@dainamite/billing 0.20.0 → 0.22.0

package/dist/modules/billing/api/invoices/[id]/memos/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/billing/api/invoices/%5Bid%5D/memos/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { readRequestBody, runCommandRoute } from '../../../../lib/commandRoute'\n\n/**\n * `POST /api/billing/invoices/[id]/memos` \u2014 create a DRAFT credit or debit\n * memo correcting a posted billing invoice (Spec D). Post it with\n * `POST /api/billing/invoices/post`.\n */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.correct'] },\n}\n\nconst lineSchema = z.object({\n  correctsLineId: z.string().uuid().optional(),\n  description: z.string().trim().min(1).max(500),\n  quantity: z.coerce.number().positive(),\n  unitPriceNet: z.coerce.number().nonnegative(),\n  taxRate: z.coerce.number().min(0).max(100).optional(),\n})\n\nconst bodySchema = z.object({\n  invoiceId: z.string().uuid(),\n  type: z.enum(['credit_memo', 'debit_memo']),\n  reason: z.string().trim().min(1).max(1000),\n  lines: z.array(lineSchema).max(200).optional(),\n})\n\nexport async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  const { id } = await params\n  const raw = (await readRequestBody(req)) as Record<string, unknown>\n  return runCommandRoute(\n    req,\n    {\n      commandId: 'billing.invoices.create_memo',\n      bodySchema,\n      resourceKind: 'billing.invoice',\n      resourceId: (body) => body.invoiceId,\n      logLabel: 'billing/invoices/[id]/memos.POST',\n    },\n    { ...(raw && typeof raw === 'object' ? raw : {}), invoiceId: id },\n  )\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Create a credit or debit memo',\n      description:\n        'Creates a draft memo for a posted / partially paid / paid invoice (a fully credited invoice ' +\n        'accepts debit memos only). `reason` is required and printed. Credit memo without `lines` = full ' +\n        'credit of every original line; lines with `correctsLineId` keep the original VAT rate; new lines ' +\n        'default to the organization rate. Amounts are positive \u2014 the document type gives the sign.',\n      requestBody: { schema: bodySchema.omit({ invoiceId: true }) },\n      responses: [{ status: 200, description: '`{ memoId, number, documentType, totalGross }`' }],\n      errors: [\n        { status: 409, description: '`billing.memo.invalid_original` / `billing.memo.exceeds_invoice`' },\n        { status: 400, description: '`billing.memo.invalid_line`' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,iBAAiB,uBAAuB;AAQ1C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,UAAU,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACrC,cAAc,EAAE,OAAO,OAAO,EAAE,YAAY;AAAA,EAC5C,SAAS,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AACtD,CAAC;AAED,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,MAAM,EAAE,KAAK,CAAC,eAAe,YAAY,CAAC;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI;AAAA,EACzC,OAAO,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS;AAC/C,CAAC;AAED,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAwC;AACxF,QAAM,EAAE,GAAG,IAAI,MAAM;AACrB,QAAM,MAAO,MAAM,gBAAgB,GAAG;AACtC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX;AAAA,MACA,cAAc;AAAA,MACd,YAAY,CAAC,SAAS,KAAK;AAAA,MAC3B,UAAU;AAAA,IACZ;AAAA,IACA,EAAE,GAAI,OAAO,OAAO,QAAQ,WAAW,MAAM,CAAC,GAAI,WAAW,GAAG;AAAA,EAClE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAIF,aAAa,EAAE,QAAQ,WAAW,KAAK,EAAE,WAAW,KAAK,CAAC,EAAE;AAAA,MAC5D,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iDAAiD,CAAC;AAAA,MAC1F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mEAAmE;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,8BAA8B;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/[id]/pdf/route.js

@@ -0,0 +1,70 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { BillingInvoice } from "../../../../data/entities.js";
+import { getInvoicePdf } from "../../../../lib/pdf/invoicePdf.js";
+import { INVOICE_LANGUAGE_CODES } from "../../../../lib/invoiceLanguages.js";
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.invoice.view"] }
+};
+async function GET(req, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = auth.orgId ?? null;
+    if (!organizationId) {
+      return NextResponse.json({ error: "Organization scope required" }, { status: 403 });
+    }
+    const { id } = await params;
+    const em = container.resolve("em").fork();
+    const invoice = await em.findOne(BillingInvoice, {
+      id,
+      tenantId: auth.tenantId,
+      organizationId,
+      deletedAt: null
+    });
+    if (!invoice) {
+      return NextResponse.json({ error: "Invoice not found" }, { status: 404 });
+    }
+    const pdf = await getInvoicePdf(em, invoice);
+    const download = new URL(req.url).searchParams.get("download") === "1";
+    return new NextResponse(Buffer.from(pdf.bytes), {
+      status: 200,
+      headers: {
+        "Content-Type": "application/pdf",
+        "Content-Length": String(pdf.bytes.byteLength),
+        "Content-Disposition": `${download ? "attachment" : "inline"}; filename="${pdf.fileName}"`,
+        // Drafts change with every edit; frozen documents never do.
+        "Cache-Control": pdf.frozen ? "private, max-age=300" : "no-store",
+        "X-Content-Type-Options": "nosniff"
+      }
+    });
+  } catch (err) {
+    console.error("[billing/invoices/[id]/pdf.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Download a billing document PDF",
+      parameters: [
+        { name: "id", in: "path", required: true, schema: { type: "string", format: "uuid" } },
+        { name: "download", in: "query", required: false, schema: { type: "string", enum: ["1"] } }
+      ],
+      description: `\`application/pdf\`. Posted documents return the PDF frozen at post (an attachment); drafts and test documents are rendered live with a DRAFT / TEST watermark and never stored. Labels follow the account invoice language (${INVOICE_LANGUAGE_CODES.join(" / ")}).`,
+      responses: [{ status: 200, description: "PDF document (`application/pdf`)" }],
+      errors: [{ status: 404, description: "Invoice not found in this organization" }]
+    }
+  }
+};
+export {
+  GET,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/[id]/pdf/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/billing/api/invoices/%5Bid%5D/pdf/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { BillingInvoice } from '../../../../data/entities'\nimport { getInvoicePdf } from '../../../../lib/pdf/invoicePdf'\nimport { INVOICE_LANGUAGE_CODES } from '../../../../lib/invoiceLanguages'\n\n/**\n * `GET /api/billing/invoices/[id]/pdf` \u2014 the document PDF (Spec B).\n *\n * Posted documents: the frozen attachment (rendered and frozen on first\n * request if freezing failed at post). Drafts / test documents: a live\n * render with a DRAFT / TEST watermark, never stored. `?download=1` forces\n * an attachment disposition; otherwise the browser shows it inline.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.invoice.view'] },\n}\n\nexport async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json({ error: 'Organization scope required' }, { status: 403 })\n    }\n    const { id } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n    const invoice = await em.findOne(BillingInvoice, {\n      id,\n      tenantId: auth.tenantId,\n      organizationId,\n      deletedAt: null,\n    } as never)\n    if (!invoice) {\n      return NextResponse.json({ error: 'Invoice not found' }, { status: 404 })\n    }\n    const pdf = await getInvoicePdf(em, invoice)\n    const download = new URL(req.url).searchParams.get('download') === '1'\n    return new NextResponse(Buffer.from(pdf.bytes), {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/pdf',\n        'Content-Length': String(pdf.bytes.byteLength),\n        'Content-Disposition': `${download ? 'attachment' : 'inline'}; filename=\"${pdf.fileName}\"`,\n        // Drafts change with every edit; frozen documents never do.\n        'Cache-Control': pdf.frozen ? 'private, max-age=300' : 'no-store',\n        'X-Content-Type-Options': 'nosniff',\n      },\n    })\n  } catch (err) {\n    console.error('[billing/invoices/[id]/pdf.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Download a billing document PDF',\n      parameters: [\n        { name: 'id', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } },\n        { name: 'download', in: 'query', required: false, schema: { type: 'string', enum: ['1'] } },\n      ],\n      description:\n        '`application/pdf`. Posted documents return the PDF frozen at post (an attachment); drafts ' +\n        'and test documents are rendered live with a DRAFT / TEST watermark and never stored. ' +\n        `Labels follow the account invoice language (${INVOICE_LANGUAGE_CODES.join(' / ')}).`,\n      responses: [{ status: 200, description: 'PDF document (`application/pdf`)' }],\n      errors: [{ status: 404, description: 'Invoice not found in this organization' }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAC/B,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B;AAWhC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,eAAsB,IAAI,KAAc,EAAE,OAAO,GAAwC;AACvF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AACA,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,UAAU,MAAM,GAAG,QAAQ,gBAAgB;AAAA,MAC/C;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW;AAAA,IACb,CAAU;AACV,QAAI,CAAC,SAAS;AACZ,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AACA,UAAM,MAAM,MAAM,cAAc,IAAI,OAAO;AAC3C,UAAM,WAAW,IAAI,IAAI,IAAI,GAAG,EAAE,aAAa,IAAI,UAAU,MAAM;AACnE,WAAO,IAAI,aAAa,OAAO,KAAK,IAAI,KAAK,GAAG;AAAA,MAC9C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,kBAAkB,OAAO,IAAI,MAAM,UAAU;AAAA,QAC7C,uBAAuB,GAAG,WAAW,eAAe,QAAQ,eAAe,IAAI,QAAQ;AAAA;AAAA,QAEvF,iBAAiB,IAAI,SAAS,yBAAyB;AAAA,QACvD,0BAA0B;AAAA,MAC5B;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,mCAAmC,GAAG;AACpD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,YAAY;AAAA,QACV,EAAE,MAAM,MAAM,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE;AAAA,QACrF,EAAE,MAAM,YAAY,IAAI,SAAS,UAAU,OAAO,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,GAAG,EAAE,EAAE;AAAA,MAC5F;AAAA,MACA,aACE,gOAE+C,uBAAuB,KAAK,KAAK,CAAC;AAAA,MACnF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mCAAmC,CAAC;AAAA,MAC5E,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,yCAAyC,CAAC;AAAA,IACjF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/[id]/route.js

@@ -1,6 +1,7 @@
 import { NextResponse } from "next/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { daysOverdueSql, isoDay } from "../../../lib/overdue.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["billing.invoice.view"] }
 };
@@ -20,40 +21,59 @@ async function GET(req, { params }) {
     }
     const { id: invoiceId } = await params;
     const em = container.resolve("em").fork();
+    const today = isoDay(/* @__PURE__ */ new Date());
     const invoiceRows = await em.execute(
-      `SELECT id, invoice_number, status, status_entry_id, currency_code,
-              issue_date, due_date,
-              subtotal_net_amount, subtotal_gross_amount,
-              discount_total_amount, tax_total_amount,
-              grand_total_net_amount, grand_total_gross_amount,
-              paid_total_amount, outstanding_amount,
-              metadata, created_at, updated_at
-       FROM sales_invoices
-       WHERE id = ?
-         AND tenant_id = ?
-         AND organization_id = ?
-         AND deleted_at IS NULL
-         AND jsonb_exists(metadata, 'bill_run_id')`,
-      [invoiceId, auth.tenantId, organizationId]
+      `SELECT i.id, i.number, i.document_type, i.series, i.status, i.test_run, i.bill_account_id,
+              a.name AS bill_account_name, i.bill_run_id, i.bill_date, i.period_start, i.period_end,
+              i.issue_date, i.due_date, i.posted_at, i.currency_code, i.subtotal_net, i.tax_total,
+              i.total_gross, i.paid_total, i.credited_total, i.outstanding, i.corrects_invoice_id,
+              i.correction_reason, i.corrects_invoice_number, i.corrects_issue_date,
+              i.buyer_snapshot, i.seller_snapshot, i.topup_id, i.metadata,
+              i.pdf_attachment_id, ${daysOverdueSql("i")}::int AS days_overdue,
+              i.created_at, i.updated_at
+       FROM billing_invoices i
+       LEFT JOIN billing_accounts a ON a.id = i.bill_account_id AND a.tenant_id = i.tenant_id
+       WHERE i.id = ? AND i.tenant_id = ? AND i.organization_id = ? AND i.deleted_at IS NULL`,
+      [today, today, invoiceId, auth.tenantId, organizationId]
     );
     if (!invoiceRows || invoiceRows.length === 0) {
       return NextResponse.json({ error: "Invoice not found" }, { status: 404 });
     }
     const invoice = invoiceRows[0];
     const lineRows = await em.execute(
-      `SELECT id, line_number, kind, description, quantity, currency_code,
-              unit_price_net, unit_price_gross, tax_rate, tax_amount,
-              total_net_amount, total_gross_amount, metadata
-       FROM sales_invoice_lines
-       WHERE invoice_id = ?
-         AND tenant_id = ?
-         AND organization_id = ?
+      `SELECT id, line_number, billing_item_id, billing_type, description, quantity,
+              unit_price_net, tax_rate, net_amount, tax_amount, gross_amount,
+              service_period_start, service_period_end, corrects_line_id, metadata
+       FROM billing_invoice_lines
+       WHERE invoice_id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL
        ORDER BY line_number ASC`,
       [invoiceId, auth.tenantId, organizationId]
     );
+    const allocations = await em.execute(
+      `SELECT al.id, al.source_type, al.source_id, al.amount, al.currency_code, al.allocated_by, al.created_at,
+              CASE WHEN al.source_type = 'payment' THEN COALESCE(p.reference, p.payer_name)
+                   ELSE m.number END AS source_label,
+              p.received_at AS payment_received_at
+         FROM billing_allocations al
+         LEFT JOIN billing_payments p ON al.source_type = 'payment' AND p.id = al.source_id
+         LEFT JOIN billing_invoices m ON al.source_type = 'credit_memo' AND m.id = al.source_id
+        WHERE al.invoice_id = ? AND al.tenant_id = ? AND al.organization_id = ? AND al.deleted_at IS NULL
+        ORDER BY al.created_at ASC`,
+      [invoiceId, auth.tenantId, organizationId]
+    );
+    const corrections = await em.execute(
+      `SELECT id, number, document_type, status, total_gross, outstanding, currency_code, correction_reason, created_at
+         FROM billing_invoices
+        WHERE corrects_invoice_id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL
+        ORDER BY created_at ASC`,
+      [invoiceId, auth.tenantId, organizationId]
+    );
     return NextResponse.json({
+      corrections,
+      allocations,
       invoice,
-      lines: lineRows
+      // Lines carry the document currency for display convenience.
+      lines: lineRows.map((line) => ({ ...line, currency_code: invoice.currency_code }))
     });
   } catch (err) {
     console.error("[billing/invoices/[id].GET]", err);
@@ -64,8 +84,8 @@ const openApi = {
   methods: {
     GET: {
       tags: ["Billing"],
-      summary: "Get a billing-managed invoice (with lines)",
-      description: "Returns the `core/sales` invoice + every line, scoped to billing-managed invoices (`metadata.bill_run_id` set). Non-billing invoices return 404 even when the UUID resolves at `/api/sales/invoices/[id]`.",
+      summary: "Get a billing document (with lines)",
+      description: "Returns one billing document from `billing_invoices` (invoice, memo or receipt) with its lines, the frozen buyer / seller snapshots, `bill_account_name` and `allocations[]` (Spec C: payments / credit memos that settled it, with `source_label`) and `corrections[]` (Spec D memos). 404 outside the caller's organization.",
       parameters: [
         {
           name: "id",

package/dist/modules/billing/api/invoices/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/invoices/%5Bid%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\n\n/**\n * `GET /api/billing/invoices/[id]` \u2014 billing-invoice detail.\n *\n * Returns the `core/sales` invoice row + its lines, but only if the\n * invoice is billing-managed (carries `metadata.bill_run_id`). Other\n * `core/sales` invoices return 404 here even though the same UUID\n * resolves at `/api/sales/invoices/[id]` \u2014 this endpoint is the\n * billing operator's surface, scoped to the billing universe.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.invoice.view'] },\n}\n\ntype InvoiceRow = {\n  id: string\n  invoice_number: string\n  status: string | null\n  status_entry_id: string | null\n  currency_code: string\n  issue_date: string | null\n  due_date: string | null\n  subtotal_net_amount: string\n  subtotal_gross_amount: string\n  discount_total_amount: string\n  tax_total_amount: string\n  grand_total_net_amount: string\n  grand_total_gross_amount: string\n  paid_total_amount: string\n  outstanding_amount: string\n  metadata: Record<string, unknown> | null\n  created_at: string\n  updated_at: string\n}\n\ntype InvoiceLineRow = {\n  id: string\n  line_number: number\n  kind: string\n  description: string | null\n  quantity: string\n  currency_code: string\n  unit_price_net: string\n  unit_price_gross: string\n  tax_rate: string\n  tax_amount: string\n  total_net_amount: string\n  total_gross_amount: string\n  metadata: Record<string, unknown> | null\n}\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ id: string }> },\n) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json(\n        { error: 'Organization scope required' },\n        { status: 403 },\n      )\n    }\n\n    const { id: invoiceId } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const invoiceRows = (await em.execute(\n      `SELECT id, invoice_number, status, status_entry_id, currency_code,\n              issue_date, due_date,\n              subtotal_net_amount, subtotal_gross_amount,\n              discount_total_amount, tax_total_amount,\n              grand_total_net_amount, grand_total_gross_amount,\n              paid_total_amount, outstanding_amount,\n              metadata, created_at, updated_at\n       FROM sales_invoices\n       WHERE id = ?\n         AND tenant_id = ?\n         AND organization_id = ?\n         AND deleted_at IS NULL\n         AND jsonb_exists(metadata, 'bill_run_id')`,\n      [invoiceId, auth.tenantId, organizationId],\n    )) as unknown as InvoiceRow[]\n\n    if (!invoiceRows || invoiceRows.length === 0) {\n      return NextResponse.json({ error: 'Invoice not found' }, { status: 404 })\n    }\n\n    const invoice = invoiceRows[0]\n\n    const lineRows = (await em.execute(\n      `SELECT id, line_number, kind, description, quantity, currency_code,\n              unit_price_net, unit_price_gross, tax_rate, tax_amount,\n              total_net_amount, total_gross_amount, metadata\n       FROM sales_invoice_lines\n       WHERE invoice_id = ?\n         AND tenant_id = ?\n         AND organization_id = ?\n       ORDER BY line_number ASC`,\n      [invoiceId, auth.tenantId, organizationId],\n    )) as unknown as InvoiceLineRow[]\n\n    return NextResponse.json({\n      invoice,\n      lines: lineRows,\n    })\n  } catch (err) {\n    console.error('[billing/invoices/[id].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get a billing-managed invoice (with lines)',\n      description:\n        'Returns the `core/sales` invoice + every line, scoped to ' +\n        \"billing-managed invoices (`metadata.bill_run_id` set). Non-\" +\n        'billing invoices return 404 even when the UUID resolves at ' +\n        '`/api/sales/invoices/[id]`.',\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AAY5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAuCA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,IAAI,UAAU,IAAI,MAAM;AAChC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,cAAe,MAAM,GAAG;AAAA,MAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAaA,CAAC,WAAW,KAAK,UAAU,cAAc;AAAA,IAC3C;AAEA,QAAI,CAAC,eAAe,YAAY,WAAW,GAAG;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,UAAU,YAAY,CAAC;AAE7B,UAAM,WAAY,MAAM,GAAG;AAAA,MACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,WAAW,KAAK,UAAU,cAAc;AAAA,IAC3C;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAIF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { daysOverdueSql, isoDay } from '../../../lib/overdue'\n\n/**\n * `GET /api/billing/invoices/[id]` \u2014 one billing document with its lines\n * (Spec 0: `billing_invoices` / `billing_invoice_lines`). Documents of other\n * modules are never reachable here.\n */\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.invoice.view'] },\n}\n\ntype InvoiceRow = Record<string, unknown> & { id: string; bill_account_id: string }\ntype InvoiceLineRow = Record<string, unknown> & { id: string }\n\nexport async function GET(\n  req: Request,\n  { params }: { params: Promise<{ id: string }> },\n) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json(\n        { error: 'Organization scope required' },\n        { status: 403 },\n      )\n    }\n\n    const { id: invoiceId } = await params\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const today = isoDay(new Date())\n    const invoiceRows = (await em.execute(\n      `SELECT i.id, i.number, i.document_type, i.series, i.status, i.test_run, i.bill_account_id,\n              a.name AS bill_account_name, i.bill_run_id, i.bill_date, i.period_start, i.period_end,\n              i.issue_date, i.due_date, i.posted_at, i.currency_code, i.subtotal_net, i.tax_total,\n              i.total_gross, i.paid_total, i.credited_total, i.outstanding, i.corrects_invoice_id,\n              i.correction_reason, i.corrects_invoice_number, i.corrects_issue_date,\n              i.buyer_snapshot, i.seller_snapshot, i.topup_id, i.metadata,\n              i.pdf_attachment_id, ${daysOverdueSql('i')}::int AS days_overdue,\n              i.created_at, i.updated_at\n       FROM billing_invoices i\n       LEFT JOIN billing_accounts a ON a.id = i.bill_account_id AND a.tenant_id = i.tenant_id\n       WHERE i.id = ? AND i.tenant_id = ? AND i.organization_id = ? AND i.deleted_at IS NULL`,\n      [today, today, invoiceId, auth.tenantId, organizationId],\n    )) as unknown as InvoiceRow[]\n\n    if (!invoiceRows || invoiceRows.length === 0) {\n      return NextResponse.json({ error: 'Invoice not found' }, { status: 404 })\n    }\n\n    const invoice = invoiceRows[0]\n\n    const lineRows = (await em.execute(\n      `SELECT id, line_number, billing_item_id, billing_type, description, quantity,\n              unit_price_net, tax_rate, net_amount, tax_amount, gross_amount,\n              service_period_start, service_period_end, corrects_line_id, metadata\n       FROM billing_invoice_lines\n       WHERE invoice_id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL\n       ORDER BY line_number ASC`,\n      [invoiceId, auth.tenantId, organizationId],\n    )) as unknown as InvoiceLineRow[]\n\n    // Spec C: what settled this receivable (payments; Spec D adds credit memos).\n    const allocations = await em.execute(\n      `SELECT al.id, al.source_type, al.source_id, al.amount, al.currency_code, al.allocated_by, al.created_at,\n              CASE WHEN al.source_type = 'payment' THEN COALESCE(p.reference, p.payer_name)\n                   ELSE m.number END AS source_label,\n              p.received_at AS payment_received_at\n         FROM billing_allocations al\n         LEFT JOIN billing_payments p ON al.source_type = 'payment' AND p.id = al.source_id\n         LEFT JOIN billing_invoices m ON al.source_type = 'credit_memo' AND m.id = al.source_id\n        WHERE al.invoice_id = ? AND al.tenant_id = ? AND al.organization_id = ? AND al.deleted_at IS NULL\n        ORDER BY al.created_at ASC`,\n      [invoiceId, auth.tenantId, organizationId],\n    )\n\n    // Spec D: memos correcting this document.\n    const corrections = await em.execute(\n      `SELECT id, number, document_type, status, total_gross, outstanding, currency_code, correction_reason, created_at\n         FROM billing_invoices\n        WHERE corrects_invoice_id = ? AND tenant_id = ? AND organization_id = ? AND deleted_at IS NULL\n        ORDER BY created_at ASC`,\n      [invoiceId, auth.tenantId, organizationId],\n    )\n\n    return NextResponse.json({\n      corrections,\n      allocations,\n      invoice,\n      // Lines carry the document currency for display convenience.\n      lines: lineRows.map((line) => ({ ...line, currency_code: invoice.currency_code })),\n    })\n  } catch (err) {\n    console.error('[billing/invoices/[id].GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get a billing document (with lines)',\n      description:\n        'Returns one billing document from `billing_invoices` (invoice, memo or receipt) with its ' +\n        'lines, the frozen buyer / seller snapshots, `bill_account_name` and `allocations[]` (Spec C: ' +\n        'payments / credit memos that settled it, with `source_label`) and `corrections[]` (Spec D memos). ' +\n        '404 outside the ' +\n        'caller\\'s organization.',\n      parameters: [\n        {\n          name: 'id',\n          in: 'path',\n          required: true,\n          schema: { type: 'string', format: 'uuid' },\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,gBAAgB,cAAc;AAQhC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAKA,eAAsB,IACpB,KACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,8BAA8B;AAAA,QACvC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,IAAI,UAAU,IAAI,MAAM;AAChC,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,QAAQ,OAAO,oBAAI,KAAK,CAAC;AAC/B,UAAM,cAAe,MAAM,GAAG;AAAA,MAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qCAM+B,eAAe,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKlD,CAAC,OAAO,OAAO,WAAW,KAAK,UAAU,cAAc;AAAA,IACzD;AAEA,QAAI,CAAC,eAAe,YAAY,WAAW,GAAG;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC1E;AAEA,UAAM,UAAU,YAAY,CAAC;AAE7B,UAAM,WAAY,MAAM,GAAG;AAAA,MACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,WAAW,KAAK,UAAU,cAAc;AAAA,IAC3C;AAGA,UAAM,cAAc,MAAM,GAAG;AAAA,MAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW,KAAK,UAAU,cAAc;AAAA,IAC3C;AAGA,UAAM,cAAc,MAAM,GAAG;AAAA,MAC3B;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,WAAW,KAAK,UAAU,cAAc;AAAA,IAC3C;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA;AAAA,MAEA,OAAO,SAAS,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,eAAe,QAAQ,cAAc,EAAE;AAAA,IACnF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,+BAA+B,GAAG;AAChD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAKF,YAAY;AAAA,QACV;AAAA,UACE,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/billing/api/invoices/[id]/send/route.js

@@ -0,0 +1,107 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import {
+  organizationScopeRequiredResponse,
+  resolveActiveOrganizationId
+} from "@open-mercato/shared/lib/auth/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { bridgeLegacyGuard, runMutationGuards } from "@open-mercato/shared/lib/crud/mutation-guard-registry";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.send"] }
+};
+function userFeatures(auth) {
+  const features = auth?.features;
+  return Array.isArray(features) ? features.filter((value) => typeof value === "string") : [];
+}
+async function POST(req, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = resolveActiveOrganizationId(auth);
+    if (!organizationId) return organizationScopeRequiredResponse();
+    const { id } = await params;
+    const ctx = {
+      container,
+      auth,
+      organizationScope: null,
+      selectedOrganizationId: organizationId,
+      organizationIds: [organizationId],
+      request: req
+    };
+    const guardInput = {
+      tenantId: auth.tenantId,
+      organizationId,
+      userId: auth.sub ?? "",
+      resourceKind: "billing.invoice",
+      resourceId: id,
+      operation: "update",
+      requestMethod: req.method,
+      requestHeaders: req.headers
+    };
+    const legacyGuard = bridgeLegacyGuard(container);
+    const guardResult = legacyGuard ? await runMutationGuards([legacyGuard], guardInput, { userFeatures: userFeatures(auth) }) : { ok: true, afterSuccessCallbacks: [] };
+    if (!guardResult.ok) {
+      return NextResponse.json(guardResult.errorBody ?? { error: "Operation blocked by guard" }, {
+        status: guardResult.errorStatus ?? 422
+      });
+    }
+    const commandBus = container.resolve("commandBus");
+    const response = await commandBus.execute("billing.invoices.send", {
+      input: { tenantId: auth.tenantId, organizationId, invoiceId: id },
+      ctx
+    });
+    const result = response.result;
+    for (const callback of guardResult.afterSuccessCallbacks) {
+      if (!callback.guard.afterSuccess) continue;
+      try {
+        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null });
+      } catch (err) {
+        console.error("[billing/invoices/[id]/send.POST] guard afterSuccess failed", err);
+      }
+    }
+    return NextResponse.json(result ?? { invoiceId: id, status: "failed", error: null });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    console.error("[billing/invoices/[id]/send.POST]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Email a posted billing document",
+      parameters: [{ name: "id", in: "path", required: true, schema: { type: "string", format: "uuid" } }],
+      description: 'Sends the frozen PDF to the billing account invoice email through the platform email transport. Each attempt is appended to `metadata.deliveries` and emits `billing.invoice.sent` / `billing.invoice.send_failed`. Transport failures return 200 with `status: "failed"` and the error.',
+      responses: [
+        {
+          status: 200,
+          description: "Delivery attempted",
+          schema: z.object({
+            invoiceId: z.string().uuid(),
+            to: z.string(),
+            status: z.enum(["sent", "failed"]),
+            error: z.string().nullable()
+          })
+        }
+      ],
+      errors: [
+        { status: 409, description: "`billing.invoice.not_posted` \u2014 drafts and test documents cannot be sent" },
+        { status: 422, description: "`billing.invoice.email_invalid` \u2014 placeholder or malformed invoice email" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/[id]/send/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/billing/api/invoices/%5Bid%5D/send/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport {\n  organizationScopeRequiredResponse,\n  resolveActiveOrganizationId,\n} from '@open-mercato/shared/lib/auth/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { bridgeLegacyGuard, runMutationGuards } from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { SendInvoiceResult } from '../../../../lib/invoiceDelivery'\n\n/**\n * `POST /api/billing/invoices/[id]/send` \u2014 emails a posted billing document\n * with its frozen PDF to the account's invoice email (Spec B), via the\n * `billing.invoices.send` command.\n *\n * 200 `{ invoiceId, to, status: 'sent' | 'failed', error }` \u2014 a transport\n * failure is a recorded `failed` delivery, not an HTTP error.\n * 409 `billing.invoice.not_posted` (draft / test). 422\n * `billing.invoice.email_invalid` (placeholder or malformed address).\n */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.send'] },\n}\n\nfunction userFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  return Array.isArray(features) ? features.filter((value): value is string => typeof value === 'string') : []\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ id: string }> }) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = resolveActiveOrganizationId(auth)\n    if (!organizationId) return organizationScopeRequiredResponse()\n    const { id } = await params\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth,\n      organizationScope: null,\n      selectedOrganizationId: organizationId,\n      organizationIds: [organizationId],\n      request: req,\n    }\n    // Custom write route \u2192 run the shared mutation guards (record locks etc.)\n    // as `update` on the invoice before sending.\n    const guardInput = {\n      tenantId: auth.tenantId,\n      organizationId,\n      userId: auth.sub ?? '',\n      resourceKind: 'billing.invoice',\n      resourceId: id,\n      operation: 'update' as const,\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    }\n    const legacyGuard = bridgeLegacyGuard(container)\n    const guardResult = legacyGuard\n      ? await runMutationGuards([legacyGuard], guardInput, { userFeatures: userFeatures(auth) })\n      : { ok: true as const, afterSuccessCallbacks: [] }\n    if (!guardResult.ok) {\n      return NextResponse.json(guardResult.errorBody ?? { error: 'Operation blocked by guard' }, {\n        status: guardResult.errorStatus ?? 422,\n      })\n    }\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const response = await commandBus.execute('billing.invoices.send', {\n      input: { tenantId: auth.tenantId, organizationId, invoiceId: id },\n      ctx,\n    })\n    const result = (response as { result?: SendInvoiceResult }).result\n    for (const callback of guardResult.afterSuccessCallbacks) {\n      if (!callback.guard.afterSuccess) continue\n      try {\n        await callback.guard.afterSuccess({ ...guardInput, metadata: callback.metadata ?? null })\n      } catch (err) {\n        console.error('[billing/invoices/[id]/send.POST] guard afterSuccess failed', err)\n      }\n    }\n    return NextResponse.json(result ?? { invoiceId: id, status: 'failed', error: null })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    console.error('[billing/invoices/[id]/send.POST]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Email a posted billing document',\n      parameters: [{ name: 'id', in: 'path', required: true, schema: { type: 'string', format: 'uuid' } }],\n      description:\n        'Sends the frozen PDF to the billing account invoice email through the platform email ' +\n        'transport. Each attempt is appended to `metadata.deliveries` and emits ' +\n        '`billing.invoice.sent` / `billing.invoice.send_failed`. Transport failures return ' +\n        '200 with `status: \"failed\"` and the error.',\n      responses: [\n        {\n          status: 200,\n          description: 'Delivery attempted',\n          schema: z.object({\n            invoiceId: z.string().uuid(),\n            to: z.string(),\n            status: z.enum(['sent', 'failed']),\n            error: z.string().nullable(),\n          }),\n        },\n      ],\n      errors: [\n        { status: 409, description: '`billing.invoice.not_posted` \u2014 drafts and test documents cannot be sent' },\n        { status: 422, description: '`billing.invoice.email_invalid` \u2014 placeholder or malformed invoice email' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,uBAAuB;AAChC,SAAS,mBAAmB,yBAAyB;AAc9C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,SAAS,aAAa,MAAyB;AAC7C,QAAM,WAAY,MAAiC;AACnD,SAAO,MAAM,QAAQ,QAAQ,IAAI,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,IAAI,CAAC;AAC7G;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAAwC;AACxF,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAiB,4BAA4B,IAAI;AACvD,QAAI,CAAC,eAAgB,QAAO,kCAAkC;AAC9D,UAAM,EAAE,GAAG,IAAI,MAAM;AACrB,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,CAAC,cAAc;AAAA,MAChC,SAAS;AAAA,IACX;AAGA,UAAM,aAAa;AAAA,MACjB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,QAAQ,KAAK,OAAO;AAAA,MACpB,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB;AACA,UAAM,cAAc,kBAAkB,SAAS;AAC/C,UAAM,cAAc,cAChB,MAAM,kBAAkB,CAAC,WAAW,GAAG,YAAY,EAAE,cAAc,aAAa,IAAI,EAAE,CAAC,IACvF,EAAE,IAAI,MAAe,uBAAuB,CAAC,EAAE;AACnD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,aAAa,KAAK,YAAY,aAAa,EAAE,OAAO,6BAA6B,GAAG;AAAA,QACzF,QAAQ,YAAY,eAAe;AAAA,MACrC,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,WAAW,MAAM,WAAW,QAAQ,yBAAyB;AAAA,MACjE,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,WAAW,GAAG;AAAA,MAChE;AAAA,IACF,CAAC;AACD,UAAM,SAAU,SAA4C;AAC5D,eAAW,YAAY,YAAY,uBAAuB;AACxD,UAAI,CAAC,SAAS,MAAM,aAAc;AAClC,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,EAAE,GAAG,YAAY,UAAU,SAAS,YAAY,KAAK,CAAC;AAAA,MAC1F,SAAS,KAAK;AACZ,gBAAQ,MAAM,+DAA+D,GAAG;AAAA,MAClF;AAAA,IACF;AACA,WAAO,aAAa,KAAK,UAAU,EAAE,WAAW,IAAI,QAAQ,UAAU,OAAO,KAAK,CAAC;AAAA,EACrF,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,YAAQ,MAAM,qCAAqC,GAAG;AACtD,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,YAAY,CAAC,EAAE,MAAM,MAAM,IAAI,QAAQ,UAAU,MAAM,QAAQ,EAAE,MAAM,UAAU,QAAQ,OAAO,EAAE,CAAC;AAAA,MACnG,aACE;AAAA,MAIF,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO;AAAA,YACf,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,YAC3B,IAAI,EAAE,OAAO;AAAA,YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC;AAAA,YACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,+EAA0E;AAAA,QACtG,EAAE,QAAQ,KAAK,aAAa,gFAA2E;AAAA,MACzG;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/add-line/route.js

@@ -2,10 +2,10 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
 import { billingEntityIds } from "../../../data/entityIds.js";
 import { billingInvoiceAddLineSchema } from "../../../data/validators.js";
 import { createBillingCrudOpenApi } from "../../openapi.js";
+import { BillingInvoice } from "../../../data/entities.js";
 const routeMetadata = {
   POST: { requireAuth: true, requireFeatures: ["billing.invoice.edit_draft"] }
 };
@@ -19,7 +19,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: SalesInvoice,
+    entity: BillingInvoice,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",

package/dist/modules/billing/api/invoices/add-line/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/invoices/add-line/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoiceAddLineSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst addLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.add_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceAddLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 201,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineAdd',\n  pluralName: 'BillingInvoiceLineAdds',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceAddLineSchema,\n    responseSchema: addLineResponseSchema,\n    description:\n      'Appends a new line to a draft invoice (e.g. operator adds a ' +\n      'one-off adjustment). Writes a `BillingDraftInvoiceEdit` audit row ' +\n      '(action=`line_added`, `before_json=null`). Recomputes invoice ' +\n      'totals. Refuses non-draft invoices.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,gCAAgC;AAEzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,4BAA4B,MAAM,MAAM;AAAA,MACjD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAIJ;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoiceAddLineSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\nimport { BillingInvoice } from '../../../data/entities'\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst addLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.add_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceAddLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 201,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineAdd',\n  pluralName: 'BillingInvoiceLineAdds',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceAddLineSchema,\n    responseSchema: addLineResponseSchema,\n    description:\n      'Appends a new line to a draft invoice (e.g. operator adds a ' +\n      'one-off adjustment). Writes a `BillingDraftInvoiceEdit` audit row ' +\n      '(action=`line_added`, `before_json=null`). Recomputes invoice ' +\n      'totals. Refuses non-draft invoices.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAE/B,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,4BAA4B,MAAM,MAAM;AAAA,MACjD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAIJ;AACF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/invoices/delete-draft/route.js

@@ -0,0 +1,33 @@
+import { z } from "zod";
+import { runCommandRoute } from "../../../lib/commandRoute.js";
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["billing.invoice.correct"] }
+};
+const bodySchema = z.object({ invoiceId: z.string().uuid() });
+async function POST(req) {
+  return runCommandRoute(req, {
+    commandId: "billing.invoices.delete_draft",
+    bodySchema,
+    resourceKind: "billing.invoice",
+    resourceId: (body) => body.invoiceId,
+    logLabel: "billing/invoices/delete-draft.POST"
+  });
+}
+const openApi = {
+  methods: {
+    POST: {
+      tags: ["Billing"],
+      summary: "Delete a draft memo",
+      description: "Deletes a draft credit or debit memo with its lines. Posted documents are never deleted (no void).",
+      requestBody: { schema: bodySchema },
+      responses: [{ status: 200, description: "`{ deleted: true }`" }],
+      errors: [{ status: 409, description: "`billing.memo.not_draft`" }]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/invoices/delete-draft/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/billing/api/invoices/delete-draft/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport { runCommandRoute } from '../../../lib/commandRoute'\n\n/** `POST /api/billing/invoices/delete-draft` \u2014 delete a DRAFT credit / debit memo (Spec D, D-D7). */\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.correct'] },\n}\n\nconst bodySchema = z.object({ invoiceId: z.string().uuid() })\n\nexport async function POST(req: Request) {\n  return runCommandRoute(req, {\n    commandId: 'billing.invoices.delete_draft',\n    bodySchema,\n    resourceKind: 'billing.invoice',\n    resourceId: (body) => body.invoiceId,\n    logLabel: 'billing/invoices/delete-draft.POST',\n  })\n}\n\nexport const openApi = {\n  methods: {\n    POST: {\n      tags: ['Billing'],\n      summary: 'Delete a draft memo',\n      description: 'Deletes a draft credit or debit memo with its lines. Posted documents are never deleted (no void).',\n      requestBody: { schema: bodySchema },\n      responses: [{ status: 200, description: '`{ deleted: true }`' }],\n      errors: [{ status: 409, description: '`billing.memo.not_draft`' }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAIzB,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AAC1E;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE5D,eAAsB,KAAK,KAAc;AACvC,SAAO,gBAAgB,KAAK;AAAA,IAC1B,WAAW;AAAA,IACX;AAAA,IACA,cAAc;AAAA,IACd,YAAY,CAAC,SAAS,KAAK;AAAA,IAC3B,UAAU;AAAA,EACZ,CAAC;AACH;AAEO,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW;AAAA,MAClC,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,sBAAsB,CAAC;AAAA,MAC/D,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,2BAA2B,CAAC;AAAA,IACnE;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/invoices/edit-line/route.js

@@ -2,7 +2,6 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
 import { billingEntityIds } from "../../../data/entityIds.js";
 import {
   billingInvoiceAddLineSchema,
@@ -10,6 +9,7 @@ import {
   billingInvoiceRemoveLineSchema
 } from "../../../data/validators.js";
 import { createBillingCrudOpenApi } from "../../openapi.js";
+import { BillingInvoice } from "../../../data/entities.js";
 const routeMetadata = {
   POST: { requireAuth: true, requireFeatures: ["billing.invoice.edit_draft"] }
 };
@@ -23,7 +23,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: SalesInvoice,
+    entity: BillingInvoice,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",

package/dist/modules/billing/api/invoices/edit-line/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/invoices/edit-line/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport {\n  billingInvoiceAddLineSchema,\n  billingInvoiceEditLineSchema,\n  billingInvoiceRemoveLineSchema,\n} from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/invoices/edit-line` \u2014 edits one line of a draft\n * invoice. Refuses non-drafts (409 / `billing.invoice.not_draft`).\n * Writes a `BillingDraftInvoiceEdit` audit row per spec. Recomputes invoice\n * totals from the surviving lines after the edit.\n *\n * Operator surface: route is gated by `billing.invoice.edit_draft`.\n * Future Phase 4c admin UI calls into the same command via this route.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst editLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.edit_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceEditLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineEdit',\n  pluralName: 'BillingInvoiceLineEdits',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceEditLineSchema,\n    responseSchema: editLineResponseSchema,\n    description:\n      'Edits one line of a draft invoice (description, quantity, ' +\n      \"unit_price, or explicit `totalNetAmount` override). Writes a \" +\n      '`BillingDraftInvoiceEdit` audit row with before+after snapshots and ' +\n      'recomputes invoice totals. Refuses non-draft invoices with ' +\n      'HTTP 409 + `billing.invoice.not_draft`.',\n  },\n})\n\n// Re-export the add/remove route schemas so the OpenAPI bundle keeps\n// them discoverable from a single import surface \u2014 the dedicated\n// routes (sibling folders) own the actual handlers.\nexport const _phaseSchemaRefs = {\n  add: billingInvoiceAddLineSchema,\n  remove: billingInvoiceRemoveLineSchema,\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AAYzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,6BAA6B,MAAM,MAAM;AAAA,MAClD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;AAKM,MAAM,mBAAmB;AAAA,EAC9B,KAAK;AAAA,EACL,QAAQ;AACV;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport {\n  billingInvoiceAddLineSchema,\n  billingInvoiceEditLineSchema,\n  billingInvoiceRemoveLineSchema,\n} from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\nimport { BillingInvoice } from '../../../data/entities'\n\n/**\n * `POST /api/billing/invoices/edit-line` \u2014 edits one line of a draft\n * invoice. Refuses non-drafts (409 / `billing.invoice.not_draft`).\n * Writes a `BillingDraftInvoiceEdit` audit row per spec. Recomputes invoice\n * totals from the surviving lines after the edit.\n *\n * Operator surface: route is gated by `billing.invoice.edit_draft`.\n * Future Phase 4c admin UI calls into the same command via this route.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.edit_draft'] },\n}\n\nexport const metadata = routeMetadata\n\nconst editLineResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceLineId: z.string().uuid(),\n  auditId: z.string().uuid(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.edit_draft_line',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoiceEditLineSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceLineId: result?.invoiceLineId ?? null,\n        auditId: result?.auditId ?? null,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoiceLineEdit',\n  pluralName: 'BillingInvoiceLineEdits',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoiceEditLineSchema,\n    responseSchema: editLineResponseSchema,\n    description:\n      'Edits one line of a draft invoice (description, quantity, ' +\n      \"unit_price, or explicit `totalNetAmount` override). Writes a \" +\n      '`BillingDraftInvoiceEdit` audit row with before+after snapshots and ' +\n      'recomputes invoice totals. Refuses non-draft invoices with ' +\n      'HTTP 409 + `billing.invoice.not_draft`.',\n  },\n})\n\n// Re-export the add/remove route schemas so the OpenAPI bundle keeps\n// them discoverable from a single import surface \u2014 the dedicated\n// routes (sibling folders) own the actual handlers.\nexport const _phaseSchemaRefs = {\n  add: billingInvoiceAddLineSchema,\n  remove: billingInvoiceRemoveLineSchema,\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAY/B,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC7E;AAEO,MAAM,WAAW;AAExB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,KAAK;AAC3B,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,6BAA6B,MAAM,MAAM;AAAA,MAClD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,SAAS,QAAQ,WAAW;AAAA,MAC9B;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;AAKM,MAAM,mBAAmB;AAAA,EAC9B,KAAK;AAAA,EACL,QAAQ;AACV;",
   "names": []
 }

package/dist/modules/billing/api/invoices/post/route.js

@@ -2,10 +2,10 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
 import { billingEntityIds } from "../../../data/entityIds.js";
 import { billingInvoicePostSchema } from "../../../data/validators.js";
 import { createBillingCrudOpenApi } from "../../openapi.js";
+import { BillingInvoice } from "../../../data/entities.js";
 const routeMetadata = {
   POST: { requireAuth: true, requireFeatures: ["billing.invoice.post"] }
 };
@@ -20,7 +20,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: SalesInvoice,
+    entity: BillingInvoice,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",

package/dist/modules/billing/api/invoices/post/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/invoices/post/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoicePostSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/invoices/post`\n *\n * Operator action: flip a billing-drafted invoice from `draft` \u2192\n * `posted`. The command refuses non-draft inputs (409 with\n * `billing.invoice.not_draft`) and test-mode invoices (409 with\n * `billing.invoice.test_run`). The invoice number is NOT re-assigned\n * (it was set at draft create \u2014 see Phase 2 deviation note in the\n * spec).\n *\n * Implemented as a create-only `makeCrudRoute` so it inherits the same\n * RBAC + OpenAPI plumbing as the rest of the billing surface. The\n * `entity` is `SalesInvoice` only because the factory requires one;\n * the GET half is never exposed on this URL.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.post'] },\n}\n\nexport const metadata = routeMetadata\n\nconst postResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceNumber: z.string(),\n  status: z.literal('posted'),\n  lineCount: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    // `entityId` is technically a core/sales concept, but the factory\n    // only needs it as an identifier \u2014 using a billing-namespaced one\n    // keeps the registry tidy (no surprise list endpoints).\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.post',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoicePostSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceNumber: result?.invoiceNumber ?? null,\n        status: result?.status ?? null,\n        lineCount: result?.lineCount ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoicePost',\n  pluralName: 'BillingInvoicePosts',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoicePostSchema,\n    responseSchema: postResponseSchema,\n    description:\n      'Flips a billing-drafted `core/sales` invoice from `draft` to ' +\n      '`posted`. Refuses non-draft invoices (409 / ' +\n      '`billing.invoice.not_draft`) and test-mode invoices (409 / ' +\n      '`billing.invoice.test_run`). Fires `billing.invoice.posted` + ' +\n      'one `billing.invoice.line_posted` per line. The invoice number ' +\n      'is NOT re-assigned (set at draft create \u2014 see Phase 2 deviation).',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC,SAAS,gCAAgC;AAkBzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO;AAAA,EACxB,QAAQ,EAAE,QAAQ,QAAQ;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC1C,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA,IAIjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,yBAAyB,MAAM,MAAM;AAAA,MAC9C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,QAAQ,QAAQ,UAAU;AAAA,QAC1B,WAAW,QAAQ,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAMJ;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingInvoicePostSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\nimport { BillingInvoice } from '../../../data/entities'\n\n/**\n * `POST /api/billing/invoices/post`\n *\n * Operator action: flip a billing-drafted invoice from `draft` \u2192\n * `posted`. The command refuses non-draft inputs (409 with\n * `billing.invoice.not_draft`) and test-mode invoices (409 with\n * `billing.invoice.test_run`). The series number is claimed at post\n * (Spec 0 numbering masks) \u2014 drafts carry a temporary `DRAFT-\u2026` number.\n * 409 `billing.invoice.number_conflict` when the mask repeats an issued\n * number.\n *\n * Implemented as a create-only `makeCrudRoute` so it inherits the same\n * RBAC + OpenAPI plumbing as the rest of the billing surface. The\n * `entity` is `BillingInvoice` only because the factory requires one;\n * the GET half is never exposed on this URL.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.invoice.post'] },\n}\n\nexport const metadata = routeMetadata\n\nconst postResponseSchema = z.object({\n  invoiceId: z.string().uuid(),\n  invoiceNumber: z.string(),\n  status: z.literal('posted'),\n  lineCount: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    // `entityId` is technically a core/sales concept, but the factory\n    // only needs it as an identifier \u2014 using a billing-namespaced one\n    // keeps the registry tidy (no surprise list endpoints).\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.post',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingInvoicePostSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoiceId: result?.invoiceId ?? null,\n        invoiceNumber: result?.invoiceNumber ?? null,\n        status: result?.status ?? null,\n        lineCount: result?.lineCount ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingInvoicePost',\n  pluralName: 'BillingInvoicePosts',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingInvoicePostSchema,\n    responseSchema: postResponseSchema,\n    description:\n      'Flips a billing-drafted `core/sales` invoice from `draft` to ' +\n      '`posted`. Refuses non-draft invoices (409 / ' +\n      '`billing.invoice.not_draft`) and test-mode invoices (409 / ' +\n      '`billing.invoice.test_run`). Fires `billing.invoice.posted` + ' +\n      'one `billing.invoice.line_posted` per line. The invoice number ' +\n      'is NOT re-assigned (set at draft create \u2014 see Phase 2 deviation).',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,gCAAgC;AACzC,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAmB/B,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,eAAe,EAAE,OAAO;AAAA,EACxB,QAAQ,EAAE,QAAQ,QAAQ;AAAA,EAC1B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC1C,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA,IAIjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,yBAAyB,MAAM,MAAM;AAAA,MAC9C;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,WAAW,QAAQ,aAAa;AAAA,QAChC,eAAe,QAAQ,iBAAiB;AAAA,QACxC,QAAQ,QAAQ,UAAU;AAAA,QAC1B,WAAW,QAAQ,aAAa;AAAA,MAClC;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAMJ;AACF,CAAC;",
   "names": []
 }