@getpeppr/cli 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@getpeppr/cli` are documented here.
 
 The CLI bundles `@getpeppr/sdk` into its published artifact (tsup `noExternal`), so `validate`, `convert` and `init` run the SDK's validators, country rules and UBL builder locally — an SDK release only reaches CLI users once the CLI is rebundled. Rebundle-only releases are listed with the SDK version they ship.
 
+## [0.11.0] — 2026-09-04
+
+Rebundles `@getpeppr/sdk` 5.1.0.
+
+- **`getpeppr validate` follows BR-CL-01's two vocabularies** instead of a hand-written list of seven codes. Measured against the published 0.10.0 (which bundles SDK 5.0.0):
+  - **44 legal invoice codes stop being falsely refused** — `326` (partial invoice, named by `DE-R-017`), `382` and 42 others now pass. On 0.10.0 each exits 1.
+  - **Credit notes carrying `383`, `384`, `386`, `389` or `751` are now refused locally** with a `BR-CL-01` error suggesting legal credit-note codes. On 0.10.0 each passed local validation — every one is fatal on the network, so the document failed later and less clearly.
+  - The default is unchanged: omit `invoiceTypeCode` and the document kind decides (`380` invoice, `381` credit note).
+- **The tarball now ships its `LICENSE` file** (the published 0.10.0 does not contain one) and the corrected README.
+
 ## [0.10.0] — 2026-08-28
 
 Bundles SDK **5.0.0**. Minor rather than patch because inputs that used to pass

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zero Loop Labs Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -103,7 +103,7 @@ getpeppr lookup 0208:0685660237 --json
 
 ### `getpeppr login` — Save your API key
 
-Store a getpeppr API key in `~/.config/getpeppr/credentials.json` (mode `0600`). Sandbox and live keys can coexist.
+Store a getpeppr API key in `$XDG_CONFIG_HOME/getpeppr/credentials.json` — `~/.config/getpeppr/credentials.json` by default, `%APPDATA%\getpeppr\credentials.json` on Windows. On Unix-like systems the file is created and checked with mode `0600`; Windows has no POSIX mode. Sandbox and live keys can coexist.
 
 ```bash
 # Interactive (recommended) — prompts for the key with masked input
@@ -149,6 +149,7 @@ getpeppr send invoice.json --prod
 | `--to <peppol-id>` | Recipient Peppol ID (when no file) |
 | `--amount <number>` | Line amount in major currency units |
 | `--currency <iso>` | ISO 4217 code (default `EUR`) |
+| `--country <iso>` | Recipient country (ISO 3166-1 alpha-2) when no file |
 | `--desc <text>` | Line description |
 | `--attachment` | Attach the bundled test PDF |
 | `--watch` | Poll status until terminal (60s timeout) |
@@ -189,7 +190,7 @@ If no legal entity exists in the environment yet, `whoami` says so and points to
 getpeppr logout
 ```
 
-Removes `~/.config/getpeppr/credentials.json`. No-op if the file doesn't exist.
+Removes the credentials file. No-op if the file doesn't exist.
 
 ## Exit codes
 

package/dist/index.js

@@ -773,8 +773,9 @@ function formatBaseQuantity(baseQuantity, field) {
   }
   return `${digits.slice(0, outputPoint)}.${digits.slice(outputPoint)}`;
 }
-function round2(n) {
-  return Math.round(n * 100) / 100;
+function roundUblCurrencyAmount(value) {
+  const rounded = Math.round((value + Math.sign(value) * Number.EPSILON) * 100) / 100;
+  return Object.is(rounded, -0) ? 0 : rounded;
 }
 function normalizedTaxExemptReason(vatCategory, reason) {
   if (!EXEMPTION_REASON_CATEGORIES.has(vatCategory) || typeof reason !== "string") {
@@ -1063,7 +1064,7 @@ function calculateTaxSubtotals(lines, allowances, charges, options = {}) {
         throw new UblBuilderInputError(`Conflicting taxExemptReason values for VAT group ${vatCategory}/${effectiveVatRate}.`, "taxExemptReason");
       }
       existing.taxExemptReason ??= reason;
-      existing.taxableAmount = round2(existing.taxableAmount + amount);
+      existing.taxableAmount += amount;
     } else {
       groups.set(key, {
         vatRate: effectiveVatRate,
@@ -1092,8 +1093,8 @@ function calculateTaxSubtotals(lines, allowances, charges, options = {}) {
     }
   }
   return Array.from(groups.values()).map((subtotal) => {
-    const taxableAmount = round2(subtotal.taxableAmount);
-    const taxAmount = round2(taxableAmount * (subtotal.vatRate / 100));
+    const taxableAmount = roundUblCurrencyAmount(subtotal.taxableAmount);
+    const taxAmount = roundUblCurrencyAmount(taxableAmount * (subtotal.vatRate / 100));
     if (!survivesCents(taxableAmount) || !survivesCents(taxAmount)) {
       throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
     }
@@ -1105,12 +1106,12 @@ function calculateDocumentTotals(lines, allowances, charges, options = {}) {
   const lineExtensionAmount = lines.reduce((sum, line, index) => sum + calculateLineExtensionAmount(line, index), 0);
   const allowanceTotalAmount = (allowances ?? []).reduce((sum, a) => sum + a.amount, 0);
   const chargeTotalAmount = (charges ?? []).reduce((sum, c) => sum + c.amount, 0);
-  const taxExclusiveAmount = round2(lineExtensionAmount - allowanceTotalAmount + chargeTotalAmount);
+  const taxExclusiveAmount = roundUblCurrencyAmount(lineExtensionAmount - allowanceTotalAmount + chargeTotalAmount);
   if (!survivesCents(allowanceTotalAmount) || !survivesCents(chargeTotalAmount) || !survivesCents(taxExclusiveAmount)) {
     throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
   }
-  const totalTax = round2(taxSubtotals.reduce((sum, st) => sum + st.taxAmount, 0));
-  const taxInclusiveAmount = round2(taxExclusiveAmount + totalTax);
+  const totalTax = roundUblCurrencyAmount(taxSubtotals.reduce((sum, st) => sum + st.taxAmount, 0));
+  const taxInclusiveAmount = roundUblCurrencyAmount(taxExclusiveAmount + totalTax);
   if (!survivesCents(totalTax) || !survivesCents(taxInclusiveAmount)) {
     throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
   }
@@ -1145,7 +1146,7 @@ function buildTaxTotalXml(taxSubtotals, totalTax, currency) {
   </cac:TaxTotal>`;
 }
 function buildTaxCurrencyTotalXml(totalTax, taxCurrency, rate) {
-  const convertedAmount = Math.round(totalTax * rate * 100) / 100;
+  const convertedAmount = roundUblCurrencyAmount(totalTax * rate);
   return `<cac:TaxTotal>
     <cbc:TaxAmount currencyID="${escapeXml(taxCurrency)}">${formatAmount(convertedAmount)}</cbc:TaxAmount>
   </cac:TaxTotal>`;
@@ -1606,6 +1607,79 @@ function resolveUnit(input) {
 function getAllUnits() {
   return Array.from(UNIT_CODES.entries()).map(([code, name]) => ({ code, name })).sort((a, b) => a.code.localeCompare(b.code));
 }
+var INVOICE_TYPE_CODES = [
+  71,
+  80,
+  81,
+  82,
+  84,
+  102,
+  130,
+  202,
+  203,
+  204,
+  211,
+  218,
+  219,
+  295,
+  325,
+  326,
+  331,
+  380,
+  382,
+  383,
+  384,
+  385,
+  386,
+  387,
+  388,
+  389,
+  390,
+  393,
+  394,
+  395,
+  456,
+  457,
+  471,
+  472,
+  473,
+  500,
+  501,
+  527,
+  553,
+  575,
+  623,
+  633,
+  751,
+  780,
+  817,
+  870,
+  875,
+  876,
+  877,
+  935
+];
+var CREDIT_NOTE_TYPE_CODES = [
+  81,
+  83,
+  261,
+  262,
+  296,
+  308,
+  381,
+  396,
+  420,
+  458,
+  502,
+  503,
+  532
+];
+function getInvoiceTypeCodes() {
+  return [...INVOICE_TYPE_CODES];
+}
+function getCreditNoteTypeCodes() {
+  return [...CREDIT_NOTE_TYPE_CODES];
+}
 
 // ../sdk/dist/core/validator.js
 function error(field, message, ruleId, suggestion) {
@@ -1736,9 +1810,12 @@ function validateInvoice(input) {
   } else if (!input.number.trim()) {
     errors.push(error("number", "Invoice number is required", "BR-02", "Must be unique per supplier"));
   }
-  const VALID_TYPE_CODES = [380, 381, 383, 384, 386, 389, 751];
-  if (input.invoiceTypeCode != null && !VALID_TYPE_CODES.includes(input.invoiceTypeCode)) {
-    errors.push(error("invoiceTypeCode", `Invalid invoice type code: ${input.invoiceTypeCode}`, void 0, "Valid codes: 380, 381, 383, 384, 386, 389, 751"));
+  if (input.invoiceTypeCode != null) {
+    const isCreditNote = input.isCreditNote === true;
+    const legalCodes = isCreditNote ? getCreditNoteTypeCodes() : getInvoiceTypeCodes();
+    if (!legalCodes.includes(input.invoiceTypeCode)) {
+      errors.push(error("invoiceTypeCode", `Invalid ${isCreditNote ? "credit note" : "invoice"} type code: ${input.invoiceTypeCode}`, "BR-CL-01", `Valid ${isCreditNote ? "credit note" : "invoice"} type codes: ${legalCodes.join(", ")}`));
+    }
   }
   if (input.isCreditNote) {
     const ref = input.invoiceReference;
@@ -2456,7 +2533,7 @@ function statusFamily(status) {
 var TERMINAL_FAILURE_STATUSES = STATUS_PRECEDENCE.filter((e) => e.family === "terminal-failure").map((e) => e.status);
 
 // ../sdk/dist/version.js
-var SDK_VERSION = "5.0.0";
+var SDK_VERSION = "5.1.0";
 
 // ../sdk/dist/core/api-result.js
 var API_RESULT_HEADER_NAMES = {
@@ -5880,7 +5957,7 @@ async function promptEnvironment() {
   });
 }
 function registerLoginCommand(program2) {
-  program2.command("login").description("Save a getpeppr API key to ~/.config/getpeppr/credentials.json").option("--key <key>", "API key \u2014 for CI/scripted use only; visible in `ps` and shell history. Prefer the interactive prompt or GETPEPPR_API_KEY env var.").option("--sandbox", "store as sandbox key (default)").option("--live", "store as live (production) key").action(async (flags) => {
+  program2.command("login").description("Save a getpeppr API key to the credentials file ($XDG_CONFIG_HOME/getpeppr, %APPDATA%\\getpeppr on Windows)").option("--key <key>", "API key \u2014 for CI/scripted use only; visible in `ps` and shell history. Prefer the interactive prompt or GETPEPPR_API_KEY env var.").option("--sandbox", "store as sandbox key (default)").option("--live", "store as live (production) key").action(async (flags) => {
     if (!flags.live && !flags.sandbox && process.stdin.isTTY !== true) {
       exitWithError("Error: --sandbox or --live required when stdin is not a TTY (CI mode).");
     }
@@ -6012,7 +6089,7 @@ function registerWhoamiCommand(program2) {
 // src/commands/logout.ts
 import pc9 from "picocolors";
 function registerLogoutCommand(program2) {
-  program2.command("logout").description("Remove ~/.config/getpeppr/credentials.json").action(() => {
+  program2.command("logout").description("Remove the stored credentials file").action(() => {
     const path = getCredentialsPath();
     const removed = deleteCredentials();
     if (removed) {