0.2.33: exited positions (secondary-sale edge case)

A member who sold/transferred their stake showed a phantom -100% loss
($0 ending balance, no distribution through the fund). Now:
- entity_access.exited_on (migration e1f2a3b4c5d6), set/cleared from the
  Partners tab (writer-only, inline date picker, audited)
- LP portal card shows a quiet "Exited <date>" badge, keeps documents,
  hides balance/gain
- portfolio summary excludes exited positions ("Excludes N exited")
- fund committed totals (rollup + Partners tab) skip exited members so
  seller + buyer are not double-counted

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/ten31portal/routers/entity_router.py

@@ -17,7 +17,8 @@ from ten31portal.models import (
 )
 from ten31portal.schemas import (
     AssetBalancesResponse, CapitalAccountResponse, EntityCreate, EntityResponse,
-    EntityStakeCreate, EntityStakeResponse, EntityUpdate, PartnerResponse,
+    EntityStakeCreate, EntityStakeResponse, EntityUpdate, PartnerExitUpdate,
+    PartnerResponse,
 )
 
 router = APIRouter(prefix="/api/entities", tags=["entities"])
@@ -75,13 +76,21 @@ def entity_rollup(
             last_signed_value_cents = int(val_sum)
 
         # Total committed capital = each investor's most recent commitment for this entity.
+        # Exited members (stake sold/transferred) are skipped — their buyer's commitment now
+        # appears on the roster, so counting both would double the fund's committed total.
         stmts = session.exec(
             select(CapitalAccountStatement)
             .where(CapitalAccountStatement.entity_id == ent.id)
             .order_by(CapitalAccountStatement.as_of_date.desc())  # type: ignore[union-attr]
         ).all()
+        exited_ids = set(session.exec(
+            select(EntityAccess.user_id).where(
+                EntityAccess.entity_id == ent.id,
+                col(EntityAccess.exited_on).is_not(None),
+            )
+        ).all())
         committed_cents = 0
-        seen_investors: set[int] = set()
+        seen_investors: set[int] = set(exited_ids)
         for st in stmts:
             if st.investor_user_id in seen_investors:
                 continue
@@ -114,14 +123,14 @@ def list_partners(
         raise HTTPException(status_code=404, detail="Entity not found")
 
     members = session.exec(
-        select(User)
+        select(User, EntityAccess)
         .join(EntityAccess, EntityAccess.user_id == User.id)
         .where(EntityAccess.entity_id == entity_id, User.role == UserRole.investor)
         .order_by(User.name)  # type: ignore[arg-type]
     ).all()
 
     result: list[PartnerResponse] = []
-    for m in members:
+    for m, access in members:
         stmts = session.exec(
             select(CapitalAccountStatement)
             .where(
@@ -144,10 +153,48 @@ def list_partners(
             latest_value_cents=latest.ending_balance_cents if latest else None,
             latest_as_of=latest.as_of_date if latest else None,
             statements_count=len(stmts),
+            exited_on=access.exited_on,
         ))
     return result
 
 
+@router.put("/{entity_id}/partners/{user_id}/exited")
+def set_partner_exited(
+    entity_id: int,
+    user_id: int,
+    body: PartnerExitUpdate,
+    admin: User = Depends(require_writer),
+    session: Session = Depends(get_session),
+) -> PartnerResponse:
+    """Mark a member as exited from this fund (stake sold/transferred), or clear it.
+
+    Their statements and documents stay; the portal shows an Exited badge instead of a
+    phantom -100% and drops the position from portfolio and fund committed totals.
+    """
+    access = session.exec(
+        select(EntityAccess).where(
+            EntityAccess.entity_id == entity_id, EntityAccess.user_id == user_id
+        )
+    ).first()
+    if access is None:
+        raise HTTPException(status_code=404, detail="That member has no access to this fund")
+    member = session.get(User, user_id)
+    if member is None or member.role != UserRole.investor:
+        raise HTTPException(status_code=400, detail="Only investor members can be marked exited")
+
+    access.exited_on = body.exited_on
+    session.add(access)
+    record_audit(session, admin.id, "set_exited", "entity_access", access.id, {
+        "entity_id": entity_id,
+        "user_id": user_id,
+        "exited_on": str(body.exited_on) if body.exited_on else None,
+    })
+    session.commit()
+
+    # Return the member's refreshed partner row for easy UI updates.
+    return next(p for p in list_partners(entity_id, admin, session) if p.user_id == user_id)
+
+
 @router.delete("/{entity_id}/partners")
 def clear_partners(
     entity_id: int,