@fun-xyz/fiat-contract 0.23.0 → 0.25.0

package/dist/index.mjs

@@ -12,19 +12,19 @@ import {
   tableEntry,
   unofferedEndpoints,
   unreachableStates
-} from "./chunk-EI56NQ7K.mjs";
+} from "./chunk-LHCED3AP.mjs";
 import {
   MOONPAY_ENDPOINTS
-} from "./chunk-3HCZ6JBJ.mjs";
+} from "./chunk-T5JAYOWY.mjs";
 import {
   FIAT_TERMS_ENDPOINT,
   FUN_KYC_CONSENT_DOCUMENTS,
   PROVIDER_CHECKOUT_DOCUMENTS,
   PUBLISHED_TERMS_DOCUMENTS
-} from "./chunk-5GRPYE2U.mjs";
+} from "./chunk-CRNKRIKR.mjs";
 import {
   ROUTING_ENDPOINTS
-} from "./chunk-KYE2HYV5.mjs";
+} from "./chunk-WEXD7UEE.mjs";
 
 // src/codes.ts
 var US_STATE_CODES = [
@@ -953,8 +953,7 @@ var $routingTableResponse = obj({
   methods: z.array($routingTableMethod).refine((methods) => hasUniqueIds(methods.map((entry) => entry.method)), "each method is listed once")
 });
 var FiatRoutingTableResponseSchema = $routingTableResponse;
-var $routingQuoteRequest = obj({
-  provider: $routingProvider,
+var $routingQuoteTermsShape = {
   fiatCurrency: z.enum(FIAT_CURRENCY_CODES),
   fiatAmount: $decimalAmount.refine((amount) => Number(amount) > 0, "must be positive"),
   cryptoCurrencyCode: $nonBlank,
@@ -965,7 +964,16 @@ var $routingQuoteRequest = obj({
     { message: US_REGION_REQUIRED, path: ["region"] }
   ),
   prepareSessionAuth: z.boolean().optional()
-});
+};
+var $routingQuoteTerms = obj($routingQuoteTermsShape);
+var FiatRoutingQuoteTermsSchema = $routingQuoteTerms;
+var $routingQuoteRequest = z.union([
+  obj({
+    ...$routingQuoteTermsShape,
+    providers: z.array($routingProvider).min(1).refine((providers) => hasUniqueIds(providers), "each provider is listed once")
+  }),
+  obj({ ...$routingQuoteTermsShape, provider: $routingProvider })
+]);
 var FiatRoutingQuoteRequestSchema = $routingQuoteRequest;
 var $routingServiceableRange = obj({ min: $money, max: $money, userMax: $money.nullable().optional() });
 var $noRouteFields = {
@@ -1002,6 +1010,10 @@ var $routingTableErrorBody = z.union([$routingRateLimitedErrorBody, $routingFaul
 var FiatRoutingTableErrorBodySchema = $routingTableErrorBody;
 var $routingQuoteErrorBody = z.union([$routingNoRouteErrorBody, $routingAmountErrorBody, $routingFaultErrorBody]);
 var FiatRoutingQuoteErrorBodySchema = $routingQuoteErrorBody;
+var $fiatGeo = obj({ alpha2: z.string().regex(/^[A-Z]{2}$/), region: $nonBlank.optional(), ip: $nonBlank.optional() });
+var FiatGeoSchema = $fiatGeo;
+var $nextRequest = z.object({ provider: $provider, action: $nonBlank, geo: $fiatGeo }).catchall(z.unknown());
+var FiatNextRequestSchema = $nextRequest;
 var $providerBoundStepResponse = obj({
   state: $providerBoundFlowState,
   provider: $provider,
@@ -2131,33 +2143,17 @@ var FIAT_CURRENCY_CODES2 = Object.keys(FIAT_CURRENCY_NAMES);
 var obj2 = (shape) => z2.object(shape).strict();
 var $nonEmpty = z2.string().refine((value) => value.trim().length > 0, "must not be blank");
 var hasUniqueIds2 = (ids) => new Set(ids).size === ids.length;
-var $geo = obj2({ alpha2: z2.string().regex(/^[A-Z]{2}$/), region: $nonEmpty.optional(), ip: $nonEmpty.optional() });
 var $checkout = obj2({
   amount: FiatAmountSchema,
   destination: obj2({ asset: $nonEmpty, network: $nonEmpty }),
-  paymentMethod: z2.literal("apple_pay"),
-  geo: $geo
+  paymentMethod: z2.literal("apple_pay")
 });
 var MoonPayCheckoutSchema = $checkout;
 var $credentials = obj2({ customerId: $nonEmpty, accessToken: $nonEmpty });
 var MoonPaySdkCredentialsSchema = $credentials;
-var $intentRequest = z2.discriminatedUnion("kind", [
-  obj2({ kind: z2.literal("observe"), checkout: $checkout, credentials: $credentials.optional() }),
-  obj2({
-    kind: z2.literal("kyc"),
-    checkout: $checkout,
-    credentials: $credentials,
-    values: z2.record(KycFieldIdSchema, z2.string()).refine((values) => Object.keys(values).length > 0, "values must not be empty")
-  }),
-  obj2({
-    kind: z2.literal("order"),
-    orderId: $nonEmpty,
-    transactionId: $nonEmpty.optional(),
-    quotedAmount: FiatAmountSchema,
-    geo: $geo.optional()
-  })
-]);
-var MoonPayIntentRequestSchema = $intentRequest;
+var $context = { checkout: $checkout, credentials: $credentials.optional() };
+var $requestContext = obj2($context);
+var MoonPayRequestContextSchema = $requestContext;
 var $quoteInput = obj2({
   source: obj2({ asset: obj2({ code: z2.enum(FIAT_CURRENCY_CODES2) }), amount: $nonEmpty }),
   destination: obj2({ asset: obj2({ code: $nonEmpty }) }),
@@ -2166,50 +2162,103 @@ var $quoteInput = obj2({
   feeBehavior: z2.literal("inclusive")
 });
 var MoonPayQuoteInputSchema = $quoteInput;
-var $stepRefusal = z2.enum(["NOT_ELIGIBLE", "DOCUMENTS_REQUIRED", "FINAL_REJECTION", "CUSTOMER_MISMATCH"]);
-var $orderRefusal = z2.enum(["CUSTOMER_MISMATCH", "WALLET_MISMATCH", "UNRECORDABLE"]);
+var $observeFields = { action: z2.literal("observe") };
+var $consentFields = {
+  action: z2.literal("consent"),
+  acceptances: z2.array(TermsDocumentAcceptanceSchema).min(1).refine((acceptances) => hasUniqueIds2(acceptances.map((acceptance) => acceptance.documentId)), "each document is accepted once")
+};
+var $connectFields = { action: z2.literal("connect"), customerId: $nonEmpty, accessToken: $nonEmpty };
+var $kycFields = {
+  action: z2.literal("kyc"),
+  credentials: $credentials,
+  values: z2.record(KycFieldIdSchema, z2.string()).refine((values) => Object.keys(values).length > 0, "values must not be empty")
+};
+var $orderFields = { action: z2.literal("order"), orderId: $nonEmpty, quotedAmount: FiatAmountSchema, transactionId: $nonEmpty.optional() };
+var $observeRequest = obj2({ ...$context, ...$observeFields });
+var $consentRequest = obj2({ ...$context, ...$consentFields });
+var $connectRequest = obj2({ ...$context, ...$connectFields });
+var $kycRequest = obj2({ ...$context, ...$kycFields });
+var $orderRequest = obj2({ ...$context, ...$orderFields });
+var MoonPayObserveRequestSchema = $observeRequest;
+var MoonPayConsentRequestSchema = $consentRequest;
+var MoonPayConnectRequestSchema = $connectRequest;
+var MoonPayKycRequestSchema = $kycRequest;
+var MoonPayOrderRequestSchema = $orderRequest;
+var $request = z2.discriminatedUnion("action", [$observeRequest, $consentRequest, $connectRequest, $kycRequest, $orderRequest]);
+var MoonPayRequestSchema = $request;
+var $envelope = { provider: z2.literal("MOONPAY"), geo: FiatGeoSchema, ...$context };
+var $nextRequest2 = z2.discriminatedUnion("action", [
+  obj2({ ...$envelope, ...$observeFields }),
+  obj2({ ...$envelope, ...$consentFields }),
+  obj2({ ...$envelope, ...$connectFields }),
+  obj2({ ...$envelope, ...$kycFields }),
+  obj2({ ...$envelope, ...$orderFields })
+]);
+var MoonPayNextRequestSchema = $nextRequest2;
 var FIELD_OF_CODE = { PHONE_IN_USE: "PHONE_NUMBER", TAX_ID_IN_USE: "TAX_IDENTIFIER" };
 var $fieldError = obj2({ fieldId: $nonEmpty, message: $nonEmpty, code: z2.enum(["PHONE_IN_USE", "TAX_ID_IN_USE"]).optional() });
-var $pending = obj2({ status: z2.literal("PENDING"), retryAfterMs: z2.number().int().positive().max(6e4) });
-var $stepStatus = z2.discriminatedUnion("status", [
-  obj2({ status: z2.literal("TERMS"), stage: z2.enum(["CHECKOUT", "KYC"]), documents: z2.array(TermsDocumentSchema).min(1) }),
-  obj2({ status: z2.literal("SDK_AUTH"), sessionToken: $nonEmpty, quoteInput: $quoteInput, resetConnection: z2.literal(true).optional() }),
-  obj2({ status: z2.literal("KYC"), fields: z2.array(FormFieldSchema).min(1), fieldErrors: z2.array($fieldError).min(1).optional() }),
-  $pending,
-  obj2({ status: z2.literal("READY"), orderId: $nonEmpty, quoteInput: $quoteInput }),
-  obj2({ status: z2.literal("REFUSED"), reason: $stepRefusal, recovery: z2.enum(["REQUOTE", "NONE"]) })
-]);
-var $stepResponse2 = $stepStatus.superRefine((response, context) => {
-  if (response.status === "TERMS") {
-    if (!hasUniqueIds2(response.documents.map((document) => document.id))) {
-      context.addIssue({ code: "custom", path: ["documents"], message: "document ids must be unique" });
-    }
-    if (response.documents.some((document) => document.stage !== response.stage)) {
-      context.addIssue({ code: "custom", path: ["documents"], message: "every document must be at the response stage" });
-    }
+var $consentShape = obj2({ next: z2.literal("consent"), documents: z2.array(TermsDocumentSchema).min(1) });
+var $connectPrompt = obj2({
+  next: z2.literal("connect"),
+  sessionToken: $nonEmpty,
+  quoteInput: $quoteInput,
+  resetConnection: z2.literal(true).optional()
+});
+var $kycShape = obj2({ next: z2.literal("kyc"), fields: z2.array(FormFieldSchema).min(1), fieldErrors: z2.array($fieldError).min(1).optional() });
+var $waitPrompt = obj2({ next: z2.literal("wait"), retryAfterMs: z2.number().int().positive().max(6e4) });
+var $orderPrompt = obj2({ next: z2.literal("order"), orderId: $nonEmpty, quoteInput: $quoteInput });
+var checkConsent = (prompt, context) => {
+  if (!hasUniqueIds2(prompt.documents.map((document) => document.id))) {
+    context.addIssue({ code: "custom", path: ["documents"], message: "document ids must be unique" });
   }
-  if (response.status === "KYC") {
-    const fieldIds = response.fields.map((field) => field.id);
-    if (!hasUniqueIds2(fieldIds)) {
-      context.addIssue({ code: "custom", path: ["fields"], message: "field ids must be unique" });
-    }
-    if (response.fieldErrors?.some((error) => !fieldIds.includes(error.fieldId))) {
-      context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error must name a field in this response" });
-    }
-    if (response.fieldErrors?.some((error) => error.code && FIELD_OF_CODE[error.code] !== error.fieldId)) {
-      context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error code must match its field" });
-    }
+};
+var checkKyc = (prompt, context) => {
+  const fieldIds = prompt.fields.map((field) => field.id);
+  if (!hasUniqueIds2(fieldIds)) {
+    context.addIssue({ code: "custom", path: ["fields"], message: "field ids must be unique" });
+  }
+  if (prompt.fieldErrors?.some((error) => !fieldIds.includes(error.fieldId))) {
+    context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error must name a field in this prompt" });
   }
+  if (prompt.fieldErrors?.some((error) => error.code && FIELD_OF_CODE[error.code] !== error.fieldId)) {
+    context.addIssue({ code: "custom", path: ["fieldErrors"], message: "a field error code must match its field" });
+  }
+};
+var MoonPayConsentPromptSchema = $consentShape.superRefine(checkConsent);
+var MoonPayConnectPromptSchema = $connectPrompt;
+var MoonPayKycPromptSchema = $kycShape.superRefine(checkKyc);
+var MoonPayWaitPromptSchema = $waitPrompt;
+var MoonPayOrderPromptSchema = $orderPrompt;
+var checkPrompt = (response, context) => {
+  if (response.next === "consent") checkConsent(response, context);
+  if (response.next === "kyc") checkKyc(response, context);
+};
+var $promptOptions = [$consentShape, $connectPrompt, $kycShape, $waitPrompt, $orderPrompt];
+var $prompt = z2.discriminatedUnion("next", [...$promptOptions]).superRefine(checkPrompt);
+var MoonPayPromptSchema = $prompt;
+var $done = obj2({ next: z2.literal("done"), order: FiatStepResponseSchema });
+var MoonPayDoneSchema = $done;
+var $stepRefused = obj2({
+  next: z2.literal("refused"),
+  reason: z2.enum(["NOT_ELIGIBLE", "DOCUMENTS_REQUIRED", "FINAL_REJECTION", "CUSTOMER_MISMATCH"]),
+  recovery: z2.enum(["REQUOTE", "NONE"])
 });
+var $orderRefused = obj2({
+  next: z2.literal("refused"),
+  reason: z2.enum(["CUSTOMER_MISMATCH", "WALLET_MISMATCH", "UNRECORDABLE"]),
+  recovery: z2.literal("NONE")
+});
+var $stepResponse2 = z2.discriminatedUnion("next", [...$promptOptions, $stepRefused]).superRefine(checkPrompt);
 var MoonPayStepResponseSchema = $stepResponse2;
-var $orderResponse = z2.discriminatedUnion("status", [
-  obj2({ status: z2.literal("DONE"), order: FiatStepResponseSchema }),
-  $pending,
-  obj2({ status: z2.literal("REFUSED"), reason: $orderRefusal, recovery: z2.literal("NONE") })
-]);
+var $orderResponse = z2.discriminatedUnion("next", [$done, $orderPrompt, $orderRefused]);
 var MoonPayOrderResponseSchema = $orderResponse;
-var $intentResponse = z2.union([$stepResponse2, $orderResponse]);
-var MoonPayIntentResponseSchema = $intentResponse;
+var MoonPayResponseSchemaFor = {
+  observe: MoonPayStepResponseSchema,
+  consent: MoonPayStepResponseSchema,
+  connect: MoonPayStepResponseSchema,
+  kyc: MoonPayStepResponseSchema,
+  order: MoonPayOrderResponseSchema
+};
 var $faultFields = {
   reason: z2.enum(["SESSION_BUDGET_SPENT", "RATE_LIMITED", "PROVIDER_UNAVAILABLE", "INVALID_REQUEST"]),
   recovery: z2.enum(["RETRY", "REQUOTE", "NONE"])
@@ -2241,9 +2290,12 @@ export {
   FiatAmountSchema,
   FiatCurrencyCode,
   FiatEndpointSchema,
+  FiatGeoSchema,
+  FiatNextRequestSchema,
   FiatProviderSchema,
   FiatRoutingQuoteErrorBodySchema,
   FiatRoutingQuoteRequestSchema,
+  FiatRoutingQuoteTermsSchema,
   FiatRoutingTableErrorBodySchema,
   FiatRoutingTableQuerySchema,
   FiatRoutingTableResponseSchema,
@@ -2271,14 +2323,28 @@ export {
   KycSdkResultReportSchema,
   MOONPAY_ENDPOINTS,
   MoonPayCheckoutSchema,
+  MoonPayConnectPromptSchema,
+  MoonPayConnectRequestSchema,
+  MoonPayConsentPromptSchema,
+  MoonPayConsentRequestSchema,
+  MoonPayDoneSchema,
   MoonPayErrorBodySchema,
   MoonPayFaultSchema,
-  MoonPayIntentRequestSchema,
-  MoonPayIntentResponseSchema,
+  MoonPayKycPromptSchema,
+  MoonPayKycRequestSchema,
+  MoonPayNextRequestSchema,
+  MoonPayObserveRequestSchema,
+  MoonPayOrderPromptSchema,
+  MoonPayOrderRequestSchema,
   MoonPayOrderResponseSchema,
+  MoonPayPromptSchema,
   MoonPayQuoteInputSchema,
+  MoonPayRequestContextSchema,
+  MoonPayRequestSchema,
+  MoonPayResponseSchemaFor,
   MoonPaySdkCredentialsSchema,
   MoonPayStepResponseSchema,
+  MoonPayWaitPromptSchema,
   OrderAwaitingConfirmationStateSchema,
   OrderCreatedStateSchema,
   OrderRefSchema,

package/dist/providers/moonpay.d.ts

@@ -1,28 +1,31 @@
 /**
- * The MoonPay provider-owned flow: one route, `POST /fiat/providers/moonpay/intent`.
+ * The MoonPay flow on `POST /fiat/next`.
  *
- * Each request carries evidence or a user action (`kind`), and each response says what the backend
- * needs next (`status`). `observe` and `kyc` answer a `MoonPayStepResponse`, and `order` answers a
- * `MoonPayOrderResponse` (`MoonPayIntentResponseFor`). Terms and consents go through
- * the platform `POST /fiat/terms` (`./terms`). Identity and the deposit wallet always come from the
- * verified partner assertion, never from a request body.
+ * Each action has one name and two types. A response's prompt names it in `next` and carries what
+ * the client needs to do it. The client's request names it in `action` and carries the result. Every
+ * response is the next prompt, `done`, or `refused` (`MoonPayResponseFor`). `observe` carries no
+ * result and answers the current prompt. `wait` has no request: the client sends `observe` after it.
+ *
+ * The body is `MoonPayNextRequest`: `provider`, the shared `geo`, the context (`checkout`, and
+ * `credentials` after `connect`), and the action's result. Identity and the deposit wallet always
+ * come from the verified partner assertion, never from a request body.
  *
  * A retry sends the same request. Each write is idempotent on data the request carries, and every
  * call, a retry too, returns the current response.
  *
- * A fault is a 4xx/5xx whose body is `MoonPayErrorBody`. Anything the user can act on is a 200
- * `MoonPayIntentResponse`.
+ * A fault is a 4xx/5xx whose body is `MoonPayErrorBody`. Anything the user can act on is a 200.
  *
  * Zero runtime dependencies, so production React Native code can import it. The zod schemas are in
  * `./moonpay.schemas`, exported from the package root.
  */
 import type { FiatCurrencyCode } from '../codes';
-import type { TermsDocument, TermsStage } from '../terms';
-import type { FiatAmount, FiatStepResponse, FormField, KycFieldId } from '../types';
+import type { FiatTermsRequest, TermsDocument } from '../terms';
+import type { FiatAmount, FiatGeo, FiatStepResponse, FormField, KycFieldId } from '../types';
 export declare const MOONPAY_ENDPOINTS: {
-    readonly intent: "POST /fiat/providers/moonpay/intent";
+    readonly next: "POST /fiat/next";
 };
-/** The checkout terms. The client holds them and sends them on every `observe` and `kyc`. */
+export type MoonPayAction = 'observe' | 'consent' | 'connect' | 'kyc' | 'wait' | 'order';
+/** The checkout terms. The client holds them and sends them on every request. */
 export interface MoonPayCheckout {
     amount: FiatAmount;
     /** The quote's `crypto.currency` and `crypto.network`, unchanged. */
@@ -31,46 +34,17 @@ export interface MoonPayCheckout {
         network: string;
     };
     paymentMethod: 'apple_pay';
-    /** The geo endpoint's response, as sent to `POST /fiat/quote`. `alpha2` is ISO 3166-1 alpha-2. */
-    geo: {
-        alpha2: string;
-        region?: string;
-        ip?: string;
-    };
 }
 /** From the SDK's `active` connection. `accessToken` is a credential: the backend never logs it. */
 export interface MoonPaySdkCredentials {
     customerId: string;
     accessToken: string;
 }
-export type MoonPayIntentRequest = 
-/** No effect. Without credentials, the answer past the gates is `SDK_AUTH`. */
-{
-    kind: 'observe';
+/** On every request, not part of the result. `credentials` is present after `connect`. */
+export type MoonPayRequestContext = {
     checkout: MoonPayCheckout;
     credentials?: MoonPaySdkCredentials;
-}
-/** Only after a `KYC` response. `values` is keyed by the ids of that response's fields; there is no form id. */
- | {
-    kind: 'kyc';
-    checkout: MoonPayCheckout;
-    credentials: MoonPaySdkCredentials;
-    values: Partial<Record<KycFieldId, string>>;
-}
-/**
- * After every charge attempt, a failed one too. `transactionId` is from the Apple Pay event when it
- * has one; without it the backend records the failed charges MoonPay lists for `orderId`.
- * `quotedAmount` is the fiat amount the buyer saw on the quote. `geo` is the checkout's, as sent on
- * `observe`; the order records its `alpha2`, and no country when it is absent.
- */
- | {
-    kind: 'order';
-    orderId: string;
-    transactionId?: string;
-    quotedAmount: FiatAmount;
-    geo?: MoonPayCheckout['geo'];
 };
-export type MoonPayIntentKind = MoonPayIntentRequest['kind'];
 /**
  * The parameters for the device `client.getQuote`, not a quote. The backend builds them because the
  * wallet must be the verified one and MoonPay's currency codes differ by environment.
@@ -95,18 +69,39 @@ export interface MoonPayQuoteInput {
     };
     feeBehavior: 'inclusive';
 }
-/** `REQUOTE` for `NOT_ELIGIBLE` and `DOCUMENTS_REQUIRED`, `NONE` for the others. */
-export type MoonPayStepRefusal = 'NOT_ELIGIBLE' | 'DOCUMENTS_REQUIRED' | 'FINAL_REJECTION' | 'CUSTOMER_MISMATCH';
+/** No prompt of its own: the answer is the current prompt. Writes nothing. */
+export type MoonPayObserveRequest = {
+    action: 'observe';
+};
+/** MoonPay's terms first. Later, before `kyc`, Fun's KYC consent if the buyer has not accepted it. */
+export type MoonPayConsentPrompt = {
+    next: 'consent';
+    documents: TermsDocument[];
+};
+/** The `POST /fiat/terms` items, recorded under the same rules. */
+export type MoonPayConsentRequest = {
+    action: 'consent';
+    acceptances: FiatTermsRequest['acceptances'];
+};
 /**
- * After a charge, always with `recovery: NONE`. `CUSTOMER_MISMATCH`: the transaction's customer is
- * not bound to this buyer. `WALLET_MISMATCH`: the transaction pays another wallet than the
- * assertion's. `UNRECORDABLE`: a charge no retry can record, held for refund review.
+ * Run MoonPay's connection check with `sessionToken`; it asks for an OTP only if the hidden check
+ * fails. `resetConnection`: the device's connection is another buyer's, so reset it first.
  */
-export type MoonPayOrderRefusal = 'CUSTOMER_MISMATCH' | 'WALLET_MISMATCH' | 'UNRECORDABLE';
+export type MoonPayConnectPrompt = {
+    next: 'connect';
+    sessionToken: string;
+    quoteInput: MoonPayQuoteInput;
+    resetConnection?: true;
+};
+export type MoonPayConnectRequest = {
+    action: 'connect';
+    customerId: string;
+    accessToken: string;
+};
 /** Another MoonPay customer already holds the value; only a different one goes through. */
 export type MoonPayFieldErrorCode = 'PHONE_IN_USE' | 'TAX_ID_IN_USE';
 /**
- * A reason on one field of a `KYC` response. `fieldId` names a field in that response. `code` is set
+ * A reason on one field of a `kyc` prompt. `fieldId` names a field in that prompt. `code` is set
  * only for a refusal the client words itself: `PHONE_IN_USE` on `PHONE_NUMBER`, `TAX_ID_IN_USE` on `TAX_IDENTIFIER`.
  */
 export interface MoonPayFieldError {
@@ -114,82 +109,85 @@ export interface MoonPayFieldError {
     message: string;
     code?: MoonPayFieldErrorCode;
 }
-/** The answer to `observe` and `kyc`. */
-export type MoonPayStepResponse = 
-/** Show `documents` (every one at `stage`), send `POST /fiat/terms`, then `observe`. */
-{
-    status: 'TERMS';
-    stage: TermsStage;
-    documents: TermsDocument[];
-}
-/**
- * Run the MoonPay connection check with `sessionToken`, then `observe` with the credentials.
- * `resetConnection`: the device's connection is another buyer's, so reset it before the check.
- */
- | {
-    status: 'SDK_AUTH';
-    sessionToken: string;
-    quoteInput: MoonPayQuoteInput;
-    resetConnection?: true;
-}
-/** Show the shared form, then send `kyc`. */
- | {
-    status: 'KYC';
+/** Show the shared form. */
+export type MoonPayKycPrompt = {
+    next: 'kyc';
     fields: FormField[];
     fieldErrors?: MoonPayFieldError[];
-}
-/** Send `observe` after the delay. Never `kyc` again: its write is done. */
- | {
-    status: 'PENDING';
+};
+/** Keyed by the ids of the prompt's fields; there is no form id. Needs `credentials`: the backend reads the customer. */
+export type MoonPayKycRequest = {
+    action: 'kyc';
+    credentials: MoonPaySdkCredentials;
+    values: Partial<Record<KycFieldId, string>>;
+};
+/** MoonPay is reviewing. No request of its own: send `observe` after the delay. */
+export type MoonPayWaitPrompt = {
+    next: 'wait';
     retryAfterMs: number;
-}
-/** Mount Apple Pay with `externalTransactionId = orderId`, then send `order` after the charge. */
- | {
-    status: 'READY';
+};
+/** Get the device quote from `quoteInput`, mount Apple Pay with `externalTransactionId = orderId`. */
+export type MoonPayOrderPrompt = {
+    next: 'order';
     orderId: string;
     quoteInput: MoonPayQuoteInput;
-}
-/** Exit the provider flow. `REQUOTE` goes back to `POST /fiat/quote`; `NONE` ends the flow. */
- | {
-    status: 'REFUSED';
-    reason: MoonPayStepRefusal;
-    recovery: 'REQUOTE' | 'NONE';
 };
 /**
- * The answer to `order`, which runs after each charge attempt. A failed charge is recorded too: it
- * answers `DONE` with the order in `FAILED`, and the client requotes for a new `orderId`.
+ * After every charge attempt, a failed one too. `quotedAmount` is the fiat amount the device quote
+ * showed. `transactionId` is from the Apple Pay event when it has one; without it the backend
+ * records the failed charges MoonPay lists for `orderId`.
  */
-export type MoonPayOrderResponse = 
-/** The `GET /fiat/orders/:orderId` response; the shared order screen renders it. */
-{
-    status: 'DONE';
-    order: FiatStepResponse;
-}
+export type MoonPayOrderRequest = {
+    action: 'order';
+    orderId: string;
+    quotedAmount: FiatAmount;
+    transactionId?: string;
+};
+export type MoonPayRequest = MoonPayRequestContext & (MoonPayObserveRequest | MoonPayConsentRequest | MoonPayConnectRequest | MoonPayKycRequest | MoonPayOrderRequest);
+/** The wire body. The orchestrator reads `provider` and `geo`; MoonPay's action schemas read the rest. */
+export type MoonPayNextRequest = {
+    provider: 'MOONPAY';
+    geo: FiatGeo;
+} & MoonPayRequest;
+/** `REQUOTE` for `NOT_ELIGIBLE` and `DOCUMENTS_REQUIRED`, `NONE` for the others. */
+export type MoonPayStepRefusal = 'NOT_ELIGIBLE' | 'DOCUMENTS_REQUIRED' | 'FINAL_REJECTION' | 'CUSTOMER_MISMATCH';
 /**
- * MoonPay does not list the transaction yet. Send the same `order` after the delay. After a failed
- * charge with no `transactionId`, the client caps these polls.
+ * After a charge, always with `recovery: NONE`. `CUSTOMER_MISMATCH`: the transaction's customer is
+ * not bound to this buyer. `WALLET_MISMATCH`: the transaction pays another wallet than the
+ * assertion's. `UNRECORDABLE`: a charge no retry can record, held for refund review.
  */
- | {
-    status: 'PENDING';
-    retryAfterMs: number;
-}
-/** Exit the provider flow. A requote after a charge would start a second payment. */
- | {
-    status: 'REFUSED';
-    reason: MoonPayOrderRefusal;
-    recovery: 'NONE';
+export type MoonPayOrderRefusal = 'CUSTOMER_MISMATCH' | 'WALLET_MISMATCH' | 'UNRECORDABLE';
+export type MoonPayPrompt = MoonPayConsentPrompt | MoonPayConnectPrompt | MoonPayKycPrompt | MoonPayWaitPrompt | MoonPayOrderPrompt;
+/** `order` is the `GET /fiat/orders/:orderId` body; the shared order screen renders it. */
+export type MoonPayDone = {
+    next: 'done';
+    order: FiatStepResponse;
 };
-export type MoonPayIntentResponseFor = {
+/** Exit the provider flow. `REQUOTE` goes back to routing; `NONE` ends the flow. */
+export type MoonPayRefused<R, V> = {
+    next: 'refused';
+    reason: R;
+    recovery: V;
+};
+/** The answer to `observe`, `consent`, `connect` and `kyc`. */
+export type MoonPayStepResponse = MoonPayPrompt | MoonPayRefused<MoonPayStepRefusal, 'REQUOTE' | 'NONE'>;
+/**
+ * The answer to `order`. A failed charge is recorded too: `done` with the order in `FAILED`, and the
+ * client requotes for a new `orderId`. `order` again while MoonPay does not list the transaction
+ * yet. A refusal after a charge never requotes: that would start a second payment.
+ */
+export type MoonPayOrderResponse = MoonPayDone | MoonPayOrderPrompt | MoonPayRefused<MoonPayOrderRefusal, 'NONE'>;
+export type MoonPayResponseFor = {
     observe: MoonPayStepResponse;
+    consent: MoonPayStepResponse;
+    connect: MoonPayStepResponse;
     kyc: MoonPayStepResponse;
     order: MoonPayOrderResponse;
 };
-export type MoonPayIntentResponse = MoonPayStepResponse | MoonPayOrderResponse;
-export type MoonPayIntentStatus = MoonPayIntentResponse['status'];
-/** `RETRY` sends the same request again. `REQUOTE` goes back to `POST /fiat/quote`. `NONE` ends the flow. */
+/** `RETRY` sends the same request again. `REQUOTE` goes back to routing. `NONE` ends the flow. */
 export type MoonPayRecovery = 'RETRY' | 'REQUOTE' | 'NONE';
 /**
- * `SESSION_BUDGET_SPENT`: the per-login SDK session mint budget (429). `RATE_LIMITED`: the kind's
+ * `SESSION_BUDGET_SPENT`: the per-login SDK session mint budget (429). `RATE_LIMITED`: the action's
  * request budget (429). `PROVIDER_UNAVAILABLE`: MoonPay or Sumsub is down. `INVALID_REQUEST`: a bad
  * body (400).
  */

package/dist/providers/moonpay.js

@@ -24,6 +24,6 @@ __export(moonpay_exports, {
 });
 module.exports = __toCommonJS(moonpay_exports);
 var MOONPAY_ENDPOINTS = {
-  intent: "POST /fiat/providers/moonpay/intent"
+  next: "POST /fiat/next"
 };
 //# sourceMappingURL=moonpay.js.map

package/dist/providers/moonpay.mjs

@@ -1,6 +1,6 @@
 import {
   MOONPAY_ENDPOINTS
-} from "../chunk-3HCZ6JBJ.mjs";
+} from "../chunk-T5JAYOWY.mjs";
 export {
   MOONPAY_ENDPOINTS
 };

package/dist/providers/moonpay.schemas.d.ts

@@ -1,16 +1,33 @@
 /**
- * zod schemas for the MoonPay provider-owned flow. Test-time and backend-boundary only: exported from
- * the package root, never from `./moonpay`, so the production entry stays free of zod.
+ * zod schemas for the MoonPay flow on `POST /fiat/next`. Test-time and backend-boundary only:
+ * exported from the package root, never from `./moonpay`, so the production entry stays free of zod.
  */
 import { z } from 'zod';
-import type { MoonPayCheckout, MoonPayErrorBody, MoonPayFault, MoonPayIntentRequest, MoonPayIntentResponse, MoonPayOrderResponse, MoonPayQuoteInput, MoonPaySdkCredentials, MoonPayStepResponse } from './moonpay';
+import type { MoonPayCheckout, MoonPayConnectPrompt, MoonPayConnectRequest, MoonPayConsentPrompt, MoonPayConsentRequest, MoonPayDone, MoonPayErrorBody, MoonPayFault, MoonPayKycPrompt, MoonPayKycRequest, MoonPayNextRequest, MoonPayObserveRequest, MoonPayOrderPrompt, MoonPayOrderRequest, MoonPayOrderResponse, MoonPayPrompt, MoonPayQuoteInput, MoonPayRequest, MoonPayRequestContext, MoonPayResponseFor, MoonPaySdkCredentials, MoonPayStepResponse, MoonPayWaitPrompt } from './moonpay';
 export declare const MoonPayCheckoutSchema: z.ZodType<MoonPayCheckout>;
 export declare const MoonPaySdkCredentialsSchema: z.ZodType<MoonPaySdkCredentials>;
-export declare const MoonPayIntentRequestSchema: z.ZodType<MoonPayIntentRequest>;
+export declare const MoonPayRequestContextSchema: z.ZodType<MoonPayRequestContext>;
 export declare const MoonPayQuoteInputSchema: z.ZodType<MoonPayQuoteInput>;
+export declare const MoonPayObserveRequestSchema: z.ZodType<MoonPayRequestContext & MoonPayObserveRequest>;
+export declare const MoonPayConsentRequestSchema: z.ZodType<MoonPayRequestContext & MoonPayConsentRequest>;
+export declare const MoonPayConnectRequestSchema: z.ZodType<MoonPayRequestContext & MoonPayConnectRequest>;
+export declare const MoonPayKycRequestSchema: z.ZodType<MoonPayRequestContext & MoonPayKycRequest>;
+export declare const MoonPayOrderRequestSchema: z.ZodType<MoonPayRequestContext & MoonPayOrderRequest>;
+export declare const MoonPayRequestSchema: z.ZodType<MoonPayRequest>;
+export declare const MoonPayNextRequestSchema: z.ZodType<MoonPayNextRequest>;
+export declare const MoonPayConsentPromptSchema: z.ZodType<MoonPayConsentPrompt>;
+export declare const MoonPayConnectPromptSchema: z.ZodType<MoonPayConnectPrompt>;
+export declare const MoonPayKycPromptSchema: z.ZodType<MoonPayKycPrompt>;
+export declare const MoonPayWaitPromptSchema: z.ZodType<MoonPayWaitPrompt>;
+export declare const MoonPayOrderPromptSchema: z.ZodType<MoonPayOrderPrompt>;
+export declare const MoonPayPromptSchema: z.ZodType<MoonPayPrompt>;
+export declare const MoonPayDoneSchema: z.ZodType<MoonPayDone>;
 export declare const MoonPayStepResponseSchema: z.ZodType<MoonPayStepResponse>;
 export declare const MoonPayOrderResponseSchema: z.ZodType<MoonPayOrderResponse>;
-export declare const MoonPayIntentResponseSchema: z.ZodType<MoonPayIntentResponse>;
+/** The response schema for each request action, as `MoonPayResponseFor` types it. */
+export declare const MoonPayResponseSchemaFor: {
+    readonly [A in keyof MoonPayResponseFor]: z.ZodType<MoonPayResponseFor[A]>;
+};
 export declare const MoonPayFaultSchema: z.ZodType<MoonPayFault>;
 export declare const MoonPayErrorBodySchema: z.ZodType<MoonPayErrorBody>;
 //# sourceMappingURL=moonpay.schemas.d.ts.map