Multi-step executors (match_transaction_invoice, credit_invoice) post an
irreversible voucher or persist a credit note and then run later fallible
steps. A failure there previously marked the whole op status=rejected,
hiding the posted entity and its id from operators.
- new migration 20260722134114: add failed_partial to the
pending_operations status CHECK and treat it as terminal in both
immutability triggers (immutable, undeletable, never re-claimable)
- PartialCommitError + ExecutorResult.partialPostedIds carry the posted
ids; the dispatcher writes status=failed_partial with
result_data.posted_ids and returns code=partial_commit
- instrument only the two named executors; hoist the read-only
settlement-account resolution above the storno in the match executor
- consumer sweep: status union + query schema widened, failed_partial
folds into the Avvisade tab with a badge and posted-ids detail line,
bulk/reject routes and MCP tools message it explicitly, worklist and
expiry sweep intentionally untouched (not pending work)
- tests: pg-real coverage for the new terminal semantics, dispatcher unit
tests for both partial paths plus byte-for-byte regression guards
Fixes#842
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Jakob Wennberg