# RBAC — websocket feature permissions
#
# Covers: /api/ws endpoint for real-time updates (RBAC hot-reload, JWT lifecycle).
# Enable when using WebSocket support.

{
  admin    = [{ resource = "endpoint", pattern = "/api/ws", outcome = "allow", methods = ["GET"], effects = [] }],
  user     = [{ resource = "endpoint", pattern = "/api/ws", outcome = "allow", methods = ["GET"], effects = [] }],
  guest    = [{ resource = "endpoint", pattern = "/api/ws", outcome = "allow", methods = ["GET"], effects = [] }],
}