@mnd8t/sdk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Glencorse Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,60 @@
+# @mnd8t/sdk
+
+A typed TypeScript client for the [mnd8t](https://mnd8t.com) authority API.
+
+mnd8t decides whether a proposed financial action falls within authority you
+defined, and records signed evidence of that decision. It holds no funds, no
+payment credentials and no private keys — you, or a provider you choose,
+execute every action.
+
+No runtime dependencies. Node 22 or newer.
+
+```bash
+npm install @mnd8t/sdk
+```
+
+## Usage
+
+```ts
+import { MandateClient } from "@mnd8t/sdk";
+
+const mandate = new MandateClient({
+  apiKey: process.env.MANDATE_API_KEY!,
+  baseUrl: "https://api.mnd8t.com",
+});
+
+const decision = await mandate.decisions.create({
+  agent_external_id: "procurement_agent_12",
+  amount_minor: 50_000,
+  policy_currency: "GBP",
+  asset: "USDC",
+  counterparty_external_id: "supplier_acme_cloud",
+  purpose: "cloud_infrastructure",
+});
+
+if (decision.effective_decision === "APPROVE") {
+  // Execute with your own credentials, then confirm.
+}
+```
+
+Every decision returns `APPROVE`, `REJECT` or `ESCALATE` with a rule-by-rule
+trace, and produces an Ed25519-signed, hash-chained evidence receipt you can
+verify without calling us — `verifyReceiptSignature` is exported for exactly
+that.
+
+## Documentation
+
+- [SDK reference](https://mnd8t.com/docs/sdk) — every method, type and error
+- [Quickstart](https://mnd8t.com/docs/quickstart) — first decision in under 30 minutes
+- [Developer guide](https://mnd8t.com/docs/developer-guide) — the full integration path
+- [Evidence receipts](https://mnd8t.com/docs/evidence-receipts) — format and verification
+
+## Support
+
+mnd8t is in early access. Speak to your account contact, or report a security
+issue under the [responsible disclosure
+policy](https://mnd8t.com/legal/responsible-disclosure).
+
+## Licence
+
+MIT © Glencorse Ltd

package/dist/client.d.ts

@@ -0,0 +1,122 @@
+import type { Agent, AuthorizeRequest, AuthorizeResponse, ConfirmRequest, Counterparty, CounterpartyAuthorityStatus, CreateAgentRequest, CreateCounterpartyRequest, CreateMandateRequest, EvidenceReceiptEnvelope, Mandate, PublishMandateOptions, PublishResult } from "./types.js";
+export interface MandateClientOptions {
+    apiKey: string;
+    /** Defaults to the hosted sandbox; point at http://localhost:4000 locally. */
+    baseUrl?: string;
+    /** Request timeout in milliseconds (default 15000). */
+    timeoutMs?: number;
+    /** Retries for idempotent requests on network failure / 5xx (default 2). */
+    maxRetries?: number;
+    fetch?: typeof fetch;
+}
+export declare class MandateClient {
+    private readonly apiKey;
+    private readonly baseUrl;
+    private readonly timeoutMs;
+    private readonly maxRetries;
+    private readonly fetchImpl;
+    constructor(options: MandateClientOptions);
+    private request;
+    readonly agents: {
+        create: (body: CreateAgentRequest) => Promise<Agent>;
+        list: () => Promise<{
+            data: Agent[];
+        }>;
+        get: (id: string) => Promise<Agent>;
+    };
+    readonly counterparties: {
+        create: (body: CreateCounterpartyRequest) => Promise<Counterparty>;
+        list: () => Promise<{
+            data: Counterparty[];
+        }>;
+        update: (id: string, body: {
+            authority_status?: CounterpartyAuthorityStatus;
+            metadata?: Record<string, unknown>;
+        }) => Promise<Counterparty>;
+    };
+    readonly mandates: {
+        create: (body: CreateMandateRequest) => Promise<Mandate>;
+        /**
+         * Publishes the draft version, freezing it. Requires a delegator
+         * attestation: whoever publishes asserts they hold the authority being
+         * delegated. mnd8t records the assertion as evidence — it does not
+         * verify that the authority legally exists.
+         */
+        publish: (mandateId: string, options: PublishMandateOptions) => Promise<PublishResult>;
+        revoke: (mandateId: string) => Promise<Record<string, unknown>>;
+        simulate: (mandateId: string, body: {
+            amount_minor: number;
+            asset: string;
+            counterparty_external_id?: string;
+            purpose?: string;
+            at?: string;
+        }) => Promise<{
+            would_decide: string;
+            reason_codes: string[];
+        }>;
+        get: (id: string) => Promise<Mandate & {
+            versions: unknown[];
+        }>;
+        list: () => Promise<{
+            data: Mandate[];
+        }>;
+    };
+    readonly decisions: {
+        /**
+         * Submits a proposed financial action. Generates an idempotency key
+         * automatically (override with `idempotencyKey`), which also makes the
+         * request safely retryable.
+         */
+        authorize: (body: AuthorizeRequest) => Promise<AuthorizeResponse>;
+        confirm: (intentId: string, body: ConfirmRequest) => Promise<Record<string, unknown>>;
+        cancel: (intentId: string, reason?: string) => Promise<Record<string, unknown>>;
+        get: (intentId: string) => Promise<Record<string, unknown>>;
+        list: (params?: {
+            status?: string;
+            decision?: string;
+            limit?: number;
+        }) => Promise<{
+            data: unknown[];
+        }>;
+    };
+    readonly artifacts: {
+        get: (artifactId: string) => Promise<import("./types.js").AuthorisationArtifactEnvelope>;
+        /** Atomically claims the artifact for one executor; single use. */
+        claim: (artifactId: string, executorReference: string) => Promise<{
+            id: string;
+            status: string;
+            artifact: Record<string, unknown>;
+        }>;
+        fail: (artifactId: string, reasonCode: string) => Promise<{
+            id: string;
+            status: string;
+        }>;
+        reissue: (intentId: string) => Promise<import("./types.js").AuthorisationArtifactSummary>;
+        /** Verifies the artifact's Ed25519 signature locally, like receipts. */
+        verify: (artifact: Record<string, unknown>, opts?: {
+            publicKeyPem?: string;
+        }) => Promise<{
+            valid: boolean;
+            reason: string | null;
+        }>;
+    };
+    readonly receipts: {
+        get: (receiptId: string) => Promise<EvidenceReceiptEnvelope>;
+        /** Server-side verification. */
+        verifyRemote: (receiptId: string) => Promise<{
+            valid: boolean;
+            reason: string | null;
+        }>;
+        /**
+         * Independent local verification: fetches the public key from the
+         * gateway's well-known document (or accepts a pinned PEM) and checks the
+         * Ed25519 signature locally.
+         */
+        verify: (receipt: Record<string, unknown>, opts?: {
+            publicKeyPem?: string;
+        }) => Promise<{
+            valid: boolean;
+            reason: string | null;
+        }>;
+    };
+}

package/dist/client.js

@@ -0,0 +1,158 @@
+import { errorFromResponse, MandateError } from "./errors.js";
+import { verifyReceiptSignature } from "./verify.js";
+function randomIdempotencyKey() {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    return `sdk-${Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("")}`;
+}
+export class MandateClient {
+    apiKey;
+    baseUrl;
+    timeoutMs;
+    maxRetries;
+    fetchImpl;
+    constructor(options) {
+        if (!options.apiKey)
+            throw new Error("MandateClient requires an apiKey");
+        this.apiKey = options.apiKey;
+        this.baseUrl = (options.baseUrl ?? "http://localhost:4000").replace(/\/$/, "");
+        this.timeoutMs = options.timeoutMs ?? 15_000;
+        this.maxRetries = options.maxRetries ?? 2;
+        this.fetchImpl = options.fetch ?? fetch;
+    }
+    async request(method, path, opts = {}) {
+        // Safe automatic retries: GETs always; writes only when the caller's
+        // idempotency key makes the replay safe.
+        const retryable = opts.retryable ?? method === "GET";
+        const attempts = retryable ? this.maxRetries + 1 : 1;
+        let lastError;
+        for (let attempt = 0; attempt < attempts; attempt++) {
+            try {
+                // Only declare a JSON content type when a body is actually sent.
+                // Servers reject `content-type: application/json` with an empty
+                // body, which would break every bodyless POST (revoke, reissue).
+                const hasBody = opts.body !== undefined;
+                const res = await this.fetchImpl(`${this.baseUrl}${path}`, {
+                    method,
+                    headers: {
+                        authorization: `Bearer ${this.apiKey}`,
+                        ...(hasBody ? { "content-type": "application/json" } : {}),
+                        ...(opts.idempotencyKey ? { "idempotency-key": opts.idempotencyKey } : {}),
+                    },
+                    ...(hasBody ? { body: JSON.stringify(opts.body) } : {}),
+                    signal: AbortSignal.timeout(this.timeoutMs),
+                });
+                const text = await res.text();
+                const json = text ? JSON.parse(text) : null;
+                if (res.status >= 200 && res.status < 300)
+                    return json;
+                if (res.status >= 500 && attempt < attempts - 1) {
+                    lastError = errorFromResponse(res.status, json);
+                    continue;
+                }
+                throw errorFromResponse(res.status, json);
+            }
+            catch (err) {
+                if (err instanceof MandateError)
+                    throw err;
+                lastError = err;
+                if (attempt >= attempts - 1)
+                    break;
+            }
+        }
+        throw lastError instanceof Error ? lastError : new Error(String(lastError));
+    }
+    agents = {
+        create: (body) => this.request("POST", "/v1/agents", { body }),
+        list: () => this.request("GET", "/v1/agents"),
+        get: (id) => this.request("GET", `/v1/agents/${id}`),
+    };
+    counterparties = {
+        create: (body) => this.request("POST", "/v1/counterparties", { body }),
+        list: () => this.request("GET", "/v1/counterparties"),
+        update: (id, body) => this.request("PATCH", `/v1/counterparties/${id}`, { body }),
+    };
+    mandates = {
+        create: (body) => this.request("POST", "/v1/mandates", { body }),
+        /**
+         * Publishes the draft version, freezing it. Requires a delegator
+         * attestation: whoever publishes asserts they hold the authority being
+         * delegated. mnd8t records the assertion as evidence — it does not
+         * verify that the authority legally exists.
+         */
+        publish: (mandateId, options) => this.request("POST", `/v1/mandates/${mandateId}/publish`, {
+            body: {
+                change_note: options.changeNote,
+                delegation: {
+                    delegator_role: options.delegation.delegatorRole,
+                    authority_source: options.delegation.authoritySource,
+                    source_reference: options.delegation.sourceReference,
+                    attested: true,
+                },
+            },
+        }),
+        revoke: (mandateId) => this.request("POST", `/v1/mandates/${mandateId}/revoke`),
+        simulate: (mandateId, body) => this.request("POST", `/v1/mandates/${mandateId}/simulate`, { body }),
+        get: (id) => this.request("GET", `/v1/mandates/${id}`),
+        list: () => this.request("GET", "/v1/mandates"),
+    };
+    decisions = {
+        /**
+         * Submits a proposed financial action. Generates an idempotency key
+         * automatically (override with `idempotencyKey`), which also makes the
+         * request safely retryable.
+         */
+        authorize: (body) => {
+            const { idempotencyKey, ...payload } = body;
+            return this.request("POST", "/v1/decision-intents", {
+                body: payload,
+                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                retryable: true,
+            });
+        },
+        confirm: (intentId, body) => this.request("POST", `/v1/decision-intents/${intentId}/confirm`, { body }),
+        cancel: (intentId, reason) => this.request("POST", `/v1/decision-intents/${intentId}/cancel`, { body: { reason } }),
+        get: (intentId) => this.request("GET", `/v1/decision-intents/${intentId}`),
+        list: (params = {}) => {
+            const qs = new URLSearchParams(Object.entries(params).filter(([, v]) => v !== undefined)).toString();
+            return this.request("GET", `/v1/decision-intents${qs ? `?${qs}` : ""}`);
+        },
+    };
+    artifacts = {
+        get: (artifactId) => this.request("GET", `/v1/authorisation-artifacts/${artifactId}`),
+        /** Atomically claims the artifact for one executor; single use. */
+        claim: (artifactId, executorReference) => this.request("POST", `/v1/authorisation-artifacts/${artifactId}/claim`, {
+            body: { executor_reference: executorReference },
+            idempotencyKey: randomIdempotencyKey(),
+        }),
+        fail: (artifactId, reasonCode) => this.request("POST", `/v1/authorisation-artifacts/${artifactId}/fail`, {
+            body: { reason_code: reasonCode, reported_by: "CUSTOMER_EXECUTOR" },
+        }),
+        reissue: (intentId) => this.request("POST", `/v1/decision-intents/${intentId}/reissue-artifact`),
+        /** Verifies the artifact's Ed25519 signature locally, like receipts. */
+        verify: async (artifact, opts = {}) => this.receipts.verify(artifact, opts),
+    };
+    receipts = {
+        get: (receiptId) => this.request("GET", `/v1/evidence-receipts/${receiptId}`),
+        /** Server-side verification. */
+        verifyRemote: (receiptId) => this.request("GET", `/v1/evidence-receipts/${receiptId}/verify`),
+        /**
+         * Independent local verification: fetches the public key from the
+         * gateway's well-known document (or accepts a pinned PEM) and checks the
+         * Ed25519 signature locally.
+         */
+        verify: async (receipt, opts = {}) => {
+            let pem = opts.publicKeyPem;
+            if (!pem) {
+                const res = await this.fetchImpl(`${this.baseUrl}/.well-known/mandate-keys.json`);
+                const doc = (await res.json());
+                const keyId = receipt.signature?.key_id;
+                pem = (doc.keys.find((k) => k.key_id === keyId) ?? doc.keys[0])?.public_key_pem;
+            }
+            if (!pem)
+                return { valid: false, reason: "no verification key available" };
+            return verifyReceiptSignature(receipt, pem);
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAarD,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,OAAO,aAAa;IACP,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,SAAS,CAAe;IAEzC,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,OAAyE,EAAE;QAE3E,qEAAqE;QACrE,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;QACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,iEAAiE;gBACjE,gEAAgE;gBAChE,iEAAiE;gBACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;oBACzD,MAAM;oBACN,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;wBACtC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3E;oBACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;iBAC5C,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;oBAAE,OAAO,IAAS,CAAC;gBAC5D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAChD,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBAChD,SAAS;gBACX,CAAC;gBACD,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,YAAY;oBAAE,MAAM,GAAG,CAAC;gBAC3C,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,OAAO,IAAI,QAAQ,GAAG,CAAC;oBAAE,MAAM;YACrC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEQ,MAAM,GAAG;QAChB,MAAM,EAAE,CAAC,IAAwB,EAAkB,EAAE,CACnD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,EAAE,GAA+B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC;QACzE,GAAG,EAAE,CAAC,EAAU,EAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;KAC7E,CAAC;IAEO,cAAc,GAAG;QACxB,MAAM,EAAE,CAAC,IAA+B,EAAyB,EAAE,CACjE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC;QACtD,IAAI,EAAE,GAAsC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACxF,MAAM,EAAE,CAAC,EAAU,EAAE,IAA4F,EAAyB,EAAE,CAC1I,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KAC9D,CAAC;IAEO,QAAQ,GAAG;QAClB,MAAM,EAAE,CAAC,IAA0B,EAAoB,EAAE,CACvD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC;QAChD;;;;;WAKG;QACH,OAAO,EAAE,CAAC,SAAiB,EAAE,OAA8B,EAA0B,EAAE,CACrF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,SAAS,UAAU,EAAE;YACxD,IAAI,EAAE;gBACJ,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,UAAU,EAAE;oBACV,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa;oBAChD,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe;oBACpD,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe;oBACpD,QAAQ,EAAE,IAAI;iBACf;aACF;SACF,CAAC;QACJ,MAAM,EAAE,CAAC,SAAiB,EAAoC,EAAE,CAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,SAAS,SAAS,CAAC;QAC1D,QAAQ,EAAE,CACR,SAAiB,EACjB,IAA+G,EACpD,EAAE,CAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,SAAS,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC;QACtE,GAAG,EAAE,CAAC,EAAU,EAA8C,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC1G,IAAI,EAAE,GAAiC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;KAC9E,CAAC;IAEO,SAAS,GAAG;QACnB;;;;WAIG;QACH,SAAS,EAAE,CAAC,IAAsB,EAA8B,EAAE;YAChE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;YAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE;gBAClD,IAAI,EAAE,OAAO;gBACb,cAAc,EAAE,cAAc,IAAI,oBAAoB,EAAE;gBACxD,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC,QAAgB,EAAE,IAAoB,EAAoC,EAAE,CACpF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,QAAQ,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC;QAC5E,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAe,EAAoC,EAAE,CAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,QAAQ,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;QACvF,GAAG,EAAE,CAAC,QAAgB,EAAoC,EAAE,CAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,wBAAwB,QAAQ,EAAE,CAAC;QACzD,IAAI,EAAE,CAAC,SAAiE,EAAE,EAAgC,EAAE;YAC1G,MAAM,EAAE,GAAG,IAAI,eAAe,CAC5B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAuB,CAChF,CAAC,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;KACF,CAAC;IAEO,SAAS,GAAG;QACnB,GAAG,EAAE,CAAC,UAAkB,EAA+D,EAAE,CACvF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,+BAA+B,UAAU,EAAE,CAAC;QAClE,mEAAmE;QACnE,KAAK,EAAE,CACL,UAAkB,EAClB,iBAAyB,EACmD,EAAE,CAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,UAAU,QAAQ,EAAE;YACtE,IAAI,EAAE,EAAE,kBAAkB,EAAE,iBAAiB,EAAE;YAC/C,cAAc,EAAE,oBAAoB,EAAE;SACvC,CAAC;QACJ,IAAI,EAAE,CAAC,UAAkB,EAAE,UAAkB,EAA2C,EAAE,CACxF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,+BAA+B,UAAU,OAAO,EAAE;YACrE,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE;SACpE,CAAC;QACJ,OAAO,EAAE,CAAC,QAAgB,EAA8D,EAAE,CACxF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,QAAQ,mBAAmB,CAAC;QAC3E,wEAAwE;QACxE,MAAM,EAAE,KAAK,EACX,QAAiC,EACjC,OAAkC,EAAE,EACgB,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC9F,CAAC;IAEO,QAAQ,GAAG;QAClB,GAAG,EAAE,CAAC,SAAiB,EAAoC,EAAE,CAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,SAAS,EAAE,CAAC;QAC3D,gCAAgC;QAChC,YAAY,EAAE,CAAC,SAAiB,EAAsD,EAAE,CACtF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,SAAS,SAAS,CAAC;QAClE;;;;WAIG;QACH,MAAM,EAAE,KAAK,EACX,OAAgC,EAChC,OAAkC,EAAE,EACgB,EAAE;YACtD,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,gCAAgC,CAAC,CAAC;gBAClF,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgE,CAAC;gBAC9F,MAAM,KAAK,GAAI,OAAO,CAAC,SAA6C,EAAE,MAAM,CAAC;gBAC7E,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAC3E,OAAO,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;CACH"}

package/dist/errors.d.ts

@@ -0,0 +1,17 @@
+export declare class MandateError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown | undefined;
+    constructor(status: number, code: string, message: string, details?: unknown | undefined);
+}
+export declare class MandateAuthenticationError extends MandateError {
+}
+export declare class MandateValidationError extends MandateError {
+}
+export declare class MandateIdempotencyConflictError extends MandateError {
+}
+export declare class MandateRateLimitError extends MandateError {
+}
+export declare class MandateNotFoundError extends MandateError {
+}
+export declare function errorFromResponse(status: number, body: unknown): MandateError;

package/dist/errors.js

@@ -0,0 +1,45 @@
+export class MandateError extends Error {
+    status;
+    code;
+    details;
+    constructor(status, code, message, details) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.details = details;
+        this.name = "MandateError";
+    }
+}
+export class MandateAuthenticationError extends MandateError {
+}
+export class MandateValidationError extends MandateError {
+}
+export class MandateIdempotencyConflictError extends MandateError {
+}
+export class MandateRateLimitError extends MandateError {
+}
+export class MandateNotFoundError extends MandateError {
+}
+export function errorFromResponse(status, body) {
+    const err = body?.error;
+    const code = err?.code ?? "UNKNOWN";
+    const message = err?.message ?? `HTTP ${status}`;
+    const details = err?.details;
+    switch (status) {
+        case 401:
+            return new MandateAuthenticationError(status, code, message, details);
+        case 404:
+            return new MandateNotFoundError(status, code, message, details);
+        case 409:
+            return code === "IDEMPOTENCY_CONFLICT"
+                ? new MandateIdempotencyConflictError(status, code, message, details)
+                : new MandateError(status, code, message, details);
+        case 422:
+            return new MandateValidationError(status, code, message, details);
+        case 429:
+            return new MandateRateLimitError(status, code, message, details);
+        default:
+            return new MandateError(status, code, message, details);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAEnB;IACA;IAEA;IAJlB,YACkB,MAAc,EACd,IAAY,EAC5B,OAAe,EACC,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,YAAY;CAAG;AAC/D,MAAM,OAAO,sBAAuB,SAAQ,YAAY;CAAG;AAC3D,MAAM,OAAO,+BAAgC,SAAQ,YAAY;CAAG;AACpE,MAAM,OAAO,qBAAsB,SAAQ,YAAY;CAAG;AAC1D,MAAM,OAAO,oBAAqB,SAAQ,YAAY;CAAG;AAEzD,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,IAAa;IAC7D,MAAM,GAAG,GAAI,IAA2E,EAAE,KAAK,CAAC;IAChG,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,QAAQ,MAAM,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC;IAC7B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,0BAA0B,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxE,KAAK,GAAG;YACN,OAAO,IAAI,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,KAAK,GAAG;YACN,OAAO,IAAI,KAAK,sBAAsB;gBACpC,CAAC,CAAC,IAAI,+BAA+B,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;gBACrE,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,KAAK,GAAG;YACN,OAAO,IAAI,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,GAAG;YACN,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE;YACE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { MandateClient, type MandateClientOptions } from "./client.js";
+export { verifyReceiptSignature } from "./verify.js";
+export * from "./types.js";
+export * from "./errors.js";

package/dist/index.js

@@ -0,0 +1,5 @@
+export { MandateClient } from "./client.js";
+export { verifyReceiptSignature } from "./verify.js";
+export * from "./types.js";
+export * from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA6B,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,220 @@
+export type Decision = "APPROVE" | "REJECT" | "ESCALATE";
+export type EffectiveDecision = Decision | "OBSERVE";
+export interface CreateAgentRequest {
+    name: string;
+    external_id: string;
+    purpose?: string;
+    principal_type?: "ORGANISATION" | "PERSON" | "SERVICE";
+    principal_reference?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface Agent {
+    id: string;
+    organisation_id: string;
+    name: string;
+    external_id: string;
+    purpose: string | null;
+    status: "ACTIVE" | "SUSPENDED" | "REVOKED";
+    principal_type: string;
+    principal_reference: string | null;
+    created_at: string;
+}
+export interface MandatePolicy {
+    currency: string;
+    mode?: "SHADOW" | "ENFORCE";
+    allowed_assets: string[];
+    allowed_counterparties?: string[];
+    denied_counterparties?: string[];
+    per_transaction: {
+        autonomous_limit: number;
+        absolute_limit: number;
+    };
+    budgets?: Array<{
+        period: "DAY" | "MONTH";
+        limit: number;
+    }>;
+    approval?: {
+        above_amount?: number;
+        new_counterparty_requires_approval?: boolean;
+        reservation_on_escalation?: boolean;
+        expires_after_minutes?: number;
+    };
+    allowed_purposes?: string[];
+    schedule?: {
+        timezone: string;
+        days: string[];
+        start: string;
+        end: string;
+    };
+    effective_at: string;
+    expires_at: string;
+}
+export interface CreateMandateRequest {
+    agent_id: string;
+    name: string;
+    mode?: "SHADOW" | "ENFORCE";
+    policy: MandatePolicy;
+}
+export interface Mandate {
+    id: string;
+    agent_id: string;
+    status: "DRAFT" | "PUBLISHED" | "REVOKED";
+    mode: "SHADOW" | "ENFORCE";
+    name: string;
+    current_version: number;
+    created_at: string;
+}
+/**
+ * Customer-asserted authority over a counterparty (CR-001-10). This is who
+ * you authorise paying — not a sanctions, AML or compliance verdict. mnd8t
+ * performs no screening and certifies none.
+ */
+export type CounterpartyAuthorityStatus = "CUSTOMER_APPROVED" | "CUSTOMER_PENDING" | "CUSTOMER_BLOCKED";
+export interface CreateCounterpartyRequest {
+    external_id: string;
+    display_name: string;
+    authority_status?: CounterpartyAuthorityStatus;
+    destination?: string;
+    type?: string;
+    category?: string;
+    metadata?: Record<string, unknown>;
+    /** Results from your own screening provider, stored as supplied. */
+    external_checks?: Array<{
+        type: string;
+        provider: string;
+        status: string;
+        checked_at?: string;
+        reference?: string;
+    }>;
+}
+export interface Counterparty {
+    id: string;
+    organisation_id: string;
+    external_id: string;
+    display_name: string;
+    authority_status: CounterpartyAuthorityStatus;
+    destination: string | null;
+    type: string | null;
+    category: string | null;
+    created_at: string;
+}
+/**
+ * Delegator authority attestation, required to publish a mandate.
+ * The assertion is recorded in the evidence chain; it is not verified.
+ */
+export interface PublishMandateOptions {
+    delegation: {
+        /** The publisher's role, e.g. "Finance Director". */
+        delegatorRole: string;
+        /** Where the authority comes from, e.g. "CORPORATE_POLICY". */
+        authoritySource: string;
+        /** Optional pointer to the source document. */
+        sourceReference?: string;
+    };
+    changeNote?: string;
+}
+export interface PublishResult {
+    mandate_id: string;
+    version: number;
+    policy_hash: string;
+    published_at: string;
+}
+/** CR-001-03: closed action set. Mandate authorises payments and transfers
+ * only — never trading, swaps, staking, lending, or investment. */
+export type FinancialActionType = "PAYMENT" | "TRANSFER";
+export type AuthorisationArtifactStatus = "ISSUED" | "CLAIMED" | "EXECUTED" | "EXPIRED" | "REVOKED" | "CANCELLED" | "FAILED";
+export interface AuthorisationArtifactSummary {
+    id: string;
+    status: string;
+    expires_at: string;
+    download_url: string;
+}
+export interface AuthorisationArtifactEnvelope {
+    id: string;
+    decision_intent_id: string;
+    financial_account_id: string | null;
+    status: AuthorisationArtifactStatus;
+    artifact: Record<string, unknown>;
+    artifact_hash: string;
+    key_id: string;
+    issued_at: string;
+    not_before: string;
+    expires_at: string;
+    claimed_at: string | null;
+    executed_at: string | null;
+}
+export interface AuthorizeRequest {
+    agent_external_id: string;
+    external_reference?: string;
+    action_type?: FinancialActionType;
+    financial_account_id?: string;
+    amount?: {
+        asset: string;
+        asset_amount_minor: number;
+    };
+    valuation?: {
+        policy_amount_minor: number;
+        policy_currency: string;
+        source?: string;
+        rate_reference?: string;
+        valued_at?: string;
+    };
+    jurisdiction_context?: {
+        principal_country?: string;
+        provider_country?: string;
+        counterparty_country?: string;
+        customer_classification?: string;
+    };
+    /** Deprecated: prefer `amount.asset_amount_minor`. */
+    amount_minor?: number;
+    policy_amount_minor?: number;
+    policy_currency?: string;
+    asset: string;
+    counterparty_external_id?: string;
+    destination?: string;
+    purpose?: string;
+    occurred_at?: string;
+    metadata?: Record<string, unknown>;
+    /** Overrides the automatically generated idempotency key. */
+    idempotencyKey?: string;
+}
+export interface AuthorizeResponse {
+    id: string;
+    mode: "SHADOW" | "ENFORCE";
+    decision: EffectiveDecision;
+    effective_decision: EffectiveDecision;
+    would_decide: Decision;
+    reason_codes: string[];
+    mandate_id: string | null;
+    mandate_version: number | null;
+    approval: {
+        id: string;
+        status: string;
+        expires_at: string;
+        approval_url: string;
+    } | null;
+    authorisation_artifact: AuthorisationArtifactSummary | null;
+    evidence_receipt_id: string | null;
+}
+export interface ConfirmRequest {
+    provider: string;
+    external_reference: string;
+    executed_at?: string;
+    /** Required for enforce-mode decisions. */
+    authorisation_artifact_id?: string;
+    financial_account_id?: string;
+    reported_by?: "CUSTOMER_EXECUTOR" | "CUSTOMER_API" | "PROVIDER_WEBHOOK" | "MANDATE_RECONCILIATION";
+    verification?: {
+        method?: "CUSTOMER_ASSERTED" | "PROVIDER_LOOKUP" | "PROVIDER_WEBHOOK" | "NETWORK_LOOKUP";
+        verified?: boolean;
+        verified_at?: string;
+    };
+}
+export interface EvidenceReceiptEnvelope {
+    id: string;
+    intent_id: string;
+    receipt: Record<string, unknown>;
+    receipt_hash: string;
+    key_id: string;
+    created_at: string;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/verify.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Dependency-free receipt verification usable in Node (>=20) and modern
+ * browsers via WebCrypto. Mirrors the gateway's canonicalisation exactly:
+ * sorted keys, no whitespace, integers only, undefined members dropped.
+ */
+export declare function verifyReceiptSignature(receipt: Record<string, unknown>, publicKeyPem: string): Promise<{
+    valid: boolean;
+    reason: string | null;
+}>;

package/dist/verify.js

@@ -0,0 +1,68 @@
+/**
+ * Dependency-free receipt verification usable in Node (>=20) and modern
+ * browsers via WebCrypto. Mirrors the gateway's canonicalisation exactly:
+ * sorted keys, no whitespace, integers only, undefined members dropped.
+ */
+function canonicalJson(value) {
+    if (value === null)
+        return "null";
+    switch (typeof value) {
+        case "boolean":
+            return value ? "true" : "false";
+        case "number":
+            if (!Number.isFinite(value) || !Number.isInteger(value)) {
+                throw new Error(`canonical JSON permits only finite integers, got ${value}`);
+            }
+            return JSON.stringify(value);
+        case "string":
+            return JSON.stringify(value);
+        case "object": {
+            if (Array.isArray(value)) {
+                return `[${value.map((v) => canonicalJson(v === undefined ? null : v)).join(",")}]`;
+            }
+            const entries = Object.entries(value)
+                .filter(([, v]) => v !== undefined)
+                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+            return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`).join(",")}}`;
+        }
+        default:
+            throw new Error(`canonical JSON: unsupported type ${typeof value}`);
+    }
+}
+function pemToBytes(pem) {
+    const body = pem
+        .replace(/\\n/g, "\n")
+        .replace(/-----(BEGIN|END) PUBLIC KEY-----/g, "")
+        .replace(/\s+/g, "");
+    const binary = atob(body);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+export async function verifyReceiptSignature(receipt, publicKeyPem) {
+    const signature = receipt["signature"];
+    if (!signature?.value)
+        return { valid: false, reason: "receipt has no signature" };
+    if (signature.algorithm !== "Ed25519") {
+        return { valid: false, reason: `unsupported algorithm ${signature.algorithm}` };
+    }
+    try {
+        const { signature: _omit, ...body } = receipt;
+        const keyBytes = pemToBytes(publicKeyPem);
+        const key = await crypto.subtle.importKey("spki", keyBytes.buffer, "Ed25519", false, [
+            "verify",
+        ]);
+        const sigBinary = atob(signature.value);
+        const sigBytes = new Uint8Array(sigBinary.length);
+        for (let i = 0; i < sigBinary.length; i++)
+            sigBytes[i] = sigBinary.charCodeAt(i);
+        const payload = new TextEncoder().encode(canonicalJson(body));
+        const valid = await crypto.subtle.verify("Ed25519", key, sigBytes, payload);
+        return valid ? { valid: true, reason: null } : { valid: false, reason: "signature mismatch" };
+    }
+    catch (err) {
+        return { valid: false, reason: `verification error: ${err.message}` };
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YACtF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;iBAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9F,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,IAAI,GAAG,GAAG;SACb,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;SACrB,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;SAChD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgC,EAChC,YAAoB;IAEpB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAExB,CAAC;IACd,IAAI,CAAC,SAAS,EAAE,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACnF,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAqB,EAAE,SAAS,EAAE,KAAK,EAAE;YAClG,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAChG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACnF,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@mnd8t/sdk",
+  "version": "0.1.0",
+  "description": "TypeScript SDK for the Mandate Gateway authority API",
+  "keywords": [
+    "ai-agents",
+    "authority",
+    "payments",
+    "policy",
+    "evidence",
+    "mnd8t"
+  ],
+  "license": "MIT",
+  "homepage": "https://mnd8t.com/docs/sdk",
+  "author": "Glencorse Ltd",
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.5",
+    "typescript": "^5.7.3",
+    "vitest": "^3.0.5"
+  }
+}