itdatex E-Invoice Intake

Changelog

0.6.5

• First public release on wp.org. XRechnung and ZUGFeRD parsing (UBL 2.1, UN/CEFACT CII, PDF/A-3 with embedded XML), KoSIT-based field validation, secure server-side storage with a tamper-evident hash chain, upload UI, invoice inbox, single-invoice detail view, secure download endpoint, and a full audit log. WP-CLI commands for headless ingest.

0.6.4

• Replaced the single-line phpcs:ignore around the duplicate-check query in IngestService::ingest() with a phpcs:disable/phpcs:enable block so the sniff annotation also covers the interpolated SQL literal on the following line. No behaviour change.

0.6.3

• Playground Plugin Check compliance pass: rename lexical include-scoped variables to the reing_ prefix in uninstall.php and the bootstrap file so the sniff no longer flags them; wrap the three admin view files (page-inbox.php, page-invoice.php, page-upload.php) with a phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound block explaining that the vars are template-locals, not globals. Annotated the read-only $_GET accesses in Admin\Pages\Invoice and Admin\Pages\Inbox with phpcs:ignore WordPress.Security.NonceVerification.Recommended (display-only, all writes go through nonce-protected admin-post endpoints). Annotated the duplicate-check $wpdb->get_var() in IngestService (table-name accessor, no user input). Gated the error_log() call in the same file behind WP_DEBUG. Annotated $_FILES['invoice_file'] in UploadHandler (cannot be sanitized like a string; validated by Parser + Validator downstream). Rewrote the uninstall DROP TABLE loop with a phpcs:ignore + rationale for uninstall-time schema removal.

0.6.2

• wp.org Plugin Review round 2: distribution ZIP no longer ships the schema assets (*.xslt, *.sch, *.xmp) from the bundled horstoeko/zugferd library nor the Sphinx docs from jms/serializer — they are not used at runtime by the free plugin (validation runs against KoSIT in the optional Pro backend). Removed the unused, outdated transitive setasign/fpdf 1.9 dependency entirely. Annotated the two remaining static SQL statements in InvoiceRepository::lastChainHash() and countInvoices() with rationale.

0.6.1

• Plugin Check compliance pass: escape interpolated exception messages (FormatDetector, Parser, Storage, InvoiceRepository), replace is_writable() with wp_is_writable(), unlink() with wp_delete_file(), rmdir() with WP_Filesystem::rmdir(), drop best-effort chmod() on stored invoices, inline SQL in listOpenInvoices() to satisfy the prepared-SQL sniff, annotate the dynamic listForExport query and the streaming readfile() in the download endpoint. No behaviour change.

0.6.0

• New API: InvoiceRepository::listOpenInvoices() and summarizeOpenInvoices() for due-date reporting and aggregation by bucket (overdue / this week / this month / later / no date). Used by the optional Pro dashboard.

0.5.0

• New API: InvoiceRepository::listForExport($from, $to, $status, $limit) with safe date range and status filter for CSV/DATEV exporters. Used by the optional Pro export module.

0.4.0

• New service class IngestService::ingest($path, $name, $source, $actor) encapsulating the parse → validate → store → audit pipeline. UploadHandler refactored to use it. Enables add-ons (e.g. Pro IMAP import) to reuse the exact same processing chain that the browser upload uses, including the existing hooks.

0.3.0

• New filter reing_applyable_fields and action reing_apply_invoice_fields($id, $fields, $source) to allow add-ons to update invoice fields with type-safe sanitisation. Adds InvoiceRepository::applyableFields() and updateFields() with date / amount / currency normalisation. Sets extracted_by = 'ai_draft' and writes a structured audit entry.

0.2.0

• Add-on integration hooks: reing_after_validate($tmpPath, $report, $invoiceData), reing_after_invoice_insert($id, $invoiceData, $report) and reing_invoice_view_after_validation($invoice, $reportData) allow optional Pro extensions to plug in deep validation, AI explanations and extra UI cards without modifying the free core. Includes a small backup autoloader for the prefixed Smalot/PdfParser library that the Strauss-generated PSR-0 mapping does not resolve correctly.

0.1.0

• Initial release: parsing, validation, storage with hash chain, upload, inbox and single-invoice views, secure download endpoint, audit log.