@fun-xyz/fiat-contract 0.13.0 → 0.15.0

package/README.md

@@ -8,6 +8,7 @@ Four things, zero runtime logic beyond validation:
 | File | What it is |
 | --- | --- |
 | `src/types.ts` | `FlowState` · `Transition` · `FailureReason` · `Surface` · `Instructions` · `FormDescriptor` · `OrderStatus` · `FiatStepResponse` |
+| `src/codes.ts` | Shared country, currency, US subdivision, and payment-method vocabularies |
 | `src/schemas.ts` | zod mirrors of every type — the single runtime validator |
 | `src/table.ts` | the transition table **as data**: per state, its legal transition set, the states any call from it may return, and `terminal: boolean` |
 | `src/assert.ts` + `src/fixtures/` | `assertFiatStepResponse` · `assertLegalEmission` · `assertLegalReturn` · `walkTable` · fixture loader + 18 recorded step responses (inlined as data — no filesystem, so React Native can bundle it) |

package/dist/{chunk-AI66DLZT.mjs → chunk-CXYGWKAG.mjs}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.13.0";
+var version = "0.15.0";
 
 // src/table.ts
 var TABLE_VERSION = version;
@@ -514,4 +514,4 @@ export {
   tableEntry,
   isTerminal
 };
-//# sourceMappingURL=chunk-AI66DLZT.mjs.map
+//# sourceMappingURL=chunk-CXYGWKAG.mjs.map

package/dist/codes.d.ts

@@ -3,6 +3,9 @@
  * (circulating fiat only, no precious-metal/SDR codes); `paymentMethod` is fun-backend/provider
  * vocabulary, not a standard. `COUNTRY_CURRENCY_LIST` is the source of truth; everything below derives from it.
  */
+/** ISO 3166-2:US subdivision codes for the 50 states, DC, and five inhabited territories. */
+export declare const US_STATE_CODES: readonly ["AL", "AK", "AZ", "AR", "CA", "CO", "CT", "DE", "DC", "FL", "GA", "HI", "ID", "IL", "IN", "IA", "KS", "KY", "LA", "ME", "MD", "MA", "MI", "MN", "MS", "MO", "MT", "NE", "NV", "NH", "NJ", "NM", "NY", "NC", "ND", "OH", "OK", "OR", "PA", "RI", "SC", "SD", "TN", "TX", "UT", "VT", "VA", "WA", "WV", "WI", "WY", "AS", "GU", "MP", "PR", "VI"];
+export type UsStateCode = (typeof US_STATE_CODES)[number];
 declare const COUNTRY_CURRENCY_LIST: readonly [{
     readonly country: "AD";
     readonly countryName: "Andorra";

package/dist/index.js

@@ -95,6 +95,8 @@ __export(index_exports, {
   TxSchema: () => TxSchema,
   UNOFFERED_ENDPOINTS: () => UNOFFERED_ENDPOINTS,
   UNREACHABLE_STATES: () => UNREACHABLE_STATES,
+  US_STATE_CODES: () => US_STATE_CODES,
+  UsStateCodeSchema: () => UsStateCodeSchema,
   assertAllFixtures: () => assertAllFixtures,
   assertFiatStepResponse: () => assertFiatStepResponse,
   assertFixture: () => assertFixture,
@@ -116,6 +118,64 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/codes.ts
+var US_STATE_CODES = [
+  "AL",
+  "AK",
+  "AZ",
+  "AR",
+  "CA",
+  "CO",
+  "CT",
+  "DE",
+  "DC",
+  "FL",
+  "GA",
+  "HI",
+  "ID",
+  "IL",
+  "IN",
+  "IA",
+  "KS",
+  "KY",
+  "LA",
+  "ME",
+  "MD",
+  "MA",
+  "MI",
+  "MN",
+  "MS",
+  "MO",
+  "MT",
+  "NE",
+  "NV",
+  "NH",
+  "NJ",
+  "NM",
+  "NY",
+  "NC",
+  "ND",
+  "OH",
+  "OK",
+  "OR",
+  "PA",
+  "RI",
+  "SC",
+  "SD",
+  "TN",
+  "TX",
+  "UT",
+  "VT",
+  "VA",
+  "WA",
+  "WV",
+  "WI",
+  "WY",
+  "AS",
+  "GU",
+  "MP",
+  "PR",
+  "VI"
+];
 var COUNTRY_CURRENCY_LIST = [
   { country: "AD", countryName: "Andorra", currency: "EUR", currencyName: "Euro" },
   { country: "AE", countryName: "United Arab Emirates", currency: "AED", currencyName: "UAE Dirham" },
@@ -396,6 +456,7 @@ var HTTP_VERBS = ["GET", "POST"];
 var ENDPOINT_PATTERN = /^(GET|POST) \/fiat\/[^\s]*$/;
 var $endpoint = import_zod.z.string().regex(ENDPOINT_PATTERN, 'endpoint must read "<GET|POST> /fiat/\u2026"');
 var FiatEndpointSchema = $endpoint;
+var UsStateCodeSchema = import_zod.z.enum(US_STATE_CODES);
 var $provider = import_zod.z.enum([
   "TRANSAK",
   "SWAPPED",
@@ -880,7 +941,8 @@ var $providerBoundStepResponse = obj({
     clientSecret: import_zod.z.string(),
     expiresAt: import_zod.z.string()
   }).optional(),
-  orderId: import_zod.z.string().optional()
+  orderId: import_zod.z.string().optional(),
+  refreshLimits: import_zod.z.literal(true).optional()
 });
 var $blockedStepResponse = obj({
   state: $blockedState,
@@ -891,13 +953,14 @@ var $blockedStepResponse = obj({
     clientSecret: import_zod.z.string(),
     expiresAt: import_zod.z.string()
   }).optional(),
-  orderId: import_zod.z.string().optional()
+  orderId: import_zod.z.string().optional(),
+  refreshLimits: import_zod.z.literal(true).optional()
 });
 var $stepResponse = import_zod.z.union([$providerBoundStepResponse, $blockedStepResponse]);
 var FiatStepResponseSchema = $stepResponse;
 
 // package.json
-var version = "0.13.0";
+var version = "0.15.0";
 
 // src/table.ts
 var TABLE_VERSION = version;

package/dist/index.mjs

@@ -12,9 +12,67 @@ import {
   tableEntry,
   unofferedEndpoints,
   unreachableStates
-} from "./chunk-AI66DLZT.mjs";
+} from "./chunk-CXYGWKAG.mjs";
 
 // src/codes.ts
+var US_STATE_CODES = [
+  "AL",
+  "AK",
+  "AZ",
+  "AR",
+  "CA",
+  "CO",
+  "CT",
+  "DE",
+  "DC",
+  "FL",
+  "GA",
+  "HI",
+  "ID",
+  "IL",
+  "IN",
+  "IA",
+  "KS",
+  "KY",
+  "LA",
+  "ME",
+  "MD",
+  "MA",
+  "MI",
+  "MN",
+  "MS",
+  "MO",
+  "MT",
+  "NE",
+  "NV",
+  "NH",
+  "NJ",
+  "NM",
+  "NY",
+  "NC",
+  "ND",
+  "OH",
+  "OK",
+  "OR",
+  "PA",
+  "RI",
+  "SC",
+  "SD",
+  "TN",
+  "TX",
+  "UT",
+  "VT",
+  "VA",
+  "WA",
+  "WV",
+  "WI",
+  "WY",
+  "AS",
+  "GU",
+  "MP",
+  "PR",
+  "VI"
+];
 var COUNTRY_CURRENCY_LIST = [
   { country: "AD", countryName: "Andorra", currency: "EUR", currencyName: "Euro" },
   { country: "AE", countryName: "United Arab Emirates", currency: "AED", currencyName: "UAE Dirham" },
@@ -295,6 +353,7 @@ var HTTP_VERBS = ["GET", "POST"];
 var ENDPOINT_PATTERN = /^(GET|POST) \/fiat\/[^\s]*$/;
 var $endpoint = z.string().regex(ENDPOINT_PATTERN, 'endpoint must read "<GET|POST> /fiat/\u2026"');
 var FiatEndpointSchema = $endpoint;
+var UsStateCodeSchema = z.enum(US_STATE_CODES);
 var $provider = z.enum([
   "TRANSAK",
   "SWAPPED",
@@ -779,7 +838,8 @@ var $providerBoundStepResponse = obj({
     clientSecret: z.string(),
     expiresAt: z.string()
   }).optional(),
-  orderId: z.string().optional()
+  orderId: z.string().optional(),
+  refreshLimits: z.literal(true).optional()
 });
 var $blockedStepResponse = obj({
   state: $blockedState,
@@ -790,7 +850,8 @@ var $blockedStepResponse = obj({
     clientSecret: z.string(),
     expiresAt: z.string()
   }).optional(),
-  orderId: z.string().optional()
+  orderId: z.string().optional(),
+  refreshLimits: z.literal(true).optional()
 });
 var $stepResponse = z.union([$providerBoundStepResponse, $blockedStepResponse]);
 var FiatStepResponseSchema = $stepResponse;
@@ -1931,6 +1992,8 @@ export {
   TxSchema,
   UNOFFERED_ENDPOINTS,
   UNREACHABLE_STATES,
+  US_STATE_CODES,
+  UsStateCodeSchema,
   assertAllFixtures,
   assertFiatStepResponse,
   assertFixture,

package/dist/schemas.d.ts

@@ -27,12 +27,14 @@
  * They are module-private, so none of it reaches the published declarations.
  */
 import { z } from 'zod';
+import type { UsStateCode } from './codes';
 import type { BlockedReason, CryptoAmount, FailureReason, FeeLine, FiatAmount, FiatEndpoint, FiatProvider, FiatStepResponse, FieldSpec, FlowState, FormDescriptor, FormField, FormFieldType, InstructionField, Instructions, Instrument, JsonValue, KYCProvider, OrderRef, OrderStatus, OrderSummary, PollSpec, Quote, QuoteLimitRange, QuoteLimits, Recovery, Refund, ReportSpec, SelectOption, StatusHistoryEntry, Surface, PreferredIdentityDocument, ClientExecutedDelivery, KycSdkResultReport, SurfaceKind, SurfaceProvider, TermsAcceptance, Transition, TransitionInputs, TransitionParams, Tx } from './types';
 export declare const JsonSchema: z.ZodType<JsonValue>;
 export declare const HTTP_VERBS: readonly ["GET", "POST"];
 /** `"POST /fiat/session/verify"`, `"GET /fiat/orders/o_31c"` — the verb rides the string. */
 export declare const ENDPOINT_PATTERN: RegExp;
 export declare const FiatEndpointSchema: z.ZodType<FiatEndpoint>;
+export declare const UsStateCodeSchema: z.ZodType<UsStateCode>;
 export declare const FiatProviderSchema: z.ZodType<FiatProvider>;
 export declare const KYCProviderSchema: z.ZodType<KYCProvider>;
 export declare const SurfaceProviderSchema: z.ZodType<SurfaceProvider>;

package/dist/table.js

@@ -36,7 +36,7 @@ __export(table_exports, {
 module.exports = __toCommonJS(table_exports);
 
 // package.json
-var version = "0.13.0";
+var version = "0.15.0";
 
 // src/table.ts
 var TABLE_VERSION = version;

package/dist/table.mjs

@@ -11,7 +11,7 @@ import {
   tableEntry,
   unofferedEndpoints,
   unreachableStates
-} from "./chunk-AI66DLZT.mjs";
+} from "./chunk-CXYGWKAG.mjs";
 export {
   DOCUMENTED_ENDPOINTS,
   STATE_KEYS,

package/dist/types.d.ts

@@ -662,6 +662,15 @@ type FiatStepResponseBase = {
     };
     /** TODO(open-decision): `orderId` placement — see `PAYMENT{INSTRUCT}.orderId` above. */
     orderId?: string;
+    /**
+     * Best-effort: what this response did may have changed what the buyer can spend, so a cached
+     * discovery ceiling is no longer trusted. Absent is not a promise that nothing changed, only
+     * that this response is not reporting one, so a client must still tolerate a stale ceiling.
+     *
+     * Never `false`. A widened or dropped ceiling costs one discovery call; one left too low
+     * refuses a purchase the backend would have served, so the uncertain direction is to send it.
+     */
+    refreshLimits?: true;
 };
 /**
  * Provider is absent only when routing ended before a provider could be selected. A BLOCKED response

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fun-xyz/fiat-contract",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Published conformance contract for Fun's headless fiat onramp: FlowState/Transition types, zod schemas, the transition table as data, recorded fixtures, assertion helpers.",
   "license": "MIT",
   "repository": {