tango-app-api-payment-subscription 3.5.28 → 3.5.29

package/docs/superpowers/specs/2026-07-09-quarterly-invoices-449-design.md

@@ -0,0 +1,108 @@
+# Quarterly Invoice Creation Script — clientId 449 (Apr/May/Jun 2025)
+
+**Date:** 2026-07-09
+**File to create:** `scripts/create-quarterly-invoices-449.js`
+
+## Goal
+
+Create **3 invoices** for clientId `449`, one per billing group, each covering the
+**Apr–Jun 2025 quarter (FY 25-26)** as three per-month line-item blocks. This is a
+one-off backfill of quarterly billing.
+
+Target groups (all confirmed to exist on clientId 449, all INR, all GST prefix `33`):
+
+| Group name                    | _id                        | GST             | stores |
+|-------------------------------|----------------------------|-----------------|--------|
+| LILLE BY CHALLANI             | `6a4f37925d8071b6ae34d1a2` | 33AALCC7452J1ZF | 6      |
+| FEDHA JEWELS PRIVATE LIMITED  | `6a4f37298b8646bec2a1f630` | 33AAFCF8793V1ZL | 7      |
+| CHALLANI JEWELLERY MART       | `6a4f32644cde0c2869be2e52` | 33AAIFC5600Q1ZC | 2      |
+
+Client 449: `priceType: standard`, `status: active`.
+
+## Invoice series & shape
+
+- **Series: `INV-`** (normal series), NOT TINV-. Number format `INV-25-26-NNNNN`,
+  continuing the highest `invoiceIndex` for `^INV-25-26-` (matches controller logic).
+- `advanceInvoice: false`, `advancePeriod` omitted.
+- **One invoice document per group** whose `products` array contains three month-blocks
+  (Apr 2025, May 2025, Jun 2025), each line tagged `month: 'MMM YYYY'`.
+- `advanceMonths: 3` recorded for reference (bundled quarter), but the invoice is a normal
+  INV- invoice — the quarterly nature lives in the line items, not the advance flag.
+- No `storeDetails` block (that is TINV-only in the controller).
+
+## Pricing — actual per-month snapshots, prorated
+
+Client 449 is `priceType: standard`, so we replicate the **standard-price** path from
+`createInvoice` → `standardPrice()`. For each group, for each of Apr/May/Jun 2025:
+
+1. **Snapshot selection:** pick the latest daily-pricing doc with
+   `dateISO <= end-of-month`, sorted `dateISO: -1`, `limit 1` — the actual snapshot for
+   that month (differs from the controller, which always takes the newest snapshot).
+2. **Days basis:** `daysInMonth` of that month (Apr=30, May=31, Jun=30).
+3. **Basepricing doc:** resolved via the same rule as `resolveBasePricingScope` —
+   group-wise doc when `client.billingGroupWisePricing` is on AND a group doc exists,
+   else the brand-level doc (`groupId` unset). Read `negotiatePrice` from `standard[]`.
+4. **overallStore products:** filter to `group.stores`, keep `workingdays > 0`, group by
+   (product, workingdays), sum store counts. Prorate:
+   `workingdays >= daysInMonth` → `price * count` (full month);
+   else `(price / daysInMonth) * workingdays * count`. `proRata: 'flat'` on the group
+   forces full-month working days.
+5. **billingType** perZone / perCamera for `tangoZone` / `tangoTraffic`: multiply by zone
+   / camera counts exactly as the controller does.
+6. **billingMethod `eachStore`** products: emit one line per store (per-store proration),
+   as in the controller.
+7. Tag every produced line with `month: 'MMM YYYY'` for that month.
+
+The three months' line arrays are concatenated into the single `products` array.
+
+**Empty-month handling:** if a month has no snapshot `<=` its end, or the group has no
+running stores that month, that month contributes zero lines. The script logs this
+**loudly** (WARN per group/month) so a short invoice is never produced silently.
+
+## Invoice document fields (mirrors controller `data`)
+
+- `invoice: INV-25-26-NNNNN`, `invoiceIndex`
+- `groupId`, `groupName`, `clientId: '449'`
+- `companyName` = uppercased `registeredCompanyName`; `companyAddress` built from group
+  address fields (`addressLineOne+addressLineTwo+city,state,country -pinCode`), matching
+  the controller
+- `GSTNumber` = group.gst, `PlaceOfSupply` = group.placeOfSupply
+- `products` = concatenated month-blocks
+- `amount` = Σ line amounts (roundAmount, inr); `tax` = CGST 9% + SGST 9% (GST prefix `33`);
+  `totalAmount` = roundAmount(amount + tax)
+- `currency: 'inr'`, `stores` = running-store count from the latest snapshot within Jun 2025
+- `billingDate` = today (creation date, per controller convention), `monthOfbilling: '04'`
+- `dueDate` = billingDate + (group.paymentTerm || 30) days
+- `status: 'pendingCsm'`, `paymentStatus: 'unpaid'`, `paymentMethod: 'Online'`
+- `advanceInvoice: false`, `advanceMonths: 3`
+
+## Number allocation across the 3 invoices
+
+Compute the starting index once (max `invoiceIndex` for `^INV-25-26-`), then increment
+locally per group so the three invoices get consecutive numbers within one run. In
+dry-run, the numbers shown are provisional (no write, so the counter is not advanced).
+
+## Safety & idempotency
+
+- **Dry-run by default.** Prints, per group: invoice number, per-month per-product
+  breakdown (product, storeCount, price, working-days/period, amount), subtotal, CGST,
+  SGST, total, and any empty-month WARNs. Writes nothing.
+- **`--apply`** performs the inserts via `invoiceModel.create`.
+- **Duplicate guard:** before creating a group's invoice, check for an existing
+  `INV-`-series invoice for that `groupId` already carrying a `products.month = 'Apr 2025'`
+  line. If found, SKIP that group with a warning (prevents double-billing on re-run).
+- **No side effects:** no PDF, no email, no OpenSearch activity log, no PO mapping.
+- **Connection:** reuse `getConnection()` from `config/database/database.js` (or
+  `MONGO_URI` override), and the `tango-api-schema` models — same as existing scripts.
+
+## Flags
+
+- `node scripts/create-quarterly-invoices-449.js` → DRY RUN
+- `node scripts/create-quarterly-invoices-449.js --apply` → write
+- `--clientId=449` (default 449), `--year=2025` (Q1 = Apr/May/Jun of this calendar year;
+  FY label derived as `YY-(YY+1)`)
+
+## Out of scope
+
+TINV/advance series, multi-client support, PDF/email generation, non-standard (step)
+pricing beyond what `standardPrice` covers for this client.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "tango-app-api-payment-subscription",
-    "version": "3.5.28",
+    "version": "3.5.29",
     "description": "paymentSubscription",
     "main": "index.js",
     "type": "module",

package/src/controllers/invoice.controller.js

@@ -2078,38 +2078,54 @@ export async function clientInvoiceList( req, res ) {
     let filterEndDate = '';
 
     if ( !hasMonthYear ) {
+      // Start = start-of-month (00:00:00); End = end-of-month (23:59:59.999)
+      // via .toDate() so invoices on the last day (with any time) are included.
       if ( req.body?.filter && req.body.filter == 'current' ) {
-        filterStartDate = new Date( dayjs().startOf( 'month' ).format( 'YYYY-MM-DD' ) );
-        filterEndDate = new Date( dayjs().endOf( 'month' ).format( 'YYYY-MM-DD' ) );
+        filterStartDate = dayjs().startOf( 'month' ).toDate();
+        filterEndDate = dayjs().endOf( 'month' ).toDate();
       }
       if ( req.body?.filter && req.body.filter == 'prev' ) {
-        filterStartDate = new Date( dayjs().subtract( 1, 'month' ).startOf( 'month' ).format( 'YYYY-MM-DD' ) );
-        filterEndDate = new Date( dayjs().subtract( 1, 'month' ).endOf( 'month' ).format( 'YYYY-MM-DD' ) );
+        filterStartDate = dayjs().subtract( 1, 'month' ).startOf( 'month' ).toDate();
+        filterEndDate = dayjs().subtract( 1, 'month' ).endOf( 'month' ).toDate();
       }
       // Rolling windows. 'last3' = the prototype's "Last 3 Months" (was the
       // legacy 'last' id, which silently meant 12 months and made every other
       // filter look broken). 'last' is kept as an alias of 'last3' so older
       // clients don't break mid-deploy.
       if ( req.body?.filter && ( req.body.filter == 'last3' || req.body.filter == 'last' ) ) {
-        filterStartDate = new Date( dayjs().subtract( 3, 'month' ).startOf( 'month' ).format( 'YYYY-MM-DD' ) );
-        filterEndDate = new Date( dayjs().endOf( 'month' ).format( 'YYYY-MM-DD' ) );
+        filterStartDate = dayjs().subtract( 3, 'month' ).startOf( 'month' ).toDate();
+        filterEndDate = dayjs().endOf( 'month' ).toDate();
       }
       if ( req.body?.filter && req.body.filter == 'last6' ) {
-        filterStartDate = new Date( dayjs().subtract( 6, 'month' ).startOf( 'month' ).format( 'YYYY-MM-DD' ) );
-        filterEndDate = new Date( dayjs().endOf( 'month' ).format( 'YYYY-MM-DD' ) );
+        filterStartDate = dayjs().subtract( 6, 'month' ).startOf( 'month' ).toDate();
+        filterEndDate = dayjs().endOf( 'month' ).toDate();
       }
       if ( req.body?.filter && req.body.filter == 'last12' ) {
-        filterStartDate = new Date( dayjs().subtract( 12, 'month' ).startOf( 'month' ).format( 'YYYY-MM-DD' ) );
-        filterEndDate = new Date( dayjs().endOf( 'month' ).format( 'YYYY-MM-DD' ) );
+        filterStartDate = dayjs().subtract( 12, 'month' ).startOf( 'month' ).toDate();
+        filterEndDate = dayjs().endOf( 'month' ).toDate();
       }
 
       if ( req.body?.filter ) {
+        // billingDate may be stored as a Date OR a string on legacy rows. A raw
+        // { billingDate: { $gte: <Date> } } range compares across BSON types for
+        // string rows and silently fails to filter — so the Duration filter
+        // appeared to "show all". Coerce to a Date in an $expr, mirroring the
+        // Month/Year filter below.
+        const billingDateExpr = {
+          $cond: [
+            { $eq: [ { $type: '$billingDate' }, 'date' ] },
+            '$billingDate',
+            { $toDate: '$billingDate' },
+          ],
+        };
         query.push( {
           $match: {
-            $and: [
-              { billingDate: { $gte: filterStartDate } },
-              { billingDate: { $lte: filterEndDate } },
-            ],
+            $expr: {
+              $and: [
+                { $gte: [ billingDateExpr, filterStartDate ] },
+                { $lte: [ billingDateExpr, filterEndDate ] },
+              ],
+            },
           },
         } );
       }

package/src/routes/invoice.routes.js

@@ -21,47 +21,47 @@ function superadminBypass( accessConfig ) {
 }
 
 
-invoiceRouter.post( '/createInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), createInvoice );
-invoiceRouter.post( '/regerateInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), createInvoice );
-invoiceRouter.post( '/invoiceDownload/bulk', isAllowedSessionHandler, accessVerification( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), invoiceDownloadBulk );
+invoiceRouter.post( '/createInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), createInvoice );
+invoiceRouter.post( '/regerateInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), createInvoice );
+invoiceRouter.post( '/invoiceDownload/bulk', isAllowedSessionHandler, accessVerification( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), invoiceDownloadBulk );
 invoiceRouter.post( '/invoiceDownload/:invoiceId', isAllowedSessionHandler, invoiceDownload );
-invoiceRouter.post( '/clientInvoiceList', isAllowedSessionHandler, accessVerification( { userType: [ 'tango', 'client' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), clientInvoiceList );
-invoiceRouter.post( '/creditTransactionlist', isAllowedSessionHandler, accessVerification( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), creditTransactionlist );
+invoiceRouter.post( '/clientInvoiceList', isAllowedSessionHandler, accessVerification( { userType: [ 'tango', 'client' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), clientInvoiceList );
+invoiceRouter.post( '/creditTransactionlist', isAllowedSessionHandler, accessVerification( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), creditTransactionlist );
 invoiceRouter.post( '/pendingInvoices', isAllowedSessionHandler, pendingInvoices );
-invoiceRouter.post( '/applyDiscount', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), applyDiscount );
+invoiceRouter.post( '/applyDiscount', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), applyDiscount );
 invoiceRouter.post( '/migrateInvoice', migrateInvoice );
-invoiceRouter.post( '/PaymentStatusChange', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), PaymentStatusChange );
-invoiceRouter.post( '/recordPayment', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), recordPayment );
+invoiceRouter.post( '/PaymentStatusChange', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), PaymentStatusChange );
+invoiceRouter.post( '/recordPayment', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), recordPayment );
 invoiceRouter.post( '/checkPaymentStatus', checkPaymentStatus );
 invoiceRouter.get( '/getInvoice/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango', 'client' ], access: [ ] } ), getInvoice );
-invoiceRouter.get( '/invoiceAnnexure/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango', 'client' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), invoiceAnnexure );
-invoiceRouter.get( '/invoiceBankDetails/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango', 'client' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), invoiceBankDetails );
-invoiceRouter.put( '/updateInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), updateInvoice );
+invoiceRouter.get( '/invoiceAnnexure/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango', 'client' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), invoiceAnnexure );
+invoiceRouter.get( '/invoiceBankDetails/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango', 'client' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), invoiceBankDetails );
+invoiceRouter.put( '/updateInvoice', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), updateInvoice );
 invoiceRouter.get( '/getClientBasePricing/:clientId', isAllowedSessionHandler, getClientBasePricing );
-invoiceRouter.delete( '/deleteInvoice/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), deleteInvoice );
+invoiceRouter.delete( '/deleteInvoice/:invoiceId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), deleteInvoice );
 
 invoiceRouter.post( '/approveInvoiceCsm', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'csmApproval', permissions: [ 'isEdit' ] } ] } ), approveInvoiceCsm );
 invoiceRouter.post( '/approveInvoiceFinance', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'financeApproval', permissions: [ 'isEdit' ] } ] } ), approveInvoiceFinance );
-invoiceRouter.post( '/approveInvoiceApproval', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), approveInvoiceApproval );
+invoiceRouter.post( '/approveInvoiceApproval', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), approveInvoiceApproval );
 
 invoiceRouter.get( '/getInvoiceHeads', isAllowedSessionHandler, getInvoiceHeads );
 invoiceRouter.post( '/updateInvoiceHeads', isAllowedSessionHandler, validate( updateInvoiceHeadsSchema ), updateInvoiceHeads );
 
 // Bank-statement reconciliation (billing "Transactions" tab). Upload mutates
 // the banktransaction collection so it needs edit rights; list is read-only.
-invoiceRouter.post( '/bankStatement/upload', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), uploadBankStatement );
-invoiceRouter.post( '/bankStatement/list', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), bankTransactionList );
-invoiceRouter.get( '/bankStatement/resolveOptions', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), resolveOptions );
-invoiceRouter.post( '/bankStatement/resolve', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), resolveBankTransaction );
+invoiceRouter.post( '/bankStatement/upload', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), uploadBankStatement );
+invoiceRouter.post( '/bankStatement/list', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), bankTransactionList );
+invoiceRouter.get( '/bankStatement/resolveOptions', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), resolveOptions );
+invoiceRouter.post( '/bankStatement/resolve', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), resolveBankTransaction );
 
 // Estimates (quotations) — per-brand quotation documents with their own
 // lifecycle. List/get are read; create/status/delete need edit rights.
-invoiceRouter.post( '/estimate/list', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), estimateList );
-invoiceRouter.post( '/estimate/create', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), createEstimate );
+invoiceRouter.post( '/estimate/list', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), estimateList );
+invoiceRouter.post( '/estimate/create', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), createEstimate );
 invoiceRouter.post( '/estimate/approveCsm', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'csmApproval', permissions: [ 'isEdit' ] } ] } ), approveEstimateCsm );
 invoiceRouter.post( '/estimate/approveFinance', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'financeApproval', permissions: [ 'isEdit' ] } ] } ), approveEstimateFinance );
-invoiceRouter.post( '/estimate/approveApproval', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), approveEstimateApproval );
-invoiceRouter.post( '/estimate/update', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), updateEstimate );
-invoiceRouter.post( '/estimate/download/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), downloadEstimate );
-invoiceRouter.get( '/estimate/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [] } ] } ), getEstimate );
-invoiceRouter.delete( '/estimate/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'TangoAdmin', name: 'invoiceApproval', permissions: [ 'isEdit' ] } ] } ), deleteEstimate );
+invoiceRouter.post( '/estimate/approveApproval', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), approveEstimateApproval );
+invoiceRouter.post( '/estimate/update', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), updateEstimate );
+invoiceRouter.post( '/estimate/download/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), downloadEstimate );
+invoiceRouter.get( '/estimate/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [] } ] } ), getEstimate );
+invoiceRouter.delete( '/estimate/:estimateId', isAllowedSessionHandler, superadminBypass( { userType: [ 'tango' ], access: [ { featureName: 'Global', name: 'Billing', permissions: [ 'isEdit' ] } ] } ), deleteEstimate );