# v66 Sales Ledger, Settings & IAM

v66 closes three major Back Office gaps.

## Sales ledger
- Adds tenant/org-scoped `GET /api/v1/sales`.
- Filters: date range, status, payment status, sale number.
- Server pagination.
- Existing immutable sale detail remains the source for invoice lines.
- Frontend gets a real sales table and detail modal.

## Settings
- Uses existing Settings definitions/effective/upsert contracts.
- Settings are categorized and edited on demand.
- Effective source scope is visible.
- Tenant/company/branch/register/user override scopes are preserved.

## IAM
- Adds `GET /api/v1/iam/memberships` for tenant administration.
- Membership response exposes user summary only when explicitly eager-loaded.
- Frontend shows tenant users, roles and permission catalog.
- New roles can be created with selected ALLOW permissions.

## UX
No long stacked admin page was introduced. Sales, Settings and IAM remain
separate primary jobs under the existing responsive v64/v65 application shell.