@gerege-systems/eid-mongolia-sdk 0.14.1 → 0.15.0

package/dist/index.cjs

@@ -24,9 +24,8 @@ __export(index_exports, {
   AuthApi: () => AuthApi,
   AuthenticationError: () => AuthenticationError,
   CITIZEN_ISSUING_CA_SKI: () => CITIZEN_ISSUING_CA_SKI,
+  CertChoiceInvalidError: () => CertChoiceInvalidError,
   DEFAULT_BASE_URL: () => DEFAULT_BASE_URL,
-  DEFAULT_PDF_MAX_BYTES: () => DEFAULT_PDF_MAX_BYTES,
-  DEFAULT_PDF_TIMEOUT_MS: () => DEFAULT_PDF_TIMEOUT_MS,
   DEFAULT_SIGN_SESSION_TTL_MS: () => DEFAULT_SIGN_SESSION_TTL_MS,
   DeviceLinkError: () => DeviceLinkError,
   EidClient: () => EidClient,
@@ -34,11 +33,13 @@ __export(index_exports, {
   ForbiddenError: () => ForbiddenError,
   Http: () => Http,
   NetworkError: () => NetworkError,
+  NoSigningCertificateError: () => NoSigningCertificateError,
   ON_BEHALF_ERROR_CODES: () => ON_BEHALF_ERROR_CODES,
   OrganizationApi: () => OrganizationApi,
-  PdfApi: () => PdfApi,
+  PDF_SIGNATURE_REGISTER_FIELDS: () => PDF_SIGNATURE_REGISTER_FIELDS,
   PersonApi: () => PersonApi,
   RETRYABLE_ERROR_CODES: () => RETRYABLE_ERROR_CODES,
+  RequestInvalidError: () => RequestInvalidError,
   ResponseTooLargeError: () => ResponseTooLargeError,
   ResponseValidator: () => ResponseValidator,
   SessionApi: () => SessionApi,
@@ -49,6 +50,7 @@ __export(index_exports, {
   acspV2Digest: () => acspV2Digest,
   buildAcspV2Payload: () => buildAcspV2Payload,
   buildDeviceLink: () => buildDeviceLink,
+  buildRegisterBody: () => buildRegisterBody,
   createEidLogin: () => createEidLogin,
   deviceLink: () => deviceLink,
   deviceLinkInput: () => deviceLinkInput,
@@ -57,15 +59,18 @@ __export(index_exports, {
   isMobileUserAgent: () => isMobileUserAgent,
   memoryLoginStore: () => memoryLoginStore,
   openOrShowQR: () => openOrShowQR,
+  parseExpiresAt: () => parseExpiresAt,
   parseRetryAfter: () => parseRetryAfter,
   parseSessionResult: () => parseSessionResult,
   parseSubject: () => parseSubject,
   personMatchesCertificate: () => personMatchesCertificate,
   qrDeviceLinkTicker: () => qrDeviceLinkTicker,
   randomChallenge: () => randomChallenge,
+  registrationFromCompleted: () => registrationFromCompleted,
   resolveBaseUrl: () => resolveBaseUrl,
   sessionExpiry: () => sessionExpiry,
   sha256Base64: () => sha256Base64,
+  startExpiry: () => startExpiry,
   tokenAuthDigest: () => tokenAuthDigest,
   tokenLimitOf: () => tokenLimitOf,
   userChallengeOf: () => userChallengeOf,
@@ -138,6 +143,12 @@ var ApiError = class extends EidError {
     return (this.status === 429 || this.status === 503) && (this.retryAfterMs ?? 0) > 0;
   }
 };
+var NoSigningCertificateError = class extends ApiError {
+};
+var CertChoiceInvalidError = class extends ApiError {
+};
+var RequestInvalidError = class extends ApiError {
+};
 var RETRYABLE_ERROR_CODES = [
   "PDF_PREPARE_BUSY",
   "DOCUMENT_PENDING",
@@ -215,15 +226,6 @@ var Http = class {
   get(path, timeoutMs) {
     return this.json("GET", path, void 0, void 0, timeoutMs);
   }
-  /** multipart/form-data POST (Content-Type-ийг boundary-тай нь fetch тавина). JSON хариу. */
-  postMultipart(path, form, timeoutMs) {
-    return this.json("POST", path, form, void 0, timeoutMs);
-  }
-  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
-  async getBytes(path, timeoutMs, maxBytes = 64 << 20) {
-    const res = await this.send("GET", path, void 0, void 0, timeoutMs);
-    return readLimited(res, maxBytes, `GET ${maskPath(path)}`);
-  }
   async json(method, path, body, contentType, timeoutMs) {
     const res = await this.send(method, path, body, contentType, timeoutMs);
     const text = new TextDecoder().decode(await readLimited(res, MAX_JSON_BYTES, `${method} ${maskPath(path)}`));
@@ -269,7 +271,8 @@ var Http = class {
         { headers, retryAfterMs }
       );
     }
-    throw new ApiError(res.status, text, code, { headers, retryAfterMs });
+    const Typed = code === "NO_SIGNING_CERTIFICATE" ? NoSigningCertificateError : code === "CERT_CHOICE_INVALID" ? CertChoiceInvalidError : code === "REQUEST_INVALID" ? RequestInvalidError : ApiError;
+    throw new Typed(res.status, text, code, { headers, retryAfterMs });
   }
 };
 async function readLimited(res, limit, op) {
@@ -327,8 +330,6 @@ var RP_ROUTES = {
   signDeviceLinkDocument: { method: "POST", path: "/signature/device-link/document/{documentNumber}" },
   certChoiceDeviceLink: { method: "POST", path: "/signature/certificate-choice/device-link/anonymous" },
   certChoiceEtsi: { method: "POST", path: "/signature/certificate-choice/notification/etsi/{semanticsIdentifier}" },
-  pdfPrepare: { method: "POST", path: "/pdf/sign/prepare" },
-  pdfDocument: { method: "GET", path: "/pdf/sign/{sessionID}/document" },
   orgRepresentations: { method: "GET", path: "/organization/representations/etsi/{personEtsi}" },
   session: { method: "GET", path: "/session/{sessionId}" },
   personCertificates: { method: "GET", path: "/certificates/etsi/{personEtsi}" },
@@ -337,15 +338,29 @@ var RP_ROUTES = {
   personSummary: { method: "GET", path: "/person/summary/etsi/{personEtsi}" },
   personChildren: { method: "GET", path: "/person/children/etsi/{personEtsi}" },
   tokenCertificate: { method: "POST", path: "/token/certificate" },
-  tokenCertificateResult: { method: "GET", path: "/token/certificate/{sessionID}" }
+  tokenCertificateResult: { method: "GET", path: "/token/certificate/{sessionID}" },
+  pdfSignatures: { method: "POST", path: "/pdf/signatures" }
 };
 var RP_ROUTES_UNDISCOVERED = {
   tokenAuthChallenge: { method: "POST", path: "/token/auth/challenge" },
-  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" },
-  pdfTokenPrepare: { method: "POST", path: "/pdf/token/prepare" },
-  pdfTokenFinalize: { method: "POST", path: "/pdf/token/{signingID}/finalize" },
-  pdfTokenDocument: { method: "GET", path: "/pdf/token/{signingID}/document" }
+  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" }
 };
+var PDF_SIGNATURE_REGISTER_FIELDS = [
+  "docID",
+  "revIndex",
+  "medium",
+  "sessionID",
+  "cms",
+  "fileName",
+  "inSha256",
+  "pageSha256",
+  "sigRevSha256",
+  "outSha256",
+  "priorCmsSha256",
+  "priorRevisionSha256",
+  "onBehalfOf",
+  "signerEtsi"
+];
 function routePath(route, ...args) {
   let i = 0;
   const out = route.path.replace(/\{[^}]*\}/g, () => {
@@ -395,6 +410,21 @@ function acspV2Digest(p, hashAlgorithm) {
   return (0, import_node_crypto.createHash)(nodeHash(hashAlgorithm)).update(buildAcspV2Payload(p)).digest();
 }
 
+// src/types.ts
+var DEFAULT_SIGN_SESSION_TTL_MS = 6e5;
+function sessionExpiry(sentAtMs, ttlMs) {
+  return sentAtMs + (ttlMs && ttlMs > 0 ? ttlMs : DEFAULT_SIGN_SESSION_TTL_MS);
+}
+function parseExpiresAt(v) {
+  if (typeof v !== "string" || !/^\d{4}-\d{2}-\d{2}T/.test(v)) return void 0;
+  const t = Date.parse(v);
+  return Number.isFinite(t) ? t : void 0;
+}
+function startExpiry(raw, sentAtMs, ttlMs) {
+  const r = raw && typeof raw === "object" ? raw : {};
+  return parseExpiresAt(r.expiresAt) ?? sessionExpiry(sentAtMs, ttlMs);
+}
+
 // src/auth.ts
 function rec(v) {
   return v && typeof v === "object" ? v : {};
@@ -440,11 +470,19 @@ var AuthApi = class {
   parseNotification(raw, acsp) {
     const r = rec(raw);
     const vc = rec(r.vc).value;
-    return { sessionId: String(r.sessionID), vc: vc != null ? String(vc) : null, rpChallenge: acsp.rpChallenge, acsp };
+    const expiresAt = parseExpiresAt(r.expiresAt);
+    return {
+      sessionId: String(r.sessionID),
+      vc: vc != null ? String(vc) : null,
+      rpChallenge: acsp.rpChallenge,
+      acsp,
+      ...expiresAt !== void 0 ? { expiresAt } : {}
+    };
   }
   parseDeviceLink(raw, acsp) {
     const r = rec(raw);
     const vc = typeof r.vc === "object" && r.vc !== null ? rec(r.vc).value : r.vc;
+    const expiresAt = parseExpiresAt(r.expiresAt);
     return {
       sessionId: String(r.sessionID),
       sessionToken: r.sessionToken != null ? String(r.sessionToken) : null,
@@ -454,7 +492,8 @@ var AuthApi = class {
       rpChallenge: acsp.rpChallenge,
       acsp,
       receivedAt: Date.now(),
-      sessionType: "auth"
+      sessionType: "auth",
+      ...expiresAt !== void 0 ? { expiresAt } : {}
     };
   }
   /** Push — РД/иргэний дугаар/ETSI-ээр (сервер төрлийг таьна). Иргэний утас руу мэдэгдэл очно. */
@@ -483,13 +522,85 @@ var AuthApi = class {
   }
 };
 
-// src/types.ts
-var DEFAULT_SIGN_SESSION_TTL_MS = 6e5;
-function sessionExpiry(sentAtMs, ttlMs) {
-  return sentAtMs + (ttlMs && ttlMs > 0 ? ttlMs : DEFAULT_SIGN_SESSION_TTL_MS);
-}
-
 // src/sign.ts
+function registrationFromCompleted(done, extra) {
+  const out = {
+    docID: done.docId,
+    revIndex: done.revIndex,
+    cms: done.cms,
+    fileName: extra.fileName,
+    inSha256: done.inSha256,
+    sigRevSha256: done.sigRevSha256,
+    outSha256: done.outSha256
+  };
+  if (extra.medium) out.medium = extra.medium;
+  if (extra.sessionID) out.sessionID = extra.sessionID;
+  if (done.hasPage && done.pageSha256) out.pageSha256 = done.pageSha256;
+  if (done.priorCmsSha256.length) out.priorCmsSha256 = done.priorCmsSha256;
+  if (extra.priorRevisionSha256?.length) out.priorRevisionSha256 = extra.priorRevisionSha256;
+  if (extra.onBehalfOf) out.onBehalfOf = extra.onBehalfOf;
+  if (extra.signerEtsi) out.signerEtsi = extra.signerEtsi;
+  return out;
+}
+var HEX64 = /^[0-9a-f]{64}$/;
+var MAX_CMS_BYTES = 28672;
+function buildRegisterBody(input) {
+  const fail2 = (m) => {
+    throw new ValidationError(`registerSignature: ${m}`);
+  };
+  if (!UUID_RE.test(input.docID ?? "")) fail2("docID UUID \u0431\u0438\u0448");
+  if (!Number.isInteger(input.revIndex) || input.revIndex < 1 || input.revIndex > 16) fail2("revIndex 1\u201316");
+  const hex = (name, v) => {
+    const x = v?.trim().toLowerCase() ?? "";
+    if (!HEX64.test(x)) fail2(`${name} SHA-256 hex (64) \u0431\u0438\u0448`);
+    return x;
+  };
+  let cmsB64;
+  if (typeof input.cms === "string") {
+    const raw = Buffer.from(input.cms, "base64");
+    if (raw.length === 0 || raw.toString("base64") !== input.cms) fail2("cms \u0441\u0442\u0430\u043D\u0434\u0430\u0440\u0442 base64 \u0431\u0438\u0448");
+    cmsB64 = input.cms;
+    if (raw.length > MAX_CMS_BYTES) fail2(`cms > ${MAX_CMS_BYTES} \u0431\u0430\u0439\u0442`);
+  } else {
+    if (!input.cms?.length) fail2("cms \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (input.cms.length > MAX_CMS_BYTES) fail2(`cms > ${MAX_CMS_BYTES} \u0431\u0430\u0439\u0442`);
+    cmsB64 = Buffer.from(input.cms).toString("base64");
+  }
+  const fileName = input.fileName?.trim() ?? "";
+  if (!fileName || Array.from(fileName).length > PDF_MAX_FILE_NAME) fail2(`fileName \u0437\u0430\u0430\u0432\u0430\u043B, \u2264 ${PDF_MAX_FILE_NAME} \u0442\u044D\u043C\u0434\u044D\u0433\u0442`);
+  const sessionID = input.sessionID?.trim() ?? "";
+  const medium = input.medium ?? (sessionID ? "phone" : "token");
+  if (medium !== "phone" && medium !== "token") fail2("medium: phone | token");
+  if (medium === "phone" && !sessionID) fail2("phone-\u0434 sessionID \u0437\u0430\u0430\u0432\u0430\u043B");
+  const priorCms = (input.priorCmsSha256 ?? []).map((h, i) => hex(`priorCmsSha256[${i}]`, h));
+  const priorRev = (input.priorRevisionSha256 ?? []).map((h, i) => hex(`priorRevisionSha256[${i}]`, h));
+  if (priorCms.length + priorRev.length !== input.revIndex - 1) fail2("priorCmsSha256 + priorRevisionSha256-\u0438\u0439\u043D \u0442\u043E\u043E = revIndex \u2212 1");
+  if (input.revIndex === 1 && !input.pageSha256) fail2("revIndex 1-\u0434 pageSha256 \u0437\u0430\u0430\u0432\u0430\u043B");
+  const body = { docID: input.docID, revIndex: input.revIndex, medium };
+  if (sessionID) body.sessionID = sessionID;
+  body.cms = cmsB64;
+  body.fileName = fileName;
+  body.inSha256 = hex("inSha256", input.inSha256);
+  if (input.pageSha256) body.pageSha256 = hex("pageSha256", input.pageSha256);
+  body.sigRevSha256 = hex("sigRevSha256", input.sigRevSha256);
+  body.outSha256 = hex("outSha256", input.outSha256);
+  if (priorCms.length) body.priorCmsSha256 = priorCms;
+  if (priorRev.length) body.priorRevisionSha256 = priorRev;
+  if (input.onBehalfOf?.trim()) body.onBehalfOf = input.onBehalfOf.trim();
+  if (input.signerEtsi?.trim()) body.signerEtsi = input.signerEtsi.trim();
+  for (const k of Object.keys(body)) if (!PDF_SIGNATURE_REGISTER_FIELDS.includes(k)) fail2(`\u0434\u043E\u0442\u043E\u043E\u0434: \u04AF\u043B \u043C\u044D\u0434\u044D\u0433\u0434\u044D\u0445 \u0442\u0430\u043B\u0431\u0430\u0440 ${k}`);
+  return body;
+}
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var PDF_DISPLAY_TEXT = "\u0411\u0430\u0440\u0438\u043C\u0442\u0430\u0434 \u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0437\u0443\u0440\u0430\u0445: ";
+var PDF_MAX_FILE_NAME = 120;
+function dtbsBase64(v) {
+  const raw = typeof v === "string" ? Buffer.from(v, "base64") : Buffer.from(v);
+  if (raw.length !== 32 || typeof v === "string" && raw.toString("base64") !== v) {
+    throw new ValidationError("pdfDigest: dtbs \u043D\u044C 32 \u0431\u0430\u0439\u0442 (SHA-256) \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439");
+  }
+  return raw.toString("base64");
+}
 function rec2(v) {
   return v && typeof v === "object" ? v : {};
 }
@@ -540,7 +651,7 @@ var SignApi = class {
       vc: vcOf(r),
       rpChallenge: "",
       ...sign ? { sign } : {},
-      expiresAt: sessionExpiry(sent, this.defaults.sessionTtlMs)
+      expiresAt: startExpiry(r, sent, this.defaults.sessionTtlMs)
     };
   }
   async deviceLink(path, body, extra) {
@@ -555,7 +666,7 @@ var SignApi = class {
       rpChallenge: "",
       receivedAt: Date.now(),
       ...extra,
-      expiresAt: sessionExpiry(sent, this.defaults.sessionTtlMs)
+      expiresAt: startExpiry(r, sent, this.defaults.sessionTtlMs)
     };
   }
   /**
@@ -574,6 +685,77 @@ var SignApi = class {
     const { body, sign } = this.body(digestB64, interactions, opts, "rsassa-pss");
     return this.notification(routePath(RP_ROUTES.signNotificationDocument, documentNumber), body, sign);
   }
+  /**
+   * Клиент талын PAdES (`@gerege-systems/eid-mongolia-sdk/pades`): `prepare()`-ийн DTBS-д иргэнээр гарын үсэг зуруулна.
+   * PDF CA руу ОЧИХГҮЙ — зөвхөн 32 байт. CA-ийн өөрийн PAdES session-тэй ижил: `RAW_DIGEST_SIGNATURE`,
+   * `sha256WithRSAEncryption` (CMS-д PKCS#1 v1.5; legacy ECDSA иргэнд сервер `ecdsa-with-SHA256`), `displayTextAndPIN`
+   * «Баримтад гарын үсэг зурах: <fileName>» (60 тэмдэгтэд тайрна).
+   *
+   * Дараа нь `session.waitForResult(sessionId)` → `validator.validateSign(result, s.digest)` → `signature.value`-г
+   * (base64 → байт) `complete(state, signature)`-д.
+   */
+  async pdfDigest(input) {
+    const digest = dtbsBase64(input.dtbs);
+    const fileName = input.fileName?.trim() ?? "";
+    if (!fileName || Array.from(fileName).length > PDF_MAX_FILE_NAME) {
+      throw new ValidationError(`pdfDigest: fileName \u0437\u0430\u0430\u0432\u0430\u043B, \u2264 ${PDF_MAX_FILE_NAME} \u0442\u044D\u043C\u0434\u044D\u0433\u0442`);
+    }
+    const signer = input.signer;
+    const etsi = signer?.etsi?.trim();
+    const doc = signer?.documentNumber?.trim();
+    if (!etsi === !doc) throw new ValidationError("pdfDigest: signer \u2014 etsi \u044D\u0441\u0432\u044D\u043B documentNumber-\u0438\u0439\u043D \u044F\u0433 \u043D\u044D\u0433 \u043D\u044C");
+    const deviceLink2 = input.flow === "device-link";
+    const display = Array.from(PDF_DISPLAY_TEXT + fileName).slice(0, 60).join("");
+    const interactions = interactionsToBase64([{ type: "displayTextAndPIN", displayText60: display }]);
+    const body = {
+      relyingPartyUUID: this.creds.rpUUID,
+      relyingPartyName: this.creds.rpName,
+      certificateLevel: input.certificateLevel ?? this.defaults.certificateLevel,
+      signatureProtocol: "RAW_DIGEST_SIGNATURE",
+      signatureProtocolParameters: {
+        digest,
+        signatureAlgorithm: "sha256WithRSAEncryption",
+        signatureAlgorithmParameters: { hashAlgorithm: "SHA-256" }
+      },
+      interactions,
+      fileName
+    };
+    if (input.initialCallbackUrl?.trim()) body.initialCallbackUrl = input.initialCallbackUrl.trim();
+    if (input.onBehalfOf?.trim()) body.onBehalfOf = input.onBehalfOf.trim();
+    const route = deviceLink2 ? etsi ? RP_ROUTES.signDeviceLinkEtsi : RP_ROUTES.signDeviceLinkDocument : etsi ? RP_ROUTES.signNotificationEtsi : RP_ROUTES.signNotificationDocument;
+    const r = rec2(await this.http.post(routePath(route, etsi ?? doc), body));
+    const receivedAt = Date.now();
+    const vc = typeof r.vc === "object" && r.vc !== null ? rec2(r.vc).value : r.vc;
+    let dl = null;
+    if (deviceLink2) {
+      if (!r.sessionToken || !r.sessionSecret || !r.deviceLinkBase) {
+        throw new ValidationError("pdfDigest: device-link \u0445\u0430\u0440\u0438\u0443\u043D\u0434 sessionToken/sessionSecret/deviceLinkBase \u0430\u043B\u0433\u0430");
+      }
+      dl = { sessionToken: String(r.sessionToken), sessionSecret: String(r.sessionSecret), deviceLinkBase: String(r.deviceLinkBase) };
+    }
+    return { sessionId: String(r.sessionID), vc: vc != null ? String(vc) : null, digest, interactions, deviceLink: dl, receivedAt };
+  }
+  /**
+   * `POST /pdf/signatures` — `pades.complete()`-ийн дараа CMS-ийг CA-д бүртгэнэ (`/verify/{docID}`, иргэний түүх). PDF
+   * илгээгдэхгүй. SIGN эрх. CA CMS-ийг шалгана: 04-ийн SIGN cert, session digest = SHA-256(signedAttrs), claimedRole ↔
+   * төлөөлөл. Алдаа: 403 `REPRESENTATION_REVOKED`, 409 `CLAIMED_ROLE_MISMATCH` / `REGISTRY_CONFLICT` /
+   * `DOC_ID_CONFLICT` / `PDF_FOREIGN_SIGNATURE` (`ApiError.code`). Бүртгэлгүй файл ч Adobe/EU DSS-д хүчинтэй — зөвхөн
+   * `/verify` «бүртгэлгүй» гэнэ.
+   */
+  async registerSignature(input) {
+    return this.registerBody(buildRegisterBody(input));
+  }
+  async registerBody(body) {
+    const raw = await this.http.post(routePath(RP_ROUTES.pdfSignatures), body);
+    const r = rec2(raw);
+    return {
+      docID: String(r.docID ?? body.docID),
+      revIndex: Number(r.revIndex ?? 0),
+      registeredAt: typeof r.registeredAt === "string" ? r.registeredAt : "",
+      verifyUrl: String(r.verifyUrl ?? ""),
+      raw
+    };
+  }
   /** Текстийн SHA-256 digest-ийг дотроо тооцоод push sign (богино текст баримтад тохиромжтой). */
   async textByEtsi(id, text, interactions, opts) {
     return this.digestByEtsi(id, sha256Base64(text), interactions, opts);
@@ -689,7 +871,6 @@ function parseSessionResult(raw) {
     signatureAlgorithmParameters: parseSigParams(sig.signatureAlgorithmParameters),
     interactionTypeUsed: str(r.interactionTypeUsed),
     onBehalfOf: parseOrg(r.onBehalfOf),
-    pdf: parsePdf(r.pdf),
     person: parsePerson(r.person),
     tokenCertificate: parseTokenCert(r.tokenCertificate),
     raw
@@ -727,28 +908,6 @@ function personMatchesCertificate(person, subject) {
   const serial = typeof subject === "string" ? subject : subject?.serialNumber;
   return !!person?.civilId && !!serial && serial === `PNOMN-${person.civilId}`;
 }
-function parsePdf(raw) {
-  const p = asRecord(raw);
-  const docID = str(p.docID);
-  if (!docID) return null;
-  const out = { docID, documentStatus: String(p.documentStatus ?? "") };
-  if (p.errorCode != null) out.errorCode = String(p.errorCode);
-  if (p.outSha256 != null) out.outSha256 = String(p.outSha256);
-  if (p.size != null) out.size = Number(p.size);
-  if (p.expiresAt != null) out.expiresAt = String(p.expiresAt);
-  if (p.signatureLevel != null) out.signatureLevel = String(p.signatureLevel);
-  const sg = asRecord(p.signer);
-  if (sg.etsi != null) {
-    out.signer = { etsi: String(sg.etsi), certSerial: String(sg.certSerial ?? "") };
-    if (sg.onBehalfOf) out.signer.onBehalfOf = String(sg.onBehalfOf);
-    if (sg.claimedRole) out.signer.claimedRole = String(sg.claimedRole);
-  }
-  const v = asRecord(p.validation);
-  if (v.indication != null) {
-    out.validation = { indication: String(v.indication), ltv: v.ltv === true, signatures: Number(v.signatures ?? 0) };
-  }
-  return out;
-}
 function parseSigParams(raw) {
   const p = asRecord(raw);
   const hash = str(p.hashAlgorithm);
@@ -807,160 +966,6 @@ var SessionApi = class {
   }
 };
 
-// src/pdf.ts
-var import_node_crypto2 = require("crypto");
-var DEFAULT_PDF_MAX_BYTES = 64 << 20;
-var DEFAULT_PDF_TIMEOUT_MS = 8e4;
-function rec3(v) {
-  return v && typeof v === "object" ? v : {};
-}
-var PdfApi = class {
-  constructor(http, creds, defaults) {
-    this.http = http;
-    this.creds = creds;
-    this.defaults = defaults;
-  }
-  http;
-  creds;
-  defaults;
-  /**
-   * POST /pdf/sign/prepare — multipart (`request` JSON + `pdf`). SIGN эрх шаардана. Түр алдаа: `ApiError` 429
-   * PDF_PREPARE_BUSY, 503 LTV_UNAVAILABLE / TSA_UNAVAILABLE — `retryAfterMs`-ийн дараа дахин (`retryable`).
-   */
-  async prepare(input) {
-    const request = {
-      relyingPartyUUID: this.creds.rpUUID,
-      relyingPartyName: this.creds.rpName,
-      certificateLevel: input.certificateLevel ?? this.defaults.certificateLevel,
-      signer: input.signer,
-      flow: input.flow ?? "notification",
-      fileName: input.fileName
-    };
-    if (input.initialCallbackUrl?.trim()) request.initialCallbackUrl = input.initialCallbackUrl.trim();
-    if (input.docID?.trim()) request.docID = input.docID.trim();
-    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
-    const form = new FormData();
-    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
-    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.timeout));
-    const receivedAt = Date.now();
-    const vc = rec3(r.vc).value;
-    const dl = rec3(r.deviceLink);
-    const digest = typeof r.digest === "string" && r.digest ? r.digest : typeof dl.digest === "string" && dl.digest ? dl.digest : void 0;
-    return {
-      sessionId: String(r.sessionID),
-      docId: String(r.docID),
-      vc: vc != null ? String(vc) : null,
-      ...digest !== void 0 ? { digest } : {},
-      deviceLink: dl.sessionToken ? {
-        sessionToken: String(dl.sessionToken),
-        sessionSecret: String(dl.sessionSecret),
-        deviceLinkBase: String(dl.deviceLinkBase),
-        digest: String(dl.digest),
-        interactions: String(dl.interactions)
-      } : null,
-      receivedAt
-    };
-  }
-  /**
-   * GET /pdf/sign/{sessionID}/document — гарын үсэгтэй PDF (READY-ээс хойш 30 мин). Татсан байтын SHA-256-ийг
-   * session-ий `pdf.outSha256`-тай тулга. Эрх хасагдсан бол `ForbiddenError` `.code = "REPRESENTATION_REVOKED"`. Баримт
-   * бэлэн болоогүй бол `ApiError` 503 `.code` DOCUMENT_PENDING / TSA_UNAVAILABLE / LTV_UNAVAILABLE — `retryAfterMs`-ийн
-   * дараа дахин татна (`retryable`).
-   */
-  document(sessionId) {
-    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.timeout, this.maxBytes);
-  }
-  get timeout() {
-    return this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS;
-  }
-  get maxBytes() {
-    return this.defaults.maxBytes ?? DEFAULT_PDF_MAX_BYTES;
-  }
-  /**
-   * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
-   * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
-   * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
-   * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
-   * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
-   */
-  async tokenPrepare(input) {
-    if (!input.pdf?.length || !input.certificate?.length || !input.signerEtsi?.trim() || !input.fileName?.trim()) {
-      throw new Error("eid: pdf token: pdf, certificate, signerEtsi, fileName \u0448\u0430\u0430\u0440\u0434\u043B\u0430\u0433\u0430\u0442\u0430\u0439");
-    }
-    const request = {
-      relyingPartyUUID: this.creds.rpUUID,
-      relyingPartyName: this.creds.rpName,
-      signer: { etsi: input.signerEtsi.trim() },
-      certificate: Buffer.from(input.certificate).toString("base64"),
-      fileName: input.fileName
-    };
-    if (input.docID?.trim()) request.docID = input.docID.trim();
-    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
-    const form = new FormData();
-    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
-    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const raw = await this.http.postMultipart(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenPrepare), form, this.timeout);
-    const r = rec3(raw);
-    const hashToSign = new Uint8Array(Buffer.from(String(r.hashToSign ?? ""), "base64"));
-    if (!r.signingID || hashToSign.length !== 32) {
-      throw new ValidationError("pdf token prepare: signingID / hashToSign (32 \u0431\u0430\u0439\u0442) \u0431\u0443\u0440\u0443\u0443");
-    }
-    return {
-      signingId: String(r.signingID),
-      docId: String(r.docID ?? ""),
-      hashToSign,
-      hashAlgorithm: String(r.hashAlgorithm ?? ""),
-      signatureAlgorithm: String(r.signatureAlgorithm ?? ""),
-      signatureFormat: String(r.signatureFormat ?? ""),
-      expiresAt: String(r.expiresAt ?? ""),
-      raw
-    };
-  }
-  /**
-   * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
-   * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
-   * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
-   * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
-   */
-  async tokenFinalize(signingId, signature) {
-    if (signature?.length !== 64) throw new Error("eid: pdf token: signature \u043D\u044C \u0442\u04AF\u04AF\u0445\u0438\u0439 r||s 64 \u0431\u0430\u0439\u0442 \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439 (P-256, DER \u0431\u0438\u0448)");
-    const r = await this.http.post(
-      routePath(RP_ROUTES_UNDISCOVERED.pdfTokenFinalize, signingId),
-      { signature: Buffer.from(signature).toString("base64") },
-      this.timeout
-    );
-    return r;
-  }
-  /**
-   * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
-   * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
-   */
-  tokenDocument(signingId) {
-    return this.http.getBytes(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenDocument, signingId), this.timeout, this.maxBytes);
-  }
-  /**
-   * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
-   * `expected` — poll-ийн `result.pdf` блок (`documentStatus` READY + `outSha256` заавал) эсвэл SHA-256 hex.
-   *
-   * @throws {ValidationError} блок READY биш / `outSha256` алга / hash таарахгүй (файлд бүү итгэ).
-   */
-  async documentVerified(sessionId, expected) {
-    let want;
-    if (typeof expected === "string") {
-      want = expected;
-    } else {
-      if (expected.documentStatus !== "READY") throw new ValidationError(`pdf.documentStatus ${expected.documentStatus} \u2260 READY`);
-      want = expected.outSha256;
-    }
-    if (!want || !/^[0-9a-fA-F]{64}$/.test(want)) throw new ValidationError("pdf.outSha256 \u0430\u043B\u0433\u0430 \u044D\u0441\u0432\u044D\u043B SHA-256 hex \u0431\u0438\u0448");
-    const bytes = await this.document(sessionId);
-    const got = (0, import_node_crypto2.createHash)("sha256").update(bytes).digest("hex");
-    if (got !== want.toLowerCase()) throw new ValidationError("\u0422\u0430\u0442\u0441\u0430\u043D PDF-\u0438\u0439\u043D SHA-256 \u043D\u044C pdf.outSha256-\u0442\u0430\u0439 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
-    return bytes;
-  }
-};
-
 // src/organization.ts
 var OrganizationApi = class {
   constructor(http) {
@@ -976,7 +981,7 @@ var OrganizationApi = class {
 };
 
 // src/person.ts
-function rec4(v) {
+function rec3(v) {
   return v && typeof v === "object" ? v : {};
 }
 var PersonApi = class {
@@ -986,7 +991,7 @@ var PersonApi = class {
   http;
   async get(path) {
     const raw = await this.http.get(path);
-    return { ...rec4(raw), raw };
+    return { ...rec3(raw), raw };
   }
   /** Иргэний бүх гэрчилгээ + статусын тоолол. */
   certificates(personEtsi) {
@@ -1016,10 +1021,10 @@ var PersonApi = class {
 };
 
 // src/token.ts
-var import_node_crypto4 = require("crypto");
+var import_node_crypto3 = require("crypto");
 
 // src/subject.ts
-var import_node_crypto3 = require("crypto");
+var import_node_crypto2 = require("crypto");
 var OIDS = {
   "2.5.4.42": "givenName",
   "2.5.4.4": "surname",
@@ -1084,7 +1089,7 @@ function stringOf(buf, t) {
   }
 }
 function parseSubject(cert) {
-  const der = cert instanceof import_node_crypto3.X509Certificate ? new Uint8Array(cert.raw) : typeof cert === "string" ? new Uint8Array(Buffer.from(cert, "base64")) : cert;
+  const der = cert instanceof import_node_crypto2.X509Certificate ? new Uint8Array(cert.raw) : typeof cert === "string" ? new Uint8Array(Buffer.from(cert, "base64")) : cert;
   const top = tlv(der, 0, der.length);
   if (top.tag !== 48) throw new ValidationError("subject: Certificate SEQUENCE \u0431\u0438\u0448");
   const tbs = tlv(der, top.start, top.end);
@@ -1157,12 +1162,12 @@ function certExtensions(der) {
 }
 
 // src/token.ts
-function rec5(v) {
+function rec4(v) {
   return v && typeof v === "object" ? v : {};
 }
 function hexSha256Equal(hex, data) {
   if (typeof hex !== "string" || !/^[0-9a-fA-F]{64}$/.test(hex)) return false;
-  return (0, import_node_crypto4.timingSafeEqual)((0, import_node_crypto4.createHash)("sha256").update(data).digest(), Buffer.from(hex, "hex"));
+  return (0, import_node_crypto3.timingSafeEqual)((0, import_node_crypto3.createHash)("sha256").update(data).digest(), Buffer.from(hex, "hex"));
 }
 var TOKEN_RESULT_TIMEOUT_MS = 3e4;
 var TokenApi = class {
@@ -1191,11 +1196,11 @@ var TokenApi = class {
       flow: "notification"
     };
     if (input.tokenLabel) body.tokenLabel = input.tokenLabel;
-    const r = rec5(await this.http.post(routePath(RP_ROUTES.tokenCertificate), body));
+    const r = rec4(await this.http.post(routePath(RP_ROUTES.tokenCertificate), body));
     if (!hexSha256Equal(r.csrAuthSha256, input.csrAuth) || !hexSha256Equal(r.csrSignSha256, input.csrSign)) {
       throw new ValidationError("token: CA-\u0438\u0439\u043D csrAuthSha256/csrSignSha256 \u0438\u043B\u0433\u044D\u044D\u0441\u044D\u043D CSR-\u0442\u044D\u0439 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
     }
-    const vc = rec5(r.vc).value ?? (typeof r.vc === "string" ? r.vc : void 0);
+    const vc = rec4(r.vc).value ?? (typeof r.vc === "string" ? r.vc : void 0);
     return {
       sessionId: String(r.sessionID ?? ""),
       vc: vc != null ? String(vc) : null,
@@ -1210,7 +1215,7 @@ var TokenApi = class {
    */
   async certificateResult(sessionId) {
     const raw = await this.http.get(routePath(RP_ROUTES.tokenCertificateResult, sessionId), TOKEN_RESULT_TIMEOUT_MS);
-    const r = rec5(raw);
+    const r = rec4(raw);
     const item = (v) => v && typeof v === "object" ? v : null;
     return {
       status: String(r.status ?? ""),
@@ -1226,7 +1231,7 @@ var TokenApi = class {
   }
   /** POST /token/auth/challenge — энэ RP-д холбогдсон нэг удаагийн challenge (2 мин). */
   async authChallenge() {
-    const r = rec5(
+    const r = rec4(
       await this.http.post(routePath(RP_ROUTES_UNDISCOVERED.tokenAuthChallenge), {
         relyingPartyUUID: this.creds.rpUUID,
         relyingPartyName: this.creds.rpName
@@ -1247,7 +1252,7 @@ var TokenApi = class {
   async authVerify(challengeId, certDer, signature) {
     let serial;
     try {
-      serial = parseSubject(new import_node_crypto4.X509Certificate(certDer)).serialNumber;
+      serial = parseSubject(new import_node_crypto3.X509Certificate(certDer)).serialNumber;
     } catch {
       throw new Error("token auth: \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D \u0437\u0430\u0434\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
     }
@@ -1257,12 +1262,12 @@ var TokenApi = class {
       certificate: Buffer.from(certDer).toString("base64"),
       signature: Buffer.from(signature).toString("base64")
     });
-    const r = rec5(raw);
-    if (rec5(r.result).endResult !== "OK") throw new ValidationError("token auth: endResult OK \u0431\u0438\u0448");
-    const id = rec5(r.identity);
+    const r = rec4(raw);
+    if (rec4(r.result).endResult !== "OK") throw new ValidationError("token auth: endResult OK \u0431\u0438\u0448");
+    const id = rec4(r.identity);
     if (!id.etsi || id.etsi !== serial) throw new ValidationError("token auth: identity.etsi \u043D\u044C \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 SERIALNUMBER \u0431\u0438\u0448");
-    const org = rec5(r.organization);
-    const cert = rec5(r.cert);
+    const org = rec4(r.organization);
+    const cert = rec4(r.cert);
     return {
       identity: { etsi: String(id.etsi), givenName: String(id.givenName ?? ""), surname: String(id.surname ?? "") },
       serialHex: String(cert.serialHex ?? ""),
@@ -1278,7 +1283,7 @@ function csrSpki(csr) {
   const version = tlv(csr, info.start, info.end);
   const subject = tlv(csr, version.end, info.end);
   const spki = tlv(csr, subject.end, info.end);
-  return (0, import_node_crypto4.createPublicKey)({ key: Buffer.from(csr.subarray(subject.end, spki.end)), format: "der", type: "spki" }).export({
+  return (0, import_node_crypto3.createPublicKey)({ key: Buffer.from(csr.subarray(subject.end, spki.end)), format: "der", type: "spki" }).export({
     format: "der",
     type: "spki"
   });
@@ -1297,7 +1302,7 @@ function verifyTokenCertificates(result, csrAuth, csrSign) {
     }
     let got;
     try {
-      got = new import_node_crypto4.X509Certificate(Buffer.from(item.certificate, "base64")).publicKey.export({ format: "der", type: "spki" });
+      got = new import_node_crypto3.X509Certificate(Buffer.from(item.certificate, "base64")).publicKey.export({ format: "der", type: "spki" });
     } catch {
       throw new ValidationError(`token: ${name} \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D \u0437\u0430\u0434\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439`);
     }
@@ -1310,13 +1315,13 @@ function tokenAuthDigest(rpUUID, challengeB64) {
   }
   const ch = Buffer.from(challengeB64, "base64");
   if (ch.length !== 32 || ch.toString("base64") !== challengeB64) throw new Error("token auth: challenge 32 \u0431\u0430\u0439\u0442 base64 \u0431\u0438\u0448");
-  return (0, import_node_crypto4.createHash)("sha256").update("eID-TOKEN-AUTH", "ascii").update(rpUUID, "ascii").update(ch).digest();
+  return (0, import_node_crypto3.createHash)("sha256").update("eID-TOKEN-AUTH", "ascii").update(rpUUID, "ascii").update(ch).digest();
 }
 function tokenLimitOf(err) {
   if (!(err instanceof ApiError) || err.code !== "TOKEN_LIMIT_REACHED") return void 0;
   let b;
   try {
-    b = rec5(JSON.parse(err.body));
+    b = rec4(JSON.parse(err.body));
   } catch {
     return void 0;
   }
@@ -1329,7 +1334,7 @@ function tokenLimitOf(err) {
 }
 
 // src/validator.ts
-var import_node_crypto5 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var CITIZEN_ISSUING_CA_SKI = "b8a37f2c64ad677912db7d9e34f246358a2fb909";
 var ResponseValidator = class {
   anchors;
@@ -1343,8 +1348,8 @@ var ResponseValidator = class {
   checkKeyUsage;
   schemeName;
   constructor(trust = {}) {
-    this.anchors = (trust.trustAnchorsPem ?? []).map((p) => new import_node_crypto5.X509Certificate(p));
-    this.intermediates = (trust.intermediatesPem ?? []).map((p) => new import_node_crypto5.X509Certificate(p));
+    this.anchors = (trust.trustAnchorsPem ?? []).map((p) => new import_node_crypto4.X509Certificate(p));
+    this.intermediates = (trust.intermediatesPem ?? []).map((p) => new import_node_crypto4.X509Certificate(p));
     this.requiredLevel = trust.requiredLevel ?? "QUALIFIED";
     this.skew = trust.clockSkewMs ?? 0;
     this.allowUntrusted = trust.allowUntrusted ?? false;
@@ -1525,7 +1530,7 @@ var ResponseValidator = class {
   leafOf(result, protocol) {
     if (!result.certificateDerB64) throw new ValidationError("\u0425\u0430\u0440\u0438\u0443\u043D\u0434 \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D \u0430\u043B\u0433\u0430");
     if (!result.documentNumber) throw new ValidationError("\u0425\u0430\u0440\u0438\u0443\u043D\u0434 documentNumber \u0430\u043B\u0433\u0430");
-    const leaf = new import_node_crypto5.X509Certificate(Buffer.from(result.certificateDerB64, "base64"));
+    const leaf = new import_node_crypto4.X509Certificate(Buffer.from(result.certificateDerB64, "base64"));
     this.checkValidity(leaf);
     this.checkLevel(String(result.certificateLevel ?? ""));
     this.checkPurpose(leaf, protocol);
@@ -1659,16 +1664,16 @@ function signedCallbackUrl(fromResponse, rpCallback, flowType) {
   return fromResponse;
 }
 function userChallengeOf(verifier) {
-  return (0, import_node_crypto5.createHash)("sha256").update(verifier, "utf8").digest("base64url");
+  return (0, import_node_crypto4.createHash)("sha256").update(verifier, "utf8").digest("base64url");
 }
 function verifyPayloadSignature(payload, sigB64, key, alg, hash) {
   const sig = Buffer.from(sigB64, "base64");
   const h = nodeHash(hash);
   if (alg === "rsassa-pss") {
-    return (0, import_node_crypto5.verify)(h, payload, { key, padding: import_node_crypto5.constants.RSA_PKCS1_PSS_PADDING, saltLength: hashLen(hash) }, sig);
+    return (0, import_node_crypto4.verify)(h, payload, { key, padding: import_node_crypto4.constants.RSA_PKCS1_PSS_PADDING, saltLength: hashLen(hash) }, sig);
   }
-  if (alg === "ecdsa-with-SHA256") return (0, import_node_crypto5.verify)(h, payload, { key, dsaEncoding: "der" }, sig);
-  return (0, import_node_crypto5.verify)(h, payload, { key, padding: import_node_crypto5.constants.RSA_PKCS1_PADDING }, sig);
+  if (alg === "ecdsa-with-SHA256") return (0, import_node_crypto4.verify)(h, payload, { key, dsaEncoding: "der" }, sig);
+  return (0, import_node_crypto4.verify)(h, payload, { key, padding: import_node_crypto4.constants.RSA_PKCS1_PADDING }, sig);
 }
 function verifyPrehashedSignature(digest, sigB64, key, alg, hash) {
   const sig = Buffer.from(sigB64, "base64");
@@ -1677,7 +1682,7 @@ function verifyPrehashedSignature(digest, sigB64, key, alg, hash) {
   if (!modBits || sig.length !== Math.ceil(modBits / 8)) return false;
   let em;
   try {
-    em = (0, import_node_crypto5.publicDecrypt)({ key, padding: import_node_crypto5.constants.RSA_NO_PADDING }, sig);
+    em = (0, import_node_crypto4.publicDecrypt)({ key, padding: import_node_crypto4.constants.RSA_NO_PADDING }, sig);
   } catch {
     return false;
   }
@@ -1761,7 +1766,7 @@ function mgf1(hash, seed, length) {
   for (let i = 0, n = 0; n < length; i++, n += hashLen(hash)) {
     const c = Buffer.alloc(4);
     c.writeUInt32BE(i, 0);
-    out.push((0, import_node_crypto5.createHash)(nodeHash(hash)).update(seed).update(c).digest());
+    out.push((0, import_node_crypto4.createHash)(nodeHash(hash)).update(seed).update(c).digest());
   }
   return Buffer.concat(out).subarray(0, length);
 }
@@ -1785,7 +1790,7 @@ function emsaPssVerify(mHash, em, emBits, hash) {
   const psLen = emLen - hLen - sLen - 2;
   if (!db.subarray(0, psLen).every((b) => b === 0) || db[psLen] !== 1) return false;
   const salt = db.subarray(psLen + 1);
-  const h2 = (0, import_node_crypto5.createHash)(nodeHash(hash)).update(Buffer.alloc(8)).update(mHash).update(salt).digest();
+  const h2 = (0, import_node_crypto4.createHash)(nodeHash(hash)).update(Buffer.alloc(8)).update(mHash).update(salt).digest();
   return h.equals(h2);
 }
 function keyUsageBits(cert) {
@@ -1919,7 +1924,6 @@ function resolveBaseUrl(baseUrl) {
 var EidClient = class {
   auth;
   sign;
-  pdf;
   organization;
   person;
   token;
@@ -1941,11 +1945,6 @@ var EidClient = class {
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });
     this.sign = new SignApi(http, cfg.credentials, { certificateLevel: level, sessionTtlMs: cfg.signSessionTtlMs });
-    this.pdf = new PdfApi(http, cfg.credentials, {
-      certificateLevel: level,
-      timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS,
-      maxBytes: cfg.pdfMaxBytes && cfg.pdfMaxBytes > 0 ? cfg.pdfMaxBytes : DEFAULT_PDF_MAX_BYTES
-    });
     this.organization = new OrganizationApi(http);
     this.person = new PersonApi(http);
     this.token = new TokenApi(http, cfg.credentials);
@@ -1953,6 +1952,14 @@ var EidClient = class {
     this.validator = new ResponseValidator(cfg.trust ?? {});
     this.rpName = cfg.credentials.rpName;
   }
+  /** {@link SignApi.pdfDigest} — клиент талын PAdES-ийн DTBS-д гарын үсгийн session (PDF CA руу очихгүй). */
+  signPdfDigest(input) {
+    return this.sign.pdfDigest(input);
+  }
+  /** {@link SignApi.registerSignature} — `pades.complete()`-ийн CMS-ийг CA-д бүртгэнэ (`POST /pdf/signatures`). */
+  registerSignature(input) {
+    return this.sign.registerSignature(input);
+  }
 };
 
 // src/devicelink.ts
@@ -1998,7 +2005,7 @@ function openOrShowQR(session, opts) {
 }
 
 // src/devicelinkv3.ts
-var import_node_crypto6 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var TYPES = ["QR", "Web2App", "App2App"];
 var PROTOCOL = { auth: "ACSP_V2", sign: "RAW_DIGEST_SIGNATURE", cert: "" };
 var TOKEN_RE = /^[A-Za-z0-9_-]+$/;
@@ -2055,7 +2062,7 @@ function buildDeviceLink(p) {
     callback,
     unprotected
   ].join("|");
-  const authCode = (0, import_node_crypto6.createHmac)("sha256", Buffer.from(p.sessionSecret, "base64")).update(payload, "utf8").digest("base64url");
+  const authCode = (0, import_node_crypto5.createHmac)("sha256", Buffer.from(p.sessionSecret, "base64")).update(payload, "utf8").digest("base64url");
   return `${unprotected}&authCode=${authCode}`;
 }
 function deviceLinkInput(s, deviceLinkType, lang) {
@@ -2099,7 +2106,7 @@ function qrDeviceLinkTicker(input, onLink, opts) {
 }
 
 // src/login.ts
-var import_node_crypto7 = require("crypto");
+var import_node_crypto6 = require("crypto");
 function memoryLoginStore() {
   const m = /* @__PURE__ */ new Map();
   return {
@@ -2136,7 +2143,7 @@ function forwardedClientIp(headers, trustProxy) {
   return header(headers, "x-real-ip").trim() || void 0;
 }
 var ID_RE = /^(\p{L}{2}[0-9]{8}|[0-9]{8,14}|PNOMN-[0-9]{8,14})$/u;
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var B64URL_RE = /^[A-Za-z0-9_-]{43}$/;
 var IOS_BROWSERS = [
   [/CriOS/i, "googlechromes"],
@@ -2180,11 +2187,11 @@ function readCookie(h, name) {
   }
   return "";
 }
-var sha256hex = (s) => (0, import_node_crypto7.createHash)("sha256").update(s).digest("hex");
+var sha256hex = (s) => (0, import_node_crypto6.createHash)("sha256").update(s).digest("hex");
 function safeEqualHex(a, b) {
   const x = Buffer.from(a, "hex");
   const y = Buffer.from(b, "hex");
-  return x.length === y.length && x.length > 0 && (0, import_node_crypto7.timingSafeEqual)(x, y);
+  return x.length === y.length && x.length > 0 && (0, import_node_crypto6.timingSafeEqual)(x, y);
 }
 function toIdentity(sessionId, r, v, flowType) {
   const s = v.parsedSubject;
@@ -2267,7 +2274,7 @@ function createEidLogin(opts) {
     const dot = raw.indexOf(".");
     const sid = raw.slice(0, dot);
     const binding = raw.slice(dot + 1);
-    if (dot < 0 || !UUID_RE.test(sid) || !B64URL_RE.test(binding)) return void 0;
+    if (dot < 0 || !UUID_RE2.test(sid) || !B64URL_RE.test(binding)) return void 0;
     const tx = await store.get(sid);
     if (!tx || !safeEqualHex(tx.bindingHash, sha256hex(binding))) return void 0;
     if (tx.expiresAt <= Date.now()) {
@@ -2324,7 +2331,7 @@ function createEidLogin(opts) {
         });
       }
     }
-    const binding = (0, import_node_crypto7.randomBytes)(32).toString("base64url");
+    const binding = (0, import_node_crypto6.randomBytes)(32).toString("base64url");
     const full = { ...tx, bindingHash: sha256hex(binding), expiresAt: Date.now() + ttl };
     await store.set(full.sessionId, full, ttl);
     const setCookie = `${cookieName}=${full.sessionId}.${binding}; ${cookieAttrs(Math.ceil(ttl / 1e3))}`;
@@ -2491,9 +2498,8 @@ function createEidLogin(opts) {
   AuthApi,
   AuthenticationError,
   CITIZEN_ISSUING_CA_SKI,
+  CertChoiceInvalidError,
   DEFAULT_BASE_URL,
-  DEFAULT_PDF_MAX_BYTES,
-  DEFAULT_PDF_TIMEOUT_MS,
   DEFAULT_SIGN_SESSION_TTL_MS,
   DeviceLinkError,
   EidClient,
@@ -2501,11 +2507,13 @@ function createEidLogin(opts) {
   ForbiddenError,
   Http,
   NetworkError,
+  NoSigningCertificateError,
   ON_BEHALF_ERROR_CODES,
   OrganizationApi,
-  PdfApi,
+  PDF_SIGNATURE_REGISTER_FIELDS,
   PersonApi,
   RETRYABLE_ERROR_CODES,
+  RequestInvalidError,
   ResponseTooLargeError,
   ResponseValidator,
   SessionApi,
@@ -2516,6 +2524,7 @@ function createEidLogin(opts) {
   acspV2Digest,
   buildAcspV2Payload,
   buildDeviceLink,
+  buildRegisterBody,
   createEidLogin,
   deviceLink,
   deviceLinkInput,
@@ -2524,15 +2533,18 @@ function createEidLogin(opts) {
   isMobileUserAgent,
   memoryLoginStore,
   openOrShowQR,
+  parseExpiresAt,
   parseRetryAfter,
   parseSessionResult,
   parseSubject,
   personMatchesCertificate,
   qrDeviceLinkTicker,
   randomChallenge,
+  registrationFromCompleted,
   resolveBaseUrl,
   sessionExpiry,
   sha256Base64,
+  startExpiry,
   tokenAuthDigest,
   tokenLimitOf,
   userChallengeOf,