@happyvertical/smrt-expenses 0.57.3 → 0.57.5

package/dist/chunks/Expense-7afLcUTn.js

@@ -1,681 +0,0 @@
-import { ExpenseError } from "../types.js";
-import { ObjectRegistry, SmrtObject, crossPackageRef, field, foreignKey, isPostgresDatabase, isUniqueViolationError, smrt } from "@happyvertical/smrt-core";
-import { TenantScoped, getTenantId, tenantId } from "@happyvertical/smrt-tenancy";
-import { ContractLineItemCollection, PurchaseContractCollection, VendorCollection } from "@happyvertical/smrt-commerce";
-import { createHash } from "node:crypto";
-//#region src/validation.ts
-var CATEGORY_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var ISO_CURRENCY = /^[A-Z]{3}$/;
-var ISO_DATE = /^(\d{4})-(\d{2})-(\d{2})$/;
-var QUALIFIED_CLASS = /^[^\s:]+:[A-Za-z_$][\w$]*$/;
-var SHA256_HEX = /^[0-9a-f]{64}$/;
-function assertMinorUnits(model, label, fieldName, value, code = "EXPENSE_INVALID") {
-	if (!Number.isSafeInteger(value) || value < 0) throw new ExpenseError(code, `${model} ${label}: ${fieldName} must be a non-negative integer number of minor units (cents) \u2014 got ${value}. $19.99 is 1999.`);
-}
-function assertIsoCurrency(model, label, value) {
-	if (!ISO_CURRENCY.test(value)) throw new ExpenseError("EXPENSE_INVALID", `${model} ${label}: currency must be a three-letter ISO 4217 code (for example 'USD'), got '${value}'.`);
-}
-function assertIsoDate(model, label, fieldName, value) {
-	const match = ISO_DATE.exec(value);
-	if (!(match !== null && (() => {
-		const [year, month, day] = match.slice(1).map(Number);
-		const date = new Date(Date.UTC(year, month - 1, day));
-		return date.getUTCFullYear() === year && date.getUTCMonth() === month - 1 && date.getUTCDate() === day;
-	})())) throw new ExpenseError("EXPENSE_INVALID", `${model} ${label}: ${fieldName} must be a calendar date written YYYY-MM-DD, got '${value}'.`);
-}
-function assertQualifiedClassName(model, label, value) {
-	if (!QUALIFIED_CLASS.test(value)) throw new ExpenseError("EXPENSE_INVALID", `${model} ${label}: costObjectType must be a qualified class name such as '@happyvertical/smrt-projects:Project', got '${value}'.`);
-}
-function normalizeSha256(model, label, value) {
-	const digest = String(value ?? "").trim().toLowerCase();
-	if (!SHA256_HEX.test(digest)) throw new ExpenseError("EXPENSE_RECEIPT_INVALID", `${model} ${label}: contentSha256 must be a 64-character hex SHA-256 digest of the file bytes.`);
-	return digest;
-}
-function computeContentSha256(data) {
-	return createHash("sha256").update(data).digest("hex");
-}
-function instantMs(value) {
-	if (value === null || value === void 0 || value === "") return null;
-	const ms = value instanceof Date ? value.getTime() : new Date(String(value)).getTime();
-	return Number.isNaN(ms) ? null : ms;
-}
-async function pinNaturalKey(model, object, persisted) {
-	await object.getSlug();
-	if (!object.isPersisted) {
-		if (persisted) throw new ExpenseError("EXPENSE_IDENTITY_CONFLICT", `${model} ${object.id} already exists; load it and save the loaded instance instead of creating one with its id.`);
-		object.requireInsertOnSave();
-		return true;
-	}
-	if (persisted && (String(persisted.slug ?? "") !== String(object.slug ?? "") || String(persisted.context ?? "") !== String(object.context ?? ""))) throw new ExpenseError("EXPENSE_IDENTITY_CONFLICT", `${model} ${object.id}: slug and context cannot change; they would point the save at a different row.`);
-	return false;
-}
-function identityConflict(model, object, cause) {
-	return new ExpenseError("EXPENSE_IDENTITY_CONFLICT", `${model} ${object.id}: another row already uses slug '${object.slug}' in this tenant; a new ${model} cannot take it over.`, { cause });
-}
-function effectiveTenant(tenantId) {
-	return tenantId || getTenantId() || null;
-}
-function normalizeTenantId(tenantId) {
-	return tenantId || null;
-}
-//#endregion
-//#region src/financial-facts.ts
-function invalid(message) {
-	throw new ExpenseError("EXPENSE_INVALID", `Expense financial breakdown: ${message}`);
-}
-function record(value, keys) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return invalid("expected an object.");
-	const object = value;
-	if (Object.keys(object).length !== keys.length || keys.some((key) => !Object.hasOwn(object, key))) return invalid("missing or unknown fields.");
-	return object;
-}
-function minor(value) {
-	if (typeof value !== "number" || !Number.isSafeInteger(value)) return invalid("amounts must be safe integer minor units.");
-	return BigInt(value);
-}
-function safe(value) {
-	const result = Number(value);
-	if (!Number.isSafeInteger(result)) return invalid("unsafe calculated amount.");
-	return result;
-}
-function expenseCostBasis(value, amount, currency) {
-	const facts = record(value, [
-		"currency",
-		"subtotal",
-		"taxes",
-		"total"
-	]);
-	if (typeof facts.currency !== "string" || facts.currency !== currency) return invalid("currency must match the expense.");
-	assertIsoCurrency("Expense", "<financial-breakdown>", facts.currency);
-	const total = minor(facts.total);
-	const subtotal = minor(facts.subtotal);
-	if (total !== minor(amount)) return invalid("total must match the expense amount.");
-	const consistent = (part) => part === 0n || (total > 0n ? part > 0n : total < 0n && part < 0n);
-	if (!consistent(subtotal)) return invalid("subtotal sign must match total.");
-	if (!Array.isArray(facts.taxes)) return invalid("taxes must be an explicit array.");
-	let tax = 0n;
-	let recoverable = 0n;
-	const codes = /* @__PURE__ */ new Set();
-	for (const item of facts.taxes) {
-		const component = record(item, [
-			"code",
-			"amount",
-			"recoverableAmount"
-		]);
-		if (typeof component.code !== "string" || !/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(component.code) || component.code.length > 64 || codes.has(component.code)) return invalid("tax codes must be unique lower-case kebab-case identifiers.");
-		codes.add(component.code);
-		const charged = minor(component.amount);
-		const recovered = minor(component.recoverableAmount);
-		const chargedMagnitude = charged < 0n ? -charged : charged;
-		const recoveredMagnitude = recovered < 0n ? -recovered : recovered;
-		if (!consistent(charged) || !consistent(recovered) || recoveredMagnitude > chargedMagnitude) return invalid("tax and recovery must share the total sign, with recovery bounded by tax.");
-		tax += charged;
-		recoverable += recovered;
-	}
-	if (subtotal + tax !== total) return invalid("subtotal plus taxes must equal total.");
-	return {
-		currency,
-		subtotal: safe(subtotal),
-		taxTotal: safe(tax),
-		recoverableTax: safe(recoverable),
-		nonRecoverableTax: safe(tax - recoverable),
-		total: safe(total),
-		costBasis: safe(total - recoverable)
-	};
-}
-function parseExpenseFinancialBreakdown(stored, amount, currency) {
-	if (stored === "" || stored === null || stored === void 0) return null;
-	if (typeof stored !== "string") return invalid("storage must be JSON text.");
-	let parsed;
-	try {
-		parsed = JSON.parse(stored);
-	} catch {
-		return invalid("invalid JSON.");
-	}
-	expenseCostBasis(parsed, amount, currency);
-	return parsed;
-}
-//#endregion
-//#region src/models/Expense.ts
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, {
-	enumerable: true,
-	configurable: true,
-	writable: true,
-	value
-}) : obj[key] = value;
-var __decorateClass = (decorators, target, key, kind) => {
-	var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
-	for (var i = decorators.length - 1, decorator; i >= 0; i--) if (decorator = decorators[i]) result = (kind ? decorator(target, key, result) : decorator(result)) || result;
-	if (kind && result) __defProp(target, key, result);
-	return result;
-};
-var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
-var PROFILE = "@happyvertical/smrt-profiles:Profile";
-var REVIEW_TRANSITIONS = {
-	review: {
-		from: ["unreviewed"],
-		to: "reviewed"
-	},
-	reject: {
-		from: ["unreviewed", "reviewed"],
-		to: "rejected"
-	},
-	markDuplicate: {
-		from: ["unreviewed", "reviewed"],
-		to: "rejected"
-	},
-	reopen: {
-		from: ["reviewed", "rejected"],
-		to: "unreviewed"
-	}
-};
-var LOCKED_WHEN_REVIEWED = [
-	["amount", "amount"],
-	["financialBreakdown", "financial_breakdown"],
-	["paidByName", "paid_by_name"],
-	["refundOfId", "refund_of_id"],
-	["currency", "currency"],
-	["incurredOn", "incurred_on"],
-	["recordedAt", "recorded_at"],
-	["category", "category"],
-	["costObjectType", "cost_object_type"],
-	["costObjectId", "cost_object_id"],
-	["vendorId", "vendor_id"],
-	["commitmentId", "commitment_id"],
-	["commitmentLineId", "commitment_line_id"],
-	["paidBy", "paid_by"],
-	["paidByProfileId", "paid_by_profile_id"]
-];
-var authorizedTransition = /* @__PURE__ */ new WeakMap();
-function sameReviewState(a, b) {
-	return a.status === b.status && a.reviewer === b.reviewer && a.reviewedAtMs === b.reviewedAtMs && a.note === b.note && a.duplicateOf === b.duplicateOf;
-}
-function asNullableString(value) {
-	return value === null || value === void 0 || value === "" ? null : String(value);
-}
-var Expense = class extends SmrtObject {
-	tenantId = null;
-	costObjectType = "";
-	costObjectId = "";
-	category = "other";
-	description = "";
-	amount = 0;
-	currency = "";
-	financialBreakdown = null;
-	paidByName = null;
-	refundOfId = null;
-	incurredOn = "";
-	recordedAt = null;
-	recordedByProfileId = null;
-	paidBy = "company";
-	paidByProfileId = null;
-	vendorId = null;
-	commitmentId = null;
-	commitmentLineId = null;
-	reviewStatus = "unreviewed";
-	reviewedByProfileId = null;
-	reviewedAt = null;
-	reviewNote = "";
-	duplicateOfId = null;
-	reimbursable = false;
-	reimbursedAt = null;
-	reimbursementReference = "";
-	constructor(options = {}) {
-		super(options);
-		if (options.tenantId !== void 0) this.tenantId = options.tenantId;
-		if (options.costObjectType !== void 0) this.costObjectType = options.costObjectType;
-		if (options.costObjectId !== void 0) this.costObjectId = options.costObjectId;
-		if (options.category !== void 0) this.category = options.category;
-		if (options.description !== void 0) this.description = options.description;
-		if (options.amount !== void 0) this.amount = options.amount;
-		if (options.currency !== void 0) this.currency = options.currency;
-		if (options.financialBreakdown !== void 0) this.financialBreakdown = options.financialBreakdown;
-		if (options.paidByName !== void 0) this.paidByName = options.paidByName;
-		if (options.refundOfId !== void 0) this.refundOfId = options.refundOfId;
-		if (options.incurredOn !== void 0) this.incurredOn = options.incurredOn;
-		if (options.recordedAt !== void 0) this.recordedAt = options.recordedAt;
-		if (options.recordedByProfileId !== void 0) this.recordedByProfileId = options.recordedByProfileId;
-		if (options.paidBy !== void 0) this.paidBy = options.paidBy;
-		if (options.paidByProfileId !== void 0) this.paidByProfileId = options.paidByProfileId;
-		if (options.vendorId !== void 0) this.vendorId = options.vendorId;
-		if (options.commitmentId !== void 0) this.commitmentId = options.commitmentId;
-		if (options.commitmentLineId !== void 0) this.commitmentLineId = options.commitmentLineId;
-		if (options.reimbursable !== void 0) this.reimbursable = options.reimbursable;
-		if (options.reimbursedAt !== void 0) this.reimbursedAt = options.reimbursedAt;
-		if (options.reimbursementReference !== void 0) this.reimbursementReference = options.reimbursementReference;
-	}
-	/** Read validated supplier facts, or null when none were recorded. */
-	getFinancialBreakdown() {
-		return parseExpenseFinancialBreakdown(this.financialBreakdown, this.amount, this.currency);
-	}
-	/** Set complete supplier facts; null explicitly clears facts on an unreviewed row. */
-	setFinancialBreakdown(value) {
-		if (value === null) {
-			this.financialBreakdown = null;
-			return;
-		}
-		expenseCostBasis(value, this.amount, this.currency);
-		this.financialBreakdown = JSON.stringify(value);
-	}
-	/** Return exact retained purchase cost; legacy unknown tax facts return null. */
-	getCostBasis() {
-		const facts = this.getFinancialBreakdown();
-		return facts === null ? null : expenseCostBasis(facts, this.amount, this.currency);
-	}
-	/** True when the person who paid has been paid back. */
-	isReimbursed() {
-		return this.reimbursedAt !== null && this.reimbursedAt !== void 0;
-	}
-	/** True when this expense counts toward reviewed totals and drawdown. */
-	isCountable() {
-		return this.reviewStatus === "reviewed" && !this.duplicateOfId;
-	}
-	/**
-	* Accept the expense as a real cost: `unreviewed → reviewed`.
-	*
-	* This is the separately authorizable review action: gate it in your route
-	* or service (for example on `expenses.review`). The expense must already
-	* be saved and must not be marked a duplicate.
-	*
-	* @throws {ExpenseError} `EXPENSE_REVIEW_TRANSITION` from any other state.
-	*/
-	async review(input) {
-		const reviewer = requireReviewer(input?.reviewerProfileId);
-		return this.transition("review", () => {
-			this.reviewStatus = "reviewed";
-			this.reviewedByProfileId = reviewer;
-			this.reviewedAt = input.at ?? /* @__PURE__ */ new Date();
-			this.reviewNote = input.note ?? "";
-			this.duplicateOfId = null;
-		});
-	}
-	/**
-	* Refuse the expense: `unreviewed | reviewed → rejected`. A rejected
-	* expense is kept and shown, and never counted.
-	*
-	* @throws {ExpenseError} `EXPENSE_REVIEW_TRANSITION` from `rejected`, or
-	*   `EXPENSE_INVALID` without a reason.
-	*/
-	async reject(input) {
-		const reviewer = requireReviewer(input?.reviewerProfileId);
-		const reason = (input.reason ?? "").trim();
-		if (!reason) throw new ExpenseError("EXPENSE_INVALID", "A rejection needs a reason.");
-		return this.transition("reject", () => {
-			this.reviewStatus = "rejected";
-			this.reviewedByProfileId = reviewer;
-			this.reviewedAt = input.at ?? /* @__PURE__ */ new Date();
-			this.reviewNote = reason;
-			this.duplicateOfId = null;
-		});
-	}
-	/**
-	* Mark this expense a duplicate of another expense in the same tenant:
-	* `unreviewed | reviewed → rejected` with {@link Expense.duplicateOfId}
-	* set. A duplicate never counts toward any total.
-	*
-	* @throws {ExpenseError} `EXPENSE_INVALID` when the target is this expense
-	*   or is not visible in this expense's tenant.
-	*/
-	async markDuplicate(input) {
-		const reviewer = requireReviewer(input?.reviewerProfileId);
-		const targetId = String(input.duplicateOfId ?? "").trim();
-		if (!targetId || targetId === this.id) throw new ExpenseError("EXPENSE_INVALID", "An expense can only be a duplicate of a different expense.");
-		const { ExpenseCollection } = await import("../index.js").then((n) => n.t);
-		const target = await (await ExpenseCollection.create({ db: this.db })).get({ id: targetId });
-		if (!target || (target.tenantId ?? null) !== (this.tenantId ?? null)) throw new ExpenseError("EXPENSE_INVALID", `Expense ${targetId} was not found in this expense's tenant.`);
-		return this.transition("markDuplicate", () => {
-			this.reviewStatus = "rejected";
-			this.reviewedByProfileId = reviewer;
-			this.reviewedAt = input.at ?? /* @__PURE__ */ new Date();
-			this.reviewNote = `Duplicate of expense ${targetId}`;
-			this.duplicateOfId = targetId;
-		});
-	}
-	/**
-	* Send the expense back for review: `reviewed | rejected → unreviewed`.
-	* Clears the reviewer, the review time and any duplicate marker.
-	*
-	* @throws {ExpenseError} `EXPENSE_REVIEW_TRANSITION` from `unreviewed`.
-	*/
-	async reopen(input) {
-		requireReviewer(input?.reviewerProfileId);
-		return this.transition("reopen", () => {
-			this.reviewStatus = "unreviewed";
-			this.reviewedByProfileId = null;
-			this.reviewedAt = null;
-			this.reviewNote = input.note ?? "";
-			this.duplicateOfId = null;
-		});
-	}
-	/**
-	* Record that the person who paid has been paid back. Recording only:
-	* paying happens in payroll or payables, and this never changes the review
-	* state.
-	*
-	* @throws {ExpenseError} `EXPENSE_INVALID` unless the expense is
-	*   `reimbursable`.
-	*/
-	async markReimbursed(input = {}) {
-		if (!this.reimbursable) throw new ExpenseError("EXPENSE_INVALID", `Expense ${this.id} is not owed back to anyone.`);
-		this.reimbursedAt = input.at ?? /* @__PURE__ */ new Date();
-		if (input.reference !== void 0) this.reimbursementReference = input.reference;
-		return this.save();
-	}
-	/**
-	* Load the cost object this expense is charged to, through its registered
-	* collection (so tenant interceptors apply). Returns `null` when unset,
-	* when the type is not registered, when the row is gone, or when the row
-	* belongs to a different tenant than this expense.
-	*/
-	async getCostObject() {
-		if (!this.costObjectType || !this.costObjectId) return null;
-		let registered = ObjectRegistry.getClassByQualifiedName(this.costObjectType);
-		if (!registered) {
-			if (!await ObjectRegistry.tryLoadFromExternalPackage(this.costObjectType)) return null;
-			registered = ObjectRegistry.getClassByQualifiedName(this.costObjectType);
-		}
-		if (!registered) return null;
-		const target = await (await ObjectRegistry.getCollection(registered.qualifiedName ?? this.costObjectType, { db: this.db })).get({ id: this.costObjectId });
-		if (!target) return null;
-		const targetTenant = target.tenantId;
-		if (targetTenant !== void 0 && targetTenant !== null && this.tenantId !== null && targetTenant !== this.tenantId) return null;
-		return target;
-	}
-	/**
-	* Validate, enforce the review and reviewed-field locks, check the
-	* commitment, then persist.
-	*/
-	async save() {
-		this.normalize();
-		this.validateShape();
-		return this.withTransaction(() => this.saveValidated());
-	}
-	/** Keep both directions of refund validation and the write on one executor. */
-	async saveValidated() {
-		await this.lockRefundRows();
-		const persisted = await this.readPersisted();
-		const inserting = await pinNaturalKey("Expense", this, persisted);
-		if (persisted && String(persisted.tenant_id ?? "") !== String(effectiveTenant(this.tenantId) ?? "")) throw new ExpenseError("EXPENSE_INVALID", `Expense ${this.id}: its tenant cannot change after it is recorded.`);
-		this.assertReviewFields(persisted);
-		this.assertReviewedLock(persisted);
-		await this.assertCommitment(persisted);
-		await this.assertVendor(persisted);
-		await this.assertInboundRefunds(persisted);
-		await this.assertRefund(persisted);
-		if (!this.recordedAt) this.recordedAt = /* @__PURE__ */ new Date();
-		try {
-			return await super.save();
-		} catch (error) {
-			if (inserting && isUniqueViolationError(error)) throw identityConflict("Expense", this, error);
-			throw error;
-		}
-	}
-	normalize() {
-		this.tenantId = normalizeTenantId(this.tenantId);
-		this.currency = String(this.currency ?? "").trim().toUpperCase();
-		this.category = String(this.category ?? "").trim();
-		this.costObjectType = String(this.costObjectType ?? "").trim();
-		this.costObjectId = String(this.costObjectId ?? "").trim();
-		this.incurredOn = String(this.incurredOn ?? "").trim();
-		this.vendorId = asNullableString(this.vendorId);
-		this.commitmentId = asNullableString(this.commitmentId);
-		this.commitmentLineId = asNullableString(this.commitmentLineId);
-		this.paidByProfileId = asNullableString(this.paidByProfileId);
-		this.recordedByProfileId = asNullableString(this.recordedByProfileId);
-	}
-	validateShape() {
-		const label = this.id || "<new>";
-		assertMinorUnits("Expense", label, "amount", this.refundOfId && typeof this.amount === "number" ? Math.abs(this.amount) : this.amount);
-		assertIsoCurrency("Expense", label, this.currency);
-		assertIsoDate("Expense", label, "incurredOn", this.incurredOn);
-		if (!CATEGORY_PATTERN.test(this.category) || this.category.length > 64) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: category must be lowercase kebab-case (for example 'outside-service'), got '${this.category}'.`);
-		if (Boolean(this.costObjectType) !== Boolean(this.costObjectId)) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: costObjectType and costObjectId are set together or not at all.`);
-		if (this.costObjectType) assertQualifiedClassName("Expense", label, this.costObjectType);
-		this.getFinancialBreakdown();
-		if (this.paidBy === "third-party" ? typeof this.paidByName !== "string" || !this.paidByName.trim() : this.paidByName !== null && this.paidByName !== "") throw new ExpenseError("EXPENSE_INVALID", "Only a third-party payer requires paidByName.");
-		if (this.refundOfId !== null && (typeof this.refundOfId !== "string" || !this.refundOfId.trim())) throw new ExpenseError("EXPENSE_INVALID", "refundOfId must name a source expense or be null.");
-		if (this.paidBy !== "company" && this.paidBy !== "person" && this.paidBy !== "third-party") throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: paidBy must be 'company', 'person' or 'third-party'.`);
-		if (this.paidBy === "person" && !this.paidByProfileId) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: an expense paid by a person names that person (paidByProfileId).`);
-		if (this.paidBy !== "person" && this.paidByProfileId) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: paidByProfileId is only set when paidBy is 'person'.`);
-		if (this.reimbursable && this.paidBy !== "person") throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: only an expense a person paid can be owed back.`);
-		if (this.reimbursedAt && !this.reimbursable) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: reimbursedAt needs reimbursable.`);
-		if (this.reviewStatus === "reviewed" && this.duplicateOfId) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: a reviewed expense cannot be marked a duplicate.`);
-		if (this.commitmentLineId && !this.commitmentId) throw new ExpenseError("EXPENSE_INVALID", `Expense ${label}: a commitment line needs its commitment (commitmentId).`);
-	}
-	/**
-	* Read the stored row directly. The authoritative prior state for the
-	* review and lock guards: the in-memory copy may have been mass-assigned.
-	*/
-	async readPersisted() {
-		if (!this.id) return null;
-		return await this.db.get(this.tableName, { id: this.id }) ?? null;
-	}
-	reviewState() {
-		return {
-			status: this.reviewStatus,
-			reviewer: asNullableString(this.reviewedByProfileId),
-			reviewedAtMs: instantMs(this.reviewedAt),
-			note: this.reviewNote ?? "",
-			duplicateOf: asNullableString(this.duplicateOfId)
-		};
-	}
-	/**
-	* Refuse any review-field change a transition did not authorize. The token
-	* binds the transition's complete resulting state — status, reviewer,
-	* time, note and duplicate marker — so a field set directly beside a
-	* legitimate `review()` / `reject()` cannot ride along with it.
-	*/
-	assertReviewFields(persisted) {
-		const token = authorizedTransition.get(this);
-		const prior = {
-			status: persisted?.review_status ?? "unreviewed",
-			reviewer: asNullableString(persisted?.reviewed_by_profile_id),
-			reviewedAtMs: instantMs(persisted?.reviewed_at),
-			note: String(persisted?.review_note ?? ""),
-			duplicateOf: asNullableString(persisted?.duplicate_of_id)
-		};
-		const current = this.reviewState();
-		if (sameReviewState(current, prior)) return;
-		if (!token || token.from !== prior.status || !sameReviewState(current, token.expected)) throw new ExpenseError("EXPENSE_REVIEW_FIELDS_LOCKED", `Expense ${this.id || "<new>"}: review state changes only through review(), reject(), markDuplicate() or reopen().`);
-	}
-	assertReviewedLock(persisted) {
-		if (persisted?.review_status !== "reviewed") return;
-		const self = this;
-		for (const [fieldName, column] of LOCKED_WHEN_REVIEWED) {
-			const before = persisted[column];
-			const after = self[fieldName];
-			if (!(fieldName === "amount" ? Number(before) === Number(after) : fieldName === "recordedAt" ? instantMs(before) === instantMs(after) : asNullableString(before) === asNullableString(after))) throw new ExpenseError("EXPENSE_REVIEW_FIELDS_LOCKED", `Expense ${this.id}: ${fieldName} of a reviewed expense cannot change; reopen() it first.`);
-		}
-	}
-	/**
-	* A matched commitment must be visible in this expense's tenant, owned by
-	* the same tenant, and in the same currency; a matched line must belong to
-	* it. Mixed currencies are refused here rather than summed later.
-	*
-	* Checked when the match is made or changed, not on every save: a later
-	* change to the commitment (its currency, or its deletion) must not stop
-	* an unrelated save such as recording a reimbursement.
-	*/
-	async assertCommitment(persisted) {
-		if (!this.commitmentId) return;
-		if (persisted && asNullableString(persisted.commitment_id) === this.commitmentId && asNullableString(persisted.commitment_line_id) === this.commitmentLineId && String(persisted.currency ?? "") === this.currency) return;
-		const commitment = await (await PurchaseContractCollection.create({ db: this.db })).get({ id: this.commitmentId });
-		const owner = effectiveTenant(this.tenantId);
-		if (!commitment || !sameTenant(commitment.tenantId, owner)) throw new ExpenseError("EXPENSE_COMMITMENT_MISMATCH", `Expense ${this.id || "<new>"}: commitment ${this.commitmentId} was not found in this expense's tenant.`);
-		if (String(commitment.currency).toUpperCase() !== this.currency) throw new ExpenseError("EXPENSE_COMMITMENT_MISMATCH", `Expense ${this.id || "<new>"}: currency ${this.currency} does not match commitment ${this.commitmentId} (${commitment.currency}). Amounts in different currencies are never summed.`);
-		if (this.commitmentLineId) {
-			const line = await (await ContractLineItemCollection.create({ db: this.db })).get({ id: this.commitmentLineId });
-			if (!line || line.contractId !== this.commitmentId) throw new ExpenseError("EXPENSE_COMMITMENT_MISMATCH", `Expense ${this.id || "<new>"}: line ${this.commitmentLineId} is not a line of commitment ${this.commitmentId}.`);
-		}
-	}
-	/**
-	* A vendor must be visible in, and owned by, the expense's tenant. A
-	* `crossPackageRef` neither validates its target nor creates a foreign
-	* key, so without this an expense in one tenant could name another
-	* tenant's vendor. Checked when the vendor is set or changed.
-	*/
-	async assertVendor(persisted) {
-		if (!this.vendorId) return;
-		if (persisted && asNullableString(persisted.vendor_id) === this.vendorId) return;
-		const vendor = await (await VendorCollection.create({ db: this.db })).get({ id: this.vendorId });
-		const owner = effectiveTenant(this.tenantId);
-		if (!vendor || !sameTenant(vendor.tenantId, owner)) throw new ExpenseError("EXPENSE_VENDOR_MISMATCH", `Expense ${this.id || "<new>"}: vendor ${this.vendorId} was not found in this expense's tenant.`);
-	}
-	/**
-	* Source edits and refund writes contend on the same source row. Acquire
-	* rows in deterministic order before either relationship check, and hold
-	* them through commit. SQLite's write transaction supplies serialization.
-	*/
-	async lockRefundRows() {
-		if (!isPostgresDatabase(this.db)) return;
-		const ids = [...new Set([this.id, this.refundOfId].filter((id) => Boolean(id)))].sort();
-		if (ids.length === 0) return;
-		const table = `"${this.tableName.replace(/"/g, "\"\"")}"`;
-		await this.db.query(`SELECT id FROM ${table} WHERE id IN (${ids.map(() => "?").join(", ")}) AND tenant_id IS NOT DISTINCT FROM ? ORDER BY id FOR UPDATE`, ...ids, effectiveTenant(this.tenantId));
-	}
-	/** Refuse source corrections that invalidate any same-owner refund. */
-	async assertInboundRefunds(persisted) {
-		if (!persisted || Number(persisted.amount) === this.amount && String(persisted.currency ?? "") === this.currency && asNullableString(persisted.refund_of_id) === this.refundOfId) return;
-		const { ExpenseCollection } = await import("../index.js").then((n) => n.t);
-		if ((await (await ExpenseCollection.create({ db: this.db })).list({
-			where: {
-				refundOfId: this.id,
-				tenantId: effectiveTenant(this.tenantId),
-				...this.amount > 0 && !this.refundOfId ? { "currency !=": this.currency } : {}
-			},
-			select: ["id"],
-			limit: 1,
-			cache: false
-		})).length > 0) throw new ExpenseError("EXPENSE_INVALID", "A referenced refund source must remain positive, non-refund, and in the currency of its refunds.");
-	}
-	async assertRefund(persisted) {
-		if (!this.refundOfId) return;
-		if (this.refundOfId === this.id || this.amount >= 0) throw new ExpenseError("EXPENSE_INVALID", "A refund must be negative and name a different positive source expense.");
-		const { ExpenseCollection } = await import("../index.js").then((n) => n.t);
-		const source = await (await ExpenseCollection.create({ db: this.db })).get({ id: this.refundOfId }, { cache: false });
-		if (!source || !sameTenant(source.tenantId, effectiveTenant(this.tenantId)) || source.currency !== this.currency || source.amount <= 0 || source.refundOfId) throw new ExpenseError("EXPENSE_INVALID", "Refund source must be a positive non-refund expense in the same tenant and currency.");
-		if (!persisted || persisted.refund_of_id !== this.refundOfId) {
-			if (!source.updated_at) throw new ExpenseError("EXPENSE_INVALID", "Refund source has no revision.");
-			await source.claimRevision(source.updated_at);
-		}
-	}
-	async transition(action, apply) {
-		const rule = REVIEW_TRANSITIONS[action];
-		const persisted = await this.readPersisted();
-		if (!persisted) throw new ExpenseError("EXPENSE_REVIEW_TRANSITION", `Expense ${this.id || "<new>"}: save the expense before ${action}().`);
-		const from = String(persisted.review_status);
-		if (!rule.from.includes(from)) throw new ExpenseError("EXPENSE_REVIEW_TRANSITION", `Expense ${this.id}: cannot ${action}() an expense that is ${from}.`);
-		if (action === "review" && persisted.duplicate_of_id) throw new ExpenseError("EXPENSE_REVIEW_TRANSITION", `Expense ${this.id}: a duplicate cannot be reviewed; reopen() it first.`);
-		const snapshot = {
-			reviewStatus: this.reviewStatus,
-			reviewedByProfileId: this.reviewedByProfileId,
-			reviewedAt: this.reviewedAt,
-			reviewNote: this.reviewNote,
-			duplicateOfId: this.duplicateOfId
-		};
-		apply();
-		authorizedTransition.set(this, {
-			from,
-			expected: this.reviewState()
-		});
-		try {
-			return await this.save();
-		} catch (error) {
-			Object.assign(this, snapshot);
-			throw error;
-		} finally {
-			authorizedTransition.delete(this);
-		}
-	}
-};
-__publicField(Expense, "__smrtPackage__", "@happyvertical/smrt-expenses");
-__decorateClass([tenantId({ nullable: true })], Expense.prototype, "tenantId", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "costObjectType", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "costObjectId", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "category", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "description", 2);
-__decorateClass([field({ type: "integer" })], Expense.prototype, "amount", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "currency", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "financialBreakdown", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "paidByName", 2);
-__decorateClass([foreignKey("Expense", { onDelete: "RESTRICT" })], Expense.prototype, "refundOfId", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "incurredOn", 2);
-__decorateClass([field({ type: "datetime" })], Expense.prototype, "recordedAt", 2);
-__decorateClass([crossPackageRef(PROFILE)], Expense.prototype, "recordedByProfileId", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "paidBy", 2);
-__decorateClass([crossPackageRef(PROFILE)], Expense.prototype, "paidByProfileId", 2);
-__decorateClass([crossPackageRef("@happyvertical/smrt-commerce:Vendor")], Expense.prototype, "vendorId", 2);
-__decorateClass([crossPackageRef("@happyvertical/smrt-commerce:PurchaseContract", { validateSubtype: true })], Expense.prototype, "commitmentId", 2);
-__decorateClass([crossPackageRef("@happyvertical/smrt-commerce:ContractLineItem")], Expense.prototype, "commitmentLineId", 2);
-__decorateClass([field({
-	type: "text",
-	readonly: true
-})], Expense.prototype, "reviewStatus", 2);
-__decorateClass([crossPackageRef(PROFILE, { readonly: true })], Expense.prototype, "reviewedByProfileId", 2);
-__decorateClass([field({
-	type: "datetime",
-	readonly: true
-})], Expense.prototype, "reviewedAt", 2);
-__decorateClass([field({
-	type: "text",
-	readonly: true
-})], Expense.prototype, "reviewNote", 2);
-__decorateClass([foreignKey("Expense", {
-	readonly: true,
-	onDelete: "SET NULL"
-})], Expense.prototype, "duplicateOfId", 2);
-__decorateClass([field({ type: "boolean" })], Expense.prototype, "reimbursable", 2);
-__decorateClass([field({ type: "datetime" })], Expense.prototype, "reimbursedAt", 2);
-__decorateClass([field({ type: "text" })], Expense.prototype, "reimbursementReference", 2);
-Expense = __decorateClass([TenantScoped({ mode: "optional" }), smrt({
-	tableName: "expenses",
-	api: { include: [
-		"record",
-		"attachReceipt",
-		"recordReview",
-		"recordReimbursement"
-	] },
-	mcp: { include: [] },
-	cli: false,
-	indexes: [
-		{
-			name: "expenses_cost_object_idx",
-			columns: [
-				"tenantId",
-				"costObjectType",
-				"costObjectId",
-				"incurredOn"
-			]
-		},
-		{
-			name: "expenses_commitment_review_idx",
-			columns: [
-				"tenantId",
-				"commitmentId",
-				"reviewStatus"
-			]
-		},
-		{
-			name: "expenses_review_status_idx",
-			columns: [
-				"tenantId",
-				"reviewStatus",
-				"incurredOn"
-			]
-		}
-	]
-})], Expense);
-function requireReviewer(reviewerProfileId) {
-	const reviewer = String(reviewerProfileId ?? "").trim();
-	if (!reviewer) throw new ExpenseError("EXPENSE_INVALID", "A review decision names its reviewer (reviewerProfileId).");
-	return reviewer;
-}
-function sameTenant(a, b) {
-	return (a ?? null) === (b ?? null);
-}
-//#endregion
-export { identityConflict as a, pinNaturalKey as c, effectiveTenant as i, assertMinorUnits as n, normalizeSha256 as o, computeContentSha256 as r, normalizeTenantId as s, Expense as t };
-
-//# sourceMappingURL=Expense-7afLcUTn.js.map