@dainamite/billing 0.19.0 → 0.21.0

package/dist/modules/billing/api/runs/route.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { BillRun } from "../../data/entities.js";
+import { BillingRun } from "../../data/entities.js";
 import { billingEntityIds } from "../../data/entityIds.js";
 import {
   billingRunListQuerySchema,
@@ -20,7 +20,6 @@ const billRunListItemSchema = z.object({
   parent_run_id: z.string().uuid().nullable(),
   dry_run: z.boolean(),
   test_mode: z.boolean(),
-  catch_up: z.boolean(),
   scoped_account_ids: z.array(z.string().uuid()).nullable(),
   as_of_date: z.string(),
   started_at: z.string().nullable(),
@@ -41,7 +40,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: BillRun,
+    entity: BillingRun,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",
@@ -56,7 +55,6 @@ const crud = makeCrudRoute({
       "parent_run_id",
       "dry_run",
       "test_mode",
-      "catch_up",
       "scoped_account_ids",
       "as_of_date",
       "started_at",
@@ -85,6 +83,14 @@ const crud = makeCrudRoute({
       if (typeof query.status === "string") filters.status = { $eq: query.status };
       if (typeof query.triggeredBy === "string") filters.triggered_by = { $eq: query.triggeredBy };
       if (typeof query.parentRunId === "string") filters.parent_run_id = { $eq: query.parentRunId };
+      if (query.mode === "real") {
+        filters.dry_run = { $eq: false };
+        filters.test_mode = { $eq: false };
+      } else if (query.mode === "test") {
+        filters.test_mode = { $eq: true };
+      } else if (query.mode === "dry") {
+        filters.dry_run = { $eq: true };
+      }
       if (query.asOfDateFrom instanceof Date) {
         filters.as_of_date = Object.assign(
           filters.as_of_date ?? {},
@@ -131,7 +137,7 @@ const openApi = createBillingCrudOpenApi({
   create: {
     schema: billingRunTriggerSchema,
     responseSchema: triggerResponseSchema,
-    description: "Triggers a Bill Run. `mode=real` (default) persists drafts and advances state; `mode=test` persists test-flagged drafts without advancing state; `mode=dry` computes everything in memory and persists nothing. Returns HTTP 409 (`billing.run.lock_busy`) when another run is in flight for the same tenant."
+    description: "Triggers a Bill Run. Every run bills **all due cycles** up to `asOfDate` \u2014 one draft invoice per bill date (no catch-up flag; a legacy `catchUp` field is ignored). `mode=real` (default) persists drafts and advances state; `mode=test` persists test-flagged drafts for every cycle without advancing state; `mode=dry` simulates every cycle in memory and persists nothing. Per-cycle results are on each outcome's `cycles`. Returns HTTP 409 (`billing.run.lock_busy`) when another run is in flight for the same tenant."
   }
 });
 export {

package/dist/modules/billing/api/runs/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/billing/api/runs/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillRun } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingRunListQuerySchema,\n  billingRunTriggerSchema,\n} from '../../data/validators'\nimport { createBillingCrudOpenApi, createPagedListResponseSchema } from '../openapi'\n\n/**\n * `/api/billing/runs` \u2014 GET (history list) + POST (manual trigger).\n *\n * The triggered-by enum gate:\n *   - `trigger` feature is required for `real` mode (which mutates\n *     production state).\n *   - `dry_run` feature alone is enough for `mode=dry` (finance auditor\n *     persona). The route-level RBAC check on POST requires `trigger`,\n *     so dry-run callers must hold both `dry_run` AND `trigger` here \u2014\n *     a deliberate tightening over what the spec persona table suggests.\n *\n *   If we ever want auditors to drive dry-runs without holding `trigger`,\n *   we split into two routes (POST `/runs` for real, POST `/runs/dry` for\n *   dry). Postponed until an operator actually asks.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.run.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billRunListItemSchema = z.object({\n  id: z.string().uuid(),\n  triggered_by: z.string(),\n  parent_run_id: z.string().uuid().nullable(),\n  dry_run: z.boolean(),\n  test_mode: z.boolean(),\n  catch_up: z.boolean(),\n  scoped_account_ids: z.array(z.string().uuid()).nullable(),\n  as_of_date: z.string(),\n  started_at: z.string().nullable(),\n  finished_at: z.string().nullable(),\n  status: z.string(),\n  summary: z.record(z.string(), z.unknown()).nullable(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst triggerResponseSchema = z.object({\n  billRunId: z.string().uuid(),\n  status: z.string(),\n  outcomesCount: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillRun,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingRunListQuerySchema,\n    entityId: billingEntityIds.run,\n    fields: [\n      'id',\n      'triggered_by',\n      'parent_run_id',\n      'dry_run',\n      'test_mode',\n      'catch_up',\n      'scoped_account_ids',\n      'as_of_date',\n      'started_at',\n      'finished_at',\n      'status',\n      'summary',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      startedAt: 'started_at',\n      finishedAt: 'finished_at',\n      asOfDate: 'as_of_date',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single Bill Run through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      // Run ids are UUIDs \u2014 search matches a pasted id exactly.\n      if (typeof query.search === 'string' && /^[0-9a-fA-F-]{36}$/.test(query.search.trim())) {\n        filters.id = { $eq: query.search.trim() }\n      }\n      if (typeof query.status === 'string') filters.status = { $eq: query.status }\n      if (typeof query.triggeredBy === 'string') filters.triggered_by = { $eq: query.triggeredBy }\n      if (typeof query.parentRunId === 'string') filters.parent_run_id = { $eq: query.parentRunId }\n      if (query.asOfDateFrom instanceof Date) {\n        filters.as_of_date = Object.assign(\n          (filters.as_of_date as Record<string, unknown>) ?? {},\n          { $gte: query.asOfDateFrom },\n        )\n      }\n      if (query.asOfDateTo instanceof Date) {\n        filters.as_of_date = Object.assign(\n          (filters.as_of_date as Record<string, unknown>) ?? {},\n          { $lte: query.asOfDateTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.runs.trigger',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingRunTriggerSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        billRunId: result?.billRunId ?? null,\n        status: result?.status ?? null,\n        outcomesCount: result?.outcomesCount ?? 0,\n      }),\n      status: 201,\n    },\n    // Runs are append-only \u2014 no update / delete on this surface. A\n    // failed run is corrected by triggering a `retry-failed` (separate\n    // route).\n  },\n})\n\nconst { POST } = crud\nexport { POST }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillRun',\n  pluralName: 'BillRuns',\n  querySchema: billingRunListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billRunListItemSchema),\n  create: {\n    schema: billingRunTriggerSchema,\n    responseSchema: triggerResponseSchema,\n    description:\n      'Triggers a Bill Run. `mode=real` (default) persists drafts and ' +\n      'advances state; `mode=test` persists test-flagged drafts without ' +\n      'advancing state; `mode=dry` computes everything in memory and ' +\n      'persists nothing. Returns HTTP 409 (`billing.run.lock_busy`) when ' +\n      'another run is in flight for the same tenant.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,eAAe;AACxB,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,qCAAqC;AAkBxE,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAGxB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,QAAQ;AAAA,EACnB,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACxD,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC9C,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAG1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AAEA,UAAI,OAAO,MAAM,WAAW,YAAY,qBAAqB,KAAK,MAAM,OAAO,KAAK,CAAC,GAAG;AACtF,gBAAQ,KAAK,EAAE,KAAK,MAAM,OAAO,KAAK,EAAE;AAAA,MAC1C;AACA,UAAI,OAAO,MAAM,WAAW,SAAU,SAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAC3E,UAAI,OAAO,MAAM,gBAAgB,SAAU,SAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAC3F,UAAI,OAAO,MAAM,gBAAgB,SAAU,SAAQ,gBAAgB,EAAE,KAAK,MAAM,YAAY;AAC5F,UAAI,MAAM,wBAAwB,MAAM;AACtC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,aAAa;AAAA,QAC7B;AAAA,MACF;AACA,UAAI,MAAM,sBAAsB,MAAM;AACpC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,WAAW;AAAA,QAC3B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,QAAQ,QAAQ,UAAU;AAAA,QAC1B,eAAe,QAAQ,iBAAiB;AAAA,MAC1C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA;AAAA;AAAA;AAAA,EAIF;AACF,CAAC;AAED,MAAM,EAAE,KAAK,IAAI;AAEV,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillingRun } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingRunListQuerySchema,\n  billingRunTriggerSchema,\n} from '../../data/validators'\nimport { createBillingCrudOpenApi, createPagedListResponseSchema } from '../openapi'\n\n/**\n * `/api/billing/runs` \u2014 GET (history list) + POST (manual trigger).\n *\n * The triggered-by enum gate:\n *   - `trigger` feature is required for `real` mode (which mutates\n *     production state).\n *   - `dry_run` feature alone is enough for `mode=dry` (finance auditor\n *     persona). The route-level RBAC check on POST requires `trigger`,\n *     so dry-run callers must hold both `dry_run` AND `trigger` here \u2014\n *     a deliberate tightening over what the spec persona table suggests.\n *\n *   If we ever want auditors to drive dry-runs without holding `trigger`,\n *   we split into two routes (POST `/runs` for real, POST `/runs/dry` for\n *   dry). Postponed until an operator actually asks.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.run.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billRunListItemSchema = z.object({\n  id: z.string().uuid(),\n  triggered_by: z.string(),\n  parent_run_id: z.string().uuid().nullable(),\n  dry_run: z.boolean(),\n  test_mode: z.boolean(),\n  scoped_account_ids: z.array(z.string().uuid()).nullable(),\n  as_of_date: z.string(),\n  started_at: z.string().nullable(),\n  finished_at: z.string().nullable(),\n  status: z.string(),\n  summary: z.record(z.string(), z.unknown()).nullable(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst triggerResponseSchema = z.object({\n  billRunId: z.string().uuid(),\n  status: z.string(),\n  outcomesCount: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingRun,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingRunListQuerySchema,\n    entityId: billingEntityIds.run,\n    fields: [\n      'id',\n      'triggered_by',\n      'parent_run_id',\n      'dry_run',\n      'test_mode',\n      'scoped_account_ids',\n      'as_of_date',\n      'started_at',\n      'finished_at',\n      'status',\n      'summary',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      startedAt: 'started_at',\n      finishedAt: 'finished_at',\n      asOfDate: 'as_of_date',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single Bill Run through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      // Run ids are UUIDs \u2014 search matches a pasted id exactly.\n      if (typeof query.search === 'string' && /^[0-9a-fA-F-]{36}$/.test(query.search.trim())) {\n        filters.id = { $eq: query.search.trim() }\n      }\n      if (typeof query.status === 'string') filters.status = { $eq: query.status }\n      if (typeof query.triggeredBy === 'string') filters.triggered_by = { $eq: query.triggeredBy }\n      if (typeof query.parentRunId === 'string') filters.parent_run_id = { $eq: query.parentRunId }\n      if (query.mode === 'real') {\n        filters.dry_run = { $eq: false }\n        filters.test_mode = { $eq: false }\n      } else if (query.mode === 'test') {\n        filters.test_mode = { $eq: true }\n      } else if (query.mode === 'dry') {\n        filters.dry_run = { $eq: true }\n      }\n      if (query.asOfDateFrom instanceof Date) {\n        filters.as_of_date = Object.assign(\n          (filters.as_of_date as Record<string, unknown>) ?? {},\n          { $gte: query.asOfDateFrom },\n        )\n      }\n      if (query.asOfDateTo instanceof Date) {\n        filters.as_of_date = Object.assign(\n          (filters.as_of_date as Record<string, unknown>) ?? {},\n          { $lte: query.asOfDateTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.runs.trigger',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingRunTriggerSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        billRunId: result?.billRunId ?? null,\n        status: result?.status ?? null,\n        outcomesCount: result?.outcomesCount ?? 0,\n      }),\n      status: 201,\n    },\n    // Runs are append-only \u2014 no update / delete on this surface. A\n    // failed run is corrected by triggering a `retry-failed` (separate\n    // route).\n  },\n})\n\nconst { POST } = crud\nexport { POST }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillRun',\n  pluralName: 'BillRuns',\n  querySchema: billingRunListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billRunListItemSchema),\n  create: {\n    schema: billingRunTriggerSchema,\n    responseSchema: triggerResponseSchema,\n    description:\n      'Triggers a Bill Run. Every run bills **all due cycles** up to `asOfDate` \u2014 one ' +\n      'draft invoice per bill date (no catch-up flag; a legacy `catchUp` field is ignored). ' +\n      '`mode=real` (default) persists drafts and advances state; `mode=test` persists ' +\n      'test-flagged drafts for every cycle without advancing state; `mode=dry` simulates ' +\n      'every cycle in memory and persists nothing. Per-cycle results are on each outcome\\'s ' +\n      '`cycles`. Returns HTTP 409 (`billing.run.lock_busy`) when another run is in flight ' +\n      'for the same tenant.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B,qCAAqC;AAkBxE,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAGxB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,cAAc,EAAE,OAAO;AAAA,EACvB,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,SAAS,EAAE,QAAQ;AAAA,EACnB,WAAW,EAAE,QAAQ;AAAA,EACrB,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EACxD,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO;AAAA,EACjB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,QAAQ,EAAE,OAAO;AAAA,EACjB,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC9C,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAG1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AAEA,UAAI,OAAO,MAAM,WAAW,YAAY,qBAAqB,KAAK,MAAM,OAAO,KAAK,CAAC,GAAG;AACtF,gBAAQ,KAAK,EAAE,KAAK,MAAM,OAAO,KAAK,EAAE;AAAA,MAC1C;AACA,UAAI,OAAO,MAAM,WAAW,SAAU,SAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAC3E,UAAI,OAAO,MAAM,gBAAgB,SAAU,SAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAC3F,UAAI,OAAO,MAAM,gBAAgB,SAAU,SAAQ,gBAAgB,EAAE,KAAK,MAAM,YAAY;AAC5F,UAAI,MAAM,SAAS,QAAQ;AACzB,gBAAQ,UAAU,EAAE,KAAK,MAAM;AAC/B,gBAAQ,YAAY,EAAE,KAAK,MAAM;AAAA,MACnC,WAAW,MAAM,SAAS,QAAQ;AAChC,gBAAQ,YAAY,EAAE,KAAK,KAAK;AAAA,MAClC,WAAW,MAAM,SAAS,OAAO;AAC/B,gBAAQ,UAAU,EAAE,KAAK,KAAK;AAAA,MAChC;AACA,UAAI,MAAM,wBAAwB,MAAM;AACtC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,aAAa;AAAA,QAC7B;AAAA,MACF;AACA,UAAI,MAAM,sBAAsB,MAAM;AACpC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,WAAW;AAAA,QAC3B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,wBAAwB,MAAM,MAAM;AAAA,MAC7C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,QAAQ,QAAQ,UAAU;AAAA,QAC1B,eAAe,QAAQ,iBAAiB;AAAA,MAC1C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA;AAAA;AAAA;AAAA,EAIF;AACF,CAAC;AAED,MAAM,EAAE,KAAK,IAAI;AAEV,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,qBAAqB;AAAA,EACvE,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAOJ;AACF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/settings/number-preview/route.js

@@ -0,0 +1,42 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { DOCUMENT_SERIES, renderNumber, sequenceScopeKey, validateMask } from "../../../lib/numbering.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.settings.view"] }
+};
+const querySchema = z.object({ mask: z.string().max(200), series: z.enum(DOCUMENT_SERIES).optional() });
+async function GET(req) {
+  const auth = await getAuthFromRequest(req);
+  if (!auth || !auth.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const parsed = querySchema.safeParse(Object.fromEntries(new URL(req.url).searchParams.entries()));
+  if (!parsed.success) {
+    return NextResponse.json({ error: "Invalid query" }, { status: 400 });
+  }
+  const errors = validateMask(parsed.data.mask);
+  if (errors.length > 0) return NextResponse.json({ valid: false, errors });
+  const today = /* @__PURE__ */ new Date();
+  return NextResponse.json({
+    valid: true,
+    errors: [],
+    example: renderNumber(parsed.data.mask, { seq: 1, issueDate: today }),
+    scopeKey: sequenceScopeKey(parsed.data.mask, today)
+  });
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Preview a document number mask",
+      description: "Validates a number mask and returns an example number for today and its counter scope."
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/settings/number-preview/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/settings/number-preview/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { DOCUMENT_SERIES, renderNumber, sequenceScopeKey, validateMask } from '../../../lib/numbering'\n\n/**\n * `GET /api/billing/settings/number-preview?mask=\u2026` \u2014 validates a number\n * mask and renders an example for today (sequence 1) plus the counter scope\n * it would use. Pure: no sequence is read or claimed.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.settings.view'] },\n}\n\nconst querySchema = z.object({ mask: z.string().max(200), series: z.enum(DOCUMENT_SERIES).optional() })\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth || !auth.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const parsed = querySchema.safeParse(Object.fromEntries(new URL(req.url).searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query' }, { status: 400 })\n  }\n  const errors = validateMask(parsed.data.mask)\n  if (errors.length > 0) return NextResponse.json({ valid: false, errors })\n  const today = new Date()\n  return NextResponse.json({\n    valid: true,\n    errors: [],\n    example: renderNumber(parsed.data.mask, { seq: 1, issueDate: today }),\n    scopeKey: sequenceScopeKey(parsed.data.mask, today),\n  })\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Preview a document number mask',\n      description: 'Validates a number mask and returns an example number for today and its counter scope.',\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,iBAAiB,cAAc,kBAAkB,oBAAoB;AAQvE,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AACvE;AAEA,MAAM,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,QAAQ,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,CAAC;AAEtG,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,SAAS,YAAY,UAAU,OAAO,YAAY,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,QAAQ,CAAC,CAAC;AAChG,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtE;AACA,QAAM,SAAS,aAAa,OAAO,KAAK,IAAI;AAC5C,MAAI,OAAO,SAAS,EAAG,QAAO,aAAa,KAAK,EAAE,OAAO,OAAO,OAAO,CAAC;AACxE,QAAM,QAAQ,oBAAI,KAAK;AACvB,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO;AAAA,IACP,QAAQ,CAAC;AAAA,IACT,SAAS,aAAa,OAAO,KAAK,MAAM,EAAE,KAAK,GAAG,WAAW,MAAM,CAAC;AAAA,IACpE,UAAU,iBAAiB,OAAO,KAAK,MAAM,KAAK;AAAA,EACpD,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,IACf;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/settings/route.js

@@ -0,0 +1,92 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { BillingSettings } from "../../data/entities.js";
+import { billingEntityIds } from "../../data/entityIds.js";
+import { billingSettingsUpdateSchema } from "../../data/validators.js";
+import { getBillingSettings, missingSellerFields, serializeBillingSettings } from "../../lib/billingSettings.js";
+import { isPaymentGatewayAvailable } from "../../lib/paymentGateway.js";
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.settings.view"] },
+  PUT: { requireAuth: true, requireFeatures: ["billing.settings.manage"] }
+};
+const metadata = routeMetadata;
+async function GET(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = auth.orgId ?? null;
+    if (!organizationId) {
+      return NextResponse.json({ error: "Organization scope required" }, { status: 403 });
+    }
+    const em = container.resolve("em").fork();
+    const settings = await getBillingSettings(em, { tenantId: auth.tenantId, organizationId });
+    const missing = missingSellerFields(settings);
+    return NextResponse.json({
+      settings: serializeBillingSettings(settings),
+      capabilities: { gatewayTopups: isPaymentGatewayAvailable(container) },
+      completeness: { ready: missing.length === 0, missing }
+    });
+  } catch (err) {
+    console.error("[billing/settings.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: BillingSettings,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.settings,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    update: {
+      commandId: "billing.settings.update",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        return billingSettingsUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+      },
+      response: ({ result }) => ({ settings: result })
+    }
+  }
+});
+const PUT = crud.PUT;
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Get billing settings",
+      description: "Billing settings of the caller organization (prepaid defaults, number masks per series, seller / bank / document fields, default payment terms and VAT rate, `prepaidTaxPoint` (`topup` = VAT on the top-up receipt, `consumption` = VAT on each prepaid debit)), `capabilities.gatewayTopups` and `completeness { ready, missing[] }` (posting needs `legalName`, `sellerAddress`, `taxId`, `iban`). The row is created with defaults on first read."
+    },
+    PUT: {
+      tags: ["Billing"],
+      summary: "Update billing settings",
+      description: "Partial update. Number masks use `{YYYY} {YY} {MM} {DD}` plus exactly one of `{SEQUENCE_NUM}` (never resets), `{SEQUENCE_NUM_YEAR}` (yearly \u2014 needs a year token) or `{SEQUENCE_NUM_MONTH}` (monthly \u2014 needs year + month), with an optional `:N` zero-pad. Invalid masks \u2192 400 with the mask error code. IBAN is normalised and mod-97 checked, BIC must be 8 or 11 characters; an empty string clears a text field.",
+      requestBody: { schema: billingSettingsUpdateSchema }
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/settings/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/billing/api/settings/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { BillingSettings } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingSettingsUpdateSchema } from '../../data/validators'\nimport { getBillingSettings, missingSellerFields, serializeBillingSettings } from '../../lib/billingSettings'\nimport { isPaymentGatewayAvailable } from '../../lib/paymentGateway'\n\n/**\n * `GET /api/billing/settings` \u2014 the caller organization's billing settings\n * (created with defaults on first read) plus runtime capabilities.\n * `PUT /api/billing/settings` \u2014 partial update via `billing.settings.update`.\n *\n * Spec 0: prepaid defaults (moved from core `configs`) and document number\n * masks. `capabilities.gatewayTopups` tells the UI whether online top-ups\n * are available (the `payment_gateways` module is optional, E-D1).\n * Spec B: seller / payment / document fields, plus `completeness` \u2014 posting\n * is blocked until the printable minimum (legal name, address, tax id, IBAN)\n * is filled.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.settings.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.settings.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json({ error: 'Organization scope required' }, { status: 403 })\n    }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const settings = await getBillingSettings(em, { tenantId: auth.tenantId, organizationId })\n    const missing = missingSellerFields(settings)\n    return NextResponse.json({\n      settings: serializeBillingSettings(settings),\n      capabilities: { gatewayTopups: isPaymentGatewayAvailable(container as never) },\n      completeness: { ready: missing.length === 0, missing },\n    })\n  } catch (err) {\n    console.error('[billing/settings.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingSettings,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.settings,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    update: {\n      commandId: 'billing.settings.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return billingSettingsUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: ({ result }) => ({ settings: result }),\n    },\n  },\n})\n\nexport const PUT = crud.PUT\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get billing settings',\n      description:\n        'Billing settings of the caller organization (prepaid defaults, number masks per series, ' +\n        'seller / bank / document fields, default payment terms and VAT rate, `prepaidTaxPoint` ' +\n        '(`topup` = VAT on the top-up receipt, `consumption` = VAT on each prepaid debit)), ' +\n        '`capabilities.gatewayTopups` and `completeness { ready, missing[] }` (posting needs ' +\n        '`legalName`, `sellerAddress`, `taxId`, `iban`). The row is created with defaults on first read.',\n    },\n    PUT: {\n      tags: ['Billing'],\n      summary: 'Update billing settings',\n      description:\n        'Partial update. Number masks use `{YYYY} {YY} {MM} {DD}` plus exactly one of ' +\n        '`{SEQUENCE_NUM}` (never resets), `{SEQUENCE_NUM_YEAR}` (yearly \u2014 needs a year token) or ' +\n        '`{SEQUENCE_NUM_MONTH}` (monthly \u2014 needs year + month), with an optional `:N` zero-pad. ' +\n        'Invalid masks \u2192 400 with the mask error code. IBAN is normalised and mod-97 checked, ' +\n        'BIC must be 8 or 11 characters; an empty string clears a text field.',\n      requestBody: { schema: billingSettingsUpdateSchema },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB,qBAAqB,gCAAgC;AAClF,SAAS,iCAAiC;AAe1C,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AACzE;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AACA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,MAAM,mBAAmB,IAAI,EAAE,UAAU,KAAK,UAAU,eAAe,CAAC;AACzF,UAAM,UAAU,oBAAoB,QAAQ;AAC5C,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU,yBAAyB,QAAQ;AAAA,MAC3C,cAAc,EAAE,eAAe,0BAA0B,SAAkB,EAAE;AAAA,MAC7E,cAAc,EAAE,OAAO,QAAQ,WAAW,GAAG,QAAQ;AAAA,IACvD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,0BAA0B,GAAG;AAC3C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MACvF;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,UAAU,OAAO;AAAA,IAChD;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,IAKJ;AAAA,IACA,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAKF,aAAa,EAAE,QAAQ,4BAA4B;AAAA,IACrD;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/statements/route.js

@@ -25,6 +25,8 @@ const billingStatementListItemSchema = z.object({
   total_adjustments: z.string(),
   closing_balance: z.string(),
   debit_breakdown: z.record(z.string(), z.unknown()).nullable(),
+  /** Spec F: per-rate VAT of the period's prepaid debits (empty when VAT is charged at top-up). */
+  vat_summary: z.array(z.object({ rate: z.string(), net: z.string(), tax: z.string(), gross: z.string() })).nullable(),
   status: z.string(),
   organization_id: z.string().uuid(),
   tenant_id: z.string().uuid(),
@@ -56,6 +58,7 @@ const crud = makeCrudRoute({
       "total_adjustments",
       "closing_balance",
       "debit_breakdown",
+      "vat_summary",
       "status",
       "organization_id",
       "tenant_id",

package/dist/modules/billing/api/statements/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/billing/api/statements/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { BillingStatement } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingStatementListQuerySchema } from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n} from '../openapi'\n\n/**\n * `GET /api/billing/statements` \u2014 paged consumption statements (SPEC-002 P3).\n * Filter by account, status, and a `period_end` window. `?id=` narrows to one\n * row for the detail page. Generation goes through\n * POST /api/billing/statements/generate.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.statement.view'] },\n}\n\nexport const metadata = routeMetadata\n\nconst billingStatementListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_run_id: z.string().uuid().nullable(),\n  period_start: z.string(),\n  period_end: z.string(),\n  currency_code: z.string(),\n  opening_balance: z.string(),\n  total_topups: z.string(),\n  total_usage: z.string(),\n  total_recurring: z.string(),\n  total_adjustments: z.string(),\n  closing_balance: z.string(),\n  debit_breakdown: z.record(z.string(), z.unknown()).nullable(),\n  status: z.string(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingStatement,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n  },\n  list: {\n    schema: billingStatementListQuerySchema,\n    entityId: billingEntityIds.statement,\n    fields: [\n      'id',\n      'bill_account_id',\n      'bill_run_id',\n      'period_start',\n      'period_end',\n      'currency_code',\n      'opening_balance',\n      'total_topups',\n      'total_usage',\n      'total_recurring',\n      'total_adjustments',\n      'closing_balance',\n      'debit_breakdown',\n      'status',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      periodEnd: 'period_end',\n      periodStart: 'period_start',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.status === 'string' && query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.periodEndFrom instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $gte: query.periodEndFrom },\n        )\n      }\n      if (query.periodEndTo instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $lte: query.periodEndTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {},\n})\n\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingStatement',\n  pluralName: 'BillingStatements',\n  querySchema: billingStatementListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingStatementListItemSchema),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,eAAe,EAAE,OAAO;AAAA,EACxB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,cAAc,EAAE,OAAO;AAAA,EACvB,aAAa,EAAE,OAAO;AAAA,EACtB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC5D,QAAQ,EAAE,OAAO;AAAA,EACjB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,QAAQ;AACpD,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,cAAc;AAAA,QAC9B;AAAA,MACF;AACA,UAAI,MAAM,uBAAuB,MAAM;AACrC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,YAAY;AAAA,QAC5B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS,CAAC;AACZ,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,8BAA8B;AAClF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { BillingStatement } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingStatementListQuerySchema } from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n} from '../openapi'\n\n/**\n * `GET /api/billing/statements` \u2014 paged consumption statements (SPEC-002 P3).\n * Filter by account, status, and a `period_end` window. `?id=` narrows to one\n * row for the detail page. Generation goes through\n * POST /api/billing/statements/generate.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.statement.view'] },\n}\n\nexport const metadata = routeMetadata\n\nconst billingStatementListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_run_id: z.string().uuid().nullable(),\n  period_start: z.string(),\n  period_end: z.string(),\n  currency_code: z.string(),\n  opening_balance: z.string(),\n  total_topups: z.string(),\n  total_usage: z.string(),\n  total_recurring: z.string(),\n  total_adjustments: z.string(),\n  closing_balance: z.string(),\n  debit_breakdown: z.record(z.string(), z.unknown()).nullable(),\n  /** Spec F: per-rate VAT of the period's prepaid debits (empty when VAT is charged at top-up). */\n  vat_summary: z\n    .array(z.object({ rate: z.string(), net: z.string(), tax: z.string(), gross: z.string() }))\n    .nullable(),\n  status: z.string(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingStatement,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n  },\n  list: {\n    schema: billingStatementListQuerySchema,\n    entityId: billingEntityIds.statement,\n    fields: [\n      'id',\n      'bill_account_id',\n      'bill_run_id',\n      'period_start',\n      'period_end',\n      'currency_code',\n      'opening_balance',\n      'total_topups',\n      'total_usage',\n      'total_recurring',\n      'total_adjustments',\n      'closing_balance',\n      'debit_breakdown',\n      'vat_summary',\n      'status',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      periodEnd: 'period_end',\n      periodStart: 'period_start',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.status === 'string' && query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.periodEndFrom instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $gte: query.periodEndFrom },\n        )\n      }\n      if (query.periodEndTo instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $lte: query.periodEndTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {},\n})\n\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingStatement',\n  pluralName: 'BillingStatements',\n  querySchema: billingStatementListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingStatementListItemSchema),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,eAAe,EAAE,OAAO;AAAA,EACxB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,cAAc,EAAE,OAAO;AAAA,EACvB,aAAa,EAAE,OAAO;AAAA,EACtB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAE5D,aAAa,EACV,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EACzF,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO;AAAA,EACjB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,QAAQ;AACpD,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,cAAc;AAAA,QAC9B;AAAA,MACF;AACA,UAAI,MAAM,uBAAuB,MAAM;AACrC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,YAAY;AAAA,QAC5B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS,CAAC;AACZ,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,8BAA8B;AAClF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/test-invoices/wipe/route.js

@@ -2,10 +2,10 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
 import { billingEntityIds } from "../../../data/entityIds.js";
 import { billingWipeTestInvoicesSchema } from "../../../data/validators.js";
 import { createBillingCrudOpenApi } from "../../openapi.js";
+import { BillingInvoice } from "../../../data/entities.js";
 const routeMetadata = {
   POST: { requireAuth: true, requireFeatures: ["billing.run.trigger"] }
 };
@@ -17,7 +17,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: SalesInvoice,
+    entity: BillingInvoice,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",

package/dist/modules/billing/api/test-invoices/wipe/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/test-invoices/wipe/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingWipeTestInvoicesSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/test-invoices/wipe` \u2014 hard-delete invoices\n * flagged `metadata.test_run=true` for this tenant. Optionally\n * scoped to a `billRunId` so an operator can wipe a single test run\n * without nuking other test data.\n *\n * Modelled as POST (not DELETE) because the body carries the scope\n * fields and modern Next.js routers reject DELETE-with-body more\n * consistently than they accept it; keeping POST keeps the surface\n * uniform with the rest of the billing API.\n *\n * Gated by `billing.run.trigger` (test mode is part of the\n * \"operate Bill Runs\" toolkit). Phase 4c admin UI exposes this\n * behind a confirm dialog on the Bill Run detail page.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\nconst wipeResponseSchema = z.object({\n  invoicesRemoved: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.wipe_test',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingWipeTestInvoicesSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoicesRemoved: result?.invoicesRemoved ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingTestInvoiceWipe',\n  pluralName: 'BillingTestInvoiceWipes',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingWipeTestInvoicesSchema,\n    responseSchema: wipeResponseSchema,\n    description:\n      'Hard-deletes test invoices (`metadata.test_run=true`) for the ' +\n      'authenticated tenant. Pass `billRunId` to wipe only invoices ' +\n      'from a specific test Bill Run. Returns the count removed. ' +\n      'Test data should not pollute production history, so this is a ' +\n      'hard delete, not a soft delete.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AAkBzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAChD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,8BAA8B,MAAM,MAAM;AAAA,MACnD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC9C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingWipeTestInvoicesSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\nimport { BillingInvoice } from '../../../data/entities'\n\n/**\n * `POST /api/billing/test-invoices/wipe` \u2014 hard-delete invoices\n * flagged `metadata.test_run=true` for this tenant. Optionally\n * scoped to a `billRunId` so an operator can wipe a single test run\n * without nuking other test data.\n *\n * Modelled as POST (not DELETE) because the body carries the scope\n * fields and modern Next.js routers reject DELETE-with-body more\n * consistently than they accept it; keeping POST keeps the surface\n * uniform with the rest of the billing API.\n *\n * Gated by `billing.run.trigger` (test mode is part of the\n * \"operate Bill Runs\" toolkit). Phase 4c admin UI exposes this\n * behind a confirm dialog on the Bill Run detail page.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\nconst wipeResponseSchema = z.object({\n  invoicesRemoved: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.wipe_test',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingWipeTestInvoicesSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoicesRemoved: result?.invoicesRemoved ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingTestInvoiceWipe',\n  pluralName: 'BillingTestInvoiceWipes',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingWipeTestInvoicesSchema,\n    responseSchema: wipeResponseSchema,\n    description:\n      'Hard-deletes test invoices (`metadata.test_run=true`) for the ' +\n      'authenticated tenant. Pass `billRunId` to wipe only invoices ' +\n      'from a specific test Bill Run. Returns the count removed. ' +\n      'Test data should not pollute production history, so this is a ' +\n      'hard delete, not a soft delete.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAkB/B,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAChD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,8BAA8B,MAAM,MAAM;AAAA,MACnD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC9C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
   "names": []
 }