<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Module-based permission definitions
    |--------------------------------------------------------------------------
    |
    | Permissions follow MODULE_ACTION naming (e.g. STAFF_VIEW).
    | Modules register here; future modules append via PermissionRegistry.
    |
    */

    'guard' => 'web',

    'modules' => [
        'Platform' => [
            'STAFF_VIEW' => 'View staff',
            'STAFF_CREATE' => 'Create staff',
            'STAFF_UPDATE' => 'Update staff',
            'STAFF_DELETE' => 'Delete staff',
            'ROLES_VIEW' => 'View roles',
            'ROLES_CREATE' => 'Create roles',
            'ROLES_UPDATE' => 'Update roles',
            'ROLES_DELETE' => 'Delete roles',
            'SETTINGS_VIEW' => 'View settings',
            'SETTINGS_UPDATE' => 'Update settings',
            'AUDIT_VIEW' => 'View audit logs',
        ],
        'Modules' => [
            'MODULES_VIEW' => 'View installed modules',
            'MODULES_INSTALL' => 'Install modules',
            'MODULES_UNINSTALL' => 'Uninstall modules',
        ],
        'Marketplace' => [
            'MARKETPLACE_VIEW' => 'View marketplace',
            'MARKETPLACE_BROWSE' => 'Browse marketplace catalog',
        ],
        'Finance' => [
            'FINANCE_DASHBOARD_VIEW' => 'View finance dashboard',
            'FINANCE_TRANSACTIONS_VIEW' => 'View transactions',
            'FINANCE_TRANSACTIONS_CREATE' => 'Create transactions',
            'FINANCE_TRANSACTIONS_UPDATE' => 'Edit transactions',
            'FINANCE_TRANSACTIONS_DELETE' => 'Delete transactions',
            'FINANCE_CATEGORIES_MANAGE' => 'Manage income and expense categories',
            'FINANCE_REPORTS_VIEW' => 'View finance reports',
            'FINANCE_EXPORT' => 'Export financial data',
        ],
    ],

    /*
    | Matrix actions shown in the roles UI (maps to permission suffixes).
    */
    'matrix_actions' => [
        'view' => 'VIEW',
        'create' => 'CREATE',
        'edit' => 'UPDATE',
        'delete' => 'DELETE',
    ],

    'super_admin_role' => 'Super Admin',

    'customer_role' => 'Customer',

    /*
    | Roles that receive all permissions when a module is installed from the marketplace.
    */
    'default_module_install_roles' => [
        'Super Admin',
    ],

];
