Skip to main content

Bilko — Balkan Accounting SaaS

Cloud accounting for Balkan SMBs (Serbia, BiH, Croatia). Fiken-inspired.

Frontend

Next.js 15 frontend — pages, components, design system

Design & Brand

Figma designs, logo, tokens, validation

Documentation Index

Bilko Documentation Index Last updated: 2026-02-20 Project ID: bbd77cc0 Status: Backend SPECIFIC...

Architecture

Backend

Backend — Target Architecture

Bilko API — Express Backend BookStack — Provjeri PRVO Prije traženja bilo čega — provjeri BookSta...

Database — Schema & Models

Bilko Database — Prisma + PostgreSQL BookStack — Provjeri PRVO Prije traženja bilo čega — provjer...

API Reference

Bilko API Reference Status: SPECIFICATION (backend not implemented) Base URL: http://localhost:4...

Database Schema

Bilko Database Schema Status: IMPLEMENTED (Prisma schema exists) Location: /Users/makinja/ALAI/p...

Authentication & Authorization

Bilko Authentication & Authorization Status: SPECIFICATION (backend not implemented) Last update...

Business Logic

Bilko Business Logic Status: SPECIFICATION (backend not implemented) Last updated: 2026-02-20 ...

Middleware Stack

Bilko Middleware Stack Status: SPECIFICATION (backend not implemented) Last updated: 2026-02-20 ...

External Services Integration

Bilko External Services Status: SPECIFICATION (backend not implemented) Last updated: 2026-02-20...

API Coverage Report

API Coverage Report Date: 2026-02-20 Purpose: Map every frontend page to required API endpoints. ...

Bilko Authentication -- Entra External ID (CIAM)

Overview Bilko uses Microsoft Entra External ID (CIAM) as its sole identity provider. Entra authe...

Bilko RBAC -- Users / Roles / Permissions

Overview Bilko uses a flat RBAC model: users have one role per organisation; roles map to a permi...

Bilko Auth Migration Runbook + Admin Guide

Scope This runbook covers: (1) how an operator bootstraps the first admin after legacy auth is re...

ADR-037 -- Entra Authenticates, Bilko Authorises; Single-Role v1; Multi-Org Deferred

ADR-037 — Entra Authenticates, Bilko Authorises; Single-Role v1; Multi-Org Deferred FieldValue ...

Bilko Self-Serve Trial — CIAM Architecture and Auth Pattern (MC #103232)

Bilko Self-Serve Trial — CIAM Architecture & Auth Pattern MC: #103232 | Status: LIVE — Proveo 11...

AI Support Agent — bilko.cloud (HR)

AI Support Agent — bilko.cloud (HR) Status: Phase 1 operational (internal copilot); Phase 2 cust...

Bilko HR — Inbound e-Invoice Reject + Monthly Rejection eIzvještavanje (MC #106149 / #106146)

MC #106149 (reject action, M) + #106146 (monthly eIzvještavanje report, H, RED-ZONE HR tax/compli...

MC #106259 — Bilko Admin Portal Contract Fix

MC #106259 — fix for 4 contract defects found by Angie Jones' platform_admin UAT catalog (MC #106...

Deep-Link Redirects Survive Login — Mechanism, Consumers, Open Gaps (MC #106384)

Deep-Link Redirects Survive Login — Mechanism, Consumers, and Open Gaps MC: #106384 | Status: LI...

Testing & QA

Infrastructure & DevOps

Deployment Guide

Bilko Deployment Guide Last Updated: 2026-04-16Current State: Stable Cloud Run deployment with cu...

CI/CD Pipeline

Bilko — CI/CD Pipeline Status: PLANNED (GitHub Actions workflows not yet configured) This documen...

Environment Configuration

Bilko — Development Environment Setup This guide walks through setting up a local development env...

Bilko Stage Environment — Cloud SQL & IAM (Phase 1)

SummaryMC #10177 Phase 1 (FlowForge, 2026-04-29): bilko-staging-db Cloud SQL instance brought und...

Bilko Stage Environment — Cloud Run Services (Phase 2)

Overview MC: #10177 Phase 2  |  Deployed: 2026-04-30  |  Git SHA: 1f48fdc  |  Status: LIVE, healt...

Bilko demo — receipt upload/download fix (GCS shared storage) — MC #103095 (2026-06-07)

1. SymptomCEO reported that receipt upload (PNG, PDF, JPG) was not working — a central part of th...

Bilko Azure Observability + MS for Startups Credit Setup (2026-06-15)

Purpose Cross $100/month in foundational Azure spend to automatically unlock the Microsoft for S...

Bilko ACA Telemetry & Observability Wiring (Azure)

ContextGCP Cloud Monitoring dashboard (070613fa) was decommissioned 2026-06-23 after migration to...

MC #104332 — Bilko URA LocalDate ISO deploy evidence

MC #104332 / URA3 LocalDate + UI polish deploy evidence (2026-06-25) Commit: ea423587 fix: seria...

MC #105767 — Bilko Demo CORS/DNS Fix (OCD-11 Resolved)

MC #105767 — Bilko Demo Env CORS/API-host + DNS Retirement (OCD-11 closed) Date: 2026-07-15 | Age...

Bilko Landing Lead-Capture Chain — Mechanism, the Two-Month Outage, and the Traps

Bilko Landing Lead-Capture Chain — Mechanism, the Two-Month Outage, and the Traps MCs covered: #...

Regulatory

Security & Compliance

Security architecture, RBAC, encryption, GDPR compliance

Bilko demo — reverse-engineering + feature list + live Playwright test (MC #102883) — 2026-06-03

Summary MC #102883 reverse-engineered the Bilko demo product from existing code into a full spec ...

Bilko ADR-016: E-Invoice Adapter

Author: ALAI, 2026ADR-016: E-Invoice Adapter & UBL 2.1 Canonical Model Status: Accepted Date: 20...

Bilko ADR-015: Four-Jurisdiction Plugin

Author: ALAI, 2026# ADR-015: Four-Jurisdiction Plugin Architecture **Status:** Accepted **Date:*...

Bilko ADR-016: E-Invoice Adapter

Author: ALAI, 2026# ADR-016: E-Invoice Adapter & UBL 2.1 Canonical Model **Status:** Accepted **...

Bilko ADR-017: RLS Multi-Tenancy

Author: ALAI, 2026# ADR-017: RLS Multi-Tenancy Migration **Status:** Accepted **Date:** 2026-04-...

Bilko ADR-018: Market vs Locale

Author: ALAI, 2026# ADR-018: Market vs Locale Separation **Status:** Accepted **Date:** 2026-04-...

ADR-019: Integration Adapter Registry

ADR-019: Integration Adapter Registry Status: Accepted Date: 2026-04-21 (Updated: 2026-04-22) Aut...

Bilko CEO Decision: Croatia Peppol (Option B)

Author: ALAI, 2026# CEO Decision: Croatia Peppol Strategy — Option B (Storecove/Pagero Routing) ...

Bilko CEO Decision: Serbia Admin via ALAI Tech

Author: ALAI, 2026# CEO Decision: Serbia Admin Registrations via ALAI Tech d.o.o. **Date:** 2026...

Bilko Phase 1 Track A — Execution Record

Author: ALAI, 2026# Bilko Phase 1 Track A — Kotlin Interface Scaffolding (Execution Record) **Au...

Bilko SEF Adapter — Reference Implementation

$(cat /tmp/sef-adapter-page.html | jq -Rs .)

Bilko Storecove HR Adapter — Peppol Option B Implementation

$(cat /tmp/storecove-hr-page.html | jq -Rs .)

Bilko Flyway Baseline Strategy

$(cat /tmp/flyway-baseline-page.html | jq -Rs .)

Bilko Phase 1 Track B — Execution Record

$(cat /tmp/phase1b-execution-page.html | jq -Rs .)

Set-Cookie Cross-Origin Regression — RCA + Fix Pattern

Bilko Set-Cookie Cross-Origin Regression — RCA + Fix Pattern MC: #9499 (final fix), #9495 (canary...

Legal & Compliance

MC #100173 — Bilko Landing Pages UX Audit & Compliance Fixes

MC #100173 — Bilko Landing Pages UX Audit & Compliance Fixes (2026-05-09) Mission Control ID: #10...

FISK 2.0 Path Decision Research — 2026-05-10

Bilko HR FISK Research 2026-05-10 MC #8207 — Path Decision Data Test file to confirm writes work....

MC 102165 — Bilko PR #186 Deploy Evidence

Bilko PR #186 deploy evidence — MC #102165 Generated: 2026-05-26T15:30Z Source PR #186: https://...

MC 102233 102335 — Bilko HR demo currency, sent-state, pricing memo

Bilko HR demo — currency/accounting + sent/pricing/contact memo Date: 2026-05-21 MC: #102233 / #1...

Bilko demo — 7 real-user bug fixes + live verification (MC #102887) — 2026-06-04

Summary CEO smoke-tested the live Bilko demo and found real bugs in minutes that the prior Phase-...

Bilko Demo Event-Loop Freeze — Root Cause, Fix & Hardening (2026-06-08, MC #103134)

Bilko Demo Event-Loop Freeze — Root Cause, Fix & Hardening (2026-06-08, MC #103134) 1. Incident ...

Bilko Demo Event-Loop Freeze — Root Cause, Fix & Hardening (2026-06-08, MC #103134)

Bilko Demo Event-Loop Freeze — Root Cause, Fix & Hardening (2026-06-08, MC #103134) 1. Incident ...

Bilko Environment Topology — Corrected Canonical Reference (2026-06-09)

Bilko Environment Topology — Corrected Canonical Reference As of: 2026-06-09 | Authority: MC #103...

Bilko Infrastruktura — objašnjeno jednostavno (za CEO) — 2026-06-09

Bilko Infrastruktura — objašnjeno jednostavno (za CEO) Verzija 2026-06-09. Cilj: da za 5 minuta r...

Bilko Observability (GCP-native) 2026-06-10

Status LIVE and Proveo-verified as of 2026-06-10. GCP project tribal-sign-487920-k0, region europ...

Bilko Sentinel — Tier-0 Self-Healing Agent 2026-06-10

Status LIVE and Proveo-verified as of 2026-06-10. MC #103337 (AgentForge implementation) + MC #10...

Bilko Prod Topology — app.bilko.cloud Cutover (reuse-demo-as-prod)

Bilko Prod Topology — app.bilko.cloud Cutover (reuse-demo-as-prod) MC: #103300  |  Completed: 20...

Bilko Sentinel — Tier-1 Bounded Auto-Remediation (Shadow-First) 2026-06-11

Status BUILT — SHADOW mode. MC #103435 (AgentForge build) + MC #103436 (Securion adversarial revi...

Bilko Observability & Self-Healing — Program Overview (MC #103328)

Bilko Observability & Self-Healing — Program Overview (MC #103328) This is the single entry poin...

Bilko Security & Engineering Decisions (Observability Program)

Bilko Security & Engineering Decisions (Observability Program) This page covers security finding...

Bilko Backoffice — Support & Fix Loop Runbook

Bilko Backoffice — Support & Fix Loop Runbook Scope: Operational runbook for ALAI staff handling...

Bilko Signup Jurisdiction Fix — MC #103501

Bilko Signup Jurisdiction Fix — MC #103501 Status: Branch-verified only. Merge, stage deploy, an...

Bilko Modul B (Knjigovodstvo) — Spec + Board presuda (2026-06-13)

TL;DR — 4/4 CONDITIONAL GO (jednoglasno). Modul B = dovršenje Modula A, ne ekspanzija. Četiri ...

Bilko Modul B-1 — GL Foundation Build (2026-06-13)

TL;DR Bilko Modul B-1 GL Foundation je KOMPLETAN. Backend (commit 6efb16f9) + frontend (commit...

Bilko GCP→Azure Brand Domain Cutover (2026-06-15) — MC #103633

Bilko GCP→Azure Brand Domain Cutover (2026-06-15) — MC #103633 Context Trigger: GCP billing d...

Bilko Azure IaC — Terraform azurerm (rg-bilko-demo)

Bilko Azure IaC — Terraform azurerm (rg-bilko-demo) MC: #103720 (child of #103715) Status: Conve...

Bilko Customer Funnel Architecture

Bilko Customer Funnel Architecture Context: This page documents the customer acquisition funnel ...

Bilko Add-On Catalog & Pricing Model (2026-06-19, CEO-approved)

Bilko Add-On Catalog & Pricing ModelCEO-Approved 2026-06-19 | MC #103934, Parent #103917Executive...

Bilko HR e-Račun Archive — GCS→Azure Blob Migration (2026-06-22)

Bilko HR e-Račun Archive — GCS→Azure Blob Migration (2026-06-22) Overview MC: #104172 T3 (build)...

Bilko — MC #105163 multi-tenant E2E verdikt (2026-07-10): test-harness identity bug, ne RLS leak

MC #105163 — Multi-Tenant E2E Verdikt (2026-07-10) Zaključak FALSE-POSITIVE test signal, ne stvar...

HR Product Health Review — 2026-07-11 (MC #105260)

MC #105260 — Bilko HR Product Health Review — SINTEZA za CEO Datum: 2026-07-11 | Reviewers: bilko...

Bilko Add-on Arhitektura

"Bilko Add-on Arhitektura\n\nMC #105282 | Feature-Flag Modularni Sistem | 2026-07-12\n\nBilko add...

Bilko Demo Gate (TrialGatePlugin)

Bilko Demo Gate (TrialGatePlugin) Šta je TrialGatePlugin TrialGatePlugin je Ktor ApplicationPlug...

E2E stage URL temp revert na raw ACA (MC #105824, PR 176) — 2026-07-16

Agent ID: john-main-63007ffa Verdict: PASS MC #105824 — Post-merge verifikacija (2026-07-16 ~15:1...

Fiken — domenska i arhitekturna mapa (2026-07-24)

Fiken — Domenska i arhitekturna mapa Status: verifikovano živim izvorima 2026-07-24 MC: #106300 I...

Fiken-ekvivalent za HR — ciljna arhitektura i odluka (2026-07-25)

Fiken-ekvivalent za HR tržište — ciljna arhitektura i odluka MC: #106300 · Datum: 2026-07-25 · St...

QA Review — MC #8745 for MC #8678 Intesa Bridge Leak

QA Review Final — MC #8745 reviewing MC #8678 Reviewer: John / Proveo QA mode Date (UTC): 2026-07...

QA Review — MC #9490 for Task #9481

QA review #9490 for task #9481 — Bilko logo UX fix Status: APPROVED_WITH_COMMENTS Date: 2026-07-2...

FiskAplikacija — potvrda posrednika PostLink/Sveračun (DRAFT za onboarding, 2026-08-02)

DRAFT — Upute za potvrdu informacijskog posrednika (PostLink d.o.o. / Sveračun) u FiskAplikaciji ...

Landing HR — cookie banner click-through fix (MC #106413, 2026-08-02)

MC #106413 — cookie banner intercepts submit click (bilko.cloud) — fix Agent: codecraft Date: 202...

BYPASSRLS live audit — bilko_admin, FORCE-RLS migracije (MC #106342, 2026-08-02)

MC #106342 — BYPASSRLS Live Audit — READ-ONLY Agent: sec-106342-bypassrls (Securion) Date: 2026-0...

Cross-border PDV gate — NO→EU/HR Stripe pretplate, FINAL (MC #106637, 2026-08-02)

Agent ID: finverge-106637 (finalization pass, follows finverge-106637 08-01 draft) Verdict: GO-WI...

Pretporez accrual istraga + računovodstveni verdikt (MC #106536, 2026-08-02)

MC #106536 — Istraga: ulazni PDV (pretporez) filtriran po internom statusu, ne po statutarnom kri...

RLS capability-check obrazac za migracije — V152 hardening V144/V147 (MC #106695, 2026-08-02)

MC #106695 — RLS hardening for V144/V147 — BUILD EVIDENCE Agent: bm-106695-build (Bruce Momjian) ...

Bilko UX Brief — Minimax migracija + mobile Today/Inbox/Approvals (MC #102429)

Bilko UX Brief — Minimax migracija + mobile (MC #102429) Kanonski dokument: docs/product/MINIMAX-...

ULAZNI RAČUNI MERGE — program MC #106632 (Faze 0–3, zatvoren 2026-08-04)

ULAZNI RAČUNI MERGE — MC #106632 CEO odluka 31.07/01.08.2026: jedan račun = jedan red, kroz koja ...

Bilko kvalitet koda — audit, remediation i sistemski nalaz (2026-08-06/07)

Bilko kvalitet koda — audit, remediation i sistemski nalaz (2026-08-06/07) Povod: CEO pitanje "B...

MC 107028 — Trivy Dependency Gate Hotfix Closure

MC #107028 — Trivy Dependency Gate Hotfix Closure Outcome Azure PR 333 completed successfully. Ex...

MC 106881 — Stripe Webhook Fail-Closed Closure

MC #106881 — Stripe Webhook Fail-Closed Closure Outcome Azure PR 326 completed successfully. Exac...

MC 106880 — PR 325 V156 RLS Grant-Gap Closure

Fix report — MC #106880 / PR 325 Date: 2026-08-10 Canonical target branch: azdo/main at 64edfec05...

Security Sweep — bilko.cloud HR — MC #107298 (2026-08-18)

bilko.cloud Security Sweep — MC #107298 Verdict: PASS Date: 2026-08-18 Scope: bilko.cloud HR land...

Security Sweep — bilko.io RS — MC #107299 (2026-08-18)

bilko.io Security Sweep — MC #107299 Verdict: PASS Date: 2026-08-18 Scope: bilko.io RS landing on...

Security Sweep — bilko.company BA — MC #107300 (2026-08-18)

bilko.company Security Sweep — MC #107300 Verdict: PASS Date: 2026-08-18 Scope: bilko.company BA ...

Bilko HR eRačun — slanje i primanje, cjelovita slika (2026-08-19)

Bilko HR eRačun — slanje i primanje, cjelovita slika (2026-08-19) Povod: CEO pitanje — „Sad imamo...

HR eRačun — aktivacija produkcije za SMART FORGE d.o.o. (MC #103443, 2026-08-20)

HR eRačun — aktivacija produkcije za SMART FORGE d.o.o. (MC #103443, 2026-08-20) Status: ŽIVO · V...

HR firma ne može poslati račun — lanac kvarova u kontnom planu (MC #900023 / #107364 / #107372)

HR firma ne može poslati račun — lanac kvarova u kontnom planu (MC #900023 / #107364 / #107372) S...

MC #900149 — Bilko landing v4 implementacija (bilko.cloud naslovna, 2026-08-23)

CEO odobrio 2026-08-23 ~01:50 ('odobreno'): hero "Izdaj račun. Slikaj trošak. Pitaj kad zapneš."...

Bilko support repo split — plan (2026-08-23)

MC #900161 — Plan: izdvajanje bilko.cloud support surface u novi AzDO repo CEO nalog: "kao sto ...

Bilko repo higijena — grane i worktree čišćenje (2026-08-23)

CEO nalog 2026-08-23: očistiti tonu git grana (222 na azdo) i lokalne worktree-ove (154). Politi...

MC pending — Bilko landing v4.1: logo, slike, look&feel, copy pass (2026-08-23)

Bilko landing v4.1 — logo, prave slike, look&feel, prodajni copy pass (2026-08-23) CEO nalog (dos...

Mobile F1+F4 fix — tokeni van Zustand + demo-login prod gate (MC #900173)

Mobile F1+F4 fix — tokeni van Zustand + demo-login prod gate (MC #900173) Izvor: Securion retroa...

OCR product+legal review — F2 (MC #900175)

OCR product+legal review — F2 (MC #900175) Izvor: Securion mobile audit (MC #900156), Nalaz 2 (V...

Runtime DB rola bez BYPASSRLS — preduslov #1 RLS lanca (MC #900174)

Runtime DB rola bez BYPASSRLS — preduslov #1 RLS lanca (MC #900174) Izvor: MC #900154 NO-GO audi...

MC #900172 — Bilko landing v4.2: kick-ass sales prepis (2026-08-23)

Bilko landing v4.2 — kick-ass sales prepis (MC #900172, 2026-08-23) CEO nalog (~19:40): kick-ass...

MC #900199 — Bilko Landing v5 full pro sales page (2026-08-24)

MC #900199 — Bilko Landing v5: full pro sales page (2026-08-24) CEO nalog (doslovno, 2026-08-24) ...

MC 900166 — Trial 30 dana usklađivanje (2026-08-24)

MC #900166 — Bilko web: trial stringovi 7→30 dana (SSOT usklađivanje) Task: [Bilko][M][WEB] Demo ...

MC 900210 — clamd za demo-stage upload (2026-08-24)

MC #900210 — Demo/stage bez clamd: upload karantin fail-closed (2026-08-24) Task: [Bilko][H][UPLO...

MC 900212 — HR jezicna revizija app (2026-08-24)

MC #900212 — HR jezična revizija kompletne aplikacije (2026-08-24) Task: [Bilko][H][LEKSIKA] CEO:...

MC #900211 — Bilko landing Nick runde 1+2 (2026-08-24)

MC #900211 — Landing Nick runde 1+2 (2026-08-24) Nastavak MC #900199 (v5). Nick Saraev panel razg...

MC 900076 — Admin konzola gap-sweep 2026-08-24

MC #900076 — Admin konzola gap-sweep za HR launch (2026-08-24) CEO 2026-08-21: "na admin stranic...

MC 900215 — Fiken gap analiza 2026-08-24

MC #900215 — Fiken in/out gap analiza page-by-page (2026-08-24) CEO 2026-08-24: "mi nemamo ni bl...

MC 900218 — Fiken GAP-2 workflow dubina 2026-08-24

MC #900218 — Fiken GAP-2: workflow-dubina zajedničkih featura (2026-08-24) CEO korekcija smjera ...