "mcp.global_switch"
MCP_ORG_SWITCH = "mcp.org_switch"