@orvello/sdk 0.7.1 → 0.7.3

package/CONTRACT_SHA256

@@ -1 +1 @@
-bab3c1b429c28f8ac8aea5f9325c1205c6a29e2481efc868ad47a74d6587cc3d
+b414bb56aaac36ef5eae18b77139b36fed7ca09c638a70472b00acb2650aedd9

package/dist/contract.cjs

@@ -39,83 +39,131 @@ var apiMountPrefixes = {
 };
 var apiGroups = {
   base: [
+    {
+      "key": "amp_mail",
+      "module": "./base/routes.amp_mail"
+    },
     {
       "key": "app_info",
-      "module": "./routes.app_info"
+      "module": "./base/routes.app_info"
     },
     {
       "key": "auth",
-      "module": "./routes.auth"
+      "module": "./base/routes.auth"
     },
     {
       "key": "entitlements",
-      "module": "./routes.entitlements"
+      "module": "./base/routes.entitlements"
     },
     {
       "key": "internal",
-      "module": "./routes.internal"
+      "module": "./base/routes.internal"
+    },
+    {
+      "key": "logs",
+      "module": "./base/routes.logs"
+    },
+    {
+      "key": "oauth2",
+      "module": "./base/routes.oauth2"
+    },
+    {
+      "key": "oauth2_external",
+      "module": "./base/routes.oauth2_external"
     },
     {
       "key": "permissions",
-      "module": "./routes.permissions"
+      "module": "./base/routes.permissions"
     },
     {
       "key": "roles",
-      "module": "./routes.roles"
+      "module": "./base/routes.roles"
     },
     {
       "key": "security",
-      "module": "./routes.security"
+      "module": "./base/routes.security"
     },
     {
       "key": "settings",
-      "module": "./routes.settings"
+      "module": "./base/routes.settings"
     },
     {
       "key": "user_activity",
-      "module": "./routes.user_activity"
+      "module": "./base/routes.user_activity"
     },
     {
       "key": "users",
-      "module": "./routes.users"
+      "module": "./base/routes.users"
     },
     {
       "key": "webhooks",
-      "module": "./routes.webhooks"
+      "module": "./base/routes.webhooks"
     }
   ],
   features: [
     {
       "key": "admin",
-      "module": "./routes.admin"
+      "module": "./features/routes.admin"
     },
     {
       "key": "bookkeeping",
-      "module": "./routes.bookkeeping"
+      "module": "./features/routes.bookkeeping"
     },
     {
       "key": "currency_rates",
-      "module": "./routes.currency_rates"
+      "module": "./features/routes.currency_rates"
     },
     {
       "key": "customer_companies",
-      "module": "./routes.customer_companies"
+      "module": "./features/routes.customer_companies"
+    },
+    {
+      "key": "customer_companies_external",
+      "module": "./features/routes.customer_companies_external"
+    },
+    {
+      "key": "document_library",
+      "module": "./features/routes.document_library"
     },
     {
       "key": "documents",
-      "module": "./routes.documents"
+      "module": "./features/routes.documents"
+    },
+    {
+      "key": "dunning_external",
+      "module": "./features/routes.dunning_external"
+    },
+    {
+      "key": "enterprise",
+      "module": "./features/routes.enterprise"
     },
     {
       "key": "exports",
-      "module": "./routes.exports"
+      "module": "./features/routes.exports"
     },
     {
       "key": "invoices",
-      "module": "./routes.invoices"
+      "module": "./features/routes.invoices"
+    },
+    {
+      "key": "invoices_external",
+      "module": "./features/routes.invoices_external"
     },
     {
       "key": "managing_companies",
-      "module": "./routes.managing_companies"
+      "module": "./features/routes.managing_companies"
+    },
+    {
+      "key": "managing_companies_external",
+      "module": "./features/routes.managing_companies_external"
+    },
+    {
+      "key": "managing_company_logos",
+      "module": "./features/routes.managing_company_logos"
+    },
+    {
+      "key": "work_tracking",
+      "module": "./features/routes.work_tracking"
     }
   ],
   all: [
@@ -151,6 +199,10 @@ var apiGroups = {
       "key": "customer_companies_external",
       "module": "./features/routes.customer_companies_external"
     },
+    {
+      "key": "document_library",
+      "module": "./features/routes.document_library"
+    },
     {
       "key": "documents",
       "module": "./features/routes.documents"
@@ -367,6 +419,18 @@ var apiRoutes_app_info = {
     types: null
   },
   // Contract source: explicit
+  "app_info_capabilities": {
+    method: "GET",
+    path: "/app-info/capabilities",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["app-info"],
+      summary: "Public app capabilities for the sign-in screen (mail: password registration, reset and verification; credits: the backend keeps credit balances)",
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
   "app_info_get": {
     method: "GET",
     path: "/app-info",
@@ -426,7 +490,7 @@ var apiRoutes_auth = {
     auth: { "type": "frontend_bearer_http" },
     meta: {
       tags: ["auth"],
-      summary: "Prepare TOTP enrollment after rechecking the password",
+      summary: "Prepare TOTP enrollment after rechecking the password or a fresh Google sign-in",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -452,7 +516,7 @@ var apiRoutes_auth = {
     auth: { "type": "frontend_bearer_http" },
     meta: {
       tags: ["auth"],
-      summary: "Disable MFA using both the password and a second factor",
+      summary: "Disable MFA using the password or a fresh Google sign-in, plus a second factor",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -529,7 +593,83 @@ var apiRoutes_auth = {
     auth: { "type": "frontend_bearer_http" },
     meta: {
       tags: ["auth"],
-      summary: "Update the current user's own profile (name, avatar)",
+      summary: "Update the current user's own profile (name, avatar, locale)",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_me_image_replace": {
+    method: "PUT",
+    path: "/auth/me/image",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Upload the current user's profile image (base64), stored in this backend",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_me_image_delete": {
+    method: "DELETE",
+    path: "/auth/me/image",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Remove the current user's profile image",
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_google_config": {
+    method: "GET",
+    path: "/auth/google/config",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Public Google sign-in configuration per client kind (never a secret)",
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_google_login": {
+    method: "POST",
+    path: "/auth/google",
+    auth: { "type": "public" },
+    meta: {
+      tags: ["auth"],
+      summary: "Sign in with a Google authorization code obtained via system browser + PKCE",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_google_link": {
+    method: "POST",
+    path: "/auth/google/link",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Link a Google account to the current user (requires the current password)",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "auth_google_unlink": {
+    method: "DELETE",
+    path: "/auth/google/link",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["auth"],
+      summary: "Unlink Google from the current user (requires the password, revokes all sessions)",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -3083,6 +3223,219 @@ var apiRoutes_customer_companies_external = {
   }
 };
 
+// src/generated/api/features/routes.document_library.ts
+var apiRoutes_document_library = {
+  // Contract source: explicit
+  "document_library_settings": {
+    method: "GET",
+    path: "/documents/library/settings",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_settings_save": {
+    method: "PUT",
+    path: "/documents/library/settings",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_branding": {
+    method: "GET",
+    path: "/documents/library/branding",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_list": {
+    method: "GET",
+    path: "/documents/library",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_folders": {
+    method: "GET",
+    path: "/documents/library/folders",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_folder_create": {
+    method: "POST",
+    path: "/documents/library/folders",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_folder_update": {
+    method: "PUT",
+    path: "/documents/library/folders/:id",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_folder_delete": {
+    method: "DELETE",
+    path: "/documents/library/folders/:id",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_batch": {
+    method: "POST",
+    path: "/documents/library/batch",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_metadata": {
+    method: "PATCH",
+    path: "/documents/library/:id/metadata",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_drafts": {
+    method: "GET",
+    path: "/documents/library/drafts",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_draft_get": {
+    method: "GET",
+    path: "/documents/library/drafts/:id",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_draft_create": {
+    method: "POST",
+    path: "/documents/library/drafts",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": false, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_draft_update": {
+    method: "PUT",
+    path: "/documents/library/drafts/:id",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_draft_delete": {
+    method: "DELETE",
+    path: "/documents/library/drafts/:id",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_preview": {
+    method: "POST",
+    path: "/documents/library/drafts/:id/preview",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_render": {
+    method: "POST",
+    path: "/documents/library/drafts/:id/render",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_deliveries": {
+    method: "GET",
+    path: "/documents/library/:id/deliveries",
+    auth: { "type": "frontend_permission_http", "permission": "documents_access" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "document_library_send": {
+    method: "POST",
+    path: "/documents/library/:id/send",
+    auth: { "type": "frontend_permission_http", "permission": "documents_manage" },
+    meta: {
+      tags: ["document_library"],
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  }
+};
+
 // src/generated/api/features/routes.documents.ts
 var apiRoutes_documents = {
   // Contract source: explicit
@@ -4027,7 +4380,21 @@ var apiRoutes_invoices_external = {
     meta: {
       tags: ["invoices-external"],
       summary: "Create invoice (external API)",
-      description: "Creates a new invoice via API Key or OAuth2. managingCompanyId is derived from the auth token. Includes full line item support, VAT calculation, and optional PDF generation. Optional idempotencyKey durably replays the original creation response within the authenticated tenant and OAuth client/API key. Changed validated payload returns 409; current cost-center access is checked again. Keys do not expire. With idempotencyKey, paidAt is rejected (400). The stored creation response is not current payment evidence.",
+      description: "Creates a new invoice via API Key or OAuth2. managingCompanyId is derived from the auth token. Includes full line item support, VAT calculation, and optional PDF generation. Optional idempotencyKey durably replays the original creation response within the authenticated tenant and OAuth client/API key. Changed validated payload returns 409; current cost-center access is checked again. Keys do not expire. With paidAt, invoice creation, paid status and the receipt commit atomically; a PDF download completes publication if needed. The stored creation response is not current payment evidence.",
+      bodyContentType: "application/json",
+      validated: { "params": false, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "invoices_dry_run_external": {
+    method: "POST",
+    path: "/invoices/external/dry-run",
+    auth: { "type": "unified_bearer", "allowUserSession": false, "allowOAuth2": true, "allowApiKey": true, "requireRole": "editor", "scopes": ["invoices:write"] },
+    meta: {
+      tags: ["invoices-external"],
+      summary: "Dry run an invoice creation end to end (external API)",
+      description: "Runs the full creation path of POST /invoices/external in one transaction: plan limit, VAT, number, line items, paid status (with paidAt), PDF, e-invoice, upload, year folder filing, document. Then rolls everything back and deletes the uploaded PDF. Nothing is persisted and no number is consumed. Same error responses as the real creation. idempotencyKey is ignored. Meant for scheduled canaries of consumers.",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -4142,6 +4509,42 @@ var apiRoutes_logs = {
 
 // src/generated/api/features/routes.managing_companies.ts
 var apiRoutes_managing_companies = {
+  // Contract source: explicit
+  "managing_companies_invoice_numbering_get": {
+    method: "GET",
+    path: "/managing-companies/invoice-numbering/:managingCompanyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["managing-companies"],
+      summary: "Nummernregeln und \xC4nderungsverlauf",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "managing_companies_invoice_numbering_save": {
+    method: "PUT",
+    path: "/managing-companies/invoice-numbering/:managingCompanyId",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["managing-companies"],
+      summary: "Nummernregeln als Unternehmensadministrator \xE4ndern",
+      validated: { "params": true, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "managing_companies_invoice_numbering_preview": {
+    method: "POST",
+    path: "/managing-companies/invoice-numbering/:managingCompanyId/preview",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["managing-companies"],
+      summary: "Nummern vorschauen ohne Reservierung",
+      validated: { "params": true, "query": false, "body": true }
+    },
+    types: null
+  },
   // Contract source: explicit
   "managing_companies_user_assignments_assign": {
     method: "POST",
@@ -4404,6 +4807,19 @@ var apiRoutes_managing_companies = {
     types: null
   },
   // Contract source: explicit
+  "managing_companies_vat_settings_history": {
+    method: "GET",
+    path: "/managing-companies/vat-settings/:companyId/history",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["managing-companies", "vat-settings"],
+      summary: "Verlauf der USt-Einstellungen lesen",
+      description: "Aenderungsverlauf (Besteuerungsverfahren, UStVA-Praeferenz, Begruendung) der USt-Einstellungen einer Managing Company, aelteste zuerst. Fuer jedes Mitglied der Firma; der Admin-Weg GET /admin/vat/company/:companyId/settings-history bleibt der Plattformverwaltung. Auth: Bearer.",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
   "managing_companies_vat_settings_upsert": {
     method: "POST",
     path: "/managing-companies/vat-settings/:companyId",
@@ -5463,6 +5879,31 @@ var apiRoutes_users = {
     types: null
   },
   // Contract source: explicit
+  "users_update_external_image": {
+    method: "PUT",
+    path: "/users/update/external/:frontendUserId/image",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["users"],
+      summary: "Mirror the frontend user's profile image into this backend (base64)",
+      bodyContentType: "application/json",
+      validated: { "params": true, "query": false, "body": true }
+    },
+    types: null
+  },
+  // Contract source: explicit
+  "users_delete_external_image": {
+    method: "DELETE",
+    path: "/users/update/external/:frontendUserId/image",
+    auth: { "type": "frontend_bearer_http" },
+    meta: {
+      tags: ["users"],
+      summary: "Remove the mirrored profile image of the frontend user",
+      validated: { "params": true, "query": false, "body": false }
+    },
+    types: null
+  },
+  // Contract source: explicit
   "users_delete": {
     method: "DELETE",
     path: "/users/delete/:userId",
@@ -5747,6 +6188,7 @@ var apiRoutes = {
   ...apiRoutes_currency_rates,
   ...apiRoutes_customer_companies,
   ...apiRoutes_customer_companies_external,
+  ...apiRoutes_document_library,
   ...apiRoutes_documents,
   ...apiRoutes_dunning_external,
   ...apiRoutes_enterprise,
@@ -5782,6 +6224,7 @@ exports.apiRoutes_bookkeeping = apiRoutes_bookkeeping;
 exports.apiRoutes_currency_rates = apiRoutes_currency_rates;
 exports.apiRoutes_customer_companies = apiRoutes_customer_companies;
 exports.apiRoutes_customer_companies_external = apiRoutes_customer_companies_external;
+exports.apiRoutes_document_library = apiRoutes_document_library;
 exports.apiRoutes_documents = apiRoutes_documents;
 exports.apiRoutes_dunning_external = apiRoutes_dunning_external;
 exports.apiRoutes_enterprise = apiRoutes_enterprise;