@deuriib/dgii-ecf 0.4.1 → 0.5.0

package/dist/index.d.cts

@@ -259,6 +259,10 @@ interface HttpClientOptions {
     policies?: ResiliencePolicies;
     timeoutMs?: number;
     fetchImpl?: typeof fetch;
+    /** Runs before every authenticated request; may refresh credentials. */
+    beforeRequest?: () => Promise<void>;
+    /** Runs on a 401; return `true` to replay the request once. */
+    onUnauthorized?: () => Promise<boolean>;
 }
 interface RequestOptions {
     method?: 'GET' | 'POST';
@@ -269,6 +273,8 @@ interface RequestOptions {
     body?: BodyInit;
     query?: Record<string, string | number | undefined>;
     resource?: string;
+    /** Skip the auth hooks (used by the authentication round-trip itself). */
+    skipAuthHooks?: boolean;
 }
 /** Thin HTTP client over the native `fetch`, wrapped in resilience policies. */
 declare class HttpClient {
@@ -276,17 +282,22 @@ declare class HttpClient {
     private readonly policies;
     private readonly fetchImpl;
     private readonly baseUrl;
+    private readonly beforeRequest;
+    private readonly onUnauthorized;
     constructor(options: HttpClientOptions);
     setToken(token: string): void;
+    getToken(): string | undefined;
     clearToken(): void;
     private buildUrl;
     private authHeaders;
     private readBody;
     private parseResponse;
     request<T>(options: RequestOptions): Promise<Result<T, DgiiError>>;
+    private execute;
     get<T>(path: string, query?: RequestOptions['query'], opts?: {
         absoluteUrl?: boolean;
         resource?: string;
+        skipAuthHooks?: boolean;
     }): Promise<Result<T, DgiiError>>;
     /**
      * POST a signed XML as a multipart `xml` file part. The runtime computes
@@ -295,6 +306,7 @@ declare class HttpClient {
     postMultipart<T>(path: string, fileName: string, xml: string, opts?: {
         absoluteUrl?: boolean;
         resource?: string;
+        skipAuthHooks?: boolean;
     }): Promise<Result<T, DgiiError>>;
 }
 
@@ -364,6 +376,45 @@ declare class Transformer {
     xml2json<T>(xml: string): Result<T, DgiiError>;
 }
 
+/** Every e-CF type code defined by DGII. */
+declare const ECF_TYPE_CODES: readonly ["31", "32", "33", "34", "41", "43", "44", "45", "46", "47"];
+type EcfTypeCode = (typeof ECF_TYPE_CODES)[number];
+/**
+ * Consumption invoices (E32) at or above this amount go to the general
+ * reception endpoint; below it they must be sent as an RFCE summary.
+ */
+declare const CONSUMPTION_SUMMARY_THRESHOLD = "250000";
+interface GeneralReceptionRoute {
+    readonly kind: 'general';
+    readonly endpoint: Endpoint.SendInvoice;
+}
+interface SummaryReceptionRoute {
+    readonly kind: 'summary';
+    readonly endpoint: Endpoint.SendSummary;
+}
+type ReceptionRoute = GeneralReceptionRoute | SummaryReceptionRoute;
+declare const isEcfTypeCode: (value: string) => value is EcfTypeCode;
+/**
+ * Compare two non-negative decimal strings without going through `number`, so
+ * a money amount never picks up binary floating-point error.
+ *
+ * Returns a negative number when `a < b`, zero when equal, positive otherwise.
+ */
+declare const compareDecimal: (a: string, b: string) => number;
+/**
+ * Decide which DGII reception endpoint a signed document belongs to.
+ *
+ * - `<RFCE>` → the consumption-summary reception (`recepcionfc`).
+ * - `<ECF>` with any type other than E32 → the general reception.
+ * - `<ECF>` type E32 at or above RD$250,000 → the general reception.
+ * - `<ECF>` type E32 below RD$250,000 → rejected: DGII only accepts the
+ *   summary form for those, so the caller must run `convertECF32ToRFCE` first.
+ *
+ * The decision reads `TipoeCF` and `MontoTotal` from the signed document, so it
+ * cannot drift from what is actually being transmitted.
+ */
+declare const resolveReceptionRoute: (signedXml: string) => Result<ReceptionRoute, DgiiError>;
+
 /** First 6 chars of the `<SignatureValue>` (DGII security code). */
 declare const getCodeSixDigitfromSignature: (signedXml: string) => Result<string, DgiiError>;
 /** QR URL for a factura de consumo (FC). */
@@ -394,6 +445,13 @@ interface EcfOptions {
     timeoutMs?: number;
     /** Injectable fetch (useful for tests). */
     fetchImpl?: typeof fetch;
+    /**
+     * Refresh the token when its remaining lifetime falls below this window.
+     * Defaults to 5 minutes.
+     */
+    tokenRefreshSkewMs?: number;
+    /** Injectable clock (epoch milliseconds); useful for tests. */
+    now?: () => number;
 }
 /**
  * DGII e-CF client. Every method returns a `Result` — no thrown domain errors.
@@ -404,6 +462,10 @@ declare class ECF {
     private readonly idempotency;
     private readonly credentials;
     private readonly inFlight;
+    private readonly tokenRefreshSkewMs;
+    private readonly now;
+    private tokenExpiresAt;
+    private refreshPromise;
     constructor(credentials: P12ReaderData, environment?: Environment, options?: EcfOptions);
     private buildIdempotencyKey;
     /**
@@ -415,6 +477,17 @@ declare class ECF {
      */
     private submitIdempotent;
     private singleFlight;
+    /**
+     * Refresh the token when it is missing or about to expire.
+     *
+     * A pre-supplied `token` has no known expiry, so it is never refreshed
+     * proactively — only a 401 triggers a re-authentication for it.
+     */
+    private ensureToken;
+    /** Authenticate, coalescing concurrent refreshes into a single round-trip. */
+    private refreshToken;
+    /** Drop the rejected token and authenticate once. Returns `true` on success. */
+    private reauthenticate;
     /** Authenticate against DGII (or a buyer host) and store the bearer token. */
     authenticate(buyerHost?: string): Promise<Result<AuthToken, DgiiError>>;
     private getSeed;
@@ -426,6 +499,15 @@ declare class ECF {
     sendElectronicDocument(signedXml: string, fileName: string, buyerHost?: string): Promise<Result<InvoiceResponse, DgiiError>>;
     /** Submit a signed summary invoice (RFCE). Idempotent like submissions. */
     sendSummary(signedXml: string, fileName: string): Promise<Result<InvoiceSummaryResponse, DgiiError>>;
+    /**
+     * Submit a signed document to the endpoint its own content belongs to.
+     *
+     * Reads the root element, `TipoeCF` and `MontoTotal` from the signed XML and
+     * dispatches to {@link sendSummary} for an RFCE or to
+     * {@link sendElectronicDocument} for an ECF. An E32 below RD$250,000 is
+     * rejected because DGII only accepts the summary form for those.
+     */
+    sendDocument(signedXml: string, fileName: string, buyerHost?: string): Promise<Result<InvoiceResponse | InvoiceSummaryResponse, DgiiError>>;
     statusTrackId(trackId: string): Promise<Result<TrackingStatusResponse, DgiiError>>;
     inquiryStatus(rncEmisor: string, ncfElectronico: string, rncComprador?: string, codigoSeguridad?: string): Promise<Result<InquiryStatusResponse, DgiiError>>;
     trackStatuses(rncEmisor: string, encf: string): Promise<Result<SummaryTrackingStatusResponse[], DgiiError>>;
@@ -445,4 +527,4 @@ declare class ECF {
     voidENCF(signedXml: string, fileName: string): Promise<Result<VoidNCFResponse, DgiiError>>;
 }
 
-export { type AuthToken, BaseUrl, type BaseUrlKey, type CertificateInfo, type CommercialApprovalResponse, type DgiiDocumentType, DgiiError, type DgiiErrorCode, type DgiiErrorContext, type DgiiErrorOptions, type DgiiResult, ECF, type EcfOptions, Endpoint, Environment, HttpClient, type HttpClientOptions, type IdempotencyStore, InMemoryIdempotencyStore, type InMemoryIdempotencyStoreOptions, type InquiryInvoiceSummary, type InquiryStatus, type InquiryStatusCode, type InquiryStatusResponse, type InvoiceResponse, type InvoiceSummaryResponse, type Mensaje, P12Reader, type P12ReaderData, type RequestOptions, type ResilienceOptions, type ResiliencePolicies, SenderReceiverEndpoint, type ServiceDirectoryResponse, Signature, type SummaryTrackingStatusResponse, type TrackStatusCode, TrackStatusEnum, type TrackingStatusResponse, Transformer, type VoidNCFResponse, type XmlCertificateValidation, buildSenderReceiverUrl, buildUrl, convertECF32ToRFCE, createResiliencePolicies, defaultResilienceOptions, extractDgiiErrorMessage, generateEcfQRCodeURL, generateFcQRCodeURL, getCodeSixDigitfromSignature, getCurrentFormattedDate, getCurrentFormattedDateTime, getXmlFromBodyResponse, isRetryableError, isRetryableStatus, roundHalfUpToCents, toDgiiError, validateXMLCertificate };
+export { type AuthToken, BaseUrl, type BaseUrlKey, CONSUMPTION_SUMMARY_THRESHOLD, type CertificateInfo, type CommercialApprovalResponse, type DgiiDocumentType, DgiiError, type DgiiErrorCode, type DgiiErrorContext, type DgiiErrorOptions, type DgiiResult, ECF, ECF_TYPE_CODES, type EcfOptions, type EcfTypeCode, Endpoint, Environment, type GeneralReceptionRoute, HttpClient, type HttpClientOptions, type IdempotencyStore, InMemoryIdempotencyStore, type InMemoryIdempotencyStoreOptions, type InquiryInvoiceSummary, type InquiryStatus, type InquiryStatusCode, type InquiryStatusResponse, type InvoiceResponse, type InvoiceSummaryResponse, type Mensaje, P12Reader, type P12ReaderData, type ReceptionRoute, type RequestOptions, type ResilienceOptions, type ResiliencePolicies, SenderReceiverEndpoint, type ServiceDirectoryResponse, Signature, type SummaryReceptionRoute, type SummaryTrackingStatusResponse, type TrackStatusCode, TrackStatusEnum, type TrackingStatusResponse, Transformer, type VoidNCFResponse, type XmlCertificateValidation, buildSenderReceiverUrl, buildUrl, compareDecimal, convertECF32ToRFCE, createResiliencePolicies, defaultResilienceOptions, extractDgiiErrorMessage, generateEcfQRCodeURL, generateFcQRCodeURL, getCodeSixDigitfromSignature, getCurrentFormattedDate, getCurrentFormattedDateTime, getXmlFromBodyResponse, isEcfTypeCode, isRetryableError, isRetryableStatus, resolveReceptionRoute, roundHalfUpToCents, toDgiiError, validateXMLCertificate };

package/dist/index.d.ts

@@ -259,6 +259,10 @@ interface HttpClientOptions {
     policies?: ResiliencePolicies;
     timeoutMs?: number;
     fetchImpl?: typeof fetch;
+    /** Runs before every authenticated request; may refresh credentials. */
+    beforeRequest?: () => Promise<void>;
+    /** Runs on a 401; return `true` to replay the request once. */
+    onUnauthorized?: () => Promise<boolean>;
 }
 interface RequestOptions {
     method?: 'GET' | 'POST';
@@ -269,6 +273,8 @@ interface RequestOptions {
     body?: BodyInit;
     query?: Record<string, string | number | undefined>;
     resource?: string;
+    /** Skip the auth hooks (used by the authentication round-trip itself). */
+    skipAuthHooks?: boolean;
 }
 /** Thin HTTP client over the native `fetch`, wrapped in resilience policies. */
 declare class HttpClient {
@@ -276,17 +282,22 @@ declare class HttpClient {
     private readonly policies;
     private readonly fetchImpl;
     private readonly baseUrl;
+    private readonly beforeRequest;
+    private readonly onUnauthorized;
     constructor(options: HttpClientOptions);
     setToken(token: string): void;
+    getToken(): string | undefined;
     clearToken(): void;
     private buildUrl;
     private authHeaders;
     private readBody;
     private parseResponse;
     request<T>(options: RequestOptions): Promise<Result<T, DgiiError>>;
+    private execute;
     get<T>(path: string, query?: RequestOptions['query'], opts?: {
         absoluteUrl?: boolean;
         resource?: string;
+        skipAuthHooks?: boolean;
     }): Promise<Result<T, DgiiError>>;
     /**
      * POST a signed XML as a multipart `xml` file part. The runtime computes
@@ -295,6 +306,7 @@ declare class HttpClient {
     postMultipart<T>(path: string, fileName: string, xml: string, opts?: {
         absoluteUrl?: boolean;
         resource?: string;
+        skipAuthHooks?: boolean;
     }): Promise<Result<T, DgiiError>>;
 }
 
@@ -364,6 +376,45 @@ declare class Transformer {
     xml2json<T>(xml: string): Result<T, DgiiError>;
 }
 
+/** Every e-CF type code defined by DGII. */
+declare const ECF_TYPE_CODES: readonly ["31", "32", "33", "34", "41", "43", "44", "45", "46", "47"];
+type EcfTypeCode = (typeof ECF_TYPE_CODES)[number];
+/**
+ * Consumption invoices (E32) at or above this amount go to the general
+ * reception endpoint; below it they must be sent as an RFCE summary.
+ */
+declare const CONSUMPTION_SUMMARY_THRESHOLD = "250000";
+interface GeneralReceptionRoute {
+    readonly kind: 'general';
+    readonly endpoint: Endpoint.SendInvoice;
+}
+interface SummaryReceptionRoute {
+    readonly kind: 'summary';
+    readonly endpoint: Endpoint.SendSummary;
+}
+type ReceptionRoute = GeneralReceptionRoute | SummaryReceptionRoute;
+declare const isEcfTypeCode: (value: string) => value is EcfTypeCode;
+/**
+ * Compare two non-negative decimal strings without going through `number`, so
+ * a money amount never picks up binary floating-point error.
+ *
+ * Returns a negative number when `a < b`, zero when equal, positive otherwise.
+ */
+declare const compareDecimal: (a: string, b: string) => number;
+/**
+ * Decide which DGII reception endpoint a signed document belongs to.
+ *
+ * - `<RFCE>` → the consumption-summary reception (`recepcionfc`).
+ * - `<ECF>` with any type other than E32 → the general reception.
+ * - `<ECF>` type E32 at or above RD$250,000 → the general reception.
+ * - `<ECF>` type E32 below RD$250,000 → rejected: DGII only accepts the
+ *   summary form for those, so the caller must run `convertECF32ToRFCE` first.
+ *
+ * The decision reads `TipoeCF` and `MontoTotal` from the signed document, so it
+ * cannot drift from what is actually being transmitted.
+ */
+declare const resolveReceptionRoute: (signedXml: string) => Result<ReceptionRoute, DgiiError>;
+
 /** First 6 chars of the `<SignatureValue>` (DGII security code). */
 declare const getCodeSixDigitfromSignature: (signedXml: string) => Result<string, DgiiError>;
 /** QR URL for a factura de consumo (FC). */
@@ -394,6 +445,13 @@ interface EcfOptions {
     timeoutMs?: number;
     /** Injectable fetch (useful for tests). */
     fetchImpl?: typeof fetch;
+    /**
+     * Refresh the token when its remaining lifetime falls below this window.
+     * Defaults to 5 minutes.
+     */
+    tokenRefreshSkewMs?: number;
+    /** Injectable clock (epoch milliseconds); useful for tests. */
+    now?: () => number;
 }
 /**
  * DGII e-CF client. Every method returns a `Result` — no thrown domain errors.
@@ -404,6 +462,10 @@ declare class ECF {
     private readonly idempotency;
     private readonly credentials;
     private readonly inFlight;
+    private readonly tokenRefreshSkewMs;
+    private readonly now;
+    private tokenExpiresAt;
+    private refreshPromise;
     constructor(credentials: P12ReaderData, environment?: Environment, options?: EcfOptions);
     private buildIdempotencyKey;
     /**
@@ -415,6 +477,17 @@ declare class ECF {
      */
     private submitIdempotent;
     private singleFlight;
+    /**
+     * Refresh the token when it is missing or about to expire.
+     *
+     * A pre-supplied `token` has no known expiry, so it is never refreshed
+     * proactively — only a 401 triggers a re-authentication for it.
+     */
+    private ensureToken;
+    /** Authenticate, coalescing concurrent refreshes into a single round-trip. */
+    private refreshToken;
+    /** Drop the rejected token and authenticate once. Returns `true` on success. */
+    private reauthenticate;
     /** Authenticate against DGII (or a buyer host) and store the bearer token. */
     authenticate(buyerHost?: string): Promise<Result<AuthToken, DgiiError>>;
     private getSeed;
@@ -426,6 +499,15 @@ declare class ECF {
     sendElectronicDocument(signedXml: string, fileName: string, buyerHost?: string): Promise<Result<InvoiceResponse, DgiiError>>;
     /** Submit a signed summary invoice (RFCE). Idempotent like submissions. */
     sendSummary(signedXml: string, fileName: string): Promise<Result<InvoiceSummaryResponse, DgiiError>>;
+    /**
+     * Submit a signed document to the endpoint its own content belongs to.
+     *
+     * Reads the root element, `TipoeCF` and `MontoTotal` from the signed XML and
+     * dispatches to {@link sendSummary} for an RFCE or to
+     * {@link sendElectronicDocument} for an ECF. An E32 below RD$250,000 is
+     * rejected because DGII only accepts the summary form for those.
+     */
+    sendDocument(signedXml: string, fileName: string, buyerHost?: string): Promise<Result<InvoiceResponse | InvoiceSummaryResponse, DgiiError>>;
     statusTrackId(trackId: string): Promise<Result<TrackingStatusResponse, DgiiError>>;
     inquiryStatus(rncEmisor: string, ncfElectronico: string, rncComprador?: string, codigoSeguridad?: string): Promise<Result<InquiryStatusResponse, DgiiError>>;
     trackStatuses(rncEmisor: string, encf: string): Promise<Result<SummaryTrackingStatusResponse[], DgiiError>>;
@@ -445,4 +527,4 @@ declare class ECF {
     voidENCF(signedXml: string, fileName: string): Promise<Result<VoidNCFResponse, DgiiError>>;
 }
 
-export { type AuthToken, BaseUrl, type BaseUrlKey, type CertificateInfo, type CommercialApprovalResponse, type DgiiDocumentType, DgiiError, type DgiiErrorCode, type DgiiErrorContext, type DgiiErrorOptions, type DgiiResult, ECF, type EcfOptions, Endpoint, Environment, HttpClient, type HttpClientOptions, type IdempotencyStore, InMemoryIdempotencyStore, type InMemoryIdempotencyStoreOptions, type InquiryInvoiceSummary, type InquiryStatus, type InquiryStatusCode, type InquiryStatusResponse, type InvoiceResponse, type InvoiceSummaryResponse, type Mensaje, P12Reader, type P12ReaderData, type RequestOptions, type ResilienceOptions, type ResiliencePolicies, SenderReceiverEndpoint, type ServiceDirectoryResponse, Signature, type SummaryTrackingStatusResponse, type TrackStatusCode, TrackStatusEnum, type TrackingStatusResponse, Transformer, type VoidNCFResponse, type XmlCertificateValidation, buildSenderReceiverUrl, buildUrl, convertECF32ToRFCE, createResiliencePolicies, defaultResilienceOptions, extractDgiiErrorMessage, generateEcfQRCodeURL, generateFcQRCodeURL, getCodeSixDigitfromSignature, getCurrentFormattedDate, getCurrentFormattedDateTime, getXmlFromBodyResponse, isRetryableError, isRetryableStatus, roundHalfUpToCents, toDgiiError, validateXMLCertificate };
+export { type AuthToken, BaseUrl, type BaseUrlKey, CONSUMPTION_SUMMARY_THRESHOLD, type CertificateInfo, type CommercialApprovalResponse, type DgiiDocumentType, DgiiError, type DgiiErrorCode, type DgiiErrorContext, type DgiiErrorOptions, type DgiiResult, ECF, ECF_TYPE_CODES, type EcfOptions, type EcfTypeCode, Endpoint, Environment, type GeneralReceptionRoute, HttpClient, type HttpClientOptions, type IdempotencyStore, InMemoryIdempotencyStore, type InMemoryIdempotencyStoreOptions, type InquiryInvoiceSummary, type InquiryStatus, type InquiryStatusCode, type InquiryStatusResponse, type InvoiceResponse, type InvoiceSummaryResponse, type Mensaje, P12Reader, type P12ReaderData, type ReceptionRoute, type RequestOptions, type ResilienceOptions, type ResiliencePolicies, SenderReceiverEndpoint, type ServiceDirectoryResponse, Signature, type SummaryReceptionRoute, type SummaryTrackingStatusResponse, type TrackStatusCode, TrackStatusEnum, type TrackingStatusResponse, Transformer, type VoidNCFResponse, type XmlCertificateValidation, buildSenderReceiverUrl, buildUrl, compareDecimal, convertECF32ToRFCE, createResiliencePolicies, defaultResilienceOptions, extractDgiiErrorMessage, generateEcfQRCodeURL, generateFcQRCodeURL, getCodeSixDigitfromSignature, getCurrentFormattedDate, getCurrentFormattedDateTime, getXmlFromBodyResponse, isEcfTypeCode, isRetryableError, isRetryableStatus, resolveReceptionRoute, roundHalfUpToCents, toDgiiError, validateXMLCertificate };

package/dist/index.js

@@ -370,9 +370,13 @@ var HttpClient = class {
   policies;
   fetchImpl;
   baseUrl;
+  beforeRequest;
+  onUnauthorized;
   constructor(options) {
     this.baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.token = options.token;
+    this.beforeRequest = options.beforeRequest;
+    this.onUnauthorized = options.onUnauthorized;
     this.policies = options.policies ?? createResiliencePolicies({
       ...options.resilience,
       ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {}
@@ -382,6 +386,9 @@ var HttpClient = class {
   setToken(token) {
     this.token = token;
   }
+  getToken() {
+    return this.token;
+  }
   clearToken() {
     this.token = void 0;
   }
@@ -441,6 +448,19 @@ var HttpClient = class {
     return err(error);
   }
   async request(options) {
+    if (!options.skipAuthHooks) {
+      await this.beforeRequest?.();
+    }
+    const first = await this.execute(options);
+    if (!options.skipAuthHooks && first.isErr() && first.error.status === 401 && this.onUnauthorized !== void 0) {
+      const replayed = await this.onUnauthorized();
+      if (replayed) {
+        return this.execute(options);
+      }
+    }
+    return first;
+  }
+  async execute(options) {
     const url = this.buildUrl(options.path, options.absoluteUrl, options.query);
     const method = options.method ?? "GET";
     const headers = this.authHeaders(options.headers);
@@ -469,7 +489,8 @@ var HttpClient = class {
       path,
       query,
       absoluteUrl: opts?.absoluteUrl,
-      resource: opts?.resource
+      resource: opts?.resource,
+      skipAuthHooks: opts?.skipAuthHooks
     });
   }
   /**
@@ -485,7 +506,8 @@ var HttpClient = class {
       body: form,
       headers: { Accept: "application/json" },
       absoluteUrl: opts?.absoluteUrl,
-      resource: opts?.resource
+      resource: opts?.resource,
+      skipAuthHooks: opts?.skipAuthHooks
     });
   }
 };
@@ -833,6 +855,98 @@ var extractElementText = (xml, tag) => {
   const text = match?.[1]?.trim();
   return text === void 0 || text === "" ? void 0 : text;
 };
+var ROOT_PATTERN = /<\s*(?:[A-Za-z_][\w.-]*:)?([A-Za-z_][\w.-]*)[\s/>]/;
+var extractRootElementName = (xml) => {
+  const stripped = xml.replace(/<\?[\s\S]*?\?>/g, "").replace(/<!--[\s\S]*?-->/g, "").trimStart();
+  return ROOT_PATTERN.exec(stripped)?.[1];
+};
+
+// src/reception.ts
+var ECF_TYPE_CODES = [
+  "31",
+  "32",
+  "33",
+  "34",
+  "41",
+  "43",
+  "44",
+  "45",
+  "46",
+  "47"
+];
+var CONSUMPTION_SUMMARY_THRESHOLD = "250000";
+var CONSUMPTION_TYPE = "32";
+var GENERAL = {
+  kind: "general",
+  endpoint: "recepcion/api/FacturasElectronicas" /* SendInvoice */
+};
+var SUMMARY = {
+  kind: "summary",
+  endpoint: "recepcionfc/api/recepcion/ecf" /* SendSummary */
+};
+var isEcfTypeCode = (value) => ECF_TYPE_CODES.includes(value);
+var DECIMAL_PATTERN = /^\d+(?:\.\d+)?$/;
+var compareDecimal = (a, b) => {
+  const [aInt = "", aFrac = ""] = a.split(".");
+  const [bInt = "", bFrac = ""] = b.split(".");
+  const aWhole = aInt.replace(/^0+(?=\d)/, "");
+  const bWhole = bInt.replace(/^0+(?=\d)/, "");
+  if (aWhole.length !== bWhole.length) {
+    return aWhole.length - bWhole.length;
+  }
+  if (aWhole !== bWhole) {
+    return aWhole < bWhole ? -1 : 1;
+  }
+  const width = Math.max(aFrac.length, bFrac.length);
+  const aPadded = aFrac.padEnd(width, "0");
+  const bPadded = bFrac.padEnd(width, "0");
+  if (aPadded === bPadded) {
+    return 0;
+  }
+  return aPadded < bPadded ? -1 : 1;
+};
+var validationError = (message) => new DgiiError(message, { code: "VALIDATION" });
+var resolveReceptionRoute = (signedXml) => {
+  const root = extractRootElementName(signedXml);
+  if (root === "RFCE") {
+    return ok(SUMMARY);
+  }
+  if (root !== "ECF") {
+    return err(
+      validationError(
+        `Unsupported document root "${root ?? "unknown"}"; expected "ECF" or "RFCE"`
+      )
+    );
+  }
+  const tipo = extractElementText(signedXml, "TipoeCF");
+  if (tipo === void 0) {
+    return err(validationError("TipoeCF is missing from the document"));
+  }
+  if (!isEcfTypeCode(tipo)) {
+    return err(validationError(`Unknown TipoeCF "${tipo}"`));
+  }
+  if (tipo !== CONSUMPTION_TYPE) {
+    return ok(GENERAL);
+  }
+  const total = extractElementText(signedXml, "MontoTotal");
+  if (total === void 0) {
+    return err(
+      validationError(
+        "MontoTotal is required to route an E32 consumption invoice"
+      )
+    );
+  }
+  if (!DECIMAL_PATTERN.test(total)) {
+    return err(
+      validationError(`MontoTotal "${total}" is not a decimal amount`)
+    );
+  }
+  return compareDecimal(total, CONSUMPTION_SUMMARY_THRESHOLD) < 0 ? err(
+    validationError(
+      "An E32 below RD$250,000 must be sent as an RFCE summary; convert it with convertECF32ToRFCE first"
+    )
+  ) : ok(GENERAL);
+};
 
 // src/utils.ts
 var getCodeSixDigitfromSignature = (signedXml) => {
@@ -996,22 +1110,39 @@ import { createHash } from "crypto";
 var PENDING_SUBMISSION = { pending: true };
 var isPendingSubmission = (value) => typeof value === "object" && value !== null && value.pending === true;
 var sha256Hex = (value) => createHash("sha256").update(value, "utf8").digest("hex");
+var parseExpiry = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsed = Date.parse(value);
+  return Number.isNaN(parsed) ? void 0 : parsed;
+};
 var ECF = class {
   environment;
   http;
   idempotency;
   credentials;
   inFlight = /* @__PURE__ */ new Map();
+  tokenRefreshSkewMs;
+  now;
+  tokenExpiresAt;
+  refreshPromise;
   constructor(credentials, environment = "TesteCF" /* Dev */, options = {}) {
     this.credentials = credentials;
     this.environment = environment;
+    this.tokenRefreshSkewMs = options.tokenRefreshSkewMs ?? 5 * 60 * 1e3;
+    this.now = options.now ?? Date.now;
     this.idempotency = options.idempotencyStore ?? new InMemoryIdempotencyStore();
     this.http = new HttpClient({
       baseUrl: BaseUrl.ECF,
       ...options.token !== void 0 ? { token: options.token } : {},
       ...options.resilience !== void 0 ? { resilience: options.resilience } : {},
       ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {},
-      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {}
+      ...options.fetchImpl !== void 0 ? { fetchImpl: options.fetchImpl } : {},
+      beforeRequest: async () => {
+        await this.ensureToken();
+      },
+      onUnauthorized: () => this.reauthenticate()
     });
   }
   buildIdempotencyKey(signedXml) {
@@ -1063,6 +1194,40 @@ var ECF = class {
       this.inFlight.delete(key);
     }
   }
+  /**
+   * Refresh the token when it is missing or about to expire.
+   *
+   * A pre-supplied `token` has no known expiry, so it is never refreshed
+   * proactively — only a 401 triggers a re-authentication for it.
+   */
+  async ensureToken() {
+    if (this.tokenExpiresAt === void 0) {
+      return ok(void 0);
+    }
+    if (this.now() < this.tokenExpiresAt - this.tokenRefreshSkewMs) {
+      return ok(void 0);
+    }
+    const refreshed = await this.refreshToken();
+    return refreshed.isOk() ? ok(void 0) : err(refreshed.error);
+  }
+  /** Authenticate, coalescing concurrent refreshes into a single round-trip. */
+  refreshToken() {
+    if (this.refreshPromise !== void 0) {
+      return this.refreshPromise;
+    }
+    const promise = this.authenticate().finally(() => {
+      this.refreshPromise = void 0;
+    });
+    this.refreshPromise = promise;
+    return promise;
+  }
+  /** Drop the rejected token and authenticate once. Returns `true` on success. */
+  async reauthenticate() {
+    this.http.clearToken();
+    this.tokenExpiresAt = void 0;
+    const refreshed = await this.refreshToken();
+    return refreshed.isOk();
+  }
   /** Authenticate against DGII (or a buyer host) and store the bearer token. */
   async authenticate(buyerHost) {
     const seed = await this.getSeed(buyerHost);
@@ -1089,6 +1254,7 @@ var ECF = class {
       return err(token.error);
     }
     this.http.setToken(token.value.token);
+    this.tokenExpiresAt = parseExpiry(token.value.expira);
     return ok(token.value);
   }
   getSeed(buyerHost) {
@@ -1099,20 +1265,23 @@ var ECF = class {
       );
       return this.http.get(url2, void 0, {
         absoluteUrl: true,
-        resource: "fe/autenticacion/api/semilla" /* Seed */
+        resource: "fe/autenticacion/api/semilla" /* Seed */,
+        skipAuthHooks: true
       });
     }
     const url = buildUrl(this.environment, "Autenticacion/api/Autenticacion/Semilla" /* Seed */);
     return this.http.get(url, void 0, {
       absoluteUrl: true,
-      resource: "Autenticacion/api/Autenticacion/Semilla" /* Seed */
+      resource: "Autenticacion/api/Autenticacion/Semilla" /* Seed */,
+      skipAuthHooks: true
     });
   }
   getAuthToken(signedSeed, buyerHost) {
     const url = buyerHost ? buildSenderReceiverUrl(buyerHost, "fe/autenticacion/api/validacioncertificado" /* ValidateSeed */) : buildUrl(this.environment, "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */);
     return this.http.postMultipart(url, "signed.xml", signedSeed, {
       absoluteUrl: true,
-      resource: "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */
+      resource: "autenticacion/api/Autenticacion/ValidarSemilla" /* ValidateSeed */,
+      skipAuthHooks: true
     });
   }
   /**
@@ -1144,6 +1313,32 @@ var ECF = class {
       )
     );
   }
+  /**
+   * Submit a signed document to the endpoint its own content belongs to.
+   *
+   * Reads the root element, `TipoeCF` and `MontoTotal` from the signed XML and
+   * dispatches to {@link sendSummary} for an RFCE or to
+   * {@link sendElectronicDocument} for an ECF. An E32 below RD$250,000 is
+   * rejected because DGII only accepts the summary form for those.
+   */
+  async sendDocument(signedXml, fileName, buyerHost) {
+    const route = resolveReceptionRoute(signedXml);
+    if (route.isErr()) {
+      return err(route.error);
+    }
+    if (route.value.kind === "summary") {
+      if (buyerHost !== void 0) {
+        return err(
+          new DgiiError(
+            "An RFCE summary cannot be delivered directly to a buyer host",
+            { code: "VALIDATION" }
+          )
+        );
+      }
+      return this.sendSummary(signedXml, fileName);
+    }
+    return this.sendElectronicDocument(signedXml, fileName, buyerHost);
+  }
   statusTrackId(trackId) {
     const url = buildUrl(this.environment, "consultaresultado/api/Consultas/Estado" /* TrackResultStatus */);
     return this.http.get(
@@ -1237,8 +1432,10 @@ var ECF = class {
 };
 export {
   BaseUrl,
+  CONSUMPTION_SUMMARY_THRESHOLD,
   DgiiError,
   ECF,
+  ECF_TYPE_CODES,
   Endpoint,
   Environment,
   Err,
@@ -1253,6 +1450,7 @@ export {
   Transformer,
   buildSenderReceiverUrl,
   buildUrl,
+  compareDecimal,
   convertECF32ToRFCE,
   createResiliencePolicies,
   defaultResilienceOptions,
@@ -1268,10 +1466,12 @@ export {
   getCurrentFormattedDate,
   getCurrentFormattedDateTime,
   getXmlFromBodyResponse,
+  isEcfTypeCode,
   isRetryableError,
   isRetryableStatus,
   ok,
   okAsync,
+  resolveReceptionRoute,
   roundHalfUpToCents,
   toDgiiError,
   validateXMLCertificate