eimzo-sign-core 0.1.0

package/dist/index.cjs

@@ -0,0 +1,1340 @@
+'use strict';
+
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/errors.ts
+var EimzoError = class _EimzoError extends Error {
+  constructor(code, message, options) {
+    super(message);
+    this.name = "EimzoError";
+    this.code = code;
+    this.cause = options?.cause;
+    Object.setPrototypeOf(this, _EimzoError.prototype);
+  }
+  /** `EimzoError.is(e)` yoki `EimzoError.is(e, 'E_TIMEOUT')`. */
+  static is(error, code) {
+    return error instanceof _EimzoError && (code === void 0 || error.code === code);
+  }
+  /** Bekor qilingan (foydalanuvchi voz kechgan) — odatda jimgina o'tiladi. */
+  static isCancelled(error) {
+    return _EimzoError.is(error, "E_CANCELLED") || _EimzoError.is(error, "E_KEY_LOAD_CANCELLED");
+  }
+};
+function toEimzoError(error, fallbackCode, fallbackMessage) {
+  if (EimzoError.is(error)) return error;
+  return new EimzoError(fallbackCode, fallbackMessage, { cause: error });
+}
+
+// src/util.ts
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function normalizeSerial(value) {
+  return String(value ?? "").toUpperCase().replace(/\s+/g, "");
+}
+function throwIfAborted(signal) {
+  if (signal?.aborted) {
+    throw new EimzoError("E_CANCELLED", "Amal bekor qilindi");
+  }
+}
+function withTimeout(timeoutMs, timeoutError, executor, signal) {
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const cleanup = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+    };
+    const settleResolve = (value) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      resolve(value);
+    };
+    const settleReject = (error) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      reject(error);
+    };
+    const onAbort = () => settleReject(new EimzoError("E_CANCELLED", "Amal bekor qilindi"));
+    const timer = setTimeout(() => settleReject(timeoutError()), timeoutMs);
+    if (signal?.aborted) {
+      settleReject(new EimzoError("E_CANCELLED", "Amal bekor qilindi"));
+      return;
+    }
+    signal?.addEventListener("abort", onAbort);
+    try {
+      executor(settleResolve, settleReject);
+    } catch (error) {
+      settleReject(error);
+    }
+  });
+}
+
+// src/vendor/e-imzo.js
+(function(global) {
+  var _Base64 = global.Base64;
+  var version = "2.1.4";
+  var buffer;
+  if (typeof module !== "undefined" && module.exports) {
+    buffer = __require("buffer").Buffer;
+  }
+  var b64chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  var b64tab = (function(bin) {
+    var t = {};
+    for (var i = 0, l = bin.length; i < l; i++) t[bin.charAt(i)] = i;
+    return t;
+  })(b64chars);
+  var fromCharCode = String.fromCharCode;
+  var cb_utob = function(c) {
+    if (c.length < 2) {
+      var cc = c.charCodeAt(0);
+      return cc < 128 ? c : cc < 2048 ? fromCharCode(192 | cc >>> 6) + fromCharCode(128 | cc & 63) : fromCharCode(224 | cc >>> 12 & 15) + fromCharCode(128 | cc >>> 6 & 63) + fromCharCode(128 | cc & 63);
+    } else {
+      var cc = 65536 + (c.charCodeAt(0) - 55296) * 1024 + (c.charCodeAt(1) - 56320);
+      return fromCharCode(240 | cc >>> 18 & 7) + fromCharCode(128 | cc >>> 12 & 63) + fromCharCode(128 | cc >>> 6 & 63) + fromCharCode(128 | cc & 63);
+    }
+  };
+  var re_utob = /[\uD800-\uDBFF][\uDC00-\uDFFFF]|[^\x00-\x7F]/g;
+  var utob = function(u) {
+    return u.replace(re_utob, cb_utob);
+  };
+  var cb_encode = function(ccc) {
+    var padlen = [0, 2, 1][ccc.length % 3], ord = ccc.charCodeAt(0) << 16 | (ccc.length > 1 ? ccc.charCodeAt(1) : 0) << 8 | (ccc.length > 2 ? ccc.charCodeAt(2) : 0), chars = [
+      b64chars.charAt(ord >>> 18),
+      b64chars.charAt(ord >>> 12 & 63),
+      padlen >= 2 ? "=" : b64chars.charAt(ord >>> 6 & 63),
+      padlen >= 1 ? "=" : b64chars.charAt(ord & 63)
+    ];
+    return chars.join("");
+  };
+  var btoa = global.btoa ? function(b) {
+    return global.btoa(b);
+  } : function(b) {
+    return b.replace(/[\s\S]{1,3}/g, cb_encode);
+  };
+  var _encode = buffer ? function(u) {
+    return new buffer(u).toString("base64");
+  } : function(u) {
+    return btoa(utob(u));
+  };
+  var encode = function(u, urisafe) {
+    return !urisafe ? _encode(u) : _encode(u).replace(/[+\/]/g, function(m0) {
+      return m0 == "+" ? "-" : "_";
+    }).replace(/=/g, "");
+  };
+  var encodeURI = function(u) {
+    return encode(u, true);
+  };
+  var re_btou = new RegExp([
+    "[\xC0-\xDF][\x80-\xBF]",
+    "[\xE0-\xEF][\x80-\xBF]{2}",
+    "[\xF0-\xF7][\x80-\xBF]{3}"
+  ].join("|"), "g");
+  var cb_btou = function(cccc) {
+    switch (cccc.length) {
+      case 4:
+        var cp = (7 & cccc.charCodeAt(0)) << 18 | (63 & cccc.charCodeAt(1)) << 12 | (63 & cccc.charCodeAt(2)) << 6 | 63 & cccc.charCodeAt(3), offset = cp - 65536;
+        return fromCharCode((offset >>> 10) + 55296) + fromCharCode((offset & 1023) + 56320);
+      case 3:
+        return fromCharCode(
+          (15 & cccc.charCodeAt(0)) << 12 | (63 & cccc.charCodeAt(1)) << 6 | 63 & cccc.charCodeAt(2)
+        );
+      default:
+        return fromCharCode(
+          (31 & cccc.charCodeAt(0)) << 6 | 63 & cccc.charCodeAt(1)
+        );
+    }
+  };
+  var btou = function(b) {
+    return b.replace(re_btou, cb_btou);
+  };
+  var cb_decode = function(cccc) {
+    var len = cccc.length, padlen = len % 4, n = (len > 0 ? b64tab[cccc.charAt(0)] << 18 : 0) | (len > 1 ? b64tab[cccc.charAt(1)] << 12 : 0) | (len > 2 ? b64tab[cccc.charAt(2)] << 6 : 0) | (len > 3 ? b64tab[cccc.charAt(3)] : 0), chars = [
+      fromCharCode(n >>> 16),
+      fromCharCode(n >>> 8 & 255),
+      fromCharCode(n & 255)
+    ];
+    chars.length -= [0, 0, 2, 1][padlen];
+    return chars.join("");
+  };
+  var atob = global.atob ? function(a) {
+    return global.atob(a);
+  } : function(a) {
+    return a.replace(/[\s\S]{1,4}/g, cb_decode);
+  };
+  var _decode = buffer ? function(a) {
+    return new buffer(a, "base64").toString();
+  } : function(a) {
+    return btou(atob(a));
+  };
+  var decode = function(a) {
+    return _decode(
+      a.replace(/[-_]/g, function(m0) {
+        return m0 == "-" ? "+" : "/";
+      }).replace(/[^A-Za-z0-9\+\/]/g, "")
+    );
+  };
+  var noConflict = function() {
+    var Base642 = global.Base64;
+    global.Base64 = _Base64;
+    return Base642;
+  };
+  global.Base64 = {
+    VERSION: version,
+    atob,
+    btoa,
+    fromBase64: decode,
+    toBase64: encode,
+    utob,
+    encode,
+    encodeURI,
+    btou,
+    decode,
+    noConflict
+  };
+  if (typeof Object.defineProperty === "function") {
+    var noEnum = function(v) {
+      return { value: v, enumerable: false, writable: true, configurable: true };
+    };
+    global.Base64.extendString = function() {
+      Object.defineProperty(
+        String.prototype,
+        "fromBase64",
+        noEnum(function() {
+          return decode(this);
+        })
+      );
+      Object.defineProperty(
+        String.prototype,
+        "toBase64",
+        noEnum(function(urisafe) {
+          return encode(this, urisafe);
+        })
+      );
+      Object.defineProperty(
+        String.prototype,
+        "toBase64URI",
+        noEnum(function() {
+          return encode(this, true);
+        })
+      );
+    };
+  }
+  var _Base64 = global.Base64;
+  var version = "2.1.4";
+  var buffer;
+  if (typeof module !== "undefined" && module.exports) {
+    buffer = __require("buffer").Buffer;
+  }
+  var b64chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  var b64tab = (function(bin) {
+    var t = {};
+    for (var i = 0, l = bin.length; i < l; i++) t[bin.charAt(i)] = i;
+    return t;
+  })(b64chars);
+  var fromCharCode = String.fromCharCode;
+  var cb_utob = function(c) {
+    if (c.length < 2) {
+      let cc = c.charCodeAt(0);
+      return cc < 128 ? c : cc < 2048 ? fromCharCode(192 | cc >>> 6) + fromCharCode(128 | cc & 63) : fromCharCode(224 | cc >>> 12 & 15) + fromCharCode(128 | cc >>> 6 & 63) + fromCharCode(128 | cc & 63);
+    } else {
+      let cc = 65536 + (c.charCodeAt(0) - 55296) * 1024 + (c.charCodeAt(1) - 56320);
+      return fromCharCode(240 | cc >>> 18 & 7) + fromCharCode(128 | cc >>> 12 & 63) + fromCharCode(128 | cc >>> 6 & 63) + fromCharCode(128 | cc & 63);
+    }
+  };
+  var re_utob = /[\uD800-\uDBFF][\uDC00-\uDFFFF]|[^\x00-\x7F]/g;
+  var utob = function(u) {
+    return u.replace(re_utob, cb_utob);
+  };
+  var cb_encode = function(ccc) {
+    var padlen = [0, 2, 1][ccc.length % 3], ord = ccc.charCodeAt(0) << 16 | (ccc.length > 1 ? ccc.charCodeAt(1) : 0) << 8 | (ccc.length > 2 ? ccc.charCodeAt(2) : 0), chars = [
+      b64chars.charAt(ord >>> 18),
+      b64chars.charAt(ord >>> 12 & 63),
+      padlen >= 2 ? "=" : b64chars.charAt(ord >>> 6 & 63),
+      padlen >= 1 ? "=" : b64chars.charAt(ord & 63)
+    ];
+    return chars.join("");
+  };
+  var btoa = global.btoa ? function(b) {
+    return global.btoa(b);
+  } : function(b) {
+    return b.replace(/[\s\S]{1,3}/g, cb_encode);
+  };
+  var _encode = buffer ? function(u) {
+    return new buffer(u).toString("base64");
+  } : function(u) {
+    return btoa(utob(u));
+  };
+  var encode = function(u, urisafe) {
+    return !urisafe ? _encode(u) : _encode(u).replace(/[+\/]/g, function(m0) {
+      return m0 == "+" ? "-" : "_";
+    }).replace(/=/g, "");
+  };
+  var encodeURI = function(u) {
+    return encode(u, true);
+  };
+  var re_btou = new RegExp([
+    "[\xC0-\xDF][\x80-\xBF]",
+    "[\xE0-\xEF][\x80-\xBF]{2}",
+    "[\xF0-\xF7][\x80-\xBF]{3}"
+  ].join("|"), "g");
+  var cb_btou = function(cccc) {
+    switch (cccc.length) {
+      case 4:
+        var cp = (7 & cccc.charCodeAt(0)) << 18 | (63 & cccc.charCodeAt(1)) << 12 | (63 & cccc.charCodeAt(2)) << 6 | 63 & cccc.charCodeAt(3), offset = cp - 65536;
+        return fromCharCode((offset >>> 10) + 55296) + fromCharCode((offset & 1023) + 56320);
+      case 3:
+        return fromCharCode(
+          (15 & cccc.charCodeAt(0)) << 12 | (63 & cccc.charCodeAt(1)) << 6 | 63 & cccc.charCodeAt(2)
+        );
+      default:
+        return fromCharCode(
+          (31 & cccc.charCodeAt(0)) << 6 | 63 & cccc.charCodeAt(1)
+        );
+    }
+  };
+  var btou = function(b) {
+    return b.replace(re_btou, cb_btou);
+  };
+  var cb_decode = function(cccc) {
+    var len = cccc.length, padlen = len % 4, n = (len > 0 ? b64tab[cccc.charAt(0)] << 18 : 0) | (len > 1 ? b64tab[cccc.charAt(1)] << 12 : 0) | (len > 2 ? b64tab[cccc.charAt(2)] << 6 : 0) | (len > 3 ? b64tab[cccc.charAt(3)] : 0), chars = [
+      fromCharCode(n >>> 16),
+      fromCharCode(n >>> 8 & 255),
+      fromCharCode(n & 255)
+    ];
+    chars.length -= [0, 0, 2, 1][padlen];
+    return chars.join("");
+  };
+  var atob = global.atob ? function(a) {
+    return global.atob(a);
+  } : function(a) {
+    return a.replace(/[\s\S]{1,4}/g, cb_decode);
+  };
+  var _decode = buffer ? function(a) {
+    return new buffer(a, "base64").toString();
+  } : function(a) {
+    return btou(atob(a));
+  };
+  var decode = function(a) {
+    return _decode(
+      a.replace(/[-_]/g, function(m0) {
+        return m0 == "-" ? "+" : "/";
+      }).replace(/[^A-Za-z0-9\+\/]/g, "")
+    );
+  };
+  var noConflict = function() {
+    var Base642 = global.Base64;
+    global.Base64 = _Base64;
+    return Base642;
+  };
+  global.Base64 = {
+    VERSION: version,
+    atob,
+    btoa,
+    fromBase64: decode,
+    toBase64: encode,
+    utob,
+    encode,
+    encodeURI,
+    btou,
+    decode,
+    noConflict
+  };
+  if (typeof Object.defineProperty === "function") {
+    var noEnum = function(v) {
+      return { value: v, enumerable: false, writable: true, configurable: true };
+    };
+    global.Base64.extendString = function() {
+      Object.defineProperty(
+        String.prototype,
+        "fromBase64",
+        noEnum(function() {
+          return decode(this);
+        })
+      );
+      Object.defineProperty(
+        String.prototype,
+        "toBase64",
+        noEnum(function(urisafe) {
+          return encode(this, urisafe);
+        })
+      );
+      Object.defineProperty(
+        String.prototype,
+        "toBase64URI",
+        noEnum(function() {
+          return encode(this, true);
+        })
+      );
+    };
+  }
+  if (typeof window !== "undefined") window.Base64 = global.Base64;
+})(typeof globalThis !== "undefined" ? globalThis : void 0);
+globalThis.CAPIWS = typeof EIMZOEXT !== "undefined" ? EIMZOEXT : {
+  URL: ((typeof window !== "undefined" ? window.location.protocol : "").toLowerCase() === "https:" ? "wss://127.0.0.1:64443" : "ws://127.0.0.1:64646") + "/service/cryptapi",
+  callFunction: function(funcDef, callback, error) {
+    if (!window.WebSocket) {
+      if (error)
+        error();
+      return;
+    }
+    var socket;
+    try {
+      socket = new WebSocket(this.URL);
+    } catch (e) {
+      error(e);
+    }
+    socket.onerror = function(e) {
+      if (error)
+        error(e);
+    };
+    socket.onmessage = function(event) {
+      var data = JSON.parse(event.data);
+      socket.close();
+      callback(event, data);
+    };
+    socket.onopen = function() {
+      socket.send(JSON.stringify(funcDef));
+    };
+  },
+  version: function(callback, error) {
+    if (!window.WebSocket) {
+      if (error)
+        error();
+      return;
+    }
+    var socket;
+    try {
+      socket = new WebSocket(this.URL);
+    } catch (e) {
+      error(e);
+    }
+    socket.onerror = function(e) {
+      if (error)
+        error(e);
+    };
+    socket.onmessage = function(event) {
+      var data = JSON.parse(event.data);
+      socket.close();
+      callback(event, data);
+    };
+    socket.onopen = function() {
+      var o = { name: "version" };
+      socket.send(JSON.stringify(o));
+    };
+  },
+  apidoc: function(callback, error) {
+    if (!window.WebSocket) {
+      if (error)
+        error();
+      return;
+    }
+    var socket;
+    try {
+      socket = new WebSocket(this.URL);
+    } catch (e) {
+      error(e);
+    }
+    socket.onerror = function(e) {
+      if (error)
+        error(e);
+    };
+    socket.onmessage = function(event) {
+      var data = JSON.parse(event.data);
+      socket.close();
+      callback(event, data);
+    };
+    socket.onopen = function() {
+      var o = { name: "apidoc" };
+      socket.send(JSON.stringify(o));
+    };
+  },
+  apikey: function(domainAndKey, callback, error) {
+    if (!window.WebSocket) {
+      if (error)
+        error();
+      return;
+    }
+    var socket;
+    try {
+      socket = new WebSocket(this.URL);
+    } catch (e) {
+      error(e);
+    }
+    socket.onerror = function(e) {
+      if (error)
+        error(e);
+    };
+    socket.onmessage = function(event) {
+      var data = JSON.parse(event.data);
+      socket.close();
+      callback(event, data);
+    };
+    socket.onopen = function() {
+      var o = { name: "apikey", arguments: domainAndKey };
+      socket.send(JSON.stringify(o));
+    };
+  }
+};
+
+// src/vendor/e-imzo-client.js
+Date.prototype.yyyymmdd = function() {
+  var yyyy = this.getFullYear().toString();
+  var mm = (this.getMonth() + 1).toString();
+  var dd = this.getDate().toString();
+  return yyyy + (mm[1] ? mm : "0" + mm[0]) + (dd[1] ? dd : "0" + dd[0]);
+};
+Date.prototype.ddmmyyyy = function() {
+  var yyyy = this.getFullYear().toString();
+  var mm = (this.getMonth() + 1).toString();
+  var dd = this.getDate().toString();
+  return (dd[1] ? dd : "0" + dd[0]) + "." + (mm[1] ? mm : "0" + mm[0]) + "." + yyyy;
+};
+String.prototype.splitKeep = function(splitter, ahead) {
+  var self = this;
+  var result = [];
+  if (splitter != "") {
+    let getSubst2 = function(value) {
+      var substChar = value[0] == "0" ? "1" : "0";
+      var subst = "";
+      for (var i2 = 0; i2 < value.length; i2++) {
+        subst += substChar;
+      }
+      return subst;
+    };
+    var matches = [];
+    var replaceName = splitter instanceof RegExp ? "replace" : "replaceAll";
+    self[replaceName](splitter, function(m2, i2, e) {
+      matches.push({ value: m2, index: i2 });
+      return getSubst2(m2);
+    });
+    var lastIndex = 0;
+    for (var i = 0; i < matches.length; i++) {
+      var m = matches[i];
+      var nextIndex = ahead == true ? m.index : m.index + m.value.length;
+      if (nextIndex != lastIndex) {
+        var part = self.substring(lastIndex, nextIndex);
+        result.push(part);
+        lastIndex = nextIndex;
+      }
+    }
+    if (lastIndex < self.length) {
+      var part = self.substring(lastIndex, self.length);
+      result.push(part);
+    }
+  } else {
+    result.add(self);
+  }
+  return result;
+};
+var EIMZOClient = {
+  NEW_API: false,
+  NEW_API2: false,
+  API_KEYS: [
+    "localhost",
+    "96D0C1491615C82B9A54D9989779DF825B690748224C2B04F500F370D51827CE2644D8D4A82C18184D73AB8530BB8ED537269603F61DB0D03D2104ABF789970B",
+    "127.0.0.1",
+    "A7BCFA5D490B351BE0754130DF03A068F855DB4333D43921125B9CF2670EF6A40370C646B90401955E1F7BC9CDBF59CE0B2C5467D820BE189C845D0B79CFC96F"
+  ],
+  checkVersion: function(success, fail) {
+    CAPIWS.version(function(event, data) {
+      if (data.success === true) {
+        if (data.major && data.minor) {
+          var installedVersion = parseInt(data.major) * 100 + parseInt(data.minor);
+          EIMZOClient.NEW_API = installedVersion >= 336;
+          EIMZOClient.NEW_API2 = installedVersion >= 412;
+          success(data.major, data.minor);
+        } else {
+          fail(null, "E-IMZO Version is undefined");
+        }
+      } else {
+        fail(null, data.reason);
+      }
+    }, function(e) {
+      fail(e, null);
+    });
+  },
+  installApiKeys: function(success, fail) {
+    CAPIWS.apikey(EIMZOClient.API_KEYS, function(event, data) {
+      if (data.success) {
+        success();
+      } else {
+        fail(null, data.reason);
+      }
+    }, function(e) {
+      fail(e, null);
+    });
+  },
+  listAllUserKeys: function(itemIdGen, itemUiGen, success, fail) {
+    var items = [];
+    var errors = [];
+    if (!EIMZOClient.NEW_API) {
+      fail(null, "Please install new version of E-IMZO");
+    } else {
+      if (EIMZOClient.NEW_API2) {
+        EIMZOClient._findPfxs2(itemIdGen, itemUiGen, items, errors, function(firstItmId2) {
+          if (items.length === 0 && errors.length > 0) {
+            fail(errors[0].e, errors[0].r);
+          } else {
+            var firstId = null;
+            if (items.length === 1) {
+              if (firstItmId2) {
+                firstId = firstItmId2;
+              }
+            }
+            success(items, firstId);
+          }
+        });
+      } else {
+        EIMZOClient._findPfxs2(itemIdGen, itemUiGen, items, errors, function(firstItmId2) {
+          EIMZOClient._findTokens2(itemIdGen, itemUiGen, items, errors, function(firstItmId3) {
+            if (items.length === 0 && errors.length > 0) {
+              fail(errors[0].e, errors[0].r);
+            } else {
+              var firstId = null;
+              if (items.length === 1) {
+                if (firstItmId2) {
+                  firstId = firstItmId2;
+                } else if (firstItmId3) {
+                  firstId = firstItmId3;
+                }
+              }
+              success(items, firstId);
+            }
+          });
+        });
+      }
+    }
+  },
+  idCardIsPLuggedIn: function(success, fail) {
+    if (!EIMZOClient.NEW_API2) {
+      success(false);
+    } else {
+      CAPIWS.callFunction({ plugin: "idcard", name: "list_readers" }, function(event, data) {
+        if (data.success) {
+          success(data.readers.length > 0);
+        } else {
+          fail(null, data.reason);
+        }
+      }, function(e) {
+        fail(e, null);
+      });
+    }
+  },
+  loadKey: function(itemObject, success, fail, verifyPassword) {
+    if (itemObject) {
+      var vo = itemObject;
+      if (vo.type === "pfx") {
+        CAPIWS.callFunction({
+          plugin: "pfx",
+          name: "load_key",
+          arguments: [vo.disk, vo.path, vo.name, vo.alias]
+        }, function(event, data) {
+          if (data.success) {
+            var id = data.keyId;
+            if (verifyPassword) {
+              CAPIWS.callFunction({
+                name: "verify_password",
+                plugin: "pfx",
+                arguments: [id]
+              }, function(event2, data2) {
+                if (data2.success) {
+                  success(id);
+                } else {
+                  fail(null, data2.reason);
+                }
+              }, function(e) {
+                fail(e, null);
+              });
+            } else {
+              success(id);
+            }
+          } else {
+            fail(null, data.reason);
+          }
+        }, function(e) {
+          fail(e, null);
+        });
+      } else if (vo.type === "ftjc") {
+        CAPIWS.callFunction({
+          plugin: "ftjc",
+          name: "load_key",
+          arguments: [vo.cardUID]
+        }, function(event, data) {
+          if (data.success) {
+            var id = data.keyId;
+            if (verifyPassword) {
+              CAPIWS.callFunction({
+                plugin: "ftjc",
+                name: "verify_pin",
+                arguments: [id, "1"]
+              }, function(event2, data2) {
+                if (data2.success) {
+                  success(id);
+                } else {
+                  fail(null, data2.reason);
+                }
+              }, function(e) {
+                fail(e, null);
+              });
+            } else {
+              success(id);
+            }
+          } else {
+            fail(null, data.reason);
+          }
+        }, function(e) {
+          fail(e, null);
+        });
+      }
+    }
+  },
+  changeKeyPassword: function(itemObject, success, fail) {
+    if (itemObject) {
+      var vo = itemObject;
+      if (vo.type === "pfx") {
+        CAPIWS.callFunction({
+          plugin: "pfx",
+          name: "load_key",
+          arguments: [vo.disk, vo.path, vo.name, vo.alias]
+        }, function(event, data) {
+          if (data.success) {
+            var id = data.keyId;
+            CAPIWS.callFunction({
+              name: "change_password",
+              plugin: "pfx",
+              arguments: [id]
+            }, function(event2, data2) {
+              if (data2.success) {
+                success();
+              } else {
+                fail(null, data2.reason);
+              }
+            }, function(e) {
+              fail(e, null);
+            });
+          } else {
+            fail(null, data.reason);
+          }
+        }, function(e) {
+          fail(e, null);
+        });
+      } else if (vo.type === "ftjc") {
+        CAPIWS.callFunction({
+          plugin: "ftjc",
+          name: "load_key",
+          arguments: [vo.cardUID]
+        }, function(event, data) {
+          if (data.success) {
+            var id = data.keyId;
+            CAPIWS.callFunction({
+              name: "change_pin",
+              plugin: "ftjc",
+              arguments: [id, "1"]
+            }, function(event2, data2) {
+              if (data2.success) {
+                success();
+              } else {
+                fail(null, data2.reason);
+              }
+            }, function(e) {
+              fail(e, null);
+            });
+          } else {
+            fail(null, data.reason);
+          }
+        }, function(e) {
+          fail(e, null);
+        });
+      }
+    }
+  },
+  createPkcs7: function(id, data, timestamper, success, fail, detached, isDataBase64Encoded, enableAttachTimestamp = true) {
+    var data64;
+    if (isDataBase64Encoded === true) {
+      data64 = data;
+    } else {
+      data64 = Base64.encode(data);
+    }
+    if (detached === true) {
+      detached = "yes";
+    } else {
+      detached = "no";
+    }
+    CAPIWS.callFunction({
+      plugin: "pkcs7",
+      name: "create_pkcs7",
+      arguments: [data64, id, detached]
+    }, function(event, data2) {
+      if (data2.success) {
+        var pkcs7 = data2.pkcs7_64;
+        if (timestamper) {
+          var sn = data2.signer_serial_number;
+          timestamper(data2.signature_hex, function(tst) {
+            if (enableAttachTimestamp) {
+              CAPIWS.callFunction({
+                plugin: "pkcs7",
+                name: "attach_timestamp_token_pkcs7",
+                arguments: [pkcs7, sn, tst]
+              }, function(event2, data3) {
+                if (data3.success) {
+                  var pkcs7tst = data3.pkcs7_64;
+                  success(pkcs7tst);
+                } else {
+                  fail(null, data3.reason);
+                }
+              }, function(e) {
+                fail(e, null);
+              });
+            } else {
+              success(tst);
+            }
+          }, fail, data2.pkcs7_64);
+        } else {
+          success(pkcs7);
+        }
+      } else {
+        fail(null, data2.reason);
+      }
+    }, function(e) {
+      fail(e, null);
+    });
+  },
+  _getX500Val: function(s, f) {
+    var res = s.splitKeep(/,[A-Z]+=/g, true);
+    for (var i in res) {
+      var n = res[i].search((i > 0 ? "," : "") + f + "=");
+      if (n !== -1) {
+        return res[i].slice(n + f.length + 1 + (i > 0 ? 1 : 0));
+      }
+    }
+    return "";
+  },
+  _findPfxs2: function(itemIdGen, itemUiGen, items, errors, callback) {
+    var itmkey0;
+    CAPIWS.callFunction({ plugin: "pfx", name: "list_all_certificates" }, function(event, data) {
+      if (data.success) {
+        for (var rec in data.certificates) {
+          var el = data.certificates[rec];
+          var x500name_ex = el.alias.toUpperCase();
+          x500name_ex = x500name_ex.replace("1.2.860.3.16.1.1=", "INN=");
+          x500name_ex = x500name_ex.replace("1.2.860.3.16.1.2=", "PINFL=");
+          var vo = {
+            disk: el.disk,
+            path: el.path,
+            name: el.name,
+            alias: el.alias,
+            serialNumber: EIMZOClient._getX500Val(x500name_ex, "SERIALNUMBER"),
+            validFrom: new Date(EIMZOClient._getX500Val(x500name_ex, "VALIDFROM").replace(/\./g, "-").replace(" ", "T")),
+            validTo: new Date(EIMZOClient._getX500Val(x500name_ex, "VALIDTO").replace(/\./g, "-").replace(" ", "T")),
+            CN: EIMZOClient._getX500Val(x500name_ex, "CN"),
+            TIN: EIMZOClient._getX500Val(x500name_ex, "INN") ? EIMZOClient._getX500Val(x500name_ex, "INN") : EIMZOClient._getX500Val(x500name_ex, "UID"),
+            UID: EIMZOClient._getX500Val(x500name_ex, "UID"),
+            PINFL: EIMZOClient._getX500Val(x500name_ex, "PINFL"),
+            O: EIMZOClient._getX500Val(x500name_ex, "O"),
+            T: EIMZOClient._getX500Val(x500name_ex, "T"),
+            type: "pfx"
+          };
+          if (!vo.TIN && !vo.PINFL)
+            continue;
+          var itmkey = itemIdGen(vo, rec);
+          if (!itmkey0) {
+            itmkey0 = itmkey;
+          }
+          var itm = itemUiGen(itmkey, vo);
+          items.push(itm);
+        }
+      } else {
+        errors.push({ r: data.reason });
+      }
+      callback(itmkey0);
+    }, function(e) {
+      errors.push({ e });
+      callback(itmkey0);
+    });
+  },
+  _findTokens2: function(itemIdGen, itemUiGen, items, errors, callback) {
+    var itmkey0;
+    CAPIWS.callFunction({ plugin: "ftjc", name: "list_all_keys", arguments: [""] }, function(event, data) {
+      if (data.success) {
+        for (var rec in data.tokens) {
+          var el = data.tokens[rec];
+          var x500name_ex = el.info.toUpperCase();
+          x500name_ex = x500name_ex.replace("1.2.860.3.16.1.1=", "INN=");
+          x500name_ex = x500name_ex.replace("1.2.860.3.16.1.2=", "PINFL=");
+          var vo = {
+            cardUID: el.cardUID,
+            statusInfo: el.statusInfo,
+            ownerName: el.ownerName,
+            info: el.info,
+            serialNumber: EIMZOClient._getX500Val(x500name_ex, "SERIALNUMBER"),
+            validFrom: new Date(EIMZOClient._getX500Val(x500name_ex, "VALIDFROM")),
+            validTo: new Date(EIMZOClient._getX500Val(x500name_ex, "VALIDTO")),
+            CN: EIMZOClient._getX500Val(x500name_ex, "CN"),
+            TIN: EIMZOClient._getX500Val(x500name_ex, "INN") ? EIMZOClient._getX500Val(x500name_ex, "INN") : EIMZOClient._getX500Val(x500name_ex, "UID"),
+            UID: EIMZOClient._getX500Val(x500name_ex, "UID"),
+            PINFL: EIMZOClient._getX500Val(x500name_ex, "PINFL"),
+            O: EIMZOClient._getX500Val(x500name_ex, "O"),
+            T: EIMZOClient._getX500Val(x500name_ex, "T"),
+            type: "ftjc"
+          };
+          if (!vo.TIN && !vo.PINFL)
+            continue;
+          var itmkey = itemIdGen(vo, rec);
+          if (!itmkey0) {
+            itmkey0 = itmkey;
+          }
+          var itm = itemUiGen(itmkey, vo);
+          items.push(itm);
+        }
+      } else {
+        errors.push({ r: data.reason });
+      }
+      callback(itmkey0);
+    }, function(e) {
+      errors.push({ e });
+      callback(itmkey0);
+    });
+  }
+};
+
+// src/vendor/index.ts
+var rawClient = EIMZOClient;
+function pickGlobal(name) {
+  const g = globalThis;
+  if (g[name] != null) return g[name];
+  const w = g["window"];
+  return w?.[name];
+}
+function getCapiws() {
+  const capiws = pickGlobal("CAPIWS");
+  if (!capiws || typeof capiws.callFunction !== "function") {
+    throw new EimzoError(
+      "E_NOT_INSTALLED",
+      "E-IMZO klienti yuklanmadi (window.CAPIWS topilmadi). Brauzerda ishlayotganingizni tekshiring."
+    );
+  }
+  return capiws;
+}
+function getBase64() {
+  const b64 = pickGlobal("Base64");
+  if (!b64 || typeof b64.encode !== "function") {
+    throw new EimzoError("E_NOT_INSTALLED", "Base64 (E-IMZO SDK) yuklanmadi.");
+  }
+  return b64;
+}
+
+// src/client.ts
+var DEFAULT_TIMEOUT_MS = 3e4;
+var DEFAULT_KEY_LOAD_TIMEOUT_MS = 12e4;
+var DEFAULT_MIN_VERSION = { major: 3, minor: 37 };
+var EimzoClient = class {
+  constructor(options) {
+    /** Faqat joriy sessiya davomida to'ldiriladi; `signBatch` oxirida tozalanadi. */
+    this.activeKeySerial = null;
+    if (!Array.isArray(options?.apiKeys) || options.apiKeys.length === 0) {
+      throw new EimzoError(
+        "E_MISCONFIGURED",
+        "EimzoClient: 'apiKeys' berilishi shart ([[domen, kalit], ...])."
+      );
+    }
+    this.apiKeys = options.apiKeys;
+    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    this.keyLoadTimeoutMs = options.keyLoadTimeoutMs ?? DEFAULT_KEY_LOAD_TIMEOUT_MS;
+    this.minVersion = options.minVersion ?? DEFAULT_MIN_VERSION;
+    this.onAudit = options.onAudit;
+  }
+  // ─── Commanda: o'rnatish ────────────────────────────────────────────────
+  /**
+   * Versiyani tekshiradi va domen API kalitlarini o'rnatadi.
+   * Har imzolash seansidan oldin (yoki ilova yuklanganda bir marta) chaqiring.
+   */
+  async install() {
+    const version = await this.checkVersion();
+    if (!isVersionAtLeast(version, this.minVersion)) {
+      throw new EimzoError(
+        "E_VERSION_LOW",
+        `E-IMZO ${version.major}.${version.minor} \u2014 kamida ${this.minVersion.major}.${this.minVersion.minor} talab qilinadi.`
+      );
+    }
+    rawClient.API_KEYS = this.apiKeys.flatMap(([domain, key]) => [domain, key]);
+    await this.installApiKeys();
+    return version;
+  }
+  checkVersion() {
+    return withTimeout(
+      this.timeoutMs,
+      () => new EimzoError(
+        "E_NOT_INSTALLED",
+        "E-IMZO dasturi javob bermadi (versiya so'rovi). Dastur ishga tushganini tekshiring."
+      ),
+      (resolve, reject) => {
+        rawClient.checkVersion(
+          (major, minor) => {
+            this.audit({ type: "version_checked", ts: nowIso(), major, minor });
+            resolve({ major, minor });
+          },
+          (error) => reject(
+            new EimzoError("E_NOT_INSTALLED", "E-IMZO dasturi topilmadi.", {
+              cause: error
+            })
+          )
+        );
+      }
+    );
+  }
+  installApiKeys() {
+    return withTimeout(
+      this.timeoutMs,
+      () => new EimzoError("E_TIMEOUT", "API kalitlari o'rnatilmadi (javob yo'q)."),
+      (resolve, reject) => {
+        rawClient.installApiKeys(
+          () => resolve(),
+          (error) => reject(
+            new EimzoError(
+              "E_API_KEY_REJECTED",
+              "Domen API kaliti rad etildi. Domen va kalit juftligini tekshiring.",
+              { cause: error }
+            )
+          )
+        );
+      }
+    );
+  }
+  // ─── So'rov: sertifikatlar ───────────────────────────────────────────────
+  /** Foydalanuvchining barcha kalitlari (disk + token). ID-karta bunga kirmaydi. */
+  listCerts() {
+    return withTimeout(
+      this.timeoutMs,
+      () => new EimzoError("E_TIMEOUT", "Sertifikatlar ro'yxati javob bermadi."),
+      (resolve, reject) => {
+        rawClient.listAllUserKeys(
+          (cert, index) => `${cert.serialNumber}-${index}`,
+          (_id, cert) => cert,
+          (items) => {
+            const certs = items.map((raw) => normalizeCert(raw));
+            this.audit({ type: "certs_listed", ts: nowIso(), count: certs.length });
+            resolve(certs);
+          },
+          (error) => reject(
+            new EimzoError("E_NO_CERTS", "Sertifikatlarni o'qib bo'lmadi.", {
+              cause: error
+            })
+          )
+        );
+      }
+    );
+  }
+  /** ID-karta o'quvchiga ulanganmi. Timeout'da `false` qaytaradi (xato tashlamaydi). */
+  isIdCardPlugged() {
+    return new Promise((resolve) => {
+      let settled = false;
+      const finish = (value) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve(value);
+      };
+      const timer = setTimeout(() => finish(false), this.timeoutMs);
+      try {
+        rawClient.idCardIsPLuggedIn(
+          (plugged) => finish(Boolean(plugged)),
+          () => finish(false)
+        );
+      } catch {
+        finish(false);
+      }
+    });
+  }
+  /** ID-karta uchun "sertifikat" o'rnini bosuvchi belgili obyekt. */
+  static idCardCert() {
+    const far = new Date(Date.now() + 10 * 365 * 24 * 60 * 60 * 1e3);
+    return {
+      serialNumber: "IDCARD",
+      CN: "ID card",
+      TIN: "",
+      UID: "",
+      O: "",
+      T: "",
+      validFrom: /* @__PURE__ */ new Date(0),
+      validTo: far,
+      type: "idcard",
+      raw: null
+    };
+  }
+  // ─── Commanda: partiyali imzolash ───────────────────────────────────────
+  /**
+   * Bitta sertifikat bilan bir nechta hujjatni imzolaydi.
+   *
+   * Oqim:
+   *  1. Kalitni bir marta yuklaydi (`idcard` bo'lsa — yuklamaydi).
+   *  2. Har hujjat uchun `create_pkcs7` ni KETMA-KET chaqiradi (parallel EMAS —
+   *     CAPIWS bitta soket).
+   *  3. Har natijada `signer_serial_number` ni tekshiradi.
+   *  4. Yakunda kalit holatini tozalaydi.
+   *
+   * Bitta hujjat xato bersa — massivda `ok:false` bilan qoladi, qolganlari davom etadi.
+   * Foydalanuvchi bekor qilsa (`signal`) — `E_CANCELLED` tashlanadi.
+   */
+  async signBatch(cert, docs, options = {}) {
+    if (docs.length === 0) {
+      throw new EimzoError("E_MISCONFIGURED", "Imzolash uchun hujjat berilmadi.");
+    }
+    assertUniqueIds(docs);
+    const { signal, onProgress } = options;
+    throwIfAborted(signal);
+    const base64 = getBase64();
+    const keyId = await this.acquireKey(cert, signal);
+    const results = [];
+    let signed = 0;
+    let failed = 0;
+    try {
+      for (let i = 0; i < docs.length; i += 1) {
+        throwIfAborted(signal);
+        const doc = docs[i];
+        onProgress?.({ done: i, total: docs.length, currentId: doc.id });
+        this.audit({
+          type: "sign_started",
+          ts: nowIso(),
+          serial: cert.serialNumber,
+          docId: doc.id
+        });
+        try {
+          const raw = await this.createPkcs7(keyId, base64.encode(doc.content), signal);
+          const signerSerial = String(raw["signer_serial_number"] ?? "");
+          if (cert.type !== "idcard" && normalizeSerial(signerSerial) !== normalizeSerial(cert.serialNumber)) {
+            throw new EimzoError(
+              "E_SERIAL_MISMATCH",
+              "Imzolangan sertifikat seriyasi tanlangandan farq qiladi."
+            );
+          }
+          results.push({
+            id: doc.id,
+            ok: true,
+            pkcs7_64: String(raw["pkcs7_64"] ?? ""),
+            signature_hex: String(raw["signature_hex"] ?? ""),
+            signer_serial_number: signerSerial
+          });
+          signed += 1;
+          this.audit({
+            type: "sign_ok",
+            ts: nowIso(),
+            serial: cert.serialNumber,
+            docId: doc.id
+          });
+        } catch (error) {
+          if (EimzoError.is(error, "E_CANCELLED")) throw error;
+          const err = toEimzoError(error, "E_SIGN_FAILED", "Hujjatni imzolab bo'lmadi.");
+          results.push({ id: doc.id, ok: false, error: err });
+          failed += 1;
+          this.audit({
+            type: "sign_failed",
+            ts: nowIso(),
+            docId: doc.id,
+            code: err.code
+          });
+        }
+      }
+      onProgress?.({ done: docs.length, total: docs.length });
+      return results;
+    } finally {
+      this.activeKeySerial = null;
+      this.audit({
+        type: "session_ended",
+        ts: nowIso(),
+        serial: cert.serialNumber,
+        signed,
+        failed
+      });
+    }
+  }
+  /** Yagona hujjatni imzolash — `signBatch` ustidagi qulaylik. */
+  async sign(cert, content, options = {}) {
+    const [item] = await this.signBatch(cert, [{ id: "single", content }], options);
+    return item;
+  }
+  // ─── Ichki ─────────────────────────────────────────────────────────────
+  async acquireKey(cert, signal) {
+    if (cert.type === "idcard") return "idcard";
+    try {
+      return await this.loadKey(cert, signal);
+    } catch (error) {
+      throw toEimzoError(
+        error,
+        "E_KEY_LOAD_CANCELLED",
+        "Kalit yuklanmadi yoki bekor qilindi."
+      );
+    }
+  }
+  loadKey(cert, signal) {
+    return withTimeout(
+      this.keyLoadTimeoutMs,
+      () => new EimzoError(
+        "E_KEY_LOAD_CANCELLED",
+        "Kalit yuklash javob bermadi (parol oynasi ochilmadi yoki yopilmadi)."
+      ),
+      (resolve, reject) => {
+        rawClient.loadKey(
+          cert.raw,
+          (id) => {
+            this.activeKeySerial = cert.serialNumber;
+            this.audit({
+              type: "key_loaded",
+              ts: nowIso(),
+              serial: cert.serialNumber
+            });
+            resolve(id);
+          },
+          (error) => reject(
+            new EimzoError("E_KEY_LOAD_CANCELLED", "Kalit yuklanmadi.", {
+              cause: error
+            })
+          )
+        );
+      },
+      signal
+    );
+  }
+  createPkcs7(keyId, contentBase64, signal) {
+    return withTimeout(
+      this.timeoutMs,
+      () => new EimzoError("E_TIMEOUT", "Imzolash javob bermadi (create_pkcs7)."),
+      (resolve, reject) => {
+        let capiws;
+        try {
+          capiws = getCapiws();
+        } catch (error) {
+          reject(error);
+          return;
+        }
+        capiws.callFunction(
+          {
+            plugin: "pkcs7",
+            name: "create_pkcs7",
+            arguments: [contentBase64, keyId, "no"]
+          },
+          (_event, data) => {
+            if (data && data.success) {
+              resolve(data);
+            } else {
+              reject(
+                new EimzoError(
+                  "E_SIGN_FAILED",
+                  reasonOf(data) || "E-IMZO imzolashni rad etdi.",
+                  { cause: data }
+                )
+              );
+            }
+          },
+          (error) => reject(
+            new EimzoError("E_TRANSPORT", "E-IMZO bilan aloqa uzildi.", {
+              cause: error
+            })
+          )
+        );
+      },
+      signal
+    );
+  }
+  audit(event) {
+    if (!this.onAudit) return;
+    try {
+      this.onAudit(event);
+    } catch {
+    }
+  }
+};
+function isVersionAtLeast(actual, min) {
+  if (actual.major !== min.major) return actual.major > min.major;
+  return actual.minor >= min.minor;
+}
+function reasonOf(data) {
+  return data && typeof data.reason === "string" ? data.reason : "";
+}
+var KNOWN_TYPES = /* @__PURE__ */ new Set(["pfx", "ftjc", "idcard"]);
+function normalizeCert(raw) {
+  return {
+    serialNumber: normalizeSerial(raw.serialNumber),
+    CN: str(raw.CN),
+    TIN: str(raw.TIN),
+    UID: str(raw.UID),
+    O: str(raw.O),
+    T: str(raw.T),
+    validFrom: toDate(raw.validFrom),
+    validTo: toDate(raw.validTo),
+    type: KNOWN_TYPES.has(raw.type) ? raw.type : "pfx",
+    raw
+  };
+}
+function str(value) {
+  return value == null ? "" : String(value);
+}
+function toDate(value) {
+  if (value instanceof Date) return value;
+  const d = new Date(String(value ?? ""));
+  return Number.isNaN(d.getTime()) ? /* @__PURE__ */ new Date(0) : d;
+}
+function assertUniqueIds(docs) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const doc of docs) {
+    if (!doc.id) {
+      throw new EimzoError("E_MISCONFIGURED", "Har bir hujjatda id bo'lishi shart.");
+    }
+    if (seen.has(doc.id)) {
+      throw new EimzoError("E_MISCONFIGURED", `Hujjat id'si takrorlangan: ${doc.id}`);
+    }
+    seen.add(doc.id);
+  }
+}
+
+// src/cert-utils.ts
+function certIsExpired(cert, at = /* @__PURE__ */ new Date()) {
+  return cert.validTo.getTime() < at.getTime();
+}
+function certIsNotYetValid(cert, at = /* @__PURE__ */ new Date()) {
+  return cert.validFrom.getTime() > at.getTime();
+}
+function certIsUsable(cert, at = /* @__PURE__ */ new Date()) {
+  return !certIsExpired(cert, at) && !certIsNotYetValid(cert, at);
+}
+function certExpiresSoon(cert, withinDays = 14, at = /* @__PURE__ */ new Date()) {
+  if (certIsExpired(cert, at)) return false;
+  const msLeft = cert.validTo.getTime() - at.getTime();
+  return msLeft <= withinDays * 24 * 60 * 60 * 1e3;
+}
+function sortCerts(certs, at = /* @__PURE__ */ new Date()) {
+  return [...certs].sort((a, b) => {
+    const au = certIsUsable(a, at);
+    const bu = certIsUsable(b, at);
+    if (au !== bu) return au ? -1 : 1;
+    return b.validTo.getTime() - a.validTo.getTime();
+  });
+}
+function dedupeCerts(certs) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const cert of certs) {
+    if (seen.has(cert.serialNumber)) continue;
+    seen.add(cert.serialNumber);
+    out.push(cert);
+  }
+  return out;
+}
+
+exports.EimzoClient = EimzoClient;
+exports.EimzoError = EimzoError;
+exports.certExpiresSoon = certExpiresSoon;
+exports.certIsExpired = certIsExpired;
+exports.certIsNotYetValid = certIsNotYetValid;
+exports.certIsUsable = certIsUsable;
+exports.dedupeCerts = dedupeCerts;
+exports.sortCerts = sortCerts;
+exports.toEimzoError = toEimzoError;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map