@telos-dev-team/dealernode-permissions 1.1.57 → 1.1.59

package/dist/backoffice-permissions.d.ts

@@ -118,6 +118,38 @@ export declare const BACKOFFICE_PERMISSIONS: {
          */
         readonly CREDENTIALS: "backoffice.billing.credentials";
     };
+    /**
+     * Payment integrations of any dealer from the backoffice (dealernode-backend
+     * `src/payment`): list its Stripe, Clover, iPOS and BMS accounts, connect and
+     * disconnect them, manage terminals and readers, and assign capabilities to
+     * each account. Not PAYMENTS (what a dealer charges its own buyers) and not
+     * BILLING (what the platform charges the dealer).
+     */
+    readonly DEALER_INTEGRATIONS: {
+        readonly VIEW: "backoffice.dealer_integrations.view";
+        readonly MANAGE: "backoffice.dealer_integrations.manage";
+    };
+    /**
+     * Emails the system sent, read-only, across every dealer (dealernode-backend
+     * `src/email`): list them with their delivery status (sent, delivered,
+     * opened, bounced, spam complaint, failed) and open one to see its content
+     * and timeline. No MANAGE — the backoffice never sends or edits these, it
+     * only audits what the platform already sent.
+     */
+    readonly EMAILS: {
+        readonly VIEW: "backoffice.emails.view";
+    };
+    /**
+     * A dealer's notification configuration from the backoffice
+     * (dealernode-backend `dealer_notification_config`): the email addresses that
+     * receive payment, refund and dispute receipts, plus the payment-reminder
+     * lead times (first bank payment, pickup, BHPH). Not the per-type notification
+     * routing (`notification_routing`) — that is its own concern.
+     */
+    readonly DEALER_NOTIFICATIONS: {
+        readonly VIEW: "backoffice.dealer_notifications.view";
+        readonly MANAGE: "backoffice.dealer_notifications.manage";
+    };
 };
 export type BackofficePermission = typeof BACKOFFICE_PERMISSIONS;
 /**
@@ -137,10 +169,10 @@ export type BackofficePermissionId = Leaves<BackofficePermission>;
  */
 export declare const BACKOFFICE_PERMISSION_PRESETS: {
     /** Every `*.view` permission, nothing else. */
-    readonly READ_ONLY: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials")[];
+    readonly READ_ONLY: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[];
     /** Read-only plus the two areas support routinely needs to act on. */
-    readonly SUPPORT: readonly [...("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials")[], "backoffice.dealers.manage", "backoffice.dealer_resources.manage", "backoffice.dealer_relationships.manage"];
+    readonly SUPPORT: readonly [...("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[], "backoffice.dealers.manage", "backoffice.dealer_resources.manage", "backoffice.dealer_relationships.manage", "backoffice.dealer_integrations.manage"];
     /** Every backoffice permission. */
-    readonly ADMIN: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials")[];
+    readonly ADMIN: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[];
 };
 export {};

package/dist/backoffice-permissions.js

@@ -121,6 +121,38 @@ exports.BACKOFFICE_PERMISSIONS = {
          */
         CREDENTIALS: "backoffice.billing.credentials",
     },
+    /**
+     * Payment integrations of any dealer from the backoffice (dealernode-backend
+     * `src/payment`): list its Stripe, Clover, iPOS and BMS accounts, connect and
+     * disconnect them, manage terminals and readers, and assign capabilities to
+     * each account. Not PAYMENTS (what a dealer charges its own buyers) and not
+     * BILLING (what the platform charges the dealer).
+     */
+    DEALER_INTEGRATIONS: {
+        VIEW: "backoffice.dealer_integrations.view",
+        MANAGE: "backoffice.dealer_integrations.manage",
+    },
+    /**
+     * Emails the system sent, read-only, across every dealer (dealernode-backend
+     * `src/email`): list them with their delivery status (sent, delivered,
+     * opened, bounced, spam complaint, failed) and open one to see its content
+     * and timeline. No MANAGE — the backoffice never sends or edits these, it
+     * only audits what the platform already sent.
+     */
+    EMAILS: {
+        VIEW: "backoffice.emails.view",
+    },
+    /**
+     * A dealer's notification configuration from the backoffice
+     * (dealernode-backend `dealer_notification_config`): the email addresses that
+     * receive payment, refund and dispute receipts, plus the payment-reminder
+     * lead times (first bank payment, pickup, BHPH). Not the per-type notification
+     * routing (`notification_routing`) — that is its own concern.
+     */
+    DEALER_NOTIFICATIONS: {
+        VIEW: "backoffice.dealer_notifications.view",
+        MANAGE: "backoffice.dealer_notifications.manage",
+    },
 };
 function flatten(node) {
     const values = [];
@@ -152,6 +184,7 @@ exports.BACKOFFICE_PERMISSION_PRESETS = {
         exports.BACKOFFICE_PERMISSIONS.DEALERS.MANAGE,
         exports.BACKOFFICE_PERMISSIONS.DEALER_RESOURCES.MANAGE,
         exports.BACKOFFICE_PERMISSIONS.DEALER_RELATIONSHIPS.MANAGE,
+        exports.BACKOFFICE_PERMISSIONS.DEALER_INTEGRATIONS.MANAGE,
     ],
     /** Every backoffice permission. */
     ADMIN: ALL_BACKOFFICE_PERMISSIONS,

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@telos-dev-team/dealernode-permissions",
-  "version": "1.1.57",
+  "version": "1.1.59",
   "description": "Shared permissions constants for dealernode projects",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
   "publishConfig": {
     "access": "public"
   },

package/.github/workflows/publish.yml

@@ -1,37 +0,0 @@
-name: Publish to npm
-
-on:
-  push:
-    branches: [main]
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          registry-url: https://registry.npmjs.org
-
-      - run: npm ci
-
-      - name: Bump version and publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          npm version patch --no-git-tag-version
-          VERSION=$(node -p "require('./package.json').version")
-          npm publish
-          git add package.json package-lock.json
-          git commit -m "chore: release v${VERSION}"
-          git tag "v${VERSION}"
-          git push && git push --tags

package/gps-provider-permissions.md

@@ -1,109 +0,0 @@
-# GPS Provider — Permisos a agregar al paquete común
-
-Este documento define los permisos del módulo `gps-provider` para integrarlos al
-paquete `@telos-dev-team/dealernode-permissions` (la fuente de verdad de
-permisos de DealerNode). Una vez agregados y publicada una nueva versión del
-paquete, `dealernode-backend` los importa desde `PERMISSIONS.GPS_PROVIDER.*` y
-los persiste en DB con `npm run sync:permissions`.
-
-## Bloque TypeScript a agregar en `src/permissions.ts`
-
-Insertar como un top-level más del objeto `PERMISSIONS` (mismo nivel que
-`DEAL`, `CAR`, `PAYMENT`, etc.):
-
-```ts
-GPS_PROVIDER: {
-  CONFIG: {
-    OPERATIONS: {
-      CREATE: 'gps-provider.config.operations.create',
-      VIEW:   'gps-provider.config.operations.view',
-      UPDATE: 'gps-provider.config.operations.update',
-      DELETE: 'gps-provider.config.operations.delete',
-    },
-  },
-  DEVICE: {
-    OPERATIONS: {
-      VIEW:   'gps-provider.device.operations.view',
-      LOCATE: 'gps-provider.device.operations.locate',
-    },
-  },
-},
-```
-
-Total: **6 permisos nuevos**.
-
-### Naming
-
-Sigue la convención existente del paquete: `module.resource.operations.action`,
-con `kebab-case` en el slug del módulo cuando lleva guión (como ya hace el
-paquete para `connected-account`).
-
-### Por qué dos sub-recursos (`CONFIG` y `DEVICE`)
-
-- `CONFIG` controla quién puede administrar la configuración del proveedor GPS
-  por dealer (credenciales, nombre, tipo de proveedor). Es un recurso CRUD
-  clásico → 4 acciones.
-- `DEVICE` controla quién puede consultar dispositivos GPS contra el proveedor
-  externo. Se separa en dos por costo:
-  - `VIEW` cubre las lecturas (location, history, status, info, mileage,
-    alerts, active, search).
-  - `LOCATE` controla el único endpoint que **dispara un ping on-demand al
-    dispositivo** (`POST /gps-provider/devices/:imei/locate`), que consume cuota
-    del proveedor. Tiene sentido restringirlo aparte.
-
-## Mapeo endpoint → permiso
-
-| Controller / Método | HTTP | Permiso |
-|---|---|---|
-| `DealerGpsConfigController.create` | `POST /gps-provider/config` | `GPS_PROVIDER.CONFIG.OPERATIONS.CREATE` |
-| `DealerGpsConfigController.findAllByDealer` | `GET /gps-provider/config` | `GPS_PROVIDER.CONFIG.OPERATIONS.VIEW` |
-| `DealerGpsConfigController.findById` | `GET /gps-provider/config/:configId` | `GPS_PROVIDER.CONFIG.OPERATIONS.VIEW` |
-| `DealerGpsConfigController.update` | `PUT /gps-provider/config/:configId` | `GPS_PROVIDER.CONFIG.OPERATIONS.UPDATE` |
-| `DealerGpsConfigController.delete` | `DELETE /gps-provider/config/:configId` | `GPS_PROVIDER.CONFIG.OPERATIONS.DELETE` |
-| `GpsDeviceController.findByImei` | `GET /gps-provider/devices/search` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.getDeviceLocation` | `GET /gps-provider/devices/:imei/location` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.locateDeviceNow` | `POST /gps-provider/devices/:imei/locate` | `GPS_PROVIDER.DEVICE.OPERATIONS.LOCATE` |
-| `GpsDeviceController.getDeviceHistory` | `GET /gps-provider/devices/:imei/history` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.getDeviceStatus` | `GET /gps-provider/devices/:imei/status` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.getDeviceInfo` | `GET /gps-provider/devices/:imei/info` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.getDeviceMileage` | `GET /gps-provider/devices/:imei/mileage` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.getDeviceAlerts` | `GET /gps-provider/devices/:imei/alerts` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-| `GpsDeviceController.isDeviceActive` | `GET /gps-provider/devices/:imei/active` | `GPS_PROVIDER.DEVICE.OPERATIONS.VIEW` |
-
-## Estado anterior (qué se reemplaza)
-
-Antes de esta integración, los endpoints del módulo dependían de permisos
-prestados o no validaban:
-
-- `POST/PUT /gps-provider/config` usaba `DEALER.OPERATIONS.UPDATE`.
-- `DELETE /gps-provider/config/:id` usaba `DEALER.OPERATIONS.DELETE`.
-- `GET /gps-provider/config` y `GET /gps-provider/config/:id` **no validaban
-  permiso alguno** (sólo JWT + filtro por `dealerId`).
-- Los 9 endpoints de `GpsDeviceController` usaban `CAR.GPS.OPERATIONS.VIEW`
-  (prestado del módulo `car`), sin distinguir `locate` de lecturas pasivas.
-
-## Pasos de release
-
-1. **Repo del paquete `@telos-dev-team/dealernode-permissions`**: pegar el
-   bloque `GPS_PROVIDER` en `src/permissions.ts`, abrir PR, bumpear versión
-   (minor: `1.x.0`), publicar.
-2. **dealernode-backend**:
-   - `npm install @telos-dev-team/dealernode-permissions@<nueva-versión>` y
-     commitear `package.json` + lockfile.
-   - Aplicar los reemplazos en commands y queries del módulo gps-provider
-     (los 14 endpoints, ver tabla de arriba).
-3. **Deploy**.
-4. **Post-deploy**: correr `npm run sync:permissions` contra el ambiente para
-   crear los 6 permisos nuevos en la tabla `permission`. El script es
-   idempotente y debe imprimir `6 created, 0 deleted`.
-5. **Operativo**: asignar los nuevos permisos a los roles correspondientes
-   (super_admin, dealer_admin, manager según política). No se hace por código.
-
-## Notas
-
-- No se elimina ningún permiso existente; los `CAR.GPS.OPERATIONS.*` y
-  `DEAL.GPS.OPERATIONS.*` siguen siendo válidos para sus propios módulos
-  (`car`/`deal`). Sólo se deja de **reusarlos** desde `gps-provider`.
-- Si en el futuro hace falta granularidad adicional para device (p. ej.
-  separar `VIEW_HISTORY` o `VIEW_ALERTS`), se agrega como una nueva acción
-  bajo `GPS_PROVIDER.DEVICE.OPERATIONS` sin romper compatibilidad.

package/src/backoffice-permissions.ts

@@ -1,169 +0,0 @@
-/**
- * Backoffice realm — a separate, flat catalog from `PERMISSIONS`.
- *
- * The backoffice (internal admin tool) authorizes against its own
- * `backoffice_user_permission` table, never against a dealer's `user_dealer`
- * membership. Its permission ids share the `permission` table in the
- * database with the product catalog above, but the two are otherwise
- * unrelated: a `backoffice.*` id is never assignable to a dealer role, and a
- * product id is never assignable to a backoffice user. Keeping them as a
- * separate export (instead of a top-level key inside `PERMISSIONS`) makes
- * that boundary explicit and lets each side filter the other out of its own
- * catalog listing.
- */
-export const BACKOFFICE_PERMISSIONS = {
-  DEALERS: {
-    VIEW: "backoffice.dealers.view",
-    MANAGE: "backoffice.dealers.manage",
-  },
-  USERS: {
-    VIEW: "backoffice.users.view",
-    MANAGE: "backoffice.users.manage",
-  },
-  /**
-   * Split out from USERS.MANAGE on purpose: granting/revoking a backoffice
-   * user's permissions is more sensitive than editing their name or email,
-   * and folding both into one permission let any admin escalate themselves
-   * to anything. No VIEW counterpart — reading a user's permissions is
-   * already covered by USERS.VIEW (GET /backoffice/users/:id).
-   */
-  PERMISSIONS: {
-    MANAGE: "backoffice.permissions.manage",
-  },
-  PAYMENTS: {
-    VIEW: "backoffice.payments.view",
-    MANAGE: "backoffice.payments.manage",
-  },
-  /**
-   * Management of per-dealer resources from the backoffice — catalogs each
-   * dealer otherwise manages under Company → Resources: bank, color, floor,
-   * purchase_source, agency, plate_origin, wholesale_target,
-   * commission_category, deal_actor_type, title_status,
-   * car_extra_category/type, deal_extra_category/type, arbitration_issue_type.
-   * One permission per area (same grain as DEALERS/USERS/PAYMENTS), not one
-   * per entity — 15 very similar entities, one permission each would be
-   * noise with no real granularity benefit.
-   */
-  DEALER_RESOURCES: {
-    VIEW: "backoffice.dealer_resources.view",
-    MANAGE: "backoffice.dealer_resources.manage",
-  },
-  /** Global vehicle catalog: brand/model/trim/style/fuel-type/title-brand. */
-  CATALOG: {
-    VIEW: "backoffice.catalog.view",
-    MANAGE: "backoffice.catalog.manage",
-  },
-  /**
-   * Management of a dealer's roles and permissions from the backoffice —
-   * roles, role↔permission, role↔user and direct user↔permission grants.
-   * Its own permission (not DEALER_RESOURCES): roles/permissions govern a
-   * dealer's whole RBAC, more sensitive than a catalog of colors/banks.
-   */
-  DEALER_ROLES: {
-    VIEW: "backoffice.dealer_roles.view",
-    MANAGE: "backoffice.dealer_roles.manage",
-  },
-  /**
-   * Members of any dealer from the backoffice: list them, view one, and
-   * replace its roles and deal actor types. Its own permission (not
-   * DEALER_ROLES): who may edit a dealer's role catalog is not the same as who
-   * may re-assign people to those roles. Never touches a member's direct
-   * permissions.
-   */
-  DEALER_MEMBERS: {
-    VIEW: "backoffice.dealer_members.view",
-    MANAGE: "backoffice.dealer_members.manage",
-  },
-  /**
-   * Dealer-to-dealer relationships of any dealer from the backoffice: list them
-   * and (MANAGE) create/revoke/suspend/reactivate a relationship and set the
-   * capabilities one dealer grants another. Management only — the product keeps
-   * the runtime read-path that resolves cross-dealer access per request.
-   */
-  DEALER_RELATIONSHIPS: {
-    VIEW: "backoffice.dealer_relationships.view",
-    MANAGE: "backoffice.dealer_relationships.manage",
-  },
-  /**
-   * Dealer groups from the backoffice: list them and (MANAGE) create/update/
-   * delete a group, add/remove members, set the group permission contract,
-   * manage group user assignments and propagate roles across the group.
-   */
-  DEALER_GROUPS: {
-    VIEW: "backoffice.dealer_groups.view",
-    MANAGE: "backoffice.dealer_groups.manage",
-  },
-  /**
-   * Workflows of any dealer from the backoffice: list them, open the editor,
-   * and (MANAGE) create, edit, version and test them, including the AI
-   * assistant. Never decides which workflows run in production: that is
-   * assigned by each dealer from the product.
-   */
-  WORKFLOWS: {
-    VIEW: "backoffice.workflows.view",
-    MANAGE: "backoffice.workflows.manage",
-  },
-  /**
-   * Platform-to-dealer billing (dealernode-backend `src/billing`): plans,
-   * global charge provider, dealer subscriptions, cards and invoices. Not
-   * PAYMENTS, which is what a dealer charges its own buyers.
-   */
-  BILLING: {
-    VIEW: "backoffice.billing.view",
-    MANAGE: "backoffice.billing.manage",
-    /**
-     * Load and change the platform's merchant credentials on each charge
-     * provider. Separate from MANAGE because these keys move money: whoever
-     * manages plans and subscriptions doesn't need to be able to change them.
-     */
-    CREDENTIALS: "backoffice.billing.credentials",
-  },
-} as const;
-
-export type BackofficePermission = typeof BACKOFFICE_PERMISSIONS;
-
-/**
- * The actual union of backoffice permission id strings. `BackofficePermission`
- * (the type of the whole tree, mirroring `Permission` above) can't be used to
- * type "any single backoffice permission id" — this can.
- */
-type Leaves<T> = T extends string ? T : { [K in keyof T]: Leaves<T[K]> }[keyof T];
-export type BackofficePermissionId = Leaves<BackofficePermission>;
-
-function flatten(node: Record<string, unknown>): BackofficePermissionId[] {
-  const values: BackofficePermissionId[] = [];
-  for (const key of Object.keys(node)) {
-    const value = node[key];
-    if (typeof value === "string") {
-      values.push(value as BackofficePermissionId);
-    } else if (typeof value === "object" && value !== null) {
-      values.push(...flatten(value as Record<string, unknown>));
-    }
-  }
-  return values;
-}
-
-const ALL_BACKOFFICE_PERMISSIONS = flatten(BACKOFFICE_PERMISSIONS);
-const READ_ONLY_BACKOFFICE_PERMISSIONS = ALL_BACKOFFICE_PERMISSIONS.filter((id) =>
-  id.endsWith(".view"),
-);
-
-/**
- * Selection presets for the permission-assignment UI. Consumers resolve
- * these ids against their own `permission` table rows (the DB, not this
- * package, owns the ULIDs) — see `GET /backoffice/permissions/backoffice`
- * in dealernode-backend.
- */
-export const BACKOFFICE_PERMISSION_PRESETS = {
-  /** Every `*.view` permission, nothing else. */
-  READ_ONLY: READ_ONLY_BACKOFFICE_PERMISSIONS,
-  /** Read-only plus the two areas support routinely needs to act on. */
-  SUPPORT: [
-    ...READ_ONLY_BACKOFFICE_PERMISSIONS,
-    BACKOFFICE_PERMISSIONS.DEALERS.MANAGE,
-    BACKOFFICE_PERMISSIONS.DEALER_RESOURCES.MANAGE,
-    BACKOFFICE_PERMISSIONS.DEALER_RELATIONSHIPS.MANAGE,
-  ],
-  /** Every backoffice permission. */
-  ADMIN: ALL_BACKOFFICE_PERMISSIONS,
-} as const satisfies Record<string, readonly BackofficePermissionId[]>;

package/src/index.ts

@@ -1,7 +0,0 @@
-export { PERMISSIONS, Permission } from './permissions';
-export {
-  BACKOFFICE_PERMISSIONS,
-  BackofficePermission,
-  BackofficePermissionId,
-  BACKOFFICE_PERMISSION_PRESETS,
-} from './backoffice-permissions';

package/src/permissions.ts

@@ -1,884 +0,0 @@
-export const PERMISSIONS = {
-  // ============================================
-  // GLOBAL
-  // ============================================
-  GLOBAL: {
-    PERMISSIONS: {
-      MANAGE: "global.permissions.manage",
-    },
-  },
-
-  // ============================================
-  // USER
-  // ============================================
-  USER: {
-    OPERATIONS: {
-      VIEW: "user.operations.view",
-      CREATE: "user.operations.create",
-    },
-    FILES: {
-      UPLOAD: "user.files.upload",
-      DOWNLOAD: "user.files.download",
-      DELETE: "user.files.delete",
-    },
-    DEALER: {
-      OPERATIONS: {
-        VIEW: "user.dealer.operations.view",
-        ASSIGN: "user.dealer.operations.assign",
-        UPDATE: "user.dealer.operations.update",
-        UNASSIGN: "user.dealer.operations.unassign",
-        ACTIVATE: "user.dealer.operations.activate",
-        DEACTIVATE: "user.dealer.operations.deactivate",
-      },
-      ACTOR_TYPE: {
-        VIEW: "user.dealer.actor_type.view",
-        ASSIGN: "user.dealer.actor_type.assign",
-        DELETE: "user.dealer.actor_type.delete",
-      },
-    },
-  },
-
-  // ============================================
-  // COMMISSION
-  // ============================================
-  COMMISSION: {
-    OPERATIONS: {
-      VIEW: "commission.operations.view",
-      CREATE: "commission.operations.create",
-      UPDATE: "commission.operations.update",
-      DELETE: "commission.operations.delete",
-      APPROVE: "commission.operations.approve",
-      REVERT_APPROVE: "commission.operations.revert_approve",
-      PAY: "commission.operations.pay",
-      REVERT_PAY: "commission.operations.revert-pay",
-    },
-    DEAL_COMMISSION: {
-      OPERATIONS: {
-        VIEW: "commission.deal_commission.operations.view",
-        CREATE: "commission.deal_commission.operations.create",
-        UPDATE: "commission.deal_commission.operations.update",
-        DELETE: "commission.deal_commission.operations.delete",
-      },
-    },
-    CAR_COMMISSION: {
-      OPERATIONS: {
-        VIEW: "commission.car_commission.operations.view",
-        CREATE: "commission.car_commission.operations.create",
-        UPDATE: "commission.car_commission.operations.update",
-        DELETE: "commission.car_commission.operations.delete",
-      },
-    },
-    EXTRA_COMMISSION: {
-      OPERATIONS: {
-        VIEW: "commission.extra_commission.operations.view",
-        CREATE: "commission.extra_commission.operations.create",
-        UPDATE: "commission.extra_commission.operations.update",
-        DELETE: "commission.extra_commission.operations.delete",
-      },
-    },
-    SALARY: {
-      OPERATIONS: {
-        VIEW: "commission.salary.operations.view",
-        CREATE: "commission.salary.operations.create",
-        UPDATE: "commission.salary.operations.update",
-        DELETE: "commission.salary.operations.delete",
-      },
-    },
-    SALARYS_CHEDULE: {
-      OPERATIONS: {
-        VIEW: "commission.salary_schedule.operations.view",
-        CREATE: "commission.salary_schedule.operations.create",
-        UPDATE: "commission.salary_schedule.operations.update",
-        DELETE: "commission.salary_schedule.operations.delete",
-      },
-    },
-    USER_DEALER_SALARY: {
-      OPERATIONS: {
-        VIEW: "commission.user_dealer_salary.operations.view",
-        CREATE: "commission.user_dealer_salary.operations.create",
-        UPDATE: "commission.user_dealer_salary.operations.update",
-        DELETE: "commission.user_dealer_salary.operations.delete",
-      },
-    },
-    CATEGORY: {
-      VIEW: "commission.category.view",
-      MANAGE: "commission.category.manage",
-    },
-  },
-
-  // ============================================
-  // DEALER
-  // ============================================
-  DEALER: {
-    OPERATIONS: {
-      VIEW: "dealer.operations.view",
-      CREATE: "dealer.operations.create",
-      UPDATE: "dealer.operations.update",
-      DELETE: "dealer.operations.delete",
-    },
-    FILES: {
-      UPLOAD: "dealer.files.upload",
-      DOWNLOAD: "dealer.files.download",
-      DELETE: "dealer.files.delete",
-    },
-    ONBOARDING: {
-      SUBMIT: "dealer.onboarding.submit",
-      APPROVE: "dealer.onboarding.approve",
-      REJECT: "dealer.onboarding.reject",
-      ACTIVATE: "dealer.onboarding.activate",
-      REVERT: "dealer.onboarding.revert",
-    },
-    LICENSE: {
-      VIEW: "dealer.license.view",
-      CREATE: "dealer.license.create",
-      UPDATE: "dealer.license.update",
-      DELETE: "dealer.license.delete",
-    },
-    INTEGRATIONS: {
-      VIEW: "dealer.integrations.view",
-      MANAGE: "dealer.integrations.manage",
-    },
-  },
-
-  // ============================================
-  // CLIENT
-  // ============================================
-  CLIENT: {
-    OPERATIONS: {
-      VIEW: "client.operations.view",
-      MANAGE: "client.operations.manage",
-    },
-  },
-
-  // ============================================
-  // BANK
-  // ============================================
-  BANK: {
-    OPERATIONS: {
-      VIEW: "bank.operations.view",
-      MANAGE: "bank.operations.manage",
-    },
-  },
-
-  // ============================================
-  // AGENCY
-  // ============================================
-  AGENCY: {
-    OPERATIONS: {
-      VIEW: "agency.operations.view",
-      MANAGE: "agency.operations.manage",
-    },
-  },
-
-  // ============================================
-  // PLATE ORIGIN
-  // ============================================
-  PLATE_ORIGIN: {
-    OPERATIONS: {
-      VIEW: "plate-origin.operations.view",
-      MANAGE: "plate-origin.operations.manage",
-    },
-  },
-
-  // ============================================
-  // ARBITRATION
-  // ============================================
-  ARBITRATION: {
-    OPERATIONS: {
-      VIEW: "arbitration.operations.view",
-      MANAGE: "arbitration.operations.manage",
-      DELETE: "arbitration.operations.delete",
-    },
-    FILES: {
-      UPLOAD: "arbitration.files.upload",
-      DOWNLOAD: "arbitration.files.download",
-      DELETE: "arbitration.files.delete",
-    },
-  },
-
-  // ============================================
-  // ARBITRATION ISSUE TYPE
-  // ============================================
-  ARBITRATION_ISSUE_TYPE: {
-    OPERATIONS: {
-      VIEW: "arbitration-issue-type.operations.view",
-      MANAGE: "arbitration-issue-type.operations.manage",
-    },
-  },
-
-  // ============================================
-  // DEAL
-  // ============================================
-  DEAL: {
-    VIEW: {
-      TRADE: "deal.view.trade",
-      EXTRAS: "deal.view.extras",
-      GPS: "deal.view.gps",
-    },
-    OPERATIONS: {
-      VIEW: "deal.operations.view",
-      VIEW_MY_DEALS: "deal.operations.view_my_deals",
-    },
-    FILES: {
-      UPLOAD: "deal.files.upload",
-      DOWNLOAD: "deal.files.download",
-      DELETE: "deal.files.delete",
-    },
-    PLATE: {
-      OPERATIONS: {
-        VIEW: "deal.plate.operations.view",
-        VIEW_MY_PLATES: "deal.plate.operations.view_my_plates",
-        CREATE: "deal.plate.operations.create",
-        UPDATE: "deal.plate.operations.update",
-        DELETE: "deal.plate.operations.delete",
-        PAY: "deal.plate.operations.pay",
-        CANCEL: "deal.plate.operations.cancel",
-      },
-    },
-    PICKUP_PAYMENT: {
-      OPERATIONS: {
-        VIEW: "deal.pickup_payment.operations.view",
-        PAY: "deal.pickup_payment.operations.pay",
-        CANCEL: "deal.pickup_payment.operations.cancel",
-      },
-    },
-    FINANCED: {
-      OPERATIONS: {
-        VIEW: "deal.financed.operations.view",
-        VIEW_MY_DEALS: "deal.financed.operations.view_my_deals",
-        CREATE: "deal.financed.operations.create",
-        UPDATE: "deal.financed.operations.update",
-        UPDATE_LIMITED: "deal.financed.operations.update_limited",
-        ACCEPT: "deal.financed.operations.accept",
-        FUND: "deal.financed.operations.fund",
-        BOOK: "deal.financed.operations.book",
-        TO_FAILED_DEAL: "deal.financed.operations.to_failed_deal",
-        MANAGE: "deal.financed.operations.manage",
-      },
-    },
-    SPOT: {
-      OPERATIONS: {
-        VIEW: "deal.spot.operations.view",
-        VIEW_MY_DEALS: "deal.spot.operations.view_my_deals",
-        CREATE: "deal.spot.operations.create",
-        UPDATE: "deal.spot.operations.update",
-        UPDATE_LIMITED: "deal.spot.operations.update_limited",
-        ACCEPT: "deal.spot.operations.accept",
-        TRANSFORM: "deal.spot.operations.transform",
-        TO_FAILED_DEAL: "deal.spot.operations.to_failed_deal",
-        MANAGE: "deal.spot.operations.manage",
-      },
-    },
-    CASH: {
-      OPERATIONS: {
-        VIEW: "deal.cash.operations.view",
-        VIEW_MY_DEALS: "deal.cash.operations.view_my_deals",
-        CREATE: "deal.cash.operations.create",
-        UPDATE: "deal.cash.operations.update",
-        UPDATE_LIMITED: "deal.cash.operations.update_limited",
-        ACCEPT: "deal.cash.operations.accept",
-        TO_FAILED_DEAL: "deal.cash.operations.to_failed_deal",
-        MANAGE: "deal.cash.operations.manage",
-      },
-    },
-    BHPH: {
-      OPERATIONS: {
-        VIEW: "deal.bhph.operations.view",
-        VIEW_MY_DEALS: "deal.bhph.operations.view_my_deals",
-        CREATE: "deal.bhph.operations.create",
-        UPDATE: "deal.bhph.operations.update",
-        UPDATE_LIMITED: "deal.bhph.operations.update_limited",
-        ACCEPT: "deal.bhph.operations.accept",
-        TO_FAILED_DEAL: "deal.bhph.operations.to_failed_deal",
-        MANAGE: "deal.bhph.operations.manage",
-      },
-      PAYMENTS: {
-        VIEW: "deal.bhph.payments.view",
-        PAY: "deal.bhph.payments.pay",
-        CANCEL: "deal.bhph.payments.cancel",
-      },
-    },
-    GPS: {
-      OPERATIONS: {
-        VIEW: "deal.gps.operations.view",
-        CREATE: "deal.gps.operations.create",
-      },
-    },
-    TRADE: {
-      OPERATIONS: {
-        VIEW: "deal.trade.operations.view",
-        CREATE: "deal.trade.operations.create",
-      },
-    },
-    RESOURCES: {
-      EXTRA: {
-        VIEW: "deal.resources.extra.view",
-        MANAGE: "deal.resources.extra.manage",
-      },
-      ACTOR_TYPE: {
-        VIEW: "deal.resources.actor_type.view",
-        MANAGE: "deal.resources.actor_type.manage",
-      },
-    },
-    PAYMENT: {
-      OPERATIONS: {
-        VIEW: "deal.payment.operations.view",
-        MANAGE: "deal.payment.operations.manage",
-      },
-    },
-    COMMENT: {
-      VIEW: "deal.comment.view",
-      CREATE: "deal.comment.create",
-      UPDATE: "deal.comment.update",
-      DELETE: "deal.comment.delete",
-    },
-  },
-
-  // ============================================
-  // FAIL DEAL
-  // ============================================
-  FAIL_DEAL: {
-    UNWIND: {
-      OPERATIONS: {
-        VIEW: "fail_deal.unwind.operations.view",
-        VIEW_MY_DEALS: "fail_deal.unwind.operations.view_my_deals",
-        MANAGE: "fail_deal.unwind.operations.manage",
-      },
-      FILES: {
-        UPLOAD: "fail_deal.unwind.files.upload",
-        DOWNLOAD: "fail_deal.unwind.files.download",
-        DELETE: "fail_deal.unwind.files.delete",
-      },
-      RESOURCES: {
-        EXTRA: {
-          VIEW: "fail_deal.unwind.resources.extra.view",
-          MANAGE: "fail_deal.unwind.resources.extra.manage",
-        },
-      },
-    },
-    DEAD_DEAL: {
-      RESOURCES: {
-        EXTRA: {
-          VIEW: "fail_deal.dead_deal.resources.extra.view",
-          MANAGE: "fail_deal.dead_deal.resources.extra.manage",
-        },
-      },
-      OPERATIONS: {
-        VIEW: "fail_deal.dead_deal.operations.view",
-        VIEW_MY_DEALS: "fail_deal.dead_deal.operations.view_my_deals",
-        MANAGE: "fail_deal.dead_deal.operations.manage",
-      },
-    },
-    BUY_BACK: {
-      OPERATIONS: {
-        VIEW_MY_DEALS: "fail_deal.buy_back.operations.view_my_deals",
-        VIEW: "fail_deal.buy_back.operations.view",
-        MANAGE: "fail_deal.buy_back.operations.manage",
-      },
-      RESOURCES: {
-        EXTRA: {
-          VIEW: "fail_deal.buy_back.resources.extra.view",
-          MANAGE: "fail_deal.buy_back.resources.extra.manage",
-        },
-      },
-    },
-  },
-
-  // ============================================
-  // PAYMENT
-  // ============================================
-  PAYMENT: {
-    OPERATIONS: {
-      VIEW: "payment.operations.view",
-      MANAGE: "payment.operations.manage",
-    },
-    CONNECTED_ACCOUNT: {
-      VIEW: "payment.connected-account.view",
-      CREATE: "payment.connected-account.create",
-      SYNC: "payment.connected-account.sync",
-    },
-    CUSTOMER: {
-      VIEW: "payment.customer.view",
-      CREATE: "payment.customer.create",
-    },
-    PAYMENT_INTENT: {
-      VIEW: "payment.payment-intent.view",
-      CREATE: "payment.payment-intent.create",
-      CONFIRM: "payment.payment-intent.confirm",
-      CANCEL: "payment.payment-intent.cancel",
-      SYNC: "payment.payment-intent.sync",
-    },
-    PAYMENT_METHOD: {
-      VIEW: "payment.payment-method.view",
-      ATTACH: "payment.payment-method.attach",
-      DELETE: "payment.payment-method.delete",
-    },
-    PAYMENT_LINK: {
-      VIEW: "payment.payment-link.view",
-      CREATE: "payment.payment-link.create",
-    },
-    SCHEDULE: {
-      VIEW: "payment.schedule.view",
-      CREATE: "payment.schedule.create",
-      DELETE: "payment.schedule.delete",
-    },
-    SUBSCRIPTION: {
-      VIEW: "payment.subscription.view",
-      CREATE: "payment.subscription.create",
-      DELETE: "payment.subscription.delete",
-    },
-    DISPUTE: {
-      VIEW: "payment.dispute.view",
-      MANAGE: "payment.dispute.manage",
-    },
-    REFUND: {
-      VIEW: "payment.refund.view",
-      MANAGE: "payment.refund.manage",
-    },
-    MANUAL: {
-      CHECK: {
-        VIEW: "payment.manual.check.view",
-        PROCESS: "payment.manual.check.process",
-      },
-      CASH: {
-        VIEW: "payment.manual.cash.view",
-        PROCESS: "payment.manual.cash.process",
-      },
-      DIGITAL: {
-        VIEW: "payment.manual.digital.view",
-        PROCESS: "payment.manual.digital.process",
-      },
-    },
-    SPLIT: {
-      VIEW: "payment.split.view",
-      MANAGE: "payment.split.manage",
-    },
-    TERMINAL: {
-      LOCATION: {
-        VIEW: "payment.terminal.location.view",
-        CREATE: "payment.terminal.location.create",
-      },
-      READER: {
-        VIEW: "payment.terminal.reader.view",
-        CREATE: "payment.terminal.reader.create",
-        DELETE: "payment.terminal.reader.delete",
-      },
-      PAYMENT: {
-        VIEW: "payment.terminal.payment.view",
-        PROCESS: "payment.terminal.payment.process",
-      },
-      PIN: {
-        MANAGE_ALL: "payment.terminal.pin.manage_all",
-      },
-      DEVICE: {
-        PROVISION: "payment.terminal.device.provision",
-      },
-    },
-    BILLING: {
-      MANAGE: "payment.billing.manage",
-    },
-    FILES: {
-      UPLOAD: "payment.files.upload",
-      DOWNLOAD: "payment.files.download",
-      DELETE: "payment.files.delete",
-    },
-  },
-
-  // ============================================
-  // CAR
-  // ============================================
-  CAR: {
-    OPERATIONS: {
-      VIEW: "car.operations.view",
-    },
-    INVENTORY: {
-      VIEW: {
-        EXTRA: "car.inventory.view.extra",
-      },
-      OPERATIONS: {
-        VIEW: "car.inventory.operations.view",
-        VIEW_OPERATIONS: "car.inventory.operations.view_operations",
-        CREATE: "car.inventory.operations.create",
-        UPDATE: "car.inventory.operations.update",
-        DELETE: "car.inventory.operations.delete",
-        RESTORE: "car.inventory.operations.restore",
-        VALIDATE_VIN: "car.inventory.operations.validate_vin",
-      },
-      FILES: {
-        UPLOAD: "car.inventory.files.upload",
-        DOWNLOAD: "car.inventory.files.download",
-        DELETE: "car.inventory.files.delete",
-      },
-    },
-    EXTRA: {
-      OPERATIONS: {
-        CREATE: "car.extra.operations.create",
-      },
-    },
-    GPS: {
-      OPERATIONS: {
-        VIEW: "car.gps.operations.view",
-        CREATE: "car.gps.operations.create",
-      },
-    },
-    WORKSHOP: {
-      OPERATIONS: {
-        CREATE: "car.workshop.operations.create",
-        UPDATE: "car.workshop.operations.update",
-        DELETE: "car.workshop.operations.delete",
-      },
-      COSTS: {
-        CREATE: "car.workshop.costs.create",
-        UPDATE: "car.workshop.costs.update",
-        DELETE: "car.workshop.costs.delete",
-      },
-      COST_TEMPLATES: {
-        CREATE: "car.workshop.cost_templates.create",
-        UPDATE: "car.workshop.cost_templates.update",
-        DELETE: "car.workshop.cost_templates.delete",
-      },
-    },
-    TRADE: {
-      OPERATIONS: {
-        VIEW: "car.trade.operations.view",
-        CREATE: "car.trade.operations.create",
-        DELETE: "car.trade.operations.delete",
-        TRANSFORM: "car.trade.operations.transform",
-      },
-    },
-    DRAFT: {
-      OPERATIONS: {
-        VIEW: "car.draft.operations.view",
-        CREATE: "car.draft.operations.create",
-        UPDATE: "car.draft.operations.update",
-        DELETE: "car.draft.operations.delete",
-        PUBLISH: "car.draft.operations.publish",
-      },
-    },
-    TRANSIT: {
-      VIEW: {
-        EXTRA: "car.transit.view.extra",
-      },
-      OPERATIONS: {
-        CREATE: "car.transit.operations.create",
-        UPDATE: "car.transit.operations.update",
-        DELETE: "car.transit.operations.delete",
-        ARRIVE: "car.transit.operations.arrive",
-        VIEW: "car.transit.operations.view",
-      },
-      COSTS: {
-        CREATE: "car.transit.costs.create",
-        UPDATE: "car.transit.costs.update",
-        DELETE: "car.transit.costs.delete",
-      },
-      COST_TEMPLATES: {
-        CREATE: "car.transit.cost_templates.create",
-        UPDATE: "car.transit.cost_templates.update",
-        DELETE: "car.transit.cost_templates.delete",
-      },
-    },
-    RESOURCES: {
-      BRAND: {
-        VIEW: "car.resources.brand.view",
-        MANAGE: "car.resources.brand.manage",
-      },
-      MODEL: {
-        VIEW: "car.resources.model.view",
-        MANAGE: "car.resources.model.manage",
-      },
-      TRIM: {
-        VIEW: "car.resources.trim.view",
-        MANAGE: "car.resources.trim.manage",
-      },
-      STYLE: {
-        VIEW: "car.resources.style.view",
-        MANAGE: "car.resources.style.manage",
-      },
-      TITLE: {
-        VIEW: "car.resources.title.view",
-        MANAGE: "car.resources.title.manage",
-      },
-      FUEL_TYPE: {
-        VIEW: "car.resources.fuel_type.view",
-        MANAGE: "car.resources.fuel_type.manage",
-      },
-      COLOR: {
-        VIEW: "car.resources.color.view",
-        MANAGE: "car.resources.color.manage",
-      },
-      FLOOR: {
-        VIEW: "car.resources.floor.view",
-        MANAGE: "car.resources.floor.manage",
-      },
-      PURCHASE_SOURCE: {
-        VIEW: "car.resources.purchase_source.view",
-        MANAGE: "car.resources.purchase_source.manage",
-      },
-      EXTRA: {
-        VIEW: "car.resources.extra.view",
-        MANAGE: "car.resources.extra.manage",
-      },
-    },
-    COMMENT: {
-      VIEW: "car.comment.view",
-      CREATE: "car.comment.create",
-      UPDATE: "car.comment.update",
-      DELETE: "car.comment.delete",
-    },
-    REPOSSESSION: {
-      OPERATIONS: {
-        VIEW: "car.repossession.operations.view",
-      },
-    },
-  },
-
-  // ============================================
-  // INVITATION
-  // ============================================
-  INVITATION: {
-    OPERATIONS: {
-      VIEW: "invitation.operations.view",
-      CREATE: "invitation.operations.create",
-      REVOKE: "invitation.operations.revoke",
-    },
-  },
-
-  // ============================================
-  // WORKFLOW
-  // ============================================
-  WORKFLOW: {
-    OPERATIONS: {
-      VIEW: "workflow.operations.view",
-      MANAGE: "workflow.operations.manage",
-    },
-  },
-
-  // ============================================
-  // WHOLESALE
-  // ============================================
-  WHOLESALE: {
-    OPERATIONS: {
-      VIEW: "wholesale.operations.view",
-      MANAGE: "wholesale.operations.manage",
-      PAYMENT: "wholesale.operations.payment",
-    },
-    FILES: {
-      UPLOAD: "wholesale.files.upload",
-      DOWNLOAD: "wholesale.files.download",
-      DELETE: "wholesale.files.delete",
-    },
-    TARGET: {
-      VIEW: "wholesale.target.view",
-      MANAGE: "wholesale.target.manage",
-    },
-    INVITATION: {
-      MANAGE: "wholesale.invitation.manage",
-    },
-    MANUAL: {
-      OPERATIONS: {
-        VIEW: "manual_wholesale.operations.view",
-        MANAGE: "manual_wholesale.operations.manage",
-      },
-    },
-    AUTOMATIC: {
-      OPERATIONS: {
-        VIEW: "automatic_wholesale.operations.view",
-        MANAGE: "automatic_wholesale.operations.manage",
-      },
-    },
-  },
-
-  // ============================================
-  // TRANSFER_CAR
-  // ============================================
-  TRANSFER_CAR: {
-    OPERATIONS: {
-      VIEW: "transfer_car.operations.view",
-      MANAGE: "transfer_car.operations.manage",
-    },
-    INVITATION: {
-      MANAGE: "transfer_car.invitation.manage",
-    },
-  },
-
-  // ============================================
-  // DEALER RELATIONSHIP
-  // ============================================
-  DEALER_RELATIONSHIP: {
-    OPERATIONS: {
-      VIEW: "dealer_relationship.operations.view",
-    },
-    RESOURCE: {
-      VIEW_INVENTORY: "dealer_relationship.resource.view_inventory",
-      TRANSFER_CAR: "dealer_relationship.resource.transfer_car",
-      AUTO_APPROVE_TRANSFER_CAR:
-        "dealer_relationship.resource.auto_approve_transfer_car",
-      CREATE_WHOLESALE_DEAL:
-        "dealer_relationship.resource.create_wholesale_deal",
-      APPROVE_WHOLESALE_DEAL:
-        "dealer_relationship.resource.approve_wholesale_deal",
-      VIEW_SHARED_DEALS: "dealer_relationship.resource.view_shared_deals",
-      VIEW_SHARED_FAILED_DEALS:
-        "dealer_relationship.resource.view_shared_failed_deals",
-      USE_BANKS: "dealer_relationship.resource.use_banks",
-      UNIQUE_VIN: "dealer_relationship.resource.unique_vin",
-      VIEW_GPS: "dealer_relationship.resource.view_gps",
-      CREATE_GPS: "dealer_relationship.resource.create_gps",
-      VIEW_PLATES: "dealer_relationship.resource.view_plates",
-      VIEW_ARBITRATIONS: "dealer_relationship.resource.view_arbitrations",
-    },
-  },
-
-  // ============================================
-  // DEALER GROUP
-  // ============================================
-  DEALER_GROUP: {
-    OPERATIONS: {
-      VIEW: "dealer_group.operations.view",
-      CREATE: "dealer_group.operations.create",
-      UPDATE: "dealer_group.operations.update",
-      DELETE: "dealer_group.operations.delete",
-    },
-    MEMBERS: {
-      INVITE: "dealer_group.members.invite",
-      REQUEST_JOIN: "dealer_group.members.request_join",
-      ACCEPT: "dealer_group.members.accept",
-      REJECT: "dealer_group.members.reject",
-      REMOVE: "dealer_group.members.remove",
-    },
-    USERS: {
-      VIEW: "dealer_group.users.view",
-      MANAGE: "dealer_group.users.manage",
-    },
-  },
-
-  // ============================================
-  // ANALYTICS
-  // ============================================
-  ANALYTICS: {
-    OPERATIONS: {
-      VIEW: "analytics.operations.view",
-      MANAGE: "analytics.operations.manage",
-    },
-    ASSISTANT: {
-      OPERATIONS: {
-        USE: "analytics.assistant.operations.use",
-        EXPORT: "analytics.assistant.operations.export",
-        EMAIL: "analytics.assistant.operations.email",
-      },
-    },
-  },
-
-  // ============================================
-  // AUTHORIZATION
-  // ============================================
-  AUTHORIZATION: {
-    ROLE: {
-      VIEW: "authorization.role.view",
-      CREATE: "authorization.role.create",
-      UPDATE: "authorization.role.update",
-      DELETE: "authorization.role.delete",
-      ASSIGN: "authorization.role.assign",
-      UNASSIGN: "authorization.role.unassign",
-      SYNC_DIRECT: "authorization.role.sync_direct",
-      SYNC_REQUEST: "authorization.role.sync_request",
-    },
-    PERMISSION: {
-      VIEW: "authorization.permission.view",
-      CREATE: "authorization.permission.create",
-    },
-    USER_DEALER_PERMISSION: {
-      VIEW: "authorization.user_dealer_permission.view",
-      ASSIGN: "authorization.user_dealer_permission.assign",
-      DELETE: "authorization.user_dealer_permission.delete",
-    },
-  },
-
-  // ============================================
-  // AUTOMATIC_ACTION
-  // ============================================
-  AUTOMATIC_ACTION: {
-    OPERATIONS: {
-      VIEW: "automatic_action.operations.view",
-      DELETE: "automatic_action.operations.delete",
-      EXECUTE: "automatic_action.operations.execute",
-    },
-  },
-
-  // ============================================
-  // CALENDAR
-  // ============================================
-  CALENDAR: {
-    OPERATIONS: {
-      VIEW: "calendar.operations.view",
-      UPDATE: "calendar.operations.update",
-    },
-  },
-
-  // ============================================
-  // NOTIFICATION
-  // ============================================
-  NOTIFICATION: {
-    ROUTING: {
-      VIEW: "notification.routing.view",
-      MANAGE: "notification.routing.manage",
-    },
-    CONFIG: {
-      VIEW: "notification.config.view",
-      MANAGE: "notification.config.manage",
-    },
-  },
-
-  // ============================================
-  // GPS PROVIDER
-  // ============================================
-  // ============================================
-  // OTHER (comments on client, wholesale, etc.)
-  // ============================================
-  OTHER: {
-    COMMENT: {
-      VIEW: "other.comment.view",
-      CREATE: "other.comment.create",
-      UPDATE: "other.comment.update",
-      DELETE: "other.comment.delete",
-    },
-  },
-
-  GPS_PROVIDER: {
-    CONFIG: {
-      OPERATIONS: {
-        CREATE: "gps-provider.config.operations.create",
-        VIEW: "gps-provider.config.operations.view",
-        UPDATE: "gps-provider.config.operations.update",
-        DELETE: "gps-provider.config.operations.delete",
-      },
-    },
-    DEVICE: {
-      OPERATIONS: {
-        VIEW: "gps-provider.device.operations.view",
-        LOCATE: "gps-provider.device.operations.locate",
-        ACTIVATE: "gps-provider.device.operations.activate",
-        RESET_MILEAGE: "gps-provider.device.operations.reset_mileage",
-      },
-    },
-  },
-
-  // ============================================
-  // CRM
-  // ============================================
-  CRM: {
-    CONVERSATION: {
-      OPERATIONS: {
-        VIEW: "crm.conversation.operations.view",
-        REPLY: "crm.conversation.operations.reply",
-      },
-    },
-    CALL: {
-      OPERATIONS: {
-        USE: "crm.call.operations.use",
-      },
-    },
-  },
-} as const;
-
-export type Permission = typeof PERMISSIONS;

package/tsconfig.json

@@ -1,12 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "es2016",
-    "module": "commonjs",
-    "declaration": true,
-    "outDir": "./dist",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true
-  },
-  "include": ["src"]
-}