grm-shared-library 1.1.217 → 1.1.219

package/README.md

@@ -261,6 +261,41 @@ only Super-Admin (`*`) passes it, and `roles.spec.ts` pins that. Activating a se
 asserts that it is registered with the provider and the telco; an organization able to
 approve its own could send SMS under any name it typed.
 
+### The Billing permission module and Organization:Billing-Admin
+
+clarion-billing's routes used to be guarded by the INCIDENT actions (and 45 of the
+gateway's 116 billing routes by nothing but a sign-in). Every app user holds
+`create/read/update:incident` to raise an SOS, so every handset could reach almost
+every billing management route - approving a subscription without payment and
+granting premium trials among them. They now use the Billing module, whose actions
+come in two kinds:
+
+| Kind | Actions | Who holds them |
+|---|---|---|
+| **Organization** - an organization's own billing, scoped by clarion-billing | packages, individual and corporate clients, corporate members, beneficiaries, subscriptions (incl. manual approval, cancel, `renew:subscription`), orders, invoices (incl. `mark:invoice-paid`), receipts, payments, `read:settlement`, `read:billing-config` | Owner, Admin and `Organization:Billing-Admin` all 44; `Organization:User` the 13 reads |
+| **Platform** - the platform's own business, or not yet scoped to one organization | billing config writes (revenue share and tax terms), settlement create / send-invoice / mark-paid, settlement batches, `read:billing-operations`, premium trials, `read:entitlement` | **no role** - only Super-Admin (`*`) |
+
+`roles.spec.ts` lists the platform actions by hand and fails on any Billing action
+that is in neither list, so a new one has to be placed deliberately.
+
+`Organization:Billing-Admin` holds the organization set plus exactly what its screens
+need from other modules: `read:user` (an individual client is a platform user; the
+client pages fetch the name and phone), `read:incident-category-type` (the package
+form lists the incident types a package covers) and `read:organization`. No partner
+permission: billing asks clarion-partner-services service-to-service, and no billing
+screen calls a partner route.
+
+`Mobile-User` holds the four billing actions the app uses - `read:package`,
+`initialize:individual-subscription`, `renew:subscription`, `verify:payment` - and
+reads its own subscriptions and entitlement through self-scoped "me" routes that need
+no permission. Control-room roles hold no billing action.
+
+`BILLING_MANAGER_ROLES` (Owner, Admin, Billing-Admin) and `BILLING_VIEWER_ROLES`
+(+ Organization:User) are for the places that still decide by role NAME -
+clarion-billing's checks on manual approval, marking an invoice paid and renewing on
+a subscriber's behalf, and the admin's billing menu and buttons. The spec asserts each
+manager holds the organization set in full and each viewer every read.
+
 ### Adding a role: every step fails silently on its own
 
 1. **Here** - the `Roles` value, a scope list, and a `ROLES_DATA` entry. `roles.spec.ts`

package/dist/cjs/modules/permission/data/permissions.data.js

@@ -186,10 +186,18 @@ exports.PERMISSIONS_DATA = [
             permission_actions_enum_1.PermissionActions.READ_CORPORATE_SUBSCRIPTION,
             permission_actions_enum_1.PermissionActions.APPROVE_CORPORATE_SUBSCRIPTION_MANUALLY,
             permission_actions_enum_1.PermissionActions.CANCEL_CORPORATE_SUBSCRIPTION,
+            permission_actions_enum_1.PermissionActions.RENEW_SUBSCRIPTION,
             permission_actions_enum_1.PermissionActions.CREATE_SETTLEMENT,
             permission_actions_enum_1.PermissionActions.READ_SETTLEMENT,
             permission_actions_enum_1.PermissionActions.SEND_SETTLEMENT_INVOICE,
             permission_actions_enum_1.PermissionActions.MARK_SETTLEMENT_PAID,
+            permission_actions_enum_1.PermissionActions.READ_SETTLEMENT_BATCH,
+            permission_actions_enum_1.PermissionActions.CREATE_SETTLEMENT_BATCH,
+            permission_actions_enum_1.PermissionActions.RECONCILE_SETTLEMENT_BATCH,
+            permission_actions_enum_1.PermissionActions.READ_BILLING_OPERATIONS,
+            permission_actions_enum_1.PermissionActions.READ_PREMIUM_TRIAL,
+            permission_actions_enum_1.PermissionActions.GRANT_PREMIUM_TRIAL,
+            permission_actions_enum_1.PermissionActions.REVOKE_PREMIUM_TRIAL,
         ]
     },
     {
@@ -206,17 +214,39 @@ exports.PERMISSIONS_DATA = [
     {
         module: permissions_module_enum_1.PermissionsModule.NOTIFICATION,
         actions: [
+            permission_actions_enum_1.PermissionActions.READ_NOTIFICATION_BRANDING,
+            permission_actions_enum_1.PermissionActions.UPDATE_NOTIFICATION_BRANDING,
+            permission_actions_enum_1.PermissionActions.CREATE_NOTIFICATION_EMAIL_SENDER,
+            permission_actions_enum_1.PermissionActions.READ_NOTIFICATION_EMAIL_SENDER,
+            permission_actions_enum_1.PermissionActions.UPDATE_NOTIFICATION_EMAIL_SENDER,
+            permission_actions_enum_1.PermissionActions.DELETE_NOTIFICATION_EMAIL_SENDER,
+            permission_actions_enum_1.PermissionActions.CREATE_NOTIFICATION_SMS_SENDER,
+            permission_actions_enum_1.PermissionActions.READ_NOTIFICATION_SMS_SENDER,
+            permission_actions_enum_1.PermissionActions.UPDATE_NOTIFICATION_SMS_SENDER,
+            permission_actions_enum_1.PermissionActions.DELETE_NOTIFICATION_SMS_SENDER,
+            permission_actions_enum_1.PermissionActions.APPROVE_NOTIFICATION_SENDER,
+            // Retiring - see RETIRING_PERMISSION_ACTIONS.
             permission_actions_enum_1.PermissionActions.READ_NOTIFICATION_SETTINGS,
-            permission_actions_enum_1.PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
-            permission_actions_enum_1.PermissionActions.APPROVE_NOTIFICATION_SENDER
+            permission_actions_enum_1.PermissionActions.MANAGE_NOTIFICATION_SETTINGS
         ]
     },
     {
         module: permissions_module_enum_1.PermissionsModule.ALERT_INTAKE,
         actions: [
+            permission_actions_enum_1.PermissionActions.CREATE_ALERT_INTAKE_CONNECTION,
+            permission_actions_enum_1.PermissionActions.READ_ALERT_INTAKE_CONNECTION,
+            permission_actions_enum_1.PermissionActions.UPDATE_ALERT_INTAKE_CONNECTION,
+            permission_actions_enum_1.PermissionActions.DELETE_ALERT_INTAKE_CONNECTION,
+            permission_actions_enum_1.PermissionActions.TEST_ALERT_INTAKE_CONNECTION,
+            permission_actions_enum_1.PermissionActions.READ_ALERT_INTAKE_MESSAGE,
+            permission_actions_enum_1.PermissionActions.RETRY_ALERT_INTAKE_MESSAGE,
+            permission_actions_enum_1.PermissionActions.READ_ALERT_INTAKE_SCREENED_MESSAGE,
+            permission_actions_enum_1.PermissionActions.REVIEW_ALERT_INTAKE_SCREENED_MESSAGE,
+            permission_actions_enum_1.PermissionActions.READ_ALERT_INTAKE_ANALYTICS,
+            permission_actions_enum_1.PermissionActions.MANAGE_ALERT_INTAKE_PLATFORM,
+            // Retiring - see RETIRING_PERMISSION_ACTIONS.
             permission_actions_enum_1.PermissionActions.READ_ALERT_INTAKE,
-            permission_actions_enum_1.PermissionActions.MANAGE_ALERT_INTAKE,
-            permission_actions_enum_1.PermissionActions.MANAGE_ALERT_INTAKE_PLATFORM
+            permission_actions_enum_1.PermissionActions.MANAGE_ALERT_INTAKE
         ]
     }
 ];

package/dist/cjs/modules/permission/data/permissions.data.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":";;;AAAA,8EAAqE;AACrE,8EAAqE;AAGxD,QAAA,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,aAAa;YAC/B,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,kBAAkB;YAEpC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YAEvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YAEzC,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAE1C,2CAAiB,CAAC,gBAAgB;YAElC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,iBAAiB;YAEnC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,UAAU;YAC5B,2CAAiB,CAAC,aAAa;YAE/B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAEhC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,kCAAkC;YACpD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,wCAAwC;YAC1D,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,uCAAuC;YACzD,2CAAiB,CAAC,6BAA6B;YAE/C,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,0BAA0B;YAC5C,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,2BAA2B;SAChD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,4BAA4B;SACjD;KACJ;CACJ,CAAC"}
+{"version":3,"file":"permissions.data.js","sourceRoot":"","sources":["../../../../../src/modules/permission/data/permissions.data.ts"],"names":[],"mappings":";;;AAAA,8EAAqE;AACrE,8EAAqE;AAGxD,QAAA,gBAAgB,GAAiB;IAC1C;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,yBAAyB;SAC9C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,cAAc;QACxC,OAAO,EAAE;YACL,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;SAC1C;KACJ;IACD;QACI,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,IAAI;QAC9B,OAAO,EAAE;YACL,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,SAAS;YAC3B,2CAAiB,CAAC,WAAW;YAC7B,2CAAiB,CAAC,WAAW;SAChC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,aAAa;YAC/B,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,6BAA6B;YAC/C,2CAAiB,CAAC,6BAA6B;SAClD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,aAAa;QACvC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,mCAAmC;YACrD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,0BAA0B;SAC/C;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,OAAO;QACjC,OAAO,EAAE;YACL,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,kBAAkB;YAEpC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YAEvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,uBAAuB;YAEzC,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,sBAAsB;YACxC,2CAAiB,CAAC,wBAAwB;YAC1C,2CAAiB,CAAC,wBAAwB;YAE1C,2CAAiB,CAAC,gBAAgB;YAElC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,iBAAiB;YAEnC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,UAAU;YAC5B,2CAAiB,CAAC,aAAa;YAE/B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAC9B,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,gBAAgB;YAClC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAEhC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,cAAc;YAChC,2CAAiB,CAAC,YAAY;YAE9B,2CAAiB,CAAC,kCAAkC;YACpD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,wCAAwC;YAC1D,2CAAiB,CAAC,8BAA8B;YAEhD,2CAAiB,CAAC,iCAAiC;YACnD,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,uCAAuC;YACzD,2CAAiB,CAAC,6BAA6B;YAE/C,2CAAiB,CAAC,kBAAkB;YAEpC,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,eAAe;YACjC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,oBAAoB;YAEtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,uBAAuB;YACzC,2CAAiB,CAAC,0BAA0B;YAE5C,2CAAiB,CAAC,uBAAuB;YAEzC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,mBAAmB;YACrC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,QAAQ;QAClC,OAAO,EAAE;YACL,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,kBAAkB;YACpC,2CAAiB,CAAC,oBAAoB;YACtC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,qBAAqB;YACvC,2CAAiB,CAAC,oBAAoB;SACzC;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,0BAA0B;YAC5C,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,gCAAgC;YAClD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,gCAAgC;YAClD,2CAAiB,CAAC,gCAAgC;YAClD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,2BAA2B;YAC7C,8CAA8C;YAC9C,2CAAiB,CAAC,0BAA0B;YAC5C,2CAAiB,CAAC,4BAA4B;SACjD;KACJ;IACD;QACI,MAAM,EAAE,2CAAiB,CAAC,YAAY;QACtC,OAAO,EAAE;YACL,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,8BAA8B;YAChD,2CAAiB,CAAC,4BAA4B;YAC9C,2CAAiB,CAAC,yBAAyB;YAC3C,2CAAiB,CAAC,0BAA0B;YAC5C,2CAAiB,CAAC,kCAAkC;YACpD,2CAAiB,CAAC,oCAAoC;YACtD,2CAAiB,CAAC,2BAA2B;YAC7C,2CAAiB,CAAC,4BAA4B;YAC9C,8CAA8C;YAC9C,2CAAiB,CAAC,iBAAiB;YACnC,2CAAiB,CAAC,mBAAmB;SACxC;KACJ;CACJ,CAAC"}

package/dist/cjs/modules/permission/enums/permission-actions.enum.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PermissionActions = void 0;
+exports.RETIRING_PERMISSION_ACTIONS = exports.PermissionActions = void 0;
 var PermissionActions;
 (function (PermissionActions) {
     // Module: Organization
@@ -162,6 +162,24 @@ var PermissionActions;
     // is the first half of that one task.
     PermissionActions["MANAGE_TRACKING_OPERATIONS"] = "manage:tracking-operations";
     // Module: Billing
+    //
+    // Two kinds of action, and the difference is who may hold them:
+    //
+    //   ORGANIZATION actions run an organization's own billing - its packages,
+    //   clients, subscriptions and the money they bring in. clarion-billing
+    //   scopes every one of them to the caller's organization. Granted to
+    //   Organization:Owner, :Admin and :Billing-Admin; the reads to
+    //   Organization:User.
+    //
+    //   PLATFORM actions are the platform's own business: the commercial terms it
+    //   sets each organization (billing config), settling revenue share with them,
+    //   reconciling provider payouts, the cross-organization dashboards, and
+    //   anything clarion-billing does not yet scope to one organization (premium
+    //   trials, reading another user's entitlements). No role holds these; only
+    //   Super-Admin's wildcard reaches them.
+    //
+    // roles.data.ts names both lists, and roles.spec.ts fails if an action in this
+    // module is in neither - a new billing action has to be placed deliberately.
     PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
     PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";
     PermissionActions["UPDATE_BENEFICIARY"] = "update:beneficiary";
@@ -212,6 +230,30 @@ var PermissionActions;
     PermissionActions["READ_SETTLEMENT"] = "read:settlement";
     PermissionActions["SEND_SETTLEMENT_INVOICE"] = "send:settlement-invoice";
     PermissionActions["MARK_SETTLEMENT_PAID"] = "mark:settlement-paid";
+    // Renewing a subscription: a fresh checkout for the next period. Its own
+    // action because it is the one subscription action a SUBSCRIBER takes on
+    // their own plan from the app - manual renewal where mobile money leaves
+    // nothing to charge automatically (UG/TZ) - as well as staff on the
+    // organization's behalf. clarion-billing lets the owner or the
+    // organization's billing staff renew, nobody else.
+    PermissionActions["RENEW_SUBSCRIPTION"] = "renew:subscription";
+    // Provider settlement batches: what Paystack and Flutterwave paid out,
+    // grouped by provider, country and currency, and reconciled against their
+    // reports. PLATFORM: the payouts are the platform's, not one organization's.
+    PermissionActions["READ_SETTLEMENT_BATCH"] = "read:settlement-batch";
+    PermissionActions["CREATE_SETTLEMENT_BATCH"] = "create:settlement-batch";
+    // Importing the provider's report, recording what it actually paid, and
+    // moving a batch through its statuses - the steps of reconciling one.
+    PermissionActions["RECONCILE_SETTLEMENT_BATCH"] = "reconcile:settlement-batch";
+    // The cross-country operations dashboards (revenue, providers, renewals,
+    // configuration readiness). PLATFORM: they aggregate every organization.
+    PermissionActions["READ_BILLING_OPERATIONS"] = "read:billing-operations";
+    // Premium trials. PLATFORM for now: trial policy is platform configuration,
+    // and clarion-billing does not scope a trial to the caller's organization -
+    // a grant names any user on the platform.
+    PermissionActions["READ_PREMIUM_TRIAL"] = "read:premium-trial";
+    PermissionActions["GRANT_PREMIUM_TRIAL"] = "grant:premium-trial";
+    PermissionActions["REVOKE_PREMIUM_TRIAL"] = "revoke:premium-trial";
     // Module: Newsfeed
     PermissionActions["CREATE_NEWSFEED_POST"] = "create:newsfeed-post";
     PermissionActions["READ_NEWSFEED_POST"] = "read:newsfeed-post";
@@ -227,28 +269,113 @@ var PermissionActions;
     // CUSTOMERS see - a wrong logo or sender goes out on every OTP and alert -
     // and that is not something everyone who may edit the organization's address
     // should be able to change.
-    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
-    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    //
+    // One family per thing configured, because they are different decisions: the
+    // brand is marketing's, a sending address needs a verified domain, and an SMS
+    // sender ID is registered with each telco. clarion-notification additionally
+    // refuses a change from anyone not scoped to the whole organization.
+    //
+    // Branding: logo, colours, names and contact details on every email. UPDATE
+    // also covers the test email that shows the result.
+    PermissionActions["READ_NOTIFICATION_BRANDING"] = "read:notification-branding";
+    PermissionActions["UPDATE_NOTIFICATION_BRANDING"] = "update:notification-branding";
+    // The addresses the organization's email is sent from. UPDATE also covers
+    // re-checking an address with the email providers.
+    PermissionActions["CREATE_NOTIFICATION_EMAIL_SENDER"] = "create:notification-email-sender";
+    PermissionActions["READ_NOTIFICATION_EMAIL_SENDER"] = "read:notification-email-sender";
+    PermissionActions["UPDATE_NOTIFICATION_EMAIL_SENDER"] = "update:notification-email-sender";
+    PermissionActions["DELETE_NOTIFICATION_EMAIL_SENDER"] = "delete:notification-email-sender";
+    // The sender IDs its SMS arrive under. CREATE is a REQUEST: a new sender is
+    // pending until a platform operator approves it (below). READ also covers the
+    // catalogue of SMS providers a sender can be registered with.
+    PermissionActions["CREATE_NOTIFICATION_SMS_SENDER"] = "create:notification-sms-sender";
+    PermissionActions["READ_NOTIFICATION_SMS_SENDER"] = "read:notification-sms-sender";
+    PermissionActions["UPDATE_NOTIFICATION_SMS_SENDER"] = "update:notification-sms-sender";
+    PermissionActions["DELETE_NOTIFICATION_SMS_SENDER"] = "delete:notification-sms-sender";
     // Confirming that an SMS sender ID really is registered with the provider.
     // Deliberately granted to NO role: only a platform operator (Super-Admin,
     // '*') can know that, and an organization able to activate its own sender
     // could send SMS under any name it cared to type.
     PermissionActions["APPROVE_NOTIFICATION_SENDER"] = "approve:notification-sender";
+    /**
+     * @deprecated Split into the branding / email sender / SMS sender actions
+     * above, which the gateway now requires instead. Still granted to
+     * Organization:Owner and Organization:Admin for ONE release, so a gateway that
+     * has not yet been redeployed keeps working while clarion-authentication
+     * reseeds roles; remove it (and its grants) once every gateway requires the new
+     * actions. Grant it to nothing new.
+     */
+    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
+    /** @deprecated See READ_NOTIFICATION_SETTINGS. */
+    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
     // Module: Alert Intake
     // The channels the PUBLIC reaches an organization on without the app - its SMS
     // short code, WhatsApp number and mailbox (clarion-alerts). A family of its own
     // because a connection holds provider credentials and decides which organization
     // an emergency message is raised for; neither belongs with "may edit the
     // organization's address".
-    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
-    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
+    //
+    // Split by what the work is: CONFIGURING the channels is an organization-level
+    // job (clarion-alerts refuses it to anyone not scoped to the whole
+    // organization); WORKING what arrives on them - reading messages, raising the
+    // ones the pipeline could not - is a control-room job as well.
+    //
+    // A connection: the organization's own short code, WhatsApp number or mailbox,
+    // with its provider credentials. READ also covers the provider catalogue and
+    // the platform addresses the organization falls back to. UPDATE also covers
+    // enabling, disabling and issuing a new webhook URL (the old one stops working).
+    PermissionActions["CREATE_ALERT_INTAKE_CONNECTION"] = "create:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_CONNECTION"] = "read:alert-intake-connection";
+    PermissionActions["UPDATE_ALERT_INTAKE_CONNECTION"] = "update:alert-intake-connection";
+    PermissionActions["DELETE_ALERT_INTAKE_CONNECTION"] = "delete:alert-intake-connection";
+    // Checking a connection against its provider with the stored credentials.
+    // Changes nothing, but it does sign in to the provider on the organization's
+    // behalf, so it is not a plain read.
+    PermissionActions["TEST_ALERT_INTAKE_CONNECTION"] = "test:alert-intake-connection";
+    // What arrived and what became of it - including what a member of the public
+    // wrote and the number they wrote from.
+    PermissionActions["READ_ALERT_INTAKE_MESSAGE"] = "read:alert-intake-message";
+    // Re-queueing a parked message, or raising one taken for a duplicate anyway.
+    // Either way it RAISES AN INCIDENT, so whoever holds this also holds
+    // create:incident (pinned in roles.spec.ts).
+    PermissionActions["RETRY_ALERT_INTAKE_MESSAGE"] = "retry:alert-intake-message";
+    // The review queue: messages screened out as not a report.
+    PermissionActions["READ_ALERT_INTAKE_SCREENED_MESSAGE"] = "read:alert-intake-screened-message";
+    // Raising a screened message after all (it becomes an incident) or confirming
+    // it is not a report. Holders also hold create:incident, as above.
+    PermissionActions["REVIEW_ALERT_INTAKE_SCREENED_MESSAGE"] = "review:alert-intake-screened-message";
+    // Volumes, outcomes, screening, timing and the AI's cost over a period. Counts
+    // only; kept apart from the messages because it includes what the AI costs.
+    PermissionActions["READ_ALERT_INTAKE_ANALYTICS"] = "read:alert-intake-analytics";
     // PLATFORM connections and their routes: the shared short code every
     // organization without its own falls back to, and which keyword sends a message
     // to which organization. Deliberately granted to NO role - one wrong route sends
     // one organization's emergencies to another. Super-Admin ('*') only. It also
     // covers the two things an organization must not be able to do to itself:
     // point a connection at a provisioned secret by name, and switch off TLS
-    // verification on a mailbox.
+    // verification on a mailbox - and every organization's messages and analytics.
     PermissionActions["MANAGE_ALERT_INTAKE_PLATFORM"] = "manage:alert-intake-platform";
+    /**
+     * @deprecated Split into the connection / message / screened-message /
+     * analytics actions above, which the gateway now requires instead. Still
+     * granted to Organization:Owner and Organization:Admin for ONE release, so a
+     * gateway that has not yet been redeployed keeps working while
+     * clarion-authentication reseeds roles; remove it (and its grants) once every
+     * gateway requires the new actions. Grant it to nothing new.
+     */
+    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
+    /** @deprecated See READ_ALERT_INTAKE. */
+    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
 })(PermissionActions || (exports.PermissionActions = PermissionActions = {}));
+/**
+ * Actions kept only so a gateway that has not been redeployed keeps working through
+ * a release that replaced them. Nothing new may require or be granted them; the
+ * next release removes them from the enum, the catalogue and every role.
+ */
+exports.RETIRING_PERMISSION_ACTIONS = [
+    PermissionActions.READ_NOTIFICATION_SETTINGS,
+    PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
+    PermissionActions.READ_ALERT_INTAKE,
+    PermissionActions.MANAGE_ALERT_INTAKE,
+];
 //# sourceMappingURL=permission-actions.enum.js.map

package/dist/cjs/modules/permission/enums/permission-actions.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBAoRX;AApRD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;;OAIG;IACH,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C;;;;OAIG;IACH,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,+DAA+D;IAC/D,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4BAA4B;IAC5B,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,kDAAkD;IAClD,gFAA2D,CAAA;IAE3D,uBAAuB;IACvB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,2BAA2B;IAC3B,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,6BAA6B;IAC7B,kFAA6D,CAAA;AACjE,CAAC,EApRW,iBAAiB,iCAAjB,iBAAiB,QAoR5B"}
+{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":";;;AAAA,IAAY,iBA4YX;AA5YD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;;OAIG;IACH,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C;;;;OAIG;IACH,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,gEAAgE;IAChE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,sEAAsE;IACtE,gEAAgE;IAChE,uBAAuB;IACvB,EAAE;IACF,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,yCAAyC;IACzC,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAwE;IACxE,sEAAsE;IACtE,8EAAyD,CAAA;IAEzD,yEAAyE;IACzE,yEAAyE;IACzE,wEAAmD,CAAA;IAEnD,4EAA4E;IAC5E,4EAA4E;IAC5E,0CAA0C;IAC1C,8DAAyC,CAAA;IACzC,gEAA2C,CAAA;IAC3C,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,+DAA+D;IAC/D,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,EAAE;IACF,4EAA4E;IAC5E,oDAAoD;IACpD,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,0EAA0E;IAC1E,mDAAmD;IACnD,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,0FAAqE,CAAA;IACrE,0FAAqE,CAAA;IACrE,4EAA4E;IAC5E,8EAA8E;IAC9E,8DAA8D;IAC9D,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,kDAAkD;IAClD,gFAA2D,CAAA;IAC3D;;;;;;;OAOG;IACH,8EAAyD,CAAA;IACzD,kDAAkD;IAClD,kFAA6D,CAAA;IAE7D,uBAAuB;IACvB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,2BAA2B;IAC3B,EAAE;IACF,+EAA+E;IAC/E,mEAAmE;IACnE,8EAA8E;IAC9E,+DAA+D;IAC/D,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,iFAAiF;IACjF,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,0EAA0E;IAC1E,6EAA6E;IAC7E,qCAAqC;IACrC,kFAA6D,CAAA;IAC7D,6EAA6E;IAC7E,wCAAwC;IACxC,4EAAuD,CAAA;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,6CAA6C;IAC7C,8EAAyD,CAAA;IACzD,2DAA2D;IAC3D,8FAAyE,CAAA;IACzE,8EAA8E;IAC9E,mEAAmE;IACnE,kGAA6E,CAAA;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,gFAA2D,CAAA;IAC3D,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,kFAA6D,CAAA;IAC7D;;;;;;;OAOG;IACH,4DAAuC,CAAA;IACvC,yCAAyC;IACzC,gEAA2C,CAAA;AAC/C,CAAC,EA5YW,iBAAiB,iCAAjB,iBAAiB,QA4Y5B;AAED;;;;GAIG;AACU,QAAA,2BAA2B,GAAsB;IAC1D,iBAAiB,CAAC,0BAA0B;IAC5C,iBAAiB,CAAC,4BAA4B;IAC9C,iBAAiB,CAAC,iBAAiB;IACnC,iBAAiB,CAAC,mBAAmB;CACxC,CAAC"}

package/dist/cjs/modules/role/constants/billing-roles.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BILLING_VIEWER_ROLES = exports.BILLING_MANAGER_ROLES = void 0;
+const role_enum_1 = require("../enums/role.enum");
+/**
+ * The organization roles that RUN an organization's billing, holding every
+ * organization-level billing action (see roles.data.ts).
+ *
+ * For the places that still decide by role NAME rather than permission:
+ * clarion-billing's checks on manual approval, marking an invoice paid and
+ * renewing on a subscriber's behalf, and the admin's billing screens deciding
+ * whether to offer an action at all. roles.spec.ts asserts every role listed
+ * here holds the full organization billing set, so the names and the grants
+ * cannot drift apart.
+ */
+exports.BILLING_MANAGER_ROLES = [
+    role_enum_1.Roles.ORGANIZATION_OWNER,
+    role_enum_1.Roles.ORGANIZATION_ADMIN,
+    role_enum_1.Roles.ORGANIZATION_BILLING_ADMIN
+];
+/**
+ * The organization roles that may SEE its billing: the managers, plus
+ * Organization:User, which holds the reads and nothing else.
+ */
+exports.BILLING_VIEWER_ROLES = [
+    ...exports.BILLING_MANAGER_ROLES,
+    role_enum_1.Roles.ORGANIZATION_USER
+];
+//# sourceMappingURL=billing-roles.js.map

package/dist/cjs/modules/role/constants/billing-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-roles.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/billing-roles.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE3C;;;;;;;;;;GAUG;AACU,QAAA,qBAAqB,GAAa;IAC3C,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF;;;GAGG;AACU,QAAA,oBAAoB,GAAa;IAC1C,GAAG,6BAAqB;IACxB,iBAAK,CAAC,iBAAiB;CAC1B,CAAC"}

package/dist/cjs/modules/role/constants/roles-by-scope.js

@@ -10,7 +10,8 @@ exports.ORGANIZATION_ROLES = [
     role_enum_1.Roles.ORGANIZATION_NEWSFEED_ADMIN,
     role_enum_1.Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
     role_enum_1.Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
-    role_enum_1.Roles.ORGANIZATION_SUPPORT_ADMIN
+    role_enum_1.Roles.ORGANIZATION_SUPPORT_ADMIN,
+    role_enum_1.Roles.ORGANIZATION_ALERT_CHANNELS_ADMIN
 ];
 exports.CONTROL_CENTRE_ROLES = [
     role_enum_1.Roles.CONTROL_CENTRE_ADMIN,

package/dist/cjs/modules/role/constants/roles-by-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;IACrC,iBAAK,CAAC,iCAAiC;IACvC,iBAAK,CAAC,0BAA0B;CACnC,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;IACf,iBAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}
+{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":";;;AAAA,kDAA2C;AAE9B,QAAA,kBAAkB,GAAa;IACxC,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,kBAAkB;IACxB,iBAAK,CAAC,iBAAiB;IACvB,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,2BAA2B;IACjC,iBAAK,CAAC,+BAA+B;IACrC,iBAAK,CAAC,iCAAiC;IACvC,iBAAK,CAAC,0BAA0B;IAChC,iBAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEW,QAAA,oBAAoB,GAAa;IAC1C,iBAAK,CAAC,oBAAoB;IAC1B,iBAAK,CAAC,mBAAmB;IACzB,iBAAK,CAAC,SAAS;IACf,iBAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEW,QAAA,YAAY,GAAa;IAClC,iBAAK,CAAC,WAAW;CACpB,CAAC"}