@develit-services/bank 0.8.9 → 0.8.12

package/README.md

@@ -5,8 +5,10 @@ Microsluzba pro spravu bankovnich uctu, zpracovani plateb a synchronizaci transa
 ## Obsah
 
 - [Architektura](#architektura)
-- [Zivotni cyklus platby](#zivotni-cyklus-platby)
-- [Batch processing](#batch-processing)
+- [Zivotni cyklus payment requestu](#zivotni-cyklus-payment-requestu)
+- [Odeslani platby](#odeslani-platby)
+- [Batch platby](#batch-platby)
+- [Polling stavu (CRON)](#polling-stavu-cron)
 - [Synchronizace uctu](#synchronizace-uctu)
 - [Bankovni konektory](#bankovni-konektory)
 - [RPC akce](#rpc-akce)
@@ -18,70 +20,48 @@ Microsluzba pro spravu bankovnich uctu, zpracovani plateb a synchronizaci transa
 Sluzba se sklada z:
 
 - **Akce (Actions)** - API endpointy pro spravu uctu, plateb a batchu
-- **Workflows** - Cloudflare Durable Objects pro asynchronni zpracovani (sync uctu, process batch)
+- **Workflows** - Cloudflare Durable Objects pro asynchronni zpracovani (sync uctu)
 - **Konektory** - Abstrakce nad API jednotlivych bank (Erste, Fio, Moneta, ...)
-- **Queue handlery** - Zpracovani front pro batchovani plateb a CRON ulohy
+- **CRON** - Pravidelny polling stavu payment requestu
 
-## Zivotni cyklus platby
+## Zivotni cyklus payment requestu
 
-Platba prochazi 6 fazemi s explicitnimi typy:
+Payment request (iniciovan platba) prochazi nasledujicimi stavy:
 
 ```
-SendPaymentInput (API vstup)
-  │
-  ▼
-┌─────────────────────────────────────────────┐
-│ 1. IncomingPayment         status: CREATED  │
-│    Nova platba z API, zatim bez uctu        │
-└──────────────────┬──────────────────────────┘
-                   │  prirazeni uctu + konektoru
-                   ▼
-┌─────────────────────────────────────────────┐
-│ 2. AccountAssignedPayment  status: CREATED  │
-│    Platba prirazena k bankovnimu uctu       │
-│    a konektoru (accountId, connectorKey)    │
-└──────────────────┬──────────────────────────┘
-                   │  vlozeni do batche
-                   ▼
-┌─────────────────────────────────────────────┐
-│ 3. BatchedPayment          status: CREATED  │
-│    Platba je soucasti batche, ceka na       │
-│    odeslani do banky                        │
-└──────────────────┬──────────────────────────┘
-                   │  connector.initiate*Batch()
-                   ▼
-┌─────────────────────────────────────────────┐
-│ 4. PreparedPayment         status: PREPARED │
-│    Odeslana do banky, ceka na autorizaci    │
-│    (muze jiz mit bankRefId)                 │
-└──────────────────┬──────────────────────────┘
-                   │  uzivatel autorizuje (callback)
-                   ▼
-┌─────────────────────────────────────────────┐
-│ 5. SignedPayment           status: SIGNED   │
-│    Autorizovana uzivatelem, banka           │
-│    zpracovava                               │
-└──────────────────┬──────────────────────────┘
-                   │  banka dokonci zpracovani
-                   ▼
-┌─────────────────────────────────────────────┐
-│ 6. CompletedPayment        status: COMPLETED│
-│    Zpracovana bankou, ma bankRefId          │
-│    a processedAt timestamp                  │
-│    (pripadne FAILED / PENDING)              │
-└─────────────────────────────────────────────┘
+OPENED → AUTHORIZED → COMPLETED → BOOKED → SETTLED
+                                     ↘        ↗
+                              REJECTED / CLOSED
 ```
 
-### Stavy platby
+### PaymentRequestStatus
+
+| Status | Popis |
+|--------|-------|
+| `OPENED` | Platba vytvorena a odeslana do banky, ceka na autorizaci |
+| `AUTHORIZED` | Autorizovana uzivatelem, banka zpracovava |
+| `COMPLETED` | Banka potvrdila zpracovani, platba je na ceste |
+| `BOOKED` | Platba zauctovana ve vypisu platce |
+| `SETTLED` | Platba pripsana na ucet prijemce |
+| `REJECTED` | Odmitnuta bankou nebo uzivatelem |
+| `CLOSED` | Timeout — platba nebyla zpracovana do 14 dni |
+
+**Terminalni stavy**: `SETTLED`, `REJECTED`, `CLOSED`
+
+### PaymentStatus (bankovni vypis)
+
+Stavy pro tabulku `payment` (polozky z bankovniho vypisu):
 
 | Status | Popis |
 |--------|-------|
-| `CREATED` | Platba vytvorena, ceka na zpracovani |
-| `PREPARED` | Odeslana do banky, ceka na autorizaci |
-| `SIGNED` | Autorizovana uzivatelem, banka zpracovava |
-| `PENDING` | Banka zpracovava |
-| `COMPLETED` | Uspesne dokoncena |
-| `FAILED` | Selhala |
+| `PENDING` | Ceka na zpracovani |
+| `PROCESSING` | Zpracovava se |
+| `BOOKED` | Zauctovano |
+| `CANCELLED` | Zruseno |
+| `REJECTED` | Odmitnuto |
+| `SCHEDULED` | Naplanovano |
+| `HOLD` | Pozastaveno |
+| `INFO` | Bank-specific informace |
 
 ### Typy plateb
 
@@ -90,118 +70,82 @@ SendPaymentInput (API vstup)
 - `DOMESTIC` - Tuzemsky prevod
 - `UNKNOWN` - Nezname
 
-### Smer platby
-
-- `INCOMING` - Prichozi platba
-- `OUTGOING` - Odchozi platba
-
-## Batch processing
-
-Platby se neodesilaji do banky jednotlive, ale seskupuji se do **batchu** (davek). Kazdy ucet ma nastaveny `batchSizeLimit` (vychozi: 50 plateb na batch).
-
-Kazdy batch obsahuje pouze platby **jednoho typu** (SEPA, DOMESTIC nebo SWIFT). Ruzne typy plateb nelze odeslat do banky v jednom batchi.
-
-### Jak to funguje
+## Odeslani platby
 
-1. Volani `send-payment` vlozi platbu do fronty `PAYMENTS_READY_TO_BATCH_QUEUE`
-2. Queue handler spusti akci `add-payments-to-batch`, ktera:
-   - Filtruje platby podle podpory uctu
-   - Prirazuje platby k uctum a konektorum
-   - **Seskupi platby podle `paymentType`** (SEPA, DOMESTIC, SWIFT) - kazdy typ ma vlastni batch
-   - Hleda existujici OPEN batch pro dany ucet a typ platby, nebo vytvori novy
-   - Respektuje `batchSizeLimit` - pokud je batch plny, vytvori dalsi
-   - Platby s flagou `sendAsSinglePayment` jdou do samostatneho batche
-3. Batch je pripraven ke zpracovani
-
-### Zivotni cyklus batche
+Akce `send-payment` odesle platbu **primo do banky** a vrati `authorizationUrl` + `paymentId`.
 
 ```
-┌─────────────────────────────────────┐
-│ OPEN                                │
-│ Batch prijima platby, neni plny     │
-└──────────────┬──────────────────────┘
-               │  spusteni process-batch
-               ▼
-┌─────────────────────────────────────┐
-│ PROCESSING                          │
-│ Zamceny, probiha komunikace s bankou│
-│ (checksum validace proti zmenam)    │
-└──────────────┬──────────────────────┘
-               │  connector.initiate*Batch()
-               ▼
-┌─────────────────────────────────────┐
-│ READY_TO_SIGN                       │
-│ Ceka na autorizaci uzivatelem       │
-│ (obsahuje auth URL z banky)         │
-└──────────────┬──────────────────────┘
-               │  uzivatel autorizuje
-               ▼
-┌─────────────────────────────────────┐
-│ SIGNED                              │
-│ Autorizovany, banka zpracovava      │
-└──────────────┬──────────────────────┘
-               │  banka dokonci
-               ▼
-┌─────────────────────────────────────┐
-│ COMPLETED / FAILED /                │
-│ SIGNATURE_FAILED                    │
-│ Konecny stav                        │
-└─────────────────────────────────────┘
+SendPaymentInput (API vstup)
+  │
+  ▼
+  Validace (ucet, typ platby, mena)
+  │
+  ▼
+  Vytvoreni payment_request v DB (status: OPENED)
+  │
+  ▼
+  connector.initiate*Payment() (DOMESTIC/SEPA/SWIFT)
+  │
+  ├─ Uspech → Update PR (bankRefId, authorizationUrl)
+  │            → Return { paymentId, authorizationUrl }
+  │
+  └─ Selhani → Smazani PR z DB, throw error (klient muze retry)
 ```
 
-### ProcessBatch workflow
-
-Workflow (Cloudflare Durable Object) ridi zpracovani batche:
-
-1. Nacte a validuje batch (nesmi byt SIGNED/PROCESSING)
-1b. Nacte payment requesty pro batch z `payment_request` tabulky
-2. Zamkne batch (nastavi PROCESSING, overi checksum)
-3. Iniciuje batch u banky pres konektor podle typu platby (`connector.initiateDomesticBatch()` / `initiateSEPABatch()` / `initiateForeignBatch()`)
-3b. Aktualizuje singlePayments na PREPARED (bankRefId, initiatedAt, authorizationUrl)
-4. Aktualizuje batch na READY_TO_SIGN s autorizacnimi URL
-4a. MOCK konektor: preskoci autorizaci, rovnou oznaci singlePayments jako COMPLETED a batch jako SIGNED
-5. Odesle email s odkazem na autorizaci
-6. (TBD) Ceka na autorizaci uzivatelem (waitForEvent)
-
-### CRON kontrola stavu
+`send-payment-sync` je **deprecated** wrapper, ktery vola `send-payment`.
 
-Planovana uloha (`CRON_BATCH_STATUSES`) pravidelne vola `update-batch-statuses`, ktera:
-- Nacte vsechny pending batche (READY_TO_SIGN, SIGNED)
-- Seskupi je podle konektoru
-- Zavola `connector.getBatchStatus()` pro kazdy batch
-- Aktualizuje stavy batchu a jednotlivych plateb
-- Emituje eventy pro zmenene platby
+## Batch platby
 
-## Synchronni odeslani platby (sendPaymentSync)
-
-Alternativa k batch flow. Akce `send-payment-sync` odesle platbu **synchronne** primo do banky a vrati `authorizationUrl` pro podpis uzivatelem.
+Akce `send-batch` prijme pole plateb a odesle je do banky jako batch. Vsechny platby musi mit **stejny debtor ucet** (IBAN + mena) a **stejny typ** (DOMESTIC/SEPA/SWIFT). Pocet plateb nesmi prekrocit `account.batchSizeLimit` (vychozi: 50).
 
 ```
-SendPaymentSyncInput (API vstup)
+SendBatchInput (API vstup — pole plateb)
   │
   ▼
-  Resolve uctu (debtorIban + currency)
+  Validace (stejny debtor, typ, mena, velikost)
   │
   ▼
-  Inicializace konektoru
+  db.batch() — Vytvoreni batch (PROCESSING) + payment_requests (OPENED)
   │
   ▼
-  connector.initiate*Payment() (DOMESTIC/SEPA/SWIFT)
+  connector.initiate*Batch() — automaticky fallback na single payments
   │
-  ▼
-  { authorizationUrl } → vraceno volajicimu
+  ├─ Uspech → db.batch() — Update PRs + batch (READY_TO_SIGN)
+  │            → Return { batchId, authorizationUrls }
+  │
+  └─ Selhani → db.batch() — Smazani batch + PRs, throw error
 ```
 
-### Klicove rozdily oproti batch flow
+### Batch mode
+
+Kazdy batch ma `batchMode`:
+- `NATIVE` — konektor podporuje nativni batch API, vsechny platby jdou v jednom volani
+- `SINGLE` — konektor batch nepodporuje, platby se odesilaji jednotlive (automaticky fallback v `IBankConnector`)
+
+### BatchStatus
+
+| Status | Popis |
+|--------|-------|
+| `PROCESSING` | Batch se odesila do banky |
+| `READY_TO_SIGN` | Ceka na autorizaci uzivatelem |
+| `AUTHORIZED` | Vsechny platby autorizovany |
+| `COMPLETED` | Vsechny platby dokonceny |
+| `FAILED` | Nektera platba selhala |
+
+Batch status se **derivuje z payment requestu** — neni pollovan z banky.
+
+## Polling stavu (CRON)
 
-| | `send-payment` (batch) | `send-payment-sync` (sync) |
-|---|---|---|
-| Zpracovani | Asynchronni (queue → batch → workflow) | Synchronni (primo connector) |
-| Ulozeni do DB | Ano (payment + batch) | Ne (prijde az pres sync) |
-| Autorizacni URL | Az po `process-batch` | Ihned v response |
-| Pouziti | Hromadne platby, backoffice | Uzivatelska akce, okamzita platba |
+Jeden CRON (`CRON_PAYMENT_STATUSES`) pravidelne spousti `updatePaymentRequestStatuses`:
 
-Platba se do systemu (DB) dostane az nasledne pres `syncAccountPayments` workflow, ktery periodicky stahuje transakce z banky.
+1. Nacte vsechny non-terminalni payment requesty
+2. Aplikuje polling logiku:
+   - `OPENED` / `AUTHORIZED` — pollovat, po 14 dnech → `CLOSED`
+   - `COMPLETED` / `BOOKED` — pollovat 7 dni od `processedAt`, pak prestat
+3. Pro kazdy PR zavola `connector.getPaymentStatus()` a updatne stav
+4. Derivuje batch stavy z payment requestu (`_deriveBatchStatus`)
+
+Stejna logika (`_resolvePaymentRequestStatuses`) se vola i z `handleAuthorizationCallback` pro okamzity re-check po autorizaci.
 
 ## Synchronizace uctu
 
@@ -212,15 +156,12 @@ Kazdy pripojeny ucet ma workflow `SyncAccountPayments`, ktery bezi v nekonecne s
 │    │
 │    ▼
 │    Stahni platby z banky (connector.getAllAccountPayments)
-│    │  (az 5 pokusu, 2s delay mezi nimi)
-│    ▼
-│    Filtruj dokoncene platby
 │    │
 │    ▼
-│    Vloz nove platby do DB (deduplikace pres bankRefId)
+│    Filtruj dokoncene platby, vloz nove do DB (deduplikace pres bankRefId)
 │    │
 │    ▼
-│    Emituj BANK_PAYMENT eventy
+│    Emituj paymentFetched eventy
 │    │
 │    ▼
 │    Aktualizuj lastSyncAt + metadata
@@ -231,8 +172,6 @@ Kazdy pripojeny ucet ma workflow `SyncAccountPayments`, ktery bezi v nekonecne s
 └────┘
 ```
 
-Deduplikace: Workflow si pamatuje `lastSyncBankRefIds` z posledni synchronizace, aby nevkladal duplicity.
-
 ## Bankovni konektory
 
 Vsechny konektory dedi z abstraktni tridy `IBankConnector`, ktera poskytuje spolecnou logiku vcetne batch fallbacku.
@@ -241,79 +180,18 @@ Vsechny konektory dedi z abstraktni tridy `IBankConnector`, ktera poskytuje spol
 
 | Konektor | Klic | Batch podpora | Poznamka |
 |----------|------|---------------|----------|
-| Erste Bank | `ERSTE` | DOMESTIC | Vlastni API |
+| Erste Bank | `ERSTE` | DOMESTIC | Vlastni API (neaktivni) |
 | Finbricks | `FINBRICKS` | DOMESTIC | Platforma pro vice bank (bazova trida) |
 | Moneta | `MONETA` | DOMESTIC | Pres Finbricks |
 | Creditas | `CREDITAS` | Zadna | Pres Finbricks |
 | Fio | `FIO` | DOMESTIC | Pres Finbricks |
-| DBU | `DBU` | Zadna | Pres Finbricks |
+| DBU | `DBU` | Zadna | Vlastni API (interni banka) |
 | CSAS | `CSAS` | DOMESTIC | Pres Finbricks |
 | AirBank | `AIRBANK` | DOMESTIC | Pres Finbricks |
 | Mock | `MOCK` | Vsechny typy | Testovaci, automaticky dokoncuje platby |
-| Mock COBS | `MOCK_COBS` | Vsechny typy | Testovaci COBS konektor |
-
-### Podporovane sluzby dle bank (Finbricks, CZ)
-
-> Data ze sandbox prostredi Finbricks (`/status/bankInfo`). Aktualizovano: 2026-02-23.
-
-#### Platby
-
-| Banka | Provider | Domestic | SEPA | Foreign | Batch | Recurring | Pairing | Settled |
-|-------|----------|:--------:|:----:|:-------:|:-----:|:---------:|:-------:|:-------:|
-| MONETA Money Bank | `MONETA` | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
-| Mock Cobs banka | `MOCK_COBS` | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ |
-| Air Bank | `AIRBANK` | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ |
-| J&T Banka | `JTB` | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| mBank | `MBANK` | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Raiffeisen | `RAIFFEISEN` | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Fio banka | `FIO` | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ |
-| CSOB | `CSOB` | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ |
-| Komercni banka | `KB` | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ✅ |
-| UniCredit | `UNICREDIT` | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Ceska sporitelna | `CSAS` | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ |
-| Partners Banka | `PARTNERS` | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Banka CREDITAS | `CREDITAS` | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
-
-#### Ucty (informace)
-
-| Banka | Provider | Info | Zustatek | Transakce |
-|-------|----------|:----:|:--------:|:---------:|
-| MONETA Money Bank | `MONETA` | ✅ | ✅ | ✅ |
-| Mock Cobs banka | `MOCK_COBS` | ✅ | ✅ | ✅ |
-| Air Bank | `AIRBANK` | ✅ | ✅ | ✅ |
-| J&T Banka | `JTB` | ✅ | ✅ | ✅ |
-| mBank | `MBANK` | ✅ | ✅ | ✅ |
-| Raiffeisen | `RAIFFEISEN` | ✅ | ✅ | ✅ |
-| Fio banka | `FIO` | ✅ | ✅ | ✅ |
-| CSOB | `CSOB` | ✅ | ✅ | ✅ |
-| Komercni banka | `KB` | ✅ | ✅ | ✅ |
-| UniCredit | `UNICREDIT` | ✅ | ✅ | ✅ |
-| Ceska sporitelna | `CSAS` | ✅ | ✅ | ✅ |
-| Partners Banka | `PARTNERS` | ✅ | ✅ | ✅ |
-| Banka CREDITAS | `CREDITAS` | ✅ | ✅ | ✅ |
-
-#### Instant platby
-
-| Banka | Provider | Domestic Creditor | Domestic Debtor | SEPA Creditor | SEPA Debtor |
-|-------|----------|:-----------------:|:---------------:|:-------------:|:-----------:|
-| MONETA Money Bank | `MONETA` | ✅ | ✅ | ❌ | ❌ |
-| Mock Cobs banka | `MOCK_COBS` | ✅ | ✅ | ✅ | ❌ |
-| Air Bank | `AIRBANK` | ✅ | ✅ | ✅ | ✅ |
-| J&T Banka | `JTB` | ✅ | ✅ | ✅ | ✅ |
-| mBank | `MBANK` | ✅ | ✅ | ❌ | ❌ |
-| Raiffeisen | `RAIFFEISEN` | ✅ | ✅ | ❌ | ❌ |
-| Fio banka | `FIO` | ✅ | ✅ | ❌ | ✅ |
-| CSOB | `CSOB` | ✅ | ✅ | ❌ | ❌ |
-| Komercni banka | `KB` | ✅ | ✅ | ❌ | ❌ |
-| UniCredit | `UNICREDIT` | ✅ | ✅ | ❌ | ❌ |
-| Ceska sporitelna | `CSAS` | ✅ | ✅ | ❌ | ❌ |
-| Partners Banka | `PARTNERS` | ✅ | ✅ | ❌ | ❌ |
-| Banka CREDITAS | `CREDITAS` | ✅ | ✅ | ❌ | ❌ |
 
 ### Metody konektoru
 
-Kazdy konektor implementuje nasledujici metody (nebo vraci `Not implemented`):
-
 **Sprava uctu:**
 - `getAuthUri()` - Ziskat autorizacni URL
 - `authorizeAccount()` - Dokoncit autorizaci uctu
@@ -324,82 +202,62 @@ Kazdy konektor implementuje nasledujici metody (nebo vraci `Not implemented`):
 - `initiateForeignPayment()` - Zahranicni (SWIFT) platba
 
 **Batch platby (per typ):**
-- `initiateDomesticBatch()` - Batch tuzemskych plateb
+- `initiateDomesticBatch()` - Batch tuzemskych plateb (s automatickym fallbackem)
 - `initiateSEPABatch()` - Batch SEPA plateb
 - `initiateForeignBatch()` - Batch zahranicnich plateb
 
 **Synchronizace a stavy:**
 - `getAllAccountPayments()` - Stahnout transakce uctu
-- `getBatchStatus()` - Zjistit stav batche
-- `getPaymentStatus()` - Zjistit stav platby
+- `getPaymentStatus()` - Zjistit stav payment requestu (vraci `PaymentRequestStatus`)
 
 ### Abstrakce a batch fallback
 
 Bazova trida `IBankConnector` implementuje **template method pattern** pro batch operace. Kazdy konektor deklaruje, ktere typy plateb podporuje v batchi pres metodu `supportsBatch(paymentType)`.
 
-Pokud konektor **nepodporuje** batch pro dany typ platby, bazova trida automaticky provede fallback - rozlozi batch na jednotlive platby a odesle je sekvencne pres prislusnou single payment metodu:
+Pokud konektor **nepodporuje** batch pro dany typ platby, bazova trida automaticky provede fallback na single platby:
 
 ```
 initiateDomesticBatch()
   │
-  ├─ supportsBatch('DOMESTIC') === true
-  │    └─► initiateDomesticBatchImpl()   // nativni batch API banky
+  ├─ supportsBatch('DOMESTIC') === true  → initiateDomesticBatchImpl()   (nativni batch)
   │
-  └─ supportsBatch('DOMESTIC') === false
-       └─► for each payment:             // fallback na single platby
-             initiateDomesticPayment()
+  └─ supportsBatch('DOMESTIC') === false → for each: initiateDomesticPayment()  (fallback)
 ```
 
-Stejny pattern plati pro `initiateSEPABatch()` a `initiateForeignBatch()`.
-
-**Implementace v konektoru:**
-- `supportsBatch(paymentType)` - Vraci `true`/`false` podle podpory banky
-- `initiate*BatchImpl()` - Chranene (protected) metody s nativni batch implementaci, volane pouze kdyz `supportsBatch()` vraci `true`
-
-Vysledek je vzdy jednotny typ `InitiatedBatch` (obsahuje `authorizationUrls`, `payments` a volitelne `metadata`), bez ohledu na to, zda byl pouzit nativni batch nebo fallback.
-
-### Charge Bearer
-
-Platby mohou specifikovat `chargeBearer` (nositel poplatku):
-- `SHA` - Sdilene poplatky (vychozi)
-- `OUR` - Poplatky plati odesilatel
-- `BEN` - Poplatky plati prijemce
-
-Hodnota se cte primo z platby a predava konektoru (pouzivano napr. ve Finbricks).
+Vysledek je vzdy jednotny typ `InitiatedBatch`, bez ohledu na to, zda byl pouzit nativni batch nebo fallback. Batch zaznam v DB obsahuje `batchMode: 'NATIVE' | 'SINGLE'` pro rozliseni.
 
 ## RPC akce
 
-Bank service je **RPC worker** - nema vlastni verejne HTTP endpointy. Vsechny akce jsou dostupne pouze pres Cloudflare Worker binding. Verejne endpointy vystavuje az **gateway**, ktera tento worker binduje a zpristupnuje prislusne akce.
+Bank service je **RPC worker** — nema vlastni verejne HTTP endpointy. Vsechny akce jsou dostupne pouze pres Cloudflare Worker binding.
 
 ### Sprava uctu
 
 | Akce | Popis |
 |------|-------|
 | `get-auth-uri` | Ziska autorizacni URL pro pripojeni uctu |
-| `authorize-account` | Dokonci autorizaci uctu (ulozi kredencialy, spusti sync) |
-| `disconnect-account` | Odpoji ucet (smaze kredencialy, platby, zastavi workflow) |
-| `get-bank-accounts` | Seznam uctu (volitelne vcetne workflow stavu a batch statistik) |
+| `authorize-account` | Dokonci autorizaci uctu |
+| `disconnect-account` | Odpoji ucet |
+| `get-bank-accounts` | Seznam uctu |
 | `update-account` | Aktualizace nastaveni uctu |
 
 ### Platby
 
 | Akce | Popis |
 |------|-------|
-| `send-payment` | Odesle platbu (vlozi do fronty pro batchovani) |
-| `send-payment-sync` | Odesle platbu synchronne primo do banky, vrati `authorizationUrl` (bez queue/batch/DB) |
-| `get-payments` | Seznam plateb s paginaci a filtry (ucet, castka, mena, smer, datum, stav) |
-| `handle-authorization-callback` | Zpracuje callback po autorizaci platby/batche (aktualizuje singlePayment + batch status) |
-| `simulate-deposit` | Testovaci: vytvori prichozi platbu ve stavu COMPLETED |
+| `send-payment` | Odesle platbu primo do banky, vrati `{ paymentId, authorizationUrl }` |
+| `send-payment-sync` | **Deprecated** — wrapper nad `send-payment` |
+| `send-batch` | Odesle batch plateb primo do banky, vrati `{ batchId, authorizationUrls }` |
+| `get-payments` | Seznam plateb z bankovniho vypisu |
+| `get-payment-requests` | Seznam payment requestu |
+| `handle-authorization-callback` | Zpracuje callback po autorizaci — spusti re-check stavu pres konektor |
+| `simulate-deposit` | Testovaci: vytvori prichozi platbu |
 
 ### Batch operace
 
 | Akce | Popis |
 |------|-------|
-| `process-batch` | Spusti zpracovani batche (workflow) |
-| `process-batch-status` | Stav zpracovani batche |
-| `process-batch-restart` | Restart selhaneho batch workflow |
 | `get-batches` | Seznam batchu s paginaci a filtry |
-| `update-batch-statuses` | Aktualizuje stavy batchu z banky (CRON) |
+| `update-payment-request-statuses` | Unified CRON — polluje stavy vsech non-terminalnich PR |
 
 ### Synchronizace
 
@@ -412,55 +270,64 @@ Bank service je **RPC worker** - nema vlastni verejne HTTP endpointy. Vsechny ak
 
 ## Event system
 
-Sluzba emituje `BankPaymentEvent` do `QUEUE_BUS_QUEUE` pro konzumaci ostatnimi sluzbami:
+Sluzba emituje dva typy eventu do `QUEUE_BUS_QUEUE`:
+
+### BankPaymentEvent (bankovni vypis)
 
 ```typescript
 type BankPaymentEvent = {
   eventType: 'BANK_PAYMENT'
-  eventSignal: 'paymentCreated' | 'paymentCompleted' | 'paymentFailed' | 'paymentUpdated'
+  eventSignal: 'paymentFetched' | 'paymentUpdated'
   bankPayment: Partial<PaymentSelectType>
-  metadata: {
-    correlationId: string
-    entityId: string
-    timestamp: string
-  }
+  metadata: { correlationId, entityId, timestamp }
 }
 ```
 
 | Signal | Kdy se emituje |
 |--------|---------------|
-| `paymentCreated` | Nova platba synchronizovana z banky |
-| `paymentCompleted` | Platba uspesne dokoncena |
-| `paymentFailed` | Platba selhala |
+| `paymentFetched` | Nova platba synchronizovana z banky |
 | `paymentUpdated` | Zmena stavu platby |
 
+### BankPaymentRequestEvent (lifecycle PR)
+
+```typescript
+type BankPaymentRequestEvent = {
+  eventType: 'BANK_PAYMENT_REQUEST'
+  eventSignal: 'paymentRequestStatusChanged'
+  paymentRequest: PaymentRequestSelectType
+  metadata: { correlationId, entityId, timestamp }
+}
+```
+
+Emituje se v `_resolvePaymentRequestStatuses` pri kazde realne zmene statusu (`newStatus !== pr.status`).
+
 ## Databazove schema
 
 ### payment
 
-Hlavni tabulka plateb s vazbou na ucet a batch.
+Bankovni vypis — platby synchronizovane z banky (prichozi i odchozi).
 
-Klicove sloupce: `correlationId`, `refId`, `bankRefId`, `amount`, `currency`, `direction`, `paymentType`, `status`, `accountId`, `connectorKey`, `vs`/`ss`/`ks`, `message`, `creditor`, `debtor`, `batchId`, `initiatedAt`, `processedAt`.
+Klicove sloupce: `correlationId`, `bankRefId`, `amount`, `currency`, `direction`, `paymentType`, `status` (PaymentStatus), `accountId`, `connectorKey`.
 
 Unikatni omezeni: `(connectorKey, bankRefId)`.
 
 ### payment_request
 
-Odchozi platby v prubehu zpracovani (in-flight). Kazda platba v batchi ma vlastni radek se stavem.
+Iniciovan platby — odchozi platby s lifecycle stavem.
 
-Klicove sloupce: `batchId`, `status`, `bankRefId`, `amount`, `currency`, `paymentType`, `creditorIban`, `debtorIban`, `accountId`, `connectorKey`, `authorizationUrl`, `initiatedAt`, `processedAt`, `statusReason`.
+Klicove sloupce: `batchId`, `status` (PaymentRequestStatus), `bankRefId`, `amount`, `currency`, `paymentType`, `accountId`, `connectorKey`, `authorizationUrl`, `initiatedAt`, `processedAt`, `statusReason`.
 
 ### batch
 
-Batch plateb se stavovymi informacemi. Platby jsou v tabulce `payment_request` (vazba pres `batchId`).
+Batch plateb. Status se derivuje z payment requestu.
 
-Klicove sloupce: `status`, `authorizationUrls`, `paymentsChecksum`, `metadata`, `sizeLimit`, `accountId`, `paymentType`.
+Klicove sloupce: `status` (BatchStatus), `batchMode` (`NATIVE`/`SINGLE`), `authorizationUrls`, `accountId`, `paymentType`, `metadata`.
 
 ### account
 
 Bankovni ucet s konfiguraci synchronizace.
 
-Klicove sloupce: `iban` (unikatni), `number`, `bankCode`, `connectorKey`, `currency`, `batchSizeLimit`, `syncIntervalS`, `lastSyncAt`, `status` (`AUTHORIZED` / `DISABLED` / `EXPIRED`).
+Klicove sloupce: `iban` (unikatni), `connectorKey`, `currency`, `batchSizeLimit`, `syncIntervalS`, `lastSyncAt`, `status` (`AUTHORIZED`/`DISABLED`/`EXPIRED`).
 
 ### account_credentials
 
@@ -483,9 +350,17 @@ Format: `{CATEGORY}-B-{NUMBER}`
 | `DB-B-005` | 404 | Account not found (disconnect) |
 | `DB-B-006` | 500 | Account not updated (disconnect) |
 | `DB-B-007` | 404 | Batch not found |
+| `DB-B-008` | 404 | Payment request not found |
 | `VALID-B-001` | 400 | Invalid connector key |
 | `VALID-B-002` | 400 | One-time token expired |
 | `VALID-B-003` | 422 | Unsupported account |
-| `VALID-B-004` | 422 | No account found for single payment (IBAN + currency mismatch) |
-| `VALID-B-005` | 400 | Unsupported payment type for single payment |
+| `VALID-B-004` | 422 | No account found for IBAN + currency |
+| `VALID-B-005` | 400 | Unsupported payment type |
+| `VALID-B-006` | 422 | Connector does not support payment type |
+| `VALID-B-007` | 422 | Account not authorized |
+| `VALID-B-008` | 422 | Payment type / currency mismatch |
+| `VALID-B-009` | 422 | SEPA payments require creditor IBAN |
+| `VALID-B-011` | 422 | Batch: debtor IBAN/currency mismatch |
+| `VALID-B-012` | 422 | Batch: payment type mismatch |
+| `VALID-B-013` | 422 | Batch: size limit exceeded |
 | `SYS-B-001` | 501 | Not implemented |

package/dist/database/schema.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const paymentRequest_schema = require('../shared/bank.JVlyPAAb.cjs');
+const paymentRequest_schema = require('../shared/bank.BBXoZ5QU.cjs');
 require('@develit-io/backend-sdk');
 require('drizzle-orm/relations');
 require('drizzle-orm/sqlite-core');

package/dist/database/schema.d.cts

@@ -1,7 +1,7 @@
-export { as as account, at as accountCredentials, au as batch, av as ott, aw as payment, ax as paymentRelations, ay as paymentRequest, az as paymentRequestRelations } from '../shared/bank.pgyk4j94.cjs';
+export { aw as account, ax as accountCredentials, ay as batch, az as ott, aA as payment, aB as paymentRelations, aC as paymentRequest, aD as paymentRequestRelations } from '../shared/bank.Cj2Goq7s.cjs';
 import 'drizzle-orm/sqlite-core';
 import 'drizzle-orm';
 import '@develit-io/backend-sdk';
 import '@develit-io/general-codes';
-import 'drizzle-zod';
 import 'zod';
+import 'drizzle-zod';

package/dist/database/schema.d.mts

@@ -1,7 +1,7 @@
-export { as as account, at as accountCredentials, au as batch, av as ott, aw as payment, ax as paymentRelations, ay as paymentRequest, az as paymentRequestRelations } from '../shared/bank.pgyk4j94.mjs';
+export { aw as account, ax as accountCredentials, ay as batch, az as ott, aA as payment, aB as paymentRelations, aC as paymentRequest, aD as paymentRequestRelations } from '../shared/bank.Cj2Goq7s.mjs';
 import 'drizzle-orm/sqlite-core';
 import 'drizzle-orm';
 import '@develit-io/backend-sdk';
 import '@develit-io/general-codes';
-import 'drizzle-zod';
 import 'zod';
+import 'drizzle-zod';

package/dist/database/schema.d.ts

@@ -1,7 +1,7 @@
-export { as as account, at as accountCredentials, au as batch, av as ott, aw as payment, ax as paymentRelations, ay as paymentRequest, az as paymentRequestRelations } from '../shared/bank.pgyk4j94.js';
+export { aw as account, ax as accountCredentials, ay as batch, az as ott, aA as payment, aB as paymentRelations, aC as paymentRequest, aD as paymentRequestRelations } from '../shared/bank.Cj2Goq7s.js';
 import 'drizzle-orm/sqlite-core';
 import 'drizzle-orm';
 import '@develit-io/backend-sdk';
 import '@develit-io/general-codes';
-import 'drizzle-zod';
 import 'zod';
+import 'drizzle-zod';

package/dist/database/schema.mjs

@@ -1,4 +1,4 @@
-export { n as account, p as accountCredentials, q as batch, r as ott, s as payment, t as paymentRelations, u as paymentRequest, v as paymentRequestRelations } from '../shared/bank.C6jjS1Pl.mjs';
+export { q as account, r as accountCredentials, s as batch, t as ott, u as payment, v as paymentRelations, w as paymentRequest, x as paymentRequestRelations } from '../shared/bank.CXBeULUL.mjs';
 import '@develit-io/backend-sdk';
 import 'drizzle-orm/relations';
 import 'drizzle-orm/sqlite-core';