@stackcraftmx/calcita 0.32.1 → 0.47.0

package/dist/mexico/EfirmaFields.js

@@ -0,0 +1,167 @@
+"use client";
+import { jsxs, jsx } from "react/jsx-runtime";
+import { useState } from "react";
+import Alert from "@mui/material/Alert";
+import Button from "@mui/material/Button";
+import Chip from "@mui/material/Chip";
+import Paper from "@mui/material/Paper";
+import Stack from "@mui/material/Stack";
+import Typography from "@mui/material/Typography";
+import TextInput from "../inputs/TextInput.js";
+import { CERTIFICATE_STATUS, certificateStatusOf, readCertificate } from "./certificateReader.js";
+import { verifyEfirmaKey, EfirmaKeyError } from "./efirmaKey.js";
+import { piecePart, usePieceProps } from "../theme/themePieces.js";
+import { useFormatters } from "../toolkit/useFormatters.js";
+import { useToolkitTranslation } from "../toolkit/useToolkitTranslation.js";
+import { warnUnknownProps } from "../toolkit/unknownProps.js";
+import DefinitionList from "../ui/layout/DefinitionList.js";
+import FileInput from "../upload/FileInput.js";
+const THEME_NAME = "CalcitaEfirmaFields";
+const EfirmaRoot = piecePart(THEME_NAME, "Root", Stack);
+const EfirmaCertificate = piecePart(THEME_NAME, "Certificate", Paper);
+const EfirmaVerify = piecePart(THEME_NAME, "Verify", Stack);
+const STATUS_COLORS = Object.freeze({
+  [CERTIFICATE_STATUS.valid]: "success",
+  [CERTIFICATE_STATUS.expired]: "error",
+  [CERTIFICATE_STATUS.notYetValid]: "warning"
+});
+const VERIFY_STATE = Object.freeze({ idle: "idle", verifying: "verifying", verified: "verified", failed: "failed" });
+const EMPTY_VALUE = Object.freeze({ certificateFile: null, keyFile: null, password: "" });
+function EfirmaFields(props) {
+  const {
+    value = EMPTY_VALUE,
+    onChange,
+    expectedRfc,
+    onCertificateRead,
+    onVerifyKey,
+    verifyLabel,
+    disabled = false,
+    sx,
+    texts,
+    ...unknownProps
+  } = usePieceProps(props, THEME_NAME);
+  warnUnknownProps(THEME_NAME, unknownProps);
+  const { t } = useToolkitTranslation("mexico", texts);
+  const { formatDate } = useFormatters();
+  const [certificate, setCertificate] = useState(null);
+  const [readError, setReadError] = useState(null);
+  const [verify, setVerify] = useState({ state: VERIFY_STATE.idle, message: null });
+  const change = (changes) => {
+    setVerify({ state: VERIFY_STATE.idle, message: null });
+    onChange({ ...value, ...changes });
+  };
+  const chooseCertificate = async (certificateFile) => {
+    change({ certificateFile });
+    setReadError(null);
+    if (!certificateFile) {
+      setCertificate(null);
+      onCertificateRead?.(null);
+      return;
+    }
+    try {
+      const read = readCertificate(new Uint8Array(await certificateFile.arrayBuffer()));
+      setCertificate(read);
+      onCertificateRead?.(read);
+    } catch {
+      setCertificate(null);
+      setReadError(t("efirma.notCertificate"));
+      onCertificateRead?.(null);
+    }
+  };
+  const verifyInBrowser = async ({ certificateFile, keyFile, password }) => {
+    try {
+      await verifyEfirmaKey({ certificateBytes: await certificateFile.arrayBuffer(), keyBytes: await keyFile.arrayBuffer(), password });
+    } catch (error) {
+      throw new Error(error instanceof EfirmaKeyError ? t(`efirma.problems.${error.reason}`) : t("efirma.verifyFailed"));
+    }
+  };
+  const verifyKey = async () => {
+    setVerify({ state: VERIFY_STATE.verifying, message: null });
+    try {
+      await (onVerifyKey ?? verifyInBrowser)({
+        certificateFile: value.certificateFile,
+        keyFile: value.keyFile,
+        password: value.password,
+        certificate
+      });
+      setVerify({ state: VERIFY_STATE.verified, message: null });
+    } catch (error) {
+      setVerify({ state: VERIFY_STATE.failed, message: error?.message ?? t("efirma.verifyFailed") });
+    }
+  };
+  const status = certificate ? certificateStatusOf(certificate) : null;
+  const isOtherRfc = Boolean(certificate && expectedRfc) && certificate.rfc?.toUpperCase() !== expectedRfc.toUpperCase();
+  const canVerify = Boolean(certificate && value.keyFile && value.password) && status === CERTIFICATE_STATUS.valid && !disabled;
+  return /* @__PURE__ */ jsxs(EfirmaRoot, { ownSx: { gap: 1 }, sx, children: [
+    /* @__PURE__ */ jsx(
+      FileInput,
+      {
+        label: t("efirma.certificate"),
+        value: value.certificateFile,
+        onChange: chooseCertificate,
+        accept: ".cer",
+        disabled,
+        error: readError ?? void 0,
+        helperText: t("efirma.certificateHelp"),
+        texts
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      FileInput,
+      {
+        label: t("efirma.privateKey"),
+        value: value.keyFile,
+        onChange: (keyFile) => change({ keyFile }),
+        accept: ".key",
+        disabled,
+        helperText: t("efirma.privateKeyHelp"),
+        texts
+      }
+    ),
+    /* @__PURE__ */ jsx(
+      TextInput,
+      {
+        label: t("efirma.password"),
+        type: "password",
+        value: value.password,
+        onChange: (password) => change({ password }),
+        autoComplete: "off",
+        disabled,
+        helperText: t("efirma.passwordHelp")
+      }
+    ),
+    certificate && /* @__PURE__ */ jsxs(EfirmaCertificate, { variant: "outlined", ownSx: { p: 2, borderRadius: 2 }, children: [
+      /* @__PURE__ */ jsxs(Stack, { direction: "row", sx: { alignItems: "center", gap: 1, mb: 1.5, flexWrap: "wrap" }, children: [
+        /* @__PURE__ */ jsx(Typography, { variant: "subtitle1", component: "p", sx: { mr: "auto" }, children: certificate.name ?? certificate.organization ?? "—" }),
+        /* @__PURE__ */ jsx(Chip, { size: "small", color: STATUS_COLORS[status], label: t(`efirma.status.${status}`) })
+      ] }),
+      isOtherRfc && /* @__PURE__ */ jsx(Alert, { severity: "warning", sx: { mb: 1.5 }, children: t("efirma.otherRfc", { rfc: certificate.rfc, expected: expectedRfc }) }),
+      /* @__PURE__ */ jsx(DefinitionList, { entries: [
+        { label: t("efirma.rfc"), value: certificate.rfc ?? "—" },
+        ...certificate.representativeRfc ? [{ label: t("efirma.representative"), value: [certificate.representativeRfc, certificate.representativeCurp].filter(Boolean).join(" · ") }] : [],
+        ...certificate.curp ? [{ label: t("efirma.curp"), value: certificate.curp }] : [],
+        { label: t("efirma.certificateNumber"), value: certificate.certificateNumber },
+        { label: t("efirma.validity"), value: t("efirma.validityRange", { from: formatDate(certificate.validFrom), to: formatDate(certificate.validTo) }) },
+        ...certificate.branch ? [{ label: t("efirma.branch"), value: certificate.branch }] : []
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs(EfirmaVerify, { direction: "row", ownSx: { gap: 1.5, alignItems: "center", flexWrap: "wrap", mt: 1 }, children: [
+      /* @__PURE__ */ jsx(
+        Button,
+        {
+          variant: "outlined",
+          onClick: verifyKey,
+          disabled: !canVerify || verify.state === VERIFY_STATE.verifying,
+          loading: verify.state === VERIFY_STATE.verifying,
+          children: verifyLabel ?? t("efirma.verify")
+        }
+      ),
+      verify.state === VERIFY_STATE.verified && /* @__PURE__ */ jsx(Alert, { severity: "success", sx: { py: 0 }, children: t("efirma.verified") }),
+      verify.state === VERIFY_STATE.failed && /* @__PURE__ */ jsx(Alert, { severity: "error", role: "alert", sx: { py: 0 }, children: verify.message })
+    ] })
+  ] });
+}
+export {
+  EfirmaFields as default
+};
+//# sourceMappingURL=EfirmaFields.js.map

package/dist/mexico/EfirmaFields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EfirmaFields.js","sources":["../../src/mexico/EfirmaFields.jsx"],"sourcesContent":["// La e.firma (o el sello digital) de una persona o una empresa: el certificado (.cer), la llave privada (.key) y su\n// contraseña, con lo que dice el certificado a la vista (RFC, nombre, número de certificado, vigencia), leído en el navegador\n// sin subirlo.\n//\n// Avisa sin esperar al servidor: un .cer que no es certificado, uno vencido o que todavía no vale, y un RFC distinto al que se\n// espera (expectedRfc: el de la empresa).\n//\n// «Revisar la e.firma» abre la llave con su contraseña y comprueba que es la de ese certificado, en el navegador\n// (verifyEfirmaKey, con jsrsasign: la llave del SAT viene cifrada con 3DES, que el navegador no trae), y dice el motivo de un\n// «no»: la contraseña, otra llave o un archivo que no es llave. Con onVerifyKey la revisión es del proyecto (su API con\n// OpenSSL, por ejemplo). Calcita no manda la llave ni la contraseña a ningún lado por su cuenta.\n//\n// Controlado: value {certificateFile, keyFile, password} y onChange con el valor completo.\n//\n// Se cambia desde el tema del proyecto, como las piezas de MUI: components.CalcitaEfirmaFields con defaultProps y\n// styleOverrides de sus partes: root, certificate, verify.\n//\n// Genérico del paquete: function (regla de la casa).\nimport {useState} from 'react';\nimport Alert from '@mui/material/Alert';\nimport Button from '@mui/material/Button';\nimport Chip from '@mui/material/Chip';\nimport Paper from '@mui/material/Paper';\nimport Stack from '@mui/material/Stack';\nimport Typography from '@mui/material/Typography';\n\nimport TextInput from '@/inputs/TextInput.jsx';\nimport {CERTIFICATE_STATUS, certificateStatusOf, readCertificate} from '@/mexico/certificateReader.js';\nimport {EfirmaKeyError, verifyEfirmaKey} from '@/mexico/efirmaKey.js';\nimport {piecePart, usePieceProps} from '@/theme/themePieces.js';\nimport {useFormatters} from '@/toolkit/useFormatters.js';\nimport {useToolkitTranslation} from '@/toolkit/useToolkitTranslation.js';\nimport {warnUnknownProps} from '@/toolkit/unknownProps.js';\nimport DefinitionList from '@/ui/layout/DefinitionList.jsx';\nimport FileInput from '@/upload/FileInput.jsx';\n\n// el nombre de la pieza en el tema y sus partes (theme.components.CalcitaEfirmaFields)\nconst THEME_NAME = 'CalcitaEfirmaFields';\nconst EfirmaRoot = piecePart(THEME_NAME, 'Root', Stack);\nconst EfirmaCertificate = piecePart(THEME_NAME, 'Certificate', Paper);\nconst EfirmaVerify = piecePart(THEME_NAME, 'Verify', Stack);\n\n// el color del chip de la vigencia\nconst STATUS_COLORS = Object.freeze({\n    [CERTIFICATE_STATUS.valid]: 'success', [CERTIFICATE_STATUS.expired]: 'error', [CERTIFICATE_STATUS.notYetValid]: 'warning',\n});\n// en qué va la revisión de la llave\nconst VERIFY_STATE = Object.freeze({idle: 'idle', verifying: 'verifying', verified: 'verified', failed: 'failed'});\nconst EMPTY_VALUE = Object.freeze({certificateFile: null, keyFile: null, password: ''});\n\n/**\n * @param {object} props\n * @param {{certificateFile: File|null, keyFile: File|null, password: string}} [props.value]\n * @param {(value: {certificateFile: File|null, keyFile: File|null, password: string}) => void} props.onChange el valor completo\n * @param {string} [props.expectedRfc] el RFC que debe traer el certificado (el de la empresa); si es otro, se avisa\n * @param {(certificate: ReturnType<typeof import('@/mexico/certificateReader.js').readCertificate>|null) => void} [props.onCertificateRead] lo que dice el certificado al elegirlo (null al quitarlo\n *     o si no se pudo leer)\n * @param {(input: {certificateFile: File, keyFile: File, password: string, certificate: ReturnType<typeof import('@/mexico/certificateReader.js').readCertificate>}) => Promise<void>} [props.onVerifyKey]\n *     la revisión del proyecto (su API); si truena, su mensaje se enseña. Sin él, se abre en el navegador con jsrsasign\n * @param {string} [props.verifyLabel] ya traducido; por omisión «Revisar la e.firma»\n * @param {boolean} [props.disabled]\n * @param {object} [props.sx]\n * @param {object} [props.texts] los textos que cambian, con la forma de `mexico` en los textos del paquete\n */\nexport default function EfirmaFields(props) {\n    const {\n        value = EMPTY_VALUE, onChange, expectedRfc, onCertificateRead, onVerifyKey, verifyLabel, disabled = false, sx, texts,\n        ...unknownProps\n    } = usePieceProps(props, THEME_NAME);\n    warnUnknownProps(THEME_NAME, unknownProps);\n    const {t} = useToolkitTranslation('mexico', texts);\n    const {formatDate} = useFormatters();\n    const [certificate, setCertificate] = useState(null);\n    const [readError, setReadError] = useState(null);\n    const [verify, setVerify] = useState({state: VERIFY_STATE.idle, message: null});\n\n    // cualquier cambio deja la revisión de la llave sin hacer: ya no es la misma combinación\n    const change = (changes) => {\n        setVerify({state: VERIFY_STATE.idle, message: null});\n        onChange({...value, ...changes});\n    };\n\n    const chooseCertificate = async (certificateFile) => {\n        change({certificateFile});\n        setReadError(null);\n        if (!certificateFile) {\n            setCertificate(null);\n            onCertificateRead?.(null);\n            return;\n        }\n        try {\n            const read = readCertificate(new Uint8Array(await certificateFile.arrayBuffer()));\n            setCertificate(read);\n            onCertificateRead?.(read);\n        } catch {\n            setCertificate(null);\n            setReadError(t('efirma.notCertificate'));\n            onCertificateRead?.(null);\n        }\n    };\n\n    // sin revisión del proyecto, la del navegador, con el motivo de un «no» en palabras de la persona\n    const verifyInBrowser = async ({certificateFile, keyFile, password}) => {\n        try {\n            await verifyEfirmaKey({certificateBytes: await certificateFile.arrayBuffer(), keyBytes: await keyFile.arrayBuffer(), password});\n        } catch (error) {\n            throw new Error(error instanceof EfirmaKeyError ? t(`efirma.problems.${error.reason}`) : t('efirma.verifyFailed'));\n        }\n    };\n\n    const verifyKey = async () => {\n        setVerify({state: VERIFY_STATE.verifying, message: null});\n        try {\n            await (onVerifyKey ?? verifyInBrowser)({\n                certificateFile: value.certificateFile, keyFile: value.keyFile, password: value.password, certificate,\n            });\n            setVerify({state: VERIFY_STATE.verified, message: null});\n        } catch (error) {\n            setVerify({state: VERIFY_STATE.failed, message: error?.message ?? t('efirma.verifyFailed')});\n        }\n    };\n\n    const status = certificate ? certificateStatusOf(certificate) : null;\n    const isOtherRfc = Boolean(certificate && expectedRfc) && certificate.rfc?.toUpperCase() !== expectedRfc.toUpperCase();\n    const canVerify = Boolean(certificate && value.keyFile && value.password) && status === CERTIFICATE_STATUS.valid && !disabled;\n\n    return (\n        <EfirmaRoot ownSx={{gap: 1}} sx={sx}>\n            <FileInput label={t('efirma.certificate')} value={value.certificateFile} onChange={chooseCertificate} accept=\".cer\" disabled={disabled}\n                       error={readError ?? undefined} helperText={t('efirma.certificateHelp')} texts={texts} />\n            <FileInput label={t('efirma.privateKey')} value={value.keyFile} onChange={(keyFile) => change({keyFile})} accept=\".key\" disabled={disabled}\n                       helperText={t('efirma.privateKeyHelp')} texts={texts} />\n            <TextInput label={t('efirma.password')} type=\"password\" value={value.password} onChange={(password) => change({password})}\n                       autoComplete=\"off\" disabled={disabled} helperText={t('efirma.passwordHelp')} />\n\n            {certificate && (\n                <EfirmaCertificate variant=\"outlined\" ownSx={{p: 2, borderRadius: 2}}>\n                    <Stack direction=\"row\" sx={{alignItems: 'center', gap: 1, mb: 1.5, flexWrap: 'wrap'}}>\n                        <Typography variant=\"subtitle1\" component=\"p\" sx={{mr: 'auto'}}>{certificate.name ?? certificate.organization ?? '—'}</Typography>\n                        <Chip size=\"small\" color={STATUS_COLORS[status]} label={t(`efirma.status.${status}`)} />\n                    </Stack>\n                    {isOtherRfc && <Alert severity=\"warning\" sx={{mb: 1.5}}>{t('efirma.otherRfc', {rfc: certificate.rfc, expected: expectedRfc})}</Alert>}\n                    <DefinitionList entries={[\n                        {label: t('efirma.rfc'), value: certificate.rfc ?? '—'},\n                        ...(certificate.representativeRfc ? [{label: t('efirma.representative'), value: [certificate.representativeRfc, certificate.representativeCurp].filter(Boolean).join(' · ')}] : []),\n                        ...(certificate.curp ? [{label: t('efirma.curp'), value: certificate.curp}] : []),\n                        {label: t('efirma.certificateNumber'), value: certificate.certificateNumber},\n                        {label: t('efirma.validity'), value: t('efirma.validityRange', {from: formatDate(certificate.validFrom), to: formatDate(certificate.validTo)})},\n                        ...(certificate.branch ? [{label: t('efirma.branch'), value: certificate.branch}] : []),\n                    ]} />\n                </EfirmaCertificate>\n            )}\n\n            <EfirmaVerify direction=\"row\" ownSx={{gap: 1.5, alignItems: 'center', flexWrap: 'wrap', mt: 1}}>\n                <Button variant=\"outlined\" onClick={verifyKey} disabled={!canVerify || verify.state === VERIFY_STATE.verifying}\n                        loading={verify.state === VERIFY_STATE.verifying}>\n                    {verifyLabel ?? t('efirma.verify')}\n                </Button>\n                {verify.state === VERIFY_STATE.verified && <Alert severity=\"success\" sx={{py: 0}}>{t('efirma.verified')}</Alert>}\n                {verify.state === VERIFY_STATE.failed && <Alert severity=\"error\" role=\"alert\" sx={{py: 0}}>{verify.message}</Alert>}\n            </EfirmaVerify>\n        </EfirmaRoot>\n    );\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAqCA,MAAM,aAAa;AACnB,MAAM,aAAa,UAAU,YAAY,QAAQ,KAAK;AACtD,MAAM,oBAAoB,UAAU,YAAY,eAAe,KAAK;AACpE,MAAM,eAAe,UAAU,YAAY,UAAU,KAAK;AAG1D,MAAM,gBAAgB,OAAO,OAAO;AAAA,EAChC,CAAC,mBAAmB,KAAK,GAAG;AAAA,EAAW,CAAC,mBAAmB,OAAO,GAAG;AAAA,EAAS,CAAC,mBAAmB,WAAW,GAAG;AACpH,CAAC;AAED,MAAM,eAAe,OAAO,OAAO,EAAC,MAAM,QAAQ,WAAW,aAAa,UAAU,YAAY,QAAQ,SAAA,CAAS;AACjH,MAAM,cAAc,OAAO,OAAO,EAAC,iBAAiB,MAAM,SAAS,MAAM,UAAU,IAAG;AAgBtF,SAAwB,aAAa,OAAO;AACxC,QAAM;AAAA,IACF,QAAQ;AAAA,IAAa;AAAA,IAAU;AAAA,IAAa;AAAA,IAAmB;AAAA,IAAa;AAAA,IAAa,WAAW;AAAA,IAAO;AAAA,IAAI;AAAA,IAC/G,GAAG;AAAA,EAAA,IACH,cAAc,OAAO,UAAU;AACnC,mBAAiB,YAAY,YAAY;AACzC,QAAM,EAAC,EAAA,IAAK,sBAAsB,UAAU,KAAK;AACjD,QAAM,EAAC,WAAA,IAAc,cAAA;AACrB,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,IAAI;AACnD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAC/C,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,EAAC,OAAO,aAAa,MAAM,SAAS,MAAK;AAG9E,QAAM,SAAS,CAAC,YAAY;AACxB,cAAU,EAAC,OAAO,aAAa,MAAM,SAAS,MAAK;AACnD,aAAS,EAAC,GAAG,OAAO,GAAG,SAAQ;AAAA,EACnC;AAEA,QAAM,oBAAoB,OAAO,oBAAoB;AACjD,WAAO,EAAC,iBAAgB;AACxB,iBAAa,IAAI;AACjB,QAAI,CAAC,iBAAiB;AAClB,qBAAe,IAAI;AACnB,0BAAoB,IAAI;AACxB;AAAA,IACJ;AACA,QAAI;AACA,YAAM,OAAO,gBAAgB,IAAI,WAAW,MAAM,gBAAgB,YAAA,CAAa,CAAC;AAChF,qBAAe,IAAI;AACnB,0BAAoB,IAAI;AAAA,IAC5B,QAAQ;AACJ,qBAAe,IAAI;AACnB,mBAAa,EAAE,uBAAuB,CAAC;AACvC,0BAAoB,IAAI;AAAA,IAC5B;AAAA,EACJ;AAGA,QAAM,kBAAkB,OAAO,EAAC,iBAAiB,SAAS,eAAc;AACpE,QAAI;AACA,YAAM,gBAAgB,EAAC,kBAAkB,MAAM,gBAAgB,YAAA,GAAe,UAAU,MAAM,QAAQ,YAAA,GAAe,UAAS;AAAA,IAClI,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,iBAAiB,iBAAiB,EAAE,mBAAmB,MAAM,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC;AAAA,IACrH;AAAA,EACJ;AAEA,QAAM,YAAY,YAAY;AAC1B,cAAU,EAAC,OAAO,aAAa,WAAW,SAAS,MAAK;AACxD,QAAI;AACA,aAAO,eAAe,iBAAiB;AAAA,QACnC,iBAAiB,MAAM;AAAA,QAAiB,SAAS,MAAM;AAAA,QAAS,UAAU,MAAM;AAAA,QAAU;AAAA,MAAA,CAC7F;AACD,gBAAU,EAAC,OAAO,aAAa,UAAU,SAAS,MAAK;AAAA,IAC3D,SAAS,OAAO;AACZ,gBAAU,EAAC,OAAO,aAAa,QAAQ,SAAS,OAAO,WAAW,EAAE,qBAAqB,GAAE;AAAA,IAC/F;AAAA,EACJ;AAEA,QAAM,SAAS,cAAc,oBAAoB,WAAW,IAAI;AAChE,QAAM,aAAa,QAAQ,eAAe,WAAW,KAAK,YAAY,KAAK,YAAA,MAAkB,YAAY,YAAA;AACzG,QAAM,YAAY,QAAQ,eAAe,MAAM,WAAW,MAAM,QAAQ,KAAK,WAAW,mBAAmB,SAAS,CAAC;AAErH,8BACK,YAAA,EAAW,OAAO,EAAC,KAAK,EAAA,GAAI,IACzB,UAAA;AAAA,IAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QAAU,OAAO,EAAE,oBAAoB;AAAA,QAAG,OAAO,MAAM;AAAA,QAAiB,UAAU;AAAA,QAAmB,QAAO;AAAA,QAAO;AAAA,QACzG,OAAO,aAAa;AAAA,QAAW,YAAY,EAAE,wBAAwB;AAAA,QAAG;AAAA,MAAA;AAAA,IAAA;AAAA,IACnF;AAAA,MAAC;AAAA,MAAA;AAAA,QAAU,OAAO,EAAE,mBAAmB;AAAA,QAAG,OAAO,MAAM;AAAA,QAAS,UAAU,CAAC,YAAY,OAAO,EAAC,SAAQ;AAAA,QAAG,QAAO;AAAA,QAAO;AAAA,QAC7G,YAAY,EAAE,uBAAuB;AAAA,QAAG;AAAA,MAAA;AAAA,IAAA;AAAA,IACnD;AAAA,MAAC;AAAA,MAAA;AAAA,QAAU,OAAO,EAAE,iBAAiB;AAAA,QAAG,MAAK;AAAA,QAAW,OAAO,MAAM;AAAA,QAAU,UAAU,CAAC,aAAa,OAAO,EAAC,UAAS;AAAA,QAC7G,cAAa;AAAA,QAAM;AAAA,QAAoB,YAAY,EAAE,qBAAqB;AAAA,MAAA;AAAA,IAAA;AAAA,IAEpF,eACG,qBAAC,mBAAA,EAAkB,SAAQ,YAAW,OAAO,EAAC,GAAG,GAAG,cAAc,EAAA,GAC9D,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAM,WAAU,OAAM,IAAI,EAAC,YAAY,UAAU,KAAK,GAAG,IAAI,KAAK,UAAU,UACzE,UAAA;AAAA,QAAA,oBAAC,YAAA,EAAW,SAAQ,aAAY,WAAU,KAAI,IAAI,EAAC,IAAI,OAAA,GAAU,UAAA,YAAY,QAAQ,YAAY,gBAAgB,KAAI;AAAA,QACrH,oBAAC,MAAA,EAAK,MAAK,SAAQ,OAAO,cAAc,MAAM,GAAG,OAAO,EAAE,iBAAiB,MAAM,EAAE,EAAA,CAAG;AAAA,MAAA,GAC1F;AAAA,MACC,cAAc,oBAAC,OAAA,EAAM,UAAS,WAAU,IAAI,EAAC,IAAI,IAAA,GAAO,UAAA,EAAE,mBAAmB,EAAC,KAAK,YAAY,KAAK,UAAU,YAAA,CAAY,GAAE;AAAA,MAC7H,oBAAC,kBAAe,SAAS;AAAA,QACrB,EAAC,OAAO,EAAE,YAAY,GAAG,OAAO,YAAY,OAAO,IAAA;AAAA,QACnD,GAAI,YAAY,oBAAoB,CAAC,EAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,mBAAmB,YAAY,kBAAkB,EAAE,OAAO,OAAO,EAAE,KAAK,KAAK,EAAA,CAAE,IAAI,CAAA;AAAA,QAChL,GAAI,YAAY,OAAO,CAAC,EAAC,OAAO,EAAE,aAAa,GAAG,OAAO,YAAY,KAAA,CAAK,IAAI,CAAA;AAAA,QAC9E,EAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,YAAY,kBAAA;AAAA,QAC1D,EAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,EAAE,wBAAwB,EAAC,MAAM,WAAW,YAAY,SAAS,GAAG,IAAI,WAAW,YAAY,OAAO,EAAA,CAAE,EAAA;AAAA,QAC7I,GAAI,YAAY,SAAS,CAAC,EAAC,OAAO,EAAE,eAAe,GAAG,OAAO,YAAY,OAAA,CAAO,IAAI,CAAA;AAAA,MAAC,EACzF,CAAG;AAAA,IAAA,GACP;AAAA,IAGJ,qBAAC,cAAA,EAAa,WAAU,OAAM,OAAO,EAAC,KAAK,KAAK,YAAY,UAAU,UAAU,QAAQ,IAAI,KACxF,UAAA;AAAA,MAAA;AAAA,QAAC;AAAA,QAAA;AAAA,UAAO,SAAQ;AAAA,UAAW,SAAS;AAAA,UAAW,UAAU,CAAC,aAAa,OAAO,UAAU,aAAa;AAAA,UAC7F,SAAS,OAAO,UAAU,aAAa;AAAA,UAC1C,UAAA,eAAe,EAAE,eAAe;AAAA,QAAA;AAAA,MAAA;AAAA,MAEpC,OAAO,UAAU,aAAa,gCAAa,OAAA,EAAM,UAAS,WAAU,IAAI,EAAC,IAAI,EAAA,GAAK,UAAA,EAAE,iBAAiB,GAAE;AAAA,MACvG,OAAO,UAAU,aAAa,UAAU,oBAAC,SAAM,UAAS,SAAQ,MAAK,SAAQ,IAAI,EAAC,IAAI,EAAA,GAAK,iBAAO,QAAA,CAAQ;AAAA,IAAA,EAAA,CAC/G;AAAA,EAAA,GACJ;AAER;"}

package/dist/mexico/certificateReader.js

@@ -0,0 +1,79 @@
+import { readDerNode, DER_TAG, derTimeOf, objectIdentifierOf, derTextOf } from "./derReader.js";
+const NAME_OIDS = Object.freeze({
+  "2.5.4.3": "commonName",
+  "2.5.4.10": "organizationName",
+  "2.5.4.11": "organizationalUnitName",
+  "2.5.4.45": "uniqueIdentifier",
+  "2.5.4.5": "serialNumber",
+  "1.2.840.113549.1.9.1": "email"
+});
+const IDENTIFIER_SEPARATOR = "/";
+const EXPLICIT_VERSION_TAG = 160;
+const ASCII_DIGIT_ZERO = 48;
+const ASCII_DIGIT_NINE = 57;
+function namesOf(nameNode) {
+  const names = {};
+  for (const relativeName of nameNode.children ?? []) {
+    for (const attribute of relativeName.children ?? []) {
+      const [oidNode, valueNode] = attribute.children ?? [];
+      const key = NAME_OIDS[objectIdentifierOf(oidNode.content)];
+      if (key && valueNode) {
+        names[key] = derTextOf(valueNode).trim();
+      }
+    }
+  }
+  return names;
+}
+function certificateNumberOf(serialBytes) {
+  const isDigitText = serialBytes.length > 0 && serialBytes.every((byte) => byte >= ASCII_DIGIT_ZERO && byte <= ASCII_DIGIT_NINE);
+  if (isDigitText) {
+    return new TextDecoder("utf-8").decode(serialBytes);
+  }
+  return [...serialBytes].map((byte) => byte.toString(16).padStart(2, "0")).join("").toUpperCase();
+}
+function identifierPartsOf(text) {
+  const [own = "", representative = ""] = (text ?? "").split(IDENTIFIER_SEPARATOR).map((part) => part.trim());
+  return { own: own || null, representative: representative || null };
+}
+function readCertificate(certificateBytes) {
+  const bytes = certificateBytes instanceof Uint8Array ? certificateBytes : new Uint8Array(certificateBytes);
+  const certificate = readDerNode(bytes);
+  const toBeSigned = certificate.children?.[0];
+  if (certificate.tag !== DER_TAG.sequence || toBeSigned?.tag !== DER_TAG.sequence) {
+    throw new Error("El archivo no es un certificado");
+  }
+  const parts = toBeSigned.children;
+  const firstIndex = parts[0].tag === EXPLICIT_VERSION_TAG ? 1 : 0;
+  const [serialNode, , issuerNode, validityNode, subjectNode] = parts.slice(firstIndex);
+  const subject = namesOf(subjectNode);
+  const issuer = namesOf(issuerNode);
+  const rfcParts = identifierPartsOf(subject.uniqueIdentifier);
+  const curpParts = identifierPartsOf(subject.serialNumber);
+  return {
+    rfc: rfcParts.own,
+    representativeRfc: rfcParts.representative,
+    curp: curpParts.own,
+    representativeCurp: curpParts.representative,
+    name: subject.commonName ?? null,
+    organization: subject.organizationName ?? null,
+    branch: subject.organizationalUnitName ?? null,
+    email: subject.email ?? null,
+    certificateNumber: certificateNumberOf(serialNode.content),
+    validFrom: derTimeOf(validityNode.children[0]),
+    validTo: derTimeOf(validityNode.children[1]),
+    issuer: issuer.organizationName ?? issuer.commonName ?? null
+  };
+}
+function certificateStatusOf({ validFrom, validTo }, now = Date.now()) {
+  if (now < Date.parse(validFrom)) {
+    return CERTIFICATE_STATUS.notYetValid;
+  }
+  return now > Date.parse(validTo) ? CERTIFICATE_STATUS.expired : CERTIFICATE_STATUS.valid;
+}
+const CERTIFICATE_STATUS = Object.freeze({ notYetValid: "notYetValid", valid: "valid", expired: "expired" });
+export {
+  CERTIFICATE_STATUS,
+  certificateStatusOf,
+  readCertificate
+};
+//# sourceMappingURL=certificateReader.js.map

package/dist/mexico/certificateReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificateReader.js","sources":["../../src/mexico/certificateReader.js"],"sourcesContent":["// Lo que dice el certificado (.cer) de una e.firma o de un sello digital del SAT, leído en el navegador sin subirlo: el RFC,\n// la CURP, el nombre, el número de certificado y desde cuándo y hasta cuándo vale.\n//\n// Dónde lo pone el SAT en el certificado:\n//   RFC        x500UniqueIdentifier (2.5.4.45): «RFC» o, en persona moral, «RFC de la empresa / RFC del representante»\n//   CURP       serialNumber (2.5.4.5): «CURP» o « / CURP del representante» (la empresa no tiene)\n//   nombre     commonName (2.5.4.3); la razón social también en organizationName (2.5.4.10)\n//   número     el número de serie del certificado, que el SAT escribe con 20 dígitos en texto (30001000000400002434)\n//   sucursal   organizationalUnitName (2.5.4.11): lo traen los sellos digitales (CSD), no la e.firma\n//\n// No revisa la firma del SAT ni descifra la llave (.key): eso es del servidor o de onVerifyKey en EfirmaFields.\n//\n// Puro (sin React): se prueba con node (certificateReader.test.js).\n//\n// Genérico del paquete: function (regla de la casa).\nimport {DER_TAG, derTextOf, derTimeOf, objectIdentifierOf, readDerNode} from '@/mexico/derReader.js';\n\n// los nombres que se leen del certificado\nconst NAME_OIDS = Object.freeze({\n    '2.5.4.3': 'commonName',\n    '2.5.4.10': 'organizationName',\n    '2.5.4.11': 'organizationalUnitName',\n    '2.5.4.45': 'uniqueIdentifier',\n    '2.5.4.5': 'serialNumber',\n    '1.2.840.113549.1.9.1': 'email',\n});\nconst IDENTIFIER_SEPARATOR = '/';\n// el [0] explícito de la versión: si está, el número de serie es la segunda pieza\nconst EXPLICIT_VERSION_TAG = 0xa0;\nconst ASCII_DIGIT_ZERO = 0x30;\nconst ASCII_DIGIT_NINE = 0x39;\n\n/**\n * Los nombres de un «Name» de X.509 (una lista de conjuntos de OID y valor), por su nombre de NAME_OIDS.\n *\n * @param {object} nameNode\n * @returns {Record<string, string>}\n */\nfunction namesOf(nameNode) {\n    const names = {};\n    for (const relativeName of nameNode.children ?? []) {\n        for (const attribute of relativeName.children ?? []) {\n            const [oidNode, valueNode] = attribute.children ?? [];\n            const key = NAME_OIDS[objectIdentifierOf(oidNode.content)];\n            if (key && valueNode) {\n                names[key] = derTextOf(valueNode).trim();\n            }\n        }\n    }\n    return names;\n}\n\n/**\n * El número de certificado como lo escribe el SAT: sus bytes son dígitos en texto. Si no lo son, en hexadecimal.\n *\n * @param {Uint8Array} serialBytes\n * @returns {string}\n */\nfunction certificateNumberOf(serialBytes) {\n    const isDigitText = serialBytes.length > 0 && serialBytes.every((byte) => byte >= ASCII_DIGIT_ZERO && byte <= ASCII_DIGIT_NINE);\n    if (isDigitText) {\n        return new TextDecoder('utf-8').decode(serialBytes);\n    }\n    return [...serialBytes].map((byte) => byte.toString(16).padStart(2, '0')).join('').toUpperCase();\n}\n\n/**\n * Las partes «propia / del representante» de un campo del SAT.\n *\n * @param {string|undefined} text\n * @returns {{own: string|null, representative: string|null}}\n */\nfunction identifierPartsOf(text) {\n    const [own = '', representative = ''] = (text ?? '').split(IDENTIFIER_SEPARATOR).map((part) => part.trim());\n    return {own: own || null, representative: representative || null};\n}\n\n/**\n * Lee un certificado .cer (DER).\n *\n * @param {ArrayBuffer|Uint8Array} certificateBytes\n * @returns {{rfc: string|null, representativeRfc: string|null, curp: string|null, representativeCurp: string|null, name: string|null, organization: string|null, branch: string|null, email: string|null, certificateNumber: string, validFrom: string, validTo: string, issuer: string|null}}\n */\nexport function readCertificate(certificateBytes) {\n    const bytes = certificateBytes instanceof Uint8Array ? certificateBytes : new Uint8Array(certificateBytes);\n    const certificate = readDerNode(bytes);\n    const toBeSigned = certificate.children?.[0];\n    if (certificate.tag !== DER_TAG.sequence || toBeSigned?.tag !== DER_TAG.sequence) {\n        throw new Error('El archivo no es un certificado');\n    }\n    const parts = toBeSigned.children;\n    const firstIndex = parts[0].tag === EXPLICIT_VERSION_TAG ? 1 : 0;\n    // número de serie, algoritmo, emisor, vigencia y titular, en ese orden\n    const [serialNode, , issuerNode, validityNode, subjectNode] = parts.slice(firstIndex);\n    const subject = namesOf(subjectNode);\n    const issuer = namesOf(issuerNode);\n    const rfcParts = identifierPartsOf(subject.uniqueIdentifier);\n    const curpParts = identifierPartsOf(subject.serialNumber);\n\n    return {\n        rfc: rfcParts.own,\n        representativeRfc: rfcParts.representative,\n        curp: curpParts.own,\n        representativeCurp: curpParts.representative,\n        name: subject.commonName ?? null,\n        organization: subject.organizationName ?? null,\n        branch: subject.organizationalUnitName ?? null,\n        email: subject.email ?? null,\n        certificateNumber: certificateNumberOf(serialNode.content),\n        validFrom: derTimeOf(validityNode.children[0]),\n        validTo: derTimeOf(validityNode.children[1]),\n        issuer: issuer.organizationName ?? issuer.commonName ?? null,\n    };\n}\n\n/**\n * ¿En qué está el certificado en este momento?\n *\n * @param {{validFrom: string, validTo: string}} certificate\n * @param {number} [now] milisegundos (Date.now())\n * @returns {'notYetValid'|'valid'|'expired'}\n */\nexport function certificateStatusOf({validFrom, validTo}, now = Date.now()) {\n    if (now < Date.parse(validFrom)) {\n        return CERTIFICATE_STATUS.notYetValid;\n    }\n    return now > Date.parse(validTo) ? CERTIFICATE_STATUS.expired : CERTIFICATE_STATUS.valid;\n}\n\n/** En qué está un certificado: aún no vale, vale o ya venció. */\nexport const CERTIFICATE_STATUS = Object.freeze({notYetValid: 'notYetValid', valid: 'valid', expired: 'expired'});\n"],"names":[],"mappings":";AAkBA,MAAM,YAAY,OAAO,OAAO;AAAA,EAC5B,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,wBAAwB;AAC5B,CAAC;AACD,MAAM,uBAAuB;AAE7B,MAAM,uBAAuB;AAC7B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAQzB,SAAS,QAAQ,UAAU;AACvB,QAAM,QAAQ,CAAA;AACd,aAAW,gBAAgB,SAAS,YAAY,CAAA,GAAI;AAChD,eAAW,aAAa,aAAa,YAAY,CAAA,GAAI;AACjD,YAAM,CAAC,SAAS,SAAS,IAAI,UAAU,YAAY,CAAA;AACnD,YAAM,MAAM,UAAU,mBAAmB,QAAQ,OAAO,CAAC;AACzD,UAAI,OAAO,WAAW;AAClB,cAAM,GAAG,IAAI,UAAU,SAAS,EAAE,KAAI;AAAA,MAC1C;AAAA,IACJ;AAAA,EACJ;AACA,SAAO;AACX;AAQA,SAAS,oBAAoB,aAAa;AACtC,QAAM,cAAc,YAAY,SAAS,KAAK,YAAY,MAAM,CAAC,SAAS,QAAQ,oBAAoB,QAAQ,gBAAgB;AAC9H,MAAI,aAAa;AACb,WAAO,IAAI,YAAY,OAAO,EAAE,OAAO,WAAW;AAAA,EACtD;AACA,SAAO,CAAC,GAAG,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,YAAW;AAClG;AAQA,SAAS,kBAAkB,MAAM;AAC7B,QAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,KAAK,QAAQ,IAAI,MAAM,oBAAoB,EAAE,IAAI,CAAC,SAAS,KAAK,MAAM;AAC1G,SAAO,EAAC,KAAK,OAAO,MAAM,gBAAgB,kBAAkB,KAAI;AACpE;AAQO,SAAS,gBAAgB,kBAAkB;AAC9C,QAAM,QAAQ,4BAA4B,aAAa,mBAAmB,IAAI,WAAW,gBAAgB;AACzG,QAAM,cAAc,YAAY,KAAK;AACrC,QAAM,aAAa,YAAY,WAAW,CAAC;AAC3C,MAAI,YAAY,QAAQ,QAAQ,YAAY,YAAY,QAAQ,QAAQ,UAAU;AAC9E,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACrD;AACA,QAAM,QAAQ,WAAW;AACzB,QAAM,aAAa,MAAM,CAAC,EAAE,QAAQ,uBAAuB,IAAI;AAE/D,QAAM,CAAC,YAAU,EAAI,YAAY,cAAc,WAAW,IAAI,MAAM,MAAM,UAAU;AACpF,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,WAAW,kBAAkB,QAAQ,gBAAgB;AAC3D,QAAM,YAAY,kBAAkB,QAAQ,YAAY;AAExD,SAAO;AAAA,IACH,KAAK,SAAS;AAAA,IACd,mBAAmB,SAAS;AAAA,IAC5B,MAAM,UAAU;AAAA,IAChB,oBAAoB,UAAU;AAAA,IAC9B,MAAM,QAAQ,cAAc;AAAA,IAC5B,cAAc,QAAQ,oBAAoB;AAAA,IAC1C,QAAQ,QAAQ,0BAA0B;AAAA,IAC1C,OAAO,QAAQ,SAAS;AAAA,IACxB,mBAAmB,oBAAoB,WAAW,OAAO;AAAA,IACzD,WAAW,UAAU,aAAa,SAAS,CAAC,CAAC;AAAA,IAC7C,SAAS,UAAU,aAAa,SAAS,CAAC,CAAC;AAAA,IAC3C,QAAQ,OAAO,oBAAoB,OAAO,cAAc;AAAA,EAChE;AACA;AASO,SAAS,oBAAoB,EAAC,WAAW,QAAO,GAAG,MAAM,KAAK,OAAO;AACxE,MAAI,MAAM,KAAK,MAAM,SAAS,GAAG;AAC7B,WAAO,mBAAmB;AAAA,EAC9B;AACA,SAAO,MAAM,KAAK,MAAM,OAAO,IAAI,mBAAmB,UAAU,mBAAmB;AACvF;AAGY,MAAC,qBAAqB,OAAO,OAAO,EAAC,aAAa,eAAe,OAAO,SAAS,SAAS,UAAS,CAAC;"}

package/dist/mexico/cfdiReader.js

@@ -0,0 +1,81 @@
+const CFDI_VOUCHER_TYPE = Object.freeze({ income: "I", expense: "E", transfer: "T", payroll: "N", payment: "P" });
+const TAG_PATTERN = /<(?:[A-Za-z_][\w.-]*:)?([A-Za-z_][\w.-]*)((?:\s+[\w:.-]+\s*=\s*(?:"[^"]*"|'[^']*'))*)\s*\/?>/g;
+const ATTRIBUTE_PATTERN = /([\w:.-]+)\s*=\s*(?:"([^"]*)"|'([^']*)')/g;
+const XML_ENTITIES = Object.freeze({ amp: "&", lt: "<", gt: ">", quot: '"', apos: "'" });
+const HEXADECIMAL_RADIX = 16;
+const DECIMAL_RADIX = 10;
+function decodeXmlText(value) {
+  return value.replace(/&(#x[\da-f]+|#\d+|\w+);/gi, (entity, code) => {
+    if (code[0] === "#") {
+      const isHexadecimal = code[1].toLowerCase() === "x";
+      return String.fromCodePoint(parseInt(code.slice(isHexadecimal ? 2 : 1), isHexadecimal ? HEXADECIMAL_RADIX : DECIMAL_RADIX));
+    }
+    return XML_ENTITIES[code] ?? entity;
+  });
+}
+function elementsOf(xmlText) {
+  const elements = [];
+  for (const [, name, attributesText] of xmlText.matchAll(TAG_PATTERN)) {
+    const attributes = {};
+    for (const [, attributeName, doubleQuoted, singleQuoted] of attributesText.matchAll(ATTRIBUTE_PATTERN)) {
+      attributes[attributeName] = decodeXmlText(doubleQuoted ?? singleQuoted);
+    }
+    elements.push({ name, attributes });
+  }
+  return elements;
+}
+function readCfdi(xmlText) {
+  const elements = elementsOf(xmlText ?? "");
+  const first = (name) => elements.find((element) => element.name === name)?.attributes;
+  const voucher = first("Comprobante");
+  const issuer = first("Emisor");
+  const receiver = first("Receptor");
+  if (!voucher || !issuer || !receiver) {
+    return null;
+  }
+  const totals = elements.find((element) => element.name === "Impuestos" && ("TotalImpuestosTrasladados" in element.attributes || "TotalImpuestosRetenidos" in element.attributes))?.attributes ?? {};
+  const stamp = first("TimbreFiscalDigital");
+  return {
+    version: voucher.Version ?? voucher.version ?? null,
+    series: voucher.Serie ?? null,
+    folio: voucher.Folio ?? null,
+    issuedAt: voucher.Fecha ?? null,
+    voucherType: voucher.TipoDeComprobante ?? null,
+    paymentMethod: voucher.MetodoPago ?? null,
+    paymentForm: voucher.FormaPago ?? null,
+    currency: voucher.Moneda ?? null,
+    exchangeRate: voucher.TipoCambio ?? null,
+    subtotal: voucher.SubTotal ?? null,
+    discount: voucher.Descuento ?? null,
+    total: voucher.Total ?? null,
+    placeOfIssue: voucher.LugarExpedicion ?? null,
+    issuer: { rfc: issuer.Rfc ?? null, name: issuer.Nombre ?? null, taxRegime: issuer.RegimenFiscal ?? null },
+    receiver: {
+      rfc: receiver.Rfc ?? null,
+      name: receiver.Nombre ?? null,
+      cfdiUse: receiver.UsoCFDI ?? null,
+      taxRegime: receiver.RegimenFiscalReceptor ?? null,
+      postalCode: receiver.DomicilioFiscalReceptor ?? null
+    },
+    concepts: elements.filter((element) => element.name === "Concepto").map(({ attributes }) => ({
+      productCode: attributes.ClaveProdServ ?? null,
+      quantity: attributes.Cantidad ?? null,
+      unitCode: attributes.ClaveUnidad ?? null,
+      description: attributes.Descripcion ?? null,
+      unitValue: attributes.ValorUnitario ?? null,
+      amount: attributes.Importe ?? null
+    })),
+    taxes: { transferred: totals.TotalImpuestosTrasladados ?? null, withheld: totals.TotalImpuestosRetenidos ?? null },
+    // sin timbre todavía no es factura ante el SAT: no tiene folio fiscal
+    stamp: stamp ? { uuid: stamp.UUID?.toUpperCase() ?? null, stampedAt: stamp.FechaTimbrado ?? null, certifierRfc: stamp.RfcProvCertif ?? null } : null
+  };
+}
+async function readCfdiFile(file) {
+  return readCfdi(await file.text());
+}
+export {
+  CFDI_VOUCHER_TYPE,
+  readCfdi,
+  readCfdiFile
+};
+//# sourceMappingURL=cfdiReader.js.map

package/dist/mexico/cfdiReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cfdiReader.js","sources":["../../src/mexico/cfdiReader.js"],"sourcesContent":["// Lo que dice una factura electrónica (el XML del CFDI 3.3 o 4.0), leído en el navegador sin subirla: quién la emitió, a\n// quién, cuánto, de qué tipo, sus conceptos y su folio fiscal (UUID) si ya está timbrada. Sirve para revisar antes de cargar\n// (el RFC del receptor es el de la empresa, no se cargó dos veces) y enseñar el resumen.\n//\n// Los datos del CFDI viven en los ATRIBUTOS de sus elementos (Comprobante, Emisor, Receptor, Concepto, TimbreFiscalDigital),\n// así que basta leer las etiquetas y sus atributos: sin DOMParser (no existe en Node, donde corren las pruebas) ni librerías.\n// El prefijo del espacio de nombres (cfdi:, tfd:) no importa: se busca por el nombre del elemento.\n//\n// No revisa el sello ni pregunta al SAT si está vigente: eso es del servidor.\n//\n// Los montos se quedan en TEXTO tal como vienen ('1160.00'): así los lee Money sin redondeos de float.\n//\n// Puro (sin React): se prueba con node (cfdiReader.test.js).\n//\n// Genérico del paquete: function (regla de la casa).\n\n/**\n * Una factura leída: los montos en texto, como vienen en el XML.\n *\n * @typedef {object} Cfdi\n * @property {string|null} version\n * @property {string|null} series\n * @property {string|null} folio\n * @property {string|null} issuedAt\n * @property {string|null} voucherType CFDI_VOUCHER_TYPE\n * @property {string|null} paymentMethod\n * @property {string|null} paymentForm\n * @property {string|null} currency\n * @property {string|null} exchangeRate\n * @property {string|null} subtotal\n * @property {string|null} discount\n * @property {string|null} total\n * @property {string|null} placeOfIssue\n * @property {{rfc: string|null, name: string|null, taxRegime: string|null}} issuer\n * @property {{rfc: string|null, name: string|null, cfdiUse: string|null, taxRegime: string|null, postalCode: string|null}} receiver\n * @property {Array<{productCode: string|null, quantity: string|null, unitCode: string|null, description: string|null, unitValue: string|null, amount: string|null}>} concepts\n * @property {{transferred: string|null, withheld: string|null}} taxes\n * @property {{uuid: string|null, stampedAt: string|null, certifierRfc: string|null}|null} stamp null: sin timbre del SAT\n */\n\n/** El tipo de comprobante (TipoDeComprobante): ingreso, egreso, traslado, nómina o pago. */\nexport const CFDI_VOUCHER_TYPE = Object.freeze({income: 'I', expense: 'E', transfer: 'T', payroll: 'N', payment: 'P'});\n\n// una etiqueta de apertura con sus atributos (las de cierre y los comentarios no traen datos)\nconst TAG_PATTERN = /<(?:[A-Za-z_][\\w.-]*:)?([A-Za-z_][\\w.-]*)((?:\\s+[\\w:.-]+\\s*=\\s*(?:\"[^\"]*\"|'[^']*'))*)\\s*\\/?>/g;\nconst ATTRIBUTE_PATTERN = /([\\w:.-]+)\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)')/g;\nconst XML_ENTITIES = Object.freeze({amp: '&', lt: '<', gt: '>', quot: '\"', apos: \"'\"});\nconst HEXADECIMAL_RADIX = 16;\nconst DECIMAL_RADIX = 10;\n\n/**\n * Un valor de atributo con sus entidades de XML ya cambiadas (&amp; → &, &#241; → ñ).\n *\n * @param {string} value\n * @returns {string}\n */\nfunction decodeXmlText(value) {\n    return value.replace(/&(#x[\\da-f]+|#\\d+|\\w+);/gi, (entity, code) => {\n        if (code[0] === '#') {\n            const isHexadecimal = code[1].toLowerCase() === 'x';\n            return String.fromCodePoint(parseInt(code.slice(isHexadecimal ? 2 : 1), isHexadecimal ? HEXADECIMAL_RADIX : DECIMAL_RADIX));\n        }\n        return XML_ENTITIES[code] ?? entity;\n    });\n}\n\n/**\n * Los elementos del XML, en orden, con su nombre (sin prefijo) y sus atributos.\n *\n * @param {string} xmlText\n * @returns {Array<{name: string, attributes: Record<string, string>}>}\n */\nfunction elementsOf(xmlText) {\n    const elements = [];\n    for (const [, name, attributesText] of xmlText.matchAll(TAG_PATTERN)) {\n        const attributes = {};\n        for (const [, attributeName, doubleQuoted, singleQuoted] of attributesText.matchAll(ATTRIBUTE_PATTERN)) {\n            attributes[attributeName] = decodeXmlText(doubleQuoted ?? singleQuoted);\n        }\n        elements.push({name, attributes});\n    }\n    return elements;\n}\n\n/**\n * Lee el XML de un CFDI.\n *\n * @param {string} xmlText\n * @returns {Cfdi|null} null si el XML no es un CFDI (no trae su Comprobante con Emisor y Receptor)\n */\nexport function readCfdi(xmlText) {\n    const elements = elementsOf(xmlText ?? '');\n    const first = (name) => elements.find((element) => element.name === name)?.attributes;\n    const voucher = first('Comprobante');\n    const issuer = first('Emisor');\n    const receiver = first('Receptor');\n    // guard clause: otro XML (una addenda suelta, un acuse) no es una factura\n    if (!voucher || !issuer || !receiver) {\n        return null;\n    }\n    // los impuestos del comprobante son los que traen los totales (los de cada concepto no)\n    const totals = elements.find((element) => element.name === 'Impuestos'\n        && ('TotalImpuestosTrasladados' in element.attributes || 'TotalImpuestosRetenidos' in element.attributes))?.attributes ?? {};\n    const stamp = first('TimbreFiscalDigital');\n\n    return {\n        version: voucher.Version ?? voucher.version ?? null,\n        series: voucher.Serie ?? null,\n        folio: voucher.Folio ?? null,\n        issuedAt: voucher.Fecha ?? null,\n        voucherType: voucher.TipoDeComprobante ?? null,\n        paymentMethod: voucher.MetodoPago ?? null,\n        paymentForm: voucher.FormaPago ?? null,\n        currency: voucher.Moneda ?? null,\n        exchangeRate: voucher.TipoCambio ?? null,\n        subtotal: voucher.SubTotal ?? null,\n        discount: voucher.Descuento ?? null,\n        total: voucher.Total ?? null,\n        placeOfIssue: voucher.LugarExpedicion ?? null,\n        issuer: {rfc: issuer.Rfc ?? null, name: issuer.Nombre ?? null, taxRegime: issuer.RegimenFiscal ?? null},\n        receiver: {\n            rfc: receiver.Rfc ?? null, name: receiver.Nombre ?? null, cfdiUse: receiver.UsoCFDI ?? null,\n            taxRegime: receiver.RegimenFiscalReceptor ?? null, postalCode: receiver.DomicilioFiscalReceptor ?? null,\n        },\n        concepts: elements.filter((element) => element.name === 'Concepto').map(({attributes}) => ({\n            productCode: attributes.ClaveProdServ ?? null,\n            quantity: attributes.Cantidad ?? null,\n            unitCode: attributes.ClaveUnidad ?? null,\n            description: attributes.Descripcion ?? null,\n            unitValue: attributes.ValorUnitario ?? null,\n            amount: attributes.Importe ?? null,\n        })),\n        taxes: {transferred: totals.TotalImpuestosTrasladados ?? null, withheld: totals.TotalImpuestosRetenidos ?? null},\n        // sin timbre todavía no es factura ante el SAT: no tiene folio fiscal\n        stamp: stamp\n            ? {uuid: stamp.UUID?.toUpperCase() ?? null, stampedAt: stamp.FechaTimbrado ?? null, certifierRfc: stamp.RfcProvCertif ?? null}\n            : null,\n    };\n}\n\n/**\n * Lee el CFDI de un archivo elegido (un File o un Blob).\n *\n * @param {Blob} file\n * @returns {Promise<Cfdi|null>} lo de readCfdi\n */\nexport async function readCfdiFile(file) {\n    return readCfdi(await file.text());\n}\n"],"names":[],"mappings":"AAyCY,MAAC,oBAAoB,OAAO,OAAO,EAAC,QAAQ,KAAK,SAAS,KAAK,UAAU,KAAK,SAAS,KAAK,SAAS,IAAG,CAAC;AAGrH,MAAM,cAAc;AACpB,MAAM,oBAAoB;AAC1B,MAAM,eAAe,OAAO,OAAO,EAAC,KAAK,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,MAAM,IAAG,CAAC;AACrF,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AAQtB,SAAS,cAAc,OAAO;AAC1B,SAAO,MAAM,QAAQ,6BAA6B,CAAC,QAAQ,SAAS;AAChE,QAAI,KAAK,CAAC,MAAM,KAAK;AACjB,YAAM,gBAAgB,KAAK,CAAC,EAAE,YAAW,MAAO;AAChD,aAAO,OAAO,cAAc,SAAS,KAAK,MAAM,gBAAgB,IAAI,CAAC,GAAG,gBAAgB,oBAAoB,aAAa,CAAC;AAAA,IAC9H;AACA,WAAO,aAAa,IAAI,KAAK;AAAA,EACjC,CAAC;AACL;AAQA,SAAS,WAAW,SAAS;AACzB,QAAM,WAAW,CAAA;AACjB,aAAW,CAAA,EAAG,MAAM,cAAc,KAAK,QAAQ,SAAS,WAAW,GAAG;AAClE,UAAM,aAAa,CAAA;AACnB,eAAW,CAAA,EAAG,eAAe,cAAc,YAAY,KAAK,eAAe,SAAS,iBAAiB,GAAG;AACpG,iBAAW,aAAa,IAAI,cAAc,gBAAgB,YAAY;AAAA,IAC1E;AACA,aAAS,KAAK,EAAC,MAAM,WAAU,CAAC;AAAA,EACpC;AACA,SAAO;AACX;AAQO,SAAS,SAAS,SAAS;AAC9B,QAAM,WAAW,WAAW,WAAW,EAAE;AACzC,QAAM,QAAQ,CAAC,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,SAAS,IAAI,GAAG;AAC3E,QAAM,UAAU,MAAM,aAAa;AACnC,QAAM,SAAS,MAAM,QAAQ;AAC7B,QAAM,WAAW,MAAM,UAAU;AAEjC,MAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU;AAClC,WAAO;AAAA,EACX;AAEA,QAAM,SAAS,SAAS,KAAK,CAAC,YAAY,QAAQ,SAAS,gBACnD,+BAA+B,QAAQ,cAAc,6BAA6B,QAAQ,WAAW,GAAG,cAAc,CAAA;AAC9H,QAAM,QAAQ,MAAM,qBAAqB;AAEzC,SAAO;AAAA,IACH,SAAS,QAAQ,WAAW,QAAQ,WAAW;AAAA,IAC/C,QAAQ,QAAQ,SAAS;AAAA,IACzB,OAAO,QAAQ,SAAS;AAAA,IACxB,UAAU,QAAQ,SAAS;AAAA,IAC3B,aAAa,QAAQ,qBAAqB;AAAA,IAC1C,eAAe,QAAQ,cAAc;AAAA,IACrC,aAAa,QAAQ,aAAa;AAAA,IAClC,UAAU,QAAQ,UAAU;AAAA,IAC5B,cAAc,QAAQ,cAAc;AAAA,IACpC,UAAU,QAAQ,YAAY;AAAA,IAC9B,UAAU,QAAQ,aAAa;AAAA,IAC/B,OAAO,QAAQ,SAAS;AAAA,IACxB,cAAc,QAAQ,mBAAmB;AAAA,IACzC,QAAQ,EAAC,KAAK,OAAO,OAAO,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,OAAO,iBAAiB,KAAI;AAAA,IACtG,UAAU;AAAA,MACN,KAAK,SAAS,OAAO;AAAA,MAAM,MAAM,SAAS,UAAU;AAAA,MAAM,SAAS,SAAS,WAAW;AAAA,MACvF,WAAW,SAAS,yBAAyB;AAAA,MAAM,YAAY,SAAS,2BAA2B;AAAA,IAC/G;AAAA,IACQ,UAAU,SAAS,OAAO,CAAC,YAAY,QAAQ,SAAS,UAAU,EAAE,IAAI,CAAC,EAAC,WAAU,OAAO;AAAA,MACvF,aAAa,WAAW,iBAAiB;AAAA,MACzC,UAAU,WAAW,YAAY;AAAA,MACjC,UAAU,WAAW,eAAe;AAAA,MACpC,aAAa,WAAW,eAAe;AAAA,MACvC,WAAW,WAAW,iBAAiB;AAAA,MACvC,QAAQ,WAAW,WAAW;AAAA,IAC1C,EAAU;AAAA,IACF,OAAO,EAAC,aAAa,OAAO,6BAA6B,MAAM,UAAU,OAAO,2BAA2B,KAAI;AAAA;AAAA,IAE/G,OAAO,QACD,EAAC,MAAM,MAAM,MAAM,YAAW,KAAM,MAAM,WAAW,MAAM,iBAAiB,MAAM,cAAc,MAAM,iBAAiB,KAAI,IAC3H;AAAA,EACd;AACA;AAQO,eAAe,aAAa,MAAM;AACrC,SAAO,SAAS,MAAM,KAAK,MAAM;AACrC;"}

package/dist/mexico/derReader.js

@@ -0,0 +1,81 @@
+const DER_TAG = Object.freeze({
+  integer: 2,
+  objectIdentifier: 6,
+  utf8String: 12,
+  printableString: 19,
+  teletexString: 20,
+  ia5String: 22,
+  utcTime: 23,
+  generalizedTime: 24,
+  bmpString: 30,
+  sequence: 48,
+  set: 49
+});
+const CONSTRUCTED_BIT = 32;
+const LONG_LENGTH_BIT = 128;
+const LOW_SEVEN_BITS = 127;
+const OID_BASE = 128;
+const OID_FIRST_ARC_DIVISOR = 40;
+function readDerNode(bytes, offset = 0) {
+  const tag = bytes[offset];
+  let length = bytes[offset + 1];
+  let contentStart = offset + 2;
+  if (length & LONG_LENGTH_BIT) {
+    const lengthBytes = length & LOW_SEVEN_BITS;
+    length = 0;
+    for (let index = 0; index < lengthBytes; index += 1) {
+      length = length * 256 + bytes[contentStart + index];
+    }
+    contentStart += lengthBytes;
+  }
+  const end = contentStart + length;
+  if (tag === void 0 || end > bytes.length) {
+    throw new Error("El archivo no es un certificado: se cortó a media pieza");
+  }
+  const content = bytes.subarray(contentStart, end);
+  let children = null;
+  if (tag & CONSTRUCTED_BIT) {
+    children = [];
+    for (let childOffset = 0; childOffset < content.length; ) {
+      const child = readDerNode(content, childOffset);
+      children.push(child);
+      childOffset = child.end;
+    }
+  }
+  return { tag, content, end, children };
+}
+function objectIdentifierOf(content) {
+  const arcs = [Math.floor(content[0] / OID_FIRST_ARC_DIVISOR), content[0] % OID_FIRST_ARC_DIVISOR];
+  let value = 0;
+  for (const byte of content.subarray(1)) {
+    value = value * OID_BASE + (byte & LOW_SEVEN_BITS);
+    if (!(byte & LONG_LENGTH_BIT)) {
+      arcs.push(value);
+      value = 0;
+    }
+  }
+  return arcs.join(".");
+}
+function derTextOf({ tag, content }) {
+  if (tag === DER_TAG.bmpString) {
+    return new TextDecoder("utf-16be").decode(content);
+  }
+  if (tag === DER_TAG.teletexString) {
+    return new TextDecoder("latin1").decode(content);
+  }
+  return new TextDecoder("utf-8").decode(content);
+}
+function derTimeOf(node) {
+  const text = derTextOf(node);
+  const fullYearText = node.tag === DER_TAG.utcTime ? `${Number(text.slice(0, 2)) < 50 ? "20" : "19"}${text}` : text;
+  const [year, month, day, hour, minute, second] = [0, 4, 6, 8, 10, 12].map((start, index) => Number(fullYearText.slice(start, index === 0 ? 4 : start + 2)));
+  return new Date(Date.UTC(year, month - 1, day, hour, minute, second)).toISOString();
+}
+export {
+  DER_TAG,
+  derTextOf,
+  derTimeOf,
+  objectIdentifierOf,
+  readDerNode
+};
+//# sourceMappingURL=derReader.js.map

package/dist/mexico/derReader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derReader.js","sources":["../../src/mexico/derReader.js"],"sourcesContent":["// Lo mínimo para leer un archivo DER (el formato binario de los certificados .cer): cada pieza es etiqueta, largo y\n// contenido, y las que agrupan (SEQUENCE, SET) traen piezas adentro. No valida firmas ni descifra nada: solo lee.\n//\n// Lo usa certificateReader.js para sacar del .cer de la e.firma el RFC, el nombre, el número de certificado y la vigencia.\n// Va aquí en lugar de una librería (las de certificados pesan cientos de kB) porque leer es poco: lo que cuesta es descifrar\n// la llave, y eso no se hace aquí.\n//\n// Puro (sin React): se prueba con node junto con certificateReader.test.js.\n//\n// Genérico del paquete: function (regla de la casa).\n\n/** Las etiquetas DER que se leen. */\nexport const DER_TAG = Object.freeze({\n    integer: 0x02,\n    objectIdentifier: 0x06,\n    utf8String: 0x0c,\n    printableString: 0x13,\n    teletexString: 0x14,\n    ia5String: 0x16,\n    utcTime: 0x17,\n    generalizedTime: 0x18,\n    bmpString: 0x1e,\n    sequence: 0x30,\n    set: 0x31,\n});\n// el bit que dice que la pieza agrupa otras (SEQUENCE, SET, los [0] explícitos)\nconst CONSTRUCTED_BIT = 0x20;\n// el bit alto del primer byte del largo: los siguientes N bytes dicen el largo\nconst LONG_LENGTH_BIT = 0x80;\nconst LOW_SEVEN_BITS = 0x7f;\nconst OID_BASE = 128;\nconst OID_FIRST_ARC_DIVISOR = 40;\n\n/**\n * Una pieza DER y, si agrupa otras, sus piezas.\n *\n * @param {Uint8Array} bytes\n * @param {number} [offset]\n * @returns {{tag: number, content: Uint8Array, end: number, children: Array<object>|null}}\n */\nexport function readDerNode(bytes, offset = 0) {\n    const tag = bytes[offset];\n    let length = bytes[offset + 1];\n    let contentStart = offset + 2;\n    if (length & LONG_LENGTH_BIT) {\n        const lengthBytes = length & LOW_SEVEN_BITS;\n        length = 0;\n        for (let index = 0; index < lengthBytes; index += 1) {\n            length = (length * 256) + bytes[contentStart + index];\n        }\n        contentStart += lengthBytes;\n    }\n    const end = contentStart + length;\n    if (tag === undefined || end > bytes.length) {\n        throw new Error('El archivo no es un certificado: se cortó a media pieza');\n    }\n    const content = bytes.subarray(contentStart, end);\n    let children = null;\n    if (tag & CONSTRUCTED_BIT) {\n        children = [];\n        for (let childOffset = 0; childOffset < content.length;) {\n            const child = readDerNode(content, childOffset);\n            children.push(child);\n            childOffset = child.end;\n        }\n    }\n    return {tag, content, end, children};\n}\n\n/**\n * Un identificador de objeto (OID) como se escribe: '2.5.4.45'.\n *\n * @param {Uint8Array} content\n * @returns {string}\n */\nexport function objectIdentifierOf(content) {\n    const arcs = [Math.floor(content[0] / OID_FIRST_ARC_DIVISOR), content[0] % OID_FIRST_ARC_DIVISOR];\n    let value = 0;\n    for (const byte of content.subarray(1)) {\n        value = (value * OID_BASE) + (byte & LOW_SEVEN_BITS);\n        if (!(byte & LONG_LENGTH_BIT)) {\n            arcs.push(value);\n            value = 0;\n        }\n    }\n    return arcs.join('.');\n}\n\n/**\n * El texto de una pieza de texto (UTF-8, imprimible, latin-1 o UTF-16 de los nombres con acentos).\n *\n * @param {{tag: number, content: Uint8Array}} node\n * @returns {string}\n */\nexport function derTextOf({tag, content}) {\n    if (tag === DER_TAG.bmpString) {\n        return new TextDecoder('utf-16be').decode(content);\n    }\n    if (tag === DER_TAG.teletexString) {\n        return new TextDecoder('latin1').decode(content);\n    }\n    return new TextDecoder('utf-8').decode(content);\n}\n\n/**\n * Una fecha de certificado como instante ISO: UTCTime 'AAMMDDhhmmssZ' (de 1950 a 2049) o GeneralizedTime 'AAAAMMDDhhmmssZ'.\n *\n * @param {{tag: number, content: Uint8Array}} node\n * @returns {string} '2030-11-02T04:56:30.000Z'\n */\nexport function derTimeOf(node) {\n    const text = derTextOf(node);\n    const fullYearText = node.tag === DER_TAG.utcTime\n        ? `${Number(text.slice(0, 2)) < 50 ? '20' : '19'}${text}`\n        : text;\n    const [year, month, day, hour, minute, second] = [0, 4, 6, 8, 10, 12].map((start, index) => Number(fullYearText.slice(start, index === 0 ? 4 : start + 2)));\n    return new Date(Date.UTC(year, month - 1, day, hour, minute, second)).toISOString();\n}\n"],"names":[],"mappings":"AAYY,MAAC,UAAU,OAAO,OAAO;AAAA,EACjC,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,WAAW;AAAA,EACX,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,KAAK;AACT,CAAC;AAED,MAAM,kBAAkB;AAExB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AACvB,MAAM,WAAW;AACjB,MAAM,wBAAwB;AASvB,SAAS,YAAY,OAAO,SAAS,GAAG;AAC3C,QAAM,MAAM,MAAM,MAAM;AACxB,MAAI,SAAS,MAAM,SAAS,CAAC;AAC7B,MAAI,eAAe,SAAS;AAC5B,MAAI,SAAS,iBAAiB;AAC1B,UAAM,cAAc,SAAS;AAC7B,aAAS;AACT,aAAS,QAAQ,GAAG,QAAQ,aAAa,SAAS,GAAG;AACjD,eAAU,SAAS,MAAO,MAAM,eAAe,KAAK;AAAA,IACxD;AACA,oBAAgB;AAAA,EACpB;AACA,QAAM,MAAM,eAAe;AAC3B,MAAI,QAAQ,UAAa,MAAM,MAAM,QAAQ;AACzC,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC7E;AACA,QAAM,UAAU,MAAM,SAAS,cAAc,GAAG;AAChD,MAAI,WAAW;AACf,MAAI,MAAM,iBAAiB;AACvB,eAAW,CAAA;AACX,aAAS,cAAc,GAAG,cAAc,QAAQ,UAAS;AACrD,YAAM,QAAQ,YAAY,SAAS,WAAW;AAC9C,eAAS,KAAK,KAAK;AACnB,oBAAc,MAAM;AAAA,IACxB;AAAA,EACJ;AACA,SAAO,EAAC,KAAK,SAAS,KAAK,SAAQ;AACvC;AAQO,SAAS,mBAAmB,SAAS;AACxC,QAAM,OAAO,CAAC,KAAK,MAAM,QAAQ,CAAC,IAAI,qBAAqB,GAAG,QAAQ,CAAC,IAAI,qBAAqB;AAChG,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ,SAAS,CAAC,GAAG;AACpC,YAAS,QAAQ,YAAa,OAAO;AACrC,QAAI,EAAE,OAAO,kBAAkB;AAC3B,WAAK,KAAK,KAAK;AACf,cAAQ;AAAA,IACZ;AAAA,EACJ;AACA,SAAO,KAAK,KAAK,GAAG;AACxB;AAQO,SAAS,UAAU,EAAC,KAAK,QAAO,GAAG;AACtC,MAAI,QAAQ,QAAQ,WAAW;AAC3B,WAAO,IAAI,YAAY,UAAU,EAAE,OAAO,OAAO;AAAA,EACrD;AACA,MAAI,QAAQ,QAAQ,eAAe;AAC/B,WAAO,IAAI,YAAY,QAAQ,EAAE,OAAO,OAAO;AAAA,EACnD;AACA,SAAO,IAAI,YAAY,OAAO,EAAE,OAAO,OAAO;AAClD;AAQO,SAAS,UAAU,MAAM;AAC5B,QAAM,OAAO,UAAU,IAAI;AAC3B,QAAM,eAAe,KAAK,QAAQ,QAAQ,UACpC,GAAG,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,IAAI,KACrD;AACN,QAAM,CAAC,MAAM,OAAO,KAAK,MAAM,QAAQ,MAAM,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,UAAU,OAAO,aAAa,MAAM,OAAO,UAAU,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC;AAC1J,SAAO,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,KAAK,MAAM,QAAQ,MAAM,CAAC,EAAE,YAAW;AACrF;"}

package/dist/mexico/efirmaKey.js

@@ -0,0 +1,51 @@
+import { readDerNode, objectIdentifierOf } from "./derReader.js";
+const EFIRMA_KEY_PROBLEM = Object.freeze({ notKey: "notKey", wrongPassword: "wrongPassword", otherCertificate: "otherCertificate" });
+const PBES2_OBJECT_IDENTIFIER = "1.2.840.113549.1.5.13";
+const HEXADECIMAL_RADIX = 16;
+class EfirmaKeyError extends Error {
+  /**
+   * @param {string} reason EFIRMA_KEY_PROBLEM
+   */
+  constructor(reason) {
+    super(`La e.firma no pasó: ${reason}`);
+    this.name = "EfirmaKeyError";
+    this.reason = reason;
+  }
+}
+function hexOf(bytes) {
+  return Array.from(bytes, (byte) => byte.toString(HEXADECIMAL_RADIX).padStart(2, "0")).join("");
+}
+function isEncryptedPrivateKey(keyBytes) {
+  try {
+    const algorithm = readDerNode(keyBytes).children?.[0]?.children?.[0];
+    return Boolean(algorithm) && objectIdentifierOf(algorithm.content) === PBES2_OBJECT_IDENTIFIER;
+  } catch {
+    return false;
+  }
+}
+async function verifyEfirmaKey({ certificateBytes, keyBytes, password }) {
+  const key = keyBytes instanceof Uint8Array ? keyBytes : new Uint8Array(keyBytes);
+  const certificate = certificateBytes instanceof Uint8Array ? certificateBytes : new Uint8Array(certificateBytes);
+  if (!isEncryptedPrivateKey(key)) {
+    throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.notKey);
+  }
+  const jsrsasignModule = await import("jsrsasign");
+  const { KEYUTIL, KJUR, X509 } = jsrsasignModule.default ?? jsrsasignModule;
+  let privateKey;
+  try {
+    privateKey = KEYUTIL.getKey(KJUR.asn1.ASN1Util.getPEMStringFromHex(hexOf(key), "ENCRYPTED PRIVATE KEY"), password);
+  } catch {
+    throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.wrongPassword);
+  }
+  const x509 = new X509();
+  x509.readCertHex(hexOf(certificate));
+  if (!x509.getPublicKey().n?.equals(privateKey.n)) {
+    throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.otherCertificate);
+  }
+}
+export {
+  EFIRMA_KEY_PROBLEM,
+  EfirmaKeyError,
+  verifyEfirmaKey
+};
+//# sourceMappingURL=efirmaKey.js.map

package/dist/mexico/efirmaKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"efirmaKey.js","sources":["../../src/mexico/efirmaKey.js"],"sourcesContent":["// Abrir la llave privada (.key) de una e.firma con su contraseña y comprobar que es la del certificado (.cer), en el\n// navegador y sin mandar nada a ningún lado.\n//\n// Va con jsrsasign porque la llave del SAT viene cifrada (PKCS#8 con PBES2 y 3DES) y el navegador no trae 3DES. Se carga\n// hasta que se usa (import dinámico): la pantalla no la baja al abrir, solo al picar «Revisar».\n//\n// Los motivos de un «no» se distinguen (EFIRMA_KEY_PROBLEM): el archivo no es una llave, la contraseña no la abre, o la\n// llave abre pero es de otro certificado.\n//\n// Genérico del paquete: function (regla de la casa). Pruebas en efirmaKey.test.js.\nimport {objectIdentifierOf, readDerNode} from '@/mexico/derReader.js';\n\n/** Por qué no pasó la llave. */\nexport const EFIRMA_KEY_PROBLEM = Object.freeze({notKey: 'notKey', wrongPassword: 'wrongPassword', otherCertificate: 'otherCertificate'});\n\n// el algoritmo con que se cifra una llave PKCS#8 (PBES2): así empieza un .key del SAT\nconst PBES2_OBJECT_IDENTIFIER = '1.2.840.113549.1.5.13';\nconst HEXADECIMAL_RADIX = 16;\n\n/** Un «no» de la llave, con su motivo (reason es uno de EFIRMA_KEY_PROBLEM). */\nexport class EfirmaKeyError extends Error {\n    /**\n     * @param {string} reason EFIRMA_KEY_PROBLEM\n     */\n    constructor(reason) {\n        super(`La e.firma no pasó: ${reason}`);\n        this.name = 'EfirmaKeyError';\n        this.reason = reason;\n    }\n}\n\n/**\n * Los bytes como texto hexadecimal (lo que pide jsrsasign).\n *\n * @param {Uint8Array} bytes\n * @returns {string}\n */\nfunction hexOf(bytes) {\n    return Array.from(bytes, (byte) => byte.toString(HEXADECIMAL_RADIX).padStart(2, '0')).join('');\n}\n\n/**\n * ¿Los bytes son una llave PKCS#8 cifrada con PBES2? (sin abrirla)\n *\n * @param {Uint8Array} keyBytes\n * @returns {boolean}\n */\nfunction isEncryptedPrivateKey(keyBytes) {\n    try {\n        const algorithm = readDerNode(keyBytes).children?.[0]?.children?.[0];\n        return Boolean(algorithm) && objectIdentifierOf(algorithm.content) === PBES2_OBJECT_IDENTIFIER;\n    } catch {\n        return false;\n    }\n}\n\n/**\n * Abre la llave con la contraseña y la compara con el certificado. Si todo está bien no regresa nada; si no, truena con\n * EfirmaKeyError y su motivo.\n *\n * @param {{certificateBytes: ArrayBuffer|Uint8Array, keyBytes: ArrayBuffer|Uint8Array, password: string}} efirma\n * @returns {Promise<void>}\n */\nexport async function verifyEfirmaKey({certificateBytes, keyBytes, password}) {\n    const key = keyBytes instanceof Uint8Array ? keyBytes : new Uint8Array(keyBytes);\n    const certificate = certificateBytes instanceof Uint8Array ? certificateBytes : new Uint8Array(certificateBytes);\n    if (!isEncryptedPrivateKey(key)) {\n        throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.notKey);\n    }\n    // jsrsasign se publica como CommonJS: según el empaquetador llega en default o suelta\n    const jsrsasignModule = await import('jsrsasign');\n    const {KEYUTIL, KJUR, X509} = jsrsasignModule.default ?? jsrsasignModule;\n\n    let privateKey;\n    try {\n        privateKey = KEYUTIL.getKey(KJUR.asn1.ASN1Util.getPEMStringFromHex(hexOf(key), 'ENCRYPTED PRIVATE KEY'), password);\n    } catch {\n        // con otra contraseña el descifrado da basura y jsrsasign no la reconoce como llave\n        throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.wrongPassword);\n    }\n    const x509 = new X509();\n    x509.readCertHex(hexOf(certificate));\n    // la llave es la del certificado si su módulo RSA es el mismo que el de la llave pública del certificado\n    if (!x509.getPublicKey().n?.equals(privateKey.n)) {\n        throw new EfirmaKeyError(EFIRMA_KEY_PROBLEM.otherCertificate);\n    }\n}\n"],"names":[],"mappings":";AAaY,MAAC,qBAAqB,OAAO,OAAO,EAAC,QAAQ,UAAU,eAAe,iBAAiB,kBAAkB,mBAAkB,CAAC;AAGxI,MAAM,0BAA0B;AAChC,MAAM,oBAAoB;AAGnB,MAAM,uBAAuB,MAAM;AAAA;AAAA;AAAA;AAAA,EAItC,YAAY,QAAQ;AAChB,UAAM,uBAAuB,MAAM,EAAE;AACrC,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAClB;AACJ;AAQA,SAAS,MAAM,OAAO;AAClB,SAAO,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,iBAAiB,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACjG;AAQA,SAAS,sBAAsB,UAAU;AACrC,MAAI;AACA,UAAM,YAAY,YAAY,QAAQ,EAAE,WAAW,CAAC,GAAG,WAAW,CAAC;AACnE,WAAO,QAAQ,SAAS,KAAK,mBAAmB,UAAU,OAAO,MAAM;AAAA,EAC3E,QAAQ;AACJ,WAAO;AAAA,EACX;AACJ;AASO,eAAe,gBAAgB,EAAC,kBAAkB,UAAU,SAAQ,GAAG;AAC1E,QAAM,MAAM,oBAAoB,aAAa,WAAW,IAAI,WAAW,QAAQ;AAC/E,QAAM,cAAc,4BAA4B,aAAa,mBAAmB,IAAI,WAAW,gBAAgB;AAC/G,MAAI,CAAC,sBAAsB,GAAG,GAAG;AAC7B,UAAM,IAAI,eAAe,mBAAmB,MAAM;AAAA,EACtD;AAEA,QAAM,kBAAkB,MAAM,OAAO,WAAW;AAChD,QAAM,EAAC,SAAS,MAAM,KAAI,IAAI,gBAAgB,WAAW;AAEzD,MAAI;AACJ,MAAI;AACA,iBAAa,QAAQ,OAAO,KAAK,KAAK,SAAS,oBAAoB,MAAM,GAAG,GAAG,uBAAuB,GAAG,QAAQ;AAAA,EACrH,QAAQ;AAEJ,UAAM,IAAI,eAAe,mBAAmB,aAAa;AAAA,EAC7D;AACA,QAAM,OAAO,IAAI,KAAI;AACrB,OAAK,YAAY,MAAM,WAAW,CAAC;AAEnC,MAAI,CAAC,KAAK,aAAY,EAAG,GAAG,OAAO,WAAW,CAAC,GAAG;AAC9C,UAAM,IAAI,eAAe,mBAAmB,gBAAgB;AAAA,EAChE;AACJ;"}