fix(sharing): widen the grant db slice for the expired-row sweep

The pre-create sweep in inviteGrant writes an audit row when it closes a
lapsed grant, so the transaction slice it accepts now covers auditLog
alongside accountGrant. Point the module and route test fakes at the
same shape: they stub updateMany to close nothing, so the audit branch
stays unreached in the unit fixtures.

src/app/api/account/grants/__tests__/invite-access-level.test.ts

@@ -38,7 +38,12 @@ vi.mock("@/lib/api-handler", async () => {
 vi.mock("@/lib/db", () => ({
   prisma: {
     user: { findFirst: vi.fn() },
-    accountGrant: { create: vi.fn() },
+    accountGrant: {
+      create: vi.fn(),
+      // inviteGrant sweeps expired live-pair rows before the create; nothing to
+      // close in these fixtures.
+      updateMany: vi.fn().mockResolvedValue({ count: 0 }),
+    },
   },
 }));
 

src/app/api/account/grants/__tests__/invite-scope-and-manage.test.ts

@@ -43,7 +43,12 @@ vi.mock("@/lib/api-handler", async () => {
 vi.mock("@/lib/db", () => ({
   prisma: {
     user: { findFirst: vi.fn() },
-    accountGrant: { create: vi.fn() },
+    accountGrant: {
+      create: vi.fn(),
+      // inviteGrant sweeps expired live-pair rows before the create. No such
+      // row exists in these unit fixtures, so it closes nothing.
+      updateMany: vi.fn().mockResolvedValue({ count: 0 }),
+    },
   },
 }));
 

src/lib/sharing/__tests__/grants.test.ts

@@ -154,7 +154,7 @@ describe("grantAllows", () => {
  */
 describe("inviteGrant", () => {
   function captureDb(): {
-    db: Pick<Prisma.TransactionClient, "accountGrant">;
+    db: Pick<Prisma.TransactionClient, "accountGrant" | "auditLog">;
     writes: Array<{
       access: string;
       grantorId: string;
@@ -170,6 +170,9 @@ describe("inviteGrant", () => {
     }> = [];
     const db = {
       accountGrant: {
+        // No expired live-pair row in these fixtures, so the pre-create sweep
+        // closes nothing and the audit branch is never reached.
+        updateMany: async () => ({ count: 0 }),
         create: async (args: {
           data: {
             access: string;
@@ -182,7 +185,7 @@ describe("inviteGrant", () => {
           return { id: "grant-1", ...args.data } as unknown as AccountGrant;
         },
       },
-    } as unknown as Pick<Prisma.TransactionClient, "accountGrant">;
+    } as unknown as Pick<Prisma.TransactionClient, "accountGrant" | "auditLog">;
     return { db, writes };
   }
 
@@ -391,18 +394,19 @@ describe("grantCoversDomain", () => {
 
 describe("inviteGrant, on scope", () => {
   function captureScopeDb(): {
-    db: Pick<Prisma.TransactionClient, "accountGrant">;
+    db: Pick<Prisma.TransactionClient, "accountGrant" | "auditLog">;
     writes: Array<{ scopeJson: unknown }>;
   } {
     const writes: Array<{ scopeJson: unknown }> = [];
     const db = {
       accountGrant: {
+        updateMany: async () => ({ count: 0 }),
         create: async (args: { data: { scopeJson: unknown } }) => {
           writes.push(args.data);
           return { id: "grant-1", ...args.data } as unknown as AccountGrant;
         },
       },
-    } as unknown as Pick<Prisma.TransactionClient, "accountGrant">;
+    } as unknown as Pick<Prisma.TransactionClient, "accountGrant" | "auditLog">;
     return { db, writes };
   }
 

src/lib/sharing/grants.ts

@@ -133,7 +133,7 @@ export class GrantError extends Error {
  * The narrow client slice these functions need, so a caller can pass a
  * transaction handle. Same shape as `issue-token.ts`.
  */
-type GrantDb = Pick<Prisma.TransactionClient, "accountGrant">;
+type GrantDb = Pick<Prisma.TransactionClient, "accountGrant" | "auditLog">;
 
 // ── The state machine, pure ─────────────────────────────────────────────────