@getpopapi/n8n-nodes-pop-zoho 0.1.0

package/dist/nodes/PopZohoInvoice/PopZohoInvoice.node.js

@@ -0,0 +1,697 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PopZohoInvoice = void 0;
+const crypto = __importStar(require("crypto"));
+const n8n_workflow_1 = require("n8n-workflow");
+const ZohoInvoiceOAuth2Api_credentials_1 = require("../../credentials/ZohoInvoiceOAuth2Api.credentials");
+// ---------------------------------------------------------------------------
+// Validation
+// ---------------------------------------------------------------------------
+function validatePopPayload(payload, itemIndex, context) {
+    var _a, _b;
+    const data = payload.data;
+    if (!data) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Missing field: data', { itemIndex });
+    }
+    const general = (_a = data.invoice_body) === null || _a === void 0 ? void 0 : _a.general_data;
+    const required = [
+        [general === null || general === void 0 ? void 0 : general.doc_type, 'data.invoice_body.general_data.doc_type'],
+        [general === null || general === void 0 ? void 0 : general.date, 'data.invoice_body.general_data.date'],
+        [general === null || general === void 0 ? void 0 : general.currency, 'data.invoice_body.general_data.currency'],
+        [(_b = data.transferee_client) === null || _b === void 0 ? void 0 : _b.personal_data, 'data.transferee_client.personal_data'],
+        [data.order_items, 'data.order_items'],
+    ];
+    for (const [value, path] of required) {
+        if (value === undefined || value === null || value === '') {
+            throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Missing required field: ${path}`, { itemIndex });
+        }
+    }
+    if (!Array.isArray(data.order_items) || data.order_items.length === 0) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'data.order_items must be a non-empty array', { itemIndex });
+    }
+    const docType = general.doc_type;
+    if (!['TD01', 'TD04'].includes(docType)) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Unsupported doc_type: ${docType}. Accepted values: TD01 (invoice), TD04 (credit note).`, { itemIndex });
+    }
+}
+// ---------------------------------------------------------------------------
+// Zoho API helpers
+// ---------------------------------------------------------------------------
+async function zohoGet(context, apiBase, orgHeaderKey, orgId, path) {
+    const separator = path.includes('?') ? '&' : '?';
+    const options = {
+        method: 'GET',
+        url: `${apiBase}/${path}${separator}organization_id=${orgId}`,
+        headers: { [orgHeaderKey]: orgId },
+        json: true,
+    };
+    return context.helpers.requestWithAuthentication.call(context, 'zohoInvoiceOAuth2Api', options);
+}
+async function zohoPost(context, apiBase, orgHeaderKey, orgId, path, body) {
+    const separator = path.includes('?') ? '&' : '?';
+    const options = {
+        method: 'POST',
+        url: `${apiBase}/${path}${separator}organization_id=${orgId}`,
+        headers: { [orgHeaderKey]: orgId },
+        body,
+        json: true,
+    };
+    return context.helpers.requestWithAuthentication.call(context, 'zohoInvoiceOAuth2Api', options);
+}
+// ---------------------------------------------------------------------------
+// HMAC signature verification
+// ---------------------------------------------------------------------------
+function verifyPopSignature(context, rawBody, headers, secret, itemIndex) {
+    var _a, _b, _c, _d;
+    const signatureHeader = ((_b = (_a = headers['x-pop-signature']) !== null && _a !== void 0 ? _a : headers['X-POP-Signature']) !== null && _b !== void 0 ? _b : '');
+    const timestampHeader = ((_d = (_c = headers['x-pop-timestamp']) !== null && _c !== void 0 ? _c : headers['X-POP-Timestamp']) !== null && _d !== void 0 ? _d : '');
+    if (!signatureHeader || !timestampHeader) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Missing POP signature headers (X-POP-Signature, X-POP-Timestamp). Request rejected.', { itemIndex });
+    }
+    // Reject requests older than 5 minutes (replay protection)
+    const ts = parseInt(timestampHeader, 10);
+    const age = Math.abs(Date.now() / 1000 - ts);
+    if (isNaN(ts) || age > 300) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Request timestamp is invalid or too old (${Math.round(age)}s). Replay attack rejected.`, { itemIndex });
+    }
+    const expected = 'sha256=' + crypto.createHmac('sha256', secret).update(rawBody + timestampHeader).digest('hex');
+    // Constant-time comparison to prevent timing attacks
+    const sigBuf = Buffer.from(signatureHeader);
+    const expectedBuf = Buffer.from(expected);
+    const match = sigBuf.length === expectedBuf.length &&
+        crypto.timingSafeEqual(sigBuf, expectedBuf);
+    if (!match) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Invalid POP signature. Request rejected.', { itemIndex });
+    }
+}
+// ---------------------------------------------------------------------------
+// RSA JWT verification (origin proof)
+// ---------------------------------------------------------------------------
+function verifyPopJwt(token, publicKeyPem, context, itemIndex) {
+    if (!token) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Missing _pop_jwt in payload. Request must originate from POP API.', { itemIndex });
+    }
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Malformed _pop_jwt.', { itemIndex });
+    }
+    const [headerB64, payloadB64, sigB64] = parts;
+    const signingInput = `${headerB64}.${payloadB64}`;
+    // base64url → Buffer (replace url-safe chars, then decode as base64)
+    const fromB64url = (s) => Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
+    const verifier = crypto.createVerify('RSA-SHA256');
+    verifier.update(signingInput);
+    let valid;
+    try {
+        valid = verifier.verify(publicKeyPem, fromB64url(sigB64));
+    }
+    catch {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'POP JWT verification error. Check that the RSA Public Key is correctly set.', { itemIndex });
+    }
+    if (!valid) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Invalid POP JWT signature. Request rejected.', { itemIndex });
+    }
+    let claims;
+    try {
+        claims = JSON.parse(fromB64url(payloadB64).toString('utf8'));
+    }
+    catch {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Cannot parse _pop_jwt claims.', { itemIndex });
+    }
+    if (claims.iss !== 'popapi.io') {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Invalid JWT issuer: "${claims.iss}". Expected "popapi.io".`, { itemIndex });
+    }
+    const nowSec = Math.floor(Date.now() / 1000);
+    if (!claims.exp || claims.exp < nowSec) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'POP JWT has expired. Request rejected.', { itemIndex });
+    }
+}
+// ---------------------------------------------------------------------------
+// Tax resolution
+// ---------------------------------------------------------------------------
+async function buildTaxMap(context, apiBase, orgHeaderKey, orgId, product) {
+    var _a;
+    // Zoho Invoice uses /taxes; Zoho Books uses /settings/taxes
+    const taxPath = product === 'books' ? 'settings/taxes' : 'taxes';
+    const response = await zohoGet(context, apiBase, orgHeaderKey, orgId, taxPath);
+    const taxes = ((_a = response.taxes) !== null && _a !== void 0 ? _a : []);
+    const map = new Map();
+    for (const tax of taxes) {
+        const key = parseFloat(String(tax.tax_percentage)).toFixed(2);
+        map.set(key, tax.tax_id);
+    }
+    return map;
+}
+function resolveTaxId(context, taxMap, rateStr, itemIndex) {
+    const normalized = parseFloat(rateStr || '0').toFixed(2);
+    if (normalized === '0.00')
+        return null;
+    const taxId = taxMap.get(normalized);
+    if (!taxId) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Tax rate ${normalized}% not found in Zoho. Configure it in Settings → Taxes.`, { itemIndex });
+    }
+    return taxId;
+}
+// ---------------------------------------------------------------------------
+// Contact resolution
+// ---------------------------------------------------------------------------
+const GCC_COUNTRIES = new Set(['SA', 'BH', 'KW', 'OM', 'QA']);
+function deriveVatTreatment(countryId, vatCode) {
+    if (!countryId)
+        return null;
+    const country = countryId.toUpperCase();
+    if (country === 'AE') {
+        return vatCode ? 'vat_registered' : 'consumer';
+    }
+    if (GCC_COUNTRIES.has(country)) {
+        return vatCode ? 'gcc_vat_registered' : null;
+    }
+    return null;
+}
+async function searchContacts(context, apiBase, orgHeaderKey, orgId, searchText) {
+    var _a;
+    const response = await zohoGet(context, apiBase, orgHeaderKey, orgId, `contacts?search_text=${encodeURIComponent(searchText)}`);
+    return ((_a = response.contacts) !== null && _a !== void 0 ? _a : []);
+}
+async function resolveContact(context, apiBase, orgHeaderKey, orgId, payload, createIfMissing, matchStrategy, itemIndex) {
+    var _a, _b, _c, _d, _e, _f, _g, _h;
+    const personal = payload.data.transferee_client.personal_data;
+    const place = (_a = payload.data.transferee_client) === null || _a === void 0 ? void 0 : _a.place;
+    const vatCode = (_b = personal.tax_id_vat) === null || _b === void 0 ? void 0 : _b.id_code;
+    const vatCountry = (_c = personal.tax_id_vat) === null || _c === void 0 ? void 0 : _c.country_id;
+    const email = personal.email;
+    const isCompany = !!personal.company_name;
+    const contactName = isCompany
+        ? personal.company_name
+        : [personal.first_name, personal.last_name].filter(Boolean).join(' ');
+    // 1. Search by VAT / TRN (only when strategy includes VAT lookup)
+    if (matchStrategy === 'vat_email_name' && vatCode) {
+        const results = await searchContacts(context, apiBase, orgHeaderKey, orgId, vatCode);
+        if (results.length === 1)
+            return { contactId: results[0].contact_id, contactCreated: false };
+        if (results.length > 1) {
+            throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Multiple Zoho contacts found for VAT/TRN ${vatCode}. Resolve the duplicate manually.`, { itemIndex });
+        }
+    }
+    // 2. Search by email
+    if (email) {
+        const results = await searchContacts(context, apiBase, orgHeaderKey, orgId, email);
+        if (results.length === 1)
+            return { contactId: results[0].contact_id, contactCreated: false };
+        if (results.length > 1) {
+            throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Multiple Zoho contacts found for email ${email}. Resolve the duplicate manually.`, { itemIndex });
+        }
+    }
+    // 3. Search by name
+    if (contactName) {
+        const results = await searchContacts(context, apiBase, orgHeaderKey, orgId, contactName);
+        if (results.length === 1)
+            return { contactId: results[0].contact_id, contactCreated: false };
+        if (results.length > 1) {
+            throw new n8n_workflow_1.NodeOperationError(context.getNode(), `Multiple Zoho contacts found for name "${contactName}". Provide VAT or email to disambiguate.`, { itemIndex });
+        }
+    }
+    // 4. Not found
+    if (!createIfMissing) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Contact not found in Zoho. Set "Create contact if missing" to true to create it automatically.', { itemIndex });
+    }
+    // 5. Create contact
+    const contactBody = {
+        contact_name: contactName,
+        contact_type: 'customer',
+    };
+    if (isCompany) {
+        contactBody.company_name = personal.company_name;
+    }
+    if (email) {
+        contactBody.contact_persons = [{ email, is_primary_contact: true }];
+    }
+    if (place) {
+        contactBody.billing_address = {
+            address: (_d = place.address) !== null && _d !== void 0 ? _d : '',
+            city: (_e = place.city) !== null && _e !== void 0 ? _e : '',
+            zip: (_f = place.zip_code) !== null && _f !== void 0 ? _f : '',
+            state: (_g = place.province_id) !== null && _g !== void 0 ? _g : '',
+            country_code: (_h = place.country_id) !== null && _h !== void 0 ? _h : '',
+        };
+    }
+    const vatTreatment = deriveVatTreatment(vatCountry, vatCode);
+    if (vatTreatment) {
+        contactBody.vat_treatment = vatTreatment;
+    }
+    const created = await zohoPost(context, apiBase, orgHeaderKey, orgId, 'contacts', contactBody);
+    const newContact = created.contact;
+    if (!(newContact === null || newContact === void 0 ? void 0 : newContact.contact_id)) {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), 'Contact creation failed: Zoho did not return a contact_id.', { itemIndex });
+    }
+    return { contactId: newContact.contact_id, contactCreated: true };
+}
+// ---------------------------------------------------------------------------
+// Payment terms
+// ---------------------------------------------------------------------------
+function derivePaymentTermsDays(termsPayment, defaultDays) {
+    if (!termsPayment)
+        return null;
+    if (termsPayment === 'TP01' || termsPayment === 'TP03')
+        return 0;
+    if (termsPayment === 'TP02')
+        return defaultDays;
+    return null;
+}
+// ---------------------------------------------------------------------------
+// Payload mapping
+// ---------------------------------------------------------------------------
+function buildLineItems(items, taxMap, context, itemIndex) {
+    return items.map((item) => {
+        var _a;
+        const taxId = resolveTaxId(context, taxMap, item.rate, itemIndex);
+        const lineItem = {
+            name: item.description,
+            quantity: parseFloat(item.quantity),
+            rate: parseFloat(item.unit_price),
+        };
+        if (taxId)
+            lineItem.tax_id = taxId;
+        if ((_a = item.item_code) === null || _a === void 0 ? void 0 : _a.value)
+            lineItem.sku = item.item_code.value;
+        if (item.unit)
+            lineItem.unit = item.unit;
+        const discountPct = parseFloat(item.discount_percent || '0');
+        const discountAmt = parseFloat(item.discount_amount || '0');
+        const unitPrice = parseFloat(item.unit_price);
+        if (discountPct > 0) {
+            lineItem.discount = discountPct;
+            lineItem.discount_type = 'percentage';
+        }
+        else if (discountAmt > 0 && unitPrice > 0) {
+            // Zoho line items only accept percentage — derive it from the absolute amount
+            lineItem.discount = Math.round((discountAmt / unitPrice) * 10000) / 100;
+            lineItem.discount_type = 'percentage';
+        }
+        return lineItem;
+    });
+}
+function buildZohoInvoiceBody(payload, contactId, taxMap, sendEmail, invoiceStatus, defaultPlaceOfSupply, defaultPaymentTermsDays, context, itemIndex) {
+    var _a, _b, _c, _d;
+    const general = payload.data.invoice_body.general_data;
+    const lineItems = buildLineItems(payload.data.order_items, taxMap, context, itemIndex);
+    const body = {
+        customer_id: contactId,
+        date: general.date,
+        currency_code: general.currency,
+        line_items: lineItems,
+        status: invoiceStatus,
+    };
+    if ((_b = (_a = payload.data) === null || _a === void 0 ? void 0 : _a.purchase_order_data) === null || _b === void 0 ? void 0 : _b.id) {
+        body.reference_number = payload.data.purchase_order_data.id;
+    }
+    const paymentTermsDays = derivePaymentTermsDays((_d = (_c = payload.data) === null || _c === void 0 ? void 0 : _c.payment_data) === null || _d === void 0 ? void 0 : _d.terms_payment, defaultPaymentTermsDays);
+    if (paymentTermsDays !== null) {
+        body.payment_terms = paymentTermsDays;
+    }
+    if (defaultPlaceOfSupply) {
+        body.place_of_supply = defaultPlaceOfSupply;
+    }
+    if (sendEmail) {
+        body.send_from_org_email_id = true;
+    }
+    return body;
+}
+// ---------------------------------------------------------------------------
+// Node definition
+// ---------------------------------------------------------------------------
+class PopZohoInvoice {
+    constructor() {
+        this.description = {
+            displayName: 'POP → Zoho',
+            name: 'popZohoInvoice',
+            icon: 'file:pop-zoho-invoice.svg',
+            group: ['transform'],
+            version: 1,
+            description: 'Connect POP Cloud API (v2) payloads to Zoho Invoice / Zoho Books',
+            defaults: { name: 'POP → Zoho' },
+            inputs: [n8n_workflow_1.NodeConnectionTypes.Main],
+            outputs: [n8n_workflow_1.NodeConnectionTypes.Main],
+            credentials: [
+                {
+                    name: 'zohoInvoiceOAuth2Api',
+                    required: false,
+                },
+            ],
+            properties: [
+                {
+                    displayName: 'POP API URL',
+                    name: 'popApiUrl',
+                    type: 'string',
+                    default: 'https://popapi.io',
+                    description: 'Base URL of your POP API instance (no trailing slash)',
+                    placeholder: 'https://popapi.io',
+                },
+                {
+                    displayName: 'POP API License Key',
+                    name: 'popConnectorSecret',
+                    type: 'string',
+                    typeOptions: { password: true },
+                    default: '',
+                    description: 'Your POP API license key. Used to verify the HMAC signature on every incoming request.',
+                    placeholder: 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx',
+                },
+                {
+                    displayName: 'POP API RSA Public Key Name or ID',
+                    name: 'popPublicKey',
+                    type: 'options',
+                    typeOptions: {
+                        loadOptionsMethod: 'fetchPopPublicKey',
+                        loadOptionsDependsOn: ['popApiUrl'],
+                    },
+                    default: '',
+                    description: 'Click the refresh button to fetch the RSA public key automatically from your POP API instance. Choose from the list, or specify an ID using an <a href="https://docs.n8n.io/code/expressions/">expression</a>.',
+                },
+                {
+                    displayName: 'Dry Run (No Zoho Calls)',
+                    name: 'dryRun',
+                    type: 'boolean',
+                    default: false,
+                    description: 'Whether to validate the POP payload and return the mapped Zoho body without making any API call. Use for testing mapping without Zoho credentials.',
+                },
+                {
+                    displayName: 'Contact Match Strategy',
+                    name: 'contactMatchStrategy',
+                    type: 'options',
+                    options: [
+                        {
+                            name: 'Email → Name',
+                            value: 'email_name',
+                            description: 'Skip VAT lookup — search by email, then name',
+                        },
+                        {
+                            name: 'VAT → Email → Name',
+                            value: 'vat_email_name',
+                            description: 'Search by VAT/TRN first, then email, then company/person name',
+                        },
+                    ],
+                    default: 'vat_email_name',
+                    description: 'How to find an existing Zoho contact for the invoice customer',
+                },
+                {
+                    displayName: 'Create Contact If Missing',
+                    name: 'createContactIfMissing',
+                    type: 'boolean',
+                    default: true,
+                    description: 'Whether to automatically create the contact in Zoho when no match is found',
+                },
+                {
+                    displayName: 'Invoice Status',
+                    name: 'invoiceStatus',
+                    type: 'options',
+                    options: [
+                        { name: 'Draft', value: 'draft' },
+                        { name: 'Sent', value: 'sent' },
+                    ],
+                    default: 'draft',
+                    description: 'Status to set on the created invoice in Zoho',
+                },
+                {
+                    displayName: 'Send Email to Customer',
+                    name: 'sendEmail',
+                    type: 'boolean',
+                    default: false,
+                    description: "Whether to trigger Zoho's built-in invoice email to the customer after creation",
+                },
+                {
+                    displayName: 'Place of Supply',
+                    name: 'placeOfSupply',
+                    type: 'options',
+                    options: [
+                        { name: 'Abu Dhabi (AE-AZ)', value: 'AE-AZ' },
+                        { name: 'Ajman (AE-AJ)', value: 'AE-AJ' },
+                        { name: 'Dubai (AE-DU)', value: 'AE-DU' },
+                        { name: 'Fujairah (AE-FU)', value: 'AE-FU' },
+                        { name: 'Not Specified', value: '' },
+                        { name: 'Other (Enter Code)', value: 'other' },
+                        { name: 'Ras Al Khaimah (AE-RK)', value: 'AE-RK' },
+                        { name: 'Sharjah (AE-SH)', value: 'AE-SH' },
+                        { name: 'Umm Al Quwain (AE-UQ)', value: 'AE-UQ' },
+                    ],
+                    default: '',
+                    description: 'Place of supply for e-invoicing (e.g. UAE emirates). Leave as "Not specified" if not required.',
+                },
+                {
+                    displayName: 'Place of Supply Code',
+                    name: 'placeOfSupplyCustom',
+                    type: 'string',
+                    default: '',
+                    displayOptions: { show: { placeOfSupply: ['other'] } },
+                    placeholder: 'e.g. IN-KA',
+                    description: 'Enter the place of supply code manually',
+                },
+                {
+                    displayName: 'Deferred Payment Terms (Days)',
+                    name: 'defaultPaymentTermsDays',
+                    type: 'number',
+                    default: 30,
+                    description: 'Number of days granted for payment when the payload specifies deferred payment (e.g. bank transfer net 30). Not applied for immediate payments.',
+                },
+            ],
+            usableAsTool: true,
+        };
+        this.methods = {
+            loadOptions: {
+                async fetchPopPublicKey() {
+                    const apiUrl = this.getNodeParameter('popApiUrl').replace(/\/$/, '');
+                    if (!apiUrl)
+                        return [];
+                    const response = await this.helpers.httpRequest({
+                        method: 'GET',
+                        url: `${apiUrl}/wp-json/api/v2/connector/pubkey`,
+                        json: true,
+                    });
+                    const publicKey = response === null || response === void 0 ? void 0 : response.public_key;
+                    if (!publicKey)
+                        return [];
+                    return [{ name: 'POP API Public Key (Auto-Fetched)', value: publicKey }];
+                },
+            },
+        };
+    }
+    async execute() {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w;
+        const items = this.getInputData();
+        const returnData = [];
+        try {
+            const popSecret = this.getNodeParameter('popConnectorSecret', 0);
+            const popPublicKey = this.getNodeParameter('popPublicKey', 0);
+            const dryRunParam = this.getNodeParameter('dryRun', 0);
+            const matchStrategy = this.getNodeParameter('contactMatchStrategy', 0);
+            const createIfMissing = this.getNodeParameter('createContactIfMissing', 0);
+            const sendEmail = this.getNodeParameter('sendEmail', 0);
+            const invoiceStatus = this.getNodeParameter('invoiceStatus', 0);
+            const defaultPaymentTermsDays = this.getNodeParameter('defaultPaymentTermsDays', 0);
+            const placeOfSupplySelect = this.getNodeParameter('placeOfSupply', 0);
+            const defaultPlaceOfSupply = placeOfSupplySelect === 'other'
+                ? this.getNodeParameter('placeOfSupplyCustom', 0).trim()
+                : placeOfSupplySelect;
+            // 1. Security verification — always mandatory, cannot be disabled.
+            //    Two independent checks:
+            //    - HMAC: proves the payload belongs to the customer's license key
+            //    - RSA JWT: proves the request originated from POP API servers
+            if (!popSecret) {
+                throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'POP API License Key is required.');
+            }
+            if (!popPublicKey) {
+                throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'POP API RSA Public Key is required.');
+            }
+            for (let i = 0; i < items.length; i++) {
+                const raw = items[i].json;
+                const body = ((_a = raw.body) !== null && _a !== void 0 ? _a : raw);
+                const headers = ((_b = raw.headers) !== null && _b !== void 0 ? _b : {});
+                const bodyForSig = JSON.stringify((_c = raw.body) !== null && _c !== void 0 ? _c : raw);
+                verifyPopSignature(this, bodyForSig, headers, popSecret, i);
+                verifyPopJwt(body['_pop_jwt'], popPublicKey, this, i);
+            }
+            // 2. Determine if any item needs live Zoho calls
+            //    _pop_dry_run in payload (set server-side by POP API) overrides the node parameter.
+            //    This allows POP API to enforce sandbox→dry_run without the client being able to fake it
+            //    (the field is covered by the HMAC signature).
+            const itemModes = items.map((item) => {
+                var _a;
+                const raw = item.json;
+                const body = ((_a = raw.body) !== null && _a !== void 0 ? _a : raw);
+                const fromPayload = body['_pop_dry_run'];
+                return fromPayload !== undefined ? Boolean(fromPayload) : dryRunParam;
+            });
+            const needsLive = itemModes.some((isDry) => !isDry);
+            // 3. Init Zoho connection once if at least one item is live
+            let taxMap;
+            let apiBase;
+            let orgHeaderKey;
+            let orgId;
+            let product;
+            if (needsLive) {
+                const credentials = await this.getCredentials('zohoInvoiceOAuth2Api');
+                product = (_d = credentials.product) !== null && _d !== void 0 ? _d : 'invoice';
+                const region = (_e = credentials.region) !== null && _e !== void 0 ? _e : 'eu';
+                orgId = credentials.organizationId;
+                apiBase = (_g = ((_f = ZohoInvoiceOAuth2Api_credentials_1.ZOHO_URLS[product]) !== null && _f !== void 0 ? _f : ZohoInvoiceOAuth2Api_credentials_1.ZOHO_URLS.invoice)[region]) !== null && _g !== void 0 ? _g : ZohoInvoiceOAuth2Api_credentials_1.ZOHO_URLS.invoice.eu;
+                orgHeaderKey = (_h = ZohoInvoiceOAuth2Api_credentials_1.ZOHO_ORG_HEADER[product]) !== null && _h !== void 0 ? _h : ZohoInvoiceOAuth2Api_credentials_1.ZOHO_ORG_HEADER.invoice;
+                if (!orgId) {
+                    throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Organization ID is missing in credentials. Set it in Zoho → Settings → Organization Profile.');
+                }
+                taxMap = await buildTaxMap(this, apiBase, orgHeaderKey, orgId, product);
+            }
+            // 4. Process each item
+            for (let i = 0; i < items.length; i++) {
+                try {
+                    const raw = items[i].json;
+                    const popPayload = (raw.body ? raw.body : raw);
+                    const isDryRun = itemModes[i];
+                    validatePopPayload(popPayload, i, this);
+                    const docType = popPayload.data.invoice_body.general_data.doc_type;
+                    const endpoint = docType === 'TD04' ? 'creditnotes' : 'invoices';
+                    if (isDryRun) {
+                        const dryTaxMap = new Map();
+                        for (const item of (_k = (_j = popPayload.data) === null || _j === void 0 ? void 0 : _j.order_items) !== null && _k !== void 0 ? _k : []) {
+                            const normalized = parseFloat(item.rate || '0').toFixed(2);
+                            if (normalized !== '0.00') {
+                                dryTaxMap.set(normalized, `DRY_RUN_TAX_ID_${normalized}pct`);
+                            }
+                        }
+                        const zohoBody = buildZohoInvoiceBody(popPayload, 'DRY_RUN_CONTACT_ID', dryTaxMap, sendEmail, invoiceStatus, defaultPlaceOfSupply, defaultPaymentTermsDays, this, i);
+                        if (docType === 'TD04') {
+                            const connectedId = (_m = (_l = popPayload.data) === null || _l === void 0 ? void 0 : _l.connected_invoice_data) === null || _m === void 0 ? void 0 : _m.id;
+                            const connectedDate = (_p = (_o = popPayload.data) === null || _o === void 0 ? void 0 : _o.connected_invoice_data) === null || _p === void 0 ? void 0 : _p.date;
+                            if (connectedId)
+                                zohoBody.reference_invoice_id = connectedId;
+                            if (connectedDate)
+                                zohoBody.reference_invoice_date = connectedDate;
+                        }
+                        returnData.push({
+                            json: {
+                                success: true,
+                                status_code: 200,
+                                message: 'Dry run: payload validated and mapped successfully. No Zoho API call was made.',
+                                dry_run: true,
+                                zoho_endpoint: `POST /${endpoint}`,
+                                zoho_body: zohoBody,
+                            },
+                            pairedItem: { item: i },
+                        });
+                    }
+                    else {
+                        const { contactId, contactCreated } = await resolveContact(this, apiBase, orgHeaderKey, orgId, popPayload, createIfMissing, matchStrategy, i);
+                        const zohoBody = buildZohoInvoiceBody(popPayload, contactId, taxMap, sendEmail, invoiceStatus, defaultPlaceOfSupply, defaultPaymentTermsDays, this, i);
+                        if (docType === 'TD04') {
+                            const connectedId = (_r = (_q = popPayload.data) === null || _q === void 0 ? void 0 : _q.connected_invoice_data) === null || _r === void 0 ? void 0 : _r.id;
+                            const connectedDate = (_t = (_s = popPayload.data) === null || _s === void 0 ? void 0 : _s.connected_invoice_data) === null || _t === void 0 ? void 0 : _t.date;
+                            if (connectedId)
+                                zohoBody.reference_invoice_id = connectedId;
+                            if (connectedDate)
+                                zohoBody.reference_invoice_date = connectedDate;
+                        }
+                        const response = await zohoPost(this, apiBase, orgHeaderKey, orgId, endpoint, zohoBody);
+                        const doc = ((_v = (_u = response.invoice) !== null && _u !== void 0 ? _u : response.creditnote) !== null && _v !== void 0 ? _v : {});
+                        const docType2 = docType === 'TD04' ? 'creditnote' : 'invoice';
+                        returnData.push({
+                            json: {
+                                success: true,
+                                status_code: 200,
+                                message: `${docType2 === 'creditnote' ? 'Credit note' : 'Invoice'} created successfully in Zoho.`,
+                                zoho_product: product,
+                                zoho_document_type: docType2,
+                                zoho_invoice_id: doc.invoice_id || doc.creditnote_id || null,
+                                zoho_invoice_number: doc.invoice_number || doc.creditnote_number || null,
+                                zoho_status: (_w = doc.status) !== null && _w !== void 0 ? _w : null,
+                                zoho_total: doc.total != null ? Math.round(doc.total * 100) / 100 : null,
+                                contact_id: contactId,
+                                contact_created: contactCreated,
+                            },
+                            pairedItem: { item: i },
+                        });
+                    }
+                }
+                catch (itemError) {
+                    if (this.continueOnFail()) {
+                        const message = itemError instanceof Error ? itemError.message : 'Unknown error.';
+                        returnData.push({
+                            json: { success: false, error_code: 'connector_error', message },
+                            pairedItem: { item: i },
+                        });
+                        continue;
+                    }
+                    throw itemError;
+                }
+            }
+            return [returnData];
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown connector error.';
+            let errorCode = 'connector_error';
+            if (/signature|timestamp|jwt|JWT|issuer|expired/i.test(message)) {
+                errorCode = 'auth_error';
+            }
+            else if (/Missing required field|Missing field|must be a non-empty/i.test(message)) {
+                errorCode = 'validation_error';
+            }
+            else if (/Unsupported doc_type/i.test(message)) {
+                errorCode = 'unsupported_doc_type';
+            }
+            else if (/Tax rate.*not found/i.test(message)) {
+                errorCode = 'tax_not_found';
+            }
+            else if (/Multiple Zoho contacts/i.test(message)) {
+                errorCode = 'contact_ambiguous';
+            }
+            else if (/Contact not found/i.test(message)) {
+                errorCode = 'contact_not_found';
+            }
+            else if (/Contact creation failed/i.test(message)) {
+                errorCode = 'contact_creation_failed';
+            }
+            else if (/Organization ID/i.test(message)) {
+                errorCode = 'config_error';
+            }
+            else if (/License Key|Public Key/i.test(message)) {
+                errorCode = 'config_error';
+            }
+            return [[{
+                        json: { success: false, error_code: errorCode, message },
+                        pairedItem: { item: 0 },
+                    }]];
+        }
+    }
+}
+exports.PopZohoInvoice = PopZohoInvoice;
+//# sourceMappingURL=PopZohoInvoice.node.js.map