@baruk/core 0.1.0

package/dist/db/seed.js

@@ -0,0 +1,64 @@
+/**
+ * Seed do tenant fundador — SC Organização Contábil (tenant 0001).
+ *
+ * Princípio inegociável (01-multi-tenancy §6): a SC nasce como um tenant COMUM,
+ * SEM hardcode estrutural. Este script apenas materializa dados; nenhum `if
+ * (tenant === 'SC')` existe no código de produção.
+ *
+ * Dados legais não confirmados (CNPJ, CRC, sócios) permanecem NULOS — nunca
+ * inventados. Apenas um usuário administrador de DESENVOLVIMENTO é criado.
+ *
+ * Idempotente. Uso: `pnpm db:seed`.
+ */
+import { assignSystemRole, createDb, ensureMembership, ensureOrganization, ensureProductCatalog, ensureRbacCatalog, ensureTenant, ensureTenantProduct, loadEnv, upsertUserWithPassword, } from '../index.js';
+async function main() {
+    loadEnv();
+    const ownerUrl = process.env.DATABASE_URL;
+    if (!ownerUrl)
+        throw new Error('DATABASE_URL (papel owner) não definida.');
+    const adminPassword = process.env.SEED_ADMIN_PASSWORD;
+    if (!adminPassword)
+        throw new Error('SEED_ADMIN_PASSWORD não definida.');
+    const db = createDb(ownerUrl, { role: 'owner', max: 1 });
+    try {
+        // 1) Catálogos globais: RBAC + produtos do ecossistema.
+        await ensureRbacCatalog(db);
+        await ensureProductCatalog(db);
+        console.log('✓ Catálogos garantidos (RBAC + produtos do ecossistema).');
+        // 2) Tenant fundador SC — dados legais não confirmados ficam NULOS.
+        const tenantId = await ensureTenant(db, {
+            code: 'sc',
+            displayName: 'SC Organização Contábil',
+            legalName: null, // Razão social/CNPJ não confirmados — jamais inventar.
+            status: 'active',
+            primaryProduct: 'contabil',
+        });
+        console.log(`✓ Tenant SC garantido: ${tenantId}`);
+        // 3) Organização/unidade default + entitlement do produto Contábil.
+        await ensureOrganization(db, tenantId, 'Matriz');
+        await ensureTenantProduct(db, tenantId, 'contabil');
+        console.log('✓ Entitlement do produto Baruk Contábil concedido à SC.');
+        // 4) Usuário administrador de DESENVOLVIMENTO (não é dado real de sócio).
+        const adminEmail = 'admin@sc.baruk.dev';
+        const admin = await upsertUserWithPassword(db, {
+            email: adminEmail,
+            fullName: 'Administrador SC (dev)',
+            password: adminPassword,
+            userType: 'staff',
+        });
+        console.log(`✓ Usuário admin (dev) garantido: ${admin.email}`);
+        // 5) Vínculo + papel Owner.
+        await ensureMembership(db, tenantId, admin.id);
+        await assignSystemRole(db, tenantId, admin.id, 'owner');
+        console.log('✓ Membership + papel Owner atribuídos ao admin no tenant SC.');
+        console.log('\n✓ Seed concluído. Login dev: admin@sc.baruk.dev / (SEED_ADMIN_PASSWORD)');
+    }
+    finally {
+        await db.end({ timeout: 5 });
+    }
+}
+main().catch((err) => {
+    console.error('✗ Falha no seed:', err instanceof Error ? err.message : err);
+    process.exit(1);
+});
+//# sourceMappingURL=seed.js.map

package/dist/db/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/db/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,OAAO,EACP,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,KAAK,UAAU,IAAI;IACjB,OAAO,EAAE,CAAC;IACV,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACtD,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEzE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAExE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE;YACtC,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,yBAAyB;YACtC,SAAS,EAAE,IAAI,EAAE,uDAAuD;YACxE,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,UAAU;SAC3B,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAElD,oEAAoE;QACpE,MAAM,kBAAkB,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,mBAAmB,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAEvE,0EAA0E;QAC1E,MAAM,UAAU,GAAG,oBAAoB,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE;YAC7C,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,wBAAwB;YAClC,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAE/D,4BAA4B;QAC5B,MAAM,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAE5E,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/import/clients-import.d.ts

@@ -0,0 +1,39 @@
+import type { Tx } from '../db/client.js';
+/**
+ * Importação de clientes por CSV. Fluxo em duas etapas: `planImport` (dry-run,
+ * NÃO persiste) e `commitImport` (persiste apenas os novos, idempotente por
+ * documento). Parser mínimo RFC4180 (aspas, vírgulas, CRLF) sem dependência.
+ */
+export interface ParsedClientRow {
+    line: number;
+    displayName: string;
+    documentNumber: string | null;
+    clientType: 'pf' | 'pj';
+    email: string | null;
+    phone: string | null;
+}
+export interface ImportIssue {
+    line: number;
+    message: string;
+}
+export interface ImportPlan {
+    total: number;
+    toCreate: ParsedClientRow[];
+    duplicates: {
+        line: number;
+        documentNumber: string;
+    }[];
+    errors: ImportIssue[];
+}
+export declare function parseClientsCsv(text: string): {
+    rows: ParsedClientRow[];
+    errors: ImportIssue[];
+};
+export declare function planImport(tx: Tx, text: string): Promise<ImportPlan>;
+export interface ImportResult {
+    created: number;
+    skipped: number;
+    errors: ImportIssue[];
+}
+export declare function commitImport(tx: Tx, text: string, createdBy?: string | null): Promise<ImportResult>;
+//# sourceMappingURL=clients-import.d.ts.map

package/dist/import/clients-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients-import.d.ts","sourceRoot":"","sources":["../../src/import/clients-import.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAG1C;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAoDD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CA0ChG;AAED,wBAAsB,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAsB1E;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,YAAY,CAAC,CAavB"}

package/dist/import/clients-import.js

@@ -0,0 +1,142 @@
+import { createClient, findClientIdByDocument } from '../clients/repository.js';
+const HEADER_ALIASES = {
+    nome: 'displayName',
+    display_name: 'displayName',
+    razao_social: 'displayName',
+    documento: 'documentNumber',
+    document_number: 'documentNumber',
+    cnpj: 'documentNumber',
+    cpf: 'documentNumber',
+    tipo: 'clientType',
+    client_type: 'clientType',
+    email: 'email',
+    telefone: 'phone',
+    phone: 'phone',
+};
+function parseCsvRaw(text) {
+    const rows = [];
+    let field = '';
+    let row = [];
+    let inQuotes = false;
+    const s = text.replace(/\r\n/g, '\n').replace(/\r/g, '\n');
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        if (inQuotes) {
+            if (c === '"') {
+                if (s[i + 1] === '"') {
+                    field += '"';
+                    i++;
+                }
+                else
+                    inQuotes = false;
+            }
+            else
+                field += c;
+        }
+        else if (c === '"')
+            inQuotes = true;
+        else if (c === ',') {
+            row.push(field);
+            field = '';
+        }
+        else if (c === '\n') {
+            row.push(field);
+            rows.push(row);
+            row = [];
+            field = '';
+        }
+        else
+            field += c;
+    }
+    if (field.length > 0 || row.length > 0) {
+        row.push(field);
+        rows.push(row);
+    }
+    return rows.filter((r) => r.some((cell) => cell.trim() !== ''));
+}
+const onlyDigits = (v) => v.replace(/\D/g, '');
+export function parseClientsCsv(text) {
+    const raw = parseCsvRaw(text);
+    const errors = [];
+    if (raw.length === 0)
+        return { rows: [], errors: [{ line: 0, message: 'CSV vazio' }] };
+    const header = raw[0].map((h) => h.trim().toLowerCase());
+    const colMap = header.map((h) => HEADER_ALIASES[h]);
+    if (!colMap.includes('displayName')) {
+        return { rows: [], errors: [{ line: 1, message: 'Cabeçalho sem coluna de nome (nome/display_name)' }] };
+    }
+    const rows = [];
+    for (let i = 1; i < raw.length; i++) {
+        const cells = raw[i];
+        const rec = { line: i + 1, clientType: 'pj' };
+        colMap.forEach((key, idx) => {
+            if (!key)
+                return;
+            const value = (cells[idx] ?? '').trim();
+            if (key === 'documentNumber')
+                rec.documentNumber = value ? onlyDigits(value) : null;
+            else if (key === 'clientType')
+                rec.clientType = value.toLowerCase() === 'pf' ? 'pf' : 'pj';
+            else if (key === 'email')
+                rec.email = value || null;
+            else if (key === 'phone')
+                rec.phone = value || null;
+            else if (key === 'displayName')
+                rec.displayName = value;
+        });
+        if (!rec.displayName) {
+            errors.push({ line: i + 1, message: 'Nome obrigatório ausente' });
+            continue;
+        }
+        if (rec.documentNumber && ![11, 14].includes(rec.documentNumber.length)) {
+            errors.push({ line: i + 1, message: `Documento inválido (${rec.documentNumber.length} dígitos)` });
+            continue;
+        }
+        rows.push({
+            line: i + 1,
+            displayName: rec.displayName,
+            documentNumber: rec.documentNumber ?? null,
+            clientType: rec.clientType ?? 'pj',
+            email: rec.email ?? null,
+            phone: rec.phone ?? null,
+        });
+    }
+    return { rows, errors };
+}
+export async function planImport(tx, text) {
+    const { rows, errors } = parseClientsCsv(text);
+    const toCreate = [];
+    const duplicates = [];
+    const seen = new Set();
+    for (const row of rows) {
+        if (row.documentNumber) {
+            if (seen.has(row.documentNumber)) {
+                duplicates.push({ line: row.line, documentNumber: row.documentNumber });
+                continue;
+            }
+            seen.add(row.documentNumber);
+            const existing = await findClientIdByDocument(tx, row.documentNumber);
+            if (existing) {
+                duplicates.push({ line: row.line, documentNumber: row.documentNumber });
+                continue;
+            }
+        }
+        toCreate.push(row);
+    }
+    return { total: rows.length, toCreate, duplicates, errors };
+}
+export async function commitImport(tx, text, createdBy) {
+    const plan = await planImport(tx, text);
+    let created = 0;
+    for (const row of plan.toCreate) {
+        await createClient(tx, {
+            displayName: row.displayName,
+            clientType: row.clientType,
+            documentNumber: row.documentNumber,
+            createdBy: createdBy ?? null,
+        });
+        created++;
+    }
+    return { created, skipped: plan.duplicates.length, errors: plan.errors };
+}
+//# sourceMappingURL=clients-import.js.map

package/dist/import/clients-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients-import.js","sourceRoot":"","sources":["../../src/import/clients-import.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AA6BhF,MAAM,cAAc,GAAwD;IAC1E,IAAI,EAAE,aAAa;IACnB,YAAY,EAAE,aAAa;IAC3B,YAAY,EAAE,aAAa;IAC3B,SAAS,EAAE,gBAAgB;IAC3B,eAAe,EAAE,gBAAgB;IACjC,IAAI,EAAE,gBAAgB;IACtB,GAAG,EAAE,gBAAgB;IACrB,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACrB,KAAK,IAAI,GAAG,CAAC;oBACb,CAAC,EAAE,CAAC;gBACN,CAAC;;oBAAM,QAAQ,GAAG,KAAK,CAAC;YAC1B,CAAC;;gBAAM,KAAK,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aACjC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,GAAG,EAAE,CAAC;YACT,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;;YAAM,KAAK,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE/D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAEvF,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,EAAE,CAAC;IAC1G,CAAC;IAED,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,GAAG,GAA6B,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,gBAAgB;gBAAE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;iBAC/E,IAAI,GAAG,KAAK,YAAY;gBAAE,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;iBACtF,IAAI,GAAG,KAAK,OAAO;gBAAE,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;iBAC/C,IAAI,GAAG,KAAK,OAAO;gBAAE,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;iBAC/C,IAAI,GAAG,KAAK,aAAa;gBAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,uBAAuB,GAAG,CAAC,cAAc,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;YACnG,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,CAAC,GAAG,CAAC;YACX,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;YAC1C,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;YAClC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;YACxB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI;SACzB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAM,EAAE,IAAY;IACnD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,UAAU,GAA+C,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;YACtE,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAM,EACN,IAAY,EACZ,SAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,CAAC,EAAE,EAAE;YACrB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,SAAS,EAAE,SAAS,IAAI,IAAI;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC3E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+export { createDb } from './db/client.js';
+export type { Db, Tx, Queryable, DbOptions } from './db/client.js';
+export { withContext, withTenant } from './db/context.js';
+export type { DbContext } from './db/context.js';
+export { loadEnv } from './db/load-env.js';
+export { ensureRbacCatalog, ensureTenant, ensureOrganization, ensureMembership, assignSystemRole, } from './tenancy/provisioning.js';
+export type { EnsureTenantInput } from './tenancy/provisioning.js';
+export { PERMISSIONS, SYSTEM_ROLES, ALL_PERMISSION_KEYS } from './rbac/catalog.js';
+export type { PermissionDef, RoleDef } from './rbac/catalog.js';
+export { canDo, assertPermission, loadUserPermissions } from './rbac/authorize.js';
+export { login, logout, authenticate, selectTenant, listMemberships, sessionMemberships, sessionProducts, upsertUserWithPassword, } from './auth/service.js';
+export { listProductsForUser, ensureProductCatalog, ensureTenantProduct, } from './products/repository.js';
+export type { ProductAccess } from './products/repository.js';
+export { PRODUCTS } from './products/catalog.js';
+export type { ProductDef } from './products/catalog.js';
+export type { AuthContext, AuthUser, MembershipView, LoginResult } from './auth/service.js';
+export { toPrincipal, toMembership } from './auth/service.js';
+export { hashPassword, verifyPassword, hashPasswordAsync, verifyPasswordAsync } from './auth/password.js';
+export { generateSessionToken, hashToken } from './auth/session-token.js';
+export { requestPasswordReset, resetPassword } from './auth/password-reset.js';
+export { sendEmail } from './mail/resend.js';
+export type { EmailMessage } from './mail/resend.js';
+export { appendAudit } from './audit/audit.js';
+export type { AuditEntry } from './audit/audit.js';
+export { listAudit } from './audit/repository.js';
+export type { AuditRow } from './audit/repository.js';
+export { createClient, listClients, listClientsPaged, getClient, renameClient, updateClient, softDeleteClient, findClientIdByDocument, } from './clients/repository.js';
+export type { ClientRecord, CreateClientInput, UpdateClientInput, ListClientsFilter, } from './clients/repository.js';
+export { createRequest, listRequests, getRequest, updateRequestStatus, addComment, listComments, } from './requests/repository.js';
+export type { ServiceRequestRecord, CreateRequestInput, ListRequestFilter, RequestStatus, RequestPriority, CommentRecord, } from './requests/repository.js';
+export { createNotification, listNotifications, unreadCount, markNotificationRead, } from './notifications/repository.js';
+export type { NotificationRecord } from './notifications/repository.js';
+export { getPortalClientId, ensurePortalAccess, listPortalUserIds } from './portal/repository.js';
+export { listTenantMembers, setUserRole, setMembershipStatus } from './users/repository.js';
+export type { TenantMember } from './users/repository.js';
+export { getCoreStats } from './dashboard/repository.js';
+export type { CoreDashboardStats } from './dashboard/repository.js';
+export { parseClientsCsv, planImport, commitImport } from './import/clients-import.js';
+export type { ImportPlan, ImportResult, ParsedClientRow, ImportIssue } from './import/clients-import.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG3C,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACnF,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGnF,OAAO,EACL,KAAK,EACL,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,aAAa,EACb,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGxE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGlG,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACvF,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -0,0 +1,40 @@
+// @baruk/core — o motor agnóstico da plataforma. NÃO conhece contabilidade.
+// Banco / contexto de tenant (RLS)
+export { createDb } from './db/client.js';
+export { withContext, withTenant } from './db/context.js';
+export { loadEnv } from './db/load-env.js';
+// Tenancy / provisionamento
+export { ensureRbacCatalog, ensureTenant, ensureOrganization, ensureMembership, assignSystemRole, } from './tenancy/provisioning.js';
+// RBAC
+export { PERMISSIONS, SYSTEM_ROLES, ALL_PERMISSION_KEYS } from './rbac/catalog.js';
+export { canDo, assertPermission, loadUserPermissions } from './rbac/authorize.js';
+// Auth
+export { login, logout, authenticate, selectTenant, listMemberships, sessionMemberships, sessionProducts, upsertUserWithPassword, } from './auth/service.js';
+// Produtos / entitlements (IAM multiproduto)
+export { listProductsForUser, ensureProductCatalog, ensureTenantProduct, } from './products/repository.js';
+export { PRODUCTS } from './products/catalog.js';
+// Convergência de contratos (RFC-IDENTITY-003 §3.5) — adaptadores para os canônicos @baruk/identity.
+export { toPrincipal, toMembership } from './auth/service.js';
+// Contrato público SÍNCRONO (compat pré-R1) + variantes async canônicas (RFC-IDENTITY-003 §3.2, aditivo).
+export { hashPassword, verifyPassword, hashPasswordAsync, verifyPasswordAsync } from './auth/password.js';
+export { generateSessionToken, hashToken } from './auth/session-token.js';
+export { requestPasswordReset, resetPassword } from './auth/password-reset.js';
+export { sendEmail } from './mail/resend.js';
+// Auditoria
+export { appendAudit } from './audit/audit.js';
+export { listAudit } from './audit/repository.js';
+// Clientes (entidade de negócio tenant-scoped)
+export { createClient, listClients, listClientsPaged, getClient, renameClient, updateClient, softDeleteClient, findClientIdByDocument, } from './clients/repository.js';
+// Solicitações (ciclo operacional escritório↔cliente)
+export { createRequest, listRequests, getRequest, updateRequestStatus, addComment, listComments, } from './requests/repository.js';
+// Notificações
+export { createNotification, listNotifications, unreadCount, markNotificationRead, } from './notifications/repository.js';
+// Portal do cliente
+export { getPortalClientId, ensurePortalAccess, listPortalUserIds } from './portal/repository.js';
+// Usuários / memberships
+export { listTenantMembers, setUserRole, setMembershipStatus } from './users/repository.js';
+// Dashboard (stats agnósticas)
+export { getCoreStats } from './dashboard/repository.js';
+// Importação de clientes (CSV)
+export { parseClientsCsv, planImport, commitImport } from './import/clients-import.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,mCAAmC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,4BAA4B;AAC5B,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAGnC,OAAO;AACP,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEnF,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,OAAO;AACP,OAAO,EACL,KAAK,EACL,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,6CAA6C;AAC7C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGjD,qGAAqG;AACrG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC9D,0GAA0G;AAC1G,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,YAAY;AACZ,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,+CAA+C;AAC/C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,yBAAyB,CAAC;AAQjC,sDAAsD;AACtD,OAAO,EACL,aAAa,EACb,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,0BAA0B,CAAC;AAUlC,eAAe;AACf,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAGvC,oBAAoB;AACpB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAElG,yBAAyB;AACzB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5F,+BAA+B;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD,+BAA+B;AAC/B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/mail/resend.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Envio de e-mail transacional via Resend (provider-agnostic na borda: a API
+ * decide se/como enviar). Best-effort: retorna false sem lançar se indisponível
+ * ou domínio não verificado — o fluxo de reset não deve quebrar por causa do e-mail.
+ */
+export interface EmailMessage {
+    from: string;
+    to: string;
+    subject: string;
+    html: string;
+}
+export declare function sendEmail(apiKey: string | undefined, msg: EmailMessage): Promise<boolean>;
+//# sourceMappingURL=resend.d.ts.map

package/dist/mail/resend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.d.ts","sourceRoot":"","sources":["../../src/mail/resend.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/F"}

package/dist/mail/resend.js

@@ -0,0 +1,16 @@
+export async function sendEmail(apiKey, msg) {
+    if (!apiKey)
+        return false;
+    try {
+        const res = await fetch('https://api.resend.com/emails', {
+            method: 'POST',
+            headers: { authorization: `Bearer ${apiKey}`, 'content-type': 'application/json' },
+            body: JSON.stringify(msg),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=resend.js.map

package/dist/mail/resend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.js","sourceRoot":"","sources":["../../src/mail/resend.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAA0B,EAAE,GAAiB;IAC3E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,+BAA+B,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAClF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/notifications/repository.d.ts

@@ -0,0 +1,23 @@
+import type { Tx } from '../db/client.js';
+/** Notificações in-app, tenant-scoped. Base para canais futuros (e-mail/push). */
+export interface NotificationRecord {
+    id: string;
+    userId: string;
+    type: 'info' | 'warning' | 'action_required';
+    title: string;
+    body: string | null;
+    linkRef: unknown;
+    readAt: string | null;
+    createdAt: string;
+}
+export declare function createNotification(tx: Tx, input: {
+    userId: string;
+    title: string;
+    body?: string | null;
+    type?: 'info' | 'warning' | 'action_required';
+    linkRef?: unknown;
+}): Promise<void>;
+export declare function listNotifications(tx: Tx, userId: string, limit?: number): Promise<NotificationRecord[]>;
+export declare function unreadCount(tx: Tx, userId: string): Promise<number>;
+export declare function markNotificationRead(tx: Tx, id: string, userId: string): Promise<number>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/notifications/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/notifications/repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAkBzG;AAED,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKzE;AAED,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9F"}

package/dist/notifications/repository.js

@@ -0,0 +1,43 @@
+import { uuidv7 } from '@baruk/shared';
+export async function createNotification(tx, input) {
+    await tx `
+    INSERT INTO notification (id, tenant_id, user_id, type, title, body, link_ref)
+    VALUES (
+      ${uuidv7()}, current_setting('app.current_tenant')::uuid, ${input.userId},
+      ${input.type ?? 'info'}, ${input.title}, ${input.body ?? null},
+      ${input.linkRef === undefined ? null : tx.json(input.linkRef)}
+    )
+  `;
+}
+export async function listNotifications(tx, userId, limit = 30) {
+    const rows = await tx `
+    SELECT id, user_id, type, title, body, link_ref, read_at, created_at
+    FROM notification WHERE user_id = ${userId}
+    ORDER BY created_at DESC LIMIT ${Math.min(limit, 100)}
+  `;
+    return rows.map((r) => ({
+        id: r.id,
+        userId: r.user_id,
+        type: r.type,
+        title: r.title,
+        body: r.body,
+        linkRef: r.link_ref,
+        readAt: r.read_at ? r.read_at.toISOString() : null,
+        createdAt: r.created_at.toISOString(),
+    }));
+}
+export async function unreadCount(tx, userId) {
+    const rows = await tx `
+    SELECT count(*)::int AS n FROM notification WHERE user_id = ${userId} AND read_at IS NULL
+  `;
+    return rows[0]?.n ?? 0;
+}
+export async function markNotificationRead(tx, id, userId) {
+    const rows = await tx `
+    UPDATE notification SET read_at = now()
+    WHERE id = ${id} AND user_id = ${userId} AND read_at IS NULL
+    RETURNING id
+  `;
+    return rows.count;
+}
+//# sourceMappingURL=repository.js.map

package/dist/notifications/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/notifications/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAevC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAM,EACN,KAMC;IAED,MAAM,EAAE,CAAA;;;QAGF,MAAM,EAAE,kDAAkD,KAAK,CAAC,MAAM;QACtE,KAAK,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI;QAC3D,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAgB,CAAC;;GAEzE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM,EAAE,MAAc,EAAE,KAAK,GAAG,EAAE;IACxE,MAAM,IAAI,GAAG,MAAM,EAAE,CAEpB;;wCAEqC,MAAM;qCACT,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;GACtD,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,OAAO;QACjB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,QAAQ;QACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAClD,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,MAAc;IACtD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAiB;kEAC0B,MAAM;GACrE,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EAAM,EAAE,EAAU,EAAE,MAAc;IAC3E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAA;;iBAEN,EAAE,kBAAkB,MAAM;;GAExC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC"}

package/dist/portal/repository.d.ts

@@ -0,0 +1,11 @@
+import type { Tx } from '../db/client.js';
+/**
+ * Acesso de portal: liga um usuário `client_portal` a um `client` específico.
+ * O portal restringe TODA leitura ao `clientId` resolvido aqui — um cliente
+ * nunca vê outro cliente do mesmo tenant.
+ */
+export declare function getPortalClientId(tx: Tx, userId: string): Promise<string>;
+/** IDs dos usuários de portal ativos vinculados a um client (fan-out de notificações). */
+export declare function listPortalUserIds(tx: Tx, clientId: string): Promise<string[]>;
+export declare function ensurePortalAccess(tx: Tx, userId: string, clientId: string): Promise<void>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/portal/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/portal/repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ/E;AAED,0FAA0F;AAC1F,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnF;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhG"}

package/dist/portal/repository.js

@@ -0,0 +1,32 @@
+import { ForbiddenError, uuidv7 } from '@baruk/shared';
+/**
+ * Acesso de portal: liga um usuário `client_portal` a um `client` específico.
+ * O portal restringe TODA leitura ao `clientId` resolvido aqui — um cliente
+ * nunca vê outro cliente do mesmo tenant.
+ */
+export async function getPortalClientId(tx, userId) {
+    const rows = await tx `
+    SELECT client_id FROM client_portal_access
+    WHERE user_id = ${userId} AND status = 'active'
+    ORDER BY created_at ASC LIMIT 1
+  `;
+    if (!rows[0])
+        throw new ForbiddenError('Usuário de portal sem cliente vinculado');
+    return rows[0].client_id;
+}
+/** IDs dos usuários de portal ativos vinculados a um client (fan-out de notificações). */
+export async function listPortalUserIds(tx, clientId) {
+    const rows = await tx `
+    SELECT user_id FROM client_portal_access
+    WHERE client_id = ${clientId} AND status = 'active'
+  `;
+    return rows.map((r) => r.user_id);
+}
+export async function ensurePortalAccess(tx, userId, clientId) {
+    await tx `
+    INSERT INTO client_portal_access (id, tenant_id, user_id, client_id)
+    VALUES (${uuidv7()}, current_setting('app.current_tenant')::uuid, ${userId}, ${clientId})
+    ON CONFLICT (tenant_id, user_id, client_id) DO NOTHING
+  `;
+}
+//# sourceMappingURL=repository.js.map

package/dist/portal/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/portal/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM,EAAE,MAAc;IAC5D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAyB;;sBAE1B,MAAM;;GAEzB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3B,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAM,EAAE,QAAgB;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAuB;;wBAEtB,QAAQ;GAC7B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,MAAc,EAAE,QAAgB;IAC/E,MAAM,EAAE,CAAA;;cAEI,MAAM,EAAE,kDAAkD,MAAM,KAAK,QAAQ;;GAExF,CAAC;AACJ,CAAC"}

package/dist/products/catalog.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Catálogo de produtos do ecossistema Baruk (ADR 0004/0005). `internal` = vive
+ * neste platform (roteado pelo Hub); `external` = sistema separado (ex.: Baruk
+ * Rep/Ind = Manga Verde em baruk.app), acessado via `baseUrl`.
+ */
+export interface ProductDef {
+    key: string;
+    name: string;
+    kind: 'internal' | 'external';
+    baseUrl?: string;
+    isActive?: boolean;
+}
+export declare const PRODUCTS: readonly ProductDef[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/products/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/products/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,QAAQ,EAAE,SAAS,UAAU,EAKzC,CAAC"}

package/dist/products/catalog.js

@@ -0,0 +1,7 @@
+export const PRODUCTS = [
+    { key: 'contabil', name: 'Baruk Contábil', kind: 'internal', isActive: true },
+    { key: 'rep', name: 'Baruk Rep', kind: 'external', baseUrl: 'https://baruk.app', isActive: true },
+    { key: 'ind', name: 'Baruk Ind', kind: 'external', baseUrl: 'https://baruk.app', isActive: true },
+    { key: 'varejo', name: 'Baruk Varejo', kind: 'external', baseUrl: 'https://baruk.app', isActive: false },
+];
+//# sourceMappingURL=catalog.js.map

package/dist/products/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/products/catalog.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,QAAQ,GAA0B;IAC7C,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7E,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;IACjG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE;CACzG,CAAC"}

package/dist/products/repository.d.ts

@@ -0,0 +1,22 @@
+import type { Db, Tx } from '../db/client.js';
+export interface ProductAccess {
+    tenantId: string;
+    tenantName: string;
+    tenantCode: string;
+    productKey: string;
+    productName: string;
+    kind: 'internal' | 'external';
+    baseUrl: string | null;
+}
+/**
+ * Produtos acessíveis ao usuário: cruza suas memberships ativas com os
+ * entitlements (tenant_product) ativos. Rode dentro de `withContext({ userId })`
+ * — é assim que o Hub sabe a que produtos a pessoa tem direito. Sem entitlement
+ * = sem acesso (bloqueio no Hub).
+ */
+export declare function listProductsForUser(tx: Tx, userId: string): Promise<ProductAccess[]>;
+/** Materializa o catálogo global de produtos (idempotente). */
+export declare function ensureProductCatalog(db: Db): Promise<void>;
+/** Concede (ou reativa) um produto a um tenant. */
+export declare function ensureTenantProduct(db: Db, tenantId: string, productKey: string): Promise<void>;
+//# sourceMappingURL=repository.d.ts.map

package/dist/products/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/products/repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAI9C,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA8B1F;AAED,+DAA+D;AAC/D,wBAAsB,oBAAoB,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhE;AAED,mDAAmD;AACnD,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUrG"}