feat: harden platform workflows and UI governance

api/src/billing/billing.controller.ts

@@ -2,10 +2,12 @@ import { Body, Controller, Get, Param, Post } from '@nestjs/common';
 import { ApiTags } from '@nestjs/swagger';
 import { TenantId } from '../common/tenant-id.decorator';
 import { RequireRecentAuthentication } from '../auth/require-recent-authentication.decorator';
+import { CurrentSessionUserId } from '../auth/current-session-user.decorator';
 import {
   BillingService,
   BillingActionDto,
   CreateManualRechargeDto,
+  ManualRechargePreflightDto,
   CreateBillingRuleDto,
   CreateSmsBillingRecordDto,
   CreateTenantAccountDto,
@@ -46,8 +48,13 @@ export class BillingController {
 
   @Post('manual-recharges')
   @RequireRecentAuthentication()
-  createManualRecharge(@Body() body: CreateManualRechargeDto) {
-    return this.billing.createManualRecharge(body);
+  createManualRecharge(@Body() body: CreateManualRechargeDto, @CurrentSessionUserId() operatorId?: string) {
+    return this.billing.createManualRecharge({ ...body, operatorId });
+  }
+
+  @Post('manual-recharges/preflight')
+  manualRechargePreflight(@Body() body: ManualRechargePreflightDto) {
+    return this.billing.manualRechargePreflight(body);
   }
 
   @Post('estimate')