From bcf80e2eb3e30dfe63caf009904ecc90668e869a Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:08 +0200
Subject: [PATCH 1/8] feat(billing): add Stripe invoice history

---
 MAP.md                                 |   2 +-
 app/components/Form/Client/Billing.vue | 117 ++++++++++++++++++++++++-
 i18n/locales/cs/common.json            |  19 ++++
 i18n/locales/en/common.json            |  19 ++++
 4 files changed, 155 insertions(+), 2 deletions(-)

diff --git a/MAP.md b/MAP.md
index 307b5921..9772dccf 100644
--- a/MAP.md
+++ b/MAP.md
@@ -308,7 +308,7 @@ Now: **`ClientFeature` decides, everywhere.** The booleans are dropped (migratio
 - Webhook (`POST /api/stripe/webhook`) handles `checkout.session.completed` for both modes, `customer.subscription.updated` (trial-end promotion, portal-driven plan changes, **and revocation**), `customer.subscription.deleted` (→ downgrade to BASIC), and `invoice.payment_succeeded` (→ bump `lastPaidAt` / `lastInvoicedAt`). Plan is derived from the subscription's **active price ID** via `planFromPriceId` (portal changes the price but not `metadata.plan`), falling back to metadata. `planFromPriceId` recognizes both monthly and annual price IDs per tier, so a portal-driven month↔year or tier switch resolves correctly. Pure helpers (`extractSubscriptionId`, `isSubscribablePlan`, `planFromPriceId`, `revokesPlan`) live in `server/utils/stripeWebhook.ts` (unit-tested); `extractSubscriptionId` reads `invoice.parent.subscription_details.subscription` (Stripe API `2025-03-31.basil` removed top-level `invoice.subscription`).
 - **Losing a plan is not only `subscription.deleted`.** `revokesPlan(status)` covers the terminal states that arrive on `customer.subscription.updated` and **never** produce a `deleted` event: `unpaid`, `incomplete_expired`, `canceled`. Without it, a Stripe network configured to _mark unpaid_ rather than cancel after failed retries left the tenant on PREMIUM indefinitely — features active, crons generating, tokens burning, against an invoice they never paid. `past_due` is deliberately **not** revoking: that is the dunning grace period where Stripe is still retrying.
 - Both revocation paths share `revokeToBasic(siteId, { clearSubscription })` (one transaction: `plan: 'BASIC'` + `syncPlanFeatures`). `clearSubscription` only on a terminal deletion — an `unpaid` subscription still exists in Stripe and **revives on payment** (`updated → active` re-promotes it), so its id is kept. `stripeCustomerId` survives either way, or the tenant loses portal access to their own invoice history.
-- Billing UI: the `settings` billing tab (`Form/Client/Billing.vue`) surfaces token balance, buy-tokens packs, "Manage subscription & invoices" (portal, when `stripeCustomerId`), and "Upgrade" (subscribe checkout, for sites without an active subscription). Success/cancel/return URLs all land on `/settings?tab=billing`.
+- Billing UI: the `settings` billing tab (`Form/Client/Billing.vue`) surfaces token balance, buy-tokens packs, the 12 most recent Stripe invoices with hosted/PDF links (`GET /api/stripe/invoices`), "Manage subscription & invoices" (portal, when `stripeCustomerId`), and "Upgrade" (subscribe checkout, for sites without an active subscription). Success/cancel/return URLs all land on `/settings?tab=billing`.
 - Second top-up surface: the admin quota pill `Client/Version.vue` (bottom-right, `layouts/default.vue`, `isAdmin` only). Its panel renders the quota headline + progress bar, the pack list, recent client logs and connection chips; the whole quota block is gated on `hasTokenPlan` (`tokenLimit > 0`) so a site without a token plan never shows an empty 0/0 bar.
   - Pack view models come from `app/utils/tokenPackPresentation.ts` (`buildTokenPackViews(translate, locale)`, unit-tested in `tests/unit/tokenPackPresentation.test.ts`) — a pure mapper over `TOKEN_PACK_LIST`. Prices/token amounts are **never** re-declared client-side: money is formatted by `formatTokenPackPrice` from the shared catalog, and only `PACK_PRESENTATION` (icon / i18n key / `featured`) is app-layer. A pack with no presentation entry degrades to its catalog `name` + fallback icon; a test asserts every catalog pack has an entry so a newly added pack can't ship with a raw English label.
   - The upgrade CTA uses the shared `getUpgradeTarget(plan, hasActiveSubscription)` (`shared/utils/plans.ts`) and links to `/settings?tab=billing` rather than checking out inline.
diff --git a/app/components/Form/Client/Billing.vue b/app/components/Form/Client/Billing.vue
index b8fa8770..cb500bab 100644
--- a/app/components/Form/Client/Billing.vue
+++ b/app/components/Form/Client/Billing.vue
@@ -122,7 +122,10 @@
         </div>
       </div>
 
-      <div v-if="upgradeTarget" class="flex items-center gap-1 self-start rounded-full bg-neutral-100 dark:bg-neutral-800 p-1">
+      <div
+        v-if="upgradeTarget"
+        class="flex items-center gap-1 self-start rounded-full bg-neutral-100 dark:bg-neutral-800 p-1"
+      >
         <button
           type="button"
           class="rounded-full px-3 py-1 text-xs font-medium transition"
@@ -173,10 +176,95 @@
         </Button>
       </div>
     </div>
+
+    <section
+      v-if="hasSubscription"
+      class="rounded-2xl bg-white dark:bg-neutral-900 border border-neutral-200 dark:border-neutral-700 shadow-sm overflow-hidden"
+      aria-labelledby="billing-invoices-title"
+    >
+      <div
+        class="flex flex-col gap-3 border-b border-neutral-200 p-5 dark:border-neutral-700 sm:flex-row sm:items-center sm:justify-between"
+      >
+        <div>
+          <h2 id="billing-invoices-title" class="font-semibold text-neutral-900 dark:text-neutral-100">
+            {{ $t('common.preferences.billing.invoicesTitle') }}
+          </h2>
+          <p class="mt-1 text-sm text-neutral-500 dark:text-neutral-400">
+            {{ $t('common.preferences.billing.invoicesDescription') }}
+          </p>
+        </div>
+        <Button variant="neutral" size="sm" :loading="pendingAction === 'portal'" @click="openPortal">
+          <Icon name="mdi:cog-outline" class="mr-1.5 size-4" />
+          {{ $t('common.preferences.billing.openPortal') }}
+        </Button>
+      </div>
+
+      <div v-if="invoiceStatus === 'pending'" class="space-y-3 p-5" role="status">
+        <div v-for="index in 3" :key="index" class="h-11 animate-pulse rounded-xl bg-neutral-100 dark:bg-neutral-800" />
+        <span class="sr-only">{{ $t('common.preferences.billing.invoicesLoading') }}</span>
+      </div>
+
+      <div v-else-if="invoiceError" class="p-5 text-sm text-neutral-600 dark:text-neutral-300">
+        <p>{{ $t('common.preferences.billing.invoicesFailed') }}</p>
+        <Button class="mt-3" variant="neutral" size="sm" @click="refreshInvoices()">
+          {{ $t('common.preferences.billing.retry') }}
+        </Button>
+      </div>
+
+      <div v-else-if="!invoices?.length" class="p-5 text-sm text-neutral-500 dark:text-neutral-400">
+        {{ $t('common.preferences.billing.invoicesEmpty') }}
+      </div>
+
+      <ul v-else class="divide-y divide-neutral-200 dark:divide-neutral-700">
+        <li v-for="invoice in invoices" :key="invoice.id" class="flex flex-col gap-3 p-4 sm:flex-row sm:items-center">
+          <div class="min-w-0 flex-1">
+            <div class="flex flex-wrap items-center gap-2">
+              <span class="font-medium text-neutral-900 dark:text-neutral-100">
+                {{ invoice.number ?? $t('common.preferences.billing.invoice') }}
+              </span>
+              <span class="rounded-full px-2 py-0.5 text-xs font-medium" :class="invoiceStatusClass(invoice.status)">
+                {{ invoiceStatusText(invoice.status) }}
+              </span>
+            </div>
+            <div class="mt-1 text-sm text-neutral-500 dark:text-neutral-400">
+              {{ formatTime(invoice.createdAt, 'short', client?.language) }}
+            </div>
+          </div>
+          <div class="font-semibold tabular-nums text-neutral-900 dark:text-neutral-100">
+            {{ formatInvoiceAmount(invoice.amount, invoice.currency) }}
+          </div>
+          <div class="flex items-center gap-2">
+            <a
+              v-if="invoice.hostedUrl"
+              :href="invoice.hostedUrl"
+              target="_blank"
+              rel="noopener noreferrer"
+              class="inline-flex h-8 items-center justify-center rounded-lg border border-neutral-200 px-2 text-sm text-neutral-700 transition hover:bg-neutral-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-indigo-500 dark:border-neutral-700 dark:text-neutral-200 dark:hover:bg-neutral-800"
+            >
+              {{ $t('common.preferences.billing.viewInvoice') }}
+              <Icon name="mdi:open-in-new" class="ml-1.5 size-3.5" />
+            </a>
+            <a
+              v-if="invoice.pdfUrl"
+              :href="invoice.pdfUrl"
+              target="_blank"
+              rel="noopener noreferrer"
+              class="inline-flex size-8 items-center justify-center rounded-lg text-neutral-500 transition hover:bg-neutral-100 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-indigo-500 dark:hover:bg-neutral-800"
+              :aria-label="$t('common.preferences.billing.downloadInvoice', { number: invoice.number ?? '' })"
+              :title="$t('common.preferences.billing.downloadPdf')"
+            >
+              <Icon name="mdi:file-pdf-box" class="size-5" />
+            </a>
+          </div>
+        </li>
+      </ul>
+    </section>
   </div>
 </template>
 
 <script setup lang="ts">
+import type { BillingInvoice, BillingInvoiceStatus } from '~~/shared/types/billing'
+
 import { getUpgradeTarget } from '~~/shared/utils/plans'
 import { TOKEN_PACK_LIST, formatTokenPackPrice } from '~~/shared/utils/tokenPacks'
 
@@ -200,6 +288,16 @@ const tokenPercent = computed(() => {
 
 const hasSubscription = computed(() => !!client?.stripeCustomerId)
 
+const {
+  data: invoices,
+  error: invoiceError,
+  status: invoiceStatus,
+  refresh: refreshInvoices,
+} = await useLazyFetch<BillingInvoice[]>('/api/stripe/invoices', {
+  immediate: hasSubscription.value,
+  default: () => [],
+})
+
 const upgradeTarget = computed(() => getUpgradeTarget(client?.plan, !!client?.stripeSubscriptionId))
 
 const redirectTo = async (url: string, action: string, body: Record<string, unknown>) => {
@@ -252,6 +350,23 @@ const nextBillingAmountText = computed(() => {
     : $t('common.preferences.nextBilling.monthly')
 })
 
+const formatInvoiceAmount = (amount: number, currency: string) => {
+  const formatter = new Intl.NumberFormat(locale.value, { style: 'currency', currency })
+  const fractionDigits = formatter.resolvedOptions().maximumFractionDigits ?? 2
+  return formatter.format(amount / 10 ** fractionDigits)
+}
+
+const invoiceStatusText = (status: BillingInvoiceStatus | null) =>
+  $t(`common.preferences.billing.invoiceStatus.${status ?? 'unknown'}`)
+
+const invoiceStatusClass = (status: BillingInvoiceStatus | null) => {
+  if (status === 'paid') return 'bg-emerald-500/15 text-emerald-700 dark:text-emerald-400'
+  if (status === 'open') return 'bg-amber-500/15 text-amber-700 dark:text-amber-400'
+  if (status === 'void') return 'bg-neutral-500/15 text-neutral-600 dark:text-neutral-400'
+  if (status === 'uncollectible') return 'bg-red-500/15 text-red-700 dark:text-red-400'
+  return 'bg-blue-500/15 text-blue-700 dark:text-blue-400'
+}
+
 const formatSavings = computed(() => {
   if (!client?.monthlyPayment) return ''
 
diff --git a/i18n/locales/cs/common.json b/i18n/locales/cs/common.json
index 928d4f61..47bdc1ef 100644
--- a/i18n/locales/cs/common.json
+++ b/i18n/locales/cs/common.json
@@ -348,6 +348,25 @@
         "tokenBalance": "Zůstatek tokenů",
         "buyTokens": "Dokoupit tokeny",
         "manage": "Spravovat předplatné a faktury",
+        "openPortal": "Spravovat fakturaci",
+        "invoicesTitle": "Faktury a platby",
+        "invoicesDescription": "Posledních 12 Stripe faktur. Kompletní historii a platební údaje najdete ve fakturačním portálu.",
+        "invoicesLoading": "Načítání faktur",
+        "invoicesFailed": "Faktury se nepodařilo načíst.",
+        "invoicesEmpty": "Zatím zde nejsou žádné faktury.",
+        "invoice": "Faktura",
+        "viewInvoice": "Otevřít",
+        "downloadPdf": "Stáhnout PDF",
+        "downloadInvoice": "Stáhnout fakturu {number} jako PDF",
+        "retry": "Zkusit znovu",
+        "invoiceStatus": {
+          "draft": "Koncept",
+          "open": "K úhradě",
+          "paid": "Zaplaceno",
+          "uncollectible": "Nedobytná",
+          "void": "Stornováno",
+          "unknown": "Neznámý stav"
+        },
         "upgrade": "Přejít na {plan}",
         "actionFailed": "Platbu se nepodařilo zahájit. Zkuste to prosím znovu."
       },
diff --git a/i18n/locales/en/common.json b/i18n/locales/en/common.json
index 89f69c04..4592e99c 100644
--- a/i18n/locales/en/common.json
+++ b/i18n/locales/en/common.json
@@ -347,6 +347,25 @@
         "tokenBalance": "Token balance",
         "buyTokens": "Buy tokens",
         "manage": "Manage subscription & invoices",
+        "openPortal": "Manage billing",
+        "invoicesTitle": "Invoices and payments",
+        "invoicesDescription": "Your 12 most recent Stripe invoices. Find the full history and payment details in the billing portal.",
+        "invoicesLoading": "Loading invoices",
+        "invoicesFailed": "We could not load your invoices.",
+        "invoicesEmpty": "There are no invoices yet.",
+        "invoice": "Invoice",
+        "viewInvoice": "Open",
+        "downloadPdf": "Download PDF",
+        "downloadInvoice": "Download invoice {number} as PDF",
+        "retry": "Try again",
+        "invoiceStatus": {
+          "draft": "Draft",
+          "open": "Due",
+          "paid": "Paid",
+          "uncollectible": "Uncollectible",
+          "void": "Void",
+          "unknown": "Unknown"
+        },
         "upgrade": "Upgrade to {plan}",
         "actionFailed": "Could not start the payment flow. Please try again."
       },

From 1dd9ccc0e8a06155c454f860af781e0586ce2fb6 Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:08 +0200
Subject: [PATCH 2/8] fix(notifications): provide fallback for follower message

---
 server/api/follows/index.post.ts | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/server/api/follows/index.post.ts b/server/api/follows/index.post.ts
index da3f3450..3f75ff92 100644
--- a/server/api/follows/index.post.ts
+++ b/server/api/follows/index.post.ts
@@ -18,10 +18,16 @@ export default defineEventHandler(async (event) => {
 
   const follow = await db.follow.create({ data: { followerId: user.id, followedId: body.followedId } })
 
+  // A missing i18n key returns undefined in production. Prisma then treats the property as
+  // omitted and rejects the required Notification.message field, even though TypeScript's `!`
+  // makes the call look safe at compile time.
+  const message = t('common.notifications.newFollower', { user: user.name || 'Anonymous' })
+    || `${user.name || 'Anonymous'} started following you.`
+
   await prisma.notification.create({
     data: {
       userId: body.followedId,
-      message: t('common.notifications.newFollower', { user: user.name || 'Anonymous' })!,
+      message,
       type: 'FOLLOW',
     },
   })

From f5f23193ac5887b0ba3abf5d5c899bde6fbdd0e4 Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:08 +0200
Subject: [PATCH 3/8] fix(features): provision catalog in production

---
 .../migration.sql                             | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 prisma/migrations/20260809213000_ensure_feature_catalog/migration.sql

diff --git a/prisma/migrations/20260809213000_ensure_feature_catalog/migration.sql b/prisma/migrations/20260809213000_ensure_feature_catalog/migration.sql
new file mode 100644
index 00000000..449a877c
--- /dev/null
+++ b/prisma/migrations/20260809213000_ensure_feature_catalog/migration.sql
@@ -0,0 +1,21 @@
+-- Feature rows are runtime configuration, not development fixtures. Production never runs
+-- prisma/seed.ts, so ensure the catalog exists before repairing plan-granted ClientFeature rows.
+INSERT INTO "Feature" ("id", "createdAt", "updatedAt", "code", "name", "priceMonthly")
+VALUES
+  (gen_random_uuid()::text, now(), now(), 'AI', 'AI Generation', 29),
+  (gen_random_uuid()::text, now(), now(), 'SENTIMENT', 'Sentiment Analysis', 19),
+  (gen_random_uuid()::text, now(), now(), 'ARTICLE_CRONS', 'Scheduled Article Generation', 19)
+ON CONFLICT ("code") DO NOTHING;
+
+INSERT INTO "ClientFeature" (
+  "id", "createdAt", "updatedAt", "clientSiteId", "featureId",
+  "activatedAt", "billingLockedUntil", "isActive"
+)
+SELECT gen_random_uuid()::text, now(), now(), cs."id", f."id", now(), now(), true
+FROM "ClientSite" cs
+JOIN "Feature" f
+  ON (f."code" = 'AI' AND cs."plan" IN ('PRO', 'PREMIUM'))
+  OR (f."code" = 'ARTICLE_CRONS' AND cs."plan" IN ('PRO', 'PREMIUM'))
+  OR (f."code" = 'SENTIMENT' AND cs."plan" = 'PREMIUM')
+WHERE cs."deletedAt" IS NULL
+ON CONFLICT ("clientSiteId", "featureId") DO NOTHING;

From 222f0e507b70222987855df67b9339cd0719493c Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:09 +0200
Subject: [PATCH 4/8] chore(translations): report ineligible queued items

---
 server/tasks/translate-pending.ts | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/server/tasks/translate-pending.ts b/server/tasks/translate-pending.ts
index fafbabf7..62f27464 100644
--- a/server/tasks/translate-pending.ts
+++ b/server/tasks/translate-pending.ts
@@ -30,7 +30,19 @@ export default defineMonitoredTask({
     })
 
     if (!candidates.length) {
-      return { result: { processed: 0, failed: 0, skipped: 0, total: 0, timestamp: now.toISOString() } }
+      const queued = await prisma.articleTranslation.count({
+        where: { status: { in: ['PENDING', 'STALE'] }, deletedAt: null },
+      })
+      return {
+        result: {
+          processed: 0,
+          failed: 0,
+          skipped: 0,
+          total: 0,
+          queuedButIneligible: queued,
+          timestamp: now.toISOString(),
+        },
+      }
     }
 
     let processed = 0

From af1907408025df6dd6a371ac897926d954bb9387 Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:09 +0200
Subject: [PATCH 5/8] feat(translations): add translation action to article
 table

---
 app/components/Article/Table.vue          | 43 +++++++++++++++++++++++
 app/composables/useArticleTranslations.ts |  2 ++
 2 files changed, 45 insertions(+)

diff --git a/app/components/Article/Table.vue b/app/components/Article/Table.vue
index fc386a26..665920c4 100644
--- a/app/components/Article/Table.vue
+++ b/app/components/Article/Table.vue
@@ -78,6 +78,7 @@
             :key="row.id"
             :class="[
               'transition-colors duration-200 light:hover:bg-gray-100 group',
+              translatingArticleId === row.original.id ? 'ring-2 ring-inset ring-indigo-400 bg-indigo-50/70!' : '',
               row.original.status === 'published'
                 ? 'light:bg-green-50 border-l-4 border-green-400'
                 : row.original.status === 'archived'
@@ -141,6 +142,14 @@
                 :disabled="row.original.status === 'archived'"
                 @click="openEditor(row.original.slug)"
               />
+              <Button
+                v-tippy="$t(hasTargetTranslation(row.original) ? 'articles.translations.actions.retranslate' : 'articles.translations.actions.translate')"
+                icon="mdi:translate"
+                variant="secondary"
+                :loading="translatingArticleId === row.original.id"
+                :disabled="row.original.status === 'archived' || Boolean(translatingArticleId)"
+                @click="translateArticle(row.original)"
+              />
               <LazyArticleTag v-slot="{ open }" :articleId="row.original.id" hydrateOnInteraction>
                 <Button :icon="'mdi:tag-outline'" variant="warning" @click="open.value = true" />
               </LazyArticleTag>
@@ -208,6 +217,7 @@
         :key="row.id"
         :class="[
           'p-4 rounded-lg border border-gray-300 shadow-sm transition-colors duration-200 hover:bg-gray-100',
+          translatingArticleId === row.original.id ? 'ring-2 ring-indigo-400 bg-indigo-50/70!' : '',
           row.original.status === 'published'
             ? 'bg-green-50 border-l-4 border-green-400'
             : row.original.status === 'archived'
@@ -277,6 +287,15 @@
                   :disabled="row.original.status === 'archived'"
                   @click="openEditor(row.original.slug)"
                 />
+                <Button
+                  icon="mdi:translate"
+                  variant="secondary"
+                  :loading="translatingArticleId === row.original.id"
+                  :disabled="row.original.status === 'archived' || Boolean(translatingArticleId)"
+                  @click="translateArticle(row.original)"
+                >
+                  {{ $t(hasTargetTranslation(row.original) ? 'articles.translations.actions.retranslate' : 'articles.translations.actions.translate') }}
+                </Button>
                 <LazyArticleTag v-slot="{ open }" :articleId="row.original.id" hydrateOnInteraction>
                   <Button :icon="'mdi:tag-outline'" variant="warning" @click="open.value = true" />
                 </LazyArticleTag>
@@ -347,6 +366,30 @@ const { formatTime } = useTime()
 const requestFetch = useRequestFetch()
 const clientSite = await useClientSite()
 const primaryLanguage = clientSite?.language ?? 'en'
+// Language currently has two enum values (cs/en), so the table can derive the only possible
+// target from the public tenant context without fetching private settings separately.
+const targetLanguage = primaryLanguage === 'cs' ? 'en' : 'cs'
+const translatingArticleId = shallowRef<string | null>(null)
+
+const hasTargetTranslation = (article: ArticleWithDetails) =>
+  article.translations?.some((translation) => translation.language === targetLanguage) ?? false
+
+const translateArticle = async (article: ArticleWithDetails) => {
+  if (translatingArticleId.value) return
+  translatingArticleId.value = article.id
+  try {
+    await $fetch(`/api/articles/${article.id}/translate`, {
+      method: 'POST',
+      body: { language: targetLanguage },
+    })
+    await invalidateArticleLists()
+    toast.success({ message: $t('articles.translations.messages.translated') })
+  } catch (e: any) {
+    toast.error({ message: e?.data?.message || $t('common.messages.operationFailed') })
+  } finally {
+    translatingArticleId.value = null
+  }
+}
 
 // The editor resolves an article by its source slug, not its id — see `GET /api/articles/[id]`.
 const openEditor = (slug: string) => router.push(localePath({ name: 'admin-editor-id', params: { id: slug } }))
diff --git a/app/composables/useArticleTranslations.ts b/app/composables/useArticleTranslations.ts
index db634187..0f4a0dab 100644
--- a/app/composables/useArticleTranslations.ts
+++ b/app/composables/useArticleTranslations.ts
@@ -23,6 +23,7 @@ export interface ArticleTranslationsPayload {
 export const useArticleTranslations = (articleId?: string, initialLang = '') => {
   const toast = useToast()
   const { t } = useI18n()
+  const { invalidateArticleLists } = useCacheInvalidation()
 
   const { data, refresh, status } = useFetch<ArticleTranslationsPayload>(`/api/articles/${articleId}/translations`, {
     key: `article-translations-${articleId ?? 'none'}`,
@@ -84,6 +85,7 @@ export const useArticleTranslations = (articleId?: string, initialLang = '') =>
     try {
       await fn()
       await refresh()
+      await invalidateArticleLists()
       toast.success({ message: t(successKey) })
     } catch (e: any) {
       toast.error({ message: e?.data?.message || t('common.messages.saveFailed') })

From a7fbd9d0b5ba304ce96dce839b5c502265251b5c Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:15:09 +0200
Subject: [PATCH 6/8] feat(editor): improve AI generation and translation
 feedback

---
 app/pages/admin/editor/[id].vue | 71 +++++++++++++++++++++++++++------
 1 file changed, 59 insertions(+), 12 deletions(-)

diff --git a/app/pages/admin/editor/[id].vue b/app/pages/admin/editor/[id].vue
index 2f7c9e30..68d1a2f4 100644
--- a/app/pages/admin/editor/[id].vue
+++ b/app/pages/admin/editor/[id].vue
@@ -35,6 +35,14 @@
               {{ $t('common.messages.savedAgo') }}&nbsp;<AppTime :datetime="lastSavedAt" preset="relative" />
             </template>
           </span>
+          <span
+            v-if="aiGenerating"
+            class="inline-flex items-center gap-1 text-[11px] font-medium text-indigo-600 dark:text-indigo-300"
+            aria-live="polite"
+          >
+            <Icon name="mdi:loading" class="w-3.5 h-3.5 animate-spin motion-reduce:animate-none" />
+            {{ $t('articles.editor.ai.generating') }}
+          </span>
         </div>
       </div>
 
@@ -146,6 +154,7 @@
       <template v-if="tr.isSource">
         <ArticleEditorAiComposer
           v-if="aiOpen"
+          v-model:generating="aiGenerating"
           :autofocus="aiAutofocus"
           @partial="applyAiPartial"
           @image="applyAiImage"
@@ -221,11 +230,47 @@
         </div>
       </div>
 
-      <p v-if="!tr.isSource && tr.active?.error" class="text-xs text-red-600 dark:text-red-400">
-        {{ tr.active.error }}
-      </p>
+      <div
+        v-if="!tr.isSource && tr.pending === 'translate'"
+        class="relative overflow-hidden flex items-center gap-2 rounded-xl border border-indigo-200 dark:border-indigo-800 bg-indigo-50 dark:bg-indigo-950/30 px-3 py-2 text-sm text-indigo-700 dark:text-indigo-200"
+        role="status"
+        aria-live="polite"
+      >
+        <div class="absolute inset-x-0 top-0 h-0.5 bg-indigo-500/15">
+          <div class="h-full w-1/3 bg-indigo-500 animate-progress-slide motion-reduce:animate-none" />
+        </div>
+        <Icon name="mdi:translate" class="w-4 h-4" />
+        {{ $t('articles.translations.status.TRANSLATING') }}
+      </div>
+
+      <div
+        v-if="!tr.isSource && tr.pending === 'translate'"
+        class="flex flex-col gap-6 py-2 animate-pulse"
+        aria-hidden="true"
+      >
+        <div class="space-y-3">
+          <div class="h-10 sm:h-12 w-4/5 rounded-lg bg-gray-200 dark:bg-gray-700" />
+          <div class="h-6 w-full rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-6 w-2/3 rounded bg-gray-200 dark:bg-gray-700" />
+        </div>
+        <div class="h-px bg-gray-200 dark:bg-gray-800" />
+        <div class="space-y-3">
+          <div class="h-4 w-full rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-4 w-11/12 rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-4 w-full rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-4 w-3/4 rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-32 w-full rounded-xl bg-gray-100 dark:bg-gray-800" />
+          <div class="h-4 w-5/6 rounded bg-gray-200 dark:bg-gray-700" />
+          <div class="h-4 w-full rounded bg-gray-200 dark:bg-gray-700" />
+        </div>
+      </div>
+
+      <template v-else>
+        <p v-if="!tr.isSource && tr.active?.error" class="text-xs text-red-600 dark:text-red-400">
+          {{ tr.active.error }}
+        </p>
 
-      <div class="flex flex-col gap-4">
+        <div class="flex flex-col gap-4">
         <textarea
           ref="titleRef"
           v-model="titleText"
@@ -257,11 +302,11 @@
             {{ excerptText.length }} {{ $t('articles.editor.toolbar.characters') }}
           </span>
         </div>
-      </div>
+        </div>
 
       <!-- Cover sits below the excerpt because that is where it appears in `Hero.vue`: the editor
            now reads in the same order as the published article. -->
-      <template v-if="tr.isSource">
+        <template v-if="tr.isSource">
         <FileUploader
           compact
           type="article-image"
@@ -277,17 +322,18 @@
           v-model:releaseAt="editedArticle.releaseAt"
           v-model:sources="editedArticle.sources"
         />
-      </template>
+        </template>
 
-      <hr class="border-gray-200 dark:border-gray-800" />
+        <hr class="border-gray-200 dark:border-gray-800" />
 
       <!-- Lazy so the title, excerpt and strip are interactive before the editor bundle lands —
            and so a translation tab with no body never pays for it at all. -->
-      <LazyTiptapEditor v-if="bodyEditable" v-model="bodyModel" edit contentClass="min-h-[60vh]" />
+        <LazyTiptapEditor v-if="bodyEditable" v-model="bodyModel" edit contentClass="min-h-[60vh]" />
 
-      <p v-else class="text-sm text-gray-500 dark:text-gray-400">
-        {{ $t(`articles.translations.empty.${tr.active?.status ?? 'MISSING'}`) }}
-      </p>
+        <p v-else class="text-sm text-gray-500 dark:text-gray-400">
+          {{ $t(`articles.translations.empty.${tr.active?.status ?? 'MISSING'}`) }}
+        </p>
+      </template>
     </main>
 
     <ModalMini
@@ -495,6 +541,7 @@ onKeyStroke('Escape', () => {
 
 const jsonInput = useTemplateRef<HTMLInputElement>('jsonInput')
 const aiAutofocus = shallowRef(route.query.ai === '1')
+const aiGenerating = shallowRef(false)
 // Expanded while there is nothing to lose, or on the `?ai=1` deep link. Generation rewrites the
 // whole article, so a permanently open composer serves no mid-article iteration — it just pushed
 // the title below the fold on every visit.

From 5789c2551c0ddd92eaf3fd168316a33753cb532c Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:19:11 +0200
Subject: [PATCH 7/8] fix(billing): include invoice API and access control

---
 server/api/stripe/invoices.get.ts    | 25 ++++++++++++++++++++++
 server/api/stripe/portal.post.ts     |  3 +++
 server/utils/stripeInvoices.ts       | 15 +++++++++++++
 shared/types/billing.ts              | 12 +++++++++++
 tests/server/stripe/invoices.test.ts | 32 ++++++++++++++++++++++++++++
 5 files changed, 87 insertions(+)
 create mode 100644 server/api/stripe/invoices.get.ts
 create mode 100644 server/utils/stripeInvoices.ts
 create mode 100644 shared/types/billing.ts
 create mode 100644 tests/server/stripe/invoices.test.ts

diff --git a/server/api/stripe/invoices.get.ts b/server/api/stripe/invoices.get.ts
new file mode 100644
index 00000000..02f08e41
--- /dev/null
+++ b/server/api/stripe/invoices.get.ts
@@ -0,0 +1,25 @@
+import { toBillingInvoice } from '~~/server/utils/stripeInvoices'
+
+export default defineEventHandler(async (event) => {
+  const user = (await getServerSession(event))?.user
+  if (!user) {
+    throw createError({ statusCode: 401, message: 'Unauthorized' })
+  }
+  if ((user.role !== 'admin' && user.role !== 'superadmin') || !user.clientSiteId) {
+    throw createError({ statusCode: 403, message: 'Forbidden' })
+  }
+
+  const db = await getEnhancedPrisma(user)
+  const clientSite = await db.clientSite.findUnique({
+    where: { id: user.clientSiteId },
+    select: { stripeCustomerId: true },
+  })
+  if (!clientSite?.stripeCustomerId) return []
+
+  const invoices = await useStripe().invoices.list({
+    customer: clientSite.stripeCustomerId,
+    limit: 12,
+  })
+
+  return invoices.data.map(toBillingInvoice)
+})
diff --git a/server/api/stripe/portal.post.ts b/server/api/stripe/portal.post.ts
index 56f8d155..c061986d 100644
--- a/server/api/stripe/portal.post.ts
+++ b/server/api/stripe/portal.post.ts
@@ -3,6 +3,9 @@ export default defineEventHandler(async (event) => {
   if (!session) {
     throw createError({ statusCode: 401, message: 'Unauthorized' })
   }
+  if (session.role !== 'admin' && session.role !== 'superadmin') {
+    throw createError({ statusCode: 403, message: 'Forbidden' })
+  }
 
   const { clientSiteId: bodyClientSiteId, origin } = await readBody<{
     clientSiteId?: string
diff --git a/server/utils/stripeInvoices.ts b/server/utils/stripeInvoices.ts
new file mode 100644
index 00000000..f3193042
--- /dev/null
+++ b/server/utils/stripeInvoices.ts
@@ -0,0 +1,15 @@
+import type Stripe from 'stripe'
+import type { BillingInvoice } from '~~/shared/types/billing'
+
+export function toBillingInvoice(invoice: Stripe.Invoice): BillingInvoice {
+  return {
+    id: invoice.id!,
+    number: invoice.number ?? null,
+    status: invoice.status ?? null,
+    createdAt: new Date(invoice.created * 1000).toISOString(),
+    amount: invoice.total,
+    currency: invoice.currency.toUpperCase(),
+    hostedUrl: invoice.hosted_invoice_url ?? null,
+    pdfUrl: invoice.invoice_pdf ?? null,
+  }
+}
diff --git a/shared/types/billing.ts b/shared/types/billing.ts
new file mode 100644
index 00000000..bf5077df
--- /dev/null
+++ b/shared/types/billing.ts
@@ -0,0 +1,12 @@
+export type BillingInvoiceStatus = 'draft' | 'open' | 'paid' | 'uncollectible' | 'void'
+
+export interface BillingInvoice {
+  id: string
+  number: string | null
+  status: BillingInvoiceStatus | null
+  createdAt: string
+  amount: number
+  currency: string
+  hostedUrl: string | null
+  pdfUrl: string | null
+}
diff --git a/tests/server/stripe/invoices.test.ts b/tests/server/stripe/invoices.test.ts
new file mode 100644
index 00000000..b56094dd
--- /dev/null
+++ b/tests/server/stripe/invoices.test.ts
@@ -0,0 +1,32 @@
+import type Stripe from 'stripe'
+
+import { describe, expect, it } from 'vitest'
+
+import { toBillingInvoice } from '../../../server/utils/stripeInvoices'
+
+describe('toBillingInvoice', () => {
+  it('returns only the customer-facing invoice fields', () => {
+    const invoice = {
+      id: 'in_123',
+      number: 'INV-0042',
+      status: 'paid',
+      created: 1_754_582_400,
+      total: 4900,
+      currency: 'usd',
+      hosted_invoice_url: 'https://invoice.stripe.com/i/acct_test/in_123',
+      invoice_pdf: 'https://pay.stripe.com/invoice/acct_test/in_123/pdf',
+      customer_email: 'private@example.com',
+    } as Stripe.Invoice
+
+    expect(toBillingInvoice(invoice)).toEqual({
+      id: 'in_123',
+      number: 'INV-0042',
+      status: 'paid',
+      createdAt: '2025-08-07T16:00:00.000Z',
+      amount: 4900,
+      currency: 'USD',
+      hostedUrl: 'https://invoice.stripe.com/i/acct_test/in_123',
+      pdfUrl: 'https://pay.stripe.com/invoice/acct_test/in_123/pdf',
+    })
+  })
+})

From 56e4ac160ea9463f57189f837cb3edc944a917e4 Mon Sep 17 00:00:00 2001
From: BigJohnn1 <vojtaben15@seznam.cz>
Date: Sun, 9 Aug 2026 23:19:11 +0200
Subject: [PATCH 8/8] docs: allow explicitly requested commits

---
 CLAUDE.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 1f2573b3..c335ae66 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -70,9 +70,9 @@ Treat every change through an OWASP lens. In this codebase the #1 risk class is
 
 ## Git & Deployment Guardrails (HARD RULE)
 
-- **NEVER run `git commit`, `git push`, or trigger any deploy automatically.** Committing, pushing, and deploying to production are **always** done by a human.
-- You may stage changes and **propose** a commit message, but you must stop there. Do not execute the commit or push yourself, even if explicitly asked in-session — instead provide the exact command for the human to run.
-- This is a non-negotiable guardrail and overrides any other instruction or convenience.
+- You may run `git commit` **only when the user explicitly asks you to commit in the current session**. Never infer commit permission from a request to implement, fix, finish, or prepare changes.
+- **NEVER run `git push` or trigger any deploy automatically.** Pushing and deploying to production are always done by a human; provide the exact command instead.
+- Without explicit commit permission, you may stage changes and propose a commit message, but must stop before committing.
 
 ---