ksef-client-ts 0.1.0 → 0.2.0

package/dist/index.d.cts

@@ -16,7 +16,7 @@ declare const Environment: {
         readonly qrUrl: "https://qr-demo.ksef.mf.gov.pl";
         readonly lighthouseUrl: "";
     };
-    readonly PRD: {
+    readonly PROD: {
         readonly apiUrl: "https://api.ksef.mf.gov.pl";
         readonly qrUrl: "https://qr.ksef.mf.gov.pl";
         readonly lighthouseUrl: "https://api-latarnia.ksef.mf.gov.pl";
@@ -122,7 +122,7 @@ interface UnauthorizedProblemDetails {
     instance?: string;
     traceId?: string;
 }
-type ForbiddenReasonCode = 'missing-permissions' | 'ip-not-allowed' | 'insufficient-resource-access' | 'auth-method-not-allowed' | 'security-service-blocked' | (string & {});
+type ForbiddenReasonCode = 'missing-permissions' | 'ip-not-allowed' | 'insufficient-resource-access' | 'auth-method-not-allowed' | 'security-service-blocked' | 'context-type-not-allowed' | (string & {});
 interface ForbiddenProblemDetails {
     title: string;
     status: number;
@@ -257,6 +257,7 @@ declare class RestClient {
     private readonly presignedUrlPolicy?;
     constructor(options: ResolvedOptions, config?: RestClientConfig);
     execute<T>(request: RestRequest): Promise<RestResponse<T>>;
+    executeVoid(request: RestRequest): Promise<void>;
     executeRaw(request: RestRequest): Promise<RestResponse<ArrayBuffer>>;
     private sendRequest;
     private doRequest;
@@ -392,6 +393,19 @@ declare const Routes: {
     };
 };
 
+/** Header name for KSeF feature negotiation. */
+declare const KSEF_FEATURE_HEADER: "X-KSeF-Feature";
+/** Known UPO format versions. */
+declare const UpoVersion: {
+    /** UPO v4-2 format (default before 2026-01-05). */
+    readonly V4_2: "upo-v4-2";
+    /** UPO v4-3 format (default from 2026-01-05, adds InvoicingMode field). */
+    readonly V4_3: "upo-v4-3";
+};
+type UpoVersion = (typeof UpoVersion)[keyof typeof UpoVersion];
+/** XAdES compliance enforcement value for X-KSeF-Feature header. */
+declare const ENFORCE_XADES_COMPLIANCE: "enforce-xades-compliance";
+
 declare const Nip: RegExp;
 declare const VatUe: RegExp;
 declare const NipVatUe: RegExp;
@@ -416,6 +430,8 @@ declare function isValidInternalId(value: string): boolean;
 declare function isValidPeppolId(value: string): boolean;
 declare function isValidReferenceNumber(value: string): boolean;
 declare function isValidKsefNumber(value: string): boolean;
+declare function isValidKsefNumberV35(value: string): boolean;
+declare function isValidKsefNumberV36(value: string): boolean;
 declare function isValidPesel(value: string): boolean;
 declare function isValidCertificateName(value: string): boolean;
 declare function isValidCertificateFingerprint(value: string): boolean;
@@ -437,7 +453,7 @@ interface OperationResponse {
 interface OperationStatusInfo {
     code: number;
     description: string;
-    details?: string[];
+    details?: string[] | null;
 }
 interface TokenInfo {
     token: string;
@@ -494,11 +510,11 @@ interface AuthenticationOperationStatusResponse {
     startDate: string;
     authenticationMethodInfo: AuthenticationMethodInfo;
     /** @deprecated Required by spec but deprecated. */
-    authenticationMethod?: AuthenticationMethod;
+    authenticationMethod: AuthenticationMethod;
     status: OperationStatusInfo;
-    isTokenRedeemed?: boolean;
-    lastTokenRefreshDate?: string;
-    refreshTokenValidUntil?: string;
+    isTokenRedeemed?: boolean | null;
+    lastTokenRefreshDate?: string | null;
+    refreshTokenValidUntil?: string | null;
 }
 /**
  * Subject identifier type for the XAdES auth XML request.
@@ -507,12 +523,12 @@ interface AuthenticationOperationStatusResponse {
  */
 type XadesSubjectIdentifierType = 'certificateSubject' | (string & {});
 interface AllowedIps {
-    ip4Addresses?: string[];
-    ip4Ranges?: string[];
-    ip4Masks?: string[];
+    ip4Addresses?: string[] | null;
+    ip4Ranges?: string[] | null;
+    ip4Masks?: string[] | null;
 }
 interface AuthorizationPolicy {
-    allowedIps?: AllowedIps;
+    allowedIps?: AllowedIps | null;
 }
 interface AuthTokenRequest {
     challenge: string;
@@ -532,16 +548,16 @@ interface AuthSessionInfo {
     startDate: string;
     authenticationMethodInfo: AuthenticationMethodInfo;
     /** @deprecated Required by spec but deprecated. */
-    authenticationMethod?: AuthenticationMethod;
+    authenticationMethod: AuthenticationMethod;
     status: OperationStatusInfo;
-    isTokenRedeemed?: boolean;
-    lastTokenRefreshDate?: string;
-    refreshTokenValidUntil?: string;
+    isTokenRedeemed?: boolean | null;
+    lastTokenRefreshDate?: string | null;
+    refreshTokenValidUntil?: string | null;
     referenceNumber: string;
     isCurrent: boolean;
 }
 interface AuthenticationListResponse {
-    continuationToken?: string;
+    continuationToken?: string | null;
     items: AuthSessionInfo[];
 }
 
@@ -645,7 +661,7 @@ interface InvoiceStatusInfo {
     code: number;
     description: string;
     details?: string[];
-    extensions?: Record<string, string>;
+    extensions?: Record<string, string | null> | null;
 }
 interface SessionInvoiceStatusResponse {
     ordinalNumber: number;
@@ -683,7 +699,7 @@ type InvoiceQueryDateType = 'Issue' | 'Invoicing' | 'PermanentStorage';
 type AmountType = 'Brutto' | 'Netto' | 'Vat';
 type BuyerIdentifierType = 'Nip' | 'VatUe' | 'Other' | 'None';
 type ThirdSubjectIdentifierType = 'Nip' | 'InternalId' | 'VatUe' | 'Other' | 'None';
-type FormType = 'FA' | 'PEF' | 'RR';
+type FormType = 'FA' | 'PEF' | 'RR' | 'FA_RR';
 type InvoiceType = 'Vat' | 'Zal' | 'Kor' | 'Roz' | 'Upr' | 'KorZal' | 'KorRoz' | 'VatPef' | 'VatPefSp' | 'KorPef' | 'VatRr' | 'KorVatRr';
 interface InvoiceQueryDateRange {
     dateType: InvoiceQueryDateType;
@@ -773,6 +789,7 @@ interface QueryInvoicesMetadataResponse {
 interface InvoiceExportRequest {
     encryption: EncryptionInfo;
     filters: InvoiceQueryFilters;
+    onlyMetadata?: boolean;
 }
 interface InvoiceExportPackagePart {
     ordinalNumber: number;
@@ -1560,10 +1577,6 @@ interface BlockContextAuthenticationRequest {
 interface UnblockContextAuthenticationRequest {
     contextIdentifier?: TestDataAuthenticationContextIdentifier | null;
 }
-interface TestDataStatusResponse {
-    code: number;
-    description: string;
-}
 
 type PublicKeyCertificateUsage = 'KsefTokenEncryption' | 'SymmetricKeyEncryption';
 interface PublicKeyCertificate {
@@ -1613,7 +1626,7 @@ declare class AuthService {
     private readonly restClient;
     constructor(restClient: RestClient);
     getChallenge(): Promise<AuthChallengeResponse>;
-    submitXadesAuthRequest(signedXml: string, verifyCertificateChain?: boolean): Promise<AuthenticationInitResponse>;
+    submitXadesAuthRequest(signedXml: string, verifyCertificateChain?: boolean, enforceXadesCompliance?: boolean): Promise<AuthenticationInitResponse>;
     submitKsefTokenAuthRequest(payload: AuthKsefTokenRequest): Promise<AuthenticationInitResponse>;
     getAuthStatus(referenceNumber: string, authToken: string): Promise<AuthenticationOperationStatusResponse>;
     getAccessToken(authToken: string): Promise<AuthenticationTokensResponse>;
@@ -1631,7 +1644,7 @@ declare class ActiveSessionsService {
 declare class OnlineSessionService {
     private readonly restClient;
     constructor(restClient: RestClient);
-    openSession(request: OpenOnlineSessionRequest, upoVersion?: string): Promise<OpenOnlineSessionResponse>;
+    openSession(request: OpenOnlineSessionRequest, upoVersion?: UpoVersion | string): Promise<OpenOnlineSessionResponse>;
     sendInvoice(sessionRef: string, request: SendInvoiceRequest): Promise<SendInvoiceResponse>;
     closeSession(sessionRef: string): Promise<void>;
 }
@@ -1639,7 +1652,7 @@ declare class OnlineSessionService {
 declare class BatchSessionService {
     private readonly restClient;
     constructor(restClient: RestClient);
-    openSession(request: OpenBatchSessionRequest, upoVersion?: string): Promise<OpenBatchSessionResponse>;
+    openSession(request: OpenBatchSessionRequest, upoVersion?: UpoVersion | string): Promise<OpenBatchSessionResponse>;
     sendParts(openResponse: OpenBatchSessionResponse, parts: BatchPartSendingInfo[]): Promise<void>;
     closeSession(batchRef: string): Promise<void>;
 }
@@ -1739,23 +1752,23 @@ declare class PeppolService {
 declare class TestDataService {
     private readonly restClient;
     constructor(restClient: RestClient);
-    createSubject(request: SubjectCreateRequest): Promise<TestDataStatusResponse>;
-    removeSubject(request: SubjectRemoveRequest): Promise<TestDataStatusResponse>;
-    createPerson(request: PersonCreateRequest): Promise<TestDataStatusResponse>;
-    removePerson(request: PersonRemoveRequest): Promise<TestDataStatusResponse>;
-    grantPermissions(request: TestDataPermissionsGrantRequest): Promise<TestDataStatusResponse>;
-    revokePermissions(request: TestDataPermissionsRevokeRequest): Promise<TestDataStatusResponse>;
-    enableAttachment(request: AttachmentPermissionGrantRequest): Promise<TestDataStatusResponse>;
-    disableAttachment(request: AttachmentPermissionRevokeRequest): Promise<TestDataStatusResponse>;
-    changeSessionLimits(request: SetSessionLimitsRequest): Promise<TestDataStatusResponse>;
-    restoreDefaultSessionLimits(): Promise<TestDataStatusResponse>;
-    changeCertificatesLimit(request: SetSubjectLimitsRequest): Promise<TestDataStatusResponse>;
-    restoreDefaultCertificatesLimit(): Promise<TestDataStatusResponse>;
-    setRateLimits(request: SetRateLimitsRequest): Promise<TestDataStatusResponse>;
-    restoreDefaultRateLimits(): Promise<TestDataStatusResponse>;
-    setProductionRateLimits(): Promise<TestDataStatusResponse>;
-    blockContext(request: BlockContextAuthenticationRequest): Promise<TestDataStatusResponse>;
-    unblockContext(request: UnblockContextAuthenticationRequest): Promise<TestDataStatusResponse>;
+    createSubject(request: SubjectCreateRequest): Promise<void>;
+    removeSubject(request: SubjectRemoveRequest): Promise<void>;
+    createPerson(request: PersonCreateRequest): Promise<void>;
+    removePerson(request: PersonRemoveRequest): Promise<void>;
+    grantPermissions(request: TestDataPermissionsGrantRequest): Promise<void>;
+    revokePermissions(request: TestDataPermissionsRevokeRequest): Promise<void>;
+    enableAttachment(request: AttachmentPermissionGrantRequest): Promise<void>;
+    disableAttachment(request: AttachmentPermissionRevokeRequest): Promise<void>;
+    changeSessionLimits(request: SetSessionLimitsRequest): Promise<void>;
+    restoreDefaultSessionLimits(): Promise<void>;
+    changeCertificatesLimit(request: SetSubjectLimitsRequest): Promise<void>;
+    restoreDefaultCertificatesLimit(): Promise<void>;
+    setRateLimits(request: SetRateLimitsRequest): Promise<void>;
+    restoreDefaultRateLimits(): Promise<void>;
+    setProductionRateLimits(): Promise<void>;
+    blockContext(request: BlockContextAuthenticationRequest): Promise<void>;
+    unblockContext(request: UnblockContextAuthenticationRequest): Promise<void>;
 }
 
 declare class AuthTokenRequestBuilder {
@@ -1958,6 +1971,14 @@ declare class CertificateService {
     static generateCompanySeal(orgName: string, orgIdentifier: string, commonName: string, method?: CryptoEncryptionMethod): Promise<SelfSignedCertificateResult>;
 }
 
+interface Pkcs12Result {
+    certificatePem: string;
+    privateKeyPem: string;
+}
+declare class Pkcs12Loader {
+    static load(p12: Buffer | Uint8Array, password: string): Pkcs12Result;
+}
+
 declare class VerificationLinkService {
     private readonly baseQrUrl;
     constructor(baseQrUrl: string);
@@ -1982,6 +2003,53 @@ declare class QrCodeService {
     static generateResult(url: string, options?: QrCodeOptions): Promise<QrCodeResult>;
 }
 
+interface PollOptions {
+    intervalMs?: number;
+    maxAttempts?: number;
+    onProgress?: (attempt: number, maxAttempts: number) => void;
+}
+interface OnlineSessionHandle {
+    readonly sessionRef: string;
+    readonly validUntil: string;
+    sendInvoice(invoiceXml: string | Uint8Array): Promise<string>;
+    close(): Promise<void>;
+    waitForUpo(options?: PollOptions): Promise<UpoInfo>;
+}
+interface UpoInfo {
+    pages: Array<{
+        referenceNumber: string;
+        downloadUrl: string;
+    }>;
+    invoiceCount?: number;
+    successfulInvoiceCount?: number;
+    failedInvoiceCount?: number;
+}
+interface BatchUploadResult {
+    sessionRef: string;
+    upo: UpoInfo;
+}
+interface ExportResult {
+    parts: Array<{
+        ordinalNumber: number;
+        url: string;
+        method: string;
+        partSize: number;
+        encryptedPartSize: number;
+        encryptedPartHash: string;
+        expirationDate: string;
+    }>;
+    invoiceCount: number;
+    isTruncated: boolean;
+    permanentStorageHwmDate?: string;
+}
+interface ExportDownloadResult extends ExportResult {
+    decryptedParts: Uint8Array[];
+}
+
+declare function pollUntil<T>(action: () => Promise<T>, condition: (result: T) => boolean, options?: PollOptions & {
+    description?: string;
+}): Promise<T>;
+
 declare class KSeFClient {
     readonly auth: AuthService;
     readonly activeSessions: ActiveSessionsService;
@@ -2003,7 +2071,72 @@ declare class KSeFClient {
     constructor(options?: KSeFClientOptions);
     loginWithToken(token: string, nip: string): Promise<void>;
     loginWithCertificate(certPem: string, keyPem: string, nip: string): Promise<void>;
+    loginWithPkcs12(p12: Buffer | Uint8Array, password: string, nip: string): Promise<void>;
+    private awaitAuthReady;
     logout(): Promise<void>;
 }
 
-export { ActiveSessionsService, type AllowedIps, type AmountType, type ApiErrorResponse, type ApiRateLimitValuesOverride, type ApiRateLimitsOverride, type AttachmentPermissionGrantRequest, type AttachmentPermissionRevokeRequest, type AuthChallengeResponse, type AuthKsefTokenRequest, AuthKsefTokenRequestBuilder, type AuthManager, AuthService, type AuthSessionInfo, type AuthTokenRequest, AuthTokenRequestBuilder, type AuthenticationInitResponse, type AuthenticationKsefToken, type AuthenticationListResponse, type AuthenticationMethod, type AuthenticationMethodInfo, type AuthenticationMethodInfoCategory, type AuthenticationOperationStatusResponse, type AuthenticationTokenRefreshResponse, type AuthenticationTokensResponse, type AuthorizationGrant, AuthorizationPermissionGrantBuilder, type AuthorizationPolicy, Base64String, type BatchFileInfo, type BatchFilePartInfo, type BatchPartSendingInfo, type BatchSessionContextLimitsOverride, type BatchSessionEffectiveContextLimits, BatchSessionService, type BlockContextAuthenticationRequest, type BuyerIdentifierType, CERTIFICATE_NAME_MAX_LENGTH, CERTIFICATE_NAME_MIN_LENGTH, CertificateApiService, type CertificateEffectiveSubjectLimits, type CertificateEnrollmentDataResponse, type CertificateEnrollmentStatusResponse, CertificateFetcher, CertificateFingerprint, type CertificateLimit, type CertificateLimitsResponse, type CertificateListItem, CertificateName, type CertificateRevocationReason, CertificateService, type CertificateStatus, type CertificateSubjectIdentifier, type CertificateSubjectIdentifierType, type CertificateSubjectLimitsOverride, type CertificateType, type ContextIdentifier, type ContextIdentifierType, type CryptoEncryptionMethod, CryptographyService, type CsrResult, DefaultAuthManager, type EffectiveApiRateLimitValues, type EffectiveApiRateLimits, type EffectiveContextLimits, type EffectiveSubjectLimits, type EncryptionData, type EncryptionInfo, type EnrollCertificateRequest, type EnrollCertificateResponse, type EnrollmentEffectiveSubjectLimits, type EnrollmentSubjectLimitsOverride, type EntityAuthorizationGrant, type EntityAuthorizationPermissionType, type EntityAuthorizationPermissionsSubjectIdentifierType, type EntityAuthorizationSubjectIdentifier, type EntityAuthorizationsAuthorIdentifier, type EntityAuthorizationsAuthorIdentifierType, type EntityAuthorizationsAuthorizedEntityIdentifier, type EntityAuthorizationsAuthorizedEntityIdentifierType, type EntityAuthorizationsAuthorizingEntityIdentifier, type EntityAuthorizationsAuthorizingEntityIdentifierType, type EntityAuthorizationsQueryType, type EntityByFingerprintDetails, type EntityDetails, type EntityPermission, EntityPermissionGrantBuilder, type EntityPermissionItem, type EntityPermissionItemType, type EntityPermissionsContextIdentifier, type EntityPermissionsContextIdentifierType, type EntityRole, type EntityRoleType, type EntityRolesParentEntityIdentifier, type EntityRolesParentEntityIdentifierType, type EntitySubjectByFingerprintDetailsType, type EntitySubjectByIdentifierDetailsType, type EntitySubjectDetailsType, type EntitySubjectIdentifier, Environment, type EnvironmentConfig, type EnvironmentName, type EuEntityAdministrationContextIdentifier, type EuEntityAdministrationPermissionsContextIdentifierType, type EuEntityAdministrationPermissionsSubjectIdentifierType, type EuEntityAdministrationSubjectIdentifier, type EuEntityDetails, type EuEntityPermission, type EuEntityPermissionSubjectDetails, type EuEntityPermissionSubjectDetailsType, type EuEntityPermissionType, type EuEntityPermissionsAuthorIdentifier, type EuEntityPermissionsAuthorIdentifierType, type EuEntityPermissionsQueryPermissionType, type EuEntityPermissionsSubjectIdentifier, type EuEntityPermissionsSubjectIdentifierType, type ExceptionDetails, type FileMetadata, type ForbiddenProblemDetails, type ForbiddenReasonCode, type FormCode, type FormType, type GrantPermissionsAuthorizationRequest, type GrantPermissionsEntityRequest, type GrantPermissionsEuEntityAdminRequest, type GrantPermissionsEuEntityRepresentativeRequest, type GrantPermissionsEuEntityRequest, type GrantPermissionsIndirectRequest, type GrantPermissionsPersonRequest, type GrantPermissionsSubunitRequest, type HttpMethod, type IdDocument, type IndirectPermissionType, type IndirectPermissionsSubjectIdentifier, type IndirectPermissionsSubjectIdentifierType, type IndirectPermissionsTargetIdentifier, type IndirectPermissionsTargetIdentifierType, InternalId, InvoiceDownloadService, type InvoiceExportPackage, type InvoiceExportPackagePart, type InvoiceExportRequest, type InvoiceExportStatusResponse, type InvoiceMetadata, type InvoiceMetadataAuthorizedSubject, type InvoiceMetadataBuyer, type InvoiceMetadataBuyerIdentifier, type InvoiceMetadataSeller, type InvoiceMetadataThirdSubject, type InvoiceMetadataThirdSubjectIdentifier, type InvoicePermissionType, type InvoiceQueryAmount, type InvoiceQueryBuyerIdentifier, type InvoiceQueryDateRange, type InvoiceQueryDateType, InvoiceQueryFilterBuilder, type InvoiceQueryFilters, type InvoiceStatusInfo, type InvoiceSubjectType, type InvoiceType, type InvoicingMode, Ip4Address, Ip4Mask, Ip4Range, KSeFApiError, KSeFAuthStatusError, KSeFClient, type KSeFClientOptions, KSeFError, KSeFForbiddenError, KSeFRateLimitError, KSeFSessionExpiredError, KSeFUnauthorizedError, KSeFValidationError, type KsefMessagesResponse, KsefNumber, KsefNumberV35, KsefNumberV36, type KsefStatusResponse, type KsefSystemStatus, type KsefTokenPermissionType, type KsefTokenRequest, type KsefTokenResponse, type KsefTokenStatus, type LighthouseMessage, LighthouseService, LimitsService, Nip, NipVatUe, type OnlineSessionContextLimitsOverride, type OnlineSessionEffectiveContextLimits, OnlineSessionService, type OpenBatchSessionRequest, type OpenBatchSessionResponse, type OpenOnlineSessionRequest, type OpenOnlineSessionResponse, type OperationResponse, type OperationStatusInfo, PERMISSION_DESCRIPTION_MAX_LENGTH, PERMISSION_DESCRIPTION_MIN_LENGTH, type PagedAuthorizationsResponse, type PagedPermissionsResponse, type PagedRolesResponse, type PartUploadRequest, PeppolId, type PeppolProvider, PeppolService, type PermissionState, type PermissionSubjectIdentifierType, type PermissionWithDelegate, type PermissionsAttachmentAllowedResponse, type PermissionsEuEntityDetails, type PermissionsOperationStatusResponse, PermissionsService, type PermissionsSubjectEntityByFingerprintDetails, type PermissionsSubjectEntityByIdentifierDetails, type PermissionsSubjectEntityDetails, type PermissionsSubjectPersonByFingerprintDetails, type PermissionsSubjectPersonDetails, type PersonByFingerprintWithIdentifierDetails, type PersonByFingerprintWithoutIdentifierDetails, type PersonByIdentifierDetails, type PersonCreateRequest, type PersonIdentifier, type PersonIdentifierType, type PersonPermission, PersonPermissionGrantBuilder, type PersonPermissionSubjectDetails, type PersonPermissionType, type PersonPermissionsAuthorIdentifier, type PersonPermissionsAuthorIdentifierType, type PersonPermissionsAuthorizedIdentifier, type PersonPermissionsAuthorizedIdentifierType, type PersonPermissionsContextIdentifier, type PersonPermissionsContextIdentifierType, type PersonPermissionsQueryType, type PersonPermissionsTargetIdentifier, type PersonPermissionsTargetIdentifierType, type PersonRemoveRequest, type PersonSubjectByFingerprintDetailsType, type PersonSubjectDetailsType, type PersonSubjectIdentifier, type PersonalPermission, type PersonalPermissionScopeType, type PersonalPermissionsAuthorizedIdentifier, type PersonalPermissionsAuthorizedIdentifierType, type PersonalPermissionsContextIdentifier, type PersonalPermissionsContextIdentifierType, type PersonalPermissionsTargetIdentifier, type PersonalPermissionsTargetIdentifierType, Pesel, type PresignedUrlPolicy, type PublicKeyCertificate, type PublicKeyCertificateUsage, type QRCodeContextIdentifierType, type QrCodeOptions, type QrCodeResult, QrCodeService, type QueryAuthorizationsGrantsRequest, type QueryCertificatesRequest, type QueryCertificatesResponse, type QueryEntitiesGrantsRequest, type QueryEntitiesRolesRequest, type QueryEuEntitiesGrantsRequest, type QueryInvoicesMetadataResponse, type QueryKsefTokensOptions, type QueryKsefTokensResponse, type QueryPeppolProvidersResponse, type QueryPersonalGrantsRequest, type QueryPersonsGrantsRequest, type QuerySubordinateEntitiesRolesRequest, type QuerySubunitsGrantsRequest, type QueryTokensResponseItem, REQUIRED_CHALLENGE_LENGTH, type RateLimitConfig, RateLimitPolicy, ReferenceNumber, type ResolvedOptions, RestClient, RestRequest, type RestResponse, type RetrieveCertificatesListItem, type RetrieveCertificatesRequest, type RetrieveCertificatesResponse, type RetryPolicy, type RevokeCertificateRequest, RouteBuilder, Routes, SUBUNIT_NAME_MAX_LENGTH, SUBUNIT_NAME_MIN_LENGTH, type SelfSignedCertificateResult, type SendInvoiceRequest, type SendInvoiceResponse, type SessionInvoiceStatusResponse, type SessionInvoicesResponse, type SessionStatus, type SessionStatusResponse, SessionStatusService, type SessionType, type SessionsFilter, type SessionsQueryResponse, type SessionsQueryResponseItem, type SetRateLimitsRequest, type SetSessionLimitsRequest, type SetSubjectLimitsRequest, Sha256Base64, SignatureService, type SortOrder, type StatusInfo, type SubjectCreateRequest, type SubjectRemoveRequest, type SubjectType, type SubordinateEntityRole, type SubordinateEntityRoleType, type SubordinateRoleSubordinateEntityIdentifier, type SubordinateRoleSubordinateEntityIdentifierType, type Subunit, type SubunitPermission, type SubunitPermissionScope, type SubunitPermissionsAuthorIdentifier, type SubunitPermissionsAuthorIdentifierType, type SubunitPermissionsAuthorizedIdentifier, type SubunitPermissionsContextIdentifier, type SubunitPermissionsContextIdentifierType, type SubunitPermissionsSubjectIdentifier, type SubunitPermissionsSubjectIdentifierType, type SubunitPermissionsSubunitIdentifier, type SubunitPermissionsSubunitIdentifierType, type TestDataAuthenticationContextIdentifier, type TestDataAuthenticationContextIdentifierType, type TestDataAuthorizedIdentifier, type TestDataAuthorizedIdentifierType, type TestDataContextIdentifier, type TestDataContextIdentifierType, type TestDataPermission, type TestDataPermissionType, type TestDataPermissionsGrantRequest, type TestDataPermissionsRevokeRequest, TestDataService, type TestDataStatusResponse, type ThirdSubjectIdentifierType, type TokenAuthorIdentifier, type TokenAuthorIdentifierType, type TokenContextIdentifier, type TokenContextIdentifierType, type TokenInfo, TokenService, type TokenStatusResponse, type TransportFn, type UnauthorizedProblemDetails, type UnblockContextAuthenticationRequest, type UpoPage, type UpoResponse, type UpoResult, type ValidationDetail, VatUe, VerificationLinkService, type X500NameFields, type XadesSubjectIdentifierType, calculateBackoff, defaultPresignedUrlPolicy, defaultRateLimitPolicy, defaultRetryPolicy, defaultTransport, isRetryableError, isRetryableStatus, isValidBase64, isValidCertificateFingerprint, isValidCertificateName, isValidInternalId, isValidIp4Address, isValidKsefNumber, isValidNip, isValidNipVatUe, isValidPeppolId, isValidPesel, isValidReferenceNumber, isValidSha256Base64, isValidVatUe, parseRetryAfter, resolveOptions, sleep, validatePresignedUrl };
+interface OpenOnlineSessionOptions {
+    formCode?: FormCode;
+    upoVersion?: UpoVersion | string;
+}
+interface SendAndCloseOptions extends OpenOnlineSessionOptions {
+    pollOptions?: PollOptions;
+}
+declare function openOnlineSession(client: KSeFClient, options?: OpenOnlineSessionOptions): Promise<OnlineSessionHandle>;
+declare function openSendAndClose(client: KSeFClient, invoices: Array<string | Uint8Array>, options?: SendAndCloseOptions): Promise<UpoInfo>;
+
+interface BatchUploadOptions {
+    formCode?: FormCode;
+    upoVersion?: UpoVersion | string;
+    pollOptions?: PollOptions;
+}
+interface BatchPart {
+    data: ArrayBuffer;
+}
+declare function uploadBatch(client: KSeFClient, zipParts: BatchPart[], totalFileSize: number, totalFileHash: string, options?: BatchUploadOptions): Promise<BatchUploadResult>;
+
+interface ExportOptions {
+    onlyMetadata?: boolean;
+    pollOptions?: PollOptions;
+}
+interface ExportAndDownloadOptions extends ExportOptions {
+    /** Custom fetch function for downloading parts (defaults to global fetch). */
+    transport?: typeof fetch;
+}
+declare function exportInvoices(client: KSeFClient, filters: InvoiceQueryFilters, options?: ExportOptions): Promise<ExportResult>;
+declare function exportAndDownload(client: KSeFClient, filters: InvoiceQueryFilters, options?: ExportAndDownloadOptions): Promise<ExportDownloadResult>;
+
+interface AuthResult {
+    accessToken: string;
+    accessTokenValidUntil: string;
+    refreshToken: string;
+    refreshTokenValidUntil: string;
+}
+interface TokenAuthOptions {
+    nip: string;
+    token: string;
+    authorizationPolicy?: AuthorizationPolicy;
+    pollOptions?: PollOptions;
+}
+interface CertificateAuthOptions {
+    nip: string;
+    certPem: string;
+    keyPem: string;
+    verifyCertificateChain?: boolean;
+    enforceXadesCompliance?: boolean;
+    pollOptions?: PollOptions;
+}
+interface Pkcs12AuthOptions {
+    nip: string;
+    p12: Buffer | Uint8Array;
+    password: string;
+    verifyCertificateChain?: boolean;
+    enforceXadesCompliance?: boolean;
+    pollOptions?: PollOptions;
+}
+declare function authenticateWithToken(client: KSeFClient, options: TokenAuthOptions): Promise<AuthResult>;
+declare function authenticateWithCertificate(client: KSeFClient, options: CertificateAuthOptions): Promise<AuthResult>;
+declare function authenticateWithPkcs12(client: KSeFClient, options: Pkcs12AuthOptions): Promise<AuthResult>;
+
+export { ActiveSessionsService, type AllowedIps, type AmountType, type ApiErrorResponse, type ApiRateLimitValuesOverride, type ApiRateLimitsOverride, type AttachmentPermissionGrantRequest, type AttachmentPermissionRevokeRequest, type AuthChallengeResponse, type AuthKsefTokenRequest, AuthKsefTokenRequestBuilder, type AuthManager, type AuthResult, AuthService, type AuthSessionInfo, type AuthTokenRequest, AuthTokenRequestBuilder, type AuthenticationInitResponse, type AuthenticationKsefToken, type AuthenticationListResponse, type AuthenticationMethod, type AuthenticationMethodInfo, type AuthenticationMethodInfoCategory, type AuthenticationOperationStatusResponse, type AuthenticationTokenRefreshResponse, type AuthenticationTokensResponse, type AuthorizationGrant, AuthorizationPermissionGrantBuilder, type AuthorizationPolicy, Base64String, type BatchFileInfo, type BatchFilePartInfo, type BatchPart, type BatchPartSendingInfo, type BatchSessionContextLimitsOverride, type BatchSessionEffectiveContextLimits, BatchSessionService, type BatchUploadOptions, type BatchUploadResult, type BlockContextAuthenticationRequest, type BuyerIdentifierType, CERTIFICATE_NAME_MAX_LENGTH, CERTIFICATE_NAME_MIN_LENGTH, CertificateApiService, type CertificateAuthOptions, type CertificateEffectiveSubjectLimits, type CertificateEnrollmentDataResponse, type CertificateEnrollmentStatusResponse, CertificateFetcher, CertificateFingerprint, type CertificateLimit, type CertificateLimitsResponse, type CertificateListItem, CertificateName, type CertificateRevocationReason, CertificateService, type CertificateStatus, type CertificateSubjectIdentifier, type CertificateSubjectIdentifierType, type CertificateSubjectLimitsOverride, type CertificateType, type ContextIdentifier, type ContextIdentifierType, type CryptoEncryptionMethod, CryptographyService, type CsrResult, DefaultAuthManager, ENFORCE_XADES_COMPLIANCE, type EffectiveApiRateLimitValues, type EffectiveApiRateLimits, type EffectiveContextLimits, type EffectiveSubjectLimits, type EncryptionData, type EncryptionInfo, type EnrollCertificateRequest, type EnrollCertificateResponse, type EnrollmentEffectiveSubjectLimits, type EnrollmentSubjectLimitsOverride, type EntityAuthorizationGrant, type EntityAuthorizationPermissionType, type EntityAuthorizationPermissionsSubjectIdentifierType, type EntityAuthorizationSubjectIdentifier, type EntityAuthorizationsAuthorIdentifier, type EntityAuthorizationsAuthorIdentifierType, type EntityAuthorizationsAuthorizedEntityIdentifier, type EntityAuthorizationsAuthorizedEntityIdentifierType, type EntityAuthorizationsAuthorizingEntityIdentifier, type EntityAuthorizationsAuthorizingEntityIdentifierType, type EntityAuthorizationsQueryType, type EntityByFingerprintDetails, type EntityDetails, type EntityPermission, EntityPermissionGrantBuilder, type EntityPermissionItem, type EntityPermissionItemType, type EntityPermissionsContextIdentifier, type EntityPermissionsContextIdentifierType, type EntityRole, type EntityRoleType, type EntityRolesParentEntityIdentifier, type EntityRolesParentEntityIdentifierType, type EntitySubjectByFingerprintDetailsType, type EntitySubjectByIdentifierDetailsType, type EntitySubjectDetailsType, type EntitySubjectIdentifier, Environment, type EnvironmentConfig, type EnvironmentName, type EuEntityAdministrationContextIdentifier, type EuEntityAdministrationPermissionsContextIdentifierType, type EuEntityAdministrationPermissionsSubjectIdentifierType, type EuEntityAdministrationSubjectIdentifier, type EuEntityDetails, type EuEntityPermission, type EuEntityPermissionSubjectDetails, type EuEntityPermissionSubjectDetailsType, type EuEntityPermissionType, type EuEntityPermissionsAuthorIdentifier, type EuEntityPermissionsAuthorIdentifierType, type EuEntityPermissionsQueryPermissionType, type EuEntityPermissionsSubjectIdentifier, type EuEntityPermissionsSubjectIdentifierType, type ExceptionDetails, type ExportAndDownloadOptions, type ExportDownloadResult, type ExportOptions, type ExportResult, type FileMetadata, type ForbiddenProblemDetails, type ForbiddenReasonCode, type FormCode, type FormType, type GrantPermissionsAuthorizationRequest, type GrantPermissionsEntityRequest, type GrantPermissionsEuEntityAdminRequest, type GrantPermissionsEuEntityRepresentativeRequest, type GrantPermissionsEuEntityRequest, type GrantPermissionsIndirectRequest, type GrantPermissionsPersonRequest, type GrantPermissionsSubunitRequest, type HttpMethod, type IdDocument, type IndirectPermissionType, type IndirectPermissionsSubjectIdentifier, type IndirectPermissionsSubjectIdentifierType, type IndirectPermissionsTargetIdentifier, type IndirectPermissionsTargetIdentifierType, InternalId, InvoiceDownloadService, type InvoiceExportPackage, type InvoiceExportPackagePart, type InvoiceExportRequest, type InvoiceExportStatusResponse, type InvoiceMetadata, type InvoiceMetadataAuthorizedSubject, type InvoiceMetadataBuyer, type InvoiceMetadataBuyerIdentifier, type InvoiceMetadataSeller, type InvoiceMetadataThirdSubject, type InvoiceMetadataThirdSubjectIdentifier, type InvoicePermissionType, type InvoiceQueryAmount, type InvoiceQueryBuyerIdentifier, type InvoiceQueryDateRange, type InvoiceQueryDateType, InvoiceQueryFilterBuilder, type InvoiceQueryFilters, type InvoiceStatusInfo, type InvoiceSubjectType, type InvoiceType, type InvoicingMode, Ip4Address, Ip4Mask, Ip4Range, KSEF_FEATURE_HEADER, KSeFApiError, KSeFAuthStatusError, KSeFClient, type KSeFClientOptions, KSeFError, KSeFForbiddenError, KSeFRateLimitError, KSeFSessionExpiredError, KSeFUnauthorizedError, KSeFValidationError, type KsefMessagesResponse, KsefNumber, KsefNumberV35, KsefNumberV36, type KsefStatusResponse, type KsefSystemStatus, type KsefTokenPermissionType, type KsefTokenRequest, type KsefTokenResponse, type KsefTokenStatus, type LighthouseMessage, LighthouseService, LimitsService, Nip, NipVatUe, type OnlineSessionContextLimitsOverride, type OnlineSessionEffectiveContextLimits, type OnlineSessionHandle, OnlineSessionService, type OpenBatchSessionRequest, type OpenBatchSessionResponse, type OpenOnlineSessionOptions, type OpenOnlineSessionRequest, type OpenOnlineSessionResponse, type OperationResponse, type OperationStatusInfo, PERMISSION_DESCRIPTION_MAX_LENGTH, PERMISSION_DESCRIPTION_MIN_LENGTH, type PagedAuthorizationsResponse, type PagedPermissionsResponse, type PagedRolesResponse, type PartUploadRequest, PeppolId, type PeppolProvider, PeppolService, type PermissionState, type PermissionSubjectIdentifierType, type PermissionWithDelegate, type PermissionsAttachmentAllowedResponse, type PermissionsEuEntityDetails, type PermissionsOperationStatusResponse, PermissionsService, type PermissionsSubjectEntityByFingerprintDetails, type PermissionsSubjectEntityByIdentifierDetails, type PermissionsSubjectEntityDetails, type PermissionsSubjectPersonByFingerprintDetails, type PermissionsSubjectPersonDetails, type PersonByFingerprintWithIdentifierDetails, type PersonByFingerprintWithoutIdentifierDetails, type PersonByIdentifierDetails, type PersonCreateRequest, type PersonIdentifier, type PersonIdentifierType, type PersonPermission, PersonPermissionGrantBuilder, type PersonPermissionSubjectDetails, type PersonPermissionType, type PersonPermissionsAuthorIdentifier, type PersonPermissionsAuthorIdentifierType, type PersonPermissionsAuthorizedIdentifier, type PersonPermissionsAuthorizedIdentifierType, type PersonPermissionsContextIdentifier, type PersonPermissionsContextIdentifierType, type PersonPermissionsQueryType, type PersonPermissionsTargetIdentifier, type PersonPermissionsTargetIdentifierType, type PersonRemoveRequest, type PersonSubjectByFingerprintDetailsType, type PersonSubjectDetailsType, type PersonSubjectIdentifier, type PersonalPermission, type PersonalPermissionScopeType, type PersonalPermissionsAuthorizedIdentifier, type PersonalPermissionsAuthorizedIdentifierType, type PersonalPermissionsContextIdentifier, type PersonalPermissionsContextIdentifierType, type PersonalPermissionsTargetIdentifier, type PersonalPermissionsTargetIdentifierType, Pesel, type Pkcs12AuthOptions, Pkcs12Loader, type Pkcs12Result, type PollOptions, type PresignedUrlPolicy, type PublicKeyCertificate, type PublicKeyCertificateUsage, type QRCodeContextIdentifierType, type QrCodeOptions, type QrCodeResult, QrCodeService, type QueryAuthorizationsGrantsRequest, type QueryCertificatesRequest, type QueryCertificatesResponse, type QueryEntitiesGrantsRequest, type QueryEntitiesRolesRequest, type QueryEuEntitiesGrantsRequest, type QueryInvoicesMetadataResponse, type QueryKsefTokensOptions, type QueryKsefTokensResponse, type QueryPeppolProvidersResponse, type QueryPersonalGrantsRequest, type QueryPersonsGrantsRequest, type QuerySubordinateEntitiesRolesRequest, type QuerySubunitsGrantsRequest, type QueryTokensResponseItem, REQUIRED_CHALLENGE_LENGTH, type RateLimitConfig, RateLimitPolicy, ReferenceNumber, type ResolvedOptions, RestClient, RestRequest, type RestResponse, type RetrieveCertificatesListItem, type RetrieveCertificatesRequest, type RetrieveCertificatesResponse, type RetryPolicy, type RevokeCertificateRequest, RouteBuilder, Routes, SUBUNIT_NAME_MAX_LENGTH, SUBUNIT_NAME_MIN_LENGTH, type SelfSignedCertificateResult, type SendAndCloseOptions, type SendInvoiceRequest, type SendInvoiceResponse, type SessionInvoiceStatusResponse, type SessionInvoicesResponse, type SessionStatus, type SessionStatusResponse, SessionStatusService, type SessionType, type SessionsFilter, type SessionsQueryResponse, type SessionsQueryResponseItem, type SetRateLimitsRequest, type SetSessionLimitsRequest, type SetSubjectLimitsRequest, Sha256Base64, SignatureService, type SortOrder, type StatusInfo, type SubjectCreateRequest, type SubjectRemoveRequest, type SubjectType, type SubordinateEntityRole, type SubordinateEntityRoleType, type SubordinateRoleSubordinateEntityIdentifier, type SubordinateRoleSubordinateEntityIdentifierType, type Subunit, type SubunitPermission, type SubunitPermissionScope, type SubunitPermissionsAuthorIdentifier, type SubunitPermissionsAuthorIdentifierType, type SubunitPermissionsAuthorizedIdentifier, type SubunitPermissionsContextIdentifier, type SubunitPermissionsContextIdentifierType, type SubunitPermissionsSubjectIdentifier, type SubunitPermissionsSubjectIdentifierType, type SubunitPermissionsSubunitIdentifier, type SubunitPermissionsSubunitIdentifierType, type TestDataAuthenticationContextIdentifier, type TestDataAuthenticationContextIdentifierType, type TestDataAuthorizedIdentifier, type TestDataAuthorizedIdentifierType, type TestDataContextIdentifier, type TestDataContextIdentifierType, type TestDataPermission, type TestDataPermissionType, type TestDataPermissionsGrantRequest, type TestDataPermissionsRevokeRequest, TestDataService, type ThirdSubjectIdentifierType, type TokenAuthOptions, type TokenAuthorIdentifier, type TokenAuthorIdentifierType, type TokenContextIdentifier, type TokenContextIdentifierType, type TokenInfo, TokenService, type TokenStatusResponse, type TransportFn, type UnauthorizedProblemDetails, type UnblockContextAuthenticationRequest, type UpoInfo, type UpoPage, type UpoResponse, type UpoResult, UpoVersion, UpoVersion as UpoVersionType, type ValidationDetail, VatUe, VerificationLinkService, type X500NameFields, type XadesSubjectIdentifierType, authenticateWithCertificate, authenticateWithPkcs12, authenticateWithToken, calculateBackoff, defaultPresignedUrlPolicy, defaultRateLimitPolicy, defaultRetryPolicy, defaultTransport, exportAndDownload, exportInvoices, isRetryableError, isRetryableStatus, isValidBase64, isValidCertificateFingerprint, isValidCertificateName, isValidInternalId, isValidIp4Address, isValidKsefNumber, isValidKsefNumberV35, isValidKsefNumberV36, isValidNip, isValidNipVatUe, isValidPeppolId, isValidPesel, isValidReferenceNumber, isValidSha256Base64, isValidVatUe, openOnlineSession, openSendAndClose, parseRetryAfter, pollUntil, resolveOptions, sleep, uploadBatch, validatePresignedUrl };