@atiproto/lexicons 1.0.0 → 2.0.0-beta.1

package/dist/lexicons/com/atiproto/authCreateCart.d.ts

@@ -0,0 +1,2 @@
+export * from './authCreateCart.defs.js';
+export * as $defs from './authCreateCart.defs.js';

package/dist/lexicons/com/atiproto/authCreateCart.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authCreateCart";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authCreateCart", readonly [l.Permission<"repo", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>, l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authCreatePayment.d.ts

@@ -0,0 +1,2 @@
+export * from './authCreatePayment.defs.js';
+export * as $defs from './authCreatePayment.defs.js';

package/dist/lexicons/com/atiproto/authCreatePayment.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authCreatePayment";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authCreatePayment", readonly [l.Permission<"repo", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>, l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authReadCart.d.ts

@@ -0,0 +1,2 @@
+export * from './authReadCart.defs.js';
+export * as $defs from './authReadCart.defs.js';

package/dist/lexicons/com/atiproto/authReadCart.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authReadCart";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authReadCart", readonly [l.Permission<"repo", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>, l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authReadEntitlements.d.ts

@@ -0,0 +1,2 @@
+export * from './authReadEntitlements.defs.js';
+export * as $defs from './authReadEntitlements.defs.js';

package/dist/lexicons/com/atiproto/authReadEntitlements.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authReadEntitlements";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authReadEntitlements", readonly [l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authReadPayments.d.ts

@@ -0,0 +1,2 @@
+export * from './authReadPayments.defs.js';
+export * as $defs from './authReadPayments.defs.js';

package/dist/lexicons/com/atiproto/authReadPayments.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authReadPayments";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authReadPayments", readonly [l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authReadPublic.d.ts

@@ -0,0 +1,2 @@
+export * from './authReadPublic.defs.js';
+export * as $defs from './authReadPublic.defs.js';

package/dist/lexicons/com/atiproto/authReadPublic.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authReadPublic";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authReadPublic", readonly [l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authReadRecipient.d.ts

@@ -0,0 +1,2 @@
+export * from './authReadRecipient.defs.js';
+export * as $defs from './authReadRecipient.defs.js';

package/dist/lexicons/com/atiproto/authReadRecipient.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authReadRecipient";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authReadRecipient", readonly [l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/authWriteProfile.d.ts

@@ -0,0 +1,2 @@
+export * from './authWriteProfile.defs.js';
+export * as $defs from './authWriteProfile.defs.js';

package/dist/lexicons/com/atiproto/authWriteProfile.defs.d.ts

@@ -0,0 +1,5 @@
+import { l } from '@atproto/lex';
+declare const $nsid = "com.atiproto.authWriteProfile";
+export { $nsid };
+declare const main: l.PermissionSet<"com.atiproto.authWriteProfile", readonly [l.Permission<"repo", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>, l.Permission<"rpc", Record<string, string | number | boolean | boolean[] | number[] | string[] | undefined>>]>;
+export { main };

package/dist/lexicons/com/atiproto/cart.defs.d.ts

@@ -1,184 +1,349 @@
 import { l } from '@atproto/lex';
+import * as RepoStrongRef from '../atproto/repo/strongRef.defs.js';
+import * as AttestedSignature from '../../network/attested/signature.defs.js';
 declare const $nsid = "com.atiproto.cart";
 export { $nsid };
-/** A record representing a shopping cart for items/subscriptions */
 type Main = {
     $type: 'com.atiproto.cart';
-    items: CartItem[];
     /**
-     * ISO 4217 currency code
+     * DID of the recipient. Absent (null) when marked as private.
      */
-    currency: string;
+    subject?: l.DidString;
     /**
-     * Total amount in cents
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
      */
-    total: number;
+    items: RepoStrongRef.Main[];
     /**
-     * Cart status
+     * ISO 4217 currency code.
      */
-    status: 'open' | 'completed' | 'expired' | 'abandoned';
+    currency: string;
     /**
-     * Creation timestamp
+     * Total amount in the smallest unit of `currency`.
      */
-    createdAt: l.DatetimeString;
+    total?: number;
     /**
-     * Expiration timestamp
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
      */
-    expiresAt: l.DatetimeString;
+    status: 'open' | 'expired' | 'abandoned' | 'pending' | 'completed' | 'failed' | 'refunded' | 'cancelled' | 'fulfilled' | l.UnknownString;
+    createdAt?: l.DatetimeString;
+    expiresAt?: l.DatetimeString;
+    completedAt?: l.DatetimeString;
     /**
-     * Completion timestamp
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
      */
-    completedAt?: l.DatetimeString;
+    payment?: RepoStrongRef.Main;
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[];
 };
 export type { Main };
-/** A record representing a shopping cart for items/subscriptions */
 declare const main: l.RecordSchema<"any", "com.atiproto.cart", l.Validator<Omit<Main, "$type">, Omit<Main, "$type">>>;
 export { main };
 export declare const $isTypeOf: <TValue extends {
     $type?: unknown;
 }>(value: TValue) => value is l.TypedRecord<"com.atiproto.cart", TValue>, $build: {
     (input: Omit<Omit<Main, "$type">, "$type">): {
-        items: CartItem[];
+        subject?: l.DidString
+        /**
+         * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+         */
+         | undefined;
+        items: RepoStrongRef.Main[];
         currency: string;
-        total: number;
-        status: "open" | "completed" | "expired" | "abandoned";
-        createdAt: l.DatetimeString;
-        expiresAt: l.DatetimeString;
-        completedAt?: l.DatetimeString | undefined;
+        total?: number
+        /**
+         * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+         */
+         | undefined;
+        status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+        createdAt?: l.DatetimeString | undefined;
+        expiresAt?: l.DatetimeString | undefined;
+        completedAt?: l.DatetimeString
+        /**
+         * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+         */
+         | undefined;
+        payment?: RepoStrongRef.Main
+        /**
+         * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+         */
+         | undefined;
+        signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
         $type: "com.atiproto.cart";
     };
     (input: Omit<Omit<Main, "$type">, "$type">): {
-        items: CartItem[];
+        subject?: l.DidString
+        /**
+         * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+         */
+         | undefined;
+        items: RepoStrongRef.Main[];
         currency: string;
-        total: number;
-        status: "open" | "completed" | "expired" | "abandoned";
-        createdAt: l.DatetimeString;
-        expiresAt: l.DatetimeString;
-        completedAt?: l.DatetimeString | undefined;
+        total?: number
+        /**
+         * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+         */
+         | undefined;
+        status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+        createdAt?: l.DatetimeString | undefined;
+        expiresAt?: l.DatetimeString | undefined;
+        completedAt?: l.DatetimeString
+        /**
+         * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+         */
+         | undefined;
+        payment?: RepoStrongRef.Main
+        /**
+         * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+         */
+         | undefined;
+        signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
         $type: "com.atiproto.cart";
     };
 }, $type: "com.atiproto.cart";
 export declare const $assert: (input: unknown, options?: l.ValidateOptions) => asserts input is {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }, $check: (input: unknown, options?: l.ValidateOptions) => void, $cast: <I>(input: I, options?: l.ValidateOptions) => I & {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }, $ifMatches: <I>(input: I, options?: l.ValidateOptions) => (I & {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }) | undefined, $matches: <I>(input: I, options?: l.ValidateOptions) => input is I & {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }, $parse: (input: unknown, options?: l.ParseOptions) => {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }, $safeParse: (input: unknown, options?: l.ParseOptions) => l.ValidationResult<{
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
+    total?: number
+    /**
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
+     */
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
+    /**
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
+     */
+     | undefined;
+    payment?: RepoStrongRef.Main
+    /**
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
+     */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
     $type: "com.atiproto.cart";
 }>, $validate: <I>(input: I, options?: l.ValidateOptions) => I & {
-    items: CartItem[];
-    currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
-    $type: "com.atiproto.cart";
-}, $safeValidate: <I>(input: I, options?: l.ValidateOptions) => l.ValidationResult<I & {
-    items: CartItem[];
+    subject?: l.DidString
+    /**
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
+     */
+     | undefined;
+    items: RepoStrongRef.Main[];
     currency: string;
-    total: number;
-    status: "open" | "completed" | "expired" | "abandoned";
-    createdAt: l.DatetimeString;
-    expiresAt: l.DatetimeString;
-    completedAt?: l.DatetimeString | undefined;
-    $type: "com.atiproto.cart";
-}>;
-/** View of a cart record for use in API responses */
-type View = {
-    $type?: 'com.atiproto.cart#view';
+    total?: number
     /**
-     * AT-URI of the cart record
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
      */
-    uri: l.AtUriString;
-    items: CartItem[];
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
     /**
-     * ISO 4217 currency code
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
      */
-    currency: string;
+     | undefined;
+    payment?: RepoStrongRef.Main
     /**
-     * Total amount in cents
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
      */
-    total: number;
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
+    $type: "com.atiproto.cart";
+}, $safeValidate: <I>(input: I, options?: l.ValidateOptions) => l.ValidationResult<I & {
+    subject?: l.DidString
     /**
-     * Cart status
+     * Cart line items. Each is a strongRef to a `com.atiproto.item` or `com.atiproto.subscription` record (the at-uri's collection segment identifies which). Empty (or absent) when marked as private.
      */
-    status: 'open' | 'completed' | 'expired' | 'abandoned';
+     | undefined;
+    items: RepoStrongRef.Main[];
+    currency: string;
+    total?: number
     /**
-     * Creation timestamp
+     * Lifecycle state of the cart. When `payment` is present, the AppView snapshots the broker payment's status here (pending / completed / failed / refunded / cancelled). Before a payment is attached the cart's own lifecycle states apply (open / expired / abandoned). After fulfillment, the AppView (or merchant integration) advances to `fulfilled` to mark delivery. Open to extension via `knownValues` rather than a hard enum.
      */
-    createdAt: l.DatetimeString;
+     | undefined;
+    status: "open" | "expired" | "abandoned" | "pending" | "completed" | "failed" | "refunded" | "cancelled" | "fulfilled" | l.UnknownString;
+    createdAt?: l.DatetimeString | undefined;
+    expiresAt?: l.DatetimeString | undefined;
+    completedAt?: l.DatetimeString
     /**
-     * Expiration timestamp
+     * StrongRef to the `network.attested.payment` record settling this cart. Set during checkout (or attached after the fact via `payment.cart.put`). Only the PoS can validate this field, so it is not writable via `com.atproto.repo.putRecord`.
      */
-    expiresAt: l.DatetimeString;
+     | undefined;
+    payment?: RepoStrongRef.Main
     /**
-     * Completion timestamp
+     * Recipient AppView attestation(s). The AppView writes and updates its own cart records directly and signs them so the PoS can trust the validated state. Each entry is either an inline `network.attested.signature` or a `com.atproto.repo.strongRef` pointing at a remote `network.attested.proof` record. The canonical signing payload covers `items`, `currency`, `status`, plus `subject`, `total`, `createdAt`, `expiresAt`, `completedAt`, and `payment` when present. Mutating any of those fields invalidates every signature in this array.
      */
+     | undefined;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[] | undefined;
+    $type: "com.atiproto.cart";
+}>;
+/** Hydrated cart view returned by PoS get endpoints. */
+type View = {
+    $type?: 'com.atiproto.cart#view';
+    uri: l.AtUriString;
+    cid?: l.CidString;
+    subject?: l.DidString;
+    items: RepoStrongRef.Main[];
+    currency: string;
+    total?: number;
+    status: 'open' | 'expired' | 'abandoned' | 'pending' | 'completed' | 'failed' | 'refunded' | 'cancelled' | 'fulfilled' | l.UnknownString;
+    createdAt?: l.DatetimeString;
+    expiresAt?: l.DatetimeString;
     completedAt?: l.DatetimeString;
+    payment?: RepoStrongRef.Main;
+    signatures?: (l.$Typed<AttestedSignature.Main> | l.$Typed<RepoStrongRef.Main> | l.Unknown$TypedObject)[];
 };
 export type { View };
-/** View of a cart record for use in API responses */
+/** Hydrated cart view returned by PoS get endpoints. */
 declare const view: l.TypedObjectSchema<"com.atiproto.cart#view", l.Validator<View, View>>;
 export { view };
-type CartItem = {
-    $type?: 'com.atiproto.cart#cartItem';
-    /**
-     * Type of cart item: item or subscription
-     */
-    type: 'com.atiproto.item' | 'com.atiproto.subscription';
-    /**
-     * AT-URI for item on record
-     */
-    recordUri: l.AtUriString;
-};
-export type { CartItem };
-declare const cartItem: l.TypedObjectSchema<"com.atiproto.cart#cartItem", l.Validator<CartItem, CartItem>>;
-export { cartItem };