@atlasauth/pca-ap2 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,69 @@
-# Temporary Holding Version
+# @atlasauth/pca-ap2
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+AP2 (Agent Payments Protocol) wire-compatibility for PCA. AP2 — donated to the FIDO Alliance, v0.2 shape (2026-04-28) — models agentic payments as a chain of signed Verifiable Digital Credentials: **IntentMandate → CartMandate → PaymentMandate**. That chain is a near-isomorphism of PCA's attenuating capability chain, so this package bridges the two.
+
+**PCA governs. AP2 is the payment-mandate wire. x402 / Stripe Shared Payment Tokens settle. Compose them.**
+
+- **PCA** (`@atlasauth/pca`, `@atlasauth/pca-payments`) = the authority / budget layer: who may spend, how much, until when, and when a human must co-sign.
+- **AP2** = the Intent→Cart→Payment VDC chain other parties verify.
+- **x402 / Stripe SPT** = the settlement rails that actually move value, fed by PCA's governance.
+
+This is a bridge, not a replacement.
+
+## ⚠️ Verify against the AP2 schemas before production
+
+AP2 is a moving target and its mandate field-level signing roles differ between secondary sources (e.g. whether a cart is co-signed by both merchant and user, and whether the step is called "Cart" or "Checkout"), and it layers over UCP (`ucp.dev`), whose dated releases move the payment token between `payment_data.token` and `payment.instruments[*].credential.token`. This package models the v0.2 Intent/Cart/Payment chain **to the best public understanding** and **must be validated against the AP2 repository `schemas/` and the official spec at [ap2-protocol.org](https://ap2-protocol.org) before any production wire use.** PCA-native terms that AP2 has no field for are carried in a namespaced `x_pca` extension (so the chain round-trips back to PCA terms); those fields are non-standard by construction.
+
+## Usage
+
+```ts
+import { buildPaymentMandate, authorizeCharge } from '@atlasauth/pca-payments';
+import {
+  toAP2IntentMandate, toAP2CartMandate, toAP2PaymentMandate,
+  chainMandates, fromAP2Mandate, x402Settlement, stripeSptSettlement,
+} from '@atlasauth/pca-ap2';
+
+// 1. A PCA payment mandate (the authority layer).
+const mandate = buildPaymentMandate({
+  principalSecret, principalPublic, agentPublic,
+  merchants: ['acme'], currency: 'USD',
+  perTransactionCap: 500, autoApproveThreshold: 50, cumulativeCap: 1000,
+});
+
+// 2. Map it down the AP2 VDC chain (each step narrows, never amplifies).
+const intent = toAP2IntentMandate(mandate, { issuerPublic, issuerSecret });        // user signs
+const cart   = toAP2CartMandate(intent,
+  { merchant: 'acme', items: [{ name: 'Seat', quantity: 1, unit_price: { currency: 'USD', value: 120 } }] },
+  { issuerPublic: merchantPublic, issuerSecret: merchantSecret });                 // merchant signs
+
+// The human-present signal maps from the PCA decision: tier-3 human step-up ⇒ human_present = true.
+const decision = authorizeCharge(mandate, { merchant: 'acme', amount: 120, currency: 'USD' });
+const payment = toAP2PaymentMandate(cart, {
+  issuerPublic: payerPublic, issuerSecret: payerSecret,
+  paymentMethod: { type: 'card' }, pcaTier: decision.t, intent,
+});
+
+// 3. Assemble + verify the chain is a non-amplifying narrowing (mirrors PCA attenuation).
+const chain = chainMandates(intent, cart, payment);
+chain.verify(); // { ok: true, reasons: [] }
+
+// 4. Parse back toward PCA terms.
+fromAP2Mandate(intent); // { type: 'IntentMandate', merchants: ['acme'], perTransactionCap: 500, ... }
+
+// 5. Hand the verified payment mandate to a settlement rail (structural; no network here).
+x402Settlement.settle(payment, { resourceUrl, payTo, network: 'base' });
+stripeSptSettlement.settle(payment, { payTo: 'acct_merchant' });
+```
+
+### Human-present mapping
+
+| PCA decision                                  | AP2 `human_present` |
+| --------------------------------------------- | ------------------- |
+| tier 1 — autonomous (amount ≤ Y, budget OK)   | `false` (human-not-present) |
+| tier 3 — human step-up / co-sign required     | `true` (human-present) |
+
+### Settlement backends
+
+`x402Settlement` and `stripeSptSettlement` implement `SettlementBackend` and are **structural only** — they turn a (presumed-verified) Payment Mandate into the rail's wire shape (x402's HTTP-402 challenge + `X-PAYMENT` header; Stripe's Shared-Payment-Token charge in minor units). They perform no network I/O; they are the hooks a real integration fills in, fed by PCA's governance decision.
+
+Part of Proof-Carrying Authority — see `@atlasauth/pca`.

package/dist/index.d.ts

@@ -0,0 +1,317 @@
+/**
+ * @atlasauth/pca-ap2 — AP2 (Agent Payments Protocol) wire-compatibility for PCA.
+ *
+ * ┌──────────────────────────────────────────────────────────────────────────────────────────────┐
+ * │  PCA GOVERNS. AP2 is the payment-MANDATE wire. x402 / Stripe Shared-Payment-Tokens SETTLE.      │
+ * └──────────────────────────────────────────────────────────────────────────────────────────────┘
+ *
+ * AP2 (donated to the FIDO Alliance, v0.2 shape, 2026-04-28) standardizes agentic payments as a chain
+ * of signed Verifiable Digital Credentials (VDCs):
+ *
+ *     IntentMandate  →  CartMandate  →  PaymentMandate
+ *     (the user's      (the merchant's  (the payment authorization +
+ *      goal + caps)     concrete cart)   human-present / not-present signal)
+ *
+ * This is a near-isomorphism of PCA's attenuating capability chain: the Root Intent Grant bounds the
+ * authority; each narrowing step may only RESTRICT it, never amplify it. PCA's trust-budget + risk
+ * policy (`@atlasauth/pca-payments`) decide WHETHER a charge is autonomous (tier 1) or needs a human
+ * co-sign (tier 3); AP2 carries that decision on the wire; the settlement rail moves the money.
+ *
+ * This is a BRIDGE, not a replacement:
+ *   - PCA  = the authority / budget layer (who may spend, how much, until when, before a human co-sign).
+ *   - AP2  = the payment-mandate wire (the Intent→Cart→Payment VDC chain other parties verify).
+ *   - x402 / Stripe SPT = the settlement rails that actually move value, fed by PCA's governance.
+ * Compose them; do not fold one into another.
+ *
+ * ────────────────────────────────────────────────────────────────────────────────────────────────
+ * HONEST CAVEAT — VERIFY BEFORE PRODUCTION WIRE USE
+ * ────────────────────────────────────────────────────────────────────────────────────────────────
+ * AP2 is a moving target and its mandate field-level signing roles differ between secondary sources
+ * (e.g. whether a cart is co-signed by both merchant and user, and whether the step is called "Cart"
+ * or "Checkout"). The spec also layers over UCP (ucp.dev) whose dated releases move the payment token
+ * between `payment_data.token` and `payment.instruments[*].credential.token`. This module models the
+ * v0.2 Intent/Cart/Payment chain to the best public understanding; it MUST be validated against the
+ * AP2 repository `schemas/` (and the official spec at ap2-protocol.org) before any production wire use.
+ * PCA-native terms that AP2 has no field for are carried in a namespaced `x_pca` extension so the chain
+ * can round-trip back to PCA terms; those fields are non-standard by construction.
+ */
+import type { MandateTerms, PaymentMandate as PcaPaymentMandate } from '@atlasauth/pca-payments';
+/** The AP2 shape this module models. See the HONEST CAVEAT above. */
+export declare const AP2_VERSION: "0.2";
+/**
+ * Illustrative JSON-LD contexts for the VDC envelope. The second entry is a placeholder for the AP2
+ * context URL — replace with the canonical context from the AP2 repo before production.
+ */
+export declare const AP2_CONTEXT: readonly string[];
+/** ISO-4217 currency + decimal value (use minor units in production to avoid float drift). */
+export interface MonetaryAmount {
+    currency: string;
+    value: number;
+}
+export type AP2MandateType = 'IntentMandate' | 'CartMandate' | 'PaymentMandate';
+/**
+ * A detached signature over the canonicalized credential body (everything except `proof`). Structural
+ * analogue of a JWS / Data-Integrity proof; signed with the issuer's Ed25519 key (PCA's own `sign`).
+ */
+export interface AP2Proof {
+    type: 'Ed25519Signature2020';
+    /** ISO timestamp the proof was created. */
+    created: string;
+    /** The issuer public key (b64u) the signature verifies under; equals the VDC `issuer`. */
+    verificationMethod: string;
+    proofPurpose: 'assertionMethod';
+    /** b64u Ed25519 signature over `canonicalBytes(<credential without proof>)`. */
+    signatureValue: string;
+}
+/** A signed (or signable) Verifiable Digital Credential carrying one AP2 mandate. */
+export interface VerifiableDigitalCredential<T extends AP2MandateType, S> {
+    '@context': readonly string[];
+    type: readonly ['VerifiableCredential', T];
+    /** Issuer public key (b64u). Intent: the user/principal. Cart: the merchant. Payment: the payer. */
+    issuer: string;
+    /** ISO issuance time. */
+    issuanceDate: string;
+    /** ISO expiry, when the mandate names one. */
+    expirationDate?: string;
+    credentialSubject: S;
+    /** Present once signed (see {@link signMandate}). */
+    proof?: AP2Proof;
+}
+/**
+ * PCA-native extension carried inside an Intent Mandate so the VDC chain can round-trip back to the
+ * attenuating PCA terms AP2 has no standard field for. NON-STANDARD by construction (namespaced).
+ */
+export interface PcaIntentExtension {
+    /** Y — at/under ⇒ autonomous (human_present can be false); over ⇒ human co-sign (tier 3). */
+    auto_approve_threshold: number;
+    /** bMax — total autonomous spend between human co-signs. */
+    cumulative_cap: number;
+    /** X — hard per-transaction ceiling (mirrors `max_amount.value`). */
+    per_transaction_cap: number;
+    period_start?: number;
+    period_end?: number;
+    max_transactions_per_period?: number;
+    /** The PCA grant's salted goal commitment, if the source was a full PaymentMandate. */
+    goal_commit?: string;
+}
+/** IntentMandate: the user's natural-language/structured intent + the constraints the agent must obey. */
+export interface IntentMandateContents {
+    natural_language_description: string;
+    /** Allowlisted merchant ids; `null` = any merchant (AP2 uses null for "unconstrained"). */
+    merchants: string[] | null;
+    /** Allowlisted SKUs; `null` = any. */
+    skus: string[] | null;
+    /** Allowlisted MCC categories; omitted = any. */
+    categories?: string[];
+    /** The ceiling a single purchase under this intent may reach (PCA's hard per-transaction cap X). */
+    max_amount: MonetaryAmount;
+    /** Whether purchases must be refundable/bonded (PCA mints charges in the `reversible` class ⇒ true). */
+    required_refundability: boolean;
+    /** Whether the user must confirm the concrete cart before payment (maps from PCA Y < X). */
+    user_cart_confirmation_required: boolean;
+    /** ISO expiry of the intent, if any. */
+    intent_expiry?: string;
+    /** PCA-native round-trip extension (non-standard). */
+    x_pca?: PcaIntentExtension;
+}
+/** A concrete line item the merchant commits to in a cart. */
+export interface CartItem {
+    sku?: string;
+    name: string;
+    quantity: number;
+    unit_price: MonetaryAmount;
+}
+/** CartMandate: the concrete items/amounts the merchant commits, bound to the intent it fulfils. */
+export interface CartMandateContents {
+    /** Stable cart id. */
+    id: string;
+    /** The merchant this cart is with (matched against the intent allowlist). */
+    merchant: string;
+    items: CartItem[];
+    /** The committed total (Σ quantity · unit_price). */
+    total: MonetaryAmount;
+    /** Hash of the IntentMandate VDC this cart fulfils — binds cart → intent. */
+    intent_reference?: string;
+    /** ISO expiry of the cart quote, if any. */
+    cart_expiry?: string;
+}
+/** The payment instrument a payment mandate authorizes. */
+export interface PaymentMethod {
+    /** e.g. `card`, `crypto`, `shared_payment_token`, `x402`. */
+    type: string;
+    display?: string;
+    /** Opaque token (e.g. a Stripe Shared Payment Token id); never a raw PAN. */
+    token?: string;
+}
+/**
+ * PaymentMandate: the minimal payment authorization derived from the cart. Carries the human-present /
+ * human-not-present modality signal and binds to the cart (and intent) by hash — WITHOUT re-exposing
+ * the full cart contents.
+ */
+export interface PaymentMandateContents {
+    /** Hash of the CartMandate VDC — binds payment → cart. */
+    cart_hash: string;
+    /** Hash of the IntentMandate VDC — binds payment → intent (optional but recommended). */
+    intent_hash?: string;
+    amount: MonetaryAmount;
+    payment_method: PaymentMethod;
+    /**
+     * The AP2 modality signal. MAPPING: PCA tier-3 human step-up ⇒ `human_present = true`; a tier-1
+     * autonomous charge (amount ≤ Y, budget available) ⇒ `human_present = false` (human-not-present).
+     */
+    human_present: boolean;
+    merchant?: string;
+}
+export type IntentMandate = VerifiableDigitalCredential<'IntentMandate', IntentMandateContents>;
+export type CartMandate = VerifiableDigitalCredential<'CartMandate', CartMandateContents>;
+/** AP2's Payment Mandate VDC (NOT the PCA `PaymentMandate` grant from `@atlasauth/pca-payments`). */
+export type PaymentMandate = VerifiableDigitalCredential<'PaymentMandate', PaymentMandateContents>;
+export type AnyAP2Mandate = IntentMandate | CartMandate | PaymentMandate;
+/** Sign a VDC with the issuer's Ed25519 secret key, returning a copy carrying the `proof`. */
+export declare function signMandate<T extends AP2MandateType, S>(vdc: VerifiableDigitalCredential<T, S>, secretKey: Uint8Array): VerifiableDigitalCredential<T, S>;
+/** Verify a VDC's detached signature. Returns false when unsigned or the signature does not verify. */
+export declare function verifyMandate(vdc: AnyAP2Mandate): boolean;
+/** Stable content hash of a VDC (used to bind one mandate to the next). */
+export declare function mandateHash(vdc: AnyAP2Mandate): string;
+export interface IntentMapOptions {
+    /** Issuer (user/principal) public key, b64u. */
+    issuerPublic: string;
+    /** If present, the Intent VDC is signed with this Ed25519 secret key. */
+    issuerSecret?: Uint8Array;
+    /** Override the natural-language description (else derived from the terms). */
+    naturalLanguageDescription?: string;
+    /** Allowlisted SKUs, or null for any (default null). */
+    skus?: string[] | null;
+    /** Override `user_cart_confirmation_required` (default: Y < X ⇒ true). */
+    userCartConfirmationRequired?: boolean;
+    /** Issuance clock (ms). Default `Date.now()`. */
+    now?: number;
+}
+/** Map a PCA payment mandate (or raw terms) to an AP2 Intent Mandate VDC. */
+export declare function toAP2IntentMandate(mandate: PcaPaymentMandate | MandateTerms, opts: IntentMapOptions): IntentMandate;
+export interface CartInput {
+    merchant: string;
+    items: CartItem[];
+    /** Currency; defaults to the intent's `max_amount.currency`. */
+    currency?: string;
+    /** Stable cart id; derived from the item digest when omitted. */
+    id?: string;
+    /** Cart-quote expiry (ms). */
+    expiry?: number;
+    now?: number;
+}
+export interface CartMapOptions {
+    /** Issuer (merchant) public key, b64u. */
+    issuerPublic: string;
+    /** If present, the Cart VDC is signed with this Ed25519 secret key. */
+    issuerSecret?: Uint8Array;
+}
+/** Narrow an Intent Mandate into a concrete AP2 Cart Mandate VDC (items + committed total). */
+export declare function toAP2CartMandate(intent: IntentMandate, cart: CartInput, opts: CartMapOptions): CartMandate;
+export interface PaymentMapOptions {
+    /** Issuer (payer/user agent) public key, b64u. */
+    issuerPublic: string;
+    /** If present, the Payment VDC is signed with this Ed25519 secret key. */
+    issuerSecret?: Uint8Array;
+    paymentMethod: PaymentMethod;
+    /** Amount to authorize; defaults to the cart total (and must not exceed it to stay a narrowing). */
+    amount?: MonetaryAmount;
+    /**
+     * The human-present modality. If omitted, derived from `pcaTier` (tier 3 ⇒ true); if that is also
+     * omitted, defaults to `false` (human-not-present).
+     */
+    humanPresent?: boolean;
+    /** PCA required-threshold tier for this charge (1 autonomous … 3 human co-sign). */
+    pcaTier?: number;
+    /** The Intent Mandate, if available — lets the payment also bind to the intent by hash. */
+    intent?: IntentMandate;
+    now?: number;
+}
+/** Narrow a Cart Mandate into an AP2 Payment Mandate VDC (the payment authorization + modality). */
+export declare function toAP2PaymentMandate(cart: CartMandate, opts: PaymentMapOptions): PaymentMandate;
+/** The PCA-facing view recovered from an AP2 mandate (fields depend on the mandate type). */
+export interface ParsedAP2Mandate {
+    type: AP2MandateType;
+    /** Intent: the allowlist (absent/null ⇒ any). */
+    merchants?: string[];
+    categories?: string[];
+    currency?: string;
+    /** Intent: X (from `max_amount`); also recovered from `x_pca`. */
+    perTransactionCap?: number;
+    /** Intent: Y (from `x_pca`). */
+    autoApproveThreshold?: number;
+    /** Intent: bMax (from `x_pca`). */
+    cumulativeCap?: number;
+    periodStart?: number;
+    periodEnd?: number;
+    maxTransactionsPerPeriod?: number;
+    goalCommit?: string;
+    /** Cart/Payment: the concrete amount. */
+    amount?: number;
+    /** Cart/Payment: the concrete merchant. */
+    merchant?: string;
+    /** Payment: the modality signal. */
+    humanPresent?: boolean;
+}
+/** Parse an AP2 mandate VDC back toward PCA terms (lossless for an Intent minted with `x_pca`). */
+export declare function fromAP2Mandate(vdc: AnyAP2Mandate): ParsedAP2Mandate;
+export interface ChainVerification {
+    ok: boolean;
+    reasons: string[];
+}
+export interface AP2MandateChain {
+    intent: IntentMandate;
+    cart: CartMandate;
+    payment: PaymentMandate;
+    /** Verify the signatures, the hash bindings, and that each step is a non-amplifying narrowing. */
+    verify(): ChainVerification;
+}
+/**
+ * Verify an AP2 Intent→Cart→Payment chain: each VDC's signature, the hash bindings (cart→intent,
+ * payment→cart), and that every step only RESTRICTS the one above (never amplifies). This mirrors
+ * PCA's attenuation check: a child capability may narrow authority but never widen it.
+ */
+export declare function verifyAP2Chain(intent: IntentMandate, cart: CartMandate, payment: PaymentMandate): ChainVerification;
+/** Assemble the signed Intent→Cart→Payment chain and attach its non-amplifying-narrowing verifier. */
+export declare function chainMandates(intent: IntentMandate, cart: CartMandate, payment: PaymentMandate): AP2MandateChain;
+/** Context the caller supplies for building a rail-specific settlement payload. */
+export interface SettlementContext {
+    /** Protected resource URL (x402). */
+    resourceUrl?: string;
+    /** Payee address / account (x402 `payTo`, Stripe `on_behalf_of`). */
+    payTo?: string;
+    /** Rail network, e.g. an x402 chain id like `base-sepolia`. */
+    network?: string;
+}
+/** A rail-specific settlement payload shape. No network is performed; this is the wire shape only. */
+export interface SettlementInstruction {
+    rail: string;
+    amount: MonetaryAmount;
+    merchant?: string;
+    /** The rail-specific payload (structural). */
+    payload: Readonly<Record<string, unknown>>;
+}
+/**
+ * A settlement rail PCA's governance feeds. PCA + AP2 decide WHETHER a charge is authorized and carry
+ * the signed mandate; a `SettlementBackend` turns a verified Payment Mandate into the rail's wire shape.
+ * It never moves money here — it is the hook a real integration fills in.
+ */
+export interface SettlementBackend {
+    readonly rail: string;
+    /** Build the rail payload for a (presumed-verified) Payment Mandate. Pure; no network. */
+    settle(payment: PaymentMandate, ctx?: SettlementContext): SettlementInstruction;
+}
+/**
+ * Coinbase x402 adapter: models the HTTP 402 `Payment Required` challenge (the server's `accepts`
+ * payment requirements) plus the `X-PAYMENT` request header carrying the base64 payment payload the
+ * client re-sends. Structural only — the real rail settles on-chain. (Field names follow the public
+ * x402 shape and should be checked against the x402 spec before production.)
+ */
+export declare const x402Settlement: SettlementBackend;
+/**
+ * Stripe Shared Payment Token adapter: models the SPT charge shape — a shared token the buyer's agent
+ * grants the merchant to pull a bounded amount. Structural only — a real integration calls Stripe with
+ * the token. Amount is converted to minor units (cents). (Check field names against Stripe's SPT docs
+ * before production.)
+ */
+export declare const stripeSptSettlement: SettlementBackend;

package/dist/index.js

@@ -0,0 +1,338 @@
+"use strict";
+/**
+ * @atlasauth/pca-ap2 — AP2 (Agent Payments Protocol) wire-compatibility for PCA.
+ *
+ * ┌──────────────────────────────────────────────────────────────────────────────────────────────┐
+ * │  PCA GOVERNS. AP2 is the payment-MANDATE wire. x402 / Stripe Shared-Payment-Tokens SETTLE.      │
+ * └──────────────────────────────────────────────────────────────────────────────────────────────┘
+ *
+ * AP2 (donated to the FIDO Alliance, v0.2 shape, 2026-04-28) standardizes agentic payments as a chain
+ * of signed Verifiable Digital Credentials (VDCs):
+ *
+ *     IntentMandate  →  CartMandate  →  PaymentMandate
+ *     (the user's      (the merchant's  (the payment authorization +
+ *      goal + caps)     concrete cart)   human-present / not-present signal)
+ *
+ * This is a near-isomorphism of PCA's attenuating capability chain: the Root Intent Grant bounds the
+ * authority; each narrowing step may only RESTRICT it, never amplify it. PCA's trust-budget + risk
+ * policy (`@atlasauth/pca-payments`) decide WHETHER a charge is autonomous (tier 1) or needs a human
+ * co-sign (tier 3); AP2 carries that decision on the wire; the settlement rail moves the money.
+ *
+ * This is a BRIDGE, not a replacement:
+ *   - PCA  = the authority / budget layer (who may spend, how much, until when, before a human co-sign).
+ *   - AP2  = the payment-mandate wire (the Intent→Cart→Payment VDC chain other parties verify).
+ *   - x402 / Stripe SPT = the settlement rails that actually move value, fed by PCA's governance.
+ * Compose them; do not fold one into another.
+ *
+ * ────────────────────────────────────────────────────────────────────────────────────────────────
+ * HONEST CAVEAT — VERIFY BEFORE PRODUCTION WIRE USE
+ * ────────────────────────────────────────────────────────────────────────────────────────────────
+ * AP2 is a moving target and its mandate field-level signing roles differ between secondary sources
+ * (e.g. whether a cart is co-signed by both merchant and user, and whether the step is called "Cart"
+ * or "Checkout"). The spec also layers over UCP (ucp.dev) whose dated releases move the payment token
+ * between `payment_data.token` and `payment.instruments[*].credential.token`. This module models the
+ * v0.2 Intent/Cart/Payment chain to the best public understanding; it MUST be validated against the
+ * AP2 repository `schemas/` (and the official spec at ap2-protocol.org) before any production wire use.
+ * PCA-native terms that AP2 has no field for are carried in a namespaced `x_pca` extension so the chain
+ * can round-trip back to PCA terms; those fields are non-standard by construction.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripeSptSettlement = exports.x402Settlement = exports.AP2_CONTEXT = exports.AP2_VERSION = void 0;
+exports.signMandate = signMandate;
+exports.verifyMandate = verifyMandate;
+exports.mandateHash = mandateHash;
+exports.toAP2IntentMandate = toAP2IntentMandate;
+exports.toAP2CartMandate = toAP2CartMandate;
+exports.toAP2PaymentMandate = toAP2PaymentMandate;
+exports.fromAP2Mandate = fromAP2Mandate;
+exports.verifyAP2Chain = verifyAP2Chain;
+exports.chainMandates = chainMandates;
+const pca_1 = require("@atlasauth/pca");
+// ===================================================================================================
+// AP2 version pin
+// ===================================================================================================
+/** The AP2 shape this module models. See the HONEST CAVEAT above. */
+exports.AP2_VERSION = '0.2';
+/**
+ * Illustrative JSON-LD contexts for the VDC envelope. The second entry is a placeholder for the AP2
+ * context URL — replace with the canonical context from the AP2 repo before production.
+ */
+exports.AP2_CONTEXT = [
+    'https://www.w3.org/2018/credentials/v1',
+    'https://ap2-protocol.org/context/v0.2',
+];
+// ===================================================================================================
+// Signing / verification / hashing
+// ===================================================================================================
+/** Strip `proof` for canonical signing/verification (the signature covers everything else). */
+function proofless(vdc) {
+    const { proof: _proof, ...rest } = vdc;
+    void _proof;
+    return rest;
+}
+/** Sign a VDC with the issuer's Ed25519 secret key, returning a copy carrying the `proof`. */
+function signMandate(vdc, secretKey) {
+    const sig = (0, pca_1.sign)(secretKey, (0, pca_1.canonicalBytes)(proofless(vdc)));
+    const proof = {
+        type: 'Ed25519Signature2020',
+        created: vdc.issuanceDate,
+        verificationMethod: vdc.issuer,
+        proofPurpose: 'assertionMethod',
+        signatureValue: (0, pca_1.encodeSig)(sig),
+    };
+    return { ...vdc, proof };
+}
+/** Verify a VDC's detached signature. Returns false when unsigned or the signature does not verify. */
+function verifyMandate(vdc) {
+    if (!vdc.proof)
+        return false;
+    // The proof must verify under the credential's own declared issuer (no key substitution).
+    if (vdc.proof.verificationMethod !== vdc.issuer)
+        return false;
+    return (0, pca_1.verifyB64u)(vdc.issuer, (0, pca_1.canonicalBytes)(proofless(vdc)), vdc.proof.signatureValue);
+}
+/** Stable content hash of a VDC (used to bind one mandate to the next). */
+function mandateHash(vdc) {
+    return (0, pca_1.hashCanonical)(vdc);
+}
+// ===================================================================================================
+// PCA → AP2 mapping (the narrowing chain)
+// ===================================================================================================
+const round2 = (n) => Math.round((n + Number.EPSILON) * 100) / 100;
+/** Normalize the two accepted inputs to `MandateTerms` (+ the goal commitment when a full mandate). */
+function termsOf(mandate) {
+    if ('terms' in mandate)
+        return { terms: mandate.terms, goalCommit: mandate.goalCommit };
+    return { terms: mandate };
+}
+function describeTerms(terms) {
+    const where = terms.merchants.length ? ` at [${terms.merchants.join(', ')}]` : '';
+    return (`Purchase up to ${terms.perTransactionCap} ${terms.currency} per transaction` +
+        ` (autonomous up to ${terms.autoApproveThreshold}, cumulative ${terms.cumulativeCap})${where}`);
+}
+/** Map a PCA payment mandate (or raw terms) to an AP2 Intent Mandate VDC. */
+function toAP2IntentMandate(mandate, opts) {
+    const { terms, goalCommit } = termsOf(mandate);
+    const now = Number.isFinite(opts.now) ? opts.now : Date.now();
+    const x_pca = {
+        auto_approve_threshold: terms.autoApproveThreshold,
+        cumulative_cap: terms.cumulativeCap,
+        per_transaction_cap: terms.perTransactionCap,
+        period_start: terms.periodStart,
+        ...(terms.periodEnd !== undefined ? { period_end: terms.periodEnd } : {}),
+        ...(terms.maxTransactionsPerPeriod !== undefined
+            ? { max_transactions_per_period: terms.maxTransactionsPerPeriod }
+            : {}),
+        ...(goalCommit !== undefined ? { goal_commit: goalCommit } : {}),
+    };
+    const contents = {
+        natural_language_description: opts.naturalLanguageDescription ?? describeTerms(terms),
+        merchants: terms.merchants.length ? [...terms.merchants] : null,
+        skus: opts.skus ?? null,
+        ...(terms.categories.length ? { categories: [...terms.categories] } : {}),
+        max_amount: { currency: terms.currency, value: terms.perTransactionCap },
+        required_refundability: true,
+        user_cart_confirmation_required: opts.userCartConfirmationRequired ?? terms.autoApproveThreshold < terms.perTransactionCap,
+        ...(terms.periodEnd !== undefined ? { intent_expiry: new Date(terms.periodEnd).toISOString() } : {}),
+        x_pca,
+    };
+    const vdc = {
+        '@context': exports.AP2_CONTEXT,
+        type: ['VerifiableCredential', 'IntentMandate'],
+        issuer: opts.issuerPublic,
+        issuanceDate: new Date(now).toISOString(),
+        ...(terms.periodEnd !== undefined ? { expirationDate: new Date(terms.periodEnd).toISOString() } : {}),
+        credentialSubject: contents,
+    };
+    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
+}
+/** Narrow an Intent Mandate into a concrete AP2 Cart Mandate VDC (items + committed total). */
+function toAP2CartMandate(intent, cart, opts) {
+    const currency = cart.currency ?? intent.credentialSubject.max_amount.currency;
+    const total = round2(cart.items.reduce((sum, it) => sum + it.quantity * it.unit_price.value, 0));
+    const id = cart.id ?? `cart_${(0, pca_1.hashCanonical)({ merchant: cart.merchant, items: cart.items }).slice(0, 16)}`;
+    const contents = {
+        id,
+        merchant: cart.merchant,
+        items: cart.items.map((it) => ({ ...it, unit_price: { ...it.unit_price } })),
+        total: { currency, value: total },
+        intent_reference: mandateHash(intent),
+        ...(cart.expiry !== undefined ? { cart_expiry: new Date(cart.expiry).toISOString() } : {}),
+    };
+    const vdc = {
+        '@context': exports.AP2_CONTEXT,
+        type: ['VerifiableCredential', 'CartMandate'],
+        issuer: opts.issuerPublic,
+        issuanceDate: new Date(Number.isFinite(cart.now) ? cart.now : Date.now()).toISOString(),
+        ...(cart.expiry !== undefined ? { expirationDate: new Date(cart.expiry).toISOString() } : {}),
+        credentialSubject: contents,
+    };
+    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
+}
+/** Narrow a Cart Mandate into an AP2 Payment Mandate VDC (the payment authorization + modality). */
+function toAP2PaymentMandate(cart, opts) {
+    const amount = opts.amount ?? { ...cart.credentialSubject.total };
+    const humanPresent = opts.humanPresent ?? (opts.pcaTier !== undefined ? opts.pcaTier >= 3 : false);
+    const contents = {
+        cart_hash: mandateHash(cart),
+        ...(opts.intent ? { intent_hash: mandateHash(opts.intent) } : {}),
+        amount,
+        payment_method: { ...opts.paymentMethod },
+        human_present: humanPresent,
+        ...(cart.credentialSubject.merchant ? { merchant: cart.credentialSubject.merchant } : {}),
+    };
+    const vdc = {
+        '@context': exports.AP2_CONTEXT,
+        type: ['VerifiableCredential', 'PaymentMandate'],
+        issuer: opts.issuerPublic,
+        issuanceDate: new Date(Number.isFinite(opts.now) ? opts.now : Date.now()).toISOString(),
+        credentialSubject: contents,
+    };
+    return opts.issuerSecret ? signMandate(vdc, opts.issuerSecret) : vdc;
+}
+/** Parse an AP2 mandate VDC back toward PCA terms (lossless for an Intent minted with `x_pca`). */
+function fromAP2Mandate(vdc) {
+    const kind = vdc.type[1];
+    if (kind === 'IntentMandate') {
+        const cs = vdc.credentialSubject;
+        const x = cs.x_pca;
+        return {
+            type: 'IntentMandate',
+            ...(cs.merchants ? { merchants: [...cs.merchants] } : {}),
+            ...(cs.categories ? { categories: [...cs.categories] } : {}),
+            currency: cs.max_amount.currency,
+            perTransactionCap: x?.per_transaction_cap ?? cs.max_amount.value,
+            ...(x ? { autoApproveThreshold: x.auto_approve_threshold, cumulativeCap: x.cumulative_cap } : {}),
+            ...(x?.period_start !== undefined ? { periodStart: x.period_start } : {}),
+            ...(x?.period_end !== undefined ? { periodEnd: x.period_end } : {}),
+            ...(x?.max_transactions_per_period !== undefined
+                ? { maxTransactionsPerPeriod: x.max_transactions_per_period }
+                : {}),
+            ...(x?.goal_commit !== undefined ? { goalCommit: x.goal_commit } : {}),
+        };
+    }
+    if (kind === 'CartMandate') {
+        const cs = vdc.credentialSubject;
+        return { type: 'CartMandate', merchant: cs.merchant, amount: cs.total.value, currency: cs.total.currency };
+    }
+    const cs = vdc.credentialSubject;
+    return {
+        type: 'PaymentMandate',
+        amount: cs.amount.value,
+        currency: cs.amount.currency,
+        humanPresent: cs.human_present,
+        ...(cs.merchant ? { merchant: cs.merchant } : {}),
+    };
+}
+/**
+ * Verify an AP2 Intent→Cart→Payment chain: each VDC's signature, the hash bindings (cart→intent,
+ * payment→cart), and that every step only RESTRICTS the one above (never amplifies). This mirrors
+ * PCA's attenuation check: a child capability may narrow authority but never widen it.
+ */
+function verifyAP2Chain(intent, cart, payment) {
+    const reasons = [];
+    // 1. Signatures (each mandate must be signed and verify under its own issuer).
+    if (!verifyMandate(intent))
+        reasons.push('intent signature invalid or missing');
+    if (!verifyMandate(cart))
+        reasons.push('cart signature invalid or missing');
+    if (!verifyMandate(payment))
+        reasons.push('payment signature invalid or missing');
+    const i = intent.credentialSubject;
+    const c = cart.credentialSubject;
+    const p = payment.credentialSubject;
+    // 2. Hash bindings (cart → intent, payment → cart).
+    if (c.intent_reference !== mandateHash(intent))
+        reasons.push('cart does not reference this intent');
+    if (p.cart_hash !== mandateHash(cart))
+        reasons.push('payment does not reference this cart');
+    if (p.intent_hash !== undefined && p.intent_hash !== mandateHash(intent)) {
+        reasons.push('payment intent_hash does not match this intent');
+    }
+    // 3. Currency consistency (no implicit FX across the chain).
+    if (c.total.currency !== i.max_amount.currency)
+        reasons.push('cart currency differs from intent');
+    if (p.amount.currency !== c.total.currency)
+        reasons.push('payment currency differs from cart');
+    // 4. Non-amplifying narrowing of AMOUNT (the core attenuation check).
+    if (c.total.value > i.max_amount.value) {
+        reasons.push(`cart total ${c.total.value} exceeds intent cap ${i.max_amount.value} (amplifying)`);
+    }
+    if (p.amount.value > c.total.value) {
+        reasons.push(`payment amount ${p.amount.value} exceeds cart total ${c.total.value} (amplifying)`);
+    }
+    // 5. Merchant allowlist narrowing (null intent.merchants ⇒ any merchant permitted).
+    if (i.merchants !== null && !i.merchants.includes(c.merchant)) {
+        reasons.push(`cart merchant '${c.merchant}' not in intent allowlist`);
+    }
+    return { ok: reasons.length === 0, reasons };
+}
+/** Assemble the signed Intent→Cart→Payment chain and attach its non-amplifying-narrowing verifier. */
+function chainMandates(intent, cart, payment) {
+    return { intent, cart, payment, verify: () => verifyAP2Chain(intent, cart, payment) };
+}
+/**
+ * Coinbase x402 adapter: models the HTTP 402 `Payment Required` challenge (the server's `accepts`
+ * payment requirements) plus the `X-PAYMENT` request header carrying the base64 payment payload the
+ * client re-sends. Structural only — the real rail settles on-chain. (Field names follow the public
+ * x402 shape and should be checked against the x402 spec before production.)
+ */
+exports.x402Settlement = {
+    rail: 'x402',
+    settle(payment, ctx) {
+        const cs = payment.credentialSubject;
+        const network = ctx?.network ?? 'base-sepolia';
+        const requirement = {
+            scheme: 'exact',
+            network,
+            maxAmountRequired: String(cs.amount.value),
+            resource: ctx?.resourceUrl ?? '',
+            description: `AP2 payment mandate ${cs.cart_hash}`,
+            payTo: ctx?.payTo ?? cs.merchant ?? '',
+            asset: cs.amount.currency,
+            mimeType: 'application/json',
+        };
+        const xPayment = (0, pca_1.b64u)((0, pca_1.utf8)(JSON.stringify({
+            x402Version: 1,
+            scheme: 'exact',
+            network,
+            payload: { cartHash: cs.cart_hash, humanPresent: cs.human_present, amount: cs.amount.value },
+        })));
+        return {
+            rail: 'x402',
+            amount: cs.amount,
+            ...(cs.merchant ? { merchant: cs.merchant } : {}),
+            payload: {
+                httpStatus: 402,
+                x402Version: 1,
+                accepts: [requirement],
+                header: { 'X-PAYMENT': xPayment },
+            },
+        };
+    },
+};
+/**
+ * Stripe Shared Payment Token adapter: models the SPT charge shape — a shared token the buyer's agent
+ * grants the merchant to pull a bounded amount. Structural only — a real integration calls Stripe with
+ * the token. Amount is converted to minor units (cents). (Check field names against Stripe's SPT docs
+ * before production.)
+ */
+exports.stripeSptSettlement = {
+    rail: 'stripe-spt',
+    settle(payment, ctx) {
+        const cs = payment.credentialSubject;
+        return {
+            rail: 'stripe-spt',
+            amount: cs.amount,
+            ...(cs.merchant ? { merchant: cs.merchant } : {}),
+            payload: {
+                shared_payment_token: cs.payment_method.token ?? '',
+                amount: Math.round(cs.amount.value * 100),
+                currency: cs.amount.currency.toLowerCase(),
+                human_present: cs.human_present,
+                ...(ctx?.payTo ? { on_behalf_of: ctx.payTo } : {}),
+            },
+        };
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;;AAyLH,kCAaC;AAGD,sCAKC;AAGD,kCAEC;AAsCD,gDAyCC;AAsBD,4CAyBC;AAuBD,kDAsBC;AAgCD,wCAgCC;AAwBD,wCAyCC;AAGD,sCAMC;AAtgBD,wCAQwB;AAGxB,sGAAsG;AACtG,kBAAkB;AAClB,sGAAsG;AAEtG,qEAAqE;AACxD,QAAA,WAAW,GAAG,KAAc,CAAC;AAE1C;;;GAGG;AACU,QAAA,WAAW,GAAsB;IAC5C,wCAAwC;IACxC,uCAAuC;CACxC,CAAC;AAkJF,sGAAsG;AACtG,mCAAmC;AACnC,sGAAsG;AAEtG,+FAA+F;AAC/F,SAAS,SAAS,CAAiC,GAAM;IACvD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACvC,KAAK,MAAM,CAAC;IACZ,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,SAAgB,WAAW,CACzB,GAAsC,EACtC,SAAqB;IAErB,MAAM,GAAG,GAAG,IAAA,UAAI,EAAC,SAAS,EAAE,IAAA,oBAAc,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAa;QACtB,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,GAAG,CAAC,YAAY;QACzB,kBAAkB,EAAE,GAAG,CAAC,MAAM;QAC9B,YAAY,EAAE,iBAAiB;QAC/B,cAAc,EAAE,IAAA,eAAS,EAAC,GAAG,CAAC;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAgB,aAAa,CAAC,GAAkB;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7B,0FAA0F;IAC1F,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,IAAA,gBAAU,EAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAc,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;AAC1F,CAAC;AAED,2EAA2E;AAC3E,SAAgB,WAAW,CAAC,GAAkB;IAC5C,OAAO,IAAA,mBAAa,EAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,0CAA0C;AAC1C,sGAAsG;AAEtG,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAEnF,uGAAuG;AACvG,SAAS,OAAO,CAAC,OAAyC;IACxD,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,OAAO,CACL,kBAAkB,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,QAAQ,kBAAkB;QAC7E,sBAAsB,KAAK,CAAC,oBAAoB,gBAAgB,KAAK,CAAC,aAAa,IAAI,KAAK,EAAE,CAC/F,CAAC;AACJ,CAAC;AAiBD,6EAA6E;AAC7E,SAAgB,kBAAkB,CAChC,OAAyC,EACzC,IAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAuB;QAChC,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;QAClD,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE,2BAA2B,EAAE,KAAK,CAAC,wBAAwB,EAAE;YACjE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IAEF,MAAM,QAAQ,GAA0B;QACtC,4BAA4B,EAAE,IAAI,CAAC,0BAA0B,IAAI,aAAa,CAAC,KAAK,CAAC;QACrF,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;QACvB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,iBAAiB,EAAE;QACxE,sBAAsB,EAAE,IAAI;QAC5B,+BAA+B,EAC7B,IAAI,CAAC,4BAA4B,IAAI,KAAK,CAAC,oBAAoB,GAAG,KAAK,CAAC,iBAAiB;QAC3F,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,KAAK;KACN,CAAC;IAEF,MAAM,GAAG,GAAkB;QACzB,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,eAAe,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QACzC,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAqBD,+FAA+F;AAC/F,SAAgB,gBAAgB,CAAC,MAAqB,EAAE,IAAe,EAAE,IAAoB;IAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAA,mBAAa,EAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAE3G,MAAM,QAAQ,GAAwB;QACpC,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5E,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;QACjC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;IAEF,MAAM,GAAG,GAAgB;QACvB,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,aAAa,CAAC;QAC7C,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QACnG,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAsBD,oGAAoG;AACpG,SAAgB,mBAAmB,CAAC,IAAiB,EAAE,IAAuB;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAA2B;QACvC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM;QACN,cAAc,EAAE,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE;QACzC,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;IAEF,MAAM,GAAG,GAAmB;QAC1B,UAAU,EAAE,mBAAW;QACvB,IAAI,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QAChD,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,YAAY,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QACnG,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AA+BD,mGAAmG;AACnG,SAAgB,cAAc,CAAC,GAAkB;IAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAI,GAAqB,CAAC,iBAAiB,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;YAChC,iBAAiB,EAAE,CAAC,EAAE,mBAAmB,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK;YAChE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjG,GAAG,CAAC,CAAC,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,CAAC,EAAE,2BAA2B,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,2BAA2B,EAAE;gBAC7D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAI,GAAmB,CAAC,iBAAiB,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,EAAE,GAAI,GAAsB,CAAC,iBAAiB,CAAC;IACrD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ;QAC5B,YAAY,EAAE,EAAE,CAAC,aAAa;QAC9B,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAmBD;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,MAAqB,EACrB,IAAiB,EACjB,OAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,+EAA+E;IAC/E,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAChF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5E,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAElF,MAAM,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACjC,MAAM,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEpC,oDAAoD;IACpD,IAAI,CAAC,CAAC,gBAAgB,KAAK,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACjE,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAE/F,sEAAsE;IACtE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,KAAK,uBAAuB,CAAC,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,KAAK,uBAAuB,CAAC,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,CAAC;IACpG,CAAC;IAED,oFAAoF;IACpF,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,2BAA2B,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,sGAAsG;AACtG,SAAgB,aAAa,CAC3B,MAAqB,EACrB,IAAiB,EACjB,OAAuB;IAEvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AACxF,CAAC;AAoCD;;;;;GAKG;AACU,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,MAAM;IACZ,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,cAAc,CAAC;QAC/C,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAO;YACf,OAAO;YACP,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1C,QAAQ,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;YAChC,WAAW,EAAE,uBAAuB,EAAE,CAAC,SAAS,EAAE;YAClD,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE;YACtC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,kBAAkB;SAC7B,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,UAAI,EACnB,IAAA,UAAI,EACF,IAAI,CAAC,SAAS,CAAC;YACb,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,OAAO;YACf,OAAO;YACP,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;SAC7F,CAAC,CACH,CACF,CAAC;QACF,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE;gBACP,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,CAAC,WAAW,CAAC;gBACtB,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;aAClC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACU,QAAA,mBAAmB,GAAsB;IACpD,IAAI,EAAE,YAAY;IAClB,MAAM,CAAC,OAAO,EAAE,GAAG;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE;gBACP,oBAAoB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBACnD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC;gBACzC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC1C,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,34 @@
 {
   "name": "@atlasauth/pca-ap2",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "AP2 (Agent Payments Protocol, FIDO) wire-compatibility for PCA: map the grant/budget to Intent/Cart/Payment mandate VDCs; PCA governs, x402 / Stripe Shared-Payment-Tokens settle.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@atlasauth/pca": "0.1.0",
+    "@atlasauth/pca-payments": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }