@dainamite/billing 0.19.0 → 0.21.0

package/dist/modules/billing/api/items/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/billing/api/items/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillingAccount, BillingItem } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingItemCreateSchema,\n  billingItemListQuerySchema,\n  billingItemUpdateSchema,\n} from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\n// \u2500\u2500\u2500 Auth / RBAC \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.item.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n}\n\nexport const metadata = routeMetadata\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billingItemListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_account_name: z.string().nullable(),\n  type: z.string(),\n  bill_start_date: z.string(),\n  bill_end_date: z.string().nullable(),\n  description: z.string(),\n  rate_json: z.record(z.string(), z.unknown()),\n  uom_code: z.string().nullable(),\n  subscription_id: z.string().nullable(),\n  subscription_item_id: z.string().nullable(),\n  source_ref: z.string().nullable(),\n  currency_mismatch: z.boolean(),\n  billed_to_date: z.string().nullable(),\n  is_active: z.boolean(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\n// Response for create includes `deduplicated` so integrators can tell\n// whether their POST resulted in a new row or hit the idempotency\n// short-circuit on `source_ref`.\nconst itemCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  deduplicated: z.boolean(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingItem,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingItemListQuerySchema,\n    entityId: billingEntityIds.item,\n    fields: [\n      'id',\n      'bill_account_id',\n      'type',\n      'bill_start_date',\n      'bill_end_date',\n      'description',\n      'rate_json',\n      'uom_code',\n      'subscription_id',\n      'subscription_item_id',\n      'source_ref',\n      'currency_mismatch',\n      'billed_to_date',\n      'is_active',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      billStartDate: 'bill_start_date',\n      billEndDate: 'bill_end_date',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single item through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.search === 'string' && query.search.trim()) {\n        const pattern = `%${query.search.trim().replace(/[%_]/g, (m) => `\\\\${m}`)}%`\n        filters.description = { $ilike: pattern }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.type === 'string' && query.type) {\n        filters.type = { $eq: query.type }\n      }\n      if (typeof query.subscriptionId === 'string' && query.subscriptionId) {\n        filters.subscription_id = { $eq: query.subscriptionId }\n      }\n      if (typeof query.isActive === 'boolean') {\n        filters.is_active = { $eq: query.isActive }\n      }\n      // `activeAt=<date>` returns items whose validity window covers\n      // the supplied date (Bill Run engine uses the same predicate\n      // shape internally \u2014 see spec \"Mid-cycle recurring items\").\n      if (query.activeAt instanceof Date) {\n        filters.bill_start_date = { $lte: query.activeAt }\n        filters.$or = [\n          { bill_end_date: null },\n          { bill_end_date: { $gte: query.activeAt } },\n        ]\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.items.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingItemCreateSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        id: result?.id ?? null,\n        deduplicated: Boolean(result?.deduplicated),\n      }),\n      // Idempotent create returns 200 (vs 201). The spec mandates\n      // duplicate POST returns the existing row, never creates a\n      // duplicate \u2014 keeping the success status consistent makes\n      // client-side handling trivial.\n      status: 200,\n    },\n    update: {\n      commandId: 'billing.items.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingItemUpdateSchema.parse(scoped)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'billing.items.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        // The factory hands delete a `{ body, query }` envelope \u2014 the\n        // id may arrive in either, depending on the caller.\n        const envelope = (raw ?? {}) as {\n          body?: Record<string, unknown>\n          query?: Record<string, unknown>\n        }\n        const body = envelope.body ?? {}\n        const query = envelope.query ?? {}\n        const scoped = withScopedPayload(body, ctx, translate)\n        const id =\n          (typeof body.id === 'string' && body.id) ||\n          (typeof query.id === 'string' && query.id) ||\n          null\n        if (!id) {\n          throw new Error('id is required')\n        }\n        return {\n          id,\n          tenantId: (scoped as { tenantId?: string }).tenantId,\n          organizationId: (scoped as { organizationId?: string }).organizationId,\n        }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    // Items reference their account by FK id only; the list + detail UI\n    // wants the human-readable account name. One bounded query\n    // (\u2264 pageSize ids) resolves it after the page is fetched.\n    afterList: async (payload: unknown, ctx: unknown) => {\n      const items = ((payload as { items?: unknown[] } | null)?.items ?? []) as Array<\n        Record<string, unknown>\n      >\n      const accountIds = Array.from(\n        new Set(\n          items\n            .map((row) => row.bill_account_id)\n            .filter((v): v is string => typeof v === 'string' && v.length > 0),\n        ),\n      )\n      if (accountIds.length === 0) return\n      const em = (ctx as { container: AwilixContainer }).container.resolve<EntityManager>('em')\n      const accounts = await em.find(BillingAccount, { id: { $in: accountIds } })\n      const nameById = new Map(\n        accounts.map((a) => [String(a.id), a.name] as [string, unknown]),\n      )\n      for (const row of items) {\n        row.bill_account_name = nameById.get(String(row.bill_account_id)) ?? null\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingItem',\n  pluralName: 'BillingItems',\n  querySchema: billingItemListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingItemListItemSchema),\n  create: {\n    schema: billingItemCreateSchema,\n    responseSchema: itemCreateResponseSchema,\n    description:\n      'Creates a billing item. Idempotent via `sourceRef`: re-POSTing the same ' +\n      '`(tenantId, billAccountId, sourceRef)` returns the existing row with ' +\n      '`deduplicated: true` instead of creating a duplicate. The unique index ' +\n      'on `(tenant_id, bill_account_id, source_ref)` is the correctness gate.',\n  },\n  update: {\n    schema: billingItemUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description:\n      'Updates a billing item. `type` and `sourceRef` are immutable \u2014 to change ' +\n      'either, soft-delete the item and create a new one.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Soft-deletes a billing item.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,gBAAgB,mBAAmB;AAC5C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACxE;AAEO,MAAM,WAAW;AAGxB,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,mBAAmB,EAAE,QAAQ;AAAA,EAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,WAAW,EAAE,QAAQ;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAKD,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,QAAQ;AAC1B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,eAAe;AAAA,MACf,aAAa;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAG1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,GAAG;AAC3D,cAAM,UAAU,IAAI,MAAM,OAAO,KAAK,EAAE,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACzE,gBAAQ,cAAc,EAAE,QAAQ,QAAQ;AAAA,MAC1C;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,gBAAQ,OAAO,EAAE,KAAK,MAAM,KAAK;AAAA,MACnC;AACA,UAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,gBAAgB;AACpE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,eAAe;AAAA,MACxD;AACA,UAAI,OAAO,MAAM,aAAa,WAAW;AACvC,gBAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAAA,MAC5C;AAIA,UAAI,MAAM,oBAAoB,MAAM;AAClC,gBAAQ,kBAAkB,EAAE,MAAM,MAAM,SAAS;AACjD,gBAAQ,MAAM;AAAA,UACZ,EAAE,eAAe,KAAK;AAAA,UACtB,EAAE,eAAe,EAAE,MAAM,MAAM,SAAS,EAAE;AAAA,QAC5C;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,MAAM;AAAA,QAClB,cAAc,QAAQ,QAAQ,YAAY;AAAA,MAC5C;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAGhD,cAAM,WAAY,OAAO,CAAC;AAI1B,cAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,cAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,cAAM,SAAS,kBAAkB,MAAM,KAAK,SAAS;AACrD,cAAM,KACH,OAAO,KAAK,OAAO,YAAY,KAAK,MACpC,OAAO,MAAM,OAAO,YAAY,MAAM,MACvC;AACF,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,MAAM,gBAAgB;AAAA,QAClC;AACA,eAAO;AAAA,UACL;AAAA,UACA,UAAW,OAAiC;AAAA,UAC5C,gBAAiB,OAAuC;AAAA,QAC1D;AAAA,MACF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAAA;AAAA;AAAA,IAIL,WAAW,OAAO,SAAkB,QAAiB;AACnD,YAAM,QAAU,SAA0C,SAAS,CAAC;AAGpE,YAAM,aAAa,MAAM;AAAA,QACvB,IAAI;AAAA,UACF,MACG,IAAI,CAAC,QAAQ,IAAI,eAAe,EAChC,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,QACrE;AAAA,MACF;AACA,UAAI,WAAW,WAAW,EAAG;AAC7B,YAAM,KAAM,IAAuC,UAAU,QAAuB,IAAI;AACxF,YAAM,WAAW,MAAM,GAAG,KAAK,gBAAgB,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;AAC1E,YAAM,WAAW,IAAI;AAAA,QACnB,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAsB;AAAA,MACjE;AACA,iBAAW,OAAO,OAAO;AACvB,YAAI,oBAAoB,SAAS,IAAI,OAAO,IAAI,eAAe,CAAC,KAAK;AAAA,MACvE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAEvB,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,yBAAyB;AAAA,EAC3E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAIJ;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAEJ;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillingAccount, BillingItem } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingItemCreateSchema,\n  billingItemListQuerySchema,\n  billingItemUpdateSchema,\n} from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\n// \u2500\u2500\u2500 Auth / RBAC \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.item.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['billing.item.manage'] },\n}\n\nexport const metadata = routeMetadata\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billingItemListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_account_name: z.string().nullable(),\n  /** Spec F (F2): the owning account's currency and mode, for the form. */\n  bill_account_currency: z.string().nullable(),\n  bill_account_mode: z.enum(['postpaid', 'prepaid']).nullable(),\n  type: z.string(),\n  bill_start_date: z.string(),\n  bill_end_date: z.string().nullable(),\n  description: z.string(),\n  rate_json: z.record(z.string(), z.unknown()),\n  uom_code: z.string().nullable(),\n  subscription_id: z.string().nullable(),\n  subscription_item_id: z.string().nullable(),\n  source_ref: z.string().nullable(),\n  currency_mismatch: z.boolean(),\n  billed_to_date: z.string().nullable(),\n  charge_timing: z.enum(['in_advance', 'in_arrears']),\n  prorate: z.boolean(),\n  tax_rate: z.union([z.string(), z.number()]),\n  price_basis: z.enum(['net', 'gross']),\n  is_active: z.boolean(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\n// Response for create includes `deduplicated` so integrators can tell\n// whether their POST resulted in a new row or hit the idempotency\n// short-circuit on `source_ref`.\nconst itemCreateResponseSchema = z.object({\n  id: z.string().uuid().nullable(),\n  deduplicated: z.boolean(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingItem,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingItemListQuerySchema,\n    entityId: billingEntityIds.item,\n    fields: [\n      'id',\n      'bill_account_id',\n      'type',\n      'bill_start_date',\n      'bill_end_date',\n      'description',\n      'rate_json',\n      'uom_code',\n      'subscription_id',\n      'subscription_item_id',\n      'source_ref',\n      'currency_mismatch',\n      'billed_to_date',\n      'charge_timing',\n      'prorate',\n      'tax_rate',\n      'price_basis',\n      'is_active',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      billStartDate: 'bill_start_date',\n      billEndDate: 'bill_end_date',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single item through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.search === 'string' && query.search.trim()) {\n        const pattern = `%${query.search.trim().replace(/[%_]/g, (m) => `\\\\${m}`)}%`\n        filters.description = { $ilike: pattern }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.type === 'string' && query.type) {\n        filters.type = { $eq: query.type }\n      }\n      if (typeof query.subscriptionId === 'string' && query.subscriptionId) {\n        filters.subscription_id = { $eq: query.subscriptionId }\n      }\n      if (typeof query.isActive === 'boolean') {\n        filters.is_active = { $eq: query.isActive }\n      }\n      // `activeAt=<date>` returns items whose validity window covers\n      // the supplied date (Bill Run engine uses the same predicate\n      // shape internally \u2014 see spec \"Mid-cycle recurring items\").\n      if (query.activeAt instanceof Date) {\n        filters.bill_start_date = { $lte: query.activeAt }\n        filters.$or = [\n          { bill_end_date: null },\n          { bill_end_date: { $gte: query.activeAt } },\n        ]\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.items.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingItemCreateSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        id: result?.id ?? null,\n        deduplicated: Boolean(result?.deduplicated),\n      }),\n      // Idempotent create returns 200 (vs 201). The spec mandates\n      // duplicate POST returns the existing row, never creates a\n      // duplicate \u2014 keeping the success status consistent makes\n      // client-side handling trivial.\n      status: 200,\n    },\n    update: {\n      commandId: 'billing.items.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingItemUpdateSchema.parse(scoped)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'billing.items.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        // The factory hands delete a `{ body, query }` envelope \u2014 the\n        // id may arrive in either, depending on the caller.\n        const envelope = (raw ?? {}) as {\n          body?: Record<string, unknown>\n          query?: Record<string, unknown>\n        }\n        const body = envelope.body ?? {}\n        const query = envelope.query ?? {}\n        const scoped = withScopedPayload(body, ctx, translate)\n        const id =\n          (typeof body.id === 'string' && body.id) ||\n          (typeof query.id === 'string' && query.id) ||\n          null\n        if (!id) {\n          throw new Error('id is required')\n        }\n        return {\n          id,\n          tenantId: (scoped as { tenantId?: string }).tenantId,\n          organizationId: (scoped as { organizationId?: string }).organizationId,\n        }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    // Items reference their account by FK id only; the list + detail UI\n    // wants the account name, currency and mode. One bounded query\n    // (\u2264 pageSize ids) resolves it after the page is fetched.\n    afterList: async (payload: unknown, ctx: unknown) => {\n      const items = ((payload as { items?: unknown[] } | null)?.items ?? []) as Array<\n        Record<string, unknown>\n      >\n      const accountIds = Array.from(\n        new Set(\n          items\n            .map((row) => row.bill_account_id)\n            .filter((v): v is string => typeof v === 'string' && v.length > 0),\n        ),\n      )\n      if (accountIds.length === 0) return\n      const em = (ctx as { container: AwilixContainer }).container.resolve<EntityManager>('em')\n      const accounts = await em.find(BillingAccount, { id: { $in: accountIds } })\n      const byId = new Map(accounts.map((a) => [String(a.id), a] as const))\n      for (const row of items) {\n        const account = byId.get(String(row.bill_account_id))\n        row.bill_account_name = account?.name ?? null\n        row.bill_account_currency = account?.currencyCode ?? null\n        row.bill_account_mode = account?.billingMode ?? null\n      }\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingItem',\n  pluralName: 'BillingItems',\n  querySchema: billingItemListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingItemListItemSchema),\n  create: {\n    schema: billingItemCreateSchema,\n    responseSchema: itemCreateResponseSchema,\n    description:\n      'Creates a billing item. Idempotent via `sourceRef`: re-POSTing the same ' +\n      '`(tenantId, billAccountId, sourceRef)` returns the existing row with ' +\n      '`deduplicated: true` instead of creating a duplicate. The unique index ' +\n      'on `(tenant_id, bill_account_id, source_ref)` is the correctness gate. ' +\n      'Recurring items accept `chargeTiming` (`in_advance` default | `in_arrears`) and ' +\n      '`prorate` (default true); other types reject non-default values (400).',\n  },\n  update: {\n    schema: billingItemUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description:\n      'Updates a billing item. `type` and `sourceRef` are immutable \u2014 to change ' +\n      'either, soft-delete the item and create a new one. `chargeTiming` / `prorate` ' +\n      'may change at any time on recurring items \u2014 billing resumes from `billed_to_date`, ' +\n      'so no day is billed twice.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Soft-deletes a billing item.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,gBAAgB,mBAAmB;AAC5C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AAAA,EACjE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AAAA,EACnE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACxE;AAEO,MAAM,WAAW;AAGxB,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEvC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,mBAAmB,EAAE,KAAK,CAAC,YAAY,SAAS,CAAC,EAAE,SAAS;AAAA,EAC5D,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO;AAAA,EAC1B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,mBAAmB,EAAE,QAAQ;AAAA,EAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,eAAe,EAAE,KAAK,CAAC,cAAc,YAAY,CAAC;AAAA,EAClD,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AAAA,EAC1C,aAAa,EAAE,KAAK,CAAC,OAAO,OAAO,CAAC;AAAA,EACpC,WAAW,EAAE,QAAQ;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAKD,MAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,cAAc,EAAE,QAAQ;AAC1B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,eAAe;AAAA,MACf,aAAa;AAAA,IACf;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAG1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,GAAG;AAC3D,cAAM,UAAU,IAAI,MAAM,OAAO,KAAK,EAAE,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACzE,gBAAQ,cAAc,EAAE,QAAQ,QAAQ;AAAA,MAC1C;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,SAAS,YAAY,MAAM,MAAM;AAChD,gBAAQ,OAAO,EAAE,KAAK,MAAM,KAAK;AAAA,MACnC;AACA,UAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,gBAAgB;AACpE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,eAAe;AAAA,MACxD;AACA,UAAI,OAAO,MAAM,aAAa,WAAW;AACvC,gBAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAAA,MAC5C;AAIA,UAAI,MAAM,oBAAoB,MAAM;AAClC,gBAAQ,kBAAkB,EAAE,MAAM,MAAM,SAAS;AACjD,gBAAQ,MAAM;AAAA,UACZ,EAAE,eAAe,KAAK;AAAA,UACtB,EAAE,eAAe,EAAE,MAAM,MAAM,SAAS,EAAE;AAAA,QAC5C;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,IAAI,QAAQ,MAAM;AAAA,QAClB,cAAc,QAAQ,QAAQ,YAAY;AAAA,MAC5C;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAGhD,cAAM,WAAY,OAAO,CAAC;AAI1B,cAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,cAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,cAAM,SAAS,kBAAkB,MAAM,KAAK,SAAS;AACrD,cAAM,KACH,OAAO,KAAK,OAAO,YAAY,KAAK,MACpC,OAAO,MAAM,OAAO,YAAY,MAAM,MACvC;AACF,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,MAAM,gBAAgB;AAAA,QAClC;AACA,eAAO;AAAA,UACL;AAAA,UACA,UAAW,OAAiC;AAAA,UAC5C,gBAAiB,OAAuC;AAAA,QAC1D;AAAA,MACF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAAA;AAAA;AAAA,IAIL,WAAW,OAAO,SAAkB,QAAiB;AACnD,YAAM,QAAU,SAA0C,SAAS,CAAC;AAGpE,YAAM,aAAa,MAAM;AAAA,QACvB,IAAI;AAAA,UACF,MACG,IAAI,CAAC,QAAQ,IAAI,eAAe,EAChC,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC;AAAA,QACrE;AAAA,MACF;AACA,UAAI,WAAW,WAAW,EAAG;AAC7B,YAAM,KAAM,IAAuC,UAAU,QAAuB,IAAI;AACxF,YAAM,WAAW,MAAM,GAAG,KAAK,gBAAgB,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;AAC1E,YAAM,OAAO,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAU,CAAC;AACpE,iBAAW,OAAO,OAAO;AACvB,cAAM,UAAU,KAAK,IAAI,OAAO,IAAI,eAAe,CAAC;AACpD,YAAI,oBAAoB,SAAS,QAAQ;AACzC,YAAI,wBAAwB,SAAS,gBAAgB;AACrD,YAAI,oBAAoB,SAAS,eAAe;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAEvB,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,yBAAyB;AAAA,EAC3E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAMJ;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAIJ;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/payment-imports/[id]/route.js

@@ -0,0 +1,49 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  organizationScopeRequiredResponse,
+  resolveActiveOrganizationId
+} from "@open-mercato/shared/lib/auth/organizationScope";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.payment.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const organizationId = resolveActiveOrganizationId(auth);
+    if (!organizationId) return organizationScopeRequiredResponse();
+    const { id } = await params;
+    const em = container.resolve("em").fork();
+    const rows = await em.execute(
+      `SELECT id, file_name, row_count, counts, errors, user_id, created_at
+         FROM billing_payment_imports
+        WHERE id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL`,
+      [id, auth.tenantId, organizationId]
+    );
+    if (!rows?.length) return NextResponse.json({ error: "Import not found" }, { status: 404 });
+    return NextResponse.json({ import: rows[0] });
+  } catch (err) {
+    console.error("[billing/payment-imports/[id].GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Get a payment import batch",
+      description: "Counts per outcome and the row errors (line number + message, capped at 200).",
+      responses: [{ status: 200, description: "`{ import }`" }],
+      errors: [{ status: 404, description: "Import not found" }]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payment-imports/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payment-imports/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  organizationScopeRequiredResponse,\n  resolveActiveOrganizationId,\n} from '@open-mercato/shared/lib/auth/organizationScope'\n\n/** `GET /api/billing/payment-imports/[id]` \u2014 one upload batch with its row errors (Spec C). */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.payment.view'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const organizationId = resolveActiveOrganizationId(auth)\n    if (!organizationId) return organizationScopeRequiredResponse()\n    const { id } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n    const rows = (await em.execute(\n      `SELECT id, file_name, row_count, counts, errors, user_id, created_at\n         FROM billing_payment_imports\n        WHERE id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL`,\n      [id, auth.tenantId, organizationId],\n    )) as unknown as Array<Record<string, unknown>>\n    if (!rows?.length) return NextResponse.json({ error: 'Import not found' }, { status: 404 })\n    return NextResponse.json({ import: rows[0] })\n  } catch (err) {\n    console.error('[billing/payment-imports/[id].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get a payment import batch',\n      description: 'Counts per outcome and the row errors (line number + message, capped at 200).',\n      responses: [{ status: 200, description: '`{ import }`' }],\n      errors: [{ status: 404, description: 'Import not found' }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChG,UAAM,iBAAiB,4BAA4B,IAAI;AACvD,QAAI,CAAC,eAAgB,QAAO,kCAAkC;AAC9D,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,OAAQ,MAAM,GAAG;AAAA,MACrB;AAAA;AAAA;AAAA,MAGA,CAAC,IAAI,KAAK,UAAU,cAAc;AAAA,IACpC;AACA,QAAI,CAAC,MAAM,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC1F,WAAO,aAAa,KAAK,EAAE,QAAQ,KAAK,CAAC,EAAE,CAAC;AAAA,EAC9C,SAAS,KAAK;AACZ,YAAQ,MAAM,sCAAsC,GAAG;AACvD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,eAAe,CAAC;AAAA,MACxD,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,CAAC;AAAA,IAC3D;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payment-imports/route.js

@@ -0,0 +1,57 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  organizationScopeRequiredResponse,
+  resolveActiveOrganizationId
+} from "@open-mercato/shared/lib/auth/organizationScope";
+import { buildQueryParams } from "@open-mercato/shared/lib/crud/query-params";
+import { billingPaymentImportListQuerySchema } from "../../data/validators.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.payment.view"] }
+};
+async function GET(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const organizationId = resolveActiveOrganizationId(auth);
+    if (!organizationId) return organizationScopeRequiredResponse();
+    const query = billingPaymentImportListQuerySchema.parse(buildQueryParams(new URL(req.url).searchParams));
+    const em = container.resolve("em").fork();
+    const where = ["tenant_id = ?", "organization_id = ?", "deleted_at IS NULL"];
+    const params = [auth.tenantId, organizationId];
+    if (query.id) {
+      where.push("id = ?");
+      params.push(query.id);
+    }
+    const totalRows = await em.execute(`SELECT COUNT(*)::int AS total FROM billing_payment_imports WHERE ${where.join(" AND ")}`, params);
+    const total = totalRows?.[0]?.total ?? 0;
+    const items = await em.execute(
+      `SELECT id, file_name, row_count, counts, user_id, created_at
+         FROM billing_payment_imports WHERE ${where.join(" AND ")}
+        ORDER BY created_at DESC LIMIT ? OFFSET ?`,
+      [...params, query.pageSize, (query.page - 1) * query.pageSize]
+    );
+    return NextResponse.json({ items, total, page: query.page, pageSize: query.pageSize, totalPages: total === 0 ? 1 : Math.ceil(total / query.pageSize) });
+  } catch (err) {
+    console.error("[billing/payment-imports.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "List payment import batches",
+      description: "CSV uploads with counts per outcome (allocated, partially_allocated, matched, unmatched, duplicate, rejected).",
+      query: billingPaymentImportListQuerySchema
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payment-imports/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/billing/api/payment-imports/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  organizationScopeRequiredResponse,\n  resolveActiveOrganizationId,\n} from '@open-mercato/shared/lib/auth/organizationScope'\nimport { buildQueryParams } from '@open-mercato/shared/lib/crud/query-params'\nimport { billingPaymentImportListQuerySchema } from '../../data/validators'\n\n/** `GET /api/billing/payment-imports` \u2014 CSV upload batches, newest first (Spec C, C-D4). */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.payment.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const organizationId = resolveActiveOrganizationId(auth)\n    if (!organizationId) return organizationScopeRequiredResponse()\n    const query = billingPaymentImportListQuerySchema.parse(buildQueryParams(new URL(req.url).searchParams))\n    const em = (container.resolve('em') as EntityManager).fork()\n    const where = ['tenant_id = ?', 'organization_id = ?', 'deleted_at IS NULL']\n    const params: unknown[] = [auth.tenantId, organizationId]\n    if (query.id) {\n      where.push('id = ?')\n      params.push(query.id)\n    }\n    const totalRows = (await em.execute(`SELECT COUNT(*)::int AS total FROM billing_payment_imports WHERE ${where.join(' AND ')}`, params)) as unknown as Array<{ total: number }>\n    const total = totalRows?.[0]?.total ?? 0\n    const items = await em.execute(\n      `SELECT id, file_name, row_count, counts, user_id, created_at\n         FROM billing_payment_imports WHERE ${where.join(' AND ')}\n        ORDER BY created_at DESC LIMIT ? OFFSET ?`,\n      [...params, query.pageSize, (query.page - 1) * query.pageSize],\n    )\n    return NextResponse.json({ items, total, page: query.page, pageSize: query.pageSize, totalPages: total === 0 ? 1 : Math.ceil(total / query.pageSize) })\n  } catch (err) {\n    console.error('[billing/payment-imports.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'List payment import batches',\n      description: 'CSV uploads with counts per outcome (allocated, partially_allocated, matched, unmatched, duplicate, rejected).',\n      query: billingPaymentImportListQuerySchema,\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,wBAAwB;AACjC,SAAS,2CAA2C;AAI7C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChG,UAAM,iBAAiB,4BAA4B,IAAI;AACvD,QAAI,CAAC,eAAgB,QAAO,kCAAkC;AAC9D,UAAM,QAAQ,oCAAoC,MAAM,iBAAiB,IAAI,IAAI,IAAI,GAAG,EAAE,YAAY,CAAC;AACvG,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,QAAQ,CAAC,iBAAiB,uBAAuB,oBAAoB;AAC3E,UAAM,SAAoB,CAAC,KAAK,UAAU,cAAc;AACxD,QAAI,MAAM,IAAI;AACZ,YAAM,KAAK,QAAQ;AACnB,aAAO,KAAK,MAAM,EAAE;AAAA,IACtB;AACA,UAAM,YAAa,MAAM,GAAG,QAAQ,oEAAoE,MAAM,KAAK,OAAO,CAAC,IAAI,MAAM;AACrI,UAAM,QAAQ,YAAY,CAAC,GAAG,SAAS;AACvC,UAAM,QAAQ,MAAM,GAAG;AAAA,MACrB;AAAA,8CACwC,MAAM,KAAK,OAAO,CAAC;AAAA;AAAA,MAE3D,CAAC,GAAG,QAAQ,MAAM,WAAW,MAAM,OAAO,KAAK,MAAM,QAAQ;AAAA,IAC/D;AACA,WAAO,aAAa,KAAK,EAAE,OAAO,OAAO,MAAM,MAAM,MAAM,UAAU,MAAM,UAAU,YAAY,UAAU,IAAI,IAAI,KAAK,KAAK,QAAQ,MAAM,QAAQ,EAAE,CAAC;AAAA,EACxJ,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAiC,GAAG;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,IACT;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/[id]/route.js

@@ -0,0 +1,60 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  organizationScopeRequiredResponse,
+  resolveActiveOrganizationId
+} from "@open-mercato/shared/lib/auth/organizationScope";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.payment.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const organizationId = resolveActiveOrganizationId(auth);
+    if (!organizationId) return organizationScopeRequiredResponse();
+    const { id } = await params;
+    const em = container.resolve("em").fork();
+    const rows = await em.execute(
+      `SELECT p.*, a.name AS bill_account_name, a.billing_mode AS bill_account_mode
+         FROM billing_payments p
+         LEFT JOIN billing_accounts a ON a.id = p.bill_account_id AND a.tenant_id = p.tenant_id
+        WHERE p.id = ? AND p.tenant_id = ? AND p.organization_id = ? AND p.deleted_at IS NULL`,
+      [id, auth.tenantId, organizationId]
+    );
+    if (!rows?.length) return NextResponse.json({ error: "Payment not found" }, { status: 404 });
+    const allocations = await em.execute(
+      `SELECT al.id, al.invoice_id, i.number AS invoice_number, i.document_type, i.status AS invoice_status,
+              al.amount, al.currency_code, al.allocated_by, al.user_id, al.created_at
+         FROM billing_allocations al
+         LEFT JOIN billing_invoices i ON i.id = al.invoice_id
+        WHERE al.source_type = 'payment' AND al.source_id = ? AND al.tenant_id = ? AND al.organization_id = ?
+          AND al.deleted_at IS NULL
+        ORDER BY al.created_at ASC`,
+      [id, auth.tenantId, organizationId]
+    );
+    return NextResponse.json({ payment: rows[0], allocations });
+  } catch (err) {
+    console.error("[billing/payments/[id].GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Get a billing payment",
+      description: "The payment (incl. match reason, account, top-up link) and its active allocations.",
+      responses: [{ status: 200, description: "`{ payment, allocations[] }`" }],
+      errors: [{ status: 404, description: "Payment not found in this organization" }]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/[id]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/%5Bid%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  organizationScopeRequiredResponse,\n  resolveActiveOrganizationId,\n} from '@open-mercato/shared/lib/auth/organizationScope'\n\n/**\n * `GET /api/billing/payments/[id]` \u2014 one payment with its active\n * allocations (invoice number, amount, who / how allocated) \u2014 Spec C.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.payment.view'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const organizationId = resolveActiveOrganizationId(auth)\n    if (!organizationId) return organizationScopeRequiredResponse()\n    const { id } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n    const rows = (await em.execute(\n      `SELECT p.*, a.name AS bill_account_name, a.billing_mode AS bill_account_mode\n         FROM billing_payments p\n         LEFT JOIN billing_accounts a ON a.id = p.bill_account_id AND a.tenant_id = p.tenant_id\n        WHERE p.id = ? AND p.tenant_id = ? AND p.organization_id = ? AND p.deleted_at IS NULL`,\n      [id, auth.tenantId, organizationId],\n    )) as unknown as Array<Record<string, unknown>>\n    if (!rows?.length) return NextResponse.json({ error: 'Payment not found' }, { status: 404 })\n    const allocations = await em.execute(\n      `SELECT al.id, al.invoice_id, i.number AS invoice_number, i.document_type, i.status AS invoice_status,\n              al.amount, al.currency_code, al.allocated_by, al.user_id, al.created_at\n         FROM billing_allocations al\n         LEFT JOIN billing_invoices i ON i.id = al.invoice_id\n        WHERE al.source_type = 'payment' AND al.source_id = ? AND al.tenant_id = ? AND al.organization_id = ?\n          AND al.deleted_at IS NULL\n        ORDER BY al.created_at ASC`,\n      [id, auth.tenantId, organizationId],\n    )\n    return NextResponse.json({ payment: rows[0], allocations })\n  } catch (err) {\n    console.error('[billing/payments/[id].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get a billing payment',\n      description: 'The payment (incl. match reason, account, top-up link) and its active allocations.',\n      responses: [{ status: 200, description: '`{ payment, allocations[] }`' }],\n      errors: [{ status: 404, description: 'Payment not found in this organization' }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAOA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChG,UAAM,iBAAiB,4BAA4B,IAAI;AACvD,QAAI,CAAC,eAAgB,QAAO,kCAAkC;AAC9D,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,OAAQ,MAAM,GAAG;AAAA,MACrB;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,IAAI,KAAK,UAAU,cAAc;AAAA,IACpC;AACA,QAAI,CAAC,MAAM,OAAQ,QAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3F,UAAM,cAAc,MAAM,GAAG;AAAA,MAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,IAAI,KAAK,UAAU,cAAc;AAAA,IACpC;AACA,WAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC,GAAG,YAAY,CAAC;AAAA,EAC5D,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,+BAA+B,CAAC;AAAA,MACxE,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,yCAAyC,CAAC;AAAA,IACjF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/allocate/route.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.manage"] }
+};
+const bodySchema = z.object({ paymentId: z.string().uuid(), allocations: z.array(z.object({ invoiceId: z.string().uuid(), amount: z.coerce.number().positive() })).min(1).max(100) });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.payments.allocate",
+    bodySchema,
+    resourceKind: "billing.payment",
+    resourceId: (body) => body.paymentId,
+    logLabel: "billing/payments/allocate.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Allocate a payment to invoices",
+      description: "Allocates amounts of a payment to open invoices / debit memos of its account. Invoice paid / outstanding / status are recomputed from allocations.",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "Updated payment state" }],
+      errors: [
+        { status: 409, description: "`billing.allocation.exceeds_outstanding` / `insufficient_unallocated` / `account_mismatch` / `currency_mismatch` / `invoice_not_open`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/allocate/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/allocate/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/payments/allocate` \u2014 allocate a payment to invoices (Spec C). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.manage'] },\n}\n\nconst bodySchema = z.object({ paymentId: z.string().uuid(), allocations: z.array(z.object({ invoiceId: z.string().uuid(), amount: z.coerce.number().positive() })).min(1).max(100) })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.payments.allocate',\n    bodySchema,\n    resourceKind: 'billing.payment',\n    resourceId: (body) => body.paymentId,\n    logLabel: 'billing/payments/allocate.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Allocate a payment to invoices',\n      description: 'Allocates amounts of a payment to open invoices / debit memos of its account. Invoice paid / outstanding / status are recomputed from allocations.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: 'Updated payment state' }],\n      errors: [\n        { status: 409, description: '`billing.allocation.exceeds_outstanding` / `insufficient_unallocated` / `account_mismatch` / `currency_mismatch` / `invoice_not_open`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,GAAG,QAAQ,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAEpL,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,CAAC;AAAA,MACjE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,wIAAwI;AAAA,MACtK;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/assign/route.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.manage"] }
+};
+const bodySchema = z.object({ paymentId: z.string().uuid(), billAccountId: z.string().uuid() });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.payments.assign",
+    bodySchema,
+    resourceKind: "billing.payment",
+    resourceId: (body) => body.paymentId,
+    logLabel: "billing/payments/assign.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Assign a payment to a billing account",
+      description: "Assigns an unmatched payment to a postpaid account (status \u2192 matched) and applies it as credit to the account's open invoices, oldest due first.",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "Updated payment state" }],
+      errors: [
+        { status: 404, description: "Payment or account not found" },
+        { status: 409, description: "`billing.payment.not_unmatched` / `prepaid_account` / `currency_mismatch`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/assign/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/assign/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/payments/assign` \u2014 assign a payment to a billing account (Spec C). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.manage'] },\n}\n\nconst bodySchema = z.object({ paymentId: z.string().uuid(), billAccountId: z.string().uuid() })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.payments.assign',\n    bodySchema,\n    resourceKind: 'billing.payment',\n    resourceId: (body) => body.paymentId,\n    logLabel: 'billing/payments/assign.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Assign a payment to a billing account',\n      description: 'Assigns an unmatched payment to a postpaid account (status \u2192 matched) and applies it as credit to the account\\'s open invoices, oldest due first.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: 'Updated payment state' }],\n      errors: [\n        { status: 404, description: 'Payment or account not found' },\n        { status: 409, description: '`billing.payment.not_unmatched` / `prepaid_account` / `currency_mismatch`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,GAAG,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE9F,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,CAAC;AAAA,MACjE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,+BAA+B;AAAA,QAC3D,EAAE,QAAQ,KAAK,aAAa,4EAA4E;AAAA,MAC1G;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/convert-to-topup/route.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.manage", "billing.topup.create"] }
+};
+const bodySchema = z.object({ paymentId: z.string().uuid(), billAccountId: z.string().uuid() });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.payments.convert_to_topup",
+    bodySchema,
+    resourceKind: "billing.payment",
+    resourceId: (body) => body.paymentId,
+    logLabel: "billing/payments/convert-to-topup.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Convert a payment into a prepaid top-up",
+      description: "Turns an unmatched payment into a captured top-up of a prepaid account (balance credit, transaction and VAT receipt). Terminal; idempotent per payment.",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "Updated payment state" }],
+      errors: [
+        { status: 409, description: "`billing.payment.not_prepaid` / `currency_mismatch` / `not_convertible`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/convert-to-topup/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/convert-to-topup/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/payments/convert-to-topup` \u2014 convert a payment into a prepaid top-up (Spec C). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.manage', 'billing.topup.create'] },\n}\n\nconst bodySchema = z.object({ paymentId: z.string().uuid(), billAccountId: z.string().uuid() })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.payments.convert_to_topup',\n    bodySchema,\n    resourceKind: 'billing.payment',\n    resourceId: (body) => body.paymentId,\n    logLabel: 'billing/payments/convert-to-topup.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Convert a payment into a prepaid top-up',\n      description: 'Turns an unmatched payment into a captured top-up of a prepaid account (balance credit, transaction and VAT receipt). Terminal; idempotent per payment.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: 'Updated payment state' }],\n      errors: [\n        { status: 409, description: '`billing.payment.not_prepaid` / `currency_mismatch` / `not_convertible`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,0BAA0B,sBAAsB,EAAE;AACjG;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,GAAG,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE9F,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,CAAC;AAAA,MACjE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0EAA0E;AAAA,MACxG;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/ignore/route.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.manage"] }
+};
+const bodySchema = z.object({ paymentId: z.string().uuid() });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.payments.ignore",
+    bodySchema,
+    resourceKind: "billing.payment",
+    resourceId: (body) => body.paymentId,
+    logLabel: "billing/payments/ignore.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Ignore a payment",
+      description: "Excludes an unallocated payment from matching and credit (fees, misdirected transfers). Reversible with restore.",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "Updated payment state" }],
+      errors: [
+        { status: 409, description: "`billing.payment.has_allocations`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/ignore/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/ignore/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/payments/ignore` \u2014 ignore a payment (Spec C). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.manage'] },\n}\n\nconst bodySchema = z.object({ paymentId: z.string().uuid() })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.payments.ignore',\n    bodySchema,\n    resourceKind: 'billing.payment',\n    resourceId: (body) => body.paymentId,\n    logLabel: 'billing/payments/ignore.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Ignore a payment',\n      description: 'Excludes an unallocated payment from matching and credit (fees, misdirected transfers). Reversible with restore.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: 'Updated payment state' }],\n      errors: [\n        { status: 409, description: '`billing.payment.has_allocations`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE5D,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,CAAC;AAAA,MACjE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,oCAAoC;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/import/route.js

@@ -0,0 +1,63 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { PAYMENT_IMPORT_MAX_BYTES } from "../../../data/validators.js";
+import { readRequestBody, runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.import"] }
+};
+const bodySchema = z.object({
+  fileName: z.string().trim().min(1).max(255),
+  content: z.string().max(PAYMENT_IMPORT_MAX_BYTES)
+});
+async function readUpload(req) {
+  const declared = Number(req.headers.get("content-length") ?? "0");
+  if (declared > PAYMENT_IMPORT_MAX_BYTES + 64 * 1024) {
+    return NextResponse.json({ error: "The file is larger than 2 MB", code: "billing.payment_import.too_large" }, { status: 413 });
+  }
+  if ((req.headers.get("content-type") ?? "").includes("multipart/form-data")) {
+    const form = await req.formData();
+    const file = form.get("file");
+    if (!file || typeof file === "string") return { fileName: "", content: "" };
+    if (file.size > PAYMENT_IMPORT_MAX_BYTES) {
+      return NextResponse.json({ error: "The file is larger than 2 MB", code: "billing.payment_import.too_large" }, { status: 413 });
+    }
+    return { fileName: file.name || "payments.csv", content: await file.text() };
+  }
+  return readRequestBody(req);
+}
+async function POST(req) {
+  const body = await readUpload(req.clone());
+  if (body instanceof Response) return body;
+  return runCommandRoute(
+    req,
+    {
+      commandId: "billing.payments.import",
+      bodySchema,
+      resourceKind: "billing.payment_import",
+      resourceId: () => null,
+      logLabel: "billing/payments/import.POST"
+    },
+    body
+  );
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Import bank payments from CSV",
+      description: 'CSV header `date,amount,currency,reference,payer_name,payer_account` (UTF-8, comma separated, "." decimals, amount > 0, \u2264 5,000 rows, \u2264 2 MB). Each new row becomes a payment, matched by the invoice number in `reference`; re-uploaded lines are counted as duplicates. Send multipart `file` or JSON `{ fileName, content }`.',
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "`{ importId, fileName, rowCount, counts, errors[] }`" }],
+      errors: [
+        { status: 400, description: "`billing.payment_import.invalid_file` (header / empty / too many rows)" },
+        { status: 413, description: "`billing.payment_import.too_large`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/import/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/import/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { PAYMENT_IMPORT_MAX_BYTES } from '../../../data/validators'\nimport { readRequestBody, runCommandRoute } from '../../../lib/commandRoute'\n\n/**\n * `POST /api/billing/payments/import` \u2014 bank CSV upload (Spec C, C-D4).\n * Accepts `multipart/form-data` (`file`) or JSON `{ fileName, content }`.\n * 413 over 2 MB. Returns the import summary (counts per outcome + row errors).\n */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.import'] },\n}\n\nconst bodySchema = z.object({\n  fileName: z.string().trim().min(1).max(255),\n  content: z.string().max(PAYMENT_IMPORT_MAX_BYTES),\n})\n\nasync function readUpload(req: Request): Promise<unknown | Response> {\n  const declared = Number(req.headers.get('content-length') ?? '0')\n  if (declared > PAYMENT_IMPORT_MAX_BYTES + 64 * 1024) {\n    return NextResponse.json({ error: 'The file is larger than 2 MB', code: 'billing.payment_import.too_large' }, { status: 413 })\n  }\n  if ((req.headers.get('content-type') ?? '').includes('multipart/form-data')) {\n    const form = await req.formData()\n    const file = form.get('file')\n    if (!file || typeof file === 'string') return { fileName: '', content: '' }\n    if (file.size > PAYMENT_IMPORT_MAX_BYTES) {\n      return NextResponse.json({ error: 'The file is larger than 2 MB', code: 'billing.payment_import.too_large' }, { status: 413 })\n    }\n    return { fileName: file.name || 'payments.csv', content: await file.text() }\n  }\n  return readRequestBody(req)\n}\n\nexport async function POST(req: Request) {\n  const body = await readUpload(req.clone())\n  if (body instanceof Response) return body\n  return runCommandRoute(\n    req,\n    {\n      commandId: 'billing.payments.import',\n      bodySchema,\n      resourceKind: 'billing.payment_import',\n      resourceId: () => null,\n      logLabel: 'billing/payments/import.POST',\n    },\n    body,\n  )\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Import bank payments from CSV',\n      description:\n        'CSV header `date,amount,currency,reference,payer_name,payer_account` (UTF-8, comma separated, ' +\n        '\".\" decimals, amount > 0, \u2264 5,000 rows, \u2264 2 MB). Each new row becomes a payment, matched by the ' +\n        'invoice number in `reference`; re-uploaded lines are counted as duplicates. Send multipart `file` or ' +\n        'JSON `{ fileName, content }`.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: '`{ importId, fileName, rowCount, counts, errors[] }`' }],\n      errors: [\n        { status: 400, description: '`billing.payment_import.invalid_file` (header / empty / too many rows)' },\n        { status: 413, description: '`billing.payment_import.too_large`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,gCAAgC;AACzC,SAAS,iBAAiB,uBAAuB;AAQ1C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC1C,SAAS,EAAE,OAAO,EAAE,IAAI,wBAAwB;AAClD,CAAC;AAED,eAAe,WAAW,KAA2C;AACnE,QAAM,WAAW,OAAO,IAAI,QAAQ,IAAI,gBAAgB,KAAK,GAAG;AAChE,MAAI,WAAW,2BAA2B,KAAK,MAAM;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,MAAM,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/H;AACA,OAAK,IAAI,QAAQ,IAAI,cAAc,KAAK,IAAI,SAAS,qBAAqB,GAAG;AAC3E,UAAM,OAAO,MAAM,IAAI,SAAS;AAChC,UAAM,OAAO,KAAK,IAAI,MAAM;AAC5B,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO,EAAE,UAAU,IAAI,SAAS,GAAG;AAC1E,QAAI,KAAK,OAAO,0BAA0B;AACxC,aAAO,aAAa,KAAK,EAAE,OAAO,gCAAgC,MAAM,mCAAmC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/H;AACA,WAAO,EAAE,UAAU,KAAK,QAAQ,gBAAgB,SAAS,MAAM,KAAK,KAAK,EAAE;AAAA,EAC7E;AACA,SAAO,gBAAgB,GAAG;AAC5B;AAEA,eAAsB,KAAK,KAAc;AACvC,QAAM,OAAO,MAAM,WAAW,IAAI,MAAM,CAAC;AACzC,MAAI,gBAAgB,SAAU,QAAO;AACrC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX;AAAA,MACA,cAAc;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAIF,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,uDAAuD,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yEAAyE;AAAA,QACrG,EAAE,QAAQ,KAAK,aAAa,qCAAqC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/payments/restore/route.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.payment.manage"] }
+};
+const bodySchema = z.object({ paymentId: z.string().uuid() });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.payments.restore",
+    bodySchema,
+    resourceKind: "billing.payment",
+    resourceId: (body) => body.paymentId,
+    logLabel: "billing/payments/restore.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Restore an ignored payment",
+      description: "Restores an ignored payment to matched (credit applied again) or unmatched.",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "Updated payment state" }],
+      errors: [
+        { status: 409, description: "`billing.payment.not_ignored`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/payments/restore/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/payments/restore/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/payments/restore` \u2014 restore an ignored payment (Spec C). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.payment.manage'] },\n}\n\nconst bodySchema = z.object({ paymentId: z.string().uuid() })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.payments.restore',\n    bodySchema,\n    resourceKind: 'billing.payment',\n    resourceId: (body) => body.paymentId,\n    logLabel: 'billing/payments/restore.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Restore an ignored payment',\n      description: 'Restores an ignored payment to matched (credit applied again) or unmatched.',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: 'Updated payment state' }],\n      errors: [\n        { status: 409, description: '`billing.payment.not_ignored`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACzE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE5D,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,wBAAwB,CAAC;AAAA,MACjE,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}