from pydantic import BaseModel


class PermissionGrantRequest(BaseModel):
    authentik_sub: str
    email: str | None = None
    display_name: str | None = None
    scope_type: str
    scope_id: str
    module: str
    action: str


class PermissionRevokeRequest(BaseModel):
    authentik_sub: str
    scope_type: str
    scope_id: str
    module: str
    action: str


class PermissionItem(BaseModel):
    scope_type: str
    scope_id: str
    module: str
    action: str


class PermissionSnapshotResponse(BaseModel):
    authentik_sub: str
    permissions: list[PermissionItem]