@gerege-systems/eid-mongolia-sdk 0.11.0 → 0.12.1

package/README.md

@@ -218,7 +218,8 @@ import { ForbiddenError, ApiError, ON_BEHALF_ERROR_CODES } from "@gerege-systems
 
 // 1. Иргэн сүүлийн 24 цагт танай RP-ээр нэвтэрсэн байх ёстой.
 const { representations } = await eid.organization.getRepresentations("PNOMN-12345678");
-// → [{ orgEtsi: "NTRMN-6235972", orgName: "Гэрэгэ Системс ХХК", role: "ceo", rightType: "ADMIN", … }]
+// → [{ orgEtsi: "NTRMN-6235972", orgName: "Гэрэгэ Системс ХХК", role: "ceo", roleLabel: "Гүйцэтгэх захирал",
+//      rightType: "ADMIN", rightTypeLabel: "Админ", source: "REGISTRY", sourceLabel: "Улсын бүртгэл", … }]
 
 // 2. PDF (PAdES, CA угсарна) — санал болгох урсгал.
 try {
@@ -258,8 +259,14 @@ prepare 429 `PDF_PREPARE_BUSY`, 503 `LTV_UNAVAILABLE` / `TSA_UNAVAILABLE`; docum
 хүртэл уншина; хэтэрвэл `ResponseTooLargeError`. JSON хариу 4 MiB-ээс хэтэрвэл мөн `ResponseTooLargeError` (таслахгүй).
 `getRepresentations`-ийн `raw` — серверийн түүхий JSON.
 
+**Хүнд харуулахдаа `roleLabel` / `rightTypeLabel` / `sourceLabel` ашигла** (representations болон session-ий
+`onBehalfOf`; `onBehalfOf`-д `source` байхгүй тул зөвхөн `roleLabel` / `rightTypeLabel`) — `role` (`ceo` / `founder` /
+`stakeholder` эсвэл MANAGER-т бичсэн текст), `rightType` (`ADMIN` | `MANAGER`), `source` (`REGISTRY` | `MANUAL`) нь
+машин утга, өөрөө орчуулахгүй. Хэл: `new EidClient({ …, language: "en" })` → дуудлага бүрд `Accept-Language`; анхдагч
+илгээхгүй (сервер mn). Хуучин CA-д эдгээр талбар байхгүй.
+
 Олон талт гэрээ: А байгууллагын гаралтыг өөрчлөлтгүй Б-ийн `prepare`-д (`docID`, өөр `onBehalfOf`) илгээнэ.
-Session-ий `onBehalfOf` блок (`role`/`rightType`) нь хариу угсрах үеийн бүртгэл; `pdf.signer.onBehalfOf`/`claimedRole`
+Session-ий `onBehalfOf` блок (`role`/`roleLabel`/`rightType`/`rightTypeLabel`) нь хариу угсрах үеийн бүртгэл; `pdf.signer.onBehalfOf`/`claimedRole`
 нь баримтад бичигдсэн утга.
 
 ## 3b. Иргэний PKI самбар (`PKI_READ` эрх)

package/dist/{browser-BVR6gtrx.d.cts → browser-C6JHm0lR.d.cts}

@@ -212,10 +212,22 @@ interface Representation {
     orgRegister: string;
     orgName: string;
     orgNameEn?: string;
-    /** Бүртгэлийн албан тушаал (ХУР-аас холбогдсонд `ceo` / `founder`, MANAGER-т ADMIN-ий бичсэн текст). */
+    /**
+     * Албан тушаалын машин утга (ХУР-аас холбогдсонд `ceo` / `founder` / `stakeholder`, MANAGER-т ADMIN-ий бичсэн
+     * текст) — өөрөө орчуулахгүй, хүнд {@link Representation.roleLabel}-ийг харуулна.
+     */
     role?: string;
+    /**
+     * Албан тушаалын хүнд харуулах нэр (CA нэг газраас; хэл: `ClientConfig.language` → `Accept-Language`, анхдагч mn).
+     * Хуучин CA-д байхгүй.
+     */
+    roleLabel?: string;
     rightType: "ADMIN" | "MANAGER" | string;
+    /** Эрхийн төрлийн хүнд харуулах нэр (ADMIN → «Админ», MANAGER → «Гарын үсэг зурагч»; хэл нь `roleLabel`-тэй ижил). Хуучин CA-д байхгүй. */
+    rightTypeLabel?: string;
     source: "REGISTRY" | "MANUAL" | string;
+    /** Эх үүсвэрийн хүнд харуулах нэр (REGISTRY → «Улсын бүртгэл», MANUAL → «Захирал нэмсэн»; хэл нь `roleLabel`-тэй ижил). Хуучин CA-д байхгүй. */
+    sourceLabel?: string;
     /** ISO 8601. */
     validFrom: string;
     /** ISO 8601; байхгүй = хугацаагүй. */
@@ -233,10 +245,14 @@ interface OrgResult {
     /** `NTRMN-<улсын бүртгэлийн дугаар>`. */
     orgEtsi: string;
     orgName: string | null;
-    /** Албан тушаал (ж: "Захирал"). Эрх хураагдсан бол null. */
+    /** Албан тушаалын машин утга (`ceo`, MANUAL текст) — өөрөө орчуулахгүй. Эрх хураагдсан бол null. */
     role: string | null;
+    /** Албан тушаалын хүнд харуулах нэр ({@link Representation.roleLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    roleLabel?: string;
     /** ADMIN | MANAGER. Эрх хураагдсан бол null. */
     rightType: string | null;
+    /** Эрхийн төрлийн хүнд харуулах нэр ({@link Representation.rightTypeLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    rightTypeLabel?: string;
 }
 /** RP-ийн нэвтрэх мэдээлэл — бүх дуудлагад хэрэгтэй таних тэмдэг + secret. */
 interface RpCredentials {

package/dist/{browser-BVR6gtrx.d.ts → browser-C6JHm0lR.d.ts}

@@ -212,10 +212,22 @@ interface Representation {
     orgRegister: string;
     orgName: string;
     orgNameEn?: string;
-    /** Бүртгэлийн албан тушаал (ХУР-аас холбогдсонд `ceo` / `founder`, MANAGER-т ADMIN-ий бичсэн текст). */
+    /**
+     * Албан тушаалын машин утга (ХУР-аас холбогдсонд `ceo` / `founder` / `stakeholder`, MANAGER-т ADMIN-ий бичсэн
+     * текст) — өөрөө орчуулахгүй, хүнд {@link Representation.roleLabel}-ийг харуулна.
+     */
     role?: string;
+    /**
+     * Албан тушаалын хүнд харуулах нэр (CA нэг газраас; хэл: `ClientConfig.language` → `Accept-Language`, анхдагч mn).
+     * Хуучин CA-д байхгүй.
+     */
+    roleLabel?: string;
     rightType: "ADMIN" | "MANAGER" | string;
+    /** Эрхийн төрлийн хүнд харуулах нэр (ADMIN → «Админ», MANAGER → «Гарын үсэг зурагч»; хэл нь `roleLabel`-тэй ижил). Хуучин CA-д байхгүй. */
+    rightTypeLabel?: string;
     source: "REGISTRY" | "MANUAL" | string;
+    /** Эх үүсвэрийн хүнд харуулах нэр (REGISTRY → «Улсын бүртгэл», MANUAL → «Захирал нэмсэн»; хэл нь `roleLabel`-тэй ижил). Хуучин CA-д байхгүй. */
+    sourceLabel?: string;
     /** ISO 8601. */
     validFrom: string;
     /** ISO 8601; байхгүй = хугацаагүй. */
@@ -233,10 +245,14 @@ interface OrgResult {
     /** `NTRMN-<улсын бүртгэлийн дугаар>`. */
     orgEtsi: string;
     orgName: string | null;
-    /** Албан тушаал (ж: "Захирал"). Эрх хураагдсан бол null. */
+    /** Албан тушаалын машин утга (`ceo`, MANUAL текст) — өөрөө орчуулахгүй. Эрх хураагдсан бол null. */
     role: string | null;
+    /** Албан тушаалын хүнд харуулах нэр ({@link Representation.roleLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    roleLabel?: string;
     /** ADMIN | MANAGER. Эрх хураагдсан бол null. */
     rightType: string | null;
+    /** Эрхийн төрлийн хүнд харуулах нэр ({@link Representation.rightTypeLabel}). Эрх хураагдсан / хуучин CA бол байхгүй. */
+    rightTypeLabel?: string;
 }
 /** RP-ийн нэвтрэх мэдээлэл — бүх дуудлагад хэрэгтэй таних тэмдэг + secret. */
 interface RpCredentials {

package/dist/browser.d.cts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.cjs';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-C6JHm0lR.cjs';

package/dist/browser.d.ts

@@ -1 +1 @@
-export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-BVR6gtrx.js';
+export { f as DeviceLinkError, g as DeviceLinkInput, D as DeviceLinkSession, E as EidError, k as NavigatorLike, n as OpenOrShowQROptions, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR } from './browser-C6JHm0lR.js';

package/dist/index.cjs

@@ -235,7 +235,8 @@ var Http = class {
       method,
       headers: {
         Authorization: `Bearer ${this.cfg.apiSecret}`,
-        ...contentType ? { "Content-Type": contentType } : {}
+        ...contentType ? { "Content-Type": contentType } : {},
+        ...this.cfg.language ? { "Accept-Language": this.cfg.language } : {}
       },
       body,
       signal: AbortSignal.timeout(timeoutMs ?? this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS)
@@ -645,11 +646,15 @@ function parseOrg(raw) {
   const o = asRecord(raw);
   const etsi = str(o.orgEtsi);
   if (!etsi) return null;
+  const roleLabel = str(o.roleLabel);
+  const rightTypeLabel = str(o.rightTypeLabel);
   return {
     orgEtsi: etsi,
     orgName: str(o.orgName),
     role: str(o.role),
-    rightType: str(o.rightType)
+    ...roleLabel ? { roleLabel } : {},
+    rightType: str(o.rightType),
+    ...rightTypeLabel ? { rightTypeLabel } : {}
   };
 }
 var SessionApi = class {
@@ -1776,7 +1781,8 @@ var EidClient = class {
       apiSecret: cfg.credentials.apiSecret,
       timeoutMs: cfg.timeoutMs,
       dispatcher: cfg.dispatcher,
-      fetchImpl: cfg.fetchImpl
+      fetchImpl: cfg.fetchImpl,
+      language: cfg.language?.trim() || void 0
     });
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.cjs';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.cjs';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-C6JHm0lR.cjs';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-C6JHm0lR.cjs';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -17,6 +17,8 @@ interface HttpConfig {
     dispatcher?: unknown;
     /** Тест/custom орчинд fetch-ийг орлуулах (default — global fetch). */
     fetchImpl?: typeof fetch;
+    /** `Accept-Language` header-ийн утга (ж: "en"); хоосон бол илгээхгүй. */
+    language?: string;
 }
 declare class Http {
     private readonly cfg;
@@ -806,6 +808,11 @@ interface ClientConfig {
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
     fetchImpl?: typeof fetch;
+    /**
+     * Хүнд харуулах текстийн хэл (`roleLabel` г.м.) — дуудлага бүрд `Accept-Language` болж илгээгдэнэ (`"mn"` | `"en"`).
+     * Анхдагч: илгээхгүй (сервер mn).
+     */
+    language?: string;
     /** Trust anchor (Root CA) — validator-д. Production-д ЗААВАЛ. */
     trust?: TrustConfig;
 }

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-BVR6gtrx.js';
-export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-BVR6gtrx.js';
+import { R as RpCredentials, C as CertificateLevel, I as Interaction, S as SignatureAlgorithm, H as HashAlgorithm, N as NotificationSession, D as DeviceLinkSession, a as SessionResult, P as PersonBlock, b as PdfSessionBlock, c as RepresentationsResponse, A as AcspContext, F as FlowType, E as EidError } from './browser-C6JHm0lR.js';
+export { d as ApiError, e as AuthenticationError, f as DeviceLinkError, g as DeviceLinkInput, h as EndResult, i as ForbiddenError, j as HttpErrorInit, k as NavigatorLike, l as NetworkError, O as ON_BEHALF_ERROR_CODES, m as OnBehalfErrorCode, n as OpenOrShowQROptions, o as OrgResult, p as PdfDocumentStatus, q as PdfSigner, r as RETRYABLE_ERROR_CODES, s as Representation, t as ResponseTooLargeError, u as RetryableErrorCode, v as SessionFailedError, w as SessionState, x as SignatureAlgorithmParameters, y as SignatureProtocol, T as TokenCertSessionBlock, z as TokenCertStatus, V as ValidationError, B as deviceLink, G as isMobileUserAgent, J as openOrShowQR, K as parseRetryAfter } from './browser-C6JHm0lR.js';
 import { X509Certificate, KeyObject } from 'node:crypto';
 
 interface HttpConfig {
@@ -17,6 +17,8 @@ interface HttpConfig {
     dispatcher?: unknown;
     /** Тест/custom орчинд fetch-ийг орлуулах (default — global fetch). */
     fetchImpl?: typeof fetch;
+    /** `Accept-Language` header-ийн утга (ж: "en"); хоосон бол илгээхгүй. */
+    language?: string;
 }
 declare class Http {
     private readonly cfg;
@@ -806,6 +808,11 @@ interface ClientConfig {
     dispatcher?: unknown;
     /** fetch орлуулагч (тест). */
     fetchImpl?: typeof fetch;
+    /**
+     * Хүнд харуулах текстийн хэл (`roleLabel` г.м.) — дуудлага бүрд `Accept-Language` болж илгээгдэнэ (`"mn"` | `"en"`).
+     * Анхдагч: илгээхгүй (сервер mn).
+     */
+    language?: string;
     /** Trust anchor (Root CA) — validator-д. Production-д ЗААВАЛ. */
     trust?: TrustConfig;
 }

package/dist/index.js

@@ -52,7 +52,8 @@ var Http = class {
       method,
       headers: {
         Authorization: `Bearer ${this.cfg.apiSecret}`,
-        ...contentType ? { "Content-Type": contentType } : {}
+        ...contentType ? { "Content-Type": contentType } : {},
+        ...this.cfg.language ? { "Accept-Language": this.cfg.language } : {}
       },
       body,
       signal: AbortSignal.timeout(timeoutMs ?? this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS)
@@ -462,11 +463,15 @@ function parseOrg(raw) {
   const o = asRecord(raw);
   const etsi = str(o.orgEtsi);
   if (!etsi) return null;
+  const roleLabel = str(o.roleLabel);
+  const rightTypeLabel = str(o.rightTypeLabel);
   return {
     orgEtsi: etsi,
     orgName: str(o.orgName),
     role: str(o.role),
-    rightType: str(o.rightType)
+    ...roleLabel ? { roleLabel } : {},
+    rightType: str(o.rightType),
+    ...rightTypeLabel ? { rightTypeLabel } : {}
   };
 }
 var SessionApi = class {
@@ -1593,7 +1598,8 @@ var EidClient = class {
       apiSecret: cfg.credentials.apiSecret,
       timeoutMs: cfg.timeoutMs,
       dispatcher: cfg.dispatcher,
-      fetchImpl: cfg.fetchImpl
+      fetchImpl: cfg.fetchImpl,
+      language: cfg.language?.trim() || void 0
     });
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gerege-systems/eid-mongolia-sdk",
-  "version": "0.11.0",
+  "version": "0.12.1",
   "description": "e-ID Mongolia Relying Party SDK — иргэнээр утсаар нь нэвтрэлт ба хууль ёсны цахим гарын үсэг (RP-API v3, Smart-ID нийцтэй).",
   "license": "MIT",
   "type": "module",