biz-a-cli 2.3.80-15419 → 2.3.80

package/engine/fina/print.js

@@ -1,136 +0,0 @@
-/*
- * Doc 8 M4 — a document's printed pages (T-24–T-26; D9 as amended 2026-10-10): FINA renders, Biz-A shows them.
- *
- * The FINA API answers the report as JPEGs CONCATENATED in one byte array, one per page (contract §3); an 80-line JV
- * came back as 20 pages, with a stray byte or two between some of them. They are split here by walking the JPEG
- * markers — never by searching for FFD8/FFD9, which also occur inside a segment (an EXIF thumbnail is a whole JPEG).
- *
- * ⚠️ ANY TEMPLATE FOR A DOCUMENT. The API loads the layout with `select layout from template where templateid=(select
- * templateid from <table> where <keyfield>=<id>)`, built as a string (FINAMethod.pas:1125). Table TEMPLATE / keyfield
- * TEMPLATEID / id = the chosen template therefore renders that template, for the document the dictionary names
- * (verified live: byte-identical to the normal path). Every one of those values is built here, from integers checked
- * against the document's own template type.
- *
- * The page size: JFIF density in dots per inch when the JPEG says so, else 96 dpi — FINA's pages carry an aspect ratio
- * only (density 1:1).
- */
-import { finaError } from "./errors.js";
-import { requireRight } from "./identity.js";
-import { documentOf, documentId } from "./documents/index.js";
-import { readMaster } from "./document.js";
-import { listTemplates, assertTemplateOfType } from "./template.js";
-
-const IMAGE_QUALITY = 85;
-const SCREEN_DPI = 96;
-
-/* Markers with no length: SOI, EOI, TEM, RST0–7. */
-const standalone = (marker) => marker === 0xd8 || marker === 0xd9 || marker === 0x01 || (marker >= 0xd0 && marker <= 0xd7);
-
-/* One JPEG starting at `start` (its SOI): the index just past its EOI, or -1 if it does not end. */
-const jpegEnd = (bytes, start) => {
-	let i = start + 2;
-	while (i + 1 < bytes.length) {
-		if (bytes[i] !== 0xff) return -1;
-		const marker = bytes[i + 1];
-		if (marker === 0xff) {
-			i += 1; /* fill byte */
-			continue;
-		}
-		if (marker === 0xd9) return i + 2;
-		if (standalone(marker)) {
-			i += 2;
-			continue;
-		}
-		if (i + 3 >= bytes.length) return -1;
-		const length = (bytes[i + 2] << 8) | bytes[i + 3];
-		i += 2 + length;
-		if (marker === 0xda) {
-			/* Entropy-coded data: FF00 is a stuffed byte and FFD0–FFD7 a restart; anything else is the next marker. */
-			while (i + 1 < bytes.length) {
-				if (bytes[i] === 0xff && bytes[i + 1] !== 0x00 && !(bytes[i + 1] >= 0xd0 && bytes[i + 1] <= 0xd7)) break;
-				i += 1;
-			}
-		}
-	}
-	return -1;
-};
-
-export const splitJpegs = (input) => {
-	const bytes = input instanceof Uint8Array ? input : Uint8Array.from(input ?? []);
-	const pages = [];
-	let i = 0;
-	while (i + 1 < bytes.length) {
-		if (bytes[i] === 0xff && bytes[i + 1] === 0xd8) {
-			const end = jpegEnd(bytes, i);
-			if (end < 0) break;
-			pages.push(bytes.subarray(i, end));
-			i = end;
-		} else {
-			i += 1; /* bytes between pages */
-		}
-	}
-	return pages;
-};
-
-/* Pixel size from the frame header; density from JFIF when its unit is dots per inch (1) or per cm (2). */
-export const jpegSize = (jpeg) => {
-	let widthPx = null;
-	let heightPx = null;
-	let dpi = null;
-	let i = 2;
-	while (i + 3 < jpeg.length && jpeg[i] === 0xff) {
-		const marker = jpeg[i + 1];
-		if (standalone(marker)) {
-			i += 2;
-			continue;
-		}
-		const length = (jpeg[i + 2] << 8) | jpeg[i + 3];
-		if (marker === 0xe0 && jpeg[i + 4] === 0x4a && jpeg[i + 5] === 0x46 && jpeg[i + 6] === 0x49 && jpeg[i + 7] === 0x46) {
-			const units = jpeg[i + 11];
-			const x = (jpeg[i + 12] << 8) | jpeg[i + 13];
-			if (units === 1 && x > 1) dpi = x;
-			if (units === 2 && x > 1) dpi = x * 2.54;
-		}
-		/* SOF0–SOF15, except DHT (C4), JPG (C8) and DAC (CC). */
-		if (marker >= 0xc0 && marker <= 0xcf && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc) {
-			heightPx = (jpeg[i + 5] << 8) | jpeg[i + 6];
-			widthPx = (jpeg[i + 7] << 8) | jpeg[i + 8];
-			break;
-		}
-		if (marker === 0xda) break;
-		i += 2 + length;
-	}
-	return { widthPx, heightPx, dpi };
-};
-
-const mm = (px, dpi) => Math.round(((px * 25.4) / dpi) * 100) / 100;
-export const pageMm = ({ widthPx, heightPx, dpi }) => {
-	if (!widthPx || !heightPx) return { widthMm: null, heightMm: null };
-	const d = dpi ?? SCREEN_DPI;
-	return { widthMm: mm(widthPx, d), heightMm: mm(heightPx, d) };
-};
-
-export const createPrintService = ({ client, identity }) => ({
-	render: async (principal, name, { id: rawId, templateId: rawTemplateId } = {}) => {
-		const document = documentOf(name);
-		const id = documentId(rawId);
-		const who = requireRight(await identity.resolve(principal), document.rights, "print");
-
-		const master = await readMaster(client, document, id);
-		if (!master) throw finaError("DOCUMENT_NOT_FOUND", `${document.label} ${id} was not found.`);
-		const templates = await listTemplates(client, document.templateType);
-		const asked = rawTemplateId ?? master.templateid;
-		const templateId = asked === null || asked === undefined || asked === "" ? null : assertTemplateOfType(templates, asked);
-
-		const target = templateId !== null ? { table: "TEMPLATE", keyfield: "TEMPLATEID", id: String(templateId) } : { table: document.master.table, keyfield: document.master.key, id: String(id) };
-		const bytes = await client.template({
-			...target,
-			userId: who.finaUser?.id ?? 0,
-			imageQuality: IMAGE_QUALITY,
-			dictionary: await document.print.dictionary({ client, id }),
-		});
-		const pages = splitJpegs(bytes).map((page) => ({ data: Buffer.from(page).toString("base64"), ...pageMm(jpegSize(page)) }));
-		if (pages.length === 0) throw finaError("FINA_ERROR", `FINA rendered no pages for ${document.label} ${id}.`);
-		return { id, templateId, pages };
-	},
-});

package/engine/fina/readPolicy.js

@@ -1,67 +0,0 @@
-/*
- * Doc 8 M8 — S-02, the read side: a browser may READ the FINA Cloud database only as a Biz-A user mapped to an active
- * FINA user (D4: view = every mapped user). Agung 2026-10-15.
- *
- * The write guard (guard.js) refuses every FINA write that skips engine/fina. Reads were left open to any signed-in
- * user of the tenant — every FINA table but USERS — whether or not FINA knew them.
- *
- * - Only a FINA-bound READ is checked (guard.js `finaBoundRead`); writes stay the guard's, other databases and logins
- *   pass untouched, and with FINA Cloud off this does nothing.
- * - The principal is the VERIFIED one (context.js `finaContext`): none, one signed for another database, or a revoked
- *   session → refused, in every principal mode.
- * - The verdict is kept per (tenant database, user) for `ttlMs` (a minute): a grid's lookups do not each ask FINA, and
- *   unmapping takes effect within the minute. A check that fails (FINA unreachable) refuses and is not remembered.
- *
- * Runs at BOTH browser entrances, right after the write guard: bin/hubEvent.js (socket) and engine/orm/finaEndpoint.js
- * (HTTP). The two transports must not diverge.
- */
-import { finaBoundRead, FINA_READ_REFUSED } from "./guard.js";
-
-const NOT_MAPPED = "Your Biz-A user is not mapped to a FINA user. An administrator maps it in the FINA Cloud console.";
-
-const refused = (reason) => ({ status: 403, body: { code: FINA_READ_REFUSED, error: `FINA Cloud: reading the FINA database is refused. ${reason}` } });
-
-export const createFinaReadPolicy = ({ finaCloudDbIndex, contextOf, isMapped, now = () => Date.now(), ttlMs = 60_000 }) => {
-	const target = Number(finaCloudDbIndex);
-	const on = finaCloudDbIndex !== null && finaCloudDbIndex !== undefined && finaCloudDbIndex !== "" && Number.isInteger(target) && target > 0;
-	const verdicts = new Map();
-
-	return async ({ path, body, headers }) => {
-		if (!on || !finaBoundRead(path, body, target)) return null;
-
-		const context = await contextOf(headers ?? {});
-		if (!context?.ok) return refused(context?.error ?? "No signed-in Biz-A user came with this request. Sign in again.");
-
-		const key = `${context.config?.tenantDbIndex ?? ""}:${context.principal?.userId ?? ""}`;
-		const at = now();
-		const kept = verdicts.get(key);
-		if (kept && at - kept.at < ttlMs) return kept.mapped ? null : refused(NOT_MAPPED);
-
-		let mapped;
-		try {
-			mapped = (await isMapped(context)) === true;
-		} catch (error) {
-			return refused(String(error?.message ?? error));
-		}
-		verdicts.set(key, { at, mapped });
-		return mapped ? null : refused(NOT_MAPPED);
-	};
-};
-
-/*
- * The live policy for a hub: the same context the `fina/*` engine routes get (hubEvent `fina/` branch), and the
- * identity those routes resolve (FINA$USER_MAP → an active FINA user). `readSession` is the hub's session reader.
- */
-export const createLiveFinaReadPolicy = ({ argv = {}, isPostgresIndex, readSession = null }) =>
-	createFinaReadPolicy({
-		finaCloudDbIndex: argv?.finaCloudDbindex,
-		contextOf: async (headers) => {
-			const { finaContext } = await import("./context.js");
-			return finaContext(headers, { argv, isPostgresIndex, readSession });
-		},
-		isMapped: async (context) => {
-			const [{ createLiveFinaDeps }, { createIdentity }] = await Promise.all([import("./live.js"), import("./identity.js")]);
-			const identity = await createIdentity(createLiveFinaDeps(context.config)).resolve(context.principal);
-			return identity?.mapped === true;
-		},
-	});

package/engine/fina/recurring.js

@@ -1,200 +0,0 @@
-/*
- * Doc 8 M4 — recurring detail lines (T-33–T-38, D8): FINA desktop's own table RECURRING, in its own format, so the same
- * list serves both (T-36). From FINA's RecurringUtility.pas:
- *
- * - RECURRINGHEADER: the field names, joined by SEPARATOR ('|'); RECURRINGDETAIL: one line per row, joined by CRLF,
- *   the values in header order. The desktop reads a row by the header's names, without regard to case.
- * - Money uses '.' as the decimal separator; a date is m/d/yyyy, or NULL; in a string, '|' becomes '»' and CRLF '•'.
- * - A name (DESCRIPTION, up to 80) is unique per RECURRINGCLASS; FINA's desktop compares it as typed, Biz-A refuses a
- *   name in any case (T-34). There is no edit (T-37) and no schedule (T-38).
- *
- * The rights (D4): every mapped user lists and applies them; saving one needs the create right, deleting the edit right.
- */
-import { finaError } from "./errors.js";
-import { requireRight } from "./identity.js";
-import { documentOf } from "./documents/index.js";
-import { readMappings } from "./template.js";
-import { sqlString } from "./sql.js";
-
-const SEPARATOR = "|";
-const SEPARATOR_REPLACE = "»";
-const RETURN_REPLACE = "•";
-const NULL_STRING = "NULL";
-const MAX_NAME = 80;
-/* One literal || literal chain in one statement: keep well inside FINA's statement limits. */
-const MAX_DETAIL_CHARS = 30000;
-
-const blank = (v) => v === null || v === undefined || (typeof v === "string" && v.trim() === "");
-
-const fieldsOf = (recurring, extendedFields = []) => [
-	...recurring.fields,
-	...extendedFields.map((field) => ({ name: `${recurring.extendedPrefix}${String(field).toLowerCase()}`, key: `ext_${String(field).toLowerCase()}`, type: "string" })),
-];
-
-const encodeValue = (value, type) => {
-	if (blank(value)) return type === "date" ? NULL_STRING : "";
-	if (type === "money") {
-		const n = Number(value);
-		return Number.isFinite(n) ? String(n) : "";
-	}
-	if (type === "date") {
-		const d = new Date(value);
-		return Number.isNaN(d.getTime()) ? NULL_STRING : `${d.getUTCMonth() + 1}/${d.getUTCDate()}/${d.getUTCFullYear()}`;
-	}
-	return String(value).split(SEPARATOR).join(SEPARATOR_REPLACE).replace(/\r\n/g, RETURN_REPLACE);
-};
-
-const decodeValue = (text, type) => {
-	if (text === undefined || text === null || text === "") return null;
-	if (type === "money") {
-		const n = Number(text);
-		return Number.isFinite(n) ? n : null;
-	}
-	if (type === "date") {
-		if (text === NULL_STRING) return null;
-		const m = /^(\d{1,2})\/(\d{1,2})\/(\d{4})$/.exec(text);
-		return m ? `${m[3]}-${m[1].padStart(2, "0")}-${m[2].padStart(2, "0")}` : null;
-	}
-	return String(text).split(SEPARATOR_REPLACE).join(SEPARATOR).split(RETURN_REPLACE).join("\r\n");
-};
-
-/* `rows` keyed by the descriptor's keys → the header and the detail FINA stores. */
-export const encodeRecurring = (recurring, rows, extendedFields = []) => {
-	const fields = fieldsOf(recurring, extendedFields);
-	return {
-		header: fields.map((f) => f.name).join(SEPARATOR),
-		detail: (rows ?? []).map((row) => fields.map((f) => encodeValue(row?.[f.key], f.type)).join(SEPARATOR)).join("\r\n"),
-	};
-};
-
-/* A stored row → rows keyed by the descriptor's keys. Fields the descriptor does not know are left out; an amount
-   stored as the desktop's Debit / Credit is turned back into one signed amount. */
-export const decodeRecurring = (recurring, { header, detail, separator }, extendedFields = []) => {
-	const sep = separator || SEPARATOR;
-	const names = String(header ?? "").split(sep).map((n) => n.trim().toUpperCase());
-	const fields = fieldsOf(recurring, extendedFields);
-	const byName = new Map(fields.map((f) => [f.name.toUpperCase(), f]));
-	const lines = String(detail ?? "")
-		.split(/\r\n|\n/)
-		.filter((line) => line.length > 0);
-	return lines.map((line) => {
-		const values = line.split(sep);
-		const row = {};
-		names.forEach((name, index) => {
-			const field = byName.get(name);
-			if (field) row[field.key] = decodeValue(values[index], field.type);
-		});
-		const from = recurring.amountFrom;
-		if (from && !(from.key in row)) {
-			const at = (name) => names.indexOf(name);
-			if (at(from.debit) >= 0 || at(from.credit) >= 0) {
-				const debit = Number(values[at(from.debit)] || 0);
-				const credit = Number(values[at(from.credit)] || 0);
-				row[from.key] = debit - credit;
-			}
-		}
-		return row;
-	});
-};
-
-/* A document keeps recurring lines only when its descriptor says how. */
-const recurringOf = (document) => {
-	if (!document.recurring) throw finaError("INVALID", `${document.label} keeps no recurring lines.`);
-	return document.recurring;
-};
-
-const recurringId = (value) => {
-	const id = Number(value);
-	if (!Number.isInteger(id) || id <= 0 || !/^\d+$/.test(String(value ?? "").trim())) {
-		throw finaError("INVALID", `A recurring id is a positive whole number, not ${JSON.stringify(value)}.`);
-	}
-	return id;
-};
-
-/* A string literal per line, joined by CRLF in SQL: a raw newline would end the statement on this transport. */
-const detailSql = (detail) =>
-	detail
-		.split("\r\n")
-		.map((line) => sqlString(line))
-		.join(" || ASCII_CHAR(13) || ASCII_CHAR(10) || ");
-
-export const createRecurringService = ({ client, identity }) => {
-	const detailFields = async (document) =>
-		(await readMappings(client, document.extended)).filter((m) => m.part === "detail").map((m) => m.field);
-	const byName = async (recurring, name) =>
-		(await client.executeSql(
-			`SELECT RECURRINGID FROM RECURRING WHERE UPPER(DESCRIPTION) = UPPER(${sqlString(name)}) AND RECURRINGCLASS = ${sqlString(recurring.class)}`,
-		)) ?? [];
-	const one = async (recurring, id) =>
-		(
-			(await client.executeSql(
-				`SELECT RECURRINGID, DESCRIPTION, RECURRINGHEADER, RECURRINGDETAIL, SEPARATOR FROM RECURRING WHERE RECURRINGID = ${id} AND RECURRINGCLASS = ${sqlString(recurring.class)}`,
-			)) ?? []
-		)[0] ?? null;
-
-	return {
-		list: async (principal, name) => {
-			const document = documentOf(name);
-			recurringOf(document);
-			requireRight(await identity.resolve(principal), document.rights, null);
-			const rows =
-				(await client.executeSql(
-					`SELECT RECURRINGID, DESCRIPTION FROM RECURRING WHERE RECURRINGCLASS = ${sqlString(document.recurring.class)} ORDER BY DESCRIPTION`,
-				)) ?? [];
-			return rows.map((r) => ({ id: Number(r.recurringid), name: String(r.description ?? "") }));
-		},
-
-		get: async (principal, name, rawId) => {
-			const document = documentOf(name);
-			recurringOf(document);
-			const id = recurringId(rawId);
-			requireRight(await identity.resolve(principal), document.rights, null);
-			const row = await one(document.recurring, id);
-			if (!row) throw finaError("RECURRING_NOT_FOUND", `Recurring ${id} was not found.`);
-			const rows = decodeRecurring(
-				document.recurring,
-				{ header: row.recurringheader, detail: row.recurringdetail, separator: row.separator },
-				await detailFields(document),
-			);
-			return { id, name: String(row.description ?? ""), rows };
-		},
-
-		save: async (principal, name, { name: rawName, rows } = {}) => {
-			const document = documentOf(name);
-			recurringOf(document);
-			requireRight(await identity.resolve(principal), document.rights, "create");
-			const label = String(rawName ?? "").trim();
-			if (!label) throw finaError("INVALID", "A recurring needs a name.");
-			if (label.length > MAX_NAME) throw finaError("INVALID", `A recurring name is at most ${MAX_NAME} characters.`);
-			const lines = (Array.isArray(rows) ? rows : []).filter((row) => row && typeof row === "object");
-			if (lines.length === 0) throw finaError("RECURRING_EMPTY", "A recurring needs at least one detail line.");
-
-			const recurring = document.recurring;
-			if ((await byName(recurring, label)).length > 0) {
-				throw finaError("RECURRING_DUPLICATE", `A recurring named "${label}" already exists. Choose another name.`);
-			}
-			const { header, detail } = encodeRecurring(recurring, lines, await detailFields(document));
-			if (detail.length > MAX_DETAIL_CHARS) throw finaError("INVALID", "These detail lines are too long to keep as one recurring.");
-
-			await client.block(
-				"EXECUTE BLOCK AS BEGIN INSERT INTO RECURRING (RECURRINGID, TABLENAME, DESCRIPTION, RECURRINGCLASS, EXCEPTIONFIELD, SEPARATOR, RECURRINGHEADER, RECURRINGDETAIL) " +
-					`VALUES (GEN_ID(RECURRING_GEN, 1), ${sqlString(recurring.tableName)}, ${sqlString(label)}, ${sqlString(recurring.class)}, ` +
-					`${sqlString(recurring.exception)}, ${sqlString(SEPARATOR)}, ${sqlString(header)}, ${detailSql(detail)}); END`,
-			);
-			const saved = await byName(recurring, label);
-			return { id: saved.length ? Number(saved[0].recurringid) : null, name: label };
-		},
-
-		remove: async (principal, name, rawId) => {
-			const document = documentOf(name);
-			recurringOf(document);
-			const id = recurringId(rawId);
-			requireRight(await identity.resolve(principal), document.rights, "delete");
-			if (!(await one(document.recurring, id))) throw finaError("RECURRING_NOT_FOUND", `Recurring ${id} was not found.`);
-			await client.block(
-				`EXECUTE BLOCK AS BEGIN DELETE FROM RECURRING WHERE RECURRINGID = ${id} AND RECURRINGCLASS = ${sqlString(document.recurring.class)}; END`,
-			);
-			return { id };
-		},
-	};
-};

package/engine/fina/route.js

@@ -1,61 +0,0 @@
-/*
- * Doc 8 — how every `fina/*` engine route runs.
- *
- * 1. The caller context (context.js) must be ok; its refusal is the answer.
- * 2. An administrator-only route checks SYS$ADMINISTRATOR for the VERIFIED user before anything else happens.
- * 3. The route's work runs with engine/fina's dependencies (live.js, or a test's).
- *
- * ⚠️ IT NEVER THROWS. The answer is `{ok:true, data}` or `{ok:false, code, error}`. A thrown engine command makes
- * the client retry it over HTTP (data.service invokeEngine), which would run a FINA write twice.
- */
-import { logger } from "../../logger.js";
-
-const KNOWN = new Set([
-	"NOT_CONFIGURED",
-	"FINA_CLOUD_NEEDS_POSTGRES",
-	"UNAUTHENTICATED",
-	"FORBIDDEN",
-	"INVALID",
-	"FINA_UNREACHABLE",
-	"FINA_ERROR",
-	"FINA_REFUSED",
-	"FEATURE_IN_USE",
-	"FEATURES_CHANGED",
-	/* Doc 8 M3 — the masters (engine/fina/master.js). */
-	"MASTER_NOT_FOUND",
-	"MASTER_DUPLICATE",
-	"MASTER_IN_USE",
-	"MASTER_RULE",
-	"MASTER_PARENT_IN_USE",
-	/* Doc 8 M4 — documents, templates, print, recurring. */
-	"DOCUMENT_NOT_FOUND",
-	"TEMPLATE_NOT_FOUND",
-	"RECURRING_NOT_FOUND",
-	"RECURRING_DUPLICATE",
-	"RECURRING_EMPTY",
-	/* Doc 8 M5a — saving a document (documentWrite.js, period.js). */
-	"DOCUMENT_RULE",
-	"DOCUMENT_CHANGED",
-	"DATE_LOCKED",
-	"PERIOD_CLOSED",
-	/* Doc 8 M6 — attachments (engine/attachments/store.js, engine/fina/attachments.js). */
-	"ATTACHMENT_RULE",
-	"ATTACHMENT_NOT_FOUND",
-]);
-
-export const runFinaRoute = async ({ name, context, admin = false }, work) => {
-	try {
-		if (!context) return { ok: false, code: "UNAUTHENTICATED", error: "No signed-in Biz-A user came with this request. Sign in again." };
-		if (context.ok !== true) return { ok: false, code: context.code ?? "UNAUTHENTICATED", error: context.error ?? "Refused." };
-
-		const deps = context.deps ?? (await import("./live.js")).createLiveFinaDeps(context.config);
-		if (admin && !(await deps.isAdministrator(context.principal?.userId))) {
-			return { ok: false, code: "FORBIDDEN", error: "Only an administrator may change the FINA Cloud setup." };
-		}
-		return { ok: true, data: await work({ deps, principal: context.principal, config: context.config }) };
-	} catch (error) {
-		if (KNOWN.has(error?.code)) return { ok: false, code: error.code, error: String(error.message ?? error) };
-		logger.error(`[fina] ${name ?? "route"} failed:`, error);
-		return { ok: false, code: "FAILED", error: String(error?.message ?? error) };
-	}
-};

package/engine/fina/routes/attachment.js

@@ -1,41 +0,0 @@
-/*
- * Doc 8 M6 — a FINA document's attachments (F-34–F-37, L-11), kept in Biz-A (SYS$ATTACHMENT), never in FINA (F-36).
- * The rule is engine/fina/attachments.js; the files are the platform store's (engine/attachments/store.js).
- *
- * - `list` `{ document, id }` → the document's files (id, fileName, mimeType, size, createdBy, createdAt).
- * - `read` `{ document, id, attachmentId, offset }` → one chunk (base64, ≤ 1 MiB) and whether it was the last.
- * - `begin` `{ document, id, fileName, size }` → the upload id, within the console limits (F-35).
- * - `append` `{ document, id, uploadId, chunk }` / `finish` `{ document, id, uploadId }`.
- * - `remove` `{ document, id, ids }`; `copy` `{ document, from, to, ids, fromOwner? }` (Salin, L-11).
- * - Doc 8 M7: `{ submission: 'jv', id }` in place of `{ document, id }` is a JV submission's files; `fromOwner`
- *   (`{ document: 'jv' }` / `{ submission: 'jv' }`) names a copy's source when it is the other kind.
- *
- * ⚠️ Registered as an engine target: export routes only.
- */
-import { runFinaRoute } from "../route.js";
-import { createIdentity } from "../identity.js";
-import { createSettingsStore } from "../settings.js";
-import { createFinaAttachments } from "../attachments.js";
-import { createAttachmentStore } from "../../attachments/store.js";
-import { createSubmissionRepo } from "../submissionRepo.js";
-
-const serviceOf = (deps) =>
-	createFinaAttachments({
-		client: deps.client,
-		identity: createIdentity(deps),
-		settings: createSettingsStore(deps),
-		store: createAttachmentStore({ exec: deps.exec }),
-		/* Doc 8 M7 — a JV submission's files (`{ submission: 'jv', id }`). */
-		submissions: createSubmissionRepo({ exec: deps.exec }),
-	});
-
-const route = (method) => (payload, _argv, context) =>
-	runFinaRoute({ name: `attachment/${method}`, context }, ({ deps, principal }) => serviceOf(deps)[method](principal, payload ?? {}));
-
-export const list = route("list");
-export const read = route("read");
-export const begin = route("begin");
-export const append = route("append");
-export const finish = route("finish");
-export const remove = route("remove");
-export const copy = route("copy");

package/engine/fina/routes/document.js

@@ -1,66 +0,0 @@
-/*
- * Doc 8 M4 / M5a — FINA documents for their forms.
- *
- * - `fina/document/get` `{ document, id }`: the master, its lines, their mapped extended values, and the `version` an
- *   edit is sent against. Any mapped FINA user (D4: view). Doc 8 M7b: a JV also says the submission it came from
- *   (`submission: { id, number } | null`).
- * - `fina/document/save` `{ document, id|null, master, lines, version, requestId }` (M5a): written through the
- *   document's server-owned `write` block (documentWrite.js): right → approval → current → rules → Biz-A lock →
- *   FINA period → json2fina → number. Answers `{ id, number, warnings }`. Only the JV writes; the others are read only.
- * - `fina/document/remove` `{ document, id, requestId }` (M5b): delete — the delete right (= FINA's edit, D4), the
- *   document as FINA has it (gone, a reconciled line), the Biz-A lock and FINA's period on its date. `{ id, number }`.
- * - `fina/document/patch` `{ document, id, master, requestId }` (M5b, Ubah terpilih): the header only (date,
- *   description, mapped master extended fields), then the single edit's path with the document's own lines.
- *
- * ⚠️ Registered as an engine target: export routes only.
- */
-import { runFinaRoute } from "../route.js";
-import { createIdentity } from "../identity.js";
-import { createDocumentService } from "../document.js";
-import { createDocumentWriter } from "../documentWrite.js";
-import { createSettingsStore } from "../settings.js";
-import { createFeatures } from "../features.js";
-import { createAttachmentStore } from "../../attachments/store.js";
-import { createSubmissionRepo } from "../submissionRepo.js";
-
-export const get = (payload, _argv, context) =>
-	runFinaRoute({ name: "document/get", context }, ({ deps, principal }) =>
-		createDocumentService({
-			client: deps.client,
-			identity: createIdentity(deps),
-			/* Doc 8 M7b (L-02): the submission a JV came from, so its form can open the two side by side. */
-			submissionOf: (id) => createSubmissionRepo({ exec: deps.exec }).findByJv(id),
-		}).get(principal, payload?.document, payload?.id),
-	);
-
-const writerOf = (deps) =>
-	createDocumentWriter({
-		client: deps.client,
-		identity: createIdentity(deps),
-		settings: createSettingsStore(deps),
-		features: createFeatures(deps),
-		/* Doc 8 M6: a deleted document's attachments go with it. */
-		attachments: createAttachmentStore({ exec: deps.exec }),
-	});
-
-export const save = (payload, _argv, context) =>
-	runFinaRoute({ name: "document/save", context }, ({ deps, principal, config }) =>
-		writerOf(deps).save(
-			principal,
-			payload?.document,
-			{ id: payload?.id, master: payload?.master, lines: payload?.lines, version: payload?.version, requestId: payload?.requestId },
-			{ dbIndex: config?.dbIndex },
-		),
-	);
-
-/* Doc 8 M5b — `remove` because `delete` is a reserved word (as for masters). */
-export const remove = (payload, _argv, context) =>
-	runFinaRoute({ name: "document/remove", context }, ({ deps, principal, config }) =>
-		writerOf(deps).remove(principal, payload?.document, { id: payload?.id, requestId: payload?.requestId }, { dbIndex: config?.dbIndex }),
-	);
-
-/* Doc 8 M5b — Ubah terpilih: the header of one document (M-13–M-17). */
-export const patch = (payload, _argv, context) =>
-	runFinaRoute({ name: "document/patch", context }, ({ deps, principal, config }) =>
-		writerOf(deps).patch(principal, payload?.document, { id: payload?.id, master: payload?.master, requestId: payload?.requestId }, { dbIndex: config?.dbIndex }),
-	);

package/engine/fina/routes/master.js

@@ -1,26 +0,0 @@
-/*
- * Doc 8 M3 — `fina/master/*`: FINA's masters (COA, Departemen, Proyek, Kurs) for a verified user.
- *
- * Payload `{ master, key?, data? }` — `master` names one of engine/fina/masters (never a table). Every mapped user may
- * read (D4); a write needs the master's FINA right, and every E-09 rule runs on the server (engine/fina/master.js).
- * Lists read FINA directly through the platform list engine (reads pass the write guard); only one record is read here,
- * for its form.
- *
- * ⚠️ Registered as an engine target: export routes only. `remove`, because `delete` is a reserved word.
- */
-import { runFinaRoute } from "../route.js";
-import { createIdentity } from "../identity.js";
-import { createMasterService } from "../master.js";
-
-const service = (deps) => createMasterService({ client: deps.client, identity: createIdentity(deps) });
-
-export const get = (payload, _argv, context) =>
-	runFinaRoute({ name: "master/get", context }, ({ deps, principal }) => service(deps).get(principal, payload?.master, payload?.key));
-
-export const save = (payload, _argv, context) =>
-	runFinaRoute({ name: "master/save", context }, ({ deps, principal }) =>
-		service(deps).save(principal, payload?.master, { key: payload?.key ?? null, data: payload?.data ?? {} }),
-	);
-
-export const remove = (payload, _argv, context) =>
-	runFinaRoute({ name: "master/remove", context }, ({ deps, principal }) => service(deps).remove(principal, payload?.master, payload?.key));

package/engine/fina/routes/period.js

@@ -1,24 +0,0 @@
-/*
- * Doc 8 M5b — FINA's periods for a list (L-08).
- *
- * - `fina/period/check` `{ months: ['YYYY-MM', …] }` (at most 60): `{ months: { 'YYYY-MM': open } }`, from FINA's
- *   CHECK_PERIOD. Any mapped FINA user (D4: view). Daftar JV disables Ubah / Hapus on a row whose month is not open;
- *   the writer refuses them on its own (period.js), so this is only what the screen shows.
- *
- * ⚠️ Registered as an engine target: export routes only.
- */
-import { runFinaRoute } from "../route.js";
-import { createIdentity, requireRight } from "../identity.js";
-import { periodStates } from "../period.js";
-import { finaError } from "../errors.js";
-
-const MAX_MONTHS = 60;
-
-export const check = (payload, _argv, context) =>
-	runFinaRoute({ name: "period/check", context }, async ({ deps, principal }) => {
-		requireRight(await createIdentity(deps).resolve(principal), "jv", null);
-		const months = payload?.months;
-		if (Array.isArray(months) && months.length > MAX_MONTHS) throw finaError("INVALID", `At most ${MAX_MONTHS} months at a time.`);
-		const states = await periodStates(deps.client, months);
-		return { months: Object.fromEntries(Object.entries(states).map(([month, res]) => [month, res === 0])) };
-	});

package/engine/fina/routes/print.js

@@ -1,19 +0,0 @@
-/*
- * Doc 8 M4 — `fina/print/render`: a saved document's pages as FINA renders them (T-24–T-26), with any template of its
- * type (the one the form shows). Payload `{ document, id, templateId? }`. Needs the FINA print right (R, D4).
- * Answers `{ id, templateId, pages: [{ data: <base64 JPEG>, widthMm, heightMm }] }`; the client previews, prints or
- * saves them as a PDF.
- *
- * ⚠️ Registered as an engine target: export routes only.
- */
-import { runFinaRoute } from "../route.js";
-import { createIdentity } from "../identity.js";
-import { createPrintService } from "../print.js";
-
-export const render = (payload, _argv, context) =>
-	runFinaRoute({ name: "print/render", context }, ({ deps, principal }) =>
-		createPrintService({ client: deps.client, identity: createIdentity(deps) }).render(principal, payload?.document, {
-			id: payload?.id,
-			templateId: payload?.templateId,
-		}),
-	);