@emitia/node 0.1.0

package/dist/index.js

@@ -0,0 +1,888 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/config.ts
+var DEFAULT_BASE_URL = "https://api.emitia.co";
+function validateConfig(apiKey, opts) {
+  if (!apiKey.startsWith("sk_test_") && !apiKey.startsWith("sk_live_")) {
+    throw new Error(`Invalid API key "${apiKey.slice(0, 10)}...": must start with "sk_test_" or "sk_live_".`);
+  }
+  return {
+    apiKey,
+    baseURL: opts?.baseURL ?? DEFAULT_BASE_URL,
+    timeout: opts?.timeout ?? 3e4,
+    maxRetries: opts?.maxRetries ?? 2,
+    fetch: opts?.fetch
+  };
+}
+__name(validateConfig, "validateConfig");
+
+// src/errors.ts
+function isErrorEnvelope(value) {
+  if (value === null || typeof value !== "object") return false;
+  const v = value;
+  const inner = v["error"];
+  if (inner === null || typeof inner !== "object") return false;
+  const e = inner;
+  return typeof e["type"] === "string" && typeof e["code"] === "string" && typeof e["message"] === "string";
+}
+__name(isErrorEnvelope, "isErrorEnvelope");
+var EmitiaError = class extends Error {
+  static {
+    __name(this, "EmitiaError");
+  }
+  type;
+  code;
+  requestId;
+  statusCode;
+  docUrl;
+  details;
+  constructor(opts) {
+    super(opts.message);
+    this.name = this.constructor.name;
+    this.type = opts.type;
+    this.code = opts.code;
+    this.requestId = opts.requestId;
+    this.statusCode = opts.statusCode;
+    this.docUrl = opts.docUrl;
+    this.details = opts.details;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var AuthenticationError = class extends EmitiaError {
+  static {
+    __name(this, "AuthenticationError");
+  }
+};
+var PermissionError = class extends EmitiaError {
+  static {
+    __name(this, "PermissionError");
+  }
+};
+var NotFoundError = class extends EmitiaError {
+  static {
+    __name(this, "NotFoundError");
+  }
+};
+var ValidationError = class extends EmitiaError {
+  static {
+    __name(this, "ValidationError");
+  }
+};
+var RateLimitError = class extends EmitiaError {
+  static {
+    __name(this, "RateLimitError");
+  }
+};
+var IdempotencyError = class extends EmitiaError {
+  static {
+    __name(this, "IdempotencyError");
+  }
+};
+var DianRejectedError = class extends EmitiaError {
+  static {
+    __name(this, "DianRejectedError");
+  }
+};
+var DianUnavailableError = class extends EmitiaError {
+  static {
+    __name(this, "DianUnavailableError");
+  }
+};
+var CertificateError = class extends EmitiaError {
+  static {
+    __name(this, "CertificateError");
+  }
+};
+var NumberingError = class extends EmitiaError {
+  static {
+    __name(this, "NumberingError");
+  }
+};
+var ApiError = class extends EmitiaError {
+  static {
+    __name(this, "ApiError");
+  }
+};
+var TYPE_TO_CLASS = {
+  authentication_error: AuthenticationError,
+  permission_error: PermissionError,
+  not_found_error: NotFoundError,
+  validation_error: ValidationError,
+  rate_limit_error: RateLimitError,
+  idempotency_error: IdempotencyError,
+  dian_rejected: DianRejectedError,
+  dian_unavailable: DianUnavailableError,
+  certificate_error: CertificateError,
+  numbering_error: NumberingError
+};
+var HTTP_STATUS_TO_CLASS = {
+  401: AuthenticationError,
+  403: PermissionError,
+  404: NotFoundError,
+  422: ValidationError,
+  429: RateLimitError
+};
+function fromPayload(envelope, httpStatus, requestId) {
+  const { type, code, message, doc_url, details } = envelope.error;
+  const opts = {
+    type,
+    code,
+    message,
+    requestId,
+    statusCode: httpStatus,
+    docUrl: doc_url,
+    details
+  };
+  const ByType = TYPE_TO_CLASS[type];
+  if (ByType !== void 0) {
+    return new ByType(opts);
+  }
+  const ByStatus = HTTP_STATUS_TO_CLASS[httpStatus];
+  if (ByStatus !== void 0) {
+    return new ByStatus(opts);
+  }
+  return new ApiError(opts);
+}
+__name(fromPayload, "fromPayload");
+
+// src/version.ts
+var SDK_VERSION = "0.1.0";
+
+// src/http.ts
+var RETRY_BASE_MS = 500;
+var RETRY_CAP_MS = 8e3;
+function sleep(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted === true) {
+      reject(new Error("AbortError"));
+      return;
+    }
+    const id = setTimeout(resolve, ms);
+    const onAbort = /* @__PURE__ */ __name(() => {
+      clearTimeout(id);
+      reject(new Error("AbortError"));
+    }, "onAbort");
+    signal?.addEventListener("abort", onAbort, {
+      once: true
+    });
+  });
+}
+__name(sleep, "sleep");
+function jitteredDelay(attempt) {
+  const exp = RETRY_BASE_MS * 2 ** attempt;
+  const capped = Math.min(exp, RETRY_CAP_MS);
+  return Math.floor(Math.random() * capped);
+}
+__name(jitteredDelay, "jitteredDelay");
+function parseRetryAfter(header, nowMs) {
+  if (header === null) return null;
+  const asSeconds = Number(header);
+  if (Number.isFinite(asSeconds)) {
+    return Math.min(Math.max(asSeconds, 0) * 1e3, RETRY_CAP_MS);
+  }
+  const asDate = Date.parse(header);
+  if (Number.isNaN(asDate)) return null;
+  return Math.min(Math.max(asDate - nowMs, 0), RETRY_CAP_MS);
+}
+__name(parseRetryAfter, "parseRetryAfter");
+function shouldRetry(status) {
+  return status === 429 || status >= 500 && status <= 599;
+}
+__name(shouldRetry, "shouldRetry");
+var HttpClient = class {
+  static {
+    __name(this, "HttpClient");
+  }
+  config;
+  constructor(config) {
+    this.config = config;
+  }
+  async request(opts) {
+    const fetchFn = this.config.fetch ?? globalThis.fetch.bind(globalThis);
+    const idempotencyKey = opts.idempotencyKey ?? (opts.autoIdempotency === true ? crypto.randomUUID() : void 0);
+    let lastError;
+    for (let attempt = 0; attempt <= this.config.maxRetries; attempt++) {
+      const url = this.buildUrl(opts.path, opts.query);
+      const headers = {
+        authorization: `Bearer ${this.config.apiKey}`,
+        "user-agent": `emitia-node/${SDK_VERSION} node/${process.version}`,
+        accept: "application/json"
+      };
+      if (opts.body !== void 0) {
+        headers["content-type"] = "application/json";
+      }
+      if (idempotencyKey !== void 0) {
+        headers["idempotency-key"] = idempotencyKey;
+      }
+      const response = await fetchFn(url, {
+        method: opts.method,
+        headers,
+        body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0,
+        signal: opts.signal
+      });
+      const requestId = response.headers.get("x-request-id") ?? "";
+      if (response.ok) {
+        return await response.json();
+      }
+      let bodyText;
+      try {
+        bodyText = await response.text();
+      } catch {
+        bodyText = "";
+      }
+      let parsedBody;
+      try {
+        parsedBody = bodyText.length > 0 ? JSON.parse(bodyText) : {};
+      } catch {
+        parsedBody = {};
+      }
+      const responseError = isErrorEnvelope(parsedBody) ? fromPayload(parsedBody, response.status, requestId) : new Error(`HTTP ${response.status}: ${bodyText}`);
+      if (shouldRetry(response.status) && attempt < this.config.maxRetries) {
+        const retryAfter = parseRetryAfter(response.headers.get("retry-after"), Date.now());
+        const delayMs = retryAfter ?? jitteredDelay(attempt);
+        await sleep(delayMs, opts.signal);
+        lastError = responseError;
+        continue;
+      }
+      throw responseError;
+    }
+    throw lastError ?? new Error("Request failed after retries");
+  }
+  buildUrl(path, query) {
+    const base = this.config.baseURL.replace(/\/$/, "");
+    const url = `${base}${path}`;
+    if (query === void 0 || Object.keys(query).length === 0) return url;
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+      params.set(key, String(value));
+    }
+    return `${url}?${params.toString()}`;
+  }
+};
+
+// src/resources/base.ts
+var BaseResource = class {
+  static {
+    __name(this, "BaseResource");
+  }
+  _http;
+  constructor(http) {
+    this._http = http;
+  }
+};
+
+// src/resources/account.ts
+var AccountResource = class extends BaseResource {
+  static {
+    __name(this, "AccountResource");
+  }
+  retrieve() {
+    return this._http.request({
+      method: "GET",
+      path: "/v1/account"
+    });
+  }
+};
+
+// src/resources/balance.ts
+var BalanceResource = class extends BaseResource {
+  static {
+    __name(this, "BalanceResource");
+  }
+  retrieve() {
+    return this._http.request({
+      method: "GET",
+      path: "/v1/balance"
+    });
+  }
+};
+
+// src/resources/catalogs.ts
+var CatalogsResource = class extends BaseResource {
+  static {
+    __name(this, "CatalogsResource");
+  }
+  /**
+  * GET /v1/catalogs/{slug}
+  * Returns all items in a named DIAN catalog.
+  */
+  retrieve(slug) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/catalogs/${slug}`
+    });
+  }
+  /**
+  * GET /v1/catalogs/municipios
+  * Returns Colombian municipalities. Optionally filtered by 2-digit department code.
+  */
+  municipios(query) {
+    return this._http.request({
+      method: "GET",
+      path: "/v1/catalogs/municipios",
+      query: query?.department !== void 0 ? {
+        department: query.department
+      } : void 0
+    });
+  }
+};
+
+// src/resources/certificates.ts
+var CertificatesResource = class extends BaseResource {
+  static {
+    __name(this, "CertificatesResource");
+  }
+  /**
+  * GET /v1/certificates/{id}
+  * Returns certificate metadata by ID. 404 if not found or cross-tenant.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/certificates/${id}`
+    });
+  }
+  /**
+  * GET /v1/certificates
+  * Returns a cursor-paginated list of certificate metadata.
+  * Soft-deleted certificates are excluded.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    return this._http.request({
+      method: "GET",
+      path: "/v1/certificates",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/certificates — Upload a new .p12 certificate.
+  * Returns 201. No auto-idempotency (openapi.json: no Idempotency-Key header required).
+  * Explicit override accepted via opts.idempotencyKey.
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/certificates",
+      body,
+      idempotencyKey: opts?.idempotencyKey
+    });
+  }
+  /**
+  * DELETE /v1/certificates/{id} — Soft-delete a certificate.
+  * Returns 200 with the deleted CertificateResponse (not 204). No idempotency-key.
+  */
+  del(id) {
+    return this._http.request({
+      method: "DELETE",
+      path: `/v1/certificates/${id}`
+    });
+  }
+  /**
+  * POST /v1/certificates/{id}/activate — Set this certificate as the active signing cert.
+  * Returns 200 with updated CertificateResponse. No idempotency-key.
+  */
+  activate(id) {
+    return this._http.request({
+      method: "POST",
+      path: `/v1/certificates/${id}/activate`
+    });
+  }
+};
+
+// src/resources/credit-notes.ts
+var CreditNotesResource = class extends BaseResource {
+  static {
+    __name(this, "CreditNotesResource");
+  }
+  /**
+  * POST /v1/credit-notes — Create a draft credit note.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/credit-notes",
+      body,
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/credit-notes/{id} — Retrieve credit note by ID (detail including DIAN response).
+  * No idempotency-key.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/credit-notes/${id}`
+    });
+  }
+  /**
+  * GET /v1/credit-notes — List credit notes (cursor-paginated, filterable).
+  * No idempotency-key.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    if (params?.status !== void 0) query["status"] = params.status;
+    if (params?.["created[gte]"] !== void 0) query["created[gte]"] = params["created[gte]"];
+    if (params?.["created[lt]"] !== void 0) query["created[lt]"] = params["created[lt]"];
+    return this._http.request({
+      method: "GET",
+      path: "/v1/credit-notes",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/credit-notes/{id}/send-email — Manually resend the credit note email.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  sendEmail(id, body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: `/v1/credit-notes/${id}/send-email`,
+      body: body ?? {},
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/credit-notes/{id}/email-content — Get email content.
+  * No idempotency-key.
+  */
+  emailContent(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/credit-notes/${id}/email-content`
+    });
+  }
+  /**
+  * GET /v1/credit-notes/{id}/emails — List email delivery attempts.
+  * No idempotency-key.
+  */
+  listEmails(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/credit-notes/${id}/emails`
+    });
+  }
+};
+
+// src/resources/customers.ts
+var CustomersResource = class extends BaseResource {
+  static {
+    __name(this, "CustomersResource");
+  }
+  /**
+  * GET /v1/customers/{id}
+  * Returns a customer by public ID. 404 if not found or soft-deleted.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/customers/${id}`
+    });
+  }
+  /**
+  * GET /v1/customers
+  * Returns a cursor-paginated list of customers.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    return this._http.request({
+      method: "GET",
+      path: "/v1/customers",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/customers — Create a customer.
+  * Returns 201. Auto-generates idempotency-key (R03 — openapi.json marks Idempotency-Key required).
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/customers",
+      body,
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * PATCH /v1/customers/{id} — Update a customer.
+  * Returns 200 with updated CustomerResponse. No idempotency-key.
+  */
+  update(id, body) {
+    return this._http.request({
+      method: "PATCH",
+      path: `/v1/customers/${id}`,
+      body
+    });
+  }
+  /**
+  * DELETE /v1/customers/{id} — Soft-delete a customer.
+  * Returns 200 with the deleted CustomerResponse (not 204). No idempotency-key.
+  */
+  del(id) {
+    return this._http.request({
+      method: "DELETE",
+      path: `/v1/customers/${id}`
+    });
+  }
+};
+
+// src/resources/debit-notes.ts
+var DebitNotesResource = class extends BaseResource {
+  static {
+    __name(this, "DebitNotesResource");
+  }
+  /**
+  * POST /v1/debit-notes — Create a draft debit note.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/debit-notes",
+      body,
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/debit-notes/{id} — Retrieve debit note by ID (detail including DIAN response).
+  * No idempotency-key.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/debit-notes/${id}`
+    });
+  }
+  /**
+  * GET /v1/debit-notes — List debit notes (cursor-paginated, filterable).
+  * No idempotency-key.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    if (params?.status !== void 0) query["status"] = params.status;
+    if (params?.["created[gte]"] !== void 0) query["created[gte]"] = params["created[gte]"];
+    if (params?.["created[lt]"] !== void 0) query["created[lt]"] = params["created[lt]"];
+    return this._http.request({
+      method: "GET",
+      path: "/v1/debit-notes",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/debit-notes/{id}/send-email — Manually resend the debit note email.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  sendEmail(id, body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: `/v1/debit-notes/${id}/send-email`,
+      body: body ?? {},
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/debit-notes/{id}/email-content — Get email content.
+  * No idempotency-key.
+  */
+  emailContent(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/debit-notes/${id}/email-content`
+    });
+  }
+  /**
+  * GET /v1/debit-notes/{id}/emails — List email delivery attempts.
+  * No idempotency-key.
+  */
+  listEmails(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/debit-notes/${id}/emails`
+    });
+  }
+};
+
+// src/resources/invoices.ts
+var InvoicesResource = class extends BaseResource {
+  static {
+    __name(this, "InvoicesResource");
+  }
+  /**
+  * POST /v1/invoices — Create a draft invoice.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/invoices",
+      body,
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/invoices/{id} — Retrieve invoice by ID (detail including lines).
+  * No idempotency-key.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/invoices/${id}`
+    });
+  }
+  /**
+  * GET /v1/invoices — List invoices (cursor-paginated, filterable).
+  * No idempotency-key.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    if (params?.status !== void 0) query["status"] = params.status;
+    if (params?.customer !== void 0) query["customer"] = params.customer;
+    if (params?.["created[gte]"] !== void 0) query["created[gte]"] = params["created[gte]"];
+    if (params?.["created[lt]"] !== void 0) query["created[lt]"] = params["created[lt]"];
+    if (params?.number_prefix !== void 0) query["number_prefix"] = params.number_prefix;
+    if (params?.cufe !== void 0) query["cufe"] = params.cufe;
+    return this._http.request({
+      method: "GET",
+      path: "/v1/invoices",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/invoices/{id}/send-email — Manually resend the invoice email.
+  * Returns 202. Auto-generates idempotency-key (R03).
+  */
+  sendEmail(id, body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: `/v1/invoices/${id}/send-email`,
+      body: body ?? {},
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * GET /v1/invoices/{id}/email-content — Get email content (recipient, subject, AttachedDoc).
+  * No idempotency-key.
+  */
+  emailContent(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/invoices/${id}/email-content`
+    });
+  }
+  /**
+  * GET /v1/invoices/{id}/emails — List email delivery attempts.
+  * No idempotency-key.
+  */
+  listEmails(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/invoices/${id}/emails`
+    });
+  }
+};
+
+// src/resources/numbering-resolutions.ts
+var NumberingResolutionsResource = class extends BaseResource {
+  static {
+    __name(this, "NumberingResolutionsResource");
+  }
+  /**
+  * GET /v1/numbering-resolutions/{id}
+  * Returns a numbering resolution by ID. 404 if not found or cross-tenant.
+  */
+  retrieve(id) {
+    return this._http.request({
+      method: "GET",
+      path: `/v1/numbering-resolutions/${id}`
+    });
+  }
+  /**
+  * GET /v1/numbering-resolutions
+  * Returns a cursor-paginated list of numbering resolutions.
+  */
+  list(params) {
+    const query = {};
+    if (params?.limit !== void 0) query["limit"] = params.limit;
+    if (params?.starting_after !== void 0) query["starting_after"] = params.starting_after;
+    return this._http.request({
+      method: "GET",
+      path: "/v1/numbering-resolutions",
+      query: Object.keys(query).length > 0 ? query : void 0
+    });
+  }
+  /**
+  * POST /v1/numbering-resolutions — Register a new DIAN resolution.
+  * Returns 201. Auto-generates idempotency-key (R03 — openapi.json marks Idempotency-Key required).
+  */
+  create(body, opts) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/numbering-resolutions",
+      body,
+      idempotencyKey: opts?.idempotencyKey,
+      autoIdempotency: opts?.idempotencyKey === void 0
+    });
+  }
+  /**
+  * POST /v1/numbering-resolutions/{id}/activate — Mark this resolution as active.
+  * Returns 200 with updated NumberingResolutionResponse. No idempotency-key.
+  */
+  activate(id) {
+    return this._http.request({
+      method: "POST",
+      path: `/v1/numbering-resolutions/${id}/activate`
+    });
+  }
+};
+
+// src/resources/test-resource.ts
+var TestResource = class extends BaseResource {
+  static {
+    __name(this, "TestResource");
+  }
+  /**
+  * POST /v1/test/trigger-event — Manually fire a webhook event in test mode.
+  * Returns 201 with TriggerEventResponse.
+  * Throws PermissionError (403) if called with a live API key.
+  * No idempotency-key.
+  */
+  triggerEvent(body) {
+    return this._http.request({
+      method: "POST",
+      path: "/v1/test/trigger-event",
+      body
+    });
+  }
+};
+
+// src/client.ts
+var Emitia = class {
+  static {
+    __name(this, "Emitia");
+  }
+  /**
+  * Private HTTP transport.
+  * Using a true private field (#http) so it cannot be accessed externally.
+  */
+  #http;
+  // ── Read-only resources (PR2 — fully wired) ───────────────────────────────────
+  account;
+  balance;
+  catalogs;
+  // ── Write resources (PR3b — read + write fully wired) ────────────────────────
+  certificates;
+  numberingResolutions;
+  customers;
+  // ── Document resources (PR3a — fully wired) ──────────────────────────────────
+  invoices;
+  creditNotes;
+  debitNotes;
+  // ── Test resource (PR3b) ──────────────────────────────────────────────────────
+  test;
+  constructor(apiKey, opts) {
+    const config = validateConfig(apiKey, opts);
+    this.#http = new HttpClient(config);
+    this.account = new AccountResource(this.#http);
+    this.balance = new BalanceResource(this.#http);
+    this.catalogs = new CatalogsResource(this.#http);
+    this.certificates = new CertificatesResource(this.#http);
+    this.numberingResolutions = new NumberingResolutionsResource(this.#http);
+    this.customers = new CustomersResource(this.#http);
+    this.invoices = new InvoicesResource(this.#http);
+    this.creditNotes = new CreditNotesResource(this.#http);
+    this.debitNotes = new DebitNotesResource(this.#http);
+    this.test = new TestResource(this.#http);
+  }
+};
+var SignatureVerificationError = class extends Error {
+  static {
+    __name(this, "SignatureVerificationError");
+  }
+  reason;
+  constructor(reason, message) {
+    super(message);
+    this.name = "SignatureVerificationError";
+    this.reason = reason;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+function parseSignatureHeader(header) {
+  if (!header) return null;
+  const parts = header.split(",");
+  let t;
+  const v1Values = [];
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (trimmed.startsWith("t=")) {
+      const raw = trimmed.slice(2);
+      if (!/^\d+$/.test(raw)) {
+        return null;
+      }
+      t = Number(raw);
+    } else if (trimmed.startsWith("v1=")) {
+      const value = trimmed.slice(3);
+      if (value) v1Values.push(value);
+    }
+  }
+  if (t === void 0 || v1Values.length === 0) return null;
+  return {
+    t,
+    v1Values
+  };
+}
+__name(parseSignatureHeader, "parseSignatureHeader");
+function constructEvent(payload, signatureHeader, secret, toleranceSec = 300, nowSec = () => Math.floor(Date.now() / 1e3)) {
+  const parsed = parseSignatureHeader(signatureHeader);
+  if (parsed === null) {
+    throw new SignatureVerificationError("no_signature", `Invalid or missing Emitia-Signature header: "${signatureHeader}". Expected format: t=<unix_seconds>,v1=<hex_hmac>`);
+  }
+  const { t, v1Values } = parsed;
+  const now = nowSec();
+  const drift = Math.abs(now - t);
+  if (drift > toleranceSec) {
+    throw new SignatureVerificationError("timestamp_out_of_tolerance", `Webhook timestamp is too old or too far in the future. Timestamp: ${t}, now: ${now}, drift: ${drift}s, tolerance: ${toleranceSec}s. Ensure your server clock is synchronized and that this event is not a replay.`);
+  }
+  const payloadString = Buffer.isBuffer(payload) ? payload.toString("utf8") : payload;
+  const signedPayload = `${t}.${payloadString}`;
+  const expectedHmac = createHmac("sha256", secret).update(signedPayload).digest();
+  const matched = v1Values.some((v1) => {
+    const v1Buffer = Buffer.from(v1, "hex");
+    if (v1Buffer.length !== expectedHmac.length) return false;
+    return timingSafeEqual(v1Buffer, expectedHmac);
+  });
+  if (!matched) {
+    throw new SignatureVerificationError("signature_mismatch", "Webhook signature verification failed. The computed HMAC does not match any v1 signature in the header. Verify you are using the correct signing secret and that the raw (unparsed) request body is passed to constructEvent().");
+  }
+  try {
+    return JSON.parse(payloadString);
+  } catch {
+    throw new SignatureVerificationError("invalid_payload", "Webhook signature verified, but the request body is not valid JSON.");
+  }
+}
+__name(constructEvent, "constructEvent");
+
+export { ApiError, AuthenticationError, CertificateError, DianRejectedError, DianUnavailableError, Emitia, EmitiaError, IdempotencyError, NotFoundError, NumberingError, PermissionError, RateLimitError, SDK_VERSION, SignatureVerificationError, ValidationError, constructEvent, fromPayload, isErrorEnvelope };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map