@camunda/ccma-shared-types 0.0.1

package/dist/permissions/console.permissions.js

@@ -0,0 +1,369 @@
+var ConsolePermissions;
+((ConsolePermissions2) => {
+  ConsolePermissions2.MULTICLUSTER_ADMIN = "cmca";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = "cmgda";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_SEE = "cmgas";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN = "cmga";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = "cmgap";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = "cmgam";
+  ConsolePermissions2.CHANNELS_AND_GENERATIONS_MIGRATE = "cmgm";
+  ConsolePermissions2.ALL_CHANNELS_AND_GENERATIONS = [
+    ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_SEE,
+    ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN,
+    ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE
+  ];
+  ConsolePermissions2.CLUSTERS_READALLCLUSTERINFO = "ccrai";
+  ConsolePermissions2.CLUSTERS_DELETE_CLUSTER = "ccda";
+  ConsolePermissions2.CLUSTERS_CAN_MOVE_TO_OTHER_ORG = "ccmoo";
+  ConsolePermissions2.CLUSTERS_CAN_SEND_TO_SLEEP = "ccsts";
+  ConsolePermissions2.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = "ccucp";
+  ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION = "ccug";
+  ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION_YOLO = "ccugy";
+  ConsolePermissions2.CLUSTER_PLAN_SEE_ALL = "ccpa";
+  ConsolePermissions2.CLUSTER_PLAN_CREATE = "ccpc";
+  ConsolePermissions2.CLUSTER_PLAN_DELETE = "ccpd";
+  ConsolePermissions2.CLUSTER_PLAN_TYPE_CREATE = "cptc";
+  ConsolePermissions2.CLUSTER_PLAN_TYPE_MODIFY = "cptm";
+  ConsolePermissions2.CLUSTER_PLAN_TYPE_DELETE = "cptd";
+  ConsolePermissions2.CLUSTER_PLAN_TYPE_FORCE_DELETE = "cptfd";
+  ConsolePermissions2.CLUSTER_PLAN_MIGRATE = "ccpm";
+  ConsolePermissions2.CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = "ccpda";
+  ConsolePermissions2.CLUSTER_PLAN_CAN_MODIFY = "ccpmo";
+  ConsolePermissions2.M2M_UPDATE_CRD = "cmuc";
+  ConsolePermissions2.M2M_SIGNUP = "cms";
+  ConsolePermissions2.M2M_TRIGGER_ALERT = "cmta";
+  ConsolePermissions2.M2M_DELETE_ORG_CLUSTERS = "cmdoc";
+  ConsolePermissions2.M2M_UPDATE_ORG_CLUSTERS = "cmuoc";
+  ConsolePermissions2.M2M_ADD_CLUSTER_USAGE_METRICS = "cmacm";
+  ConsolePermissions2.M2M_SEND_SSE_EVENT = "cmsse";
+  ConsolePermissions2.M2M_EXTERNAL_INTERNAL_CLIENT = "cmeic";
+  ConsolePermissions2.M2M_FETCH_MIGRATION_DATA = "cmfmd";
+  ConsolePermissions2.CLUSTER_CREATE_ON_BEHALF = "cccob";
+  ConsolePermissions2.FEATURE_NEW_HOME = "cfnh";
+  ConsolePermissions2.FEATURE_TEMPLATE_PICKER = "cftp";
+  ConsolePermissions2.USER_SETTINGS = "cus";
+  ConsolePermissions2.CLUSTERS_CAN_OVERRIDE_ENV_VARS = "ccoev";
+  ConsolePermissions2.DEBUG = "cdbg";
+  ConsolePermissions2.GOD_TRIGGER_CRONS = "gtc";
+  ConsolePermissions2.APICLIENT_READ = "capr";
+  ConsolePermissions2.APICLIENT_DELETE = "capd";
+  function createEmptyFeatures() {
+    return {
+      apiClient: {
+        read: false,
+        delete: false
+      },
+      multiCluster: { admin: false },
+      multiGen: {
+        admin: {
+          migrate: false,
+          modify: false,
+          patchExistingChannel: false,
+          see: false,
+          deleteAllClustersOfGeneration: false
+        }
+      },
+      clusters: {
+        canReadAllClusterInfo: false,
+        canDeleteAllClusters: false,
+        canMoveToOtherOrg: false,
+        createOnBehalf: false,
+        canSendToSleep: false,
+        canUpdateClusterPlanType: false,
+        canOverrideEnvVars: false,
+        canUpgradeGeneration: false,
+        canUpgradeGenerationYolo: false
+      },
+      clusterPlan: {
+        seeAll: false,
+        create: false,
+        delete: false,
+        type: {
+          create: false,
+          modify: false,
+          delete: false,
+          forceDelete: false
+        },
+        migrate: false,
+        deleteAllClustersOfPlan: false,
+        modify: false
+      },
+      features: {
+        newHome: false,
+        templatePicker: false,
+        userSettings: false,
+        debug: false
+      },
+      m2m: {
+        updateCrd: false,
+        signup: false,
+        triggerAlert: false,
+        deleteOrgClusters: false,
+        updateOrgClusters: false,
+        addUsageMetrics: false,
+        sendSseEvent: false,
+        external: {
+          internalClient: false
+        },
+        fetchMigrationData: false
+      }
+    };
+  }
+  ConsolePermissions2.createEmptyFeatures = createEmptyFeatures;
+  ConsolePermissions2.PermissionsAtAuth0 = [
+    {
+      value: ConsolePermissions2.MULTICLUSTER_ADMIN,
+      description: "can create and delete k8s clusters",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_SEE,
+      description: "can go to the admin section for MultiGen, but no touch!",
+      initialRoles: [
+        "console:admin",
+        "console:admin:readonly",
+        "support:agent",
+        "supersupport:agent",
+        "accounts:clusterUpdates",
+        "console:C8ReleaseManager",
+        "console:C8UpdateEnforcer"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN,
+      description: "can create channels, generations and combine them",
+      initialRoles: ["console:admin", "console:C8ReleaseManager"]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,
+      description: "can modify existing channels and combine them",
+      initialRoles: [
+        "console:admin",
+        "accounts:clusterUpdates",
+        "console:C8ReleaseManager"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,
+      description: "can migrate clusters of generations to supported other generations",
+      initialRoles: ["console:admin", "console:C8UpdateEnforcer"]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,
+      description: "can delete all clusters of a generation",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CHANNELS_AND_GENERATIONS_MIGRATE,
+      description: "can migrate owned clusters of generations to supported other generations",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_READALLCLUSTERINFO,
+      description: "can read clusterInfo for all clusters",
+      initialRoles: [
+        "accounts:read",
+        "accounts:onboard",
+        "accounts:orgCreator",
+        "accounts:admin",
+        "accounts:editSalesPlans",
+        "console:admin:readonly",
+        "support:agent",
+        "supersupport:agent",
+        "console:admin",
+        "accounts:trialExtender",
+        "accounts:enterpriseAdmin"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_DELETE_CLUSTER,
+      description: "can delete clusters in all orgs",
+      initialRoles: ["accounts:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_MOVE_TO_OTHER_ORG,
+      description: "can move a cluster to another org the user is part of",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_SEE_ALL,
+      description: "can see all ClusterPlans",
+      initialRoles: [
+        "console:admin",
+        "accounts:read",
+        "accounts:orgCreator",
+        "accounts:admin",
+        "console:admin:readonly",
+        "support:agent",
+        "supersupport:agent",
+        "accounts:onboard",
+        "accounts:editSalesPlans",
+        "accounts:trialExtender",
+        "accounts:enterpriseAdmin"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_CREATE,
+      description: "can create ClusterPlans",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_DELETE,
+      description: "can delete ClusterPlans",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_TYPE_CREATE,
+      description: "can create ClusterPlanTypes",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_TYPE_DELETE,
+      description: "can delete ClusterPlanTypes",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_TYPE_FORCE_DELETE,
+      description: "can delete ClusterPlanTypes",
+      initialRoles: ["console:god"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_TYPE_MODIFY,
+      description: "can modify ClusterPlanTypes",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_MIGRATE,
+      description: "can migrate Clusters from one plan to another",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,
+      description: "can delete all clusters of a plan",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_CREATE_ON_BEHALF,
+      description: "enables accounts to create clusters on signup (not a user permission)",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_SIGNUP,
+      description: "allows to signal to Console new user signups",
+      initialRoles: []
+    },
+    { value: ConsolePermissions2.M2M_UPDATE_CRD, description: "may update crds", initialRoles: [] },
+    {
+      value: ConsolePermissions2.M2M_TRIGGER_ALERT,
+      description: "allows Infra and Operate to trigger alerts",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_DELETE_ORG_CLUSTERS,
+      description: "allows trigger console to delete all clusters of an Organization",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_UPDATE_ORG_CLUSTERS,
+      description: "allows to update clusters of an Organization",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_ADD_CLUSTER_USAGE_METRICS,
+      description: "allows to trigger update of value metrics",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_SEND_SSE_EVENT,
+      description: "allows to trigger SSE events",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_EXTERNAL_INTERNAL_CLIENT,
+      description: "allows to fetch internal clients",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.M2M_FETCH_MIGRATION_DATA,
+      description: "allows to fetch migration data",
+      initialRoles: []
+    },
+    {
+      value: ConsolePermissions2.FEATURE_NEW_HOME,
+      description: "allows users to see new home",
+      initialRoles: ["console:admin"]
+    },
+    {
+      value: ConsolePermissions2.USER_SETTINGS,
+      description: "allows users to see user settings",
+      initialRoles: ["console:admin", "betatester:true"]
+    },
+    {
+      value: ConsolePermissions2.FEATURE_TEMPLATE_PICKER,
+      description: "allows users to see template picker",
+      initialRoles: ["console:admin", "betatester:true"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_SEND_TO_SLEEP,
+      description: "may send a cluster to sleep and wake up",
+      initialRoles: [
+        "console:admin",
+        "accounts:admin",
+        "console:operationsEngineer"
+      ]
+    },
+    {
+      value: ConsolePermissions2.DEBUG,
+      description: "can see additional debugging tools",
+      initialRoles: ["console:admin:readonly", "console:admin"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_OVERRIDE_ENV_VARS,
+      description: "can set Env Vars on cluster level that override all ClusterPlan Env Vars",
+      initialRoles: ["console:admin", "console:operationsEngineer"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,
+      description: "can update clusterplantype of a running cluster",
+      initialRoles: [
+        "console:admin",
+        "accounts:onboard",
+        "console:operationsEngineer",
+        "accounts:enterpriseAdmin"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION,
+      description: "can update generation of a running cluster",
+      initialRoles: [
+        "console:admin",
+        "accounts:clusterUpdates",
+        "console:C8ReleaseManager"
+      ]
+    },
+    {
+      value: ConsolePermissions2.CLUSTERS_CAN_UPDATE_GENERATION_YOLO,
+      description: "can update generation of a running cluster even if the generation is not reachable",
+      initialRoles: ["console:god"]
+    },
+    {
+      value: ConsolePermissions2.CLUSTER_PLAN_CAN_MODIFY,
+      description: "can trigger modifications of a clusterplan",
+      initialRoles: ["console:admin", "console:clusterPlanManager"]
+    },
+    {
+      value: ConsolePermissions2.APICLIENT_READ,
+      description: "can read API Clients Names of Organizations",
+      initialRoles: ["accounts:read", "accounts:orgCreator"]
+    },
+    {
+      value: ConsolePermissions2.APICLIENT_DELETE,
+      description: "can read API Clients Names of Organizations",
+      initialRoles: ["accounts:god"]
+    }
+  ];
+})(ConsolePermissions || (ConsolePermissions = {}));
+export {
+  ConsolePermissions
+};
+//# sourceMappingURL=console.permissions.js.map

package/dist/permissions/console.permissions.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/permissions/console.permissions.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace ConsolePermissions {\n  export const MULTICLUSTER_ADMIN = 'cmca'\n\n  export const CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS = 'cmgda'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_SEE = 'cmgas'\n  export const CHANNELS_AND_GENERATIONS_ADMIN = 'cmga'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL = 'cmgap'\n  export const CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE = 'cmgam'\n  export const CHANNELS_AND_GENERATIONS_MIGRATE = 'cmgm'\n  export const ALL_CHANNELS_AND_GENERATIONS: string[] = [\n    CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n    CHANNELS_AND_GENERATIONS_ADMIN,\n    CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n  ]\n  export const CLUSTERS_READALLCLUSTERINFO = 'ccrai'\n  export const CLUSTERS_DELETE_CLUSTER = 'ccda'\n  export const CLUSTERS_CAN_MOVE_TO_OTHER_ORG = 'ccmoo'\n  export const CLUSTERS_CAN_SEND_TO_SLEEP = 'ccsts'\n  export const CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE = 'ccucp'\n  export const CLUSTERS_CAN_UPDATE_GENERATION = 'ccug'\n  export const CLUSTERS_CAN_UPDATE_GENERATION_YOLO = 'ccugy'\n\n  export const CLUSTER_PLAN_SEE_ALL = 'ccpa'\n  export const CLUSTER_PLAN_CREATE = 'ccpc'\n  export const CLUSTER_PLAN_DELETE = 'ccpd'\n\n  export const CLUSTER_PLAN_TYPE_CREATE = 'cptc'\n  export const CLUSTER_PLAN_TYPE_MODIFY = 'cptm'\n  export const CLUSTER_PLAN_TYPE_DELETE = 'cptd'\n  export const CLUSTER_PLAN_TYPE_FORCE_DELETE = 'cptfd'\n\n  export const CLUSTER_PLAN_MIGRATE = 'ccpm'\n  export const CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN = 'ccpda'\n  export const CLUSTER_PLAN_CAN_MODIFY = 'ccpmo'\n\n  export const M2M_UPDATE_CRD = 'cmuc'\n  export const M2M_SIGNUP = 'cms'\n  export const M2M_TRIGGER_ALERT = 'cmta'\n  export const M2M_DELETE_ORG_CLUSTERS = 'cmdoc'\n  export const M2M_UPDATE_ORG_CLUSTERS = 'cmuoc'\n  export const M2M_ADD_CLUSTER_USAGE_METRICS = 'cmacm'\n  export const M2M_SEND_SSE_EVENT = 'cmsse'\n  export const M2M_EXTERNAL_INTERNAL_CLIENT = 'cmeic'\n  export const M2M_FETCH_MIGRATION_DATA = 'cmfmd'\n  export const CLUSTER_CREATE_ON_BEHALF = 'cccob'\n  export const FEATURE_NEW_HOME = 'cfnh'\n  export const FEATURE_TEMPLATE_PICKER = 'cftp'\n  export const USER_SETTINGS = 'cus'\n  export const CLUSTERS_CAN_OVERRIDE_ENV_VARS = 'ccoev'\n\n  export const DEBUG = 'cdbg'\n  export const GOD_TRIGGER_CRONS = 'gtc'\n\n  export const APICLIENT_READ = 'capr'\n  export const APICLIENT_DELETE = 'capd'\n\n  export interface Features {\n    apiClient: {\n      read: boolean\n      delete: boolean\n    }\n    multiCluster: {\n      admin: boolean\n    }\n    multiGen: {\n      admin: {\n        see: boolean\n        modify: boolean\n        patchExistingChannel: boolean\n        migrate: boolean\n        deleteAllClustersOfGeneration: boolean\n      }\n    }\n    clusters: {\n      canReadAllClusterInfo: boolean\n      canDeleteAllClusters: boolean\n      canMoveToOtherOrg: boolean\n      createOnBehalf: boolean\n      canSendToSleep: boolean\n      canUpdateClusterPlanType: boolean\n      canOverrideEnvVars: boolean\n      canUpgradeGeneration: boolean\n      canUpgradeGenerationYolo: boolean\n    }\n    clusterPlan: {\n      seeAll: boolean\n      create: boolean\n      delete: boolean\n      type: {\n        create: boolean\n        modify: boolean\n        delete: boolean\n        forceDelete: boolean\n      }\n      migrate: boolean\n      deleteAllClustersOfPlan: boolean\n      modify: boolean\n    }\n    features: {\n      newHome: boolean\n      templatePicker: boolean\n      userSettings: boolean\n      debug: boolean\n    }\n    m2m: {\n      updateCrd: boolean\n      signup: boolean\n      triggerAlert: boolean\n      deleteOrgClusters: boolean\n      updateOrgClusters: boolean\n      addUsageMetrics: boolean\n      sendSseEvent: boolean\n      external: {\n        internalClient: boolean\n      }\n      fetchMigrationData: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      apiClient: {\n        read: false,\n        delete: false,\n      },\n      multiCluster: { admin: false },\n      multiGen: {\n        admin: {\n          migrate: false,\n          modify: false,\n          patchExistingChannel: false,\n          see: false,\n          deleteAllClustersOfGeneration: false,\n        },\n      },\n      clusters: {\n        canReadAllClusterInfo: false,\n        canDeleteAllClusters: false,\n        canMoveToOtherOrg: false,\n        createOnBehalf: false,\n        canSendToSleep: false,\n        canUpdateClusterPlanType: false,\n        canOverrideEnvVars: false,\n        canUpgradeGeneration: false,\n        canUpgradeGenerationYolo: false,\n      },\n      clusterPlan: {\n        seeAll: false,\n        create: false,\n        delete: false,\n        type: {\n          create: false,\n          modify: false,\n          delete: false,\n          forceDelete: false,\n        },\n        migrate: false,\n        deleteAllClustersOfPlan: false,\n        modify: false,\n      },\n      features: {\n        newHome: false,\n        templatePicker: false,\n        userSettings: false,\n        debug: false,\n      },\n      m2m: {\n        updateCrd: false,\n        signup: false,\n        triggerAlert: false,\n        deleteOrgClusters: false,\n        updateOrgClusters: false,\n        addUsageMetrics: false,\n        sendSseEvent: false,\n        external: {\n          internalClient: false,\n        },\n        fetchMigrationData: false,\n      },\n    }\n  }\n\n  export const PermissionsAtAuth0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: MULTICLUSTER_ADMIN,\n      description: 'can create and delete k8s clusters',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_SEE,\n      description: 'can go to the admin section for MultiGen, but no touch!',\n      initialRoles: [\n        'console:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n        'console:C8UpdateEnforcer',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN,\n      description: 'can create channels, generations and combine them',\n      initialRoles: ['console:admin', 'console:C8ReleaseManager'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_PATCH_EXISTING_CHANNEL,\n      description: 'can modify existing channels and combine them',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_MIGRATE,\n      description:\n        'can migrate clusters of generations to supported other generations',\n      initialRoles: ['console:admin', 'console:C8UpdateEnforcer'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_ADMIN_DELETE_ALL_CLUSTERS,\n      description: 'can delete all clusters of a generation',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CHANNELS_AND_GENERATIONS_MIGRATE,\n      description:\n        'can migrate owned clusters of generations to supported other generations',\n      initialRoles: [],\n    },\n    {\n      value: CLUSTERS_READALLCLUSTERINFO,\n      description: 'can read clusterInfo for all clusters',\n      initialRoles: [\n        'accounts:read',\n        'accounts:onboard',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'accounts:editSalesPlans',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'console:admin',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_DELETE_CLUSTER,\n      description: 'can delete clusters in all orgs',\n      initialRoles: ['accounts:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_MOVE_TO_OTHER_ORG,\n      description: 'can move a cluster to another org the user is part of',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_SEE_ALL,\n      description: 'can see all ClusterPlans',\n      initialRoles: [\n        'console:admin',\n        'accounts:read',\n        'accounts:orgCreator',\n        'accounts:admin',\n        'console:admin:readonly',\n        'support:agent',\n        'supersupport:agent',\n        'accounts:onboard',\n        'accounts:editSalesPlans',\n        'accounts:trialExtender',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTER_PLAN_CREATE,\n      description: 'can create ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_DELETE,\n      description: 'can delete ClusterPlans',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_CREATE,\n      description: 'can create ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_FORCE_DELETE,\n      description: 'can delete ClusterPlanTypes',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_TYPE_MODIFY,\n      description: 'can modify ClusterPlanTypes',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_MIGRATE,\n      description: 'can migrate Clusters from one plan to another',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_DELETE_ALL_CLUSTERS_OF_PLAN,\n      description: 'can delete all clusters of a plan',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: CLUSTER_CREATE_ON_BEHALF,\n      description:\n        'enables accounts to create clusters on signup (not a user permission)',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SIGNUP,\n      description: 'allows to signal to Console new user signups',\n      initialRoles: [],\n    },\n    { value: M2M_UPDATE_CRD, description: 'may update crds', initialRoles: [] },\n    {\n      value: M2M_TRIGGER_ALERT,\n      description: 'allows Infra and Operate to trigger alerts',\n      initialRoles: [],\n    },\n    {\n      value: M2M_DELETE_ORG_CLUSTERS,\n      description:\n        'allows trigger console to delete all clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_UPDATE_ORG_CLUSTERS,\n      description: 'allows to update clusters of an Organization',\n      initialRoles: [],\n    },\n    {\n      value: M2M_ADD_CLUSTER_USAGE_METRICS,\n      description: 'allows to trigger update of value metrics',\n      initialRoles: [],\n    },\n    {\n      value: M2M_SEND_SSE_EVENT,\n      description: 'allows to trigger SSE events',\n      initialRoles: [],\n    },\n    {\n      value: M2M_EXTERNAL_INTERNAL_CLIENT,\n      description: 'allows to fetch internal clients',\n      initialRoles: [],\n    },\n    {\n      value: M2M_FETCH_MIGRATION_DATA,\n      description: 'allows to fetch migration data',\n      initialRoles: [],\n    },\n    {\n      value: FEATURE_NEW_HOME,\n      description: 'allows users to see new home',\n      initialRoles: ['console:admin'],\n    },\n    {\n      value: USER_SETTINGS,\n      description: 'allows users to see user settings',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: FEATURE_TEMPLATE_PICKER,\n      description: 'allows users to see template picker',\n      initialRoles: ['console:admin', 'betatester:true'],\n    },\n    {\n      value: CLUSTERS_CAN_SEND_TO_SLEEP,\n      description: 'may send a cluster to sleep and wake up',\n      initialRoles: [\n        'console:admin',\n        'accounts:admin',\n        'console:operationsEngineer',\n      ],\n    },\n    {\n      value: DEBUG,\n      description: 'can see additional debugging tools',\n      initialRoles: ['console:admin:readonly', 'console:admin'],\n    },\n    {\n      value: CLUSTERS_CAN_OVERRIDE_ENV_VARS,\n      description:\n        'can set Env Vars on cluster level that override all ClusterPlan Env Vars',\n      initialRoles: ['console:admin', 'console:operationsEngineer'],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_CLUSTERPLANTYPE,\n      description: 'can update clusterplantype of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:onboard',\n        'console:operationsEngineer',\n        'accounts:enterpriseAdmin',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION,\n      description: 'can update generation of a running cluster',\n      initialRoles: [\n        'console:admin',\n        'accounts:clusterUpdates',\n        'console:C8ReleaseManager',\n      ],\n    },\n    {\n      value: CLUSTERS_CAN_UPDATE_GENERATION_YOLO,\n      description:\n        'can update generation of a running cluster even if the generation is not reachable',\n      initialRoles: ['console:god'],\n    },\n    {\n      value: CLUSTER_PLAN_CAN_MODIFY,\n      description: 'can trigger modifications of a clusterplan',\n      initialRoles: ['console:admin', 'console:clusterPlanManager'],\n    },\n    {\n      value: APICLIENT_READ,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:read', 'accounts:orgCreator'],\n    },\n    {\n      value: APICLIENT_DELETE,\n      description: 'can read API Clients Names of Organizations',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
+  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,wBAAV;AACE,EAAMA,oBAAA,qBAAqB;AAE3B,EAAMA,oBAAA,qDAAqD;AAC3D,EAAMA,oBAAA,qCAAqC;AAC3C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,wDAAwD;AAC9D,EAAMA,oBAAA,yCAAyC;AAC/C,EAAMA,oBAAA,mCAAmC;AACzC,EAAMA,oBAAA,+BAAyC;AAAA,IACpDA,oBAAA;AAAA,IACAA,oBAAA;AAAA,IACAA,oBAAA;AAAA,EACF;AACO,EAAMA,oBAAA,8BAA8B;AACpC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,6BAA6B;AACnC,EAAMA,oBAAA,sCAAsC;AAC5C,EAAMA,oBAAA,iCAAiC;AACvC,EAAMA,oBAAA,sCAAsC;AAE5C,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,sBAAsB;AAC5B,EAAMA,oBAAA,sBAAsB;AAE5B,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,uBAAuB;AAC7B,EAAMA,oBAAA,+CAA+C;AACrD,EAAMA,oBAAA,0BAA0B;AAEhC,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,aAAa;AACnB,EAAMA,oBAAA,oBAAoB;AAC1B,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gCAAgC;AACtC,EAAMA,oBAAA,qBAAqB;AAC3B,EAAMA,oBAAA,+BAA+B;AACrC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,2BAA2B;AACjC,EAAMA,oBAAA,mBAAmB;AACzB,EAAMA,oBAAA,0BAA0B;AAChC,EAAMA,oBAAA,gBAAgB;AACtB,EAAMA,oBAAA,iCAAiC;AAEvC,EAAMA,oBAAA,QAAQ;AACd,EAAMA,oBAAA,oBAAoB;AAE1B,EAAMA,oBAAA,iBAAiB;AACvB,EAAMA,oBAAA,mBAAmB;AAiEzB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,cAAc,EAAE,OAAO,MAAM;AAAA,MAC7B,UAAU;AAAA,QACR,OAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,sBAAsB;AAAA,UACtB,KAAK;AAAA,UACL,+BAA+B;AAAA,QACjC;AAAA,MACF;AAAA,MACA,UAAU;AAAA,QACR,uBAAuB;AAAA,QACvB,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,QAChB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,sBAAsB;AAAA,QACtB,0BAA0B;AAAA,MAC5B;AAAA,MACA,aAAa;AAAA,QACX,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,MAAM;AAAA,UACJ,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,QACT,yBAAyB;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,OAAO;AAAA,MACT;AAAA,MACA,KAAK;AAAA,QACH,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,QACjB,cAAc;AAAA,QACd,UAAU;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AA7DO,EAAAA,oBAAS;AA+DT,EAAMA,oBAAA,qBAIR;AAAA,IACH;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,0BAA0B;AAAA,IAC5D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,gBAAgB;AAAA,IACjC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA,EAAE,OAAOA,oBAAA,gBAAgB,aAAa,mBAAmB,cAAc,CAAC,EAAE;AAAA,IAC1E;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,eAAe;AAAA,IAChC;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,iBAAiB;AAAA,IACnD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,0BAA0B,eAAe;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aACE;AAAA,MACF,cAAc,CAAC,aAAa;AAAA,IAC9B;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,4BAA4B;AAAA,IAC9D;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,iBAAiB,qBAAqB;AAAA,IACvD;AAAA,IACA;AAAA,MACE,OAAOA,oBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GA3be;",
+  "names": ["ConsolePermissions"]
+}

package/dist/permissions/notification.permissions.d.ts

@@ -0,0 +1,36 @@
+import type { Roles } from '../types/Roles.js';
+export declare namespace NotificationPermissions {
+    const CREATE_GLOBAL = "ngc";
+    const CREATE_INDIVIDUAL = "nic";
+    const CREATE_ORG = "noc";
+    const CREATE_ADMIN = "nac";
+    const READ_ADMIN = "nar";
+    const READ_GLOBAL = "ngr";
+    const DELETE_GLOBAL = "ngd";
+    const DELETE_ADMIN = "nad";
+    interface Features {
+        global: {
+            create: boolean;
+            read: boolean;
+            delete: boolean;
+        };
+        individual: {
+            create: boolean;
+        };
+        org: {
+            create: boolean;
+        };
+        admin: {
+            create: boolean;
+            read: boolean;
+            delete: boolean;
+        };
+    }
+    function createEmptyFeatures(): Features;
+    function userFeaturesFromPermissions(mayContainOnlyNewNotation: string[]): Features;
+    const PERMISSIONS_AT_AUTH0: Array<{
+        value: string;
+        description: string;
+        initialRoles: Roles[];
+    }>;
+}

package/dist/permissions/notification.permissions.js

@@ -0,0 +1,101 @@
+var NotificationPermissions;
+((NotificationPermissions2) => {
+  NotificationPermissions2.CREATE_GLOBAL = "ngc";
+  NotificationPermissions2.CREATE_INDIVIDUAL = "nic";
+  NotificationPermissions2.CREATE_ORG = "noc";
+  NotificationPermissions2.CREATE_ADMIN = "nac";
+  NotificationPermissions2.READ_ADMIN = "nar";
+  NotificationPermissions2.READ_GLOBAL = "ngr";
+  NotificationPermissions2.DELETE_GLOBAL = "ngd";
+  NotificationPermissions2.DELETE_ADMIN = "nad";
+  function createEmptyFeatures() {
+    return {
+      global: {
+        create: false,
+        read: false,
+        delete: false
+      },
+      individual: {
+        create: false
+      },
+      org: {
+        create: false
+      },
+      admin: {
+        create: false,
+        read: false,
+        delete: false
+      }
+    };
+  }
+  NotificationPermissions2.createEmptyFeatures = createEmptyFeatures;
+  function userFeaturesFromPermissions(mayContainOnlyNewNotation) {
+    const permissions = mayContainOnlyNewNotation;
+    const newFeatures = {
+      global: {
+        create: permissions.includes(NotificationPermissions2.CREATE_GLOBAL),
+        read: permissions.includes(NotificationPermissions2.READ_GLOBAL),
+        delete: permissions.includes(NotificationPermissions2.DELETE_GLOBAL)
+      },
+      individual: {
+        create: permissions.includes(NotificationPermissions2.CREATE_INDIVIDUAL)
+      },
+      org: {
+        create: permissions.includes(NotificationPermissions2.CREATE_ORG)
+      },
+      admin: {
+        create: permissions.includes(NotificationPermissions2.CREATE_ADMIN),
+        read: permissions.includes(NotificationPermissions2.READ_ADMIN),
+        delete: permissions.includes(NotificationPermissions2.DELETE_ADMIN)
+      }
+    };
+    return newFeatures;
+  }
+  NotificationPermissions2.userFeaturesFromPermissions = userFeaturesFromPermissions;
+  NotificationPermissions2.PERMISSIONS_AT_AUTH0 = [
+    {
+      value: NotificationPermissions2.CREATE_ADMIN,
+      description: "Admin Permissions! Can create notifications if any kind.",
+      initialRoles: ["accounts:god"]
+    },
+    {
+      value: NotificationPermissions2.READ_ADMIN,
+      description: "Admin Permissions! Can read all notifications.",
+      initialRoles: ["accounts:god"]
+    },
+    {
+      value: NotificationPermissions2.CREATE_INDIVIDUAL,
+      description: "Can create individual notifications",
+      initialRoles: []
+    },
+    {
+      value: NotificationPermissions2.CREATE_ORG,
+      description: "Can create org based notifications",
+      initialRoles: []
+    },
+    {
+      value: NotificationPermissions2.CREATE_GLOBAL,
+      description: "Can create global notifications",
+      initialRoles: ["accounts:notifications:global"]
+    },
+    {
+      value: NotificationPermissions2.READ_GLOBAL,
+      description: "Can read global notifications",
+      initialRoles: ["accounts:notifications:global"]
+    },
+    {
+      value: NotificationPermissions2.DELETE_GLOBAL,
+      description: "Can delete global notifications",
+      initialRoles: ["accounts:notifications:global"]
+    },
+    {
+      value: NotificationPermissions2.DELETE_ADMIN,
+      description: "Can delete notifications",
+      initialRoles: ["accounts:god"]
+    }
+  ];
+})(NotificationPermissions || (NotificationPermissions = {}));
+export {
+  NotificationPermissions
+};
+//# sourceMappingURL=notification.permissions.js.map

package/dist/permissions/notification.permissions.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/permissions/notification.permissions.ts"],
+  "sourcesContent": ["/*\n * Copyright Camunda Services GmbH and/or licensed to Camunda Services GmbH\n * under one or more contributor license agreements. Licensed under a commercial license.\n * You may not use this file except in compliance with the commercial license.\n */\n\nimport type { Roles } from '../types/Roles.js'\n\nexport namespace NotificationPermissions {\n  export const CREATE_GLOBAL = 'ngc'\n  export const CREATE_INDIVIDUAL = 'nic'\n  export const CREATE_ORG = 'noc'\n  export const CREATE_ADMIN = 'nac'\n  export const READ_ADMIN = 'nar'\n  export const READ_GLOBAL = 'ngr'\n  export const DELETE_GLOBAL = 'ngd'\n  export const DELETE_ADMIN = 'nad'\n\n  export interface Features {\n    global: {\n      create: boolean\n      read: boolean\n      delete: boolean\n    }\n    individual: {\n      create: boolean\n    }\n    org: {\n      create: boolean\n    }\n    admin: {\n      create: boolean\n      read: boolean\n      delete: boolean\n    }\n  }\n\n  export function createEmptyFeatures(): Features {\n    return {\n      global: {\n        create: false,\n        read: false,\n        delete: false,\n      },\n      individual: {\n        create: false,\n      },\n      org: {\n        create: false,\n      },\n      admin: {\n        create: false,\n        read: false,\n        delete: false,\n      },\n    }\n  }\n  export function userFeaturesFromPermissions(\n    mayContainOnlyNewNotation: string[],\n  ) {\n    const permissions = mayContainOnlyNewNotation\n\n    const newFeatures: Features = {\n      global: {\n        create: permissions.includes(CREATE_GLOBAL),\n        read: permissions.includes(READ_GLOBAL),\n        delete: permissions.includes(DELETE_GLOBAL),\n      },\n      individual: {\n        create: permissions.includes(CREATE_INDIVIDUAL),\n      },\n      org: {\n        create: permissions.includes(CREATE_ORG),\n      },\n      admin: {\n        create: permissions.includes(CREATE_ADMIN),\n        read: permissions.includes(READ_ADMIN),\n        delete: permissions.includes(DELETE_ADMIN),\n      },\n    }\n    return newFeatures\n  }\n\n  export const PERMISSIONS_AT_AUTH0: Array<{\n    value: string\n    description: string\n    initialRoles: Roles[]\n  }> = [\n    {\n      value: CREATE_ADMIN,\n      description: 'Admin Permissions! Can create notifications if any kind.',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: READ_ADMIN,\n      description: 'Admin Permissions! Can read all notifications.',\n      initialRoles: ['accounts:god'],\n    },\n    {\n      value: CREATE_INDIVIDUAL,\n      description: 'Can create individual notifications',\n      initialRoles: [],\n    },\n    {\n      value: CREATE_ORG,\n      description: 'Can create org based notifications',\n      initialRoles: [],\n    },\n    {\n      value: CREATE_GLOBAL,\n      description: 'Can create global notifications',\n      initialRoles: ['accounts:notifications:global'],\n    },\n    {\n      value: READ_GLOBAL,\n      description: 'Can read global notifications',\n      initialRoles: ['accounts:notifications:global'],\n    },\n    {\n      value: DELETE_GLOBAL,\n      description: 'Can delete global notifications',\n      initialRoles: ['accounts:notifications:global'],\n    },\n    {\n      value: DELETE_ADMIN,\n      description: 'Can delete notifications',\n      initialRoles: ['accounts:god'],\n    },\n  ]\n}\n"],
+  "mappings": "AAQO,IAAU;AAAA,CAAV,CAAUA,6BAAV;AACE,EAAMA,yBAAA,gBAAgB;AACtB,EAAMA,yBAAA,oBAAoB;AAC1B,EAAMA,yBAAA,aAAa;AACnB,EAAMA,yBAAA,eAAe;AACrB,EAAMA,yBAAA,aAAa;AACnB,EAAMA,yBAAA,cAAc;AACpB,EAAMA,yBAAA,gBAAgB;AACtB,EAAMA,yBAAA,eAAe;AAqBrB,WAAS,sBAAgC;AAC9C,WAAO;AAAA,MACL,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,MACA,YAAY;AAAA,QACV,QAAQ;AAAA,MACV;AAAA,MACA,KAAK;AAAA,QACH,QAAQ;AAAA,MACV;AAAA,MACA,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAnBO,EAAAA,yBAAS;AAoBT,WAAS,4BACd,2BACA;AACA,UAAM,cAAc;AAEpB,UAAM,cAAwB;AAAA,MAC5B,QAAQ;AAAA,QACN,QAAQ,YAAY,SAASA,yBAAA,aAAa;AAAA,QAC1C,MAAM,YAAY,SAASA,yBAAA,WAAW;AAAA,QACtC,QAAQ,YAAY,SAASA,yBAAA,aAAa;AAAA,MAC5C;AAAA,MACA,YAAY;AAAA,QACV,QAAQ,YAAY,SAASA,yBAAA,iBAAiB;AAAA,MAChD;AAAA,MACA,KAAK;AAAA,QACH,QAAQ,YAAY,SAASA,yBAAA,UAAU;AAAA,MACzC;AAAA,MACA,OAAO;AAAA,QACL,QAAQ,YAAY,SAASA,yBAAA,YAAY;AAAA,QACzC,MAAM,YAAY,SAASA,yBAAA,UAAU;AAAA,QACrC,QAAQ,YAAY,SAASA,yBAAA,YAAY;AAAA,MAC3C;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAxBO,EAAAA,yBAAS;AA0BT,EAAMA,yBAAA,uBAIR;AAAA,IACH;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC;AAAA,IACjB;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B;AAAA,IAChD;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B;AAAA,IAChD;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,+BAA+B;AAAA,IAChD;AAAA,IACA;AAAA,MACE,OAAOA,yBAAA;AAAA,MACP,aAAa;AAAA,MACb,cAAc,CAAC,cAAc;AAAA,IAC/B;AAAA,EACF;AAAA,GAxHe;",
+  "names": ["NotificationPermissions"]
+}

package/dist/permissions/profile.permissions.d.ts

@@ -0,0 +1,18 @@
+import type { Roles } from '../types/Roles.js';
+export declare const CLOUD_TEAM_EMAILS: string[];
+export declare const SRE_TEAM_EMAILS: string[];
+export declare const PLATFORM_SM_EMAILS: string[];
+export declare const SUPPORT_MANAGERS_EMAILS: string[];
+export declare const C8_ENGINEERING_MANAGERS_EMAILS: string[];
+export declare const CONSULTING_MANAGER_EMAILS: string[];
+export declare const CSM_MANAGER_EMAIL: string[];
+export interface OnboardConfig {
+    [unit: string]: {
+        allowed: string[];
+        rolesToAssign: Roles[];
+        email: {
+            handbookPages: string[];
+        };
+    };
+}
+export declare const PROFILES: OnboardConfig;