"""PyAuthz testing utilities — pytest fixtures and helpers for authorization testing.

Makes authorization logic testable in CI with minimal setup.

Usage:
    from pyauthz.testing import AuthScenario, must_allow, must_deny

    def test_editors_can_edit_own_docs(rp):
        with AuthScenario(rp) as s:
            alice = s.subject("alice", roles=["editor"])
            doc = s.resource("doc-1", type="documents", owner_id="alice")
            s.assert_that(alice, "documents:write", doc, must_allow)
"""

from pyauthz.testing.assertions import must_allow, must_deny
from pyauthz.testing.scenario import AuthScenario

__all__ = [
    "AuthScenario",
    "must_allow",
    "must_deny",
]
