+ |
+
+ {inv.invoiceNumber ?? copy.invoice}
+
+ |
{new Date(inv.createdAt).toLocaleDateString()} |
{inv.paymentProvider} |
diff --git a/apps/dashboard/src/lib/api.test.ts b/apps/dashboard/src/lib/api.test.ts
index 8193ffc..d9b92d4 100644
--- a/apps/dashboard/src/lib/api.test.ts
+++ b/apps/dashboard/src/lib/api.test.ts
@@ -164,7 +164,29 @@ describe('dashboard apiFetch', () => {
process.env.NEXT_PUBLIC_API_URL = 'http://localhost:4000/api/v1'
api = await import('./api')
- expect(api.resolveApiOrigin()).toBe('http://localhost:4000')
+ expect(api.resolveApiOrigin()).toBe('http://localhost')
+ })
+
+ it('uses the dashboard proxy for local browser requests to a different local API port', async () => {
+ installBrowser()
+ ;(globalThis.window as any).location.origin = 'http://localhost:3000'
+ process.env.NEXT_PUBLIC_API_URL = 'http://localhost:4000/api/v1'
+ const fetchMock = vi.fn(async () => ({
+ ok: true,
+ json: async () => ({ data: { ok: true } }),
+ }))
+ Object.defineProperty(globalThis, 'fetch', { configurable: true, value: fetchMock })
+
+ const { apiFetch, resolveRealtimeSocketTarget } = await import('./api')
+ await apiFetch('/auth/employee/me')
+
+ expect(fetchMock).toHaveBeenCalledWith('/dashboard/api/v1/auth/employee/me', expect.objectContaining({
+ credentials: 'include',
+ }))
+ expect(resolveRealtimeSocketTarget()).toEqual({
+ origin: 'http://localhost:3000',
+ path: '/dashboard/socket.io',
+ })
})
it('routes proxied realtime connections through the dashboard socket path', async () => {
diff --git a/apps/dashboard/src/lib/api.ts b/apps/dashboard/src/lib/api.ts
index 892aee2..453654a 100644
--- a/apps/dashboard/src/lib/api.ts
+++ b/apps/dashboard/src/lib/api.ts
@@ -15,11 +15,19 @@ function shouldUseDashboardProxy(configuredApiBase?: string): boolean {
if (!configuredApiBase) return true
if (configuredApiBase.startsWith('/')) return false
- const currentHostname = window.location?.hostname
- if (!currentHostname || isLocalBrowserHost(currentHostname)) return false
-
try {
- return new URL(configuredApiBase).hostname !== currentHostname
+ const apiUrl = new URL(configuredApiBase)
+ const currentOrigin = window.location?.origin
+ const currentHostname = window.location?.hostname
+ if (!currentOrigin || !currentHostname) return false
+
+ if (isLocalBrowserHost(currentHostname) && isLocalBrowserHost(apiUrl.hostname)) {
+ return apiUrl.origin !== currentOrigin
+ }
+
+ if (isLocalBrowserHost(currentHostname)) return false
+
+ return apiUrl.origin !== currentOrigin
} catch {
return false
}
@@ -87,9 +95,21 @@ export async function apiFetch(path: string, options?: RequestInit): Promise<
}
if (!res.ok) {
- const err = new Error(json?.message ?? json?.error ?? `Request failed with status ${res.status}`) as any
+ const issues = Array.isArray(json?.issues)
+ ? json.issues
+ .map((issue: any) => {
+ const path = Array.isArray(issue?.path) && issue.path.length ? `${issue.path.join('.')}: ` : ''
+ return issue?.message ? `${path}${issue.message}` : null
+ })
+ .filter(Boolean)
+ : []
+ const message = issues.length
+ ? `${json?.message ?? 'Invalid request'}: ${issues.join('; ')}`
+ : (json?.message ?? json?.error ?? `Request failed with status ${res.status}`)
+ const err = new Error(message) as any
err.code = json?.error
err.statusCode = res.status
+ err.issues = json?.issues
throw err
}
diff --git a/apps/homepage/src/app/[locale]/[mode]/page.tsx b/apps/homepage/src/app/[locale]/[mode]/page.tsx
index a266496..04d7023 100644
--- a/apps/homepage/src/app/[locale]/[mode]/page.tsx
+++ b/apps/homepage/src/app/[locale]/[mode]/page.tsx
@@ -49,7 +49,7 @@ export default async function LocaleHomePage({ params }: LocalePageProps) {
const locale: Locale = localeValue;
const mode: ThemePreference = modeValue;
const messages = getMessages(locale);
- const content = buildHomepageContent(messages.homepage, messages.shell, locale);
+ const content = buildHomepageContent(messages.homepage, messages.shell, locale, mode);
const integrationConfig = getPublicIntegrationConfig();
const homePath = localizedModePath('home', locale, mode);
diff --git a/apps/homepage/src/content/homepage-model.ts b/apps/homepage/src/content/homepage-model.ts
index 3b1e56a..1f1769d 100644
--- a/apps/homepage/src/content/homepage-model.ts
+++ b/apps/homepage/src/content/homepage-model.ts
@@ -3,6 +3,7 @@ import type { PreviewRow } from '@/components/marketing/ProductPreview';
import type { HomepageMessages, ShellMessages } from '@/lib/localization/messages';
import type { Locale } from '@/lib/localization/config';
import { accountCreateUrl } from '@/lib/account-urls';
+import type { ThemePreference } from '@/lib/theme/config';
import {
fleetBandIds,
pricingPlanIds,
@@ -267,6 +268,7 @@ export function buildHomepageContent(
homepage: HomepageMessages,
shell: ShellMessages,
locale: Locale = 'en',
+ mode: ThemePreference = 'dark',
): HomepageContent {
const pendingReason = shell.states.pendingBody;
@@ -275,7 +277,7 @@ export function buildHomepageContent(
eyebrow: homepage.hero.eyebrow,
title: homepage.hero.title,
body: homepage.hero.body,
- primary: { label: homepage.hero.primary, href: accountCreateUrl(locale, 'dark') },
+ primary: { label: homepage.hero.primary, href: accountCreateUrl(locale, mode) },
secondary: { label: homepage.hero.secondary, disabledReason: pendingReason },
preview: {
title: homepage.preview.title,
@@ -438,7 +440,7 @@ export function buildHomepageContent(
eyebrow: homepage.final.eyebrow,
title: homepage.final.title,
body: homepage.final.body,
- primary: { label: homepage.final.primary, href: accountCreateUrl(locale, 'dark') },
+ primary: { label: homepage.final.primary, href: accountCreateUrl(locale, mode) },
secondary: { label: homepage.final.secondary, disabledReason: pendingReason },
image: localizedImage(
'rentaldrivego',
diff --git a/apps/homepage/tests/unit/homepage-content.test.ts b/apps/homepage/tests/unit/homepage-content.test.ts
index 6867df5..d62f5aa 100644
--- a/apps/homepage/tests/unit/homepage-content.test.ts
+++ b/apps/homepage/tests/unit/homepage-content.test.ts
@@ -37,6 +37,13 @@ describe('homepage content model', () => {
expect(content.final.secondary.disabledReason).toBe(enShell.states.pendingBody);
});
+ it('keeps create account links in the current homepage theme', () => {
+ const content = buildHomepageContent(enHomepage, enShell, 'en', 'light');
+
+ expect(content.hero.primary.href).toBe('/dashboard/sign-up?lang=en&theme=light');
+ expect(content.final.primary.href).toBe('/dashboard/sign-up?lang=en&theme=light');
+ });
+
it('includes explicit theme handoff in account creation URLs', () => {
expect(accountCreateUrl('en', 'light')).toBe('/dashboard/sign-up?lang=en&theme=light');
expect(accountCreateUrl('en', 'dark')).toBe('/dashboard/sign-up?lang=en&theme=dark');
diff --git a/config/nextSecurityHeaders.js b/config/nextSecurityHeaders.js
index 5c194a2..ac04822 100644
--- a/config/nextSecurityHeaders.js
+++ b/config/nextSecurityHeaders.js
@@ -58,7 +58,7 @@ function collectBrowserApiSources() {
return sources
}
-function buildSecurityHeaders({ assetSources = [], connectSources = collectBrowserApiSources() } = {}) {
+function buildSecurityHeaders({ assetSources = [], connectSources = collectBrowserApiSources(), frameSources = [] } = {}) {
const assetOrigins = collectOrigins(assetSources)
const connectOrigins = collectOrigins(connectSources)
const websocketOrigins = [
@@ -76,6 +76,7 @@ function buildSecurityHeaders({ assetSources = [], connectSources = collectBrows
const imgSrc = [...new Set(["'self'", 'data:', 'blob:', 'https:', ...assetOrigins, ...connectOrigins])]
const fontSrc = ["'self'", 'data:', ...assetOrigins]
const connectSrc = [...new Set(["'self'", 'https:', 'wss:', ...assetOrigins, ...connectOrigins, ...websocketOrigins])]
+ const frameSrc = [...new Set(["'self'", ...frameSources])]
if (process.env.NODE_ENV !== 'production') {
connectSrc.push('ws:')
}
@@ -95,6 +96,7 @@ function buildSecurityHeaders({ assetSources = [], connectSources = collectBrows
`img-src ${imgSrc.join(' ')}`,
`font-src ${fontSrc.join(' ')}`,
`connect-src ${connectSrc.join(' ')}`,
+ `frame-src ${frameSrc.join(' ')}`,
"frame-ancestors 'none'",
"base-uri 'self'",
"form-action 'self'",
diff --git a/docs/DOCKER.md b/docs/DOCKER.md
index 951f255..c7c6337 100644
--- a/docs/DOCKER.md
+++ b/docs/DOCKER.md
@@ -159,7 +159,9 @@ Open `.env.docker.production` and fill in every value. The minimum required secr
| `POSTGRES_PASSWORD` | Strong random password |
| `JWT_SECRET` | Long random string (e.g. `openssl rand -hex 64`) |
| `ACME_EMAIL` | Your email for Let's Encrypt notifications |
-| `RESEND_API_KEY` | Resend API key (or configure SMTP vars instead) |
+| `EMAIL_PROVIDER` | Set to `gmail` to send through Gmail SMTP |
+| `MAIL_USERNAME` | Gmail address used to send transactional mail |
+| `MAIL_PASSWORD` | Gmail app password, not the normal Google account password |
| `PGMANAGE_DOMAIN` | Hostname for pgManage, e.g. `pgmanage.rentaldrivego.ma` |
| `STRIPE_API_KEY` | Live Stripe secret key or restricted key for production billing (`sk_live_` or `rk_live_`) |
| `STRIPE_WEBHOOK_SECRET` | Stripe webhook signing secret for `/api/v1/subscriptions/webhooks/stripe` (`whsec_`) |
diff --git a/docs/manual-subscription-payment-plan.md b/docs/manual-subscription-payment-plan.md
new file mode 100644
index 0000000..341a465
--- /dev/null
+++ b/docs/manual-subscription-payment-plan.md
@@ -0,0 +1,823 @@
+# Manual Subscription Payment Plan
+
+**Methods:** Bank transfer and check
+**Existing online method:** Stripe remains available
+**Scope:** Platform subscription payments, not rental-reservation/customer payments
+**Status:** Implementation proposal based on the supplied code archive
+**Revision:** 1.3 — adds company-driven Arabic, English, and French communication policy
+
+## 1. Target outcome
+
+Add a manual subscription-payment path alongside Stripe:
+
+1. A company owner selects a plan and chooses **Bank transfer** or **Check**.
+2. The server calculates the price and creates one pending subscription invoice.
+3. The dashboard shows the amount, invoice number, due date, and configured payment instructions.
+4. The owner pays outside the application, enters the transaction reference/check number, and uploads supporting evidence such as a transfer receipt or check copy.
+5. The evidence is stored privately, scanned, and submitted to a finance review queue. Uploading evidence does not mark the invoice paid.
+6. The finance admin reviews the evidence and independently verifies that the transfer settled or the check cleared.
+7. The admin confirms the authoritative method and reference against the correct invoice.
+8. In one database transaction, the system records the payment, accepts the evidence submission, marks the invoice paid, activates the purchased subscription period, and writes billing and audit events.
+
+Stripe must continue to use webhook-confirmed payment. A reference entered by an admin must never be treated as independent proof that money was received.
+
+For every renewal, the system must also run the collections schedule in section 9: targeted pre-expiration reminders, a required platform-admin call task, a 30-day active grace period, daily overdue notices, and suspension at the start of day 31 unless payment is confirmed or an authorized override is active.
+
+## 2. Critical current-state findings
+
+| Area | Current code | Consequence |
+| --- | --- | --- |
+| Customer subscription UI | `dashboard/src/app/(dashboard)/subscription/page.tsx` hard-codes `provider = 'STRIPE'` | There is no manual choice or payment-instruction screen. |
+| Subscription API contract | `api/src/modules/subscriptions/subscription.schemas.ts` accepts only `STRIPE` | Bank transfer/check requests fail validation. |
+| Subscription checkout | `api/src/modules/subscriptions/subscription.service.ts` always creates a Stripe Checkout session | A non-Stripe pending invoice cannot be created. |
+| Admin payment API | `api/src/modules/admin/admin.schemas.ts` already accepts an optional `providerPaymentId` | The backend has a partial manual-recording concept, but method/reference are optional and there is no idempotency contract. |
+| Admin payment service | `api/src/modules/admin/admin.billing.service.ts::payInvoice` immediately writes successful payment records | It lacks required manual-method validation, reference deduplication, concurrency protection, and a cleared-funds attestation. |
+| Admin UI | `admin/src/app/dashboard/billing/page.tsx` sends only an optional amount and labels it “Amount in cents” | The transaction reference is never sent even though the API can accept one. The money input is also error-prone. |
+| Invoice architecture | Stripe creates `SubscriptionInvoice`; the finance console operates on `BillingInvoice` | There are two invoice lifecycles. The existing legacy sync copies data in one direction only. An admin payment can leave the customer-visible invoice pending. |
+| Subscription activation | Admin payment calls `maybeRestoreSubscription`, which changes status to `ACTIVE` | It does not reliably apply the purchased plan or establish a new `currentPeriodStart`/`currentPeriodEnd`. |
+| Upload infrastructure | `api/src/http/upload/index.ts` validates images only; `api/src/lib/storage.ts::uploadImage` always writes `.jpg` files | It cannot safely represent PDF receipts or preserve document type. A dedicated private-document pipeline is required. |
+| Subscription scheduler | `api/src/index.ts` uses fixed server-time cron jobs and hard-coded 7-day `PAYMENT_PENDING`/`PAST_DUE` transitions | It cannot implement company-local 14-day/7-day/48-hour/24-hour milestones or the required 30-day full-access grace period. |
+| Company notification targeting | `notificationService.ts` can target one employee or every company employee; no billing-contact audience exists | Using the company-wide audience would notify unrelated users. Explicit billing contacts are required. |
+| Localization foundation | Dashboard/admin i18n providers and notification locale/template resolution already support Arabic, English, and French; company brand data has a default locale | The foundation can be reused, but billing-contact locale resolution, company-enabled language constraints, template parity, and audit snapshots still need to be added. |
+| Platform-admin notifications | The admin notifications page is a cross-company delivery audit, not a personal admin inbox | Platform-admin milestones and call tasks need assigned admin recipients and actionable task state. |
+| Timezone configuration | No company/billing timezone field is exposed in the supplied schemas | Deadline calculation cannot safely use local calendar days, especially across daylight-saving/offset changes. |
+| Existing manual payments | `api/src/modules/payments/*` and `api/src/modules/billing/*` record manual rental payments | These flows concern rental reservations and mark payments successful immediately; they should not be reused for platform subscriptions. |
+| Database source | The API imports `@rentaldrivego/database`, but that package/schema is not in the archive | The schema and migration changes below must be made in the full monorepo before implementation can compile. |
+
+The main prerequisite is to stop treating `SubscriptionInvoice` and `BillingInvoice` as independent sources of truth. Adding fields to the admin form without resolving that split would create inconsistent financial state.
+
+## 3. Product decisions for the MVP
+
+- Keep Stripe and add two offline collection methods: `BANK_TRANSFER` and `CHECK`.
+- Only company owners may create a subscription-payment request.
+- Only finance admins with fresh 2FA may confirm a manual payment.
+- “Confirm payment” means the admin attests that the bank transfer settled or the check cleared. Merely receiving a check is not enough.
+- The customer submits the reference and evidence through the application. This replaces an unaudited email/WhatsApp handoff. The admin still confirms the authoritative reference after review.
+- Require at least one clean evidence document for a manual subscription-payment submission. Recommended MVP formats: PDF, JPEG, and PNG; maximum 10 MB per file, 3 files, and 20 MB total per submission.
+- Store evidence in private persistent storage, never in a public `/storage` path, database blob, source tree, or ephemeral container filesystem.
+- Evidence is supporting material, not proof of settlement. A convincing-looking receipt must not activate a subscription.
+- Manual subscription invoices must be paid in full for activation. Short, excess, or partial payments go to an exception workflow; they must not silently activate a plan.
+- The server, never the browser, calculates the plan price.
+- Store all amounts as integer minor units. The UI displays MAD values and must not ask admins to think in “cents.”
+- Make `BillingInvoice` the canonical invoice. Treat `SubscriptionInvoice` as a compatibility model during migration, then retire it.
+- A pending manual invoice has a method-specific due date. Generic Stripe timeout behavior must not suspend a customer while a check is still within its configured clearing window.
+- Payment notices go only to explicitly configured company billing contacts and company administrators. In this codebase, “company administrator” maps to the `OWNER` role; never use the `COMPANY_EMPLOYEES` audience for collections.
+- Each billing account has one assigned platform collections owner, with a monitored finance queue as fallback. Do not notify every platform admin.
+- Renewal invoices must be finalized early enough for the first 14-day reminder. Recommended: generate/finalize them at least 21 days before the subscription period ends.
+- Keep the subscription fully active throughout the 30-day grace period. Delinquency is a collections state, not restricted entitlement, until suspension begins on day 31.
+- A created or pending payment attempt does not stop follow-up. Only canonical, successfully confirmed payment does.
+- Classify required payment notices as transactional/mandatory. A company must always retain at least one valid billing recipient.
+- Support exactly three communication languages for this release: Arabic (`ar`), English (`en`), and French (`fr`). Each company selects a non-empty set of enabled languages and one default language from that set.
+- Resolve one language for each recipient and communication. Do not send the same notice in all enabled languages: that would create duplicate emails/in-app alerts when the company selected multiple languages.
+
+### Communication language policy
+
+Customer-facing dashboard copy, in-app notifications, emails, payment instructions, evidence-review messages, reminders, confirmations, dispute/extension notices, and suspension messages must use this deterministic order:
+
+1. Use the billing contact's explicit `locale` when it is one of the company's enabled communication languages.
+2. Otherwise, for a linked employee, use that employee's preferred language when it is enabled for the company.
+3. Otherwise, use the company's `defaultCommunicationLocale`.
+4. Use English only as a controlled emergency fallback when the configured template is unavailable. Record a localization-fallback audit event, alert operations, and do not silently mix English fragments into Arabic or French messages.
+
+An external email-only billing contact may set a locale from the company's enabled list; otherwise the company default applies. A company-language change affects future unsent communications only. It must not resend old notices or rewrite the locale/template snapshot of communications already created.
+
+Arabic output must set `lang="ar"` and `dir="rtl"`; English and French use `dir="ltr"`. Dates, times, number grouping, and currency presentation use the resolved locale together with the company's IANA timezone. Canonical timestamps, currency codes, and integer minor-unit amounts remain unchanged in storage.
+
+Internal platform-admin instructions may use the assigned admin's own preferred locale so they remain operationally clear. However, each call task and customer-contact workflow must display the company's default language, the individual contact's resolved language, and a customer-facing call script/message in that language. Any email or message sent to the customer from the admin workflow must use the customer's resolved company-approved language.
+
+## 4. State model and invariants
+
+### Invoice lifecycle
+
+`DRAFT` → `OPEN` → `PAID`
+
+Additional existing states such as `PAST_DUE`, `VOID`, and `UNCOLLECTIBLE` remain valid. A fully verified payment may move `OPEN` or `PAST_DUE` to `PAID`. It must not pay a `VOID`, `REFUNDED`, or `UNCOLLECTIBLE` invoice.
+
+### Subscription lifecycle
+
+- For an initial purchase, creating a manual invoice sets the subscription to `PAYMENT_PENDING` without granting paid access.
+- Creating a renewal invoice must not change an active subscription to `PAYMENT_PENDING` or reduce current access.
+- A full admin-confirmed initial payment activates at confirmation time. `receivedAt` remains the financial settlement/clearing time.
+- A confirmed renewal extends service from the immutable original expiration/current-period end, not from the early payment date. Payment during grace remains anchored to that original expiration so the grace service is not silently free.
+- A renewal plan change is scheduled for the period boundary; it must not discard remaining days from the current paid period.
+- Partial payment, duplicate confirmation, or failed validation must not change entitlement.
+
+### Evidence-submission lifecycle
+
+Payment submission: `DRAFT` → `SUBMITTED` → `UNDER_REVIEW` → `APPROVED | REJECTED`
+
+Each document has an independent security state: `UPLOADED` → `SCANNING` → `CLEAN | QUARANTINED | SCAN_FAILED`.
+
+- A submission cannot move to `SUBMITTED` until it has at least one `CLEAN` document.
+- Customers may replace/delete documents only while the submission is `DRAFT`.
+- Submitted evidence is immutable. Corrections are appended as a new submission/version; historical evidence is not overwritten.
+- Admin approval is allowed only after every attached document is clean and the funds have been independently verified.
+
+### Collections lifecycle
+
+Keep collections state separate from subscription entitlement:
+
+`SCHEDULED` → `PRE_DUE` → `GRACE_PERIOD` → `RESOLVED | SUSPENDED`
+
+An authorized dispute/extension creates an overlay state, `SUSPENSION_PAUSED`, without erasing the underlying invoice or schedule.
+
+- `PRE_DUE` begins when the renewal invoice enters the 14-day reminder window.
+- At expiration, an unpaid case enters `GRACE_PERIOD`; the subscription remains `ACTIVE` with full access.
+- Confirmed payment moves the case to `RESOLVED`, cancels queued follow-up, and keeps/restores the subscription `ACTIVE`.
+- At the company-local time boundary that begins day 31—30 calendar days after the exact expiration time—an unpaid, unpaused case moves to `SUSPENDED` and the subscription becomes `SUSPENDED`.
+- A payment attempt, uploaded receipt, submitted evidence, payment promise, or call outcome does not resolve the case.
+
+### Non-negotiable invariants
+
+- One authoritative invoice balance.
+- One successful confirmation per external payment reference within its permitted uniqueness scope.
+- One result for repeated requests with the same idempotency key.
+- No invoice can be overpaid through this endpoint.
+- Invoice update, payment record, subscription activation, billing event, and audit event succeed or fail together.
+- No tenant can view or mutate another tenant’s invoice.
+- References are normalized for comparison but preserved in their original form for finance review.
+- Evidence bytes are private, content-validated, malware-scanned, encrypted at rest, and retrievable only through authorized invoice-scoped routes.
+- Payment confirmation and evidence approval refer to the same invoice and submission; a document cannot be attached across tenants or reused to approve another invoice.
+- Collections milestones are computed in the billing account’s valid IANA timezone, never a fixed numeric UTC offset.
+- Every scheduled milestone, recipient delivery, call task, call outcome, override, confirmation, and suspension has a stable idempotency key and append-only audit evidence.
+- Every customer-facing delivery stores its resolved locale, template key/version, company timezone, rendered-subject/body snapshot or immutable render inputs, and fallback status for exact audit reproduction.
+- Missing/invalid timezone or missing billing recipients fails safe: alert the assigned platform collections owner and do not auto-suspend until configuration is corrected.
+
+## 5. Proposed data changes
+
+Make these changes in the missing `@rentaldrivego/database` package.
+
+### `BillingInvoice`
+
+Add or formalize:
+
+- `collectionMethod`: `STRIPE | BANK_TRANSFER | CHECK`
+- `requestedPlan`: nullable plan enum
+- `requestedBillingPeriod`: nullable billing-period enum
+- `manualPaymentDueAt`: nullable timestamp, or use the existing `dueAt` consistently
+- `legacySubscriptionInvoiceId`: nullable unique relation during migration, instead of relying only on JSON metadata
+
+### `BillingPaymentAttempt` or a dedicated immutable payment record
+
+Add first-class, queryable fields rather than hiding them only in metadata:
+
+- `channel`: `ONLINE | OFFLINE`
+- `manualMethod`: nullable `BANK_TRANSFER | CHECK`
+- `externalReference`: nullable original reference
+- `normalizedExternalReference`: nullable normalized reference
+- `receivedAt`: nullable settlement/clearance time
+- `confirmedAt`: nullable admin-confirmation time
+- `confirmedByAdminId`: nullable admin relation
+- `idempotencyKey`: nullable UUID
+- `note`: nullable, bounded text
+
+### `ManualPaymentSubmission`
+
+Add a review entity separate from the successful payment record:
+
+- `id`, `invoiceId`, `billingAccountId`, and `companyId`
+- `method`: `BANK_TRANSFER | CHECK`
+- `submittedReference` and `normalizedSubmittedReference`
+- `status`: `DRAFT | SUBMITTED | UNDER_REVIEW | APPROVED | REJECTED`
+- `submittedByEmployeeId` and `submittedAt`
+- `reviewedByAdminId`, `reviewedAt`, and bounded `rejectionReason`
+- `idempotencyKey`
+- relation to the final `BillingPaymentAttempt` after approval
+
+The customer-supplied reference is evidence. The final payment record stores the admin-confirmed reference. If they differ, require an admin correction reason and preserve both values.
+
+### `ManualPaymentDocument`
+
+Store metadata and a private storage key, not file bytes:
+
+- `id`, `submissionId`, `invoiceId`, `companyId`
+- `kind`: `BANK_TRANSFER_RECEIPT | CHECK_COPY | OTHER_SUPPORTING_EVIDENCE`
+- random `storageKey`; never use the original filename as a filesystem path
+- sanitized `originalFilename`, detected MIME type, detected extension, and byte size
+- SHA-256 digest for integrity and duplicate detection
+- `scanStatus`: `UPLOADED | SCANNING | CLEAN | QUARANTINED | SCAN_FAILED`
+- scanner result code without copying raw scanner output into user-visible errors
+- `uploadedByEmployeeId`, `uploadedAt`, and optional draft-only deletion metadata
+
+### `BillingAccount` and `BillingContact`
+
+Add to the billing account:
+
+- required IANA `timezone` such as `Africa/Casablanca`
+- nullable `collectionsOwnerAdminId` identifying the internal owner
+- configurable reminder send time in local time; recommended default `09:00`
+- `enabledCommunicationLocales`: a non-empty set containing only `ar`, `en`, and/or `fr`
+- `defaultCommunicationLocale`: one of the enabled values
+
+Add explicit billing recipients rather than broadcasting to the company:
+
+- `BillingContact`: `billingAccountId`, nullable linked `employeeId`, email, `locale`, `isPrimary`, `receivePaymentNotices`, and active/verified state
+- linked employees receive in-app and email; an external billing email can receive email only
+- active `OWNER` recipients may be designated as company administrators for payment notices
+- require at least one primary active recipient; never silently expand to every employee
+- validate a contact/employee locale against the company's enabled languages; missing values inherit the company default
+
+Database constraints must require a non-empty enabled-language set, allow only `ar | en | fr`, and require the default language to be a member of the enabled set. Backfill the company language from its existing brand/default locale when that value is supported; otherwise use `en` and flag the company for owner review.
+
+### `CollectionsCase`
+
+Create one case per canonical renewal invoice:
+
+- `invoiceId`, `subscriptionId`, `billingAccountId`, `companyId`
+- `status`: `SCHEDULED | PRE_DUE | GRACE_PERIOD | RESOLVED | SUSPENDED`
+- immutable `originalExpirationAt`
+- `graceStartedAt`, `finalSuspensionAt`, `resolvedAt`, and `suspendedAt`
+- `nextActionAt` for efficient worker queries
+- assigned `collectionsOwnerAdminId`
+- `resolutionPaymentAttemptId` when paid
+- optimistic version or row-claim fields for concurrent workers
+
+### `CollectionsCallTask`
+
+- one unique `PRE_EXPIRY_48H_CALL` task per collections case
+- assigned platform admin, due time, status `OPEN | COMPLETED | CANCELLED`
+- outcome `CONTACTED | NO_ANSWER | PAYMENT_PROMISED | ISSUE_ESCALATED`
+- bounded notes, `promisedPaymentAt`, `nextFollowUpAt`, completed admin/time, and cancellation reason
+
+The task remains open until an admin records an outcome. A payment confirmed before the call is completed cancels it with a system reason rather than fabricating a human outcome. `PAYMENT_PROMISED` closes the required 48-hour call but must create a dated follow-up action; it does not resolve the collections case.
+
+### `CollectionsOverride`
+
+- type `PAYMENT_DISPUTE | MANUAL_EXTENSION`
+- required reason, authorizing admin, created time, start/end time, and revoked time/admin
+- `pauseSuspension` and separately controlled `pauseNotifications`
+- extension-specific revised suspension date without changing `originalExpirationAt`
+- only `FINANCE`, `ADMIN`, or `SUPER_ADMIN` with fresh 2FA may create/revoke an override
+
+### Platform-admin notification recipients
+
+Extend the notification audience/recipient model to target a specific `AdminUser`. The current platform notification page remains the delivery audit, but collections admins also need a personal in-app inbox/badge. Do not emulate an admin notification by sending to a company employee.
+
+Add or reuse `AdminUser.preferredLocale` for internal admin UI/email. Store the company's default and each contact's resolved locale on the call-task snapshot so a reassignment never loses the language required for customer contact.
+
+Recommended database constraints:
+
+- Unique `(billingAccountId, idempotencyKey)` when `idempotencyKey` is not null.
+- Unique `(billingAccountId, manualMethod, normalizedExternalReference)` for successful offline payments.
+- Unique submission idempotency key within the billing account and unique document storage keys.
+- Unique `CollectionsCase.invoiceId`, unique `(collectionsCaseId, taskType)`, and unique notification event `(companyId, idempotencyKey)` constraints.
+- Check constraints requiring manual method, reference, confirmation time, and confirming admin when `channel = OFFLINE` and status is `SUCCEEDED`.
+- Index pending invoices by `(collectionMethod, status, dueAt)` for finance queues and dunning jobs.
+- Index submissions by `(status, submittedAt)` and documents by `(scanStatus, uploadedAt)` for review and quarantine workers.
+- Index collections cases by `(status, nextActionAt)` and open call tasks by `(assignedAdminId, status, dueAt)`.
+
+The application should also warn finance when the same normalized reference appears on another billing account. Do not make check numbers globally unique: different customers can legitimately use the same check number.
+
+### Migration and backfill
+
+1. Add nullable fields and indexes first.
+2. Backfill `BillingInvoice` rows from linked `SubscriptionInvoice` rows.
+3. Backfill collection method from the legacy provider.
+4. Verify counts, totals, currency, paid status, and links before changing reads.
+5. Switch customer and admin reads to `BillingInvoice`.
+6. Keep compatibility writes to `SubscriptionInvoice` only during one release window if rollback requires them.
+7. Backfill a verified IANA timezone and at least one explicit billing contact for every live billing account. Do not enable automatic suspension for incomplete accounts.
+8. Create collections cases only for canonical unpaid renewal invoices; do not infer them from unconfirmed payment attempts.
+9. Remove lazy, request-time legacy synchronization after the backfill is proven.
+
+## 6. API design
+
+### Customer: available methods and instructions
+
+`GET /api/v1/subscriptions/payment-options`
+
+Return only enabled methods and safe payer-facing instructions. Example:
+
+```json
+{
+ "methods": [
+ {
+ "method": "STRIPE",
+ "enabled": true
+ },
+ {
+ "method": "BANK_TRANSFER",
+ "enabled": true,
+ "instructions": {
+ "accountName": "RentalDriveGo",
+ "bankName": "Configured bank",
+ "accountReference": "Configured RIB/IBAN",
+ "message": "Include the invoice number in the transfer description"
+ }
+ },
+ {
+ "method": "CHECK",
+ "enabled": true,
+ "instructions": {
+ "payee": "RentalDriveGo",
+ "deliveryAddress": "Configured address",
+ "message": "Write the invoice number on the check"
+ }
+ }
+ ]
+}
+```
+
+Payment instructions should come from validated platform configuration, not JSX constants. Bank credentials used to access the bank account are secrets and must never be returned; receiving-account details intentionally shown to payers are not application credentials.
+
+### Customer: create a manual subscription invoice
+
+`POST /api/v1/subscriptions/manual-checkout`
+
+```json
+{
+ "plan": "GROWTH",
+ "billingPeriod": "ANNUAL",
+ "currency": "MAD",
+ "method": "BANK_TRANSFER",
+ "idempotencyKey": "uuid"
+}
+```
+
+The response returns the canonical invoice ID/number, exact amount, due date, selected method, and instructions. Do not accept a customer-supplied amount, paid status, transaction reference, or company ID.
+
+Rules:
+
+- Require authenticated company owner and tenant context.
+- Recalculate price from `PricingConfig`/shared plan prices.
+- Reuse the result for a repeated idempotency key.
+- Prevent multiple open manual invoices for the same subscription purchase. Require the owner to cancel/replace an existing open request when changing plan or method.
+- Set `PAYMENT_PENDING`; do not activate access.
+
+Keep the current Stripe checkout endpoint, but migrate it to create the same canonical `BillingInvoice` before creating the Stripe Checkout session.
+
+### Customer: create and submit payment evidence
+
+Use a staged workflow so upload retries cannot create duplicate payment submissions.
+
+1. `POST /api/v1/subscriptions/invoices/:invoiceId/manual-payment-submissions`
+
+ Creates or returns a draft submission using a UUID idempotency key. Accept `method` and `submittedReference`; derive company and invoice ownership from authentication and the route.
+
+2. `POST /api/v1/subscriptions/manual-payment-submissions/:submissionId/documents`
+
+ Accept one multipart field named `file` plus a document `kind`. Only an owner from the same company may upload while the submission is `DRAFT`.
+
+3. `DELETE /api/v1/subscriptions/manual-payment-submissions/:submissionId/documents/:documentId`
+
+ Allow only draft cleanup. After submission, documents are immutable and corrections must be appended through a replacement submission.
+
+4. `POST /api/v1/subscriptions/manual-payment-submissions/:submissionId/submit`
+
+ Require the invoice to remain payable, the method to match, a reference to be present, and at least one clean document. Freeze the submission and notify the finance queue.
+
+5. `GET /api/v1/subscriptions/manual-payment-submissions/:submissionId/documents/:documentId`
+
+ Stream a clean document only after re-validating the authenticated owner, company, invoice, and submission relationships. Never redirect to a stable public URL.
+
+Return document metadata and scan state, never a public storage URL. Customer document reads/downloads must re-check session, tenant, invoice, and submission ownership on every request.
+
+### Private document pipeline
+
+Do not reuse `imageUpload` or `uploadImage` unchanged. Add a dedicated payment-evidence upload path:
+
+- Accept only PDF, JPEG, and PNG for the MVP.
+- Detect content from file signatures/structure. Do not trust `Content-Type`, filename, or extension supplied by the browser.
+- Reject mismatched MIME/extension, SVG, HTML, office documents, executables, archives, password-protected/unscannable files, polyglots, oversized images, and files over the configured limits.
+- Calculate SHA-256 while ingesting and assign a random storage key.
+- Write first to a private quarantine location, run malware scanning, and move/mark the object usable only after a clean result. If the scanner is unavailable or times out, fail closed and keep the file unavailable.
+- Use persistent private storage that works across API instances. The existing `FILE_STORAGE_ROOT` abstraction may be extended if it points to durable shared storage; object storage with private keys is preferable for multi-instance deployment.
+- Never expose the existing generic `/storage` static route. Stream through protected API handlers or issue very short-lived, invoice-scoped signed downloads.
+- For raw files, set a sanitized `Content-Disposition`, exact detected `Content-Type`, `X-Content-Type-Options: nosniff`, and restrictive private/no-store caching. Prefer generated image previews; do not render active or untrusted content as application HTML.
+- Audit upload, submit, view/download, reject, approve, quarantine, and deletion events without logging document bytes or full financial references.
+- Define retention and legal-hold behavior. After submission, deletion must follow the approved retention policy rather than a user-facing hard delete.
+
+Add finance endpoints for the review queue and protected evidence access:
+
+- `GET /api/v1/admin/billing/manual-payment-submissions?status=SUBMITTED`
+- `GET /api/v1/admin/billing/manual-payment-submissions/:submissionId`
+- `GET /api/v1/admin/billing/manual-payment-submissions/:submissionId/documents/:documentId`
+- `POST /api/v1/admin/billing/manual-payment-submissions/:submissionId/reject`
+
+Rejection requires a bounded reason, preserves the evidence, notifies the owner, and leaves the invoice unpaid.
+
+### Admin: confirm a cleared manual payment
+
+Use an explicit endpoint instead of overloading the generic `/pay` action:
+
+`POST /api/v1/admin/billing/invoices/:invoiceId/manual-payments`
+
+```json
+{
+ "submissionId": "manual_submission_id",
+ "method": "BANK_TRANSFER",
+ "externalReference": "BANK-TXN-123456",
+ "amount": 120000,
+ "receivedAt": "2026-08-09T14:30:00.000Z",
+ "note": "Matched to the platform bank statement",
+ "idempotencyKey": "uuid",
+ "fundsVerified": true
+}
+```
+
+Validation:
+
+- `method` must match the invoice collection method unless a finance override with a required reason is implemented.
+- `submissionId` must identify a submitted, clean, same-company evidence package for this invoice.
+- Reference is required, trimmed, normalized, length-bounded, and uses a conservative printable-character policy.
+- `amount` must equal the full current balance for subscription invoices.
+- `receivedAt` cannot be unreasonably far in the future.
+- `fundsVerified` must be explicitly true; the confirmation screen must explain that the receipt/check image alone is insufficient.
+- Require `FINANCE`, fresh 2FA, CSRF protection where applicable, and an idempotency key.
+- Return `409` for already-paid invoices, reference conflicts, stale balances, or repeated confirmation with a different payload.
+
+### Customer reads
+
+Rewrite `GET /api/v1/subscriptions/invoices` to read canonical billing invoices. Include:
+
+- invoice number and amount
+- collection method
+- status and due date
+- paid/confirmed time
+- a masked reference after confirmation
+- requested plan and billing period
+- evidence-submission status and safe document metadata
+
+Do not expose admin-only notes or other companies’ references.
+
+### Billing recipients and collections operations
+
+Company-owner endpoints:
+
+- `GET /api/v1/subscriptions/billing-contacts`
+- `PUT /api/v1/subscriptions/billing-contacts`
+- `GET /api/v1/subscriptions/communication-settings`
+- `PUT /api/v1/subscriptions/communication-settings`
+
+Require at least one active primary contact. Validate that an in-app recipient is an active employee of the authenticated company. An external email-only contact must be verified before replacing the last verified recipient.
+
+The communication-settings write accepts only the supported base language codes and validates all contacts atomically:
+
+```json
+{
+ "enabledCommunicationLocales": ["ar", "fr"],
+ "defaultCommunicationLocale": "fr",
+ "contacts": [
+ {
+ "email": "billing@example.ma",
+ "locale": "ar",
+ "isPrimary": true,
+ "receivePaymentNotices": true
+ }
+ ]
+}
+```
+
+Reject unsupported/empty locale sets, a default outside the enabled set, or a contact locale outside the enabled set. Return the effective locale for each contact. An optional authenticated preview endpoint may render subject/body samples for every enabled language without sending them, using synthetic non-sensitive values.
+
+Platform collections endpoints:
+
+- `GET /api/v1/admin/billing/collections?status=&assignedTo=&actionDueBefore=`
+- `GET /api/v1/admin/billing/collections/:caseId`
+- `PATCH /api/v1/admin/billing/collections/:caseId/assignee`
+- `POST /api/v1/admin/billing/collection-tasks/:taskId/outcomes`
+- `POST /api/v1/admin/billing/collections/:caseId/overrides`
+- `POST /api/v1/admin/billing/collections/:caseId/overrides/:overrideId/revoke`
+
+Call-outcome payload:
+
+```json
+{
+ "outcome": "PAYMENT_PROMISED",
+ "note": "Customer expects the transfer to settle tomorrow",
+ "promisedPaymentAt": "2026-09-15T12:00:00.000Z",
+ "nextFollowUpAt": "2026-09-15T15:00:00.000Z"
+}
+```
+
+Require `promisedPaymentAt`/`nextFollowUpAt` for `PAYMENT_PROMISED` and a note for `NO_ANSWER` or `ISSUE_ESCALATED`. Recording an outcome closes the required call task but never marks the invoice paid.
+
+Override creation requires fresh 2FA, an authorized role, a bounded reason, and a finite expiry/revised suspension date. Indefinite overrides should be prohibited unless a `SUPER_ADMIN` uses a separately audited emergency path.
+
+## 7. Atomic confirmation algorithm
+
+The confirmation service must run as one database transaction:
+
+1. Resolve the idempotency key. Return the original result if the same request already succeeded.
+2. Read the canonical invoice, billing account, evidence submission, and document metadata with a write lock, or use conditional updates that detect concurrent changes.
+3. Validate tenant/account linkage, payable state, collection method, currency, full balance, requested subscription data, submitted evidence state, and that every attached document is clean.
+4. Confirm that the submission belongs to this invoice and has not already been approved/rejected. Evidence from another invoice must never be reusable.
+5. Normalize the admin-confirmed reference, compare it with the submitted reference, require a reason for a correction, and enforce the database uniqueness constraint.
+6. Create an immutable successful offline payment attempt with submission link, method, original/normalized confirmed reference, settlement time, admin identity, and idempotency key.
+7. Mark the evidence submission `APPROVED` and link it to that payment attempt. Evidence bytes remain immutable.
+8. Conditionally update the invoice balance and status. The affected-row count must be exactly one.
+9. Apply the correct period rule: initial/lapsed purchase starts at confirmation; renewal starts at the case’s immutable `originalExpirationAt` and extends from that anchor. Schedule renewal plan changes for the boundary rather than truncating the current period.
+10. Clear payment-pending/past-due/suspension fields and retry counters.
+11. Mark the related collections case `RESOLVED`, clear `nextActionAt`, and cancel any open call/follow-up tasks with the system reason `PAYMENT_CONFIRMED`.
+12. Write `payment_evidence.approved`, `invoice.paid`, `subscription.activated`, `collections.resolved`, and admin audit records through the same transaction handle.
+13. During the compatibility window, update the linked legacy `SubscriptionInvoice` in the same transaction.
+14. Commit, suppress/cancel unsent collections deliveries, then send the payment receipt/resolution notification. Notification failure must not roll back a valid payment; it should enter a retry queue.
+
+Do not keep the current pattern where the audit write happens after the billing transaction. That leaves a financial mutation without guaranteed audit evidence if the second write fails.
+
+Stripe webhook success and admin-confirmed manual payment must call the same canonical payment-finalization routine so both stop collections identically. The notification dispatcher must re-check that the collections case is unresolved immediately before delivery; otherwise a reminder queued seconds before payment could still be sent afterward.
+
+## 8. User experience changes
+
+### Company dashboard
+
+Update `dashboard/src/app/(dashboard)/subscription/page.tsx`:
+
+- Replace the hard-coded Stripe provider with accessible Stripe, bank-transfer, and check choices returned by the API.
+- Keep plan and billing-period selection.
+- For Stripe, preserve the redirect flow.
+- For a manual method, create the pending invoice and show a confirmation panel with invoice number, amount, due date, copyable instructions, and “Awaiting verification” status.
+- Add a payment-evidence form for transaction reference/check number and one to three PDF/JPEG/PNG documents.
+- Show per-file size/type validation, upload/scan progress, clean/quarantined/failed status, retry behavior, and accessible removal controls while the submission remains a draft.
+- Require an explicit final **Submit for review** action. Explain that upload does not prove settlement or activate the subscription.
+- After submission, show immutable evidence metadata and review state rather than editable controls.
+- Display method and status in invoice history.
+- During pre-due/grace states, show a persistent billing banner only to billing contacts and `OWNER` users. Include amount due, original expiration date, local grace-day count, days remaining, final suspension date, and a stable link to Stripe checkout or manual instructions/evidence submission.
+- Add billing-contact management for owners and require one verified primary contact before the current contact can be removed.
+- Add company communication settings where an owner enables Arabic, English, and/or French and selects exactly one default. Contact-language choices must be limited to the enabled set and show the effective inherited value.
+- Disable repeated submission while a request is in flight and render idempotent retries safely.
+- Add complete English, French, and Arabic copy for subscription checkout, payment instructions, evidence upload/review, collections banners, validation, and receipts. Arabic pages and email previews must be verified right-to-left.
+
+### Admin finance console
+
+Update `admin/src/app/dashboard/billing/page.tsx`:
+
+- Replace the current inline “Amount in cents” control with a focused **Confirm manual payment** dialog.
+- Show company, invoice number, plan, billing period, collection method, currency, total, balance due, and due date before confirmation.
+- Require method, reference/check number, settlement/clearance date, optional note, and the cleared-funds checkbox.
+- Show the submitted reference, scan status, document type, uploader, timestamp, and protected preview/download controls.
+- Never render customer filenames or document content as HTML. Clearly distinguish customer-supplied evidence from independently verified bank/check data.
+- Add **Reject evidence** with a required reason. Rejection must not change the invoice balance or subscription entitlement.
+- Default the amount to the full balance and display it as MAD; keep minor-unit conversion outside free-form admin input.
+- Require a final review step and handle fresh-2FA errors explicitly.
+- Disable the submit button while pending and reuse the same idempotency key on transport retry.
+- Show the masked reference and confirming admin in payment history. Show the full reference only in the authorized detail view if finance operations require it.
+- Keep generic partial payment controls separate for non-subscription invoices if that capability is still required.
+- Add an assigned collections queue ordered by overdue action, with case status, company-local deadline, amount due, contact details, latest notice, and open tasks.
+- Provide personal admin in-app notifications/badge for assigned milestones rather than treating the global delivery-audit page as an inbox.
+- The 48-hour call task must be visibly open until an outcome is saved. `PAYMENT_PROMISED` must show its promised date and generate the next follow-up action.
+- Show the company's default language and the selected contact's effective language on each call task, with the correct localized customer script/template. Admin-generated customer messages must not allow a language outside the company's enabled set.
+- Show active disputes/extensions prominently, including who authorized them, reason, expiry/revised suspension date, and whether notices are paused.
+
+## 9. Subscription-payment follow-up, grace period, and suspension
+
+### Roles and recipient resolution
+
+- **Company billing contact/admin:** the customer responsible for payment. Resolve only explicit active billing contacts and designated active `OWNER` employees. Send in-app only to linked employees and email only to verified addresses.
+- **Platform admin:** the assigned internal collections owner. Use a finance queue fallback if the assignee is inactive or missing; never fan out to every admin.
+- Never use `COMPANY_EMPLOYEES` for payment notices. Resolve and snapshot recipients per event so the audit log shows exactly who was targeted.
+- For every customer recipient, resolve the communication locale using section 3 before rendering either channel. Email and in-app deliveries for the same event/recipient must use the same resolved locale and template version.
+- Internal platform-admin notices may use the admin's preferred locale, but the task must carry the company/contact language and localized customer script. Customer-facing content sent through the task always uses the customer recipient's resolved company-approved locale.
+
+### Before expiration
+
+| Relative time | Company billing contact/admin | Assigned platform admin | Required action |
+| --- | --- | --- | --- |
+| 14 days before | In-app + email | In-app | Payment reminder |
+| 7 days before | In-app + email | In-app | Second reminder |
+| 48 hours before | In-app + email | In-app + email | Create the unique required-call task |
+| 24 hours before | In-app + email | In-app + email | Final expiration warning |
+
+At the 48-hour threshold:
+
+- Create exactly one `PRE_EXPIRY_48H_CALL` task and assign it to the collections owner.
+- The task remains `OPEN` until the admin records `CONTACTED`, `NO_ANSWER`, `PAYMENT_PROMISED`, or `ISSUE_ESCALATED`.
+- Require notes for unsuccessful/escalated outcomes. Require a promised-payment date and next follow-up time for `PAYMENT_PROMISED`.
+- An overdue open call task escalates within the platform finance queue; it must not generate extra company notices.
+- If payment is confirmed before the call occurs, cancel the open task as `PAYMENT_CONFIRMED` and do not require a fictitious call outcome.
+
+Each reminder includes the invoice number, amount due, subscription expiration time in the company timezone, and a stable dashboard link that presents Stripe payment or the configured bank/check instructions. Do not place expiring signed URLs in email.
+
+### After expiration: 30-day active grace period
+
+If canonical payment is not confirmed at expiration:
+
+1. Move the collections case to `GRACE_PERIOD`, but keep the subscription `ACTIVE` with full access.
+2. Send exactly one in-app notification and one email per local calendar day to each current billing recipient.
+3. Include amount due, original expiration date, current grace day, days remaining, final suspension time, and payment link/instructions.
+4. Use the day-30 daily notice as the final warning; do not send a second duplicate “final” notice that day.
+5. At the local-time boundary that begins day 31—30 calendar days after expiration in the configured IANA timezone—atomically re-check payment and overrides, then suspend if still eligible.
+
+The suspension transaction must conditionally change the collections case and subscription once, write audit/billing events, and queue the suspension notice. If a confirmed payment wins the race, suspension affects zero rows and does nothing.
+
+### Stop condition
+
+Reminders stop only when the canonical invoice is paid by a successfully confirmed payment. These do **not** stop follow-up:
+
+- created/processing/failed payment attempt
+- Stripe Checkout session creation
+- manual reference entry by the customer
+- evidence upload or submission
+- call outcome or payment promise
+- email delivery/read status
+
+On confirmation:
+
+- resolve the collections case in the same transaction as invoice/subscription payment finalization
+- clear `nextActionAt` and cancel open call/follow-up tasks
+- suppress queued but unsent reminder deliveries/outbox work
+- require the delivery worker to re-check unresolved state immediately before sending
+- keep already-sent notification history; do not delete audit evidence
+- payment during grace leaves/restores the subscription `ACTIVE` without a suspension transition
+
+### Timezone-safe, idempotent scheduling
+
+- Require a valid IANA timezone per billing account. Use timezone-aware calendar arithmetic; never add fixed 24-hour milliseconds for local deadlines.
+- Calculate and persist `originalExpirationAt`, each milestone’s `scheduledFor`, and `finalSuspensionAt` when the collections case is created.
+- Run a frequent UTC worker, recommended every 15 minutes, that claims rows where `nextActionAt <= now`. Do not create one cron schedule per timezone.
+- Use database leases/conditional claims so multiple API instances cannot process the same action concurrently.
+- Notification keys: `collections:{invoiceId}:{milestone}:{recipientId}`. Daily-grace keys add the company-local date. Call-task uniqueness is enforced by `(collectionsCaseId, taskType)`.
+- Locale is snapshotted when the event is created and is not part of the idempotency key. A retry must reproduce the original localized notice; changing company language settings must not create a duplicate for the same milestone.
+- If the worker runs repeatedly, unique constraints return the original event/task instead of sending again.
+- After an outage, audit missed milestones and send only the most urgent currently applicable customer reminder per run; never dump several stale emails at once. The 48-hour call task must still be created if its threshold was crossed.
+
+The existing notification event/outbox/delivery records should be reused for channel delivery evidence. Add `CollectionsEvent` records for scheduling decisions, call actions, overrides, resolution, and suspension.
+
+Add dedicated localized notification types/templates rather than reusing generic payment failures: `SUBSCRIPTION_PAYMENT_DUE_14D`, `SUBSCRIPTION_PAYMENT_DUE_7D`, `SUBSCRIPTION_PAYMENT_DUE_48H`, `SUBSCRIPTION_PAYMENT_DUE_24H`, `SUBSCRIPTION_GRACE_DAILY`, `SUBSCRIPTION_GRACE_FINAL`, `COLLECTIONS_CALL_REQUIRED`, `SUBSCRIPTION_PAYMENT_CONFIRMED`, `MANUAL_PAYMENT_EVIDENCE_REJECTED`, `COLLECTIONS_OVERRIDE_CHANGED`, and `SUBSCRIPTION_SUSPENDED`. Every customer-facing template must exist in `ar`, `en`, and `fr` with an identical variable contract. Template variables must come from the canonical invoice/case, not caller-supplied display amounts or dates.
+
+Retire the current hard-coded 7-day `runPaymentPendingTimeoutJob` and `runPastDueTimeoutJob` behavior for canonical subscription renewals before enabling this worker. Running both lifecycles would restrict or suspend accounts early.
+
+### Disputes, extensions, and exceptions
+
+- An authorized `PAYMENT_DISPUTE` or `MANUAL_EXTENSION` override pauses automatic suspension until its explicit expiry/revised suspension date. It must never mark the invoice paid.
+- `pauseNotifications` is a separate audited choice. A dispute may replace ordinary daily demands with dispute-status communication; an extension normally reschedules reminders against the revised date.
+- Expired/revoked overrides return the case to the calculated schedule. The next worker must re-check payment before any reminder or suspension.
+- A `PAST_DUE` manual invoice may still be paid if it has not been voided or replaced.
+- A changed plan/method must void or supersede the old open invoice; it must never leave two invoices capable of activating different plans.
+- Reference collision, overpayment, underpayment, wrong currency, bounced check, or unmatched transfer goes to a finance exception queue. Do not “fix” these by editing ledger rows.
+- Suspicious, infected, unscannable, unreadable, wrong-invoice, or mismatched evidence goes to quarantine/rejection and must never reach payment confirmation.
+- A bounced check after activation requires compensating records, reopens collections, and re-evaluates subscription access under an authorized reversal workflow. Never delete the original payment/evidence.
+
+## 10. Files expected to change
+
+| Layer | Files/modules |
+| --- | --- |
+| Database | Missing `@rentaldrivego/database` Prisma schema and a new migration |
+| Subscription contracts | `api/src/modules/subscriptions/subscription.schemas.ts` |
+| Subscription routes | `api/src/modules/subscriptions/subscription.routes.ts` |
+| Subscription orchestration | `api/src/modules/subscriptions/subscription.service.ts` |
+| Canonical invoice repository | `api/src/modules/subscriptions/subscription.repo.ts` and/or a shared billing repository |
+| Admin validation | `api/src/modules/admin/admin.schemas.ts` |
+| Admin route | `api/src/modules/admin/admin.routes.ts` |
+| Admin transaction logic | `api/src/modules/admin/admin.billing.service.ts` |
+| Evidence validation/upload | `api/src/http/upload/index.ts` or a new `api/src/http/upload/paymentEvidence.ts` |
+| Private document storage | `api/src/lib/storage.ts` plus the production persistent-storage adapter |
+| Evidence service/repository | New subscription billing evidence module under `api/src/modules/subscriptions/` or a shared billing module |
+| Collections policy/worker | `api/src/modules/subscriptions/subscription.policy.ts`, a new collections service/repository/worker, and `api/src/index.ts` scheduler wiring |
+| Notification targeting/outbox | `api/src/services/notificationService.ts`, localization templates, and notification repository/routes |
+| Locale resolution/templates | `api/src/services/notificationLocalizationService.ts`, all subscription-payment email/in-app templates, and template-variable parity checks |
+| Billing contacts/timezone/language | Database schema plus company/billing-account settings schemas, services, `api/src/modules/companies/company.schemas.ts`, and owner UI |
+| Admin task/override API | Admin schemas/routes/service plus collections policy authorization |
+| API documentation | `api/src/swagger/openapi.ts` |
+| Customer subscription UI | `dashboard/src/app/(dashboard)/subscription/page.tsx` |
+| Admin billing/collections UI | `admin/src/app/dashboard/billing/page.tsx`, new collections queue/task views, and a personal admin notification inbox/badge |
+| Shared types/i18n | Missing shared packages plus `dashboard/src/components/I18nProvider.tsx`, `admin/src/components/I18nProvider.tsx`, locale selectors, and Arabic RTL styles/email markup |
+| Tests | Subscription, admin billing, API, integration, and end-to-end test suites |
+
+## 11. Test plan
+
+### Unit and schema tests
+
+- Accept only `BANK_TRANSFER`/`CHECK` on the manual endpoint.
+- Reject empty/oversized/control-character references, invalid dates, false/missing verification, floats, non-positive amounts, and wrong currency.
+- Normalize case/whitespace consistently without changing the stored display value.
+- Verify monthly/yearly period calculations at month-end and leap-year boundaries.
+- Accept valid PDF/JPEG/PNG signatures and reject spoofed MIME types/extensions, SVG/HTML, archives, executables, malformed/polyglot files, decompression bombs, oversized images, excessive counts, and size-limit violations.
+- Verify 14-day, 7-day, 48-hour, 24-hour, grace-day, and day-31 calculations in multiple IANA zones, including daylight-saving and Morocco offset changes.
+- Reject invalid/fixed-offset timezone identifiers and invalid/indefinite override windows.
+- Accept only `ar`, `en`, and `fr`; reject empty enabled sets, unsupported values, defaults outside the set, and contact locales outside the set.
+- Verify locale precedence: explicit billing-contact locale, enabled linked-employee preference, company default, then audited emergency English fallback.
+- Enforce template parity in CI: every customer-facing template key and interpolation variable must exist in all three languages, with no unresolved keys or silent mixed-language output.
+
+### Service and database tests
+
+- Manual checkout computes the server-side price and creates one open canonical invoice.
+- Repeated checkout with the same key returns the same invoice.
+- A second open invoice for the same purchase is rejected or explicitly replaces the first.
+- Confirming a settled payment atomically records payment, pays invoice, activates the requested plan, and writes events/audit.
+- A duplicate reference for the same account/method is rejected.
+- Two concurrent confirmations cannot both change the balance or create two successful attempts.
+- Underpayment, overpayment, wrong method, wrong invoice state, and stale amount do not activate the subscription.
+- Admin confirmation updates the customer-visible invoice during the compatibility period.
+- Past-due-but-payable succeeds; void/uncollectible/refunded fails.
+- A notification failure leaves the payment committed and schedules a retry.
+- Draft submission supports idempotent upload retry and submit; submitted documents cannot be replaced or deleted.
+- Submission is blocked until at least one document is clean and all documents have finished scanning.
+- Quarantined/scan-failed evidence cannot be viewed as clean evidence or used for approval.
+- File and database failures do not leave an approved orphan document or an untracked stored object; cleanup jobs reconcile abandoned drafts/quarantine objects.
+- SHA-256 digest remains stable through storage/retrieval and catches an accidental duplicate within a submission.
+- Collections case creation persists the original expiration, all milestone instants, and final suspension time once.
+- Each pre-due milestone reaches only explicit billing recipients and the assigned collections admin with the required channels.
+- Re-running the worker or running two workers concurrently creates one notification event per recipient/milestone and one 48-hour call task.
+- A company with all three languages enabled receives one notice per recipient/milestone in that recipient's resolved language, never three duplicate notices.
+- Each delivery persists the resolved locale, company timezone, template key/version, render snapshot/inputs, and localization-fallback status; retries reproduce the same localized content.
+- Changing a company/contact language does not resend completed milestones; the next unsent event uses the newly resolved language.
+- The assigned admin's internal notice uses the admin preference while the call task exposes the company/contact language and the correct localized customer script.
+- The call task remains open without an outcome; every outcome is audited; payment promise creates the next follow-up without resolving the invoice.
+- Grace days 1–29 send one daily notice; day 30 sends one final-warning variant; the start of day 31 suspends once.
+- The subscription retains full access throughout grace.
+- Confirmed Stripe/manual payment immediately resolves collections, cancels tasks/queued notices, and wins safely against concurrent suspension.
+- Pending/failed attempts, uploaded evidence, submitted evidence, and payment promises do not stop reminders.
+- Active dispute/extension overrides prevent suspension; expiry/revocation resumes the correct schedule without duplicate or stale notices.
+- Missing timezone/recipient/assignee fails safe, alerts finance, and does not auto-suspend.
+
+### Authorization and boundary tests
+
+- Non-owner company users cannot create manual subscription invoices.
+- Owners cannot confirm their own payments through admin endpoints.
+- Non-finance admins and stale/non-enrolled 2FA sessions cannot confirm payments.
+- Cross-tenant invoice access fails without leaking existence.
+- CSRF and rate-limit policies remain enforced.
+- Owners cannot attach a document to another company’s invoice/submission or guess a storage key to download it.
+- Only the uploading company and authorized finance admins can access evidence; each admin view/download is audited.
+- Private evidence is not reachable through `/storage`, search, static assets, invoice PDFs, logs, or public URLs.
+- Only authorized company owners can manage billing contacts; they cannot remove the last verified recipient.
+- Call outcomes are limited to the assigned/authorized platform admin; overrides require authorized roles and fresh 2FA.
+- The company-wide audience is never used for collections, and platform notices never leak into a company employee account.
+
+### UI and end-to-end tests
+
+- Stripe checkout still redirects and webhook success still activates exactly once.
+- Bank transfer/check show correct configured instructions and create a pending invoice without activation.
+- Customer can upload valid evidence, observe scanning, submit it for review, and cannot edit it afterward.
+- Invalid/quarantined evidence produces a safe error without exposing scanner internals.
+- Admin can securely inspect clean evidence, reject it with a reason, or proceed to confirmation.
+- Billing contacts see the exact amount, original expiration, days remaining, final suspension time, and current payment action in the dashboard/email templates.
+- Assigned platform admins receive the specified milestone channels, see the open 48-hour call task, and can record each required outcome.
+- Payment confirmation during grace removes future reminders immediately; an already-queued delivery is suppressed by the final state check.
+- Day-31 suspension and authorized dispute/extension behavior are covered end to end in a non-UTC company timezone.
+- Admin confirmation dialog sends method, reference, full amount, date, note, verification, and stable idempotency key.
+- Customer status changes from awaiting verification to paid/active after admin confirmation.
+- English, French, and Arabic labels, validation errors, payment instructions, notification/email bodies, call scripts, and layouts are verified.
+- Arabic screens and emails set the correct language/direction metadata and remain usable in RTL; English and French remain LTR.
+- Amounts, dates, grace-day counts, and suspension times render correctly for each language in the company's configured timezone without changing stored financial/time values.
+
+## 12. Rollout sequence
+
+1. **Schema and observability:** deploy nullable payment/evidence fields, collections/contact/task/override tables, indexes, structured audit fields, metrics, and reference-safe logging.
+2. **Recipient/timezone/language readiness:** collect and verify an IANA timezone, primary billing recipients, enabled/default communication languages, and assigned/fallback collections owner for every live account. Backfill from the existing supported brand/default locale, otherwise use English and flag for owner review. Do not enable automatic suspension for incomplete accounts.
+3. **Private storage and scanning:** provision durable private storage, quarantine, malware scanning, retention controls, protected downloads, and orphan cleanup before accepting any customer document.
+4. **Backfill and reconciliation:** create/verify canonical `BillingInvoice` links for all legacy subscription invoices; produce a reconciliation report before switching reads.
+5. **Canonical service:** make Stripe and customer invoice reads use the canonical lifecycle while retaining temporary compatibility writes.
+6. **Shadow collections worker:** calculate milestones and idempotency keys without sending or suspending; compare results against expected company-local dates and current invoices.
+7. **Notifications/tasks:** complete Arabic/English/French template parity and locale-resolution tests, then enable internal collections inbox/call tasks and pre-expiration company notices. Verify recipient scoping, language snapshots, RTL rendering, and email deliverability.
+8. **Evidence review and admin confirmation:** deploy private evidence endpoints, finance review queue, manual-payment confirmation, rejection, and atomic collections resolution behind feature flags.
+9. **Grace/suspension enforcement:** enable daily grace notices, overrides, and finally day-31 suspension after shadow data shows zero timing/recipient/payment-state mismatches.
+10. **Customer manual checkout:** expose bank/check and evidence upload only after instructions, storage/scanning, and finance operations are ready.
+11. **Monitor:** track milestone lag, duplicates suppressed, recipient/config gaps, open/overdue call tasks, override expiry, daily delivery failures, grace age, blocked suspensions, scan failures, confirmation conflicts, invoice/subscription mismatches, and Stripe regressions.
+12. **Retire compatibility:** remove lazy legacy sync and dual writes only after at least one billing cycle reconciles with zero mismatches.
+
+Suggested flags:
+
+- `manualSubscriptionPaymentsEnabled`
+- `bankTransferEnabled`
+- `checkPaymentEnabled`
+- `manualPaymentEvidenceUploadEnabled`
+- `subscriptionCollectionsNotificationsEnabled`
+- `subscriptionGracePeriodEnforcementEnabled`
+- `subscriptionAutomaticSuspensionEnabled`
+
+## 13. Acceptance criteria
+
+- An owner can choose Stripe, bank transfer, or check for a subscription purchase.
+- A manual choice creates exactly one pending canonical invoice with server-calculated price and safe payment instructions.
+- The owner can attach one to three valid private PDF/JPEG/PNG evidence documents and submit them to finance review.
+- Uploaded files are content-validated, malware-scanned, stored privately, tenant-protected, and audited; rejected or unscannable files cannot be approved.
+- The subscription is not activated when the invoice is created, when the customer reports a reference, or when evidence is uploaded/submitted.
+- A finance admin with fresh 2FA can confirm a cleared full payment using a required method and reference.
+- The admin can review clean evidence and reject it with a reason; approving a payment links the exact immutable submission and documents to the payment record.
+- Confirmation is idempotent, concurrency-safe, duplicate-resistant, fully audited, and atomic.
+- The paid invoice shown to the admin is the same invoice/status shown to the company owner.
+- Full initial confirmation activates the requested plan; renewal confirmation extends from the original expiration boundary without discarding remaining paid days.
+- Existing Stripe checkout/webhook behavior remains correct and does not double-activate.
+- Only explicit company billing contacts/owners and the assigned platform collections admin receive payment notices.
+- Every customer-facing subscription-payment communication is available in Arabic, English, and French and is sent once in the recipient's deterministic company-approved language.
+- A company can enable one or more supported languages and select one default; contact preferences are constrained to the enabled set and otherwise inherit the default.
+- Arabic customer UI/email uses RTL and correct `lang`/`dir` metadata; English and French use LTR. Dates, times, amounts, and currencies follow the resolved language and company timezone.
+- A language change affects future unsent communications without duplicating past milestones; every delivery records the locale and template version used.
+- Platform-admin tasks clearly identify the customer's language and provide the matching call script, even when the admin's internal interface uses a different preferred language.
+- Pre-expiration notifications follow the 14-day, 7-day, 48-hour, and 24-hour channel matrix without duplicates.
+- The 48-hour call task remains open until a valid outcome is recorded; payment promises create follow-up but do not resolve payment.
+- An unpaid subscription remains fully active for the complete 30-day grace period and receives one targeted in-app/email notice per local day, with the day-30 notice serving as the final warning.
+- At the start of local day 31, the system suspends exactly once only if payment remains unconfirmed and no authorized override is active.
+- Confirmed payment immediately stops future reminders/tasks and keeps/restores active service, including when confirmation races with suspension.
+- Timezone, idempotency, audit, disputes, extensions, and notification-delivery requirements are satisfied.
+- The audit trail identifies every in-app notice, email delivery, call task, call outcome, payment confirmation, override, collections resolution, and suspension with actor and timestamp.
+- All API, service, authorization, regression, and multilingual UI tests pass.
+
+## 14. Required business inputs before implementation
+
+These are configuration inputs, not reasons to weaken the design:
+
+- Bank-transfer payer instructions: account name, bank name, RIB/IBAN or local account reference, and transfer memo rule.
+- Check instructions: exact payee name, delivery address, and whether activation waits for deposit or full clearance. Recommended: full clearance.
+- Manual-method payment/clearing lead times. The post-expiration subscription grace period is fixed at 30 days unless an authorized extension overrides it.
+- Finance escalation owner for unmatched, short, excess, duplicate, or bounced payments.
+- Collections assignment/fallback policy, overdue call-task escalation SLA, and which admin roles may act as collections owners.
+- Required local reminder send time and verified source of each billing account’s IANA timezone.
+- Whether the UI should expose generic base locales (`ar`, `en`, `fr`) while formatting for Morocco-specific conventions (`ar-MA`, `fr-MA`), and the regional convention to use for English. Recommended: store the three base communication choices and map them centrally to approved regional formatting locales.
+- Approved professional Arabic, English, and French wording for payment instructions, legal/collections notices, evidence rejection, dispute/extension, grace-period warnings, call scripts, and suspension. Product/finance must approve all three versions before notifications are enabled.
+- Override policy: maximum extension length, who may approve it, when normal daily notices pause, and dispute communication templates.
+- Whether manual methods are available to every plan/company. Recommended MVP: configurable globally, with the ability to disable each method independently.
+- Evidence retention/deletion period, legal-hold rules, and the person authorized to approve exceptional deletion. This must follow the applicable accounting/privacy jurisdiction.
+- Approved malware-scanning service and production private-storage backend. Do not enable uploads if scanning or durable private storage is unavailable.
diff --git a/packages/database/prisma/migrations/20260809190000_manual_subscription_payments/migration.sql b/packages/database/prisma/migrations/20260809190000_manual_subscription_payments/migration.sql
new file mode 100644
index 0000000..bde3bc6
--- /dev/null
+++ b/packages/database/prisma/migrations/20260809190000_manual_subscription_payments/migration.sql
@@ -0,0 +1,538 @@
+-- CreateEnum
+CREATE TYPE "SubscriptionCollectionMethod" AS ENUM ('STRIPE', 'BANK_TRANSFER', 'CHECK');
+
+-- CreateEnum
+CREATE TYPE "BillingPaymentChannel" AS ENUM ('ONLINE', 'OFFLINE');
+
+-- CreateEnum
+CREATE TYPE "ManualPaymentMethod" AS ENUM ('BANK_TRANSFER', 'CHECK');
+
+-- CreateEnum
+CREATE TYPE "ManualPaymentSubmissionStatus" AS ENUM ('DRAFT', 'SUBMITTED', 'UNDER_REVIEW', 'APPROVED', 'REJECTED');
+
+-- CreateEnum
+CREATE TYPE "ManualPaymentDocumentKind" AS ENUM ('BANK_TRANSFER_RECEIPT', 'CHECK_COPY', 'OTHER_SUPPORTING_EVIDENCE');
+
+-- CreateEnum
+CREATE TYPE "ManualPaymentDocumentScanStatus" AS ENUM ('UPLOADED', 'SCANNING', 'CLEAN', 'QUARANTINED', 'SCAN_FAILED');
+
+-- CreateEnum
+CREATE TYPE "CollectionsCaseStatus" AS ENUM ('SCHEDULED', 'PRE_DUE', 'GRACE_PERIOD', 'RESOLVED', 'SUSPENDED');
+
+-- CreateEnum
+CREATE TYPE "CollectionsCallTaskType" AS ENUM ('PRE_EXPIRY_48H_CALL', 'PAYMENT_PROMISE_FOLLOW_UP');
+
+-- CreateEnum
+CREATE TYPE "CollectionsCallTaskStatus" AS ENUM ('OPEN', 'COMPLETED', 'CANCELLED');
+
+-- CreateEnum
+CREATE TYPE "CollectionsCallOutcome" AS ENUM ('CONTACTED', 'NO_ANSWER', 'PAYMENT_PROMISED', 'ISSUE_ESCALATED');
+
+-- CreateEnum
+CREATE TYPE "CollectionsOverrideType" AS ENUM ('PAYMENT_DISPUTE', 'MANUAL_EXTENSION');
+
+-- CreateEnum
+CREATE TYPE "CollectionsOverrideStatus" AS ENUM ('ACTIVE', 'REVOKED', 'EXPIRED');
+
+-- AlterEnum
+-- This migration adds more than one value to an enum.
+-- With PostgreSQL versions 11 and earlier, this is not possible
+-- in a single migration. This can be worked around by creating
+-- multiple migrations, each migration adding only one value to
+-- the enum.
+
+
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_PAYMENT_DUE_14D';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_PAYMENT_DUE_7D';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_PAYMENT_DUE_48H';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_PAYMENT_DUE_24H';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_GRACE_DAILY';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_GRACE_FINAL';
+ALTER TYPE "NotificationType" ADD VALUE 'COLLECTIONS_CALL_REQUIRED';
+ALTER TYPE "NotificationType" ADD VALUE 'MANUAL_PAYMENT_EVIDENCE_SUBMITTED';
+ALTER TYPE "NotificationType" ADD VALUE 'SUBSCRIPTION_PAYMENT_CONFIRMED';
+ALTER TYPE "NotificationType" ADD VALUE 'MANUAL_PAYMENT_EVIDENCE_REJECTED';
+ALTER TYPE "NotificationType" ADD VALUE 'COLLECTIONS_OVERRIDE_CHANGED';
+
+-- AlterEnum
+-- This migration adds more than one value to an enum.
+-- With PostgreSQL versions 11 and earlier, this is not possible
+-- in a single migration. This can be worked around by creating
+-- multiple migrations, each migration adding only one value to
+-- the enum.
+
+
+ALTER TYPE "NotificationRecipientType" ADD VALUE 'BILLING_CONTACT';
+ALTER TYPE "NotificationRecipientType" ADD VALUE 'ADMIN';
+
+-- AlterTable
+ALTER TABLE "billing_accounts" ADD COLUMN "collectionsOwnerAdminId" TEXT,
+ADD COLUMN "defaultCommunicationLocale" TEXT NOT NULL DEFAULT 'en',
+ADD COLUMN "enabledCommunicationLocales" TEXT[] DEFAULT ARRAY['en']::TEXT[],
+ADD COLUMN "reminderLocalTime" TEXT NOT NULL DEFAULT '09:00',
+ADD COLUMN "timezone" TEXT NOT NULL DEFAULT 'Africa/Casablanca';
+
+-- AlterTable
+ALTER TABLE "billing_invoices" ADD COLUMN "checkoutIdempotencyKey" TEXT,
+ADD COLUMN "collectionMethod" "SubscriptionCollectionMethod" NOT NULL DEFAULT 'STRIPE',
+ADD COLUMN "renewalKey" TEXT,
+ADD COLUMN "requestedBillingPeriod" "BillingPeriod",
+ADD COLUMN "requestedPlan" "Plan";
+
+-- AlterTable
+ALTER TABLE "billing_payment_attempts" ADD COLUMN "channel" "BillingPaymentChannel" NOT NULL DEFAULT 'ONLINE',
+ADD COLUMN "confirmedAt" TIMESTAMP(3),
+ADD COLUMN "confirmedByAdminId" TEXT,
+ADD COLUMN "externalReference" TEXT,
+ADD COLUMN "idempotencyKey" TEXT,
+ADD COLUMN "manualMethod" "ManualPaymentMethod",
+ADD COLUMN "normalizedExternalReference" TEXT,
+ADD COLUMN "note" TEXT,
+ADD COLUMN "receivedAt" TIMESTAMP(3);
+
+-- AlterTable
+ALTER TABLE "notification_recipients" ADD COLUMN "adminUserId" TEXT,
+ADD COLUMN "billingContactId" TEXT;
+
+-- AlterTable
+ALTER TABLE "admin_users" ADD COLUMN "preferredLocale" TEXT NOT NULL DEFAULT 'en';
+
+-- CreateTable
+CREATE TABLE "billing_contacts" (
+ "id" TEXT NOT NULL,
+ "billingAccountId" TEXT NOT NULL,
+ "companyId" TEXT NOT NULL,
+ "employeeId" TEXT,
+ "email" TEXT NOT NULL,
+ "locale" TEXT,
+ "isPrimary" BOOLEAN NOT NULL DEFAULT false,
+ "receivePaymentNotices" BOOLEAN NOT NULL DEFAULT true,
+ "isActive" BOOLEAN NOT NULL DEFAULT true,
+ "verifiedAt" TIMESTAMP(3),
+ "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "billing_contacts_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "manual_payment_submissions" (
+ "id" TEXT NOT NULL,
+ "invoiceId" TEXT NOT NULL,
+ "billingAccountId" TEXT NOT NULL,
+ "companyId" TEXT NOT NULL,
+ "method" "ManualPaymentMethod" NOT NULL,
+ "submittedReference" TEXT NOT NULL,
+ "normalizedSubmittedReference" TEXT NOT NULL,
+ "status" "ManualPaymentSubmissionStatus" NOT NULL DEFAULT 'DRAFT',
+ "submittedByEmployeeId" TEXT NOT NULL,
+ "submittedAt" TIMESTAMP(3),
+ "reviewedByAdminId" TEXT,
+ "reviewedAt" TIMESTAMP(3),
+ "rejectionReason" TEXT,
+ "idempotencyKey" TEXT NOT NULL,
+ "paymentAttemptId" TEXT,
+ "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "manual_payment_submissions_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "manual_payment_documents" (
+ "id" TEXT NOT NULL,
+ "submissionId" TEXT NOT NULL,
+ "invoiceId" TEXT NOT NULL,
+ "companyId" TEXT NOT NULL,
+ "kind" "ManualPaymentDocumentKind" NOT NULL,
+ "storageKey" TEXT NOT NULL,
+ "originalFilename" TEXT NOT NULL,
+ "detectedMimeType" TEXT NOT NULL,
+ "detectedExtension" TEXT NOT NULL,
+ "byteSize" INTEGER NOT NULL,
+ "sha256" TEXT NOT NULL,
+ "scanStatus" "ManualPaymentDocumentScanStatus" NOT NULL DEFAULT 'UPLOADED',
+ "scannerResultCode" TEXT,
+ "uploadedByEmployeeId" TEXT NOT NULL,
+ "uploadedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "deletedAt" TIMESTAMP(3),
+
+ CONSTRAINT "manual_payment_documents_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "collections_cases" (
+ "id" TEXT NOT NULL,
+ "invoiceId" TEXT NOT NULL,
+ "subscriptionId" TEXT NOT NULL,
+ "billingAccountId" TEXT NOT NULL,
+ "companyId" TEXT NOT NULL,
+ "status" "CollectionsCaseStatus" NOT NULL DEFAULT 'SCHEDULED',
+ "originalExpirationAt" TIMESTAMP(3) NOT NULL,
+ "reminder14At" TIMESTAMP(3) NOT NULL,
+ "reminder7At" TIMESTAMP(3) NOT NULL,
+ "reminder48At" TIMESTAMP(3) NOT NULL,
+ "reminder24At" TIMESTAMP(3) NOT NULL,
+ "graceStartedAt" TIMESTAMP(3),
+ "finalSuspensionAt" TIMESTAMP(3) NOT NULL,
+ "resolvedAt" TIMESTAMP(3),
+ "suspendedAt" TIMESTAMP(3),
+ "nextActionAt" TIMESTAMP(3),
+ "collectionsOwnerAdminId" TEXT,
+ "resolutionPaymentAttemptId" TEXT,
+ "processingLeaseUntil" TIMESTAMP(3),
+ "processingBy" TEXT,
+ "version" INTEGER NOT NULL DEFAULT 0,
+ "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "collections_cases_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "collections_call_tasks" (
+ "id" TEXT NOT NULL,
+ "collectionsCaseId" TEXT NOT NULL,
+ "taskType" "CollectionsCallTaskType" NOT NULL,
+ "assignedAdminId" TEXT NOT NULL,
+ "billingContactId" TEXT,
+ "dueAt" TIMESTAMP(3) NOT NULL,
+ "status" "CollectionsCallTaskStatus" NOT NULL DEFAULT 'OPEN',
+ "outcome" "CollectionsCallOutcome",
+ "note" TEXT,
+ "promisedPaymentAt" TIMESTAMP(3),
+ "nextFollowUpAt" TIMESTAMP(3),
+ "completedByAdminId" TEXT,
+ "completedAt" TIMESTAMP(3),
+ "cancellationReason" TEXT,
+ "companyDefaultLocale" TEXT NOT NULL,
+ "contactLocale" TEXT NOT NULL,
+ "customerScript" TEXT NOT NULL,
+ "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "collections_call_tasks_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "collections_overrides" (
+ "id" TEXT NOT NULL,
+ "collectionsCaseId" TEXT NOT NULL,
+ "type" "CollectionsOverrideType" NOT NULL,
+ "status" "CollectionsOverrideStatus" NOT NULL DEFAULT 'ACTIVE',
+ "reason" TEXT NOT NULL,
+ "expiresAt" TIMESTAMP(3) NOT NULL,
+ "revisedSuspensionAt" TIMESTAMP(3),
+ "pauseSuspension" BOOLEAN NOT NULL DEFAULT true,
+ "pauseNotifications" BOOLEAN NOT NULL DEFAULT false,
+ "createdByAdminId" TEXT NOT NULL,
+ "revokedByAdminId" TEXT,
+ "revokedAt" TIMESTAMP(3),
+ "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "collections_overrides_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "collections_events" (
+ "id" TEXT NOT NULL,
+ "collectionsCaseId" TEXT NOT NULL,
+ "companyId" TEXT NOT NULL,
+ "eventType" TEXT NOT NULL,
+ "idempotencyKey" TEXT NOT NULL,
+ "scheduledFor" TIMESTAMP(3),
+ "occurredAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "actorType" TEXT NOT NULL DEFAULT 'system',
+ "actorId" TEXT,
+ "payload" JSONB NOT NULL DEFAULT '{}',
+
+ CONSTRAINT "collections_events_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "billing_contacts_companyId_isActive_idx" ON "billing_contacts"("companyId", "isActive");
+
+-- CreateIndex
+CREATE INDEX "billing_contacts_employeeId_idx" ON "billing_contacts"("employeeId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "billing_contacts_billingAccountId_email_key" ON "billing_contacts"("billingAccountId", "email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "manual_payment_submissions_paymentAttemptId_key" ON "manual_payment_submissions"("paymentAttemptId");
+
+-- CreateIndex
+CREATE INDEX "manual_payment_submissions_invoiceId_status_idx" ON "manual_payment_submissions"("invoiceId", "status");
+
+-- CreateIndex
+CREATE INDEX "manual_payment_submissions_status_submittedAt_idx" ON "manual_payment_submissions"("status", "submittedAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "manual_payment_submissions_billingAccountId_idempotencyKey_key" ON "manual_payment_submissions"("billingAccountId", "idempotencyKey");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "manual_payment_documents_storageKey_key" ON "manual_payment_documents"("storageKey");
+
+-- CreateIndex
+CREATE INDEX "manual_payment_documents_invoiceId_idx" ON "manual_payment_documents"("invoiceId");
+
+-- CreateIndex
+CREATE INDEX "manual_payment_documents_companyId_idx" ON "manual_payment_documents"("companyId");
+
+-- CreateIndex
+CREATE INDEX "manual_payment_documents_scanStatus_uploadedAt_idx" ON "manual_payment_documents"("scanStatus", "uploadedAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "manual_payment_documents_submissionId_sha256_key" ON "manual_payment_documents"("submissionId", "sha256");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_cases_invoiceId_key" ON "collections_cases"("invoiceId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_cases_resolutionPaymentAttemptId_key" ON "collections_cases"("resolutionPaymentAttemptId");
+
+-- CreateIndex
+CREATE INDEX "collections_cases_status_nextActionAt_idx" ON "collections_cases"("status", "nextActionAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_cases_subscriptionId_originalExpirationAt_key" ON "collections_cases"("subscriptionId", "originalExpirationAt");
+
+-- CreateIndex
+CREATE INDEX "collections_call_tasks_assignedAdminId_status_dueAt_idx" ON "collections_call_tasks"("assignedAdminId", "status", "dueAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_call_tasks_collectionsCaseId_taskType_key" ON "collections_call_tasks"("collectionsCaseId", "taskType");
+
+-- CreateIndex
+CREATE INDEX "collections_overrides_collectionsCaseId_status_expiresAt_idx" ON "collections_overrides"("collectionsCaseId", "status", "expiresAt");
+
+-- CreateIndex
+CREATE INDEX "collections_events_companyId_occurredAt_idx" ON "collections_events"("companyId", "occurredAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "collections_events_collectionsCaseId_idempotencyKey_key" ON "collections_events"("collectionsCaseId", "idempotencyKey");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "billing_invoices_renewalKey_key" ON "billing_invoices"("renewalKey");
+
+-- CreateIndex
+CREATE INDEX "billing_invoices_collectionMethod_status_dueAt_idx" ON "billing_invoices"("collectionMethod", "status", "dueAt");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "billing_invoices_billingAccountId_checkoutIdempotencyKey_key" ON "billing_invoices"("billingAccountId", "checkoutIdempotencyKey");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "billing_payment_attempts_billingAccountId_idempotencyKey_key" ON "billing_payment_attempts"("billingAccountId", "idempotencyKey");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "billing_payment_attempts_billingAccountId_manualMethod_norm_key" ON "billing_payment_attempts"("billingAccountId", "manualMethod", "normalizedExternalReference");
+
+-- CreateIndex
+CREATE INDEX "notification_recipients_billingContactId_readAt_createdAt_idx" ON "notification_recipients"("billingContactId", "readAt", "createdAt");
+
+-- CreateIndex
+CREATE INDEX "notification_recipients_adminUserId_readAt_createdAt_idx" ON "notification_recipients"("adminUserId", "readAt", "createdAt");
+
+-- AddForeignKey
+ALTER TABLE "billing_accounts" ADD CONSTRAINT "billing_accounts_collectionsOwnerAdminId_fkey" FOREIGN KEY ("collectionsOwnerAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "billing_contacts" ADD CONSTRAINT "billing_contacts_billingAccountId_fkey" FOREIGN KEY ("billingAccountId") REFERENCES "billing_accounts"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "billing_contacts" ADD CONSTRAINT "billing_contacts_companyId_fkey" FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "billing_contacts" ADD CONSTRAINT "billing_contacts_employeeId_fkey" FOREIGN KEY ("employeeId") REFERENCES "employees"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "billing_payment_attempts" ADD CONSTRAINT "billing_payment_attempts_confirmedByAdminId_fkey" FOREIGN KEY ("confirmedByAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_invoiceId_fkey" FOREIGN KEY ("invoiceId") REFERENCES "billing_invoices"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_billingAccountId_fkey" FOREIGN KEY ("billingAccountId") REFERENCES "billing_accounts"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_companyId_fkey" FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_submittedByEmployeeId_fkey" FOREIGN KEY ("submittedByEmployeeId") REFERENCES "employees"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_reviewedByAdminId_fkey" FOREIGN KEY ("reviewedByAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_submissions" ADD CONSTRAINT "manual_payment_submissions_paymentAttemptId_fkey" FOREIGN KEY ("paymentAttemptId") REFERENCES "billing_payment_attempts"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_documents" ADD CONSTRAINT "manual_payment_documents_submissionId_fkey" FOREIGN KEY ("submissionId") REFERENCES "manual_payment_submissions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_documents" ADD CONSTRAINT "manual_payment_documents_companyId_fkey" FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "manual_payment_documents" ADD CONSTRAINT "manual_payment_documents_uploadedByEmployeeId_fkey" FOREIGN KEY ("uploadedByEmployeeId") REFERENCES "employees"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_invoiceId_fkey" FOREIGN KEY ("invoiceId") REFERENCES "billing_invoices"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_subscriptionId_fkey" FOREIGN KEY ("subscriptionId") REFERENCES "subscriptions"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_billingAccountId_fkey" FOREIGN KEY ("billingAccountId") REFERENCES "billing_accounts"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_companyId_fkey" FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_collectionsOwnerAdminId_fkey" FOREIGN KEY ("collectionsOwnerAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_cases" ADD CONSTRAINT "collections_cases_resolutionPaymentAttemptId_fkey" FOREIGN KEY ("resolutionPaymentAttemptId") REFERENCES "billing_payment_attempts"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_call_tasks" ADD CONSTRAINT "collections_call_tasks_collectionsCaseId_fkey" FOREIGN KEY ("collectionsCaseId") REFERENCES "collections_cases"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_call_tasks" ADD CONSTRAINT "collections_call_tasks_assignedAdminId_fkey" FOREIGN KEY ("assignedAdminId") REFERENCES "admin_users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_call_tasks" ADD CONSTRAINT "collections_call_tasks_billingContactId_fkey" FOREIGN KEY ("billingContactId") REFERENCES "billing_contacts"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_call_tasks" ADD CONSTRAINT "collections_call_tasks_completedByAdminId_fkey" FOREIGN KEY ("completedByAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_overrides" ADD CONSTRAINT "collections_overrides_collectionsCaseId_fkey" FOREIGN KEY ("collectionsCaseId") REFERENCES "collections_cases"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_overrides" ADD CONSTRAINT "collections_overrides_createdByAdminId_fkey" FOREIGN KEY ("createdByAdminId") REFERENCES "admin_users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_overrides" ADD CONSTRAINT "collections_overrides_revokedByAdminId_fkey" FOREIGN KEY ("revokedByAdminId") REFERENCES "admin_users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_events" ADD CONSTRAINT "collections_events_collectionsCaseId_fkey" FOREIGN KEY ("collectionsCaseId") REFERENCES "collections_cases"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "collections_events" ADD CONSTRAINT "collections_events_companyId_fkey" FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "notification_recipients" ADD CONSTRAINT "notification_recipients_billingContactId_fkey" FOREIGN KEY ("billingContactId") REFERENCES "billing_contacts"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "notification_recipients" ADD CONSTRAINT "notification_recipients_adminUserId_fkey" FOREIGN KEY ("adminUserId") REFERENCES "admin_users"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- Backfill communication policy from existing supported brand language and
+-- create an explicit primary owner contact. Accounts remain visibly flagged
+-- for owner review because the legacy schema had no verified IANA timezone.
+UPDATE "billing_accounts" AS account
+SET "defaultCommunicationLocale" = CASE
+ WHEN brand."defaultLocale" IN ('ar', 'en', 'fr') THEN brand."defaultLocale"
+ ELSE 'en'
+ END,
+ "enabledCommunicationLocales" = ARRAY[CASE
+ WHEN brand."defaultLocale" IN ('ar', 'en', 'fr') THEN brand."defaultLocale"
+ ELSE 'en'
+ END]::TEXT[],
+ "metadata" = COALESCE(account."metadata", '{}'::jsonb) || '{"communicationSettingsRequireOwnerReview":true}'::jsonb
+FROM "brand_settings" AS brand
+WHERE brand."companyId" = account."companyId";
+
+INSERT INTO "billing_contacts" (
+ "id", "billingAccountId", "companyId", "employeeId", "email", "locale",
+ "isPrimary", "receivePaymentNotices", "isActive", "verifiedAt", "createdAt", "updatedAt"
+)
+SELECT
+ 'bc_' || md5(random()::text || clock_timestamp()::text || account."id"),
+ account."id", account."companyId", owner."id", owner."email",
+ CASE WHEN owner."preferredLanguage" IN ('ar', 'en', 'fr') THEN owner."preferredLanguage" ELSE account."defaultCommunicationLocale" END,
+ true, true, true, COALESCE(owner."emailVerified", CURRENT_TIMESTAMP), CURRENT_TIMESTAMP, CURRENT_TIMESTAMP
+FROM "billing_accounts" AS account
+JOIN LATERAL (
+ SELECT employee.*
+ FROM "employees" AS employee
+ WHERE employee."companyId" = account."companyId"
+ AND employee."role" = 'OWNER'
+ AND employee."isActive" = true
+ ORDER BY employee."createdAt" ASC
+ LIMIT 1
+) AS owner ON true
+WHERE NOT EXISTS (
+ SELECT 1 FROM "billing_contacts" AS contact
+ WHERE contact."billingAccountId" = account."id"
+);
+
+UPDATE "billing_accounts" AS account
+SET "collectionsOwnerAdminId" = admin."id"
+FROM LATERAL (
+ SELECT "id"
+ FROM "admin_users"
+ WHERE "isActive" = true AND "role" IN ('FINANCE', 'ADMIN', 'SUPER_ADMIN')
+ ORDER BY "createdAt" ASC
+ LIMIT 1
+) AS admin
+WHERE account."collectionsOwnerAdminId" IS NULL;
+
+-- Database invariants that Prisma cannot express directly.
+ALTER TABLE "billing_accounts"
+ ALTER COLUMN "enabledCommunicationLocales" SET NOT NULL,
+ ALTER COLUMN "defaultCommunicationLocale" SET NOT NULL,
+ ALTER COLUMN "timezone" SET NOT NULL,
+ ALTER COLUMN "reminderLocalTime" SET NOT NULL;
+
+ALTER TABLE "billing_accounts"
+ ADD CONSTRAINT "billing_accounts_supported_locales_check"
+ CHECK (
+ cardinality("enabledCommunicationLocales") BETWEEN 1 AND 3
+ AND "enabledCommunicationLocales" <@ ARRAY['ar', 'en', 'fr']::TEXT[]
+ AND "defaultCommunicationLocale" = ANY("enabledCommunicationLocales")
+ ),
+ ADD CONSTRAINT "billing_accounts_reminder_time_check"
+ CHECK ("reminderLocalTime" ~ '^([01][0-9]|2[0-3]):[0-5][0-9]$');
+
+ALTER TABLE "billing_contacts"
+ ADD CONSTRAINT "billing_contacts_supported_locale_check"
+ CHECK ("locale" IS NULL OR "locale" IN ('ar', 'en', 'fr'));
+
+ALTER TABLE "admin_users"
+ ADD CONSTRAINT "admin_users_supported_locale_check"
+ CHECK ("preferredLocale" IN ('ar', 'en', 'fr'));
+
+ALTER TABLE "billing_payment_attempts"
+ ADD CONSTRAINT "billing_payment_attempts_offline_confirmation_check"
+ CHECK (
+ "channel" <> 'OFFLINE'
+ OR "status" <> 'SUCCEEDED'
+ OR (
+ "manualMethod" IS NOT NULL
+ AND length(trim(COALESCE("externalReference", ''))) >= 3
+ AND length(trim(COALESCE("normalizedExternalReference", ''))) >= 3
+ AND "receivedAt" IS NOT NULL
+ AND "confirmedAt" IS NOT NULL
+ AND "confirmedByAdminId" IS NOT NULL
+ AND "idempotencyKey" IS NOT NULL
+ )
+ );
+
+ALTER TABLE "manual_payment_documents"
+ ADD CONSTRAINT "manual_payment_documents_size_check"
+ CHECK ("byteSize" > 0 AND "byteSize" <= 10485760),
+ ADD CONSTRAINT "manual_payment_documents_mime_check"
+ CHECK ("detectedMimeType" IN ('application/pdf', 'image/jpeg', 'image/png'));
+
+ALTER TABLE "manual_payment_submissions"
+ ADD CONSTRAINT "manual_payment_submissions_reference_check"
+ CHECK (length(trim("submittedReference")) >= 3 AND length(trim("normalizedSubmittedReference")) >= 3);
+
+ALTER TABLE "collections_overrides"
+ ADD CONSTRAINT "collections_overrides_finite_window_check"
+ CHECK ("expiresAt" > "createdAt");
+
+ALTER TABLE "notification_recipients"
+ ADD CONSTRAINT "notification_recipients_exact_actor_check"
+ CHECK (num_nonnulls("employeeId", "renterId", "billingContactId", "adminUserId") = 1);
diff --git a/packages/database/prisma/migrations/20260810010000_manual_payment_evidence_submitted_notification/migration.sql b/packages/database/prisma/migrations/20260810010000_manual_payment_evidence_submitted_notification/migration.sql
new file mode 100644
index 0000000..80cd305
--- /dev/null
+++ b/packages/database/prisma/migrations/20260810010000_manual_payment_evidence_submitted_notification/migration.sql
@@ -0,0 +1,12 @@
+DO $$
+BEGIN
+ IF NOT EXISTS (
+ SELECT 1
+ FROM pg_enum e
+ JOIN pg_type t ON t.oid = e.enumtypid
+ WHERE t.typname = 'NotificationType'
+ AND e.enumlabel = 'MANUAL_PAYMENT_EVIDENCE_SUBMITTED'
+ ) THEN
+ ALTER TYPE "NotificationType" ADD VALUE 'MANUAL_PAYMENT_EVIDENCE_SUBMITTED';
+ END IF;
+END $$;
diff --git a/packages/database/prisma/migrations/20260810120000_one_active_manual_payment_submission_per_invoice/migration.sql b/packages/database/prisma/migrations/20260810120000_one_active_manual_payment_submission_per_invoice/migration.sql
new file mode 100644
index 0000000..0aef23b
--- /dev/null
+++ b/packages/database/prisma/migrations/20260810120000_one_active_manual_payment_submission_per_invoice/migration.sql
@@ -0,0 +1,27 @@
+-- Keep only the newest active manual payment submission per invoice before
+-- installing the invariant. Historical approved/rejected submissions remain.
+WITH ranked_active_submissions AS (
+ SELECT
+ "id",
+ ROW_NUMBER() OVER (
+ PARTITION BY "invoiceId"
+ ORDER BY "createdAt" DESC, "id" DESC
+ ) AS row_number
+ FROM "manual_payment_submissions"
+ WHERE "status" IN ('DRAFT', 'SUBMITTED', 'UNDER_REVIEW')
+)
+UPDATE "manual_payment_submissions" AS submission
+SET
+ "status" = 'REJECTED',
+ "rejectionReason" = COALESCE(
+ submission."rejectionReason",
+ 'Superseded by a newer active manual payment submission.'
+ ),
+ "reviewedAt" = COALESCE(submission."reviewedAt", CURRENT_TIMESTAMP)
+FROM ranked_active_submissions AS ranked
+WHERE submission."id" = ranked."id"
+ AND ranked.row_number > 1;
+
+CREATE UNIQUE INDEX "manual_payment_submissions_one_active_per_invoice"
+ON "manual_payment_submissions" ("invoiceId")
+WHERE "status" IN ('DRAFT', 'SUBMITTED', 'UNDER_REVIEW');
diff --git a/packages/database/prisma/migrations/20260810121000_one_primary_billing_account_per_company/migration.sql b/packages/database/prisma/migrations/20260810121000_one_primary_billing_account_per_company/migration.sql
new file mode 100644
index 0000000..69f510f
--- /dev/null
+++ b/packages/database/prisma/migrations/20260810121000_one_primary_billing_account_per_company/migration.sql
@@ -0,0 +1,39 @@
+-- Keep a single primary billing account per company. Prefer the account with
+-- the highest open balance, then the most invoices, then the newest account.
+WITH account_scores AS (
+ SELECT
+ account."id",
+ account."companyId",
+ COALESCE(SUM(
+ CASE
+ WHEN invoice."status" IN ('OPEN', 'PAYMENT_PENDING', 'PAST_DUE', 'PARTIALLY_PAID')
+ THEN invoice."amountDue"
+ ELSE 0
+ END
+ ), 0) AS open_balance,
+ COUNT(invoice."id") AS invoice_count,
+ account."createdAt"
+ FROM "billing_accounts" AS account
+ LEFT JOIN "billing_invoices" AS invoice
+ ON invoice."billingAccountId" = account."id"
+ WHERE account."isPrimary" = true
+ GROUP BY account."id", account."companyId", account."createdAt"
+),
+ranked_primary_accounts AS (
+ SELECT
+ "id",
+ ROW_NUMBER() OVER (
+ PARTITION BY "companyId"
+ ORDER BY open_balance DESC, invoice_count DESC, "createdAt" DESC, "id" DESC
+ ) AS row_number
+ FROM account_scores
+)
+UPDATE "billing_accounts" AS account
+SET "isPrimary" = false
+FROM ranked_primary_accounts AS ranked
+WHERE account."id" = ranked."id"
+ AND ranked.row_number > 1;
+
+CREATE UNIQUE INDEX "billing_accounts_one_primary_per_company"
+ON "billing_accounts" ("companyId")
+WHERE "isPrimary" = true;
diff --git a/packages/database/prisma/migrations/20260810123000_platform_billing_settings/migration.sql b/packages/database/prisma/migrations/20260810123000_platform_billing_settings/migration.sql
new file mode 100644
index 0000000..1915153
--- /dev/null
+++ b/packages/database/prisma/migrations/20260810123000_platform_billing_settings/migration.sql
@@ -0,0 +1,12 @@
+CREATE TABLE "platform_billing_settings" (
+ "id" TEXT NOT NULL DEFAULT 'default',
+ "taxRate" DOUBLE PRECISION NOT NULL DEFAULT 20,
+ "updatedAt" TIMESTAMP(3) NOT NULL,
+ "updatedBy" TEXT,
+
+ CONSTRAINT "platform_billing_settings_pkey" PRIMARY KEY ("id")
+);
+
+INSERT INTO "platform_billing_settings" ("id", "taxRate", "updatedAt")
+VALUES ('default', 20, NOW())
+ON CONFLICT ("id") DO NOTHING;
diff --git a/packages/database/prisma/schema.prisma b/packages/database/prisma/schema.prisma
index bbd62cb..9d3ff81 100644
--- a/packages/database/prisma/schema.prisma
+++ b/packages/database/prisma/schema.prisma
@@ -134,6 +134,81 @@ enum BillingPaymentAttemptStatus {
PARTIALLY_REFUNDED
}
+enum SubscriptionCollectionMethod {
+ STRIPE
+ BANK_TRANSFER
+ CHECK
+}
+
+enum BillingPaymentChannel {
+ ONLINE
+ OFFLINE
+}
+
+enum ManualPaymentMethod {
+ BANK_TRANSFER
+ CHECK
+}
+
+enum ManualPaymentSubmissionStatus {
+ DRAFT
+ SUBMITTED
+ UNDER_REVIEW
+ APPROVED
+ REJECTED
+}
+
+enum ManualPaymentDocumentKind {
+ BANK_TRANSFER_RECEIPT
+ CHECK_COPY
+ OTHER_SUPPORTING_EVIDENCE
+}
+
+enum ManualPaymentDocumentScanStatus {
+ UPLOADED
+ SCANNING
+ CLEAN
+ QUARANTINED
+ SCAN_FAILED
+}
+
+enum CollectionsCaseStatus {
+ SCHEDULED
+ PRE_DUE
+ GRACE_PERIOD
+ RESOLVED
+ SUSPENDED
+}
+
+enum CollectionsCallTaskType {
+ PRE_EXPIRY_48H_CALL
+ PAYMENT_PROMISE_FOLLOW_UP
+}
+
+enum CollectionsCallTaskStatus {
+ OPEN
+ COMPLETED
+ CANCELLED
+}
+
+enum CollectionsCallOutcome {
+ CONTACTED
+ NO_ANSWER
+ PAYMENT_PROMISED
+ ISSUE_ESCALATED
+}
+
+enum CollectionsOverrideType {
+ PAYMENT_DISPUTE
+ MANUAL_EXTENSION
+}
+
+enum CollectionsOverrideStatus {
+ ACTIVE
+ REVOKED
+ EXPIRED
+}
+
enum BillingRefundStatus {
PENDING
SUCCEEDED
@@ -441,6 +516,17 @@ enum NotificationType {
REFUND_PROCESSED
NEW_OFFER_FROM_SAVED_COMPANY
REVIEW_REQUEST
+ SUBSCRIPTION_PAYMENT_DUE_14D
+ SUBSCRIPTION_PAYMENT_DUE_7D
+ SUBSCRIPTION_PAYMENT_DUE_48H
+ SUBSCRIPTION_PAYMENT_DUE_24H
+ SUBSCRIPTION_GRACE_DAILY
+ SUBSCRIPTION_GRACE_FINAL
+ COLLECTIONS_CALL_REQUIRED
+ MANUAL_PAYMENT_EVIDENCE_SUBMITTED
+ SUBSCRIPTION_PAYMENT_CONFIRMED
+ MANUAL_PAYMENT_EVIDENCE_REJECTED
+ COLLECTIONS_OVERRIDE_CHANGED
}
enum FeedbackCategory {
@@ -492,6 +578,8 @@ enum NotificationStatus {
enum NotificationRecipientType {
EMPLOYEE
RENTER
+ BILLING_CONTACT
+ ADMIN
}
enum NotificationDeliveryStatus {
@@ -529,27 +617,32 @@ model Company {
status CompanyStatus @default(PENDING)
subscriptionPaymentRef String?
- subscription Subscription?
- billingAccounts BillingAccount[]
- billingInvoices BillingInvoice[]
- brand BrandSettings?
- employees Employee[]
- vehicles Vehicle[]
- offers Offer[]
- reservations Reservation[]
- customers Customer[]
- rentalPayments RentalPayment[]
- subscriptionInvoices SubscriptionInvoice[]
- contractSettings ContractSettings?
- accountingSettings AccountingSettings?
- insurancePolicies InsurancePolicy[]
- pricingRules PricingRule[]
- notifications Notification[] @relation("CompanyNotifications")
- notificationEvents NotificationEvent[]
- notificationDefaults CompanyNotificationPreference[]
- complaints Complaint[]
- companyMenuItems CompanyMenuItem[]
- apiKeys CompanyApiKey[]
+ subscription Subscription?
+ billingAccounts BillingAccount[]
+ billingInvoices BillingInvoice[]
+ brand BrandSettings?
+ employees Employee[]
+ vehicles Vehicle[]
+ offers Offer[]
+ reservations Reservation[]
+ customers Customer[]
+ rentalPayments RentalPayment[]
+ subscriptionInvoices SubscriptionInvoice[]
+ contractSettings ContractSettings?
+ accountingSettings AccountingSettings?
+ insurancePolicies InsurancePolicy[]
+ pricingRules PricingRule[]
+ notifications Notification[] @relation("CompanyNotifications")
+ notificationEvents NotificationEvent[]
+ notificationDefaults CompanyNotificationPreference[]
+ billingContacts BillingContact[]
+ manualPaymentSubmissions ManualPaymentSubmission[]
+ manualPaymentDocuments ManualPaymentDocument[]
+ collectionsCases CollectionsCase[]
+ collectionsEvents CollectionsEvent[]
+ complaints Complaint[]
+ companyMenuItems CompanyMenuItem[]
+ apiKeys CompanyApiKey[]
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -597,6 +690,7 @@ model Subscription {
maxRetryCount Int @default(5)
invoices SubscriptionInvoice[]
billingInvoices BillingInvoice[]
+ collectionsCases CollectionsCase[]
events SubscriptionEvent[]
createdAt DateTime @default(now())
@@ -623,28 +717,28 @@ model SubscriptionEvent {
}
model SubscriptionInvoice {
- id String @id @default(cuid())
- companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
- subscriptionId String
- subscription Subscription @relation(fields: [subscriptionId], references: [id])
- requestedPlan Plan?
- requestedBillingPeriod BillingPeriod?
- providerInvoiceId String?
- amount Int
- currency String @default("MAD")
- status InvoiceStatus
- amanpayTransactionId String? @unique
- paypalCaptureId String? @unique
- stripeCheckoutSessionId String? @unique
- paymentProvider PaymentProvider @default(AMANPAY)
- billingInvoiceId String? @unique
- billingInvoice BillingInvoice? @relation(fields: [billingInvoiceId], references: [id])
- dueAt DateTime?
- paidAt DateTime?
- failedAt DateTime?
- voidedAt DateTime?
- attempts PaymentAttempt[]
+ id String @id @default(cuid())
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ subscriptionId String
+ subscription Subscription @relation(fields: [subscriptionId], references: [id])
+ requestedPlan Plan?
+ requestedBillingPeriod BillingPeriod?
+ providerInvoiceId String?
+ amount Int
+ currency String @default("MAD")
+ status InvoiceStatus
+ amanpayTransactionId String? @unique
+ paypalCaptureId String? @unique
+ stripeCheckoutSessionId String? @unique
+ paymentProvider PaymentProvider @default(AMANPAY)
+ billingInvoiceId String? @unique
+ billingInvoice BillingInvoice? @relation(fields: [billingInvoiceId], references: [id])
+ dueAt DateTime?
+ paidAt DateTime?
+ failedAt DateTime?
+ voidedAt DateTime?
+ attempts PaymentAttempt[]
createdAt DateTime @default(now())
@@ -653,35 +747,44 @@ model SubscriptionInvoice {
}
model BillingAccount {
- id String @id @default(cuid())
- companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
- isPrimary Boolean @default(true)
- legalName String
- billingEmail String
- preferredLanguage String @default("en")
- billingAddress Json?
- taxId String?
- taxExempt Boolean @default(false)
- defaultCurrency String @default("MAD")
- defaultPaymentMethodId String?
- defaultPaymentMethod BillingPaymentMethod? @relation("BillingAccountDefaultPaymentMethod", fields: [defaultPaymentMethodId], references: [id])
- invoiceTerms BillingInvoiceTerms @default(DUE_ON_RECEIPT)
- netTermsDays Int @default(0)
- providerCustomerId String?
- dunningPaused Boolean @default(false)
- dunningPausedAt DateTime?
- dunningPausedBy String?
- metadata Json @default("{}")
- paymentMethods BillingPaymentMethod[] @relation("BillingAccountPaymentMethods")
- invoices BillingInvoice[]
- paymentIntents BillingPaymentIntent[]
- paymentAttempts BillingPaymentAttempt[]
- creditBalances BillingCreditBalance[]
- creditLedgerEntries BillingCreditLedgerEntry[]
- creditNotes BillingCreditNote[]
- refunds BillingRefund[]
- events BillingEvent[]
+ id String @id @default(cuid())
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ isPrimary Boolean @default(true)
+ legalName String
+ billingEmail String
+ preferredLanguage String @default("en")
+ timezone String @default("Africa/Casablanca")
+ reminderLocalTime String @default("09:00")
+ enabledCommunicationLocales String[] @default(["en"])
+ defaultCommunicationLocale String @default("en")
+ collectionsOwnerAdminId String?
+ collectionsOwnerAdmin AdminUser? @relation("BillingAccountCollectionsOwner", fields: [collectionsOwnerAdminId], references: [id], onDelete: SetNull)
+ billingAddress Json?
+ taxId String?
+ taxExempt Boolean @default(false)
+ defaultCurrency String @default("MAD")
+ defaultPaymentMethodId String?
+ defaultPaymentMethod BillingPaymentMethod? @relation("BillingAccountDefaultPaymentMethod", fields: [defaultPaymentMethodId], references: [id])
+ invoiceTerms BillingInvoiceTerms @default(DUE_ON_RECEIPT)
+ netTermsDays Int @default(0)
+ providerCustomerId String?
+ dunningPaused Boolean @default(false)
+ dunningPausedAt DateTime?
+ dunningPausedBy String?
+ metadata Json @default("{}")
+ paymentMethods BillingPaymentMethod[] @relation("BillingAccountPaymentMethods")
+ invoices BillingInvoice[]
+ paymentIntents BillingPaymentIntent[]
+ paymentAttempts BillingPaymentAttempt[]
+ creditBalances BillingCreditBalance[]
+ creditLedgerEntries BillingCreditLedgerEntry[]
+ creditNotes BillingCreditNote[]
+ refunds BillingRefund[]
+ events BillingEvent[]
+ billingContacts BillingContact[]
+ manualPaymentSubmissions ManualPaymentSubmission[]
+ collectionsCases CollectionsCase[]
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -691,6 +794,31 @@ model BillingAccount {
@@map("billing_accounts")
}
+model BillingContact {
+ id String @id @default(cuid())
+ billingAccountId String
+ billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ employeeId String?
+ employee Employee? @relation(fields: [employeeId], references: [id], onDelete: SetNull)
+ email String
+ locale String?
+ isPrimary Boolean @default(false)
+ receivePaymentNotices Boolean @default(true)
+ isActive Boolean @default(true)
+ verifiedAt DateTime?
+ notificationRecipients NotificationRecipient[]
+ callTasks CollectionsCallTask[]
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
+
+ @@unique([billingAccountId, email])
+ @@index([companyId, isActive])
+ @@index([employeeId])
+ @@map("billing_contacts")
+}
+
model BillingPaymentMethod {
id String @id @default(cuid())
billingAccountId String
@@ -717,26 +845,26 @@ model BillingPaymentMethod {
}
model BillingInvoice {
- id String @id @default(cuid())
+ id String @id @default(cuid())
billingAccountId String
- billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
+ billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
subscriptionId String?
- subscription Subscription? @relation(fields: [subscriptionId], references: [id])
+ subscription Subscription? @relation(fields: [subscriptionId], references: [id])
legacySubscriptionInvoice SubscriptionInvoice?
- invoiceNumber String? @unique
- invoiceSequence Int? @unique
+ invoiceNumber String? @unique
+ invoiceSequence Int? @unique
invoiceType BillingInvoiceType
- status BillingInvoiceStatus @default(DRAFT)
- currency String @default("MAD")
- subtotalAmount Int @default(0)
- discountAmount Int @default(0)
- creditAmount Int @default(0)
- taxAmount Int @default(0)
- totalAmount Int @default(0)
- amountPaid Int @default(0)
- amountDue Int @default(0)
+ status BillingInvoiceStatus @default(DRAFT)
+ currency String @default("MAD")
+ subtotalAmount Int @default(0)
+ discountAmount Int @default(0)
+ creditAmount Int @default(0)
+ taxAmount Int @default(0)
+ totalAmount Int @default(0)
+ amountPaid Int @default(0)
+ amountDue Int @default(0)
invoiceDate DateTime?
dueAt DateTime?
finalizedAt DateTime?
@@ -748,9 +876,14 @@ model BillingInvoice {
billingAddress Json?
providerInvoiceId String?
paymentProvider PaymentProvider?
- isSubscriptionBlocking Boolean @default(false)
+ collectionMethod SubscriptionCollectionMethod @default(STRIPE)
+ requestedPlan Plan?
+ requestedBillingPeriod BillingPeriod?
+ checkoutIdempotencyKey String?
+ renewalKey String? @unique
+ isSubscriptionBlocking Boolean @default(false)
adminReason String?
- metadata Json @default("{}")
+ metadata Json @default("{}")
createdByAdminId String?
lineItems BillingInvoiceLineItem[]
paymentIntents BillingPaymentIntent[]
@@ -759,14 +892,18 @@ model BillingInvoice {
creditNotes BillingCreditNote[]
refunds BillingRefund[]
events BillingEvent[]
+ manualPaymentSubmissions ManualPaymentSubmission[]
+ collectionsCase CollectionsCase?
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
BillingCreditLedgerEntry BillingCreditLedgerEntry[]
+ @@unique([billingAccountId, checkoutIdempotencyKey])
@@index([billingAccountId])
@@index([companyId])
@@index([subscriptionId])
+ @@index([collectionMethod, status, dueAt])
@@map("billing_invoices")
}
@@ -816,32 +953,217 @@ model BillingPaymentIntent {
}
model BillingPaymentAttempt {
- id String @id @default(cuid())
- invoiceId String
- invoice BillingInvoice @relation(fields: [invoiceId], references: [id], onDelete: Cascade)
- billingAccountId String
- billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
- paymentIntentId String?
- paymentIntent BillingPaymentIntent? @relation(fields: [paymentIntentId], references: [id])
- paymentMethodId String?
- paymentMethod BillingPaymentMethod? @relation(fields: [paymentMethodId], references: [id])
- providerPaymentId String?
- status BillingPaymentAttemptStatus
- amount Int
- currency String @default("MAD")
- failureCode String?
- failureMessage String?
- attemptedAt DateTime
- metadata Json @default("{}")
- refunds BillingRefund[]
+ id String @id @default(cuid())
+ invoiceId String
+ invoice BillingInvoice @relation(fields: [invoiceId], references: [id], onDelete: Cascade)
+ billingAccountId String
+ billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
+ paymentIntentId String?
+ paymentIntent BillingPaymentIntent? @relation(fields: [paymentIntentId], references: [id])
+ paymentMethodId String?
+ paymentMethod BillingPaymentMethod? @relation(fields: [paymentMethodId], references: [id])
+ providerPaymentId String?
+ channel BillingPaymentChannel @default(ONLINE)
+ manualMethod ManualPaymentMethod?
+ externalReference String?
+ normalizedExternalReference String?
+ receivedAt DateTime?
+ confirmedAt DateTime?
+ confirmedByAdminId String?
+ confirmedByAdmin AdminUser? @relation("ManualPaymentConfirmingAdmin", fields: [confirmedByAdminId], references: [id], onDelete: SetNull)
+ idempotencyKey String?
+ note String?
+ status BillingPaymentAttemptStatus
+ amount Int
+ currency String @default("MAD")
+ failureCode String?
+ failureMessage String?
+ attemptedAt DateTime
+ metadata Json @default("{}")
+ refunds BillingRefund[]
+ manualPaymentSubmission ManualPaymentSubmission?
+ resolvedCollectionsCase CollectionsCase? @relation("CollectionsResolutionPayment")
createdAt DateTime @default(now())
+ @@unique([billingAccountId, idempotencyKey])
+ @@unique([billingAccountId, manualMethod, normalizedExternalReference])
@@index([invoiceId])
@@index([billingAccountId])
@@map("billing_payment_attempts")
}
+model ManualPaymentSubmission {
+ id String @id @default(cuid())
+ invoiceId String
+ invoice BillingInvoice @relation(fields: [invoiceId], references: [id], onDelete: Cascade)
+ billingAccountId String
+ billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ method ManualPaymentMethod
+ submittedReference String
+ normalizedSubmittedReference String
+ status ManualPaymentSubmissionStatus @default(DRAFT)
+ submittedByEmployeeId String
+ submittedByEmployee Employee @relation(fields: [submittedByEmployeeId], references: [id])
+ submittedAt DateTime?
+ reviewedByAdminId String?
+ reviewedByAdmin AdminUser? @relation("ManualPaymentReviewingAdmin", fields: [reviewedByAdminId], references: [id], onDelete: SetNull)
+ reviewedAt DateTime?
+ rejectionReason String?
+ idempotencyKey String
+ paymentAttemptId String? @unique
+ paymentAttempt BillingPaymentAttempt? @relation(fields: [paymentAttemptId], references: [id], onDelete: SetNull)
+ documents ManualPaymentDocument[]
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
+
+ @@unique([billingAccountId, idempotencyKey])
+ @@index([invoiceId, status])
+ @@index([status, submittedAt])
+ @@map("manual_payment_submissions")
+}
+
+model ManualPaymentDocument {
+ id String @id @default(cuid())
+ submissionId String
+ submission ManualPaymentSubmission @relation(fields: [submissionId], references: [id], onDelete: Cascade)
+ invoiceId String
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ kind ManualPaymentDocumentKind
+ storageKey String @unique
+ originalFilename String
+ detectedMimeType String
+ detectedExtension String
+ byteSize Int
+ sha256 String
+ scanStatus ManualPaymentDocumentScanStatus @default(UPLOADED)
+ scannerResultCode String?
+ uploadedByEmployeeId String
+ uploadedByEmployee Employee @relation(fields: [uploadedByEmployeeId], references: [id])
+ uploadedAt DateTime @default(now())
+ deletedAt DateTime?
+
+ @@unique([submissionId, sha256])
+ @@index([invoiceId])
+ @@index([companyId])
+ @@index([scanStatus, uploadedAt])
+ @@map("manual_payment_documents")
+}
+
+model CollectionsCase {
+ id String @id @default(cuid())
+ invoiceId String @unique
+ invoice BillingInvoice @relation(fields: [invoiceId], references: [id], onDelete: Cascade)
+ subscriptionId String
+ subscription Subscription @relation(fields: [subscriptionId], references: [id], onDelete: Cascade)
+ billingAccountId String
+ billingAccount BillingAccount @relation(fields: [billingAccountId], references: [id], onDelete: Cascade)
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ status CollectionsCaseStatus @default(SCHEDULED)
+ originalExpirationAt DateTime
+ reminder14At DateTime
+ reminder7At DateTime
+ reminder48At DateTime
+ reminder24At DateTime
+ graceStartedAt DateTime?
+ finalSuspensionAt DateTime
+ resolvedAt DateTime?
+ suspendedAt DateTime?
+ nextActionAt DateTime?
+ collectionsOwnerAdminId String?
+ collectionsOwnerAdmin AdminUser? @relation("CollectionsCaseOwner", fields: [collectionsOwnerAdminId], references: [id], onDelete: SetNull)
+ resolutionPaymentAttemptId String? @unique
+ resolutionPaymentAttempt BillingPaymentAttempt? @relation("CollectionsResolutionPayment", fields: [resolutionPaymentAttemptId], references: [id], onDelete: SetNull)
+ processingLeaseUntil DateTime?
+ processingBy String?
+ version Int @default(0)
+ tasks CollectionsCallTask[]
+ overrides CollectionsOverride[]
+ events CollectionsEvent[]
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
+
+ @@unique([subscriptionId, originalExpirationAt])
+ @@index([status, nextActionAt])
+ @@map("collections_cases")
+}
+
+model CollectionsCallTask {
+ id String @id @default(cuid())
+ collectionsCaseId String
+ collectionsCase CollectionsCase @relation(fields: [collectionsCaseId], references: [id], onDelete: Cascade)
+ taskType CollectionsCallTaskType
+ assignedAdminId String
+ assignedAdmin AdminUser @relation("CollectionsTaskAssignee", fields: [assignedAdminId], references: [id])
+ billingContactId String?
+ billingContact BillingContact? @relation(fields: [billingContactId], references: [id], onDelete: SetNull)
+ dueAt DateTime
+ status CollectionsCallTaskStatus @default(OPEN)
+ outcome CollectionsCallOutcome?
+ note String?
+ promisedPaymentAt DateTime?
+ nextFollowUpAt DateTime?
+ completedByAdminId String?
+ completedByAdmin AdminUser? @relation("CollectionsTaskCompleter", fields: [completedByAdminId], references: [id], onDelete: SetNull)
+ completedAt DateTime?
+ cancellationReason String?
+ companyDefaultLocale String
+ contactLocale String
+ customerScript String
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
+
+ @@unique([collectionsCaseId, taskType])
+ @@index([assignedAdminId, status, dueAt])
+ @@map("collections_call_tasks")
+}
+
+model CollectionsOverride {
+ id String @id @default(cuid())
+ collectionsCaseId String
+ collectionsCase CollectionsCase @relation(fields: [collectionsCaseId], references: [id], onDelete: Cascade)
+ type CollectionsOverrideType
+ status CollectionsOverrideStatus @default(ACTIVE)
+ reason String
+ expiresAt DateTime
+ revisedSuspensionAt DateTime?
+ pauseSuspension Boolean @default(true)
+ pauseNotifications Boolean @default(false)
+ createdByAdminId String
+ createdByAdmin AdminUser @relation("CollectionsOverrideCreator", fields: [createdByAdminId], references: [id])
+ revokedByAdminId String?
+ revokedByAdmin AdminUser? @relation("CollectionsOverrideRevoker", fields: [revokedByAdminId], references: [id], onDelete: SetNull)
+ revokedAt DateTime?
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
+
+ @@index([collectionsCaseId, status, expiresAt])
+ @@map("collections_overrides")
+}
+
+model CollectionsEvent {
+ id String @id @default(cuid())
+ collectionsCaseId String
+ collectionsCase CollectionsCase @relation(fields: [collectionsCaseId], references: [id], onDelete: Cascade)
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ eventType String
+ idempotencyKey String
+ scheduledFor DateTime?
+ occurredAt DateTime @default(now())
+ actorType String @default("system")
+ actorId String?
+ payload Json @default("{}")
+
+ @@unique([collectionsCaseId, idempotencyKey])
+ @@index([companyId, occurredAt])
+ @@map("collections_events")
+}
+
model BillingCreditBalance {
id String @id @default(cuid())
billingAccountId String
@@ -1008,8 +1330,8 @@ model BrandSettings {
paypalEmail String?
paypalMerchantId String?
paymentMethodsEnabled PaymentProvider[]
- isListedOnCarplace Boolean @default(true)
- carplaceRating Float?
+ isListedOnCarplace Boolean @default(true)
+ carplaceRating Float?
homePageConfig Json? @map("home_page_config")
menuConfig Json? @map("menu_config")
@@ -1036,10 +1358,13 @@ model Employee {
preferredLanguage String @default("en")
isActive Boolean @default(true)
- notifications Notification[] @relation("EmployeeNotifications")
- notificationRecipients NotificationRecipient[]
- notificationPreferences NotificationPreference[]
- recordedRentalPayments RentalPayment[] @relation("RecordedRentalPayments")
+ notifications Notification[] @relation("EmployeeNotifications")
+ notificationRecipients NotificationRecipient[]
+ notificationPreferences NotificationPreference[]
+ recordedRentalPayments RentalPayment[] @relation("RecordedRentalPayments")
+ billingContacts BillingContact[]
+ manualPaymentSubmissions ManualPaymentSubmission[]
+ manualPaymentDocuments ManualPaymentDocument[]
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -1073,10 +1398,10 @@ model Vehicle {
allowDifferentDropoff Boolean @default(false)
dropoffLocations String[] @default([])
- reservations Reservation[]
- maintenance MaintenanceLog[]
- offerVehicles OfferVehicle[]
- calendarBlocks VehicleCalendarBlock[]
+ reservations Reservation[]
+ maintenance MaintenanceLog[]
+ offerVehicles OfferVehicle[]
+ calendarBlocks VehicleCalendarBlock[]
pricingConfiguration VehiclePricingConfiguration?
priceHistory VehiclePriceHistory[]
@@ -1116,11 +1441,11 @@ model VehiclePricingConfiguration {
}
model VehiclePricingRule {
- id String @id @default(cuid())
+ id String @id @default(cuid())
configurationId String
configuration VehiclePricingConfiguration @relation(fields: [configurationId], references: [id], onDelete: Cascade)
name String
- ruleType VehiclePricingRuleType @default(DATE_RANGE)
+ ruleType VehiclePricingRuleType @default(DATE_RANGE)
startDate DateTime
endDate DateTime
dailyRate Int?
@@ -1131,8 +1456,8 @@ model VehiclePricingRule {
maxDailyRate Int?
automaticAdjustmentPct Int?
priceAdjustment Int?
- isActive Boolean @default(true)
- sortOrder Int @default(0)
+ isActive Boolean @default(true)
+ sortOrder Int @default(0)
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -1143,12 +1468,12 @@ model VehiclePricingRule {
}
model VehiclePriceHistory {
- id String @id @default(cuid())
+ id String @id @default(cuid())
configurationId String
configuration VehiclePricingConfiguration @relation(fields: [configurationId], references: [id], onDelete: Cascade)
vehicleId String
- vehicle Vehicle @relation(fields: [vehicleId], references: [id], onDelete: Cascade)
- source VehiclePriceChangeSource @default(CONFIG_UPDATE)
+ vehicle Vehicle @relation(fields: [vehicleId], references: [id], onDelete: Cascade)
+ source VehiclePriceChangeSource @default(CONFIG_UPDATE)
changedByEmployeeId String?
previousDailyRate Int?
nextDailyRate Int?
@@ -1156,7 +1481,7 @@ model VehiclePriceHistory {
nextWeeklyRate Int?
note String?
effectiveFrom DateTime?
- createdAt DateTime @default(now())
+ createdAt DateTime @default(now())
@@index([vehicleId, createdAt])
@@index([configurationId, createdAt])
@@ -1282,9 +1607,9 @@ model Customer {
licenseApprovedAt DateTime?
licenseApprovalNote String?
- reservations Reservation[]
- complaints Complaint[]
- reviewOptOut Boolean @default(false)
+ reservations Reservation[]
+ complaints Complaint[]
+ reviewOptOut Boolean @default(false)
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -1309,7 +1634,7 @@ model Reservation {
promoCodeUsed String?
vehicleCategory VehicleCategory?
source BookingSource @default(DASHBOARD)
- carplaceRef String?
+ carplaceRef String?
status ReservationStatus @default(DRAFT)
startDate DateTime
endDate DateTime
@@ -1342,11 +1667,11 @@ model Reservation {
reviewPaused Boolean @default(false)
insurances ReservationInsurance[]
- insuranceTotal Int @default(0)
+ insuranceTotal Int @default(0)
additionalDrivers AdditionalDriver[]
- additionalDriverTotal Int @default(0)
+ additionalDriverTotal Int @default(0)
pricingRulesApplied Json?
- pricingRulesTotal Int @default(0)
+ pricingRulesTotal Int @default(0)
damageReports DamageReport[]
rentalPayments RentalPayment[]
inspections DamageInspection[]
@@ -1402,7 +1727,6 @@ model CarplaceFunnelEvent {
@@map("carplace_funnel_events")
}
-
model WebhookEvent {
id String @id @default(cuid())
provider String
@@ -1420,50 +1744,50 @@ model WebhookEvent {
}
model RentalPayment {
- id String @id @default(cuid())
- companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
- reservationId String
- reservation Reservation @relation(fields: [reservationId], references: [id])
- amount Int
- currency String @default("MAD")
- status PaymentStatus @default(PENDING)
- type PaymentType @default(CHARGE)
- paymentProvider PaymentProvider
- amanpayTransactionId String? @unique
- paypalCaptureId String? @unique
- stripeCheckoutSessionId String? @unique
- stripePaymentIntentId String? @unique
- paymentMethod String?
- reference String?
- note String?
- receivedAt DateTime?
- recordedByEmployeeId String?
- recordedByEmployee Employee? @relation("RecordedRentalPayments", fields: [recordedByEmployeeId], references: [id])
- idempotencyKey String?
- paidAt DateTime?
+ id String @id @default(cuid())
+ companyId String
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ reservationId String
+ reservation Reservation @relation(fields: [reservationId], references: [id])
+ amount Int
+ currency String @default("MAD")
+ status PaymentStatus @default(PENDING)
+ type PaymentType @default(CHARGE)
+ paymentProvider PaymentProvider
+ amanpayTransactionId String? @unique
+ paypalCaptureId String? @unique
+ stripeCheckoutSessionId String? @unique
+ stripePaymentIntentId String? @unique
+ paymentMethod String?
+ reference String?
+ note String?
+ receivedAt DateTime?
+ recordedByEmployeeId String?
+ recordedByEmployee Employee? @relation("RecordedRentalPayments", fields: [recordedByEmployeeId], references: [id])
+ idempotencyKey String?
+ paidAt DateTime?
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
+ @@unique([companyId, idempotencyKey])
@@index([companyId])
@@index([reservationId])
- @@unique([companyId, idempotencyKey])
@@map("rental_payments")
}
model Review {
- id String @id @default(cuid())
- reservationId String @unique
- reservation Reservation @relation(fields: [reservationId], references: [id])
+ id String @id @default(cuid())
+ reservationId String @unique
+ reservation Reservation @relation(fields: [reservationId], references: [id])
renterId String?
- renter Renter? @relation(fields: [renterId], references: [id])
+ renter Renter? @relation(fields: [renterId], references: [id])
companyId String
overallRating Int
vehicleRating Int?
serviceRating Int?
comment String?
- isPublished Boolean @default(true)
+ isPublished Boolean @default(true)
companyReply String?
companyRepliedAt DateTime?
category FeedbackCategory?
@@ -1476,29 +1800,29 @@ model Review {
}
model Complaint {
- id String @id @default(cuid())
+ id String @id @default(cuid())
companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
reservationId String?
- reservation Reservation? @relation(fields: [reservationId], references: [id])
+ reservation Reservation? @relation(fields: [reservationId], references: [id])
reviewId String?
- review Review? @relation(fields: [reviewId], references: [id])
+ review Review? @relation(fields: [reviewId], references: [id])
customerId String?
- customer Customer? @relation(fields: [customerId], references: [id])
+ customer Customer? @relation(fields: [customerId], references: [id])
- severity ComplaintSeverity @default(LEVEL_1)
- status ComplaintStatus @default(OPEN)
- category FeedbackCategory
- subject String
- description String?
- resolution String?
- notes String?
- assignedTo String?
- resolvedAt DateTime?
- resolvedBy String?
+ severity ComplaintSeverity @default(LEVEL_1)
+ status ComplaintStatus @default(OPEN)
+ category FeedbackCategory
+ subject String
+ description String?
+ resolution String?
+ notes String?
+ assignedTo String?
+ resolvedAt DateTime?
+ resolvedBy String?
- createdAt DateTime @default(now())
- updatedAt DateTime @updatedAt
+ createdAt DateTime @default(now())
+ updatedAt DateTime @updatedAt
@@index([companyId])
@@index([reservationId])
@@ -1538,12 +1862,12 @@ model Notification {
}
model NotificationEvent {
- id String @id @default(cuid())
+ id String @id @default(cuid())
companyId String
- company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
+ company Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
type NotificationType
templateKey String?
- locale String @default("en")
+ locale String @default("en")
title String
body String
data Json?
@@ -1552,7 +1876,7 @@ model NotificationEvent {
idempotencyKey String
recipients NotificationRecipient[]
outboxEntries NotificationOutbox[]
- createdAt DateTime @default(now())
+ createdAt DateTime @default(now())
@@unique([companyId, idempotencyKey])
@@index([companyId, type, createdAt])
@@ -1568,6 +1892,10 @@ model NotificationRecipient {
employee Employee? @relation(fields: [employeeId], references: [id], onDelete: Cascade)
renterId String?
renter Renter? @relation(fields: [renterId], references: [id], onDelete: Cascade)
+ billingContactId String?
+ billingContact BillingContact? @relation(fields: [billingContactId], references: [id], onDelete: Cascade)
+ adminUserId String?
+ adminUser AdminUser? @relation(fields: [adminUserId], references: [id], onDelete: Cascade)
readAt DateTime?
archivedAt DateTime?
deliveries NotificationDelivery[]
@@ -1575,6 +1903,8 @@ model NotificationRecipient {
@@index([employeeId, readAt, createdAt])
@@index([renterId, readAt, createdAt])
+ @@index([billingContactId, readAt, createdAt])
+ @@index([adminUserId, readAt, createdAt])
@@index([notificationEventId])
@@map("notification_recipients")
}
@@ -1953,9 +2283,19 @@ model AdminUser {
passwordResetToken String? @unique
passwordResetExpiresAt DateTime?
- auditLogs AuditLog[]
- permissions AdminPermission[]
- recoveryCodes AdminRecoveryCode[]
+ auditLogs AuditLog[]
+ permissions AdminPermission[]
+ recoveryCodes AdminRecoveryCode[]
+ preferredLocale String @default("en")
+ ownedBillingAccounts BillingAccount[] @relation("BillingAccountCollectionsOwner")
+ confirmedManualPayments BillingPaymentAttempt[] @relation("ManualPaymentConfirmingAdmin")
+ reviewedManualSubmissions ManualPaymentSubmission[] @relation("ManualPaymentReviewingAdmin")
+ ownedCollectionsCases CollectionsCase[] @relation("CollectionsCaseOwner")
+ assignedCollectionsTasks CollectionsCallTask[] @relation("CollectionsTaskAssignee")
+ completedCollectionsTasks CollectionsCallTask[] @relation("CollectionsTaskCompleter")
+ createdCollectionsOverrides CollectionsOverride[] @relation("CollectionsOverrideCreator")
+ revokedCollectionsOverrides CollectionsOverride[] @relation("CollectionsOverrideRevoker")
+ notificationRecipients NotificationRecipient[]
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
@@ -1974,7 +2314,6 @@ model AdminPermission {
@@map("admin_permissions")
}
-
model AdminRecoveryCode {
id String @id @default(cuid())
adminUserId String
@@ -2022,6 +2361,15 @@ model PricingConfig {
@@map("pricing_configs")
}
+model PlatformBillingSettings {
+ id String @id @default("default")
+ taxRate Float @default(20)
+ updatedAt DateTime @updatedAt
+ updatedBy String?
+
+ @@map("platform_billing_settings")
+}
+
model PlanFeature {
id String @id @default(cuid())
plan Plan
diff --git a/packages/database/src/index.d.ts b/packages/database/src/index.d.ts
index a161b2b..01acf6d 100644
--- a/packages/database/src/index.d.ts
+++ b/packages/database/src/index.d.ts
@@ -25,10 +25,21 @@ export type NotificationType =
| 'REFUND_PROCESSED'
| 'NEW_OFFER_FROM_SAVED_COMPANY'
| 'REVIEW_REQUEST'
+ | 'SUBSCRIPTION_PAYMENT_DUE_14D'
+ | 'SUBSCRIPTION_PAYMENT_DUE_7D'
+ | 'SUBSCRIPTION_PAYMENT_DUE_48H'
+ | 'SUBSCRIPTION_PAYMENT_DUE_24H'
+ | 'SUBSCRIPTION_GRACE_DAILY'
+ | 'SUBSCRIPTION_GRACE_FINAL'
+ | 'COLLECTIONS_CALL_REQUIRED'
+ | 'MANUAL_PAYMENT_EVIDENCE_SUBMITTED'
+ | 'SUBSCRIPTION_PAYMENT_CONFIRMED'
+ | 'MANUAL_PAYMENT_EVIDENCE_REJECTED'
+ | 'COLLECTIONS_OVERRIDE_CHANGED'
export type NotificationChannel = 'EMAIL' | 'SMS' | 'WHATSAPP' | 'IN_APP' | 'PUSH'
export type NotificationDeliveryStatus = 'PENDING' | 'QUEUED' | 'SENT' | 'DELIVERED' | 'FAILED' | 'SKIPPED' | 'DEAD_LETTER'
-export type NotificationRecipientType = 'EMPLOYEE' | 'RENTER'
+export type NotificationRecipientType = 'EMPLOYEE' | 'RENTER' | 'BILLING_CONTACT' | 'ADMIN'
export interface Company {
id: string
@@ -61,6 +72,7 @@ export interface AdminUser {
isActive: boolean
totpEnabled?: boolean
totpSecret?: string | null
+ preferredLocale?: string
}
export interface InsurancePolicy {
diff --git a/packages/database/src/index.ts b/packages/database/src/index.ts
index aa1a32a..252fe05 100644
--- a/packages/database/src/index.ts
+++ b/packages/database/src/index.ts
@@ -25,10 +25,21 @@ export type NotificationType =
| 'REFUND_PROCESSED'
| 'NEW_OFFER_FROM_SAVED_COMPANY'
| 'REVIEW_REQUEST'
+ | 'SUBSCRIPTION_PAYMENT_DUE_14D'
+ | 'SUBSCRIPTION_PAYMENT_DUE_7D'
+ | 'SUBSCRIPTION_PAYMENT_DUE_48H'
+ | 'SUBSCRIPTION_PAYMENT_DUE_24H'
+ | 'SUBSCRIPTION_GRACE_DAILY'
+ | 'SUBSCRIPTION_GRACE_FINAL'
+ | 'COLLECTIONS_CALL_REQUIRED'
+ | 'MANUAL_PAYMENT_EVIDENCE_SUBMITTED'
+ | 'SUBSCRIPTION_PAYMENT_CONFIRMED'
+ | 'MANUAL_PAYMENT_EVIDENCE_REJECTED'
+ | 'COLLECTIONS_OVERRIDE_CHANGED'
export type NotificationChannel = 'EMAIL' | 'SMS' | 'WHATSAPP' | 'IN_APP' | 'PUSH'
export type NotificationDeliveryStatus = 'PENDING' | 'QUEUED' | 'SENT' | 'DELIVERED' | 'FAILED' | 'SKIPPED' | 'DEAD_LETTER'
-export type NotificationRecipientType = 'EMPLOYEE' | 'RENTER'
+export type NotificationRecipientType = 'EMPLOYEE' | 'RENTER' | 'BILLING_CONTACT' | 'ADMIN'
export interface Company {
id: string
@@ -61,6 +72,7 @@ export interface AdminUser {
isActive: boolean
totpEnabled?: boolean
totpSecret?: string | null
+ preferredLocale?: string
}
export interface InsurancePolicy {
diff --git a/production/.env.docker.production.example b/production/.env.docker.production.example
index 9adef10..4b0608c 100644
--- a/production/.env.docker.production.example
+++ b/production/.env.docker.production.example
@@ -75,11 +75,12 @@ PGMANAGE_DEFAULT_PASSWORD=change-me
# Email
EMAIL_FROM=rentaldrivego@gmail.com
EMAIL_FROM_NAME=RentalDriveGo
+EMAIL_PROVIDER=gmail
MAIL_HOST=smtp.gmail.com
MAIL_PORT=587
MAIL_SCHEME=smtp
MAIL_USERNAME=rentaldrivego@gmail.com
-MAIL_PASSWORD=placeholder
+MAIL_PASSWORD=your-16-character-gmail-app-password
MAIL_FROM_ADDRESS=rentaldrivego@gmail.com
MAIL_FROM_NAME=RentalDriveGo
MAIL_REPLY_TO_ADDRESS=rentaldrivego@gmail.com
diff --git a/tsconfig.base.json b/tsconfig.base.json
index 7386f24..ff21fe3 100644
--- a/tsconfig.base.json
+++ b/tsconfig.base.json
@@ -1,21 +1,14 @@
{
"compilerOptions": {
"target": "ES2022",
+ "module": "CommonJS",
+ "moduleResolution": "Node",
"lib": ["ES2022"],
- "module": "commonjs",
- "moduleResolution": "node",
+ "strict": true,
"esModuleInterop": true,
"allowSyntheticDefaultImports": true,
- "strict": true,
- "noUncheckedIndexedAccess": true,
- "forceConsistentCasingInFileNames": true,
- "skipLibCheck": true,
"resolveJsonModule": true,
- "declaration": true,
- "declarationMap": true,
- "sourceMap": true,
- "outDir": "dist",
- "rootDir": "src"
- },
- "exclude": ["node_modules", "dist"]
+ "skipLibCheck": true,
+ "forceConsistentCasingInFileNames": true
+ }
}
diff --git a/turbo.json b/turbo.json
index 6e75c14..1bd792b 100644
--- a/turbo.json
+++ b/turbo.json
@@ -2,6 +2,18 @@
"$schema": "https://turbo.build/schema.json",
"globalDependencies": ["**/.env.*local"],
"globalPassThroughEnv": [
+ "ADMIN_SEED_EMAIL",
+ "ADMIN_SEED_FIRST_NAME",
+ "ADMIN_SEED_LAST_NAME",
+ "ADMIN_SEED_PASSWORD",
+ "DATABASE_URL",
+ "DATABASE_URL_FROM_POSTGRES",
+ "POSTGRES_DB",
+ "POSTGRES_HOST",
+ "POSTGRES_HOST_LOCAL",
+ "POSTGRES_PASSWORD",
+ "POSTGRES_PORT",
+ "POSTGRES_USER",
"SITE_ORIGIN",
"NEXT_PUBLIC_HOMEPAGE_URL",
"NEXT_PUBLIC_CARPLACE_URL"
|