@dainamite/billing 0.20.0 → 0.21.0

package/dist/modules/billing/setup.js

@@ -1,175 +1,5 @@
 import { features as billingAclFeatures } from "./acl.js";
-import {
-  Dictionary,
-  DictionaryEntry
-} from "@open-mercato/core/modules/dictionaries/data/entities";
-import { ModuleConfig } from "@open-mercato/core/modules/configs/data/entities";
-const BILLING_UOM_DICTIONARY_KEY = "billing.uom";
-const SALES_INVOICE_STATUS_DICTIONARY_KEY = "sales.invoice_status";
-const BILLING_UOM_CODES = [
-  // time
-  { value: "hour", label: "Hour" },
-  { value: "day", label: "Day" },
-  { value: "week", label: "Week" },
-  { value: "month", label: "Month" },
-  // volume
-  { value: "gb", label: "Gigabyte" },
-  { value: "tb", label: "Terabyte" },
-  { value: "mb", label: "Megabyte" },
-  // requests / tokens
-  { value: "request", label: "Request" },
-  { value: "api_request", label: "API Request" },
-  { value: "token", label: "Token" },
-  { value: "input_token", label: "Input Token" },
-  { value: "output_token", label: "Output Token" },
-  // seats / devices
-  { value: "seat", label: "Seat" },
-  { value: "user", label: "User" },
-  { value: "device", label: "Device" },
-  { value: "active_user", label: "Active User" }
-];
-const INVOICE_STATUS_ENTRIES = [
-  // `posted` is the canonical "issued" state and is also the default a
-  // freshly created invoice transitions to — but billing creates drafts,
-  // so `draft` is the default DictionaryEntry for new rows.
-  { value: "draft", label: "Draft", isDefault: true, color: "#9ca3af" },
-  { value: "posted", label: "Posted", isDefault: false, color: "#2563eb" },
-  { value: "paid", label: "Paid", isDefault: false, color: "#16a34a" },
-  { value: "void", label: "Void", isDefault: false, color: "#dc2626" }
-];
-async function ensureDictionary(em, scope, params) {
-  const existing = await em.findOne(Dictionary, {
-    tenantId: scope.tenantId,
-    organizationId: scope.organizationId,
-    key: params.key,
-    deletedAt: null
-  });
-  if (existing) return existing;
-  const dictionary = em.create(Dictionary, {
-    tenantId: scope.tenantId,
-    organizationId: scope.organizationId,
-    key: params.key,
-    name: params.name,
-    description: params.description,
-    isSystem: true,
-    isActive: true,
-    managerVisibility: "hidden",
-    createdAt: /* @__PURE__ */ new Date(),
-    updatedAt: /* @__PURE__ */ new Date()
-  });
-  em.persist(dictionary);
-  await em.flush();
-  return dictionary;
-}
-async function ensureDictionaryEntries(em, scope, dictionary, entries) {
-  const existing = await em.find(DictionaryEntry, {
-    dictionary,
-    tenantId: scope.tenantId,
-    organizationId: scope.organizationId
-  });
-  const existingValues = new Set(existing.map((e) => e.value));
-  let position = existing.length;
-  for (const entry of entries) {
-    if (existingValues.has(entry.value)) continue;
-    em.persist(
-      em.create(DictionaryEntry, {
-        dictionary,
-        tenantId: scope.tenantId,
-        organizationId: scope.organizationId,
-        value: entry.value,
-        normalizedValue: entry.value.trim().toLowerCase(),
-        label: entry.label,
-        color: entry.color ?? null,
-        position,
-        isDefault: entry.isDefault ?? false,
-        createdAt: /* @__PURE__ */ new Date(),
-        updatedAt: /* @__PURE__ */ new Date()
-      })
-    );
-    position += 1;
-  }
-  await em.flush();
-}
-async function seedBillingUomDictionary(em, scope) {
-  const dict = await ensureDictionary(em, scope, {
-    key: BILLING_UOM_DICTIONARY_KEY,
-    name: "Billing units of measure",
-    description: "Units billing accepts on usage records (exact match \u2014 no conversion)."
-  });
-  await ensureDictionaryEntries(em, scope, dict, BILLING_UOM_CODES);
-}
-async function seedInvoiceStatusDictionary(em, scope) {
-  const dict = await ensureDictionary(em, scope, {
-    key: SALES_INVOICE_STATUS_DICTIONARY_KEY,
-    name: "Sales invoice statuses",
-    description: "draft \u2192 posted \u2192 paid (or void). Drives the billing draft/post lifecycle."
-  });
-  await ensureDictionaryEntries(em, scope, dict, INVOICE_STATUS_ENTRIES);
-}
-async function ensureModuleConfig(em, params) {
-  const existing = await em.findOne(ModuleConfig, {
-    moduleId: params.moduleId,
-    name: params.name
-  });
-  if (existing) return;
-  em.persist(
-    em.create(ModuleConfig, {
-      moduleId: params.moduleId,
-      name: params.name,
-      valueJson: params.value,
-      createdAt: /* @__PURE__ */ new Date(),
-      updatedAt: /* @__PURE__ */ new Date()
-    })
-  );
-  await em.flush();
-}
-async function seedBillingConfigs(em) {
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "cron_schedule",
-    value: "0 2 * * *"
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "cron_enabled",
-    value: true
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "invoice_number.format",
-    value: "INV-{YYYY}-{0000001}"
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "invoice_number.reset_cycle",
-    value: "yearly"
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "prepaid.low_balance_threshold_default",
-    value: 0
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "prepaid.topup_provider",
-    value: "stripe"
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "prepaid.statement_enabled",
-    value: true
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "prepaid.topup_tax_rate",
-    value: 0
-  });
-  await ensureModuleConfig(em, {
-    moduleId: "billing",
-    name: "credit.near_limit_buffer_default",
-    value: 0
-  });
-}
+import { getBillingSettings } from "./lib/billingSettings.js";
 const ALL_BILLING_FEATURES = billingAclFeatures.map((f) => f.id);
 const setup = {
   defaultRoleFeatures: {
@@ -191,26 +21,19 @@ const setup = {
       "billing.balance.view",
       "billing.credit.view",
       "billing.topup.view",
-      "billing.statement.view"
+      "billing.statement.view",
+      "billing.settings.view",
+      "billing.payment.view"
     ],
     // Narrow scope for external usage-ingestion API keys.
     billing_usage_writer: ["billing.usage.ingest"]
   },
   /**
-   * Tenant init: per-tenant module configs (cron, invoice number defaults).
-   * Runs inside `setupInitialTenant()`, always — no `--no-examples` gate.
-   */
-  async onTenantCreated({ em }) {
-    await seedBillingConfigs(em);
-  },
-  /**
-   * Reference data: dictionaries (UoM, invoice statuses). Always runs
-   * during `mercato init`. Idempotent — re-seed is safe.
+   * Reference data: the organization's billing settings row (Spec 0).
+   * Always runs during `mercato init`. Idempotent (race-safe upsert).
    */
   async seedDefaults({ em, tenantId, organizationId }) {
-    const scope = { tenantId, organizationId };
-    await seedBillingUomDictionary(em, scope);
-    await seedInvoiceStatusDictionary(em, scope);
+    await getBillingSettings(em, { tenantId, organizationId });
   }
 };
 var setup_default = setup;

package/dist/modules/billing/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/billing/setup.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { features as billingAclFeatures } from './acl'\nimport {\n  Dictionary,\n  DictionaryEntry,\n} from '@open-mercato/core/modules/dictionaries/data/entities'\nimport { ModuleConfig } from '@open-mercato/core/modules/configs/data/entities'\n\n/**\n * Billing module setup \u2014 per-tenant defaults at module installation.\n *\n * Idempotency contract:\n *   - All seed helpers below check for an existing row before inserting.\n *   - Safe to re-run on every `mercato init` and on `auth sync-role-acls`.\n *\n * What this file seeds:\n *   - `billing.uom` dictionary with 16 global codes (operators can add more).\n *   - `sales.invoice_status` dictionary with `draft` / `posted` / `paid` /\n *     `void` so the core/sales Invoice entity's dictionary-driven status\n *     workflow has values to point at. (Core/sales does NOT seed these \u2014\n *     billing owns them per Phase 0 validation.)\n *   - `billing.cron_schedule` + `billing.cron_enabled` module configs.\n *   - `billing.invoice_number.format` + `.reset_cycle` configs (per-tenant\n *     defaults; the actual atomic numbering uses core/sales'\n *     `SalesDocumentSequence` which is created by core/sales' own\n *     `onTenantCreated`).\n *\n * Default role-feature grants:\n *   - `admin` gets every `billing.*` feature.\n *   - `billing_admin` is the day-to-day finance operator.\n *   - `billing_finance_user` is read + dry-run (no posting / no real trigger).\n *   - `billing_usage_writer` is the narrow scope for external system API keys.\n */\n\nconst BILLING_UOM_DICTIONARY_KEY = 'billing.uom'\nconst SALES_INVOICE_STATUS_DICTIONARY_KEY = 'sales.invoice_status'\n\nconst BILLING_UOM_CODES = [\n  // time\n  { value: 'hour', label: 'Hour' },\n  { value: 'day', label: 'Day' },\n  { value: 'week', label: 'Week' },\n  { value: 'month', label: 'Month' },\n  // volume\n  { value: 'gb', label: 'Gigabyte' },\n  { value: 'tb', label: 'Terabyte' },\n  { value: 'mb', label: 'Megabyte' },\n  // requests / tokens\n  { value: 'request', label: 'Request' },\n  { value: 'api_request', label: 'API Request' },\n  { value: 'token', label: 'Token' },\n  { value: 'input_token', label: 'Input Token' },\n  { value: 'output_token', label: 'Output Token' },\n  // seats / devices\n  { value: 'seat', label: 'Seat' },\n  { value: 'user', label: 'User' },\n  { value: 'device', label: 'Device' },\n  { value: 'active_user', label: 'Active User' },\n] as const\n\nconst INVOICE_STATUS_ENTRIES = [\n  // `posted` is the canonical \"issued\" state and is also the default a\n  // freshly created invoice transitions to \u2014 but billing creates drafts,\n  // so `draft` is the default DictionaryEntry for new rows.\n  { value: 'draft', label: 'Draft', isDefault: true, color: '#9ca3af' },\n  { value: 'posted', label: 'Posted', isDefault: false, color: '#2563eb' },\n  { value: 'paid', label: 'Paid', isDefault: false, color: '#16a34a' },\n  { value: 'void', label: 'Void', isDefault: false, color: '#dc2626' },\n] as const\n\ntype SeedScope = { tenantId: string; organizationId: string }\n\nasync function ensureDictionary(\n  em: EntityManager,\n  scope: SeedScope,\n  params: { key: string; name: string; description: string },\n): Promise<Dictionary> {\n  const existing = await em.findOne(Dictionary, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    key: params.key,\n    deletedAt: null,\n  })\n  if (existing) return existing\n  const dictionary = em.create(Dictionary, {\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n    key: params.key,\n    name: params.name,\n    description: params.description,\n    isSystem: true,\n    isActive: true,\n    managerVisibility: 'hidden',\n    createdAt: new Date(),\n    updatedAt: new Date(),\n  })\n  em.persist(dictionary)\n  await em.flush()\n  return dictionary\n}\n\nasync function ensureDictionaryEntries(\n  em: EntityManager,\n  scope: SeedScope,\n  dictionary: Dictionary,\n  entries: ReadonlyArray<{\n    value: string\n    label: string\n    isDefault?: boolean\n    color?: string\n  }>,\n): Promise<void> {\n  const existing = await em.find(DictionaryEntry, {\n    dictionary,\n    tenantId: scope.tenantId,\n    organizationId: scope.organizationId,\n  })\n  const existingValues = new Set(existing.map((e) => e.value))\n  let position = existing.length\n  for (const entry of entries) {\n    if (existingValues.has(entry.value)) continue\n    em.persist(\n      em.create(DictionaryEntry, {\n        dictionary,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        value: entry.value,\n        normalizedValue: entry.value.trim().toLowerCase(),\n        label: entry.label,\n        color: entry.color ?? null,\n        position,\n        isDefault: entry.isDefault ?? false,\n        createdAt: new Date(),\n        updatedAt: new Date(),\n      }),\n    )\n    position += 1\n  }\n  await em.flush()\n}\n\nasync function seedBillingUomDictionary(em: EntityManager, scope: SeedScope): Promise<void> {\n  const dict = await ensureDictionary(em, scope, {\n    key: BILLING_UOM_DICTIONARY_KEY,\n    name: 'Billing units of measure',\n    description: 'Units billing accepts on usage records (exact match \u2014 no conversion).',\n  })\n  await ensureDictionaryEntries(em, scope, dict, BILLING_UOM_CODES)\n}\n\nasync function seedInvoiceStatusDictionary(em: EntityManager, scope: SeedScope): Promise<void> {\n  const dict = await ensureDictionary(em, scope, {\n    key: SALES_INVOICE_STATUS_DICTIONARY_KEY,\n    name: 'Sales invoice statuses',\n    description: 'draft \u2192 posted \u2192 paid (or void). Drives the billing draft/post lifecycle.',\n  })\n  await ensureDictionaryEntries(em, scope, dict, INVOICE_STATUS_ENTRIES)\n}\n\nasync function ensureModuleConfig(\n  em: EntityManager,\n  params: { moduleId: string; name: string; value: unknown },\n): Promise<void> {\n  const existing = await em.findOne(ModuleConfig, {\n    moduleId: params.moduleId,\n    name: params.name,\n  })\n  if (existing) return\n  em.persist(\n    em.create(ModuleConfig, {\n      moduleId: params.moduleId,\n      name: params.name,\n      valueJson: params.value as Record<string, unknown> | null,\n      createdAt: new Date(),\n      updatedAt: new Date(),\n    }),\n  )\n  await em.flush()\n}\n\nasync function seedBillingConfigs(em: EntityManager): Promise<void> {\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'cron_schedule',\n    value: '0 2 * * *',\n  })\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'cron_enabled',\n    value: true,\n  })\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'invoice_number.format',\n    value: 'INV-{YYYY}-{0000001}',\n  })\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'invoice_number.reset_cycle',\n    value: 'yearly',\n  })\n\n  // \u2500\u2500\u2500 Prepaid balance billing (SPEC-002) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  // Fallback low-balance threshold when a prepaid account leaves its own\n  // `low_balance_threshold` null. 0 = off (status never flips to `low`\n  // until an operator sets a per-account threshold).\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'prepaid.low_balance_threshold_default',\n    value: 0,\n  })\n  // Default gateway provider key for top-up sessions.\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'prepaid.topup_provider',\n    value: 'stripe',\n  })\n  // Master switch for period statements.\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'prepaid.statement_enabled',\n    value: true,\n  })\n  // VAT rate (percent) applied to top-up receipts. The top-up `amount` is\n  // treated as GROSS (what the customer pays = what the balance is credited);\n  // the core tax service computes net + VAT from this rate. 0 = no VAT until\n  // an operator sets the jurisdiction's rate. (Deviation from xd-249, which\n  // never resolves a rate \u2014 see CHANGELOG.)\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'prepaid.topup_tax_rate',\n    value: 0,\n  })\n  // Fallback buffer for the `near_limit` credit status. 0 = warn only at the\n  // limit itself.\n  await ensureModuleConfig(em, {\n    moduleId: 'billing',\n    name: 'credit.near_limit_buffer_default',\n    value: 0,\n  })\n}\n\n// Derived from `acl.ts` so a new feature added there automatically lands\n// in every role that should get \"everything billing\" \u2014 no parallel list\n// to keep in sync.\nconst ALL_BILLING_FEATURES = billingAclFeatures.map((f) => f.id)\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    // Org admins get every billing feature \u2014 `billing.*` wildcard is matched\n    // by the shared feature matcher (`hasFeature` is wildcard-aware).\n    admin: ['billing.*'],\n\n    // Day-to-day finance operator persona.\n    billing_admin: [...ALL_BILLING_FEATURES],\n\n    // Read-only + dry-run preview \u2014 auditor / finance-watcher persona.\n    billing_finance_user: [\n      'billing.account.view',\n      'billing.item.view',\n      'billing.usage.view',\n      'billing.run.view',\n      'billing.run.dry_run',\n      'billing.invoice.view',\n      // Prepaid read-only (SPEC-002): balances, transactions, top-ups,\n      // statements, credit status \u2014 no adjust / no top-up initiation.\n      'billing.balance.view',\n      'billing.credit.view',\n      'billing.topup.view',\n      'billing.statement.view',\n    ],\n\n    // Narrow scope for external usage-ingestion API keys.\n    billing_usage_writer: ['billing.usage.ingest'],\n  },\n\n  /**\n   * Tenant init: per-tenant module configs (cron, invoice number defaults).\n   * Runs inside `setupInitialTenant()`, always \u2014 no `--no-examples` gate.\n   */\n  async onTenantCreated({ em }) {\n    await seedBillingConfigs(em)\n  },\n\n  /**\n   * Reference data: dictionaries (UoM, invoice statuses). Always runs\n   * during `mercato init`. Idempotent \u2014 re-seed is safe.\n   */\n  async seedDefaults({ em, tenantId, organizationId }) {\n    const scope = { tenantId, organizationId }\n    await seedBillingUomDictionary(em, scope)\n    await seedInvoiceStatusDictionary(em, scope)\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AAEA,SAAS,YAAY,0BAA0B;AAC/C;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AA4B7B,MAAM,6BAA6B;AACnC,MAAM,sCAAsC;AAE5C,MAAM,oBAAoB;AAAA;AAAA,EAExB,EAAE,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC/B,EAAE,OAAO,OAAO,OAAO,MAAM;AAAA,EAC7B,EAAE,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC/B,EAAE,OAAO,SAAS,OAAO,QAAQ;AAAA;AAAA,EAEjC,EAAE,OAAO,MAAM,OAAO,WAAW;AAAA,EACjC,EAAE,OAAO,MAAM,OAAO,WAAW;AAAA,EACjC,EAAE,OAAO,MAAM,OAAO,WAAW;AAAA;AAAA,EAEjC,EAAE,OAAO,WAAW,OAAO,UAAU;AAAA,EACrC,EAAE,OAAO,eAAe,OAAO,cAAc;AAAA,EAC7C,EAAE,OAAO,SAAS,OAAO,QAAQ;AAAA,EACjC,EAAE,OAAO,eAAe,OAAO,cAAc;AAAA,EAC7C,EAAE,OAAO,gBAAgB,OAAO,eAAe;AAAA;AAAA,EAE/C,EAAE,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC/B,EAAE,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC/B,EAAE,OAAO,UAAU,OAAO,SAAS;AAAA,EACnC,EAAE,OAAO,eAAe,OAAO,cAAc;AAC/C;AAEA,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA,EAI7B,EAAE,OAAO,SAAS,OAAO,SAAS,WAAW,MAAM,OAAO,UAAU;AAAA,EACpE,EAAE,OAAO,UAAU,OAAO,UAAU,WAAW,OAAO,OAAO,UAAU;AAAA,EACvE,EAAE,OAAO,QAAQ,OAAO,QAAQ,WAAW,OAAO,OAAO,UAAU;AAAA,EACnE,EAAE,OAAO,QAAQ,OAAO,QAAQ,WAAW,OAAO,OAAO,UAAU;AACrE;AAIA,eAAe,iBACb,IACA,OACA,QACqB;AACrB,QAAM,WAAW,MAAM,GAAG,QAAQ,YAAY;AAAA,IAC5C,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,KAAK,OAAO;AAAA,IACZ,WAAW;AAAA,EACb,CAAC;AACD,MAAI,SAAU,QAAO;AACrB,QAAM,aAAa,GAAG,OAAO,YAAY;AAAA,IACvC,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,KAAK,OAAO;AAAA,IACZ,MAAM,OAAO;AAAA,IACb,aAAa,OAAO;AAAA,IACpB,UAAU;AAAA,IACV,UAAU;AAAA,IACV,mBAAmB;AAAA,IACnB,WAAW,oBAAI,KAAK;AAAA,IACpB,WAAW,oBAAI,KAAK;AAAA,EACtB,CAAC;AACD,KAAG,QAAQ,UAAU;AACrB,QAAM,GAAG,MAAM;AACf,SAAO;AACT;AAEA,eAAe,wBACb,IACA,OACA,YACA,SAMe;AACf,QAAM,WAAW,MAAM,GAAG,KAAK,iBAAiB;AAAA,IAC9C;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAC;AACD,QAAM,iBAAiB,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AAC3D,MAAI,WAAW,SAAS;AACxB,aAAW,SAAS,SAAS;AAC3B,QAAI,eAAe,IAAI,MAAM,KAAK,EAAG;AACrC,OAAG;AAAA,MACD,GAAG,OAAO,iBAAiB;AAAA,QACzB;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,OAAO,MAAM;AAAA,QACb,iBAAiB,MAAM,MAAM,KAAK,EAAE,YAAY;AAAA,QAChD,OAAO,MAAM;AAAA,QACb,OAAO,MAAM,SAAS;AAAA,QACtB;AAAA,QACA,WAAW,MAAM,aAAa;AAAA,QAC9B,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AAAA,IACH;AACA,gBAAY;AAAA,EACd;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAe,yBAAyB,IAAmB,OAAiC;AAC1F,QAAM,OAAO,MAAM,iBAAiB,IAAI,OAAO;AAAA,IAC7C,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACD,QAAM,wBAAwB,IAAI,OAAO,MAAM,iBAAiB;AAClE;AAEA,eAAe,4BAA4B,IAAmB,OAAiC;AAC7F,QAAM,OAAO,MAAM,iBAAiB,IAAI,OAAO;AAAA,IAC7C,KAAK;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,EACf,CAAC;AACD,QAAM,wBAAwB,IAAI,OAAO,MAAM,sBAAsB;AACvE;AAEA,eAAe,mBACb,IACA,QACe;AACf,QAAM,WAAW,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC9C,UAAU,OAAO;AAAA,IACjB,MAAM,OAAO;AAAA,EACf,CAAC;AACD,MAAI,SAAU;AACd,KAAG;AAAA,IACD,GAAG,OAAO,cAAc;AAAA,MACtB,UAAU,OAAO;AAAA,MACjB,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,WAAW,oBAAI,KAAK;AAAA,MACpB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC;AAAA,EACH;AACA,QAAM,GAAG,MAAM;AACjB;AAEA,eAAe,mBAAmB,IAAkC;AAClE,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAMD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAED,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAED,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAMD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AAGD,QAAM,mBAAmB,IAAI;AAAA,IAC3B,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EACT,CAAC;AACH;AAKA,MAAM,uBAAuB,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE;AAExD,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA;AAAA;AAAA,IAGnB,OAAO,CAAC,WAAW;AAAA;AAAA,IAGnB,eAAe,CAAC,GAAG,oBAAoB;AAAA;AAAA,IAGvC,sBAAsB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA,IAGA,sBAAsB,CAAC,sBAAsB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBAAgB,EAAE,GAAG,GAAG;AAC5B,UAAM,mBAAmB,EAAE;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,EAAE,IAAI,UAAU,eAAe,GAAG;AACnD,UAAM,QAAQ,EAAE,UAAU,eAAe;AACzC,UAAM,yBAAyB,IAAI,KAAK;AACxC,UAAM,4BAA4B,IAAI,KAAK;AAAA,EAC7C;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { features as billingAclFeatures } from './acl'\nimport { getBillingSettings } from './lib/billingSettings'\n\n/**\n * Billing module setup \u2014 per-tenant defaults at module installation.\n *\n * Idempotency contract:\n *   - All seed helpers below check for an existing row before inserting.\n *   - Safe to re-run on every `mercato init` and on `auth sync-role-acls`.\n *\n * What this file seeds (Spec 0 \u2014 no core `configs` / `dictionaries` /\n * `sales` rows any more):\n *   - one `billing_settings` row per organization with the defaults\n *     (prepaid defaults + number masks). `getBillingSettings` also creates\n *     it lazily, so this is only a warm-up.\n *\n * Default role-feature grants:\n *   - `admin` gets every `billing.*` feature.\n *   - `billing_admin` is the day-to-day finance operator.\n *   - `billing_finance_user` is read + dry-run (no posting / no real trigger).\n *   - `billing_usage_writer` is the narrow scope for external system API keys.\n */\n\n// Derived from `acl.ts` so a new feature added there automatically lands\n// in every role that should get \"everything billing\" \u2014 no parallel list\n// to keep in sync.\nconst ALL_BILLING_FEATURES = billingAclFeatures.map((f) => f.id)\n\nexport const setup: ModuleSetupConfig = {\n  defaultRoleFeatures: {\n    // Org admins get every billing feature \u2014 `billing.*` wildcard is matched\n    // by the shared feature matcher (`hasFeature` is wildcard-aware).\n    admin: ['billing.*'],\n\n    // Day-to-day finance operator persona.\n    billing_admin: [...ALL_BILLING_FEATURES],\n\n    // Read-only + dry-run preview \u2014 auditor / finance-watcher persona.\n    billing_finance_user: [\n      'billing.account.view',\n      'billing.item.view',\n      'billing.usage.view',\n      'billing.run.view',\n      'billing.run.dry_run',\n      'billing.invoice.view',\n      // Prepaid read-only (SPEC-002): balances, transactions, top-ups,\n      // statements, credit status \u2014 no adjust / no top-up initiation.\n      'billing.balance.view',\n      'billing.credit.view',\n      'billing.topup.view',\n      'billing.statement.view',\n      'billing.settings.view',\n      'billing.payment.view',\n    ],\n\n    // Narrow scope for external usage-ingestion API keys.\n    billing_usage_writer: ['billing.usage.ingest'],\n  },\n\n  /**\n   * Reference data: the organization's billing settings row (Spec 0).\n   * Always runs during `mercato init`. Idempotent (race-safe upsert).\n   */\n  async seedDefaults({ em, tenantId, organizationId }) {\n    await getBillingSettings(em as EntityManager, { tenantId, organizationId })\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AAEA,SAAS,YAAY,0BAA0B;AAC/C,SAAS,0BAA0B;AAyBnC,MAAM,uBAAuB,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE;AAExD,MAAM,QAA2B;AAAA,EACtC,qBAAqB;AAAA;AAAA;AAAA,IAGnB,OAAO,CAAC,WAAW;AAAA;AAAA,IAGnB,eAAe,CAAC,GAAG,oBAAoB;AAAA;AAAA,IAGvC,sBAAsB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA;AAAA;AAAA,MAGA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA,IAGA,sBAAsB,CAAC,sBAAsB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,EAAE,IAAI,UAAU,eAAe,GAAG;AACnD,UAAM,mBAAmB,IAAqB,EAAE,UAAU,eAAe,CAAC;AAAA,EAC5E;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/billing/subscribers/credit-memo-auto-send.js

@@ -0,0 +1,16 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { autoSendInvoice } from "./invoice-auto-send.js";
+const metadata = {
+  event: "billing.credit_memo.posted",
+  persistent: true,
+  id: "billing-credit-memo-auto-send"
+};
+async function handle(payload) {
+  const container = await createRequestContainer();
+  await autoSendInvoice(container.resolve("em").fork(), payload);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=credit-memo-auto-send.js.map

package/dist/modules/billing/subscribers/credit-memo-auto-send.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/subscribers/credit-memo-auto-send.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { autoSendInvoice } from './invoice-auto-send'\n\n/** Auto-send of posted credit memos for accounts with `auto_send_invoice` (Spec D, P-D9). */\nexport const metadata = {\n  event: 'billing.credit_memo.posted',\n  persistent: true,\n  id: 'billing-credit-memo-auto-send',\n}\n\nexport default async function handle(payload: { invoiceId?: string; tenantId?: string; organizationId?: string }): Promise<void> {\n  const container = await createRequestContainer()\n  await autoSendInvoice((container.resolve('em') as EntityManager).fork(), payload)\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAGzB,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OAA8B,SAA4F;AAC/H,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,gBAAiB,UAAU,QAAQ,IAAI,EAAoB,KAAK,GAAG,OAAO;AAClF;",
+  "names": []
+}

package/dist/modules/billing/subscribers/debit-memo-apply-credit.js

@@ -0,0 +1,16 @@
+import { applyCreditForAccount } from "./invoice-apply-credit.js";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+const metadata = {
+  event: "billing.debit_memo.posted",
+  persistent: true,
+  id: "billing-debit-memo-apply-credit"
+};
+async function handle(payload) {
+  const container = await createRequestContainer();
+  await applyCreditForAccount(container.resolve("em").fork(), payload);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=debit-memo-apply-credit.js.map

package/dist/modules/billing/subscribers/debit-memo-apply-credit.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/subscribers/debit-memo-apply-credit.ts"],
+  "sourcesContent": ["import { applyCreditForAccount, type PostedPayload } from './invoice-apply-credit'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { EntityManager } from '@mikro-orm/postgresql'\n\n/** Credit auto-apply when a debit memo is posted (Spec D, P-D6) \u2014 same handler as for invoices. */\nexport const metadata = {\n  event: 'billing.debit_memo.posted',\n  persistent: true,\n  id: 'billing-debit-memo-apply-credit',\n}\n\nexport default async function handle(payload: PostedPayload): Promise<void> {\n  const container = await createRequestContainer()\n  await applyCreditForAccount((container.resolve('em') as EntityManager).fork(), payload)\n}\n"],
+  "mappings": "AAAA,SAAS,6BAAiD;AAC1D,SAAS,8BAA8B;AAIhC,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OAA8B,SAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,sBAAuB,UAAU,QAAQ,IAAI,EAAoB,KAAK,GAAG,OAAO;AACxF;",
+  "names": []
+}

package/dist/modules/billing/subscribers/debit-memo-auto-send.js

@@ -0,0 +1,16 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { autoSendInvoice } from "./invoice-auto-send.js";
+const metadata = {
+  event: "billing.debit_memo.posted",
+  persistent: true,
+  id: "billing-debit-memo-auto-send"
+};
+async function handle(payload) {
+  const container = await createRequestContainer();
+  await autoSendInvoice(container.resolve("em").fork(), payload);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=debit-memo-auto-send.js.map

package/dist/modules/billing/subscribers/debit-memo-auto-send.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/subscribers/debit-memo-auto-send.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { autoSendInvoice } from './invoice-auto-send'\n\n/** Auto-send of posted debit memos for accounts with `auto_send_invoice` (Spec D, P-D9). */\nexport const metadata = {\n  event: 'billing.debit_memo.posted',\n  persistent: true,\n  id: 'billing-debit-memo-auto-send',\n}\n\nexport default async function handle(payload: { invoiceId?: string; tenantId?: string; organizationId?: string }): Promise<void> {\n  const container = await createRequestContainer()\n  await autoSendInvoice((container.resolve('em') as EntityManager).fork(), payload)\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAGzB,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,OAA8B,SAA4F;AAC/H,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,gBAAiB,UAAU,QAAQ,IAAI,EAAoB,KAAK,GAAG,OAAO;AAClF;",
+  "names": []
+}

package/dist/modules/billing/subscribers/invoice-apply-credit.js

@@ -0,0 +1,34 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { BillingAccount } from "../data/entities.js";
+import { withAccountLock } from "../lib/accountLock.js";
+import { applyAccountCredit } from "../lib/allocation.js";
+import { emitAllocationEffects } from "../lib/allocationEvents.js";
+const metadata = {
+  event: "billing.invoice.posted",
+  persistent: true,
+  id: "billing-invoice-apply-credit"
+};
+async function applyCreditForAccount(em, payload) {
+  if (!payload?.billAccountId || !payload.tenantId || !payload.organizationId) return 0;
+  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId };
+  const account = await em.findOne(BillingAccount, { id: payload.billAccountId, ...scope });
+  if (!account || account.billingMode === "prepaid") return 0;
+  const effects = await withAccountLock(
+    em,
+    { tenantId: scope.tenantId, billAccountId: account.id },
+    (tem) => applyAccountCredit(tem, scope, { id: account.id, currencyCode: account.currencyCode })
+  );
+  await emitAllocationEffects(scope, effects);
+  return effects.created.length;
+}
+async function handle(payload) {
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  await applyCreditForAccount(em, payload);
+}
+export {
+  applyCreditForAccount,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=invoice-apply-credit.js.map

package/dist/modules/billing/subscribers/invoice-apply-credit.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/subscribers/invoice-apply-credit.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { BillingAccount } from '../data/entities'\nimport { withAccountLock } from '../lib/accountLock'\nimport { applyAccountCredit } from '../lib/allocation'\nimport { emitAllocationEffects } from '../lib/allocationEvents'\n\n/**\n * Credit auto-apply on post (Spec C, D12): when an invoice is posted, any\n * unapplied credit of its account (overpayments, unallocated payments,\n * open credit memos) is spent on the account's open receivables, oldest due\n * date first. Persistent and safe to re-run (it only spends what is left).\n */\n\nexport const metadata = {\n  event: 'billing.invoice.posted',\n  persistent: true,\n  id: 'billing-invoice-apply-credit',\n}\n\nexport type PostedPayload = { billAccountId?: string; tenantId?: string; organizationId?: string }\n\nexport async function applyCreditForAccount(em: EntityManager, payload: PostedPayload): Promise<number> {\n  if (!payload?.billAccountId || !payload.tenantId || !payload.organizationId) return 0\n  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId }\n  const account = await em.findOne(BillingAccount, { id: payload.billAccountId, ...scope } as never)\n  if (!account || account.billingMode === 'prepaid') return 0\n  const effects = await withAccountLock(em, { tenantId: scope.tenantId, billAccountId: account.id }, (tem) =>\n    applyAccountCredit(tem, scope, { id: account.id, currencyCode: account.currencyCode }),\n  )\n  await emitAllocationEffects(scope, effects)\n  return effects.created.length\n}\n\nexport default async function handle(payload: PostedPayload): Promise<void> {\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  await applyCreditForAccount(em, payload)\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,sBAAsB;AAC/B,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AAS/B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAIA,eAAsB,sBAAsB,IAAmB,SAAyC;AACtG,MAAI,CAAC,SAAS,iBAAiB,CAAC,QAAQ,YAAY,CAAC,QAAQ,eAAgB,QAAO;AACpF,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,QAAQ,eAAe,GAAG,MAAM,CAAU;AACjG,MAAI,CAAC,WAAW,QAAQ,gBAAgB,UAAW,QAAO;AAC1D,QAAM,UAAU,MAAM;AAAA,IAAgB;AAAA,IAAI,EAAE,UAAU,MAAM,UAAU,eAAe,QAAQ,GAAG;AAAA,IAAG,CAAC,QAClG,mBAAmB,KAAK,OAAO,EAAE,IAAI,QAAQ,IAAI,cAAc,QAAQ,aAAa,CAAC;AAAA,EACvF;AACA,QAAM,sBAAsB,OAAO,OAAO;AAC1C,SAAO,QAAQ,QAAQ;AACzB;AAEA,eAAO,OAA8B,SAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,sBAAsB,IAAI,OAAO;AACzC;",
+  "names": []
+}

package/dist/modules/billing/subscribers/invoice-auto-send.js

@@ -0,0 +1,30 @@
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { BillingAccount, BillingInvoice } from "../data/entities.js";
+import { hasSuccessfulDelivery, isDeliverableEmail, sendInvoice } from "../lib/invoiceDelivery.js";
+const metadata = {
+  event: "billing.invoice.posted",
+  persistent: true,
+  id: "billing-invoice-auto-send"
+};
+async function autoSendInvoice(em, payload, deps = {}) {
+  if (!payload?.invoiceId || !payload.tenantId || !payload.organizationId) return "skipped";
+  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId };
+  const invoice = await em.findOne(BillingInvoice, { id: payload.invoiceId, ...scope, deletedAt: null });
+  if (!invoice || invoice.testRun || invoice.status === "draft" || invoice.documentType === "receipt") return "skipped";
+  if (hasSuccessfulDelivery(invoice, "auto")) return "skipped";
+  const account = await em.findOne(BillingAccount, { id: invoice.billAccountId, ...scope });
+  if (!account?.autoSendInvoice || !isDeliverableEmail(account.invoiceEmail)) return "skipped";
+  const result = await sendInvoice(em, { invoiceId: invoice.id, ...scope, trigger: "auto" }, deps);
+  return result.status;
+}
+async function handle(payload) {
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  await autoSendInvoice(em, payload);
+}
+export {
+  autoSendInvoice,
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=invoice-auto-send.js.map

package/dist/modules/billing/subscribers/invoice-auto-send.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/billing/subscribers/invoice-auto-send.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { BillingAccount, BillingInvoice } from '../data/entities'\nimport { hasSuccessfulDelivery, isDeliverableEmail, sendInvoice, type SendInvoiceDeps } from '../lib/invoiceDelivery'\n\n/**\n * Auto-send (Spec B): `billing.invoice.posted` \u2192 email the document when the\n * account has `auto_send_invoice` on.\n *\n * Persistent and idempotent: a redelivered event finds a `sent` auto\n * delivery in `metadata.deliveries` and does nothing. Receipts, test\n * documents and accounts with a placeholder / missing email are skipped\n * without a delivery entry (the operator can still send manually once the\n * address is fixed). A transport failure is recorded as a `failed`\n * delivery by `sendInvoice` and not retried automatically.\n */\n\nexport const metadata = {\n  event: 'billing.invoice.posted',\n  persistent: true,\n  id: 'billing-invoice-auto-send',\n}\n\ntype PostedPayload = {\n  invoiceId?: string\n  tenantId?: string\n  organizationId?: string\n}\n\nexport async function autoSendInvoice(em: EntityManager, payload: PostedPayload, deps: SendInvoiceDeps = {}): Promise<'sent' | 'failed' | 'skipped'> {\n  if (!payload?.invoiceId || !payload.tenantId || !payload.organizationId) return 'skipped'\n  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId }\n  const invoice = await em.findOne(BillingInvoice, { id: payload.invoiceId, ...scope, deletedAt: null } as never)\n  if (!invoice || invoice.testRun || invoice.status === 'draft' || invoice.documentType === 'receipt') return 'skipped'\n  if (hasSuccessfulDelivery(invoice, 'auto')) return 'skipped'\n  const account = await em.findOne(BillingAccount, { id: invoice.billAccountId, ...scope } as never)\n  if (!account?.autoSendInvoice || !isDeliverableEmail(account.invoiceEmail)) return 'skipped'\n  const result = await sendInvoice(em, { invoiceId: invoice.id, ...scope, trigger: 'auto' }, deps)\n  return result.status\n}\n\nexport default async function handle(payload: PostedPayload): Promise<void> {\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  await autoSendInvoice(em, payload)\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,gBAAgB,sBAAsB;AAC/C,SAAS,uBAAuB,oBAAoB,mBAAyC;AActF,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAQA,eAAsB,gBAAgB,IAAmB,SAAwB,OAAwB,CAAC,GAA2C;AACnJ,MAAI,CAAC,SAAS,aAAa,CAAC,QAAQ,YAAY,CAAC,QAAQ,eAAgB,QAAO;AAChF,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,QAAQ,WAAW,GAAG,OAAO,WAAW,KAAK,CAAU;AAC9G,MAAI,CAAC,WAAW,QAAQ,WAAW,QAAQ,WAAW,WAAW,QAAQ,iBAAiB,UAAW,QAAO;AAC5G,MAAI,sBAAsB,SAAS,MAAM,EAAG,QAAO;AACnD,QAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,QAAQ,eAAe,GAAG,MAAM,CAAU;AACjG,MAAI,CAAC,SAAS,mBAAmB,CAAC,mBAAmB,QAAQ,YAAY,EAAG,QAAO;AACnF,QAAM,SAAS,MAAM,YAAY,IAAI,EAAE,WAAW,QAAQ,IAAI,GAAG,OAAO,SAAS,OAAO,GAAG,IAAI;AAC/F,SAAO,OAAO;AAChB;AAEA,eAAO,OAA8B,SAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,gBAAgB,IAAI,OAAO;AACnC;",
+  "names": []
+}

package/dist/modules/billing/subscribers/payment-captured-to-paid.js

@@ -1,47 +1,83 @@
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
-import { resolveInvoiceStatusEntryId } from "../lib/invoiceStatus.js";
+import { BillingInvoice, BillingPayment } from "../data/entities.js";
+import { withAccountLock } from "../lib/accountLock.js";
+import { allocate, applyAccountCredit, emptyEffects, mergeEffects, toCents } from "../lib/allocation.js";
+import { emitAllocationEffects } from "../lib/allocationEvents.js";
+import { emitBillingEvent } from "../events.js";
 const metadata = {
   event: "payment_gateways.payment.captured",
   persistent: true,
   id: "billing-payment-captured-to-paid"
 };
-async function handle(payload) {
-  if (!payload?.paymentId || !payload.tenantId || !payload.organizationId) {
-    return;
-  }
-  const container = await createRequestContainer();
-  const em = container.resolve("em").fork();
-  const invoice = await em.findOne(SalesInvoice, {
-    id: payload.paymentId,
-    tenantId: payload.tenantId,
-    organizationId: payload.organizationId,
-    deletedAt: null
+async function recordGatewayCapture(em, payload) {
+  if (!payload?.paymentId || !payload.tenantId || !payload.organizationId) return "skipped";
+  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId };
+  const invoice = await em.findOne(BillingInvoice, { id: payload.paymentId, ...scope, deletedAt: null });
+  if (!invoice || invoice.testRun || !["invoice", "debit_memo"].includes(invoice.documentType)) return "skipped";
+  const externalRef = payload.transactionId ?? payload.paymentId;
+  const existing = await em.findOne(BillingPayment, { ...scope, externalRef });
+  if (existing) return "duplicate";
+  if (!["posted", "partially_paid"].includes(invoice.status)) return "skipped";
+  const captured = toCents(payload.amount ?? invoice.outstanding);
+  if (captured <= 0) return "skipped";
+  const amount = (captured / 100).toFixed(4);
+  const now = /* @__PURE__ */ new Date();
+  const payment = em.create(BillingPayment, {
+    ...scope,
+    receivedAt: new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate())),
+    amount,
+    currencyCode: (payload.currencyCode ?? invoice.currencyCode).toUpperCase(),
+    reference: invoice.number,
+    source: "gateway",
+    billAccountId: invoice.billAccountId,
+    status: "matched",
+    unallocatedAmount: amount,
+    sourceRef: `gateway:${externalRef}`,
+    externalRef,
+    metadata: { provider_key: payload.providerKey ?? null },
+    createdAt: now,
+    updatedAt: now
   });
-  if (!invoice) {
-    return;
-  }
-  if (invoice.status === "paid") {
-    return;
-  }
-  if (invoice.status !== "posted") {
-    return;
-  }
-  const paidStatusEntryId = await resolveInvoiceStatusEntryId(
+  em.persist(payment);
+  await em.flush();
+  const effects = await withAccountLock(
     em,
-    payload.tenantId,
-    payload.organizationId,
-    "paid"
+    { tenantId: scope.tenantId, billAccountId: invoice.billAccountId },
+    async (tem) => {
+      const all = emptyEffects();
+      const take = Math.min(captured, toCents(invoice.outstanding));
+      if (take > 0 && payment.currencyCode === invoice.currencyCode) {
+        mergeEffects(
+          all,
+          await allocate(tem, scope, {
+            source: { type: "payment", id: payment.id },
+            invoiceId: invoice.id,
+            amountCents: take,
+            by: "gateway"
+          })
+        );
+      }
+      mergeEffects(
+        all,
+        await applyAccountCredit(tem, scope, { id: invoice.billAccountId, currencyCode: payment.currencyCode }, {
+          onlySources: [{ type: "payment", id: payment.id }]
+        })
+      );
+      return all;
+    }
   );
-  invoice.status = "paid";
-  invoice.statusEntryId = paidStatusEntryId;
-  invoice.paidTotalAmount = invoice.grandTotalGrossAmount;
-  invoice.outstandingAmount = "0";
-  invoice.updatedAt = /* @__PURE__ */ new Date();
-  await em.flush();
+  await emitBillingEvent("billing.payment.created", { ...scope, paymentId: payment.id, source: "gateway" });
+  await emitAllocationEffects(scope, effects);
+  return "recorded";
+}
+async function handle(payload) {
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  await recordGatewayCapture(em, payload);
 }
 export {
   handle as default,
-  metadata
+  metadata,
+  recordGatewayCapture
 };
 //# sourceMappingURL=payment-captured-to-paid.js.map

package/dist/modules/billing/subscribers/payment-captured-to-paid.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/billing/subscribers/payment-captured-to-paid.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { resolveInvoiceStatusEntryId } from '../lib/invoiceStatus'\n\n/**\n * Subscriber: payment captured \u2192 billing invoice paid.\n *\n * Spec wishlist was `payments.payment.completed` carrying `invoice_id`.\n * The actual upstream event is `payment_gateways.payment.captured` and\n * its payload carries `paymentId` \u2014 set by whoever created the payment\n * session. Billing flows that drive their own payment sessions can\n * pass `paymentId = invoice.id`; the subscriber matches on that.\n *\n * Behaviour:\n *   1. Try to find a `core/sales` invoice with `id = payload.paymentId`\n *      scoped to the same tenant/organization.\n *   2. If found AND its `status == 'posted'`, flip it to `'paid'`\n *      (resolves the `paid` `DictionaryEntry`, updates `status` +\n *      `status_entry_id`). Drafts and already-paid / voided invoices\n *      are left untouched.\n *   3. If `paymentId` does not point at a billing-known invoice (e.g.\n *      the payment was for a `sales.order`), the subscriber is a\n *      no-op \u2014 every other module's own subscriber owns its slice.\n *\n * Cross-tenant safety: we always re-scope by `tenantId` +\n * `organizationId` from the event payload. A malformed payload (e.g.\n * missing scope fields) short-circuits without touching the DB.\n *\n * Idempotency: re-firing the same captured event finds the invoice\n * already paid and skips silently.\n */\n\nexport const metadata = {\n  event: 'payment_gateways.payment.captured',\n  persistent: true,\n  id: 'billing-payment-captured-to-paid',\n}\n\ntype CapturedPayload = {\n  paymentId?: string\n  transactionId?: string\n  organizationId?: string\n  tenantId?: string\n  providerKey?: string\n}\n\nexport default async function handle(payload: CapturedPayload): Promise<void> {\n  if (!payload?.paymentId || !payload.tenantId || !payload.organizationId) {\n    return\n  }\n\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  const invoice = await em.findOne(SalesInvoice, {\n    id: payload.paymentId,\n    tenantId: payload.tenantId,\n    organizationId: payload.organizationId,\n    deletedAt: null,\n  })\n  if (!invoice) {\n    // The captured payment isn't for a billing invoice \u2014 silent\n    // no-op. Other subscribers (sales, checkout) handle their slice.\n    return\n  }\n  if (invoice.status === 'paid') {\n    // Already paid \u2014 idempotent re-firing.\n    return\n  }\n  if (invoice.status !== 'posted') {\n    // A captured payment for a draft / void invoice is suspicious but\n    // not actionable here. Future iteration: log to audit_logs.\n    return\n  }\n\n  const paidStatusEntryId = await resolveInvoiceStatusEntryId(\n    em,\n    payload.tenantId,\n    payload.organizationId,\n    'paid',\n  )\n  invoice.status = 'paid'\n  invoice.statusEntryId = paidStatusEntryId\n  invoice.paidTotalAmount = invoice.grandTotalGrossAmount\n  invoice.outstandingAmount = '0'\n  invoice.updatedAt = new Date()\n  await em.flush()\n}\n"],
-  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,oBAAoB;AAC7B,SAAS,mCAAmC;AA8BrC,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAUA,eAAO,OAA8B,SAAyC;AAC5E,MAAI,CAAC,SAAS,aAAa,CAAC,QAAQ,YAAY,CAAC,QAAQ,gBAAgB;AACvE;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,QAAM,UAAU,MAAM,GAAG,QAAQ,cAAc;AAAA,IAC7C,IAAI,QAAQ;AAAA,IACZ,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,SAAS;AAGZ;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,QAAQ;AAE7B;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,UAAU;AAG/B;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAAA,IAC9B;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,EACF;AACA,UAAQ,SAAS;AACjB,UAAQ,gBAAgB;AACxB,UAAQ,kBAAkB,QAAQ;AAClC,UAAQ,oBAAoB;AAC5B,UAAQ,YAAY,oBAAI,KAAK;AAC7B,QAAM,GAAG,MAAM;AACjB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { BillingInvoice, BillingPayment } from '../data/entities'\nimport { withAccountLock } from '../lib/accountLock'\nimport { allocate, applyAccountCredit, emptyEffects, mergeEffects, toCents, type AllocationEffects } from '../lib/allocation'\nimport { emitAllocationEffects } from '../lib/allocationEvents'\nimport { emitBillingEvent } from '../events'\n\n/**\n * Subscriber: gateway payment captured \u2192 billing payment + allocation\n * (Spec C, P-D9 \u2014 the single code path to \"paid\").\n *\n * The payment session is created with `paymentId = invoice.id`, so the\n * captured event identifies the billing invoice. Instead of flipping the\n * invoice status, the capture becomes a `BillingPayment` (`source =\n * gateway`, `external_ref = transactionId ?? paymentId`) allocated to that\n * invoice through the allocation service; any remainder is account credit.\n *\n * Idempotent: a re-delivered event finds the payment by `external_ref` and\n * does nothing. Payments for anything that is not an open billing\n * receivable are ignored (other modules own them).\n */\n\nexport const metadata = {\n  event: 'payment_gateways.payment.captured',\n  persistent: true,\n  id: 'billing-payment-captured-to-paid',\n}\n\nexport type CapturedPayload = {\n  paymentId?: string\n  transactionId?: string\n  organizationId?: string\n  tenantId?: string\n  providerKey?: string\n  amount?: number | string\n  currencyCode?: string\n}\n\nexport async function recordGatewayCapture(\n  em: EntityManager,\n  payload: CapturedPayload,\n): Promise<'recorded' | 'duplicate' | 'skipped'> {\n  if (!payload?.paymentId || !payload.tenantId || !payload.organizationId) return 'skipped'\n  const scope = { tenantId: payload.tenantId, organizationId: payload.organizationId }\n  const invoice = await em.findOne(BillingInvoice, { id: payload.paymentId, ...scope, deletedAt: null } as never)\n  if (!invoice || invoice.testRun || !['invoice', 'debit_memo'].includes(invoice.documentType)) return 'skipped'\n  const externalRef = payload.transactionId ?? payload.paymentId\n  const existing = await em.findOne(BillingPayment, { ...scope, externalRef } as never)\n  if (existing) return 'duplicate'\n  if (!['posted', 'partially_paid'].includes(invoice.status)) return 'skipped'\n\n  const captured = toCents(payload.amount ?? invoice.outstanding)\n  if (captured <= 0) return 'skipped'\n  const amount = (captured / 100).toFixed(4)\n  const now = new Date()\n  const payment = em.create(BillingPayment, {\n    ...scope,\n    receivedAt: new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate())),\n    amount,\n    currencyCode: (payload.currencyCode ?? invoice.currencyCode).toUpperCase(),\n    reference: invoice.number,\n    source: 'gateway',\n    billAccountId: invoice.billAccountId,\n    status: 'matched',\n    unallocatedAmount: amount,\n    sourceRef: `gateway:${externalRef}`,\n    externalRef,\n    metadata: { provider_key: payload.providerKey ?? null },\n    createdAt: now,\n    updatedAt: now,\n  })\n  em.persist(payment)\n  await em.flush()\n\n  const effects: AllocationEffects = await withAccountLock(\n    em,\n    { tenantId: scope.tenantId, billAccountId: invoice.billAccountId },\n    async (tem) => {\n      const all = emptyEffects()\n      const take = Math.min(captured, toCents(invoice.outstanding))\n      if (take > 0 && payment.currencyCode === invoice.currencyCode) {\n        mergeEffects(\n          all,\n          await allocate(tem, scope, {\n            source: { type: 'payment', id: payment.id },\n            invoiceId: invoice.id,\n            amountCents: take,\n            by: 'gateway',\n          }),\n        )\n      }\n      mergeEffects(\n        all,\n        await applyAccountCredit(tem, scope, { id: invoice.billAccountId, currencyCode: payment.currencyCode }, {\n          onlySources: [{ type: 'payment', id: payment.id }],\n        }),\n      )\n      return all\n    },\n  )\n  await emitBillingEvent('billing.payment.created', { ...scope, paymentId: payment.id, source: 'gateway' })\n  await emitAllocationEffects(scope, effects)\n  return 'recorded'\n}\n\nexport default async function handle(payload: CapturedPayload): Promise<void> {\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n  await recordGatewayCapture(em, payload)\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,gBAAgB,sBAAsB;AAC/C,SAAS,uBAAuB;AAChC,SAAS,UAAU,oBAAoB,cAAc,cAAc,eAAuC;AAC1G,SAAS,6BAA6B;AACtC,SAAS,wBAAwB;AAiB1B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAYA,eAAsB,qBACpB,IACA,SAC+C;AAC/C,MAAI,CAAC,SAAS,aAAa,CAAC,QAAQ,YAAY,CAAC,QAAQ,eAAgB,QAAO;AAChF,QAAM,QAAQ,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AACnF,QAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB,EAAE,IAAI,QAAQ,WAAW,GAAG,OAAO,WAAW,KAAK,CAAU;AAC9G,MAAI,CAAC,WAAW,QAAQ,WAAW,CAAC,CAAC,WAAW,YAAY,EAAE,SAAS,QAAQ,YAAY,EAAG,QAAO;AACrG,QAAM,cAAc,QAAQ,iBAAiB,QAAQ;AACrD,QAAM,WAAW,MAAM,GAAG,QAAQ,gBAAgB,EAAE,GAAG,OAAO,YAAY,CAAU;AACpF,MAAI,SAAU,QAAO;AACrB,MAAI,CAAC,CAAC,UAAU,gBAAgB,EAAE,SAAS,QAAQ,MAAM,EAAG,QAAO;AAEnE,QAAM,WAAW,QAAQ,QAAQ,UAAU,QAAQ,WAAW;AAC9D,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,UAAU,WAAW,KAAK,QAAQ,CAAC;AACzC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,UAAU,GAAG,OAAO,gBAAgB;AAAA,IACxC,GAAG;AAAA,IACH,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,GAAG,IAAI,YAAY,GAAG,IAAI,WAAW,CAAC,CAAC;AAAA,IACxF;AAAA,IACA,eAAe,QAAQ,gBAAgB,QAAQ,cAAc,YAAY;AAAA,IACzE,WAAW,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,eAAe,QAAQ;AAAA,IACvB,QAAQ;AAAA,IACR,mBAAmB;AAAA,IACnB,WAAW,WAAW,WAAW;AAAA,IACjC;AAAA,IACA,UAAU,EAAE,cAAc,QAAQ,eAAe,KAAK;AAAA,IACtD,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,KAAG,QAAQ,OAAO;AAClB,QAAM,GAAG,MAAM;AAEf,QAAM,UAA6B,MAAM;AAAA,IACvC;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,eAAe,QAAQ,cAAc;AAAA,IACjE,OAAO,QAAQ;AACb,YAAM,MAAM,aAAa;AACzB,YAAM,OAAO,KAAK,IAAI,UAAU,QAAQ,QAAQ,WAAW,CAAC;AAC5D,UAAI,OAAO,KAAK,QAAQ,iBAAiB,QAAQ,cAAc;AAC7D;AAAA,UACE;AAAA,UACA,MAAM,SAAS,KAAK,OAAO;AAAA,YACzB,QAAQ,EAAE,MAAM,WAAW,IAAI,QAAQ,GAAG;AAAA,YAC1C,WAAW,QAAQ;AAAA,YACnB,aAAa;AAAA,YACb,IAAI;AAAA,UACN,CAAC;AAAA,QACH;AAAA,MACF;AACA;AAAA,QACE;AAAA,QACA,MAAM,mBAAmB,KAAK,OAAO,EAAE,IAAI,QAAQ,eAAe,cAAc,QAAQ,aAAa,GAAG;AAAA,UACtG,aAAa,CAAC,EAAE,MAAM,WAAW,IAAI,QAAQ,GAAG,CAAC;AAAA,QACnD,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,iBAAiB,2BAA2B,EAAE,GAAG,OAAO,WAAW,QAAQ,IAAI,QAAQ,UAAU,CAAC;AACxG,QAAM,sBAAsB,OAAO,OAAO;AAC1C,SAAO;AACT;AAEA,eAAO,OAA8B,SAAyC;AAC5E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,QAAM,qBAAqB,IAAI,OAAO;AACxC;",
   "names": []
 }

package/dist/modules/billing/subscribers/prepaid-topup-captured.js

@@ -35,14 +35,12 @@ async function handle(payload) {
   if (!account) {
     return;
   }
-  const taxRate = await getTopupTaxRate(em);
-  const numberGenerator = container.resolve(
-    "salesDocumentNumberGenerator"
-  );
-  const taxService = container.resolve("taxCalculationService");
+  const taxRate = await getTopupTaxRate(em, {
+    tenantId: account.tenantId,
+    organizationId: account.organizationId
+  });
   const result = await captureTopup(
     em,
-    { numberGenerator, taxService },
     {
       topup,
       account: {