# Bilko sveRačun Faza 1 — TEST-live aktivacija na demou (MC #103450, 2026-07-11)

# Bilko sveRačun Faza 1 — TEST-live aktivacija na demou (MC #103450, 2026-07-11)

## Šta je urađeno
HR eRačun (sveRačun/PostLink) submit **aktiviran na demou** (app.bilko.cloud / app-api.bilko.cloud, ACA `bilko-api-demo`, rg-bilko-demo) protiv **TEST sandboxa** `test.sveracun.hr` — bez stvarne fiskalizacije, reverzibilno.

## Stanje (tool-verifikovano)
- **Env** (`bilko-api-demo` rev 0000043): `SVERACUN_HR_LIVE=true`, `SVERACUN_API_KEY=secretref:sveracun-api-key`, `SVERACUN_SENDER_VAT=HR91276104352`, `DEMO_MODE=true`. `SVERACUN_BASE_URL` nije postavljen — kod defaultira na TEST (`SveRacunHrEInvoiceAdapter.kt:70`), a per-profile `api_base_url` u DB je također TEST.
- **DB flip** (bilko-demo-pg, `hr_einvoice_issuer_config`): `enabled=true` za tačno 2 test org-a — HR demo org `00000000-0000-0029-c000-000000000001` + E2E org `1f9811d2-af38-482d-91d9-229e1acbb37e` (2026-07-11 16:33 UTC). Tabela ima SAMO ta 2 reda — nijedan customer org.
- **Gate semantika**: submit path gate-uje `hr_einvoice_issuer_config.enabled` (`IssuerProfileRepository.kt`) + `SVERACUN_HR_LIVE` env. `adapter_config` tabela gate-uje samo Storecove (mrtav put). Stale GCP secret-ref u DB redovima je inertan (`EnvVarSecretManagerClient` parsira samo ime → env var).

## Proveo E2E — PASS (2026-07-11)
- Login CIAM E2E user → org 1f9811d2; faktura INV-2026-054 → `POST /invoices/{id}/submit-to-sveracun` → **HTTP 200, documentId 6a527117f0525843a744646a, fiscalNumber 2026-000002, SUBMITTED**.
- `GET /invoices/{id}/sveracun-status` + `POST poll-sveracun-status` → PENDING, lastPolledAt se osvježava (živi sandbox roundtrip).
- UI dugme "Pošalji eRačun" (`sveracun-submit-button`) postoji i wired.
- Evidence: `/tmp/evidence-103450/` (screenshotovi, HTTP odgovori, pre/post SELECT, verdict.json).

## Rollback
```sql
UPDATE hr_einvoice_issuer_config SET enabled=false
WHERE org_id IN ('00000000-0000-0029-c000-000000000001','1f9811d2-af38-482d-91d9-229e1acbb37e');
```
(+ opcionalno `SVERACUN_HR_LIVE=false` na bilko-api-demo za potpuni STUB.)

## Nalazi / follow-up
- **MC #105259**: invoice GET/list serializer ne vraća `sveracunDocumentId/InternalStatus/ExternalStatus` → UI kartica pokazuje "not submitted" nakon uspješnog submita; dugme ostaje klikabilno (backend B4 idempotency brani dupli submit, UX vara). + E2E fixture treba kompletnu HR adresu.
- **CI napomena**: main-branch Bilko-CI-CD buildovi padaju na E2E UAT stage-u (poznati rep E2E sprinta 2026-07-10, 7 failova) — nevezano za ovu aktivaciju (nije bilo deploya).
- Prod aktivacija (stvarna fiskalizacija) = zaseban track #103443: FINA cert + prod secret + `SVERACUN_HR_LIVE=true` deploy odluka CEO.

## Kontekst lanca
#104171 (Azure secret+env+runbook) → #104172 (arhiva Azure Blob) → #103452 (submit path + B4 idempotency) → **#103450 (ovo)** → #103443 (live aktivacija, parent).