@peable.to/contracts 5.1.0 → 5.2.0

package/dist/cjs/vocabulary/index.js

@@ -37,3 +37,4 @@ __exportStar(require("./files"), exports);
 __exportStar(require("./identity"), exports);
 __exportStar(require("./merchants"), exports);
 __exportStar(require("./paymentMethodConfigurations"), exports);
+__exportStar(require("./realtime"), exports);

package/dist/cjs/vocabulary/realtime.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAYER_SOCKET_PATH = void 0;
+/**
+ * The PAYER realtime endpoint: the Socket.IO path a payer's browser opens to
+ * hear its payment move, by the intent's `client_secret` alone.
+ *
+ * It is a SEPARATE Socket.IO server from the gateway's default `/socket.io/`
+ * one, because Socket.IO decides CORS per server (per engine), before it
+ * knows which namespace or token a connection carries. The payer server
+ * answers any origin and takes no credentials — the same rule as the payer
+ * HTTP routes (`lib/payerCors.ts`): a merchant's own site runs Pay with
+ * Peable, and the capability is the secret, never the page. The default
+ * server keeps the Oxy origins (`createOxySocketCors`) for every socket that
+ * carries an Oxy identity.
+ */
+exports.PAYER_SOCKET_PATH = '/payer-socket.io';

package/dist/esm/vocabulary/index.js

@@ -21,3 +21,4 @@ export * from './files.js';
 export * from './identity.js';
 export * from './merchants.js';
 export * from './paymentMethodConfigurations.js';
+export * from './realtime.js';

package/dist/esm/vocabulary/realtime.js

@@ -0,0 +1,14 @@
+/**
+ * The PAYER realtime endpoint: the Socket.IO path a payer's browser opens to
+ * hear its payment move, by the intent's `client_secret` alone.
+ *
+ * It is a SEPARATE Socket.IO server from the gateway's default `/socket.io/`
+ * one, because Socket.IO decides CORS per server (per engine), before it
+ * knows which namespace or token a connection carries. The payer server
+ * answers any origin and takes no credentials — the same rule as the payer
+ * HTTP routes (`lib/payerCors.ts`): a merchant's own site runs Pay with
+ * Peable, and the capability is the secret, never the page. The default
+ * server keeps the Oxy origins (`createOxySocketCors`) for every socket that
+ * carries an Oxy identity.
+ */
+export const PAYER_SOCKET_PATH = '/payer-socket.io';

package/dist/types/vocabulary/index.d.ts

@@ -17,3 +17,4 @@ export * from './files';
 export * from './identity';
 export * from './merchants';
 export * from './paymentMethodConfigurations';
+export * from './realtime';

package/dist/types/vocabulary/realtime.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The PAYER realtime endpoint: the Socket.IO path a payer's browser opens to
+ * hear its payment move, by the intent's `client_secret` alone.
+ *
+ * It is a SEPARATE Socket.IO server from the gateway's default `/socket.io/`
+ * one, because Socket.IO decides CORS per server (per engine), before it
+ * knows which namespace or token a connection carries. The payer server
+ * answers any origin and takes no credentials — the same rule as the payer
+ * HTTP routes (`lib/payerCors.ts`): a merchant's own site runs Pay with
+ * Peable, and the capability is the secret, never the page. The default
+ * server keeps the Oxy origins (`createOxySocketCors`) for every socket that
+ * carries an Oxy identity.
+ */
+export declare const PAYER_SOCKET_PATH = "/payer-socket.io";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peable.to/contracts",
-  "version": "5.1.0",
+  "version": "5.2.0",
   "description": "The Peable wire, declared once: Zod contracts of every public route, the OpenAPI 3.1 generator and the closed value sets (ADR 0014 D5).",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",