@agenticprimitives/payments 0.0.0-alpha.4 → 0.0.0-alpha.40

package/dist/index.d.ts

@@ -52,7 +52,12 @@ export interface ContextBinding {
         method: string;
         url: string;
         requestBodyHash: Hex32;
+        salt?: Hex32;
     };
+    /** EXC-R2 — the ExchangeOrder this payment leg belongs to (273/274). x402 sets `orderHash = quoteId`. */
+    orderHash?: Hex32;
+    /** EXC-R2 — distinguishes legs within one order (charge / refund / split-out / escrow-release). */
+    legId?: Hex32;
     chain: number;
     asset: AssetRef;
     nonce: bigint;
@@ -109,5 +114,24 @@ export interface PaymentRailExecutor {
 }
 export declare function registerRail(executor: PaymentRailExecutor): void;
 export declare function getRail(rail: PaymentRail): PaymentRailExecutor | undefined;
+export { PAYMENT_MANDATE_DOMAIN_NAME, PAYMENT_MANDATE_DOMAIN_VERSION, PAYMENT_MANDATE_EIP712_TYPES, ERC1271_MAGIC, mandateAmount, hashContextBinding, hashMandateBindings, paymentMandateDomain, buildPaymentMandateTypedData, paymentMandateDigest, signPaymentMandate, verifyPaymentMandateSignature, } from './mandate-sign.js';
+export type { MandateDomainOpts, MandateSigner, Erc1271Reader } from './mandate-sign.js';
+export { PAYMENT_RECEIPT_TYPE, settlementEpochBucket, buildPaymentReceiptCredential } from './receipt.js';
+export type { PaymentReceiptInput } from './receipt.js';
 export * as x402 from './rails/x402/index.js';
+export * as entitlement from './entitlement/index.js';
+export { ERC20_TRANSFER_ABI, ERC20_APPROVE_ABI, buildErc20Transfer, buildErc20Approve, buildNativeTransfer } from './transfer.js';
+export type { TransferPlan } from './transfer.js';
+export { buildClosedMandate } from './mandate.js';
+export { validateExternalPaymentCredentialRef, validateAp2MandateEnvelopeRef, paymentCredentialCovers, looksLikeRawPaymentCredential, type ExternalPaymentCredentialRefV1, type Ap2MandateEnvelopeRefV1, type Ap2MandateKind, } from './external-checkout.js';
+export type { ClosedMandateInput } from './mandate.js';
+export * as wallet from './rails/wallet.js';
+export * as invoice from './rails/invoice.js';
+export * as escrow from './rails/escrow.js';
+export * as recurring from './rails/recurring.js';
+export { buildRefund } from './refund.js';
+export type { RefundInput, RefundPlan } from './refund.js';
+export { buildSplitPayout, BPS_DENOMINATOR } from './split.js';
+export type { SplitRecipient, SplitLeg } from './split.js';
+export * as ops from './ops.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,gCAAgC,CAAC;AAC1D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,0BAA0B,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,uBAAuB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAA;KAAE,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAOlE;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAMR;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACzG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,KAAK,CAAC;QAAC,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAEhE;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,CAE1E;AAGD,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,gCAAgC,CAAC;AAC1D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,0BAA0B,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,uBAAuB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAC;QAAC,IAAI,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC;IACjF,yGAAyG;IACzG,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,mGAAmG;IACnG,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAOlE;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAMR;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACzG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,KAAK,CAAC;QAAC,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAEhE;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,CAE1E;AAGD,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGzF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAG9C,OAAO,KAAK,WAAW,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAClI,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,8BAA8B,EACnC,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvD,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -37,6 +37,27 @@ export function registerRail(executor) {
 export function getRail(rail) {
     return _rails.get(rail);
 }
+// Spec 243 §4.2 / PMT-INV-02/12 — EIP-712 mandate signing + ERC-1271 verification.
+export { PAYMENT_MANDATE_DOMAIN_NAME, PAYMENT_MANDATE_DOMAIN_VERSION, PAYMENT_MANDATE_EIP712_TYPES, ERC1271_MAGIC, mandateAmount, hashContextBinding, hashMandateBindings, paymentMandateDomain, buildPaymentMandateTypedData, paymentMandateDigest, signPaymentMandate, verifyPaymentMandateSignature, } from './mandate-sign.js';
+// Spec 243 §7 / X402-D9.3 — PaymentReceipt verifiable credential.
+export { PAYMENT_RECEIPT_TYPE, settlementEpochBucket, buildPaymentReceiptCredential } from './receipt.js';
 // Spec 272 — the x402 rail (staged executor + v2 wire + nonce store + resource binding).
 export * as x402 from './rails/x402/index.js';
+// Spec 272 §10 — entitlements (pay-once-then-access; credits = maxUses:N).
+export * as entitlement from './entitlement/index.js';
+// Spec 243 §5.5 — shared transfer plumbing + closed-mandate builder.
+export { ERC20_TRANSFER_ABI, ERC20_APPROVE_ABI, buildErc20Transfer, buildErc20Approve, buildNativeTransfer } from './transfer.js';
+export { buildClosedMandate } from './mandate.js';
+// Spec 442 §10 — payments at the company's door, TYPES ONLY: a payment credential by reference (the ExecutionCredential
+// discipline: bound to one operation, expiring, single-use) and our mandate in AP2's VC-JWS envelope. Fiat rails are Ring 1.
+export { validateExternalPaymentCredentialRef, validateAp2MandateEnvelopeRef, paymentCredentialCovers, looksLikeRawPaymentCredential, } from './external-checkout.js';
+// Spec 243 §5.5 — general-purpose rails + profiles + payout legs.
+export * as wallet from './rails/wallet.js';
+export * as invoice from './rails/invoice.js';
+export * as escrow from './rails/escrow.js';
+export * as recurring from './rails/recurring.js';
+export { buildRefund } from './refund.js';
+export { buildSplitPayout, BPS_DENOMINATOR } from './split.js';
+// Spec 243 §5.5 — ops core (idempotent event log + reconciliation + export).
+export * as ops from './ops.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAqEhD,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,QAAQ,CAAC;IACjG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,OAAuB;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAY,CAAC;AACtB,CAAC;AASD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;AAC3D,MAAM,UAAU,YAAY,CAAC,QAA6B;IACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAyEhD,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,QAAQ,CAAC;IACjG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,OAAuB;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAY,CAAC;AACtB,CAAC;AASD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;AAC3D,MAAM,UAAU,YAAY,CAAC,QAA6B;IACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAG3B,kEAAkE;AAClE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAG1G,yFAAyF;AACzF,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC;AAE9C,2EAA2E;AAC3E,OAAO,KAAK,WAAW,MAAM,wBAAwB,CAAC;AAEtD,qEAAqE;AACrE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAElI,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,wHAAwH;AACxH,6HAA6H;AAC7H,OAAO,EACL,oCAAoC,EACpC,6BAA6B,EAC7B,uBAAuB,EACvB,6BAA6B,GAI9B,MAAM,wBAAwB,CAAC;AAGhC,kEAAkE;AAClE,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG/D,6EAA6E;AAC7E,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC"}

package/dist/mandate-sign.d.ts

@@ -0,0 +1,190 @@
+/** ERC-1271 magic value. Re-exported under this package's established name (the protocol constant
+ *  itself lives in \ — it was declared in eight places, and \ could not reach
+ *  \ for it without creating a cycle). */
+export declare const ERC1271_MAGIC: "0x1626ba7e";
+/**
+ * PMT-INV-02 / PMT-INV-12 — EIP-712 mandate signing + ERC-1271 verification.
+ *
+ * The payer SA signs an EIP-712 typed-data digest of the mandate. The signed
+ * struct flattens the load-bearing fields and folds the entire `ContextBinding`
+ * into one `contextBindingHash` — so no field can be stripped or substituted
+ * after signing (PMT-INV-02 / INV-07 / INV-08), and verification is one
+ * ERC-1271 call against the payer SA (PMT-INV-12 — no raw EOA signatures).
+ *
+ * Pure crypto only (viem) — the actual ERC-1271 read is injected so the package
+ * stays transport-agnostic (no hard publicClient dependency).
+ */
+import { type Address, type Hex } from 'viem';
+import type { PaymentMandate, ContextBinding, Hex32 } from './index.js';
+export declare const PAYMENT_MANDATE_DOMAIN_NAME = "AgenticPaymentMandate";
+export declare const PAYMENT_MANDATE_DOMAIN_VERSION = "1";
+/** ERC-1271 magic value for a valid signature. */
+export declare const PAYMENT_MANDATE_EIP712_TYPES: {
+    readonly PaymentMandate: readonly [{
+        readonly name: "mandateId";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "payer";
+        readonly type: "address";
+    }, {
+        readonly name: "payee";
+        readonly type: "address";
+    }, {
+        readonly name: "granter";
+        readonly type: "address";
+    }, {
+        readonly name: "asset";
+        readonly type: "address";
+    }, {
+        readonly name: "amount";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "uint256";
+    }, {
+        readonly name: "maxRedemptions";
+        readonly type: "uint256";
+    }, {
+        readonly name: "validFrom";
+        readonly type: "uint256";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "mode";
+        readonly type: "string";
+    }, {
+        readonly name: "rail";
+        readonly type: "string";
+    }, {
+        readonly name: "reasonHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "contextBindingHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "bindingHash";
+        readonly type: "bytes32";
+    }];
+};
+/**
+ * EXT-PMT-2 — fold the mandate's binding fields the core typed-data omitted into one committed hash:
+ * railConfig (the x402 quote binding: quoteId + resourceHash), mandateConstraints (aggregate scope),
+ * delegationRef, and the requiresClosedMandateForFinalCharge flag. Absent fields hash to a stable
+ * sentinel, so adding/removing one changes the digest.
+ */
+export declare function hashMandateBindings(mandate: PaymentMandate): Hex32;
+/** The charge amount carried by the mandate (exact → amount; range/formula → maxAmount). */
+export declare function mandateAmount(mandate: PaymentMandate): bigint;
+/**
+ * Canonical hash of the ENTIRE context binding (PMT-INV-02). Every field is
+ * folded in; absent fields hash to zero, so adding/removing one changes the hash.
+ */
+export declare function hashContextBinding(cb: ContextBinding): Hex32;
+export interface MandateDomainOpts {
+    chainId: number;
+    /** Optional binding to a specific contract (e.g. the PaymentEnforcer). Omit for a chain-scoped mandate. */
+    verifyingContract?: Address;
+}
+export declare function paymentMandateDomain(opts: MandateDomainOpts): {
+    readonly verifyingContract?: `0x${string}` | undefined;
+    readonly name: "AgenticPaymentMandate";
+    readonly version: "1";
+    readonly chainId: number;
+};
+/** The full EIP-712 typed-data object (domain + types + message) for a mandate. */
+export declare function buildPaymentMandateTypedData(mandate: PaymentMandate, opts: MandateDomainOpts): {
+    domain: {
+        readonly verifyingContract?: `0x${string}` | undefined;
+        readonly name: "AgenticPaymentMandate";
+        readonly version: "1";
+        readonly chainId: number;
+    };
+    types: {
+        readonly PaymentMandate: readonly [{
+            readonly name: "mandateId";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "payer";
+            readonly type: "address";
+        }, {
+            readonly name: "payee";
+            readonly type: "address";
+        }, {
+            readonly name: "granter";
+            readonly type: "address";
+        }, {
+            readonly name: "asset";
+            readonly type: "address";
+        }, {
+            readonly name: "amount";
+            readonly type: "uint256";
+        }, {
+            readonly name: "nonce";
+            readonly type: "uint256";
+        }, {
+            readonly name: "maxRedemptions";
+            readonly type: "uint256";
+        }, {
+            readonly name: "validFrom";
+            readonly type: "uint256";
+        }, {
+            readonly name: "expiresAt";
+            readonly type: "uint256";
+        }, {
+            readonly name: "mode";
+            readonly type: "string";
+        }, {
+            readonly name: "rail";
+            readonly type: "string";
+        }, {
+            readonly name: "reasonHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "contextBindingHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "bindingHash";
+            readonly type: "bytes32";
+        }];
+    };
+    primaryType: "PaymentMandate";
+    message: {
+        readonly mandateId: `0x${string}`;
+        readonly payer: `0x${string}`;
+        readonly payee: `0x${string}`;
+        readonly granter: `0x${string}`;
+        readonly asset: Address;
+        readonly amount: bigint;
+        readonly nonce: bigint;
+        readonly maxRedemptions: bigint;
+        readonly validFrom: bigint;
+        readonly expiresAt: bigint;
+        readonly mode: import("./index.js").PaymentMandateMode;
+        readonly rail: import("./index.js").PaymentRail;
+        readonly reasonHash: `0x${string}`;
+        readonly contextBindingHash: `0x${string}`;
+        readonly bindingHash: `0x${string}`;
+    };
+};
+/** The 32-byte EIP-712 digest the payer SA's ERC-1271 validates over. */
+export declare function paymentMandateDigest(mandate: PaymentMandate, opts: MandateDomainOpts): Hex32;
+/** Signer surface — an SA signer that produces an ERC-1271-validatable signature over typed data. */
+export interface MandateSigner {
+    signTypedData(args: {
+        domain: Record<string, unknown>;
+        types: typeof PAYMENT_MANDATE_EIP712_TYPES;
+        primaryType: 'PaymentMandate';
+        message: Record<string, unknown>;
+    }): Promise<Hex>;
+}
+/** Sign an unsigned mandate (`signature: '0x'`) → a fully-populated mandate. */
+export declare function signPaymentMandate(mandate: PaymentMandate, signer: MandateSigner, opts: MandateDomainOpts): Promise<PaymentMandate>;
+/** Injected ERC-1271 read: returns the 4-byte magic from `payer.isValidSignature(digest, signature)`. */
+export type Erc1271Reader = (account: Address, digest: Hex32, signature: Hex) => Promise<Hex>;
+/**
+ * PMT-INV-12 — verify the mandate's signature via the payer SA's ERC-1271. Fail-closed: any read
+ * error or non-magic result is `false` (never throws on a bad signature).
+ */
+export declare function verifyPaymentMandateSignature(mandate: PaymentMandate, opts: MandateDomainOpts, read1271: Erc1271Reader): Promise<boolean>;
+//# sourceMappingURL=mandate-sign.d.ts.map

package/dist/mandate-sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-sign.d.ts","sourceRoot":"","sources":["../src/mandate-sign.ts"],"names":[],"mappings":"AAEA;;0CAE0C;AAC1C,eAAO,MAAM,aAAa,cAAsB,CAAC;AACjD;;;;;;;;;;;GAWG;AAEH,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExE,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AACnE,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAElD,kDAAkD;AAElD,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqB/B,CAAC;AA2BX;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,KAAK,CASlE;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAG7D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,cAAc,GAAG,KAAK,CAsD5D;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,2GAA2G;IAC3G,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB;;;;;EAO3D;AAsBD,mFAAmF;AACnF,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAfjD,OAAO;;;;;;;;;;;;EAsBlD;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,GAAG,KAAK,CAG5F;AAED,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,IAAI,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,KAAK,EAAE,OAAO,4BAA4B,CAAC;QAC3C,WAAW,EAAE,gBAAgB,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAClB;AAED,gFAAgF;AAChF,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,cAAc,CAAC,CASzB;AAED,yGAAyG;AACzG,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;AAE9F;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,OAAO,CAAC,CASlB"}

package/dist/mandate-sign.js

@@ -0,0 +1,202 @@
+import { ERC1271_MAGIC_VALUE } from '@agenticprimitives/types';
+/** ERC-1271 magic value. Re-exported under this package's established name (the protocol constant
+ *  itself lives in \ — it was declared in eight places, and \ could not reach
+ *  \ for it without creating a cycle). */
+export const ERC1271_MAGIC = ERC1271_MAGIC_VALUE;
+/**
+ * PMT-INV-02 / PMT-INV-12 — EIP-712 mandate signing + ERC-1271 verification.
+ *
+ * The payer SA signs an EIP-712 typed-data digest of the mandate. The signed
+ * struct flattens the load-bearing fields and folds the entire `ContextBinding`
+ * into one `contextBindingHash` — so no field can be stripped or substituted
+ * after signing (PMT-INV-02 / INV-07 / INV-08), and verification is one
+ * ERC-1271 call against the payer SA (PMT-INV-12 — no raw EOA signatures).
+ *
+ * Pure crypto only (viem) — the actual ERC-1271 read is injected so the package
+ * stays transport-agnostic (no hard publicClient dependency).
+ */
+import { hashTypedData, keccak256, encodeAbiParameters, toHex, toBytes, } from 'viem';
+export const PAYMENT_MANDATE_DOMAIN_NAME = 'AgenticPaymentMandate';
+export const PAYMENT_MANDATE_DOMAIN_VERSION = '1';
+/** ERC-1271 magic value for a valid signature. */
+export const PAYMENT_MANDATE_EIP712_TYPES = {
+    PaymentMandate: [
+        { name: 'mandateId', type: 'bytes32' },
+        { name: 'payer', type: 'address' },
+        { name: 'payee', type: 'address' },
+        { name: 'granter', type: 'address' },
+        { name: 'asset', type: 'address' },
+        { name: 'amount', type: 'uint256' },
+        { name: 'nonce', type: 'uint256' },
+        { name: 'maxRedemptions', type: 'uint256' },
+        { name: 'validFrom', type: 'uint256' },
+        { name: 'expiresAt', type: 'uint256' },
+        { name: 'mode', type: 'string' },
+        { name: 'rail', type: 'string' },
+        { name: 'reasonHash', type: 'bytes32' },
+        { name: 'contextBindingHash', type: 'bytes32' },
+        // EXT-PMT-2: commit the previously-unsigned binding fields — railConfig (the quote binding,
+        // quoteId/resourceHash), delegationRef, mandateConstraints, and requiresClosedMandateForFinalCharge —
+        // so a signature can't be replayed against a different quote / delegation / constraint set.
+        { name: 'bindingHash', type: 'bytes32' },
+    ],
+};
+const ZERO32 = ('0x' + '00'.repeat(32));
+const hashStr = (s) => (s ? keccak256(toBytes(s)) : ZERO32);
+/**
+ * DELIBERATELY NOT `types.canonicalizeJson`. Do not "deduplicate" this.
+ *
+ * It serialises `bigint` as a decimal string. `canonicalizeJson` uses `JSON.stringify`, which THROWS
+ * on bigint — and payment amounts are bigint. It also maps `undefined` to `null` rather than
+ * dropping the key.
+ *
+ * A mechanical dedup pass will flag this file as a duplicate of `types.canonicalizeJson`. It is not:
+ * the difference above is the whole reason this function exists, and collapsing it would silently
+ * change bytes that are hashed and signed.
+ */
+/** Deterministic serialization (sorted keys, bigint→decimal, undefined dropped) for the loose
+ *  railConfig / mandateConstraints objects so their hash is stable across key order. */
+function canonicalJson(v) {
+    if (v === null || v === undefined)
+        return 'null';
+    if (typeof v === 'bigint')
+        return v.toString();
+    if (typeof v !== 'object')
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(canonicalJson).join(',')}]`;
+    const o = v;
+    return `{${Object.keys(o).sort().filter((k) => o[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonicalJson(o[k])}`).join(',')}}`;
+}
+/**
+ * EXT-PMT-2 — fold the mandate's binding fields the core typed-data omitted into one committed hash:
+ * railConfig (the x402 quote binding: quoteId + resourceHash), mandateConstraints (aggregate scope),
+ * delegationRef, and the requiresClosedMandateForFinalCharge flag. Absent fields hash to a stable
+ * sentinel, so adding/removing one changes the digest.
+ */
+export function hashMandateBindings(mandate) {
+    const railConfigHash = hashStr(canonicalJson(mandate.railConfig ?? null));
+    const constraintsHash = hashStr(canonicalJson(mandate.mandateConstraints ?? null));
+    return keccak256(encodeAbiParameters([{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32' }, { type: 'bool' }], [railConfigHash, constraintsHash, mandate.delegationRef ?? ZERO32, !!mandate.requiresClosedMandateForFinalCharge]));
+}
+/** The charge amount carried by the mandate (exact → amount; range/formula → maxAmount). */
+export function mandateAmount(mandate) {
+    const ap = mandate.amountPolicy;
+    return ap.kind === 'exact' ? ap.amount : ap.maxAmount;
+}
+/**
+ * Canonical hash of the ENTIRE context binding (PMT-INV-02). Every field is
+ * folded in; absent fields hash to zero, so adding/removing one changes the hash.
+ */
+export function hashContextBinding(cb) {
+    // Spec 302 W3 — `resourceHash` lands on-chain (PaymentCharged /
+    // PaymentReceiptRegistry events). method+url are LOW-ENTROPY: a bare hash
+    // is dictionary-reversible, turning the public spend ledger into
+    // "which resource did this person pay for". When `salt` is present (a
+    // random 32-byte value minted with the x402 quote and shared payer<->payee
+    // off-chain), it is folded in — the on-chain value becomes an opaque
+    // commitment only the transacting parties can open. Absent salt keeps the
+    // legacy public shape (accepted Mode-1 disclosure for public resources).
+    const resourceHash = cb.resource
+        ? keccak256(cb.resource.salt
+            ? encodeAbiParameters([{ type: 'string' }, { type: 'string' }, { type: 'bytes32' }, { type: 'bytes32' }], [cb.resource.method, cb.resource.url, cb.resource.requestBodyHash, cb.resource.salt])
+            : encodeAbiParameters([{ type: 'string' }, { type: 'string' }, { type: 'bytes32' }], [cb.resource.method, cb.resource.url, cb.resource.requestBodyHash]))
+        : ZERO32;
+    return keccak256(encodeAbiParameters([
+        { type: 'bytes32' }, // intentIdHash
+        { type: 'bytes32' }, // agreementCommitment
+        { type: 'bytes32' }, // taskId
+        { type: 'bytes32' }, // artifactHash
+        { type: 'bytes32' }, // resourceHash
+        { type: 'bytes32' }, // orderHash
+        { type: 'bytes32' }, // legId
+        { type: 'uint256' }, // chain
+        { type: 'address' }, // asset
+        { type: 'uint256' }, // nonce
+        { type: 'uint256' }, // validFrom
+        { type: 'uint256' }, // expiresAt
+    ], [
+        hashStr(cb.intentId),
+        cb.agreementCommitment ?? ZERO32,
+        cb.taskId ?? ZERO32,
+        cb.artifactHash ?? ZERO32,
+        resourceHash,
+        cb.orderHash ?? ZERO32,
+        cb.legId ?? ZERO32,
+        BigInt(cb.chain),
+        cb.asset.id,
+        cb.nonce,
+        BigInt(cb.validFrom),
+        BigInt(cb.expiresAt),
+    ]));
+}
+export function paymentMandateDomain(opts) {
+    return {
+        name: PAYMENT_MANDATE_DOMAIN_NAME,
+        version: PAYMENT_MANDATE_DOMAIN_VERSION,
+        chainId: opts.chainId,
+        ...(opts.verifyingContract ? { verifyingContract: opts.verifyingContract } : {}),
+    };
+}
+function mandateMessage(mandate) {
+    return {
+        mandateId: mandate.mandateId,
+        payer: mandate.payer,
+        payee: mandate.payee,
+        granter: mandate.granter,
+        asset: mandate.amountPolicy.asset.id,
+        amount: mandateAmount(mandate),
+        nonce: mandate.nonce,
+        maxRedemptions: BigInt(mandate.maxRedemptions),
+        validFrom: BigInt(mandate.validFrom),
+        expiresAt: BigInt(mandate.expiresAt),
+        mode: mandate.mode,
+        rail: mandate.rail,
+        reasonHash: mandate.reasonHash,
+        contextBindingHash: hashContextBinding(mandate.contextBinding),
+        bindingHash: hashMandateBindings(mandate),
+    };
+}
+/** The full EIP-712 typed-data object (domain + types + message) for a mandate. */
+export function buildPaymentMandateTypedData(mandate, opts) {
+    return {
+        domain: paymentMandateDomain(opts),
+        types: PAYMENT_MANDATE_EIP712_TYPES,
+        primaryType: 'PaymentMandate',
+        message: mandateMessage(mandate),
+    };
+}
+/** The 32-byte EIP-712 digest the payer SA's ERC-1271 validates over. */
+export function paymentMandateDigest(mandate, opts) {
+    const td = buildPaymentMandateTypedData(mandate, opts);
+    return hashTypedData(td);
+}
+/** Sign an unsigned mandate (`signature: '0x'`) → a fully-populated mandate. */
+export async function signPaymentMandate(mandate, signer, opts) {
+    const td = buildPaymentMandateTypedData(mandate, opts);
+    const signature = await signer.signTypedData({
+        domain: td.domain,
+        types: td.types,
+        primaryType: td.primaryType,
+        message: td.message,
+    });
+    return { ...mandate, signature };
+}
+/**
+ * PMT-INV-12 — verify the mandate's signature via the payer SA's ERC-1271. Fail-closed: any read
+ * error or non-magic result is `false` (never throws on a bad signature).
+ */
+export async function verifyPaymentMandateSignature(mandate, opts, read1271) {
+    if (!mandate.signature || mandate.signature === '0x')
+        return false;
+    const digest = paymentMandateDigest(mandate, opts);
+    try {
+        const res = await read1271(mandate.payer, digest, mandate.signature);
+        return typeof res === 'string' && res.slice(0, 10).toLowerCase() === ERC1271_MAGIC;
+    }
+    catch {
+        return false;
+    }
+}
+void toHex; // reserved for future debug helpers
+//# sourceMappingURL=mandate-sign.js.map

package/dist/mandate-sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-sign.js","sourceRoot":"","sources":["../src/mandate-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;0CAE0C;AAC1C,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AACjD;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,aAAa,EACb,SAAS,EACT,mBAAmB,EACnB,KAAK,EACL,OAAO,GAGR,MAAM,MAAM,CAAC;AAGd,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AACnE,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,kDAAkD;AAElD,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,cAAc,EAAE;QACd,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;QACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/C,4FAA4F;QAC5F,sGAAsG;QACtG,4FAA4F;QAC5F,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;KACzC;CACO,CAAC;AAEX,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAU,CAAC;AACjD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH;wFACwF;AACxF,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5I,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,CAAC;IACnF,OAAO,SAAS,CACd,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACjF,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAClH,CACO,CAAC;AACb,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAChC,OAAO,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAkB;IACnD,gEAAgE;IAChE,0EAA0E;IAC1E,iEAAiE;IACjE,sEAAsE;IACtE,2EAA2E;IAC3E,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,YAAY,GAAU,EAAE,CAAC,QAAQ;QACrC,CAAC,CAAE,SAAS,CACR,EAAE,CAAC,QAAQ,CAAC,IAAI;YACd,CAAC,CAAC,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAClF,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrF;YACH,CAAC,CAAC,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC7D,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CACnE,CACI;QACb,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,sBAAsB;QAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS;QAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;KAClC,EACD;QACE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC;QACpB,EAAE,CAAC,mBAAmB,IAAI,MAAM;QAChC,EAAE,CAAC,MAAM,IAAI,MAAM;QACnB,EAAE,CAAC,YAAY,IAAI,MAAM;QACzB,YAAY;QACZ,EAAE,CAAC,SAAS,IAAI,MAAM;QACtB,EAAE,CAAC,KAAK,IAAI,MAAM;QAClB,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,EAAa;QACtB,EAAE,CAAC,KAAK;QACR,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;KACrB,CACF,CACO,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,8BAA8B;QACvC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAa;QAC/C,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9D,WAAW,EAAE,mBAAmB,CAAC,OAAO,CAAC;KACjC,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,OAAuB,EAAE,IAAuB;IAC3F,OAAO;QACL,MAAM,EAAE,oBAAoB,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,gBAAyB;QACtC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,OAAuB,EAAE,IAAuB;IACnF,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,aAAa,CAAC,EAAE,CAAU,CAAC;AACpC,CAAC;AAYD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,MAAqB,EACrB,IAAuB;IAEvB,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,OAAO,EAAE,EAAE,CAAC,OAAkC;KAC/C,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAKD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAuB,EACvB,IAAuB,EACvB,QAAuB;IAEvB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,KAAK,CAAC,CAAC,oCAAoC"}

package/dist/mandate.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `buildClosedMandate` — construct an unsigned closed (one-shot) PaymentMandate.
+ *
+ * The wallet + invoice rails (and the demo) build a closed mandate, sign it via
+ * `signPaymentMandate`, then settle it with a single transfer. Closed + one-shot per
+ * PMT-10 / PMT-INV-14. `orderHash`/`legId` (EXC-R2) bind the leg to an ExchangeOrder.
+ */
+import type { Address } from '@agenticprimitives/types';
+import { type PaymentMandate, type PaymentRail, type AssetRef, type Hex32 } from './index.js';
+export interface ClosedMandateInput {
+    payer: Address;
+    payee: Address;
+    asset: AssetRef;
+    amount: bigint;
+    chain: number;
+    rail: PaymentRail;
+    nonce: bigint;
+    expiresAt: number;
+    validFrom?: number;
+    granter?: Address;
+    orderHash?: Hex32;
+    legId?: Hex32;
+    reasonHash?: Hex32;
+    resource?: {
+        method: string;
+        url: string;
+        requestBodyHash: Hex32;
+        salt?: Hex32;
+    };
+    delegationRef?: Hex32;
+}
+/** Build the unsigned closed mandate (signature `'0x'`); sign with `signPaymentMandate`. */
+export declare function buildClosedMandate(input: ClosedMandateInput): PaymentMandate;
+//# sourceMappingURL=mandate.d.ts.map

package/dist/mandate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.d.ts","sourceRoot":"","sources":["../src/mandate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAoB,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAIhH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAC;QAAC,IAAI,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC;IACjF,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CA4B5E"}

package/dist/mandate.js

@@ -0,0 +1,40 @@
+/**
+ * `buildClosedMandate` — construct an unsigned closed (one-shot) PaymentMandate.
+ *
+ * The wallet + invoice rails (and the demo) build a closed mandate, sign it via
+ * `signPaymentMandate`, then settle it with a single transfer. Closed + one-shot per
+ * PMT-10 / PMT-INV-14. `orderHash`/`legId` (EXC-R2) bind the leg to an ExchangeOrder.
+ */
+import { computeMandateId } from './index.js';
+const ZERO32 = ('0x' + '00'.repeat(32));
+/** Build the unsigned closed mandate (signature `'0x'`); sign with `signPaymentMandate`. */
+export function buildClosedMandate(input) {
+    const validFrom = input.validFrom ?? 0;
+    return {
+        mandateId: computeMandateId({ payer: input.payer, nonce: input.nonce, rail: input.rail, chain: input.chain }),
+        payer: input.payer,
+        payee: input.payee,
+        granter: input.granter ?? input.payer,
+        rail: input.rail,
+        amountPolicy: { kind: 'exact', amount: input.amount, asset: input.asset, chain: input.chain },
+        nonce: input.nonce,
+        maxRedemptions: 1,
+        validFrom,
+        expiresAt: input.expiresAt,
+        contextBinding: {
+            ...(input.resource ? { resource: input.resource } : {}),
+            orderHash: input.orderHash,
+            legId: input.legId,
+            chain: input.chain,
+            asset: input.asset,
+            nonce: input.nonce,
+            validFrom,
+            expiresAt: input.expiresAt,
+        },
+        delegationRef: input.delegationRef,
+        mode: 'closed',
+        reasonHash: input.reasonHash ?? ZERO32,
+        signature: '0x',
+    };
+}
+//# sourceMappingURL=mandate.js.map

package/dist/mandate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.js","sourceRoot":"","sources":["../src/mandate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,gBAAgB,EAAoE,MAAM,YAAY,CAAC;AAEhH,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAU,CAAC;AAoBjD,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7G,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK;QACrC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QAC7F,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,CAAC;QACjB,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE;YACd,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B;QACD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,MAAM;QACtC,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC"}

package/dist/ops.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Payment ops core (spec 243 §5.5) — the plumbing every mature payment stack needs:
+ * an idempotent event model + webhook-style subscribers, reconciliation/payment-detection,
+ * and receipt export. In-process for W1 (the app delivers webhooks later). Pure — no I/O.
+ */
+import type { Address } from '@agenticprimitives/types';
+import type { Hex32 } from './index.js';
+export type PaymentEventType = 'payment.created' | 'payment.reserved' | 'payment.settling' | 'payment.settled' | 'payment.failed' | 'payment.refunded' | 'payment.expired' | 'payment.disputed' | 'entitlement.issued' | 'entitlement.consumed';
+export interface PaymentEvent {
+    /** dedupe key — re-emitting the same key is a no-op (at-least-once producers, exactly-once consumers) */
+    idempotencyKey: string;
+    type: PaymentEventType;
+    at: number;
+    orderHash?: Hex32;
+    mandateId?: Hex32;
+    data?: Record<string, unknown>;
+}
+export interface PaymentEventLog {
+    /** Returns `{ accepted: false }` when `idempotencyKey` was already seen (no re-emit, no re-notify). */
+    emit(event: PaymentEvent): {
+        accepted: boolean;
+    };
+    list(): PaymentEvent[];
+    byType(type: PaymentEventType): PaymentEvent[];
+    byOrder(orderHash: Hex32): PaymentEvent[];
+    /** Webhook-style subscriber — invoked once per ACCEPTED event. Returns an unsubscribe fn. */
+    subscribe(fn: (event: PaymentEvent) => void): () => void;
+}
+export declare function createPaymentEventLog(): PaymentEventLog;
+export interface ReceiptRow {
+    mandateId: Hex32;
+    payer: Address;
+    payee: Address;
+    asset: Address;
+    amount: bigint;
+    settlementHash: Hex32;
+    at: number;
+    orderHash?: Hex32;
+    /** set on a refund leg — the original charge it reverses */
+    refunds?: Hex32;
+}
+export interface ReceiptFilter {
+    payer?: Address;
+    payee?: Address;
+    orderHash?: Hex32;
+    asset?: Address;
+}
+export declare function listReceiptsBy(receipts: ReceiptRow[], filter: ReceiptFilter): ReceiptRow[];
+/** Net balance change for `account` across the receipt set (incoming as payee − outgoing as payer). */
+export declare function balanceDelta(receipts: ReceiptRow[], account: Address): bigint;
+/** Payment detection: is `orderHash` paid (optionally to ≥ `expectedAmount`)? From receipts, not logs. */
+export declare function isOrderPaid(receipts: ReceiptRow[], orderHash: Hex32, expectedAmount?: bigint): boolean;
+export declare function exportReceiptsJSON(receipts: ReceiptRow[]): string;
+export declare function exportReceiptsCSV(receipts: ReceiptRow[]): string;
+//# sourceMappingURL=ops.d.ts.map