6a22195c7d
Issued orders are purchase orders WE send - they must pick from suppliers (sklad_suppliers), not from customers. Per user decision customer_id was REPLACED (not kept alongside): migration drops issued_orders.customer_id and adds supplier_id FK -> sklad_suppliers (existing rows lose their counterparty - the feature is days old; re-point them in the UI). - service: input/filters/search (suppliers.name + ico)/enrichment/detail all supplier-based; create validates the supplier inside the transaction and update before write -> Czech 400 'Dodavatel nenalezen' instead of P2003 500; detail returns a minimal supplier field set (no internal notes leak) - routes: supplier_id on list + stats; new GET /issued-orders/suppliers lookup (orders.view/create/edit guard - orders users lack warehouse.manage which guards the warehouse suppliers CRUD), active suppliers only, name+id ordering - PDF: Dodavatel block now renders the supplier (name, newline-split address, IC/DIC), layout and both language label sets unchanged - frontend: new SupplierPicker kit component (CustomerPicker untouched), IssuedOrderDetail/IssuedOrders switched to supplier_id/supplier_name; the picker keeps a fallback option for orders whose supplier was later deactivated; WarehouseSuppliers CRUD now also invalidates issued-orders so the picker can't go stale - tests: issued-orders suite switched to supplier fixtures + new coverage (lookup shape + 403, nonexistent supplier 400, PDF supplier block) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
906 lines
26 KiB
TypeScript
906 lines
26 KiB
TypeScript
import { FastifyInstance } from "fastify";
|
||
import prisma from "../../config/database";
|
||
import { requirePermission } from "../../middleware/auth";
|
||
import { parseId, success } from "../../utils/response";
|
||
import { localDateCzStr } from "../../utils/date";
|
||
import { htmlToPdf } from "../../utils/html-to-pdf";
|
||
import { nasOrdersManager } from "../../services/nas-financials-manager";
|
||
import createDOMPurify from "dompurify";
|
||
import { JSDOM } from "jsdom";
|
||
|
||
const window = new JSDOM("").window;
|
||
const DOMPurify = createDOMPurify(window);
|
||
|
||
/* ── Helpers (copied from orders-pdf.ts — the shared confirmation template) ── */
|
||
|
||
function formatDate(date: Date | string | null | undefined): string {
|
||
if (!date) return "";
|
||
const d = new Date(date);
|
||
if (isNaN(d.getTime())) return String(date);
|
||
return localDateCzStr(d);
|
||
}
|
||
|
||
function formatNum(n: number, decimals = 2): string {
|
||
const abs = Math.abs(n);
|
||
const fixed = abs.toFixed(decimals);
|
||
const [intPart, decPart] = fixed.split(".");
|
||
const withSep = intPart.replace(/\B(?=(\d{3})+(?!\d))/g, " ");
|
||
const result = decPart ? `${withSep},${decPart}` : withSep;
|
||
return n < 0 ? `-${result}` : result;
|
||
}
|
||
|
||
function escapeHtml(str: string | null | undefined): string {
|
||
if (!str) return "";
|
||
return str
|
||
.replace(/&/g, "&")
|
||
.replace(/</g, "<")
|
||
.replace(/>/g, ">")
|
||
.replace(/"/g, """);
|
||
}
|
||
|
||
function cleanQuillHtml(html: string | null | undefined): string {
|
||
if (!html) return "";
|
||
let s = html;
|
||
s = s.replace(
|
||
/<(script|iframe|object|embed|style|link|meta|base|form|input|textarea|button|select|svg|math)[^>]*>[\s\S]*?<\/\1>/gi,
|
||
"",
|
||
);
|
||
s = s.replace(
|
||
/<(script|iframe|object|embed|style|link|meta|base|form|input|textarea|button|select|svg|math)[^>]*\/?>/gi,
|
||
"",
|
||
);
|
||
s = s.replace(/\s+on\w+\s*=\s*("[^"]*"|'[^']*'|[^\s>]*)/gi, "");
|
||
s = s.replace(/\s+on\w+\s*=\s*[^\s>]*/gi, "");
|
||
s = s.replace(/href\s*=\s*["']?\s*javascript\s*:[^"'>\s]*/gi, 'href="#"');
|
||
s = s.replace(/( )/g, " ");
|
||
s = s.replace(/\s+style\s*=\s*("[^"]*"|'[^']*'|[^\s>]*)/gi, "");
|
||
let prev = "";
|
||
while (prev !== s) {
|
||
prev = s;
|
||
s = s.replace(/<span([^>]*)>(.*?)<\/span>\s*<span\1>/gs, "<span$1>$2");
|
||
}
|
||
return s;
|
||
}
|
||
|
||
interface AddressResult {
|
||
name: string;
|
||
lines: string[];
|
||
}
|
||
|
||
function buildAddressLines(
|
||
entity: Record<string, unknown> | null,
|
||
isCompany: boolean,
|
||
tObj: Record<string, string>,
|
||
): AddressResult {
|
||
if (!entity) return { name: "", lines: [] };
|
||
|
||
const nameKey = isCompany ? "company_name" : "name";
|
||
const name = String(entity[nameKey] || "");
|
||
|
||
let cfData: Array<{ name?: string; value?: string; showLabel?: boolean }> =
|
||
[];
|
||
let fieldOrder: string[] | null = null;
|
||
const raw = entity.custom_fields;
|
||
if (raw) {
|
||
let parsed: unknown;
|
||
try {
|
||
parsed = typeof raw === "string" ? JSON.parse(raw) : raw;
|
||
} catch {
|
||
parsed = null;
|
||
}
|
||
if (parsed && typeof parsed === "object") {
|
||
if ((parsed as Record<string, unknown>).fields) {
|
||
cfData =
|
||
((parsed as Record<string, unknown>).fields as typeof cfData) || [];
|
||
fieldOrder = ((parsed as Record<string, unknown>).field_order ||
|
||
(parsed as Record<string, unknown>).fieldOrder) as string[] | null;
|
||
} else if (Array.isArray(parsed)) {
|
||
cfData = parsed;
|
||
}
|
||
}
|
||
}
|
||
|
||
if (Array.isArray(fieldOrder)) {
|
||
const legacyMap: Record<string, string> = {
|
||
Name: "name",
|
||
CompanyName: "company_name",
|
||
Street: "street",
|
||
CityPostal: "city_postal",
|
||
Country: "country",
|
||
CompanyId: "company_id",
|
||
VatId: "vat_id",
|
||
};
|
||
fieldOrder = fieldOrder.map((k) => legacyMap[k] || k);
|
||
}
|
||
|
||
const fieldMap: Record<string, string> = {};
|
||
if (name) fieldMap[nameKey] = name;
|
||
if (entity.street) fieldMap.street = String(entity.street);
|
||
const cityParts = [entity.city || "", entity.postal_code || ""]
|
||
.filter(Boolean)
|
||
.map(String);
|
||
const cityPostal = cityParts.join(" ").trim();
|
||
if (cityPostal) fieldMap.city_postal = cityPostal;
|
||
if (entity.country) fieldMap.country = String(entity.country);
|
||
if (entity.company_id)
|
||
fieldMap.company_id = `${tObj.ico}${entity.company_id}`;
|
||
if (entity.vat_id) fieldMap.vat_id = `${tObj.dic}${entity.vat_id}`;
|
||
|
||
cfData.forEach((cf, i) => {
|
||
const cfName = (cf.name || "").trim();
|
||
const cfValue = (cf.value || "").trim();
|
||
const showLabel = cf.showLabel !== false;
|
||
if (cfValue) {
|
||
fieldMap[`custom_${i}`] =
|
||
showLabel && cfName ? `${cfName}: ${cfValue}` : cfValue;
|
||
}
|
||
});
|
||
|
||
const lines: string[] = [];
|
||
if (Array.isArray(fieldOrder) && fieldOrder.length) {
|
||
for (const key of fieldOrder) {
|
||
if (key === nameKey) continue;
|
||
if (fieldMap[key]) lines.push(fieldMap[key]);
|
||
}
|
||
for (const [key, line] of Object.entries(fieldMap)) {
|
||
if (key === nameKey) continue;
|
||
if (!fieldOrder!.includes(key)) lines.push(line);
|
||
}
|
||
} else {
|
||
for (const [key, line] of Object.entries(fieldMap)) {
|
||
if (key === nameKey) continue;
|
||
lines.push(line);
|
||
}
|
||
}
|
||
|
||
return { name, lines };
|
||
}
|
||
|
||
/**
|
||
* Address block for the sklad_suppliers counterparty. Unlike customers (which
|
||
* have structured street/city/postal columns), suppliers.address is a single
|
||
* Text blob — split it on newlines into one rendered line each (a blob without
|
||
* newlines renders as one line). IČO/DIČ come from the supplier's ico/dic
|
||
* columns, prefixed with the same translated labels the customer block used.
|
||
*/
|
||
function buildSupplierLines(
|
||
supplier: Record<string, unknown> | null,
|
||
tObj: Record<string, string>,
|
||
): AddressResult {
|
||
if (!supplier) return { name: "", lines: [] };
|
||
const name = String(supplier.name || "");
|
||
const lines: string[] = [];
|
||
if (supplier.address) {
|
||
for (const part of String(supplier.address).split(/\r?\n/)) {
|
||
const line = part.trim();
|
||
if (line) lines.push(line);
|
||
}
|
||
}
|
||
if (supplier.ico) lines.push(`${tObj.ico}${supplier.ico}`);
|
||
if (supplier.dic) lines.push(`${tObj.dic}${supplier.dic}`);
|
||
return { name, lines };
|
||
}
|
||
|
||
/* ── Translations ────────────────────────────────────────────────── */
|
||
|
||
type Lang = "cs" | "en";
|
||
|
||
const translations: Record<Lang, Record<string, string>> = {
|
||
cs: {
|
||
title: "OBJEDNÁVKA",
|
||
heading: "OBJEDNÁVKA č.",
|
||
// PO direction: WE (company) are the buyer (Odběratel), the
|
||
// selected sklad_suppliers record is the supplier (Dodavatel).
|
||
supplier: "Dodavatel",
|
||
buyer: "Odběratel",
|
||
issue_date: "Datum vystavení:",
|
||
delivery_date: "Požadované dodání:",
|
||
billing: "Objednáváme u Vás:",
|
||
col_no: "Č.",
|
||
col_desc: "Popis",
|
||
col_qty: "Množství",
|
||
col_unit_price: "Jedn. cena",
|
||
col_price: "Cena",
|
||
col_vat_pct: "%DPH",
|
||
col_vat: "DPH",
|
||
col_total: "Celkem",
|
||
subtotal: "Mezisoučet:",
|
||
vat_label: "DPH",
|
||
total: "Celkem",
|
||
amounts_in: "Částky jsou uvedeny v",
|
||
notes: "Poznámky",
|
||
delivery_terms: "Dodací podmínky:",
|
||
payment_terms: "Platební podmínky:",
|
||
issued_by: "Vystavil:",
|
||
ico: "IČ: ",
|
||
dic: "DIČ: ",
|
||
},
|
||
en: {
|
||
title: "PURCHASE ORDER",
|
||
heading: "PURCHASE ORDER No.",
|
||
supplier: "Supplier",
|
||
buyer: "Buyer",
|
||
issue_date: "Issue date:",
|
||
delivery_date: "Requested delivery:",
|
||
billing: "We order from you:",
|
||
col_no: "No.",
|
||
col_desc: "Description",
|
||
col_qty: "Quantity",
|
||
col_unit_price: "Unit price",
|
||
col_price: "Price",
|
||
col_vat_pct: "VAT%",
|
||
col_vat: "VAT",
|
||
col_total: "Total",
|
||
subtotal: "Subtotal:",
|
||
vat_label: "VAT",
|
||
total: "Total",
|
||
amounts_in: "Amounts are in",
|
||
notes: "Notes",
|
||
delivery_terms: "Delivery terms:",
|
||
payment_terms: "Payment terms:",
|
||
issued_by: "Issued by:",
|
||
ico: "Reg. No.: ",
|
||
dic: "Tax ID: ",
|
||
},
|
||
};
|
||
|
||
interface IssuedOrderPdfData {
|
||
po_number: string | null;
|
||
order_date: Date | null;
|
||
delivery_date: Date | null;
|
||
currency: string | null;
|
||
apply_vat: boolean | null;
|
||
vat_rate: unknown;
|
||
notes: string | null;
|
||
delivery_terms: string | null;
|
||
payment_terms: string | null;
|
||
issued_by: string | null;
|
||
}
|
||
|
||
interface IssuedOrderPdfItem {
|
||
description: string | null;
|
||
item_description: string | null;
|
||
quantity: unknown;
|
||
unit: string | null;
|
||
unit_price: unknown;
|
||
vat_rate: unknown;
|
||
}
|
||
|
||
export function renderIssuedOrderHtml(
|
||
order: IssuedOrderPdfData,
|
||
items: IssuedOrderPdfItem[],
|
||
supplier: Record<string, unknown> | null,
|
||
settings: Record<string, unknown> | null,
|
||
lang: Lang,
|
||
issuer: { name: string },
|
||
): string {
|
||
const t = translations[lang];
|
||
const applyVat = order.apply_vat !== false;
|
||
const currency = order.currency || "CZK";
|
||
const docRate = order.vat_rate != null ? Number(order.vat_rate) : 21;
|
||
const poNumber = escapeHtml(order.po_number || "");
|
||
|
||
// Logo embedding (same logic as the confirmation template).
|
||
let logoImg = "";
|
||
if (settings?.logo_data) {
|
||
const buf = Buffer.from(settings.logo_data as Buffer);
|
||
let mime = "image/png";
|
||
if (buf[0] === 0xff && buf[1] === 0xd8) mime = "image/jpeg";
|
||
else if (buf[0] === 0x47 && buf[1] === 0x49) mime = "image/gif";
|
||
else if (buf[0] === 0x52 && buf[1] === 0x49) mime = "image/webp";
|
||
const b64 = buf.toString("base64");
|
||
logoImg = `<img src="data:${escapeHtml(mime)};base64,${b64}" class="logo" />`;
|
||
}
|
||
|
||
// PO direction: our company (settings) = Odběratel (buyer);
|
||
// the sklad_suppliers record = Dodavatel (supplier).
|
||
const buyer = buildAddressLines(settings, true, t); // company → Odběratel
|
||
const supplierAddr = buildSupplierLines(supplier, t); // supplier → Dodavatel
|
||
|
||
const buyerLinesHtml = buyer.lines
|
||
.map((l) => `<div class="address-line">${escapeHtml(l)}</div>`)
|
||
.join("");
|
||
const supplierLinesHtml = supplierAddr.lines
|
||
.map((l) => `<div class="address-line">${escapeHtml(l)}</div>`)
|
||
.join("");
|
||
|
||
// Items — NET + per-line VAT-on-top, rounded per line (same math the
|
||
// service computeIssuedOrderTotals uses; mirrors the confirmation loop).
|
||
let subtotal = 0;
|
||
let totalVat = 0;
|
||
const vatSummary: Record<string, { base: number; vat: number }> = {};
|
||
const itemsHtml = items
|
||
.map((it, i) => {
|
||
const qty = Number(it.quantity) || 0;
|
||
const unitPrice = Number(it.unit_price) || 0;
|
||
const rate =
|
||
it.vat_rate != null && it.vat_rate !== ""
|
||
? Number(it.vat_rate)
|
||
: docRate;
|
||
const lineSubtotal = qty * unitPrice;
|
||
const lineVat = applyVat
|
||
? Math.round(lineSubtotal * (rate / 100) * 100) / 100
|
||
: 0;
|
||
const lineTotal = lineSubtotal + lineVat;
|
||
|
||
subtotal += lineSubtotal;
|
||
totalVat += lineVat;
|
||
const key = String(rate);
|
||
if (!vatSummary[key]) vatSummary[key] = { base: 0, vat: 0 };
|
||
vatSummary[key].base += lineSubtotal;
|
||
vatSummary[key].vat += lineVat;
|
||
|
||
const qtyDecimals = Math.floor(qty) === qty ? 0 : 2;
|
||
const descHtml = `${escapeHtml(it.description)}${
|
||
it.item_description
|
||
? `<div class="item-sub">${escapeHtml(it.item_description)}</div>`
|
||
: ""
|
||
}`;
|
||
return `<tr>
|
||
<td class="row-num">${i + 1}</td>
|
||
<td class="desc">${descHtml}</td>
|
||
<td class="center">${formatNum(qty, qtyDecimals)}${it.unit ? ` / ${escapeHtml(it.unit)}` : ""}</td>
|
||
<td class="right">${formatNum(unitPrice)}</td>
|
||
<td class="right">${formatNum(lineSubtotal)}</td>
|
||
<td class="center">${applyVat ? Math.floor(rate) : 0}%</td>
|
||
<td class="right">${formatNum(lineVat)}</td>
|
||
<td class="right total-cell">${formatNum(lineTotal)}</td>
|
||
</tr>`;
|
||
})
|
||
.join("");
|
||
|
||
subtotal = Math.round(subtotal * 100) / 100;
|
||
totalVat = Math.round(totalVat * 100) / 100;
|
||
const totalToPay = Math.round((subtotal + totalVat) * 100) / 100;
|
||
|
||
let vatDetailHtml = "";
|
||
if (applyVat) {
|
||
for (const [rate, data] of Object.entries(vatSummary)) {
|
||
if (data.vat > 0) {
|
||
vatDetailHtml += `
|
||
<div class="row">
|
||
<span class="label">${escapeHtml(t.vat_label)} ${Math.floor(Number(rate))}%:</span>
|
||
<span class="value">${formatNum(data.vat)} ${escapeHtml(currency)}</span>
|
||
</div>`;
|
||
}
|
||
}
|
||
}
|
||
|
||
const notesRaw = order.notes ?? "";
|
||
const notesStripped = notesRaw.replace(/<[^>]*>/g, "").trim();
|
||
const notesHtml = notesStripped
|
||
? `
|
||
<div class="invoice-notes">
|
||
<div class="invoice-notes-label">${escapeHtml(t.notes)}</div>
|
||
<div class="invoice-notes-content">${cleanQuillHtml(DOMPurify.sanitize(notesRaw))}</div>
|
||
</div>
|
||
`
|
||
: "";
|
||
|
||
const issueDateStr = formatDate(order.order_date);
|
||
const deliveryDateStr = formatDate(order.delivery_date);
|
||
|
||
// Order-specific terms (purchase-order addition; not on invoices).
|
||
let termsHtml = "";
|
||
if (order.delivery_terms) {
|
||
termsHtml += `<div class="terms-row"><span class="lbl">${escapeHtml(t.delivery_terms)}</span> ${escapeHtml(order.delivery_terms)}</div>`;
|
||
}
|
||
if (order.payment_terms) {
|
||
termsHtml += `<div class="terms-row"><span class="lbl">${escapeHtml(t.payment_terms)}</span> ${escapeHtml(order.payment_terms)}</div>`;
|
||
}
|
||
const termsBlock = termsHtml ? `<div class="terms">${termsHtml}</div>` : "";
|
||
|
||
// Quill indent CSS
|
||
let indentCSS = "";
|
||
for (let n = 1; n <= 9; n++) {
|
||
const pad = n * 3;
|
||
const liPad = n * 3 + 1.5;
|
||
indentCSS += ` .ql-indent-${n} { padding-left: ${pad}em; }\n`;
|
||
indentCSS += ` li.ql-indent-${n} { padding-left: ${liPad}em; }\n`;
|
||
}
|
||
|
||
return `<!DOCTYPE html>
|
||
<html lang="${escapeHtml(lang)}">
|
||
<head>
|
||
<meta charset="utf-8" />
|
||
<title>${escapeHtml(t.heading)} ${poNumber}</title>
|
||
<style>
|
||
@page {
|
||
size: A4;
|
||
margin: 8mm 12mm 10mm 12mm;
|
||
}
|
||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||
html, body {
|
||
font-family: "Segoe UI", Tahoma, Arial, sans-serif;
|
||
font-size: 10pt;
|
||
color: #1a1a1a;
|
||
width: 186mm;
|
||
}
|
||
|
||
.invoice-page {
|
||
display: flex;
|
||
flex-direction: column;
|
||
min-height: calc(297mm - 27mm);
|
||
}
|
||
.invoice-content { flex: 1 1 auto; }
|
||
.invoice-footer {
|
||
flex-shrink: 0;
|
||
}
|
||
|
||
.accent { color: #de3a3a; }
|
||
|
||
/* ── Hlavicka ── */
|
||
.invoice-header {
|
||
display: flex;
|
||
justify-content: space-between;
|
||
align-items: center;
|
||
margin-bottom: 1mm;
|
||
padding-bottom: 1mm;
|
||
border-bottom: 2pt solid #de3a3a;
|
||
}
|
||
.invoice-header .left {
|
||
display: flex;
|
||
align-items: center;
|
||
gap: 3mm;
|
||
}
|
||
.logo-header { text-align: left; }
|
||
.company-title {
|
||
font-size: 12pt;
|
||
font-weight: 700;
|
||
}
|
||
.invoice-title {
|
||
font-size: 13pt;
|
||
font-weight: 700;
|
||
color: #de3a3a;
|
||
text-align: right;
|
||
letter-spacing: 0.03em;
|
||
}
|
||
|
||
.logo {
|
||
max-width: 42mm;
|
||
max-height: 22mm;
|
||
object-fit: contain;
|
||
}
|
||
|
||
/* ── Adresy ── */
|
||
.header-grid {
|
||
border: 0.5pt solid #d0d0d0;
|
||
border-collapse: collapse;
|
||
width: 100%;
|
||
margin-bottom: 1mm;
|
||
}
|
||
.header-grid td {
|
||
padding: 2mm 3mm;
|
||
border: 0.5pt solid #d0d0d0;
|
||
vertical-align: top;
|
||
width: 50%;
|
||
}
|
||
.header-grid td.addr-supplier {
|
||
background: #f5f5f5;
|
||
}
|
||
.header-grid td.details-bank {
|
||
background: #f5f5f5;
|
||
}
|
||
.address-label {
|
||
font-size: 8pt;
|
||
font-weight: 700;
|
||
color: #de3a3a;
|
||
text-transform: uppercase;
|
||
letter-spacing: 0.08em;
|
||
margin-bottom: 1mm;
|
||
}
|
||
.address-name {
|
||
font-size: 10pt;
|
||
font-weight: 700;
|
||
color: #1a1a1a;
|
||
line-height: 1.3;
|
||
margin-bottom: 1mm;
|
||
}
|
||
.address-line {
|
||
font-size: 9pt;
|
||
color: #444;
|
||
line-height: 1.5;
|
||
}
|
||
|
||
/* ── Detaily (banka + datumy) — inside header-grid ── */
|
||
|
||
.info-row {
|
||
display: flex;
|
||
align-items: baseline;
|
||
font-size: 9pt;
|
||
padding: 1mm 0;
|
||
border-bottom: 0.5pt solid #f0f0f0;
|
||
}
|
||
.info-row:last-child { border-bottom: none; }
|
||
.info-row .lbl {
|
||
color: #666;
|
||
font-weight: 400;
|
||
flex-shrink: 0;
|
||
white-space: nowrap;
|
||
margin-right: 3mm;
|
||
}
|
||
.info-row .val {
|
||
font-weight: 600;
|
||
color: #1a1a1a;
|
||
text-align: right;
|
||
margin-left: auto;
|
||
}
|
||
|
||
/* VS/KS blok */
|
||
.vs-block {
|
||
font-size: 9pt;
|
||
line-height: 1.4;
|
||
padding-top: 2mm;
|
||
}
|
||
|
||
/* ── Polozky ── */
|
||
.billing-label {
|
||
font-weight: 700;
|
||
color: #1a1a1a;
|
||
font-size: 10pt;
|
||
padding: 2mm 0 1mm 0;
|
||
border-bottom: 1.5pt solid #de3a3a;
|
||
margin-bottom: 0;
|
||
text-transform: uppercase;
|
||
letter-spacing: 0.03em;
|
||
}
|
||
|
||
table.items {
|
||
width: 100%;
|
||
table-layout: fixed;
|
||
border-collapse: collapse;
|
||
font-size: 9pt;
|
||
margin-bottom: 2mm;
|
||
}
|
||
table.items thead th {
|
||
font-size: 8.5pt;
|
||
font-weight: 600;
|
||
color: #646464;
|
||
padding: 4px 4px;
|
||
text-align: left;
|
||
border-bottom: 0.5pt solid #d0d0d0;
|
||
white-space: nowrap;
|
||
}
|
||
table.items thead th.center { text-align: center; }
|
||
table.items thead th.right { text-align: right; }
|
||
table.items tbody td {
|
||
padding: 4px 4px;
|
||
border-bottom: 0.5pt solid #e0e0e0;
|
||
vertical-align: middle;
|
||
color: #1a1a1a;
|
||
}
|
||
table.items tbody tr:nth-child(even) { background: #f8f9fa; }
|
||
table.items tbody td.center { text-align: center; white-space: nowrap; }
|
||
table.items tbody td.right { text-align: right; }
|
||
table.items tbody td.row-num {
|
||
text-align: center;
|
||
color: #969696;
|
||
font-size: 9pt;
|
||
}
|
||
table.items tbody td.desc {
|
||
font-size: 9pt;
|
||
font-weight: 600;
|
||
color: #1a1a1a;
|
||
}
|
||
table.items tbody td.desc .item-sub {
|
||
font-weight: 400;
|
||
font-size: 8.5pt;
|
||
color: #666;
|
||
margin-top: 0.5mm;
|
||
}
|
||
table.items tbody td.total-cell { font-weight: 700; }
|
||
|
||
/* Soucet + total - styl z nabidek */
|
||
.totals-wrapper {
|
||
display: flex;
|
||
justify-content: flex-end;
|
||
margin-top: 2mm;
|
||
}
|
||
.totals {
|
||
width: 80mm;
|
||
}
|
||
.totals .detail-rows {
|
||
margin-bottom: 3mm;
|
||
}
|
||
.totals .row {
|
||
display: flex;
|
||
justify-content: space-between;
|
||
align-items: baseline;
|
||
font-size: 9.5pt;
|
||
color: #1a1a1a;
|
||
margin-bottom: 2mm;
|
||
}
|
||
.totals .grand {
|
||
border-top: 0.5pt solid #e0e0e0;
|
||
padding-top: 4mm;
|
||
display: flex;
|
||
justify-content: space-between;
|
||
align-items: baseline;
|
||
}
|
||
.totals .grand .label {
|
||
font-size: 10.5pt;
|
||
font-weight: 400;
|
||
color: #1a1a1a;
|
||
align-self: center;
|
||
}
|
||
.totals .grand .value {
|
||
font-size: 14pt;
|
||
font-weight: 600;
|
||
color: #1a1a1a;
|
||
border-bottom: 2.5pt solid #de3a3a;
|
||
padding-bottom: 1mm;
|
||
}
|
||
.totals .currency-note {
|
||
text-align: right;
|
||
font-size: 8pt;
|
||
color: #1a1a1a;
|
||
margin-top: 2mm;
|
||
}
|
||
|
||
/* Dodaci / platebni podminky (PO-specificke) */
|
||
.terms {
|
||
margin-top: 4mm;
|
||
font-size: 9pt;
|
||
line-height: 1.5;
|
||
color: #1a1a1a;
|
||
}
|
||
.terms-row { margin-bottom: 1mm; }
|
||
.terms-row .lbl {
|
||
font-weight: 600;
|
||
color: #555;
|
||
}
|
||
|
||
/* Vystavil */
|
||
.issued-by {
|
||
font-size: 9pt;
|
||
margin: 2mm 0;
|
||
line-height: 1.4;
|
||
}
|
||
.issued-by .lbl { font-weight: 600; }
|
||
|
||
/* Upozorneni */
|
||
.notice {
|
||
font-size: 8pt;
|
||
color: #1a1a1a;
|
||
margin: 2mm 0;
|
||
line-height: 1.3;
|
||
}
|
||
|
||
/* Poznamky */
|
||
.invoice-notes {
|
||
margin-top: 4mm;
|
||
font-size: 10pt;
|
||
line-height: 1.5;
|
||
color: #1a1a1a;
|
||
}
|
||
.invoice-notes-label {
|
||
font-weight: 600;
|
||
font-size: 9pt;
|
||
text-transform: uppercase;
|
||
color: #555;
|
||
margin-bottom: 1mm;
|
||
}
|
||
.invoice-notes-content p { margin: 0 0 0.4em 0; }
|
||
.invoice-notes-content ul, .invoice-notes-content ol { margin: 0 0 0.4em 1.5em; }
|
||
.invoice-notes-content li { margin-bottom: 0.2em; }
|
||
.invoice-notes-content,
|
||
.invoice-notes-content * {
|
||
font-family: Tahoma, sans-serif !important;
|
||
}
|
||
.invoice-notes-content { font-size: 14px; }
|
||
.invoice-notes-content h1 { font-size: 20px; }
|
||
.invoice-notes-content h2 { font-size: 18px; }
|
||
.invoice-notes-content h3 { font-size: 16px; }
|
||
.invoice-notes-content h4 { font-size: 15px; }
|
||
|
||
/* Quill fonty – v PDF vynuceno Tahoma */
|
||
[class*="ql-font-"] { font-family: Tahoma, sans-serif !important; }
|
||
.ql-align-center { text-align: center; }
|
||
.ql-align-right { text-align: right; }
|
||
.ql-align-justify { text-align: justify; }
|
||
${indentCSS}
|
||
|
||
@media print {
|
||
body { -webkit-print-color-adjust: exact; print-color-adjust: exact; }
|
||
}
|
||
@media screen {
|
||
html { background: #525659; }
|
||
body {
|
||
width: 100vw !important;
|
||
margin: 0;
|
||
padding: 30px 0;
|
||
background: transparent;
|
||
display: flex;
|
||
flex-direction: column;
|
||
align-items: center;
|
||
min-height: 100vh;
|
||
overflow-x: hidden;
|
||
}
|
||
.invoice-page {
|
||
width: 210mm;
|
||
min-height: 297mm;
|
||
padding: 15mm;
|
||
background: white;
|
||
box-shadow: 0 4px 20px rgba(0,0,0,0.3);
|
||
box-sizing: border-box;
|
||
border-radius: 2px;
|
||
}
|
||
}
|
||
</style>
|
||
</head>
|
||
<body>
|
||
<div class="invoice-page">
|
||
<div class="invoice-content">
|
||
|
||
<!-- Hlavicka -->
|
||
<div class="invoice-header">
|
||
<div class="left">
|
||
${logoImg ? `<div class="logo-header">${logoImg}</div>` : ""}
|
||
</div>
|
||
<div class="invoice-title">${escapeHtml(t.heading)} ${poNumber}</div>
|
||
</div>
|
||
|
||
<!-- Odberatel (nase firma) / Dodavatel (sklad_suppliers) + Detaily -->
|
||
<table class="header-grid" cellspacing="0">
|
||
<tr>
|
||
<td>
|
||
<div class="address-label">${escapeHtml(t.buyer)}</div>
|
||
<div class="address-name">${escapeHtml(buyer.name)}</div>
|
||
${buyerLinesHtml}
|
||
</td>
|
||
<td class="addr-supplier">
|
||
<div class="address-label">${escapeHtml(t.supplier)}</div>
|
||
<div class="address-name">${escapeHtml(supplierAddr.name)}</div>
|
||
${supplierLinesHtml}
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td class="details-bank">
|
||
<div class="info-row"><span class="lbl">${escapeHtml(t.issue_date)}</span> <span class="val">${escapeHtml(issueDateStr) || "—"}</span></div>
|
||
${deliveryDateStr ? `<div class="info-row"><span class="lbl">${escapeHtml(t.delivery_date)}</span> <span class="val">${escapeHtml(deliveryDateStr)}</span></div>` : ""}
|
||
</td>
|
||
<td></td>
|
||
</tr>
|
||
</table>
|
||
|
||
<!-- Polozky -->
|
||
<div class="billing-label">${escapeHtml(t.billing)}</div>
|
||
<table class="items">
|
||
<thead>
|
||
<tr>
|
||
<th class="center" style="width:3%">${escapeHtml(t.col_no)}</th>
|
||
<th style="width:36%">${escapeHtml(t.col_desc)}</th>
|
||
<th class="center" style="width:10%">${escapeHtml(t.col_qty)}</th>
|
||
<th class="right" style="width:10%">${escapeHtml(t.col_unit_price)}</th>
|
||
<th class="right" style="width:10%">${escapeHtml(t.col_price)}</th>
|
||
<th class="center" style="width:5%">${escapeHtml(t.col_vat_pct)}</th>
|
||
<th class="right" style="width:10%">${escapeHtml(t.col_vat)}</th>
|
||
<th class="right" style="width:16%">${escapeHtml(t.col_total)}</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
${itemsHtml}
|
||
</tbody>
|
||
</table>
|
||
|
||
<!-- Soucty -->
|
||
<div class="totals-wrapper">
|
||
<div class="totals">
|
||
<div class="detail-rows">
|
||
<div class="row">
|
||
<span class="label">${escapeHtml(t.subtotal)}</span>
|
||
<span class="value">${formatNum(subtotal)} ${escapeHtml(currency)}</span>
|
||
</div>${vatDetailHtml}
|
||
</div>
|
||
<div class="grand">
|
||
<span class="label">${escapeHtml(t.total)}</span>
|
||
<span class="value">${formatNum(totalToPay)} ${escapeHtml(currency)}</span>
|
||
</div>
|
||
<div class="currency-note">${escapeHtml(t.amounts_in)} ${escapeHtml(currency)}</div>
|
||
</div>
|
||
</div>
|
||
|
||
${notesHtml}
|
||
|
||
${termsBlock}
|
||
|
||
</div><!-- /.invoice-content -->
|
||
<div class="invoice-footer">
|
||
|
||
<!-- Vystavil (jmeno prihlaseneho uzivatele) -->
|
||
<div class="issued-by"><span class="lbl">${escapeHtml(t.issued_by)}</span> ${escapeHtml(issuer.name)}</div>
|
||
|
||
</div><!-- /.invoice-footer -->
|
||
</div><!-- /.invoice-page -->
|
||
|
||
</body>
|
||
</html>`;
|
||
}
|
||
|
||
export default async function issuedOrdersPdfRoutes(fastify: FastifyInstance) {
|
||
fastify.get<{ Params: { id: string } }>(
|
||
"/:id",
|
||
// Mirror invoices-pdf (invoices.view): view-level access serves BOTH the
|
||
// user-facing Export PDF and the ?save=1 NAS archive. There is no separate
|
||
// orders.export permission (it was dead — gated nothing — and was removed);
|
||
// orders.view is the single gate for both paths.
|
||
{ preHandler: requirePermission("orders.view") },
|
||
async (request, reply) => {
|
||
const id = parseId(request.params.id, reply);
|
||
if (id === null) return;
|
||
const query = request.query as Record<string, string>;
|
||
const lang: Lang = query.lang === "en" ? "en" : "cs";
|
||
|
||
try {
|
||
const order = await prisma.issued_orders.findUnique({ where: { id } });
|
||
if (!order) {
|
||
return reply
|
||
.status(404)
|
||
.type("text/html")
|
||
.send("<html><body><h1>Objednávka nenalezena</h1></body></html>");
|
||
}
|
||
const items = await prisma.issued_order_items.findMany({
|
||
where: { issued_order_id: id },
|
||
orderBy: { position: "asc" },
|
||
});
|
||
const supplier = order.supplier_id
|
||
? ((await prisma.sklad_suppliers.findUnique({
|
||
where: { id: order.supplier_id },
|
||
})) as Record<string, unknown> | null)
|
||
: null;
|
||
const settings = (await prisma.company_settings.findFirst()) as Record<
|
||
string,
|
||
unknown
|
||
> | null;
|
||
|
||
// Footer issuer = the logged-in user (there is no user FK on the
|
||
// order). The route runs under requirePermission("orders.view") so
|
||
// authData is always present here. Mirrors orders-pdf.ts userName.
|
||
const issuer = {
|
||
name: `${request.authData?.firstName ?? ""} ${request.authData?.lastName ?? ""}`.trim(),
|
||
};
|
||
|
||
const html = renderIssuedOrderHtml(
|
||
order,
|
||
items,
|
||
supplier,
|
||
settings,
|
||
lang,
|
||
issuer,
|
||
);
|
||
|
||
// ?save=1 → archive the PDF to NAS instead of returning it (mirrors
|
||
// invoices-pdf). A draft has no po_number → the guard skips it.
|
||
const saveMode = query.save === "1";
|
||
if (saveMode && nasOrdersManager.isConfigured() && order.po_number) {
|
||
const baseDate = order.order_date
|
||
? new Date(order.order_date)
|
||
: new Date();
|
||
nasOrdersManager.cleanIssued(order.po_number);
|
||
const pdfBuffer = await htmlToPdf(html);
|
||
nasOrdersManager.saveIssuedPdf(
|
||
order.po_number,
|
||
baseDate.getFullYear(),
|
||
baseDate.getMonth() + 1,
|
||
pdfBuffer,
|
||
);
|
||
return success(reply, null, 200, "PDF uloženo");
|
||
}
|
||
|
||
const pdf = await htmlToPdf(html);
|
||
const filename = `Objednavka-${order.po_number || String(id)}.pdf`;
|
||
return reply
|
||
.type("application/pdf")
|
||
.header("Content-Disposition", `attachment; filename="${filename}"`)
|
||
.send(pdf);
|
||
} catch (err) {
|
||
request.log.error(err, "Issued order PDF generation failed");
|
||
return reply
|
||
.status(500)
|
||
.type("text/html")
|
||
.send("<html><body><h1>Chyba při generování PDF</h1></body></html>");
|
||
}
|
||
},
|
||
);
|
||
}
|