feat: bulk XML upload, period selector, and session persistence

- Add bulk XML CFDI upload support (up to 300MB)
- Add period selector component for month/year navigation
- Fix session persistence on page refresh (Zustand hydration)
- Fix income/expense classification based on tenant RFC
- Fix IVA calculation from XML (correct Impuestos element)
- Add error handling to reportes page
- Support multiple CORS origins
- Update reportes service with proper Decimal/BigInt handling
- Add RFC to tenant view store for proper CFDI classification
- Update README with changelog and new features

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/api/src/controllers/cfdi.controller.ts

@@ -60,3 +60,70 @@ export async function getResumen(req: Request, res: Response, next: NextFunction
     next(error);
   }
 }
+
+export async function createCfdi(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (!req.tenantSchema) {
+      return next(new AppError(400, 'Schema no configurado'));
+    }
+
+    // Only admin and contador can create CFDIs
+    if (!['admin', 'contador'].includes(req.user!.role)) {
+      return next(new AppError(403, 'No tienes permisos para agregar CFDIs'));
+    }
+
+    const cfdi = await cfdiService.createCfdi(req.tenantSchema, req.body);
+    res.status(201).json(cfdi);
+  } catch (error: any) {
+    if (error.message?.includes('duplicate')) {
+      return next(new AppError(409, 'Este CFDI ya existe (UUID duplicado)'));
+    }
+    next(error);
+  }
+}
+
+export async function createManyCfdis(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (!req.tenantSchema) {
+      return next(new AppError(400, 'Schema no configurado'));
+    }
+
+    if (!['admin', 'contador'].includes(req.user!.role)) {
+      return next(new AppError(403, 'No tienes permisos para agregar CFDIs'));
+    }
+
+    if (!Array.isArray(req.body.cfdis)) {
+      return next(new AppError(400, 'Se requiere un array de CFDIs'));
+    }
+
+    console.log(`[CFDI Bulk] Recibidos ${req.body.cfdis.length} CFDIs para schema ${req.tenantSchema}`);
+
+    // Log first CFDI for debugging
+    if (req.body.cfdis.length > 0) {
+      console.log('[CFDI Bulk] Primer CFDI:', JSON.stringify(req.body.cfdis[0], null, 2));
+    }
+
+    const count = await cfdiService.createManyCfdis(req.tenantSchema, req.body.cfdis);
+    res.status(201).json({ message: `${count} CFDIs creados exitosamente`, count });
+  } catch (error: any) {
+    console.error('[CFDI Bulk Error]', error.message, error.stack);
+    next(new AppError(400, error.message || 'Error al procesar CFDIs'));
+  }
+}
+
+export async function deleteCfdi(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (!req.tenantSchema) {
+      return next(new AppError(400, 'Schema no configurado'));
+    }
+
+    if (!['admin', 'contador'].includes(req.user!.role)) {
+      return next(new AppError(403, 'No tienes permisos para eliminar CFDIs'));
+    }
+
+    await cfdiService.deleteCfdi(req.tenantSchema, req.params.id);
+    res.status(204).send();
+  } catch (error) {
+    next(error);
+  }
+}

apps/api/src/controllers/reportes.controller.ts

@@ -8,9 +8,11 @@ export async function getEstadoResultados(req: Request, res: Response, next: Nex
     const inicio = (fechaInicio as string) || `${now.getFullYear()}-01-01`;
     const fin = (fechaFin as string) || now.toISOString().split('T')[0];
 
+    console.log('[reportes] getEstadoResultados - schema:', req.tenantSchema, 'inicio:', inicio, 'fin:', fin);
     const data = await reportesService.getEstadoResultados(req.tenantSchema!, inicio, fin);
     res.json(data);
   } catch (error) {
+    console.error('[reportes] Error en getEstadoResultados:', error);
     next(error);
   }
 }

apps/api/src/controllers/tenants.controller.ts

@@ -58,3 +58,40 @@ export async function createTenant(req: Request, res: Response, next: NextFuncti
     next(error);
   }
 }
+
+export async function updateTenant(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (req.user!.role !== 'admin') {
+      throw new AppError(403, 'Solo administradores pueden editar clientes');
+    }
+
+    const { id } = req.params;
+    const { nombre, rfc, plan, cfdiLimit, usersLimit, active } = req.body;
+
+    const tenant = await tenantsService.updateTenant(id, {
+      nombre,
+      rfc,
+      plan,
+      cfdiLimit,
+      usersLimit,
+      active,
+    });
+
+    res.json(tenant);
+  } catch (error) {
+    next(error);
+  }
+}
+
+export async function deleteTenant(req: Request, res: Response, next: NextFunction) {
+  try {
+    if (req.user!.role !== 'admin') {
+      throw new AppError(403, 'Solo administradores pueden eliminar clientes');
+    }
+
+    await tenantsService.deleteTenant(req.params.id);
+    res.status(204).send();
+  } catch (error) {
+    next(error);
+  }
+}