@dainamite/billing 0.20.0 → 0.22.0

package/dist/modules/billing/api/settings/route.js

@@ -0,0 +1,92 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { BillingSettings } from "../../data/entities.js";
+import { billingEntityIds } from "../../data/entityIds.js";
+import { billingSettingsUpdateSchema } from "../../data/validators.js";
+import { getBillingSettings, missingSellerFields, serializeBillingSettings } from "../../lib/billingSettings.js";
+import { isPaymentGatewayAvailable } from "../../lib/paymentGateway.js";
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["billing.settings.view"] },
+  PUT: { requireAuth: true, requireFeatures: ["billing.settings.manage"] }
+};
+const metadata = routeMetadata;
+async function GET(req) {
+  try {
+    const container = await createRequestContainer();
+    const auth = await getAuthFromRequest(req);
+    if (!auth || !auth.tenantId) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const organizationId = auth.orgId ?? null;
+    if (!organizationId) {
+      return NextResponse.json({ error: "Organization scope required" }, { status: 403 });
+    }
+    const em = container.resolve("em").fork();
+    const settings = await getBillingSettings(em, { tenantId: auth.tenantId, organizationId });
+    const missing = missingSellerFields(settings);
+    return NextResponse.json({
+      settings: serializeBillingSettings(settings),
+      capabilities: { gatewayTopups: isPaymentGatewayAvailable(container) },
+      completeness: { ready: missing.length === 0, missing }
+    });
+  } catch (err) {
+    console.error("[billing/settings.GET]", err);
+    return NextResponse.json({ error: "Internal error" }, { status: 500 });
+  }
+}
+const rawBodySchema = z.object({}).passthrough();
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: BillingSettings,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  list: {
+    schema: z.object({}).passthrough(),
+    entityId: billingEntityIds.settings,
+    fields: ["id"],
+    buildFilters: async () => ({})
+  },
+  actions: {
+    update: {
+      commandId: "billing.settings.update",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        return billingSettingsUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate));
+      },
+      response: ({ result }) => ({ settings: result })
+    }
+  }
+});
+const PUT = crud.PUT;
+const openApi = {
+  methods: {
+    GET: {
+      tags: ["Billing"],
+      summary: "Get billing settings",
+      description: "Billing settings of the caller organization (prepaid defaults, number masks per series, seller / bank / document fields, default payment terms and VAT rate, `prepaidTaxPoint` (`topup` = VAT on the top-up receipt, `consumption` = VAT on each prepaid debit)), `capabilities.gatewayTopups` and `completeness { ready, missing[] }` (posting needs `legalName`, `sellerAddress`, `taxId`, `iban`). The row is created with defaults on first read."
+    },
+    PUT: {
+      tags: ["Billing"],
+      summary: "Update billing settings",
+      description: "Partial update. Number masks use `{YYYY} {YY} {MM} {DD}` plus exactly one of `{SEQUENCE_NUM}` (never resets), `{SEQUENCE_NUM_YEAR}` (yearly \u2014 needs a year token) or `{SEQUENCE_NUM_MONTH}` (monthly \u2014 needs year + month), with an optional `:N` zero-pad. Invalid masks \u2192 400 with the mask error code. IBAN is normalised and mod-97 checked, BIC must be 8 or 11 characters; an empty string clears a text field.",
+      requestBody: { schema: billingSettingsUpdateSchema }
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/billing/api/settings/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/billing/api/settings/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { BillingSettings } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingSettingsUpdateSchema } from '../../data/validators'\nimport { getBillingSettings, missingSellerFields, serializeBillingSettings } from '../../lib/billingSettings'\nimport { isPaymentGatewayAvailable } from '../../lib/paymentGateway'\n\n/**\n * `GET /api/billing/settings` \u2014 the caller organization's billing settings\n * (created with defaults on first read) plus runtime capabilities.\n * `PUT /api/billing/settings` \u2014 partial update via `billing.settings.update`.\n *\n * Spec 0: prepaid defaults (moved from core `configs`) and document number\n * masks. `capabilities.gatewayTopups` tells the UI whether online top-ups\n * are available (the `payment_gateways` module is optional, E-D1).\n * Spec B: seller / payment / document fields, plus `completeness` \u2014 posting\n * is blocked until the printable minimum (legal name, address, tax id, IBAN)\n * is filled.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.settings.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['billing.settings.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nexport async function GET(req: Request) {\n  try {\n    const container = await createRequestContainer()\n    const auth = await getAuthFromRequest(req)\n    if (!auth || !auth.tenantId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const organizationId = (auth as { orgId?: string }).orgId ?? null\n    if (!organizationId) {\n      return NextResponse.json({ error: 'Organization scope required' }, { status: 403 })\n    }\n    const em = (container.resolve('em') as EntityManager).fork()\n    const settings = await getBillingSettings(em, { tenantId: auth.tenantId, organizationId })\n    const missing = missingSellerFields(settings)\n    return NextResponse.json({\n      settings: serializeBillingSettings(settings),\n      capabilities: { gatewayTopups: isPaymentGatewayAvailable(container as never) },\n      completeness: { ready: missing.length === 0, missing },\n    })\n  } catch (err) {\n    console.error('[billing/settings.GET]', err)\n    return NextResponse.json({ error: 'Internal error' }, { status: 500 })\n  }\n}\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingSettings,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.settings,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    update: {\n      commandId: 'billing.settings.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return billingSettingsUpdateSchema.parse(withScopedPayload(raw ?? {}, ctx, translate))\n      },\n      response: ({ result }) => ({ settings: result }),\n    },\n  },\n})\n\nexport const PUT = crud.PUT\n\nexport const openApi = {\n  methods: {\n    GET: {\n      tags: ['Billing'],\n      summary: 'Get billing settings',\n      description:\n        'Billing settings of the caller organization (prepaid defaults, number masks per series, ' +\n        'seller / bank / document fields, default payment terms and VAT rate, `prepaidTaxPoint` ' +\n        '(`topup` = VAT on the top-up receipt, `consumption` = VAT on each prepaid debit)), ' +\n        '`capabilities.gatewayTopups` and `completeness { ready, missing[] }` (posting needs ' +\n        '`legalName`, `sellerAddress`, `taxId`, `iban`). The row is created with defaults on first read.',\n    },\n    PUT: {\n      tags: ['Billing'],\n      summary: 'Update billing settings',\n      description:\n        'Partial update. Number masks use `{YYYY} {YY} {MM} {DD}` plus exactly one of ' +\n        '`{SEQUENCE_NUM}` (never resets), `{SEQUENCE_NUM_YEAR}` (yearly \u2014 needs a year token) or ' +\n        '`{SEQUENCE_NUM_MONTH}` (monthly \u2014 needs year + month), with an optional `:N` zero-pad. ' +\n        'Invalid masks \u2192 400 with the mask error code. IBAN is normalised and mod-97 checked, ' +\n        'BIC must be 8 or 11 characters; an empty string clears a text field.',\n      requestBody: { schema: billingSettingsUpdateSchema },\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,oBAAoB,qBAAqB,gCAAgC;AAClF,SAAS,iCAAiC;AAe1C,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AAAA,EACrE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,yBAAyB,EAAE;AACzE;AAEO,MAAM,WAAW;AAExB,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,iBAAkB,KAA4B,SAAS;AAC7D,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpF;AACA,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,UAAM,WAAW,MAAM,mBAAmB,IAAI,EAAE,UAAU,KAAK,UAAU,eAAe,CAAC;AACzF,UAAM,UAAU,oBAAoB,QAAQ;AAC5C,WAAO,aAAa,KAAK;AAAA,MACvB,UAAU,yBAAyB,QAAQ;AAAA,MAC3C,cAAc,EAAE,eAAe,0BAA0B,SAAkB,EAAE;AAAA,MAC7E,cAAc,EAAE,OAAO,QAAQ,WAAW,GAAG,QAAQ;AAAA,IACvD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,0BAA0B,GAAG;AAC3C,WAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACvE;AACF;AAEA,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,4BAA4B,MAAM,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC;AAAA,MACvF;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,UAAU,OAAO;AAAA,IAChD;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,IACP,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,IAKJ;AAAA,IACA,KAAK;AAAA,MACH,MAAM,CAAC,SAAS;AAAA,MAChB,SAAS;AAAA,MACT,aACE;AAAA,MAKF,aAAa,EAAE,QAAQ,4BAA4B;AAAA,IACrD;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/billing/api/statements/route.js

@@ -25,6 +25,8 @@ const billingStatementListItemSchema = z.object({
   total_adjustments: z.string(),
   closing_balance: z.string(),
   debit_breakdown: z.record(z.string(), z.unknown()).nullable(),
+  /** Spec F: per-rate VAT of the period's prepaid debits (empty when VAT is charged at top-up). */
+  vat_summary: z.array(z.object({ rate: z.string(), net: z.string(), tax: z.string(), gross: z.string() })).nullable(),
   status: z.string(),
   organization_id: z.string().uuid(),
   tenant_id: z.string().uuid(),
@@ -56,6 +58,7 @@ const crud = makeCrudRoute({
       "total_adjustments",
       "closing_balance",
       "debit_breakdown",
+      "vat_summary",
       "status",
       "organization_id",
       "tenant_id",

package/dist/modules/billing/api/statements/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/billing/api/statements/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { BillingStatement } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingStatementListQuerySchema } from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n} from '../openapi'\n\n/**\n * `GET /api/billing/statements` \u2014 paged consumption statements (SPEC-002 P3).\n * Filter by account, status, and a `period_end` window. `?id=` narrows to one\n * row for the detail page. Generation goes through\n * POST /api/billing/statements/generate.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.statement.view'] },\n}\n\nexport const metadata = routeMetadata\n\nconst billingStatementListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_run_id: z.string().uuid().nullable(),\n  period_start: z.string(),\n  period_end: z.string(),\n  currency_code: z.string(),\n  opening_balance: z.string(),\n  total_topups: z.string(),\n  total_usage: z.string(),\n  total_recurring: z.string(),\n  total_adjustments: z.string(),\n  closing_balance: z.string(),\n  debit_breakdown: z.record(z.string(), z.unknown()).nullable(),\n  status: z.string(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingStatement,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n  },\n  list: {\n    schema: billingStatementListQuerySchema,\n    entityId: billingEntityIds.statement,\n    fields: [\n      'id',\n      'bill_account_id',\n      'bill_run_id',\n      'period_start',\n      'period_end',\n      'currency_code',\n      'opening_balance',\n      'total_topups',\n      'total_usage',\n      'total_recurring',\n      'total_adjustments',\n      'closing_balance',\n      'debit_breakdown',\n      'status',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      periodEnd: 'period_end',\n      periodStart: 'period_start',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.status === 'string' && query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.periodEndFrom instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $gte: query.periodEndFrom },\n        )\n      }\n      if (query.periodEndTo instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $lte: query.periodEndTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {},\n})\n\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingStatement',\n  pluralName: 'BillingStatements',\n  querySchema: billingStatementListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingStatementListItemSchema),\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,eAAe,EAAE,OAAO;AAAA,EACxB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,cAAc,EAAE,OAAO;AAAA,EACvB,aAAa,EAAE,OAAO;AAAA,EACtB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC5D,QAAQ,EAAE,OAAO;AAAA,EACjB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,QAAQ;AACpD,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,cAAc;AAAA,QAC9B;AAAA,MACF;AACA,UAAI,MAAM,uBAAuB,MAAM;AACrC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,YAAY;AAAA,QAC5B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS,CAAC;AACZ,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,8BAA8B;AAClF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { BillingStatement } from '../../data/entities'\nimport { billingEntityIds } from '../../data/entityIds'\nimport { billingStatementListQuerySchema } from '../../data/validators'\nimport {\n  createBillingCrudOpenApi,\n  createPagedListResponseSchema,\n} from '../openapi'\n\n/**\n * `GET /api/billing/statements` \u2014 paged consumption statements (SPEC-002 P3).\n * Filter by account, status, and a `period_end` window. `?id=` narrows to one\n * row for the detail page. Generation goes through\n * POST /api/billing/statements/generate.\n */\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['billing.statement.view'] },\n}\n\nexport const metadata = routeMetadata\n\nconst billingStatementListItemSchema = z.object({\n  id: z.string().uuid(),\n  bill_account_id: z.string().uuid(),\n  bill_run_id: z.string().uuid().nullable(),\n  period_start: z.string(),\n  period_end: z.string(),\n  currency_code: z.string(),\n  opening_balance: z.string(),\n  total_topups: z.string(),\n  total_usage: z.string(),\n  total_recurring: z.string(),\n  total_adjustments: z.string(),\n  closing_balance: z.string(),\n  debit_breakdown: z.record(z.string(), z.unknown()).nullable(),\n  /** Spec F: per-rate VAT of the period's prepaid debits (empty when VAT is charged at top-up). */\n  vat_summary: z\n    .array(z.object({ rate: z.string(), net: z.string(), tax: z.string(), gross: z.string() }))\n    .nullable(),\n  status: z.string(),\n  organization_id: z.string().uuid(),\n  tenant_id: z.string().uuid(),\n  created_at: z.string(),\n  updated_at: z.string(),\n})\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingStatement,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n  },\n  list: {\n    schema: billingStatementListQuerySchema,\n    entityId: billingEntityIds.statement,\n    fields: [\n      'id',\n      'bill_account_id',\n      'bill_run_id',\n      'period_start',\n      'period_end',\n      'currency_code',\n      'opening_balance',\n      'total_topups',\n      'total_usage',\n      'total_recurring',\n      'total_adjustments',\n      'closing_balance',\n      'debit_breakdown',\n      'vat_summary',\n      'status',\n      'organization_id',\n      'tenant_id',\n      'created_at',\n      'updated_at',\n    ],\n    sortFieldMap: {\n      periodEnd: 'period_end',\n      periodStart: 'period_start',\n      createdAt: 'created_at',\n    },\n    buildFilters: async (query) => {\n      const filters: Record<string, unknown> = {}\n      if (typeof query.id === 'string' && query.id) {\n        filters.id = { $eq: query.id }\n      }\n      if (typeof query.billAccountId === 'string' && query.billAccountId) {\n        filters.bill_account_id = { $eq: query.billAccountId }\n      }\n      if (typeof query.status === 'string' && query.status) {\n        filters.status = { $eq: query.status }\n      }\n      if (query.periodEndFrom instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $gte: query.periodEndFrom },\n        )\n      }\n      if (query.periodEndTo instanceof Date) {\n        filters.period_end = Object.assign(\n          (filters.period_end as Record<string, unknown>) ?? {},\n          { $lte: query.periodEndTo },\n        )\n      }\n      return filters\n    },\n  },\n  actions: {},\n})\n\nexport const GET = crud.GET\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingStatement',\n  pluralName: 'BillingStatements',\n  querySchema: billingStatementListQuerySchema,\n  listResponseSchema: createPagedListResponseSchema(billingStatementListItemSchema),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AASP,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iCAAiC,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,eAAe,EAAE,OAAO;AAAA,EACxB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,cAAc,EAAE,OAAO;AAAA,EACvB,aAAa,EAAE,OAAO;AAAA,EACtB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,OAAO;AAAA,EAC1B,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAE5D,aAAa,EACV,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EACzF,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO;AAAA,EACjB,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AACvB,CAAC;AAED,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,EACf;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,iBAAiB;AAAA,IAC3B,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,cAAc,OAAO,UAAU;AAC7B,YAAM,UAAmC,CAAC;AAC1C,UAAI,OAAO,MAAM,OAAO,YAAY,MAAM,IAAI;AAC5C,gBAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAAA,MAC/B;AACA,UAAI,OAAO,MAAM,kBAAkB,YAAY,MAAM,eAAe;AAClE,gBAAQ,kBAAkB,EAAE,KAAK,MAAM,cAAc;AAAA,MACvD;AACA,UAAI,OAAO,MAAM,WAAW,YAAY,MAAM,QAAQ;AACpD,gBAAQ,SAAS,EAAE,KAAK,MAAM,OAAO;AAAA,MACvC;AACA,UAAI,MAAM,yBAAyB,MAAM;AACvC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,cAAc;AAAA,QAC9B;AAAA,MACF;AACA,UAAI,MAAM,uBAAuB,MAAM;AACrC,gBAAQ,aAAa,OAAO;AAAA,UACzB,QAAQ,cAA0C,CAAC;AAAA,UACpD,EAAE,MAAM,MAAM,YAAY;AAAA,QAC5B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,SAAS,CAAC;AACZ,CAAC;AAEM,MAAM,MAAM,KAAK;AAEjB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,oBAAoB,8BAA8B,8BAA8B;AAClF,CAAC;",
   "names": []
 }

package/dist/modules/billing/api/test-invoices/wipe/route.js

@@ -2,10 +2,10 @@ import { z } from "zod";
 import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
 import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { SalesInvoice } from "@open-mercato/core/modules/sales/data/entities";
 import { billingEntityIds } from "../../../data/entityIds.js";
 import { billingWipeTestInvoicesSchema } from "../../../data/validators.js";
 import { createBillingCrudOpenApi } from "../../openapi.js";
+import { BillingInvoice } from "../../../data/entities.js";
 const routeMetadata = {
   POST: { requireAuth: true, requireFeatures: ["billing.run.trigger"] }
 };
@@ -17,7 +17,7 @@ const rawBodySchema = z.object({}).passthrough();
 const crud = makeCrudRoute({
   metadata: routeMetadata,
   orm: {
-    entity: SalesInvoice,
+    entity: BillingInvoice,
     idField: "id",
     orgField: "organizationId",
     tenantField: "tenantId",

package/dist/modules/billing/api/test-invoices/wipe/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/billing/api/test-invoices/wipe/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { SalesInvoice } from '@open-mercato/core/modules/sales/data/entities'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingWipeTestInvoicesSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\n\n/**\n * `POST /api/billing/test-invoices/wipe` \u2014 hard-delete invoices\n * flagged `metadata.test_run=true` for this tenant. Optionally\n * scoped to a `billRunId` so an operator can wipe a single test run\n * without nuking other test data.\n *\n * Modelled as POST (not DELETE) because the body carries the scope\n * fields and modern Next.js routers reject DELETE-with-body more\n * consistently than they accept it; keeping POST keeps the surface\n * uniform with the rest of the billing API.\n *\n * Gated by `billing.run.trigger` (test mode is part of the\n * \"operate Bill Runs\" toolkit). Phase 4c admin UI exposes this\n * behind a confirm dialog on the Bill Run detail page.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\nconst wipeResponseSchema = z.object({\n  invoicesRemoved: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: SalesInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.wipe_test',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingWipeTestInvoicesSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoicesRemoved: result?.invoicesRemoved ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingTestInvoiceWipe',\n  pluralName: 'BillingTestInvoiceWipes',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingWipeTestInvoicesSchema,\n    responseSchema: wipeResponseSchema,\n    description:\n      'Hard-deletes test invoices (`metadata.test_run=true`) for the ' +\n      'authenticated tenant. Pass `billRunId` to wipe only invoices ' +\n      'from a specific test Bill Run. Returns the count removed. ' +\n      'Test data should not pollute production history, so this is a ' +\n      'hard delete, not a soft delete.',\n  },\n})\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AAkBzC,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAChD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,8BAA8B,MAAM,MAAM;AAAA,MACnD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC9C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { billingEntityIds } from '../../../data/entityIds'\nimport { billingWipeTestInvoicesSchema } from '../../../data/validators'\nimport { createBillingCrudOpenApi } from '../../openapi'\nimport { BillingInvoice } from '../../../data/entities'\n\n/**\n * `POST /api/billing/test-invoices/wipe` \u2014 hard-delete invoices\n * flagged `metadata.test_run=true` for this tenant. Optionally\n * scoped to a `billRunId` so an operator can wipe a single test run\n * without nuking other test data.\n *\n * Modelled as POST (not DELETE) because the body carries the scope\n * fields and modern Next.js routers reject DELETE-with-body more\n * consistently than they accept it; keeping POST keeps the surface\n * uniform with the rest of the billing API.\n *\n * Gated by `billing.run.trigger` (test mode is part of the\n * \"operate Bill Runs\" toolkit). Phase 4c admin UI exposes this\n * behind a confirm dialog on the Bill Run detail page.\n */\n\nconst routeMetadata = {\n  POST: { requireAuth: true, requireFeatures: ['billing.run.trigger'] },\n}\n\nexport const metadata = routeMetadata\n\nconst wipeResponseSchema = z.object({\n  invoicesRemoved: z.number().int().nonnegative(),\n})\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: BillingInvoice,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  list: {\n    schema: z.object({}).passthrough(),\n    entityId: billingEntityIds.draftInvoiceEdit,\n    fields: ['id'],\n    buildFilters: async () => ({}),\n  },\n  actions: {\n    create: {\n      commandId: 'billing.invoices.wipe_test',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        return billingWipeTestInvoicesSchema.parse(scoped)\n      },\n      response: ({ result }) => ({\n        invoicesRemoved: result?.invoicesRemoved ?? 0,\n      }),\n      status: 200,\n    },\n  },\n})\n\nexport const POST = crud.POST\n\nexport const openApi = createBillingCrudOpenApi({\n  resourceName: 'BillingTestInvoiceWipe',\n  pluralName: 'BillingTestInvoiceWipes',\n  querySchema: z.object({}).passthrough(),\n  listResponseSchema: z.object({ items: z.array(z.unknown()) }),\n  create: {\n    schema: billingWipeTestInvoicesSchema,\n    responseSchema: wipeResponseSchema,\n    description:\n      'Hard-deletes test invoices (`metadata.test_run=true`) for the ' +\n      'authenticated tenant. Pass `billRunId` to wipe only invoices ' +\n      'from a specific test Bill Run. Returns the count removed. ' +\n      'Test data should not pollute production history, so this is a ' +\n      'hard delete, not a soft delete.',\n  },\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,2BAA2B;AACpC,SAAS,wBAAwB;AACjC,SAAS,qCAAqC;AAC9C,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAkB/B,MAAM,gBAAgB;AAAA,EACpB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEO,MAAM,WAAW;AAExB,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAChD,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACjC,UAAU,iBAAiB;AAAA,IAC3B,QAAQ,CAAC,IAAI;AAAA,IACb,cAAc,aAAa,CAAC;AAAA,EAC9B;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,eAAO,8BAA8B,MAAM,MAAM;AAAA,MACnD;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO;AAAA,QACzB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC9C;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,OAAO,KAAK;AAElB,MAAM,UAAU,yBAAyB;AAAA,EAC9C,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,EACtC,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC5D,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aACE;AAAA,EAKJ;AACF,CAAC;",
   "names": []
 }