@gerege-systems/eid-mongolia-sdk 0.10.0 → 0.11.0

package/README.md

@@ -254,7 +254,9 @@ try {
 Түр алдаа — `ApiError.retryable` үнэн, `retryAfterMs`-ийн (CA-ийн `Retry-After`, секунд эсвэл огноо) дараа давтана:
 prepare 429 `PDF_PREPARE_BUSY`, 503 `LTV_UNAVAILABLE` / `TSA_UNAVAILABLE`; document 503 `DOCUMENT_PENDING`,
 `TSA_UNAVAILABLE`, `LTV_UNAVAILABLE` (`RETRYABLE_ERROR_CODES`). `headers` — хариуны header. PDF дуудлагын хугацаа
-`pdfTimeoutMs` (анхдагч 80000).
+`pdfTimeoutMs` (анхдагч 80000). `pdf.document` санах ойд `pdfMaxBytes` (анхдагч `DEFAULT_PDF_MAX_BYTES` = 64 MiB)
+хүртэл уншина; хэтэрвэл `ResponseTooLargeError`. JSON хариу 4 MiB-ээс хэтэрвэл мөн `ResponseTooLargeError` (таслахгүй).
+`getRepresentations`-ийн `raw` — серверийн түүхий JSON.
 
 Олон талт гэрээ: А байгууллагын гаралтыг өөрчлөлтгүй Б-ийн `prepare`-д (`docID`, өөр `onBehalfOf`) илгээнэ.
 Session-ий `onBehalfOf` блок (`role`/`rightType`) нь хариу угсрах үеийн бүртгэл; `pdf.signer.onBehalfOf`/`claimedRole`
@@ -281,8 +283,16 @@ verifyTokenCertificates(res, csrAuth, csrSign); // гэрчилгээ бүр CSR
 const ch = await eid.token.authChallenge();
 const digest = tokenAuthDigest(ch.rpUUID, ch.challenge); // токен CKM_ECDSA → түүхий r||s
 const who = await eid.token.authVerify(ch.challengeId, authCertDer, rs);
+
+// токеноор PDF (PAdES, SIGN эрх) — session/утасгүй; байгууллагын токенд onBehalfOf = тухайн байгууллага
+const p = await eid.pdf.tokenPrepare({ pdf, fileName: "Гэрээ.pdf", signerEtsi, certificate: signCertDer });
+const rs = /* токен (PKCS#11): CKM_ECDSA(p.hashToSign) → түүхий r||s, 64 байт — p.expiresAt хүртэл */ new Uint8Array(64);
+const blk = await eid.pdf.tokenFinalize(p.signingId, rs); // READY; 503 DOCUMENT_PENDING → ижил rs-ийг дахин
+const signed = await eid.pdf.tokenDocument(p.signingId); // SHA-256 = blk.outSha256 тулга
 ```
 
+`/token/auth/*`, `/pdf/token/*` нь CA-д байгаа ч `/.well-known/eid`-д хараахан жагсаагдаагүй (гэрээний тест WARN).
+
 ## 4. QR ба ижил төхөөрөмж — device link v3
 
 Иргэн өөр төхөөрөмжийн дэлгэц дээрх **QR**-ийг утсаараа уншина, эсвэл RP-ийн сайт/аппыг eID апптай **ижил
@@ -371,7 +381,12 @@ OK ирж болзошгүй. Иймд `ResponseValidator`:
 
 1. `state === COMPLETE && endResult === OK`
 2. Иргэний гэрчилгээг **trust anchor (Mongolian National Root CA)** хүртэл chain-аар баталгаажуулна
-   (Root → National Issuing CA → Gerege Issuing CA → eID Mongolia Issuing CA → иргэн)
+   (Root → National Issuing CA → Gerege Issuing CA → eID Mongolia Issuing CA → иргэн) — RFC 5280 замын шалгалт
+   (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): issuer нэр + AKI/SKI + гарын үсэг, CA basicConstraints +
+   **pathLenConstraint** (04 нь `pathlen:0`), CA-ийн keyUsage keyCertSign, CA бүрийн хугацаа, **EKU** (auth →
+   clientAuth, sign → emailProtection — CA-ийн профайл; CA-д EKU байвал түүнд багтах), үл таних **critical
+   extension** → татгалзана. **Name constraints**-тэй CA гинжинд байвал fail-closed (CA-ийн бодит гинжинд алга).
+   `intermediatesPem`-д 02, 03, 04-ийг бүгдийг өгнө (хариунд гинж ирдэггүй). certificatePolicies-ийг шалгахгүй.
 3. Гэрчилгээ хүчинтэй хугацаанд + шаардсан `certificateLevel` (default `QUALIFIED`)
 4. Гарын үсгийг иргэний public key-ээр шалгана:
    - **auth** → ACSP_V2 payload (`smart-id|ACSP_V2|serverRandom|rpChallenge|userChallenge|B64(rpName)|B64(brokeredRpName)|B64(SHA-256(interactions))|interactionTypeUsed|initialCallbackUrl|flowType`, hash = хүсэлтийн `hashAlgorithm`) дээр — `flowType`, `userChallenge`, `serverRandom` ба алгоритмын downgrade-ийг мөн шалгана;
@@ -404,6 +419,7 @@ OK ирж болзошгүй. Иймд `ResponseValidator`:
 | `SessionFailedError` | endResult ≠ OK (TIMEOUT, USER_REFUSED…) — `.endResult`-оор салга |
 | `ValidationError` | cert chain/signature/level шалгалт бүтэлгүйтсэн |
 | `ApiError` | бусад HTTP алдаа (`.status`, `.body`, серверийн `.code`, `.retryAfterMs`, `.headers`, `.retryable` — ж: 404 `ORG_NOT_FOUND`) |
+| `ResponseTooLargeError` | хариу SDK-ийн хязгаараас их (JSON 4 MiB, PDF `pdfMaxBytes`) — `.op`, `.limit` |
 | `NetworkError` | timeout/сүлжээ (`.op` — таних тэмдэггүй зам, `.timeout`) |
 | `EidOidcError` | «eID-ээр нэвтрэх» (OIDC) — `.code`: `access_denied`, `login_required`, `state_mismatch`, `invalid_grant`, `invalid_id_token`, `server_error` … |
 | `DeviceLinkError` | device-link холбоос угсрах боломжгүй (`deviceLinkBase` https биш, token/secret/lang хэлбэр, төрөлд хэрэгтэй талбар дутуу) |

package/dist/{browser-BWCDj8xO.d.cts → browser-BVR6gtrx.d.cts}

@@ -225,6 +225,8 @@ interface Representation {
 interface RepresentationsResponse {
     personEtsi: string;
     representations: Representation[];
+    /** Серверийн түүхий JSON (SDK задлаагүй шинэ талбарт). */
+    raw?: unknown;
 }
 /** Session-ий байгууллагын блок — байгууллага + тухайн иргэний эрх (бүртгэлээс real-time). */
 interface OrgResult {
@@ -395,6 +397,15 @@ declare class NetworkError extends EidError {
         timeout?: boolean;
     });
 }
+/**
+ * Хариуны бие SDK-ийн хязгаараас их (JSON 4 MiB, PDF `pdfMaxBytes`) — бие таслагдаж задлагдахгүй. `op` — method +
+ * таних тэмдэггүй зам.
+ */
+declare class ResponseTooLargeError extends EidError {
+    readonly op: string;
+    readonly limit: number;
+    constructor(op: string, limit: number);
+}
 /**
  * Session амжилтгүй дууссан (endResult ≠ OK): TIMEOUT, USER_REFUSED*, DOCUMENT_UNUSABLE гм.
  * endResult-оор салгаж RP UI-д тохирох мессеж харуулна.
@@ -417,4 +428,4 @@ declare class ValidationError extends EidError {
 declare class DeviceLinkError extends EidError {
 }
 
-export { type AcspContext as A, isMobileUserAgent as B, type CertificateLevel as C, type DeviceLinkSession as D, EidError as E, type FlowType as F, openOrShowQR as G, type HashAlgorithm as H, type Interaction as I, parseRetryAfter as J, type NotificationSession as N, ON_BEHALF_ERROR_CODES as O, type PersonBlock as P, type RpCredentials as R, type SignatureAlgorithm as S, type TokenCertSessionBlock as T, ValidationError as V, type SessionResult as a, type PdfSessionBlock as b, type RepresentationsResponse as c, ApiError as d, AuthenticationError as e, DeviceLinkError as f, type DeviceLinkInput as g, type EndResult as h, ForbiddenError as i, type HttpErrorInit as j, type NavigatorLike as k, NetworkError as l, type OnBehalfErrorCode as m, type OpenOrShowQROptions as n, type OrgResult as o, type PdfDocumentStatus as p, type PdfSigner as q, RETRYABLE_ERROR_CODES as r, type Representation as s, type RetryableErrorCode as t, SessionFailedError as u, type SessionState as v, type SignatureAlgorithmParameters as w, type SignatureProtocol as x, type TokenCertStatus as y, deviceLink as z };
+export { type AcspContext as A, deviceLink as B, type CertificateLevel as C, type DeviceLinkSession as D, EidError as E, type FlowType as F, isMobileUserAgent as G, type HashAlgorithm as H, type Interaction as I, openOrShowQR as J, parseRetryAfter as K, type NotificationSession as N, ON_BEHALF_ERROR_CODES as O, type PersonBlock as P, type RpCredentials as R, type SignatureAlgorithm as S, type TokenCertSessionBlock as T, ValidationError as V, type SessionResult as a, type PdfSessionBlock as b, type RepresentationsResponse as c, ApiError as d, AuthenticationError as e, DeviceLinkError as f, type DeviceLinkInput as g, type EndResult as h, ForbiddenError as i, type HttpErrorInit as j, type NavigatorLike as k, NetworkError as l, type OnBehalfErrorCode as m, type OpenOrShowQROptions as n, type OrgResult as o, type PdfDocumentStatus as p, type PdfSigner as q, RETRYABLE_ERROR_CODES as r, type Representation as s, ResponseTooLargeError as t, type RetryableErrorCode as u, SessionFailedError as v, type SessionState as w, type SignatureAlgorithmParameters as x, type SignatureProtocol as y, type TokenCertStatus as z };

package/dist/{browser-BWCDj8xO.d.ts → browser-BVR6gtrx.d.ts}

@@ -225,6 +225,8 @@ interface Representation {
 interface RepresentationsResponse {
     personEtsi: string;
     representations: Representation[];
+    /** Серверийн түүхий JSON (SDK задлаагүй шинэ талбарт). */
+    raw?: unknown;
 }
 /** Session-ий байгууллагын блок — байгууллага + тухайн иргэний эрх (бүртгэлээс real-time). */
 interface OrgResult {
@@ -395,6 +397,15 @@ declare class NetworkError extends EidError {
         timeout?: boolean;
     });
 }
+/**
+ * Хариуны бие SDK-ийн хязгаараас их (JSON 4 MiB, PDF `pdfMaxBytes`) — бие таслагдаж задлагдахгүй. `op` — method +
+ * таних тэмдэггүй зам.
+ */
+declare class ResponseTooLargeError extends EidError {
+    readonly op: string;
+    readonly limit: number;
+    constructor(op: string, limit: number);
+}
 /**
  * Session амжилтгүй дууссан (endResult ≠ OK): TIMEOUT, USER_REFUSED*, DOCUMENT_UNUSABLE гм.
  * endResult-оор салгаж RP UI-д тохирох мессеж харуулна.
@@ -417,4 +428,4 @@ declare class ValidationError extends EidError {
 declare class DeviceLinkError extends EidError {
 }
 
-export { type AcspContext as A, isMobileUserAgent as B, type CertificateLevel as C, type DeviceLinkSession as D, EidError as E, type FlowType as F, openOrShowQR as G, type HashAlgorithm as H, type Interaction as I, parseRetryAfter as J, type NotificationSession as N, ON_BEHALF_ERROR_CODES as O, type PersonBlock as P, type RpCredentials as R, type SignatureAlgorithm as S, type TokenCertSessionBlock as T, ValidationError as V, type SessionResult as a, type PdfSessionBlock as b, type RepresentationsResponse as c, ApiError as d, AuthenticationError as e, DeviceLinkError as f, type DeviceLinkInput as g, type EndResult as h, ForbiddenError as i, type HttpErrorInit as j, type NavigatorLike as k, NetworkError as l, type OnBehalfErrorCode as m, type OpenOrShowQROptions as n, type OrgResult as o, type PdfDocumentStatus as p, type PdfSigner as q, RETRYABLE_ERROR_CODES as r, type Representation as s, type RetryableErrorCode as t, SessionFailedError as u, type SessionState as v, type SignatureAlgorithmParameters as w, type SignatureProtocol as x, type TokenCertStatus as y, deviceLink as z };
+export { type AcspContext as A, deviceLink as B, type CertificateLevel as C, type DeviceLinkSession as D, EidError as E, type FlowType as F, isMobileUserAgent as G, type HashAlgorithm as H, type Interaction as I, openOrShowQR as J, parseRetryAfter as K, type NotificationSession as N, ON_BEHALF_ERROR_CODES as O, type PersonBlock as P, type RpCredentials as R, type SignatureAlgorithm as S, type TokenCertSessionBlock as T, ValidationError as V, type SessionResult as a, type PdfSessionBlock as b, type RepresentationsResponse as c, ApiError as d, AuthenticationError as e, DeviceLinkError as f, type DeviceLinkInput as g, type EndResult as h, ForbiddenError as i, type HttpErrorInit as j, type NavigatorLike as k, NetworkError as l, type OnBehalfErrorCode as m, type OpenOrShowQROptions as n, type OrgResult as o, type PdfDocumentStatus as p, type PdfSigner as q, RETRYABLE_ERROR_CODES as r, type Representation as s, ResponseTooLargeError as t, type RetryableErrorCode as u, SessionFailedError as v, type SessionState as w, type SignatureAlgorithmParameters as x, type SignatureProtocol as y, type TokenCertStatus as z };

package/dist/browser.d.cts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, z as deviceLink, B as isMobileUserAgent, G as openOrShowQR } from './browser-BWCDj8xO.cjs';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.cjs';

package/dist/browser.d.ts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, z as deviceLink, B as isMobileUserAgent, G as openOrShowQR } from './browser-BWCDj8xO.js';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.js';

package/dist/browser.js

@@ -4,7 +4,7 @@ import {
   deviceLink,
   isMobileUserAgent,
   openOrShowQR
-} from "./chunk-YDVPZMAL.js";
+} from "./chunk-QPJDZLHR.js";
 export {
   DeviceLinkError,
   EidError,

package/dist/{chunk-YDVPZMAL.js → chunk-QPJDZLHR.js}

@@ -99,6 +99,15 @@ var NetworkError = class extends EidError {
     this.timeout = init?.timeout;
   }
 };
+var ResponseTooLargeError = class extends EidError {
+  constructor(op, limit) {
+    super(`${op}: \u0445\u0430\u0440\u0438\u0443 ${limit} \u0431\u0430\u0439\u0442\u0430\u0430\u0441 \u0438\u0445`);
+    this.op = op;
+    this.limit = limit;
+  }
+  op;
+  limit;
+};
 function maskPath(path) {
   return path.split(/[?#]/)[0].replace(/\/(etsi|document)\/[^/?#\s]+/g, "/$1/\u2026");
 }
@@ -165,6 +174,7 @@ export {
   parseRetryAfter,
   ON_BEHALF_ERROR_CODES,
   NetworkError,
+  ResponseTooLargeError,
   maskPath,
   SessionFailedError,
   ValidationError,

package/dist/index.cjs

@@ -25,6 +25,7 @@ __export(index_exports, {
   AuthenticationError: () => AuthenticationError,
   CITIZEN_ISSUING_CA_SKI: () => CITIZEN_ISSUING_CA_SKI,
   DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
+  DEFAULT_PDF_MAX_BYTES: () => DEFAULT_PDF_MAX_BYTES,
   DEFAULT_PDF_TIMEOUT_MS: () => DEFAULT_PDF_TIMEOUT_MS,
   DeviceLinkError: () => DeviceLinkError,
   EID_ACR_ADVANCED: () => EID_ACR_ADVANCED,
@@ -42,6 +43,7 @@ __export(index_exports, {
   PdfApi: () => PdfApi,
   PersonApi: () => PersonApi,
   RETRYABLE_ERROR_CODES: () => RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError: () => ResponseTooLargeError,
   ResponseValidator: () => ResponseValidator,
   SessionApi: () => SessionApi,
   SessionFailedError: () => SessionFailedError,
@@ -174,6 +176,15 @@ var NetworkError = class extends EidError {
     this.timeout = init?.timeout;
   }
 };
+var ResponseTooLargeError = class extends EidError {
+  constructor(op, limit) {
+    super(`${op}: \u0445\u0430\u0440\u0438\u0443 ${limit} \u0431\u0430\u0439\u0442\u0430\u0430\u0441 \u0438\u0445`);
+    this.op = op;
+    this.limit = limit;
+  }
+  op;
+  limit;
+};
 function maskPath(path) {
   return path.split(/[?#]/)[0].replace(/\/(etsi|document)\/[^/?#\s]+/g, "/$1/\u2026");
 }
@@ -191,6 +202,7 @@ var DeviceLinkError = class extends EidError {
 
 // src/http.ts
 var DEFAULT_TIMEOUT_MS = 15e3;
+var MAX_JSON_BYTES = 4 << 20;
 var Http = class {
   constructor(cfg) {
     this.cfg = cfg;
@@ -206,14 +218,14 @@ var Http = class {
   postMultipart(path, form, timeoutMs) {
     return this.json("POST", path, form, void 0, timeoutMs);
   }
-  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-  async getBytes(path, timeoutMs) {
+  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+  async getBytes(path, timeoutMs, maxBytes = 64 << 20) {
     const res = await this.send("GET", path, void 0, void 0, timeoutMs);
-    return new Uint8Array(await res.arrayBuffer());
+    return readLimited(res, maxBytes, `GET ${maskPath(path)}`);
   }
   async json(method, path, body, contentType, timeoutMs) {
     const res = await this.send(method, path, body, contentType, timeoutMs);
-    const text = await res.text();
+    const text = new TextDecoder().decode(await readLimited(res, MAX_JSON_BYTES, `${method} ${maskPath(path)}`));
     return text ? JSON.parse(text) : {};
   }
   async send(method, path, body, contentType, timeoutMs) {
@@ -258,6 +270,34 @@ var Http = class {
     throw new ApiError(res.status, text, code, { headers, retryAfterMs });
   }
 };
+async function readLimited(res, limit, op) {
+  const declared = Number(res.headers.get("content-length") ?? NaN);
+  if (declared > limit) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new ResponseTooLargeError(op, limit);
+  }
+  if (!res.body) return new Uint8Array(0);
+  const reader = res.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > limit) {
+      await reader.cancel().catch(() => void 0);
+      throw new ResponseTooLargeError(op, limit);
+    }
+    chunks.push(value);
+  }
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const c of chunks) {
+    out.set(c, off);
+    off += c.byteLength;
+  }
+  return out;
+}
 function errorBody(text) {
   try {
     const v = JSON.parse(text);
@@ -294,7 +334,10 @@ var RP_ROUTES = {
 };
 var RP_ROUTES_UNDISCOVERED = {
   tokenAuthChallenge: { method: "POST", path: "/token/auth/challenge" },
-  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" }
+  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" },
+  pdfTokenPrepare: { method: "POST", path: "/pdf/token/prepare" },
+  pdfTokenFinalize: { method: "POST", path: "/pdf/token/{signingID}/finalize" },
+  pdfTokenDocument: { method: "GET", path: "/pdf/token/{signingID}/document" }
 };
 function routePath(route, ...args) {
   let i = 0;
@@ -642,6 +685,7 @@ var SessionApi = class {
 
 // src/pdf.ts
 var import_node_crypto2 = require("crypto");
+var DEFAULT_PDF_MAX_BYTES = 64 << 20;
 var DEFAULT_PDF_TIMEOUT_MS = 8e4;
 function rec3(v) {
   return v && typeof v === "object" ? v : {};
@@ -674,7 +718,7 @@ var PdfApi = class {
     const form = new FormData();
     form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
     form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS));
+    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.timeout));
     const receivedAt = Date.now();
     const vc = rec3(r.vc).value;
     const dl = rec3(r.deviceLink);
@@ -701,7 +745,75 @@ var PdfApi = class {
    * дараа дахин татна (`retryable`).
    */
   document(sessionId) {
-    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS);
+    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.timeout, this.maxBytes);
+  }
+  get timeout() {
+    return this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS;
+  }
+  get maxBytes() {
+    return this.defaults.maxBytes ?? DEFAULT_PDF_MAX_BYTES;
+  }
+  /**
+   * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+   * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+   * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+   * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+   * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+   */
+  async tokenPrepare(input) {
+    if (!input.pdf?.length || !input.certificate?.length || !input.signerEtsi?.trim() || !input.fileName?.trim()) {
+      throw new Error("eid: pdf token: pdf, certificate, signerEtsi, fileName \u0448\u0430\u0430\u0440\u0434\u043B\u0430\u0433\u0430\u0442\u0430\u0439");
+    }
+    const request = {
+      relyingPartyUUID: this.creds.rpUUID,
+      relyingPartyName: this.creds.rpName,
+      signer: { etsi: input.signerEtsi.trim() },
+      certificate: Buffer.from(input.certificate).toString("base64"),
+      fileName: input.fileName
+    };
+    if (input.docID?.trim()) request.docID = input.docID.trim();
+    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
+    const form = new FormData();
+    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
+    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
+    const raw = await this.http.postMultipart(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenPrepare), form, this.timeout);
+    const r = rec3(raw);
+    const hashToSign = new Uint8Array(Buffer.from(String(r.hashToSign ?? ""), "base64"));
+    if (!r.signingID || hashToSign.length !== 32) {
+      throw new ValidationError("pdf token prepare: signingID / hashToSign (32 \u0431\u0430\u0439\u0442) \u0431\u0443\u0440\u0443\u0443");
+    }
+    return {
+      signingId: String(r.signingID),
+      docId: String(r.docID ?? ""),
+      hashToSign,
+      hashAlgorithm: String(r.hashAlgorithm ?? ""),
+      signatureAlgorithm: String(r.signatureAlgorithm ?? ""),
+      signatureFormat: String(r.signatureFormat ?? ""),
+      expiresAt: String(r.expiresAt ?? ""),
+      raw
+    };
+  }
+  /**
+   * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+   * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+   * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+   * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+   */
+  async tokenFinalize(signingId, signature) {
+    if (signature?.length !== 64) throw new Error("eid: pdf token: signature \u043D\u044C \u0442\u04AF\u04AF\u0445\u0438\u0439 r||s 64 \u0431\u0430\u0439\u0442 \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439 (P-256, DER \u0431\u0438\u0448)");
+    const r = await this.http.post(
+      routePath(RP_ROUTES_UNDISCOVERED.pdfTokenFinalize, signingId),
+      { signature: Buffer.from(signature).toString("base64") },
+      this.timeout
+    );
+    return r;
+  }
+  /**
+   * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+   * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+   */
+  tokenDocument(signingId) {
+    return this.http.getBytes(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenDocument, signingId), this.timeout, this.maxBytes);
   }
   /**
    * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
@@ -735,7 +847,7 @@ var OrganizationApi = class {
   async getRepresentations(personEtsi) {
     const raw = await this.http.get(routePath(RP_ROUTES.orgRepresentations, personEtsi));
     const list = Array.isArray(raw.representations) ? raw.representations : [];
-    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list };
+    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list, raw };
   }
 };
 
@@ -887,6 +999,10 @@ function parseSubject(cert) {
   return out;
 }
 function certExtension(der, oid) {
+  return certExtensions(der).find((e) => e.oid === oid)?.value;
+}
+function certExtensions(der) {
+  const out = [];
   const top = tlv(der, 0, der.length);
   const tbs = tlv(der, top.start, top.end);
   let f = tlv(der, tbs.start, tbs.end);
@@ -900,16 +1016,20 @@ function certExtension(der, oid) {
         const ext = tlv(der, ep, seq.end);
         const id = tlv(der, ext.start, ext.end);
         let v = tlv(der, id.end, ext.end);
-        if (v.tag === 1) v = tlv(der, v.end, ext.end);
+        let critical = false;
+        if (v.tag === 1) {
+          critical = v.end > v.start && der[v.start] !== 0;
+          v = tlv(der, v.end, ext.end);
+        }
         if (v.tag !== 4) throw new ValidationError("extension: extnValue OCTET STRING \u0431\u0438\u0448");
-        if (oidOf(der, id) === oid) return der.subarray(v.start, v.end);
+        out.push({ oid: oidOf(der, id), critical, value: der.subarray(v.start, v.end) });
         ep = ext.end;
       }
-      return void 0;
+      return out;
     }
     pos = t.end;
   }
-  return void 0;
+  return out;
 }
 
 // src/token.ts
@@ -1259,7 +1379,7 @@ var ResponseValidator = class {
         );
       }
     } else {
-      this.verifyChain(leaf);
+      this.verifyChain(leaf, protocol === "ACSP_V2" ? EKU_CLIENT_AUTH : EKU_EMAIL_PROTECTION);
     }
     this.checkIssuer(leaf);
     return leaf;
@@ -1303,21 +1423,40 @@ var ResponseValidator = class {
     const need = rank[this.requiredLevel] ?? 2;
     if (got < need) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0442\u04AF\u0432\u0448\u0438\u043D \u0445\u04AF\u0440\u044D\u043B\u0446\u044D\u0445\u0433\u04AF\u0439: ${level} < ${this.requiredLevel}`);
   }
-  /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
-  verifyChain(leaf) {
-    let current = leaf;
-    const pool = [...this.intermediates, ...this.anchors];
-    for (let depth = 0; depth < 8; depth++) {
-      for (const anchor of this.anchors) {
-        if (isCa(anchor) && current.checkIssued(anchor) && current.verify(anchor.publicKey)) return;
+  /**
+   * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+   * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+   * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+   * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+   * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+   * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+   * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+   */
+  verifyChain(leaf, usage) {
+    const now = Math.min(Math.max(Date.now(), Date.parse(leaf.validFrom)), Date.parse(leaf.validTo));
+    const leafReason = criticalReason(leaf) ?? ekuReason(leaf, usage);
+    if (leafReason) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${leafReason}`);
+    let reason;
+    const extend = (cur, cas) => {
+      if (cas.length >= 8) return false;
+      for (const [cand, isAnchor] of [
+        ...this.anchors.map((c) => [c, true]),
+        ...this.intermediates.map((c) => [c, false])
+      ]) {
+        if (cas.includes(cand) || !signedBy(cur, cand)) continue;
+        const bad = caReason(cand, cas.length, now, usage);
+        if (bad) {
+          reason ??= bad;
+          continue;
+        }
+        if (isAnchor || extend(cand, [...cas, cand])) return true;
       }
-      const issuer = pool.find(
-        (c) => isCa(c) && current.checkIssued(c) && current.verify(c.publicKey)
-      );
-      if (!issuer) break;
-      current = issuer;
-    }
-    throw new ValidationError("\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439");
+      return false;
+    };
+    if (extend(leaf, [])) return;
+    throw new ValidationError(
+      reason ? `\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${reason}` : "\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439"
+    );
   }
   /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
   findIssuer(leaf) {
@@ -1528,6 +1667,79 @@ function authorityKeyId(cert) {
 function isCa(cert) {
   return cert.ca === true;
 }
+var EKU_ANY = "2.5.29.37.0";
+var EKU_CLIENT_AUTH = "1.3.6.1.5.5.7.3.2";
+var EKU_EMAIL_PROTECTION = "1.3.6.1.5.5.7.3.4";
+var OID_NAME_CONSTRAINTS = "2.5.29.30";
+var HANDLED_CRITICAL = /* @__PURE__ */ new Set([
+  "2.5.29.14",
+  // subjectKeyIdentifier
+  "2.5.29.15",
+  // keyUsage
+  "2.5.29.17",
+  // subjectAltName
+  "2.5.29.19",
+  // basicConstraints
+  "2.5.29.30",
+  // nameConstraints (CA-д — caReason fail-closed)
+  "2.5.29.31",
+  // cRLDistributionPoints
+  "2.5.29.32",
+  // certificatePolicies
+  "2.5.29.35",
+  // authorityKeyIdentifier
+  "2.5.29.37",
+  // extKeyUsage
+  "1.3.6.1.5.5.7.1.1"
+  // authorityInfoAccess
+]);
+function signedBy(child, cand) {
+  if (child.issuer !== cand.subject) return false;
+  const aki = authorityKeyId(child);
+  const ski = subjectKeyId(cand);
+  if (aki && ski && aki !== ski) return false;
+  try {
+    return child.verify(cand.publicKey);
+  } catch {
+    return false;
+  }
+}
+function criticalReason(cert) {
+  return certExtensions(cert.raw).some((e) => e.critical && !HANDLED_CRITICAL.has(e.oid)) ? "\u04AF\u043B \u0442\u0430\u043D\u0438\u0445 critical extension" : void 0;
+}
+function ekuReason(cert, usage) {
+  const eku = extKeyUsage(cert);
+  return eku.length && !eku.includes(usage) && !eku.includes(EKU_ANY) ? "\u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 ExtKeyUsage \u044D\u043D\u044D \u04AF\u0439\u043B\u0434\u044D\u043B\u0434 \u0442\u043E\u0445\u0438\u0440\u043E\u0445\u0433\u04AF\u0439 (\u0433\u0438\u043D\u0436\u0438\u0439\u043D EKU)" : void 0;
+}
+function caReason(ca, below, now, usage) {
+  if (!isCa(ca)) return "\u0437\u0430\u0432\u0441\u0440\u044B\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D CA \u0431\u0438\u0448 \u044D\u0441\u0432\u044D\u043B keyCertSign \u044D\u0440\u0445\u0433\u04AF\u0439";
+  if (certExtension(ca.raw, "2.5.29.15") && !(keyUsageBits(ca) & 4)) return "CA-\u0438\u0439\u043D KeyUsage-\u0434 keyCertSign \u0430\u043B\u0433\u0430";
+  const from = Date.parse(ca.validFrom);
+  const to = Date.parse(ca.validTo);
+  if (Number.isNaN(from) || Number.isNaN(to) || now < from || now > to) {
+    return "\u0433\u0438\u043D\u0436\u0438\u0439\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0434\u0443\u0443\u0441\u0441\u0430\u043D \u044D\u0441\u0432\u044D\u043B \u0445\u04AF\u0447\u0438\u043D\u0442\u044D\u0439 \u0431\u043E\u043B\u043E\u043E\u0433\u04AF\u0439";
+  }
+  const pathLen = basicConstraintsPathLen(ca);
+  if (pathLen !== void 0 && below > pathLen) return "pathLenConstraint \u0437\u04E9\u0440\u0447\u0441\u04E9\u043D (\u0437\u0430\u0432\u0441\u0440\u044B\u043D CA \u0445\u044D\u0442 \u043E\u043B\u043E\u043D)";
+  if (certExtension(ca.raw, OID_NAME_CONSTRAINTS)) return "CA-\u0434 name constraints \u0431\u0430\u0439\u043D\u0430 (SDK \u04AF\u043D\u044D\u043B\u0434\u044D\u0433\u0433\u04AF\u0439 \u2014 fail-closed)";
+  return criticalReason(ca) ?? ekuReason(ca, usage);
+}
+function basicConstraintsPathLen(cert) {
+  const v = certExtension(cert.raw, "2.5.29.19");
+  if (!v) return void 0;
+  const seq = tlv(v, 0, v.length);
+  for (let p = seq.start; p < seq.end; ) {
+    const t = tlv(v, p, seq.end);
+    if (t.tag === 2) {
+      if (t.end - t.start > 4 || (v[t.start] & 128) !== 0) throw new ValidationError("basicConstraints: pathLen \u0431\u0443\u0440\u0443\u0443");
+      let n = 0;
+      for (let i = t.start; i < t.end; i++) n = n * 256 + v[i];
+      return n;
+    }
+    p = t.end;
+  }
+  return void 0;
+}
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://rp.eidmongolia.mn";
@@ -1569,7 +1781,11 @@ var EidClient = class {
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });
     this.sign = new SignApi(http, cfg.credentials, { certificateLevel: level });
-    this.pdf = new PdfApi(http, cfg.credentials, { certificateLevel: level, timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS });
+    this.pdf = new PdfApi(http, cfg.credentials, {
+      certificateLevel: level,
+      timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS,
+      maxBytes: cfg.pdfMaxBytes && cfg.pdfMaxBytes > 0 ? cfg.pdfMaxBytes : DEFAULT_PDF_MAX_BYTES
+    });
     this.organization = new OrganizationApi(http);
     this.person = new PersonApi(http);
     this.token = new TokenApi(http, cfg.credentials);
@@ -1973,6 +2189,7 @@ function callbackParams(input) {
   AuthenticationError,
   CITIZEN_ISSUING_CA_SKI,
   DEFAULT_BASE_URL,
+  DEFAULT_PDF_MAX_BYTES,
   DEFAULT_PDF_TIMEOUT_MS,
   DeviceLinkError,
   EID_ACR_ADVANCED,
@@ -1990,6 +2207,7 @@ function callbackParams(input) {
   PdfApi,
   PersonApi,
   RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError,
   ResponseValidator,
   SessionApi,
   SessionFailedError,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BWCDj8xO.cjs';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as RetryableErrorCode, u as SessionFailedError, v as SessionState, w as SignatureAlgorithmParameters, x as SignatureProtocol, T as TokenCertSessionBlock, y as TokenCertStatus, V as ValidationError, z as deviceLink, B as isMobileUserAgent, G as openOrShowQR, J as parseRetryAfter } from './browser-BWCDj8xO.cjs';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.cjs';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.cjs';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -25,8 +25,8 @@ declare class Http {
     get(path: string, timeoutMs?: number): Promise<unknown>;
     /** multipart/form-data POST (Content-Type-ийг boundary-тай нь fetch тавина). JSON хариу. */
     postMultipart(path: string, form: FormData, timeoutMs?: number): Promise<unknown>;
-    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-    getBytes(path: string, timeoutMs?: number): Promise<Uint8Array>;
+    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+    getBytes(path: string, timeoutMs?: number, maxBytes?: number): Promise<Uint8Array>;
     private json;
     private send;
 }
@@ -153,7 +153,11 @@ interface PdfDefaults {
     certificateLevel: CertificateLevel;
     /** prepare / document дуудлагын хугацаа (мс); анхдагч {@link DEFAULT_PDF_TIMEOUT_MS}. */
     timeoutMs?: number;
+    /** document / tokenDocument-ийн санах ойд унших дээд хэмжээ (байт); анхдагч {@link DEFAULT_PDF_MAX_BYTES}. */
+    maxBytes?: number;
 }
+/** Гарын үсэгтэй PDF татахад санах ойд уншиж болох анхдагч дээд хэмжээ (64 MiB) — `ClientConfig.pdfMaxBytes`. */
+declare const DEFAULT_PDF_MAX_BYTES: number;
 /**
  * PAdES prepare / баримт татах нэг дуудлагын анхдагч хугацаа (мс). CA prepare нь ≤ 10 MiB уншиж, өмнөх гарын үсэг +
  * LTV өгөгдөл шалгаад push эхлүүлдэг; баримт татахад угсралтыг ≤ 30с хүлээдэг (PADES_SIGNING §3.4). 80с нь хоёуланд
@@ -209,6 +213,35 @@ interface PdfPrepareSession {
     /** SDK хариу хүлээн авсан мөч (ms epoch) — QR-ийн `receivedAt` ({@link buildDeviceLink}). */
     receivedAt: number;
 }
+/** USB токены PAdES — POST /pdf/token/prepare-ийн оролт. */
+interface PdfTokenPrepareInput {
+    /** Эх PDF (≤ 10 223 616 байт). */
+    pdf: Uint8Array;
+    /** Баримтын нэр (≤ 120 тэмдэгт, заавал). */
+    fileName: string;
+    /** Иргэний ETSI (`PNOMN-…`) — токены гэрчилгээний SERIALNUMBER-тэй таарна. */
+    signerEtsi: string;
+    /** Токены SIGN гэрчилгээ (DER): eID Mongolia Issuing CA-аас, ACTIVE токенд холбогдсон. */
+    certificate: Uint8Array;
+    /** Олон гарын үсэгтэй баримтын docID (заавал биш, UUID). */
+    docID?: string;
+    /** Байгууллагын токенд ЗААВАЛ тухайн байгууллага (`NTRMN-…`); хувийн токенд хоосон. Зөрвөл 403 TOKEN_ORG_MISMATCH. */
+    onBehalfOf?: string;
+}
+/** POST /pdf/token/prepare-ийн хариу. */
+interface PdfTokenPrepareSession {
+    signingId: string;
+    docId: string;
+    /** Токеноор зурах 32 байт (SHA-256 DTBS): CKM_ECDSA (prehashed) → түүхий r||s (64 байт). */
+    hashToSign: Uint8Array;
+    hashAlgorithm: string;
+    signatureAlgorithm: string;
+    /** "RAW_RS". */
+    signatureFormat: string;
+    /** tokenFinalize-ийн эцсийн хугацаа (prepare-ээс 10 мин), ISO-8601. */
+    expiresAt: string;
+    raw: unknown;
+}
 declare class PdfApi {
     private readonly http;
     private readonly creds;
@@ -226,6 +259,28 @@ declare class PdfApi {
      * дараа дахин татна (`retryable`).
      */
     document(sessionId: string): Promise<Uint8Array>;
+    private get timeout();
+    private get maxBytes();
+    /**
+     * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+     * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+     * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+     * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+     * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+     */
+    tokenPrepare(input: PdfTokenPrepareInput): Promise<PdfTokenPrepareSession>;
+    /**
+     * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+     * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+     * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+     * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+     */
+    tokenFinalize(signingId: string, signature: Uint8Array): Promise<PdfSessionBlock>;
+    /**
+     * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+     * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+     */
+    tokenDocument(signingId: string): Promise<Uint8Array>;
     /**
      * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
      * `expected` — poll-ийн `result.pdf` блок (`documentStatus` READY + `outSha256` заавал) эсвэл SHA-256 hex.
@@ -696,7 +751,15 @@ declare class ResponseValidator {
     private checkIssuer;
     private checkValidity;
     private checkLevel;
-    /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
+    /**
+     * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+     * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+     * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+     * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+     * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+     * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+     * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+     */
     private verifyChain;
     /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
     private findIssuer;
@@ -734,6 +797,11 @@ interface ClientConfig {
     timeoutMs?: number;
     /** PAdES prepare / баримт татах дуудлагын хугацаа (мс). Анхдагч 80000 ({@link DEFAULT_PDF_TIMEOUT_MS}). */
     pdfTimeoutMs?: number;
+    /**
+     * `pdf.document` / `pdf.tokenDocument`-ийн санах ойд унших дээд хэмжээ (байт). Анхдагч 64 MiB
+     * ({@link DEFAULT_PDF_MAX_BYTES}); хэтэрвэл `ResponseTooLargeError`.
+     */
+    pdfMaxBytes?: number;
     /** undici Dispatcher (mTLS client cert). */
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
@@ -989,4 +1057,4 @@ declare class EidOidcClient {
 /** PKCE S256: `BASE64URL(SHA-256(ASCII(code_verifier)))` (RFC 7636 §4.2). */
 declare function pkceChallenge(codeVerifier: string): Promise<string>;
 
-export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };
+export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_MAX_BYTES, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PdfTokenPrepareInput, type PdfTokenPrepareSession, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BWCDj8xO.js';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as RetryableErrorCode, u as SessionFailedError, v as SessionState, w as SignatureAlgorithmParameters, x as SignatureProtocol, T as TokenCertSessionBlock, y as TokenCertStatus, V as ValidationError, z as deviceLink, B as isMobileUserAgent, G as openOrShowQR, J as parseRetryAfter } from './browser-BWCDj8xO.js';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.js';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.js';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -25,8 +25,8 @@ declare class Http {
     get(path: string, timeoutMs?: number): Promise<unknown>;
     /** multipart/form-data POST (Content-Type-ийг boundary-тай нь fetch тавина). JSON хариу. */
     postMultipart(path: string, form: FormData, timeoutMs?: number): Promise<unknown>;
-    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-    getBytes(path: string, timeoutMs?: number): Promise<Uint8Array>;
+    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+    getBytes(path: string, timeoutMs?: number, maxBytes?: number): Promise<Uint8Array>;
     private json;
     private send;
 }
@@ -153,7 +153,11 @@ interface PdfDefaults {
     certificateLevel: CertificateLevel;
     /** prepare / document дуудлагын хугацаа (мс); анхдагч {@link DEFAULT_PDF_TIMEOUT_MS}. */
     timeoutMs?: number;
+    /** document / tokenDocument-ийн санах ойд унших дээд хэмжээ (байт); анхдагч {@link DEFAULT_PDF_MAX_BYTES}. */
+    maxBytes?: number;
 }
+/** Гарын үсэгтэй PDF татахад санах ойд уншиж болох анхдагч дээд хэмжээ (64 MiB) — `ClientConfig.pdfMaxBytes`. */
+declare const DEFAULT_PDF_MAX_BYTES: number;
 /**
  * PAdES prepare / баримт татах нэг дуудлагын анхдагч хугацаа (мс). CA prepare нь ≤ 10 MiB уншиж, өмнөх гарын үсэг +
  * LTV өгөгдөл шалгаад push эхлүүлдэг; баримт татахад угсралтыг ≤ 30с хүлээдэг (PADES_SIGNING §3.4). 80с нь хоёуланд
@@ -209,6 +213,35 @@ interface PdfPrepareSession {
     /** SDK хариу хүлээн авсан мөч (ms epoch) — QR-ийн `receivedAt` ({@link buildDeviceLink}). */
     receivedAt: number;
 }
+/** USB токены PAdES — POST /pdf/token/prepare-ийн оролт. */
+interface PdfTokenPrepareInput {
+    /** Эх PDF (≤ 10 223 616 байт). */
+    pdf: Uint8Array;
+    /** Баримтын нэр (≤ 120 тэмдэгт, заавал). */
+    fileName: string;
+    /** Иргэний ETSI (`PNOMN-…`) — токены гэрчилгээний SERIALNUMBER-тэй таарна. */
+    signerEtsi: string;
+    /** Токены SIGN гэрчилгээ (DER): eID Mongolia Issuing CA-аас, ACTIVE токенд холбогдсон. */
+    certificate: Uint8Array;
+    /** Олон гарын үсэгтэй баримтын docID (заавал биш, UUID). */
+    docID?: string;
+    /** Байгууллагын токенд ЗААВАЛ тухайн байгууллага (`NTRMN-…`); хувийн токенд хоосон. Зөрвөл 403 TOKEN_ORG_MISMATCH. */
+    onBehalfOf?: string;
+}
+/** POST /pdf/token/prepare-ийн хариу. */
+interface PdfTokenPrepareSession {
+    signingId: string;
+    docId: string;
+    /** Токеноор зурах 32 байт (SHA-256 DTBS): CKM_ECDSA (prehashed) → түүхий r||s (64 байт). */
+    hashToSign: Uint8Array;
+    hashAlgorithm: string;
+    signatureAlgorithm: string;
+    /** "RAW_RS". */
+    signatureFormat: string;
+    /** tokenFinalize-ийн эцсийн хугацаа (prepare-ээс 10 мин), ISO-8601. */
+    expiresAt: string;
+    raw: unknown;
+}
 declare class PdfApi {
     private readonly http;
     private readonly creds;
@@ -226,6 +259,28 @@ declare class PdfApi {
      * дараа дахин татна (`retryable`).
      */
     document(sessionId: string): Promise<Uint8Array>;
+    private get timeout();
+    private get maxBytes();
+    /**
+     * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+     * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+     * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+     * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+     * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+     */
+    tokenPrepare(input: PdfTokenPrepareInput): Promise<PdfTokenPrepareSession>;
+    /**
+     * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+     * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+     * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+     * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+     */
+    tokenFinalize(signingId: string, signature: Uint8Array): Promise<PdfSessionBlock>;
+    /**
+     * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+     * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+     */
+    tokenDocument(signingId: string): Promise<Uint8Array>;
     /**
      * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
      * `expected` — poll-ийн `result.pdf` блок (`documentStatus` READY + `outSha256` заавал) эсвэл SHA-256 hex.
@@ -696,7 +751,15 @@ declare class ResponseValidator {
     private checkIssuer;
     private checkValidity;
     private checkLevel;
-    /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
+    /**
+     * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+     * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+     * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+     * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+     * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+     * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+     * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+     */
     private verifyChain;
     /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
     private findIssuer;
@@ -734,6 +797,11 @@ interface ClientConfig {
     timeoutMs?: number;
     /** PAdES prepare / баримт татах дуудлагын хугацаа (мс). Анхдагч 80000 ({@link DEFAULT_PDF_TIMEOUT_MS}). */
     pdfTimeoutMs?: number;
+    /**
+     * `pdf.document` / `pdf.tokenDocument`-ийн санах ойд унших дээд хэмжээ (байт). Анхдагч 64 MiB
+     * ({@link DEFAULT_PDF_MAX_BYTES}); хэтэрвэл `ResponseTooLargeError`.
+     */
+    pdfMaxBytes?: number;
     /** undici Dispatcher (mTLS client cert). */
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
@@ -989,4 +1057,4 @@ declare class EidOidcClient {
 /** PKCE S256: `BASE64URL(SHA-256(ASCII(code_verifier)))` (RFC 7636 §4.2). */
 declare function pkceChallenge(codeVerifier: string): Promise<string>;
 
-export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };
+export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_MAX_BYTES, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PdfTokenPrepareInput, type PdfTokenPrepareSession, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };

package/dist/index.js

@@ -7,6 +7,7 @@ import {
   NetworkError,
   ON_BEHALF_ERROR_CODES,
   RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError,
   SessionFailedError,
   ValidationError,
   deviceLink,
@@ -14,10 +15,11 @@ import {
   maskPath,
   openOrShowQR,
   parseRetryAfter
-} from "./chunk-YDVPZMAL.js";
+} from "./chunk-QPJDZLHR.js";
 
 // src/http.ts
 var DEFAULT_TIMEOUT_MS = 15e3;
+var MAX_JSON_BYTES = 4 << 20;
 var Http = class {
   constructor(cfg) {
     this.cfg = cfg;
@@ -33,14 +35,14 @@ var Http = class {
   postMultipart(path, form, timeoutMs) {
     return this.json("POST", path, form, void 0, timeoutMs);
   }
-  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-  async getBytes(path, timeoutMs) {
+  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+  async getBytes(path, timeoutMs, maxBytes = 64 << 20) {
     const res = await this.send("GET", path, void 0, void 0, timeoutMs);
-    return new Uint8Array(await res.arrayBuffer());
+    return readLimited(res, maxBytes, `GET ${maskPath(path)}`);
   }
   async json(method, path, body, contentType, timeoutMs) {
     const res = await this.send(method, path, body, contentType, timeoutMs);
-    const text = await res.text();
+    const text = new TextDecoder().decode(await readLimited(res, MAX_JSON_BYTES, `${method} ${maskPath(path)}`));
     return text ? JSON.parse(text) : {};
   }
   async send(method, path, body, contentType, timeoutMs) {
@@ -85,6 +87,34 @@ var Http = class {
     throw new ApiError(res.status, text, code, { headers, retryAfterMs });
   }
 };
+async function readLimited(res, limit, op) {
+  const declared = Number(res.headers.get("content-length") ?? NaN);
+  if (declared > limit) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new ResponseTooLargeError(op, limit);
+  }
+  if (!res.body) return new Uint8Array(0);
+  const reader = res.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > limit) {
+      await reader.cancel().catch(() => void 0);
+      throw new ResponseTooLargeError(op, limit);
+    }
+    chunks.push(value);
+  }
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const c of chunks) {
+    out.set(c, off);
+    off += c.byteLength;
+  }
+  return out;
+}
 function errorBody(text) {
   try {
     const v = JSON.parse(text);
@@ -121,7 +151,10 @@ var RP_ROUTES = {
 };
 var RP_ROUTES_UNDISCOVERED = {
   tokenAuthChallenge: { method: "POST", path: "/token/auth/challenge" },
-  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" }
+  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" },
+  pdfTokenPrepare: { method: "POST", path: "/pdf/token/prepare" },
+  pdfTokenFinalize: { method: "POST", path: "/pdf/token/{signingID}/finalize" },
+  pdfTokenDocument: { method: "GET", path: "/pdf/token/{signingID}/document" }
 };
 function routePath(route, ...args) {
   let i = 0;
@@ -469,6 +502,7 @@ var SessionApi = class {
 
 // src/pdf.ts
 import { createHash as createHash2 } from "crypto";
+var DEFAULT_PDF_MAX_BYTES = 64 << 20;
 var DEFAULT_PDF_TIMEOUT_MS = 8e4;
 function rec3(v) {
   return v && typeof v === "object" ? v : {};
@@ -501,7 +535,7 @@ var PdfApi = class {
     const form = new FormData();
     form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
     form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS));
+    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.timeout));
     const receivedAt = Date.now();
     const vc = rec3(r.vc).value;
     const dl = rec3(r.deviceLink);
@@ -528,7 +562,75 @@ var PdfApi = class {
    * дараа дахин татна (`retryable`).
    */
   document(sessionId) {
-    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS);
+    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.timeout, this.maxBytes);
+  }
+  get timeout() {
+    return this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS;
+  }
+  get maxBytes() {
+    return this.defaults.maxBytes ?? DEFAULT_PDF_MAX_BYTES;
+  }
+  /**
+   * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+   * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+   * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+   * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+   * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+   */
+  async tokenPrepare(input) {
+    if (!input.pdf?.length || !input.certificate?.length || !input.signerEtsi?.trim() || !input.fileName?.trim()) {
+      throw new Error("eid: pdf token: pdf, certificate, signerEtsi, fileName \u0448\u0430\u0430\u0440\u0434\u043B\u0430\u0433\u0430\u0442\u0430\u0439");
+    }
+    const request = {
+      relyingPartyUUID: this.creds.rpUUID,
+      relyingPartyName: this.creds.rpName,
+      signer: { etsi: input.signerEtsi.trim() },
+      certificate: Buffer.from(input.certificate).toString("base64"),
+      fileName: input.fileName
+    };
+    if (input.docID?.trim()) request.docID = input.docID.trim();
+    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
+    const form = new FormData();
+    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
+    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
+    const raw = await this.http.postMultipart(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenPrepare), form, this.timeout);
+    const r = rec3(raw);
+    const hashToSign = new Uint8Array(Buffer.from(String(r.hashToSign ?? ""), "base64"));
+    if (!r.signingID || hashToSign.length !== 32) {
+      throw new ValidationError("pdf token prepare: signingID / hashToSign (32 \u0431\u0430\u0439\u0442) \u0431\u0443\u0440\u0443\u0443");
+    }
+    return {
+      signingId: String(r.signingID),
+      docId: String(r.docID ?? ""),
+      hashToSign,
+      hashAlgorithm: String(r.hashAlgorithm ?? ""),
+      signatureAlgorithm: String(r.signatureAlgorithm ?? ""),
+      signatureFormat: String(r.signatureFormat ?? ""),
+      expiresAt: String(r.expiresAt ?? ""),
+      raw
+    };
+  }
+  /**
+   * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+   * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+   * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+   * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+   */
+  async tokenFinalize(signingId, signature) {
+    if (signature?.length !== 64) throw new Error("eid: pdf token: signature \u043D\u044C \u0442\u04AF\u04AF\u0445\u0438\u0439 r||s 64 \u0431\u0430\u0439\u0442 \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439 (P-256, DER \u0431\u0438\u0448)");
+    const r = await this.http.post(
+      routePath(RP_ROUTES_UNDISCOVERED.pdfTokenFinalize, signingId),
+      { signature: Buffer.from(signature).toString("base64") },
+      this.timeout
+    );
+    return r;
+  }
+  /**
+   * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+   * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+   */
+  tokenDocument(signingId) {
+    return this.http.getBytes(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenDocument, signingId), this.timeout, this.maxBytes);
   }
   /**
    * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
@@ -562,7 +664,7 @@ var OrganizationApi = class {
   async getRepresentations(personEtsi) {
     const raw = await this.http.get(routePath(RP_ROUTES.orgRepresentations, personEtsi));
     const list = Array.isArray(raw.representations) ? raw.representations : [];
-    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list };
+    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list, raw };
   }
 };
 
@@ -714,6 +816,10 @@ function parseSubject(cert) {
   return out;
 }
 function certExtension(der, oid) {
+  return certExtensions(der).find((e) => e.oid === oid)?.value;
+}
+function certExtensions(der) {
+  const out = [];
   const top = tlv(der, 0, der.length);
   const tbs = tlv(der, top.start, top.end);
   let f = tlv(der, tbs.start, tbs.end);
@@ -727,16 +833,20 @@ function certExtension(der, oid) {
         const ext = tlv(der, ep, seq.end);
         const id = tlv(der, ext.start, ext.end);
         let v = tlv(der, id.end, ext.end);
-        if (v.tag === 1) v = tlv(der, v.end, ext.end);
+        let critical = false;
+        if (v.tag === 1) {
+          critical = v.end > v.start && der[v.start] !== 0;
+          v = tlv(der, v.end, ext.end);
+        }
         if (v.tag !== 4) throw new ValidationError("extension: extnValue OCTET STRING \u0431\u0438\u0448");
-        if (oidOf(der, id) === oid) return der.subarray(v.start, v.end);
+        out.push({ oid: oidOf(der, id), critical, value: der.subarray(v.start, v.end) });
         ep = ext.end;
       }
-      return void 0;
+      return out;
     }
     pos = t.end;
   }
-  return void 0;
+  return out;
 }
 
 // src/token.ts
@@ -1086,7 +1196,7 @@ var ResponseValidator = class {
         );
       }
     } else {
-      this.verifyChain(leaf);
+      this.verifyChain(leaf, protocol === "ACSP_V2" ? EKU_CLIENT_AUTH : EKU_EMAIL_PROTECTION);
     }
     this.checkIssuer(leaf);
     return leaf;
@@ -1130,21 +1240,40 @@ var ResponseValidator = class {
     const need = rank[this.requiredLevel] ?? 2;
     if (got < need) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0442\u04AF\u0432\u0448\u0438\u043D \u0445\u04AF\u0440\u044D\u043B\u0446\u044D\u0445\u0433\u04AF\u0439: ${level} < ${this.requiredLevel}`);
   }
-  /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
-  verifyChain(leaf) {
-    let current = leaf;
-    const pool = [...this.intermediates, ...this.anchors];
-    for (let depth = 0; depth < 8; depth++) {
-      for (const anchor of this.anchors) {
-        if (isCa(anchor) && current.checkIssued(anchor) && current.verify(anchor.publicKey)) return;
+  /**
+   * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+   * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+   * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+   * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+   * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+   * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+   * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+   */
+  verifyChain(leaf, usage) {
+    const now = Math.min(Math.max(Date.now(), Date.parse(leaf.validFrom)), Date.parse(leaf.validTo));
+    const leafReason = criticalReason(leaf) ?? ekuReason(leaf, usage);
+    if (leafReason) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${leafReason}`);
+    let reason;
+    const extend = (cur, cas) => {
+      if (cas.length >= 8) return false;
+      for (const [cand, isAnchor] of [
+        ...this.anchors.map((c) => [c, true]),
+        ...this.intermediates.map((c) => [c, false])
+      ]) {
+        if (cas.includes(cand) || !signedBy(cur, cand)) continue;
+        const bad = caReason(cand, cas.length, now, usage);
+        if (bad) {
+          reason ??= bad;
+          continue;
+        }
+        if (isAnchor || extend(cand, [...cas, cand])) return true;
       }
-      const issuer = pool.find(
-        (c) => isCa(c) && current.checkIssued(c) && current.verify(c.publicKey)
-      );
-      if (!issuer) break;
-      current = issuer;
-    }
-    throw new ValidationError("\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439");
+      return false;
+    };
+    if (extend(leaf, [])) return;
+    throw new ValidationError(
+      reason ? `\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${reason}` : "\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439"
+    );
   }
   /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
   findIssuer(leaf) {
@@ -1355,6 +1484,79 @@ function authorityKeyId(cert) {
 function isCa(cert) {
   return cert.ca === true;
 }
+var EKU_ANY = "2.5.29.37.0";
+var EKU_CLIENT_AUTH = "1.3.6.1.5.5.7.3.2";
+var EKU_EMAIL_PROTECTION = "1.3.6.1.5.5.7.3.4";
+var OID_NAME_CONSTRAINTS = "2.5.29.30";
+var HANDLED_CRITICAL = /* @__PURE__ */ new Set([
+  "2.5.29.14",
+  // subjectKeyIdentifier
+  "2.5.29.15",
+  // keyUsage
+  "2.5.29.17",
+  // subjectAltName
+  "2.5.29.19",
+  // basicConstraints
+  "2.5.29.30",
+  // nameConstraints (CA-д — caReason fail-closed)
+  "2.5.29.31",
+  // cRLDistributionPoints
+  "2.5.29.32",
+  // certificatePolicies
+  "2.5.29.35",
+  // authorityKeyIdentifier
+  "2.5.29.37",
+  // extKeyUsage
+  "1.3.6.1.5.5.7.1.1"
+  // authorityInfoAccess
+]);
+function signedBy(child, cand) {
+  if (child.issuer !== cand.subject) return false;
+  const aki = authorityKeyId(child);
+  const ski = subjectKeyId(cand);
+  if (aki && ski && aki !== ski) return false;
+  try {
+    return child.verify(cand.publicKey);
+  } catch {
+    return false;
+  }
+}
+function criticalReason(cert) {
+  return certExtensions(cert.raw).some((e) => e.critical && !HANDLED_CRITICAL.has(e.oid)) ? "\u04AF\u043B \u0442\u0430\u043D\u0438\u0445 critical extension" : void 0;
+}
+function ekuReason(cert, usage) {
+  const eku = extKeyUsage(cert);
+  return eku.length && !eku.includes(usage) && !eku.includes(EKU_ANY) ? "\u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 ExtKeyUsage \u044D\u043D\u044D \u04AF\u0439\u043B\u0434\u044D\u043B\u0434 \u0442\u043E\u0445\u0438\u0440\u043E\u0445\u0433\u04AF\u0439 (\u0433\u0438\u043D\u0436\u0438\u0439\u043D EKU)" : void 0;
+}
+function caReason(ca, below, now, usage) {
+  if (!isCa(ca)) return "\u0437\u0430\u0432\u0441\u0440\u044B\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D CA \u0431\u0438\u0448 \u044D\u0441\u0432\u044D\u043B keyCertSign \u044D\u0440\u0445\u0433\u04AF\u0439";
+  if (certExtension(ca.raw, "2.5.29.15") && !(keyUsageBits(ca) & 4)) return "CA-\u0438\u0439\u043D KeyUsage-\u0434 keyCertSign \u0430\u043B\u0433\u0430";
+  const from = Date.parse(ca.validFrom);
+  const to = Date.parse(ca.validTo);
+  if (Number.isNaN(from) || Number.isNaN(to) || now < from || now > to) {
+    return "\u0433\u0438\u043D\u0436\u0438\u0439\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0434\u0443\u0443\u0441\u0441\u0430\u043D \u044D\u0441\u0432\u044D\u043B \u0445\u04AF\u0447\u0438\u043D\u0442\u044D\u0439 \u0431\u043E\u043B\u043E\u043E\u0433\u04AF\u0439";
+  }
+  const pathLen = basicConstraintsPathLen(ca);
+  if (pathLen !== void 0 && below > pathLen) return "pathLenConstraint \u0437\u04E9\u0440\u0447\u0441\u04E9\u043D (\u0437\u0430\u0432\u0441\u0440\u044B\u043D CA \u0445\u044D\u0442 \u043E\u043B\u043E\u043D)";
+  if (certExtension(ca.raw, OID_NAME_CONSTRAINTS)) return "CA-\u0434 name constraints \u0431\u0430\u0439\u043D\u0430 (SDK \u04AF\u043D\u044D\u043B\u0434\u044D\u0433\u0433\u04AF\u0439 \u2014 fail-closed)";
+  return criticalReason(ca) ?? ekuReason(ca, usage);
+}
+function basicConstraintsPathLen(cert) {
+  const v = certExtension(cert.raw, "2.5.29.19");
+  if (!v) return void 0;
+  const seq = tlv(v, 0, v.length);
+  for (let p = seq.start; p < seq.end; ) {
+    const t = tlv(v, p, seq.end);
+    if (t.tag === 2) {
+      if (t.end - t.start > 4 || (v[t.start] & 128) !== 0) throw new ValidationError("basicConstraints: pathLen \u0431\u0443\u0440\u0443\u0443");
+      let n = 0;
+      for (let i = t.start; i < t.end; i++) n = n * 256 + v[i];
+      return n;
+    }
+    p = t.end;
+  }
+  return void 0;
+}
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://rp.eidmongolia.mn";
@@ -1396,7 +1598,11 @@ var EidClient = class {
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });
     this.sign = new SignApi(http, cfg.credentials, { certificateLevel: level });
-    this.pdf = new PdfApi(http, cfg.credentials, { certificateLevel: level, timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS });
+    this.pdf = new PdfApi(http, cfg.credentials, {
+      certificateLevel: level,
+      timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS,
+      maxBytes: cfg.pdfMaxBytes && cfg.pdfMaxBytes > 0 ? cfg.pdfMaxBytes : DEFAULT_PDF_MAX_BYTES
+    });
     this.organization = new OrganizationApi(http);
     this.person = new PersonApi(http);
     this.token = new TokenApi(http, cfg.credentials);
@@ -1757,6 +1963,7 @@ export {
   AuthenticationError,
   CITIZEN_ISSUING_CA_SKI,
   DEFAULT_BASE_URL,
+  DEFAULT_PDF_MAX_BYTES,
   DEFAULT_PDF_TIMEOUT_MS,
   DeviceLinkError,
   EID_ACR_ADVANCED,
@@ -1774,6 +1981,7 @@ export {
   PdfApi,
   PersonApi,
   RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError,
   ResponseValidator,
   SessionApi,
   SessionFailedError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gerege-systems/eid-mongolia-sdk",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "e-ID Mongolia Relying Party SDK — иргэнээр утсаар нь нэвтрэлт ба хууль ёсны цахим гарын үсэг (RP-API v3, Smart-ID нийцтэй).",
   "license": "MIT",
   "type": "module",
@@ -29,7 +29,7 @@
   },
   "scripts": {
     "build": "tsup src/index.ts src/browser.ts --format esm,cjs --dts --clean",
-    "test": "npm run build && node --test --experimental-strip-types test/sdk.test.ts test/oidc.test.ts test/portal-gaps.test.ts",
+    "test": "npm run build && node --test --experimental-strip-types test/sdk.test.ts test/oidc.test.ts test/portal-gaps.test.ts test/chain.test.ts",
     "test:contract": "npm run build && node --experimental-strip-types test/contract.test.ts",
     "lint": "tsc --noEmit"
   },