@getpeppr/cli 0.5.1 → 0.5.3

package/README.md

@@ -26,7 +26,7 @@ getpeppr init --credit-note          # credit note template
 getpeppr init --force                # overwrite existing file
 ```
 
-The generated template includes a Belgian seller, a German buyer, and two invoice lines — ready to edit, validate, and convert locally.
+The generated template includes a Belgian seller, the sandbox test receiver as buyer, and two invoice lines — ready to edit, validate, convert, and send from a sandbox account.
 
 ### `getpeppr validate` — Validate an invoice
 
@@ -218,12 +218,12 @@ The input file must be a JSON object matching the getpeppr `InvoiceInput` type.
     "country": "BE"
   },
   "to": {
-    "name": "Müller & Partner GmbH",
-    "peppolId": "0204:DE987654321",
-    "street": "Friedrichstraße 123",
-    "city": "Berlin",
-    "postalCode": "10117",
-    "country": "DE"
+    "name": "SPF Economie (test receiver)",
+    "peppolId": "9925:BE0314595348",
+    "street": "Rue du Progrès 50",
+    "city": "Brussels",
+    "postalCode": "1210",
+    "country": "BE"
   },
   "lines": [
     {

package/dist/index.js

@@ -631,6 +631,47 @@ function buildCreditNoteXml(input) {
 </CreditNote>`;
 }
 
+// ../sdk/dist/core/checksums/luhn.js
+function isValidLuhn(input) {
+  if (typeof input !== "string")
+    return false;
+  if (!/^\d+$/.test(input))
+    return false;
+  let sum = 0;
+  let alt = false;
+  for (let i = input.length - 1; i >= 0; i--) {
+    let n = input.charCodeAt(i) - 48;
+    if (alt) {
+      n *= 2;
+      if (n > 9)
+        n -= 9;
+    }
+    sum += n;
+    alt = !alt;
+  }
+  return sum % 10 === 0;
+}
+var LA_POSTE_SIREN = "356000000";
+function isValidLuhnSiret(input) {
+  if (typeof input !== "string")
+    return false;
+  if (!/^\d{14}$/.test(input))
+    return false;
+  const siren = input.slice(0, 9);
+  if (!isValidLuhn(siren))
+    return false;
+  if (isValidLuhn(input))
+    return true;
+  if (siren === LA_POSTE_SIREN) {
+    let sum = 0;
+    for (let i = 0; i < input.length; i++) {
+      sum += input.charCodeAt(i) - 48;
+    }
+    return sum % 5 === 0;
+  }
+  return false;
+}
+
 // ../sdk/dist/core/country-rules.js
 function warn(field, message, ruleId) {
   return { field, message, ruleId };
@@ -665,15 +706,47 @@ function validateBelgiumSeller(input, _errors, warnings) {
     warnings.push(warn("paymentReference", "Belgian sellers typically include a structured communication reference (+++NNN/NNNN/NNNNN+++ format).", "BE-02"));
   }
 }
+var FR_SIREN_RE = /^\d{9}$/;
 var FR_SIRET_RE = /^\d{14}$/;
-var FR_VAT_RE = /^FR[A-Z0-9]{2}\d{9}$/;
+var FR_VAT_RE = /^FR[0-9A-HJ-NP-Z]{2}\d{9}$/;
+var FR_VAT_NUMERIC_KEY_RE = /^FR(\d{2})(\d{9})$/;
+var FR_SIREN_BASED_SCHEMES = ["0002", "0009", "0225"];
+function frVatKey(siren) {
+  return (12 + 3 * (Number(siren) % 97)) % 97;
+}
+function isValidSirenOrSiret(id) {
+  if (FR_SIREN_RE.test(id))
+    return isValidLuhn(id);
+  if (FR_SIRET_RE.test(id))
+    return isValidLuhnSiret(id);
+  return false;
+}
 function validateFrance(input, _errors, warnings) {
-  const { companyId, vatNumber } = input.to ?? {};
-  if (companyId && !FR_SIRET_RE.test(companyId)) {
-    warnings.push(warn("to.companyId", `French company ID (SIRET) should be exactly 14 digits, got "${companyId}".`, "FR-01"));
+  const { companyId, companyIdScheme, vatNumber } = input.to ?? {};
+  const companyIdIsSiren = !companyIdScheme || FR_SIREN_BASED_SCHEMES.includes(companyIdScheme);
+  if (companyId != null && companyId !== "" && companyIdIsSiren) {
+    if (typeof companyId !== "string") {
+      warnings.push(warn("to.companyId", "French company ID should be a string of 9 (SIREN) or 14 (SIRET) digits.", "FR-01"));
+    } else if (!FR_SIREN_RE.test(companyId) && !FR_SIRET_RE.test(companyId)) {
+      warnings.push(warn("to.companyId", `French company ID should be a 9-digit SIREN or 14-digit SIRET, got "${companyId}".`, "FR-01"));
+    } else if (!isValidSirenOrSiret(companyId)) {
+      warnings.push(warn("to.companyId", `French company ID "${companyId}" has an invalid checksum. Verify the SIREN/SIRET.`, "FR-01"));
+    }
   }
-  if (vatNumber && !FR_VAT_RE.test(vatNumber)) {
-    warnings.push(warn("to.vatNumber", `French VAT number should match format FR + 2 characters + 9 digits (SIREN), got "${vatNumber}".`, "FR-02"));
+  if (vatNumber != null && vatNumber !== "") {
+    if (typeof vatNumber !== "string") {
+      warnings.push(warn("to.vatNumber", "French VAT number should be a string matching FR + 2 characters + 9 digits (SIREN).", "FR-02"));
+    } else if (!FR_VAT_RE.test(vatNumber)) {
+      warnings.push(warn("to.vatNumber", `French VAT number should match format FR + 2 characters + 9 digits (SIREN), got "${vatNumber}".`, "FR-02"));
+    } else {
+      const numericKey = FR_VAT_NUMERIC_KEY_RE.exec(vatNumber);
+      if (numericKey) {
+        const [, key, siren] = numericKey;
+        if (Number(key) !== frVatKey(siren)) {
+          warnings.push(warn("to.vatNumber", `French VAT number "${vatNumber}" has an invalid verification key \u2014 expected FR${String(frVatKey(siren)).padStart(2, "0")}${siren}. Likely a typo.`, "FR-03"));
+        }
+      }
+    }
   }
 }
 function validateItaly(input, _errors, warnings) {
@@ -1088,7 +1161,7 @@ function statusFamily(status) {
 var TERMINAL_FAILURE_STATUSES = STATUS_PRECEDENCE.filter((e) => e.family === "terminal-failure").map((e) => e.status);
 
 // ../sdk/dist/version.js
-var SDK_VERSION = "2.3.0";
+var SDK_VERSION = "2.4.0";
 
 // ../sdk/dist/core/client.js
 function findHeaderCaseInsensitive(headers, name) {
@@ -2184,15 +2257,21 @@ ${validation.errors.map((e) => `  - ${e.field}: ${e.message}${e.suggestion ? ` (
    * Transition an invoice to a new state.
    * The gateway validates the state machine — invalid transitions return an error.
    *
+   * `"paid"` on a French CTC invoice reports the payment collection
+   * (« signalement d'encaissement ») to the tax authority via the gateway —
+   * a legal obligation of the French mandate for service invoices. The full
+   * amount is reported from the invoice's stored tax breakdown (no amount to
+   * pass), at most once per invoice: replays return the same report (200),
+   * a concurrent report returns 409, a non-French invoice returns 422.
+   * The invoice's own status becomes `paid` later, when the network confirms
+   * (webhook / polling), not synchronously with this call.
+   *
    * @example
    * ```ts
-   * await peppol.invoices.markAs("inv-123", "accepted");
-   * await peppol.invoices.markAs("inv-123", "paid", {
-   *   commit: "with_mail",
-   *   reason: "Payment received",
-   * });
+   * // France: report that the customer paid this invoice
+   * await peppol.invoices.markAs("inv-123", "paid");
    * ```
-   * @throws {PeppolApiError} 501 if the gateway provider does not support state transitions
+   * @throws {PeppolApiError} 422 for "paid" on a non-French-CTC invoice; 501 for states the provider does not support
    */
   async markAs(id, state, options) {
     return this.adapter.markInvoiceAs(id, state, options);
@@ -3092,13 +3171,15 @@ var INVOICE_TEMPLATE = {
     postalCode: "1050",
     country: "BE"
   },
+  // Sandbox test receiver (GPR-828): the only recipient guaranteed reachable on
+  // the Storecove test network -- real directory companies make sandbox sends fail.
   to: {
-    name: "M\xFCller & Partner GmbH",
-    peppolId: "0204:DE987654321",
-    street: "Friedrichstra\xDFe 123",
-    city: "Berlin",
-    postalCode: "10117",
-    country: "DE"
+    name: "SPF Economie (test receiver)",
+    peppolId: "9925:BE0314595348",
+    street: "Rue du Progr\xE8s 50",
+    city: "Brussels",
+    postalCode: "1210",
+    country: "BE"
   },
   lines: [
     {
@@ -3134,13 +3215,14 @@ var CREDIT_NOTE_TEMPLATE = {
     postalCode: "1050",
     country: "BE"
   },
+  // Sandbox test receiver (GPR-828) \u2014 keep in sync with templates/invoice.ts.
   to: {
-    name: "M\xFCller & Partner GmbH",
-    peppolId: "0204:DE987654321",
-    street: "Friedrichstra\xDFe 123",
-    city: "Berlin",
-    postalCode: "10117",
-    country: "DE"
+    name: "SPF Economie (test receiver)",
+    peppolId: "9925:BE0314595348",
+    street: "Rue du Progr\xE8s 50",
+    city: "Brussels",
+    postalCode: "1210",
+    country: "BE"
   },
   lines: [
     {