@burdenoff/microfe-movethewheels 2026.1016.3 → 2026.1016.4

package/README.md

@@ -87,3 +87,13 @@ Proprietary - Copyright Burdenoff Consultancy Services Pvt. Ltd.
 The existing pending-plan receipt can open an independent review panel. It reuses canonical workspace permissions and the shared Files exact-version picker, typed owning candidate operations, bounded history, explicit handling/SOP references, action/quantity/exclusive validity and approve/reject/revoke decisions. Before dispatch, the panel preserves the intended nonsecret idempotency UUID in tab sessionStorage scoped to actor/workspace/task/intent. A missing storage capability holds before submission; an uncertain result stops further decisions and remains stopped across a same-tab refresh. The owning mutation receipt must match its kind, task, intent hash, subject, request key, reviewer, predecessor/version and declared action/quantity/time scope before the saved key is cleared or success shown. A missing/null/mismatched receipt remains unknown with the key retained. Read-only receipts display request keys for reconciliation; an absent paginated result is not proof of no commit. There is no resend/clear control or automatic mutation retry. Closing the tab/clearing storage is not a durable no-replay certificate; preserve the intended key and reconcile the unknown before another decision. The backend's exact-body idempotency remains authoritative.
 
 An approval is review-only: reserved/staged quantities stay zero. No stock move, scan execution, safety/qualification certificate, live deployment or full F04/UI acceptance is claimed by this source candidate. `graphql/pending-pick.graphql` is regenerated from the owning backend candidate and explicitly is not a published Hive contract; actual Both schema/package/host/ordinary-actor/Files and Playwright acceptance remain release gates.
+
+### Manual freight invoice comparison candidate — BOFF-4395 / BOFF-8598
+
+The finance page compares manually reported supplier invoice rows with one explicitly selected immutable estimate/quote version. It preserves unknown amounts and source dates, explicit row mappings, supplier/invoice references, payer and currency conventions. Sourced amounts use exact decimal input and currency display; the existing amount editor accepts up to 20 whole digits and rejects excess fractional precision without rounding. The wire contract retains integer minor-unit strings, including larger existing receipts. Changing an unsent currency convention clears its amount rather than reinterpreting it. Quantity/rate differences, incomparable rows, unknown expected-charge coverage and comparable-only subtotals remain distinct. This does not establish acceptance, contracted liability, approval, FX conversion or payment.
+
+Structural preview must match the exact version and current source facts. Recording additionally requires current shipment update permission, current readable exact Files versions, and an owning immutable receipt. Corrections append against the latest loaded predecessor. Known receipt history opens after confirmation and survives a bookmarked URL; complete supplier/invoice discovery is not implemented by the five-operation backend contract. Manual identity lookup is available only in the advanced disclosure.
+
+Before one mutation dispatch, the complete normalized business intent and original request key are retained in tab sessionStorage. A lost/malformed reply remains unresolved across refresh and prevents another save or new key. Recovery rechecks the original public scope between its original-key read and exact-receipt read, then before confirmation; null never proves no effect or permits retry. Confirmation checks the full business tuple, exact evidence, visible direct actor, revision/predecessor and stable server fingerprint. Retained source facts are hidden whenever that readable public scope is unavailable or different. Public canonical actor/workspace/organization/project/tenant scope is compared locally; it does not reproduce the server's full trusted context or recompute its fingerprint. No token or credential is decoded, persisted or logged by this feature. Storage is tab-scoped; closing the tab or clearing browser data is not proof of no commit.
+
+Generate the additive typed snapshot with `bun scripts/generate-freight-invoice-contract.ts <owning-combined-SDL>` and normal `bun run codegen`; generated TypeScript is not hand-edited. `verify:freight-invoice` runs strict source/receipt and actual recovery-hook controls in normal sanity and PR CI. The existing live-contract gate includes the new project. Source/local synthetic browser checks do not establish deployed schema, genuine permissions, Files eligibility or end-to-end acceptance. Official backend/schema, MFE/host publication and ordinary-account Alpha/Production acceptance remain separate gates. Existing BOFF-9129 dependency findings remain unwaived; the unrelated responsive PR is not included.

package/dist/MoveTheWheelsRoot.js

@@ -223,6 +223,11 @@ var E = ({ registerNavItems: v, basePath: b = "/" }) => {
 					icon: /* @__PURE__ */ S(a, { size: 16 }),
 					order: 9,
 					children: [{
+						id: "mtw-freight-invoice-comparisons",
+						label: C("movethewheels.root.nav.freightInvoices", "Freight invoice comparisons"),
+						path: E(b, "finance/freight-invoice-comparisons"),
+						icon: /* @__PURE__ */ S(a, { size: 16 })
+					}, {
 						id: "mtw-freight-estimates",
 						label: C("movethewheels.root.nav.freightEstimates", "Freight cost estimates"),
 						path: E(b, "finance/freight-estimates"),

package/dist/MoveTheWheelsRoutes.js

@@ -28,8 +28,8 @@ function d() {
 		})
 	});
 }
-var f = r(() => import("./pages/DashboardPage.js")), p = r(() => import("./pages/OrdersListPage.js")), m = r(() => import("./pages/OrderDetailsPage.js")), h = r(() => import("./pages/CreateOrderPage.js")), g = r(() => import("./pages/TrackingPage.js")), _ = r(() => import("./pages/TrackingEventQualityPage.js")), v = r(() => import("./pages/ShipmentStatusAuthorityPage.js")), y = r(() => import("./pages/LiveTrackingPage.js")), b = r(() => import("./pages/FleetPage.js")), x = r(() => import("./pages/VehiclesPage.js")), S = r(() => import("./pages/VehicleDetailsPage.js")), C = r(() => import("./pages/DriversPage.js")), w = r(() => import("./pages/DriverDetailsPage.js")), T = r(() => import("./pages/InventoryPage.js")), E = r(() => import("./pages/ProductsPage.js")), D = r(() => import("./pages/ProductDetailsPage.js")), O = r(() => import("./pages/WarehousesPage.js")), k = r(() => import("./pages/WarehouseDetailsPage.js")), A = r(() => import("./pages/CustomersPage.js")), j = r(() => import("./pages/CustomerDetailsPage.js")), M = r(() => import("./pages/RoutesPage.js")), N = r(() => import("./pages/RouteDetailsPage.js")), P = r(() => import("./pages/AnalyticsPage.js")), ee = r(() => import("./pages/FinancePage.js")), F = r(() => import("./pages/FreightEstimatePage.js")), I = r(() => import("./pages/ConsolidationPage.js")), L = r(() => import("./pages/LogisticsProceduresPage.js")), R = r(() => import("./pages/MarketplacePage.js")), z = r(() => import("./pages/ImportExportPage.js")), B = r(() => import("./pages/ReportsPage.js")), V = r(() => import("./pages/SettingsPage.js")), H = r(() => import("./pages/AIAssistantPage.js")), U = r(() => import("./pages/DeliveryCapturePage.js")), W = r(() => import("./pages/MultiModalShipmentPage.js")), G = r(() => import("./pages/ShippingRatesPage.js")), K = r(() => import("./pages/ContainersPage.js")), q = r(() => import("./pages/ContainerConditionPage.js")), J = r(() => import("./pages/FreeTimePage.js")), Y = r(() => import("./pages/PendingPickPage.js")), X = r(() => import("./pages/StockObservationsPage.js")), Z = r(() => import("./pages/StockBindingPage.js")), Q = r(() => import("./pages/TripUtilizationPage.js")), $ = r(() => import("./pages/EmptyReusePage.js"));
-function te() {
+var f = r(() => import("./pages/DashboardPage.js")), p = r(() => import("./pages/OrdersListPage.js")), m = r(() => import("./pages/OrderDetailsPage.js")), h = r(() => import("./pages/CreateOrderPage.js")), g = r(() => import("./pages/TrackingPage.js")), _ = r(() => import("./pages/TrackingEventQualityPage.js")), v = r(() => import("./pages/ShipmentStatusAuthorityPage.js")), y = r(() => import("./pages/LiveTrackingPage.js")), b = r(() => import("./pages/FleetPage.js")), x = r(() => import("./pages/VehiclesPage.js")), S = r(() => import("./pages/VehicleDetailsPage.js")), C = r(() => import("./pages/DriversPage.js")), w = r(() => import("./pages/DriverDetailsPage.js")), T = r(() => import("./pages/InventoryPage.js")), E = r(() => import("./pages/ProductsPage.js")), D = r(() => import("./pages/ProductDetailsPage.js")), O = r(() => import("./pages/WarehousesPage.js")), k = r(() => import("./pages/WarehouseDetailsPage.js")), A = r(() => import("./pages/CustomersPage.js")), j = r(() => import("./pages/CustomerDetailsPage.js")), M = r(() => import("./pages/RoutesPage.js")), N = r(() => import("./pages/RouteDetailsPage.js")), P = r(() => import("./pages/AnalyticsPage.js")), ee = r(() => import("./pages/FinancePage.js")), F = r(() => import("./pages/FreightEstimatePage.js")), I = r(() => import("./pages/FreightInvoicePage.js")), L = r(() => import("./pages/ConsolidationPage.js")), R = r(() => import("./pages/LogisticsProceduresPage.js")), z = r(() => import("./pages/MarketplacePage.js")), B = r(() => import("./pages/ImportExportPage.js")), V = r(() => import("./pages/ReportsPage.js")), H = r(() => import("./pages/SettingsPage.js")), U = r(() => import("./pages/AIAssistantPage.js")), W = r(() => import("./pages/DeliveryCapturePage.js")), G = r(() => import("./pages/MultiModalShipmentPage.js")), K = r(() => import("./pages/ShippingRatesPage.js")), q = r(() => import("./pages/ContainersPage.js")), J = r(() => import("./pages/ContainerConditionPage.js")), Y = r(() => import("./pages/FreeTimePage.js")), X = r(() => import("./pages/PendingPickPage.js")), Z = r(() => import("./pages/StockObservationsPage.js")), Q = r(() => import("./pages/StockBindingPage.js")), $ = r(() => import("./pages/TripUtilizationPage.js")), te = r(() => import("./pages/EmptyReusePage.js"));
+function ne() {
 	return /* @__PURE__ */ s(n, {
 		fallback: /* @__PURE__ */ s(d, {}),
 		children: /* @__PURE__ */ c(a, { children: [
@@ -71,39 +71,39 @@ function te() {
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "deliveries/mine",
-				element: /* @__PURE__ */ s(U, {})
+				element: /* @__PURE__ */ s(W, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "shipments/multi-modal",
-				element: /* @__PURE__ */ s(W, {})
+				element: /* @__PURE__ */ s(G, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "shipments/rates",
-				element: /* @__PURE__ */ s(G, {})
+				element: /* @__PURE__ */ s(K, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers",
-				element: /* @__PURE__ */ s(K, {})
+				element: /* @__PURE__ */ s(q, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers/condition",
-				element: /* @__PURE__ */ s(q, {})
+				element: /* @__PURE__ */ s(J, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers/free-time",
-				element: /* @__PURE__ */ s(J, {})
+				element: /* @__PURE__ */ s(Y, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers/empty-reuse",
-				element: /* @__PURE__ */ s($, {})
+				element: /* @__PURE__ */ s(te, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers/consolidation",
-				element: /* @__PURE__ */ s(I, {})
+				element: /* @__PURE__ */ s(L, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "containers/procedures",
-				element: /* @__PURE__ */ s(L, {})
+				element: /* @__PURE__ */ s(R, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "fleet",
@@ -147,15 +147,15 @@ function te() {
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "inventory/source-assessments",
-				element: /* @__PURE__ */ s(Z, {})
+				element: /* @__PURE__ */ s(Q, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "inventory/reported-issues",
-				element: /* @__PURE__ */ s(X, {})
+				element: /* @__PURE__ */ s(Z, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "inventory/pending-picks",
-				element: /* @__PURE__ */ s(Y, {})
+				element: /* @__PURE__ */ s(X, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "inventory/products",
@@ -207,7 +207,7 @@ function te() {
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "routes/trip-utilization",
-				element: /* @__PURE__ */ s(Q, {})
+				element: /* @__PURE__ */ s($, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "routes/new",
@@ -233,25 +233,29 @@ function te() {
 				path: "finance/freight-estimates",
 				element: /* @__PURE__ */ s(F, {})
 			}),
+			/* @__PURE__ */ s(i, {
+				path: "finance/freight-invoice-comparisons",
+				element: /* @__PURE__ */ s(I, {})
+			}),
 			/* @__PURE__ */ s(i, {
 				path: "marketplace",
-				element: /* @__PURE__ */ s(R, {})
+				element: /* @__PURE__ */ s(z, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "import-export",
-				element: /* @__PURE__ */ s(z, {})
+				element: /* @__PURE__ */ s(B, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "reports",
-				element: /* @__PURE__ */ s(B, {})
+				element: /* @__PURE__ */ s(V, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "ai-assistant",
-				element: /* @__PURE__ */ s(H, {})
+				element: /* @__PURE__ */ s(U, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "settings",
-				element: /* @__PURE__ */ s(V, {})
+				element: /* @__PURE__ */ s(H, {})
 			}),
 			/* @__PURE__ */ s(i, {
 				path: "*",
@@ -261,4 +265,4 @@ function te() {
 	});
 }
 //#endregion
-export { te as MoveTheWheelsRoutes };
+export { ne as MoveTheWheelsRoutes };

package/dist/components/ContainerEvidencePicker.js

@@ -1,138 +1,138 @@
 import { Button as e } from "./ui.js";
 import { useConditionQuery as t } from "../hooks/useContainerCondition.js";
-import { ContainerEvidenceFilesDocument as n, ContainerEvidenceVersionsDocument as r } from "../src/generated/wspace-operations.js";
-import { useState as i } from "react";
-import { jsx as a, jsxs as o } from "react/jsx-runtime";
+import { ContainerEvidenceFilesDocument as n, ContainerEvidenceVersionsDocument as r, InvoiceEvidenceVersionsDocument as i } from "../src/generated/wspace-operations.js";
+import { useState as a } from "react";
+import { jsx as o, jsxs as s } from "react/jsx-runtime";
 //#region src/movethewheels/components/ContainerEvidencePicker.tsx
-function s({ value: s, onChange: c, description: l = "Choose exact versions from shared Files. Evidence integrity does not confirm the issuer or certify the container." }) {
-	let [u, d] = i(""), [f, p] = i(0), [m, h] = i(0), g = t(n, { pagination: {
+function c({ value: c, onChange: l, currentOnly: u = !1, description: d = "Choose exact versions from shared Files. Evidence integrity does not confirm the issuer or certify the container." }) {
+	let [f, p] = a(""), [m, h] = a(0), [g, _] = a(0), v = t(n, { pagination: {
 		limit: 25,
-		offset: f
-	} }), _ = t(r, u ? {
-		fileId: u,
+		offset: m
+	} }), y = t(u ? i : r, f ? {
+		fileId: f,
 		pagination: {
 			limit: 25,
-			offset: m
+			offset: g
 		}
 	} : null);
-	return /* @__PURE__ */ o("fieldset", {
+	return /* @__PURE__ */ s("fieldset", {
 		className: "space-y-3 rounded-lg border p-4",
 		children: [
-			/* @__PURE__ */ a("legend", {
+			/* @__PURE__ */ o("legend", {
 				className: "px-1 font-medium",
 				children: "Evidence for this record"
 			}),
-			/* @__PURE__ */ a("p", {
+			/* @__PURE__ */ o("p", {
 				className: "text-sm",
-				children: l
+				children: d
 			}),
-			g.error && /* @__PURE__ */ o("p", {
+			v.error && /* @__PURE__ */ s("p", {
 				role: "alert",
-				children: ["Evidence files unavailable: ", g.error]
+				children: ["Evidence files unavailable: ", v.error]
 			}),
-			/* @__PURE__ */ o("label", {
+			/* @__PURE__ */ s("label", {
 				className: "block",
-				children: ["File", /* @__PURE__ */ o("select", {
+				children: ["File", /* @__PURE__ */ s("select", {
 					"aria-label": "Evidence file",
 					className: "mt-1 w-full rounded-md border p-2",
-					value: u,
+					value: f,
 					onChange: (e) => {
-						d(e.target.value), h(0);
+						p(e.target.value), _(0);
 					},
-					children: [/* @__PURE__ */ a("option", {
+					children: [/* @__PURE__ */ o("option", {
 						value: "",
 						children: "Choose a readable file"
-					}), g.data?.getFiles.files.filter((e) => e.canRead === !0).map((e) => /* @__PURE__ */ a("option", {
+					}), v.data?.getFiles.files.filter((e) => e.canRead === !0).map((e) => /* @__PURE__ */ o("option", {
 						value: e.id,
 						children: e.name
 					}, e.id))]
 				})]
 			}),
-			g.loading && /* @__PURE__ */ a("p", {
+			v.loading && /* @__PURE__ */ o("p", {
 				role: "status",
 				children: "Loading evidence files…"
 			}),
-			/* @__PURE__ */ o("div", {
+			/* @__PURE__ */ s("div", {
 				className: "flex gap-2",
-				children: [/* @__PURE__ */ a(e, {
+				children: [/* @__PURE__ */ o(e, {
 					type: "button",
 					variant: "outline",
-					disabled: f === 0 || g.loading,
+					disabled: m === 0 || v.loading,
 					onClick: () => {
-						p(Math.max(0, f - 25)), d("");
+						h(Math.max(0, m - 25)), p("");
 					},
 					children: "Previous files"
-				}), /* @__PURE__ */ a(e, {
+				}), /* @__PURE__ */ o(e, {
 					type: "button",
 					variant: "outline",
-					disabled: !g.data?.getFiles.hasMore || g.loading,
+					disabled: !v.data?.getFiles.hasMore || v.loading,
 					onClick: () => {
-						p(f + 25), d("");
+						h(m + 25), p("");
 					},
 					children: "Next files"
 				})]
 			}),
-			_.error && /* @__PURE__ */ o("p", {
+			y.error && /* @__PURE__ */ s("p", {
 				role: "alert",
-				children: ["File versions unavailable: ", _.error]
+				children: ["File versions unavailable: ", y.error]
 			}),
-			_.loading && /* @__PURE__ */ a("p", {
+			y.loading && /* @__PURE__ */ o("p", {
 				role: "status",
 				children: "Loading file versions…"
 			}),
-			_.data?.getFileVersions.versions.map((e) => {
-				let t = s.some((t) => t.versionId === e.id), n = /^[a-fA-F0-9]{64}$/.test(e.sha256Hash ?? ""), r = `${e.name} — version ${e.versionLabel ?? e.versionNumber}`;
-				return /* @__PURE__ */ o("label", {
+			y.data?.getFileVersions.versions.map((e) => {
+				let t = c.some((t) => t.versionId === e.id), n = !u || "isCurrentVersion" in e && e.isCurrentVersion === !0, r = n && /^[a-fA-F0-9]{64}$/.test(e.sha256Hash ?? ""), i = `${e.name} — version ${e.versionLabel ?? e.versionNumber}`;
+				return /* @__PURE__ */ s("label", {
 					className: "flex gap-2 text-sm",
 					children: [
-						/* @__PURE__ */ a("input", {
+						/* @__PURE__ */ o("input", {
 							type: "checkbox",
 							checked: t,
-							disabled: !n || !t && s.length >= 10,
-							onChange: () => c(t ? s.filter((t) => t.versionId !== e.id) : [...s, {
+							disabled: !r || !t && c.length >= 10,
+							onChange: () => l(t ? c.filter((t) => t.versionId !== e.id) : [...c, {
 								fileId: e.fileId,
 								versionId: e.id,
-								label: r
+								label: i
 							}])
 						}),
-						r,
-						!n && " (integrity fingerprint unavailable)"
+						i,
+						n ? !r && " (integrity fingerprint unavailable)" : " (not confirmed current)"
 					]
 				}, e.id);
 			}),
-			u && /* @__PURE__ */ o("div", {
+			f && /* @__PURE__ */ s("div", {
 				className: "flex gap-2",
-				children: [/* @__PURE__ */ a(e, {
+				children: [/* @__PURE__ */ o(e, {
 					type: "button",
 					variant: "outline",
-					disabled: m === 0 || _.loading,
-					onClick: () => h(Math.max(0, m - 25)),
+					disabled: g === 0 || y.loading,
+					onClick: () => _(Math.max(0, g - 25)),
 					children: "Previous versions"
-				}), /* @__PURE__ */ a(e, {
+				}), /* @__PURE__ */ o(e, {
 					type: "button",
 					variant: "outline",
-					disabled: !_.data?.getFileVersions.hasMore || _.loading,
-					onClick: () => h(m + 25),
+					disabled: !y.data?.getFileVersions.hasMore || y.loading,
+					onClick: () => _(g + 25),
 					children: "Next versions"
 				})]
 			}),
-			/* @__PURE__ */ o("p", {
+			/* @__PURE__ */ s("p", {
 				className: "text-sm",
 				children: [
 					"Selected ",
-					s.length,
+					c.length,
 					" of 10 versions."
 				]
 			}),
-			s.map((t) => /* @__PURE__ */ o("div", {
+			c.map((t) => /* @__PURE__ */ s("div", {
 				className: "flex items-center justify-between gap-2 text-sm",
-				children: [/* @__PURE__ */ a("span", {
+				children: [/* @__PURE__ */ o("span", {
 					className: "break-words",
 					children: t.label
-				}), /* @__PURE__ */ a(e, {
+				}), /* @__PURE__ */ o(e, {
 					type: "button",
 					variant: "outline",
-					onClick: () => c(s.filter((e) => e.versionId !== t.versionId)),
+					onClick: () => l(c.filter((e) => e.versionId !== t.versionId)),
 					children: "Remove"
 				})]
 			}, t.versionId))
@@ -140,4 +140,4 @@ function s({ value: s, onChange: c, description: l = "Choose exact versions from
 	});
 }
 //#endregion
-export { s as ContainerEvidencePicker };
+export { c as ContainerEvidencePicker };

package/dist/components/FleetAlertsPanel.js

@@ -57,7 +57,7 @@ function h({ alerts: p, isLoading: h, error: g, onRetry: _, onOpen: v, t: y }) {
 		}), b]
 	}) }), /* @__PURE__ */ u(a, { children: /* @__PURE__ */ u("p", {
 		className: "text-sm text-text-secondary",
-		children: y("movethewheels.fleet.alerts.allClear", "All clear — every licence is valid and no vehicle is due for service.")
+		children: y("movethewheels.fleet.alerts.allClear", "No recorded fleet alerts. This does not certify legal driving eligibility or duty-hours availability.")
 	}) })] }) : /* @__PURE__ */ d(i, { children: [/* @__PURE__ */ u(o, { children: /* @__PURE__ */ d(s, {
 		className: "flex items-center gap-2",
 		children: [
@@ -92,7 +92,7 @@ function h({ alerts: p, isLoading: h, error: g, onRetry: _, onOpen: v, t: y }) {
 						/* @__PURE__ */ d("span", {
 							className: "flex-1 min-w-0",
 							children: [/* @__PURE__ */ u("span", {
-								className: "block text-sm font-medium truncate",
+								className: "block text-sm font-medium whitespace-normal break-words",
 								children: t.message
 							}), n && /* @__PURE__ */ u("span", {
 								className: "block text-xs text-text-secondary",