ksef-client-ts 0.8.0 → 0.9.1

package/dist/index.cjs

@@ -401,6 +401,25 @@ var init_ksef_validation_error = __esm({
   }
 });
 
+// src/errors/ksef-metadata-pagination-error.ts
+var KSeFMetadataPaginationError;
+var init_ksef_metadata_pagination_error = __esm({
+  "src/errors/ksef-metadata-pagination-error.ts"() {
+    "use strict";
+    init_cjs_shims();
+    init_ksef_error();
+    KSeFMetadataPaginationError = class extends KSeFError {
+      /** The boundary date value that failed to advance. */
+      boundaryValue;
+      constructor(message, boundaryValue) {
+        super(message);
+        this.name = "KSeFMetadataPaginationError";
+        this.boundaryValue = boundaryValue;
+      }
+    };
+  }
+});
+
 // src/errors/error-codes.ts
 function hasErrorCode(body, code) {
   return !!body?.exception?.exceptionDetailList?.some((d) => d.exceptionCode === code);
@@ -412,7 +431,9 @@ var init_error_codes = __esm({
     init_cjs_shims();
     KSeFErrorCode = {
       BatchTimeout: 21208,
-      DuplicateInvoice: 440
+      DuplicateInvoice: 440,
+      /** The supplied public key identifier is unknown or points to a revoked key (KSeF API v2.5.0). */
+      UnknownPublicKeyId: 21470
     };
   }
 });
@@ -442,6 +463,38 @@ var init_ksef_batch_timeout_error = __esm({
   }
 });
 
+// src/errors/ksef-unknown-public-key-error.ts
+function messageOf(description) {
+  return description?.trim() || "The supplied public key identifier is unknown or revoked (KSeF 21470).";
+}
+var KSeFUnknownPublicKeyError;
+var init_ksef_unknown_public_key_error = __esm({
+  "src/errors/ksef-unknown-public-key-error.ts"() {
+    "use strict";
+    init_cjs_shims();
+    init_ksef_api_error();
+    init_error_codes();
+    KSeFUnknownPublicKeyError = class _KSeFUnknownPublicKeyError extends KSeFApiError {
+      statusCode = 400;
+      errorCode = KSeFErrorCode.UnknownPublicKeyId;
+      constructor(message, errorResponse) {
+        super(message, 400, errorResponse);
+        this.name = "KSeFUnknownPublicKeyError";
+      }
+      static fromLegacy(body) {
+        const detail = body?.exception?.exceptionDetailList?.find(
+          (d) => d.exceptionCode === KSeFErrorCode.UnknownPublicKeyId
+        );
+        return new _KSeFUnknownPublicKeyError(messageOf(detail?.exceptionDescription), body);
+      }
+      static fromProblem(problem) {
+        const detail = problem.errors?.find((e) => e.code === KSeFErrorCode.UnknownPublicKeyId);
+        return new _KSeFUnknownPublicKeyError(messageOf(detail?.description || problem.detail));
+      }
+    };
+  }
+});
+
 // src/errors/ksef-circuit-open-error.ts
 var KSeFCircuitOpenError;
 var init_ksef_circuit_open_error = __esm({
@@ -514,7 +567,9 @@ var init_errors = __esm({
     init_ksef_auth_status_error();
     init_ksef_session_expired_error();
     init_ksef_validation_error();
+    init_ksef_metadata_pagination_error();
     init_ksef_batch_timeout_error();
+    init_ksef_unknown_public_key_error();
     init_ksef_circuit_open_error();
     init_ksef_xsd_validation_error();
     init_error_codes();
@@ -805,6 +860,7 @@ var init_rest_client = __esm({
     init_ksef_gone_error();
     init_ksef_bad_request_error();
     init_ksef_batch_timeout_error();
+    init_ksef_unknown_public_key_error();
     init_error_codes();
     init_route_builder();
     init_transport();
@@ -819,6 +875,7 @@ var init_rest_client = __esm({
       circuitBreakerPolicy;
       authManager;
       presignedUrlPolicy;
+      onSystemWarning;
       constructor(options, config) {
         this.options = options;
         this.routeBuilder = new RouteBuilder(options.apiVersion);
@@ -828,23 +885,41 @@ var init_rest_client = __esm({
         this.circuitBreakerPolicy = config?.circuitBreakerPolicy ?? null;
         this.authManager = config?.authManager;
         this.presignedUrlPolicy = config?.presignedUrlPolicy;
+        this.onSystemWarning = config?.onSystemWarning;
       }
       async execute(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
         const body = await response.json();
         return { body, headers: response.headers, statusCode: response.status };
       }
       async executeVoid(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
       }
       async executeRaw(request) {
         const response = await this.sendRequest(request);
         await this.ensureSuccess(response);
+        this.handleSystemWarning(response);
         const body = await response.arrayBuffer();
         return { body, headers: response.headers, statusCode: response.status };
       }
+      /** Surface the optional `X-System-Warning` response header (KSeF API v2.6.0). */
+      handleSystemWarning(response) {
+        const warning = response.headers.get("x-system-warning");
+        if (!warning) return;
+        if (this.onSystemWarning) {
+          try {
+            this.onSystemWarning(warning);
+          } catch (error) {
+            import_consola.consola.warn("onSystemWarning callback threw an exception (ignored):", error);
+          }
+        } else {
+          import_consola.consola.warn(`KSeF system warning: ${warning}`);
+        }
+      }
       async sendRequest(request) {
         const url = this.buildUrl(request);
         if (request.isPresigned() && this.presignedUrlPolicy) {
@@ -986,9 +1061,15 @@ var init_rest_client = __esm({
         if (response.status === 400) {
           const problem = tryParseProblem(isBadRequestProblem);
           if (problem) {
+            if (problem.errors?.some((e) => e.code === KSeFErrorCode.UnknownPublicKeyId)) {
+              throw KSeFUnknownPublicKeyError.fromProblem(problem);
+            }
             throw new KSeFBadRequestError(problem);
           }
           const legacy = parseJson();
+          if (hasErrorCode(legacy, KSeFErrorCode.UnknownPublicKeyId)) {
+            throw KSeFUnknownPublicKeyError.fromLegacy(legacy);
+          }
           if (hasErrorCode(legacy, KSeFErrorCode.BatchTimeout)) {
             throw KSeFBatchTimeoutError.fromResponse(400, legacy);
           }
@@ -1508,6 +1589,9 @@ function isValidCertificateName(value) {
 function isValidCertificateFingerprint(value) {
   return CertificateFingerprint.test(value);
 }
+function isValidCertificateSerialNumber(value) {
+  return CertificateSerialNumber.test(value);
+}
 function isValidBase64(value) {
   return Base64String.test(value);
 }
@@ -1517,7 +1601,7 @@ function isValidIp4Address(value) {
 function isValidSha256Base64(value) {
   return Sha256Base64.test(value);
 }
-var NIP_PATTERN_CORE, VAT_UE_PATTERN_CORE, Nip, VatUe, NipVatUe, InternalId, PeppolId, ReferenceNumber, KsefNumber, KsefNumberV35, KsefNumberV36, CertificateName, Pesel, CertificateFingerprint, Base64String, Ip4Address, Ip4Range, Ip4Mask, Sha256Base64, NIP_WEIGHTS, PESEL_WEIGHTS, CRC8_POLY;
+var NIP_PATTERN_CORE, VAT_UE_PATTERN_CORE, Nip, VatUe, NipVatUe, InternalId, PeppolId, ReferenceNumber, KsefNumber, KsefNumberV35, KsefNumberV36, CertificateName, Pesel, CertificateFingerprint, CertificateSerialNumber, Base64String, Ip4Address, Ip4Range, Ip4Mask, Sha256Base64, NIP_WEIGHTS, PESEL_WEIGHTS, CRC8_POLY;
 var init_patterns = __esm({
   "src/validation/patterns.ts"() {
     "use strict";
@@ -1536,6 +1620,7 @@ var init_patterns = __esm({
     CertificateName = /^[a-zA-Z0-9_\- ąćęłńóśźżĄĆĘŁŃÓŚŹŻ]+$/;
     Pesel = /^\d{2}(?:0[1-9]|1[0-2]|2[1-9]|3[0-2]|4[1-9]|5[0-2]|6[1-9]|7[0-2]|8[1-9]|9[0-2])\d{7}$/;
     CertificateFingerprint = /^[0-9A-F]{64}$/;
+    CertificateSerialNumber = /^[0-9A-F]{16}$/;
     Base64String = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
     Ip4Address = /^((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}$/;
     Ip4Range = /^((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}-((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}$/;
@@ -2449,14 +2534,14 @@ var init_fa2 = __esm({
   }
 });
 
-// src/validation/schemas/rr1-v11e.ts
-var rr1_v11e_exports = {};
-__export(rr1_v11e_exports, {
-  RR1_V11ESchema: () => RR1_V11ESchema
+// src/validation/schemas/fa-rr1.ts
+var fa_rr1_exports = {};
+__export(fa_rr1_exports, {
+  FA_RR1Schema: () => FA_RR1Schema
 });
-var import_zod3, TKodFormularza3, TDataCzas3, TZnakowy4, TNaglowek3, TNrNIP3, TZnakowy5123, TPodmiot13, TKodKraju3, TGLN3, TAdres3, TAdresEmail3, TNumerTelefonu3, TStatusInfoPodatnika3, TZnakowy203, TNIPIdWew3, TWybor13, TPodmiot33, TRolaPodmiotu33, TKodWaluty3, TData3, TDataT3, TKwotowy4, TRodzajFaktury3, TTypKorekty3, TNumerKSeF3, TNaturalny3, TKluczWartosc3, TZnakowy503, TIlosci3, TKwotowy23, TProcentowy3, TStawkaPodatku3, TFormaPlatnosci3, TNrRB3, SWIFT_Type3, TRachunekBankowy3, TTekstowy3, TNrKRS3, TNrREGON3, RR1_V11ESchema;
-var init_rr1_v11e = __esm({
-  "src/validation/schemas/rr1-v11e.ts"() {
+var import_zod3, TKodFormularza3, TDataCzas3, TZnakowy4, TNaglowek3, TNrNIP3, TZnakowy5123, TPodmiot13, TKodKraju3, TGLN3, TAdres3, TAdresEmail3, TNumerTelefonu3, TStatusInfoPodatnika3, TZnakowy203, TNIPIdWew3, TWybor13, TPodmiot33, TRolaPodmiotu33, TKodWaluty3, TData3, TDataT3, TKwotowy4, TRodzajFaktury3, TTypKorekty3, TNumerKSeF3, TNaturalny3, TKluczWartosc3, TZnakowy503, TIlosci3, TKwotowy23, TProcentowy3, TStawkaPodatku3, TFormaPlatnosci3, TNrRB3, SWIFT_Type3, TRachunekBankowy3, TTekstowy3, TNrKRS3, TNrREGON3, FA_RR1Schema;
+var init_fa_rr1 = __esm({
+  "src/validation/schemas/fa-rr1.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod3 = require("zod");
@@ -2526,7 +2611,7 @@ var init_rr1_v11e = __esm({
     TTekstowy3 = import_zod3.z.string().min(1).max(3500);
     TNrKRS3 = import_zod3.z.string().regex(/^\d{10}$/);
     TNrREGON3 = import_zod3.z.union([import_zod3.z.string().regex(/^\d{9}$/), import_zod3.z.string().regex(/^\d{14}$/)]);
-    RR1_V11ESchema = import_zod3.z.object({
+    FA_RR1Schema = import_zod3.z.object({
       "Naglowek": TNaglowek3,
       "Podmiot1": import_zod3.z.object({
         "DaneIdentyfikacyjne": TPodmiot13,
@@ -2655,224 +2740,89 @@ var init_rr1_v11e = __esm({
   }
 });
 
-// src/validation/schemas/rr1-v10e.ts
-var rr1_v10e_exports = {};
-__export(rr1_v10e_exports, {
-  RR1_V10ESchema: () => RR1_V10ESchema
+// src/validation/schemas/pef3.ts
+var pef3_exports = {};
+__export(pef3_exports, {
+  PEF3Schema: () => PEF3Schema
 });
-var import_zod4, TKodFormularza4, TDataCzas4, TZnakowy5, TNaglowek4, TNrNIP4, TZnakowy5124, TPodmiot14, TKodKraju4, TGLN4, TAdres4, TAdresEmail4, TNumerTelefonu4, TStatusInfoPodatnika4, TZnakowy204, TNIPIdWew4, TWybor14, TPodmiot34, TRolaPodmiotu34, TKodWaluty4, TData4, TDataT4, TKwotowy5, TRodzajFaktury4, TTypKorekty4, TNumerKSeF4, TNaturalny4, TKluczWartosc4, TZnakowy504, TIlosci4, TKwotowy24, TProcentowy4, TStawkaPodatku4, TFormaPlatnosci4, TNrRB4, SWIFT_Type4, TRachunekBankowy4, TTekstowy4, TNrKRS4, TNrREGON4, RR1_V10ESchema;
-var init_rr1_v10e = __esm({
-  "src/validation/schemas/rr1-v10e.ts"() {
+var import_zod4, InvoiceType, PEF3Schema;
+var init_pef3 = __esm({
+  "src/validation/schemas/pef3.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod4 = require("zod");
-    TKodFormularza4 = import_zod4.z.literal("FA_RR");
-    TDataCzas4 = import_zod4.z.string();
-    TZnakowy5 = import_zod4.z.string().min(1).max(256);
-    TNaglowek4 = import_zod4.z.object({
-      "KodFormularza": import_zod4.z.object({ "#text": TKodFormularza4, "@kodSystemowy": import_zod4.z.literal("FA_RR(1)"), "@wersjaSchemy": import_zod4.z.literal("1-0E") }).strict(),
-      "WariantFormularza": import_zod4.z.literal("1"),
-      "DataWytworzeniaFa": import_zod4.z.string(),
-      "SystemInfo": TZnakowy5.optional()
-    }).strict();
-    TNrNIP4 = import_zod4.z.string().regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}$/);
-    TZnakowy5124 = import_zod4.z.string().min(1).max(512);
-    TPodmiot14 = import_zod4.z.object({
-      "NIP": TNrNIP4,
-      "Nazwa": TZnakowy5124
-    }).strict();
-    TKodKraju4 = import_zod4.z.enum(["AF", "AX", "AL", "DZ", "AD", "AO", "AI", "AQ", "AG", "AN", "SA", "AR", "AM", "AW", "AU", "AT", "AZ", "BS", "BH", "BD", "BB", "BE", "BZ", "BJ", "BM", "BT", "BY", "BO", "BQ", "BA", "BW", "BR", "BN", "IO", "BG", "BF", "BI", "XC", "CL", "CN", "HR", "CW", "CY", "TD", "ME", "DK", "DM", "DO", "DJ", "EG", "EC", "ER", "EE", "ET", "FK", "FJ", "PH", "FI", "FR", "TF", "GA", "GM", "GH", "GI", "GR", "GD", "GL", "GE", "GU", "GG", "GY", "GF", "GP", "GT", "GN", "GQ", "GW", "HT", "ES", "HN", "HK", "IN", "ID", "IQ", "IR", "IE", "IS", "IL", "JM", "JP", "YE", "JE", "JO", "KY", "KH", "CM", "CA", "QA", "KZ", "KE", "KG", "KI", "CO", "KM", "CG", "CD", "KP", "XK", "CR", "CU", "KW", "LA", "LS", "LB", "LR", "LY", "LI", "LT", "LV", "LU", "MK", "MG", "YT", "MO", "MW", "MV", "MY", "ML", "MT", "MP", "MA", "MQ", "MR", "MU", "MX", "XL", "FM", "UM", "MD", "MC", "MN", "MS", "MZ", "MM", "NA", "NR", "NP", "NL", "DE", "NE", "NG", "NI", "NU", "NF", "NO", "NC", "NZ", "PS", "OM", "PK", "PW", "PA", "PG", "PY", "PE", "PN", "PF", "PL", "GS", "PT", "PR", "CF", "CZ", "KR", "ZA", "RE", "RU", "RO", "RW", "EH", "BL", "KN", "LC", "MF", "VC", "SV", "WS", "AS", "SM", "SN", "RS", "SC", "SL", "SG", "SK", "SI", "SO", "LK", "PM", "US", "SZ", "SD", "SS", "SR", "SJ", "SH", "SY", "CH", "SE", "TJ", "TH", "TW", "TZ", "TG", "TK", "TO", "TT", "TN", "TR", "TM", "TV", "UG", "UA", "UY", "UZ", "VU", "WF", "VA", "HU", "VE", "GB", "VN", "IT", "TL", "CI", "BV", "CX", "IM", "SX", "CK", "VI", "VG", "HM", "CC", "MH", "FO", "SB", "ST", "TC", "ZM", "CV", "ZW", "AE", "XI"]);
-    TGLN4 = import_zod4.z.string().min(1).max(13);
-    TAdres4 = import_zod4.z.object({
-      "KodKraju": TKodKraju4,
-      "AdresL1": TZnakowy5124,
-      "AdresL2": TZnakowy5124.optional(),
-      "GLN": TGLN4.optional()
-    }).strict();
-    TAdresEmail4 = import_zod4.z.string().min(3).max(255).regex(/^(.)+@(.)+$/);
-    TNumerTelefonu4 = import_zod4.z.string().min(1).max(16);
-    TStatusInfoPodatnika4 = import_zod4.z.enum(["1", "2", "3", "4"]);
-    TZnakowy204 = import_zod4.z.string().min(1).max(20);
-    TNIPIdWew4 = import_zod4.z.string().min(1).max(20).regex(/^[1-9]((\d[1-9])|([1-9]\d))\d{7}-\d{5}$/);
-    TWybor14 = import_zod4.z.literal("1");
-    TPodmiot34 = import_zod4.z.object({
-      "NIP": TNrNIP4.optional(),
-      "IDWew": TNIPIdWew4.optional(),
-      "BrakID": TWybor14.optional(),
-      "Nazwa": TZnakowy5124
-    }).strict();
-    TRolaPodmiotu34 = import_zod4.z.enum(["1", "2", "3", "5", "6", "7", "8", "9", "10", "11"]);
-    TKodWaluty4 = import_zod4.z.enum(["AED", "AFN", "ALL", "AMD", "ANG", "AOA", "ARS", "AUD", "AWG", "AZN", "BAM", "BBD", "BDT", "BGN", "BHD", "BIF", "BMD", "BND", "BOB", "BOV", "BRL", "BSD", "BTN", "BWP", "BYN", "BZD", "CAD", "CDF", "CHE", "CHF", "CHW", "CLF", "CLP", "CNY", "COP", "COU", "CRC", "CUC", "CUP", "CVE", "CZK", "DJF", "DKK", "DOP", "DZD", "EGP", "ERN", "ETB", "EUR", "FJD", "FKP", "GBP", "GEL", "GGP", "GHS", "GIP", "GMD", "GNF", "GTQ", "GYD", "HKD", "HNL", "HRK", "HTG", "HUF", "IDR", "ILS", "IMP", "INR", "IQD", "IRR", "ISK", "JEP", "JMD", "JOD", "JPY", "KES", "KGS", "KHR", "KMF", "KPW", "KRW", "KWD", "KYD", "KZT", "LAK", "LBP", "LKR", "LRD", "LSL", "LYD", "MAD", "MDL", "MGA", "MKD", "MMK", "MNT", "MOP", "MRU", "MUR", "MVR", "MWK", "MXN", "MXV", "MYR", "MZN", "NAD", "NGN", "NIO", "NOK", "NPR", "NZD", "OMR", "PAB", "PEN", "PGK", "PHP", "PKR", "PLN", "PYG", "QAR", "RON", "RSD", "RUB", "RWF", "SAR", "SBD", "SCR", "SDG", "SEK", "SGD", "SHP", "SLL", "SOS", "SRD", "SSP", "STN", "SVC", "SYP", "SZL", "THB", "TJS", "TMT", "TND", "TOP", "TRY", "TTD", "TWD", "TZS", "UAH", "UGX", "USD", "USN", "UYI", "UYU", "UYW", "UZS", "VES", "VND", "VUV", "WST", "XAF", "XAG", "XAU", "XBA", "XBB", "XBC", "XBD", "XCD", "XCG", "XDR", "XOF", "XPD", "XPF", "XPT", "XSU", "XUA", "XXX", "YER", "ZAR", "ZMW", "ZWL"]);
-    TData4 = import_zod4.z.string();
-    TDataT4 = import_zod4.z.string();
-    TKwotowy5 = import_zod4.z.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,2})?$/);
-    TRodzajFaktury4 = import_zod4.z.enum(["VAT_RR", "KOR_VAT_RR"]);
-    TTypKorekty4 = import_zod4.z.enum(["1", "2", "3", "4"]);
-    TNumerKSeF4 = import_zod4.z.string().regex(/^([1-9]((\d[1-9])|([1-9]\d))\d{7}|M\d{9}|[A-Z]{3}\d{7})-(20[2-9][0-9]|2[1-9][0-9]{2}|[3-9][0-9]{3})(0[1-9]|1[0-2])(0[1-9]|[1-2][0-9]|3[0-1])-([0-9A-F]{6})-?([0-9A-F]{6})-([0-9A-F]{2})$/);
-    TNaturalny4 = import_zod4.z.string();
-    TKluczWartosc4 = import_zod4.z.object({
-      "NrWiersza": TNaturalny4.optional(),
-      "Klucz": TZnakowy5,
-      "Wartosc": TZnakowy5
-    }).strict();
-    TZnakowy504 = import_zod4.z.string().min(1).max(50);
-    TIlosci4 = import_zod4.z.string().regex(/^-?([1-9]\d{0,15}|0)(\.\d{1,6})?$/);
-    TKwotowy24 = import_zod4.z.string().regex(/^-?([1-9]\d{0,13}|0)(\.\d{1,8})?$/);
-    TProcentowy4 = import_zod4.z.coerce.number().min(0).max(100);
-    TStawkaPodatku4 = import_zod4.z.enum(["6.5", "7"]);
-    TFormaPlatnosci4 = import_zod4.z.literal("1");
-    TNrRB4 = import_zod4.z.string().min(10).max(34);
-    SWIFT_Type4 = import_zod4.z.string().regex(/^[A-Z]{6}[A-Z0-9]{2}([A-Z0-9]{3}){0,1}$/);
-    TRachunekBankowy4 = import_zod4.z.object({
-      "NrRB": TNrRB4,
-      "SWIFT": SWIFT_Type4.optional(),
-      "NazwaBanku": TZnakowy5.optional(),
-      "OpisRachunku": TZnakowy5.optional()
-    }).strict();
-    TTekstowy4 = import_zod4.z.string().min(1).max(3500);
-    TNrKRS4 = import_zod4.z.string().regex(/^\d{10}$/);
-    TNrREGON4 = import_zod4.z.union([import_zod4.z.string().regex(/^\d{9}$/), import_zod4.z.string().regex(/^\d{14}$/)]);
-    RR1_V10ESchema = import_zod4.z.object({
-      "Naglowek": TNaglowek4,
-      "Podmiot1": import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot14,
-        "Adres": TAdres4,
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "NrKontrahenta": TZnakowy5.optional()
-      }).strict(),
-      "Podmiot2": import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot14,
-        "Adres": TAdres4,
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "StatusInfoPodatnika": TStatusInfoPodatnika4.optional()
-      }).strict(),
-      "Podmiot3": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-        "DaneIdentyfikacyjne": TPodmiot34,
-        "Adres": TAdres4.optional(),
-        "AdresKoresp": TAdres4.optional(),
-        "DaneKontaktowe": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "Email": TAdresEmail4.optional(),
-          "Telefon": TNumerTelefonu4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "Rola": TRolaPodmiotu34.optional(),
-        "RolaInna": TWybor14.optional(),
-        "OpisRoli": TZnakowy5.optional()
-      }).strict()).min(0).max(100)).optional(),
-      "FakturaRR": import_zod4.z.object({
-        "KodWaluty": TKodWaluty4,
-        "P_1M": TZnakowy5.optional(),
-        "P_4A": TDataT4.optional(),
-        "P_4B": TDataT4,
-        "P_4C": TZnakowy5,
-        "P_11_1": TKwotowy5,
-        "P_11_1W": TKwotowy5.optional(),
-        "P_11_2": TKwotowy5,
-        "P_11_2W": TKwotowy5.optional(),
-        "P_12_1": TKwotowy5,
-        "P_12_1W": TKwotowy5.optional(),
-        "P_12_2": TZnakowy5,
-        "RodzajFaktury": TRodzajFaktury4,
-        "PrzyczynaKorekty": TZnakowy5.optional(),
-        "TypKorekty": TTypKorekty4.optional(),
-        "DaneFaKorygowanej": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "DataWystFaKorygowanej": TDataT4,
-          "NrFaKorygowanej": TZnakowy5,
-          "NrKSeF": TWybor14.optional(),
-          "NrKSeFFaKorygowanej": TNumerKSeF4.optional(),
-          "NrKSeFN": TWybor14.optional()
-        }).strict()).min(1).max(5e4)).optional(),
-        "NrFaKorygowany": TZnakowy5.optional(),
-        "Podmiot1K": import_zod4.z.object({
-          "DaneIdentyfikacyjne": TPodmiot14,
-          "Adres": TAdres4
-        }).strict().optional(),
-        "Podmiot2K": import_zod4.z.object({
-          "DaneIdentyfikacyjne": TPodmiot14,
-          "Adres": TAdres4
-        }).strict().optional(),
-        "DokumentZaplaty": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "NrDokumentu": TZnakowy5,
-          "DataDokumentu": TData4.optional()
-        }).strict()).min(0).max(50)).optional(),
-        "DodatkowyOpis": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TKluczWartosc4).min(0).max(1e4)).optional(),
-        "FakturaRRWiersz": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "NrWierszaFa": TNaturalny4,
-          "UU_ID": TZnakowy504.optional(),
-          "P_4AA": TDataT4.optional(),
-          "P_5": TZnakowy5,
-          "GTIN": TZnakowy204.optional(),
-          "PKWiU": TZnakowy504.optional(),
-          "CN": TZnakowy504.optional(),
-          "P_6A": TZnakowy5,
-          "P_6B": TIlosci4,
-          "P_6C": TZnakowy5,
-          "P_7": TKwotowy24,
-          "P_8": TKwotowy5,
-          "P_9": TStawkaPodatku4,
-          "P_10": TKwotowy5,
-          "P_11": TKwotowy5,
-          "StanPrzed": TWybor14.optional(),
-          "KursWaluty": TIlosci4.optional()
-        }).strict()).min(0).max(1e4)).optional(),
-        "Rozliczenie": import_zod4.z.object({
-          "Obciazenia": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-            "Kwota": TKwotowy5,
-            "Powod": TZnakowy5
-          }).strict()).min(0).max(100)).optional(),
-          "SumaObciazen": TKwotowy5.optional(),
-          "Odliczenia": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-            "Kwota": TKwotowy5,
-            "Powod": TZnakowy5
-          }).strict()).min(0).max(100)).optional(),
-          "SumaOdliczen": TKwotowy5.optional(),
-          "DoZaplaty": TKwotowy5.optional(),
-          "DoRozliczenia": TKwotowy5.optional()
-        }).strict().optional(),
-        "Platnosc": import_zod4.z.object({
-          "FormaPlatnosci": TFormaPlatnosci4.optional(),
-          "PlatnoscInna": TWybor14.optional(),
-          "OpisPlatnosci": TZnakowy5.optional(),
-          "RachunekBankowy1": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TRachunekBankowy4).min(0).max(3)).optional(),
-          "RachunekBankowy2": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(TRachunekBankowy4).min(0).max(3)).optional(),
-          "IPKSeF": import_zod4.z.string().min(1).max(13).regex(/^[0-9]{3}[a-zA-Z0-9]{10}$/).optional(),
-          "LinkDoPlatnosci": import_zod4.z.string().min(1).max(512).regex(/^(https?):\/\/([a-zA-Z0-9][a-zA-Z0-9-]*\.)+[a-zA-Z]{2,}(:[0-9]{1,5})?(\/[^\s?#]*)?\?([^#\s]*&)?IPKSeF=[0-9]{3}[a-zA-Z0-9]{10}(&[^#\s]*)?(#.*)?$/).optional()
-        }).strict().optional()
-      }).strict(),
-      "Stopka": import_zod4.z.object({
-        "Informacje": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "StopkaFaktury": TTekstowy4.optional()
-        }).strict()).min(0).max(3)).optional(),
-        "Rejestry": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.object({
-          "PelnaNazwa": TZnakowy5.optional(),
-          "KRS": TNrKRS4.optional(),
-          "REGON": TNrREGON4.optional(),
-          "BDO": import_zod4.z.string().min(1).max(9).optional()
-        }).strict()).min(0).max(100)).optional()
-      }).strict().optional()
+    InvoiceType = import_zod4.z.object({
+      "UBLExtensions": import_zod4.z.any().optional(),
+      "UBLVersionID": import_zod4.z.any().optional(),
+      "CustomizationID": import_zod4.z.any().optional(),
+      "ProfileID": import_zod4.z.any().optional(),
+      "ProfileExecutionID": import_zod4.z.any().optional(),
+      "ID": import_zod4.z.any(),
+      "CopyIndicator": import_zod4.z.any().optional(),
+      "UUID": import_zod4.z.any().optional(),
+      "IssueDate": import_zod4.z.any(),
+      "IssueTime": import_zod4.z.any().optional(),
+      "DueDate": import_zod4.z.any().optional(),
+      "InvoiceTypeCode": import_zod4.z.any().optional(),
+      "Note": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "TaxPointDate": import_zod4.z.any().optional(),
+      "DocumentCurrencyCode": import_zod4.z.any().optional(),
+      "TaxCurrencyCode": import_zod4.z.any().optional(),
+      "PricingCurrencyCode": import_zod4.z.any().optional(),
+      "PaymentCurrencyCode": import_zod4.z.any().optional(),
+      "PaymentAlternativeCurrencyCode": import_zod4.z.any().optional(),
+      "AccountingCostCode": import_zod4.z.any().optional(),
+      "AccountingCost": import_zod4.z.any().optional(),
+      "LineCountNumeric": import_zod4.z.any().optional(),
+      "BuyerReference": import_zod4.z.any().optional(),
+      "InvoicePeriod": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "OrderReference": import_zod4.z.any().optional(),
+      "BillingReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "DespatchDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ReceiptDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "StatementDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "OriginatorDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ContractDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AdditionalDocumentReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "ProjectReference": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "Signature": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AccountingSupplierParty": import_zod4.z.any(),
+      "AccountingCustomerParty": import_zod4.z.any(),
+      "PayeeParty": import_zod4.z.any().optional(),
+      "BuyerCustomerParty": import_zod4.z.any().optional(),
+      "SellerSupplierParty": import_zod4.z.any().optional(),
+      "TaxRepresentativeParty": import_zod4.z.any().optional(),
+      "Delivery": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "DeliveryTerms": import_zod4.z.any().optional(),
+      "PaymentMeans": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "PaymentTerms": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "PrepaidPayment": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "AllowanceCharge": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "TaxExchangeRate": import_zod4.z.any().optional(),
+      "PricingExchangeRate": import_zod4.z.any().optional(),
+      "PaymentExchangeRate": import_zod4.z.any().optional(),
+      "PaymentAlternativeExchangeRate": import_zod4.z.any().optional(),
+      "TaxTotal": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "WithholdingTaxTotal": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(0)).optional(),
+      "LegalMonetaryTotal": import_zod4.z.any(),
+      "InvoiceLine": import_zod4.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod4.z.array(import_zod4.z.any()).min(1))
     }).strict();
+    PEF3Schema = InvoiceType;
   }
 });
 
-// src/validation/schemas/pef3.ts
-var pef3_exports = {};
-__export(pef3_exports, {
-  PEF3Schema: () => PEF3Schema
+// src/validation/schemas/pef-kor3.ts
+var pef_kor3_exports = {};
+__export(pef_kor3_exports, {
+  PEF_KOR3Schema: () => PEF_KOR3Schema
 });
-var import_zod5, InvoiceType, PEF3Schema;
-var init_pef3 = __esm({
-  "src/validation/schemas/pef3.ts"() {
+var import_zod5, CreditNoteType, PEF_KOR3Schema;
+var init_pef_kor3 = __esm({
+  "src/validation/schemas/pef-kor3.ts"() {
     "use strict";
     init_cjs_shims();
     import_zod5 = require("zod");
-    InvoiceType = import_zod5.z.object({
+    CreditNoteType = import_zod5.z.object({
       "UBLExtensions": import_zod5.z.any().optional(),
       "UBLVersionID": import_zod5.z.any().optional(),
       "CustomizationID": import_zod5.z.any().optional(),
@@ -2883,10 +2833,9 @@ var init_pef3 = __esm({
       "UUID": import_zod5.z.any().optional(),
       "IssueDate": import_zod5.z.any(),
       "IssueTime": import_zod5.z.any().optional(),
-      "DueDate": import_zod5.z.any().optional(),
-      "InvoiceTypeCode": import_zod5.z.any().optional(),
-      "Note": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxPointDate": import_zod5.z.any().optional(),
+      "CreditNoteTypeCode": import_zod5.z.any().optional(),
+      "Note": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "DocumentCurrencyCode": import_zod5.z.any().optional(),
       "TaxCurrencyCode": import_zod5.z.any().optional(),
       "PricingCurrencyCode": import_zod5.z.any().optional(),
@@ -2897,15 +2846,15 @@ var init_pef3 = __esm({
       "LineCountNumeric": import_zod5.z.any().optional(),
       "BuyerReference": import_zod5.z.any().optional(),
       "InvoicePeriod": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "DiscrepancyResponse": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "OrderReference": import_zod5.z.any().optional(),
       "BillingReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "DespatchDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "ReceiptDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "StatementDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "OriginatorDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "ContractDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "AdditionalDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "ProjectReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "StatementDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
+      "OriginatorDocumentReference": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "Signature": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "AccountingSupplierParty": import_zod5.z.any(),
       "AccountingCustomerParty": import_zod5.z.any(),
@@ -2914,87 +2863,17 @@ var init_pef3 = __esm({
       "SellerSupplierParty": import_zod5.z.any().optional(),
       "TaxRepresentativeParty": import_zod5.z.any().optional(),
       "Delivery": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "DeliveryTerms": import_zod5.z.any().optional(),
+      "DeliveryTerms": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "PaymentMeans": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "PaymentTerms": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "PrepaidPayment": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "AllowanceCharge": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxExchangeRate": import_zod5.z.any().optional(),
       "PricingExchangeRate": import_zod5.z.any().optional(),
       "PaymentExchangeRate": import_zod5.z.any().optional(),
       "PaymentAlternativeExchangeRate": import_zod5.z.any().optional(),
+      "AllowanceCharge": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "TaxTotal": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
-      "WithholdingTaxTotal": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(0)).optional(),
       "LegalMonetaryTotal": import_zod5.z.any(),
-      "InvoiceLine": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(1))
-    }).strict();
-    PEF3Schema = InvoiceType;
-  }
-});
-
-// src/validation/schemas/pef-kor3.ts
-var pef_kor3_exports = {};
-__export(pef_kor3_exports, {
-  PEF_KOR3Schema: () => PEF_KOR3Schema
-});
-var import_zod6, CreditNoteType, PEF_KOR3Schema;
-var init_pef_kor3 = __esm({
-  "src/validation/schemas/pef-kor3.ts"() {
-    "use strict";
-    init_cjs_shims();
-    import_zod6 = require("zod");
-    CreditNoteType = import_zod6.z.object({
-      "UBLExtensions": import_zod6.z.any().optional(),
-      "UBLVersionID": import_zod6.z.any().optional(),
-      "CustomizationID": import_zod6.z.any().optional(),
-      "ProfileID": import_zod6.z.any().optional(),
-      "ProfileExecutionID": import_zod6.z.any().optional(),
-      "ID": import_zod6.z.any(),
-      "CopyIndicator": import_zod6.z.any().optional(),
-      "UUID": import_zod6.z.any().optional(),
-      "IssueDate": import_zod6.z.any(),
-      "IssueTime": import_zod6.z.any().optional(),
-      "TaxPointDate": import_zod6.z.any().optional(),
-      "CreditNoteTypeCode": import_zod6.z.any().optional(),
-      "Note": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DocumentCurrencyCode": import_zod6.z.any().optional(),
-      "TaxCurrencyCode": import_zod6.z.any().optional(),
-      "PricingCurrencyCode": import_zod6.z.any().optional(),
-      "PaymentCurrencyCode": import_zod6.z.any().optional(),
-      "PaymentAlternativeCurrencyCode": import_zod6.z.any().optional(),
-      "AccountingCostCode": import_zod6.z.any().optional(),
-      "AccountingCost": import_zod6.z.any().optional(),
-      "LineCountNumeric": import_zod6.z.any().optional(),
-      "BuyerReference": import_zod6.z.any().optional(),
-      "InvoicePeriod": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DiscrepancyResponse": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "OrderReference": import_zod6.z.any().optional(),
-      "BillingReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DespatchDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "ReceiptDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "ContractDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "AdditionalDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "StatementDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "OriginatorDocumentReference": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "Signature": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "AccountingSupplierParty": import_zod6.z.any(),
-      "AccountingCustomerParty": import_zod6.z.any(),
-      "PayeeParty": import_zod6.z.any().optional(),
-      "BuyerCustomerParty": import_zod6.z.any().optional(),
-      "SellerSupplierParty": import_zod6.z.any().optional(),
-      "TaxRepresentativeParty": import_zod6.z.any().optional(),
-      "Delivery": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "DeliveryTerms": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "PaymentMeans": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "PaymentTerms": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "TaxExchangeRate": import_zod6.z.any().optional(),
-      "PricingExchangeRate": import_zod6.z.any().optional(),
-      "PaymentExchangeRate": import_zod6.z.any().optional(),
-      "PaymentAlternativeExchangeRate": import_zod6.z.any().optional(),
-      "AllowanceCharge": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "TaxTotal": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(0)).optional(),
-      "LegalMonetaryTotal": import_zod6.z.any(),
-      "CreditNoteLine": import_zod6.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod6.z.array(import_zod6.z.any()).min(1))
+      "CreditNoteLine": import_zod5.z.preprocess((v) => Array.isArray(v) ? v : v == null ? [] : [v], import_zod5.z.array(import_zod5.z.any()).min(1))
     }).strict();
     PEF_KOR3Schema = CreditNoteType;
   }
@@ -3008,15 +2887,13 @@ var init_schemas = __esm({
     init_cjs_shims();
     init_fa3();
     init_fa2();
-    init_rr1_v11e();
-    init_rr1_v10e();
+    init_fa_rr1();
     init_pef3();
     init_pef_kor3();
     NAMESPACE_MAP = {
       "http://crd.gov.pl/wzor/2025/06/25/13775/": "FA3",
       "http://crd.gov.pl/wzor/2023/06/29/12648/": "FA2",
-      "http://crd.gov.pl/wzor/2026/03/06/14189/": "RR1_V11E",
-      "http://crd.gov.pl/wzor/2026/02/17/14164/": "RR1_V10E",
+      "http://crd.gov.pl/wzor/2026/03/06/14189/": "FA_RR1",
       "urn:oasis:names:specification:ubl:schema:xsd:Invoice-2": "PEF3",
       "urn:oasis:names:specification:ubl:schema:xsd:CreditNote-2": "PEF_KOR3"
     };
@@ -3035,11 +2912,8 @@ async function loadSchema(type) {
     case "FA2":
       mod = await Promise.resolve().then(() => (init_fa2(), fa2_exports));
       break;
-    case "RR1_V11E":
-      mod = await Promise.resolve().then(() => (init_rr1_v11e(), rr1_v11e_exports));
-      break;
-    case "RR1_V10E":
-      mod = await Promise.resolve().then(() => (init_rr1_v10e(), rr1_v10e_exports));
+    case "FA_RR1":
+      mod = await Promise.resolve().then(() => (init_fa_rr1(), fa_rr1_exports));
       break;
     case "PEF3":
       mod = await Promise.resolve().then(() => (init_pef3(), pef3_exports));
@@ -3080,7 +2954,7 @@ var init_schema_registry = __esm({
        * List all available schema types.
        */
       availableSchemas() {
-        return ["FA3", "FA2", "RR1_V11E", "RR1_V10E", "PEF3", "PEF_KOR3"];
+        return ["FA3", "FA2", "FA_RR1", "PEF3", "PEF_KOR3"];
       },
       /**
        * Detect schema type from XML namespace URI and/or root element name.
@@ -4203,6 +4077,8 @@ var init_certificates = __esm({
     init_cjs_shims();
     init_rest_request();
     init_routes();
+    init_ksef_validation_error();
+    init_patterns();
     CertificateApiService = class {
       restClient;
       constructor(restClient) {
@@ -4229,6 +4105,14 @@ var init_certificates = __esm({
         return response.body;
       }
       async retrieve(request) {
+        for (const serial of request.certificateSerialNumbers ?? []) {
+          if (!isValidCertificateSerialNumber(serial)) {
+            throw KSeFValidationError.fromField(
+              "certificateSerialNumbers",
+              `Invalid certificate serial number "${serial}": must be exactly 16 uppercase hex characters (^[0-9A-F]{16}$)`
+            );
+          }
+        }
         const req = RestRequest.post(Routes.Certificates.retrieve).body(request);
         const response = await this.restClient.execute(req);
         return response.body;
@@ -4477,8 +4361,8 @@ var init_certificate_fetcher = __esm({
     init_routes();
     CertificateFetcher = class {
       restClient;
-      symmetricKeyPem;
-      ksefTokenPem;
+      symmetricKey;
+      ksefToken;
       initialized = false;
       constructor(restClient) {
         this.restClient = restClient;
@@ -4491,17 +4375,38 @@ var init_certificate_fetcher = __esm({
         this.initialized = false;
         await this.fetchCertificates();
       }
+      /**
+       * Immutable snapshot ({@link SelectedCertificate}) of the selected
+       * SymmetricKeyEncryption certificate. The stored object is replaced wholesale
+       * by {@link refresh}, never mutated, so holding the returned reference yields a
+       * consistent pem + publicKeyId pair even if a concurrent refresh swaps the cache.
+       */
+      getSymmetricKeyEncryption() {
+        return { ...this.requireSelected(this.symmetricKey) };
+      }
+      /** Immutable snapshot of the selected KsefTokenEncryption certificate. See {@link getSymmetricKeyEncryption}. */
+      getKsefTokenEncryption() {
+        return { ...this.requireSelected(this.ksefToken) };
+      }
       getSymmetricKeyEncryptionPem() {
-        if (!this.symmetricKeyPem) {
-          throw new Error("CertificateFetcher not initialized. Call init() first.");
-        }
-        return this.symmetricKeyPem;
+        return this.requireSelected(this.symmetricKey).pem;
       }
       getKsefTokenEncryptionPem() {
-        if (!this.ksefTokenPem) {
+        return this.requireSelected(this.ksefToken).pem;
+      }
+      /** Public key identifier of the selected SymmetricKeyEncryption certificate (KSeF API v2.5.0). */
+      getSymmetricKeyPublicKeyId() {
+        return this.requireSelected(this.symmetricKey).publicKeyId;
+      }
+      /** Public key identifier of the selected KsefTokenEncryption certificate (KSeF API v2.5.0). */
+      getKsefTokenPublicKeyId() {
+        return this.requireSelected(this.ksefToken).publicKeyId;
+      }
+      requireSelected(selected) {
+        if (!selected) {
           throw new Error("CertificateFetcher not initialized. Call init() first.");
         }
-        return this.ksefTokenPem;
+        return selected;
       }
       async fetchCertificates() {
         const request = RestRequest.get(Routes.Security.publicKeyCertificates);
@@ -4510,19 +4415,27 @@ var init_certificate_fetcher = __esm({
         if (!certs || certs.length === 0) {
           throw new Error("No public key certificates returned from KSeF API.");
         }
-        const symmetricCert = certs.find((c) => c.usage.includes("SymmetricKeyEncryption"));
-        if (!symmetricCert) {
-          throw new Error("No SymmetricKeyEncryption certificate found.");
-        }
-        this.symmetricKeyPem = this.derBase64ToPem(symmetricCert.certificate);
-        const tokenCerts = certs.filter((c) => c.usage.includes("KsefTokenEncryption")).sort((a, b) => a.validFrom.localeCompare(b.validFrom));
-        const tokenCert = tokenCerts[0];
-        if (!tokenCert) {
-          throw new Error("No KsefTokenEncryption certificate found.");
-        }
-        this.ksefTokenPem = this.derBase64ToPem(tokenCert.certificate);
+        this.symmetricKey = this.select(certs, "SymmetricKeyEncryption");
+        this.ksefToken = this.select(certs, "KsefTokenEncryption");
         this.initialized = true;
       }
+      /**
+       * Select the certificate to use for a given usage under key rotation:
+       * filter to currently-valid certificates (validFrom ≤ now < validTo) and pick
+       * the newest by validFrom. If none are currently valid, fall back to the newest
+       * overall so the server can reject it with a clear error rather than sending nothing.
+       */
+      select(certs, usage) {
+        const candidates = certs.filter((c) => c.usage.includes(usage));
+        if (candidates.length === 0) {
+          throw new Error(`No ${usage} certificate found.`);
+        }
+        const now = Date.now();
+        const byNewestValidFrom = (a, b) => Date.parse(b.validFrom) - Date.parse(a.validFrom);
+        const valid = candidates.filter((c) => Date.parse(c.validFrom) <= now && now < Date.parse(c.validTo)).sort(byNewestValidFrom);
+        const chosen = valid[0] ?? [...candidates].sort(byNewestValidFrom)[0];
+        return { pem: this.derBase64ToPem(chosen.certificate), publicKeyId: chosen.publicKeyId };
+      }
       derBase64ToPem(base64Der) {
         const lines = [];
         for (let i = 0; i < base64Der.length; i += 64) {
@@ -4578,6 +4491,14 @@ var init_cryptography_service = __esm({
       async init() {
         await this.fetcher.init();
       }
+      /** Re-fetch KSeF public certificates, discarding the cached selection (used for key-rotation recovery). */
+      async refresh() {
+        await this.fetcher.refresh();
+      }
+      /** Identifier of the KsefTokenEncryption public key used by {@link encryptKsefToken} (KSeF API v2.5.0). */
+      getKsefTokenPublicKeyId() {
+        return this.fetcher.getKsefTokenPublicKeyId();
+      }
       // ---------------------------------------------------------------------------
       // AES-256-CBC
       // ---------------------------------------------------------------------------
@@ -4623,11 +4544,12 @@ var init_cryptography_service = __esm({
       async getEncryptionData() {
         const key = crypto2.randomBytes(32);
         const iv = crypto2.randomBytes(16);
-        const certPem = this.fetcher.getSymmetricKeyEncryptionPem();
-        const encryptedKey = await this.rsaOaepEncrypt(certPem, new Uint8Array(key));
+        const cert = this.fetcher.getSymmetricKeyEncryption();
+        const encryptedKey = await this.rsaOaepEncrypt(cert.pem, new Uint8Array(key));
         const encryptionInfo = {
           encryptedSymmetricKey: Buffer.from(encryptedKey).toString("base64"),
-          initializationVector: iv.toString("base64")
+          initializationVector: iv.toString("base64"),
+          publicKeyId: cert.publicKeyId
         };
         return {
           cipherKey: new Uint8Array(key),
@@ -4652,9 +4574,29 @@ var init_cryptography_service = __esm({
        * `[ephemeralSPKI | nonce(12) | ciphertext+tag]`.
        */
       async encryptKsefToken(token, challengeTimestamp) {
+        return this.encryptKsefTokenWithCertPem(
+          this.fetcher.getKsefTokenEncryptionPem(),
+          token,
+          challengeTimestamp
+        );
+      }
+      /**
+       * Encrypt a KSeF token and return it together with the public key id of the
+       * exact certificate used.
+       *
+       * Both values come from a single certificate snapshot taken before any
+       * `await`, so a concurrent {@link refresh} cannot tag the ciphertext with a
+       * different key than it was encrypted under (KSeF API v2.5.0). Prefer this over
+       * pairing {@link encryptKsefToken} with a separate {@link getKsefTokenPublicKeyId}.
+       */
+      async encryptKsefTokenWithKeyId(token, challengeTimestamp) {
+        const cert = this.fetcher.getKsefTokenEncryption();
+        const encryptedToken = await this.encryptKsefTokenWithCertPem(cert.pem, token, challengeTimestamp);
+        return { encryptedToken, publicKeyId: cert.publicKeyId };
+      }
+      async encryptKsefTokenWithCertPem(certPem, token, challengeTimestamp) {
         const timestampMs = new Date(challengeTimestamp).getTime();
         const plaintext = Buffer.from(`${token}|${timestampMs}`, "utf-8");
-        const certPem = this.fetcher.getKsefTokenEncryptionPem();
         const cert = new crypto2.X509Certificate(certPem);
         const publicKey = cert.publicKey;
         if (publicKey.asymmetricKeyType === "rsa") {
@@ -5173,7 +5115,7 @@ var init_auth_xml_builder = __esm({
   "src/crypto/auth-xml-builder.ts"() {
     "use strict";
     init_cjs_shims();
-    AUTH_TOKEN_REQUEST_NS = "http://ksef.mf.gov.pl/auth/token/2.0";
+    AUTH_TOKEN_REQUEST_NS = "http://ksef.mf.gov.pl/auth/token/2.1";
   }
 });
 
@@ -5335,6 +5277,156 @@ var init_zip = __esm({
   }
 });
 
+// src/utils/targz.ts
+var targz_exports = {};
+__export(targz_exports, {
+  createTarGz: () => createTarGz,
+  extractTarGz: () => extractTarGz
+});
+async function createTarGz(entries) {
+  const packer = (0, import_tar_stream.pack)();
+  const gzip = packer.pipe((0, import_node_zlib.createGzip)());
+  const chunks = [];
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    const fail = (err) => {
+      if (settled) return;
+      settled = true;
+      reject(err);
+    };
+    packer.on("error", fail);
+    gzip.on("error", fail);
+    gzip.on("data", (chunk) => chunks.push(chunk));
+    gzip.on("end", () => {
+      if (settled) return;
+      settled = true;
+      resolve(Buffer.concat(chunks));
+    });
+    try {
+      for (const entry of entries) {
+        const content = Buffer.from(entry.content);
+        packer.entry({ name: entry.fileName, size: content.length }, content);
+      }
+      packer.finalize();
+    } catch (err) {
+      fail(err instanceof Error ? err : new Error(String(err)));
+    }
+  });
+}
+async function extractTarGz(buffer, options = {}) {
+  const limits = { ...DEFAULT_LIMITS, ...options };
+  const ratioCeiling = limits.maxCompressionRatio !== null && limits.maxCompressionRatio !== void 0 && buffer.length > 0 ? buffer.length * limits.maxCompressionRatio : null;
+  return new Promise((resolve, reject) => {
+    const source = import_node_stream.Readable.from(buffer);
+    const gunzip = (0, import_node_zlib.createGunzip)();
+    const extractor = (0, import_tar_stream.extract)();
+    const files = /* @__PURE__ */ new Map();
+    let extractedFileCount = 0;
+    let totalUncompressed = 0;
+    let settled = false;
+    const cleanup = () => {
+      source.destroy();
+      gunzip.destroy();
+      extractor.destroy();
+    };
+    const fail = (err) => {
+      if (settled) return;
+      settled = true;
+      cleanup();
+      reject(err);
+    };
+    const succeed = () => {
+      if (settled) return;
+      settled = true;
+      resolve(files);
+    };
+    gunzip.on("data", (chunk) => {
+      totalUncompressed += chunk.length;
+      if (limits.maxTotalUncompressedSize > 0 && totalUncompressed > limits.maxTotalUncompressedSize) {
+        fail(new Error("tar.gz exceeds max_total_uncompressed_size"));
+        return;
+      }
+      if (ratioCeiling !== null && totalUncompressed > ratioCeiling) {
+        fail(new Error("tar.gz exceeds max_compression_ratio"));
+      }
+    });
+    extractor.on("entry", (header, stream, next) => {
+      if (settled) {
+        stream.resume();
+        return;
+      }
+      if (header.type !== "file") {
+        stream.resume();
+        stream.on("end", next);
+        return;
+      }
+      if (limits.maxFiles > 0 && extractedFileCount >= limits.maxFiles) {
+        fail(new Error("tar.gz contains too many files"));
+        return;
+      }
+      const chunks = [];
+      let entrySize = 0;
+      stream.on("data", (chunk) => {
+        if (settled) return;
+        entrySize += chunk.length;
+        if (limits.maxFileUncompressedSize > 0 && entrySize > limits.maxFileUncompressedSize) {
+          fail(new Error("tar.gz entry exceeds max_file_uncompressed_size"));
+          return;
+        }
+        chunks.push(chunk);
+      });
+      stream.on("error", fail);
+      stream.on("end", () => {
+        if (settled) return;
+        extractedFileCount += 1;
+        files.set(header.name, Buffer.concat(chunks));
+        next();
+      });
+    });
+    extractor.on("finish", succeed);
+    extractor.on("error", fail);
+    gunzip.on("error", fail);
+    source.on("error", fail);
+    source.pipe(gunzip).pipe(extractor);
+  });
+}
+var import_node_zlib, import_node_stream, import_tar_stream, DEFAULT_LIMITS;
+var init_targz = __esm({
+  "src/utils/targz.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_node_zlib = require("node:zlib");
+    import_node_stream = require("node:stream");
+    import_tar_stream = require("tar-stream");
+    DEFAULT_LIMITS = {
+      maxFiles: 1e4,
+      maxTotalUncompressedSize: 2e9,
+      maxFileUncompressedSize: 5e8,
+      maxCompressionRatio: 200
+    };
+  }
+});
+
+// src/crypto/with-key-rotation-retry.ts
+async function withKeyRotationRetry(crypto8, op) {
+  try {
+    return await op();
+  } catch (err) {
+    if (err instanceof KSeFUnknownPublicKeyError) {
+      await crypto8.refresh();
+      return await op();
+    }
+    throw err;
+  }
+}
+var init_with_key_rotation_retry = __esm({
+  "src/crypto/with-key-rotation-retry.ts"() {
+    "use strict";
+    init_cjs_shims();
+    init_ksef_unknown_public_key_error();
+  }
+});
+
 // src/offline/holidays.ts
 function toDateKey(d) {
   return d.toISOString().slice(0, 10);
@@ -5512,6 +5604,7 @@ var init_offline_invoice_workflow = __esm({
     import_node_crypto3 = __toESM(require("node:crypto"), 1);
     init_ksef_api_error();
     init_deadline();
+    init_with_key_rotation_retry();
     init_document_structures();
     OfflineInvoiceWorkflow = class {
       constructor(qrService) {
@@ -5618,11 +5711,14 @@ var init_offline_invoice_workflow = __esm({
         }
         if (pending.length === 0) return result;
         await client.crypto.init();
-        const encData = await client.crypto.getEncryptionData();
         const formCode = options.formCode ?? DEFAULT_FORM_CODE;
-        const openResp = await client.onlineSession.openSession(
-          { formCode, encryption: encData.encryptionInfo }
-        );
+        const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+          const encData2 = await client.crypto.getEncryptionData();
+          const openResp2 = await client.onlineSession.openSession(
+            { formCode, encryption: encData2.encryptionInfo }
+          );
+          return { encData: encData2, openResp: openResp2 };
+        });
         const sessionRef = openResp.referenceNumber;
         try {
           for (const inv of pending) {
@@ -5707,11 +5803,14 @@ var init_offline_invoice_workflow = __esm({
         }
         const originalHash = import_node_crypto3.default.createHash("sha256").update(original.invoiceXml).digest("base64");
         await client.crypto.init();
-        const encData = await client.crypto.getEncryptionData();
         const formCode = options.formCode ?? DEFAULT_FORM_CODE;
-        const openResp = await client.onlineSession.openSession(
-          { formCode, encryption: encData.encryptionInfo }
-        );
+        const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+          const encData2 = await client.crypto.getEncryptionData();
+          const openResp2 = await client.onlineSession.openSession(
+            { formCode, encryption: encData2.encryptionInfo }
+          );
+          return { encData: encData2, openResp: openResp2 };
+        });
         const sessionRef = openResp.referenceNumber;
         try {
           const data = new TextEncoder().encode(correctedInvoiceXml);
@@ -5833,6 +5932,9 @@ function buildRestClientConfig(options, authManager) {
       allowedHosts: [...base.allowedHosts, ...options.presignedUrlHosts]
     };
   }
+  if (options?.onSystemWarning) {
+    config.onSystemWarning = options.onSystemWarning;
+  }
   return config;
 }
 var KSeFClient;
@@ -5862,6 +5964,7 @@ var init_client = __esm({
     init_test_data();
     init_certificate_fetcher();
     init_cryptography_service();
+    init_with_key_rotation_retry();
     init_verification_link_service();
     init_auth_xml_builder();
     init_offline_invoice_workflow();
@@ -5928,11 +6031,14 @@ var init_client = __esm({
       async loginWithToken(token, nip) {
         const challenge = await this.auth.getChallenge();
         await this.crypto.init();
-        const encryptedToken = await this.crypto.encryptKsefToken(token, challenge.timestamp);
-        const submitResult = await this.auth.submitKsefTokenAuthRequest({
-          challenge: challenge.challenge,
-          contextIdentifier: { type: "Nip", value: nip },
-          encryptedToken: Buffer.from(encryptedToken).toString("base64")
+        const submitResult = await withKeyRotationRetry(this.crypto, async () => {
+          const { encryptedToken, publicKeyId } = await this.crypto.encryptKsefTokenWithKeyId(token, challenge.timestamp);
+          return this.auth.submitKsefTokenAuthRequest({
+            challenge: challenge.challenge,
+            contextIdentifier: { type: "Nip", value: nip },
+            encryptedToken: Buffer.from(encryptedToken).toString("base64"),
+            publicKeyId
+          });
         });
         const authToken = submitResult.authenticationToken.token;
         await this.awaitAuthReady(submitResult.referenceNumber, authToken);
@@ -5997,6 +6103,7 @@ __export(index_exports, {
   CertificateFetcher: () => CertificateFetcher,
   CertificateFingerprint: () => CertificateFingerprint,
   CertificateName: () => CertificateName,
+  CertificateSerialNumber: () => CertificateSerialNumber,
   CertificateService: () => CertificateService,
   CircuitBreakerPolicy: () => CircuitBreakerPolicy,
   CryptographyService: () => CryptographyService,
@@ -6033,9 +6140,11 @@ __export(index_exports, {
   KSeFErrorCode: () => KSeFErrorCode,
   KSeFForbiddenError: () => KSeFForbiddenError,
   KSeFGoneError: () => KSeFGoneError,
+  KSeFMetadataPaginationError: () => KSeFMetadataPaginationError,
   KSeFRateLimitError: () => KSeFRateLimitError,
   KSeFSessionExpiredError: () => KSeFSessionExpiredError,
   KSeFUnauthorizedError: () => KSeFUnauthorizedError,
+  KSeFUnknownPublicKeyError: () => KSeFUnknownPublicKeyError,
   KSeFValidationError: () => KSeFValidationError,
   KSeFXsdValidationError: () => KSeFXsdValidationError,
   KsefNumber: () => KsefNumber,
@@ -6093,7 +6202,9 @@ __export(index_exports, {
   buildXmlFromObject: () => buildXmlFromObject,
   calculateBackoff: () => calculateBackoff,
   calculateOfflineDeadline: () => calculateOfflineDeadline,
+  collectAllInvoiceMetadata: () => collectAllInvoiceMetadata,
   comparePKey: () => comparePKey,
+  createTarGz: () => createTarGz,
   createZip: () => createZip,
   decodeJwtPayload: () => decodeJwtPayload,
   deduplicateByKsefNumber: () => deduplicateByKsefNumber,
@@ -6106,6 +6217,7 @@ __export(index_exports, {
   exportInvoices: () => exportInvoices,
   extendDeadlineForMaintenance: () => extendDeadlineForMaintenance,
   extractInvoiceFields: () => extractInvoiceFields,
+  extractTarGz: () => extractTarGz,
   getDefaultReason: () => getDefaultReason,
   getEffectiveStartDate: () => getEffectiveStartDate,
   getFormCode: () => getFormCode,
@@ -6123,6 +6235,7 @@ __export(index_exports, {
   isValidBase64: () => isValidBase64,
   isValidCertificateFingerprint: () => isValidCertificateFingerprint,
   isValidCertificateName: () => isValidCertificateName,
+  isValidCertificateSerialNumber: () => isValidCertificateSerialNumber,
   isValidInternalId: () => isValidInternalId,
   isValidIp4Address: () => isValidIp4Address,
   isValidKsefNumber: () => isValidKsefNumber,
@@ -6146,6 +6259,7 @@ __export(index_exports, {
   parseUpoXml: () => parseUpoXml,
   parseXml: () => parseXml,
   pollUntil: () => pollUntil,
+  queryAllInvoiceMetadata: () => queryAllInvoiceMetadata,
   resolveOptions: () => resolveOptions,
   resolveXsdFor: () => resolveXsdFor,
   resumeOnlineSession: () => resumeOnlineSession,
@@ -6506,6 +6620,7 @@ var AuthKsefTokenRequestBuilder = class {
   challenge;
   contextIdentifier;
   encryptedToken;
+  publicKeyId;
   authorizationPolicy;
   withChallenge(challenge) {
     this.challenge = challenge;
@@ -6527,6 +6642,13 @@ var AuthKsefTokenRequestBuilder = class {
     this.encryptedToken = token;
     return this;
   }
+  withPublicKeyId(publicKeyId) {
+    if (!publicKeyId.trim()) {
+      throw KSeFValidationError.fromField("publicKeyId", "Public key id is required");
+    }
+    this.publicKeyId = publicKeyId.trim();
+    return this;
+  }
   withAuthorizationPolicy(policy) {
     this.authorizationPolicy = policy;
     return this;
@@ -6545,6 +6667,7 @@ var AuthKsefTokenRequestBuilder = class {
       challenge: this.challenge,
       contextIdentifier: this.contextIdentifier,
       encryptedToken: this.encryptedToken,
+      ...this.publicKeyId && { publicKeyId: this.publicKeyId },
       ...this.authorizationPolicy && { authorizationPolicy: this.authorizationPolicy }
     };
   }
@@ -6850,6 +6973,7 @@ var BatchFileBuilder = class {
       batchFile: {
         fileSize: zipBytes.length,
         fileHash: zipHash,
+        ...options?.compressionType && { compressionType: options.compressionType },
         fileParts
       },
       encryptedParts
@@ -6952,6 +7076,7 @@ var BatchFileBuilder = class {
       batchFile: {
         fileSize: zipSize,
         fileHash: zipMeta.hashSHA,
+        ...options?.compressionType && { compressionType: options.compressionType },
         fileParts
       },
       streamParts
@@ -7131,6 +7256,7 @@ function escapeXml2(str) {
 // src/utils/index.ts
 init_cjs_shims();
 init_zip();
+init_targz();
 init_jwt();
 
 // src/utils/hash.ts
@@ -7174,6 +7300,7 @@ init_auth_manager();
 init_online_session();
 init_session_status();
 init_document_structures();
+init_with_key_rotation_retry();
 
 // src/xml/index.ts
 init_cjs_shims();
@@ -7943,12 +8070,15 @@ function buildSessionHandle(params) {
 }
 async function openOnlineSession(client, options) {
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const openResp = await client.onlineSession.openSession(
-    { formCode, encryption: encData.encryptionInfo },
-    options?.upoVersion
-  );
+  const { encData, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData2 = await client.crypto.getEncryptionData();
+    const openResp2 = await client.onlineSession.openSession(
+      { formCode, encryption: encData2.encryptionInfo },
+      options?.upoVersion
+    );
+    return { encData: encData2, openResp: openResp2 };
+  });
   return buildSessionHandle({
     deps: {
       crypto: client.crypto,
@@ -8000,17 +8130,17 @@ async function openSendAndClose(client, invoices, options) {
 // src/workflows/batch-session-workflow.ts
 init_cjs_shims();
 init_document_structures();
+init_with_key_rotation_retry();
 async function uploadBatch(client, zipData, options) {
   if (options?.parallelism !== void 0 && (!Number.isInteger(options.parallelism) || options.parallelism < 1)) {
     throw new Error("parallelism must be a positive integer");
   }
   await client.crypto.init();
   if (options?.validate) {
-    const { unzip: unzip2 } = await Promise.resolve().then(() => (init_zip(), zip_exports));
     const { validateBatch: validateBatch2, batchValidationDetails: batchValidationDetails2 } = await Promise.resolve().then(() => (init_invoice_validator(), invoice_validator_exports));
     const { KSeFValidationError: KSeFValidationError2 } = await Promise.resolve().then(() => (init_ksef_validation_error(), ksef_validation_error_exports));
     const zipBuf = Buffer.isBuffer(zipData) ? zipData : Buffer.from(zipData.buffer, zipData.byteOffset, zipData.byteLength);
-    const files = await unzip2(zipBuf);
+    const files = options?.compressionType === "TarGz" ? await (await Promise.resolve().then(() => (init_targz(), targz_exports))).extractTarGz(zipBuf) : await (await Promise.resolve().then(() => (init_zip(), zip_exports))).unzip(zipBuf);
     const invoices = [...files.entries()].filter(([name]) => name.endsWith(".xml")).map(([name, data]) => ({ fileName: name, xml: data.toString("utf-8") }));
     if (invoices.length > 0) {
       const result2 = await validateBatch2(invoices);
@@ -8023,21 +8153,25 @@ async function uploadBatch(client, zipData, options) {
       }
     }
   }
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const encryptFn = (part) => client.crypto.encryptAES256(part, encData.cipherKey, encData.cipherIv);
-  const { batchFile, encryptedParts } = BatchFileBuilder.build(zipData, encryptFn, {
-    maxPartSize: options?.maxPartSize
+  const { batchFile, encryptedParts, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData = await client.crypto.getEncryptionData();
+    const encryptFn = (part) => client.crypto.encryptAES256(part, encData.cipherKey, encData.cipherIv);
+    const { batchFile: batchFile2, encryptedParts: encryptedParts2 } = BatchFileBuilder.build(zipData, encryptFn, {
+      maxPartSize: options?.maxPartSize,
+      compressionType: options?.compressionType
+    });
+    const openResp2 = await client.batchSession.openSession(
+      {
+        formCode,
+        encryption: encData.encryptionInfo,
+        batchFile: batchFile2,
+        offlineMode: options?.offlineMode
+      },
+      options?.upoVersion
+    );
+    return { batchFile: batchFile2, encryptedParts: encryptedParts2, openResp: openResp2 };
   });
-  const openResp = await client.batchSession.openSession(
-    {
-      formCode,
-      encryption: encData.encryptionInfo,
-      batchFile,
-      offlineMode: options?.offlineMode
-    },
-    options?.upoVersion
-  );
   const sendingParts = encryptedParts.map((part, i) => ({
     data: part.buffer.slice(part.byteOffset, part.byteOffset + part.byteLength),
     metadata: {
@@ -8071,26 +8205,29 @@ async function uploadBatchStream(client, zipStreamFactory, zipSize, options) {
     throw new Error("parallelism must be a positive integer");
   }
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
   const formCode = options?.formCode ?? DEFAULT_FORM_CODE;
-  const encryptStreamFn = (stream) => client.crypto.encryptAES256Stream(stream, encData.cipherKey, encData.cipherIv);
-  const hashStreamFn = (stream) => client.crypto.getFileMetadataFromStream(stream);
-  const { batchFile, streamParts } = await BatchFileBuilder.buildFromStream(
-    zipStreamFactory,
-    zipSize,
-    encryptStreamFn,
-    hashStreamFn,
-    { maxPartSize: options?.maxPartSize }
-  );
-  const openResp = await client.batchSession.openSession(
-    {
-      formCode,
-      encryption: encData.encryptionInfo,
-      batchFile,
-      offlineMode: options?.offlineMode
-    },
-    options?.upoVersion
-  );
+  const { streamParts, openResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData = await client.crypto.getEncryptionData();
+    const encryptStreamFn = (stream) => client.crypto.encryptAES256Stream(stream, encData.cipherKey, encData.cipherIv);
+    const hashStreamFn = (stream) => client.crypto.getFileMetadataFromStream(stream);
+    const { batchFile, streamParts: streamParts2 } = await BatchFileBuilder.buildFromStream(
+      zipStreamFactory,
+      zipSize,
+      encryptStreamFn,
+      hashStreamFn,
+      { maxPartSize: options?.maxPartSize, compressionType: options?.compressionType }
+    );
+    const openResp2 = await client.batchSession.openSession(
+      {
+        formCode,
+        encryption: encData.encryptionInfo,
+        batchFile,
+        offlineMode: options?.offlineMode
+      },
+      options?.upoVersion
+    );
+    return { streamParts: streamParts2, openResp: openResp2 };
+  });
   await client.batchSession.sendPartsWithStream(openResp, streamParts, options?.parallelism);
   await client.batchSession.closeSession(openResp.referenceNumber);
   const result = await pollUntil(
@@ -8139,13 +8276,19 @@ async function uploadBatchParsed(client, zipData, options) {
 // src/workflows/invoice-export-workflow.ts
 init_cjs_shims();
 init_zip();
+init_targz();
+init_with_key_rotation_retry();
 async function doExport(client, filters, options) {
   await client.crypto.init();
-  const encData = await client.crypto.getEncryptionData();
-  const opResp = await client.invoices.exportInvoices({
-    encryption: encData.encryptionInfo,
-    filters,
-    onlyMetadata: options?.onlyMetadata
+  const { encData, opResp } = await withKeyRotationRetry(client.crypto, async () => {
+    const encData2 = await client.crypto.getEncryptionData();
+    const opResp2 = await client.invoices.exportInvoices({
+      encryption: encData2.encryptionInfo,
+      filters,
+      onlyMetadata: options?.onlyMetadata,
+      ...options?.compressionType && { compressionType: options.compressionType }
+    });
+    return { encData: encData2, opResp: opResp2 };
   });
   const result = await pollUntil(
     () => client.invoices.getInvoiceExportStatus(opResp.referenceNumber),
@@ -8200,8 +8343,8 @@ async function exportAndDownload(client, filters, options) {
     decryptedParts.push(decrypted);
   }
   if (options?.extract) {
-    const zipBuffer = Buffer.concat(decryptedParts);
-    const files = await unzip(zipBuffer, options.unzipOptions);
+    const archiveBuffer = Buffer.concat(decryptedParts);
+    const files = options.compressionType === "TarGz" ? await extractTarGz(archiveBuffer, options.unzipOptions) : await unzip(archiveBuffer, options.unzipOptions);
     return { ...exportResult, files };
   }
   return {
@@ -8346,22 +8489,24 @@ var FileHwmStore = class {
 // src/workflows/auth-workflow.ts
 init_cjs_shims();
 init_auth_xml_builder();
-async function authenticateWithToken(client, options) {
-  const challenge = await client.auth.getChallenge();
-  await client.crypto.init();
-  const encryptedToken = await client.crypto.encryptKsefToken(options.token, challenge.timestamp);
-  const submitResult = await client.auth.submitKsefTokenAuthRequest({
-    challenge: challenge.challenge,
-    contextIdentifier: { type: "Nip", value: options.nip },
-    encryptedToken: Buffer.from(encryptedToken).toString("base64"),
-    authorizationPolicy: options.authorizationPolicy
-  });
-  const authToken = submitResult.authenticationToken.token;
-  await pollUntil(
-    () => client.auth.getAuthStatus(submitResult.referenceNumber, authToken),
-    (s) => s.status.code !== 100,
-    { ...options.pollOptions, description: `auth ${submitResult.referenceNumber}` }
+init_with_key_rotation_retry();
+init_ksef_auth_status_error();
+var AUTH_STATUS_SUCCESS = 200;
+var AUTH_STATUS_IN_PROGRESS = 100;
+async function awaitAuthentication(client, referenceNumber, authToken, pollOptions) {
+  const final = await pollUntil(
+    () => client.auth.getAuthStatus(referenceNumber, authToken),
+    (s) => s.status.code !== AUTH_STATUS_IN_PROGRESS,
+    { ...pollOptions, description: `auth ${referenceNumber}` }
   );
+  if (final.status.code !== AUTH_STATUS_SUCCESS) {
+    const details = final.status.details?.length ? ` (${final.status.details.join("; ")})` : "";
+    throw new KSeFAuthStatusError(
+      `Authentication failed with status ${final.status.code}: ${final.status.description}${details}`,
+      referenceNumber,
+      final.status.description
+    );
+  }
   const tokens = await client.auth.getAccessToken(authToken);
   client.authManager.setAccessToken(tokens.accessToken.token);
   client.authManager.setRefreshToken(tokens.refreshToken.token);
@@ -8372,6 +8517,22 @@ async function authenticateWithToken(client, options) {
     refreshTokenValidUntil: tokens.refreshToken.validUntil
   };
 }
+async function authenticateWithToken(client, options) {
+  const challenge = await client.auth.getChallenge();
+  await client.crypto.init();
+  const submitResult = await withKeyRotationRetry(client.crypto, async () => {
+    const { encryptedToken, publicKeyId } = await client.crypto.encryptKsefTokenWithKeyId(options.token, challenge.timestamp);
+    return client.auth.submitKsefTokenAuthRequest({
+      challenge: challenge.challenge,
+      contextIdentifier: { type: "Nip", value: options.nip },
+      encryptedToken: Buffer.from(encryptedToken).toString("base64"),
+      publicKeyId,
+      authorizationPolicy: options.authorizationPolicy
+    });
+  });
+  const authToken = submitResult.authenticationToken.token;
+  return awaitAuthentication(client, submitResult.referenceNumber, authToken, options.pollOptions);
+}
 async function authenticateWithCertificate(client, options) {
   const challenge = await client.auth.getChallenge();
   const { buildAuthTokenRequestXml: buildAuthTokenRequestXml2 } = await Promise.resolve().then(() => (init_client(), client_exports));
@@ -8384,20 +8545,7 @@ async function authenticateWithCertificate(client, options) {
     options.enforceXadesCompliance ?? false
   );
   const authToken = submitResult.authenticationToken.token;
-  await pollUntil(
-    () => client.auth.getAuthStatus(submitResult.referenceNumber, authToken),
-    (s) => s.status.code !== 100,
-    { ...options.pollOptions, description: `auth ${submitResult.referenceNumber}` }
-  );
-  const tokens = await client.auth.getAccessToken(authToken);
-  client.authManager.setAccessToken(tokens.accessToken.token);
-  client.authManager.setRefreshToken(tokens.refreshToken.token);
-  return {
-    accessToken: tokens.accessToken.token,
-    accessTokenValidUntil: tokens.accessToken.validUntil,
-    refreshToken: tokens.refreshToken.token,
-    refreshTokenValidUntil: tokens.refreshToken.validUntil
-  };
+  return awaitAuthentication(client, submitResult.referenceNumber, authToken, options.pollOptions);
 }
 async function authenticateWithExternalSignature(client, options) {
   const challenge = await client.auth.getChallenge();
@@ -8412,20 +8560,7 @@ async function authenticateWithExternalSignature(client, options) {
     options.enforceXadesCompliance ?? false
   );
   const authToken = submitResult.authenticationToken.token;
-  await pollUntil(
-    () => client.auth.getAuthStatus(submitResult.referenceNumber, authToken),
-    (s) => s.status.code !== 100,
-    { ...options.pollOptions, description: `auth ${submitResult.referenceNumber}` }
-  );
-  const tokens = await client.auth.getAccessToken(authToken);
-  client.authManager.setAccessToken(tokens.accessToken.token);
-  client.authManager.setRefreshToken(tokens.refreshToken.token);
-  return {
-    accessToken: tokens.accessToken.token,
-    accessTokenValidUntil: tokens.accessToken.validUntil,
-    refreshToken: tokens.refreshToken.token,
-    refreshTokenValidUntil: tokens.refreshToken.validUntil
-  };
+  return awaitAuthentication(client, submitResult.referenceNumber, authToken, options.pollOptions);
 }
 async function authenticateWithPkcs12(client, options) {
   const { Pkcs12Loader: Pkcs12Loader2 } = await Promise.resolve().then(() => (init_pkcs12_loader(), pkcs12_loader_exports));
@@ -8440,6 +8575,95 @@ async function authenticateWithPkcs12(client, options) {
   });
 }
 
+// src/workflows/metadata-query-paging.ts
+init_cjs_shims();
+init_ksef_metadata_pagination_error();
+init_ksef_validation_error();
+var DEFAULT_PAGE_SIZE = 100;
+var DEFAULT_MAX_BOUNDARY_CROSSINGS = 1e3;
+function boundaryFieldFor(dateType) {
+  switch (dateType) {
+    case "Issue":
+      return "issueDate";
+    case "Invoicing":
+      return "invoicingDate";
+    case "PermanentStorage":
+      return "permanentStorageDate";
+  }
+}
+async function* queryAllInvoiceMetadata(client, filters, options = {}) {
+  const sortOrder = options.sortOrder ?? "Asc";
+  const pageSize = options.pageSize ?? DEFAULT_PAGE_SIZE;
+  const maxBoundaryCrossings = options.maxBoundaryCrossings ?? DEFAULT_MAX_BOUNDARY_CROSSINGS;
+  if (!Number.isInteger(pageSize) || pageSize <= 0) {
+    throw new KSeFValidationError("`pageSize` must be a positive integer.");
+  }
+  if (!Number.isInteger(maxBoundaryCrossings) || maxBoundaryCrossings < 0) {
+    throw new KSeFValidationError("`maxBoundaryCrossings` must be a non-negative integer.");
+  }
+  const boundaryField = boundaryFieldFor(filters.dateRange.dateType);
+  let dateRange = { ...filters.dateRange };
+  let boundaryCrossings = 0;
+  let carryKeys = /* @__PURE__ */ new Set();
+  let carryValue;
+  for (; ; ) {
+    let pageIndex = 0;
+    let lastBoundaryValue;
+    let isTruncated = false;
+    let boundaryKeys = /* @__PURE__ */ new Set();
+    for (; ; ) {
+      const window = { ...filters, dateRange };
+      const response = await client.invoices.queryInvoiceMetadata(
+        window,
+        pageIndex,
+        pageSize,
+        sortOrder
+      );
+      isTruncated = response.isTruncated;
+      for (const invoice of response.invoices) {
+        const boundaryValue = invoice[boundaryField];
+        const key = invoice.ksefNumber.toLowerCase();
+        if (boundaryValue === carryValue && carryKeys.has(key)) continue;
+        if (boundaryValue !== lastBoundaryValue) {
+          lastBoundaryValue = boundaryValue;
+          boundaryKeys = /* @__PURE__ */ new Set();
+        }
+        boundaryKeys.add(key);
+        yield invoice;
+      }
+      if (response.hasMore) {
+        pageIndex += 1;
+        continue;
+      }
+      break;
+    }
+    if (!isTruncated || lastBoundaryValue === void 0) return;
+    const previousBoundary = sortOrder === "Asc" ? dateRange.from : dateRange.to;
+    if (previousBoundary === lastBoundaryValue) {
+      throw new KSeFMetadataPaginationError(
+        `Metadata paging stalled: a truncated window did not advance past ${boundaryField}=${lastBoundaryValue}. The result set likely exceeds the server cap within a single ${boundaryField} value; narrow the query further.`,
+        lastBoundaryValue
+      );
+    }
+    if (++boundaryCrossings > maxBoundaryCrossings) {
+      throw new KSeFMetadataPaginationError(
+        `Metadata paging exceeded ${maxBoundaryCrossings} truncation boundaries; aborting to avoid an unbounded loop.`,
+        lastBoundaryValue
+      );
+    }
+    carryKeys = boundaryKeys;
+    carryValue = lastBoundaryValue;
+    dateRange = sortOrder === "Asc" ? { ...dateRange, from: lastBoundaryValue } : { ...dateRange, to: lastBoundaryValue };
+  }
+}
+async function collectAllInvoiceMetadata(client, filters, options = {}) {
+  const all = [];
+  for await (const invoice of queryAllInvoiceMetadata(client, filters, options)) {
+    all.push(invoice);
+  }
+  return all;
+}
+
 // src/offline/index.ts
 init_cjs_shims();
 init_deadline();
@@ -8598,6 +8822,7 @@ init_client();
   CertificateFetcher,
   CertificateFingerprint,
   CertificateName,
+  CertificateSerialNumber,
   CertificateService,
   CircuitBreakerPolicy,
   CryptographyService,
@@ -8634,9 +8859,11 @@ init_client();
   KSeFErrorCode,
   KSeFForbiddenError,
   KSeFGoneError,
+  KSeFMetadataPaginationError,
   KSeFRateLimitError,
   KSeFSessionExpiredError,
   KSeFUnauthorizedError,
+  KSeFUnknownPublicKeyError,
   KSeFValidationError,
   KSeFXsdValidationError,
   KsefNumber,
@@ -8694,7 +8921,9 @@ init_client();
   buildXmlFromObject,
   calculateBackoff,
   calculateOfflineDeadline,
+  collectAllInvoiceMetadata,
   comparePKey,
+  createTarGz,
   createZip,
   decodeJwtPayload,
   deduplicateByKsefNumber,
@@ -8707,6 +8936,7 @@ init_client();
   exportInvoices,
   extendDeadlineForMaintenance,
   extractInvoiceFields,
+  extractTarGz,
   getDefaultReason,
   getEffectiveStartDate,
   getFormCode,
@@ -8724,6 +8954,7 @@ init_client();
   isValidBase64,
   isValidCertificateFingerprint,
   isValidCertificateName,
+  isValidCertificateSerialNumber,
   isValidInternalId,
   isValidIp4Address,
   isValidKsefNumber,
@@ -8747,6 +8978,7 @@ init_client();
   parseUpoXml,
   parseXml,
   pollUntil,
+  queryAllInvoiceMetadata,
   resolveOptions,
   resolveXsdFor,
   resumeOnlineSession,