Bilko sveRačun Faza 1 — TEST-live aktivacija na demou (MC #103450, 2026-07-11)

Šta je urađeno

HR eRačun (sveRačun/PostLink) submit aktiviran na demou (app.bilko.cloud / app-api.bilko.cloud, ACA bilko-api-demo, rg-bilko-demo) protiv TEST sandboxa test.sveracun.hr — bez stvarne fiskalizacije, reverzibilno.

Stanje (tool-verifikovano)

Env (bilko-api-demo rev 0000043): SVERACUN_HR_LIVE=true, SVERACUN_API_KEY=secretref:sveracun-api-key, SVERACUN_SENDER_VAT=HR91276104352, DEMO_MODE=true. SVERACUN_BASE_URL nije postavljen — kod defaultira na TEST (SveRacunHrEInvoiceAdapter.kt:70), a per-profile api_base_url u DB je također TEST.
DB flip (bilko-demo-pg, hr_einvoice_issuer_config): enabled=true za tačno 2 test org-a — HR demo org 00000000-0000-0029-c000-000000000001 + E2E org 1f9811d2-af38-482d-91d9-229e1acbb37e (2026-07-11 16:33 UTC). Tabela ima SAMO ta 2 reda — nijedan customer org.
Gate semantika: submit path gate-uje hr_einvoice_issuer_config.enabled (IssuerProfileRepository.kt) + SVERACUN_HR_LIVE env. adapter_config tabela gate-uje samo Storecove (mrtav put). Stale GCP secret-ref u DB redovima je inertan (EnvVarSecretManagerClient parsira samo ime → env var).

Proveo E2E — PASS (2026-07-11)

Login CIAM E2E user → org 1f9811d2; faktura INV-2026-054 → POST /invoices/{id}/submit-to-sveracun → HTTP 200, documentId 6a527117f0525843a744646a, fiscalNumber 2026-000002, SUBMITTED.
GET /invoices/{id}/sveracun-status + POST poll-sveracun-status → PENDING, lastPolledAt se osvježava (živi sandbox roundtrip).
UI dugme "Pošalji eRačun" (sveracun-submit-button) postoji i wired.
Evidence: /tmp/evidence-103450/ (screenshotovi, HTTP odgovori, pre/post SELECT, verdict.json).

Rollback

UPDATE hr_einvoice_issuer_config SET enabled=false
WHERE org_id IN ('00000000-0000-0029-c000-000000000001','1f9811d2-af38-482d-91d9-229e1acbb37e');

(+ opcionalno SVERACUN_HR_LIVE=false na bilko-api-demo za potpuni STUB.)

Nalazi / follow-up

MC #105259: invoice GET/list serializer ne vraća sveracunDocumentId/InternalStatus/ExternalStatus → UI kartica pokazuje "not submitted" nakon uspješnog submita; dugme ostaje klikabilno (backend B4 idempotency brani dupli submit, UX vara). + E2E fixture treba kompletnu HR adresu.
CI napomena: main-branch Bilko-CI-CD buildovi padaju na E2E UAT stage-u (poznati rep E2E sprinta 2026-07-10, 7 failova) — nevezano za ovu aktivaciju (nije bilo deploya).
Prod aktivacija (stvarna fiskalizacija) = zaseban track #103443: FINA cert + prod secret + SVERACUN_HR_LIVE=true deploy odluka CEO.

Kontekst lanca

#104171 (Azure secret+env+runbook) → #104172 (arhiva Azure Blob) → #103452 (submit path + B4 idempotency) → #103450 (ovo) → #103443 (live aktivacija, parent).