chore(runtime): harden node/browser compatibility and release 4.14.0

.github/workflows/ci.yml

@@ -0,0 +1,159 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  build-dist:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build package
+        run: npm run build
+
+      - name: Upload dist artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist-artifact
+          path: dist
+          if-no-files-found: error
+
+  node18-runtime:
+    name: node-runtime (18)
+    runs-on: ubuntu-latest
+    needs: build-dist
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 18
+
+      - name: Download dist artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: dist-artifact
+          path: dist
+
+      - name: Run Node 18 runtime compatibility smoke
+        run: node --test test/compat/node18-compat.test.cjs
+
+  node-runtime:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version: [20, 22, 24]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: npm
+
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run Node runtime tests
+        run: npm run test:node
+
+  web-runtime:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version: [24]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: npm
+
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run web-simulated runtime tests
+        run: npm run test:web
+
+  build-and-types:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build package
+        run: npm run build
+
+      - name: Run type contract tests
+        run: npm run test:types
+
+  browser-smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install Playwright browser
+        run: npx playwright install --with-deps chromium
+
+      - name: Run browser smoke tests
+        run: npm run test:browser

.github/workflows/deploy.yml

@@ -22,6 +22,9 @@ jobs:
         with:
           node-version: "24"
 
+      - name: Pin npm version
+        run: npm i -g npm@10.9.2
+
       - name: Install dependencies
         run: npm ci
 

.prettierrc

@@ -1,3 +1,4 @@
 {
-  "singleQuote": true
+  "singleQuote": true,
+  "semi": false
 }

CHANGELOG.md

@@ -15,10 +15,24 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
   `listTeamRoles`, `listTeamRoleTemplates`, `listTeamRoleOperations`,
   `retrieveTeamRole`, `createTeamRole`, `updateTeamRole`, and `deleteTeamRole`.
 - Add typed responses and inputs for organization access, invites, and roles.
+- Add automated test suites for Node runtime (`vitest`), web-simulated runtime (`vitest` + `jsdom`), and browser smoke tests (`playwright`).
+- Add TypeScript contract tests with `tsd` for public SDK types.
+- Add CI workflow to run runtime tests, type tests, and browser smoke tests in GitHub Actions.
+- Include `rfc_provider_cert` in stamp-related invoice typings and responses (thanks to @tetexxr).
 
 ### Changed
 - Use `PUT` for role reassignment/update methods:
   `organizations.updateTeamAccessRole` and `organizations.updateTeamRole`.
+- Use `Authorization: Bearer <apiKey>` by default in SDK requests (API supports this scheme).
+- Improve cross-runtime compatibility through feature-detection based runtime handling and binary type normalization.
+- Restrict npm published contents to runtime artifacts/docs (`dist`, `README`, `CHANGELOG`, `LICENSE`) using a package `files` whitelist.
+- Pin `npm` to `10.9.2` in CI/deploy workflows for deterministic lockfile validation across Node versions.
+
+### Fixed
+- Improve non-OK HTTP error handling fallback when JSON error bodies are malformed or missing, returning clearer text/status errors.
+- Handle `ReadableStream` read failures during binary download conversion to Node streams to avoid unhandled rejections.
+- Strengthen WebCrypto webhook signature validation by using `subtle.verify` and explicit hex signature validation.
+- Improve debugging for invalid upload inputs with clearer unsupported file type errors.
 
 ## [4.13.1] 2026-02-11
 

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) FacturAPI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.