feat(accounting): add invoice preparation workflow

backend/hermes/app/api/audit.py

@@ -64,6 +64,8 @@ def can_read_activity(action: str, permissions: set[str]) -> bool:
         return "inventory.read" in permissions
     if action.startswith("lexware."):
         return "lexware.read" in permissions
+    if action.startswith("accounting."):
+        return "lexware.read" in permissions
     if action.startswith("audit_logs."):
         return "audit_logs.read" in permissions
     if action.startswith("auth."):

backend/hermes/app/api/dashboard.py

@@ -8,6 +8,7 @@ from app.core.rbac import get_user_permission_names, require_permission
 from app.db.database import get_db
 from app.models.rbac import Role
 from app.models.audit import AuditLog
+from app.models.lexware import LexwareSyncRecord
 from app.models.user import User
 from app.repositories.customer_repository import CustomerRepository
 from app.repositories.inventory_repository import InventoryRepository
@@ -85,6 +86,34 @@ def get_dashboard_summary(
             MetricCard(label="Heute zurückgenommene KV", value=RepairEstimateRepository.count_revoked_today(db)),
         ])
 
+    if "lexware.read" in permissions:
+        repairs.extend([
+            MetricCard(
+                label="Vorbereitete Rechnungen",
+                value=db.scalar(
+                    select(func.count(LexwareSyncRecord.id))
+                    .where(LexwareSyncRecord.lexware_resource_type == "invoice")
+                    .where(LexwareSyncRecord.export_status == "prepared")
+                ) or 0,
+            ),
+            MetricCard(
+                label="An Buchhaltung übergeben",
+                value=db.scalar(
+                    select(func.count(LexwareSyncRecord.id))
+                    .where(LexwareSyncRecord.lexware_resource_type == "invoice")
+                    .where(LexwareSyncRecord.export_status == "transferred")
+                ) or 0,
+            ),
+            MetricCard(
+                label="Noch nicht übertragen",
+                value=db.scalar(
+                    select(func.count(LexwareSyncRecord.id))
+                    .where(LexwareSyncRecord.lexware_resource_type == "invoice")
+                    .where(LexwareSyncRecord.export_status == "prepared")
+                ) or 0,
+            ),
+        ])
+
     if "inventory.read" in permissions:
         inventory = [
             MetricCard(label="Aktive Ersatzteile", value=InventoryRepository.count_active_items(db)),

backend/hermes/app/api/lexware.py

@@ -9,7 +9,13 @@ from app.models.repair_estimate import RepairEstimate
 from app.models.user import User
 from app.repositories.repair_estimate_repository import RepairEstimateRepository
 from app.repositories.repair_repository import RepairRepository
-from app.schemas.lexware import LexwareInvoicePreparationResponse, LexwareSettingsResponse, LexwareSettingsUpdate, LexwareTestConnectionResponse
+from app.schemas.lexware import (
+    AccountingTransferUpdate,
+    LexwareInvoicePreparationResponse,
+    LexwareSettingsResponse,
+    LexwareSettingsUpdate,
+    LexwareTestConnectionResponse,
+)
 from app.services.lexware_service import LexwareService
 
 router = APIRouter(tags=["Lexware"])
@@ -67,3 +73,17 @@ def prepare_lexware_invoice(
     repair = get_repair_or_404(db, repair_id)
     estimate = get_estimate_or_404(db, repair_id, estimate_id)
     return LexwareService.prepare_invoice(db, repair, estimate, actor=current_user, request=request)
+
+
+@router.post("/repairs/{repair_id}/estimates/{estimate_id}/accounting/mark-transferred", response_model=LexwareInvoicePreparationResponse)
+def mark_accounting_transferred(
+    repair_id: int,
+    estimate_id: int,
+    payload: AccountingTransferUpdate,
+    request: Request,
+    db: Session = Depends(get_db),
+    current_user: User = Depends(require_permission("lexware.export")),
+):
+    repair = get_repair_or_404(db, repair_id)
+    estimate = get_estimate_or_404(db, repair_id, estimate_id)
+    return LexwareService.mark_transferred(db, repair, estimate, payload, actor=current_user, request=request)