@baruk/core 0.3.1 → 0.5.0

package/dist/pricing-engine/shadow-facade.d.ts

@@ -0,0 +1,42 @@
+import type { ProductLineCode } from '../commercial-catalog/types.js';
+import { type CanonicalCatalogContext } from './shadow-adapter.js';
+import { type ShadowComparisonResult, type ShadowComparisonStatus } from './shadow.js';
+import { type CategorizedDiff } from './shadow-diff.js';
+import { type ShadowMetrics } from './shadow-metrics.js';
+import type { LegacyQuoteSnapshot } from './shadow-legacy-types.js';
+import type { PricingQuote } from './types.js';
+import type { PricingErrorCode } from './errors.js';
+/**
+ * Shadow Facade (ETAPA 1, Track A P4) — orquestra captura→adaptação→cálculo
+ * canônico→normalização→comparação→relatório. Fluxo (RFC §13, recomendação
+ * do owner):
+ *
+ *   LegacyQuoteSnapshot (injetado — este módulo NÃO integra com manga-verde-bi)
+ *     → Shadow Adapter (toPricingRequest)
+ *     → Pricing Engine canônico (computePricingQuote)
+ *     → Normalizadores (canônico + legado)
+ *     → Diff Engine (categorizeDiffs)
+ *     → Shadow Metrics
+ *     → ShadowComparisonReport (estruturado, sanitizado)
+ *
+ * INVARIANTES DURAS (nunca violadas por este módulo): nunca cobra; nunca
+ * cria/altera assinatura; nunca altera entitlement; nunca modifica catálogo;
+ * nunca escreve produção; nunca decide cutover; nunca registra segredo (log
+ * sanitizado, reusa `mail/sanitize.ts` — Bloqueador 1 já certificado);
+ * nunca duplica evento financeiro (não emite nenhum evento). Falha no
+ * cálculo canônico é RETORNADA no relatório (nunca lançada) — nenhuma
+ * decisão operacional pode depender desta fachada (ela só observa).
+ */
+export interface ShadowComparisonReport {
+    quoteId: string | null;
+    status: ShadowComparisonStatus | 'error';
+    canonicalQuote: PricingQuote | null;
+    comparison: ShadowComparisonResult | null;
+    categorizedDiffs: CategorizedDiff[];
+    metrics: ShadowMetrics | null;
+    warnings: string[];
+    errorCode: PricingErrorCode | null;
+    errorMessage: string | null;
+}
+export declare function runShadowComparison(snapshot: LegacyQuoteSnapshot, catalog: CanonicalCatalogContext, productLine: ProductLineCode, now: string): ShadowComparisonReport;
+//# sourceMappingURL=shadow-facade.d.ts.map

package/dist/pricing-engine/shadow-facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-facade.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/shadow-facade.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAErF,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC;IACzC,cAAc,EAAE,YAAY,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,uBAAuB,EAChC,WAAW,EAAE,eAAe,EAC5B,GAAG,EAAE,MAAM,GACV,sBAAsB,CA6FxB"}

package/dist/pricing-engine/shadow-facade.js

@@ -0,0 +1,82 @@
+import { logSanitizedInfo } from '../mail/sanitize.js';
+import { computePricingQuote } from './pipeline.js';
+import { toPricingRequest } from './shadow-adapter.js';
+import { normalizeLegacyQuote } from './shadow-normalizer.js';
+import { compareQuotes, normalizeCanonicalQuote, } from './shadow.js';
+import { categorizeDiffs } from './shadow-diff.js';
+import { computeShadowMetrics } from './shadow-metrics.js';
+export function runShadowComparison(snapshot, catalog, productLine, now) {
+    const warnings = [];
+    const tenantId = snapshot.subscription.tenantId;
+    const request = toPricingRequest(snapshot, catalog, productLine, now);
+    const canonicalStartedAt = performance.now();
+    const result = computePricingQuote(request);
+    const canonicalComputeDurationMs = Math.round(performance.now() - canonicalStartedAt);
+    if (!result.ok) {
+        logSanitizedInfo('[shadow-comparison] canonical-error', { tenantId, code: result.error.code }, []);
+        return {
+            quoteId: null,
+            status: 'error',
+            canonicalQuote: null,
+            comparison: null,
+            categorizedDiffs: [],
+            metrics: null,
+            warnings,
+            errorCode: result.error.code,
+            errorMessage: result.error.message,
+        };
+    }
+    const canonicalQuote = result.value;
+    const canonicalNormalized = normalizeCanonicalQuote(canonicalQuote);
+    const legacyNormalized = normalizeLegacyQuote(snapshot);
+    if (!legacyNormalized) {
+        const message = `Sem cálculo legado disponível (BillingCycle ainda não computado) para o tenant "${tenantId}" — comparação não realizável.`;
+        warnings.push(message);
+        logSanitizedInfo('[shadow-comparison] not-comparable', { tenantId, quoteId: canonicalQuote.quoteId, reason: 'legacy-billing-cycle-absent' }, []);
+        return {
+            quoteId: canonicalQuote.quoteId,
+            status: 'not-comparable',
+            canonicalQuote,
+            comparison: null,
+            categorizedDiffs: [
+                {
+                    category: 'not-comparable',
+                    targetCode: null,
+                    description: message,
+                    canonicalCents: null,
+                    legacyCents: null,
+                    diffCents: null,
+                },
+            ],
+            metrics: null,
+            warnings,
+            errorCode: null,
+            errorMessage: null,
+        };
+    }
+    const comparison = compareQuotes(canonicalQuote.quoteId, canonicalNormalized, legacyNormalized);
+    const categorizedDiffs = categorizeDiffs(comparison);
+    const metrics = computeShadowMetrics(comparison, categorizedDiffs, canonicalQuote, {
+        legacyComputeDurationMs: snapshot.legacyComputeDurationMs ?? null,
+        canonicalComputeDurationMs,
+    });
+    logSanitizedInfo('[shadow-comparison] result', {
+        tenantId,
+        quoteId: canonicalQuote.quoteId,
+        status: comparison.status,
+        matchPercentage: metrics.matchPercentage,
+        totalDiffCents: comparison.totalDiffCents,
+    }, []);
+    return {
+        quoteId: canonicalQuote.quoteId,
+        status: comparison.status,
+        canonicalQuote,
+        comparison,
+        categorizedDiffs,
+        metrics,
+        warnings,
+        errorCode: null,
+        errorMessage: null,
+    };
+}
+//# sourceMappingURL=shadow-facade.js.map

package/dist/pricing-engine/shadow-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-facade.js","sourceRoot":"","sources":["../../src/pricing-engine/shadow-facade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAgC,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,aAAa,EACb,uBAAuB,GAGxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAwB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAsB,MAAM,qBAAqB,CAAC;AAuC/E,MAAM,UAAU,mBAAmB,CACjC,QAA6B,EAC7B,OAAgC,EAChC,WAA4B,EAC5B,GAAW;IAEX,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC;IAEhD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAEtE,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAEtF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,gBAAgB,CACd,qCAAqC,EACrC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EACrC,EAAE,CACH,CAAC;QACF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,EAAE;YACpB,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC;IACpC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAExD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,mFAAmF,QAAQ,gCAAgC,CAAC;QAC5I,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,gBAAgB,CACd,oCAAoC,EACpC,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,EACpF,EAAE,CACH,CAAC;QACF,OAAO;YACL,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,MAAM,EAAE,gBAAgB;YACxB,cAAc;YACd,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE;gBAChB;oBACE,QAAQ,EAAE,gBAAgB;oBAC1B,UAAU,EAAE,IAAI;oBAChB,WAAW,EAAE,OAAO;oBACpB,cAAc,EAAE,IAAI;oBACpB,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;iBAChB;aACF;YACD,OAAO,EAAE,IAAI;YACb,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAChG,MAAM,gBAAgB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE;QACjF,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB,IAAI,IAAI;QACjE,0BAA0B;KAC3B,CAAC,CAAC;IAEH,gBAAgB,CACd,4BAA4B,EAC5B;QACE,QAAQ;QACR,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,EACD,EAAE,CACH,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,cAAc;QACd,UAAU;QACV,gBAAgB;QAChB,OAAO;QACP,QAAQ;QACR,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC"}

package/dist/pricing-engine/shadow-legacy-types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Tipos do lado "legado" (manga-verde-bi) para o Shadow Comparison (Track A
+ * P4). Informados PELO SCHEMA REAL — leitura read-only de
+ * `products/manga-verde-bi/backend/prisma/schema.prisma` (models `Plan`,
+ * `Module`, `Coupon`, `Subscription`, `SubscriptionItem`, `BillingCycle`) —
+ * nenhum campo inventado. `manga-verde-bi` NÃO foi modificado.
+ *
+ * ACHADO REALITY-FIRST (registrado no relatório de entrega): `BillingCycle.
+ * subtotalCents/discountCents/usageCents/totalCents` são campos de schema
+ * que NENHUM serviço em `backend/src` popula hoje (busca completa não achou
+ * nenhum cálculo combinando `Plan.priceCents` + `Module.addonPriceCents` +
+ * `Coupon.percentOff`/`amountOffCents` em um total) — o legado hoje só
+ * INICIA trial (`beta-onboarding.service.ts`), nunca cobra. Por isso
+ * `billingCycle` é `null`-ável: o comparador trata "ainda não há cálculo
+ * legado" como `not-comparable`, nunca um total zero inventado.
+ */
+export type LegacyBillingInterval = 'MONTHLY' | 'YEARLY';
+/** Espelha `enum SubscriptionItemType` do schema real. */
+export type LegacySubscriptionItemType = 'PLAN' | 'MODULE_ADDON' | 'EXTRA_SEATS' | 'STORAGE_ADDON';
+export interface LegacySubscriptionItemSnapshot {
+    itemType: LegacySubscriptionItemType;
+    /** Só definido quando `itemType === 'MODULE_ADDON'` (`Module.code`). */
+    moduleCode: string | null;
+    quantity: number;
+    unitPriceCents: number;
+}
+/** Espelha `enum CouponType` do schema real — nem todo tipo é desconto de preço. */
+export type LegacyCouponType = 'TRIAL' | 'PERCENT_DISCOUNT' | 'FIXED_DISCOUNT' | 'CREDIT_BONUS' | 'BETA_ACCESS';
+export interface LegacyCouponSnapshot {
+    code: string;
+    type: LegacyCouponType;
+    percentOff: number | null;
+    amountOffCents: number | null;
+    trialDays: number | null;
+}
+export interface LegacySubscriptionSnapshot {
+    tenantId: string;
+    subscriptionId: string;
+    planCode: string;
+    billingInterval: LegacyBillingInterval;
+    /** Espelha `enum SubscriptionStatus` (TRIALING/ACTIVE/PAST_DUE/...). */
+    status: string;
+    items: LegacySubscriptionItemSnapshot[];
+    coupon: LegacyCouponSnapshot | null;
+    trialActive: boolean;
+    trialEndsAt: string | null;
+}
+/** `BillingCycle` real — `null` quando a assinatura ainda não tem cobrança computada (achado acima). */
+export interface LegacyBillingCycleSnapshot {
+    currency: string;
+    subtotalCents: number;
+    discountCents: number;
+    usageCents: number;
+    totalCents: number;
+}
+export interface LegacyQuoteSnapshot {
+    subscription: LegacySubscriptionSnapshot;
+    billingCycle: LegacyBillingCycleSnapshot | null;
+    /** Instante da captura, ISO — injetado pelo chamador (nunca `Date.now()` aqui). */
+    capturedAt: string;
+    /** Duração do cálculo legado em ms, se o chamador a mediu externamente — nunca medida aqui (o legado não é chamado por este módulo). */
+    legacyComputeDurationMs?: number;
+}
+//# sourceMappingURL=shadow-legacy-types.d.ts.map

package/dist/pricing-engine/shadow-legacy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-legacy-types.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/shadow-legacy-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEzD,0DAA0D;AAC1D,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,cAAc,GAAG,aAAa,GAAG,eAAe,CAAC;AAEnG,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,oFAAoF;AACpF,MAAM,MAAM,gBAAgB,GAC1B,OAAO,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,cAAc,GAAG,aAAa,CAAC;AAEnF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,qBAAqB,CAAC;IACvC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACxC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wGAAwG;AACxG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,0BAA0B,CAAC;IACzC,YAAY,EAAE,0BAA0B,GAAG,IAAI,CAAC;IAChD,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,wIAAwI;IACxI,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC"}

package/dist/pricing-engine/shadow-legacy-types.js

@@ -0,0 +1,18 @@
+/**
+ * Tipos do lado "legado" (manga-verde-bi) para o Shadow Comparison (Track A
+ * P4). Informados PELO SCHEMA REAL — leitura read-only de
+ * `products/manga-verde-bi/backend/prisma/schema.prisma` (models `Plan`,
+ * `Module`, `Coupon`, `Subscription`, `SubscriptionItem`, `BillingCycle`) —
+ * nenhum campo inventado. `manga-verde-bi` NÃO foi modificado.
+ *
+ * ACHADO REALITY-FIRST (registrado no relatório de entrega): `BillingCycle.
+ * subtotalCents/discountCents/usageCents/totalCents` são campos de schema
+ * que NENHUM serviço em `backend/src` popula hoje (busca completa não achou
+ * nenhum cálculo combinando `Plan.priceCents` + `Module.addonPriceCents` +
+ * `Coupon.percentOff`/`amountOffCents` em um total) — o legado hoje só
+ * INICIA trial (`beta-onboarding.service.ts`), nunca cobra. Por isso
+ * `billingCycle` é `null`-ável: o comparador trata "ainda não há cálculo
+ * legado" como `not-comparable`, nunca um total zero inventado.
+ */
+export {};
+//# sourceMappingURL=shadow-legacy-types.js.map

package/dist/pricing-engine/shadow-legacy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-legacy-types.js","sourceRoot":"","sources":["../../src/pricing-engine/shadow-legacy-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/pricing-engine/shadow-metrics.d.ts

@@ -0,0 +1,33 @@
+import type { ShadowComparisonResult, ShadowComparisonStatus } from './shadow.js';
+import type { CategorizedDiff } from './shadow-diff.js';
+import type { PricingQuote } from './types.js';
+/**
+ * Shadow Metrics (ETAPA 4, Track A P4) — vão além de MATCH/MISMATCH: dados
+ * para decidir o MOMENTO do cutover com evidência, não impressão. Puramente
+ * derivada de `ShadowComparisonResult`/`CategorizedDiff[]`/`PricingQuote` —
+ * nenhum I/O, nenhum `Date.now()` interno (timing é injetado pelo chamador,
+ * que efetivamente mediu o wall-clock ao redor da chamada — ver
+ * `shadow-facade.ts`).
+ */
+export interface ShadowMetrics {
+    status: ShadowComparisonStatus;
+    /** % de itens comparáveis que NÃO divergiram (0-100). */
+    matchPercentage: number;
+    financialDiffAbsCents: number;
+    /** % do diff financeiro relativo ao total canônico — `null` quando o total canônico é 0 (divisão indefinida). */
+    financialDiffRelativePercent: number | null;
+    financialDiffCount: number;
+    structuralDiffCount: number;
+    fingerprint: string;
+    catalogVersion: string;
+    priceTableVersion: number;
+    engineVersion: string;
+    legacyComputeDurationMs: number | null;
+    canonicalComputeDurationMs: number;
+}
+export interface ShadowTiming {
+    legacyComputeDurationMs: number | null;
+    canonicalComputeDurationMs: number;
+}
+export declare function computeShadowMetrics(comparison: ShadowComparisonResult, categorized: CategorizedDiff[], canonicalQuote: PricingQuote, timing: ShadowTiming): ShadowMetrics;
+//# sourceMappingURL=shadow-metrics.d.ts.map

package/dist/pricing-engine/shadow-metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-metrics.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/shadow-metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iHAAiH;IACjH,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,sBAAsB,EAClC,WAAW,EAAE,eAAe,EAAE,EAC9B,cAAc,EAAE,YAAY,EAC5B,MAAM,EAAE,YAAY,GACnB,aAAa,CA+Bf"}

package/dist/pricing-engine/shadow-metrics.js

@@ -0,0 +1,31 @@
+export function computeShadowMetrics(comparison, categorized, canonicalQuote, timing) {
+    const totalItems = Math.max(1, comparison.itemDiffs.length);
+    const divergentItems = comparison.divergentRules.length;
+    const matchPercentage = comparison.status === 'not-comparable'
+        ? 0
+        : roundTo2(((totalItems - divergentItems) / totalItems) * 100);
+    const financialDiffCount = categorized.filter((d) => d.category === 'financial').length;
+    const structuralDiffCount = categorized.filter((d) => d.category === 'structural').length;
+    const financialDiffAbsCents = Math.abs(comparison.totalDiffCents);
+    const financialDiffRelativePercent = canonicalQuote.totalCents === 0
+        ? null
+        : roundTo2((financialDiffAbsCents / canonicalQuote.totalCents) * 100);
+    return {
+        status: comparison.status,
+        matchPercentage,
+        financialDiffAbsCents,
+        financialDiffRelativePercent,
+        financialDiffCount,
+        structuralDiffCount,
+        fingerprint: canonicalQuote.fingerprint,
+        catalogVersion: canonicalQuote.catalogVersion,
+        priceTableVersion: canonicalQuote.priceTableVersion,
+        engineVersion: canonicalQuote.engineVersion,
+        legacyComputeDurationMs: timing.legacyComputeDurationMs,
+        canonicalComputeDurationMs: timing.canonicalComputeDurationMs,
+    };
+}
+function roundTo2(value) {
+    return Math.round(value * 100) / 100;
+}
+//# sourceMappingURL=shadow-metrics.js.map

package/dist/pricing-engine/shadow-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-metrics.js","sourceRoot":"","sources":["../../src/pricing-engine/shadow-metrics.ts"],"names":[],"mappings":"AAkCA,MAAM,UAAU,oBAAoB,CAClC,UAAkC,EAClC,WAA8B,EAC9B,cAA4B,EAC5B,MAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC;IACxD,MAAM,eAAe,GACnB,UAAU,CAAC,MAAM,KAAK,gBAAgB;QACpC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG,cAAc,CAAC,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;IAEnE,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;IACxF,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;IAE1F,MAAM,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,4BAA4B,GAChC,cAAc,CAAC,UAAU,KAAK,CAAC;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,CAAC,qBAAqB,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;IAE1E,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,eAAe;QACf,qBAAqB;QACrB,4BAA4B;QAC5B,kBAAkB;QAClB,mBAAmB;QACnB,WAAW,EAAE,cAAc,CAAC,WAAW;QACvC,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;QACnD,aAAa,EAAE,cAAc,CAAC,aAAa;QAC3C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC"}

package/dist/pricing-engine/shadow-normalizer.d.ts

@@ -0,0 +1,17 @@
+import type { NormalizedQuoteForComparison } from './shadow.js';
+import type { LegacyQuoteSnapshot } from './shadow-legacy-types.js';
+/**
+ * Normaliza o lado legado (RFC §22.8, ETAPA 2 do Track A P4) — elimina ruído
+ * não-semântico (timestamps, IDs de assinatura/tenant, ordem dos
+ * `SubscriptionItem`) antes de comparar. O lado canônico já tem seu
+ * normalizador (`normalizeCanonicalQuote`, `shadow.ts`) — este é o
+ * complemento para o lado legado, mesma forma de saída
+ * (`NormalizedQuoteForComparison`), para que o Diff Engine nunca precise
+ * conhecer os dois formatos de origem.
+ *
+ * Quando `billingCycle` é `null` (achado real: nenhum cálculo legado ainda
+ * existe em manga-verde-bi — ver `shadow-legacy-types.ts`), retorna `null` —
+ * o chamador (facade) trata como `not-comparable`, nunca finge um total.
+ */
+export declare function normalizeLegacyQuote(snapshot: LegacyQuoteSnapshot): NormalizedQuoteForComparison | null;
+//# sourceMappingURL=shadow-normalizer.d.ts.map

package/dist/pricing-engine/shadow-normalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-normalizer.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/shadow-normalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,mBAAmB,GAC5B,4BAA4B,GAAG,IAAI,CAgBrC"}

package/dist/pricing-engine/shadow-normalizer.js

@@ -0,0 +1,39 @@
+/**
+ * Normaliza o lado legado (RFC §22.8, ETAPA 2 do Track A P4) — elimina ruído
+ * não-semântico (timestamps, IDs de assinatura/tenant, ordem dos
+ * `SubscriptionItem`) antes de comparar. O lado canônico já tem seu
+ * normalizador (`normalizeCanonicalQuote`, `shadow.ts`) — este é o
+ * complemento para o lado legado, mesma forma de saída
+ * (`NormalizedQuoteForComparison`), para que o Diff Engine nunca precise
+ * conhecer os dois formatos de origem.
+ *
+ * Quando `billingCycle` é `null` (achado real: nenhum cálculo legado ainda
+ * existe em manga-verde-bi — ver `shadow-legacy-types.ts`), retorna `null` —
+ * o chamador (facade) trata como `not-comparable`, nunca finge um total.
+ */
+export function normalizeLegacyQuote(snapshot) {
+    if (!snapshot.billingCycle)
+        return null;
+    const items = snapshot.subscription.items
+        .map((item) => ({
+        targetCode: targetCodeFor(item, snapshot.subscription.planCode),
+        amountCents: item.unitPriceCents * item.quantity,
+    }))
+        .sort((a, b) => a.targetCode.localeCompare(b.targetCode));
+    return {
+        currency: snapshot.billingCycle.currency,
+        items,
+        totalDiscountCents: snapshot.billingCycle.discountCents,
+        totalCents: snapshot.billingCycle.totalCents,
+    };
+}
+function targetCodeFor(item, planCode) {
+    if (item.itemType === 'PLAN')
+        return planCode;
+    if (item.itemType === 'MODULE_ADDON')
+        return item.moduleCode ?? 'unknown_module';
+    if (item.itemType === 'EXTRA_SEATS')
+        return 'extra_seat';
+    return 'storage_addon';
+}
+//# sourceMappingURL=shadow-normalizer.js.map

package/dist/pricing-engine/shadow-normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-normalizer.js","sourceRoot":"","sources":["../../src/pricing-engine/shadow-normalizer.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC/D,WAAW,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ;KACjD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ;QACxC,KAAK;QACL,kBAAkB,EAAE,QAAQ,CAAC,YAAY,CAAC,aAAa;QACvD,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,UAAU;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,IAA0D,EAC1D,QAAgB;IAEhB,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACjF,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa;QAAE,OAAO,YAAY,CAAC;IACzD,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/pricing-engine/types.d.ts

@@ -140,6 +140,8 @@ export interface PricingRequest {
     coupon?: PricingCouponRule;
     campaign?: PricingCampaignRule;
     trial?: TrialContext;
+    /** Proração explícita para quotes de mudança de plano/módulo/assentos/ciclo. */
+    proration?: ProrationInput;
     /** Validade da cotação em horas (default 24 — RFC §7 "a oferta não vale para sempre"). */
     quoteValidityHours?: number;
     /** Seleciona QUAL entrada de `CommercialPriceItem.interval` é usada na busca (mesmo targetCode pode ter preço mensal e anual). */

package/dist/pricing-engine/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,eAAe,EAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C,yGAAyG;AACzG,MAAM,MAAM,YAAY,CAAC,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC3F,CAAC;AAIN,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,iBAAiB,GACjB,qBAAqB,GACrB,QAAQ,GACR,UAAU,GACV,oBAAoB,GACpB,qCAAqC,GACrC,KAAK,GACL,UAAU,CAAC;AAEf,gHAAgH;AAChH,eAAO,MAAM,2BAA2B,EAAE,SAAS,eAAe,EAajE,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,MAAM,GACN,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,KAAK,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,KAAK,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAExE,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,iHAAiH;IACjH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,GAAG,YAAY,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,GAAG,YAAY,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,WAAW,GACX,YAAY,GACZ,eAAe,GACf,UAAU,GACV,YAAY,GACZ,cAAc,GACd,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,cAAc,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;IACxB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAC;IACrB,yFAAyF;IACzF,aAAa,EAAE,KAAK,CAAC;IACrB,sJAAsJ;IACtJ,YAAY,CAAC,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;CACjB;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE,oBAAoB,CAAC;IACjC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,mGAAmG;IACnG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,0FAA0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kIAAkI;IAClI,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6GAA6G;IAC7G,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,gEAAgE;IAChE,uBAAuB,EAAE,KAAK,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC;IACrB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,aAAa,EAAE,KAAK,CAAC;IACrB,0DAA0D;IAC1D,UAAU,EAAE,KAAK,CAAC;IAClB,wEAAwE;IACxE,mBAAmB,EAAE,KAAK,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/pricing-engine/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,eAAe,EAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C,yGAAyG;AACzG,MAAM,MAAM,YAAY,CAAC,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC3F,CAAC;AAIN,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,iBAAiB,GACjB,qBAAqB,GACrB,QAAQ,GACR,UAAU,GACV,oBAAoB,GACpB,qCAAqC,GACrC,KAAK,GACL,UAAU,CAAC;AAEf,gHAAgH;AAChH,eAAO,MAAM,2BAA2B,EAAE,SAAS,eAAe,EAajE,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,MAAM,GACN,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,KAAK,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,KAAK,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,KAAK,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6FAA6F;IAC7F,eAAe,CAAC,EAAE,KAAK,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;AAExE,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,iHAAiH;IACjH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,GAAG,YAAY,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,GAAG,YAAY,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,WAAW,GACX,YAAY,GACZ,eAAe,GACf,UAAU,GACV,YAAY,GACZ,cAAc,GACd,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,cAAc,CAAC;AAE3D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;IACxB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAC;IACrB,yFAAyF;IACzF,aAAa,EAAE,KAAK,CAAC;IACrB,sJAAsJ;IACtJ,YAAY,CAAC,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,KAAK,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;CACjB;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE,oBAAoB,CAAC;IACjC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,mGAAmG;IACnG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,0FAA0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kIAAkI;IAClI,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6GAA6G;IAC7G,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,gEAAgE;IAChE,uBAAuB,EAAE,KAAK,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC;IACrB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,aAAa,EAAE,KAAK,CAAC;IACrB,0DAA0D;IAC1D,UAAU,EAAE,KAAK,CAAC;IAClB,wEAAwE;IACxE,mBAAmB,EAAE,KAAK,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;CACnC"}

package/dist/rbac/authorize.d.ts

@@ -12,4 +12,16 @@ export declare function assertPermission(permissions: ReadonlySet<string>, requi
  * `user_role`/`role_permission` já restringe as linhas ao tenant ativo.
  */
 export declare function loadUserPermissions(tx: Tx, userId: string): Promise<Set<string>>;
+/**
+ * Quem, no tenant corrente, é staff ATIVO e tem a permissão pedida.
+ *
+ * Existe para os avisos que nascem sem ator — webhook do gateway, cron, job —
+ * onde não há "usuário que fez" e ainda assim alguém precisa ser avisado. Sem
+ * isso, o único destino possível seria um log que ninguém lê.
+ *
+ * Filtra `user_type = 'staff'` de propósito: um contribuinte jamais pode ser
+ * destinatário de aviso operacional do escritório, mesmo que uma permissão
+ * compartilhada o alcançasse por outro caminho.
+ */
+export declare function listStaffWithPermission(tx: Tx, permission: string): Promise<string[]>;
 //# sourceMappingURL=authorize.d.ts.map

package/dist/rbac/authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/rbac/authorize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAUtF"}
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/rbac/authorize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAIzF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAUtF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAe3F"}

package/dist/rbac/authorize.js

@@ -28,4 +28,31 @@ export async function loadUserPermissions(tx, userId) {
   `;
     return new Set(rows.map((r) => r.key));
 }
+/**
+ * Quem, no tenant corrente, é staff ATIVO e tem a permissão pedida.
+ *
+ * Existe para os avisos que nascem sem ator — webhook do gateway, cron, job —
+ * onde não há "usuário que fez" e ainda assim alguém precisa ser avisado. Sem
+ * isso, o único destino possível seria um log que ninguém lê.
+ *
+ * Filtra `user_type = 'staff'` de propósito: um contribuinte jamais pode ser
+ * destinatário de aviso operacional do escritório, mesmo que uma permissão
+ * compartilhada o alcançasse por outro caminho.
+ */
+export async function listStaffWithPermission(tx, permission) {
+    const rows = await tx `
+    SELECT DISTINCT m.user_id
+    FROM membership m
+    JOIN "user" u ON u.id = m.user_id
+    JOIN user_role ur ON ur.user_id = m.user_id AND ur.tenant_id = m.tenant_id
+    JOIN role_permission rp ON rp.role_id = ur.role_id
+    JOIN permission p ON p.id = rp.permission_id
+    WHERE m.tenant_id = current_setting('app.current_tenant')::uuid
+      AND m.status = 'active' AND m.deleted_at IS NULL
+      AND u.status = 'active' AND u.user_type = 'staff'
+      AND ur.deleted_at IS NULL
+      AND p.key = ${permission}
+  `;
+    return rows.map((r) => r.user_id);
+}
 //# sourceMappingURL=authorize.js.map

package/dist/rbac/authorize.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/rbac/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,WAAgC,EAAE,QAAgB;IACtE,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAgC,EAAE,QAAgB;IACjF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAM,EAAE,MAAc;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAmB;;;;;yBAKjB,MAAM;;GAE5B,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/rbac/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,WAAgC,EAAE,QAAgB;IACtE,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAgC,EAAE,QAAgB;IACjF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAM,EAAE,MAAc;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAmB;;;;;yBAKjB,MAAM;;GAE5B,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAAM,EAAE,UAAkB;IACtE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAuB;;;;;;;;;;;oBAW1B,UAAU;GAC3B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/dist/rbac/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/rbac/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EAqT/C,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAkC,CAAC;AAEpF,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAID,mFAAmF;AACnF,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EAoI1C,CAAC"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/rbac/catalog.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,WAAW,EAAE,SAAS,aAAa,EAkW/C,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAkC,CAAC;AAEpF,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAID,mFAAmF;AACnF,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EA2L1C,CAAC"}

package/dist/rbac/catalog.js

@@ -168,6 +168,19 @@ export const PERMISSIONS = [
         action: 'manage',
         description: 'Gerenciar régua de inadimplência',
     },
+    {
+        // Permissão DEDICADA ao Portal, deliberadamente separada de `billing.read`.
+        //
+        // Dar `billing.read` ao contribuinte reproduziria o defeito corrigido na
+        // PR #69: o papel passaria a alcançar as rotas de staff que exigem essa
+        // mesma permissão, e o escopo por cliente voltaria a depender de cada
+        // chamador lembrar do `clientId`. Uma permissão que só o Portal possui
+        // mantém as duas superfícies separadas por construção.
+        key: 'portal.finance.read',
+        resource: 'portal',
+        action: 'read',
+        description: 'Ver os próprios recebíveis pelo Portal do Contribuinte',
+    },
     {
         key: 'vault.read',
         resource: 'vault',
@@ -192,6 +205,38 @@ export const PERMISSIONS = [
         action: 'manage',
         description: 'Gerenciar modelos de mensagem',
     },
+    {
+        /**
+         * Permissão DEDICADA à permissão de contato, deliberadamente separada de
+         * `communication.send`.
+         *
+         * `communication.send` está no papel `client_titular` — o contribuinte do
+         * Portal. Proteger o registro de consentimento com ela deixaria o próprio
+         * cliente alterar quem pode ser cobrado, que é o mesmo defeito de permissão
+         * compartilhada alcançando rota de staff corrigido na PR #69. Uma permissão
+         * que só o escritório tem mantém as duas superfícies separadas por
+         * construção, não por atenção de quem escreve a próxima rota.
+         */
+        key: 'communication.consent.manage',
+        resource: 'communication',
+        action: 'manage',
+        description: 'Registrar e alterar permissão de contato por canal',
+    },
+    {
+        /**
+         * Configuração de canal do escritório: remetente, conta de provider e
+         * referência lógica de credencial.
+         *
+         * Separada de `tenant.settings.update` porque alcança a identidade de envio
+         * — quem a tem decide sob qual conta as mensagens saem. `admin` não tem
+         * `tenant.settings.update`, e não faria sentido que por isso perdesse a
+         * capacidade de ver a configuração de canal; são decisões diferentes.
+         */
+        key: 'communication.config.manage',
+        resource: 'communication',
+        action: 'manage',
+        description: 'Configurar contas e remetentes de canal do escritório',
+    },
     {
         key: 'automation.read',
         resource: 'automation',
@@ -334,6 +379,10 @@ export const SYSTEM_ROLES = [
             'document.write',
             'communication.send',
             'communication.read',
+            // O contador é quem ouve "não me mande mais WhatsApp" ao telefone. Sem
+            // esta permissão ele teria de pedir a outro papel para registrar — e um
+            // opt-out que depende de repasse é um opt-out que não é registrado.
+            'communication.consent.manage',
             'vault.credential.decrypt',
             'vault.read',
             'request.read',
@@ -398,6 +447,11 @@ export const SYSTEM_ROLES = [
             'billing.fee.manage',
             'billing.dunning.manage',
             'communication.send',
+            'communication.read',
+            // Quem opera a régua precisa registrar "este cliente pediu para não
+            // receber por WhatsApp" no momento em que o cliente diz isso — mandar
+            // pedir para outro papel garante que ninguém registre.
+            'communication.consent.manage',
         ],
     },
     {
@@ -408,6 +462,8 @@ export const SYSTEM_ROLES = [
             'communication.send',
             'communication.read',
             'communication.template.manage',
+            'communication.consent.manage',
+            'communication.config.manage',
             'request.read',
             'request.comment',
             'crm.read',
@@ -430,12 +486,55 @@ export const SYSTEM_ROLES = [
             'office.onboarding.timeline.read',
         ],
     },
+    /**
+     * Automação de teste ponta a ponta — infraestrutura de QA, não pessoa.
+     *
+     * ## Por que existe um papel só para isto
+     *
+     * Validar a interface em produção por automação exige uma identidade que
+     * entre. A conta pessoal do titular não serve: a trilha passaria a atribuir a
+     * ele atos que não praticou, e a senha teria de circular. Um papel existente
+     * também não serve — `finance`, o mais próximo, carrega `communication.send`
+     * e `finance.charge.create`, e uma automação que pode escrever para cliente ou
+     * emitir cobrança é uma automação capaz de causar dano fora do teste.
+     *
+     * ## As quatro permissões, e por que exatamente estas
+     *
+     * São o mínimo para o que a automação precisa VER e a única coisa que precisa
+     * MUDAR: ler carteira e painel, ler financeiro, cancelar um recebível, e ler a
+     * própria trilha para conferir que o ato ficou registrado.
+     *
+     * ## O que este papel deliberadamente NÃO pode
+     *
+     * Gerir usuários, ler ou decifrar o cofre, alterar configuração da
+     * organização, configurar canal de comunicação, enviar mensagem, emitir
+     * cobrança, mexer em honorário ou na régua. Nenhuma delas é necessária para
+     * validar tela, e cada uma seria uma forma de a automação sair do teste.
+     *
+     * Ele é `E2E_TEST_IDENTITY`: infraestrutura de QA, distinta da identidade de
+     * serviço do produto — que, essa sim, a auditoria da Fase 11 provou
+     * desnecessária, porque nenhum job usa membership.
+     */
+    {
+        key: 'e2e_automation',
+        name: 'Automação de teste (E2E)',
+        permissions: ['client.read', 'billing.read', 'billing.write', 'audit.read'],
+    },
     {
         key: 'client_titular',
         name: 'Cliente — Titular',
         permissions: [
             'document.read',
-            'communication.send',
+            // `communication.send` SAIU daqui.
+            //
+            // Estava concedida ao contribuinte desde o seed original e nunca foi
+            // exercida por rota nenhuma — o que a tornava inofensiva e invisível ao
+            // mesmo tempo. Deixou de ser inofensiva no momento em que este produto
+            // ganhou superfície administrativa de comunicação: a primeira rota de
+            // staff protegida por ela seria alcançável pelo Portal do cliente.
+            //
+            // É a mesma classe de defeito da PR #69 (`billing.read` no Portal),
+            // corrigida antes de existir a rota que a exploraria em vez de depois.
             'request.read',
             'request.comment',
             'portal.onboarding.read',
@@ -446,6 +545,7 @@ export const SYSTEM_ROLES = [
             'portal.onboarding.comment.create',
             'portal.onboarding.comment.read',
             'portal.onboarding.external_delivery.confirm',
+            'portal.finance.read',
         ],
     },
 ];