From 12d45660c6e67eecef809c2b03d11de605ac35b9 Mon Sep 17 00:00:00 2001
From: Bouni <948965+Bouni@users.noreply.github.com>
Date: Fri, 9 Oct 2026 09:28:47 +0000
Subject: [PATCH 1/5] Update missing translations, sort translations

---
 TRANSLATIONS.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/TRANSLATIONS.md b/TRANSLATIONS.md
index 6b60ea4..2fa4fd6 100644
--- a/TRANSLATIONS.md
+++ b/TRANSLATIONS.md
@@ -1,6 +1,6 @@
 # Translation Status
 
-Last updated: 2026-10-07 09:57:47
+Last updated: 2026-10-09 09:28:47
 
 Reference locale (en): **346 keys**
 

From b6a1dc9725c59e2202b458c209329d013f327083 Mon Sep 17 00:00:00 2001
From: Bouni <bouni@owee.de>
Date: Fri, 9 Oct 2026 14:53:12 +0200
Subject: [PATCH 2/5] Allow db to be undefined after closeDatabase()

closeDatabase() resets the module-level handle to undefined, which the
DB type did not permit. Type it as DB | undefined and route the
invoice-numbering helpers through getDatabase() so they get a clear
'Database not initialized' error instead of a TypeError.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 backend/src/database/init.ts | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/backend/src/database/init.ts b/backend/src/database/init.ts
index 14ce783..61652a7 100644
--- a/backend/src/database/init.ts
+++ b/backend/src/database/init.ts
@@ -5,7 +5,7 @@ import { generateUUID } from "../utils/uuid.ts";
 import { RESOURCE_ACTIONS } from "../types/index.ts";
 import type { Action, Resource } from "../types/index.ts";
 
-let db: DB;
+let db: DB | undefined;
 
 //
 //  Path helpers
@@ -772,7 +772,7 @@ function getNumberingSettings(): {
     enabled: true,
   };
   try {
-    const rows = db.query(
+    const rows = getDatabase().query(
       "SELECT key, value FROM settings WHERE key IN ('invoicePrefix','invoiceIncludeYear','invoiceNumberPadding','invoiceNumberPattern')",
     );
     const m = new Map<string, string>();
@@ -789,7 +789,7 @@ function getNumberingSettings(): {
     cfg.pattern = (m.get("invoiceNumberPattern") || "").trim() || undefined;
 
     try {
-      const raw = db.query(
+      const raw = getDatabase().query(
         "SELECT value FROM settings WHERE key = 'invoiceNumberingEnabled' LIMIT 1",
       );
       if (raw.length > 0) {
@@ -807,11 +807,11 @@ function getNumberingSettings(): {
 /** Find the highest existing sequential suffix matching `likePrefix%`, optionally scoped to a single customer. */
 function findMaxSequence(likePrefix: string, customerId?: string): number {
   const rows = customerId
-    ? db.query(
+    ? getDatabase().query(
       "SELECT invoice_number FROM invoices WHERE invoice_number LIKE ? AND customer_id = ?",
       [likePrefix + "%", customerId],
     )
-    : db.query(
+    : getDatabase().query(
       "SELECT invoice_number FROM invoices WHERE invoice_number LIKE ?",
       [likePrefix + "%"],
     );
@@ -829,7 +829,7 @@ function findMaxSequence(likePrefix: string, customerId?: string): number {
 function getCustomerNumber(customerId?: string): number | null {
   if (!customerId) return null;
   try {
-    const rows = db.query(
+    const rows = getDatabase().query(
       "SELECT customer_number FROM customers WHERE id = ?",
       [customerId],
     ) as unknown[][];

From d6fc5d6b9032fab6750e7891f2c85907b8bde2c9 Mon Sep 17 00:00:00 2001
From: Bouni <bouni@owee.de>
Date: Fri, 9 Oct 2026 14:53:12 +0200
Subject: [PATCH 3/5] Type template zip data as Uint8Array<ArrayBuffer>

The zip upload is always built from an ArrayBuffer; stating that lets
it be passed to new Blob() under TypeScript 5.7+ typed arrays.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 backend/src/controllers/templates.ts | 2 +-
 backend/src/routes/admin.ts          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/controllers/templates.ts b/backend/src/controllers/templates.ts
index e4330a1..0c1a7a2 100644
--- a/backend/src/controllers/templates.ts
+++ b/backend/src/controllers/templates.ts
@@ -644,7 +644,7 @@ function assertLocalManifestShape(m: unknown): asserts m is LocalManifest {
 
 // Install a template from an uploaded .zip file (local template)
 export async function installLocalTemplateFromZip(
-  zipData: Uint8Array,
+  zipData: Uint8Array<ArrayBuffer>,
 ): Promise<Template> {
   // Create a blob from the zip data for the ZipReader
   const blob = new Blob([zipData]);
diff --git a/backend/src/routes/admin.ts b/backend/src/routes/admin.ts
index 568fc91..9084b7a 100644
--- a/backend/src/routes/admin.ts
+++ b/backend/src/routes/admin.ts
@@ -620,7 +620,7 @@ adminRoutes.post(
     try {
       const contentType = c.req.header("content-type") || "";
 
-      let zipData: Uint8Array;
+      let zipData: Uint8Array<ArrayBuffer>;
 
       if (contentType.includes("multipart/form-data")) {
         // Handle multipart form upload

From f9edb029284b33de15a9e93286f9d81542e92767 Mon Sep 17 00:00:00 2001
From: Bouni <bouni@owee.de>
Date: Fri, 9 Oct 2026 14:53:12 +0200
Subject: [PATCH 4/5] Fix OIDC type errors in ID token verification

Read the JWK 'kid' via Record<string, unknown> like the other non-standard
fields, and return Uint8Array<ArrayBuffer> from b64urlToBytes so the
signature is accepted as a BufferSource by crypto.subtle.verify.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 backend/src/utils/oidc.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/src/utils/oidc.ts b/backend/src/utils/oidc.ts
index 169cc1b..f8fb668 100644
--- a/backend/src/utils/oidc.ts
+++ b/backend/src/utils/oidc.ts
@@ -160,7 +160,7 @@ export async function exchangeAndVerify(
 
 // ── ID token verification (RS256) ─────────────────────────────────────────
 
-function b64urlToBytes(b64url: string): Uint8Array {
+function b64urlToBytes(b64url: string): Uint8Array<ArrayBuffer> {
   const b64 = b64url.replace(/-/g, "+").replace(/_/g, "/");
   const padded = b64 + "=".repeat((4 - (b64.length % 4)) % 4);
   const bin = atob(padded);
@@ -193,7 +193,7 @@ async function verifyIdToken(
   const jwks = await getJwks(jwksUri);
   const jwk = jwks.find(
     (k) =>
-      k.kid === header.kid &&
+      (k as Record<string, unknown>).kid === header.kid &&
       (k as Record<string, unknown>).use !== "enc" &&
       ((k as Record<string, unknown>).alg === "RS256" ||
         (k as Record<string, unknown>).kty === "RSA"),

From 3e18c72134e8ae5329dfb393c7b1e9a8b866d6f5 Mon Sep 17 00:00:00 2001
From: Bouni <bouni@owee.de>
Date: Fri, 9 Oct 2026 14:53:12 +0200
Subject: [PATCH 5/5] Remove unused templates_new.ts

Leftover copy of the templates controller that nothing imports; it no
longer matched the Template type and broke the type check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 backend/src/controllers/templates_new.ts | 73 ------------------------
 1 file changed, 73 deletions(-)
 delete mode 100644 backend/src/controllers/templates_new.ts

diff --git a/backend/src/controllers/templates_new.ts b/backend/src/controllers/templates_new.ts
deleted file mode 100644
index 69613c2..0000000
--- a/backend/src/controllers/templates_new.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-import { getDatabase } from "../database/init.ts";
-import { Template } from "../types/index.ts";
-import { generateUUID } from "../utils/uuid.ts";
-
-export const getTemplates = () => {
-  const db = getDatabase();
-  const results = db.query(
-    "SELECT id, name, html, is_default, created_at FROM templates",
-  );
-  return results.map((row: unknown[]) => ({
-    id: row[0] as string,
-    name: row[1] as string,
-    html: row[2] as string,
-    isDefault: Boolean(row[3]),
-    createdAt: new Date(row[4] as string),
-  }));
-};
-
-export const createTemplate = (data: Partial<Template>) => {
-  const db = getDatabase();
-  const templateId = generateUUID();
-
-  const template: Template = {
-    id: templateId,
-    name: data.name!,
-    html: data.html!,
-    isDefault: data.isDefault || false,
-    createdAt: new Date(),
-  };
-
-  db.query(
-    "INSERT INTO templates (id, name, html, is_default, created_at) VALUES (?, ?, ?, ?, ?)",
-    [
-      template.id,
-      template.name,
-      template.html,
-      template.isDefault,
-      template.createdAt,
-    ],
-  );
-
-  return template;
-};
-
-export const updateTemplate = (id: string, data: Partial<Template>) => {
-  const db = getDatabase();
-  db.query(
-    "UPDATE templates SET name = ?, html = ?, is_default = ? WHERE id = ?",
-    [data.name, data.html, data.isDefault, id],
-  );
-
-  const result = db.query(
-    "SELECT id, name, html, is_default, created_at FROM templates WHERE id = ?",
-    [id],
-  );
-  if (result.length > 0) {
-    const row = result[0] as unknown[];
-    return {
-      id: row[0] as string,
-      name: row[1] as string,
-      html: row[2] as string,
-      isDefault: Boolean(row[3]),
-      createdAt: new Date(row[4] as string),
-    };
-  }
-  return null;
-};
-
-export const deleteTemplate = (id: string) => {
-  const db = getDatabase();
-  db.query("DELETE FROM templates WHERE id = ?", [id]);
-  return true;
-};