@deuriib/dgii-ecf 0.4.0 → 0.5.0

package/dist/index.js

@@ -370,9 +370,13 @@ var HttpClient = class {
   policies;
   fetchImpl;
   baseUrl;
+  beforeRequest;
+  onUnauthorized;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.token = options.token;
+    this.beforeRequest = options.beforeRequest;
+    this.onUnauthorized = options.onUnauthorized;
     this.policies = options.policies ?? createResiliencePolicies({
       ...options.resilience,
       ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {}
@@ -382,6 +386,9 @@ var HttpClient = class {
   setToken(token) {
     this.token = token;
   }
+  getToken() {
+    return this.token;
+  }
   clearToken() {
     this.token = void 0;
   }
@@ -441,6 +448,19 @@ var HttpClient = class {
     return err(error);
   }
   async request(options) {
+    if (!options.skipAuthHooks) {
+      await this.beforeRequest?.();
+    }
+    const first = await this.execute(options);
+    if (!options.skipAuthHooks && first.isErr() && first.error.status === 401 && this.onUnauthorized !== void 0) {
+      const replayed = await this.onUnauthorized();
+      if (replayed) {
+        return this.execute(options);
+      }
+    }
+    return first;
+  }
+  async execute(options) {
     const url = this.buildUrl(options.path, options.absoluteUrl, options.query);
     const method = options.method ?? "GET";
     const headers = this.authHeaders(options.headers);
@@ -469,7 +489,8 @@ var HttpClient = class {
       path,
       query,
       absoluteUrl: opts?.absoluteUrl,
-      resource: opts?.resource
+      resource: opts?.resource,
+      skipAuthHooks: opts?.skipAuthHooks
     });
   }
   /**
@@ -485,7 +506,8 @@ var HttpClient = class {
       body: form,
       headers: { Accept: "application/json" },
       absoluteUrl: opts?.absoluteUrl,
-      resource: opts?.resource
+      resource: opts?.resource,
+      skipAuthHooks: opts?.skipAuthHooks
     });
   }
 };
@@ -611,27 +633,11 @@ var P12Reader = class {
 // src/signing.ts
 import crypto from "crypto";
 import { DOMParser } from "@xmldom/xmldom";
-import { C14nCanonicalization, SignedXml } from "xml-crypto";
+import { SignedXml } from "xml-crypto";
 var C14N_INCLUSIVE = "http://www.w3.org/TR/2001/REC-xml-c14n-20010315";
 var RSA_SHA256 = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256";
 var SHA256 = "http://www.w3.org/2001/04/xmlenc#sha256";
 var ENVELOPED = "http://www.w3.org/2000/09/xmldsig#enveloped-signature";
-var CUSTOM_DIGEST_URI = "http://dgii.gov.do/digest/sha256-c14n";
-var DgiiDigest = class {
-  getHash(xml) {
-    const doc = new DOMParser().parseFromString(
-      xml
-    );
-    const canonical = new C14nCanonicalization().process(
-      doc,
-      {}
-    );
-    return crypto.createHash("sha256").update(canonical, "utf8").digest("base64");
-  }
-  getAlgorithmName() {
-    return SHA256;
-  }
-};
 var parseStrict = (xml) => {
   const errors = [];
   const doc = new DOMParser({
@@ -700,12 +706,10 @@ var Signature = class {
         signatureAlgorithm: RSA_SHA256,
         canonicalizationAlgorithm: C14N_INCLUSIVE
       });
-      const hashAlgorithms = sig.HashAlgorithms;
-      hashAlgorithms[CUSTOM_DIGEST_URI] = DgiiDigest;
       sig.addReference({
         xpath: `//*[local-name(.)='${elementName}']`,
         transforms: [ENVELOPED],
-        digestAlgorithm: CUSTOM_DIGEST_URI,
+        digestAlgorithm: SHA256,
         isEmptyUri: true
       });
       cleanNodes(doc);
@@ -851,6 +855,98 @@ var extractElementText = (xml, tag) => {
   const text = match?.[1]?.trim();
   return text === void 0 || text === "" ? void 0 : text;
 };
+var ROOT_PATTERN = /<\s*(?:[A-Za-z_][\w.-]*:)?([A-Za-z_][\w.-]*)[\s/>]/;
+var extractRootElementName = (xml) => {
+  const stripped = xml.replace(/<\?[\s\S]*?\?>/g, "").replace(/<!--[\s\S]*?-->/g, "").trimStart();
+  return ROOT_PATTERN.exec(stripped)?.[1];
+};
+
+// src/reception.ts
+var ECF_TYPE_CODES = [
+  "31",
+  "32",
+  "33",
+  "34",
+  "41",
+  "43",
+  "44",
+  "45",
+  "46",
+  "47"
+];
+var CONSUMPTION_SUMMARY_THRESHOLD = "250000";
+var CONSUMPTION_TYPE = "32";
+var GENERAL = {
+  kind: "general",
+  endpoint: "recepcion/api/FacturasElectronicas" /* SendInvoice */
+};
+var SUMMARY = {
+  kind: "summary",
+  endpoint: "recepcionfc/api/recepcion/ecf" /* SendSummary */
+};
+var isEcfTypeCode = (value) => ECF_TYPE_CODES.includes(value);
+var DECIMAL_PATTERN = /^\d+(?:\.\d+)?$/;
+var compareDecimal = (a, b) => {
+  const [aInt = "", aFrac = ""] = a.split(".");
+  const [bInt = "", bFrac = ""] = b.split(".");
+  const aWhole = aInt.replace(/^0+(?=\d)/, "");
+  const bWhole = bInt.replace(/^0+(?=\d)/, "");
+  if (aWhole.length !== bWhole.length) {
+    return aWhole.length - bWhole.length;
+  }
+  if (aWhole !== bWhole) {
+    return aWhole < bWhole ? -1 : 1;
+  }
+  const width = Math.max(aFrac.length, bFrac.length);
+  const aPadded = aFrac.padEnd(width, "0");
+  const bPadded = bFrac.padEnd(width, "0");
+  if (aPadded === bPadded) {
+    return 0;
+  }
+  return aPadded < bPadded ? -1 : 1;
+};
+var validationError = (message) => new DgiiError(message, { code: "VALIDATION" });
+var resolveReceptionRoute = (signedXml) => {
+  const root = extractRootElementName(signedXml);
+  if (root === "RFCE") {
+    return ok(SUMMARY);
+  }
+  if (root !== "ECF") {
+    return err(
+      validationError(
+        `Unsupported document root "${root ?? "unknown"}"; expected "ECF" or "RFCE"`
+      )
+    );
+  }
+  const tipo = extractElementText(signedXml, "TipoeCF");
+  if (tipo === void 0) {
+    return err(validationError("TipoeCF is missing from the document"));
+  }
+  if (!isEcfTypeCode(tipo)) {
+    return err(validationError(`Unknown TipoeCF "${tipo}"`));
+  }
+  if (tipo !== CONSUMPTION_TYPE) {
+    return ok(GENERAL);
+  }
+  const total = extractElementText(signedXml, "MontoTotal");
+  if (total === void 0) {
+    return err(
+      validationError(
+        "MontoTotal is required to route an E32 consumption invoice"
+      )
+    );
+  }
+  if (!DECIMAL_PATTERN.test(total)) {
+    return err(
+      validationError(`MontoTotal "${total}" is not a decimal amount`)
+    );
+  }
+  return compareDecimal(total, CONSUMPTION_SUMMARY_THRESHOLD) < 0 ? err(
+    validationError(
+      "An E32 below RD$250,000 must be sent as an RFCE summary; convert it with convertECF32ToRFCE first"
+    )
+  ) : ok(GENERAL);
+};
 
 // src/utils.ts
 var getCodeSixDigitfromSignature = (signedXml) => {
@@ -1014,22 +1110,39 @@ import { createHash } from "crypto";
 var PENDING_SUBMISSION = { pending: true };
 var isPendingSubmission = (value) => typeof value === "object" && value !== null && value.pending === true;
 var sha256Hex = (value) => createHash("sha256").update(value, "utf8").digest("hex");
+var parseExpiry = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsed = Date.parse(value);
+  return Number.isNaN(parsed) ? void 0 : parsed;
+};
 var ECF = class {
   environment;
   http;
   idempotency;
   credentials;
   inFlight = /* @__PURE__ */ new Map();
+  tokenRefreshSkewMs;
+  now;
+  tokenExpiresAt;
+  refreshPromise;
   constructor(credentials, environment = "TesteCF" /* Dev */, options = {}) {
     this.credentials = credentials;
     this.environment = environment;
+    this.tokenRefreshSkewMs = options.tokenRefreshSkewMs ?? 5 * 60 * 1e3;
+    this.now = options.now ?? Date.now;
     this.idempotency = options.idempotencyStore ?? new InMemoryIdempotencyStore();
     this.http = new HttpClient({
       baseUrl: BaseUrl.ECF,
       ...options.token !== void 0 ? { token: options.token } : {},
       ...options.resilience !== void 0 ? { resilience: options.resilience } : {},
       ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {},
-      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {}
+      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {},
+      beforeRequest: async () => {
+        await this.ensureToken();
+      },
+      onUnauthorized: () => this.reauthenticate()
     });
   }
   buildIdempotencyKey(signedXml) {
@@ -1081,6 +1194,40 @@ var ECF = class {
       this.inFlight.delete(key);
     }
   }
+  /**
+   * Refresh the token when it is missing or about to expire.
+   *
+   * A pre-supplied `token` has no known expiry, so it is never refreshed
+   * proactively — only a 401 triggers a re-authentication for it.
+   */
+  async ensureToken() {
+    if (this.tokenExpiresAt === void 0) {
+      return ok(void 0);
+    }
+    if (this.now() < this.tokenExpiresAt - this.tokenRefreshSkewMs) {
+      return ok(void 0);
+    }
+    const refreshed = await this.refreshToken();
+    return refreshed.isOk() ? ok(void 0) : err(refreshed.error);
+  }
+  /** Authenticate, coalescing concurrent refreshes into a single round-trip. */
+  refreshToken() {
+    if (this.refreshPromise !== void 0) {
+      return this.refreshPromise;
+    }
+    const promise = this.authenticate().finally(() => {
+      this.refreshPromise = void 0;
+    });
+    this.refreshPromise = promise;
+    return promise;
+  }
+  /** Drop the rejected token and authenticate once. Returns `true` on success. */
+  async reauthenticate() {
+    this.http.clearToken();
+    this.tokenExpiresAt = void 0;
+    const refreshed = await this.refreshToken();
+    return refreshed.isOk();
+  }
   /** Authenticate against DGII (or a buyer host) and store the bearer token. */
   async authenticate(buyerHost) {
     const seed = await this.getSeed(buyerHost);
@@ -1107,6 +1254,7 @@ var ECF = class {
       return err(token.error);
     }
     this.http.setToken(token.value.token);
+    this.tokenExpiresAt = parseExpiry(token.value.expira);
     return ok(token.value);
   }
   getSeed(buyerHost) {
@@ -1117,20 +1265,23 @@ var ECF = class {
       );
       return this.http.get(url2, void 0, {
         absoluteUrl: true,
-        resource: "fe/autenticacion/api/semilla" /* Seed */
+        resource: "fe/autenticacion/api/semilla" /* Seed */,
+        skipAuthHooks: true
       });
     }
     const url = buildUrl(this.environment, "Autenticacion/api/Autenticacion/Semilla" /* Seed */);
     return this.http.get(url, void 0, {
       absoluteUrl: true,
-      resource: "Autenticacion/api/Autenticacion/Semilla" /* Seed */
+      resource: "Autenticacion/api/Autenticacion/Semilla" /* Seed */,
+      skipAuthHooks: true
     });
   }
   getAuthToken(signedSeed, buyerHost) {
     const url = buyerHost ? buildSenderReceiverUrl(buyerHost, "fe/autenticacion/api/validacioncertificado" /* ValidateSeed */) : buildUrl(this.environment, "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */);
     return this.http.postMultipart(url, "signed.xml", signedSeed, {
       absoluteUrl: true,
-      resource: "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */
+      resource: "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */,
+      skipAuthHooks: true
     });
   }
   /**
@@ -1162,6 +1313,32 @@ var ECF = class {
       )
     );
   }
+  /**
+   * Submit a signed document to the endpoint its own content belongs to.
+   *
+   * Reads the root element, `TipoeCF` and `MontoTotal` from the signed XML and
+   * dispatches to {@link sendSummary} for an RFCE or to
+   * {@link sendElectronicDocument} for an ECF. An E32 below RD$250,000 is
+   * rejected because DGII only accepts the summary form for those.
+   */
+  async sendDocument(signedXml, fileName, buyerHost) {
+    const route = resolveReceptionRoute(signedXml);
+    if (route.isErr()) {
+      return err(route.error);
+    }
+    if (route.value.kind === "summary") {
+      if (buyerHost !== void 0) {
+        return err(
+          new DgiiError(
+            "An RFCE summary cannot be delivered directly to a buyer host",
+            { code: "VALIDATION" }
+          )
+        );
+      }
+      return this.sendSummary(signedXml, fileName);
+    }
+    return this.sendElectronicDocument(signedXml, fileName, buyerHost);
+  }
   statusTrackId(trackId) {
     const url = buildUrl(this.environment, "consultaresultado/api/Consultas/Estado" /* TrackResultStatus */);
     return this.http.get(
@@ -1255,8 +1432,10 @@ var ECF = class {
 };
 export {
   BaseUrl,
+  CONSUMPTION_SUMMARY_THRESHOLD,
   DgiiError,
   ECF,
+  ECF_TYPE_CODES,
   Endpoint,
   Environment,
   Err,
@@ -1271,6 +1450,7 @@ export {
   Transformer,
   buildSenderReceiverUrl,
   buildUrl,
+  compareDecimal,
   convertECF32ToRFCE,
   createResiliencePolicies,
   defaultResilienceOptions,
@@ -1286,10 +1466,12 @@ export {
   getCurrentFormattedDate,
   getCurrentFormattedDateTime,
   getXmlFromBodyResponse,
+  isEcfTypeCode,
   isRetryableError,
   isRetryableStatus,
   ok,
   okAsync,
+  resolveReceptionRoute,
   roundHalfUpToCents,
   toDgiiError,
   validateXMLCertificate