@getpeppr/cli 0.10.0 → 0.11.1

package/CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to `@getpeppr/cli` are documented here.
 
 The CLI bundles `@getpeppr/sdk` into its published artifact (tsup `noExternal`), so `validate`, `convert` and `init` run the SDK's validators, country rules and UBL builder locally — an SDK release only reaches CLI users once the CLI is rebundled. Rebundle-only releases are listed with the SDK version they ship.
 
+## [0.11.1] — 2026-09-04
+
+Rebundles `@getpeppr/sdk` 5.2.0 (GPR-1084).
+
+- The `schematron` section of `getpeppr validate` now reports `BR-16` for a
+  missing invoice line and uses explicit `GETPEPPR-*` IDs for ten SDK-local
+  diagnostics that previously cited different official rules. The separate
+  `structure` and `countryRules` sections are unchanged (GPR-1267 tracks their
+  reverse audit).
+- Validation predicates, warning/error severities and process exit codes are
+  unchanged. The unit warning also stops calling every code outside the SDK's
+  small convenience list invalid under Rec20, and the payable warning no longer
+  invents `prepaidAmount` as the only possible cause. Scripts that filter the
+  `schematron` result by an old rule ID or warning text must update that filter.
+- Human-readable output now labels the section `Offline Checks (partial)` and
+  reports `Pre-flight checks passed` or `Pre-flight checks found errors`; it no
+  longer claims that the partial pass proves validity or non-compliance. The
+  `--json` shape and process exit codes are unchanged.
+
+## [0.11.0] — 2026-09-04
+
+Rebundles `@getpeppr/sdk` 5.1.0.
+
+- **`getpeppr validate` follows BR-CL-01's two vocabularies** instead of a hand-written list of seven codes. Measured against the published 0.10.0 (which bundles SDK 5.0.0):
+  - **44 legal invoice codes stop being falsely refused** — `326` (partial invoice, named by `DE-R-017`), `382` and 42 others now pass. On 0.10.0 each exits 1.
+  - **Credit notes carrying `383`, `384`, `386`, `389` or `751` are now refused locally** with a `BR-CL-01` error suggesting legal credit-note codes. On 0.10.0 each passed local validation — every one is fatal on the network, so the document failed later and less clearly.
+  - The default is unchanged: omit `invoiceTypeCode` and the document kind decides (`380` invoice, `381` credit note).
+- **The tarball now ships its `LICENSE` file** (the published 0.10.0 does not contain one) and the corrected README.
+
 ## [0.10.0] — 2026-08-28
 
 Bundles SDK **5.0.0**. Minor rather than patch because inputs that used to pass

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zero Loop Labs Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,6 +1,6 @@
 # @getpeppr/cli
 
-Developer toolkit for Peppol e-invoicing. Scaffold invoices, validate against Peppol BIS 3.0, convert to UBL XML, look up participants in the Peppol Directory, and send invoices to the Peppol network — all from the command line.
+Developer toolkit for Peppol e-invoicing. Scaffold invoices, run offline pre-flight checks, convert to UBL XML, look up participants in the Peppol Directory, and send invoices to the Peppol network — all from the command line.
 
 ## Installation
 
@@ -30,7 +30,7 @@ The generated template includes a Belgian seller, the sandbox test receiver as b
 
 ### `getpeppr validate` — Validate an invoice
 
-Run offline validation against Peppol BIS 3.0 business rules:
+Run partial offline pre-flight checks before the network applies the complete Peppol BIS 3.0 rulebooks:
 
 ```bash
 getpeppr validate invoice.json
@@ -44,14 +44,14 @@ Validating: invoice.json
 ── Structure ──────────────────────────────
   ✓ No errors
 
-── Business Rules (Peppol BIS 3.0) ───────
-  ✓ All rules passed
+── Offline Checks (partial) ───────────────────
+  ✓ No findings
 
 ── Country Rules ────────────────────────────
   ⚠ No structured communication reference (BE-02)
 
 ── Summary ──────────────────────────────────
-  ✓ Invoice is valid (1 warning)
+  ✓ Pre-flight checks passed (1 warning)
 ```
 
 | Flag | Description |
@@ -103,7 +103,7 @@ getpeppr lookup 0208:0685660237 --json
 
 ### `getpeppr login` — Save your API key
 
-Store a getpeppr API key in `~/.config/getpeppr/credentials.json` (mode `0600`). Sandbox and live keys can coexist.
+Store a getpeppr API key in `$XDG_CONFIG_HOME/getpeppr/credentials.json` — `~/.config/getpeppr/credentials.json` by default, `%APPDATA%\getpeppr\credentials.json` on Windows. On Unix-like systems the file is created and checked with mode `0600`; Windows has no POSIX mode. Sandbox and live keys can coexist.
 
 ```bash
 # Interactive (recommended) — prompts for the key with masked input
@@ -149,6 +149,7 @@ getpeppr send invoice.json --prod
 | `--to <peppol-id>` | Recipient Peppol ID (when no file) |
 | `--amount <number>` | Line amount in major currency units |
 | `--currency <iso>` | ISO 4217 code (default `EUR`) |
+| `--country <iso>` | Recipient country (ISO 3166-1 alpha-2) when no file |
 | `--desc <text>` | Line description |
 | `--attachment` | Attach the bundled test PDF |
 | `--watch` | Poll status until terminal (60s timeout) |
@@ -189,7 +190,7 @@ If no legal entity exists in the environment yet, `whoami` says so and points to
 getpeppr logout
 ```
 
-Removes `~/.config/getpeppr/credentials.json`. No-op if the file doesn't exist.
+Removes the credentials file. No-op if the file doesn't exist.
 
 ## Exit codes
 
@@ -234,7 +235,7 @@ GETPEPPR_API_KEY=$SANDBOX_KEY getpeppr send invoice.json --json
 The CLI runs three validation engines from the [@getpeppr/sdk](https://www.npmjs.com/package/@getpeppr/sdk):
 
 1. **Structure** — Required fields, type checks, format validation
-2. **Business Rules** — Peppol BIS 3.0 / EN 16931 compliance (BR-xx, BR-CO-xx, PEPPOL-xx rules)
+2. **Offline Checks** — 37 registered partial pre-flight checks: exact network-rule equivalents plus explicit `GETPEPPR-*` diagnostics. The legacy provider-capability diagnostic `unsupported_vat_category` can also appear, but is outside that count. This is not a Peppol conformance verdict.
 3. **Country Rules** — Belgium (BE), France (FR), Italy (IT), Netherlands (NL), Germany (DE)
 
 Scaffolding (`init`), validation, and conversion run fully offline — no API key or network connection required. Only `lookup`, `send`, and `whoami` need a network connection. Before a sandbox `send`, the CLI reads `GET /v1/identity`: its own generated fixture is adapted to the returned O/0 or AE/0 profile, while a user-edited file is never rewritten silently and is refused locally if its tax mode conflicts with the sender.

package/dist/index.js

@@ -65,7 +65,7 @@ function formatWarning(item) {
 function formatSection(title, errors, warnings) {
   const lines = [sectionHeader(title)];
   if (errors.length === 0 && warnings.length === 0) {
-    lines.push(`  ${pc.green("\u2713")} All rules passed`);
+    lines.push(`  ${pc.green("\u2713")} No findings`);
     return lines.join("\n");
   }
   if (errors.length === 0) {
@@ -94,7 +94,7 @@ Validating: ${pc.bold(filename)}
   lines.push("");
   lines.push(
     formatSection(
-      "Business Rules (Peppol BIS 3.0)",
+      "Offline Checks (partial)",
       result.schematron.errors,
       result.schematron.warnings
     )
@@ -111,10 +111,10 @@ Validating: ${pc.bold(filename)}
   lines.push(sectionHeader("Summary"));
   const { totalErrors, totalWarnings, valid } = result;
   if (valid && totalWarnings === 0) {
-    lines.push(`  ${pc.green(pc.bold("\u2713 Invoice is valid"))}`);
+    lines.push(`  ${pc.green(pc.bold("\u2713 Pre-flight checks passed"))}`);
   } else if (valid) {
     lines.push(
-      `  ${pc.green(pc.bold("\u2713 Invoice is valid"))} ${pc.dim(`(${totalWarnings} warning${totalWarnings === 1 ? "" : "s"})`)}`
+      `  ${pc.green(pc.bold("\u2713 Pre-flight checks passed"))} ${pc.dim(`(${totalWarnings} warning${totalWarnings === 1 ? "" : "s"})`)}`
     );
   } else {
     const parts = [];
@@ -123,7 +123,7 @@ Validating: ${pc.bold(filename)}
       parts.push(`${totalWarnings} warning${totalWarnings === 1 ? "" : "s"}`);
     }
     lines.push(
-      `  ${pc.red(pc.bold(`\u2717 ${parts.join(", ")}`))} \u2014 invoice non-compliant`
+      `  ${pc.red(pc.bold("\u2717 Pre-flight checks found errors"))} ${pc.dim(`(${parts.join(", ")})`)}`
     );
   }
   lines.push("");
@@ -773,8 +773,9 @@ function formatBaseQuantity(baseQuantity, field) {
   }
   return `${digits.slice(0, outputPoint)}.${digits.slice(outputPoint)}`;
 }
-function round2(n) {
-  return Math.round(n * 100) / 100;
+function roundUblCurrencyAmount(value) {
+  const rounded = Math.round((value + Math.sign(value) * Number.EPSILON) * 100) / 100;
+  return Object.is(rounded, -0) ? 0 : rounded;
 }
 function normalizedTaxExemptReason(vatCategory, reason) {
   if (!EXEMPTION_REASON_CATEGORIES.has(vatCategory) || typeof reason !== "string") {
@@ -1063,7 +1064,7 @@ function calculateTaxSubtotals(lines, allowances, charges, options = {}) {
         throw new UblBuilderInputError(`Conflicting taxExemptReason values for VAT group ${vatCategory}/${effectiveVatRate}.`, "taxExemptReason");
       }
       existing.taxExemptReason ??= reason;
-      existing.taxableAmount = round2(existing.taxableAmount + amount);
+      existing.taxableAmount += amount;
     } else {
       groups.set(key, {
         vatRate: effectiveVatRate,
@@ -1092,8 +1093,8 @@ function calculateTaxSubtotals(lines, allowances, charges, options = {}) {
     }
   }
   return Array.from(groups.values()).map((subtotal) => {
-    const taxableAmount = round2(subtotal.taxableAmount);
-    const taxAmount = round2(taxableAmount * (subtotal.vatRate / 100));
+    const taxableAmount = roundUblCurrencyAmount(subtotal.taxableAmount);
+    const taxAmount = roundUblCurrencyAmount(taxableAmount * (subtotal.vatRate / 100));
     if (!survivesCents(taxableAmount) || !survivesCents(taxAmount)) {
       throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
     }
@@ -1105,12 +1106,12 @@ function calculateDocumentTotals(lines, allowances, charges, options = {}) {
   const lineExtensionAmount = lines.reduce((sum, line, index) => sum + calculateLineExtensionAmount(line, index), 0);
   const allowanceTotalAmount = (allowances ?? []).reduce((sum, a) => sum + a.amount, 0);
   const chargeTotalAmount = (charges ?? []).reduce((sum, c) => sum + c.amount, 0);
-  const taxExclusiveAmount = round2(lineExtensionAmount - allowanceTotalAmount + chargeTotalAmount);
+  const taxExclusiveAmount = roundUblCurrencyAmount(lineExtensionAmount - allowanceTotalAmount + chargeTotalAmount);
   if (!survivesCents(allowanceTotalAmount) || !survivesCents(chargeTotalAmount) || !survivesCents(taxExclusiveAmount)) {
     throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
   }
-  const totalTax = round2(taxSubtotals.reduce((sum, st) => sum + st.taxAmount, 0));
-  const taxInclusiveAmount = round2(taxExclusiveAmount + totalTax);
+  const totalTax = roundUblCurrencyAmount(taxSubtotals.reduce((sum, st) => sum + st.taxAmount, 0));
+  const taxInclusiveAmount = roundUblCurrencyAmount(taxExclusiveAmount + totalTax);
   if (!survivesCents(totalTax) || !survivesCents(taxInclusiveAmount)) {
     throw new UblBuilderInputError(NON_FINITE_DERIVED_AMOUNT_MESSAGE, "totals", DERIVED_AMOUNT_CONTRACT_RULE);
   }
@@ -1145,7 +1146,7 @@ function buildTaxTotalXml(taxSubtotals, totalTax, currency) {
   </cac:TaxTotal>`;
 }
 function buildTaxCurrencyTotalXml(totalTax, taxCurrency, rate) {
-  const convertedAmount = Math.round(totalTax * rate * 100) / 100;
+  const convertedAmount = roundUblCurrencyAmount(totalTax * rate);
   return `<cac:TaxTotal>
     <cbc:TaxAmount currencyID="${escapeXml(taxCurrency)}">${formatAmount(convertedAmount)}</cbc:TaxAmount>
   </cac:TaxTotal>`;
@@ -1606,6 +1607,79 @@ function resolveUnit(input) {
 function getAllUnits() {
   return Array.from(UNIT_CODES.entries()).map(([code, name]) => ({ code, name })).sort((a, b) => a.code.localeCompare(b.code));
 }
+var INVOICE_TYPE_CODES = [
+  71,
+  80,
+  81,
+  82,
+  84,
+  102,
+  130,
+  202,
+  203,
+  204,
+  211,
+  218,
+  219,
+  295,
+  325,
+  326,
+  331,
+  380,
+  382,
+  383,
+  384,
+  385,
+  386,
+  387,
+  388,
+  389,
+  390,
+  393,
+  394,
+  395,
+  456,
+  457,
+  471,
+  472,
+  473,
+  500,
+  501,
+  527,
+  553,
+  575,
+  623,
+  633,
+  751,
+  780,
+  817,
+  870,
+  875,
+  876,
+  877,
+  935
+];
+var CREDIT_NOTE_TYPE_CODES = [
+  81,
+  83,
+  261,
+  262,
+  296,
+  308,
+  381,
+  396,
+  420,
+  458,
+  502,
+  503,
+  532
+];
+function getInvoiceTypeCodes() {
+  return [...INVOICE_TYPE_CODES];
+}
+function getCreditNoteTypeCodes() {
+  return [...CREDIT_NOTE_TYPE_CODES];
+}
 
 // ../sdk/dist/core/validator.js
 function error(field, message, ruleId, suggestion) {
@@ -1736,9 +1810,12 @@ function validateInvoice(input) {
   } else if (!input.number.trim()) {
     errors.push(error("number", "Invoice number is required", "BR-02", "Must be unique per supplier"));
   }
-  const VALID_TYPE_CODES = [380, 381, 383, 384, 386, 389, 751];
-  if (input.invoiceTypeCode != null && !VALID_TYPE_CODES.includes(input.invoiceTypeCode)) {
-    errors.push(error("invoiceTypeCode", `Invalid invoice type code: ${input.invoiceTypeCode}`, void 0, "Valid codes: 380, 381, 383, 384, 386, 389, 751"));
+  if (input.invoiceTypeCode != null) {
+    const isCreditNote = input.isCreditNote === true;
+    const legalCodes = isCreditNote ? getCreditNoteTypeCodes() : getInvoiceTypeCodes();
+    if (!legalCodes.includes(input.invoiceTypeCode)) {
+      errors.push(error("invoiceTypeCode", `Invalid ${isCreditNote ? "credit note" : "invoice"} type code: ${input.invoiceTypeCode}`, "BR-CL-01", `Valid ${isCreditNote ? "credit note" : "invoice"} type codes: ${legalCodes.join(", ")}`));
+    }
   }
   if (input.isCreditNote) {
     const ref = input.invoiceReference;
@@ -1910,12 +1987,12 @@ function validateInvoice(input) {
 function violation(ruleId, severity, message, field) {
   return { ruleId, severity, message, field };
 }
-var _knownUnitCodes;
-function getKnownUnitCodes() {
-  if (!_knownUnitCodes) {
-    _knownUnitCodes = new Set(getAllUnits().map((u) => u.code));
+var _sdkUnitCodes;
+function getSdkUnitCodes() {
+  if (!_sdkUnitCodes) {
+    _sdkUnitCodes = new Set(getAllUnits().map((u) => u.code));
   }
-  return _knownUnitCodes;
+  return _sdkUnitCodes;
 }
 var VALID_VAT_CATEGORIES = /* @__PURE__ */ new Set(["S", "Z", "E", "AE", "K", "G", "O", "L", "M", "B"]);
 var SENDABLE_VAT_CATEGORIES = ["S", "Z", "E", "AE", "K", "G", "O"];
@@ -1935,18 +2012,18 @@ var br02 = (input) => {
   }
   return [];
 };
-var br03 = (input) => {
+var issueDateDefaulted = (input) => {
   if (!input.date) {
     return [
-      violation("BR-03", "warning", "Invoice issue date is not set. The SDK will default to today's date.", "date")
+      violation("GETPEPPR-ISSUE-DATE-DEFAULTED", "warning", "Invoice issue date is not set. The SDK will default to today's date.", "date")
     ];
   }
   return [];
 };
-var br06 = (input) => {
+var sellerVatRecommendation = (input) => {
   if (input.from && !input.from.vatNumber) {
     return [
-      violation("BR-06", "warning", "Seller party has no VAT number. The gateway will use the account's VAT registration.", "from.vatNumber")
+      violation("GETPEPPR-FROM-VAT-RECOMMENDED", "warning", "Seller party has no VAT number. The gateway will use the account's VAT registration.", "from.vatNumber")
     ];
   }
   return [];
@@ -1957,29 +2034,29 @@ var br07 = (input) => {
   }
   return [];
 };
-var br08 = (input) => {
+var br16 = (input) => {
   if (!input.lines || input.lines.length === 0) {
-    return [violation("BR-08", "error", "Invoice must have at least one line item.", "lines")];
+    return [violation("BR-16", "error", "Invoice must have at least one line item.", "lines")];
   }
   return [];
 };
-var br09 = (input) => {
+var paymentTimingRecommendation = (input) => {
   if (!input.dueDate && !input.paymentTerms) {
     return [
-      violation("BR-09", "warning", "Neither due date nor payment terms specified. At least one is recommended.", "dueDate")
+      violation("GETPEPPR-PAYMENT-TIMING-RECOMMENDED", "warning", "Neither due date nor payment terms specified. At least one is recommended.", "dueDate")
     ];
   }
   return [];
 };
-var br10 = (input) => {
+var buyerOrOrderReferenceRecommendation = (input) => {
   if (!input.buyerReference && !input.orderReference) {
     return [
-      violation("BR-10", "warning", "Neither buyerReference nor orderReference specified. Peppol BIS 3.0 requires at least one.", "buyerReference")
+      violation("GETPEPPR-BUYER-OR-ORDER-REFERENCE-RECOMMENDED", "warning", "Neither buyerReference nor orderReference specified. Peppol BIS 3.0 requires at least one.", "buyerReference")
     ];
   }
   return [];
 };
-var brCo10 = (input) => {
+var lineNetSanity = (input) => {
   const violations = [];
   if (!input.lines)
     return violations;
@@ -1989,12 +2066,12 @@ var brCo10 = (input) => {
     if (!Number.isFinite(net)) {
       const baseQty = line.baseQuantity ?? 1;
       const detail = baseQty === 0 ? "baseQuantity is 0, causing division by zero." : "Computed line amount is not a finite number.";
-      violations.push(violation("BR-CO-10", "error", `Line ${i}: invalid net amount. ${detail}`, `lines[${i}]`));
+      violations.push(violation("GETPEPPR-LINE-NET-SANITY", "error", `Line ${i}: invalid net amount. ${detail}`, `lines[${i}]`));
     }
   }
   return violations;
 };
-var brCo13 = (input) => {
+var computedVatSanity = (input) => {
   if (!input.lines || input.lines.length === 0)
     return [];
   let totalVat = 0;
@@ -2013,17 +2090,17 @@ var brCo13 = (input) => {
   }
   if (!Number.isFinite(totalVat)) {
     return [
-      violation("BR-CO-13", "error", "Computed total VAT amount is not a finite number. Check line amounts and VAT rates.")
+      violation("GETPEPPR-COMPUTED-VAT-SANITY", "error", "Computed total VAT amount is not a finite number. Check line amounts and VAT rates.")
     ];
   }
   if (totalVat < -0.01) {
     return [
-      violation("BR-CO-13", "warning", `Computed total VAT is negative (${totalVat.toFixed(2)}). This is unusual for an invoice.`)
+      violation("GETPEPPR-COMPUTED-VAT-SANITY", "warning", `Computed total VAT is negative (${totalVat.toFixed(2)}). This is unusual for an invoice.`)
     ];
   }
   return [];
 };
-var brCo15 = (input) => {
+var taxInclusiveSanity = (input) => {
   if (!input.lines || input.lines.length === 0)
     return [];
   let lineTotal = 0;
@@ -2046,17 +2123,17 @@ var brCo15 = (input) => {
   const taxInclusive = lineTotal + vatTotal;
   if (!Number.isFinite(taxInclusive)) {
     return [
-      violation("BR-CO-15", "error", "Computed tax-inclusive amount is not a finite number.")
+      violation("GETPEPPR-TAX-INCLUSIVE-SANITY", "error", "Computed tax-inclusive amount is not a finite number.")
     ];
   }
   if (taxInclusive < -0.01) {
     return [
-      violation("BR-CO-15", "warning", `Computed tax-inclusive amount is negative (${taxInclusive.toFixed(2)}). Consider using a credit note instead.`)
+      violation("GETPEPPR-TAX-INCLUSIVE-SANITY", "warning", `Computed tax-inclusive amount is negative (${taxInclusive.toFixed(2)}). Consider using a credit note instead.`)
     ];
   }
   return [];
 };
-var brCo16 = (input) => {
+var payableSanity = (input) => {
   if (!input.lines || input.lines.length === 0)
     return [];
   let lineTotal = 0;
@@ -2082,12 +2159,12 @@ var brCo16 = (input) => {
   const payable = taxInclusive - prepaid + rounding;
   if (!Number.isFinite(payable)) {
     return [
-      violation("BR-CO-16", "error", "Computed payable amount is not a finite number.")
+      violation("GETPEPPR-PAYABLE-SANITY", "error", "Computed payable amount is not a finite number.")
     ];
   }
   if (payable < -0.01) {
     return [
-      violation("BR-CO-16", "warning", `Computed payable amount is negative (${payable.toFixed(2)}). Prepaid amount (${prepaid}) exceeds the invoice total.`)
+      violation("GETPEPPR-PAYABLE-SANITY", "warning", `Computed payable amount is negative (${payable.toFixed(2)}). Check invoice totals, prepaid amount (${prepaid}), and rounding amount (${rounding}).`)
     ];
   }
   return [];
@@ -2295,10 +2372,10 @@ function validateUblBuilderVat(input) {
     ...UBL_BUILDER_VAT_RULES.flatMap((rule) => rule(input))
   ];
 }
-var peppolR004 = (input) => {
+var buyerPeppolIdRequired = (input) => {
   if (!input.to?.peppolId) {
     return [
-      violation("PEPPOL-EN16931-R004", "error", "Buyer electronic address (peppolId) is required for Peppol delivery.", "to.peppolId")
+      violation("GETPEPPR-BUYER-PEPPOL-ID-REQUIRED", "error", "Buyer electronic address (peppolId) is required for Peppol delivery.", "to.peppolId")
     ];
   }
   return [];
@@ -2323,17 +2400,17 @@ var vatCategoryCodes = (input) => {
   (input.charges ?? []).forEach((c, i) => check(c.vatCategory, `charges[${i}].vatCategory`, `Charge ${i}`));
   return violations;
 };
-var peppolR080 = (input) => {
+var unitCodeRecognised = (input) => {
   const violations = [];
   if (!input.lines)
     return violations;
-  const knownCodes = getKnownUnitCodes();
+  const knownCodes = getSdkUnitCodes();
   for (let i = 0; i < input.lines.length; i++) {
     const line = input.lines[i];
     if (line.unit) {
       const resolved = resolveUnit(line.unit);
       if (!knownCodes.has(resolved)) {
-        violations.push(violation("PEPPOL-EN16931-R080", "warning", `Line ${i}: unit "${line.unit}" (resolved: "${resolved}") is not a known UN/ECE Rec20 code. Common codes: EA, HUR, DAY, KGM.`, `lines[${i}].unit`));
+        violations.push(violation("GETPEPPR-UNIT-CODE-RECOGNISED", "warning", `Line ${i}: unit "${line.unit}" (resolved: "${resolved}") is not in the SDK's common unit list. It may still be a valid UN/ECE Rec20/21 code; network validation decides. Common codes: EA, HUR, DAY, KGM.`, `lines[${i}].unit`));
       }
     }
   }
@@ -2342,17 +2419,17 @@ var peppolR080 = (input) => {
 var ALL_RULES = [
   // Required fields (BR)
   br02,
-  br03,
-  br06,
+  issueDateDefaulted,
+  sellerVatRecommendation,
   br07,
-  br08,
-  br09,
-  br10,
+  br16,
+  paymentTimingRecommendation,
+  buyerOrOrderReferenceRecommendation,
   // Calculations (BR-CO)
-  brCo10,
-  brCo13,
-  brCo15,
-  brCo16,
+  lineNetSanity,
+  computedVatSanity,
+  taxInclusiveSanity,
+  payableSanity,
   // Tax categories (one family per category)
   brS05,
   brZ05,
@@ -2367,9 +2444,9 @@ var ALL_RULES = [
   brO10,
   brIc10,
   // Peppol-specific
-  peppolR004,
+  buyerPeppolIdRequired,
   vatCategoryCodes,
-  peppolR080
+  unitCodeRecognised
 ];
 function validateSchematron(input) {
   const errors = [];
@@ -2393,17 +2470,17 @@ function validateSchematron(input) {
 }
 var SDK_SCHEMATRON_RULE_IDS = [
   "BR-02",
-  "BR-03",
-  "BR-06",
+  "GETPEPPR-ISSUE-DATE-DEFAULTED",
+  "GETPEPPR-FROM-VAT-RECOMMENDED",
   "BR-07",
-  "BR-08",
-  "BR-09",
-  "BR-10",
+  "BR-16",
+  "GETPEPPR-PAYMENT-TIMING-RECOMMENDED",
+  "GETPEPPR-BUYER-OR-ORDER-REFERENCE-RECOMMENDED",
   "BR-CL-17",
-  "BR-CO-10",
-  "BR-CO-13",
-  "BR-CO-15",
-  "BR-CO-16",
+  "GETPEPPR-LINE-NET-SANITY",
+  "GETPEPPR-COMPUTED-VAT-SANITY",
+  "GETPEPPR-TAX-INCLUSIVE-SANITY",
+  "GETPEPPR-PAYABLE-SANITY",
   "BR-S-05",
   "BR-Z-05",
   "BR-E-05",
@@ -2427,8 +2504,8 @@ var SDK_SCHEMATRON_RULE_IDS = [
   "BR-G-10",
   "BR-O-10",
   "BR-IC-10",
-  "PEPPOL-EN16931-R004",
-  "PEPPOL-EN16931-R080"
+  "GETPEPPR-BUYER-PEPPOL-ID-REQUIRED",
+  "GETPEPPR-UNIT-CODE-RECOGNISED"
 ];
 
 // ../sdk/dist/core/status-precedence.js
@@ -2456,7 +2533,7 @@ function statusFamily(status) {
 var TERMINAL_FAILURE_STATUSES = STATUS_PRECEDENCE.filter((e) => e.family === "terminal-failure").map((e) => e.status);
 
 // ../sdk/dist/version.js
-var SDK_VERSION = "5.0.0";
+var SDK_VERSION = "5.2.0";
 
 // ../sdk/dist/core/api-result.js
 var API_RESULT_HEADER_NAMES = {
@@ -4081,7 +4158,8 @@ ${validation.errors.map((e) => `  - ${e.field}: ${e.message}${e.suggestion ? ` (
   /**
    * Validate an invoice server-side using the getpeppr gateway's offline SDK-backed checks.
    * The gateway runs SDK validation, verifies UBL XML generation, and evaluates offline
-   * Peppol business rules without sending the invoice to Storecove.
+   * pre-flight checks without sending the invoice to Storecove. This is not a Peppol
+   * conformance verdict.
    *
    * @example
    * ```ts
@@ -5880,7 +5958,7 @@ async function promptEnvironment() {
   });
 }
 function registerLoginCommand(program2) {
-  program2.command("login").description("Save a getpeppr API key to ~/.config/getpeppr/credentials.json").option("--key <key>", "API key \u2014 for CI/scripted use only; visible in `ps` and shell history. Prefer the interactive prompt or GETPEPPR_API_KEY env var.").option("--sandbox", "store as sandbox key (default)").option("--live", "store as live (production) key").action(async (flags) => {
+  program2.command("login").description("Save a getpeppr API key to the credentials file ($XDG_CONFIG_HOME/getpeppr, %APPDATA%\\getpeppr on Windows)").option("--key <key>", "API key \u2014 for CI/scripted use only; visible in `ps` and shell history. Prefer the interactive prompt or GETPEPPR_API_KEY env var.").option("--sandbox", "store as sandbox key (default)").option("--live", "store as live (production) key").action(async (flags) => {
     if (!flags.live && !flags.sandbox && process.stdin.isTTY !== true) {
       exitWithError("Error: --sandbox or --live required when stdin is not a TTY (CI mode).");
     }
@@ -6012,7 +6090,7 @@ function registerWhoamiCommand(program2) {
 // src/commands/logout.ts
 import pc9 from "picocolors";
 function registerLogoutCommand(program2) {
-  program2.command("logout").description("Remove ~/.config/getpeppr/credentials.json").action(() => {
+  program2.command("logout").description("Remove the stored credentials file").action(() => {
     const path = getCredentialsPath();
     const removed = deleteCredentials();
     if (removed) {