> ## Documentation Index
> Fetch the complete documentation index at: https://docs-pos.solya.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List quotes

> Returns the quotes as a flat array, newest-first, optionally narrowed by `customer`, `store` and/or `status` (draft | sent | accepted | expired | cancelled). This is the clienteling devis list — for a single estimate use the get operation.



## OpenAPI

````yaml /openapi.json get /v1/quotes
openapi: 3.0.3
info:
  title: Solya POS API
  version: 1.0.0
  description: >-
    The Solya POS backend HTTP surface. Every documented operation is
    agent-ready: it carries an `operationId`, an agent-facing `description`, the
    `pos.*` scopes it enforces (`x-required-permissions`) and an `x-agent-tier`.
    Success responses return the payload as raw JSON; failures return the
    `ErrorResponse` envelope (`{ error: { code, message, statusCode } }`).
servers:
  - url: /
    description: The backend, relative to its deployed origin.
security: []
paths:
  /v1/quotes:
    get:
      tags:
        - Checkout
      summary: List quotes
      description: >-
        Returns the quotes as a flat array, newest-first, optionally narrowed by
        `customer`, `store` and/or `status` (draft | sent | accepted | expired |
        cancelled). This is the clienteling devis list — for a single estimate
        use the get operation.
      operationId: listQuotes
      parameters:
        - schema:
            type: string
          in: query
          name: customer
          required: false
        - schema:
            type: string
          in: query
          name: store
          required: false
        - schema:
            type: string
            enum:
              - draft
              - sent
              - accepted
              - expired
              - cancelled
          in: query
          name: status
          required: false
      responses:
        '200':
          description: The matching quotes (empty array when none match).
          content:
            application/json:
              schema:
                type: array
                items:
                  type: object
                  properties:
                    id:
                      type: string
                    customerId:
                      type: string
                    storeId:
                      type: string
                    currency:
                      type: string
                    lines:
                      type: array
                      items:
                        type: object
                        properties:
                          description:
                            type: string
                            minLength: 1
                          skuId:
                            nullable: true
                            type: string
                            pattern: ^[0-9a-f]{64}$
                          quantity:
                            type: integer
                            minimum: 0
                            exclusiveMinimum: true
                            maximum: 9007199254740991
                          unitPriceCents:
                            type: integer
                            minimum: 0
                            maximum: 9007199254740991
                          vatRate:
                            type: number
                            minimum: 0
                            maximum: 100
                        required:
                          - description
                          - skuId
                          - quantity
                          - unitPriceCents
                          - vatRate
                        additionalProperties: false
                    validUntil:
                      type: string
                    status:
                      type: string
                      enum:
                        - draft
                        - sent
                        - accepted
                        - expired
                        - cancelled
                    actorId:
                      type: string
                    createdAt:
                      type: string
                  required:
                    - id
                    - customerId
                    - storeId
                    - currency
                    - lines
                    - validUntil
                    - status
                    - actorId
                    - createdAt
                  additionalProperties: false
                description: The matching quotes (empty array when none match).
                example:
                  - id: quote-ok
                    customerId: cust-1
                    storeId: shop-1
                    currency: EUR
                    lines:
                      - description: Custom sofa
                        skuId: null
                        quantity: 1
                        unitPriceCents: 120000
                        vatRate: 20
                    validUntil: '2030-01-01T00:00:00.000Z'
                    status: draft
                    actorId: user-associate-1
                    createdAt: '2026-07-28T09:00:00.000Z'
        '400':
          description: >-
            The request failed schema validation; `error.fieldErrors` lists the
            fields.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationErrorResponse'
        '401':
          description: No valid credential was presented — send a bearer token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '403':
          description: The actor is authenticated but lacks the required `pos.*` scope.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: An unexpected server error — safe to retry idempotent requests.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - bearerAuth: []
components:
  schemas:
    ValidationErrorResponse:
      type: object
      required:
        - error
      additionalProperties: false
      description: >-
        A `VALIDATION_FAILED` envelope carrying the offending fields in
        `fieldErrors`.
      properties:
        error:
          type: object
          required:
            - code
            - message
            - statusCode
          additionalProperties: false
          properties:
            code:
              type: string
              enum:
                - VALIDATION_FAILED
            message:
              type: string
            statusCode:
              type: integer
            fieldErrors:
              type: array
              description: >-
                One entry per rejected field: the field path and why it was
                rejected.
              items:
                type: object
                required:
                  - field
                  - message
                additionalProperties: false
                properties:
                  field:
                    type: string
                    description: Dot-path of the offending field.
                  message:
                    type: string
                    description: Why the field was rejected.
    ErrorResponse:
      type: object
      required:
        - error
      additionalProperties: false
      description: The uniform failure envelope every non-2xx response returns.
      properties:
        error:
          type: object
          required:
            - code
            - message
            - statusCode
          additionalProperties: false
          properties:
            code:
              type: string
              enum:
                - VALIDATION_FAILED
                - UNAUTHORIZED
                - FORBIDDEN
                - NOT_FOUND
                - CONFLICT
                - BUSINESS_RULE_VIOLATION
                - INTERNAL_ERROR
              description: >-
                Machine-readable kernel `ResultCode` — branch on this, not on
                `message`.
            message:
              type: string
              description: >-
                Human-readable explanation. Safe to surface; never leaks server
                internals.
            statusCode:
              type: integer
              description: >-
                The HTTP status, mirrored into the body so a client need not
                read headers.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >-
        `Authorization: Bearer <token>`. Accepts EITHER a Keycloak access token
        (scopes-in-token) OR an opaque POS session token; both resolve to the
        same `pos.*` scope vocabulary the route guards enforce.

````