ksef-client-ts 0.5.1 → 0.6.0

package/dist/cli.js

@@ -134,6 +134,34 @@ var init_ksef_forbidden_error = __esm({
   }
 });
 
+// src/errors/ksef-validation-error.ts
+var ksef_validation_error_exports = {};
+__export(ksef_validation_error_exports, {
+  KSeFValidationError: () => KSeFValidationError
+});
+var KSeFValidationError;
+var init_ksef_validation_error = __esm({
+  "src/errors/ksef-validation-error.ts"() {
+    "use strict";
+    init_ksef_error();
+    KSeFValidationError = class _KSeFValidationError extends KSeFError {
+      details;
+      constructor(message, details = []) {
+        super(message);
+        this.name = "KSeFValidationError";
+        this.details = details;
+      }
+      static fromField(field, message) {
+        return new _KSeFValidationError(message, [{ field, message }]);
+      }
+      static fromMessages(messages2) {
+        const details = messages2.map((m) => ({ message: m }));
+        return new _KSeFValidationError(messages2.join("; "), details);
+      }
+    };
+  }
+});
+
 // src/config/environments.ts
 var Environment;
 var init_environments = __esm({
@@ -253,8 +281,8 @@ function isRetryableError(error, policy) {
   if (code && RETRYABLE_ERROR_CODES.has(code)) return true;
   return false;
 }
-function isRetryableStatus(status6, policy) {
-  return policy.retryableStatusCodes.includes(status6);
+function isRetryableStatus(status7, policy) {
+  return policy.retryableStatusCodes.includes(status7);
 }
 function sleep(ms) {
   return new Promise((resolve2) => setTimeout(resolve2, ms));
@@ -272,30 +300,6 @@ var init_retry_policy = __esm({
   }
 });
 
-// src/errors/ksef-validation-error.ts
-var KSeFValidationError;
-var init_ksef_validation_error = __esm({
-  "src/errors/ksef-validation-error.ts"() {
-    "use strict";
-    init_ksef_error();
-    KSeFValidationError = class _KSeFValidationError extends KSeFError {
-      details;
-      constructor(message, details = []) {
-        super(message);
-        this.name = "KSeFValidationError";
-        this.details = details;
-      }
-      static fromField(field, message) {
-        return new _KSeFValidationError(message, [{ field, message }]);
-      }
-      static fromMessages(messages2) {
-        const details = messages2.map((m) => ({ message: m }));
-        return new _KSeFValidationError(messages2.join("; "), details);
-      }
-    };
-  }
-});
-
 // src/http/presigned-url-policy.ts
 function defaultPresignedUrlPolicy() {
   return {
@@ -504,9 +508,9 @@ var init_rest_client = __esm({
         return response;
       }
       buildUrl(request) {
-        const path9 = this.routeBuilder.build(request.path);
+        const path10 = this.routeBuilder.build(request.path);
         const base = this.options.baseUrl;
-        const url2 = new URL(`${base}${path9}`);
+        const url2 = new URL(`${base}${path10}`);
         const query2 = request.getQuery();
         for (const [key, value] of query2) {
           url2.searchParams.append(key, value);
@@ -677,21 +681,21 @@ var init_rest_request = __esm({
       _query = [];
       _presigned = false;
       _skipAuthRetry = false;
-      constructor(method, path9) {
+      constructor(method, path10) {
         this.method = method;
-        this.path = path9;
+        this.path = path10;
       }
-      static get(path9) {
-        return new _RestRequest("GET", path9);
+      static get(path10) {
+        return new _RestRequest("GET", path10);
       }
-      static post(path9) {
-        return new _RestRequest("POST", path9);
+      static post(path10) {
+        return new _RestRequest("POST", path10);
       }
-      static put(path9) {
-        return new _RestRequest("PUT", path9);
+      static put(path10) {
+        return new _RestRequest("PUT", path10);
       }
-      static delete(path9) {
-        return new _RestRequest("DELETE", path9);
+      static delete(path10) {
+        return new _RestRequest("DELETE", path10);
       }
       body(data) {
         this._body = data;
@@ -1090,8 +1094,8 @@ var init_session_status = __esm({
           if (filter.dateModifiedFrom) req.query("dateModifiedFrom", filter.dateModifiedFrom);
           if (filter.dateModifiedTo) req.query("dateModifiedTo", filter.dateModifiedTo);
           if (filter.statuses) {
-            for (const status6 of filter.statuses) {
-              req.query("statuses", status6);
+            for (const status7 of filter.statuses) {
+              req.query("statuses", status7);
             }
           }
         }
@@ -1465,20 +1469,20 @@ var init_lighthouse = __esm({
         this.lighthouseUrl = options.lighthouseUrl;
         this.timeout = options.timeout;
       }
-      async fetchJson(path9) {
+      async fetchJson(path10) {
         if (!this.lighthouseUrl) {
           throw new KSeFError(
             "Lighthouse API is not available for the DEMO environment. Use TEST or PROD instead."
           );
         }
-        const response = await fetch(`${this.lighthouseUrl}${path9}`, {
+        const response = await fetch(`${this.lighthouseUrl}${path10}`, {
           headers: { Accept: "application/json" },
           signal: AbortSignal.timeout(this.timeout)
         });
         if (!response.ok) {
           const body = await response.text();
           throw new KSeFError(
-            `Lighthouse ${path9} failed: HTTP ${response.status} \u2014 ${body}`
+            `Lighthouse ${path10} failed: HTTP ${response.status} \u2014 ${body}`
           );
         }
         return await response.json();
@@ -2083,12 +2087,450 @@ var init_auth_xml_builder = __esm({
   }
 });
 
+// src/offline/deadline.ts
+function getDefaultReason(mode) {
+  switch (mode) {
+    case "offline24":
+      return "PLANNED";
+    case "offline":
+      return "SYSTEM_UNAVAILABLE";
+    case "awaryjny":
+      return "EMERGENCY";
+    case "awaria_calkowita":
+      return "TOTAL_FAILURE";
+  }
+}
+function nextBusinessDay(from) {
+  const d = new Date(from);
+  d.setUTCDate(d.getUTCDate() + 1);
+  while (d.getUTCDay() === 0 || d.getUTCDay() === 6) {
+    d.setUTCDate(d.getUTCDate() + 1);
+  }
+  return d;
+}
+function addBusinessDays(from, days) {
+  if (!Number.isInteger(days) || days < 0) {
+    throw new Error(`days must be a non-negative integer, got ${days}`);
+  }
+  const d = new Date(from);
+  let remaining = days;
+  while (remaining > 0) {
+    d.setUTCDate(d.getUTCDate() + 1);
+    if (d.getUTCDay() !== 0 && d.getUTCDay() !== 6) {
+      remaining--;
+    }
+  }
+  return d;
+}
+function endOfDay(d) {
+  const result = new Date(d);
+  result.setUTCHours(23, 59, 59, 999);
+  return result;
+}
+function getMaintenanceEndFallback(mw) {
+  if (mw.endTime) {
+    return new Date(mw.endTime);
+  }
+  const start = new Date(mw.startTime);
+  start.setUTCDate(start.getUTCDate() + 7);
+  return start;
+}
+function calculateOfflineDeadline(mode, invoiceDate, maintenanceWindow) {
+  const date = typeof invoiceDate === "string" ? new Date(invoiceDate) : invoiceDate;
+  switch (mode) {
+    case "offline24": {
+      return endOfDay(nextBusinessDay(date));
+    }
+    case "offline": {
+      const base = maintenanceWindow ? getMaintenanceEndFallback(maintenanceWindow) : date;
+      return endOfDay(nextBusinessDay(base));
+    }
+    case "awaryjny": {
+      const base = maintenanceWindow ? getMaintenanceEndFallback(maintenanceWindow) : date;
+      return endOfDay(addBusinessDays(base, 7));
+    }
+    case "awaria_calkowita": {
+      return new Date(FAR_FUTURE);
+    }
+  }
+}
+function isExpired(submitBy) {
+  const deadline = typeof submitBy === "string" ? new Date(submitBy) : submitBy;
+  return Date.now() > deadline.getTime();
+}
+var FAR_FUTURE;
+var init_deadline = __esm({
+  "src/offline/deadline.ts"() {
+    "use strict";
+    FAR_FUTURE = /* @__PURE__ */ new Date("9999-12-31T23:59:59Z");
+  }
+});
+
+// src/models/document-structures/types.ts
+var SystemCode, FORM_CODES, DEFAULT_FORM_CODE, INVOICE_TYPES_BY_SYSTEM_CODE, FORM_CODE_KEYS;
+var init_types = __esm({
+  "src/models/document-structures/types.ts"() {
+    "use strict";
+    SystemCode = {
+      FA_2: "FA (2)",
+      FA_3: "FA (3)",
+      PEF_3: "PEF (3)",
+      PEF_KOR_3: "PEF_KOR (3)",
+      FA_RR_1: "FA_RR (1)"
+    };
+    FORM_CODES = {
+      FA_2: { systemCode: "FA (2)", schemaVersion: "1-0E", value: "FA" },
+      FA_3: { systemCode: "FA (3)", schemaVersion: "1-0E", value: "FA" },
+      PEF_3: { systemCode: "PEF (3)", schemaVersion: "2-1", value: "PEF" },
+      PEF_KOR_3: { systemCode: "PEF_KOR (3)", schemaVersion: "2-1", value: "PEF" },
+      FA_RR_1_LEGACY: { systemCode: "FA_RR (1)", schemaVersion: "1-0E", value: "RR" },
+      FA_RR_1_TRANSITION: { systemCode: "FA_RR (1)", schemaVersion: "1-1E", value: "RR" },
+      FA_RR_1: { systemCode: "FA_RR (1)", schemaVersion: "1-1E", value: "FA_RR" }
+    };
+    DEFAULT_FORM_CODE = FORM_CODES.FA_3;
+    INVOICE_TYPES_BY_SYSTEM_CODE = {
+      [SystemCode.FA_2]: ["Vat", "Zal", "Kor", "Roz", "Upr", "KorZal", "KorRoz"],
+      [SystemCode.FA_3]: ["Vat", "Zal", "Kor", "Roz", "Upr", "KorZal", "KorRoz"],
+      [SystemCode.PEF_3]: ["VatPef", "VatPefSp", "KorPef"],
+      [SystemCode.PEF_KOR_3]: ["KorPef"],
+      [SystemCode.FA_RR_1]: ["VatRr", "KorVatRr"]
+    };
+    FORM_CODE_KEYS = {
+      FA2: FORM_CODES.FA_2,
+      FA3: FORM_CODES.FA_3,
+      PEF3: FORM_CODES.PEF_3,
+      PEFKOR3: FORM_CODES.PEF_KOR_3,
+      FARR1: FORM_CODES.FA_RR_1
+    };
+  }
+});
+
+// src/models/document-structures/helpers.ts
+function validateFormCodeForSession(formCode, sessionType) {
+  if (sessionType === "online") return true;
+  return !BATCH_DISALLOWED_SYSTEM_CODES.has(formCode.systemCode);
+}
+var SYSTEM_CODE_TO_FORM_CODE, ALL_FORM_CODES, BATCH_DISALLOWED_SYSTEM_CODES;
+var init_helpers = __esm({
+  "src/models/document-structures/helpers.ts"() {
+    "use strict";
+    init_types();
+    SYSTEM_CODE_TO_FORM_CODE = {
+      [SystemCode.FA_2]: FORM_CODES.FA_2,
+      [SystemCode.FA_3]: FORM_CODES.FA_3,
+      [SystemCode.PEF_3]: FORM_CODES.PEF_3,
+      [SystemCode.PEF_KOR_3]: FORM_CODES.PEF_KOR_3,
+      [SystemCode.FA_RR_1]: FORM_CODES.FA_RR_1
+    };
+    ALL_FORM_CODES = Object.values(FORM_CODES);
+    BATCH_DISALLOWED_SYSTEM_CODES = /* @__PURE__ */ new Set([
+      SystemCode.PEF_3,
+      SystemCode.PEF_KOR_3
+    ]);
+  }
+});
+
+// src/models/document-structures/index.ts
+var init_document_structures = __esm({
+  "src/models/document-structures/index.ts"() {
+    "use strict";
+    init_types();
+    init_helpers();
+  }
+});
+
+// src/workflows/offline-invoice-workflow.ts
+import crypto3 from "crypto";
+var OfflineInvoiceWorkflow;
+var init_offline_invoice_workflow = __esm({
+  "src/workflows/offline-invoice-workflow.ts"() {
+    "use strict";
+    init_ksef_api_error();
+    init_deadline();
+    init_document_structures();
+    OfflineInvoiceWorkflow = class {
+      constructor(qrService) {
+        this.qrService = qrService;
+      }
+      async generate(input, options) {
+        if (!input.invoiceXml || input.invoiceXml.trim().length === 0) {
+          throw new Error("invoiceXml must not be empty");
+        }
+        if (!input.invoiceNumber) {
+          throw new Error("invoiceNumber is required");
+        }
+        if (!input.sellerNip) {
+          throw new Error("sellerNip is required");
+        }
+        const mode = options?.mode ?? "offline24";
+        const reason = getDefaultReason(mode);
+        const invoiceHashBase64 = crypto3.createHash("sha256").update(input.invoiceXml).digest("base64");
+        const kod1Url = this.qrService.buildInvoiceVerificationUrl(
+          input.sellerNip,
+          input.invoiceDate,
+          invoiceHashBase64
+        );
+        let kod2Url;
+        if (options?.certificate) {
+          kod2Url = this.qrService.buildCertificateVerificationUrl(
+            input.sellerIdentifier.type,
+            input.sellerIdentifier.value,
+            input.sellerNip,
+            options.certificate.certificateSerial,
+            invoiceHashBase64,
+            options.certificate.privateKeyPem
+          );
+        }
+        const submitBy = options?.customDeadline ? typeof options.customDeadline === "string" ? options.customDeadline : options.customDeadline.toISOString() : calculateOfflineDeadline(mode, input.invoiceDate, options?.maintenanceWindow).toISOString();
+        const metadata = {
+          id: crypto3.randomUUID(),
+          mode,
+          reason,
+          status: "GENERATED",
+          invoiceNumber: input.invoiceNumber,
+          invoiceDate: input.invoiceDate,
+          invoiceXml: input.invoiceXml,
+          sellerNip: input.sellerNip,
+          sellerIdentifier: input.sellerIdentifier,
+          buyerIdentifier: input.buyerIdentifier,
+          totalAmount: input.totalAmount,
+          currency: input.currency,
+          kod1Url,
+          kod2Url,
+          generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+          submitBy,
+          maintenanceWindowId: options?.maintenanceWindow?.id
+        };
+        if (options?.storage) {
+          await options.storage.save(metadata);
+        }
+        return metadata;
+      }
+      async submit(client, options) {
+        const { storage, checkExpiry = true } = options;
+        let invoices2;
+        if (options.invoiceIds) {
+          invoices2 = [];
+          const notFound = [];
+          for (const id of options.invoiceIds) {
+            const inv = await storage.get(id);
+            if (inv) {
+              invoices2.push(inv);
+            } else {
+              notFound.push(id);
+            }
+          }
+          if (notFound.length > 0) {
+            throw new Error(`Offline invoice(s) not found: ${notFound.join(", ")}`);
+          }
+        } else {
+          invoices2 = await storage.list({ status: ["GENERATED", "QUEUED", "SUBMITTED"] });
+        }
+        const result = {
+          total: invoices2.length,
+          submitted: 0,
+          accepted: 0,
+          rejected: 0,
+          failed: 0,
+          expired: 0,
+          results: []
+        };
+        if (invoices2.length === 0) return result;
+        const pending = [];
+        for (const inv of invoices2) {
+          if (checkExpiry && isExpired(inv.submitBy)) {
+            await storage.update(inv.id, { status: "EXPIRED" });
+            result.expired++;
+            result.results.push({
+              invoiceId: inv.id,
+              invoiceNumber: inv.invoiceNumber,
+              status: "EXPIRED"
+            });
+          } else {
+            pending.push(inv);
+          }
+        }
+        if (pending.length === 0) return result;
+        await client.crypto.init();
+        const encData = client.crypto.getEncryptionData();
+        const formCode = options.formCode ?? DEFAULT_FORM_CODE;
+        const openResp = await client.onlineSession.openSession(
+          { formCode, encryption: encData.encryptionInfo }
+        );
+        const sessionRef = openResp.referenceNumber;
+        try {
+          for (const inv of pending) {
+            await storage.update(inv.id, { status: "QUEUED" });
+            try {
+              const data = new TextEncoder().encode(inv.invoiceXml);
+              const plainMeta = client.crypto.getFileMetadata(data);
+              const encrypted = client.crypto.encryptAES256(data, encData.cipherKey, encData.cipherIv);
+              const encMeta = client.crypto.getFileMetadata(encrypted);
+              await storage.update(inv.id, { status: "SUBMITTED", submittedAt: (/* @__PURE__ */ new Date()).toISOString() });
+              const resp = await client.onlineSession.sendInvoice(sessionRef, {
+                invoiceHash: plainMeta.hashSHA,
+                invoiceSize: plainMeta.fileSize,
+                encryptedInvoiceHash: encMeta.hashSHA,
+                encryptedInvoiceSize: encMeta.fileSize,
+                encryptedInvoiceContent: Buffer.from(encrypted).toString("base64"),
+                offlineMode: true
+              });
+              await storage.update(inv.id, {
+                status: "ACCEPTED",
+                acceptedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                ksefReferenceNumber: resp.referenceNumber
+              });
+              result.submitted++;
+              result.accepted++;
+              result.results.push({
+                invoiceId: inv.id,
+                invoiceNumber: inv.invoiceNumber,
+                status: "ACCEPTED",
+                ksefReferenceNumber: resp.referenceNumber
+              });
+            } catch (err) {
+              const message = err instanceof Error ? err.message : String(err);
+              if (err instanceof KSeFApiError) {
+                await storage.update(inv.id, {
+                  status: "REJECTED",
+                  error: { code: err.statusCode, message }
+                });
+                result.submitted++;
+                result.rejected++;
+                result.results.push({
+                  invoiceId: inv.id,
+                  invoiceNumber: inv.invoiceNumber,
+                  status: "REJECTED",
+                  error: { code: err.statusCode, message }
+                });
+              } else {
+                await storage.update(inv.id, {
+                  status: "QUEUED",
+                  error: { code: 0, message }
+                });
+                result.failed++;
+                result.results.push({
+                  invoiceId: inv.id,
+                  invoiceNumber: inv.invoiceNumber,
+                  status: "QUEUED",
+                  error: { code: 0, message }
+                });
+              }
+            }
+          }
+        } finally {
+          try {
+            await client.onlineSession.closeSession(sessionRef);
+          } catch {
+          }
+        }
+        return result;
+      }
+      // TODO(perf): Each correction opens a separate KSeF session.
+      // For batch corrections, consider a correctBatch() sharing one session (like submit()).
+      async correct(client, options) {
+        const { storage, rejectedInvoiceId, correctedInvoiceXml } = options;
+        const original = await storage.get(rejectedInvoiceId);
+        if (!original) {
+          throw new Error(`Offline invoice not found: ${rejectedInvoiceId}`);
+        }
+        if (original.status !== "REJECTED") {
+          throw new Error(
+            original.status === "CORRECTED" ? `Invoice ${rejectedInvoiceId} has already been corrected (by ${original.correctedBy})` : `Only rejected invoices can be corrected (current status: ${original.status})`
+          );
+        }
+        const originalHash = crypto3.createHash("sha256").update(original.invoiceXml).digest("base64");
+        await client.crypto.init();
+        const encData = client.crypto.getEncryptionData();
+        const formCode = options.formCode ?? DEFAULT_FORM_CODE;
+        const openResp = await client.onlineSession.openSession(
+          { formCode, encryption: encData.encryptionInfo }
+        );
+        const sessionRef = openResp.referenceNumber;
+        try {
+          const data = new TextEncoder().encode(correctedInvoiceXml);
+          const plainMeta = client.crypto.getFileMetadata(data);
+          const encrypted = client.crypto.encryptAES256(data, encData.cipherKey, encData.cipherIv);
+          const encMeta = client.crypto.getFileMetadata(encrypted);
+          const correctionId = crypto3.randomUUID();
+          const submittedAt = (/* @__PURE__ */ new Date()).toISOString();
+          const correctedHashBase64 = crypto3.createHash("sha256").update(correctedInvoiceXml).digest("base64");
+          const kod1Url = this.qrService.buildInvoiceVerificationUrl(
+            original.sellerNip,
+            original.invoiceDate,
+            correctedHashBase64
+          );
+          let kod2Url;
+          if (options.certificate) {
+            kod2Url = this.qrService.buildCertificateVerificationUrl(
+              original.sellerIdentifier.type,
+              original.sellerIdentifier.value,
+              original.sellerNip,
+              options.certificate.certificateSerial,
+              correctedHashBase64,
+              options.certificate.privateKeyPem
+            );
+          }
+          const correctionMetadata = {
+            id: correctionId,
+            mode: original.mode,
+            reason: original.reason,
+            status: "SUBMITTED",
+            invoiceNumber: original.invoiceNumber,
+            invoiceDate: original.invoiceDate,
+            invoiceXml: correctedInvoiceXml,
+            sellerNip: original.sellerNip,
+            sellerIdentifier: original.sellerIdentifier,
+            buyerIdentifier: original.buyerIdentifier,
+            kod1Url,
+            kod2Url,
+            generatedAt: submittedAt,
+            submitBy: original.submitBy,
+            submittedAt,
+            correctedInvoiceId: rejectedInvoiceId
+          };
+          await storage.save(correctionMetadata);
+          const resp = await client.onlineSession.sendInvoice(sessionRef, {
+            invoiceHash: plainMeta.hashSHA,
+            invoiceSize: plainMeta.fileSize,
+            encryptedInvoiceHash: encMeta.hashSHA,
+            encryptedInvoiceSize: encMeta.fileSize,
+            encryptedInvoiceContent: Buffer.from(encrypted).toString("base64"),
+            offlineMode: true,
+            hashOfCorrectedInvoice: originalHash
+          });
+          await storage.update(correctionId, {
+            status: "ACCEPTED",
+            acceptedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            ksefReferenceNumber: resp.referenceNumber
+          });
+          await storage.update(rejectedInvoiceId, {
+            status: "CORRECTED",
+            correctedBy: correctionId
+          });
+          return {
+            invoiceId: correctionId,
+            invoiceNumber: correctionMetadata.invoiceNumber,
+            status: "ACCEPTED",
+            ksefReferenceNumber: resp.referenceNumber
+          };
+        } finally {
+          try {
+            await client.onlineSession.closeSession(sessionRef);
+          } catch {
+          }
+        }
+      }
+    };
+  }
+});
+
 // src/crypto/signature-service.ts
 var signature_service_exports = {};
 __export(signature_service_exports, {
   SignatureService: () => SignatureService
 });
-import * as crypto3 from "crypto";
+import * as crypto4 from "crypto";
 import { ExclusiveCanonicalization } from "xml-crypto";
 import { DOMParser, XMLSerializer } from "@xmldom/xmldom";
 function extractDerFromPem(pem) {
@@ -2108,7 +2550,7 @@ function canonicalize(elem) {
 function computeRootDigest(doc) {
   const root = doc.documentElement;
   const canonical = canonicalize(root);
-  return crypto3.createHash("sha256").update(canonical, "utf-8").digest("base64");
+  return crypto4.createHash("sha256").update(canonical, "utf-8").digest("base64");
 }
 function computeSignedPropertiesDigest(qualifyingPropertiesXml) {
   const parser = new DOMParser();
@@ -2118,7 +2560,7 @@ function computeSignedPropertiesDigest(qualifyingPropertiesXml) {
     throw new Error("SignedProperties element not found in QualifyingProperties");
   }
   const canonical = canonicalize(signedProps);
-  return crypto3.createHash("sha256").update(canonical, "utf-8").digest("base64");
+  return crypto4.createHash("sha256").update(canonical, "utf-8").digest("base64");
 }
 function buildSignedInfo(signatureAlgorithm, rootDigest, signedPropertiesDigest) {
   return [
@@ -2149,12 +2591,12 @@ function computeSignatureValue(canonicalSignedInfo, privateKey, isEc) {
   const data = Buffer.from(canonicalSignedInfo, "utf-8");
   let signature;
   if (isEc) {
-    signature = crypto3.sign("sha256", data, {
+    signature = crypto4.sign("sha256", data, {
       key: privateKey,
       dsaEncoding: "ieee-p1363"
     });
   } else {
-    signature = crypto3.sign("sha256", data, privateKey);
+    signature = crypto4.sign("sha256", data, privateKey);
   }
   return signature.toString("base64");
 }
@@ -2254,11 +2696,11 @@ var init_signature_service = __esm({
         }
         const certDer = extractDerFromPem(certPem);
         const certBase64 = certDer.toString("base64");
-        const certDigest = crypto3.createHash("sha256").update(certDer).digest("base64");
-        const x5093 = new crypto3.X509Certificate(certPem);
+        const certDigest = crypto4.createHash("sha256").update(certDer).digest("base64");
+        const x5093 = new crypto4.X509Certificate(certPem);
         const issuerName = normalizeIssuerDn(x5093.issuer);
         const serialNumber = hexSerialToDecimal(x5093.serialNumber);
-        const privateKey = crypto3.createPrivateKey(
+        const privateKey = crypto4.createPrivateKey(
           passphrase ? { key: privateKeyPem, format: "pem", passphrase } : privateKeyPem
         );
         const isEc = privateKey.asymmetricKeyType === "ec";
@@ -2423,6 +2865,7 @@ var init_client = __esm({
     init_cryptography_service();
     init_verification_link_service();
     init_auth_xml_builder();
+    init_offline_invoice_workflow();
     KSeFClient = class {
       auth;
       activeSessions;
@@ -2441,6 +2884,7 @@ var init_client = __esm({
       qr;
       options;
       authManager;
+      _offline;
       constructor(options) {
         this.options = resolveOptions(options);
         const authManager = options?.authManager ?? new DefaultAuthManager(async () => {
@@ -2469,6 +2913,12 @@ var init_client = __esm({
         this.testData = new TestDataService(restClient, this.options.environmentName);
         this.qr = new VerificationLinkService(this.options.baseQrUrl);
       }
+      get offline() {
+        if (!this._offline) {
+          this._offline = new OfflineInvoiceWorkflow(this.qr);
+        }
+        return this._offline;
+      }
       async loginWithToken(token, nip) {
         const challenge2 = await this.auth.getChallenge();
         await this.crypto.init();
@@ -2503,10 +2953,10 @@ var init_client = __esm({
       }
       async awaitAuthReady(referenceNumber, authToken) {
         for (let i = 0; i < 30; i++) {
-          const status6 = await this.auth.getAuthStatus(referenceNumber, authToken);
-          if (status6.status.code === 200) return;
-          if (status6.status.code !== 100) {
-            throw new Error(`Authentication failed with status ${status6.status.code}: ${status6.status.description}`);
+          const status7 = await this.auth.getAuthStatus(referenceNumber, authToken);
+          if (status7.status.code === 200) return;
+          if (status7.status.code !== 100) {
+            throw new Error(`Authentication failed with status ${status7.status.code}: ${status7.status.description}`);
           }
           await new Promise((r) => setTimeout(r, 1e3));
         }
@@ -2541,89 +2991,16 @@ var init_polling = __esm({
   }
 });
 
-// src/models/document-structures/types.ts
-var SystemCode, FORM_CODES, DEFAULT_FORM_CODE, INVOICE_TYPES_BY_SYSTEM_CODE, FORM_CODE_KEYS;
-var init_types = __esm({
-  "src/models/document-structures/types.ts"() {
-    "use strict";
-    SystemCode = {
-      FA_2: "FA (2)",
-      FA_3: "FA (3)",
-      PEF_3: "PEF (3)",
-      PEF_KOR_3: "PEF_KOR (3)",
-      FA_RR_1: "FA_RR (1)"
-    };
-    FORM_CODES = {
-      FA_2: { systemCode: "FA (2)", schemaVersion: "1-0E", value: "FA" },
-      FA_3: { systemCode: "FA (3)", schemaVersion: "1-0E", value: "FA" },
-      PEF_3: { systemCode: "PEF (3)", schemaVersion: "2-1", value: "PEF" },
-      PEF_KOR_3: { systemCode: "PEF_KOR (3)", schemaVersion: "2-1", value: "PEF" },
-      FA_RR_1_LEGACY: { systemCode: "FA_RR (1)", schemaVersion: "1-0E", value: "RR" },
-      FA_RR_1_TRANSITION: { systemCode: "FA_RR (1)", schemaVersion: "1-1E", value: "RR" },
-      FA_RR_1: { systemCode: "FA_RR (1)", schemaVersion: "1-1E", value: "FA_RR" }
-    };
-    DEFAULT_FORM_CODE = FORM_CODES.FA_3;
-    INVOICE_TYPES_BY_SYSTEM_CODE = {
-      [SystemCode.FA_2]: ["Vat", "Zal", "Kor", "Roz", "Upr", "KorZal", "KorRoz"],
-      [SystemCode.FA_3]: ["Vat", "Zal", "Kor", "Roz", "Upr", "KorZal", "KorRoz"],
-      [SystemCode.PEF_3]: ["VatPef", "VatPefSp", "KorPef"],
-      [SystemCode.PEF_KOR_3]: ["KorPef"],
-      [SystemCode.FA_RR_1]: ["VatRr", "KorVatRr"]
-    };
-    FORM_CODE_KEYS = {
-      FA2: FORM_CODES.FA_2,
-      FA3: FORM_CODES.FA_3,
-      PEF3: FORM_CODES.PEF_3,
-      PEFKOR3: FORM_CODES.PEF_KOR_3,
-      FARR1: FORM_CODES.FA_RR_1
-    };
+// src/xml/upo-parser.ts
+import { XMLParser } from "fast-xml-parser";
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function requireRecord(value, at) {
+  if (!isRecord(value)) {
+    throw KSeFValidationError.fromField(at, `Expected object at ${at}`);
   }
-});
-
-// src/models/document-structures/helpers.ts
-function validateFormCodeForSession(formCode, sessionType) {
-  if (sessionType === "online") return true;
-  return !BATCH_DISALLOWED_SYSTEM_CODES.has(formCode.systemCode);
-}
-var SYSTEM_CODE_TO_FORM_CODE, ALL_FORM_CODES, BATCH_DISALLOWED_SYSTEM_CODES;
-var init_helpers = __esm({
-  "src/models/document-structures/helpers.ts"() {
-    "use strict";
-    init_types();
-    SYSTEM_CODE_TO_FORM_CODE = {
-      [SystemCode.FA_2]: FORM_CODES.FA_2,
-      [SystemCode.FA_3]: FORM_CODES.FA_3,
-      [SystemCode.PEF_3]: FORM_CODES.PEF_3,
-      [SystemCode.PEF_KOR_3]: FORM_CODES.PEF_KOR_3,
-      [SystemCode.FA_RR_1]: FORM_CODES.FA_RR_1
-    };
-    ALL_FORM_CODES = Object.values(FORM_CODES);
-    BATCH_DISALLOWED_SYSTEM_CODES = /* @__PURE__ */ new Set([
-      SystemCode.PEF_3,
-      SystemCode.PEF_KOR_3
-    ]);
-  }
-});
-
-// src/models/document-structures/index.ts
-var init_document_structures = __esm({
-  "src/models/document-structures/index.ts"() {
-    "use strict";
-    init_types();
-    init_helpers();
-  }
-});
-
-// src/xml/upo-parser.ts
-import { XMLParser } from "fast-xml-parser";
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function requireRecord(value, at) {
-  if (!isRecord(value)) {
-    throw KSeFValidationError.fromField(at, `Expected object at ${at}`);
-  }
-  return value;
+  return value;
 }
 function requireString(value, at) {
   if (typeof value !== "string" || value.length === 0) {
@@ -2738,11 +3115,251 @@ var init_upo_parser = __esm({
   }
 });
 
+// src/xml/invoice-field-extractor.ts
+import { XMLParser as XMLParser2 } from "fast-xml-parser";
+function extractInvoiceFields(xml) {
+  const parsed = invoiceParser.parse(xml);
+  const root = parsed?.Faktura;
+  if (!root || typeof root !== "object") {
+    throw new Error(
+      "Cannot extract invoice fields: missing <Faktura> root element. Ensure the XML is a valid KSeF invoice (FA_2, FA_3, or FA_RR)."
+    );
+  }
+  if (root.Fa && typeof root.Fa === "object") {
+    const invoiceDate = nonEmptyString(root.Fa.P_1);
+    const invoiceNumber = nonEmptyString(root.Fa.P_2);
+    if (invoiceDate && invoiceNumber) {
+      return { invoiceNumber, invoiceDate };
+    }
+  }
+  if (root.FakturaRR && typeof root.FakturaRR === "object") {
+    const invoiceDate = nonEmptyString(root.FakturaRR.P_4B);
+    const invoiceNumber = nonEmptyString(root.FakturaRR.P_4C);
+    if (invoiceDate && invoiceNumber) {
+      return { invoiceNumber, invoiceDate };
+    }
+  }
+  throw new Error(
+    "Cannot extract invoice number and date from XML. Expected <Fa><P_1>/<P_2> (FA format) or <FakturaRR><P_4B>/<P_4C> (RR format)."
+  );
+}
+function nonEmptyString(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+var invoiceParser;
+var init_invoice_field_extractor = __esm({
+  "src/xml/invoice-field-extractor.ts"() {
+    "use strict";
+    invoiceParser = new XMLParser2({
+      ignoreAttributes: false,
+      attributeNamePrefix: "@_",
+      parseTagValue: false,
+      parseAttributeValue: false,
+      removeNSPrefix: true,
+      trimValues: false
+    });
+  }
+});
+
 // src/xml/index.ts
 var init_xml = __esm({
   "src/xml/index.ts"() {
     "use strict";
     init_upo_parser();
+    init_invoice_field_extractor();
+  }
+});
+
+// src/utils/zip.ts
+var zip_exports = {};
+__export(zip_exports, {
+  createZip: () => createZip,
+  unzip: () => unzip
+});
+import { ZipFile } from "yazl";
+import { fromBuffer } from "yauzl";
+async function createZip(entries) {
+  return new Promise((resolve2, reject) => {
+    const zipfile = new ZipFile();
+    for (const entry of entries) {
+      zipfile.addBuffer(Buffer.from(entry.content), entry.fileName);
+    }
+    const chunks = [];
+    zipfile.outputStream.on("data", (chunk) => chunks.push(chunk));
+    zipfile.outputStream.on("error", (err) => reject(err));
+    zipfile.outputStream.on("end", () => resolve2(Buffer.concat(chunks)));
+    zipfile.end();
+  });
+}
+async function unzip(buffer, options = {}) {
+  const limits2 = { ...DEFAULT_UNZIP_OPTIONS, ...options };
+  return new Promise((resolve2, reject) => {
+    fromBuffer(buffer, { lazyEntries: true }, (err, zipfile) => {
+      if (err || !zipfile) {
+        reject(err ?? new Error("Failed to open zip buffer"));
+        return;
+      }
+      const files = /* @__PURE__ */ new Map();
+      let totalUncompressed = 0;
+      zipfile.readEntry();
+      zipfile.on("entry", (entry) => {
+        if (entry.fileName.endsWith("/")) {
+          zipfile.readEntry();
+          return;
+        }
+        if (limits2.maxFiles > 0 && files.size >= limits2.maxFiles) {
+          reject(new Error("zip contains too many files"));
+          return;
+        }
+        const uncompressedSize = entry.uncompressedSize ?? 0;
+        const compressedSize = entry.compressedSize ?? 0;
+        if (limits2.maxFileUncompressedSize > 0 && uncompressedSize > limits2.maxFileUncompressedSize) {
+          reject(new Error("zip entry exceeds max_file_uncompressed_size"));
+          return;
+        }
+        if (limits2.maxTotalUncompressedSize > 0) {
+          totalUncompressed += uncompressedSize;
+          if (totalUncompressed > limits2.maxTotalUncompressedSize) {
+            reject(new Error("zip exceeds max_total_uncompressed_size"));
+            return;
+          }
+        }
+        if (limits2.maxCompressionRatio !== null) {
+          if (compressedSize === 0 && uncompressedSize > 0) {
+            reject(new Error("zip entry has suspicious compression metadata"));
+            return;
+          }
+          if (compressedSize > 0 && uncompressedSize > 0) {
+            const ratio = uncompressedSize / compressedSize;
+            if (ratio > limits2.maxCompressionRatio) {
+              reject(new Error("zip entry exceeds max_compression_ratio"));
+              return;
+            }
+          }
+        }
+        zipfile.openReadStream(entry, (streamErr, stream) => {
+          if (streamErr || !stream) {
+            reject(streamErr ?? new Error("Failed to read zip entry"));
+            return;
+          }
+          const chunks = [];
+          stream.on("data", (chunk) => chunks.push(chunk));
+          stream.on("error", (streamError) => reject(streamError));
+          stream.on("end", () => {
+            files.set(entry.fileName, Buffer.concat(chunks));
+            zipfile.readEntry();
+          });
+        });
+      });
+      zipfile.on("end", () => resolve2(files));
+      zipfile.on("error", (zipErr) => reject(zipErr));
+    });
+  });
+}
+var DEFAULT_UNZIP_OPTIONS;
+var init_zip = __esm({
+  "src/utils/zip.ts"() {
+    "use strict";
+    DEFAULT_UNZIP_OPTIONS = {
+      maxFiles: 1e4,
+      maxTotalUncompressedSize: 2e9,
+      maxFileUncompressedSize: 5e8,
+      maxCompressionRatio: 200
+    };
+  }
+});
+
+// src/validation/xml-to-object.ts
+import { DOMParser as DOMParser2 } from "@xmldom/xmldom";
+function xmlToObject(xml) {
+  const errors = [];
+  const doc = new DOMParser2({
+    errorHandler: {
+      warning: (_msg) => {
+      },
+      error: (msg) => errors.push(msg),
+      fatalError: (msg) => errors.push(msg)
+    }
+  }).parseFromString(xml, "text/xml");
+  if (errors.length > 0 || !doc || !doc.documentElement) {
+    return { object: null, rootElement: null, namespace: null, errors };
+  }
+  const root = doc.documentElement;
+  const rootName = getLocalName(root);
+  const namespace = root.namespaceURI || null;
+  const obj = elementToObject(root);
+  return {
+    object: typeof obj === "object" && obj !== null ? obj : { "#text": obj },
+    rootElement: rootName,
+    namespace,
+    errors: []
+  };
+}
+function getLocalName(node) {
+  if (node.localName) return node.localName;
+  const name = node.nodeName;
+  const idx = name.indexOf(":");
+  return idx === -1 ? name : name.substring(idx + 1);
+}
+function elementToObject(el) {
+  const result = {};
+  let hasChildElements = false;
+  for (let i = 0; i < el.attributes.length; i++) {
+    const a = el.attributes.item(i);
+    if (!a) continue;
+    const name = a.nodeName;
+    if (name === "xmlns" || name.startsWith("xmlns:")) continue;
+    const attrLocal = getLocalName(a);
+    result[`@${attrLocal}`] = a.value;
+  }
+  const childCounts = /* @__PURE__ */ new Map();
+  for (let i = 0; i < el.childNodes.length; i++) {
+    const child = el.childNodes.item(i);
+    if (!child || child.nodeType !== 1) continue;
+    const name = getLocalName(child);
+    childCounts.set(name, (childCounts.get(name) || 0) + 1);
+    hasChildElements = true;
+  }
+  if (!hasChildElements) {
+    const text = getTextContent(el);
+    const hasAttrs = Object.keys(result).length > 0;
+    if (hasAttrs) {
+      result["#text"] = text;
+      return result;
+    }
+    return text;
+  }
+  for (let i = 0; i < el.childNodes.length; i++) {
+    const child = el.childNodes.item(i);
+    if (!child || child.nodeType !== 1) continue;
+    const name = getLocalName(child);
+    const value = elementToObject(child);
+    const count = childCounts.get(name) || 1;
+    if (count > 1) {
+      if (!Array.isArray(result[name])) {
+        result[name] = [];
+      }
+      result[name].push(value);
+    } else {
+      result[name] = value;
+    }
+  }
+  return result;
+}
+function getTextContent(el) {
+  let text = "";
+  for (let i = 0; i < el.childNodes.length; i++) {
+    const child = el.childNodes.item(i);
+    if (!child) continue;
+    if (child.nodeType === 3 || child.nodeType === 4) {
+      text += child.nodeValue || "";
+    }
+  }
+  return text.trim();
+}
+var init_xml_to_object = __esm({
+  "src/validation/xml-to-object.ts"() {
+    "use strict";
   }
 });
 
@@ -2760,18 +3377,18 @@ var init_fa3 = __esm({
     TDataCzas = z.string();
     TZnakowy = z.string().min(1).max(256);
     TNaglowek = z.object({
-      "KodFormularza": z.object({ "#text": TKodFormularza, "@kodSystemowy": z.literal("FA (3)"), "@wersjaSchemy": z.literal("1-0E") }),
+      "KodFormularza": z.object({ "#text": TKodFormularza, "@kodSystemowy": z.literal("FA (3)"), "@wersjaSchemy": z.literal("1-0E") }).strict(),
       "WariantFormularza": z.literal("3"),
       "DataWytworzeniaFa": z.string(),
       "SystemInfo": TZnakowy.optional()
-    });
+    }).strict();
     TKodyKrajowUE = z.enum(["AT", "BE", "BG", "CY", "CZ", "DK", "EE", "FI", "FR", "DE", "EL", "HR", "HU", "IE", "IT", "LV", "LT", "LU", "MT", "NL", "PL", "PT", "RO", "SK", "SI", "ES", "SE", "XI"]);
     TNrNIP = z.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
     TZnakowy512 = z.string().min(1).max(512);
     TPodmiot1 = z.object({
       "NIP": TNrNIP,
       "Nazwa": TZnakowy512
-    });
+    }).strict();
     TKodKraju = z.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
     TGLN = z.string().min(1).max(13);
     TAdres = z.object({
@@ -2779,7 +3396,7 @@ var init_fa3 = __esm({
       "AdresL1": TZnakowy512,
       "AdresL2": TZnakowy512.optional(),
       "GLN": TGLN.optional()
-    });
+    }).strict();
     TAdresEmail = z.string().min(3).max(255).regex(/^(.)+@(.)+$/);
     TNumerTelefonu = z.string().min(1).max(16);
     TStatusInfoPodatnika = z.enum(["1", "2", "3", "4"]);
@@ -2794,7 +3411,7 @@ var init_fa3 = __esm({
       "NrID": z.string().min(1).max(50).optional(),
       "BrakID": TWybor1.optional(),
       "Nazwa": TZnakowy512.optional()
-    });
+    }).strict();
     TZnakowy50 = z.string().min(1).max(50);
     TZnakowy20 = z.string().min(1).max(20);
     TNIPIdWew = z.string().min(1).max(20).regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}-\d{5}$/);
@@ -2807,7 +3424,7 @@ var init_fa3 = __esm({
       "NrID": z.string().min(1).max(50).optional(),
       "BrakID": TWybor1.optional(),
       "Nazwa": TZnakowy512.optional()
-    });
+    }).strict();
     TRolaPodmiotu3 = z.enum(["1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11"]);
     TProcentowy = z.coerce.number().min(0).max(100);
     TRolaPodmiotuUpowaznionego = z.enum(["1", "2", "3"]);
@@ -2825,7 +3442,7 @@ var init_fa3 = __esm({
       "NrWiersza": TNaturalny.optional(),
       "Klucz": TZnakowy,
       "Wartosc": TZnakowy
-    });
+    }).strict();
     TKwotowy2 = z.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
     TStawkaPodatku = z.enum(["23", "22", "8", "7", "5", "4", "3", "0 KR", "0 WDT", "0 EX", "zw", "oo", "np I", "np II"]);
     TGTU = z.enum(["GTU_01", "GTU_02", "GTU_03", "GTU_04", "GTU_05", "GTU_06", "GTU_07", "GTU_08", "GTU_09", "GTU_10", "GTU_11", "GTU_12", "GTU_13"]);
@@ -2840,7 +3457,7 @@ var init_fa3 = __esm({
       "RachunekWlasnyBanku": TRachunekWlasnyBanku.optional(),
       "NazwaBanku": TZnakowy.optional(),
       "OpisRachunku": TZnakowy.optional()
-    });
+    }).strict();
     TDataU = z.string();
     TRodzajTransportu = z.enum(["1", "2", "3", "4", "5", "7", "8"]);
     TLadunek = z.enum(["1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20"]);
@@ -2861,13 +3478,13 @@ var init_fa3 = __esm({
           "AdresL1": TZnakowy512,
           "AdresL2": TZnakowy512.optional(),
           "GLN": TGLN.optional()
-        }).optional(),
+        }).strict().optional(),
         "DaneKontaktowe": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "Email": TAdresEmail.optional(),
           "Telefon": TNumerTelefonu.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "StatusInfoPodatnika": TStatusInfoPodatnika.optional()
-      }),
+      }).strict(),
       "Podmiot2": z.object({
         "NrEORI": TZnakowy.optional(),
         "DaneIdentyfikacyjne": TPodmiot2,
@@ -2876,12 +3493,12 @@ var init_fa3 = __esm({
         "DaneKontaktowe": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "Email": TAdresEmail.optional(),
           "Telefon": TNumerTelefonu.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "NrKlienta": TZnakowy.optional(),
         "IDNabywcy": z.string().min(1).max(32).optional(),
         "JST": z.enum(["1", "2"]),
         "GV": z.enum(["1", "2"])
-      }),
+      }).strict(),
       "Podmiot3": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
         "IDNabywcy": z.string().min(1).max(32).optional(),
         "NrEORI": TZnakowy.optional(),
@@ -2891,13 +3508,13 @@ var init_fa3 = __esm({
         "DaneKontaktowe": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "Email": TAdresEmail.optional(),
           "Telefon": TNumerTelefonu.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rola": TRolaPodmiotu3.optional(),
         "RolaInna": TWybor1.optional(),
         "OpisRoli": TZnakowy.optional(),
         "Udzial": TProcentowy.optional(),
         "NrKlienta": TZnakowy.optional()
-      })).min(0).max(100)).optional(),
+      }).strict()).min(0).max(100)).optional(),
       "PodmiotUpowazniony": z.object({
         "NrEORI": TZnakowy.optional(),
         "DaneIdentyfikacyjne": TPodmiot1,
@@ -2906,9 +3523,9 @@ var init_fa3 = __esm({
         "DaneKontaktowe": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "EmailPU": TAdresEmail.optional(),
           "TelefonPU": TNumerTelefonu.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "RolaPU": TRolaPodmiotuUpowaznionego
-      }).optional(),
+      }).strict().optional(),
       "Fa": z.object({
         "KodWaluty": TKodWaluty,
         "P_1": TDataT,
@@ -2919,7 +3536,7 @@ var init_fa3 = __esm({
         "OkresFa": z.object({
           "P_6_Od": TDataT,
           "P_6_Do": TDataT
-        }).optional(),
+        }).strict().optional(),
         "P_13_1": TKwotowy.optional(),
         "P_14_1": TKwotowy.optional(),
         "P_14_1W": TKwotowy.optional(),
@@ -2949,7 +3566,7 @@ var init_fa3 = __esm({
           "P_17": TWybor1_2,
           "P_18": TWybor1_2,
           "P_18A": TWybor1_2,
-          "Zwolnienie": z.union([z.object({ "P_19": TWybor1, "P_19A": TZnakowy.optional(), "P_19B": TZnakowy.optional(), "P_19C": TZnakowy.optional() }), z.object({ "P_19N": TWybor1 })]),
+          "Zwolnienie": z.union([z.object({ "P_19": TWybor1, "P_19A": TZnakowy.optional(), "P_19B": TZnakowy.optional(), "P_19C": TZnakowy.optional() }).strict(), z.object({ "P_19N": TWybor1 }).strict()]),
           "NoweSrodkiTransportu": z.union([z.object({ "P_22": TWybor1, "P_42_5": TWybor1_2, "NowySrodekTransportu": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "P_22A": TDataT,
             "P_NrWierszaNST": TNaturalny,
@@ -2968,10 +3585,10 @@ var init_fa3 = __esm({
             "P_22C1": TZnakowy.optional(),
             "P_22D": TZnakowy.optional(),
             "P_22D1": TZnakowy.optional()
-          })).min(1).max(1e4)) }), z.object({ "P_22N": TWybor1 })]),
+          }).strict()).min(1).max(1e4)) }).strict(), z.object({ "P_22N": TWybor1 }).strict()]),
           "P_23": TWybor1_2,
-          "PMarzy": z.union([z.object({ "P_PMarzy": TWybor1, "P_PMarzy_2": TWybor1.optional(), "P_PMarzy_3_1": TWybor1.optional(), "P_PMarzy_3_2": TWybor1.optional(), "P_PMarzy_3_3": TWybor1.optional() }), z.object({ "P_PMarzyN": TWybor1 })])
-        }),
+          "PMarzy": z.union([z.object({ "P_PMarzy": TWybor1, "P_PMarzy_2": TWybor1.optional(), "P_PMarzy_3_1": TWybor1.optional(), "P_PMarzy_3_2": TWybor1.optional(), "P_PMarzy_3_3": TWybor1.optional() }).strict(), z.object({ "P_PMarzyN": TWybor1 }).strict()])
+        }).strict(),
         "RodzajFaktury": TRodzajFaktury,
         "PrzyczynaKorekty": TZnakowy.optional(),
         "TypKorekty": TTypKorekty.optional(),
@@ -2981,30 +3598,30 @@ var init_fa3 = __esm({
           "NrKSeF": TWybor1.optional(),
           "NrKSeFFaKorygowanej": TNumerKSeF.optional(),
           "NrKSeFN": TWybor1.optional()
-        })).min(1).max(5e4)).optional(),
+        }).strict()).min(1).max(5e4)).optional(),
         "OkresFaKorygowanej": TZnakowy.optional(),
         "NrFaKorygowany": TZnakowy.optional(),
         "Podmiot1K": z.object({
           "PrefiksPodatnika": TKodyKrajowUE.optional(),
           "DaneIdentyfikacyjne": TPodmiot1,
           "Adres": TAdres
-        }).optional(),
+        }).strict().optional(),
         "Podmiot2K": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "DaneIdentyfikacyjne": TPodmiot2,
           "Adres": TAdres.optional(),
           "IDNabywcy": z.string().min(1).max(32).optional()
-        })).min(0).max(101)).optional(),
+        }).strict()).min(0).max(101)).optional(),
         "P_15ZK": TKwotowy.optional(),
         "KursWalutyZK": TIlosci.optional(),
         "ZaliczkaCzesciowa": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "P_6Z": TDataT,
           "P_15Z": TKwotowy,
           "KursWalutyZW": TIlosci.optional()
-        })).min(0).max(31)).optional(),
+        }).strict()).min(0).max(31)).optional(),
         "FP": TWybor1.optional(),
         "TP": TWybor1.optional(),
         "DodatkowyOpis": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(TKluczWartosc).min(0).max(1e4)).optional(),
-        "FakturaZaliczkowa": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.union([z.object({ "NrKSeFZN": TWybor1, "NrFaZaliczkowej": TZnakowy }), z.object({ "NrKSeFFaZaliczkowej": TNumerKSeF })])).min(0).max(100)).optional(),
+        "FakturaZaliczkowa": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.union([z.object({ "NrKSeFZN": TWybor1, "NrFaZaliczkowej": TZnakowy }).strict(), z.object({ "NrKSeFFaZaliczkowej": TNumerKSeF }).strict()])).min(0).max(100)).optional(),
         "ZwrotAkcyzy": TWybor1.optional(),
         "FaWiersz": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "NrWierszaFa": TNaturalny,
@@ -3032,21 +3649,21 @@ var init_fa3 = __esm({
           "Procedura": TOznaczenieProcedury.optional(),
           "KursWaluty": TIlosci.optional(),
           "StanPrzed": TWybor1.optional()
-        })).min(0).max(1e4)).optional(),
+        }).strict()).min(0).max(1e4)).optional(),
         "Rozliczenie": z.object({
           "Obciazenia": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "Kwota": TKwotowy,
             "Powod": TZnakowy
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaObciazen": TKwotowy.optional(),
           "Odliczenia": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "Kwota": TKwotowy,
             "Powod": TZnakowy
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaOdliczen": TKwotowy.optional(),
           "DoZaplaty": TKwotowy.optional(),
           "DoRozliczenia": TKwotowy.optional()
-        }).optional(),
+        }).strict().optional(),
         "Platnosc": z.object({
           "Zaplacono": TWybor1.optional(),
           "DataZaplaty": TData.optional(),
@@ -3057,15 +3674,15 @@ var init_fa3 = __esm({
             "FormaPlatnosci": TFormaPlatnosci.optional(),
             "PlatnoscInna": TWybor1.optional(),
             "OpisPlatnosci": TZnakowy.optional()
-          })).min(1).max(100)).optional(),
+          }).strict()).min(1).max(100)).optional(),
           "TerminPlatnosci": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "Termin": TData.optional(),
             "TerminOpis": z.object({
               "Ilosc": z.coerce.number().int(),
               "Jednostka": TZnakowy50,
               "ZdarzeniePoczatkowe": TZnakowy
-            }).optional()
-          })).min(0).max(100)).optional(),
+            }).strict().optional()
+          }).strict()).min(0).max(100)).optional(),
           "FormaPlatnosci": TFormaPlatnosci.optional(),
           "PlatnoscInna": TWybor1.optional(),
           "OpisPlatnosci": TZnakowy.optional(),
@@ -3074,19 +3691,19 @@ var init_fa3 = __esm({
           "Skonto": z.object({
             "WarunkiSkonta": TZnakowy,
             "WysokoscSkonta": TZnakowy
-          }).optional(),
+          }).strict().optional(),
           "LinkDoPlatnosci": z.string().min(1).max(512).regex(/^(https?):\/\/([a-zA-Z0-9][a-zA-Z0-9-]*\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?(\/[^\s?#]*)?\?([^#\s]*&)?IPKSeF=[0-9]{3}[a-zA-Z0-9]{10}(&[^#\s]*)?(#.*)?$/).optional(),
           "IPKSeF": z.string().min(1).max(13).regex(/^[0-9]{3}[a-zA-Z0-9]{10}$/).optional()
-        }).optional(),
+        }).strict().optional(),
         "WarunkiTransakcji": z.object({
           "Umowy": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "DataUmowy": TDataU.optional(),
             "NrUmowy": TZnakowy.optional()
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "Zamowienia": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
             "DataZamowienia": TDataU.optional(),
             "NrZamowienia": TZnakowy.optional()
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "NrPartiiTowaru": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(TZnakowy).min(0).max(1e3)).optional(),
           "WarunkiDostawy": TZnakowy.optional(),
           "KursUmowny": TIlosci.optional(),
@@ -3098,7 +3715,7 @@ var init_fa3 = __esm({
             "Przewoznik": z.object({
               "DaneIdentyfikacyjne": TPodmiot2,
               "AdresPrzewoznika": TAdres
-            }).optional(),
+            }).strict().optional(),
             "NrZleceniaTransportu": TZnakowy.optional(),
             "OpisLadunku": TLadunek.optional(),
             "LadunekInny": TWybor1.optional(),
@@ -3109,9 +3726,9 @@ var init_fa3 = __esm({
             "WysylkaZ": TAdres.optional(),
             "WysylkaPrzez": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(TAdres).min(0).max(20)).optional(),
             "WysylkaDo": TAdres.optional()
-          })).min(0).max(20)).optional(),
+          }).strict()).min(0).max(20)).optional(),
           "PodmiotPosredniczacy": TWybor1.optional()
-        }).optional(),
+        }).strict().optional(),
         "Zamowienie": z.object({
           "WartoscZamowienia": TKwotowy,
           "ZamowienieWiersz": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
@@ -3135,24 +3752,24 @@ var init_fa3 = __esm({
             "ProceduraZ": TOznaczenieProceduryZ.optional(),
             "KwotaAkcyzyZ": TKwotowy.optional(),
             "StanPrzedZ": TWybor1.optional()
-          })).min(1).max(1e4))
-        }).optional()
-      }),
+          }).strict()).min(1).max(1e4))
+        }).strict().optional()
+      }).strict(),
       "Stopka": z.object({
         "Informacje": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "StopkaFaktury": TTekstowy.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rejestry": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.object({
           "PelnaNazwa": TZnakowy.optional(),
           "KRS": TNrKRS.optional(),
           "REGON": TNrREGON.optional(),
           "BDO": z.string().min(1).max(9).optional()
-        })).min(0).max(100)).optional()
-      }).optional(),
+        }).strict()).min(0).max(100)).optional()
+      }).strict().optional(),
       "Zalacznik": z.object({
         "BlokDanych": z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z.array(z.any()).min(1).max(1e3))
-      }).optional()
-    });
+      }).strict().optional()
+    }).strict();
   }
 });
 
@@ -3170,18 +3787,18 @@ var init_fa2 = __esm({
     TDataCzas2 = z2.string();
     TZnakowy3 = z2.string().min(1).max(256);
     TNaglowek2 = z2.object({
-      "KodFormularza": z2.object({ "#text": TKodFormularza2, "@kodSystemowy": z2.literal("FA (2)"), "@wersjaSchemy": z2.literal("1-0E") }),
+      "KodFormularza": z2.object({ "#text": TKodFormularza2, "@kodSystemowy": z2.literal("FA (2)"), "@wersjaSchemy": z2.literal("1-0E") }).strict(),
       "WariantFormularza": z2.literal("2"),
       "DataWytworzeniaFa": z2.string(),
       "SystemInfo": TZnakowy3.optional()
-    });
+    }).strict();
     TKodyKrajowUE2 = z2.enum(["AT", "BE", "BG", "CY", "CZ", "DK", "EE", "FI", "FR", "DE", "EL", "HR", "HU", "IE", "IT", "LV", "LT", "LU", "MT", "NL", "PL", "PT", "RO", "SK", "SI", "ES", "SE", "XI"]);
     TNrNIP2 = z2.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
     TZnakowy5122 = z2.string().min(1).max(512);
     TPodmiot12 = z2.object({
       "NIP": TNrNIP2,
       "Nazwa": TZnakowy5122
-    });
+    }).strict();
     TKodKraju2 = z2.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
     TGLN2 = z2.string().min(1).max(13);
     TAdres2 = z2.object({
@@ -3189,7 +3806,7 @@ var init_fa2 = __esm({
       "AdresL1": TZnakowy5122,
       "AdresL2": TZnakowy5122.optional(),
       "GLN": TGLN2.optional()
-    });
+    }).strict();
     TAdresEmail2 = z2.string().min(3).max(255).regex(/^(.)+@(.)+$/);
     TNumerTelefonu2 = z2.string().min(1).max(16);
     TStatusInfoPodatnika2 = z2.enum(["1", "2", "3", "4"]);
@@ -3204,7 +3821,7 @@ var init_fa2 = __esm({
       "NrID": z2.string().min(1).max(50).regex(/^[a-zA-Z0-9]{1,50}$/).optional(),
       "BrakID": TWybor12.optional(),
       "Nazwa": TZnakowy5122.optional()
-    });
+    }).strict();
     TZnakowy502 = z2.string().min(1).max(50);
     TZnakowy202 = z2.string().min(1).max(20);
     TNIPIdWew2 = z2.string().min(1).max(20).regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}-\d{5}$/);
@@ -3217,7 +3834,7 @@ var init_fa2 = __esm({
       "NrID": z2.string().min(1).max(50).regex(/^[a-zA-Z0-9]{1,50}$/).optional(),
       "BrakID": TWybor12.optional(),
       "Nazwa": TZnakowy5122.optional()
-    });
+    }).strict();
     TRolaPodmiotu32 = z2.enum(["1", "2", "3", "4", "5", "6", "7", "8", "9", "10"]);
     TProcentowy2 = z2.coerce.number().min(0).max(100);
     TRolaPodmiotuUpowaznionego2 = z2.enum(["1", "2", "3"]);
@@ -3235,7 +3852,7 @@ var init_fa2 = __esm({
       "NrWiersza": TNaturalny2.optional(),
       "Klucz": TZnakowy3,
       "Wartosc": TZnakowy3
-    });
+    }).strict();
     TKwotowy22 = z2.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
     TStawkaPodatku2 = z2.enum(["23", "22", "8", "7", "5", "4", "3", "0", "zw", "oo", "np"]);
     TGTU2 = z2.enum(["GTU_01", "GTU_02", "GTU_03", "GTU_04", "GTU_05", "GTU_06", "GTU_07", "GTU_08", "GTU_09", "GTU_10", "GTU_11", "GTU_12", "GTU_13"]);
@@ -3250,7 +3867,7 @@ var init_fa2 = __esm({
       "RachunekWlasnyBanku": TRachunekWlasnyBanku2.optional(),
       "NazwaBanku": TZnakowy3.optional(),
       "OpisRachunku": TZnakowy3.optional()
-    });
+    }).strict();
     TRodzajTransportu2 = z2.enum(["1", "2", "3", "4", "5", "7", "8"]);
     TLadunek2 = z2.enum(["1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15", "16", "17", "18", "19", "20"]);
     TOznaczenieProceduryZ2 = z2.enum(["WSTO_EE", "IED", "TT_D", "B_SPV", "B_SPV_DOSTAWA", "B_MPV_PROWIZJA"]);
@@ -3269,13 +3886,13 @@ var init_fa2 = __esm({
           "AdresL1": TZnakowy5122,
           "AdresL2": TZnakowy5122.optional(),
           "GLN": TGLN2.optional()
-        }).optional(),
+        }).strict().optional(),
         "DaneKontaktowe": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "Email": TAdresEmail2.optional(),
           "Telefon": TNumerTelefonu2.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "StatusInfoPodatnika": TStatusInfoPodatnika2.optional()
-      }),
+      }).strict(),
       "Podmiot2": z2.object({
         "NrEORI": TZnakowy3.optional(),
         "DaneIdentyfikacyjne": TPodmiot22,
@@ -3284,10 +3901,10 @@ var init_fa2 = __esm({
         "DaneKontaktowe": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "Email": TAdresEmail2.optional(),
           "Telefon": TNumerTelefonu2.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "NrKlienta": TZnakowy3.optional(),
         "IDNabywcy": z2.string().min(1).max(32).optional()
-      }),
+      }).strict(),
       "Podmiot3": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
         "IDNabywcy": z2.string().min(1).max(32).optional(),
         "NrEORI": TZnakowy3.optional(),
@@ -3297,13 +3914,13 @@ var init_fa2 = __esm({
         "DaneKontaktowe": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "Email": TAdresEmail2.optional(),
           "Telefon": TNumerTelefonu2.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rola": TRolaPodmiotu32.optional(),
         "RolaInna": TWybor12.optional(),
         "OpisRoli": TZnakowy3.optional(),
         "Udzial": TProcentowy2.optional(),
         "NrKlienta": TZnakowy3.optional()
-      })).min(0).max(100)).optional(),
+      }).strict()).min(0).max(100)).optional(),
       "PodmiotUpowazniony": z2.object({
         "NrEORI": TZnakowy3.optional(),
         "DaneIdentyfikacyjne": TPodmiot12,
@@ -3312,9 +3929,9 @@ var init_fa2 = __esm({
         "DaneKontaktowe": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "EmailPU": TAdresEmail2.optional(),
           "TelefonPU": TNumerTelefonu2.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "RolaPU": TRolaPodmiotuUpowaznionego2
-      }).optional(),
+      }).strict().optional(),
       "Fa": z2.object({
         "KodWaluty": TKodWaluty2,
         "P_1": TDataT2,
@@ -3325,7 +3942,7 @@ var init_fa2 = __esm({
         "OkresFa": z2.object({
           "P_6_Od": TDataT2,
           "P_6_Do": TDataT2
-        }).optional(),
+        }).strict().optional(),
         "P_13_1": TKwotowy3.optional(),
         "P_14_1": TKwotowy3.optional(),
         "P_14_1W": TKwotowy3.optional(),
@@ -3355,7 +3972,7 @@ var init_fa2 = __esm({
           "P_17": TWybor1_22,
           "P_18": TWybor1_22,
           "P_18A": TWybor1_22,
-          "Zwolnienie": z2.union([z2.object({ "P_19": TWybor12, "P_19A": TZnakowy3.optional(), "P_19B": TZnakowy3.optional(), "P_19C": TZnakowy3.optional() }), z2.object({ "P_19N": TWybor12 })]),
+          "Zwolnienie": z2.union([z2.object({ "P_19": TWybor12, "P_19A": TZnakowy3.optional(), "P_19B": TZnakowy3.optional(), "P_19C": TZnakowy3.optional() }).strict(), z2.object({ "P_19N": TWybor12 }).strict()]),
           "NoweSrodkiTransportu": z2.union([z2.object({ "P_22": TWybor12, "P_42_5": TWybor1_22, "NowySrodekTransportu": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "P_22A": TDataT2,
             "P_NrWierszaNST": TNaturalny2,
@@ -3374,10 +3991,10 @@ var init_fa2 = __esm({
             "P_22C1": TZnakowy3.optional(),
             "P_22D": TZnakowy3.optional(),
             "P_22D1": TZnakowy3.optional()
-          })).min(1).max(1e4)) }), z2.object({ "P_22N": TWybor12 })]),
+          }).strict()).min(1).max(1e4)) }).strict(), z2.object({ "P_22N": TWybor12 }).strict()]),
           "P_23": TWybor1_22,
-          "PMarzy": z2.union([z2.object({ "P_PMarzy": TWybor12, "P_PMarzy_2": TWybor12.optional(), "P_PMarzy_3_1": TWybor12.optional(), "P_PMarzy_3_2": TWybor12.optional(), "P_PMarzy_3_3": TWybor12.optional() }), z2.object({ "P_PMarzyN": TWybor12 })])
-        }),
+          "PMarzy": z2.union([z2.object({ "P_PMarzy": TWybor12, "P_PMarzy_2": TWybor12.optional(), "P_PMarzy_3_1": TWybor12.optional(), "P_PMarzy_3_2": TWybor12.optional(), "P_PMarzy_3_3": TWybor12.optional() }).strict(), z2.object({ "P_PMarzyN": TWybor12 }).strict()])
+        }).strict(),
         "RodzajFaktury": TRodzajFaktury2,
         "PrzyczynaKorekty": TZnakowy3.optional(),
         "TypKorekty": TTypKorekty2.optional(),
@@ -3387,30 +4004,30 @@ var init_fa2 = __esm({
           "NrKSeF": TWybor12.optional(),
           "NrKSeFFaKorygowanej": TNumerKSeF2.optional(),
           "NrKSeFN": TWybor12.optional()
-        })).min(1)).optional(),
+        }).strict()).min(1)).optional(),
         "OkresFaKorygowanej": TZnakowy3.optional(),
         "NrFaKorygowany": TZnakowy3.optional(),
         "Podmiot1K": z2.object({
           "PrefiksPodatnika": TKodyKrajowUE2.optional(),
           "DaneIdentyfikacyjne": TPodmiot12,
           "Adres": TAdres2
-        }).optional(),
+        }).strict().optional(),
         "Podmiot2K": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "DaneIdentyfikacyjne": TPodmiot22,
           "Adres": TAdres2.optional(),
           "IDNabywcy": z2.string().min(1).max(32).optional()
-        })).min(0).max(101)).optional(),
+        }).strict()).min(0).max(101)).optional(),
         "P_15ZK": TKwotowy3.optional(),
         "KursWalutyZK": TIlosci2.optional(),
         "ZaliczkaCzesciowa": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "P_6Z": TDataT2,
           "P_15Z": TKwotowy3,
           "KursWalutyZW": TIlosci2.optional()
-        })).min(0).max(31)).optional(),
+        }).strict()).min(0).max(31)).optional(),
         "FP": TWybor12.optional(),
         "TP": TWybor12.optional(),
         "DodatkowyOpis": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(TKluczWartosc2).min(0).max(1e4)).optional(),
-        "FakturaZaliczkowa": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.union([z2.object({ "NrKSeFZN": TWybor12, "NrFaZaliczkowej": TZnakowy3 }), z2.object({ "NrKSeFFaZaliczkowej": TNumerKSeF2 })])).min(0).max(100)).optional(),
+        "FakturaZaliczkowa": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.union([z2.object({ "NrKSeFZN": TWybor12, "NrFaZaliczkowej": TZnakowy3 }).strict(), z2.object({ "NrKSeFFaZaliczkowej": TNumerKSeF2 }).strict()])).min(0).max(100)).optional(),
         "ZwrotAkcyzy": TWybor12.optional(),
         "FaWiersz": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "NrWierszaFa": TNaturalny2,
@@ -3438,21 +4055,21 @@ var init_fa2 = __esm({
           "Procedura": TOznaczenieProcedury2.optional(),
           "KursWaluty": TIlosci2.optional(),
           "StanPrzed": TWybor12.optional()
-        })).min(0).max(1e4)).optional(),
+        }).strict()).min(0).max(1e4)).optional(),
         "Rozliczenie": z2.object({
           "Obciazenia": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "Kwota": TKwotowy3,
             "Powod": TZnakowy3
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaObciazen": TKwotowy3.optional(),
           "Odliczenia": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "Kwota": TKwotowy3,
             "Powod": TZnakowy3
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaOdliczen": TKwotowy3.optional(),
           "DoZaplaty": TKwotowy3.optional(),
           "DoRozliczenia": TKwotowy3.optional()
-        }).optional(),
+        }).strict().optional(),
         "Platnosc": z2.object({
           "Zaplacono": TWybor12.optional(),
           "DataZaplaty": TData2.optional(),
@@ -3460,11 +4077,11 @@ var init_fa2 = __esm({
           "ZaplataCzesciowa": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "KwotaZaplatyCzesciowej": TKwotowy3,
             "DataZaplatyCzesciowej": TData2
-          })).min(1).max(100)).optional(),
+          }).strict()).min(1).max(100)).optional(),
           "TerminPlatnosci": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "Termin": TData2,
             "TerminOpis": TZnakowy3.optional()
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "FormaPlatnosci": TFormaPlatnosci2.optional(),
           "PlatnoscInna": TWybor12.optional(),
           "OpisPlatnosci": TZnakowy3.optional(),
@@ -3473,17 +4090,17 @@ var init_fa2 = __esm({
           "Skonto": z2.object({
             "WarunkiSkonta": TZnakowy3,
             "WysokoscSkonta": TZnakowy3
-          }).optional()
-        }).optional(),
+          }).strict().optional()
+        }).strict().optional(),
         "WarunkiTransakcji": z2.object({
           "Umowy": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "DataUmowy": TData2.optional(),
             "NrUmowy": TZnakowy3.optional()
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "Zamowienia": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
             "DataZamowienia": TData2.optional(),
             "NrZamowienia": TZnakowy3.optional()
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "NrPartiiTowaru": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(TZnakowy3).min(0).max(1e3)).optional(),
           "WarunkiDostawy": TZnakowy3.optional(),
           "KursUmowny": TIlosci2.optional(),
@@ -3495,7 +4112,7 @@ var init_fa2 = __esm({
             "Przewoznik": z2.object({
               "DaneIdentyfikacyjne": TPodmiot22,
               "AdresPrzewoznika": TAdres2
-            }).optional(),
+            }).strict().optional(),
             "NrZleceniaTransportu": TZnakowy3.optional(),
             "OpisLadunku": TLadunek2.optional(),
             "LadunekInny": TWybor12.optional(),
@@ -3506,9 +4123,9 @@ var init_fa2 = __esm({
             "WysylkaZ": TAdres2.optional(),
             "WysylkaPrzez": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(TAdres2).min(0).max(20)).optional(),
             "WysylkaDo": TAdres2.optional()
-          })).min(0).max(20)).optional(),
+          }).strict()).min(0).max(20)).optional(),
           "PodmiotPosredniczacy": TWybor12.optional()
-        }).optional(),
+        }).strict().optional(),
         "Zamowienie": z2.object({
           "WartoscZamowienia": TKwotowy3,
           "ZamowienieWiersz": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
@@ -3532,21 +4149,21 @@ var init_fa2 = __esm({
             "ProceduraZ": TOznaczenieProceduryZ2.optional(),
             "KwotaAkcyzyZ": TKwotowy3.optional(),
             "StanPrzedZ": TWybor12.optional()
-          })).min(1).max(1e4))
-        }).optional()
-      }),
+          }).strict()).min(1).max(1e4))
+        }).strict().optional()
+      }).strict(),
       "Stopka": z2.object({
         "Informacje": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "StopkaFaktury": TTekstowy2.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rejestry": z2.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z2.array(z2.object({
           "PelnaNazwa": TZnakowy3.optional(),
           "KRS": TNrKRS2.optional(),
           "REGON": TNrREGON2.optional(),
           "BDO": z2.string().min(1).max(9).optional()
-        })).min(0).max(100)).optional()
-      }).optional()
-    });
+        }).strict()).min(0).max(100)).optional()
+      }).strict().optional()
+    }).strict();
   }
 });
 
@@ -3564,17 +4181,17 @@ var init_rr1_v11e = __esm({
     TDataCzas3 = z3.string();
     TZnakowy4 = z3.string().min(1).max(256);
     TNaglowek3 = z3.object({
-      "KodFormularza": z3.object({ "#text": TKodFormularza3, "@kodSystemowy": z3.literal("FA_RR (1)"), "@wersjaSchemy": z3.literal("1-1E") }),
+      "KodFormularza": z3.object({ "#text": TKodFormularza3, "@kodSystemowy": z3.literal("FA_RR (1)"), "@wersjaSchemy": z3.literal("1-1E") }).strict(),
       "WariantFormularza": z3.literal("1"),
       "DataWytworzeniaFa": z3.string(),
       "SystemInfo": TZnakowy4.optional()
-    });
+    }).strict();
     TNrNIP3 = z3.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
     TZnakowy5123 = z3.string().min(1).max(512);
     TPodmiot13 = z3.object({
       "NIP": TNrNIP3,
       "Nazwa": TZnakowy5123
-    });
+    }).strict();
     TKodKraju3 = z3.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
     TGLN3 = z3.string().min(1).max(13);
     TAdres3 = z3.object({
@@ -3582,7 +4199,7 @@ var init_rr1_v11e = __esm({
       "AdresL1": TZnakowy5123,
       "AdresL2": TZnakowy5123.optional(),
       "GLN": TGLN3.optional()
-    });
+    }).strict();
     TAdresEmail3 = z3.string().min(3).max(255).regex(/^(.)+@(.)+$/);
     TNumerTelefonu3 = z3.string().min(1).max(16);
     TStatusInfoPodatnika3 = z3.enum(["1", "2", "3", "4"]);
@@ -3594,7 +4211,7 @@ var init_rr1_v11e = __esm({
       "IDWew": TNIPIdWew3.optional(),
       "BrakID": TWybor13.optional(),
       "Nazwa": TZnakowy5123
-    });
+    }).strict();
     TRolaPodmiotu33 = z3.enum(["1", "2", "3", "5", "6", "7", "8", "9", "10", "11"]);
     TKodWaluty3 = z3.enum(["AED", "AFN", "ALL", "AMD", "ANG", "AOA", "ARS", "AUD", "AWG", "AZN", "BAM", "BBD", "BDT", "BGN", "BHD", "BIF", "BMD", "BND", "BOB", "BOV", "BRL", "BSD", "BTN", "BWP", "BYN", "BZD", "CAD", "CDF", "CHE", "CHF", "CHW", "CLF", "CLP", "CNY", "COP", "COU", "CRC", "CUC", "CUP", "CVE", "CZK", "DJF", "DKK", "DOP", "DZD", "EGP", "ERN", "ETB", "EUR", "FJD", "FKP", "GBP", "GEL", "GGP", "GHS", "GIP", "GMD", "GNF", "GTQ", "GYD", "HKD", "HNL", "HRK", "HTG", "HUF", "IDR", "ILS", "IMP", "INR", "IQD", "IRR", "ISK", "JEP", "JMD", "JOD", "JPY", "KES", "KGS", "KHR", "KMF", "KPW", "KRW", "KWD", "KYD", "KZT", "LAK", "LBP", "LKR", "LRD", "LSL", "LYD", "MAD", "MDL", "MGA", "MKD", "MMK", "MNT", "MOP", "MRU", "MUR", "MVR", "MWK", "MXN", "MXV", "MYR", "MZN", "NAD", "NGN", "NIO", "NOK", "NPR", "NZD", "OMR", "PAB", "PEN", "PGK", "PHP", "PKR", "PLN", "PYG", "QAR", "RON", "RSD", "RUB", "RWF", "SAR", "SBD", "SCR", "SDG", "SEK", "SGD", "SHP", "SLL", "SOS", "SRD", "SSP", "STN", "SVC", "SYP", "SZL", "THB", "TJS", "TMT", "TND", "TOP", "TRY", "TTD", "TWD", "TZS", "UAH", "UGX", "USD", "USN", "UYI", "UYU", "UYW", "UZS", "VES", "VND", "VUV", "WST", "XAF", "XAG", "XAU", "XBA", "XBB", "XBC", "XBD", "XCD", "XCG", "XDR", "XOF", "XPD", "XPF", "XPT", "XSU", "XUA", "XXX", "YER", "ZAR", "ZMW", "ZWL"]);
     TData3 = z3.string();
@@ -3608,7 +4225,7 @@ var init_rr1_v11e = __esm({
       "NrWiersza": TNaturalny3.optional(),
       "Klucz": TZnakowy4,
       "Wartosc": TZnakowy4
-    });
+    }).strict();
     TZnakowy503 = z3.string().min(1).max(50);
     TIlosci3 = z3.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,6})?$/);
     TKwotowy23 = z3.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
@@ -3622,7 +4239,7 @@ var init_rr1_v11e = __esm({
       "SWIFT": SWIFT_Type3.optional(),
       "NazwaBanku": TZnakowy4.optional(),
       "OpisRachunku": TZnakowy4.optional()
-    });
+    }).strict();
     TTekstowy3 = z3.string().min(1).max(3500);
     TNrKRS3 = z3.string().regex(/^\d{10}$/);
     TNrREGON3 = z3.union([z3.string().regex(/^\d{9}$/), z3.string().regex(/^\d{14}$/)]);
@@ -3635,9 +4252,9 @@ var init_rr1_v11e = __esm({
         "DaneKontaktowe": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "Email": TAdresEmail3.optional(),
           "Telefon": TNumerTelefonu3.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "NrKontrahenta": TZnakowy4.optional()
-      }),
+      }).strict(),
       "Podmiot2": z3.object({
         "DaneIdentyfikacyjne": TPodmiot13,
         "Adres": TAdres3,
@@ -3645,9 +4262,9 @@ var init_rr1_v11e = __esm({
         "DaneKontaktowe": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "Email": TAdresEmail3.optional(),
           "Telefon": TNumerTelefonu3.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "StatusInfoPodatnika": TStatusInfoPodatnika3.optional()
-      }),
+      }).strict(),
       "Podmiot3": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
         "DaneIdentyfikacyjne": TPodmiot33,
         "Adres": TAdres3.optional(),
@@ -3655,11 +4272,11 @@ var init_rr1_v11e = __esm({
         "DaneKontaktowe": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "Email": TAdresEmail3.optional(),
           "Telefon": TNumerTelefonu3.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rola": TRolaPodmiotu33.optional(),
         "RolaInna": TWybor13.optional(),
         "OpisRoli": TZnakowy4.optional()
-      })).min(0).max(100)).optional(),
+      }).strict()).min(0).max(100)).optional(),
       "FakturaRR": z3.object({
         "KodWaluty": TKodWaluty3,
         "P_1M": TZnakowy4.optional(),
@@ -3682,20 +4299,20 @@ var init_rr1_v11e = __esm({
           "NrKSeF": TWybor13.optional(),
           "NrKSeFFaKorygowanej": TNumerKSeF3.optional(),
           "NrKSeFN": TWybor13.optional()
-        })).min(1).max(5e4)).optional(),
+        }).strict()).min(1).max(5e4)).optional(),
         "NrFaKorygowany": TZnakowy4.optional(),
         "Podmiot1K": z3.object({
           "DaneIdentyfikacyjne": TPodmiot13,
           "Adres": TAdres3
-        }).optional(),
+        }).strict().optional(),
         "Podmiot2K": z3.object({
           "DaneIdentyfikacyjne": TPodmiot13,
           "Adres": TAdres3
-        }).optional(),
+        }).strict().optional(),
         "DokumentZaplaty": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "NrDokumentu": TZnakowy4,
           "DataDokumentu": TData3.optional()
-        })).min(0).max(50)).optional(),
+        }).strict()).min(0).max(50)).optional(),
         "DodatkowyOpis": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(TKluczWartosc3).min(0).max(1e4)).optional(),
         "FakturaRRWiersz": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "NrWierszaFa": TNaturalny3,
@@ -3715,21 +4332,21 @@ var init_rr1_v11e = __esm({
           "P_11": TKwotowy4,
           "StanPrzed": TWybor13.optional(),
           "KursWaluty": TIlosci3.optional()
-        })).min(0).max(1e4)).optional(),
+        }).strict()).min(0).max(1e4)).optional(),
         "Rozliczenie": z3.object({
           "Obciazenia": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
             "Kwota": TKwotowy4,
             "Powod": TZnakowy4
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaObciazen": TKwotowy4.optional(),
           "Odliczenia": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
             "Kwota": TKwotowy4,
             "Powod": TZnakowy4
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaOdliczen": TKwotowy4.optional(),
           "DoZaplaty": TKwotowy4.optional(),
           "DoRozliczenia": TKwotowy4.optional()
-        }).optional(),
+        }).strict().optional(),
         "Platnosc": z3.object({
           "FormaPlatnosci": TFormaPlatnosci3.optional(),
           "PlatnoscInna": TWybor13.optional(),
@@ -3738,20 +4355,20 @@ var init_rr1_v11e = __esm({
           "RachunekBankowy2": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(TRachunekBankowy3).min(0).max(3)).optional(),
           "IPKSeF": z3.string().min(1).max(13).regex(/^[0-9]{3}[a-zA-Z0-9]{10}$/).optional(),
           "LinkDoPlatnosci": z3.string().min(1).max(512).regex(/^(https?):\/\/([a-zA-Z0-9][a-zA-Z0-9-]*\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?(\/[^\s?#]*)?\?([^#\s]*&)?IPKSeF=[0-9]{3}[a-zA-Z0-9]{10}(&[^#\s]*)?(#.*)?$/).optional()
-        }).optional()
-      }),
+        }).strict().optional()
+      }).strict(),
       "Stopka": z3.object({
         "Informacje": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "StopkaFaktury": TTekstowy3.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rejestry": z3.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z3.array(z3.object({
           "PelnaNazwa": TZnakowy4.optional(),
           "KRS": TNrKRS3.optional(),
           "REGON": TNrREGON3.optional(),
           "BDO": z3.string().min(1).max(9).optional()
-        })).min(0).max(100)).optional()
-      }).optional()
-    });
+        }).strict()).min(0).max(100)).optional()
+      }).strict().optional()
+    }).strict();
   }
 });
 
@@ -3769,17 +4386,17 @@ var init_rr1_v10e = __esm({
     TDataCzas4 = z4.string();
     TZnakowy5 = z4.string().min(1).max(256);
     TNaglowek4 = z4.object({
-      "KodFormularza": z4.object({ "#text": TKodFormularza4, "@kodSystemowy": z4.literal("FA_RR(1)"), "@wersjaSchemy": z4.literal("1-0E") }),
+      "KodFormularza": z4.object({ "#text": TKodFormularza4, "@kodSystemowy": z4.literal("FA_RR(1)"), "@wersjaSchemy": z4.literal("1-0E") }).strict(),
       "WariantFormularza": z4.literal("1"),
       "DataWytworzeniaFa": z4.string(),
       "SystemInfo": TZnakowy5.optional()
-    });
+    }).strict();
     TNrNIP4 = z4.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
     TZnakowy5124 = z4.string().min(1).max(512);
     TPodmiot14 = z4.object({
       "NIP": TNrNIP4,
       "Nazwa": TZnakowy5124
-    });
+    }).strict();
     TKodKraju4 = z4.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
     TGLN4 = z4.string().min(1).max(13);
     TAdres4 = z4.object({
@@ -3787,7 +4404,7 @@ var init_rr1_v10e = __esm({
       "AdresL1": TZnakowy5124,
       "AdresL2": TZnakowy5124.optional(),
       "GLN": TGLN4.optional()
-    });
+    }).strict();
     TAdresEmail4 = z4.string().min(3).max(255).regex(/^(.)+@(.)+$/);
     TNumerTelefonu4 = z4.string().min(1).max(16);
     TStatusInfoPodatnika4 = z4.enum(["1", "2", "3", "4"]);
@@ -3799,7 +4416,7 @@ var init_rr1_v10e = __esm({
       "IDWew": TNIPIdWew4.optional(),
       "BrakID": TWybor14.optional(),
       "Nazwa": TZnakowy5124
-    });
+    }).strict();
     TRolaPodmiotu34 = z4.enum(["1", "2", "3", "5", "6", "7", "8", "9", "10", "11"]);
     TKodWaluty4 = z4.enum(["AED", "AFN", "ALL", "AMD", "ANG", "AOA", "ARS", "AUD", "AWG", "AZN", "BAM", "BBD", "BDT", "BGN", "BHD", "BIF", "BMD", "BND", "BOB", "BOV", "BRL", "BSD", "BTN", "BWP", "BYN", "BZD", "CAD", "CDF", "CHE", "CHF", "CHW", "CLF", "CLP", "CNY", "COP", "COU", "CRC", "CUC", "CUP", "CVE", "CZK", "DJF", "DKK", "DOP", "DZD", "EGP", "ERN", "ETB", "EUR", "FJD", "FKP", "GBP", "GEL", "GGP", "GHS", "GIP", "GMD", "GNF", "GTQ", "GYD", "HKD", "HNL", "HRK", "HTG", "HUF", "IDR", "ILS", "IMP", "INR", "IQD", "IRR", "ISK", "JEP", "JMD", "JOD", "JPY", "KES", "KGS", "KHR", "KMF", "KPW", "KRW", "KWD", "KYD", "KZT", "LAK", "LBP", "LKR", "LRD", "LSL", "LYD", "MAD", "MDL", "MGA", "MKD", "MMK", "MNT", "MOP", "MRU", "MUR", "MVR", "MWK", "MXN", "MXV", "MYR", "MZN", "NAD", "NGN", "NIO", "NOK", "NPR", "NZD", "OMR", "PAB", "PEN", "PGK", "PHP", "PKR", "PLN", "PYG", "QAR", "RON", "RSD", "RUB", "RWF", "SAR", "SBD", "SCR", "SDG", "SEK", "SGD", "SHP", "SLL", "SOS", "SRD", "SSP", "STN", "SVC", "SYP", "SZL", "THB", "TJS", "TMT", "TND", "TOP", "TRY", "TTD", "TWD", "TZS", "UAH", "UGX", "USD", "USN", "UYI", "UYU", "UYW", "UZS", "VES", "VND", "VUV", "WST", "XAF", "XAG", "XAU", "XBA", "XBB", "XBC", "XBD", "XCD", "XCG", "XDR", "XOF", "XPD", "XPF", "XPT", "XSU", "XUA", "XXX", "YER", "ZAR", "ZMW", "ZWL"]);
     TData4 = z4.string();
@@ -3813,7 +4430,7 @@ var init_rr1_v10e = __esm({
       "NrWiersza": TNaturalny4.optional(),
       "Klucz": TZnakowy5,
       "Wartosc": TZnakowy5
-    });
+    }).strict();
     TZnakowy504 = z4.string().min(1).max(50);
     TIlosci4 = z4.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,6})?$/);
     TKwotowy24 = z4.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
@@ -3827,7 +4444,7 @@ var init_rr1_v10e = __esm({
       "SWIFT": SWIFT_Type4.optional(),
       "NazwaBanku": TZnakowy5.optional(),
       "OpisRachunku": TZnakowy5.optional()
-    });
+    }).strict();
     TTekstowy4 = z4.string().min(1).max(3500);
     TNrKRS4 = z4.string().regex(/^\d{10}$/);
     TNrREGON4 = z4.union([z4.string().regex(/^\d{9}$/), z4.string().regex(/^\d{14}$/)]);
@@ -3840,9 +4457,9 @@ var init_rr1_v10e = __esm({
         "DaneKontaktowe": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "Email": TAdresEmail4.optional(),
           "Telefon": TNumerTelefonu4.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "NrKontrahenta": TZnakowy5.optional()
-      }),
+      }).strict(),
       "Podmiot2": z4.object({
         "DaneIdentyfikacyjne": TPodmiot14,
         "Adres": TAdres4,
@@ -3850,9 +4467,9 @@ var init_rr1_v10e = __esm({
         "DaneKontaktowe": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "Email": TAdresEmail4.optional(),
           "Telefon": TNumerTelefonu4.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "StatusInfoPodatnika": TStatusInfoPodatnika4.optional()
-      }),
+      }).strict(),
       "Podmiot3": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
         "DaneIdentyfikacyjne": TPodmiot34,
         "Adres": TAdres4.optional(),
@@ -3860,11 +4477,11 @@ var init_rr1_v10e = __esm({
         "DaneKontaktowe": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "Email": TAdresEmail4.optional(),
           "Telefon": TNumerTelefonu4.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rola": TRolaPodmiotu34.optional(),
         "RolaInna": TWybor14.optional(),
         "OpisRoli": TZnakowy5.optional()
-      })).min(0).max(100)).optional(),
+      }).strict()).min(0).max(100)).optional(),
       "FakturaRR": z4.object({
         "KodWaluty": TKodWaluty4,
         "P_1M": TZnakowy5.optional(),
@@ -3887,20 +4504,20 @@ var init_rr1_v10e = __esm({
           "NrKSeF": TWybor14.optional(),
           "NrKSeFFaKorygowanej": TNumerKSeF4.optional(),
           "NrKSeFN": TWybor14.optional()
-        })).min(1).max(5e4)).optional(),
+        }).strict()).min(1).max(5e4)).optional(),
         "NrFaKorygowany": TZnakowy5.optional(),
         "Podmiot1K": z4.object({
           "DaneIdentyfikacyjne": TPodmiot14,
           "Adres": TAdres4
-        }).optional(),
+        }).strict().optional(),
         "Podmiot2K": z4.object({
           "DaneIdentyfikacyjne": TPodmiot14,
           "Adres": TAdres4
-        }).optional(),
+        }).strict().optional(),
         "DokumentZaplaty": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "NrDokumentu": TZnakowy5,
           "DataDokumentu": TData4.optional()
-        })).min(0).max(50)).optional(),
+        }).strict()).min(0).max(50)).optional(),
         "DodatkowyOpis": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(TKluczWartosc4).min(0).max(1e4)).optional(),
         "FakturaRRWiersz": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "NrWierszaFa": TNaturalny4,
@@ -3920,21 +4537,21 @@ var init_rr1_v10e = __esm({
           "P_11": TKwotowy5,
           "StanPrzed": TWybor14.optional(),
           "KursWaluty": TIlosci4.optional()
-        })).min(0).max(1e4)).optional(),
+        }).strict()).min(0).max(1e4)).optional(),
         "Rozliczenie": z4.object({
           "Obciazenia": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
             "Kwota": TKwotowy5,
             "Powod": TZnakowy5
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaObciazen": TKwotowy5.optional(),
           "Odliczenia": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
             "Kwota": TKwotowy5,
             "Powod": TZnakowy5
-          })).min(0).max(100)).optional(),
+          }).strict()).min(0).max(100)).optional(),
           "SumaOdliczen": TKwotowy5.optional(),
           "DoZaplaty": TKwotowy5.optional(),
           "DoRozliczenia": TKwotowy5.optional()
-        }).optional(),
+        }).strict().optional(),
         "Platnosc": z4.object({
           "FormaPlatnosci": TFormaPlatnosci4.optional(),
           "PlatnoscInna": TWybor14.optional(),
@@ -3943,20 +4560,20 @@ var init_rr1_v10e = __esm({
           "RachunekBankowy2": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(TRachunekBankowy4).min(0).max(3)).optional(),
           "IPKSeF": z4.string().min(1).max(13).regex(/^[0-9]{3}[a-zA-Z0-9]{10}$/).optional(),
           "LinkDoPlatnosci": z4.string().min(1).max(512).regex(/^(https?):\/\/([a-zA-Z0-9][a-zA-Z0-9-]*\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?(\/[^\s?#]*)?\?([^#\s]*&)?IPKSeF=[0-9]{3}[a-zA-Z0-9]{10}(&[^#\s]*)?(#.*)?$/).optional()
-        }).optional()
-      }),
+        }).strict().optional()
+      }).strict(),
       "Stopka": z4.object({
         "Informacje": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "StopkaFaktury": TTekstowy4.optional()
-        })).min(0).max(3)).optional(),
+        }).strict()).min(0).max(3)).optional(),
         "Rejestry": z4.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z4.array(z4.object({
           "PelnaNazwa": TZnakowy5.optional(),
           "KRS": TNrKRS4.optional(),
           "REGON": TNrREGON4.optional(),
           "BDO": z4.string().min(1).max(9).optional()
-        })).min(0).max(100)).optional()
-      }).optional()
-    });
+        }).strict()).min(0).max(100)).optional()
+      }).strict().optional()
+    }).strict();
   }
 });
 
@@ -4025,7 +4642,7 @@ var init_pef3 = __esm({
       "WithholdingTaxTotal": z5.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z5.array(z5.any()).min(0)).optional(),
       "LegalMonetaryTotal": z5.any(),
       "InvoiceLine": z5.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z5.array(z5.any()).min(1))
-    });
+    }).strict();
     PEF3Schema = InvoiceType;
   }
 });
@@ -4092,47 +4709,366 @@ var init_pef_kor3 = __esm({
       "TaxTotal": z6.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z6.array(z6.any()).min(0)).optional(),
       "LegalMonetaryTotal": z6.any(),
       "CreditNoteLine": z6.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], z6.array(z6.any()).min(1))
-    });
+    }).strict();
     PEF_KOR3Schema = CreditNoteType;
   }
 });
 
-// src/builders/batch-file.ts
-import * as crypto4 from "crypto";
-function splitBuffer(data, maxPartSize) {
-  if (data.length <= maxPartSize) {
-    return [data];
-  }
-  const parts = [];
-  for (let offset = 0; offset < data.length; offset += maxPartSize) {
-    parts.push(data.subarray(offset, Math.min(offset + maxPartSize, data.length)));
-  }
-  return parts;
-}
-function sha256Base64(data) {
-  return crypto4.createHash("sha256").update(data).digest("base64");
-}
-var BATCH_MAX_PART_SIZE, BATCH_MAX_TOTAL_SIZE, BATCH_MAX_PARTS, BatchFileBuilder;
-var init_batch_file = __esm({
-  "src/builders/batch-file.ts"() {
+// src/validation/schemas/index.ts
+var SCHEMA_TYPES, NAMESPACE_MAP;
+var init_schemas = __esm({
+  "src/validation/schemas/index.ts"() {
     "use strict";
-    init_ksef_validation_error();
-    BATCH_MAX_PART_SIZE = 1e8;
-    BATCH_MAX_TOTAL_SIZE = 5e9;
-    BATCH_MAX_PARTS = 50;
-    BatchFileBuilder = class {
-      /**
-       * Build batch file metadata and encrypted parts from a raw ZIP.
-       *
-       * @param zipBytes - Unencrypted ZIP data
-       * @param encryptFn - AES-256-CBC encryption function (called per part)
-       * @param options - Optional configuration
-       */
-      static build(zipBytes, encryptFn, options) {
-        const maxPartSize = options?.maxPartSize ?? BATCH_MAX_PART_SIZE;
-        if (maxPartSize <= 0) {
-          throw new KSeFValidationError("maxPartSize must be a positive number");
-        }
+    init_fa3();
+    init_fa2();
+    init_rr1_v11e();
+    init_rr1_v10e();
+    init_pef3();
+    init_pef_kor3();
+    SCHEMA_TYPES = ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
+    NAMESPACE_MAP = {
+      "http://crd.gov.pl/wzor/2025/06/25/13775/": "FA3",
+      "http://crd.gov.pl/wzor/2023/06/29/12648/": "FA2",
+      "http://crd.gov.pl/wzor/2026/03/06/14189/": "RR1_V11E",
+      "http://crd.gov.pl/wzor/2026/02/17/14164/": "RR1_V10E",
+      "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2": "PEF3",
+      "urn:oasis:names:specification:ubl:schema:xsd:CreditNote-2": "PEF_KOR3"
+    };
+  }
+});
+
+// src/validation/schema-registry.ts
+async function loadSchema(type) {
+  const cached = schemaCache.get(type);
+  if (cached) return cached;
+  let mod;
+  switch (type) {
+    case "FA3":
+      mod = await Promise.resolve().then(() => (init_fa3(), fa3_exports));
+      break;
+    case "FA2":
+      mod = await Promise.resolve().then(() => (init_fa2(), fa2_exports));
+      break;
+    case "RR1_V11E":
+      mod = await Promise.resolve().then(() => (init_rr1_v11e(), rr1_v11e_exports));
+      break;
+    case "RR1_V10E":
+      mod = await Promise.resolve().then(() => (init_rr1_v10e(), rr1_v10e_exports));
+      break;
+    case "PEF3":
+      mod = await Promise.resolve().then(() => (init_pef3(), pef3_exports));
+      break;
+    case "PEF_KOR3":
+      mod = await Promise.resolve().then(() => (init_pef_kor3(), pef_kor3_exports));
+      break;
+    default:
+      throw new Error(`Unknown schema type: ${type}`);
+  }
+  const exportName = `${type}Schema`;
+  const schema = mod[exportName];
+  if (!schema) {
+    throw new Error(`Schema export "${exportName}" not found in module for type "${type}"`);
+  }
+  schemaCache.set(type, schema);
+  return schema;
+}
+var ROOT_ELEMENT_MAP, schemaCache, SchemaRegistry;
+var init_schema_registry = __esm({
+  "src/validation/schema-registry.ts"() {
+    "use strict";
+    init_schemas();
+    ROOT_ELEMENT_MAP = {
+      Invoice: "PEF3",
+      CreditNote: "PEF_KOR3"
+    };
+    schemaCache = /* @__PURE__ */ new Map();
+    SchemaRegistry = {
+      /**
+       * Get a Zod schema by type. Lazy-loads the module on first access.
+       */
+      async get(type) {
+        return loadSchema(type);
+      },
+      /**
+       * List all available schema types.
+       */
+      availableSchemas() {
+        return ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
+      },
+      /**
+       * Detect schema type from XML namespace URI and/or root element name.
+       *
+       * Detection priority:
+       * 1. Namespace URI match (unique per FA/RR schemas)
+       * 2. Root element name match (for PEF/PEF_KOR which use UBL namespaces)
+       */
+      detect(namespace, rootElement) {
+        if (namespace) {
+          const byNs = NAMESPACE_MAP[namespace];
+          if (byNs) return byNs;
+        }
+        if (rootElement) {
+          const byRoot = ROOT_ELEMENT_MAP[rootElement];
+          if (byRoot) return byRoot;
+        }
+        return null;
+      }
+    };
+  }
+});
+
+// src/validation/patterns.ts
+function isValidNip(value) {
+  if (!Nip.test(value)) return false;
+  let sum = 0;
+  for (let i = 0; i < 9; i++) {
+    sum += Number(value[i]) * NIP_WEIGHTS[i];
+  }
+  const checksum = sum % 11;
+  return checksum !== 10 && checksum === Number(value[9]);
+}
+function isValidPesel(value) {
+  if (!Pesel.test(value)) return false;
+  let sum = 0;
+  for (let i = 0; i < 10; i++) {
+    sum += Number(value[i]) * PESEL_WEIGHTS[i];
+  }
+  const checksum = (10 - sum % 10) % 10;
+  return checksum === Number(value[10]);
+}
+var NIP_PATTERN_CORE, VAT_UE_PATTERN_CORE, Nip, VatUe, NipVatUe, Pesel, NIP_WEIGHTS, PESEL_WEIGHTS;
+var init_patterns = __esm({
+  "src/validation/patterns.ts"() {
+    "use strict";
+    NIP_PATTERN_CORE = "[1-9]((\\d[1-9])|([1-9]\\d))\\d{7}";
+    VAT_UE_PATTERN_CORE = "(ATU\\d{8}|BE[01]{1}\\d{9}|BG\\d{9,10}|CY\\d{8}[A-Z]|CZ\\d{8,10}|DE\\d{9}|DK\\d{8}|EE\\d{9}|EL\\d{9}|ES([A-Z]\\d{8}|\\d{8}[A-Z]|[A-Z]\\d{7}[A-Z])|FI\\d{8}|FR[A-Z0-9]{2}\\d{9}|HR\\d{11}|HU\\d{8}|IE(\\d{7}[A-Z]{2}|\\d[A-Z0-9+*]\\d{5}[A-Z])|IT\\d{11}|LT(\\d{9}|\\d{12})|LU\\d{8}|LV\\d{11}|MT\\d{8}|NL[A-Z0-9+*]{12}|PT\\d{9}|RO\\d{2,10}|SE\\d{12}|SI\\d{8}|SK\\d{10}|XI((\\d{9}|\\d{12})|(GD|HA)\\d{3}))";
+    Nip = new RegExp(`^${NIP_PATTERN_CORE}$`);
+    VatUe = new RegExp(`^${VAT_UE_PATTERN_CORE}$`);
+    NipVatUe = new RegExp(`^${NIP_PATTERN_CORE}-${VAT_UE_PATTERN_CORE}$`);
+    Pesel = /^\d{2}(?:0[1-9]|1[0-2]|2[1-9]|3[0-2]|4[1-9]|5[0-2]|6[1-9]|7[0-2]|8[1-9]|9[0-2])\d{7}$/;
+    NIP_WEIGHTS = [6, 5, 7, 2, 3, 4, 5, 6, 7];
+    PESEL_WEIGHTS = [1, 3, 7, 9, 1, 3, 7, 9, 1, 3];
+  }
+});
+
+// src/validation/invoice-validator.ts
+var invoice_validator_exports = {};
+__export(invoice_validator_exports, {
+  batchValidationDetails: () => batchValidationDetails,
+  validate: () => validate,
+  validateBatch: () => validateBatch,
+  validateBusinessRules: () => validateBusinessRules,
+  validateSchema: () => validateSchema,
+  validateWellFormedness: () => validateWellFormedness
+});
+function validateWellFormedness(xml, _parsed) {
+  if (!xml || !xml.trim()) {
+    return {
+      valid: false,
+      schemaType: null,
+      errors: [{ code: "MALFORMED_XML", message: "Empty XML input" }]
+    };
+  }
+  const { object, rootElement, namespace, errors } = _parsed ?? xmlToObject(xml);
+  if (errors.length > 0 || !object) {
+    return {
+      valid: false,
+      schemaType: null,
+      errors: errors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
+    };
+  }
+  const schemaType = SchemaRegistry.detect(namespace, rootElement);
+  return { valid: true, schemaType, errors: [] };
+}
+async function validateSchema(xml, options, _parsed) {
+  const { object, rootElement, namespace, errors: parseErrors } = _parsed ?? xmlToObject(xml);
+  if (parseErrors.length > 0 || !object) {
+    return {
+      valid: false,
+      schemaType: null,
+      errors: parseErrors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
+    };
+  }
+  const schemaType = options?.schema ?? SchemaRegistry.detect(namespace, rootElement);
+  if (!schemaType) {
+    return {
+      valid: false,
+      schemaType: null,
+      errors: [{
+        code: "UNKNOWN_SCHEMA",
+        message: `Cannot detect schema type from namespace "${namespace}" and root element "${rootElement}"`
+      }]
+    };
+  }
+  const schema = await SchemaRegistry.get(schemaType);
+  const result = schema.safeParse(object);
+  if (result.success) {
+    return { valid: true, schemaType, errors: [] };
+  }
+  const prefix = rootElement ? `/${rootElement}/` : "/";
+  const validationErrors = result.error.issues.map((issue) => {
+    const zodPath = issue.path.join("/");
+    const path10 = zodPath ? `${prefix}${zodPath}` : rootElement ? `/${rootElement}` : void 0;
+    return {
+      code: mapZodErrorCode(issue),
+      message: issue.message,
+      path: path10
+    };
+  });
+  return { valid: false, schemaType, errors: validationErrors };
+}
+function mapZodErrorCode(issue) {
+  switch (issue.code) {
+    case "invalid_type":
+      return issue.input === void 0 ? "MISSING_REQUIRED_ELEMENT" : "INVALID_VALUE";
+    case "invalid_enum_value":
+    // Zod v3
+    case "invalid_value":
+      return "INVALID_ENUM_VALUE";
+    case "invalid_string":
+    // Zod v3
+    case "invalid_format":
+      return "PATTERN_MISMATCH";
+    case "too_big":
+      return "MAX_OCCURS_EXCEEDED";
+    case "unrecognized_keys":
+      return "UNRECOGNIZED_KEY";
+    default:
+      return "SCHEMA_VALIDATION_ERROR";
+  }
+}
+function validateBusinessRules(xml, _parsed) {
+  const { object, rootElement, namespace, errors: parseErrors } = _parsed ?? xmlToObject(xml);
+  if (parseErrors.length > 0 || !object) {
+    return {
+      valid: false,
+      schemaType: null,
+      errors: parseErrors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
+    };
+  }
+  const schemaType = SchemaRegistry.detect(namespace, rootElement);
+  const errors = [];
+  collectNipPeselErrors(object, rootElement ? `/${rootElement}` : "", errors);
+  collectDateErrors(object, rootElement, errors);
+  return { valid: errors.length === 0, schemaType, errors };
+}
+function collectNipPeselErrors(obj, path10, errors) {
+  for (const [key, value] of Object.entries(obj)) {
+    const currentPath = path10 ? `${path10}/${key}` : key;
+    if (key === "NIP" && typeof value === "string") {
+      if (!isValidNip(value)) {
+        errors.push({
+          code: "INVALID_NIP_CHECKSUM",
+          message: `Invalid NIP checksum: ${value}`,
+          path: currentPath
+        });
+      }
+    } else if (key === "PESEL" && typeof value === "string") {
+      if (!isValidPesel(value)) {
+        errors.push({
+          code: "INVALID_PESEL_CHECKSUM",
+          message: `Invalid PESEL checksum: ${value}`,
+          path: currentPath
+        });
+      }
+    } else if (typeof value === "object" && value !== null) {
+      if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++) {
+          if (typeof value[i] === "object" && value[i] !== null) {
+            collectNipPeselErrors(value[i], `${currentPath}/${i}`, errors);
+          }
+        }
+      } else {
+        collectNipPeselErrors(value, currentPath, errors);
+      }
+    }
+  }
+}
+function getPolandLocalDate() {
+  return new Intl.DateTimeFormat("sv-SE", { timeZone: "Europe/Warsaw" }).format(Date.now());
+}
+function collectDateErrors(obj, rootElement, errors) {
+  const fa = obj["Fa"];
+  if (!fa || typeof fa !== "object") return;
+  const p1 = fa["P_1"];
+  if (typeof p1 !== "string") return;
+  const today = getPolandLocalDate();
+  if (p1 > today) {
+    const prefix = rootElement ? `/${rootElement}` : "";
+    errors.push({
+      code: "FUTURE_INVOICE_DATE",
+      message: `Invoice date P_1 (${p1}) is in the future \u2014 KSeF rejects invoices with P_1 > today (${today})`,
+      path: `${prefix}/Fa/P_1`
+    });
+  }
+}
+async function validate(xml, options) {
+  const parsed = xml && xml.trim() ? xmlToObject(xml) : void 0;
+  const l1 = validateWellFormedness(xml, parsed);
+  if (!l1.valid) return l1;
+  const l2 = await validateSchema(xml, options, parsed);
+  if (!l2.valid) return l2;
+  const l3 = validateBusinessRules(xml, parsed);
+  return { ...l3, schemaType: l2.schemaType };
+}
+async function validateBatch(invoices2, options) {
+  const results = [];
+  for (const { fileName, xml } of invoices2) {
+    results.push({ fileName, result: await validate(xml, options) });
+  }
+  return { valid: results.every((r) => r.result.valid), results };
+}
+function batchValidationDetails(batch) {
+  return batch.results.filter((r) => !r.result.valid).flatMap((r) => r.result.errors.map((e) => ({
+    field: e.path ? `${r.fileName}:${e.path}` : r.fileName,
+    message: e.message
+  })));
+}
+var init_invoice_validator = __esm({
+  "src/validation/invoice-validator.ts"() {
+    "use strict";
+    init_xml_to_object();
+    init_schema_registry();
+    init_patterns();
+  }
+});
+
+// src/builders/batch-file.ts
+import * as crypto5 from "crypto";
+function splitBuffer(data, maxPartSize) {
+  if (data.length <= maxPartSize) {
+    return [data];
+  }
+  const parts = [];
+  for (let offset = 0; offset < data.length; offset += maxPartSize) {
+    parts.push(data.subarray(offset, Math.min(offset + maxPartSize, data.length)));
+  }
+  return parts;
+}
+function sha256Base64(data) {
+  return crypto5.createHash("sha256").update(data).digest("base64");
+}
+var BATCH_MAX_PART_SIZE, BATCH_MAX_TOTAL_SIZE, BATCH_MAX_PARTS, BatchFileBuilder;
+var init_batch_file = __esm({
+  "src/builders/batch-file.ts"() {
+    "use strict";
+    init_ksef_validation_error();
+    BATCH_MAX_PART_SIZE = 1e8;
+    BATCH_MAX_TOTAL_SIZE = 5e9;
+    BATCH_MAX_PARTS = 50;
+    BatchFileBuilder = class {
+      /**
+       * Build batch file metadata and encrypted parts from a raw ZIP.
+       *
+       * @param zipBytes - Unencrypted ZIP data
+       * @param encryptFn - AES-256-CBC encryption function (called per part)
+       * @param options - Optional configuration
+       */
+      static build(zipBytes, encryptFn, options) {
+        const maxPartSize = options?.maxPartSize ?? BATCH_MAX_PART_SIZE;
+        if (maxPartSize <= 0) {
+          throw new KSeFValidationError("maxPartSize must be a positive number");
+        }
         if (zipBytes.length === 0) {
           throw new KSeFValidationError("ZIP data must not be empty");
         }
@@ -4283,6 +5219,24 @@ __export(batch_session_workflow_exports, {
 });
 async function uploadBatch(client, zipData, options) {
   await client.crypto.init();
+  if (options?.validate) {
+    const { unzip: unzip2 } = await Promise.resolve().then(() => (init_zip(), zip_exports));
+    const { validateBatch: validateBatch2, batchValidationDetails: batchValidationDetails2 } = await Promise.resolve().then(() => (init_invoice_validator(), invoice_validator_exports));
+    const { KSeFValidationError: KSeFValidationError2 } = await Promise.resolve().then(() => (init_ksef_validation_error(), ksef_validation_error_exports));
+    const zipBuf = Buffer.isBuffer(zipData) ? zipData : Buffer.from(zipData.buffer, zipData.byteOffset, zipData.byteLength);
+    const files = await unzip2(zipBuf);
+    const invoices2 = [...files.entries()].filter(([name]) => name.endsWith(".xml")).map(([name, data]) => ({ fileName: name, xml: data.toString("utf-8") }));
+    if (invoices2.length > 0) {
+      const result2 = await validateBatch2(invoices2);
+      if (!result2.valid) {
+        const invalidCount = result2.results.filter((r) => !r.result.valid).length;
+        throw new KSeFValidationError2(
+          `Batch validation failed: ${invalidCount} of ${invoices2.length} invoices invalid`,
+          batchValidationDetails2(result2)
+        );
+      }
+    }
+  }
   const encData = client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
   const encryptFn = (part) => client.crypto.encryptAES256(part, encData.cipherKey, encData.cipherIv);
@@ -4403,10 +5357,10 @@ var init_batch_session_workflow = __esm({
 });
 
 // src/cli/index.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 import { fileURLToPath } from "url";
 import { dirname as dirname2, resolve } from "path";
-import { defineCommand as defineCommand17, runMain } from "citty";
+import { defineCommand as defineCommand18, runMain } from "citty";
 
 // src/cli/commands/config.ts
 import { defineCommand } from "citty";
@@ -4558,6 +5512,7 @@ init_ksef_rate_limit_error();
 init_ksef_unauthorized_error();
 init_ksef_forbidden_error();
 init_ksef_api_error();
+init_ksef_validation_error();
 import { consola as consola2 } from "consola";
 async function withErrorHandler(fn) {
   try {
@@ -4581,6 +5536,13 @@ async function withErrorHandler(fn) {
       consola2.info("Hint: Check your permissions for this operation.");
       process.exit(1);
     }
+    if (error instanceof KSeFValidationError) {
+      consola2.error(error.message);
+      for (const detail of error.details) {
+        consola2.error(`  ${detail.field ? `[${detail.field}] ` : ""}${detail.message}`);
+      }
+      process.exit(1);
+    }
     if (error instanceof KSeFApiError) {
       consola2.error(`KSeF API error (HTTP ${error.statusCode}): ${error.message}`);
       if (error.errorResponse?.exception?.exceptionDetailList) {
@@ -4964,13 +5926,13 @@ var login = defineCommand2({
       if (token) {
         await client.loginWithToken(token, nip);
       } else if (args.p12) {
-        const fs13 = await import("fs");
-        const p12Buffer = fs13.readFileSync(args.p12);
+        const fs15 = await import("fs");
+        const p12Buffer = fs15.readFileSync(args.p12);
         await client.loginWithPkcs12(p12Buffer, args["p12-password"] ?? "", nip);
       } else if (args.cert && args.key) {
-        const fs13 = await import("fs");
-        const certPem = fs13.readFileSync(args.cert, "utf-8");
-        const keyPem = fs13.readFileSync(args.key, "utf-8");
+        const fs15 = await import("fs");
+        const certPem = fs15.readFileSync(args.cert, "utf-8");
+        const keyPem = fs15.readFileSync(args.key, "utf-8");
         await client.loginWithCertificate(certPem, keyPem, nip, args["key-password"]);
       } else {
         throw new Error("Provide --token, --p12, or both --cert and --key for authentication.");
@@ -5306,227 +6268,23 @@ var status2 = defineCommand3({
       if (args.json) {
         outputResult(result, { json: true });
       } else {
-        outputKeyValue({
-          "Status": `${result.status.code} \u2014 ${result.status.description}`,
-          "Created": result.dateCreated,
-          "Updated": result.dateUpdated,
-          "Valid Until": result.validUntil ?? "N/A",
-          "Invoices": result.invoiceCount ?? 0,
-          "Successful": result.successfulInvoiceCount ?? 0,
-          "Failed": result.failedInvoiceCount ?? 0
-        }, { json: false });
-      }
-    });
-  }
-});
-var list = defineCommand3({
-  meta: { name: "list", description: "List sessions" },
-  args: {
-    type: { type: "string", description: "Session type: online or batch (default: online)" },
-    pageSize: { type: "string", description: "Number of results per page" },
-    env: { type: "string", description: "Environment (test/demo/prod)" },
-    json: { type: "boolean", description: "Output as JSON" },
-    verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" }
-  },
-  run({ args }) {
-    return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts2(args);
-      const { client } = await requireSession(globalOpts);
-      const sessionType = args.type === "batch" ? "Batch" : "Online";
-      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
-      const result = await client.sessionStatus.getSessions(sessionType, pageSize);
-      if (args.json) {
-        outputResult(result, { json: true });
-        return;
-      }
-      if (result.sessions.length === 0) {
-        outputWarning("No sessions found.");
-        return;
-      }
-      outputTable(
-        result.sessions.map((s) => ({
-          reference: s.referenceNumber,
-          status: `${s.status.code} \u2014 ${s.status.description}`,
-          created: s.dateCreated,
-          total: s.totalInvoiceCount,
-          success: s.successfulInvoiceCount,
-          failed: s.failedInvoiceCount
-        })),
-        [
-          { key: "reference", label: "Reference" },
-          { key: "status", label: "Status" },
-          { key: "created", label: "Created" },
-          { key: "total", label: "Total" },
-          { key: "success", label: "Success" },
-          { key: "failed", label: "Failed" }
-        ],
-        { json: false }
-      );
-      if (result.continuationToken) {
-        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
-      }
-    });
-  }
-});
-var invoices = defineCommand3({
-  meta: { name: "invoices", description: "List invoices in a session" },
-  args: {
-    ref: { type: "positional", description: "Session reference (uses stored ref if omitted)", required: false },
-    pageSize: { type: "string", description: "Number of results per page" },
-    env: { type: "string", description: "Environment (test/demo/prod)" },
-    json: { type: "boolean", description: "Output as JSON" },
-    verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" }
-  },
-  run({ args }) {
-    return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts2(args);
-      const { client, session } = await requireSession(globalOpts);
-      const ref = args.ref ?? session.onlineSessionRef;
-      if (!ref) {
-        throw new Error("No session reference. Provide a ref or run `ksef session open` first.");
-      }
-      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
-      const result = await client.sessionStatus.getSessionInvoices(ref, pageSize);
-      if (args.json) {
-        outputResult(result, { json: true });
-        return;
-      }
-      if (result.invoices.length === 0) {
-        outputWarning("No invoices found.");
-        return;
-      }
-      outputTable(
-        result.invoices.map((inv) => ({
-          ordinal: inv.ordinalNumber,
-          invoiceNumber: inv.invoiceNumber ?? "N/A",
-          ksefNumber: inv.ksefNumber ?? "N/A",
-          status: `${inv.status.code} \u2014 ${inv.status.description}`,
-          date: inv.invoicingDate
-        })),
-        [
-          { key: "ordinal", label: "#" },
-          { key: "invoiceNumber", label: "Invoice Number" },
-          { key: "ksefNumber", label: "KSeF Number" },
-          { key: "status", label: "Status" },
-          { key: "date", label: "Date" }
-        ],
-        { json: false }
-      );
-      if (result.continuationToken) {
-        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
-      }
-    });
-  }
-});
-var failed = defineCommand3({
-  meta: { name: "failed", description: "List failed invoices in a session" },
-  args: {
-    ref: { type: "positional", description: "Session reference (uses stored ref if omitted)", required: false },
-    pageSize: { type: "string", description: "Number of results per page" },
-    env: { type: "string", description: "Environment (test/demo/prod)" },
-    json: { type: "boolean", description: "Output as JSON" },
-    verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" }
-  },
-  run({ args }) {
-    return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts2(args);
-      const { client, session } = await requireSession(globalOpts);
-      const ref = args.ref ?? session.onlineSessionRef;
-      if (!ref) {
-        throw new Error("No session reference. Provide a ref or run `ksef session open` first.");
-      }
-      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
-      const result = await client.sessionStatus.getSessionFailedInvoices(ref, pageSize);
-      if (args.json) {
-        outputResult(result, { json: true });
-        return;
-      }
-      if (result.invoices.length === 0) {
-        outputSuccess("No failed invoices.");
-        return;
-      }
-      outputTable(
-        result.invoices.map((inv) => ({
-          ordinal: inv.ordinalNumber,
-          invoiceNumber: inv.invoiceNumber ?? "N/A",
-          status: `${inv.status.code} \u2014 ${inv.status.description}`,
-          details: inv.status.details?.join("; ") ?? "",
-          date: inv.invoicingDate
-        })),
-        [
-          { key: "ordinal", label: "#" },
-          { key: "invoiceNumber", label: "Invoice Number" },
-          { key: "status", label: "Status" },
-          { key: "details", label: "Details" },
-          { key: "date", label: "Date" }
-        ],
-        { json: false }
-      );
-      if (result.continuationToken) {
-        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
-      }
-    });
-  }
-});
-var upo = defineCommand3({
-  meta: { name: "upo", description: "Download UPO (official receipt)" },
-  args: {
-    sessionRef: { type: "positional", description: "Session reference", required: true },
-    upoRef: { type: "string", description: "UPO reference" },
-    ksefNumber: { type: "string", description: "KSeF invoice number" },
-    invoiceRef: { type: "string", description: "Invoice reference" },
-    parsed: { type: "boolean", description: "Parse UPO XML and output as JSON" },
-    o: { type: "string", description: "Output file path" },
-    env: { type: "string", description: "Environment (test/demo/prod)" },
-    json: { type: "boolean", description: "Output as JSON" },
-    verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" }
-  },
-  run({ args }) {
-    return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts2(args);
-      const { client } = await requireSession(globalOpts);
-      const sessionRef = args.sessionRef;
-      let result;
-      if (args.upoRef) {
-        result = await client.sessionStatus.getSessionUpo(sessionRef, args.upoRef);
-      } else if (args.ksefNumber) {
-        result = await client.sessionStatus.getInvoiceUpoByKsefNumber(sessionRef, args.ksefNumber);
-      } else if (args.invoiceRef) {
-        result = await client.sessionStatus.getInvoiceUpoByReference(sessionRef, args.invoiceRef);
-      } else {
-        throw new Error("Provide one of: --upo-ref, --ksef-number, or --invoice-ref");
-      }
-      if (args.parsed) {
-        const parsed = parseUpoXml(result.upo);
-        const json = JSON.stringify(parsed, null, 2);
-        if (args.o) {
-          fs6.writeFileSync(args.o, json, "utf-8");
-          outputSuccess(`Parsed UPO saved to ${args.o}`);
-        } else {
-          console.log(json);
-        }
-        return;
-      }
-      if (args.json) {
-        outputResult(result, { json: true });
-        return;
-      }
-      if (args.o) {
-        fs6.writeFileSync(args.o, result.upo, "utf-8");
-        outputSuccess(`UPO saved to ${args.o}`);
-      } else {
-        console.log(result.upo);
+        outputKeyValue({
+          "Status": `${result.status.code} \u2014 ${result.status.description}`,
+          "Created": result.dateCreated,
+          "Updated": result.dateUpdated,
+          "Valid Until": result.validUntil ?? "N/A",
+          "Invoices": result.invoiceCount ?? 0,
+          "Successful": result.successfulInvoiceCount ?? 0,
+          "Failed": result.failedInvoiceCount ?? 0
+        }, { json: false });
       }
     });
   }
 });
-var active = defineCommand3({
-  meta: { name: "active", description: "List active authentication sessions" },
+var list = defineCommand3({
+  meta: { name: "list", description: "List sessions" },
   args: {
+    type: { type: "string", description: "Session type: online or batch (default: online)" },
     pageSize: { type: "string", description: "Number of results per page" },
     env: { type: "string", description: "Environment (test/demo/prod)" },
     json: { type: "boolean", description: "Output as JSON" },
@@ -5537,30 +6295,33 @@ var active = defineCommand3({
     return withErrorHandler(async () => {
       const globalOpts = getGlobalOpts2(args);
       const { client } = await requireSession(globalOpts);
+      const sessionType = args.type === "batch" ? "Batch" : "Online";
       const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
-      const result = await client.activeSessions.getActiveSessions(pageSize);
+      const result = await client.sessionStatus.getSessions(sessionType, pageSize);
       if (args.json) {
         outputResult(result, { json: true });
         return;
       }
-      if (result.items.length === 0) {
-        outputWarning("No active sessions found.");
+      if (result.sessions.length === 0) {
+        outputWarning("No sessions found.");
         return;
       }
       outputTable(
-        result.items.map((s) => ({
+        result.sessions.map((s) => ({
           reference: s.referenceNumber,
-          startDate: s.startDate,
-          authMethod: s.authenticationMethodInfo?.category ?? "N/A",
           status: `${s.status.code} \u2014 ${s.status.description}`,
-          isCurrent: s.isCurrent ? "Yes" : "No"
+          created: s.dateCreated,
+          total: s.totalInvoiceCount,
+          success: s.successfulInvoiceCount,
+          failed: s.failedInvoiceCount
         })),
         [
           { key: "reference", label: "Reference" },
-          { key: "startDate", label: "Start Date" },
-          { key: "authMethod", label: "Auth Method" },
           { key: "status", label: "Status" },
-          { key: "isCurrent", label: "Current" }
+          { key: "created", label: "Created" },
+          { key: "total", label: "Total" },
+          { key: "success", label: "Success" },
+          { key: "failed", label: "Failed" }
         ],
         { json: false }
       );
@@ -5570,45 +6331,11 @@ var active = defineCommand3({
     });
   }
 });
-var revoke = defineCommand3({
-  meta: { name: "revoke", description: "Revoke an active authentication session" },
-  args: {
-    ref: { type: "positional", description: "Session reference to revoke", required: false },
-    current: { type: "boolean", description: "Revoke the current session" },
-    env: { type: "string", description: "Environment (test/demo/prod)" },
-    json: { type: "boolean", description: "Output as JSON" },
-    verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" }
-  },
-  run({ args }) {
-    return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts2(args);
-      const { client } = await requireSession(globalOpts);
-      if (args.current) {
-        await client.activeSessions.revokeCurrentSession();
-        if (args.json) {
-          outputResult({ status: "revoked", reference: "current" }, { json: true });
-        } else {
-          outputSuccess("Current session revoked.");
-        }
-      } else if (args.ref) {
-        await client.activeSessions.revokeSession(args.ref);
-        if (args.json) {
-          outputResult({ status: "revoked", reference: args.ref }, { json: true });
-        } else {
-          outputSuccess(`Session ${args.ref} revoked.`);
-        }
-      } else {
-        throw new Error("Provide a session reference or use --current to revoke the current session.");
-      }
-    });
-  }
-});
-var invoice = defineCommand3({
-  meta: { name: "invoice", description: "Get single invoice status in a session" },
+var invoices = defineCommand3({
+  meta: { name: "invoices", description: "List invoices in a session" },
   args: {
-    invoiceRef: { type: "positional", description: "Invoice reference number", required: true },
-    ref: { type: "string", description: "Session reference (uses stored ref if omitted)" },
+    ref: { type: "positional", description: "Session reference (uses stored ref if omitted)", required: false },
+    pageSize: { type: "string", description: "Number of results per page" },
     env: { type: "string", description: "Environment (test/demo/prod)" },
     json: { type: "boolean", description: "Output as JSON" },
     verbose: { type: "boolean", description: "Show HTTP request/response details" },
@@ -5618,664 +6345,543 @@ var invoice = defineCommand3({
     return withErrorHandler(async () => {
       const globalOpts = getGlobalOpts2(args);
       const { client, session } = await requireSession(globalOpts);
-      const sessionRef = args.ref ?? session.onlineSessionRef;
-      if (!sessionRef) {
-        throw new Error("No session reference. Provide --ref or run `ksef session open` first.");
+      const ref = args.ref ?? session.onlineSessionRef;
+      if (!ref) {
+        throw new Error("No session reference. Provide a ref or run `ksef session open` first.");
       }
-      const result = await client.sessionStatus.getSessionInvoice(sessionRef, args.invoiceRef);
+      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
+      const result = await client.sessionStatus.getSessionInvoices(ref, pageSize);
       if (args.json) {
         outputResult(result, { json: true });
-      } else {
-        outputKeyValue({
-          "Ordinal": result.ordinalNumber,
-          "Invoice Number": result.invoiceNumber ?? "N/A",
-          "KSeF Number": result.ksefNumber ?? "N/A",
-          "Reference": result.referenceNumber,
-          "Hash": result.invoiceHash,
-          "Status": `${result.status.code} \u2014 ${result.status.description}`,
-          "Invoicing Date": result.invoicingDate,
-          "Invoicing Mode": result.invoicingMode ?? "N/A"
-        }, { json: false });
-      }
-    });
-  }
-});
-var sessionCommand = defineCommand3({
-  meta: { name: "session", description: "Session management commands" },
-  subCommands: { open, close, status: status2, list, invoices, failed, upo, active, revoke, invoice }
-});
-
-// src/cli/commands/invoice.ts
-import * as fs9 from "fs";
-import * as path6 from "path";
-import { Readable } from "stream";
-import { defineCommand as defineCommand5 } from "citty";
-import { consola as consola9 } from "consola";
-init_document_structures();
-
-// src/cli/commands/export-incremental.ts
-import * as fs8 from "fs";
-import * as path5 from "path";
-import { defineCommand as defineCommand4 } from "citty";
-import { consola as consola8 } from "consola";
-
-// src/workflows/hwm-storage.ts
-import * as fs7 from "fs/promises";
-var FileHwmStore = class {
-  constructor(filePath) {
-    this.filePath = filePath;
-  }
-  async load() {
-    try {
-      const data = await fs7.readFile(this.filePath, "utf-8");
-      return JSON.parse(data);
-    } catch (err) {
-      if (err.code === "ENOENT") {
-        return {};
+        return;
       }
-      throw err;
-    }
-  }
-  async save(points) {
-    await fs7.writeFile(this.filePath, JSON.stringify(points, null, 2), "utf-8");
-  }
-};
-
-// src/utils/zip.ts
-import { ZipFile } from "yazl";
-import { fromBuffer } from "yauzl";
-
-// src/workflows/invoice-export-workflow.ts
-init_polling();
-async function doExport(client, filters, options) {
-  await client.crypto.init();
-  const encData = client.crypto.getEncryptionData();
-  const opResp = await client.invoices.exportInvoices({
-    encryption: encData.encryptionInfo,
-    filters,
-    onlyMetadata: options?.onlyMetadata
-  });
-  const result = await pollUntil(
-    () => client.invoices.getInvoiceExportStatus(opResp.referenceNumber),
-    (s) => s.status.code === 200 || s.status.code >= 400,
-    { ...options?.pollOptions, description: `export ${opResp.referenceNumber}` }
-  );
-  if (result.status.code !== 200) {
-    throw new Error(`Export failed: ${result.status.code} \u2014 ${result.status.description}`);
-  }
-  if (!result.package) {
-    throw new Error("Export completed but no package available");
-  }
-  return {
-    encData,
-    referenceNumber: opResp.referenceNumber,
-    result: {
-      parts: result.package.parts.map((p) => ({
-        ordinalNumber: p.ordinalNumber,
-        url: p.url,
-        method: p.method,
-        partSize: p.partSize,
-        encryptedPartSize: p.encryptedPartSize,
-        encryptedPartHash: p.encryptedPartHash,
-        expirationDate: p.expirationDate
-      })),
-      invoiceCount: result.package.invoiceCount,
-      isTruncated: result.package.isTruncated,
-      permanentStorageHwmDate: result.package.permanentStorageHwmDate,
-      lastPermanentStorageDate: result.package.lastPermanentStorageDate
-    }
-  };
-}
-
-// src/workflows/hwm-coordinator.ts
-function updateContinuationPoint(points, subjectType, pkg2) {
-  if (pkg2.isTruncated && pkg2.lastPermanentStorageDate) {
-    points[subjectType] = pkg2.lastPermanentStorageDate;
-  } else if (pkg2.permanentStorageHwmDate) {
-    points[subjectType] = pkg2.permanentStorageHwmDate;
-  } else {
-    delete points[subjectType];
-  }
-}
-function getEffectiveStartDate(points, subjectType, windowFrom) {
-  return points[subjectType] ?? windowFrom;
-}
-
-// src/workflows/incremental-export-workflow.ts
-async function incrementalExportAndDownload(client, options) {
-  const maxIterations = options.maxIterations ?? 20;
-  const points = options.continuationPoints;
-  if (options.store) {
-    const loaded = await options.store.load();
-    for (const [key, value] of Object.entries(loaded)) {
-      if (value !== void 0 && points[key] === void 0) {
-        points[key] = value;
+      if (result.invoices.length === 0) {
+        outputWarning("No invoices found.");
+        return;
+      }
+      outputTable(
+        result.invoices.map((inv) => ({
+          ordinal: inv.ordinalNumber,
+          invoiceNumber: inv.invoiceNumber ?? "N/A",
+          ksefNumber: inv.ksefNumber ?? "N/A",
+          status: `${inv.status.code} \u2014 ${inv.status.description}`,
+          date: inv.invoicingDate
+        })),
+        [
+          { key: "ordinal", label: "#" },
+          { key: "invoiceNumber", label: "Invoice Number" },
+          { key: "ksefNumber", label: "KSeF Number" },
+          { key: "status", label: "Status" },
+          { key: "date", label: "Date" }
+        ],
+        { json: false }
+      );
+      if (result.continuationToken) {
+        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
       }
-    }
-  }
-  const referenceNumbers = [];
-  const decryptedParts = [];
-  let previousFrom;
-  let iteration = 0;
-  for (; iteration < maxIterations; iteration++) {
-    const effectiveFrom = getEffectiveStartDate(points, options.subjectType, options.windowFrom);
-    if (previousFrom !== void 0 && effectiveFrom === previousFrom) {
-      break;
-    }
-    previousFrom = effectiveFrom;
-    const filters = options.filtersFactory ? options.filtersFactory(effectiveFrom, options.windowTo) : buildDefaultFilters(options.subjectType, effectiveFrom, options.windowTo);
-    const { result, encData, referenceNumber } = await doExport(client, filters, {
-      onlyMetadata: options.onlyMetadata,
-      pollOptions: options.pollOptions
     });
-    referenceNumbers.push(referenceNumber);
-    const download = options.transport ?? fetch;
-    for (const part of result.parts) {
-      const resp = await download(part.url, { method: part.method });
-      if (!resp.ok) {
-        throw new Error(`Download failed for part ${part.ordinalNumber}: HTTP ${resp.status}`);
+  }
+});
+var failed = defineCommand3({
+  meta: { name: "failed", description: "List failed invoices in a session" },
+  args: {
+    ref: { type: "positional", description: "Session reference (uses stored ref if omitted)", required: false },
+    pageSize: { type: "string", description: "Number of results per page" },
+    env: { type: "string", description: "Environment (test/demo/prod)" },
+    json: { type: "boolean", description: "Output as JSON" },
+    verbose: { type: "boolean", description: "Show HTTP request/response details" },
+    timeout: { type: "string", description: "Request timeout (ms)" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts2(args);
+      const { client, session } = await requireSession(globalOpts);
+      const ref = args.ref ?? session.onlineSessionRef;
+      if (!ref) {
+        throw new Error("No session reference. Provide a ref or run `ksef session open` first.");
+      }
+      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
+      const result = await client.sessionStatus.getSessionFailedInvoices(ref, pageSize);
+      if (args.json) {
+        outputResult(result, { json: true });
+        return;
+      }
+      if (result.invoices.length === 0) {
+        outputSuccess("No failed invoices.");
+        return;
+      }
+      outputTable(
+        result.invoices.map((inv) => ({
+          ordinal: inv.ordinalNumber,
+          invoiceNumber: inv.invoiceNumber ?? "N/A",
+          status: `${inv.status.code} \u2014 ${inv.status.description}`,
+          details: inv.status.details?.join("; ") ?? "",
+          date: inv.invoicingDate
+        })),
+        [
+          { key: "ordinal", label: "#" },
+          { key: "invoiceNumber", label: "Invoice Number" },
+          { key: "status", label: "Status" },
+          { key: "details", label: "Details" },
+          { key: "date", label: "Date" }
+        ],
+        { json: false }
+      );
+      if (result.continuationToken) {
+        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
       }
-      const encryptedData = new Uint8Array(await resp.arrayBuffer());
-      const decrypted = client.crypto.decryptAES256(encryptedData, encData.cipherKey, encData.cipherIv);
-      decryptedParts.push(decrypted);
-    }
-    updateContinuationPoint(points, options.subjectType, {
-      isTruncated: result.isTruncated,
-      lastPermanentStorageDate: result.lastPermanentStorageDate,
-      permanentStorageHwmDate: result.permanentStorageHwmDate
     });
-    if (options.store) {
-      await options.store.save(points);
-    }
-    options.onIterationComplete?.(iteration, result);
-    if (!result.isTruncated) {
-      iteration++;
-      break;
-    }
   }
-  return {
-    referenceNumbers,
-    invoices: [],
-    decryptedParts,
-    continuationPoints: points,
-    iterationCount: iteration
-  };
-}
-function buildDefaultFilters(subjectType, from, to) {
-  return {
-    subjectType,
-    dateRange: {
-      dateType: "PermanentStorage",
-      from,
-      to
-    }
-  };
-}
-
-// src/cli/date-utils.ts
-var DATE_ONLY_RE = /^\d{4}-\d{2}-\d{2}$/;
-function normalizeCliDate(date, position) {
-  if (!DATE_ONLY_RE.test(date)) return date;
-  if (isNaN(new Date(date).getTime())) {
-    throw new Error(`Invalid date: "${date}". Expected a valid YYYY-MM-DD date.`);
+});
+var upo = defineCommand3({
+  meta: { name: "upo", description: "Download UPO (official receipt)" },
+  args: {
+    sessionRef: { type: "positional", description: "Session reference", required: true },
+    upoRef: { type: "string", description: "UPO reference" },
+    ksefNumber: { type: "string", description: "KSeF invoice number" },
+    invoiceRef: { type: "string", description: "Invoice reference" },
+    parsed: { type: "boolean", description: "Parse UPO XML and output as JSON" },
+    o: { type: "string", description: "Output file path" },
+    env: { type: "string", description: "Environment (test/demo/prod)" },
+    json: { type: "boolean", description: "Output as JSON" },
+    verbose: { type: "boolean", description: "Show HTTP request/response details" },
+    timeout: { type: "string", description: "Request timeout (ms)" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts2(args);
+      const { client } = await requireSession(globalOpts);
+      const sessionRef = args.sessionRef;
+      let result;
+      if (args.upoRef) {
+        result = await client.sessionStatus.getSessionUpo(sessionRef, args.upoRef);
+      } else if (args.ksefNumber) {
+        result = await client.sessionStatus.getInvoiceUpoByKsefNumber(sessionRef, args.ksefNumber);
+      } else if (args.invoiceRef) {
+        result = await client.sessionStatus.getInvoiceUpoByReference(sessionRef, args.invoiceRef);
+      } else {
+        throw new Error("Provide one of: --upo-ref, --ksef-number, or --invoice-ref");
+      }
+      if (args.parsed) {
+        const parsed = parseUpoXml(result.upo);
+        const json = JSON.stringify(parsed, null, 2);
+        if (args.o) {
+          fs6.writeFileSync(args.o, json, "utf-8");
+          outputSuccess(`Parsed UPO saved to ${args.o}`);
+        } else {
+          console.log(json);
+        }
+        return;
+      }
+      if (args.json) {
+        outputResult(result, { json: true });
+        return;
+      }
+      if (args.o) {
+        fs6.writeFileSync(args.o, result.upo, "utf-8");
+        outputSuccess(`UPO saved to ${args.o}`);
+      } else {
+        console.log(result.upo);
+      }
+    });
   }
-  return position === "from" ? `${date}T00:00:00+00:00` : `${date}T23:59:59.999+00:00`;
-}
-
-// src/cli/commands/export-incremental.ts
-function getGlobalOpts3(args) {
-  return {
-    env: args.env,
-    json: args.json,
-    verbose: args.verbose,
-    timeout: args.timeout,
-    nip: args.nip
-  };
-}
-var exportIncremental = defineCommand4({
-  meta: { name: "export-incremental", description: "Incremental invoice export with HWM state persistence" },
+});
+var active = defineCommand3({
+  meta: { name: "active", description: "List active authentication sessions" },
   args: {
-    from: { type: "string", description: "Start date (YYYY-MM-DD) \u2014 required", required: true },
-    to: { type: "string", description: "End date (YYYY-MM-DD)" },
-    subjectType: { type: "string", description: "Subject type: Subject1|Subject2|Subject3|SubjectAuthorized (default: Subject1)" },
-    stateFile: { type: "string", description: "HWM state file path (default: ./ksef-hwm-state.json)" },
-    outputDir: { type: "string", description: "Output directory for exported parts (default: ./ksef-exports/)" },
-    maxIterations: { type: "string", description: "Max export iterations (default: 20)" },
+    pageSize: { type: "string", description: "Number of results per page" },
     env: { type: "string", description: "Environment (test/demo/prod)" },
     json: { type: "boolean", description: "Output as JSON" },
     verbose: { type: "boolean", description: "Show HTTP request/response details" },
-    timeout: { type: "string", description: "Request timeout (ms)" },
-    nip: { type: "string", description: "NIP number" }
+    timeout: { type: "string", description: "Request timeout (ms)" }
   },
   run({ args }) {
     return withErrorHandler(async () => {
-      const globalOpts = getGlobalOpts3(args);
+      const globalOpts = getGlobalOpts2(args);
       const { client } = await requireSession(globalOpts);
-      const from = normalizeCliDate(args.from, "from");
-      const to = normalizeCliDate(args.to ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), "to");
-      const subjectType = args.subjectType ?? "Subject1";
-      const stateFile = args.stateFile ?? "./ksef-hwm-state.json";
-      const outputDir = args.outputDir ?? "./ksef-exports";
-      const maxIterations = args.maxIterations ? parseInt(args.maxIterations, 10) : 20;
-      const isJson = args.json;
-      const store = new FileHwmStore(stateFile);
-      const continuationPoints = {};
-      if (!fs8.existsSync(outputDir)) {
-        fs8.mkdirSync(outputDir, { recursive: true });
+      const pageSize = args.pageSize ? parseInt(args.pageSize, 10) : void 0;
+      const result = await client.activeSessions.getActiveSessions(pageSize);
+      if (args.json) {
+        outputResult(result, { json: true });
+        return;
       }
-      if (!isJson) {
-        consola8.start(`Incremental export: ${from} \u2192 ${to}, subject: ${subjectType}`);
-        consola8.info(`State file: ${stateFile}`);
-        consola8.info(`Output dir: ${outputDir}`);
+      if (result.items.length === 0) {
+        outputWarning("No active sessions found.");
+        return;
       }
-      const iterationParts = [];
-      const result = await incrementalExportAndDownload(client, {
-        subjectType,
-        windowFrom: from,
-        windowTo: to,
-        continuationPoints,
-        maxIterations,
-        store,
-        pollOptions: { intervalMs: 2e3 },
-        onIterationComplete: (iteration, iterResult) => {
-          iterationParts.push({ iteration, partCount: iterResult.parts.length });
-          if (!isJson) {
-            const hwmDate = continuationPoints[subjectType] ?? "complete";
-            consola8.info(
-              `Iteration ${iteration + 1}: ${iterResult.invoiceCount} invoices, truncated: ${iterResult.isTruncated}, HWM: ${hwmDate}`
-            );
-          }
+      outputTable(
+        result.items.map((s) => ({
+          reference: s.referenceNumber,
+          startDate: s.startDate,
+          authMethod: s.authenticationMethodInfo?.category ?? "N/A",
+          status: `${s.status.code} \u2014 ${s.status.description}`,
+          isCurrent: s.isCurrent ? "Yes" : "No"
+        })),
+        [
+          { key: "reference", label: "Reference" },
+          { key: "startDate", label: "Start Date" },
+          { key: "authMethod", label: "Auth Method" },
+          { key: "status", label: "Status" },
+          { key: "isCurrent", label: "Current" }
+        ],
+        { json: false }
+      );
+      if (result.continuationToken) {
+        consola7.info(`More results available. Continuation token: ${result.continuationToken}`);
+      }
+    });
+  }
+});
+var revoke = defineCommand3({
+  meta: { name: "revoke", description: "Revoke an active authentication session" },
+  args: {
+    ref: { type: "positional", description: "Session reference to revoke", required: false },
+    current: { type: "boolean", description: "Revoke the current session" },
+    env: { type: "string", description: "Environment (test/demo/prod)" },
+    json: { type: "boolean", description: "Output as JSON" },
+    verbose: { type: "boolean", description: "Show HTTP request/response details" },
+    timeout: { type: "string", description: "Request timeout (ms)" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts2(args);
+      const { client } = await requireSession(globalOpts);
+      if (args.current) {
+        await client.activeSessions.revokeCurrentSession();
+        if (args.json) {
+          outputResult({ status: "revoked", reference: "current" }, { json: true });
+        } else {
+          outputSuccess("Current session revoked.");
         }
-      });
-      let partIndex = 0;
-      for (const { iteration, partCount } of iterationParts) {
-        for (let p = 0; p < partCount; p++) {
-          if (partIndex < result.decryptedParts.length) {
-            const fileName = `iter-${String(iteration + 1).padStart(3, "0")}-part-${String(p + 1).padStart(3, "0")}.zip`;
-            const filePath = path5.join(outputDir, fileName);
-            fs8.writeFileSync(filePath, result.decryptedParts[partIndex]);
-            partIndex++;
-          }
+      } else if (args.ref) {
+        await client.activeSessions.revokeSession(args.ref);
+        if (args.json) {
+          outputResult({ status: "revoked", reference: args.ref }, { json: true });
+        } else {
+          outputSuccess(`Session ${args.ref} revoked.`);
         }
+      } else {
+        throw new Error("Provide a session reference or use --current to revoke the current session.");
       }
-      if (isJson) {
-        outputResult({
-          referenceNumbers: result.referenceNumbers,
-          iterationCount: result.iterationCount,
-          totalParts: result.decryptedParts.length,
-          continuationPoints: result.continuationPoints,
-          outputDir
-        }, { json: true });
+    });
+  }
+});
+var invoice = defineCommand3({
+  meta: { name: "invoice", description: "Get single invoice status in a session" },
+  args: {
+    invoiceRef: { type: "positional", description: "Invoice reference number", required: true },
+    ref: { type: "string", description: "Session reference (uses stored ref if omitted)" },
+    env: { type: "string", description: "Environment (test/demo/prod)" },
+    json: { type: "boolean", description: "Output as JSON" },
+    verbose: { type: "boolean", description: "Show HTTP request/response details" },
+    timeout: { type: "string", description: "Request timeout (ms)" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts2(args);
+      const { client, session } = await requireSession(globalOpts);
+      const sessionRef = args.ref ?? session.onlineSessionRef;
+      if (!sessionRef) {
+        throw new Error("No session reference. Provide --ref or run `ksef session open` first.");
+      }
+      const result = await client.sessionStatus.getSessionInvoice(sessionRef, args.invoiceRef);
+      if (args.json) {
+        outputResult(result, { json: true });
       } else {
-        outputSuccess(
-          `Export complete: ${result.iterationCount} iterations, ${result.decryptedParts.length} parts downloaded`
-        );
-        consola8.info(`Final HWM: ${continuationPoints[subjectType] ?? "complete"}`);
-        consola8.info(`Output: ${outputDir}`);
+        outputKeyValue({
+          "Ordinal": result.ordinalNumber,
+          "Invoice Number": result.invoiceNumber ?? "N/A",
+          "KSeF Number": result.ksefNumber ?? "N/A",
+          "Reference": result.referenceNumber,
+          "Hash": result.invoiceHash,
+          "Status": `${result.status.code} \u2014 ${result.status.description}`,
+          "Invoicing Date": result.invoicingDate,
+          "Invoicing Mode": result.invoicingMode ?? "N/A"
+        }, { json: false });
       }
     });
   }
 });
+var sessionCommand = defineCommand3({
+  meta: { name: "session", description: "Session management commands" },
+  subCommands: { open, close, status: status2, list, invoices, failed, upo, active, revoke, invoice }
+});
 
-// src/validation/xml-to-object.ts
-import { DOMParser as DOMParser2 } from "@xmldom/xmldom";
-function xmlToObject(xml) {
-  const errors = [];
-  const doc = new DOMParser2({
-    errorHandler: {
-      warning: (_msg) => {
-      },
-      error: (msg) => errors.push(msg),
-      fatalError: (msg) => errors.push(msg)
-    }
-  }).parseFromString(xml, "text/xml");
-  if (errors.length > 0 || !doc || !doc.documentElement) {
-    return { object: null, rootElement: null, namespace: null, errors };
-  }
-  const root = doc.documentElement;
-  const rootName = getLocalName(root);
-  const namespace = root.namespaceURI || null;
-  const obj = elementToObject(root);
-  return {
-    object: typeof obj === "object" && obj !== null ? obj : { "#text": obj },
-    rootElement: rootName,
-    namespace,
-    errors: []
-  };
-}
-function getLocalName(node) {
-  if (node.localName) return node.localName;
-  const name = node.nodeName;
-  const idx = name.indexOf(":");
-  return idx === -1 ? name : name.substring(idx + 1);
-}
-function elementToObject(el) {
-  const result = {};
-  let hasChildElements = false;
-  for (let i = 0; i < el.attributes.length; i++) {
-    const a = el.attributes.item(i);
-    if (!a) continue;
-    const name = a.nodeName;
-    if (name === "xmlns" || name.startsWith("xmlns:")) continue;
-    const attrLocal = getLocalName(a);
-    result[`@${attrLocal}`] = a.value;
-  }
-  const childCounts = /* @__PURE__ */ new Map();
-  for (let i = 0; i < el.childNodes.length; i++) {
-    const child = el.childNodes.item(i);
-    if (!child || child.nodeType !== 1) continue;
-    const name = getLocalName(child);
-    childCounts.set(name, (childCounts.get(name) || 0) + 1);
-    hasChildElements = true;
-  }
-  if (!hasChildElements) {
-    const text = getTextContent(el);
-    const hasAttrs = Object.keys(result).length > 0;
-    if (hasAttrs) {
-      result["#text"] = text;
-      return result;
-    }
-    return text;
+// src/cli/commands/invoice.ts
+import * as fs9 from "fs";
+import * as path6 from "path";
+import { Readable } from "stream";
+import { defineCommand as defineCommand5 } from "citty";
+import { consola as consola9 } from "consola";
+init_document_structures();
+
+// src/cli/commands/export-incremental.ts
+import * as fs8 from "fs";
+import * as path5 from "path";
+import { defineCommand as defineCommand4 } from "citty";
+import { consola as consola8 } from "consola";
+
+// src/workflows/hwm-storage.ts
+import * as fs7 from "fs/promises";
+var FileHwmStore = class {
+  constructor(filePath) {
+    this.filePath = filePath;
   }
-  for (let i = 0; i < el.childNodes.length; i++) {
-    const child = el.childNodes.item(i);
-    if (!child || child.nodeType !== 1) continue;
-    const name = getLocalName(child);
-    const value = elementToObject(child);
-    const count = childCounts.get(name) || 1;
-    if (count > 1) {
-      if (!Array.isArray(result[name])) {
-        result[name] = [];
+  async load() {
+    try {
+      const data = await fs7.readFile(this.filePath, "utf-8");
+      return JSON.parse(data);
+    } catch (err) {
+      if (err.code === "ENOENT") {
+        return {};
       }
-      result[name].push(value);
-    } else {
-      result[name] = value;
+      throw err;
     }
   }
-  return result;
-}
-function getTextContent(el) {
-  let text = "";
-  for (let i = 0; i < el.childNodes.length; i++) {
-    const child = el.childNodes.item(i);
-    if (!child) continue;
-    if (child.nodeType === 3 || child.nodeType === 4) {
-      text += child.nodeValue || "";
-    }
+  async save(points) {
+    await fs7.writeFile(this.filePath, JSON.stringify(points, null, 2), "utf-8");
   }
-  return text.trim();
-}
-
-// src/validation/schemas/index.ts
-init_fa3();
-init_fa2();
-init_rr1_v11e();
-init_rr1_v10e();
-init_pef3();
-init_pef_kor3();
-var SCHEMA_TYPES = ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
-var NAMESPACE_MAP = {
-  "http://crd.gov.pl/wzor/2025/06/25/13775/": "FA3",
-  "http://crd.gov.pl/wzor/2023/06/29/12648/": "FA2",
-  "http://crd.gov.pl/wzor/2026/03/06/14189/": "RR1_V11E",
-  "http://crd.gov.pl/wzor/2026/02/17/14164/": "RR1_V10E",
-  "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2": "PEF3",
-  "urn:oasis:names:specification:ubl:schema:xsd:CreditNote-2": "PEF_KOR3"
 };
 
-// src/validation/schema-registry.ts
-var ROOT_ELEMENT_MAP = {
-  Invoice: "PEF3",
-  CreditNote: "PEF_KOR3"
-};
-var schemaCache = /* @__PURE__ */ new Map();
-async function loadSchema(type) {
-  const cached = schemaCache.get(type);
-  if (cached) return cached;
-  let mod;
-  switch (type) {
-    case "FA3":
-      mod = await Promise.resolve().then(() => (init_fa3(), fa3_exports));
-      break;
-    case "FA2":
-      mod = await Promise.resolve().then(() => (init_fa2(), fa2_exports));
-      break;
-    case "RR1_V11E":
-      mod = await Promise.resolve().then(() => (init_rr1_v11e(), rr1_v11e_exports));
-      break;
-    case "RR1_V10E":
-      mod = await Promise.resolve().then(() => (init_rr1_v10e(), rr1_v10e_exports));
-      break;
-    case "PEF3":
-      mod = await Promise.resolve().then(() => (init_pef3(), pef3_exports));
-      break;
-    case "PEF_KOR3":
-      mod = await Promise.resolve().then(() => (init_pef_kor3(), pef_kor3_exports));
-      break;
-    default:
-      throw new Error(`Unknown schema type: ${type}`);
+// src/workflows/invoice-export-workflow.ts
+init_zip();
+init_polling();
+async function doExport(client, filters, options) {
+  await client.crypto.init();
+  const encData = client.crypto.getEncryptionData();
+  const opResp = await client.invoices.exportInvoices({
+    encryption: encData.encryptionInfo,
+    filters,
+    onlyMetadata: options?.onlyMetadata
+  });
+  const result = await pollUntil(
+    () => client.invoices.getInvoiceExportStatus(opResp.referenceNumber),
+    (s) => s.status.code === 200 || s.status.code >= 400,
+    { ...options?.pollOptions, description: `export ${opResp.referenceNumber}` }
+  );
+  if (result.status.code !== 200) {
+    throw new Error(`Export failed: ${result.status.code} \u2014 ${result.status.description}`);
   }
-  const exportName = `${type}Schema`;
-  const schema = mod[exportName];
-  if (!schema) {
-    throw new Error(`Schema export "${exportName}" not found in module for type "${type}"`);
+  if (!result.package) {
+    throw new Error("Export completed but no package available");
   }
-  schemaCache.set(type, schema);
-  return schema;
-}
-var SchemaRegistry = {
-  /**
-   * Get a Zod schema by type. Lazy-loads the module on first access.
-   */
-  async get(type) {
-    return loadSchema(type);
-  },
-  /**
-   * List all available schema types.
-   */
-  availableSchemas() {
-    return ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
-  },
-  /**
-   * Detect schema type from XML namespace URI and/or root element name.
-   *
-   * Detection priority:
-   * 1. Namespace URI match (unique per FA/RR schemas)
-   * 2. Root element name match (for PEF/PEF_KOR which use UBL namespaces)
-   */
-  detect(namespace, rootElement) {
-    if (namespace) {
-      const byNs = NAMESPACE_MAP[namespace];
-      if (byNs) return byNs;
-    }
-    if (rootElement) {
-      const byRoot = ROOT_ELEMENT_MAP[rootElement];
-      if (byRoot) return byRoot;
+  return {
+    encData,
+    referenceNumber: opResp.referenceNumber,
+    result: {
+      parts: result.package.parts.map((p) => ({
+        ordinalNumber: p.ordinalNumber,
+        url: p.url,
+        method: p.method,
+        partSize: p.partSize,
+        encryptedPartSize: p.encryptedPartSize,
+        encryptedPartHash: p.encryptedPartHash,
+        expirationDate: p.expirationDate
+      })),
+      invoiceCount: result.package.invoiceCount,
+      isTruncated: result.package.isTruncated,
+      permanentStorageHwmDate: result.package.permanentStorageHwmDate,
+      lastPermanentStorageDate: result.package.lastPermanentStorageDate
     }
-    return null;
-  }
-};
+  };
+}
 
-// src/validation/patterns.ts
-var NIP_PATTERN_CORE = "[1-9]((\\d[1-9])|([1-9]\\d))\\d{7}";
-var VAT_UE_PATTERN_CORE = "(ATU\\d{8}|BE[01]{1}\\d{9}|BG\\d{9,10}|CY\\d{8}[A-Z]|CZ\\d{8,10}|DE\\d{9}|DK\\d{8}|EE\\d{9}|EL\\d{9}|ES([A-Z]\\d{8}|\\d{8}[A-Z]|[A-Z]\\d{7}[A-Z])|FI\\d{8}|FR[A-Z0-9]{2}\\d{9}|HR\\d{11}|HU\\d{8}|IE(\\d{7}[A-Z]{2}|\\d[A-Z0-9+*]\\d{5}[A-Z])|IT\\d{11}|LT(\\d{9}|\\d{12})|LU\\d{8}|LV\\d{11}|MT\\d{8}|NL[A-Z0-9+*]{12}|PT\\d{9}|RO\\d{2,10}|SE\\d{12}|SI\\d{8}|SK\\d{10}|XI((\\d{9}|\\d{12})|(GD|HA)\\d{3}))";
-var Nip = new RegExp(`^${NIP_PATTERN_CORE}$`);
-var VatUe = new RegExp(`^${VAT_UE_PATTERN_CORE}$`);
-var NipVatUe = new RegExp(`^${NIP_PATTERN_CORE}-${VAT_UE_PATTERN_CORE}$`);
-var Pesel = /^\d{2}(?:0[1-9]|1[0-2]|2[1-9]|3[0-2]|4[1-9]|5[0-2]|6[1-9]|7[0-2]|8[1-9]|9[0-2])\d{7}$/;
-var NIP_WEIGHTS = [6, 5, 7, 2, 3, 4, 5, 6, 7];
-var PESEL_WEIGHTS = [1, 3, 7, 9, 1, 3, 7, 9, 1, 3];
-function isValidNip(value) {
-  if (!Nip.test(value)) return false;
-  let sum = 0;
-  for (let i = 0; i < 9; i++) {
-    sum += Number(value[i]) * NIP_WEIGHTS[i];
+// src/workflows/hwm-coordinator.ts
+function updateContinuationPoint(points, subjectType, pkg2) {
+  if (pkg2.isTruncated && pkg2.lastPermanentStorageDate) {
+    points[subjectType] = pkg2.lastPermanentStorageDate;
+  } else if (pkg2.permanentStorageHwmDate) {
+    points[subjectType] = pkg2.permanentStorageHwmDate;
+  } else {
+    delete points[subjectType];
   }
-  const checksum = sum % 11;
-  return checksum !== 10 && checksum === Number(value[9]);
 }
-function isValidPesel(value) {
-  if (!Pesel.test(value)) return false;
-  let sum = 0;
-  for (let i = 0; i < 10; i++) {
-    sum += Number(value[i]) * PESEL_WEIGHTS[i];
-  }
-  const checksum = (10 - sum % 10) % 10;
-  return checksum === Number(value[10]);
+function getEffectiveStartDate(points, subjectType, windowFrom) {
+  return points[subjectType] ?? windowFrom;
 }
 
-// src/validation/invoice-validator.ts
-function validateWellFormedness(xml, _parsed) {
-  if (!xml || !xml.trim()) {
-    return {
-      valid: false,
-      schemaType: null,
-      errors: [{ code: "MALFORMED_XML", message: "Empty XML input" }]
-    };
+// src/workflows/incremental-export-workflow.ts
+async function incrementalExportAndDownload(client, options) {
+  const maxIterations = options.maxIterations ?? 20;
+  const points = options.continuationPoints;
+  if (options.store) {
+    const loaded = await options.store.load();
+    for (const [key, value] of Object.entries(loaded)) {
+      if (value !== void 0 && points[key] === void 0) {
+        points[key] = value;
+      }
+    }
   }
-  const { object, rootElement, namespace, errors } = _parsed ?? xmlToObject(xml);
-  if (errors.length > 0 || !object) {
-    return {
-      valid: false,
-      schemaType: null,
-      errors: errors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
-    };
+  const referenceNumbers = [];
+  const decryptedParts = [];
+  let previousFrom;
+  let iteration = 0;
+  for (; iteration < maxIterations; iteration++) {
+    const effectiveFrom = getEffectiveStartDate(points, options.subjectType, options.windowFrom);
+    if (previousFrom !== void 0 && effectiveFrom === previousFrom) {
+      break;
+    }
+    previousFrom = effectiveFrom;
+    const filters = options.filtersFactory ? options.filtersFactory(effectiveFrom, options.windowTo) : buildDefaultFilters(options.subjectType, effectiveFrom, options.windowTo);
+    const { result, encData, referenceNumber } = await doExport(client, filters, {
+      onlyMetadata: options.onlyMetadata,
+      pollOptions: options.pollOptions
+    });
+    referenceNumbers.push(referenceNumber);
+    const download = options.transport ?? fetch;
+    for (const part of result.parts) {
+      const resp = await download(part.url, { method: part.method });
+      if (!resp.ok) {
+        throw new Error(`Download failed for part ${part.ordinalNumber}: HTTP ${resp.status}`);
+      }
+      const encryptedData = new Uint8Array(await resp.arrayBuffer());
+      const decrypted = client.crypto.decryptAES256(encryptedData, encData.cipherKey, encData.cipherIv);
+      decryptedParts.push(decrypted);
+    }
+    updateContinuationPoint(points, options.subjectType, {
+      isTruncated: result.isTruncated,
+      lastPermanentStorageDate: result.lastPermanentStorageDate,
+      permanentStorageHwmDate: result.permanentStorageHwmDate
+    });
+    if (options.store) {
+      await options.store.save(points);
+    }
+    options.onIterationComplete?.(iteration, result);
+    if (!result.isTruncated) {
+      iteration++;
+      break;
+    }
   }
-  const schemaType = SchemaRegistry.detect(namespace, rootElement);
-  return { valid: true, schemaType, errors: [] };
+  return {
+    referenceNumbers,
+    invoices: [],
+    decryptedParts,
+    continuationPoints: points,
+    iterationCount: iteration
+  };
 }
-async function validateSchema(xml, options, _parsed) {
-  const { object, rootElement, namespace, errors: parseErrors } = _parsed ?? xmlToObject(xml);
-  if (parseErrors.length > 0 || !object) {
-    return {
-      valid: false,
-      schemaType: null,
-      errors: parseErrors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
-    };
-  }
-  const schemaType = options?.schema ?? SchemaRegistry.detect(namespace, rootElement);
-  if (!schemaType) {
-    return {
-      valid: false,
-      schemaType: null,
-      errors: [{
-        code: "UNKNOWN_SCHEMA",
-        message: `Cannot detect schema type from namespace "${namespace}" and root element "${rootElement}"`
-      }]
-    };
-  }
-  const schema = await SchemaRegistry.get(schemaType);
-  const result = schema.safeParse(object);
-  if (result.success) {
-    return { valid: true, schemaType, errors: [] };
-  }
-  const prefix = rootElement ? `/${rootElement}/` : "/";
-  const validationErrors = result.error.issues.map((issue) => {
-    const zodPath = issue.path.join("/");
-    const path9 = zodPath ? `${prefix}${zodPath}` : rootElement ? `/${rootElement}` : void 0;
-    return {
-      code: mapZodErrorCode(issue),
-      message: issue.message,
-      path: path9
-    };
-  });
-  return { valid: false, schemaType, errors: validationErrors };
+function buildDefaultFilters(subjectType, from, to) {
+  return {
+    subjectType,
+    dateRange: {
+      dateType: "PermanentStorage",
+      from,
+      to
+    }
+  };
 }
-function mapZodErrorCode(issue) {
-  switch (issue.code) {
-    case "invalid_type":
-      return issue.input === void 0 ? "MISSING_REQUIRED_ELEMENT" : "INVALID_VALUE";
-    case "invalid_enum_value":
-    // Zod v3
-    case "invalid_value":
-      return "INVALID_ENUM_VALUE";
-    case "invalid_string":
-    // Zod v3
-    case "invalid_format":
-      return "PATTERN_MISMATCH";
-    case "too_big":
-      return "MAX_OCCURS_EXCEEDED";
-    default:
-      return "SCHEMA_VALIDATION_ERROR";
+
+// src/cli/date-utils.ts
+var DATE_ONLY_RE = /^\d{4}-\d{2}-\d{2}$/;
+function normalizeCliDate(date, position) {
+  if (!DATE_ONLY_RE.test(date)) return date;
+  if (isNaN(new Date(date).getTime())) {
+    throw new Error(`Invalid date: "${date}". Expected a valid YYYY-MM-DD date.`);
   }
+  return position === "from" ? `${date}T00:00:00+00:00` : `${date}T23:59:59.999+00:00`;
 }
-function validateBusinessRules(xml, _parsed) {
-  const { object, rootElement, namespace, errors: parseErrors } = _parsed ?? xmlToObject(xml);
-  if (parseErrors.length > 0 || !object) {
-    return {
-      valid: false,
-      schemaType: null,
-      errors: parseErrors.map((msg) => ({ code: "MALFORMED_XML", message: msg }))
-    };
-  }
-  const schemaType = SchemaRegistry.detect(namespace, rootElement);
-  const errors = [];
-  collectNipPeselErrors(object, rootElement ? `/${rootElement}` : "", errors);
-  collectDateErrors(object, rootElement, errors);
-  return { valid: errors.length === 0, schemaType, errors };
+
+// src/cli/commands/export-incremental.ts
+function getGlobalOpts3(args) {
+  return {
+    env: args.env,
+    json: args.json,
+    verbose: args.verbose,
+    timeout: args.timeout,
+    nip: args.nip
+  };
 }
-function collectNipPeselErrors(obj, path9, errors) {
-  for (const [key, value] of Object.entries(obj)) {
-    const currentPath = path9 ? `${path9}/${key}` : key;
-    if (key === "NIP" && typeof value === "string") {
-      if (!isValidNip(value)) {
-        errors.push({
-          code: "INVALID_NIP_CHECKSUM",
-          message: `Invalid NIP checksum: ${value}`,
-          path: currentPath
-        });
-      }
-    } else if (key === "PESEL" && typeof value === "string") {
-      if (!isValidPesel(value)) {
-        errors.push({
-          code: "INVALID_PESEL_CHECKSUM",
-          message: `Invalid PESEL checksum: ${value}`,
-          path: currentPath
-        });
+var exportIncremental = defineCommand4({
+  meta: { name: "export-incremental", description: "Incremental invoice export with HWM state persistence" },
+  args: {
+    from: { type: "string", description: "Start date (YYYY-MM-DD) \u2014 required", required: true },
+    to: { type: "string", description: "End date (YYYY-MM-DD)" },
+    subjectType: { type: "string", description: "Subject type: Subject1|Subject2|Subject3|SubjectAuthorized (default: Subject1)" },
+    stateFile: { type: "string", description: "HWM state file path (default: ./ksef-hwm-state.json)" },
+    outputDir: { type: "string", description: "Output directory for exported parts (default: ./ksef-exports/)" },
+    maxIterations: { type: "string", description: "Max export iterations (default: 20)" },
+    onlyMetadata: { type: "boolean", description: "Export metadata only (no invoice XML)" },
+    env: { type: "string", description: "Environment (test/demo/prod)" },
+    json: { type: "boolean", description: "Output as JSON" },
+    verbose: { type: "boolean", description: "Show HTTP request/response details" },
+    timeout: { type: "string", description: "Request timeout (ms)" },
+    nip: { type: "string", description: "NIP number" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts3(args);
+      const { client } = await requireSession(globalOpts);
+      const from = normalizeCliDate(args.from, "from");
+      const to = normalizeCliDate(args.to ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), "to");
+      const subjectType = args.subjectType ?? "Subject1";
+      const stateFile = args.stateFile ?? "./ksef-hwm-state.json";
+      const outputDir = args.outputDir ?? "./ksef-exports";
+      const maxIterations = args.maxIterations ? parseInt(args.maxIterations, 10) : 20;
+      const isJson = args.json;
+      const store = new FileHwmStore(stateFile);
+      const continuationPoints = {};
+      if (!fs8.existsSync(outputDir)) {
+        fs8.mkdirSync(outputDir, { recursive: true });
       }
-    } else if (typeof value === "object" && value !== null) {
-      if (Array.isArray(value)) {
-        for (let i = 0; i < value.length; i++) {
-          if (typeof value[i] === "object" && value[i] !== null) {
-            collectNipPeselErrors(value[i], `${currentPath}/${i}`, errors);
+      if (!isJson) {
+        consola8.start(`Incremental export: ${from} \u2192 ${to}, subject: ${subjectType}`);
+        consola8.info(`State file: ${stateFile}`);
+        consola8.info(`Output dir: ${outputDir}`);
+      }
+      const iterationParts = [];
+      const result = await incrementalExportAndDownload(client, {
+        subjectType,
+        windowFrom: from,
+        windowTo: to,
+        continuationPoints,
+        maxIterations,
+        onlyMetadata: args.onlyMetadata,
+        store,
+        pollOptions: { intervalMs: 2e3 },
+        onIterationComplete: (iteration, iterResult) => {
+          iterationParts.push({ iteration, partCount: iterResult.parts.length });
+          if (!isJson) {
+            const hwmDate = continuationPoints[subjectType] ?? "complete";
+            consola8.info(
+              `Iteration ${iteration + 1}: ${iterResult.invoiceCount} invoices, truncated: ${iterResult.isTruncated}, HWM: ${hwmDate}`
+            );
+          }
+        }
+      });
+      let partIndex = 0;
+      for (const { iteration, partCount } of iterationParts) {
+        for (let p = 0; p < partCount; p++) {
+          if (partIndex < result.decryptedParts.length) {
+            const fileName = `iter-${String(iteration + 1).padStart(3, "0")}-part-${String(p + 1).padStart(3, "0")}.zip`;
+            const filePath = path5.join(outputDir, fileName);
+            fs8.writeFileSync(filePath, result.decryptedParts[partIndex]);
+            partIndex++;
           }
         }
+      }
+      if (isJson) {
+        outputResult({
+          referenceNumbers: result.referenceNumbers,
+          iterationCount: result.iterationCount,
+          totalParts: result.decryptedParts.length,
+          continuationPoints: result.continuationPoints,
+          outputDir
+        }, { json: true });
       } else {
-        collectNipPeselErrors(value, currentPath, errors);
+        outputSuccess(
+          `Export complete: ${result.iterationCount} iterations, ${result.decryptedParts.length} parts downloaded`
+        );
+        consola8.info(`Final HWM: ${continuationPoints[subjectType] ?? "complete"}`);
+        consola8.info(`Output: ${outputDir}`);
       }
-    }
-  }
-}
-function getPolandLocalDate() {
-  return new Intl.DateTimeFormat("sv-SE", { timeZone: "Europe/Warsaw" }).format(Date.now());
-}
-function collectDateErrors(obj, rootElement, errors) {
-  const fa = obj["Fa"];
-  if (!fa || typeof fa !== "object") return;
-  const p1 = fa["P_1"];
-  if (typeof p1 !== "string") return;
-  const today = getPolandLocalDate();
-  if (p1 > today) {
-    const prefix = rootElement ? `/${rootElement}` : "";
-    errors.push({
-      code: "FUTURE_INVOICE_DATE",
-      message: `Invoice date P_1 (${p1}) is in the future \u2014 KSeF rejects invoices with P_1 > today (${today})`,
-      path: `${prefix}/Fa/P_1`
     });
   }
-}
-async function validate(xml, options) {
-  const parsed = xml && xml.trim() ? xmlToObject(xml) : void 0;
-  const l1 = validateWellFormedness(xml, parsed);
-  if (!l1.valid) return l1;
-  const l2 = await validateSchema(xml, options, parsed);
-  if (!l2.valid) return l2;
-  const l3 = validateBusinessRules(xml, parsed);
-  return { ...l3, schemaType: l2.schemaType };
-}
+});
 
 // src/cli/commands/invoice.ts
+init_invoice_validator();
 init_ksef_validation_error();
+init_schemas();
 function getGlobalOpts4(args) {
   return {
     env: args.env,
@@ -6365,7 +6971,7 @@ var send = defineCommand5({
       const stat = fs9.statSync(filePath);
       if (args.stream) {
         if (args.validate) {
-          consola9.warn("--validate is only supported for single-file sends, skipping validation.");
+          consola9.warn("--validate is not supported in stream mode. Run `ksef invoice validate <path>` before sending, or remove --stream.");
         }
         if (!filePath.endsWith(".zip") || stat.isDirectory()) {
           throw new Error("--stream requires a .zip file path.");
@@ -6392,9 +6998,6 @@ var send = defineCommand5({
         return;
       }
       if (stat.isDirectory()) {
-        if (args.validate) {
-          consola9.warn("--validate is only supported for single-file sends, skipping validation.");
-        }
         const xmlFiles = fs9.readdirSync(filePath).filter((f) => f.endsWith(".xml")).map((f) => path6.join(filePath, f));
         if (xmlFiles.length === 0) {
           throw new Error(`No XML files found in ${filePath}`);
@@ -6405,11 +7008,28 @@ var send = defineCommand5({
         if (!validateFormCodeForSession(formCode, "batch")) {
           throw new Error(`Document type "${formCode.systemCode}" is not supported in batch sessions. PEF/PEF_KOR require online sessions.`);
         }
+        const fileBuffers = xmlFiles.map((file) => ({ file, content: fs9.readFileSync(file) }));
+        if (args.validate) {
+          const { validateBatch: validateBatch2, batchValidationDetails: batchValidationDetails2 } = await Promise.resolve().then(() => (init_invoice_validator(), invoice_validator_exports));
+          const invoicesToValidate = fileBuffers.map(({ file, content }) => ({
+            fileName: path6.basename(file),
+            xml: content.toString("utf-8")
+          }));
+          if (!args.json) consola9.start(`Validating ${invoicesToValidate.length} invoices...`);
+          const batchResult = await validateBatch2(invoicesToValidate);
+          if (!batchResult.valid) {
+            const invalidCount = batchResult.results.filter((r) => !r.result.valid).length;
+            throw new KSeFValidationError(
+              `Validation failed: ${invalidCount} of ${xmlFiles.length} invoices invalid`,
+              batchValidationDetails2(batchResult)
+            );
+          }
+          if (!args.json) consola9.success(`All ${xmlFiles.length} invoices valid.`);
+        }
         if (!args.json) consola9.start(`Sending ${xmlFiles.length} invoices via batch session...`);
         await client.crypto.init();
         const encryptionData = client.crypto.getEncryptionData();
-        const parts = xmlFiles.map((file, i) => {
-          const content = fs9.readFileSync(file);
+        const parts = fileBuffers.map(({ content }, i) => {
           const metadata = client.crypto.getFileMetadata(new Uint8Array(content));
           return {
             data: content.buffer,
@@ -6417,7 +7037,7 @@ var send = defineCommand5({
             ordinalNumber: i + 1
           };
         });
-        const totalContent = Buffer.concat(xmlFiles.map((f) => fs9.readFileSync(f)));
+        const totalContent = Buffer.concat(fileBuffers.map(({ content }) => content));
         const totalMetadata = client.crypto.getFileMetadata(new Uint8Array(totalContent));
         const batchFileInfo = {
           fileSize: totalMetadata.fileSize,
@@ -6572,6 +7192,7 @@ var exportCmd = defineCommand5({
   meta: { name: "export", description: "Start invoice export" },
   args: {
     ...QUERY_FILTER_ARGS,
+    onlyMetadata: { type: "boolean", description: "Export metadata only (no invoice XML)" },
     env: { type: "string", description: "Environment (test/demo/prod)" },
     json: { type: "boolean", description: "Output as JSON" },
     verbose: { type: "boolean", description: "Show HTTP request/response details" },
@@ -6587,7 +7208,7 @@ var exportCmd = defineCommand5({
       const encryptionData = client.crypto.getEncryptionData();
       const filters = buildQueryFilters(args);
       const result = await client.invoices.exportInvoices(
-        { encryption: encryptionData.encryptionInfo, filters }
+        { encryption: encryptionData.encryptionInfo, filters, onlyMetadata: args.onlyMetadata }
       );
       if (args.json) {
         outputResult(result, { json: true });
@@ -7415,12 +8036,12 @@ import fs10 from "fs";
 import path7 from "path";
 
 // src/crypto/certificate-service.ts
-import * as crypto5 from "crypto";
+import * as crypto6 from "crypto";
 import * as x5092 from "@peculiar/x509";
 var CertificateService = class {
   static getSha256Fingerprint(certPem) {
     const der = extractDerFromPem2(certPem);
-    return crypto5.createHash("sha256").update(der).digest("hex").toUpperCase();
+    return crypto6.createHash("sha256").update(der).digest("hex").toUpperCase();
   }
   static async generatePersonalCertificate(givenName, surname, serialNumber, commonName, method = "RSA") {
     const nameParts = [];
@@ -7443,7 +8064,7 @@ var CertificateService = class {
   }
 };
 async function generateSelfSigned(subject2, method) {
-  x5092.cryptoProvider.set(crypto5.webcrypto);
+  x5092.cryptoProvider.set(crypto6.webcrypto);
   let algorithm;
   let signingAlgorithm;
   if (method === "ECDSA") {
@@ -7458,7 +8079,7 @@ async function generateSelfSigned(subject2, method) {
     };
     signingAlgorithm = algorithm;
   }
-  const keys = await crypto5.webcrypto.subtle.generateKey(
+  const keys = await crypto6.webcrypto.subtle.generateKey(
     algorithm,
     true,
     ["sign", "verify"]
@@ -7475,9 +8096,9 @@ async function generateSelfSigned(subject2, method) {
     serialNumber: Date.now().toString(16)
   });
   const certPem = cert.toString("pem");
-  const pkcs8 = await crypto5.webcrypto.subtle.exportKey("pkcs8", keys.privateKey);
+  const pkcs8 = await crypto6.webcrypto.subtle.exportKey("pkcs8", keys.privateKey);
   const privateKeyPem = pemEncode2(new Uint8Array(pkcs8), "PRIVATE KEY");
-  const fingerprint = crypto5.createHash("sha256").update(Buffer.from(cert.rawData)).digest("hex").toUpperCase();
+  const fingerprint = crypto6.createHash("sha256").update(Buffer.from(cert.rawData)).digest("hex").toUpperCase();
   return { certificatePem: certPem, privateKeyPem, fingerprint };
 }
 function extractDerFromPem2(pem) {
@@ -7935,6 +8556,7 @@ var invoice2 = defineCommand9({
     format: { type: "string", description: "Output format: png or svg (default: png)" },
     size: { type: "string", description: "QR code size in pixels (default: 300)" },
     label: { type: "string", description: "Label text (SVG only)" },
+    offline: { type: "boolean", description: 'Use "OFFLINE" as label (SVG, overrides --label)' },
     o: { type: "string", description: "Output file path" },
     env: { type: "string", description: "Environment (test/demo/prod)" },
     json: { type: "boolean", description: "Output as JSON" },
@@ -7954,7 +8576,8 @@ var invoice2 = defineCommand9({
         return;
       }
       if (format === "svg") {
-        const svg = args.label ? await QrCodeService.generateQrCodeSvgWithLabel(url2, args.label, { width: size }) : await QrCodeService.generateQrCodeSvg(url2, { width: size });
+        const effectiveLabel = args.offline ? "OFFLINE" : args.label;
+        const svg = effectiveLabel ? await QrCodeService.generateQrCodeSvgWithLabel(url2, effectiveLabel, { width: size }) : await QrCodeService.generateQrCodeSvg(url2, { width: size });
         if (args.o) {
           fs11.writeFileSync(args.o, svg);
           outputSuccess(`QR code saved to ${args.o}
@@ -8821,11 +9444,11 @@ var doctorCommand = defineCommand14({
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), 5e3);
         try {
-          const status6 = await client.lighthouse.getStatus();
+          const status7 = await client.lighthouse.getStatus();
           checks.push({
             name: "connectivity",
             status: "pass",
-            message: `API reachable (${status6.status})`
+            message: `API reachable (${status7.status})`
           });
         } finally {
           clearTimeout(timeout);
@@ -9006,6 +9629,7 @@ import * as path8 from "path";
 import * as os5 from "os";
 import { defineCommand as defineCommand16 } from "citty";
 import { consola as consola14 } from "consola";
+init_patterns();
 init_auth_xml_builder();
 init_polling();
 
@@ -9268,11 +9892,474 @@ var setupCommand = defineCommand16({
   }
 });
 
+// src/cli/commands/offline.ts
+import * as fs14 from "fs";
+import { defineCommand as defineCommand17 } from "citty";
+import { consola as consola15 } from "consola";
+
+// src/offline/file-storage.ts
+import * as fs13 from "fs/promises";
+import * as path9 from "path";
+import * as os6 from "os";
+
+// src/offline/storage.ts
+function matchesFilter(invoice3, filter) {
+  if (filter.status !== void 0) {
+    const statuses = Array.isArray(filter.status) ? filter.status : [filter.status];
+    if (!statuses.includes(invoice3.status)) return false;
+  }
+  if (filter.mode !== void 0 && invoice3.mode !== filter.mode) return false;
+  if (filter.sellerNip !== void 0 && invoice3.sellerNip !== filter.sellerNip) return false;
+  if (filter.expiringBefore !== void 0) {
+    const cutoff = typeof filter.expiringBefore === "string" ? new Date(filter.expiringBefore).getTime() : filter.expiringBefore.getTime();
+    if (new Date(invoice3.submitBy).getTime() >= cutoff) return false;
+  }
+  return true;
+}
+
+// src/offline/file-storage.ts
+function resolveDir(dir) {
+  if (dir === "~" || dir.startsWith("~/")) {
+    return path9.join(os6.homedir(), dir.slice(1));
+  }
+  return dir;
+}
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function validateId(id) {
+  if (!UUID_RE.test(id)) {
+    throw new Error(`Invalid invoice ID: ${id}`);
+  }
+}
+var FileOfflineInvoiceStorage = class {
+  dir;
+  constructor(directory) {
+    this.dir = resolveDir(directory ?? "~/.ksef/offline");
+  }
+  async ensureDir() {
+    await fs13.mkdir(this.dir, { recursive: true });
+  }
+  filePath(id) {
+    validateId(id);
+    return path9.join(this.dir, `${id}.json`);
+  }
+  async save(invoice3) {
+    await this.ensureDir();
+    const file = this.filePath(invoice3.id);
+    const tmp = `${file}.tmp`;
+    await fs13.writeFile(tmp, JSON.stringify(invoice3, null, 2));
+    await fs13.rename(tmp, file);
+  }
+  async get(id) {
+    const file = this.filePath(id);
+    try {
+      return JSON.parse(await fs13.readFile(file, "utf-8"));
+    } catch (err) {
+      if (err instanceof Error && "code" in err && err.code === "ENOENT") {
+        return null;
+      }
+      console.warn(`Warning: Failed to read offline invoice ${id}: ${err instanceof Error ? err.message : String(err)}`);
+      return null;
+    }
+  }
+  async list(filter) {
+    let files;
+    try {
+      files = (await fs13.readdir(this.dir)).filter((f) => f.endsWith(".json"));
+    } catch {
+      return [];
+    }
+    const results = [];
+    for (const file of files) {
+      try {
+        const data = JSON.parse(
+          await fs13.readFile(path9.join(this.dir, file), "utf-8")
+        );
+        if (!filter || matchesFilter(data, filter)) {
+          results.push(data);
+        }
+      } catch (err) {
+        console.warn(`Warning: Skipping corrupt offline invoice file ${file}: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    return results;
+  }
+  /**
+   * Update invoice metadata (read-modify-write).
+   *
+   * Note: No file locking — concurrent updates to the same ID may cause
+   * lost writes. Acceptable for CLI (single process). Library consumers
+   * running parallel operations should use external locking.
+   */
+  async update(id, updates) {
+    const existing = await this.get(id);
+    if (!existing) throw new Error(`Offline invoice not found: ${id}`);
+    await this.save({ ...existing, ...updates });
+  }
+  async delete(id) {
+    const file = this.filePath(id);
+    try {
+      await fs13.unlink(file);
+    } catch (e) {
+      if (e instanceof Error && "code" in e && e.code !== "ENOENT") throw e;
+    }
+  }
+};
+
+// src/cli/commands/offline.ts
+init_invoice_field_extractor();
+function getGlobalOpts14(args) {
+  return {
+    env: args.env,
+    json: args.json,
+    verbose: args.verbose,
+    timeout: args.timeout,
+    nip: args.nip
+  };
+}
+function getStorage(args) {
+  return new FileOfflineInvoiceStorage(args["store-dir"]);
+}
+var globalArgs = {
+  env: { type: "string", description: "Environment (test/demo/prod)" },
+  json: { type: "boolean", description: "Output as JSON" },
+  verbose: { type: "boolean", description: "Verbose output" },
+  timeout: { type: "string", description: "Request timeout (ms)" },
+  nip: { type: "string", description: "NIP number" },
+  "store-dir": { type: "string", description: "Offline invoice store directory" }
+};
+var generate3 = defineCommand17({
+  meta: { name: "generate", description: "Generate offline invoice metadata with QR codes" },
+  args: {
+    ...globalArgs,
+    xml: { type: "positional", description: "Invoice XML file path", required: true },
+    mode: { type: "string", description: "Offline mode (offline24/offline/awaryjny)" },
+    key: { type: "string", description: "Private key PEM file for KOD II signing" },
+    "cert-serial": { type: "string", description: "Certificate serial number (hex)" },
+    "context-type": { type: "string", description: "Seller context type (default: Nip)" },
+    "context-id": { type: "string", description: "Seller context value" },
+    "qr-format": { type: "string", description: "QR format: png or svg (default: png)" },
+    "qr-out": { type: "string", description: "Directory to save QR images" },
+    "no-store": { type: "boolean", description: "Do not save to local store" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts14(args);
+      const config = loadConfig();
+      const xmlPath = args.xml;
+      if (!fs14.existsSync(xmlPath)) {
+        throw new Error(`File not found: ${xmlPath}`);
+      }
+      const invoiceXml = fs14.readFileSync(xmlPath, "utf-8");
+      const sellerNip = args.nip ?? config.nip;
+      if (!sellerNip) {
+        throw new Error("NIP is required. Use --nip or set via `ksef config set --nip`");
+      }
+      const contextType = args["context-type"] ?? "Nip";
+      const contextId = args["context-id"] ?? sellerNip;
+      const client = createClient(globalOpts);
+      const workflow = client.offline;
+      if (args.key && !args["cert-serial"]) {
+        throw new Error("--cert-serial is required when using --key");
+      }
+      const certificate2 = args.key ? {
+        privateKeyPem: fs14.readFileSync(args.key, "utf-8"),
+        certificateSerial: args["cert-serial"]
+      } : void 0;
+      const validModes = ["offline24", "offline", "awaryjny", "awaria_calkowita"];
+      const modeArg = args.mode ?? "offline24";
+      if (!validModes.includes(modeArg)) {
+        throw new Error(`Invalid --mode "${modeArg}". Must be one of: ${validModes.join(", ")}`);
+      }
+      const storage = args["no-store"] ? void 0 : getStorage(args);
+      const { invoiceNumber, invoiceDate } = extractInvoiceFields(invoiceXml);
+      const metadata = await workflow.generate(
+        {
+          invoiceNumber,
+          invoiceDate,
+          invoiceXml,
+          sellerNip,
+          sellerIdentifier: { type: contextType, value: contextId }
+        },
+        {
+          mode: modeArg,
+          certificate: certificate2,
+          storage
+        }
+      );
+      if (args["qr-out"]) {
+        const outDir = args["qr-out"];
+        fs14.mkdirSync(outDir, { recursive: true });
+        const format = args["qr-format"] ?? "png";
+        if (format !== "png" && format !== "svg") {
+          throw new Error(`Invalid --qr-format "${format}". Must be one of: png, svg`);
+        }
+        const shortId = metadata.id.slice(0, 8);
+        if (format === "svg") {
+          const svg1 = await QrCodeService.generateQrCodeSvgWithLabel(metadata.kod1Url, "OFFLINE");
+          fs14.writeFileSync(`${outDir}/${shortId}-kod1.svg`, svg1);
+          if (metadata.kod2Url) {
+            const svg2 = await QrCodeService.generateQrCodeSvgWithLabel(metadata.kod2Url, "CERTYFIKAT");
+            fs14.writeFileSync(`${outDir}/${shortId}-kod2.svg`, svg2);
+          }
+        } else {
+          const png1 = await QrCodeService.generateQrCode(metadata.kod1Url);
+          fs14.writeFileSync(`${outDir}/${shortId}-kod1.png`, png1);
+          if (metadata.kod2Url) {
+            const png2 = await QrCodeService.generateQrCode(metadata.kod2Url);
+            fs14.writeFileSync(`${outDir}/${shortId}-kod2.png`, png2);
+          }
+        }
+        outputSuccess(`QR codes saved to ${outDir}/`);
+      }
+      if (!certificate2) {
+        outputWarning("No certificate provided \u2014 KOD II QR code was not generated. Use --key and --cert-serial for offline compliance.");
+      }
+      if (args.json) {
+        outputResult(metadata, { json: true });
+      } else {
+        outputKeyValue({
+          ID: metadata.id,
+          Mode: metadata.mode,
+          Status: metadata.status,
+          Deadline: metadata.submitBy,
+          "KOD I": metadata.kod1Url,
+          "KOD II": metadata.kod2Url ?? "(not generated)"
+        }, { json: false });
+      }
+    });
+  }
+});
+var list4 = defineCommand17({
+  meta: { name: "list", description: "List stored offline invoices" },
+  args: {
+    ...globalArgs,
+    status: { type: "string", description: "Filter by status" },
+    mode: { type: "string", description: "Filter by mode" },
+    expiring: { type: "boolean", description: "Show only invoices expiring within 24h" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const storage = getStorage(args);
+      const filter = {};
+      if (args.status) filter.status = args.status;
+      if (args.mode) filter.mode = args.mode;
+      if (args.expiring) {
+        const cutoff = new Date(Date.now() + 24 * 60 * 60 * 1e3);
+        filter.expiringBefore = cutoff.toISOString();
+      }
+      const invoices2 = await storage.list(Object.keys(filter).length > 0 ? filter : void 0);
+      if (invoices2.length === 0) {
+        if (args.json) {
+          outputResult([], { json: true });
+        } else {
+          outputSuccess("No offline invoices found.");
+        }
+        return;
+      }
+      outputTable(
+        invoices2.map((i) => ({
+          id: i.id.slice(0, 8),
+          number: i.invoiceNumber,
+          mode: i.mode,
+          status: i.status,
+          deadline: i.submitBy.slice(0, 19),
+          nip: i.sellerNip
+        })),
+        [
+          { key: "id", label: "ID" },
+          { key: "number", label: "Number" },
+          { key: "mode", label: "Mode" },
+          { key: "status", label: "Status" },
+          { key: "deadline", label: "Deadline" },
+          { key: "nip", label: "NIP" }
+        ],
+        { json: args.json }
+      );
+    });
+  }
+});
+var status6 = defineCommand17({
+  meta: { name: "status", description: "Show offline invoice details" },
+  args: {
+    ...globalArgs,
+    id: { type: "positional", description: "Invoice ID", required: true }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const storage = getStorage(args);
+      const invoice3 = await storage.get(args.id);
+      if (!invoice3) {
+        throw new Error(`Offline invoice not found: ${args.id}`);
+      }
+      if (args.json) {
+        outputResult(invoice3, { json: true });
+      } else {
+        outputKeyValue({
+          ID: invoice3.id,
+          Number: invoice3.invoiceNumber,
+          Date: invoice3.invoiceDate,
+          Mode: invoice3.mode,
+          Reason: invoice3.reason,
+          Status: invoice3.status,
+          "Seller NIP": invoice3.sellerNip,
+          Deadline: invoice3.submitBy,
+          "Generated At": invoice3.generatedAt,
+          "Submitted At": invoice3.submittedAt ?? "-",
+          "KSeF Reference": invoice3.ksefReferenceNumber ?? "-",
+          "KOD I URL": invoice3.kod1Url,
+          "KOD II URL": invoice3.kod2Url ?? "-",
+          Error: invoice3.error ? `${invoice3.error.code}: ${invoice3.error.message}` : "-"
+        }, { json: false });
+      }
+    });
+  }
+});
+var submit = defineCommand17({
+  meta: { name: "submit", description: "Submit offline invoices to KSeF" },
+  args: {
+    ...globalArgs,
+    all: { type: "boolean", description: "Submit all pending invoices" },
+    "no-check-expiry": { type: "boolean", description: "Skip expiry check" },
+    ids: { type: "positional", description: "Invoice IDs to submit" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts14(args);
+      const { client } = await requireSession(globalOpts);
+      const storage = getStorage(args);
+      const invoiceIds = args.ids ? args.ids.split(",").map((s) => s.trim()) : void 0;
+      if (args.all && invoiceIds) {
+        throw new Error("Cannot use --all together with specific invoice IDs. Use one or the other.");
+      }
+      if (!args.all && !invoiceIds) {
+        throw new Error("Specify invoice IDs or use --all to submit all pending invoices.");
+      }
+      const result = await client.offline.submit(client, {
+        storage,
+        invoiceIds: args.all ? void 0 : invoiceIds,
+        checkExpiry: !args["no-check-expiry"]
+      });
+      if (result.total === 0) {
+        outputSuccess("No pending invoices to submit.");
+        return;
+      }
+      if (args.json) {
+        outputResult(result, { json: true });
+      } else {
+        outputSuccess(
+          `Submitted: ${result.submitted}, Accepted: ${result.accepted}, Rejected: ${result.rejected}, Expired: ${result.expired}`
+        );
+        if (result.results.length > 0) {
+          outputTable(
+            result.results.map((r) => ({
+              id: r.invoiceId.slice(0, 8),
+              number: r.invoiceNumber,
+              status: r.status,
+              ref: r.ksefReferenceNumber ?? "-"
+            })),
+            [
+              { key: "id", label: "ID" },
+              { key: "number", label: "Number" },
+              { key: "status", label: "Status" },
+              { key: "ref", label: "KSeF Ref" }
+            ],
+            { json: false }
+          );
+        }
+      }
+    });
+  }
+});
+var correct = defineCommand17({
+  meta: { name: "correct", description: "Technical correction for rejected offline invoice" },
+  args: {
+    ...globalArgs,
+    id: { type: "positional", description: "Rejected invoice ID", required: true },
+    xml: { type: "positional", description: "Corrected XML file path", required: true }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const globalOpts = getGlobalOpts14(args);
+      const { client } = await requireSession(globalOpts);
+      const storage = getStorage(args);
+      const xmlPath = args.xml;
+      if (!fs14.existsSync(xmlPath)) {
+        throw new Error(`File not found: ${xmlPath}`);
+      }
+      const correctedXml = fs14.readFileSync(xmlPath, "utf-8");
+      const result = await client.offline.correct(client, {
+        rejectedInvoiceId: args.id,
+        correctedInvoiceXml: correctedXml,
+        storage
+      });
+      if (args.json) {
+        outputResult(result, { json: true });
+      } else {
+        outputSuccess(`Correction submitted. KSeF ref: ${result.ksefReferenceNumber ?? "pending"}`);
+      }
+    });
+  }
+});
+var del = defineCommand17({
+  meta: { name: "delete", description: "Delete offline invoice from local store" },
+  args: {
+    ...globalArgs,
+    id: { type: "positional", description: "Invoice ID to delete" },
+    expired: { type: "boolean", description: "Delete all expired invoices" },
+    force: { type: "boolean", description: "Skip confirmation prompt" }
+  },
+  run({ args }) {
+    return withErrorHandler(async () => {
+      const storage = getStorage(args);
+      if (args.expired) {
+        const expired = await storage.list({ status: "EXPIRED" });
+        if (expired.length === 0) {
+          outputSuccess("No expired invoices to delete.");
+          return;
+        }
+        if (!args.force) {
+          if (!process.stdin.isTTY) {
+            throw new Error(
+              `${expired.length} expired invoice(s) would be deleted. Use --force to confirm in non-interactive mode.`
+            );
+          }
+          const confirmed = await consola15.prompt(
+            `Delete ${expired.length} expired invoice(s)?`,
+            { type: "confirm", initial: false }
+          );
+          if (!confirmed) {
+            consola15.info("Cancelled.");
+            return;
+          }
+        }
+        for (const inv of expired) {
+          await storage.delete(inv.id);
+        }
+        outputSuccess(`Deleted ${expired.length} expired invoice(s).`);
+        return;
+      }
+      if (!args.id) {
+        throw new Error("Specify an invoice ID or use --expired to delete all expired invoices.");
+      }
+      const invoice3 = await storage.get(args.id);
+      if (!invoice3) {
+        throw new Error(`Offline invoice not found: ${args.id}`);
+      }
+      await storage.delete(args.id);
+      outputSuccess(`Deleted offline invoice ${args.id}`);
+    });
+  }
+});
+var offlineCommand = defineCommand17({
+  meta: { name: "offline", description: "Offline invoice management" },
+  subCommands: { generate: generate3, list: list4, status: status6, submit, correct, delete: del }
+});
+
 // src/cli/index.ts
 var __dirname = dirname2(fileURLToPath(import.meta.url));
-var pkg = JSON.parse(readFileSync8(resolve(__dirname, "..", "package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync9(resolve(__dirname, "..", "package.json"), "utf-8"));
 var version = pkg.version;
-var main = defineCommand17({
+var main = defineCommand18({
   meta: {
     name: "ksef",
     version,
@@ -9292,6 +10379,7 @@ var main = defineCommand17({
     limits: limitsCommand,
     peppol: peppolCommand,
     "test-data": testDataCommand,
+    offline: offlineCommand,
     doctor: doctorCommand,
     completion: completionCommand
   }