clarion-shared-types 1.0.102 → 1.0.104

package/dist/cjs/modules/permission/enums/permission-actions.enum.js

@@ -112,19 +112,108 @@ var PermissionActions;
     // Module: Notification
     // An organization's notification settings (clarion-notification): how its
     // emails are branded, the address they are sent from, and the sender ID its
-    // SMS arrive under. Mirrors grm-shared-library.
-    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
-    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    // SMS arrive under - one family per thing configured. Mirrors grm-shared-library.
+    PermissionActions["READ_NOTIFICATION_BRANDING"] = "read:notification-branding";
+    PermissionActions["UPDATE_NOTIFICATION_BRANDING"] = "update:notification-branding";
+    PermissionActions["CREATE_NOTIFICATION_EMAIL_SENDER"] = "create:notification-email-sender";
+    PermissionActions["READ_NOTIFICATION_EMAIL_SENDER"] = "read:notification-email-sender";
+    PermissionActions["UPDATE_NOTIFICATION_EMAIL_SENDER"] = "update:notification-email-sender";
+    PermissionActions["DELETE_NOTIFICATION_EMAIL_SENDER"] = "delete:notification-email-sender";
+    PermissionActions["CREATE_NOTIFICATION_SMS_SENDER"] = "create:notification-sms-sender";
+    PermissionActions["READ_NOTIFICATION_SMS_SENDER"] = "read:notification-sms-sender";
+    PermissionActions["UPDATE_NOTIFICATION_SMS_SENDER"] = "update:notification-sms-sender";
+    PermissionActions["DELETE_NOTIFICATION_SMS_SENDER"] = "delete:notification-sms-sender";
     // Confirming that an SMS sender ID really is registered with the provider.
     // Granted to NO role on the backend: only Super-Admin ('*') passes it.
     PermissionActions["APPROVE_NOTIFICATION_SENDER"] = "approve:notification-sender";
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
+    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
+    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    // Module: Billing (clarion-billing). Mirrors grm-shared-library exactly, values
+    // included. ORGANIZATION actions run an organization's own billing and are held
+    // by Owner, Admin and Billing-Admin (reads by Organization:User); PLATFORM ones -
+    // billing config writes, settling revenue share, provider settlement batches, the
+    // operations dashboards, premium trials and read:entitlement - are held by no
+    // role, so only Super-Admin reaches them. See grm-shared-library's roles.data.ts.
+    PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
+    PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";
+    PermissionActions["UPDATE_BENEFICIARY"] = "update:beneficiary";
+    PermissionActions["DELETE_BENEFICIARY"] = "delete:beneficiary";
+    PermissionActions["CREATE_BILLING_CONFIG"] = "create:billing-config";
+    PermissionActions["READ_BILLING_CONFIG"] = "read:billing-config";
+    PermissionActions["UPDATE_BILLING_CONFIG"] = "update:billing-config";
+    PermissionActions["DELETE_BILLING_CONFIG"] = "delete:billing-config";
+    PermissionActions["CREATE_CORPORATE_CLIENT"] = "create:corporate-client";
+    PermissionActions["READ_CORPORATE_CLIENT"] = "read:corporate-client";
+    PermissionActions["UPDATE_CORPORATE_CLIENT"] = "update:corporate-client";
+    PermissionActions["DELETE_CORPORATE_CLIENT"] = "delete:corporate-client";
+    PermissionActions["CREATE_CORPORATE_CLIENT_MEMBER"] = "create:corporate-client-member";
+    PermissionActions["READ_CORPORATE_CLIENT_MEMBER"] = "read:corporate-client-member";
+    PermissionActions["UPDATE_CORPORATE_CLIENT_MEMBER"] = "update:corporate-client-member";
+    PermissionActions["DELETE_CORPORATE_CLIENT_MEMBER"] = "delete:corporate-client-member";
+    PermissionActions["CREATE_INDIVIDUAL_CLIENT"] = "create:individual-client";
+    PermissionActions["READ_INDIVIDUAL_CLIENT"] = "read:individual-client";
+    PermissionActions["UPDATE_INDIVIDUAL_CLIENT"] = "update:individual-client";
+    PermissionActions["DELETE_INDIVIDUAL_CLIENT"] = "delete:individual-client";
+    PermissionActions["READ_ENTITLEMENT"] = "read:entitlement";
+    PermissionActions["CREATE_INVOICE"] = "create:invoice";
+    PermissionActions["READ_INVOICE"] = "read:invoice";
+    PermissionActions["MARK_INVOICE_PAID"] = "mark:invoice-paid";
+    PermissionActions["CREATE_ORDER"] = "create:order";
+    PermissionActions["READ_ORDER"] = "read:order";
+    PermissionActions["CONFIRM_ORDER"] = "confirm:order";
+    PermissionActions["CREATE_RECEIPT"] = "create:receipt";
+    PermissionActions["READ_RECEIPT"] = "read:receipt";
+    PermissionActions["CREATE_PACKAGE"] = "create:package";
+    PermissionActions["READ_PACKAGE"] = "read:package";
+    PermissionActions["UPDATE_PACKAGE"] = "update:package";
+    PermissionActions["ACTIVATE_PACKAGE"] = "activate:package";
+    PermissionActions["DEACTIVATE_PACKAGE"] = "deactivate:package";
+    PermissionActions["DELETE_PACKAGE"] = "delete:package";
+    PermissionActions["INITIALIZE_PAYMENT"] = "initialize:payment";
+    PermissionActions["VERIFY_PAYMENT"] = "verify:payment";
+    PermissionActions["READ_PAYMENT"] = "read:payment";
+    PermissionActions["INITIALIZE_INDIVIDUAL_SUBSCRIPTION"] = "initialize:individual-subscription";
+    PermissionActions["READ_INDIVIDUAL_SUBSCRIPTION"] = "read:individual-subscription";
+    PermissionActions["APPROVE_INDIVIDUAL_SUBSCRIPTION_MANUALLY"] = "approve:individual-subscription-manually";
+    PermissionActions["CANCEL_INDIVIDUAL_SUBSCRIPTION"] = "cancel:individual-subscription";
+    PermissionActions["INITIALIZE_CORPORATE_SUBSCRIPTION"] = "initialize:corporate-subscription";
+    PermissionActions["READ_CORPORATE_SUBSCRIPTION"] = "read:corporate-subscription";
+    PermissionActions["APPROVE_CORPORATE_SUBSCRIPTION_MANUALLY"] = "approve:corporate-subscription-manually";
+    PermissionActions["CANCEL_CORPORATE_SUBSCRIPTION"] = "cancel:corporate-subscription";
+    PermissionActions["RENEW_SUBSCRIPTION"] = "renew:subscription";
+    PermissionActions["CREATE_SETTLEMENT"] = "create:settlement";
+    PermissionActions["READ_SETTLEMENT"] = "read:settlement";
+    PermissionActions["SEND_SETTLEMENT_INVOICE"] = "send:settlement-invoice";
+    PermissionActions["MARK_SETTLEMENT_PAID"] = "mark:settlement-paid";
+    PermissionActions["READ_SETTLEMENT_BATCH"] = "read:settlement-batch";
+    PermissionActions["CREATE_SETTLEMENT_BATCH"] = "create:settlement-batch";
+    PermissionActions["RECONCILE_SETTLEMENT_BATCH"] = "reconcile:settlement-batch";
+    PermissionActions["READ_BILLING_OPERATIONS"] = "read:billing-operations";
+    PermissionActions["READ_PREMIUM_TRIAL"] = "read:premium-trial";
+    PermissionActions["GRANT_PREMIUM_TRIAL"] = "grant:premium-trial";
+    PermissionActions["REVOKE_PREMIUM_TRIAL"] = "revoke:premium-trial";
     // Module: Alert Intake
     // The channels the PUBLIC reaches an organization on without the app - its SMS
-    // short code, WhatsApp number and mailbox (clarion-alerts). Mirrors grm-shared-library.
-    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
-    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
+    // short code, WhatsApp number and mailbox (clarion-alerts) - configuring them, and
+    // working what arrives on them. Mirrors grm-shared-library.
+    PermissionActions["CREATE_ALERT_INTAKE_CONNECTION"] = "create:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_CONNECTION"] = "read:alert-intake-connection";
+    PermissionActions["UPDATE_ALERT_INTAKE_CONNECTION"] = "update:alert-intake-connection";
+    PermissionActions["DELETE_ALERT_INTAKE_CONNECTION"] = "delete:alert-intake-connection";
+    PermissionActions["TEST_ALERT_INTAKE_CONNECTION"] = "test:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_MESSAGE"] = "read:alert-intake-message";
+    PermissionActions["RETRY_ALERT_INTAKE_MESSAGE"] = "retry:alert-intake-message";
+    PermissionActions["READ_ALERT_INTAKE_SCREENED_MESSAGE"] = "read:alert-intake-screened-message";
+    PermissionActions["REVIEW_ALERT_INTAKE_SCREENED_MESSAGE"] = "review:alert-intake-screened-message";
+    PermissionActions["READ_ALERT_INTAKE_ANALYTICS"] = "read:alert-intake-analytics";
     // PLATFORM connections and their routes (which keyword sends a message to which
     // organization). Granted to NO role on the backend: only Super-Admin ('*') passes it.
     PermissionActions["MANAGE_ALERT_INTAKE_PLATFORM"] = "manage:alert-intake-platform";
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
+    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
+    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
 })(PermissionActions || (exports.PermissionActions = PermissionActions = {}));
 //# sourceMappingURL=permission-actions.enum.js.map

package/dist/cjs/modules/permission/enums/permission-actions.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAsIX;AAtID,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,wEAAwE;IACxE,mEAAmE;IACnE,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,uDAAuD;IACvD,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qDAAqD;IACrD,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,+BAA+B;IAC/B,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;OAGG;IACH,8DAAyC,CAAA;IACzC,mFAAmF;IACnF,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IACrD,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAE3C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,gDAAgD;IAChD,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,2EAA2E;IAC3E,uEAAuE;IACvE,gFAA2D,CAAA;IAE3D,uBAAuB;IACvB,+EAA+E;IAC/E,wFAAwF;IACxF,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gFAAgF;IAChF,sFAAsF;IACtF,kFAA6D,CAAA;AACjE,CAAC,EAtIW,iBAAiB,iCAAjB,iBAAiB,QAsI5B"}
+{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAiPX;AAjPD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,wEAAwE;IACxE,mEAAmE;IACnE,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,uDAAuD;IACvD,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qDAAqD;IACrD,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,+BAA+B;IAC/B,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;OAGG;IACH,8DAAyC,CAAA;IACzC,mFAAmF;IACnF,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IACrD,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAE3C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,kFAAkF;IAClF,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,0FAAqE,CAAA;IACrE,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,2EAA2E;IAC3E,uEAAuE;IACvE,gFAA2D,CAAA;IAC3D,yFAAyF;IACzF,8EAAyD,CAAA;IACzD,yFAAyF;IACzF,kFAA6D,CAAA;IAE7D,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,kFAAkF;IAClF,8EAA8E;IAC9E,kFAAkF;IAClF,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,8DAAyC,CAAA;IAEzC,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,8EAAyD,CAAA;IAEzD,wEAAmD,CAAA;IAEnD,8DAAyC,CAAA;IACzC,gEAA2C,CAAA;IAC3C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,+EAA+E;IAC/E,mFAAmF;IACnF,4DAA4D;IAC5D,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,4EAAuD,CAAA;IACvD,8EAAyD,CAAA;IACzD,8FAAyE,CAAA;IACzE,kGAA6E,CAAA;IAC7E,gFAA2D,CAAA;IAC3D,gFAAgF;IAChF,sFAAsF;IACtF,kFAA6D,CAAA;IAC7D,wGAAwG;IACxG,4DAAuC,CAAA;IACvC,wGAAwG;IACxG,gEAA2C,CAAA;AAC/C,CAAC,EAjPW,iBAAiB,iCAAjB,iBAAiB,QAiP5B"}

package/dist/cjs/modules/permission/enums/permissions-moudule.enum.js

@@ -12,6 +12,7 @@ var PermissionsModule;
     PermissionsModule["INCIDENT"] = "Grievance";
     PermissionsModule["RESPONSE_UNIT"] = "Response Unit";
     PermissionsModule["TRACKING"] = "Tracking";
+    PermissionsModule["BILLING"] = "Billing";
     PermissionsModule["SUPPORT"] = "Support";
     PermissionsModule["NOTIFICATION"] = "Notification";
     PermissionsModule["ALERT_INTAKE"] = "Alert Intake";

package/dist/cjs/modules/permission/enums/permissions-moudule.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-moudule.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-moudule.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAaX;AAbD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,kDAA6B,CAAA;IAC7B,kDAA6B,CAAA;AACjC,CAAC,EAbW,iBAAiB,iCAAjB,iBAAiB,QAa5B"}
+{"version":3,"file":"permissions-moudule.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-moudule.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAcX;AAdD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,wCAAmB,CAAA;IACnB,kDAA6B,CAAA;IAC7B,kDAA6B,CAAA;AACjC,CAAC,EAdW,iBAAiB,iCAAjB,iBAAiB,QAc5B"}

package/dist/cjs/modules/role/constants/billing-roles.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BILLING_VIEWER_ROLES = exports.BILLING_MANAGER_ROLES = void 0;
+const role_enum_1 = require("../enums/role.enum");
+/**
+ * The organization roles that RUN an organization's billing. Mirrors
+ * grm-shared-library, where roles.spec.ts asserts each of these holds every
+ * organization-level billing action.
+ *
+ * The admin decides by role NAME whether to offer a billing action at all
+ * (create, edit, approve, mark paid...), so a name here without the grants
+ * behind it would offer buttons the gateway then refuses - and a refused request
+ * sends the user to /unauthorised.
+ */
+exports.BILLING_MANAGER_ROLES = [
+    role_enum_1.Roles.ORGANIZATION_OWNER,
+    role_enum_1.Roles.ORGANIZATION_ADMIN,
+    role_enum_1.Roles.ORGANIZATION_BILLING_ADMIN
+];
+/**
+ * The organization roles that may SEE its billing: the managers, plus
+ * Organization:User, which holds the reads and nothing else. Gates the billing
+ * menu.
+ */
+exports.BILLING_VIEWER_ROLES = [
+    ...exports.BILLING_MANAGER_ROLES,
+    role_enum_1.Roles.ORGANIZATION_USER
+];
+//# sourceMappingURL=billing-roles.js.map

package/dist/cjs/modules/role/constants/billing-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-roles.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/billing-roles.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE3C;;;;;;;;;GASG;AACU,QAAA,qBAAqB,GAAa;IAC3C,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF;;;;GAIG;AACU,QAAA,oBAAoB,GAAa;IAC1C,GAAG,6BAAqB;IACxB,iBAAK,CAAC,iBAAiB;CAC1B,CAAC"}

package/dist/cjs/modules/role/constants/roles-by-scope.js

@@ -10,7 +10,8 @@ exports.ORGANIZATION_ROLES = [
     role_enum_1.Roles.ORGANIZATION_NEWSFEED_ADMIN,
     role_enum_1.Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
     role_enum_1.Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
-    role_enum_1.Roles.ORGANIZATION_SUPPORT_ADMIN
+    role_enum_1.Roles.ORGANIZATION_SUPPORT_ADMIN,
+    role_enum_1.Roles.ORGANIZATION_ALERT_CHANNELS_ADMIN
 ];
 exports.CONTROL_CENTRE_ROLES = [
     role_enum_1.Roles.CONTROL_CENTRE_ADMIN,

package/dist/cjs/modules/role/constants/roles-by-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;IACrC,iBAAK,CAAC,iCAAiC;IACvC,iBAAK,CAAC,0BAA0B;CACnC,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;IACf,iBAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}
+{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;IACrC,iBAAK,CAAC,iCAAiC;IACvC,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;IACf,iBAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}

package/dist/cjs/modules/role/enums/role.enum.js

@@ -19,6 +19,12 @@ var Roles;
      * concerns, so the role is scoped there rather than to a control centre.
      */
     Roles["ORGANIZATION_SUPPORT_ADMIN"] = "Organization:Support-Admin";
+    /**
+     * Sets up and runs the organization's alert channels (SMS, WhatsApp, email) and
+     * works what arrives on them. Organization-scoped: configuring a channel decides
+     * whose emergencies arrive where.
+     */
+    Roles["ORGANIZATION_ALERT_CHANNELS_ADMIN"] = "Organization:Alert-Channels-Admin";
     Roles["CONTROL_CENTRE_ADMIN"] = "Control-Centre:Admin";
     Roles["CONTROL_CENTRE_USER"] = "Control-Centre:User";
     /** The same job, confined to one control centre. */

package/dist/cjs/modules/role/enums/role.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,KAuBX;AAvBD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,0EAA0E;IAC1E,4EAAmE,CAAA;IACnE,gFAAgF;IAChF,gFAAuE,CAAA;IACvE;;;;OAIG;IACH,kEAAyD,CAAA;IACzD,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EAvBW,KAAK,qBAAL,KAAK,QAuBhB;AAED;;;;;;;;GAQG"}
+{"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,KA6BX;AA7BD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,0EAA0E;IAC1E,4EAAmE,CAAA;IACnE,gFAAgF;IAChF,gFAAuE,CAAA;IACvE;;;;OAIG;IACH,kEAAyD,CAAA;IACzD;;;;OAIG;IACH,gFAAuE,CAAA;IACvE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EA7BW,KAAK,qBAAL,KAAK,QA6BhB;AAED;;;;;;;;GAQG"}

package/dist/cjs/modules/role/index.js

@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./enums/role.enum"), exports);
 __exportStar(require("./interfaces/role"), exports);
 __exportStar(require("./constants/roles-by-scope"), exports);
+__exportStar(require("./constants/billing-roles"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/role/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/role/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,oDAAkC;AAClC,6DAA2C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/role/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,oDAAkC;AAClC,6DAA2C;AAC3C,4DAA0C"}

package/dist/esm/modules/permission/enums/permission-actions.enum.js

@@ -109,19 +109,108 @@ export var PermissionActions;
     // Module: Notification
     // An organization's notification settings (clarion-notification): how its
     // emails are branded, the address they are sent from, and the sender ID its
-    // SMS arrive under. Mirrors grm-shared-library.
-    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
-    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    // SMS arrive under - one family per thing configured. Mirrors grm-shared-library.
+    PermissionActions["READ_NOTIFICATION_BRANDING"] = "read:notification-branding";
+    PermissionActions["UPDATE_NOTIFICATION_BRANDING"] = "update:notification-branding";
+    PermissionActions["CREATE_NOTIFICATION_EMAIL_SENDER"] = "create:notification-email-sender";
+    PermissionActions["READ_NOTIFICATION_EMAIL_SENDER"] = "read:notification-email-sender";
+    PermissionActions["UPDATE_NOTIFICATION_EMAIL_SENDER"] = "update:notification-email-sender";
+    PermissionActions["DELETE_NOTIFICATION_EMAIL_SENDER"] = "delete:notification-email-sender";
+    PermissionActions["CREATE_NOTIFICATION_SMS_SENDER"] = "create:notification-sms-sender";
+    PermissionActions["READ_NOTIFICATION_SMS_SENDER"] = "read:notification-sms-sender";
+    PermissionActions["UPDATE_NOTIFICATION_SMS_SENDER"] = "update:notification-sms-sender";
+    PermissionActions["DELETE_NOTIFICATION_SMS_SENDER"] = "delete:notification-sms-sender";
     // Confirming that an SMS sender ID really is registered with the provider.
     // Granted to NO role on the backend: only Super-Admin ('*') passes it.
     PermissionActions["APPROVE_NOTIFICATION_SENDER"] = "approve:notification-sender";
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
+    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
+    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    // Module: Billing (clarion-billing). Mirrors grm-shared-library exactly, values
+    // included. ORGANIZATION actions run an organization's own billing and are held
+    // by Owner, Admin and Billing-Admin (reads by Organization:User); PLATFORM ones -
+    // billing config writes, settling revenue share, provider settlement batches, the
+    // operations dashboards, premium trials and read:entitlement - are held by no
+    // role, so only Super-Admin reaches them. See grm-shared-library's roles.data.ts.
+    PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
+    PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";
+    PermissionActions["UPDATE_BENEFICIARY"] = "update:beneficiary";
+    PermissionActions["DELETE_BENEFICIARY"] = "delete:beneficiary";
+    PermissionActions["CREATE_BILLING_CONFIG"] = "create:billing-config";
+    PermissionActions["READ_BILLING_CONFIG"] = "read:billing-config";
+    PermissionActions["UPDATE_BILLING_CONFIG"] = "update:billing-config";
+    PermissionActions["DELETE_BILLING_CONFIG"] = "delete:billing-config";
+    PermissionActions["CREATE_CORPORATE_CLIENT"] = "create:corporate-client";
+    PermissionActions["READ_CORPORATE_CLIENT"] = "read:corporate-client";
+    PermissionActions["UPDATE_CORPORATE_CLIENT"] = "update:corporate-client";
+    PermissionActions["DELETE_CORPORATE_CLIENT"] = "delete:corporate-client";
+    PermissionActions["CREATE_CORPORATE_CLIENT_MEMBER"] = "create:corporate-client-member";
+    PermissionActions["READ_CORPORATE_CLIENT_MEMBER"] = "read:corporate-client-member";
+    PermissionActions["UPDATE_CORPORATE_CLIENT_MEMBER"] = "update:corporate-client-member";
+    PermissionActions["DELETE_CORPORATE_CLIENT_MEMBER"] = "delete:corporate-client-member";
+    PermissionActions["CREATE_INDIVIDUAL_CLIENT"] = "create:individual-client";
+    PermissionActions["READ_INDIVIDUAL_CLIENT"] = "read:individual-client";
+    PermissionActions["UPDATE_INDIVIDUAL_CLIENT"] = "update:individual-client";
+    PermissionActions["DELETE_INDIVIDUAL_CLIENT"] = "delete:individual-client";
+    PermissionActions["READ_ENTITLEMENT"] = "read:entitlement";
+    PermissionActions["CREATE_INVOICE"] = "create:invoice";
+    PermissionActions["READ_INVOICE"] = "read:invoice";
+    PermissionActions["MARK_INVOICE_PAID"] = "mark:invoice-paid";
+    PermissionActions["CREATE_ORDER"] = "create:order";
+    PermissionActions["READ_ORDER"] = "read:order";
+    PermissionActions["CONFIRM_ORDER"] = "confirm:order";
+    PermissionActions["CREATE_RECEIPT"] = "create:receipt";
+    PermissionActions["READ_RECEIPT"] = "read:receipt";
+    PermissionActions["CREATE_PACKAGE"] = "create:package";
+    PermissionActions["READ_PACKAGE"] = "read:package";
+    PermissionActions["UPDATE_PACKAGE"] = "update:package";
+    PermissionActions["ACTIVATE_PACKAGE"] = "activate:package";
+    PermissionActions["DEACTIVATE_PACKAGE"] = "deactivate:package";
+    PermissionActions["DELETE_PACKAGE"] = "delete:package";
+    PermissionActions["INITIALIZE_PAYMENT"] = "initialize:payment";
+    PermissionActions["VERIFY_PAYMENT"] = "verify:payment";
+    PermissionActions["READ_PAYMENT"] = "read:payment";
+    PermissionActions["INITIALIZE_INDIVIDUAL_SUBSCRIPTION"] = "initialize:individual-subscription";
+    PermissionActions["READ_INDIVIDUAL_SUBSCRIPTION"] = "read:individual-subscription";
+    PermissionActions["APPROVE_INDIVIDUAL_SUBSCRIPTION_MANUALLY"] = "approve:individual-subscription-manually";
+    PermissionActions["CANCEL_INDIVIDUAL_SUBSCRIPTION"] = "cancel:individual-subscription";
+    PermissionActions["INITIALIZE_CORPORATE_SUBSCRIPTION"] = "initialize:corporate-subscription";
+    PermissionActions["READ_CORPORATE_SUBSCRIPTION"] = "read:corporate-subscription";
+    PermissionActions["APPROVE_CORPORATE_SUBSCRIPTION_MANUALLY"] = "approve:corporate-subscription-manually";
+    PermissionActions["CANCEL_CORPORATE_SUBSCRIPTION"] = "cancel:corporate-subscription";
+    PermissionActions["RENEW_SUBSCRIPTION"] = "renew:subscription";
+    PermissionActions["CREATE_SETTLEMENT"] = "create:settlement";
+    PermissionActions["READ_SETTLEMENT"] = "read:settlement";
+    PermissionActions["SEND_SETTLEMENT_INVOICE"] = "send:settlement-invoice";
+    PermissionActions["MARK_SETTLEMENT_PAID"] = "mark:settlement-paid";
+    PermissionActions["READ_SETTLEMENT_BATCH"] = "read:settlement-batch";
+    PermissionActions["CREATE_SETTLEMENT_BATCH"] = "create:settlement-batch";
+    PermissionActions["RECONCILE_SETTLEMENT_BATCH"] = "reconcile:settlement-batch";
+    PermissionActions["READ_BILLING_OPERATIONS"] = "read:billing-operations";
+    PermissionActions["READ_PREMIUM_TRIAL"] = "read:premium-trial";
+    PermissionActions["GRANT_PREMIUM_TRIAL"] = "grant:premium-trial";
+    PermissionActions["REVOKE_PREMIUM_TRIAL"] = "revoke:premium-trial";
     // Module: Alert Intake
     // The channels the PUBLIC reaches an organization on without the app - its SMS
-    // short code, WhatsApp number and mailbox (clarion-alerts). Mirrors grm-shared-library.
-    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
-    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
+    // short code, WhatsApp number and mailbox (clarion-alerts) - configuring them, and
+    // working what arrives on them. Mirrors grm-shared-library.
+    PermissionActions["CREATE_ALERT_INTAKE_CONNECTION"] = "create:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_CONNECTION"] = "read:alert-intake-connection";
+    PermissionActions["UPDATE_ALERT_INTAKE_CONNECTION"] = "update:alert-intake-connection";
+    PermissionActions["DELETE_ALERT_INTAKE_CONNECTION"] = "delete:alert-intake-connection";
+    PermissionActions["TEST_ALERT_INTAKE_CONNECTION"] = "test:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_MESSAGE"] = "read:alert-intake-message";
+    PermissionActions["RETRY_ALERT_INTAKE_MESSAGE"] = "retry:alert-intake-message";
+    PermissionActions["READ_ALERT_INTAKE_SCREENED_MESSAGE"] = "read:alert-intake-screened-message";
+    PermissionActions["REVIEW_ALERT_INTAKE_SCREENED_MESSAGE"] = "review:alert-intake-screened-message";
+    PermissionActions["READ_ALERT_INTAKE_ANALYTICS"] = "read:alert-intake-analytics";
     // PLATFORM connections and their routes (which keyword sends a message to which
     // organization). Granted to NO role on the backend: only Super-Admin ('*') passes it.
     PermissionActions["MANAGE_ALERT_INTAKE_PLATFORM"] = "manage:alert-intake-platform";
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
+    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
+    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
 })(PermissionActions || (PermissionActions = {}));
 //# sourceMappingURL=permission-actions.enum.js.map

package/dist/esm/modules/permission/enums/permission-actions.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAsIX;AAtID,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,wEAAwE;IACxE,mEAAmE;IACnE,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,uDAAuD;IACvD,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qDAAqD;IACrD,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,+BAA+B;IAC/B,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;OAGG;IACH,8DAAyC,CAAA;IACzC,mFAAmF;IACnF,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IACrD,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAE3C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,gDAAgD;IAChD,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,2EAA2E;IAC3E,uEAAuE;IACvE,gFAA2D,CAAA;IAE3D,uBAAuB;IACvB,+EAA+E;IAC/E,wFAAwF;IACxF,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gFAAgF;IAChF,sFAAsF;IACtF,kFAA6D,CAAA;AACjE,CAAC,EAtIW,iBAAiB,KAAjB,iBAAiB,QAsI5B"}
+{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAiPX;AAjPD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,wEAAwE;IACxE,mEAAmE;IACnE,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,uDAAuD;IACvD,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,4EAA4E;IAC5E,wEAAwE;IACxE,6EAA6E;IAC7E,qDAAqD;IACrD,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,sEAAiD,CAAA;IACjD,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,+BAA+B;IAC/B,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;OAGG;IACH,8DAAyC,CAAA;IACzC,mFAAmF;IACnF,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IACrD,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAE3C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,kFAAkF;IAClF,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,0FAAqE,CAAA;IACrE,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,2EAA2E;IAC3E,uEAAuE;IACvE,gFAA2D,CAAA;IAC3D,yFAAyF;IACzF,8EAAyD,CAAA;IACzD,yFAAyF;IACzF,kFAA6D,CAAA;IAE7D,gFAAgF;IAChF,gFAAgF;IAChF,kFAAkF;IAClF,kFAAkF;IAClF,8EAA8E;IAC9E,kFAAkF;IAClF,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,8DAAyC,CAAA;IAEzC,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,8EAAyD,CAAA;IAEzD,wEAAmD,CAAA;IAEnD,8DAAyC,CAAA;IACzC,gEAA2C,CAAA;IAC3C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,+EAA+E;IAC/E,mFAAmF;IACnF,4DAA4D;IAC5D,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,4EAAuD,CAAA;IACvD,8EAAyD,CAAA;IACzD,8FAAyE,CAAA;IACzE,kGAA6E,CAAA;IAC7E,gFAA2D,CAAA;IAC3D,gFAAgF;IAChF,sFAAsF;IACtF,kFAA6D,CAAA;IAC7D,wGAAwG;IACxG,4DAAuC,CAAA;IACvC,wGAAwG;IACxG,gEAA2C,CAAA;AAC/C,CAAC,EAjPW,iBAAiB,KAAjB,iBAAiB,QAiP5B"}

package/dist/esm/modules/permission/enums/permissions-moudule.enum.js

@@ -9,6 +9,7 @@ export var PermissionsModule;
     PermissionsModule["INCIDENT"] = "Grievance";
     PermissionsModule["RESPONSE_UNIT"] = "Response Unit";
     PermissionsModule["TRACKING"] = "Tracking";
+    PermissionsModule["BILLING"] = "Billing";
     PermissionsModule["SUPPORT"] = "Support";
     PermissionsModule["NOTIFICATION"] = "Notification";
     PermissionsModule["ALERT_INTAKE"] = "Alert Intake";

package/dist/esm/modules/permission/enums/permissions-moudule.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-moudule.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-moudule.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAaX;AAbD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,kDAA6B,CAAA;IAC7B,kDAA6B,CAAA;AACjC,CAAC,EAbW,iBAAiB,KAAjB,iBAAiB,QAa5B"}
+{"version":3,"file":"permissions-moudule.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permissions-moudule.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAcX;AAdD,WAAY,iBAAiB;IACzB,kDAA6B,CAAA;IAC7B,wCAAmB,CAAA;IACnB,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,kCAAa,CAAA;IACb,2CAAsB,CAAA;IACtB,oDAA+B,CAAA;IAC/B,0CAAqB,CAAA;IACrB,wCAAmB,CAAA;IACnB,wCAAmB,CAAA;IACnB,kDAA6B,CAAA;IAC7B,kDAA6B,CAAA;AACjC,CAAC,EAdW,iBAAiB,KAAjB,iBAAiB,QAc5B"}

package/dist/esm/modules/role/constants/billing-roles.js

@@ -0,0 +1,26 @@
+import { Roles } from "../enums/role.enum";
+/**
+ * The organization roles that RUN an organization's billing. Mirrors
+ * grm-shared-library, where roles.spec.ts asserts each of these holds every
+ * organization-level billing action.
+ *
+ * The admin decides by role NAME whether to offer a billing action at all
+ * (create, edit, approve, mark paid...), so a name here without the grants
+ * behind it would offer buttons the gateway then refuses - and a refused request
+ * sends the user to /unauthorised.
+ */
+export const BILLING_MANAGER_ROLES = [
+    Roles.ORGANIZATION_OWNER,
+    Roles.ORGANIZATION_ADMIN,
+    Roles.ORGANIZATION_BILLING_ADMIN
+];
+/**
+ * The organization roles that may SEE its billing: the managers, plus
+ * Organization:User, which holds the reads and nothing else. Gates the billing
+ * menu.
+ */
+export const BILLING_VIEWER_ROLES = [
+    ...BILLING_MANAGER_ROLES,
+    Roles.ORGANIZATION_USER
+];
+//# sourceMappingURL=billing-roles.js.map

package/dist/esm/modules/role/constants/billing-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-roles.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/billing-roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC3C,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,GAAG,qBAAqB;IACxB,KAAK,CAAC,iBAAiB;CAC1B,CAAC"}

package/dist/esm/modules/role/constants/roles-by-scope.js

@@ -7,7 +7,8 @@ export const ORGANIZATION_ROLES = [
     Roles.ORGANIZATION_NEWSFEED_ADMIN,
     Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
     Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
-    Roles.ORGANIZATION_SUPPORT_ADMIN
+    Roles.ORGANIZATION_SUPPORT_ADMIN,
+    Roles.ORGANIZATION_ALERT_CHANNELS_ADMIN
 ];
 export const CONTROL_CENTRE_ROLES = [
     Roles.CONTROL_CENTRE_ADMIN,

package/dist/esm/modules/role/constants/roles-by-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;IACrC,KAAK,CAAC,iCAAiC;IACvC,KAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}
+{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;IACrC,KAAK,CAAC,iCAAiC;IACvC,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}

package/dist/esm/modules/role/enums/role.enum.js

@@ -16,6 +16,12 @@ export var Roles;
      * concerns, so the role is scoped there rather than to a control centre.
      */
     Roles["ORGANIZATION_SUPPORT_ADMIN"] = "Organization:Support-Admin";
+    /**
+     * Sets up and runs the organization's alert channels (SMS, WhatsApp, email) and
+     * works what arrives on them. Organization-scoped: configuring a channel decides
+     * whose emergencies arrive where.
+     */
+    Roles["ORGANIZATION_ALERT_CHANNELS_ADMIN"] = "Organization:Alert-Channels-Admin";
     Roles["CONTROL_CENTRE_ADMIN"] = "Control-Centre:Admin";
     Roles["CONTROL_CENTRE_USER"] = "Control-Centre:User";
     /** The same job, confined to one control centre. */

package/dist/esm/modules/role/enums/role.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,KAuBX;AAvBD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,0EAA0E;IAC1E,4EAAmE,CAAA;IACnE,gFAAgF;IAChF,gFAAuE,CAAA;IACvE;;;;OAIG;IACH,kEAAyD,CAAA;IACzD,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EAvBW,KAAK,KAAL,KAAK,QAuBhB;AAED;;;;;;;;GAQG"}
+{"version":3,"file":"role.enum.js","sourceRoot":"","sources":["../../../../../src/modules/role/enums/role.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,KA6BX;AA7BD,WAAY,KAAK;IACb,oCAA2B,CAAA;IAC3B,kDAAyC,CAAA;IACzC,kDAAyC,CAAA;IACzC,gDAAuC,CAAA;IACvC,kEAAyD,CAAA;IACzD,oEAA2D,CAAA;IAC3D,0EAA0E;IAC1E,4EAAmE,CAAA;IACnE,gFAAgF;IAChF,gFAAuE,CAAA;IACvE;;;;OAIG;IACH,kEAAyD,CAAA;IACzD;;;;OAIG;IACH,gFAAuE,CAAA;IACvE,sDAA6C,CAAA;IAC7C,oDAA2C,CAAA;IAC3C,oDAAoD;IACpD,oFAA2E,CAAA;IAC3E,gCAAuB,CAAA;IACvB,oCAA2B,CAAA;AAC/B,CAAC,EA7BW,KAAK,KAAL,KAAK,QA6BhB;AAED;;;;;;;;GAQG"}

package/dist/esm/modules/role/index.js

@@ -1,4 +1,5 @@
 export * from './enums/role.enum';
 export * from './interfaces/role';
 export * from './constants/roles-by-scope';
+export * from './constants/billing-roles';
 //# sourceMappingURL=index.js.map

package/dist/esm/modules/role/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/role/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/role/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC"}

package/dist/types/modules/permission/enums/permission-actions.enum.d.ts

@@ -82,10 +82,92 @@ export declare enum PermissionActions {
     READ_SUPPORT_REPORT = "read:support-report",
     READ_SUPPORT_SYNC = "read:support-sync",
     MANAGE_SUPPORT_SYNC = "manage:support-sync",
+    READ_NOTIFICATION_BRANDING = "read:notification-branding",
+    UPDATE_NOTIFICATION_BRANDING = "update:notification-branding",
+    CREATE_NOTIFICATION_EMAIL_SENDER = "create:notification-email-sender",
+    READ_NOTIFICATION_EMAIL_SENDER = "read:notification-email-sender",
+    UPDATE_NOTIFICATION_EMAIL_SENDER = "update:notification-email-sender",
+    DELETE_NOTIFICATION_EMAIL_SENDER = "delete:notification-email-sender",
+    CREATE_NOTIFICATION_SMS_SENDER = "create:notification-sms-sender",
+    READ_NOTIFICATION_SMS_SENDER = "read:notification-sms-sender",
+    UPDATE_NOTIFICATION_SMS_SENDER = "update:notification-sms-sender",
+    DELETE_NOTIFICATION_SMS_SENDER = "delete:notification-sms-sender",
+    APPROVE_NOTIFICATION_SENDER = "approve:notification-sender",
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
     READ_NOTIFICATION_SETTINGS = "read:notification-settings",
+    /** @deprecated Retiring: split into the branding / email sender / SMS sender actions. */
     MANAGE_NOTIFICATION_SETTINGS = "manage:notification-settings",
-    APPROVE_NOTIFICATION_SENDER = "approve:notification-sender",
+    CREATE_BENEFICIARY = "create:beneficiary",
+    READ_BENEFICIARY = "read:beneficiary",
+    UPDATE_BENEFICIARY = "update:beneficiary",
+    DELETE_BENEFICIARY = "delete:beneficiary",
+    CREATE_BILLING_CONFIG = "create:billing-config",
+    READ_BILLING_CONFIG = "read:billing-config",
+    UPDATE_BILLING_CONFIG = "update:billing-config",
+    DELETE_BILLING_CONFIG = "delete:billing-config",
+    CREATE_CORPORATE_CLIENT = "create:corporate-client",
+    READ_CORPORATE_CLIENT = "read:corporate-client",
+    UPDATE_CORPORATE_CLIENT = "update:corporate-client",
+    DELETE_CORPORATE_CLIENT = "delete:corporate-client",
+    CREATE_CORPORATE_CLIENT_MEMBER = "create:corporate-client-member",
+    READ_CORPORATE_CLIENT_MEMBER = "read:corporate-client-member",
+    UPDATE_CORPORATE_CLIENT_MEMBER = "update:corporate-client-member",
+    DELETE_CORPORATE_CLIENT_MEMBER = "delete:corporate-client-member",
+    CREATE_INDIVIDUAL_CLIENT = "create:individual-client",
+    READ_INDIVIDUAL_CLIENT = "read:individual-client",
+    UPDATE_INDIVIDUAL_CLIENT = "update:individual-client",
+    DELETE_INDIVIDUAL_CLIENT = "delete:individual-client",
+    READ_ENTITLEMENT = "read:entitlement",
+    CREATE_INVOICE = "create:invoice",
+    READ_INVOICE = "read:invoice",
+    MARK_INVOICE_PAID = "mark:invoice-paid",
+    CREATE_ORDER = "create:order",
+    READ_ORDER = "read:order",
+    CONFIRM_ORDER = "confirm:order",
+    CREATE_RECEIPT = "create:receipt",
+    READ_RECEIPT = "read:receipt",
+    CREATE_PACKAGE = "create:package",
+    READ_PACKAGE = "read:package",
+    UPDATE_PACKAGE = "update:package",
+    ACTIVATE_PACKAGE = "activate:package",
+    DEACTIVATE_PACKAGE = "deactivate:package",
+    DELETE_PACKAGE = "delete:package",
+    INITIALIZE_PAYMENT = "initialize:payment",
+    VERIFY_PAYMENT = "verify:payment",
+    READ_PAYMENT = "read:payment",
+    INITIALIZE_INDIVIDUAL_SUBSCRIPTION = "initialize:individual-subscription",
+    READ_INDIVIDUAL_SUBSCRIPTION = "read:individual-subscription",
+    APPROVE_INDIVIDUAL_SUBSCRIPTION_MANUALLY = "approve:individual-subscription-manually",
+    CANCEL_INDIVIDUAL_SUBSCRIPTION = "cancel:individual-subscription",
+    INITIALIZE_CORPORATE_SUBSCRIPTION = "initialize:corporate-subscription",
+    READ_CORPORATE_SUBSCRIPTION = "read:corporate-subscription",
+    APPROVE_CORPORATE_SUBSCRIPTION_MANUALLY = "approve:corporate-subscription-manually",
+    CANCEL_CORPORATE_SUBSCRIPTION = "cancel:corporate-subscription",
+    RENEW_SUBSCRIPTION = "renew:subscription",
+    CREATE_SETTLEMENT = "create:settlement",
+    READ_SETTLEMENT = "read:settlement",
+    SEND_SETTLEMENT_INVOICE = "send:settlement-invoice",
+    MARK_SETTLEMENT_PAID = "mark:settlement-paid",
+    READ_SETTLEMENT_BATCH = "read:settlement-batch",
+    CREATE_SETTLEMENT_BATCH = "create:settlement-batch",
+    RECONCILE_SETTLEMENT_BATCH = "reconcile:settlement-batch",
+    READ_BILLING_OPERATIONS = "read:billing-operations",
+    READ_PREMIUM_TRIAL = "read:premium-trial",
+    GRANT_PREMIUM_TRIAL = "grant:premium-trial",
+    REVOKE_PREMIUM_TRIAL = "revoke:premium-trial",
+    CREATE_ALERT_INTAKE_CONNECTION = "create:alert-intake-connection",
+    READ_ALERT_INTAKE_CONNECTION = "read:alert-intake-connection",
+    UPDATE_ALERT_INTAKE_CONNECTION = "update:alert-intake-connection",
+    DELETE_ALERT_INTAKE_CONNECTION = "delete:alert-intake-connection",
+    TEST_ALERT_INTAKE_CONNECTION = "test:alert-intake-connection",
+    READ_ALERT_INTAKE_MESSAGE = "read:alert-intake-message",
+    RETRY_ALERT_INTAKE_MESSAGE = "retry:alert-intake-message",
+    READ_ALERT_INTAKE_SCREENED_MESSAGE = "read:alert-intake-screened-message",
+    REVIEW_ALERT_INTAKE_SCREENED_MESSAGE = "review:alert-intake-screened-message",
+    READ_ALERT_INTAKE_ANALYTICS = "read:alert-intake-analytics",
+    MANAGE_ALERT_INTAKE_PLATFORM = "manage:alert-intake-platform",
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
     READ_ALERT_INTAKE = "read:alert-intake",
-    MANAGE_ALERT_INTAKE = "manage:alert-intake",
-    MANAGE_ALERT_INTAKE_PLATFORM = "manage:alert-intake-platform"
+    /** @deprecated Retiring: split into the connection / message / screened-message / analytics actions. */
+    MANAGE_ALERT_INTAKE = "manage:alert-intake"
 }

package/dist/types/modules/permission/enums/permissions-moudule.enum.d.ts

@@ -8,6 +8,7 @@ export declare enum PermissionsModule {
     INCIDENT = "Grievance",
     RESPONSE_UNIT = "Response Unit",
     TRACKING = "Tracking",
+    BILLING = "Billing",
     SUPPORT = "Support",
     NOTIFICATION = "Notification",
     ALERT_INTAKE = "Alert Intake"

package/dist/types/modules/role/constants/billing-roles.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The organization roles that RUN an organization's billing. Mirrors
+ * grm-shared-library, where roles.spec.ts asserts each of these holds every
+ * organization-level billing action.
+ *
+ * The admin decides by role NAME whether to offer a billing action at all
+ * (create, edit, approve, mark paid...), so a name here without the grants
+ * behind it would offer buttons the gateway then refuses - and a refused request
+ * sends the user to /unauthorised.
+ */
+export declare const BILLING_MANAGER_ROLES: string[];
+/**
+ * The organization roles that may SEE its billing: the managers, plus
+ * Organization:User, which holds the reads and nothing else. Gates the billing
+ * menu.
+ */
+export declare const BILLING_VIEWER_ROLES: string[];

package/dist/types/modules/role/enums/role.enum.d.ts

@@ -15,6 +15,12 @@ export declare enum Roles {
      * concerns, so the role is scoped there rather than to a control centre.
      */
     ORGANIZATION_SUPPORT_ADMIN = "Organization:Support-Admin",
+    /**
+     * Sets up and runs the organization's alert channels (SMS, WhatsApp, email) and
+     * works what arrives on them. Organization-scoped: configuring a channel decides
+     * whose emergencies arrive where.
+     */
+    ORGANIZATION_ALERT_CHANNELS_ADMIN = "Organization:Alert-Channels-Admin",
     CONTROL_CENTRE_ADMIN = "Control-Centre:Admin",
     CONTROL_CENTRE_USER = "Control-Centre:User",
     /** The same job, confined to one control centre. */

package/dist/types/modules/role/index.d.ts

@@ -1,3 +1,4 @@
 export * from './enums/role.enum';
 export * from './interfaces/role';
 export * from './constants/roles-by-scope';
+export * from './constants/billing-roles';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clarion-shared-types",
-  "version": "1.0.102",
+  "version": "1.0.104",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",