@devx-retailos/cms 0.0.1

package/src/api/admin/retailos/cms/accumulation/[storeId]/route.ts

@@ -0,0 +1,35 @@
+import type {
+  AuthenticatedMedusaRequest,
+  MedusaResponse,
+} from "@medusajs/framework"
+import { CMS_MODULE } from "../../../../../../modules/cms/constants"
+import type CmsModuleService from "../../../../../../modules/cms/services/cms-module-service"
+
+function getService(req: AuthenticatedMedusaRequest): CmsModuleService {
+  return (req as any).scope.resolve(CMS_MODULE)
+}
+
+function getLogger(req: AuthenticatedMedusaRequest) {
+  try {
+    return (req as any).scope.resolve("logger")
+  } catch {
+    return { info: () => {}, warn: () => {}, error: () => {}, debug: () => {} }
+  }
+}
+
+export const GET = async (req: AuthenticatedMedusaRequest, res: MedusaResponse) => {
+  const { storeId } = req.params
+  try {
+    const service = getService(req)
+    const accumulation = await service.getAccumulation(storeId)
+    return res.status(200).json({
+      accumulation: accumulation ?? { store_id: storeId, cash_in_store: 0 },
+    })
+  } catch (err) {
+    getLogger(req).error("[retailos/cms] get accumulation failed", {
+      store_id: storeId,
+      error: err instanceof Error ? err.message : String(err),
+    })
+    return res.status(500).json({ code: "INTERNAL_ERROR", message: (err as Error).message })
+  }
+}

package/src/api/admin/retailos/cms/export/__tests__/route.test.ts

@@ -0,0 +1,126 @@
+import { describe, it, expect, vi } from "vitest"
+import { GET } from "../route"
+
+function makeService() {
+  return {
+    listAndCountCmsHandovers: vi.fn().mockResolvedValue([[], 0]),
+  }
+}
+
+function makeReq(query: Record<string, string> = {}, service = makeService()) {
+  return {
+    query,
+    scope: {
+      resolve: vi.fn().mockImplementation((key: string) => {
+        if (key === "cms") return service
+        throw new Error("not found")
+      }),
+    },
+    _service: service,
+  }
+}
+
+function makeRes() {
+  const headers: Record<string, string> = {}
+  return {
+    status: vi.fn().mockReturnThis(),
+    json: vi.fn().mockReturnThis(),
+    send: vi.fn().mockReturnThis(),
+    setHeader: vi.fn().mockImplementation((k: string, v: string) => { headers[k] = v }),
+    _headers: headers,
+  }
+}
+
+describe("GET /export", () => {
+  it("returns CSV with correct headers row", async () => {
+    const service = makeService()
+    service.listAndCountCmsHandovers.mockResolvedValue([[], 0])
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(200)
+    expect(res.setHeader).toHaveBeenCalledWith("Content-Type", "text/csv")
+    expect(res.setHeader).toHaveBeenCalledWith(
+      "Content-Disposition",
+      expect.stringContaining("cms-handovers-")
+    )
+    const csv = (res.send as ReturnType<typeof vi.fn>).mock.calls[0][0] as string
+    expect(csv).toContain("id,store_id,employee_id,handover_id,handover_amount,total_cash,type,remark,created_at")
+  })
+
+  it("includes a data row for each handover", async () => {
+    const service = makeService()
+    const handovers = [
+      { id: "cmsh_1", store_id: "s1", employee_id: "e1", handover_id: null, handover_amount: 500, total_cash: null, type: "CR", remark: null, created_at: "2026-06-22T00:00:00Z" },
+    ]
+    service.listAndCountCmsHandovers.mockResolvedValue([handovers, 1])
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    const csv = (res.send as ReturnType<typeof vi.fn>).mock.calls[0][0] as string
+    const lines = csv.split("\n")
+    expect(lines).toHaveLength(2)
+    expect(lines[1]).toContain("cmsh_1")
+    expect(lines[1]).toContain("500")
+    expect(lines[1]).toContain("CR")
+  })
+
+  it("escapes commas and quotes in CSV values", async () => {
+    const service = makeService()
+    const handovers = [
+      { id: "cmsh_2", store_id: "s1", employee_id: "e1", handover_id: null, handover_amount: 100, total_cash: null, type: "DB", remark: 'cash, "extra"', created_at: "2026-06-22T00:00:00Z" },
+    ]
+    service.listAndCountCmsHandovers.mockResolvedValue([handovers, 1])
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    const csv = (res.send as ReturnType<typeof vi.fn>).mock.calls[0][0] as string
+    expect(csv).toContain('"cash, ""extra"""')
+  })
+
+  it("filters by store_id when provided in query", async () => {
+    const service = makeService()
+    service.listAndCountCmsHandovers.mockResolvedValue([[], 0])
+    const req = makeReq({ store_id: "s1" }, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(service.listAndCountCmsHandovers).toHaveBeenCalledWith(
+      expect.objectContaining({ store_id: ["s1"] }),
+      expect.any(Object)
+    )
+  })
+
+  it("does not filter by store_id when not in query", async () => {
+    const service = makeService()
+    service.listAndCountCmsHandovers.mockResolvedValue([[], 0])
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(service.listAndCountCmsHandovers).toHaveBeenCalledWith(
+      expect.not.objectContaining({ store_id: expect.anything() }),
+      expect.any(Object)
+    )
+  })
+
+  it("returns 500 when service throws", async () => {
+    const service = makeService()
+    service.listAndCountCmsHandovers.mockRejectedValue(new Error("db error"))
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(500)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "INTERNAL_ERROR" }))
+  })
+})

package/src/api/admin/retailos/cms/export/route.ts

@@ -0,0 +1,58 @@
+import type {
+  AuthenticatedMedusaRequest,
+  MedusaResponse,
+} from "@medusajs/framework"
+import { CMS_MODULE } from "../../../../../modules/cms/constants"
+import type CmsModuleService from "../../../../../modules/cms/services/cms-module-service"
+
+function getService(req: AuthenticatedMedusaRequest): CmsModuleService {
+  return (req as any).scope.resolve(CMS_MODULE)
+}
+
+function getLogger(req: AuthenticatedMedusaRequest) {
+  try {
+    return (req as any).scope.resolve("logger")
+  } catch {
+    return { info: () => {}, warn: () => {}, error: () => {}, debug: () => {} }
+  }
+}
+
+function escapeCSV(val: unknown): string {
+  if (val == null) return ""
+  const s = String(val)
+  if (s.includes(",") || s.includes('"') || s.includes("\n")) {
+    return `"${s.replace(/"/g, '""')}"`
+  }
+  return s
+}
+
+export const GET = async (req: AuthenticatedMedusaRequest, res: MedusaResponse) => {
+  const query = req.query as Record<string, string>
+  const store_id = query.store_id
+
+  try {
+    const service = getService(req)
+    const filters: Record<string, unknown> = {}
+    if (store_id) filters.store_id = [store_id]
+
+    const [handovers] = await service.listAndCountCmsHandovers(filters, {
+      take: 10000,
+      order: { created_at: "DESC" },
+    })
+
+    const headers = ["id", "store_id", "employee_id", "handover_id", "handover_amount", "total_cash", "type", "remark", "created_at"]
+    const rows = (handovers as any[]).map((h) =>
+      headers.map((k) => escapeCSV((h as any)[k])).join(",")
+    )
+    const csv = [headers.join(","), ...rows].join("\n")
+
+    res.setHeader("Content-Type", "text/csv")
+    res.setHeader("Content-Disposition", `attachment; filename="cms-handovers-${Date.now()}.csv"`)
+    return res.status(200).send(csv)
+  } catch (err) {
+    getLogger(req).error("[retailos/cms] export failed", {
+      error: err instanceof Error ? err.message : String(err),
+    })
+    return res.status(500).json({ code: "INTERNAL_ERROR", message: (err as Error).message })
+  }
+}

package/src/api/admin/retailos/cms/handovers/[id]/__tests__/route.test.ts

@@ -0,0 +1,68 @@
+import { describe, it, expect, vi } from "vitest"
+import { GET } from "../route"
+
+function makeService() {
+  return {
+    retrieveCmsHandover: vi.fn(),
+  }
+}
+
+function makeReq(params: Record<string, string>, service = makeService()) {
+  return {
+    params,
+    scope: {
+      resolve: vi.fn().mockImplementation((key: string) => {
+        if (key === "cms") return service
+        throw new Error("not found")
+      }),
+    },
+    _service: service,
+  }
+}
+
+function makeRes() {
+  return {
+    status: vi.fn().mockReturnThis(),
+    json: vi.fn().mockReturnThis(),
+  }
+}
+
+describe("GET /handovers/[id]", () => {
+  it("returns handover when found", async () => {
+    const service = makeService()
+    const handover = { id: "cmsh_1", store_id: "s1", handover_amount: 500 }
+    service.retrieveCmsHandover.mockResolvedValue(handover)
+    const req = makeReq({ id: "cmsh_1" }, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(service.retrieveCmsHandover).toHaveBeenCalledWith("cmsh_1")
+    expect(res.status).toHaveBeenCalledWith(200)
+    expect(res.json).toHaveBeenCalledWith({ handover })
+  })
+
+  it("returns 404 when handover is null", async () => {
+    const service = makeService()
+    service.retrieveCmsHandover.mockResolvedValue(null)
+    const req = makeReq({ id: "cmsh_missing" }, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(404)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "NOT_FOUND" }))
+  })
+
+  it("returns 500 when service throws", async () => {
+    const service = makeService()
+    service.retrieveCmsHandover.mockRejectedValue(new Error("db error"))
+    const req = makeReq({ id: "cmsh_1" }, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(500)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "INTERNAL_ERROR" }))
+  })
+})

package/src/api/admin/retailos/cms/handovers/[id]/route.ts

@@ -0,0 +1,36 @@
+import type {
+  AuthenticatedMedusaRequest,
+  MedusaResponse,
+} from "@medusajs/framework"
+import { CMS_MODULE } from "../../../../../../modules/cms/constants"
+import type CmsModuleService from "../../../../../../modules/cms/services/cms-module-service"
+
+function getService(req: AuthenticatedMedusaRequest): CmsModuleService {
+  return (req as any).scope.resolve(CMS_MODULE)
+}
+
+function getLogger(req: AuthenticatedMedusaRequest) {
+  try {
+    return (req as any).scope.resolve("logger")
+  } catch {
+    return { info: () => {}, warn: () => {}, error: () => {}, debug: () => {} }
+  }
+}
+
+export const GET = async (req: AuthenticatedMedusaRequest, res: MedusaResponse) => {
+  const { id } = req.params
+  try {
+    const service = getService(req)
+    const handover = await service.retrieveCmsHandover(id)
+    if (!handover) {
+      return res.status(404).json({ code: "NOT_FOUND", message: "Handover not found" })
+    }
+    return res.status(200).json({ handover })
+  } catch (err) {
+    getLogger(req).error("[retailos/cms] retrieve handover failed", {
+      id,
+      error: err instanceof Error ? err.message : String(err),
+    })
+    return res.status(500).json({ code: "INTERNAL_ERROR", message: (err as Error).message })
+  }
+}

package/src/api/admin/retailos/cms/handovers/__tests__/route.test.ts

@@ -0,0 +1,104 @@
+import { describe, it, expect, vi } from "vitest"
+import { GET, POST } from "../route"
+
+function makeService() {
+  return {
+    listAndCountCmsHandovers: vi.fn().mockResolvedValue([[], 0]),
+    handover: vi.fn().mockResolvedValue({ id: "cmsh_1", store_id: "s1", handover_amount: 100 }),
+  }
+}
+
+function makeReq(overrides: Record<string, unknown> = {}, service = makeService()) {
+  return {
+    body: {},
+    filterableFields: {},
+    scope: {
+      resolve: vi.fn().mockImplementation((key: string) => {
+        if (key === "cms") return service
+        throw new Error("not found")
+      }),
+    },
+    _service: service,
+    ...overrides,
+  }
+}
+
+function makeRes() {
+  return {
+    status: vi.fn().mockReturnThis(),
+    json: vi.fn().mockReturnThis(),
+  }
+}
+
+describe("GET /handovers", () => {
+  it("returns handover list with count", async () => {
+    const service = makeService()
+    const handovers = [{ id: "cmsh_1" }, { id: "cmsh_2" }]
+    service.listAndCountCmsHandovers.mockResolvedValue([handovers, 2])
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(200)
+    expect(res.json).toHaveBeenCalledWith({ handovers, count: 2 })
+  })
+
+  it("returns 500 when service throws", async () => {
+    const service = makeService()
+    service.listAndCountCmsHandovers.mockRejectedValue(new Error("db error"))
+    const req = makeReq({}, service)
+    const res = makeRes()
+
+    await GET(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(500)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "INTERNAL_ERROR" }))
+  })
+})
+
+describe("POST /handovers", () => {
+  it("returns 400 for invalid body", async () => {
+    const req = makeReq({ body: { store_id: "s1" } })
+    const res = makeRes()
+
+    await POST(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "BAD_REQUEST" }))
+  })
+
+  it("creates handover and returns 201", async () => {
+    const service = makeService()
+    const req = makeReq({
+      body: {
+        store_id: "s1",
+        employee_id: "e1",
+        handover_amount: 200,
+        type: "CR",
+      },
+    }, service)
+    const res = makeRes()
+
+    await POST(req as any, res as any)
+
+    expect(service.handover).toHaveBeenCalledWith(
+      expect.objectContaining({ store_id: "s1", handover_amount: 200, type: "CR" })
+    )
+    expect(res.status).toHaveBeenCalledWith(201)
+    expect(res.json).toHaveBeenCalledWith({ handover: { id: "cmsh_1", store_id: "s1", handover_amount: 100 } })
+  })
+
+  it("returns 500 when service throws", async () => {
+    const service = makeService()
+    service.handover.mockRejectedValue(new Error("write failed"))
+    const req = makeReq({
+      body: { store_id: "s1", employee_id: "e1", handover_amount: 100 },
+    }, service)
+    const res = makeRes()
+
+    await POST(req as any, res as any)
+
+    expect(res.status).toHaveBeenCalledWith(500)
+  })
+})

package/src/api/admin/retailos/cms/handovers/route.ts

@@ -0,0 +1,79 @@
+import type {
+  AuthenticatedMedusaRequest,
+  MedusaResponse,
+} from "@medusajs/framework"
+import { z } from "zod"
+import { CMS_MODULE } from "../../../../../modules/cms/constants"
+import type CmsModuleService from "../../../../../modules/cms/services/cms-module-service"
+
+const createSchema = z.object({
+  store_id: z.string().min(1),
+  employee_id: z.string().min(1),
+  handover_id: z.string().nullable().optional(),
+  handover_amount: z.number().nonnegative(),
+  total_cash: z.number().nullable().optional(),
+  type: z.enum(["DB", "CR"]).nullable().optional(),
+  image_url: z.string().nullable().optional(),
+  remark: z.string().nullable().optional(),
+  metadata: z.record(z.string(), z.unknown()).nullable().optional(),
+})
+
+function getService(req: AuthenticatedMedusaRequest): CmsModuleService {
+  return (req as any).scope.resolve(CMS_MODULE)
+}
+
+function getLogger(req: AuthenticatedMedusaRequest) {
+  try {
+    return (req as any).scope.resolve("logger")
+  } catch {
+    return { info: () => {}, warn: () => {}, error: () => {}, debug: () => {} }
+  }
+}
+
+export const GET = async (req: AuthenticatedMedusaRequest, res: MedusaResponse) => {
+  try {
+    const service = getService(req)
+    const filters = (req.filterableFields ?? {}) as Record<string, unknown>
+    const [data, count] = await service.listAndCountCmsHandovers(filters, {
+      take: 100,
+      order: { created_at: "DESC" },
+    })
+    return res.status(200).json({ handovers: data, count })
+  } catch (err) {
+    getLogger(req).error("[retailos/cms] list handovers failed", {
+      error: err instanceof Error ? err.message : String(err),
+    })
+    return res.status(500).json({ code: "INTERNAL_ERROR", message: (err as Error).message })
+  }
+}
+
+export const POST = async (req: AuthenticatedMedusaRequest, res: MedusaResponse) => {
+  const parsed = createSchema.safeParse(req.body)
+  if (!parsed.success) {
+    return res.status(400).json({
+      code: "BAD_REQUEST",
+      message: "Invalid handover input",
+      details: parsed.error.flatten(),
+    })
+  }
+  try {
+    const service = getService(req)
+    const created = await service.handover({
+      store_id: parsed.data.store_id,
+      employee_id: parsed.data.employee_id,
+      handover_id: parsed.data.handover_id ?? null,
+      handover_amount: parsed.data.handover_amount,
+      total_cash: parsed.data.total_cash ?? null,
+      type: parsed.data.type ?? null,
+      image_url: parsed.data.image_url ?? null,
+      remark: parsed.data.remark ?? null,
+      metadata: parsed.data.metadata ?? null,
+    })
+    return res.status(201).json({ handover: created })
+  } catch (err) {
+    getLogger(req).error("[retailos/cms] create handover failed", {
+      error: err instanceof Error ? err.message : String(err),
+    })
+    return res.status(500).json({ code: "INTERNAL_ERROR", message: (err as Error).message })
+  }
+}

package/src/api/admin/retailos/cms/operation/__tests__/route.test.ts

@@ -0,0 +1,169 @@
+import { describe, it, expect, vi, beforeEach } from "vitest"
+import { POST } from "../route"
+
+function makeService() {
+  return {
+    dayStart: vi.fn().mockResolvedValue(undefined),
+    dayEnd: vi.fn().mockResolvedValue(undefined),
+    handover: vi.fn().mockResolvedValue({ id: "cmsh_1" }),
+    addPettyCash: vi.fn().mockResolvedValue({ id: "pct_1" }),
+    addExpense: vi.fn().mockResolvedValue({ id: "pct_2" }),
+  }
+}
+
+function makeReq(body: unknown, service = makeService()) {
+  return {
+    body,
+    scope: {
+      resolve: vi.fn().mockImplementation((key: string) => {
+        if (key === "cms") return service
+        throw new Error("not found")
+      }),
+    },
+    _service: service,
+  }
+}
+
+function makeRes() {
+  const res = {
+    status: vi.fn().mockReturnThis(),
+    json: vi.fn().mockReturnThis(),
+  }
+  return res
+}
+
+describe("POST /operation - validation", () => {
+  it("returns 400 for invalid body", async () => {
+    const req = makeReq({ operation: "unknown_op", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "BAD_REQUEST" }))
+  })
+
+  it("returns 400 when store_id is missing", async () => {
+    const req = makeReq({ operation: "day_start", employee_id: "e1", opening_amount: 100 })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+  })
+})
+
+describe("POST /operation - day_start", () => {
+  it("returns 400 when opening_amount is missing", async () => {
+    const req = makeReq({ operation: "day_start", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ message: "opening_amount is required for day_start" }))
+  })
+
+  it("calls service.dayStart and returns 200", async () => {
+    const service = makeService()
+    const req = makeReq({ operation: "day_start", store_id: "s1", employee_id: "e1", opening_amount: 500 }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(service.dayStart).toHaveBeenCalledWith({ store_id: "s1", employee_id: "e1", opening_amount: 500 })
+    expect(res.status).toHaveBeenCalledWith(200)
+    expect(res.json).toHaveBeenCalledWith({ operation: "day_start", store_id: "s1" })
+  })
+})
+
+describe("POST /operation - day_end", () => {
+  it("returns 400 when closing_amount is missing", async () => {
+    const req = makeReq({ operation: "day_end", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ message: "closing_amount is required for day_end" }))
+  })
+
+  it("calls service.dayEnd and returns 200", async () => {
+    const service = makeService()
+    const req = makeReq({ operation: "day_end", store_id: "s1", employee_id: "e1", closing_amount: 800 }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(service.dayEnd).toHaveBeenCalledWith({ store_id: "s1", employee_id: "e1", closing_amount: 800 })
+    expect(res.status).toHaveBeenCalledWith(200)
+  })
+})
+
+describe("POST /operation - handover", () => {
+  it("returns 400 when handover_amount is missing", async () => {
+    const req = makeReq({ operation: "handover", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ message: "handover_amount is required for handover" }))
+  })
+
+  it("calls service.handover and returns 201", async () => {
+    const service = makeService()
+    const req = makeReq({ operation: "handover", store_id: "s1", employee_id: "e1", handover_amount: 200, type: "CR" }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(service.handover).toHaveBeenCalledWith(expect.objectContaining({ handover_amount: 200, type: "CR" }))
+    expect(res.status).toHaveBeenCalledWith(201)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ operation: "handover", handover: { id: "cmsh_1" } }))
+  })
+})
+
+describe("POST /operation - add_petty_cash", () => {
+  it("returns 400 when amount is missing", async () => {
+    const req = makeReq({ operation: "add_petty_cash", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ message: "amount is required for add_petty_cash" }))
+  })
+
+  it("calls service.addPettyCash and returns 201", async () => {
+    const service = makeService()
+    const req = makeReq({ operation: "add_petty_cash", store_id: "s1", employee_id: "e1", amount: 300 }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(service.addPettyCash).toHaveBeenCalledWith(expect.objectContaining({ store_id: "s1", amount: 300 }))
+    expect(res.status).toHaveBeenCalledWith(201)
+  })
+})
+
+describe("POST /operation - add_expense", () => {
+  it("returns 400 when amount is missing", async () => {
+    const req = makeReq({ operation: "add_expense", store_id: "s1", employee_id: "e1" })
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(400)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ message: "amount is required for add_expense" }))
+  })
+
+  it("calls service.addExpense with optional fields and returns 201", async () => {
+    const service = makeService()
+    const req = makeReq({
+      operation: "add_expense",
+      store_id: "s1",
+      employee_id: "e1",
+      amount: 50,
+      category: "office",
+      sub_category: "stationery",
+      reason: "pens",
+    }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(service.addExpense).toHaveBeenCalledWith(
+      expect.objectContaining({ amount: 50, category: "office", sub_category: "stationery", reason: "pens" })
+    )
+    expect(res.status).toHaveBeenCalledWith(201)
+  })
+})
+
+describe("POST /operation - service error", () => {
+  it("returns 500 when service throws", async () => {
+    const service = makeService()
+    service.dayStart.mockRejectedValue(new Error("db error"))
+    const req = makeReq({ operation: "day_start", store_id: "s1", employee_id: "e1", opening_amount: 100 }, service)
+    const res = makeRes()
+    await POST(req as any, res as any)
+    expect(res.status).toHaveBeenCalledWith(500)
+    expect(res.json).toHaveBeenCalledWith(expect.objectContaining({ code: "INTERNAL_ERROR", message: "db error" }))
+  })
+})