@nuxt-customer-portal/invoices 0.3.0

package/migrations/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1786525252052,
+      "tag": "0000_baseline",
+      "breakpoints": true
+    }
+  ]
+}

package/nuxt.config.ts

@@ -0,0 +1,15 @@
+import { fileURLToPath } from 'node:url'
+
+export default defineNuxtConfig({
+  $meta: { name: 'nuxt-customer-portal-invoices' },
+  compatibilityDate: '2025-10-24',
+  modules: ['@nuxtjs/i18n'],
+  css: [fileURLToPath(new URL('./app/assets/invoices.css', import.meta.url))],
+  components: [{ path: fileURLToPath(new URL('./app/components', import.meta.url)), global: true }],
+  i18n: {
+    locales: [
+      { code: 'en', iso: 'en-US', name: 'English', file: 'en.json' },
+      { code: 'nl', iso: 'nl-NL', name: 'Nederlands', file: 'nl.json' }
+    ]
+  }
+})

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@nuxt-customer-portal/invoices",
+  "version": "0.3.0",
+  "license": "MIT",
+  "homepage": "https://nuxt-customer-portal.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ludulicious/nuxt-customer-portal.git"
+  },
+  "type": "module",
+  "main": "./nuxt.config.ts",
+  "files": [
+    "LICENSE",
+    "CHANGELOG.md",
+    "README.md",
+    "app",
+    "i18n",
+    "migrations",
+    "server",
+    "shared",
+    "tokens.css",
+    "nuxt.config.ts",
+    "portal.manifest.mjs"
+  ],
+  "exports": {
+    ".": "./nuxt.config.ts",
+    "./feature": "./shared/feature.ts",
+    "./types": "./shared/types/invoice.ts",
+    "./schema": "./server/db/schema/invoices.ts",
+    "./portal-manifest": "./portal.manifest.mjs",
+    "./app/*": "./app/*.ts",
+    "./server/*": "./server/*.ts",
+    "./shared/*": "./shared/*.ts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@nuxtjs/i18n": "^10.6.0",
+    "@types/pg": "8.15.5",
+    "drizzle-orm": "^0.45.2",
+    "nanoid": "^5.1.6",
+    "pdf-lib": "^1.17.1",
+    "pg": "^8.22.0",
+    "resend": "^6.18.1",
+    "zod": "^4.4.3",
+    "@nuxt-customer-portal/core": "^0.3.0",
+    "@nuxt-customer-portal/ui": "^0.3.0",
+    "@nuxt-customer-portal/organizations": "^0.3.0",
+    "@nuxt-customer-portal/clients": "^0.3.0"
+  },
+  "peerDependencies": {
+    "nuxt": "^4.5.1",
+    "vue": "^3.5.0"
+  },
+  "devDependencies": {
+    "nuxt": "^4.5.1",
+    "vue": "^3.5.0"
+  }
+}

package/portal.manifest.mjs

@@ -0,0 +1,9 @@
+export default {
+  id: 'invoices',
+  version: '0.3.0',
+  source: '@nuxt-customer-portal/invoices',
+  clientModuleId: 'invoices',
+  dependsOn: ['core', 'ui', 'organizations', 'clients'],
+  schema: './server/db/schema/invoices.ts',
+  migrations: './migrations'
+}

package/server/api/invoices/admin/bootstrap.get.ts

@@ -0,0 +1,17 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import {
+  getInvoiceSettings,
+  getOrganizationInvoiceProfile,
+  listInvoiceClients
+} from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const [settings, clients, organizationProfile] = await Promise.all([
+    getInvoiceSettings(organizationId),
+    listInvoiceClients(organizationId),
+    getOrganizationInvoiceProfile(organizationId)
+  ])
+  return { settings, clients, organizationProfile }
+})

package/server/api/invoices/admin/clients/[clientId]/access.get.ts

@@ -0,0 +1,11 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getClientInvoiceAccessOverview } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, organizationType } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  if (organizationType !== 'PROVIDER') {
+    throw createError({ statusCode: 403, message: 'Access denied' })
+  }
+  return getClientInvoiceAccessOverview(organizationId, getRouterParam(event, 'clientId')!)
+})

package/server/api/invoices/admin/clients/[clientId]/contacts/[id].delete.ts

@@ -0,0 +1,8 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { deleteBillingContact } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return deleteBillingContact(getRouterParam(event, 'clientId')!, getRouterParam(event, 'id')!)
+})

package/server/api/invoices/admin/clients/[clientId]/contacts/[id].patch.ts

@@ -0,0 +1,13 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { updateBillingContact } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { billingContactUpdateSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+export default defineEventHandler(async (event) => {
+  await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return updateBillingContact(
+    getRouterParam(event, 'clientId')!,
+    getRouterParam(event, 'id')!,
+    billingContactUpdateSchema.parse(await readBody(event))
+  )
+})

package/server/api/invoices/admin/clients/[clientId]/contacts/index.get.ts

@@ -0,0 +1,8 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { listBillingContacts } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return listBillingContacts(getRouterParam(event, 'clientId')!)
+})

package/server/api/invoices/admin/clients/[clientId]/contacts/index.post.ts

@@ -0,0 +1,12 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { createBillingContact } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { billingContactCreateSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+export default defineEventHandler(async (event) => {
+  await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return createBillingContact(
+    getRouterParam(event, 'clientId')!,
+    billingContactCreateSchema.parse(await readBody(event))
+  )
+})

package/server/api/invoices/admin/email-domain.get.ts

@@ -0,0 +1,17 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { getPortalEmailProviderStatus } from '@nuxt-customer-portal/core/server/utils/portal-email'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getOrganizationInvoiceProfile } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const profile = await getOrganizationInvoiceProfile(organizationId)
+  const domain = profile.invoiceEmail?.split('@')[1]?.toLowerCase() ?? null
+  const status = await getPortalEmailProviderStatus()
+  return {
+    email: profile.invoiceEmail,
+    domain,
+    configured: status.configured,
+    verified: Boolean(domain && status.verifiedDomains.includes(domain))
+  }
+})

package/server/api/invoices/admin/invoices/[id]/attachments/[attachmentId].delete.ts

@@ -0,0 +1,23 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { deleteInvoiceAttachment } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdAttachmentsByAttachmentIdDelete',
+    summary: 'Delete an invoice attachment',
+    description:
+      'Delete an invoice attachment. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return deleteInvoiceAttachment(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    getRouterParam(event, 'attachmentId')!
+  )
+})

package/server/api/invoices/admin/invoices/[id]/attachments/[attachmentId].get.ts

@@ -0,0 +1,30 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getInvoiceAttachment } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdAttachmentsByAttachmentIdGet',
+    summary: 'Download an invoice attachment',
+    description:
+      'Download an invoice attachment. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const attachment = await getInvoiceAttachment(
+    organizationId,
+    getRouterParam(event, 'id')!,
+    getRouterParam(event, 'attachmentId')!
+  )
+  setResponseHeader(event, 'content-type', attachment.contentType)
+  setResponseHeader(event, 'content-length', attachment.size)
+  setResponseHeader(
+    event,
+    'content-disposition',
+    `attachment; filename*=UTF-8''${encodeURIComponent(attachment.fileName)}`
+  )
+  return Buffer.from(attachment.contentBase64, 'base64')
+})

package/server/api/invoices/admin/invoices/[id]/attachments.post.ts

@@ -0,0 +1,27 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { addInvoiceAttachment } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdAttachmentsPost',
+    summary: 'Upload an invoice attachment',
+    description:
+      'Upload an invoice attachment. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const parts = await readMultipartFormData(event)
+  const file = parts?.find((part) => part.name === 'file' && part.filename)
+  if (!file?.filename) {
+    throw createError({ statusCode: 400, message: 'Select a file to attach' })
+  }
+  return addInvoiceAttachment(organizationId, session.user.id, getRouterParam(event, 'id')!, {
+    fileName: file.filename,
+    contentType: file.type || 'application/octet-stream',
+    data: file.data
+  })
+})

package/server/api/invoices/admin/invoices/[id]/email-preview.get.ts

@@ -0,0 +1,22 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getInvoiceEmailPreview } from '@nuxt-customer-portal/invoices/server/utils/invoice-email'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdEmailPreviewGet',
+    summary: 'Preview an invoice email',
+    description: 'Preview an invoice email. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const locale = getQuery(event).locale
+  return getInvoiceEmailPreview(
+    organizationId,
+    getRouterParam(event, 'id')!,
+    typeof locale === 'string' ? locale : undefined
+  )
+})

package/server/api/invoices/admin/invoices/[id]/email-status.post.ts

@@ -0,0 +1,18 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { refreshInvoiceEmailStatuses } from '@nuxt-customer-portal/invoices/server/utils/invoice-email-status'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdEmailStatusPost',
+    summary: 'Refresh invoice email delivery status',
+    description:
+      'Refresh invoice email delivery status. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return refreshInvoiceEmailStatuses(organizationId, getRouterParam(event, 'id')!, getQuery(event).refresh === '1')
+})

package/server/api/invoices/admin/invoices/[id]/email.post.ts

@@ -0,0 +1,24 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { deliverInvoiceEmail } from '@nuxt-customer-portal/invoices/server/utils/invoice-email'
+import { invoiceEmailDeliverySchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdEmailPost',
+    summary: 'Send an invoice email',
+    description: 'Send an invoice email. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return deliverInvoiceEmail(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    invoiceEmailDeliverySchema.parse(await readBody(event)),
+    false
+  )
+})

package/server/api/invoices/admin/invoices/[id]/index.get.ts

@@ -0,0 +1,17 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getInvoice } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdGet',
+    summary: 'Get an invoice',
+    description: 'Get an invoice. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return getInvoice(organizationId, getRouterParam(event, 'id')!)
+})

package/server/api/invoices/admin/invoices/[id]/issue.post.ts

@@ -0,0 +1,24 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { deliverInvoiceEmail } from '@nuxt-customer-portal/invoices/server/utils/invoice-email'
+import { invoiceEmailDeliverySchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdIssuePost',
+    summary: 'Issue an invoice',
+    description: 'Issue an invoice. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return deliverInvoiceEmail(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    invoiceEmailDeliverySchema.parse(await readBody(event)),
+    true
+  )
+})

package/server/api/invoices/admin/invoices/[id]/payments.post.ts

@@ -0,0 +1,24 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { registerInvoicePayment } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { invoicePaymentSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdPaymentsPost',
+    summary: 'Register an invoice payment',
+    description:
+      'Register an invoice payment. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return registerInvoicePayment(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    invoicePaymentSchema.parse(await readBody(event))
+  )
+})

package/server/api/invoices/admin/invoices/[id]/pdf.get.ts

@@ -0,0 +1,29 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { generateInvoicePdf } from '@nuxt-customer-portal/invoices/server/utils/invoice-pdf'
+import { getInvoice } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdPdfGet',
+    summary: 'Download an invoice PDF',
+    description: 'Download an invoice PDF. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const invoice = await getInvoice(organizationId, getRouterParam(event, 'id')!)
+  const locale = getQuery(event).locale
+  const disposition = getQuery(event).download === '1' ? 'attachment' : 'inline'
+  const pdf = await generateInvoicePdf(invoice, typeof locale === 'string' ? locale : undefined)
+  const fileName = `invoice-${invoice.number.replace(/[^a-z0-9._-]+/gi, '-')}.pdf`
+
+  setResponseHeaders(event, {
+    'Content-Type': 'application/pdf',
+    'Content-Disposition': `${disposition}; filename="${fileName}"`,
+    'Cache-Control': 'private, no-store'
+  })
+  return Buffer.from(pdf)
+})

package/server/api/invoices/admin/invoices/[id]/reminder-preview.get.ts

@@ -0,0 +1,24 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getInvoiceEmailPreview } from '@nuxt-customer-portal/invoices/server/utils/invoice-email'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdReminderPreviewGet',
+    summary: 'Preview an invoice reminder',
+    description:
+      'Preview an invoice reminder. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const locale = getQuery(event).locale
+  return getInvoiceEmailPreview(
+    organizationId,
+    getRouterParam(event, 'id')!,
+    typeof locale === 'string' ? locale : undefined,
+    'REMINDER'
+  )
+})

package/server/api/invoices/admin/invoices/[id]/reminder.post.ts

@@ -0,0 +1,25 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { deliverInvoiceEmail } from '@nuxt-customer-portal/invoices/server/utils/invoice-email'
+import { invoiceEmailDeliverySchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdReminderPost',
+    summary: 'Send an invoice reminder',
+    description: 'Send an invoice reminder. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return deliverInvoiceEmail(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    invoiceEmailDeliverySchema.parse(await readBody(event)),
+    false,
+    'REMINDER'
+  )
+})

package/server/api/invoices/admin/invoices/[id].patch.ts

@@ -0,0 +1,24 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { changeInvoiceStatus, updateInvoice } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { invoiceIssueSchema, invoiceUpdateSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesByIdPatch',
+    summary: 'Update an invoice',
+    description: 'Update an invoice. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  const body = await readBody(event)
+  const id = getRouterParam(event, 'id')!
+  if ('action' in body) {
+    const action = invoiceIssueSchema.parse(body).action
+    return changeInvoiceStatus(organizationId, session.user.id, id, action)
+  }
+  return updateInvoice(organizationId, session.user.id, id, invoiceUpdateSchema.parse(body))
+})

package/server/api/invoices/admin/invoices/index.get.ts

@@ -0,0 +1,20 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { invoiceListQuerySchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+import { listInvoicesPage } from '@nuxt-customer-portal/invoices/server/utils/invoice-listing'
+import { requireInvoicesEnabled } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesGet',
+    summary: 'List invoices',
+    description: 'List invoices. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  await requireInvoicesEnabled(organizationId)
+  return listInvoicesPage(organizationId, invoiceListQuerySchema.parse(getQuery(event)))
+})

package/server/api/invoices/admin/invoices/index.post.ts

@@ -0,0 +1,19 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { createInvoice, requireInvoicesEnabled } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { invoiceCreateSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesPost',
+    summary: 'Create an invoice',
+    description: 'Create an invoice. Scoped to the active organization and the applicable Invoices permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  await requireInvoicesEnabled(organizationId)
+  return createInvoice(organizationId, session.user.id, invoiceCreateSchema.parse(await readBody(event)))
+})

package/server/api/invoices/admin/invoices/next-number.get.ts

@@ -0,0 +1,16 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { getNextInvoiceNumber } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Invoices'],
+    operationId: 'invoicesAdminInvoicesNextNumberGet',
+    summary: 'Suggest the next invoice number'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return { number: await getNextInvoiceNumber(organizationId) }
+})

package/server/api/invoices/admin/settings.put.ts

@@ -0,0 +1,9 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { invoicesFeature } from '@nuxt-customer-portal/invoices/shared/feature'
+import { updateInvoiceSettings } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+import { invoiceSettingsSchema } from '@nuxt-customer-portal/invoices/server/utils/invoice-validation'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, invoicesFeature.policy, 'manage')
+  return updateInvoiceSettings(organizationId, invoiceSettingsSchema.parse(await readBody(event)))
+})

package/server/api/invoices/capabilities.get.ts

@@ -0,0 +1,25 @@
+import { eq } from 'drizzle-orm'
+import { db, requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { invoiceSettings } from '@nuxt-customer-portal/invoices/server/db/schema/invoices'
+import { listClientInvoiceSuppliers } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId, organizationType, role } = await requireActiveOrganizationRole(event)
+  const isAdmin = role === 'owner' || role === 'admin' || session.user.role === 'admin'
+  const settings = await db
+    .select({ enabled: invoiceSettings.enabled })
+    .from(invoiceSettings)
+    .where(eq(invoiceSettings.organizationId, organizationId))
+    .limit(1)
+  const suppliers =
+    organizationType === 'CLIENT' ? await listClientInvoiceSuppliers(organizationId, session.user.id, isAdmin) : []
+  const invoicesEnabled = settings[0]?.enabled ?? false
+  const canConfigureInvoices = organizationType === 'PROVIDER' && isAdmin
+  return {
+    canConfigureInvoices,
+    canManageInvoices: canConfigureInvoices && invoicesEnabled,
+    canViewReceivedInvoices: suppliers.length > 0,
+    canManageViewers: isAdmin && suppliers.length > 0,
+    invoicesEnabled
+  }
+})

package/server/api/invoices/client/[accessId]/viewers.get.ts

@@ -0,0 +1,10 @@
+import { requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { listClientInvoiceViewers } from '@nuxt-customer-portal/invoices/server/utils/invoice-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, role } = await requireActiveOrganizationRole(event)
+  if (!['owner', 'admin'].includes(role)) {
+    throw createError({ statusCode: 403, message: 'Client administrator access required' })
+  }
+  return listClientInvoiceViewers(getRouterParam(event, 'accessId')!, organizationId)
+})