@fun-xyz/fiat-contract 0.5.0 → 0.7.0

package/dist/table.d.ts

@@ -10,7 +10,7 @@
  *
  * Rules the entries obey:
  *   - Terminality of `ORDER{CREATED}` rides `status`, because terminal outcomes are OrderStatus,
- *     never kinds (contract §The envelope). The set is enumerated below as
+ *     never kinds (contract §The fiat step response). The set is enumerated below as
  *     `TERMINAL_ORDER_STATUSES` — clients read it, they never derive it.
  *   - A terminal *state* carries no transitions. A terminal *status* still can: `FAILED` with a
  *     retryable `failureReason` carries the recovery CTA (FE doc Screen 14).
@@ -32,7 +32,7 @@ export declare const TABLE_VERSION: string;
  */
 export type StateKey = 'QUOTE' | 'FUN_AUTH' | 'SESSION_AUTH' | 'KYC/CAPTURE' | 'KYC/INPUT_REQUIRED' | 'KYC/NO_ACTION_REQUIRED:IN_REVIEW' | 'KYC/NO_ACTION_REQUIRED:ON_HOLD' | 'KYC/NO_ACTION_REQUIRED:REJECTED' | 'PENDING_ORDER' | 'BLOCKED' | 'PAYMENT/CAPTURE' | 'PAYMENT/INSTRUCT' | 'ORDER/AWAITING_CONFIRMATION' | 'ORDER/CREATED';
 /**
- * Terminal per the OrderStatus machine's monotonic ranks (contract §The envelope).
+ * Terminal per the OrderStatus machine's monotonic ranks (contract §The fiat step response).
  *
  * `CAPTURE_ORPHANED` is deliberately absent — see the TODO(open-decision) on the value itself.
  * Non-terminal is the safe default for an unknown status: a client that wrongly believes the flow
@@ -48,7 +48,7 @@ export type TerminalOrderStatus = (typeof TERMINAL_ORDER_STATUSES)[number];
 export type EndpointTemplate = FiatEndpoint;
 export interface AllowedTransition {
     /**
-     * The id observed in the docs' envelopes. Informational: ids are localization keys and the
+     * The id observed in the docs' step responses. Informational: ids are localization keys and the
      * docs explicitly allow unknown ids (the client falls back to `labelFallback`), so
      * `assertLegalEmission` matches on `mode` + `endpoint`, not on `id`.
      */
@@ -84,10 +84,45 @@ export interface TableEntry {
 export declare const TRANSITION_TABLE: Readonly<Record<StateKey, TableEntry>>;
 export declare const STATE_KEYS: StateKey[];
 /**
- * The `/fiat/*` surface as enumerated in contract §Endpoints. Informational data — emissions are
- * checked against each state's `allowedTransitions`, not against this list.
+ * The `/fiat/*` surface. Informational data — emissions are checked against each state's
+ * `allowedTransitions`, not against this list.
+ *
+ * Sourced from contract §Endpoints, with one deliberate divergence: `POST /fiat/payment-session` is
+ * named by the table (QUOTE's capture-first entry) while the doc's endpoint table still lists no
+ * session-minting call for that rail.
+ */
+export declare const DOCUMENTED_ENDPOINTS: readonly ["GET /fiat/payment-methods", "POST /fiat/quote", "POST /fiat/auth", "POST /fiat/payment-session", "POST /fiat/session", "POST /fiat/session/verify", "GET /fiat/kyc", "POST /fiat/kyc/form", "POST /fiat/kyc/document", "POST /fiat/instruments", "POST /fiat/orders", "GET /fiat/orders/:id", "GET /fiat/orders/:id/instructions", "POST /fiat/orders/:id/confirm-payment", "POST /fiat/orders/:id/reference", "POST /fiat/orders/:id/cancel", "POST /fiat/orders/:id/surface-result"];
+/**
+ * Documented endpoints no flow state offers, and why. Declared so an endpoint nothing can reach is
+ * visible instead of silent — the table test asserts the unoffered set equals exactly these.
+ */
+export declare const UNOFFERED_ENDPOINTS: readonly {
+    endpoint: EndpointTemplate;
+    reason: string;
+}[];
+/**
+ * States entered out-of-band rather than by returning from a call. Declared so an unreachable state
+ * is visible instead of silent — the table test asserts reachability from QUOTE equals (all state
+ * keys − these).
+ */
+export declare const UNREACHABLE_STATES: readonly {
+    stateKey: StateKey;
+    reason: string;
+}[];
+/**
+ * The live answer to what `UNOFFERED_ENDPOINTS` declares: documented endpoints that no state's
+ * `allowedTransitions` names. The table test asserts the two agree, so a new orphan and a stale
+ * declaration both fail.
+ */
+export declare function unofferedEndpoints(): readonly EndpointTemplate[];
+/**
+ * The live answer to what `UNREACHABLE_STATES` declares: states no `mayReturn` path reaches from
+ * `QUOTE`, the flow's entry. The table test asserts the two agree.
+ *
+ * `mayReturn` is the only edge set the contract publishes, so it is the only graph there is to walk
+ * — a state absent from every one of them cannot be arrived at by following the contract.
  */
-export declare const DOCUMENTED_ENDPOINTS: readonly ["GET /fiat/payment-methods", "POST /fiat/quote", "POST /fiat/auth", "POST /fiat/session", "POST /fiat/session/verify", "GET /fiat/kyc", "POST /fiat/kyc/form", "POST /fiat/kyc/document", "POST /fiat/instruments", "POST /fiat/orders", "GET /fiat/orders/:id", "GET /fiat/orders/:id/instructions", "POST /fiat/orders/:id/confirm-payment", "POST /fiat/orders/:id/reference", "POST /fiat/orders/:id/cancel", "POST /fiat/orders/:id/surface-result"];
+export declare function unreachableStates(from?: StateKey): readonly StateKey[];
 /** State → its table key. The one place kind/phase/reason is flattened. */
 export declare function stateKey(state: FlowState): StateKey;
 export declare const tableEntry: (state: FlowState) => TableEntry;

package/dist/table.js

@@ -25,14 +25,18 @@ __export(table_exports, {
   TABLE_VERSION: () => TABLE_VERSION,
   TERMINAL_ORDER_STATUSES: () => TERMINAL_ORDER_STATUSES,
   TRANSITION_TABLE: () => TRANSITION_TABLE,
+  UNOFFERED_ENDPOINTS: () => UNOFFERED_ENDPOINTS,
+  UNREACHABLE_STATES: () => UNREACHABLE_STATES,
   isTerminal: () => isTerminal,
   stateKey: () => stateKey,
-  tableEntry: () => tableEntry
+  tableEntry: () => tableEntry,
+  unofferedEndpoints: () => unofferedEndpoints,
+  unreachableStates: () => unreachableStates
 });
 module.exports = __toCommonJS(table_exports);
 
 // package.json
-var version = "0.5.0";
+var version = "0.7.0";
 
 // src/table.ts
 var TABLE_VERSION = version;
@@ -63,22 +67,46 @@ var TRANSITION_TABLE = {
         endpoint: "POST /fiat/session",
         when: "no valid provider session token (own-tables check)"
       },
+      {
+        id: "open_session",
+        mode: "SUBMIT",
+        endpoint: "POST /fiat/payment-session",
+        when: "returning user, session + KYC valid, capture-first rail \u2014 the method authorises before any order exists",
+        note: "Returns PAYMENT{CAPTURE} carrying the Surface. Without this entry the capture-first rail has no legal way in: a transition-following client takes POST /fiat/orders instead, and the backend refuses that when the provider declares the capture-first capability and no authorisation is present. Named open_session per the Fiat Contract 0.7 doc, which adds quote-time-minted surface rows beside it."
+      },
       {
         id: "continue",
         mode: "SUBMIT",
         endpoint: "POST /fiat/orders",
-        when: "returning user, session + KYC valid \u2014 the quote screen doubles as review"
+        when: "returning user, session + KYC valid, order-first rail \u2014 the quote screen doubles as review",
+        note: "Narrowed to the order-first rail: on a capture-first method the order cannot be created before the payment is authorised, so the sibling payment-session entry is the one that applies."
       },
       {
         id: "continue",
         mode: "SUBMIT",
         endpoint: "POST /fiat/auth",
         when: "no ambient Fun identity (non-fomo surfaces only)"
+      },
+      {
+        id: "capture",
+        mode: "CLIENT_SURFACE",
+        endpoint: "POST /fiat/orders",
+        when: "capture-then-order rail whose session is minted at quote time (inline pay sheet)",
+        note: "The 0.7 row that makes the single-screen Apple Pay design legal: the surface rides QUOTE, the provider component IS the primary CTA, and its result creates the order. Apple policy forbids a visible step between an Apple-branded tap and the sheet, and TransakApplePay exposes no programmatic trigger, so a two-step via payment-session cannot serve this rail. Requires state.surface (\u03942)."
+      },
+      {
+        id: "capture",
+        mode: "CLIENT_SURFACE",
+        endpoint: "POST /fiat/orders/:id/surface-result",
+        when: "order-then-capture rail whose provider order was created with the quote-time session",
+        note: "Same quote-time placement, other topology: the order already exists, so the surface reports against it rather than creating one."
       }
     ],
     mayReturn: [
       "SESSION_AUTH",
       ...KYC_ANY,
+      "PAYMENT/CAPTURE",
+      "PAYMENT/INSTRUCT",
       "PENDING_ORDER",
       "ORDER/AWAITING_CONFIRMATION",
       "ORDER/CREATED",
@@ -86,8 +114,10 @@ var TRANSITION_TABLE = {
     ],
     terminal: false,
     notes: [
-      "Re-quote on amount change is a client-local event, not a transition.",
-      'If the PENDING_ORDER removal lands, QUOTE additionally returns PAYMENT{INSTRUCT} / ORDER{CREATED} directly. TODO(open-decision): contract \xA7"Proposal: remove PENDING_ORDER".'
+      "Re-quote on amount change is a client-local event, not a transition. A new quote carries a new surface; the client remounts the adapter rather than reusing the old session.",
+      "A surface on QUOTE and a SUBMIT to the same endpoint may not coexist \u2014 two paths to one order. assertLegalEmission enforces it; the server picks one per rail.",
+      `Both PAYMENT states are reachable directly from QUOTE: the FE doc canvas draws S1 \u2192 S5 (card, capture-first) and S1 \u2192 S6 (bank). This entry was first ported from the FE doc's bindings table, whose "May receive back" column omits both \u2014 the canvas is the correct source of the two.`,
+      'TODO(open-decision): contract \xA7"Proposal: remove PENDING_ORDER" would additionally have QUOTE return ORDER{CREATED} for an active order. That decision does not gate the PAYMENT edges above.'
     ]
   },
   FUN_AUTH: {
@@ -385,6 +415,7 @@ var DOCUMENTED_ENDPOINTS = [
   "GET /fiat/payment-methods",
   "POST /fiat/quote",
   "POST /fiat/auth",
+  "POST /fiat/payment-session",
   "POST /fiat/session",
   "POST /fiat/session/verify",
   "GET /fiat/kyc",
@@ -399,6 +430,54 @@ var DOCUMENTED_ENDPOINTS = [
   "POST /fiat/orders/:id/cancel",
   "POST /fiat/orders/:id/surface-result"
 ];
+var UNOFFERED_ENDPOINTS = [
+  {
+    endpoint: "GET /fiat/payment-methods",
+    reason: "Discovery, called before any flow state exists \u2014 there is no state to hang it off."
+  },
+  {
+    endpoint: "POST /fiat/kyc/document",
+    reason: "FILE fields stream to it directly; the harness owns that upload path and it is not a transition (see KYC/INPUT_REQUIRED notes)."
+  },
+  {
+    endpoint: "POST /fiat/instruments",
+    reason: "No state offers it and no published doc explains why. TODO(open-decision): saved instruments may simply be unreached in v1 \u2014 confirm, or wire it to the state that should offer it."
+  },
+  {
+    endpoint: "GET /fiat/orders/:id/instructions",
+    reason: "PAYMENT{INSTRUCT} carries its instructions in state and offers no fetch. TODO(open-decision): that state also notes no re-issue endpoint exists, which sits oddly beside this one being published \u2014 confirm or retire it."
+  },
+  {
+    endpoint: "POST /fiat/orders/:id/reference",
+    reason: "The bank-reference submission is offered by no state. TODO(open-decision): PAYMENT{INSTRUCT} is the plausible home \u2014 confirm or wire it."
+  }
+];
+var UNREACHABLE_STATES = [
+  {
+    stateKey: "FUN_AUTH",
+    reason: "No bindings row published (docStatus UNSPECIFIED) and never rendered in fomo, where identity is ambient. Entered out-of-band, not by a mayReturn edge."
+  }
+];
+function unofferedEndpoints() {
+  const offered = /* @__PURE__ */ new Set();
+  for (const key of STATE_KEYS) {
+    for (const allowed of TRANSITION_TABLE[key].allowedTransitions) offered.add(allowed.endpoint);
+  }
+  return DOCUMENTED_ENDPOINTS.filter((endpoint) => !offered.has(endpoint));
+}
+function unreachableStates(from = "QUOTE") {
+  const seen = /* @__PURE__ */ new Set([from]);
+  const queue = [from];
+  while (queue.length > 0) {
+    for (const target of TRANSITION_TABLE[queue.pop()].mayReturn ?? []) {
+      if (!seen.has(target)) {
+        seen.add(target);
+        queue.push(target);
+      }
+    }
+  }
+  return STATE_KEYS.filter((key) => !seen.has(key));
+}
 function stateKey(state) {
   switch (state.kind) {
     case "QUOTE":

package/dist/table.mjs

@@ -4,18 +4,26 @@ import {
   TABLE_VERSION,
   TERMINAL_ORDER_STATUSES,
   TRANSITION_TABLE,
+  UNOFFERED_ENDPOINTS,
+  UNREACHABLE_STATES,
   isTerminal,
   stateKey,
-  tableEntry
-} from "./chunk-3R5GGUAK.mjs";
+  tableEntry,
+  unofferedEndpoints,
+  unreachableStates
+} from "./chunk-OGNYHIOE.mjs";
 export {
   DOCUMENTED_ENDPOINTS,
   STATE_KEYS,
   TABLE_VERSION,
   TERMINAL_ORDER_STATUSES,
   TRANSITION_TABLE,
+  UNOFFERED_ENDPOINTS,
+  UNREACHABLE_STATES,
   isTerminal,
   stateKey,
-  tableEntry
+  tableEntry,
+  unofferedEndpoints,
+  unreachableStates
 };
 //# sourceMappingURL=table.mjs.map

package/dist/types.d.ts

@@ -1,13 +1,13 @@
 /**
  * fiat-contract — types
  *
- * The published contract between `fun-backend` (emits envelopes) and
+ * The published contract between `fun-backend` (emits step responses) and
  * `funkit`/`connect-core` (renders them). Zero runtime logic lives here.
  *
  * Sources of truth (do not extend this file from anywhere else):
  *  - Contract doc: Fiat Client Contract — Step-Driven Flow & Endpoint Schematics
  *    https://app.notion.com/p/3b9fc3b2a002815eb270fa4c818268cc
- *    §"The envelope" · §"Conformance package — concrete spec"
+ *    §"The fiat step response" · §"Conformance package — concrete spec"
  *    §"Proposal (2026-08-13): split InputSpec → params + inputs + expects" (ACCEPTED)
  *  - FE doc: Fiat Frontend — State Machine & Screen Map
  *    https://app.notion.com/p/3bbfc3b2a00281c994c2cebd17b1d6d3
@@ -59,14 +59,16 @@ export type HttpVerb = 'GET' | 'POST';
 export type FiatEndpoint = 'GET /fiat/payment-methods' | 'POST /fiat/quote' | 'POST /fiat/auth' | 'POST /fiat/payment-session' | 'POST /fiat/session' | 'POST /fiat/session/verify' | 'GET /fiat/kyc' | 'POST /fiat/kyc/form' | 'POST /fiat/kyc/document' | 'POST /fiat/instruments' | 'POST /fiat/orders' | `GET /fiat/orders/${string}` | `GET /fiat/orders/${string}/instructions` | `POST /fiat/orders/${string}/confirm-payment` | `POST /fiat/orders/${string}/reference` | `POST /fiat/orders/${string}/cancel` | `POST /fiat/orders/${string}/surface-result`;
 /**
  * FiatProvider is metadata: it selects the embedded provider SDK for CLIENT_SURFACE steps and
- * feeds analytics. It never drives sequencing (contract §The envelope).
+ * feeds analytics. It never drives sequencing (contract §The fiat step response).
  * TODO(open-decision): the docs name only Transak as a v1 provider for the headless flow
  * (contract §Decisions 3; Swapped-headless does not exist yet, Banxa is Tradeoff #4).
  * `SWAPPED` added at fun-backend's request (2026-08-17) so its legacy fops payment-provider id
  * has one shared vocabulary instead of a second fun-backend-local enum — it never appears as a
- * `FiatStepResponse.provider` value since Swapped's fops flow doesn't emit this envelope.
+ * `FiatStepResponse.provider` value since Swapped's fops flow doesn't emit this response.
+ * `BANXA` added at 0.7 (Provider Landscape: Tier 1). A vendor name here is a routing key only —
+ * it never decides which fields exist, which is what keeps provider churn out of this package.
  */
-export type FiatProvider = 'TRANSAK' | 'SWAPPED';
+export type FiatProvider = 'TRANSAK' | 'SWAPPED' | 'BANXA';
 /**
  * The order status vocabulary. Monotonic ranks, no backwards moves. Terminal outcomes are
  * OrderStatus, never FlowState kinds.
@@ -101,7 +103,7 @@ export type FailureCategory = 'PAYMENT_DECLINED' | 'KYC_REJECTED' | 'PROVIDER_OU
  * (the FE doc's Screen 11 note writes `SUPPORT` as shorthand — same value).
  */
 export type Recovery = 'REQUOTE' | 'RETRY_PAYMENT' | 'CONTACT_SUPPORT' | 'NONE';
-/** Three expiries, three recoveries (contract §The envelope, FailureReason comment). */
+/** Three expiries, three recoveries (contract §The fiat step response, FailureReason comment). */
 export type ExpiredWhich = 'QUOTE' | 'PAYMENT_WINDOW' | 'INSTRUCTIONS';
 /**
  * `code?` is a copy key (e.g. `BAD_CODE`), not an error code to branch on.
@@ -121,7 +123,7 @@ export type FailureReason = {
     code?: string;
 };
 /**
- * Amounts are decimal strings in the docs' envelopes ("100.00") — never numbers.
+ * Amounts are decimal strings in the docs' step responses ("100.00") — never numbers.
  * Named to pair with `CryptoAmount`: every use site is a `fiat:` field.
  * `currency` is ISO 4217 — see `./codes`.
  */
@@ -172,7 +174,7 @@ export interface OrderRef {
 }
 /**
  * Payload of `ORDER{CREATED}` (FE doc Screens 7 · 13 · 14 · 15).
- * `crypto` is optional because the Screen 14/15 envelopes omit it (fiat-only failure/refund views).
+ * `crypto` is optional because the Screen 14/15 responses omit it (fiat-only failure/refund views).
  */
 export interface OrderSummary {
     orderId: string;
@@ -199,27 +201,45 @@ export interface Refund {
     amount: string;
     expectedBy: string;
 }
+/** What the user sees, and therefore where it can be placed. */
+export type SurfaceKind = 'URL_REDIRECT' | 'URL_EMBED' | 'PCI_COMPONENT' | 'PAY_SHEET' | 'ACH_COMPONENT';
 /**
- * Carried as *data* in CAPTURE phases only (`PAYMENT{CAPTURE}` · `KYC{CAPTURE}`).
- * Δ2: the CLIENT_SURFACE transition carries just `report` — single-carry, no duplication.
- * `session` values are secrets: never log them (FE doc §Decisions, redaction).
+ * Identity vendors Fun verifies into. Its own axis rather than a `FiatProvider` value, because
+ * Fun is the KYC-of-record in its own tenant — an identity surface is never the onramp's to mint.
+ * `SUMSUB` alone at 0.7; adding a value later is additive, and a vendor with no installed adapter
+ * lands on the client's existing unsupported screen.
  */
-export type Surface = {
-    kind: 'URL_REDIRECT';
-    url: string;
-} | {
-    kind: 'URL_EMBED';
-    url: string;
-} | {
-    kind: 'PCI_COMPONENT';
-    session: string;
-} | {
-    kind: 'PAY_SHEET';
-    session: string;
-} | {
-    kind: 'ACH_COMPONENT';
-    session: string;
-};
+export type KYCProvider = 'SUMSUB';
+/**
+ * Which adapter renders the surface. Can differ from `FiatStepResponse.provider`: an identity
+ * surface is Fun's to mint, not the onramp's.
+ *
+ * A routing key only — it never narrows the shape of `params`.
+ */
+export type SurfaceProvider = FiatProvider | KYCProvider;
+/**
+ * Carried as data in `QUOTE` (inline in the entry screen's primary slot) and in the CAPTURE
+ * phases (a screen of its own). Δ2 unchanged: the CLIENT_SURFACE transition carries only
+ * `report`, so a surface is never described twice.
+ *
+ * `params` is the adapter's vocabulary — opaque here, narrowed at the adapter boundary, and
+ * honoured verbatim. A provider's own `environment` value lives here and is never normalised:
+ * Transak's is `LOCAL | DEVELOPMENT | STAGING | PRODUCTION`, Banxa's is `sandbox | production`,
+ * and URL surfaces carry none, so a Fun-owned enum could only be lossy.
+ *
+ * `params` values are secrets by default. Client redaction defaults every key closed and opens
+ * only names that are safe under *any* provider's vocabulary.
+ */
+export interface Surface {
+    kind: SurfaceKind;
+    provider: SurfaceProvider;
+    params: Record<string, JsonValue>;
+    /**
+     * When the provider stops honouring the session, if it says so. Lets a client re-quote before
+     * the button goes dead; absent, the surface lives as long as the quote that carried it.
+     */
+    expiresAt?: string;
+}
 export interface InstructionField {
     id: string;
     labelFallback: string;
@@ -228,8 +248,8 @@ export interface InstructionField {
 /**
  * Payload of `PAYMENT{INSTRUCT}` — push rails. Values are PII-adjacent: never logged.
  * TODO(open-decision): contract OQ1 lists `QR_IMAGE` as *deliberately not pre-declared* in the
- * v1 vocabulary while §The envelope's Instructions bullet enumerates it. Kept in the union per
- * the envelope section (and the conformance-package spec); handshake-gate it if OQ1 lands the
+ * v1 vocabulary while §The fiat step response's Instructions bullet enumerates it. Kept in the union
+ * per that section (and the conformance-package spec); handshake-gate it if OQ1 lands the
  * other way.
  * TODO(open-decision): contract OQ7 — expired instructions have no documented recovery and no
  * re-issue endpoint exists.
@@ -402,9 +422,16 @@ export type AuthChallenge = Record<string, JsonValue>;
  *   2. terminal outcomes are OrderStatus, never kinds
  *   3. every fallible state carries `error?: FailureReason`
  */
-export type FlowState = {
+export type FlowState = 
+/**
+ * `surface` present means the provider's own component IS the primary CTA, inline on the entry
+ * screen — the placement Apple policy forces for a pay sheet, since no visible step may sit
+ * between the Apple-branded tap and the sheet. Absent, the quote's SUBMITs drive our button.
+ */
+{
     kind: 'QUOTE';
     quote: Quote;
+    surface?: Surface;
     error?: FailureReason;
 } | {
     kind: 'FUN_AUTH';
@@ -437,7 +464,7 @@ export type FlowState = {
      *     empty transitions, NOT terminal.
      *   - `OrderStatus.ON_HOLD` = post-order compliance or amount mismatch, resolves to
      *     `PROCESSING` or `REFUNDED`.
-     * They cannot be confused in code — different types, different positions in the envelope —
+     * They cannot be confused in code — different types, different positions in the response —
      * but they can be confused in conversation, so say which one you mean.
      */
     reason: 'IN_REVIEW' | 'ON_HOLD' | 'REJECTED';
@@ -480,7 +507,7 @@ export type FlowState = {
     kind: 'PAYMENT';
     phase: 'INSTRUCT';
     /**
-     * TODO(open-decision): `orderId` placement — envelope sibling (contract §Worked example,
+     * TODO(open-decision): `orderId` placement — beside `state` (contract §Worked example,
      * steps 4–5) vs inside state (FE doc v0, Screen 6). Both are accepted here; the FE doc's
      * in-state placement is the current shape, `FiatStepResponse.orderId` covers the other.
      */
@@ -495,7 +522,7 @@ export type FlowState = {
 } | {
     kind: 'ORDER';
     phase: 'CREATED';
-    /** Absent in the contract's terse worked-example envelopes, present in every FE screen. */
+    /** Absent in the contract's terse worked-example responses, present in every FE screen. */
     order?: OrderSummary;
     status: OrderStatus;
     statusHistory?: StatusHistoryEntry[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fun-xyz/fiat-contract",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Published conformance contract for Fun's headless fiat onramp: FlowState/Transition types, zod schemas, the transition table as data, recorded fixtures, assertion helpers.",
   "license": "MIT",
   "repository": {
@@ -78,4 +78,4 @@
       ]
     }
   }
-}
+}