@ripwords/myinvois-client 0.2.28 → 0.2.29

package/dist/index67.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index67.cts","names":[],"sources":["../src/index.d.ts"],"sourcesContent":["import { DocumentStatus, DocumentSummary, DocumentTypeResponse, DocumentTypesResponse, DocumentTypeVersionResponse, DocumentValidationResult, DocumentValidationStepResult, EInvoiceTypeCode, NotificationResponse, NotificationSearchParams, RegistrationType, StandardError, SubmissionResponse, SubmissionStatus, TaxpayerQRCodeResponse, TinSearchParams, TinSearchResponse, AllDocumentsV1_1 } from './types';\nexport type * from './types/index.d.ts';\nexport declare class MyInvoisClient {\n    private readonly baseUrl;\n    private readonly clientId;\n    private readonly clientSecret;\n    private readonly environment;\n    private onBehalfOf?;\n    private readonly signingCredentials;\n    private readonly debug;\n    private token;\n    private tokenExpiration;\n    constructor(clientId: string, clientSecret: string, environment: 'sandbox' | 'production', certificatePem: string, privateKeyPem: string, onBehalfOf?: string, debug?: boolean);\n    updateOnBehalfOf(onBehalfOf: string): Promise<void>;\n    private refreshToken;\n    private getToken;\n    private fetch;\n    /**\n     * Validates a TIN against a NRIC/ARMY/PASSPORT/BRN (Business Registration Number)\n     *\n     * This method verifies if a given Tax Identification Number (TIN) is valid by checking it against\n     * the provided identification type and value through the MyInvois platform's validation service.\n     *\n     * @param tin - The TIN to validate\n     * @param idType - The type of ID to validate against ('NRIC', 'ARMY', 'PASSPORT', or 'BRN')\n     * @param idValue - The value of the ID to validate against\n     * @returns Promise resolving to true if the TIN is valid, false otherwise\n     *\n     * @example\n     * ```typescript\n     * // Validate TIN against NRIC\n     * const isValid = await client.verifyTin('C12345678901234', 'NRIC', '123456789012');\n     * if (isValid) {\n     *   console.log('TIN is valid');\n     * }\n     *\n     * // Validate TIN against Business Registration Number\n     * const isValidBusiness = await client.verifyTin('C98765432109876', 'BRN', '123456-K');\n     * ```\n     *\n     * @remarks\n     * - Returns false if validation fails due to network errors or invalid credentials\n     * - Debug mode provides error logging for troubleshooting validation failures\n     * - This is a non-blocking validation that won't throw exceptions on failure\n     */\n    verifyTin(tin: string, idType: RegistrationType, idValue: string): Promise<boolean>;\n    /**\n     * Searches for a Tax Identification Number (TIN) using taxpayer information.\n     *\n     * This method allows searching for a TIN using either a taxpayer name or a combination\n     * of identification type and value. The search is flexible and supports multiple\n     * identification types including NRIC, ARMY, PASSPORT, and BRN.\n     *\n     * @param params - Search parameters object\n     * @param params.taxpayerName - Optional name of the taxpayer to search for\n     * @param params.idType - Optional type of ID to search with (NRIC, ARMY, PASSPORT, BRN)\n     * @param params.idValue - Optional value of the ID to search with\n     * @returns Promise resolving to TIN search response or standard error\n     *\n     * @example\n     * ```typescript\n     * // Search by taxpayer name\n     * const result = await client.searchTin({ taxpayerName: 'John Doe' });\n     * if ('tin' in result) {\n     *   console.log('Found TIN:', result.tin);\n     * }\n     *\n     * // Search by ID type and value\n     * const result = await client.searchTin({\n     *   idType: 'NRIC',\n     *   idValue: '123456789012'\n     * });\n     * ```\n     *\n     * @remarks\n     * - Either taxpayerName or both idType and idValue must be provided\n     * - Returns StandardError object if search criteria are invalid or inconclusive\n     * - Debug mode provides detailed error logging for troubleshooting\n     * - Search results are not guaranteed to be unique\n     */\n    searchTin(params: TinSearchParams): Promise<TinSearchResponse>;\n    /**\n     * Retrieves taxpayer information from a QR code.\n     *\n     * This method decodes a QR code containing taxpayer information and returns\n     * detailed taxpayer data including TIN, name, contact details, and business information.\n     *\n     * @param qrCodeText - The QR code text to decode\n     * @returns Promise resolving to taxpayer QR code response or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get taxpayer info from QR code\n     * const taxpayerInfo = await client.getTaxpayerQRCode('QR_CODE_TEXT');\n     * if ('tin' in taxpayerInfo) {\n     *   console.log('Taxpayer TIN:', taxpayerInfo.tin);\n     *   console.log('Business Name:', taxpayerInfo.name);\n     *   console.log('Address:', taxpayerInfo.addressLine1);\n     * }\n     * ```\n     *\n     * @remarks\n     * - QR code must be in the correct format specified by MyInvois\n     * - Returns StandardError if QR code is invalid or cannot be decoded\n     * - Debug mode provides detailed error logging\n     */\n    getTaxpayerQRCode(qrCodeText: string): Promise<TaxpayerQRCodeResponse>;\n    /**\n     * Performs an action on a document such as rejection or cancellation.\n     *\n     * This method allows updating the status of a document to either rejected or cancelled,\n     * along with providing a reason for the action. Useful for managing document workflow\n     * and maintaining audit trails.\n     *\n     * @param documentUid - The unique identifier of the document\n     * @param status - The new status to set ('rejected' or 'cancelled')\n     * @param reason - The reason for the status change\n     * @returns Promise resolving to document action response containing UUID, status, and any errors\n     *\n     * @example\n     * ```typescript\n     * // Reject a document with reason\n     * const result = await client.performDocumentAction(\n     *   'doc-123',\n     *   'rejected',\n     *   'Invalid tax calculation'\n     * );\n     *\n     * // Cancel a document\n     * const result = await client.performDocumentAction(\n     *   'doc-456',\n     *   'cancelled',\n     *   'Duplicate submission'\n     * );\n     * ```\n     *\n     * @remarks\n     * - Only valid for documents in appropriate states\n     * - Reason is required and should be descriptive\n     * - Action is irreversible once completed\n     * - Returns error if document cannot be found or action is invalid\n     */\n    performDocumentAction(documentUid: string, status: 'rejected' | 'cancelled', reason: string): Promise<{\n        uuid: string;\n        status: string;\n        error: StandardError;\n    }>;\n    /**\n     * Submits one or more e-invoice documents to the MyInvois platform for processing.\n     *\n     * This method digitally signs each document using the provided certificate and private key,\n     * generates document hashes, encodes them for submission, and sends them to the platform.\n     * The method includes comprehensive validation warnings for document size and count limits.\n     *\n     * @param documents - Array of InvoiceV1_1 documents to be submitted\n     * @returns Promise resolving to submission response containing the submission data and HTTP status\n     * @throws {Error} If PRIVATE_KEY or CERTIFICATE environment variables are missing\n     * @throws {Error} If document signing, encoding, or API submission fails\n     *\n     * @example\n     * ```typescript\n     * // Submit a single invoice\n     * const result = await client.submitDocument([invoiceData]);\n     * console.log(result.data.submissionUid); // Track submission with this UID\n     *\n     * // Submit multiple invoices\n     * const result = await client.submitDocument([invoice1, invoice2, invoice3]);\n     * if (result.status === 202) {\n     *   console.log('Documents submitted successfully');\n     * }\n     * ```\n     *\n     * @remarks\n     * - Requires PRIVATE_KEY and CERTIFICATE environment variables for document signing\n     * - Each document is digitally signed with XML-DSIG before submission\n     * - Documents are base64-encoded for transmission\n     * - API limits: Max 100 documents per submission, 5MB total payload, 300KB per document\n     * - Debug mode provides detailed logging of payload sizes and validation warnings\n     * - Returns HTTP 202 for successful submissions that require processing\n     */\n    submitDocument(documents: AllDocumentsV1_1[]): Promise<{\n        data: SubmissionResponse;\n        status: number;\n    }>;\n    /**\n     * Polls the MyInvois platform to get the current status of a document submission.\n     *\n     * This method continuously checks the submission status until it receives a final result\n     * (Valid or Invalid) or reaches the maximum retry limit. It's designed to handle the\n     * asynchronous nature of document processing on the MyInvois platform.\n     *\n     * @param submissionUid - The unique identifier of the submission to check\n     * @param pollInterval - Time in milliseconds between status checks (default: 1000ms)\n     * @param maxRetries - Maximum number of retry attempts (default: 10)\n     * @returns Promise resolving to submission status object with document summary and any errors\n     *\n     * @example\n     * ```typescript\n     * // Check submission status with default polling\n     * const result = await client.getSubmissionStatus('submission-uid-123');\n     * if (result.status === 'Valid') {\n     *   console.log('All documents processed successfully');\n     *   console.log('Document summaries:', result.documentSummary);\n     * }\n     *\n     * // Custom polling interval and retry count\n     * const result = await client.getSubmissionStatus(\n     *   'submission-uid-123',\n     *   2000, // Poll every 2 seconds\n     *   20    // Try up to 20 times\n     * );\n     * ```\n     *\n     * @remarks\n     * - Automatically retries on network errors until maxRetries is reached\n     * - Returns 'Invalid' status with timeout error if submission processing takes too long\n     * - Debug mode provides detailed logging of polling attempts and responses\n     * - Use reasonable poll intervals to avoid overwhelming the API\n     */\n    getSubmissionStatus(submissionUid: string, pollInterval?: number, maxRetries?: number): Promise<{\n        status: SubmissionStatus;\n        documentSummary?: DocumentSummary[];\n        error?: {\n            code: string;\n            message: string | null;\n            target: string;\n            details: {\n                code: string;\n                message: string;\n                target: string;\n            }[];\n        };\n    }>;\n    /**\n     * Retrieves a document by its unique identifier with the raw document content.\n     *\n     * @param documentUid - The unique identifier of the document to retrieve\n     * @returns Promise resolving to document summary with raw document content as a string\n     * @throws {Error} If the document is not found or request fails\n     *\n     * @example\n     * ```typescript\n     * const document = await client.getDocument('doc-uuid-123');\n     * console.log(document.document); // Raw XML/JSON content\n     * console.log(document.uuid); // Document UUID\n     * ```\n     */\n    getDocument(documentUid: string): Promise<DocumentSummary & {\n        document: string;\n    }>;\n    /**\n     * Retrieves detailed information about a document including validation results.\n     *\n     * @param documentUid - The unique identifier of the document to get details for\n     * @returns Promise resolving to document summary with detailed validation results\n     * @throws {Error} If the document is not found or request fails\n     *\n     * @example\n     * ```typescript\n     * const details = await client.getDocumentDetails('doc-uuid-123');\n     * console.log(details.validationResults.status); // 'Valid' | 'Invalid' | 'Processing'\n     * console.log(details.validationResults.validationSteps); // Array of validation step results\n     * ```\n     */\n    getDocumentDetails(documentUid: string): Promise<DocumentSummary & {\n        validationResults: {\n            status: DocumentValidationResult;\n            validationSteps: DocumentValidationStepResult[];\n        };\n    }>;\n    /**\n     * Searches for documents based on various filter criteria.\n     *\n     * @param params - Search parameters object\n     * @param params.uuid - Optional specific document UUID to search for\n     * @param params.submissionDateFrom - Required start date for submission date range (ISO date string)\n     * @param params.submissionDateTo - Optional end date for submission date range (ISO date string)\n     * @param params.pageSize - Optional number of results per page (default handled by API)\n     * @param params.pageNo - Optional page number for pagination (0-based)\n     * @param params.issueDateFrom - Optional start date for issue date range (ISO date string)\n     * @param params.issueDateTo - Optional end date for issue date range (ISO date string)\n     * @param params.invoiceDirection - Optional filter by invoice direction ('Sent' or 'Received')\n     * @param params.status - Optional filter by document status\n     * @param params.documentType - Optional filter by e-invoice type code\n     * @param params.searchQuery - Optional text search across uuid, buyerTIN, supplierTIN, buyerName, supplierName, internalID, total\n     * @returns Promise resolving to array of document summaries matching the search criteria\n     * @throws {Error} If the search request fails\n     *\n     * @example\n     * ```typescript\n     * // Search for documents submitted in the last 30 days\n     * const documents = await client.searchDocuments({\n     *   submissionDateFrom: '2024-01-01',\n     *   submissionDateTo: '2024-01-31',\n     *   status: 'Valid',\n     *   pageSize: 10\n     * });\n     *\n     * // Search by supplier name\n     * const supplierDocs = await client.searchDocuments({\n     *   submissionDateFrom: '2024-01-01',\n     *   searchQuery: 'ACME Corp',\n     *   invoiceDirection: 'Received'\n     * });\n     * ```\n     */\n    searchDocuments({ uuid, submissionDateFrom, submissionDateTo, pageSize, pageNo, issueDateFrom, issueDateTo, invoiceDirection, status, documentType, searchQuery, }: {\n        uuid?: string;\n        submissionDateFrom: string;\n        submissionDateTo?: string;\n        pageSize?: number;\n        pageNo?: number;\n        issueDateFrom?: string;\n        issueDateTo?: string;\n        invoiceDirection?: 'Sent' | 'Received';\n        status?: DocumentStatus;\n        documentType?: EInvoiceTypeCode;\n        searchQuery?: string;\n    }): Promise<DocumentSummary[]>;\n    /**\n     * Retrieves notifications from the MyInvois platform based on specified search criteria.\n     *\n     * This method allows you to search for system notifications, alerts, and messages\n     * sent by the MyInvois platform regarding document processing, system updates,\n     * or account-related information.\n     *\n     * @param params - Search parameters object for filtering notifications\n     * @param params.dateFrom - Optional start date for notification date range (ISO date string)\n     * @param params.dateTo - Optional end date for notification date range (ISO date string)\n     * @param params.type - Optional notification type filter\n     * @param params.language - Optional language preference for notifications\n     * @param params.status - Optional notification status filter\n     * @param params.pageNo - Optional page number for pagination (0-based)\n     * @param params.pageSize - Optional number of results per page\n     * @returns Promise resolving to notification response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get all notifications from the last 7 days\n     * const notifications = await client.getNotifications({\n     *   dateFrom: '2024-01-01',\n     *   dateTo: '2024-01-07',\n     *   pageSize: 20\n     * });\n     *\n     * // Get unread notifications only\n     * const unreadNotifications = await client.getNotifications({\n     *   status: 0, // Assuming 0 = unread\n     *   language: 'en'\n     * });\n     *\n     * // Paginated notification retrieval\n     * const firstPage = await client.getNotifications({\n     *   dateFrom: '2024-01-01',\n     *   pageNo: 0,\n     *   pageSize: 10\n     * });\n     * ```\n     *\n     * @remarks\n     * - All parameters are optional, allowing flexible filtering\n     * - Returns paginated results when pageNo and pageSize are specified\n     * - Date parameters should be in ISO format (YYYY-MM-DD)\n     * - May return StandardError object if the request fails\n     */\n    getNotifications({ dateFrom, dateTo, type, language, status, pageNo, pageSize, }: NotificationSearchParams): Promise<NotificationResponse>;\n    getDocumentTypes(): Promise<DocumentTypesResponse>;\n    /**\n     * Retrieves detailed information about a specific document type from the MyInvois platform.\n     *\n     * This method fetches metadata and configuration details for a specific document type,\n     * including supported versions, validation rules, and structural requirements.\n     * Useful for understanding document format requirements before submission.\n     *\n     * @param id - The unique identifier of the document type to retrieve\n     * @returns Promise resolving to document type response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get details for e-invoice document type\n     * const invoiceType = await client.getDocumentType(1);\n     * if ('id' in invoiceType) {\n     *   console.log('Document type name:', invoiceType.name);\n     *   console.log('Available versions:', invoiceType.versionNumber);\n     *   console.log('Description:', invoiceType.description);\n     * }\n     *\n     * // Handle potential errors\n     * const documentType = await client.getDocumentType(999);\n     * if ('error' in documentType) {\n     *   console.error('Failed to retrieve document type:', documentType.error.message);\n     * }\n     * ```\n     *\n     * @remarks\n     * - Returns StandardError object if the document type ID doesn't exist\n     * - Document type information includes validation schemas and business rules\n     * - Use this method to discover supported document formats and versions\n     * - Essential for understanding submission requirements for different document types\n     */\n    getDocumentType(id: number): Promise<DocumentTypeResponse>;\n    /**\n     * Generates a shareable QR code URL for a specific document.\n     *\n     * This method retrieves the document details using its unique identifier,\n     * then constructs a URL that can be used to access or share the document\n     * via the MyInvois platform. The URL format differs between sandbox and\n     * production environments.\n     *\n     * @param documentUid - The unique identifier of the document\n     * @returns Promise resolving to a string containing the QR code URL\n     *\n     * @example\n     * ```typescript\n     * const qrCodeUrl = await client.getDocumentQrCode('abc123');\n     * console.log('Shareable QR code URL:', qrCodeUrl);\n     * // Output (sandbox): https://preprod.myinvois.hasil.gov.my/abc123/share/longID\n     * // Output (production): https://myinvois.hasil.gov.my/abc123/share/longID\n     * ```\n     *\n     * @remarks\n     * - The returned URL can be embedded in a QR code for document sharing.\n     * - The method fetches the document to obtain its longID, which is required for the URL.\n     * - Ensure the documentUid is valid and accessible by the current client.\n     */\n    getDocumentQrCode(documentUid: string): Promise<string>;\n    /**\n     * Retrieves detailed information about a specific version of a document type.\n     *\n     * This method fetches version-specific metadata, schema definitions, and validation rules\n     * for a particular document type version. Essential for understanding the exact format\n     * and requirements for document submission in a specific version.\n     *\n     * @param id - The unique identifier of the document type\n     * @param versionId - The unique identifier of the specific version to retrieve\n     * @returns Promise resolving to document type version response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get specific version details for e-invoice\n     * const invoiceV1_1 = await client.getDocumentTypeVersion(1, 1);\n     * if ('id' in invoiceV1_1) {\n     *   console.log('Version number:', invoiceV1_1.versionNumber);\n     *   console.log('Schema:', invoiceV1_1.jsonSchema);\n     *   console.log('Status:', invoiceV1_1.status);\n     * }\n     *\n     * // Compare different versions\n     * const [v1_0, v1_1] = await Promise.all([\n     *   client.getDocumentTypeVersion(1, 0),\n     *   client.getDocumentTypeVersion(1, 1)\n     * ]);\n     *\n     * // Handle version not found\n     * const result = await client.getDocumentTypeVersion(1, 999);\n     * if ('error' in result) {\n     *   console.error('Version not found:', result.error.message);\n     * }\n     * ```\n     *\n     * @remarks\n     * - Returns StandardError object if document type ID or version ID doesn't exist\n     * - Version information includes JSON schema for validation\n     * - Different versions may have different validation rules and field requirements\n     * - Use this to ensure your documents conform to the specific version requirements\n     * - Version status indicates if the version is active, deprecated, or under development\n     */\n    getDocumentTypeVersion(id: number, versionId: number): Promise<DocumentTypeVersionResponse>;\n    static fromP12(clientId: string, clientSecret: string, environment: 'sandbox' | 'production', p12Input: Buffer | string, passphrase: string, onBehalfOf?: string, debug?: boolean): MyInvoisClient;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,IAAW,iBAAiB;CAAC;CAAK,MAAE;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;AAAA"}
+{"version":3,"file":"index67.cts","names":[],"sources":["../src/index.d.ts"],"sourcesContent":["import { DocumentStatus, DocumentSummary, DocumentTypeResponse, DocumentTypesResponse, DocumentTypeVersionResponse, DocumentValidationResult, DocumentValidationStepResult, EInvoiceTypeCode, NotificationResponse, NotificationSearchParams, RegistrationType, StandardError, SubmissionResponse, SubmissionStatus, TaxpayerQRCodeResponse, TinSearchParams, TinSearchResponse, AllDocumentsV1_1 } from './types';\nexport type * from './types/index.d.ts';\nexport declare class MyInvoisClient {\n    private readonly baseUrl;\n    private readonly clientId;\n    private readonly clientSecret;\n    private readonly environment;\n    private onBehalfOf?;\n    private readonly signingCredentials;\n    private readonly debug;\n    private token;\n    private tokenExpiration;\n    constructor(clientId: string, clientSecret: string, environment: 'sandbox' | 'production', certificatePem: string, privateKeyPem: string, onBehalfOf?: string, debug?: boolean);\n    updateOnBehalfOf(onBehalfOf: string): Promise<void>;\n    private refreshToken;\n    private getToken;\n    private fetch;\n    /**\n     * Validates a TIN against a NRIC/ARMY/PASSPORT/BRN (Business Registration Number)\n     *\n     * This method verifies if a given Tax Identification Number (TIN) is valid by checking it against\n     * the provided identification type and value through the MyInvois platform's validation service.\n     *\n     * @param tin - The TIN to validate\n     * @param idType - The type of ID to validate against ('NRIC', 'ARMY', 'PASSPORT', or 'BRN')\n     * @param idValue - The value of the ID to validate against\n     * @returns Promise resolving to true if the TIN is valid, false otherwise\n     *\n     * @example\n     * ```typescript\n     * // Validate TIN against NRIC\n     * const isValid = await client.verifyTin('C12345678901234', 'NRIC', '123456789012');\n     * if (isValid) {\n     *   console.log('TIN is valid');\n     * }\n     *\n     * // Validate TIN against Business Registration Number\n     * const isValidBusiness = await client.verifyTin('C98765432109876', 'BRN', '123456-K');\n     * ```\n     *\n     * @remarks\n     * - Returns false if validation fails due to network errors or invalid credentials\n     * - Debug mode provides error logging for troubleshooting validation failures\n     * - This is a non-blocking validation that won't throw exceptions on failure\n     */\n    verifyTin(tin: string, idType: RegistrationType, idValue: string): Promise<boolean>;\n    /**\n     * Searches for a Tax Identification Number (TIN) using taxpayer information.\n     *\n     * This method allows searching for a TIN using either a taxpayer name or a combination\n     * of identification type and value. The search is flexible and supports multiple\n     * identification types including NRIC, ARMY, PASSPORT, and BRN.\n     *\n     * @param params - Search parameters object\n     * @param params.taxpayerName - Optional name of the taxpayer to search for\n     * @param params.idType - Optional type of ID to search with (NRIC, ARMY, PASSPORT, BRN)\n     * @param params.idValue - Optional value of the ID to search with\n     * @returns Promise resolving to TIN search response or standard error\n     *\n     * @example\n     * ```typescript\n     * // Search by taxpayer name\n     * const result = await client.searchTin({ taxpayerName: 'John Doe' });\n     * if ('tin' in result) {\n     *   console.log('Found TIN:', result.tin);\n     * }\n     *\n     * // Search by ID type and value\n     * const result = await client.searchTin({\n     *   idType: 'NRIC',\n     *   idValue: '123456789012'\n     * });\n     * ```\n     *\n     * @remarks\n     * - Either taxpayerName or both idType and idValue must be provided\n     * - Returns StandardError object if search criteria are invalid or inconclusive\n     * - Debug mode provides detailed error logging for troubleshooting\n     * - Search results are not guaranteed to be unique\n     */\n    searchTin(params: TinSearchParams): Promise<TinSearchResponse>;\n    /**\n     * Retrieves taxpayer information from a QR code.\n     *\n     * This method decodes a QR code containing taxpayer information and returns\n     * detailed taxpayer data including TIN, name, contact details, and business information.\n     *\n     * @param qrCodeText - The QR code text to decode\n     * @returns Promise resolving to taxpayer QR code response or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get taxpayer info from QR code\n     * const taxpayerInfo = await client.getTaxpayerQRCode('QR_CODE_TEXT');\n     * if ('tin' in taxpayerInfo) {\n     *   console.log('Taxpayer TIN:', taxpayerInfo.tin);\n     *   console.log('Business Name:', taxpayerInfo.name);\n     *   console.log('Address:', taxpayerInfo.addressLine1);\n     * }\n     * ```\n     *\n     * @remarks\n     * - QR code must be in the correct format specified by MyInvois\n     * - Returns StandardError if QR code is invalid or cannot be decoded\n     * - Debug mode provides detailed error logging\n     */\n    getTaxpayerQRCode(qrCodeText: string): Promise<TaxpayerQRCodeResponse>;\n    /**\n     * Performs an action on a document such as rejection or cancellation.\n     *\n     * This method allows updating the status of a document to either rejected or cancelled,\n     * along with providing a reason for the action. Useful for managing document workflow\n     * and maintaining audit trails.\n     *\n     * @param documentUid - The unique identifier of the document\n     * @param status - The new status to set ('rejected' or 'cancelled')\n     * @param reason - The reason for the status change\n     * @returns Promise resolving to document action response containing UUID, status, and any errors\n     *\n     * @example\n     * ```typescript\n     * // Reject a document with reason\n     * const result = await client.performDocumentAction(\n     *   'doc-123',\n     *   'rejected',\n     *   'Invalid tax calculation'\n     * );\n     *\n     * // Cancel a document\n     * const result = await client.performDocumentAction(\n     *   'doc-456',\n     *   'cancelled',\n     *   'Duplicate submission'\n     * );\n     * ```\n     *\n     * @remarks\n     * - Only valid for documents in appropriate states\n     * - Reason is required and should be descriptive\n     * - Action is irreversible once completed\n     * - Returns error if document cannot be found or action is invalid\n     */\n    performDocumentAction(documentUid: string, status: 'rejected' | 'cancelled', reason: string): Promise<{\n        uuid: string;\n        status: string;\n        error: StandardError;\n    }>;\n    /**\n     * Submits one or more e-invoice documents to the MyInvois platform for processing.\n     *\n     * This method digitally signs each document using the provided certificate and private key,\n     * generates document hashes, encodes them for submission, and sends them to the platform.\n     * The method includes comprehensive validation warnings for document size and count limits.\n     *\n     * @param documents - Array of InvoiceV1_1 documents to be submitted\n     * @returns Promise resolving to submission response containing the submission data and HTTP status\n     * @throws {Error} If PRIVATE_KEY or CERTIFICATE environment variables are missing\n     * @throws {Error} If document signing, encoding, or API submission fails\n     *\n     * @example\n     * ```typescript\n     * // Submit a single invoice\n     * const result = await client.submitDocument([invoiceData]);\n     * console.log(result.data.submissionUid); // Track submission with this UID\n     *\n     * // Submit multiple invoices\n     * const result = await client.submitDocument([invoice1, invoice2, invoice3]);\n     * if (result.status === 202) {\n     *   console.log('Documents submitted successfully');\n     * }\n     * ```\n     *\n     * @remarks\n     * - Requires PRIVATE_KEY and CERTIFICATE environment variables for document signing\n     * - Each document is digitally signed with XML-DSIG before submission\n     * - Documents are base64-encoded for transmission\n     * - API limits: Max 100 documents per submission, 5MB total payload, 300KB per document\n     * - Debug mode provides detailed logging of payload sizes and validation warnings\n     * - Returns HTTP 202 for successful submissions that require processing\n     */\n    submitDocument(documents: AllDocumentsV1_1[]): Promise<{\n        data: SubmissionResponse;\n        status: number;\n    }>;\n    /**\n     * Polls the MyInvois platform to get the current status of a document submission.\n     *\n     * This method continuously checks the submission status until it receives a final result\n     * (Valid or Invalid) or reaches the maximum retry limit. It's designed to handle the\n     * asynchronous nature of document processing on the MyInvois platform.\n     *\n     * @param submissionUid - The unique identifier of the submission to check\n     * @param pollInterval - Time in milliseconds between status checks (default: 1000ms)\n     * @param maxRetries - Maximum number of retry attempts (default: 10)\n     * @returns Promise resolving to submission status object with document summary and any errors\n     *\n     * @example\n     * ```typescript\n     * // Check submission status with default polling\n     * const result = await client.getSubmissionStatus('submission-uid-123');\n     * if (result.status === 'Valid') {\n     *   console.log('All documents processed successfully');\n     *   console.log('Document summaries:', result.documentSummary);\n     * }\n     *\n     * // Custom polling interval and retry count\n     * const result = await client.getSubmissionStatus(\n     *   'submission-uid-123',\n     *   2000, // Poll every 2 seconds\n     *   20    // Try up to 20 times\n     * );\n     * ```\n     *\n     * @remarks\n     * - Automatically retries on network errors until maxRetries is reached\n     * - Returns 'Invalid' status with timeout error if submission processing takes too long\n     * - Debug mode provides detailed logging of polling attempts and responses\n     * - Use reasonable poll intervals to avoid overwhelming the API\n     */\n    getSubmissionStatus(submissionUid: string, pollInterval?: number, maxRetries?: number): Promise<{\n        status: SubmissionStatus;\n        documentSummary?: DocumentSummary[];\n        error?: {\n            code: string;\n            message: string | null;\n            target: string;\n            details: {\n                code: string;\n                message: string;\n                target: string;\n            }[];\n        };\n    }>;\n    /**\n     * Retrieves a document by its unique identifier with the raw document content.\n     *\n     * @param documentUid - The unique identifier of the document to retrieve\n     * @returns Promise resolving to document summary with raw document content as a string\n     * @throws {Error} If the document is not found or request fails\n     *\n     * @example\n     * ```typescript\n     * const document = await client.getDocument('doc-uuid-123');\n     * console.log(document.document); // Raw XML/JSON content\n     * console.log(document.uuid); // Document UUID\n     * ```\n     */\n    getDocument(documentUid: string): Promise<DocumentSummary & {\n        document: string;\n    }>;\n    /**\n     * Retrieves detailed information about a document including validation results.\n     *\n     * @param documentUid - The unique identifier of the document to get details for\n     * @returns Promise resolving to document summary with detailed validation results\n     * @throws {Error} If the document is not found or request fails\n     *\n     * @example\n     * ```typescript\n     * const details = await client.getDocumentDetails('doc-uuid-123');\n     * console.log(details.validationResults.status); // 'Valid' | 'Invalid' | 'Processing'\n     * console.log(details.validationResults.validationSteps); // Array of validation step results\n     * ```\n     */\n    getDocumentDetails(documentUid: string): Promise<DocumentSummary & {\n        validationResults: {\n            status: DocumentValidationResult;\n            validationSteps: DocumentValidationStepResult[];\n        };\n    }>;\n    /**\n     * Searches for documents based on various filter criteria.\n     *\n     * @param params - Search parameters object\n     * @param params.uuid - Optional specific document UUID to search for\n     * @param params.submissionDateFrom - Required start date for submission date range (ISO date string)\n     * @param params.submissionDateTo - Optional end date for submission date range (ISO date string)\n     * @param params.pageSize - Optional number of results per page (default handled by API)\n     * @param params.pageNo - Optional page number for pagination (0-based)\n     * @param params.issueDateFrom - Optional start date for issue date range (ISO date string)\n     * @param params.issueDateTo - Optional end date for issue date range (ISO date string)\n     * @param params.invoiceDirection - Optional filter by invoice direction ('Sent' or 'Received')\n     * @param params.status - Optional filter by document status\n     * @param params.documentType - Optional filter by e-invoice type code\n     * @param params.searchQuery - Optional text search across uuid, buyerTIN, supplierTIN, buyerName, supplierName, internalID, total\n     * @returns Promise resolving to array of document summaries matching the search criteria\n     * @throws {Error} If the search request fails\n     *\n     * @example\n     * ```typescript\n     * // Search for documents submitted in the last 30 days\n     * const documents = await client.searchDocuments({\n     *   submissionDateFrom: '2024-01-01',\n     *   submissionDateTo: '2024-01-31',\n     *   status: 'Valid',\n     *   pageSize: 10\n     * });\n     *\n     * // Search by supplier name\n     * const supplierDocs = await client.searchDocuments({\n     *   submissionDateFrom: '2024-01-01',\n     *   searchQuery: 'ACME Corp',\n     *   invoiceDirection: 'Received'\n     * });\n     * ```\n     */\n    searchDocuments({ uuid, submissionDateFrom, submissionDateTo, pageSize, pageNo, issueDateFrom, issueDateTo, invoiceDirection, status, documentType, searchQuery, }: {\n        uuid?: string;\n        submissionDateFrom: string;\n        submissionDateTo?: string;\n        pageSize?: number;\n        pageNo?: number;\n        issueDateFrom?: string;\n        issueDateTo?: string;\n        invoiceDirection?: 'Sent' | 'Received';\n        status?: DocumentStatus;\n        documentType?: EInvoiceTypeCode;\n        searchQuery?: string;\n    }): Promise<DocumentSummary[]>;\n    /**\n     * Retrieves notifications from the MyInvois platform based on specified search criteria.\n     *\n     * This method allows you to search for system notifications, alerts, and messages\n     * sent by the MyInvois platform regarding document processing, system updates,\n     * or account-related information.\n     *\n     * @param params - Search parameters object for filtering notifications\n     * @param params.dateFrom - Optional start date for notification date range (ISO date string)\n     * @param params.dateTo - Optional end date for notification date range (ISO date string)\n     * @param params.type - Optional notification type filter\n     * @param params.language - Optional language preference for notifications\n     * @param params.status - Optional notification status filter\n     * @param params.pageNo - Optional page number for pagination (0-based)\n     * @param params.pageSize - Optional number of results per page\n     * @returns Promise resolving to notification response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get all notifications from the last 7 days\n     * const notifications = await client.getNotifications({\n     *   dateFrom: '2024-01-01',\n     *   dateTo: '2024-01-07',\n     *   pageSize: 20\n     * });\n     *\n     * // Get unread notifications only\n     * const unreadNotifications = await client.getNotifications({\n     *   status: 0, // Assuming 0 = unread\n     *   language: 'en'\n     * });\n     *\n     * // Paginated notification retrieval\n     * const firstPage = await client.getNotifications({\n     *   dateFrom: '2024-01-01',\n     *   pageNo: 0,\n     *   pageSize: 10\n     * });\n     * ```\n     *\n     * @remarks\n     * - All parameters are optional, allowing flexible filtering\n     * - Returns paginated results when pageNo and pageSize are specified\n     * - Date parameters should be in ISO format (YYYY-MM-DD)\n     * - May return StandardError object if the request fails\n     */\n    getNotifications({ dateFrom, dateTo, type, language, status, pageNo, pageSize, }: NotificationSearchParams): Promise<NotificationResponse>;\n    getDocumentTypes(): Promise<DocumentTypesResponse>;\n    /**\n     * Retrieves detailed information about a specific document type from the MyInvois platform.\n     *\n     * This method fetches metadata and configuration details for a specific document type,\n     * including supported versions, validation rules, and structural requirements.\n     * Useful for understanding document format requirements before submission.\n     *\n     * @param id - The unique identifier of the document type to retrieve\n     * @returns Promise resolving to document type response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get details for e-invoice document type\n     * const invoiceType = await client.getDocumentType(1);\n     * if ('id' in invoiceType) {\n     *   console.log('Document type name:', invoiceType.name);\n     *   console.log('Available versions:', invoiceType.versionNumber);\n     *   console.log('Description:', invoiceType.description);\n     * }\n     *\n     * // Handle potential errors\n     * const documentType = await client.getDocumentType(999);\n     * if ('error' in documentType) {\n     *   console.error('Failed to retrieve document type:', documentType.error.message);\n     * }\n     * ```\n     *\n     * @remarks\n     * - Returns StandardError object if the document type ID doesn't exist\n     * - Document type information includes validation schemas and business rules\n     * - Use this method to discover supported document formats and versions\n     * - Essential for understanding submission requirements for different document types\n     */\n    getDocumentType(id: number): Promise<DocumentTypeResponse>;\n    /**\n     * Generates a shareable QR code URL for a specific document.\n     *\n     * This method retrieves the document details using its unique identifier,\n     * then constructs a URL that can be used to access or share the document\n     * via the MyInvois platform. The URL format differs between sandbox and\n     * production environments.\n     *\n     * @param documentUid - The unique identifier of the document\n     * @returns Promise resolving to a string containing the QR code URL\n     *\n     * @example\n     * ```typescript\n     * const qrCodeUrl = await client.getDocumentQrCode('abc123');\n     * console.log('Shareable QR code URL:', qrCodeUrl);\n     * // Output (sandbox): https://preprod.myinvois.hasil.gov.my/abc123/share/longId\n     * // Output (production): https://myinvois.hasil.gov.my/abc123/share/longId\n     * ```\n     *\n     * @remarks\n     * - The returned URL can be embedded in a QR code for document sharing.\n     * - The method fetches the document to obtain its longId, which is required for the URL.\n     * - Ensure the documentUid is valid and accessible by the current client.\n     */\n    getDocumentQrCode(documentUid: string): Promise<string>;\n    /**\n     * Retrieves detailed information about a specific version of a document type.\n     *\n     * This method fetches version-specific metadata, schema definitions, and validation rules\n     * for a particular document type version. Essential for understanding the exact format\n     * and requirements for document submission in a specific version.\n     *\n     * @param id - The unique identifier of the document type\n     * @param versionId - The unique identifier of the specific version to retrieve\n     * @returns Promise resolving to document type version response object or standard error\n     *\n     * @example\n     * ```typescript\n     * // Get specific version details for e-invoice\n     * const invoiceV1_1 = await client.getDocumentTypeVersion(1, 1);\n     * if ('id' in invoiceV1_1) {\n     *   console.log('Version number:', invoiceV1_1.versionNumber);\n     *   console.log('Schema:', invoiceV1_1.jsonSchema);\n     *   console.log('Status:', invoiceV1_1.status);\n     * }\n     *\n     * // Compare different versions\n     * const [v1_0, v1_1] = await Promise.all([\n     *   client.getDocumentTypeVersion(1, 0),\n     *   client.getDocumentTypeVersion(1, 1)\n     * ]);\n     *\n     * // Handle version not found\n     * const result = await client.getDocumentTypeVersion(1, 999);\n     * if ('error' in result) {\n     *   console.error('Version not found:', result.error.message);\n     * }\n     * ```\n     *\n     * @remarks\n     * - Returns StandardError object if document type ID or version ID doesn't exist\n     * - Version information includes JSON schema for validation\n     * - Different versions may have different validation rules and field requirements\n     * - Use this to ensure your documents conform to the specific version requirements\n     * - Version status indicates if the version is active, deprecated, or under development\n     */\n    getDocumentTypeVersion(id: number, versionId: number): Promise<DocumentTypeVersionResponse>;\n    static fromP12(clientId: string, clientSecret: string, environment: 'sandbox' | 'production', p12Input: Buffer | string, passphrase: string, onBehalfOf?: string, debug?: boolean): MyInvoisClient;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,IAAW,iBAAiB;CAAC;CAAK,MAAE;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;CAAA,MAAA;AAAA"}

package/dist/index7.cjs

@@ -1,6 +1,3 @@
-require('./formatIdValue-i67o4kyD.cjs');
-const require_taxpayerValidation = require('./taxpayerValidation-D_jGaVty.cjs');
+const require_getBaseUrl = require('./getBaseUrl-D0G4GZmp.cjs');
 
-exports.taxpayerQRCode = require_taxpayerValidation.taxpayerQRCode;
-exports.tinSearch = require_taxpayerValidation.tinSearch;
-exports.verifyTin = require_taxpayerValidation.verifyTin;
+exports.getBaseUrl = require_getBaseUrl.getBaseUrl;

package/dist/index8.cjs

@@ -1,62 +1,330 @@
+const require_chunk = require('./chunk-CUT6urMc.cjs');
+require('./formatIdValue-i67o4kyD.cjs');
+const require_document = require('./document-DWsGewNs.cjs');
+const crypto = require_chunk.__toESM(require("crypto"));
 
-//#region src/types/classification-codes.d.ts
+//#region src/utils/signature-diagnostics.ts
 /**
-* Enum representing the allowed classification codes with descriptive names.
-* Provides a more readable way to reference classification codes.
-*
-* @example
-* const code = ClassificationCodeEnum.ComputerSmartphoneOrTablet;
-* console.log(code); // Output: "003"
+* Analyzes certificate for MyInvois compatibility issues
 */
-let ClassificationCodeEnum = /* @__PURE__ */ function(ClassificationCodeEnum$1) {
-	ClassificationCodeEnum$1["BreastfeedingEquipment"] = "001";
-	ClassificationCodeEnum$1["ChildCareCentresAndKindergartensFees"] = "002";
-	ClassificationCodeEnum$1["ComputerSmartphoneOrTablet"] = "003";
-	ClassificationCodeEnum$1["ConsolidatedEInvoice"] = "004";
-	ClassificationCodeEnum$1["ConstructionMaterials"] = "005";
-	ClassificationCodeEnum$1["Disbursement"] = "006";
-	ClassificationCodeEnum$1["Donation"] = "007";
-	ClassificationCodeEnum$1["ECommerceEInvoiceToBuyer"] = "008";
-	ClassificationCodeEnum$1["ECommerceSelfBilledToSellerLogistics"] = "009";
-	ClassificationCodeEnum$1["EducationFees"] = "010";
-	ClassificationCodeEnum$1["GoodsOnConsignmentConsignor"] = "011";
-	ClassificationCodeEnum$1["GoodsOnConsignmentConsignee"] = "012";
-	ClassificationCodeEnum$1["GymMembership"] = "013";
-	ClassificationCodeEnum$1["InsuranceEducationMedicalBenefits"] = "014";
-	ClassificationCodeEnum$1["InsuranceTakafulLife"] = "015";
-	ClassificationCodeEnum$1["InterestFinancingExpenses"] = "016";
-	ClassificationCodeEnum$1["InternetSubscription"] = "017";
-	ClassificationCodeEnum$1["LandAndBuilding"] = "018";
-	ClassificationCodeEnum$1["MedicalExamLearningDisabilities"] = "019";
-	ClassificationCodeEnum$1["MedicalExamVaccination"] = "020";
-	ClassificationCodeEnum$1["MedicalExpensesSeriousDiseases"] = "021";
-	ClassificationCodeEnum$1["Others"] = "022";
-	ClassificationCodeEnum$1["PetroleumOperations"] = "023";
-	ClassificationCodeEnum$1["PrivateRetirementSchemeDeferredAnnuity"] = "024";
-	ClassificationCodeEnum$1["MotorVehicle"] = "025";
-	ClassificationCodeEnum$1["SubscriptionBooksJournalsEtc"] = "026";
-	ClassificationCodeEnum$1["Reimbursement"] = "027";
-	ClassificationCodeEnum$1["RentalOfMotorVehicle"] = "028";
-	ClassificationCodeEnum$1["EVChargingFacilities"] = "029";
-	ClassificationCodeEnum$1["RepairAndMaintenance"] = "030";
-	ClassificationCodeEnum$1["ResearchAndDevelopment"] = "031";
-	ClassificationCodeEnum$1["ForeignIncome"] = "032";
-	ClassificationCodeEnum$1["SelfBilledBettingGaming"] = "033";
-	ClassificationCodeEnum$1["SelfBilledImportationGoods"] = "034";
-	ClassificationCodeEnum$1["SelfBilledImportationServices"] = "035";
-	ClassificationCodeEnum$1["SelfBilledOthers"] = "036";
-	ClassificationCodeEnum$1["SelfBilledMonetaryPaymentToAgents"] = "037";
-	ClassificationCodeEnum$1["SportsEquipmentRentalFeesEtc"] = "038";
-	ClassificationCodeEnum$1["SupportingEquipmentDisabledPerson"] = "039";
-	ClassificationCodeEnum$1["VoluntaryContributionProvidentFund"] = "040";
-	ClassificationCodeEnum$1["DentalExamTreatment"] = "041";
-	ClassificationCodeEnum$1["FertilityTreatment"] = "042";
-	ClassificationCodeEnum$1["TreatmentHomeCareNursingEtc"] = "043";
-	ClassificationCodeEnum$1["VouchersGiftCardsLoyaltyPoints"] = "044";
-	ClassificationCodeEnum$1["SelfBilledNonMonetaryPaymentToAgents"] = "045";
-	return ClassificationCodeEnum$1;
-}({});
+function analyzeCertificateForDiagnostics(certificatePem) {
+	const issues = [];
+	const recommendations = [];
+	try {
+		const cert = new crypto.default.X509Certificate(certificatePem);
+		const certInfo = require_document.extractCertificateInfo(certificatePem);
+		const parseSubjectFields = (dn) => {
+			const fields = {};
+			dn.split("\n").forEach((line) => {
+				const trimmed = line.trim();
+				if (trimmed.includes("=")) {
+					const [key, ...valueParts] = trimmed.split("=");
+					if (key) fields[key.trim()] = valueParts.join("=").trim();
+				}
+			});
+			return fields;
+		};
+		const subjectFields = parseSubjectFields(cert.subject);
+		const organizationIdentifier = subjectFields["organizationIdentifier"] || subjectFields["2.5.4.97"];
+		const serialNumber = subjectFields["serialNumber"];
+		if (!organizationIdentifier) {
+			issues.push("DS311: Certificate missing organizationIdentifier field (TIN)");
+			recommendations.push("CRITICAL: Generate new certificate with organizationIdentifier matching your MyInvois TIN");
+			recommendations.push("Portal Error: \"Signer of invoice doesn't match the submitter of document. TIN doesn't match with the OI.\"");
+		} else if (organizationIdentifier.length < 10) {
+			issues.push("DS311: OrganizationIdentifier (TIN) appears too short - may cause submission rejection");
+			recommendations.push("Verify TIN format matches exactly what is registered in MyInvois");
+		}
+		if (!serialNumber) {
+			issues.push("DS312: Certificate missing serialNumber field (business registration)");
+			recommendations.push("CRITICAL: Generate new certificate with serialNumber matching your business registration");
+			recommendations.push("Portal Error: \"Submitter registration/identity number doesn't match with the certificate SERIALNUMBER.\"");
+		}
+		if (cert.issuer === cert.subject) {
+			issues.push("DS329: Self-signed certificate detected - will fail chain of trust validation");
+			recommendations.push("BLOCKING: Obtain certificate from MyInvois-approved CA:");
+			recommendations.push("• MSC Trustgate Sdn Bhd");
+			recommendations.push("• DigiCert Sdn Bhd");
+			recommendations.push("• Cybersign Asia Sdn Bhd");
+			recommendations.push("Portal Error: \"Certificate is not valid according to the chain of trust validation or has been issued by an untrusted certificate authority.\"");
+		} else {
+			const issuerName = cert.issuer.toLowerCase();
+			const approvedCAs = [
+				"msc trustgate",
+				"digicert",
+				"cybersign"
+			];
+			const isFromApprovedCA = approvedCAs.some((ca) => issuerName.includes(ca));
+			if (!isFromApprovedCA) {
+				issues.push("DS329: Certificate may not be from MyInvois-approved CA");
+				recommendations.push("Verify certificate was issued by an approved CA for MyInvois");
+			}
+		}
+		const rawIssuer = cert.issuer;
+		const normalizedIssuer = certInfo.issuerName;
+		const normalizedIssuerIssues = [
+			{
+				check: normalizedIssuer.includes("\n"),
+				issue: "Normalized issuer still contains newlines"
+			},
+			{
+				check: normalizedIssuer.includes("  "),
+				issue: "Normalized issuer contains double spaces"
+			},
+			{
+				check: /=\s+/.test(normalizedIssuer),
+				issue: "Normalized issuer has spaces after equals"
+			},
+			{
+				check: /\s+=/.test(normalizedIssuer),
+				issue: "Normalized issuer has spaces before equals"
+			},
+			{
+				check: normalizedIssuer.includes("\r"),
+				issue: "Normalized issuer contains carriage returns"
+			}
+		];
+		const hasActualFormatIssues = normalizedIssuerIssues.some(({ check, issue }) => {
+			if (check) {
+				issues.push(`DS326: ${issue} - will cause X509IssuerName mismatch`);
+				return true;
+			}
+			return false;
+		});
+		const hasRawIssuesButNormalizedOk = rawIssuer.includes("\n") && !normalizedIssuer.includes("\n");
+		if (hasActualFormatIssues) {
+			recommendations.push("CRITICAL: Fix issuer name normalization in signature generation");
+			recommendations.push("Portal Error: \"Certificate X509IssuerName doesn't match the X509IssuerName value provided in the signed properties section.\"");
+			recommendations.push("The normalization function is not properly formatting the issuer name");
+			recommendations.push("Debug: Check document.ts extractCertificateInfo() normalization logic");
+		} else if (hasRawIssuesButNormalizedOk) console.log("ℹ️  Note: Raw certificate issuer has newlines but normalization is handling them correctly");
+		const now = /* @__PURE__ */ new Date();
+		const validFrom = new Date(cert.validFrom);
+		const validTo = new Date(cert.validTo);
+		if (now < validFrom) {
+			issues.push("DS329: Certificate not yet valid (future start date)");
+			recommendations.push("Wait until certificate validity period begins");
+		}
+		if (now > validTo) {
+			issues.push("DS329: Certificate has expired");
+			recommendations.push("BLOCKING: Renew certificate - expired certificates are rejected");
+		}
+		try {
+			if (cert.keyUsage && !cert.keyUsage.includes("digital signature")) {
+				issues.push("DS333: Certificate lacks digitalSignature key usage");
+				recommendations.push("Generate new certificate with digitalSignature key usage enabled");
+			}
+		} catch {
+			console.log("Note: Could not check key usage extensions");
+		}
+		return {
+			organizationIdentifier,
+			serialNumber,
+			issuerName: certInfo.issuerName,
+			subjectName: certInfo.subjectName,
+			issues,
+			recommendations
+		};
+	} catch (error) {
+		issues.push(`Certificate parsing failed: ${error}`);
+		recommendations.push("Verify certificate format and validity");
+		return {
+			issuerName: "",
+			subjectName: "",
+			issues,
+			recommendations
+		};
+	}
+}
+/**
+* Analyzes signature generation for potential issues
+*/
+function analyzeSignatureForDiagnostics(invoices, certificatePem) {
+	const issues = [];
+	const recommendations = [];
+	try {
+		const documentDigest = require_document.calculateDocumentDigest(invoices);
+		const certificateDigest = require_document.calculateCertificateDigest(certificatePem);
+		const certInfo = require_document.extractCertificateInfo(certificatePem);
+		const signingTime = (/* @__PURE__ */ new Date()).toISOString();
+		const signedProperties = require_document.createSignedProperties(certificateDigest, signingTime, certInfo.issuerName, certInfo.serialNumber);
+		const signedPropertiesDigest = require_document.calculateSignedPropertiesDigest(signedProperties);
+		if (documentDigest.length === 0) {
+			issues.push("DS333: Document digest generation failed");
+			recommendations.push("CRITICAL: Verify document serialization excludes UBLExtensions/Signature");
+			recommendations.push("Portal Error: \"Document signature value is not a valid signature of the document digest using the public key of the certificate provided.\"");
+		}
+		if (certificateDigest.length === 0) {
+			issues.push("DS333: Certificate digest generation failed");
+			recommendations.push("CRITICAL: Verify certificate format and encoding");
+			recommendations.push("Certificate must be properly base64 encoded without headers/footers");
+		}
+		if (signedPropertiesDigest.length === 0) {
+			issues.push("DS333: Signed properties digest generation failed");
+			recommendations.push("CRITICAL: Verify signed properties structure and canonicalization");
+			recommendations.push("Check XML canonicalization (C14N) is applied correctly");
+		}
+		try {
+			const cert = new crypto.default.X509Certificate(certificatePem);
+			const publicKey = cert.publicKey;
+			const keyDetails = publicKey.asymmetricKeyDetails;
+			if (keyDetails) {
+				if (publicKey.asymmetricKeyType === "rsa" && keyDetails.modulusLength && keyDetails.modulusLength < 2048) {
+					issues.push("DS333: RSA key size too small (minimum 2048 bits required)");
+					recommendations.push("CRITICAL: Generate new certificate with RSA 2048+ bits");
+				}
+				const supportedKeyTypes = ["rsa", "ec"];
+				if (!supportedKeyTypes.includes(publicKey.asymmetricKeyType || "")) {
+					issues.push(`DS333: Unsupported key type: ${publicKey.asymmetricKeyType}`);
+					recommendations.push("CRITICAL: Use RSA or EC key types for MyInvois compatibility");
+				}
+			}
+			const certBuffer = Buffer.from(certificatePem.replace(/-----[^-]+-----/g, "").replace(/\s/g, ""), "base64");
+			if (certBuffer.length === 0) {
+				issues.push("DS333: Certificate encoding appears invalid");
+				recommendations.push("CRITICAL: Verify certificate is properly PEM encoded");
+			}
+		} catch (error) {
+			issues.push(`DS333: Certificate validation failed - ${error}`);
+			recommendations.push("CRITICAL: Verify certificate format and structure are valid");
+		}
+		const isValidBase64 = (str) => {
+			try {
+				return Buffer.from(str, "base64").toString("base64") === str;
+			} catch {
+				return false;
+			}
+		};
+		if (documentDigest && !isValidBase64(documentDigest)) {
+			issues.push("DS333: Document digest is not valid base64 format");
+			recommendations.push("Ensure digest is properly base64 encoded");
+		}
+		if (certificateDigest && !isValidBase64(certificateDigest)) {
+			issues.push("DS333: Certificate digest is not valid base64 format");
+			recommendations.push("Ensure certificate digest is properly base64 encoded");
+		}
+		if (signedPropertiesDigest && !isValidBase64(signedPropertiesDigest)) {
+			issues.push("DS333: Signed properties digest is not valid base64 format");
+			recommendations.push("Ensure signed properties digest is properly base64 encoded");
+		}
+		return {
+			documentDigest,
+			certificateDigest,
+			signedPropertiesDigest,
+			issues,
+			recommendations
+		};
+	} catch (error) {
+		issues.push(`Signature analysis failed: ${error}`);
+		recommendations.push("Review signature generation implementation");
+		return {
+			documentDigest: "",
+			certificateDigest: "",
+			signedPropertiesDigest: "",
+			issues,
+			recommendations
+		};
+	}
+}
+/**
+* Comprehensive signature diagnostics
+*/
+function diagnoseSignatureIssues(invoices, certificatePem) {
+	const certificateAnalysis = analyzeCertificateForDiagnostics(certificatePem);
+	const signatureAnalysis = analyzeSignatureForDiagnostics(invoices, certificatePem);
+	const certificateIssues = certificateAnalysis.issues.length;
+	const signatureIssues = signatureAnalysis.issues.length;
+	return {
+		certificateAnalysis,
+		signatureAnalysis,
+		summary: {
+			totalIssues: certificateIssues + signatureIssues,
+			certificateIssues,
+			signatureIssues
+		}
+	};
+}
+/**
+* Prints diagnostic results in a formatted way
+*/
+function printDiagnostics(result) {
+	console.log("\n🔍 MyInvois Signature Diagnostics Report");
+	console.log("=".repeat(60));
+	console.log("\n📜 CERTIFICATE ANALYSIS");
+	console.log("-".repeat(30));
+	console.log(`  Issuer: ${result.certificateAnalysis.issuerName}`);
+	console.log(`  Subject: ${result.certificateAnalysis.subjectName}`);
+	if (result.certificateAnalysis.organizationIdentifier) console.log(`  Organization ID (TIN): ${result.certificateAnalysis.organizationIdentifier}`);
+	if (result.certificateAnalysis.serialNumber) console.log(`  Serial Number: ${result.certificateAnalysis.serialNumber}`);
+	if (result.certificateAnalysis.issues.length > 0) {
+		console.log("\n  🚨 Certificate Issues:");
+		result.certificateAnalysis.issues.forEach((issue, index) => {
+			console.log(`    ${index + 1}. ${issue}`);
+		});
+	}
+	if (result.certificateAnalysis.recommendations.length > 0) {
+		console.log("\n  💡 Certificate Recommendations:");
+		result.certificateAnalysis.recommendations.forEach((rec, index) => {
+			console.log(`    ${index + 1}. ${rec}`);
+		});
+	}
+	console.log("\n🔐 SIGNATURE ANALYSIS");
+	console.log("-".repeat(30));
+	console.log(`  Document Digest: ${result.signatureAnalysis.documentDigest.substring(0, 32)}...`);
+	console.log(`  Certificate Digest: ${result.signatureAnalysis.certificateDigest.substring(0, 32)}...`);
+	console.log(`  Signed Properties Digest: ${result.signatureAnalysis.signedPropertiesDigest.substring(0, 32)}...`);
+	if (result.signatureAnalysis.issues.length > 0) {
+		console.log("\n  🚨 Signature Issues:");
+		result.signatureAnalysis.issues.forEach((issue, index) => {
+			console.log(`    ${index + 1}. ${issue}`);
+		});
+	}
+	if (result.signatureAnalysis.recommendations.length > 0) {
+		console.log("\n  💡 Signature Recommendations:");
+		result.signatureAnalysis.recommendations.forEach((rec, index) => {
+			console.log(`    ${index + 1}. ${rec}`);
+		});
+	}
+	console.log("\n📊 SUMMARY");
+	console.log("-".repeat(30));
+	console.log(`  Total Issues Found: ${result.summary.totalIssues}`);
+	console.log(`  Certificate Issues: ${result.summary.certificateIssues}`);
+	console.log(`  Signature Issues: ${result.summary.signatureIssues}`);
+	if (result.summary.totalIssues === 0) {
+		console.log("\n  ✅ No issues detected in current analysis");
+		console.log("  🎉 Certificate and signature implementation appear valid");
+	} else {
+		console.log("\n  ⚠️  Issues detected - review recommendations above");
+		const hasDS311 = result.certificateAnalysis.issues.some((issue) => issue.includes("DS311"));
+		const hasDS312 = result.certificateAnalysis.issues.some((issue) => issue.includes("DS312"));
+		const hasDS326 = result.certificateAnalysis.issues.some((issue) => issue.includes("DS326"));
+		const hasDS329 = result.certificateAnalysis.issues.some((issue) => issue.includes("DS329"));
+		const hasDS333 = result.signatureAnalysis.issues.some((issue) => issue.includes("DS333"));
+		console.log("\n  🎯 MYINVOIS PORTAL ERROR ANALYSIS:");
+		if (hasDS311) console.log("     ❌ DS311 - TIN mismatch between certificate and submitter");
+		if (hasDS312) console.log("     ❌ DS312 - Registration number mismatch with certificate");
+		if (hasDS326) console.log("     ❌ DS326 - X509IssuerName format inconsistency");
+		if (hasDS329) console.log("     ❌ DS329 - Certificate trust chain validation failure");
+		if (hasDS333) console.log("     ❌ DS333 - Document signature validation failure");
+		if (result.summary.certificateIssues > 0) {
+			console.log("\n  🚨 PRIMARY ACTION REQUIRED:");
+			console.log("     Certificate issues must be resolved first");
+			console.log("     Self-generated certificates cannot pass MyInvois validation");
+		}
+		if (result.summary.signatureIssues > 0) {
+			console.log("\n  ⚙️  SECONDARY ACTION:");
+			console.log("     Review and optimize signature implementation");
+		}
+		console.log("\n  📋 NEXT STEPS:");
+		console.log("     1. Address BLOCKING/CRITICAL issues first");
+		console.log("     2. Test with updated certificate/implementation");
+		console.log("     3. Re-run diagnostics to verify fixes");
+		console.log("     4. Submit test document to MyInvois portal");
+	}
+	console.log("\n" + "=".repeat(60));
+}
 
 //#endregion
-exports.ClassificationCodeEnum = ClassificationCodeEnum;
+exports.diagnoseSignatureIssues = diagnoseSignatureIssues;
+exports.printDiagnostics = printDiagnostics;
 //# sourceMappingURL=index8.cjs.map

package/dist/index8.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index8.cjs","names":[],"sources":["../src/types/classification-codes.d.ts"],"sourcesContent":["/**\n * Represents the allowed classification codes for e-Invoice items.\n * Based on the documentation: https://sdk.myinvois.hasil.gov.my/codes/classification-codes/\n */\nexport type ClassificationCode =\n  | '001' // Breastfeeding equipment\n  | '002' // Child care centres and kindergartens fees\n  | '003' // Computer, smartphone or tablet\n  | '004' // Consolidated e-Invoice\n  | '005' // Construction materials (as specified under Fourth Schedule of the Lembaga Pembangunan Industri Pembinaan Malaysia Act 1994)\n  | '006' // Disbursement\n  | '007' // Donation\n  | '008' // e-Commerce - e-Invoice to buyer / purchaser\n  | '009' // e-Commerce - Self-billed e-Invoice to seller, logistics, etc.\n  | '010' // Education fees\n  | '011' // Goods on consignment (Consignor)\n  | '012' // Goods on consignment (Consignee)\n  | '013' // Gym membership\n  | '014' // Insurance - Education and medical benefits\n  | '015' // Insurance - Takaful or life insurance\n  | '016' // Interest and financing expenses\n  | '017' // Internet subscription\n  | '018' // Land and building\n  | '019' // Medical examination for learning disabilities and early intervention or rehabilitation treatments of learning disabilities\n  | '020' // Medical examination or vaccination expenses\n  | '021' // Medical expenses for serious diseases\n  | '022' // Others\n  | '023' // Petroleum operations (as defined in Petroleum (Income Tax) Act 1967)\n  | '024' // Private retirement scheme or deferred annuity scheme\n  | '025' // Motor vehicle\n  | '026' // Subscription of books / journals / magazines / newspapers / other similar publications\n  | '027' // Reimbursement\n  | '028' // Rental of motor vehicle\n  | '029' // EV charging facilities (Installation, rental, sale / purchase or subscription fees)\n  | '030' // Repair and maintenance\n  | '031' // Research and development\n  | '032' // Foreign income\n  | '033' // Self-billed - Betting and gaming\n  | '034' // Self-billed - Importation of goods\n  | '035' // Self-billed - Importation of services\n  | '036' // Self-billed - Others\n  | '037' // Self-billed - Monetary payment to agents, dealers or distributors\n  | '038' // Sports equipment, rental / entry fees for sports facilities, registration in sports competition or sports training fees imposed by associations / sports clubs / companies registered with the Sports Commissioner or Companies Commission of Malaysia and carrying out sports activities as listed under the Sports Development Act 1997\n  | '039' // Supporting equipment for disabled person\n  | '040' // Voluntary contribution to approved provident fund\n  | '041' // Dental examination or treatment\n  | '042' // Fertility treatment\n  | '043' // Treatment and home care nursing, daycare centres and residential care centers\n  | '044' // Vouchers, gift cards, loyalty points, etc\n  | '045' // Self-billed - Non-monetary payment to agents, dealers or distributors\n\n/**\n * Enum representing the allowed classification codes with descriptive names.\n * Provides a more readable way to reference classification codes.\n *\n * @example\n * const code = ClassificationCodeEnum.ComputerSmartphoneOrTablet;\n * console.log(code); // Output: \"003\"\n */\nexport enum ClassificationCodeEnum {\n  BreastfeedingEquipment = '001',\n  ChildCareCentresAndKindergartensFees = '002',\n  ComputerSmartphoneOrTablet = '003',\n  ConsolidatedEInvoice = '004',\n  ConstructionMaterials = '005',\n  Disbursement = '006',\n  Donation = '007',\n  ECommerceEInvoiceToBuyer = '008',\n  ECommerceSelfBilledToSellerLogistics = '009',\n  EducationFees = '010',\n  GoodsOnConsignmentConsignor = '011',\n  GoodsOnConsignmentConsignee = '012',\n  GymMembership = '013',\n  InsuranceEducationMedicalBenefits = '014',\n  InsuranceTakafulLife = '015',\n  InterestFinancingExpenses = '016',\n  InternetSubscription = '017',\n  LandAndBuilding = '018',\n  MedicalExamLearningDisabilities = '019',\n  MedicalExamVaccination = '020',\n  MedicalExpensesSeriousDiseases = '021',\n  Others = '022',\n  PetroleumOperations = '023',\n  PrivateRetirementSchemeDeferredAnnuity = '024',\n  MotorVehicle = '025',\n  SubscriptionBooksJournalsEtc = '026',\n  Reimbursement = '027',\n  RentalOfMotorVehicle = '028',\n  EVChargingFacilities = '029',\n  RepairAndMaintenance = '030',\n  ResearchAndDevelopment = '031',\n  ForeignIncome = '032',\n  SelfBilledBettingGaming = '033',\n  SelfBilledImportationGoods = '034',\n  SelfBilledImportationServices = '035',\n  SelfBilledOthers = '036',\n  SelfBilledMonetaryPaymentToAgents = '037',\n  SportsEquipmentRentalFeesEtc = '038',\n  SupportingEquipmentDisabledPerson = '039',\n  VoluntaryContributionProvidentFund = '040',\n  DentalExamTreatment = '041',\n  FertilityTreatment = '042',\n  TreatmentHomeCareNursingEtc = '043',\n  VouchersGiftCardsLoyaltyPoints = '044',\n  SelfBilledNonMonetaryPaymentToAgents = '045',\n}\n\n/**\n * Interface representing a classification code entry.\n * Contains the code and its corresponding description.\n */\nexport interface Classification {\n  code: ClassificationCode\n  description: string\n}\n"],"mappings":";;;;;;;;;;AA2DA,IAAY,4EAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AACD"}
+{"version":3,"file":"index8.cjs","names":["certificatePem: string","issues: string[]","recommendations: string[]","dn: string","fields: Record<string, string>","invoices: InvoiceV1_1[]","str: string","result: DiagnosticResult"],"sources":["../src/utils/signature-diagnostics.ts"],"sourcesContent":["import crypto from 'crypto'\nimport type { InvoiceV1_1 } from '../types'\nimport {\n  extractCertificateInfo,\n  calculateDocumentDigest,\n  calculateSignedPropertiesDigest,\n  createSignedProperties,\n  calculateCertificateDigest,\n} from './document'\n\nexport interface CertificateAnalysisResult {\n  organizationIdentifier?: string\n  serialNumber?: string\n  issuerName: string\n  subjectName: string\n  issues: string[]\n  recommendations: string[]\n}\n\nexport interface SignatureAnalysisResult {\n  documentDigest: string\n  certificateDigest: string\n  signedPropertiesDigest: string\n  issues: string[]\n  recommendations: string[]\n}\n\nexport interface DiagnosticResult {\n  certificateAnalysis: CertificateAnalysisResult\n  signatureAnalysis: SignatureAnalysisResult\n  summary: {\n    totalIssues: number\n    certificateIssues: number\n    signatureIssues: number\n  }\n}\n\n/**\n * Analyzes certificate for MyInvois compatibility issues\n */\nfunction analyzeCertificateForDiagnostics(\n  certificatePem: string,\n): CertificateAnalysisResult {\n  const issues: string[] = []\n  const recommendations: string[] = []\n\n  try {\n    const cert = new crypto.X509Certificate(certificatePem)\n    const certInfo = extractCertificateInfo(certificatePem)\n\n    // Parse subject fields for MyInvois analysis\n    const parseSubjectFields = (dn: string) => {\n      const fields: Record<string, string> = {}\n      dn.split('\\n').forEach(line => {\n        const trimmed = line.trim()\n        if (trimmed.includes('=')) {\n          const [key, ...valueParts] = trimmed.split('=')\n          if (key) {\n            fields[key.trim()] = valueParts.join('=').trim()\n          }\n        }\n      })\n      return fields\n    }\n\n    const subjectFields = parseSubjectFields(cert.subject)\n    const organizationIdentifier =\n      subjectFields['organizationIdentifier'] || subjectFields['2.5.4.97']\n    const serialNumber = subjectFields['serialNumber']\n\n    // DS311 - TIN Mismatch Analysis\n    if (!organizationIdentifier) {\n      issues.push(\n        'DS311: Certificate missing organizationIdentifier field (TIN)',\n      )\n      recommendations.push(\n        'CRITICAL: Generate new certificate with organizationIdentifier matching your MyInvois TIN',\n      )\n      recommendations.push(\n        'Portal Error: \"Signer of invoice doesn\\'t match the submitter of document. TIN doesn\\'t match with the OI.\"',\n      )\n    } else {\n      // Additional TIN format validation\n      if (organizationIdentifier.length < 10) {\n        issues.push(\n          'DS311: OrganizationIdentifier (TIN) appears too short - may cause submission rejection',\n        )\n        recommendations.push(\n          'Verify TIN format matches exactly what is registered in MyInvois',\n        )\n      }\n    }\n\n    // DS312 - Registration Number Analysis\n    if (!serialNumber) {\n      issues.push(\n        'DS312: Certificate missing serialNumber field (business registration)',\n      )\n      recommendations.push(\n        'CRITICAL: Generate new certificate with serialNumber matching your business registration',\n      )\n      recommendations.push(\n        'Portal Error: \"Submitter registration/identity number doesn\\'t match with the certificate SERIALNUMBER.\"',\n      )\n    }\n\n    // DS329 - Certificate Trust Analysis\n    if (cert.issuer === cert.subject) {\n      issues.push(\n        'DS329: Self-signed certificate detected - will fail chain of trust validation',\n      )\n      recommendations.push(\n        'BLOCKING: Obtain certificate from MyInvois-approved CA:',\n      )\n      recommendations.push('• MSC Trustgate Sdn Bhd')\n      recommendations.push('• DigiCert Sdn Bhd')\n      recommendations.push('• Cybersign Asia Sdn Bhd')\n      recommendations.push(\n        'Portal Error: \"Certificate is not valid according to the chain of trust validation or has been issued by an untrusted certificate authority.\"',\n      )\n    } else {\n      // Check if issuer looks like a known CA\n      const issuerName = cert.issuer.toLowerCase()\n      const approvedCAs = ['msc trustgate', 'digicert', 'cybersign']\n      const isFromApprovedCA = approvedCAs.some(ca => issuerName.includes(ca))\n\n      if (!isFromApprovedCA) {\n        issues.push('DS329: Certificate may not be from MyInvois-approved CA')\n        recommendations.push(\n          'Verify certificate was issued by an approved CA for MyInvois',\n        )\n      }\n    }\n\n    // DS326 - Issuer Name Format Analysis (Enhanced)\n    const rawIssuer = cert.issuer\n    const normalizedIssuer = certInfo.issuerName\n\n    // Check for issues in the NORMALIZED issuer (these are actual problems)\n    const normalizedIssuerIssues = [\n      {\n        check: normalizedIssuer.includes('\\n'),\n        issue: 'Normalized issuer still contains newlines',\n      },\n      {\n        check: normalizedIssuer.includes('  '),\n        issue: 'Normalized issuer contains double spaces',\n      },\n      {\n        check: /=\\s+/.test(normalizedIssuer),\n        issue: 'Normalized issuer has spaces after equals',\n      },\n      {\n        check: /\\s+=/.test(normalizedIssuer),\n        issue: 'Normalized issuer has spaces before equals',\n      },\n      {\n        check: normalizedIssuer.includes('\\r'),\n        issue: 'Normalized issuer contains carriage returns',\n      },\n    ]\n\n    // Only report actual issues in the normalized version that will cause portal errors\n    const hasActualFormatIssues = normalizedIssuerIssues.some(\n      ({ check, issue }) => {\n        if (check) {\n          issues.push(`DS326: ${issue} - will cause X509IssuerName mismatch`)\n          return true\n        }\n        return false\n      },\n    )\n\n    // Check if raw issuer has issues but normalized version is OK (informational)\n    const hasRawIssuesButNormalizedOk =\n      rawIssuer.includes('\\n') && !normalizedIssuer.includes('\\n')\n\n    if (hasActualFormatIssues) {\n      recommendations.push(\n        'CRITICAL: Fix issuer name normalization in signature generation',\n      )\n      recommendations.push(\n        'Portal Error: \"Certificate X509IssuerName doesn\\'t match the X509IssuerName value provided in the signed properties section.\"',\n      )\n      recommendations.push(\n        'The normalization function is not properly formatting the issuer name',\n      )\n      recommendations.push(\n        'Debug: Check document.ts extractCertificateInfo() normalization logic',\n      )\n    } else if (hasRawIssuesButNormalizedOk) {\n      // This is informational - normalization is working correctly\n      console.log(\n        'ℹ️  Note: Raw certificate issuer has newlines but normalization is handling them correctly',\n      )\n    }\n\n    // Additional certificate validity checks\n    const now = new Date()\n    const validFrom = new Date(cert.validFrom)\n    const validTo = new Date(cert.validTo)\n\n    if (now < validFrom) {\n      issues.push('DS329: Certificate not yet valid (future start date)')\n      recommendations.push('Wait until certificate validity period begins')\n    }\n\n    if (now > validTo) {\n      issues.push('DS329: Certificate has expired')\n      recommendations.push(\n        'BLOCKING: Renew certificate - expired certificates are rejected',\n      )\n    }\n\n    // Check certificate key usage (if available)\n    try {\n      if (cert.keyUsage && !cert.keyUsage.includes('digital signature')) {\n        issues.push('DS333: Certificate lacks digitalSignature key usage')\n        recommendations.push(\n          'Generate new certificate with digitalSignature key usage enabled',\n        )\n      }\n    } catch {\n      // Key usage might not be available in all certificates\n      console.log('Note: Could not check key usage extensions')\n    }\n\n    return {\n      organizationIdentifier,\n      serialNumber,\n      issuerName: certInfo.issuerName,\n      subjectName: certInfo.subjectName,\n      issues,\n      recommendations,\n    }\n  } catch (error) {\n    issues.push(`Certificate parsing failed: ${error}`)\n    recommendations.push('Verify certificate format and validity')\n\n    return {\n      issuerName: '',\n      subjectName: '',\n      issues,\n      recommendations,\n    }\n  }\n}\n\n/**\n * Analyzes signature generation for potential issues\n */\nfunction analyzeSignatureForDiagnostics(\n  invoices: InvoiceV1_1[],\n  certificatePem: string,\n): SignatureAnalysisResult {\n  const issues: string[] = []\n  const recommendations: string[] = []\n\n  try {\n    // Step 1: Document digest\n    const documentDigest = calculateDocumentDigest(invoices)\n\n    // Step 2: Certificate digest\n    const certificateDigest = calculateCertificateDigest(certificatePem)\n\n    // Step 3: Extract certificate info\n    const certInfo = extractCertificateInfo(certificatePem)\n    const signingTime = new Date().toISOString()\n\n    // Step 4: Create signed properties\n    const signedProperties = createSignedProperties(\n      certificateDigest,\n      signingTime,\n      certInfo.issuerName,\n      certInfo.serialNumber,\n    )\n\n    // Step 5: Signed properties digest\n    const signedPropertiesDigest =\n      calculateSignedPropertiesDigest(signedProperties)\n\n    // DS333 - Document Signature Validation\n    if (documentDigest.length === 0) {\n      issues.push('DS333: Document digest generation failed')\n      recommendations.push(\n        'CRITICAL: Verify document serialization excludes UBLExtensions/Signature',\n      )\n      recommendations.push(\n        'Portal Error: \"Document signature value is not a valid signature of the document digest using the public key of the certificate provided.\"',\n      )\n    }\n\n    if (certificateDigest.length === 0) {\n      issues.push('DS333: Certificate digest generation failed')\n      recommendations.push('CRITICAL: Verify certificate format and encoding')\n      recommendations.push(\n        'Certificate must be properly base64 encoded without headers/footers',\n      )\n    }\n\n    if (signedPropertiesDigest.length === 0) {\n      issues.push('DS333: Signed properties digest generation failed')\n      recommendations.push(\n        'CRITICAL: Verify signed properties structure and canonicalization',\n      )\n      recommendations.push(\n        'Check XML canonicalization (C14N) is applied correctly',\n      )\n    }\n\n    // Additional DS333 checks\n    try {\n      const cert = new crypto.X509Certificate(certificatePem)\n\n      // Verify the certificate has the required algorithms for MyInvois\n      const publicKey = cert.publicKey\n      const keyDetails = publicKey.asymmetricKeyDetails\n\n      if (keyDetails) {\n        // Check if key size is adequate for RSA (minimum 2048 bits)\n        if (\n          publicKey.asymmetricKeyType === 'rsa' &&\n          keyDetails.modulusLength &&\n          keyDetails.modulusLength < 2048\n        ) {\n          issues.push(\n            'DS333: RSA key size too small (minimum 2048 bits required)',\n          )\n          recommendations.push(\n            'CRITICAL: Generate new certificate with RSA 2048+ bits',\n          )\n        }\n\n        // Check supported key types\n        const supportedKeyTypes = ['rsa', 'ec']\n        if (!supportedKeyTypes.includes(publicKey.asymmetricKeyType || '')) {\n          issues.push(\n            `DS333: Unsupported key type: ${publicKey.asymmetricKeyType}`,\n          )\n          recommendations.push(\n            'CRITICAL: Use RSA or EC key types for MyInvois compatibility',\n          )\n        }\n      }\n\n      // Test certificate format validity\n      const certBuffer = Buffer.from(\n        certificatePem.replace(/-----[^-]+-----/g, '').replace(/\\s/g, ''),\n        'base64',\n      )\n      if (certBuffer.length === 0) {\n        issues.push('DS333: Certificate encoding appears invalid')\n        recommendations.push(\n          'CRITICAL: Verify certificate is properly PEM encoded',\n        )\n      }\n    } catch (error) {\n      issues.push(`DS333: Certificate validation failed - ${error}`)\n      recommendations.push(\n        'CRITICAL: Verify certificate format and structure are valid',\n      )\n    }\n\n    // Validate digest formats (should be base64)\n    const isValidBase64 = (str: string) => {\n      try {\n        return Buffer.from(str, 'base64').toString('base64') === str\n      } catch {\n        return false\n      }\n    }\n\n    if (documentDigest && !isValidBase64(documentDigest)) {\n      issues.push('DS333: Document digest is not valid base64 format')\n      recommendations.push('Ensure digest is properly base64 encoded')\n    }\n\n    if (certificateDigest && !isValidBase64(certificateDigest)) {\n      issues.push('DS333: Certificate digest is not valid base64 format')\n      recommendations.push(\n        'Ensure certificate digest is properly base64 encoded',\n      )\n    }\n\n    if (signedPropertiesDigest && !isValidBase64(signedPropertiesDigest)) {\n      issues.push('DS333: Signed properties digest is not valid base64 format')\n      recommendations.push(\n        'Ensure signed properties digest is properly base64 encoded',\n      )\n    }\n\n    return {\n      documentDigest,\n      certificateDigest,\n      signedPropertiesDigest,\n      issues,\n      recommendations,\n    }\n  } catch (error) {\n    issues.push(`Signature analysis failed: ${error}`)\n    recommendations.push('Review signature generation implementation')\n\n    return {\n      documentDigest: '',\n      certificateDigest: '',\n      signedPropertiesDigest: '',\n      issues,\n      recommendations,\n    }\n  }\n}\n\n/**\n * Comprehensive signature diagnostics\n */\nexport function diagnoseSignatureIssues(\n  invoices: InvoiceV1_1[],\n  certificatePem: string,\n): DiagnosticResult {\n  const certificateAnalysis = analyzeCertificateForDiagnostics(certificatePem)\n  const signatureAnalysis = analyzeSignatureForDiagnostics(\n    invoices,\n    certificatePem,\n  )\n\n  const certificateIssues = certificateAnalysis.issues.length\n  const signatureIssues = signatureAnalysis.issues.length\n\n  return {\n    certificateAnalysis,\n    signatureAnalysis,\n    summary: {\n      totalIssues: certificateIssues + signatureIssues,\n      certificateIssues,\n      signatureIssues,\n    },\n  }\n}\n\n/**\n * Prints diagnostic results in a formatted way\n */\nexport function printDiagnostics(result: DiagnosticResult): void {\n  console.log('\\n🔍 MyInvois Signature Diagnostics Report')\n  console.log('='.repeat(60))\n\n  // Certificate Analysis\n  console.log('\\n📜 CERTIFICATE ANALYSIS')\n  console.log('-'.repeat(30))\n\n  console.log(`  Issuer: ${result.certificateAnalysis.issuerName}`)\n  console.log(`  Subject: ${result.certificateAnalysis.subjectName}`)\n\n  if (result.certificateAnalysis.organizationIdentifier) {\n    console.log(\n      `  Organization ID (TIN): ${result.certificateAnalysis.organizationIdentifier}`,\n    )\n  }\n\n  if (result.certificateAnalysis.serialNumber) {\n    console.log(`  Serial Number: ${result.certificateAnalysis.serialNumber}`)\n  }\n\n  if (result.certificateAnalysis.issues.length > 0) {\n    console.log('\\n  🚨 Certificate Issues:')\n    result.certificateAnalysis.issues.forEach((issue, index) => {\n      console.log(`    ${index + 1}. ${issue}`)\n    })\n  }\n\n  if (result.certificateAnalysis.recommendations.length > 0) {\n    console.log('\\n  💡 Certificate Recommendations:')\n    result.certificateAnalysis.recommendations.forEach((rec, index) => {\n      console.log(`    ${index + 1}. ${rec}`)\n    })\n  }\n\n  // Signature Analysis\n  console.log('\\n🔐 SIGNATURE ANALYSIS')\n  console.log('-'.repeat(30))\n\n  console.log(\n    `  Document Digest: ${result.signatureAnalysis.documentDigest.substring(0, 32)}...`,\n  )\n  console.log(\n    `  Certificate Digest: ${result.signatureAnalysis.certificateDigest.substring(0, 32)}...`,\n  )\n  console.log(\n    `  Signed Properties Digest: ${result.signatureAnalysis.signedPropertiesDigest.substring(0, 32)}...`,\n  )\n\n  if (result.signatureAnalysis.issues.length > 0) {\n    console.log('\\n  🚨 Signature Issues:')\n    result.signatureAnalysis.issues.forEach((issue, index) => {\n      console.log(`    ${index + 1}. ${issue}`)\n    })\n  }\n\n  if (result.signatureAnalysis.recommendations.length > 0) {\n    console.log('\\n  💡 Signature Recommendations:')\n    result.signatureAnalysis.recommendations.forEach((rec, index) => {\n      console.log(`    ${index + 1}. ${rec}`)\n    })\n  }\n\n  // Summary\n  console.log('\\n📊 SUMMARY')\n  console.log('-'.repeat(30))\n  console.log(`  Total Issues Found: ${result.summary.totalIssues}`)\n  console.log(`  Certificate Issues: ${result.summary.certificateIssues}`)\n  console.log(`  Signature Issues: ${result.summary.signatureIssues}`)\n\n  if (result.summary.totalIssues === 0) {\n    console.log('\\n  ✅ No issues detected in current analysis')\n    console.log('  🎉 Certificate and signature implementation appear valid')\n  } else {\n    console.log('\\n  ⚠️  Issues detected - review recommendations above')\n\n    // Check for specific portal errors\n    const hasDS311 = result.certificateAnalysis.issues.some(issue =>\n      issue.includes('DS311'),\n    )\n    const hasDS312 = result.certificateAnalysis.issues.some(issue =>\n      issue.includes('DS312'),\n    )\n    const hasDS326 = result.certificateAnalysis.issues.some(issue =>\n      issue.includes('DS326'),\n    )\n    const hasDS329 = result.certificateAnalysis.issues.some(issue =>\n      issue.includes('DS329'),\n    )\n    const hasDS333 = result.signatureAnalysis.issues.some(issue =>\n      issue.includes('DS333'),\n    )\n\n    console.log('\\n  🎯 MYINVOIS PORTAL ERROR ANALYSIS:')\n\n    if (hasDS311) {\n      console.log(\n        '     ❌ DS311 - TIN mismatch between certificate and submitter',\n      )\n    }\n\n    if (hasDS312) {\n      console.log(\n        '     ❌ DS312 - Registration number mismatch with certificate',\n      )\n    }\n\n    if (hasDS326) {\n      console.log('     ❌ DS326 - X509IssuerName format inconsistency')\n    }\n\n    if (hasDS329) {\n      console.log('     ❌ DS329 - Certificate trust chain validation failure')\n    }\n\n    if (hasDS333) {\n      console.log('     ❌ DS333 - Document signature validation failure')\n    }\n\n    if (result.summary.certificateIssues > 0) {\n      console.log('\\n  🚨 PRIMARY ACTION REQUIRED:')\n      console.log('     Certificate issues must be resolved first')\n      console.log(\n        '     Self-generated certificates cannot pass MyInvois validation',\n      )\n    }\n\n    if (result.summary.signatureIssues > 0) {\n      console.log('\\n  ⚙️  SECONDARY ACTION:')\n      console.log('     Review and optimize signature implementation')\n    }\n\n    console.log('\\n  📋 NEXT STEPS:')\n    console.log('     1. Address BLOCKING/CRITICAL issues first')\n    console.log('     2. Test with updated certificate/implementation')\n    console.log('     3. Re-run diagnostics to verify fixes')\n    console.log('     4. Submit test document to MyInvois portal')\n  }\n\n  console.log('\\n' + '='.repeat(60))\n}\n"],"mappings":";;;;;;;;;AAwCA,SAAS,iCACPA,gBAC2B;CAC3B,MAAMC,SAAmB,CAAE;CAC3B,MAAMC,kBAA4B,CAAE;AAEpC,KAAI;EACF,MAAM,OAAO,IAAI,eAAO,gBAAgB;EACxC,MAAM,WAAW,wCAAuB,eAAe;EAGvD,MAAM,qBAAqB,CAACC,OAAe;GACzC,MAAMC,SAAiC,CAAE;AACzC,MAAG,MAAM,KAAK,CAAC,QAAQ,UAAQ;IAC7B,MAAM,UAAU,KAAK,MAAM;AAC3B,QAAI,QAAQ,SAAS,IAAI,EAAE;KACzB,MAAM,CAAC,KAAK,GAAG,WAAW,GAAG,QAAQ,MAAM,IAAI;AAC/C,SAAI,IACF,QAAO,IAAI,MAAM,IAAI,WAAW,KAAK,IAAI,CAAC,MAAM;IAEnD;GACF,EAAC;AACF,UAAO;EACR;EAED,MAAM,gBAAgB,mBAAmB,KAAK,QAAQ;EACtD,MAAM,yBACJ,cAAc,6BAA6B,cAAc;EAC3D,MAAM,eAAe,cAAc;AAGnC,OAAK,wBAAwB;AAC3B,UAAO,KACL,gEACD;AACD,mBAAgB,KACd,4FACD;AACD,mBAAgB,KACd,8GACD;EACF,WAEK,uBAAuB,SAAS,IAAI;AACtC,UAAO,KACL,yFACD;AACD,mBAAgB,KACd,mEACD;EACF;AAIH,OAAK,cAAc;AACjB,UAAO,KACL,wEACD;AACD,mBAAgB,KACd,2FACD;AACD,mBAAgB,KACd,4GACD;EACF;AAGD,MAAI,KAAK,WAAW,KAAK,SAAS;AAChC,UAAO,KACL,gFACD;AACD,mBAAgB,KACd,0DACD;AACD,mBAAgB,KAAK,0BAA0B;AAC/C,mBAAgB,KAAK,qBAAqB;AAC1C,mBAAgB,KAAK,2BAA2B;AAChD,mBAAgB,KACd,kJACD;EACF,OAAM;GAEL,MAAM,aAAa,KAAK,OAAO,aAAa;GAC5C,MAAM,cAAc;IAAC;IAAiB;IAAY;GAAY;GAC9D,MAAM,mBAAmB,YAAY,KAAK,QAAM,WAAW,SAAS,GAAG,CAAC;AAExE,QAAK,kBAAkB;AACrB,WAAO,KAAK,0DAA0D;AACtE,oBAAgB,KACd,+DACD;GACF;EACF;EAGD,MAAM,YAAY,KAAK;EACvB,MAAM,mBAAmB,SAAS;EAGlC,MAAM,yBAAyB;GAC7B;IACE,OAAO,iBAAiB,SAAS,KAAK;IACtC,OAAO;GACR;GACD;IACE,OAAO,iBAAiB,SAAS,KAAK;IACtC,OAAO;GACR;GACD;IACE,OAAO,OAAO,KAAK,iBAAiB;IACpC,OAAO;GACR;GACD;IACE,OAAO,OAAO,KAAK,iBAAiB;IACpC,OAAO;GACR;GACD;IACE,OAAO,iBAAiB,SAAS,KAAK;IACtC,OAAO;GACR;EACF;EAGD,MAAM,wBAAwB,uBAAuB,KACnD,CAAC,EAAE,OAAO,OAAO,KAAK;AACpB,OAAI,OAAO;AACT,WAAO,MAAM,SAAS,MAAM,uCAAuC;AACnE,WAAO;GACR;AACD,UAAO;EACR,EACF;EAGD,MAAM,8BACJ,UAAU,SAAS,KAAK,KAAK,iBAAiB,SAAS,KAAK;AAE9D,MAAI,uBAAuB;AACzB,mBAAgB,KACd,kEACD;AACD,mBAAgB,KACd,iIACD;AACD,mBAAgB,KACd,wEACD;AACD,mBAAgB,KACd,wEACD;EACF,WAAU,4BAET,SAAQ,IACN,6FACD;EAIH,MAAM,sBAAM,IAAI;EAChB,MAAM,YAAY,IAAI,KAAK,KAAK;EAChC,MAAM,UAAU,IAAI,KAAK,KAAK;AAE9B,MAAI,MAAM,WAAW;AACnB,UAAO,KAAK,uDAAuD;AACnE,mBAAgB,KAAK,gDAAgD;EACtE;AAED,MAAI,MAAM,SAAS;AACjB,UAAO,KAAK,iCAAiC;AAC7C,mBAAgB,KACd,kEACD;EACF;AAGD,MAAI;AACF,OAAI,KAAK,aAAa,KAAK,SAAS,SAAS,oBAAoB,EAAE;AACjE,WAAO,KAAK,sDAAsD;AAClE,oBAAgB,KACd,mEACD;GACF;EACF,QAAO;AAEN,WAAQ,IAAI,6CAA6C;EAC1D;AAED,SAAO;GACL;GACA;GACA,YAAY,SAAS;GACrB,aAAa,SAAS;GACtB;GACA;EACD;CACF,SAAQ,OAAO;AACd,SAAO,MAAM,8BAA8B,MAAM,EAAE;AACnD,kBAAgB,KAAK,yCAAyC;AAE9D,SAAO;GACL,YAAY;GACZ,aAAa;GACb;GACA;EACD;CACF;AACF;;;;AAKD,SAAS,+BACPC,UACAL,gBACyB;CACzB,MAAMC,SAAmB,CAAE;CAC3B,MAAMC,kBAA4B,CAAE;AAEpC,KAAI;EAEF,MAAM,iBAAiB,yCAAwB,SAAS;EAGxD,MAAM,oBAAoB,4CAA2B,eAAe;EAGpE,MAAM,WAAW,wCAAuB,eAAe;EACvD,MAAM,cAAc,qBAAI,QAAO,aAAa;EAG5C,MAAM,mBAAmB,wCACvB,mBACA,aACA,SAAS,YACT,SAAS,aACV;EAGD,MAAM,yBACJ,iDAAgC,iBAAiB;AAGnD,MAAI,eAAe,WAAW,GAAG;AAC/B,UAAO,KAAK,2CAA2C;AACvD,mBAAgB,KACd,2EACD;AACD,mBAAgB,KACd,+IACD;EACF;AAED,MAAI,kBAAkB,WAAW,GAAG;AAClC,UAAO,KAAK,8CAA8C;AAC1D,mBAAgB,KAAK,mDAAmD;AACxE,mBAAgB,KACd,sEACD;EACF;AAED,MAAI,uBAAuB,WAAW,GAAG;AACvC,UAAO,KAAK,oDAAoD;AAChE,mBAAgB,KACd,oEACD;AACD,mBAAgB,KACd,yDACD;EACF;AAGD,MAAI;GACF,MAAM,OAAO,IAAI,eAAO,gBAAgB;GAGxC,MAAM,YAAY,KAAK;GACvB,MAAM,aAAa,UAAU;AAE7B,OAAI,YAAY;AAEd,QACE,UAAU,sBAAsB,SAChC,WAAW,iBACX,WAAW,gBAAgB,MAC3B;AACA,YAAO,KACL,6DACD;AACD,qBAAgB,KACd,yDACD;IACF;IAGD,MAAM,oBAAoB,CAAC,OAAO,IAAK;AACvC,SAAK,kBAAkB,SAAS,UAAU,qBAAqB,GAAG,EAAE;AAClE,YAAO,MACJ,+BAA+B,UAAU,kBAAkB,EAC7D;AACD,qBAAgB,KACd,+DACD;IACF;GACF;GAGD,MAAM,aAAa,OAAO,KACxB,eAAe,QAAQ,oBAAoB,GAAG,CAAC,QAAQ,OAAO,GAAG,EACjE,SACD;AACD,OAAI,WAAW,WAAW,GAAG;AAC3B,WAAO,KAAK,8CAA8C;AAC1D,oBAAgB,KACd,uDACD;GACF;EACF,SAAQ,OAAO;AACd,UAAO,MAAM,yCAAyC,MAAM,EAAE;AAC9D,mBAAgB,KACd,8DACD;EACF;EAGD,MAAM,gBAAgB,CAACI,QAAgB;AACrC,OAAI;AACF,WAAO,OAAO,KAAK,KAAK,SAAS,CAAC,SAAS,SAAS,KAAK;GAC1D,QAAO;AACN,WAAO;GACR;EACF;AAED,MAAI,mBAAmB,cAAc,eAAe,EAAE;AACpD,UAAO,KAAK,oDAAoD;AAChE,mBAAgB,KAAK,2CAA2C;EACjE;AAED,MAAI,sBAAsB,cAAc,kBAAkB,EAAE;AAC1D,UAAO,KAAK,uDAAuD;AACnE,mBAAgB,KACd,uDACD;EACF;AAED,MAAI,2BAA2B,cAAc,uBAAuB,EAAE;AACpE,UAAO,KAAK,6DAA6D;AACzE,mBAAgB,KACd,6DACD;EACF;AAED,SAAO;GACL;GACA;GACA;GACA;GACA;EACD;CACF,SAAQ,OAAO;AACd,SAAO,MAAM,6BAA6B,MAAM,EAAE;AAClD,kBAAgB,KAAK,6CAA6C;AAElE,SAAO;GACL,gBAAgB;GAChB,mBAAmB;GACnB,wBAAwB;GACxB;GACA;EACD;CACF;AACF;;;;AAKD,SAAgB,wBACdD,UACAL,gBACkB;CAClB,MAAM,sBAAsB,iCAAiC,eAAe;CAC5E,MAAM,oBAAoB,+BACxB,UACA,eACD;CAED,MAAM,oBAAoB,oBAAoB,OAAO;CACrD,MAAM,kBAAkB,kBAAkB,OAAO;AAEjD,QAAO;EACL;EACA;EACA,SAAS;GACP,aAAa,oBAAoB;GACjC;GACA;EACD;CACF;AACF;;;;AAKD,SAAgB,iBAAiBO,QAAgC;AAC/D,SAAQ,IAAI,6CAA6C;AACzD,SAAQ,IAAI,IAAI,OAAO,GAAG,CAAC;AAG3B,SAAQ,IAAI,4BAA4B;AACxC,SAAQ,IAAI,IAAI,OAAO,GAAG,CAAC;AAE3B,SAAQ,KAAK,YAAY,OAAO,oBAAoB,WAAW,EAAE;AACjE,SAAQ,KAAK,aAAa,OAAO,oBAAoB,YAAY,EAAE;AAEnE,KAAI,OAAO,oBAAoB,uBAC7B,SAAQ,KACL,2BAA2B,OAAO,oBAAoB,uBAAuB,EAC/E;AAGH,KAAI,OAAO,oBAAoB,aAC7B,SAAQ,KAAK,mBAAmB,OAAO,oBAAoB,aAAa,EAAE;AAG5E,KAAI,OAAO,oBAAoB,OAAO,SAAS,GAAG;AAChD,UAAQ,IAAI,6BAA6B;AACzC,SAAO,oBAAoB,OAAO,QAAQ,CAAC,OAAO,UAAU;AAC1D,WAAQ,KAAK,MAAM,QAAQ,EAAE,IAAI,MAAM,EAAE;EAC1C,EAAC;CACH;AAED,KAAI,OAAO,oBAAoB,gBAAgB,SAAS,GAAG;AACzD,UAAQ,IAAI,sCAAsC;AAClD,SAAO,oBAAoB,gBAAgB,QAAQ,CAAC,KAAK,UAAU;AACjE,WAAQ,KAAK,MAAM,QAAQ,EAAE,IAAI,IAAI,EAAE;EACxC,EAAC;CACH;AAGD,SAAQ,IAAI,0BAA0B;AACtC,SAAQ,IAAI,IAAI,OAAO,GAAG,CAAC;AAE3B,SAAQ,KACL,qBAAqB,OAAO,kBAAkB,eAAe,UAAU,GAAG,GAAG,CAAC,KAChF;AACD,SAAQ,KACL,wBAAwB,OAAO,kBAAkB,kBAAkB,UAAU,GAAG,GAAG,CAAC,KACtF;AACD,SAAQ,KACL,8BAA8B,OAAO,kBAAkB,uBAAuB,UAAU,GAAG,GAAG,CAAC,KACjG;AAED,KAAI,OAAO,kBAAkB,OAAO,SAAS,GAAG;AAC9C,UAAQ,IAAI,2BAA2B;AACvC,SAAO,kBAAkB,OAAO,QAAQ,CAAC,OAAO,UAAU;AACxD,WAAQ,KAAK,MAAM,QAAQ,EAAE,IAAI,MAAM,EAAE;EAC1C,EAAC;CACH;AAED,KAAI,OAAO,kBAAkB,gBAAgB,SAAS,GAAG;AACvD,UAAQ,IAAI,oCAAoC;AAChD,SAAO,kBAAkB,gBAAgB,QAAQ,CAAC,KAAK,UAAU;AAC/D,WAAQ,KAAK,MAAM,QAAQ,EAAE,IAAI,IAAI,EAAE;EACxC,EAAC;CACH;AAGD,SAAQ,IAAI,eAAe;AAC3B,SAAQ,IAAI,IAAI,OAAO,GAAG,CAAC;AAC3B,SAAQ,KAAK,wBAAwB,OAAO,QAAQ,YAAY,EAAE;AAClE,SAAQ,KAAK,wBAAwB,OAAO,QAAQ,kBAAkB,EAAE;AACxE,SAAQ,KAAK,sBAAsB,OAAO,QAAQ,gBAAgB,EAAE;AAEpE,KAAI,OAAO,QAAQ,gBAAgB,GAAG;AACpC,UAAQ,IAAI,+CAA+C;AAC3D,UAAQ,IAAI,6DAA6D;CAC1E,OAAM;AACL,UAAQ,IAAI,yDAAyD;EAGrE,MAAM,WAAW,OAAO,oBAAoB,OAAO,KAAK,WACtD,MAAM,SAAS,QAAQ,CACxB;EACD,MAAM,WAAW,OAAO,oBAAoB,OAAO,KAAK,WACtD,MAAM,SAAS,QAAQ,CACxB;EACD,MAAM,WAAW,OAAO,oBAAoB,OAAO,KAAK,WACtD,MAAM,SAAS,QAAQ,CACxB;EACD,MAAM,WAAW,OAAO,oBAAoB,OAAO,KAAK,WACtD,MAAM,SAAS,QAAQ,CACxB;EACD,MAAM,WAAW,OAAO,kBAAkB,OAAO,KAAK,WACpD,MAAM,SAAS,QAAQ,CACxB;AAED,UAAQ,IAAI,yCAAyC;AAErD,MAAI,SACF,SAAQ,IACN,gEACD;AAGH,MAAI,SACF,SAAQ,IACN,+DACD;AAGH,MAAI,SACF,SAAQ,IAAI,qDAAqD;AAGnE,MAAI,SACF,SAAQ,IAAI,4DAA4D;AAG1E,MAAI,SACF,SAAQ,IAAI,uDAAuD;AAGrE,MAAI,OAAO,QAAQ,oBAAoB,GAAG;AACxC,WAAQ,IAAI,kCAAkC;AAC9C,WAAQ,IAAI,iDAAiD;AAC7D,WAAQ,IACN,mEACD;EACF;AAED,MAAI,OAAO,QAAQ,kBAAkB,GAAG;AACtC,WAAQ,IAAI,4BAA4B;AACxC,WAAQ,IAAI,oDAAoD;EACjE;AAED,UAAQ,IAAI,qBAAqB;AACjC,UAAQ,IAAI,iDAAiD;AAC7D,UAAQ,IAAI,uDAAuD;AACnE,UAAQ,IAAI,6CAA6C;AACzD,UAAQ,IAAI,kDAAkD;CAC/D;AAED,SAAQ,IAAI,OAAO,IAAI,OAAO,GAAG,CAAC;AACnC"}