@nokinc-flur/sdk 1.0.0 → 1.0.2

package/dist/index.d.cts

@@ -986,6 +986,382 @@ declare function decodePaymentRequestQR(s: string): OfflinePaymentRequest;
 declare function encodeAuthorizationQR(auth: OfflinePaymentAuthorization): string;
 declare function decodeAuthorizationQR(s: string): OfflinePaymentAuthorization;
 
+declare const PARTNER_SCOPES: readonly ["passes:write", "passes:read", "passes:redeem", "receipts:write", "receipts:read", "offline:issue", "offline:settle", "offline:read"];
+type PartnerScope = (typeof PARTNER_SCOPES)[number];
+declare const ApiCredentialPublicSchema: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    keyId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<["passes:write", "passes:read", "passes:redeem", "receipts:write", "receipts:read", "offline:issue", "offline:settle", "offline:read"]>, "many">;
+    label: z.ZodNullable<z.ZodString>;
+    createdAtMs: z.ZodNumber;
+    lastUsedAtMs: z.ZodNullable<z.ZodNumber>;
+    revokedAtMs: z.ZodNullable<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    accountId: string;
+    keyId: string;
+    scopes: ("passes:write" | "passes:read" | "passes:redeem" | "receipts:write" | "receipts:read" | "offline:issue" | "offline:settle" | "offline:read")[];
+    label: string | null;
+    createdAtMs: number;
+    lastUsedAtMs: number | null;
+    revokedAtMs: number | null;
+}, {
+    id: string;
+    accountId: string;
+    keyId: string;
+    scopes: ("passes:write" | "passes:read" | "passes:redeem" | "receipts:write" | "receipts:read" | "offline:issue" | "offline:settle" | "offline:read")[];
+    label: string | null;
+    createdAtMs: number;
+    lastUsedAtMs: number | null;
+    revokedAtMs: number | null;
+}>;
+type ApiCredentialPublic = z.infer<typeof ApiCredentialPublicSchema>;
+declare const MintedApiCredentialSchema: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    keyId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<["passes:write", "passes:read", "passes:redeem", "receipts:write", "receipts:read", "offline:issue", "offline:settle", "offline:read"]>, "many">;
+    label: z.ZodNullable<z.ZodString>;
+    createdAtMs: z.ZodNumber;
+    lastUsedAtMs: z.ZodNullable<z.ZodNumber>;
+    revokedAtMs: z.ZodNullable<z.ZodNumber>;
+} & {
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    accountId: string;
+    keyId: string;
+    scopes: ("passes:write" | "passes:read" | "passes:redeem" | "receipts:write" | "receipts:read" | "offline:issue" | "offline:settle" | "offline:read")[];
+    label: string | null;
+    createdAtMs: number;
+    lastUsedAtMs: number | null;
+    revokedAtMs: number | null;
+    secret: string;
+}, {
+    id: string;
+    accountId: string;
+    keyId: string;
+    scopes: ("passes:write" | "passes:read" | "passes:redeem" | "receipts:write" | "receipts:read" | "offline:issue" | "offline:settle" | "offline:read")[];
+    label: string | null;
+    createdAtMs: number;
+    lastUsedAtMs: number | null;
+    revokedAtMs: number | null;
+    secret: string;
+}>;
+type MintedApiCredential = z.infer<typeof MintedApiCredentialSchema>;
+type PartnerClientOptions = {
+    baseUrl: string;
+    /** Stable account id of the partner; included for observability only. */
+    accountId?: string;
+    /** Public key id from the mint response (e.g. flur_pk_...). */
+    keyId: string;
+    /** Plaintext secret from the mint response (e.g. flur_sk_...). */
+    secret: string;
+    fetchImpl?: typeof fetch;
+    /** Override clock for tests. Returns ms. */
+    nowMs?: () => number;
+    /** Override nonce generator for tests. */
+    nonce?: () => string;
+};
+type PartnerSignResult = {
+    authorization: string;
+    ts: string;
+    nonce: string;
+    bodyHash: string;
+};
+declare function signPartnerRequest(params: {
+    keyId: string;
+    secret: string;
+    method: string;
+    path: string;
+    body?: string | Uint8Array;
+    nowMs?: number;
+    nonce?: string;
+}): Promise<PartnerSignResult>;
+type FlurPartnerClient = {
+    /** Make a signed request. Resolves to parsed JSON or throws FlurApiError. */
+    request: <T = unknown>(opts: {
+        method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+        path: string;
+        body?: unknown;
+    }) => Promise<T>;
+    /** Returns a fetch-compatible function with auto-signing. */
+    fetch: typeof fetch;
+};
+declare function createFlurPartnerClient(opts: PartnerClientOptions): FlurPartnerClient;
+/**
+ * SDK helper for partner credential management endpoints. Uses an arbitrary
+ * fetchImpl (typically a session-authenticated fetch) — not the partner HMAC.
+ */
+type ApiCredentialsAdminClient = {
+    list: (accountId: string) => Promise<{
+        items: ApiCredentialPublic[];
+    }>;
+    mint: (accountId: string, input: {
+        scopes: PartnerScope[];
+        label?: string | null;
+    }) => Promise<MintedApiCredential>;
+    revoke: (accountId: string, credentialId: string) => Promise<ApiCredentialPublic>;
+};
+declare function createApiCredentialsAdminClient(opts: {
+    baseUrl: string;
+    fetchImpl?: typeof fetch;
+}): ApiCredentialsAdminClient;
+
+/**
+ * Offline settlement SDK helpers.
+ *
+ * The SDK does not "pay" offline — it produces signed `PaymentClaim`s and posts
+ * them to `/v1/offline/settlements`. The backend enforces "paid once" via
+ * UNIQUE(settlement_key) and UNIQUE(token_serial).
+ */
+
+declare const OfflineTokenSchema: z.ZodObject<{
+    tokenId: z.ZodString;
+    tokenSerial: z.ZodString;
+    issuerAccountId: z.ZodString;
+    payerUserId: z.ZodString;
+    maxAmountKobo: z.ZodNumber;
+    currency: z.ZodString;
+    issuedAtMs: z.ZodNumber;
+    expiresAtMs: z.ZodNumber;
+    issuerSig: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    currency: string;
+    issuerSig: string;
+    expiresAtMs: number;
+    tokenId: string;
+    tokenSerial: string;
+    issuerAccountId: string;
+    payerUserId: string;
+    maxAmountKobo: number;
+    issuedAtMs: number;
+}, {
+    currency: string;
+    issuerSig: string;
+    expiresAtMs: number;
+    tokenId: string;
+    tokenSerial: string;
+    issuerAccountId: string;
+    payerUserId: string;
+    maxAmountKobo: number;
+    issuedAtMs: number;
+}>;
+type OfflineToken = z.infer<typeof OfflineTokenSchema>;
+declare const PaymentClaimSchema: z.ZodObject<{
+    encounterId: z.ZodOptional<z.ZodString>;
+    tokenSerial: z.ZodString;
+    payerUserId: z.ZodString;
+    payeeUserId: z.ZodString;
+    payerNonce: z.ZodString;
+    payeeNonce: z.ZodString;
+    amountKobo: z.ZodNumber;
+    currency: z.ZodDefault<z.ZodString>;
+    occurredAtMs: z.ZodNumber;
+    completedAtMs: z.ZodOptional<z.ZodNumber>;
+    contextId: z.ZodOptional<z.ZodString>;
+    payerPubkey: z.ZodString;
+    payerSignature: z.ZodString;
+    payeePubkey: z.ZodOptional<z.ZodString>;
+    payeeSignature: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    currency: string;
+    amountKobo: number;
+    tokenSerial: string;
+    payerUserId: string;
+    payeeUserId: string;
+    payerNonce: string;
+    payeeNonce: string;
+    occurredAtMs: number;
+    payerPubkey: string;
+    payerSignature: string;
+    encounterId?: string | undefined;
+    completedAtMs?: number | undefined;
+    contextId?: string | undefined;
+    payeePubkey?: string | undefined;
+    payeeSignature?: string | undefined;
+}, {
+    amountKobo: number;
+    tokenSerial: string;
+    payerUserId: string;
+    payeeUserId: string;
+    payerNonce: string;
+    payeeNonce: string;
+    occurredAtMs: number;
+    payerPubkey: string;
+    payerSignature: string;
+    currency?: string | undefined;
+    encounterId?: string | undefined;
+    completedAtMs?: number | undefined;
+    contextId?: string | undefined;
+    payeePubkey?: string | undefined;
+    payeeSignature?: string | undefined;
+}>;
+type PaymentClaim = z.infer<typeof PaymentClaimSchema>;
+declare const SettlementSchema: z.ZodObject<{
+    settlementId: z.ZodString;
+    settlementKey: z.ZodString;
+    encounterId: z.ZodString;
+    issuerAccountId: z.ZodString;
+    tokenSerial: z.ZodString;
+    payerUserId: z.ZodString;
+    payeeUserId: z.ZodString;
+    amountKobo: z.ZodNumber;
+    currency: z.ZodString;
+    receiptId: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<["SETTLED", "REVIEW", "REJECTED"]>;
+    issuerSig: z.ZodString;
+    createdAtMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    status: "SETTLED" | "REVIEW" | "REJECTED";
+    currency: string;
+    issuerSig: string;
+    amountKobo: number;
+    createdAtMs: number;
+    tokenSerial: string;
+    issuerAccountId: string;
+    payerUserId: string;
+    encounterId: string;
+    payeeUserId: string;
+    settlementId: string;
+    settlementKey: string;
+    receiptId: string | null;
+}, {
+    status: "SETTLED" | "REVIEW" | "REJECTED";
+    currency: string;
+    issuerSig: string;
+    amountKobo: number;
+    createdAtMs: number;
+    tokenSerial: string;
+    issuerAccountId: string;
+    payerUserId: string;
+    encounterId: string;
+    payeeUserId: string;
+    settlementId: string;
+    settlementKey: string;
+    receiptId: string | null;
+}>;
+type Settlement = z.infer<typeof SettlementSchema>;
+declare const SettleResponseSchema: z.ZodObject<{
+    settlement: z.ZodObject<{
+        settlementId: z.ZodString;
+        settlementKey: z.ZodString;
+        encounterId: z.ZodString;
+        issuerAccountId: z.ZodString;
+        tokenSerial: z.ZodString;
+        payerUserId: z.ZodString;
+        payeeUserId: z.ZodString;
+        amountKobo: z.ZodNumber;
+        currency: z.ZodString;
+        receiptId: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<["SETTLED", "REVIEW", "REJECTED"]>;
+        issuerSig: z.ZodString;
+        createdAtMs: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        status: "SETTLED" | "REVIEW" | "REJECTED";
+        currency: string;
+        issuerSig: string;
+        amountKobo: number;
+        createdAtMs: number;
+        tokenSerial: string;
+        issuerAccountId: string;
+        payerUserId: string;
+        encounterId: string;
+        payeeUserId: string;
+        settlementId: string;
+        settlementKey: string;
+        receiptId: string | null;
+    }, {
+        status: "SETTLED" | "REVIEW" | "REJECTED";
+        currency: string;
+        issuerSig: string;
+        amountKobo: number;
+        createdAtMs: number;
+        tokenSerial: string;
+        issuerAccountId: string;
+        payerUserId: string;
+        encounterId: string;
+        payeeUserId: string;
+        settlementId: string;
+        settlementKey: string;
+        receiptId: string | null;
+    }>;
+    encounterId: z.ZodString;
+    replayed: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    encounterId: string;
+    settlement: {
+        status: "SETTLED" | "REVIEW" | "REJECTED";
+        currency: string;
+        issuerSig: string;
+        amountKobo: number;
+        createdAtMs: number;
+        tokenSerial: string;
+        issuerAccountId: string;
+        payerUserId: string;
+        encounterId: string;
+        payeeUserId: string;
+        settlementId: string;
+        settlementKey: string;
+        receiptId: string | null;
+    };
+    replayed: boolean;
+}, {
+    encounterId: string;
+    settlement: {
+        status: "SETTLED" | "REVIEW" | "REJECTED";
+        currency: string;
+        issuerSig: string;
+        amountKobo: number;
+        createdAtMs: number;
+        tokenSerial: string;
+        issuerAccountId: string;
+        payerUserId: string;
+        encounterId: string;
+        payeeUserId: string;
+        settlementId: string;
+        settlementKey: string;
+        receiptId: string | null;
+    };
+    replayed: boolean;
+}>;
+type SettleResponse = z.infer<typeof SettleResponseSchema>;
+/**
+ * Compute the deterministic encounterId. Both parties produce the same value;
+ * the backend enforces it.
+ */
+declare function computeEncounterId(input: {
+    payerUserId: string;
+    payeeUserId: string;
+    payerNonce: string;
+    payeeNonce: string;
+    tokenSerial: string;
+}): Promise<string>;
+type IssueOfflineTokenInput = {
+    /** Optional client-supplied serial (must be unique). */
+    tokenSerial?: string;
+    payerUserId: string;
+    maxAmountKobo: number;
+    currency?: string;
+    ttlMs: number;
+};
+type FlurOfflineSettlementsClient = {
+    /** Partner-only: pre-issue a bounded offline settlement token. */
+    issueOfflineToken: (input: IssueOfflineTokenInput) => Promise<OfflineToken>;
+    /** Get a token by serial (partner-scoped). */
+    getOfflineToken: (tokenSerial: string) => Promise<OfflineToken>;
+    /** Atomically settle a signed payment claim (idempotent). */
+    settle: (claim: PaymentClaim) => Promise<SettleResponse>;
+    /** Fetch a stored settlement by id or settlement_key. */
+    getSettlement: (idOrKey: string) => Promise<Settlement>;
+    /** List queued conflict/review items (partner-scoped). */
+    listConflicts: () => Promise<{
+        items: unknown[];
+    }>;
+};
+declare function createOfflineSettlementsClient(partner: FlurPartnerClient): FlurOfflineSettlementsClient;
+
 declare function bodySha256Hex(body: string): string;
 declare function canonicalRequestString(input: {
     method: string;
@@ -1067,10 +1443,10 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     validUntilMs: number;
     counterSeed: number;
     issuerSig: string;
+    issuedAtMs: number;
     passId: string;
     kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
     issuerId: string;
-    issuedAtMs: number;
     state: "issued" | "active" | "redeemed" | "expired" | "revoked";
     metadata: Record<string, string | number | boolean | null>;
     holderDeviceId: string;
@@ -1086,10 +1462,10 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     validUntilMs: number;
     counterSeed: number;
     issuerSig: string;
+    issuedAtMs: number;
     passId: string;
     kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
     issuerId: string;
-    issuedAtMs: number;
     state: "issued" | "active" | "redeemed" | "expired" | "revoked";
     metadata: Record<string, string | number | boolean | null>;
     holderDeviceId: string;
@@ -1105,10 +1481,10 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     validUntilMs: number;
     counterSeed: number;
     issuerSig: string;
+    issuedAtMs: number;
     passId: string;
     kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
     issuerId: string;
-    issuedAtMs: number;
     state: "issued" | "active" | "redeemed" | "expired" | "revoked";
     metadata: Record<string, string | number | boolean | null>;
     holderDeviceId: string;
@@ -1124,10 +1500,10 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     validUntilMs: number;
     counterSeed: number;
     issuerSig: string;
+    issuedAtMs: number;
     passId: string;
     kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
     issuerId: string;
-    issuedAtMs: number;
     state: "issued" | "active" | "redeemed" | "expired" | "revoked";
     metadata: Record<string, string | number | boolean | null>;
     holderDeviceId: string;
@@ -1194,10 +1570,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1213,10 +1589,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1232,10 +1608,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1251,10 +1627,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1283,10 +1659,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1310,10 +1686,10 @@ declare const RedemptionSchema: z.ZodObject<{
         validUntilMs: number;
         counterSeed: number;
         issuerSig: string;
+        issuedAtMs: number;
         passId: string;
         kind: "ride-ticket" | "transit-pass" | "event-ticket" | "voucher" | "loyalty" | "receipt-link";
         issuerId: string;
-        issuedAtMs: number;
         state: "issued" | "active" | "redeemed" | "expired" | "revoked";
         metadata: Record<string, string | number | boolean | null>;
         holderDeviceId: string;
@@ -1355,59 +1731,6 @@ declare function signRedemption(unsigned: UnsignedRedemption, holderDevicePrivat
  */
 declare function verifyRedemption(r: Redemption, issuerPublicKey: Uint8Array): boolean;
 
-type PassesClientOptions = {
-    baseUrl: string;
-    /** Pre-configured fetch (typically `createHmacFetch(...)`). Falls back to global fetch. */
-    fetchImpl?: typeof fetch;
-};
-type IssuePassInput = {
-    /** Device this pass is bound to. Required (BE-19). */
-    holderDeviceId: string;
-    /** 32-byte hex Ed25519 public key of the bound device. Required (BE-19). */
-    holderDevicePubkey: string;
-    /** Pass kind (server may default for templated flows). */
-    kind: PassKind;
-    /** Optional fixed amount for monetary passes (kobo). */
-    amountKobo?: number;
-    /** Optional cumulative spend cap in kobo across all redemptions. */
-    cumulativeCapKobo?: number;
-    validFromMs: number;
-    validUntilMs: number;
-    metadata?: PassMetadata;
-    /** Optional template grouping id (server may emit one if omitted). */
-    templateId?: string;
-    /** Optional human-facing holder identity. */
-    holderUserId?: string;
-    /** Optional client-supplied id for idempotency / retries. */
-    passId?: string;
-};
-type ListPassesInput = {
-    holderDeviceId?: string;
-    holderUserId?: string;
-    state?: PassState;
-    kind?: PassKind;
-    templateId?: string;
-    limit?: number;
-    cursor?: string;
-};
-type ListPassesResponse = {
-    items: Pass[];
-    nextCursor: string | null;
-};
-type RevokePassInput = {
-    reason: string;
-};
-type PassesClient = {
-    issuePass: (input: IssuePassInput) => Promise<Pass>;
-    listPasses: (input: ListPassesInput) => Promise<ListPassesResponse>;
-    getPass: (passId: string) => Promise<Pass>;
-    redeemPass: (passId: string, redemption: Redemption) => Promise<Pass>;
-    revokePass: (passId: string, input: RevokePassInput) => Promise<Pass>;
-    /** Local Ed25519 verification of a pass envelope under the supplied issuer public key. */
-    verifyPass: (pass: Pass, issuerPublicKey: Uint8Array) => boolean;
-};
-declare function createPassesClient(opts: PassesClientOptions): PassesClient;
-
 declare const RECEIPT_CHANNELS: readonly ["cash", "pass"];
 type ReceiptChannel = (typeof RECEIPT_CHANNELS)[number];
 /** @deprecated use {@link RECEIPT_CHANNELS}. Will be removed before 1.0. */
@@ -1438,12 +1761,12 @@ declare const ReceiptSchema: z.ZodEffects<z.ZodObject<{
     currency: string;
     issuerSig: string;
     amountKobo: number;
-    issuerId: string;
+    payerUserId: string;
     issuedAtMs: number;
+    payeeUserId: string;
     receiptId: string;
+    issuerId: string;
     channel: "pass" | "cash";
-    payerUserId: string;
-    payeeUserId: string;
     payload: Record<string, string | number | boolean | null>;
     intentId?: string | undefined;
     passRedemptionId?: string | undefined;
@@ -1451,12 +1774,12 @@ declare const ReceiptSchema: z.ZodEffects<z.ZodObject<{
     currency: string;
     issuerSig: string;
     amountKobo: number;
-    issuerId: string;
+    payerUserId: string;
     issuedAtMs: number;
+    payeeUserId: string;
     receiptId: string;
+    issuerId: string;
     channel: "pass" | "cash";
-    payerUserId: string;
-    payeeUserId: string;
     payload: Record<string, string | number | boolean | null>;
     intentId?: string | undefined;
     passRedemptionId?: string | undefined;
@@ -1464,12 +1787,12 @@ declare const ReceiptSchema: z.ZodEffects<z.ZodObject<{
     currency: string;
     issuerSig: string;
     amountKobo: number;
-    issuerId: string;
+    payerUserId: string;
     issuedAtMs: number;
+    payeeUserId: string;
     receiptId: string;
+    issuerId: string;
     channel: "pass" | "cash";
-    payerUserId: string;
-    payeeUserId: string;
     payload: Record<string, string | number | boolean | null>;
     intentId?: string | undefined;
     passRedemptionId?: string | undefined;
@@ -1477,12 +1800,12 @@ declare const ReceiptSchema: z.ZodEffects<z.ZodObject<{
     currency: string;
     issuerSig: string;
     amountKobo: number;
-    issuerId: string;
+    payerUserId: string;
     issuedAtMs: number;
+    payeeUserId: string;
     receiptId: string;
+    issuerId: string;
     channel: "pass" | "cash";
-    payerUserId: string;
-    payeeUserId: string;
     payload: Record<string, string | number | boolean | null>;
     intentId?: string | undefined;
     passRedemptionId?: string | undefined;
@@ -1506,6 +1829,75 @@ declare function buildReceipt(input: BuildReceiptInput): UnsignedReceipt;
 declare function signReceipt(unsigned: UnsignedReceipt, issuerPrivateKey: Uint8Array): Receipt;
 declare function verifyReceipt(r: Receipt, issuerPublicKey: Uint8Array): boolean;
 
+type PassesClientOptions = {
+    baseUrl: string;
+    /** Pre-configured fetch (typically `createHmacFetch(...)`). Falls back to global fetch. */
+    fetchImpl?: typeof fetch;
+};
+type IssuePassInput = {
+    /** Device this pass is bound to. Required (BE-19). */
+    holderDeviceId: string;
+    /** 32-byte hex Ed25519 public key of the bound device. Required (BE-19). */
+    holderDevicePubkey: string;
+    /** Pass kind (server may default for templated flows). */
+    kind: PassKind;
+    /** Optional fixed amount for monetary passes (kobo). */
+    amountKobo?: number;
+    /** Optional cumulative spend cap in kobo across all redemptions. */
+    cumulativeCapKobo?: number;
+    validFromMs: number;
+    validUntilMs: number;
+    metadata?: PassMetadata;
+    /** Optional template grouping id (server may emit one if omitted). */
+    templateId?: string;
+    /** Optional human-facing holder identity. */
+    holderUserId?: string;
+    /** Optional client-supplied id for idempotency / retries. */
+    passId?: string;
+};
+type ListPassesInput = {
+    holderDeviceId?: string;
+    holderUserId?: string;
+    state?: PassState;
+    kind?: PassKind;
+    templateId?: string;
+    limit?: number;
+    cursor?: string;
+};
+type ListPassesResponse = {
+    items: Pass[];
+    nextCursor: string | null;
+};
+type RevokePassInput = {
+    reason: string;
+};
+type RedeemPassResponse = {
+    pass: Pass;
+    redemptionId: string;
+};
+type AtomicRedeemReceiptInput = {
+    payeeUserId: string;
+    payload?: ReceiptPayload;
+    receiptId?: string;
+};
+type AtomicRedeemResponse = {
+    pass: Pass;
+    redemptionId: string;
+    receipt: Receipt;
+};
+type PassesClient = {
+    issuePass: (input: IssuePassInput) => Promise<Pass>;
+    listPasses: (input: ListPassesInput) => Promise<ListPassesResponse>;
+    getPass: (passId: string) => Promise<Pass>;
+    redeemPassDetailed: (passId: string, redemption: Redemption) => Promise<RedeemPassResponse>;
+    redeemPass: (passId: string, redemption: Redemption) => Promise<Pass>;
+    redeemPassWithReceipt: (passId: string, redemption: Redemption, receipt: AtomicRedeemReceiptInput) => Promise<AtomicRedeemResponse>;
+    revokePass: (passId: string, input: RevokePassInput) => Promise<Pass>;
+    /** Local Ed25519 verification of a pass envelope under the supplied issuer public key. */
+    verifyPass: (pass: Pass, issuerPublicKey: Uint8Array) => boolean;
+};
+declare function createPassesClient(opts: PassesClientOptions): PassesClient;
+
 type ReceiptsClientOptions = {
     baseUrl: string;
     fetchImpl?: typeof fetch;
@@ -1590,4 +1982,76 @@ type FlurHandle = CashNamespace & {
 };
 declare function init(opts: FlurInitOptions): FlurHandle;
 
-export { ADDITIONAL_DATA_SUBFIELD, type AccountActivityItem, type AccountSummaryResponse, type AdditionalData, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, type CashNamespace, type CreatePayLinkResponse, type CreateTransferOptions, type DeviceTrustState, type Ed25519KeyPair, FIELD, FlurApiError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurPaymentEvent, FlurReplayError, type HmacFetchOptions, type IssuePassInput, type IssueReceiptInput, type ListPassesInput, type ListPassesResponse, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, type MerchantAccountInfo, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, type OfflinePaymentAuthorization, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, POINT_OF_INITIATION, type ParsedNQR, type Pass, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PinSetInput, type PinVerifyInput, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolvePayLinkResponse, type RevokePassInput, type RoutingHint, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, bodySha256Hex, buildAuthorization, buildOAC, buildPass, buildPaymentRequest, buildReceipt, buildRedemption, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, constantTimeEqual, crc16ccitt, crc16ccittHex, createHmacFetch, createPassesClient, createReceiptsClient, decodeAuthorizationQR, decodeBase45, decodePaymentRequestQR, encodeAuthorizationQR, encodeBase45, encodeNQR, encodePaymentRequestQR, formatAmount, generateDynamicQR, generateKeyPair, generateStaticQR, init, isPassWithinValidity, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, publicKeyFromPrivate, readTLV, routingHint, sign, signAuthorization, signCanonical, signOAC, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verify, verifyAuthorization, verifyCanonical, verifyOAC, verifyPass, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };
+declare const ACCOUNT_TYPES: readonly ["personal", "business", "partner"];
+type AccountType = (typeof ACCOUNT_TYPES)[number];
+declare const ACCOUNT_STATUSES: readonly ["active", "suspended", "closed"];
+type AccountStatus = (typeof ACCOUNT_STATUSES)[number];
+declare const MEMBERSHIP_ROLES: readonly ["owner", "admin", "driver", "staff"];
+type MembershipRole = (typeof MEMBERSHIP_ROLES)[number];
+declare const AccountSchema: z.ZodObject<{
+    accountId: z.ZodString;
+    type: z.ZodEnum<["personal", "business", "partner"]>;
+    displayName: z.ZodString;
+    status: z.ZodEnum<["active", "suspended", "closed"]>;
+    ownerUserId: z.ZodNullable<z.ZodString>;
+    createdAtMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    type: "personal" | "business" | "partner";
+    status: "active" | "suspended" | "closed";
+    displayName: string;
+    accountId: string;
+    createdAtMs: number;
+    ownerUserId: string | null;
+}, {
+    type: "personal" | "business" | "partner";
+    status: "active" | "suspended" | "closed";
+    displayName: string;
+    accountId: string;
+    createdAtMs: number;
+    ownerUserId: string | null;
+}>;
+type Account = z.infer<typeof AccountSchema>;
+declare const AccountMembershipSchema: z.ZodObject<{
+    accountId: z.ZodString;
+    userId: z.ZodString;
+    role: z.ZodEnum<["owner", "admin", "driver", "staff"]>;
+    createdAtMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    userId: string;
+    accountId: string;
+    createdAtMs: number;
+    role: "owner" | "admin" | "driver" | "staff";
+}, {
+    userId: string;
+    accountId: string;
+    createdAtMs: number;
+    role: "owner" | "admin" | "driver" | "staff";
+}>;
+type AccountMembership = z.infer<typeof AccountMembershipSchema>;
+type AccountsClientOptions = {
+    baseUrl: string;
+    /** Pre-configured fetch (e.g. with a session bearer or partner HMAC). */
+    fetchImpl?: typeof fetch;
+};
+type CreateBusinessAccountInput = {
+    displayName: string;
+    type?: 'business' | 'partner';
+};
+type AddMemberInput = {
+    userId: string;
+    role: MembershipRole;
+};
+type AccountsClient = {
+    listMyAccounts: () => Promise<{
+        items: Account[];
+    }>;
+    getAccount: (accountId: string) => Promise<Account>;
+    listMembers: (accountId: string) => Promise<{
+        items: AccountMembership[];
+    }>;
+    createBusinessAccount: (input: CreateBusinessAccountInput) => Promise<Account>;
+    addMember: (accountId: string, input: AddMemberInput) => Promise<AccountMembership>;
+};
+declare function createAccountsClient(opts: AccountsClientOptions): AccountsClient;
+
+export { ACCOUNT_STATUSES, ACCOUNT_TYPES, ADDITIONAL_DATA_SUBFIELD, type Account, type AccountActivityItem, type AccountMembership, AccountMembershipSchema, AccountSchema, type AccountStatus, type AccountSummaryResponse, type AccountType, type AccountsClient, type AccountsClientOptions, type AddMemberInput, type AdditionalData, type ApiCredentialPublic, ApiCredentialPublicSchema, type ApiCredentialsAdminClient, type AtomicRedeemReceiptInput, type AtomicRedeemResponse, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, type CashNamespace, type CreateBusinessAccountInput, type CreatePayLinkResponse, type CreateTransferOptions, type DeviceTrustState, type Ed25519KeyPair, FIELD, FlurApiError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurOfflineSettlementsClient, type FlurPartnerClient, type FlurPaymentEvent, FlurReplayError, type HmacFetchOptions, type IssueOfflineTokenInput, type IssuePassInput, type IssueReceiptInput, type ListPassesInput, type ListPassesResponse, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, MEMBERSHIP_ROLES, type MembershipRole, type MerchantAccountInfo, type MintedApiCredential, MintedApiCredentialSchema, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, type OfflinePaymentAuthorization, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OfflineToken, OfflineTokenSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, PARTNER_SCOPES, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, POINT_OF_INITIATION, type ParsedNQR, type PartnerClientOptions, type PartnerScope, type PartnerSignResult, type Pass, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PaymentClaim, PaymentClaimSchema, type PinSetInput, type PinVerifyInput, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type RedeemPassResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolvePayLinkResponse, type RevokePassInput, type RoutingHint, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SettleResponse, SettleResponseSchema, type Settlement, SettlementSchema, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, bodySha256Hex, buildAuthorization, buildOAC, buildPass, buildPaymentRequest, buildReceipt, buildRedemption, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, computeEncounterId, constantTimeEqual, crc16ccitt, crc16ccittHex, createAccountsClient, createApiCredentialsAdminClient, createFlurPartnerClient, createHmacFetch, createOfflineSettlementsClient, createPassesClient, createReceiptsClient, decodeAuthorizationQR, decodeBase45, decodePaymentRequestQR, encodeAuthorizationQR, encodeBase45, encodeNQR, encodePaymentRequestQR, formatAmount, generateDynamicQR, generateKeyPair, generateStaticQR, init, isPassWithinValidity, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, publicKeyFromPrivate, readTLV, routingHint, sign, signAuthorization, signCanonical, signOAC, signPartnerRequest, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verify, verifyAuthorization, verifyCanonical, verifyOAC, verifyPass, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };