feat(webshop-orders): Orders page with per-store, per-payment-method booking (#1525)

* feat(webshop-orders): schema, types and error codes for the orders surface

webshop_orders (order/refund rows, financial-freeze trigger, member
select/update RLS, no DELETE) + webshop_store_settings (per-store payment
method -> account map), source_type 'webshop_order', multi-store index drop,
customer_country, and a one-time woo cursor reset so the switch-over
backfills and cross-marks existing feed rows. Tables classified in the
full-archive export; pg-real coverage for RLS, freeze and CHECK.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(webshop-orders): core service (ingest, booking lines)

upsertWebshopOrders: two-phase order/refund upsert with FX enrichment,
legacy-feed cross-marking, frozen-row protection and field-wise jsonb
comparisons (Postgres does not preserve object key order). Booking-line
builder: per-rate VAT split with SIGNED buckets (discounts book as revenue
reductions), refund mirroring, 3740 residual, per-store account prefill,
and advisory export/EU + OSS warnings.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(webshop-orders): API routes for list, booking, invoicing and mapping

Booking is draft -> atomic claim -> commit (conditional link-back closes the
concurrent double-book race; a lost claim cancels the voucher-free draft).
Legacy-feed guard honors transactions.is_ignored on both the book and
create-invoice paths. Invoice conversion reuses buildInvoiceWriteData for an
unnumbered draft with dominant-rate fallback and drift-safe unit prices.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(webshop-orders): Orders page, booking/invoice dialogs and gated nav

/orders lists per-store orders with status tabs (server-side filters),
exception chips and one action per row. Booking dialog prefills from the
per-store payment-method mapping with an opt-in remember; invoice dialog
converts to a draft kundfaktura. The Order nav item renders only for
companies with an active WooCommerce connection or existing order rows
(Shopify deliberately excluded until its sync writes webshop_orders).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(woocommerce): switch the order sync to webshop_orders, multi-store

The sync maps rich wc/v3 payloads (billing, line/shipping/fee taxes, refund
allocations with parent-prorated VAT fallback) and upserts order rows
instead of transactions-inbox rows; already-imported feed rows stay
bookable and get cross-marked. Multi-store: several active connections per
company, per-store panel cards with the account-mapping editor.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs(webshop-orders): decision log entries and ratchet baseline

Baseline moves DOWN only: naive-ore-round 638 -> 637 via roundOre adoption;
hand-rolled invariants stay at 115 (ACCOUNT_NUMBER_RE imported, not inlined).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(webshop-orders): resolve PR #1525 review findings and CI failures

Review batch (Superagent, CodeRabbit, Swedish compliance review):
- Mutual-exclusion claims: booking guards invoice_id, invoice link-back
  guards journal_entry_id AND treats zero matched rows as the conflict it
  is (409 + rollback), closing both TOCTOU races.
- Freeze v2 migration (20260812124858): the link columns themselves are
  protected: invoice links immutable, journal links clearable only while
  the entry is still a draft (the booking rollback path).
- Scraped orgnr no longer auto-written to customers.org_number; rate
  fallback applies only on single-VAT-bucket orders; refunds get their own
  WEBSHOP_ORDER_REFUND_NOT_CONVERTIBLE code; VAT advisories outrank the
  invoice-mode hint in the booking dialog.
- Ingest compares every synced field (billing corrections no longer drop
  as unchanged); sync guards absent refunds arrays; /sync aggregates
  per-store results; panel disables all cards while a request runs; orders
  page separates load failure from empty; account field explains itself.

CI: regenerated skills/accounted-api; pg tests restructured for
transaction-abort/rollback semantics + freeze-link coverage; unresolvable-
expression ceiling 375 -> 378 with documented reason (partial-update
payloads in ingest, shapes covered by unit tests).

Declined: CodeRabbit docstring-coverage advisory (house style: comments
only where the code cannot say it).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

lib/api/schemas.ts

@@ -274,6 +274,7 @@ export const JournalEntrySourceTypeSchema = z.enum([
   'rot_rut_payout',
   'vat_settlement',
   'stripe_payout',
+  'webshop_order',
 ])
 
 /** Query params for GET /api/bookkeeping/voucher-sequences/next. */
@@ -1411,6 +1412,51 @@ export const BookTransactionSchema = z
     path: ['expected_duplicate_journal_entry_id'],
   })
 
+// ── Webshop orders (Orders page) ──────────────────────────────
+
+export const WebshopPlatformSchema = z.enum(['woocommerce', 'shopify'])
+
+export const WebshopOrdersListQuerySchema = z.object({
+  platform: WebshopPlatformSchema.optional(),
+  store_scope: z.string().max(255).optional(),
+  status: z.string().max(64).optional(),
+  row_type: z.enum(['order', 'refund']).optional(),
+  paid: z.enum(['paid', 'unpaid']).optional(),
+  booked: z.enum(['booked', 'unbooked']).optional(),
+  limit: z.coerce.number().int().min(1).max(200).optional(),
+  offset: z.coerce.number().int().min(0).optional(),
+})
+
+export const BookWebshopOrderSchema = z.object({
+  fiscal_period_id: uuid,
+  entry_date: isoDate,
+  description: z.string().min(1, 'Description is required').max(500),
+  lines: z.array(CreateJournalEntryLineSchema).min(2, 'At least two lines are required'),
+  voucher_series: z
+    .string()
+    .regex(/^[A-Z]$/, 'Verifikationsserie måste vara en bokstav A-Z')
+    .optional(),
+  notes: z.string().max(2000).optional(),
+})
+
+export const CreateInvoiceFromWebshopOrderSchema = z.object({
+  /** Omitted: match by email/orgnr within the company, else create. */
+  customer_id: uuid.optional(),
+})
+
+/** {"<payment_method>": {mode:'book', account:'1930'} | {mode:'invoice'}} */
+export const WebshopStoreSettingsUpdateSchema = z.object({
+  platform: WebshopPlatformSchema,
+  store_scope: z.string().min(1).max(255),
+  payment_method_account_map: z.record(
+    z.string().min(1).max(64),
+    z.discriminatedUnion('mode', [
+      z.object({ mode: z.literal('book'), account: accountNumber }),
+      z.object({ mode: z.literal('invoice') }),
+    ]),
+  ),
+})
+
 /**
  * Edit a bank transaction's title (description). Only the working label:
  * gated server-side to unbooked, unmatched rows. Trimmed; whitespace-only is