@nokinc-flur/sdk 1.1.2 → 1.1.4

package/dist/index.d.ts

@@ -1245,20 +1245,19 @@ declare function canonicalJSONBytes(value: unknown): Uint8Array;
  */
 declare function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean;
 
-type Ed25519KeyPair = {
-    privateKey: Uint8Array;
-    publicKey: Uint8Array;
-};
-declare function generateKeyPair(): Ed25519KeyPair;
-declare function publicKeyFromPrivate(privateKey: Uint8Array): Uint8Array;
-declare function sign(message: Uint8Array, privateKey: Uint8Array): Uint8Array;
-declare function verify(message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
 /**
- * Sign a value by canonicalizing it to JSON bytes first.
- * Use this for any object payload that must round-trip across devices.
+ * Offline Authorization Certificate (OAC) — P-256 edition (Stage 2c).
+ *
+ * Previous wire format used raw 32-byte Ed25519 hex device keys and 64-byte
+ * hex Ed25519 signatures. The cutover keeps the JSON field names but moves
+ * to base64:
+ *  - `devicePublicKey`  : SubjectPublicKeyInfo DER, base64 (P-256, ~124 chars).
+ *  - `issuerSig`        : ASN.1 DER ECDSA(SHA-256) signature, base64 (~96 chars).
+ *
+ * `issuerPrivateKey` is a raw 32-byte P-256 scalar (Uint8Array) — same shape as
+ * the SDK's other P-256 helpers. `issuerPublicKey` (for verification) is now a
+ * base64 SPKI DER string, matching the rest of the migrated SDK surface.
  */
-declare function signCanonical(value: unknown, privateKey: Uint8Array): Uint8Array;
-declare function verifyCanonical(value: unknown, signature: Uint8Array, publicKey: Uint8Array): boolean;
 
 declare const OAC_DEFAULT_PER_TX_KOBO = 500000;
 declare const OAC_DEFAULT_CUMULATIVE_KOBO = 2000000;
@@ -1266,6 +1265,7 @@ declare const OAC_DEFAULT_VALIDITY_MS: number;
 declare const OACSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     userId: z.ZodString;
     deviceId: z.ZodString;
+    /** SubjectPublicKeyInfo DER, base64 (P-256). */
     devicePublicKey: z.ZodString;
     perTxCapKobo: z.ZodNumber;
     cumulativeCapKobo: z.ZodNumber;
@@ -1273,6 +1273,7 @@ declare const OACSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     validUntilMs: z.ZodNumber;
     counterSeed: z.ZodNumber;
     nonce: z.ZodString;
+    /** ASN.1 DER ECDSA(SHA-256) signature, base64. */
     issuerSig: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     userId: string;
@@ -1346,7 +1347,8 @@ type UnsignedOAC = Omit<OAC, 'issuerSig'>;
 declare function buildOAC(input: {
     userId: string;
     deviceId: string;
-    devicePublicKey: Uint8Array | string;
+    /** SPKI DER base64 string (P-256). */
+    devicePublicKey: string;
     perTxCapKobo?: number;
     cumulativeCapKobo?: number;
     validFromMs: number;
@@ -1355,11 +1357,25 @@ declare function buildOAC(input: {
     nonce: string;
 }): UnsignedOAC;
 declare function signOAC(unsigned: UnsignedOAC, issuerPrivateKey: Uint8Array): OAC;
-declare function verifyOAC(oac: OAC, issuerPublicKey: Uint8Array): boolean;
+declare function verifyOAC(oac: OAC, issuerPublicKeySpkiB64: string): boolean;
 
 declare function encodeBase45(bytes: Uint8Array): string;
 declare function decodeBase45(s: string): Uint8Array;
 
+/**
+ * Offline payment messages — P-256 edition (Stage 2c).
+ *
+ * Wire-shape change vs. the previous Ed25519 hex format:
+ *  - `merchantSig`, `payerSig` : ASN.1 DER ECDSA(SHA-256) signature, base64.
+ *  - device signing keys are passed as raw 32-byte P-256 scalars (Uint8Array);
+ *    issuer-side verification arguments use SPKI DER base64 strings.
+ *
+ * Note: `verifyPaymentRequest` and `verifyAuthorization` take the *issuer*
+ * public key (SPKI b64) — they re-verify the merchant/payer OAC against the
+ * issuer, then verify the merchant/payer signature against the device key
+ * embedded in their OAC.
+ */
+
 declare const OfflinePaymentRequestSchema: z.ZodObject<{
     reference: z.ZodString;
     amountKobo: z.ZodNumber;
@@ -1755,14 +1771,14 @@ declare function buildPaymentRequest(input: {
     expiresAtMs: number;
 }): UnsignedOfflinePaymentRequest;
 declare function signPaymentRequest(unsigned: UnsignedOfflinePaymentRequest, merchantDevicePrivateKey: Uint8Array): OfflinePaymentRequest;
-declare function verifyPaymentRequest(req: OfflinePaymentRequest, issuerPublicKey: Uint8Array): boolean;
+declare function verifyPaymentRequest(req: OfflinePaymentRequest, issuerPublicKeySpkiB64: string): boolean;
 declare function buildAuthorization(input: {
     request: OfflinePaymentRequest;
     payerOAC: OAC;
     payerCounter: number;
 }): UnsignedOfflinePaymentAuthorization;
 declare function signAuthorization(unsigned: UnsignedOfflinePaymentAuthorization, payerDevicePrivateKey: Uint8Array): OfflinePaymentAuthorization;
-declare function verifyAuthorization(auth: OfflinePaymentAuthorization, issuerPublicKey: Uint8Array): boolean;
+declare function verifyAuthorization(auth: OfflinePaymentAuthorization, issuerPublicKeySpkiB64: string): boolean;
 declare function encodePaymentRequestQR(req: OfflinePaymentRequest): string;
 declare function decodePaymentRequestQR(s: string): OfflinePaymentRequest;
 declare function encodeAuthorizationQR(auth: OfflinePaymentAuthorization): string;
@@ -2208,8 +2224,8 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     nonce: z.ZodString;
     /** Device id this pass is bound to (FK to backend `device_keys`). */
     holderDeviceId: z.ZodString;
-    /** 32-byte hex Ed25519 public key of the bound device. The redemption signature
-     *  is verified against this key — it is the security-critical binding. */
+    /** SubjectPublicKeyInfo DER (P-256) of the bound device, base64. The redemption
+     *  signature is verified against this key — it is the security-critical binding. */
     holderDevicePubkey: z.ZodString;
     /** Optional fixed amount for monetary passes (vouchers, gift cards) in kobo. */
     amountKobo: z.ZodOptional<z.ZodNumber>;
@@ -2219,6 +2235,7 @@ declare const PassSchema: z.ZodEffects<z.ZodObject<{
     counterSeed: z.ZodNumber;
     /** Optional cumulative spend cap in kobo across all redemptions of this pass. */
     cumulativeCapKobo: z.ZodOptional<z.ZodNumber>;
+    /** ASN.1 DER ECDSA P-256 signature, base64. */
     issuerSig: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     nonce: string;
@@ -2320,7 +2337,7 @@ type BuildPassInput = {
 };
 declare function buildPass(input: BuildPassInput): UnsignedPass;
 declare function signPass(unsigned: UnsignedPass, issuerPrivateKey: Uint8Array): Pass;
-declare function verifyPass(pass: Pass, issuerPublicKey: Uint8Array): boolean;
+declare function verifyPass(pass: Pass, issuerPublicKeySpkiB64: string): boolean;
 /**
  * Validity window check is done separately from signature verification so callers can
  * decide their clock-skew tolerance.
@@ -2432,6 +2449,7 @@ declare const RedemptionSchema: z.ZodObject<{
     /** Amount being redeemed in kobo (0 for non-monetary passes like ride tickets). */
     amountKobo: z.ZodNumber;
     nonce: z.ZodString;
+    /** ASN.1 DER ECDSA P-256 signature over canonicalJSONBytes(unsigned), base64. */
     holderSig: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     nonce: string;
@@ -2513,7 +2531,7 @@ declare function signRedemption(unsigned: UnsignedRedemption, holderDevicePrivat
  *  3. The redemption is signed by that bound device key.
  *  4. The redemption counter is strictly greater than pass.counterSeed.
  */
-declare function verifyRedemption(r: Redemption, issuerPublicKey: Uint8Array): boolean;
+declare function verifyRedemption(r: Redemption, issuerPublicKeySpkiB64: string): boolean;
 
 declare const RECEIPT_CHANNELS: readonly ["cash", "pass"];
 type ReceiptChannel = (typeof RECEIPT_CHANNELS)[number];
@@ -2540,6 +2558,7 @@ declare const ReceiptSchema: z.ZodEffects<z.ZodObject<{
     issuedAtMs: z.ZodNumber;
     issuerId: z.ZodString;
     payload: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+    /** ASN.1 DER ECDSA P-256 signature, base64. */
     issuerSig: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     currency: string;
@@ -2611,7 +2630,7 @@ type BuildReceiptInput = {
 };
 declare function buildReceipt(input: BuildReceiptInput): UnsignedReceipt;
 declare function signReceipt(unsigned: UnsignedReceipt, issuerPrivateKey: Uint8Array): Receipt;
-declare function verifyReceipt(r: Receipt, issuerPublicKey: Uint8Array): boolean;
+declare function verifyReceipt(r: Receipt, issuerPublicKeySpkiB64: string): boolean;
 
 type PassesClientOptions = {
     baseUrl: string;
@@ -2621,7 +2640,7 @@ type PassesClientOptions = {
 type IssuePassInput = {
     /** Device this pass is bound to. Required (BE-19). */
     holderDeviceId: string;
-    /** 32-byte hex Ed25519 public key of the bound device. Required (BE-19). */
+    /** P-256 SubjectPublicKeyInfo DER public key (base64) of the bound device. Required (BE-19). */
     holderDevicePubkey: string;
     /** Pass kind (server may default for templated flows). */
     kind: PassKind;
@@ -2677,8 +2696,8 @@ type PassesClient = {
     redeemPass: (passId: string, redemption: Redemption) => Promise<Pass>;
     redeemPassWithReceipt: (passId: string, redemption: Redemption, receipt: AtomicRedeemReceiptInput) => Promise<AtomicRedeemResponse>;
     revokePass: (passId: string, input: RevokePassInput) => Promise<Pass>;
-    /** Local Ed25519 verification of a pass envelope under the supplied issuer public key. */
-    verifyPass: (pass: Pass, issuerPublicKey: Uint8Array) => boolean;
+    /** Local P-256 ECDSA verification of a pass envelope under the supplied issuer SPKI base64 key. */
+    verifyPass: (pass: Pass, issuerPublicKeySpkiB64: string) => boolean;
 };
 declare function createPassesClient(opts: PassesClientOptions): PassesClient;
 
@@ -2722,8 +2741,8 @@ type ReceiptsClient = {
     /** Look up a pass-channel receipt by its originating passRedemptionId. */
     getByPassRedemptionId: (passRedemptionId: string) => Promise<Receipt>;
     listForUser: (input: ListReceiptsInput) => Promise<ListReceiptsResponse>;
-    /** Local Ed25519 verification of a receipt envelope under the supplied issuer key. */
-    verifyReceipt: (receipt: Receipt, issuerPublicKey: Uint8Array) => boolean;
+    /** Local P-256 ECDSA verification of a receipt envelope under the supplied issuer SPKI base64 key. */
+    verifyReceipt: (receipt: Receipt, issuerPublicKeySpkiB64: string) => boolean;
 };
 declare function createReceiptsClient(opts: ReceiptsClientOptions): ReceiptsClient;
 
@@ -2841,14 +2860,14 @@ type AccountsClient = {
 declare function createAccountsClient(opts: AccountsClientOptions): AccountsClient;
 
 /**
- * Consumer-side offline payments SDK client.
+ * Consumer-side Offline Collect SDK client.
  *
  * Wraps the backend `/v1/me/offline/*` routes (session-bearer auth ONLY —
- * NOT partner HMAC). These power the Flur mobile app's offline-pay flow:
+ * NOT partner HMAC). These power the payer authorization side of Flur Offline Collect:
  *   - register/list/revoke device signing keys
- *   - enable / refresh / disable offline mode (real hold + OAC issuance)
+ *   - provision / refresh / release a hold-backed offline allowance
  *   - read offline status (current hold + active OAC)
- *   - submit a signed offline payment claim for settlement
+ *   - submit a signed offline collection claim for settlement
  *
  * Schemas mirror `flur-backend/src/offline-consumer/types.ts`.
  */
@@ -2864,11 +2883,65 @@ declare const RegisterDeviceKeyInputSchema: z.ZodObject<{
     publicKeyHex: string;
 }>;
 type RegisterDeviceKeyInput = z.infer<typeof RegisterDeviceKeyInputSchema>;
+declare const AttestationSecurityLevelSchema: z.ZodEnum<["STRONGBOX", "TEE", "SECURE_ENCLAVE", "SOFTWARE"]>;
+type AttestationSecurityLevel = z.infer<typeof AttestationSecurityLevelSchema>;
+declare const DeviceKeyAlgSchema: z.ZodLiteral<"p256">;
+type DeviceKeyAlg = z.infer<typeof DeviceKeyAlgSchema>;
+declare const RegisterDeviceKeyP256InputSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+    /** P-256 SubjectPublicKeyInfo DER, base64. */
+    publicKeySpkiB64: z.ZodString;
+    /** Base64 of the server-issued enrollment challenge string. */
+    challengeB64: z.ZodString;
+    /** iOS App Attest payload or Android X.509 Key Attestation chain. */
+    attestationChainB64: z.ZodArray<z.ZodString, "many">;
+    securityLevel: z.ZodEnum<["STRONGBOX", "TEE", "SECURE_ENCLAVE", "SOFTWARE"]>;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+    publicKeySpkiB64: string;
+    challengeB64: string;
+    attestationChainB64: string[];
+    securityLevel: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE";
+}, {
+    deviceId: string;
+    publicKeySpkiB64: string;
+    challengeB64: string;
+    attestationChainB64: string[];
+    securityLevel: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE";
+}>;
+type RegisterDeviceKeyP256Input = z.infer<typeof RegisterDeviceKeyP256InputSchema>;
+declare const P256EnrollmentChallengeInputSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+}, {
+    deviceId: string;
+}>;
+type P256EnrollmentChallengeInput = z.infer<typeof P256EnrollmentChallengeInputSchema>;
+declare const P256EnrollmentChallengeResultSchema: z.ZodObject<{
+    challenge: z.ZodString;
+    expiresAtMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    expiresAtMs: number;
+    challenge: string;
+}, {
+    expiresAtMs: number;
+    challenge: string;
+}>;
+type P256EnrollmentChallengeResult = z.infer<typeof P256EnrollmentChallengeResultSchema>;
 declare const DeviceKeyRecordSchema: z.ZodObject<{
     id: z.ZodString;
     userId: z.ZodString;
     deviceId: z.ZodString;
-    publicKeyHex: z.ZodString;
+    /** Always 'p256' on the consumer offline rail. Field retained for forward-compat. */
+    alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+    /** Legacy ed25519 hex key. Always null on new records (kept for back-compat reads). */
+    publicKeyHex: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    /** P-256 SubjectPublicKeyInfo DER, base64. Required for new records. */
+    publicKeySpkiB64: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    securityLevel: z.ZodDefault<z.ZodNullable<z.ZodEnum<["STRONGBOX", "TEE", "SECURE_ENCLAVE", "SOFTWARE"]>>>;
+    hardwareBacked: z.ZodDefault<z.ZodBoolean>;
+    attestedAtMs: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
     createdAtMs: z.ZodNumber;
     revokedAtMs: z.ZodNullable<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
@@ -2877,14 +2950,24 @@ declare const DeviceKeyRecordSchema: z.ZodObject<{
     id: string;
     createdAtMs: number;
     revokedAtMs: number | null;
-    publicKeyHex: string;
+    publicKeyHex: string | null;
+    publicKeySpkiB64: string | null;
+    securityLevel: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE" | null;
+    alg: "p256";
+    hardwareBacked: boolean;
+    attestedAtMs: number | null;
 }, {
     userId: string;
     deviceId: string;
     id: string;
     createdAtMs: number;
     revokedAtMs: number | null;
-    publicKeyHex: string;
+    publicKeyHex?: string | null | undefined;
+    publicKeySpkiB64?: string | null | undefined;
+    securityLevel?: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE" | null | undefined;
+    alg?: "p256" | undefined;
+    hardwareBacked?: boolean | undefined;
+    attestedAtMs?: number | null | undefined;
 }>;
 type DeviceKeyRecord = z.infer<typeof DeviceKeyRecordSchema>;
 declare const ConsumerOACSchema: z.ZodObject<{
@@ -2892,7 +2975,10 @@ declare const ConsumerOACSchema: z.ZodObject<{
     issuerId: z.ZodString;
     userId: z.ZodString;
     deviceId: z.ZodString;
-    devicePubkeyHex: z.ZodString;
+    /** Always 'p256'. Field retained for forward-compat. */
+    alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+    /** P-256 SubjectPublicKeyInfo DER, base64. */
+    devicePubkeySpkiB64: z.ZodString;
     perTxCapKobo: z.ZodNumber;
     cumulativeCapKobo: z.ZodNumber;
     currency: z.ZodString;
@@ -2911,8 +2997,9 @@ declare const ConsumerOACSchema: z.ZodObject<{
     counterSeed: number;
     issuedAtMs: number;
     issuerId: string;
+    alg: "p256";
     oacId: string;
-    devicePubkeyHex: string;
+    devicePubkeySpkiB64: string;
 }, {
     userId: string;
     deviceId: string;
@@ -2925,7 +3012,8 @@ declare const ConsumerOACSchema: z.ZodObject<{
     issuedAtMs: number;
     issuerId: string;
     oacId: string;
-    devicePubkeyHex: string;
+    devicePubkeySpkiB64: string;
+    alg?: "p256" | undefined;
 }>;
 type ConsumerOAC = z.infer<typeof ConsumerOACSchema>;
 declare const SignedConsumerOACSchema: z.ZodObject<{
@@ -2934,7 +3022,10 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         issuerId: z.ZodString;
         userId: z.ZodString;
         deviceId: z.ZodString;
-        devicePubkeyHex: z.ZodString;
+        /** Always 'p256'. Field retained for forward-compat. */
+        alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+        /** P-256 SubjectPublicKeyInfo DER, base64. */
+        devicePubkeySpkiB64: z.ZodString;
         perTxCapKobo: z.ZodNumber;
         cumulativeCapKobo: z.ZodNumber;
         currency: z.ZodString;
@@ -2953,8 +3044,9 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         counterSeed: number;
         issuedAtMs: number;
         issuerId: string;
+        alg: "p256";
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
     }, {
         userId: string;
         deviceId: string;
@@ -2967,10 +3059,13 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         issuedAtMs: number;
         issuerId: string;
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
+        alg?: "p256" | undefined;
     }>;
+    /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
     issuerSig: z.ZodString;
-    issuerPublicKeyHex: z.ZodString;
+    /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+    issuerPublicKeySpkiB64: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     issuerSig: string;
     oac: {
@@ -2984,10 +3079,11 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         counterSeed: number;
         issuedAtMs: number;
         issuerId: string;
+        alg: "p256";
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
     };
-    issuerPublicKeyHex: string;
+    issuerPublicKeySpkiB64: string;
 }, {
     issuerSig: string;
     oac: {
@@ -3002,9 +3098,10 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         issuedAtMs: number;
         issuerId: string;
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
+        alg?: "p256" | undefined;
     };
-    issuerPublicKeyHex: string;
+    issuerPublicKeySpkiB64: string;
 }>;
 type SignedConsumerOAC = z.infer<typeof SignedConsumerOACSchema>;
 declare const OACRecordSchema: z.ZodObject<{
@@ -3013,7 +3110,10 @@ declare const OACRecordSchema: z.ZodObject<{
         issuerId: z.ZodString;
         userId: z.ZodString;
         deviceId: z.ZodString;
-        devicePubkeyHex: z.ZodString;
+        /** Always 'p256'. Field retained for forward-compat. */
+        alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+        /** P-256 SubjectPublicKeyInfo DER, base64. */
+        devicePubkeySpkiB64: z.ZodString;
         perTxCapKobo: z.ZodNumber;
         cumulativeCapKobo: z.ZodNumber;
         currency: z.ZodString;
@@ -3032,8 +3132,9 @@ declare const OACRecordSchema: z.ZodObject<{
         counterSeed: number;
         issuedAtMs: number;
         issuerId: string;
+        alg: "p256";
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
     }, {
         userId: string;
         deviceId: string;
@@ -3046,10 +3147,13 @@ declare const OACRecordSchema: z.ZodObject<{
         issuedAtMs: number;
         issuerId: string;
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
+        alg?: "p256" | undefined;
     }>;
+    /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
     issuerSig: z.ZodString;
-    issuerPublicKeyHex: z.ZodString;
+    /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+    issuerPublicKeySpkiB64: z.ZodString;
 } & {
     currentOfflineSpentKobo: z.ZodNumber;
     status: z.ZodEnum<["active", "superseded", "expired", "revoked", "disabling", "draining", "closed"]>;
@@ -3071,10 +3175,11 @@ declare const OACRecordSchema: z.ZodObject<{
         counterSeed: number;
         issuedAtMs: number;
         issuerId: string;
+        alg: "p256";
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
     };
-    issuerPublicKeyHex: string;
+    issuerPublicKeySpkiB64: string;
     currentOfflineSpentKobo: number;
     supersededAtMs: number | null;
     holdId?: string | null | undefined;
@@ -3094,9 +3199,10 @@ declare const OACRecordSchema: z.ZodObject<{
         issuedAtMs: number;
         issuerId: string;
         oacId: string;
-        devicePubkeyHex: string;
+        devicePubkeySpkiB64: string;
+        alg?: "p256" | undefined;
     };
-    issuerPublicKeyHex: string;
+    issuerPublicKeySpkiB64: string;
     currentOfflineSpentKobo: number;
     supersededAtMs: number | null;
     holdId?: string | null | undefined;
@@ -3145,6 +3251,29 @@ declare const EnableOfflineInputSchema: z.ZodObject<{
     partnerId?: string | undefined;
 }>;
 type EnableOfflineInput = z.infer<typeof EnableOfflineInputSchema>;
+declare const ProvisionOfflineAllowanceInputSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+    amountKobo: z.ZodNumber;
+    perTxCapKobo: z.ZodOptional<z.ZodNumber>;
+    ttlMs: z.ZodOptional<z.ZodNumber>;
+    installId: z.ZodString;
+    partnerId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+    amountKobo: number;
+    installId: string;
+    perTxCapKobo?: number | undefined;
+    ttlMs?: number | undefined;
+    partnerId?: string | undefined;
+}, {
+    deviceId: string;
+    amountKobo: number;
+    installId: string;
+    perTxCapKobo?: number | undefined;
+    ttlMs?: number | undefined;
+    partnerId?: string | undefined;
+}>;
+type ProvisionOfflineAllowanceInput = EnableOfflineInput;
 declare const DisableOfflineInputSchema: z.ZodObject<{
     deviceId: z.ZodString;
     installId: z.ZodOptional<z.ZodString>;
@@ -3283,7 +3412,10 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             issuerId: z.ZodString;
             userId: z.ZodString;
             deviceId: z.ZodString;
-            devicePubkeyHex: z.ZodString;
+            /** Always 'p256'. Field retained for forward-compat. */
+            alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+            /** P-256 SubjectPublicKeyInfo DER, base64. */
+            devicePubkeySpkiB64: z.ZodString;
             perTxCapKobo: z.ZodNumber;
             cumulativeCapKobo: z.ZodNumber;
             currency: z.ZodString;
@@ -3302,8 +3434,9 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         }, {
             userId: string;
             deviceId: string;
@@ -3316,10 +3449,13 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         }>;
+        /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
         issuerSig: z.ZodString;
-        issuerPublicKeyHex: z.ZodString;
+        /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+        issuerPublicKeySpkiB64: z.ZodString;
     } & {
         currentOfflineSpentKobo: z.ZodNumber;
         status: z.ZodEnum<["active", "superseded", "expired", "revoked", "disabling", "draining", "closed"]>;
@@ -3341,10 +3477,11 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3364,9 +3501,10 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3387,10 +3525,11 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3432,9 +3571,10 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3461,6 +3601,260 @@ declare const EnableOfflineResultSchema: z.ZodObject<{
     };
 }>;
 type EnableOfflineResult = z.infer<typeof EnableOfflineResultSchema>;
+declare const ProvisionOfflineAllowanceResultSchema: z.ZodObject<{
+    hold: z.ZodObject<{
+        holdId: z.ZodString;
+        userId: z.ZodString;
+        deviceId: z.ZodString;
+        partnerId: z.ZodString;
+        adapterKind: z.ZodString;
+        externalHoldRef: z.ZodNullable<z.ZodString>;
+        amountKobo: z.ZodNumber;
+        capturedKobo: z.ZodNumber;
+        releasedKobo: z.ZodNumber;
+        remainingKobo: z.ZodNumber;
+        currency: z.ZodString;
+        status: z.ZodEnum<["placing", "active", "disabling", "draining", "closed", "revoked", "failed"]>;
+        installId: z.ZodNullable<z.ZodString>;
+        drainDeadlineMs: z.ZodNumber;
+        disableRequestedAtMs: z.ZodNullable<z.ZodNumber>;
+        createdAtMs: z.ZodNumber;
+        closedAtMs: z.ZodNullable<z.ZodNumber>;
+        isTrusted: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        status: "active" | "closed" | "failed" | "revoked" | "disabling" | "draining" | "placing";
+        userId: string;
+        deviceId: string;
+        currency: string;
+        createdAtMs: number;
+        amountKobo: number;
+        holdId: string;
+        installId: string | null;
+        partnerId: string;
+        adapterKind: string;
+        externalHoldRef: string | null;
+        capturedKobo: number;
+        releasedKobo: number;
+        remainingKobo: number;
+        drainDeadlineMs: number;
+        disableRequestedAtMs: number | null;
+        closedAtMs: number | null;
+        isTrusted?: boolean | undefined;
+    }, {
+        status: "active" | "closed" | "failed" | "revoked" | "disabling" | "draining" | "placing";
+        userId: string;
+        deviceId: string;
+        currency: string;
+        createdAtMs: number;
+        amountKobo: number;
+        holdId: string;
+        installId: string | null;
+        partnerId: string;
+        adapterKind: string;
+        externalHoldRef: string | null;
+        capturedKobo: number;
+        releasedKobo: number;
+        remainingKobo: number;
+        drainDeadlineMs: number;
+        disableRequestedAtMs: number | null;
+        closedAtMs: number | null;
+        isTrusted?: boolean | undefined;
+    }>;
+    oac: z.ZodObject<{
+        oac: z.ZodObject<{
+            oacId: z.ZodString;
+            issuerId: z.ZodString;
+            userId: z.ZodString;
+            deviceId: z.ZodString;
+            /** Always 'p256'. Field retained for forward-compat. */
+            alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+            /** P-256 SubjectPublicKeyInfo DER, base64. */
+            devicePubkeySpkiB64: z.ZodString;
+            perTxCapKobo: z.ZodNumber;
+            cumulativeCapKobo: z.ZodNumber;
+            currency: z.ZodString;
+            validFromMs: z.ZodNumber;
+            validUntilMs: z.ZodNumber;
+            counterSeed: z.ZodNumber;
+            issuedAtMs: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            alg: "p256";
+            oacId: string;
+            devicePubkeySpkiB64: string;
+        }, {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            oacId: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
+        }>;
+        /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
+        issuerSig: z.ZodString;
+        /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+        issuerPublicKeySpkiB64: z.ZodString;
+    } & {
+        currentOfflineSpentKobo: z.ZodNumber;
+        status: z.ZodEnum<["active", "superseded", "expired", "revoked", "disabling", "draining", "closed"]>;
+        supersededAtMs: z.ZodNullable<z.ZodNumber>;
+        revokedAtMs: z.ZodNullable<z.ZodNumber>;
+        holdId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        status: "active" | "closed" | "expired" | "revoked" | "superseded" | "disabling" | "draining";
+        issuerSig: string;
+        revokedAtMs: number | null;
+        oac: {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            alg: "p256";
+            oacId: string;
+            devicePubkeySpkiB64: string;
+        };
+        issuerPublicKeySpkiB64: string;
+        currentOfflineSpentKobo: number;
+        supersededAtMs: number | null;
+        holdId?: string | null | undefined;
+    }, {
+        status: "active" | "closed" | "expired" | "revoked" | "superseded" | "disabling" | "draining";
+        issuerSig: string;
+        revokedAtMs: number | null;
+        oac: {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            oacId: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
+        };
+        issuerPublicKeySpkiB64: string;
+        currentOfflineSpentKobo: number;
+        supersededAtMs: number | null;
+        holdId?: string | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    oac: {
+        status: "active" | "closed" | "expired" | "revoked" | "superseded" | "disabling" | "draining";
+        issuerSig: string;
+        revokedAtMs: number | null;
+        oac: {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            alg: "p256";
+            oacId: string;
+            devicePubkeySpkiB64: string;
+        };
+        issuerPublicKeySpkiB64: string;
+        currentOfflineSpentKobo: number;
+        supersededAtMs: number | null;
+        holdId?: string | null | undefined;
+    };
+    hold: {
+        status: "active" | "closed" | "failed" | "revoked" | "disabling" | "draining" | "placing";
+        userId: string;
+        deviceId: string;
+        currency: string;
+        createdAtMs: number;
+        amountKobo: number;
+        holdId: string;
+        installId: string | null;
+        partnerId: string;
+        adapterKind: string;
+        externalHoldRef: string | null;
+        capturedKobo: number;
+        releasedKobo: number;
+        remainingKobo: number;
+        drainDeadlineMs: number;
+        disableRequestedAtMs: number | null;
+        closedAtMs: number | null;
+        isTrusted?: boolean | undefined;
+    };
+}, {
+    oac: {
+        status: "active" | "closed" | "expired" | "revoked" | "superseded" | "disabling" | "draining";
+        issuerSig: string;
+        revokedAtMs: number | null;
+        oac: {
+            userId: string;
+            deviceId: string;
+            currency: string;
+            perTxCapKobo: number;
+            cumulativeCapKobo: number;
+            validFromMs: number;
+            validUntilMs: number;
+            counterSeed: number;
+            issuedAtMs: number;
+            issuerId: string;
+            oacId: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
+        };
+        issuerPublicKeySpkiB64: string;
+        currentOfflineSpentKobo: number;
+        supersededAtMs: number | null;
+        holdId?: string | null | undefined;
+    };
+    hold: {
+        status: "active" | "closed" | "failed" | "revoked" | "disabling" | "draining" | "placing";
+        userId: string;
+        deviceId: string;
+        currency: string;
+        createdAtMs: number;
+        amountKobo: number;
+        holdId: string;
+        installId: string | null;
+        partnerId: string;
+        adapterKind: string;
+        externalHoldRef: string | null;
+        capturedKobo: number;
+        releasedKobo: number;
+        remainingKobo: number;
+        drainDeadlineMs: number;
+        disableRequestedAtMs: number | null;
+        closedAtMs: number | null;
+        isTrusted?: boolean | undefined;
+    };
+}>;
+type ProvisionOfflineAllowanceResult = EnableOfflineResult;
 declare const DisableOfflineResultSchema: z.ZodObject<{
     hold: z.ZodObject<{
         holdId: z.ZodString;
@@ -3635,7 +4029,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             issuerId: z.ZodString;
             userId: z.ZodString;
             deviceId: z.ZodString;
-            devicePubkeyHex: z.ZodString;
+            /** Always 'p256'. Field retained for forward-compat. */
+            alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+            /** P-256 SubjectPublicKeyInfo DER, base64. */
+            devicePubkeySpkiB64: z.ZodString;
             perTxCapKobo: z.ZodNumber;
             cumulativeCapKobo: z.ZodNumber;
             currency: z.ZodString;
@@ -3654,8 +4051,9 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         }, {
             userId: string;
             deviceId: string;
@@ -3668,10 +4066,13 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         }>;
+        /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
         issuerSig: z.ZodString;
-        issuerPublicKeyHex: z.ZodString;
+        /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+        issuerPublicKeySpkiB64: z.ZodString;
     } & {
         currentOfflineSpentKobo: z.ZodNumber;
         status: z.ZodEnum<["active", "superseded", "expired", "revoked", "disabling", "draining", "closed"]>;
@@ -3693,10 +4094,11 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3716,9 +4118,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3739,10 +4142,11 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3784,9 +4188,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3820,7 +4225,10 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             issuerId: z.ZodString;
             userId: z.ZodString;
             deviceId: z.ZodString;
-            devicePubkeyHex: z.ZodString;
+            /** Always 'p256'. Field retained for forward-compat. */
+            alg: z.ZodDefault<z.ZodLiteral<"p256">>;
+            /** P-256 SubjectPublicKeyInfo DER, base64. */
+            devicePubkeySpkiB64: z.ZodString;
             perTxCapKobo: z.ZodNumber;
             cumulativeCapKobo: z.ZodNumber;
             currency: z.ZodString;
@@ -3839,8 +4247,9 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         }, {
             userId: string;
             deviceId: string;
@@ -3853,10 +4262,13 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         }>;
+        /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
         issuerSig: z.ZodString;
-        issuerPublicKeyHex: z.ZodString;
+        /** Issuer's P-256 public key as SubjectPublicKeyInfo DER, base64. */
+        issuerPublicKeySpkiB64: z.ZodString;
     } & {
         currentOfflineSpentKobo: z.ZodNumber;
         status: z.ZodEnum<["active", "superseded", "expired", "revoked", "disabling", "draining", "closed"]>;
@@ -3878,10 +4290,11 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3901,9 +4314,10 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3924,10 +4338,11 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             counterSeed: number;
             issuedAtMs: number;
             issuerId: string;
+            alg: "p256";
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3949,9 +4364,10 @@ declare const OfflineStateResultSchema: z.ZodObject<{
             issuedAtMs: number;
             issuerId: string;
             oacId: string;
-            devicePubkeyHex: string;
+            devicePubkeySpkiB64: string;
+            alg?: "p256" | undefined;
         };
-        issuerPublicKeyHex: string;
+        issuerPublicKeySpkiB64: string;
         currentOfflineSpentKobo: number;
         supersededAtMs: number | null;
         holdId?: string | null | undefined;
@@ -3959,6 +4375,8 @@ declare const OfflineStateResultSchema: z.ZodObject<{
 }>;
 type OfflineStateResult = z.infer<typeof OfflineStateResultSchema>;
 declare const ConsumerPaymentClaimSchema: z.ZodObject<{
+    /** Always 'p256'. Retained for forward-compat and as an explicit domain marker. */
+    alg: z.ZodDefault<z.ZodLiteral<"p256">>;
     oacId: z.ZodString;
     encounterId: z.ZodOptional<z.ZodString>;
     payerUserId: z.ZodString;
@@ -3971,10 +4389,10 @@ declare const ConsumerPaymentClaimSchema: z.ZodObject<{
     occurredAtMs: z.ZodNumber;
     completedAtMs: z.ZodOptional<z.ZodNumber>;
     contextId: z.ZodOptional<z.ZodString>;
-    payerPubkeyHex: z.ZodString;
-    payerSignature: z.ZodString;
-    payeePubkeyHex: z.ZodOptional<z.ZodString>;
-    payeeSignature: z.ZodOptional<z.ZodString>;
+    payerPubkeySpkiB64: z.ZodString;
+    payerSignatureDerB64: z.ZodString;
+    payeePubkeySpkiB64: z.ZodOptional<z.ZodString>;
+    payeeSignatureDerB64: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     currency: string;
     amountKobo: number;
@@ -3983,15 +4401,16 @@ declare const ConsumerPaymentClaimSchema: z.ZodObject<{
     payerNonce: string;
     payeeNonce: string;
     occurredAtMs: number;
-    payerSignature: string;
+    alg: "p256";
     oacId: string;
     payerDeviceId: string;
-    payerPubkeyHex: string;
+    payerPubkeySpkiB64: string;
+    payerSignatureDerB64: string;
     encounterId?: string | undefined;
     completedAtMs?: number | undefined;
     contextId?: string | undefined;
-    payeeSignature?: string | undefined;
-    payeePubkeyHex?: string | undefined;
+    payeePubkeySpkiB64?: string | undefined;
+    payeeSignatureDerB64?: string | undefined;
 }, {
     amountKobo: number;
     payerUserId: string;
@@ -3999,16 +4418,17 @@ declare const ConsumerPaymentClaimSchema: z.ZodObject<{
     payerNonce: string;
     payeeNonce: string;
     occurredAtMs: number;
-    payerSignature: string;
     oacId: string;
     payerDeviceId: string;
-    payerPubkeyHex: string;
+    payerPubkeySpkiB64: string;
+    payerSignatureDerB64: string;
     currency?: string | undefined;
     encounterId?: string | undefined;
     completedAtMs?: number | undefined;
     contextId?: string | undefined;
-    payeeSignature?: string | undefined;
-    payeePubkeyHex?: string | undefined;
+    alg?: "p256" | undefined;
+    payeePubkeySpkiB64?: string | undefined;
+    payeeSignatureDerB64?: string | undefined;
 }>;
 type ConsumerPaymentClaim = z.infer<typeof ConsumerPaymentClaimSchema>;
 declare const ConsumerSettlementSchema: z.ZodObject<{
@@ -4023,6 +4443,7 @@ declare const ConsumerSettlementSchema: z.ZodObject<{
     status: z.ZodEnum<["SETTLED", "REVIEW"]>;
     reviewReason: z.ZodNullable<z.ZodString>;
     ledgerRef: z.ZodNullable<z.ZodString>;
+    /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
     issuerSig: z.ZodString;
     createdAtMs: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
@@ -4068,6 +4489,7 @@ declare const ConsumerSettleResultSchema: z.ZodObject<{
         status: z.ZodEnum<["SETTLED", "REVIEW"]>;
         reviewReason: z.ZodNullable<z.ZodString>;
         ledgerRef: z.ZodNullable<z.ZodString>;
+        /** ASN.1 DER ECDSA P-256 issuer signature, base64. */
         issuerSig: z.ZodString;
         createdAtMs: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
@@ -4158,10 +4580,13 @@ type MeOfflineClientOptions = {
 };
 type MeOfflineClient = {
     registerDeviceKey: (input: RegisterDeviceKeyInput) => Promise<DeviceKeyRecord>;
+    issueP256EnrollmentChallenge: (input: P256EnrollmentChallengeInput) => Promise<P256EnrollmentChallengeResult>;
+    registerDeviceKeyP256: (input: RegisterDeviceKeyP256Input) => Promise<DeviceKeyRecord>;
     listDeviceKeys: () => Promise<{
         items: DeviceKeyRecord[];
     }>;
     revokeDeviceKey: (input: RevokeDeviceKeyInput) => Promise<void>;
+    provisionAllowance: (input: ProvisionOfflineAllowanceInput) => Promise<ProvisionOfflineAllowanceResult>;
     enable: (input: EnableOfflineInput) => Promise<EnableOfflineResult>;
     refresh: (input: IssueOACInput) => Promise<OACRecord>;
     disable: (input: DisableOfflineInput) => Promise<DisableOfflineResult>;
@@ -4171,6 +4596,127 @@ type MeOfflineClient = {
 };
 declare function createMeOfflineClient(opts: MeOfflineClientOptions): MeOfflineClient;
 
+/**
+ * Offline-claim signer abstraction for Flur.
+ *
+ * Why this exists:
+ *  - Mobile clients sign payment claims with a hardware-backed P-256 key
+ *    (iOS Secure Enclave / Android Keystore StrongBox). Native modules
+ *    implement that custody, not this file.
+ *  - Server-side partners, test harnesses, and custodied integrators need a
+ *    *software* P-256 signer with the same surface so the SDK contract is
+ *    uniform.
+ *  - Both producers and verifiers (consumer mobile, partner backend, Flur
+ *    backend) must agree byte-for-byte on what gets signed. That's the job
+ *    of `canonicalClaimSigningPayload` / `canonicalClaimSigningBytes`.
+ *
+ * Wire format (P-256, hardware-backed):
+ *  - Public key:  SubjectPublicKeyInfo DER, base64. Same format the
+ *                 Apple/Android native modules return.
+ *  - Signature:   ASN.1 DER ECDSA(SHA-256) signature, base64.
+ *
+ * Domain separation:
+ *  - V2 payload binds `alg='p256'` and is tagged with `CLAIM_DOMAIN_V2`.
+ *    The legacy ed25519 V1 path has been removed; the migration to P-256
+ *    is final.
+ */
+/**
+ * V2 canonical claim domain. Must match the backend's V2 verifier exactly.
+ * Bumped from `flur:consumer-offline:v1:claim` so a payer's V2 hardware
+ * signature is non-replayable against a legacy V1 verifier and vice-versa.
+ */
+declare const CLAIM_DOMAIN_V2: "flur:consumer-offline:v2:claim";
+type OfflineClaimAlgorithm = 'p256';
+/**
+ * Inputs the SDK accepts to build canonical signing bytes.
+ *
+ * Optional fields default to `null` inside the canonical payload, so callers
+ * that omit them still produce stable, deterministic bytes.
+ */
+interface CanonicalClaimInput {
+    alg: OfflineClaimAlgorithm;
+    oacId: string;
+    payerUserId: string;
+    payeeUserId: string;
+    payerDeviceId: string;
+    payerNonce: string;
+    payeeNonce: string;
+    amountKobo: number;
+    currency: string;
+    occurredAtMs: number;
+    completedAtMs?: number | null;
+    contextId?: string | null;
+}
+/** Public key + signature pair from a signer. */
+interface SignerPublicKey {
+    alg: OfflineClaimAlgorithm;
+    /** SubjectPublicKeyInfo DER, base64. */
+    publicKey: string;
+}
+interface ClaimSignature {
+    alg: OfflineClaimAlgorithm;
+    /** ASN.1 DER ECDSA(SHA-256) signature, base64. */
+    signature: string;
+}
+/** Abstract signer interface. Software and native impls both honour this. */
+interface OfflineClaimSigner {
+    readonly alg: OfflineClaimAlgorithm;
+    getPublicKey(): Promise<SignerPublicKey>;
+    sign(bytes: Uint8Array): Promise<ClaimSignature>;
+}
+/**
+ * The exact object that gets canonical-JSON-encoded and signed.
+ *
+ * Key ordering doesn't matter for the *output* because `canonicalJSONBytes`
+ * sorts keys lexicographically — but the field SET and value normalization
+ * must match the backend verifier byte-for-byte. Treat this function as the
+ * cryptographic contract.
+ */
+declare function canonicalClaimSigningPayload(claim: CanonicalClaimInput): {
+    domain: typeof CLAIM_DOMAIN_V2;
+    alg: OfflineClaimAlgorithm;
+    oacId: string;
+    payerUserId: string;
+    payeeUserId: string;
+    payerDeviceId: string;
+    payerNonce: string;
+    payeeNonce: string;
+    amountKobo: number;
+    currency: string;
+    occurredAtMs: number;
+    completedAtMs: number | null;
+    contextId: string | null;
+};
+/** Bytes the signer must operate on. */
+declare function canonicalClaimSigningBytes(claim: CanonicalClaimInput): Uint8Array;
+/**
+ * Software P-256 signer. Useful for:
+ *   - test harnesses
+ *   - Node integrators that issue claims server-side (custodied wallets)
+ *   - simulators where Secure Enclave / StrongBox is unavailable
+ *
+ * The hardware-backed equivalent (mobile) implements the same interface
+ * but defers key storage and signing to the OS secure element.
+ */
+declare function createSoftwareP256Signer(privateKey: Uint8Array): OfflineClaimSigner;
+interface VerifyClaimSignatureInput {
+    alg: OfflineClaimAlgorithm;
+    bytes: Uint8Array;
+    signature: string;
+    publicKey: string;
+}
+/**
+ * Verifier the backend, partners, and self-checks all share. Returns a plain
+ * boolean — callers should treat `false` and thrown errors uniformly as
+ * "not authenticated".
+ */
+declare function verifyClaimSignature(input: VerifyClaimSignatureInput): boolean;
+
+declare const OFFLINE_CLAIM_SMS_PREFIX: "FLURC1.";
+declare function encodeOfflineClaimSmsMessage(claim: ConsumerPaymentClaim): string;
+declare function decodeOfflineClaimSmsMessage(message: string): ConsumerPaymentClaim;
+declare function extractOfflineClaimSmsToken(message: string): string | null;
+
 /**
  * Partner-funded wallet rails SDK.
  *
@@ -4943,11 +5489,12 @@ declare function createPartnerProfileAdminClient(opts: PartnerProfileAdminClient
  *     data:  <artifact body>     // type-specific, validated by registered schema
  *   }
  *
- * Signature: Ed25519 over canonicalJSONBytes(body), hex-encoded (64 bytes / 128 hex chars).
+ * Signature: P-256 ECDSA (SHA-256) over canonicalJSONBytes(body), ASN.1 DER, base64.
  *
  * Design notes:
  * - URI scheme `flur://v1/...` is the single transport for all signed artifacts.
- * - Scanners route on the path segment; verifiers look up the issuer/kid public key.
+ * - Scanners route on the path segment; verifiers look up the issuer/kid public key
+ *   (SubjectPublicKeyInfo DER, base64) from the backend device-key registry.
  * - Pure NIBSS NQR payments remain unchanged; this envelope rides separately.
  */
 declare const FLUR_ARTIFACT_URI_SCHEME = "flur";
@@ -4984,6 +5531,7 @@ type ArtifactBody<T = unknown> = ArtifactHeader & {
 };
 type SignedArtifact<T = unknown> = {
     body: ArtifactBody<T>;
+    /** ASN.1 DER ECDSA P-256 signature, base64 (standard, not url-safe). */
     sig: string;
 };
 declare class FlurArtifactError extends Error {
@@ -5007,6 +5555,7 @@ type DecodedArtifactUri = {
     type: string;
     bodyBytes: Uint8Array;
     body: ArtifactBody;
+    /** ASN.1 DER ECDSA P-256 signature, base64 (standard). */
     sig: string;
 };
 declare function decodeArtifactUri(uri: string): DecodedArtifactUri;
@@ -5016,7 +5565,7 @@ type VerifyArtifactOptions = {
     /** When true (default), reject artifacts whose `exp` is in the past. */
     enforceExpiry?: boolean;
 };
-declare function verifyArtifactSignature(decoded: DecodedArtifactUri, publicKey: Uint8Array, options?: VerifyArtifactOptions): boolean;
+declare function verifyArtifactSignature(decoded: DecodedArtifactUri, publicKeySpkiB64: string, options?: VerifyArtifactOptions): boolean;
 
 /**
  * Registry of all Flur v1 signed artifact types.
@@ -5674,17 +6223,17 @@ declare const IdentityArtifactSchema: z.ZodObject<{
     claimValueHash: z.ZodString;
     attestedAtMs: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
+    attestedAtMs: number;
     attestationId: string;
     subjectId: string;
     claimType: "phone_verified" | "email_verified" | "bvn_verified" | "kyc_tier" | "age_band";
     claimValueHash: string;
-    attestedAtMs: number;
 }, {
+    attestedAtMs: number;
     attestationId: string;
     subjectId: string;
     claimType: "phone_verified" | "email_verified" | "bvn_verified" | "kyc_tier" | "age_band";
     claimValueHash: string;
-    attestedAtMs: number;
 }>;
 declare const ARTIFACT_BODY_SCHEMAS: {
     readonly offline_payment_authorization: z.ZodObject<{
@@ -6314,17 +6863,17 @@ declare const ARTIFACT_BODY_SCHEMAS: {
         claimValueHash: z.ZodString;
         attestedAtMs: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
+        attestedAtMs: number;
         attestationId: string;
         subjectId: string;
         claimType: "phone_verified" | "email_verified" | "bvn_verified" | "kyc_tier" | "age_band";
         claimValueHash: string;
-        attestedAtMs: number;
     }, {
+        attestedAtMs: number;
         attestationId: string;
         subjectId: string;
         claimType: "phone_verified" | "email_verified" | "bvn_verified" | "kyc_tier" | "age_band";
         claimValueHash: string;
-        attestedAtMs: number;
     }>;
 };
 /** Artifact types whose body schema is fully specified and safe to dispatch. */
@@ -6364,14 +6913,14 @@ type VerifiedArtifact<T = unknown> = {
  *
  * - Parses the URI and envelope header.
  * - Validates the body against the registered Zod schema.
- * - Verifies the Ed25519 signature against the supplied public key.
+ * - Verifies the P-256 ECDSA(SHA-256) DER signature against the supplied public key.
  * - Enforces expiry unless `options.enforceExpiry === false`.
  *
  * The caller is responsible for resolving the public key from (issuer, kid)
  * against the backend device-key registry, and for enforcing nonce uniqueness
  * via the artifact_nonces store.
  */
-declare function verifyArtifactUri<T = unknown>(uri: string, publicKey: Uint8Array, options?: VerifyArtifactOptions): VerifiedArtifact<T>;
+declare function verifyArtifactUri<T = unknown>(uri: string, publicKeySpkiB64: string, options?: VerifyArtifactOptions): VerifiedArtifact<T>;
 declare function createReceiptArtifactUri(input: {
     issuer: string;
     keyId: string;
@@ -6444,4 +6993,4 @@ declare function createOfflinePaymentAuthorizationArtifactUri(input: {
     }>;
 };
 
-export { ACCOUNT_STATUSES, ACCOUNT_TYPES, ADDITIONAL_DATA_SUBFIELD, ARTIFACT_BODY_SCHEMAS, ARTIFACT_TYPES, type Account, type AccountActivityItem, type AccountMembership, AccountMembershipSchema, AccountSchema, type AccountStatus, type AccountSummaryResponse, type AccountType, type AccountsClient, type AccountsClientOptions, type AddMemberInput, type AdditionalData, type ApiCredentialPublic, ApiCredentialPublicSchema, type ApiCredentialsAdminClient, type ArtifactBody, type ArtifactHeader, ArtifactHeaderSchema, type ArtifactType, type AtomicRedeemReceiptInput, type AtomicRedeemResponse, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, COLLECTION_INTENT_STATUSES, COLLECTION_PAYMENT_STATUSES, CUSTODIAL_MODES, type CashNamespace, type CollectionIntent, CollectionIntentSchema, type CollectionPayment, type CollectionPaymentResult, CollectionPaymentResultSchema, CollectionPaymentSchema, type CollectionReportSummary, CollectionReportSummarySchema, type CollectionStatement, CollectionStatementSchema, type CollectionsClient, type CollectionsClientOptions, type ConsumerCollectionsClient, type ConsumerOAC, type OACRecord as ConsumerOACRecord, OACRecordSchema as ConsumerOACRecordSchema, ConsumerOACSchema, type ConsumerPaymentClaim, ConsumerPaymentClaimSchema, type ConsumerSettleResult, ConsumerSettleResultSchema, type ConsumerSettlement, ConsumerSettlementSchema, type ConsumerWithdrawalsClient, type ConsumerWithdrawalsClientOptions, type CreateBusinessAccountInput, type CreateCollectionIntentInput, CreateCollectionIntentInputSchema, type CreatePayLinkResponse, type CreatePayoutDestinationInput, CreatePayoutDestinationInputSchema, type CreatePayoutInput, CreatePayoutInputSchema, type CreateTransferOptions, type CreateWithdrawalInput, CreateWithdrawalInputSchema, type CreateWithdrawalResult, CreateWithdrawalResultSchema, type CustodialMode, type DecodedArtifactUri, type DeviceKeyRecord, DeviceKeyRecordSchema, type DeviceTrustState, type DisableOfflineInput, DisableOfflineInputSchema, type DisableOfflineResult, DisableOfflineResultSchema, type Ed25519KeyPair, type EnableOfflineInput, EnableOfflineInputSchema, type EnableOfflineResult, EnableOfflineResultSchema, FIELD, FLUR_ARTIFACT_URI_PREFIX, FLUR_ARTIFACT_URI_SCHEME, FLUR_ARTIFACT_VERSION, FlurApiError, FlurArtifactError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurOfflineSettlementsClient, type FlurPartnerClient, type FlurPaymentEvent, FlurReplayError, HARDENED_ARTIFACT_TYPES, type HmacFetchOptions, IdentityArtifactSchema, type IngestFundingResult, IngestFundingResultSchema, type IssueOACInput, IssueOACInputSchema, type IssueOfflineTokenInput, type IssuePassInput, type IssueReceiptInput, LedgerJournalEntryArtifactSchema, type ListPassesInput, type ListPassesResponse, type ListPayoutDestinationsResult, ListPayoutDestinationsResultSchema, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, MEMBERSHIP_ROLES, MERCHANT_PAYOUT_STATUSES, MERCHANT_PROFILE_STATUSES, type MeOfflineClient, type MeOfflineClientOptions, type MembershipRole, type MerchantAccountInfo, type MerchantPayout, MerchantPayoutSchema, type MerchantProfile, MerchantProfileSchema, type MintedApiCredential, MintedApiCredentialSchema, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, NqrPaymentRequestArtifactSchema, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, OfflineClaimArtifactSchema, type OfflineHoldRecord, OfflineHoldRecordSchema, type OfflinePaymentAuthorization, type OfflinePaymentAuthorizationArtifact, OfflinePaymentAuthorizationArtifactSchema, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OfflineStateResult, OfflineStateResultSchema, type OfflineStatusResult, OfflineStatusResultSchema, type OfflineToken, OfflineTokenSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, PARTNER_FUNDING_DIRECTIONS, PARTNER_FUNDING_STATUSES, PARTNER_KINDS, PARTNER_PROFILE_STATUSES, PARTNER_SCOPES, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, PAYOUT_DESTINATION_STATUSES, POINT_OF_INITIATION, type ParsedNQR, type PartnerClientOptions, type PartnerCollectionsClient, type PartnerFunding, type PartnerFundingClient, type PartnerFundingDirection, type PartnerFundingEventInput, PartnerFundingEventInputSchema, PartnerFundingSchema, type PartnerFundingStatus, type PartnerKind, type PartnerProfile, type PartnerProfileAdminClient, type PartnerProfileAdminClientOptions, PartnerProfileSchema, type PartnerProfileStatus, type PartnerScope, type PartnerSignResult, type Pass, PassArtifactSchema, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PayCollectionInput, PayCollectionInputSchema, type PayCollectionOptions, type PayCollectionResponse, type PaymentClaim, PaymentClaimSchema, PaymentIntentArtifactSchema, type PayoutDestination, PayoutDestinationSchema, type PayoutDestinationStatus, type PayoutEventInput, PayoutEventInputSchema, type PinSetInput, type PinVerifyInput, type ProviderEventInput, ProviderEventInputSchema, type ProviderEventRecord, ProviderEventRecordSchema, type PublicCollectionIntent, PublicCollectionIntentSchema, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptArtifact, ReceiptArtifactSchema, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type ReconciliationReport, ReconciliationReportSchema, type RecordPayoutEventResult, RecordPayoutEventResultSchema, type RedeemPassResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceKeyInput, RegisterDeviceKeyInputSchema, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolveCollectionOptions, type ResolveCollectionResponse, type ResolvePayLinkResponse, ReversalRecordArtifactSchema, RevokeDeviceKeyInputSchema, type RevokePassInput, type RoutingHint, SETTLEMENT_SCHEDULES, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SettleResponse, SettleResponseSchema, type Settlement, SettlementRecordArtifactSchema, SettlementSchema, type SignedArtifact, type SignedConsumerOAC, SignedConsumerOACSchema, StatementArtifactSchema, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, type UpsertMerchantProfileInput, UpsertMerchantProfileInputSchema, type UpsertPartnerProfileInput, UpsertPartnerProfileInputSchema, type VerifiedArtifact, type VerifyArtifactOptions, WITHDRAWAL_STATES, type Withdrawal, WithdrawalSchema, type WithdrawalState, base64UrlDecode, base64UrlEncode, bodySha256Hex, buildArtifactBody, buildAuthorization, buildOAC, buildPass, buildPaymentRequest, buildReceipt, buildRedemption, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, computeEncounterId, constantTimeEqual, crc16ccitt, crc16ccittHex, createAccountsClient, createApiCredentialsAdminClient, createArtifactUri, createCollectionsClient, createConsumerCollectionsClient, createConsumerWithdrawalsClient, createFlurPartnerClient, createHmacFetch, createMeOfflineClient, createOfflinePaymentAuthorizationArtifactUri, createOfflineSettlementsClient, createPartnerCollectionsClient, createPartnerFundingClient, createPartnerProfileAdminClient, createPassesClient, createReceiptArtifactUri, createReceiptsClient, decodeArtifactUri, decodeAuthorizationQR, decodeBase45, decodePaymentRequestQR, encodeArtifactUri, encodeAuthorizationQR, encodeBase45, encodeNQR, encodePaymentRequestQR, formatAmount, generateDynamicQR, generateKeyPair, generateStaticQR, init, isHardenedArtifactType, isKnownArtifactType, isPassWithinValidity, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, publicKeyFromPrivate, readTLV, routingHint, sign, signArtifact, signAuthorization, signCanonical, signOAC, signPartnerRequest, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verify, verifyArtifactSignature, verifyArtifactUri, verifyAuthorization, verifyCanonical, verifyOAC, verifyPass, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };
+export { ACCOUNT_STATUSES, ACCOUNT_TYPES, ADDITIONAL_DATA_SUBFIELD, ARTIFACT_BODY_SCHEMAS, ARTIFACT_TYPES, type Account, type AccountActivityItem, type AccountMembership, AccountMembershipSchema, AccountSchema, type AccountStatus, type AccountSummaryResponse, type AccountType, type AccountsClient, type AccountsClientOptions, type AddMemberInput, type AdditionalData, type ApiCredentialPublic, ApiCredentialPublicSchema, type ApiCredentialsAdminClient, type ArtifactBody, type ArtifactHeader, ArtifactHeaderSchema, type ArtifactType, type AtomicRedeemReceiptInput, type AtomicRedeemResponse, type AttestationSecurityLevel, AttestationSecurityLevelSchema, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, CLAIM_DOMAIN_V2, COLLECTION_INTENT_STATUSES, COLLECTION_PAYMENT_STATUSES, CUSTODIAL_MODES, type CanonicalClaimInput, type CashNamespace, type ClaimSignature, type CollectionIntent, CollectionIntentSchema, type CollectionPayment, type CollectionPaymentResult, CollectionPaymentResultSchema, CollectionPaymentSchema, type CollectionReportSummary, CollectionReportSummarySchema, type CollectionStatement, CollectionStatementSchema, type CollectionsClient, type CollectionsClientOptions, type ConsumerCollectionsClient, type ConsumerOAC, type OACRecord as ConsumerOACRecord, OACRecordSchema as ConsumerOACRecordSchema, ConsumerOACSchema, type ConsumerPaymentClaim, ConsumerPaymentClaimSchema, type ConsumerSettleResult, ConsumerSettleResultSchema, type ConsumerSettlement, ConsumerSettlementSchema, type ConsumerWithdrawalsClient, type ConsumerWithdrawalsClientOptions, type CreateBusinessAccountInput, type CreateCollectionIntentInput, CreateCollectionIntentInputSchema, type CreatePayLinkResponse, type CreatePayoutDestinationInput, CreatePayoutDestinationInputSchema, type CreatePayoutInput, CreatePayoutInputSchema, type CreateTransferOptions, type CreateWithdrawalInput, CreateWithdrawalInputSchema, type CreateWithdrawalResult, CreateWithdrawalResultSchema, type CustodialMode, type DecodedArtifactUri, type DeviceKeyAlg, DeviceKeyAlgSchema, type DeviceKeyRecord, DeviceKeyRecordSchema, type DeviceTrustState, type DisableOfflineInput, DisableOfflineInputSchema, type DisableOfflineResult, DisableOfflineResultSchema, type EnableOfflineInput, EnableOfflineInputSchema, type EnableOfflineResult, EnableOfflineResultSchema, FIELD, FLUR_ARTIFACT_URI_PREFIX, FLUR_ARTIFACT_URI_SCHEME, FLUR_ARTIFACT_VERSION, FlurApiError, FlurArtifactError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurOfflineSettlementsClient, type FlurPartnerClient, type FlurPaymentEvent, FlurReplayError, HARDENED_ARTIFACT_TYPES, type HmacFetchOptions, IdentityArtifactSchema, type IngestFundingResult, IngestFundingResultSchema, type IssueOACInput, IssueOACInputSchema, type IssueOfflineTokenInput, type IssuePassInput, type IssueReceiptInput, LedgerJournalEntryArtifactSchema, type ListPassesInput, type ListPassesResponse, type ListPayoutDestinationsResult, ListPayoutDestinationsResultSchema, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, MEMBERSHIP_ROLES, MERCHANT_PAYOUT_STATUSES, MERCHANT_PROFILE_STATUSES, type MeOfflineClient, type MeOfflineClientOptions, type MembershipRole, type MerchantAccountInfo, type MerchantPayout, MerchantPayoutSchema, type MerchantProfile, MerchantProfileSchema, type MintedApiCredential, MintedApiCredentialSchema, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, NqrPaymentRequestArtifactSchema, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, OFFLINE_CLAIM_SMS_PREFIX, type OfflineClaimAlgorithm, OfflineClaimArtifactSchema, type OfflineClaimSigner, type OfflineHoldRecord, OfflineHoldRecordSchema, type OfflinePaymentAuthorization, type OfflinePaymentAuthorizationArtifact, OfflinePaymentAuthorizationArtifactSchema, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OfflineStateResult, OfflineStateResultSchema, type OfflineStatusResult, OfflineStatusResultSchema, type OfflineToken, OfflineTokenSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, type P256EnrollmentChallengeInput, P256EnrollmentChallengeInputSchema, type P256EnrollmentChallengeResult, P256EnrollmentChallengeResultSchema, PARTNER_FUNDING_DIRECTIONS, PARTNER_FUNDING_STATUSES, PARTNER_KINDS, PARTNER_PROFILE_STATUSES, PARTNER_SCOPES, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, PAYOUT_DESTINATION_STATUSES, POINT_OF_INITIATION, type ParsedNQR, type PartnerClientOptions, type PartnerCollectionsClient, type PartnerFunding, type PartnerFundingClient, type PartnerFundingDirection, type PartnerFundingEventInput, PartnerFundingEventInputSchema, PartnerFundingSchema, type PartnerFundingStatus, type PartnerKind, type PartnerProfile, type PartnerProfileAdminClient, type PartnerProfileAdminClientOptions, PartnerProfileSchema, type PartnerProfileStatus, type PartnerScope, type PartnerSignResult, type Pass, PassArtifactSchema, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PayCollectionInput, PayCollectionInputSchema, type PayCollectionOptions, type PayCollectionResponse, type PaymentClaim, PaymentClaimSchema, PaymentIntentArtifactSchema, type PayoutDestination, PayoutDestinationSchema, type PayoutDestinationStatus, type PayoutEventInput, PayoutEventInputSchema, type PinSetInput, type PinVerifyInput, type ProviderEventInput, ProviderEventInputSchema, type ProviderEventRecord, ProviderEventRecordSchema, type ProvisionOfflineAllowanceInput, ProvisionOfflineAllowanceInputSchema, type ProvisionOfflineAllowanceResult, ProvisionOfflineAllowanceResultSchema, type PublicCollectionIntent, PublicCollectionIntentSchema, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptArtifact, ReceiptArtifactSchema, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type ReconciliationReport, ReconciliationReportSchema, type RecordPayoutEventResult, RecordPayoutEventResultSchema, type RedeemPassResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceKeyInput, RegisterDeviceKeyInputSchema, type RegisterDeviceKeyP256Input, RegisterDeviceKeyP256InputSchema, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolveCollectionOptions, type ResolveCollectionResponse, type ResolvePayLinkResponse, ReversalRecordArtifactSchema, RevokeDeviceKeyInputSchema, type RevokePassInput, type RoutingHint, SETTLEMENT_SCHEDULES, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SettleResponse, SettleResponseSchema, type Settlement, SettlementRecordArtifactSchema, SettlementSchema, type SignedArtifact, type SignedConsumerOAC, SignedConsumerOACSchema, type SignerPublicKey, StatementArtifactSchema, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, type UpsertMerchantProfileInput, UpsertMerchantProfileInputSchema, type UpsertPartnerProfileInput, UpsertPartnerProfileInputSchema, type VerifiedArtifact, type VerifyArtifactOptions, type VerifyClaimSignatureInput, WITHDRAWAL_STATES, type Withdrawal, WithdrawalSchema, type WithdrawalState, base64UrlDecode, base64UrlEncode, bodySha256Hex, buildArtifactBody, buildAuthorization, buildOAC, buildPass, buildPaymentRequest, buildReceipt, buildRedemption, canonicalClaimSigningBytes, canonicalClaimSigningPayload, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, computeEncounterId, constantTimeEqual, crc16ccitt, crc16ccittHex, createAccountsClient, createApiCredentialsAdminClient, createArtifactUri, createCollectionsClient, createConsumerCollectionsClient, createConsumerWithdrawalsClient, createFlurPartnerClient, createHmacFetch, createMeOfflineClient, createOfflinePaymentAuthorizationArtifactUri, createOfflineSettlementsClient, createPartnerCollectionsClient, createPartnerFundingClient, createPartnerProfileAdminClient, createPassesClient, createReceiptArtifactUri, createReceiptsClient, createSoftwareP256Signer, decodeArtifactUri, decodeAuthorizationQR, decodeBase45, decodeOfflineClaimSmsMessage, decodePaymentRequestQR, encodeArtifactUri, encodeAuthorizationQR, encodeBase45, encodeNQR, encodeOfflineClaimSmsMessage, encodePaymentRequestQR, extractOfflineClaimSmsToken, formatAmount, generateDynamicQR, generateStaticQR, init, isHardenedArtifactType, isKnownArtifactType, isPassWithinValidity, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, readTLV, routingHint, signArtifact, signAuthorization, signOAC, signPartnerRequest, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verifyArtifactSignature, verifyArtifactUri, verifyAuthorization, verifyClaimSignature, verifyOAC, verifyPass, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };