@cheqi/sdk 0.1.1

package/dist/models.js

@@ -0,0 +1,106 @@
+export class ReceiptResult {
+    success;
+    deliveryMethod;
+    customerFound;
+    receiptCount;
+    response;
+    templateContent;
+    message;
+    customerEmail;
+    constructor(init) {
+        this.success = init.success;
+        this.deliveryMethod = init.deliveryMethod ?? null;
+        this.customerFound = init.customerFound ?? false;
+        this.receiptCount = init.receiptCount ?? 0;
+        this.response = init.response ?? null;
+        this.templateContent = init.templateContent ?? null;
+        this.message = init.message ?? null;
+        this.customerEmail = init.customerEmail ?? null;
+    }
+    static deliveredToApp(response, templateContent) {
+        const receiptCount = (Array.isArray(response.createdReceipts) ? response.createdReceipts.length : undefined) ??
+            (typeof response.receiptCount === "number" ? response.receiptCount : 0);
+        return new ReceiptResult({
+            success: true,
+            deliveryMethod: "APP",
+            customerFound: true,
+            receiptCount,
+            response,
+            templateContent
+        });
+    }
+    static deliveredViaEmail(customerEmail) {
+        return new ReceiptResult({
+            success: true,
+            deliveryMethod: "EMAIL",
+            customerFound: false,
+            customerEmail
+        });
+    }
+    static customerNotFound() {
+        return new ReceiptResult({
+            success: false,
+            customerFound: false,
+            message: "Customer not found"
+        });
+    }
+    isSuccess() {
+        return this.success;
+    }
+    isCustomerNotFound() {
+        return !this.customerFound;
+    }
+    getReceiptCount() {
+        return this.receiptCount;
+    }
+    getMessage() {
+        return this.message;
+    }
+}
+export class CreditNoteResult {
+    success;
+    customerFound;
+    creditNoteCount;
+    response;
+    templateContent;
+    message;
+    constructor(init) {
+        this.success = init.success;
+        this.customerFound = init.customerFound ?? false;
+        this.creditNoteCount = init.creditNoteCount ?? 0;
+        this.response = init.response ?? null;
+        this.templateContent = init.templateContent ?? null;
+        this.message = init.message ?? null;
+    }
+    static deliveredToApp(response, templateContent) {
+        const creditNoteCount = (Array.isArray(response.createdCreditNotes) ? response.createdCreditNotes.length : undefined) ??
+            (typeof response.creditNoteCount === "number" ? response.creditNoteCount : 0);
+        return new CreditNoteResult({
+            success: true,
+            customerFound: true,
+            creditNoteCount,
+            response,
+            templateContent
+        });
+    }
+    static customerNotFound() {
+        return new CreditNoteResult({
+            success: false,
+            customerFound: false,
+            message: "Customer not found"
+        });
+    }
+    isSuccess() {
+        return this.success;
+    }
+    isCustomerNotFound() {
+        return !this.customerFound;
+    }
+    getCreditNoteCount() {
+        return this.creditNoteCount;
+    }
+    getMessage() {
+        return this.message;
+    }
+}
+//# sourceMappingURL=models.js.map

package/dist/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,aAAa;IACf,OAAO,CAAU;IACjB,cAAc,CAAgB;IAC9B,aAAa,CAAU;IACvB,YAAY,CAAS;IACrB,QAAQ,CAAU;IAClB,eAAe,CAAgB;IAC/B,OAAO,CAAgB;IACvB,aAAa,CAAgB;IAEtC,YAAY,IAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,QAAiC,EAAE,eAAuB;QAC9E,MAAM,YAAY,GAChB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,CAAC,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1E,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;YACnB,YAAY;YACZ,QAAQ;YACR,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,aAAqB;QAC5C,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,OAAO;YACvB,aAAa,EAAE,KAAK;YACpB,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,gBAAgB;QACrB,OAAO,IAAI,aAAa,CAAC;YACvB,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,kBAAkB;QAChB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAWD,MAAM,OAAO,gBAAgB;IAClB,OAAO,CAAU;IACjB,aAAa,CAAU;IACvB,eAAe,CAAS;IACxB,QAAQ,CAAU;IAClB,eAAe,CAAgB;IAC/B,OAAO,CAAgB;IAEhC,YAAY,IAA0B;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,QAAiC,EAAE,eAAuB;QAC9E,MAAM,eAAe,GACnB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,CAAC,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,OAAO,IAAI,gBAAgB,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;YACnB,eAAe;YACf,QAAQ;YACR,eAAe;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,gBAAgB;QACrB,OAAO,IAAI,gBAAgB,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,KAAK;YACpB,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,kBAAkB;QAChB,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/rfc8785.d.ts

@@ -0,0 +1 @@
+export declare function canonicalizeJson(value: string | object): string;

package/dist/rfc8785.js

@@ -0,0 +1,42 @@
+function serializeString(value) {
+    return JSON.stringify(value)
+        .replace(/\u2028/g, "\\u2028")
+        .replace(/\u2029/g, "\\u2029");
+}
+function serializeNumber(value) {
+    if (!Number.isFinite(value)) {
+        throw new Error("NaN and Infinity are not valid JSON values");
+    }
+    if (Object.is(value, -0) || value === 0) {
+        return "0";
+    }
+    return String(value);
+}
+function serialize(value) {
+    if (value === null) {
+        return "null";
+    }
+    if (typeof value === "boolean") {
+        return value ? "true" : "false";
+    }
+    if (typeof value === "number") {
+        return serializeNumber(value);
+    }
+    if (typeof value === "string") {
+        return serializeString(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((entry) => serialize(entry)).join(",")}]`;
+    }
+    if (typeof value === "object") {
+        const record = value;
+        const keys = Object.keys(record).sort();
+        return `{${keys.map((key) => `${serializeString(key)}:${serialize(record[key])}`).join(",")}}`;
+    }
+    throw new TypeError(`Cannot canonicalize type: ${typeof value}`);
+}
+export function canonicalizeJson(value) {
+    const parsed = typeof value === "string" ? JSON.parse(value) : value;
+    return serialize(parsed);
+}
+//# sourceMappingURL=rfc8785.js.map

package/dist/rfc8785.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rfc8785.js","sourceRoot":"","sources":["../src/rfc8785.ts"],"names":[],"mappings":"AAAA,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACzB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACjG,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,6BAA6B,OAAO,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/services/company.d.ts

@@ -0,0 +1,7 @@
+import type { CheqiApiClient, CompanyDTO } from "../types.js";
+import { Company } from "../models/domain.js";
+export declare class CompanyService {
+    private readonly apiClient;
+    constructor(apiClient: Pick<CheqiApiClient, "provisionCompany">);
+    provisionCompany(company: Company | CompanyDTO, adminEmail: string): Promise<Record<string, unknown>>;
+}

package/dist/services/company.js

@@ -0,0 +1,33 @@
+import { CheqiSDKError, ErrorCodes } from "../errors.js";
+import { Company } from "../models/domain.js";
+import { getCompanyValidationErrors } from "../validators.js";
+export class CompanyService {
+    apiClient;
+    constructor(apiClient) {
+        this.apiClient = apiClient;
+    }
+    provisionCompany(company, adminEmail) {
+        if (!company) {
+            throw new CheqiSDKError("Company cannot be null", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        const validationErrors = getCompanyValidationErrors(company);
+        if (validationErrors.length > 0) {
+            throw new CheqiSDKError(`Invalid company data: ${validationErrors.join(", ")}`, {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        if (!adminEmail.includes("@")) {
+            throw new CheqiSDKError("Admin email must be a valid email address", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        const companyDTO = company instanceof Company ? company.toCompanyDTO() : company;
+        return this.apiClient.provisionCompany({ company: companyDTO, adminEmail });
+    }
+}
+//# sourceMappingURL=company.js.map

package/dist/services/company.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"company.js","sourceRoot":"","sources":["../../src/services/company.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,OAAO,cAAc;IAEN;IADnB,YACmB,SAAmD;QAAnD,cAAS,GAAT,SAAS,CAA0C;IACnE,CAAC;IAEJ,gBAAgB,CAAC,OAA6B,EAAE,UAAkB;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,wBAAwB,EAAE;gBAChD,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,yBAAyB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC9E,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,aAAa,CAAC,2CAA2C,EAAE;gBACnE,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACjF,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/services/credit-note.d.ts

@@ -0,0 +1,25 @@
+import { CreditNoteResult } from "../models.js";
+import type { CheqiApiClient, CreditNoteTemplateGenerationRequest, CreditNoteTemplateRequest, CreditNoteTemplateResponse, DecryptedDeliveredCreditNote, EncryptedCreditNote, EncryptedCreditNoteInitiationRequest, IdentificationDetails, MatchedRecipient, RecipientResolutionResponse } from "../types.js";
+import { DecryptionService } from "./decryption.js";
+import { EncryptionService } from "./encryption.js";
+import { MatchingService } from "./matching.js";
+export declare class CreditNoteService {
+    private readonly apiClient;
+    private readonly encryptionService;
+    private readonly matchingService;
+    private readonly decryptionService;
+    constructor(apiClient: Pick<CheqiApiClient, "generateCreditNoteTemplate" | "sendEncryptedCreditNotes">, encryptionService: EncryptionService, matchingService: MatchingService, decryptionService?: DecryptionService | null);
+    processCompleteCreditNote(identificationDetails: IdentificationDetails, creditNoteTemplateRequest: CreditNoteTemplateRequest, accessToken?: string | null): Promise<CreditNoteResult>;
+    generateCreditNoteTemplate(request: CreditNoteTemplateGenerationRequest, accessToken?: string | null): Promise<CreditNoteTemplateResponse>;
+    createEncryptedCreditNote(creditNoteEnvelope: string, recipient: MatchedRecipient): EncryptedCreditNote;
+    sendEncryptedCreditNotes(parentCheqiReceiptId: string, encryptedCreditNotes: EncryptedCreditNote[], templateHash: string, matchResponse: RecipientResolutionResponse, accessToken?: string | null): Promise<Record<string, unknown>>;
+    decryptCreditNoteRequest(encryptedCreditNote: EncryptedCreditNoteInitiationRequest, privateKeyBase64: string): {
+        content: string;
+    };
+    decryptDeliveredCreditNote(encryptedCreditNote: EncryptedCreditNote, privateKeyBase64: string): DecryptedDeliveredCreditNote;
+    private buildEncryptedCreditNotes;
+    private mergeCreditNoteContext;
+    private mergeXmlParty;
+    private mergeXmlPaymentMeans;
+    private mergeReceivingParty;
+}

package/dist/services/credit-note.js

@@ -0,0 +1,211 @@
+import { CheqiSDKError, CreditNoteProcessingError, ErrorCodes } from "../errors.js";
+import { CreditNoteResult } from "../models.js";
+import { serializeJson, sha256Hex } from "../utils.js";
+const CUSTOMER_PARTY_PLACEHOLDER = "<cac:AccountingCustomerParty/>";
+const CUSTOMER_PARTY_CLOSING_TAG = "</cac:AccountingCustomerParty>";
+function uniqueFormats(recipients = []) {
+    const seen = new Set();
+    const formats = [];
+    for (const recipient of recipients) {
+        for (const format of recipient.acceptedFormats ?? []) {
+            if (!seen.has(format)) {
+                seen.add(format);
+                formats.push(format);
+            }
+        }
+    }
+    return formats;
+}
+function routeFound(matchResponse) {
+    return Boolean(matchResponse.routeFound ?? matchResponse.customerFound);
+}
+function matchedRecipients(matchResponse) {
+    return matchResponse.recipients ?? matchResponse.matchedRecipients ?? [];
+}
+export class CreditNoteService {
+    apiClient;
+    encryptionService;
+    matchingService;
+    decryptionService;
+    constructor(apiClient, encryptionService, matchingService, decryptionService = null) {
+        this.apiClient = apiClient;
+        this.encryptionService = encryptionService;
+        this.matchingService = matchingService;
+        this.decryptionService = decryptionService;
+    }
+    async processCompleteCreditNote(identificationDetails, creditNoteTemplateRequest, accessToken = null) {
+        if (!identificationDetails) {
+            throw new CheqiSDKError("Identification details cannot be null", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        if (!creditNoteTemplateRequest) {
+            throw new CheqiSDKError("Credit note template request cannot be null", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        const originalReceiptId = identificationDetails.cheqiReceiptId;
+        if (!originalReceiptId) {
+            throw new CheqiSDKError("Original receipt ID (cheqiReceiptId) is required for credit note processing", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        try {
+            const matchResponse = await this.matchingService.matchCustomer(identificationDetails, accessToken);
+            const recipientEmail = identificationDetails.recipientEmail;
+            if (!routeFound(matchResponse) && !recipientEmail) {
+                return CreditNoteResult.customerNotFound();
+            }
+            const templateResponse = await this.generateCreditNoteTemplate({
+                creditNoteTemplateRequest,
+                formats: uniqueFormats(matchedRecipients(matchResponse)),
+                buyerCountryCode: matchResponse.buyerCountryCode ?? "",
+                buyerType: matchResponse.buyerType ?? "CONSUMER",
+                taxesApplied: true
+            }, accessToken);
+            if (!routeFound(matchResponse)) {
+                return CreditNoteResult.customerNotFound();
+            }
+            const encryptedCreditNotes = this.buildEncryptedCreditNotes(matchResponse, templateResponse);
+            const templateContent = templateResponse.cheqi
+                ? serializeJson(templateResponse.cheqi)
+                : (templateResponse.ublCreditNote ?? "");
+            const templateHash = sha256Hex(templateContent);
+            const createdResponse = await this.sendEncryptedCreditNotes(originalReceiptId, encryptedCreditNotes, templateHash, matchResponse, accessToken);
+            return CreditNoteResult.deliveredToApp(createdResponse, templateContent);
+        }
+        catch (error) {
+            if (error instanceof CheqiSDKError) {
+                throw error;
+            }
+            throw new CreditNoteProcessingError(`Credit note processing failed: ${String(error.message)}`, {
+                cause: error
+            });
+        }
+    }
+    generateCreditNoteTemplate(request, accessToken = null) {
+        if (!request) {
+            throw new CheqiSDKError("Credit note template request cannot be null", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        return this.apiClient.generateCreditNoteTemplate(request, accessToken);
+    }
+    createEncryptedCreditNote(creditNoteEnvelope, recipient) {
+        if (!creditNoteEnvelope.trim()) {
+            throw new CheqiSDKError("Credit note envelope cannot be null or empty", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        return {
+            ...this.encryptionService.encryptCreditNoteForRecipient(creditNoteEnvelope, recipient)
+        };
+    }
+    sendEncryptedCreditNotes(parentCheqiReceiptId, encryptedCreditNotes, templateHash, matchResponse, accessToken = null) {
+        if (encryptedCreditNotes.length === 0) {
+            throw new CheqiSDKError("Encrypted credit notes cannot be null or empty", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        if (!templateHash.trim()) {
+            throw new CheqiSDKError("Template hash cannot be null or empty", {
+                errorCode: ErrorCodes.VALIDATION_ERROR,
+                httpStatusCode: 400
+            });
+        }
+        if (!routeFound(matchResponse) || !matchResponse.matchId) {
+            throw new CheqiSDKError("Cannot send credit notes: customer was not found during matching", {
+                errorCode: ErrorCodes.CUSTOMER_NOT_FOUND,
+                httpStatusCode: 400
+            });
+        }
+        return this.apiClient.sendEncryptedCreditNotes(matchResponse.matchId, parentCheqiReceiptId, encryptedCreditNotes, templateHash, accessToken);
+    }
+    decryptCreditNoteRequest(encryptedCreditNote, privateKeyBase64) {
+        if (!this.decryptionService) {
+            throw new CheqiSDKError("Decryption service is not configured", {
+                errorCode: ErrorCodes.DECRYPTION_ERROR
+            });
+        }
+        return this.decryptionService.decryptCreditNote(encryptedCreditNote, privateKeyBase64);
+    }
+    decryptDeliveredCreditNote(encryptedCreditNote, privateKeyBase64) {
+        if (!this.decryptionService) {
+            throw new CheqiSDKError("Decryption service is not configured", {
+                errorCode: ErrorCodes.DECRYPTION_ERROR
+            });
+        }
+        const decrypted = this.decryptionService.decryptDeliveredCreditNote(encryptedCreditNote, privateKeyBase64);
+        return this.mergeCreditNoteContext(decrypted);
+    }
+    buildEncryptedCreditNotes(matchResponse, templateResponse) {
+        const encryptedCreditNotes = [];
+        for (const recipient of matchedRecipients(matchResponse)) {
+            const acceptedFormats = recipient.acceptedFormats ?? [];
+            const envelope = {};
+            if (acceptedFormats.includes("CHEQI") && templateResponse.cheqi) {
+                envelope.cheqiCreditNote = templateResponse.cheqi;
+            }
+            if (acceptedFormats.includes("UBL_CREDIT_NOTE") && templateResponse.ublCreditNote) {
+                envelope.ublCreditNote = templateResponse.ublCreditNote;
+            }
+            encryptedCreditNotes.push(this.createEncryptedCreditNote(serializeJson(envelope), recipient));
+        }
+        return encryptedCreditNotes;
+    }
+    mergeCreditNoteContext(decrypted) {
+        const context = decrypted.creditNoteContextEnvelope;
+        if (!context) {
+            return decrypted;
+        }
+        const creditNoteEnvelope = {
+            cheqiCreditNote: decrypted.creditNoteEnvelope.cheqiCreditNote,
+            ublCreditNote: decrypted.creditNoteEnvelope.ublCreditNote
+        };
+        this.mergeXmlParty(creditNoteEnvelope, context);
+        this.mergeXmlPaymentMeans(creditNoteEnvelope, context);
+        this.mergeReceivingParty(creditNoteEnvelope, context);
+        return {
+            ...decrypted,
+            creditNoteEnvelope
+        };
+    }
+    mergeXmlParty(creditNoteEnvelope, context) {
+        const xmlReceivingParty = context.receivingParty?.xmlReceivingParty;
+        if (!xmlReceivingParty || !creditNoteEnvelope.ublCreditNote?.includes(CUSTOMER_PARTY_PLACEHOLDER)) {
+            return;
+        }
+        creditNoteEnvelope.ublCreditNote = creditNoteEnvelope.ublCreditNote.replace(CUSTOMER_PARTY_PLACEHOLDER, xmlReceivingParty);
+    }
+    mergeXmlPaymentMeans(creditNoteEnvelope, context) {
+        const xmlPaymentMeans = context.paymentMeans?.xmlPaymentMeans;
+        const xml = creditNoteEnvelope.ublCreditNote;
+        if (!xmlPaymentMeans || !xml) {
+            return;
+        }
+        if (xml.includes(CUSTOMER_PARTY_CLOSING_TAG)) {
+            creditNoteEnvelope.ublCreditNote = xml.replace(CUSTOMER_PARTY_CLOSING_TAG, CUSTOMER_PARTY_CLOSING_TAG + xmlPaymentMeans);
+            return;
+        }
+        if (xml.includes(CUSTOMER_PARTY_PLACEHOLDER)) {
+            creditNoteEnvelope.ublCreditNote = xml.replace(CUSTOMER_PARTY_PLACEHOLDER, CUSTOMER_PARTY_PLACEHOLDER + xmlPaymentMeans);
+        }
+    }
+    mergeReceivingParty(creditNoteEnvelope, context) {
+        const receivingParty = context.receivingParty?.receivingParty;
+        if (!receivingParty || !creditNoteEnvelope.cheqiCreditNote) {
+            return;
+        }
+        creditNoteEnvelope.cheqiCreditNote = {
+            ...creditNoteEnvelope.cheqiCreditNote,
+            receivingParty
+        };
+    }
+}
+//# sourceMappingURL=credit-note.js.map

package/dist/services/credit-note.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credit-note.js","sourceRoot":"","sources":["../../src/services/credit-note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAgBhD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAKvD,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAEpE,SAAS,aAAa,CAAC,aAAiC,EAAE;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAC;IACtC,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,aAA0C;IAC5D,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAK,aAA6C,CAAC,aAAa,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,iBAAiB,CAAC,aAA0C;IACnE,OAAO,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,iBAAiB,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,OAAO,iBAAiB;IAET;IAIA;IACA;IACA;IAPnB,YACmB,SAGhB,EACgB,iBAAoC,EACpC,eAAgC,EAChC,oBAA8C,IAAI;QANlD,cAAS,GAAT,SAAS,CAGzB;QACgB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAiC;IAClE,CAAC;IAEJ,KAAK,CAAC,yBAAyB,CAC7B,qBAA4C,EAC5C,yBAAoD,EACpD,cAA6B,IAAI;QAEjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE;gBAC/D,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CAAC,6CAA6C,EAAE;gBACrE,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,cAAc,CAAC;QAC/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,aAAa,CAAC,6EAA6E,EAAE;gBACrG,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;YACnG,MAAM,cAAc,GAAG,qBAAqB,CAAC,cAAc,CAAC;YAE5D,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClD,OAAO,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;YAC7C,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC5D;gBACE,yBAAyB;gBACzB,OAAO,EAAE,aAAa,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACxD,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,IAAI,EAAE;gBACtD,SAAS,EAAE,aAAa,CAAC,SAAS,IAAK,UAAkB;gBACzD,YAAY,EAAE,IAAI;aACnB,EACD,WAAW,CACZ,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/B,OAAO,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;YAC7C,CAAC;YAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,yBAAyB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAC7F,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK;gBAC5C,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBACvC,CAAC,CAAC,CAAC,gBAAgB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,YAAY,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;YAChD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,wBAAwB,CACzD,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,WAAW,CACZ,CAAC;YAEF,OAAO,gBAAgB,CAAC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,EAAE;gBACxG,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0BAA0B,CACxB,OAA4C,EAC5C,cAA6B,IAAI;QAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,6CAA6C,EAAE;gBACrE,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IAED,yBAAyB,CAAC,kBAA0B,EAAE,SAA2B;QAC/E,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CAAC,8CAA8C,EAAE;gBACtE,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,GAAG,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,SAAS,CAAC;SAChE,CAAC;IAC3B,CAAC;IAED,wBAAwB,CACtB,oBAA4B,EAC5B,oBAA2C,EAC3C,YAAoB,EACpB,aAA0C,EAC1C,cAA6B,IAAI;QAEjC,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,gDAAgD,EAAE;gBACxE,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE;gBAC/D,SAAS,EAAE,UAAU,CAAC,gBAAgB;gBACtC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YACzD,MAAM,IAAI,aAAa,CAAC,kEAAkE,EAAE;gBAC1F,SAAS,EAAE,UAAU,CAAC,kBAAkB;gBACxC,cAAc,EAAE,GAAG;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAC5C,aAAa,CAAC,OAAO,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,wBAAwB,CACtB,mBAAyD,EACzD,gBAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE;gBAC9D,SAAS,EAAE,UAAU,CAAC,gBAAgB;aACvC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACzF,CAAC;IAED,0BAA0B,CACxB,mBAAwC,EACxC,gBAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE;gBAC9D,SAAS,EAAE,UAAU,CAAC,gBAAgB;aACvC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;IAEO,yBAAyB,CAC/B,aAA0C,EAC1C,gBAA4C;QAE5C,MAAM,oBAAoB,GAA0B,EAAE,CAAC;QAEvD,KAAK,MAAM,SAAS,IAAI,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,MAAM,eAAe,GAAG,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC;YACxD,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAE7C,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAc,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBACvE,QAAQ,CAAC,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACpD,CAAC;YACD,IAAI,eAAe,CAAC,QAAQ,CAAC,iBAAwB,CAAC,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;gBACzF,QAAQ,CAAC,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC;YAC1D,CAAC;YAED,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAChG,CAAC;QAED,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAEO,sBAAsB,CAAC,SAAuC;QACpE,MAAM,OAAO,GAAG,SAAS,CAAC,yBAAyB,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,kBAAkB,GAAuB;YAC7C,eAAe,EAAE,SAAS,CAAC,kBAAkB,CAAC,eAAe;YAC7D,aAAa,EAAE,SAAS,CAAC,kBAAkB,CAAC,aAAa;SAC1D,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAEtD,OAAO;YACL,GAAG,SAAS;YACZ,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,kBAAsC,EAAE,OAAkC;QAC9F,MAAM,iBAAiB,GAAG,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC;QACpE,IAAI,CAAC,iBAAiB,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAClG,OAAO;QACT,CAAC;QAED,kBAAkB,CAAC,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAC,OAAO,CACzE,0BAA0B,EAC1B,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,kBAAsC,EAAE,OAAkC;QACrG,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;QAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,aAAa,CAAC;QAC7C,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC7C,kBAAkB,CAAC,aAAa,GAAG,GAAG,CAAC,OAAO,CAC5C,0BAA0B,EAC1B,0BAA0B,GAAG,eAAe,CAC7C,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAC7C,kBAAkB,CAAC,aAAa,GAAG,GAAG,CAAC,OAAO,CAC5C,0BAA0B,EAC1B,0BAA0B,GAAG,eAAe,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,kBAAsC,EAAE,OAAkC;QACpG,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC;QAC9D,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,kBAAkB,CAAC,eAAe,GAAG;YACnC,GAAG,kBAAkB,CAAC,eAAe;YACrC,cAAc;SACf,CAAC;IACJ,CAAC;CACF"}

package/dist/services/decryption.d.ts

@@ -0,0 +1,33 @@
+import type { DecryptedDeliveredCreditNote, EncryptedCreditNote, EncryptedCreditNoteInitiationRequest, EncryptedReceipt } from "../types.js";
+/**
+ * Decrypts encrypted receipts and credit-note initiation requests using
+ * the seller's RSA private key.
+ */
+export declare class DecryptionService {
+    /**
+     * Decrypt an encrypted receipt payload.
+     * @param encryptedReceipt  The encrypted receipt from the Cheqi backend.
+     * @param privateKeyBase64  Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted receipt content and optional customer details.
+     */
+    decryptReceipt(encryptedReceipt: EncryptedReceipt, privateKeyBase64: string): {
+        receiptContent: string;
+        customerDetails: string | null;
+    };
+    /**
+     * Decrypt an encrypted credit-note initiation request.
+     * @param encryptedCreditNote  The encrypted credit-note from a webhook.
+     * @param privateKeyBase64     Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted credit-note content.
+     */
+    decryptCreditNote(encryptedCreditNote: EncryptedCreditNoteInitiationRequest, privateKeyBase64: string): {
+        content: string;
+    };
+    /**
+     * Decrypt an encrypted delivered credit-note payload and optional credit-note context.
+     * @param encryptedCreditNote  The encrypted delivered credit-note payload from the backend.
+     * @param privateKeyBase64     Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted credit-note envelope and optional context envelope.
+     */
+    decryptDeliveredCreditNote(encryptedCreditNote: EncryptedCreditNote, privateKeyBase64: string): DecryptedDeliveredCreditNote;
+}

package/dist/services/decryption.js

@@ -0,0 +1,145 @@
+import { constants, createDecipheriv, createPrivateKey, privateDecrypt } from "node:crypto";
+import { AES_KEY_LENGTH, GCM_IV_LENGTH, GCM_TAG_LENGTH } from "../crypto.js";
+import { DecryptionError } from "../errors.js";
+import { CreditNoteContextEnvelopeFromJSON } from "../models/generated/CreditNoteContextEnvelope.js";
+import { parseBase64Der } from "../utils.js";
+function rsaDecrypt(encryptedKeyBase64, privateKeyBase64) {
+    if (!encryptedKeyBase64) {
+        throw new DecryptionError("Encrypted key cannot be empty");
+    }
+    if (!privateKeyBase64) {
+        throw new DecryptionError("Private key is required for decryption");
+    }
+    const privateKey = createPrivateKey({
+        key: parseBase64Der(privateKeyBase64),
+        format: "der",
+        type: "pkcs8"
+    });
+    const decryptedKey = privateDecrypt({
+        key: privateKey,
+        oaepHash: "sha256",
+        padding: constants.RSA_PKCS1_OAEP_PADDING
+    }, Buffer.from(encryptedKeyBase64, "base64"));
+    if (decryptedKey.length !== AES_KEY_LENGTH) {
+        throw new DecryptionError(`Decrypted AES key has invalid length: expected ${AES_KEY_LENGTH} bytes, got ${decryptedKey.length}`);
+    }
+    return decryptedKey;
+}
+function aesDecrypt(encryptedDataBase64, aesKey) {
+    if (!encryptedDataBase64) {
+        throw new DecryptionError("Encrypted data cannot be empty");
+    }
+    const combined = Buffer.from(encryptedDataBase64, "base64");
+    const minLength = GCM_IV_LENGTH + GCM_TAG_LENGTH;
+    if (combined.length < minLength) {
+        throw new DecryptionError(`Encrypted data too short: expected at least ${minLength} bytes, got ${combined.length}`);
+    }
+    const iv = combined.subarray(0, GCM_IV_LENGTH);
+    const ciphertext = combined.subarray(GCM_IV_LENGTH, combined.length - GCM_TAG_LENGTH);
+    const tag = combined.subarray(combined.length - GCM_TAG_LENGTH);
+    const decipher = createDecipheriv("aes-256-gcm", aesKey, iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
+}
+/**
+ * Decrypts encrypted receipts and credit-note initiation requests using
+ * the seller's RSA private key.
+ */
+export class DecryptionService {
+    /**
+     * Decrypt an encrypted receipt payload.
+     * @param encryptedReceipt  The encrypted receipt from the Cheqi backend.
+     * @param privateKeyBase64  Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted receipt content and optional customer details.
+     */
+    decryptReceipt(encryptedReceipt, privateKeyBase64) {
+        if (!encryptedReceipt) {
+            throw new DecryptionError("Encrypted receipt cannot be null");
+        }
+        try {
+            const encryptedKey = encryptedReceipt.encryptedSymmetricKey ?? "";
+            const encryptedPayload = encryptedReceipt.encryptedReceipt ?? "";
+            const receiptKey = rsaDecrypt(encryptedKey, privateKeyBase64);
+            const receiptContent = aesDecrypt(encryptedPayload, receiptKey);
+            let customerDetails = null;
+            if (encryptedReceipt.encryptedCustomerDetails && encryptedReceipt.encryptedCustomerAesKey) {
+                const customerKey = rsaDecrypt(encryptedReceipt.encryptedCustomerAesKey, privateKeyBase64);
+                customerDetails = aesDecrypt(encryptedReceipt.encryptedCustomerDetails, customerKey);
+            }
+            return { receiptContent, customerDetails };
+        }
+        catch (error) {
+            if (error instanceof DecryptionError) {
+                throw error;
+            }
+            throw new DecryptionError(`Failed to decrypt receipt: ${String(error.message)}`, {
+                cause: error
+            });
+        }
+    }
+    /**
+     * Decrypt an encrypted credit-note initiation request.
+     * @param encryptedCreditNote  The encrypted credit-note from a webhook.
+     * @param privateKeyBase64     Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted credit-note content.
+     */
+    decryptCreditNote(encryptedCreditNote, privateKeyBase64) {
+        if (!encryptedCreditNote) {
+            throw new DecryptionError("Encrypted credit note cannot be null");
+        }
+        try {
+            const encryptedKey = encryptedCreditNote.encryptedSymmetricKey ?? "";
+            const encryptedPayload = encryptedCreditNote.encryptedCreditNoteInitiationRequest ?? "";
+            const aesKey = rsaDecrypt(encryptedKey, privateKeyBase64);
+            return {
+                content: aesDecrypt(encryptedPayload, aesKey)
+            };
+        }
+        catch (error) {
+            if (error instanceof DecryptionError) {
+                throw error;
+            }
+            throw new DecryptionError(`Failed to decrypt credit note: ${String(error.message)}`, {
+                cause: error
+            });
+        }
+    }
+    /**
+     * Decrypt an encrypted delivered credit-note payload and optional credit-note context.
+     * @param encryptedCreditNote  The encrypted delivered credit-note payload from the backend.
+     * @param privateKeyBase64     Base64-encoded PKCS#8 DER private key.
+     * @returns The decrypted credit-note envelope and optional context envelope.
+     */
+    decryptDeliveredCreditNote(encryptedCreditNote, privateKeyBase64) {
+        if (!encryptedCreditNote) {
+            throw new DecryptionError("Encrypted credit note cannot be null");
+        }
+        try {
+            const payloadKey = rsaDecrypt(encryptedCreditNote.encryptedSymmetricKey ?? "", privateKeyBase64);
+            const rawJson = aesDecrypt(encryptedCreditNote.encryptedCreditNote ?? "", payloadKey);
+            const creditNoteEnvelope = JSON.parse(rawJson);
+            let creditNoteContextEnvelope = null;
+            let rawCreditNoteContextJson = null;
+            if (encryptedCreditNote.encryptedCustomerDetails && encryptedCreditNote.encryptedCustomerAesKey) {
+                const contextKey = rsaDecrypt(encryptedCreditNote.encryptedCustomerAesKey, privateKeyBase64);
+                rawCreditNoteContextJson = aesDecrypt(encryptedCreditNote.encryptedCustomerDetails, contextKey);
+                creditNoteContextEnvelope = CreditNoteContextEnvelopeFromJSON(JSON.parse(rawCreditNoteContextJson));
+            }
+            return {
+                creditNoteEnvelope,
+                creditNoteContextEnvelope,
+                rawJson,
+                rawCreditNoteContextJson
+            };
+        }
+        catch (error) {
+            if (error instanceof DecryptionError) {
+                throw error;
+            }
+            throw new DecryptionError(`Failed to decrypt delivered credit note: ${String(error.message)}`, {
+                cause: error
+            });
+        }
+    }
+}
+//# sourceMappingURL=decryption.js.map

package/dist/services/decryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryption.js","sourceRoot":"","sources":["../../src/services/decryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AAQrG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,SAAS,UAAU,CAAC,kBAA0B,EAAE,gBAAwB;IACtE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,GAAG,EAAE,cAAc,CAAC,gBAAgB,CAAC;QACrC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,cAAc,CACjC;QACE,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,SAAS,CAAC,sBAAsB;KAC1C,EACD,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAC1C,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CAAC,kDAAkD,cAAc,eAAe,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAClI,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,mBAA2B,EAAE,MAAc;IAC7D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,aAAa,GAAG,cAAc,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,+CAA+C,SAAS,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;;OAKG;IACH,cAAc,CAAC,gBAAkC,EAAE,gBAAwB;QAIzE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,gBAAgB,CAAC,qBAAqB,IAAI,EAAE,CAAC;YAClE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;YAEhE,IAAI,eAAe,GAAkB,IAAI,CAAC;YAC1C,IAAI,gBAAgB,CAAC,wBAAwB,IAAI,gBAAgB,CAAC,uBAAuB,EAAE,CAAC;gBAC1F,MAAM,WAAW,GAAG,UAAU,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;gBAC3F,eAAe,GAAG,UAAU,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;YACvF,CAAC;YAED,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC1F,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CACf,mBAAyD,EACzD,gBAAwB;QAExB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,qBAAqB,IAAI,EAAE,CAAC;YACrE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,oCAAoC,IAAI,EAAE,CAAC;YAExF,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC;aAC9C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,kCAAkC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC9F,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,0BAA0B,CACxB,mBAAwC,EACxC,gBAAwB;QAExB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,UAAU,CAAC,mBAAmB,CAAC,qBAAqB,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACjG,MAAM,OAAO,GAAG,UAAU,CAAC,mBAAmB,CAAC,mBAAmB,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;YACtF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;YAErE,IAAI,yBAAyB,GAAG,IAAI,CAAC;YACrC,IAAI,wBAAwB,GAAkB,IAAI,CAAC;YAEnD,IAAI,mBAAmB,CAAC,wBAAwB,IAAI,mBAAmB,CAAC,uBAAuB,EAAE,CAAC;gBAChG,MAAM,UAAU,GAAG,UAAU,CAAC,mBAAmB,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;gBAC7F,wBAAwB,GAAG,UAAU,CAAC,mBAAmB,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;gBAChG,yBAAyB,GAAG,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACtG,CAAC;YAED,OAAO;gBACL,kBAAkB;gBAClB,yBAAyB;gBACzB,OAAO;gBACP,wBAAwB;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,4CAA4C,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,EAAE,EAAE;gBACxG,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}