fix: align client integration contracts

src/api/merchantIam.test.mjs

@@ -4,9 +4,13 @@ import test from 'node:test'
 
 const source = readFileSync(new URL('./merchantIam.ts', import.meta.url), 'utf8')
 const storeSource = readFileSync(new URL('../stores/tenantAdministration.ts', import.meta.url), 'utf8')
+const authSource = readFileSync(new URL('../stores/auth.ts', import.meta.url), 'utf8')
 
 test('declares the documented merchant role and member endpoints', () => {
   assert.match(source, /url: '\/merchant\/v1\/iam\/roles'/)
+  assert.match(source, /method: 'PUT', url: `\/merchant\/v1\/iam\/roles\/\$\{roleId\}`/)
+  assert.match(source, /method: 'PUT', url: `\/merchant\/v1\/iam\/roles\/\$\{roleId\}\/status`/)
+  assert.match(source, /method: 'DELETE', url: `\/merchant\/v1\/iam\/roles\/\$\{roleId\}`/)
   assert.match(source, /url: '\/merchant\/v1\/iam\/roles\/permissions'/)
   assert.match(source, /url: '\/merchant\/v1\/iam\/members'/)
   assert.match(source, /url: '\/merchant\/v1\/iam\/members\/roles'/)
@@ -33,8 +37,21 @@ test('clears mock records before loading server role and member lists', () => {
   assert.match(storeSource, /rolesLoadedFromApi\.value = true\s+roles\.value = \[\]/)
   assert.match(storeSource, /membersLoadedFromApi\.value = true\s+members\.value = \[\]/)
   assert.match(storeSource, /await createMerchantRole/)
+  assert.match(storeSource, /await updateMerchantRole/)
+  assert.match(storeSource, /await changeMerchantRoleStatus/)
+  assert.match(storeSource, /await deleteMerchantRole/)
   assert.match(storeSource, /await createMerchantMember/)
   assert.match(storeSource, /await updateMerchantMember/)
   assert.match(storeSource, /await changeMerchantMemberStatus/)
   assert.match(storeSource, /await resetMerchantMemberPassword/)
 })
+
+test('shares the merchant permission map and preserves resources not rendered by the role editor', () => {
+  assert.match(storeSource, /export const FRONTEND_TO_MERCHANT_PERMISSION_CODES/)
+  assert.match(storeSource, /'order:first-leg:cancel': \['merchant:order:cancel'\]/)
+  assert.match(authSource, /FRONTEND_TO_MERCHANT_PERMISSION_CODES/)
+  assert.match(authSource, /Object\.entries\(FRONTEND_TO_MERCHANT_PERMISSION_CODES\)/)
+  assert.match(storeSource, /const preservedPermissionIds = role\.permissionIds\.filter/)
+  assert.match(storeSource, /const nextPermissionIds = \[\.\.\.new Set\(\[\.\.\.preservedPermissionIds, \.\.\.selectedPermissionIds\]\)\]/)
+  assert.match(storeSource, /await replaceMerchantRolePermissions\(id, nextPermissionIds\)/)
+})