@gerege-systems/eid-mongolia-sdk 0.14.2 → 0.15.1

package/dist/index.js

@@ -1,3 +1,8 @@
+import {
+  deviceLink,
+  isMobileUserAgent,
+  openOrShowQR
+} from "./chunk-REWNE7PO.js";
 import {
   ApiError,
   AuthenticationError,
@@ -13,12 +18,9 @@ import {
   ResponseTooLargeError,
   SessionFailedError,
   ValidationError,
-  deviceLink,
-  isMobileUserAgent,
   maskPath,
-  openOrShowQR,
   parseRetryAfter
-} from "./chunk-DXVHOZO7.js";
+} from "./chunk-TB2KQH3W.js";
 
 // src/http.ts
 var DEFAULT_TIMEOUT_MS = 15e3;
@@ -34,15 +36,6 @@ var Http = class {
   get(path, timeoutMs) {
     return this.json("GET", path, void 0, void 0, timeoutMs);
   }
-  /** multipart/form-data POST (Content-Type-ийг boundary-тай нь fetch тавина). JSON хариу. */
-  postMultipart(path, form, timeoutMs) {
-    return this.json("POST", path, form, void 0, timeoutMs);
-  }
-  /** GET — хариуг байтаар (ж: гарын үсэгтэй PDF), `maxBytes` хүртэл; хэтэрвэл {@link ResponseTooLargeError}. */
-  async getBytes(path, timeoutMs, maxBytes = 64 << 20) {
-    const res = await this.send("GET", path, void 0, void 0, timeoutMs);
-    return readLimited(res, maxBytes, `GET ${maskPath(path)}`);
-  }
   async json(method, path, body, contentType, timeoutMs) {
     const res = await this.send(method, path, body, contentType, timeoutMs);
     const text = new TextDecoder().decode(await readLimited(res, MAX_JSON_BYTES, `${method} ${maskPath(path)}`));
@@ -147,8 +140,6 @@ var RP_ROUTES = {
   signDeviceLinkDocument: { method: "POST", path: "/signature/device-link/document/{documentNumber}" },
   certChoiceDeviceLink: { method: "POST", path: "/signature/certificate-choice/device-link/anonymous" },
   certChoiceEtsi: { method: "POST", path: "/signature/certificate-choice/notification/etsi/{semanticsIdentifier}" },
-  pdfPrepare: { method: "POST", path: "/pdf/sign/prepare" },
-  pdfDocument: { method: "GET", path: "/pdf/sign/{sessionID}/document" },
   orgRepresentations: { method: "GET", path: "/organization/representations/etsi/{personEtsi}" },
   session: { method: "GET", path: "/session/{sessionId}" },
   personCertificates: { method: "GET", path: "/certificates/etsi/{personEtsi}" },
@@ -157,15 +148,29 @@ var RP_ROUTES = {
   personSummary: { method: "GET", path: "/person/summary/etsi/{personEtsi}" },
   personChildren: { method: "GET", path: "/person/children/etsi/{personEtsi}" },
   tokenCertificate: { method: "POST", path: "/token/certificate" },
-  tokenCertificateResult: { method: "GET", path: "/token/certificate/{sessionID}" }
+  tokenCertificateResult: { method: "GET", path: "/token/certificate/{sessionID}" },
+  pdfSignatures: { method: "POST", path: "/pdf/signatures" }
 };
 var RP_ROUTES_UNDISCOVERED = {
   tokenAuthChallenge: { method: "POST", path: "/token/auth/challenge" },
-  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" },
-  pdfTokenPrepare: { method: "POST", path: "/pdf/token/prepare" },
-  pdfTokenFinalize: { method: "POST", path: "/pdf/token/{signingID}/finalize" },
-  pdfTokenDocument: { method: "GET", path: "/pdf/token/{signingID}/document" }
+  tokenAuthVerify: { method: "POST", path: "/token/auth/verify" }
 };
+var PDF_SIGNATURE_REGISTER_FIELDS = [
+  "docID",
+  "revIndex",
+  "medium",
+  "sessionID",
+  "cms",
+  "fileName",
+  "inSha256",
+  "pageSha256",
+  "sigRevSha256",
+  "outSha256",
+  "priorCmsSha256",
+  "priorRevisionSha256",
+  "onBehalfOf",
+  "signerEtsi"
+];
 function routePath(route, ...args) {
   let i = 0;
   const out = route.path.replace(/\{[^}]*\}/g, () => {
@@ -328,6 +333,84 @@ var AuthApi = class {
 };
 
 // src/sign.ts
+function registrationFromCompleted(done, extra) {
+  const out = {
+    docID: done.docId,
+    revIndex: done.revIndex,
+    cms: done.cms,
+    fileName: extra.fileName,
+    inSha256: done.inSha256,
+    sigRevSha256: done.sigRevSha256,
+    outSha256: done.outSha256
+  };
+  if (extra.medium) out.medium = extra.medium;
+  if (extra.sessionID) out.sessionID = extra.sessionID;
+  if (done.hasPage && done.pageSha256) out.pageSha256 = done.pageSha256;
+  if (done.priorCmsSha256.length) out.priorCmsSha256 = done.priorCmsSha256;
+  if (extra.priorRevisionSha256?.length) out.priorRevisionSha256 = extra.priorRevisionSha256;
+  if (extra.onBehalfOf) out.onBehalfOf = extra.onBehalfOf;
+  if (extra.signerEtsi) out.signerEtsi = extra.signerEtsi;
+  return out;
+}
+var HEX64 = /^[0-9a-f]{64}$/;
+var MAX_CMS_BYTES = 28672;
+function buildRegisterBody(input) {
+  const fail2 = (m) => {
+    throw new ValidationError(`registerSignature: ${m}`);
+  };
+  if (!UUID_RE.test(input.docID ?? "")) fail2("docID UUID \u0431\u0438\u0448");
+  if (!Number.isInteger(input.revIndex) || input.revIndex < 1 || input.revIndex > 16) fail2("revIndex 1\u201316");
+  const hex = (name, v) => {
+    const x = v?.trim().toLowerCase() ?? "";
+    if (!HEX64.test(x)) fail2(`${name} SHA-256 hex (64) \u0431\u0438\u0448`);
+    return x;
+  };
+  let cmsB64;
+  if (typeof input.cms === "string") {
+    const raw = Buffer.from(input.cms, "base64");
+    if (raw.length === 0 || raw.toString("base64") !== input.cms) fail2("cms \u0441\u0442\u0430\u043D\u0434\u0430\u0440\u0442 base64 \u0431\u0438\u0448");
+    cmsB64 = input.cms;
+    if (raw.length > MAX_CMS_BYTES) fail2(`cms > ${MAX_CMS_BYTES} \u0431\u0430\u0439\u0442`);
+  } else {
+    if (!input.cms?.length) fail2("cms \u0445\u043E\u043E\u0441\u043E\u043D");
+    if (input.cms.length > MAX_CMS_BYTES) fail2(`cms > ${MAX_CMS_BYTES} \u0431\u0430\u0439\u0442`);
+    cmsB64 = Buffer.from(input.cms).toString("base64");
+  }
+  const fileName = input.fileName?.trim() ?? "";
+  if (!fileName || Array.from(fileName).length > PDF_MAX_FILE_NAME) fail2(`fileName \u0437\u0430\u0430\u0432\u0430\u043B, \u2264 ${PDF_MAX_FILE_NAME} \u0442\u044D\u043C\u0434\u044D\u0433\u0442`);
+  const sessionID = input.sessionID?.trim() ?? "";
+  const medium = input.medium ?? (sessionID ? "phone" : "token");
+  if (medium !== "phone" && medium !== "token") fail2("medium: phone | token");
+  if (medium === "phone" && !sessionID) fail2("phone-\u0434 sessionID \u0437\u0430\u0430\u0432\u0430\u043B");
+  const priorCms = (input.priorCmsSha256 ?? []).map((h, i) => hex(`priorCmsSha256[${i}]`, h));
+  const priorRev = (input.priorRevisionSha256 ?? []).map((h, i) => hex(`priorRevisionSha256[${i}]`, h));
+  if (priorCms.length + priorRev.length !== input.revIndex - 1) fail2("priorCmsSha256 + priorRevisionSha256-\u0438\u0439\u043D \u0442\u043E\u043E = revIndex \u2212 1");
+  if (input.revIndex === 1 && !input.pageSha256) fail2("revIndex 1-\u0434 pageSha256 \u0437\u0430\u0430\u0432\u0430\u043B");
+  const body = { docID: input.docID, revIndex: input.revIndex, medium };
+  if (sessionID) body.sessionID = sessionID;
+  body.cms = cmsB64;
+  body.fileName = fileName;
+  body.inSha256 = hex("inSha256", input.inSha256);
+  if (input.pageSha256) body.pageSha256 = hex("pageSha256", input.pageSha256);
+  body.sigRevSha256 = hex("sigRevSha256", input.sigRevSha256);
+  body.outSha256 = hex("outSha256", input.outSha256);
+  if (priorCms.length) body.priorCmsSha256 = priorCms;
+  if (priorRev.length) body.priorRevisionSha256 = priorRev;
+  if (input.onBehalfOf?.trim()) body.onBehalfOf = input.onBehalfOf.trim();
+  if (input.signerEtsi?.trim()) body.signerEtsi = input.signerEtsi.trim();
+  for (const k of Object.keys(body)) if (!PDF_SIGNATURE_REGISTER_FIELDS.includes(k)) fail2(`\u0434\u043E\u0442\u043E\u043E\u0434: \u04AF\u043B \u043C\u044D\u0434\u044D\u0433\u0434\u044D\u0445 \u0442\u0430\u043B\u0431\u0430\u0440 ${k}`);
+  return body;
+}
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var PDF_DISPLAY_TEXT = "\u0411\u0430\u0440\u0438\u043C\u0442\u0430\u0434 \u0433\u0430\u0440\u044B\u043D \u04AF\u0441\u044D\u0433 \u0437\u0443\u0440\u0430\u0445: ";
+var PDF_MAX_FILE_NAME = 120;
+function dtbsBase64(v) {
+  const raw = typeof v === "string" ? Buffer.from(v, "base64") : Buffer.from(v);
+  if (raw.length !== 32 || typeof v === "string" && raw.toString("base64") !== v) {
+    throw new ValidationError("pdfDigest: dtbs \u043D\u044C 32 \u0431\u0430\u0439\u0442 (SHA-256) \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439");
+  }
+  return raw.toString("base64");
+}
 function rec2(v) {
   return v && typeof v === "object" ? v : {};
 }
@@ -412,6 +495,77 @@ var SignApi = class {
     const { body, sign } = this.body(digestB64, interactions, opts, "rsassa-pss");
     return this.notification(routePath(RP_ROUTES.signNotificationDocument, documentNumber), body, sign);
   }
+  /**
+   * Клиент талын PAdES (`@gerege-systems/eid-mongolia-sdk/pades`): `prepare()`-ийн DTBS-д иргэнээр гарын үсэг зуруулна.
+   * PDF CA руу ОЧИХГҮЙ — зөвхөн 32 байт. CA-ийн өөрийн PAdES session-тэй ижил: `RAW_DIGEST_SIGNATURE`,
+   * `sha256WithRSAEncryption` (CMS-д PKCS#1 v1.5; legacy ECDSA иргэнд сервер `ecdsa-with-SHA256`), `displayTextAndPIN`
+   * «Баримтад гарын үсэг зурах: <fileName>» (60 тэмдэгтэд тайрна).
+   *
+   * Дараа нь `session.waitForResult(sessionId)` → `validator.validateSign(result, s.digest)` → `signature.value`-г
+   * (base64 → байт) `complete(state, signature)`-д.
+   */
+  async pdfDigest(input) {
+    const digest = dtbsBase64(input.dtbs);
+    const fileName = input.fileName?.trim() ?? "";
+    if (!fileName || Array.from(fileName).length > PDF_MAX_FILE_NAME) {
+      throw new ValidationError(`pdfDigest: fileName \u0437\u0430\u0430\u0432\u0430\u043B, \u2264 ${PDF_MAX_FILE_NAME} \u0442\u044D\u043C\u0434\u044D\u0433\u0442`);
+    }
+    const signer = input.signer;
+    const etsi = signer?.etsi?.trim();
+    const doc = signer?.documentNumber?.trim();
+    if (!etsi === !doc) throw new ValidationError("pdfDigest: signer \u2014 etsi \u044D\u0441\u0432\u044D\u043B documentNumber-\u0438\u0439\u043D \u044F\u0433 \u043D\u044D\u0433 \u043D\u044C");
+    const deviceLink2 = input.flow === "device-link";
+    const display = Array.from(PDF_DISPLAY_TEXT + fileName).slice(0, 60).join("");
+    const interactions = interactionsToBase64([{ type: "displayTextAndPIN", displayText60: display }]);
+    const body = {
+      relyingPartyUUID: this.creds.rpUUID,
+      relyingPartyName: this.creds.rpName,
+      certificateLevel: input.certificateLevel ?? this.defaults.certificateLevel,
+      signatureProtocol: "RAW_DIGEST_SIGNATURE",
+      signatureProtocolParameters: {
+        digest,
+        signatureAlgorithm: "sha256WithRSAEncryption",
+        signatureAlgorithmParameters: { hashAlgorithm: "SHA-256" }
+      },
+      interactions,
+      fileName
+    };
+    if (input.initialCallbackUrl?.trim()) body.initialCallbackUrl = input.initialCallbackUrl.trim();
+    if (input.onBehalfOf?.trim()) body.onBehalfOf = input.onBehalfOf.trim();
+    const route = deviceLink2 ? etsi ? RP_ROUTES.signDeviceLinkEtsi : RP_ROUTES.signDeviceLinkDocument : etsi ? RP_ROUTES.signNotificationEtsi : RP_ROUTES.signNotificationDocument;
+    const r = rec2(await this.http.post(routePath(route, etsi ?? doc), body));
+    const receivedAt = Date.now();
+    const vc = typeof r.vc === "object" && r.vc !== null ? rec2(r.vc).value : r.vc;
+    let dl = null;
+    if (deviceLink2) {
+      if (!r.sessionToken || !r.sessionSecret || !r.deviceLinkBase) {
+        throw new ValidationError("pdfDigest: device-link \u0445\u0430\u0440\u0438\u0443\u043D\u0434 sessionToken/sessionSecret/deviceLinkBase \u0430\u043B\u0433\u0430");
+      }
+      dl = { sessionToken: String(r.sessionToken), sessionSecret: String(r.sessionSecret), deviceLinkBase: String(r.deviceLinkBase) };
+    }
+    return { sessionId: String(r.sessionID), vc: vc != null ? String(vc) : null, digest, interactions, deviceLink: dl, receivedAt };
+  }
+  /**
+   * `POST /pdf/signatures` — `pades.complete()`-ийн дараа CMS-ийг CA-д бүртгэнэ (`/verify/{docID}`, иргэний түүх). PDF
+   * илгээгдэхгүй. SIGN эрх. CA CMS-ийг шалгана: 04-ийн SIGN cert, session digest = SHA-256(signedAttrs), claimedRole ↔
+   * төлөөлөл. Алдаа: 403 `REPRESENTATION_REVOKED`, 409 `CLAIMED_ROLE_MISMATCH` / `REGISTRY_CONFLICT` /
+   * `DOC_ID_CONFLICT` / `PDF_FOREIGN_SIGNATURE` (`ApiError.code`). Бүртгэлгүй файл ч Adobe/EU DSS-д хүчинтэй — зөвхөн
+   * `/verify` «бүртгэлгүй» гэнэ.
+   */
+  async registerSignature(input) {
+    return this.registerBody(buildRegisterBody(input));
+  }
+  async registerBody(body) {
+    const raw = await this.http.post(routePath(RP_ROUTES.pdfSignatures), body);
+    const r = rec2(raw);
+    return {
+      docID: String(r.docID ?? body.docID),
+      revIndex: Number(r.revIndex ?? 0),
+      registeredAt: typeof r.registeredAt === "string" ? r.registeredAt : "",
+      verifyUrl: String(r.verifyUrl ?? ""),
+      raw
+    };
+  }
   /** Текстийн SHA-256 digest-ийг дотроо тооцоод push sign (богино текст баримтад тохиромжтой). */
   async textByEtsi(id, text, interactions, opts) {
     return this.digestByEtsi(id, sha256Base64(text), interactions, opts);
@@ -527,7 +681,6 @@ function parseSessionResult(raw) {
     signatureAlgorithmParameters: parseSigParams(sig.signatureAlgorithmParameters),
     interactionTypeUsed: str(r.interactionTypeUsed),
     onBehalfOf: parseOrg(r.onBehalfOf),
-    pdf: parsePdf(r.pdf),
     person: parsePerson(r.person),
     tokenCertificate: parseTokenCert(r.tokenCertificate),
     raw
@@ -565,28 +718,6 @@ function personMatchesCertificate(person, subject) {
   const serial = typeof subject === "string" ? subject : subject?.serialNumber;
   return !!person?.civilId && !!serial && serial === `PNOMN-${person.civilId}`;
 }
-function parsePdf(raw) {
-  const p = asRecord(raw);
-  const docID = str(p.docID);
-  if (!docID) return null;
-  const out = { docID, documentStatus: String(p.documentStatus ?? "") };
-  if (p.errorCode != null) out.errorCode = String(p.errorCode);
-  if (p.outSha256 != null) out.outSha256 = String(p.outSha256);
-  if (p.size != null) out.size = Number(p.size);
-  if (p.expiresAt != null) out.expiresAt = String(p.expiresAt);
-  if (p.signatureLevel != null) out.signatureLevel = String(p.signatureLevel);
-  const sg = asRecord(p.signer);
-  if (sg.etsi != null) {
-    out.signer = { etsi: String(sg.etsi), certSerial: String(sg.certSerial ?? "") };
-    if (sg.onBehalfOf) out.signer.onBehalfOf = String(sg.onBehalfOf);
-    if (sg.claimedRole) out.signer.claimedRole = String(sg.claimedRole);
-  }
-  const v = asRecord(p.validation);
-  if (v.indication != null) {
-    out.validation = { indication: String(v.indication), ltv: v.ltv === true, signatures: Number(v.signatures ?? 0) };
-  }
-  return out;
-}
 function parseSigParams(raw) {
   const p = asRecord(raw);
   const hash = str(p.hashAlgorithm);
@@ -645,160 +776,6 @@ var SessionApi = class {
   }
 };
 
-// src/pdf.ts
-import { createHash as createHash2 } from "crypto";
-var DEFAULT_PDF_MAX_BYTES = 64 << 20;
-var DEFAULT_PDF_TIMEOUT_MS = 8e4;
-function rec3(v) {
-  return v && typeof v === "object" ? v : {};
-}
-var PdfApi = class {
-  constructor(http, creds, defaults) {
-    this.http = http;
-    this.creds = creds;
-    this.defaults = defaults;
-  }
-  http;
-  creds;
-  defaults;
-  /**
-   * POST /pdf/sign/prepare — multipart (`request` JSON + `pdf`). SIGN эрх шаардана. Түр алдаа: `ApiError` 429
-   * PDF_PREPARE_BUSY, 503 LTV_UNAVAILABLE / TSA_UNAVAILABLE — `retryAfterMs`-ийн дараа дахин (`retryable`).
-   */
-  async prepare(input) {
-    const request = {
-      relyingPartyUUID: this.creds.rpUUID,
-      relyingPartyName: this.creds.rpName,
-      certificateLevel: input.certificateLevel ?? this.defaults.certificateLevel,
-      signer: input.signer,
-      flow: input.flow ?? "notification",
-      fileName: input.fileName
-    };
-    if (input.initialCallbackUrl?.trim()) request.initialCallbackUrl = input.initialCallbackUrl.trim();
-    if (input.docID?.trim()) request.docID = input.docID.trim();
-    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
-    const form = new FormData();
-    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
-    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const r = rec3(await this.http.postMultipart(routePath(RP_ROUTES.pdfPrepare), form, this.timeout));
-    const receivedAt = Date.now();
-    const vc = rec3(r.vc).value;
-    const dl = rec3(r.deviceLink);
-    const digest = typeof r.digest === "string" && r.digest ? r.digest : typeof dl.digest === "string" && dl.digest ? dl.digest : void 0;
-    return {
-      sessionId: String(r.sessionID),
-      docId: String(r.docID),
-      vc: vc != null ? String(vc) : null,
-      ...digest !== void 0 ? { digest } : {},
-      deviceLink: dl.sessionToken ? {
-        sessionToken: String(dl.sessionToken),
-        sessionSecret: String(dl.sessionSecret),
-        deviceLinkBase: String(dl.deviceLinkBase),
-        digest: String(dl.digest),
-        interactions: String(dl.interactions)
-      } : null,
-      receivedAt
-    };
-  }
-  /**
-   * GET /pdf/sign/{sessionID}/document — гарын үсэгтэй PDF (READY-ээс хойш 30 мин). Татсан байтын SHA-256-ийг
-   * session-ий `pdf.outSha256`-тай тулга. Эрх хасагдсан бол `ForbiddenError` `.code = "REPRESENTATION_REVOKED"`. Баримт
-   * бэлэн болоогүй бол `ApiError` 503 `.code` DOCUMENT_PENDING / TSA_UNAVAILABLE / LTV_UNAVAILABLE — `retryAfterMs`-ийн
-   * дараа дахин татна (`retryable`).
-   */
-  document(sessionId) {
-    return this.http.getBytes(routePath(RP_ROUTES.pdfDocument, sessionId), this.timeout, this.maxBytes);
-  }
-  get timeout() {
-    return this.defaults.timeoutMs ?? DEFAULT_PDF_TIMEOUT_MS;
-  }
-  get maxBytes() {
-    return this.defaults.maxBytes ?? DEFAULT_PDF_MAX_BYTES;
-  }
-  /**
-   * USB токены PAdES (CA docs/PADES_SIGNING.md §16.5, TOKEN_CERT.md) — session / утас оролцохгүй. POST /pdf/token/prepare
-   * (multipart: `request` JSON + `pdf`), SIGN эрх. Дараа нь токеноор `hashToSign`-ийг CKM_ECDSA (prehashed, P-256)-аар
-   * зурж {@link tokenFinalize}. Түр алдаа: `ApiError` 429 PDF_PREPARE_BUSY / RATE_LIMITED, 503 TSA_UNAVAILABLE /
-   * LTV_UNAVAILABLE / STATE_UNAVAILABLE (`retryable`). Гэрчилгээ токенд холбогдоогүй / цуцлагдсан → 409
-   * TOKEN_CERT_INVALID. Зам нь CA-д бий ч `/.well-known/eid`-д хараахан алга (гэрээний тест WARN).
-   */
-  async tokenPrepare(input) {
-    if (!input.pdf?.length || !input.certificate?.length || !input.signerEtsi?.trim() || !input.fileName?.trim()) {
-      throw new Error("eid: pdf token: pdf, certificate, signerEtsi, fileName \u0448\u0430\u0430\u0440\u0434\u043B\u0430\u0433\u0430\u0442\u0430\u0439");
-    }
-    const request = {
-      relyingPartyUUID: this.creds.rpUUID,
-      relyingPartyName: this.creds.rpName,
-      signer: { etsi: input.signerEtsi.trim() },
-      certificate: Buffer.from(input.certificate).toString("base64"),
-      fileName: input.fileName
-    };
-    if (input.docID?.trim()) request.docID = input.docID.trim();
-    if (input.onBehalfOf?.trim()) request.onBehalfOf = input.onBehalfOf.trim();
-    const form = new FormData();
-    form.append("request", new Blob([JSON.stringify(request)], { type: "application/json" }));
-    form.append("pdf", new Blob([input.pdf], { type: "application/pdf" }), input.fileName);
-    const raw = await this.http.postMultipart(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenPrepare), form, this.timeout);
-    const r = rec3(raw);
-    const hashToSign = new Uint8Array(Buffer.from(String(r.hashToSign ?? ""), "base64"));
-    if (!r.signingID || hashToSign.length !== 32) {
-      throw new ValidationError("pdf token prepare: signingID / hashToSign (32 \u0431\u0430\u0439\u0442) \u0431\u0443\u0440\u0443\u0443");
-    }
-    return {
-      signingId: String(r.signingID),
-      docId: String(r.docID ?? ""),
-      hashToSign,
-      hashAlgorithm: String(r.hashAlgorithm ?? ""),
-      signatureAlgorithm: String(r.signatureAlgorithm ?? ""),
-      signatureFormat: String(r.signatureFormat ?? ""),
-      expiresAt: String(r.expiresAt ?? ""),
-      raw
-    };
-  }
-  /**
-   * POST /pdf/token/{signingID}/finalize `{signature: base64 түүхий r||s}` — `signature` 64 байт (P-256 r||s, DER БИШ).
-   * Амжвал READY баримтын блок (`outSha256` — {@link tokenDocument}-оор татсан файлтай тулга). READY-ээс хойш идэмпотент.
-   * Алдаа: 400 SIGNATURE_INVALID (3 удаа → FAILED), 409 DOCUMENT_FAILED, 410 DOCUMENT_EXPIRED, 503 DOCUMENT_PENDING /
-   * TSA_UNAVAILABLE / LTV_UNAVAILABLE — ижил гарын үсгийг `retryAfterMs`-ийн дараа дахин илгээнэ.
-   */
-  async tokenFinalize(signingId, signature) {
-    if (signature?.length !== 64) throw new Error("eid: pdf token: signature \u043D\u044C \u0442\u04AF\u04AF\u0445\u0438\u0439 r||s 64 \u0431\u0430\u0439\u0442 \u0431\u0430\u0439\u0445 \u0451\u0441\u0442\u043E\u0439 (P-256, DER \u0431\u0438\u0448)");
-    const r = await this.http.post(
-      routePath(RP_ROUTES_UNDISCOVERED.pdfTokenFinalize, signingId),
-      { signature: Buffer.from(signature).toString("base64") },
-      this.timeout
-    );
-    return r;
-  }
-  /**
-   * GET /pdf/token/{signingID}/document — гарын үсэгтэй PDF (зөвхөн үүсгэсэн RP, expiresAt хүртэл), `pdfMaxBytes`
-   * хүртэл. SHA-256-ийг {@link tokenFinalize}-ийн `outSha256`-тай заавал тулга.
-   */
-  tokenDocument(signingId) {
-    return this.http.getBytes(routePath(RP_ROUTES_UNDISCOVERED.pdfTokenDocument, signingId), this.timeout, this.maxBytes);
-  }
-  /**
-   * {@link document} + тулгалт: татсан байтын SHA-256 нь session poll-ийн `pdf.outSha256`-тай тэнцүү байх ёстой.
-   * `expected` — poll-ийн `result.pdf` блок (`documentStatus` READY + `outSha256` заавал) эсвэл SHA-256 hex.
-   *
-   * @throws {ValidationError} блок READY биш / `outSha256` алга / hash таарахгүй (файлд бүү итгэ).
-   */
-  async documentVerified(sessionId, expected) {
-    let want;
-    if (typeof expected === "string") {
-      want = expected;
-    } else {
-      if (expected.documentStatus !== "READY") throw new ValidationError(`pdf.documentStatus ${expected.documentStatus} \u2260 READY`);
-      want = expected.outSha256;
-    }
-    if (!want || !/^[0-9a-fA-F]{64}$/.test(want)) throw new ValidationError("pdf.outSha256 \u0430\u043B\u0433\u0430 \u044D\u0441\u0432\u044D\u043B SHA-256 hex \u0431\u0438\u0448");
-    const bytes = await this.document(sessionId);
-    const got = createHash2("sha256").update(bytes).digest("hex");
-    if (got !== want.toLowerCase()) throw new ValidationError("\u0422\u0430\u0442\u0441\u0430\u043D PDF-\u0438\u0439\u043D SHA-256 \u043D\u044C pdf.outSha256-\u0442\u0430\u0439 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
-    return bytes;
-  }
-};
-
 // src/organization.ts
 var OrganizationApi = class {
   constructor(http) {
@@ -814,7 +791,7 @@ var OrganizationApi = class {
 };
 
 // src/person.ts
-function rec4(v) {
+function rec3(v) {
   return v && typeof v === "object" ? v : {};
 }
 var PersonApi = class {
@@ -824,7 +801,7 @@ var PersonApi = class {
   http;
   async get(path) {
     const raw = await this.http.get(path);
-    return { ...rec4(raw), raw };
+    return { ...rec3(raw), raw };
   }
   /** Иргэний бүх гэрчилгээ + статусын тоолол. */
   certificates(personEtsi) {
@@ -854,7 +831,7 @@ var PersonApi = class {
 };
 
 // src/token.ts
-import { X509Certificate as X509Certificate2, createHash as createHash3, createPublicKey, timingSafeEqual } from "crypto";
+import { X509Certificate as X509Certificate2, createHash as createHash2, createPublicKey, timingSafeEqual } from "crypto";
 
 // src/subject.ts
 import { X509Certificate } from "crypto";
@@ -995,12 +972,12 @@ function certExtensions(der) {
 }
 
 // src/token.ts
-function rec5(v) {
+function rec4(v) {
   return v && typeof v === "object" ? v : {};
 }
 function hexSha256Equal(hex, data) {
   if (typeof hex !== "string" || !/^[0-9a-fA-F]{64}$/.test(hex)) return false;
-  return timingSafeEqual(createHash3("sha256").update(data).digest(), Buffer.from(hex, "hex"));
+  return timingSafeEqual(createHash2("sha256").update(data).digest(), Buffer.from(hex, "hex"));
 }
 var TOKEN_RESULT_TIMEOUT_MS = 3e4;
 var TokenApi = class {
@@ -1029,11 +1006,11 @@ var TokenApi = class {
       flow: "notification"
     };
     if (input.tokenLabel) body.tokenLabel = input.tokenLabel;
-    const r = rec5(await this.http.post(routePath(RP_ROUTES.tokenCertificate), body));
+    const r = rec4(await this.http.post(routePath(RP_ROUTES.tokenCertificate), body));
     if (!hexSha256Equal(r.csrAuthSha256, input.csrAuth) || !hexSha256Equal(r.csrSignSha256, input.csrSign)) {
       throw new ValidationError("token: CA-\u0438\u0439\u043D csrAuthSha256/csrSignSha256 \u0438\u043B\u0433\u044D\u044D\u0441\u044D\u043D CSR-\u0442\u044D\u0439 \u0442\u0430\u0430\u0440\u0441\u0430\u043D\u0433\u04AF\u0439");
     }
-    const vc = rec5(r.vc).value ?? (typeof r.vc === "string" ? r.vc : void 0);
+    const vc = rec4(r.vc).value ?? (typeof r.vc === "string" ? r.vc : void 0);
     return {
       sessionId: String(r.sessionID ?? ""),
       vc: vc != null ? String(vc) : null,
@@ -1048,7 +1025,7 @@ var TokenApi = class {
    */
   async certificateResult(sessionId) {
     const raw = await this.http.get(routePath(RP_ROUTES.tokenCertificateResult, sessionId), TOKEN_RESULT_TIMEOUT_MS);
-    const r = rec5(raw);
+    const r = rec4(raw);
     const item = (v) => v && typeof v === "object" ? v : null;
     return {
       status: String(r.status ?? ""),
@@ -1064,7 +1041,7 @@ var TokenApi = class {
   }
   /** POST /token/auth/challenge — энэ RP-д холбогдсон нэг удаагийн challenge (2 мин). */
   async authChallenge() {
-    const r = rec5(
+    const r = rec4(
       await this.http.post(routePath(RP_ROUTES_UNDISCOVERED.tokenAuthChallenge), {
         relyingPartyUUID: this.creds.rpUUID,
         relyingPartyName: this.creds.rpName
@@ -1095,12 +1072,12 @@ var TokenApi = class {
       certificate: Buffer.from(certDer).toString("base64"),
       signature: Buffer.from(signature).toString("base64")
     });
-    const r = rec5(raw);
-    if (rec5(r.result).endResult !== "OK") throw new ValidationError("token auth: endResult OK \u0431\u0438\u0448");
-    const id = rec5(r.identity);
+    const r = rec4(raw);
+    if (rec4(r.result).endResult !== "OK") throw new ValidationError("token auth: endResult OK \u0431\u0438\u0448");
+    const id = rec4(r.identity);
     if (!id.etsi || id.etsi !== serial) throw new ValidationError("token auth: identity.etsi \u043D\u044C \u0433\u044D\u0440\u0447\u0438\u043B\u0433\u044D\u044D\u043D\u0438\u0439 SERIALNUMBER \u0431\u0438\u0448");
-    const org = rec5(r.organization);
-    const cert = rec5(r.cert);
+    const org = rec4(r.organization);
+    const cert = rec4(r.cert);
     return {
       identity: { etsi: String(id.etsi), givenName: String(id.givenName ?? ""), surname: String(id.surname ?? "") },
       serialHex: String(cert.serialHex ?? ""),
@@ -1148,13 +1125,13 @@ function tokenAuthDigest(rpUUID, challengeB64) {
   }
   const ch = Buffer.from(challengeB64, "base64");
   if (ch.length !== 32 || ch.toString("base64") !== challengeB64) throw new Error("token auth: challenge 32 \u0431\u0430\u0439\u0442 base64 \u0431\u0438\u0448");
-  return createHash3("sha256").update("eID-TOKEN-AUTH", "ascii").update(rpUUID, "ascii").update(ch).digest();
+  return createHash2("sha256").update("eID-TOKEN-AUTH", "ascii").update(rpUUID, "ascii").update(ch).digest();
 }
 function tokenLimitOf(err) {
   if (!(err instanceof ApiError) || err.code !== "TOKEN_LIMIT_REACHED") return void 0;
   let b;
   try {
-    b = rec5(JSON.parse(err.body));
+    b = rec4(JSON.parse(err.body));
   } catch {
     return void 0;
   }
@@ -1167,7 +1144,7 @@ function tokenLimitOf(err) {
 }
 
 // src/validator.ts
-import { X509Certificate as X509Certificate3, constants, createHash as createHash4, publicDecrypt, verify } from "crypto";
+import { X509Certificate as X509Certificate3, constants, createHash as createHash3, publicDecrypt, verify } from "crypto";
 var CITIZEN_ISSUING_CA_SKI = "b8a37f2c64ad677912db7d9e34f246358a2fb909";
 var ResponseValidator = class {
   anchors;
@@ -1497,7 +1474,7 @@ function signedCallbackUrl(fromResponse, rpCallback, flowType) {
   return fromResponse;
 }
 function userChallengeOf(verifier) {
-  return createHash4("sha256").update(verifier, "utf8").digest("base64url");
+  return createHash3("sha256").update(verifier, "utf8").digest("base64url");
 }
 function verifyPayloadSignature(payload, sigB64, key, alg, hash) {
   const sig = Buffer.from(sigB64, "base64");
@@ -1599,7 +1576,7 @@ function mgf1(hash, seed, length) {
   for (let i = 0, n = 0; n < length; i++, n += hashLen(hash)) {
     const c = Buffer.alloc(4);
     c.writeUInt32BE(i, 0);
-    out.push(createHash4(nodeHash(hash)).update(seed).update(c).digest());
+    out.push(createHash3(nodeHash(hash)).update(seed).update(c).digest());
   }
   return Buffer.concat(out).subarray(0, length);
 }
@@ -1623,7 +1600,7 @@ function emsaPssVerify(mHash, em, emBits, hash) {
   const psLen = emLen - hLen - sLen - 2;
   if (!db.subarray(0, psLen).every((b) => b === 0) || db[psLen] !== 1) return false;
   const salt = db.subarray(psLen + 1);
-  const h2 = createHash4(nodeHash(hash)).update(Buffer.alloc(8)).update(mHash).update(salt).digest();
+  const h2 = createHash3(nodeHash(hash)).update(Buffer.alloc(8)).update(mHash).update(salt).digest();
   return h.equals(h2);
 }
 function keyUsageBits(cert) {
@@ -1757,7 +1734,6 @@ function resolveBaseUrl(baseUrl) {
 var EidClient = class {
   auth;
   sign;
-  pdf;
   organization;
   person;
   token;
@@ -1779,11 +1755,6 @@ var EidClient = class {
     const level = cfg.defaultCertificateLevel ?? "QUALIFIED";
     this.auth = new AuthApi(http, cfg.credentials, { certificateLevel: level });
     this.sign = new SignApi(http, cfg.credentials, { certificateLevel: level, sessionTtlMs: cfg.signSessionTtlMs });
-    this.pdf = new PdfApi(http, cfg.credentials, {
-      certificateLevel: level,
-      timeoutMs: cfg.pdfTimeoutMs ?? DEFAULT_PDF_TIMEOUT_MS,
-      maxBytes: cfg.pdfMaxBytes && cfg.pdfMaxBytes > 0 ? cfg.pdfMaxBytes : DEFAULT_PDF_MAX_BYTES
-    });
     this.organization = new OrganizationApi(http);
     this.person = new PersonApi(http);
     this.token = new TokenApi(http, cfg.credentials);
@@ -1791,6 +1762,14 @@ var EidClient = class {
     this.validator = new ResponseValidator(cfg.trust ?? {});
     this.rpName = cfg.credentials.rpName;
   }
+  /** {@link SignApi.pdfDigest} — клиент талын PAdES-ийн DTBS-д гарын үсгийн session (PDF CA руу очихгүй). */
+  signPdfDigest(input) {
+    return this.sign.pdfDigest(input);
+  }
+  /** {@link SignApi.registerSignature} — `pades.complete()`-ийн CMS-ийг CA-д бүртгэнэ (`POST /pdf/signatures`). */
+  registerSignature(input) {
+    return this.sign.registerSignature(input);
+  }
 };
 
 // src/devicelinkv3.ts
@@ -1895,7 +1874,7 @@ function qrDeviceLinkTicker(input, onLink, opts) {
 }
 
 // src/login.ts
-import { createHash as createHash5, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { createHash as createHash4, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
 function memoryLoginStore() {
   const m = /* @__PURE__ */ new Map();
   return {
@@ -1920,6 +1899,51 @@ function memoryLoginStore() {
     }
   };
 }
+var defaultRateLimit = Object.freeze({
+  push: Object.freeze({ limit: 3, windowMs: 6e4 })
+});
+var RATE_KINDS = ["start", "push"];
+function windowLimiter(limit, windowMs) {
+  const hits = /* @__PURE__ */ new Map();
+  return (key) => {
+    const now = Date.now();
+    const h = (hits.get(key) ?? []).filter((t) => now - t < windowMs);
+    if (hits.size > 1e4) hits.clear();
+    if (h.length >= limit) {
+      hits.set(key, h);
+      return false;
+    }
+    h.push(now);
+    hits.set(key, h);
+    return true;
+  };
+}
+function buildRateLimit(opt) {
+  const extra = typeof opt === "function" ? opt : void 0;
+  const user = opt && typeof opt === "object" ? opt : {};
+  for (const k of Object.keys(user)) {
+    if (!RATE_KINDS.includes(k)) throw new Error(`createEidLogin: rateLimit.${k} \u2014 \u0437\u04E9\u0432\u0445\u04E9\u043D start | push`);
+  }
+  const merged = { ...defaultRateLimit, ...user };
+  const perKind = /* @__PURE__ */ new Map();
+  for (const k of RATE_KINDS) {
+    const r = merged[k];
+    if (r === void 0 || r === false) continue;
+    if (typeof r === "function") {
+      perKind.set(k, r);
+      continue;
+    }
+    if (!(Number.isInteger(r.limit) && r.limit > 0 && r.windowMs > 0)) {
+      throw new Error(`createEidLogin: rateLimit.${k} \u2014 limit (\u0431\u04AF\u0445\u044D\u043B > 0), windowMs (> 0)`);
+    }
+    perKind.set(k, windowLimiter(r.limit, r.windowMs));
+  }
+  return async (key) => {
+    const fn = perKind.get(key.slice(0, key.indexOf(":")));
+    if (fn && !await fn(key)) return false;
+    return extra ? extra(key) : true;
+  };
+}
 var CALLBACK_PATH = "/auth/eid/callback";
 function forwardedClientIp(headers, trustProxy) {
   if (trustProxy === false || trustProxy === 0) return void 0;
@@ -1932,7 +1956,7 @@ function forwardedClientIp(headers, trustProxy) {
   return header(headers, "x-real-ip").trim() || void 0;
 }
 var ID_RE = /^(\p{L}{2}[0-9]{8}|[0-9]{8,14}|PNOMN-[0-9]{8,14})$/u;
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var B64URL_RE = /^[A-Za-z0-9_-]{43}$/;
 var IOS_BROWSERS = [
   [/CriOS/i, "googlechromes"],
@@ -1976,7 +2000,7 @@ function readCookie(h, name) {
   }
   return "";
 }
-var sha256hex = (s) => createHash5("sha256").update(s).digest("hex");
+var sha256hex = (s) => createHash4("sha256").update(s).digest("hex");
 function safeEqualHex(a, b) {
   const x = Buffer.from(a, "hex");
   const y = Buffer.from(b, "hex");
@@ -2019,17 +2043,7 @@ function createEidLogin(opts) {
   const successRedirect = opts.successRedirect ?? "/";
   const failureRedirect = opts.failureRedirect ?? "/";
   const onError = opts.onError ?? ((e) => console.error("eid-login:", e instanceof Error ? e.message : e));
-  const pushHits = /* @__PURE__ */ new Map();
-  const rateLimit = opts.rateLimit ?? ((key) => {
-    if (!key.startsWith("push:")) return true;
-    const now = Date.now();
-    const hits = (pushHits.get(key) ?? []).filter((t) => now - t < 6e4);
-    if (pushHits.size > 1e4) pushHits.clear();
-    if (hits.length >= 3) return false;
-    hits.push(now);
-    pushHits.set(key, hits);
-    return true;
-  });
+  const rateLimit = buildRateLimit(opts.rateLimit);
   const displayText = (opts.displayText ?? `${client.rpName}-\u0434 \u043D\u044D\u0432\u0442\u0440\u044D\u0445`).slice(0, 60);
   const interactions = [{ type: "displayTextAndPIN", displayText60: displayText }];
   const json = (status2, body, extra = {}) => ({
@@ -2063,7 +2077,7 @@ function createEidLogin(opts) {
     const dot = raw.indexOf(".");
     const sid = raw.slice(0, dot);
     const binding = raw.slice(dot + 1);
-    if (dot < 0 || !UUID_RE.test(sid) || !B64URL_RE.test(binding)) return void 0;
+    if (dot < 0 || !UUID_RE2.test(sid) || !B64URL_RE.test(binding)) return void 0;
     const tx = await store.get(sid);
     if (!tx || !safeEqualHex(tx.bindingHash, sha256hex(binding))) return void 0;
     if (tx.expiresAt <= Date.now()) {
@@ -2288,8 +2302,6 @@ export {
   CITIZEN_ISSUING_CA_SKI,
   CertChoiceInvalidError,
   DEFAULT_BASE_URL,
-  DEFAULT_PDF_MAX_BYTES,
-  DEFAULT_PDF_TIMEOUT_MS,
   DEFAULT_SIGN_SESSION_TTL_MS,
   DeviceLinkError,
   EidClient,
@@ -2300,7 +2312,7 @@ export {
   NoSigningCertificateError,
   ON_BEHALF_ERROR_CODES,
   OrganizationApi,
-  PdfApi,
+  PDF_SIGNATURE_REGISTER_FIELDS,
   PersonApi,
   RETRYABLE_ERROR_CODES,
   RequestInvalidError,
@@ -2314,7 +2326,9 @@ export {
   acspV2Digest,
   buildAcspV2Payload,
   buildDeviceLink,
+  buildRegisterBody,
   createEidLogin,
+  defaultRateLimit,
   deviceLink,
   deviceLinkInput,
   forwardedClientIp,
@@ -2329,6 +2343,7 @@ export {
   personMatchesCertificate,
   qrDeviceLinkTicker,
   randomChallenge,
+  registrationFromCompleted,
   resolveBaseUrl,
   sessionExpiry,
   sha256Base64,