@dainamite/billing 0.17.0

package/dist/modules/billing/api/invoices/add-line/route.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
+import { billingEntityIds } from "../../../data/entityIds.js";
+import { billingInvoiceAddLineSchema } from "../../../data/validators.js";
+import { createBillingCrudOpenApi } from "../../openapi.js";
+const routeMetadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.edit_draft"] }
+};
+const metadata = routeMetadata;
+const addLineResponseSchema = z.object({
+  invoiceId: z.string().uuid(),
+  invoiceLineId: z.string().uuid(),
+  auditId: z.string().uuid()
+});
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: SalesInvoice,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.draftInvoiceEdit,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    create: {
+      commandId: "billing.invoices.add_draft_line",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        return billingInvoiceAddLineSchema.parse(scoped);
+      },
+      response: ({ result }) => ({
+        invoiceId: result?.invoiceId ?? null,
+        invoiceLineId: result?.invoiceLineId ?? null,
+        auditId: result?.auditId ?? null
+      }),
+      status: 201
+    }
+  }
+});
+const POST = crud.POST;
+const openApi = createBillingCrudOpenApi({
+  resourceName: "BillingInvoiceLineAdd",
+  pluralName: "BillingInvoiceLineAdds",
+  querySchema: z.object({}).passthrough(),
+  listResponseSchema: z.object({ items: z.array(z.unknown()) }),
+  create: {
+    schema: billingInvoiceAddLineSchema,
+    responseSchema: addLineResponseSchema,
+    description: "Appends a new line to a draft invoice (e.g. operator adds a one-off adjustment). Writes a `DraftInvoiceEdit` audit row (action=`line_added`, `before_json=null`). Recomputes invoice totals. Refuses non-draft invoices."
+  }
+});
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/add-line/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/invoices/add-line/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoiceAddLineSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst addLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.add_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceAddLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 201,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineAdd',\n  pluralName: 'BillingInvoiceLineAdds',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceAddLineSchema,\n    responseSchema: addLineResponseSchema,\n    description:\n      'Appends a new line to a draft invoice (e.g. operator adds a ' +\n      'one-off adjustment). Writes a `DraftInvoiceEdit` audit row ' +\n      '(action=`line_added`, `before_json=null`). Recomputes invoice ' +\n      'totals. Refuses non-draft invoices.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,gCAAgC;AAEzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,4BAA4B,MAAM,MAAM;AAAA,MACjD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAIJ;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/edit-line/route.js

@@ -0,0 +1,78 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
+import { billingEntityIds } from "../../../data/entityIds.js";
+import {
+  billingInvoiceAddLineSchema,
+  billingInvoiceEditLineSchema,
+  billingInvoiceRemoveLineSchema
+} from "../../../data/validators.js";
+import { createBillingCrudOpenApi } from "../../openapi.js";
+const routeMetadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.edit_draft"] }
+};
+const metadata = routeMetadata;
+const editLineResponseSchema = z.object({
+  invoiceId: z.string().uuid(),
+  invoiceLineId: z.string().uuid(),
+  auditId: z.string().uuid()
+});
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: SalesInvoice,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.draftInvoiceEdit,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    create: {
+      commandId: "billing.invoices.edit_draft_line",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        return billingInvoiceEditLineSchema.parse(scoped);
+      },
+      response: ({ result }) => ({
+        invoiceId: result?.invoiceId ?? null,
+        invoiceLineId: result?.invoiceLineId ?? null,
+        auditId: result?.auditId ?? null
+      }),
+      status: 200
+    }
+  }
+});
+const POST = crud.POST;
+const openApi = createBillingCrudOpenApi({
+  resourceName: "BillingInvoiceLineEdit",
+  pluralName: "BillingInvoiceLineEdits",
+  querySchema: z.object({}).passthrough(),
+  listResponseSchema: z.object({ items: z.array(z.unknown()) }),
+  create: {
+    schema: billingInvoiceEditLineSchema,
+    responseSchema: editLineResponseSchema,
+    description: "Edits one line of a draft invoice (description, quantity, unit_price, or explicit `totalNetAmount` override). Writes a `DraftInvoiceEdit` audit row with before+after snapshots and recomputes invoice totals. Refuses non-draft invoices with HTTP 409 + `billing.invoice.not_draft`."
+  }
+});
+const _phaseSchemaRefs = {
+  add: billingInvoiceAddLineSchema,
+  remove: billingInvoiceRemoveLineSchema
+};
+export {
+  POST,
+  _phaseSchemaRefs,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/edit-line/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/invoices/edit-line/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport {\n  billingInvoiceAddLineSchema,\n  billingInvoiceEditLineSchema,\n  billingInvoiceRemoveLineSchema,\n} from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/invoices/edit-line` \u2014 edits one line of a draft\n * invoice. Refuses non-drafts (409 / `billing.invoice.not_draft`).\n * Writes a `DraftInvoiceEdit` audit row per spec. Recomputes invoice\n * totals from the surviving lines after the edit.\n *\n * Operator surface: route is gated by `billing.invoice.edit_draft`.\n * Future Phase 4c admin UI calls into the same command via this route.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst editLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.edit_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceEditLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineEdit',\n  pluralName: 'BillingInvoiceLineEdits',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceEditLineSchema,\n    responseSchema: editLineResponseSchema,\n    description:\n      'Edits one line of a draft invoice (description, quantity, ' +\n      \"unit_price, or explicit `totalNetAmount` override). Writes a \" +\n      '`DraftInvoiceEdit` audit row with before+after snapshots and ' +\n      'recomputes invoice totals. Refuses non-draft invoices with ' +\n      'HTTP 409 + `billing.invoice.not_draft`.',\n  },\n})\n\n// Re-export the add/remove route schemas so the OpenAPI bundle keeps\n// them discoverable from a single import surface \u2014 the dedicated\n// routes (sibling folders) own the actual handlers.\nexport const _phaseSchemaRefs = {\n  add: billingInvoiceAddLineSchema,\n  remove: billingInvoiceRemoveLineSchema,\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAYzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,6BAA6B,MAAM,MAAM;AAAA,MAClD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;AAKM,MAAM,mBAAmB;AAAA,EAC9B,KAAK;AAAA,EACL,QAAQ;AACV;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/post/route.js

@@ -0,0 +1,74 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
+import { billingEntityIds } from "../../../data/entityIds.js";
+import { billingInvoicePostSchema } from "../../../data/validators.js";
+import { createBillingCrudOpenApi } from "../../openapi.js";
+const routeMetadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.post"] }
+};
+const metadata = routeMetadata;
+const postResponseSchema = z.object({
+  invoiceId: z.string().uuid(),
+  invoiceNumber: z.string(),
+  status: z.literal("posted"),
+  lineCount: z.number().int().nonnegative()
+});
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: SalesInvoice,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    // `entityId` is technically a core/sales concept, but the factory
+    // only needs it as an identifier — using a billing-namespaced one
+    // keeps the registry tidy (no surprise list endpoints).
+    entityId: billingEntityIds.draftInvoiceEdit,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    create: {
+      commandId: "billing.invoices.post",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        return billingInvoicePostSchema.parse(scoped);
+      },
+      response: ({ result }) => ({
+        invoiceId: result?.invoiceId ?? null,
+        invoiceNumber: result?.invoiceNumber ?? null,
+        status: result?.status ?? null,
+        lineCount: result?.lineCount ?? 0
+      }),
+      status: 200
+    }
+  }
+});
+const POST = crud.POST;
+const openApi = createBillingCrudOpenApi({
+  resourceName: "BillingInvoicePost",
+  pluralName: "BillingInvoicePosts",
+  querySchema: z.object({}).passthrough(),
+  listResponseSchema: z.object({ items: z.array(z.unknown()) }),
+  create: {
+    schema: billingInvoicePostSchema,
+    responseSchema: postResponseSchema,
+    description: "Flips a billing-drafted `core/sales` invoice from `draft` to `posted`. Refuses non-draft invoices (409 / `billing.invoice.not_draft`) and test-mode invoices (409 / `billing.invoice.test_run`). Fires `billing.invoice.posted` + one `billing.invoice.line_posted` per line. The invoice number is NOT re-assigned (set at draft create \u2014 see Phase 2 deviation)."
+  }
+});
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/post/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/invoices/post/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoicePostSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/invoices/post`\n *\n * Operator action: flip a billing-drafted invoice from `draft` \u2192\n * `posted`. The command refuses non-draft inputs (409 with\n * `billing.invoice.not_draft`) and test-mode invoices (409 with\n * `billing.invoice.test_run`). The invoice number is NOT re-assigned\n * (it was set at draft create \u2014 see Phase 2 deviation note in the\n * spec).\n *\n * Implemented as a create-only `makeCrudRoute` so it inherits the same\n * RBAC + OpenAPI plumbing as the rest of the billing surface. The\n * `entity` is `SalesInvoice` only because the factory requires one;\n * the GET half is never exposed on this URL.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.post'] },\n}\n\nexport const metadata = routeMetadata\n\nconst postResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceNumber: z.string(),\n  status: z.literal('posted'),\n  lineCount: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    // `entityId` is technically a core/sales concept, but the factory\n    // only needs it as an identifier \u2014 using a billing-namespaced one\n    // keeps the registry tidy (no surprise list endpoints).\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.post',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoicePostSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceNumber: result?.invoiceNumber ?? null,\n        status: result?.status ?? null,\n        lineCount: result?.lineCount ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoicePost',\n  pluralName: 'BillingInvoicePosts',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoicePostSchema,\n    responseSchema: postResponseSchema,\n    description:\n      'Flips a billing-drafted `core/sales` invoice from `draft` to ' +\n      '`posted`. Refuses non-draft invoices (409 / ' +\n      '`billing.invoice.not_draft`) and test-mode invoices (409 / ' +\n      '`billing.invoice.test_run`). Fires `billing.invoice.posted` + ' +\n      'one `billing.invoice.line_posted` per line. The invoice number ' +\n      'is NOT re-assigned (set at draft create \u2014 see Phase 2 deviation).',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC,SAAS,gCAAgC;AAkBzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO;AAAA,EACxB,QAAQ,EAAE,QAAQ,QAAQ;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC1C,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA,IAIjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,yBAAyB,MAAM,MAAM;AAAA,MAC9C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,QAAQ,QAAQ,UAAU;AAAA,QAC1B,WAAW,QAAQ,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAMJ;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/remove-line/route.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
+import { billingEntityIds } from "../../../data/entityIds.js";
+import { billingInvoiceRemoveLineSchema } from "../../../data/validators.js";
+import { createBillingCrudOpenApi } from "../../openapi.js";
+const routeMetadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.edit_draft"] }
+};
+const metadata = routeMetadata;
+const removeLineResponseSchema = z.object({
+  invoiceId: z.string().uuid(),
+  invoiceLineId: z.string().uuid(),
+  auditId: z.string().uuid()
+});
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: SalesInvoice,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.draftInvoiceEdit,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    create: {
+      commandId: "billing.invoices.remove_draft_line",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        return billingInvoiceRemoveLineSchema.parse(scoped);
+      },
+      response: ({ result }) => ({
+        invoiceId: result?.invoiceId ?? null,
+        invoiceLineId: result?.invoiceLineId ?? null,
+        auditId: result?.auditId ?? null
+      }),
+      status: 200
+    }
+  }
+});
+const POST = crud.POST;
+const openApi = createBillingCrudOpenApi({
+  resourceName: "BillingInvoiceLineRemove",
+  pluralName: "BillingInvoiceLineRemoves",
+  querySchema: z.object({}).passthrough(),
+  listResponseSchema: z.object({ items: z.array(z.unknown()) }),
+  create: {
+    schema: billingInvoiceRemoveLineSchema,
+    responseSchema: removeLineResponseSchema,
+    description: "Removes one line from a draft invoice (hard delete \u2014 the line never existed as far as future readers are concerned). Writes a `DraftInvoiceEdit` audit row (action=`line_removed`, `after_json=null`) carrying the before-snapshot for forensics. Recomputes invoice totals. Refuses non-draft invoices."
+  }
+});
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/remove-line/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/invoices/remove-line/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoiceRemoveLineSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst removeLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.remove_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceRemoveLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineRemove',\n  pluralName: 'BillingInvoiceLineRemoves',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceRemoveLineSchema,\n    responseSchema: removeLineResponseSchema,\n    description:\n      'Removes one line from a draft invoice (hard delete \u2014 the line ' +\n      'never existed as far as future readers are concerned). Writes ' +\n      'a `DraftInvoiceEdit` audit row (action=`line_removed`, ' +\n      '`after_json=null`) carrying the before-snapshot for forensics. ' +\n      'Recomputes invoice totals. Refuses non-draft invoices.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,sCAAsC;AAC/C,SAAS,gCAAgC;AAEzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,+BAA+B,MAAM,MAAM;AAAA,MACpD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/route.js

@@ -0,0 +1,109 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.invoice.view"] }
+};
+const querySchema = z.object({
+  page: z.coerce.number().int().min(1).default(1),
+  pageSize: z.coerce.number().int().min(1).max(100).default(50),
+  status: z.enum(["draft", "posted", "paid", "void"]).optional(),
+  billRunId: z.string().uuid().optional(),
+  billAccountId: z.string().uuid().optional(),
+  testRun: z.coerce.boolean().optional(),
+  search: z.string().optional()
+}).passthrough();
+async function GET(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = auth.orgId ?? null;
+    if (!organizationId) {
+      return NextResponse.json(
+        { error: "Organization scope required" },
+        { status: 403 }
+      );
+    }
+    const url = new URL(req.url);
+    const query = querySchema.parse(
+      Object.fromEntries(url.searchParams.entries())
+    );
+    const em = container.resolve("em").fork();
+    const whereClauses = [
+      "tenant_id = ?",
+      "organization_id = ?",
+      "deleted_at IS NULL",
+      "jsonb_exists(metadata, 'bill_run_id')"
+    ];
+    const params = [auth.tenantId, organizationId];
+    if (query.status) {
+      whereClauses.push("status = ?");
+      params.push(query.status);
+    }
+    if (query.billRunId) {
+      whereClauses.push("metadata->>'bill_run_id' = ?");
+      params.push(query.billRunId);
+    }
+    if (query.billAccountId) {
+      whereClauses.push("metadata->>'bill_account_id' = ?");
+      params.push(query.billAccountId);
+    }
+    if (typeof query.testRun === "boolean") {
+      if (query.testRun) {
+        whereClauses.push("metadata->>'test_run' = 'true'");
+      } else {
+        whereClauses.push("(metadata->>'test_run' IS NULL OR metadata->>'test_run' != 'true')");
+      }
+    }
+    if (typeof query.search === "string" && query.search.trim()) {
+      whereClauses.push("invoice_number ILIKE ?");
+      params.push(`%${query.search.trim().replace(/[%_]/g, (m) => `\\${m}`)}%`);
+    }
+    const whereSql = whereClauses.join(" AND ");
+    const countRows = await em.execute(
+      `SELECT COUNT(*)::int AS total FROM sales_invoices WHERE ${whereSql}`,
+      params
+    );
+    const total = countRows?.[0]?.total ?? 0;
+    const offset = (query.page - 1) * query.pageSize;
+    const itemRows = await em.execute(
+      `SELECT id, invoice_number, status, currency_code, issue_date, due_date,
+              subtotal_net_amount, grand_total_net_amount, grand_total_gross_amount,
+              paid_total_amount, outstanding_amount, metadata, created_at, updated_at
+       FROM sales_invoices
+       WHERE ${whereSql}
+       ORDER BY created_at DESC
+       LIMIT ? OFFSET ?`,
+      [...params, query.pageSize, offset]
+    );
+    return NextResponse.json({
+      items: itemRows,
+      total,
+      page: query.page,
+      pageSize: query.pageSize,
+      totalPages: total === 0 ? 1 : Math.ceil(total / query.pageSize)
+    });
+  } catch (err) {
+    console.error("[billing/invoices.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "List billing-managed invoices",
+      description: "Returns a paginated list of `core/sales` invoices that the billing engine emitted (matched via `metadata->>'bill_run_id'` presence). Supports status / billRunId / billAccountId / testRun / invoice_number search filters."
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/billing/api/invoices/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\n\n/**\n * `GET /api/billing/invoices`\n *\n * Lists `core/sales` invoices that the billing engine emitted (i.e.\n * carry `metadata.bill_run_id`). Hand-rolled rather than wrapped via\n * `makeCrudRoute` because the filter predicate is a JSONB\n * `metadata->>'bill_run_id' IS NOT NULL` check that doesn't map\n * cleanly onto the factory's `where`-shaped filter API, and the\n * entity itself is owned by `core/sales` \u2014 keeping the surface\n * read-only and hand-rolled avoids surprising the cross-module\n * reviewer.\n *\n * Filters:\n *   - `status` \u2014 draft / posted / paid / void\n *   - `billRunId` \u2014 exact match on `metadata->>'bill_run_id'`\n *   - `billAccountId` \u2014 exact match on `metadata->>'bill_account_id'`\n *   - `testRun=true|false` \u2014 flips the `metadata->>'test_run'` filter\n *   - `search` \u2014 substring on invoice_number\n *\n * Sort: started_at DESC (most recent first). Pagination: standard\n * page / pageSize (capped at 100).\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.invoice.view'] },\n}\n\nconst querySchema = z\n  .object({\n    page: z.coerce.number().int().min(1).default(1),\n    pageSize: z.coerce.number().int().min(1).max(100).default(50),\n    status: z.enum(['draft', 'posted', 'paid', 'void']).optional(),\n    billRunId: z.string().uuid().optional(),\n    billAccountId: z.string().uuid().optional(),\n    testRun: z.coerce.boolean().optional(),\n    search: z.string().optional(),\n  })\n  .passthrough()\n\ntype BillingInvoiceRow = {\n  id: string\n  invoice_number: string\n  status: string | null\n  currency_code: string\n  issue_date: string | null\n  due_date: string | null\n  subtotal_net_amount: string\n  grand_total_net_amount: string\n  grand_total_gross_amount: string\n  paid_total_amount: string\n  outstanding_amount: string\n  metadata: Record<string, unknown> | null\n  created_at: string\n  updated_at: string\n}\n\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json(\n        { error: 'Organization scope required' },\n        { status: 403 },\n      )\n    }\n\n    const url = new URL(req.url)\n    const query = querySchema.parse(\n      Object.fromEntries(url.searchParams.entries()),\n    )\n\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    // Build the predicate. `jsonb_exists(metadata, 'bill_run_id')` is\n    // the function form of the JSONB `?` \"key exists\" operator \u2014 the\n    // operator form cannot be used here because `em.execute` treats a\n    // literal `?` as a positional parameter placeholder. Keeps us\n    // narrow to billing-managed invoices, never bleeding into invoices\n    // written by other modules.\n    const whereClauses: string[] = [\n      'tenant_id = ?',\n      'organization_id = ?',\n      'deleted_at IS NULL',\n      \"jsonb_exists(metadata, 'bill_run_id')\",\n    ]\n    const params: unknown[] = [auth.tenantId, organizationId]\n\n    if (query.status) {\n      whereClauses.push('status = ?')\n      params.push(query.status)\n    }\n    if (query.billRunId) {\n      whereClauses.push(\"metadata->>'bill_run_id' = ?\")\n      params.push(query.billRunId)\n    }\n    if (query.billAccountId) {\n      whereClauses.push(\"metadata->>'bill_account_id' = ?\")\n      params.push(query.billAccountId)\n    }\n    if (typeof query.testRun === 'boolean') {\n      if (query.testRun) {\n        whereClauses.push(\"metadata->>'test_run' = 'true'\")\n      } else {\n        whereClauses.push(\"(metadata->>'test_run' IS NULL OR metadata->>'test_run' != 'true')\")\n      }\n    }\n    if (typeof query.search === 'string' && query.search.trim()) {\n      whereClauses.push('invoice_number ILIKE ?')\n      params.push(`%${query.search.trim().replace(/[%_]/g, (m) => `\\\\${m}`)}%`)\n    }\n\n    const whereSql = whereClauses.join(' AND ')\n    const countRows = (await em.execute(\n      `SELECT COUNT(*)::int AS total FROM sales_invoices WHERE ${whereSql}`,\n      params,\n    )) as unknown as Array<{ total: number }>\n    const total = countRows?.[0]?.total ?? 0\n\n    const offset = (query.page - 1) * query.pageSize\n    const itemRows = (await em.execute(\n      `SELECT id, invoice_number, status, currency_code, issue_date, due_date,\n              subtotal_net_amount, grand_total_net_amount, grand_total_gross_amount,\n              paid_total_amount, outstanding_amount, metadata, created_at, updated_at\n       FROM sales_invoices\n       WHERE ${whereSql}\n       ORDER BY created_at DESC\n       LIMIT ? OFFSET ?`,\n      [...params, query.pageSize, offset],\n    )) as unknown as BillingInvoiceRow[]\n\n    return NextResponse.json({\n      items: itemRows,\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n      totalPages: total === 0 ? 1 : Math.ceil(total / query.pageSize),\n    })\n  } catch (err) {\n    console.error('[billing/invoices.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'List billing-managed invoices',\n      description:\n        'Returns a paginated list of `core/sales` invoices that the ' +\n        'billing engine emitted (matched via `metadata->>\\'bill_run_id\\'` ' +\n        'presence). Supports status / billRunId / billAccountId / testRun ' +\n        '/ invoice_number search filters.',\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAyB5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EAC9C,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC5D,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,QAAQ,MAAM,CAAC,EAAE,SAAS;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACtC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,OAAO,QAAQ,EAAE,SAAS;AAAA,EACrC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAC9B,CAAC,EACA,YAAY;AAmBf,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,YAAY;AAAA,MACxB,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC;AAAA,IAC/C;AAEA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAQ3D,UAAM,eAAyB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,SAAoB,CAAC,KAAK,UAAU,cAAc;AAExD,QAAI,MAAM,QAAQ;AAChB,mBAAa,KAAK,YAAY;AAC9B,aAAO,KAAK,MAAM,MAAM;AAAA,IAC1B;AACA,QAAI,MAAM,WAAW;AACnB,mBAAa,KAAK,8BAA8B;AAChD,aAAO,KAAK,MAAM,SAAS;AAAA,IAC7B;AACA,QAAI,MAAM,eAAe;AACvB,mBAAa,KAAK,kCAAkC;AACpD,aAAO,KAAK,MAAM,aAAa;AAAA,IACjC;AACA,QAAI,OAAO,MAAM,YAAY,WAAW;AACtC,UAAI,MAAM,SAAS;AACjB,qBAAa,KAAK,gCAAgC;AAAA,MACpD,OAAO;AACL,qBAAa,KAAK,oEAAoE;AAAA,MACxF;AAAA,IACF;AACA,QAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,GAAG;AAC3D,mBAAa,KAAK,wBAAwB;AAC1C,aAAO,KAAK,IAAI,MAAM,OAAO,KAAK,EAAE,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,GAAG;AAAA,IAC1E;AAEA,UAAM,WAAW,aAAa,KAAK,OAAO;AAC1C,UAAM,YAAa,MAAM,GAAG;AAAA,MAC1B,2DAA2D,QAAQ;AAAA,MACnE;AAAA,IACF;AACA,UAAM,QAAQ,YAAY,CAAC,GAAG,SAAS;AAEvC,UAAM,UAAU,MAAM,OAAO,KAAK,MAAM;AACxC,UAAM,WAAY,MAAM,GAAG;AAAA,MACzB;AAAA;AAAA;AAAA;AAAA,eAIS,QAAQ;AAAA;AAAA;AAAA,MAGjB,CAAC,GAAG,QAAQ,MAAM,UAAU,MAAM;AAAA,IACpC;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,MACP;AAAA,MACA,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB,YAAY,UAAU,IAAI,IAAI,KAAK,KAAK,QAAQ,MAAM,QAAQ;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,0BAA0B,GAAG;AAC3C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,IAIJ;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/items/bulk/route.js

@@ -0,0 +1,74 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { BillingItem } from "../../../data/entities.js";
+import { billingEntityIds } from "../../../data/entityIds.js";
+import { billingItemBulkCreateSchema } from "../../../data/validators.js";
+import { createBillingCrudOpenApi } from "../../openapi.js";
+const routeMetadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.item.manage"] }
+};
+const metadata = routeMetadata;
+const bulkResultEntrySchema = z.object({
+  sourceRef: z.string().nullable(),
+  id: z.string().uuid(),
+  deduplicated: z.boolean()
+});
+const bulkResponseSchema = z.object({
+  created: z.number().int().nonnegative(),
+  deduplicated: z.number().int().nonnegative(),
+  items: z.array(bulkResultEntrySchema)
+});
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: BillingItem,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.item,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    create: {
+      commandId: "billing.items.bulk_create",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        return billingItemBulkCreateSchema.parse(scoped);
+      },
+      response: ({ result }) => ({
+        created: result?.created ?? 0,
+        deduplicated: result?.deduplicated ?? 0,
+        items: result?.items ?? []
+      }),
+      status: 200
+    }
+  }
+});
+const POST = crud.POST;
+const openApi = createBillingCrudOpenApi({
+  resourceName: "BillingItemBulkCreate",
+  pluralName: "BillingItemBulkCreates",
+  querySchema: z.object({}).passthrough(),
+  listResponseSchema: z.object({ items: z.array(z.unknown()) }),
+  create: {
+    schema: billingItemBulkCreateSchema,
+    responseSchema: bulkResponseSchema,
+    description: "Batch-creates up to 500 Billing Items under one scope envelope. Idempotent per `sourceRef` (one batched existence check). Returns `{ created, deduplicated, items: [{ sourceRef, id, deduplicated }] }`. Always HTTP 200 \u2014 duplicates are reported in the body, never an error."
+  }
+});
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/items/bulk/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/items/bulk/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillingItem } from '../../../data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingItemBulkCreateSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/items/bulk` \u2014 batch-create Billing Items.\n *\n * One scope envelope, up to 500 item payloads. Idempotent per\n * `source_ref` with a *single* batched existence check, then a\n * single flush. The CPQ connector's subscription-activated /\n * -amended / -renewed subscribers are the primary callers \u2014 bulk\n * collapses what used to be one `billing.items.create` round-trip\n * per charge.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst bulkResultEntrySchema = z.object({\n  sourceRef: z.string().nullable(),\n  id: z.string().uuid(),\n  deduplicated: z.boolean(),\n})\n\nconst bulkResponseSchema = z.object({\n  created: z.number().int().nonnegative(),\n  deduplicated: z.number().int().nonnegative(),\n  items: z.array(bulkResultEntrySchema),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingItem,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.item,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.items.bulk_create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingItemBulkCreateSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        created: result?.created ?? 0,\n        deduplicated: result?.deduplicated ?? 0,\n        items: result?.items ?? [],\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingItemBulkCreate',\n  pluralName: 'BillingItemBulkCreates',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingItemBulkCreateSchema,\n    responseSchema: bulkResponseSchema,\n    description:\n      'Batch-creates up to 500 Billing Items under one scope envelope. ' +\n      'Idempotent per `sourceRef` (one batched existence check). ' +\n      'Returns `{ created, deduplicated, items: [{ sourceRef, id, ' +\n      'deduplicated }] }`. Always HTTP 200 \u2014 duplicates are reported ' +\n      'in the body, never an error.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,mBAAmB;AAC5B,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,gCAAgC;AAazC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,QAAQ;AAC1B,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC3C,OAAO,EAAE,MAAM,qBAAqB;AACtC,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,4BAA4B,MAAM,MAAM;AAAA,MACjD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,SAAS,QAAQ,WAAW;AAAA,QAC5B,cAAc,QAAQ,gBAAgB;AAAA,QACtC,OAAO,QAAQ,SAAS,CAAC;AAAA,MAC3B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
+  "names": []
+}