type Scope = "checkout" | "payment" | "browse" | "compare" | "negotiate";
type Capability =
  | "select_item"
  | "add_to_cart"
  | "checkout"
  | "pay"
  | "confirm_order"
  | "manage_subscription";

interface MandatePayload {
  type: "Cart" | "Intent" | "Payment";
  scopes: Scope[];
  capabilities: Capability[];
  delegations: Array<{
    delegate: string;
    scopes: Scope[];
    capabilities: Capability[];
  }>;
}

const mandate = JSON.parse(payload) as MandatePayload;

const hasPaymentScope = mandate.scopes.includes("payment");
const canPay = mandate.capabilities.includes("pay");

if (!hasPaymentScope || !canPay) {
  throw new Error("Mandate does not authorize payment execution");
}