@dainamite/billing 0.20.0 → 0.21.0

package/dist/modules/billing/lib/billingSettings.js

@@ -0,0 +1,116 @@
+import { BillingSettings } from "../data/entities.js";
+import { DEFAULT_NUMBER_MASKS, maskFor } from "./numbering.js";
+const BILLING_SETTINGS_DEFAULTS = {
+  lowBalanceThresholdDefault: "0",
+  nearLimitBufferDefault: "0",
+  statementEnabled: true,
+  topupTaxRate: "0",
+  topupProvider: "stripe",
+  numberMasks: { ...DEFAULT_NUMBER_MASKS },
+  defaultPaymentTermsDays: 14,
+  defaultTaxRate: "23",
+  prepaidTaxPoint: "topup"
+};
+function receiptTaxRate(settings) {
+  if (settings.prepaidTaxPoint === "consumption") return 0;
+  const n = Number.parseFloat(String(settings.topupTaxRate ?? "0"));
+  return Number.isFinite(n) && n > 0 ? n : 0;
+}
+function taxRateColumn(ratePercent) {
+  return (Math.round(ratePercent * 1e4) / 1e4).toString();
+}
+const REQUIRED_SELLER_FIELDS = ["legalName", "sellerAddress", "taxId", "iban"];
+function missingSellerFields(settings) {
+  return REQUIRED_SELLER_FIELDS.filter((field) => {
+    const value = settings[field];
+    if (value === null || value === void 0) return true;
+    if (typeof value === "string") return value.trim() === "";
+    return Object.keys(value).length === 0;
+  });
+}
+function buildSellerSnapshot(settings) {
+  return {
+    organization_id: settings.organizationId,
+    legal_name: settings.legalName ?? null,
+    address: settings.sellerAddress ?? null,
+    tax_id: settings.taxId ?? null,
+    bank_name: settings.bankName ?? null,
+    iban: settings.iban ?? null,
+    bic: settings.bic ?? null,
+    invoice_footer: settings.invoiceFooter ?? null,
+    logo_attachment_id: settings.logoAttachmentId ?? null
+  };
+}
+async function getBillingSettings(em, scope) {
+  const where = { tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null };
+  const existing = await em.findOne(BillingSettings, where);
+  if (existing) return existing;
+  const now = /* @__PURE__ */ new Date();
+  await em.execute(
+    `INSERT INTO billing_settings
+       (tenant_id, organization_id, low_balance_threshold_default, near_limit_buffer_default,
+        statement_enabled, topup_tax_rate, topup_provider, number_masks, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?::jsonb, ?, ?)
+     ON CONFLICT (tenant_id, organization_id) WHERE deleted_at IS NULL DO NOTHING`,
+    [
+      scope.tenantId,
+      scope.organizationId,
+      BILLING_SETTINGS_DEFAULTS.lowBalanceThresholdDefault,
+      BILLING_SETTINGS_DEFAULTS.nearLimitBufferDefault,
+      BILLING_SETTINGS_DEFAULTS.statementEnabled,
+      BILLING_SETTINGS_DEFAULTS.topupTaxRate,
+      BILLING_SETTINGS_DEFAULTS.topupProvider,
+      JSON.stringify(BILLING_SETTINGS_DEFAULTS.numberMasks),
+      now,
+      now
+    ]
+  );
+  const created = await em.findOne(BillingSettings, where);
+  if (!created) throw new Error("Billing settings could not be initialised");
+  return created;
+}
+function numberMaskFor(settings, series) {
+  return maskFor(settings.numberMasks ?? null, series);
+}
+function numberOr(value, fallback) {
+  const n = typeof value === "number" ? value : Number.parseFloat(value ?? "");
+  return Number.isFinite(n) ? n : fallback;
+}
+function serializeBillingSettings(settings) {
+  return {
+    id: settings.id,
+    lowBalanceThresholdDefault: numberOr(settings.lowBalanceThresholdDefault, 0),
+    nearLimitBufferDefault: numberOr(settings.nearLimitBufferDefault, 0),
+    statementEnabled: settings.statementEnabled,
+    topupTaxRate: numberOr(settings.topupTaxRate, 0),
+    prepaidTaxPoint: settings.prepaidTaxPoint === "consumption" ? "consumption" : "topup",
+    topupProvider: settings.topupProvider,
+    numberMasks: {
+      invoice: numberMaskFor(settings, "invoice"),
+      credit_memo: numberMaskFor(settings, "credit_memo"),
+      receipt: numberMaskFor(settings, "receipt")
+    },
+    legalName: settings.legalName ?? "",
+    sellerAddress: settings.sellerAddress ?? null,
+    taxId: settings.taxId ?? "",
+    bankName: settings.bankName ?? "",
+    iban: settings.iban ?? "",
+    bic: settings.bic ?? "",
+    invoiceFooter: settings.invoiceFooter ?? "",
+    logoAttachmentId: settings.logoAttachmentId ?? null,
+    defaultPaymentTermsDays: settings.defaultPaymentTermsDays ?? BILLING_SETTINGS_DEFAULTS.defaultPaymentTermsDays,
+    defaultTaxRate: numberOr(settings.defaultTaxRate, 23)
+  };
+}
+export {
+  BILLING_SETTINGS_DEFAULTS,
+  REQUIRED_SELLER_FIELDS,
+  buildSellerSnapshot,
+  getBillingSettings,
+  missingSellerFields,
+  numberMaskFor,
+  receiptTaxRate,
+  serializeBillingSettings,
+  taxRateColumn
+};
+//# sourceMappingURL=billingSettings.js.map

package/dist/modules/billing/lib/billingSettings.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/billingSettings.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { BillingSettings } from '../data/entities'\nimport { DEFAULT_NUMBER_MASKS, maskFor, type DocumentSeries } from './numbering'\n\n/**\n * Per-organization billing settings (Spec 0, E-D2 / E-D5).\n *\n * Replaces the tenant-wide core `configs` rows billing used to seed. One row\n * per (tenant, organization), created lazily with today's defaults on first\n * read so every caller can rely on it existing. Spec B adds the seller /\n * payment / document fields (the INSERT below relies on their DB defaults:\n * 14 days terms, 23 % VAT, seller fields empty).\n */\n\nexport type SettingsScope = { tenantId: string; organizationId: string }\n\nexport const BILLING_SETTINGS_DEFAULTS = {\n  lowBalanceThresholdDefault: '0',\n  nearLimitBufferDefault: '0',\n  statementEnabled: true,\n  topupTaxRate: '0',\n  topupProvider: 'stripe',\n  numberMasks: { ...DEFAULT_NUMBER_MASKS } as Record<string, string>,\n  defaultPaymentTermsDays: 14,\n  defaultTaxRate: '23',\n  prepaidTaxPoint: 'topup',\n} as const\n\n/**\n * VAT rate printed on top-up receipts (Spec F, P-D11): `topup_tax_rate` when\n * the prepaid tax point is `topup`, 0 in `consumption` mode (VAT is charged\n * on each debit instead \u2014 never twice).\n */\nexport function receiptTaxRate(settings: Pick<BillingSettings, 'topupTaxRate' | 'prepaidTaxPoint'>): number {\n  if (settings.prepaidTaxPoint === 'consumption') return 0\n  const n = Number.parseFloat(String(settings.topupTaxRate ?? '0'))\n  return Number.isFinite(n) && n > 0 ? n : 0\n}\n\n/** numeric(7,4) column value for a VAT percentage. */\nexport function taxRateColumn(ratePercent: number): string {\n  return (Math.round(ratePercent * 10000) / 10000).toString()\n}\n\n/** Seller fields a posted (printable) invoice requires \u2014 Spec B, P-D4. */\nexport const REQUIRED_SELLER_FIELDS = ['legalName', 'sellerAddress', 'taxId', 'iban'] as const\nexport type RequiredSellerField = (typeof REQUIRED_SELLER_FIELDS)[number]\n\nexport function missingSellerFields(\n  settings: Pick<BillingSettings, RequiredSellerField>,\n): RequiredSellerField[] {\n  return REQUIRED_SELLER_FIELDS.filter((field) => {\n    const value = settings[field]\n    if (value === null || value === undefined) return true\n    if (typeof value === 'string') return value.trim() === ''\n    return Object.keys(value).length === 0\n  })\n}\n\n/**\n * Seller block frozen onto an invoice at post, so later settings edits never\n * change an issued document.\n */\nexport function buildSellerSnapshot(settings: BillingSettings): Record<string, unknown> {\n  return {\n    organization_id: settings.organizationId,\n    legal_name: settings.legalName ?? null,\n    address: settings.sellerAddress ?? null,\n    tax_id: settings.taxId ?? null,\n    bank_name: settings.bankName ?? null,\n    iban: settings.iban ?? null,\n    bic: settings.bic ?? null,\n    invoice_footer: settings.invoiceFooter ?? null,\n    logo_attachment_id: settings.logoAttachmentId ?? null,\n  }\n}\n\nexport async function getBillingSettings(em: EntityManager, scope: SettingsScope): Promise<BillingSettings> {\n  const where = { tenantId: scope.tenantId, organizationId: scope.organizationId, deletedAt: null }\n  const existing = await em.findOne(BillingSettings, where as never)\n  if (existing) return existing\n  // Race-safe create: a concurrent first read may insert the same row; the\n  // partial unique index makes ours a no-op and we re-read the winner.\n  const now = new Date()\n  await em.execute(\n    `INSERT INTO billing_settings\n       (tenant_id, organization_id, low_balance_threshold_default, near_limit_buffer_default,\n        statement_enabled, topup_tax_rate, topup_provider, number_masks, created_at, updated_at)\n     VALUES (?, ?, ?, ?, ?, ?, ?, ?::jsonb, ?, ?)\n     ON CONFLICT (tenant_id, organization_id) WHERE deleted_at IS NULL DO NOTHING`,\n    [\n      scope.tenantId,\n      scope.organizationId,\n      BILLING_SETTINGS_DEFAULTS.lowBalanceThresholdDefault,\n      BILLING_SETTINGS_DEFAULTS.nearLimitBufferDefault,\n      BILLING_SETTINGS_DEFAULTS.statementEnabled,\n      BILLING_SETTINGS_DEFAULTS.topupTaxRate,\n      BILLING_SETTINGS_DEFAULTS.topupProvider,\n      JSON.stringify(BILLING_SETTINGS_DEFAULTS.numberMasks),\n      now,\n      now,\n    ],\n  )\n  const created = await em.findOne(BillingSettings, where as never)\n  if (!created) throw new Error('Billing settings could not be initialised')\n  return created\n}\n\n/** Mask for a series, falling back to the default when unset or invalid. */\nexport function numberMaskFor(settings: Pick<BillingSettings, 'numberMasks'>, series: DocumentSeries): string {\n  return maskFor(settings.numberMasks ?? null, series)\n}\n\nfunction numberOr(value: string | number | null | undefined, fallback: number): number {\n  const n = typeof value === 'number' ? value : Number.parseFloat(value ?? '')\n  return Number.isFinite(n) ? n : fallback\n}\n\n/** Plain view of the settings \u2014 what the API returns and the UI edits. */\nexport function serializeBillingSettings(settings: BillingSettings) {\n  return {\n    id: settings.id,\n    lowBalanceThresholdDefault: numberOr(settings.lowBalanceThresholdDefault, 0),\n    nearLimitBufferDefault: numberOr(settings.nearLimitBufferDefault, 0),\n    statementEnabled: settings.statementEnabled,\n    topupTaxRate: numberOr(settings.topupTaxRate, 0),\n    prepaidTaxPoint: settings.prepaidTaxPoint === 'consumption' ? ('consumption' as const) : ('topup' as const),\n    topupProvider: settings.topupProvider,\n    numberMasks: {\n      invoice: numberMaskFor(settings, 'invoice'),\n      credit_memo: numberMaskFor(settings, 'credit_memo'),\n      receipt: numberMaskFor(settings, 'receipt'),\n    },\n    legalName: settings.legalName ?? '',\n    sellerAddress: settings.sellerAddress ?? null,\n    taxId: settings.taxId ?? '',\n    bankName: settings.bankName ?? '',\n    iban: settings.iban ?? '',\n    bic: settings.bic ?? '',\n    invoiceFooter: settings.invoiceFooter ?? '',\n    logoAttachmentId: settings.logoAttachmentId ?? null,\n    defaultPaymentTermsDays: settings.defaultPaymentTermsDays ?? BILLING_SETTINGS_DEFAULTS.defaultPaymentTermsDays,\n    defaultTaxRate: numberOr(settings.defaultTaxRate, 23),\n  }\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,sBAAsB,eAAoC;AAc5D,MAAM,4BAA4B;AAAA,EACvC,4BAA4B;AAAA,EAC5B,wBAAwB;AAAA,EACxB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,eAAe;AAAA,EACf,aAAa,EAAE,GAAG,qBAAqB;AAAA,EACvC,yBAAyB;AAAA,EACzB,gBAAgB;AAAA,EAChB,iBAAiB;AACnB;AAOO,SAAS,eAAe,UAA6E;AAC1G,MAAI,SAAS,oBAAoB,cAAe,QAAO;AACvD,QAAM,IAAI,OAAO,WAAW,OAAO,SAAS,gBAAgB,GAAG,CAAC;AAChE,SAAO,OAAO,SAAS,CAAC,KAAK,IAAI,IAAI,IAAI;AAC3C;AAGO,SAAS,cAAc,aAA6B;AACzD,UAAQ,KAAK,MAAM,cAAc,GAAK,IAAI,KAAO,SAAS;AAC5D;AAGO,MAAM,yBAAyB,CAAC,aAAa,iBAAiB,SAAS,MAAM;AAG7E,SAAS,oBACd,UACuB;AACvB,SAAO,uBAAuB,OAAO,CAAC,UAAU;AAC9C,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK,MAAM;AACvD,WAAO,OAAO,KAAK,KAAK,EAAE,WAAW;AAAA,EACvC,CAAC;AACH;AAMO,SAAS,oBAAoB,UAAoD;AACtF,SAAO;AAAA,IACL,iBAAiB,SAAS;AAAA,IAC1B,YAAY,SAAS,aAAa;AAAA,IAClC,SAAS,SAAS,iBAAiB;AAAA,IACnC,QAAQ,SAAS,SAAS;AAAA,IAC1B,WAAW,SAAS,YAAY;AAAA,IAChC,MAAM,SAAS,QAAQ;AAAA,IACvB,KAAK,SAAS,OAAO;AAAA,IACrB,gBAAgB,SAAS,iBAAiB;AAAA,IAC1C,oBAAoB,SAAS,oBAAoB;AAAA,EACnD;AACF;AAEA,eAAsB,mBAAmB,IAAmB,OAAgD;AAC1G,QAAM,QAAQ,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,gBAAgB,WAAW,KAAK;AAChG,QAAM,WAAW,MAAM,GAAG,QAAQ,iBAAiB,KAAc;AACjE,MAAI,SAAU,QAAO;AAGrB,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,GAAG;AAAA,IACP;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,MACE,MAAM;AAAA,MACN,MAAM;AAAA,MACN,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,0BAA0B;AAAA,MAC1B,KAAK,UAAU,0BAA0B,WAAW;AAAA,MACpD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,MAAM,GAAG,QAAQ,iBAAiB,KAAc;AAChE,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,2CAA2C;AACzE,SAAO;AACT;AAGO,SAAS,cAAc,UAAgD,QAAgC;AAC5G,SAAO,QAAQ,SAAS,eAAe,MAAM,MAAM;AACrD;AAEA,SAAS,SAAS,OAA2C,UAA0B;AACrF,QAAM,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,WAAW,SAAS,EAAE;AAC3E,SAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAClC;AAGO,SAAS,yBAAyB,UAA2B;AAClE,SAAO;AAAA,IACL,IAAI,SAAS;AAAA,IACb,4BAA4B,SAAS,SAAS,4BAA4B,CAAC;AAAA,IAC3E,wBAAwB,SAAS,SAAS,wBAAwB,CAAC;AAAA,IACnE,kBAAkB,SAAS;AAAA,IAC3B,cAAc,SAAS,SAAS,cAAc,CAAC;AAAA,IAC/C,iBAAiB,SAAS,oBAAoB,gBAAiB,gBAA2B;AAAA,IAC1F,eAAe,SAAS;AAAA,IACxB,aAAa;AAAA,MACX,SAAS,cAAc,UAAU,SAAS;AAAA,MAC1C,aAAa,cAAc,UAAU,aAAa;AAAA,MAClD,SAAS,cAAc,UAAU,SAAS;AAAA,IAC5C;AAAA,IACA,WAAW,SAAS,aAAa;AAAA,IACjC,eAAe,SAAS,iBAAiB;AAAA,IACzC,OAAO,SAAS,SAAS;AAAA,IACzB,UAAU,SAAS,YAAY;AAAA,IAC/B,MAAM,SAAS,QAAQ;AAAA,IACvB,KAAK,SAAS,OAAO;AAAA,IACrB,eAAe,SAAS,iBAAiB;AAAA,IACzC,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C,yBAAyB,SAAS,2BAA2B,0BAA0B;AAAA,IACvF,gBAAgB,SAAS,SAAS,gBAAgB,EAAE;AAAA,EACtD;AACF;",
+  "names": []
+}

package/dist/modules/billing/lib/commandRoute.js

@@ -0,0 +1,81 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  organizationScopeRequiredResponse,
+  resolveActiveOrganizationId
+} from "@open-mercato/shared/lib/auth/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { bridgeLegacyGuard, runMutationGuards } from "@open-mercato/shared/lib/crud/mutation-guard-registry";
+function userFeatures(auth) {
+  const features = auth?.features;
+  return Array.isArray(features) ? features.filter((value) => typeof value === "string") : [];
+}
+async function readRequestBody(req) {
+  try {
+    return await req.json();
+  } catch {
+    return {};
+  }
+}
+async function runCommandRoute(req, options, rawBody) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    const organizationId = resolveActiveOrganizationId(auth);
+    if (!organizationId) return organizationScopeRequiredResponse();
+    const parsed = options.bodySchema.safeParse(rawBody === void 0 ? await readRequestBody(req) : rawBody);
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: "Invalid request", code: "billing.request.invalid", issues: parsed.error.issues },
+        { status: 400 }
+      );
+    }
+    const scope = { tenantId: auth.tenantId, organizationId };
+    const guardInput = {
+      tenantId: auth.tenantId,
+      organizationId,
+      userId: auth.sub ?? "",
+      resourceKind: options.resourceKind,
+      resourceId: options.resourceId(parsed.data),
+      operation: options.operation ?? "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    };
+    const legacyGuard = bridgeLegacyGuard(container);
+    const guard = legacyGuard ? await runMutationGuards([legacyGuard], guardInput, { userFeatures: userFeatures(auth) }) : { ok: true, afterSuccessCallbacks: [] };
+    if (!guard.ok) {
+      return NextResponse.json(guard.errorBody ?? { error: "Operation blocked by guard" }, { status: guard.errorStatus ?? 422 });
+    }
+    const ctx = {
+      container,
+      auth,
+      organizationScope: null,
+      selectedOrganizationId: organizationId,
+      organizationIds: [organizationId],
+      request: req
+    };
+    const commandBus = container.resolve("commandBus");
+    const input = options.toInput ? options.toInput(parsed.data, scope) : { ...parsed.data, ...scope };
+    const response = await commandBus.execute(options.commandId, { input, ctx });
+    for (const callback of guard.afterSuccessCallbacks) {
+      if (!callback.guard.afterSuccess) continue;
+      try {
+        await callback.guard.afterSuccess({ ...guardInput, resourceId: guardInput.resourceId ?? "", metadata: callback.metadata ?? null });
+      } catch (err) {
+        console.error(`[${options.logLabel}] guard afterSuccess failed`, err);
+      }
+    }
+    return NextResponse.json(response.result ?? { ok: true });
+  } catch (err) {
+    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status });
+    console.error(`[${options.logLabel}]`, err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+export {
+  readRequestBody,
+  runCommandRoute
+};
+//# sourceMappingURL=commandRoute.js.map

package/dist/modules/billing/lib/commandRoute.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/commandRoute.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { ZodType } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  organizationScopeRequiredResponse,\n  resolveActiveOrganizationId,\n} from '@open-mercato/shared/lib/auth/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { bridgeLegacyGuard, runMutationGuards } from '@open-mercato/shared/lib/crud/mutation-guard-registry'\n\n/**\n * Shared handler for billing's custom POST action routes (Spec C payments,\n * Spec D memos): authenticates, resolves the organization, validates the\n * body, runs the shared mutation guards (record locks etc.) as `update` on\n * the target resource, executes the command and maps `CrudHttpError`s.\n *\n * `requireFeatures` stays on each route's exported `metadata` (enforced by\n * the API dispatcher).\n */\n\nexport type CommandRouteOptions<TBody> = {\n  commandId: string\n  /** Body schema WITHOUT tenant / organization (they come from auth). */\n  bodySchema: ZodType<TBody>\n  resourceKind: string\n  resourceId: (body: TBody) => string | null\n  /** Mutation-guard operation (default `update`, the usual one for action routes). */\n  operation?: 'create' | 'update' | 'delete'\n  /** Optional input mapping (default: body + scope). */\n  toInput?: (body: TBody, scope: { tenantId: string; organizationId: string }) => Record<string, unknown>\n  logLabel: string\n}\n\nfunction userFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  return Array.isArray(features) ? features.filter((value): value is string => typeof value === 'string') : []\n}\n\nexport async function readRequestBody(req: Request): Promise<unknown> {\n  try {\n    return await req.json()\n  } catch {\n    return {}\n  }\n}\n\nexport async function runCommandRoute<TBody>(\n  req: Request,\n  options: CommandRouteOptions<TBody>,\n  rawBody?: unknown,\n): Promise<Response> {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    const organizationId = resolveActiveOrganizationId(auth)\n    if (!organizationId) return organizationScopeRequiredResponse()\n    const parsed = options.bodySchema.safeParse(rawBody === undefined ? await readRequestBody(req) : rawBody)\n    if (!parsed.success) {\n      return NextResponse.json(\n        { error: 'Invalid request', code: 'billing.request.invalid', issues: parsed.error.issues },\n        { status: 400 },\n      )\n    }\n    const scope = { tenantId: auth.tenantId, organizationId }\n    const guardInput = {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: options.resourceKind,\n      resourceId: options.resourceId(parsed.data),\n      operation: options.operation ?? ('update' as const),\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    }\n    const legacyGuard = bridgeLegacyGuard(container)\n    const guard = legacyGuard\n      ? await runMutationGuards([legacyGuard], guardInput, { userFeatures: userFeatures(auth) })\n      : { ok: true as const, afterSuccessCallbacks: [] }\n    if (!guard.ok) {\n      return NextResponse.json(guard.errorBody ?? { error: 'Operation blocked by guard' }, { status: guard.errorStatus ?? 422 })\n    }\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: null,\n      selectedOrganizationId: organizationId,\n      organizationIds: [organizationId],\n      request: req,\n    }\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const input = options.toInput\n      ? options.toInput(parsed.data, scope)\n      : { ...(parsed.data as Record<string, unknown>), ...scope }\n    const response = await commandBus.execute(options.commandId, { input, ctx })\n    for (const callback of guard.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      try {\n        await callback.guard.afterSuccess({ ...guardInput, resourceId: guardInput.resourceId ?? '', metadata: callback.metadata ?? null })\n      } catch (err) {\n        console.error(`[${options.logLabel}] guard afterSuccess failed`, err)\n      }\n    }\n    return NextResponse.json((response as { result?: unknown }).result ?? { ok: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) return NextResponse.json(err.body, { status: err.status })\n    console.error(`[${options.logLabel}]`, err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAuB;AAChC,SAAS,mBAAmB,yBAAyB;AAyBrD,SAAS,aAAa,MAAyB;AAC7C,QAAM,WAAY,MAAiC;AACnD,SAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAAI,CAAC;AAC7G;AAEA,eAAsB,gBAAgB,KAAgC;AACpE,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAsB,gBACpB,KACA,SACA,SACmB;AACnB,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,SAAU,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAChG,UAAM,iBAAiB,4BAA4B,IAAI;AACvD,QAAI,CAAC,eAAgB,QAAO,kCAAkC;AAC9D,UAAM,SAAS,QAAQ,WAAW,UAAU,YAAY,SAAY,MAAM,gBAAgB,GAAG,IAAI,OAAO;AACxG,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,mBAAmB,MAAM,2BAA2B,QAAQ,OAAO,MAAM,OAAO;AAAA,QACzF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,UAAM,QAAQ,EAAE,UAAU,KAAK,UAAU,eAAe;AACxD,UAAM,aAAa;AAAA,MACjB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ,WAAW,OAAO,IAAI;AAAA,MAC1C,WAAW,QAAQ,aAAc;AAAA,MACjC,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB;AACA,UAAM,cAAc,kBAAkB,SAAS;AAC/C,UAAM,QAAQ,cACV,MAAM,kBAAkB,CAAC,WAAW,GAAG,YAAY,EAAE,cAAc,aAAa,IAAI,EAAE,CAAC,IACvF,EAAE,IAAI,MAAe,uBAAuB,CAAC,EAAE;AACnD,QAAI,CAAC,MAAM,IAAI;AACb,aAAO,aAAa,KAAK,MAAM,aAAa,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,MAAM,eAAe,IAAI,CAAC;AAAA,IAC3H;AACA,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,CAAC,cAAc;AAAA,MAChC,SAAS;AAAA,IACX;AACA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,QAAQ,QAAQ,UAClB,QAAQ,QAAQ,OAAO,MAAM,KAAK,IAClC,EAAE,GAAI,OAAO,MAAkC,GAAG,MAAM;AAC5D,UAAM,WAAW,MAAM,WAAW,QAAQ,QAAQ,WAAW,EAAE,OAAO,IAAI,CAAC;AAC3E,eAAW,YAAY,MAAM,uBAAuB;AAClD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,EAAE,GAAG,YAAY,YAAY,WAAW,cAAc,IAAI,UAAU,SAAS,YAAY,KAAK,CAAC;AAAA,MACnI,SAAS,KAAK;AACZ,gBAAQ,MAAM,IAAI,QAAQ,QAAQ,+BAA+B,GAAG;AAAA,MACtE;AAAA,IACF;AACA,WAAO,aAAa,KAAM,SAAkC,UAAU,EAAE,IAAI,KAAK,CAAC;AAAA,EACpF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,EAAG,QAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AACnF,YAAQ,MAAM,IAAI,QAAQ,QAAQ,KAAK,GAAG;AAC1C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;",
+  "names": []
+}

package/dist/modules/billing/lib/customerLookup.js

@@ -0,0 +1,97 @@
+const CUSTOMER_ENDPOINTS = {
+  company: "/api/customers/companies",
+  person: "/api/customers/people"
+};
+const CUSTOMER_DETAIL_PATHS = {
+  company: "/backend/customers/companies",
+  person: "/backend/customers/people"
+};
+const CUSTOMER_LOOKUP_CHUNK = 100;
+function customerEndpoint(kind) {
+  return CUSTOMER_ENDPOINTS[kind];
+}
+function customerDetailHref(kind, customerId) {
+  return `${CUSTOMER_DETAIL_PATHS[kind]}/${encodeURIComponent(customerId)}`;
+}
+function str(value) {
+  if (typeof value === "string") return value.trim();
+  if (typeof value === "number") return String(value);
+  return "";
+}
+function extractItems(result) {
+  const raw = Array.isArray(result) ? result : result && typeof result === "object" && Array.isArray(result.items) ? result.items : [];
+  return raw.filter((row) => !!row && typeof row === "object");
+}
+function toCustomerSummary(row) {
+  const id = str(row.id);
+  if (!id) return null;
+  const name = str(row.display_name) || str(row.displayName) || str(row.name) || id;
+  const email = str(row.primary_email) || str(row.primaryEmail) || str(row.email);
+  return { id, name, email: email || null };
+}
+function mapPrimaryAddress(rows) {
+  const ordered = [...rows].sort((a, b) => Number(b.is_primary === true) - Number(a.is_primary === true));
+  for (const row of ordered) {
+    const street = str(row.address_line1) || str(row.addressLine1);
+    const building = str(row.building_number) || str(row.buildingNumber);
+    const flat = str(row.flat_number) || str(row.flatNumber);
+    let line1 = street;
+    if (line1 && building) line1 = `${line1} ${building}`;
+    if (line1 && building && flat) line1 = `${line1}/${flat}`;
+    const city = str(row.city);
+    const postalCode = str(row.postal_code) || str(row.postalCode);
+    const country = (str(row.country) || str(row.country_code) || str(row.countryCode)).toUpperCase();
+    if (!line1 || !city || !postalCode || country.length < 2 || country.length > 3) continue;
+    return {
+      line1,
+      line2: str(row.address_line2) || str(row.addressLine2),
+      city,
+      postal_code: postalCode,
+      country
+    };
+  }
+  return null;
+}
+function isAddressEmpty(address) {
+  return !address.line1.trim() && !address.line2.trim() && !address.city.trim() && !address.postal_code.trim();
+}
+function applyCustomerPrefill(current, customer, address) {
+  let next = current;
+  if (customer) {
+    if (!current.name.trim() && customer.name) next = { ...next, name: customer.name };
+    if (!current.invoiceEmail.trim() && customer.email) next = { ...next, invoiceEmail: customer.email };
+  }
+  if (address && isAddressEmpty(current.invoiceAddress)) {
+    next = { ...next, invoiceAddress: { ...address } };
+  }
+  return next;
+}
+function planCustomerLookups(rows) {
+  const byKind = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const id = (row.customerId ?? "").trim();
+    if (!id) continue;
+    const kind = row.customerKind === "person" ? "person" : "company";
+    if (!byKind.has(kind)) byKind.set(kind, /* @__PURE__ */ new Set());
+    byKind.get(kind).add(id);
+  }
+  const plan = [];
+  for (const [kind, ids] of byKind) {
+    const all = Array.from(ids);
+    for (let i = 0; i < all.length; i += CUSTOMER_LOOKUP_CHUNK) {
+      plan.push({ kind, ids: all.slice(i, i + CUSTOMER_LOOKUP_CHUNK) });
+    }
+  }
+  return plan;
+}
+export {
+  CUSTOMER_LOOKUP_CHUNK,
+  applyCustomerPrefill,
+  customerDetailHref,
+  customerEndpoint,
+  extractItems,
+  mapPrimaryAddress,
+  planCustomerLookups,
+  toCustomerSummary
+};
+//# sourceMappingURL=customerLookup.js.map

package/dist/modules/billing/lib/customerLookup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/customerLookup.ts"],
+  "sourcesContent": ["import type { CustomerKind } from '../data/validators'\n\n/**\n * Pure helpers for linking a Billing Account to a customer record (Spec E).\n *\n * Billing never imports the customers module: `customer_id` is a string FK\n * and every read goes through the customers REST API from the UI (a soft\n * dependency \u2014 if it is unavailable the form degrades to a raw id and no\n * prefill). These helpers keep the response-shape knowledge in one tested\n * place so the React components stay thin.\n */\n\nexport type CustomerSummary = {\n  id: string\n  name: string\n  email: string | null\n}\n\nexport type PrefillAddress = {\n  line1: string\n  line2: string\n  city: string\n  postal_code: string\n  country: string\n}\n\nexport type PrefillTarget = {\n  name: string\n  invoiceEmail: string\n  invoiceAddress: PrefillAddress\n}\n\ntype RawRecord = Record<string, unknown>\n\nconst CUSTOMER_ENDPOINTS: Record<CustomerKind, string> = {\n  company: '/api/customers/companies',\n  person: '/api/customers/people',\n}\n\nconst CUSTOMER_DETAIL_PATHS: Record<CustomerKind, string> = {\n  company: '/backend/customers/companies',\n  person: '/backend/customers/people',\n}\n\n/** Max ids per batched lookup \u2014 the CRUD factory caps `pageSize` at 100. */\nexport const CUSTOMER_LOOKUP_CHUNK = 100\n\nexport function customerEndpoint(kind: CustomerKind): string {\n  return CUSTOMER_ENDPOINTS[kind]\n}\n\nexport function customerDetailHref(kind: CustomerKind, customerId: string): string {\n  return `${CUSTOMER_DETAIL_PATHS[kind]}/${encodeURIComponent(customerId)}`\n}\n\nfunction str(value: unknown): string {\n  if (typeof value === 'string') return value.trim()\n  if (typeof value === 'number') return String(value)\n  return ''\n}\n\n/** Extracts the row array from a list response (`{ items }` or a bare array). */\nexport function extractItems(result: unknown): RawRecord[] {\n  const raw = Array.isArray(result)\n    ? result\n    : result && typeof result === 'object' && Array.isArray((result as { items?: unknown }).items)\n      ? (result as { items: unknown[] }).items\n      : []\n  return raw.filter((row): row is RawRecord => !!row && typeof row === 'object')\n}\n\n/** Maps a customers list row (snake_case or camelCase) to a summary. */\nexport function toCustomerSummary(row: RawRecord): CustomerSummary | null {\n  const id = str(row.id)\n  if (!id) return null\n  const name = str(row.display_name) || str(row.displayName) || str(row.name) || id\n  const email = str(row.primary_email) || str(row.primaryEmail) || str(row.email)\n  return { id, name, email: email || null }\n}\n\n/**\n * Picks the customer's primary address (else the first usable one) and maps\n * it onto the billing `invoice_address` shape. Returns null when no row has\n * the parts billing requires (line 1, city, postal code, country).\n */\nexport function mapPrimaryAddress(rows: RawRecord[]): PrefillAddress | null {\n  const ordered = [...rows].sort((a, b) => Number(b.is_primary === true) - Number(a.is_primary === true))\n  for (const row of ordered) {\n    const street = str(row.address_line1) || str(row.addressLine1)\n    const building = str(row.building_number) || str(row.buildingNumber)\n    const flat = str(row.flat_number) || str(row.flatNumber)\n    let line1 = street\n    if (line1 && building) line1 = `${line1} ${building}`\n    if (line1 && building && flat) line1 = `${line1}/${flat}`\n    const city = str(row.city)\n    const postalCode = str(row.postal_code) || str(row.postalCode)\n    const country = (str(row.country) || str(row.country_code) || str(row.countryCode)).toUpperCase()\n    if (!line1 || !city || !postalCode || country.length < 2 || country.length > 3) continue\n    return {\n      line1,\n      line2: str(row.address_line2) || str(row.addressLine2),\n      city,\n      postal_code: postalCode,\n      country,\n    }\n  }\n  return null\n}\n\nfunction isAddressEmpty(address: PrefillAddress): boolean {\n  return !address.line1.trim() && !address.line2.trim() && !address.city.trim() && !address.postal_code.trim()\n}\n\n/**\n * Fills ONLY empty fields from the customer record (decision E2-D2) \u2014 never\n * overwrites what the operator typed. The address is taken as a whole block\n * (and only if the form's address is still blank) so we never mix a typed\n * street with a prefilled city. Country alone does not count as \"typed\": the\n * form ships a default country.\n */\nexport function applyCustomerPrefill<T extends PrefillTarget>(\n  current: T,\n  customer: CustomerSummary | null,\n  address: PrefillAddress | null,\n): T {\n  let next = current\n  if (customer) {\n    if (!current.name.trim() && customer.name) next = { ...next, name: customer.name }\n    if (!current.invoiceEmail.trim() && customer.email) next = { ...next, invoiceEmail: customer.email }\n  }\n  if (address && isAddressEmpty(current.invoiceAddress)) {\n    next = { ...next, invoiceAddress: { ...address } }\n  }\n  return next\n}\n\n/** Groups ids by kind and chunks them for batched `?ids=` lookups. */\nexport function planCustomerLookups(\n  rows: Array<{ customerId: string | null | undefined; customerKind: CustomerKind | null | undefined }>,\n): Array<{ kind: CustomerKind; ids: string[] }> {\n  const byKind = new Map<CustomerKind, Set<string>>()\n  for (const row of rows) {\n    const id = (row.customerId ?? '').trim()\n    if (!id) continue\n    const kind: CustomerKind = row.customerKind === 'person' ? 'person' : 'company'\n    if (!byKind.has(kind)) byKind.set(kind, new Set())\n    byKind.get(kind)!.add(id)\n  }\n  const plan: Array<{ kind: CustomerKind; ids: string[] }> = []\n  for (const [kind, ids] of byKind) {\n    const all = Array.from(ids)\n    for (let i = 0; i < all.length; i += CUSTOMER_LOOKUP_CHUNK) {\n      plan.push({ kind, ids: all.slice(i, i + CUSTOMER_LOOKUP_CHUNK) })\n    }\n  }\n  return plan\n}\n"],
+  "mappings": "AAkCA,MAAM,qBAAmD;AAAA,EACvD,SAAS;AAAA,EACT,QAAQ;AACV;AAEA,MAAM,wBAAsD;AAAA,EAC1D,SAAS;AAAA,EACT,QAAQ;AACV;AAGO,MAAM,wBAAwB;AAE9B,SAAS,iBAAiB,MAA4B;AAC3D,SAAO,mBAAmB,IAAI;AAChC;AAEO,SAAS,mBAAmB,MAAoB,YAA4B;AACjF,SAAO,GAAG,sBAAsB,IAAI,CAAC,IAAI,mBAAmB,UAAU,CAAC;AACzE;AAEA,SAAS,IAAI,OAAwB;AACnC,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,KAAK;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,SAAO;AACT;AAGO,SAAS,aAAa,QAA8B;AACzD,QAAM,MAAM,MAAM,QAAQ,MAAM,IAC5B,SACA,UAAU,OAAO,WAAW,YAAY,MAAM,QAAS,OAA+B,KAAK,IACxF,OAAgC,QACjC,CAAC;AACP,SAAO,IAAI,OAAO,CAAC,QAA0B,CAAC,CAAC,OAAO,OAAO,QAAQ,QAAQ;AAC/E;AAGO,SAAS,kBAAkB,KAAwC;AACxE,QAAM,KAAK,IAAI,IAAI,EAAE;AACrB,MAAI,CAAC,GAAI,QAAO;AAChB,QAAM,OAAO,IAAI,IAAI,YAAY,KAAK,IAAI,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,KAAK;AAC/E,QAAM,QAAQ,IAAI,IAAI,aAAa,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,IAAI,KAAK;AAC9E,SAAO,EAAE,IAAI,MAAM,OAAO,SAAS,KAAK;AAC1C;AAOO,SAAS,kBAAkB,MAA0C;AAC1E,QAAM,UAAU,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE,eAAe,IAAI,IAAI,OAAO,EAAE,eAAe,IAAI,CAAC;AACtG,aAAW,OAAO,SAAS;AACzB,UAAM,SAAS,IAAI,IAAI,aAAa,KAAK,IAAI,IAAI,YAAY;AAC7D,UAAM,WAAW,IAAI,IAAI,eAAe,KAAK,IAAI,IAAI,cAAc;AACnE,UAAM,OAAO,IAAI,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU;AACvD,QAAI,QAAQ;AACZ,QAAI,SAAS,SAAU,SAAQ,GAAG,KAAK,IAAI,QAAQ;AACnD,QAAI,SAAS,YAAY,KAAM,SAAQ,GAAG,KAAK,IAAI,IAAI;AACvD,UAAM,OAAO,IAAI,IAAI,IAAI;AACzB,UAAM,aAAa,IAAI,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU;AAC7D,UAAM,WAAW,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,IAAI,WAAW,GAAG,YAAY;AAChG,QAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,QAAQ,SAAS,KAAK,QAAQ,SAAS,EAAG;AAChF,WAAO;AAAA,MACL;AAAA,MACA,OAAO,IAAI,IAAI,aAAa,KAAK,IAAI,IAAI,YAAY;AAAA,MACrD;AAAA,MACA,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,SAAkC;AACxD,SAAO,CAAC,QAAQ,MAAM,KAAK,KAAK,CAAC,QAAQ,MAAM,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,KAAK,CAAC,QAAQ,YAAY,KAAK;AAC7G;AASO,SAAS,qBACd,SACA,UACA,SACG;AACH,MAAI,OAAO;AACX,MAAI,UAAU;AACZ,QAAI,CAAC,QAAQ,KAAK,KAAK,KAAK,SAAS,KAAM,QAAO,EAAE,GAAG,MAAM,MAAM,SAAS,KAAK;AACjF,QAAI,CAAC,QAAQ,aAAa,KAAK,KAAK,SAAS,MAAO,QAAO,EAAE,GAAG,MAAM,cAAc,SAAS,MAAM;AAAA,EACrG;AACA,MAAI,WAAW,eAAe,QAAQ,cAAc,GAAG;AACrD,WAAO,EAAE,GAAG,MAAM,gBAAgB,EAAE,GAAG,QAAQ,EAAE;AAAA,EACnD;AACA,SAAO;AACT;AAGO,SAAS,oBACd,MAC8C;AAC9C,QAAM,SAAS,oBAAI,IAA+B;AAClD,aAAW,OAAO,MAAM;AACtB,UAAM,MAAM,IAAI,cAAc,IAAI,KAAK;AACvC,QAAI,CAAC,GAAI;AACT,UAAM,OAAqB,IAAI,iBAAiB,WAAW,WAAW;AACtE,QAAI,CAAC,OAAO,IAAI,IAAI,EAAG,QAAO,IAAI,MAAM,oBAAI,IAAI,CAAC;AACjD,WAAO,IAAI,IAAI,EAAG,IAAI,EAAE;AAAA,EAC1B;AACA,QAAM,OAAqD,CAAC;AAC5D,aAAW,CAAC,MAAM,GAAG,KAAK,QAAQ;AAChC,UAAM,MAAM,MAAM,KAAK,GAAG;AAC1B,aAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,uBAAuB;AAC1D,WAAK,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;AAAA,IAClE;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/billing/lib/dateOnly.js

@@ -0,0 +1,13 @@
+function toUtcMidnight(value) {
+  const date = typeof value === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value) ? /* @__PURE__ */ new Date(`${value}T00:00:00Z`) : new Date(value);
+  date.setUTCHours(0, 0, 0, 0);
+  return date;
+}
+function toIsoDate(value) {
+  return toUtcMidnight(value).toISOString().slice(0, 10);
+}
+export {
+  toIsoDate,
+  toUtcMidnight
+};
+//# sourceMappingURL=dateOnly.js.map

package/dist/modules/billing/lib/dateOnly.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/dateOnly.ts"],
+  "sourcesContent": ["/**\n * Date-only helpers (Spec F, P-D5).\n *\n * MikroORM v7 hydrates `date` columns as `YYYY-MM-DD` strings while the\n * engine computes with `Date`s; and `pg` serialises a `Date` query\n * parameter in the server's time zone, which can shift a `date` comparison\n * by a day. Every date-only value the billing engine compares or sends to a\n * `date` column goes through these helpers: compare as UTC midnight, query\n * with the ISO day string.\n */\n\n/** UTC-midnight `Date` for a `Date`, ISO string or timestamp. */\nexport function toUtcMidnight(value: Date | string | number): Date {\n  const date = typeof value === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(value) ? new Date(`${value}T00:00:00Z`) : new Date(value)\n  date.setUTCHours(0, 0, 0, 0)\n  return date\n}\n\n/** `YYYY-MM-DD` (UTC) for a `Date`, ISO string or timestamp. */\nexport function toIsoDate(value: Date | string | number): string {\n  return toUtcMidnight(value).toISOString().slice(0, 10)\n}\n"],
+  "mappings": "AAYO,SAAS,cAAc,OAAqC;AACjE,QAAM,OAAO,OAAO,UAAU,YAAY,sBAAsB,KAAK,KAAK,IAAI,oBAAI,KAAK,GAAG,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK;AAC7H,OAAK,YAAY,GAAG,GAAG,GAAG,CAAC;AAC3B,SAAO;AACT;AAGO,SAAS,UAAU,OAAuC;AAC/D,SAAO,cAAc,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACvD;",
+  "names": []
+}

package/dist/modules/billing/lib/documentParties.js

@@ -0,0 +1,16 @@
+function buildBuyerSnapshot(account) {
+  return {
+    bill_account_id: account.id,
+    name: account.name,
+    customer_id: account.customerId,
+    customer_kind: account.customerKind ?? "company",
+    tax_id: account.taxId ?? null,
+    invoice_email: account.invoiceEmail,
+    invoice_language: account.invoiceLanguage,
+    invoice_address: account.invoiceAddress ?? null
+  };
+}
+export {
+  buildBuyerSnapshot
+};
+//# sourceMappingURL=documentParties.js.map

package/dist/modules/billing/lib/documentParties.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/documentParties.ts"],
+  "sourcesContent": ["import type { BillingAccount } from '../data/entities'\n\n/**\n * Parties printed on a billing document. Posting freezes them as snapshots\n * on the invoice (buyer from the account, seller from `billingSettings`), so\n * later account / settings edits never change an issued document; drafts\n * render from the live rows.\n */\n\n/** Frozen \"issued to\" block \u2014 later account edits never change a posted document. */\nexport function buildBuyerSnapshot(account: BillingAccount): Record<string, unknown> {\n  return {\n    bill_account_id: account.id,\n    name: account.name,\n    customer_id: account.customerId,\n    customer_kind: account.customerKind ?? 'company',\n    tax_id: account.taxId ?? null,\n    invoice_email: account.invoiceEmail,\n    invoice_language: account.invoiceLanguage,\n    invoice_address: account.invoiceAddress ?? null,\n  }\n}\n\n"],
+  "mappings": "AAUO,SAAS,mBAAmB,SAAkD;AACnF,SAAO;AAAA,IACL,iBAAiB,QAAQ;AAAA,IACzB,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ;AAAA,IACrB,eAAe,QAAQ,gBAAgB;AAAA,IACvC,QAAQ,QAAQ,SAAS;AAAA,IACzB,eAAe,QAAQ;AAAA,IACvB,kBAAkB,QAAQ;AAAA,IAC1B,iBAAiB,QAAQ,kBAAkB;AAAA,EAC7C;AACF;",
+  "names": []
+}

package/dist/modules/billing/lib/documentTypes.js

@@ -0,0 +1,27 @@
+function isReceivable(type) {
+  return type === "invoice" || type === "debit_memo";
+}
+function isMemo(type) {
+  return type === "credit_memo" || type === "debit_memo";
+}
+function seriesFor(type) {
+  if (type === "credit_memo") return "credit_memo";
+  if (type === "receipt") return "receipt";
+  return "invoice";
+}
+function displaySign(type) {
+  return type === "credit_memo" ? -1 : 1;
+}
+function canCorrect(original, memoType) {
+  if (original.testRun || original.documentType !== "invoice") return false;
+  if (["posted", "partially_paid", "paid"].includes(original.status)) return true;
+  return original.status === "credited" && memoType === "debit_memo";
+}
+export {
+  canCorrect,
+  displaySign,
+  isMemo,
+  isReceivable,
+  seriesFor
+};
+//# sourceMappingURL=documentTypes.js.map

package/dist/modules/billing/lib/documentTypes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/documentTypes.ts"],
+  "sourcesContent": ["/**\n * Billing document type helpers (Spec 0 / Spec D). Pure.\n *\n *   invoice     \u2014 receivable, `invoice` series\n *   debit_memo  \u2014 receivable (supplementary invoice), `invoice` series (D-D8)\n *   credit_memo \u2014 credit source, `credit_memo` series; amounts stored positive (D-D5)\n *   receipt     \u2014 prepaid top-up receipt, `receipt` series, never corrected (D-D6)\n */\n\nexport type DocumentType = 'invoice' | 'credit_memo' | 'debit_memo' | 'receipt'\n\nexport function isReceivable(type: string): boolean {\n  return type === 'invoice' || type === 'debit_memo'\n}\n\nexport function isMemo(type: string): boolean {\n  return type === 'credit_memo' || type === 'debit_memo'\n}\n\n/** Numbering series of a document type. */\nexport function seriesFor(type: string): 'invoice' | 'credit_memo' | 'receipt' {\n  if (type === 'credit_memo') return 'credit_memo'\n  if (type === 'receipt') return 'receipt'\n  return 'invoice'\n}\n\n/** Sign used for DISPLAY only \u2014 credit memos read as negative amounts. */\nexport function displaySign(type: string): 1 | -1 {\n  return type === 'credit_memo' ? -1 : 1\n}\n\n/** Originals a memo may correct (D-D3): posted, partially paid, paid (credited \u2192 debit only). */\nexport function canCorrect(original: { documentType: string; status: string; testRun: boolean }, memoType: string): boolean {\n  if (original.testRun || original.documentType !== 'invoice') return false\n  if (['posted', 'partially_paid', 'paid'].includes(original.status)) return true\n  return original.status === 'credited' && memoType === 'debit_memo'\n}\n"],
+  "mappings": "AAWO,SAAS,aAAa,MAAuB;AAClD,SAAO,SAAS,aAAa,SAAS;AACxC;AAEO,SAAS,OAAO,MAAuB;AAC5C,SAAO,SAAS,iBAAiB,SAAS;AAC5C;AAGO,SAAS,UAAU,MAAqD;AAC7E,MAAI,SAAS,cAAe,QAAO;AACnC,MAAI,SAAS,UAAW,QAAO;AAC/B,SAAO;AACT;AAGO,SAAS,YAAY,MAAsB;AAChD,SAAO,SAAS,gBAAgB,KAAK;AACvC;AAGO,SAAS,WAAW,UAAsE,UAA2B;AAC1H,MAAI,SAAS,WAAW,SAAS,iBAAiB,UAAW,QAAO;AACpE,MAAI,CAAC,UAAU,kBAAkB,MAAM,EAAE,SAAS,SAAS,MAAM,EAAG,QAAO;AAC3E,SAAO,SAAS,WAAW,cAAc,aAAa;AACxD;",
+  "names": []
+}

package/dist/modules/billing/lib/dueDate.js

@@ -0,0 +1,18 @@
+function resolvePaymentTermsDays(accountTermsDays, defaultTermsDays) {
+  if (typeof accountTermsDays === "number" && Number.isInteger(accountTermsDays) && accountTermsDays >= 0) {
+    return accountTermsDays;
+  }
+  if (typeof defaultTermsDays === "number" && Number.isInteger(defaultTermsDays) && defaultTermsDays >= 0) {
+    return defaultTermsDays;
+  }
+  return 14;
+}
+function computeDueDate(issueDate, termsDays) {
+  const base = new Date(issueDate);
+  return new Date(Date.UTC(base.getUTCFullYear(), base.getUTCMonth(), base.getUTCDate() + termsDays));
+}
+export {
+  computeDueDate,
+  resolvePaymentTermsDays
+};
+//# sourceMappingURL=dueDate.js.map

package/dist/modules/billing/lib/dueDate.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/dueDate.ts"],
+  "sourcesContent": ["/**\n * Due-date math for posted invoices (Spec B). Pure, date-only, UTC.\n *\n * `due_date = issue_date + payment terms (days)`, where the terms come from\n * the account (`payment_terms_days`) and fall back to the organization\n * default (`billing_settings.default_payment_terms_days`).\n */\n\nexport function resolvePaymentTermsDays(\n  accountTermsDays: number | null | undefined,\n  defaultTermsDays: number | null | undefined,\n): number {\n  if (typeof accountTermsDays === 'number' && Number.isInteger(accountTermsDays) && accountTermsDays >= 0) {\n    return accountTermsDays\n  }\n  if (typeof defaultTermsDays === 'number' && Number.isInteger(defaultTermsDays) && defaultTermsDays >= 0) {\n    return defaultTermsDays\n  }\n  return 14\n}\n\n/** Issue date (any time of day) + N calendar days, at UTC midnight. */\nexport function computeDueDate(issueDate: Date, termsDays: number): Date {\n  const base = new Date(issueDate)\n  return new Date(Date.UTC(base.getUTCFullYear(), base.getUTCMonth(), base.getUTCDate() + termsDays))\n}\n"],
+  "mappings": "AAQO,SAAS,wBACd,kBACA,kBACQ;AACR,MAAI,OAAO,qBAAqB,YAAY,OAAO,UAAU,gBAAgB,KAAK,oBAAoB,GAAG;AACvG,WAAO;AAAA,EACT;AACA,MAAI,OAAO,qBAAqB,YAAY,OAAO,UAAU,gBAAgB,KAAK,oBAAoB,GAAG;AACvG,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGO,SAAS,eAAe,WAAiB,WAAyB;AACvE,QAAM,OAAO,IAAI,KAAK,SAAS;AAC/B,SAAO,IAAI,KAAK,KAAK,IAAI,KAAK,eAAe,GAAG,KAAK,YAAY,GAAG,KAAK,WAAW,IAAI,SAAS,CAAC;AACpG;",
+  "names": []
+}

package/dist/modules/billing/lib/iban.js

@@ -0,0 +1,29 @@
+function normalizeIban(value) {
+  return value.replace(/\s+/g, "").toUpperCase();
+}
+function isValidIban(value) {
+  const iban = normalizeIban(value);
+  if (!/^[A-Z]{2}\d{2}[A-Z0-9]{11,30}$/.test(iban)) return false;
+  const rearranged = iban.slice(4) + iban.slice(0, 4);
+  let remainder = 0;
+  for (const char of rearranged) {
+    const digits = /[A-Z]/.test(char) ? String(char.charCodeAt(0) - 55) : char;
+    for (const digit of digits) {
+      remainder = (remainder * 10 + Number(digit)) % 97;
+    }
+  }
+  return remainder === 1;
+}
+function formatIban(value) {
+  return normalizeIban(value).replace(/(.{4})/g, "$1 ").trim();
+}
+function isValidBic(value) {
+  return /^[A-Z]{4}[A-Z]{2}[A-Z0-9]{2}([A-Z0-9]{3})?$/.test(value.trim().toUpperCase());
+}
+export {
+  formatIban,
+  isValidBic,
+  isValidIban,
+  normalizeIban
+};
+//# sourceMappingURL=iban.js.map

package/dist/modules/billing/lib/iban.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/lib/iban.ts"],
+  "sourcesContent": ["/**\n * IBAN / BIC helpers for the seller's payment instructions (Spec B). Pure.\n *\n * `normalizeIban` strips spaces and upper-cases; `isValidIban` checks the\n * structure (country code, check digits, 11\u201330 alphanumerics after) and the\n * ISO 13616 mod-97 checksum. Country-specific lengths are not enforced \u2014 the\n * checksum already rejects typos, and a missing country table never blocks a\n * legitimate account.\n */\n\nexport function normalizeIban(value: string): string {\n  return value.replace(/\\s+/g, '').toUpperCase()\n}\n\nexport function isValidIban(value: string): boolean {\n  const iban = normalizeIban(value)\n  if (!/^[A-Z]{2}\\d{2}[A-Z0-9]{11,30}$/.test(iban)) return false\n  const rearranged = iban.slice(4) + iban.slice(0, 4)\n  let remainder = 0\n  for (const char of rearranged) {\n    const digits = /[A-Z]/.test(char) ? String(char.charCodeAt(0) - 55) : char\n    for (const digit of digits) {\n      remainder = (remainder * 10 + Number(digit)) % 97\n    }\n  }\n  return remainder === 1\n}\n\n/** Groups of 4 for display (\"PL61 1090 1014 \u2026\"). */\nexport function formatIban(value: string): string {\n  return normalizeIban(value).replace(/(.{4})/g, '$1 ').trim()\n}\n\nexport function isValidBic(value: string): boolean {\n  return /^[A-Z]{4}[A-Z]{2}[A-Z0-9]{2}([A-Z0-9]{3})?$/.test(value.trim().toUpperCase())\n}\n"],
+  "mappings": "AAUO,SAAS,cAAc,OAAuB;AACnD,SAAO,MAAM,QAAQ,QAAQ,EAAE,EAAE,YAAY;AAC/C;AAEO,SAAS,YAAY,OAAwB;AAClD,QAAM,OAAO,cAAc,KAAK;AAChC,MAAI,CAAC,iCAAiC,KAAK,IAAI,EAAG,QAAO;AACzD,QAAM,aAAa,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,GAAG,CAAC;AAClD,MAAI,YAAY;AAChB,aAAW,QAAQ,YAAY;AAC7B,UAAM,SAAS,QAAQ,KAAK,IAAI,IAAI,OAAO,KAAK,WAAW,CAAC,IAAI,EAAE,IAAI;AACtE,eAAW,SAAS,QAAQ;AAC1B,mBAAa,YAAY,KAAK,OAAO,KAAK,KAAK;AAAA,IACjD;AAAA,EACF;AACA,SAAO,cAAc;AACvB;AAGO,SAAS,WAAW,OAAuB;AAChD,SAAO,cAAc,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,KAAK;AAC7D;AAEO,SAAS,WAAW,OAAwB;AACjD,SAAO,8CAA8C,KAAK,MAAM,KAAK,EAAE,YAAY,CAAC;AACtF;",
+  "names": []
+}