@ripwords/myinvois-client 0.4.0 → 0.4.1

package/dist/apiQueue-B6Q644Bz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiQueue-B6Q644Bz.js","names":["queues: Record<string, Queue>","LIMITS: Record<ApiCategory, { max: number; perMs: number }>","timestamps: number[]","windowMs: number","now: number","max: number","clientId: string","category: ApiCategory","task: Task<T>","now","key: string","debug: boolean","category?: ApiCategory","path: string","method: string"],"sources":["../src/utils/apiQueue.ts"],"sourcesContent":["// A very small utility that provides per-endpoint request queuing with rate-limits.\n// The goal is to make sure that we never exceed the vendor-defined limits while also ensuring\n// that every request is eventually executed.\n//\n// NOTE: This is intentionally minimal – no external dependencies are introduced.\n// If you need more advanced features (persistence, jitter, etc.) consider a library such as `bottleneck`.\n\n/*\nRate-limit specification (per 60-second window)\n----------------------------------------------\nLogin as Taxpayer System         : 12\nLogin as Intermediary System     : 12\nSubmit Documents                 : 100\nGet Submission                   : 300\nCancel Document                  : 12\nReject Document                  : 12\nGet Document                     : 60\nGet Document Details             : 125\nGet Recent Documents             : 12\nSearch Documents                 : 12\nSearch Taxpayer's TIN            : 60\nTaxpayer's QR Code               : 60\n*/\n\nexport type ApiCategory =\n  | 'loginTaxpayer'\n  | 'loginIntermediary'\n  | 'submitDocuments'\n  | 'getSubmission'\n  | 'cancelDocument'\n  | 'rejectDocument'\n  | 'getDocument'\n  | 'getDocumentDetails'\n  | 'getRecentDocuments'\n  | 'searchDocuments'\n  | 'searchTin'\n  | 'taxpayerQr'\n  | 'default'\n\ntype Task<T> = () => Promise<T>\n\ninterface Queue {\n  running: number\n  queue: Array<{ run: () => void; addedAt: number }>\n  requestTimestamps: number[] // Track all request timestamps in the sliding window\n  nextTimer: NodeJS.Timeout | null // Track scheduled timer to avoid pile-up\n}\n\nconst queues: Record<string, Queue> = {}\n\n// Rate limits: max requests per time window (in ms)\nconst LIMITS: Record<ApiCategory, { max: number; perMs: number }> = {\n  loginTaxpayer: { max: 12, perMs: 60000 }, // 12 req/60s\n  loginIntermediary: { max: 12, perMs: 60000 }, // 12 req/60s\n  submitDocuments: { max: 100, perMs: 60000 }, // 100 req/60s\n  getSubmission: { max: 300, perMs: 60000 }, // 300 req/60s\n  cancelDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  rejectDocument: { max: 12, perMs: 60000 }, // 12 req/60s\n  getDocument: { max: 60, perMs: 60000 }, // 60 req/60s\n  getDocumentDetails: { max: 125, perMs: 60000 }, // 125 req/60s\n  getRecentDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchDocuments: { max: 12, perMs: 60000 }, // 12 req/60s\n  searchTin: { max: 60, perMs: 60000 }, // 60 req/60s\n  taxpayerQr: { max: 60, perMs: 60000 }, // 60 req/60s\n  default: { max: 12, perMs: 60000 }, // 12 req/60s (minimum limit)\n}\n\n/**\n * Clean up old timestamps outside the sliding window\n */\nfunction cleanupTimestamps(\n  timestamps: number[],\n  windowMs: number,\n  now: number,\n): number[] {\n  return timestamps.filter(ts => now - ts < windowMs)\n}\n\n/**\n * Calculate when we can make the next request without exceeding the rate limit\n */\nfunction getNextAvailableTime(\n  timestamps: number[],\n  max: number,\n  windowMs: number,\n  now: number,\n): number {\n  if (timestamps.length < max) {\n    return now // Can execute immediately\n  }\n\n  // We're at the limit. Find when the oldest request will expire\n  const oldestTimestamp = timestamps[0]\n  if (!oldestTimestamp) {\n    return now // Shouldn't happen, but fallback to now\n  }\n  return oldestTimestamp + windowMs\n}\n\n/**\n * Public helper to schedule a request according to the category's limits.\n * Rate limits are enforced per clientId, so multiple instances with the same\n * clientId will share rate limiters, while different clientIds get separate limiters.\n *\n * This implementation uses a sliding window to track all requests within the time window.\n */\nexport function queueRequest<T>(\n  clientId: string,\n  category: ApiCategory,\n  task: Task<T>,\n  debug = false,\n): Promise<T> {\n  const key = `${clientId}:${category}`\n  if (!queues[key]) {\n    queues[key] = {\n      running: 0,\n      queue: [],\n      requestTimestamps: [],\n      nextTimer: null,\n    }\n  }\n\n  const queue = queues[key]!\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n\n  return new Promise<T>((resolve, reject) => {\n    const run = () => {\n      const now = Date.now()\n\n      // Clean up old timestamps before checking\n      queue.requestTimestamps = cleanupTimestamps(\n        queue.requestTimestamps,\n        perMs,\n        now,\n      )\n\n      // Check if we can execute now\n      if (queue.requestTimestamps.length >= max) {\n        // We've hit the rate limit, need to wait\n        const nextAvailable = getNextAvailableTime(\n          queue.requestTimestamps,\n          max,\n          perMs,\n          now,\n        )\n        const waitTime = nextAvailable - now\n\n        if (debug) {\n          console.log(\n            `[apiQueue] 🚫 Rate limit reached (${queue.requestTimestamps.length}/${max} in last ${perMs}ms). Queuing request. Need to wait ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length + 1}`,\n          )\n        }\n\n        // Re-queue this request to try again later\n        queue.queue.push({ run, addedAt: now })\n        // Don't call processQueue here - let the scheduled timer handle it\n        // to avoid potential requeue loops\n        return\n      }\n\n      // Record this request timestamp\n      queue.requestTimestamps.push(now)\n      queue.running++\n\n      if (debug) {\n        console.log(\n          `[apiQueue] ▶️  Executing request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n        )\n      }\n\n      task()\n        .then(resolve)\n        .catch(reject)\n        .finally(() => {\n          queue.running--\n          if (debug) {\n            console.log(\n              `[apiQueue] ✅ Request completed (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Running: ${queue.running}. Queue size: ${queue.queue.length}`,\n            )\n          }\n          processQueue(key, debug, category)\n        })\n    }\n\n    // Add to queue or run immediately\n    const now = Date.now()\n    queue.requestTimestamps = cleanupTimestamps(\n      queue.requestTimestamps,\n      perMs,\n      now,\n    )\n\n    if (queue.queue.length > 0 || queue.requestTimestamps.length >= max) {\n      // Either there's already a queue, or we're at the rate limit\n      queue.queue.push({ run, addedAt: now })\n      if (debug) {\n        console.log(\n          `[apiQueue] ⏳ Queued request (${category}). Requests in window: ${queue.requestTimestamps.length}/${max}. Queue size: ${queue.queue.length}`,\n        )\n      }\n      processQueue(key, debug, category)\n    } else {\n      // Can run immediately\n      run()\n    }\n  })\n}\n\nfunction processQueue(key: string, debug: boolean, category: ApiCategory) {\n  const queue = queues[key]\n  if (!queue || queue.queue.length === 0) return\n\n  const { max, perMs } = LIMITS[category] ?? LIMITS.default\n  const now = Date.now()\n\n  // Clean up old timestamps\n  queue.requestTimestamps = cleanupTimestamps(\n    queue.requestTimestamps,\n    perMs,\n    now,\n  )\n\n  // Check if we can process the next request\n  if (queue.requestTimestamps.length < max) {\n    // We have capacity, process immediately\n    const next = queue.queue.shift()\n    if (next) {\n      if (debug) {\n        const waitTime = Date.now() - next.addedAt\n        console.log(\n          `[apiQueue] 🚀 Processing queued request (${category}). Waited: ${waitTime.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n        )\n      }\n      next.run()\n    }\n    // After one runs, immediately try again (in case there's more space)\n    if (queue.queue.length > 0) {\n      processQueue(key, debug, category)\n    }\n  } else {\n    // We're at capacity, schedule for when the oldest request expires\n    const nextAvailable = getNextAvailableTime(\n      queue.requestTimestamps,\n      max,\n      perMs,\n      now,\n    )\n    const delay = Math.max(0, nextAvailable - now + 50) // +50ms buffer for timer precision\n\n    if (debug) {\n      console.log(\n        `[apiQueue] ⏸️  Delaying queue processing (${category}). Will retry in ${delay.toFixed(0)}ms. Queue size: ${queue.queue.length}`,\n      )\n    }\n\n    // Only schedule a timer if one isn't already scheduled\n    // This prevents timer pile-up during bursts\n    if (!queue.nextTimer) {\n      queue.nextTimer = setTimeout(() => {\n        queue.nextTimer = null\n        processQueue(key, debug, category)\n      }, delay)\n    }\n  }\n}\n\n/**\n * Cleanup function to clear all queues and timers for a specific client.\n * Useful for testing or cleanup on application shutdown.\n */\nexport function clearQueue(clientId: string, category?: ApiCategory): void {\n  if (category) {\n    const key = `${clientId}:${category}`\n    const queue = queues[key]\n    if (queue) {\n      if (queue.nextTimer) {\n        clearTimeout(queue.nextTimer)\n        queue.nextTimer = null\n      }\n      queue.queue = []\n      queue.requestTimestamps = []\n      queue.running = 0\n    }\n  } else {\n    // Clear all queues for this client\n    Object.keys(queues).forEach(key => {\n      if (key.startsWith(`${clientId}:`)) {\n        const queue = queues[key]\n        if (queue?.nextTimer) {\n          clearTimeout(queue.nextTimer)\n          queue.nextTimer = null\n        }\n        delete queues[key]\n      }\n    })\n  }\n}\n\n/**\n * Very naive path-based category detection. If no matcher fits, the `default` category\n * (effectively unlimited) is returned. Adjust these heuristics as your API surface evolves.\n */\nexport function categorizeRequest(\n  path: string,\n  method: string = 'GET',\n): ApiCategory {\n  const cleanPath = path.toLowerCase()\n  const isPost = method?.toUpperCase() === 'POST'\n\n  if (cleanPath.includes('/documentsubmissions')) {\n    return isPost ? 'submitDocuments' : 'getSubmission'\n  }\n\n  // -----------------------------\n  // v1.0 API endpoint matchers\n  // -----------------------------\n\n  // Get Recent Documents - /api/v1.0/documents/recent\n  if (cleanPath.includes('/documents/recent')) {\n    return 'getRecentDocuments'\n  }\n\n  // Search Documents - /api/v1.0/documents/search\n  if (cleanPath.includes('/documents/search')) {\n    return 'searchDocuments'\n  }\n\n  // Document state actions (cancel/reject) - PUT /api/v1.0/documents/state/{uuid}/state\n  // Both cancel and reject use the same endpoint, differentiated only by request body\n  if (cleanPath.includes('/documents/state/') && cleanPath.endsWith('/state')) {\n    // Both cancelDocument and rejectDocument share the same rate limit (12 RPM)\n    // Use cancelDocument category for both since they share the same bucket\n    return 'cancelDocument'\n  }\n\n  // Document raw content - /api/v1.0/documents/{uuid}/raw\n  if (/\\/documents\\/[^/]+\\/raw$/.test(cleanPath)) {\n    return 'getDocument'\n  }\n\n  // Document details - /api/v1.0/documents/{uuid}/details\n  if (/\\/documents\\/[^/]+\\/details$/.test(cleanPath)) {\n    return 'getDocumentDetails'\n  }\n\n  // Taxpayer TIN search & validation share same limit bucket\n  if (cleanPath.includes('/taxpayer/search/tin')) return 'searchTin'\n  if (cleanPath.includes('/taxpayer/validate/')) return 'searchTin'\n\n  // Taxpayer QR code info\n  if (cleanPath.includes('/taxpayer/qrcode')) return 'taxpayerQr'\n\n  // Legacy matchers (kept for backward compatibility)\n  if (cleanPath.includes('/searchtin')) return 'searchTin'\n  if (cleanPath.includes('/qrcode')) return 'taxpayerQr'\n  if (cleanPath.includes('/connect/token')) {\n    return 'loginTaxpayer'\n  }\n\n  return 'default'\n}\n"],"mappings":";AAgDA,MAAMA,SAAgC,CAAE;AAGxC,MAAMC,SAA8D;CAClE,eAAe;EAAE,KAAK;EAAI,OAAO;CAAO;CACxC,mBAAmB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC5C,iBAAiB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC3C,eAAe;EAAE,KAAK;EAAK,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,gBAAgB;EAAE,KAAK;EAAI,OAAO;CAAO;CACzC,aAAa;EAAE,KAAK;EAAI,OAAO;CAAO;CACtC,oBAAoB;EAAE,KAAK;EAAK,OAAO;CAAO;CAC9C,oBAAoB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC7C,iBAAiB;EAAE,KAAK;EAAI,OAAO;CAAO;CAC1C,WAAW;EAAE,KAAK;EAAI,OAAO;CAAO;CACpC,YAAY;EAAE,KAAK;EAAI,OAAO;CAAO;CACrC,SAAS;EAAE,KAAK;EAAI,OAAO;CAAO;AACnC;;;;AAKD,SAAS,kBACPC,YACAC,UACAC,KACU;AACV,QAAO,WAAW,OAAO,QAAM,MAAM,KAAK,SAAS;AACpD;;;;AAKD,SAAS,qBACPF,YACAG,KACAF,UACAC,KACQ;AACR,KAAI,WAAW,SAAS,IACtB,QAAO;CAIT,MAAM,kBAAkB,WAAW;AACnC,MAAK,gBACH,QAAO;AAET,QAAO,kBAAkB;AAC1B;;;;;;;;AASD,SAAgB,aACdE,UACAC,UACAC,MACA,QAAQ,OACI;CACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;AACpC,MAAK,OAAO,KACV,QAAO,OAAO;EACZ,SAAS;EACT,OAAO,CAAE;EACT,mBAAmB,CAAE;EACrB,WAAW;CACZ;CAGH,MAAM,QAAQ,OAAO;CACrB,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;AAElD,QAAO,IAAI,QAAW,CAAC,SAAS,WAAW;EACzC,MAAM,MAAM,MAAM;GAChB,MAAMC,QAAM,KAAK,KAAK;AAGtB,SAAM,oBAAoB,kBACxB,MAAM,mBACN,OACAA,MACD;AAGD,OAAI,MAAM,kBAAkB,UAAU,KAAK;IAEzC,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACAA,MACD;IACD,MAAM,WAAW,gBAAgBA;AAEjC,QAAI,MACF,SAAQ,KACL,oCAAoC,MAAM,kBAAkB,OAAO,GAAG,IAAI,WAAW,MAAM,qCAAqC,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,SAAS,EAAE,EAC/L;AAIH,UAAM,MAAM,KAAK;KAAE;KAAK,SAASA;IAAK,EAAC;AAGvC;GACD;AAGD,SAAM,kBAAkB,KAAKA,MAAI;AACjC,SAAM;AAEN,OAAI,MACF,SAAQ,KACL,oCAAoC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC5K;AAGH,SAAM,CACH,KAAK,QAAQ,CACb,MAAM,OAAO,CACb,QAAQ,MAAM;AACb,UAAM;AACN,QAAI,MACF,SAAQ,KACL,kCAAkC,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,aAAa,MAAM,QAAQ,gBAAgB,MAAM,MAAM,OAAO,EAC1K;AAEH,iBAAa,KAAK,OAAO,SAAS;GACnC,EAAC;EACL;EAGD,MAAM,MAAM,KAAK,KAAK;AACtB,QAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAED,MAAI,MAAM,MAAM,SAAS,KAAK,MAAM,kBAAkB,UAAU,KAAK;AAEnE,SAAM,MAAM,KAAK;IAAE;IAAK,SAAS;GAAK,EAAC;AACvC,OAAI,MACF,SAAQ,KACL,+BAA+B,SAAS,yBAAyB,MAAM,kBAAkB,OAAO,GAAG,IAAI,gBAAgB,MAAM,MAAM,OAAO,EAC5I;AAEH,gBAAa,KAAK,OAAO,SAAS;EACnC,MAEC,MAAK;CAER;AACF;AAED,SAAS,aAAaC,KAAaC,OAAgBJ,UAAuB;CACxE,MAAM,QAAQ,OAAO;AACrB,MAAK,SAAS,MAAM,MAAM,WAAW,EAAG;CAExC,MAAM,EAAE,KAAK,OAAO,GAAG,OAAO,aAAa,OAAO;CAClD,MAAM,MAAM,KAAK,KAAK;AAGtB,OAAM,oBAAoB,kBACxB,MAAM,mBACN,OACA,IACD;AAGD,KAAI,MAAM,kBAAkB,SAAS,KAAK;EAExC,MAAM,OAAO,MAAM,MAAM,OAAO;AAChC,MAAI,MAAM;AACR,OAAI,OAAO;IACT,MAAM,WAAW,KAAK,KAAK,GAAG,KAAK;AACnC,YAAQ,KACL,2CAA2C,SAAS,aAAa,SAAS,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAC5H;GACF;AACD,QAAK,KAAK;EACX;AAED,MAAI,MAAM,MAAM,SAAS,EACvB,cAAa,KAAK,OAAO,SAAS;CAErC,OAAM;EAEL,MAAM,gBAAgB,qBACpB,MAAM,mBACN,KACA,OACA,IACD;EACD,MAAM,QAAQ,KAAK,IAAI,GAAG,gBAAgB,MAAM,GAAG;AAEnD,MAAI,MACF,SAAQ,KACL,4CAA4C,SAAS,mBAAmB,MAAM,QAAQ,EAAE,CAAC,kBAAkB,MAAM,MAAM,OAAO,EAChI;AAKH,OAAK,MAAM,UACT,OAAM,YAAY,WAAW,MAAM;AACjC,SAAM,YAAY;AAClB,gBAAa,KAAK,OAAO,SAAS;EACnC,GAAE,MAAM;CAEZ;AACF;;;;;AAMD,SAAgB,WAAWD,UAAkBM,UAA8B;AACzE,KAAI,UAAU;EACZ,MAAM,OAAO,EAAE,SAAS,GAAG,SAAS;EACpC,MAAM,QAAQ,OAAO;AACrB,MAAI,OAAO;AACT,OAAI,MAAM,WAAW;AACnB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,SAAM,QAAQ,CAAE;AAChB,SAAM,oBAAoB,CAAE;AAC5B,SAAM,UAAU;EACjB;CACF,MAEC,QAAO,KAAK,OAAO,CAAC,QAAQ,SAAO;AACjC,MAAI,IAAI,YAAY,EAAE,SAAS,GAAG,EAAE;GAClC,MAAM,QAAQ,OAAO;AACrB,OAAI,OAAO,WAAW;AACpB,iBAAa,MAAM,UAAU;AAC7B,UAAM,YAAY;GACnB;AACD,UAAO,OAAO;EACf;CACF,EAAC;AAEL;;;;;AAMD,SAAgB,kBACdC,MACAC,SAAiB,OACJ;CACb,MAAM,YAAY,KAAK,aAAa;CACpC,MAAM,SAAS,QAAQ,aAAa,KAAK;AAEzC,KAAI,UAAU,SAAS,uBAAuB,CAC5C,QAAO,SAAS,oBAAoB;AAQtC,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAIT,KAAI,UAAU,SAAS,oBAAoB,CACzC,QAAO;AAKT,KAAI,UAAU,SAAS,oBAAoB,IAAI,UAAU,SAAS,SAAS,CAGzE,QAAO;AAIT,KAAI,2BAA2B,KAAK,UAAU,CAC5C,QAAO;AAIT,KAAI,+BAA+B,KAAK,UAAU,CAChD,QAAO;AAIT,KAAI,UAAU,SAAS,uBAAuB,CAAE,QAAO;AACvD,KAAI,UAAU,SAAS,sBAAsB,CAAE,QAAO;AAGtD,KAAI,UAAU,SAAS,mBAAmB,CAAE,QAAO;AAGnD,KAAI,UAAU,SAAS,aAAa,CAAE,QAAO;AAC7C,KAAI,UAAU,SAAS,UAAU,CAAE,QAAO;AAC1C,KAAI,UAAU,SAAS,iBAAiB,CACtC,QAAO;AAGT,QAAO;AACR"}

package/dist/certificate-Cg6spxUs.js

@@ -0,0 +1,52 @@
+import crypto from "crypto";
+import * as forge from "node-forge";
+import fs from "fs";
+
+//#region src/utils/certificate.ts
+/**
+* Validates that certificate and private key form a valid pair
+*
+* @param certificatePem - Certificate in PEM format
+* @param privateKeyPem - Private key in PEM format
+* @returns Boolean indicating if key pair is valid
+*/
+const validateKeyPair = (certificatePem, privateKeyPem) => {
+	try {
+		const cert = new crypto.X509Certificate(certificatePem);
+		const publicKey = cert.publicKey;
+		const testData = "validation-test-data";
+		const signer = crypto.createSign("RSA-SHA256");
+		signer.update(testData);
+		const signature = signer.sign(privateKeyPem);
+		const verifier = crypto.createVerify("RSA-SHA256");
+		verifier.update(testData);
+		return verifier.verify(publicKey, signature);
+	} catch (error) {
+		console.error("Key pair validation failed:", error);
+		return false;
+	}
+};
+const getPemFromP12 = (p12Input, passphrase) => {
+	try {
+		const p12Buffer = Buffer.isBuffer(p12Input) ? p12Input : fs.readFileSync(p12Input);
+		const p12Der = forge.util.createBuffer(p12Buffer.toString("binary"));
+		const p12Asn1 = forge.asn1.fromDer(p12Der.getBytes());
+		const p12 = forge.pkcs12.pkcs12FromAsn1(p12Asn1, passphrase);
+		const certBags = p12.getBags({ bagType: forge.pki.oids.certBag })[forge.pki.oids.certBag];
+		if (!certBags || certBags.length === 0) throw new Error("No certificate found in PKCS#12 bundle");
+		const certificatePem = forge.pki.certificateToPem(certBags[0].cert);
+		const keyBags = p12.getBags({ bagType: forge.pki.oids.pkcs8ShroudedKeyBag })[forge.pki.oids.pkcs8ShroudedKeyBag];
+		if (!keyBags || keyBags.length === 0) throw new Error("No private key found in PKCS#12 bundle");
+		const privateKeyPem = forge.pki.privateKeyToPem(keyBags[0].key);
+		return {
+			certificatePem,
+			privateKeyPem
+		};
+	} catch (error) {
+		throw new Error(`Failed to extract PEM from PKCS#12 file: ${error}`);
+	}
+};
+
+//#endregion
+export { getPemFromP12, validateKeyPair };
+//# sourceMappingURL=certificate-Cg6spxUs.js.map

package/dist/certificate-Cg6spxUs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificate-Cg6spxUs.js","names":["certificatePem: string","privateKeyPem: string","p12Input: Buffer | string","passphrase: string","p12Buffer: Buffer"],"sources":["../src/utils/certificate.ts"],"sourcesContent":["import crypto from 'crypto'\nimport * as forge from 'node-forge'\nimport fs from 'fs'\n\n// Single source of truth for issuer name / serial number extraction. The signer\n// (utils/document) owns the canonical normalization (RDN order + XML escaping)\n// that MyInvois validates against (DS326), so re-export it here rather than\n// maintaining a second, divergent implementation.\nexport { extractCertificateInfo } from './document'\n\n/**\n * Validates that certificate and private key form a valid pair\n *\n * @param certificatePem - Certificate in PEM format\n * @param privateKeyPem - Private key in PEM format\n * @returns Boolean indicating if key pair is valid\n */\nexport const validateKeyPair = (\n  certificatePem: string,\n  privateKeyPem: string,\n): boolean => {\n  try {\n    const cert = new crypto.X509Certificate(certificatePem)\n    const publicKey = cert.publicKey\n\n    // Test signature/verification cycle\n    const testData = 'validation-test-data'\n    const signer = crypto.createSign('RSA-SHA256')\n    signer.update(testData)\n    const signature = signer.sign(privateKeyPem)\n\n    const verifier = crypto.createVerify('RSA-SHA256')\n    verifier.update(testData)\n    return verifier.verify(publicKey, signature)\n  } catch (error) {\n    console.error('Key pair validation failed:', error)\n    return false\n  }\n}\n\nexport const getPemFromP12 = (\n  p12Input: Buffer | string,\n  passphrase: string,\n): {\n  certificatePem: string\n  privateKeyPem: string\n} => {\n  try {\n    // Load binary DER contents of the p12 file\n    const p12Buffer: Buffer = Buffer.isBuffer(p12Input)\n      ? p12Input\n      : fs.readFileSync(p12Input)\n\n    // Convert DER -> ASN.1\n    const p12Der = forge.util.createBuffer(p12Buffer.toString('binary'))\n    const p12Asn1 = forge.asn1.fromDer(p12Der.getBytes())\n\n    // Parse the PKCS#12 using the provided passphrase\n    const p12 = forge.pkcs12.pkcs12FromAsn1(p12Asn1, passphrase)\n\n    // Extract the first certificate (assumes it is the signing cert)\n    const certBags = p12.getBags({ bagType: forge.pki.oids.certBag })[\n      forge.pki.oids.certBag\n    ]\n    if (!certBags || certBags.length === 0)\n      throw new Error('No certificate found in PKCS#12 bundle')\n    const certificatePem = forge.pki.certificateToPem(certBags[0].cert)\n\n    // Extract the first private key\n    const keyBags = p12.getBags({\n      bagType: forge.pki.oids.pkcs8ShroudedKeyBag,\n    })[forge.pki.oids.pkcs8ShroudedKeyBag]\n    if (!keyBags || keyBags.length === 0)\n      throw new Error('No private key found in PKCS#12 bundle')\n    const privateKeyPem = forge.pki.privateKeyToPem(keyBags[0].key)\n\n    return { certificatePem, privateKeyPem }\n  } catch (error) {\n    throw new Error(`Failed to extract PEM from PKCS#12 file: ${error}`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,kBAAkB,CAC7BA,gBACAC,kBACY;AACZ,KAAI;EACF,MAAM,OAAO,IAAI,OAAO,gBAAgB;EACxC,MAAM,YAAY,KAAK;EAGvB,MAAM,WAAW;EACjB,MAAM,SAAS,OAAO,WAAW,aAAa;AAC9C,SAAO,OAAO,SAAS;EACvB,MAAM,YAAY,OAAO,KAAK,cAAc;EAE5C,MAAM,WAAW,OAAO,aAAa,aAAa;AAClD,WAAS,OAAO,SAAS;AACzB,SAAO,SAAS,OAAO,WAAW,UAAU;CAC7C,SAAQ,OAAO;AACd,UAAQ,MAAM,+BAA+B,MAAM;AACnD,SAAO;CACR;AACF;AAED,MAAa,gBAAgB,CAC3BC,UACAC,eAIG;AACH,KAAI;EAEF,MAAMC,YAAoB,OAAO,SAAS,SAAS,GAC/C,WACA,GAAG,aAAa,SAAS;EAG7B,MAAM,SAAS,MAAM,KAAK,aAAa,UAAU,SAAS,SAAS,CAAC;EACpE,MAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,UAAU,CAAC;EAGrD,MAAM,MAAM,MAAM,OAAO,eAAe,SAAS,WAAW;EAG5D,MAAM,WAAW,IAAI,QAAQ,EAAE,SAAS,MAAM,IAAI,KAAK,QAAS,EAAC,CAC/D,MAAM,IAAI,KAAK;AAEjB,OAAK,YAAY,SAAS,WAAW,EACnC,OAAM,IAAI,MAAM;EAClB,MAAM,iBAAiB,MAAM,IAAI,iBAAiB,SAAS,GAAG,KAAK;EAGnE,MAAM,UAAU,IAAI,QAAQ,EAC1B,SAAS,MAAM,IAAI,KAAK,oBACzB,EAAC,CAAC,MAAM,IAAI,KAAK;AAClB,OAAK,WAAW,QAAQ,WAAW,EACjC,OAAM,IAAI,MAAM;EAClB,MAAM,gBAAgB,MAAM,IAAI,gBAAgB,QAAQ,GAAG,IAAI;AAE/D,SAAO;GAAE;GAAgB;EAAe;CACzC,SAAQ,OAAO;AACd,QAAM,IAAI,OAAO,2CAA2C,MAAM;CACnE;AACF"}

package/dist/classification-codes-B15PbWxz.d.cts

@@ -0,0 +1,118 @@
+//#region src/types/classification-codes.d.ts
+/**
+ * Represents the allowed classification codes for e-Invoice items.
+ * Based on the documentation: https://sdk.myinvois.hasil.gov.my/codes/classification-codes/
+ */
+type ClassificationCode = '001' // Breastfeeding equipment
+| '002' // Child care centres and kindergartens fees
+| '003' // Computer, smartphone or tablet
+| '004' // Consolidated e-Invoice
+| '005' // Construction materials (as specified under Fourth Schedule of the Lembaga Pembangunan Industri Pembinaan Malaysia Act 1994)
+| '006' // Disbursement
+| '007' // Donation
+| '008' // e-Commerce - e-Invoice to buyer / purchaser
+| '009' // e-Commerce - Self-billed e-Invoice to seller, logistics, etc.
+| '010' // Education fees
+| '011' // Goods on consignment (Consignor)
+| '012' // Goods on consignment (Consignee)
+| '013' // Gym membership
+| '014' // Insurance - Education and medical benefits
+| '015' // Insurance - Takaful or life insurance
+| '016' // Interest and financing expenses
+| '017' // Internet subscription
+| '018' // Land and building
+| '019' // Medical examination for learning disabilities and early intervention or rehabilitation treatments of learning disabilities
+| '020' // Medical examination or vaccination expenses
+| '021' // Medical expenses for serious diseases
+| '022' // Others
+| '023' // Petroleum operations (as defined in Petroleum (Income Tax) Act 1967)
+| '024' // Private retirement scheme or deferred annuity scheme
+| '025' // Motor vehicle
+| '026' // Subscription of books / journals / magazines / newspapers / other similar publications
+| '027' // Reimbursement
+| '028' // Rental of motor vehicle
+| '029' // EV charging facilities (Installation, rental, sale / purchase or subscription fees)
+| '030' // Repair and maintenance
+| '031' // Research and development
+| '032' // Foreign income
+| '033' // Self-billed - Betting and gaming
+| '034' // Self-billed - Importation of goods
+| '035' // Self-billed - Importation of services
+| '036' // Self-billed - Others
+| '037' // Self-billed - Monetary payment to agents, dealers or distributors
+| '038' // Sports equipment, rental / entry fees for sports facilities, registration in sports competition or sports training fees imposed by associations / sports clubs / companies registered with the Sports Commissioner or Companies Commission of Malaysia and carrying out sports activities as listed under the Sports Development Act 1997
+| '039' // Supporting equipment for disabled person
+| '040' // Voluntary contribution to approved provident fund
+| '041' // Dental examination or treatment
+| '042' // Fertility treatment
+| '043' // Treatment and home care nursing, daycare centres and residential care centers
+| '044' // Vouchers, gift cards, loyalty points, etc
+| '045'; // Self-billed - Non-monetary payment to agents, dealers or distributors
+
+/**
+ * Enum representing the allowed classification codes with descriptive names.
+ * Provides a more readable way to reference classification codes.
+ *
+ * @example
+ * const code = ClassificationCodeEnum.ComputerSmartphoneOrTablet;
+ * console.log(code); // Output: "003"
+ */
+declare enum ClassificationCodeEnum {
+  BreastfeedingEquipment = '001',
+  ChildCareCentresAndKindergartensFees = '002',
+  ComputerSmartphoneOrTablet = '003',
+  ConsolidatedEInvoice = '004',
+  ConstructionMaterials = '005',
+  Disbursement = '006',
+  Donation = '007',
+  ECommerceEInvoiceToBuyer = '008',
+  ECommerceSelfBilledToSellerLogistics = '009',
+  EducationFees = '010',
+  GoodsOnConsignmentConsignor = '011',
+  GoodsOnConsignmentConsignee = '012',
+  GymMembership = '013',
+  InsuranceEducationMedicalBenefits = '014',
+  InsuranceTakafulLife = '015',
+  InterestFinancingExpenses = '016',
+  InternetSubscription = '017',
+  LandAndBuilding = '018',
+  MedicalExamLearningDisabilities = '019',
+  MedicalExamVaccination = '020',
+  MedicalExpensesSeriousDiseases = '021',
+  Others = '022',
+  PetroleumOperations = '023',
+  PrivateRetirementSchemeDeferredAnnuity = '024',
+  MotorVehicle = '025',
+  SubscriptionBooksJournalsEtc = '026',
+  Reimbursement = '027',
+  RentalOfMotorVehicle = '028',
+  EVChargingFacilities = '029',
+  RepairAndMaintenance = '030',
+  ResearchAndDevelopment = '031',
+  ForeignIncome = '032',
+  SelfBilledBettingGaming = '033',
+  SelfBilledImportationGoods = '034',
+  SelfBilledImportationServices = '035',
+  SelfBilledOthers = '036',
+  SelfBilledMonetaryPaymentToAgents = '037',
+  SportsEquipmentRentalFeesEtc = '038',
+  SupportingEquipmentDisabledPerson = '039',
+  VoluntaryContributionProvidentFund = '040',
+  DentalExamTreatment = '041',
+  FertilityTreatment = '042',
+  TreatmentHomeCareNursingEtc = '043',
+  VouchersGiftCardsLoyaltyPoints = '044',
+  SelfBilledNonMonetaryPaymentToAgents = '045',
+}
+
+/**
+ * Interface representing a classification code entry.
+ * Contains the code and its corresponding description.
+ */
+interface Classification {
+  code: ClassificationCode;
+  description: string;
+}
+//#endregion
+export { Classification, ClassificationCode, ClassificationCodeEnum };
+//# sourceMappingURL=classification-codes-B15PbWxz.d.cts.map

package/dist/classification-codes-BQMnAQFr.d.ts

@@ -0,0 +1,118 @@
+//#region src/types/classification-codes.d.ts
+/**
+ * Represents the allowed classification codes for e-Invoice items.
+ * Based on the documentation: https://sdk.myinvois.hasil.gov.my/codes/classification-codes/
+ */
+type ClassificationCode = '001' // Breastfeeding equipment
+| '002' // Child care centres and kindergartens fees
+| '003' // Computer, smartphone or tablet
+| '004' // Consolidated e-Invoice
+| '005' // Construction materials (as specified under Fourth Schedule of the Lembaga Pembangunan Industri Pembinaan Malaysia Act 1994)
+| '006' // Disbursement
+| '007' // Donation
+| '008' // e-Commerce - e-Invoice to buyer / purchaser
+| '009' // e-Commerce - Self-billed e-Invoice to seller, logistics, etc.
+| '010' // Education fees
+| '011' // Goods on consignment (Consignor)
+| '012' // Goods on consignment (Consignee)
+| '013' // Gym membership
+| '014' // Insurance - Education and medical benefits
+| '015' // Insurance - Takaful or life insurance
+| '016' // Interest and financing expenses
+| '017' // Internet subscription
+| '018' // Land and building
+| '019' // Medical examination for learning disabilities and early intervention or rehabilitation treatments of learning disabilities
+| '020' // Medical examination or vaccination expenses
+| '021' // Medical expenses for serious diseases
+| '022' // Others
+| '023' // Petroleum operations (as defined in Petroleum (Income Tax) Act 1967)
+| '024' // Private retirement scheme or deferred annuity scheme
+| '025' // Motor vehicle
+| '026' // Subscription of books / journals / magazines / newspapers / other similar publications
+| '027' // Reimbursement
+| '028' // Rental of motor vehicle
+| '029' // EV charging facilities (Installation, rental, sale / purchase or subscription fees)
+| '030' // Repair and maintenance
+| '031' // Research and development
+| '032' // Foreign income
+| '033' // Self-billed - Betting and gaming
+| '034' // Self-billed - Importation of goods
+| '035' // Self-billed - Importation of services
+| '036' // Self-billed - Others
+| '037' // Self-billed - Monetary payment to agents, dealers or distributors
+| '038' // Sports equipment, rental / entry fees for sports facilities, registration in sports competition or sports training fees imposed by associations / sports clubs / companies registered with the Sports Commissioner or Companies Commission of Malaysia and carrying out sports activities as listed under the Sports Development Act 1997
+| '039' // Supporting equipment for disabled person
+| '040' // Voluntary contribution to approved provident fund
+| '041' // Dental examination or treatment
+| '042' // Fertility treatment
+| '043' // Treatment and home care nursing, daycare centres and residential care centers
+| '044' // Vouchers, gift cards, loyalty points, etc
+| '045'; // Self-billed - Non-monetary payment to agents, dealers or distributors
+
+/**
+ * Enum representing the allowed classification codes with descriptive names.
+ * Provides a more readable way to reference classification codes.
+ *
+ * @example
+ * const code = ClassificationCodeEnum.ComputerSmartphoneOrTablet;
+ * console.log(code); // Output: "003"
+ */
+declare enum ClassificationCodeEnum {
+  BreastfeedingEquipment = '001',
+  ChildCareCentresAndKindergartensFees = '002',
+  ComputerSmartphoneOrTablet = '003',
+  ConsolidatedEInvoice = '004',
+  ConstructionMaterials = '005',
+  Disbursement = '006',
+  Donation = '007',
+  ECommerceEInvoiceToBuyer = '008',
+  ECommerceSelfBilledToSellerLogistics = '009',
+  EducationFees = '010',
+  GoodsOnConsignmentConsignor = '011',
+  GoodsOnConsignmentConsignee = '012',
+  GymMembership = '013',
+  InsuranceEducationMedicalBenefits = '014',
+  InsuranceTakafulLife = '015',
+  InterestFinancingExpenses = '016',
+  InternetSubscription = '017',
+  LandAndBuilding = '018',
+  MedicalExamLearningDisabilities = '019',
+  MedicalExamVaccination = '020',
+  MedicalExpensesSeriousDiseases = '021',
+  Others = '022',
+  PetroleumOperations = '023',
+  PrivateRetirementSchemeDeferredAnnuity = '024',
+  MotorVehicle = '025',
+  SubscriptionBooksJournalsEtc = '026',
+  Reimbursement = '027',
+  RentalOfMotorVehicle = '028',
+  EVChargingFacilities = '029',
+  RepairAndMaintenance = '030',
+  ResearchAndDevelopment = '031',
+  ForeignIncome = '032',
+  SelfBilledBettingGaming = '033',
+  SelfBilledImportationGoods = '034',
+  SelfBilledImportationServices = '035',
+  SelfBilledOthers = '036',
+  SelfBilledMonetaryPaymentToAgents = '037',
+  SportsEquipmentRentalFeesEtc = '038',
+  SupportingEquipmentDisabledPerson = '039',
+  VoluntaryContributionProvidentFund = '040',
+  DentalExamTreatment = '041',
+  FertilityTreatment = '042',
+  TreatmentHomeCareNursingEtc = '043',
+  VouchersGiftCardsLoyaltyPoints = '044',
+  SelfBilledNonMonetaryPaymentToAgents = '045',
+}
+
+/**
+ * Interface representing a classification code entry.
+ * Contains the code and its corresponding description.
+ */
+interface Classification {
+  code: ClassificationCode;
+  description: string;
+}
+//#endregion
+export { Classification, ClassificationCode, ClassificationCodeEnum };
+//# sourceMappingURL=classification-codes-BQMnAQFr.d.ts.map