> ## Documentation Index
> Fetch the complete documentation index at: https://docs-pos.solya.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a quote (devis)

> Draws up a priced quote (devis) in the `draft` state from at least one priced line. The CALLER supplies the quote `id` — it must be unique, so choose a stable, collision-free identifier (a duplicate is rejected with a 409, never silently merged). `validUntil` is an ISO 8601 instant (the server coerces it). 409s when a quote with the same id already exists; 422s when `validUntil` is already in the past.



## OpenAPI

````yaml /openapi.json post /v1/quotes
openapi: 3.0.3
info:
  title: Solya POS API
  version: 1.0.0
  description: >-
    The Solya POS backend HTTP surface. Every documented operation is
    agent-ready: it carries an `operationId`, an agent-facing `description`, the
    `pos.*` scopes it enforces (`x-required-permissions`) and an `x-agent-tier`.
    Success responses return the payload as raw JSON; failures return the
    `ErrorResponse` envelope (`{ error: { code, message, statusCode } }`).
servers:
  - url: /
    description: The backend, relative to its deployed origin.
security: []
paths:
  /v1/quotes:
    post:
      tags:
        - Checkout
      summary: Create a quote (devis)
      description: >-
        Draws up a priced quote (devis) in the `draft` state from at least one
        priced line. The CALLER supplies the quote `id` — it must be unique, so
        choose a stable, collision-free identifier (a duplicate is rejected with
        a 409, never silently merged). `validUntil` is an ISO 8601 instant (the
        server coerces it). 409s when a quote with the same id already exists;
        422s when `validUntil` is already in the past.
      operationId: createQuote
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                id:
                  type: string
                  minLength: 1
                  description: Caller-supplied unique quote (devis) id; a duplicate 409s.
                customerId:
                  type: string
                  minLength: 1
                  description: Customer the quote is drawn up for.
                storeId:
                  type: string
                  minLength: 1
                  description: Store issuing the quote.
                currency:
                  type: string
                  minLength: 3
                  maxLength: 3
                  description: ISO 4217 currency code (e.g. EUR).
                lines:
                  minItems: 1
                  type: array
                  items:
                    type: object
                    properties:
                      description:
                        type: string
                        minLength: 1
                      skuId:
                        nullable: true
                        type: string
                        pattern: ^[0-9a-f]{64}$
                      quantity:
                        type: integer
                        minimum: 0
                        exclusiveMinimum: true
                        maximum: 9007199254740991
                      unitPriceCents:
                        type: integer
                        minimum: 0
                        maximum: 9007199254740991
                      vatRate:
                        type: number
                        minimum: 0
                        maximum: 100
                    required:
                      - description
                      - skuId
                      - quantity
                      - unitPriceCents
                      - vatRate
                  description: At least one priced quote line.
                validUntil:
                  type: string
                  format: date-time
                  pattern: >-
                    ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
                  description: ISO 8601 validity deadline; must be in the future.
              required:
                - id
                - customerId
                - storeId
                - currency
                - lines
                - validUntil
              example:
                id: quote-ok
                customerId: cust-1
                storeId: shop-1
                currency: EUR
                lines:
                  - description: Custom sofa
                    skuId: null
                    quantity: 1
                    unitPriceCents: 120000
                    vatRate: 20
                validUntil: '2030-01-01T00:00:00.000Z'
      responses:
        '201':
          description: The created quote in its `draft` state.
          content:
            application/json:
              schema:
                type: object
                properties:
                  id:
                    type: string
                  customerId:
                    type: string
                  storeId:
                    type: string
                  currency:
                    type: string
                  lines:
                    type: array
                    items:
                      type: object
                      properties:
                        description:
                          type: string
                          minLength: 1
                        skuId:
                          nullable: true
                          type: string
                          pattern: ^[0-9a-f]{64}$
                        quantity:
                          type: integer
                          minimum: 0
                          exclusiveMinimum: true
                          maximum: 9007199254740991
                        unitPriceCents:
                          type: integer
                          minimum: 0
                          maximum: 9007199254740991
                        vatRate:
                          type: number
                          minimum: 0
                          maximum: 100
                      required:
                        - description
                        - skuId
                        - quantity
                        - unitPriceCents
                        - vatRate
                      additionalProperties: false
                  validUntil:
                    type: string
                  status:
                    type: string
                    enum:
                      - draft
                      - sent
                      - accepted
                      - expired
                      - cancelled
                  actorId:
                    type: string
                  createdAt:
                    type: string
                required:
                  - id
                  - customerId
                  - storeId
                  - currency
                  - lines
                  - validUntil
                  - status
                  - actorId
                  - createdAt
                additionalProperties: false
                description: The created quote in its `draft` state.
                example:
                  id: quote-ok
                  customerId: cust-1
                  storeId: shop-1
                  currency: EUR
                  lines:
                    - description: Custom sofa
                      skuId: null
                      quantity: 1
                      unitPriceCents: 120000
                      vatRate: 20
                  validUntil: '2030-01-01T00:00:00.000Z'
                  status: draft
                  actorId: user-associate-1
                  createdAt: '2026-07-28T09:00:00.000Z'
        '400':
          description: >-
            The request failed schema validation; `error.fieldErrors` lists the
            fields.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationErrorResponse'
        '401':
          description: No valid credential was presented — send a bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: The actor is authenticated but lacks the required `pos.*` scope.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: >-
            The request conflicts with current state (duplicate id or stale
            version).
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: The request is well-formed but violates a domain rule.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: An unexpected server error — safe to retry idempotent requests.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - bearerAuth: []
components:
  schemas:
    ValidationErrorResponse:
      type: object
      required:
        - error
      additionalProperties: false
      description: >-
        A `VALIDATION_FAILED` envelope carrying the offending fields in
        `fieldErrors`.
      properties:
        error:
          type: object
          required:
            - code
            - message
            - statusCode
          additionalProperties: false
          properties:
            code:
              type: string
              enum:
                - VALIDATION_FAILED
            message:
              type: string
            statusCode:
              type: integer
            fieldErrors:
              type: array
              description: >-
                One entry per rejected field: the field path and why it was
                rejected.
              items:
                type: object
                required:
                  - field
                  - message
                additionalProperties: false
                properties:
                  field:
                    type: string
                    description: Dot-path of the offending field.
                  message:
                    type: string
                    description: Why the field was rejected.
    ErrorResponse:
      type: object
      required:
        - error
      additionalProperties: false
      description: The uniform failure envelope every non-2xx response returns.
      properties:
        error:
          type: object
          required:
            - code
            - message
            - statusCode
          additionalProperties: false
          properties:
            code:
              type: string
              enum:
                - VALIDATION_FAILED
                - UNAUTHORIZED
                - FORBIDDEN
                - NOT_FOUND
                - CONFLICT
                - BUSINESS_RULE_VIOLATION
                - INTERNAL_ERROR
              description: >-
                Machine-readable kernel `ResultCode` — branch on this, not on
                `message`.
            message:
              type: string
              description: >-
                Human-readable explanation. Safe to surface; never leaks server
                internals.
            statusCode:
              type: integer
              description: >-
                The HTTP status, mirrored into the body so a client need not
                read headers.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        `Authorization: Bearer <token>`. Accepts EITHER a Keycloak access token
        (scopes-in-token) OR an opaque POS session token; both resolve to the
        same `pos.*` scope vocabulary the route guards enforce.

````