@agenticprimitives/payments 0.0.0-alpha.10

package/dist/index.d.ts

@@ -0,0 +1,135 @@
+/**
+ * @agenticprimitives/payments — PaymentMandate + rail abstraction.
+ * Spine Layer 9b.
+ *
+ * Authoritative spec: specs/243-payments.md
+ */
+import type { Address, Hex } from '@agenticprimitives/types';
+export declare const PACKAGE_NAME = "@agenticprimitives/payments";
+export declare const PACKAGE_STATUS: "w1-foundational";
+export declare const SPEC_REF = "specs/243-payments.md";
+export type Hex32 = `0x${string}`;
+export type PaymentRail = 'x402' | 'wallet' | 'sponsored-userop' | 'escrow' | 'invoice' | 'confidential-aztec' | 'confidential-zcash' | 'confidential-zk-paymaster';
+export interface AssetRef {
+    id: string;
+    symbol?: string;
+    decimals?: number;
+}
+export type AmountPolicy = {
+    kind: 'exact';
+    amount: bigint;
+    asset: AssetRef;
+    chain: number;
+} | {
+    kind: 'range';
+    minAmount: bigint;
+    maxAmount: bigint;
+    asset: AssetRef;
+    chain: number;
+} | {
+    kind: 'formula';
+    formulaId: Hex32;
+    maxAmount: bigint;
+    asset: AssetRef;
+    chain: number;
+};
+export interface MandateConstraints {
+    maxAggregateAmount?: bigint;
+    frequency?: {
+        maxRedemptionsPerWindow: number;
+        windowSeconds: number;
+    };
+    categories?: string[];
+    excludedCategories?: string[];
+    geoFence?: string[];
+}
+export interface ContextBinding {
+    intentId?: string;
+    agreementCommitment?: Hex32;
+    taskId?: Hex32;
+    artifactHash?: Hex32;
+    resource?: {
+        method: string;
+        url: string;
+        requestBodyHash: Hex32;
+    };
+    /** EXC-R2 — the ExchangeOrder this payment leg belongs to (273/274). x402 sets `orderHash = quoteId`. */
+    orderHash?: Hex32;
+    /** EXC-R2 — distinguishes legs within one order (charge / refund / split-out / escrow-release). */
+    legId?: Hex32;
+    chain: number;
+    asset: AssetRef;
+    nonce: bigint;
+    validFrom: number;
+    expiresAt: number;
+}
+export type PaymentMandateMode = 'open' | 'closed';
+export interface PaymentMandate {
+    mandateId: Hex32;
+    payer: Address;
+    payee: Address;
+    granter: Address;
+    rail: PaymentRail;
+    railConfig?: Record<string, unknown>;
+    amountPolicy: AmountPolicy;
+    mandateConstraints?: MandateConstraints;
+    nonce: bigint;
+    maxRedemptions: number;
+    validFrom: number;
+    expiresAt: number;
+    contextBinding: ContextBinding;
+    delegationRef?: Hex32;
+    mode: PaymentMandateMode;
+    requiresClosedMandateForFinalCharge?: boolean;
+    reasonHash: Hex32;
+    signature: Hex;
+}
+/** PMT-3.1: at least one context-binding handle MUST be populated. */
+export declare function assertContextBindingValid(cb: ContextBinding): void;
+/** PMT-INV-14 / PMT-10.1: closed mandates are always one-shot. */
+export declare function assertClosedMandateInvariants(mandate: PaymentMandate): void;
+export declare function computeMandateId(args: {
+    payer: Address;
+    nonce: bigint;
+    rail: PaymentRail;
+    chain: number;
+}): Hex32;
+export interface PaymentRailExecutor {
+    rail: PaymentRail;
+    verifyMandate(mandate: PaymentMandate): Promise<{
+        valid: boolean;
+        reason?: string;
+    }>;
+    prepareRedemption(mandate: PaymentMandate): Promise<{
+        planId: Hex32;
+        details: Record<string, unknown>;
+    }>;
+    executeRedemption(plan: {
+        planId: Hex32;
+    }): Promise<{
+        receiptHash: Hex32;
+        settlementHash: Hex32;
+    }>;
+}
+export declare function registerRail(executor: PaymentRailExecutor): void;
+export declare function getRail(rail: PaymentRail): PaymentRailExecutor | undefined;
+export { PAYMENT_MANDATE_DOMAIN_NAME, PAYMENT_MANDATE_DOMAIN_VERSION, PAYMENT_MANDATE_EIP712_TYPES, ERC1271_MAGIC, mandateAmount, hashContextBinding, hashMandateBindings, paymentMandateDomain, buildPaymentMandateTypedData, paymentMandateDigest, signPaymentMandate, verifyPaymentMandateSignature, } from './mandate-sign.js';
+export type { MandateDomainOpts, MandateSigner, Erc1271Reader } from './mandate-sign.js';
+export { PAYMENT_RECEIPT_TYPE, settlementEpochBucket, buildPaymentReceiptCredential } from './receipt.js';
+export type { PaymentReceiptInput } from './receipt.js';
+export * as x402 from './rails/x402/index.js';
+export * as entitlement from './entitlement/index.js';
+export { ERC20_TRANSFER_ABI, ERC20_APPROVE_ABI, buildErc20Transfer, buildErc20Approve, buildNativeTransfer } from './transfer.js';
+export type { TransferPlan } from './transfer.js';
+export { buildClosedMandate } from './mandate.js';
+export type { ClosedMandateInput } from './mandate.js';
+export * as wallet from './rails/wallet.js';
+export * as invoice from './rails/invoice.js';
+export * as escrow from './rails/escrow.js';
+export * as recurring from './rails/recurring.js';
+export { buildRefund } from './refund.js';
+export type { RefundInput, RefundPlan } from './refund.js';
+export { buildSplitPayout, BPS_DENOMINATOR } from './split.js';
+export type { SplitRecipient, SplitLeg } from './split.js';
+export * as ops from './ops.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,gCAAgC,CAAC;AAC1D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,0BAA0B,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,uBAAuB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAA;KAAE,CAAC;IACnE,yGAAyG;IACzG,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,mGAAmG;IACnG,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAOlE;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAMR;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACzG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,KAAK,CAAC;QAAC,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAEhE;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,CAE1E;AAGD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGzF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAG9C,OAAO,KAAK,WAAW,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAClI,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,60 @@
+/**
+ * @agenticprimitives/payments — PaymentMandate + rail abstraction.
+ * Spine Layer 9b.
+ *
+ * Authoritative spec: specs/243-payments.md
+ */
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { utf8ToBytes } from '@noble/hashes/utils.js';
+export const PACKAGE_NAME = '@agenticprimitives/payments';
+export const PACKAGE_STATUS = 'w1-foundational';
+export const SPEC_REF = 'specs/243-payments.md';
+/** PMT-3.1: at least one context-binding handle MUST be populated. */
+export function assertContextBindingValid(cb) {
+    const any = cb.intentId || cb.agreementCommitment || cb.taskId || cb.artifactHash || cb.resource;
+    if (!any) {
+        throw new Error('[payments/PMT-3.1] ContextBinding MUST populate at least one of intentId / agreementCommitment / taskId / artifactHash / resource');
+    }
+}
+/** PMT-INV-14 / PMT-10.1: closed mandates are always one-shot. */
+export function assertClosedMandateInvariants(mandate) {
+    if (mandate.mode === 'closed' && mandate.maxRedemptions !== 1) {
+        throw new Error(`[payments/PMT-INV-14] closed mandate MUST have maxRedemptions = 1`);
+    }
+}
+export function computeMandateId(args) {
+    const blob = `${args.payer.toLowerCase()}:${args.nonce}:${args.rail}:${args.chain}`;
+    const digest = keccak_256(utf8ToBytes(blob));
+    let hex = '0x';
+    for (const v of digest)
+        hex += v.toString(16).padStart(2, '0');
+    return hex;
+}
+const _rails = new Map();
+export function registerRail(executor) {
+    _rails.set(executor.rail, executor);
+}
+export function getRail(rail) {
+    return _rails.get(rail);
+}
+// Spec 243 §4.2 / PMT-INV-02/12 — EIP-712 mandate signing + ERC-1271 verification.
+export { PAYMENT_MANDATE_DOMAIN_NAME, PAYMENT_MANDATE_DOMAIN_VERSION, PAYMENT_MANDATE_EIP712_TYPES, ERC1271_MAGIC, mandateAmount, hashContextBinding, hashMandateBindings, paymentMandateDomain, buildPaymentMandateTypedData, paymentMandateDigest, signPaymentMandate, verifyPaymentMandateSignature, } from './mandate-sign.js';
+// Spec 243 §7 / X402-D9.3 — PaymentReceipt verifiable credential.
+export { PAYMENT_RECEIPT_TYPE, settlementEpochBucket, buildPaymentReceiptCredential } from './receipt.js';
+// Spec 272 — the x402 rail (staged executor + v2 wire + nonce store + resource binding).
+export * as x402 from './rails/x402/index.js';
+// Spec 272 §10 — entitlements (pay-once-then-access; credits = maxUses:N).
+export * as entitlement from './entitlement/index.js';
+// Spec 243 §5.5 — shared transfer plumbing + closed-mandate builder.
+export { ERC20_TRANSFER_ABI, ERC20_APPROVE_ABI, buildErc20Transfer, buildErc20Approve, buildNativeTransfer } from './transfer.js';
+export { buildClosedMandate } from './mandate.js';
+// Spec 243 §5.5 — general-purpose rails + profiles + payout legs.
+export * as wallet from './rails/wallet.js';
+export * as invoice from './rails/invoice.js';
+export * as escrow from './rails/escrow.js';
+export * as recurring from './rails/recurring.js';
+export { buildRefund } from './refund.js';
+export { buildSplitPayout, BPS_DENOMINATOR } from './split.js';
+// Spec 243 §5.5 — ops core (idempotent event log + reconciliation + export).
+export * as ops from './ops.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAyEhD,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,QAAQ,CAAC;IACjG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,OAAuB;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAY,CAAC;AACtB,CAAC;AASD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;AAC3D,MAAM,UAAU,YAAY,CAAC,QAA6B;IACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAG3B,kEAAkE;AAClE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAG1G,yFAAyF;AACzF,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAE9C,2EAA2E;AAC3E,OAAO,KAAK,WAAW,MAAM,wBAAwB,CAAC;AAEtD,qEAAqE;AACrE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAElI,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,kEAAkE;AAClE,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG/D,6EAA6E;AAC7E,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC"}

package/dist/mandate-sign.d.ts

@@ -0,0 +1,187 @@
+/**
+ * PMT-INV-02 / PMT-INV-12 — EIP-712 mandate signing + ERC-1271 verification.
+ *
+ * The payer SA signs an EIP-712 typed-data digest of the mandate. The signed
+ * struct flattens the load-bearing fields and folds the entire `ContextBinding`
+ * into one `contextBindingHash` — so no field can be stripped or substituted
+ * after signing (PMT-INV-02 / INV-07 / INV-08), and verification is one
+ * ERC-1271 call against the payer SA (PMT-INV-12 — no raw EOA signatures).
+ *
+ * Pure crypto only (viem) — the actual ERC-1271 read is injected so the package
+ * stays transport-agnostic (no hard publicClient dependency).
+ */
+import { type Address, type Hex } from 'viem';
+import type { PaymentMandate, ContextBinding, Hex32 } from './index.js';
+export declare const PAYMENT_MANDATE_DOMAIN_NAME = "AgenticPaymentMandate";
+export declare const PAYMENT_MANDATE_DOMAIN_VERSION = "1";
+/** ERC-1271 magic value for a valid signature. */
+export declare const ERC1271_MAGIC = "0x1626ba7e";
+export declare const PAYMENT_MANDATE_EIP712_TYPES: {
+    readonly PaymentMandate: readonly [{
+        readonly name: "mandateId";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "payer";
+        readonly type: "address";
+    }, {
+        readonly name: "payee";
+        readonly type: "address";
+    }, {
+        readonly name: "granter";
+        readonly type: "address";
+    }, {
+        readonly name: "asset";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxRedemptions";
+        readonly type: "uint256";
+    }, {
+        readonly name: "validFrom";
+        readonly type: "uint256";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "mode";
+        readonly type: "string";
+    }, {
+        readonly name: "rail";
+        readonly type: "string";
+    }, {
+        readonly name: "reasonHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "contextBindingHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "bindingHash";
+        readonly type: "bytes32";
+    }];
+};
+/**
+ * EXT-PMT-2 — fold the mandate's binding fields the core typed-data omitted into one committed hash:
+ * railConfig (the x402 quote binding: quoteId + resourceHash), mandateConstraints (aggregate scope),
+ * delegationRef, and the requiresClosedMandateForFinalCharge flag. Absent fields hash to a stable
+ * sentinel, so adding/removing one changes the digest.
+ */
+export declare function hashMandateBindings(mandate: PaymentMandate): Hex32;
+/** The charge amount carried by the mandate (exact → amount; range/formula → maxAmount). */
+export declare function mandateAmount(mandate: PaymentMandate): bigint;
+/**
+ * Canonical hash of the ENTIRE context binding (PMT-INV-02). Every field is
+ * folded in; absent fields hash to zero, so adding/removing one changes the hash.
+ */
+export declare function hashContextBinding(cb: ContextBinding): Hex32;
+export interface MandateDomainOpts {
+    chainId: number;
+    /** Optional binding to a specific contract (e.g. the PaymentEnforcer). Omit for a chain-scoped mandate. */
+    verifyingContract?: Address;
+}
+export declare function paymentMandateDomain(opts: MandateDomainOpts): {
+    readonly verifyingContract?: `0x${string}` | undefined;
+    readonly name: "AgenticPaymentMandate";
+    readonly version: "1";
+    readonly chainId: number;
+};
+/** The full EIP-712 typed-data object (domain + types + message) for a mandate. */
+export declare function buildPaymentMandateTypedData(mandate: PaymentMandate, opts: MandateDomainOpts): {
+    domain: {
+        readonly verifyingContract?: `0x${string}` | undefined;
+        readonly name: "AgenticPaymentMandate";
+        readonly version: "1";
+        readonly chainId: number;
+    };
+    types: {
+        readonly PaymentMandate: readonly [{
+            readonly name: "mandateId";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "payer";
+            readonly type: "address";
+        }, {
+            readonly name: "payee";
+            readonly type: "address";
+        }, {
+            readonly name: "granter";
+            readonly type: "address";
+        }, {
+            readonly name: "asset";
+            readonly type: "address";
+        }, {
+            readonly name: "amount";
+            readonly type: "uint256";
+        }, {
+            readonly name: "nonce";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxRedemptions";
+            readonly type: "uint256";
+        }, {
+            readonly name: "validFrom";
+            readonly type: "uint256";
+        }, {
+            readonly name: "expiresAt";
+            readonly type: "uint256";
+        }, {
+            readonly name: "mode";
+            readonly type: "string";
+        }, {
+            readonly name: "rail";
+            readonly type: "string";
+        }, {
+            readonly name: "reasonHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "contextBindingHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "bindingHash";
+            readonly type: "bytes32";
+        }];
+    };
+    primaryType: "PaymentMandate";
+    message: {
+        readonly mandateId: `0x${string}`;
+        readonly payer: `0x${string}`;
+        readonly payee: `0x${string}`;
+        readonly granter: `0x${string}`;
+        readonly asset: Address;
+        readonly amount: bigint;
+        readonly nonce: bigint;
+        readonly maxRedemptions: bigint;
+        readonly validFrom: bigint;
+        readonly expiresAt: bigint;
+        readonly mode: import("./index.js").PaymentMandateMode;
+        readonly rail: import("./index.js").PaymentRail;
+        readonly reasonHash: `0x${string}`;
+        readonly contextBindingHash: `0x${string}`;
+        readonly bindingHash: `0x${string}`;
+    };
+};
+/** The 32-byte EIP-712 digest the payer SA's ERC-1271 validates over. */
+export declare function paymentMandateDigest(mandate: PaymentMandate, opts: MandateDomainOpts): Hex32;
+/** Signer surface — an SA signer that produces an ERC-1271-validatable signature over typed data. */
+export interface MandateSigner {
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: typeof PAYMENT_MANDATE_EIP712_TYPES;
+        primaryType: 'PaymentMandate';
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+}
+/** Sign an unsigned mandate (`signature: '0x'`) → a fully-populated mandate. */
+export declare function signPaymentMandate(mandate: PaymentMandate, signer: MandateSigner, opts: MandateDomainOpts): Promise<PaymentMandate>;
+/** Injected ERC-1271 read: returns the 4-byte magic from `payer.isValidSignature(digest, signature)`. */
+export type Erc1271Reader = (account: Address, digest: Hex32, signature: Hex) => Promise<Hex>;
+/**
+ * PMT-INV-12 — verify the mandate's signature via the payer SA's ERC-1271. Fail-closed: any read
+ * error or non-magic result is `false` (never throws on a bad signature).
+ */
+export declare function verifyPaymentMandateSignature(mandate: PaymentMandate, opts: MandateDomainOpts, read1271: Erc1271Reader): Promise<boolean>;
+//# sourceMappingURL=mandate-sign.d.ts.map

package/dist/mandate-sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-sign.d.ts","sourceRoot":"","sources":["../src/mandate-sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExE,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AACnE,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,kDAAkD;AAClD,eAAO,MAAM,aAAa,eAAe,CAAC;AAE1C,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AAgBX;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,KAAK,CASlE;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAG7D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,cAAc,GAAG,KAAK,CAyC5D;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,2GAA2G;IAC3G,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB;;;;;EAO3D;AAsBD,mFAAmF;AACnF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAfjD,OAAO;;;;;;;;;;;;EAsBlD;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,GAAG,KAAK,CAG5F;AAED,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,IAAI,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,OAAO,4BAA4B,CAAC;QAC3C,WAAW,EAAE,gBAAgB,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAClB;AAED,gFAAgF;AAChF,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,yGAAyG;AACzG,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAE9F;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/mandate-sign.js

@@ -0,0 +1,177 @@
+/**
+ * PMT-INV-02 / PMT-INV-12 — EIP-712 mandate signing + ERC-1271 verification.
+ *
+ * The payer SA signs an EIP-712 typed-data digest of the mandate. The signed
+ * struct flattens the load-bearing fields and folds the entire `ContextBinding`
+ * into one `contextBindingHash` — so no field can be stripped or substituted
+ * after signing (PMT-INV-02 / INV-07 / INV-08), and verification is one
+ * ERC-1271 call against the payer SA (PMT-INV-12 — no raw EOA signatures).
+ *
+ * Pure crypto only (viem) — the actual ERC-1271 read is injected so the package
+ * stays transport-agnostic (no hard publicClient dependency).
+ */
+import { hashTypedData, keccak256, encodeAbiParameters, toHex, toBytes, } from 'viem';
+export const PAYMENT_MANDATE_DOMAIN_NAME = 'AgenticPaymentMandate';
+export const PAYMENT_MANDATE_DOMAIN_VERSION = '1';
+/** ERC-1271 magic value for a valid signature. */
+export const ERC1271_MAGIC = '0x1626ba7e';
+export const PAYMENT_MANDATE_EIP712_TYPES = {
+    PaymentMandate: [
+        { name: 'mandateId', type: 'bytes32' },
+        { name: 'payer', type: 'address' },
+        { name: 'payee', type: 'address' },
+        { name: 'granter', type: 'address' },
+        { name: 'asset', type: 'address' },
+        { name: 'amount', type: 'uint256' },
+        { name: 'nonce', type: 'uint256' },
+        { name: 'maxRedemptions', type: 'uint256' },
+        { name: 'validFrom', type: 'uint256' },
+        { name: 'expiresAt', type: 'uint256' },
+        { name: 'mode', type: 'string' },
+        { name: 'rail', type: 'string' },
+        { name: 'reasonHash', type: 'bytes32' },
+        { name: 'contextBindingHash', type: 'bytes32' },
+        // EXT-PMT-2: commit the previously-unsigned binding fields — railConfig (the quote binding,
+        // quoteId/resourceHash), delegationRef, mandateConstraints, and requiresClosedMandateForFinalCharge —
+        // so a signature can't be replayed against a different quote / delegation / constraint set.
+        { name: 'bindingHash', type: 'bytes32' },
+    ],
+};
+const ZERO32 = ('0x' + '00'.repeat(32));
+const hashStr = (s) => (s ? keccak256(toBytes(s)) : ZERO32);
+/** Deterministic serialization (sorted keys, bigint→decimal, undefined dropped) for the loose
+ *  railConfig / mandateConstraints objects so their hash is stable across key order. */
+function canonicalJson(v) {
+    if (v === null || v === undefined)
+        return 'null';
+    if (typeof v === 'bigint')
+        return v.toString();
+    if (typeof v !== 'object')
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(canonicalJson).join(',')}]`;
+    const o = v;
+    return `{${Object.keys(o).sort().filter((k) => o[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(',')}}`;
+}
+/**
+ * EXT-PMT-2 — fold the mandate's binding fields the core typed-data omitted into one committed hash:
+ * railConfig (the x402 quote binding: quoteId + resourceHash), mandateConstraints (aggregate scope),
+ * delegationRef, and the requiresClosedMandateForFinalCharge flag. Absent fields hash to a stable
+ * sentinel, so adding/removing one changes the digest.
+ */
+export function hashMandateBindings(mandate) {
+    const railConfigHash = hashStr(canonicalJson(mandate.railConfig ?? null));
+    const constraintsHash = hashStr(canonicalJson(mandate.mandateConstraints ?? null));
+    return keccak256(encodeAbiParameters([{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32' }, { type: 'bool' }], [railConfigHash, constraintsHash, mandate.delegationRef ?? ZERO32, !!mandate.requiresClosedMandateForFinalCharge]));
+}
+/** The charge amount carried by the mandate (exact → amount; range/formula → maxAmount). */
+export function mandateAmount(mandate) {
+    const ap = mandate.amountPolicy;
+    return ap.kind === 'exact' ? ap.amount : ap.maxAmount;
+}
+/**
+ * Canonical hash of the ENTIRE context binding (PMT-INV-02). Every field is
+ * folded in; absent fields hash to zero, so adding/removing one changes the hash.
+ */
+export function hashContextBinding(cb) {
+    const resourceHash = cb.resource
+        ? keccak256(encodeAbiParameters([{ type: 'string' }, { type: 'string' }, { type: 'bytes32' }], [cb.resource.method, cb.resource.url, cb.resource.requestBodyHash]))
+        : ZERO32;
+    return keccak256(encodeAbiParameters([
+        { type: 'bytes32' }, // intentIdHash
+        { type: 'bytes32' }, // agreementCommitment
+        { type: 'bytes32' }, // taskId
+        { type: 'bytes32' }, // artifactHash
+        { type: 'bytes32' }, // resourceHash
+        { type: 'bytes32' }, // orderHash
+        { type: 'bytes32' }, // legId
+        { type: 'uint256' }, // chain
+        { type: 'address' }, // asset
+        { type: 'uint256' }, // nonce
+        { type: 'uint256' }, // validFrom
+        { type: 'uint256' }, // expiresAt
+    ], [
+        hashStr(cb.intentId),
+        cb.agreementCommitment ?? ZERO32,
+        cb.taskId ?? ZERO32,
+        cb.artifactHash ?? ZERO32,
+        resourceHash,
+        cb.orderHash ?? ZERO32,
+        cb.legId ?? ZERO32,
+        BigInt(cb.chain),
+        cb.asset.id,
+        cb.nonce,
+        BigInt(cb.validFrom),
+        BigInt(cb.expiresAt),
+    ]));
+}
+export function paymentMandateDomain(opts) {
+    return {
+        name: PAYMENT_MANDATE_DOMAIN_NAME,
+        version: PAYMENT_MANDATE_DOMAIN_VERSION,
+        chainId: opts.chainId,
+        ...(opts.verifyingContract ? { verifyingContract: opts.verifyingContract } : {}),
+    };
+}
+function mandateMessage(mandate) {
+    return {
+        mandateId: mandate.mandateId,
+        payer: mandate.payer,
+        payee: mandate.payee,
+        granter: mandate.granter,
+        asset: mandate.amountPolicy.asset.id,
+        amount: mandateAmount(mandate),
+        nonce: mandate.nonce,
+        maxRedemptions: BigInt(mandate.maxRedemptions),
+        validFrom: BigInt(mandate.validFrom),
+        expiresAt: BigInt(mandate.expiresAt),
+        mode: mandate.mode,
+        rail: mandate.rail,
+        reasonHash: mandate.reasonHash,
+        contextBindingHash: hashContextBinding(mandate.contextBinding),
+        bindingHash: hashMandateBindings(mandate),
+    };
+}
+/** The full EIP-712 typed-data object (domain + types + message) for a mandate. */
+export function buildPaymentMandateTypedData(mandate, opts) {
+    return {
+        domain: paymentMandateDomain(opts),
+        types: PAYMENT_MANDATE_EIP712_TYPES,
+        primaryType: 'PaymentMandate',
+        message: mandateMessage(mandate),
+    };
+}
+/** The 32-byte EIP-712 digest the payer SA's ERC-1271 validates over. */
+export function paymentMandateDigest(mandate, opts) {
+    const td = buildPaymentMandateTypedData(mandate, opts);
+    return hashTypedData(td);
+}
+/** Sign an unsigned mandate (`signature: '0x'`) → a fully-populated mandate. */
+export async function signPaymentMandate(mandate, signer, opts) {
+    const td = buildPaymentMandateTypedData(mandate, opts);
+    const signature = await signer.signTypedData({
+        domain: td.domain,
+        types: td.types,
+        primaryType: td.primaryType,
+        message: td.message,
+    });
+    return { ...mandate, signature };
+}
+/**
+ * PMT-INV-12 — verify the mandate's signature via the payer SA's ERC-1271. Fail-closed: any read
+ * error or non-magic result is `false` (never throws on a bad signature).
+ */
+export async function verifyPaymentMandateSignature(mandate, opts, read1271) {
+    if (!mandate.signature || mandate.signature === '0x')
+        return false;
+    const digest = paymentMandateDigest(mandate, opts);
+    try {
+        const res = await read1271(mandate.payer, digest, mandate.signature);
+        return typeof res === 'string' && res.slice(0, 10).toLowerCase() === ERC1271_MAGIC;
+    }
+    catch {
+        return false;
+    }
+}
+void toHex; // reserved for future debug helpers
+//# sourceMappingURL=mandate-sign.js.map

package/dist/mandate-sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-sign.js","sourceRoot":"","sources":["../src/mandate-sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,KAAK,EACL,OAAO,GAGR,MAAM,MAAM,CAAC;AAGd,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AACnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,kDAAkD;AAClD,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,cAAc,EAAE;QACd,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;QACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/C,4FAA4F;QAC5F,sGAAsG;QACtG,4FAA4F;QAC5F,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;KACzC;CACO,CAAC;AAEX,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAU,CAAC;AACjD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF;wFACwF;AACxF,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5I,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC;IACnF,OAAO,SAAS,CACd,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACjF,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAClH,CACO,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAChC,OAAO,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAkB;IACnD,MAAM,YAAY,GAAU,EAAE,CAAC,QAAQ;QACrC,CAAC,CAAE,SAAS,CACR,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC7D,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CACnE,CACQ;QACb,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,sBAAsB;QAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS;QAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;KAClC,EACD;QACE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC;QACpB,EAAE,CAAC,mBAAmB,IAAI,MAAM;QAChC,EAAE,CAAC,MAAM,IAAI,MAAM;QACnB,EAAE,CAAC,YAAY,IAAI,MAAM;QACzB,YAAY;QACZ,EAAE,CAAC,SAAS,IAAI,MAAM;QACtB,EAAE,CAAC,KAAK,IAAI,MAAM;QAClB,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,EAAa;QACtB,EAAE,CAAC,KAAK;QACR,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;KACrB,CACF,CACO,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,8BAA8B;QACvC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAa;QAC/C,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9D,WAAW,EAAE,mBAAmB,CAAC,OAAO,CAAC;KACjC,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,OAAuB,EAAE,IAAuB;IAC3F,OAAO;QACL,MAAM,EAAE,oBAAoB,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,gBAAyB;QACtC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,OAAuB,EAAE,IAAuB;IACnF,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,aAAa,CAAC,EAAE,CAAU,CAAC;AACpC,CAAC;AAYD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,MAAqB,EACrB,IAAuB;IAEvB,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,OAAO,EAAE,EAAE,CAAC,OAAkC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAKD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAuB,EACvB,IAAuB,EACvB,QAAuB;IAEvB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,KAAK,CAAC,CAAC,oCAAoC"}

package/dist/mandate.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `buildClosedMandate` — construct an unsigned closed (one-shot) PaymentMandate.
+ *
+ * The wallet + invoice rails (and the demo) build a closed mandate, sign it via
+ * `signPaymentMandate`, then settle it with a single transfer. Closed + one-shot per
+ * PMT-10 / PMT-INV-14. `orderHash`/`legId` (EXC-R2) bind the leg to an ExchangeOrder.
+ */
+import type { Address } from '@agenticprimitives/types';
+import { type PaymentMandate, type PaymentRail, type AssetRef, type Hex32 } from './index.js';
+export interface ClosedMandateInput {
+    payer: Address;
+    payee: Address;
+    asset: AssetRef;
+    amount: bigint;
+    chain: number;
+    rail: PaymentRail;
+    nonce: bigint;
+    expiresAt: number;
+    validFrom?: number;
+    granter?: Address;
+    orderHash?: Hex32;
+    legId?: Hex32;
+    reasonHash?: Hex32;
+    resource?: {
+        method: string;
+        url: string;
+        requestBodyHash: Hex32;
+    };
+    delegationRef?: Hex32;
+}
+/** Build the unsigned closed mandate (signature `'0x'`); sign with `signPaymentMandate`. */
+export declare function buildClosedMandate(input: ClosedMandateInput): PaymentMandate;
+//# sourceMappingURL=mandate.d.ts.map

package/dist/mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.d.ts","sourceRoot":"","sources":["../src/mandate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAoB,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAIhH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAA;KAAE,CAAC;IACnE,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CA4B5E"}