@gerege-systems/eid-mongolia-sdk 0.11.0 → 0.12.0

package/README.md

@@ -218,7 +218,8 @@ import { ForbiddenError, ApiError, ON_BEHALF_ERROR_CODES } from "@gerege-systems
 
 // 1. Иргэн сүүлийн 24 цагт танай RP-ээр нэвтэрсэн байх ёстой.
 const { representations } = await eid.organization.getRepresentations("PNOMN-12345678");
-// → [{ orgEtsi: "NTRMN-6235972", orgName: "Гэрэгэ Системс ХХК", role: "ceo", rightType: "ADMIN", … }]
+// → [{ orgEtsi: "NTRMN-6235972", orgName: "Гэрэгэ Системс ХХК", role: "ceo", roleLabel: "Гүйцэтгэх захирал",
+//      rightType: "ADMIN", … }]
 
 // 2. PDF (PAdES, CA угсарна) — санал болгох урсгал.
 try {
@@ -258,8 +259,12 @@ prepare 429 `PDF_PREPARE_BUSY`, 503 `LTV_UNAVAILABLE` / `TSA_UNAVAILABLE`; docum
 хүртэл уншина; хэтэрвэл `ResponseTooLargeError`. JSON хариу 4 MiB-ээс хэтэрвэл мөн `ResponseTooLargeError` (таслахгүй).
 `getRepresentations`-ийн `raw` — серверийн түүхий JSON.
 
+**Албан тушаал харуулахдаа `roleLabel` ашигла** (representations болон session-ий `onBehalfOf`) — `role` нь машин
+утга (`ceo` / `founder` / `stakeholder` эсвэл MANAGER-т бичсэн текст), өөрөө орчуулахгүй. Хэл: `new EidClient({ …,
+language: "en" })` → дуудлага бүрд `Accept-Language`; анхдагч илгээхгүй (сервер mn). Хуучин CA-д `roleLabel` байхгүй.
+
 Олон талт гэрээ: А байгууллагын гаралтыг өөрчлөлтгүй Б-ийн `prepare`-д (`docID`, өөр `onBehalfOf`) илгээнэ.
-Session-ий `onBehalfOf` блок (`role`/`rightType`) нь хариу угсрах үеийн бүртгэл; `pdf.signer.onBehalfOf`/`claimedRole`
+Session-ий `onBehalfOf` блок (`role`/`roleLabel`/`rightType`) нь хариу угсрах үеийн бүртгэл; `pdf.signer.onBehalfOf`/`claimedRole`
 нь баримтад бичигдсэн утга.
 
 ## 3b. Иргэний PKI самбар (`PKI_READ` эрх)

package/dist/{browser-BVR6gtrx.d.cts → browser-B_xuB7Rt.d.cts}

@@ -212,8 +212,16 @@ interface Representation {
     orgRegister: string;
     orgName: string;
     orgNameEn?: string;
-    /** Бүртгэлийн албан тушаал (ХУР-аас холбогдсонд `ceo` / `founder`, MANAGER-т ADMIN-ий бичсэн текст). */
+    /**
+     * Албан тушаалын машин утга (ХУР-аас холбогдсонд `ceo` / `founder` / `stakeholder`, MANAGER-т ADMIN-ий бичсэн
+     * текст) — өөрөө орчуулахгүй, хүнд {@link Representation.roleLabel}-ийг харуулна.
+     */
     role?: string;
+    /**
+     * Албан тушаалын хүнд харуулах нэр (CA нэг газраас; хэл: `ClientConfig.language` → `Accept-Language`, анхдагч mn).
+     * Хуучин CA-д байхгүй.
+     */
+    roleLabel?: string;
     rightType: "ADMIN" | "MANAGER" | string;
     source: "REGISTRY" | "MANUAL" | string;
     /** ISO 8601. */
@@ -233,8 +241,10 @@ interface OrgResult {
     /** `NTRMN-<улсын бүртгэлийн дугаар>`. */
     orgEtsi: string;
     orgName: string | null;
-    /** Албан тушаал (ж: "Захирал"). Эрх хураагдсан бол null. */
+    /** Албан тушаалын машин утга (`ceo`, MANUAL текст) — өөрөө орчуулахгүй. Эрх хураагдсан бол null. */
     role: string | null;
+    /** Албан тушаалын хүнд харуулах нэр ({@link Representation.roleLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    roleLabel?: string;
     /** ADMIN | MANAGER. Эрх хураагдсан бол null. */
     rightType: string | null;
 }

package/dist/{browser-BVR6gtrx.d.ts → browser-B_xuB7Rt.d.ts}

@@ -212,8 +212,16 @@ interface Representation {
     orgRegister: string;
     orgName: string;
     orgNameEn?: string;
-    /** Бүртгэлийн албан тушаал (ХУР-аас холбогдсонд `ceo` / `founder`, MANAGER-т ADMIN-ий бичсэн текст). */
+    /**
+     * Албан тушаалын машин утга (ХУР-аас холбогдсонд `ceo` / `founder` / `stakeholder`, MANAGER-т ADMIN-ий бичсэн
+     * текст) — өөрөө орчуулахгүй, хүнд {@link Representation.roleLabel}-ийг харуулна.
+     */
     role?: string;
+    /**
+     * Албан тушаалын хүнд харуулах нэр (CA нэг газраас; хэл: `ClientConfig.language` → `Accept-Language`, анхдагч mn).
+     * Хуучин CA-д байхгүй.
+     */
+    roleLabel?: string;
     rightType: "ADMIN" | "MANAGER" | string;
     source: "REGISTRY" | "MANUAL" | string;
     /** ISO 8601. */
@@ -233,8 +241,10 @@ interface OrgResult {
     /** `NTRMN-<улсын бүртгэлийн дугаар>`. */
     orgEtsi: string;
     orgName: string | null;
-    /** Албан тушаал (ж: "Захирал"). Эрх хураагдсан бол null. */
+    /** Албан тушаалын машин утга (`ceo`, MANUAL текст) — өөрөө орчуулахгүй. Эрх хураагдсан бол null. */
     role: string | null;
+    /** Албан тушаалын хүнд харуулах нэр ({@link Representation.roleLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    roleLabel?: string;
     /** ADMIN | MANAGER. Эрх хураагдсан бол null. */
     rightType: string | null;
 }

package/dist/browser.d.cts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.cjs';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-B_xuB7Rt.cjs';

package/dist/browser.d.ts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.js';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-B_xuB7Rt.js';

package/dist/index.cjs

@@ -235,7 +235,8 @@ var Http = class {
       method,
       headers: {
         Authorization: `Bearer ${this.cfg.apiSecret}`,
-        ...contentType ? { "Content-Type": contentType } : {}
+        ...contentType ? { "Content-Type": contentType } : {},
+        ...this.cfg.language ? { "Accept-Language": this.cfg.language } : {}
       },
       body,
       signal: AbortSignal.timeout(timeoutMs ?? this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS)
@@ -645,10 +646,12 @@ function parseOrg(raw) {
   const o = asRecord(raw);
   const etsi = str(o.orgEtsi);
   if (!etsi) return null;
+  const roleLabel = str(o.roleLabel);
   return {
     orgEtsi: etsi,
     orgName: str(o.orgName),
     role: str(o.role),
+    ...roleLabel ? { roleLabel } : {},
     rightType: str(o.rightType)
   };
 }
@@ -1776,7 +1779,8 @@ var EidClient = class {
       apiSecret: cfg.credentials.apiSecret,
       timeoutMs: cfg.timeoutMs,
       dispatcher: cfg.dispatcher,
-      fetchImpl: cfg.fetchImpl
+      fetchImpl: cfg.fetchImpl,
+      language: cfg.language?.trim() || void 0
     });
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.cjs';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.cjs';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-B_xuB7Rt.cjs';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-B_xuB7Rt.cjs';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -17,6 +17,8 @@ interface HttpConfig {
     dispatcher?: unknown;
     /** Тест/custom орчинд fetch-ийг орлуулах (default — global fetch). */
     fetchImpl?: typeof fetch;
+    /** `Accept-Language` header-ийн утга (ж: "en"); хоосон бол илгээхгүй. */
+    language?: string;
 }
 declare class Http {
     private readonly cfg;
@@ -806,6 +808,11 @@ interface ClientConfig {
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
     fetchImpl?: typeof fetch;
+    /**
+     * Хүнд харуулах текстийн хэл (`roleLabel` г.м.) — дуудлага бүрд `Accept-Language` болж илгээгдэнэ (`"mn"` | `"en"`).
+     * Анхдагч: илгээхгүй (сервер mn).
+     */
+    language?: string;
     /** Trust anchor (Root CA) — validator-д. Production-д ЗААВАЛ. */
     trust?: TrustConfig;
 }

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.js';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.js';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-B_xuB7Rt.js';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-B_xuB7Rt.js';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -17,6 +17,8 @@ interface HttpConfig {
     dispatcher?: unknown;
     /** Тест/custom орчинд fetch-ийг орлуулах (default — global fetch). */
     fetchImpl?: typeof fetch;
+    /** `Accept-Language` header-ийн утга (ж: "en"); хоосон бол илгээхгүй. */
+    language?: string;
 }
 declare class Http {
     private readonly cfg;
@@ -806,6 +808,11 @@ interface ClientConfig {
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
     fetchImpl?: typeof fetch;
+    /**
+     * Хүнд харуулах текстийн хэл (`roleLabel` г.м.) — дуудлага бүрд `Accept-Language` болж илгээгдэнэ (`"mn"` | `"en"`).
+     * Анхдагч: илгээхгүй (сервер mn).
+     */
+    language?: string;
     /** Trust anchor (Root CA) — validator-д. Production-д ЗААВАЛ. */
     trust?: TrustConfig;
 }

package/dist/index.js

@@ -52,7 +52,8 @@ var Http = class {
       method,
       headers: {
         Authorization: `Bearer ${this.cfg.apiSecret}`,
-        ...contentType ? { "Content-Type": contentType } : {}
+        ...contentType ? { "Content-Type": contentType } : {},
+        ...this.cfg.language ? { "Accept-Language": this.cfg.language } : {}
       },
       body,
       signal: AbortSignal.timeout(timeoutMs ?? this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS)
@@ -462,10 +463,12 @@ function parseOrg(raw) {
   const o = asRecord(raw);
   const etsi = str(o.orgEtsi);
   if (!etsi) return null;
+  const roleLabel = str(o.roleLabel);
   return {
     orgEtsi: etsi,
     orgName: str(o.orgName),
     role: str(o.role),
+    ...roleLabel ? { roleLabel } : {},
     rightType: str(o.rightType)
   };
 }
@@ -1593,7 +1596,8 @@ var EidClient = class {
       apiSecret: cfg.credentials.apiSecret,
       timeoutMs: cfg.timeoutMs,
       dispatcher: cfg.dispatcher,
-      fetchImpl: cfg.fetchImpl
+      fetchImpl: cfg.fetchImpl,
+      language: cfg.language?.trim() || void 0
     });
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gerege-systems/eid-mongolia-sdk",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "e-ID Mongolia Relying Party SDK — иргэнээр утсаар нь нэвтрэлт ба хууль ёсны цахим гарын үсэг (RP-API v3, Smart-ID нийцтэй).",
   "license": "MIT",
   "type": "module",