@gerege-systems/eid-mongolia-sdk 0.10.0 → 0.12.0

package/dist/index.cjs

@@ -25,6 +25,7 @@ __export(index_exports, {
   AuthenticationError: () => AuthenticationError,
   CITIZEN_ISSUING_CA_SKI: () => CITIZEN_ISSUING_CA_SKI,
   DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
+  DEFAULT_PDF_MAX_BYTES: () => DEFAULT_PDF_MAX_BYTES,
   DEFAULT_PDF_TIMEOUT_MS: () => DEFAULT_PDF_TIMEOUT_MS,
   DeviceLinkError: () => DeviceLinkError,
   EID_ACR_ADVANCED: () => EID_ACR_ADVANCED,
@@ -42,6 +43,7 @@ __export(index_exports, {
   PdfApi: () => PdfApi,
   PersonApi: () => PersonApi,
   RETRYABLE_ERROR_CODES: () => RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError: () => ResponseTooLargeError,
   ResponseValidator: () => ResponseValidator,
   SessionApi: () => SessionApi,
   SessionFailedError: () => SessionFailedError,
@@ -174,6 +176,15 @@ var NetworkError = class extends EidError {
     this.timeout = init?.timeout;
   }
 };
+var ResponseTooLargeError = class extends EidError {
+  constructor(op, limit) {
+    super(`${op}: \u0445\u0430\u0440\u0438\u0443 ${limit} \u0431\u0430\u0439\u0442\u0430\u0430\u0441 \u0438\u0445`);
+    this.op = op;
+    this.limit = limit;
+  }
+  op;
+  limit;
+};
 function maskPath(path) {
   return path.split(/[?#]/)[0].replace(/\/(etsi|document)\/[^/?#\s]+/g, "/$1/\u2026");
 }
@@ -191,6 +202,7 @@ var DeviceLinkError = class extends EidError {
 
 // src/http.ts
 var DEFAULT_TIMEOUT_MS = 15e3;
+var MAX_JSON_BYTES = 4 << 20;
 var Http = class {
   constructor(cfg) {
     this.cfg = cfg;
@@ -206,14 +218,14 @@ var Http = class {
   postMultipart(path, form, timeoutMs) {
     return this.json("POST", path, form, void 0, timeoutMs);
   }
-  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-  async getBytes(path, timeoutMs) {
+  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+  async getBytes(path, timeoutMs, maxBytes = 64 << 20) {
     const res = await this.send("GET", path, void 0, void 0, timeoutMs);
-    return new Uint8Array(await res.arrayBuffer());
+    return readLimited(res, maxBytes, `GET ${maskPath(path)}`);
   }
   async json(method, path, body, contentType, timeoutMs) {
     const res = await this.send(method, path, body, contentType, timeoutMs);
-    const text = await res.text();
+    const text = new TextDecoder().decode(await readLimited(res, MAX_JSON_BYTES, `${method} ${maskPath(path)}`));
     return text ? JSON.parse(text) : {};
   }
   async send(method, path, body, contentType, timeoutMs) {
@@ -223,7 +235,8 @@ var Http = class {
       method,
       headers: {
         Authorization: `Bearer ${this.cfg.apiSecret}`,
-        ...contentType ? { "Content-Type": contentType } : {}
+        ...contentType ? { "Content-Type": contentType } : {},
+        ...this.cfg.language ? { "Accept-Language": this.cfg.language } : {}
       },
       body,
       signal: AbortSignal.timeout(timeoutMs ?? this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS)
@@ -258,6 +271,34 @@ var Http = class {
     throw new ApiError(res.status, text, code, { headers, retryAfterMs });
   }
 };
+async function readLimited(res, limit, op) {
+  const declared = Number(res.headers.get("content-length") ?? NaN);
+  if (declared > limit) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new ResponseTooLargeError(op, limit);
+  }
+  if (!res.body) return new Uint8Array(0);
+  const reader = res.body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > limit) {
+      await reader.cancel().catch(() => void 0);
+      throw new ResponseTooLargeError(op, limit);
+    }
+    chunks.push(value);
+  }
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const c of chunks) {
+    out.set(c, off);
+    off += c.byteLength;
+  }
+  return out;
+}
 function errorBody(text) {
   try {
     const v = JSON.parse(text);
@@ -294,7 +335,10 @@ var RP_ROUTES = {
 };
 var RP_ROUTES_UNDISCOVERED = {
   tokenAuthChallenge: { method: "POST", path: "/token/auth/challenge" },
-  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" }
+  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" },
+  pdfTokenPrepare: { method: "POST", path: "/pdf/token/prepare" },
+  pdfTokenFinalize: { method: "POST", path: "/pdf/token/{signingID}/finalize" },
+  pdfTokenDocument: { method: "GET", path: "/pdf/token/{signingID}/document" }
 };
 function routePath(route, ...args) {
   let i = 0;
@@ -602,10 +646,12 @@ function parseOrg(raw) {
   const o = asRecord(raw);
   const etsi = str(o.orgEtsi);
   if (!etsi) return null;
+  const roleLabel = str(o.roleLabel);
   return {
     orgEtsi: etsi,
     orgName: str(o.orgName),
     role: str(o.role),
+    ...roleLabel ? { roleLabel } : {},
     rightType: str(o.rightType)
   };
 }
@@ -642,6 +688,7 @@ var SessionApi = class {
 
 // src/pdf.ts
 var import_node_crypto2 = require("crypto");
+var DEFAULT_PDF_MAX_BYTES = 64 << 20;
 var DEFAULT_PDF_TIMEOUT_MS = 8e4;
 function rec3(v) {
   return v && typeof v === "object" ? v : {};
@@ -674,7 +721,7 @@ var PdfApi = class {
     const form = new FormData();
     form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
     form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS));
+    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.timeout));
     const receivedAt = Date.now();
     const vc = rec3(r.vc).value;
     const dl = rec3(r.deviceLink);
@@ -701,7 +748,75 @@ var PdfApi = class {
    * дараа дахин татна (`retryable`).
    */
   document(sessionId) {
-    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS);
+    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.timeout, this.maxBytes);
+  }
+  get timeout() {
+    return this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS;
+  }
+  get maxBytes() {
+    return this.defaults.maxBytes ?? DEFAULT_PDF_MAX_BYTES;
+  }
+  /**
+   * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+   * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+   * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+   * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+   * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+   */
+  async tokenPrepare(input) {
+    if (!input.pdf?.length || !input.certificate?.length || !input.signerEtsi?.trim() || !input.fileName?.trim()) {
+      throw new Error("eid: pdf token: pdf, certificate, signerEtsi, fileName \u0448\u0430\u0430\u0440\u0434\u043B\u0430\u0433\u0430\u0442\u0430\u0439");
+    }
+    const request = {
+      relyingPartyUUID: this.creds.rpUUID,
+      relyingPartyName: this.creds.rpName,
+      signer: { etsi: input.signerEtsi.trim() },
+      certificate: Buffer.from(input.certificate).toString("base64"),
+      fileName: input.fileName
+    };
+    if (input.docID?.trim()) request.docID = input.docID.trim();
+    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
+    const form = new FormData();
+    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
+    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
+    const raw = await this.http.postMultipart(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenPrepare), form, this.timeout);
+    const r = rec3(raw);
+    const hashToSign = new Uint8Array(Buffer.from(String(r.hashToSign ?? ""), "base64"));
+    if (!r.signingID || hashToSign.length !== 32) {
+      throw new ValidationError("pdf token prepare: signingID / hashToSign (32 \u0431\u0430\u0439\u0442) \u0431\u0443\u0440\u0443\u0443");
+    }
+    return {
+      signingId: String(r.signingID),
+      docId: String(r.docID ?? ""),
+      hashToSign,
+      hashAlgorithm: String(r.hashAlgorithm ?? ""),
+      signatureAlgorithm: String(r.signatureAlgorithm ?? ""),
+      signatureFormat: String(r.signatureFormat ?? ""),
+      expiresAt: String(r.expiresAt ?? ""),
+      raw
+    };
+  }
+  /**
+   * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+   * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+   * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+   * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+   */
+  async tokenFinalize(signingId, signature) {
+    if (signature?.length !== 64) throw new Error("eid: pdf token: signature \u043D\u044C \u0442\u04AF\u04AF\u0445\u0438\u0439 r||s 64 \u0431\u0430\u0439\u0442 \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439 (P-256, DER \u0431\u0438\u0448)");
+    const r = await this.http.post(
+      routePath(RP_ROUTES_UNDISCOVERED.pdfTokenFinalize, signingId),
+      { signature: Buffer.from(signature).toString("base64") },
+      this.timeout
+    );
+    return r;
+  }
+  /**
+   * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+   * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+   */
+  tokenDocument(signingId) {
+    return this.http.getBytes(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenDocument, signingId), this.timeout, this.maxBytes);
   }
   /**
    * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
@@ -735,7 +850,7 @@ var OrganizationApi = class {
   async getRepresentations(personEtsi) {
     const raw = await this.http.get(routePath(RP_ROUTES.orgRepresentations, personEtsi));
     const list = Array.isArray(raw.representations) ? raw.representations : [];
-    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list };
+    return { personEtsi: String(raw.personEtsi ?? personEtsi), representations: list, raw };
   }
 };
 
@@ -887,6 +1002,10 @@ function parseSubject(cert) {
   return out;
 }
 function certExtension(der, oid) {
+  return certExtensions(der).find((e) => e.oid === oid)?.value;
+}
+function certExtensions(der) {
+  const out = [];
   const top = tlv(der, 0, der.length);
   const tbs = tlv(der, top.start, top.end);
   let f = tlv(der, tbs.start, tbs.end);
@@ -900,16 +1019,20 @@ function certExtension(der, oid) {
         const ext = tlv(der, ep, seq.end);
         const id = tlv(der, ext.start, ext.end);
         let v = tlv(der, id.end, ext.end);
-        if (v.tag === 1) v = tlv(der, v.end, ext.end);
+        let critical = false;
+        if (v.tag === 1) {
+          critical = v.end > v.start && der[v.start] !== 0;
+          v = tlv(der, v.end, ext.end);
+        }
         if (v.tag !== 4) throw new ValidationError("extension: extnValue OCTET STRING \u0431\u0438\u0448");
-        if (oidOf(der, id) === oid) return der.subarray(v.start, v.end);
+        out.push({ oid: oidOf(der, id), critical, value: der.subarray(v.start, v.end) });
         ep = ext.end;
       }
-      return void 0;
+      return out;
     }
     pos = t.end;
   }
-  return void 0;
+  return out;
 }
 
 // src/token.ts
@@ -1259,7 +1382,7 @@ var ResponseValidator = class {
         );
       }
     } else {
-      this.verifyChain(leaf);
+      this.verifyChain(leaf, protocol === "ACSP_V2" ? EKU_CLIENT_AUTH : EKU_EMAIL_PROTECTION);
     }
     this.checkIssuer(leaf);
     return leaf;
@@ -1303,21 +1426,40 @@ var ResponseValidator = class {
     const need = rank[this.requiredLevel] ?? 2;
     if (got < need) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0442\u04AF\u0432\u0448\u0438\u043D \u0445\u04AF\u0440\u044D\u043B\u0446\u044D\u0445\u0433\u04AF\u0439: ${level} < ${this.requiredLevel}`);
   }
-  /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
-  verifyChain(leaf) {
-    let current = leaf;
-    const pool = [...this.intermediates, ...this.anchors];
-    for (let depth = 0; depth < 8; depth++) {
-      for (const anchor of this.anchors) {
-        if (isCa(anchor) && current.checkIssued(anchor) && current.verify(anchor.publicKey)) return;
+  /**
+   * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+   * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+   * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+   * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+   * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+   * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+   * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+   */
+  verifyChain(leaf, usage) {
+    const now = Math.min(Math.max(Date.now(), Date.parse(leaf.validFrom)), Date.parse(leaf.validTo));
+    const leafReason = criticalReason(leaf) ?? ekuReason(leaf, usage);
+    if (leafReason) throw new ValidationError(`\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${leafReason}`);
+    let reason;
+    const extend = (cur, cas) => {
+      if (cas.length >= 8) return false;
+      for (const [cand, isAnchor] of [
+        ...this.anchors.map((c) => [c, true]),
+        ...this.intermediates.map((c) => [c, false])
+      ]) {
+        if (cas.includes(cand) || !signedBy(cur, cand)) continue;
+        const bad = caReason(cand, cas.length, now, usage);
+        if (bad) {
+          reason ??= bad;
+          continue;
+        }
+        if (isAnchor || extend(cand, [...cas, cand])) return true;
       }
-      const issuer = pool.find(
-        (c) => isCa(c) && current.checkIssued(c) && current.verify(c.publicKey)
-      );
-      if (!issuer) break;
-      current = issuer;
-    }
-    throw new ValidationError("\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439");
+      return false;
+    };
+    if (extend(leaf, [])) return;
+    throw new ValidationError(
+      reason ? `\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0433\u0438\u043D\u0436 \u0445\u04AF\u0447\u0438\u043D\u0433\u04AF\u0439: ${reason}` : "\u0413\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0438\u0442\u0433\u044D\u043B\u0446\u043B\u0438\u0439\u043D \u0433\u0438\u043D\u0436 trust anchor (Root CA) \u0445\u04AF\u0440\u0441\u044D\u043D\u0433\u04AF\u0439"
+    );
   }
   /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
   findIssuer(leaf) {
@@ -1528,6 +1670,79 @@ function authorityKeyId(cert) {
 function isCa(cert) {
   return cert.ca === true;
 }
+var EKU_ANY = "2.5.29.37.0";
+var EKU_CLIENT_AUTH = "1.3.6.1.5.5.7.3.2";
+var EKU_EMAIL_PROTECTION = "1.3.6.1.5.5.7.3.4";
+var OID_NAME_CONSTRAINTS = "2.5.29.30";
+var HANDLED_CRITICAL = /* @__PURE__ */ new Set([
+  "2.5.29.14",
+  // subjectKeyIdentifier
+  "2.5.29.15",
+  // keyUsage
+  "2.5.29.17",
+  // subjectAltName
+  "2.5.29.19",
+  // basicConstraints
+  "2.5.29.30",
+  // nameConstraints (CA-д — caReason fail-closed)
+  "2.5.29.31",
+  // cRLDistributionPoints
+  "2.5.29.32",
+  // certificatePolicies
+  "2.5.29.35",
+  // authorityKeyIdentifier
+  "2.5.29.37",
+  // extKeyUsage
+  "1.3.6.1.5.5.7.1.1"
+  // authorityInfoAccess
+]);
+function signedBy(child, cand) {
+  if (child.issuer !== cand.subject) return false;
+  const aki = authorityKeyId(child);
+  const ski = subjectKeyId(cand);
+  if (aki && ski && aki !== ski) return false;
+  try {
+    return child.verify(cand.publicKey);
+  } catch {
+    return false;
+  }
+}
+function criticalReason(cert) {
+  return certExtensions(cert.raw).some((e) => e.critical && !HANDLED_CRITICAL.has(e.oid)) ? "\u04AF\u043B \u0442\u0430\u043D\u0438\u0445 critical extension" : void 0;
+}
+function ekuReason(cert, usage) {
+  const eku = extKeyUsage(cert);
+  return eku.length && !eku.includes(usage) && !eku.includes(EKU_ANY) ? "\u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 ExtKeyUsage \u044D\u043D\u044D \u04AF\u0439\u043B\u0434\u044D\u043B\u0434 \u0442\u043E\u0445\u0438\u0440\u043E\u0445\u0433\u04AF\u0439 (\u0433\u0438\u043D\u0436\u0438\u0439\u043D EKU)" : void 0;
+}
+function caReason(ca, below, now, usage) {
+  if (!isCa(ca)) return "\u0437\u0430\u0432\u0441\u0440\u044B\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D CA \u0431\u0438\u0448 \u044D\u0441\u0432\u044D\u043B keyCertSign \u044D\u0440\u0445\u0433\u04AF\u0439";
+  if (certExtension(ca.raw, "2.5.29.15") && !(keyUsageBits(ca) & 4)) return "CA-\u0438\u0439\u043D KeyUsage-\u0434 keyCertSign \u0430\u043B\u0433\u0430";
+  const from = Date.parse(ca.validFrom);
+  const to = Date.parse(ca.validTo);
+  if (Number.isNaN(from) || Number.isNaN(to) || now < from || now > to) {
+    return "\u0433\u0438\u043D\u0436\u0438\u0439\u043D \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 \u0445\u0443\u0433\u0430\u0446\u0430\u0430 \u0434\u0443\u0443\u0441\u0441\u0430\u043D \u044D\u0441\u0432\u044D\u043B \u0445\u04AF\u0447\u0438\u043D\u0442\u044D\u0439 \u0431\u043E\u043B\u043E\u043E\u0433\u04AF\u0439";
+  }
+  const pathLen = basicConstraintsPathLen(ca);
+  if (pathLen !== void 0 && below > pathLen) return "pathLenConstraint \u0437\u04E9\u0440\u0447\u0441\u04E9\u043D (\u0437\u0430\u0432\u0441\u0440\u044B\u043D CA \u0445\u044D\u0442 \u043E\u043B\u043E\u043D)";
+  if (certExtension(ca.raw, OID_NAME_CONSTRAINTS)) return "CA-\u0434 name constraints \u0431\u0430\u0439\u043D\u0430 (SDK \u04AF\u043D\u044D\u043B\u0434\u044D\u0433\u0433\u04AF\u0439 \u2014 fail-closed)";
+  return criticalReason(ca) ?? ekuReason(ca, usage);
+}
+function basicConstraintsPathLen(cert) {
+  const v = certExtension(cert.raw, "2.5.29.19");
+  if (!v) return void 0;
+  const seq = tlv(v, 0, v.length);
+  for (let p = seq.start; p < seq.end; ) {
+    const t = tlv(v, p, seq.end);
+    if (t.tag === 2) {
+      if (t.end - t.start > 4 || (v[t.start] & 128) !== 0) throw new ValidationError("basicConstraints: pathLen \u0431\u0443\u0440\u0443\u0443");
+      let n = 0;
+      for (let i = t.start; i < t.end; i++) n = n * 256 + v[i];
+      return n;
+    }
+    p = t.end;
+  }
+  return void 0;
+}
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://rp.eidmongolia.mn";
@@ -1564,12 +1779,17 @@ var EidClient = class {
       apiSecret: cfg.credentials.apiSecret,
       timeoutMs: cfg.timeoutMs,
       dispatcher: cfg.dispatcher,
-      fetchImpl: cfg.fetchImpl
+      fetchImpl: cfg.fetchImpl,
+      language: cfg.language?.trim() || void 0
     });
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });
     this.sign = new SignApi(http, cfg.credentials, { certificateLevel: level });
-    this.pdf = new PdfApi(http, cfg.credentials, { certificateLevel: level, timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS });
+    this.pdf = new PdfApi(http, cfg.credentials, {
+      certificateLevel: level,
+      timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS,
+      maxBytes: cfg.pdfMaxBytes && cfg.pdfMaxBytes > 0 ? cfg.pdfMaxBytes : DEFAULT_PDF_MAX_BYTES
+    });
     this.organization = new OrganizationApi(http);
     this.person = new PersonApi(http);
     this.token = new TokenApi(http, cfg.credentials);
@@ -1973,6 +2193,7 @@ function callbackParams(input) {
   AuthenticationError,
   CITIZEN_ISSUING_CA_SKI,
   DEFAULT_BASE_URL,
+  DEFAULT_PDF_MAX_BYTES,
   DEFAULT_PDF_TIMEOUT_MS,
   DeviceLinkError,
   EID_ACR_ADVANCED,
@@ -1990,6 +2211,7 @@ function callbackParams(input) {
   PdfApi,
   PersonApi,
   RETRYABLE_ERROR_CODES,
+  ResponseTooLargeError,
   ResponseValidator,
   SessionApi,
   SessionFailedError,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BWCDj8xO.cjs';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as RetryableErrorCode, u as SessionFailedError, v as SessionState, w as SignatureAlgorithmParameters, x as SignatureProtocol, T as TokenCertSessionBlock, y as TokenCertStatus, V as ValidationError, z as deviceLink, B as isMobileUserAgent, G as openOrShowQR, J as parseRetryAfter } from './browser-BWCDj8xO.cjs';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-B_xuB7Rt.cjs';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-B_xuB7Rt.cjs';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -17,6 +17,8 @@ interface HttpConfig {
     dispatcher?: unknown;
     /** Тест/custom орчинд fetch-ийг орлуулах (default — global fetch). */
     fetchImpl?: typeof fetch;
+    /** `Accept-Language` header-ийн утга (ж: "en"); хоосон бол илгээхгүй. */
+    language?: string;
 }
 declare class Http {
     private readonly cfg;
@@ -25,8 +27,8 @@ declare class Http {
     get(path: string, timeoutMs?: number): Promise<unknown>;
     /** multipart/form-data POST (Content-Type-ийг boundary-тай нь fetch тавина). JSON хариу. */
     postMultipart(path: string, form: FormData, timeoutMs?: number): Promise<unknown>;
-    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF). */
-    getBytes(path: string, timeoutMs?: number): Promise<Uint8Array>;
+    /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
+    getBytes(path: string, timeoutMs?: number, maxBytes?: number): Promise<Uint8Array>;
     private json;
     private send;
 }
@@ -153,7 +155,11 @@ interface PdfDefaults {
     certificateLevel: CertificateLevel;
     /** prepare / document дуудлагын хугацаа (мс); анхдагч {@link DEFAULT_PDF_TIMEOUT_MS}. */
     timeoutMs?: number;
+    /** document / tokenDocument-ийн санах ойд унших дээд хэмжээ (байт); анхдагч {@link DEFAULT_PDF_MAX_BYTES}. */
+    maxBytes?: number;
 }
+/** Гарын үсэгтэй PDF татахад санах ойд уншиж болох анхдагч дээд хэмжээ (64 MiB) — `ClientConfig.pdfMaxBytes`. */
+declare const DEFAULT_PDF_MAX_BYTES: number;
 /**
  * PAdES prepare / баримт татах нэг дуудлагын анхдагч хугацаа (мс). CA prepare нь ≤ 10 MiB уншиж, өмнөх гарын үсэг +
  * LTV өгөгдөл шалгаад push эхлүүлдэг; баримт татахад угсралтыг ≤ 30с хүлээдэг (PADES_SIGNING §3.4). 80с нь хоёуланд
@@ -209,6 +215,35 @@ interface PdfPrepareSession {
     /** SDK хариу хүлээн авсан мөч (ms epoch) — QR-ийн `receivedAt` ({@link buildDeviceLink}). */
     receivedAt: number;
 }
+/** USB токены PAdES — POST /pdf/token/prepare-ийн оролт. */
+interface PdfTokenPrepareInput {
+    /** Эх PDF (≤ 10 223 616 байт). */
+    pdf: Uint8Array;
+    /** Баримтын нэр (≤ 120 тэмдэгт, заавал). */
+    fileName: string;
+    /** Иргэний ETSI (`PNOMN-…`) — токены гэрчилгээний SERIALNUMBER-тэй таарна. */
+    signerEtsi: string;
+    /** Токены SIGN гэрчилгээ (DER): eID Mongolia Issuing CA-аас, ACTIVE токенд холбогдсон. */
+    certificate: Uint8Array;
+    /** Олон гарын үсэгтэй баримтын docID (заавал биш, UUID). */
+    docID?: string;
+    /** Байгууллагын токенд ЗААВАЛ тухайн байгууллага (`NTRMN-…`); хувийн токенд хоосон. Зөрвөл 403 TOKEN_ORG_MISMATCH. */
+    onBehalfOf?: string;
+}
+/** POST /pdf/token/prepare-ийн хариу. */
+interface PdfTokenPrepareSession {
+    signingId: string;
+    docId: string;
+    /** Токеноор зурах 32 байт (SHA-256 DTBS): CKM_ECDSA (prehashed) → түүхий r||s (64 байт). */
+    hashToSign: Uint8Array;
+    hashAlgorithm: string;
+    signatureAlgorithm: string;
+    /** "RAW_RS". */
+    signatureFormat: string;
+    /** tokenFinalize-ийн эцсийн хугацаа (prepare-ээс 10 мин), ISO-8601. */
+    expiresAt: string;
+    raw: unknown;
+}
 declare class PdfApi {
     private readonly http;
     private readonly creds;
@@ -226,6 +261,28 @@ declare class PdfApi {
      * дараа дахин татна (`retryable`).
      */
     document(sessionId: string): Promise<Uint8Array>;
+    private get timeout();
+    private get maxBytes();
+    /**
+     * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
+     * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
+     * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
+     * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
+     * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
+     */
+    tokenPrepare(input: PdfTokenPrepareInput): Promise<PdfTokenPrepareSession>;
+    /**
+     * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
+     * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
+     * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
+     * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
+     */
+    tokenFinalize(signingId: string, signature: Uint8Array): Promise<PdfSessionBlock>;
+    /**
+     * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
+     * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
+     */
+    tokenDocument(signingId: string): Promise<Uint8Array>;
     /**
      * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
      * `expected` — poll-ийн `result.pdf` блок (`documentStatus` READY + `outSha256` заавал) эсвэл SHA-256 hex.
@@ -696,7 +753,15 @@ declare class ResponseValidator {
     private checkIssuer;
     private checkValidity;
     private checkLevel;
-    /** leaf-ээс эхлэн issuer-ийг intermediates/anchors дотроос олж, anchor хүртэл chain зангидна. */
+    /**
+     * RFC 5280 замын шалгалт (Go SDK-ийн `x509.Certificate.Verify`-тэй ижил дүрэм): leaf-ээс trust anchor хүртэлх
+     * замыг intermediates/anchors-оос (backtracking-тай) угсарна. Issuer бүр: subject = child.issuer, AKI/SKI таарах,
+     * гарын үсэг, CA (basicConstraints CA:TRUE), KeyUsage тавьсан бол keyCertSign, **pathLenConstraint** (доорх
+     * завсрын CA-ийн тоо), хүчинтэй хугацаа, EKU тавьсан бол `usage` / anyExtendedKeyUsage агуулах. Leaf болон CA
+     * бүрийн үл таних **critical extension** → татгалзана. **Name constraints**-ийг SDK үнэлдэггүй — гинжинд байвал
+     * fail-closed (CA-ийн бодит гинж 01–04-т алга). Цаг = now, leaf-ийн хүчинтэй хугацаанд хавчсан (`clockSkewMs`-ийн
+     * хүрээнд; leaf-ийн хугацааг checkValidity шалгасан). certificatePolicies шалгахгүй (Go-той ижил).
+     */
     private verifyChain;
     /** leaf-ийн шууд issuer-ийг trust pool-оос буцаана (revocation шалгагчид issuer хэрэгтэй). */
     private findIssuer;
@@ -734,10 +799,20 @@ interface ClientConfig {
     timeoutMs?: number;
     /** PAdES prepare / баримт татах дуудлагын хугацаа (мс). Анхдагч 80000 ({@link DEFAULT_PDF_TIMEOUT_MS}). */
     pdfTimeoutMs?: number;
+    /**
+     * `pdf.document` / `pdf.tokenDocument`-ийн санах ойд унших дээд хэмжээ (байт). Анхдагч 64 MiB
+     * ({@link DEFAULT_PDF_MAX_BYTES}); хэтэрвэл `ResponseTooLargeError`.
+     */
+    pdfMaxBytes?: number;
     /** undici Dispatcher (mTLS client cert). */
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
     fetchImpl?: typeof fetch;
+    /**
+     * Хүнд харуулах текстийн хэл (`roleLabel` г.м.) — дуудлага бүрд `Accept-Language` болж илгээгдэнэ (`"mn"` | `"en"`).
+     * Анхдагч: илгээхгүй (сервер mn).
+     */
+    language?: string;
     /** Trust anchor (Root CA) — validator-д. Production-д ЗААВАЛ. */
     trust?: TrustConfig;
 }
@@ -989,4 +1064,4 @@ declare class EidOidcClient {
 /** PKCE S256: `BASE64URL(SHA-256(ASCII(code_verifier)))` (RFC 7636 §4.2). */
 declare function pkceChallenge(codeVerifier: string): Promise<string>;
 
-export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };
+export { AcspContext, type AcspV2Params, type ActivityCounts, type ActivityItem, type ActivityQuery, AuthApi, type AuthDefaults, type AuthOptions, type BuildDeviceLinkInput, CITIZEN_ISSUING_CA_SKI, type CertCounts, type CertSubject, CertificateLevel, type ClientConfig, type CreateAuthorizationOptions, DEFAULT_BASE_URL, DEFAULT_PDF_MAX_BYTES, DEFAULT_PDF_TIMEOUT_MS, DeviceLinkSession, type DeviceLinkSessionType, type DeviceLinkType, EID_ACR_ADVANCED, EID_ACR_QUALIFIED, EID_OIDC_ISSUER, type EidAuthorization, type EidCallbackChecks, type EidCallbackResult, EidClient, EidError, type EidIdTokenClaims, EidOidcClient, type EidOidcClientConfig, type EidOidcDiscovery, EidOidcError, type EidOidcErrorCode, FlowType, HashAlgorithm, Http, type HttpConfig, Interaction, NotificationSession, OrganizationApi, PdfApi, type PdfDefaults, type PdfPrepareInput, type PdfPrepareSession, PdfSessionBlock, type PdfSignerRef, type PdfTokenPrepareInput, type PdfTokenPrepareSession, type PersonActivity, PersonApi, PersonBlock, type PersonCertificate, type PersonCertificates, type PersonChild, type PersonChildren, type PersonDevice, type PersonDevices, type PersonSummary, type QrDeviceLinkTickerOptions, RepresentationsResponse, ResponseValidator, type RevocationChecker, type RevocationOutcome, type RevocationStatus, RpCredentials, SessionApi, SessionResult, SignApi, type SignDefaults, type SignOptions, SignatureAlgorithm, TokenApi, type TokenAuthChallenge, type TokenAuthResult, type TokenCertInput, type TokenCertItem, type TokenCertResult, type TokenCertStart, type TokenIdentity, type TokenLimit, type TokenOrganization, type TrustConfig, type ValidateAuthOptions, type ValidateSignOptions, type VerifiedIdentity, type VerifiedSignature, acspV2Digest, buildAcspV2Payload, buildDeviceLink, interactionsToBase64, parseSessionResult, parseSubject, personMatchesCertificate, pkceChallenge, qrDeviceLinkTicker, randomChallenge, resolveBaseUrl, sha256Base64, tokenAuthDigest, tokenLimitOf, userChallengeOf, verifyPayloadSignature, verifyPrehashedSignature, verifyTokenCertificates };