[helpcodeai]

Summary

Cloud workspace admins can have every paid invoice emailed as a PDF, to the billing contact or to another address (e.g. accounting). Stripe's own receipt emails can only be switched on for the whole account, so this is per workspace and off by default. The licence site stores the setting and sends the emails (HelpCode-ai/anythingmcp-website, companion PR); this PR is the Cloud side. Relates to #1604.

Changes

• Backend:
  • GET and PUT /api/license/invoice-email (ADMIN; Cloud only, 404 on self-hosted; PUT throttled 10/min).
  • InvoiceEmailService resolves the licence key from the caller's own workspace, as the billing portal does, and calls the licence site with the service token. The site's reply is parsed field by field and the site's error wording is never passed on.
  • InvoiceEmailDto has no workspace or licence field: the whitelist pipe rejects them.
  • New security event INVOICE_EMAIL_CHANGED, which stores the recipient's domain only.
• Frontend:
  • An "Invoices by email" card on Settings → License, for Cloud with a billable subscription. It has a switch, a choice between the billing contact and another address, and the last invoice sent.
  • Strings in en, de and it.
• CLI:
  • amcp invoices email [on|off] [--to <address> | --billing-contact] [--yes], with completion and usage.
  • operations.ts regenerated.
• Docs: docs/cloud-invoices.md, plus a section in the CLI guide (en, de, it).

Cloud and self-hosted

• Cloud: as described.
• Self-hosted: the endpoints answer 404 and the card is never shown (hasBillableSubscription requires Cloud).

Type

• New feature

Testing

Where	Command	Result
packages/backend	npx tsc --noEmit -p tsconfig.json	clean
packages/backend	npx eslint on the changed files	clean
packages/backend	npx jest --maxWorkers=4 src/license src/audit	31 suites passed, 1 skipped; 550 tests passed, 9 skipped
packages/frontend	npx tsc --noEmit -p tsconfig.json	clean
packages/frontend	npx eslint src/components/invoice-email-card.tsx	clean
packages/frontend	npx eslint src/app/settings/license/page.tsx	3 warnings, all on the existing loadStatus effect, not changed here
packages/frontend	npx playwright test tests/e2e/invoice-email.spec.ts tests/e2e/billing-awareness.spec.ts	19 passed
packages/cli	npm test	25 passed, 2 skipped (fish not installed)
repo root	node scripts/generate-cli-operations.mjs --check	up to date (208 operations)

New tests:

• Backend (src/license/invoice-email.spec.ts):
  • the caller's own key and workspace are the only ones sent;
  • the DTO refuses organizationId and licenseKey;
  • ADMIN only, 404 on self-hosted;
  • the site's refusals are mapped without its wording;
  • the reply is filtered;
  • the security event metadata.
• e2e (tests/e2e/invoice-email.spec.ts):
  • switching on;
  • saving another address and the billing contact;
  • validation;
  • the last invoice sent;
  • hidden without a subscription and on a free trial.
• CLI: show, on with --to, --billing-contact keeping the switch, off, and the refusals (no request sent).

Checklist

• My code follows the existing code style
• I have tested my changes locally
• I have updated documentation
• The tests listed above pass
• This PR has a descriptive title

Related Issues

Relates to #1604. Deploy after the licence-site PR; until then the endpoints answer 502 "unavailable" and the card shows its load error.