grm-shared-library 1.1.217 → 1.1.219

package/dist/esm/modules/permission/enums/permission-actions.enum.js

@@ -159,6 +159,24 @@ export var PermissionActions;
     // is the first half of that one task.
     PermissionActions["MANAGE_TRACKING_OPERATIONS"] = "manage:tracking-operations";
     // Module: Billing
+    //
+    // Two kinds of action, and the difference is who may hold them:
+    //
+    //   ORGANIZATION actions run an organization's own billing - its packages,
+    //   clients, subscriptions and the money they bring in. clarion-billing
+    //   scopes every one of them to the caller's organization. Granted to
+    //   Organization:Owner, :Admin and :Billing-Admin; the reads to
+    //   Organization:User.
+    //
+    //   PLATFORM actions are the platform's own business: the commercial terms it
+    //   sets each organization (billing config), settling revenue share with them,
+    //   reconciling provider payouts, the cross-organization dashboards, and
+    //   anything clarion-billing does not yet scope to one organization (premium
+    //   trials, reading another user's entitlements). No role holds these; only
+    //   Super-Admin's wildcard reaches them.
+    //
+    // roles.data.ts names both lists, and roles.spec.ts fails if an action in this
+    // module is in neither - a new billing action has to be placed deliberately.
     PermissionActions["CREATE_BENEFICIARY"] = "create:beneficiary";
     PermissionActions["READ_BENEFICIARY"] = "read:beneficiary";
     PermissionActions["UPDATE_BENEFICIARY"] = "update:beneficiary";
@@ -209,6 +227,30 @@ export var PermissionActions;
     PermissionActions["READ_SETTLEMENT"] = "read:settlement";
     PermissionActions["SEND_SETTLEMENT_INVOICE"] = "send:settlement-invoice";
     PermissionActions["MARK_SETTLEMENT_PAID"] = "mark:settlement-paid";
+    // Renewing a subscription: a fresh checkout for the next period. Its own
+    // action because it is the one subscription action a SUBSCRIBER takes on
+    // their own plan from the app - manual renewal where mobile money leaves
+    // nothing to charge automatically (UG/TZ) - as well as staff on the
+    // organization's behalf. clarion-billing lets the owner or the
+    // organization's billing staff renew, nobody else.
+    PermissionActions["RENEW_SUBSCRIPTION"] = "renew:subscription";
+    // Provider settlement batches: what Paystack and Flutterwave paid out,
+    // grouped by provider, country and currency, and reconciled against their
+    // reports. PLATFORM: the payouts are the platform's, not one organization's.
+    PermissionActions["READ_SETTLEMENT_BATCH"] = "read:settlement-batch";
+    PermissionActions["CREATE_SETTLEMENT_BATCH"] = "create:settlement-batch";
+    // Importing the provider's report, recording what it actually paid, and
+    // moving a batch through its statuses - the steps of reconciling one.
+    PermissionActions["RECONCILE_SETTLEMENT_BATCH"] = "reconcile:settlement-batch";
+    // The cross-country operations dashboards (revenue, providers, renewals,
+    // configuration readiness). PLATFORM: they aggregate every organization.
+    PermissionActions["READ_BILLING_OPERATIONS"] = "read:billing-operations";
+    // Premium trials. PLATFORM for now: trial policy is platform configuration,
+    // and clarion-billing does not scope a trial to the caller's organization -
+    // a grant names any user on the platform.
+    PermissionActions["READ_PREMIUM_TRIAL"] = "read:premium-trial";
+    PermissionActions["GRANT_PREMIUM_TRIAL"] = "grant:premium-trial";
+    PermissionActions["REVOKE_PREMIUM_TRIAL"] = "revoke:premium-trial";
     // Module: Newsfeed
     PermissionActions["CREATE_NEWSFEED_POST"] = "create:newsfeed-post";
     PermissionActions["READ_NEWSFEED_POST"] = "read:newsfeed-post";
@@ -224,28 +266,113 @@ export var PermissionActions;
     // CUSTOMERS see - a wrong logo or sender goes out on every OTP and alert -
     // and that is not something everyone who may edit the organization's address
     // should be able to change.
-    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
-    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
+    //
+    // One family per thing configured, because they are different decisions: the
+    // brand is marketing's, a sending address needs a verified domain, and an SMS
+    // sender ID is registered with each telco. clarion-notification additionally
+    // refuses a change from anyone not scoped to the whole organization.
+    //
+    // Branding: logo, colours, names and contact details on every email. UPDATE
+    // also covers the test email that shows the result.
+    PermissionActions["READ_NOTIFICATION_BRANDING"] = "read:notification-branding";
+    PermissionActions["UPDATE_NOTIFICATION_BRANDING"] = "update:notification-branding";
+    // The addresses the organization's email is sent from. UPDATE also covers
+    // re-checking an address with the email providers.
+    PermissionActions["CREATE_NOTIFICATION_EMAIL_SENDER"] = "create:notification-email-sender";
+    PermissionActions["READ_NOTIFICATION_EMAIL_SENDER"] = "read:notification-email-sender";
+    PermissionActions["UPDATE_NOTIFICATION_EMAIL_SENDER"] = "update:notification-email-sender";
+    PermissionActions["DELETE_NOTIFICATION_EMAIL_SENDER"] = "delete:notification-email-sender";
+    // The sender IDs its SMS arrive under. CREATE is a REQUEST: a new sender is
+    // pending until a platform operator approves it (below). READ also covers the
+    // catalogue of SMS providers a sender can be registered with.
+    PermissionActions["CREATE_NOTIFICATION_SMS_SENDER"] = "create:notification-sms-sender";
+    PermissionActions["READ_NOTIFICATION_SMS_SENDER"] = "read:notification-sms-sender";
+    PermissionActions["UPDATE_NOTIFICATION_SMS_SENDER"] = "update:notification-sms-sender";
+    PermissionActions["DELETE_NOTIFICATION_SMS_SENDER"] = "delete:notification-sms-sender";
     // Confirming that an SMS sender ID really is registered with the provider.
     // Deliberately granted to NO role: only a platform operator (Super-Admin,
     // '*') can know that, and an organization able to activate its own sender
     // could send SMS under any name it cared to type.
     PermissionActions["APPROVE_NOTIFICATION_SENDER"] = "approve:notification-sender";
+    /**
+     * @deprecated Split into the branding / email sender / SMS sender actions
+     * above, which the gateway now requires instead. Still granted to
+     * Organization:Owner and Organization:Admin for ONE release, so a gateway that
+     * has not yet been redeployed keeps working while clarion-authentication
+     * reseeds roles; remove it (and its grants) once every gateway requires the new
+     * actions. Grant it to nothing new.
+     */
+    PermissionActions["READ_NOTIFICATION_SETTINGS"] = "read:notification-settings";
+    /** @deprecated See READ_NOTIFICATION_SETTINGS. */
+    PermissionActions["MANAGE_NOTIFICATION_SETTINGS"] = "manage:notification-settings";
     // Module: Alert Intake
     // The channels the PUBLIC reaches an organization on without the app - its SMS
     // short code, WhatsApp number and mailbox (clarion-alerts). A family of its own
     // because a connection holds provider credentials and decides which organization
     // an emergency message is raised for; neither belongs with "may edit the
     // organization's address".
-    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
-    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
+    //
+    // Split by what the work is: CONFIGURING the channels is an organization-level
+    // job (clarion-alerts refuses it to anyone not scoped to the whole
+    // organization); WORKING what arrives on them - reading messages, raising the
+    // ones the pipeline could not - is a control-room job as well.
+    //
+    // A connection: the organization's own short code, WhatsApp number or mailbox,
+    // with its provider credentials. READ also covers the provider catalogue and
+    // the platform addresses the organization falls back to. UPDATE also covers
+    // enabling, disabling and issuing a new webhook URL (the old one stops working).
+    PermissionActions["CREATE_ALERT_INTAKE_CONNECTION"] = "create:alert-intake-connection";
+    PermissionActions["READ_ALERT_INTAKE_CONNECTION"] = "read:alert-intake-connection";
+    PermissionActions["UPDATE_ALERT_INTAKE_CONNECTION"] = "update:alert-intake-connection";
+    PermissionActions["DELETE_ALERT_INTAKE_CONNECTION"] = "delete:alert-intake-connection";
+    // Checking a connection against its provider with the stored credentials.
+    // Changes nothing, but it does sign in to the provider on the organization's
+    // behalf, so it is not a plain read.
+    PermissionActions["TEST_ALERT_INTAKE_CONNECTION"] = "test:alert-intake-connection";
+    // What arrived and what became of it - including what a member of the public
+    // wrote and the number they wrote from.
+    PermissionActions["READ_ALERT_INTAKE_MESSAGE"] = "read:alert-intake-message";
+    // Re-queueing a parked message, or raising one taken for a duplicate anyway.
+    // Either way it RAISES AN INCIDENT, so whoever holds this also holds
+    // create:incident (pinned in roles.spec.ts).
+    PermissionActions["RETRY_ALERT_INTAKE_MESSAGE"] = "retry:alert-intake-message";
+    // The review queue: messages screened out as not a report.
+    PermissionActions["READ_ALERT_INTAKE_SCREENED_MESSAGE"] = "read:alert-intake-screened-message";
+    // Raising a screened message after all (it becomes an incident) or confirming
+    // it is not a report. Holders also hold create:incident, as above.
+    PermissionActions["REVIEW_ALERT_INTAKE_SCREENED_MESSAGE"] = "review:alert-intake-screened-message";
+    // Volumes, outcomes, screening, timing and the AI's cost over a period. Counts
+    // only; kept apart from the messages because it includes what the AI costs.
+    PermissionActions["READ_ALERT_INTAKE_ANALYTICS"] = "read:alert-intake-analytics";
     // PLATFORM connections and their routes: the shared short code every
     // organization without its own falls back to, and which keyword sends a message
     // to which organization. Deliberately granted to NO role - one wrong route sends
     // one organization's emergencies to another. Super-Admin ('*') only. It also
     // covers the two things an organization must not be able to do to itself:
     // point a connection at a provisioned secret by name, and switch off TLS
-    // verification on a mailbox.
+    // verification on a mailbox - and every organization's messages and analytics.
     PermissionActions["MANAGE_ALERT_INTAKE_PLATFORM"] = "manage:alert-intake-platform";
+    /**
+     * @deprecated Split into the connection / message / screened-message /
+     * analytics actions above, which the gateway now requires instead. Still
+     * granted to Organization:Owner and Organization:Admin for ONE release, so a
+     * gateway that has not yet been redeployed keeps working while
+     * clarion-authentication reseeds roles; remove it (and its grants) once every
+     * gateway requires the new actions. Grant it to nothing new.
+     */
+    PermissionActions["READ_ALERT_INTAKE"] = "read:alert-intake";
+    /** @deprecated See READ_ALERT_INTAKE. */
+    PermissionActions["MANAGE_ALERT_INTAKE"] = "manage:alert-intake";
 })(PermissionActions || (PermissionActions = {}));
+/**
+ * Actions kept only so a gateway that has not been redeployed keeps working through
+ * a release that replaced them. Nothing new may require or be granted them; the
+ * next release removes them from the enum, the catalogue and every role.
+ */
+export const RETIRING_PERMISSION_ACTIONS = [
+    PermissionActions.READ_NOTIFICATION_SETTINGS,
+    PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
+    PermissionActions.READ_ALERT_INTAKE,
+    PermissionActions.MANAGE_ALERT_INTAKE,
+];
 //# sourceMappingURL=permission-actions.enum.js.map

package/dist/esm/modules/permission/enums/permission-actions.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBAoRX;AApRD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;;OAIG;IACH,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C;;;;OAIG;IACH,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,+DAA+D;IAC/D,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4BAA4B;IAC5B,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,kDAAkD;IAClD,gFAA2D,CAAA;IAE3D,uBAAuB;IACvB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,2BAA2B;IAC3B,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,6BAA6B;IAC7B,kFAA6D,CAAA;AACjE,CAAC,EApRW,iBAAiB,KAAjB,iBAAiB,QAoR5B"}
+{"version":3,"file":"permission-actions.enum.js","sourceRoot":"","sources":["../../../../../src/modules/permission/enums/permission-actions.enum.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,iBA4YX;AA5YD,WAAY,iBAAiB;IACzB,uBAAuB;IACvB,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,gEAA2C,CAAA;IAC3C,gEAA2C,CAAA;IAE3C,kBAAkB;IAClB,iEAAiE;IACjE,2EAA2E;IAC3E,sDAAsD;IACtD,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,sDAAiC,CAAA;IACjC,qEAAqE;IACrE,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAA+C,CAAA;IAC/C,0EAAqD,CAAA;IACrD,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IACnD,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,wEAAmD,CAAA;IACnD,4EAAuD,CAAA;IAEvD,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,EAAE;IACF,0EAA0E;IAC1E,kEAAkE;IAClE,uEAAuE;IACvE,0EAA0E;IAC1E,8DAA8D;IAC9D,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,gEAA2C,CAAA;IAC3C,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,yEAAyE;IACzE,gEAA2C,CAAA;IAC3C;;;;OAIG;IACH,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,2EAA2E;IAC3E,4CAA4C;IAC5C;;;;OAIG;IACH,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,gFAAgF;IAChF,sEAAiD,CAAA;IACjD,wEAAmD,CAAA;IACnD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,yCAAyC;IACzC,kEAA6C,CAAA;IAC7C,gEAA2C,CAAA;IAC3C,8DAAyC,CAAA;IACzC,kFAA6D,CAAA;IAC7D,gEAA2C,CAAA;IAC3C,4DAAuC,CAAA;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,qCAAqC;IACrC,gEAA2C,CAAA;IAE3C,wBAAwB;IACxB,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,eAAe;IACf,gDAA2B,CAAA;IAC3B,4CAAuB,CAAA;IACvB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAE3B,mBAAmB;IACnB,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,wDAAmC,CAAA;IACnC,wDAAmC,CAAA;IACnC,oFAA+D,CAAA;IAC/D,gFAA2D,CAAA;IAC3D,oFAA+D,CAAA;IAC/D,oFAA+D,CAAA;IAE/D,uBAAuB;IACvB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,kEAA6C,CAAA;IAE7C,+CAA+C;IAC/C,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gGAA2E,CAAA;IAC3E,4FAAuE,CAAA;IACvE,gGAA2E,CAAA;IAC3E,gGAA2E,CAAA;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,6EAA6E;IAC7E,yBAAyB;IACzB,sEAAiD,CAAA;IACjD,yEAAyE;IACzE,qEAAqE;IACrE,6DAA6D;IAC7D,oEAA+C,CAAA;IAC/C,4EAA4E;IAC5E,0EAAqD,CAAA;IACrD,wEAAwE;IACxE,6EAA6E;IAC7E,sCAAsC;IACtC,8EAAyD,CAAA;IAEzD,kBAAkB;IAClB,EAAE;IACF,gEAAgE;IAChE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,sEAAsE;IACtE,gEAAgE;IAChE,uBAAuB;IACvB,EAAE;IACF,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,6EAA6E;IAC7E,4EAA4E;IAC5E,yCAAyC;IACzC,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,8DAAyC,CAAA;IACzC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,8DAAyC,CAAA;IAEzC,oEAA+C,CAAA;IAC/C,gEAA2C,CAAA;IAC3C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAE/C,wEAAmD,CAAA;IACnD,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAmD,CAAA;IAEnD,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IAEjE,0EAAqD,CAAA;IACrD,sEAAiD,CAAA;IACjD,0EAAqD,CAAA;IACrD,0EAAqD,CAAA;IAErD,0DAAqC,CAAA;IAErC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,4DAAuC,CAAA;IAEvC,kDAA6B,CAAA;IAC7B,8CAAyB,CAAA;IACzB,oDAA+B,CAAA;IAE/B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAC7B,sDAAiC,CAAA;IACjC,0DAAqC,CAAA;IACrC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IAEjC,8DAAyC,CAAA;IACzC,sDAAiC,CAAA;IACjC,kDAA6B,CAAA;IAE7B,8FAAyE,CAAA;IACzE,kFAA6D,CAAA;IAC7D,0GAAqF,CAAA;IACrF,sFAAiE,CAAA;IAEjE,4FAAuE,CAAA;IACvE,gFAA2D,CAAA;IAC3D,wGAAmF,CAAA;IACnF,oFAA+D,CAAA;IAE/D,4DAAuC,CAAA;IACvC,wDAAmC,CAAA;IACnC,wEAAmD,CAAA;IACnD,kEAA6C,CAAA;IAE7C,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,8DAAyC,CAAA;IAEzC,uEAAuE;IACvE,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAA+C,CAAA;IAC/C,wEAAmD,CAAA;IACnD,wEAAwE;IACxE,sEAAsE;IACtE,8EAAyD,CAAA;IAEzD,yEAAyE;IACzE,yEAAyE;IACzE,wEAAmD,CAAA;IAEnD,4EAA4E;IAC5E,4EAA4E;IAC5E,0CAA0C;IAC1C,8DAAyC,CAAA;IACzC,gEAA2C,CAAA;IAC3C,kEAA6C,CAAA;IAE7C,mBAAmB;IACnB,kEAA6C,CAAA;IAC7C,8DAAyC,CAAA;IACzC,kEAA6C,CAAA;IAC7C,oEAA+C,CAAA;IAC/C,oEAA+C,CAAA;IAC/C,kEAA6C,CAAA;IAE7C,uBAAuB;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,+DAA+D;IAC/D,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,4BAA4B;IAC5B,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,qEAAqE;IACrE,EAAE;IACF,4EAA4E;IAC5E,oDAAoD;IACpD,8EAAyD,CAAA;IACzD,kFAA6D,CAAA;IAC7D,0EAA0E;IAC1E,mDAAmD;IACnD,0FAAqE,CAAA;IACrE,sFAAiE,CAAA;IACjE,0FAAqE,CAAA;IACrE,0FAAqE,CAAA;IACrE,4EAA4E;IAC5E,8EAA8E;IAC9E,8DAA8D;IAC9D,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,kDAAkD;IAClD,gFAA2D,CAAA;IAC3D;;;;;;;OAOG;IACH,8EAAyD,CAAA;IACzD,kDAAkD;IAClD,kFAA6D,CAAA;IAE7D,uBAAuB;IACvB,+EAA+E;IAC/E,gFAAgF;IAChF,iFAAiF;IACjF,yEAAyE;IACzE,2BAA2B;IAC3B,EAAE;IACF,+EAA+E;IAC/E,mEAAmE;IACnE,8EAA8E;IAC9E,+DAA+D;IAC/D,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,iFAAiF;IACjF,sFAAiE,CAAA;IACjE,kFAA6D,CAAA;IAC7D,sFAAiE,CAAA;IACjE,sFAAiE,CAAA;IACjE,0EAA0E;IAC1E,6EAA6E;IAC7E,qCAAqC;IACrC,kFAA6D,CAAA;IAC7D,6EAA6E;IAC7E,wCAAwC;IACxC,4EAAuD,CAAA;IACvD,6EAA6E;IAC7E,qEAAqE;IACrE,6CAA6C;IAC7C,8EAAyD,CAAA;IACzD,2DAA2D;IAC3D,8FAAyE,CAAA;IACzE,8EAA8E;IAC9E,mEAAmE;IACnE,kGAA6E,CAAA;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,gFAA2D,CAAA;IAC3D,qEAAqE;IACrE,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,kFAA6D,CAAA;IAC7D;;;;;;;OAOG;IACH,4DAAuC,CAAA;IACvC,yCAAyC;IACzC,gEAA2C,CAAA;AAC/C,CAAC,EA5YW,iBAAiB,KAAjB,iBAAiB,QA4Y5B;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC1D,iBAAiB,CAAC,0BAA0B;IAC5C,iBAAiB,CAAC,4BAA4B;IAC9C,iBAAiB,CAAC,iBAAiB;IACnC,iBAAiB,CAAC,mBAAmB;CACxC,CAAC"}

package/dist/esm/modules/role/constants/billing-roles.js

@@ -0,0 +1,26 @@
+import { Roles } from "../enums/role.enum";
+/**
+ * The organization roles that RUN an organization's billing, holding every
+ * organization-level billing action (see roles.data.ts).
+ *
+ * For the places that still decide by role NAME rather than permission:
+ * clarion-billing's checks on manual approval, marking an invoice paid and
+ * renewing on a subscriber's behalf, and the admin's billing screens deciding
+ * whether to offer an action at all. roles.spec.ts asserts every role listed
+ * here holds the full organization billing set, so the names and the grants
+ * cannot drift apart.
+ */
+export const BILLING_MANAGER_ROLES = [
+    Roles.ORGANIZATION_OWNER,
+    Roles.ORGANIZATION_ADMIN,
+    Roles.ORGANIZATION_BILLING_ADMIN
+];
+/**
+ * The organization roles that may SEE its billing: the managers, plus
+ * Organization:User, which holds the reads and nothing else.
+ */
+export const BILLING_VIEWER_ROLES = [
+    ...BILLING_MANAGER_ROLES,
+    Roles.ORGANIZATION_USER
+];
+//# sourceMappingURL=billing-roles.js.map

package/dist/esm/modules/role/constants/billing-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-roles.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/billing-roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC3C,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,GAAG,qBAAqB;IACxB,KAAK,CAAC,iBAAiB;CAC1B,CAAC"}

package/dist/esm/modules/role/constants/roles-by-scope.js

@@ -7,7 +7,8 @@ export const ORGANIZATION_ROLES = [
     Roles.ORGANIZATION_NEWSFEED_ADMIN,
     Roles.ORGANIZATION_PARTNERSHIPS_ADMIN,
     Roles.ORGANIZATION_RESPONSE_UNITS_ADMIN,
-    Roles.ORGANIZATION_SUPPORT_ADMIN
+    Roles.ORGANIZATION_SUPPORT_ADMIN,
+    Roles.ORGANIZATION_ALERT_CHANNELS_ADMIN
 ];
 export const CONTROL_CENTRE_ROLES = [
     Roles.CONTROL_CENTRE_ADMIN,

package/dist/esm/modules/role/constants/roles-by-scope.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;IACrC,KAAK,CAAC,iCAAiC;IACvC,KAAK,CAAC,0BAA0B;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}
+{"version":3,"file":"roles-by-scope.js","sourceRoot":"","sources":["../../../../../src/modules/role/constants/roles-by-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAa;IACxC,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,kBAAkB;IACxB,KAAK,CAAC,iBAAiB;IACvB,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,2BAA2B;IACjC,KAAK,CAAC,+BAA+B;IACrC,KAAK,CAAC,iCAAiC;IACvC,KAAK,CAAC,0BAA0B;IAChC,KAAK,CAAC,iCAAiC;CAC1C,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC1C,KAAK,CAAC,oBAAoB;IAC1B,KAAK,CAAC,mBAAmB;IACzB,KAAK,CAAC,SAAS;IACf,KAAK,CAAC,mCAAmC;CAC5C,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAa;IAClC,KAAK,CAAC,WAAW;CACpB,CAAC"}

package/dist/esm/modules/role/data/roles.data.js

@@ -88,6 +88,210 @@ const RESPONSE_UNITS_ADMIN_PERMISSIONS = [
     //its country, which centres their map and scopes the address search.
     PermissionActions.READ_ORGANIZATION
 ];
+/**
+ * Every Alert Intake action an organization may hold: the whole module apart from
+ * the platform action (Super-Admin only) and the two retiring ones. Configuring
+ * the channels and working what arrives on them.
+ */
+const ALERT_INTAKE_ORGANIZATION_PERMISSIONS = [
+    //Configuring the channels. clarion-alerts additionally refuses these to anyone
+    //not scoped to the whole organization.
+    PermissionActions.CREATE_ALERT_INTAKE_CONNECTION,
+    PermissionActions.READ_ALERT_INTAKE_CONNECTION,
+    PermissionActions.UPDATE_ALERT_INTAKE_CONNECTION,
+    PermissionActions.DELETE_ALERT_INTAKE_CONNECTION,
+    PermissionActions.TEST_ALERT_INTAKE_CONNECTION,
+    //Working what arrives on them.
+    PermissionActions.READ_ALERT_INTAKE_MESSAGE,
+    PermissionActions.RETRY_ALERT_INTAKE_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_SCREENED_MESSAGE,
+    PermissionActions.REVIEW_ALERT_INTAKE_SCREENED_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_ANALYTICS
+];
+/**
+ * The control room's share of the channels: see how they are set up and what
+ * arrived, and raise what the pipeline could not - a parked message, one taken
+ * for a duplicate, one screened out that is a report after all. Not the channels'
+ * configuration, which is the organization's.
+ */
+const ALERT_INTAKE_OPERATOR_PERMISSIONS = [
+    PermissionActions.READ_ALERT_INTAKE_CONNECTION,
+    PermissionActions.READ_ALERT_INTAKE_MESSAGE,
+    PermissionActions.RETRY_ALERT_INTAKE_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_SCREENED_MESSAGE,
+    PermissionActions.REVIEW_ALERT_INTAKE_SCREENED_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_ANALYTICS
+];
+/** Sees all of it, changes none of it. */
+const ALERT_INTAKE_READ_PERMISSIONS = [
+    PermissionActions.READ_ALERT_INTAKE_CONNECTION,
+    PermissionActions.READ_ALERT_INTAKE_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_SCREENED_MESSAGE,
+    PermissionActions.READ_ALERT_INTAKE_ANALYTICS
+];
+/**
+ * What an Alert-Channels-Admin may do: the organization's alert intake in full,
+ * and exactly what that work needs from other modules. Pinned by roles.spec.ts.
+ */
+const ALERT_CHANNELS_ADMIN_PERMISSIONS = [
+    ...ALERT_INTAKE_ORGANIZATION_PERMISSIONS,
+    //--- outside the Alert Intake module --------------------------------
+    //Incident: retrying a message and raising a screened one after all both
+    //RAISE AN INCIDENT. The pipeline files it, but the decision is this role's,
+    //and whoever may raise an incident from a message may raise one at all.
+    PermissionActions.CREATE_INCIDENT,
+    //...and see what it raised. Messages and the review queue name the incident
+    //each became; the analysis files it under the organization's own categories
+    //and types, which the incident screens show.
+    PermissionActions.READ_INCIDENT,
+    PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
+    //Context, read-only: the organization the channels belong to, and the control
+    //centres the incidents they raise are worked in.
+    PermissionActions.READ_ORGANIZATION,
+    PermissionActions.READ_CONTROL_CENTRE
+];
+/** Branding, email senders and SMS senders in full - apart from approving a sender. */
+const NOTIFICATION_SETTINGS_PERMISSIONS = [
+    PermissionActions.READ_NOTIFICATION_BRANDING,
+    PermissionActions.UPDATE_NOTIFICATION_BRANDING,
+    PermissionActions.CREATE_NOTIFICATION_EMAIL_SENDER,
+    PermissionActions.READ_NOTIFICATION_EMAIL_SENDER,
+    PermissionActions.UPDATE_NOTIFICATION_EMAIL_SENDER,
+    PermissionActions.DELETE_NOTIFICATION_EMAIL_SENDER,
+    PermissionActions.CREATE_NOTIFICATION_SMS_SENDER,
+    PermissionActions.READ_NOTIFICATION_SMS_SENDER,
+    PermissionActions.UPDATE_NOTIFICATION_SMS_SENDER,
+    PermissionActions.DELETE_NOTIFICATION_SMS_SENDER
+];
+const NOTIFICATION_SETTINGS_READ_PERMISSIONS = [
+    PermissionActions.READ_NOTIFICATION_BRANDING,
+    PermissionActions.READ_NOTIFICATION_EMAIL_SENDER,
+    PermissionActions.READ_NOTIFICATION_SMS_SENDER
+];
+/**
+ * Running an organization's own billing: every ORGANIZATION-level action in the
+ * Billing module (see the enum). clarion-billing scopes all of these to the
+ * caller's organization. Held in full by the roles in BILLING_MANAGER_ROLES.
+ *
+ * The Billing module's other actions are PLATFORM-level and held by no role -
+ * roles.spec.ts names them, and fails on any billing action that is in neither
+ * list:
+ *   - billing config create/update/delete: the commercial terms (revenue share,
+ *     tax treatment) the platform sets each organization. An organization must
+ *     not set its own commission.
+ *   - settlement create/send-invoice/mark-paid: the platform settling revenue
+ *     share with an organization. clarion-billing does not scope these.
+ *   - settlement batches and billing operations: provider payouts and the
+ *     cross-organization dashboards.
+ *   - premium trials and read:entitlement: clarion-billing names any user on
+ *     the platform on these routes, with no organization check. Grant them to
+ *     an organization role only once it does.
+ */
+const BILLING_ORGANIZATION_PERMISSIONS = [
+    //Packages: what the organization sells, and whether it is on sale.
+    PermissionActions.CREATE_PACKAGE,
+    PermissionActions.READ_PACKAGE,
+    PermissionActions.UPDATE_PACKAGE,
+    PermissionActions.ACTIVATE_PACKAGE,
+    PermissionActions.DEACTIVATE_PACKAGE,
+    PermissionActions.DELETE_PACKAGE,
+    //Clients: individuals, companies, a company's members, and the dependants
+    //on anybody's plan. UPDATE_BENEFICIARY, UPDATE_CORPORATE_CLIENT_MEMBER and
+    //DELETE_INDIVIDUAL_CLIENT have no route yet; they sit with the rest of
+    //their record so a route added later needs no new grant.
+    PermissionActions.CREATE_INDIVIDUAL_CLIENT,
+    PermissionActions.READ_INDIVIDUAL_CLIENT,
+    PermissionActions.UPDATE_INDIVIDUAL_CLIENT,
+    PermissionActions.DELETE_INDIVIDUAL_CLIENT,
+    PermissionActions.CREATE_CORPORATE_CLIENT,
+    PermissionActions.READ_CORPORATE_CLIENT,
+    PermissionActions.UPDATE_CORPORATE_CLIENT,
+    PermissionActions.DELETE_CORPORATE_CLIENT,
+    PermissionActions.CREATE_CORPORATE_CLIENT_MEMBER,
+    PermissionActions.READ_CORPORATE_CLIENT_MEMBER,
+    PermissionActions.UPDATE_CORPORATE_CLIENT_MEMBER,
+    PermissionActions.DELETE_CORPORATE_CLIENT_MEMBER,
+    PermissionActions.CREATE_BENEFICIARY,
+    PermissionActions.READ_BENEFICIARY,
+    PermissionActions.UPDATE_BENEFICIARY,
+    PermissionActions.DELETE_BENEFICIARY,
+    //Subscriptions, including approving one without payment and cancelling -
+    //clarion-billing additionally confines both to the organization's own.
+    PermissionActions.INITIALIZE_INDIVIDUAL_SUBSCRIPTION,
+    PermissionActions.READ_INDIVIDUAL_SUBSCRIPTION,
+    PermissionActions.APPROVE_INDIVIDUAL_SUBSCRIPTION_MANUALLY,
+    PermissionActions.CANCEL_INDIVIDUAL_SUBSCRIPTION,
+    PermissionActions.INITIALIZE_CORPORATE_SUBSCRIPTION,
+    PermissionActions.READ_CORPORATE_SUBSCRIPTION,
+    PermissionActions.APPROVE_CORPORATE_SUBSCRIPTION_MANUALLY,
+    PermissionActions.CANCEL_CORPORATE_SUBSCRIPTION,
+    PermissionActions.RENEW_SUBSCRIPTION,
+    //Corporate orders, and the documents the money produces. CREATE_INVOICE and
+    //CREATE_RECEIPT have no route yet: both are issued by the system on payment.
+    PermissionActions.CREATE_ORDER,
+    PermissionActions.READ_ORDER,
+    PermissionActions.CONFIRM_ORDER,
+    PermissionActions.CREATE_INVOICE,
+    PermissionActions.READ_INVOICE,
+    PermissionActions.MARK_INVOICE_PAID,
+    PermissionActions.CREATE_RECEIPT,
+    PermissionActions.READ_RECEIPT,
+    //Payments: starting a checkout, re-checking one with the provider, and the
+    //transaction list.
+    PermissionActions.INITIALIZE_PAYMENT,
+    PermissionActions.VERIFY_PAYMENT,
+    PermissionActions.READ_PAYMENT,
+    //What the platform settles with the organization and the terms it bills
+    //under - SEEN, not set: changing either is the platform's (see above).
+    PermissionActions.READ_SETTLEMENT,
+    PermissionActions.READ_BILLING_CONFIG
+];
+/** Sees the organization's billing, changes none of it. */
+const BILLING_READ_PERMISSIONS = BILLING_ORGANIZATION_PERMISSIONS.filter((action) => action.startsWith('read:'));
+/**
+ * What an Organization:Billing-Admin may do: the organization's billing in full,
+ * and exactly what that work needs from other modules. Pinned by roles.spec.ts.
+ */
+const BILLING_ADMIN_PERMISSIONS = [
+    ...BILLING_ORGANIZATION_PERMISSIONS,
+    //--- outside the Billing module -------------------------------------
+    //read:user is REQUIRED, not convenience: an individual client is a platform
+    //user, and billing stores only the id - the client list and detail pages
+    //fetch the name, phone and email from the user directory.
+    PermissionActions.READ_USER,
+    //A package covers a set of incident types, and the package form lists them
+    //to choose from. The taxonomy only - not the incidents themselves.
+    PermissionActions.READ_INCIDENT_CATEGORY_TYPE,
+    //Context: the organization the billing belongs to.
+    PermissionActions.READ_ORGANIZATION
+    //No partner permission. Billing reaches clarion-partner-services
+    //service-to-service (the date-of-birth lock asks it whether a partner holds a
+    //person), which needs no permission of the operator's; and no billing screen
+    //calls a partner route. Registering members is Partnerships-Admin's job.
+];
+/**
+ * A subscriber's own billing, from the app: browse the packages, buy one, renew
+ * it, and confirm the payment. Everything else they see of their own plan comes
+ * from the self-scoped "me" routes, which need no permission. clarion-billing
+ * checks the caller owns what they act on.
+ */
+const BILLING_SUBSCRIBER_PERMISSIONS = [
+    PermissionActions.READ_PACKAGE,
+    PermissionActions.INITIALIZE_INDIVIDUAL_SUBSCRIPTION,
+    PermissionActions.RENEW_SUBSCRIPTION,
+    PermissionActions.VERIFY_PAYMENT
+];
+/**
+ * The broad actions this release replaced, still held by the two roles that held
+ * them so a gateway that has not been redeployed keeps answering while
+ * clarion-authentication reseeds. Removed next release (RETIRING_PERMISSION_ACTIONS).
+ */
+const RETIRING_ORGANIZATION_ADMIN_PERMISSIONS = [
+    PermissionActions.READ_NOTIFICATION_SETTINGS,
+    PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
+    PermissionActions.READ_ALERT_INTAKE,
+    PermissionActions.MANAGE_ALERT_INTAKE
+];
 export const ROLES_DATA = [
     {
         name: Roles.SUPER_ADMIN,
@@ -102,14 +306,15 @@ export const ROLES_DATA = [
             PermissionActions.READ_ORGANIZATION,
             PermissionActions.UPDATE_ORGANIZATION,
             PermissionActions.DELETE_ORGANIZATION,
-            //Notification settings: branding, email sender and SMS sender IDs.
+            //Notification settings: branding, email senders and SMS sender IDs.
             //APPROVE_NOTIFICATION_SENDER is withheld on purpose - see the enum.
-            PermissionActions.READ_NOTIFICATION_SETTINGS,
-            PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
-            //Alert intake: the organization's own SMS, WhatsApp and email channels.
-            //MANAGE_ALERT_INTAKE_PLATFORM is withheld on purpose - see the enum.
-            PermissionActions.READ_ALERT_INTAKE,
-            PermissionActions.MANAGE_ALERT_INTAKE,
+            ...NOTIFICATION_SETTINGS_PERMISSIONS,
+            //Alert intake: the organization's own SMS, WhatsApp and email channels,
+            //and what arrives on them. MANAGE_ALERT_INTAKE_PLATFORM is withheld on
+            //purpose - see the enum.
+            ...ALERT_INTAKE_ORGANIZATION_PERMISSIONS,
+            //Retiring next release - see RETIRING_ORGANIZATION_ADMIN_PERMISSIONS.
+            ...RETIRING_ORGANIZATION_ADMIN_PERMISSIONS,
             //Partner
             PermissionActions.CREATE_PARTNER,
             PermissionActions.READ_PARTNER,
@@ -197,7 +402,10 @@ export const ROLES_DATA = [
             PermissionActions.READ_TRACKING_POSITION,
             PermissionActions.READ_TRACKING_HISTORY,
             PermissionActions.READ_TRACKING_OPERATIONS,
-            PermissionActions.MANAGE_TRACKING_OPERATIONS
+            PermissionActions.MANAGE_TRACKING_OPERATIONS,
+            //Billing: the organization's own, in full. The platform-level billing
+            //actions are withheld on purpose - see BILLING_ORGANIZATION_PERMISSIONS.
+            ...BILLING_ORGANIZATION_PERMISSIONS
         ]
     },
     {
@@ -207,14 +415,15 @@ export const ROLES_DATA = [
             //organization
             PermissionActions.READ_ORGANIZATION,
             PermissionActions.UPDATE_ORGANIZATION,
-            //Notification settings: branding, email sender and SMS sender IDs.
+            //Notification settings: branding, email senders and SMS sender IDs.
             //APPROVE_NOTIFICATION_SENDER is withheld on purpose - see the enum.
-            PermissionActions.READ_NOTIFICATION_SETTINGS,
-            PermissionActions.MANAGE_NOTIFICATION_SETTINGS,
-            //Alert intake: the organization's own SMS, WhatsApp and email channels.
-            //MANAGE_ALERT_INTAKE_PLATFORM is withheld on purpose - see the enum.
-            PermissionActions.READ_ALERT_INTAKE,
-            PermissionActions.MANAGE_ALERT_INTAKE,
+            ...NOTIFICATION_SETTINGS_PERMISSIONS,
+            //Alert intake: the organization's own SMS, WhatsApp and email channels,
+            //and what arrives on them. MANAGE_ALERT_INTAKE_PLATFORM is withheld on
+            //purpose - see the enum.
+            ...ALERT_INTAKE_ORGANIZATION_PERMISSIONS,
+            //Retiring next release - see RETIRING_ORGANIZATION_ADMIN_PERMISSIONS.
+            ...RETIRING_ORGANIZATION_ADMIN_PERMISSIONS,
             //Partner
             PermissionActions.CREATE_PARTNER,
             PermissionActions.READ_PARTNER,
@@ -302,7 +511,9 @@ export const ROLES_DATA = [
             PermissionActions.READ_TRACKING_POSITION,
             PermissionActions.READ_TRACKING_HISTORY,
             PermissionActions.READ_TRACKING_OPERATIONS,
-            PermissionActions.MANAGE_TRACKING_OPERATIONS
+            PermissionActions.MANAGE_TRACKING_OPERATIONS,
+            //Billing: the organization's own, in full, as for the Owner.
+            ...BILLING_ORGANIZATION_PERMISSIONS
         ]
     },
     {
@@ -340,7 +551,16 @@ export const ROLES_DATA = [
             PermissionActions.READ_TRACKING_DEVICE_BINDING,
             PermissionActions.READ_TRACKING_POSITION,
             PermissionActions.READ_TRACKING_HISTORY,
-            PermissionActions.READ_TRACKING_OPERATIONS
+            PermissionActions.READ_TRACKING_OPERATIONS,
+            //Notification settings: sees how the organization's email and SMS
+            //present it, changes none of it.
+            ...NOTIFICATION_SETTINGS_READ_PERMISSIONS,
+            //Alert intake: sees the channels, what arrived and the analytics;
+            //raises and configures nothing.
+            ...ALERT_INTAKE_READ_PERMISSIONS,
+            //Billing: sees the organization's packages, clients, subscriptions and
+            //money; changes none of it.
+            ...BILLING_READ_PERMISSIONS
         ]
     },
     {
@@ -373,6 +593,11 @@ export const ROLES_DATA = [
             PermissionActions.READ_INCIDENT_CATEGORY_TYPE
         ]
     },
+    {
+        name: Roles.ORGANIZATION_BILLING_ADMIN,
+        description: 'Organization Billing Admin: Manage the organization\'s billing - packages, individual and corporate clients, subscriptions, orders, invoices, receipts and payments',
+        permissions: [...BILLING_ADMIN_PERMISSIONS]
+    },
     {
         name: Roles.ORGANIZATION_SUPPORT_ADMIN,
         description: 'Organization Support Admin: Manage support tickets, customer feedback and the support desk configuration across the organization',
@@ -383,6 +608,11 @@ export const ROLES_DATA = [
         description: 'Organization Response Units Admin: Manage response units and their tracking - provider connections, device bindings and tracking operations - across the organization',
         permissions: [...RESPONSE_UNITS_ADMIN_PERMISSIONS]
     },
+    {
+        name: Roles.ORGANIZATION_ALERT_CHANNELS_ADMIN,
+        description: 'Organization Alert Channels Admin: Set up and manage the SMS, WhatsApp and email channels the public reaches the organization on, and work what arrives on them',
+        permissions: [...ALERT_CHANNELS_ADMIN_PERMISSIONS]
+    },
     {
         name: Roles.CONTROL_CENTRE_ADMIN,
         description: 'Control Centre Admin: Manage Control Centre',
@@ -459,7 +689,12 @@ export const ROLES_DATA = [
             PermissionActions.READ_TRACKING_POSITION,
             PermissionActions.READ_TRACKING_HISTORY,
             PermissionActions.READ_TRACKING_OPERATIONS,
-            PermissionActions.MANAGE_TRACKING_OPERATIONS
+            PermissionActions.MANAGE_TRACKING_OPERATIONS,
+            //Alert intake: sees how the organization's channels are set up and what
+            //arrived on them, and raises what the pipeline could not - retrying a
+            //parked message, raising a screened one after all. Configuring the
+            //channels stays with the organization.
+            ...ALERT_INTAKE_OPERATOR_PERMISSIONS
         ]
     },
     {
@@ -615,7 +850,11 @@ export const ROLES_DATA = [
             PermissionActions.RATE_SUPPORT_TICKET,
             PermissionActions.CREATE_SUPPORT_FEEDBACK,
             PermissionActions.READ_SUPPORT_FEEDBACK,
-            PermissionActions.REPLY_SUPPORT_FEEDBACK
+            PermissionActions.REPLY_SUPPORT_FEEDBACK,
+            //Billing - the SUBSCRIBER surface only: see BILLING_SUBSCRIBER_PERMISSIONS.
+            //These used to ride on the incident permissions above, which also opened
+            //every billing management route to every handset.
+            ...BILLING_SUBSCRIBER_PERMISSIONS
         ]
     }
 ];