@updraft-solutions/mcrit-sdk 0.8.0 → 0.10.0

package/dist/types/index.d.cts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { aB as activitySchema, aC as addressSchema, aD as aircraftPositionSchema, aE as aircraftRatingSchema, aJ as airplaneSchema, aI as airplanePermissionSchema, aK as airplaneShareInviteSchema, aL as airportSchema, aM as alertSchema, aN as allowedDocumentTypeSchema, aO as approachTypeSchema, aP as availSchema, aQ as baseMembershipSchema, aR as bookingSchema, aT as commentSchema, aU as companySchema, a_ as courseSchema, aY as courseEnrollmentSchema, aZ as courseFeeSchema, aG as airplaneIssueSeverityEnum, b4 as documentSchema, b0 as documentComplianceStatus, b1 as documentRequirement, b2 as documentRequirementGroup, b3 as documentRequirementGroupAssignment, b5 as documentShareSchema, b6 as documentType, b8 as eventSchema, ba as expenseSchema, b9 as expenseItemSchema, bb as extendedAirplaneSchema, bd as feeSchema, bc as feeCategoryOptionsSchema, be as flightLogSchema, bl as invoiceSchema, bn as landingSchema, bm as landingFeeSchema, bp as maintenanceEventSchema, bo as maintenanceEventEstimationSchema, bq as maintenanceStatusSchema, br as mediaCollection, bt as membershipSchema, bu as membershipSignupSchema, bv as postSchema, bw as prePaidPackageSchema, bx as priceSchema, by as qualificationSchema, bz as recurringFlightSchema, bA as roleSchema, bB as runwaySchema, bC as scheduledFlightSchema, bD as settingSchema, bE as specialFlightSchema, bL as tagSchema, bM as ticketSchema, bW as userSchema, bU as userAircraftRatingSchema, bV as userQualificationSchema, bX as waypointSchema, aF as airplaneIssueSchema, aH as airplaneIssueStatusEnum, B as BaseModel$1, aW as courseCheckSyllabusSchema, aX as courseEnrollmentMetricsSchema, bs as mediaSchema, l as FormSubmission } from '../training-BibD4HsC.cjs';
+import { aB as activitySchema, aC as addressSchema, aD as aircraftPositionSchema, aE as aircraftRatingSchema, aJ as airplaneSchema, aI as airplanePermissionSchema, aK as airplaneShareInviteSchema, aL as airportSchema, aM as alertSchema, aN as allowedDocumentTypeSchema, aO as approachTypeSchema, aP as availSchema, aQ as baseMembershipSchema, aS as bookingSchema, aU as commentSchema, aV as companySchema, a$ as courseSchema, aZ as courseEnrollmentSchema, a_ as courseFeeSchema, aG as airplaneIssueSeverityEnum, b5 as documentSchema, b1 as documentComplianceStatus, b2 as documentRequirement, b3 as documentRequirementGroup, b4 as documentRequirementGroupAssignment, b6 as documentShareSchema, b7 as documentType, b9 as eventSchema, bb as expenseSchema, ba as expenseItemSchema, bc as extendedAirplaneSchema, be as feeSchema, bd as feeCategoryOptionsSchema, bf as flightLogSchema, bm as invoiceSchema, bo as landingSchema, bn as landingFeeSchema, bq as maintenanceEventSchema, bp as maintenanceEventEstimationSchema, br as maintenanceStatusSchema, bs as mediaCollection, bu as membershipSchema, bv as membershipSignupSchema, bw as postSchema, by as prePaidPackageSchema, bz as priceSchema, bA as qualificationSchema, bB as recurringFlightSchema, bC as roleSchema, bD as runwaySchema, bE as scheduledFlightSchema, bF as settingSchema, bG as specialFlightSchema, bN as tagSchema, bO as ticketSchema, bY as userSchema, bW as userAircraftRatingSchema, bX as userQualificationSchema, bZ as waypointSchema, aF as airplaneIssueSchema, aH as airplaneIssueStatusEnum, B as BaseModel$1, aX as courseCheckSyllabusSchema, aY as courseEnrollmentMetricsSchema, bt as mediaSchema, l as FormSubmission } from '../training-DRuphnSP.cjs';
 
 type BaseModel = z.infer<typeof BaseModel$1>;
 type User = z.infer<typeof userSchema>;
@@ -61,17 +61,33 @@ type AirplaneIssueStatus = z.infer<typeof airplaneIssueStatusEnum>;
 type Event = z.infer<typeof eventSchema>;
 type Ticket = z.infer<typeof ticketSchema>;
 type Post = z.infer<typeof postSchema>;
+/**
+ * Full-replacement tag sync entry — `id` marks an existing tag (wins over
+ * name matching), fresh tags carry only name (+ optional color) and are
+ * created server-side on save.
+ */
+interface TagSyncEntry {
+    id?: number | null;
+    name: string;
+    color?: string | null;
+}
 interface CreatePostInput {
     title?: string | null;
     content: string;
     sticky?: boolean;
     public?: boolean;
+    comments_disabled?: boolean;
+    tags?: TagSyncEntry[];
+    /** Action flag, not persisted: notify company members on publish. */
+    notify?: boolean;
 }
 interface UpdatePostInput {
     title?: string | null;
     content: string;
     sticky?: boolean;
     public?: boolean;
+    comments_disabled?: boolean;
+    tags?: TagSyncEntry[];
 }
 interface CreateAirplaneIssueInput {
     title?: string | null;
@@ -277,6 +293,7 @@ interface LogbookFlightLogPayload {
         role: string;
     }[];
     membership_id: number | null;
+    billing_profile_id?: number | null;
 }
 interface LogbookSuggestionMeta {
     flags?: string[];
@@ -419,4 +436,4 @@ interface LandingFeeInvoiceApplyResult {
     issues: string[];
 }
 
-export type { Activity, Address, AiSuggestedMilestone, AiSuggestion, AiSuggestionStatus, AircraftBlock, AircraftBlockReason, AircraftPosition, AircraftRating, Airplane, AirplaneIssue, AirplaneIssueSeverity, AirplaneIssueStatus, AirplanePermission, AirplaneShareInvite, Airport, Alert, AllowedDocumentType, ApiResponse, ApproachType, Avail, BackgroundTask, BackgroundTaskStatus, BaseMembership, BaseModel, Booking, Comment, Company, ComplianceData, ComplianceGroup, ComplianceGroupSource, ComplianceRequirement, ComplianceRequirementGroup, ComplianceResponse, ComplianceSummary, Course, CourseCheckSyllabus, CourseDescriptionSuggestionPayload, CourseEnrollment, CourseEnrollmentMetrics, CourseFee, CreateAirplaneIssueInput, CreateCommentInput, CreatePostInput, DataWrappedResponse, DeferAirplaneIssueInput, DiscardedRow, Document, DocumentComplianceStatus, DocumentRequirement, DocumentRequirementGroup, DocumentRequirementGroupAssignment, DocumentShare, DocumentType, Event, Expense, ExpenseItem, ExtendedAirplane, Fee, FeeCategoryOptions, FlightLog, GroupedPermissions, Invoice, Landing, LandingFee, LandingFeeImportResult, LandingFeeInvoiceApplyPayload, LandingFeeInvoiceApplyResult, LandingFeeInvoicePreview, LandingFeeInvoicePreviewRow, LandingFeeTemplateParams, LogbookFlightLogPayload, LogbookStageResult, LogbookSuggestion, LogbookSuggestionMeta, MaintenanceEvent, MaintenanceEventEstimation, MaintenanceStatus, Media, MediaCollection, Membership, MembershipSignup, PaginatedResponse, PermissionItem, Post, PrePaidPackage, Price, Qualification, RecurringFlight, ResolveAirplaneIssueInput, Resource, Role, RoleDetail, RoleListItem, Runway, ScheduledFlight, Setting, SpecialFlight, Tag, Ticket, ToggleFavoriteResponse, UpdateAirplaneIssueInput, UpdateCommentInput, UpdatePostInput, User, UserAircraftRating, UserQualification, Waypoint };
+export type { Activity, Address, AiSuggestedMilestone, AiSuggestion, AiSuggestionStatus, AircraftBlock, AircraftBlockReason, AircraftPosition, AircraftRating, Airplane, AirplaneIssue, AirplaneIssueSeverity, AirplaneIssueStatus, AirplanePermission, AirplaneShareInvite, Airport, Alert, AllowedDocumentType, ApiResponse, ApproachType, Avail, BackgroundTask, BackgroundTaskStatus, BaseMembership, BaseModel, Booking, Comment, Company, ComplianceData, ComplianceGroup, ComplianceGroupSource, ComplianceRequirement, ComplianceRequirementGroup, ComplianceResponse, ComplianceSummary, Course, CourseCheckSyllabus, CourseDescriptionSuggestionPayload, CourseEnrollment, CourseEnrollmentMetrics, CourseFee, CreateAirplaneIssueInput, CreateCommentInput, CreatePostInput, DataWrappedResponse, DeferAirplaneIssueInput, DiscardedRow, Document, DocumentComplianceStatus, DocumentRequirement, DocumentRequirementGroup, DocumentRequirementGroupAssignment, DocumentShare, DocumentType, Event, Expense, ExpenseItem, ExtendedAirplane, Fee, FeeCategoryOptions, FlightLog, GroupedPermissions, Invoice, Landing, LandingFee, LandingFeeImportResult, LandingFeeInvoiceApplyPayload, LandingFeeInvoiceApplyResult, LandingFeeInvoicePreview, LandingFeeInvoicePreviewRow, LandingFeeTemplateParams, LogbookFlightLogPayload, LogbookStageResult, LogbookSuggestion, LogbookSuggestionMeta, MaintenanceEvent, MaintenanceEventEstimation, MaintenanceStatus, Media, MediaCollection, Membership, MembershipSignup, PaginatedResponse, PermissionItem, Post, PrePaidPackage, Price, Qualification, RecurringFlight, ResolveAirplaneIssueInput, Resource, Role, RoleDetail, RoleListItem, Runway, ScheduledFlight, Setting, SpecialFlight, Tag, TagSyncEntry, Ticket, ToggleFavoriteResponse, UpdateAirplaneIssueInput, UpdateCommentInput, UpdatePostInput, User, UserAircraftRating, UserQualification, Waypoint };

package/dist/types/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { aB as activitySchema, aC as addressSchema, aD as aircraftPositionSchema, aE as aircraftRatingSchema, aJ as airplaneSchema, aI as airplanePermissionSchema, aK as airplaneShareInviteSchema, aL as airportSchema, aM as alertSchema, aN as allowedDocumentTypeSchema, aO as approachTypeSchema, aP as availSchema, aQ as baseMembershipSchema, aR as bookingSchema, aT as commentSchema, aU as companySchema, a_ as courseSchema, aY as courseEnrollmentSchema, aZ as courseFeeSchema, aG as airplaneIssueSeverityEnum, b4 as documentSchema, b0 as documentComplianceStatus, b1 as documentRequirement, b2 as documentRequirementGroup, b3 as documentRequirementGroupAssignment, b5 as documentShareSchema, b6 as documentType, b8 as eventSchema, ba as expenseSchema, b9 as expenseItemSchema, bb as extendedAirplaneSchema, bd as feeSchema, bc as feeCategoryOptionsSchema, be as flightLogSchema, bl as invoiceSchema, bn as landingSchema, bm as landingFeeSchema, bp as maintenanceEventSchema, bo as maintenanceEventEstimationSchema, bq as maintenanceStatusSchema, br as mediaCollection, bt as membershipSchema, bu as membershipSignupSchema, bv as postSchema, bw as prePaidPackageSchema, bx as priceSchema, by as qualificationSchema, bz as recurringFlightSchema, bA as roleSchema, bB as runwaySchema, bC as scheduledFlightSchema, bD as settingSchema, bE as specialFlightSchema, bL as tagSchema, bM as ticketSchema, bW as userSchema, bU as userAircraftRatingSchema, bV as userQualificationSchema, bX as waypointSchema, aF as airplaneIssueSchema, aH as airplaneIssueStatusEnum, B as BaseModel$1, aW as courseCheckSyllabusSchema, aX as courseEnrollmentMetricsSchema, bs as mediaSchema, l as FormSubmission } from '../training-BibD4HsC.js';
+import { aB as activitySchema, aC as addressSchema, aD as aircraftPositionSchema, aE as aircraftRatingSchema, aJ as airplaneSchema, aI as airplanePermissionSchema, aK as airplaneShareInviteSchema, aL as airportSchema, aM as alertSchema, aN as allowedDocumentTypeSchema, aO as approachTypeSchema, aP as availSchema, aQ as baseMembershipSchema, aS as bookingSchema, aU as commentSchema, aV as companySchema, a$ as courseSchema, aZ as courseEnrollmentSchema, a_ as courseFeeSchema, aG as airplaneIssueSeverityEnum, b5 as documentSchema, b1 as documentComplianceStatus, b2 as documentRequirement, b3 as documentRequirementGroup, b4 as documentRequirementGroupAssignment, b6 as documentShareSchema, b7 as documentType, b9 as eventSchema, bb as expenseSchema, ba as expenseItemSchema, bc as extendedAirplaneSchema, be as feeSchema, bd as feeCategoryOptionsSchema, bf as flightLogSchema, bm as invoiceSchema, bo as landingSchema, bn as landingFeeSchema, bq as maintenanceEventSchema, bp as maintenanceEventEstimationSchema, br as maintenanceStatusSchema, bs as mediaCollection, bu as membershipSchema, bv as membershipSignupSchema, bw as postSchema, by as prePaidPackageSchema, bz as priceSchema, bA as qualificationSchema, bB as recurringFlightSchema, bC as roleSchema, bD as runwaySchema, bE as scheduledFlightSchema, bF as settingSchema, bG as specialFlightSchema, bN as tagSchema, bO as ticketSchema, bY as userSchema, bW as userAircraftRatingSchema, bX as userQualificationSchema, bZ as waypointSchema, aF as airplaneIssueSchema, aH as airplaneIssueStatusEnum, B as BaseModel$1, aX as courseCheckSyllabusSchema, aY as courseEnrollmentMetricsSchema, bt as mediaSchema, l as FormSubmission } from '../training-DRuphnSP.js';
 
 type BaseModel = z.infer<typeof BaseModel$1>;
 type User = z.infer<typeof userSchema>;
@@ -61,17 +61,33 @@ type AirplaneIssueStatus = z.infer<typeof airplaneIssueStatusEnum>;
 type Event = z.infer<typeof eventSchema>;
 type Ticket = z.infer<typeof ticketSchema>;
 type Post = z.infer<typeof postSchema>;
+/**
+ * Full-replacement tag sync entry — `id` marks an existing tag (wins over
+ * name matching), fresh tags carry only name (+ optional color) and are
+ * created server-side on save.
+ */
+interface TagSyncEntry {
+    id?: number | null;
+    name: string;
+    color?: string | null;
+}
 interface CreatePostInput {
     title?: string | null;
     content: string;
     sticky?: boolean;
     public?: boolean;
+    comments_disabled?: boolean;
+    tags?: TagSyncEntry[];
+    /** Action flag, not persisted: notify company members on publish. */
+    notify?: boolean;
 }
 interface UpdatePostInput {
     title?: string | null;
     content: string;
     sticky?: boolean;
     public?: boolean;
+    comments_disabled?: boolean;
+    tags?: TagSyncEntry[];
 }
 interface CreateAirplaneIssueInput {
     title?: string | null;
@@ -277,6 +293,7 @@ interface LogbookFlightLogPayload {
         role: string;
     }[];
     membership_id: number | null;
+    billing_profile_id?: number | null;
 }
 interface LogbookSuggestionMeta {
     flags?: string[];
@@ -419,4 +436,4 @@ interface LandingFeeInvoiceApplyResult {
     issues: string[];
 }
 
-export type { Activity, Address, AiSuggestedMilestone, AiSuggestion, AiSuggestionStatus, AircraftBlock, AircraftBlockReason, AircraftPosition, AircraftRating, Airplane, AirplaneIssue, AirplaneIssueSeverity, AirplaneIssueStatus, AirplanePermission, AirplaneShareInvite, Airport, Alert, AllowedDocumentType, ApiResponse, ApproachType, Avail, BackgroundTask, BackgroundTaskStatus, BaseMembership, BaseModel, Booking, Comment, Company, ComplianceData, ComplianceGroup, ComplianceGroupSource, ComplianceRequirement, ComplianceRequirementGroup, ComplianceResponse, ComplianceSummary, Course, CourseCheckSyllabus, CourseDescriptionSuggestionPayload, CourseEnrollment, CourseEnrollmentMetrics, CourseFee, CreateAirplaneIssueInput, CreateCommentInput, CreatePostInput, DataWrappedResponse, DeferAirplaneIssueInput, DiscardedRow, Document, DocumentComplianceStatus, DocumentRequirement, DocumentRequirementGroup, DocumentRequirementGroupAssignment, DocumentShare, DocumentType, Event, Expense, ExpenseItem, ExtendedAirplane, Fee, FeeCategoryOptions, FlightLog, GroupedPermissions, Invoice, Landing, LandingFee, LandingFeeImportResult, LandingFeeInvoiceApplyPayload, LandingFeeInvoiceApplyResult, LandingFeeInvoicePreview, LandingFeeInvoicePreviewRow, LandingFeeTemplateParams, LogbookFlightLogPayload, LogbookStageResult, LogbookSuggestion, LogbookSuggestionMeta, MaintenanceEvent, MaintenanceEventEstimation, MaintenanceStatus, Media, MediaCollection, Membership, MembershipSignup, PaginatedResponse, PermissionItem, Post, PrePaidPackage, Price, Qualification, RecurringFlight, ResolveAirplaneIssueInput, Resource, Role, RoleDetail, RoleListItem, Runway, ScheduledFlight, Setting, SpecialFlight, Tag, Ticket, ToggleFavoriteResponse, UpdateAirplaneIssueInput, UpdateCommentInput, UpdatePostInput, User, UserAircraftRating, UserQualification, Waypoint };
+export type { Activity, Address, AiSuggestedMilestone, AiSuggestion, AiSuggestionStatus, AircraftBlock, AircraftBlockReason, AircraftPosition, AircraftRating, Airplane, AirplaneIssue, AirplaneIssueSeverity, AirplaneIssueStatus, AirplanePermission, AirplaneShareInvite, Airport, Alert, AllowedDocumentType, ApiResponse, ApproachType, Avail, BackgroundTask, BackgroundTaskStatus, BaseMembership, BaseModel, Booking, Comment, Company, ComplianceData, ComplianceGroup, ComplianceGroupSource, ComplianceRequirement, ComplianceRequirementGroup, ComplianceResponse, ComplianceSummary, Course, CourseCheckSyllabus, CourseDescriptionSuggestionPayload, CourseEnrollment, CourseEnrollmentMetrics, CourseFee, CreateAirplaneIssueInput, CreateCommentInput, CreatePostInput, DataWrappedResponse, DeferAirplaneIssueInput, DiscardedRow, Document, DocumentComplianceStatus, DocumentRequirement, DocumentRequirementGroup, DocumentRequirementGroupAssignment, DocumentShare, DocumentType, Event, Expense, ExpenseItem, ExtendedAirplane, Fee, FeeCategoryOptions, FlightLog, GroupedPermissions, Invoice, Landing, LandingFee, LandingFeeImportResult, LandingFeeInvoiceApplyPayload, LandingFeeInvoiceApplyResult, LandingFeeInvoicePreview, LandingFeeInvoicePreviewRow, LandingFeeTemplateParams, LogbookFlightLogPayload, LogbookStageResult, LogbookSuggestion, LogbookSuggestionMeta, MaintenanceEvent, MaintenanceEventEstimation, MaintenanceStatus, Media, MediaCollection, Membership, MembershipSignup, PaginatedResponse, PermissionItem, Post, PrePaidPackage, Price, Qualification, RecurringFlight, ResolveAirplaneIssueInput, Resource, Role, RoleDetail, RoleListItem, Runway, ScheduledFlight, Setting, SpecialFlight, Tag, TagSyncEntry, Ticket, ToggleFavoriteResponse, UpdateAirplaneIssueInput, UpdateCommentInput, UpdatePostInput, User, UserAircraftRating, UserQualification, Waypoint };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@updraft-solutions/mcrit-sdk",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Shared TypeScript types, Zod schemas, and pure helpers for the MCRIT aviation fleet management platform",
   "homepage": "https://github.com/updraft-solutions/mcrit-sdk#readme",
   "bugs": {
@@ -126,6 +126,17 @@
         "types": "./dist/pagination/index.d.cts",
         "default": "./dist/pagination/index.cjs"
       }
+    },
+    "./sanitize": {
+      "source": "./src/sanitize/index.ts",
+      "import": {
+        "types": "./dist/sanitize/index.d.ts",
+        "default": "./dist/sanitize/index.js"
+      },
+      "require": {
+        "types": "./dist/sanitize/index.d.cts",
+        "default": "./dist/sanitize/index.cjs"
+      }
     }
   },
   "files": [

package/src/sanitize/index.ts

@@ -0,0 +1,92 @@
+/**
+ * Shared HTML-sanitizing policy for TipTap rich text (posts, knowledge
+ * articles, …). The allow-lists live HERE so the app that writes content
+ * (mcrit-app) and the surfaces that render it (homepage, future clients)
+ * can never drift apart — a drift would mean content is sanitized
+ * differently where it's written versus where it's publicly shown.
+ *
+ * The SDK deliberately has no DOMPurify dependency: consumers pass their
+ * own instance to {@link createHtmlSanitizers} (browser DOMPurify,
+ * isomorphic-dompurify on SSR, …).
+ */
+
+/** Structural subset of DOMPurify we rely on — keeps it a peer concern. */
+export interface HtmlPurifier {
+  sanitize(html: string, config?: Record<string, unknown>): string;
+}
+
+/**
+ * Rich text from the TipTap post editor: common formatting, headings,
+ * links, lists, quotes and code.
+ */
+export const richTextSanitizeConfig = {
+  ALLOWED_TAGS: [
+    "p",
+    "br",
+    "strong",
+    "em",
+    "u",
+    "s",
+    "a",
+    "h1",
+    "h2",
+    "h3",
+    "h4",
+    "h5",
+    "h6",
+    "ul",
+    "ol",
+    "li",
+    "blockquote",
+    "code",
+    "pre",
+  ],
+  ALLOWED_ATTR: ["href", "target", "rel", "class", "style"],
+  ALLOW_DATA_ATTR: false,
+} as const;
+
+/** Minimal inline formatting — simple comments and basic text fields. */
+export const basicTextSanitizeConfig = {
+  ALLOWED_TAGS: ["br", "a", "strong", "em", "code", "p"],
+  ALLOWED_ATTR: ["href", "target", "rel", "class"],
+  ALLOW_DATA_ATTR: false,
+} as const;
+
+/** Everything stripped — plain-text snippets and previews. */
+export const stripSanitizeConfig = {
+  ALLOWED_TAGS: [],
+  ALLOWED_ATTR: [],
+} as const;
+
+/**
+ * Bind the shared policies to a DOMPurify(-compatible) instance.
+ *
+ * @example
+ * import DOMPurify from "dompurify";
+ * const { sanitizeRichText, stripHtml } = createHtmlSanitizers(DOMPurify);
+ */
+export function createHtmlSanitizers(purifier: HtmlPurifier) {
+  const sanitize = (
+    html: string | null | undefined,
+    config?: Record<string, unknown>,
+  ): string => {
+    if (!html) {
+      return "";
+    }
+    return purifier.sanitize(html, config);
+  };
+
+  const sanitizeRichText = (html: string | null | undefined): string =>
+    sanitize(html, richTextSanitizeConfig as unknown as Record<string, unknown>);
+
+  const sanitizeBasicText = (html: string | null | undefined): string =>
+    sanitize(html, basicTextSanitizeConfig as unknown as Record<string, unknown>);
+
+  /** Strip all HTML to whitespace-normalized plain text. */
+  const stripHtml = (html: string | null | undefined): string =>
+    sanitize(html, stripSanitizeConfig as unknown as Record<string, unknown>)
+      .replace(/\s+/g, " ")
+      .trim();
+
+  return { sanitize, sanitizeRichText, sanitizeBasicText, stripHtml };
+}

package/src/schemas/models.ts

@@ -735,6 +735,47 @@ export const allowedDocumentTypeSchema = z.object({
     .optional(),
 });
 
+// Billing recipient (formerly "Address"; the `addresses` table was renamed
+// to `billing_profiles` — see BillingProfileResource.php). A membership/user
+// can own several profiles (e.g. private vs. "Firma"); invoices, flight logs
+// and expense items each point at one via `billing_profile_id`.
+export const billingProfileSchema = z.object({
+  // BillingProfileResource never actually emits a `type` key today; kept
+  // optional for forward-compat / discriminated-union consistency with
+  // sibling schemas in this file.
+  type: z.literal("billing_profile").optional(),
+  id: z.number(),
+  owner_type: z.string(),
+  owner_id: z.number(),
+  label: z.string().nullable(),
+  is_default: z.boolean(),
+  name: z.string().nullable(),
+  company: z.string().nullable(),
+  address_street_1: z.string().nullable(),
+  address_street_2: z.string().nullable(),
+  city: z.string().nullable(),
+  state: z.string().nullable(),
+  zip: z.string().nullable(),
+  phone: z.string().nullable(),
+  fax: z.string().nullable(),
+  iso_country: z.string().nullable(),
+  vat_id: z.string().nullable(),
+  email: z.string().nullable(),
+  archived_at: z.string().nullable(),
+  source_billing_profile_id: z.number().nullable(),
+  is_synced: z.boolean(),
+  frozen_at: z.string().nullable(),
+  // Present only when the profile is frozen (frozen_by_user_id !== null).
+  frozen_by: z
+    .object({
+      id: z.number(),
+      name: z.string().nullable().optional(),
+    })
+    .optional(),
+  created_at: z.string(),
+  updated_at: z.string(),
+});
+
 export const flightLogSchema = z.object({
   type: z.literal("flightLog"),
   id: z.number(),
@@ -749,6 +790,7 @@ export const flightLogSchema = z.object({
   booking_id: z.number().nullable().optional(),
   membership_id: z.number().nullable().optional(),
   membership: baseMembershipSchema.optional(),
+  billing_profile_id: z.number().nullable().optional(),
   author_id: z.number(),
   author: userSchema.optional(),
   invoice_id: z.number().nullable().optional(),
@@ -798,6 +840,14 @@ export const invoiceSchema = z.object({
   title: z.string(),
   membership_id: z.number(),
   membership: baseMembershipSchema.optional(),
+  // InvoiceResource.php always emits `billing_profile_id` (non-optional key,
+  // nullable FK value). `billingProfile` is a `whenLoaded('billingProfile')`
+  // relation, so it stays optional. (Fix round 1: as of the original Task 16
+  // commit, InvoiceResource hadn't gained `billing_profile_id` yet — it was
+  // added ~4 minutes later in the same session; tightened here now that the
+  // key is always present.)
+  billing_profile_id: z.number().nullable(),
+  billingProfile: billingProfileSchema.optional(),
   company_id: z.number().optional(),
   company: companySchema.optional(),
   sequence_number: z.string().nullable().optional(),
@@ -825,6 +875,9 @@ export const invoiceSchema = z.object({
   recipient_state: z.string().nullable().optional(),
   recipient_country: z.string().nullable().optional(),
   recipient_vat_id: z.string().nullable().optional(),
+  // Always computed by InvoiceResource (billingProfile email, else the
+  // membership's user email) — used by InvoiceDialog today but was missing.
+  recipient_email: z.string().nullable().optional(),
   issuer_name: z.string().nullable().optional(),
   issuer_address_street_1: z.string().nullable().optional(),
   issuer_address_street_2: z.string().nullable().optional(),
@@ -1168,6 +1221,8 @@ export const postSchema = z.object({
   content: z.string(),
   sticky: z.boolean().default(false),
   public: z.boolean().default(false),
+  comments_disabled: z.boolean().default(false),
+  tags: z.array(tagSchema).optional(),
   media: mediaCollection.optional(),
   created_at: z.string(),
   updated_at: z.string(),
@@ -1283,17 +1338,90 @@ export const prePaidPackageSchema = z.object({
     .optional(),
 });
 
+// A billing line-item (flight charge, landing fee, membership fee, refund,
+// …) attached to a flight log / booking / membership via the polymorphic
+// (model_type, model_id) pair, and to an invoice once released. NOT a
+// catalog entry — rebuilt field-by-field against ExpenseItemResource.php;
+// the previous shape (name/category/active) modeled a company catalog row,
+// which ExpenseItem has never had.
+export const prePaidPackageAssignmentSchema = z.object({
+  id: z.number(),
+  flight_log_id: z.number().nullable().optional(),
+  expense_item_id: z.number().nullable().optional(),
+  pre_paid_package_id: z.number().nullable().optional(),
+  gross_total: zPhpMoneyObject.nullable().optional(),
+  created_at: z.string().nullable().optional(),
+  updated_at: z.string().nullable().optional(),
+});
+
 export const expenseItemSchema = z.object({
-  type: z.literal("expenseItem"),
+  // ExpenseItemResource never emits a `type` key; kept optional for
+  // consistency with sibling schemas' discriminated-union literal.
+  type: z.literal("expenseItem").optional(),
   id: z.number(),
+  date: z.string(),
+  model_id: z.number(),
+  model_type: z.string(),
+  identifier: z.string().nullable(),
+  // Provenance: the `prices` row this item was generated from. `price_id` is
+  // always present (nullable FK); `price` only when the relation is
+  // eager-loaded.
+  price_id: z.number().nullable(),
+  price: priceSchema.optional(),
+  description: z.string(),
+  description_lines: z.array(z.any()).nullable(),
+  // Resource emits a trimmed decimal string (trailing zeros/dot stripped),
+  // not a number.
+  quantity: z.string(),
+  discount: z.number(),
+  applied_discounts: z.array(z.any()).nullable(),
+  status: z.string(),
+  is_system_controlled: z.boolean(),
+  deferred: z.boolean(),
+
+  invoice_id: z.number().nullable(),
   company_id: z.number(),
-  company: companySchema.optional(),
-  name: z.string(),
-  description: z.string().nullable().optional(),
-  category: z.string().nullable().optional(),
-  active: z.boolean().default(true),
+  membership_id: z.number(),
+  billing_profile_id: z.number().nullable(),
+
+  gross_total_before_vouchers: zPhpMoneyObject,
+  gross_total: zPhpMoneyObject,
+  net_total: zPhpMoneyObject,
+  tax_total: zPhpMoneyObject,
+  // number_format(…, 2) string, not a number.
+  tax_percentage: z.string(),
+  billable: z.boolean(),
+  meta: z.record(z.string(), z.any()).nullable(),
+  input_value: z.number().nullable(),
+  net_gross: zNetGross,
+
+  refunds_expense_item_id: z.number().nullable(),
+
   created_at: z.string(),
   updated_at: z.string(),
+
+  // Lazy + explicitly typed as ZodTypeAny (so `invoice` infers as `any`
+  // rather than the full Invoice shape): invoiceSchema is large (60+ fields
+  // incl. media/activities), and this field is additionally reached from
+  // courseEnrollmentSchema/bookingSchema/flightLogSchema via their own lazy
+  // expenseItems refs — inlining the full inferred type here blows past TS's
+  // type-serialization size limit (TS7056: "inferred type … exceeds the
+  // maximum length"). No true cycle: invoiceSchema does not reference
+  // expenseItemSchema back.
+  invoice: z.lazy((): z.ZodTypeAny => invoiceSchema).optional(),
+  membership: baseMembershipSchema.optional(),
+  prePaidPackageAssignments: z
+    .array(prePaidPackageAssignmentSchema)
+    .optional(),
+  // Loose record on purpose: gates are policy-reflected server-side and grow
+  // over time — same convention as companySchema/invoiceSchema.
+  can: z.record(z.string(), z.boolean().nullable()).optional(),
+
+  // Set true only by InvoiceItemSnapshotResource — the immutable,
+  // frozen-at-release line-item shape reused for released/cancelled
+  // invoices (same JSON shape as ExpenseItemResource by design). Absent on
+  // a live ExpenseItemResource payload.
+  is_snapshot: z.boolean().optional(),
 });
 
 export const waypointSchema = z.object({

package/src/types/ai.ts

@@ -58,6 +58,7 @@ export interface LogbookFlightLogPayload {
   low_approaches: number;
   crew_assignments: { membership_id: number; role: string }[];
   membership_id: number | null;
+  billing_profile_id?: number | null;
 }
 
 export interface LogbookSuggestionMeta {

package/src/types/models.ts

@@ -129,11 +129,26 @@ export type Event = z.infer<typeof ModelSchemas.eventSchema>;
 export type Ticket = z.infer<typeof ModelSchemas.ticketSchema>;
 export type Post = z.infer<typeof ModelSchemas.postSchema>;
 
+/**
+ * Full-replacement tag sync entry — `id` marks an existing tag (wins over
+ * name matching), fresh tags carry only name (+ optional color) and are
+ * created server-side on save.
+ */
+export interface TagSyncEntry {
+  id?: number | null;
+  name: string;
+  color?: string | null;
+}
+
 export interface CreatePostInput {
   title?: string | null;
   content: string;
   sticky?: boolean;
   public?: boolean;
+  comments_disabled?: boolean;
+  tags?: TagSyncEntry[];
+  /** Action flag, not persisted: notify company members on publish. */
+  notify?: boolean;
 }
 
 export interface UpdatePostInput {
@@ -141,6 +156,8 @@ export interface UpdatePostInput {
   content: string;
   sticky?: boolean;
   public?: boolean;
+  comments_disabled?: boolean;
+  tags?: TagSyncEntry[];
 }
 
 export interface CreateAirplaneIssueInput {