@open-nav/core 0.1.0

package/dist/xml/write.js

@@ -0,0 +1,299 @@
+import { NavValidationError } from '../errors.js';
+import { ROOTS, TYPES } from '../generated/schema.js';
+import { NAMESPACE_URIS, XS_PRIMITIVES, } from './descriptor.js';
+/** Prefixes used when a namespace is not the document's default. */
+export const NS_PREFIXES = {
+    common: 'common',
+    base: 'base',
+    data: 'data',
+    api: 'api',
+    annul: 'annul',
+    metrics: 'metrics',
+};
+/**
+ * Serialise a document from its root element name.
+ *
+ * Element order, namespaces and cardinality all come from the generated
+ * descriptors, so the output follows the XSD's sequence order — which is what
+ * NAV validates against.
+ *
+ * @param rootName root element name, e.g. `InvoiceData` or `ManageInvoiceRequest`
+ * @param value    the document, shaped like the generated type of that root
+ */
+export function serializeDocument(rootName, value, options = {}) {
+    const root = ROOTS[rootName];
+    if (!root) {
+        throw new NavValidationError(`Unknown document root ${rootName}`, [
+            {
+                path: '',
+                code: 'UNKNOWN_ROOT',
+                message: `expected one of ${Object.keys(ROOTS).join(', ')}`,
+            },
+        ]);
+    }
+    const issues = [];
+    const element = buildElement(root.name, root.ns, root.type, value, rootName, issues);
+    if (issues.length > 0) {
+        throw new NavValidationError(`Cannot serialise ${rootName}`, issues);
+    }
+    const used = new Set();
+    collectNamespaces(element, used);
+    used.delete(root.ns);
+    const declarations = [
+        ...[...used]
+            .sort()
+            .map((ns) => [`xmlns:${NS_PREFIXES[ns]}`, NAMESPACE_URIS[ns]]),
+        ['xmlns', NAMESPACE_URIS[root.ns]],
+    ];
+    const indent = options.indent ?? false;
+    const body = render(element, root.ns, declarations, indent, 0);
+    const declaration = options.declaration === false ? '' : '<?xml version="1.0" encoding="UTF-8"?>';
+    if (!declaration)
+        return body;
+    return indent === false ? `${declaration}${body}` : `${declaration}\n${body}`;
+}
+function collectNamespaces(element, used) {
+    used.add(element.ns);
+    for (const child of element.children)
+        collectNamespaces(child, used);
+}
+function descriptorFor(typeKey, path) {
+    const descriptor = TYPES[typeKey];
+    if (!descriptor) {
+        throw new NavValidationError(`Unknown type ${typeKey}`, [
+            { path, code: 'UNKNOWN_TYPE', message: `not present in the generated schema` },
+        ]);
+    }
+    return descriptor;
+}
+function buildElement(name, ns, typeKey, value, path, issues) {
+    const primitive = XS_PRIMITIVES[typeKey];
+    if (primitive) {
+        return {
+            ns,
+            name,
+            attributes: [],
+            text: formatPrimitive(primitive, value, path, issues),
+            children: [],
+        };
+    }
+    const descriptor = descriptorFor(typeKey, path);
+    if (descriptor.kind === 'simple') {
+        return {
+            ns,
+            name,
+            attributes: [],
+            text: formatPrimitive(descriptor.primitive, value, path, issues),
+            children: [],
+        };
+    }
+    if (descriptor.content === 'simple') {
+        return buildSimpleContentElement(name, ns, descriptor, value, path, issues);
+    }
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        issues.push({
+            path,
+            code: 'EXPECTED_OBJECT',
+            message: `expected an object, got ${describe(value)}`,
+        });
+        return { ns, name, attributes: [], children: [] };
+    }
+    const record = value;
+    const children = [];
+    for (const field of descriptor.fields) {
+        const fieldValue = record[field.name];
+        const fieldPath = path ? `${path}.${field.name}` : field.name;
+        if (fieldValue === undefined || fieldValue === null) {
+            if (!field.optional) {
+                issues.push({ path: fieldPath, code: 'REQUIRED', message: 'is required' });
+            }
+            continue;
+        }
+        if (field.repeated) {
+            if (!Array.isArray(fieldValue)) {
+                issues.push({
+                    path: fieldPath,
+                    code: 'EXPECTED_ARRAY',
+                    message: `is repeatable and expects an array, got ${describe(fieldValue)}`,
+                });
+                continue;
+            }
+            if (field.maxOccurs !== undefined && fieldValue.length > field.maxOccurs) {
+                issues.push({
+                    path: fieldPath,
+                    code: 'MAX_OCCURS',
+                    message: `allows at most ${field.maxOccurs} entries, got ${fieldValue.length}`,
+                });
+            }
+            for (const [index, item] of fieldValue.entries()) {
+                children.push(buildElement(field.name, field.ns, field.type, item, `${fieldPath}.${index}`, issues));
+            }
+            continue;
+        }
+        if (Array.isArray(fieldValue)) {
+            issues.push({
+                path: fieldPath,
+                code: 'UNEXPECTED_ARRAY',
+                message: 'occurs at most once and does not accept an array',
+            });
+            continue;
+        }
+        children.push(buildElement(field.name, field.ns, field.type, fieldValue, fieldPath, issues));
+    }
+    const unknown = Object.keys(record).filter((key) => !descriptor.fields.some((field) => field.name === key));
+    for (const key of unknown) {
+        issues.push({
+            path: path ? `${path}.${key}` : key,
+            code: 'UNKNOWN_FIELD',
+            message: `is not part of ${descriptor.name}`,
+        });
+    }
+    return { ns, name, attributes: [], children };
+}
+function buildSimpleContentElement(name, ns, descriptor, value, path, issues) {
+    if (typeof value !== 'object' || value === null) {
+        issues.push({
+            path,
+            code: 'EXPECTED_OBJECT',
+            message: `expected an object with a value and attributes, got ${describe(value)}`,
+        });
+        return { ns, name, attributes: [], children: [] };
+    }
+    const record = value;
+    const contentKind = primitiveOf(descriptor.contentType, path);
+    const attributes = [];
+    for (const attribute of descriptor.attributes ?? []) {
+        const attributeValue = record[attribute.name];
+        if (attributeValue === undefined || attributeValue === null) {
+            if (attribute.required) {
+                issues.push({
+                    path: `${path}@${attribute.name}`,
+                    code: 'REQUIRED',
+                    message: 'attribute is required',
+                });
+            }
+            continue;
+        }
+        attributes.push([
+            attribute.name,
+            formatPrimitive(primitiveOf(attribute.type, path), attributeValue, `${path}@${attribute.name}`, issues),
+        ]);
+    }
+    return {
+        ns,
+        name,
+        attributes,
+        text: formatPrimitive(contentKind, record['value'], `${path}.value`, issues),
+        children: [],
+    };
+}
+function primitiveOf(typeKey, path) {
+    if (!typeKey) {
+        throw new NavValidationError('Missing type', [
+            { path, code: 'UNKNOWN_TYPE', message: 'simple content without a declared type' },
+        ]);
+    }
+    const primitive = XS_PRIMITIVES[typeKey];
+    if (primitive)
+        return primitive;
+    const descriptor = descriptorFor(typeKey, path);
+    if (descriptor.kind !== 'simple') {
+        throw new NavValidationError('Unexpected complex type', [
+            { path, code: 'UNKNOWN_TYPE', message: `${typeKey} is not a simple type` },
+        ]);
+    }
+    return descriptor.primitive;
+}
+function formatPrimitive(kind, value, path, issues) {
+    switch (kind) {
+        case 'boolean':
+            if (typeof value === 'boolean')
+                return value ? 'true' : 'false';
+            if (value === 'true' || value === 'false')
+                return value;
+            issues.push({
+                path,
+                code: 'EXPECTED_BOOLEAN',
+                message: `expected a boolean, got ${describe(value)}`,
+            });
+            return '';
+        case 'integer':
+            if (typeof value === 'number') {
+                if (!Number.isInteger(value)) {
+                    issues.push({
+                        path,
+                        code: 'EXPECTED_INTEGER',
+                        message: `expected an integer, got ${value}`,
+                    });
+                    return '';
+                }
+                return String(value);
+            }
+            if (typeof value === 'string' && /^-?\d+$/.test(value))
+                return value;
+            issues.push({
+                path,
+                code: 'EXPECTED_INTEGER',
+                message: `expected an integer, got ${describe(value)}`,
+            });
+            return '';
+        case 'decimal':
+            // Strings are the intended representation: they survive 18 significant
+            // digits and rates like 0.27 without a floating point detour.
+            if (typeof value === 'string' && /^-?\d+(\.\d+)?$/.test(value))
+                return value;
+            if (typeof value === 'number' && Number.isFinite(value))
+                return String(value);
+            issues.push({
+                path,
+                code: 'EXPECTED_DECIMAL',
+                message: `expected a decimal, got ${describe(value)}`,
+            });
+            return '';
+        default:
+            if (typeof value === 'string')
+                return value;
+            if (typeof value === 'number' || typeof value === 'boolean')
+                return String(value);
+            issues.push({
+                path,
+                code: 'EXPECTED_STRING',
+                message: `expected a string, got ${describe(value)}`,
+            });
+            return '';
+    }
+}
+function describe(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value))
+        return 'an array';
+    return typeof value;
+}
+function render(element, defaultNs, extraAttributes, indent, depth) {
+    const tag = element.ns === defaultNs ? element.name : `${NS_PREFIXES[element.ns]}:${element.name}`;
+    const attributes = [...element.attributes, ...extraAttributes]
+        .map(([name, value]) => ` ${name}="${escapeAttribute(value)}"`)
+        .join('');
+    const pad = indent === false ? '' : indent.repeat(depth);
+    const newline = indent === false ? '' : '\n';
+    if (element.children.length === 0) {
+        const text = element.text ?? '';
+        if (text === '')
+            return `${pad}<${tag}${attributes}/>`;
+        return `${pad}<${tag}${attributes}>${escapeText(text)}</${tag}>`;
+    }
+    const children = element.children
+        .map((child) => render(child, defaultNs, [], indent, depth + 1))
+        .join(newline);
+    return `${pad}<${tag}${attributes}>${newline}${children}${newline}${pad}</${tag}>`;
+}
+function escapeText(value) {
+    return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+function escapeAttribute(value) {
+    return escapeText(value)
+        .replace(/"/g, '&quot;')
+        .replace(/[\n\r\t]/g, (char) => (char === '\n' ? '&#10;' : char === '\r' ? '&#13;' : '&#9;'));
+}
+//# sourceMappingURL=write.js.map

package/dist/xml/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/xml/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,cAAc,EACd,aAAa,GAKd,MAAM,iBAAiB,CAAC;AAEzB,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAA0B;IAChD,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACnB,CAAC;AAyBF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,QAAQ,EAAE,EAAE;YAChE;gBACE,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,mBAAmB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC5D;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAS,CAAC;IAC9B,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErB,MAAM,YAAY,GAA4B;QAC5C,GAAG,CAAC,GAAG,IAAI,CAAC;aACT,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,EAAE,EAAoB,EAAE,CAAC,CAAC,SAAS,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACnC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC;IAClG,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,KAAK,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB,EAAE,IAAgB;IAC3D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ;QAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,OAAO,EAAE,EAAE;YACtD,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qCAAqC,EAAE;SAC/E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,EAAS,EACT,OAAe,EACf,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,EAAE;YACF,IAAI;YACJ,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;YACrD,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO;YACL,EAAE;YACF,IAAI;YACJ,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;YAChE,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,yBAAyB,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,2BAA2B,QAAQ,CAAC,KAAK,CAAC,EAAE;SACtD,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAE9D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,2CAA2C,QAAQ,CAAC,UAAU,CAAC,EAAE;iBAC3E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,kBAAkB,KAAK,CAAC,SAAS,iBAAiB,UAAU,CAAC,MAAM,EAAE;iBAC/E,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CACX,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,IAAI,KAAK,EAAE,EAAE,MAAM,CAAC,CACtF,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,kDAAkD;aAC5D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CACxC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAChE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG;YACnC,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,kBAAkB,UAAU,CAAC,IAAI,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,yBAAyB,CAChC,IAAY,EACZ,EAAS,EACT,UAA6B,EAC7B,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,uDAAuD,QAAQ,CAAC,KAAK,CAAC,EAAE;SAClF,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5D,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE;oBACjC,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,CAAC,IAAI;YACd,eAAe,CACb,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EACjC,cAAc,EACd,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAC3B,MAAM,CACP;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,EAAE;QACF,IAAI;QACJ,UAAU;QACV,IAAI,EAAE,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC;QAC5E,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B,EAAE,IAAY;IAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE;YAC3C,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wCAAwC,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE;YACtD,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,OAAO,uBAAuB,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CACtB,IAAmB,EACnB,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,2BAA2B,QAAQ,CAAC,KAAK,CAAC,EAAE;aACtD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAEZ,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI;wBACJ,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,4BAA4B,KAAK,EAAE;qBAC7C,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,4BAA4B,QAAQ,CAAC,KAAK,CAAC,EAAE;aACvD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAEZ,KAAK,SAAS;YACZ,uEAAuE;YACvE,8DAA8D;YAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,2BAA2B,QAAQ,CAAC,KAAK,CAAC,EAAE;aACtD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QAEZ;YACE,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,KAAK,CAAC,EAAE;aACrD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAgB,EAChB,SAAgB,EAChB,eAAwC,EACxC,MAAsB,EACtB,KAAa;IAEb,MAAM,GAAG,GACP,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IACzF,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,eAAe,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC;SAC9D,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7C,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,GAAG,GAAG,IAAI,GAAG,GAAG,UAAU,IAAI,CAAC;QACvD,OAAO,GAAG,GAAG,IAAI,GAAG,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;SAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;SAC/D,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,OAAO,GAAG,GAAG,IAAI,GAAG,GAAG,UAAU,IAAI,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,UAAU,CAAC,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@open-nav/core",
+  "version": "0.1.0",
+  "description": "Types, invoice building, XML serialisation and cryptography for the Hungarian NAV Online Számla API",
+  "keywords": [
+    "nav",
+    "onlineszamla",
+    "online-szamla",
+    "hungary",
+    "invoice",
+    "einvoice",
+    "tax"
+  ],
+  "license": "MIT",
+  "author": "open-nav contributors",
+  "homepage": "https://github.com/eshton/open-nav#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/eshton/open-nav.git",
+    "directory": "packages/core"
+  },
+  "bugs": "https://github.com/eshton/open-nav/issues",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20.10.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^1.2.1",
+    "@noble/hashes": "^1.7.1",
+    "fast-xml-parser": "^4.5.1"
+  },
+  "scripts": {
+    "build": "tsc -b"
+  }
+}

package/src/constants.ts

@@ -0,0 +1,76 @@
+/**
+ * Protocol level constants for the NAV Online Számla (Online Invoice) system.
+ *
+ * The reference documentation is published by NAV at
+ * https://onlineszamla.nav.gov.hu/dokumentaciok — this library targets
+ * interface version 3.0 of the invoice service.
+ */
+
+/** XML namespace of the invoice service request/response envelopes. */
+export const NS_API = 'http://schemas.nav.gov.hu/OSA/3.0/api';
+
+/** XML namespace of the invoice payload (`InvoiceData`). */
+export const NS_DATA = 'http://schemas.nav.gov.hu/OSA/3.0/data';
+
+/** XML namespace of shared invoice building blocks (addresses, tax numbers). */
+export const NS_BASE = 'http://schemas.nav.gov.hu/OSA/3.0/base';
+
+/** XML namespace of the annulment payload (`InvoiceAnnulment`). */
+export const NS_ANNUL = 'http://schemas.nav.gov.hu/OSA/3.0/annul';
+
+/** XML namespace of the NTCA common header/user blocks. */
+export const NS_COMMON = 'http://schemas.nav.gov.hu/NTCA/1.0/common';
+
+/** Value of `header/requestVersion` for this interface version. */
+export const REQUEST_VERSION = '3.0';
+
+/** Value of `header/headerVersion` for this interface version. */
+export const HEADER_VERSION = '1.0';
+
+/** Base URL of the NAV production invoice service. */
+export const PRODUCTION_BASE_URL = 'https://api.onlineszamla.nav.gov.hu/invoiceService/v3';
+
+/** Base URL of the NAV test ("teszt") invoice service. */
+export const TEST_BASE_URL = 'https://api-test.onlineszamla.nav.gov.hu/invoiceService/v3';
+
+/** Well known NAV environments and their base URLs. */
+export const BASE_URLS = {
+  production: PRODUCTION_BASE_URL,
+  test: TEST_BASE_URL,
+} as const;
+
+export type NavEnvironment = keyof typeof BASE_URLS;
+
+/** Operation names (path segments) exposed by the invoice service. */
+export const OPERATIONS = [
+  'tokenExchange',
+  'manageInvoice',
+  'manageAnnulment',
+  'queryTransactionStatus',
+  'queryTransactionList',
+  'queryInvoiceData',
+  'queryInvoiceDigest',
+  'queryInvoiceChainDigest',
+  'queryInvoiceCheck',
+  'queryTaxpayer',
+] as const;
+
+export type NavOperation = (typeof OPERATIONS)[number];
+
+/**
+ * Maximum number of invoice operations NAV accepts in a single
+ * `manageInvoice` request.
+ */
+export const MAX_INVOICE_BATCH_SIZE = 100;
+
+/** Page size used by NAV for every paged query response. */
+export const QUERY_PAGE_SIZE = 100;
+
+/**
+ * Maximum length of the `requestId` header field. NAV also requires it to be
+ * unique per taxpayer, forever.
+ */
+export const REQUEST_ID_MAX_LENGTH = 30;
+
+/** Characters NAV allows in a `requestId`. */
+export const REQUEST_ID_PATTERN = /^[+a-zA-Z0-9_]{1,30}$/;

package/src/crypto/hash.ts

@@ -0,0 +1,35 @@
+import { getCryptoProvider } from './provider.js';
+
+const encoder = new TextEncoder();
+
+function toHexUpper(bytes: Uint8Array): string {
+  let out = '';
+  for (const byte of bytes) out += byte.toString(16).padStart(2, '0');
+  return out.toUpperCase();
+}
+
+/** Uppercase hexadecimal SHA-512 digest of a UTF-8 string. */
+export function sha512(value: string): string {
+  return toHexUpper(getCryptoProvider().sha512(encoder.encode(value)));
+}
+
+/** Uppercase hexadecimal SHA3-512 digest of a UTF-8 string. */
+export function sha3_512(value: string): string {
+  return toHexUpper(getCryptoProvider().sha3_512(encoder.encode(value)));
+}
+
+/**
+ * Hash of the technical user's password for the `user/passwordHash` field.
+ *
+ * NAV expects the uppercase hex SHA-512 digest of the password, declared on
+ * the element with `cryptoType="SHA-512"`.
+ */
+export function passwordHash(password: string): string {
+  return sha512(password);
+}
+
+/** `cryptoType` attribute value used for `passwordHash`. */
+export const PASSWORD_HASH_CRYPTO_TYPE = 'SHA-512';
+
+/** `cryptoType` attribute value used for `requestSignature` and invoice hashes. */
+export const SIGNATURE_CRYPTO_TYPE = 'SHA3-512';

package/src/crypto/node-provider.ts

@@ -0,0 +1,19 @@
+import { createHash, createDecipheriv, randomBytes } from 'node:crypto';
+import type { CryptoProvider } from './provider.js';
+
+/**
+ * The default {@link CryptoProvider}, backed by Node's built-in `node:crypto`.
+ *
+ * Works on Node, Bun and Deno. It does **not** work on Cloudflare Workers,
+ * whose `node:crypto` lacks SHA-3 — use {@link createWebCryptoProvider} there.
+ */
+export const nodeCryptoProvider: CryptoProvider = {
+  sha512: (data) => Uint8Array.from(createHash('sha512').update(data).digest()),
+  sha3_512: (data) => Uint8Array.from(createHash('sha3-512').update(data).digest()),
+  aes128EcbDecrypt: (ciphertext, key) => {
+    const decipher = createDecipheriv('aes-128-ecb', key, null);
+    decipher.setAutoPadding(false);
+    return Uint8Array.from(Buffer.concat([decipher.update(ciphertext), decipher.final()]));
+  },
+  randomBytes: (length) => Uint8Array.from(randomBytes(length)),
+};

package/src/crypto/provider.ts

@@ -0,0 +1,37 @@
+import { nodeCryptoProvider } from './node-provider.js';
+
+/**
+ * The low-level cryptographic primitives the NAV protocol needs, abstracted so
+ * the library can run on any JavaScript runtime.
+ *
+ * The default is {@link nodeCryptoProvider}, backed by Node's built-in
+ * `node:crypto`. On runtimes whose `node:crypto` lacks SHA-3 — notably
+ * Cloudflare Workers (workerd/BoringSSL), where `createHash('sha3-512')` throws
+ * `Digest method not supported` — install {@link createWebCryptoProvider} via
+ * {@link setCryptoProvider} once at startup, before making any request.
+ */
+export interface CryptoProvider {
+  /** Raw SHA-512 digest of `data`. */
+  sha512(data: Uint8Array): Uint8Array;
+  /** Raw SHA3-512 digest of `data`. */
+  sha3_512(data: Uint8Array): Uint8Array;
+  /** AES-128 ECB decryption without padding; `key` is exactly 16 bytes. */
+  aes128EcbDecrypt(ciphertext: Uint8Array, key: Uint8Array): Uint8Array;
+  /** `length` cryptographically strong random bytes. */
+  randomBytes(length: number): Uint8Array;
+}
+
+let activeProvider: CryptoProvider = nodeCryptoProvider;
+
+/** The crypto provider currently backing every cryptographic helper. */
+export function getCryptoProvider(): CryptoProvider {
+  return activeProvider;
+}
+
+/**
+ * Replace the active crypto provider. Call once at startup, before any NAV
+ * request — e.g. `setCryptoProvider(createWebCryptoProvider())` in a Worker.
+ */
+export function setCryptoProvider(provider: CryptoProvider): void {
+  activeProvider = provider;
+}

package/src/crypto/request-id.ts

@@ -0,0 +1,63 @@
+import { getCryptoProvider } from './provider.js';
+import { REQUEST_ID_MAX_LENGTH, REQUEST_ID_PATTERN } from '../constants.js';
+import { NavValidationError } from '../errors.js';
+
+const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+
+/**
+ * Generate a `requestId` that satisfies NAV's constraints.
+ *
+ * NAV requires the value to match `[+a-zA-Z0-9_]{1,30}` and to be unique for
+ * the taxpayer across all requests ever sent — a replayed identifier is
+ * rejected with `INVALID_REQUEST_ID`. The generated value combines a
+ * millisecond timestamp with random characters, which is collision safe for
+ * practical throughput, but persisting issued identifiers is still the only
+ * way to be certain after a clock change.
+ *
+ * @param prefix optional caller prefix, useful for tracing (`[a-zA-Z0-9_+]`)
+ */
+export function createRequestId(prefix = 'ON'): string {
+  assertRequestIdChars(prefix, 'prefix');
+  const stamp = Date.now().toString(36).toUpperCase();
+  const available = REQUEST_ID_MAX_LENGTH - prefix.length - stamp.length;
+  if (available < 4) {
+    throw new NavValidationError('requestId prefix is too long', [
+      {
+        path: 'prefix',
+        code: 'REQUEST_ID_PREFIX_TOO_LONG',
+        message: `leaves only ${available} characters of entropy, need at least 4`,
+      },
+    ]);
+  }
+  return `${prefix}${stamp}${randomChars(Math.min(available, 8))}`;
+}
+
+/** Throw unless `value` is a valid `requestId`. */
+export function assertRequestId(value: string): void {
+  if (!REQUEST_ID_PATTERN.test(value)) {
+    throw new NavValidationError('Invalid requestId', [
+      {
+        path: 'requestId',
+        code: 'INVALID_REQUEST_ID',
+        message: `must match ${REQUEST_ID_PATTERN.source}, got ${JSON.stringify(value)}`,
+      },
+    ]);
+  }
+}
+
+function assertRequestIdChars(value: string, path: string): void {
+  if (!/^[+a-zA-Z0-9_]*$/.test(value)) {
+    throw new NavValidationError('Invalid requestId characters', [
+      { path, code: 'INVALID_REQUEST_ID', message: 'may only contain [+a-zA-Z0-9_]' },
+    ]);
+  }
+}
+
+function randomChars(length: number): string {
+  const bytes = getCryptoProvider().randomBytes(length);
+  let out = '';
+  for (let i = 0; i < length; i += 1) {
+    out += ALPHABET[bytes[i]! % ALPHABET.length];
+  }
+  return out;
+}

package/src/crypto/signature.ts

@@ -0,0 +1,58 @@
+import { sha3_512 } from './hash.js';
+import { toSignatureTimestamp } from '../time.js';
+
+/**
+ * A single invoice (or annulment) operation as it contributes to the request
+ * signature of a `manageInvoice` / `manageAnnulment` call.
+ */
+export interface SignedOperation {
+  /** 1-based position inside the batch; operations are hashed in index order. */
+  index: number;
+  /** `CREATE`, `MODIFY`, `STORNO` or `ANNUL`. */
+  operation: string;
+  /** Base64 encoded payload exactly as it appears in the request XML. */
+  base64Payload: string;
+}
+
+/**
+ * Hash of one invoice operation, as consumed by {@link requestSignature} and
+ * as sent in the optional `electronicInvoiceHash` element.
+ *
+ * NAV defines it as `SHA3-512(operation || base64Payload)`, uppercase hex.
+ */
+export function operationHash(operation: string, base64Payload: string): string {
+  return sha3_512(`${operation}${base64Payload}`);
+}
+
+/**
+ * Compute the `user/requestSignature` value.
+ *
+ * NAV specifies the signature as
+ *
+ * ```text
+ * SHA3-512( requestId || yyyyMMddHHmmss(timestamp) || signKey || hash(op1) || hash(op2) ... )
+ * ```
+ *
+ * where the per-operation hashes are only present for `manageInvoice` and
+ * `manageAnnulment` requests and must be concatenated in ascending `index`
+ * order. The timestamp must be the request header timestamp truncated to
+ * whole seconds and rendered in UTC without separators.
+ *
+ * @param requestId  the `header/requestId` of the same request
+ * @param timestamp  the `header/timestamp` of the same request
+ * @param signKey    the technical user's signature key (aláírókulcs)
+ * @param operations invoice/annulment operations of the batch, if any
+ */
+export function requestSignature(
+  requestId: string,
+  timestamp: Date | string,
+  signKey: string,
+  operations: SignedOperation[] = [],
+): string {
+  const operationDigests = [...operations]
+    .sort((a, b) => a.index - b.index)
+    .map((op) => operationHash(op.operation, op.base64Payload))
+    .join('');
+
+  return sha3_512(`${requestId}${toSignatureTimestamp(timestamp)}${signKey}${operationDigests}`);
+}