@stackforge-eu/factur-x 1.0.1 → 1.0.4

package/CHANGELOG.md

@@ -7,6 +7,43 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.0.4] — 2026-05-05
+
+### Fixed
+
+- Release workflow `publish-npm` job: bump `node-version` to `24.15.0` (current Node LTS) and roll back the npm upgrade step from `corepack prepare npm@latest --activate` to `npm install -g npm@latest`. The corepack route in v1.0.3 silently broke OIDC trusted publishing against the npm registry (sigstore provenance signing still worked, but the registry `PUT` went out unauthenticated and was rejected with a 404), so v1.0.2 and v1.0.3 never reached `registry.npmjs.org` — `dist-tags.latest` there is still `1.0.1`.
+
+## [1.0.3] — 2026-05-05
+
+### Fixed
+
+- Release workflow: upgrade npm via `corepack prepare npm@latest --activate` instead of `npm install -g npm@latest`, which crashed on the GitHub-hosted Node 22.22.2 toolcache where the bundled npm was missing its own `promise-retry` transitive dependency
+- `src/core/embed.ts`: import `console` from `node:console` so the new PDF/A-3 warnings type-check under the project's `lib: ["ES2022"]` tsconfig (no DOM lib)
+
+## [1.0.2] — 2026-05-05
+
+### Added
+
+- `EmbedOptions.rgbIccProfile` and `EmbedOptions.outputIntentIdentifier`: inject a PDF/A-3 `/OutputIntents` entry referencing an sRGB ICC profile when the input PDF lacks one (ISO 19005-3 §6.2.4.3)
+- `EmbedOptions.unembeddedFonts` (`"warn"` | `"throw"` | `"ignore"`, default `"warn"`): detect and report fonts whose `FontDescriptor` carries no `FontFile`/`FontFile2`/`FontFile3` stream, including Type 0 descendant fonts and the standard 14 base fonts (ISO 19005-3 §6.2.11.4.1)
+- Exported `XRECHNUNG_PROFILE_URN` (`urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0`)
+- `validateInput` now accepts an optional `flavor` argument; passing `Flavor.XRECHNUNG` enables BR-DE / PEPPOL-EN16931 rules on top of the profile checks
+- Pre-XML business-rule validation: BR-27 (non-negative line unit price), BR-CO-10 / BR-CO-13 / BR-CO-14 / BR-CO-15 / BR-CO-17, BR-62 / FX-SCH-A-000158 (URIID schemeID), BR-FX-EN-04 (delivery date or billing period), and XRechnung-only BR-DE-2, BR-DE-15, BR-DE-19 (IBAN mod-97), PEPPOL-EN16931-R001 / R010 / R020
+
+### Changed
+
+- **BREAKING:** `TradePartyInput.electronicAddress` is now `{ value: string; schemeID: string }` instead of a bare `string`. Required by BR-62 / FX-SCH-A-000158 — the URIID element must carry an EAS `@schemeID` (e.g. `"EM"`, `"0088"`, `"9930"`)
+- **BREAKING:** Profile URNs in `PROFILE_URNS` updated to the EN 16931 conformance form accepted by the shipped schematron — `BASIC` → `urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic`, `EN16931` → `urn:cen.eu:en16931:2017`, `EXTENDED` → `urn:cen.eu:en16931:2017#conformant#urn:factur-x.eu:1p0:extended` (`MINIMUM` and `BASIC_WL` unchanged)
+- XRechnung output now writes the XRechnung CIUS URN as the GuidelineSpecifiedDocumentContextParameter (BR-DE-21) instead of the underlying EN 16931 URN
+- Line-total fallback (`quantity × unitPrice`) is rounded to currency precision so values like `0.1 × 3` no longer drift to `0.30000000000000004`
+- `detectProfile` in the extractor now tests longer/more-specific URNs before short forms so XRechnung CIUS and conformance URNs are recognised correctly
+
+### Fixed
+
+- Always emit `ram:ActualDeliverySupplyChainEvent` (defaulting to `document.issueDate`) for non-prepayment BASIC+ invoices so the schematron's two-conjunct delivery rule (BR-FX-EN-04 / PEPPOL-EN16931-R008) is satisfied even when only a billing period is supplied
+- `toXRechnung` now validates the business-process-enriched input rather than the raw input, so the auto-injected `businessProcessId` no longer trips PEPPOL-EN16931-R001 in strict mode
+- `URIUniversalCommunication/URIID` is now emitted with the required `@schemeID` attribute
+
 ## [1.0.1] — 2026-03-01
 
 ### Added
@@ -30,4 +67,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 - Deno compatibility test suite
 
 [Unreleased]: https://github.com/StackForge-EU/factur-x/commits/main
+[1.0.4]: https://github.com/StackForge-EU/factur-x/compare/v1.0.3...v1.0.4
+[1.0.3]: https://github.com/StackForge-EU/factur-x/compare/v1.0.2...v1.0.3
+[1.0.2]: https://github.com/StackForge-EU/factur-x/compare/v1.0.1...v1.0.2
 [1.0.1]: https://github.com/StackForge-EU/factur-x/compare/v1.0.0...v1.0.1

package/README.md

@@ -4,8 +4,8 @@
 [![License: EUPL-1.2](https://img.shields.io/badge/License-EUPL--1.2-blue.svg)](LICENSE)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.3+-3178c6.svg?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
 [![Node.js](https://img.shields.io/node/v/@stackforge-eu/factur-x?logo=node.js)](https://nodejs.org)
-![Deno](https://img.shields.io/badge/deno-%3E%3D2.0.0-brightgreen?logo=deno)
-![JSR Version](https://img.shields.io/jsr/v/@stackforge-eu/factur-x?logo=jsr)
+[![Deno](https://img.shields.io/badge/deno-%3E%3D2.0.0-brightgreen?logo=deno)](https://deno.com)
+[![JSR Version](https://img.shields.io/jsr/v/@stackforge-eu/factur-x?logo=jsr)](https://jsr.io/@stackforge-eu/factur-x)
 [![npm version](https://img.shields.io/npm/v/@stackforge-eu/factur-x?logo=npm&color=cb3837)](https://www.npmjs.com/package/@stackforge-eu/factur-x)
 
 **Generate and embed Factur-X, ZUGFeRD, and XRechnung compliant CII XML into PDF/A-3 invoices.**

package/dist/index.cjs

@@ -3,8 +3,11 @@
 var fs = require('fs');
 var path = require('path');
 var url = require('url');
+var console = require('console');
 var pdfLib = require('pdf-lib');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
 function _interopNamespace(e) {
   if (e && e.__esModule) return e;
   var n = Object.create(null);
@@ -25,6 +28,7 @@ function _interopNamespace(e) {
 
 var fs__namespace = /*#__PURE__*/_interopNamespace(fs);
 var path__namespace = /*#__PURE__*/_interopNamespace(path);
+var console__default = /*#__PURE__*/_interopDefault(console);
 
 // node_modules/tsup/assets/cjs_shims.js
 var getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
@@ -175,10 +179,11 @@ var Flavor = /* @__PURE__ */ ((Flavor2) => {
 var PROFILE_URNS = {
   MINIMUM: "urn:factur-x.eu:1p0:minimum",
   BASIC_WL: "urn:factur-x.eu:1p0:basicwl",
-  BASIC: "urn:factur-x.eu:1p0:basic",
-  EN16931: "urn:factur-x.eu:1p0:en16931",
-  EXTENDED: "urn:factur-x.eu:1p0:extended"
+  BASIC: "urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic",
+  EN16931: "urn:cen.eu:en16931:2017",
+  EXTENDED: "urn:cen.eu:en16931:2017#conformant#urn:factur-x.eu:1p0:extended"
 };
+var XRECHNUNG_PROFILE_URN = "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0";
 var FLAVOR_DEFAULT_TYPE_CODES = {
   ["factur-x" /* FACTUR_X */]: "380" /* COMMERCIAL_INVOICE */,
   ["zugferd" /* ZUGFERD */]: "380" /* COMMERCIAL_INVOICE */,
@@ -348,7 +353,12 @@ function buildParty(p, profile) {
   if (p.contact && atLeast(profile, "EN16931" /* EN16931 */)) x += buildContact(p.contact);
   if (p.address && atLeast(profile, "BASIC_WL" /* BASIC_WL */)) x += buildAddress(p.address);
   if (p.electronicAddress)
-    x += tag("ram:URIUniversalCommunication", tag("ram:URIID", escapeXml(p.electronicAddress)));
+    x += tag(
+      "ram:URIUniversalCommunication",
+      tag("ram:URIID", escapeXml(p.electronicAddress.value), {
+        schemeID: p.electronicAddress.schemeID
+      })
+    );
   if (p.taxRegistrations) {
     for (const tr of p.taxRegistrations) {
       x += tag(
@@ -394,7 +404,7 @@ function buildLineItem(line, profile) {
       tx += tag("ram:RateApplicablePercent", line.vatRatePercent.toString());
     settle += tag("ram:ApplicableTradeTax", tx);
   }
-  const lineTotal = line.lineTotal ?? line.quantity * line.unitPrice;
+  const lineTotal = line.lineTotal ?? Math.round(line.quantity * line.unitPrice * 100) / 100;
   settle += tag(
     "ram:SpecifiedTradeSettlementLineMonetarySummation",
     tag("ram:LineTotalAmount", fmtAmt(lineTotal))
@@ -477,9 +487,10 @@ function buildXml(input, profile, flavor) {
       "ram:BusinessProcessSpecifiedDocumentContextParameter",
       tag("ram:ID", escapeXml(doc.businessProcessId))
     );
+  const profileUrn = fl === "xrechnung" /* XRECHNUNG */ ? XRECHNUNG_PROFILE_URN : PROFILE_URNS[profile];
   ctx += tag(
     "ram:GuidelineSpecifiedDocumentContextParameter",
-    tag("ram:ID", PROFILE_URNS[profile])
+    tag("ram:ID", profileUrn)
   );
   let edoc = tag("ram:ID", escapeXml(doc.id));
   if (doc.name && atLeast(profile, "EXTENDED" /* EXTENDED */)) edoc += tag("ram:Name", escapeXml(doc.name));
@@ -532,6 +543,7 @@ function buildXml(input, profile, flavor) {
   }
   tx += tag("ram:ApplicableHeaderTradeAgreement", agree);
   let del = "";
+  let hasActualDelivery = false;
   if (input.delivery && atLeast(profile, "BASIC_WL" /* BASIC_WL */)) {
     if (input.delivery.partyName || input.delivery.location) {
       let sp = "";
@@ -539,11 +551,13 @@ function buildXml(input, profile, flavor) {
       if (input.delivery.location) sp += buildAddress(input.delivery.location);
       del += tag("ram:ShipToTradeParty", sp);
     }
-    if (input.delivery.date)
+    if (input.delivery.date) {
       del += tag(
         "ram:ActualDeliverySupplyChainEvent",
         dateEl("ram:OccurrenceDateTime", input.delivery.date)
       );
+      hasActualDelivery = true;
+    }
     if (input.delivery.despatchAdviceReference)
       del += tag(
         "ram:DespatchAdviceReferencedDocument",
@@ -559,6 +573,12 @@ function buildXml(input, profile, flavor) {
       }
     }
   }
+  if (atLeast(profile, "BASIC" /* BASIC */) && !hasActualDelivery && typeCode !== "386" /* PREPAYMENT_INVOICE */) {
+    del += tag(
+      "ram:ActualDeliverySupplyChainEvent",
+      dateEl("ram:OccurrenceDateTime", doc.issueDate)
+    );
+  }
   tx += tag("ram:ApplicableHeaderTradeDelivery", del);
   let sett = "";
   if (payment?.creditorReference && atLeast(profile, "BASIC_WL" /* BASIC_WL */))
@@ -636,7 +656,7 @@ var PROFILE_LEVEL2 = {
 function addError(errors, field, message, profile) {
   errors.push({ field, message, profile });
 }
-function validateInput(input, profile) {
+function validateInput(input, profile, flavor) {
   const errors = [];
   const level = PROFILE_LEVEL2[profile];
   const req = (minProfile) => level >= PROFILE_LEVEL2[minProfile];
@@ -823,11 +843,193 @@ function validateInput(input, profile) {
       }
     });
   }
+  if (req("BASIC_WL" /* BASIC_WL */)) {
+    for (const role of ["seller", "buyer"]) {
+      const ea = input[role]?.electronicAddress;
+      if (ea && !ea.schemeID) {
+        addError(
+          errors,
+          `${role}.electronicAddress.schemeID`,
+          `${role.charAt(0).toUpperCase() + role.slice(1)} electronic address must include schemeID (BR-62 / FX-SCH-A-000158).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC" /* BASIC */) && input.lines) {
+    input.lines.forEach((line, i) => {
+      if (typeof line.unitPrice === "number" && line.unitPrice < 0) {
+        addError(
+          errors,
+          `lines[${i}].unitPrice`,
+          "Line unit price must not be negative (BR-27). Use allowancesCharges for discounts.",
+          "BASIC" /* BASIC */
+        );
+      }
+    });
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals) {
+    const t = input.totals;
+    if (t.taxBasisTotal != null && t.taxTotal != null && t.grandTotal != null) {
+      const expected = round2(t.taxBasisTotal + t.taxTotal);
+      if (Math.abs(round2(t.grandTotal) - expected) > 0.01) {
+        addError(
+          errors,
+          "totals.grandTotal",
+          `Grand total ${t.grandTotal} does not equal taxBasisTotal + taxTotal (${expected}) (BR-CO-15).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals) {
+    const t = input.totals;
+    if (t.lineTotal != null && t.taxBasisTotal != null) {
+      const allowance = t.allowanceTotal ?? 0;
+      const charge = t.chargeTotal ?? 0;
+      const expected = round2(t.lineTotal - allowance + charge);
+      if (Math.abs(round2(t.taxBasisTotal) - expected) > 0.01) {
+        addError(
+          errors,
+          "totals.taxBasisTotal",
+          `taxBasisTotal ${t.taxBasisTotal} does not equal lineTotal - allowanceTotal + chargeTotal (${expected}) (BR-CO-13).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC" /* BASIC */) && input.totals && input.lines) {
+    const sumLineNets = input.lines.reduce((sum, l) => {
+      const lineNet = l.lineTotal ?? (typeof l.quantity === "number" && typeof l.unitPrice === "number" ? l.quantity * l.unitPrice : 0);
+      return sum + lineNet;
+    }, 0);
+    if (input.totals.lineTotal != null) {
+      if (Math.abs(round2(input.totals.lineTotal) - round2(sumLineNets)) > 0.01) {
+        addError(
+          errors,
+          "totals.lineTotal",
+          `lineTotal ${input.totals.lineTotal} does not equal \u03A3 line nets (${round2(sumLineNets)}) (BR-CO-10).`,
+          "BASIC" /* BASIC */
+        );
+      }
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals?.taxTotal != null && input.vatBreakdown) {
+    const sumVat = input.vatBreakdown.reduce((s, v) => s + (v.taxAmount ?? 0), 0);
+    if (Math.abs(round2(input.totals.taxTotal) - round2(sumVat)) > 0.01) {
+      addError(
+        errors,
+        "totals.taxTotal",
+        `taxTotal ${input.totals.taxTotal} does not equal \u03A3 vatBreakdown.taxAmount (${round2(sumVat)}) (BR-CO-14).`,
+        "BASIC_WL" /* BASIC_WL */
+      );
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.vatBreakdown) {
+    input.vatBreakdown.forEach((vb, i) => {
+      if (vb.taxableAmount != null && vb.taxAmount != null && vb.ratePercent != null) {
+        const expected = round2(vb.taxableAmount * vb.ratePercent / 100);
+        if (Math.abs(round2(vb.taxAmount) - expected) > 0.01) {
+          addError(
+            errors,
+            `vatBreakdown[${i}].taxAmount`,
+            `taxAmount ${vb.taxAmount} does not equal round(taxableAmount \xD7 ratePercent / 100) = ${expected} (BR-CO-17).`,
+            "BASIC_WL" /* BASIC_WL */
+          );
+        }
+      }
+    });
+  }
+  if (req("BASIC" /* BASIC */) && input.document) {
+    const isPrepayment = input.document.typeCode === "386";
+    if (!isPrepayment) {
+      const hasDeliveryDate = !!input.delivery?.date;
+      const hasBillingPeriod = !!input.billingPeriod;
+      if (!hasDeliveryDate && !hasBillingPeriod) {
+        addError(
+          errors,
+          "delivery.date",
+          "Provide delivery.date or billingPeriod (BR-FX-EN-04).",
+          "BASIC" /* BASIC */
+        );
+      }
+    }
+  }
+  if (flavor === "xrechnung" /* XRECHNUNG */) {
+    if (!input.document?.buyerReference) {
+      addError(
+        errors,
+        "document.buyerReference",
+        "BuyerReference (BT-10) is required for XRechnung (BR-DE-15).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.document?.businessProcessId) {
+      addError(
+        errors,
+        "document.businessProcessId",
+        "Business process (BT-23) is required for XRechnung (PEPPOL-EN16931-R001).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.seller?.contact || !input.seller.contact.name && !input.seller.contact.email && !input.seller.contact.phone) {
+      addError(
+        errors,
+        "seller.contact",
+        "Seller contact (BG-6) with name, email or phone is required for XRechnung (BR-DE-2).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.seller?.electronicAddress?.value || !input.seller.electronicAddress.schemeID) {
+      addError(
+        errors,
+        "seller.electronicAddress",
+        "Seller electronic address (BT-34) with non-empty schemeID is required for XRechnung (PEPPOL-EN16931-R020 / BR-62).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.buyer?.electronicAddress?.value || !input.buyer.electronicAddress.schemeID) {
+      addError(
+        errors,
+        "buyer.electronicAddress",
+        "Buyer electronic address (BT-49) with non-empty schemeID is required for XRechnung (PEPPOL-EN16931-R010 / BR-62).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (input.payment?.meansCode === "58" && input.payment.iban) {
+      if (!isValidIban(input.payment.iban)) {
+        addError(
+          errors,
+          "payment.iban",
+          "IBAN is not syntactically valid (BR-DE-19).",
+          "EN16931" /* EN16931 */
+        );
+      }
+    }
+  }
   return {
     valid: errors.length === 0,
     errors
   };
 }
+function round2(n) {
+  return Math.round(n * 100) / 100;
+}
+function isValidIban(iban) {
+  const normalized = iban.replace(/\s+/g, "").toUpperCase();
+  if (!/^[A-Z]{2}\d{2}[A-Z0-9]{1,30}$/.test(normalized)) return false;
+  const rearranged = normalized.slice(4) + normalized.slice(0, 4);
+  let expanded = "";
+  for (const ch of rearranged) {
+    expanded += /[A-Z]/.test(ch) ? String(ch.charCodeAt(0) - 55) : ch;
+  }
+  let remainder = 0;
+  for (let i = 0; i < expanded.length; i += 7) {
+    const chunk = remainder.toString() + expanded.slice(i, i + 7);
+    remainder = parseInt(chunk, 10) % 97;
+  }
+  return remainder === 1;
+}
 function findSchemaDir(startDir) {
   let dir = startDir;
   for (let i = 0; i < 6; i++) {
@@ -909,6 +1111,71 @@ var AF_RELATIONSHIP_MAP = {
   Data: pdfLib.AFRelationship.Data,
   Source: pdfLib.AFRelationship.Source
 };
+function ensureOutputIntent(pdfDoc, iccBytes, identifier) {
+  const existing = pdfDoc.catalog.lookup(pdfLib.PDFName.of("OutputIntents"));
+  if (existing instanceof pdfLib.PDFArray && existing.size() > 0) return;
+  const iccStream = pdfDoc.context.flateStream(iccBytes, { N: 3 });
+  const iccRef = pdfDoc.context.register(iccStream);
+  const intent = pdfDoc.context.obj({
+    Type: "OutputIntent",
+    S: "GTS_PDFA1",
+    OutputConditionIdentifier: pdfLib.PDFString.of(identifier),
+    RegistryName: pdfLib.PDFString.of("http://www.color.org"),
+    Info: pdfLib.PDFString.of(identifier),
+    DestOutputProfile: iccRef
+  });
+  const intents = pdfLib.PDFArray.withContext(pdfDoc.context);
+  intents.push(intent);
+  pdfDoc.catalog.set(pdfLib.PDFName.of("OutputIntents"), intents);
+}
+function findUnembeddedFonts(pdfDoc) {
+  const seen = /* @__PURE__ */ new Set();
+  const unembedded = /* @__PURE__ */ new Set();
+  const FONT_FILE_KEYS = [
+    pdfLib.PDFName.of("FontFile"),
+    pdfLib.PDFName.of("FontFile2"),
+    pdfLib.PDFName.of("FontFile3")
+  ];
+  const inspectFontDict = (font) => {
+    const subtype = font.lookup(pdfLib.PDFName.of("Subtype"));
+    const baseFont = font.lookup(pdfLib.PDFName.of("BaseFont"));
+    const baseFontName = baseFont instanceof pdfLib.PDFName ? baseFont.asString() : "<unknown>";
+    const subtypeName = subtype instanceof pdfLib.PDFName ? subtype.asString() : "";
+    if (subtypeName === "/Type0") {
+      const desc = font.lookup(pdfLib.PDFName.of("DescendantFonts"));
+      if (desc instanceof pdfLib.PDFArray) {
+        for (let i = 0; i < desc.size(); i += 1) {
+          const child = desc.lookup(i);
+          if (child instanceof pdfLib.PDFDict) inspectFontDict(child);
+        }
+      }
+      return;
+    }
+    const descriptor = font.lookup(pdfLib.PDFName.of("FontDescriptor"));
+    if (!(descriptor instanceof pdfLib.PDFDict)) {
+      unembedded.add(baseFontName);
+      return;
+    }
+    const hasEmbedded = FONT_FILE_KEYS.some((k) => descriptor.has(k));
+    if (!hasEmbedded) unembedded.add(baseFontName);
+  };
+  for (const page of pdfDoc.getPages()) {
+    const resources = page.node.Resources();
+    if (!resources) continue;
+    const fonts = resources.lookup(pdfLib.PDFName.of("Font"));
+    if (!(fonts instanceof pdfLib.PDFDict)) continue;
+    for (const [, value] of fonts.entries()) {
+      const ref = value instanceof pdfLib.PDFRef ? value : void 0;
+      if (ref) {
+        if (seen.has(ref)) continue;
+        seen.add(ref);
+      }
+      const font = ref ? pdfDoc.context.lookup(ref) : value;
+      if (font instanceof pdfLib.PDFDict) inspectFontDict(font);
+    }
+  }
+  return Array.from(unembedded);
+}
 function resolveAfRelationship(profile, override) {
   if (override) return AF_RELATIONSHIP_MAP[override];
   switch (profile) {
@@ -1025,6 +1292,9 @@ async function embedFacturX(options) {
     validateBeforeEmbed = true,
     validateXsd: runXsdValidation = false,
     addPdfA3Metadata = true,
+    rgbIccProfile,
+    outputIntentIdentifier = "sRGB IEC61966-2.1",
+    unembeddedFonts = "warn",
     meta
   } = options;
   if (!options.xml && !options.input) {
@@ -1038,7 +1308,7 @@ async function embedFacturX(options) {
   if (!xml) {
     const input = options.input;
     if (validateBeforeEmbed) {
-      validation = validateInput(input, profile);
+      validation = validateInput(input, profile, flavor);
       if (!validation.valid) {
         throw new Error(
           `Input validation failed for profile "${profile}":
@@ -1079,6 +1349,22 @@ async function embedFacturX(options) {
   pdfDoc.setCreationDate(now);
   pdfDoc.setModificationDate(now);
   if (addPdfA3Metadata) {
+    if (rgbIccProfile) {
+      const iccBytes = rgbIccProfile instanceof Uint8Array ? rgbIccProfile : new Uint8Array(rgbIccProfile);
+      ensureOutputIntent(pdfDoc, iccBytes, outputIntentIdentifier);
+    } else if (!(pdfDoc.catalog.lookup(pdfLib.PDFName.of("OutputIntents")) instanceof pdfLib.PDFArray)) {
+      console__default.default.warn(
+        "[factur-x] addPdfA3Metadata is enabled but no rgbIccProfile was supplied and the input PDF has no /OutputIntents. The resulting PDF will not be PDF/A-3 conformant."
+      );
+    }
+    if (unembeddedFonts !== "ignore") {
+      const missing = findUnembeddedFonts(pdfDoc);
+      if (missing.length > 0) {
+        const message = `[factur-x] PDF/A-3 requires every font program to be embedded; the following fonts are not embedded: ${missing.join(", ")}. Configure your PDF generator to embed all fonts.`;
+        if (unembeddedFonts === "throw") throw new Error(message);
+        console__default.default.warn(message);
+      }
+    }
     const isoDate = now.toISOString();
     const xmpXml = buildXmpMetadata({
       title,
@@ -1125,18 +1411,22 @@ function resolve(doc, obj) {
   return obj;
 }
 function detectProfile(xml) {
-  const profileMap = {
-    "urn:factur-x.eu:1p0:minimum": "MINIMUM" /* MINIMUM */,
-    "urn:factur-x.eu:1p0:basicwl": "BASIC_WL" /* BASIC_WL */,
-    "urn:factur-x.eu:1p0:basic": "BASIC" /* BASIC */,
-    "urn:factur-x.eu:1p0:en16931": "EN16931" /* EN16931 */,
-    "urn:factur-x.eu:1p0:extended": "EXTENDED" /* EXTENDED */,
-    "urn:cen.eu:en16931:2017": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.3": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.2": "EN16931" /* EN16931 */
-  };
-  for (const [urn, profile] of Object.entries(profileMap)) {
+  const profileMap = [
+    ["urn:cen.eu:en16931:2017#conformant#urn:factur-x.eu:1p0:extended", "EXTENDED" /* EXTENDED */],
+    ["urn:cen.eu:en16931:2017#conformant#urn:zugferd.de:2p0:extended", "EXTENDED" /* EXTENDED */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic", "BASIC" /* BASIC */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:zugferd.de:2p0:basic", "BASIC" /* BASIC */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.3", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.2", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017", "EN16931" /* EN16931 */],
+    ["urn:factur-x.eu:1p0:minimum", "MINIMUM" /* MINIMUM */],
+    ["urn:factur-x.eu:1p0:basicwl", "BASIC_WL" /* BASIC_WL */],
+    ["urn:factur-x.eu:1p0:basic", "BASIC" /* BASIC */],
+    ["urn:factur-x.eu:1p0:en16931", "EN16931" /* EN16931 */],
+    ["urn:factur-x.eu:1p0:extended", "EXTENDED" /* EXTENDED */]
+  ];
+  for (const [urn, profile] of profileMap) {
     if (xml.includes(urn)) return profile;
   }
   return void 0;
@@ -1204,9 +1494,16 @@ function toXRechnung(input, options) {
   const profile = options?.profile ?? "EN16931" /* EN16931 */;
   const validate = options?.validate ?? true;
   validateFlavorProfile("xrechnung" /* XRECHNUNG */, profile);
+  const enrichedInput = {
+    ...input,
+    document: {
+      ...input.document,
+      businessProcessId: resolveBusinessProcessUrn(input, "xrechnung" /* XRECHNUNG */)
+    }
+  };
   let validation;
   if (validate) {
-    validation = validateInput(input, profile);
+    validation = validateInput(enrichedInput, profile, "xrechnung" /* XRECHNUNG */);
     if (!validation.valid) {
       throw new Error(
         `Input validation failed for XRechnung (profile "${profile}"):
@@ -1214,13 +1511,6 @@ function toXRechnung(input, options) {
       );
     }
   }
-  const enrichedInput = {
-    ...input,
-    document: {
-      ...input.document,
-      businessProcessId: resolveBusinessProcessUrn(input, "xrechnung" /* XRECHNUNG */)
-    }
-  };
   const xml = buildXml(enrichedInput, profile, "xrechnung" /* XRECHNUNG */);
   return {
     xml,
@@ -1326,6 +1616,7 @@ exports.PROFILE_URNS = PROFILE_URNS;
 exports.Profile = Profile;
 exports.UnitCode = UnitCode;
 exports.VatCategoryCode = VatCategoryCode;
+exports.XRECHNUNG_PROFILE_URN = XRECHNUNG_PROFILE_URN;
 exports.buildXml = buildXml;
 exports.embedFacturX = embedFacturX;
 exports.escapeXml = escapeXml;

package/dist/index.d.cts

@@ -480,10 +480,22 @@ interface TradePartyInput {
      */
     contact?: ContactInput;
     /**
-     * Electronic address (e.g. email or URI for e-delivery).
+     * Electronic address (e.g. PEPPOL participant ID, email).
+     *
+     * `value` is the address itself (e.g. `"info@stack-forge.eu"`,
+     * `"0088:1234567890123"`).
+     * `schemeID` is the EAS code list value (e.g. `"EM"` for email,
+     * `"9930"` for German VAT, `"0088"` for GLN). Required by BR-62 /
+     * FX-SCH-A-000158 — a URIID without `@schemeID` is rejected by every
+     * conforming validator (Mustang, KoSIT, veraPDF).
+     *
      * @see EN 16931 BT-34 / BT-49
+     * @see https://docs.peppol.eu/poacc/billing/3.0/codelist/eas/
      */
-    electronicAddress?: string;
+    electronicAddress?: {
+        value: string;
+        schemeID: string;
+    };
     /**
      * Tax registrations (VAT ID, fiscal number).
      * @see EN 16931 BT-31 / BT-48
@@ -970,8 +982,20 @@ declare enum Flavor {
     XRECHNUNG = "xrechnung",
     CHRONO_PRO = "chrono-pro"
 }
-/** Profile URNs (GuidelineSpecifiedDocumentContextParameter) */
+/**
+ * Profile URNs (GuidelineSpecifiedDocumentContextParameter / BT-24).
+ *
+ * BASIC, EN16931, and EXTENDED use the EN 16931 conformance prefix because
+ * those profiles are CIUS / extension claims against the European norm. The
+ * exact strings are the only values accepted by the schematron shipped under
+ * `schema/{basic,en16931,extended}/` (the codedb cl id="1" enumeration).
+ */
 declare const PROFILE_URNS: Record<Profile, string>;
+/**
+ * XRechnung CIUS URN (BR-DE-21). Used as the profile URN when emitting
+ * XRechnung instead of pure Factur-X / ZUGFeRD.
+ */
+declare const XRECHNUNG_PROFILE_URN = "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0";
 
 /**
  * Default document type code per flavor.
@@ -1099,11 +1123,13 @@ interface ValidationResult {
  * Validates that the input contains all required fields for the given profile.
  * Requirements are cumulative: each profile includes all requirements of lower levels.
  *
- * @param input - Invoice input to validate
+ * @param input   - Invoice input to validate
  * @param profile - Target profile (MINIMUM, BASIC_WL, BASIC, EN16931, or EXTENDED)
+ * @param flavor  - Optional flavor; when {@link Flavor.XRECHNUNG}, additional
+ *                  BR-DE / PEPPOL-EN16931 rules are applied on top of the profile rules.
  * @returns Validation result with valid flag and any errors
  */
-declare function validateInput(input: FacturXInvoiceInput, profile: Profile): ValidationResult;
+declare function validateInput(input: FacturXInvoiceInput, profile: Profile, flavor?: Flavor): ValidationResult;
 
 /**
  * XSD Schema Validation
@@ -1203,6 +1229,36 @@ interface EmbedOptions {
     validateXsd?: boolean;
     /** Add PDF/A-3 metadata (default: `true`). */
     addPdfA3Metadata?: boolean;
+    /**
+     * RGB ICC profile bytes used to inject the PDF/A required `/OutputIntents`
+     * entry when the input PDF does not already have one.
+     *
+     * PDF/A-3 forbids DeviceRGB without an OutputIntent that references an
+     * RGB destination profile (ISO 19005-3 §6.2.4.3). pdf-lib does not produce
+     * PDF/A by default, so this library will add the entry on save when this
+     * profile is supplied.
+     *
+     * Drop in any sRGB ICC v2 profile compatible with your licensing needs
+     * (e.g. the ICC.org public profile, or one bundled with Argyll CMS / PDFBox).
+     * When omitted and {@link addPdfA3Metadata} is `true`, the library logs a
+     * warning and the resulting PDF will not be PDF/A-3 conformant.
+     */
+    rgbIccProfile?: Uint8Array | Buffer;
+    /**
+     * Output intent identifier written into the OutputIntent dictionary.
+     * Defaults to `"sRGB IEC61966-2.1"` which matches the standard sRGB profile.
+     */
+    outputIntentIdentifier?: string;
+    /**
+     * How to react when the input PDF references fonts that are not embedded.
+     * PDF/A-3 requires every font to be embedded (ISO 19005-3 §6.2.11.4.1) —
+     * this library cannot fix that post-hoc, so it surfaces the gap.
+     *
+     * - `"warn"` (default): log a warning to `console.warn` and continue.
+     * - `"throw"`: reject the PDF with an error.
+     * - `"ignore"`: skip the check entirely.
+     */
+    unembeddedFonts?: "warn" | "throw" | "ignore";
     /**
      * Override the AF relationship for the embedded XML attachment.
      *
@@ -1379,4 +1435,4 @@ interface XRechnungResult {
  */
 declare function toXRechnung(input: FacturXInvoiceInput, options?: XRechnungOptions): XRechnungResult;
 
-export { type AddressInput, type AllowanceChargeInput, type BillingPeriodInput, type ContactInput, type DeliveryInput, type DocumentReferenceInput, DocumentTypeCode, type EmbedOptions, type EmbedResult, type ExtractOptions, type ExtractResult, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, type FacturXInvoiceInput, Flavor, type FlavorConfig, type InvoiceDocumentInput, type InvoiceLineInput, type InvoiceTotalsInput, type LegalOrganizationInput, type NoteInput, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, type PaymentInput, Profile, type TaxRegistrationInput, type TradePartyInput, UnitCode, type ValidationError, type ValidationResult, type VatBreakdownInput, VatCategoryCode, type XRechnungOptions, type XRechnungResult, type XsdValidateOptions, type XsdValidationError, type XsdValidationResult, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };
+export { type AddressInput, type AllowanceChargeInput, type BillingPeriodInput, type ContactInput, type DeliveryInput, type DocumentReferenceInput, DocumentTypeCode, type EmbedOptions, type EmbedResult, type ExtractOptions, type ExtractResult, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, type FacturXInvoiceInput, Flavor, type FlavorConfig, type InvoiceDocumentInput, type InvoiceLineInput, type InvoiceTotalsInput, type LegalOrganizationInput, type NoteInput, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, type PaymentInput, Profile, type TaxRegistrationInput, type TradePartyInput, UnitCode, type ValidationError, type ValidationResult, type VatBreakdownInput, VatCategoryCode, XRECHNUNG_PROFILE_URN, type XRechnungOptions, type XRechnungResult, type XsdValidateOptions, type XsdValidationError, type XsdValidationResult, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };

package/dist/index.d.ts

@@ -480,10 +480,22 @@ interface TradePartyInput {
      */
     contact?: ContactInput;
     /**
-     * Electronic address (e.g. email or URI for e-delivery).
+     * Electronic address (e.g. PEPPOL participant ID, email).
+     *
+     * `value` is the address itself (e.g. `"info@stack-forge.eu"`,
+     * `"0088:1234567890123"`).
+     * `schemeID` is the EAS code list value (e.g. `"EM"` for email,
+     * `"9930"` for German VAT, `"0088"` for GLN). Required by BR-62 /
+     * FX-SCH-A-000158 — a URIID without `@schemeID` is rejected by every
+     * conforming validator (Mustang, KoSIT, veraPDF).
+     *
      * @see EN 16931 BT-34 / BT-49
+     * @see https://docs.peppol.eu/poacc/billing/3.0/codelist/eas/
      */
-    electronicAddress?: string;
+    electronicAddress?: {
+        value: string;
+        schemeID: string;
+    };
     /**
      * Tax registrations (VAT ID, fiscal number).
      * @see EN 16931 BT-31 / BT-48
@@ -970,8 +982,20 @@ declare enum Flavor {
     XRECHNUNG = "xrechnung",
     CHRONO_PRO = "chrono-pro"
 }
-/** Profile URNs (GuidelineSpecifiedDocumentContextParameter) */
+/**
+ * Profile URNs (GuidelineSpecifiedDocumentContextParameter / BT-24).
+ *
+ * BASIC, EN16931, and EXTENDED use the EN 16931 conformance prefix because
+ * those profiles are CIUS / extension claims against the European norm. The
+ * exact strings are the only values accepted by the schematron shipped under
+ * `schema/{basic,en16931,extended}/` (the codedb cl id="1" enumeration).
+ */
 declare const PROFILE_URNS: Record<Profile, string>;
+/**
+ * XRechnung CIUS URN (BR-DE-21). Used as the profile URN when emitting
+ * XRechnung instead of pure Factur-X / ZUGFeRD.
+ */
+declare const XRECHNUNG_PROFILE_URN = "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0";
 
 /**
  * Default document type code per flavor.
@@ -1099,11 +1123,13 @@ interface ValidationResult {
  * Validates that the input contains all required fields for the given profile.
  * Requirements are cumulative: each profile includes all requirements of lower levels.
  *
- * @param input - Invoice input to validate
+ * @param input   - Invoice input to validate
  * @param profile - Target profile (MINIMUM, BASIC_WL, BASIC, EN16931, or EXTENDED)
+ * @param flavor  - Optional flavor; when {@link Flavor.XRECHNUNG}, additional
+ *                  BR-DE / PEPPOL-EN16931 rules are applied on top of the profile rules.
  * @returns Validation result with valid flag and any errors
  */
-declare function validateInput(input: FacturXInvoiceInput, profile: Profile): ValidationResult;
+declare function validateInput(input: FacturXInvoiceInput, profile: Profile, flavor?: Flavor): ValidationResult;
 
 /**
  * XSD Schema Validation
@@ -1203,6 +1229,36 @@ interface EmbedOptions {
     validateXsd?: boolean;
     /** Add PDF/A-3 metadata (default: `true`). */
     addPdfA3Metadata?: boolean;
+    /**
+     * RGB ICC profile bytes used to inject the PDF/A required `/OutputIntents`
+     * entry when the input PDF does not already have one.
+     *
+     * PDF/A-3 forbids DeviceRGB without an OutputIntent that references an
+     * RGB destination profile (ISO 19005-3 §6.2.4.3). pdf-lib does not produce
+     * PDF/A by default, so this library will add the entry on save when this
+     * profile is supplied.
+     *
+     * Drop in any sRGB ICC v2 profile compatible with your licensing needs
+     * (e.g. the ICC.org public profile, or one bundled with Argyll CMS / PDFBox).
+     * When omitted and {@link addPdfA3Metadata} is `true`, the library logs a
+     * warning and the resulting PDF will not be PDF/A-3 conformant.
+     */
+    rgbIccProfile?: Uint8Array | Buffer;
+    /**
+     * Output intent identifier written into the OutputIntent dictionary.
+     * Defaults to `"sRGB IEC61966-2.1"` which matches the standard sRGB profile.
+     */
+    outputIntentIdentifier?: string;
+    /**
+     * How to react when the input PDF references fonts that are not embedded.
+     * PDF/A-3 requires every font to be embedded (ISO 19005-3 §6.2.11.4.1) —
+     * this library cannot fix that post-hoc, so it surfaces the gap.
+     *
+     * - `"warn"` (default): log a warning to `console.warn` and continue.
+     * - `"throw"`: reject the PDF with an error.
+     * - `"ignore"`: skip the check entirely.
+     */
+    unembeddedFonts?: "warn" | "throw" | "ignore";
     /**
      * Override the AF relationship for the embedded XML attachment.
      *
@@ -1379,4 +1435,4 @@ interface XRechnungResult {
  */
 declare function toXRechnung(input: FacturXInvoiceInput, options?: XRechnungOptions): XRechnungResult;
 
-export { type AddressInput, type AllowanceChargeInput, type BillingPeriodInput, type ContactInput, type DeliveryInput, type DocumentReferenceInput, DocumentTypeCode, type EmbedOptions, type EmbedResult, type ExtractOptions, type ExtractResult, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, type FacturXInvoiceInput, Flavor, type FlavorConfig, type InvoiceDocumentInput, type InvoiceLineInput, type InvoiceTotalsInput, type LegalOrganizationInput, type NoteInput, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, type PaymentInput, Profile, type TaxRegistrationInput, type TradePartyInput, UnitCode, type ValidationError, type ValidationResult, type VatBreakdownInput, VatCategoryCode, type XRechnungOptions, type XRechnungResult, type XsdValidateOptions, type XsdValidationError, type XsdValidationResult, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };
+export { type AddressInput, type AllowanceChargeInput, type BillingPeriodInput, type ContactInput, type DeliveryInput, type DocumentReferenceInput, DocumentTypeCode, type EmbedOptions, type EmbedResult, type ExtractOptions, type ExtractResult, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, type FacturXInvoiceInput, Flavor, type FlavorConfig, type InvoiceDocumentInput, type InvoiceLineInput, type InvoiceTotalsInput, type LegalOrganizationInput, type NoteInput, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, type PaymentInput, Profile, type TaxRegistrationInput, type TradePartyInput, UnitCode, type ValidationError, type ValidationResult, type VatBreakdownInput, VatCategoryCode, XRECHNUNG_PROFILE_URN, type XRechnungOptions, type XRechnungResult, type XsdValidateOptions, type XsdValidationError, type XsdValidationResult, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };

package/dist/index.js

@@ -1,7 +1,8 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import { fileURLToPath } from 'url';
-import { AFRelationship, PDFDocument, PDFName, PDFDict, PDFStream, PDFRawStream, decodePDFRawStream, PDFArray, PDFRef, PDFString, PDFHexString } from 'pdf-lib';
+import console from 'console';
+import { AFRelationship, PDFDocument, PDFName, PDFArray, PDFDict, PDFStream, PDFRawStream, decodePDFRawStream, PDFString, PDFRef, PDFHexString } from 'pdf-lib';
 
 // src/types/input.ts
 var DocumentTypeCode = /* @__PURE__ */ ((DocumentTypeCode2) => {
@@ -148,10 +149,11 @@ var Flavor = /* @__PURE__ */ ((Flavor2) => {
 var PROFILE_URNS = {
   MINIMUM: "urn:factur-x.eu:1p0:minimum",
   BASIC_WL: "urn:factur-x.eu:1p0:basicwl",
-  BASIC: "urn:factur-x.eu:1p0:basic",
-  EN16931: "urn:factur-x.eu:1p0:en16931",
-  EXTENDED: "urn:factur-x.eu:1p0:extended"
+  BASIC: "urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic",
+  EN16931: "urn:cen.eu:en16931:2017",
+  EXTENDED: "urn:cen.eu:en16931:2017#conformant#urn:factur-x.eu:1p0:extended"
 };
+var XRECHNUNG_PROFILE_URN = "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0";
 var FLAVOR_DEFAULT_TYPE_CODES = {
   ["factur-x" /* FACTUR_X */]: "380" /* COMMERCIAL_INVOICE */,
   ["zugferd" /* ZUGFERD */]: "380" /* COMMERCIAL_INVOICE */,
@@ -321,7 +323,12 @@ function buildParty(p, profile) {
   if (p.contact && atLeast(profile, "EN16931" /* EN16931 */)) x += buildContact(p.contact);
   if (p.address && atLeast(profile, "BASIC_WL" /* BASIC_WL */)) x += buildAddress(p.address);
   if (p.electronicAddress)
-    x += tag("ram:URIUniversalCommunication", tag("ram:URIID", escapeXml(p.electronicAddress)));
+    x += tag(
+      "ram:URIUniversalCommunication",
+      tag("ram:URIID", escapeXml(p.electronicAddress.value), {
+        schemeID: p.electronicAddress.schemeID
+      })
+    );
   if (p.taxRegistrations) {
     for (const tr of p.taxRegistrations) {
       x += tag(
@@ -367,7 +374,7 @@ function buildLineItem(line, profile) {
       tx += tag("ram:RateApplicablePercent", line.vatRatePercent.toString());
     settle += tag("ram:ApplicableTradeTax", tx);
   }
-  const lineTotal = line.lineTotal ?? line.quantity * line.unitPrice;
+  const lineTotal = line.lineTotal ?? Math.round(line.quantity * line.unitPrice * 100) / 100;
   settle += tag(
     "ram:SpecifiedTradeSettlementLineMonetarySummation",
     tag("ram:LineTotalAmount", fmtAmt(lineTotal))
@@ -450,9 +457,10 @@ function buildXml(input, profile, flavor) {
       "ram:BusinessProcessSpecifiedDocumentContextParameter",
       tag("ram:ID", escapeXml(doc.businessProcessId))
     );
+  const profileUrn = fl === "xrechnung" /* XRECHNUNG */ ? XRECHNUNG_PROFILE_URN : PROFILE_URNS[profile];
   ctx += tag(
     "ram:GuidelineSpecifiedDocumentContextParameter",
-    tag("ram:ID", PROFILE_URNS[profile])
+    tag("ram:ID", profileUrn)
   );
   let edoc = tag("ram:ID", escapeXml(doc.id));
   if (doc.name && atLeast(profile, "EXTENDED" /* EXTENDED */)) edoc += tag("ram:Name", escapeXml(doc.name));
@@ -505,6 +513,7 @@ function buildXml(input, profile, flavor) {
   }
   tx += tag("ram:ApplicableHeaderTradeAgreement", agree);
   let del = "";
+  let hasActualDelivery = false;
   if (input.delivery && atLeast(profile, "BASIC_WL" /* BASIC_WL */)) {
     if (input.delivery.partyName || input.delivery.location) {
       let sp = "";
@@ -512,11 +521,13 @@ function buildXml(input, profile, flavor) {
       if (input.delivery.location) sp += buildAddress(input.delivery.location);
       del += tag("ram:ShipToTradeParty", sp);
     }
-    if (input.delivery.date)
+    if (input.delivery.date) {
       del += tag(
         "ram:ActualDeliverySupplyChainEvent",
         dateEl("ram:OccurrenceDateTime", input.delivery.date)
       );
+      hasActualDelivery = true;
+    }
     if (input.delivery.despatchAdviceReference)
       del += tag(
         "ram:DespatchAdviceReferencedDocument",
@@ -532,6 +543,12 @@ function buildXml(input, profile, flavor) {
       }
     }
   }
+  if (atLeast(profile, "BASIC" /* BASIC */) && !hasActualDelivery && typeCode !== "386" /* PREPAYMENT_INVOICE */) {
+    del += tag(
+      "ram:ActualDeliverySupplyChainEvent",
+      dateEl("ram:OccurrenceDateTime", doc.issueDate)
+    );
+  }
   tx += tag("ram:ApplicableHeaderTradeDelivery", del);
   let sett = "";
   if (payment?.creditorReference && atLeast(profile, "BASIC_WL" /* BASIC_WL */))
@@ -609,7 +626,7 @@ var PROFILE_LEVEL2 = {
 function addError(errors, field, message, profile) {
   errors.push({ field, message, profile });
 }
-function validateInput(input, profile) {
+function validateInput(input, profile, flavor) {
   const errors = [];
   const level = PROFILE_LEVEL2[profile];
   const req = (minProfile) => level >= PROFILE_LEVEL2[minProfile];
@@ -796,11 +813,193 @@ function validateInput(input, profile) {
       }
     });
   }
+  if (req("BASIC_WL" /* BASIC_WL */)) {
+    for (const role of ["seller", "buyer"]) {
+      const ea = input[role]?.electronicAddress;
+      if (ea && !ea.schemeID) {
+        addError(
+          errors,
+          `${role}.electronicAddress.schemeID`,
+          `${role.charAt(0).toUpperCase() + role.slice(1)} electronic address must include schemeID (BR-62 / FX-SCH-A-000158).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC" /* BASIC */) && input.lines) {
+    input.lines.forEach((line, i) => {
+      if (typeof line.unitPrice === "number" && line.unitPrice < 0) {
+        addError(
+          errors,
+          `lines[${i}].unitPrice`,
+          "Line unit price must not be negative (BR-27). Use allowancesCharges for discounts.",
+          "BASIC" /* BASIC */
+        );
+      }
+    });
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals) {
+    const t = input.totals;
+    if (t.taxBasisTotal != null && t.taxTotal != null && t.grandTotal != null) {
+      const expected = round2(t.taxBasisTotal + t.taxTotal);
+      if (Math.abs(round2(t.grandTotal) - expected) > 0.01) {
+        addError(
+          errors,
+          "totals.grandTotal",
+          `Grand total ${t.grandTotal} does not equal taxBasisTotal + taxTotal (${expected}) (BR-CO-15).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals) {
+    const t = input.totals;
+    if (t.lineTotal != null && t.taxBasisTotal != null) {
+      const allowance = t.allowanceTotal ?? 0;
+      const charge = t.chargeTotal ?? 0;
+      const expected = round2(t.lineTotal - allowance + charge);
+      if (Math.abs(round2(t.taxBasisTotal) - expected) > 0.01) {
+        addError(
+          errors,
+          "totals.taxBasisTotal",
+          `taxBasisTotal ${t.taxBasisTotal} does not equal lineTotal - allowanceTotal + chargeTotal (${expected}) (BR-CO-13).`,
+          "BASIC_WL" /* BASIC_WL */
+        );
+      }
+    }
+  }
+  if (req("BASIC" /* BASIC */) && input.totals && input.lines) {
+    const sumLineNets = input.lines.reduce((sum, l) => {
+      const lineNet = l.lineTotal ?? (typeof l.quantity === "number" && typeof l.unitPrice === "number" ? l.quantity * l.unitPrice : 0);
+      return sum + lineNet;
+    }, 0);
+    if (input.totals.lineTotal != null) {
+      if (Math.abs(round2(input.totals.lineTotal) - round2(sumLineNets)) > 0.01) {
+        addError(
+          errors,
+          "totals.lineTotal",
+          `lineTotal ${input.totals.lineTotal} does not equal \u03A3 line nets (${round2(sumLineNets)}) (BR-CO-10).`,
+          "BASIC" /* BASIC */
+        );
+      }
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.totals?.taxTotal != null && input.vatBreakdown) {
+    const sumVat = input.vatBreakdown.reduce((s, v) => s + (v.taxAmount ?? 0), 0);
+    if (Math.abs(round2(input.totals.taxTotal) - round2(sumVat)) > 0.01) {
+      addError(
+        errors,
+        "totals.taxTotal",
+        `taxTotal ${input.totals.taxTotal} does not equal \u03A3 vatBreakdown.taxAmount (${round2(sumVat)}) (BR-CO-14).`,
+        "BASIC_WL" /* BASIC_WL */
+      );
+    }
+  }
+  if (req("BASIC_WL" /* BASIC_WL */) && input.vatBreakdown) {
+    input.vatBreakdown.forEach((vb, i) => {
+      if (vb.taxableAmount != null && vb.taxAmount != null && vb.ratePercent != null) {
+        const expected = round2(vb.taxableAmount * vb.ratePercent / 100);
+        if (Math.abs(round2(vb.taxAmount) - expected) > 0.01) {
+          addError(
+            errors,
+            `vatBreakdown[${i}].taxAmount`,
+            `taxAmount ${vb.taxAmount} does not equal round(taxableAmount \xD7 ratePercent / 100) = ${expected} (BR-CO-17).`,
+            "BASIC_WL" /* BASIC_WL */
+          );
+        }
+      }
+    });
+  }
+  if (req("BASIC" /* BASIC */) && input.document) {
+    const isPrepayment = input.document.typeCode === "386";
+    if (!isPrepayment) {
+      const hasDeliveryDate = !!input.delivery?.date;
+      const hasBillingPeriod = !!input.billingPeriod;
+      if (!hasDeliveryDate && !hasBillingPeriod) {
+        addError(
+          errors,
+          "delivery.date",
+          "Provide delivery.date or billingPeriod (BR-FX-EN-04).",
+          "BASIC" /* BASIC */
+        );
+      }
+    }
+  }
+  if (flavor === "xrechnung" /* XRECHNUNG */) {
+    if (!input.document?.buyerReference) {
+      addError(
+        errors,
+        "document.buyerReference",
+        "BuyerReference (BT-10) is required for XRechnung (BR-DE-15).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.document?.businessProcessId) {
+      addError(
+        errors,
+        "document.businessProcessId",
+        "Business process (BT-23) is required for XRechnung (PEPPOL-EN16931-R001).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.seller?.contact || !input.seller.contact.name && !input.seller.contact.email && !input.seller.contact.phone) {
+      addError(
+        errors,
+        "seller.contact",
+        "Seller contact (BG-6) with name, email or phone is required for XRechnung (BR-DE-2).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.seller?.electronicAddress?.value || !input.seller.electronicAddress.schemeID) {
+      addError(
+        errors,
+        "seller.electronicAddress",
+        "Seller electronic address (BT-34) with non-empty schemeID is required for XRechnung (PEPPOL-EN16931-R020 / BR-62).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (!input.buyer?.electronicAddress?.value || !input.buyer.electronicAddress.schemeID) {
+      addError(
+        errors,
+        "buyer.electronicAddress",
+        "Buyer electronic address (BT-49) with non-empty schemeID is required for XRechnung (PEPPOL-EN16931-R010 / BR-62).",
+        "EN16931" /* EN16931 */
+      );
+    }
+    if (input.payment?.meansCode === "58" && input.payment.iban) {
+      if (!isValidIban(input.payment.iban)) {
+        addError(
+          errors,
+          "payment.iban",
+          "IBAN is not syntactically valid (BR-DE-19).",
+          "EN16931" /* EN16931 */
+        );
+      }
+    }
+  }
   return {
     valid: errors.length === 0,
     errors
   };
 }
+function round2(n) {
+  return Math.round(n * 100) / 100;
+}
+function isValidIban(iban) {
+  const normalized = iban.replace(/\s+/g, "").toUpperCase();
+  if (!/^[A-Z]{2}\d{2}[A-Z0-9]{1,30}$/.test(normalized)) return false;
+  const rearranged = normalized.slice(4) + normalized.slice(0, 4);
+  let expanded = "";
+  for (const ch of rearranged) {
+    expanded += /[A-Z]/.test(ch) ? String(ch.charCodeAt(0) - 55) : ch;
+  }
+  let remainder = 0;
+  for (let i = 0; i < expanded.length; i += 7) {
+    const chunk = remainder.toString() + expanded.slice(i, i + 7);
+    remainder = parseInt(chunk, 10) % 97;
+  }
+  return remainder === 1;
+}
 function findSchemaDir(startDir) {
   let dir = startDir;
   for (let i = 0; i < 6; i++) {
@@ -882,6 +1081,71 @@ var AF_RELATIONSHIP_MAP = {
   Data: AFRelationship.Data,
   Source: AFRelationship.Source
 };
+function ensureOutputIntent(pdfDoc, iccBytes, identifier) {
+  const existing = pdfDoc.catalog.lookup(PDFName.of("OutputIntents"));
+  if (existing instanceof PDFArray && existing.size() > 0) return;
+  const iccStream = pdfDoc.context.flateStream(iccBytes, { N: 3 });
+  const iccRef = pdfDoc.context.register(iccStream);
+  const intent = pdfDoc.context.obj({
+    Type: "OutputIntent",
+    S: "GTS_PDFA1",
+    OutputConditionIdentifier: PDFString.of(identifier),
+    RegistryName: PDFString.of("http://www.color.org"),
+    Info: PDFString.of(identifier),
+    DestOutputProfile: iccRef
+  });
+  const intents = PDFArray.withContext(pdfDoc.context);
+  intents.push(intent);
+  pdfDoc.catalog.set(PDFName.of("OutputIntents"), intents);
+}
+function findUnembeddedFonts(pdfDoc) {
+  const seen = /* @__PURE__ */ new Set();
+  const unembedded = /* @__PURE__ */ new Set();
+  const FONT_FILE_KEYS = [
+    PDFName.of("FontFile"),
+    PDFName.of("FontFile2"),
+    PDFName.of("FontFile3")
+  ];
+  const inspectFontDict = (font) => {
+    const subtype = font.lookup(PDFName.of("Subtype"));
+    const baseFont = font.lookup(PDFName.of("BaseFont"));
+    const baseFontName = baseFont instanceof PDFName ? baseFont.asString() : "<unknown>";
+    const subtypeName = subtype instanceof PDFName ? subtype.asString() : "";
+    if (subtypeName === "/Type0") {
+      const desc = font.lookup(PDFName.of("DescendantFonts"));
+      if (desc instanceof PDFArray) {
+        for (let i = 0; i < desc.size(); i += 1) {
+          const child = desc.lookup(i);
+          if (child instanceof PDFDict) inspectFontDict(child);
+        }
+      }
+      return;
+    }
+    const descriptor = font.lookup(PDFName.of("FontDescriptor"));
+    if (!(descriptor instanceof PDFDict)) {
+      unembedded.add(baseFontName);
+      return;
+    }
+    const hasEmbedded = FONT_FILE_KEYS.some((k) => descriptor.has(k));
+    if (!hasEmbedded) unembedded.add(baseFontName);
+  };
+  for (const page of pdfDoc.getPages()) {
+    const resources = page.node.Resources();
+    if (!resources) continue;
+    const fonts = resources.lookup(PDFName.of("Font"));
+    if (!(fonts instanceof PDFDict)) continue;
+    for (const [, value] of fonts.entries()) {
+      const ref = value instanceof PDFRef ? value : void 0;
+      if (ref) {
+        if (seen.has(ref)) continue;
+        seen.add(ref);
+      }
+      const font = ref ? pdfDoc.context.lookup(ref) : value;
+      if (font instanceof PDFDict) inspectFontDict(font);
+    }
+  }
+  return Array.from(unembedded);
+}
 function resolveAfRelationship(profile, override) {
   if (override) return AF_RELATIONSHIP_MAP[override];
   switch (profile) {
@@ -998,6 +1262,9 @@ async function embedFacturX(options) {
     validateBeforeEmbed = true,
     validateXsd: runXsdValidation = false,
     addPdfA3Metadata = true,
+    rgbIccProfile,
+    outputIntentIdentifier = "sRGB IEC61966-2.1",
+    unembeddedFonts = "warn",
     meta
   } = options;
   if (!options.xml && !options.input) {
@@ -1011,7 +1278,7 @@ async function embedFacturX(options) {
   if (!xml) {
     const input = options.input;
     if (validateBeforeEmbed) {
-      validation = validateInput(input, profile);
+      validation = validateInput(input, profile, flavor);
       if (!validation.valid) {
         throw new Error(
           `Input validation failed for profile "${profile}":
@@ -1052,6 +1319,22 @@ async function embedFacturX(options) {
   pdfDoc.setCreationDate(now);
   pdfDoc.setModificationDate(now);
   if (addPdfA3Metadata) {
+    if (rgbIccProfile) {
+      const iccBytes = rgbIccProfile instanceof Uint8Array ? rgbIccProfile : new Uint8Array(rgbIccProfile);
+      ensureOutputIntent(pdfDoc, iccBytes, outputIntentIdentifier);
+    } else if (!(pdfDoc.catalog.lookup(PDFName.of("OutputIntents")) instanceof PDFArray)) {
+      console.warn(
+        "[factur-x] addPdfA3Metadata is enabled but no rgbIccProfile was supplied and the input PDF has no /OutputIntents. The resulting PDF will not be PDF/A-3 conformant."
+      );
+    }
+    if (unembeddedFonts !== "ignore") {
+      const missing = findUnembeddedFonts(pdfDoc);
+      if (missing.length > 0) {
+        const message = `[factur-x] PDF/A-3 requires every font program to be embedded; the following fonts are not embedded: ${missing.join(", ")}. Configure your PDF generator to embed all fonts.`;
+        if (unembeddedFonts === "throw") throw new Error(message);
+        console.warn(message);
+      }
+    }
     const isoDate = now.toISOString();
     const xmpXml = buildXmpMetadata({
       title,
@@ -1098,18 +1381,22 @@ function resolve(doc, obj) {
   return obj;
 }
 function detectProfile(xml) {
-  const profileMap = {
-    "urn:factur-x.eu:1p0:minimum": "MINIMUM" /* MINIMUM */,
-    "urn:factur-x.eu:1p0:basicwl": "BASIC_WL" /* BASIC_WL */,
-    "urn:factur-x.eu:1p0:basic": "BASIC" /* BASIC */,
-    "urn:factur-x.eu:1p0:en16931": "EN16931" /* EN16931 */,
-    "urn:factur-x.eu:1p0:extended": "EXTENDED" /* EXTENDED */,
-    "urn:cen.eu:en16931:2017": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.3": "EN16931" /* EN16931 */,
-    "urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.2": "EN16931" /* EN16931 */
-  };
-  for (const [urn, profile] of Object.entries(profileMap)) {
+  const profileMap = [
+    ["urn:cen.eu:en16931:2017#conformant#urn:factur-x.eu:1p0:extended", "EXTENDED" /* EXTENDED */],
+    ["urn:cen.eu:en16931:2017#conformant#urn:zugferd.de:2p0:extended", "EXTENDED" /* EXTENDED */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:factur-x.eu:1p0:basic", "BASIC" /* BASIC */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:zugferd.de:2p0:basic", "BASIC" /* BASIC */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_3.0", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.3", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017#compliant#urn:xeinkauf.de:kosit:xrechnung_2.2", "EN16931" /* EN16931 */],
+    ["urn:cen.eu:en16931:2017", "EN16931" /* EN16931 */],
+    ["urn:factur-x.eu:1p0:minimum", "MINIMUM" /* MINIMUM */],
+    ["urn:factur-x.eu:1p0:basicwl", "BASIC_WL" /* BASIC_WL */],
+    ["urn:factur-x.eu:1p0:basic", "BASIC" /* BASIC */],
+    ["urn:factur-x.eu:1p0:en16931", "EN16931" /* EN16931 */],
+    ["urn:factur-x.eu:1p0:extended", "EXTENDED" /* EXTENDED */]
+  ];
+  for (const [urn, profile] of profileMap) {
     if (xml.includes(urn)) return profile;
   }
   return void 0;
@@ -1177,9 +1464,16 @@ function toXRechnung(input, options) {
   const profile = options?.profile ?? "EN16931" /* EN16931 */;
   const validate = options?.validate ?? true;
   validateFlavorProfile("xrechnung" /* XRECHNUNG */, profile);
+  const enrichedInput = {
+    ...input,
+    document: {
+      ...input.document,
+      businessProcessId: resolveBusinessProcessUrn(input, "xrechnung" /* XRECHNUNG */)
+    }
+  };
   let validation;
   if (validate) {
-    validation = validateInput(input, profile);
+    validation = validateInput(enrichedInput, profile, "xrechnung" /* XRECHNUNG */);
     if (!validation.valid) {
       throw new Error(
         `Input validation failed for XRechnung (profile "${profile}"):
@@ -1187,13 +1481,6 @@ function toXRechnung(input, options) {
       );
     }
   }
-  const enrichedInput = {
-    ...input,
-    document: {
-      ...input.document,
-      businessProcessId: resolveBusinessProcessUrn(input, "xrechnung" /* XRECHNUNG */)
-    }
-  };
   const xml = buildXml(enrichedInput, profile, "xrechnung" /* XRECHNUNG */);
   return {
     xml,
@@ -1289,4 +1576,4 @@ function toXRechnung(input, options) {
  * ```
  */
 
-export { DocumentTypeCode, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, Flavor, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, Profile, UnitCode, VatCategoryCode, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };
+export { DocumentTypeCode, FLAVOR_CONFIGS, FLAVOR_DEFAULT_TYPE_CODES, Flavor, PROFILE_MAIN_XSD, PROFILE_SCHEMA_DIRS, PROFILE_URNS, Profile, UnitCode, VatCategoryCode, XRECHNUNG_PROFILE_URN, buildXml, embedFacturX, escapeXml, extractXml, getFlavorConfig, resolveBusinessProcessUrn, resolveTypeCode, toXRechnung, validateFlavorProfile, validateInput, validateXsd };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackforge-eu/factur-x",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "type": "module",
   "description": "Embed Factur-X, ZUGFeRD, and XRechnung structured invoice XML into PDF/A-3 documents",
   "keywords": [