feat(org): model grants, org memory, MCP gateway (v2 phases A1-3..5)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-14 15:51:44 +03:30
parent c93b25741e
commit dee2f72c46
39 changed files with 9060 additions and 95 deletions
@@ -0,0 +1,44 @@
+"""Audit action names introduced by the org-platform workstream.
+
+Kept in the identity domain instead of the shared ``app.domain.audit`` module so
+the parallel workstreams never edit the same file (``app.domain.audit`` is
+foundation-owned). Values are free-form strings — ``AuditAction`` accepts any.
+"""
+
+from __future__ import annotations
+
+# --- platform invites (owner creates a new manager account) ----------------
+PLATFORM_INVITE_CREATE = "platform_invite.create"
+PLATFORM_INVITE_REVOKE = "platform_invite.revoke"
+PLATFORM_INVITE_ACCEPT = "platform_invite.accept"
+
+# --- org sharing -----------------------------------------------------------
+ORG_TRANSFER_OWNERSHIP = "organization.transfer_ownership"
+ORG_LEAVE = "organization.leave"
+ORG_INVITE_REVOKE = "member.invite_revoke"
+
+# --- wizard ----------------------------------------------------------------
+ORG_CREATED_VIA_WIZARD = "organization.created_via_wizard"
+APP_PROFILE_UPDATE = "app_profile.update"
+APP_GIT_ROTATE = "app_git.rotate"
+APP_DEPLOY_TARGET_SET = "app_deploy_target.set"
+
+# --- owner model grants and org policy -------------------------------------
+MODEL_GRANT_SET = "model_grant.set"
+MODEL_GRANT_REVOKE = "model_grant.revoke"
+DEFAULT_MODEL_GRANT_SET = "default_model_grant.set"
+DEFAULT_MODEL_GRANT_REMOVE = "default_model_grant.remove"
+ORG_POLICY_UPDATE = "org_policy.update"
+
+# --- org memory ------------------------------------------------------------
+MEMORY_CREATE = "memory.create"
+MEMORY_UPDATE = "memory.update"
+MEMORY_PIN = "memory.pin"
+MEMORY_CONFIRM = "memory.confirm"
+MEMORY_DELETE = "memory.delete"
+
+# --- MCP gateway -----------------------------------------------------------
+MCP_TOKEN_CREATE = "mcp_token.create"
+MCP_TOKEN_REVOKE = "mcp_token.revoke"
+MCP_GLOBAL_SWITCH = "mcp.global_switch"
+MCP_ORG_SWITCH = "mcp.org_switch"