/** Per docs/backend/TRACK-S-SECURITY-RBAC-CONTRACT.md §1-2. */
export type PlatformRole = 'PLATFORM_OWNER' | 'TECH_ADMIN' | 'SECURITY_ADMIN' | 'DOMAIN_MANAGER' | 'VIEWER';
export type MarketplaceRole = 'MARKETPLACE_ADMIN' | 'CONTENT_MANAGER' | 'CATALOG_MANAGER' | 'ORDER_MANAGER' | 'FINANCE_MANAGER' | 'SUPPORT_MANAGER' | 'VIEWER';

export interface SessionPermissions {
  role: PlatformRole | MarketplaceRole;
  scopes: string[];
  marketplaceIds: string[];
}

export interface AuditEvent {
  id: string;
  actor: string;
  action: string;
  entityType: string;
  entityId: string;
  reason?: string;
  occurredAt: string;
}
