@dainamite/billing 0.20.0 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,95 @@
 # @dainamite/billing
 
+## 0.21.0
+
+### Minor Changes
+
+- d126be2: Billing accounts for persons (B2C), an invoice-language picklist, and pages that return to their billing account.
+
+  **`@dainamite/billing`**
+
+  - **B2C accounts.** `BillingAccount.customer_kind` (`company` | `person`, default `company`) records which customers collection `customer_id` points into. It is set on create (`customerKind`) and immutable afterwards, like `customerId`. `GET /api/billing/accounts` returns `customer_kind` and accepts a `customerKind` filter. Migration `Migration20261114000000_billing_customer_kind` adds the column (additive; existing rows become `company`). Run `yarn mercato db migrate`.
+  - **Account form.** A Company / Person switch picks the customer lookup (`/api/customers/companies` or `/api/customers/people`). Picking a customer prefills name, invoice email and the primary address into empty fields only. Prefill that the operator has not edited is rolled back when they pick another customer.
+  - **Account list and detail** show the customer's name with a company / person icon (one batched lookup per kind per page) and add a Customer type filter. The detail links to the customer record. If the customers module is unavailable, the raw id is shown.
+  - **Invoice language** is now a picklist of the languages the invoice template supports (`en`, `pl`).
+    **Behaviour change:** `invoiceLanguage` values other than `en` / `pl` are now rejected with 400 on create and update. On create, `invoiceLanguage` is optional and defaults to `en`.
+  - **Navigation.** Item pages opened from a billing account return to that account (back link, after delete). Creating an item from an account returns to the account after save or cancel. Items opened from the global Items list (`?from=items`) still return to the list.
+
+  **`@dainamite/cpq-billing-connector`**
+
+  - Passes an optional `customerKind` from `cpq.subscription.activated` to the billing account it creates.
+  - Normalises `invoiceLanguage` and falls back to `en` for languages billing does not support, so onboarding never fails on an unsupported code.
+
+- 486db4d: Bill runs catch up on every due cycle, bill recurring items in advance or in arrears, and prorate partial periods (billing Spec A).
+
+  **`@dainamite/billing`**
+
+  - **Every run catches up.** Manual or scheduled, in real, test or dry mode, a run bills every due bill date up to `asOfDate`, with one draft per bill date (capped at 60 per account). Test and dry runs simulate every cycle in memory without changing the account. **Breaking:** the `catchUp` trigger flag and the `catch_up` run column/response field are removed. A `catchUp` sent by an old client is ignored.
+  - **Charge timing per item.** Recurring items carry `chargeTiming` (`in_advance` by default, or `in_arrears`). **Behaviour change:** recurring items are now billed in advance by default, so `next_bill_date` marks the start of the period billed.
+  - **Proration per item.** `prorate` defaults to `true`. A partial period (the item starts or ends mid-cycle) is charged by calendar days instead of being skipped. An in-advance item that ends after it was billed gets a negative credit line for the unused days. With `prorate: false`, partial periods are skipped and reported.
+  - **Run outcomes** carry `cycles` (bill date, service period, status, lines, net, invoice). `warnings.skipped_items` lists items that were not billed and why. The run summary adds `cycles_processed`. The run detail page shows a Cycles table and a Skipped items table.
+  - **Draft invoices** carry `metadata.bill_date`, the de-duplication key, together with `test_run`. Test drafts and real drafts never block each other. Lines carry `service_period_start` / `service_period_end`, plus `proration` and `credit_for` where they apply.
+  - **Item form** gets Charge timing and Prorate partial periods fields. The items list gets a Timing column.
+  - **Migration** `Migration20261114100000_billing_cycle_semantics`. Run `yarn mercato db migrate`. See `MIGRATION.md`; reseeding is recommended.
+
+  **`@dainamite/cpq-billing-connector`**
+
+  - **Proration moves to billing.** `cpq.subscription.amended` no longer posts `one_time` proration items, because the billing engine prorates. Release together with billing: an older connector would double-charge.
+  - **First bill date.** New billing accounts start billing on the activation date (they used to start one month later), so the first period is billed in advance.
+  - Removes `lib/prorationHelper` and the runtime import of billing's `cycleContaining`.
+
+- c8a1bf7: Billing invoices become real VAT documents with a PDF and email delivery (billing Spec B).
+
+  - **VAT per line.** Billing items carry `taxRate` (filled from the new organization default, 23 %, when omitted). Every invoice line gets net / VAT / gross; proration and credit lines inherit the item rate; manual lines accept `taxRate`. Existing items are migrated at 0 % (no silent re-pricing).
+  - **Seller settings.** Settings → Billing adds the seller block, bank / IBAN (checksum validated) / BIC, default payment terms and VAT rate, invoice footer and logo. **Posting is refused with 409 `billing.settings.incomplete` until legal name, address, tax id and IBAN are filled.**
+  - **Due dates and overdue.** Posting sets `due_date` (account terms or the default). The invoice list filters by `overdue`, `dueFrom`, `dueTo` and shows days overdue; the account page gets an Invoices section and `GET /api/billing/accounts/{id}/summary`.
+  - **PDF.** `GET /api/billing/invoices/{id}/pdf` — built-in A4 template in the account's invoice language (en / pl), frozen as an attachment at post; drafts are watermarked previews.
+  - **Email.** `POST /api/billing/invoices/{id}/send` (feature `billing.invoice.send`) and automatic sending per account (`autoSendInvoice`), through the platform `sendEmail()`. Deliveries are logged on the invoice; events `billing.invoice.sent` / `billing.invoice.send_failed`.
+  - **Dependencies:** `requires` adds `attachments`; new dependencies `pdf-lib` and `@pdf-lib/fontkit`.
+  - Connector: `ItemCreatePayload` accepts an optional `taxRate` (unused until CPQ exposes a per-charge rate).
+  - Run `yarn mercato db migrate` (`Migration20261116000000_billing_invoice_documents`).
+
+- 6c138f8: Billing owns its documents. Invoices, credit / debit memos and top-up receipts are no longer written to Open Mercato core `sales` (billing Spec 0).
+
+  - **New tables:** `billing_invoices`, `billing_invoice_lines`, `billing_document_sequences`, `billing_settings`. Run `yarn mercato db migrate`. No data is migrated: reseed, or see `MIGRATION.md` for removing old billing rows from `sales_invoices`.
+  - **Numbering at post.** Drafts carry `DRAFT-…`, and the series number is claimed when the invoice is posted (gap-free, inside the post transaction). A mask per series is set on the new **Billing settings** page (`/backend/config/billing`), using `{YYYY} {YY} {MM} {DD}` plus one counter token: `{SEQUENCE_NUM}` (never resets), `{SEQUENCE_NUM_YEAR}` or `{SEQUENCE_NUM_MONTH}`, with an optional `:N` zero-pad. The default is `INV/{YYYY}/{MM}/{SEQUENCE_NUM_MONTH:4}`. A mask that repeats an issued number fails the post with 409 `billing.invoice.number_conflict`.
+  - **Breaking:**
+    - Invoice API fields are renamed to billing names (`number`, `total_gross`, `outstanding`, `bill_date`, `period_start`, …). The full map is in `MIGRATION.md`.
+    - The `void` status is removed. Statuses are now `draft | posted | partially_paid | paid | credited`.
+    - The account export moves to `schemaVersion: 3`.
+  - **Top-up receipts** are billing documents (`document_type = 'receipt'`, `RC/…` series). VAT is split by billing's own `lib/vat.ts`.
+  - **Prepaid settings** move from core `configs` to per-organization billing settings (same defaults).
+  - **Dependencies:** `requires` is now `['auth', 'directory']`. `payment_gateways` is optional: without it, online top-ups return 501 `billing.topup.gateway_unavailable` and the Top up button is hidden. The unused `billing.uom` dictionary seed is removed. An isolation test fails the build if billing imports core `sales`, `configs`, `dictionaries` or `payment_gateways`.
+  - **New permissions:** `billing.settings.view` and `billing.settings.manage`.
+
+- 418d67c: Credit and debit memos (billing Spec D): posted invoices are corrected only by referenced corrective documents.
+
+  - Invoice page: **Create credit memo** (pick lines, edit quantity / unit net, "Full credit", required reason) and **Create debit memo**; draft memos can be deleted, posted ones never (no void). A Corrections section lists the memos of an invoice.
+  - Posting a credit memo (`CN/…` series) settles the corrected invoice through the allocation model; any remainder becomes account credit applied to the oldest open invoice. An invoice settled entirely by credit becomes `credited`. Debit memos (`invoice` series) are payable: due date, overdue, matched by number in bank imports.
+  - Guard: total credits on an invoice never exceed its gross plus its posted debit memos (409 `billing.memo.exceeds_invoice`).
+  - PDF memo variant ("Corrects invoice X of DATE", reason, settlement text); list Type filter / column (credit memo totals shown negative).
+  - Events `billing.credit_memo.posted`, `billing.debit_memo.posted`, `billing.invoice.credited`; `billing.invoice.posted` fires for invoices only. New permission `billing.invoice.correct`.
+  - Run `yarn mercato db migrate` (`Migration20261118000000_billing_memos`).
+
+- 3dc3fa5: Operator feedback round 1 (billing Spec F) and the Billing Account workspace (Spec E phases 2–3).
+
+  - Bill Runs: **Delete run** for test and dry runs (removes the run, its outcomes and its test invoices; real runs are never deleted — `DELETE /api/billing/runs/{id}`, permission `billing.run.delete`). "Wipe test invoices" moved to the run page; runs list gets a Mode filter and a row action.
+  - Items: the account currency is shown next to every price; a **Net | Gross** switch stores the price as typed (`priceBasis`) and the invoice reproduces a typed gross exactly. Fixed: editing an item's VAT rate is saved again.
+  - Prepaid: one run closes every due bill date (also in test / dry); recurring items honour in advance / in arrears and proration; run outcomes show prepaid cycles and skipped items; an existing statement no longer blocks the account.
+  - Prepaid VAT: new setting **When is VAT charged** — at top-up (default; item amounts debited as entered) or at billing (receipts without VAT, debits gross at the item rate, statement VAT summary).
+  - Account workspace: summary cards, deep-linkable tabs (Overview, Items, Usage, Invoices, Payments / Balance & top-ups, Statements, Bill runs), **Run billing** dialog with inline results; account list Balance due / Overdue columns and Has overdue filter.
+  - Settings → Billing is listed in the Settings sidebar; number-mask help explains `:N` zero-padding.
+  - Run `yarn mercato db migrate` (`Migration20261119000000_billing_operator_feedback`) and `yarn mercato auth sync-role-acls`.
+
+- 418d67c: Billing payments (Spec C): a billing-owned payment register with bank CSV import, auto-matching by invoice number, allocations and account credit.
+
+  - New **Billing → Payments** page: upload a bank CSV (`date,amount,currency,reference,payer_name,payer_account`) or record a payment; each payment shows its match outcome, allocations and actions (assign to account, allocate, un-allocate, ignore / restore, convert to a prepaid top-up). Upload batches keep counts and row errors.
+  - Invoices move `posted → partially_paid → paid` from allocations (always recomputed); overpayments become account credit that is applied to the oldest open invoice, on import and when an invoice is posted.
+  - Gateway captures (`payment_gateways.payment.captured`) now create a payment and allocate it instead of flipping the invoice status directly.
+  - Invoice detail shows a Payments section; the account page shows its payments and the unapplied credit.
+  - New permissions `billing.payment.view`, `billing.payment.manage`, `billing.payment.import`; CLI `mercato billing payments-sample` builds a demo bank file from posted invoices.
+  - Run `yarn mercato db migrate` (`Migration20261117000000_billing_payments`).
+
 ## 0.20.0
 
 ### Minor Changes

package/dist/modules/billing/acl.js

@@ -8,9 +8,18 @@ const features = [
   { id: "billing.run.trigger", title: "Trigger Bill Run", module: "billing" },
   { id: "billing.run.dry_run", title: "Trigger Bill Run (dry-run)", module: "billing" },
   { id: "billing.run.view", title: "View Bill Run History", module: "billing" },
+  // Spec F — delete test / dry runs (real runs are never deleted)
+  { id: "billing.run.delete", title: "Delete Test / Dry Bill Runs", module: "billing" },
   { id: "billing.invoice.post", title: "Post Draft Invoice", module: "billing" },
   { id: "billing.invoice.edit_draft", title: "Edit Draft Invoice", module: "billing" },
   { id: "billing.invoice.view", title: "View Billing Invoices", module: "billing" },
+  { id: "billing.invoice.send", title: "Email Billing Invoices", module: "billing" },
+  // Spec D — corrective documents
+  { id: "billing.invoice.correct", title: "Create Credit / Debit Memos", module: "billing" },
+  // Spec C — payments
+  { id: "billing.payment.view", title: "View Billing Payments", module: "billing" },
+  { id: "billing.payment.manage", title: "Manage Billing Payments (assign, allocate, ignore, convert)", module: "billing" },
+  { id: "billing.payment.import", title: "Import Bank Payments (CSV)", module: "billing" },
   // ─── Prepaid balance billing (SPEC-002) ──────────────────────
   { id: "billing.balance.view", title: "View Balance & Transactions", module: "billing" },
   { id: "billing.balance.adjust", title: "Adjust Balance (manual credit/debit)", module: "billing" },
@@ -18,7 +27,10 @@ const features = [
   { id: "billing.topup.view", title: "View Account Top-ups", module: "billing" },
   { id: "billing.statement.view", title: "View Consumption Statements", module: "billing" },
   { id: "billing.statement.generate", title: "Generate Consumption Statement", module: "billing" },
-  { id: "billing.credit.view", title: "View Account Credit Status", module: "billing" }
+  { id: "billing.credit.view", title: "View Account Credit Status", module: "billing" },
+  // ─── Billing settings (Spec 0) ───────────────────────────────
+  { id: "billing.settings.view", title: "View Billing Settings", module: "billing" },
+  { id: "billing.settings.manage", title: "Manage Billing Settings", module: "billing" }
 ];
 var acl_default = features;
 export {

package/dist/modules/billing/acl.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/billing/acl.ts"],
-  "sourcesContent": ["export const features = [\n  { id: 'billing.account.manage', title: 'Manage Billing Accounts', module: 'billing' },\n  { id: 'billing.account.view', title: 'View Billing Accounts', module: 'billing' },\n  { id: 'billing.item.manage', title: 'Manage Billing Items', module: 'billing' },\n  { id: 'billing.item.view', title: 'View Billing Items', module: 'billing' },\n  { id: 'billing.usage.ingest', title: 'Ingest Usage Records', module: 'billing' },\n  { id: 'billing.usage.view', title: 'View Usage Records', module: 'billing' },\n  { id: 'billing.run.trigger', title: 'Trigger Bill Run', module: 'billing' },\n  { id: 'billing.run.dry_run', title: 'Trigger Bill Run (dry-run)', module: 'billing' },\n  { id: 'billing.run.view', title: 'View Bill Run History', module: 'billing' },\n  { id: 'billing.invoice.post', title: 'Post Draft Invoice', module: 'billing' },\n  { id: 'billing.invoice.edit_draft', title: 'Edit Draft Invoice', module: 'billing' },\n  { id: 'billing.invoice.view', title: 'View Billing Invoices', module: 'billing' },\n  // \u2500\u2500\u2500 Prepaid balance billing (SPEC-002) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  { id: 'billing.balance.view', title: 'View Balance & Transactions', module: 'billing' },\n  { id: 'billing.balance.adjust', title: 'Adjust Balance (manual credit/debit)', module: 'billing' },\n  { id: 'billing.topup.create', title: 'Initiate Account Top-up', module: 'billing' },\n  { id: 'billing.topup.view', title: 'View Account Top-ups', module: 'billing' },\n  { id: 'billing.statement.view', title: 'View Consumption Statements', module: 'billing' },\n  { id: 'billing.statement.generate', title: 'Generate Consumption Statement', module: 'billing' },\n  { id: 'billing.credit.view', title: 'View Account Credit Status', module: 'billing' },\n] as const\n\nexport default features\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,0BAA0B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACpF,EAAE,IAAI,wBAAwB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EAChF,EAAE,IAAI,uBAAuB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC9E,EAAE,IAAI,qBAAqB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC1E,EAAE,IAAI,wBAAwB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC/E,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC3E,EAAE,IAAI,uBAAuB,OAAO,oBAAoB,QAAQ,UAAU;AAAA,EAC1E,EAAE,IAAI,uBAAuB,OAAO,8BAA8B,QAAQ,UAAU;AAAA,EACpF,EAAE,IAAI,oBAAoB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EAC5E,EAAE,IAAI,wBAAwB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC7E,EAAE,IAAI,8BAA8B,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EACnF,EAAE,IAAI,wBAAwB,OAAO,yBAAyB,QAAQ,UAAU;AAAA;AAAA,EAEhF,EAAE,IAAI,wBAAwB,OAAO,+BAA+B,QAAQ,UAAU;AAAA,EACtF,EAAE,IAAI,0BAA0B,OAAO,wCAAwC,QAAQ,UAAU;AAAA,EACjG,EAAE,IAAI,wBAAwB,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EAClF,EAAE,IAAI,sBAAsB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC7E,EAAE,IAAI,0BAA0B,OAAO,+BAA+B,QAAQ,UAAU;AAAA,EACxF,EAAE,IAAI,8BAA8B,OAAO,kCAAkC,QAAQ,UAAU;AAAA,EAC/F,EAAE,IAAI,uBAAuB,OAAO,8BAA8B,QAAQ,UAAU;AACtF;AAEA,IAAO,cAAQ;",
+  "sourcesContent": ["export const features = [\n  { id: 'billing.account.manage', title: 'Manage Billing Accounts', module: 'billing' },\n  { id: 'billing.account.view', title: 'View Billing Accounts', module: 'billing' },\n  { id: 'billing.item.manage', title: 'Manage Billing Items', module: 'billing' },\n  { id: 'billing.item.view', title: 'View Billing Items', module: 'billing' },\n  { id: 'billing.usage.ingest', title: 'Ingest Usage Records', module: 'billing' },\n  { id: 'billing.usage.view', title: 'View Usage Records', module: 'billing' },\n  { id: 'billing.run.trigger', title: 'Trigger Bill Run', module: 'billing' },\n  { id: 'billing.run.dry_run', title: 'Trigger Bill Run (dry-run)', module: 'billing' },\n  { id: 'billing.run.view', title: 'View Bill Run History', module: 'billing' },\n  // Spec F \u2014 delete test / dry runs (real runs are never deleted)\n  { id: 'billing.run.delete', title: 'Delete Test / Dry Bill Runs', module: 'billing' },\n  { id: 'billing.invoice.post', title: 'Post Draft Invoice', module: 'billing' },\n  { id: 'billing.invoice.edit_draft', title: 'Edit Draft Invoice', module: 'billing' },\n  { id: 'billing.invoice.view', title: 'View Billing Invoices', module: 'billing' },\n  { id: 'billing.invoice.send', title: 'Email Billing Invoices', module: 'billing' },\n  // Spec D \u2014 corrective documents\n  { id: 'billing.invoice.correct', title: 'Create Credit / Debit Memos', module: 'billing' },\n  // Spec C \u2014 payments\n  { id: 'billing.payment.view', title: 'View Billing Payments', module: 'billing' },\n  { id: 'billing.payment.manage', title: 'Manage Billing Payments (assign, allocate, ignore, convert)', module: 'billing' },\n  { id: 'billing.payment.import', title: 'Import Bank Payments (CSV)', module: 'billing' },\n  // \u2500\u2500\u2500 Prepaid balance billing (SPEC-002) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  { id: 'billing.balance.view', title: 'View Balance & Transactions', module: 'billing' },\n  { id: 'billing.balance.adjust', title: 'Adjust Balance (manual credit/debit)', module: 'billing' },\n  { id: 'billing.topup.create', title: 'Initiate Account Top-up', module: 'billing' },\n  { id: 'billing.topup.view', title: 'View Account Top-ups', module: 'billing' },\n  { id: 'billing.statement.view', title: 'View Consumption Statements', module: 'billing' },\n  { id: 'billing.statement.generate', title: 'Generate Consumption Statement', module: 'billing' },\n  { id: 'billing.credit.view', title: 'View Account Credit Status', module: 'billing' },\n  // \u2500\u2500\u2500 Billing settings (Spec 0) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  { id: 'billing.settings.view', title: 'View Billing Settings', module: 'billing' },\n  { id: 'billing.settings.manage', title: 'Manage Billing Settings', module: 'billing' },\n] as const\n\nexport default features\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,EAAE,IAAI,0BAA0B,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EACpF,EAAE,IAAI,wBAAwB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EAChF,EAAE,IAAI,uBAAuB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC9E,EAAE,IAAI,qBAAqB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC1E,EAAE,IAAI,wBAAwB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC/E,EAAE,IAAI,sBAAsB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC3E,EAAE,IAAI,uBAAuB,OAAO,oBAAoB,QAAQ,UAAU;AAAA,EAC1E,EAAE,IAAI,uBAAuB,OAAO,8BAA8B,QAAQ,UAAU;AAAA,EACpF,EAAE,IAAI,oBAAoB,OAAO,yBAAyB,QAAQ,UAAU;AAAA;AAAA,EAE5E,EAAE,IAAI,sBAAsB,OAAO,+BAA+B,QAAQ,UAAU;AAAA,EACpF,EAAE,IAAI,wBAAwB,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EAC7E,EAAE,IAAI,8BAA8B,OAAO,sBAAsB,QAAQ,UAAU;AAAA,EACnF,EAAE,IAAI,wBAAwB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EAChF,EAAE,IAAI,wBAAwB,OAAO,0BAA0B,QAAQ,UAAU;AAAA;AAAA,EAEjF,EAAE,IAAI,2BAA2B,OAAO,+BAA+B,QAAQ,UAAU;AAAA;AAAA,EAEzF,EAAE,IAAI,wBAAwB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EAChF,EAAE,IAAI,0BAA0B,OAAO,+DAA+D,QAAQ,UAAU;AAAA,EACxH,EAAE,IAAI,0BAA0B,OAAO,8BAA8B,QAAQ,UAAU;AAAA;AAAA,EAEvF,EAAE,IAAI,wBAAwB,OAAO,+BAA+B,QAAQ,UAAU;AAAA,EACtF,EAAE,IAAI,0BAA0B,OAAO,wCAAwC,QAAQ,UAAU;AAAA,EACjG,EAAE,IAAI,wBAAwB,OAAO,2BAA2B,QAAQ,UAAU;AAAA,EAClF,EAAE,IAAI,sBAAsB,OAAO,wBAAwB,QAAQ,UAAU;AAAA,EAC7E,EAAE,IAAI,0BAA0B,OAAO,+BAA+B,QAAQ,UAAU;AAAA,EACxF,EAAE,IAAI,8BAA8B,OAAO,kCAAkC,QAAQ,UAAU;AAAA,EAC/F,EAAE,IAAI,uBAAuB,OAAO,8BAA8B,QAAQ,UAAU;AAAA;AAAA,EAEpF,EAAE,IAAI,yBAAyB,OAAO,yBAAyB,QAAQ,UAAU;AAAA,EACjF,EAAE,IAAI,2BAA2B,OAAO,2BAA2B,QAAQ,UAAU;AACvF;AAEA,IAAO,cAAQ;",
   "names": []
 }

package/dist/modules/billing/api/accounts/[id]/summary/route.js

@@ -0,0 +1,52 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { BillingAccount } from "../../../../data/entities.js";
+import { getAccountWorkspaceSummary } from "../../../../lib/accountSummary.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.account.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = auth.orgId ?? null;
+    if (!organizationId) {
+      return NextResponse.json({ error: "Organization scope required" }, { status: 403 });
+    }
+    const { id: accountId } = await params;
+    const em = container.resolve("em").fork();
+    const account = await em.findOne(BillingAccount, {
+      id: accountId,
+      tenantId: auth.tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!account) {
+      return NextResponse.json({ error: "Account not found" }, { status: 404 });
+    }
+    return NextResponse.json(await getAccountWorkspaceSummary(em, account));
+  } catch (err) {
+    console.error("[billing/accounts/summary.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Get a billing account receivables summary",
+      parameters: [{ name: "id", in: "path", required: true, schema: { type: "string", format: "uuid" } }],
+      description: "Returns `{ bill_account_id, currency_code, open_amount, overdue_amount, overdue_count, credit_amount }` over posted / partially paid invoices and debit memos (test runs excluded). Overdue = past due date with outstanding > 0. `credit_amount` = unallocated payments + open credit memos. Spec F (account workspace) adds `billing_mode`, `bill_cycle`, `next_bill_date`, `last_invoice` (`{ id, number, issue_date, total_gross }` or null) and, for prepaid accounts, `prepaid { balance, balance_status, credit_limit, last_statement }` (null for postpaid)."
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/accounts/[id]/summary/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/billing/api/accounts/%5Bid%5D/summary/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { BillingAccount } from '../../../../data/entities'\nimport { getAccountWorkspaceSummary } from '../../../../lib/accountSummary'\n\n/**\n * `GET /api/billing/accounts/[id]/summary` \u2014 what the customer owes (Spec B\n * AR summary; Spec E extends the same endpoint for the account workspace).\n * One aggregate query; see `lib/accountSummary.ts`.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.account.view'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json({ error: 'Organization scope required' }, { status: 403 })\n    }\n    const { id: accountId } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n    const account = await em.findOne(BillingAccount, {\n      id: accountId,\n      tenantId: auth.tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!account) {\n      return NextResponse.json({ error: 'Account not found' }, { status: 404 })\n    }\n    return NextResponse.json(await getAccountWorkspaceSummary(em, account))\n  } catch (err) {\n    console.error('[billing/accounts/summary.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get a billing account receivables summary',\n      parameters: [{ name: 'id', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } }],\n      description:\n        'Returns `{ bill_account_id, currency_code, open_amount, overdue_amount, overdue_count, ' +\n        'credit_amount }` over posted / partially paid invoices and debit memos (test runs excluded). ' +\n        'Overdue = past due date with outstanding > 0. `credit_amount` = unallocated payments + open credit memos. ' +\n        'Spec F (account workspace) adds `billing_mode`, `bill_cycle`, `next_bill_date`, `last_invoice` ' +\n        '(`{ id, number, issue_date, total_gross }` or null) and, for prepaid accounts, `prepaid { balance, ' +\n        'balance_status, credit_limit, last_statement }` (null for postpaid).',\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAC/B,SAAS,kCAAkC;AAQpC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AACA,UAAM,EAAE,IAAI,UAAU,IAAI,MAAM;AAChC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAC/C,IAAI;AAAA,MACJ,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,WAAO,aAAa,KAAK,MAAM,2BAA2B,IAAI,OAAO,CAAC;AAAA,EACxE,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAkC,GAAG;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,YAAY,CAAC,EAAE,MAAM,MAAM,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE,CAAC;AAAA,MACnG,aACE;AAAA,IAMJ;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/accounts/route.js

@@ -3,6 +3,8 @@ import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { BillingAccount } from "../../data/entities.js";
+import { fetchAccountFinancials, fetchOverdueAccountIds, financialsOrZero } from "../../lib/accountFinancials.js";
+const NO_MATCH_ID = "00000000-0000-4000-8000-000000000000";
 import { billingEntityIds } from "../../data/entityIds.js";
 import {
   billingAccountCreateSchema,
@@ -25,6 +27,7 @@ const metadata = routeMetadata;
 const billingAccountListItemSchema = z.object({
   id: z.string().uuid(),
   customer_id: z.string(),
+  customer_kind: z.enum(["company", "person"]),
   name: z.string(),
   currency_code: z.string(),
   bill_cycle: z.string(),
@@ -37,6 +40,11 @@ const billingAccountListItemSchema = z.object({
   last_bill_date: z.string().nullable(),
   billing_mode: z.string(),
   credit_limit: z.string(),
+  payment_terms_days: z.number().int().nullable(),
+  auto_send_invoice: z.boolean(),
+  /** Spec F (F8): Σ outstanding of open receivables and its overdue subset (batched per page). */
+  balance_due: z.string(),
+  overdue_amount: z.string(),
   is_active: z.boolean(),
   organization_id: z.string().uuid(),
   tenant_id: z.string().uuid(),
@@ -59,6 +67,7 @@ const crud = makeCrudRoute({
     fields: [
       "id",
       "customer_id",
+      "customer_kind",
       "name",
       "currency_code",
       "bill_cycle",
@@ -71,6 +80,8 @@ const crud = makeCrudRoute({
       "last_bill_date",
       "billing_mode",
       "credit_limit",
+      "payment_terms_days",
+      "auto_send_invoice",
       "is_active",
       "organization_id",
       "tenant_id",
@@ -83,14 +94,24 @@ const crud = makeCrudRoute({
       updatedAt: "updated_at",
       nextBillDate: "next_bill_date"
     },
-    buildFilters: async (query) => {
+    buildFilters: async (query, ctx) => {
       const filters = {};
+      if (query.hasOverdue === true && ctx.auth?.tenantId) {
+        const organizationIds = ctx.organizationIds ?? (ctx.selectedOrganizationId ? [ctx.selectedOrganizationId] : []);
+        const em = ctx.container.resolve("em");
+        const overdueIds = await fetchOverdueAccountIds(em, { tenantId: ctx.auth.tenantId, organizationIds });
+        filters.id = { $in: overdueIds.length > 0 ? overdueIds : [NO_MATCH_ID] };
+      }
       if (typeof query.id === "string" && query.id) {
-        filters.id = { $eq: query.id };
+        const current = filters.id;
+        filters.id = current?.$in ? { $in: current.$in.includes(query.id) ? [query.id] : [NO_MATCH_ID] } : { $eq: query.id };
       }
       if (typeof query.customerId === "string" && query.customerId) {
         filters.customer_id = { $eq: query.customerId };
       }
+      if (typeof query.customerKind === "string" && query.customerKind) {
+        filters.customer_kind = { $eq: query.customerKind };
+      }
       if (typeof query.currencyCode === "string" && query.currencyCode) {
         filters.currency_code = { $eq: query.currencyCode.toUpperCase() };
       }
@@ -110,6 +131,27 @@ const crud = makeCrudRoute({
       return filters;
     }
   },
+  hooks: {
+    // Spec F (F8): balance due / overdue per row — one GROUP BY for the page.
+    afterList: async (payload, ctx) => {
+      const items = payload?.items ?? [];
+      if (items.length === 0) return;
+      const first = items[0];
+      const tenantId = typeof first.tenant_id === "string" ? first.tenant_id : null;
+      const organizationId = typeof first.organization_id === "string" ? first.organization_id : null;
+      const ids = items.map((row) => row.id).filter((id) => typeof id === "string");
+      const financials = tenantId && organizationId ? await fetchAccountFinancials(
+        ctx.container.resolve("em"),
+        { tenantId, organizationId },
+        ids
+      ) : /* @__PURE__ */ new Map();
+      for (const row of items) {
+        const values = financialsOrZero(financials, String(row.id));
+        row.balance_due = values.balance_due;
+        row.overdue_amount = values.overdue_amount;
+      }
+    }
+  },
   actions: {
     create: {
       commandId: "billing.accounts.create",
@@ -165,12 +207,12 @@ const openApi = createBillingCrudOpenApi({
   create: {
     schema: billingAccountCreateSchema,
     responseSchema: defaultCreateResponseSchema,
-    description: "Creates a new billing account for a customer."
+    description: "Creates a new billing account for a customer \u2014 a company or a person (`customerKind`, default `company`). `invoiceLanguage` must be a language supported by the invoice template (`en`, `pl`; default `en`)."
   },
   update: {
     schema: billingAccountUpdateSchema,
     responseSchema: defaultOkResponseSchema,
-    description: "Updates a billing account. `currencyCode` and `customerId` are immutable."
+    description: "Updates a billing account. `currencyCode`, `customerId` and `customerKind` are immutable."
   },
   del: {
     schema: z.object({ id: z.string().uuid() }),

package/dist/modules/billing/api/accounts/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/billing/api/accounts/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { BillingAccount } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingAccountCreateSchema,\n  billingAccountListQuerySchema,\n  billingAccountUpdateSchema,\n} from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultCreateResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\n// \u2500\u2500\u2500 Auth / RBAC \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.account.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n}\n\nexport const metadata = routeMetadata\n\n// \u2500\u2500\u2500 List response item shape (informational \u2014 used by OpenAPI) \u2500\u2500\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billingAccountListItemSchema = z.object({\n  id: z.string().uuid(),\n  customer_id: z.string(),\n  name: z.string(),\n  currency_code: z.string(),\n  bill_cycle: z.string(),\n  bill_cycle_anchor: z.string(),\n  invoice_email: z.string(),\n  invoice_language: z.string(),\n  tax_id: z.string().nullable(),\n  invoice_address: z.record(z.string(), z.unknown()),\n  next_bill_date: z.string(),\n  last_bill_date: z.string().nullable(),\n  billing_mode: z.string(),\n  credit_limit: z.string(),\n  is_active: z.boolean(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\n// \u2500\u2500\u2500 CRUD route \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingAccount,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingAccountListQuerySchema,\n    entityId: billingEntityIds.account,\n    fields: [\n      'id',\n      'customer_id',\n      'name',\n      'currency_code',\n      'bill_cycle',\n      'bill_cycle_anchor',\n      'invoice_email',\n      'invoice_language',\n      'tax_id',\n      'invoice_address',\n      'next_bill_date',\n      'last_bill_date',\n      'billing_mode',\n      'credit_limit',\n      'is_active',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      name: 'name',\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      nextBillDate: 'next_bill_date',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single account through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.customerId === 'string' && query.customerId) {\n        filters.customer_id = { $eq: query.customerId }\n      }\n      if (typeof query.currencyCode === 'string' && query.currencyCode) {\n        filters.currency_code = { $eq: query.currencyCode.toUpperCase() }\n      }\n      if (typeof query.billCycle === 'string' && query.billCycle) {\n        filters.bill_cycle = { $eq: query.billCycle }\n      }\n      if (typeof query.billingMode === 'string' && query.billingMode) {\n        filters.billing_mode = { $eq: query.billingMode }\n      }\n      if (typeof query.isActive === 'boolean') {\n        filters.is_active = { $eq: query.isActive }\n      }\n      if (typeof query.search === 'string' && query.search.trim()) {\n        const pattern = `%${query.search.trim().replace(/[%_]/g, (m) => `\\\\${m}`)}%`\n        filters.name = { $ilike: pattern }\n      }\n      return filters\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.accounts.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingAccountCreateSchema.parse(scoped)\n      },\n      response: ({ result }) => ({ id: result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'billing.accounts.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingAccountUpdateSchema.parse(scoped)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'billing.accounts.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        // The factory hands delete a `{ body, query }` envelope \u2014 the\n        // id may arrive in either, depending on the caller.\n        const envelope = (raw ?? {}) as {\n          body?: Record<string, unknown>\n          query?: Record<string, unknown>\n        }\n        const body = envelope.body ?? {}\n        const query = envelope.query ?? {}\n        const scoped = withScopedPayload(body, ctx, translate)\n        const id =\n          (typeof body.id === 'string' && body.id) ||\n          (typeof query.id === 'string' && query.id) ||\n          null\n        if (!id) {\n          throw new Error('id is required')\n        }\n        return {\n          id,\n          tenantId: (scoped as { tenantId?: string }).tenantId,\n          organizationId: (scoped as { organizationId?: string }).organizationId,\n        }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingAccount',\n  pluralName: 'BillingAccounts',\n  querySchema: billingAccountListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingAccountListItemSchema),\n  create: {\n    schema: billingAccountCreateSchema,\n    responseSchema: defaultCreateResponseSchema,\n    description: 'Creates a new billing account for a customer.',\n  },\n  update: {\n    schema: billingAccountUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates a billing account. `currencyCode` and `customerId` are immutable.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Soft-deletes a billing account (sets `deleted_at`).',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,MAAM,WAAW;AAKxB,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,MAAM,EAAE,OAAO;AAAA,EACf,eAAe,EAAE,OAAO;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,mBAAmB,EAAE,OAAO;AAAA,EAC5B,eAAe,EAAE,OAAO;AAAA,EACxB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACjD,gBAAgB,EAAE,OAAO;AAAA,EACzB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,OAAO;AAAA,EACvB,cAAc,EAAE,OAAO;AAAA,EACvB,WAAW,EAAE,QAAQ;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAI/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,WAAW;AAAA,MACX,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAG1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,eAAe,YAAY,MAAM,YAAY;AAC5D,gBAAQ,cAAc,EAAE,KAAK,MAAM,WAAW;AAAA,MAChD;AACA,UAAI,OAAO,MAAM,iBAAiB,YAAY,MAAM,cAAc;AAChE,gBAAQ,gBAAgB,EAAE,KAAK,MAAM,aAAa,YAAY,EAAE;AAAA,MAClE;AACA,UAAI,OAAO,MAAM,cAAc,YAAY,MAAM,WAAW;AAC1D,gBAAQ,aAAa,EAAE,KAAK,MAAM,UAAU;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,gBAAgB,YAAY,MAAM,aAAa;AAC9D,gBAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAAA,MAClD;AACA,UAAI,OAAO,MAAM,aAAa,WAAW;AACvC,gBAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAAA,MAC5C;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,GAAG;AAC3D,cAAM,UAAU,IAAI,MAAM,OAAO,KAAK,EAAE,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACzE,gBAAQ,OAAO,EAAE,QAAQ,QAAQ;AAAA,MACnC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,2BAA2B,MAAM,MAAM;AAAA,MAChD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,KAAK;AAAA,MACpD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,2BAA2B,MAAM,MAAM;AAAA,MAChD;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAGhD,cAAM,WAAY,OAAO,CAAC;AAI1B,cAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,cAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,cAAM,SAAS,kBAAkB,MAAM,KAAK,SAAS;AACrD,cAAM,KACH,OAAO,KAAK,OAAO,YAAY,KAAK,MACpC,OAAO,MAAM,OAAO,YAAY,MAAM,MACvC;AACF,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,MAAM,gBAAgB;AAAA,QAClC;AACA,eAAO;AAAA,UACL;AAAA,UACA,UAAW,OAAiC;AAAA,UAC5C,gBAAiB,OAAuC;AAAA,QAC1D;AAAA,MACF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAEvB,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,4BAA4B;AAAA,EAC9E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { AwilixContainer } from 'awilix'\nimport { BillingAccount } from '../../data/entities'\nimport { fetchAccountFinancials, fetchOverdueAccountIds, financialsOrZero } from '../../lib/accountFinancials'\n\n/** A uuid no row has \u2014 narrows an `$in` filter to nothing. */\nconst NO_MATCH_ID = '00000000-0000-4000-8000-000000000000'\nimport { billingEntityIds } from '../../data/entityIds'\nimport {\n  billingAccountCreateSchema,\n  billingAccountListQuerySchema,\n  billingAccountUpdateSchema,\n} from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultCreateResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\n// \u2500\u2500\u2500 Auth / RBAC \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.account.view'] },\n  POST: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['billing.account.manage'] },\n}\n\nexport const metadata = routeMetadata\n\n// \u2500\u2500\u2500 List response item shape (informational \u2014 used by OpenAPI) \u2500\u2500\n\n// The list endpoint projects raw column names \u2014 snake_case.\nconst billingAccountListItemSchema = z.object({\n  id: z.string().uuid(),\n  customer_id: z.string(),\n  customer_kind: z.enum(['company', 'person']),\n  name: z.string(),\n  currency_code: z.string(),\n  bill_cycle: z.string(),\n  bill_cycle_anchor: z.string(),\n  invoice_email: z.string(),\n  invoice_language: z.string(),\n  tax_id: z.string().nullable(),\n  invoice_address: z.record(z.string(), z.unknown()),\n  next_bill_date: z.string(),\n  last_bill_date: z.string().nullable(),\n  billing_mode: z.string(),\n  credit_limit: z.string(),\n  payment_terms_days: z.number().int().nullable(),\n  auto_send_invoice: z.boolean(),\n  /** Spec F (F8): \u03A3 outstanding of open receivables and its overdue subset (batched per page). */\n  balance_due: z.string(),\n  overdue_amount: z.string(),\n  is_active: z.boolean(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\n// \u2500\u2500\u2500 CRUD route \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingAccount,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: billingAccountListQuerySchema,\n    entityId: billingEntityIds.account,\n    fields: [\n      'id',\n      'customer_id',\n      'customer_kind',\n      'name',\n      'currency_code',\n      'bill_cycle',\n      'bill_cycle_anchor',\n      'invoice_email',\n      'invoice_language',\n      'tax_id',\n      'invoice_address',\n      'next_bill_date',\n      'last_bill_date',\n      'billing_mode',\n      'credit_limit',\n      'payment_terms_days',\n      'auto_send_invoice',\n      'is_active',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      name: 'name',\n      createdAt: 'created_at',\n      updatedAt: 'updated_at',\n      nextBillDate: 'next_bill_date',\n    },\n    buildFilters: async (query, ctx) => {\n      const filters: Record<string, unknown> = {}\n      // Spec F (F8): accounts with an overdue receivable \u2014 one indexed\n      // DISTINCT over billing_invoices, intersected with any `id` filter.\n      if (query.hasOverdue === true && ctx.auth?.tenantId) {\n        const organizationIds = ctx.organizationIds ?? (ctx.selectedOrganizationId ? [ctx.selectedOrganizationId] : [])\n        const em = ctx.container.resolve<EntityManager>('em')\n        const overdueIds = await fetchOverdueAccountIds(em, { tenantId: ctx.auth.tenantId, organizationIds })\n        filters.id = { $in: overdueIds.length > 0 ? overdueIds : [NO_MATCH_ID] }\n      }\n      // `?id=<uuid>` narrows the list to one row \u2014 the detail page\n      // reads a single account through this filter.\n      if (typeof query.id === 'string' && query.id) {\n        const current = filters.id as { $in?: string[] } | undefined\n        filters.id = current?.$in ? { $in: current.$in.includes(query.id) ? [query.id] : [NO_MATCH_ID] } : { $eq: query.id }\n      }\n      if (typeof query.customerId === 'string' && query.customerId) {\n        filters.customer_id = { $eq: query.customerId }\n      }\n      if (typeof query.customerKind === 'string' && query.customerKind) {\n        filters.customer_kind = { $eq: query.customerKind }\n      }\n      if (typeof query.currencyCode === 'string' && query.currencyCode) {\n        filters.currency_code = { $eq: query.currencyCode.toUpperCase() }\n      }\n      if (typeof query.billCycle === 'string' && query.billCycle) {\n        filters.bill_cycle = { $eq: query.billCycle }\n      }\n      if (typeof query.billingMode === 'string' && query.billingMode) {\n        filters.billing_mode = { $eq: query.billingMode }\n      }\n      if (typeof query.isActive === 'boolean') {\n        filters.is_active = { $eq: query.isActive }\n      }\n      if (typeof query.search === 'string' && query.search.trim()) {\n        const pattern = `%${query.search.trim().replace(/[%_]/g, (m) => `\\\\${m}`)}%`\n        filters.name = { $ilike: pattern }\n      }\n      return filters\n    },\n  },\n  hooks: {\n    // Spec F (F8): balance due / overdue per row \u2014 one GROUP BY for the page.\n    afterList: async (payload: unknown, ctx: unknown) => {\n      const items = ((payload as { items?: unknown[] } | null)?.items ?? []) as Array<Record<string, unknown>>\n      if (items.length === 0) return\n      const first = items[0]\n      const tenantId = typeof first.tenant_id === 'string' ? first.tenant_id : null\n      const organizationId = typeof first.organization_id === 'string' ? first.organization_id : null\n      const ids = items.map((row) => row.id).filter((id): id is string => typeof id === 'string')\n      const financials =\n        tenantId && organizationId\n          ? await fetchAccountFinancials(\n              (ctx as { container: AwilixContainer }).container.resolve<EntityManager>('em'),\n              { tenantId, organizationId },\n              ids,\n            )\n          : new Map()\n      for (const row of items) {\n        const values = financialsOrZero(financials, String(row.id))\n        row.balance_due = values.balance_due\n        row.overdue_amount = values.overdue_amount\n      }\n    },\n  },\n  actions: {\n    create: {\n      commandId: 'billing.accounts.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingAccountCreateSchema.parse(scoped)\n      },\n      response: ({ result }) => ({ id: result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'billing.accounts.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingAccountUpdateSchema.parse(scoped)\n      },\n      response: () => ({ ok: true }),\n    },\n    delete: {\n      commandId: 'billing.accounts.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        // The factory hands delete a `{ body, query }` envelope \u2014 the\n        // id may arrive in either, depending on the caller.\n        const envelope = (raw ?? {}) as {\n          body?: Record<string, unknown>\n          query?: Record<string, unknown>\n        }\n        const body = envelope.body ?? {}\n        const query = envelope.query ?? {}\n        const scoped = withScopedPayload(body, ctx, translate)\n        const id =\n          (typeof body.id === 'string' && body.id) ||\n          (typeof query.id === 'string' && query.id) ||\n          null\n        if (!id) {\n          throw new Error('id is required')\n        }\n        return {\n          id,\n          tenantId: (scoped as { tenantId?: string }).tenantId,\n          organizationId: (scoped as { organizationId?: string }).organizationId,\n        }\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n})\n\nconst { POST, PUT, DELETE } = crud\nexport { POST, PUT, DELETE }\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingAccount',\n  pluralName: 'BillingAccounts',\n  querySchema: billingAccountListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingAccountListItemSchema),\n  create: {\n    schema: billingAccountCreateSchema,\n    responseSchema: defaultCreateResponseSchema,\n    description:\n      'Creates a new billing account for a customer \u2014 a company or a person (`customerKind`, default `company`). ' +\n      '`invoiceLanguage` must be a language supported by the invoice template (`en`, `pl`; default `en`).',\n  },\n  update: {\n    schema: billingAccountUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description:\n      'Updates a billing account. `currencyCode`, `customerId` and `customerKind` are immutable.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Soft-deletes a billing account (sets `deleted_at`).',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AAGpC,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB,wBAAwB,wBAAwB;AAGjF,MAAM,cAAc;AACpB,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACvE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAAA,EACtE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AAC3E;AAEO,MAAM,WAAW;AAKxB,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO;AAAA,EACtB,eAAe,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAAA,EAC3C,MAAM,EAAE,OAAO;AAAA,EACf,eAAe,EAAE,OAAO;AAAA,EACxB,YAAY,EAAE,OAAO;AAAA,EACrB,mBAAmB,EAAE,OAAO;AAAA,EAC5B,eAAe,EAAE,OAAO;AAAA,EACxB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACjD,gBAAgB,EAAE,OAAO;AAAA,EACzB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,OAAO;AAAA,EACvB,cAAc,EAAE,OAAO;AAAA,EACvB,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC9C,mBAAmB,EAAE,QAAQ;AAAA;AAAA,EAE7B,aAAa,EAAE,OAAO;AAAA,EACtB,gBAAgB,EAAE,OAAO;AAAA,EACzB,WAAW,EAAE,QAAQ;AAAA,EACrB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAI/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,WAAW;AAAA,MACX,WAAW;AAAA,MACX,cAAc;AAAA,IAChB;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,UAAmC,CAAC;AAG1C,UAAI,MAAM,eAAe,QAAQ,IAAI,MAAM,UAAU;AACnD,cAAM,kBAAkB,IAAI,oBAAoB,IAAI,yBAAyB,CAAC,IAAI,sBAAsB,IAAI,CAAC;AAC7G,cAAM,KAAK,IAAI,UAAU,QAAuB,IAAI;AACpD,cAAM,aAAa,MAAM,uBAAuB,IAAI,EAAE,UAAU,IAAI,KAAK,UAAU,gBAAgB,CAAC;AACpG,gBAAQ,KAAK,EAAE,KAAK,WAAW,SAAS,IAAI,aAAa,CAAC,WAAW,EAAE;AAAA,MACzE;AAGA,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,cAAM,UAAU,QAAQ;AACxB,gBAAQ,KAAK,SAAS,MAAM,EAAE,KAAK,QAAQ,IAAI,SAAS,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,MAAM,GAAG;AAAA,MACrH;AACA,UAAI,OAAO,MAAM,eAAe,YAAY,MAAM,YAAY;AAC5D,gBAAQ,cAAc,EAAE,KAAK,MAAM,WAAW;AAAA,MAChD;AACA,UAAI,OAAO,MAAM,iBAAiB,YAAY,MAAM,cAAc;AAChE,gBAAQ,gBAAgB,EAAE,KAAK,MAAM,aAAa;AAAA,MACpD;AACA,UAAI,OAAO,MAAM,iBAAiB,YAAY,MAAM,cAAc;AAChE,gBAAQ,gBAAgB,EAAE,KAAK,MAAM,aAAa,YAAY,EAAE;AAAA,MAClE;AACA,UAAI,OAAO,MAAM,cAAc,YAAY,MAAM,WAAW;AAC1D,gBAAQ,aAAa,EAAE,KAAK,MAAM,UAAU;AAAA,MAC9C;AACA,UAAI,OAAO,MAAM,gBAAgB,YAAY,MAAM,aAAa;AAC9D,gBAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AAAA,MAClD;AACA,UAAI,OAAO,MAAM,aAAa,WAAW;AACvC,gBAAQ,YAAY,EAAE,KAAK,MAAM,SAAS;AAAA,MAC5C;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,OAAO,KAAK,GAAG;AAC3D,cAAM,UAAU,IAAI,MAAM,OAAO,KAAK,EAAE,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACzE,gBAAQ,OAAO,EAAE,QAAQ,QAAQ;AAAA,MACnC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAAA,IAEL,WAAW,OAAO,SAAkB,QAAiB;AACnD,YAAM,QAAU,SAA0C,SAAS,CAAC;AACpE,UAAI,MAAM,WAAW,EAAG;AACxB,YAAM,QAAQ,MAAM,CAAC;AACrB,YAAM,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AACzE,YAAM,iBAAiB,OAAO,MAAM,oBAAoB,WAAW,MAAM,kBAAkB;AAC3F,YAAM,MAAM,MAAM,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,CAAC,OAAqB,OAAO,OAAO,QAAQ;AAC1F,YAAM,aACJ,YAAY,iBACR,MAAM;AAAA,QACH,IAAuC,UAAU,QAAuB,IAAI;AAAA,QAC7E,EAAE,UAAU,eAAe;AAAA,QAC3B;AAAA,MACF,IACA,oBAAI,IAAI;AACd,iBAAW,OAAO,OAAO;AACvB,cAAM,SAAS,iBAAiB,YAAY,OAAO,IAAI,EAAE,CAAC;AAC1D,YAAI,cAAc,OAAO;AACzB,YAAI,iBAAiB,OAAO;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,2BAA2B,MAAM,MAAM;AAAA,MAChD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,MAAM,KAAK;AAAA,MACpD,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,2BAA2B,MAAM,MAAM;AAAA,MAChD;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAGhD,cAAM,WAAY,OAAO,CAAC;AAI1B,cAAM,OAAO,SAAS,QAAQ,CAAC;AAC/B,cAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,cAAM,SAAS,kBAAkB,MAAM,KAAK,SAAS;AACrD,cAAM,KACH,OAAO,KAAK,OAAO,YAAY,KAAK,MACpC,OAAO,MAAM,OAAO,YAAY,MAAM,MACvC;AACF,YAAI,CAAC,IAAI;AACP,gBAAM,IAAI,MAAM,gBAAgB;AAAA,QAClC;AACA,eAAO;AAAA,UACL;AAAA,UACA,UAAW,OAAiC;AAAA,UAC5C,gBAAiB,OAAuC;AAAA,QAC1D;AAAA,MACF;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AACF,CAAC;AAED,MAAM,EAAE,MAAM,KAAK,OAAO,IAAI;AAEvB,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,4BAA4B;AAAA,EAC9E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAEJ;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EACJ;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/export/account/[id]/route.js

@@ -112,15 +112,16 @@ async function GET(req, { params }) {
       )
     ]);
     const invoiceRows = await em.execute(
-      `SELECT id, invoice_number, status, status_entry_id, issue_date, due_date,
-              currency_code, subtotal_net_amount, grand_total_net_amount,
-              grand_total_gross_amount, paid_total_amount, outstanding_amount,
-              metadata, created_at, updated_at, deleted_at
-       FROM sales_invoices
+      `SELECT id, number, document_type, series, status, test_run, bill_run_id, bill_date,
+              period_start, period_end, issue_date, due_date, posted_at, currency_code,
+              subtotal_net, tax_total, total_gross, paid_total, credited_total, outstanding,
+              corrects_invoice_id, correction_reason, topup_id, buyer_snapshot, seller_snapshot,
+              metadata, created_at, updated_at
+       FROM billing_invoices
        WHERE tenant_id = ?
          AND organization_id = ?
          AND deleted_at IS NULL
-         AND metadata->>'bill_account_id' = ?
+         AND bill_account_id = ?
          AND created_at >= ?
          AND created_at <= ?
        ORDER BY created_at DESC
@@ -140,7 +141,10 @@ async function GET(req, { params }) {
     return NextResponse.json({
       exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
       // v2 adds prepaid balance / transactions / top-ups / statements (SPEC-002).
-      schemaVersion: 2,
+      // v3 (Spec 0): invoices come from billing_invoices with billing field names.
+      // v4 (Spec B): items carry taxRate; the account carries paymentTermsDays /
+      // autoSendInvoice; invoice metadata may carry draft_number / deliveries.
+      schemaVersion: 4,
       tenantId,
       organizationId,
       window: {

package/dist/modules/billing/api/export/account/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/billing/api/export/account/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  BillingAccount,\n  BillingAccountBalance,\n  BillingAccountTransaction,\n  BillingAccountUsage,\n  BillingItem,\n  BillingStatement,\n  BillingTopup,\n  BillingRunOutcome,\n  BillingDraftInvoiceEdit,\n} from '../../../../data/entities'\n\n/**\n * `GET /api/billing/export/account/[id]` \u2014 GDPR portability dump.\n *\n * Returns a full JSON serialization of a single Billing Account\n * including:\n *   - The account row itself.\n *   - Every active + soft-deleted `BillingItem` for the account.\n *   - Every `BillingAccountUsage` record.\n *   - Every `BillingRunOutcome` row referencing the account.\n *   - Every `core/sales` invoice the engine emitted for the account\n *     (matched via `metadata->>'bill_account_id'`).\n *   - Every `BillingDraftInvoiceEdit` audit row for those invoices.\n *\n * Scope: the caller's auth tenant/organization is the authority \u2014 a\n * 404 is returned even for valid UUIDs that belong to a different\n * tenant (no cross-tenant leak).\n *\n * Soft-deleted rows are included on purpose: GDPR portability is\n * about the data we still hold, not just the data the UI shows.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.account.view'] },\n}\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ id: string }> },\n) {\n  let container: Awaited<ReturnType<typeof createRequestContainer>> | null = null\n  try {\n    container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const tenantId = auth.tenantId\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json(\n        { error: 'Organization scope required' },\n        { status: 403 },\n      )\n    }\n\n    const { id: accountId } = await params\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const account = await em.findOne(BillingAccount, {\n      id: accountId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!account) {\n      return NextResponse.json({ error: 'Account not found' }, { status: 404 })\n    }\n\n    // Time-window cap for usage records, run outcomes and invoices.\n    //\n    // Scale note: a telco account can carry millions of usage rows.\n    // Returning everything would OOM on the export path. We default\n    // to the last 12 months and let the caller override via `since` /\n    // `until` for full GDPR-compliance dumps (a regulator request that\n    // legitimately needs the lifetime export should set `since=1970-01-01`).\n    // Each query is independently capped by `EXPORT_HARD_LIMIT` so a\n    // single year of pathological volume still returns rather than\n    // hanging.\n    const url = new URL(req.url)\n    const since = parseDate(url.searchParams.get('since'))\n      ?? defaultSince()\n    const until = parseDate(url.searchParams.get('until')) ?? new Date()\n\n    const [items, usage, outcomes, balance, transactions, topups, statements] = await Promise.all([\n      // Items are bounded by integration volume (typically <100 per\n      // account); no time-window needed \u2014 they often outlive a single\n      // export window and the operator needs to see active items\n      // regardless of when they were created.\n      em.find(\n        BillingItem,\n        { tenantId, organizationId, billAccountId: account.id } as never,\n        { limit: EXPORT_HARD_LIMIT },\n      ),\n      em.find(\n        BillingAccountUsage,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          periodEnd: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { periodEnd: 'DESC' } },\n      ),\n      em.find(\n        BillingRunOutcome,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      // SPEC-002 prepaid data \u2014 the balance row + the windowed money trail.\n      em.findOne(BillingAccountBalance, {\n        tenantId,\n        billAccountId: account.id,\n      } as never),\n      em.find(\n        BillingAccountTransaction,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      em.find(\n        BillingTopup,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      em.find(\n        BillingStatement,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          periodEnd: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { periodEnd: 'DESC' } },\n      ),\n    ])\n\n    // Invoices created in the window. The `metadata->>'bill_account_id'`\n    // predicate keeps non-billing core/sales invoices out.\n    const invoiceRows = (await em.execute(\n      `SELECT id, invoice_number, status, status_entry_id, issue_date, due_date,\n              currency_code, subtotal_net_amount, grand_total_net_amount,\n              grand_total_gross_amount, paid_total_amount, outstanding_amount,\n              metadata, created_at, updated_at, deleted_at\n       FROM sales_invoices\n       WHERE tenant_id = ?\n         AND organization_id = ?\n         AND deleted_at IS NULL\n         AND metadata->>'bill_account_id' = ?\n         AND created_at >= ?\n         AND created_at <= ?\n       ORDER BY created_at DESC\n       LIMIT ?`,\n      [tenantId, organizationId, account.id, since, until, EXPORT_HARD_LIMIT],\n    )) as unknown as Array<{ id: string }>\n\n    const invoiceIds = invoiceRows.map((r) => r.id)\n    const draftEdits =\n      invoiceIds.length > 0\n        ? await em.find(\n            BillingDraftInvoiceEdit,\n            {\n              tenantId,\n              organizationId,\n              invoiceId: { $in: invoiceIds },\n            } as never,\n            { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n          )\n        : []\n\n    return NextResponse.json({\n      exportedAt: new Date().toISOString(),\n      // v2 adds prepaid balance / transactions / top-ups / statements (SPEC-002).\n      schemaVersion: 2,\n      tenantId,\n      organizationId,\n      window: {\n        since: since.toISOString(),\n        until: until.toISOString(),\n        hardLimit: EXPORT_HARD_LIMIT,\n      },\n      account,\n      items,\n      usage,\n      runOutcomes: outcomes,\n      invoices: invoiceRows,\n      draftInvoiceEdits: draftEdits,\n      // SPEC-002 prepaid section.\n      balance,\n      transactions,\n      topups,\n      statements,\n    })\n  } catch (err) {\n    console.error('[billing/export/account.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\n/**\n * Per-collection cap to keep a single export bounded in size and time\n * even when the caller asks for `since=1970-01-01`. The full GDPR\n * lifetime dump for an outlier account requires a follow-up\n * background-job approach (chunked NDJSON to object storage) \u2014 out of\n * scope for the v1 admin export endpoint.\n */\nconst EXPORT_HARD_LIMIT = 50_000\n\n/**\n * Default time window for the export \u2014 last 12 months. Operators\n * pulling for routine GDPR requests almost always want a finite\n * window; the regulator-compliance \"lifetime\" case overrides via\n * `?since=1970-01-01`.\n */\nfunction defaultSince(): Date {\n  const d = new Date()\n  d.setUTCFullYear(d.getUTCFullYear() - 1)\n  return d\n}\n\nfunction parseDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  const d = new Date(value)\n  return Number.isNaN(d.getTime()) ? null : d\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Export a billing account (GDPR portability)',\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n        {\n          name: 'since',\n          in: 'query',\n          required: false,\n          description:\n            'ISO timestamp; lower bound for usage / outcomes / invoices windows. Defaults to today \u2212 12 months.',\n          schema: { type: 'string', format: 'date-time' },\n        },\n        {\n          name: 'until',\n          in: 'query',\n          required: false,\n          description: 'ISO timestamp; upper bound. Defaults to now.',\n          schema: { type: 'string', format: 'date-time' },\n        },\n      ],\n      description:\n        \"Returns a JSON dump of a single Billing Account: the account itself, every Billing Item (no time cap \u2014 items often outlive a single export window), and the Usage records / BillRunOutcomes / emitted core/sales invoices / BillingDraftInvoiceEdit rows whose timestamps fall in the [since, until] window (defaults to the last 12 months). Each collection is independently capped by EXPORT_HARD_LIMIT = 50,000 rows. Lifetime dumps for outlier accounts need a follow-up chunked background-job approach \u2014 out of scope for this v1 endpoint.\",\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAuBA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI,YAAuE;AAC3E,MAAI;AACF,gBAAY,MAAM,uBAAuB;AACzC,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,IAAI,UAAU,IAAI,MAAM;AAEhC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAC/C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAYA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC,KAChD,aAAa;AAClB,UAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC,KAAK,oBAAI,KAAK;AAEnE,UAAM,CAAC,OAAO,OAAO,UAAU,SAAS,cAAc,QAAQ,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,MAK5F,GAAG;AAAA,QACD;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,QAAQ,GAAG;AAAA,QACtD,EAAE,OAAO,kBAAkB;AAAA,MAC7B;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA;AAAA,MAEA,GAAG,QAAQ,uBAAuB;AAAA,QAChC;AAAA,QACA,eAAe,QAAQ;AAAA,MACzB,CAAU;AAAA,MACV,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,IACF,CAAC;AAID,UAAM,cAAe,MAAM,GAAG;AAAA,MAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAaA,CAAC,UAAU,gBAAgB,QAAQ,IAAI,OAAO,OAAO,iBAAiB;AAAA,IACxE;AAEA,UAAM,aAAa,YAAY,IAAI,CAAC,MAAM,EAAE,EAAE;AAC9C,UAAM,aACJ,WAAW,SAAS,IAChB,MAAM,GAAG;AAAA,MACP;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW,EAAE,KAAK,WAAW;AAAA,MAC/B;AAAA,MACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC7D,IACA,CAAC;AAEP,WAAO,aAAa,KAAK;AAAA,MACvB,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA;AAAA,MAEnC,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,QACN,OAAO,MAAM,YAAY;AAAA,QACzB,OAAO,MAAM,YAAY;AAAA,QACzB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,UAAU;AAAA,MACV,mBAAmB;AAAA;AAAA,MAEnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,gCAAgC,GAAG;AACjD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AASA,MAAM,oBAAoB;AAQ1B,SAAS,eAAqB;AAC5B,QAAM,IAAI,oBAAI,KAAK;AACnB,IAAE,eAAe,EAAE,eAAe,IAAI,CAAC;AACvC,SAAO;AACT;AAEA,SAAS,UAAU,OAA+C;AAChE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,IAAI,IAAI,KAAK,KAAK;AACxB,SAAO,OAAO,MAAM,EAAE,QAAQ,CAAC,IAAI,OAAO;AAC5C;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,aACE;AAAA,UACF,QAAQ,EAAE,MAAM,UAAU,QAAQ,YAAY;AAAA,QAChD;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,aAAa;AAAA,UACb,QAAQ,EAAE,MAAM,UAAU,QAAQ,YAAY;AAAA,QAChD;AAAA,MACF;AAAA,MACA,aACE;AAAA,IACJ;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  BillingAccount,\n  BillingAccountBalance,\n  BillingAccountTransaction,\n  BillingAccountUsage,\n  BillingItem,\n  BillingStatement,\n  BillingTopup,\n  BillingRunOutcome,\n  BillingDraftInvoiceEdit,\n} from '../../../../data/entities'\n\n/**\n * `GET /api/billing/export/account/[id]` \u2014 GDPR portability dump.\n *\n * Returns a full JSON serialization of a single Billing Account\n * including:\n *   - The account row itself.\n *   - Every active + soft-deleted `BillingItem` for the account.\n *   - Every `BillingAccountUsage` record.\n *   - Every `BillingRunOutcome` row referencing the account.\n *   - Every billing document (`billing_invoices`) of the account.\n *   - Every `BillingDraftInvoiceEdit` audit row for those invoices.\n *\n * Scope: the caller's auth tenant/organization is the authority \u2014 a\n * 404 is returned even for valid UUIDs that belong to a different\n * tenant (no cross-tenant leak).\n *\n * Soft-deleted rows are included on purpose: GDPR portability is\n * about the data we still hold, not just the data the UI shows.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.account.view'] },\n}\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ id: string }> },\n) {\n  let container: Awaited<ReturnType<typeof createRequestContainer>> | null = null\n  try {\n    container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const tenantId = auth.tenantId\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json(\n        { error: 'Organization scope required' },\n        { status: 403 },\n      )\n    }\n\n    const { id: accountId } = await params\n\n    const em = (container.resolve('em') as EntityManager).fork()\n    const account = await em.findOne(BillingAccount, {\n      id: accountId,\n      tenantId,\n      organizationId,\n      deletedAt: null,\n    })\n    if (!account) {\n      return NextResponse.json({ error: 'Account not found' }, { status: 404 })\n    }\n\n    // Time-window cap for usage records, run outcomes and invoices.\n    //\n    // Scale note: a telco account can carry millions of usage rows.\n    // Returning everything would OOM on the export path. We default\n    // to the last 12 months and let the caller override via `since` /\n    // `until` for full GDPR-compliance dumps (a regulator request that\n    // legitimately needs the lifetime export should set `since=1970-01-01`).\n    // Each query is independently capped by `EXPORT_HARD_LIMIT` so a\n    // single year of pathological volume still returns rather than\n    // hanging.\n    const url = new URL(req.url)\n    const since = parseDate(url.searchParams.get('since'))\n      ?? defaultSince()\n    const until = parseDate(url.searchParams.get('until')) ?? new Date()\n\n    const [items, usage, outcomes, balance, transactions, topups, statements] = await Promise.all([\n      // Items are bounded by integration volume (typically <100 per\n      // account); no time-window needed \u2014 they often outlive a single\n      // export window and the operator needs to see active items\n      // regardless of when they were created.\n      em.find(\n        BillingItem,\n        { tenantId, organizationId, billAccountId: account.id } as never,\n        { limit: EXPORT_HARD_LIMIT },\n      ),\n      em.find(\n        BillingAccountUsage,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          periodEnd: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { periodEnd: 'DESC' } },\n      ),\n      em.find(\n        BillingRunOutcome,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      // SPEC-002 prepaid data \u2014 the balance row + the windowed money trail.\n      em.findOne(BillingAccountBalance, {\n        tenantId,\n        billAccountId: account.id,\n      } as never),\n      em.find(\n        BillingAccountTransaction,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      em.find(\n        BillingTopup,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          createdAt: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n      ),\n      em.find(\n        BillingStatement,\n        {\n          tenantId,\n          organizationId,\n          billAccountId: account.id,\n          periodEnd: { $gte: since, $lte: until },\n        } as never,\n        { limit: EXPORT_HARD_LIMIT, orderBy: { periodEnd: 'DESC' } },\n      ),\n    ])\n\n    // Billing documents created in the window (Spec 0: billing_invoices).\n    const invoiceRows = (await em.execute(\n      `SELECT id, number, document_type, series, status, test_run, bill_run_id, bill_date,\n              period_start, period_end, issue_date, due_date, posted_at, currency_code,\n              subtotal_net, tax_total, total_gross, paid_total, credited_total, outstanding,\n              corrects_invoice_id, correction_reason, topup_id, buyer_snapshot, seller_snapshot,\n              metadata, created_at, updated_at\n       FROM billing_invoices\n       WHERE tenant_id = ?\n         AND organization_id = ?\n         AND deleted_at IS NULL\n         AND bill_account_id = ?\n         AND created_at >= ?\n         AND created_at <= ?\n       ORDER BY created_at DESC\n       LIMIT ?`,\n      [tenantId, organizationId, account.id, since, until, EXPORT_HARD_LIMIT],\n    )) as unknown as Array<{ id: string }>\n\n    const invoiceIds = invoiceRows.map((r) => r.id)\n    const draftEdits =\n      invoiceIds.length > 0\n        ? await em.find(\n            BillingDraftInvoiceEdit,\n            {\n              tenantId,\n              organizationId,\n              invoiceId: { $in: invoiceIds },\n            } as never,\n            { limit: EXPORT_HARD_LIMIT, orderBy: { createdAt: 'DESC' } },\n          )\n        : []\n\n    return NextResponse.json({\n      exportedAt: new Date().toISOString(),\n      // v2 adds prepaid balance / transactions / top-ups / statements (SPEC-002).\n      // v3 (Spec 0): invoices come from billing_invoices with billing field names.\n      // v4 (Spec B): items carry taxRate; the account carries paymentTermsDays /\n      // autoSendInvoice; invoice metadata may carry draft_number / deliveries.\n      schemaVersion: 4,\n      tenantId,\n      organizationId,\n      window: {\n        since: since.toISOString(),\n        until: until.toISOString(),\n        hardLimit: EXPORT_HARD_LIMIT,\n      },\n      account,\n      items,\n      usage,\n      runOutcomes: outcomes,\n      invoices: invoiceRows,\n      draftInvoiceEdits: draftEdits,\n      // SPEC-002 prepaid section.\n      balance,\n      transactions,\n      topups,\n      statements,\n    })\n  } catch (err) {\n    console.error('[billing/export/account.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\n/**\n * Per-collection cap to keep a single export bounded in size and time\n * even when the caller asks for `since=1970-01-01`. The full GDPR\n * lifetime dump for an outlier account requires a follow-up\n * background-job approach (chunked NDJSON to object storage) \u2014 out of\n * scope for the v1 admin export endpoint.\n */\nconst EXPORT_HARD_LIMIT = 50_000\n\n/**\n * Default time window for the export \u2014 last 12 months. Operators\n * pulling for routine GDPR requests almost always want a finite\n * window; the regulator-compliance \"lifetime\" case overrides via\n * `?since=1970-01-01`.\n */\nfunction defaultSince(): Date {\n  const d = new Date()\n  d.setUTCFullYear(d.getUTCFullYear() - 1)\n  return d\n}\n\nfunction parseDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  const d = new Date(value)\n  return Number.isNaN(d.getTime()) ? null : d\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Export a billing account (GDPR portability)',\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n        {\n          name: 'since',\n          in: 'query',\n          required: false,\n          description:\n            'ISO timestamp; lower bound for usage / outcomes / invoices windows. Defaults to today \u2212 12 months.',\n          schema: { type: 'string', format: 'date-time' },\n        },\n        {\n          name: 'until',\n          in: 'query',\n          required: false,\n          description: 'ISO timestamp; upper bound. Defaults to now.',\n          schema: { type: 'string', format: 'date-time' },\n        },\n      ],\n      description:\n        \"Returns a JSON dump of a single Billing Account: the account itself, every Billing Item (no time cap \u2014 items often outlive a single export window), and the Usage records / BillRunOutcomes / emitted core/sales invoices / BillingDraftInvoiceEdit rows whose timestamps fall in the [since, until] window (defaults to the last 12 months). Each collection is independently capped by EXPORT_HARD_LIMIT = 50,000 rows. Lifetime dumps for outlier accounts need a follow-up chunked background-job approach \u2014 out of scope for this v1 endpoint.\",\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAsBA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI,YAAuE;AAC3E,MAAI;AACF,gBAAY,MAAM,uBAAuB;AACzC,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,IAAI,UAAU,IAAI,MAAM;AAEhC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAC/C,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAYA,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC,KAChD,aAAa;AAClB,UAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC,KAAK,oBAAI,KAAK;AAEnE,UAAM,CAAC,OAAO,OAAO,UAAU,SAAS,cAAc,QAAQ,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,MAK5F,GAAG;AAAA,QACD;AAAA,QACA,EAAE,UAAU,gBAAgB,eAAe,QAAQ,GAAG;AAAA,QACtD,EAAE,OAAO,kBAAkB;AAAA,MAC7B;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA;AAAA,MAEA,GAAG,QAAQ,uBAAuB;AAAA,QAChC;AAAA,QACA,eAAe,QAAQ;AAAA,MACzB,CAAU;AAAA,MACV,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,MACA,GAAG;AAAA,QACD;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA,eAAe,QAAQ;AAAA,UACvB,WAAW,EAAE,MAAM,OAAO,MAAM,MAAM;AAAA,QACxC;AAAA,QACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MAC7D;AAAA,IACF,CAAC;AAGD,UAAM,cAAe,MAAM,GAAG;AAAA,MAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA,CAAC,UAAU,gBAAgB,QAAQ,IAAI,OAAO,OAAO,iBAAiB;AAAA,IACxE;AAEA,UAAM,aAAa,YAAY,IAAI,CAAC,MAAM,EAAE,EAAE;AAC9C,UAAM,aACJ,WAAW,SAAS,IAChB,MAAM,GAAG;AAAA,MACP;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,WAAW,EAAE,KAAK,WAAW;AAAA,MAC/B;AAAA,MACA,EAAE,OAAO,mBAAmB,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,IAC7D,IACA,CAAC;AAEP,WAAO,aAAa,KAAK;AAAA,MACvB,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,MAKnC,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,QACN,OAAO,MAAM,YAAY;AAAA,QACzB,OAAO,MAAM,YAAY;AAAA,QACzB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa;AAAA,MACb,UAAU;AAAA,MACV,mBAAmB;AAAA;AAAA,MAEnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,gCAAgC,GAAG;AACjD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AASA,MAAM,oBAAoB;AAQ1B,SAAS,eAAqB;AAC5B,QAAM,IAAI,oBAAI,KAAK;AACnB,IAAE,eAAe,EAAE,eAAe,IAAI,CAAC;AACvC,SAAO;AACT;AAEA,SAAS,UAAU,OAA+C;AAChE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,IAAI,IAAI,KAAK,KAAK;AACxB,SAAO,OAAO,MAAM,EAAE,QAAQ,CAAC,IAAI,OAAO;AAC5C;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,aACE;AAAA,UACF,QAAQ,EAAE,MAAM,UAAU,QAAQ,YAAY;AAAA,QAChD;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,aAAa;AAAA,UACb,QAAQ,EAAE,MAAM,UAAU,QAAQ,YAAY;AAAA,QAChD;AAAA,MACF;AAAA,MACA,aACE;AAAA,IACJ;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/billing/api/invoices/[id]/memos/route.js

@@ -0,0 +1,54 @@
+import { z } from "zod";
+import { readRequestBody, runCommandRoute } from "../../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.correct"] }
+};
+const lineSchema = z.object({
+  correctsLineId: z.string().uuid().optional(),
+  description: z.string().trim().min(1).max(500),
+  quantity: z.coerce.number().positive(),
+  unitPriceNet: z.coerce.number().nonnegative(),
+  taxRate: z.coerce.number().min(0).max(100).optional()
+});
+const bodySchema = z.object({
+  invoiceId: z.string().uuid(),
+  type: z.enum(["credit_memo", "debit_memo"]),
+  reason: z.string().trim().min(1).max(1e3),
+  lines: z.array(lineSchema).max(200).optional()
+});
+async function POST(req, { params }) {
+  const { id } = await params;
+  const raw = await readRequestBody(req);
+  return runCommandRoute(
+    req,
+    {
+      commandId: "billing.invoices.create_memo",
+      bodySchema,
+      resourceKind: "billing.invoice",
+      resourceId: (body) => body.invoiceId,
+      logLabel: "billing/invoices/[id]/memos.POST"
+    },
+    { ...raw && typeof raw === "object" ? raw : {}, invoiceId: id }
+  );
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Create a credit or debit memo",
+      description: "Creates a draft memo for a posted / partially paid / paid invoice (a fully credited invoice accepts debit memos only). `reason` is required and printed. Credit memo without `lines` = full credit of every original line; lines with `correctsLineId` keep the original VAT rate; new lines default to the organization rate. Amounts are positive \u2014 the document type gives the sign.",
+      requestBody: { schema: bodySchema.omit({ invoiceId: true }) },
+      responses: [{ status: 200, description: "`{ memoId, number, documentType, totalGross }`" }],
+      errors: [
+        { status: 409, description: "`billing.memo.invalid_original` / `billing.memo.exceeds_invoice`" },
+        { status: 400, description: "`billing.memo.invalid_line`" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/[id]/memos/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/billing/api/invoices/%5Bid%5D/memos/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { readRequestBody, runCommandRoute } from '../../../../lib/commandRoute'\n\n/**\n * `POST /api/billing/invoices/[id]/memos` \u2014 create a DRAFT credit or debit\n * memo correcting a posted billing invoice (Spec D). Post it with\n * `POST /api/billing/invoices/post`.\n */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.correct'] },\n}\n\nconst lineSchema = z.object({\n  correctsLineId: z.string().uuid().optional(),\n  description: z.string().trim().min(1).max(500),\n  quantity: z.coerce.number().positive(),\n  unitPriceNet: z.coerce.number().nonnegative(),\n  taxRate: z.coerce.number().min(0).max(100).optional(),\n})\n\nconst bodySchema = z.object({\n  invoiceId: z.string().uuid(),\n  type: z.enum(['credit_memo', 'debit_memo']),\n  reason: z.string().trim().min(1).max(1000),\n  lines: z.array(lineSchema).max(200).optional(),\n})\n\nexport async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  const { id } = await params\n  const raw = (await readRequestBody(req)) as Record<string, unknown>\n  return runCommandRoute(\n    req,\n    {\n      commandId: 'billing.invoices.create_memo',\n      bodySchema,\n      resourceKind: 'billing.invoice',\n      resourceId: (body) => body.invoiceId,\n      logLabel: 'billing/invoices/[id]/memos.POST',\n    },\n    { ...(raw && typeof raw === 'object' ? raw : {}), invoiceId: id },\n  )\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Create a credit or debit memo',\n      description:\n        'Creates a draft memo for a posted / partially paid / paid invoice (a fully credited invoice ' +\n        'accepts debit memos only). `reason` is required and printed. Credit memo without `lines` = full ' +\n        'credit of every original line; lines with `correctsLineId` keep the original VAT rate; new lines ' +\n        'default to the organization rate. Amounts are positive \u2014 the document type gives the sign.',\n      requestBody: { schema: bodySchema.omit({ invoiceId: true }) },\n      responses: [{ status: 200, description: '`{ memoId, number, documentType, totalGross }`' }],\n      errors: [\n        { status: 409, description: '`billing.memo.invalid_original` / `billing.memo.exceeds_invoice`' },\n        { status: 400, description: '`billing.memo.invalid_line`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,iBAAiB,uBAAuB;AAQ1C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,UAAU,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,OAAO,EAAE,YAAY;AAAA,EAC5C,SAAS,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACtD,CAAC;AAED,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,MAAM,EAAE,KAAK,CAAC,eAAe,YAAY,CAAC;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AAAA,EACzC,OAAO,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS;AAC/C,CAAC;AAED,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAwC;AACxF,QAAM,EAAE,GAAG,IAAI,MAAM;AACrB,QAAM,MAAO,MAAM,gBAAgB,GAAG;AACtC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX;AAAA,MACA,cAAc;AAAA,MACd,YAAY,CAAC,SAAS,KAAK;AAAA,MAC3B,UAAU;AAAA,IACZ;AAAA,IACA,EAAE,GAAI,OAAO,OAAO,QAAQ,WAAW,MAAM,CAAC,GAAI,WAAW,GAAG;AAAA,EAClE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAIF,aAAa,EAAE,QAAQ,WAAW,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE;AAAA,MAC5D,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iDAAiD,CAAC;AAAA,MAC1F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mEAAmE;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}