Preserva entrega A aceite de servicos em rascunho

app/Modules/Identity/Services/Audit.php

@@ -9,7 +9,7 @@ final class Audit
     public static function record(string $action, ?int $actor, ?int $tenant = null, ?int $company = null, ?int $unit = null, ?int $subject = null, array $details = []): void
     {
         // Explicit allowlist: credentials, session/context tokens and request bodies never enter audit.
-        $safe = array_intersect_key($details, array_flip(['before_name', 'after_name', 'permission', 'reason', 'operator', 'grants']));
+        $safe = array_intersect_key($details, array_flip(['before_name', 'after_name', 'permission', 'reason', 'operator', 'grants', 'area', 'record_id', 'version', 'event_id']));
         DB::table('identity_audit')->insert([
             'action' => $action, 'actor_id' => $actor, 'tenant_id' => $tenant,
             'company_id' => $company, 'unit_id' => $unit, 'subject_id' => $subject,

app/Modules/Identity/Services/IdentityWorkflow.php

@@ -112,6 +112,7 @@ final class IdentityWorkflow
         $members = DB::table('company_memberships as m')->join('users as u', 'u.id', '=', 'm.user_id')
             ->where('m.tenant_id', $ids['tenant_id'])->where('m.company_id', $ids['company_id'])->select('u.id', 'u.name', 'u.email')->orderBy('u.name')->get();
         $grants = DB::table('permission_grants')->where('tenant_id', $ids['tenant_id'])->where('company_id', $ids['company_id'])
+            ->whereIn('permission', array_merge(Permissions::COMPANY, Permissions::UNIT))
             ->where(fn ($q) => $q->whereNull('unit_id')->orWhereIn('unit_id', $allowedUnits))->get(['id', 'user_id', 'unit_id', 'permission']);
         return ['members' => $members, 'grants' => $grants, 'catalogue' => ['company' => Permissions::COMPANY, 'unit' => Permissions::UNIT]];
     }