@ripwords/myinvois-client 0.1.0 → 0.1.3

package/dist/document-D6VKMAtx.js

@@ -0,0 +1,405 @@
+import crypto, { X509Certificate } from "crypto";
+
+//#region src/utils/document.ts
+/**
+* MyInvois v1.1 Document Generation and Signing Utilities
+* Strictly follows: https://sdk.myinvois.hasil.gov.my/documents/invoice-v1-1
+* JSON Signature Guide: https://sdk.myinvois.hasil.gov.my/signature-creation-json/
+*/
+/**
+* Helper function to recursively sort object keys for JSON canonicalization
+*/
+function sortObjectKeys(obj) {
+	if (obj === null || typeof obj !== "object") return obj;
+	if (Array.isArray(obj)) return obj.map(sortObjectKeys);
+	const sortedObj = {};
+	const keys = Object.keys(obj).sort();
+	for (const key of keys) sortedObj[key] = sortObjectKeys(obj[key]);
+	return sortedObj;
+}
+/**
+* Enhanced canonicalization following MyInvois specification exactly
+* Key changes: ensure consistent ordering and formatting
+*/
+const canonicalizeJSON = (obj) => {
+	const sortedObj = sortObjectKeys(obj);
+	return JSON.stringify(sortedObj, null, 0);
+};
+/**
+* Generates a clean invoice object following MyInvois v1.1 specification exactly
+* This is the base invoice structure WITHOUT signature elements (for hash calculation)
+*
+* Key requirements from working documents:
+* - All mandatory fields must be present
+* - Many optional fields must be present even if empty
+* - Specific field ordering and structure
+* - Correct listID values (e.g., "3166-1" not "ISO3166-1")
+*/
+const generateCleanInvoiceObject = (invoice) => {
+	return {
+		ID: [{ _: invoice.eInvoiceCodeOrNumber }],
+		IssueDate: [{ _: invoice.eInvoiceDate }],
+		IssueTime: [{ _: invoice.eInvoiceTime }],
+		InvoiceTypeCode: [{
+			_: invoice.eInvoiceTypeCode,
+			listVersionID: invoice.eInvoiceVersion || "1.1"
+		}],
+		DocumentCurrencyCode: [{ _: invoice.invoiceCurrencyCode }],
+		AccountingSupplierParty: [{ Party: [{
+			IndustryClassificationCode: [{
+				_: invoice.supplier.industryClassificationCode,
+				name: invoice.supplier.industryClassificationDescription
+			}],
+			PartyIdentification: [{ ID: [{
+				_: invoice.supplier.tin,
+				schemeID: "TIN"
+			}] }, { ID: [{
+				_: invoice.supplier.registrationNumber,
+				schemeID: invoice.supplier.registrationType || "NRIC"
+			}] }],
+			PostalAddress: [{
+				CityName: [{ _: invoice.supplier.address.cityName }],
+				CountrySubentityCode: [{ _: invoice.supplier.address.state }],
+				AddressLine: [{ Line: [{ _: invoice.supplier.address.addressLine0 }] }],
+				Country: [{ IdentificationCode: [{
+					_: invoice.supplier.address.country || "MYS",
+					listID: "3166-1",
+					listAgencyID: "ISO"
+				}] }]
+			}],
+			PartyLegalEntity: [{ RegistrationName: [{ _: invoice.supplier.name }] }],
+			Contact: [{ Telephone: [{ _: invoice.supplier.contactNumber || "" }] }]
+		}] }],
+		AccountingCustomerParty: [{ Party: [{
+			PartyIdentification: [
+				{ ID: [{
+					_: invoice.buyer.tin,
+					schemeID: "TIN"
+				}] },
+				{ ID: [{
+					_: invoice.buyer.registrationNumber,
+					schemeID: invoice.buyer.registrationType || "NRIC"
+				}] },
+				{ ID: [{
+					_: invoice.buyer.sstRegistrationNumber || "NA",
+					schemeID: "SST"
+				}] }
+			],
+			PostalAddress: [{
+				CityName: [{ _: invoice.buyer.address.cityName }],
+				CountrySubentityCode: [{ _: invoice.buyer.address.state }],
+				AddressLine: [{ Line: [{ _: invoice.buyer.address.addressLine0 }] }],
+				Country: [{ IdentificationCode: [{
+					_: invoice.buyer.address.country || "MYS",
+					listID: "3166-1",
+					listAgencyID: "ISO"
+				}] }]
+			}],
+			PartyLegalEntity: [{ RegistrationName: [{ _: invoice.buyer.name }] }],
+			Contact: [{ Telephone: [{ _: invoice.buyer.contactNumber || "" }] }]
+		}] }],
+		TaxTotal: [{
+			TaxAmount: [{
+				_: invoice.taxTotal.taxAmount,
+				currencyID: invoice.invoiceCurrencyCode
+			}],
+			TaxSubtotal: [{
+				TaxableAmount: [{
+					_: invoice.legalMonetaryTotal.taxExclusiveAmount,
+					currencyID: invoice.invoiceCurrencyCode
+				}],
+				TaxAmount: [{
+					_: invoice.taxTotal.taxAmount,
+					currencyID: invoice.invoiceCurrencyCode
+				}],
+				TaxCategory: [{
+					ID: [{ _: invoice.invoiceLineItems[0]?.taxType || "01" }],
+					TaxScheme: [{ ID: [{
+						_: "OTH",
+						schemeAgencyID: "6",
+						schemeID: "UN/ECE 5153"
+					}] }]
+				}]
+			}]
+		}],
+		LegalMonetaryTotal: [{
+			LineExtensionAmount: [{
+				_: invoice.legalMonetaryTotal.taxExclusiveAmount,
+				currencyID: invoice.invoiceCurrencyCode
+			}],
+			TaxExclusiveAmount: [{
+				_: invoice.legalMonetaryTotal.taxExclusiveAmount,
+				currencyID: invoice.invoiceCurrencyCode
+			}],
+			TaxInclusiveAmount: [{
+				_: invoice.legalMonetaryTotal.taxInclusiveAmount,
+				currencyID: invoice.invoiceCurrencyCode
+			}],
+			PayableAmount: [{
+				_: invoice.legalMonetaryTotal.payableAmount,
+				currencyID: invoice.invoiceCurrencyCode
+			}]
+		}],
+		InvoiceLine: invoice.invoiceLineItems.map((item, index) => ({
+			ID: [{ _: (index + 1).toString() }],
+			Item: [{
+				CommodityClassification: [{ ItemClassificationCode: [{
+					_: item.itemClassificationCode,
+					listID: "CLASS"
+				}] }],
+				Description: [{ _: item.itemDescription }]
+			}],
+			ItemPriceExtension: [{ Amount: [{
+				_: item.totalTaxableAmountPerLine,
+				currencyID: invoice.invoiceCurrencyCode
+			}] }],
+			LineExtensionAmount: [{
+				_: item.totalTaxableAmountPerLine,
+				currencyID: invoice.invoiceCurrencyCode
+			}],
+			Price: [{ PriceAmount: [{
+				_: item.unitPrice,
+				currencyID: invoice.invoiceCurrencyCode
+			}] }],
+			TaxTotal: [{
+				TaxAmount: [{
+					_: item.taxAmount,
+					currencyID: invoice.invoiceCurrencyCode
+				}],
+				TaxSubtotal: [{
+					TaxableAmount: [{
+						_: item.totalTaxableAmountPerLine,
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxAmount: [{
+						_: item.taxAmount,
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxCategory: [{
+						ID: [{ _: item.taxType }],
+						TaxScheme: [{ ID: [{
+							_: "OTH",
+							schemeAgencyID: "6",
+							schemeID: "UN/ECE 5153"
+						}] }]
+					}]
+				}]
+			}]
+		})),
+		TaxExchangeRate: invoice.currencyExchangeRate ? [{
+			SourceCurrencyCode: [{ _: invoice.invoiceCurrencyCode }],
+			TargetCurrencyCode: [{ _: "MYR" }],
+			CalculationRate: [{ _: invoice.currencyExchangeRate }]
+		}] : void 0
+	};
+};
+/**
+* Generates the complete UBL document structure with namespace declarations
+*/
+const generateCleanUBLDocument = (invoices) => {
+	return {
+		_D: "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2",
+		_A: "urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2",
+		_B: "urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2",
+		Invoice: invoices.map(generateCleanInvoiceObject)
+	};
+};
+/**
+* Step 2: Calculate Document Digest
+* FIXED: Remove UBLExtensions and Signature before hashing (DS322)
+* Based on working implementation pattern
+*/
+const calculateDocumentDigest = (invoices) => {
+	const cleanDocument = generateCleanUBLDocument(invoices);
+	const documentForHashing = JSON.parse(JSON.stringify(cleanDocument));
+	if (documentForHashing.Invoice && Array.isArray(documentForHashing.Invoice)) documentForHashing.Invoice.forEach((invoice) => {
+		delete invoice.UBLExtensions;
+		delete invoice.Signature;
+	});
+	const documentString = JSON.stringify(documentForHashing);
+	const hash = crypto.createHash("sha256");
+	hash.update(documentString, "utf8");
+	return hash.digest("base64");
+};
+/**
+* Step 4: Calculate Certificate Digest
+* Enhanced to handle certificate content properly
+*/
+const calculateCertificateDigest = (certificatePem) => {
+	const certificateContent = certificatePem.replace(/-----BEGIN CERTIFICATE-----/g, "").replace(/-----END CERTIFICATE-----/g, "").replace(/\s+/g, "");
+	const certificateBinary = Buffer.from(certificateContent, "base64");
+	const hash = crypto.createHash("sha256");
+	hash.update(certificateBinary);
+	return hash.digest("base64");
+};
+/**
+* Enhanced certificate info extraction with better error handling
+* FIXED: Normalize issuer name format to match MyInvois expectations (DS326)
+*/
+const extractCertificateInfo = (certificatePem) => {
+	try {
+		const cert = new X509Certificate(certificatePem);
+		const serialNumberHex = cert.serialNumber;
+		const normalizeDistinguishedName = (dn) => {
+			const normalized = dn.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).join(", ");
+			return normalized.replace(/\s*=\s*/g, "=").replace(/,\s+/g, ", ").replace(/\r/g, "").replace(/\s{2,}/g, " ").trim();
+		};
+		const formatSerialNumber = (serialHex) => {
+			const decimal = BigInt("0x" + serialHex).toString();
+			return decimal;
+		};
+		return {
+			issuerName: normalizeDistinguishedName(cert.issuer),
+			serialNumber: formatSerialNumber(serialNumberHex),
+			subjectName: normalizeDistinguishedName(cert.subject)
+		};
+	} catch (error) {
+		throw new Error(`Failed to extract certificate info: ${error instanceof Error ? error.message : String(error)}`);
+	}
+};
+/**
+* Step 5: Create SignedProperties with enhanced structure
+* FIXED: Simplified structure to match MyInvois expectations (DS320)
+* Following MyInvois JSON signature specification exactly
+*/
+const createSignedProperties = (certificateDigest, signingTime, issuerName, serialNumber) => {
+	return { SignedProperties: [{
+		Id: "id-xades-signed-props",
+		SignedSignatureProperties: [{
+			SigningTime: [{ _: signingTime }],
+			SigningCertificate: [{ Cert: [{
+				CertDigest: [{
+					DigestMethod: [{ Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" }],
+					DigestValue: [{ _: certificateDigest }]
+				}],
+				IssuerSerial: [{
+					X509IssuerName: [{ _: issuerName }],
+					X509SerialNumber: [{ _: serialNumber }]
+				}]
+			}] }]
+		}]
+	}] };
+};
+/**
+* Step 6: Calculate SignedProperties Digest
+* FIXED: Add Target wrapper and use direct JSON stringify (DS320)
+* Based on working implementation pattern
+*/
+const calculateSignedPropertiesDigest = (signedProperties) => {
+	const signedPropertiesWithTarget = {
+		Target: "signature",
+		SignedProperties: signedProperties.SignedProperties
+	};
+	const signedPropertiesString = JSON.stringify(signedPropertiesWithTarget);
+	const hash = crypto.createHash("sha256");
+	hash.update(signedPropertiesString, "utf8");
+	return hash.digest("base64");
+};
+/**
+* Step 3: Create SignedInfo and calculate signature
+* Enhanced with better structure and signature generation
+*/
+const createSignedInfoAndSign = (docDigest, propsDigest, privateKeyPem) => {
+	const signedInfo = {
+		CanonicalizationMethod: [{
+			_: "",
+			Algorithm: "http://www.w3.org/2006/12/xml-c14n11"
+		}],
+		SignatureMethod: [{
+			_: "",
+			Algorithm: "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
+		}],
+		Reference: [{
+			Id: "id-doc-signed-data",
+			Type: "",
+			URI: "",
+			DigestMethod: [{
+				_: "",
+				Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256"
+			}],
+			DigestValue: [{ _: docDigest }]
+		}, {
+			Id: "id-xades-signed-props",
+			Type: "http://uri.etsi.org/01903/v1.3.2#SignedProperties",
+			URI: "#id-xades-signed-props",
+			DigestMethod: [{
+				_: "",
+				Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256"
+			}],
+			DigestValue: [{ _: propsDigest }]
+		}]
+	};
+	const signedInfoString = JSON.stringify(signedInfo);
+	try {
+		const signer = crypto.createSign("RSA-SHA256");
+		signer.update(signedInfoString, "utf8");
+		const signatureValue = signer.sign(privateKeyPem, "base64");
+		return {
+			signedInfo,
+			signatureValue
+		};
+	} catch (error) {
+		throw new Error(`Signature generation failed: ${error instanceof Error ? error.message : String(error)}`);
+	}
+};
+/**
+* Complete document generation with signatures
+* Follows the complete MyInvois JSON signature creation process (Steps 1-7)
+*/
+const generateCompleteDocument = (invoices, signingCredentials) => {
+	try {
+		const docDigest = calculateDocumentDigest(invoices);
+		const signingTime = (/* @__PURE__ */ new Date()).toISOString();
+		const certInfo = extractCertificateInfo(signingCredentials.certificatePem);
+		const certificateDigest = calculateCertificateDigest(signingCredentials.certificatePem);
+		const signedProperties = createSignedProperties(certificateDigest, signingTime, certInfo.issuerName, certInfo.serialNumber);
+		const propsDigest = calculateSignedPropertiesDigest(signedProperties);
+		const { signedInfo, signatureValue } = createSignedInfoAndSign(docDigest, propsDigest, signingCredentials.privateKeyPem);
+		const certificate = signingCredentials.certificatePem.replace(/-----BEGIN CERTIFICATE-----/g, "").replace(/-----END CERTIFICATE-----/g, "").replace(/\s+/g, "");
+		const signedInvoices = invoices.map((invoice) => {
+			const cleanInvoice = generateCleanInvoiceObject(invoice);
+			return {
+				...cleanInvoice,
+				UBLExtensions: [{ UBLExtension: [{
+					ExtensionURI: [{ _: "urn:oasis:names:specification:ubl:dsig:enveloped:xades" }],
+					ExtensionContent: [{ UBLDocumentSignatures: [{ SignatureInformation: [{
+						ID: [{ _: "urn:oasis:names:specification:ubl:signature:1" }],
+						ReferencedSignatureID: [{ _: "urn:oasis:names:specification:ubl:signature:Invoice" }],
+						Signature: [{
+							Id: "signature",
+							Object: [{ QualifyingProperties: [{
+								Target: "signature",
+								SignedProperties: signedProperties.SignedProperties
+							}] }],
+							KeyInfo: [{ X509Data: [{
+								X509Certificate: [{ _: certificate }],
+								X509SubjectName: [{ _: certInfo.subjectName }],
+								X509IssuerSerial: [{
+									X509IssuerName: [{ _: certInfo.issuerName }],
+									X509SerialNumber: [{ _: certInfo.serialNumber }]
+								}]
+							}] }],
+							SignatureValue: [{ _: signatureValue }],
+							SignedInfo: [signedInfo]
+						}]
+					}] }] }]
+				}] }],
+				Signature: [{
+					ID: [{ _: "urn:oasis:names:specification:ubl:signature:Invoice" }],
+					SignatureMethod: [{ _: "urn:oasis:names:specification:ubl:dsig:enveloped:xades" }]
+				}]
+			};
+		});
+		return {
+			_D: "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2",
+			_A: "urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2",
+			_B: "urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2",
+			Invoice: signedInvoices
+		};
+	} catch (error) {
+		throw new Error(`Document generation failed: ${error instanceof Error ? error.message : String(error)}`);
+	}
+};
+
+//#endregion
+export { calculateCertificateDigest, calculateDocumentDigest, calculateSignedPropertiesDigest, canonicalizeJSON, createSignedInfoAndSign, createSignedProperties, extractCertificateInfo, generateCleanInvoiceObject, generateCleanUBLDocument, generateCompleteDocument, sortObjectKeys };