@taxora/sdk 1.2.0 → 1.3.0

package/dist/index.cjs

@@ -26,9 +26,11 @@ __export(index_exports, {
   AuthenticationException: () => AuthenticationException,
   CompanyAddress: () => CompanyAddress,
   CompanyEndpoint: () => CompanyEndpoint,
+  ComplianceDocumentType: () => ComplianceDocumentType,
   ComplianceEnrollment: () => ComplianceEnrollment,
   ComplianceEnrollmentPage: () => ComplianceEnrollmentPage,
   ComplianceEnrollmentStatus: () => ComplianceEnrollmentStatus,
+  ComplianceService: () => ComplianceService,
   ComplianceTaxReport: () => ComplianceTaxReport,
   ComplianceTaxReportPage: () => ComplianceTaxReportPage,
   ComplianceTaxReportState: () => ComplianceTaxReportState,
@@ -36,6 +38,7 @@ __export(index_exports, {
   ComplianceTransactionPage: () => ComplianceTransactionPage,
   ComplianceTransactionState: () => ComplianceTransactionState,
   ComplianceTransactionType: () => ComplianceTransactionType,
+  DEFAULT_WEBHOOK_TOLERANCE_SECONDS: () => DEFAULT_WEBHOOK_TOLERANCE_SECONDS,
   EReportingEndpoint: () => EReportingEndpoint,
   Environment: () => Environment,
   FetchHttpClient: () => FetchHttpClient,
@@ -44,8 +47,12 @@ __export(index_exports, {
   InMemoryTokenStorage: () => InMemoryTokenStorage,
   Language: () => Language,
   LoginIdentifier: () => LoginIdentifier,
+  NorwegianOrgNumber: () => NorwegianOrgNumber,
+  PeppolLookupResult: () => PeppolLookupResult,
+  PeppolLookupStatus: () => PeppolLookupStatus,
   ProviderDocument: () => ProviderDocument,
   ProviderDocumentLine: () => ProviderDocumentLine,
+  RegistryCompany: () => RegistryCompany,
   RetryPolicy: () => RetryPolicy,
   RevenueStatistics: () => RevenueStatistics,
   ScoreBreakdown: () => ScoreBreakdown,
@@ -70,22 +77,36 @@ __export(index_exports, {
   VatResource: () => VatResource,
   VatState: () => VatState,
   VatValidationAddressInput: () => VatValidationAddressInput,
+  WEBHOOK_ID_HEADER: () => WEBHOOK_ID_HEADER,
+  WEBHOOK_SIGNATURE_HEADER: () => WEBHOOK_SIGNATURE_HEADER,
+  WebhookSignatureVerificationError: () => WebhookSignatureVerificationError,
+  computeWebhookSignature: () => computeWebhookSignature,
+  constructWebhookEvent: () => constructWebhookEvent,
   describeApiError: () => describeApiError,
+  describeComplianceDocumentType: () => describeComplianceDocumentType,
   describeComplianceEnrollmentStatus: () => describeComplianceEnrollmentStatus,
+  describeComplianceService: () => describeComplianceService,
   describeComplianceTaxReportState: () => describeComplianceTaxReportState,
   describeComplianceTransactionState: () => describeComplianceTransactionState,
   describeComplianceTransactionType: () => describeComplianceTransactionType,
+  describePeppolLookupStatus: () => describePeppolLookupStatus,
   describeSmartEnrichmentMode: () => describeSmartEnrichmentMode,
   describeSmartEnrichmentStatus: () => describeSmartEnrichmentStatus,
   describeVatState: () => describeVatState,
+  generateWebhookSignatureHeader: () => generateWebhookSignatureHeader,
   getBaseUrl: () => getBaseUrl,
   getFailedVatStates: () => getFailedVatStates,
+  parseWebhookSignatureHeader: () => parseWebhookSignatureHeader,
+  toComplianceDocumentType: () => toComplianceDocumentType,
   toComplianceEnrollmentStatus: () => toComplianceEnrollmentStatus,
+  toComplianceService: () => toComplianceService,
   toComplianceTaxReportState: () => toComplianceTaxReportState,
   toComplianceTransactionState: () => toComplianceTransactionState,
   toComplianceTransactionType: () => toComplianceTransactionType,
+  toPeppolLookupStatus: () => toPeppolLookupStatus,
   toSmartEnrichmentMode: () => toSmartEnrichmentMode,
-  toSmartEnrichmentStatus: () => toSmartEnrichmentStatus
+  toSmartEnrichmentStatus: () => toSmartEnrichmentStatus,
+  verifyWebhookSignature: () => verifyWebhookSignature
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -414,13 +435,7 @@ async function withResponseRetries(policy, operation, send) {
     if (!policy.shouldRetry(response.status, attempt, retryAfter)) {
       if (attempt > 1 && policy.isRetryable(response.status, retryAfter)) {
         const body = await response.text();
-        const last = new HttpException(
-          describeApiError(body, response.status),
-          response.status,
-          body,
-          {},
-          retryAfter
-        );
+        const last = new HttpException(describeApiError(body, response.status), response.status, body, {}, retryAfter);
         throw HttpException.afterAttempts(operation, attempt, last);
       }
       return response;
@@ -637,6 +652,31 @@ function describeComplianceEnrollmentStatus(status) {
   return DESCRIPTIONS[status];
 }
 
+// src/enums/ComplianceService.ts
+var ComplianceService = {
+  E_REPORTING: "e_reporting",
+  E_INVOICING: "e_invoicing",
+  UNKNOWN: "unknown"
+};
+var VALUES2 = Object.values(ComplianceService);
+function toComplianceService(value) {
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if (VALUES2.includes(normalized)) {
+      return normalized;
+    }
+  }
+  return ComplianceService.UNKNOWN;
+}
+var DESCRIPTIONS2 = {
+  [ComplianceService.E_REPORTING]: "E-reporting of transaction data to the tax authority (France: DGFiP Flux 10).",
+  [ComplianceService.E_INVOICING]: "Structured e-invoices delivered to the buyer (Norway: EHF / Peppol BIS 3.0).",
+  [ComplianceService.UNKNOWN]: "Unknown service."
+};
+function describeComplianceService(service) {
+  return DESCRIPTIONS2[service];
+}
+
 // src/dto/ComplianceEnrollment.ts
 function asString(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
@@ -648,7 +688,7 @@ function asNumber(value) {
   return typeof value === "number" ? value : Number(value ?? 0) || 0;
 }
 var ComplianceEnrollment = class _ComplianceEnrollment {
-  constructor(id, companyId, country, regime, provider, status, statusLabel, statusError, providerAccountId, taxId, companyRegisterId, companyRegisterScheme, regimeConfig, reportingStartDate, notificationEmail, autoSend, createdAt, updatedAt) {
+  constructor(id, companyId, country, regime, provider, status, statusLabel, statusError, providerAccountId, taxId, companyRegisterId, companyRegisterScheme, regimeConfig, reportingStartDate, notificationEmail, autoSend, createdAt, updatedAt, service = ComplianceService.UNKNOWN) {
     this.id = id;
     this.companyId = companyId;
     this.country = country;
@@ -667,6 +707,7 @@ var ComplianceEnrollment = class _ComplianceEnrollment {
     this.autoSend = autoSend;
     this.createdAt = createdAt;
     this.updatedAt = updatedAt;
+    this.service = service;
   }
   id;
   companyId;
@@ -686,6 +727,7 @@ var ComplianceEnrollment = class _ComplianceEnrollment {
   autoSend;
   createdAt;
   updatedAt;
+  service;
   static fromArray(data) {
     const regimeConfig = typeof data["regime_config"] === "object" && data["regime_config"] !== null && !Array.isArray(data["regime_config"]) ? data["regime_config"] : null;
     return new _ComplianceEnrollment(
@@ -706,7 +748,8 @@ var ComplianceEnrollment = class _ComplianceEnrollment {
       asNullableString(data["notification_email"]),
       data["auto_send"] === true,
       asNullableString(data["created_at"]),
-      asNullableString(data["updated_at"])
+      asNullableString(data["updated_at"]),
+      toComplianceService(data["service"])
     );
   }
 };
@@ -756,17 +799,17 @@ var ComplianceTaxReportState = {
   ERROR: "error",
   UNKNOWN: "unknown"
 };
-var VALUES2 = Object.values(ComplianceTaxReportState);
+var VALUES3 = Object.values(ComplianceTaxReportState);
 function toComplianceTaxReportState(value) {
   if (typeof value === "string") {
     const normalized = value.trim().toLowerCase();
-    if (VALUES2.includes(normalized)) {
+    if (VALUES3.includes(normalized)) {
       return normalized;
     }
   }
   return ComplianceTaxReportState.UNKNOWN;
 }
-var DESCRIPTIONS2 = {
+var DESCRIPTIONS3 = {
   [ComplianceTaxReportState.NEW]: "Created at provider, waiting for the daily ledger batch.",
   [ComplianceTaxReportState.SENT]: "Ledger transmitted to PPF.",
   [ComplianceTaxReportState.ACKNOWLEDGED]: "PPF acknowledged receipt of the ledger.",
@@ -776,7 +819,7 @@ var DESCRIPTIONS2 = {
   [ComplianceTaxReportState.UNKNOWN]: "Unknown state."
 };
 function describeComplianceTaxReportState(state) {
-  return DESCRIPTIONS2[state];
+  return DESCRIPTIONS3[state];
 }
 
 // src/dto/ComplianceTaxReport.ts
@@ -898,6 +941,31 @@ var ComplianceTaxReportPage = class _ComplianceTaxReportPage {
   }
 };
 
+// src/enums/ComplianceDocumentType.ts
+var ComplianceDocumentType = {
+  INVOICE: "invoice",
+  CREDIT_NOTE: "credit_note",
+  UNKNOWN: "unknown"
+};
+var VALUES4 = Object.values(ComplianceDocumentType);
+function toComplianceDocumentType(value) {
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if (VALUES4.includes(normalized)) {
+      return normalized;
+    }
+  }
+  return ComplianceDocumentType.UNKNOWN;
+}
+var DESCRIPTIONS4 = {
+  [ComplianceDocumentType.INVOICE]: "Commercial invoice.",
+  [ComplianceDocumentType.CREDIT_NOTE]: "Credit note correcting a previously issued invoice.",
+  [ComplianceDocumentType.UNKNOWN]: "Unknown document type."
+};
+function describeComplianceDocumentType(type) {
+  return DESCRIPTIONS4[type];
+}
+
 // src/enums/ComplianceTransactionState.ts
 var ComplianceTransactionState = {
   PENDING: "pending",
@@ -906,17 +974,17 @@ var ComplianceTransactionState = {
   ERROR: "error",
   UNKNOWN: "unknown"
 };
-var VALUES3 = Object.values(ComplianceTransactionState);
+var VALUES5 = Object.values(ComplianceTransactionState);
 function toComplianceTransactionState(value) {
   if (typeof value === "string") {
     const normalized = value.trim().toLowerCase();
-    if (VALUES3.includes(normalized)) {
+    if (VALUES5.includes(normalized)) {
       return normalized;
     }
   }
   return ComplianceTransactionState.UNKNOWN;
 }
-var DESCRIPTIONS3 = {
+var DESCRIPTIONS5 = {
   [ComplianceTransactionState.PENDING]: "Recorded locally, not yet submitted to the provider.",
   [ComplianceTransactionState.SENDING]: "Submission to the provider in progress.",
   [ComplianceTransactionState.SUBMITTED]: "Successfully submitted to the provider.",
@@ -924,7 +992,7 @@ var DESCRIPTIONS3 = {
   [ComplianceTransactionState.UNKNOWN]: "Unknown state."
 };
 function describeComplianceTransactionState(state) {
-  return DESCRIPTIONS3[state];
+  return DESCRIPTIONS5[state];
 }
 
 // src/enums/ComplianceTransactionType.ts
@@ -936,17 +1004,17 @@ var ComplianceTransactionType = {
   CROSSBORDER_INBOUND: "crossborder_inbound",
   UNKNOWN: "unknown"
 };
-var VALUES4 = Object.values(ComplianceTransactionType);
+var VALUES6 = Object.values(ComplianceTransactionType);
 function toComplianceTransactionType(value) {
   if (typeof value === "string") {
     const normalized = value.trim().toLowerCase();
-    if (VALUES4.includes(normalized)) {
+    if (VALUES6.includes(normalized)) {
       return normalized;
     }
   }
   return ComplianceTransactionType.UNKNOWN;
 }
-var DESCRIPTIONS4 = {
+var DESCRIPTIONS6 = {
   [ComplianceTransactionType.B2C_OUTBOUND]: "Sale to a private person in the merchant country (DGFiP Flux 10.3).",
   [ComplianceTransactionType.B2B_DOMESTIC_OUTBOUND]: "Sale to a domestic business (DGFiP Flux 1, Phase 2).",
   [ComplianceTransactionType.B2B_DOMESTIC_INBOUND]: "Purchase from a domestic business (DGFiP Flux 1, Phase 2).",
@@ -955,7 +1023,7 @@ var DESCRIPTIONS4 = {
   [ComplianceTransactionType.UNKNOWN]: "Unknown transaction type."
 };
 function describeComplianceTransactionType(type) {
-  return DESCRIPTIONS4[type];
+  return DESCRIPTIONS6[type];
 }
 
 // src/dto/ComplianceTransaction.ts
@@ -973,8 +1041,34 @@ function asMoney2(value) {
   if (typeof value === "number" && Number.isFinite(value)) return String(value);
   return "0.00";
 }
+function asNullableNumber2(value) {
+  if (typeof value === "number" && Number.isFinite(value)) return value;
+  if (typeof value === "string" && value.trim() !== "" && Number.isFinite(Number(value))) return Number(value);
+  return null;
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function asRecordList(value) {
+  return Array.isArray(value) ? value.filter((row) => asRecord(row) !== null) : [];
+}
+function toInvoiceLines(providerPayload) {
+  const invoice = asRecord(asRecord(providerPayload)?.["invoice"]);
+  return asRecordList(invoice?.["invoice_lines_attributes"]).map((line) => ({
+    description: asString3(line["description"]),
+    quantity: asNullableNumber2(line["quantity"]),
+    price: asMoney2(line["price"]),
+    unit: asNullableNumber2(line["unit"]),
+    taxes: asRecordList(line["taxes_attributes"]).map((tax) => ({
+      name: asString3(tax["name"]),
+      percent: asNullableNumber2(tax["percent"]),
+      category: asNullableString3(tax["category"]),
+      comment: asNullableString3(tax["comment"])
+    }))
+  }));
+}
 var ComplianceTransaction = class _ComplianceTransaction {
-  constructor(id, companyId, complianceEnrollmentId, country, regime, transactionType, transactionTypeLabel, state, stateLabel, invoiceNumber, invoiceDate, dueDate, currency, subtotal, taxAmount, total, counterpartyName, counterpartyCountry, counterpartyVatNumber, isPaid, paidAt, providerInvoiceId, submissionError, reportedAt, taxReport, createdAt, updatedAt) {
+  constructor(id, companyId, complianceEnrollmentId, country, regime, transactionType, transactionTypeLabel, state, stateLabel, invoiceNumber, invoiceDate, dueDate, currency, subtotal, taxAmount, total, counterpartyName, counterpartyCountry, counterpartyVatNumber, isPaid, paidAt, providerInvoiceId, submissionError, reportedAt, taxReport, createdAt, updatedAt, counterpartyRegisterId = null, counterpartyAddress = null, counterpartyCity = null, counterpartyPostalcode = null, counterpartyEmail = null, buyerReference = null, documentType = ComplianceDocumentType.INVOICE, amendedNumber = null, amendedDate = null, providerState = null, invoiceLines = []) {
     this.id = id;
     this.companyId = companyId;
     this.complianceEnrollmentId = complianceEnrollmentId;
@@ -1002,6 +1096,17 @@ var ComplianceTransaction = class _ComplianceTransaction {
     this.taxReport = taxReport;
     this.createdAt = createdAt;
     this.updatedAt = updatedAt;
+    this.counterpartyRegisterId = counterpartyRegisterId;
+    this.counterpartyAddress = counterpartyAddress;
+    this.counterpartyCity = counterpartyCity;
+    this.counterpartyPostalcode = counterpartyPostalcode;
+    this.counterpartyEmail = counterpartyEmail;
+    this.buyerReference = buyerReference;
+    this.documentType = documentType;
+    this.amendedNumber = amendedNumber;
+    this.amendedDate = amendedDate;
+    this.providerState = providerState;
+    this.invoiceLines = invoiceLines;
   }
   id;
   companyId;
@@ -1030,6 +1135,20 @@ var ComplianceTransaction = class _ComplianceTransaction {
   taxReport;
   createdAt;
   updatedAt;
+  counterpartyRegisterId;
+  counterpartyAddress;
+  counterpartyCity;
+  counterpartyPostalcode;
+  counterpartyEmail;
+  buyerReference;
+  documentType;
+  amendedNumber;
+  amendedDate;
+  providerState;
+  invoiceLines;
+  get isCreditNote() {
+    return this.documentType === ComplianceDocumentType.CREDIT_NOTE;
+  }
   static fromArray(data) {
     const taxReport = typeof data["tax_report"] === "object" && data["tax_report"] !== null && !Array.isArray(data["tax_report"]) ? ComplianceTaxReport.fromArray(data["tax_report"]) : void 0;
     return new _ComplianceTransaction(
@@ -1059,7 +1178,18 @@ var ComplianceTransaction = class _ComplianceTransaction {
       asNullableString3(data["reported_at"]),
       taxReport,
       asNullableString3(data["created_at"]),
-      asNullableString3(data["updated_at"])
+      asNullableString3(data["updated_at"]),
+      asNullableString3(data["counterparty_register_id"]),
+      asNullableString3(data["counterparty_address"]),
+      asNullableString3(data["counterparty_city"]),
+      asNullableString3(data["counterparty_postalcode"]),
+      asNullableString3(data["counterparty_email"]),
+      asNullableString3(data["buyer_reference"]),
+      data["document_type"] === void 0 || data["document_type"] === null ? ComplianceDocumentType.INVOICE : toComplianceDocumentType(data["document_type"]),
+      asNullableString3(data["amended_number"]),
+      asNullableString3(data["amended_date"]),
+      asNullableString3(data["provider_state"]),
+      toInvoiceLines(data["provider_payload"])
     );
   }
 };
@@ -1118,10 +1248,134 @@ var ImportResult = class _ImportResult {
   }
 };
 
-// src/dto/RevenueStatistics.ts
+// src/enums/PeppolLookupStatus.ts
+var PeppolLookupStatus = {
+  REACHABLE: "reachable",
+  NOT_REACHABLE: "not_reachable",
+  PENDING: "pending",
+  UNKNOWN: "unknown"
+};
+var VALUES7 = Object.values(PeppolLookupStatus);
+function toPeppolLookupStatus(value) {
+  if (typeof value === "string") {
+    const normalized = value.trim().toLowerCase();
+    if (VALUES7.includes(normalized)) {
+      return normalized;
+    }
+  }
+  return PeppolLookupStatus.UNKNOWN;
+}
+var DESCRIPTIONS7 = {
+  [PeppolLookupStatus.REACHABLE]: "The participant is registered on Peppol and can receive e-invoices.",
+  [PeppolLookupStatus.NOT_REACHABLE]: "The participant is not registered on Peppol.",
+  [PeppolLookupStatus.PENDING]: "The directory lookup is still resolving \u2014 ask again in a few seconds.",
+  [PeppolLookupStatus.UNKNOWN]: "Unknown lookup status."
+};
+function describePeppolLookupStatus(status) {
+  return DESCRIPTIONS7[status];
+}
+
+// src/dto/PeppolLookupResult.ts
 function asString4(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
+function asNullableString4(value) {
+  return typeof value === "string" ? value : null;
+}
+var PeppolLookupResult = class _PeppolLookupResult {
+  constructor(status, reachable, country, scheme, id, documentTypes, transportTypeCode, checkedAt) {
+    this.status = status;
+    this.reachable = reachable;
+    this.country = country;
+    this.scheme = scheme;
+    this.id = id;
+    this.documentTypes = documentTypes;
+    this.transportTypeCode = transportTypeCode;
+    this.checkedAt = checkedAt;
+  }
+  status;
+  reachable;
+  country;
+  scheme;
+  id;
+  documentTypes;
+  transportTypeCode;
+  checkedAt;
+  /** True while the directory is still resolving — ask again in a few seconds. */
+  get isPending() {
+    return this.status === PeppolLookupStatus.PENDING;
+  }
+  static fromArray(data) {
+    const documentTypes = Array.isArray(data["document_types"]) ? data["document_types"].filter((t) => typeof t === "string") : [];
+    return new _PeppolLookupResult(
+      toPeppolLookupStatus(data["status"]),
+      typeof data["reachable"] === "boolean" ? data["reachable"] : null,
+      asString4(data["country"]),
+      asString4(data["scheme"]),
+      asString4(data["id"]),
+      documentTypes,
+      asNullableString4(data["transport_type_code"]),
+      asNullableString4(data["checked_at"])
+    );
+  }
+};
+
+// src/dto/RegistryCompany.ts
+function asString5(value, fallback = "") {
+  return typeof value === "string" ? value : fallback;
+}
+function asNullableString5(value) {
+  return typeof value === "string" ? value : null;
+}
+var RegistryCompany = class _RegistryCompany {
+  constructor(orgNumber, companyName, organisationForm, vatRegistered, vatNumber, enterpriseRegister, bankrupt, underLiquidation, address, postalcode, city, country) {
+    this.orgNumber = orgNumber;
+    this.companyName = companyName;
+    this.organisationForm = organisationForm;
+    this.vatRegistered = vatRegistered;
+    this.vatNumber = vatNumber;
+    this.enterpriseRegister = enterpriseRegister;
+    this.bankrupt = bankrupt;
+    this.underLiquidation = underLiquidation;
+    this.address = address;
+    this.postalcode = postalcode;
+    this.city = city;
+    this.country = country;
+  }
+  orgNumber;
+  companyName;
+  organisationForm;
+  vatRegistered;
+  vatNumber;
+  enterpriseRegister;
+  bankrupt;
+  underLiquidation;
+  address;
+  postalcode;
+  city;
+  country;
+  static fromArray(data) {
+    return new _RegistryCompany(
+      asString5(data["org_number"]),
+      asString5(data["company_name"]),
+      asNullableString5(data["organisation_form"]),
+      data["vat_registered"] === true,
+      asNullableString5(data["vat_number"]),
+      data["enterprise_register"] === true,
+      data["bankrupt"] === true,
+      data["under_liquidation"] === true,
+      asNullableString5(data["address"]),
+      asNullableString5(data["postalcode"]),
+      asNullableString5(data["city"]),
+      asString5(data["country"])
+    );
+  }
+};
+
+// src/dto/RevenueStatistics.ts
+function asString6(value, fallback = "") {
+  return typeof value === "string" ? value : fallback;
+}
 function asNumber4(value) {
   return typeof value === "number" ? value : Number(value ?? 0) || 0;
 }
@@ -1171,35 +1425,35 @@ var RevenueStatistics = class _RevenueStatistics {
       typeof data["totals"] === "object" && data["totals"] !== null ? data["totals"] : {}
     );
     const timeSeries = asRecords(data["time_series"]).map((row) => ({
-      bucket: asString4(row["bucket"]),
+      bucket: asString6(row["bucket"]),
       ...toTotals(row)
     }));
     const byType = asRecords(data["by_type"]).map((row) => ({
-      type: asString4(row["type"]),
-      typeLabel: asString4(row["type_label"]),
+      type: asString6(row["type"]),
+      typeLabel: asString6(row["type_label"]),
       count: asNumber4(row["count"]),
       total: asMoney3(row["total"])
     }));
     const byCountry = asRecords(data["by_country"]).map((row) => ({
-      country: asString4(row["country"], "unknown"),
+      country: asString6(row["country"], "unknown"),
       count: asNumber4(row["count"]),
       total: asMoney3(row["total"])
     }));
     const byState = asRecords(data["by_state"]).map((row) => ({
-      state: asString4(row["state"]),
-      stateLabel: asString4(row["state_label"]),
+      state: asString6(row["state"]),
+      stateLabel: asString6(row["state_label"]),
       count: asNumber4(row["count"]),
       total: asMoney3(row["total"])
     }));
     const byCurrency = asRecords(data["by_currency"]).map((row) => ({
-      currency: asString4(row["currency"]),
+      currency: asString6(row["currency"]),
       ...toTotals(row)
     }));
     return new _RevenueStatistics(
-      asString4(range["date_from"]) || void 0,
-      asString4(range["date_to"]) || void 0,
-      asString4(range["interval"]) || void 0,
-      asString4(data["primary_currency"], "EUR"),
+      asString6(range["date_from"]) || void 0,
+      asString6(range["date_to"]) || void 0,
+      asString6(range["interval"]) || void 0,
+      asString6(data["primary_currency"], "EUR"),
       data["is_multi_currency"] === true,
       totals,
       timeSeries,
@@ -1212,10 +1466,10 @@ var RevenueStatistics = class _RevenueStatistics {
 };
 
 // src/dto/SireneLookupResult.ts
-function asString5(value, fallback = "") {
+function asString7(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
-function asNullableString4(value) {
+function asNullableString6(value) {
   return typeof value === "string" ? value : null;
 }
 var SireneLookupResult = class _SireneLookupResult {
@@ -1241,21 +1495,21 @@ var SireneLookupResult = class _SireneLookupResult {
   postalcode;
   static fromArray(data) {
     return new _SireneLookupResult(
-      asString5(data["company_name"]),
-      asString5(data["siren"]),
-      asNullableString4(data["siret"]),
-      asNullableString4(data["naf_code"]),
-      asNullableString4(data["naf_full"]),
-      asNullableString4(data["enterprise_size"]),
-      asNullableString4(data["address"]),
-      asNullableString4(data["city"]),
-      asNullableString4(data["postalcode"])
+      asString7(data["company_name"]),
+      asString7(data["siren"]),
+      asNullableString6(data["siret"]),
+      asNullableString6(data["naf_code"]),
+      asNullableString6(data["naf_full"]),
+      asNullableString6(data["enterprise_size"]),
+      asNullableString6(data["address"]),
+      asNullableString6(data["city"]),
+      asNullableString6(data["postalcode"])
     );
   }
 };
 
 // src/dto/VatRates.ts
-function asString6(value, fallback = "") {
+function asString8(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
 function asNumber5(value) {
@@ -1273,12 +1527,12 @@ var VatRates = class _VatRates {
   static fromArray(data) {
     const rates = (Array.isArray(data["rates"]) ? data["rates"] : []).filter((row) => typeof row === "object" && row !== null).map((row) => ({
       percent: asNumber5(row["percent"]),
-      category: asString6(row["category"]),
-      labelKey: asString6(row["label_key"]),
-      taxName: asString6(row["tax_name"]),
+      category: asString8(row["category"]),
+      labelKey: asString8(row["label_key"]),
+      taxName: asString8(row["tax_name"]),
       requiresVatex: row["requires_vatex"] === true
     }));
-    return new _VatRates(asString6(data["country"]), asString6(data["currency"], "EUR"), rates);
+    return new _VatRates(asString8(data["country"]), asString8(data["currency"], "EUR"), rates);
   }
 };
 
@@ -1297,10 +1551,48 @@ var ValidationException = class extends TaxoraException {
   }
 };
 
+// src/support/NorwegianOrgNumber.ts
+var WEIGHTS = [3, 2, 7, 6, 5, 4, 3, 2];
+var NorwegianOrgNumber = {
+  /** Peppol identifier scheme for Norwegian organisation numbers. */
+  PEPPOL_SCHEME: "0192",
+  /**
+   * Strips whitespace, dots, dashes, a "0192:" Peppol scheme prefix, the "NO"
+   * prefix and the "MVA" suffix: "NO 923 609 016 MVA", "923609016MVA" and
+   * "923 609 016" all become "923609016". Does not validate.
+   */
+  normalize(value) {
+    let v = (value ?? "").trim().toUpperCase().replace(/[\s.-]/g, "");
+    if (v.startsWith("0192:")) v = v.slice(5);
+    if (v.startsWith("NO")) v = v.slice(2);
+    if (v.endsWith("MVA")) v = v.slice(0, -3);
+    return v;
+  },
+  /** True when the (normalized) value is 9 digits with a valid mod-11 check digit. */
+  isValid(value) {
+    const digits = NorwegianOrgNumber.normalize(value);
+    if (!/^\d{9}$/.test(digits)) return false;
+    let sum = 0;
+    for (let i = 0; i < WEIGHTS.length; i++) {
+      sum += Number(digits[i]) * WEIGHTS[i];
+    }
+    let check = 11 - sum % 11;
+    if (check === 11) check = 0;
+    return check !== 10 && check === Number(digits[8]);
+  },
+  /** "NO923609016MVA" — the Norwegian VAT number of an MVA-registered entity. Does not validate. */
+  toVatNumber(value) {
+    return `NO${NorwegianOrgNumber.normalize(value)}MVA`;
+  }
+};
+
 // src/endpoints/EReportingEndpoint.ts
 var DATE_REGEX = /^\d{4}-\d{2}-\d{2}$/;
 var NAF_CODE_REGEX = /^\d{2}$/;
+var COUNTRY_REGEX = /^[A-Za-z]{2}$/;
+var PEPPOL_SCHEME_REGEX = /^\d{4}$/;
 var INTERVALS = ["day", "week", "month"];
+var SERVICES = ["e_reporting", "e_invoicing"];
 var ENTERPRISE_SIZES = ["micro", "pme", "eti", "ge"];
 var TYPE_OPERATIONS = ["services", "goods", "mixed"];
 var TRANSACTION_TYPES = [
@@ -1328,14 +1620,23 @@ var EReportingEndpoint = class {
   // ---------------------------------------------------------------------
   /**
    * Create a compliance enrollment and provision the provider account. By
-   * default the DGFiP regime is activated right away; pass `autoActivate: false`
+   * default the country regime is activated right away (France: DGFiP tax
+   * report setting; Norway: Peppol registration); pass `autoActivate: false`
    * to only create the account.
    *
-   * On provider failure the API responds 502 (mapped to an HttpException) and
-   * the enrollment is persisted in `error_account`/`error_activation` state so
+   * The input shape depends on `country`: omitted/"FR" takes the France input
+   * (unchanged, backwards compatible), "NO" the Norway input — see also the
+   * createNorwayEnrollment() shortcut.
+   *
+   * Errors: 403 (HttpException, body code `service_not_active`) when the company
+   * lacks the requested service; on provider failure 502 (HttpException) — the
+   * enrollment is then persisted in `error_account`/`error_activation` state so
    * provisioning can be retried.
    */
   async createEnrollment(input) {
+    if (this.isNorwayEnrollmentInput(input)) {
+      return this.createEnrollmentFromBody(this.buildNorwayEnrollmentBody(input));
+    }
     this.validateEnrollmentInput(input);
     const body = {
       email: input.email,
@@ -1345,6 +1646,7 @@ var EReportingEndpoint = class {
       reporting_start_date: this.formatDate(input.reportingStartDate)
     };
     if (input.country !== void 0) body["country"] = input.country;
+    if (input.service !== void 0) body["service"] = input.service;
     if (input.regime !== void 0) body["regime"] = input.regime;
     if (input.siret !== void 0) body["siret"] = input.siret;
     if (input.siren !== void 0) body["siren"] = input.siren;
@@ -1355,9 +1657,15 @@ var EReportingEndpoint = class {
     if (input.postalcode !== void 0) body["postalcode"] = input.postalcode;
     if (input.province !== void 0) body["province"] = input.province;
     if (input.autoActivate !== void 0) body["auto_activate"] = input.autoActivate;
-    const response = await this.sendRequest("POST", `${this.baseUrl}/compliance/enrollments`, body);
-    const data = await this.parseJsonResponse(response);
-    return ComplianceEnrollment.fromArray(data);
+    return this.createEnrollmentFromBody(body);
+  }
+  /**
+   * Enroll the company for Norway e-invoicing (EHF / Peppol BIS 3.0) — shortcut
+   * for createEnrollment({ country: 'NO', ... }). The organisation number is
+   * checked (mod-11) and normalized to 9 digits before sending.
+   */
+  async createNorwayEnrollment(input) {
+    return this.createEnrollment({ ...input, country: "NO" });
   }
   /** Paginated list of the company's enrollments (newest first). `perPage` is capped at 100 server-side. */
   async listEnrollments(page = 1, perPage = 25) {
@@ -1391,6 +1699,72 @@ var EReportingEndpoint = class {
     const data = await this.parseJsonResponse(response);
     return SireneLookupResult.fromArray(data);
   }
+  /**
+   * Look up companies in a national company register — currently Norway
+   * (Brønnøysund Enhetsregisteret). `q` is an organisation number, a "NO…MVA"
+   * VAT number or a company name; an exact number match yields one result.
+   * Ideal for prefilling createNorwayEnrollment() and the buyer fields of an
+   * e-invoice. For France use sireneLookup().
+   *
+   * Errors: 404 (HttpException) when nothing is found, 422 (ValidationException)
+   * on invalid input / unsupported country, 429 (HttpException) when the
+   * per-user rate limit (30/min) is exceeded.
+   */
+  async registryLookup(country, q) {
+    const normalizedCountry = this.normalizeLookupCountry(country);
+    const query = q.trim();
+    if (query === "") {
+      throw new TaxoraException("q must not be empty.");
+    }
+    if (normalizedCountry === "NO") {
+      const digits = NorwegianOrgNumber.normalize(query);
+      if (/^\d{9}$/.test(digits) && !NorwegianOrgNumber.isValid(digits)) {
+        throw new TaxoraException(`Invalid Norwegian organisation number "${query}" (check digit).`);
+      }
+    }
+    const params = new URLSearchParams();
+    params.set("country", normalizedCountry);
+    params.set("q", query);
+    const response = await this.sendRequest("GET", `${this.baseUrl}/compliance/registry-lookup?${params.toString()}`);
+    const data = await this.parseJsonResponse(response);
+    const results = Array.isArray(data["results"]) ? data["results"] : [];
+    return results.filter((row) => typeof row === "object" && row !== null && !Array.isArray(row)).map((row) => RegistryCompany.fromArray(row));
+  }
+  /**
+   * Check whether a participant (typically the buyer) can receive e-invoices
+   * over Peppol. For Norway pass the organisation number (scheme defaults to
+   * "0192"): `reachable === true` means the buyer is registered in ELMA and must
+   * receive an EHF e-invoice. The directory resolves asynchronously —
+   * `status === 'pending'` (`reachable === null`) means ask again in a few
+   * seconds. Free of charge; definite answers are cached for 24h server-side.
+   *
+   * A Norwegian organisation number is checked (mod-11) and normalized before
+   * sending. Errors: 422 (ValidationException) on invalid input, 502
+   * (HttpException) on provider failure.
+   */
+  async peppolLookup(country, id, scheme) {
+    const normalizedCountry = this.normalizeLookupCountry(country);
+    let participantId = id.trim();
+    if (participantId === "") {
+      throw new TaxoraException("id must not be empty.");
+    }
+    if (scheme !== void 0 && !PEPPOL_SCHEME_REGEX.test(scheme)) {
+      throw new TaxoraException('scheme must be a 4-digit Peppol identifier scheme, e.g. "0192".');
+    }
+    if (normalizedCountry === "NO" && (scheme === void 0 || scheme === NorwegianOrgNumber.PEPPOL_SCHEME)) {
+      if (!NorwegianOrgNumber.isValid(participantId)) {
+        throw new TaxoraException(`Invalid Norwegian organisation number "${participantId}".`);
+      }
+      participantId = NorwegianOrgNumber.normalize(participantId);
+    }
+    const params = new URLSearchParams();
+    params.set("country", normalizedCountry);
+    params.set("id", participantId);
+    if (scheme !== void 0) params.set("scheme", scheme);
+    const response = await this.sendRequest("GET", `${this.baseUrl}/compliance/peppol-lookup?${params.toString()}`);
+    const data = await this.parseJsonResponse(response);
+    return PeppolLookupResult.fromArray(data);
+  }
   // ---------------------------------------------------------------------
   // Transactions
   // ---------------------------------------------------------------------
@@ -1414,6 +1788,7 @@ var EReportingEndpoint = class {
     this.validateInvoiceNumber(input.invoiceNumber);
     this.validateInvoiceLines(input.invoiceLines);
     this.validateOptionalCodes(input);
+    this.validateBuyerFields(input);
     const body = {
       compliance_enrollment_id: input.complianceEnrollmentId,
       transaction_type: input.transactionType,
@@ -1429,13 +1804,23 @@ var EReportingEndpoint = class {
     const data = await this.parseJsonResponse(response);
     return ComplianceTransaction.fromArray(data);
   }
-  /** Paginated list of the company's transactions (newest invoice date first), filterable by date / state / type. */
+  /** Paginated list of the company's transactions (newest invoice date first), filterable by date / state / type / enrollment / country. */
   async listTransactions(filters = {}) {
+    if (filters.complianceEnrollmentId !== void 0) {
+      this.validateId(filters.complianceEnrollmentId, "complianceEnrollmentId");
+    }
+    if (filters.country !== void 0 && !COUNTRY_REGEX.test(filters.country)) {
+      throw new TaxoraException("country must be a 2-character ISO 3166-1 alpha-2 code.");
+    }
     const params = new URLSearchParams();
     if (filters.dateFrom !== void 0) params.set("date_from", this.formatDate(filters.dateFrom));
     if (filters.dateTo !== void 0) params.set("date_to", this.formatDate(filters.dateTo));
     if (filters.state !== void 0) params.set("state", filters.state);
     if (filters.transactionType !== void 0) params.set("transaction_type", filters.transactionType);
+    if (filters.complianceEnrollmentId !== void 0) {
+      params.set("compliance_enrollment_id", String(filters.complianceEnrollmentId));
+    }
+    if (filters.country !== void 0) params.set("country", filters.country.toUpperCase());
     if (filters.page !== void 0) params.set("page", String(filters.page));
     if (filters.perPage !== void 0) params.set("per_page", String(filters.perPage));
     const queryString = params.toString();
@@ -1457,6 +1842,7 @@ var EReportingEndpoint = class {
     if (input.invoiceNumber !== void 0) this.validateInvoiceNumber(input.invoiceNumber);
     if (input.invoiceLines !== void 0) this.validateInvoiceLines(input.invoiceLines);
     this.validateOptionalCodes(input);
+    this.validateBuyerFields(input);
     const body = {};
     if (input.transactionType !== void 0) body["transaction_type"] = input.transactionType;
     if (input.invoiceNumber !== void 0) body["invoice_number"] = input.invoiceNumber;
@@ -1579,6 +1965,14 @@ var EReportingEndpoint = class {
    * returned as HTTP 400 (surfaced as HttpException), not 422.
    */
   async requestEReportingAccess(input = {}) {
+    if (input.service !== void 0) this.validateService(input.service);
+    if (input.countries !== void 0) {
+      input.countries.forEach((country, index) => {
+        if (!COUNTRY_REGEX.test(country)) {
+          throw new TaxoraException(`countries[${index}] must be a 2-character ISO 3166-1 alpha-2 code.`);
+        }
+      });
+    }
     const body = {};
     if (input.name !== void 0) body["name"] = input.name;
     if (input.email !== void 0) body["email"] = input.email;
@@ -1586,6 +1980,8 @@ var EReportingEndpoint = class {
     if (input.phone !== void 0) body["phone"] = input.phone;
     if (input.message !== void 0) body["message"] = input.message;
     if (input.language !== void 0) body["language"] = input.language;
+    if (input.service !== void 0) body["service"] = input.service;
+    if (input.countries !== void 0) body["countries"] = input.countries.map((c) => c.toUpperCase());
     const response = await this.sendRequest("POST", `${this.baseUrl}/compliance/e-reporting-request`, body);
     await this.parseJsonResponse(response);
   }
@@ -1621,6 +2017,73 @@ var EReportingEndpoint = class {
     if (input.country !== void 0 && input.country.length !== 2) {
       throw new TaxoraException("country must be a 2-character ISO 3166-1 alpha-2 code.");
     }
+    if (input.service !== void 0) this.validateService(input.service);
+  }
+  isNorwayEnrollmentInput(input) {
+    return typeof input.country === "string" && input.country.trim().toUpperCase() === "NO";
+  }
+  /** Validates the Norway input and builds its wire body (org number normalized to 9 digits). */
+  buildNorwayEnrollmentBody(input) {
+    if (typeof input.orgNumber !== "string" || !NorwegianOrgNumber.isValid(input.orgNumber)) {
+      throw new TaxoraException(
+        "orgNumber must be a valid 9-digit Norwegian organisation number (mod-11 check digit)."
+      );
+    }
+    for (const field of ["companyName", "address", "city", "postalcode"]) {
+      if (typeof input[field] !== "string" || input[field].trim() === "") {
+        throw new TaxoraException(`${field} is required for a Norway enrollment.`);
+      }
+    }
+    this.validateEmail(input.email, "email");
+    if (input.service !== void 0) this.validateService(input.service);
+    if (input.legalCountry !== void 0 && !COUNTRY_REGEX.test(input.legalCountry)) {
+      throw new TaxoraException("legalCountry must be a 2-character ISO 3166-1 alpha-2 code.");
+    }
+    const body = {
+      country: "NO",
+      org_number: NorwegianOrgNumber.normalize(input.orgNumber),
+      company_name: input.companyName,
+      address: input.address,
+      city: input.city,
+      postalcode: input.postalcode,
+      email: input.email
+    };
+    if (input.service !== void 0) body["service"] = input.service;
+    if (input.regime !== void 0) body["regime"] = input.regime;
+    if (input.vatNumber !== void 0) body["vat_number"] = input.vatNumber;
+    if (input.province !== void 0) body["province"] = input.province;
+    if (input.vatRegistered !== void 0) body["vat_registered"] = input.vatRegistered;
+    if (input.enterpriseRegister !== void 0) body["enterprise_register"] = input.enterpriseRegister;
+    if (input.reception !== void 0) body["reception"] = input.reception;
+    if (input.legalCountry !== void 0) body["legal_country"] = input.legalCountry.toUpperCase();
+    if (input.reportingStartDate !== void 0) {
+      body["reporting_start_date"] = this.formatDate(input.reportingStartDate);
+    }
+    if (input.autoActivate !== void 0) body["auto_activate"] = input.autoActivate;
+    return body;
+  }
+  async createEnrollmentFromBody(body) {
+    const response = await this.sendRequest("POST", `${this.baseUrl}/compliance/enrollments`, body);
+    const data = await this.parseJsonResponse(response);
+    return ComplianceEnrollment.fromArray(data);
+  }
+  validateService(service) {
+    if (!SERVICES.includes(service)) {
+      throw new TaxoraException(`Invalid service "${String(service)}". Expected one of: ${SERVICES.join(", ")}.`);
+    }
+  }
+  validateEmail(email, name) {
+    if (typeof email !== "string" || email.trim() === "" || !email.includes("@")) {
+      throw new TaxoraException(`${name} must be a valid email address.`);
+    }
+  }
+  /** Lookup routes take a 2-letter country; the API expects it upper-case. */
+  normalizeLookupCountry(country) {
+    const normalized = country.trim().toUpperCase();
+    if (!COUNTRY_REGEX.test(normalized)) {
+      throw new TaxoraException("country must be a 2-character ISO 3166-1 alpha-2 code.");
+    }
+    return normalized;
   }
   validateId(id, name) {
     if (!Number.isInteger(id) || id <= 0) {
@@ -1660,6 +2123,33 @@ var EReportingEndpoint = class {
       throw new TaxoraException("counterpartyCountry must be a 2-character ISO 3166-1 alpha-2 code.");
     }
   }
+  /**
+   * Format checks for the buyer/document fields. Country rules (e.g. the Norway
+   * org number being required) depend on the enrollment and stay server-side;
+   * a register id is only check-digit validated when the buyer is Norwegian.
+   */
+  validateBuyerFields(input) {
+    if (input.counterpartyRegisterId !== void 0) {
+      if (input.counterpartyRegisterId.length > 30) {
+        throw new TaxoraException("counterpartyRegisterId must not exceed 30 characters.");
+      }
+      if (input.counterpartyCountry?.toUpperCase() === "NO" && !NorwegianOrgNumber.isValid(input.counterpartyRegisterId)) {
+        throw new TaxoraException(
+          "counterpartyRegisterId must be a valid 9-digit Norwegian organisation number (mod-11 check digit)."
+        );
+      }
+    }
+    if (input.counterpartyEmail !== void 0) this.validateEmail(input.counterpartyEmail, "counterpartyEmail");
+    if (input.buyerReference !== void 0 && input.buyerReference.length > 100) {
+      throw new TaxoraException("buyerReference must not exceed 100 characters.");
+    }
+    if (input.amendedNumber !== void 0 && input.amendedNumber.length > 50) {
+      throw new TaxoraException("amendedNumber must not exceed 50 characters.");
+    }
+    if (input.extraInfo !== void 0 && input.extraInfo.length > 1e3) {
+      throw new TaxoraException("extraInfo must not exceed 1000 characters.");
+    }
+  }
   // ---------------------------------------------------------------------
   // Body building (camelCase input → snake_case wire format)
   // ---------------------------------------------------------------------
@@ -1696,6 +2186,16 @@ var EReportingEndpoint = class {
     if (input.remittanceInformation !== void 0) body["remittance_information"] = input.remittanceInformation;
     if (input.paymentMethodText !== void 0) body["payment_method_text"] = input.paymentMethodText;
     if (input.paymentTerms !== void 0) body["payment_terms"] = input.paymentTerms;
+    if (input.counterpartyRegisterId !== void 0) body["counterparty_register_id"] = input.counterpartyRegisterId;
+    if (input.counterpartyAddress !== void 0) body["counterparty_address"] = input.counterpartyAddress;
+    if (input.counterpartyCity !== void 0) body["counterparty_city"] = input.counterpartyCity;
+    if (input.counterpartyPostalcode !== void 0) body["counterparty_postalcode"] = input.counterpartyPostalcode;
+    if (input.counterpartyEmail !== void 0) body["counterparty_email"] = input.counterpartyEmail;
+    if (input.buyerReference !== void 0) body["buyer_reference"] = input.buyerReference;
+    if (input.isCreditNote !== void 0) body["is_credit_note"] = input.isCreditNote;
+    if (input.amendedNumber !== void 0) body["amended_number"] = input.amendedNumber;
+    if (input.amendedDate !== void 0) body["amended_date"] = this.formatDate(input.amendedDate);
+    if (input.extraInfo !== void 0) body["extra_info"] = input.extraInfo;
   }
   // ---------------------------------------------------------------------
   // HTTP plumbing (kept in sync with SmartEnrichmentEndpoint)
@@ -1818,22 +2318,22 @@ var SmartEnrichmentMode = {
   DEFAULT: "default",
   COMPLEX: "complex"
 };
-var VALUES5 = Object.values(SmartEnrichmentMode);
+var VALUES8 = Object.values(SmartEnrichmentMode);
 function toSmartEnrichmentMode(value) {
   if (typeof value === "string") {
     const normalized = value.trim().toLowerCase();
-    if (VALUES5.includes(normalized)) {
+    if (VALUES8.includes(normalized)) {
       return normalized;
     }
   }
   return void 0;
 }
-var DESCRIPTIONS5 = {
+var DESCRIPTIONS8 = {
   [SmartEnrichmentMode.DEFAULT]: "One provider searches; a second is consulted only if it finds nothing.",
   [SmartEnrichmentMode.COMPLEX]: "Two providers search independently and are cross-checked against the tax authority. Costs more."
 };
 function describeSmartEnrichmentMode(mode) {
-  return DESCRIPTIONS5[mode];
+  return DESCRIPTIONS8[mode];
 }
 
 // src/enums/SmartEnrichmentStatus.ts
@@ -1847,17 +2347,17 @@ var SmartEnrichmentStatus = {
   FAILED: "failed",
   UNKNOWN: "unknown"
 };
-var VALUES6 = Object.values(SmartEnrichmentStatus);
+var VALUES9 = Object.values(SmartEnrichmentStatus);
 function toSmartEnrichmentStatus(value) {
   if (typeof value === "string") {
     const normalized = value.trim().toLowerCase();
-    if (VALUES6.includes(normalized)) {
+    if (VALUES9.includes(normalized)) {
       return normalized;
     }
   }
   return SmartEnrichmentStatus.UNKNOWN;
 }
-var DESCRIPTIONS6 = {
+var DESCRIPTIONS9 = {
   [SmartEnrichmentStatus.FOUND]: "A VAT number was resolved and confirmed.",
   [SmartEnrichmentStatus.NO_VAT_EXISTS]: "The company was identified but has no VAT number.",
   [SmartEnrichmentStatus.NOT_FOUND]: "No sufficiently-confident match could be resolved.",
@@ -1868,7 +2368,7 @@ var DESCRIPTIONS6 = {
   [SmartEnrichmentStatus.UNKNOWN]: "Unknown status."
 };
 function describeSmartEnrichmentStatus(status) {
-  return DESCRIPTIONS6[status];
+  return DESCRIPTIONS9[status];
 }
 
 // src/dto/SmartEnrichmentResource.ts
@@ -2086,13 +2586,13 @@ var SmartEnrichmentHistoryPage = class _SmartEnrichmentHistoryPage {
 };
 
 // src/dto/SmartEnrichmentStatistics.ts
-function asString7(value, fallback = "") {
+function asString9(value, fallback = "") {
   return typeof value === "string" ? value : fallback;
 }
 function asNumber6(value) {
   return typeof value === "number" ? value : Number(value ?? 0) || 0;
 }
-function asRecord(value) {
+function asRecord2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function asRecords2(value) {
@@ -2115,32 +2615,32 @@ var SmartEnrichmentStatistics = class _SmartEnrichmentStatistics {
   byOutcome;
   confidenceBuckets;
   static fromArray(data) {
-    const range = asRecord(data["range"]);
-    const totals = asRecord(data["totals"]);
+    const range = asRecord2(data["range"]);
+    const totals = asRecord2(data["totals"]);
     const timeSeries = asRecords2(data["time_series"]).map((row) => ({
-      bucket: asString7(row["bucket"]),
+      bucket: asString9(row["bucket"]),
       jobs: asNumber6(row["jobs"]),
       items: asNumber6(row["items"]),
       found: asNumber6(row["found"])
     }));
     const bySource = asRecords2(data["by_source"]).map((row) => ({
-      source: asString7(row["source"]),
+      source: asString9(row["source"]),
       jobs: asNumber6(row["jobs"]),
       found: asNumber6(row["found"])
     }));
     const byOutcome = asRecords2(data["by_outcome"]).map((row) => ({
-      outcome: asString7(row["outcome"]),
+      outcome: asString9(row["outcome"]),
       count: asNumber6(row["count"])
     }));
     const confidenceBuckets = asRecords2(data["confidence_buckets"]).map((row) => ({
-      bucket: asString7(row["bucket"]),
+      bucket: asString9(row["bucket"]),
       count: asNumber6(row["count"])
     }));
     return new _SmartEnrichmentStatistics(
       {
-        dateFrom: asString7(range["date_from"]),
-        dateTo: asString7(range["date_to"]),
-        interval: asString7(range["interval"])
+        dateFrom: asString9(range["date_from"]),
+        dateTo: asString9(range["date_to"]),
+        interval: asString9(range["interval"])
       },
       {
         jobs: asNumber6(totals["jobs"]),
@@ -2355,7 +2855,10 @@ var SmartEnrichmentEndpoint = class {
   async parseJsonResponse(response, acceptedStatuses = [200]) {
     const responseText = await response.text();
     if (response.status === 422) {
-      throw new ValidationException(jsonErrorMessage(responseText) ?? "Validation failed", this.parseValidationErrors(responseText));
+      throw new ValidationException(
+        jsonErrorMessage(responseText) ?? "Validation failed",
+        this.parseValidationErrors(responseText)
+      );
     }
     if (!response.ok && !acceptedStatuses.includes(response.status)) {
       throw new HttpException(
@@ -2389,7 +2892,10 @@ var SmartEnrichmentEndpoint = class {
   async parseRawJson(response) {
     const responseText = await response.text();
     if (response.status === 422) {
-      throw new ValidationException(jsonErrorMessage(responseText) ?? "Validation failed", this.parseValidationErrors(responseText));
+      throw new ValidationException(
+        jsonErrorMessage(responseText) ?? "Validation failed",
+        this.parseValidationErrors(responseText)
+      );
     }
     if (!response.ok) {
       throw new HttpException(
@@ -2418,7 +2924,10 @@ var SmartEnrichmentEndpoint = class {
   async parseCsvResponse(response) {
     const responseText = await response.text();
     if (response.status === 422) {
-      throw new ValidationException(jsonErrorMessage(responseText) ?? "Validation failed", this.parseValidationErrors(responseText));
+      throw new ValidationException(
+        jsonErrorMessage(responseText) ?? "Validation failed",
+        this.parseValidationErrors(responseText)
+      );
     }
     if (!response.ok) {
       throw new HttpException(
@@ -2464,14 +2973,14 @@ var VatState = {
 function getFailedVatStates() {
   return [VatState.INVALID, VatState.FRAUD];
 }
-var DESCRIPTIONS7 = {
+var DESCRIPTIONS10 = {
   [VatState.VALID]: "The VAT number is valid and active.",
   [VatState.INVALID]: "The VAT number is invalid or not registered.",
   [VatState.FRAUD]: "The VAT number has been flagged as potentially fraudulent.",
   [VatState.UNKNOWN]: "The VAT number state could not be determined."
 };
 function describeVatState(state) {
-  return DESCRIPTIONS7[state];
+  return DESCRIPTIONS10[state];
 }
 
 // src/dto/CompanyAddress.ts
@@ -3203,7 +3712,7 @@ var AuthRetryHttpClient = class {
 };
 
 // src/version.ts
-var SDK_VERSION = "1.2.0";
+var SDK_VERSION = "1.3.0";
 
 // src/http/SdkVersionHttpClient.ts
 var SDK_VERSION_HEADER = "X-Taxora-SDK-Version";
@@ -3242,7 +3751,13 @@ var TaxoraClient = class {
     const retryClient = new AuthRetryHttpClient(versionedClient, tokenStorage, () => this.auth.refresh());
     this.vat = new VatEndpoint(this.baseUrl, options.apiKey, tokenStorage, retryClient, retryPolicy);
     this.company = new CompanyEndpoint(this.baseUrl, options.apiKey, tokenStorage, retryClient, retryPolicy);
-    this.smartEnrichment = new SmartEnrichmentEndpoint(this.baseUrl, options.apiKey, tokenStorage, retryClient, retryPolicy);
+    this.smartEnrichment = new SmartEnrichmentEndpoint(
+      this.baseUrl,
+      options.apiKey,
+      tokenStorage,
+      retryClient,
+      retryPolicy
+    );
     this.eReporting = new EReportingEndpoint(this.baseUrl, options.apiKey, tokenStorage, retryClient, retryPolicy);
   }
 };
@@ -3264,6 +3779,125 @@ var Language = {
   ENGLISH: "en",
   GERMAN: "de"
 };
+
+// src/webhooks/WebhookSignature.ts
+var import_node_crypto = require("crypto");
+var WEBHOOK_SIGNATURE_HEADER = "Taxora-Signature";
+var WEBHOOK_ID_HEADER = "Taxora-Webhook-Id";
+var DEFAULT_WEBHOOK_TOLERANCE_SECONDS = 300;
+var SCHEME = "v1";
+var WebhookSignatureVerificationError = class extends TaxoraException {
+  reason;
+  constructor(message, reason, context = {}) {
+    super(message, { ...context, reason });
+    this.name = "WebhookSignatureVerificationError";
+    this.reason = reason;
+  }
+};
+function parseWebhookSignatureHeader(header) {
+  const value = Array.isArray(header) ? header[0] : header;
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new WebhookSignatureVerificationError(
+      `Missing ${WEBHOOK_SIGNATURE_HEADER} header. Is signing enabled for this webhook endpoint?`,
+      "missing_header"
+    );
+  }
+  let timestamp = null;
+  const signatures = [];
+  for (const part of value.split(",")) {
+    const separator = part.indexOf("=");
+    if (separator === -1) continue;
+    const key = part.slice(0, separator).trim();
+    const val = part.slice(separator + 1).trim();
+    if (key === "t" && /^\d+$/.test(val)) {
+      timestamp = Number(val);
+    } else if (key === SCHEME && /^[0-9a-f]{64}$/i.test(val)) {
+      signatures.push(val.toLowerCase());
+    }
+  }
+  if (timestamp === null || signatures.length === 0) {
+    throw new WebhookSignatureVerificationError(
+      `Malformed ${WEBHOOK_SIGNATURE_HEADER} header \u2014 expected "t=<unix>,v1=<hex>".`,
+      "malformed_header"
+    );
+  }
+  return { timestamp, signatures };
+}
+function computeWebhookSignature(rawBody, timestamp, secret) {
+  return (0, import_node_crypto.createHmac)("sha256", secret).update(`${timestamp}.`).update(toBytes(rawBody)).digest("hex");
+}
+function generateWebhookSignatureHeader(rawBody, secret, timestamp = Math.floor(Date.now() / 1e3)) {
+  const secrets = normalizeSecrets(secret);
+  return [`t=${timestamp}`, ...secrets.map((s) => `${SCHEME}=${computeWebhookSignature(rawBody, timestamp, s)}`)].join(
+    ","
+  );
+}
+function verifyWebhookSignature(rawBody, header, secret, options = {}) {
+  const secrets = normalizeSecrets(secret);
+  const bytes = toBytes(rawBody);
+  const { timestamp, signatures } = parseWebhookSignatureHeader(header);
+  const tolerance = options.tolerance ?? DEFAULT_WEBHOOK_TOLERANCE_SECONDS;
+  const now = options.now ?? Math.floor(Date.now() / 1e3);
+  if (tolerance > 0 && Math.abs(now - timestamp) > tolerance) {
+    throw new WebhookSignatureVerificationError(
+      `Timestamp outside the tolerance window (${tolerance}s). Possible replay \u2014 or check the server clock.`,
+      "timestamp_outside_tolerance",
+      { timestamp, now, tolerance }
+    );
+  }
+  const received = signatures.map((s) => Buffer.from(s, "hex"));
+  for (const s of secrets) {
+    const expected = Buffer.from(computeWebhookSignature(bytes, timestamp, s), "hex");
+    let matched = false;
+    for (const candidate of received) {
+      if (candidate.length === expected.length && (0, import_node_crypto.timingSafeEqual)(candidate, expected)) {
+        matched = true;
+      }
+    }
+    if (matched) return true;
+  }
+  throw new WebhookSignatureVerificationError(
+    'No signature matches the expected signature for this payload. Make sure you pass the raw request body (not re-serialised JSON) and the full secret including the "whsec_" prefix.',
+    "no_matching_signature"
+  );
+}
+function constructWebhookEvent(rawBody, header, secret, options = {}) {
+  verifyWebhookSignature(rawBody, header, secret, options);
+  let parsed;
+  try {
+    parsed = JSON.parse(Buffer.from(toBytes(rawBody)).toString("utf8"));
+  } catch {
+    throw new WebhookSignatureVerificationError("Webhook payload is not valid JSON.", "invalid_payload");
+  }
+  if (typeof parsed !== "object" || parsed === null || typeof parsed.id !== "string" || typeof parsed.event !== "string" || typeof parsed.data !== "object") {
+    throw new WebhookSignatureVerificationError(
+      "Webhook payload does not have the expected { id, event, timestamp, data } shape.",
+      "invalid_payload"
+    );
+  }
+  return parsed;
+}
+function normalizeSecrets(secret) {
+  const list = (typeof secret === "string" ? [secret] : [...secret]).filter(
+    (s) => typeof s === "string" && s !== ""
+  );
+  if (list.length === 0) {
+    throw new WebhookSignatureVerificationError(
+      "No webhook signing secret given. Copy it from the Taxora dashboard (Developer \u2192 Webhooks).",
+      "missing_secret"
+    );
+  }
+  return list;
+}
+function toBytes(rawBody) {
+  if (typeof rawBody === "string") return Buffer.from(rawBody, "utf8");
+  if (rawBody instanceof Uint8Array) return rawBody;
+  if (rawBody instanceof ArrayBuffer) return new Uint8Array(rawBody);
+  throw new WebhookSignatureVerificationError(
+    "Webhook body must be the raw request body (string, Buffer or Uint8Array). It looks like it was already parsed as JSON \u2014 use express.raw() / request.text() instead of a JSON body parser.",
+    "invalid_body"
+  );
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ApiVersion,
@@ -3272,9 +3906,11 @@ var Language = {
   AuthenticationException,
   CompanyAddress,
   CompanyEndpoint,
+  ComplianceDocumentType,
   ComplianceEnrollment,
   ComplianceEnrollmentPage,
   ComplianceEnrollmentStatus,
+  ComplianceService,
   ComplianceTaxReport,
   ComplianceTaxReportPage,
   ComplianceTaxReportState,
@@ -3282,6 +3918,7 @@ var Language = {
   ComplianceTransactionPage,
   ComplianceTransactionState,
   ComplianceTransactionType,
+  DEFAULT_WEBHOOK_TOLERANCE_SECONDS,
   EReportingEndpoint,
   Environment,
   FetchHttpClient,
@@ -3290,8 +3927,12 @@ var Language = {
   InMemoryTokenStorage,
   Language,
   LoginIdentifier,
+  NorwegianOrgNumber,
+  PeppolLookupResult,
+  PeppolLookupStatus,
   ProviderDocument,
   ProviderDocumentLine,
+  RegistryCompany,
   RetryPolicy,
   RevenueStatistics,
   ScoreBreakdown,
@@ -3316,21 +3957,35 @@ var Language = {
   VatResource,
   VatState,
   VatValidationAddressInput,
+  WEBHOOK_ID_HEADER,
+  WEBHOOK_SIGNATURE_HEADER,
+  WebhookSignatureVerificationError,
+  computeWebhookSignature,
+  constructWebhookEvent,
   describeApiError,
+  describeComplianceDocumentType,
   describeComplianceEnrollmentStatus,
+  describeComplianceService,
   describeComplianceTaxReportState,
   describeComplianceTransactionState,
   describeComplianceTransactionType,
+  describePeppolLookupStatus,
   describeSmartEnrichmentMode,
   describeSmartEnrichmentStatus,
   describeVatState,
+  generateWebhookSignatureHeader,
   getBaseUrl,
   getFailedVatStates,
+  parseWebhookSignatureHeader,
+  toComplianceDocumentType,
   toComplianceEnrollmentStatus,
+  toComplianceService,
   toComplianceTaxReportState,
   toComplianceTransactionState,
   toComplianceTransactionType,
+  toPeppolLookupStatus,
   toSmartEnrichmentMode,
-  toSmartEnrichmentStatus
+  toSmartEnrichmentStatus,
+  verifyWebhookSignature
 });
 //# sourceMappingURL=index.cjs.map