@readystack/einvoice-mandate-lint 1.0.0

package/LICENSE.txt

@@ -0,0 +1,16 @@
+E-Invoice Mandate Lint - EU 2026 — Licence
+
+Free scope
+  Lint the invoice XML you have open - every EN 16931 core field plus the country mandate rules its CustomizationID selects, reported with line numbers. is free for any use, personal or commercial, for as long as you keep the
+  extension installed, and the online check at the product page is free without registration.
+
+Paid scope
+  Scan every invoice XML in the workspace in one pass and export the findings as JSON, CSV or SARIF you keep and run in CI. is the paid part. It asks for a licence key issued at purchase (one seat, one key;
+  7-day full refund, no questions). The key is checked against the payment provider and
+  cached locally for 30 days so it keeps working offline.
+
+Redistribution
+  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
+  engine are provided as-is; check results are advisory and do not constitute legal advice.
+
+(c) ReadyStack — https://getreadystack.com

package/README.md

@@ -0,0 +1,33 @@
+# E-Invoice Mandate Lint - EU 2026
+
+Lints UBL and CII invoice XML against EN 16931 and the national e-invoicing mandates that are live in 2026
+
+## Install
+
+```
+npx @readystack/einvoice-mandate-lint file
+```
+
+Node 18+. The same 35 rules as the VS Code extension, from a terminal or CI.
+
+## Free
+
+- Lint the invoice XML you have open - every EN 16931 core field plus the country mandate rules its CustomizationID and seller country select, reported with line numbers.
+- `--rules` lists every rule
+
+## With a licence ($29 once)
+
+- Scan every invoice XML in the workspace in one pass and export the findings as JSON, CSV or SARIF you keep and run in CI.
+
+```
+@readystack/einvoice-mandate-lint --dir ./templates --report html --out report.html
+```
+
+An EN 16931 / Peppol integration consultant reviews an invoice mapping at about $170 an hour.
+
+7-day refund, no questions. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
+
+[Get a licence](https://buy.polar.sh/polar_cl_V1RBWcrS00NsYLx6EMXeji1xvbix6LF1yO9qR4DduBz)
+
+
+<!-- einvoice mandate lint -->

package/cli.js

@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+// cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
+'use strict';
+const fs = require('fs'), path = require('path');
+const RULES = require('./rules.json');
+const S = require('./strings.json');
+const lic = require('./license.js');
+const ENGINE = require('./engine.js');   // s144 — scaffold products: the same engine the VS Code extension runs
+const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
+const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
+function scan(text, file) {
+  const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
+  return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
+}
+function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
+function walk(dir, exts, out) {
+  let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
+  for (const e of ents) {
+    if (e.name === 'node_modules' || e.name === '.git' || e.name.startsWith('.')) continue;
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) walk(p, exts, out);
+    else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
+  }
+  return out;
+}
+function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
+function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
+function render(rows, fmt) {
+  if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
+  if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
+  if (fmt === 'html') {
+    const n = rows.reduce((a, r) => a + r.hits.length, 0);
+    let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
+    o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
+    for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
+    return o + '</table>';
+  }
+  let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += '  ' + String(h.line).padStart(5) + '  ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n         -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += '  (no findings)\n'; }
+  return o;
+}
+function help() {
+  return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files]           check the files you name (free, every rule)',
+    '       ' + S.bin + ' --dir <folder> [--ext .html]  scan a whole folder            (licence)',
+    '       ' + S.bin + ' ... --report csv|json|html [--out file]   export a report   (licence)',
+    '       ' + S.bin + ' ... --ci                      exit 1 when an error-level finding exists (licence)',
+    '       ' + S.bin + ' --license <key>               store your licence key (or set READYSTACK_LICENSE)',
+    '       ' + S.bin + ' --rules                       list the ' + RULE_N + ' rules', '',
+    'Free: ' + S.free, 'Licence ($' + S.price + ', once, 7-day refund): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
+}
+(async function main() {
+  try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {}   // ★s134 구독 피드 병합 (키 있는 손님만)
+  const a = process.argv.slice(2);
+  const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
+  if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
+  if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + '  [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + '  [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
+  if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
+  const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
+  const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
+  const paid = !!(dir || fmt || ci);
+  if (paid) {
+    const r = await lic.ensure();
+    if (!r.ok) { process.stderr.write(S.need_key + '\n  set READYSTACK_LICENSE=<key>  or  ' + S.bin + ' --license <key>\n  Get a licence ($' + S.price + ', once): ' + lic.BUY_URL + '\n'); process.exit(2); }
+  }
+  const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
+  if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
+  const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
+  const text = render(rows, fmt || 'text');
+  if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
+  const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
+  if (ci && errors) process.exit(1);
+})().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });

package/engine.js

@@ -0,0 +1,358 @@
+/* E-Invoice Mandate Lint - engine
+ * One brain, two homes: node (VS Code extension) and the browser (free web page).
+ */
+(function () {
+  'use strict';
+
+  var RULES = (typeof module !== 'undefined' && module.exports)
+    ? require('./rules.json')
+    : window.EINV_RULES;
+
+  var byId = {};
+  RULES.rules.forEach(function (r) { byId[r.id] = r; });
+
+  // ---------- tiny XML reader (namespace-prefix tolerant) ----------
+
+  function localName(tag) {
+    var i = tag.indexOf(':');
+    return i < 0 ? tag : tag.slice(i + 1);
+  }
+
+  function lineAt(text, index) {
+    if (index < 0) return 1;
+    return text.slice(0, index).split('\n').length;
+  }
+
+  // First <...:Name ...> ... </...:Name> block inside `text`. Returns null if absent.
+  function block(text, name, from) {
+    var ln = localName(name);
+    var open = new RegExp('<(?:[A-Za-z0-9_.-]+:)?' + ln + '(\\s[^>]*)?(/)?>', 'g');
+    open.lastIndex = from || 0;
+    var m = open.exec(text);
+    if (!m) return null;
+    if (m[2] === '/') return { inner: '', start: m.index, end: open.lastIndex, self: true };
+    var close = new RegExp('</(?:[A-Za-z0-9_.-]+:)?' + ln + '>', 'g');
+    close.lastIndex = open.lastIndex;
+    var c = close.exec(text);
+    if (!c) return null;
+    return {
+      inner: text.slice(open.lastIndex, c.index),
+      attrs: m[1] || '',
+      start: m.index,
+      innerStart: open.lastIndex,
+      end: close.lastIndex
+    };
+  }
+
+  // Walk a chain of element names. Each hop searches inside the previous hop.
+  // Returns {value, line, attrs} or null.
+  function pick(text, offset, chain) {
+    var cur = text, base = offset || 0;
+    for (var i = 0; i < chain.length; i++) {
+      var b = block(cur, chain[i]);
+      if (!b) return null;
+      if (i === chain.length - 1) {
+        return {
+          value: b.inner.replace(/<[^>]*>/g, '').trim(),
+          attrs: b.attrs || '',
+          line: lineAt(text, base + b.start) + (base ? 0 : 0)
+        };
+      }
+      base = base + b.innerStart;
+      cur = b.inner;
+    }
+    return null;
+  }
+
+  function allBlocks(text, name) {
+    var out = [], from = 0, b;
+    while ((b = block(text, name, from))) {
+      out.push(b);
+      from = b.end;
+      if (out.length > 5000) break;
+    }
+    return out;
+  }
+
+  function num(s) {
+    if (s === null || s === undefined || s === '') return null;
+    var v = parseFloat(String(s).replace(/[^0-9.\-]/g, ''));
+    return isNaN(v) ? null : v;
+  }
+
+  function round2(v) { return Math.round(v * 100) / 100; }
+
+  // ---------- document facts ----------
+
+  function readDoc(text) {
+    var d = { text: text, syntax: null, root: null, line: {} };
+
+    var rootMatch = /<(?:[A-Za-z0-9_.-]+:)?(Invoice|CreditNote|CrossIndustryInvoice|Faktura)(\s|>)/.exec(text);
+    if (rootMatch) {
+      d.root = rootMatch[1];
+      d.syntax = RULES.syntaxes[d.root] || null;
+      d.rootLine = lineAt(text, rootMatch.index);
+    }
+
+    var cii = d.root === 'CrossIndustryInvoice';
+
+    function g(chain) { return pick(text, 0, chain); }
+
+    d.customization = cii
+      ? g(['GuidelineSpecifiedDocumentContextParameter', 'ID'])
+      : g(['CustomizationID']);
+
+    d.sellerCountry = g(['AccountingSupplierParty', 'PostalAddress', 'IdentificationCode'])
+      || g(['SellerTradeParty', 'PostalTradeAddress', 'CountryID']);
+    d.buyerCountry = g(['AccountingCustomerParty', 'PostalAddress', 'IdentificationCode'])
+      || g(['BuyerTradeParty', 'PostalTradeAddress', 'CountryID']);
+
+    d.sellerLegalId = g(['AccountingSupplierParty', 'PartyLegalEntity', 'CompanyID']);
+    d.buyerLegalId = g(['AccountingCustomerParty', 'PartyLegalEntity', 'CompanyID']);
+    d.buyerReference = g(['BuyerReference']);
+
+    var sup = block(text, 'AccountingSupplierParty');
+    d.sellerContact = sup ? {
+      name: pick(sup.inner, 0, ['Contact', 'Name']),
+      tel: pick(sup.inner, 0, ['Contact', 'Telephone']),
+      mail: pick(sup.inner, 0, ['Contact', 'ElectronicMail'])
+    } : { name: null, tel: null, mail: null };
+    d.sellerEndpoint = sup ? pick(sup.inner, 0, ['EndpointID']) : null;
+    var cus = block(text, 'AccountingCustomerParty');
+    d.buyerEndpoint = cus ? pick(cus.inner, 0, ['EndpointID']) : null;
+
+    d.paymentMeans = block(text, 'PaymentMeans');
+    d.dueDate = g(['DueDate']);
+    d.paymentTerms = block(text, 'PaymentTerms');
+
+    d.lines = allBlocks(text, cii ? 'IncludedSupplyChainTradeLineItem' : 'InvoiceLine');
+    d.lineSum = 0;
+    d.lines.forEach(function (l) {
+      var a = pick(l.inner, 0, ['LineExtensionAmount']) || pick(l.inner, 0, ['LineTotalAmount']);
+      var v = a ? num(a.value) : null;
+      if (v !== null) d.lineSum += v;
+    });
+    d.lineSum = round2(d.lineSum);
+
+    var tot = block(text, 'LegalMonetaryTotal') || block(text, 'SpecifiedTradeSettlementHeaderMonetarySummation');
+    d.totals = {};
+    ['LineExtensionAmount', 'TaxExclusiveAmount', 'TaxInclusiveAmount', 'PayableAmount',
+     'PrepaidAmount', 'PayableRoundingAmount'].forEach(function (k) {
+      var p = tot ? pick(tot.inner, 0, [k]) : null;
+      d.totals[k] = p ? { value: num(p.value), line: tot ? lineAt(text, tot.innerStart + p.line) : 1 } : null;
+    });
+    if (tot) {
+      d.totalsLine = lineAt(text, tot.start);
+      // re-resolve each amount's line against the whole document for accurate anchors
+      ['LineExtensionAmount', 'TaxExclusiveAmount', 'TaxInclusiveAmount', 'PayableAmount',
+       'PrepaidAmount', 'PayableRoundingAmount'].forEach(function (k) {
+        if (!d.totals[k]) return;
+        var b = block(tot.inner, k);
+        d.totals[k].line = lineAt(text, tot.innerStart + b.start);
+      });
+    } else {
+      d.totalsLine = 1;
+    }
+
+    var tax = block(text, 'TaxTotal');
+    var ta = tax ? pick(tax.inner, 0, ['TaxAmount']) : null;
+    d.taxAmount = ta ? { value: num(ta.value), line: lineAt(text, tax.innerStart + block(tax.inner, 'TaxAmount').start) } : null;
+
+    d.profile = null;
+    if (d.customization && d.customization.value) {
+      d.profile = RULES.profiles[d.customization.value.trim()] || null;
+    }
+    d.country = (d.sellerCountry && d.sellerCountry.value)
+      ? d.sellerCountry.value.trim().toUpperCase()
+      : (d.profile && d.profile.country && d.profile.country !== '*' ? d.profile.country : null);
+    d.domestic = !!(d.country && d.buyerCountry &&
+      d.buyerCountry.value.trim().toUpperCase() === d.country);
+    d.mandate = null;
+    for (var i = 0; i < RULES.mandates.length; i++) {
+      if (RULES.mandates[i].country === d.country) { d.mandate = RULES.mandates[i]; break; }
+    }
+    return d;
+  }
+
+  // ---------- checks ----------
+
+  function check(text, opts) {
+    opts = opts || {};
+    var today = opts.today || '2026-09-11';
+    text = String(text || '');
+    var findings = [];
+    var d = readDoc(text);
+
+    function add(id, extra, line) {
+      var r = byId[id];
+      if (!r) return;
+      findings.push({
+        check: r.id,
+        sev: r.sev,
+        msg: r.msg + (extra ? ' - ' + extra : ''),
+        line: line || 1,
+        bt: r.bt,
+        fix: r.fix
+      });
+    }
+
+    if (!d.syntax) {
+      add('EINV-SYNTAX', d.root ? 'found <' + d.root + '>' : 'no invoice root element found', d.rootLine || 1);
+      if (d.root === 'Faktura') {
+        // Polish KSeF document: check the schema variant and stop.
+        var fa = /wersja\s*=\s*"?(1|2|3)/.exec(text) || /FA\s*\(?\s*([23])\s*\)?/.exec(text);
+        var isFa2 = /http:\/\/crd\.gov\.pl\/wzor\/2023\/06\/29\/12648/.test(text) || /"FA\(2\)"/.test(text);
+        if (isFa2) add('EINV-PL-FA2', 'FA(3) is required since ' + mandateDate('PL'), 1);
+      }
+      return finish(findings, d, today);
+    }
+
+    // profile
+    if (!d.customization || !d.customization.value) {
+      add('EINV-BT-24', null, d.rootLine || 1);
+    } else if (!d.profile) {
+      add('EINV-PROFILE-UNKNOWN', '"' + d.customization.value + '"', d.customization.line);
+    } else if (d.profile.status === 'retired') {
+      add('EINV-PROFILE-RETIRED',
+        d.profile.label + ' was retired on ' + d.profile.retired_on + '; use ' + d.profile.replaced_by,
+        d.customization.line);
+    }
+
+    // presence rules
+    RULES.rules.forEach(function (r) {
+      if (r.kind !== 'present') return;
+      var p = pick(text, 0, r.path);
+      if (!p || !p.value) add(r.id, null, d.rootLine || 1);
+    });
+
+    if (d.lines.length === 0) add('EINV-LINE', null, d.rootLine || 1);
+
+    // arithmetic
+    var T = d.totals;
+    if (T.LineExtensionAmount && d.lines.length &&
+        round2(T.LineExtensionAmount.value) !== d.lineSum) {
+      add('EINV-BR-CO-10',
+        'declared ' + T.LineExtensionAmount.value.toFixed(2) + ', lines add up to ' + d.lineSum.toFixed(2),
+        T.LineExtensionAmount.line);
+    }
+    if (T.TaxExclusiveAmount && T.TaxInclusiveAmount && d.taxAmount) {
+      var expect = round2(T.TaxExclusiveAmount.value + d.taxAmount.value);
+      if (round2(T.TaxInclusiveAmount.value) !== expect) {
+        add('EINV-BR-CO-15',
+          'declared ' + T.TaxInclusiveAmount.value.toFixed(2) + ', ' +
+          T.TaxExclusiveAmount.value.toFixed(2) + ' + ' + d.taxAmount.value.toFixed(2) +
+          ' = ' + expect.toFixed(2),
+          T.TaxInclusiveAmount.line);
+      }
+    }
+    if (T.PayableAmount && T.TaxInclusiveAmount) {
+      var pre = T.PrepaidAmount ? T.PrepaidAmount.value : 0;
+      var rnd = T.PayableRoundingAmount ? T.PayableRoundingAmount.value : 0;
+      var due = round2(T.TaxInclusiveAmount.value - pre + rnd);
+      if (round2(T.PayableAmount.value) !== due) {
+        add('EINV-BR-CO-16',
+          'declared ' + T.PayableAmount.value.toFixed(2) + ', expected ' + due.toFixed(2),
+          T.PayableAmount.line);
+      }
+      if (due > 0 && !d.dueDate && !d.paymentTerms) {
+        add('EINV-BR-CO-25', due.toFixed(2) + ' is due', T.PayableAmount.line);
+      }
+    }
+
+    // country mandate rules
+    var c = d.country;
+    var live = mandateLive(c, today);
+
+    if (c === 'FR' && live) {
+      if (!d.sellerLegalId || !/^\d{9}(\d{5})?$/.test(d.sellerLegalId.value.replace(/\s/g, ''))) {
+        add('EINV-FR-SIREN',
+          d.sellerLegalId ? 'found "' + d.sellerLegalId.value + '"' : 'no cac:PartyLegalEntity/cbc:CompanyID',
+          d.sellerLegalId ? d.sellerLegalId.line : d.rootLine);
+      }
+      if (d.domestic && (!d.buyerLegalId || !/^\d{9}(\d{5})?$/.test(d.buyerLegalId.value.replace(/\s/g, '')))) {
+        add('EINV-FR-BUYER-SIREN',
+          d.buyerLegalId ? 'found "' + d.buyerLegalId.value + '"' : 'no buyer SIREN/SIRET',
+          d.buyerLegalId ? d.buyerLegalId.line : d.rootLine);
+      }
+      if (d.profile && d.profile.status === 'insufficient') {
+        add('EINV-FR-MINIMUM', d.profile.note, d.customization.line);
+      }
+    }
+
+    var isXR = !!(d.customization && /xrechnung/i.test(d.customization.value));
+    if (c === 'DE' || isXR) {
+      if (!d.buyerReference || !d.buyerReference.value) {
+        add('EINV-DE-LEITWEG', 'BR-DE-15', d.rootLine);
+      }
+      var miss = [];
+      if (!d.sellerContact.name) miss.push('cbc:Name');
+      if (!d.sellerContact.tel) miss.push('cbc:Telephone');
+      if (!d.sellerContact.mail) miss.push('cbc:ElectronicMail');
+      if (miss.length) add('EINV-DE-CONTACT', 'missing ' + miss.join(', '), d.rootLine);
+      if (!d.paymentMeans) add('EINV-DE-PAYMENT', 'BR-DE-1', d.rootLine);
+    }
+
+    if (c === 'BE' && live) {
+      if (!d.sellerEndpoint || !d.buyerEndpoint ||
+          !/schemeID/i.test((d.sellerEndpoint.attrs || '') + (d.buyerEndpoint.attrs || ''))) {
+        add('EINV-BE-PEPPOL',
+          (d.sellerEndpoint ? '' : 'seller ') + (d.buyerEndpoint ? '' : 'buyer ') + 'endpoint missing',
+          d.rootLine);
+      }
+      if (d.customization && !/peppol/i.test(d.customization.value)) {
+        add('EINV-BE-PROFILE', 'declares "' + d.customization.value + '"', d.customization.line);
+      }
+    }
+
+    if (c === 'PL' && d.domestic && live) {
+      add('EINV-PL-KSEF', 'FA(3) mandatory since ' + mandateDate('PL'), d.rootLine);
+    }
+    if (c === 'IT' && d.domestic) {
+      add('EINV-IT-SDI', null, d.rootLine);
+    }
+    if (c === 'ES') {
+      add('EINV-ES-VERIFACTU', null, d.rootLine);
+    }
+
+    return finish(findings, d, today);
+  }
+
+  function mandateDate(country) {
+    for (var i = 0; i < RULES.mandates.length; i++) {
+      if (RULES.mandates[i].country === country) return RULES.mandates[i].issue_from;
+    }
+    return '';
+  }
+
+  function mandateLive(country, today) {
+    if (!country) return false;
+    for (var i = 0; i < RULES.mandates.length; i++) {
+      if (RULES.mandates[i].country === country) return RULES.mandates[i].receive_from <= today;
+    }
+    return false;
+  }
+
+  function finish(findings, d, today) {
+    if (d.mandate) {
+      var r = byId['EINV-MANDATE-LIVE'];
+      var live = d.mandate.receive_from <= today;
+      findings.push({
+        check: r.id,
+        sev: 'info',
+        msg: d.mandate.name + ': receive from ' + d.mandate.receive_from +
+             ', issue from ' + d.mandate.issue_from +
+             ' (' + (live ? 'live as of ' + today : 'not yet in force on ' + today) + ')',
+        line: 1,
+        bt: '-',
+        fix: d.mandate.note
+      });
+    }
+    findings.sort(function (a, b) { return (a.line - b.line) || a.check.localeCompare(b.check); });
+    return { findings: findings };
+  }
+
+  var api = { engine: { check: check }, RULES: RULES, RULE_COUNT: RULES.rules.length };
+
+  if (typeof module !== 'undefined' && module.exports) module.exports = api;
+  if (typeof window !== 'undefined') window.EINVENGINE = api;
+})();

package/license.js

@@ -0,0 +1,64 @@
+// license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
+'use strict';
+const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
+const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
+const BENEFIT_ID = '10e86de0-e5ca-4464-b6cf-d7bc9f5bc65f';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
+const BUY_URL = 'https://buy.polar.sh/polar_cl_V1RBWcrS00NsYLx6EMXeji1xvbix6LF1yO9qR4DduBz';
+const SLUG = 'einvoice-mandate-lint';
+const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
+const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
+function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
+function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
+function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
+function validate(key) {
+  return new Promise(function (resolve) {
+    if (!ORG_ID) return resolve({ ok: false, offline: false });
+    const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(BENEFIT_ID) ? { key: key, organization_id: ORG_ID, benefit_id: BENEFIT_ID } : { key: key, organization_id: ORG_ID });
+    const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
+      headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
+        try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
+        catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.write(body); req.end();
+  });
+}
+async function ensure(explicitKey) {
+  const st = load();
+  const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
+  if (!key) return { ok: false, why: 'no_key' };
+  const age = Date.now() - (st.okAt || 0);
+  if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
+  const r = await validate(String(key).trim());
+  if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
+  if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
+  return { ok: false, why: r.offline ? 'offline' : 'invalid' };
+}
+// ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
+const FEED_URL = 'https://getreadystack.com/api/rules/';
+function pullFeed() {
+  const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
+  if (!key) return Promise.resolve(cached);
+  if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
+  return new Promise(function (resolve) {
+    let req;
+    try {
+      req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
+        let buf = ''; res.on('data', function (d) { buf += d; });
+        res.on('end', function () {
+          if (res.statusCode !== 200) return resolve(cached);
+          try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
+          catch (e) { resolve(cached); }
+        });
+      });
+    } catch (e) { return resolve(cached); }
+    req.on('timeout', function () { req.destroy(); resolve(cached); });
+    req.on('error', function () { resolve(cached); });
+  });
+}
+module.exports = { ensure, BUY_URL, storePath, pullFeed };

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@readystack/einvoice-mandate-lint",
+  "version": "1.0.0",
+  "description": "Lints UBL and CII invoice XML against EN 16931 and the national e-invoicing mandates that are live in 2026",
+  "license": "SEE LICENSE IN LICENSE.txt",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "e-invoicing",
+    "en16931",
+    "peppol",
+    "xrechnung",
+    "ubl",
+    "factur-x",
+    "ksef",
+    "vat"
+  ],
+  "homepage": "https://getreadystack.com",
+  "funding": "https://buy.polar.sh/polar_cl_V1RBWcrS00NsYLx6EMXeji1xvbix6LF1yO9qR4DduBz",
+  "bin": {
+    "einvoice-mandate-lint": "cli.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "cli.js",
+    "license.js",
+    "rules.json",
+    "strings.json",
+    "README.md",
+    "LICENSE.txt",
+    "engine.js"
+  ]
+}

package/rules.json

@@ -0,0 +1,445 @@
+{
+ "version": "2026.09.11",
+ "syntaxes": {
+  "Invoice": "UBL 2.1 Invoice",
+  "CreditNote": "UBL 2.1 CreditNote",
+  "CrossIndustryInvoice": "UN/CEFACT CII D16B"
+ },
+ "profiles": {
+  "urn:cen.eu:en16931:2017#compliant#urn:fdc:peppol.eu:2017:poacc:billing:3.0": {
+   "label": "Peppol BIS Billing 3.0",
+   "status": "current",
+   "country": "*"
+  },
+  "urn:cen.eu:en16931:2017": {
+   "label": "EN 16931 core, no CIUS",
+   "status": "current",
+   "country": "*"
+  },
+  "urn:cen.eu:en16931:2017#compliant#urn:xoev-de:kosit:standard:xrechnung_3.0": {
+   "label": "XRechnung 3.0 (KoSIT)",
+   "status": "current",
+   "country": "DE"
+  },
+  "urn:cen.eu:en16931:2017#compliant#urn:xoev-de:kosit:standard:xrechnung_2.3": {
+   "label": "XRechnung 2.3",
+   "status": "retired",
+   "retired_on": "2025-02-06",
+   "replaced_by": "urn:cen.eu:en16931:2017#compliant#urn:xoev-de:kosit:standard:xrechnung_3.0",
+   "country": "DE"
+  },
+  "urn:cen.eu:en16931:2017#compliant#urn:xoev-de:kosit:standard:xrechnung_2.2": {
+   "label": "XRechnung 2.2",
+   "status": "retired",
+   "retired_on": "2024-02-01",
+   "replaced_by": "urn:cen.eu:en16931:2017#compliant#urn:xoev-de:kosit:standard:xrechnung_3.0",
+   "country": "DE"
+  },
+  "urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic": {
+   "label": "Factur-X 1.0 BASIC",
+   "status": "current",
+   "country": "FR"
+  },
+  "urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:en16931": {
+   "label": "Factur-X 1.0 EN 16931 (COMFORT)",
+   "status": "current",
+   "country": "FR"
+  },
+  "urn:factur-x.eu:1p0:minimum": {
+   "label": "Factur-X MINIMUM",
+   "status": "insufficient",
+   "country": "FR",
+   "note": "MINIMUM is not an EN 16931 compliant profile and is not a valid structured invoice for the French B2B mandate."
+  }
+ },
+ "mandates": [
+  {
+   "country": "FR",
+   "name": "France - Plateforme Agreee / Factur-X",
+   "receive_from": "2026-09-01",
+   "issue_from": "2026-09-01",
+   "note": "Every VAT-registered business in France must be able to receive structured e-invoices from 2026-09-01; large and mid-sized companies must also issue from that date, SMEs and micro-enterprises from 2027-09-01. Accepted core formats: Factur-X, UBL 2.1, CII."
+  },
+  {
+   "country": "DE",
+   "name": "Germany - E-Rechnung / XRechnung",
+   "receive_from": "2025-01-01",
+   "issue_from": "2027-01-01",
+   "note": "Receipt of structured e-invoices is mandatory since 2025-01-01. Issuing becomes mandatory 2027-01-01 for sellers above EUR 800,000 prior-year turnover and 2028-01-01 for everyone else."
+  },
+  {
+   "country": "BE",
+   "name": "Belgium - Peppol B2B",
+   "receive_from": "2026-01-01",
+   "issue_from": "2026-01-01",
+   "note": "Domestic B2B structured e-invoicing is mandatory since 2026-01-01; the tolerance period ended 2026-03-31 and penalties are enforced. Peppol BIS Billing 3.0 is the reference format."
+  },
+  {
+   "country": "PL",
+   "name": "Poland - KSeF FA(3)",
+   "receive_from": "2026-02-01",
+   "issue_from": "2026-02-01",
+   "note": "FA(2) was replaced by the FA(3) XML structure on 2026-02-01. KSeF issuing is mandatory from 2026-02-01 above PLN 200m prior-year turnover, from 2026-04-01 for all other VAT payers, and from 2027-01-01 for micro-enterprises."
+  },
+  {
+   "country": "ES",
+   "name": "Spain - Verifactu / SIF",
+   "receive_from": "2027-01-01",
+   "issue_from": "2027-01-01",
+   "note": "Verifactu was postponed by one year: Corporate Income Tax payers from 2027-01-01 and other taxpayers, including autonomos, from 2027-07-01. A 2026 go-live date is out of date."
+  },
+  {
+   "country": "IT",
+   "name": "Italy - FatturaPA / SdI",
+   "receive_from": "2019-01-01",
+   "issue_from": "2019-01-01",
+   "note": "Domestic invoices clear through the Sistema di Interscambio in the FatturaPA XML format. UBL and CII are not accepted for domestic Italian invoices."
+  }
+ ],
+ "rules": [
+  {
+   "id": "EINV-SYNTAX",
+   "kind": "syntax",
+   "sev": "error",
+   "bt": "-",
+   "msg": "Root element is not an EN 16931 syntax",
+   "fix": "Use a UBL 2.1 Invoice/CreditNote or a UN/CEFACT CrossIndustryInvoice document."
+  },
+  {
+   "id": "EINV-BT-24",
+   "kind": "profile",
+   "sev": "error",
+   "bt": "BT-24",
+   "msg": "Specification identifier (CustomizationID) is missing",
+   "fix": "Add cbc:CustomizationID naming the EN 16931 CIUS this invoice follows."
+  },
+  {
+   "id": "EINV-PROFILE-UNKNOWN",
+   "kind": "profile_unknown",
+   "sev": "warn",
+   "bt": "BT-24",
+   "msg": "Specification identifier is not a profile this linter knows",
+   "fix": "Check the identifier against the CIUS your receiving platform publishes."
+  },
+  {
+   "id": "EINV-PROFILE-RETIRED",
+   "kind": "profile_retired",
+   "sev": "error",
+   "bt": "BT-24",
+   "msg": "Specification identifier names a retired profile version",
+   "fix": "Move to the replacement profile."
+  },
+  {
+   "id": "EINV-BT-1",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-1",
+   "path": [
+    "cbc:ID"
+   ],
+   "msg": "Invoice number (BT-1) is missing",
+   "fix": "Add cbc:ID at document level."
+  },
+  {
+   "id": "EINV-BT-2",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-2",
+   "path": [
+    "cbc:IssueDate"
+   ],
+   "msg": "Invoice issue date (BT-2) is missing",
+   "fix": "Add cbc:IssueDate in YYYY-MM-DD form."
+  },
+  {
+   "id": "EINV-BT-3",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-3",
+   "path": [
+    "cbc:InvoiceTypeCode"
+   ],
+   "msg": "Invoice type code (BT-3) is missing",
+   "fix": "Add cbc:InvoiceTypeCode, normally 380 for a commercial invoice."
+  },
+  {
+   "id": "EINV-BT-5",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-5",
+   "path": [
+    "cbc:DocumentCurrencyCode"
+   ],
+   "msg": "Invoice currency code (BT-5) is missing",
+   "fix": "Add cbc:DocumentCurrencyCode, for example EUR."
+  },
+  {
+   "id": "EINV-BT-27",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-27",
+   "path": [
+    "cac:AccountingSupplierParty",
+    "cac:PartyLegalEntity",
+    "cbc:RegistrationName"
+   ],
+   "msg": "Seller legal name (BT-27) is missing",
+   "fix": "Add cac:PartyLegalEntity/cbc:RegistrationName under the supplier party."
+  },
+  {
+   "id": "EINV-BT-31",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-31",
+   "path": [
+    "cac:AccountingSupplierParty",
+    "cac:PartyTaxScheme",
+    "cbc:CompanyID"
+   ],
+   "msg": "Seller VAT identifier (BT-31) is missing",
+   "fix": "Add cac:PartyTaxScheme/cbc:CompanyID with the VAT scheme for the seller."
+  },
+  {
+   "id": "EINV-BT-40",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-40",
+   "path": [
+    "cac:AccountingSupplierParty",
+    "cac:PostalAddress",
+    "cbc:IdentificationCode"
+   ],
+   "msg": "Seller country code (BT-40) is missing",
+   "fix": "Add cac:Country/cbc:IdentificationCode in the seller postal address."
+  },
+  {
+   "id": "EINV-BT-44",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-44",
+   "path": [
+    "cac:AccountingCustomerParty",
+    "cac:PartyLegalEntity",
+    "cbc:RegistrationName"
+   ],
+   "msg": "Buyer legal name (BT-44) is missing",
+   "fix": "Add cac:PartyLegalEntity/cbc:RegistrationName under the customer party."
+  },
+  {
+   "id": "EINV-BT-55",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-55",
+   "path": [
+    "cac:AccountingCustomerParty",
+    "cac:PostalAddress",
+    "cbc:IdentificationCode"
+   ],
+   "msg": "Buyer country code (BT-55) is missing",
+   "fix": "Add cac:Country/cbc:IdentificationCode in the buyer postal address."
+  },
+  {
+   "id": "EINV-BT-110",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-110",
+   "path": [
+    "cac:TaxTotal",
+    "cbc:TaxAmount"
+   ],
+   "msg": "Invoice total VAT amount (BT-110) is missing",
+   "fix": "Add cac:TaxTotal/cbc:TaxAmount at document level."
+  },
+  {
+   "id": "EINV-BT-109",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-109",
+   "path": [
+    "cac:LegalMonetaryTotal",
+    "cbc:TaxExclusiveAmount"
+   ],
+   "msg": "Invoice total without VAT (BT-109) is missing",
+   "fix": "Add cbc:TaxExclusiveAmount to cac:LegalMonetaryTotal."
+  },
+  {
+   "id": "EINV-BT-112",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-112",
+   "path": [
+    "cac:LegalMonetaryTotal",
+    "cbc:TaxInclusiveAmount"
+   ],
+   "msg": "Invoice total with VAT (BT-112) is missing",
+   "fix": "Add cbc:TaxInclusiveAmount to cac:LegalMonetaryTotal."
+  },
+  {
+   "id": "EINV-BT-115",
+   "kind": "present",
+   "sev": "error",
+   "bt": "BT-115",
+   "path": [
+    "cac:LegalMonetaryTotal",
+    "cbc:PayableAmount"
+   ],
+   "msg": "Amount due for payment (BT-115) is missing",
+   "fix": "Add cbc:PayableAmount to cac:LegalMonetaryTotal."
+  },
+  {
+   "id": "EINV-LINE",
+   "kind": "line_count",
+   "sev": "error",
+   "bt": "BG-25",
+   "msg": "Invoice has no invoice line",
+   "fix": "An EN 16931 invoice needs at least one cac:InvoiceLine."
+  },
+  {
+   "id": "EINV-BR-CO-10",
+   "kind": "math_linesum",
+   "sev": "error",
+   "bt": "BT-106",
+   "msg": "Sum of invoice line net amounts (BT-106) does not equal the lines",
+   "fix": "Set cac:LegalMonetaryTotal/cbc:LineExtensionAmount to the sum of the line amounts."
+  },
+  {
+   "id": "EINV-BR-CO-15",
+   "kind": "math_inclusive",
+   "sev": "error",
+   "bt": "BT-112",
+   "msg": "Total with VAT (BT-112) does not equal total without VAT plus VAT",
+   "fix": "BT-112 must equal BT-109 + BT-110."
+  },
+  {
+   "id": "EINV-BR-CO-16",
+   "kind": "math_payable",
+   "sev": "error",
+   "bt": "BT-115",
+   "msg": "Amount due (BT-115) does not equal total with VAT minus prepaid plus rounding",
+   "fix": "BT-115 must equal BT-112 - BT-113 + BT-114."
+  },
+  {
+   "id": "EINV-BR-CO-25",
+   "kind": "due_date",
+   "sev": "warn",
+   "bt": "BT-9",
+   "msg": "Amount due is positive but neither a due date (BT-9) nor payment terms (BT-20) are given",
+   "fix": "Add cbc:DueDate or cac:PaymentTerms/cbc:Note."
+  },
+  {
+   "id": "EINV-FR-SIREN",
+   "kind": "country",
+   "country": "FR",
+   "sev": "error",
+   "bt": "BT-30",
+   "msg": "France: seller legal registration identifier (SIREN or SIRET) is missing or is not 9 or 14 digits",
+   "fix": "Add cac:AccountingSupplierParty/cac:PartyLegalEntity/cbc:CompanyID with schemeID 0009 (SIRET) or 0002 (SIREN)."
+  },
+  {
+   "id": "EINV-FR-BUYER-SIREN",
+   "kind": "country",
+   "country": "FR",
+   "sev": "error",
+   "bt": "BT-47",
+   "msg": "France: buyer legal registration identifier (SIREN or SIRET) is missing on a domestic B2B invoice",
+   "fix": "Add cac:AccountingCustomerParty/cac:PartyLegalEntity/cbc:CompanyID with the buyer SIREN or SIRET."
+  },
+  {
+   "id": "EINV-FR-MINIMUM",
+   "kind": "country",
+   "country": "FR",
+   "sev": "error",
+   "bt": "BT-24",
+   "msg": "France: the Factur-X MINIMUM profile is not an EN 16931 compliant invoice",
+   "fix": "Use Factur-X BASIC or EN 16931 (COMFORT), or UBL 2.1 / CII."
+  },
+  {
+   "id": "EINV-DE-LEITWEG",
+   "kind": "country",
+   "country": "DE",
+   "sev": "error",
+   "bt": "BT-10",
+   "msg": "XRechnung: buyer reference (BT-10, the Leitweg-ID) is missing",
+   "fix": "Add cbc:BuyerReference with the Leitweg-ID the buyer gave you."
+  },
+  {
+   "id": "EINV-DE-CONTACT",
+   "kind": "country",
+   "country": "DE",
+   "sev": "error",
+   "bt": "BT-41",
+   "msg": "XRechnung: seller contact name, telephone and email are required and one of them is missing",
+   "fix": "Add cac:Contact with cbc:Name, cbc:Telephone and cbc:ElectronicMail under the supplier party."
+  },
+  {
+   "id": "EINV-DE-PAYMENT",
+   "kind": "country",
+   "country": "DE",
+   "sev": "error",
+   "bt": "BG-16",
+   "msg": "XRechnung: payment instructions (BG-16) are missing",
+   "fix": "Add cac:PaymentMeans with cbc:PaymentMeansCode."
+  },
+  {
+   "id": "EINV-BE-PEPPOL",
+   "kind": "country",
+   "country": "BE",
+   "sev": "error",
+   "bt": "BT-34",
+   "msg": "Belgium: seller or buyer Peppol electronic address (cbc:EndpointID with a schemeID) is missing",
+   "fix": "Add cbc:EndpointID schemeID=\"0208\" (Belgian enterprise number) to both parties."
+  },
+  {
+   "id": "EINV-BE-PROFILE",
+   "kind": "country",
+   "country": "BE",
+   "sev": "warn",
+   "bt": "BT-24",
+   "msg": "Belgium: the reference format for the domestic B2B mandate is Peppol BIS Billing 3.0 and this invoice declares another profile",
+   "fix": "Set CustomizationID to the Peppol BIS Billing 3.0 identifier."
+  },
+  {
+   "id": "EINV-PL-KSEF",
+   "kind": "country",
+   "country": "PL",
+   "sev": "error",
+   "bt": "-",
+   "msg": "Poland: domestic invoices must be filed to KSeF in the FA(3) structure, not UBL or CII",
+   "fix": "Generate the FA(3) XML for KSeF; keep UBL only for cross-border Peppol exchange."
+  },
+  {
+   "id": "EINV-PL-FA2",
+   "kind": "pl_fa2",
+   "sev": "error",
+   "bt": "-",
+   "msg": "Poland: this document uses the FA(2) KSeF structure, which was replaced by FA(3)",
+   "fix": "Regenerate against the FA(3) schema."
+  },
+  {
+   "id": "EINV-IT-SDI",
+   "kind": "country",
+   "country": "IT",
+   "sev": "error",
+   "bt": "-",
+   "msg": "Italy: domestic invoices clear through SdI in FatturaPA format, not UBL or CII",
+   "fix": "Generate FatturaPA XML for domestic Italian invoices."
+  },
+  {
+   "id": "EINV-ES-VERIFACTU",
+   "kind": "country",
+   "country": "ES",
+   "sev": "info",
+   "bt": "-",
+   "msg": "Spain: Verifactu was postponed by one year - Corporate Income Tax payers from 2027-01-01 and other taxpayers from 2027-07-01",
+   "fix": "Check any 2026 Verifactu go-live date hard-coded in your billing configuration."
+  },
+  {
+   "id": "EINV-MANDATE-LIVE",
+   "kind": "mandate_note",
+   "sev": "info",
+   "bt": "-",
+   "msg": "Mandate status for the seller country",
+   "fix": "No change needed; this line states the dates the other findings are measured against."
+  }
+ ]
+}

package/strings.json

@@ -0,0 +1,10 @@
+{
+ "name": "E-Invoice Mandate Lint - EU 2026",
+ "subtitle": "Lints UBL and CII invoice XML against EN 16931 and the national e-invoicing mandates that are live in 2026",
+ "bin": "einvoice-mandate-lint",
+ "price": 29,
+ "free": "Lint the invoice XML you have open - every EN 16931 core field plus the country mandate rules its CustomizationID and seller country select, reported with line numbers.",
+ "paid": "Scan every invoice XML in the workspace in one pass and export the findings as JSON, CSV or SARIF you keep and run in CI.",
+ "need_key": "This option needs a licence (E-Invoice Mandate Lint - EU 2026).",
+ "exts": []
+}