@fun-xyz/fiat-contract 0.23.0 → 0.25.0

package/README.md

@@ -19,7 +19,7 @@ Four things, zero runtime logic beyond validation:
 | --- | --- | --- | --- |
 | `@fun-xyz/fiat-contract/types` | **0.1 KB** (types erase) | every type; no runtime values | production, both repos |
 | `@fun-xyz/fiat-contract/table` | **13.8 KB**, zero deps | `TRANSITION_TABLE`, `stateKey`, `tableEntry`, `isTerminal`, `walkTable`, `TABLE_VERSION`, `TERMINAL_ORDER_STATUSES`, `DOCUMENTED_ENDPOINTS`, `UNOFFERED_ENDPOINTS`, `UNREACHABLE_STATES`, `unofferedEndpoints`, `unreachableStates` | **production frontend** + backend |
-| `@fun-xyz/fiat-contract/moonpay` | zero deps | the MoonPay provider-owned flow: `intent` request kinds, response statuses and fault types, and `MOONPAY_ENDPOINTS` | **production frontend** (MoonPay adapter) + backend |
+| `@fun-xyz/fiat-contract/moonpay` | zero deps | the MoonPay flow on `POST /fiat/next`: action requests, prompts, responses, fault types, and `MOONPAY_ENDPOINTS` | **production frontend** (MoonPay adapter) + backend |
 | `@fun-xyz/fiat-contract/terms` | zero deps | the platform terms route: `TermsDocument`, `FiatTermsRequest`, `FiatTermsResponse`, fault types, and `FIAT_TERMS_ENDPOINT` | **production frontend** + backend |
 | `@fun-xyz/fiat-contract/routing` | zero deps | the routing table and routing quote: `FiatRoutingTableQuery`, `FiatRoutingTableResponse`, `FiatRoutingQuoteRequest`, both routes' error bodies, and `ROUTING_ENDPOINTS` | **production frontend** + backend |
 | `@fun-xyz/fiat-contract` | 47.6 KB, needs zod | the above + 77 zod schemas + assertions + 18 fixtures | tests, and backend dev/test guards |
@@ -102,7 +102,7 @@ A provider can run its own flow instead of the shared step machine. `POST /fiat/
 and prices. When the request's `handoffs` lists the winning provider, the response carries
 `handoff: { provider }` and no transitions. The client shows that provider's `CHECKOUT` documents
 from `PROVIDER_CHECKOUT_DOCUMENTS`, records them with `POST /fiat/terms` on Continue, and then calls
-`POST /fiat/providers/{provider}/intent`. The schema refuses a handoff on any state but `QUOTE`, a
+`POST /fiat/next`. The schema refuses a handoff on any state but `QUOTE`, a
 handoff to a provider other than the response's own, and a handoff that still offers transitions.
 
 **Terms (`./terms`).** Every provider records acceptances through the platform `POST /fiat/terms`
@@ -133,74 +133,81 @@ cause is unknown. Refetch the table at `expiresAt`, on `refreshLimits: true`, an
 a `REQUOTE`. The schemas hold the table's invariants: each method once, sorted, non-overlapping
 intervals, at least one provider each and none twice, and a reason only on an empty method.
 
-`ROUTING_ENDPOINTS.quote` (`POST /fiat/routing/quote`) takes the `POST /fiat/quote` body plus the
-interval's first `provider`, never `routingOverrides`, and answers the same `FiatStepResponse`. A
-refusal is a `FiatRoutingQuoteErrorBody`, and it decides whether to quote the interval's next
-provider:
+`ROUTING_ENDPOINTS.quote` (`POST /fiat/routing/quote`) takes the `POST /fiat/quote` body
+(`FiatRoutingQuoteTerms`), never `routingOverrides`, plus one of two forms:
+
+- `providers`: the interval's providers, best first. The backend prices them in order, falls
+  through on the refusals marked "next provider" below, and answers the first that prices or the
+  last provider's refusal.
+- `provider`: one provider only. The client falls through itself.
+
+It answers the same `FiatStepResponse`, whose `provider` names the one that priced. A refusal is a
+`FiatRoutingQuoteErrorBody`, and it decides whether the next provider may still price:
 
 | Status | `errorCode` | Then |
 | --- | --- | --- |
-| 404 | `FiatNoRouteError`, `reason` `NO_CANDIDATE`, `PROVIDER_DECLINED`, `PROVIDER_OUTAGE` or `KYC_REJECTED` | quote the next provider |
-| 400 | `FiatNoRouteError`, `reason: USER_LIMIT`, `code: LIMITS_EXCEEDED`, `recovery: REQUOTE` | quote the next provider |
-| 400 | `FiatAmountBelowMinimumError` (`minFiatAmount`) or `FiatAmountAboveMaximumError` (`maxFiatAmount`) | quote the next provider |
+| 404 | `FiatNoRouteError`, `reason` `NO_CANDIDATE`, `PROVIDER_DECLINED`, `PROVIDER_OUTAGE` or `KYC_REJECTED` | next provider |
+| 400 | `FiatNoRouteError`, `reason: USER_LIMIT`, `code: LIMITS_EXCEEDED`, `recovery: REQUOTE` | next provider |
+| 400 | `FiatAmountBelowMinimumError` (`minFiatAmount`) or `FiatAmountAboveMaximumError` (`maxFiatAmount`) | next provider |
 | 400 | `InvalidParameterError`: a bad request, an asset Fun cannot deliver, or no verified email | stop |
 | 401, 5xx | any other: a missing or invalid identity assertion, or a server error | stop |
 
-Every fall-through refusal is the named provider's alone, because the route prices only that
-provider: `KYC_REJECTED` there means that provider refused the buyer's identity, not every provider.
-With no provider left in the interval, refetch the table. The table route refuses with a
+Every fall-through refusal is that provider's alone, because each attempt prices only one provider:
+`KYC_REJECTED` there means that provider refused the buyer's identity, not every provider. With no
+provider left in the interval, refetch the table. The table route refuses with a
 `FiatRoutingTableErrorBody`: a 429 `TooManyRequestsError` with `retryAfterSeconds` when the
 per-login budget is spent, or a 400 or 5xx as above. The quote route has no rate limit of its own.
 
 Both routes take geo under the `POST /fiat/quote` rules: a known `CountryCode`, a `UsStateCode`
 region for a US buyer, and an empty `region` or `ip` read as absent. The quote route's `geo` is the
 Fun geo endpoint's response forwarded as is. The request schemas are strict like every schema here,
-so a client sends only the declared keys and no blank strings. `provider` is one of the five
-providers the backend routes (`RoutingProvider`). The quote route is temporary: each provider's
-`intent` route replaces it.
-
-**MoonPay (`./moonpay`).** One route, `MOONPAY_ENDPOINTS.intent`. A `MoonPayIntentRequest` is one of
-three kinds:
-
-| `kind` | Carries | A repeat |
-| --- | --- | --- |
-| `observe` | `checkout`, and `credentials` (`customerId`, `accessToken`) once the SDK has them | writes nothing new |
-| `kyc` | `checkout`, `credentials`, `values` keyed by `KycFieldId` (no form id) | drops values MoonPay no longer asks for |
-| `order` | `orderId`, `transactionId?`, `quotedAmount`, `geo?` (the checkout's) | returns the recorded order |
-
-`observe` and `kyc` answer a `MoonPayStepResponse`, which says what the backend needs next:
-
-| `status` | Carries | The client then |
-| --- | --- | --- |
-| `TERMS` | `stage`, `documents` (at least one, all at `stage`) | sends `POST /fiat/terms`, then `observe` |
-| `SDK_AUTH` | `sessionToken`, `quoteInput`, `resetConnection?` (`true` when the device's MoonPay connection is another buyer's) | resets the connection when asked, runs the MoonPay connection check, then `observe` with credentials |
-| `KYC` | `fields`, `fieldErrors?` (each naming a field in `fields`, with `code?` `PHONE_IN_USE` on `PHONE_NUMBER` or `TAX_ID_IN_USE` on `TAX_IDENTIFIER` when another MoonPay customer holds the value) | shows the shared form, then sends `kyc` |
-| `PENDING` | `retryAfterMs` (at most 60 s) | sends `observe` after the delay, never `kyc` again |
-| `READY` | `orderId`, `quoteInput` | mounts Apple Pay, then sends `order` after the charge |
-| `REFUSED` | `reason` (`NOT_ELIGIBLE`, `DOCUMENTS_REQUIRED`, `FINAL_REJECTION`, `CUSTOMER_MISMATCH`), `recovery: REQUOTE \| NONE` | exits the provider flow |
-
-`order` runs after every charge attempt, a failed one too, and answers a `MoonPayOrderResponse`.
-`transactionId` is optional because a failed charge may have none; without it the backend records the
-failed charges MoonPay lists for `orderId`. `quotedAmount` is the fiat amount the quote showed.
-`geo` is the same object `observe` sends in `checkout`; the order records its `alpha2` as its
-country, and no country without it. A
-failed charge answers `DONE` with the order in `FAILED`, and the client requotes for a new `orderId`.
-After a failed charge with no `transactionId`, the client caps its `PENDING` polls.
-
-| `status` | Carries | The client then |
-| --- | --- | --- |
-| `DONE` | `order`, the `GET /fiat/orders/:orderId` response | shows the shared order status |
-| `PENDING` | `retryAfterMs` (at most 60 s) | sends the same `order` after the delay |
-| `REFUSED` | `reason` (`CUSTOMER_MISMATCH`, `WALLET_MISMATCH`, `UNRECORDABLE`), `recovery: NONE` | exits the provider flow |
-
-`MoonPayIntentResponseFor` maps each `kind` to its union, and `MoonPayIntentResponse` is both.
+so a client sends only the declared keys and no blank strings. `provider` and each `providers`
+entry are one of the five providers the backend routes (`RoutingProvider`), `providers` with no
+duplicates. The quote route is temporary: `POST /fiat/next` replaces it for each provider that
+moves there.
+
+**MoonPay (`./moonpay`).** MoonPay runs on the shared `POST /fiat/next` (`MOONPAY_ENDPOINTS.next`).
+Every `/next` body is a `FiatNextRequest`: `provider`, `geo` (a `FiatGeo`, the geo endpoint's
+response), and the provider's own request, which names its `action`. The orchestrator reads
+`provider` and `geo`; the provider's action schema reads the rest. MoonPay's body is a
+`MoonPayNextRequest`, and every MoonPay request also carries the context `checkout` and, after
+`connect`, `credentials` (`customerId`, `accessToken`).
+
+Each `MoonPayAction` has one name. A response's prompt names it in `next` and carries what the
+client needs; the client's request names it in `action` and carries the result:
+
+| Action | Prompt carries | Request carries | A repeat |
+| --- | --- | --- | --- |
+| `observe` | no prompt: the answer is the current prompt | nothing | writes nothing |
+| `consent` | `documents` (at least one, unique ids) | `acceptances`, the `POST /fiat/terms` items | writes nothing new |
+| `connect` | `sessionToken`, `quoteInput`, `resetConnection?` (`true` when the device's MoonPay connection is another buyer's) | `customerId`, `accessToken` | rebinds the same customer |
+| `kyc` | `fields`, `fieldErrors?` (each naming a field in `fields`, with `code?` `PHONE_IN_USE` on `PHONE_NUMBER` or `TAX_ID_IN_USE` on `TAX_IDENTIFIER` when another MoonPay customer holds the value) | `credentials`, `values` keyed by `KycFieldId` (no form id) | drops values MoonPay no longer asks for |
+| `wait` | `retryAfterMs` (at most 60 s) | no request: the client sends `observe` after the delay | |
+| `order` | `orderId`, `quoteInput` | `orderId`, `quotedAmount`, `transactionId?` | returns the recorded order |
+
+Every response is the next prompt, `done`, or `refused` (`MoonPayRefused`), and
+`MoonPayResponseFor` maps each request action to its union. `observe`, `consent`, `connect` and `kyc`
+answer a `MoonPayStepResponse`: any `MoonPayPrompt`, or `refused` with `reason` (`NOT_ELIGIBLE`,
+`DOCUMENTS_REQUIRED`, `FINAL_REJECTION`, `CUSTOMER_MISMATCH`) and `recovery: REQUOTE | NONE`.
+
+`order` runs after every charge attempt, a failed one too, and answers a `MoonPayOrderResponse`:
+`done` with `order`, the `GET /fiat/orders/:orderId` response; `order` again while MoonPay does not
+list the transaction yet; or `refused` with `reason` (`CUSTOMER_MISMATCH`, `WALLET_MISMATCH`,
+`UNRECORDABLE`) and `recovery: NONE`. `transactionId` is optional because a failed charge may have
+none; without it the backend records the failed charges MoonPay lists for `orderId`. `quotedAmount`
+is the fiat amount the device quote showed. The order records the body's `geo.alpha2` as its country.
+A failed charge answers `done` with the order in `FAILED`, and the client requotes for a new `orderId`.
+
+A first-time buyer goes `observe` → `consent` → `connect` → `kyc` → `wait` → `observe` → `order` →
+`done`; a returning buyer `observe` → `connect` → `order` → `done`. Both walks are recorded in
+`test/fixtures/moonpay-next/`.
 
 A fault is a 4xx or 5xx with a `MoonPayErrorBody`: the shared `errorCode`, `errorMsg` and `reqId`,
 plus `reason` (`SESSION_BUDGET_SPENT`, `RATE_LIMITED`, `PROVIDER_UNAVAILABLE`, `INVALID_REQUEST`)
 and `recovery`:
-`RETRY` (send the same request again), `REQUOTE`, or `NONE`. A field error is a `KYC`
-response, not a fault. The zod schemas (`MoonPay*Schema`, `TermsDocumentSchema`, `FiatTerms*Schema`)
-are exported from the root only.
+`RETRY` (send the same request again), `REQUOTE`, or `NONE`. A field error is a `kyc`
+prompt, not a fault. The zod schemas (`MoonPay*Schema`, `FiatGeoSchema`, `FiatNextRequestSchema`,
+`TermsDocumentSchema`, `FiatTerms*Schema`) are exported from the root only.
 
 ## KYC SDK hints, results, and client delivery
 

package/dist/{chunk-5GRPYE2U.mjs → chunk-CRNKRIKR.mjs}

@@ -41,4 +41,4 @@ export {
   FUN_KYC_CONSENT_DOCUMENTS,
   PUBLISHED_TERMS_DOCUMENTS
 };
-//# sourceMappingURL=chunk-5GRPYE2U.mjs.map
+//# sourceMappingURL=chunk-CRNKRIKR.mjs.map

package/dist/{chunk-EI56NQ7K.mjs → chunk-LHCED3AP.mjs}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.23.0";
+var version = "0.25.0";
 
 // src/table.ts
 var TABLE_VERSION = version;
@@ -514,4 +514,4 @@ export {
   tableEntry,
   isTerminal
 };
-//# sourceMappingURL=chunk-EI56NQ7K.mjs.map
+//# sourceMappingURL=chunk-LHCED3AP.mjs.map

package/dist/chunk-T5JAYOWY.mjs

@@ -0,0 +1,9 @@
+// src/providers/moonpay.ts
+var MOONPAY_ENDPOINTS = {
+  next: "POST /fiat/next"
+};
+
+export {
+  MOONPAY_ENDPOINTS
+};
+//# sourceMappingURL=chunk-T5JAYOWY.mjs.map

package/dist/{chunk-KYE2HYV5.mjs → chunk-WEXD7UEE.mjs}

@@ -1,11 +1,11 @@
 // src/routing.ts
 var ROUTING_ENDPOINTS = {
   table: "GET /fiat/routing/table",
-  /** Temporary: each provider's `intent` route replaces it. */
+  /** Temporary: `POST /fiat/next` replaces it for each provider that moves there. */
   quote: "POST /fiat/routing/quote"
 };
 
 export {
   ROUTING_ENDPOINTS
 };
-//# sourceMappingURL=chunk-KYE2HYV5.mjs.map
+//# sourceMappingURL=chunk-WEXD7UEE.mjs.map

package/dist/index.js

@@ -42,9 +42,12 @@ __export(index_exports, {
   FiatAmountSchema: () => FiatAmountSchema,
   FiatCurrencyCode: () => FiatCurrencyCode,
   FiatEndpointSchema: () => FiatEndpointSchema,
+  FiatGeoSchema: () => FiatGeoSchema,
+  FiatNextRequestSchema: () => FiatNextRequestSchema,
   FiatProviderSchema: () => FiatProviderSchema,
   FiatRoutingQuoteErrorBodySchema: () => FiatRoutingQuoteErrorBodySchema,
   FiatRoutingQuoteRequestSchema: () => FiatRoutingQuoteRequestSchema,
+  FiatRoutingQuoteTermsSchema: () => FiatRoutingQuoteTermsSchema,
   FiatRoutingTableErrorBodySchema: () => FiatRoutingTableErrorBodySchema,
   FiatRoutingTableQuerySchema: () => FiatRoutingTableQuerySchema,
   FiatRoutingTableResponseSchema: () => FiatRoutingTableResponseSchema,
@@ -72,14 +75,28 @@ __export(index_exports, {
   KycSdkResultReportSchema: () => KycSdkResultReportSchema,
   MOONPAY_ENDPOINTS: () => MOONPAY_ENDPOINTS,
   MoonPayCheckoutSchema: () => MoonPayCheckoutSchema,
+  MoonPayConnectPromptSchema: () => MoonPayConnectPromptSchema,
+  MoonPayConnectRequestSchema: () => MoonPayConnectRequestSchema,
+  MoonPayConsentPromptSchema: () => MoonPayConsentPromptSchema,
+  MoonPayConsentRequestSchema: () => MoonPayConsentRequestSchema,
+  MoonPayDoneSchema: () => MoonPayDoneSchema,
   MoonPayErrorBodySchema: () => MoonPayErrorBodySchema,
   MoonPayFaultSchema: () => MoonPayFaultSchema,
-  MoonPayIntentRequestSchema: () => MoonPayIntentRequestSchema,
-  MoonPayIntentResponseSchema: () => MoonPayIntentResponseSchema,
+  MoonPayKycPromptSchema: () => MoonPayKycPromptSchema,
+  MoonPayKycRequestSchema: () => MoonPayKycRequestSchema,
+  MoonPayNextRequestSchema: () => MoonPayNextRequestSchema,
+  MoonPayObserveRequestSchema: () => MoonPayObserveRequestSchema,
+  MoonPayOrderPromptSchema: () => MoonPayOrderPromptSchema,
+  MoonPayOrderRequestSchema: () => MoonPayOrderRequestSchema,
   MoonPayOrderResponseSchema: () => MoonPayOrderResponseSchema,
+  MoonPayPromptSchema: () => MoonPayPromptSchema,
   MoonPayQuoteInputSchema: () => MoonPayQuoteInputSchema,
+  MoonPayRequestContextSchema: () => MoonPayRequestContextSchema,
+  MoonPayRequestSchema: () => MoonPayRequestSchema,
+  MoonPayResponseSchemaFor: () => MoonPayResponseSchemaFor,
   MoonPaySdkCredentialsSchema: () => MoonPaySdkCredentialsSchema,
   MoonPayStepResponseSchema: () => MoonPayStepResponseSchema,
+  MoonPayWaitPromptSchema: () => MoonPayWaitPromptSchema,
   OrderAwaitingConfirmationStateSchema: () => OrderAwaitingConfirmationStateSchema,
   OrderCreatedStateSchema: () => OrderCreatedStateSchema,
   OrderRefSchema: () => OrderRefSchema,
@@ -1072,8 +1089,7 @@ var $routingTableResponse = obj({
   methods: import_zod.z.array($routingTableMethod).refine((methods) => hasUniqueIds(methods.map((entry) => entry.method)), "each method is listed once")
 });
 var FiatRoutingTableResponseSchema = $routingTableResponse;
-var $routingQuoteRequest = obj({
-  provider: $routingProvider,
+var $routingQuoteTermsShape = {
   fiatCurrency: import_zod.z.enum(FIAT_CURRENCY_CODES),
   fiatAmount: $decimalAmount.refine((amount) => Number(amount) > 0, "must be positive"),
   cryptoCurrencyCode: $nonBlank,
@@ -1084,7 +1100,16 @@ var $routingQuoteRequest = obj({
     { message: US_REGION_REQUIRED, path: ["region"] }
   ),
   prepareSessionAuth: import_zod.z.boolean().optional()
-});
+};
+var $routingQuoteTerms = obj($routingQuoteTermsShape);
+var FiatRoutingQuoteTermsSchema = $routingQuoteTerms;
+var $routingQuoteRequest = import_zod.z.union([
+  obj({
+    ...$routingQuoteTermsShape,
+    providers: import_zod.z.array($routingProvider).min(1).refine((providers) => hasUniqueIds(providers), "each provider is listed once")
+  }),
+  obj({ ...$routingQuoteTermsShape, provider: $routingProvider })
+]);
 var FiatRoutingQuoteRequestSchema = $routingQuoteRequest;
 var $routingServiceableRange = obj({ min: $money, max: $money, userMax: $money.nullable().optional() });
 var $noRouteFields = {
@@ -1121,6 +1146,10 @@ var $routingTableErrorBody = import_zod.z.union([$routingRateLimitedErrorBody, $
 var FiatRoutingTableErrorBodySchema = $routingTableErrorBody;
 var $routingQuoteErrorBody = import_zod.z.union([$routingNoRouteErrorBody, $routingAmountErrorBody, $routingFaultErrorBody]);
 var FiatRoutingQuoteErrorBodySchema = $routingQuoteErrorBody;
+var $fiatGeo = obj({ alpha2: import_zod.z.string().regex(/^[A-Z]{2}$/), region: $nonBlank.optional(), ip: $nonBlank.optional() });
+var FiatGeoSchema = $fiatGeo;
+var $nextRequest = import_zod.z.object({ provider: $provider, action: $nonBlank, geo: $fiatGeo }).catchall(import_zod.z.unknown());
+var FiatNextRequestSchema = $nextRequest;
 var $providerBoundStepResponse = obj({
   state: $providerBoundFlowState,
   provider: $provider,
@@ -1180,7 +1209,7 @@ var $stepResponse = import_zod.z.union([$providerBoundStepResponse, $blockedStep
 var FiatStepResponseSchema = $stepResponse;
 
 // package.json
-var version = "0.23.0";
+var version = "0.25.0";
 
 // src/table.ts
 var TABLE_VERSION = version;
@@ -2786,13 +2815,13 @@ var PUBLISHED_TERMS_DOCUMENTS = [MOONPAY_TERMS, ...Object.values(FUN_KYC_CONSENT
 // src/routing.ts
 var ROUTING_ENDPOINTS = {
   table: "GET /fiat/routing/table",
-  /** Temporary: each provider's `intent` route replaces it. */
+  /** Temporary: `POST /fiat/next` replaces it for each provider that moves there. */
   quote: "POST /fiat/routing/quote"
 };
 
 // src/providers/moonpay.ts
 var MOONPAY_ENDPOINTS = {
-  intent: "POST /fiat/providers/moonpay/intent"
+  next: "POST /fiat/next"
 };
 
 // src/providers/moonpay.schemas.ts
@@ -2801,33 +2830,17 @@ var FIAT_CURRENCY_CODES2 = Object.keys(FIAT_CURRENCY_NAMES);
 var obj2 = (shape) => import_zod2.z.object(shape).strict();
 var $nonEmpty = import_zod2.z.string().refine((value) => value.trim().length > 0, "must not be blank");
 var hasUniqueIds2 = (ids) => new Set(ids).size === ids.length;
-var $geo = obj2({ alpha2: import_zod2.z.string().regex(/^[A-Z]{2}$/), region: $nonEmpty.optional(), ip: $nonEmpty.optional() });
 var $checkout = obj2({
   amount: FiatAmountSchema,
   destination: obj2({ asset: $nonEmpty, network: $nonEmpty }),
-  paymentMethod: import_zod2.z.literal("apple_pay"),
-  geo: $geo
+  paymentMethod: import_zod2.z.literal("apple_pay")
 });
 var MoonPayCheckoutSchema = $checkout;
 var $credentials = obj2({ customerId: $nonEmpty, accessToken: $nonEmpty });
 var MoonPaySdkCredentialsSchema = $credentials;
-var $intentRequest = import_zod2.z.discriminatedUnion("kind", [
-  obj2({ kind: import_zod2.z.literal("observe"), checkout: $checkout, credentials: $credentials.optional() }),
-  obj2({
-    kind: import_zod2.z.literal("kyc"),
-    checkout: $checkout,
-    credentials: $credentials,
-    values: import_zod2.z.record(KycFieldIdSchema, import_zod2.z.string()).refine((values) => Object.keys(values).length > 0, "values must not be empty")
-  }),
-  obj2({
-    kind: import_zod2.z.literal("order"),
-    orderId: $nonEmpty,
-    transactionId: $nonEmpty.optional(),
-    quotedAmount: FiatAmountSchema,
-    geo: $geo.optional()
-  })
-]);
-var MoonPayIntentRequestSchema = $intentRequest;
+var $context = { checkout: $checkout, credentials: $credentials.optional() };
+var $requestContext = obj2($context);
+var MoonPayRequestContextSchema = $requestContext;
 var $quoteInput = obj2({
   source: obj2({ asset: obj2({ code: import_zod2.z.enum(FIAT_CURRENCY_CODES2) }), amount: $nonEmpty }),
   destination: obj2({ asset: obj2({ code: $nonEmpty }) }),
@@ -2836,50 +2849,103 @@ var $quoteInput = obj2({
   feeBehavior: import_zod2.z.literal("inclusive")
 });
 var MoonPayQuoteInputSchema = $quoteInput;
-var $stepRefusal = import_zod2.z.enum(["NOT_ELIGIBLE", "DOCUMENTS_REQUIRED", "FINAL_REJECTION", "CUSTOMER_MISMATCH"]);
-var $orderRefusal = import_zod2.z.enum(["CUSTOMER_MISMATCH", "WALLET_MISMATCH", "UNRECORDABLE"]);
+var $observeFields = { action: import_zod2.z.literal("observe") };
+var $consentFields = {
+  action: import_zod2.z.literal("consent"),
+  acceptances: import_zod2.z.array(TermsDocumentAcceptanceSchema).min(1).refine((acceptances) => hasUniqueIds2(acceptances.map((acceptance) => acceptance.documentId)), "each document is accepted once")
+};
+var $connectFields = { action: import_zod2.z.literal("connect"), customerId: $nonEmpty, accessToken: $nonEmpty };
+var $kycFields = {
+  action: import_zod2.z.literal("kyc"),
+  credentials: $credentials,
+  values: import_zod2.z.record(KycFieldIdSchema, import_zod2.z.string()).refine((values) => Object.keys(values).length > 0, "values must not be empty")
+};
+var $orderFields = { action: import_zod2.z.literal("order"), orderId: $nonEmpty, quotedAmount: FiatAmountSchema, transactionId: $nonEmpty.optional() };
+var $observeRequest = obj2({ ...$context, ...$observeFields });
+var $consentRequest = obj2({ ...$context, ...$consentFields });
+var $connectRequest = obj2({ ...$context, ...$connectFields });
+var $kycRequest = obj2({ ...$context, ...$kycFields });
+var $orderRequest = obj2({ ...$context, ...$orderFields });
+var MoonPayObserveRequestSchema = $observeRequest;
+var MoonPayConsentRequestSchema = $consentRequest;
+var MoonPayConnectRequestSchema = $connectRequest;
+var MoonPayKycRequestSchema = $kycRequest;
+var MoonPayOrderRequestSchema = $orderRequest;
+var $request = import_zod2.z.discriminatedUnion("action", [$observeRequest, $consentRequest, $connectRequest, $kycRequest, $orderRequest]);
+var MoonPayRequestSchema = $request;
+var $envelope = { provider: import_zod2.z.literal("MOONPAY"), geo: FiatGeoSchema, ...$context };
+var $nextRequest2 = import_zod2.z.discriminatedUnion("action", [
+  obj2({ ...$envelope, ...$observeFields }),
+  obj2({ ...$envelope, ...$consentFields }),
+  obj2({ ...$envelope, ...$connectFields }),
+  obj2({ ...$envelope, ...$kycFields }),
+  obj2({ ...$envelope, ...$orderFields })
+]);
+var MoonPayNextRequestSchema = $nextRequest2;
 var FIELD_OF_CODE = { PHONE_IN_USE: "PHONE_NUMBER", TAX_ID_IN_USE: "TAX_IDENTIFIER" };
 var $fieldError = obj2({ fieldId: $nonEmpty, message: $nonEmpty, code: import_zod2.z.enum(["PHONE_IN_USE", "TAX_ID_IN_USE"]).optional() });
-var $pending = obj2({ status: import_zod2.z.literal("PENDING"), retryAfterMs: import_zod2.z.number().int().positive().max(6e4) });
-var $stepStatus = import_zod2.z.discriminatedUnion("status", [
-  obj2({ status: import_zod2.z.literal("TERMS"), stage: import_zod2.z.enum(["CHECKOUT", "KYC"]), documents: import_zod2.z.array(TermsDocumentSchema).min(1) }),
-  obj2({ status: import_zod2.z.literal("SDK_AUTH"), sessionToken: $nonEmpty, quoteInput: $quoteInput, resetConnection: import_zod2.z.literal(true).optional() }),
-  obj2({ status: import_zod2.z.literal("KYC"), fields: import_zod2.z.array(FormFieldSchema).min(1), fieldErrors: import_zod2.z.array($fieldError).min(1).optional() }),
-  $pending,
-  obj2({ status: import_zod2.z.literal("READY"), orderId: $nonEmpty, quoteInput: $quoteInput }),
-  obj2({ status: import_zod2.z.literal("REFUSED"), reason: $stepRefusal, recovery: import_zod2.z.enum(["REQUOTE", "NONE"]) })
-]);
-var $stepResponse2 = $stepStatus.superRefine((response, context) => {
-  if (response.status === "TERMS") {
-    if (!hasUniqueIds2(response.documents.map((document) => document.id))) {
-      context.addIssue({ code: "custom", path: ["documents"], message: "document ids must be unique" });
-    }
-    if (response.documents.some((document) => document.stage !== response.stage)) {
-      context.addIssue({ code: "custom", path: ["documents"], message: "every document must be at the response stage" });
-    }
+var $consentShape = obj2({ next: import_zod2.z.literal("consent"), documents: import_zod2.z.array(TermsDocumentSchema).min(1) });
+var $connectPrompt = obj2({
+  next: import_zod2.z.literal("connect"),
+  sessionToken: $nonEmpty,
+  quoteInput: $quoteInput,
+  resetConnection: import_zod2.z.literal(true).optional()
+});
+var $kycShape = obj2({ next: import_zod2.z.literal("kyc"), fields: import_zod2.z.array(FormFieldSchema).min(1), fieldErrors: import_zod2.z.array($fieldError).min(1).optional() });
+var $waitPrompt = obj2({ next: import_zod2.z.literal("wait"), retryAfterMs: import_zod2.z.number().int().positive().max(6e4) });
+var $orderPrompt = obj2({ next: import_zod2.z.literal("order"), orderId: $nonEmpty, quoteInput: $quoteInput });
+var checkConsent = (prompt, context) => {
+  if (!hasUniqueIds2(prompt.documents.map((document) => document.id))) {
+    context.addIssue({ code: "custom", path: ["documents"], message: "document ids must be unique" });
   }
-  if (response.status === "KYC") {
-    const fieldIds = response.fields.map((field) => field.id);
-    if (!hasUniqueIds2(fieldIds)) {
-      context.addIssue({ code: "custom", path: ["fields"], message: "field ids must be unique" });
-    }
-    if (response.fieldErrors?.some((error) => !fieldIds.includes(error.fieldId))) {
-      context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error must name a field in this response" });
-    }
-    if (response.fieldErrors?.some((error) => error.code && FIELD_OF_CODE[error.code] !== error.fieldId)) {
-      context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error code must match its field" });
-    }
+};
+var checkKyc = (prompt, context) => {
+  const fieldIds = prompt.fields.map((field) => field.id);
+  if (!hasUniqueIds2(fieldIds)) {
+    context.addIssue({ code: "custom", path: ["fields"], message: "field ids must be unique" });
+  }
+  if (prompt.fieldErrors?.some((error) => !fieldIds.includes(error.fieldId))) {
+    context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error must name a field in this prompt" });
   }
+  if (prompt.fieldErrors?.some((error) => error.code && FIELD_OF_CODE[error.code] !== error.fieldId)) {
+    context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error code must match its field" });
+  }
+};
+var MoonPayConsentPromptSchema = $consentShape.superRefine(checkConsent);
+var MoonPayConnectPromptSchema = $connectPrompt;
+var MoonPayKycPromptSchema = $kycShape.superRefine(checkKyc);
+var MoonPayWaitPromptSchema = $waitPrompt;
+var MoonPayOrderPromptSchema = $orderPrompt;
+var checkPrompt = (response, context) => {
+  if (response.next === "consent") checkConsent(response, context);
+  if (response.next === "kyc") checkKyc(response, context);
+};
+var $promptOptions = [$consentShape, $connectPrompt, $kycShape, $waitPrompt, $orderPrompt];
+var $prompt = import_zod2.z.discriminatedUnion("next", [...$promptOptions]).superRefine(checkPrompt);
+var MoonPayPromptSchema = $prompt;
+var $done = obj2({ next: import_zod2.z.literal("done"), order: FiatStepResponseSchema });
+var MoonPayDoneSchema = $done;
+var $stepRefused = obj2({
+  next: import_zod2.z.literal("refused"),
+  reason: import_zod2.z.enum(["NOT_ELIGIBLE", "DOCUMENTS_REQUIRED", "FINAL_REJECTION", "CUSTOMER_MISMATCH"]),
+  recovery: import_zod2.z.enum(["REQUOTE", "NONE"])
 });
+var $orderRefused = obj2({
+  next: import_zod2.z.literal("refused"),
+  reason: import_zod2.z.enum(["CUSTOMER_MISMATCH", "WALLET_MISMATCH", "UNRECORDABLE"]),
+  recovery: import_zod2.z.literal("NONE")
+});
+var $stepResponse2 = import_zod2.z.discriminatedUnion("next", [...$promptOptions, $stepRefused]).superRefine(checkPrompt);
 var MoonPayStepResponseSchema = $stepResponse2;
-var $orderResponse = import_zod2.z.discriminatedUnion("status", [
-  obj2({ status: import_zod2.z.literal("DONE"), order: FiatStepResponseSchema }),
-  $pending,
-  obj2({ status: import_zod2.z.literal("REFUSED"), reason: $orderRefusal, recovery: import_zod2.z.literal("NONE") })
-]);
+var $orderResponse = import_zod2.z.discriminatedUnion("next", [$done, $orderPrompt, $orderRefused]);
 var MoonPayOrderResponseSchema = $orderResponse;
-var $intentResponse = import_zod2.z.union([$stepResponse2, $orderResponse]);
-var MoonPayIntentResponseSchema = $intentResponse;
+var MoonPayResponseSchemaFor = {
+  observe: MoonPayStepResponseSchema,
+  consent: MoonPayStepResponseSchema,
+  connect: MoonPayStepResponseSchema,
+  kyc: MoonPayStepResponseSchema,
+  order: MoonPayOrderResponseSchema
+};
 var $faultFields = {
   reason: import_zod2.z.enum(["SESSION_BUDGET_SPENT", "RATE_LIMITED", "PROVIDER_UNAVAILABLE", "INVALID_REQUEST"]),
   recovery: import_zod2.z.enum(["RETRY", "REQUOTE", "NONE"])