@telos-dev-team/dealernode-permissions 1.1.60 → 1.1.62

package/dist/backoffice-permissions.d.ts

@@ -150,6 +150,40 @@ export declare const BACKOFFICE_PERMISSIONS: {
         readonly VIEW: "backoffice.dealer_notifications.view";
         readonly MANAGE: "backoffice.dealer_notifications.manage";
     };
+    /**
+     * AI agents (DealerNode-AI) operated from the backoffice (A48). Reading, config,
+     * customer-data (PII) and actions that reach the outside world are separate keys
+     * on purpose. The data and logic stay in DealerNode-AI; the backoffice is a BFF.
+     */
+    readonly AGENTS: {
+        /** Read everything that is not PII nor costs: summary, line, features, config,
+         *  voice, KB, prompt, tools, events, assistant prompt, jobs, watchers, health,
+         *  models, deployment. */
+        readonly VIEW: "backoffice.agents.view";
+        /** Posventa config, voice, template, KB (incl. import). Changes what the agent
+         *  says to real customers. */
+        readonly CONFIG_MANAGE: "backoffice.agents.config.manage";
+        /** Per-dealer features and limits. Turns on automatic calls and mass messaging. */
+        readonly FEATURES_MANAGE: "backoffice.agents.features.manage";
+        /** Activity, transcripts, assistant threads. PII: names, phones, message and
+         *  call content. */
+        readonly CONVERSATIONS_VIEW: "backoffice.agents.conversations.view";
+        /** Simulator, voice test, test a question against the KB. Calls the real model;
+         *  the voice test calls a real phone. */
+        readonly SIMULATE: "backoffice.agents.simulate";
+        /** Chat with a dealer's assistant as the operator, with Admin powers (can send
+         *  SMS and emails to that dealer's customers). */
+        readonly ASSISTANT_OPERATE: "backoffice.agents.assistant.operate";
+        /** Jobs, watchers, silences. Turns on real alerts to staff. */
+        readonly JOBS_MANAGE: "backoffice.agents.jobs.manage";
+        /** Onboarding, provisioning, line maintenance, suspend/reactivate. Buys numbers,
+         *  suspends lines. */
+        readonly LIFECYCLE_MANAGE: "backoffice.agents.lifecycle.manage";
+        /** Models, provider keys, prices. Global: affects every dealer and the bill. */
+        readonly LLM_MANAGE: "backoffice.agents.llm.manage";
+        /** Costs. Billing data. */
+        readonly COSTS_VIEW: "backoffice.agents.costs.view";
+    };
 };
 export type BackofficePermission = typeof BACKOFFICE_PERMISSIONS;
 /**
@@ -168,11 +202,23 @@ export type BackofficePermissionId = Leaves<BackofficePermission>;
  * in dealernode-backend.
  */
 export declare const BACKOFFICE_PERMISSION_PRESETS: {
-    /** Every `*.view` permission, nothing else. */
-    readonly READ_ONLY: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[];
+    /**
+     * Every `*.view` permission except the sensitive ones
+     * (`SENSITIVE_VIEW_PERMISSIONS`: agent transcripts/PII and costs), nothing else.
+     */
+    readonly READ_ONLY: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage" | "backoffice.agents.view" | "backoffice.agents.config.manage" | "backoffice.agents.features.manage" | "backoffice.agents.conversations.view" | "backoffice.agents.simulate" | "backoffice.agents.assistant.operate" | "backoffice.agents.jobs.manage" | "backoffice.agents.lifecycle.manage" | "backoffice.agents.llm.manage" | "backoffice.agents.costs.view")[];
     /** Read-only plus the two areas support routinely needs to act on. */
-    readonly SUPPORT: readonly [...("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[], "backoffice.dealers.manage", "backoffice.dealer_resources.manage", "backoffice.dealer_relationships.manage", "backoffice.dealer_integrations.manage"];
+    readonly SUPPORT: readonly [...("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage" | "backoffice.agents.view" | "backoffice.agents.config.manage" | "backoffice.agents.features.manage" | "backoffice.agents.conversations.view" | "backoffice.agents.simulate" | "backoffice.agents.assistant.operate" | "backoffice.agents.jobs.manage" | "backoffice.agents.lifecycle.manage" | "backoffice.agents.llm.manage" | "backoffice.agents.costs.view")[], "backoffice.dealers.manage", "backoffice.dealer_resources.manage", "backoffice.dealer_relationships.manage", "backoffice.dealer_integrations.manage"];
+    /**
+     * Operating a dealer's AI agents (A48) end to end: read, configure, simulate,
+     * operate the assistant, manage jobs and lifecycle, and see conversations (PII)
+     * and costs. Deliberately WITHOUT `AGENTS.LLM_MANAGE` — models, provider keys
+     * and prices are global (every dealer and the platform bill), which is
+     * platform-admin territory, not day-to-day AI operation. Explicit list (like
+     * SUPPORT), not derived, so adding an `agents.*` key never silently widens it.
+     */
+    readonly AI_SUPPORT: readonly ["backoffice.agents.view", "backoffice.agents.conversations.view", "backoffice.agents.costs.view", "backoffice.agents.config.manage", "backoffice.agents.features.manage", "backoffice.agents.simulate", "backoffice.agents.assistant.operate", "backoffice.agents.jobs.manage", "backoffice.agents.lifecycle.manage"];
     /** Every backoffice permission. */
-    readonly ADMIN: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage")[];
+    readonly ADMIN: ("backoffice.dealers.view" | "backoffice.dealers.manage" | "backoffice.users.view" | "backoffice.users.manage" | "backoffice.permissions.manage" | "backoffice.payments.view" | "backoffice.payments.manage" | "backoffice.dealer_resources.view" | "backoffice.dealer_resources.manage" | "backoffice.catalog.view" | "backoffice.catalog.manage" | "backoffice.dealer_roles.view" | "backoffice.dealer_roles.manage" | "backoffice.dealer_members.view" | "backoffice.dealer_members.manage" | "backoffice.dealer_relationships.view" | "backoffice.dealer_relationships.manage" | "backoffice.dealer_groups.view" | "backoffice.dealer_groups.manage" | "backoffice.workflows.view" | "backoffice.workflows.manage" | "backoffice.billing.view" | "backoffice.billing.manage" | "backoffice.billing.credentials" | "backoffice.dealer_integrations.view" | "backoffice.dealer_integrations.manage" | "backoffice.emails.view" | "backoffice.dealer_notifications.view" | "backoffice.dealer_notifications.manage" | "backoffice.agents.view" | "backoffice.agents.config.manage" | "backoffice.agents.features.manage" | "backoffice.agents.conversations.view" | "backoffice.agents.simulate" | "backoffice.agents.assistant.operate" | "backoffice.agents.jobs.manage" | "backoffice.agents.lifecycle.manage" | "backoffice.agents.llm.manage" | "backoffice.agents.costs.view")[];
 };
 export {};

package/dist/backoffice-permissions.js

@@ -153,6 +153,40 @@ exports.BACKOFFICE_PERMISSIONS = {
         VIEW: "backoffice.dealer_notifications.view",
         MANAGE: "backoffice.dealer_notifications.manage",
     },
+    /**
+     * AI agents (DealerNode-AI) operated from the backoffice (A48). Reading, config,
+     * customer-data (PII) and actions that reach the outside world are separate keys
+     * on purpose. The data and logic stay in DealerNode-AI; the backoffice is a BFF.
+     */
+    AGENTS: {
+        /** Read everything that is not PII nor costs: summary, line, features, config,
+         *  voice, KB, prompt, tools, events, assistant prompt, jobs, watchers, health,
+         *  models, deployment. */
+        VIEW: "backoffice.agents.view",
+        /** Posventa config, voice, template, KB (incl. import). Changes what the agent
+         *  says to real customers. */
+        CONFIG_MANAGE: "backoffice.agents.config.manage",
+        /** Per-dealer features and limits. Turns on automatic calls and mass messaging. */
+        FEATURES_MANAGE: "backoffice.agents.features.manage",
+        /** Activity, transcripts, assistant threads. PII: names, phones, message and
+         *  call content. */
+        CONVERSATIONS_VIEW: "backoffice.agents.conversations.view",
+        /** Simulator, voice test, test a question against the KB. Calls the real model;
+         *  the voice test calls a real phone. */
+        SIMULATE: "backoffice.agents.simulate",
+        /** Chat with a dealer's assistant as the operator, with Admin powers (can send
+         *  SMS and emails to that dealer's customers). */
+        ASSISTANT_OPERATE: "backoffice.agents.assistant.operate",
+        /** Jobs, watchers, silences. Turns on real alerts to staff. */
+        JOBS_MANAGE: "backoffice.agents.jobs.manage",
+        /** Onboarding, provisioning, line maintenance, suspend/reactivate. Buys numbers,
+         *  suspends lines. */
+        LIFECYCLE_MANAGE: "backoffice.agents.lifecycle.manage",
+        /** Models, provider keys, prices. Global: affects every dealer and the bill. */
+        LLM_MANAGE: "backoffice.agents.llm.manage",
+        /** Costs. Billing data. */
+        COSTS_VIEW: "backoffice.agents.costs.view",
+    },
 };
 function flatten(node) {
     const values = [];
@@ -168,7 +202,16 @@ function flatten(node) {
     return values;
 }
 const ALL_BACKOFFICE_PERMISSIONS = flatten(exports.BACKOFFICE_PERMISSIONS);
-const READ_ONLY_BACKOFFICE_PERMISSIONS = ALL_BACKOFFICE_PERMISSIONS.filter((id) => id.endsWith(".view"));
+/**
+ * `*.view` ids intentionally kept OUT of READ_ONLY: they expose customer PII
+ * (transcripts, call content) or billing data, which a plain read-only operator
+ * should not get just because the id ends in `.view`. ADMIN still includes them.
+ */
+const SENSITIVE_VIEW_PERMISSIONS = [
+    exports.BACKOFFICE_PERMISSIONS.AGENTS.CONVERSATIONS_VIEW,
+    exports.BACKOFFICE_PERMISSIONS.AGENTS.COSTS_VIEW,
+];
+const READ_ONLY_BACKOFFICE_PERMISSIONS = ALL_BACKOFFICE_PERMISSIONS.filter((id) => id.endsWith(".view") && !SENSITIVE_VIEW_PERMISSIONS.includes(id));
 /**
  * Selection presets for the permission-assignment UI. Consumers resolve
  * these ids against their own `permission` table rows (the DB, not this
@@ -176,7 +219,10 @@ const READ_ONLY_BACKOFFICE_PERMISSIONS = ALL_BACKOFFICE_PERMISSIONS.filter((id)
  * in dealernode-backend.
  */
 exports.BACKOFFICE_PERMISSION_PRESETS = {
-    /** Every `*.view` permission, nothing else. */
+    /**
+     * Every `*.view` permission except the sensitive ones
+     * (`SENSITIVE_VIEW_PERMISSIONS`: agent transcripts/PII and costs), nothing else.
+     */
     READ_ONLY: READ_ONLY_BACKOFFICE_PERMISSIONS,
     /** Read-only plus the two areas support routinely needs to act on. */
     SUPPORT: [
@@ -186,6 +232,25 @@ exports.BACKOFFICE_PERMISSION_PRESETS = {
         exports.BACKOFFICE_PERMISSIONS.DEALER_RELATIONSHIPS.MANAGE,
         exports.BACKOFFICE_PERMISSIONS.DEALER_INTEGRATIONS.MANAGE,
     ],
+    /**
+     * Operating a dealer's AI agents (A48) end to end: read, configure, simulate,
+     * operate the assistant, manage jobs and lifecycle, and see conversations (PII)
+     * and costs. Deliberately WITHOUT `AGENTS.LLM_MANAGE` — models, provider keys
+     * and prices are global (every dealer and the platform bill), which is
+     * platform-admin territory, not day-to-day AI operation. Explicit list (like
+     * SUPPORT), not derived, so adding an `agents.*` key never silently widens it.
+     */
+    AI_SUPPORT: [
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.VIEW,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.CONVERSATIONS_VIEW,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.COSTS_VIEW,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.CONFIG_MANAGE,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.FEATURES_MANAGE,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.SIMULATE,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.ASSISTANT_OPERATE,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.JOBS_MANAGE,
+        exports.BACKOFFICE_PERMISSIONS.AGENTS.LIFECYCLE_MANAGE,
+    ],
     /** Every backoffice permission. */
     ADMIN: ALL_BACKOFFICE_PERMISSIONS,
 };

package/dist/permissions.d.ts

@@ -579,12 +579,6 @@ export declare const PERMISSIONS: {
             readonly REVOKE: "invitation.operations.revoke";
         };
     };
-    readonly WORKFLOW: {
-        readonly OPERATIONS: {
-            readonly VIEW: "workflow.operations.view";
-            readonly MANAGE: "workflow.operations.manage";
-        };
-    };
     readonly WHOLESALE: {
         readonly OPERATIONS: {
             readonly VIEW: "wholesale.operations.view";

package/dist/permissions.js

@@ -628,15 +628,6 @@ exports.PERMISSIONS = {
         },
     },
     // ============================================
-    // WORKFLOW
-    // ============================================
-    WORKFLOW: {
-        OPERATIONS: {
-            VIEW: "workflow.operations.view",
-            MANAGE: "workflow.operations.manage",
-        },
-    },
-    // ============================================
     // WHOLESALE
     // ============================================
     WHOLESALE: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telos-dev-team/dealernode-permissions",
-  "version": "1.1.60",
+  "version": "1.1.62",
   "description": "Shared permissions constants for dealernode projects",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",