@carlonicora/nestjs-neo4jsonapi 1.62.7 → 1.64.0

package/dist/foundations/rbac/rbac.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac.module.js","sourceRoot":"","sources":["../../../src/foundations/rbac/rbac.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,mEAA+D;AAC/D,6FAAuF;AACvF,oEAAgE;AAChE,0DAAsD;AACtD,+FAA0F;AAC1F,mFAA8E;AAC9E,qDAA2D;AAGpD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAAsD;QACpE,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,WAAW,EAAE,CAAC,gCAAc,EAAE,wDAAyB,CAAC;YACxD,SAAS,EAAE;gBACT,gCAAc;gBACd,0BAAW;gBACX,2DAA2B;gBAC3B,+CAAqB;gBACrB;oBACE,OAAO,EAAE,wCAAuB;oBAChC,QAAQ,EAAE,OAAO,CAAC,eAAe;iBAClC;aACF;YACD,OAAO,EAAE,CAAC,0BAAW,CAAC;SACvB,CAAC;IACJ,CAAC;CACF,CAAA;AAlBY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAkBtB"}
+{"version":3,"file":"rbac.module.js","sourceRoot":"","sources":["../../../src/foundations/rbac/rbac.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuE;AACvE,mEAA+D;AAC/D,6FAAuF;AACvF,oEAAgE;AAChE,0DAAsD;AACtD,gFAA2E;AAC3E,+FAA0F;AAC1F,mFAA8E;AAC9E,qDAA2D;AAC3D,+CAAkD;AAElD,2EAAsE;AACtE,yGAA6F;AAGtF,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,QAAQ,CAAC,OAIf;QACC,MAAM,SAAS,GAAe;YAC5B,gCAAc;YACd,0BAAW;YACX,2DAA2B;YAC3B,+CAAqB;YACrB,IAAA,oDAAoB,EAAC,+CAAqB,CAAC;YAC3C;gBACE,OAAO,EAAE,wCAAuB;gBAChC,QAAQ,EAAE,OAAO,CAAC,eAAe;aAClC;YACD;gBACE,OAAO,EAAE,+BAAiB;gBAC1B,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;aAC/B;SACF,CAAC;QAEF,MAAM,WAAW,GAAgB,CAAC,gCAAc,EAAE,wDAAyB,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,WAAW,CAAC,IAAI,CAAC,uCAAiB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,WAAW;YACX,SAAS;YACT,OAAO,EAAE,CAAC,0BAAW,CAAC;SACvB,CAAC;IACJ,CAAC;CACF,CAAA;AAlCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAkCtB"}

package/dist/foundations/rbac/rbac.tokens.d.ts

@@ -0,0 +1,11 @@
+/**
+ * DI token for the declarative RBAC matrix.
+ *
+ * Applications provide an `RbacMatrix` under this token; `RbacReconcilerService`
+ * reads it at bootstrap and reconciles Neo4j against it.
+ *
+ * Note: `MODULE_USER_PATHS_TOKEN` already lives in `rbac.constants.ts` — import
+ * it from there rather than duplicating it here.
+ */
+export declare const RBAC_MATRIX_TOKEN: unique symbol;
+//# sourceMappingURL=rbac.tokens.d.ts.map

package/dist/foundations/rbac/rbac.tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.tokens.d.ts","sourceRoot":"","sources":["../../../src/foundations/rbac/rbac.tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,eAA8B,CAAC"}

package/dist/foundations/rbac/rbac.tokens.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RBAC_MATRIX_TOKEN = void 0;
+/**
+ * DI token for the declarative RBAC matrix.
+ *
+ * Applications provide an `RbacMatrix` under this token; `RbacReconcilerService`
+ * reads it at bootstrap and reconciles Neo4j against it.
+ *
+ * Note: `MODULE_USER_PATHS_TOKEN` already lives in `rbac.constants.ts` — import
+ * it from there rather than duplicating it here.
+ */
+exports.RBAC_MATRIX_TOKEN = Symbol("RBAC_MATRIX_TOKEN");
+//# sourceMappingURL=rbac.tokens.js.map

package/dist/foundations/rbac/rbac.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.tokens.js","sourceRoot":"","sources":["../../../src/foundations/rbac/rbac.tokens.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACU,QAAA,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/foundations/rbac/serializer/matrix-to-ts.d.ts

@@ -0,0 +1,13 @@
+import type { RbacMatrix } from "../dsl/types";
+interface Options {
+    roleNames: Record<string, string>;
+    moduleNames: Record<string, string>;
+}
+/**
+ * Serialise an RbacMatrix to formatted TypeScript source.
+ * Deterministic: module and role keys are sorted by UUID; tokens are
+ * normalised per action.
+ */
+export declare function serializeMatrixToTs(matrix: RbacMatrix, opts: Options): Promise<string>;
+export {};
+//# sourceMappingURL=matrix-to-ts.d.ts.map

package/dist/foundations/rbac/serializer/matrix-to-ts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-to-ts.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/serializer/matrix-to-ts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,cAAc,CAAC;AAE1D,UAAU,OAAO;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAmC5F"}

package/dist/foundations/rbac/serializer/matrix-to-ts.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeMatrixToTs = serializeMatrixToTs;
+// packages/nestjs-neo4jsonapi/src/foundations/rbac/serializer/matrix-to-ts.ts
+const prettier_1 = __importDefault(require("prettier"));
+/**
+ * Serialise an RbacMatrix to formatted TypeScript source.
+ * Deterministic: module and role keys are sorted by UUID; tokens are
+ * normalised per action.
+ */
+async function serializeMatrixToTs(matrix, opts) {
+    const moduleIds = Object.keys(matrix).sort();
+    const lines = [];
+    lines.push(`// Auto-maintained by the RBAC UI. Edit via \`pnpm dev\` + UI, or by hand.`);
+    lines.push(``);
+    lines.push(`import { RoleId, ModuleId } from "@neural-erp/shared";`);
+    lines.push(`import { perm, defineRbac } from "@carlonicora/nestjs-neo4jsonapi";`);
+    lines.push(`import { MODULE_USER_PATHS } from "../features/rbac/module-relationships.map";`);
+    lines.push(``);
+    lines.push(`export const rbac = defineRbac<typeof MODULE_USER_PATHS>({`);
+    for (const moduleId of moduleIds) {
+        const block = matrix[moduleId];
+        if (!block)
+            continue;
+        const moduleName = opts.moduleNames[moduleId];
+        if (!moduleName) {
+            throw new Error(`Unknown module UUID: ${moduleId}. Check module-id.map.json.`);
+        }
+        lines.push(`  [ModuleId.${moduleName}]: {`);
+        lines.push(`    default: ${renderTokens(block.default)},`);
+        const roleIds = Object.keys(block)
+            .filter((k) => k !== "default")
+            .sort();
+        for (const roleId of roleIds) {
+            const roleName = opts.roleNames[roleId];
+            if (!roleName)
+                throw new Error(`Unknown role UUID: ${roleId}`);
+            lines.push(`    [RoleId.${roleName}]: ${renderTokens(block[roleId])},`);
+        }
+        lines.push(`  },`);
+    }
+    lines.push(`});`);
+    lines.push(``);
+    const raw = lines.join("\n");
+    return prettier_1.default.format(raw, { parser: "typescript" });
+}
+function renderTokens(tokens) {
+    // `scope === false` has no emission (absence of a token is the "deny"
+    // semantics). Drop defensively before any shape-checking so malformed state
+    // never leaks to disk as `perm.X("false")`.
+    const valid = tokens.filter((t) => t.scope === true || (typeof t.scope === "string" && t.scope.length > 0));
+    // perm.full collapse
+    const isFull = valid.length === 4 && valid.every((t) => t.scope === true) && new Set(valid.map((t) => t.action)).size === 4;
+    if (isFull)
+        return "perm.full";
+    if (valid.length === 0)
+        return "[]";
+    // Render each token
+    const parts = [...valid]
+        .sort((a, b) => {
+        const order = { read: 0, create: 1, update: 2, delete: 3 };
+        return order[a.action] - order[b.action];
+    })
+        .map((t) => {
+        if (t.scope === true)
+            return `perm.${t.action}`;
+        return `perm.${t.action}("${t.scope}")`;
+    });
+    return `[${parts.join(", ")}]`;
+}
+//# sourceMappingURL=matrix-to-ts.js.map

package/dist/foundations/rbac/serializer/matrix-to-ts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-to-ts.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/serializer/matrix-to-ts.ts"],"names":[],"mappings":";;;;;AAcA,kDAmCC;AAjDD,8EAA8E;AAC9E,wDAAgC;AAQhC;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CAAC,MAAkB,EAAE,IAAa;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAEzE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,MAAM,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAC9B,IAAI,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,kBAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,sEAAsE;IACtE,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5G,qBAAqB;IACrB,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IAC/G,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,oBAAoB;IACpB,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC;SACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,KAAK,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACjC,CAAC"}

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts

@@ -0,0 +1,30 @@
+import { OnApplicationBootstrap } from "@nestjs/common";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { AppLoggingService } from "../../../core/logging/services/logging.service";
+import type { RbacMatrix } from "../dsl/types";
+/**
+ * Applies the declared `RbacMatrix` to Neo4j at application bootstrap.
+ *
+ * Behaviour (per spec §6.3):
+ *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
+ *    security layer short-circuits for it.
+ *  - Module defaults are stored on `Module.permissions`.
+ *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
+ *  - Deletions are scoped to modules declared in the matrix: edges for
+ *    undeclared modules are left untouched.
+ *  - Preflight aborts with a clear error if any referenced role or module is
+ *    missing from the DB (seed migrations must run first).
+ */
+export declare class RbacReconcilerService implements OnApplicationBootstrap {
+    private readonly neo4j;
+    private readonly matrix;
+    private readonly logger;
+    constructor(neo4j: Neo4jService, matrix: RbacMatrix | null, logger: AppLoggingService);
+    onApplicationBootstrap(): Promise<void>;
+    private preflight;
+    private findMissing;
+    private readActualState;
+    private computeDiff;
+    private apply;
+}
+//# sourceMappingURL=rbac-reconciler.service.d.ts.map

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-reconciler.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe/C;;;;;;;;;;;;GAYG;AACH,qBACa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,KAAK,EAAE,YAAY,EACoB,MAAM,EAAE,UAAU,GAAG,IAAI,EAChE,MAAM,EAAE,iBAAiB;IAGtC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;YAsB/B,SAAS;YAyBT,WAAW;YAOX,eAAe;IAsB7B,OAAO,CAAC,WAAW;YAkEL,KAAK;CA4BpB"}

package/dist/foundations/rbac/services/rbac-reconciler.service.js

@@ -0,0 +1,192 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacReconcilerService = void 0;
+const common_1 = require("@nestjs/common");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const logging_service_1 = require("../../../core/logging/services/logging.service");
+const system_roles_1 = require("../../../common/constants/system.roles");
+const rbac_tokens_1 = require("../rbac.tokens");
+const resolver_1 = require("../dsl/resolver");
+const ADMINISTRATOR_ID = system_roles_1.SystemRoles.Administrator;
+/**
+ * Applies the declared `RbacMatrix` to Neo4j at application bootstrap.
+ *
+ * Behaviour (per spec §6.3):
+ *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
+ *    security layer short-circuits for it.
+ *  - Module defaults are stored on `Module.permissions`.
+ *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
+ *  - Deletions are scoped to modules declared in the matrix: edges for
+ *    undeclared modules are left untouched.
+ *  - Preflight aborts with a clear error if any referenced role or module is
+ *    missing from the DB (seed migrations must run first).
+ */
+let RbacReconcilerService = class RbacReconcilerService {
+    constructor(neo4j, matrix, logger) {
+        this.neo4j = neo4j;
+        this.matrix = matrix;
+        this.logger = logger;
+    }
+    async onApplicationBootstrap() {
+        if (!this.matrix) {
+            this.logger.log("RBAC reconciler: no matrix configured, skipping");
+            return;
+        }
+        await this.preflight();
+        const actual = await this.readActualState();
+        const diff = this.computeDiff(actual);
+        if (diff.operations.length === 0) {
+            this.logger.log("RBAC reconcile: no changes");
+            return;
+        }
+        await this.apply(diff.operations);
+        this.logger.log(`RBAC reconcile: ${diff.defaultsChanged} defaults changed, ${diff.edgesUpserted} edges upserted, ${diff.edgesRemoved} edges removed`);
+    }
+    async preflight() {
+        const moduleIds = new Set();
+        const roleIds = new Set();
+        for (const moduleId of (0, resolver_1.iterateDeclaredModules)(this.matrix)) {
+            moduleIds.add(moduleId);
+        }
+        for (const { roleId } of (0, resolver_1.iterateDeclaredEdges)(this.matrix)) {
+            if (roleId === ADMINISTRATOR_ID)
+                continue;
+            roleIds.add(roleId);
+        }
+        const missingRoles = await this.findMissing("Role", Array.from(roleIds));
+        const missingModules = await this.findMissing("Module", Array.from(moduleIds));
+        if (missingRoles.length > 0 || missingModules.length > 0) {
+            throw new Error(`RBAC reconcile aborted - referenced entities not found in DB. ` +
+                `Roles missing: ${missingRoles.join(", ") || "none"}. ` +
+                `Modules missing: ${missingModules.join(", ") || "none"}. ` +
+                `Apply seed migrations before declaring these in the matrix.`);
+        }
+    }
+    async findMissing(label, ids) {
+        if (ids.length === 0)
+            return [];
+        const result = await this.neo4j.read(`MATCH (n:${label}) WHERE n.id IN $ids RETURN n.id AS id`, { ids });
+        const found = new Set(result.records.map((r) => r.get("id")));
+        return ids.filter((id) => !found.has(id));
+    }
+    async readActualState() {
+        const modulesResult = await this.neo4j.read(`MATCH (m:Module) RETURN m.id AS id, m.permissions AS permissions`, {});
+        const edgesResult = await this.neo4j.read(`MATCH (r:Role)-[p:HAS_PERMISSIONS]->(m:Module) RETURN r.id AS roleId, m.id AS moduleId, p.permissions AS permissions`, {});
+        const moduleDefaults = {};
+        for (const rec of modulesResult.records) {
+            moduleDefaults[rec.get("id")] = rec.get("permissions");
+        }
+        const edges = [];
+        for (const rec of edgesResult.records) {
+            edges.push({
+                roleId: rec.get("roleId"),
+                moduleId: rec.get("moduleId"),
+                permissions: rec.get("permissions"),
+            });
+        }
+        return { moduleDefaults, edges };
+    }
+    computeDiff(actual) {
+        const operations = [];
+        let defaultsChanged = 0;
+        let edgesUpserted = 0;
+        let edgesRemoved = 0;
+        const declaredModules = new Set(Array.from((0, resolver_1.iterateDeclaredModules)(this.matrix)));
+        const sortedModules = Array.from(declaredModules).sort();
+        // Defaults
+        for (const moduleId of sortedModules) {
+            const expected = (0, resolver_1.resolveDefault)(this.matrix, moduleId);
+            if (expected === undefined)
+                continue;
+            if (actual.moduleDefaults[moduleId] !== expected) {
+                operations.push({ kind: "setDefault", params: { moduleId, permissions: expected } });
+                defaultsChanged++;
+            }
+        }
+        // Edges — expected (Administrator excluded)
+        const expectedEdgeKeys = new Set();
+        const sortedEdges = Array.from((0, resolver_1.iterateDeclaredEdges)(this.matrix))
+            .filter((e) => e.roleId !== ADMINISTRATOR_ID)
+            .sort((a, b) => (a.moduleId + a.roleId).localeCompare(b.moduleId + b.roleId));
+        const actualByKey = new Map();
+        for (const edge of actual.edges) {
+            actualByKey.set(`${edge.roleId}|${edge.moduleId}`, edge.permissions);
+        }
+        for (const { roleId, moduleId } of sortedEdges) {
+            const expected = (0, resolver_1.resolveForRole)(this.matrix, roleId, moduleId);
+            if (expected === undefined)
+                continue;
+            const key = `${roleId}|${moduleId}`;
+            expectedEdgeKeys.add(key);
+            if (actualByKey.get(key) !== expected) {
+                operations.push({
+                    kind: "upsertEdge",
+                    params: { roleId, moduleId, permissions: expected },
+                });
+                edgesUpserted++;
+            }
+        }
+        // Edges — to delete (scoped to declared modules only; Administrator never managed)
+        for (const edge of actual.edges) {
+            if (!declaredModules.has(edge.moduleId))
+                continue;
+            if (edge.roleId === ADMINISTRATOR_ID)
+                continue;
+            const key = `${edge.roleId}|${edge.moduleId}`;
+            if (!expectedEdgeKeys.has(key)) {
+                operations.push({
+                    kind: "deleteEdge",
+                    params: { roleId: edge.roleId, moduleId: edge.moduleId },
+                });
+                edgesRemoved++;
+            }
+        }
+        return { operations, defaultsChanged, edgesUpserted, edgesRemoved };
+    }
+    async apply(operations) {
+        const queries = operations.map((op) => {
+            if (op.kind === "setDefault") {
+                return {
+                    query: `MATCH (m:Module {id: $moduleId}) SET m.permissions = $permissions`,
+                    params: op.params,
+                };
+            }
+            if (op.kind === "upsertEdge") {
+                return {
+                    query: `MATCH (role:Role {id: $roleId}) ` +
+                        `MATCH (module:Module {id: $moduleId}) ` +
+                        `MERGE (role)-[permissions:HAS_PERMISSIONS]->(module) ` +
+                        `ON CREATE SET permissions.permissions = $permissions ` +
+                        `ON MATCH SET permissions.permissions = $permissions`,
+                    params: op.params,
+                };
+            }
+            // deleteEdge
+            return {
+                query: `MATCH (role:Role {id: $roleId})-[p:HAS_PERMISSIONS]->(module:Module {id: $moduleId}) DELETE p`,
+                params: op.params,
+            };
+        });
+        await this.neo4j.executeInTransaction(queries);
+    }
+};
+exports.RbacReconcilerService = RbacReconcilerService;
+exports.RbacReconcilerService = RbacReconcilerService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(rbac_tokens_1.RBAC_MATRIX_TOKEN)),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, Object, logging_service_1.AppLoggingService])
+], RbacReconcilerService);
+//# sourceMappingURL=rbac-reconciler.service.js.map

package/dist/foundations/rbac/services/rbac-reconciler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-reconciler.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsF;AACtF,8EAA0E;AAC1E,oFAAmF;AACnF,yEAAqE;AACrE,gDAAmD;AAEnD,8CAA+G;AAE/G,MAAM,gBAAgB,GAAW,0BAAW,CAAC,aAAa,CAAC;AAY3D;;;;;;;;;;;;GAYG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,KAAmB,EACoB,MAAyB,EAChE,MAAyB;QAFzB,UAAK,GAAL,KAAK,CAAc;QACoB,WAAM,GAAN,MAAM,CAAmB;QAChE,WAAM,GAAN,MAAM,CAAmB;IACzC,CAAC;IAEJ,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mBAAmB,IAAI,CAAC,eAAe,sBAAsB,IAAI,CAAC,aAAa,oBAAoB,IAAI,CAAC,YAAY,gBAAgB,CACrI,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,QAAQ,IAAI,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBACvD,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBAC3D,6DAA6D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAwB,EAAE,GAAa;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,wCAAwC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACvC,sHAAsH,EACtH,EAAE,CACH,CAAC;QAEF,MAAM,cAAc,GAAkC,EAAE,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAkB,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAqE,EAAE,CAAC;QACnF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACnC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAW;gBACvC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAW;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAEO,WAAW,CAAC,MAAmB;QAMrC,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzD,WAAW;QACX,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBACzD,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,UAAgC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE,mEAAmE;oBAC1E,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EACH,kCAAkC;wBAClC,wCAAwC;wBACxC,uDAAuD;wBACvD,uDAAuD;wBACvD,qDAAqD;oBACvD,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,aAAa;YACb,OAAO;gBACL,KAAK,EAAE,+FAA+F;gBACtG,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AAjLY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAiB,CAAC,CAAA;qCADd,4BAAY,UAEX,mCAAiB;GAJjC,qBAAqB,CAiLjC"}

package/dist/foundations/stripe/__tests__/mocks/stripe.mock.d.ts

@@ -6,112 +6,112 @@
  */
 export declare const createMockStripeClient: () => {
     customers: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        del: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        del: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     subscriptions: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        pause: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        resume: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        pause: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        resume: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     products: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     prices: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     paymentIntents: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        confirm: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        confirm: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     setupIntents: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     paymentMethods: {
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        attach: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        detach: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        attach: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        detach: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     invoices: {
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        pay: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        voidInvoice: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieveUpcoming: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        createPreview: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        pay: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        voidInvoice: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieveUpcoming: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        createPreview: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     billingPortal: {
         sessions: {
-            create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+            create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
         };
     };
     webhooks: {
-        constructEvent: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        constructEvent: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     v2: {
         billing: {
             meterEvents: {
-                create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+                create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
             };
             meterEventSummaries: {
-                list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+                list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
             };
         };
     };
     billing: {
         meters: {
-            list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-            retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-            listEventSummaries: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+            list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+            retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+            listEventSummaries: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
         };
     };
     coupons: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        del: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        del: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     refunds: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        cancel: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     taxRates: {
-        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
     tax: {
         calculations: {
-            create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+            create: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
         };
     };
     disputes: {
-        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        close: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
-        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.4/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        retrieve: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        update: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        close: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
+        list: import("vitest").Mock<import(".pnpm/@vitest+spy@4.1.5/node_modules/@vitest/spy", { with: { "resolution-mode": "import" } }).Procedure>;
     };
 };
 /**