@baruk/core 0.4.2 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (576) hide show
  1. package/.baruk-provenance.json +4 -4
  2. package/CHANGELOG.md +42 -0
  3. package/dist/audit/repository.d.ts +33 -1
  4. package/dist/audit/repository.d.ts.map +1 -1
  5. package/dist/audit/repository.js +41 -7
  6. package/dist/audit/repository.js.map +1 -1
  7. package/dist/auth/service.d.ts +21 -0
  8. package/dist/auth/service.d.ts.map +1 -1
  9. package/dist/auth/service.js +46 -1
  10. package/dist/auth/service.js.map +1 -1
  11. package/dist/billing/ar-repository.d.ts +41 -1
  12. package/dist/billing/ar-repository.d.ts.map +1 -1
  13. package/dist/billing/ar-repository.js +82 -6
  14. package/dist/billing/ar-repository.js.map +1 -1
  15. package/dist/billing/provider-account.d.ts +38 -0
  16. package/dist/billing/provider-account.d.ts.map +1 -1
  17. package/dist/billing/provider-account.js +58 -2
  18. package/dist/billing/provider-account.js.map +1 -1
  19. package/dist/billing/repository.d.ts +44 -0
  20. package/dist/billing/repository.d.ts.map +1 -1
  21. package/dist/billing/repository.js +49 -5
  22. package/dist/billing/repository.js.map +1 -1
  23. package/dist/cjs/audit/repository.js +41 -7
  24. package/dist/cjs/audit/repository.js.map +1 -1
  25. package/dist/cjs/auth/service.js +46 -1
  26. package/dist/cjs/auth/service.js.map +1 -1
  27. package/dist/cjs/billing/ar-repository.js +82 -6
  28. package/dist/cjs/billing/ar-repository.js.map +1 -1
  29. package/dist/cjs/billing/provider-account.js +60 -1
  30. package/dist/cjs/billing/provider-account.js.map +1 -1
  31. package/dist/cjs/billing/repository.js +51 -5
  32. package/dist/cjs/billing/repository.js.map +1 -1
  33. package/dist/cjs/clients/ibge.js +117 -0
  34. package/dist/cjs/clients/ibge.js.map +1 -0
  35. package/dist/cjs/clients/registry/http.js +157 -0
  36. package/dist/cjs/clients/registry/http.js.map +1 -0
  37. package/dist/cjs/clients/registry/ibge-municipios.js +28 -0
  38. package/dist/cjs/clients/registry/ibge-municipios.js.map +1 -0
  39. package/dist/cjs/clients/registry/ibge.js +63 -0
  40. package/dist/cjs/clients/registry/ibge.js.map +1 -0
  41. package/dist/cjs/clients/registry/lookup.js +191 -0
  42. package/dist/cjs/clients/registry/lookup.js.map +1 -0
  43. package/dist/cjs/clients/registry/provider.js +34 -0
  44. package/dist/cjs/clients/registry/provider.js.map +1 -0
  45. package/dist/cjs/clients/registry/resolve.js +47 -0
  46. package/dist/cjs/clients/registry/resolve.js.map +1 -0
  47. package/dist/cjs/clients/registry/serpro.js +149 -0
  48. package/dist/cjs/clients/registry/serpro.js.map +1 -0
  49. package/dist/cjs/clients/registry/service.js +230 -0
  50. package/dist/cjs/clients/registry/service.js.map +1 -0
  51. package/dist/cjs/clients/registry/synthetic.js +165 -0
  52. package/dist/cjs/clients/registry/synthetic.js.map +1 -0
  53. package/dist/cjs/clients/repository.js +190 -9
  54. package/dist/cjs/clients/repository.js.map +1 -1
  55. package/dist/cjs/collection/branding.js +190 -0
  56. package/dist/cjs/collection/branding.js.map +1 -1
  57. package/dist/cjs/collection/clearance-store.js +74 -0
  58. package/dist/cjs/collection/clearance-store.js.map +1 -0
  59. package/dist/cjs/collection/communication-runtime.js +65 -2
  60. package/dist/cjs/collection/communication-runtime.js.map +1 -1
  61. package/dist/cjs/collection/engine.js +20 -0
  62. package/dist/cjs/collection/engine.js.map +1 -1
  63. package/dist/cjs/collection/policy.js +29 -1
  64. package/dist/cjs/collection/policy.js.map +1 -1
  65. package/dist/cjs/communication/clearance.js +18 -0
  66. package/dist/cjs/communication/clearance.js.map +1 -0
  67. package/dist/cjs/communication/dry-run-scenario.js +5 -0
  68. package/dist/cjs/communication/dry-run-scenario.js.map +1 -1
  69. package/dist/cjs/communication/engine.js +12 -0
  70. package/dist/cjs/communication/engine.js.map +1 -1
  71. package/dist/cjs/communication/policy.js.map +1 -1
  72. package/dist/cjs/competence/business-days.js +155 -0
  73. package/dist/cjs/competence/business-days.js.map +1 -0
  74. package/dist/cjs/competence/catalog-validation.js +174 -0
  75. package/dist/cjs/competence/catalog-validation.js.map +1 -0
  76. package/dist/cjs/competence/obligation-preview.js +190 -0
  77. package/dist/cjs/competence/obligation-preview.js.map +1 -0
  78. package/dist/cjs/competence/repository.js +330 -17
  79. package/dist/cjs/competence/repository.js.map +1 -1
  80. package/dist/cjs/dashboard/pilot-panel.js +90 -0
  81. package/dist/cjs/dashboard/pilot-panel.js.map +1 -0
  82. package/dist/cjs/dashboard/repository.js +11 -1
  83. package/dist/cjs/dashboard/repository.js.map +1 -1
  84. package/dist/cjs/db/client.js +17 -11
  85. package/dist/cjs/db/client.js.map +1 -1
  86. package/dist/cjs/db/provision-e2e-identity.js +116 -0
  87. package/dist/cjs/db/provision-e2e-identity.js.map +1 -0
  88. package/dist/cjs/fiscal/applicability.js +164 -0
  89. package/dist/cjs/fiscal/applicability.js.map +1 -0
  90. package/dist/cjs/fiscal/collection/authorization.js +186 -0
  91. package/dist/cjs/fiscal/collection/authorization.js.map +1 -0
  92. package/dist/cjs/fiscal/collection/competence.js +97 -0
  93. package/dist/cjs/fiscal/collection/competence.js.map +1 -0
  94. package/dist/cjs/fiscal/collection/first-contact.js +204 -0
  95. package/dist/cjs/fiscal/collection/first-contact.js.map +1 -0
  96. package/dist/cjs/fiscal/collection/plan.js +122 -0
  97. package/dist/cjs/fiscal/collection/plan.js.map +1 -0
  98. package/dist/cjs/fiscal/conditions.js +198 -0
  99. package/dist/cjs/fiscal/conditions.js.map +1 -0
  100. package/dist/cjs/fiscal/contracts/nfse-adn-contract.js +390 -0
  101. package/dist/cjs/fiscal/contracts/nfse-adn-contract.js.map +1 -0
  102. package/dist/cjs/fiscal/contracts/nfse-adn-endpoint.js +108 -0
  103. package/dist/cjs/fiscal/contracts/nfse-adn-endpoint.js.map +1 -0
  104. package/dist/cjs/fiscal/contracts/nfse-adn-envelope.js +220 -0
  105. package/dist/cjs/fiscal/contracts/nfse-adn-envelope.js.map +1 -0
  106. package/dist/cjs/fiscal/coverage/model.js +137 -0
  107. package/dist/cjs/fiscal/coverage/model.js.map +1 -0
  108. package/dist/cjs/fiscal/coverage/requests.js +99 -0
  109. package/dist/cjs/fiscal/coverage/requests.js.map +1 -0
  110. package/dist/cjs/fiscal/credentials/inspect.js +182 -0
  111. package/dist/cjs/fiscal/credentials/inspect.js.map +1 -0
  112. package/dist/cjs/fiscal/credentials/material.js +168 -0
  113. package/dist/cjs/fiscal/credentials/material.js.map +1 -0
  114. package/dist/cjs/fiscal/credentials/onboarding.js +266 -0
  115. package/dist/cjs/fiscal/credentials/onboarding.js.map +1 -0
  116. package/dist/cjs/fiscal/credentials/readiness.js +190 -0
  117. package/dist/cjs/fiscal/credentials/readiness.js.map +1 -0
  118. package/dist/cjs/fiscal/eligibility.js +199 -0
  119. package/dist/cjs/fiscal/eligibility.js.map +1 -0
  120. package/dist/cjs/fiscal/enrollment.js +134 -0
  121. package/dist/cjs/fiscal/enrollment.js.map +1 -0
  122. package/dist/cjs/fiscal/ingestion/__fixtures__/nfse.js +128 -0
  123. package/dist/cjs/fiscal/ingestion/__fixtures__/nfse.js.map +1 -0
  124. package/dist/cjs/fiscal/ingestion/adn-transport.js +229 -0
  125. package/dist/cjs/fiscal/ingestion/adn-transport.js.map +1 -0
  126. package/dist/cjs/fiscal/ingestion/direction.js +36 -0
  127. package/dist/cjs/fiscal/ingestion/direction.js.map +1 -0
  128. package/dist/cjs/fiscal/ingestion/nfse-adn.js +228 -0
  129. package/dist/cjs/fiscal/ingestion/nfse-adn.js.map +1 -0
  130. package/dist/cjs/fiscal/ingestion/pipeline.js +704 -0
  131. package/dist/cjs/fiscal/ingestion/pipeline.js.map +1 -0
  132. package/dist/cjs/fiscal/ingestion/provider.js +51 -0
  133. package/dist/cjs/fiscal/ingestion/provider.js.map +1 -0
  134. package/dist/cjs/fiscal/ingestion/repository.js +132 -0
  135. package/dist/cjs/fiscal/ingestion/repository.js.map +1 -0
  136. package/dist/cjs/fiscal/ingestion/synthetic-provider.js +103 -0
  137. package/dist/cjs/fiscal/ingestion/synthetic-provider.js.map +1 -0
  138. package/dist/cjs/fiscal/ingestion/synthetic-transport-types.js +13 -0
  139. package/dist/cjs/fiscal/ingestion/synthetic-transport-types.js.map +1 -0
  140. package/dist/cjs/fiscal/ingestion/synthetic-transport.js +61 -0
  141. package/dist/cjs/fiscal/ingestion/synthetic-transport.js.map +1 -0
  142. package/dist/cjs/fiscal/ingestion/xml-reader.js +121 -0
  143. package/dist/cjs/fiscal/ingestion/xml-reader.js.map +1 -0
  144. package/dist/cjs/fiscal/repository.js +470 -0
  145. package/dist/cjs/fiscal/repository.js.map +1 -0
  146. package/dist/cjs/fiscal/sync/circuit.js +124 -0
  147. package/dist/cjs/fiscal/sync/circuit.js.map +1 -0
  148. package/dist/cjs/fiscal/sync/intervention.js +140 -0
  149. package/dist/cjs/fiscal/sync/intervention.js.map +1 -0
  150. package/dist/cjs/fiscal/sync/lease.js +146 -0
  151. package/dist/cjs/fiscal/sync/lease.js.map +1 -0
  152. package/dist/cjs/fiscal/sync/observability.js +244 -0
  153. package/dist/cjs/fiscal/sync/observability.js.map +1 -0
  154. package/dist/cjs/fiscal/sync/orchestrator.js +490 -0
  155. package/dist/cjs/fiscal/sync/orchestrator.js.map +1 -0
  156. package/dist/cjs/fiscal/sync/policy.js +143 -0
  157. package/dist/cjs/fiscal/sync/policy.js.map +1 -0
  158. package/dist/cjs/fiscal/sync/reprocess.js +241 -0
  159. package/dist/cjs/fiscal/sync/reprocess.js.map +1 -0
  160. package/dist/cjs/fiscal/sync/retry.js +183 -0
  161. package/dist/cjs/fiscal/sync/retry.js.map +1 -0
  162. package/dist/cjs/fiscal/sync/secret-boundary.js +123 -0
  163. package/dist/cjs/fiscal/sync/secret-boundary.js.map +1 -0
  164. package/dist/cjs/fiscal/transport/https.js +309 -0
  165. package/dist/cjs/fiscal/transport/https.js.map +1 -0
  166. package/dist/cjs/fiscal/transport/synthetic-tls.js +380 -0
  167. package/dist/cjs/fiscal/transport/synthetic-tls.js.map +1 -0
  168. package/dist/cjs/fiscal/transport/types.js +93 -0
  169. package/dist/cjs/fiscal/transport/types.js.map +1 -0
  170. package/dist/cjs/import/br-documents.js +85 -0
  171. package/dist/cjs/import/br-documents.js.map +1 -0
  172. package/dist/cjs/import/clients-import.js +347 -40
  173. package/dist/cjs/import/clients-import.js.map +1 -1
  174. package/dist/cjs/index.js +461 -73
  175. package/dist/cjs/index.js.map +1 -1
  176. package/dist/cjs/legal/documents.js +164 -19
  177. package/dist/cjs/legal/documents.js.map +1 -1
  178. package/dist/cjs/legal/index.js +3 -1
  179. package/dist/cjs/legal/index.js.map +1 -1
  180. package/dist/cjs/legal/types.js.map +1 -1
  181. package/dist/cjs/onboarding/persistence.js +4 -4
  182. package/dist/cjs/onboarding/persistence.js.map +1 -1
  183. package/dist/cjs/pilot/go-live-checklist.js +212 -0
  184. package/dist/cjs/pilot/go-live-checklist.js.map +1 -0
  185. package/dist/cjs/pilot/milestone.js +79 -0
  186. package/dist/cjs/pilot/milestone.js.map +1 -0
  187. package/dist/cjs/platform/capabilities.js +173 -0
  188. package/dist/cjs/platform/capabilities.js.map +1 -0
  189. package/dist/cjs/platform/job-contract.js +411 -0
  190. package/dist/cjs/platform/job-contract.js.map +1 -0
  191. package/dist/cjs/rbac/catalog.js +110 -0
  192. package/dist/cjs/rbac/catalog.js.map +1 -1
  193. package/dist/cjs/subscription-billing/index.js +9 -1
  194. package/dist/cjs/subscription-billing/index.js.map +1 -1
  195. package/dist/cjs/subscription-billing/platform-exemption.js +121 -0
  196. package/dist/cjs/subscription-billing/platform-exemption.js.map +1 -0
  197. package/dist/cjs/subscription-billing/service.js +246 -78
  198. package/dist/cjs/subscription-billing/service.js.map +1 -1
  199. package/dist/cjs/tenancy/features.js +131 -0
  200. package/dist/cjs/tenancy/features.js.map +1 -0
  201. package/dist/cjs/tenancy/settings.js +224 -0
  202. package/dist/cjs/tenancy/settings.js.map +1 -0
  203. package/dist/cjs/users/repository.js +24 -1
  204. package/dist/cjs/users/repository.js.map +1 -1
  205. package/dist/cjs/vault/repository.js +92 -5
  206. package/dist/cjs/vault/repository.js.map +1 -1
  207. package/dist/clients/ibge.d.ts +17 -0
  208. package/dist/clients/ibge.d.ts.map +1 -0
  209. package/dist/clients/ibge.js +112 -0
  210. package/dist/clients/ibge.js.map +1 -0
  211. package/dist/clients/registry/http.d.ts +61 -0
  212. package/dist/clients/registry/http.d.ts.map +1 -0
  213. package/dist/clients/registry/http.js +151 -0
  214. package/dist/clients/registry/http.js.map +1 -0
  215. package/dist/clients/registry/ibge-municipios.d.ts +25 -0
  216. package/dist/clients/registry/ibge-municipios.d.ts.map +1 -0
  217. package/dist/clients/registry/ibge-municipios.js +25 -0
  218. package/dist/clients/registry/ibge-municipios.js.map +1 -0
  219. package/dist/clients/registry/ibge.d.ts +62 -0
  220. package/dist/clients/registry/ibge.d.ts.map +1 -0
  221. package/dist/clients/registry/ibge.js +57 -0
  222. package/dist/clients/registry/ibge.js.map +1 -0
  223. package/dist/clients/registry/lookup.d.ts +94 -0
  224. package/dist/clients/registry/lookup.d.ts.map +1 -0
  225. package/dist/clients/registry/lookup.js +184 -0
  226. package/dist/clients/registry/lookup.js.map +1 -0
  227. package/dist/clients/registry/provider.d.ts +124 -0
  228. package/dist/clients/registry/provider.d.ts.map +1 -0
  229. package/dist/clients/registry/provider.js +39 -0
  230. package/dist/clients/registry/provider.js.map +1 -0
  231. package/dist/clients/registry/resolve.d.ts +36 -0
  232. package/dist/clients/registry/resolve.d.ts.map +1 -0
  233. package/dist/clients/registry/resolve.js +44 -0
  234. package/dist/clients/registry/resolve.js.map +1 -0
  235. package/dist/clients/registry/serpro.d.ts +57 -0
  236. package/dist/clients/registry/serpro.d.ts.map +1 -0
  237. package/dist/clients/registry/serpro.js +143 -0
  238. package/dist/clients/registry/serpro.js.map +1 -0
  239. package/dist/clients/registry/service.d.ts +59 -0
  240. package/dist/clients/registry/service.d.ts.map +1 -0
  241. package/dist/clients/registry/service.js +225 -0
  242. package/dist/clients/registry/service.js.map +1 -0
  243. package/dist/clients/registry/synthetic.d.ts +30 -0
  244. package/dist/clients/registry/synthetic.d.ts.map +1 -0
  245. package/dist/clients/registry/synthetic.js +161 -0
  246. package/dist/clients/registry/synthetic.js.map +1 -0
  247. package/dist/clients/repository.d.ts +158 -0
  248. package/dist/clients/repository.d.ts.map +1 -1
  249. package/dist/clients/repository.js +186 -9
  250. package/dist/clients/repository.js.map +1 -1
  251. package/dist/collection/branding.d.ts +65 -0
  252. package/dist/collection/branding.d.ts.map +1 -1
  253. package/dist/collection/branding.js +186 -0
  254. package/dist/collection/branding.js.map +1 -1
  255. package/dist/collection/clearance-store.d.ts +39 -0
  256. package/dist/collection/clearance-store.d.ts.map +1 -0
  257. package/dist/collection/clearance-store.js +69 -0
  258. package/dist/collection/clearance-store.js.map +1 -0
  259. package/dist/collection/communication-runtime.d.ts +37 -0
  260. package/dist/collection/communication-runtime.d.ts.map +1 -1
  261. package/dist/collection/communication-runtime.js +63 -1
  262. package/dist/collection/communication-runtime.js.map +1 -1
  263. package/dist/collection/engine.d.ts +23 -0
  264. package/dist/collection/engine.d.ts.map +1 -1
  265. package/dist/collection/engine.js +20 -0
  266. package/dist/collection/engine.js.map +1 -1
  267. package/dist/collection/policy.d.ts +25 -0
  268. package/dist/collection/policy.d.ts.map +1 -1
  269. package/dist/collection/policy.js +27 -0
  270. package/dist/collection/policy.js.map +1 -1
  271. package/dist/communication/clearance.d.ts +53 -0
  272. package/dist/communication/clearance.d.ts.map +1 -0
  273. package/dist/communication/clearance.js +15 -0
  274. package/dist/communication/clearance.js.map +1 -0
  275. package/dist/communication/dry-run-scenario.d.ts.map +1 -1
  276. package/dist/communication/dry-run-scenario.js +5 -0
  277. package/dist/communication/dry-run-scenario.js.map +1 -1
  278. package/dist/communication/engine.d.ts +10 -0
  279. package/dist/communication/engine.d.ts.map +1 -1
  280. package/dist/communication/engine.js +12 -0
  281. package/dist/communication/engine.js.map +1 -1
  282. package/dist/communication/policy.d.ts +16 -0
  283. package/dist/communication/policy.d.ts.map +1 -1
  284. package/dist/communication/policy.js.map +1 -1
  285. package/dist/competence/business-days.d.ts +51 -0
  286. package/dist/competence/business-days.d.ts.map +1 -0
  287. package/dist/competence/business-days.js +145 -0
  288. package/dist/competence/business-days.js.map +1 -0
  289. package/dist/competence/catalog-validation.d.ts +86 -0
  290. package/dist/competence/catalog-validation.d.ts.map +1 -0
  291. package/dist/competence/catalog-validation.js +168 -0
  292. package/dist/competence/catalog-validation.js.map +1 -0
  293. package/dist/competence/obligation-preview.d.ts +103 -0
  294. package/dist/competence/obligation-preview.d.ts.map +1 -0
  295. package/dist/competence/obligation-preview.js +184 -0
  296. package/dist/competence/obligation-preview.js.map +1 -0
  297. package/dist/competence/repository.d.ts +139 -1
  298. package/dist/competence/repository.d.ts.map +1 -1
  299. package/dist/competence/repository.js +325 -17
  300. package/dist/competence/repository.js.map +1 -1
  301. package/dist/dashboard/pilot-panel.d.ts +100 -0
  302. package/dist/dashboard/pilot-panel.d.ts.map +1 -0
  303. package/dist/dashboard/pilot-panel.js +87 -0
  304. package/dist/dashboard/pilot-panel.js.map +1 -0
  305. package/dist/dashboard/repository.d.ts.map +1 -1
  306. package/dist/dashboard/repository.js +11 -1
  307. package/dist/dashboard/repository.js.map +1 -1
  308. package/dist/db/client.d.ts +45 -0
  309. package/dist/db/client.d.ts.map +1 -1
  310. package/dist/db/client.js +16 -11
  311. package/dist/db/client.js.map +1 -1
  312. package/dist/db/migrate.d.ts +36 -1
  313. package/dist/db/migrate.d.ts.map +1 -1
  314. package/dist/db/migrate.js +199 -32
  315. package/dist/db/migrate.js.map +1 -1
  316. package/dist/db/provision-e2e-identity.d.ts +2 -0
  317. package/dist/db/provision-e2e-identity.d.ts.map +1 -0
  318. package/dist/db/provision-e2e-identity.js +114 -0
  319. package/dist/db/provision-e2e-identity.js.map +1 -0
  320. package/dist/fiscal/applicability.d.ts +73 -0
  321. package/dist/fiscal/applicability.d.ts.map +1 -0
  322. package/dist/fiscal/applicability.js +160 -0
  323. package/dist/fiscal/applicability.js.map +1 -0
  324. package/dist/fiscal/collection/authorization.d.ts +152 -0
  325. package/dist/fiscal/collection/authorization.d.ts.map +1 -0
  326. package/dist/fiscal/collection/authorization.js +178 -0
  327. package/dist/fiscal/collection/authorization.js.map +1 -0
  328. package/dist/fiscal/collection/competence.d.ts +66 -0
  329. package/dist/fiscal/collection/competence.d.ts.map +1 -0
  330. package/dist/fiscal/collection/competence.js +90 -0
  331. package/dist/fiscal/collection/competence.js.map +1 -0
  332. package/dist/fiscal/collection/first-contact.d.ts +103 -0
  333. package/dist/fiscal/collection/first-contact.d.ts.map +1 -0
  334. package/dist/fiscal/collection/first-contact.js +201 -0
  335. package/dist/fiscal/collection/first-contact.js.map +1 -0
  336. package/dist/fiscal/collection/plan.d.ts +74 -0
  337. package/dist/fiscal/collection/plan.d.ts.map +1 -0
  338. package/dist/fiscal/collection/plan.js +119 -0
  339. package/dist/fiscal/collection/plan.js.map +1 -0
  340. package/dist/fiscal/conditions.d.ts +99 -0
  341. package/dist/fiscal/conditions.d.ts.map +1 -0
  342. package/dist/fiscal/conditions.js +190 -0
  343. package/dist/fiscal/conditions.js.map +1 -0
  344. package/dist/fiscal/contracts/nfse-adn-contract.d.ts +315 -0
  345. package/dist/fiscal/contracts/nfse-adn-contract.d.ts.map +1 -0
  346. package/dist/fiscal/contracts/nfse-adn-contract.js +386 -0
  347. package/dist/fiscal/contracts/nfse-adn-contract.js.map +1 -0
  348. package/dist/fiscal/contracts/nfse-adn-endpoint.d.ts +13 -0
  349. package/dist/fiscal/contracts/nfse-adn-endpoint.d.ts.map +1 -0
  350. package/dist/fiscal/contracts/nfse-adn-endpoint.js +103 -0
  351. package/dist/fiscal/contracts/nfse-adn-endpoint.js.map +1 -0
  352. package/dist/fiscal/contracts/nfse-adn-envelope.d.ts +77 -0
  353. package/dist/fiscal/contracts/nfse-adn-envelope.d.ts.map +1 -0
  354. package/dist/fiscal/contracts/nfse-adn-envelope.js +215 -0
  355. package/dist/fiscal/contracts/nfse-adn-envelope.js.map +1 -0
  356. package/dist/fiscal/coverage/model.d.ts +114 -0
  357. package/dist/fiscal/coverage/model.d.ts.map +1 -0
  358. package/dist/fiscal/coverage/model.js +130 -0
  359. package/dist/fiscal/coverage/model.js.map +1 -0
  360. package/dist/fiscal/coverage/requests.d.ts +70 -0
  361. package/dist/fiscal/coverage/requests.d.ts.map +1 -0
  362. package/dist/fiscal/coverage/requests.js +95 -0
  363. package/dist/fiscal/coverage/requests.js.map +1 -0
  364. package/dist/fiscal/credentials/inspect.d.ts +114 -0
  365. package/dist/fiscal/credentials/inspect.d.ts.map +1 -0
  366. package/dist/fiscal/credentials/inspect.js +178 -0
  367. package/dist/fiscal/credentials/inspect.js.map +1 -0
  368. package/dist/fiscal/credentials/material.d.ts +81 -0
  369. package/dist/fiscal/credentials/material.d.ts.map +1 -0
  370. package/dist/fiscal/credentials/material.js +164 -0
  371. package/dist/fiscal/credentials/material.js.map +1 -0
  372. package/dist/fiscal/credentials/onboarding.d.ts +119 -0
  373. package/dist/fiscal/credentials/onboarding.d.ts.map +1 -0
  374. package/dist/fiscal/credentials/onboarding.js +259 -0
  375. package/dist/fiscal/credentials/onboarding.js.map +1 -0
  376. package/dist/fiscal/credentials/readiness.d.ts +119 -0
  377. package/dist/fiscal/credentials/readiness.d.ts.map +1 -0
  378. package/dist/fiscal/credentials/readiness.js +186 -0
  379. package/dist/fiscal/credentials/readiness.js.map +1 -0
  380. package/dist/fiscal/eligibility.d.ts +106 -0
  381. package/dist/fiscal/eligibility.d.ts.map +1 -0
  382. package/dist/fiscal/eligibility.js +194 -0
  383. package/dist/fiscal/eligibility.js.map +1 -0
  384. package/dist/fiscal/enrollment.d.ts +91 -0
  385. package/dist/fiscal/enrollment.d.ts.map +1 -0
  386. package/dist/fiscal/enrollment.js +126 -0
  387. package/dist/fiscal/enrollment.js.map +1 -0
  388. package/dist/fiscal/ingestion/__fixtures__/nfse.d.ts +57 -0
  389. package/dist/fiscal/ingestion/__fixtures__/nfse.d.ts.map +1 -0
  390. package/dist/fiscal/ingestion/__fixtures__/nfse.js +121 -0
  391. package/dist/fiscal/ingestion/__fixtures__/nfse.js.map +1 -0
  392. package/dist/fiscal/ingestion/adn-transport.d.ts +123 -0
  393. package/dist/fiscal/ingestion/adn-transport.d.ts.map +1 -0
  394. package/dist/fiscal/ingestion/adn-transport.js +220 -0
  395. package/dist/fiscal/ingestion/adn-transport.js.map +1 -0
  396. package/dist/fiscal/ingestion/direction.d.ts +60 -0
  397. package/dist/fiscal/ingestion/direction.d.ts.map +1 -0
  398. package/dist/fiscal/ingestion/direction.js +32 -0
  399. package/dist/fiscal/ingestion/direction.js.map +1 -0
  400. package/dist/fiscal/ingestion/nfse-adn.d.ts +91 -0
  401. package/dist/fiscal/ingestion/nfse-adn.d.ts.map +1 -0
  402. package/dist/fiscal/ingestion/nfse-adn.js +222 -0
  403. package/dist/fiscal/ingestion/nfse-adn.js.map +1 -0
  404. package/dist/fiscal/ingestion/pipeline.d.ts +168 -0
  405. package/dist/fiscal/ingestion/pipeline.d.ts.map +1 -0
  406. package/dist/fiscal/ingestion/pipeline.js +699 -0
  407. package/dist/fiscal/ingestion/pipeline.js.map +1 -0
  408. package/dist/fiscal/ingestion/provider.d.ts +206 -0
  409. package/dist/fiscal/ingestion/provider.d.ts.map +1 -0
  410. package/dist/fiscal/ingestion/provider.js +47 -0
  411. package/dist/fiscal/ingestion/provider.js.map +1 -0
  412. package/dist/fiscal/ingestion/repository.d.ts +82 -0
  413. package/dist/fiscal/ingestion/repository.d.ts.map +1 -0
  414. package/dist/fiscal/ingestion/repository.js +127 -0
  415. package/dist/fiscal/ingestion/repository.js.map +1 -0
  416. package/dist/fiscal/ingestion/synthetic-provider.d.ts +92 -0
  417. package/dist/fiscal/ingestion/synthetic-provider.d.ts.map +1 -0
  418. package/dist/fiscal/ingestion/synthetic-provider.js +99 -0
  419. package/dist/fiscal/ingestion/synthetic-provider.js.map +1 -0
  420. package/dist/fiscal/ingestion/synthetic-transport-types.d.ts +19 -0
  421. package/dist/fiscal/ingestion/synthetic-transport-types.d.ts.map +1 -0
  422. package/dist/fiscal/ingestion/synthetic-transport-types.js +9 -0
  423. package/dist/fiscal/ingestion/synthetic-transport-types.js.map +1 -0
  424. package/dist/fiscal/ingestion/synthetic-transport.d.ts +55 -0
  425. package/dist/fiscal/ingestion/synthetic-transport.d.ts.map +1 -0
  426. package/dist/fiscal/ingestion/synthetic-transport.js +57 -0
  427. package/dist/fiscal/ingestion/synthetic-transport.js.map +1 -0
  428. package/dist/fiscal/ingestion/xml-reader.d.ts +55 -0
  429. package/dist/fiscal/ingestion/xml-reader.d.ts.map +1 -0
  430. package/dist/fiscal/ingestion/xml-reader.js +112 -0
  431. package/dist/fiscal/ingestion/xml-reader.js.map +1 -0
  432. package/dist/fiscal/repository.d.ts +220 -0
  433. package/dist/fiscal/repository.d.ts.map +1 -0
  434. package/dist/fiscal/repository.js +449 -0
  435. package/dist/fiscal/repository.js.map +1 -0
  436. package/dist/fiscal/sync/circuit.d.ts +86 -0
  437. package/dist/fiscal/sync/circuit.d.ts.map +1 -0
  438. package/dist/fiscal/sync/circuit.js +118 -0
  439. package/dist/fiscal/sync/circuit.js.map +1 -0
  440. package/dist/fiscal/sync/intervention.d.ts +81 -0
  441. package/dist/fiscal/sync/intervention.d.ts.map +1 -0
  442. package/dist/fiscal/sync/intervention.js +135 -0
  443. package/dist/fiscal/sync/intervention.js.map +1 -0
  444. package/dist/fiscal/sync/lease.d.ts +118 -0
  445. package/dist/fiscal/sync/lease.d.ts.map +1 -0
  446. package/dist/fiscal/sync/lease.js +139 -0
  447. package/dist/fiscal/sync/lease.js.map +1 -0
  448. package/dist/fiscal/sync/observability.d.ts +148 -0
  449. package/dist/fiscal/sync/observability.d.ts.map +1 -0
  450. package/dist/fiscal/sync/observability.js +239 -0
  451. package/dist/fiscal/sync/observability.js.map +1 -0
  452. package/dist/fiscal/sync/orchestrator.d.ts +132 -0
  453. package/dist/fiscal/sync/orchestrator.d.ts.map +1 -0
  454. package/dist/fiscal/sync/orchestrator.js +487 -0
  455. package/dist/fiscal/sync/orchestrator.js.map +1 -0
  456. package/dist/fiscal/sync/policy.d.ts +87 -0
  457. package/dist/fiscal/sync/policy.d.ts.map +1 -0
  458. package/dist/fiscal/sync/policy.js +136 -0
  459. package/dist/fiscal/sync/policy.js.map +1 -0
  460. package/dist/fiscal/sync/reprocess.d.ts +76 -0
  461. package/dist/fiscal/sync/reprocess.d.ts.map +1 -0
  462. package/dist/fiscal/sync/reprocess.js +237 -0
  463. package/dist/fiscal/sync/reprocess.js.map +1 -0
  464. package/dist/fiscal/sync/retry.d.ts +82 -0
  465. package/dist/fiscal/sync/retry.d.ts.map +1 -0
  466. package/dist/fiscal/sync/retry.js +176 -0
  467. package/dist/fiscal/sync/retry.js.map +1 -0
  468. package/dist/fiscal/sync/secret-boundary.d.ts +169 -0
  469. package/dist/fiscal/sync/secret-boundary.d.ts.map +1 -0
  470. package/dist/fiscal/sync/secret-boundary.js +116 -0
  471. package/dist/fiscal/sync/secret-boundary.js.map +1 -0
  472. package/dist/fiscal/transport/https.d.ts +86 -0
  473. package/dist/fiscal/transport/https.d.ts.map +1 -0
  474. package/dist/fiscal/transport/https.js +303 -0
  475. package/dist/fiscal/transport/https.js.map +1 -0
  476. package/dist/fiscal/transport/synthetic-tls.d.ts +99 -0
  477. package/dist/fiscal/transport/synthetic-tls.d.ts.map +1 -0
  478. package/dist/fiscal/transport/synthetic-tls.js +374 -0
  479. package/dist/fiscal/transport/synthetic-tls.js.map +1 -0
  480. package/dist/fiscal/transport/types.d.ts +134 -0
  481. package/dist/fiscal/transport/types.d.ts.map +1 -0
  482. package/dist/fiscal/transport/types.js +88 -0
  483. package/dist/fiscal/transport/types.js.map +1 -0
  484. package/dist/import/br-documents.d.ts +26 -0
  485. package/dist/import/br-documents.d.ts.map +1 -0
  486. package/dist/import/br-documents.js +78 -0
  487. package/dist/import/br-documents.js.map +1 -0
  488. package/dist/import/clients-import.d.ts +122 -4
  489. package/dist/import/clients-import.d.ts.map +1 -1
  490. package/dist/import/clients-import.js +341 -41
  491. package/dist/import/clients-import.js.map +1 -1
  492. package/dist/index.d.ts +145 -13
  493. package/dist/index.d.ts.map +1 -1
  494. package/dist/index.js +120 -7
  495. package/dist/index.js.map +1 -1
  496. package/dist/legal/documents.d.ts +12 -1
  497. package/dist/legal/documents.d.ts.map +1 -1
  498. package/dist/legal/documents.js +162 -18
  499. package/dist/legal/documents.js.map +1 -1
  500. package/dist/legal/index.d.ts +2 -2
  501. package/dist/legal/index.d.ts.map +1 -1
  502. package/dist/legal/index.js +1 -1
  503. package/dist/legal/index.js.map +1 -1
  504. package/dist/legal/types.d.ts +114 -2
  505. package/dist/legal/types.d.ts.map +1 -1
  506. package/dist/legal/types.js.map +1 -1
  507. package/dist/onboarding/persistence.d.ts +10 -1
  508. package/dist/onboarding/persistence.d.ts.map +1 -1
  509. package/dist/onboarding/persistence.js +4 -4
  510. package/dist/onboarding/persistence.js.map +1 -1
  511. package/dist/pilot/go-live-checklist.d.ts +41 -0
  512. package/dist/pilot/go-live-checklist.d.ts.map +1 -0
  513. package/dist/pilot/go-live-checklist.js +209 -0
  514. package/dist/pilot/go-live-checklist.js.map +1 -0
  515. package/dist/pilot/milestone.d.ts +56 -0
  516. package/dist/pilot/milestone.d.ts.map +1 -0
  517. package/dist/pilot/milestone.js +74 -0
  518. package/dist/pilot/milestone.js.map +1 -0
  519. package/dist/platform/capabilities.d.ts +88 -0
  520. package/dist/platform/capabilities.d.ts.map +1 -0
  521. package/dist/platform/capabilities.js +169 -0
  522. package/dist/platform/capabilities.js.map +1 -0
  523. package/dist/platform/job-contract.d.ts +232 -0
  524. package/dist/platform/job-contract.d.ts.map +1 -0
  525. package/dist/platform/job-contract.js +403 -0
  526. package/dist/platform/job-contract.js.map +1 -0
  527. package/dist/rbac/catalog.d.ts.map +1 -1
  528. package/dist/rbac/catalog.js +110 -0
  529. package/dist/rbac/catalog.js.map +1 -1
  530. package/dist/subscription-billing/index.d.ts +8 -5
  531. package/dist/subscription-billing/index.d.ts.map +1 -1
  532. package/dist/subscription-billing/index.js +4 -3
  533. package/dist/subscription-billing/index.js.map +1 -1
  534. package/dist/subscription-billing/platform-exemption.d.ts +89 -0
  535. package/dist/subscription-billing/platform-exemption.d.ts.map +1 -0
  536. package/dist/subscription-billing/platform-exemption.js +113 -0
  537. package/dist/subscription-billing/platform-exemption.js.map +1 -0
  538. package/dist/subscription-billing/service.d.ts +74 -0
  539. package/dist/subscription-billing/service.d.ts.map +1 -1
  540. package/dist/subscription-billing/service.js +182 -16
  541. package/dist/subscription-billing/service.js.map +1 -1
  542. package/dist/tenancy/features.d.ts +69 -0
  543. package/dist/tenancy/features.d.ts.map +1 -0
  544. package/dist/tenancy/features.js +123 -0
  545. package/dist/tenancy/features.js.map +1 -0
  546. package/dist/tenancy/settings.d.ts +63 -0
  547. package/dist/tenancy/settings.d.ts.map +1 -0
  548. package/dist/tenancy/settings.js +218 -0
  549. package/dist/tenancy/settings.js.map +1 -0
  550. package/dist/users/repository.d.ts +16 -1
  551. package/dist/users/repository.d.ts.map +1 -1
  552. package/dist/users/repository.js +24 -1
  553. package/dist/users/repository.js.map +1 -1
  554. package/dist/vault/repository.d.ts +69 -1
  555. package/dist/vault/repository.d.ts.map +1 -1
  556. package/dist/vault/repository.js +88 -5
  557. package/dist/vault/repository.js.map +1 -1
  558. package/package.json +10 -2
  559. package/src/db/migrations/0045_role_write_scope.sql +122 -0
  560. package/src/db/migrations/0046_pilot_activation_model.sql +184 -0
  561. package/src/db/migrations/0047_recipient_clearance.sql +89 -0
  562. package/src/db/migrations/0048_item_type_note.sql +16 -0
  563. package/src/db/migrations/0049_national_fiscal_engine.sql +279 -0
  564. package/src/db/migrations/0050_fiscal_vocabulary_readonly.sql +29 -0
  565. package/src/db/migrations/0051_seed_rules_from_catalog.sql +72 -0
  566. package/src/db/migrations/0052_fiscal_rule_delete_scope.sql +57 -0
  567. package/src/db/migrations/0053_rule_validity_lower_bound.sql +44 -0
  568. package/src/db/migrations/0054_tenant_profile_and_rule_source.sql +89 -0
  569. package/src/db/migrations/0055_job_capability_contract.sql +300 -0
  570. package/src/db/migrations/0056_fiscal_document_ingestion.sql +337 -0
  571. package/src/db/migrations/0057_fiscal_pending_event_inbox.sql +228 -0
  572. package/src/db/migrations/0058_fiscal_operational_engine.sql +516 -0
  573. package/src/db/migrations/0059_fiscal_contract_version.sql +59 -0
  574. package/src/db/migrations/0060_fiscal_credential_vault_and_run_authorization.sql +321 -0
  575. package/src/db/migrations/0061_client_official_registry_provenance.sql +193 -0
  576. package/src/db/migrations/0062_first_contact_and_capability_truth.sql +119 -0
@@ -0,0 +1,411 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.KNOWN_JOBS = exports.FISCAL_SYNC_JOB = exports.SAAS_BILLING_JOB = exports.COLLECTION_CYCLE_JOB = exports.TEMPORARY_BACKOFF_MS = exports.JOB_CONTRACT_VERSION = void 0;
4
+ exports.probePlatformCapabilities = probePlatformCapabilities;
5
+ exports.evaluateJobReadiness = evaluateJobReadiness;
6
+ exports.runGuardedJob = runGuardedJob;
7
+ exports.recordJobRun = recordJobRun;
8
+ exports.recordJobRunBestEffort = recordJobRunBestEffort;
9
+ const shared_1 = require("@baruk/shared");
10
+ const context_js_1 = require("../db/context.js");
11
+ /**
12
+ * O contrato de capacidade entre um WORKER e o schema que ele opera.
13
+ *
14
+ * ## O que isto fecha, e por que não bastava o contrato HTTP
15
+ *
16
+ * `platform/capabilities.ts` protege a superfície HTTP: a tela pergunta à API
17
+ * se aquele build sabe responder o que ela vai pedir. Um cron não tem tela e
18
+ * não fala com a API — ele fala com o BANCO. A contraparte é outra, então o
19
+ * contrato é outro, e o registro vive no próprio banco (migration 0055).
20
+ *
21
+ * A janela é real e não é hipótese: os crons publicam na Render como serviços
22
+ * SEPARADOS do serviço web, e as migrations rodam no `preDeployCommand` do
23
+ * serviço web. A ordem entre "a imagem nova do cron subiu" e "o schema novo foi
24
+ * aplicado" não é garantida por nada.
25
+ *
26
+ * ## Cinco estados, não dois
27
+ *
28
+ * A primeira forma óbvia disto seria um booleano `podeRodar`. Ela colapsa dois
29
+ * problemas que exigem tratamentos opostos:
30
+ *
31
+ * `READY` compatível — executa.
32
+ * `INCOMPATIBLE` o schema é anterior ao que este worker exige.
33
+ * Fecha, e **não** merece retry: nenhuma
34
+ * quantidade de tentativas aplica uma migration.
35
+ * `TEMPORARILY_UNAVAILABLE` não deu para perguntar (banco fora, timeout).
36
+ * Fecha também — mas com backoff, porque volta
37
+ * sozinho.
38
+ * `DISABLED` desligado por configuração do processo.
39
+ * `BLOCKED_BY_TENANT_CONFIG` o escritório não habilitou.
40
+ *
41
+ * A distinção entre os dois primeiros bloqueios é a mesma que o contrato HTTP
42
+ * já paga: lá, tratar timeout como "não suportado" faria a tela mentir sobre um
43
+ * deploy antigo toda vez que a API hibernasse. Aqui, tratar banco fora como
44
+ * incompatível faria o cron desistir de um dia inteiro por uma queda de rede de
45
+ * trinta segundos — e tratar incompatível como indisponível faria ele martelar
46
+ * um schema que não vai mudar sozinho.
47
+ *
48
+ * ## Fail-closed é sobre VERSÃO
49
+ *
50
+ * Quando não é `READY`, nada é escrito: zero mutação, cursor intocado, nenhum
51
+ * item marcado como processado. E o bloqueio é REGISTRADO (`job_run`) — um job
52
+ * que para em silêncio é indistinguível de um job que rodou e não achou nada.
53
+ *
54
+ * A garantia não depende deste arquivo: `job_run` tem CHECK que torna
55
+ * ingravável um run bloqueado com mutação ou cursor avançado. O TypeScript
56
+ * ordena; o banco garante.
57
+ */
58
+ /** Versão do FORMATO do registro. Ver `platform_capability.contract_version`. */
59
+ exports.JOB_CONTRACT_VERSION = 1;
60
+ /**
61
+ * Backoff do que volta sozinho.
62
+ *
63
+ * Cinco minutos: longo o bastante para uma reinicialização de banco caber
64
+ * dentro, curto o bastante para o ciclo diário ainda sair no mesmo dia.
65
+ */
66
+ exports.TEMPORARY_BACKOFF_MS = 5 * 60_000;
67
+ /**
68
+ * Códigos do PostgreSQL que significam "este schema é anterior ao worker".
69
+ *
70
+ * `42P01` tabela inexistente, `42703` coluna inexistente, `42883` função
71
+ * inexistente. São afirmações do servidor sobre o que ele TEM — não sobre a
72
+ * rede —, e é exatamente essa a fronteira entre `absent` e `unknown`.
73
+ */
74
+ const OLD_SCHEMA_SQLSTATES = new Set(['42P01', '42703', '42883']);
75
+ /**
76
+ * Lê o registro de capacidades do schema. Nunca lança; classifica a falha.
77
+ *
78
+ * A classificação é o ponto inteiro da função. Um `catch` que devolvesse
79
+ * "incompatível" para qualquer erro transformaria toda queda de rede em uma
80
+ * afirmação falsa sobre a versão do schema — o mesmo defeito que quase entrou
81
+ * em produção no contrato HTTP.
82
+ */
83
+ async function probePlatformCapabilities(tx) {
84
+ let rows;
85
+ try {
86
+ rows = await tx `
87
+ SELECT key, contract_version FROM platform_capability ORDER BY key
88
+ `;
89
+ }
90
+ catch (err) {
91
+ const code = err?.code;
92
+ if (code && OLD_SCHEMA_SQLSTATES.has(code)) {
93
+ // A tabela não existe: este banco é anterior à 0055. É a assinatura
94
+ // exata do schema velho, e o caso inteiro pelo qual isto existe.
95
+ return { status: 'absent', detail: `registro ausente no schema (sqlstate ${code})` };
96
+ }
97
+ // Conexão recusada, timeout, permissão momentaneamente negada: nada disto
98
+ // informa a VERSÃO do schema.
99
+ return { status: 'unknown', detail: `consulta falhou (sqlstate ${code ?? 'desconhecido'})` };
100
+ }
101
+ if (rows.length === 0) {
102
+ // Tabela existe e está vazia. Um schema que não declara nada não pode
103
+ // satisfazer exigência nenhuma — e "vazio" não é "tudo permitido".
104
+ return { status: 'absent', detail: 'registro de capacidades vazio' };
105
+ }
106
+ // Versões de contrato divergentes na mesma tabela seriam um registro que não
107
+ // se sabe ler inteiro. Fecha, em vez de escolher uma.
108
+ const versions = new Set(rows.map((r) => r.contract_version));
109
+ if (versions.size > 1) {
110
+ return { status: 'absent', detail: 'registro com versões de contrato divergentes' };
111
+ }
112
+ return {
113
+ status: 'declared',
114
+ contract: rows[0].contract_version,
115
+ capabilities: rows.map((r) => r.key),
116
+ };
117
+ }
118
+ /**
119
+ * A sondagem satisfaz o que este worker exige?
120
+ *
121
+ * Função pura: recebe a sondagem já feita e devolve a decisão. É essa separação
122
+ * que permite fixar o contrato para o lote inteiro (ver `runGuardedJob`) — a
123
+ * decisão de cada item usa a MESMA sondagem, não uma nova.
124
+ */
125
+ function evaluateJobReadiness(def, probe, opts = {}) {
126
+ const blocked = (readiness, detail, extra = {}) => ({
127
+ readiness,
128
+ canMutate: false,
129
+ retryable: readiness === 'TEMPORARILY_UNAVAILABLE',
130
+ backoffMs: readiness === 'TEMPORARILY_UNAVAILABLE' ? exports.TEMPORARY_BACKOFF_MS : null,
131
+ contractVersion: null,
132
+ observed: [],
133
+ missing: [],
134
+ detail,
135
+ ...extra,
136
+ });
137
+ // Desligado pelo processo vem primeiro: não faz sentido perguntar ao banco se
138
+ // um worker desligado é compatível, e a resposta não mudaria nada.
139
+ if (opts.disabled)
140
+ return blocked('DISABLED', 'worker desligado por configuração');
141
+ if (def.requires.length === 0) {
142
+ // Erro de programação, tratado como bloqueio e não como exceção: um worker
143
+ // mal declarado não pode virar um worker sem portão.
144
+ return blocked('INCOMPATIBLE', `job "${def.name}" não declara capacidade exigida`);
145
+ }
146
+ if (probe.status === 'unknown')
147
+ return blocked('TEMPORARILY_UNAVAILABLE', probe.detail);
148
+ if (probe.status === 'absent') {
149
+ return blocked('INCOMPATIBLE', probe.detail, { missing: [...def.requires] });
150
+ }
151
+ if (probe.contract < def.minContractVersion) {
152
+ return blocked('INCOMPATIBLE', `contrato ${probe.contract} anterior ao mínimo ${def.minContractVersion}`, { contractVersion: probe.contract, observed: probe.capabilities, missing: [...def.requires] });
153
+ }
154
+ if (probe.contract > exports.JOB_CONTRACT_VERSION) {
155
+ // Schema mais novo do que este worker sabe ler. Simétrico ao caso acima, e
156
+ // igualmente fechado: reinterpretar um formato desconhecido é como um
157
+ // worker velho corrompe dado novo.
158
+ return blocked('INCOMPATIBLE', `contrato ${probe.contract} posterior ao que este worker lê (${exports.JOB_CONTRACT_VERSION})`, { contractVersion: probe.contract, observed: probe.capabilities });
159
+ }
160
+ // Continência de conjunto, não igualdade: o schema pode declarar MAIS do que
161
+ // este worker exige, e é isso que torna `worker velho + schema novo` seguro.
162
+ const missing = def.requires.filter((k) => !probe.capabilities.includes(k));
163
+ if (missing.length > 0) {
164
+ return blocked('INCOMPATIBLE', `capacidade ausente: ${missing.join(', ')}`, {
165
+ contractVersion: probe.contract,
166
+ observed: probe.capabilities,
167
+ missing,
168
+ });
169
+ }
170
+ // O bloqueio por configuração do escritório vem por ÚLTIMO, depois de a
171
+ // compatibilidade estar provada: assim o registro distingue "o schema não
172
+ // serve" de "este escritório não quis", que são conversas diferentes.
173
+ if (opts.tenantBlocked) {
174
+ return blocked('BLOCKED_BY_TENANT_CONFIG', opts.tenantBlocked, {
175
+ contractVersion: probe.contract,
176
+ observed: probe.capabilities,
177
+ });
178
+ }
179
+ return {
180
+ readiness: 'READY',
181
+ canMutate: true,
182
+ retryable: false,
183
+ backoffMs: null,
184
+ contractVersion: probe.contract,
185
+ observed: probe.capabilities,
186
+ missing: [],
187
+ detail: 'compatível',
188
+ };
189
+ }
190
+ /**
191
+ * Executa `handler` sob o portão, dentro do contexto de tenant.
192
+ *
193
+ * A ordem importa e é o mecanismo inteiro:
194
+ *
195
+ * 1. sonda (ou usa a sondagem fixada) e decide — ANTES de qualquer escrita;
196
+ * 2. se não for `READY`, grava o `job_run` bloqueado e RETORNA. O handler não
197
+ * é chamado, então não existe caminho pelo qual ele mute;
198
+ * 3. se for `READY`, lê o cursor, chama o handler, e só então grava o run e
199
+ * avança o cursor.
200
+ *
201
+ * Cursor e run são gravados na MESMA transação do handler: um lote que estourou
202
+ * no meio não deixa cursor avançado, porque o rollback leva os dois junto.
203
+ */
204
+ async function runGuardedJob(db, tenantId, def, handler, opts = {}) {
205
+ const probe = opts.probe ?? (await (0, context_js_1.withContext)(db, { tenantId }, (tx) => probePlatformCapabilities(tx)));
206
+ const decision = evaluateJobReadiness(def, probe, {
207
+ disabled: opts.disabled,
208
+ tenantBlocked: opts.tenantBlocked,
209
+ });
210
+ if (!decision.canMutate) {
211
+ const record = await (0, context_js_1.withContext)(db, { tenantId }, (tx) => recordJobRun(tx, tenantId, def, decision, {
212
+ status: 'blocked',
213
+ mutations: 0,
214
+ cursorAdvanced: false,
215
+ }));
216
+ return { record, result: null, decision };
217
+ }
218
+ let mutations = 0;
219
+ let nextCursor = null;
220
+ try {
221
+ return await (0, context_js_1.withContext)(db, { tenantId }, async (tx) => {
222
+ const [cur] = await tx `
223
+ SELECT position, contract_version FROM job_cursor WHERE job_name = ${def.name}
224
+ `;
225
+ if (cur && cur.contract_version > exports.JOB_CONTRACT_VERSION) {
226
+ // Cursor gravado sob contrato que este worker não sabe ler. Reinterpretar
227
+ // a posição com outra semântica é pior do que não andar.
228
+ const stale = evaluateJobReadiness(def, {
229
+ status: 'absent',
230
+ detail: `cursor gravado sob contrato ${cur.contract_version}, posterior a ${exports.JOB_CONTRACT_VERSION}`,
231
+ });
232
+ const record = await recordJobRun(tx, tenantId, def, stale, {
233
+ status: 'blocked',
234
+ mutations: 0,
235
+ cursorAdvanced: false,
236
+ });
237
+ return { record, result: null, decision: stale };
238
+ }
239
+ const ctx = {
240
+ decision,
241
+ cursor: cur?.position ?? null,
242
+ recordMutation: (n = 1) => {
243
+ mutations += n;
244
+ },
245
+ advanceCursorTo: (position) => {
246
+ nextCursor = position;
247
+ },
248
+ };
249
+ const result = await handler(tx, ctx);
250
+ if (nextCursor !== null) {
251
+ await tx `
252
+ INSERT INTO job_cursor (id, tenant_id, job_name, position, contract_version, updated_at)
253
+ VALUES (${(0, shared_1.uuidv7)()}, ${tenantId}, ${def.name}, ${nextCursor},
254
+ ${decision.contractVersion ?? exports.JOB_CONTRACT_VERSION}, now())
255
+ ON CONFLICT (tenant_id, job_name)
256
+ DO UPDATE SET position = EXCLUDED.position,
257
+ contract_version = EXCLUDED.contract_version,
258
+ updated_at = now()
259
+ `;
260
+ }
261
+ const record = await recordJobRun(tx, tenantId, def, decision, {
262
+ status: 'completed',
263
+ mutations,
264
+ cursorAdvanced: nextCursor !== null,
265
+ });
266
+ return { record, result, decision };
267
+ });
268
+ }
269
+ catch (err) {
270
+ // O lote falhou: a transação já reverteu mutação e cursor. O registro da
271
+ // falha vai em transação NOVA, senão ele voltaria junto e a falha ficaria
272
+ // invisível — que é o modo de falha que esta tabela existe para eliminar.
273
+ //
274
+ // E se o próprio registro falhar (banco fora, que é uma causa provável do
275
+ // erro original), o erro ORIGINAL é o que sobe. Trocá-lo pelo erro de
276
+ // gravar a trilha esconderia a causa atrás do sintoma.
277
+ let record;
278
+ try {
279
+ record = await (0, context_js_1.withContext)(db, { tenantId }, (tx) => recordJobRun(tx, tenantId, def, { ...decision, detail: describeFailure(err) }, { status: 'failed', mutations: 0, cursorAdvanced: false }));
280
+ }
281
+ catch {
282
+ throw err;
283
+ }
284
+ return { record, result: null, decision };
285
+ }
286
+ }
287
+ /** Mensagem de falha sem PII e sem segredo: só a classe e o sqlstate. */
288
+ function describeFailure(err) {
289
+ const code = err?.code;
290
+ const name = err instanceof Error ? err.name : 'erro';
291
+ return code ? `${name} (sqlstate ${code})` : name;
292
+ }
293
+ /**
294
+ * Grava o desfecho de um run.
295
+ *
296
+ * Público porque os dois crons existentes não são baseados em cursor — eles são
297
+ * idempotentes por índice único e rodam duas transações por tenant de
298
+ * propósito. Forçá-los para dentro de `runGuardedJob` colapsaria essas duas
299
+ * transações em uma, e um erro na régua passaria a desfazer recebíveis
300
+ * legitimamente gerados. Eles usam o mesmo portão e a mesma trilha; o que não
301
+ * usam é o cursor, que não têm.
302
+ */
303
+ async function recordJobRun(tx, tenantId, def, decision, outcome) {
304
+ const id = (0, shared_1.uuidv7)();
305
+ await tx `
306
+ INSERT INTO job_run (
307
+ id, tenant_id, job_name, job_version, readiness, status, contract_version,
308
+ required_capabilities, observed_capabilities, missing_capabilities,
309
+ mutations, cursor_advanced, detail, finished_at
310
+ ) VALUES (
311
+ ${id}, ${tenantId}, ${def.name}, ${def.version}, ${decision.readiness}, ${outcome.status},
312
+ ${decision.contractVersion}, ${[...def.requires]}, ${[...decision.observed]},
313
+ ${[...decision.missing]}, ${outcome.mutations}, ${outcome.cursorAdvanced},
314
+ ${decision.detail}, now()
315
+ )
316
+ `;
317
+ return {
318
+ id,
319
+ readiness: decision.readiness,
320
+ status: outcome.status,
321
+ mutations: outcome.mutations,
322
+ cursorAdvanced: outcome.cursorAdvanced,
323
+ detail: decision.detail,
324
+ };
325
+ }
326
+ /**
327
+ * Grava a trilha tolerando a ausência da própria tabela.
328
+ *
329
+ * O caso é específico e derrubaria produção: quando o bloqueio é `INCOMPATIBLE`
330
+ * porque o schema é anterior à 0055, **`job_run` também não existe** — as duas
331
+ * tabelas nascem na mesma migration. Um `recordJobRun` direto estouraria para
332
+ * cada tenant e o cron sairia com código 1, transformando um bloqueio correto
333
+ * e silencioso num alarme de infraestrutura.
334
+ *
335
+ * A trilha é observabilidade, não a garantia. A garantia é o handler não ser
336
+ * chamado, e ela já valeu antes desta linha. Quando a trilha não cabe no
337
+ * schema, o log carrega o motivo — e ele é o mesmo.
338
+ *
339
+ * Devolve `true` se gravou. Só engole falha de SCHEMA (`42P01`/`42703`): erro
340
+ * de permissão ou de restrição é defeito nosso e tem de subir.
341
+ */
342
+ async function recordJobRunBestEffort(db, tenantId, def, decision, outcome) {
343
+ try {
344
+ await (0, context_js_1.withContext)(db, { tenantId }, (tx) => recordJobRun(tx, tenantId, def, decision, outcome));
345
+ return true;
346
+ }
347
+ catch (err) {
348
+ const code = err?.code;
349
+ if (code && OLD_SCHEMA_SQLSTATES.has(code))
350
+ return false;
351
+ throw err;
352
+ }
353
+ }
354
+ /**
355
+ * Os workers deste produto.
356
+ *
357
+ * Declarados aqui, e não junto de cada entrypoint, para que a lista seja
358
+ * enumerável — é ela que o inventário do gate confere contra o `render.yaml`.
359
+ */
360
+ exports.COLLECTION_CYCLE_JOB = {
361
+ name: 'collection-cycle',
362
+ version: 1,
363
+ requires: ['office.collection-cycle.v1'],
364
+ minContractVersion: 1,
365
+ };
366
+ exports.SAAS_BILLING_JOB = {
367
+ name: 'saas-billing-cycle',
368
+ version: 1,
369
+ requires: ['office.saas-billing-cycle.v1'],
370
+ minContractVersion: 1,
371
+ };
372
+ /**
373
+ * O worker fiscal (Onda B · Fase 2).
374
+ *
375
+ * Exige DUAS capacidades, e a segunda é o ponto: `office.fiscal-ingestion.v1`
376
+ * (0056) descreve onde o documento cabe; `office.fiscal-sync-worker.v1` (0058)
377
+ * descreve o que o worker precisa para OPERAR — lease, política, disjuntor,
378
+ * fila humana, cobertura.
379
+ *
380
+ * Separá-las importa numa janela concreta: um banco que já tem a 0056 e ainda
381
+ * não tem a 0058 sabe guardar documento e NÃO sabe travar a vez. Um worker que
382
+ * exigisse só a primeira rodaria ali, sem exclusão mútua, e duas execuções
383
+ * simultâneas consultariam o mesmo CNPJ contra a Receita.
384
+ */
385
+ exports.FISCAL_SYNC_JOB = {
386
+ name: 'fiscal-sync',
387
+ // `version: 2` porque o worker passou a GRAVAR `fiscal_sync_run.contract_version`
388
+ // (migration 0059). Um worker desta versão contra um banco anterior falharia no
389
+ // `INSERT` — depois do lease tomado e possivelmente depois da requisição ao
390
+ // provedor, isto é, com o consumo já gasto e o cursor parado. O pior lugar
391
+ // possível para descobrir uma incompatibilidade de schema.
392
+ version: 2,
393
+ // `office.fiscal-contract-version.v1` é a exigência NOVA, e ela é uma CHAVE —
394
+ // não um `minContractVersion` maior. `contract_version` é a versão do formato
395
+ // do registro e é global: a sondagem recusa a tabela inteira se as linhas
396
+ // divergirem, de modo que subir a versão por causa de uma coluna do motor
397
+ // fiscal derrubaria também cobrança e faturamento. Capacidade se compara por
398
+ // continência; é essa a dimensão em que esta mudança acontece.
399
+ requires: [
400
+ 'office.fiscal-ingestion.v1',
401
+ 'office.fiscal-sync-worker.v1',
402
+ 'office.fiscal-contract-version.v1',
403
+ ],
404
+ minContractVersion: 1,
405
+ };
406
+ exports.KNOWN_JOBS = [
407
+ exports.COLLECTION_CYCLE_JOB,
408
+ exports.SAAS_BILLING_JOB,
409
+ exports.FISCAL_SYNC_JOB,
410
+ ];
411
+ //# sourceMappingURL=job-contract.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"job-contract.js","sourceRoot":"","sources":["../../../src/platform/job-contract.ts"],"names":[],"mappings":";;;AA0HA,8DAoCC;AASD,oDAqFC;AAiDD,sCAuGC;AAmBD,oCAgCC;AAkBD,wDAmBC;AA5eD,0CAAuC;AAEvC,iDAA+C;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,iFAAiF;AACpE,QAAA,oBAAoB,GAAG,CAAC,CAAC;AA4CtC;;;;;GAKG;AACU,QAAA,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAElE;;;;;;;GAOG;AACI,KAAK,UAAU,yBAAyB,CAAC,EAAW;IACzD,IAAI,IAAiD,CAAC;IACtD,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAA6C;;KAE3D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAC;QACrD,IAAI,IAAI,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,oEAAoE;YACpE,iEAAiE;YACjE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wCAAwC,IAAI,GAAG,EAAE,CAAC;QACvF,CAAC;QACD,0EAA0E;QAC1E,8BAA8B;QAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,IAAI,IAAI,cAAc,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,sEAAsE;QACtE,mEAAmE;QACnE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IACtF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,gBAAgB;QACnC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAClC,GAAkB,EAClB,KAA8B,EAC9B,OAA8D,EAAE;IAEhE,MAAM,OAAO,GAAG,CACd,SAAyC,EACzC,MAAc,EACd,QAA8B,EAAE,EACnB,EAAE,CAAC,CAAC;QACjB,SAAS;QACT,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,SAAS,KAAK,yBAAyB;QAClD,SAAS,EAAE,SAAS,KAAK,yBAAyB,CAAC,CAAC,CAAC,4BAAoB,CAAC,CAAC,CAAC,IAAI;QAChF,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,MAAM;QACN,GAAG,KAAK;KACT,CAAC,CAAC;IAEH,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;IAEnF,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,2EAA2E;QAC3E,qDAAqD;QACrD,OAAO,OAAO,CAAC,cAAc,EAAE,QAAQ,GAAG,CAAC,IAAI,kCAAkC,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,yBAAyB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC5C,OAAO,OAAO,CACZ,cAAc,EACd,YAAY,KAAK,CAAC,QAAQ,uBAAuB,GAAG,CAAC,kBAAkB,EAAE,EACzE,EAAE,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,GAAG,4BAAoB,EAAE,CAAC;QAC1C,2EAA2E;QAC3E,sEAAsE;QACtE,mCAAmC;QACnC,OAAO,OAAO,CACZ,cAAc,EACd,YAAY,KAAK,CAAC,QAAQ,qCAAqC,4BAAoB,GAAG,EACtF,EAAE,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,cAAc,EAAE,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YAC1E,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,KAAK,CAAC,YAAY;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC,aAAa,EAAE;YAC7D,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,KAAK,CAAC,YAAY;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO;QAClB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,KAAK,CAAC,QAAQ;QAC/B,QAAQ,EAAE,KAAK,CAAC,YAAY;QAC5B,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,YAAY;KACrB,CAAC;AACJ,CAAC;AAmCD;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,QAAgB,EAChB,GAAkB,EAClB,OAAuD,EACvD,OAA0B,EAAE;IAE5B,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAA,wBAAW,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE;QAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAW,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CACxD,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;YACxC,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,KAAK;SACtB,CAAC,CACH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,wBAAW,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAkD;6EACD,GAAG,CAAC,IAAI;OAC9E,CAAC;YACF,IAAI,GAAG,IAAI,GAAG,CAAC,gBAAgB,GAAG,4BAAoB,EAAE,CAAC;gBACvD,0EAA0E;gBAC1E,yDAAyD;gBACzD,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE;oBACtC,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,+BAA+B,GAAG,CAAC,gBAAgB,iBAAiB,4BAAoB,EAAE;iBACnG,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE;oBAC1D,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,cAAc,EAAE,KAAK;iBACtB,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC;YAED,MAAM,GAAG,GAAsB;gBAC7B,QAAQ;gBACR,MAAM,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;gBAC7B,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;oBACxB,SAAS,IAAI,CAAC,CAAC;gBACjB,CAAC;gBACD,eAAe,EAAE,CAAC,QAAgB,EAAE,EAAE;oBACpC,UAAU,GAAG,QAAQ,CAAC;gBACxB,CAAC;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAEtC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,EAAE,CAAA;;oBAEI,IAAA,eAAM,GAAE,KAAK,QAAQ,KAAK,GAAG,CAAC,IAAI,KAAK,UAAU;oBACjD,QAAQ,CAAC,eAAe,IAAI,4BAAoB;;;;;SAK3D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;gBAC7D,MAAM,EAAE,WAAW;gBACnB,SAAS;gBACT,cAAc,EAAE,UAAU,KAAK,IAAI;aACpC,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,sEAAsE;QACtE,uDAAuD;QACvD,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,wBAAW,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAClD,YAAY,CACV,EAAE,EACF,QAAQ,EACR,GAAG,EACH,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,EAC7C,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAC1D,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,YAAY,CAChC,EAAM,EACN,QAAgB,EAChB,GAAkB,EAClB,QAAqB,EACrB,OAIC;IAED,MAAM,EAAE,GAAG,IAAA,eAAM,GAAE,CAAC;IACpB,MAAM,EAAE,CAAA;;;;;;QAMF,EAAE,KAAK,QAAQ,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM;QACtF,QAAQ,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACzE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,cAAc;QACtE,QAAQ,CAAC,MAAM;;GAEpB,CAAC;IACF,OAAO;QACL,EAAE;QACF,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,sBAAsB,CAC1C,EAAM,EACN,QAAgB,EAChB,GAAkB,EAClB,QAAqB,EACrB,OAIC;IAED,IAAI,CAAC;QACH,MAAM,IAAA,wBAAW,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAC;QACrD,IAAI,IAAI,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,oBAAoB,GAAkB;IACjD,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC,4BAA4B,CAAC;IACxC,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEW,QAAA,gBAAgB,GAAkB;IAC7C,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC,8BAA8B,CAAC;IAC1C,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACU,QAAA,eAAe,GAAkB;IAC5C,IAAI,EAAE,aAAa;IACnB,kFAAkF;IAClF,gFAAgF;IAChF,4EAA4E;IAC5E,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,EAAE,CAAC;IACV,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,+DAA+D;IAC/D,QAAQ,EAAE;QACR,4BAA4B;QAC5B,8BAA8B;QAC9B,mCAAmC;KACpC;IACD,kBAAkB,EAAE,CAAC;CACtB,CAAC;AAEW,QAAA,UAAU,GAA6B;IAClD,4BAAoB;IACpB,wBAAgB;IAChB,uBAAe;CAChB,CAAC"}
@@ -276,6 +276,49 @@ exports.PERMISSIONS = [
276
276
  action: 'write',
277
277
  description: 'Gerenciar obrigações, certificados e procurações',
278
278
  },
279
+ /*
280
+ * ═══ Credenciais fiscais: três permissões, e a separação é o ponto ═══════
281
+ *
282
+ * `compliance.write` já existia e cobria "gerenciar certificados" — mas ela
283
+ * cobria o CADASTRO de metadados, numa época em que o produto não tinha como
284
+ * receber material criptográfico. Reutilizá-la para o upload daria a todo
285
+ * contador do escritório a capacidade de custodiar a chave privada de um
286
+ * cliente, e é uma capacidade diferente da de anotar um vencimento.
287
+ *
288
+ * A separação que mais importa é a última: quem CADASTRA a credencial não é
289
+ * necessariamente quem AUTORIZA uma consulta real ao ambiente oficial em nome
290
+ * de um contribuinte. A primeira é operação de escritório; a segunda tem
291
+ * consequência sobre um terceiro — no limite, o CNPJ dele bloqueado — e por
292
+ * isso nasce só no Owner.
293
+ */
294
+ {
295
+ key: 'fiscal.credential.read',
296
+ resource: 'fiscal.credential',
297
+ action: 'read',
298
+ description: 'Ver metadados de credenciais fiscais (nunca o segredo)',
299
+ },
300
+ {
301
+ key: 'fiscal.credential.write',
302
+ resource: 'fiscal.credential',
303
+ action: 'write',
304
+ description: 'Enviar, substituir e revogar credencial fiscal de cliente',
305
+ },
306
+ {
307
+ key: 'fiscal.run.authorize',
308
+ resource: 'fiscal.run',
309
+ action: 'manage',
310
+ description: 'Autorizar uma consulta real e única a ambiente fiscal oficial',
311
+ },
312
+ {
313
+ // Separada de `fiscal.run.authorize` de propósito, e a diferença é de grau,
314
+ // não de tipo: autorizar uma consulta é gastar o certificado de um terceiro
315
+ // uma vez; DECLARAR que o escritório opera automação fiscal em produção é
316
+ // atravessar a fronteira entre ensaio e operação real, para toda a carteira.
317
+ key: 'fiscal.enrollment.manage',
318
+ resource: 'fiscal.enrollment',
319
+ action: 'manage',
320
+ description: 'Habilitar automação fiscal do escritório e matricular clientes',
321
+ },
279
322
  {
280
323
  key: 'office.onboarding.read',
281
324
  resource: 'office.onboarding',
@@ -399,6 +442,11 @@ exports.SYSTEM_ROLES = [
399
442
  'billing.fee.manage',
400
443
  'compliance.read',
401
444
  'compliance.write',
445
+ 'fiscal.credential.read',
446
+ 'fiscal.credential.write',
447
+ // `fiscal.run.authorize` NÃO entra aqui: autorizar uma consulta real ao
448
+ // ambiente oficial usa o certificado do CLIENTE contra a Receita, e o
449
+ // custo de um erro recai sobre o CNPJ dele. Fica com o Owner.
402
450
  'office.onboarding.read',
403
451
  'office.onboarding.create',
404
452
  'office.onboarding.manage',
@@ -428,6 +476,7 @@ exports.SYSTEM_ROLES = [
428
476
  'crm.read',
429
477
  'billing.read',
430
478
  'compliance.read',
479
+ 'fiscal.credential.read',
431
480
  'communication.read',
432
481
  'office.onboarding.read',
433
482
  'office.onboarding.timeline.read',
@@ -489,6 +538,67 @@ exports.SYSTEM_ROLES = [
489
538
  'office.onboarding.timeline.read',
490
539
  ],
491
540
  },
541
+ /**
542
+ * Automação de teste ponta a ponta — infraestrutura de QA, não pessoa.
543
+ *
544
+ * ## Por que existe um papel só para isto
545
+ *
546
+ * Validar a interface em produção por automação exige uma identidade que
547
+ * entre. A conta pessoal do titular não serve: a trilha passaria a atribuir a
548
+ * ele atos que não praticou, e a senha teria de circular. Um papel existente
549
+ * também não serve — `finance`, o mais próximo, carrega `communication.send`
550
+ * e `finance.charge.create`, e uma automação que pode escrever para cliente ou
551
+ * emitir cobrança é uma automação capaz de causar dano fora do teste.
552
+ *
553
+ * ## As cinco permissões, e por que exatamente estas
554
+ *
555
+ * São o mínimo para o que a automação precisa VER e a única coisa que precisa
556
+ * MUDAR: ler carteira e painel, ler financeiro, cancelar um recebível, e ler a
557
+ * própria trilha para conferir que o ato ficou registrado.
558
+ *
559
+ * `fiscal.credential.read` entrou na C1-R1-PROD, por uma razão específica: a
560
+ * validação de produção precisava provar que o acesso a Credenciais fiscais é
561
+ * ALCANÇÁVEL a partir da ficha do cliente — e o defeito que a C1-R1 corrigiu
562
+ * era exatamente esse link ficar fora da tela. Sem a permissão, a automação
563
+ * abria a ficha e não via o link; o teste passava medindo a ausência causada
564
+ * pelo próprio RBAC, e não o layout. Verde que não mede.
565
+ *
566
+ * **É leitura de METADATA, e isso é propriedade do banco, não promessa.** As
567
+ * rotas que a exigem devolvem `CERTIFICATE_COLUMNS` — impressão digital,
568
+ * titular, emissor, validade — e nenhuma coluna de material. O material do
569
+ * certificado é `exposure = 'write_only'` por CHECK da 0060, e `revealSecret`
570
+ * o recusa até para quem tivesse `vault.credential.decrypt`, que este papel
571
+ * não tem.
572
+ *
573
+ * **E é permanente, deliberadamente.** Uma concessão revogada ao fim de cada
574
+ * gate deixaria o gate seguinte cego para a mesma superfície, e voltaríamos ao
575
+ * verde que não mede. Ela fica aqui, no catálogo versionado, para ser revista
576
+ * em revisão de código como qualquer outra — e não num INSERT manual feito em
577
+ * produção por quem queria passar no teste.
578
+ *
579
+ * ## O que este papel deliberadamente NÃO pode
580
+ *
581
+ * Gerir usuários, ler ou decifrar o cofre, alterar configuração da
582
+ * organização, configurar canal de comunicação, enviar mensagem, emitir
583
+ * cobrança, mexer em honorário ou na régua. Nenhuma delas é necessária para
584
+ * validar tela, e cada uma seria uma forma de a automação sair do teste.
585
+ *
586
+ * Ele é `E2E_TEST_IDENTITY`: infraestrutura de QA, distinta da identidade de
587
+ * serviço do produto — que, essa sim, a auditoria da Fase 11 provou
588
+ * desnecessária, porque nenhum job usa membership.
589
+ */
590
+ {
591
+ key: 'e2e_automation',
592
+ name: 'Automação de teste (E2E)',
593
+ permissions: [
594
+ 'client.read',
595
+ 'billing.read',
596
+ 'billing.write',
597
+ 'audit.read',
598
+ // Metadata de certificado, nunca material. Ver o bloco acima.
599
+ 'fiscal.credential.read',
600
+ ],
601
+ },
492
602
  {
493
603
  key: 'client_titular',
494
604
  name: 'Cliente — Titular',
@@ -1 +1 @@
1
- {"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/rbac/catalog.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AASU,QAAA,WAAW,GAA6B;IACnD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,oCAAoC;KAClD;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,QAAQ,EAAE,wCAAwC;QAClD,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,QAAQ,EAAE,2BAA2B;QACrC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,GAAG,EAAE,gCAAgC;QACrC,QAAQ,EAAE,2BAA2B;QACrC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gDAAgD;KAC9D;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,QAAQ,EAAE,qCAAqC;QAC/C,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gDAAgD;KAC9D;IACD,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE;IACvF;QACE,GAAG,EAAE,cAAc;QACnB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC/F;QACE,GAAG,EAAE,eAAe;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,yBAAyB;KACvC;IACD,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC7F;QACE,GAAG,EAAE,gBAAgB;QACrB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,aAAa;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kCAAkC;KAChD;IACD,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAC7F;QACE,GAAG,EAAE,gBAAgB;QACrB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,qBAAqB;KACnC;IACD,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAChG;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC5F,6EAA6E;IAC7E;QACE,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,+BAA+B;KAC7C;IACD,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACjG;QACE,GAAG,EAAE,cAAc;QACnB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,GAAG,EAAE,eAAe;QACpB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,4EAA4E;QAC5E,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,uDAAuD;QACvD,GAAG,EAAE,qBAAqB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,GAAG,EAAE,aAAa;QAClB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE;;;;;;;;;;WAUG;QACH,GAAG,EAAE,8BAA8B;QACnC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,oDAAoD;KAClE;IACD;QACE;;;;;;;;WAQG;QACH,GAAG,EAAE,6BAA6B;QAClC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,uDAAuD;KACrE;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kDAAkD;KAChE;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,GAAG,EAAE,4BAA4B;QACjC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gDAAgD;KAC9D;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,GAAG,EAAE,oCAAoC;QACzC,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wCAAwC;KACtD;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,oDAAoD;QACzD,QAAQ,EAAE,6CAA6C;QACvD,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,wCAAwC;KACtD;CACF,CAAC;AAEW,QAAA,mBAAmB,GAAsB,mBAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAQpF,MAAM,GAAG,GAAG,2BAAmB,CAAC;AAEhC,mFAAmF;AACtE,QAAA,YAAY,GAAuB;IAC9C,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE;IACjD;QACE,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,wBAAwB,CAAC;KAC/D;IACD;QACE,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE;YACX,aAAa;YACb,cAAc;YACd,eAAe;YACf,eAAe;YACf,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;YACpB,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,8BAA8B;YAC9B,0BAA0B;YAC1B,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,uBAAuB;YACvB,UAAU;YACV,WAAW;YACX,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,wBAAwB;YACxB,0BAA0B;YAC1B,0BAA0B;YAC1B,4BAA4B;YAC5B,0BAA0B;YAC1B,+BAA+B;YAC/B,mCAAmC;YACnC,iCAAiC;YACjC,oCAAoC;YACpC,sCAAsC;YACtC,sCAAsC;YACtC,qCAAqC;YACrC,uCAAuC;YACvC,oDAAoD;YACpD,iBAAiB;SAClB;KACF;IACD;QACE,GAAG,EAAE,WAAW;QAChB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,aAAa;YACb,eAAe;YACf,gBAAgB;YAChB,cAAc;YACd,iBAAiB;YACjB,UAAU;YACV,cAAc;YACd,iBAAiB;YACjB,oBAAoB;YACpB,wBAAwB;YACxB,iCAAiC;YACjC,oCAAoC;YACpC,sCAAsC;YACtC,sCAAsC;YACtC,qCAAqC;YACrC,uCAAuC;YACvC,oDAAoD;SACrD;KACF;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,aAAa;YACb,uBAAuB;YACvB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,wBAAwB;YACxB,oBAAoB;YACpB,oBAAoB;YACpB,oEAAoE;YACpE,sEAAsE;YACtE,uDAAuD;YACvD,8BAA8B;SAC/B;KACF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE;YACX,aAAa;YACb,oBAAoB;YACpB,oBAAoB;YACpB,+BAA+B;YAC/B,8BAA8B;YAC9B,6BAA6B;YAC7B,cAAc;YACd,iBAAiB;YACjB,UAAU;SACX;KACF;IACD;QACE,GAAG,EAAE,UAAU;QACf,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE;YACX,aAAa;YACb,eAAe;YACf,cAAc;YACd,UAAU;YACV,cAAc;YACd,iBAAiB;YACjB,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,wBAAwB;YACxB,iCAAiC;SAClC;KACF;IACD;QACE,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE;YACX,eAAe;YACf,mCAAmC;YACnC,EAAE;YACF,qEAAqE;YACrE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,EAAE;YACF,oEAAoE;YACpE,uEAAuE;YACvE,cAAc;YACd,iBAAiB;YACjB,wBAAwB;YACxB,iCAAiC;YACjC,6CAA6C;YAC7C,mCAAmC;YACnC,iCAAiC;YACjC,kCAAkC;YAClC,gCAAgC;YAChC,6CAA6C;YAC7C,qBAAqB;SACtB;KACF;CACF,CAAC"}
1
+ {"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/rbac/catalog.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AASU,QAAA,WAAW,GAA6B;IACnD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,oCAAoC;KAClD;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,QAAQ,EAAE,wCAAwC;QAClD,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qDAAqD;KACnE;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8CAA8C;KAC5D;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,QAAQ,EAAE,2BAA2B;QACrC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iDAAiD;KAC/D;IACD;QACE,GAAG,EAAE,gCAAgC;QACrC,QAAQ,EAAE,2BAA2B;QACrC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gDAAgD;KAC9D;IACD;QACE,GAAG,EAAE,6CAA6C;QAClD,QAAQ,EAAE,qCAAqC;QAC/C,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gDAAgD;KAC9D;IACD,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE;IACvF;QACE,GAAG,EAAE,cAAc;QACnB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC/F;QACE,GAAG,EAAE,eAAe;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,yBAAyB;KACvC;IACD,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC7F;QACE,GAAG,EAAE,gBAAgB;QACrB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,aAAa;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kCAAkC;KAChD;IACD,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAC7F;QACE,GAAG,EAAE,gBAAgB;QACrB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,qBAAqB;KACnC;IACD,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAChG;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC5F,6EAA6E;IAC7E;QACE,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,+BAA+B;KAC7C;IACD,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACjG;QACE,GAAG,EAAE,cAAc;QACnB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,GAAG,EAAE,eAAe;QACpB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,4EAA4E;QAC5E,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,uDAAuD;QACvD,GAAG,EAAE,qBAAqB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,GAAG,EAAE,YAAY;QACjB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,GAAG,EAAE,aAAa;QAClB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE;;;;;;;;;;WAUG;QACH,GAAG,EAAE,8BAA8B;QACnC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,oDAAoD;KAClE;IACD;QACE;;;;;;;;WAQG;QACH,GAAG,EAAE,6BAA6B;QAClC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,uDAAuD;KACrE;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,GAAG,EAAE,mBAAmB;QACxB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,GAAG,EAAE,kBAAkB;QACvB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,kDAAkD;KAChE;IACD;;;;;;;;;;;;;;OAcG;IACH;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wDAAwD;KACtE;IACD;QACE,GAAG,EAAE,yBAAyB;QAC9B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,2DAA2D;KACzE;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+DAA+D;KAC7E;IACD;QACE,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gEAAgE;KAC9E;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,2BAA2B;KACzC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,GAAG,EAAE,4BAA4B;QACjC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,gDAAgD;KAC9D;IACD;QACE,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,4BAA4B;QACtC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,GAAG,EAAE,oCAAoC;QACzC,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,uCAAuC;KACrD;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,2CAA2C;KACzD;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,wCAAwC;KACtD;IACD;QACE,GAAG,EAAE,uCAAuC;QAC5C,QAAQ,EAAE,+BAA+B;QACzC,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,GAAG,EAAE,oDAAoD;QACzD,QAAQ,EAAE,6CAA6C;QACvD,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,wCAAwC;KACtD;CACF,CAAC;AAEW,QAAA,mBAAmB,GAAsB,mBAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAQpF,MAAM,GAAG,GAAG,2BAAmB,CAAC;AAEhC,mFAAmF;AACtE,QAAA,YAAY,GAAuB;IAC9C,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE;IACjD;QACE,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,wBAAwB,CAAC;KAC/D;IACD;QACE,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE;YACX,aAAa;YACb,cAAc;YACd,eAAe;YACf,eAAe;YACf,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;YACpB,uEAAuE;YACvE,wEAAwE;YACxE,oEAAoE;YACpE,8BAA8B;YAC9B,0BAA0B;YAC1B,YAAY;YACZ,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,uBAAuB;YACvB,UAAU;YACV,WAAW;YACX,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,wBAAwB;YACxB,yBAAyB;YACzB,wEAAwE;YACxE,sEAAsE;YACtE,8DAA8D;YAC9D,wBAAwB;YACxB,0BAA0B;YAC1B,0BAA0B;YAC1B,4BAA4B;YAC5B,0BAA0B;YAC1B,+BAA+B;YAC/B,mCAAmC;YACnC,iCAAiC;YACjC,oCAAoC;YACpC,sCAAsC;YACtC,sCAAsC;YACtC,qCAAqC;YACrC,uCAAuC;YACvC,oDAAoD;YACpD,iBAAiB;SAClB;KACF;IACD;QACE,GAAG,EAAE,WAAW;QAChB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,aAAa;YACb,eAAe;YACf,gBAAgB;YAChB,cAAc;YACd,iBAAiB;YACjB,UAAU;YACV,cAAc;YACd,iBAAiB;YACjB,wBAAwB;YACxB,oBAAoB;YACpB,wBAAwB;YACxB,iCAAiC;YACjC,oCAAoC;YACpC,sCAAsC;YACtC,sCAAsC;YACtC,qCAAqC;YACrC,uCAAuC;YACvC,oDAAoD;SACrD;KACF;IACD;QACE,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,aAAa;YACb,uBAAuB;YACvB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,wBAAwB;YACxB,oBAAoB;YACpB,oBAAoB;YACpB,oEAAoE;YACpE,sEAAsE;YACtE,uDAAuD;YACvD,8BAA8B;SAC/B;KACF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE;YACX,aAAa;YACb,oBAAoB;YACpB,oBAAoB;YACpB,+BAA+B;YAC/B,8BAA8B;YAC9B,6BAA6B;YAC7B,cAAc;YACd,iBAAiB;YACjB,UAAU;SACX;KACF;IACD;QACE,GAAG,EAAE,UAAU;QACf,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE;YACX,aAAa;YACb,eAAe;YACf,cAAc;YACd,UAAU;YACV,cAAc;YACd,iBAAiB;YACjB,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,wBAAwB;YACxB,iCAAiC;SAClC;KACF;IACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgDG;IACH;QACE,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE;YACX,aAAa;YACb,cAAc;YACd,eAAe;YACf,YAAY;YACZ,8DAA8D;YAC9D,wBAAwB;SACzB;KACF;IACD;QACE,GAAG,EAAE,gBAAgB;QACrB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE;YACX,eAAe;YACf,mCAAmC;YACnC,EAAE;YACF,qEAAqE;YACrE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,mEAAmE;YACnE,EAAE;YACF,oEAAoE;YACpE,uEAAuE;YACvE,cAAc;YACd,iBAAiB;YACjB,wBAAwB;YACxB,iCAAiC;YACjC,6CAA6C;YAC7C,mCAAmC;YACnC,iCAAiC;YACjC,kCAAkC;YAClC,gCAAgC;YAChC,6CAA6C;YAC7C,qBAAqB;SACtB;KACF;CACF,CAAC"}
@@ -1,6 +1,6 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.runBillingCron = exports.retryFailedWebhookEvents = exports.backofficeActivateSubscription = exports.backofficeListWebhookEvents = exports.backofficeOverview = exports.backofficeListSubscriptions = exports.reactivateForTenant = exports.cancelForTenant = exports.changePlanForTenant = exports.processWebhook = exports.startCheckout = exports.entitlementsForPlan = exports.standingFor = exports.subscriptionOverview = exports.signupSelfService = exports.seedSaasPlans = exports.withOperatorContext = exports.listBillingEvents = exports.listInvoices = exports.upsertSubscription = exports.getSubscriptionByTenant = exports.getSubscription = exports.getPlan = exports.listPublicPlans = exports.ensureSaasPlanCatalog = exports.DEFAULT_TRIAL_DAYS = exports.SAAS_PLANS = exports.DisabledSubscriptionProvider = exports.AsaasSubscriptionProvider = exports.resolveSubscriptionBillingProvider = exports.dunningStepsAsEvents = exports.startTrial = exports.cancelSubscription = exports.changePlan = exports.applySubscriptionEvent = exports.InMemoryEventPublisher = exports.NoopEventPublisher = exports.MANDATORY_EVENT_TYPES = exports.isMandatoryEvent = exports.createDomainEvent = exports.SUBSCRIPTION_BILLING_CONTRACT_VERSION = exports.CANONICAL_PROVIDER_ERROR_MESSAGES = exports.isRetryableProviderError = void 0;
3
+ exports.PlatformBillingExemptError = exports.standardPlatformBilling = exports.isPlatformBillingExempt = exports.setTenantPlatformBilling = exports.readTenantPlatformBilling = exports.runBillingCron = exports.retryFailedWebhookEvents = exports.backofficeSetPlatformBillingExemption = exports.backofficeActivateSubscription = exports.backofficeListWebhookEvents = exports.backofficeOverview = exports.backofficeListSubscriptions = exports.reactivateForTenant = exports.cancelForTenant = exports.changePlanForTenant = exports.processWebhook = exports.startCheckout = exports.entitlementsForPlan = exports.standingFor = exports.subscriptionOverview = exports.provisionAccountingOffice = exports.signupSelfService = exports.seedSaasPlans = exports.withOperatorContext = exports.listBillingEvents = exports.listInvoices = exports.upsertSubscription = exports.getSubscriptionByTenant = exports.getSubscription = exports.getPlan = exports.listPublicPlans = exports.ensureSaasPlanCatalog = exports.DEFAULT_TRIAL_DAYS = exports.SAAS_PLANS = exports.DisabledSubscriptionProvider = exports.AsaasSubscriptionProvider = exports.resolveSubscriptionBillingProvider = exports.dunningStepsAsEvents = exports.startTrial = exports.cancelSubscription = exports.changePlan = exports.applySubscriptionEvent = exports.InMemoryEventPublisher = exports.NoopEventPublisher = exports.MANDATORY_EVENT_TYPES = exports.isMandatoryEvent = exports.createDomainEvent = exports.SUBSCRIPTION_BILLING_CONTRACT_VERSION = exports.CANONICAL_PROVIDER_ERROR_MESSAGES = exports.isRetryableProviderError = void 0;
4
4
  var types_js_1 = require("./types.js");
5
5
  Object.defineProperty(exports, "isRetryableProviderError", { enumerable: true, get: function () { return types_js_1.isRetryableProviderError; } });
6
6
  Object.defineProperty(exports, "CANONICAL_PROVIDER_ERROR_MESSAGES", { enumerable: true, get: function () { return types_js_1.CANONICAL_PROVIDER_ERROR_MESSAGES; } });
@@ -45,6 +45,7 @@ Object.defineProperty(exports, "withOperatorContext", { enumerable: true, get: f
45
45
  var service_js_1 = require("./service.js");
46
46
  Object.defineProperty(exports, "seedSaasPlans", { enumerable: true, get: function () { return service_js_1.seedSaasPlans; } });
47
47
  Object.defineProperty(exports, "signupSelfService", { enumerable: true, get: function () { return service_js_1.signupSelfService; } });
48
+ Object.defineProperty(exports, "provisionAccountingOffice", { enumerable: true, get: function () { return service_js_1.provisionAccountingOffice; } });
48
49
  Object.defineProperty(exports, "subscriptionOverview", { enumerable: true, get: function () { return service_js_1.subscriptionOverview; } });
49
50
  Object.defineProperty(exports, "standingFor", { enumerable: true, get: function () { return service_js_1.standingFor; } });
50
51
  Object.defineProperty(exports, "entitlementsForPlan", { enumerable: true, get: function () { return service_js_1.entitlementsForPlan; } });
@@ -57,6 +58,13 @@ Object.defineProperty(exports, "backofficeListSubscriptions", { enumerable: true
57
58
  Object.defineProperty(exports, "backofficeOverview", { enumerable: true, get: function () { return service_js_1.backofficeOverview; } });
58
59
  Object.defineProperty(exports, "backofficeListWebhookEvents", { enumerable: true, get: function () { return service_js_1.backofficeListWebhookEvents; } });
59
60
  Object.defineProperty(exports, "backofficeActivateSubscription", { enumerable: true, get: function () { return service_js_1.backofficeActivateSubscription; } });
61
+ Object.defineProperty(exports, "backofficeSetPlatformBillingExemption", { enumerable: true, get: function () { return service_js_1.backofficeSetPlatformBillingExemption; } });
60
62
  Object.defineProperty(exports, "retryFailedWebhookEvents", { enumerable: true, get: function () { return service_js_1.retryFailedWebhookEvents; } });
61
63
  Object.defineProperty(exports, "runBillingCron", { enumerable: true, get: function () { return service_js_1.runBillingCron; } });
64
+ var platform_exemption_js_1 = require("./platform-exemption.js");
65
+ Object.defineProperty(exports, "readTenantPlatformBilling", { enumerable: true, get: function () { return platform_exemption_js_1.readTenantPlatformBilling; } });
66
+ Object.defineProperty(exports, "setTenantPlatformBilling", { enumerable: true, get: function () { return platform_exemption_js_1.setTenantPlatformBilling; } });
67
+ Object.defineProperty(exports, "isPlatformBillingExempt", { enumerable: true, get: function () { return platform_exemption_js_1.isPlatformBillingExempt; } });
68
+ Object.defineProperty(exports, "standardPlatformBilling", { enumerable: true, get: function () { return platform_exemption_js_1.standardPlatformBilling; } });
69
+ Object.defineProperty(exports, "PlatformBillingExemptError", { enumerable: true, get: function () { return platform_exemption_js_1.PlatformBillingExemptError; } });
62
70
  //# sourceMappingURL=index.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/subscription-billing/index.ts"],"names":[],"mappings":";;;AAuBA,uCAAgI;AAAvH,oHAAA,wBAAwB,OAAA;AAAE,6HAAA,iCAAiC,OAAA;AAAE,iIAAA,qCAAqC,OAAA;AAG3G,yCAAqI;AAA5H,8GAAA,iBAAiB,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAAE,mHAAA,sBAAsB,OAAA;AAG/G,+CAAoG;AAA3F,sHAAA,sBAAsB,OAAA;AAAE,0GAAA,UAAU,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAAE,0GAAA,UAAU,OAAA;AAE3E,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,2BAA2B;AAC3B,2CAAoD;AAA3C,kHAAA,oBAAoB,OAAA;AAE7B,sDAA4E;AAAnE,iIAAA,kCAAkC,OAAA;AAE3C,gDAAgE;AAAvD,qHAAA,yBAAyB,OAAA;AAClC,sDAAsE;AAA7D,2HAAA,4BAA4B,OAAA;AAErC,gFAAgF;AAChF,uCAA4D;AAAnD,sGAAA,UAAU,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAEvC,iDAUyB;AATvB,sHAAA,qBAAqB,OAAA;AACrB,gHAAA,eAAe,OAAA;AACf,wGAAA,OAAO,OAAA;AACP,gHAAA,eAAe,OAAA;AACf,wHAAA,uBAAuB,OAAA;AACvB,mHAAA,kBAAkB,OAAA;AAClB,6GAAA,YAAY,OAAA;AACZ,kHAAA,iBAAiB,OAAA;AACjB,oHAAA,mBAAmB,OAAA;AAGrB,2CAiBsB;AAhBpB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,kHAAA,oBAAoB,OAAA;AACpB,yGAAA,WAAW,OAAA;AACX,iHAAA,mBAAmB,OAAA;AACnB,2GAAA,aAAa,OAAA;AACb,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,iHAAA,mBAAmB,OAAA;AACnB,yHAAA,2BAA2B,OAAA;AAC3B,gHAAA,kBAAkB,OAAA;AAClB,yHAAA,2BAA2B,OAAA;AAC3B,4HAAA,8BAA8B,OAAA;AAC9B,sHAAA,wBAAwB,OAAA;AACxB,4GAAA,cAAc,OAAA"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/subscription-billing/index.ts"],"names":[],"mappings":";;;AAuBA,uCAIoB;AAHlB,oHAAA,wBAAwB,OAAA;AACxB,6HAAA,iCAAiC,OAAA;AACjC,iIAAA,qCAAqC,OAAA;AASvC,yCAMqB;AALnB,8GAAA,iBAAiB,OAAA;AACjB,6GAAA,gBAAgB,OAAA;AAChB,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AAIxB,+CAAoG;AAA3F,sHAAA,sBAAsB,OAAA;AAAE,0GAAA,UAAU,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAAE,0GAAA,UAAU,OAAA;AAE3E,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,2BAA2B;AAC3B,2CAAoD;AAA3C,kHAAA,oBAAoB,OAAA;AAE7B,sDAA4E;AAAnE,iIAAA,kCAAkC,OAAA;AAE3C,gDAAgE;AAAvD,qHAAA,yBAAyB,OAAA;AAClC,sDAAsE;AAA7D,2HAAA,4BAA4B,OAAA;AAErC,gFAAgF;AAChF,uCAA4D;AAAnD,sGAAA,UAAU,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAEvC,iDAUyB;AATvB,sHAAA,qBAAqB,OAAA;AACrB,gHAAA,eAAe,OAAA;AACf,wGAAA,OAAO,OAAA;AACP,gHAAA,eAAe,OAAA;AACf,wHAAA,uBAAuB,OAAA;AACvB,mHAAA,kBAAkB,OAAA;AAClB,6GAAA,YAAY,OAAA;AACZ,kHAAA,iBAAiB,OAAA;AACjB,oHAAA,mBAAmB,OAAA;AASrB,2CAmBsB;AAlBpB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,uHAAA,yBAAyB,OAAA;AACzB,kHAAA,oBAAoB,OAAA;AACpB,yGAAA,WAAW,OAAA;AACX,iHAAA,mBAAmB,OAAA;AACnB,2GAAA,aAAa,OAAA;AACb,4GAAA,cAAc,OAAA;AACd,iHAAA,mBAAmB,OAAA;AACnB,6GAAA,eAAe,OAAA;AACf,iHAAA,mBAAmB,OAAA;AACnB,yHAAA,2BAA2B,OAAA;AAC3B,gHAAA,kBAAkB,OAAA;AAClB,yHAAA,2BAA2B,OAAA;AAC3B,4HAAA,8BAA8B,OAAA;AAC9B,mIAAA,qCAAqC,OAAA;AACrC,sHAAA,wBAAwB,OAAA;AACxB,4GAAA,cAAc,OAAA;AAehB,iEAMiC;AAL/B,kIAAA,yBAAyB,OAAA;AACzB,iIAAA,wBAAwB,OAAA;AACxB,gIAAA,uBAAuB,OAAA;AACvB,gIAAA,uBAAuB,OAAA;AACvB,mIAAA,0BAA0B,OAAA"}