@ripwords/myinvois-client 0.3.7 → 0.4.1

package/dist/{apiQueue-DgKWaQDS.cjs.map → apiQueue-C45w-ymm.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"apiQueue-DgKWaQDS.cjs","names":["queues: Record<string, Queue>","LIMITS: Record<ApiCategory, { max: number; perMs: number }>","timestamps: number[]","windowMs: number","now: number","max: number","clientId: string","category: ApiCategory","task: Task<T>","now","key: string","debug: boolean","category?: ApiCategory","path: string","method: string"],"sources":["../src/utils/apiQueue.ts"],"sourcesContent":["// A very small utility that provides per-endpoint request queuing with rate-limits.\n// The goal is to make sure that we never exceed the vendor-defined limits while also ensuring\n// that every request is eventually executed.\n//\n// NOTE: This is intentionally minimal – no external dependencies are introduced.\n// If you need more advanced features (persistence, jitter, etc.) consider a library such as `bottleneck`.\n\n/*\nRate-limit specification (per 60-second window)\n----------------------------------------------\nLogin as Taxpayer System         : 12\nLogin as Intermediary System     : 12\nSubmit Documents                 : 100\nGet Submission                   : 300\nCancel Document                  : 12\nReject Document                  : 12\nGet Document                     : 60\nGet Document Details             : 125\nGet Recent Documents             : 12\nSearch Documents                 : 12\nSearch Taxpayer's TIN            : 60\nTaxpayer's QR Code               : 60\n*/\n\nexport type ApiCategory =\n  | 'loginTaxpayer'\n  | 'loginIntermediary'\n  | 'submitDocuments'\n  | 'getSubmission'\n  | 'cancelDocument'\n  | 'rejectDocument'\n  | 'getDocument'\n  | 'getDocumentDetails'\n  | 'getRecentDocuments'\n  | 'searchDocuments'\n  | 'searchTin'\n  | 'taxpayerQr'\n  | 'default'\n\ntype Task<T> = () => Promise<T>\n\ninterface Queue {\n  running: number\n  queue: Array<{ run: () => void; addedAt: number }>\n  requestTimestamps: number[] // Track all request timestamps in the sliding window\n  nextTimer: NodeJS.Timeout | null // Track scheduled timer to avoid pile-up\n}\n\nconst queues: Record<string, Queue> = {}\n\n// Rate limits: max requests per time window (in ms)\nconst LIMITS: Record<ApiCategory, { max: number; perMs: number }> = {\n  loginTaxpayer: { max: 12, perMs: 60000 }, // 12 req/60s\n  loginIntermediary: { max: 12, perMs: 60000 }, // 12 req/60s\n  submitDocuments: { max: 100, perMs: 60000 }, // 100 req/60s\n  getSubmission: { max: 300, perMs: 60000 }, // 300 req/60s\n  cancelDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  rejectDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  getDocument: { max: 60, perMs: 60000 }, // 60 req/60s\n  getDocumentDetails: { max: 125, perMs: 60000 }, // 125 req/60s\n  getRecentDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchTin: { max: 60, perMs: 60000 }, // 60 req/60s\n  taxpayerQr: { max: 60, perMs: 60000 }, // 60 req/60s\n  default: { max: 12, perMs: 60000 }, // 12 req/60s (minimum limit)\n}\n\n/**\n * Clean up old timestamps outside the sliding window\n */\nfunction cleanupTimestamps(\n  timestamps: number[],\n  windowMs: number,\n  now: number,\n): number[] {\n  return timestamps.filter(ts => now - ts < windowMs)\n}\n\n/**\n * Calculate when we can make the next request without exceeding the rate limit\n */\nfunction getNextAvailableTime(\n  timestamps: number[],\n  max: number,\n  windowMs: number,\n  now: number,\n): number {\n  if (timestamps.length < max) {\n    return now // Can execute immediately\n  }\n\n  // We're at the limit. Find when the oldest request will expire\n  const oldestTimestamp = timestamps[0]\n  if (!oldestTimestamp) {\n    return now // Shouldn't happen, but fallback to now\n  }\n  return oldestTimestamp + windowMs\n}\n\n/**\n * Public helper to schedule a request according to the category's limits.\n * Rate limits are enforced per clientId, so multiple instances with the same\n * clientId will share rate limiters, while different clientIds get separate limiters.\n *\n * This implementation uses a sliding window to track all requests within the time window.\n */\nexport function queueRequest<T>(\n  clientId: string,\n  category: ApiCategory,\n  task: Task<T>,\n  debug = false,\n): Promise<T> {\n  const key = `${clientId}:${category}`\n  if (!queues[key]) {\n    queues[key] = {\n      running: 0,\n      queue: [],\n      requestTimestamps: [],\n      nextTimer: null,\n    }\n  }\n\n  const queue = queues[key]!\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n\n  return new Promise<T>((resolve, reject) => {\n    const run = () => {\n      const now = Date.now()\n\n      // Clean up old timestamps before checking\n      queue.requestTimestamps = cleanupTimestamps(\n        queue.requestTimestamps,\n        perMs,\n        now,\n      )\n\n      // Check if we can execute now\n      if (queue.requestTimestamps.length >= max) {\n        // We've hit the rate limit, need to wait\n        const nextAvailable = getNextAvailableTime(\n          queue.requestTimestamps,\n          max,\n          perMs,\n          now,\n        )\n        const waitTime = nextAvailable - now\n\n        if (debug) {\n          console.log(\n            `[apiQueue] 🚫 Rate limit reached (${queue.requestTimestamps.length}/${max} in last ${perMs}ms). Queuing request. Need to wait ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length + 1}`,\n          )\n        }\n\n        // Re-queue this request to try again later\n        queue.queue.push({ run, addedAt: now })\n        // Don't call processQueue here - let the scheduled timer handle it\n        // to avoid potential requeue loops\n        return\n      }\n\n      // Record this request timestamp\n      queue.requestTimestamps.push(now)\n      queue.running++\n\n      if (debug) {\n        console.log(\n          `[apiQueue] ▶️  Executing request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n        )\n      }\n\n      task()\n        .then(resolve)\n        .catch(reject)\n        .finally(() => {\n          queue.running--\n          if (debug) {\n            console.log(\n              `[apiQueue] ✅ Request completed (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n            )\n          }\n          processQueue(key, debug, category)\n        })\n    }\n\n    // Add to queue or run immediately\n    const now = Date.now()\n    queue.requestTimestamps = cleanupTimestamps(\n      queue.requestTimestamps,\n      perMs,\n      now,\n    )\n\n    if (queue.queue.length > 0 || queue.requestTimestamps.length >= max) {\n      // Either there's already a queue, or we're at the rate limit\n      queue.queue.push({ run, addedAt: now })\n      if (debug) {\n        console.log(\n          `[apiQueue] ⏳ Queued request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Queue size: ${queue.queue.length}`,\n        )\n      }\n      processQueue(key, debug, category)\n    } else {\n      // Can run immediately\n      run()\n    }\n  })\n}\n\nfunction processQueue(key: string, debug: boolean, category: ApiCategory) {\n  const queue = queues[key]\n  if (!queue || queue.queue.length === 0) return\n\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n  const now = Date.now()\n\n  // Clean up old timestamps\n  queue.requestTimestamps = cleanupTimestamps(\n    queue.requestTimestamps,\n    perMs,\n    now,\n  )\n\n  // Check if we can process the next request\n  if (queue.requestTimestamps.length < max) {\n    // We have capacity, process immediately\n    const next = queue.queue.shift()\n    if (next) {\n      if (debug) {\n        const waitTime = Date.now() - next.addedAt\n        console.log(\n          `[apiQueue] 🚀 Processing queued request (${category}). Waited: ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n        )\n      }\n      next.run()\n    }\n    // After one runs, immediately try again (in case there's more space)\n    if (queue.queue.length > 0) {\n      processQueue(key, debug, category)\n    }\n  } else {\n    // We're at capacity, schedule for when the oldest request expires\n    const nextAvailable = getNextAvailableTime(\n      queue.requestTimestamps,\n      max,\n      perMs,\n      now,\n    )\n    const delay = Math.max(0, nextAvailable - now + 50) // +50ms buffer for timer precision\n\n    if (debug) {\n      console.log(\n        `[apiQueue] ⏸️  Delaying queue processing (${category}). Will retry in ${delay.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n      )\n    }\n\n    // Only schedule a timer if one isn't already scheduled\n    // This prevents timer pile-up during bursts\n    if (!queue.nextTimer) {\n      queue.nextTimer = setTimeout(() => {\n        queue.nextTimer = null\n        processQueue(key, debug, category)\n      }, delay)\n    }\n  }\n}\n\n/**\n * Cleanup function to clear all queues and timers for a specific client.\n * Useful for testing or cleanup on application shutdown.\n */\nexport function clearQueue(clientId: string, category?: ApiCategory): void {\n  if (category) {\n    const key = `${clientId}:${category}`\n    const queue = queues[key]\n    if (queue) {\n      if (queue.nextTimer) {\n        clearTimeout(queue.nextTimer)\n        queue.nextTimer = null\n      }\n      queue.queue = []\n      queue.requestTimestamps = []\n      queue.running = 0\n    }\n  } else {\n    // Clear all queues for this client\n    Object.keys(queues).forEach(key => {\n      if (key.startsWith(`${clientId}:`)) {\n        const queue = queues[key]\n        if (queue?.nextTimer) {\n          clearTimeout(queue.nextTimer)\n          queue.nextTimer = null\n        }\n        delete queues[key]\n      }\n    })\n  }\n}\n\n/**\n * Very naive path-based category detection. If no matcher fits, the `default` category\n * (effectively unlimited) is returned. Adjust these heuristics as your API surface evolves.\n */\nexport function categorizeRequest(\n  path: string,\n  method: string = 'GET',\n): ApiCategory {\n  const cleanPath = path.toLowerCase()\n  const isPost = method?.toUpperCase() === 'POST'\n\n  if (cleanPath.includes('/documentsubmissions')) {\n    return isPost ? 'submitDocuments' : 'getSubmission'\n  }\n\n  // -----------------------------\n  // v1.0 API endpoint matchers\n  // -----------------------------\n\n  // Get Recent Documents - /api/v1.0/documents/recent\n  if (cleanPath.includes('/documents/recent')) {\n    return 'getRecentDocuments'\n  }\n\n  // Search Documents - /api/v1.0/documents/search\n  if (cleanPath.includes('/documents/search')) {\n    return 'searchDocuments'\n  }\n\n  // Document state actions (cancel/reject) - PUT /api/v1.0/documents/state/{uuid}/state\n  // Both cancel and reject use the same endpoint, differentiated only by request body\n  if (cleanPath.includes('/documents/state/') && cleanPath.endsWith('/state')) {\n    // Both cancelDocument and rejectDocument share the same rate limit (12 RPM)\n    // Use cancelDocument category for both since they share the same bucket\n    return 'cancelDocument'\n  }\n\n  // Document raw content - /api/v1.0/documents/{uuid}/raw\n  if (/\\/documents\\/[^/]+\\/raw$/.test(cleanPath)) {\n    return 'getDocument'\n  }\n\n  // Document details - /api/v1.0/documents/{uuid}/details\n  if (/\\/documents\\/[^/]+\\/details$/.test(cleanPath)) {\n    return 'getDocumentDetails'\n  }\n\n  // Taxpayer TIN search & validation share same limit bucket\n  if (cleanPath.includes('/taxpayer/search/tin')) return 'searchTin'\n  if (cleanPath.includes('/taxpayer/validate/')) return 'searchTin'\n\n  // Taxpayer QR code info\n  if (cleanPath.includes('/taxpayer/qrcode')) return 'taxpayerQr'\n\n  // Legacy matchers (kept for backward compatibility)\n  if (cleanPath.includes('/searchtin')) return 'searchTin'\n  if (cleanPath.includes('/qrcode')) return 'taxpayerQr'\n  if (cleanPath.includes('/connect/token')) {\n    return 'loginTaxpayer'\n  }\n\n  return 'default'\n}\n"],"mappings":";;AAgDA,MAAMA,SAAgC,CAAE;AAGxC,MAAMC,SAA8D;CAClE,eAAe;EAAE,KAAK;EAAI,OAAO;CAAO;CACxC,mBAAmB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC5C,iBAAiB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC3C,eAAe;EAAE,KAAK;EAAK,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,aAAa;EAAE,KAAK;EAAI,OAAO;CAAO;CACtC,oBAAoB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC9C,oBAAoB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC7C,iBAAiB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC1C,WAAW;EAAE,KAAK;EAAI,OAAO;CAAO;CACpC,YAAY;EAAE,KAAK;EAAI,OAAO;CAAO;CACrC,SAAS;EAAE,KAAK;EAAI,OAAO;CAAO;AACnC;;;;AAKD,SAAS,kBACPC,YACAC,UACAC,KACU;AACV,QAAO,WAAW,OAAO,QAAM,MAAM,KAAK,SAAS;AACpD;;;;AAKD,SAAS,qBACPF,YACAG,KACAF,UACAC,KACQ;AACR,KAAI,WAAW,SAAS,IACtB,QAAO;CAIT,MAAM,kBAAkB,WAAW;AACnC,MAAK,gBACH,QAAO;AAET,QAAO,kBAAkB;AAC1B;;;;;;;;AASD,SAAgB,aACdE,UACAC,UACAC,MACA,QAAQ,OACI;CACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;AACpC,MAAK,OAAO,KACV,QAAO,OAAO;EACZ,SAAS;EACT,OAAO,CAAE;EACT,mBAAmB,CAAE;EACrB,WAAW;CACZ;CAGH,MAAM,QAAQ,OAAO;CACrB,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;AAElD,QAAO,IAAI,QAAW,CAAC,SAAS,WAAW;EACzC,MAAM,MAAM,MAAM;GAChB,MAAMC,QAAM,KAAK,KAAK;AAGtB,SAAM,oBAAoB,kBACxB,MAAM,mBACN,OACAA,MACD;AAGD,OAAI,MAAM,kBAAkB,UAAU,KAAK;IAEzC,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACAA,MACD;IACD,MAAM,WAAW,gBAAgBA;AAEjC,QAAI,MACF,SAAQ,KACL,oCAAoC,MAAM,kBAAkB,OAAO,GAAG,IAAI,WAAW,MAAM,qCAAqC,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,SAAS,EAAE,EAC/L;AAIH,UAAM,MAAM,KAAK;KAAE;KAAK,SAASA;IAAK,EAAC;AAGvC;GACD;AAGD,SAAM,kBAAkB,KAAKA,MAAI;AACjC,SAAM;AAEN,OAAI,MACF,SAAQ,KACL,oCAAoC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC5K;AAGH,SAAM,CACH,KAAK,QAAQ,CACb,MAAM,OAAO,CACb,QAAQ,MAAM;AACb,UAAM;AACN,QAAI,MACF,SAAQ,KACL,kCAAkC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC1K;AAEH,iBAAa,KAAK,OAAO,SAAS;GACnC,EAAC;EACL;EAGD,MAAM,MAAM,KAAK,KAAK;AACtB,QAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAED,MAAI,MAAM,MAAM,SAAS,KAAK,MAAM,kBAAkB,UAAU,KAAK;AAEnE,SAAM,MAAM,KAAK;IAAE;IAAK,SAAS;GAAK,EAAC;AACvC,OAAI,MACF,SAAQ,KACL,+BAA+B,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,gBAAgB,MAAM,MAAM,OAAO,EAC5I;AAEH,gBAAa,KAAK,OAAO,SAAS;EACnC,MAEC,MAAK;CAER;AACF;AAED,SAAS,aAAaC,KAAaC,OAAgBJ,UAAuB;CACxE,MAAM,QAAQ,OAAO;AACrB,MAAK,SAAS,MAAM,MAAM,WAAW,EAAG;CAExC,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;CAClD,MAAM,MAAM,KAAK,KAAK;AAGtB,OAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAGD,KAAI,MAAM,kBAAkB,SAAS,KAAK;EAExC,MAAM,OAAO,MAAM,MAAM,OAAO;AAChC,MAAI,MAAM;AACR,OAAI,OAAO;IACT,MAAM,WAAW,KAAK,KAAK,GAAG,KAAK;AACnC,YAAQ,KACL,2CAA2C,SAAS,aAAa,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAC5H;GACF;AACD,QAAK,KAAK;EACX;AAED,MAAI,MAAM,MAAM,SAAS,EACvB,cAAa,KAAK,OAAO,SAAS;CAErC,OAAM;EAEL,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACA,IACD;EACD,MAAM,QAAQ,KAAK,IAAI,GAAG,gBAAgB,MAAM,GAAG;AAEnD,MAAI,MACF,SAAQ,KACL,4CAA4C,SAAS,mBAAmB,MAAM,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAChI;AAKH,OAAK,MAAM,UACT,OAAM,YAAY,WAAW,MAAM;AACjC,SAAM,YAAY;AAClB,gBAAa,KAAK,OAAO,SAAS;EACnC,GAAE,MAAM;CAEZ;AACF;;;;;AAMD,SAAgB,WAAWD,UAAkBM,UAA8B;AACzE,KAAI,UAAU;EACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;EACpC,MAAM,QAAQ,OAAO;AACrB,MAAI,OAAO;AACT,OAAI,MAAM,WAAW;AACnB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,SAAM,QAAQ,CAAE;AAChB,SAAM,oBAAoB,CAAE;AAC5B,SAAM,UAAU;EACjB;CACF,MAEC,QAAO,KAAK,OAAO,CAAC,QAAQ,SAAO;AACjC,MAAI,IAAI,YAAY,EAAE,SAAS,GAAG,EAAE;GAClC,MAAM,QAAQ,OAAO;AACrB,OAAI,OAAO,WAAW;AACpB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,UAAO,OAAO;EACf;CACF,EAAC;AAEL;;;;;AAMD,SAAgB,kBACdC,MACAC,SAAiB,OACJ;CACb,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,SAAS,QAAQ,aAAa,KAAK;AAEzC,KAAI,UAAU,SAAS,uBAAuB,CAC5C,QAAO,SAAS,oBAAoB;AAQtC,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAIT,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAKT,KAAI,UAAU,SAAS,oBAAoB,IAAI,UAAU,SAAS,SAAS,CAGzE,QAAO;AAIT,KAAI,2BAA2B,KAAK,UAAU,CAC5C,QAAO;AAIT,KAAI,+BAA+B,KAAK,UAAU,CAChD,QAAO;AAIT,KAAI,UAAU,SAAS,uBAAuB,CAAE,QAAO;AACvD,KAAI,UAAU,SAAS,sBAAsB,CAAE,QAAO;AAGtD,KAAI,UAAU,SAAS,mBAAmB,CAAE,QAAO;AAGnD,KAAI,UAAU,SAAS,aAAa,CAAE,QAAO;AAC7C,KAAI,UAAU,SAAS,UAAU,CAAE,QAAO;AAC1C,KAAI,UAAU,SAAS,iBAAiB,CACtC,QAAO;AAGT,QAAO;AACR"}
+{"version":3,"file":"apiQueue-C45w-ymm.cjs","names":["queues: Record<string, Queue>","LIMITS: Record<ApiCategory, { max: number; perMs: number }>","timestamps: number[]","windowMs: number","now: number","max: number","clientId: string","category: ApiCategory","task: Task<T>","now","key: string","debug: boolean","category?: ApiCategory","path: string","method: string"],"sources":["../src/utils/apiQueue.ts"],"sourcesContent":["// A very small utility that provides per-endpoint request queuing with rate-limits.\n// The goal is to make sure that we never exceed the vendor-defined limits while also ensuring\n// that every request is eventually executed.\n//\n// NOTE: This is intentionally minimal – no external dependencies are introduced.\n// If you need more advanced features (persistence, jitter, etc.) consider a library such as `bottleneck`.\n\n/*\nRate-limit specification (per 60-second window)\n----------------------------------------------\nLogin as Taxpayer System         : 12\nLogin as Intermediary System     : 12\nSubmit Documents                 : 100\nGet Submission                   : 300\nCancel Document                  : 12\nReject Document                  : 12\nGet Document                     : 60\nGet Document Details             : 125\nGet Recent Documents             : 12\nSearch Documents                 : 12\nSearch Taxpayer's TIN            : 60\nTaxpayer's QR Code               : 60\n*/\n\nexport type ApiCategory =\n  | 'loginTaxpayer'\n  | 'loginIntermediary'\n  | 'submitDocuments'\n  | 'getSubmission'\n  | 'cancelDocument'\n  | 'rejectDocument'\n  | 'getDocument'\n  | 'getDocumentDetails'\n  | 'getRecentDocuments'\n  | 'searchDocuments'\n  | 'searchTin'\n  | 'taxpayerQr'\n  | 'default'\n\ntype Task<T> = () => Promise<T>\n\ninterface Queue {\n  running: number\n  queue: Array<{ run: () => void; addedAt: number }>\n  requestTimestamps: number[] // Track all request timestamps in the sliding window\n  nextTimer: NodeJS.Timeout | null // Track scheduled timer to avoid pile-up\n}\n\nconst queues: Record<string, Queue> = {}\n\n// Rate limits: max requests per time window (in ms)\nconst LIMITS: Record<ApiCategory, { max: number; perMs: number }> = {\n  loginTaxpayer: { max: 12, perMs: 60000 }, // 12 req/60s\n  loginIntermediary: { max: 12, perMs: 60000 }, // 12 req/60s\n  submitDocuments: { max: 100, perMs: 60000 }, // 100 req/60s\n  getSubmission: { max: 300, perMs: 60000 }, // 300 req/60s\n  cancelDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  rejectDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  getDocument: { max: 60, perMs: 60000 }, // 60 req/60s\n  getDocumentDetails: { max: 125, perMs: 60000 }, // 125 req/60s\n  getRecentDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchTin: { max: 60, perMs: 60000 }, // 60 req/60s\n  taxpayerQr: { max: 60, perMs: 60000 }, // 60 req/60s\n  default: { max: 12, perMs: 60000 }, // 12 req/60s (minimum limit)\n}\n\n/**\n * Clean up old timestamps outside the sliding window\n */\nfunction cleanupTimestamps(\n  timestamps: number[],\n  windowMs: number,\n  now: number,\n): number[] {\n  return timestamps.filter(ts => now - ts < windowMs)\n}\n\n/**\n * Calculate when we can make the next request without exceeding the rate limit\n */\nfunction getNextAvailableTime(\n  timestamps: number[],\n  max: number,\n  windowMs: number,\n  now: number,\n): number {\n  if (timestamps.length < max) {\n    return now // Can execute immediately\n  }\n\n  // We're at the limit. Find when the oldest request will expire\n  const oldestTimestamp = timestamps[0]\n  if (!oldestTimestamp) {\n    return now // Shouldn't happen, but fallback to now\n  }\n  return oldestTimestamp + windowMs\n}\n\n/**\n * Public helper to schedule a request according to the category's limits.\n * Rate limits are enforced per clientId, so multiple instances with the same\n * clientId will share rate limiters, while different clientIds get separate limiters.\n *\n * This implementation uses a sliding window to track all requests within the time window.\n */\nexport function queueRequest<T>(\n  clientId: string,\n  category: ApiCategory,\n  task: Task<T>,\n  debug = false,\n): Promise<T> {\n  const key = `${clientId}:${category}`\n  if (!queues[key]) {\n    queues[key] = {\n      running: 0,\n      queue: [],\n      requestTimestamps: [],\n      nextTimer: null,\n    }\n  }\n\n  const queue = queues[key]!\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n\n  return new Promise<T>((resolve, reject) => {\n    const run = () => {\n      const now = Date.now()\n\n      // Clean up old timestamps before checking\n      queue.requestTimestamps = cleanupTimestamps(\n        queue.requestTimestamps,\n        perMs,\n        now,\n      )\n\n      // Check if we can execute now\n      if (queue.requestTimestamps.length >= max) {\n        // We've hit the rate limit, need to wait\n        const nextAvailable = getNextAvailableTime(\n          queue.requestTimestamps,\n          max,\n          perMs,\n          now,\n        )\n        const waitTime = nextAvailable - now\n\n        if (debug) {\n          console.log(\n            `[apiQueue] 🚫 Rate limit reached (${queue.requestTimestamps.length}/${max} in last ${perMs}ms). Queuing request. Need to wait ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length + 1}`,\n          )\n        }\n\n        // Re-queue this request to try again later\n        queue.queue.push({ run, addedAt: now })\n        // Don't call processQueue here - let the scheduled timer handle it\n        // to avoid potential requeue loops\n        return\n      }\n\n      // Record this request timestamp\n      queue.requestTimestamps.push(now)\n      queue.running++\n\n      if (debug) {\n        console.log(\n          `[apiQueue] ▶️  Executing request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n        )\n      }\n\n      task()\n        .then(resolve)\n        .catch(reject)\n        .finally(() => {\n          queue.running--\n          if (debug) {\n            console.log(\n              `[apiQueue] ✅ Request completed (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n            )\n          }\n          processQueue(key, debug, category)\n        })\n    }\n\n    // Add to queue or run immediately\n    const now = Date.now()\n    queue.requestTimestamps = cleanupTimestamps(\n      queue.requestTimestamps,\n      perMs,\n      now,\n    )\n\n    if (queue.queue.length > 0 || queue.requestTimestamps.length >= max) {\n      // Either there's already a queue, or we're at the rate limit\n      queue.queue.push({ run, addedAt: now })\n      if (debug) {\n        console.log(\n          `[apiQueue] ⏳ Queued request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Queue size: ${queue.queue.length}`,\n        )\n      }\n      processQueue(key, debug, category)\n    } else {\n      // Can run immediately\n      run()\n    }\n  })\n}\n\nfunction processQueue(key: string, debug: boolean, category: ApiCategory) {\n  const queue = queues[key]\n  if (!queue || queue.queue.length === 0) return\n\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n  const now = Date.now()\n\n  // Clean up old timestamps\n  queue.requestTimestamps = cleanupTimestamps(\n    queue.requestTimestamps,\n    perMs,\n    now,\n  )\n\n  // Check if we can process the next request\n  if (queue.requestTimestamps.length < max) {\n    // We have capacity, process immediately\n    const next = queue.queue.shift()\n    if (next) {\n      if (debug) {\n        const waitTime = Date.now() - next.addedAt\n        console.log(\n          `[apiQueue] 🚀 Processing queued request (${category}). Waited: ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n        )\n      }\n      next.run()\n    }\n    // After one runs, immediately try again (in case there's more space)\n    if (queue.queue.length > 0) {\n      processQueue(key, debug, category)\n    }\n  } else {\n    // We're at capacity, schedule for when the oldest request expires\n    const nextAvailable = getNextAvailableTime(\n      queue.requestTimestamps,\n      max,\n      perMs,\n      now,\n    )\n    const delay = Math.max(0, nextAvailable - now + 50) // +50ms buffer for timer precision\n\n    if (debug) {\n      console.log(\n        `[apiQueue] ⏸️  Delaying queue processing (${category}). Will retry in ${delay.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n      )\n    }\n\n    // Only schedule a timer if one isn't already scheduled\n    // This prevents timer pile-up during bursts\n    if (!queue.nextTimer) {\n      queue.nextTimer = setTimeout(() => {\n        queue.nextTimer = null\n        processQueue(key, debug, category)\n      }, delay)\n    }\n  }\n}\n\n/**\n * Cleanup function to clear all queues and timers for a specific client.\n * Useful for testing or cleanup on application shutdown.\n */\nexport function clearQueue(clientId: string, category?: ApiCategory): void {\n  if (category) {\n    const key = `${clientId}:${category}`\n    const queue = queues[key]\n    if (queue) {\n      if (queue.nextTimer) {\n        clearTimeout(queue.nextTimer)\n        queue.nextTimer = null\n      }\n      queue.queue = []\n      queue.requestTimestamps = []\n      queue.running = 0\n    }\n  } else {\n    // Clear all queues for this client\n    Object.keys(queues).forEach(key => {\n      if (key.startsWith(`${clientId}:`)) {\n        const queue = queues[key]\n        if (queue?.nextTimer) {\n          clearTimeout(queue.nextTimer)\n          queue.nextTimer = null\n        }\n        delete queues[key]\n      }\n    })\n  }\n}\n\n/**\n * Very naive path-based category detection. If no matcher fits, the `default` category\n * (effectively unlimited) is returned. Adjust these heuristics as your API surface evolves.\n */\nexport function categorizeRequest(\n  path: string,\n  method: string = 'GET',\n): ApiCategory {\n  const cleanPath = path.toLowerCase()\n  const isPost = method?.toUpperCase() === 'POST'\n\n  if (cleanPath.includes('/documentsubmissions')) {\n    return isPost ? 'submitDocuments' : 'getSubmission'\n  }\n\n  // -----------------------------\n  // v1.0 API endpoint matchers\n  // -----------------------------\n\n  // Get Recent Documents - /api/v1.0/documents/recent\n  if (cleanPath.includes('/documents/recent')) {\n    return 'getRecentDocuments'\n  }\n\n  // Search Documents - /api/v1.0/documents/search\n  if (cleanPath.includes('/documents/search')) {\n    return 'searchDocuments'\n  }\n\n  // Document state actions (cancel/reject) - PUT /api/v1.0/documents/state/{uuid}/state\n  // Both cancel and reject use the same endpoint, differentiated only by request body\n  if (cleanPath.includes('/documents/state/') && cleanPath.endsWith('/state')) {\n    // Both cancelDocument and rejectDocument share the same rate limit (12 RPM)\n    // Use cancelDocument category for both since they share the same bucket\n    return 'cancelDocument'\n  }\n\n  // Document raw content - /api/v1.0/documents/{uuid}/raw\n  if (/\\/documents\\/[^/]+\\/raw$/.test(cleanPath)) {\n    return 'getDocument'\n  }\n\n  // Document details - /api/v1.0/documents/{uuid}/details\n  if (/\\/documents\\/[^/]+\\/details$/.test(cleanPath)) {\n    return 'getDocumentDetails'\n  }\n\n  // Taxpayer TIN search & validation share same limit bucket\n  if (cleanPath.includes('/taxpayer/search/tin')) return 'searchTin'\n  if (cleanPath.includes('/taxpayer/validate/')) return 'searchTin'\n\n  // Taxpayer QR code info\n  if (cleanPath.includes('/taxpayer/qrcode')) return 'taxpayerQr'\n\n  // Legacy matchers (kept for backward compatibility)\n  if (cleanPath.includes('/searchtin')) return 'searchTin'\n  if (cleanPath.includes('/qrcode')) return 'taxpayerQr'\n  if (cleanPath.includes('/connect/token')) {\n    return 'loginTaxpayer'\n  }\n\n  return 'default'\n}\n"],"mappings":";;AAgDA,MAAMA,SAAgC,CAAE;AAGxC,MAAMC,SAA8D;CAClE,eAAe;EAAE,KAAK;EAAI,OAAO;CAAO;CACxC,mBAAmB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC5C,iBAAiB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC3C,eAAe;EAAE,KAAK;EAAK,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,aAAa;EAAE,KAAK;EAAI,OAAO;CAAO;CACtC,oBAAoB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC9C,oBAAoB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC7C,iBAAiB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC1C,WAAW;EAAE,KAAK;EAAI,OAAO;CAAO;CACpC,YAAY;EAAE,KAAK;EAAI,OAAO;CAAO;CACrC,SAAS;EAAE,KAAK;EAAI,OAAO;CAAO;AACnC;;;;AAKD,SAAS,kBACPC,YACAC,UACAC,KACU;AACV,QAAO,WAAW,OAAO,QAAM,MAAM,KAAK,SAAS;AACpD;;;;AAKD,SAAS,qBACPF,YACAG,KACAF,UACAC,KACQ;AACR,KAAI,WAAW,SAAS,IACtB,QAAO;CAIT,MAAM,kBAAkB,WAAW;AACnC,MAAK,gBACH,QAAO;AAET,QAAO,kBAAkB;AAC1B;;;;;;;;AASD,SAAgB,aACdE,UACAC,UACAC,MACA,QAAQ,OACI;CACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;AACpC,MAAK,OAAO,KACV,QAAO,OAAO;EACZ,SAAS;EACT,OAAO,CAAE;EACT,mBAAmB,CAAE;EACrB,WAAW;CACZ;CAGH,MAAM,QAAQ,OAAO;CACrB,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;AAElD,QAAO,IAAI,QAAW,CAAC,SAAS,WAAW;EACzC,MAAM,MAAM,MAAM;GAChB,MAAMC,QAAM,KAAK,KAAK;AAGtB,SAAM,oBAAoB,kBACxB,MAAM,mBACN,OACAA,MACD;AAGD,OAAI,MAAM,kBAAkB,UAAU,KAAK;IAEzC,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACAA,MACD;IACD,MAAM,WAAW,gBAAgBA;AAEjC,QAAI,MACF,SAAQ,KACL,oCAAoC,MAAM,kBAAkB,OAAO,GAAG,IAAI,WAAW,MAAM,qCAAqC,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,SAAS,EAAE,EAC/L;AAIH,UAAM,MAAM,KAAK;KAAE;KAAK,SAASA;IAAK,EAAC;AAGvC;GACD;AAGD,SAAM,kBAAkB,KAAKA,MAAI;AACjC,SAAM;AAEN,OAAI,MACF,SAAQ,KACL,oCAAoC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC5K;AAGH,SAAM,CACH,KAAK,QAAQ,CACb,MAAM,OAAO,CACb,QAAQ,MAAM;AACb,UAAM;AACN,QAAI,MACF,SAAQ,KACL,kCAAkC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC1K;AAEH,iBAAa,KAAK,OAAO,SAAS;GACnC,EAAC;EACL;EAGD,MAAM,MAAM,KAAK,KAAK;AACtB,QAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAED,MAAI,MAAM,MAAM,SAAS,KAAK,MAAM,kBAAkB,UAAU,KAAK;AAEnE,SAAM,MAAM,KAAK;IAAE;IAAK,SAAS;GAAK,EAAC;AACvC,OAAI,MACF,SAAQ,KACL,+BAA+B,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,gBAAgB,MAAM,MAAM,OAAO,EAC5I;AAEH,gBAAa,KAAK,OAAO,SAAS;EACnC,MAEC,MAAK;CAER;AACF;AAED,SAAS,aAAaC,KAAaC,OAAgBJ,UAAuB;CACxE,MAAM,QAAQ,OAAO;AACrB,MAAK,SAAS,MAAM,MAAM,WAAW,EAAG;CAExC,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;CAClD,MAAM,MAAM,KAAK,KAAK;AAGtB,OAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAGD,KAAI,MAAM,kBAAkB,SAAS,KAAK;EAExC,MAAM,OAAO,MAAM,MAAM,OAAO;AAChC,MAAI,MAAM;AACR,OAAI,OAAO;IACT,MAAM,WAAW,KAAK,KAAK,GAAG,KAAK;AACnC,YAAQ,KACL,2CAA2C,SAAS,aAAa,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAC5H;GACF;AACD,QAAK,KAAK;EACX;AAED,MAAI,MAAM,MAAM,SAAS,EACvB,cAAa,KAAK,OAAO,SAAS;CAErC,OAAM;EAEL,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACA,IACD;EACD,MAAM,QAAQ,KAAK,IAAI,GAAG,gBAAgB,MAAM,GAAG;AAEnD,MAAI,MACF,SAAQ,KACL,4CAA4C,SAAS,mBAAmB,MAAM,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAChI;AAKH,OAAK,MAAM,UACT,OAAM,YAAY,WAAW,MAAM;AACjC,SAAM,YAAY;AAClB,gBAAa,KAAK,OAAO,SAAS;EACnC,GAAE,MAAM;CAEZ;AACF;;;;;AAMD,SAAgB,WAAWD,UAAkBM,UAA8B;AACzE,KAAI,UAAU;EACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;EACpC,MAAM,QAAQ,OAAO;AACrB,MAAI,OAAO;AACT,OAAI,MAAM,WAAW;AACnB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,SAAM,QAAQ,CAAE;AAChB,SAAM,oBAAoB,CAAE;AAC5B,SAAM,UAAU;EACjB;CACF,MAEC,QAAO,KAAK,OAAO,CAAC,QAAQ,SAAO;AACjC,MAAI,IAAI,YAAY,EAAE,SAAS,GAAG,EAAE;GAClC,MAAM,QAAQ,OAAO;AACrB,OAAI,OAAO,WAAW;AACpB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,UAAO,OAAO;EACf;CACF,EAAC;AAEL;;;;;AAMD,SAAgB,kBACdC,MACAC,SAAiB,OACJ;CACb,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,SAAS,QAAQ,aAAa,KAAK;AAEzC,KAAI,UAAU,SAAS,uBAAuB,CAC5C,QAAO,SAAS,oBAAoB;AAQtC,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAIT,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAKT,KAAI,UAAU,SAAS,oBAAoB,IAAI,UAAU,SAAS,SAAS,CAGzE,QAAO;AAIT,KAAI,2BAA2B,KAAK,UAAU,CAC5C,QAAO;AAIT,KAAI,+BAA+B,KAAK,UAAU,CAChD,QAAO;AAIT,KAAI,UAAU,SAAS,uBAAuB,CAAE,QAAO;AACvD,KAAI,UAAU,SAAS,sBAAsB,CAAE,QAAO;AAGtD,KAAI,UAAU,SAAS,mBAAmB,CAAE,QAAO;AAGnD,KAAI,UAAU,SAAS,aAAa,CAAE,QAAO;AAC7C,KAAI,UAAU,SAAS,UAAU,CAAE,QAAO;AAC1C,KAAI,UAAU,SAAS,iBAAiB,CACtC,QAAO;AAGT,QAAO;AACR"}

package/dist/{certificate-COwqszxD.js → certificate-Cg6spxUs.js}

@@ -4,26 +4,6 @@ import fs from "fs";
 
 //#region src/utils/certificate.ts
 /**
-* Extracts certificate information from PEM certificate
-* Converts hex serial number to decimal as required by MyInvois
-*
-* @param certificatePem - Certificate in PEM format
-* @returns Object with issuer name and decimal serial number
-*/
-const extractCertificateInfo = (certificatePem) => {
-	try {
-		const cert = new crypto.X509Certificate(certificatePem);
-		const serialNumberHex = cert.serialNumber;
-		const serialNumberDecimal = BigInt("0x" + serialNumberHex).toString();
-		return {
-			issuerName: cert.issuer,
-			serialNumber: serialNumberDecimal
-		};
-	} catch (error) {
-		throw new Error(`Failed to extract certificate info: ${error}`);
-	}
-};
-/**
 * Validates that certificate and private key form a valid pair
 *
 * @param certificatePem - Certificate in PEM format
@@ -68,4 +48,5 @@ const getPemFromP12 = (p12Input, passphrase) => {
 };
 
 //#endregion
-export { extractCertificateInfo, getPemFromP12, validateKeyPair };
+export { getPemFromP12, validateKeyPair };
+//# sourceMappingURL=certificate-Cg6spxUs.js.map

package/dist/certificate-Cg6spxUs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-Cg6spxUs.js","names":["certificatePem: string","privateKeyPem: string","p12Input: Buffer | string","passphrase: string","p12Buffer: Buffer"],"sources":["../src/utils/certificate.ts"],"sourcesContent":["import crypto from 'crypto'\nimport * as forge from 'node-forge'\nimport fs from 'fs'\n\n// Single source of truth for issuer name / serial number extraction. The signer\n// (utils/document) owns the canonical normalization (RDN order + XML escaping)\n// that MyInvois validates against (DS326), so re-export it here rather than\n// maintaining a second, divergent implementation.\nexport { extractCertificateInfo } from './document'\n\n/**\n * Validates that certificate and private key form a valid pair\n *\n * @param certificatePem - Certificate in PEM format\n * @param privateKeyPem - Private key in PEM format\n * @returns Boolean indicating if key pair is valid\n */\nexport const validateKeyPair = (\n  certificatePem: string,\n  privateKeyPem: string,\n): boolean => {\n  try {\n    const cert = new crypto.X509Certificate(certificatePem)\n    const publicKey = cert.publicKey\n\n    // Test signature/verification cycle\n    const testData = 'validation-test-data'\n    const signer = crypto.createSign('RSA-SHA256')\n    signer.update(testData)\n    const signature = signer.sign(privateKeyPem)\n\n    const verifier = crypto.createVerify('RSA-SHA256')\n    verifier.update(testData)\n    return verifier.verify(publicKey, signature)\n  } catch (error) {\n    console.error('Key pair validation failed:', error)\n    return false\n  }\n}\n\nexport const getPemFromP12 = (\n  p12Input: Buffer | string,\n  passphrase: string,\n): {\n  certificatePem: string\n  privateKeyPem: string\n} => {\n  try {\n    // Load binary DER contents of the p12 file\n    const p12Buffer: Buffer = Buffer.isBuffer(p12Input)\n      ? p12Input\n      : fs.readFileSync(p12Input)\n\n    // Convert DER -> ASN.1\n    const p12Der = forge.util.createBuffer(p12Buffer.toString('binary'))\n    const p12Asn1 = forge.asn1.fromDer(p12Der.getBytes())\n\n    // Parse the PKCS#12 using the provided passphrase\n    const p12 = forge.pkcs12.pkcs12FromAsn1(p12Asn1, passphrase)\n\n    // Extract the first certificate (assumes it is the signing cert)\n    const certBags = p12.getBags({ bagType: forge.pki.oids.certBag })[\n      forge.pki.oids.certBag\n    ]\n    if (!certBags || certBags.length === 0)\n      throw new Error('No certificate found in PKCS#12 bundle')\n    const certificatePem = forge.pki.certificateToPem(certBags[0].cert)\n\n    // Extract the first private key\n    const keyBags = p12.getBags({\n      bagType: forge.pki.oids.pkcs8ShroudedKeyBag,\n    })[forge.pki.oids.pkcs8ShroudedKeyBag]\n    if (!keyBags || keyBags.length === 0)\n      throw new Error('No private key found in PKCS#12 bundle')\n    const privateKeyPem = forge.pki.privateKeyToPem(keyBags[0].key)\n\n    return { certificatePem, privateKeyPem }\n  } catch (error) {\n    throw new Error(`Failed to extract PEM from PKCS#12 file: ${error}`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,kBAAkB,CAC7BA,gBACAC,kBACY;AACZ,KAAI;EACF,MAAM,OAAO,IAAI,OAAO,gBAAgB;EACxC,MAAM,YAAY,KAAK;EAGvB,MAAM,WAAW;EACjB,MAAM,SAAS,OAAO,WAAW,aAAa;AAC9C,SAAO,OAAO,SAAS;EACvB,MAAM,YAAY,OAAO,KAAK,cAAc;EAE5C,MAAM,WAAW,OAAO,aAAa,aAAa;AAClD,WAAS,OAAO,SAAS;AACzB,SAAO,SAAS,OAAO,WAAW,UAAU;CAC7C,SAAQ,OAAO;AACd,UAAQ,MAAM,+BAA+B,MAAM;AACnD,SAAO;CACR;AACF;AAED,MAAa,gBAAgB,CAC3BC,UACAC,eAIG;AACH,KAAI;EAEF,MAAMC,YAAoB,OAAO,SAAS,SAAS,GAC/C,WACA,GAAG,aAAa,SAAS;EAG7B,MAAM,SAAS,MAAM,KAAK,aAAa,UAAU,SAAS,SAAS,CAAC;EACpE,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,UAAU,CAAC;EAGrD,MAAM,MAAM,MAAM,OAAO,eAAe,SAAS,WAAW;EAG5D,MAAM,WAAW,IAAI,QAAQ,EAAE,SAAS,MAAM,IAAI,KAAK,QAAS,EAAC,CAC/D,MAAM,IAAI,KAAK;AAEjB,OAAK,YAAY,SAAS,WAAW,EACnC,OAAM,IAAI,MAAM;EAClB,MAAM,iBAAiB,MAAM,IAAI,iBAAiB,SAAS,GAAG,KAAK;EAGnE,MAAM,UAAU,IAAI,QAAQ,EAC1B,SAAS,MAAM,IAAI,KAAK,oBACzB,EAAC,CAAC,MAAM,IAAI,KAAK;AAClB,OAAK,WAAW,QAAQ,WAAW,EACjC,OAAM,IAAI,MAAM;EAClB,MAAM,gBAAgB,MAAM,IAAI,gBAAgB,QAAQ,GAAG,IAAI;AAE/D,SAAO;GAAE;GAAgB;EAAe;CACzC,SAAQ,OAAO;AACd,QAAM,IAAI,OAAO,2CAA2C,MAAM;CACnE;AACF"}

package/dist/{certificate-CWmfCPdt.cjs → certificate-Dw46fkYv.cjs}

@@ -1,30 +1,10 @@
-const require_chunk = require('./chunk-CUT6urMc.cjs');
-const crypto = require_chunk.__toESM(require("crypto"));
-const node_forge = require_chunk.__toESM(require("node-forge"));
-const fs = require_chunk.__toESM(require("fs"));
+const require_document = require('./document-B11B5lqd.cjs');
+const crypto = require_document.__toESM(require("crypto"));
+const node_forge = require_document.__toESM(require("node-forge"));
+const fs = require_document.__toESM(require("fs"));
 
 //#region src/utils/certificate.ts
 /**
-* Extracts certificate information from PEM certificate
-* Converts hex serial number to decimal as required by MyInvois
-*
-* @param certificatePem - Certificate in PEM format
-* @returns Object with issuer name and decimal serial number
-*/
-const extractCertificateInfo = (certificatePem) => {
-	try {
-		const cert = new crypto.default.X509Certificate(certificatePem);
-		const serialNumberHex = cert.serialNumber;
-		const serialNumberDecimal = BigInt("0x" + serialNumberHex).toString();
-		return {
-			issuerName: cert.issuer,
-			serialNumber: serialNumberDecimal
-		};
-	} catch (error) {
-		throw new Error(`Failed to extract certificate info: ${error}`);
-	}
-};
-/**
 * Validates that certificate and private key form a valid pair
 *
 * @param certificatePem - Certificate in PEM format
@@ -69,12 +49,6 @@ const getPemFromP12 = (p12Input, passphrase) => {
 };
 
 //#endregion
-Object.defineProperty(exports, 'extractCertificateInfo', {
-  enumerable: true,
-  get: function () {
-    return extractCertificateInfo;
-  }
-});
 Object.defineProperty(exports, 'getPemFromP12', {
   enumerable: true,
   get: function () {
@@ -87,4 +61,4 @@ Object.defineProperty(exports, 'validateKeyPair', {
     return validateKeyPair;
   }
 });
-//# sourceMappingURL=certificate-CWmfCPdt.cjs.map
+//# sourceMappingURL=certificate-Dw46fkYv.cjs.map

package/dist/certificate-Dw46fkYv.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-Dw46fkYv.cjs","names":["certificatePem: string","privateKeyPem: string","p12Input: Buffer | string","passphrase: string","p12Buffer: Buffer","forge"],"sources":["../src/utils/certificate.ts"],"sourcesContent":["import crypto from 'crypto'\nimport * as forge from 'node-forge'\nimport fs from 'fs'\n\n// Single source of truth for issuer name / serial number extraction. The signer\n// (utils/document) owns the canonical normalization (RDN order + XML escaping)\n// that MyInvois validates against (DS326), so re-export it here rather than\n// maintaining a second, divergent implementation.\nexport { extractCertificateInfo } from './document'\n\n/**\n * Validates that certificate and private key form a valid pair\n *\n * @param certificatePem - Certificate in PEM format\n * @param privateKeyPem - Private key in PEM format\n * @returns Boolean indicating if key pair is valid\n */\nexport const validateKeyPair = (\n  certificatePem: string,\n  privateKeyPem: string,\n): boolean => {\n  try {\n    const cert = new crypto.X509Certificate(certificatePem)\n    const publicKey = cert.publicKey\n\n    // Test signature/verification cycle\n    const testData = 'validation-test-data'\n    const signer = crypto.createSign('RSA-SHA256')\n    signer.update(testData)\n    const signature = signer.sign(privateKeyPem)\n\n    const verifier = crypto.createVerify('RSA-SHA256')\n    verifier.update(testData)\n    return verifier.verify(publicKey, signature)\n  } catch (error) {\n    console.error('Key pair validation failed:', error)\n    return false\n  }\n}\n\nexport const getPemFromP12 = (\n  p12Input: Buffer | string,\n  passphrase: string,\n): {\n  certificatePem: string\n  privateKeyPem: string\n} => {\n  try {\n    // Load binary DER contents of the p12 file\n    const p12Buffer: Buffer = Buffer.isBuffer(p12Input)\n      ? p12Input\n      : fs.readFileSync(p12Input)\n\n    // Convert DER -> ASN.1\n    const p12Der = forge.util.createBuffer(p12Buffer.toString('binary'))\n    const p12Asn1 = forge.asn1.fromDer(p12Der.getBytes())\n\n    // Parse the PKCS#12 using the provided passphrase\n    const p12 = forge.pkcs12.pkcs12FromAsn1(p12Asn1, passphrase)\n\n    // Extract the first certificate (assumes it is the signing cert)\n    const certBags = p12.getBags({ bagType: forge.pki.oids.certBag })[\n      forge.pki.oids.certBag\n    ]\n    if (!certBags || certBags.length === 0)\n      throw new Error('No certificate found in PKCS#12 bundle')\n    const certificatePem = forge.pki.certificateToPem(certBags[0].cert)\n\n    // Extract the first private key\n    const keyBags = p12.getBags({\n      bagType: forge.pki.oids.pkcs8ShroudedKeyBag,\n    })[forge.pki.oids.pkcs8ShroudedKeyBag]\n    if (!keyBags || keyBags.length === 0)\n      throw new Error('No private key found in PKCS#12 bundle')\n    const privateKeyPem = forge.pki.privateKeyToPem(keyBags[0].key)\n\n    return { certificatePem, privateKeyPem }\n  } catch (error) {\n    throw new Error(`Failed to extract PEM from PKCS#12 file: ${error}`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,MAAa,kBAAkB,CAC7BA,gBACAC,kBACY;AACZ,KAAI;EACF,MAAM,OAAO,IAAI,eAAO,gBAAgB;EACxC,MAAM,YAAY,KAAK;EAGvB,MAAM,WAAW;EACjB,MAAM,SAAS,eAAO,WAAW,aAAa;AAC9C,SAAO,OAAO,SAAS;EACvB,MAAM,YAAY,OAAO,KAAK,cAAc;EAE5C,MAAM,WAAW,eAAO,aAAa,aAAa;AAClD,WAAS,OAAO,SAAS;AACzB,SAAO,SAAS,OAAO,WAAW,UAAU;CAC7C,SAAQ,OAAO;AACd,UAAQ,MAAM,+BAA+B,MAAM;AACnD,SAAO;CACR;AACF;AAED,MAAa,gBAAgB,CAC3BC,UACAC,eAIG;AACH,KAAI;EAEF,MAAMC,YAAoB,OAAO,SAAS,SAAS,GAC/C,WACA,WAAG,aAAa,SAAS;EAG7B,MAAM,SAAS,WAAM,KAAK,aAAa,UAAU,SAAS,SAAS,CAAC;EACpE,MAAM,UAAU,WAAM,KAAK,QAAQ,OAAO,UAAU,CAAC;EAGrD,MAAM,MAAM,WAAM,OAAO,eAAe,SAAS,WAAW;EAG5D,MAAM,WAAW,IAAI,QAAQ,EAAE,SAASC,WAAM,IAAI,KAAK,QAAS,EAAC,CAC/DA,WAAM,IAAI,KAAK;AAEjB,OAAK,YAAY,SAAS,WAAW,EACnC,OAAM,IAAI,MAAM;EAClB,MAAM,iBAAiB,WAAM,IAAI,iBAAiB,SAAS,GAAG,KAAK;EAGnE,MAAM,UAAU,IAAI,QAAQ,EAC1B,SAASA,WAAM,IAAI,KAAK,oBACzB,EAAC,CAACA,WAAM,IAAI,KAAK;AAClB,OAAK,WAAW,QAAQ,WAAW,EACjC,OAAM,IAAI,MAAM;EAClB,MAAM,gBAAgB,WAAM,IAAI,gBAAgB,QAAQ,GAAG,IAAI;AAE/D,SAAO;GAAE;GAAgB;EAAe;CACzC,SAAQ,OAAO;AACd,QAAM,IAAI,OAAO,2CAA2C,MAAM;CACnE;AACF"}

package/dist/{classification-codes-C2X4xW5-.d.ts → classification-codes-BQMnAQFr.d.ts}

@@ -114,4 +114,5 @@ interface Classification {
   description: string;
 }
 //#endregion
-export { Classification, ClassificationCode, ClassificationCodeEnum };
+export { Classification, ClassificationCode, ClassificationCodeEnum };
+//# sourceMappingURL=classification-codes-BQMnAQFr.d.ts.map

package/dist/{country-code-DsI8Mbzx.d.ts → country-code-DAejE5RV.d.ts}

@@ -539,4 +539,5 @@ interface Country {
   name: string;
 }
 //#endregion
-export { Country, CountryCode, CountryCodeEnum, CountryNameEnum };
+export { Country, CountryCode, CountryCodeEnum, CountryNameEnum };
+//# sourceMappingURL=country-code-DAejE5RV.d.ts.map

package/dist/{currencies-DKuDflOO.d.ts → currencies-Cg9RkxRB.d.ts}

@@ -204,4 +204,5 @@ interface Currency {
   name: string;
 }
 //#endregion
-export { Currency, CurrencyCode, CurrencyCodeEnum };
+export { Currency, CurrencyCode, CurrencyCodeEnum };
+//# sourceMappingURL=currencies-Cg9RkxRB.d.ts.map

package/dist/{document-B6ab06s1.cjs → document-B11B5lqd.cjs}

@@ -1,6 +1,28 @@
-const require_chunk = require('./chunk-CUT6urMc.cjs');
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
 const require_formatIdValue = require('./formatIdValue-i67o4kyD.cjs');
-const crypto = require_chunk.__toESM(require("crypto"));
+const crypto = __toESM(require("crypto"));
 
 //#region src/utils/document.ts
 /**
@@ -71,6 +93,29 @@ const canonicalizeJSON = (obj) => {
 */
 const generateCleanInvoiceObject = (invoice) => {
 	const lineItems = getLineItems(invoice);
+	const round2 = (n) => Math.round(n * 100) / 100;
+	const taxCategoryOrder = [];
+	const taxByCategory = /* @__PURE__ */ new Map();
+	for (const item of lineItems) {
+		const category = item.taxType;
+		if (!taxByCategory.has(category)) {
+			taxByCategory.set(category, {
+				taxable: 0,
+				tax: 0
+			});
+			taxCategoryOrder.push(category);
+		}
+		const bucket = taxByCategory.get(category);
+		bucket.taxable += item.totalTaxableAmountPerLine ?? 0;
+		bucket.tax += item.taxAmount ?? 0;
+	}
+	if (taxCategoryOrder.length === 0) {
+		taxCategoryOrder.push(lineItems[0]?.taxType || "01");
+		taxByCategory.set(taxCategoryOrder[0], {
+			taxable: invoice.legalMonetaryTotal.taxExclusiveAmount,
+			tax: invoice.taxTotal.taxAmount
+		});
+	}
 	return {
 		ID: [{ _: invoice.eInvoiceCodeOrNumber }],
 		IssueDate: [{ _: invoice.eInvoiceDate }],
@@ -142,24 +187,27 @@ const generateCleanInvoiceObject = (invoice) => {
 				_: invoice.taxTotal.taxAmount,
 				currencyID: invoice.invoiceCurrencyCode
 			}],
-			TaxSubtotal: [{
-				TaxableAmount: [{
-					_: invoice.legalMonetaryTotal.taxExclusiveAmount,
-					currencyID: invoice.invoiceCurrencyCode
-				}],
-				TaxAmount: [{
-					_: invoice.taxTotal.taxAmount,
-					currencyID: invoice.invoiceCurrencyCode
-				}],
-				TaxCategory: [{
-					ID: [{ _: lineItems[0]?.taxType || "01" }],
-					TaxScheme: [{ ID: [{
-						_: "OTH",
-						schemeAgencyID: "6",
-						schemeID: "UN/ECE 5153"
-					}] }]
-				}]
-			}]
+			TaxSubtotal: taxCategoryOrder.map((category) => {
+				const { taxable, tax } = taxByCategory.get(category);
+				return {
+					TaxableAmount: [{
+						_: round2(taxable),
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxAmount: [{
+						_: round2(tax),
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxCategory: [{
+						ID: [{ _: category }],
+						TaxScheme: [{ ID: [{
+							_: "OTH",
+							schemeAgencyID: "6",
+							schemeID: "UN/ECE 5153"
+						}] }]
+					}]
+				};
+			})
 		}],
 		LegalMonetaryTotal: [{
 			LineExtensionAmount: [{
@@ -624,6 +672,12 @@ const calculateInvoiceTotals = (lineItems, payableRoundingAmount = 0) => {
 };
 
 //#endregion
+Object.defineProperty(exports, '__toESM', {
+  enumerable: true,
+  get: function () {
+    return __toESM;
+  }
+});
 Object.defineProperty(exports, 'calculateCertificateDigest', {
   enumerable: true,
   get: function () {
@@ -738,4 +792,4 @@ Object.defineProperty(exports, 'transformDocumentForHashing', {
     return transformDocumentForHashing;
   }
 });
-//# sourceMappingURL=document-B6ab06s1.cjs.map
+//# sourceMappingURL=document-B11B5lqd.cjs.map

package/dist/document-B11B5lqd.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-B11B5lqd.cjs","names":["item: InvoiceLineItem","doc: AllDocumentsV1_1","obj: unknown","sortedObj: Record<string, unknown>","invoice: AllDocumentsV1_1","n: number","taxCategoryOrder: string[]","invoices: AllDocumentsV1_1[]","invoice: InvoiceSubmission","certificatePem: string","X509Certificate","str: string","issuer: string","serialHex: string","error: unknown","certificateDigest: string","signingTime: string","issuerName: string","serialNumber: string","signedProperties: SignedPropertiesObject","useTargetWrapper: boolean","digestObj: unknown","docDigest: string","propsDigest: string","privateKeyPem: string","signedInfo: SignedInfoObject","documentString: string","signingCredentials: SigningCredentials","params: {\n  itemClassificationCode: ClassificationCode\n  itemDescription: string\n  unitPrice: number\n  quantity?: number\n  measurement?: string\n  taxType: TaxTypeCode\n  taxRate: number\n  totalTaxableAmountPerLine?: number\n  discountAmount?: number\n  discountRate?: number\n}","params: {\n  itemClassificationCode: ClassificationCode\n  itemDescription: string\n  unitPrice: number\n  quantity?: number\n  measurement?: string\n  taxType: TaxTypeCode\n  taxPerUnitAmount: number\n  baseUnitMeasure: number\n  baseUnitMeasureCode: UnitTypeCode\n  totalTaxableAmountPerLine?: number\n  discountAmount?: number\n  discountRate?: number\n}","lineItems: InvoiceLineItem[]","payableRoundingAmount: number"],"sources":["../src/utils/document.ts"],"sourcesContent":["import crypto, { X509Certificate } from 'crypto'\nimport {\n  InvoiceSubmission,\n  AllDocumentsV1_1,\n  SigningCredentials,\n  SignedPropertiesObject,\n  UBLDocument,\n  CompleteInvoice,\n  SignedInfoObject,\n  UnitTypeCode,\n  InvoiceLineItem,\n} from '../types'\nimport type { ClassificationCode } from '../types'\nimport type { TaxTypeCode } from '../types'\nimport { formatIdValue } from './formatIdValue'\n\n/**\n * MyInvois v1.1 Document Generation and Signing Utilities\n * Strictly follows: https://sdk.myinvois.hasil.gov.my/documents/invoice-v1-1\n * JSON Signature Guide: https://sdk.myinvois.hasil.gov.my/signature-creation-json/\n */\n\n/**\n * Determines if a line item uses fixed rate taxation\n */\nexport const isFixedRateTax = (item: InvoiceLineItem): boolean => {\n  return (\n    item.taxPerUnitAmount !== undefined && item.baseUnitMeasure !== undefined\n  )\n}\n\n/**\n * Determines if a line item uses percentage taxation\n */\nexport const isPercentageTax = (item: InvoiceLineItem): boolean => {\n  return item.taxRate !== undefined && !isFixedRateTax(item)\n}\n\n/**\n * Calculates expected tax amount for a line item based on its tax type\n */\nexport const calculateExpectedTaxAmount = (item: InvoiceLineItem): number => {\n  if (isFixedRateTax(item)) {\n    return item.taxPerUnitAmount! * item.baseUnitMeasure!\n  } else if (isPercentageTax(item)) {\n    return (item.totalTaxableAmountPerLine * item.taxRate!) / 100\n  }\n  return 0\n}\n\n/**\n * Extracts the line-item array from any document variant\n */\nconst getLineItems = (doc: AllDocumentsV1_1): InvoiceLineItem[] => {\n  if ('invoiceLineItems' in doc) return doc.invoiceLineItems\n  if ('creditNoteLineItems' in doc) return doc.creditNoteLineItems\n  if ('debitNoteLineItems' in doc) return doc.debitNoteLineItems\n  if ('refundNoteLineItems' in doc) return doc.refundNoteLineItems\n  if ('selfBilledCreditNoteLineItems' in doc)\n    return doc.selfBilledCreditNoteLineItems\n  if ('selfBilledRefundNoteLineItems' in doc)\n    return doc.selfBilledRefundNoteLineItems\n  // Fallback (should never happen with exhaustive types)\n  return []\n}\n\n/**\n * Helper function to recursively sort object keys for JSON canonicalization\n */\nexport function sortObjectKeys(obj: unknown): unknown {\n  if (obj === null || typeof obj !== 'object') {\n    return obj\n  }\n\n  if (Array.isArray(obj)) {\n    return obj.map(sortObjectKeys)\n  }\n\n  const sortedObj: Record<string, unknown> = {}\n  const keys = Object.keys(obj as Record<string, unknown>).sort()\n\n  for (const key of keys) {\n    sortedObj[key] = sortObjectKeys((obj as Record<string, unknown>)[key])\n  }\n\n  return sortedObj\n}\n\n/**\n * Enhanced canonicalization following MyInvois specification exactly\n * Key changes: ensure consistent ordering and formatting\n */\nexport const canonicalizeJSON = (obj: unknown): string => {\n  const sortedObj = sortObjectKeys(obj)\n  // Use compact JSON with no extra whitespace\n  return JSON.stringify(sortedObj, null, 0)\n}\n\n/**\n * Generates a clean invoice object following MyInvois v1.1 specification exactly\n * This is the base invoice structure WITHOUT signature elements (for hash calculation)\n *\n * Key requirements from working documents:\n * - All mandatory fields must be present\n * - Many optional fields must be present even if empty\n * - Specific field ordering and structure\n * - Correct listID values (e.g., \"3166-1\" not \"ISO3166-1\")\n */\nexport const generateCleanInvoiceObject = (\n  invoice: AllDocumentsV1_1,\n): InvoiceSubmission => {\n  const lineItems = getLineItems(invoice)\n\n  // Group line items by tax category so the document-level TaxTotal carries one\n  // TaxSubtotal per distinct tax type (derived entirely from the line items).\n  const round2 = (n: number) => Math.round(n * 100) / 100\n  const taxCategoryOrder: string[] = []\n  const taxByCategory = new Map<string, { taxable: number; tax: number }>()\n  for (const item of lineItems) {\n    const category = item.taxType\n    if (!taxByCategory.has(category)) {\n      taxByCategory.set(category, { taxable: 0, tax: 0 })\n      taxCategoryOrder.push(category)\n    }\n    const bucket = taxByCategory.get(category)!\n    bucket.taxable += item.totalTaxableAmountPerLine ?? 0\n    bucket.tax += item.taxAmount ?? 0\n  }\n  // Fallback for the (invalid) no-line-items case: keep prior single-subtotal shape.\n  if (taxCategoryOrder.length === 0) {\n    taxCategoryOrder.push(lineItems[0]?.taxType || '01')\n    taxByCategory.set(taxCategoryOrder[0]!, {\n      taxable: invoice.legalMonetaryTotal.taxExclusiveAmount,\n      tax: invoice.taxTotal.taxAmount,\n    })\n  }\n\n  return {\n    // === MANDATORY CORE FIELDS ===\n    ID: [{ _: invoice.eInvoiceCodeOrNumber }],\n    IssueDate: [{ _: invoice.eInvoiceDate }],\n    IssueTime: [{ _: invoice.eInvoiceTime }],\n    InvoiceTypeCode: [\n      {\n        _: invoice.eInvoiceTypeCode,\n        listVersionID: invoice.eInvoiceVersion || '1.1',\n      },\n    ],\n    DocumentCurrencyCode: [{ _: invoice.invoiceCurrencyCode }],\n\n    // === BILLING REFERENCE (only for credit/debit/refund notes) ===\n    ...('originalEInvoiceReferenceNumber' in invoice &&\n    'originalEInvoiceInternalId' in invoice &&\n    invoice.originalEInvoiceReferenceNumber\n      ? {\n          BillingReference: [\n            {\n              InvoiceDocumentReference: [\n                {\n                  UUID: [\n                    {\n                      _: invoice.originalEInvoiceReferenceNumber,\n                    },\n                  ],\n                  ID: [\n                    {\n                      _: invoice.originalEInvoiceInternalId,\n                    },\n                  ],\n                },\n              ],\n            },\n          ],\n        }\n      : {}),\n\n    // === SUPPLIER PARTY (AccountingSupplierParty) ===\n    AccountingSupplierParty: [\n      {\n        Party: [\n          {\n            // Industry Classification - required field\n            IndustryClassificationCode: [\n              {\n                _: invoice.supplier.industryClassificationCode,\n                name: invoice.supplier.industryClassificationDescription,\n              },\n            ],\n\n            // Party Identifications\n            PartyIdentification: [\n              {\n                ID: [\n                  {\n                    _: invoice.supplier.tin,\n                    schemeID: 'TIN',\n                  },\n                ],\n              },\n              {\n                ID: [\n                  {\n                    _: formatIdValue(invoice.supplier.registrationNumber),\n                    schemeID: invoice.supplier.registrationType || 'NRIC',\n                  },\n                ],\n              },\n            ],\n\n            // Postal Address - FIXED listID format\n            PostalAddress: [\n              {\n                CityName: [{ _: invoice.supplier.address.cityName }],\n                CountrySubentityCode: [{ _: invoice.supplier.address.state }],\n                AddressLine: [\n                  {\n                    Line: [{ _: invoice.supplier.address.addressLine0 }],\n                  },\n                ],\n                Country: [\n                  {\n                    IdentificationCode: [\n                      {\n                        _: invoice.supplier.address.country || 'MYS',\n                        listID: '3166-1', // FIXED: was \"ISO3166-1\"\n                        listAgencyID: 'ISO',\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n\n            // Party Legal Entity\n            PartyLegalEntity: [\n              {\n                RegistrationName: [{ _: invoice.supplier.name }],\n              },\n            ],\n\n            // Contact Information\n            Contact: [\n              {\n                Telephone: [{ _: invoice.supplier.contactNumber || '' }],\n              },\n            ],\n          },\n        ],\n      },\n    ],\n\n    // === BUYER PARTY (AccountingCustomerParty) ===\n    AccountingCustomerParty: [\n      {\n        Party: [\n          {\n            // Party Identifications\n            PartyIdentification: [\n              {\n                ID: [\n                  {\n                    _: invoice.buyer.tin,\n                    schemeID: 'TIN',\n                  },\n                ],\n              },\n              {\n                ID: [\n                  {\n                    _: formatIdValue(invoice.buyer.registrationNumber),\n                    schemeID: invoice.buyer.registrationType || 'NRIC',\n                  },\n                ],\n              },\n              {\n                ID: [\n                  {\n                    _: invoice.buyer.sstRegistrationNumber || 'NA',\n                    schemeID: 'SST',\n                  },\n                ],\n              },\n            ],\n\n            // Postal Address - FIXED listID format\n            PostalAddress: [\n              {\n                CityName: [{ _: invoice.buyer.address.cityName }],\n                CountrySubentityCode: [{ _: invoice.buyer.address.state }],\n                AddressLine: [\n                  {\n                    Line: [{ _: invoice.buyer.address.addressLine0 }],\n                  },\n                ],\n                Country: [\n                  {\n                    IdentificationCode: [\n                      {\n                        _: invoice.buyer.address.country || 'MYS',\n                        listID: '3166-1', // FIXED: was \"ISO3166-1\"\n                        listAgencyID: 'ISO',\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n\n            // Party Legal Entity\n            PartyLegalEntity: [\n              {\n                RegistrationName: [{ _: invoice.buyer.name }],\n              },\n            ],\n\n            // Contact Information\n            Contact: [\n              {\n                Telephone: [{ _: invoice.buyer.contactNumber || '' }],\n              },\n            ],\n          },\n        ],\n      },\n    ],\n\n    // === TAX TOTAL ===\n    TaxTotal: [\n      {\n        TaxAmount: [\n          {\n            _: invoice.taxTotal.taxAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n        // One TaxSubtotal per distinct tax category, derived from line items.\n        TaxSubtotal: taxCategoryOrder.map(category => {\n          const { taxable, tax } = taxByCategory.get(category)!\n          return {\n            TaxableAmount: [\n              {\n                _: round2(taxable),\n                currencyID: invoice.invoiceCurrencyCode,\n              },\n            ],\n            TaxAmount: [\n              {\n                _: round2(tax),\n                currencyID: invoice.invoiceCurrencyCode,\n              },\n            ],\n            TaxCategory: [\n              {\n                ID: [{ _: category }],\n                TaxScheme: [\n                  {\n                    ID: [\n                      {\n                        _: 'OTH',\n                        schemeAgencyID: '6',\n                        schemeID: 'UN/ECE 5153',\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n          }\n        }),\n      },\n    ],\n\n    // === LEGAL MONETARY TOTAL ===\n    LegalMonetaryTotal: [\n      {\n        LineExtensionAmount: [\n          {\n            _: invoice.legalMonetaryTotal.taxExclusiveAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n        TaxExclusiveAmount: [\n          {\n            _: invoice.legalMonetaryTotal.taxExclusiveAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n        TaxInclusiveAmount: [\n          {\n            _: invoice.legalMonetaryTotal.taxInclusiveAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n        PayableRoundingAmount: [\n          {\n            _: invoice.legalMonetaryTotal.payableRoundingAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n        PayableAmount: [\n          {\n            _: invoice.legalMonetaryTotal.payableAmount,\n            currencyID: invoice.invoiceCurrencyCode,\n          },\n        ],\n      },\n    ],\n\n    // === INVOICE LINES ===\n    InvoiceLine: lineItems.map((item, index) => ({\n      ID: [{ _: (index + 1).toString() }],\n\n      // Quantity and Measurement (optional)\n      ...(item.quantity !== undefined || item.measurement !== undefined\n        ? {\n            InvoicedQuantity: [\n              {\n                _: item.quantity ?? 1,\n                ...(item.measurement !== undefined\n                  ? { unitCode: item.measurement }\n                  : {}),\n              },\n            ],\n          }\n        : {}),\n\n      // Item Information\n      Item: [\n        {\n          CommodityClassification: [\n            {\n              ItemClassificationCode: [\n                {\n                  _: item.itemClassificationCode,\n                  listID: 'CLASS',\n                },\n              ],\n            },\n          ],\n          Description: [{ _: item.itemDescription }],\n        },\n      ],\n\n      ItemPriceExtension: [\n        {\n          Amount: [\n            {\n              _:\n                (item.totalTaxableAmountPerLine ?? 0) +\n                (item.discountAmount ?? 0),\n              currencyID: invoice.invoiceCurrencyCode,\n            },\n          ],\n        },\n      ],\n\n      LineExtensionAmount: [\n        {\n          _: item.totalTaxableAmountPerLine,\n          currencyID: invoice.invoiceCurrencyCode,\n        },\n      ],\n\n      // Price Information\n      Price: [\n        {\n          PriceAmount: [\n            {\n              _: item.unitPrice,\n              currencyID: invoice.invoiceCurrencyCode,\n            },\n          ],\n        },\n      ],\n\n      // Line-level discount (AllowanceCharge with ChargeIndicator=false) – include only if a discount exists\n      ...(item.discountAmount !== undefined || item.discountRate !== undefined\n        ? {\n            AllowanceCharge: [\n              {\n                ChargeIndicator: [{ _: false }],\n                Amount: [\n                  {\n                    _: item.discountAmount ?? 0,\n                    currencyID: invoice.invoiceCurrencyCode,\n                  },\n                ],\n                ...(item.discountRate !== undefined\n                  ? {\n                      MultiplierFactorNumeric: [{ _: item.discountRate }],\n                      BaseAmount: [\n                        {\n                          _:\n                            (item.totalTaxableAmountPerLine ?? 0) +\n                            (item.discountAmount ?? 0),\n                          currencyID: invoice.invoiceCurrencyCode,\n                        },\n                      ],\n                    }\n                  : {}),\n              },\n            ],\n          }\n        : {}),\n\n      // Tax Information for line\n      TaxTotal: [\n        {\n          TaxAmount: [\n            {\n              _: item.taxAmount,\n              currencyID: invoice.invoiceCurrencyCode,\n            },\n          ],\n          TaxSubtotal: [\n            {\n              TaxableAmount: [\n                {\n                  _: item.totalTaxableAmountPerLine,\n                  currencyID: invoice.invoiceCurrencyCode,\n                },\n              ],\n              TaxAmount: [\n                {\n                  _: item.taxAmount,\n                  currencyID: invoice.invoiceCurrencyCode,\n                },\n              ],\n              // Conditional tax fields based on taxation type\n              ...(item.taxPerUnitAmount !== undefined &&\n              item.baseUnitMeasure !== undefined\n                ? {\n                    // Fixed Rate Taxation\n                    PerUnitAmount: [\n                      {\n                        _: item.taxPerUnitAmount,\n                        currencyID: invoice.invoiceCurrencyCode,\n                      },\n                    ],\n                    BaseUnitMeasure: [\n                      {\n                        _: item.baseUnitMeasure,\n                        unitCode: item.baseUnitMeasureCode || 'C62',\n                      },\n                    ],\n                  }\n                : item.taxRate !== undefined\n                  ? {\n                      // Percentage Taxation\n                      Percent: [{ _: item.taxRate }],\n                    }\n                  : {}),\n              TaxCategory: [\n                {\n                  ID: [{ _: item.taxType }],\n                  TaxScheme: [\n                    {\n                      ID: [\n                        {\n                          _: 'OTH',\n                          schemeAgencyID: '6',\n                          schemeID: 'UN/ECE 5153',\n                        },\n                      ],\n                    },\n                  ],\n                },\n              ],\n            },\n          ],\n        },\n      ],\n    })),\n\n    // === TAX EXCHANGE RATE (mandatory where applicable) ===\n    TaxExchangeRate: invoice.currencyExchangeRate\n      ? [\n          {\n            SourceCurrencyCode: [\n              {\n                _: invoice.invoiceCurrencyCode,\n              },\n            ],\n            TargetCurrencyCode: [\n              {\n                _: 'MYR',\n              },\n            ],\n            CalculationRate: [\n              {\n                _: invoice.currencyExchangeRate,\n              },\n            ],\n          },\n        ]\n      : undefined,\n  }\n}\n\n/**\n * Generates the complete UBL document structure with namespace declarations\n */\nexport const generateCleanUBLDocument = (\n  invoices: AllDocumentsV1_1[],\n): UBLDocument => {\n  return {\n    _D: 'urn:oasis:names:specification:ubl:schema:xsd:Invoice-2',\n    _A: 'urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2',\n    _B: 'urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2',\n    Invoice: invoices.map(generateCleanInvoiceObject),\n  }\n}\n\n/**\n * Step 1: Transform the document for hashing or transmission\n * Removes UBLExtensions and Signature, and minifies the JSON\n * Returns the minified, cleaned JSON string\n *\n * FIXED: Use regex-based minification to match PowerShell script exactly\n */\nexport const transformDocumentForHashing = (\n  invoices: AllDocumentsV1_1[],\n): string => {\n  // Generate clean UBL document structure\n  const cleanDocument = generateCleanUBLDocument(invoices)\n\n  // Deep clone to avoid mutating input\n  const documentForTransform = JSON.parse(JSON.stringify(cleanDocument))\n  if (\n    documentForTransform.Invoice &&\n    Array.isArray(documentForTransform.Invoice)\n  ) {\n    documentForTransform.Invoice.forEach((invoice: InvoiceSubmission) => {\n      delete invoice.UBLExtensions\n      delete invoice.Signature\n    })\n  }\n\n  // Convert to JSON string first\n  const jsonString = JSON.stringify(documentForTransform)\n\n  // Apply the exact same regex-based minification as PowerShell script\n  // This regex preserves whitespace within quoted strings but removes all other whitespace\n  const minifiedJson = jsonString.replace(\n    /(\"(?:\\\\.|[^\"\\\\])*\")|\\s+/g,\n    (match, quotedString) => {\n      if (quotedString) {\n        return quotedString // Keep string content exactly as-is\n      } else {\n        return '' // Remove all other whitespace\n      }\n    },\n  )\n\n  return minifiedJson\n}\n\n/**\n * Step 2: Calculate Document Digest\n * FIXED: Remove UBLExtensions and Signature before hashing (DS322)\n * Based on working implementation pattern\n */\nexport const calculateDocumentDigest = (\n  invoices: AllDocumentsV1_1[],\n): string => {\n  // Use the transformation function to get the minified, cleaned JSON string\n  const documentString = transformDocumentForHashing(invoices)\n\n  // Calculate SHA-256 hash\n  const hash = crypto.createHash('sha256')\n  hash.update(documentString, 'utf8')\n\n  // Return as Base64 (DocDigest)\n  return hash.digest('base64')\n}\n\n/**\n * Step 4: Calculate Certificate Digest\n * Enhanced to handle certificate content properly\n * FIXED: Match PowerShell script exactly - use raw certificate data like $cert.RawData\n */\nexport const calculateCertificateDigest = (certificatePem: string): string => {\n  try {\n    // Create X509Certificate object to get raw data (like PowerShell $cert.RawData)\n    const cert = new X509Certificate(certificatePem)\n\n    // Get the raw certificate data (DER-encoded, like PowerShell $cert.RawData)\n    const rawCertificateData = cert.raw\n\n    // Calculate SHA-256 hash of raw certificate data (like PowerShell $sha256.ComputeHash($cert.RawData))\n    const hash = crypto.createHash('sha256')\n    hash.update(rawCertificateData)\n\n    // Return as Base64 (like PowerShell [Convert]::ToBase64String($certHash))\n    return hash.digest('base64')\n  } catch {\n    // Fallback to the previous method if X509Certificate fails\n    const certificateContent = certificatePem\n      .replace(/-----BEGIN CERTIFICATE-----/g, '')\n      .replace(/-----END CERTIFICATE-----/g, '')\n      .replace(/\\s+/g, '') // Remove all whitespace\n\n    // Convert Base64 to binary\n    const certificateBinary = Buffer.from(certificateContent, 'base64')\n\n    // Calculate SHA-256 hash of binary content\n    const hash = crypto.createHash('sha256')\n    hash.update(certificateBinary)\n\n    // Return as Base64\n    return hash.digest('base64')\n  }\n}\n\n/**\n * Enhanced certificate info extraction with better error handling\n * FIXED: Normalize issuer name format to match MyInvois expectations (DS326)\n */\nexport const extractCertificateInfo = (\n  certificatePem: string,\n): {\n  issuerName: string\n  serialNumber: string\n  subjectName: string\n} => {\n  try {\n    const cert = new X509Certificate(certificatePem)\n\n    // Extract serial number and convert to decimal string\n    const serialNumberHex = cert.serialNumber\n\n    // FIXED: Use raw issuer name like PowerShell $cert.IssuerName.Name\n    // Apply XML escaping to match PowerShell [System.Security.SecurityElement]::Escape()\n    const escapeXmlSpecialChars = (str: string): string => {\n      return str\n        .replace(/&/g, '&amp;')\n        .replace(/</g, '&lt;')\n        .replace(/>/g, '&gt;')\n        .replace(/\"/g, '&quot;')\n        .replace(/'/g, '&apos;')\n    }\n\n    // FIXED: Normalize issuer name to match MyInvois expectations\n    // The issuer name should be in the format: \"CN=Trial LHDNM Sub CA V1, OU=Terms of use at http://www.testcertcomp.com.my, O=LHDNM, C=MY\"\n    const normalizeIssuerName = (issuer: string): string => {\n      // Node returns issuer DN in reverse RDN order (C, O, ... , CN).\n      // The MyInvois validator expects forward order (CN first).\n      // 1. Break DN into components separated by newline or commas.\n      // 2. Reverse to get CN → ... → C ordering.\n      // 3. Join with \", \" and ensure single '=' spacing.\n      const parts = issuer\n        .split(/\\r?\\n|,\\s*/)\n        .map(part => part.trim())\n        .filter(part => part.length > 0)\n        .reverse()\n      return parts.join(', ').replace(/\\s*=\\s*/g, '=')\n    }\n\n    // Enhanced serial number formatting\n    const formatSerialNumber = (serialHex: string): string => {\n      // Convert hex to decimal and ensure it's a string\n      const decimal = BigInt('0x' + serialHex).toString()\n      return decimal\n    }\n\n    // FIXED: Use raw subject name without normalization to match PowerShell $cert.SubjectName.Name\n    // The subject name should be in the format shown in the specification\n    const rawSubjectName = cert.subject\n\n    return {\n      issuerName: escapeXmlSpecialChars(normalizeIssuerName(cert.issuer)),\n      serialNumber: formatSerialNumber(serialNumberHex),\n      subjectName: rawSubjectName, // Use raw subject name like PowerShell\n    }\n  } catch (error: unknown) {\n    throw new Error(\n      `Failed to extract certificate info: ${error instanceof Error ? error.message : String(error)}`,\n    )\n  }\n}\n\n/**\n * Step 5: Create SignedProperties with enhanced structure\n * FIXED: Simplified structure to match MyInvois expectations (DS320)\n * Following MyInvois JSON signature specification exactly\n */\nexport const createSignedProperties = (\n  certificateDigest: string,\n  signingTime: string,\n  issuerName: string,\n  serialNumber: string,\n): SignedPropertiesObject => {\n  return {\n    SignedProperties: [\n      {\n        Id: 'id-xades-signed-props',\n        SignedSignatureProperties: [\n          {\n            SigningTime: [{ _: signingTime }],\n            SigningCertificate: [\n              {\n                Cert: [\n                  {\n                    CertDigest: [\n                      {\n                        DigestMethod: [\n                          {\n                            _: '',\n                            Algorithm:\n                              'http://www.w3.org/2001/04/xmlenc#sha256',\n                          },\n                        ],\n                        DigestValue: [{ _: certificateDigest }],\n                      },\n                    ],\n                    IssuerSerial: [\n                      {\n                        X509IssuerName: [{ _: issuerName }],\n                        X509SerialNumber: [{ _: serialNumber }],\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n          },\n        ],\n      },\n    ],\n  }\n}\n\n/**\n * Step 6: Calculate SignedProperties Digest\n * Calculates the digest over the correct structure for validator compliance.\n * FIXED: Calculate digest from SignedProperties only (without Target wrapper)\n */\nexport const calculateSignedPropertiesDigest = (\n  signedProperties: SignedPropertiesObject,\n  useTargetWrapper: boolean = true, // Changed to true - validator calculates digest from embedded structure with Target wrapper\n): string => {\n  let digestObj: unknown\n  if (useTargetWrapper) {\n    digestObj = {\n      Target: 'signature',\n      SignedProperties: signedProperties.SignedProperties,\n    }\n  } else {\n    digestObj = signedProperties.SignedProperties\n  }\n\n  // FIXED: Don't sort object keys - use exact structure as embedded\n  // The validator calculates digest from the exact embedded structure\n  const signedPropertiesString = JSON.stringify(digestObj)\n\n  // Apply the same regex-based minification as the document transformation\n  const minifiedSignedProperties = signedPropertiesString.replace(\n    /(\"(?:\\\\.|[^\"\\\\])*\")|\\s+/g,\n    (match, quotedString) => {\n      if (quotedString) {\n        return quotedString // Keep string content exactly as-is\n      } else {\n        return '' // Remove all other whitespace\n      }\n    },\n  )\n\n  const hash = crypto.createHash('sha256')\n  hash.update(minifiedSignedProperties, 'utf8')\n  return hash.digest('base64')\n}\n\n/**\n * Step 3: Create SignedInfo and calculate signature\n * Enhanced with better structure and signature generation\n */\nexport const createSignedInfoAndSign = (\n  docDigest: string,\n  propsDigest: string,\n  privateKeyPem: string,\n): { signedInfo: SignedInfoObject; signatureValue: string } => {\n  // Create SignedInfo structure following specification exactly\n  const signedInfo: SignedInfoObject = {\n    CanonicalizationMethod: [\n      {\n        _: '',\n        Algorithm: 'http://www.w3.org/2006/12/xml-c14n11',\n      },\n    ],\n    SignatureMethod: [\n      {\n        _: '',\n        Algorithm: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',\n      },\n    ],\n    Reference: [\n      {\n        Id: 'id-doc-signed-data',\n        Type: '',\n        URI: '',\n        DigestMethod: [\n          {\n            _: '',\n            Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',\n          },\n        ],\n        DigestValue: [{ _: docDigest }],\n      },\n      {\n        Id: 'id-xades-signed-props',\n        Type: 'http://uri.etsi.org/01903/v1.3.2#SignedProperties',\n        URI: '#id-xades-signed-props',\n        DigestMethod: [\n          {\n            _: '',\n            Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',\n          },\n        ],\n        DigestValue: [{ _: propsDigest }],\n      },\n    ],\n  }\n\n  // Serialize the SignedInfo exactly as it will be embedded (no reordering)\n  const signedInfoRaw = JSON.stringify(signedInfo)\n\n  try {\n    const signer = crypto.createSign('RSA-SHA256')\n    signer.update(signedInfoRaw, 'utf8')\n    const signatureValue = signer.sign(privateKeyPem, 'base64')\n\n    // Reuse the original object so ordering is preserved\n    return { signedInfo, signatureValue }\n  } catch (error) {\n    throw new Error(\n      `Signature generation failed: ${error instanceof Error ? error.message : String(error)}`,\n    )\n  }\n}\n\n/**\n * Signs the minified document string using the provided private key PEM\n * Returns the signature as a base64 string\n * FIXED: Match PowerShell script exactly - first compute hash, then sign the hash\n */\nexport const signDocumentString = (\n  documentString: string,\n  privateKeyPem: string,\n): string => {\n  // Create signer with RSA-SHA256 (matches PowerShell RSAPKCS1SignatureFormatter)\n  const signer = crypto.createSign('RSA-SHA256')\n  signer.update(documentString, 'utf8')\n  return signer.sign(privateKeyPem, 'base64')\n}\n\n/**\n * Complete document generation with signatures\n * Follows the complete MyInvois JSON signature creation process (Steps 1-7)\n */\nexport const generateCompleteDocument = (\n  invoices: AllDocumentsV1_1[],\n  signingCredentials: SigningCredentials,\n): CompleteInvoice => {\n  try {\n    // Step 1: Generate clean document (done in calculateDocumentDigest)\n    // Step 2: Calculate document digest\n    const docDigest = calculateDocumentDigest(invoices)\n\n    // Get the minified, cleaned JSON string for signing\n    const documentString = transformDocumentForHashing(invoices)\n\n    // Step 3: Sign the minified document string (not the digest)\n    const docSignature = signDocumentString(\n      documentString,\n      signingCredentials.privateKeyPem,\n    )\n\n    // Generate signing time in proper ISO format matching PowerShell exactly\n    // PowerShell: Get-Date -Format \"yyyy-MM-ddTHH:mm:ssZ\"\n    const now = new Date()\n    const signingTime =\n      now.getFullYear() +\n      '-' +\n      String(now.getMonth() + 1).padStart(2, '0') +\n      '-' +\n      String(now.getDate()).padStart(2, '0') +\n      'T' +\n      String(now.getHours()).padStart(2, '0') +\n      ':' +\n      String(now.getMinutes()).padStart(2, '0') +\n      ':' +\n      String(now.getSeconds()).padStart(2, '0') +\n      'Z'\n\n    // Extract certificate information (enhanced)\n    const certInfo = extractCertificateInfo(signingCredentials.certificatePem)\n\n    // Step 4: Calculate certificate digest\n    const certificateDigest = calculateCertificateDigest(\n      signingCredentials.certificatePem,\n    )\n\n    // Step 5: Create SignedProperties using extracted cert info\n    const signedProperties = createSignedProperties(\n      certificateDigest,\n      signingTime,\n      certInfo.issuerName,\n      certInfo.serialNumber,\n    )\n\n    // Step 6: Calculate SignedProperties digest using the dedicated function\n    const propsDigest = calculateSignedPropertiesDigest(signedProperties)\n\n    // Create simple SignedInfo structure (matching PowerShell approach)\n    const signedInfo: SignedInfoObject = {\n      CanonicalizationMethod: [\n        {\n          _: '',\n          Algorithm: 'http://www.w3.org/2006/12/xml-c14n11',\n        },\n      ],\n      SignatureMethod: [\n        {\n          _: '',\n          Algorithm: 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',\n        },\n      ],\n      Reference: [\n        {\n          Id: 'id-doc-signed-data',\n          Type: '',\n          URI: '',\n          DigestMethod: [\n            {\n              _: '',\n              Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',\n            },\n          ],\n          DigestValue: [{ _: docDigest }],\n        },\n        {\n          Id: 'id-xades-signed-props',\n          Type: 'http://uri.etsi.org/01903/v1.3.2#SignedProperties',\n          URI: '#id-xades-signed-props',\n          DigestMethod: [\n            {\n              _: '',\n              Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',\n            },\n          ],\n          DigestValue: [{ _: propsDigest }],\n        },\n      ],\n    }\n\n    // Extract certificate content using raw data (like PowerShell $cert.RawData)\n    const cert = new X509Certificate(signingCredentials.certificatePem)\n    const certificate = cert.raw.toString('base64')\n\n    // Step 7: Create final signed document\n    const signedInvoices = invoices.map(invoice => {\n      const cleanInvoice = generateCleanInvoiceObject(invoice)\n\n      return {\n        ...cleanInvoice,\n\n        // Add UBLExtensions with complete signature structure\n        UBLExtensions: [\n          {\n            UBLExtension: [\n              {\n                ExtensionURI: [\n                  {\n                    _: 'urn:oasis:names:specification:ubl:dsig:enveloped:xades',\n                  },\n                ],\n                ExtensionContent: [\n                  {\n                    UBLDocumentSignatures: [\n                      {\n                        SignatureInformation: [\n                          {\n                            ID: [\n                              {\n                                _: 'urn:oasis:names:specification:ubl:signature:1',\n                              },\n                            ],\n                            ReferencedSignatureID: [\n                              {\n                                _: 'urn:oasis:names:specification:ubl:signature:Invoice',\n                              },\n                            ],\n                            Signature: [\n                              {\n                                Id: 'signature',\n                                Object: [\n                                  {\n                                    QualifyingProperties: [\n                                      {\n                                        Target: 'signature',\n                                        SignedProperties:\n                                          signedProperties.SignedProperties,\n                                      },\n                                    ],\n                                  },\n                                ],\n                                KeyInfo: [\n                                  {\n                                    X509Data: [\n                                      {\n                                        X509Certificate: [{ _: certificate }],\n                                        X509SubjectName: [\n                                          { _: certInfo.subjectName },\n                                        ],\n                                        X509IssuerSerial: [\n                                          {\n                                            X509IssuerName: [\n                                              {\n                                                _: certInfo.issuerName,\n                                              },\n                                            ],\n                                            X509SerialNumber: [\n                                              {\n                                                _: certInfo.serialNumber,\n                                              },\n                                            ],\n                                          },\n                                        ],\n                                      },\n                                    ],\n                                  },\n                                ],\n                                SignatureValue: [{ _: docSignature }],\n                                SignedInfo: [signedInfo],\n                              },\n                            ],\n                          },\n                        ],\n                      },\n                    ],\n                  },\n                ],\n              },\n            ],\n          },\n        ],\n\n        // Add simple Signature reference\n        Signature: [\n          {\n            ID: [\n              {\n                _: 'urn:oasis:names:specification:ubl:signature:Invoice',\n              },\n            ],\n            SignatureMethod: [\n              {\n                _: 'urn:oasis:names:specification:ubl:dsig:enveloped:xades',\n              },\n            ],\n          },\n        ],\n      }\n    })\n\n    return {\n      _D: 'urn:oasis:names:specification:ubl:schema:xsd:Invoice-2',\n      _A: 'urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2',\n      _B: 'urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2',\n      Invoice: signedInvoices,\n    }\n  } catch (error) {\n    throw new Error(\n      `Document generation failed: ${error instanceof Error ? error.message : String(error)}`,\n    )\n  }\n}\n\n/**\n * Creates a line item with percentage-based taxation (e.g., SST, GST)\n */\nexport const createPercentageTaxLineItem = (params: {\n  itemClassificationCode: ClassificationCode\n  itemDescription: string\n  unitPrice: number\n  quantity?: number\n  measurement?: string\n  taxType: TaxTypeCode\n  taxRate: number\n  totalTaxableAmountPerLine?: number\n  discountAmount?: number\n  discountRate?: number\n}): InvoiceLineItem => {\n  const quantity = params.quantity\n    ? params.quantity <= 0\n      ? 1\n      : (params.quantity ?? 1)\n    : 1\n  // Compute pre-discount from unit price and quantity only to avoid double-discounting\n  const preDiscountAmount = params.unitPrice * quantity\n  const hasDiscount =\n    params.discountAmount !== undefined || params.discountRate !== undefined\n  const computedDiscountByRate =\n    hasDiscount && params.discountRate !== undefined\n      ? preDiscountAmount * params.discountRate\n      : 0\n  const discountAmount =\n    hasDiscount && params.discountAmount !== undefined\n      ? params.discountAmount\n      : computedDiscountByRate\n  const totalTaxableAmount = Math.max(\n    0,\n    preDiscountAmount - (hasDiscount ? discountAmount : 0),\n  )\n  const taxAmount = (totalTaxableAmount * params.taxRate) / 100\n\n  return {\n    itemClassificationCode: params.itemClassificationCode,\n    itemDescription: params.itemDescription,\n    unitPrice: params.unitPrice,\n    taxType: params.taxType,\n    taxRate: params.taxRate,\n    ...(params.quantity !== undefined ? { quantity: params.quantity } : {}),\n    ...(params.measurement !== undefined\n      ? { measurement: params.measurement }\n      : {}),\n    ...(hasDiscount && discountAmount !== undefined ? { discountAmount } : {}),\n    ...(hasDiscount && params.discountRate !== undefined\n      ? { discountRate: params.discountRate }\n      : {}),\n    taxAmount: Math.round(taxAmount * 100) / 100, // Round to 2 decimal places\n    totalTaxableAmountPerLine: totalTaxableAmount,\n    totalAmountPerLine: totalTaxableAmount + taxAmount,\n  }\n}\n\n/**\n * Creates a line item with fixed rate taxation (e.g., Tourism Tax)\n */\nexport const createFixedRateTaxLineItem = (params: {\n  itemClassificationCode: ClassificationCode\n  itemDescription: string\n  unitPrice: number\n  quantity?: number\n  measurement?: string\n  taxType: TaxTypeCode\n  taxPerUnitAmount: number\n  baseUnitMeasure: number\n  baseUnitMeasureCode: UnitTypeCode\n  totalTaxableAmountPerLine?: number\n  discountAmount?: number\n  discountRate?: number\n}): InvoiceLineItem => {\n  const quantity = params.quantity || 1\n  // Compute pre-discount from unit price and quantity only to avoid double-discounting\n  const preDiscountAmount = params.unitPrice * quantity\n  const hasDiscount =\n    params.discountAmount !== undefined || params.discountRate !== undefined\n  const computedDiscountByRate =\n    hasDiscount && params.discountRate !== undefined\n      ? preDiscountAmount * params.discountRate\n      : 0\n  const discountAmount =\n    hasDiscount && params.discountAmount !== undefined\n      ? params.discountAmount\n      : computedDiscountByRate\n  const totalTaxableAmount = Math.max(\n    0,\n    preDiscountAmount - (hasDiscount ? discountAmount : 0),\n  )\n  const taxAmount = params.taxPerUnitAmount * params.baseUnitMeasure\n\n  return {\n    itemClassificationCode: params.itemClassificationCode,\n    itemDescription: params.itemDescription,\n    unitPrice: params.unitPrice,\n    taxType: params.taxType,\n    taxPerUnitAmount: params.taxPerUnitAmount,\n    baseUnitMeasure: params.baseUnitMeasure,\n    baseUnitMeasureCode: params.baseUnitMeasureCode,\n    ...(params.quantity !== undefined ? { quantity: params.quantity } : {}),\n    ...(params.measurement !== undefined\n      ? { measurement: params.measurement }\n      : {}),\n    ...(hasDiscount && discountAmount !== undefined ? { discountAmount } : {}),\n    ...(hasDiscount && params.discountRate !== undefined\n      ? { discountRate: params.discountRate }\n      : {}),\n    taxAmount: Math.round(taxAmount * 100) / 100, // Round to 2 decimal places\n    totalTaxableAmountPerLine: totalTaxableAmount,\n    totalAmountPerLine: totalTaxableAmount + taxAmount,\n  }\n}\n\n/**\n * Calculates invoice totals from line items\n */\nexport const calculateInvoiceTotals = (\n  lineItems: InvoiceLineItem[],\n  payableRoundingAmount: number = 0,\n): {\n  legalMonetaryTotal: {\n    taxExclusiveAmount: number\n    taxInclusiveAmount: number\n    payableRoundingAmount: number\n    payableAmount: number\n  }\n  taxTotal: {\n    taxAmount: number\n  }\n} => {\n  const taxExclusiveAmount = lineItems.reduce(\n    (sum, item) => sum + item.totalTaxableAmountPerLine,\n    0,\n  )\n  const totalTaxAmount = lineItems.reduce(\n    (sum, item) => sum + item.taxAmount,\n    0,\n  )\n  const taxInclusiveAmount = taxExclusiveAmount + totalTaxAmount\n  const payableAmount = taxInclusiveAmount + payableRoundingAmount\n\n  return {\n    legalMonetaryTotal: {\n      taxExclusiveAmount: Math.round(taxExclusiveAmount * 100) / 100,\n      taxInclusiveAmount: Math.round(taxInclusiveAmount * 100) / 100,\n      payableRoundingAmount: Math.round(payableRoundingAmount * 100) / 100,\n      payableAmount: Math.round(payableAmount * 100) / 100,\n    },\n    taxTotal: {\n      taxAmount: Math.round(totalTaxAmount * 100) / 100,\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAa,iBAAiB,CAACA,SAAmC;AAChE,QACE,KAAK,+BAAkC,KAAK;AAE/C;;;;AAKD,MAAa,kBAAkB,CAACA,SAAmC;AACjE,QAAO,KAAK,uBAA0B,eAAe,KAAK;AAC3D;;;;AAKD,MAAa,6BAA6B,CAACA,SAAkC;AAC3E,KAAI,eAAe,KAAK,CACtB,QAAO,KAAK,mBAAoB,KAAK;UAC5B,gBAAgB,KAAK,CAC9B,QAAQ,KAAK,4BAA4B,KAAK,UAAY;AAE5D,QAAO;AACR;;;;AAKD,MAAM,eAAe,CAACC,QAA6C;AACjE,KAAI,sBAAsB,IAAK,QAAO,IAAI;AAC1C,KAAI,yBAAyB,IAAK,QAAO,IAAI;AAC7C,KAAI,wBAAwB,IAAK,QAAO,IAAI;AAC5C,KAAI,yBAAyB,IAAK,QAAO,IAAI;AAC7C,KAAI,mCAAmC,IACrC,QAAO,IAAI;AACb,KAAI,mCAAmC,IACrC,QAAO,IAAI;AAEb,QAAO,CAAE;AACV;;;;AAKD,SAAgB,eAAeC,KAAuB;AACpD,KAAI,QAAQ,eAAe,QAAQ,SACjC,QAAO;AAGT,KAAI,MAAM,QAAQ,IAAI,CACpB,QAAO,IAAI,IAAI,eAAe;CAGhC,MAAMC,YAAqC,CAAE;CAC7C,MAAM,OAAO,OAAO,KAAK,IAA+B,CAAC,MAAM;AAE/D,MAAK,MAAM,OAAO,KAChB,WAAU,OAAO,eAAgB,IAAgC,KAAK;AAGxE,QAAO;AACR;;;;;AAMD,MAAa,mBAAmB,CAACD,QAAyB;CACxD,MAAM,YAAY,eAAe,IAAI;AAErC,QAAO,KAAK,UAAU,WAAW,MAAM,EAAE;AAC1C;;;;;;;;;;;AAYD,MAAa,6BAA6B,CACxCE,YACsB;CACtB,MAAM,YAAY,aAAa,QAAQ;CAIvC,MAAM,SAAS,CAACC,MAAc,KAAK,MAAM,IAAI,IAAI,GAAG;CACpD,MAAMC,mBAA6B,CAAE;CACrC,MAAM,gCAAgB,IAAI;AAC1B,MAAK,MAAM,QAAQ,WAAW;EAC5B,MAAM,WAAW,KAAK;AACtB,OAAK,cAAc,IAAI,SAAS,EAAE;AAChC,iBAAc,IAAI,UAAU;IAAE,SAAS;IAAG,KAAK;GAAG,EAAC;AACnD,oBAAiB,KAAK,SAAS;EAChC;EACD,MAAM,SAAS,cAAc,IAAI,SAAS;AAC1C,SAAO,WAAW,KAAK,6BAA6B;AACpD,SAAO,OAAO,KAAK,aAAa;CACjC;AAED,KAAI,iBAAiB,WAAW,GAAG;AACjC,mBAAiB,KAAK,UAAU,IAAI,WAAW,KAAK;AACpD,gBAAc,IAAI,iBAAiB,IAAK;GACtC,SAAS,QAAQ,mBAAmB;GACpC,KAAK,QAAQ,SAAS;EACvB,EAAC;CACH;AAED,QAAO;EAEL,IAAI,CAAC,EAAE,GAAG,QAAQ,qBAAsB,CAAC;EACzC,WAAW,CAAC,EAAE,GAAG,QAAQ,aAAc,CAAC;EACxC,WAAW,CAAC,EAAE,GAAG,QAAQ,aAAc,CAAC;EACxC,iBAAiB,CACf;GACE,GAAG,QAAQ;GACX,eAAe,QAAQ,mBAAmB;EAC3C,CACF;EACD,sBAAsB,CAAC,EAAE,GAAG,QAAQ,oBAAqB,CAAC;EAG1D,GAAI,qCAAqC,WACzC,gCAAgC,WAChC,QAAQ,kCACJ,EACE,kBAAkB,CAChB,EACE,0BAA0B,CACxB;GACE,MAAM,CACJ,EACE,GAAG,QAAQ,gCACZ,CACF;GACD,IAAI,CACF,EACE,GAAG,QAAQ,2BACZ,CACF;EACF,CACF,EACF,CACF,EACF,IACD,CAAE;EAGN,yBAAyB,CACvB,EACE,OAAO,CACL;GAEE,4BAA4B,CAC1B;IACE,GAAG,QAAQ,SAAS;IACpB,MAAM,QAAQ,SAAS;GACxB,CACF;GAGD,qBAAqB,CACnB,EACE,IAAI,CACF;IACE,GAAG,QAAQ,SAAS;IACpB,UAAU;GACX,CACF,EACF,GACD,EACE,IAAI,CACF;IACE,GAAG,oCAAc,QAAQ,SAAS,mBAAmB;IACrD,UAAU,QAAQ,SAAS,oBAAoB;GAChD,CACF,EACF,CACF;GAGD,eAAe,CACb;IACE,UAAU,CAAC,EAAE,GAAG,QAAQ,SAAS,QAAQ,SAAU,CAAC;IACpD,sBAAsB,CAAC,EAAE,GAAG,QAAQ,SAAS,QAAQ,MAAO,CAAC;IAC7D,aAAa,CACX,EACE,MAAM,CAAC,EAAE,GAAG,QAAQ,SAAS,QAAQ,aAAc,CAAC,EACrD,CACF;IACD,SAAS,CACP,EACE,oBAAoB,CAClB;KACE,GAAG,QAAQ,SAAS,QAAQ,WAAW;KACvC,QAAQ;KACR,cAAc;IACf,CACF,EACF,CACF;GACF,CACF;GAGD,kBAAkB,CAChB,EACE,kBAAkB,CAAC,EAAE,GAAG,QAAQ,SAAS,KAAM,CAAC,EACjD,CACF;GAGD,SAAS,CACP,EACE,WAAW,CAAC,EAAE,GAAG,QAAQ,SAAS,iBAAiB,GAAI,CAAC,EACzD,CACF;EACF,CACF,EACF,CACF;EAGD,yBAAyB,CACvB,EACE,OAAO,CACL;GAEE,qBAAqB;IACnB,EACE,IAAI,CACF;KACE,GAAG,QAAQ,MAAM;KACjB,UAAU;IACX,CACF,EACF;IACD,EACE,IAAI,CACF;KACE,GAAG,oCAAc,QAAQ,MAAM,mBAAmB;KAClD,UAAU,QAAQ,MAAM,oBAAoB;IAC7C,CACF,EACF;IACD,EACE,IAAI,CACF;KACE,GAAG,QAAQ,MAAM,yBAAyB;KAC1C,UAAU;IACX,CACF,EACF;GACF;GAGD,eAAe,CACb;IACE,UAAU,CAAC,EAAE,GAAG,QAAQ,MAAM,QAAQ,SAAU,CAAC;IACjD,sBAAsB,CAAC,EAAE,GAAG,QAAQ,MAAM,QAAQ,MAAO,CAAC;IAC1D,aAAa,CACX,EACE,MAAM,CAAC,EAAE,GAAG,QAAQ,MAAM,QAAQ,aAAc,CAAC,EAClD,CACF;IACD,SAAS,CACP,EACE,oBAAoB,CAClB;KACE,GAAG,QAAQ,MAAM,QAAQ,WAAW;KACpC,QAAQ;KACR,cAAc;IACf,CACF,EACF,CACF;GACF,CACF;GAGD,kBAAkB,CAChB,EACE,kBAAkB,CAAC,EAAE,GAAG,QAAQ,MAAM,KAAM,CAAC,EAC9C,CACF;GAGD,SAAS,CACP,EACE,WAAW,CAAC,EAAE,GAAG,QAAQ,MAAM,iBAAiB,GAAI,CAAC,EACtD,CACF;EACF,CACF,EACF,CACF;EAGD,UAAU,CACR;GACE,WAAW,CACT;IACE,GAAG,QAAQ,SAAS;IACpB,YAAY,QAAQ;GACrB,CACF;GAED,aAAa,iBAAiB,IAAI,cAAY;IAC5C,MAAM,EAAE,SAAS,KAAK,GAAG,cAAc,IAAI,SAAS;AACpD,WAAO;KACL,eAAe,CACb;MACE,GAAG,OAAO,QAAQ;MAClB,YAAY,QAAQ;KACrB,CACF;KACD,WAAW,CACT;MACE,GAAG,OAAO,IAAI;MACd,YAAY,QAAQ;KACrB,CACF;KACD,aAAa,CACX;MACE,IAAI,CAAC,EAAE,GAAG,SAAU,CAAC;MACrB,WAAW,CACT,EACE,IAAI,CACF;OACE,GAAG;OACH,gBAAgB;OAChB,UAAU;MACX,CACF,EACF,CACF;KACF,CACF;IACF;GACF,EAAC;EACH,CACF;EAGD,oBAAoB,CAClB;GACE,qBAAqB,CACnB;IACE,GAAG,QAAQ,mBAAmB;IAC9B,YAAY,QAAQ;GACrB,CACF;GACD,oBAAoB,CAClB;IACE,GAAG,QAAQ,mBAAmB;IAC9B,YAAY,QAAQ;GACrB,CACF;GACD,oBAAoB,CAClB;IACE,GAAG,QAAQ,mBAAmB;IAC9B,YAAY,QAAQ;GACrB,CACF;GACD,uBAAuB,CACrB;IACE,GAAG,QAAQ,mBAAmB;IAC9B,YAAY,QAAQ;GACrB,CACF;GACD,eAAe,CACb;IACE,GAAG,QAAQ,mBAAmB;IAC9B,YAAY,QAAQ;GACrB,CACF;EACF,CACF;EAGD,aAAa,UAAU,IAAI,CAAC,MAAM,WAAW;GAC3C,IAAI,CAAC,EAAE,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAE,CAAC;GAGnC,GAAI,KAAK,uBAA0B,KAAK,yBACpC,EACE,kBAAkB,CAChB;IACE,GAAG,KAAK,YAAY;IACpB,GAAI,KAAK,yBACL,EAAE,UAAU,KAAK,YAAa,IAC9B,CAAE;GACP,CACF,EACF,IACD,CAAE;GAGN,MAAM,CACJ;IACE,yBAAyB,CACvB,EACE,wBAAwB,CACtB;KACE,GAAG,KAAK;KACR,QAAQ;IACT,CACF,EACF,CACF;IACD,aAAa,CAAC,EAAE,GAAG,KAAK,gBAAiB,CAAC;GAC3C,CACF;GAED,oBAAoB,CAClB,EACE,QAAQ,CACN;IACE,IACG,KAAK,6BAA6B,MAClC,KAAK,kBAAkB;IAC1B,YAAY,QAAQ;GACrB,CACF,EACF,CACF;GAED,qBAAqB,CACnB;IACE,GAAG,KAAK;IACR,YAAY,QAAQ;GACrB,CACF;GAGD,OAAO,CACL,EACE,aAAa,CACX;IACE,GAAG,KAAK;IACR,YAAY,QAAQ;GACrB,CACF,EACF,CACF;GAGD,GAAI,KAAK,6BAAgC,KAAK,0BAC1C,EACE,iBAAiB,CACf;IACE,iBAAiB,CAAC,EAAE,GAAG,MAAO,CAAC;IAC/B,QAAQ,CACN;KACE,GAAG,KAAK,kBAAkB;KAC1B,YAAY,QAAQ;IACrB,CACF;IACD,GAAI,KAAK,0BACL;KACE,yBAAyB,CAAC,EAAE,GAAG,KAAK,aAAc,CAAC;KACnD,YAAY,CACV;MACE,IACG,KAAK,6BAA6B,MAClC,KAAK,kBAAkB;MAC1B,YAAY,QAAQ;KACrB,CACF;IACF,IACD,CAAE;GACP,CACF,EACF,IACD,CAAE;GAGN,UAAU,CACR;IACE,WAAW,CACT;KACE,GAAG,KAAK;KACR,YAAY,QAAQ;IACrB,CACF;IACD,aAAa,CACX;KACE,eAAe,CACb;MACE,GAAG,KAAK;MACR,YAAY,QAAQ;KACrB,CACF;KACD,WAAW,CACT;MACE,GAAG,KAAK;MACR,YAAY,QAAQ;KACrB,CACF;KAED,GAAI,KAAK,+BACT,KAAK,6BACD;MAEE,eAAe,CACb;OACE,GAAG,KAAK;OACR,YAAY,QAAQ;MACrB,CACF;MACD,iBAAiB,CACf;OACE,GAAG,KAAK;OACR,UAAU,KAAK,uBAAuB;MACvC,CACF;KACF,IACD,KAAK,qBACH,EAEE,SAAS,CAAC,EAAE,GAAG,KAAK,QAAS,CAAC,EAC/B,IACD,CAAE;KACR,aAAa,CACX;MACE,IAAI,CAAC,EAAE,GAAG,KAAK,QAAS,CAAC;MACzB,WAAW,CACT,EACE,IAAI,CACF;OACE,GAAG;OACH,gBAAgB;OAChB,UAAU;MACX,CACF,EACF,CACF;KACF,CACF;IACF,CACF;GACF,CACF;EACF,GAAE;EAGH,iBAAiB,QAAQ,uBACrB,CACE;GACE,oBAAoB,CAClB,EACE,GAAG,QAAQ,oBACZ,CACF;GACD,oBAAoB,CAClB,EACE,GAAG,MACJ,CACF;GACD,iBAAiB,CACf,EACE,GAAG,QAAQ,qBACZ,CACF;EACF,CACF;CAEN;AACF;;;;AAKD,MAAa,2BAA2B,CACtCC,aACgB;AAChB,QAAO;EACL,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,SAAS,SAAS,IAAI,2BAA2B;CAClD;AACF;;;;;;;;AASD,MAAa,8BAA8B,CACzCA,aACW;CAEX,MAAM,gBAAgB,yBAAyB,SAAS;CAGxD,MAAM,uBAAuB,KAAK,MAAM,KAAK,UAAU,cAAc,CAAC;AACtE,KACE,qBAAqB,WACrB,MAAM,QAAQ,qBAAqB,QAAQ,CAE3C,sBAAqB,QAAQ,QAAQ,CAACC,YAA+B;AACnE,SAAO,QAAQ;AACf,SAAO,QAAQ;CAChB,EAAC;CAIJ,MAAM,aAAa,KAAK,UAAU,qBAAqB;CAIvD,MAAM,eAAe,WAAW,QAC9B,4BACA,CAAC,OAAO,iBAAiB;AACvB,MAAI,aACF,QAAO;MAEP,QAAO;CAEV,EACF;AAED,QAAO;AACR;;;;;;AAOD,MAAa,0BAA0B,CACrCD,aACW;CAEX,MAAM,iBAAiB,4BAA4B,SAAS;CAG5D,MAAM,OAAO,eAAO,WAAW,SAAS;AACxC,MAAK,OAAO,gBAAgB,OAAO;AAGnC,QAAO,KAAK,OAAO,SAAS;AAC7B;;;;;;AAOD,MAAa,6BAA6B,CAACE,mBAAmC;AAC5E,KAAI;EAEF,MAAM,OAAO,IAAIC,uBAAgB;EAGjC,MAAM,qBAAqB,KAAK;EAGhC,MAAM,OAAO,eAAO,WAAW,SAAS;AACxC,OAAK,OAAO,mBAAmB;AAG/B,SAAO,KAAK,OAAO,SAAS;CAC7B,QAAO;EAEN,MAAM,qBAAqB,eACxB,QAAQ,gCAAgC,GAAG,CAC3C,QAAQ,8BAA8B,GAAG,CACzC,QAAQ,QAAQ,GAAG;EAGtB,MAAM,oBAAoB,OAAO,KAAK,oBAAoB,SAAS;EAGnE,MAAM,OAAO,eAAO,WAAW,SAAS;AACxC,OAAK,OAAO,kBAAkB;AAG9B,SAAO,KAAK,OAAO,SAAS;CAC7B;AACF;;;;;AAMD,MAAa,yBAAyB,CACpCD,mBAKG;AACH,KAAI;EACF,MAAM,OAAO,IAAIC,uBAAgB;EAGjC,MAAM,kBAAkB,KAAK;EAI7B,MAAM,wBAAwB,CAACC,QAAwB;AACrD,UAAO,IACJ,QAAQ,MAAM,QAAQ,CACtB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,SAAS,CACvB,QAAQ,MAAM,SAAS;EAC3B;EAID,MAAM,sBAAsB,CAACC,WAA2B;GAMtD,MAAM,QAAQ,OACX,MAAM,aAAa,CACnB,IAAI,UAAQ,KAAK,MAAM,CAAC,CACxB,OAAO,UAAQ,KAAK,SAAS,EAAE,CAC/B,SAAS;AACZ,UAAO,MAAM,KAAK,KAAK,CAAC,QAAQ,YAAY,IAAI;EACjD;EAGD,MAAM,qBAAqB,CAACC,cAA8B;GAExD,MAAM,UAAU,OAAO,OAAO,UAAU,CAAC,UAAU;AACnD,UAAO;EACR;EAID,MAAM,iBAAiB,KAAK;AAE5B,SAAO;GACL,YAAY,sBAAsB,oBAAoB,KAAK,OAAO,CAAC;GACnE,cAAc,mBAAmB,gBAAgB;GACjD,aAAa;EACd;CACF,SAAQC,OAAgB;AACvB,QAAM,IAAI,OACP,sCAAsC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;CAEjG;AACF;;;;;;AAOD,MAAa,yBAAyB,CACpCC,mBACAC,aACAC,YACAC,iBAC2B;AAC3B,QAAO,EACL,kBAAkB,CAChB;EACE,IAAI;EACJ,2BAA2B,CACzB;GACE,aAAa,CAAC,EAAE,GAAG,YAAa,CAAC;GACjC,oBAAoB,CAClB,EACE,MAAM,CACJ;IACE,YAAY,CACV;KACE,cAAc,CACZ;MACE,GAAG;MACH,WACE;KACH,CACF;KACD,aAAa,CAAC,EAAE,GAAG,kBAAmB,CAAC;IACxC,CACF;IACD,cAAc,CACZ;KACE,gBAAgB,CAAC,EAAE,GAAG,WAAY,CAAC;KACnC,kBAAkB,CAAC,EAAE,GAAG,aAAc,CAAC;IACxC,CACF;GACF,CACF,EACF,CACF;EACF,CACF;CACF,CACF,EACF;AACF;;;;;;AAOD,MAAa,kCAAkC,CAC7CC,kBACAC,mBAA4B,SACjB;CACX,IAAIC;AACJ,KAAI,iBACF,aAAY;EACV,QAAQ;EACR,kBAAkB,iBAAiB;CACpC;KAED,aAAY,iBAAiB;CAK/B,MAAM,yBAAyB,KAAK,UAAU,UAAU;CAGxD,MAAM,2BAA2B,uBAAuB,QACtD,4BACA,CAAC,OAAO,iBAAiB;AACvB,MAAI,aACF,QAAO;MAEP,QAAO;CAEV,EACF;CAED,MAAM,OAAO,eAAO,WAAW,SAAS;AACxC,MAAK,OAAO,0BAA0B,OAAO;AAC7C,QAAO,KAAK,OAAO,SAAS;AAC7B;;;;;AAMD,MAAa,0BAA0B,CACrCC,WACAC,aACAC,kBAC6D;CAE7D,MAAMC,aAA+B;EACnC,wBAAwB,CACtB;GACE,GAAG;GACH,WAAW;EACZ,CACF;EACD,iBAAiB,CACf;GACE,GAAG;GACH,WAAW;EACZ,CACF;EACD,WAAW,CACT;GACE,IAAI;GACJ,MAAM;GACN,KAAK;GACL,cAAc,CACZ;IACE,GAAG;IACH,WAAW;GACZ,CACF;GACD,aAAa,CAAC,EAAE,GAAG,UAAW,CAAC;EAChC,GACD;GACE,IAAI;GACJ,MAAM;GACN,KAAK;GACL,cAAc,CACZ;IACE,GAAG;IACH,WAAW;GACZ,CACF;GACD,aAAa,CAAC,EAAE,GAAG,YAAa,CAAC;EAClC,CACF;CACF;CAGD,MAAM,gBAAgB,KAAK,UAAU,WAAW;AAEhD,KAAI;EACF,MAAM,SAAS,eAAO,WAAW,aAAa;AAC9C,SAAO,OAAO,eAAe,OAAO;EACpC,MAAM,iBAAiB,OAAO,KAAK,eAAe,SAAS;AAG3D,SAAO;GAAE;GAAY;EAAgB;CACtC,SAAQ,OAAO;AACd,QAAM,IAAI,OACP,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;CAE1F;AACF;;;;;;AAOD,MAAa,qBAAqB,CAChCC,gBACAF,kBACW;CAEX,MAAM,SAAS,eAAO,WAAW,aAAa;AAC9C,QAAO,OAAO,gBAAgB,OAAO;AACrC,QAAO,OAAO,KAAK,eAAe,SAAS;AAC5C;;;;;AAMD,MAAa,2BAA2B,CACtCjB,UACAoB,uBACoB;AACpB,KAAI;EAGF,MAAM,YAAY,wBAAwB,SAAS;EAGnD,MAAM,iBAAiB,4BAA4B,SAAS;EAG5D,MAAM,eAAe,mBACnB,gBACA,mBAAmB,cACpB;EAID,MAAM,sBAAM,IAAI;EAChB,MAAM,cACJ,IAAI,aAAa,GACjB,MACA,OAAO,IAAI,UAAU,GAAG,EAAE,CAAC,SAAS,GAAG,IAAI,GAC3C,MACA,OAAO,IAAI,SAAS,CAAC,CAAC,SAAS,GAAG,IAAI,GACtC,MACA,OAAO,IAAI,UAAU,CAAC,CAAC,SAAS,GAAG,IAAI,GACvC,MACA,OAAO,IAAI,YAAY,CAAC,CAAC,SAAS,GAAG,IAAI,GACzC,MACA,OAAO,IAAI,YAAY,CAAC,CAAC,SAAS,GAAG,IAAI,GACzC;EAGF,MAAM,WAAW,uBAAuB,mBAAmB,eAAe;EAG1E,MAAM,oBAAoB,2BACxB,mBAAmB,eACpB;EAGD,MAAM,mBAAmB,uBACvB,mBACA,aACA,SAAS,YACT,SAAS,aACV;EAGD,MAAM,cAAc,gCAAgC,iBAAiB;EAGrE,MAAMF,aAA+B;GACnC,wBAAwB,CACtB;IACE,GAAG;IACH,WAAW;GACZ,CACF;GACD,iBAAiB,CACf;IACE,GAAG;IACH,WAAW;GACZ,CACF;GACD,WAAW,CACT;IACE,IAAI;IACJ,MAAM;IACN,KAAK;IACL,cAAc,CACZ;KACE,GAAG;KACH,WAAW;IACZ,CACF;IACD,aAAa,CAAC,EAAE,GAAG,UAAW,CAAC;GAChC,GACD;IACE,IAAI;IACJ,MAAM;IACN,KAAK;IACL,cAAc,CACZ;KACE,GAAG;KACH,WAAW;IACZ,CACF;IACD,aAAa,CAAC,EAAE,GAAG,YAAa,CAAC;GAClC,CACF;EACF;EAGD,MAAM,OAAO,IAAIf,uBAAgB,mBAAmB;EACpD,MAAM,cAAc,KAAK,IAAI,SAAS,SAAS;EAG/C,MAAM,iBAAiB,SAAS,IAAI,aAAW;GAC7C,MAAM,eAAe,2BAA2B,QAAQ;AAExD,UAAO;IACL,GAAG;IAGH,eAAe,CACb,EACE,cAAc,CACZ;KACE,cAAc,CACZ,EACE,GAAG,yDACJ,CACF;KACD,kBAAkB,CAChB,EACE,uBAAuB,CACrB,EACE,sBAAsB,CACpB;MACE,IAAI,CACF,EACE,GAAG,gDACJ,CACF;MACD,uBAAuB,CACrB,EACE,GAAG,sDACJ,CACF;MACD,WAAW,CACT;OACE,IAAI;OACJ,QAAQ,CACN,EACE,sBAAsB,CACpB;QACE,QAAQ;QACR,kBACE,iBAAiB;OACpB,CACF,EACF,CACF;OACD,SAAS,CACP,EACE,UAAU,CACR;QACE,iBAAiB,CAAC,EAAE,GAAG,YAAa,CAAC;QACrC,iBAAiB,CACf,EAAE,GAAG,SAAS,YAAa,CAC5B;QACD,kBAAkB,CAChB;SACE,gBAAgB,CACd,EACE,GAAG,SAAS,WACb,CACF;SACD,kBAAkB,CAChB,EACE,GAAG,SAAS,aACb,CACF;QACF,CACF;OACF,CACF,EACF,CACF;OACD,gBAAgB,CAAC,EAAE,GAAG,aAAc,CAAC;OACrC,YAAY,CAAC,UAAW;MACzB,CACF;KACF,CACF,EACF,CACF,EACF,CACF;IACF,CACF,EACF,CACF;IAGD,WAAW,CACT;KACE,IAAI,CACF,EACE,GAAG,sDACJ,CACF;KACD,iBAAiB,CACf,EACE,GAAG,yDACJ,CACF;IACF,CACF;GACF;EACF,EAAC;AAEF,SAAO;GACL,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,SAAS;EACV;CACF,SAAQ,OAAO;AACd,QAAM,IAAI,OACP,8BAA8B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;CAEzF;AACF;;;;AAKD,MAAa,8BAA8B,CAACkB,WAWrB;CACrB,MAAM,WAAW,OAAO,WACpB,OAAO,YAAY,IACjB,IACC,OAAO,YAAY,IACtB;CAEJ,MAAM,oBAAoB,OAAO,YAAY;CAC7C,MAAM,cACJ,OAAO,6BAAgC,OAAO;CAChD,MAAM,yBACJ,eAAe,OAAO,0BAClB,oBAAoB,OAAO,eAC3B;CACN,MAAM,iBACJ,eAAe,OAAO,4BAClB,OAAO,iBACP;CACN,MAAM,qBAAqB,KAAK,IAC9B,GACA,qBAAqB,cAAc,iBAAiB,GACrD;CACD,MAAM,YAAa,qBAAqB,OAAO,UAAW;AAE1D,QAAO;EACL,wBAAwB,OAAO;EAC/B,iBAAiB,OAAO;EACxB,WAAW,OAAO;EAClB,SAAS,OAAO;EAChB,SAAS,OAAO;EAChB,GAAI,OAAO,sBAAyB,EAAE,UAAU,OAAO,SAAU,IAAG,CAAE;EACtE,GAAI,OAAO,yBACP,EAAE,aAAa,OAAO,YAAa,IACnC,CAAE;EACN,GAAI,eAAe,4BAA+B,EAAE,eAAgB,IAAG,CAAE;EACzE,GAAI,eAAe,OAAO,0BACtB,EAAE,cAAc,OAAO,aAAc,IACrC,CAAE;EACN,WAAW,KAAK,MAAM,YAAY,IAAI,GAAG;EACzC,2BAA2B;EAC3B,oBAAoB,qBAAqB;CAC1C;AACF;;;;AAKD,MAAa,6BAA6B,CAACC,WAapB;CACrB,MAAM,WAAW,OAAO,YAAY;CAEpC,MAAM,oBAAoB,OAAO,YAAY;CAC7C,MAAM,cACJ,OAAO,6BAAgC,OAAO;CAChD,MAAM,yBACJ,eAAe,OAAO,0BAClB,oBAAoB,OAAO,eAC3B;CACN,MAAM,iBACJ,eAAe,OAAO,4BAClB,OAAO,iBACP;CACN,MAAM,qBAAqB,KAAK,IAC9B,GACA,qBAAqB,cAAc,iBAAiB,GACrD;CACD,MAAM,YAAY,OAAO,mBAAmB,OAAO;AAEnD,QAAO;EACL,wBAAwB,OAAO;EAC/B,iBAAiB,OAAO;EACxB,WAAW,OAAO;EAClB,SAAS,OAAO;EAChB,kBAAkB,OAAO;EACzB,iBAAiB,OAAO;EACxB,qBAAqB,OAAO;EAC5B,GAAI,OAAO,sBAAyB,EAAE,UAAU,OAAO,SAAU,IAAG,CAAE;EACtE,GAAI,OAAO,yBACP,EAAE,aAAa,OAAO,YAAa,IACnC,CAAE;EACN,GAAI,eAAe,4BAA+B,EAAE,eAAgB,IAAG,CAAE;EACzE,GAAI,eAAe,OAAO,0BACtB,EAAE,cAAc,OAAO,aAAc,IACrC,CAAE;EACN,WAAW,KAAK,MAAM,YAAY,IAAI,GAAG;EACzC,2BAA2B;EAC3B,oBAAoB,qBAAqB;CAC1C;AACF;;;;AAKD,MAAa,yBAAyB,CACpCC,WACAC,wBAAgC,MAW7B;CACH,MAAM,qBAAqB,UAAU,OACnC,CAAC,KAAK,SAAS,MAAM,KAAK,2BAC1B,EACD;CACD,MAAM,iBAAiB,UAAU,OAC/B,CAAC,KAAK,SAAS,MAAM,KAAK,WAC1B,EACD;CACD,MAAM,qBAAqB,qBAAqB;CAChD,MAAM,gBAAgB,qBAAqB;AAE3C,QAAO;EACL,oBAAoB;GAClB,oBAAoB,KAAK,MAAM,qBAAqB,IAAI,GAAG;GAC3D,oBAAoB,KAAK,MAAM,qBAAqB,IAAI,GAAG;GAC3D,uBAAuB,KAAK,MAAM,wBAAwB,IAAI,GAAG;GACjE,eAAe,KAAK,MAAM,gBAAgB,IAAI,GAAG;EAClD;EACD,UAAU,EACR,WAAW,KAAK,MAAM,iBAAiB,IAAI,GAAG,IAC/C;CACF;AACF"}

package/dist/{document-Bb5WkhRe.js → document-BC52NCdW.js}

@@ -70,6 +70,29 @@ const canonicalizeJSON = (obj) => {
 */
 const generateCleanInvoiceObject = (invoice) => {
 	const lineItems = getLineItems(invoice);
+	const round2 = (n) => Math.round(n * 100) / 100;
+	const taxCategoryOrder = [];
+	const taxByCategory = /* @__PURE__ */ new Map();
+	for (const item of lineItems) {
+		const category = item.taxType;
+		if (!taxByCategory.has(category)) {
+			taxByCategory.set(category, {
+				taxable: 0,
+				tax: 0
+			});
+			taxCategoryOrder.push(category);
+		}
+		const bucket = taxByCategory.get(category);
+		bucket.taxable += item.totalTaxableAmountPerLine ?? 0;
+		bucket.tax += item.taxAmount ?? 0;
+	}
+	if (taxCategoryOrder.length === 0) {
+		taxCategoryOrder.push(lineItems[0]?.taxType || "01");
+		taxByCategory.set(taxCategoryOrder[0], {
+			taxable: invoice.legalMonetaryTotal.taxExclusiveAmount,
+			tax: invoice.taxTotal.taxAmount
+		});
+	}
 	return {
 		ID: [{ _: invoice.eInvoiceCodeOrNumber }],
 		IssueDate: [{ _: invoice.eInvoiceDate }],
@@ -141,24 +164,27 @@ const generateCleanInvoiceObject = (invoice) => {
 				_: invoice.taxTotal.taxAmount,
 				currencyID: invoice.invoiceCurrencyCode
 			}],
-			TaxSubtotal: [{
-				TaxableAmount: [{
-					_: invoice.legalMonetaryTotal.taxExclusiveAmount,
-					currencyID: invoice.invoiceCurrencyCode
-				}],
-				TaxAmount: [{
-					_: invoice.taxTotal.taxAmount,
-					currencyID: invoice.invoiceCurrencyCode
-				}],
-				TaxCategory: [{
-					ID: [{ _: lineItems[0]?.taxType || "01" }],
-					TaxScheme: [{ ID: [{
-						_: "OTH",
-						schemeAgencyID: "6",
-						schemeID: "UN/ECE 5153"
-					}] }]
-				}]
-			}]
+			TaxSubtotal: taxCategoryOrder.map((category) => {
+				const { taxable, tax } = taxByCategory.get(category);
+				return {
+					TaxableAmount: [{
+						_: round2(taxable),
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxAmount: [{
+						_: round2(tax),
+						currencyID: invoice.invoiceCurrencyCode
+					}],
+					TaxCategory: [{
+						ID: [{ _: category }],
+						TaxScheme: [{ ID: [{
+							_: "OTH",
+							schemeAgencyID: "6",
+							schemeID: "UN/ECE 5153"
+						}] }]
+					}]
+				};
+			})
 		}],
 		LegalMonetaryTotal: [{
 			LineExtensionAmount: [{
@@ -623,4 +649,5 @@ const calculateInvoiceTotals = (lineItems, payableRoundingAmount = 0) => {
 };
 
 //#endregion
-export { calculateCertificateDigest, calculateDocumentDigest, calculateExpectedTaxAmount, calculateInvoiceTotals, calculateSignedPropertiesDigest, canonicalizeJSON, createFixedRateTaxLineItem, createPercentageTaxLineItem, createSignedInfoAndSign, createSignedProperties, extractCertificateInfo, generateCleanInvoiceObject, generateCleanUBLDocument, generateCompleteDocument, isFixedRateTax, isPercentageTax, signDocumentString, sortObjectKeys, transformDocumentForHashing };
+export { calculateCertificateDigest, calculateDocumentDigest, calculateExpectedTaxAmount, calculateInvoiceTotals, calculateSignedPropertiesDigest, canonicalizeJSON, createFixedRateTaxLineItem, createPercentageTaxLineItem, createSignedInfoAndSign, createSignedProperties, extractCertificateInfo, generateCleanInvoiceObject, generateCleanUBLDocument, generateCompleteDocument, isFixedRateTax, isPercentageTax, signDocumentString, sortObjectKeys, transformDocumentForHashing };
+//# sourceMappingURL=document-BC52NCdW.js.map