ksef-client-ts 0.8.0 → 0.9.0

package/dist/index.cjs

@@ -412,7 +412,9 @@ var init_error_codes = __esm({
     init_cjs_shims();
     KSeFErrorCode = {
       BatchTimeout: 21208,
-      DuplicateInvoice: 440
+      DuplicateInvoice: 440,
+      /** The supplied public key identifier is unknown or points to a revoked key (KSeF API v2.5.0). */
+      UnknownPublicKeyId: 21470
     };
   }
 });
@@ -442,6 +444,38 @@ var init_ksef_batch_timeout_error = __esm({
   }
 });
 
+// src/errors/ksef-unknown-public-key-error.ts
+function messageOf(description) {
+  return description?.trim() || "The supplied public key identifier is unknown or revoked (KSeF 21470).";
+}
+var KSeFUnknownPublicKeyError;
+var init_ksef_unknown_public_key_error = __esm({
+  "src/errors/ksef-unknown-public-key-error.ts"() {
+    "use strict";
+    init_cjs_shims();
+    init_ksef_api_error();
+    init_error_codes();
+    KSeFUnknownPublicKeyError = class _KSeFUnknownPublicKeyError extends KSeFApiError {
+      statusCode = 400;
+      errorCode = KSeFErrorCode.UnknownPublicKeyId;
+      constructor(message, errorResponse) {
+        super(message, 400, errorResponse);
+        this.name = "KSeFUnknownPublicKeyError";
+      }
+      static fromLegacy(body) {
+        const detail = body?.exception?.exceptionDetailList?.find(
+          (d) => d.exceptionCode === KSeFErrorCode.UnknownPublicKeyId
+        );
+        return new _KSeFUnknownPublicKeyError(messageOf(detail?.exceptionDescription), body);
+      }
+      static fromProblem(problem) {
+        const detail = problem.errors?.find((e) => e.code === KSeFErrorCode.UnknownPublicKeyId);
+        return new _KSeFUnknownPublicKeyError(messageOf(detail?.description || problem.detail));
+      }
+    };
+  }
+});
+
 // src/errors/ksef-circuit-open-error.ts
 var KSeFCircuitOpenError;
 var init_ksef_circuit_open_error = __esm({
@@ -515,6 +549,7 @@ var init_errors = __esm({
     init_ksef_session_expired_error();
     init_ksef_validation_error();
     init_ksef_batch_timeout_error();
+    init_ksef_unknown_public_key_error();
     init_ksef_circuit_open_error();
     init_ksef_xsd_validation_error();
     init_error_codes();
@@ -805,6 +840,7 @@ var init_rest_client = __esm({
     init_ksef_gone_error();
     init_ksef_bad_request_error();
     init_ksef_batch_timeout_error();
+    init_ksef_unknown_public_key_error();
     init_error_codes();
     init_route_builder();
     init_transport();
@@ -819,6 +855,7 @@ var init_rest_client = __esm({
       circuitBreakerPolicy;
       authManager;
       presignedUrlPolicy;
+      onSystemWarning;
       constructor(options, config) {
         this.options = options;
         this.routeBuilder = new RouteBuilder(options.apiVersion);
@@ -828,23 +865,41 @@ var init_rest_client = __esm({
         this.circuitBreakerPolicy = config?.circuitBreakerPolicy ?? null;
         this.authManager = config?.authManager;
         this.presignedUrlPolicy = config?.presignedUrlPolicy;
+        this.onSystemWarning = config?.onSystemWarning;
       }
       async execute(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
         const body = await response.json();
         return { body, headers: response.headers, statusCode: response.status };
       }
       async executeVoid(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
       }
       async executeRaw(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
         const body = await response.arrayBuffer();
         return { body, headers: response.headers, statusCode: response.status };
       }
+      /** Surface the optional `X-System-Warning` response header (KSeF API v2.6.0). */
+      handleSystemWarning(response) {
+        const warning = response.headers.get("x-system-warning");
+        if (!warning) return;
+        if (this.onSystemWarning) {
+          try {
+            this.onSystemWarning(warning);
+          } catch (error) {
+            import_consola.consola.warn("onSystemWarning callback threw an exception (ignored):", error);
+          }
+        } else {
+          import_consola.consola.warn(`KSeF system warning: ${warning}`);
+        }
+      }
       async sendRequest(request) {
         const url = this.buildUrl(request);
         if (request.isPresigned() && this.presignedUrlPolicy) {
@@ -986,9 +1041,15 @@ var init_rest_client = __esm({
         if (response.status === 400) {
           const problem = tryParseProblem(isBadRequestProblem);
           if (problem) {
+            if (problem.errors?.some((e) => e.code === KSeFErrorCode.UnknownPublicKeyId)) {
+              throw KSeFUnknownPublicKeyError.fromProblem(problem);
+            }
             throw new KSeFBadRequestError(problem);
           }
           const legacy = parseJson();
+          if (hasErrorCode(legacy, KSeFErrorCode.UnknownPublicKeyId)) {
+            throw KSeFUnknownPublicKeyError.fromLegacy(legacy);
+          }
           if (hasErrorCode(legacy, KSeFErrorCode.BatchTimeout)) {
             throw KSeFBatchTimeoutError.fromResponse(400, legacy);
           }
@@ -2449,14 +2510,14 @@ var init_fa2 = __esm({
   }
 });
 
-// src/validation/schemas/rr1-v11e.ts
-var rr1_v11e_exports = {};
-__export(rr1_v11e_exports, {
-  RR1_V11ESchema: () => RR1_V11ESchema
+// src/validation/schemas/fa-rr1.ts
+var fa_rr1_exports = {};
+__export(fa_rr1_exports, {
+  FA_RR1Schema: () => FA_RR1Schema
 });
-var import_zod3, TKodFormularza3, TDataCzas3, TZnakowy4, TNaglowek3, TNrNIP3, TZnakowy5123, TPodmiot13, TKodKraju3, TGLN3, TAdres3, TAdresEmail3, TNumerTelefonu3, TStatusInfoPodatnika3, TZnakowy203, TNIPIdWew3, TWybor13, TPodmiot33, TRolaPodmiotu33, TKodWaluty3, TData3, TDataT3, TKwotowy4, TRodzajFaktury3, TTypKorekty3, TNumerKSeF3, TNaturalny3, TKluczWartosc3, TZnakowy503, TIlosci3, TKwotowy23, TProcentowy3, TStawkaPodatku3, TFormaPlatnosci3, TNrRB3, SWIFT_Type3, TRachunekBankowy3, TTekstowy3, TNrKRS3, TNrREGON3, RR1_V11ESchema;
-var init_rr1_v11e = __esm({
-  "src/validation/schemas/rr1-v11e.ts"() {
+var import_zod3, TKodFormularza3, TDataCzas3, TZnakowy4, TNaglowek3, TNrNIP3, TZnakowy5123, TPodmiot13, TKodKraju3, TGLN3, TAdres3, TAdresEmail3, TNumerTelefonu3, TStatusInfoPodatnika3, TZnakowy203, TNIPIdWew3, TWybor13, TPodmiot33, TRolaPodmiotu33, TKodWaluty3, TData3, TDataT3, TKwotowy4, TRodzajFaktury3, TTypKorekty3, TNumerKSeF3, TNaturalny3, TKluczWartosc3, TZnakowy503, TIlosci3, TKwotowy23, TProcentowy3, TStawkaPodatku3, TFormaPlatnosci3, TNrRB3, SWIFT_Type3, TRachunekBankowy3, TTekstowy3, TNrKRS3, TNrREGON3, FA_RR1Schema;
+var init_fa_rr1 = __esm({
+  "src/validation/schemas/fa-rr1.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod3 = require("zod");
@@ -2526,7 +2587,7 @@ var init_rr1_v11e = __esm({
     TTekstowy3 = import_zod3.z.string().min(1).max(3500);
     TNrKRS3 = import_zod3.z.string().regex(/^\d{10}$/);
     TNrREGON3 = import_zod3.z.union([import_zod3.z.string().regex(/^\d{9}$/), import_zod3.z.string().regex(/^\d{14}$/)]);
-    RR1_V11ESchema = import_zod3.z.object({
+    FA_RR1Schema = import_zod3.z.object({
       "Naglowek": TNaglowek3,
       "Podmiot1": import_zod3.z.object({
         "DaneIdentyfikacyjne": TPodmiot13,
@@ -2655,224 +2716,89 @@ var init_rr1_v11e = __esm({
   }
 });
 
-// src/validation/schemas/rr1-v10e.ts
-var rr1_v10e_exports = {};
-__export(rr1_v10e_exports, {
-  RR1_V10ESchema: () => RR1_V10ESchema
+// src/validation/schemas/pef3.ts
+var pef3_exports = {};
+__export(pef3_exports, {
+  PEF3Schema: () => PEF3Schema
 });
-var import_zod4, TKodFormularza4, TDataCzas4, TZnakowy5, TNaglowek4, TNrNIP4, TZnakowy5124, TPodmiot14, TKodKraju4, TGLN4, TAdres4, TAdresEmail4, TNumerTelefonu4, TStatusInfoPodatnika4, TZnakowy204, TNIPIdWew4, TWybor14, TPodmiot34, TRolaPodmiotu34, TKodWaluty4, TData4, TDataT4, TKwotowy5, TRodzajFaktury4, TTypKorekty4, TNumerKSeF4, TNaturalny4, TKluczWartosc4, TZnakowy504, TIlosci4, TKwotowy24, TProcentowy4, TStawkaPodatku4, TFormaPlatnosci4, TNrRB4, SWIFT_Type4, TRachunekBankowy4, TTekstowy4, TNrKRS4, TNrREGON4, RR1_V10ESchema;
-var init_rr1_v10e = __esm({
-  "src/validation/schemas/rr1-v10e.ts"() {
+var import_zod4, InvoiceType, PEF3Schema;
+var init_pef3 = __esm({
+  "src/validation/schemas/pef3.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod4 = require("zod");
-    TKodFormularza4 = import_zod4.z.literal("FA_RR");
-    TDataCzas4 = import_zod4.z.string();
-    TZnakowy5 = import_zod4.z.string().min(1).max(256);
-    TNaglowek4 = import_zod4.z.object({
-      "KodFormularza": import_zod4.z.object({ "#text": TKodFormularza4, "@kodSystemowy": import_zod4.z.literal("FA_RR(1)"), "@wersjaSchemy": import_zod4.z.literal("1-0E") }).strict(),
-      "WariantFormularza": import_zod4.z.literal("1"),
-      "DataWytworzeniaFa": import_zod4.z.string(),
-      "SystemInfo": TZnakowy5.optional()
-    }).strict();
-    TNrNIP4 = import_zod4.z.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
-    TZnakowy5124 = import_zod4.z.string().min(1).max(512);
-    TPodmiot14 = import_zod4.z.object({
-      "NIP": TNrNIP4,
-      "Nazwa": TZnakowy5124
-    }).strict();
-    TKodKraju4 = import_zod4.z.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
-    TGLN4 = import_zod4.z.string().min(1).max(13);
-    TAdres4 = import_zod4.z.object({
-      "KodKraju": TKodKraju4,
-      "AdresL1": TZnakowy5124,
-      "AdresL2": TZnakowy5124.optional(),
-      "GLN": TGLN4.optional()
-    }).strict();
-    TAdresEmail4 = import_zod4.z.string().min(3).max(255).regex(/^(.)+@(.)+$/);
-    TNumerTelefonu4 = import_zod4.z.string().min(1).max(16);
-    TStatusInfoPodatnika4 = import_zod4.z.enum(["1", "2", "3", "4"]);
-    TZnakowy204 = import_zod4.z.string().min(1).max(20);
-    TNIPIdWew4 = import_zod4.z.string().min(1).max(20).regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}-\d{5}$/);
-    TWybor14 = import_zod4.z.literal("1");
-    TPodmiot34 = import_zod4.z.object({
-      "NIP": TNrNIP4.optional(),
-      "IDWew": TNIPIdWew4.optional(),
-      "BrakID": TWybor14.optional(),
-      "Nazwa": TZnakowy5124
-    }).strict();
-    TRolaPodmiotu34 = import_zod4.z.enum(["1", "2", "3", "5", "6", "7", "8", "9", "10", "11"]);
-    TKodWaluty4 = import_zod4.z.enum(["AED", "AFN", "ALL", "AMD", "ANG", "AOA", "ARS", "AUD", "AWG", "AZN", "BAM", "BBD", "BDT", "BGN", "BHD", "BIF", "BMD", "BND", "BOB", "BOV", "BRL", "BSD", "BTN", "BWP", "BYN", "BZD", "CAD", "CDF", "CHE", "CHF", "CHW", "CLF", "CLP", "CNY", "COP", "COU", "CRC", "CUC", "CUP", "CVE", "CZK", "DJF", "DKK", "DOP", "DZD", "EGP", "ERN", "ETB", "EUR", "FJD", "FKP", "GBP", "GEL", "GGP", "GHS", "GIP", "GMD", "GNF", "GTQ", "GYD", "HKD", "HNL", "HRK", "HTG", "HUF", "IDR", "ILS", "IMP", "INR", "IQD", "IRR", "ISK", "JEP", "JMD", "JOD", "JPY", "KES", "KGS", "KHR", "KMF", "KPW", "KRW", "KWD", "KYD", "KZT", "LAK", "LBP", "LKR", "LRD", "LSL", "LYD", "MAD", "MDL", "MGA", "MKD", "MMK", "MNT", "MOP", "MRU", "MUR", "MVR", "MWK", "MXN", "MXV", "MYR", "MZN", "NAD", "NGN", "NIO", "NOK", "NPR", "NZD", "OMR", "PAB", "PEN", "PGK", "PHP", "PKR", "PLN", "PYG", "QAR", "RON", "RSD", "RUB", "RWF", "SAR", "SBD", "SCR", "SDG", "SEK", "SGD", "SHP", "SLL", "SOS", "SRD", "SSP", "STN", "SVC", "SYP", "SZL", "THB", "TJS", "TMT", "TND", "TOP", "TRY", "TTD", "TWD", "TZS", "UAH", "UGX", "USD", "USN", "UYI", "UYU", "UYW", "UZS", "VES", "VND", "VUV", "WST", "XAF", "XAG", "XAU", "XBA", "XBB", "XBC", "XBD", "XCD", "XCG", "XDR", "XOF", "XPD", "XPF", "XPT", "XSU", "XUA", "XXX", "YER", "ZAR", "ZMW", "ZWL"]);
-    TData4 = import_zod4.z.string();
-    TDataT4 = import_zod4.z.string();
-    TKwotowy5 = import_zod4.z.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,2})?$/);
-    TRodzajFaktury4 = import_zod4.z.enum(["VAT_RR", "KOR_VAT_RR"]);
-    TTypKorekty4 = import_zod4.z.enum(["1", "2", "3", "4"]);
-    TNumerKSeF4 = import_zod4.z.string().regex(/^([1-9]((\d[1-9])|([1-9]\d))\d{7}|M\d{9}|[A-Z]{3}\d{7})-(20[2-9][0-9]|2[1-9][0-9]{2}|[3-9][0-9]{3})(0[1-9]|1[0-2])(0[1-9]|[1-2][0-9]|3[0-1])-([0-9A-F]{6})-?([0-9A-F]{6})-([0-9A-F]{2})$/);
-    TNaturalny4 = import_zod4.z.string();
-    TKluczWartosc4 = import_zod4.z.object({
-      "NrWiersza": TNaturalny4.optional(),
-      "Klucz": TZnakowy5,
-      "Wartosc": TZnakowy5
-    }).strict();
-    TZnakowy504 = import_zod4.z.string().min(1).max(50);
-    TIlosci4 = import_zod4.z.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,6})?$/);
-    TKwotowy24 = import_zod4.z.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
-    TProcentowy4 = import_zod4.z.coerce.number().min(0).max(100);
-    TStawkaPodatku4 = import_zod4.z.enum(["6.5", "7"]);
-    TFormaPlatnosci4 = import_zod4.z.literal("1");
-    TNrRB4 = import_zod4.z.string().min(10).max(34);
-    SWIFT_Type4 = import_zod4.z.string().regex(/^[A-Z]{6}[A-Z0-9]{2}([A-Z0-9]{3}){0,1}$/);
-    TRachunekBankowy4 = import_zod4.z.object({
-      "NrRB": TNrRB4,
-      "SWIFT": SWIFT_Type4.optional(),
-      "NazwaBanku": TZnakowy5.optional(),
-      "OpisRachunku": TZnakowy5.optional()
-    }).strict();
-    TTekstowy4 = import_zod4.z.string().min(1).max(3500);
-    TNrKRS4 = import_zod4.z.string().regex(/^\d{10}$/);
-    TNrREGON4 = import_zod4.z.union([import_zod4.z.string().regex(/^\d{9}$/), import_zod4.z.string().regex(/^\d{14}$/)]);
-    RR1_V10ESchema = import_zod4.z.object({
-      "Naglowek": TNaglowek4,
-      "Podmiot1": import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot14,
-        "Adres": TAdres4,
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "NrKontrahenta": TZnakowy5.optional()
-      }).strict(),
-      "Podmiot2": import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot14,
-        "Adres": TAdres4,
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "StatusInfoPodatnika": TStatusInfoPodatnika4.optional()
-      }).strict(),
-      "Podmiot3": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot34,
-        "Adres": TAdres4.optional(),
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "Rola": TRolaPodmiotu34.optional(),
-        "RolaInna": TWybor14.optional(),
-        "OpisRoli": TZnakowy5.optional()
-      }).strict()).min(0).max(100)).optional(),
-      "FakturaRR": import_zod4.z.object({
-        "KodWaluty": TKodWaluty4,
-        "P_1M": TZnakowy5.optional(),
-        "P_4A": TDataT4.optional(),
-        "P_4B": TDataT4,
-        "P_4C": TZnakowy5,
-        "P_11_1": TKwotowy5,
-        "P_11_1W": TKwotowy5.optional(),
-        "P_11_2": TKwotowy5,
-        "P_11_2W": TKwotowy5.optional(),
-        "P_12_1": TKwotowy5,
-        "P_12_1W": TKwotowy5.optional(),
-        "P_12_2": TZnakowy5,
-        "RodzajFaktury": TRodzajFaktury4,
-        "PrzyczynaKorekty": TZnakowy5.optional(),
-        "TypKorekty": TTypKorekty4.optional(),
-        "DaneFaKorygowanej": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "DataWystFaKorygowanej": TDataT4,
-          "NrFaKorygowanej": TZnakowy5,
-          "NrKSeF": TWybor14.optional(),
-          "NrKSeFFaKorygowanej": TNumerKSeF4.optional(),
-          "NrKSeFN": TWybor14.optional()
-        }).strict()).min(1).max(5e4)).optional(),
-        "NrFaKorygowany": TZnakowy5.optional(),
-        "Podmiot1K": import_zod4.z.object({
-          "DaneIdentyfikacyjne": TPodmiot14,
-          "Adres": TAdres4
-        }).strict().optional(),
-        "Podmiot2K": import_zod4.z.object({
-          "DaneIdentyfikacyjne": TPodmiot14,
-          "Adres": TAdres4
-        }).strict().optional(),
-        "DokumentZaplaty": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "NrDokumentu": TZnakowy5,
-          "DataDokumentu": TData4.optional()
-        }).strict()).min(0).max(50)).optional(),
-        "DodatkowyOpis": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TKluczWartosc4).min(0).max(1e4)).optional(),
-        "FakturaRRWiersz": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "NrWierszaFa": TNaturalny4,
-          "UU_ID": TZnakowy504.optional(),
-          "P_4AA": TDataT4.optional(),
-          "P_5": TZnakowy5,
-          "GTIN": TZnakowy204.optional(),
-          "PKWiU": TZnakowy504.optional(),
-          "CN": TZnakowy504.optional(),
-          "P_6A": TZnakowy5,
-          "P_6B": TIlosci4,
-          "P_6C": TZnakowy5,
-          "P_7": TKwotowy24,
-          "P_8": TKwotowy5,
-          "P_9": TStawkaPodatku4,
-          "P_10": TKwotowy5,
-          "P_11": TKwotowy5,
-          "StanPrzed": TWybor14.optional(),
-          "KursWaluty": TIlosci4.optional()
-        }).strict()).min(0).max(1e4)).optional(),
-        "Rozliczenie": import_zod4.z.object({
-          "Obciazenia": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-            "Kwota": TKwotowy5,
-            "Powod": TZnakowy5
-          }).strict()).min(0).max(100)).optional(),
-          "SumaObciazen": TKwotowy5.optional(),
-          "Odliczenia": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-            "Kwota": TKwotowy5,
-            "Powod": TZnakowy5
-          }).strict()).min(0).max(100)).optional(),
-          "SumaOdliczen": TKwotowy5.optional(),
-          "DoZaplaty": TKwotowy5.optional(),
-          "DoRozliczenia": TKwotowy5.optional()
-        }).strict().optional(),
-        "Platnosc": import_zod4.z.object({
-          "FormaPlatnosci": TFormaPlatnosci4.optional(),
-          "PlatnoscInna": TWybor14.optional(),
-          "OpisPlatnosci": TZnakowy5.optional(),
-          "RachunekBankowy1": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TRachunekBankowy4).min(0).max(3)).optional(),
-          "RachunekBankowy2": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TRachunekBankowy4).min(0).max(3)).optional(),
-          "IPKSeF": import_zod4.z.string().min(1).max(13).regex(/^[0-9]{3}[a-zA-Z0-9]{10}$/).optional(),
-          "LinkDoPlatnosci": import_zod4.z.string().min(1).max(512).regex(/^(https?):\/\/([a-zA-Z0-9][a-zA-Z0-9-]*\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?(\/[^\s?#]*)?\?([^#\s]*&)?IPKSeF=[0-9]{3}[a-zA-Z0-9]{10}(&[^#\s]*)?(#.*)?$/).optional()
-        }).strict().optional()
-      }).strict(),
-      "Stopka": import_zod4.z.object({
-        "Informacje": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "StopkaFaktury": TTekstowy4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "Rejestry": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "PelnaNazwa": TZnakowy5.optional(),
-          "KRS": TNrKRS4.optional(),
-          "REGON": TNrREGON4.optional(),
-          "BDO": import_zod4.z.string().min(1).max(9).optional()
-        }).strict()).min(0).max(100)).optional()
-      }).strict().optional()
+    InvoiceType = import_zod4.z.object({
+      "UBLExtensions": import_zod4.z.any().optional(),
+      "UBLVersionID": import_zod4.z.any().optional(),
+      "CustomizationID": import_zod4.z.any().optional(),
+      "ProfileID": import_zod4.z.any().optional(),
+      "ProfileExecutionID": import_zod4.z.any().optional(),
+      "ID": import_zod4.z.any(),
+      "CopyIndicator": import_zod4.z.any().optional(),
+      "UUID": import_zod4.z.any().optional(),
+      "IssueDate": import_zod4.z.any(),
+      "IssueTime": import_zod4.z.any().optional(),
+      "DueDate": import_zod4.z.any().optional(),
+      "InvoiceTypeCode": import_zod4.z.any().optional(),
+      "Note": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "TaxPointDate": import_zod4.z.any().optional(),
+      "DocumentCurrencyCode": import_zod4.z.any().optional(),
+      "TaxCurrencyCode": import_zod4.z.any().optional(),
+      "PricingCurrencyCode": import_zod4.z.any().optional(),
+      "PaymentCurrencyCode": import_zod4.z.any().optional(),
+      "PaymentAlternativeCurrencyCode": import_zod4.z.any().optional(),
+      "AccountingCostCode": import_zod4.z.any().optional(),
+      "AccountingCost": import_zod4.z.any().optional(),
+      "LineCountNumeric": import_zod4.z.any().optional(),
+      "BuyerReference": import_zod4.z.any().optional(),
+      "InvoicePeriod": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "OrderReference": import_zod4.z.any().optional(),
+      "BillingReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "DespatchDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ReceiptDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "StatementDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "OriginatorDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ContractDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AdditionalDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ProjectReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "Signature": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AccountingSupplierParty": import_zod4.z.any(),
+      "AccountingCustomerParty": import_zod4.z.any(),
+      "PayeeParty": import_zod4.z.any().optional(),
+      "BuyerCustomerParty": import_zod4.z.any().optional(),
+      "SellerSupplierParty": import_zod4.z.any().optional(),
+      "TaxRepresentativeParty": import_zod4.z.any().optional(),
+      "Delivery": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "DeliveryTerms": import_zod4.z.any().optional(),
+      "PaymentMeans": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "PaymentTerms": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "PrepaidPayment": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AllowanceCharge": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "TaxExchangeRate": import_zod4.z.any().optional(),
+      "PricingExchangeRate": import_zod4.z.any().optional(),
+      "PaymentExchangeRate": import_zod4.z.any().optional(),
+      "PaymentAlternativeExchangeRate": import_zod4.z.any().optional(),
+      "TaxTotal": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "WithholdingTaxTotal": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "LegalMonetaryTotal": import_zod4.z.any(),
+      "InvoiceLine": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(1))
     }).strict();
+    PEF3Schema = InvoiceType;
   }
 });
 
-// src/validation/schemas/pef3.ts
-var pef3_exports = {};
-__export(pef3_exports, {
-  PEF3Schema: () => PEF3Schema
+// src/validation/schemas/pef-kor3.ts
+var pef_kor3_exports = {};
+__export(pef_kor3_exports, {
+  PEF_KOR3Schema: () => PEF_KOR3Schema
 });
-var import_zod5, InvoiceType, PEF3Schema;
-var init_pef3 = __esm({
-  "src/validation/schemas/pef3.ts"() {
+var import_zod5, CreditNoteType, PEF_KOR3Schema;
+var init_pef_kor3 = __esm({
+  "src/validation/schemas/pef-kor3.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod5 = require("zod");
-    InvoiceType = import_zod5.z.object({
+    CreditNoteType = import_zod5.z.object({
       "UBLExtensions": import_zod5.z.any().optional(),
       "UBLVersionID": import_zod5.z.any().optional(),
       "CustomizationID": import_zod5.z.any().optional(),
@@ -2883,10 +2809,9 @@ var init_pef3 = __esm({
       "UUID": import_zod5.z.any().optional(),
       "IssueDate": import_zod5.z.any(),
       "IssueTime": import_zod5.z.any().optional(),
-      "DueDate": import_zod5.z.any().optional(),
-      "InvoiceTypeCode": import_zod5.z.any().optional(),
-      "Note": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxPointDate": import_zod5.z.any().optional(),
+      "CreditNoteTypeCode": import_zod5.z.any().optional(),
+      "Note": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "DocumentCurrencyCode": import_zod5.z.any().optional(),
       "TaxCurrencyCode": import_zod5.z.any().optional(),
       "PricingCurrencyCode": import_zod5.z.any().optional(),
@@ -2897,15 +2822,15 @@ var init_pef3 = __esm({
       "LineCountNumeric": import_zod5.z.any().optional(),
       "BuyerReference": import_zod5.z.any().optional(),
       "InvoicePeriod": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "DiscrepancyResponse": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "OrderReference": import_zod5.z.any().optional(),
       "BillingReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "DespatchDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "ReceiptDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "StatementDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "OriginatorDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "ContractDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "AdditionalDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "ProjectReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "StatementDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "OriginatorDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "Signature": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "AccountingSupplierParty": import_zod5.z.any(),
       "AccountingCustomerParty": import_zod5.z.any(),
@@ -2914,87 +2839,17 @@ var init_pef3 = __esm({
       "SellerSupplierParty": import_zod5.z.any().optional(),
       "TaxRepresentativeParty": import_zod5.z.any().optional(),
       "Delivery": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "DeliveryTerms": import_zod5.z.any().optional(),
+      "DeliveryTerms": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "PaymentMeans": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "PaymentTerms": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "PrepaidPayment": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "AllowanceCharge": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxExchangeRate": import_zod5.z.any().optional(),
       "PricingExchangeRate": import_zod5.z.any().optional(),
       "PaymentExchangeRate": import_zod5.z.any().optional(),
       "PaymentAlternativeExchangeRate": import_zod5.z.any().optional(),
+      "AllowanceCharge": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxTotal": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "WithholdingTaxTotal": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "LegalMonetaryTotal": import_zod5.z.any(),
-      "InvoiceLine": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(1))
-    }).strict();
-    PEF3Schema = InvoiceType;
-  }
-});
-
-// src/validation/schemas/pef-kor3.ts
-var pef_kor3_exports = {};
-__export(pef_kor3_exports, {
-  PEF_KOR3Schema: () => PEF_KOR3Schema
-});
-var import_zod6, CreditNoteType, PEF_KOR3Schema;
-var init_pef_kor3 = __esm({
-  "src/validation/schemas/pef-kor3.ts"() {
-    "use strict";
-    init_cjs_shims();
-    import_zod6 = require("zod");
-    CreditNoteType = import_zod6.z.object({
-      "UBLExtensions": import_zod6.z.any().optional(),
-      "UBLVersionID": import_zod6.z.any().optional(),
-      "CustomizationID": import_zod6.z.any().optional(),
-      "ProfileID": import_zod6.z.any().optional(),
-      "ProfileExecutionID": import_zod6.z.any().optional(),
-      "ID": import_zod6.z.any(),
-      "CopyIndicator": import_zod6.z.any().optional(),
-      "UUID": import_zod6.z.any().optional(),
-      "IssueDate": import_zod6.z.any(),
-      "IssueTime": import_zod6.z.any().optional(),
-      "TaxPointDate": import_zod6.z.any().optional(),
-      "CreditNoteTypeCode": import_zod6.z.any().optional(),
-      "Note": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DocumentCurrencyCode": import_zod6.z.any().optional(),
-      "TaxCurrencyCode": import_zod6.z.any().optional(),
-      "PricingCurrencyCode": import_zod6.z.any().optional(),
-      "PaymentCurrencyCode": import_zod6.z.any().optional(),
-      "PaymentAlternativeCurrencyCode": import_zod6.z.any().optional(),
-      "AccountingCostCode": import_zod6.z.any().optional(),
-      "AccountingCost": import_zod6.z.any().optional(),
-      "LineCountNumeric": import_zod6.z.any().optional(),
-      "BuyerReference": import_zod6.z.any().optional(),
-      "InvoicePeriod": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DiscrepancyResponse": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "OrderReference": import_zod6.z.any().optional(),
-      "BillingReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DespatchDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "ReceiptDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "ContractDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "AdditionalDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "StatementDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "OriginatorDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "Signature": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "AccountingSupplierParty": import_zod6.z.any(),
-      "AccountingCustomerParty": import_zod6.z.any(),
-      "PayeeParty": import_zod6.z.any().optional(),
-      "BuyerCustomerParty": import_zod6.z.any().optional(),
-      "SellerSupplierParty": import_zod6.z.any().optional(),
-      "TaxRepresentativeParty": import_zod6.z.any().optional(),
-      "Delivery": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DeliveryTerms": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "PaymentMeans": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "PaymentTerms": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "TaxExchangeRate": import_zod6.z.any().optional(),
-      "PricingExchangeRate": import_zod6.z.any().optional(),
-      "PaymentExchangeRate": import_zod6.z.any().optional(),
-      "PaymentAlternativeExchangeRate": import_zod6.z.any().optional(),
-      "AllowanceCharge": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "TaxTotal": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "LegalMonetaryTotal": import_zod6.z.any(),
-      "CreditNoteLine": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(1))
+      "CreditNoteLine": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(1))
     }).strict();
     PEF_KOR3Schema = CreditNoteType;
   }
@@ -3008,15 +2863,13 @@ var init_schemas = __esm({
     init_cjs_shims();
     init_fa3();
     init_fa2();
-    init_rr1_v11e();
-    init_rr1_v10e();
+    init_fa_rr1();
     init_pef3();
     init_pef_kor3();
     NAMESPACE_MAP = {
       "http://crd.gov.pl/wzor/2025/06/25/13775/": "FA3",
       "http://crd.gov.pl/wzor/2023/06/29/12648/": "FA2",
-      "http://crd.gov.pl/wzor/2026/03/06/14189/": "RR1_V11E",
-      "http://crd.gov.pl/wzor/2026/02/17/14164/": "RR1_V10E",
+      "http://crd.gov.pl/wzor/2026/03/06/14189/": "FA_RR1",
       "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2": "PEF3",
       "urn:oasis:names:specification:ubl:schema:xsd:CreditNote-2": "PEF_KOR3"
     };
@@ -3035,11 +2888,8 @@ async function loadSchema(type) {
     case "FA2":
       mod = await Promise.resolve().then(() => (init_fa2(), fa2_exports));
       break;
-    case "RR1_V11E":
-      mod = await Promise.resolve().then(() => (init_rr1_v11e(), rr1_v11e_exports));
-      break;
-    case "RR1_V10E":
-      mod = await Promise.resolve().then(() => (init_rr1_v10e(), rr1_v10e_exports));
+    case "FA_RR1":
+      mod = await Promise.resolve().then(() => (init_fa_rr1(), fa_rr1_exports));
       break;
     case "PEF3":
       mod = await Promise.resolve().then(() => (init_pef3(), pef3_exports));
@@ -3080,7 +2930,7 @@ var init_schema_registry = __esm({
        * List all available schema types.
        */
       availableSchemas() {
-        return ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
+        return ["FA3", "FA2", "FA_RR1", "PEF3", "PEF_KOR3"];
       },
       /**
        * Detect schema type from XML namespace URI and/or root element name.
@@ -4477,8 +4327,8 @@ var init_certificate_fetcher = __esm({
     init_routes();
     CertificateFetcher = class {
       restClient;
-      symmetricKeyPem;
-      ksefTokenPem;
+      symmetricKey;
+      ksefToken;
       initialized = false;
       constructor(restClient) {
         this.restClient = restClient;
@@ -4491,17 +4341,38 @@ var init_certificate_fetcher = __esm({
         this.initialized = false;
         await this.fetchCertificates();
       }
+      /**
+       * Immutable snapshot ({@link SelectedCertificate}) of the selected
+       * SymmetricKeyEncryption certificate. The stored object is replaced wholesale
+       * by {@link refresh}, never mutated, so holding the returned reference yields a
+       * consistent pem + publicKeyId pair even if a concurrent refresh swaps the cache.
+       */
+      getSymmetricKeyEncryption() {
+        return { ...this.requireSelected(this.symmetricKey) };
+      }
+      /** Immutable snapshot of the selected KsefTokenEncryption certificate. See {@link getSymmetricKeyEncryption}. */
+      getKsefTokenEncryption() {
+        return { ...this.requireSelected(this.ksefToken) };
+      }
       getSymmetricKeyEncryptionPem() {
-        if (!this.symmetricKeyPem) {
-          throw new Error("CertificateFetcher not initialized. Call init() first.");
-        }
-        return this.symmetricKeyPem;
+        return this.requireSelected(this.symmetricKey).pem;
       }
       getKsefTokenEncryptionPem() {
-        if (!this.ksefTokenPem) {
+        return this.requireSelected(this.ksefToken).pem;
+      }
+      /** Public key identifier of the selected SymmetricKeyEncryption certificate (KSeF API v2.5.0). */
+      getSymmetricKeyPublicKeyId() {
+        return this.requireSelected(this.symmetricKey).publicKeyId;
+      }
+      /** Public key identifier of the selected KsefTokenEncryption certificate (KSeF API v2.5.0). */
+      getKsefTokenPublicKeyId() {
+        return this.requireSelected(this.ksefToken).publicKeyId;
+      }
+      requireSelected(selected) {
+        if (!selected) {
           throw new Error("CertificateFetcher not initialized. Call init() first.");
         }
-        return this.ksefTokenPem;
+        return selected;
       }
       async fetchCertificates() {
         const request = RestRequest.get(Routes.Security.publicKeyCertificates);
@@ -4510,19 +4381,27 @@ var init_certificate_fetcher = __esm({
         if (!certs || certs.length === 0) {
           throw new Error("No public key certificates returned from KSeF API.");
         }
-        const symmetricCert = certs.find((c) => c.usage.includes("SymmetricKeyEncryption"));
-        if (!symmetricCert) {
-          throw new Error("No SymmetricKeyEncryption certificate found.");
-        }
-        this.symmetricKeyPem = this.derBase64ToPem(symmetricCert.certificate);
-        const tokenCerts = certs.filter((c) => c.usage.includes("KsefTokenEncryption")).sort((a, b) => a.validFrom.localeCompare(b.validFrom));
-        const tokenCert = tokenCerts[0];
-        if (!tokenCert) {
-          throw new Error("No KsefTokenEncryption certificate found.");
-        }
-        this.ksefTokenPem = this.derBase64ToPem(tokenCert.certificate);
+        this.symmetricKey = this.select(certs, "SymmetricKeyEncryption");
+        this.ksefToken = this.select(certs, "KsefTokenEncryption");
         this.initialized = true;
       }
+      /**
+       * Select the certificate to use for a given usage under key rotation:
+       * filter to currently-valid certificates (validFrom ≤ now < validTo) and pick
+       * the newest by validFrom. If none are currently valid, fall back to the newest
+       * overall so the server can reject it with a clear error rather than sending nothing.
+       */
+      select(certs, usage) {
+        const candidates = certs.filter((c) => c.usage.includes(usage));
+        if (candidates.length === 0) {
+          throw new Error(`No ${usage} certificate found.`);
+        }
+        const now = Date.now();
+        const byNewestValidFrom = (a, b) => Date.parse(b.validFrom) - Date.parse(a.validFrom);
+        const valid = candidates.filter((c) => Date.parse(c.validFrom) <= now && now < Date.parse(c.validTo)).sort(byNewestValidFrom);
+        const chosen = valid[0] ?? [...candidates].sort(byNewestValidFrom)[0];
+        return { pem: this.derBase64ToPem(chosen.certificate), publicKeyId: chosen.publicKeyId };
+      }
       derBase64ToPem(base64Der) {
         const lines = [];
         for (let i = 0; i < base64Der.length; i += 64) {
@@ -4578,6 +4457,14 @@ var init_cryptography_service = __esm({
       async init() {
         await this.fetcher.init();
       }
+      /** Re-fetch KSeF public certificates, discarding the cached selection (used for key-rotation recovery). */
+      async refresh() {
+        await this.fetcher.refresh();
+      }
+      /** Identifier of the KsefTokenEncryption public key used by {@link encryptKsefToken} (KSeF API v2.5.0). */
+      getKsefTokenPublicKeyId() {
+        return this.fetcher.getKsefTokenPublicKeyId();
+      }
       // ---------------------------------------------------------------------------
       // AES-256-CBC
       // ---------------------------------------------------------------------------
@@ -4623,11 +4510,12 @@ var init_cryptography_service = __esm({
       async getEncryptionData() {
         const key = crypto2.randomBytes(32);
         const iv = crypto2.randomBytes(16);
-        const certPem = this.fetcher.getSymmetricKeyEncryptionPem();
-        const encryptedKey = await this.rsaOaepEncrypt(certPem, new Uint8Array(key));
+        const cert = this.fetcher.getSymmetricKeyEncryption();
+        const encryptedKey = await this.rsaOaepEncrypt(cert.pem, new Uint8Array(key));
         const encryptionInfo = {
           encryptedSymmetricKey: Buffer.from(encryptedKey).toString("base64"),
-          initializationVector: iv.toString("base64")
+          initializationVector: iv.toString("base64"),
+          publicKeyId: cert.publicKeyId
         };
         return {
           cipherKey: new Uint8Array(key),
@@ -4652,9 +4540,29 @@ var init_cryptography_service = __esm({
        * `[ephemeralSPKI | nonce(12) | ciphertext+tag]`.
        */
       async encryptKsefToken(token, challengeTimestamp) {
+        return this.encryptKsefTokenWithCertPem(
+          this.fetcher.getKsefTokenEncryptionPem(),
+          token,
+          challengeTimestamp
+        );
+      }
+      /**
+       * Encrypt a KSeF token and return it together with the public key id of the
+       * exact certificate used.
+       *
+       * Both values come from a single certificate snapshot taken before any
+       * `await`, so a concurrent {@link refresh} cannot tag the ciphertext with a
+       * different key than it was encrypted under (KSeF API v2.5.0). Prefer this over
+       * pairing {@link encryptKsefToken} with a separate {@link getKsefTokenPublicKeyId}.
+       */
+      async encryptKsefTokenWithKeyId(token, challengeTimestamp) {
+        const cert = this.fetcher.getKsefTokenEncryption();
+        const encryptedToken = await this.encryptKsefTokenWithCertPem(cert.pem, token, challengeTimestamp);
+        return { encryptedToken, publicKeyId: cert.publicKeyId };
+      }
+      async encryptKsefTokenWithCertPem(certPem, token, challengeTimestamp) {
         const timestampMs = new Date(challengeTimestamp).getTime();
         const plaintext = Buffer.from(`${token}|${timestampMs}`, "utf-8");
-        const certPem = this.fetcher.getKsefTokenEncryptionPem();
         const cert = new crypto2.X509Certificate(certPem);
         const publicKey = cert.publicKey;
         if (publicKey.asymmetricKeyType === "rsa") {
@@ -5173,7 +5081,7 @@ var init_auth_xml_builder = __esm({
   "src/crypto/auth-xml-builder.ts"() {
     "use strict";
     init_cjs_shims();
-    AUTH_TOKEN_REQUEST_NS = "http://ksef.mf.gov.pl/auth/token/2.0";
+    AUTH_TOKEN_REQUEST_NS = "http://ksef.mf.gov.pl/auth/token/2.1";
   }
 });
 
@@ -5335,6 +5243,156 @@ var init_zip = __esm({
   }
 });
 
+// src/utils/targz.ts
+var targz_exports = {};
+__export(targz_exports, {
+  createTarGz: () => createTarGz,
+  extractTarGz: () => extractTarGz
+});
+async function createTarGz(entries) {
+  const packer = (0, import_tar_stream.pack)();
+  const gzip = packer.pipe((0, import_node_zlib.createGzip)());
+  const chunks = [];
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const fail = (err) => {
+      if (settled) return;
+      settled = true;
+      reject(err);
+    };
+    packer.on("error", fail);
+    gzip.on("error", fail);
+    gzip.on("data", (chunk) => chunks.push(chunk));
+    gzip.on("end", () => {
+      if (settled) return;
+      settled = true;
+      resolve(Buffer.concat(chunks));
+    });
+    try {
+      for (const entry of entries) {
+        const content = Buffer.from(entry.content);
+        packer.entry({ name: entry.fileName, size: content.length }, content);
+      }
+      packer.finalize();
+    } catch (err) {
+      fail(err instanceof Error ? err : new Error(String(err)));
+    }
+  });
+}
+async function extractTarGz(buffer, options = {}) {
+  const limits = { ...DEFAULT_LIMITS, ...options };
+  const ratioCeiling = limits.maxCompressionRatio !== null && limits.maxCompressionRatio !== void 0 && buffer.length > 0 ? buffer.length * limits.maxCompressionRatio : null;
+  return new Promise((resolve, reject) => {
+    const source = import_node_stream.Readable.from(buffer);
+    const gunzip = (0, import_node_zlib.createGunzip)();
+    const extractor = (0, import_tar_stream.extract)();
+    const files = /* @__PURE__ */ new Map();
+    let extractedFileCount = 0;
+    let totalUncompressed = 0;
+    let settled = false;
+    const cleanup = () => {
+      source.destroy();
+      gunzip.destroy();
+      extractor.destroy();
+    };
+    const fail = (err) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      reject(err);
+    };
+    const succeed = () => {
+      if (settled) return;
+      settled = true;
+      resolve(files);
+    };
+    gunzip.on("data", (chunk) => {
+      totalUncompressed += chunk.length;
+      if (limits.maxTotalUncompressedSize > 0 && totalUncompressed > limits.maxTotalUncompressedSize) {
+        fail(new Error("tar.gz exceeds max_total_uncompressed_size"));
+        return;
+      }
+      if (ratioCeiling !== null && totalUncompressed > ratioCeiling) {
+        fail(new Error("tar.gz exceeds max_compression_ratio"));
+      }
+    });
+    extractor.on("entry", (header, stream, next) => {
+      if (settled) {
+        stream.resume();
+        return;
+      }
+      if (header.type !== "file") {
+        stream.resume();
+        stream.on("end", next);
+        return;
+      }
+      if (limits.maxFiles > 0 && extractedFileCount >= limits.maxFiles) {
+        fail(new Error("tar.gz contains too many files"));
+        return;
+      }
+      const chunks = [];
+      let entrySize = 0;
+      stream.on("data", (chunk) => {
+        if (settled) return;
+        entrySize += chunk.length;
+        if (limits.maxFileUncompressedSize > 0 && entrySize > limits.maxFileUncompressedSize) {
+          fail(new Error("tar.gz entry exceeds max_file_uncompressed_size"));
+          return;
+        }
+        chunks.push(chunk);
+      });
+      stream.on("error", fail);
+      stream.on("end", () => {
+        if (settled) return;
+        extractedFileCount += 1;
+        files.set(header.name, Buffer.concat(chunks));
+        next();
+      });
+    });
+    extractor.on("finish", succeed);
+    extractor.on("error", fail);
+    gunzip.on("error", fail);
+    source.on("error", fail);
+    source.pipe(gunzip).pipe(extractor);
+  });
+}
+var import_node_zlib, import_node_stream, import_tar_stream, DEFAULT_LIMITS;
+var init_targz = __esm({
+  "src/utils/targz.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_node_zlib = require("node:zlib");
+    import_node_stream = require("node:stream");
+    import_tar_stream = require("tar-stream");
+    DEFAULT_LIMITS = {
+      maxFiles: 1e4,
+      maxTotalUncompressedSize: 2e9,
+      maxFileUncompressedSize: 5e8,
+      maxCompressionRatio: 200
+    };
+  }
+});
+
+// src/crypto/with-key-rotation-retry.ts
+async function withKeyRotationRetry(crypto8, op) {
+  try {
+    return await op();
+  } catch (err) {
+    if (err instanceof KSeFUnknownPublicKeyError) {
+      await crypto8.refresh();
+      return await op();
+    }
+    throw err;
+  }
+}
+var init_with_key_rotation_retry = __esm({
+  "src/crypto/with-key-rotation-retry.ts"() {
+    "use strict";
+    init_cjs_shims();
+    init_ksef_unknown_public_key_error();
+  }
+});
+
 // src/offline/holidays.ts
 function toDateKey(d) {
   return d.toISOString().slice(0, 10);
@@ -5512,6 +5570,7 @@ var init_offline_invoice_workflow = __esm({
     import_node_crypto3 = __toESM(require("node:crypto"), 1);
     init_ksef_api_error();
     init_deadline();
+    init_with_key_rotation_retry();
     init_document_structures();
     OfflineInvoiceWorkflow = class {
       constructor(qrService) {
@@ -5618,11 +5677,14 @@ var init_offline_invoice_workflow = __esm({
         }
         if (pending.length === 0) return result;
         await client.crypto.init();
-        const encData = await client.crypto.getEncryptionData();
         const formCode = options.formCode ?? DEFAULT_FORM_CODE;
-        const openResp = await client.onlineSession.openSession(
-          { formCode, encryption: encData.encryptionInfo }
-        );
+        const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+          const encData2 = await client.crypto.getEncryptionData();
+          const openResp2 = await client.onlineSession.openSession(
+            { formCode, encryption: encData2.encryptionInfo }
+          );
+          return { encData: encData2, openResp: openResp2 };
+        });
         const sessionRef = openResp.referenceNumber;
         try {
           for (const inv of pending) {
@@ -5707,11 +5769,14 @@ var init_offline_invoice_workflow = __esm({
         }
         const originalHash = import_node_crypto3.default.createHash("sha256").update(original.invoiceXml).digest("base64");
         await client.crypto.init();
-        const encData = await client.crypto.getEncryptionData();
         const formCode = options.formCode ?? DEFAULT_FORM_CODE;
-        const openResp = await client.onlineSession.openSession(
-          { formCode, encryption: encData.encryptionInfo }
-        );
+        const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+          const encData2 = await client.crypto.getEncryptionData();
+          const openResp2 = await client.onlineSession.openSession(
+            { formCode, encryption: encData2.encryptionInfo }
+          );
+          return { encData: encData2, openResp: openResp2 };
+        });
         const sessionRef = openResp.referenceNumber;
         try {
           const data = new TextEncoder().encode(correctedInvoiceXml);
@@ -5833,6 +5898,9 @@ function buildRestClientConfig(options, authManager) {
       allowedHosts: [...base.allowedHosts, ...options.presignedUrlHosts]
     };
   }
+  if (options?.onSystemWarning) {
+    config.onSystemWarning = options.onSystemWarning;
+  }
   return config;
 }
 var KSeFClient;
@@ -5862,6 +5930,7 @@ var init_client = __esm({
     init_test_data();
     init_certificate_fetcher();
     init_cryptography_service();
+    init_with_key_rotation_retry();
     init_verification_link_service();
     init_auth_xml_builder();
     init_offline_invoice_workflow();
@@ -5928,11 +5997,14 @@ var init_client = __esm({
       async loginWithToken(token, nip) {
         const challenge = await this.auth.getChallenge();
         await this.crypto.init();
-        const encryptedToken = await this.crypto.encryptKsefToken(token, challenge.timestamp);
-        const submitResult = await this.auth.submitKsefTokenAuthRequest({
-          challenge: challenge.challenge,
-          contextIdentifier: { type: "Nip", value: nip },
-          encryptedToken: Buffer.from(encryptedToken).toString("base64")
+        const submitResult = await withKeyRotationRetry(this.crypto, async () => {
+          const { encryptedToken, publicKeyId } = await this.crypto.encryptKsefTokenWithKeyId(token, challenge.timestamp);
+          return this.auth.submitKsefTokenAuthRequest({
+            challenge: challenge.challenge,
+            contextIdentifier: { type: "Nip", value: nip },
+            encryptedToken: Buffer.from(encryptedToken).toString("base64"),
+            publicKeyId
+          });
         });
         const authToken = submitResult.authenticationToken.token;
         await this.awaitAuthReady(submitResult.referenceNumber, authToken);
@@ -6036,6 +6108,7 @@ __export(index_exports, {
   KSeFRateLimitError: () => KSeFRateLimitError,
   KSeFSessionExpiredError: () => KSeFSessionExpiredError,
   KSeFUnauthorizedError: () => KSeFUnauthorizedError,
+  KSeFUnknownPublicKeyError: () => KSeFUnknownPublicKeyError,
   KSeFValidationError: () => KSeFValidationError,
   KSeFXsdValidationError: () => KSeFXsdValidationError,
   KsefNumber: () => KsefNumber,
@@ -6094,6 +6167,7 @@ __export(index_exports, {
   calculateBackoff: () => calculateBackoff,
   calculateOfflineDeadline: () => calculateOfflineDeadline,
   comparePKey: () => comparePKey,
+  createTarGz: () => createTarGz,
   createZip: () => createZip,
   decodeJwtPayload: () => decodeJwtPayload,
   deduplicateByKsefNumber: () => deduplicateByKsefNumber,
@@ -6106,6 +6180,7 @@ __export(index_exports, {
   exportInvoices: () => exportInvoices,
   extendDeadlineForMaintenance: () => extendDeadlineForMaintenance,
   extractInvoiceFields: () => extractInvoiceFields,
+  extractTarGz: () => extractTarGz,
   getDefaultReason: () => getDefaultReason,
   getEffectiveStartDate: () => getEffectiveStartDate,
   getFormCode: () => getFormCode,
@@ -6506,6 +6581,7 @@ var AuthKsefTokenRequestBuilder = class {
   challenge;
   contextIdentifier;
   encryptedToken;
+  publicKeyId;
   authorizationPolicy;
   withChallenge(challenge) {
     this.challenge = challenge;
@@ -6527,6 +6603,13 @@ var AuthKsefTokenRequestBuilder = class {
     this.encryptedToken = token;
     return this;
   }
+  withPublicKeyId(publicKeyId) {
+    if (!publicKeyId.trim()) {
+      throw KSeFValidationError.fromField("publicKeyId", "Public key id is required");
+    }
+    this.publicKeyId = publicKeyId.trim();
+    return this;
+  }
   withAuthorizationPolicy(policy) {
     this.authorizationPolicy = policy;
     return this;
@@ -6545,6 +6628,7 @@ var AuthKsefTokenRequestBuilder = class {
       challenge: this.challenge,
       contextIdentifier: this.contextIdentifier,
       encryptedToken: this.encryptedToken,
+      ...this.publicKeyId && { publicKeyId: this.publicKeyId },
       ...this.authorizationPolicy && { authorizationPolicy: this.authorizationPolicy }
     };
   }
@@ -6850,6 +6934,7 @@ var BatchFileBuilder = class {
       batchFile: {
         fileSize: zipBytes.length,
         fileHash: zipHash,
+        ...options?.compressionType && { compressionType: options.compressionType },
         fileParts
       },
       encryptedParts
@@ -6952,6 +7037,7 @@ var BatchFileBuilder = class {
       batchFile: {
         fileSize: zipSize,
         fileHash: zipMeta.hashSHA,
+        ...options?.compressionType && { compressionType: options.compressionType },
         fileParts
       },
       streamParts
@@ -7131,6 +7217,7 @@ function escapeXml2(str) {
 // src/utils/index.ts
 init_cjs_shims();
 init_zip();
+init_targz();
 init_jwt();
 
 // src/utils/hash.ts
@@ -7174,6 +7261,7 @@ init_auth_manager();
 init_online_session();
 init_session_status();
 init_document_structures();
+init_with_key_rotation_retry();
 
 // src/xml/index.ts
 init_cjs_shims();
@@ -7943,12 +8031,15 @@ function buildSessionHandle(params) {
 }
 async function openOnlineSession(client, options) {
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const openResp = await client.onlineSession.openSession(
-    { formCode, encryption: encData.encryptionInfo },
-    options?.upoVersion
-  );
+  const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData2 = await client.crypto.getEncryptionData();
+    const openResp2 = await client.onlineSession.openSession(
+      { formCode, encryption: encData2.encryptionInfo },
+      options?.upoVersion
+    );
+    return { encData: encData2, openResp: openResp2 };
+  });
   return buildSessionHandle({
     deps: {
       crypto: client.crypto,
@@ -8000,17 +8091,17 @@ async function openSendAndClose(client, invoices, options) {
 // src/workflows/batch-session-workflow.ts
 init_cjs_shims();
 init_document_structures();
+init_with_key_rotation_retry();
 async function uploadBatch(client, zipData, options) {
   if (options?.parallelism !== void 0 && (!Number.isInteger(options.parallelism) || options.parallelism < 1)) {
     throw new Error("parallelism must be a positive integer");
   }
   await client.crypto.init();
   if (options?.validate) {
-    const { unzip: unzip2 } = await Promise.resolve().then(() => (init_zip(), zip_exports));
     const { validateBatch: validateBatch2, batchValidationDetails: batchValidationDetails2 } = await Promise.resolve().then(() => (init_invoice_validator(), invoice_validator_exports));
     const { KSeFValidationError: KSeFValidationError2 } = await Promise.resolve().then(() => (init_ksef_validation_error(), ksef_validation_error_exports));
     const zipBuf = Buffer.isBuffer(zipData) ? zipData : Buffer.from(zipData.buffer, zipData.byteOffset, zipData.byteLength);
-    const files = await unzip2(zipBuf);
+    const files = options?.compressionType === "TarGz" ? await (await Promise.resolve().then(() => (init_targz(), targz_exports))).extractTarGz(zipBuf) : await (await Promise.resolve().then(() => (init_zip(), zip_exports))).unzip(zipBuf);
     const invoices = [...files.entries()].filter(([name]) => name.endsWith(".xml")).map(([name, data]) => ({ fileName: name, xml: data.toString("utf-8") }));
     if (invoices.length > 0) {
       const result2 = await validateBatch2(invoices);
@@ -8023,21 +8114,25 @@ async function uploadBatch(client, zipData, options) {
       }
     }
   }
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const encryptFn = (part) => client.crypto.encryptAES256(part, encData.cipherKey, encData.cipherIv);
-  const { batchFile, encryptedParts } = BatchFileBuilder.build(zipData, encryptFn, {
-    maxPartSize: options?.maxPartSize
+  const { batchFile, encryptedParts, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData = await client.crypto.getEncryptionData();
+    const encryptFn = (part) => client.crypto.encryptAES256(part, encData.cipherKey, encData.cipherIv);
+    const { batchFile: batchFile2, encryptedParts: encryptedParts2 } = BatchFileBuilder.build(zipData, encryptFn, {
+      maxPartSize: options?.maxPartSize,
+      compressionType: options?.compressionType
+    });
+    const openResp2 = await client.batchSession.openSession(
+      {
+        formCode,
+        encryption: encData.encryptionInfo,
+        batchFile: batchFile2,
+        offlineMode: options?.offlineMode
+      },
+      options?.upoVersion
+    );
+    return { batchFile: batchFile2, encryptedParts: encryptedParts2, openResp: openResp2 };
   });
-  const openResp = await client.batchSession.openSession(
-    {
-      formCode,
-      encryption: encData.encryptionInfo,
-      batchFile,
-      offlineMode: options?.offlineMode
-    },
-    options?.upoVersion
-  );
   const sendingParts = encryptedParts.map((part, i) => ({
     data: part.buffer.slice(part.byteOffset, part.byteOffset + part.byteLength),
     metadata: {
@@ -8071,26 +8166,29 @@ async function uploadBatchStream(client, zipStreamFactory, zipSize, options) {
     throw new Error("parallelism must be a positive integer");
   }
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const encryptStreamFn = (stream) => client.crypto.encryptAES256Stream(stream, encData.cipherKey, encData.cipherIv);
-  const hashStreamFn = (stream) => client.crypto.getFileMetadataFromStream(stream);
-  const { batchFile, streamParts } = await BatchFileBuilder.buildFromStream(
-    zipStreamFactory,
-    zipSize,
-    encryptStreamFn,
-    hashStreamFn,
-    { maxPartSize: options?.maxPartSize }
-  );
-  const openResp = await client.batchSession.openSession(
-    {
-      formCode,
-      encryption: encData.encryptionInfo,
-      batchFile,
-      offlineMode: options?.offlineMode
-    },
-    options?.upoVersion
-  );
+  const { streamParts, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData = await client.crypto.getEncryptionData();
+    const encryptStreamFn = (stream) => client.crypto.encryptAES256Stream(stream, encData.cipherKey, encData.cipherIv);
+    const hashStreamFn = (stream) => client.crypto.getFileMetadataFromStream(stream);
+    const { batchFile, streamParts: streamParts2 } = await BatchFileBuilder.buildFromStream(
+      zipStreamFactory,
+      zipSize,
+      encryptStreamFn,
+      hashStreamFn,
+      { maxPartSize: options?.maxPartSize, compressionType: options?.compressionType }
+    );
+    const openResp2 = await client.batchSession.openSession(
+      {
+        formCode,
+        encryption: encData.encryptionInfo,
+        batchFile,
+        offlineMode: options?.offlineMode
+      },
+      options?.upoVersion
+    );
+    return { streamParts: streamParts2, openResp: openResp2 };
+  });
   await client.batchSession.sendPartsWithStream(openResp, streamParts, options?.parallelism);
   await client.batchSession.closeSession(openResp.referenceNumber);
   const result = await pollUntil(
@@ -8139,13 +8237,19 @@ async function uploadBatchParsed(client, zipData, options) {
 // src/workflows/invoice-export-workflow.ts
 init_cjs_shims();
 init_zip();
+init_targz();
+init_with_key_rotation_retry();
 async function doExport(client, filters, options) {
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
-  const opResp = await client.invoices.exportInvoices({
-    encryption: encData.encryptionInfo,
-    filters,
-    onlyMetadata: options?.onlyMetadata
+  const { encData, opResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData2 = await client.crypto.getEncryptionData();
+    const opResp2 = await client.invoices.exportInvoices({
+      encryption: encData2.encryptionInfo,
+      filters,
+      onlyMetadata: options?.onlyMetadata,
+      ...options?.compressionType && { compressionType: options.compressionType }
+    });
+    return { encData: encData2, opResp: opResp2 };
   });
   const result = await pollUntil(
     () => client.invoices.getInvoiceExportStatus(opResp.referenceNumber),
@@ -8200,8 +8304,8 @@ async function exportAndDownload(client, filters, options) {
     decryptedParts.push(decrypted);
   }
   if (options?.extract) {
-    const zipBuffer = Buffer.concat(decryptedParts);
-    const files = await unzip(zipBuffer, options.unzipOptions);
+    const archiveBuffer = Buffer.concat(decryptedParts);
+    const files = options.compressionType === "TarGz" ? await extractTarGz(archiveBuffer, options.unzipOptions) : await unzip(archiveBuffer, options.unzipOptions);
     return { ...exportResult, files };
   }
   return {
@@ -8346,15 +8450,19 @@ var FileHwmStore = class {
 // src/workflows/auth-workflow.ts
 init_cjs_shims();
 init_auth_xml_builder();
+init_with_key_rotation_retry();
 async function authenticateWithToken(client, options) {
   const challenge = await client.auth.getChallenge();
   await client.crypto.init();
-  const encryptedToken = await client.crypto.encryptKsefToken(options.token, challenge.timestamp);
-  const submitResult = await client.auth.submitKsefTokenAuthRequest({
-    challenge: challenge.challenge,
-    contextIdentifier: { type: "Nip", value: options.nip },
-    encryptedToken: Buffer.from(encryptedToken).toString("base64"),
-    authorizationPolicy: options.authorizationPolicy
+  const submitResult = await withKeyRotationRetry(client.crypto, async () => {
+    const { encryptedToken, publicKeyId } = await client.crypto.encryptKsefTokenWithKeyId(options.token, challenge.timestamp);
+    return client.auth.submitKsefTokenAuthRequest({
+      challenge: challenge.challenge,
+      contextIdentifier: { type: "Nip", value: options.nip },
+      encryptedToken: Buffer.from(encryptedToken).toString("base64"),
+      publicKeyId,
+      authorizationPolicy: options.authorizationPolicy
+    });
   });
   const authToken = submitResult.authenticationToken.token;
   await pollUntil(
@@ -8637,6 +8745,7 @@ init_client();
   KSeFRateLimitError,
   KSeFSessionExpiredError,
   KSeFUnauthorizedError,
+  KSeFUnknownPublicKeyError,
   KSeFValidationError,
   KSeFXsdValidationError,
   KsefNumber,
@@ -8695,6 +8804,7 @@ init_client();
   calculateBackoff,
   calculateOfflineDeadline,
   comparePKey,
+  createTarGz,
   createZip,
   decodeJwtPayload,
   deduplicateByKsefNumber,
@@ -8707,6 +8817,7 @@ init_client();
   exportInvoices,
   extendDeadlineForMaintenance,
   extractInvoiceFields,
+  extractTarGz,
   getDefaultReason,
   getEffectiveStartDate,
   getFormCode,