@atlasauth/pca-ap2 0.3.0 → 0.4.0

package/dist/mandates.js

@@ -0,0 +1,279 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FREQUENCIES = exports.PCA_CLAIM = exports.VCT_PAYMENT_OPEN = exports.VCT_PAYMENT = exports.VCT_CHECKOUT_OPEN = exports.VCT_CHECKOUT = void 0;
+exports.currencyExponent = currencyExponent;
+exports.toMinorUnits = toMinorUnits;
+exports.fromMinorUnits = fromMinorUnits;
+exports.openPaymentMandateProblems = openPaymentMandateProblems;
+exports.paymentMandateProblems = paymentMandateProblems;
+exports.openCheckoutMandateProblems = openCheckoutMandateProblems;
+exports.checkoutMandateProblems = checkoutMandateProblems;
+exports.assertValid = assertValid;
+/**
+ * AP2 mandate claim shapes (Intent/Cart/Payment, closed and open) and their validators.
+ *
+ * The shapes follow the official AP2 JSON Schemas (`checkout_mandate`, `open_checkout_mandate`,
+ * `payment_mandate`, `open_payment_mandate` and `types/*`). The validators are hand-written, check at
+ * least what those schemas check (the test-suite runs both against the same documents) and are
+ * stricter in places where a lax reading would be unsafe (non-negative safe-integer amounts,
+ * well-formed JWKs).
+ */
+const sdjwt_1 = require("./sdjwt");
+// ---------------------------------------------------------------------------------------------
+// vct values
+// ---------------------------------------------------------------------------------------------
+exports.VCT_CHECKOUT = 'mandate.checkout.1';
+exports.VCT_CHECKOUT_OPEN = 'mandate.checkout.open.1';
+exports.VCT_PAYMENT = 'mandate.payment.1';
+exports.VCT_PAYMENT_OPEN = 'mandate.payment.open.1';
+/** Namespaced claim carrying PCA's own proof inside a mandate object (see `pca.ts`). */
+exports.PCA_CLAIM = 'x_pca';
+// ---------------------------------------------------------------------------------------------
+// currencies and minor units
+// ---------------------------------------------------------------------------------------------
+const ZERO_DECIMAL = new Set(['BIF', 'CLP', 'DJF', 'GNF', 'ISK', 'JPY', 'KMF', 'KRW', 'PYG', 'RWF', 'UGX', 'UYI', 'VND', 'VUV', 'XAF', 'XOF', 'XPF']);
+const THREE_DECIMAL = new Set(['BHD', 'IQD', 'JOD', 'KWD', 'LYD', 'OMR', 'TND']);
+const FOUR_DECIMAL = new Set(['CLF', 'UYW']);
+/** ISO 4217 minor-unit exponent for `currency` (2 for any code not in the 0/3/4-digit tables). */
+function currencyExponent(currency) {
+    if (!/^[A-Z]{3}$/.test(currency))
+        throw new sdjwt_1.Ap2Error(`currency must be an ISO 4217 alpha-3 code, got ${JSON.stringify(currency)}`);
+    if (ZERO_DECIMAL.has(currency))
+        return 0;
+    if (THREE_DECIMAL.has(currency))
+        return 3;
+    if (FOUR_DECIMAL.has(currency))
+        return 4;
+    return 2;
+}
+/**
+ * Convert a major-unit amount (e.g. `120.5` USD) to integer minor units (`12050`). Throws unless the
+ * amount is exactly representable with the currency's exponent: float drift (`0.1 + 0.2`) is refused
+ * rather than rounded away.
+ */
+function toMinorUnits(major, currency) {
+    const e = currencyExponent(currency);
+    if (typeof major !== 'number' || !Number.isFinite(major) || major < 0)
+        throw new sdjwt_1.Ap2Error(`amount must be a finite non-negative number, got ${String(major)}`);
+    const fixed = major.toFixed(e);
+    if (Number(fixed) !== major)
+        throw new sdjwt_1.Ap2Error(`amount ${String(major)} is not exactly representable in ${currency} minor units`);
+    const minor = Number(fixed.replace('.', ''));
+    if (!Number.isSafeInteger(minor))
+        throw new sdjwt_1.Ap2Error(`amount ${String(major)} is outside the safe integer range in minor units`);
+    return minor;
+}
+/** Integer minor units to the major-unit number PCA budgets use (exact for any safe integer). */
+function fromMinorUnits(minor, currency) {
+    const e = currencyExponent(currency);
+    if (!Number.isSafeInteger(minor) || minor < 0)
+        throw new sdjwt_1.Ap2Error(`minor-unit amount must be a non-negative safe integer, got ${String(minor)}`);
+    return minor / 10 ** e;
+}
+exports.FREQUENCIES = ['ON_DEMAND', 'DAILY', 'WEEKLY', 'BIWEEKLY', 'MONTHLY', 'QUARTERLY', 'ANNUALLY'];
+// ---------------------------------------------------------------------------------------------
+// validators: each returns the list of problems (empty = valid)
+// ---------------------------------------------------------------------------------------------
+const isStr = (v) => typeof v === 'string';
+const isNonEmptyStr = (v) => typeof v === 'string' && v.length > 0;
+const isInt = (v) => typeof v === 'number' && Number.isSafeInteger(v);
+const isNonNegInt = (v) => isInt(v) && v >= 0;
+function merchantProblems(v, at) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return [`${at}: not an object`];
+    const p = [];
+    if (!isNonEmptyStr(v.id))
+        p.push(`${at}.id: required string`);
+    if (!isNonEmptyStr(v.name))
+        p.push(`${at}.name: required string`);
+    if (v.website !== undefined && !isStr(v.website))
+        p.push(`${at}.website: must be a string`);
+    return p;
+}
+function amountProblems(v, at) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return [`${at}: not an object`];
+    const p = [];
+    if (!isNonNegInt(v.amount))
+        p.push(`${at}.amount: must be a non-negative integer (minor units)`);
+    if (!isStr(v.currency) || !/^[A-Z]{3}$/.test(v.currency))
+        p.push(`${at}.currency: must be an ISO 4217 alpha-3 code`);
+    return p;
+}
+function instrumentProblems(v, at) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return [`${at}: not an object`];
+    const p = [];
+    if (!isNonEmptyStr(v.id))
+        p.push(`${at}.id: required string`);
+    if (!isNonEmptyStr(v.type))
+        p.push(`${at}.type: required string`);
+    if (v.description !== undefined && !isStr(v.description))
+        p.push(`${at}.description: must be a string`);
+    return p;
+}
+function pispProblems(v, at) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return [`${at}: not an object`];
+    return ['legal_name', 'brand_name', 'domain_name'].filter((k) => !isNonEmptyStr(v[k])).map((k) => `${at}.${k}: required string`);
+}
+function timeProblems(v) {
+    const p = [];
+    for (const k of ['iat', 'exp'])
+        if (v[k] !== undefined && !isNonNegInt(v[k]))
+            p.push(`${k}: must be an integer epoch-seconds`);
+    return p;
+}
+function cnfProblems(v) {
+    if (!(0, sdjwt_1.isObject)(v) || !(0, sdjwt_1.isObject)(v.jwk))
+        return ['cnf: must be { jwk }'];
+    try {
+        (0, sdjwt_1.assertP256Jwk)(v.jwk, 'cnf.jwk');
+        return [];
+    }
+    catch (e) {
+        return [e.message];
+    }
+}
+function pcaClaimProblems(v) {
+    return v[exports.PCA_CLAIM] !== undefined && !(0, sdjwt_1.isObject)(v[exports.PCA_CLAIM]) ? [`${exports.PCA_CLAIM}: must be an object`] : [];
+}
+function listProblems(v, at, each) {
+    if (!Array.isArray(v))
+        return [`${at}: must be an array`];
+    return v.flatMap((x, i) => each(x, `${at}[${i}]`));
+}
+function paymentConstraintProblems(c, at) {
+    if (!(0, sdjwt_1.isObject)(c) || !isStr(c.type))
+        return [`${at}: constraint must be an object with a string type`];
+    switch (c.type) {
+        case 'payment.agent_recurrence': {
+            const p = [];
+            if (!isStr(c.frequency) || !exports.FREQUENCIES.includes(c.frequency))
+                p.push(`${at}.frequency: not a known frequency`);
+            if (c.max_occurrences !== undefined && !(isInt(c.max_occurrences) && c.max_occurrences > 0))
+                p.push(`${at}.max_occurrences: must be a positive integer`);
+            return p;
+        }
+        case 'payment.allowed_payees':
+            return listProblems(c.allowed, `${at}.allowed`, merchantProblems);
+        case 'payment.allowed_payment_instruments':
+            return listProblems(c.allowed, `${at}.allowed`, instrumentProblems);
+        case 'payment.allowed_pisps':
+            return listProblems(c.allowed, `${at}.allowed`, pispProblems);
+        case 'payment.amount_range': {
+            const p = [];
+            if (!isStr(c.currency) || !/^[A-Z]{3}$/.test(c.currency))
+                p.push(`${at}.currency: must be an ISO 4217 alpha-3 code`);
+            if (!isNonNegInt(c.max))
+                p.push(`${at}.max: must be a non-negative integer (minor units)`);
+            if (c.min !== undefined && !isNonNegInt(c.min))
+                p.push(`${at}.min: must be a non-negative integer (minor units)`);
+            if (isInt(c.max) && isInt(c.min) && c.min > c.max)
+                p.push(`${at}: min exceeds max`);
+            return p;
+        }
+        case 'payment.budget': {
+            const p = [];
+            if (!isStr(c.currency) || !/^[A-Z]{3}$/.test(c.currency))
+                p.push(`${at}.currency: must be an ISO 4217 alpha-3 code`);
+            if (typeof c.max !== 'number' || !Number.isFinite(c.max) || c.max < 0)
+                p.push(`${at}.max: must be a non-negative number (major units)`);
+            return p;
+        }
+        case 'payment.execution_date':
+            return ['not_before', 'not_after'].filter((k) => c[k] !== undefined && !isStr(c[k])).map((k) => `${at}.${k}: must be a string`);
+        case 'payment.reference':
+            return isNonEmptyStr(c.conditional_transaction_id) ? [] : [`${at}.conditional_transaction_id: required string`];
+        default:
+            return [`${at}: unknown constraint type ${c.type}`];
+    }
+}
+function checkoutConstraintProblems(c, at) {
+    if (!(0, sdjwt_1.isObject)(c) || !isStr(c.type))
+        return [`${at}: constraint must be an object with a string type`];
+    if (c.type === 'checkout.allowed_merchants')
+        return listProblems(c.allowed, `${at}.allowed`, merchantProblems);
+    if (c.type === 'checkout.line_items') {
+        if (!Array.isArray(c.items) || c.items.length === 0)
+            return [`${at}.items: must be a non-empty array`];
+        return c.items.flatMap((it, i) => {
+            const a = `${at}.items[${i}]`;
+            if (!(0, sdjwt_1.isObject)(it))
+                return [`${a}: not an object`];
+            const p = [];
+            if (!isNonEmptyStr(it.id))
+                p.push(`${a}.id: required string`);
+            if (!isInt(it.quantity) || it.quantity <= 0)
+                p.push(`${a}.quantity: must be a positive integer`);
+            p.push(...listProblems(it.acceptable_items, `${a}.acceptable_items`, (x, ax) => !(0, sdjwt_1.isObject)(x) ? [`${ax}: not an object`] : ['id', 'title'].filter((k) => !isNonEmptyStr(x[k])).map((k) => `${ax}.${k}: required string`)));
+            return p;
+        });
+    }
+    return [`${at}: unknown constraint type ${c.type}`];
+}
+function vctProblem(v, want) {
+    return v.vct === want ? [] : [`vct: must be ${want}`];
+}
+function openPaymentMandateProblems(v) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return ['mandate: not an object'];
+    const p = [...vctProblem(v, exports.VCT_PAYMENT_OPEN), ...timeProblems(v), ...cnfProblems(v.cnf), ...pcaClaimProblems(v)];
+    p.push(...listProblems(v.constraints, 'constraints', paymentConstraintProblems));
+    if (Array.isArray(v.constraints) && !v.constraints.some((c) => (0, sdjwt_1.isObject)(c) && c.type === 'payment.reference'))
+        p.push('constraints: must contain a payment.reference constraint');
+    if (v.payee !== undefined)
+        p.push(...merchantProblems(v.payee, 'payee'));
+    if (v.payment_amount !== undefined)
+        p.push(...amountProblems(v.payment_amount, 'payment_amount'));
+    if (v.payment_instrument !== undefined)
+        p.push(...instrumentProblems(v.payment_instrument, 'payment_instrument'));
+    if (v.pisp !== undefined)
+        p.push(...pispProblems(v.pisp, 'pisp'));
+    if (v.execution_date !== undefined && !isStr(v.execution_date))
+        p.push('execution_date: must be a string');
+    if (v.risk_data !== undefined && !(0, sdjwt_1.isObject)(v.risk_data))
+        p.push('risk_data: must be an object');
+    return p;
+}
+function paymentMandateProblems(v) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return ['mandate: not an object'];
+    const p = [...vctProblem(v, exports.VCT_PAYMENT), ...timeProblems(v), ...pcaClaimProblems(v)];
+    if (!isNonEmptyStr(v.transaction_id))
+        p.push('transaction_id: required string');
+    p.push(...merchantProblems(v.payee, 'payee'), ...amountProblems(v.payment_amount, 'payment_amount'), ...instrumentProblems(v.payment_instrument, 'payment_instrument'));
+    if (v.pisp !== undefined)
+        p.push(...pispProblems(v.pisp, 'pisp'));
+    if (v.execution_date !== undefined && !isStr(v.execution_date))
+        p.push('execution_date: must be a string');
+    if (v.risk_data !== undefined && !(0, sdjwt_1.isObject)(v.risk_data))
+        p.push('risk_data: must be an object');
+    return p;
+}
+function openCheckoutMandateProblems(v) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return ['mandate: not an object'];
+    const p = [...vctProblem(v, exports.VCT_CHECKOUT_OPEN), ...timeProblems(v), ...cnfProblems(v.cnf), ...pcaClaimProblems(v)];
+    p.push(...listProblems(v.constraints, 'constraints', checkoutConstraintProblems));
+    if (Array.isArray(v.constraints) && !v.constraints.some((c) => (0, sdjwt_1.isObject)(c) && c.type === 'checkout.line_items'))
+        p.push('constraints: must contain a checkout.line_items constraint');
+    return p;
+}
+function checkoutMandateProblems(v) {
+    if (!(0, sdjwt_1.isObject)(v))
+        return ['mandate: not an object'];
+    const p = [...vctProblem(v, exports.VCT_CHECKOUT), ...timeProblems(v), ...pcaClaimProblems(v)];
+    if (!isNonEmptyStr(v.checkout_jwt))
+        p.push('checkout_jwt: required string');
+    if (!isNonEmptyStr(v.checkout_hash))
+        p.push('checkout_hash: required string');
+    return p;
+}
+function assertValid(v, problems, what) {
+    const p = problems(v);
+    if (p.length > 0)
+        throw new sdjwt_1.Ap2Error(`${what}: ${p.join('; ')}`);
+    return v;
+}
+//# sourceMappingURL=mandates.js.map

package/dist/mandates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandates.js","sourceRoot":"","sources":["../src/mandates.ts"],"names":[],"mappings":";;;AAgCA,4CAMC;AAOD,oCAQC;AAGD,wCAIC;AAoND,gEAYC;AAED,wDASC;AAED,kEAMC;AAED,0DAMC;AAED,kCAIC;AA7TD;;;;;;;;GAQG;AACH,mCAAsG;AAEtG,gGAAgG;AAChG,aAAa;AACb,gGAAgG;AAEnF,QAAA,YAAY,GAAG,oBAAoB,CAAC;AACpC,QAAA,iBAAiB,GAAG,yBAAyB,CAAC;AAC9C,QAAA,WAAW,GAAG,mBAAmB,CAAC;AAClC,QAAA,gBAAgB,GAAG,wBAAwB,CAAC;AAEzD,wFAAwF;AAC3E,QAAA,SAAS,GAAG,OAAO,CAAC;AAEjC,gGAAgG;AAChG,6BAA6B;AAC7B,gGAAgG;AAEhG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACtJ,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAE7C,kGAAkG;AAClG,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,gBAAQ,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnI,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACzC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,KAAa,EAAE,QAAgB;IAC1D,MAAM,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAQ,CAAC,oDAAoD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/J,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,gBAAQ,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,oCAAoC,QAAQ,cAAc,CAAC,CAAC;IACnI,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAQ,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iGAAiG;AACjG,SAAgB,cAAc,CAAC,KAAa,EAAE,QAAgB;IAC5D,MAAM,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAQ,CAAC,8DAA8D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjJ,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC;AACzB,CAAC;AAgCY,QAAA,WAAW,GAAyB,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AA0DlI,gGAAgG;AAChG,gEAAgE;AAChE,gGAAgG;AAEhG,MAAM,KAAK,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AACjE,MAAM,aAAa,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEpE,SAAS,gBAAgB,CAAC,CAAU,EAAE,EAAU;IAC9C,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC5F,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,cAAc,CAAC,CAAU,EAAE,EAAU;IAC5C,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,uDAAuD,CAAC,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,6CAA6C,CAAC,CAAC;IACrH,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,kBAAkB,CAAC,CAAU,EAAE,EAAU;IAChD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IACxG,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,YAAY,CAAC,CAAU,EAAE,EAAU;IAC1C,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;AACnI,CAAC;AACD,SAAS,YAAY,CAAC,CAAa;IACjC,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAC/H,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,IAAA,qBAAa,EAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AACD,SAAS,gBAAgB,CAAC,CAAa;IACrC,OAAO,CAAC,CAAC,iBAAS,CAAC,KAAK,SAAS,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,iBAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAS,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1G,CAAC;AACD,SAAS,YAAY,CAAC,CAAU,EAAE,EAAU,EAAE,IAA0C;IACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAU,EAAE,EAAU;IACvD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;IACtG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,GAAa,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAE,mBAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YACvI,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,8CAA8C,CAAC,CAAC;YACzJ,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,wBAAwB;YAC3B,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACpE,KAAK,qCAAqC;YACxC,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACtE,KAAK,uBAAuB;YAC1B,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAChE,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,GAAa,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,6CAA6C,CAAC,CAAC;YACrH,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;YAC3F,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;YAClH,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,GAAa,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,6CAA6C,CAAC,CAAC;YACrH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;YACxI,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,wBAAwB;YAC3B,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClI,KAAK,mBAAmB;YACtB,OAAO,aAAa,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,8CAA8C,CAAC,CAAC;QAClH;YACE,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAU,EAAE,EAAU;IACxD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;IACtG,IAAI,CAAC,CAAC,IAAI,KAAK,4BAA4B;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC/G,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;QACvG,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;YAC9B,IAAI,CAAC,IAAA,gBAAQ,EAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACjG,CAAC,CAAC,IAAI,CACJ,GAAG,YAAY,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CACtE,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,mBAAmB,CAAC,CACxI,CACF,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,IAAY;IAC7C,OAAO,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,0BAA0B,CAAC,CAAU;IACnD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,wBAAgB,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAClL,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAClH,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,SAAS,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAChG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,sBAAsB,CAAC,CAAU;IAC/C,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,mBAAW,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChF,CAAC,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACxK,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,SAAS,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAChG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,2BAA2B,CAAC,CAAU;IACpD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,yBAAiB,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACtL,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,uBAAuB,CAAC,CAAU;IAChD,IAAI,CAAC,IAAA,gBAAQ,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,oBAAY,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5E,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,WAAW,CAAI,CAAU,EAAE,QAAkC,EAAE,IAAY;IACzF,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,CAAM,CAAC;AAChB,CAAC"}

package/dist/pca.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Binding AP2 mandates to a PCA grant and to the PCA proof of each action.
+ *
+ * AP2 decides what a mandate may say; PCA decides whether the agent may act. The two are tied
+ * together by a namespaced `x_pca` claim that lives INSIDE the mandate object (so it is covered by
+ * the issuer's / agent's signature and by the next hop's `sd_hash`). The official schemas do not set
+ * `additionalProperties: false` and the reference SDK ignores unknown mandate claims, so the claim
+ * does not affect schema validity or reference verification (both are tested).
+ *
+ *   open mandate   `x_pca = { v, grant, terms }`          the PCA grant (principal-signed, Ed25519)
+ *                                                          and the terms it was minted from
+ *   closed payment `x_pca = { v, charge, pcactn }`        the PCActn (agent-signed, Ed25519) that
+ *                                                          authorises exactly this charge
+ *
+ * The PCActn's signed `nonce` commits to the AP2 side: the transaction id, payee, amount, instrument,
+ * the open mandate's `sd_hash` and the thumbprint of the agent's AP2 key. Swapping any of those, or
+ * replaying the PCActn under another mandate or another AP2 agent key, breaks the binding.
+ */
+import { verifyPCActnCore, type Capability, type PCActn, type ThresholdSignature } from '@atlasauth/pca';
+import { type MandateTerms, type PaymentMandate as PcaPaymentMandate } from '@atlasauth/pca-payments';
+import { type JsonObject, type P256Jwk } from './sdjwt';
+import { type Merchant, type OpenCheckoutMandateClaims, type OpenPaymentMandateClaims, type PaymentConstraint, type PaymentMandateClaims } from './mandates';
+import { type MandateIssuer } from './chain';
+import type { CheckoutConstraint } from './mandates';
+export declare const PCA_BINDING_VERSION = 1;
+/** The `x_pca` claim of an open mandate: the principal-signed grant and the terms it was minted from. */
+export declare function pcaOpenClaim(mandate: PcaPaymentMandate): JsonObject;
+export interface FromTermsOptions {
+    issuer: MandateIssuer;
+    agentJwk: P256Jwk;
+    /** Descriptors for every merchant id in the PCA terms (AP2 needs a name; PCA only holds the id). */
+    merchants: Merchant[];
+    /** Issued-at, epoch seconds. */
+    iat: number;
+    /** Expiry, epoch seconds; must not exceed the PCA period end. Required when the terms have no period end. */
+    exp?: number;
+    salt?: () => string;
+}
+/**
+ * The AP2 open payment constraints a set of PCA terms denotes. `budget.max` is in MAJOR units (the
+ * AP2 SDK multiplies it by 100); `amount_range` is in minor units. The budget is refused for any
+ * currency whose exponent is not 2 and for any cap whose x100 product is not exact in floating point,
+ * so the SDK and this package read the same number.
+ */
+export declare function paymentConstraintsFromTerms(terms: MandateTerms, merchants: Merchant[], checkoutReference: string): PaymentConstraint[];
+/** Issue the open payment mandate for a PCA mandate (grant + terms), chained to `checkoutReference`. */
+export declare function openPaymentMandateFromPca(mandate: PcaPaymentMandate, o: FromTermsOptions & {
+    checkoutReference: string;
+}): string;
+/** Issue the open checkout mandate for a PCA mandate: the merchant allowlist and the acceptable line items. */
+export declare function openCheckoutMandateFromPca(mandate: PcaPaymentMandate, o: FromTermsOptions & {
+    lineItems: Extract<CheckoutConstraint, {
+        type: 'checkout.line_items';
+    }>['items'];
+}): string;
+export interface BindingFacts {
+    transactionId: string;
+    payeeId: string;
+    amount: number;
+    currency: string;
+    instrumentId: string;
+    /** `sd_hash` of the open payment mandate token the closed mandate is chained to. */
+    openHash: string;
+    /** RFC 7638 thumbprint of the agent's AP2 (P-256) key. */
+    agentJkt: string;
+}
+/** The value the PCActn's signed `nonce` must equal for these AP2 facts. */
+export declare function pcaBindingNonce(f: BindingFacts): string;
+export interface PcaPaymentBindingInput {
+    /** The PCA mandate (grant + terms + budget) the agent holds. */
+    mandate: PcaPaymentMandate;
+    /** The open payment mandate token the closed mandate will be chained to. */
+    open: string;
+    agentJwk: P256Jwk;
+    /** The agent's Ed25519 secret (the PCA grant's holder); signs the PCActn. */
+    agentSecret: Uint8Array;
+    /** PCA audience (the resource server / Atlas instance id this action is for). */
+    audience: string;
+    counter: number;
+    transactionId: string;
+    payee: Merchant;
+    amount: {
+        amount: number;
+        currency: string;
+    };
+    instrumentId: string;
+    category?: string;
+    /** PCActn `iat`, epoch ms. */
+    now?: number;
+    /** For a charge that needs a human co-sign (PCA step-up): returns the threshold shares over the built PCActn. */
+    cosign?: (pcactn: PCActn) => ThresholdSignature;
+}
+/**
+ * amount / cap, clamped to [0, 1] and rounded UP to 12 decimals. PCA's canonical encoding refuses
+ * numbers with more than 15 significant digits (so 100/300 cannot be signed as-is); rounding up can
+ * only raise the risk the threshold policy sees, never lower it.
+ */
+export declare function riskRatio(amount: number, cap: number): number;
+/** Build the `x_pca` claim of a closed payment mandate: a PCActn authorising exactly this charge. */
+export declare function buildPcaPaymentBinding(i: PcaPaymentBindingInput): JsonObject;
+type PcaVerifyExtras = Pick<NonNullable<Parameters<typeof verifyPCActnCore>[1]>, 'hooks' | 'enforce'>;
+export interface VerifyPcaBindingInput extends PcaVerifyExtras {
+    open: OpenPaymentMandateClaims;
+    closed: PaymentMandateClaims;
+    /** `sd_hash` of the open payment mandate hop (from `verifyPaymentChain().openHash`). */
+    openHash: string;
+    /** The Ed25519 key (b64u) of the principal who must have signed the grant. Required. */
+    expectedPrincipal: string;
+    /** verifier-side PQ pins by Ed25519 identity (R3-01). A pure-PQ / hybrid ROOT is accepted only if the root issuer has a pin equal to its `pq_pk` (a signed binding from `pqPinFor`, or your own registry); without one it is refused. */
+    pqPins?: Readonly<Record<string, string>>;
+    /** This verifier's PCA audience; the PCActn's signed `aud` must equal it. */
+    audience: string;
+    /** Verification time, epoch ms. */
+    now?: number;
+    /**
+     * REQUIRED: the PCA mandate state THIS verifier holds (its live budget). The policy decision always runs on it, so the
+     * cumulative budget is enforced; without it the binding is refused ({@link PcaBindingError} `mandate_required`).
+     */
+    mandate: PcaPaymentMandate;
+    /**
+     * Epoch-ms times of this holder's earlier admitted charges, from the verifier's own records (the velocity `rate`
+     * caveat reads them). REQUIRED when the mandate limits the charge count (`maxTransactionsPerPeriod`); otherwise empty.
+     */
+    recentChargeTimes?: number[];
+}
+/** Thrown when `verifyPcaBinding` lacks the server-held state the policy decision needs. */
+export declare class PcaBindingError extends Error {
+    readonly code: 'mandate_required' | 'charge_history_required';
+    constructor(code: 'mandate_required' | 'charge_history_required', message: string);
+}
+export type PcaBindingResult = {
+    ok: true;
+    pcactn: PCActn;
+    grant: Capability;
+    terms: MandateTerms;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Verify the PCA side of a verified AP2 payment chain: the grant in the open mandate (signed by the
+ * expected principal, consistent with the terms it claims and with the open constraints), and the
+ * closed mandate's PCActn (valid under that grant, for this audience, committing to exactly this
+ * AP2 charge). Run it after `verifyPaymentChain`, which establishes the AP2 signatures.
+ */
+export declare function verifyPcaBinding(i: VerifyPcaBindingInput): Promise<PcaBindingResult>;
+export type { OpenCheckoutMandateClaims };