@fin.cx/skr 1.1.0 → 1.2.1

package/dist_ts/skr.postingkeys.js

@@ -0,0 +1,196 @@
+/**
+ * DATEV Posting Keys (Buchungsschlüssel) for German Accounting
+ *
+ * Posting keys control automatic VAT booking and are automatically checked
+ * in German tax audits (Betriebsprüfungen). Using incorrect posting keys
+ * can have serious tax consequences.
+ *
+ * Reference: DATEV Buchungsschlüssel-Verzeichnis
+ */
+/**
+ * Posting key definitions with validation rules
+ */
+export const POSTING_KEY_RULES = {
+    3: {
+        key: 3,
+        description: 'Zahlungseingang mit 19% Umsatzsteuer',
+        vatRate: 19,
+        requiresVAT: true,
+        disablesVATAutomatism: false,
+        allowedScenarios: ['domestic_taxed']
+    },
+    8: {
+        key: 8,
+        description: '7% Vorsteuer',
+        vatRate: 7,
+        requiresVAT: true,
+        disablesVATAutomatism: false,
+        allowedScenarios: ['domestic_taxed']
+    },
+    9: {
+        key: 9,
+        description: '19% Vorsteuer',
+        vatRate: 19,
+        requiresVAT: true,
+        disablesVATAutomatism: false,
+        allowedScenarios: ['domestic_taxed']
+    },
+    19: {
+        key: 19,
+        description: '19% Vorsteuer bei innergemeinschaftlichen Lieferungen',
+        vatRate: 19,
+        requiresVAT: true,
+        disablesVATAutomatism: false,
+        allowedScenarios: ['intra_eu']
+    },
+    40: {
+        key: 40,
+        description: 'Steuerfrei / Aufhebung der Automatik',
+        vatRate: 0,
+        requiresVAT: false,
+        disablesVATAutomatism: true,
+        allowedScenarios: ['tax_free', 'export', 'reverse_charge']
+    },
+    94: {
+        key: 94,
+        description: '19% Vorsteuer/Umsatzsteuer bei Erwerb aus EU oder Drittland (Reverse Charge)',
+        vatRate: 19,
+        requiresVAT: true,
+        disablesVATAutomatism: false,
+        allowedScenarios: ['reverse_charge', 'intra_eu', 'third_country']
+    }
+};
+/**
+ * Validate posting key for a journal entry line
+ */
+export function validatePostingKey(postingKey, accountNumber, amount, vatAmount, taxScenario) {
+    const errors = [];
+    const warnings = [];
+    // Get posting key rule
+    const rule = POSTING_KEY_RULES[postingKey];
+    if (!rule) {
+        errors.push(`Invalid posting key: ${postingKey}`);
+        return { isValid: false, errors, warnings };
+    }
+    // Validate VAT requirement
+    // Skip VAT amount requirement if:
+    // 1. Posting TO a VAT account (the line itself IS the VAT)
+    // 2. Posting TO a debtor/creditor account (receivable/payable settlement - VAT was already recorded)
+    const isVATAccount = accountNumber === '1571' || accountNumber === '1771' || accountNumber === '1576';
+    const accountNum = parseInt(accountNumber);
+    const isDebtorCreditorAccount = (accountNum >= 10000 && accountNum <= 69999) || (accountNum >= 70000 && accountNum <= 99999);
+    if (rule.requiresVAT && !vatAmount && !isVATAccount && !isDebtorCreditorAccount) {
+        errors.push(`Posting key ${postingKey} requires VAT amount, but none provided. ` +
+            `Description: ${rule.description}`);
+    }
+    // Validate VAT rate if specified
+    if (rule.vatRate && vatAmount && rule.vatRate > 0) {
+        const expectedVAT = Math.round(amount * rule.vatRate) / 100;
+        const tolerance = 0.02; // 2 cent tolerance for rounding
+        if (Math.abs(vatAmount - expectedVAT) > tolerance) {
+            warnings.push(`VAT amount ${vatAmount} does not match expected ${expectedVAT.toFixed(2)} ` +
+                `for posting key ${postingKey} (${rule.vatRate}%)`);
+        }
+    }
+    // Validate tax scenario
+    if (rule.allowedScenarios && taxScenario) {
+        if (!rule.allowedScenarios.includes(taxScenario)) {
+            errors.push(`Posting key ${postingKey} is not valid for tax scenario '${taxScenario}'. ` +
+                `Allowed scenarios: ${rule.allowedScenarios.join(', ')}`);
+        }
+    }
+    // Validate automatism disabling
+    if (rule.disablesVATAutomatism && vatAmount && vatAmount > 0) {
+        warnings.push(`Posting key ${postingKey} disables VAT automatism but VAT amount is provided. ` +
+            `This may cause incorrect tax reporting.`);
+    }
+    return {
+        isValid: errors.length === 0,
+        errors,
+        warnings
+    };
+}
+/**
+ * Get posting key description
+ */
+export function getPostingKeyDescription(postingKey) {
+    const rule = POSTING_KEY_RULES[postingKey];
+    return rule ? rule.description : `Unknown posting key: ${postingKey}`;
+}
+/**
+ * Get appropriate posting key for a transaction
+ */
+export function suggestPostingKey(params) {
+    const { vatRate, taxScenario, isPayment } = params;
+    // Tax-free or reverse charge scenarios
+    if (taxScenario === 'tax_free' || taxScenario === 'export') {
+        return 40;
+    }
+    // Reverse charge
+    if (taxScenario === 'reverse_charge' || taxScenario === 'third_country') {
+        return 94;
+    }
+    // Intra-EU with VAT
+    if (taxScenario === 'intra_eu' && vatRate === 19) {
+        return 19;
+    }
+    // Payment with 19% VAT
+    if (isPayment && vatRate === 19) {
+        return 3;
+    }
+    // Input VAT based on rate
+    if (vatRate === 19) {
+        return 9;
+    }
+    if (vatRate === 7) {
+        return 8;
+    }
+    // Default to tax-free if no VAT
+    if (vatRate === 0) {
+        return 40;
+    }
+    // Fallback to 19% input VAT
+    return 9;
+}
+/**
+ * Validate all posting keys for consistency
+ */
+export function validatePostingKeyConsistency(lines) {
+    const errors = [];
+    const warnings = [];
+    // Check for mixing tax-free and taxed transactions
+    const hasTaxFree = lines.some(line => line.postingKey === 40);
+    const hasTaxed = lines.some(line => [3, 8, 9, 19, 94].includes(line.postingKey));
+    if (hasTaxFree && hasTaxed) {
+        warnings.push('Journal entry mixes tax-free (key 40) and taxed transactions. ' +
+            'Verify this is intentional.');
+    }
+    // Check for reverse charge consistency
+    const hasReverseCharge = lines.some(line => line.postingKey === 94);
+    if (hasReverseCharge) {
+        const reverseChargeLines = lines.filter(line => line.postingKey === 94);
+        if (reverseChargeLines.length % 2 !== 0) {
+            errors.push('Reverse charge (posting key 94) requires both input and output VAT entries. ' +
+                'Found odd number of reverse charge lines.');
+        }
+    }
+    return {
+        isValid: errors.length === 0,
+        errors,
+        warnings
+    };
+}
+/**
+ * Check if posting key requires automatic VAT booking
+ */
+export function requiresAutomaticVAT(postingKey) {
+    const rule = POSTING_KEY_RULES[postingKey];
+    return rule ? !rule.disablesVATAutomatism : false;
+}
+/**
+ * Get all valid posting keys
+ */
+export function getAllPostingKeys() {
+    return Object.keys(POSTING_KEY_RULES).map(k => Number(k));
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2tyLnBvc3RpbmdrZXlzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvc2tyLnBvc3RpbmdrZXlzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOzs7Ozs7OztHQVFHO0FBSUg7O0dBRUc7QUFDSCxNQUFNLENBQUMsTUFBTSxpQkFBaUIsR0FBeUM7SUFDckUsQ0FBQyxFQUFFO1FBQ0QsR0FBRyxFQUFFLENBQUM7UUFDTixXQUFXLEVBQUUsc0NBQXNDO1FBQ25ELE9BQU8sRUFBRSxFQUFFO1FBQ1gsV0FBVyxFQUFFLElBQUk7UUFDakIscUJBQXFCLEVBQUUsS0FBSztRQUM1QixnQkFBZ0IsRUFBRSxDQUFDLGdCQUFnQixDQUFDO0tBQ3JDO0lBQ0QsQ0FBQyxFQUFFO1FBQ0QsR0FBRyxFQUFFLENBQUM7UUFDTixXQUFXLEVBQUUsY0FBYztRQUMzQixPQUFPLEVBQUUsQ0FBQztRQUNWLFdBQVcsRUFBRSxJQUFJO1FBQ2pCLHFCQUFxQixFQUFFLEtBQUs7UUFDNUIsZ0JBQWdCLEVBQUUsQ0FBQyxnQkFBZ0IsQ0FBQztLQUNyQztJQUNELENBQUMsRUFBRTtRQUNELEdBQUcsRUFBRSxDQUFDO1FBQ04sV0FBVyxFQUFFLGVBQWU7UUFDNUIsT0FBTyxFQUFFLEVBQUU7UUFDWCxXQUFXLEVBQUUsSUFBSTtRQUNqQixxQkFBcUIsRUFBRSxLQUFLO1FBQzVCLGdCQUFnQixFQUFFLENBQUMsZ0JBQWdCLENBQUM7S0FDckM7SUFDRCxFQUFFLEVBQUU7UUFDRixHQUFHLEVBQUUsRUFBRTtRQUNQLFdBQVcsRUFBRSx1REFBdUQ7UUFDcEUsT0FBTyxFQUFFLEVBQUU7UUFDWCxXQUFXLEVBQUUsSUFBSTtRQUNqQixxQkFBcUIsRUFBRSxLQUFLO1FBQzVCLGdCQUFnQixFQUFFLENBQUMsVUFBVSxDQUFDO0tBQy9CO0lBQ0QsRUFBRSxFQUFFO1FBQ0YsR0FBRyxFQUFFLEVBQUU7UUFDUCxXQUFXLEVBQUUsc0NBQXNDO1FBQ25ELE9BQU8sRUFBRSxDQUFDO1FBQ1YsV0FBVyxFQUFFLEtBQUs7UUFDbEIscUJBQXFCLEVBQUUsSUFBSTtRQUMzQixnQkFBZ0IsRUFBRSxDQUFDLFVBQVUsRUFBRSxRQUFRLEVBQUUsZ0JBQWdCLENBQUM7S0FDM0Q7SUFDRCxFQUFFLEVBQUU7UUFDRixHQUFHLEVBQUUsRUFBRTtRQUNQLFdBQVcsRUFBRSw4RUFBOEU7UUFDM0YsT0FBTyxFQUFFLEVBQUU7UUFDWCxXQUFXLEVBQUUsSUFBSTtRQUNqQixxQkFBcUIsRUFBRSxLQUFLO1FBQzVCLGdCQUFnQixFQUFFLENBQUMsZ0JBQWdCLEVBQUUsVUFBVSxFQUFFLGVBQWUsQ0FBQztLQUNsRTtDQUNGLENBQUM7QUFFRjs7R0FFRztBQUNILE1BQU0sVUFBVSxrQkFBa0IsQ0FDaEMsVUFBdUIsRUFDdkIsYUFBcUIsRUFDckIsTUFBYyxFQUNkLFNBQWtCLEVBQ2xCLFdBQW9CO0lBRXBCLE1BQU0sTUFBTSxHQUFhLEVBQUUsQ0FBQztJQUM1QixNQUFNLFFBQVEsR0FBYSxFQUFFLENBQUM7SUFFOUIsdUJBQXVCO0lBQ3ZCLE1BQU0sSUFBSSxHQUFHLGlCQUFpQixDQUFDLFVBQVUsQ0FBQyxDQUFDO0lBQzNDLElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FBQztRQUNWLE1BQU0sQ0FBQyxJQUFJLENBQUMsd0JBQXdCLFVBQVUsRUFBRSxDQUFDLENBQUM7UUFDbEQsT0FBTyxFQUFFLE9BQU8sRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLFFBQVEsRUFBRSxDQUFDO0lBQzlDLENBQUM7SUFFRCwyQkFBMkI7SUFDM0Isa0NBQWtDO0lBQ2xDLDJEQUEyRDtJQUMzRCxxR0FBcUc7SUFDckcsTUFBTSxZQUFZLEdBQUcsYUFBYSxLQUFLLE1BQU0sSUFBSSxhQUFhLEtBQUssTUFBTSxJQUFJLGFBQWEsS0FBSyxNQUFNLENBQUM7SUFDdEcsTUFBTSxVQUFVLEdBQUcsUUFBUSxDQUFDLGFBQWEsQ0FBQyxDQUFDO0lBQzNDLE1BQU0sdUJBQXVCLEdBQUcsQ0FBQyxVQUFVLElBQUksS0FBSyxJQUFJLFVBQVUsSUFBSSxLQUFLLENBQUMsSUFBSSxDQUFDLFVBQVUsSUFBSSxLQUFLLElBQUksVUFBVSxJQUFJLEtBQUssQ0FBQyxDQUFDO0lBRTdILElBQUksSUFBSSxDQUFDLFdBQVcsSUFBSSxDQUFDLFNBQVMsSUFBSSxDQUFDLFlBQVksSUFBSSxDQUFDLHVCQUF1QixFQUFFLENBQUM7UUFDaEYsTUFBTSxDQUFDLElBQUksQ0FDVCxlQUFlLFVBQVUsMkNBQTJDO1lBQ3BFLGdCQUFnQixJQUFJLENBQUMsV0FBVyxFQUFFLENBQ25DLENBQUM7SUFDSixDQUFDO0lBRUQsaUNBQWlDO0lBQ2pDLElBQUksSUFBSSxDQUFDLE9BQU8sSUFBSSxTQUFTLElBQUksSUFBSSxDQUFDLE9BQU8sR0FBRyxDQUFDLEVBQUUsQ0FBQztRQUNsRCxNQUFNLFdBQVcsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sR0FBRyxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsR0FBRyxDQUFDO1FBQzVELE1BQU0sU0FBUyxHQUFHLElBQUksQ0FBQyxDQUFDLGdDQUFnQztRQUV4RCxJQUFJLElBQUksQ0FBQyxHQUFHLENBQUMsU0FBUyxHQUFHLFdBQVcsQ0FBQyxHQUFHLFNBQVMsRUFBRSxDQUFDO1lBQ2xELFFBQVEsQ0FBQyxJQUFJLENBQ1gsY0FBYyxTQUFTLDRCQUE0QixXQUFXLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxHQUFHO2dCQUM1RSxtQkFBbUIsVUFBVSxLQUFLLElBQUksQ0FBQyxPQUFPLElBQUksQ0FDbkQsQ0FBQztRQUNKLENBQUM7SUFDSCxDQUFDO0lBRUQsd0JBQXdCO0lBQ3hCLElBQUksSUFBSSxDQUFDLGdCQUFnQixJQUFJLFdBQVcsRUFBRSxDQUFDO1FBQ3pDLElBQUksQ0FBQyxJQUFJLENBQUMsZ0JBQWdCLENBQUMsUUFBUSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUM7WUFDakQsTUFBTSxDQUFDLElBQUksQ0FDVCxlQUFlLFVBQVUsbUNBQW1DLFdBQVcsS0FBSztnQkFDNUUsc0JBQXNCLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FDekQsQ0FBQztRQUNKLENBQUM7SUFDSCxDQUFDO0lBRUQsZ0NBQWdDO0lBQ2hDLElBQUksSUFBSSxDQUFDLHFCQUFxQixJQUFJLFNBQVMsSUFBSSxTQUFTLEdBQUcsQ0FBQyxFQUFFLENBQUM7UUFDN0QsUUFBUSxDQUFDLElBQUksQ0FDWCxlQUFlLFVBQVUsdURBQXVEO1lBQ2hGLHlDQUF5QyxDQUMxQyxDQUFDO0lBQ0osQ0FBQztJQUVELE9BQU87UUFDTCxPQUFPLEVBQUUsTUFBTSxDQUFDLE1BQU0sS0FBSyxDQUFDO1FBQzVCLE1BQU07UUFDTixRQUFRO0tBQ1QsQ0FBQztBQUNKLENBQUM7QUFFRDs7R0FFRztBQUNILE1BQU0sVUFBVSx3QkFBd0IsQ0FBQyxVQUF1QjtJQUM5RCxNQUFNLElBQUksR0FBRyxpQkFBaUIsQ0FBQyxVQUFVLENBQUMsQ0FBQztJQUMzQyxPQUFPLElBQUksQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUMsd0JBQXdCLFVBQVUsRUFBRSxDQUFDO0FBQ3hFLENBQUM7QUFFRDs7R0FFRztBQUNILE1BQU0sVUFBVSxpQkFBaUIsQ0FBQyxNQUlqQztJQUNDLE1BQU0sRUFBRSxPQUFPLEVBQUUsV0FBVyxFQUFFLFNBQVMsRUFBRSxHQUFHLE1BQU0sQ0FBQztJQUVuRCx1Q0FBdUM7SUFDdkMsSUFBSSxXQUFXLEtBQUssVUFBVSxJQUFJLFdBQVcsS0FBSyxRQUFRLEVBQUUsQ0FBQztRQUMzRCxPQUFPLEVBQUUsQ0FBQztJQUNaLENBQUM7SUFFRCxpQkFBaUI7SUFDakIsSUFBSSxXQUFXLEtBQUssZ0JBQWdCLElBQUksV0FBVyxLQUFLLGVBQWUsRUFBRSxDQUFDO1FBQ3hFLE9BQU8sRUFBRSxDQUFDO0lBQ1osQ0FBQztJQUVELG9CQUFvQjtJQUNwQixJQUFJLFdBQVcsS0FBSyxVQUFVLElBQUksT0FBTyxLQUFLLEVBQUUsRUFBRSxDQUFDO1FBQ2pELE9BQU8sRUFBRSxDQUFDO0lBQ1osQ0FBQztJQUVELHVCQUF1QjtJQUN2QixJQUFJLFNBQVMsSUFBSSxPQUFPLEtBQUssRUFBRSxFQUFFLENBQUM7UUFDaEMsT0FBTyxDQUFDLENBQUM7SUFDWCxDQUFDO0lBRUQsMEJBQTBCO0lBQzFCLElBQUksT0FBTyxLQUFLLEVBQUUsRUFBRSxDQUFDO1FBQ25CLE9BQU8sQ0FBQyxDQUFDO0lBQ1gsQ0FBQztJQUVELElBQUksT0FBTyxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQ2xCLE9BQU8sQ0FBQyxDQUFDO0lBQ1gsQ0FBQztJQUVELGdDQUFnQztJQUNoQyxJQUFJLE9BQU8sS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNsQixPQUFPLEVBQUUsQ0FBQztJQUNaLENBQUM7SUFFRCw0QkFBNEI7SUFDNUIsT0FBTyxDQUFDLENBQUM7QUFDWCxDQUFDO0FBRUQ7O0dBRUc7QUFDSCxNQUFNLFVBQVUsNkJBQTZCLENBQUMsS0FNNUM7SUFDQSxNQUFNLE1BQU0sR0FBYSxFQUFFLENBQUM7SUFDNUIsTUFBTSxRQUFRLEdBQWEsRUFBRSxDQUFDO0lBRTlCLG1EQUFtRDtJQUNuRCxNQUFNLFVBQVUsR0FBRyxLQUFLLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLFVBQVUsS0FBSyxFQUFFLENBQUMsQ0FBQztJQUM5RCxNQUFNLFFBQVEsR0FBRyxLQUFLLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsRUFBRSxFQUFFLEVBQUUsRUFBRSxDQUFDLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDO0lBRWpGLElBQUksVUFBVSxJQUFJLFFBQVEsRUFBRSxDQUFDO1FBQzNCLFFBQVEsQ0FBQyxJQUFJLENBQ1gsZ0VBQWdFO1lBQ2hFLDZCQUE2QixDQUM5QixDQUFDO0lBQ0osQ0FBQztJQUVELHVDQUF1QztJQUN2QyxNQUFNLGdCQUFnQixHQUFHLEtBQUssQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsVUFBVSxLQUFLLEVBQUUsQ0FBQyxDQUFDO0lBQ3BFLElBQUksZ0JBQWdCLEVBQUUsQ0FBQztRQUNyQixNQUFNLGtCQUFrQixHQUFHLEtBQUssQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsVUFBVSxLQUFLLEVBQUUsQ0FBQyxDQUFDO1FBQ3hFLElBQUksa0JBQWtCLENBQUMsTUFBTSxHQUFHLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztZQUN4QyxNQUFNLENBQUMsSUFBSSxDQUNULDhFQUE4RTtnQkFDOUUsMkNBQTJDLENBQzVDLENBQUM7UUFDSixDQUFDO0lBQ0gsQ0FBQztJQUVELE9BQU87UUFDTCxPQUFPLEVBQUUsTUFBTSxDQUFDLE1BQU0sS0FBSyxDQUFDO1FBQzVCLE1BQU07UUFDTixRQUFRO0tBQ1QsQ0FBQztBQUNKLENBQUM7QUFFRDs7R0FFRztBQUNILE1BQU0sVUFBVSxvQkFBb0IsQ0FBQyxVQUF1QjtJQUMxRCxNQUFNLElBQUksR0FBRyxpQkFBaUIsQ0FBQyxVQUFVLENBQUMsQ0FBQztJQUMzQyxPQUFPLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMscUJBQXFCLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQztBQUNwRCxDQUFDO0FBRUQ7O0dBRUc7QUFDSCxNQUFNLFVBQVUsaUJBQWlCO0lBQy9CLE9BQU8sTUFBTSxDQUFDLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQWdCLENBQUMsQ0FBQztBQUMzRSxDQUFDIn0=

package/dist_ts/skr.security.d.ts

@@ -0,0 +1,65 @@
+export interface ISigningOptions {
+    certificatePem?: string;
+    privateKeyPem?: string;
+    privateKeyPassphrase?: string;
+    timestampServerUrl?: string;
+    includeTimestamp?: boolean;
+}
+export interface ISignatureResult {
+    signature: string;
+    signatureFormat: 'CAdES-B' | 'CAdES-T' | 'CAdES-LT';
+    signingTime: string;
+    certificateChain?: string[];
+    timestampToken?: string;
+    timestampTime?: string;
+}
+export interface ITimestampResponse {
+    token: string;
+    time: string;
+    serverUrl: string;
+    hashAlgorithm: string;
+}
+export declare class SecurityManager {
+    private options;
+    private logger;
+    constructor(options?: ISigningOptions);
+    /**
+     * Creates a CAdES-B (Basic) signature for data
+     */
+    createCadesSignature(data: Buffer | string, certificatePem?: string, privateKeyPem?: string): Promise<ISignatureResult>;
+    /**
+     * Requests an RFC 3161 timestamp from a TSA
+     */
+    requestTimestamp(dataHash: string | Buffer): Promise<ITimestampResponse>;
+    /**
+     * Creates a timestamp request (simplified version)
+     */
+    private createTimestampRequest;
+    /**
+     * Sends timestamp request to TSA server
+     */
+    private sendTimestampRequest;
+    /**
+     * Verifies a CAdES signature
+     */
+    verifyCadesSignature(data: Buffer | string, signature: string, certificatePem?: string): Promise<boolean>;
+    /**
+     * Generates a self-signed certificate for testing
+     */
+    generateSelfSignedCertificate(commonName?: string, validDays?: number): Promise<{
+        certificate: string;
+        privateKey: string;
+    }>;
+    /**
+     * Creates a detached signature file
+     */
+    createDetachedSignature(dataPath: string, outputPath: string): Promise<void>;
+    /**
+     * Verifies a detached signature file
+     */
+    verifyDetachedSignature(dataPath: string, signaturePath: string): Promise<boolean>;
+    /**
+     * Adds Long-Term Validation (LTV) information
+     */
+    addLtvInformation(signature: ISignatureResult, ocspResponse?: Buffer, crlData?: Buffer): Promise<ISignatureResult>;
+}

package/dist_ts/skr.security.js

@@ -0,0 +1,319 @@
+import * as plugins from './plugins.js';
+import * as path from 'path';
+import * as crypto from 'crypto';
+import * as https from 'https';
+export class SecurityManager {
+    constructor(options = {}) {
+        this.options = {
+            timestampServerUrl: options.timestampServerUrl || 'http://timestamp.digicert.com',
+            includeTimestamp: options.includeTimestamp !== false,
+            ...options
+        };
+        this.logger = new plugins.smartlog.ConsoleLog();
+    }
+    /**
+     * Creates a CAdES-B (Basic) signature for data
+     */
+    async createCadesSignature(data, certificatePem, privateKeyPem) {
+        const cert = certificatePem || this.options.certificatePem;
+        const key = privateKeyPem || this.options.privateKeyPem;
+        if (!cert || !key) {
+            throw new Error('Certificate and private key are required for signing');
+        }
+        try {
+            // Parse certificate and key
+            const certificate = plugins.nodeForge.pki.certificateFromPem(cert);
+            const privateKey = this.options.privateKeyPassphrase
+                ? plugins.nodeForge.pki.decryptRsaPrivateKey(key, this.options.privateKeyPassphrase)
+                : plugins.nodeForge.pki.privateKeyFromPem(key);
+            // Create PKCS#7 signed data (CMS)
+            const p7 = plugins.nodeForge.pkcs7.createSignedData();
+            // Add content
+            if (typeof data === 'string') {
+                p7.content = plugins.nodeForge.util.createBuffer(data, 'utf8');
+            }
+            else {
+                p7.content = plugins.nodeForge.util.createBuffer(data.toString('latin1'));
+            }
+            // Add certificate
+            p7.addCertificate(certificate);
+            // Add signer
+            p7.addSigner({
+                key: privateKey,
+                certificate: certificate,
+                digestAlgorithm: plugins.nodeForge.pki.oids.sha256,
+                authenticatedAttributes: [
+                    {
+                        type: plugins.nodeForge.pki.oids.contentType,
+                        value: plugins.nodeForge.pki.oids.data
+                    },
+                    {
+                        type: plugins.nodeForge.pki.oids.messageDigest
+                    },
+                    {
+                        type: plugins.nodeForge.pki.oids.signingTime,
+                        value: new Date().toISOString()
+                    }
+                ]
+            });
+            // Sign the data
+            p7.sign({ detached: true });
+            // Convert to PEM
+            const pem = plugins.nodeForge.pkcs7.messageToPem(p7);
+            // Extract base64 signature
+            const signature = pem
+                .replace(/-----BEGIN PKCS7-----/, '')
+                .replace(/-----END PKCS7-----/, '')
+                .replace(/\r?\n/g, '');
+            const result = {
+                signature: signature,
+                signatureFormat: 'CAdES-B',
+                signingTime: new Date().toISOString(),
+                certificateChain: [cert]
+            };
+            // Add timestamp if requested
+            if (this.options.includeTimestamp && this.options.timestampServerUrl) {
+                try {
+                    const timestampResponse = await this.requestTimestamp(signature);
+                    result.timestampToken = timestampResponse.token;
+                    result.timestampTime = timestampResponse.time;
+                    result.signatureFormat = 'CAdES-T';
+                }
+                catch (error) {
+                    this.logger.log('warn', `Failed to obtain timestamp: ${error}`);
+                }
+            }
+            return result;
+        }
+        catch (error) {
+            throw new Error(`Failed to create CAdES signature: ${error}`);
+        }
+    }
+    /**
+     * Requests an RFC 3161 timestamp from a TSA
+     */
+    async requestTimestamp(dataHash) {
+        try {
+            // Create hash of the data
+            let hash;
+            if (typeof dataHash === 'string') {
+                hash = crypto.createHash('sha256').update(dataHash).digest();
+            }
+            else {
+                hash = crypto.createHash('sha256').update(dataHash).digest();
+            }
+            // Create timestamp request (simplified - in production use proper ASN.1 encoding)
+            const tsRequest = this.createTimestampRequest(hash);
+            // Send request to TSA
+            const response = await this.sendTimestampRequest(tsRequest);
+            return {
+                token: response.toString('base64'),
+                time: new Date().toISOString(),
+                serverUrl: this.options.timestampServerUrl,
+                hashAlgorithm: 'sha256'
+            };
+        }
+        catch (error) {
+            throw new Error(`Failed to obtain timestamp: ${error}`);
+        }
+    }
+    /**
+     * Creates a timestamp request (simplified version)
+     */
+    createTimestampRequest(hash) {
+        // In production, use proper ASN.1 encoding library
+        // This is a simplified placeholder
+        const request = {
+            version: 1,
+            messageImprint: {
+                hashAlgorithm: { algorithm: '2.16.840.1.101.3.4.2.1' }, // SHA-256 OID
+                hashedMessage: hash
+            },
+            reqPolicy: null,
+            nonce: crypto.randomBytes(8),
+            certReq: true
+        };
+        // Convert to DER-encoded ASN.1 (simplified)
+        return Buffer.from(JSON.stringify(request));
+    }
+    /**
+     * Sends timestamp request to TSA server
+     */
+    async sendTimestampRequest(request) {
+        return new Promise((resolve, reject) => {
+            const url = new URL(this.options.timestampServerUrl);
+            const options = {
+                hostname: url.hostname,
+                port: url.port || 443,
+                path: url.pathname,
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/timestamp-query',
+                    'Content-Length': request.length
+                }
+            };
+            const req = https.request(options, (res) => {
+                const chunks = [];
+                res.on('data', (chunk) => chunks.push(chunk));
+                res.on('end', () => {
+                    const response = Buffer.concat(chunks);
+                    if (res.statusCode === 200) {
+                        resolve(response);
+                    }
+                    else {
+                        reject(new Error(`TSA server returned status ${res.statusCode}`));
+                    }
+                });
+            });
+            req.on('error', reject);
+            req.write(request);
+            req.end();
+        });
+    }
+    /**
+     * Verifies a CAdES signature
+     */
+    async verifyCadesSignature(data, signature, certificatePem) {
+        try {
+            // Add PEM headers if not present
+            let pemSignature = signature;
+            if (!signature.includes('BEGIN PKCS7')) {
+                pemSignature = `-----BEGIN PKCS7-----\n${signature}\n-----END PKCS7-----`;
+            }
+            // Parse the PKCS#7 message
+            const p7 = plugins.nodeForge.pkcs7.messageFromPem(pemSignature);
+            // Prepare content for verification
+            let content;
+            if (typeof data === 'string') {
+                content = plugins.nodeForge.util.createBuffer(data, 'utf8');
+            }
+            else {
+                content = plugins.nodeForge.util.createBuffer(data.toString('latin1'));
+            }
+            // Verify the signature
+            const verified = p7.verify({
+                content: content,
+                detached: true
+            });
+            return verified;
+        }
+        catch (error) {
+            this.logger.log('error', `Signature verification failed: ${error}`);
+            return false;
+        }
+    }
+    /**
+     * Generates a self-signed certificate for testing
+     */
+    async generateSelfSignedCertificate(commonName = 'SKR Export System', validDays = 365) {
+        const keys = plugins.nodeForge.pki.rsa.generateKeyPair(2048);
+        const cert = plugins.nodeForge.pki.createCertificate();
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = '01';
+        cert.validity.notBefore = new Date();
+        cert.validity.notAfter = new Date();
+        cert.validity.notAfter.setDate(cert.validity.notAfter.getDate() + validDays);
+        const attrs = [
+            { name: 'commonName', value: commonName },
+            { name: 'countryName', value: 'DE' },
+            { name: 'organizationName', value: 'SKR Export System' },
+            { shortName: 'OU', value: 'Accounting' }
+        ];
+        cert.setSubject(attrs);
+        cert.setIssuer(attrs);
+        cert.setExtensions([
+            {
+                name: 'basicConstraints',
+                cA: true
+            },
+            {
+                name: 'keyUsage',
+                keyCertSign: true,
+                digitalSignature: true,
+                nonRepudiation: true,
+                keyEncipherment: true,
+                dataEncipherment: true
+            },
+            {
+                name: 'extKeyUsage',
+                serverAuth: true,
+                clientAuth: true,
+                codeSigning: true,
+                emailProtection: true,
+                timeStamping: true
+            },
+            {
+                name: 'nsCertType',
+                client: true,
+                server: true,
+                email: true,
+                objsign: true,
+                sslCA: true,
+                emailCA: true,
+                objCA: true
+            },
+            {
+                name: 'subjectAltName',
+                altNames: [
+                    { type: 2, value: commonName }
+                ]
+            }
+        ]);
+        // Self-sign certificate
+        cert.sign(keys.privateKey, plugins.nodeForge.md.sha256.create());
+        // Convert to PEM
+        const certificatePem = plugins.nodeForge.pki.certificateToPem(cert);
+        const privateKeyPem = plugins.nodeForge.pki.privateKeyToPem(keys.privateKey);
+        return {
+            certificate: certificatePem,
+            privateKey: privateKeyPem
+        };
+    }
+    /**
+     * Creates a detached signature file
+     */
+    async createDetachedSignature(dataPath, outputPath) {
+        const data = await plugins.smartfile.fs.toBuffer(dataPath);
+        const signature = await this.createCadesSignature(data);
+        const signatureData = {
+            signature: signature.signature,
+            format: signature.signatureFormat,
+            signingTime: signature.signingTime,
+            timestamp: signature.timestampToken,
+            timestampTime: signature.timestampTime,
+            algorithm: 'SHA256withRSA',
+            signedFile: path.basename(dataPath)
+        };
+        await plugins.smartfile.memory.toFs(JSON.stringify(signatureData, null, 2), outputPath);
+    }
+    /**
+     * Verifies a detached signature file
+     */
+    async verifyDetachedSignature(dataPath, signaturePath) {
+        try {
+            const data = await plugins.smartfile.fs.toBuffer(dataPath);
+            const signatureJson = await plugins.smartfile.fs.toStringSync(signaturePath);
+            const signatureData = JSON.parse(signatureJson);
+            return await this.verifyCadesSignature(data, signatureData.signature);
+        }
+        catch (error) {
+            this.logger.log('error', `Failed to verify detached signature: ${error}`);
+            return false;
+        }
+    }
+    /**
+     * Adds Long-Term Validation (LTV) information
+     */
+    async addLtvInformation(signature, ocspResponse, crlData) {
+        // Add OCSP response and CRL data for long-term validation
+        const ltv = {
+            ...signature,
+            signatureFormat: 'CAdES-LT',
+            ocsp: ocspResponse?.toString('base64'),
+            crl: crlData?.toString('base64'),
+            ltvTime: new Date().toISOString()
+        };
+        return ltv;
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/skr.types.d.ts

@@ -1,7 +1,23 @@
 export type TAccountType = 'asset' | 'liability' | 'equity' | 'revenue' | 'expense';
 export type TSKRType = 'SKR03' | 'SKR04';
 export type TTransactionStatus = 'pending' | 'posted' | 'reversed';
+/**
+ * DATEV posting keys (Buchungsschlüssel) for German accounting
+ * These keys control automatic VAT booking and are checked in tax audits
+ */
+export type TPostingKey = 3 | 8 | 9 | 19 | 40 | 94;
 export type TReportType = 'trial_balance' | 'income_statement' | 'balance_sheet' | 'general_ledger' | 'cash_flow';
+/**
+ * Posting key validation rule
+ */
+export interface IPostingKeyRule {
+    key: TPostingKey;
+    description: string;
+    vatRate?: number;
+    requiresVAT: boolean;
+    disablesVATAutomatism: boolean;
+    allowedScenarios?: string[];
+}
 export interface IAccountData {
     accountNumber: string;
     accountName: string;
@@ -11,6 +27,7 @@ export interface IAccountData {
     description?: string;
     vatRate?: number;
     isActive?: boolean;
+    isAutomaticAccount?: boolean;
 }
 export interface ITransactionData {
     date: Date;
@@ -36,6 +53,7 @@ export interface IJournalEntryLine {
     credit?: number;
     description?: string;
     costCenter?: string;
+    postingKey: TPostingKey;
 }
 export interface ITrialBalanceEntry {
     accountNumber: string;
@@ -110,6 +128,7 @@ export interface ITransactionFilter {
 export interface IDatabaseConfig {
     mongoDbUrl: string;
     dbName?: string;
+    invoiceExportPath?: string;
 }
 export interface IReportParams {
     dateFrom?: Date;