@nokinc-flur/sdk 2.2.0 → 2.3.0

package/dist/index.d.ts

@@ -2891,7 +2891,78 @@ declare function createAccountsClient(opts: AccountsClientOptions): AccountsClie
  * Schemas mirror `flur-backend/src/offline-consumer/types.ts`.
  */
 
+/**
+ * Hard upper bound on an account-funded OAC's validity window (24h). The OAC
+ * is a *rolling* 24h credential: a device that comes online at any point
+ * proactively reissues a fresh 24h window, while a device that stays offline
+ * beyond 24h loses spend authority (short TTL is the revocation-propagation
+ * mechanism). The offline verifier rejects any window longer than this.
+ */
 declare const ACCOUNT_FUNDED_OAC_MAX_TTL_MS: number;
+/**
+ * Pinned issuer trust-bundle entry returned by `GET /v1/issuer/keys`. Devices
+ * pin these public keys and verify unified OACs OFFLINE against them — never
+ * against the key embedded in the credential. The shape is a superset of
+ * `TrustedIssuerKey` so it can be passed straight to `verifyOacOffline`.
+ */
+declare const IssuerTrustKeySchema: z.ZodObject<{
+    issuerId: z.ZodString;
+    alg: z.ZodLiteral<"p256">;
+    publicKeySpkiB64: z.ZodString;
+    notBeforeMs: z.ZodOptional<z.ZodNumber>;
+    notAfterMs: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    issuerId: string;
+    alg: "p256";
+    publicKeySpkiB64: string;
+    notBeforeMs?: number | undefined;
+    notAfterMs?: number | undefined;
+}, {
+    issuerId: string;
+    alg: "p256";
+    publicKeySpkiB64: string;
+    notBeforeMs?: number | undefined;
+    notAfterMs?: number | undefined;
+}>;
+type IssuerTrustKey = z.infer<typeof IssuerTrustKeySchema>;
+declare const IssuerTrustBundleSchema: z.ZodObject<{
+    keys: z.ZodArray<z.ZodObject<{
+        issuerId: z.ZodString;
+        alg: z.ZodLiteral<"p256">;
+        publicKeySpkiB64: z.ZodString;
+        notBeforeMs: z.ZodOptional<z.ZodNumber>;
+        notAfterMs: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        issuerId: string;
+        alg: "p256";
+        publicKeySpkiB64: string;
+        notBeforeMs?: number | undefined;
+        notAfterMs?: number | undefined;
+    }, {
+        issuerId: string;
+        alg: "p256";
+        publicKeySpkiB64: string;
+        notBeforeMs?: number | undefined;
+        notAfterMs?: number | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    keys: {
+        issuerId: string;
+        alg: "p256";
+        publicKeySpkiB64: string;
+        notBeforeMs?: number | undefined;
+        notAfterMs?: number | undefined;
+    }[];
+}, {
+    keys: {
+        issuerId: string;
+        alg: "p256";
+        publicKeySpkiB64: string;
+        notBeforeMs?: number | undefined;
+        notAfterMs?: number | undefined;
+    }[];
+}>;
+type IssuerTrustBundle = z.infer<typeof IssuerTrustBundleSchema>;
 /**
  * Counterparty claim-submission grace after `oac.validUntilMs`. Claims
  * signed while the OAC was valid may still be relayed within this window
@@ -2969,9 +3040,9 @@ declare const DeviceKeyRecordSchema: z.ZodObject<{
     id: string;
     createdAtMs: number;
     revokedAtMs: number | null;
+    alg: "p256";
     publicKeySpkiB64: string | null;
     securityLevel: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE" | null;
-    alg: "p256";
     hardwareBacked: boolean;
     attestedAtMs: number | null;
 }, {
@@ -2980,9 +3051,9 @@ declare const DeviceKeyRecordSchema: z.ZodObject<{
     id: string;
     createdAtMs: number;
     revokedAtMs: number | null;
+    alg?: "p256" | undefined;
     publicKeySpkiB64?: string | null | undefined;
     securityLevel?: "STRONGBOX" | "TEE" | "SECURE_ENCLAVE" | "SOFTWARE" | null | undefined;
-    alg?: "p256" | undefined;
     hardwareBacked?: boolean | undefined;
     attestedAtMs?: number | null | undefined;
 }>;
@@ -3001,6 +3072,13 @@ declare const ConsumerOACSchema: z.ZodObject<{
     alg: z.ZodLiteral<"p256">;
     /** P-256 SubjectPublicKeyInfo DER, base64. */
     devicePubkeySpkiB64: z.ZodString;
+    /**
+     * Per-transaction / cumulative offline spend ceilings. Zero is valid and
+     * denotes an identity-only OAC: the credential proves who the holder is and
+     * binds their device key for offline-verifiable first contact, but carries
+     * no offline spend authority (every claim against it routes to REVIEW).
+     * Issued to zero-balance wallets so they can still be paid offline.
+     */
     perTxCapKobo: z.ZodNumber;
     cumulativeCapKobo: z.ZodNumber;
     currency: z.ZodString;
@@ -3008,9 +3086,19 @@ declare const ConsumerOACSchema: z.ZodObject<{
     validUntilMs: z.ZodNumber;
     counterSeed: z.ZodNumber;
     issuedAtMs: z.ZodNumber;
+    /**
+     * Issuer-attested identity folded into the OAC so a single signed
+     * credential serves both Tier B offline-verifiable identity and offline
+     * spend authority. Verified offline against a pinned issuer key; the
+     * backend remains authoritative at settlement.
+     */
+    phoneE164: z.ZodString;
+    displayName: z.ZodString;
 }, "strip", z.ZodTypeAny, {
+    phoneE164: string;
     userId: string;
     deviceId: string;
+    displayName: string;
     currency: string;
     perTxCapKobo: number;
     cumulativeCapKobo: number;
@@ -3023,8 +3111,10 @@ declare const ConsumerOACSchema: z.ZodObject<{
     oacId: string;
     devicePubkeySpkiB64: string;
 }, {
+    phoneE164: string;
     userId: string;
     deviceId: string;
+    displayName: string;
     currency: string;
     perTxCapKobo: number;
     cumulativeCapKobo: number;
@@ -3053,6 +3143,13 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         alg: z.ZodLiteral<"p256">;
         /** P-256 SubjectPublicKeyInfo DER, base64. */
         devicePubkeySpkiB64: z.ZodString;
+        /**
+         * Per-transaction / cumulative offline spend ceilings. Zero is valid and
+         * denotes an identity-only OAC: the credential proves who the holder is and
+         * binds their device key for offline-verifiable first contact, but carries
+         * no offline spend authority (every claim against it routes to REVIEW).
+         * Issued to zero-balance wallets so they can still be paid offline.
+         */
         perTxCapKobo: z.ZodNumber;
         cumulativeCapKobo: z.ZodNumber;
         currency: z.ZodString;
@@ -3060,9 +3157,19 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         validUntilMs: z.ZodNumber;
         counterSeed: z.ZodNumber;
         issuedAtMs: z.ZodNumber;
+        /**
+         * Issuer-attested identity folded into the OAC so a single signed
+         * credential serves both Tier B offline-verifiable identity and offline
+         * spend authority. Verified offline against a pinned issuer key; the
+         * backend remains authoritative at settlement.
+         */
+        phoneE164: z.ZodString;
+        displayName: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3075,8 +3182,10 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
         oacId: string;
         devicePubkeySpkiB64: string;
     }, {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3096,8 +3205,10 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     issuerSig: string;
     oac: {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3114,8 +3225,10 @@ declare const SignedConsumerOACSchema: z.ZodObject<{
 }, {
     issuerSig: string;
     oac: {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3146,6 +3259,13 @@ declare const OACRecordSchema: z.ZodObject<{
         alg: z.ZodLiteral<"p256">;
         /** P-256 SubjectPublicKeyInfo DER, base64. */
         devicePubkeySpkiB64: z.ZodString;
+        /**
+         * Per-transaction / cumulative offline spend ceilings. Zero is valid and
+         * denotes an identity-only OAC: the credential proves who the holder is and
+         * binds their device key for offline-verifiable first contact, but carries
+         * no offline spend authority (every claim against it routes to REVIEW).
+         * Issued to zero-balance wallets so they can still be paid offline.
+         */
         perTxCapKobo: z.ZodNumber;
         cumulativeCapKobo: z.ZodNumber;
         currency: z.ZodString;
@@ -3153,9 +3273,19 @@ declare const OACRecordSchema: z.ZodObject<{
         validUntilMs: z.ZodNumber;
         counterSeed: z.ZodNumber;
         issuedAtMs: z.ZodNumber;
+        /**
+         * Issuer-attested identity folded into the OAC so a single signed
+         * credential serves both Tier B offline-verifiable identity and offline
+         * spend authority. Verified offline against a pinned issuer key; the
+         * backend remains authoritative at settlement.
+         */
+        phoneE164: z.ZodString;
+        displayName: z.ZodString;
     }, "strip", z.ZodTypeAny, {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3168,8 +3298,10 @@ declare const OACRecordSchema: z.ZodObject<{
         oacId: string;
         devicePubkeySpkiB64: string;
     }, {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3196,8 +3328,10 @@ declare const OACRecordSchema: z.ZodObject<{
     issuerSig: string;
     revokedAtMs: number | null;
     oac: {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3218,8 +3352,10 @@ declare const OACRecordSchema: z.ZodObject<{
     issuerSig: string;
     revokedAtMs: number | null;
     oac: {
+        phoneE164: string;
         userId: string;
         deviceId: string;
+        displayName: string;
         currency: string;
         perTxCapKobo: number;
         cumulativeCapKobo: number;
@@ -3279,6 +3415,13 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             alg: z.ZodLiteral<"p256">;
             /** P-256 SubjectPublicKeyInfo DER, base64. */
             devicePubkeySpkiB64: z.ZodString;
+            /**
+             * Per-transaction / cumulative offline spend ceilings. Zero is valid and
+             * denotes an identity-only OAC: the credential proves who the holder is and
+             * binds their device key for offline-verifiable first contact, but carries
+             * no offline spend authority (every claim against it routes to REVIEW).
+             * Issued to zero-balance wallets so they can still be paid offline.
+             */
             perTxCapKobo: z.ZodNumber;
             cumulativeCapKobo: z.ZodNumber;
             currency: z.ZodString;
@@ -3286,9 +3429,19 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             validUntilMs: z.ZodNumber;
             counterSeed: z.ZodNumber;
             issuedAtMs: z.ZodNumber;
+            /**
+             * Issuer-attested identity folded into the OAC so a single signed
+             * credential serves both Tier B offline-verifiable identity and offline
+             * spend authority. Verified offline against a pinned issuer key; the
+             * backend remains authoritative at settlement.
+             */
+            phoneE164: z.ZodString;
+            displayName: z.ZodString;
         }, "strip", z.ZodTypeAny, {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3301,8 +3454,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
             oacId: string;
             devicePubkeySpkiB64: string;
         }, {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3329,8 +3484,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
         issuerSig: string;
         revokedAtMs: number | null;
         oac: {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3351,8 +3508,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
         issuerSig: string;
         revokedAtMs: number | null;
         oac: {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3375,8 +3534,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
         issuerSig: string;
         revokedAtMs: number | null;
         oac: {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3399,8 +3560,10 @@ declare const OfflineStatusResultSchema: z.ZodObject<{
         issuerSig: string;
         revokedAtMs: number | null;
         oac: {
+            phoneE164: string;
             userId: string;
             deviceId: string;
+            displayName: string;
             currency: string;
             perTxCapKobo: number;
             cumulativeCapKobo: number;
@@ -3683,6 +3846,8 @@ type MeOfflineClient = {
     getStatus: (deviceId?: string) => Promise<OfflineStatusResult>;
     submitClaim: (claim: ConsumerPaymentClaim) => Promise<ConsumerSettleResult>;
     getSettlement: (idOrKey: string) => Promise<ConsumerSettlement>;
+    /** Fetch the public pinned issuer trust bundle (`GET /v1/issuer/keys`). */
+    getIssuerKeys: () => Promise<IssuerTrustBundle>;
 };
 declare function createMeOfflineClient(opts: MeOfflineClientOptions): MeOfflineClient;
 
@@ -3939,6 +4104,99 @@ declare function verifyConsumerSettlementReceiptQR(value: string, issuerPublicKe
 declare function decodeConsumerSettlementReceiptQR(value: string): ConsumerSettlement;
 declare function decodeConsumerSettlementReceiptQR(value: string, issuerPublicKeySpkiB64: string): ConsumerSettlement;
 
+/**
+ * Domain tag bound into the OAC issuer signature. MUST match
+ * `OAC_DOMAIN` in `flur-backend/src/offline-consumer/service.ts`.
+ */
+declare const CONSUMER_OAC_DOMAIN: "flur:consumer-offline:v1:oac";
+/**
+ * A pinned issuer key the device trusts for offline OAC verification.
+ * Sourced from the backend Trust Bundle (`GET /v1/issuer/keys`) and cached
+ * on-device. `notBeforeMs` / `notAfterMs` bound the key's own validity so a
+ * rotated-out key cannot be used to verify a freshly minted credential.
+ */
+interface TrustedIssuerKey {
+    issuerId: string;
+    /** Issuer P-256 public key as SubjectPublicKeyInfo DER, base64. */
+    publicKeySpkiB64: string;
+    notBeforeMs?: number;
+    notAfterMs?: number;
+}
+/** Identity surfaced to the caller after a successful offline verify. */
+interface OacOfflineIdentity {
+    oacId: string;
+    issuerId: string;
+    userId: string;
+    phoneE164: string;
+    displayName: string;
+    /** Holder's bound device key; lets the caller verify receipts offline. */
+    devicePubkeySpkiB64: string;
+}
+type VerifyOacOfflineResult = {
+    ok: true;
+    oac: ConsumerOAC;
+    identity: OacOfflineIdentity;
+} | {
+    ok: false;
+    reason: 'malformed' | 'untrusted_issuer' | 'signature_invalid' | 'window_too_long' | 'not_yet_valid' | 'expired';
+};
+interface VerifyOacOfflineOptions {
+    /** Override the wall clock; defaults to `Date.now()`. */
+    nowMs?: number;
+}
+/** Canonical OAC payload (domain-bound) the backend issuer signs. */
+declare function consumerOacSigningPayload(oac: ConsumerOAC): {
+    phoneE164: string;
+    userId: string;
+    deviceId: string;
+    displayName: string;
+    currency: string;
+    perTxCapKobo: number;
+    cumulativeCapKobo: number;
+    validFromMs: number;
+    validUntilMs: number;
+    counterSeed: number;
+    issuedAtMs: number;
+    issuerId: string;
+    alg: "p256";
+    oacId: string;
+    devicePubkeySpkiB64: string;
+    domain: "flur:consumer-offline:v1:oac";
+};
+/**
+ * Verify a signed OAC offline against a pinned set of trusted issuer keys.
+ *
+ * Security invariants:
+ *   - The signature is checked against the PINNED key for `oac.issuerId`,
+ *     never the credential-embedded `issuerPublicKeySpkiB64`. An attacker who
+ *     forges an OAC with their own key (and a matching embedded key) fails
+ *     because their key is not pinned.
+ *   - The pinned key's own validity window is enforced.
+ *   - The OAC validity window is enforced (`validFromMs <= now < validUntilMs`).
+ */
+declare function verifyOacOffline(signed: SignedConsumerOAC, trustedKeys: readonly TrustedIssuerKey[], options?: VerifyOacOfflineOptions): VerifyOacOfflineResult;
+/**
+ * QR prefix for a presented unified OAC. A holder shows this QR to be paid
+ * and/or identified offline; the scanner decodes it and calls
+ * `verifyOacOffline` against its pinned trust bundle. Distinct from the
+ * settlement-receipt (`FLURSR1.`) and pay-card prefixes so the scanner can
+ * dispatch by prefix without ambiguity.
+ */
+declare const CONSUMER_OAC_QR_PREFIX: "FLUROAC1.";
+/** True iff `value` looks like a presented OAC QR payload. */
+declare function isConsumerOacQR(value: string): boolean;
+/**
+ * Encode a signed OAC as a scannable QR payload. The envelope is validated
+ * before encoding so a malformed credential can never be presented.
+ */
+declare function encodeConsumerOacQR(signed: SignedConsumerOAC): string;
+/**
+ * Decode (WITHOUT verifying) a presented OAC QR back into a signed envelope.
+ * The caller MUST pass the result to `verifyOacOffline` against pinned keys
+ * before trusting any field — decoding proves nothing about authenticity.
+ */
+declare function decodeUnverifiedConsumerOacQR(value: string): SignedConsumerOAC;
+
 /**
  * FLURA1 — single-SMS consumer-offline settle token.
  *
@@ -5436,17 +5694,17 @@ declare const ReversalRecordArtifactSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     currency: "NGN";
     amountKobo: number;
+    reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
     reversalId: string;
     originalTxnId: string;
-    reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
     reversedAtMs: number;
     memo?: string | undefined;
 }, {
     currency: "NGN";
     amountKobo: number;
+    reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
     reversalId: string;
     originalTxnId: string;
-    reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
     reversedAtMs: number;
     memo?: string | undefined;
 }>;
@@ -6093,17 +6351,17 @@ declare const ARTIFACT_BODY_SCHEMAS: {
     }, "strip", z.ZodTypeAny, {
         currency: "NGN";
         amountKobo: number;
+        reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
         reversalId: string;
         originalTxnId: string;
-        reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
         reversedAtMs: number;
         memo?: string | undefined;
     }, {
         currency: "NGN";
         amountKobo: number;
+        reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
         reversalId: string;
         originalTxnId: string;
-        reason: "user_dispute" | "fraud" | "duplicate" | "admin_correction" | "other";
         reversedAtMs: number;
         memo?: string | undefined;
     }>;
@@ -6533,4 +6791,4 @@ declare function buildPayCardSigningInput(input: {
     bodyBytes: Uint8Array;
 };
 
-export { ACCOUNT_FUNDED_OAC_MAX_TTL_MS, ACCOUNT_STATUSES, ACCOUNT_TYPES, ADDITIONAL_DATA_SUBFIELD, ARTIFACT_BODY_SCHEMAS, ARTIFACT_TYPES, type Account, type AccountActivityItem, type AccountMembership, AccountMembershipSchema, AccountSchema, type AccountStatus, type AccountSummaryResponse, type AccountType, type AccountsClient, type AccountsClientOptions, type AddMemberInput, type AdditionalData, type ApiCredentialPublic, ApiCredentialPublicSchema, type ApiCredentialsAdminClient, type ArtifactBody, type ArtifactHeader, ArtifactHeaderSchema, type ArtifactType, type AtomicRedeemReceiptInput, type AtomicRedeemResponse, type AttestationSecurityLevel, AttestationSecurityLevelSchema, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, CLAIM_DOMAIN_V2, COLLECTION_INTENT_STATUSES, COLLECTION_PAYMENT_STATUSES, CONSUMER_OFFLINE_CLAIM_SUBMIT_GRACE_MS, CONSUMER_PAYMENT_REQUEST_DOMAIN, CONSUMER_SETTLEMENT_DOMAIN, CONSUMER_SETTLEMENT_RECEIPT_QR_PREFIX, CUSTODIAL_MODES, type CanonicalClaimInput, type CashNamespace, type ClaimSignature, type CollectionIntent, CollectionIntentSchema, type CollectionPayment, type CollectionPaymentResult, CollectionPaymentResultSchema, CollectionPaymentSchema, type CollectionReportSummary, CollectionReportSummarySchema, type CollectionStatement, CollectionStatementSchema, type CollectionsClient, type CollectionsClientOptions, type ConsumerCollectionsClient, type ConsumerOAC, type OACRecord as ConsumerOACRecord, OACRecordSchema as ConsumerOACRecordSchema, ConsumerOACSchema, type ConsumerPaymentClaim, ConsumerPaymentClaimSchema, type ConsumerPaymentRequestEnvelope, ConsumerPaymentRequestEnvelopeSchema, type ConsumerSettleResult, ConsumerSettleResultSchema, type ConsumerSettlement, ConsumerSettlementSchema, type ConsumerWithdrawalsClient, type ConsumerWithdrawalsClientOptions, type CreateBusinessAccountInput, type CreateCollectionIntentInput, CreateCollectionIntentInputSchema, type CreatePayCardArtifactInput, type CreatePayLinkResponse, type CreatePayoutDestinationInput, CreatePayoutDestinationInputSchema, type CreatePayoutInput, CreatePayoutInputSchema, type CreateTransferOptions, type CreateWithdrawalInput, CreateWithdrawalInputSchema, type CreateWithdrawalResult, CreateWithdrawalResultSchema, type CustodialMode, type DecodedArtifactUri, type DecodedOfflineSmsSettleToken, type DecodedPayCard, type DeviceKeyAlg, DeviceKeyAlgSchema, type DeviceKeyRecord, DeviceKeyRecordSchema, type DeviceTrustState, FIELD, FLUR_ARTIFACT_URI_PREFIX, FLUR_ARTIFACT_URI_SCHEME, FLUR_ARTIFACT_VERSION, FlurApiError, FlurArtifactError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurOfflineSettlementsClient, type FlurPartnerClient, type FlurPaymentEvent, FlurReplayError, HARDENED_ARTIFACT_TYPES, type HmacFetchOptions, IdentityArtifactSchema, type IngestFundingResult, IngestFundingResultSchema, type IssueAccountOacInput, IssueAccountOacInputSchema, type IssueOfflineTokenInput, type IssuePassInput, type IssueReceiptInput, LedgerJournalEntryArtifactSchema, type ListPassesInput, type ListPassesResponse, type ListPayoutDestinationsResult, ListPayoutDestinationsResultSchema, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, MEMBERSHIP_ROLES, MERCHANT_PAYOUT_STATUSES, MERCHANT_PROFILE_STATUSES, type MeOfflineClient, type MeOfflineClientOptions, type MembershipRole, type MerchantAccountInfo, type MerchantPayout, MerchantPayoutSchema, type MerchantProfile, MerchantProfileSchema, type MintedApiCredential, MintedApiCredentialSchema, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, NqrPaymentRequestArtifactSchema, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, OFFLINE_CLAIM_SMS_PREFIX, OFFLINE_SMS_SETTLE_DOMAIN, OFFLINE_SMS_SETTLE_HEADER_BYTES, OFFLINE_SMS_SETTLE_PREFIX, OFFLINE_SMS_SETTLE_SIGNATURE_BYTES, OFFLINE_SMS_SETTLE_TOKEN_BYTES, OFFLINE_SMS_SETTLE_VERSION, type OfflineClaimAlgorithm, OfflineClaimArtifactSchema, type OfflineClaimSigner, type OfflinePaymentAuthorization, type OfflinePaymentAuthorizationArtifact, OfflinePaymentAuthorizationArtifactSchema, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OfflineSmsSettleInput, type OfflineSmsSettleSigner, type OfflineStatusResult, OfflineStatusResultSchema, type OfflineToken, OfflineTokenSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, type P256EnrollmentChallengeInput, P256EnrollmentChallengeInputSchema, type P256EnrollmentChallengeResult, P256EnrollmentChallengeResultSchema, PARTNER_FUNDING_DIRECTIONS, PARTNER_FUNDING_STATUSES, PARTNER_KINDS, PARTNER_PROFILE_STATUSES, PARTNER_SCOPES, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, PAYOUT_DESTINATION_STATUSES, PAY_CARD_DEFAULT_TTL_MS, PAY_CARD_REFRESH_THRESHOLD_MS, PAY_CARD_URI_PREFIX, POINT_OF_INITIATION, type ParsedNQR, type PartnerClientOptions, type PartnerCollectionsClient, type PartnerFunding, type PartnerFundingClient, type PartnerFundingDirection, type PartnerFundingEventInput, PartnerFundingEventInputSchema, PartnerFundingSchema, type PartnerFundingStatus, type PartnerKind, type PartnerProfile, type PartnerProfileAdminClient, type PartnerProfileAdminClientOptions, PartnerProfileSchema, type PartnerProfileStatus, type PartnerScope, type PartnerSignResult, type Pass, PassArtifactSchema, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PayCardArtifact, PayCardArtifactSchema, type PayCardFreshness, type PayCollectionInput, PayCollectionInputSchema, type PayCollectionOptions, type PayCollectionResponse, type PaymentClaim, PaymentClaimSchema, PaymentIntentArtifactSchema, type PayoutDestination, PayoutDestinationSchema, type PayoutDestinationStatus, type PayoutEventInput, PayoutEventInputSchema, type PinSetInput, type PinVerifyInput, type ProviderEventInput, ProviderEventInputSchema, type ProviderEventRecord, ProviderEventRecordSchema, type PublicCollectionIntent, PublicCollectionIntentSchema, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptArtifact, ReceiptArtifactSchema, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type ReconciliationReport, ReconciliationReportSchema, type RecordPayoutEventResult, RecordPayoutEventResultSchema, type RedeemPassResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceKeyP256Input, RegisterDeviceKeyP256InputSchema, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolveCollectionOptions, type ResolveCollectionResponse, type ResolvePayLinkResponse, ReversalRecordArtifactSchema, RevokeDeviceKeyInputSchema, type RevokePassInput, type RoutingHint, SETTLEMENT_SCHEDULES, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SettleResponse, SettleResponseSchema, type Settlement, SettlementRecordArtifactSchema, SettlementSchema, type SignedArtifact, type SignedConsumerOAC, SignedConsumerOACSchema, type SignerPublicKey, StatementArtifactSchema, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type UnsignedConsumerPaymentRequest, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, type UpsertMerchantProfileInput, UpsertMerchantProfileInputSchema, type UpsertPartnerProfileInput, UpsertPartnerProfileInputSchema, type VerifiedArtifact, type VerifyArtifactOptions, type VerifyClaimSignatureInput, WITHDRAWAL_STATES, type Withdrawal, WithdrawalSchema, type WithdrawalState, base64UrlDecode, base64UrlEncode, bodySha256Hex, buildArtifactBody, buildAuthorization, buildConsumerPaymentRequest, buildOAC, buildPass, buildPayCardSigningInput, buildPaymentRequest, buildReceipt, buildRedemption, buildSmsSettleHeader, domainTag as buildSmsSettleSignedBytes, canonicalClaimSigningBytes, canonicalClaimSigningPayload, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, computeConsumerClaimEncounterId, computeEncounterId, constantTimeEqual, consumerPaymentRequestSigningBytes, consumerPaymentRequestSigningPayload, consumerSettlementSigningPayload, crc16ccitt, crc16ccittHex, createAccountsClient, createApiCredentialsAdminClient, createArtifactUri, createCollectionsClient, createConsumerCollectionsClient, createConsumerWithdrawalsClient, createFlurPartnerClient, createHmacFetch, createMeOfflineClient, createOfflinePaymentAuthorizationArtifactUri, createOfflineSettlementsClient, createPartnerCollectionsClient, createPartnerFundingClient, createPartnerProfileAdminClient, createPassesClient, createPayCardArtifactUri, createReceiptArtifactUri, createReceiptsClient, createSoftwareP256Signer, decodeArtifactUri, decodeAuthorizationQR, decodeBase45, decodeConsumerSettlementReceiptQR, decodeOfflineClaimSmsMessage, decodeOfflineSmsSettleToken, decodePayCardArtifact, decodePaymentRequestQR, decodeUnverifiedConsumerSettlementReceiptQR, derToRawP256Signature, encodeArtifactUri, encodeAuthorizationQR, encodeBase45, encodeConsumerSettlementReceiptQR, encodeNQR, encodeOfflineClaimSmsMessage, encodeOfflineSmsSettleToken, encodePaymentRequestQR, extractOfflineClaimSmsToken, extractOfflineSmsSettleToken, formatAmount, generateDynamicQR, generateStaticQR, init, inspectPayCardFreshness, isConsumerPaymentRequestExpired, isHardenedArtifactType, isKnownArtifactType, isPassWithinValidity, isPayCardArtifactUri, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, readTLV, routingHint, signArtifact, signAuthorization, signConsumerPaymentRequest, signOAC, signPartnerRequest, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verifyArtifactSignature, verifyArtifactUri, verifyAuthorization, verifyClaimSignature, verifyConsumerPaymentRequest, verifyConsumerSettlement, verifyConsumerSettlementReceiptQR, verifyOAC, verifyOfflineSmsSettleToken, verifyPass, verifyPayCardArtifact, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };
+export { ACCOUNT_FUNDED_OAC_MAX_TTL_MS, ACCOUNT_STATUSES, ACCOUNT_TYPES, ADDITIONAL_DATA_SUBFIELD, ARTIFACT_BODY_SCHEMAS, ARTIFACT_TYPES, type Account, type AccountActivityItem, type AccountMembership, AccountMembershipSchema, AccountSchema, type AccountStatus, type AccountSummaryResponse, type AccountType, type AccountsClient, type AccountsClientOptions, type AddMemberInput, type AdditionalData, type ApiCredentialPublic, ApiCredentialPublicSchema, type ApiCredentialsAdminClient, type ArtifactBody, type ArtifactHeader, ArtifactHeaderSchema, type ArtifactType, type AtomicRedeemReceiptInput, type AtomicRedeemResponse, type AttestationSecurityLevel, AttestationSecurityLevelSchema, type AuthLogoutInput, type AuthRefreshInput, type AuthRefreshResponse, type AuthorizeSendWithBiometricInput, type AuthorizedOptions, type BiometricSigner, type BuildPassInput, type BuildReceiptInput, type BuildRedemptionInput, CLAIM_DOMAIN_V2, COLLECTION_INTENT_STATUSES, COLLECTION_PAYMENT_STATUSES, CONSUMER_OAC_DOMAIN, CONSUMER_OAC_QR_PREFIX, CONSUMER_OFFLINE_CLAIM_SUBMIT_GRACE_MS, CONSUMER_PAYMENT_REQUEST_DOMAIN, CONSUMER_SETTLEMENT_DOMAIN, CONSUMER_SETTLEMENT_RECEIPT_QR_PREFIX, CUSTODIAL_MODES, type CanonicalClaimInput, type CashNamespace, type ClaimSignature, type CollectionIntent, CollectionIntentSchema, type CollectionPayment, type CollectionPaymentResult, CollectionPaymentResultSchema, CollectionPaymentSchema, type CollectionReportSummary, CollectionReportSummarySchema, type CollectionStatement, CollectionStatementSchema, type CollectionsClient, type CollectionsClientOptions, type ConsumerCollectionsClient, type ConsumerOAC, type OACRecord as ConsumerOACRecord, OACRecordSchema as ConsumerOACRecordSchema, ConsumerOACSchema, type ConsumerPaymentClaim, ConsumerPaymentClaimSchema, type ConsumerPaymentRequestEnvelope, ConsumerPaymentRequestEnvelopeSchema, type ConsumerSettleResult, ConsumerSettleResultSchema, type ConsumerSettlement, ConsumerSettlementSchema, type ConsumerWithdrawalsClient, type ConsumerWithdrawalsClientOptions, type CreateBusinessAccountInput, type CreateCollectionIntentInput, CreateCollectionIntentInputSchema, type CreatePayCardArtifactInput, type CreatePayLinkResponse, type CreatePayoutDestinationInput, CreatePayoutDestinationInputSchema, type CreatePayoutInput, CreatePayoutInputSchema, type CreateTransferOptions, type CreateWithdrawalInput, CreateWithdrawalInputSchema, type CreateWithdrawalResult, CreateWithdrawalResultSchema, type CustodialMode, type DecodedArtifactUri, type DecodedOfflineSmsSettleToken, type DecodedPayCard, type DeviceKeyAlg, DeviceKeyAlgSchema, type DeviceKeyRecord, DeviceKeyRecordSchema, type DeviceTrustState, FIELD, FLUR_ARTIFACT_URI_PREFIX, FLUR_ARTIFACT_URI_SCHEME, FLUR_ARTIFACT_VERSION, FlurApiError, FlurArtifactError, FlurCapExceededError, FlurClient, type FlurClientOptions, FlurError, type FlurErrorCode, FlurExpiredError, type FlurHandle, type FlurInitOptions, type FlurOfflineSettlementsClient, type FlurPartnerClient, type FlurPaymentEvent, FlurReplayError, HARDENED_ARTIFACT_TYPES, type HmacFetchOptions, IdentityArtifactSchema, type IngestFundingResult, IngestFundingResultSchema, type IssueAccountOacInput, IssueAccountOacInputSchema, type IssueOfflineTokenInput, type IssuePassInput, type IssueReceiptInput, type IssuerTrustBundle, IssuerTrustBundleSchema, type IssuerTrustKey, IssuerTrustKeySchema, LedgerJournalEntryArtifactSchema, type ListPassesInput, type ListPassesResponse, type ListPayoutDestinationsResult, ListPayoutDestinationsResultSchema, type ListReceiptsInput, type ListReceiptsResponse, type ListTransactionsOptions, MEMBERSHIP_ROLES, MERCHANT_PAYOUT_STATUSES, MERCHANT_PROFILE_STATUSES, type MeOfflineClient, type MeOfflineClientOptions, type MembershipRole, type MerchantAccountInfo, type MerchantPayout, MerchantPayoutSchema, type MerchantProfile, MerchantProfileSchema, type MintedApiCredential, MintedApiCredentialSchema, type Money, NGN_CURRENCY_CODE, NG_COUNTRY_CODE, NQRParseError, type NQRPayloadInput, NqrPaymentRequestArtifactSchema, type OAC, OACSchema, OAC_DEFAULT_CUMULATIVE_KOBO, OAC_DEFAULT_PER_TX_KOBO, OAC_DEFAULT_VALIDITY_MS, OFFLINE_CLAIM_SMS_PREFIX, OFFLINE_SMS_SETTLE_DOMAIN, OFFLINE_SMS_SETTLE_HEADER_BYTES, OFFLINE_SMS_SETTLE_PREFIX, OFFLINE_SMS_SETTLE_SIGNATURE_BYTES, OFFLINE_SMS_SETTLE_TOKEN_BYTES, OFFLINE_SMS_SETTLE_VERSION, type OacOfflineIdentity, type OfflineClaimAlgorithm, OfflineClaimArtifactSchema, type OfflineClaimSigner, type OfflinePaymentAuthorization, type OfflinePaymentAuthorizationArtifact, OfflinePaymentAuthorizationArtifactSchema, OfflinePaymentAuthorizationSchema, type OfflinePaymentRequest, OfflinePaymentRequestSchema, type OfflineSmsSettleInput, type OfflineSmsSettleSigner, type OfflineStatusResult, OfflineStatusResultSchema, type OfflineToken, OfflineTokenSchema, type OnboardingCompleteInput, type OnboardingCompleteResponse, type OnboardingFallback, type OnboardingRiskReason, type OnboardingStartInput, type OnboardingStartResponse, type P256EnrollmentChallengeInput, P256EnrollmentChallengeInputSchema, type P256EnrollmentChallengeResult, P256EnrollmentChallengeResultSchema, PARTNER_FUNDING_DIRECTIONS, PARTNER_FUNDING_STATUSES, PARTNER_KINDS, PARTNER_PROFILE_STATUSES, PARTNER_SCOPES, PASS_KINDS, PASS_STATES, PAYLOAD_FORMAT_INDICATOR_VALUE, PAYOUT_DESTINATION_STATUSES, PAY_CARD_DEFAULT_TTL_MS, PAY_CARD_REFRESH_THRESHOLD_MS, PAY_CARD_URI_PREFIX, POINT_OF_INITIATION, type ParsedNQR, type PartnerClientOptions, type PartnerCollectionsClient, type PartnerFunding, type PartnerFundingClient, type PartnerFundingDirection, type PartnerFundingEventInput, PartnerFundingEventInputSchema, PartnerFundingSchema, type PartnerFundingStatus, type PartnerKind, type PartnerProfile, type PartnerProfileAdminClient, type PartnerProfileAdminClientOptions, PartnerProfileSchema, type PartnerProfileStatus, type PartnerScope, type PartnerSignResult, type Pass, PassArtifactSchema, type PassKind, type PassMetadata, PassMetadataSchema, PassSchema, type PassState, type PassesClient, type PassesClientOptions, type PayCardArtifact, PayCardArtifactSchema, type PayCardFreshness, type PayCollectionInput, PayCollectionInputSchema, type PayCollectionOptions, type PayCollectionResponse, type PaymentClaim, PaymentClaimSchema, PaymentIntentArtifactSchema, type PayoutDestination, PayoutDestinationSchema, type PayoutDestinationStatus, type PayoutEventInput, PayoutEventInputSchema, type PinSetInput, type PinVerifyInput, type ProviderEventInput, ProviderEventInputSchema, type ProviderEventRecord, ProviderEventRecordSchema, type PublicCollectionIntent, PublicCollectionIntentSchema, type PushPlatform, type PushRegisterInput, RECEIPT_CHANNELS, RECEIPT_KINDS, REPLAY_WINDOW_MS, type Receipt, type ReceiptArtifact, ReceiptArtifactSchema, type ReceiptChannel, type ReceiptKind, type ReceiptPayload, ReceiptPayloadSchema, ReceiptSchema, type ReceiptsClient, type ReceiptsClientOptions, type RecipientResolveInput, type RecipientResolveResponse, type ReconciliationReport, ReconciliationReportSchema, type RecordPayoutEventResult, RecordPayoutEventResultSchema, type RedeemPassResponse, type Redemption, RedemptionSchema, type RegisterDeviceInput, type RegisterDeviceKeyP256Input, RegisterDeviceKeyP256InputSchema, type RegisterDeviceResponse, type RegisterSendDeviceKeyInput, type ResolveCollectionOptions, type ResolveCollectionResponse, type ResolvePayLinkResponse, ReversalRecordArtifactSchema, RevokeDeviceKeyInputSchema, type RevokePassInput, type RoutingHint, SETTLEMENT_SCHEDULES, type SendChallengeInput, type SendChallengeResponse, type SendMoneyInput, type SendMoneyOptions, type SendVerifyInput, type SendVerifyResponse, type SettleResponse, SettleResponseSchema, type Settlement, SettlementRecordArtifactSchema, SettlementSchema, type SignedArtifact, type SignedConsumerOAC, SignedConsumerOACSchema, type SignerPublicKey, StatementArtifactSchema, type SubscribeOptions, type TLVField, type TransactionDetailResponse, type TransactionDirection, type TransactionsListResponse, type TransferInput, type TransferResponse, type TransferStatus, type TrustedIssuerKey, type UnsignedConsumerPaymentRequest, type UnsignedOAC, type UnsignedOfflinePaymentAuthorization, type UnsignedOfflinePaymentRequest, type UnsignedPass, type UnsignedReceipt, type UnsignedRedemption, type UpsertMerchantProfileInput, UpsertMerchantProfileInputSchema, type UpsertPartnerProfileInput, UpsertPartnerProfileInputSchema, type VerifiedArtifact, type VerifyArtifactOptions, type VerifyClaimSignatureInput, type VerifyOacOfflineOptions, type VerifyOacOfflineResult, WITHDRAWAL_STATES, type Withdrawal, WithdrawalSchema, type WithdrawalState, base64UrlDecode, base64UrlEncode, bodySha256Hex, buildArtifactBody, buildAuthorization, buildConsumerPaymentRequest, buildOAC, buildPass, buildPayCardSigningInput, buildPaymentRequest, buildReceipt, buildRedemption, buildSmsSettleHeader, domainTag as buildSmsSettleSignedBytes, canonicalClaimSigningBytes, canonicalClaimSigningPayload, canonicalJSONBytes, canonicalJSONStringify, canonicalRequestString, computeConsumerClaimEncounterId, computeEncounterId, constantTimeEqual, consumerOacSigningPayload, consumerPaymentRequestSigningBytes, consumerPaymentRequestSigningPayload, consumerSettlementSigningPayload, crc16ccitt, crc16ccittHex, createAccountsClient, createApiCredentialsAdminClient, createArtifactUri, createCollectionsClient, createConsumerCollectionsClient, createConsumerWithdrawalsClient, createFlurPartnerClient, createHmacFetch, createMeOfflineClient, createOfflinePaymentAuthorizationArtifactUri, createOfflineSettlementsClient, createPartnerCollectionsClient, createPartnerFundingClient, createPartnerProfileAdminClient, createPassesClient, createPayCardArtifactUri, createReceiptArtifactUri, createReceiptsClient, createSoftwareP256Signer, decodeArtifactUri, decodeAuthorizationQR, decodeBase45, decodeConsumerSettlementReceiptQR, decodeOfflineClaimSmsMessage, decodeOfflineSmsSettleToken, decodePayCardArtifact, decodePaymentRequestQR, decodeUnverifiedConsumerOacQR, decodeUnverifiedConsumerSettlementReceiptQR, derToRawP256Signature, encodeArtifactUri, encodeAuthorizationQR, encodeBase45, encodeConsumerOacQR, encodeConsumerSettlementReceiptQR, encodeNQR, encodeOfflineClaimSmsMessage, encodeOfflineSmsSettleToken, encodePaymentRequestQR, extractOfflineClaimSmsToken, extractOfflineSmsSettleToken, formatAmount, generateDynamicQR, generateStaticQR, init, inspectPayCardFreshness, isConsumerOacQR, isConsumerPaymentRequestExpired, isHardenedArtifactType, isKnownArtifactType, isPassWithinValidity, isPayCardArtifactUri, moneyMinorToNumber, normalizeE164, parseAmountInput, parseNQR, parseQR, readTLV, routingHint, signArtifact, signAuthorization, signConsumerPaymentRequest, signOAC, signPartnerRequest, signPass, signPaymentRequest, signReceipt, signRedemption, signRequestHMAC, verifyArtifactSignature, verifyArtifactUri, verifyAuthorization, verifyClaimSignature, verifyConsumerPaymentRequest, verifyConsumerSettlement, verifyConsumerSettlementReceiptQR, verifyOAC, verifyOacOffline, verifyOfflineSmsSettleToken, verifyPass, verifyPayCardArtifact, verifyPaymentRequest, verifyReceipt, verifyRedemption, verifyRequestHMAC, writeTLV };