L14 Abrechnungsübersicht: Datenmodell, Migration, Rechte und Modul

Neue Tenant-Tabellen work_order_milestones und billing_records (RLS, TENANT_MODELS, PII-Felder), Partial-Unique-Indizes je Quelle, billing_record_id an time_entries/material_usages. Rechte billing:read/billing:write (Backoffice, Mandantenadmin), Modul billing, Events milestone.*.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/server/backup/topology.ts

@@ -72,6 +72,9 @@ export const TENANT_MODELS: readonly string[] = [
   "Notification",
   "SyncOperation",
   "AiGeneration",
+  // L14 Abrechnungsübersicht
+  "WorkOrderMilestone",
+  "BillingRecord",
 ];
 
 /**

src/server/db.ts

@@ -123,6 +123,9 @@ const TENANT_MODELS = new Set<string>([
   "Notification",
   "SyncOperation",
   "AiGeneration",
+  // L14 Abrechnungsübersicht
+  "WorkOrderMilestone",
+  "BillingRecord",
   // WebAuthnCredential/Identity sind identitäts-global (kein tenant_id) → NICHT hier.
   // Craftvia-Fachmodelle hier ergänzen — UND in src/server/backup/topology.ts
   // (TENANT_MODELS) sowie per `SELECT enable_tenant_rls('<table>')` in der Migration

src/server/dsgvo/pii-fields.ts

@@ -48,6 +48,13 @@ export const PII_REFERENCE_FIELDS: readonly PiiReference[] = [
   { model: "SyncOperation", field: "userId" },
   { model: "SyncOperation", field: "resolvedById" },
   { model: "AiGeneration", field: "createdById" },
+  // L14 Abrechnungsübersicht
+  { model: "WorkOrderMilestone", field: "createdById" },
+  { model: "WorkOrderMilestone", field: "reachedById" },
+  { model: "WorkOrderMilestone", field: "confirmedById" },
+  { model: "WorkOrderMilestone", field: "rejectedById" },
+  { model: "BillingRecord", field: "billedById" },
+  { model: "BillingRecord", field: "voidedById" },
   // Free-text person data of END CUSTOMERS (Customer/Contact/Site/Signature.signerName) is
   // tenant business data under data processing — not part of the employee subject export.
 ];

src/server/rbac.ts

@@ -57,6 +57,9 @@ export const PERMISSIONS = [
   "settings:templates",
   // Lotse (KI-Assistent)
   "lotse:use",
+  // L14 Abrechnungsübersicht (keine Buchhaltung): Übersicht lesen / abgerechnet markieren, stornieren, Meilensteine bestätigen
+  "billing:read",
+  "billing:write",
 ] as const;
 
 export type Permission = (typeof PERMISSIONS)[number];