@seedhape/core 0.1.0

package/dist/ap2/official.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Official AP2 v0.2 credential primitives.
+ *
+ * AP2 uses SD-JWT VCs. This module deliberately does not expose the legacy
+ * EIP-712 IntentMandate representation. It signs AP2's versioned open/closed
+ * Checkout and Payment Mandates and verifies their selective disclosures.
+ */
+import { type JWK, type CryptoKey } from "jose";
+import type { IntentMandate } from "../types.js";
+export declare const AP2_VCT: {
+    readonly checkoutOpen: "mandate.checkout.open.1";
+    readonly checkout: "mandate.checkout.1";
+    readonly paymentOpen: "mandate.payment.open.1";
+    readonly payment: "mandate.payment.1";
+    readonly checkoutReceipt: "receipt.checkout.1";
+    readonly paymentReceipt: "receipt.payment.1";
+};
+export type Ap2Vct = typeof AP2_VCT[keyof typeof AP2_VCT];
+export type Ap2KeyPair = {
+    privateKey: CryptoKey;
+    publicJwk: JWK;
+};
+export interface Ap2SignerConfig {
+    issuer: string;
+    privateKey: CryptoKey;
+    publicJwk: JWK;
+    keyId?: string;
+}
+export interface Ap2SdJwt {
+    token: string;
+    issuerJwt: string;
+    disclosures: string[];
+    payload: Record<string, unknown>;
+}
+export interface Ap2MandateContext {
+    issuer: string;
+    subject: string;
+    agentPublicJwk: JWK;
+    expiresAt: number;
+    claims: Record<string, unknown>;
+}
+export declare function importAp2PrivateKey(pkcs8: string): Promise<CryptoKey>;
+export declare function importAp2PublicKey(jwk: JWK): Promise<CryptoKey>;
+/** Issue an AP2 SD-JWT with all application claims selectively disclosed. */
+export declare function issueAp2SdJwt(input: {
+    vct: Ap2Vct;
+    issuer: string;
+    subject?: string;
+    privateKey: CryptoKey;
+    publicJwk: JWK;
+    claims: Record<string, unknown>;
+    expiresAt: number;
+    keyId?: string;
+}): Promise<Ap2SdJwt>;
+/** Verify the issuer signature and every disclosed digest in an AP2 SD-JWT. */
+export declare function verifyAp2SdJwt(token: string, publicKey: CryptoKey, expectedVct?: Ap2Vct): Promise<Record<string, unknown>>;
+export declare function hashAp2Token(token: string): Promise<string>;
+/** Sign the merchant's AP2 Checkout JWT returned with an x402 challenge. */
+export declare function issueAp2CheckoutJwt(input: {
+    issuer: string;
+    subject?: string;
+    checkout: Record<string, unknown>;
+    privateKey: CryptoKey;
+    keyId?: string;
+    expiresAt: number;
+}): Promise<string>;
+export declare function issueClosedAp2MandateBundle(input: {
+    open: Ap2OpenMandateBundle;
+    checkoutJwt: string;
+    amount: bigint;
+    decimals: number;
+    currency: string;
+    payee: {
+        id: string;
+        name: string;
+        website: string;
+        payTo: string;
+    };
+    paymentInstrument: {
+        id: string;
+        type: string;
+        description: string;
+    };
+    issuer: string;
+    privateKey: CryptoKey;
+    publicJwk: JWK;
+    keyId?: string;
+    expiresAt: number;
+}): Promise<{
+    checkout: Ap2SdJwt;
+    payment: Ap2SdJwt;
+    checkoutHash: string;
+    paymentHash: string;
+}>;
+export interface Ap2OpenCheckoutClaims {
+    constraints: Array<Record<string, unknown>>;
+}
+export interface Ap2OpenPaymentClaims {
+    constraints: Array<Record<string, unknown>>;
+}
+export interface Ap2ClosedCheckoutClaims {
+    checkout_jwt: string;
+    checkout_hash: string;
+    open_checkout_hash: string;
+}
+export interface Ap2ClosedPaymentClaims {
+    transaction_id: string;
+    open_payment_hash: string;
+    payment_amount: {
+        amount: number;
+        currency: string;
+    };
+    payee: Record<string, unknown>;
+    payment_instrument: Record<string, unknown>;
+}
+export interface Ap2Receipt {
+    vct: typeof AP2_VCT.checkoutReceipt | typeof AP2_VCT.paymentReceipt;
+    reference: string;
+    status: "approved" | "rejected";
+    error?: {
+        code: string;
+        message: string;
+    };
+    transaction_id?: string;
+}
+export interface Ap2OpenMandateBundle {
+    checkout: Ap2SdJwt;
+    payment: Ap2SdJwt;
+    issuer: string;
+    issuedAt: number;
+    expiresAt: number;
+}
+/**
+ * Creates the user-authorized open mandates for Seedhape's single-merchant
+ * autonomous demo. The later purchase step closes these against a merchant
+ * Checkout JWT and a concrete x402 amount.
+ */
+export declare function issueOpenAp2MandateBundle(input: {
+    mandate: IntentMandate;
+    issuer: string;
+    privateKey: CryptoKey;
+    publicJwk: JWK;
+    merchant: {
+        id: string;
+        name: string;
+        website: string;
+        payTo: string;
+    };
+    instrument: {
+        id: string;
+        type: string;
+        description: string;
+    };
+    keyId?: string;
+}): Promise<Ap2OpenMandateBundle>;
+//# sourceMappingURL=official.d.ts.map

package/dist/ap2/official.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"official.d.ts","sourceRoot":"","sources":["../../src/ap2/official.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAML,KAAK,GAAG,EACR,KAAK,SAAS,EACf,MAAM,MAAM,CAAC;AACd,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,OAAO;;;;;;;CAOV,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAAE,CAAC;AACnE,MAAM,WAAW,eAAe;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAE1G,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,GAAG,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAgCD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAE3E;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAErE;AAED,6EAA6E;AAC7E,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqBpB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,SAAS,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAsBlC;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjE;AAED,4EAA4E;AAC5E,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,IAAI,EAAE,oBAAoB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,iBAAiB,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,GAAG,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CA+DhG;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,OAAO,OAAO,CAAC,eAAe,GAAG,OAAO,OAAO,CAAC,cAAc,CAAC;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,GAAG,CAAC;IACf,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsChC"}

package/dist/ap2/official.js

@@ -0,0 +1,222 @@
+/**
+ * Official AP2 v0.2 credential primitives.
+ *
+ * AP2 uses SD-JWT VCs. This module deliberately does not expose the legacy
+ * EIP-712 IntentMandate representation. It signs AP2's versioned open/closed
+ * Checkout and Payment Mandates and verifies their selective disclosures.
+ */
+import { base64url, importJWK, importPKCS8, jwtVerify, SignJWT, } from "jose";
+export const AP2_VCT = {
+    checkoutOpen: "mandate.checkout.open.1",
+    checkout: "mandate.checkout.1",
+    paymentOpen: "mandate.payment.open.1",
+    payment: "mandate.payment.1",
+    checkoutReceipt: "receipt.checkout.1",
+    paymentReceipt: "receipt.payment.1",
+};
+const encoder = new TextEncoder();
+async function digest(value) {
+    const bytes = await globalThis.crypto.subtle.digest("SHA-256", encoder.encode(value));
+    return base64url.encode(new Uint8Array(bytes));
+}
+function disclosure(salt, key, value) {
+    return base64url.encode(encoder.encode(JSON.stringify([salt, key, value])));
+}
+function decodeDisclosure(value) {
+    const decoded = new TextDecoder().decode(base64url.decode(value));
+    const parsed = JSON.parse(decoded);
+    if (!Array.isArray(parsed) || parsed.length !== 3 || typeof parsed[0] !== "string" || typeof parsed[1] !== "string") {
+        throw new Error("Invalid AP2 SD-JWT disclosure.");
+    }
+    return parsed;
+}
+function constraintList(payload) {
+    return Array.isArray(payload.constraints)
+        ? payload.constraints.filter((item) => Boolean(item) && typeof item === "object")
+        : [];
+}
+function sameIdentity(expected, actual) {
+    return ["id", "name", "website", "payTo", "type", "description"].every((key) => expected[key] === undefined || expected[key] === actual[key]);
+}
+export async function importAp2PrivateKey(pkcs8) {
+    return importPKCS8(pkcs8.replace(/\\n/g, "\n"), "ES256", { extractable: true });
+}
+export async function importAp2PublicKey(jwk) {
+    return importJWK(jwk, "ES256");
+}
+/** Issue an AP2 SD-JWT with all application claims selectively disclosed. */
+export async function issueAp2SdJwt(input) {
+    const reserved = new Set(["iss", "sub", "vct", "iat", "exp", "cnf", "_sd", "_sd_alg"]);
+    if (Object.keys(input.claims).some((key) => reserved.has(key)))
+        throw new Error("AP2 claims cannot overwrite reserved credential fields.");
+    const disclosures = Object.entries(input.claims).map(([key, value], index) => disclosure(`${Date.now().toString(36)}-${index}-${crypto.randomUUID()}`, key, value));
+    const digests = await Promise.all(disclosures.map(digest));
+    const now = Math.floor(Date.now() / 1000);
+    const payload = {
+        iss: input.issuer,
+        vct: input.vct,
+        iat: now,
+        exp: input.expiresAt,
+        _sd_alg: "sha-256",
+        _sd: digests,
+        cnf: { jwk: input.publicJwk },
+        ...(input.subject ? { sub: input.subject } : {}),
+    };
+    const issuerJwt = await new SignJWT(payload)
+        .setProtectedHeader({ alg: "ES256", typ: "vc+sd-jwt", kid: input.keyId })
+        .sign(input.privateKey);
+    return { token: `${issuerJwt}~${disclosures.join("~")}~`, issuerJwt, disclosures, payload };
+}
+/** Verify the issuer signature and every disclosed digest in an AP2 SD-JWT. */
+export async function verifyAp2SdJwt(token, publicKey, expectedVct) {
+    const [issuerJwt, ...parts] = token.split("~");
+    const disclosures = parts.filter(Boolean);
+    const result = await jwtVerify(issuerJwt, publicKey, { algorithms: ["ES256"] });
+    const payload = result.payload;
+    if (expectedVct && payload.vct !== expectedVct)
+        throw new Error(`Unexpected AP2 vct: ${String(payload.vct)}`);
+    if (payload._sd_alg !== "sha-256" || !Array.isArray(payload._sd))
+        throw new Error("Invalid AP2 SD-JWT disclosure metadata.");
+    const expected = new Set(payload._sd.filter((item) => typeof item === "string"));
+    if (expected.size !== payload._sd.length)
+        throw new Error("Invalid AP2 SD-JWT disclosure metadata.");
+    const disclosed = { ...payload };
+    const seenDigests = new Set();
+    const seenKeys = new Set();
+    for (const item of disclosures) {
+        const itemDigest = await digest(item);
+        if (!expected.has(itemDigest) || seenDigests.has(itemDigest))
+            throw new Error("AP2 disclosure digest mismatch.");
+        const [, key, value] = decodeDisclosure(item);
+        if (seenKeys.has(key) || Object.prototype.hasOwnProperty.call(payload, key))
+            throw new Error("AP2 disclosure claim is duplicated.");
+        seenDigests.add(itemDigest);
+        seenKeys.add(key);
+        disclosed[key] = value;
+    }
+    return disclosed;
+}
+export async function hashAp2Token(token) {
+    return digest(token);
+}
+/** Sign the merchant's AP2 Checkout JWT returned with an x402 challenge. */
+export async function issueAp2CheckoutJwt(input) {
+    const jwt = new SignJWT(input.checkout)
+        .setProtectedHeader({ alg: "ES256", typ: "JWT", kid: input.keyId })
+        .setIssuer(input.issuer)
+        .setIssuedAt()
+        .setExpirationTime(input.expiresAt);
+    if (input.subject)
+        jwt.setSubject(input.subject);
+    return jwt.sign(input.privateKey);
+}
+export async function issueClosedAp2MandateBundle(input) {
+    if (input.amount <= 0n || !Number.isSafeInteger(input.decimals) || input.decimals < 0 || input.decimals > 18 || !input.currency.trim()) {
+        throw new Error("AP2 closed mandate amount, decimals, and currency are invalid.");
+    }
+    const openCheckout = input.open.checkout.payload;
+    const openPayment = input.open.payment.payload;
+    const openSubject = typeof openCheckout.sub === "string" ? openCheckout.sub : undefined;
+    if (input.open.issuer !== input.issuer || openCheckout.iss !== input.issuer || openPayment.iss !== input.issuer) {
+        throw new Error("AP2 closed mandates must use the open mandate issuer.");
+    }
+    if (!openSubject || openPayment.sub !== openSubject) {
+        throw new Error("AP2 open checkout and payment mandates must have the same subject.");
+    }
+    if (input.expiresAt > input.open.expiresAt || input.expiresAt > Number(openCheckout.exp ?? 0) || input.expiresAt > Number(openPayment.exp ?? 0)) {
+        throw new Error("AP2 closed mandates cannot outlive the open mandate.");
+    }
+    const amount = Number(input.amount) / 10 ** input.decimals;
+    for (const constraint of constraintList(openPayment)) {
+        if (constraint.type === "payment.amount_range") {
+            if ((typeof constraint.min === "number" && (!Number.isFinite(amount) || amount < constraint.min)) || (typeof constraint.max === "number" && (!Number.isFinite(amount) || amount > constraint.max)) || typeof constraint.currency === "string" && constraint.currency !== input.currency) {
+                throw new Error("AP2 payment exceeds the open mandate amount constraint.");
+            }
+        }
+        if (constraint.type === "payment.allowed_payees" && Array.isArray(constraint.allowed) && !constraint.allowed.some((item) => Boolean(item) && typeof item === "object" && sameIdentity(item, input.payee))) {
+            throw new Error("AP2 payee is not authorized by the open mandate.");
+        }
+        if (constraint.type === "payment.allowed_payment_instruments" && Array.isArray(constraint.allowed) && !constraint.allowed.some((item) => Boolean(item) && typeof item === "object" && sameIdentity(item, input.paymentInstrument))) {
+            throw new Error("AP2 payment instrument is not authorized by the open mandate.");
+        }
+    }
+    for (const constraint of constraintList(openCheckout)) {
+        if (constraint.type === "checkout.allowed_merchants" && Array.isArray(constraint.allowed) && !constraint.allowed.some((item) => Boolean(item) && typeof item === "object" && sameIdentity(item, input.payee))) {
+            throw new Error("AP2 merchant is not authorized by the open checkout mandate.");
+        }
+    }
+    const checkoutHash = await hashAp2Token(input.checkoutJwt);
+    const openCheckoutHash = await hashAp2Token(input.open.checkout.token);
+    const openPaymentHash = await hashAp2Token(input.open.payment.token);
+    const checkout = await issueAp2SdJwt({
+        vct: AP2_VCT.checkout,
+        issuer: input.issuer,
+        privateKey: input.privateKey,
+        publicJwk: input.publicJwk,
+        expiresAt: input.expiresAt,
+        keyId: input.keyId,
+        claims: { checkout_jwt: input.checkoutJwt, checkout_hash: checkoutHash, open_checkout_hash: openCheckoutHash },
+    });
+    const payment = await issueAp2SdJwt({
+        vct: AP2_VCT.payment,
+        issuer: input.issuer,
+        privateKey: input.privateKey,
+        publicJwk: input.publicJwk,
+        expiresAt: input.expiresAt,
+        keyId: input.keyId,
+        claims: {
+            transaction_id: checkoutHash,
+            open_payment_hash: openPaymentHash,
+            payment_amount: { amount: Number(input.amount) / 10 ** input.decimals, currency: input.currency },
+            payee: input.payee,
+            payment_instrument: input.paymentInstrument,
+        },
+    });
+    return { checkout, payment, checkoutHash, paymentHash: await hashAp2Token(payment.token) };
+}
+/**
+ * Creates the user-authorized open mandates for Seedhape's single-merchant
+ * autonomous demo. The later purchase step closes these against a merchant
+ * Checkout JWT and a concrete x402 amount.
+ */
+export async function issueOpenAp2MandateBundle(input) {
+    if (!input.merchant.payTo.trim())
+        throw new Error("AP2 merchant payout address is required.");
+    const now = Math.floor(Date.now() / 1000);
+    const expiresAt = input.mandate.expiry;
+    const merchant = { id: input.merchant.id, name: input.merchant.name, website: input.merchant.website, payTo: input.merchant.payTo };
+    const checkout = await issueAp2SdJwt({
+        vct: AP2_VCT.checkoutOpen,
+        issuer: input.issuer,
+        subject: input.mandate.subject,
+        privateKey: input.privateKey,
+        publicJwk: input.publicJwk,
+        expiresAt,
+        keyId: input.keyId,
+        claims: {
+            constraints: [
+                { type: "checkout.allowed_merchants", allowed: [merchant] },
+            ],
+        },
+    });
+    const payment = await issueAp2SdJwt({
+        vct: AP2_VCT.paymentOpen,
+        issuer: input.issuer,
+        subject: input.mandate.subject,
+        privateKey: input.privateKey,
+        publicJwk: input.publicJwk,
+        expiresAt,
+        keyId: input.keyId,
+        claims: {
+            constraints: [
+                { type: "payment.amount_range", min: 0, max: Number(input.mandate.maxPerTransaction) / 10 ** input.mandate.asset.decimals, currency: input.mandate.asset.symbol },
+                { type: "payment.budget", max: Number(input.mandate.maxPerPeriod) / 10 ** input.mandate.asset.decimals, currency: input.mandate.asset.symbol },
+                { type: "payment.agent_recurrence", frequency: "DAILY", max_occurrences: input.mandate.maxTxPerPeriod },
+                { type: "payment.allowed_payees", allowed: [merchant] },
+                { type: "payment.allowed_payment_instruments", allowed: [input.instrument] },
+            ],
+        },
+    });
+    return { checkout, payment, issuer: input.issuer, issuedAt: now, expiresAt };
+}
+//# sourceMappingURL=official.js.map

package/dist/ap2/official.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"official.js","sourceRoot":"","sources":["../../src/ap2/official.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,OAAO,GAGR,MAAM,MAAM,CAAC;AAGd,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,YAAY,EAAE,yBAAyB;IACvC,QAAQ,EAAE,oBAAoB;IAC9B,WAAW,EAAE,wBAAwB;IACrC,OAAO,EAAE,mBAAmB;IAC5B,eAAe,EAAE,oBAAoB;IACrC,cAAc,EAAE,mBAAmB;CAC3B,CAAC;AAqBX,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,KAAK,UAAU,MAAM,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW,EAAE,KAAc;IAC3D,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACpH,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAmC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QAClH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,YAAY,CAAC,QAAiC,EAAE,MAA+B;IACtF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAChJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAa;IACrD,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAQ;IAC/C,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,CAAuB,CAAC;AACvD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KASnC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC3I,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAC3E,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,KAAK,CAAC,MAAM;QACjB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,OAAO,EAAE,SAAS;QAClB,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE;QAC7B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;SACzC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SACxE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAC9F,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,SAAoB,EACpB,WAAoB;IAEpB,MAAM,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,SAAS,CAA0B,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9G,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;IACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrG,MAAM,SAAS,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjH,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACpI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAOzC;IACC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;SACpC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SAClE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;SACvB,WAAW,EAAE;SACb,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO;QAAE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAajD;IACC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACvI,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;QAChJ,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC;IAC3D,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,IAAI,UAAU,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxR,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,wBAAwB,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAA+B,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrO,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,qCAAqC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAA+B,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;YAC9P,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAA+B,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzO,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,GAAG,EAAE,OAAO,CAAC,QAAQ;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE;KAC/G,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,OAAO;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE;YACN,cAAc,EAAE,YAAY;YAC5B,iBAAiB,EAAE,eAAe;YAClC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YACjG,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;SAC5C;KACF,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAwCD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAQ/C;IACC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpI,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;QACnC,GAAG,EAAE,OAAO,CAAC,YAAY;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE;YACN,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;aAC5D;SACF;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,WAAW;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE;YACN,WAAW,EAAE;gBACX,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;gBACjK,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC9I,EAAE,IAAI,EAAE,0BAA0B,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE;gBACvG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;gBACvD,EAAE,IAAI,EAAE,qCAAqC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;aAC7E;SACF;KACF,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC/E,CAAC"}

package/dist/ap2/policy.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The policy engine. This is the single chokepoint every payment passes
+ * through before a signature is produced.
+ *
+ * Design note: off-chain policy is defence in depth, NOT the security boundary.
+ * The hard cap must also exist on-chain as a spend permission on the smart
+ * account (see wallet/spendPermission.ts). If this process is compromised, the
+ * on-chain limit is what actually stops the bleeding. Everything here is about
+ * catching the far more common case: an agent that has been talked into
+ * spending badly by content it read.
+ */
+import type { IntentMandate, PolicyDecision, SignedIntentMandate, SpendRecord } from "../types.js";
+export interface PaymentCandidate {
+    resource: string;
+    host: string;
+    payTo: string;
+    amount: bigint;
+    assetAddress: string;
+    network: string;
+}
+export interface PolicyContext {
+    now: number;
+    /** Settled + pending spends under this intent, newest first. */
+    history: SpendRecord[];
+    /**
+     * Median historical price paid for this exact resource, if known.
+     * Undefined for a first-time resource.
+     */
+    medianPriceForResource?: bigint;
+    /**
+     * Median price across ALL of this user's settled payments.
+     *
+     * This exists because the per-resource median cannot fire on a resource the
+     * user has never paid before — which is precisely the prompt-injection shape:
+     * an agent reads a page that tells it to fetch some new expensive URL. A
+     * payment thirty times the user's typical spend deserves a look even if it
+     * fits under the per-transaction cap.
+     */
+    medianPriceOverall?: bigint;
+    /** Hosts the user has knowingly transacted with before. */
+    knownHosts: Set<string>;
+}
+export interface PolicyOptions {
+    /**
+     * Flag (do not block) a payment more than this multiple above the median
+     * price previously paid for the same resource. Catches a merchant that
+     * quietly raises its 402 price by 100x for agent traffic.
+     */
+    priceAnomalyMultiple: bigint;
+    /**
+     * Flag a payment more than this multiple above the user's median payment
+     * across all resources. Catches expensive first-time endpoints, which the
+     * per-resource check structurally cannot see. Set higher than
+     * `priceAnomalyMultiple` because it compares across unrelated services.
+     */
+    overallAnomalyMultiple: bigint;
+    /**
+     * Below this, skip the overall-anomaly check entirely. Without a floor, a
+     * user whose median payment is 0.001 USDC gets prompted on every ordinary
+     * 0.05 USDC call, which trains them to click through.
+     */
+    overallAnomalyFloor: bigint;
+    /** Require confirmation for a first-ever payment to a new host above this. */
+    newHostConfirmAbove: bigint;
+    /**
+     * Reject if the same resource is hit more than this many times inside
+     * `burstWindowSeconds`. Catches retry loops that would drain a daily cap.
+     */
+    maxRepeatsPerResource: number;
+    burstWindowSeconds: number;
+}
+export declare const DEFAULT_POLICY_OPTIONS: PolicyOptions;
+export declare class PolicyEngine {
+    private readonly opts;
+    constructor(opts?: PolicyOptions);
+    evaluate(signedIntent: SignedIntentMandate, candidate: PaymentCandidate, ctx: PolicyContext): PolicyDecision;
+}
+/**
+ * Host matching.
+ *
+ * A user writing an allowlist writes "api.example.in", not "api.example.in:443".
+ * So an allowlist entry WITHOUT a port matches on hostname alone and ignores
+ * the port; an entry WITH an explicit port must match exactly. The port is not
+ * a meaningful security boundary here — the payee address is checked separately
+ * — but honouring an explicit one costs nothing and some users will want it.
+ *
+ * Wildcards: "*.example.in" matches example.in and any subdomain, and must not
+ * degrade into a substring match ("evilexample.in" must not match).
+ */
+export declare function matchesHostList(host: string, list: string[]): boolean;
+/** Guard against a tampered allowlist arriving separately from the signature. */
+export declare function allowlistsMatchSignedRoots(m: IntentMandate): boolean;
+//# sourceMappingURL=policy.d.ts.map

package/dist/ap2/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/ap2/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,WAAW,EACZ,MAAM,aAAa,CAAC;AAGrB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,sBAAsB,EAAE,aAOpC,CAAC;AAEF,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,aAAsC;IAEzE,QAAQ,CACN,YAAY,EAAE,mBAAmB,EACjC,SAAS,EAAE,gBAAgB,EAC3B,GAAG,EAAE,aAAa,GACjB,cAAc;CAsGlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAmBrE;AA6FD,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAMpE"}