@peable.to/contracts 5.5.0 → 5.6.0

package/dist/cjs/resources/payments/social.js

@@ -148,7 +148,7 @@ exports.socialRoutes = [
         path: '/v1/social/{username}/next_address',
         tag: 'Social payments',
         summary: 'Reserve an address to pay a person',
-        description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`; paying yourself is refused.",
+        description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`, and one whose wallet watches no further address (every index below its watched bound is taken) 503 `faircoin_receive_tree_full`; paying yourself is refused.",
         auth: 'user',
         params: { username: 'The recipient’s Oxy username.' },
         body: exports.socialNextAddressParams,

package/dist/cjs/vocabulary/errors.js

@@ -135,6 +135,7 @@ exports.ERROR_CODE_DESCRIPTIONS = {
     faircoin_wallet_missing: "The Peable wallet that receives this payment (the merchant owner's, or the seller's) isn't set up yet, so it cannot be paid in FairCoin. The other payment methods still work.",
     faircoin_network_closed: 'FairCoin payments on this network are not open on this deployment yet. The other payment methods still work.',
     faircoin_capacity_reached: 'Too many FairCoin payments to this recipient are waiting to be paid right now, so no new FairCoin address can be handed out. The other payment methods still work; try FairCoin again shortly.',
+    faircoin_receive_tree_full: "Every FairCoin address the recipient's Peable wallet watches has been handed out, so no new one can be derived for them. Nothing was reserved.",
     faircoin_amount_too_small: "One seller's share of this order is below the smallest amount the FairCoin network relays, so it cannot be paid in FairCoin. The other payment methods still work.",
     credit_note_exceeds_invoice: "The credit note's amount exceeds what the invoice can still credit.",
     test_clock_unexpected_state: 'The test clock is advancing; wait until it is ready.',

package/dist/cjs/vocabulary/index.js

@@ -38,3 +38,4 @@ __exportStar(require("./identity"), exports);
 __exportStar(require("./merchants"), exports);
 __exportStar(require("./paymentMethodConfigurations"), exports);
 __exportStar(require("./realtime"), exports);
+__exportStar(require("./receiveTree"), exports);

package/dist/cjs/vocabulary/payments.js

@@ -33,17 +33,21 @@ exports.PAYMENT_INTENT_STATUSES = [
     'canceled',
 ];
 /**
- * Why an intent was cancelled — Stripe's reasons, plus two FairCoin-only ones:
- * `underpaid` (a transaction paid less than the amount) and
+ * Why an intent was cancelled — Stripe's reasons, plus three FairCoin-only ones:
+ * `underpaid` (a transaction paid less than the amount),
  * `recipient_key_changed` (the recipient's identity key was replaced after the
  * address was reserved, so the address is no longer in the wallet it pays —
  * ADR 0002, amended 2026-11-06; nothing had been broadcast, and the order stays
- * open for a fresh address).
+ * open for a fresh address) and `faircoin_network_closed` (the deployment
+ * closed the payment's FairCoin network — ADR 0002's gate — before anything was
+ * broadcast; the order stays open, and FairCoin on it says the network is
+ * closed).
  */
 exports.PAYMENT_INTENT_CANCELLATION_REASONS = [
     'abandoned',
     'automatic',
     'duplicate',
+    'faircoin_network_closed',
     'fraudulent',
     'recipient_key_changed',
     'requested_by_customer',

package/dist/cjs/vocabulary/receiveTree.js

@@ -0,0 +1,44 @@
+"use strict";
+/**
+ * The size of a recipient's FairCoin receive tree (ADR 0021 D9, amended
+ * 2026-11-06) — ONE answer, read by the gateway that hands out indices and by
+ * the Peable wallet that watches them.
+ *
+ * Every FairCoin address the gateway reserves for an account — a merchant
+ * payment, a marketplace seller's, an invoice's, `@username` — is index `i` of
+ * that account's identity tree (ADR 0002, ADR 0021 D5). The wallet watches a
+ * contiguous window, indices `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`, reaching
+ * {@link SOCIAL_RECEIVE_GAP_LIMIT} past the highest index reserved
+ * (`planSocialReceiveWindow` in `packages/frontend/src/wallet/social-receive.ts`),
+ * and stops offering `@username` once that reach would pass its bound. So an
+ * index is reserved only when the wallet, after reserving it, still reaches
+ * the gap above it inside its bound:
+ *
+ *     index + SOCIAL_RECEIVE_GAP_LIMIT  <=  SOCIAL_RECEIVE_MAX_WATCHED - 1
+ *     index                             <   SOCIAL_RECEIVE_INDEX_LIMIT
+ *
+ * The gateway refuses to mint `index >= SOCIAL_RECEIVE_INDEX_LIMIT` (in the
+ * reservation's own statement), so every address it hands out is inside the
+ * window the wallet watches. Zod-free and dependency-free: the wallet bundles
+ * this module alone (`@peable.to/contracts/vocabulary/receiveTree`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOCIAL_RECEIVE_NEARLY_FULL_REMAINING = exports.SOCIAL_RECEIVE_INDEX_LIMIT = exports.SOCIAL_RECEIVE_GAP_LIMIT = exports.SOCIAL_RECEIVE_MAX_WATCHED = void 0;
+/** The most indices the wallet watches: `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`. */
+exports.SOCIAL_RECEIVE_MAX_WATCHED = 2000;
+/**
+ * How many unused addresses the wallet watches beyond the highest index used
+ * or reserved — the FairCoin BIP44 external-chain gap limit.
+ */
+exports.SOCIAL_RECEIVE_GAP_LIMIT = 20;
+/**
+ * The first index the gateway never mints (exclusive bound): `1 980`. Every
+ * minted index `i` satisfies `i < SOCIAL_RECEIVE_INDEX_LIMIT`, i.e.
+ * `i + SOCIAL_RECEIVE_GAP_LIMIT <= SOCIAL_RECEIVE_MAX_WATCHED - 1`.
+ */
+exports.SOCIAL_RECEIVE_INDEX_LIMIT = exports.SOCIAL_RECEIVE_MAX_WATCHED - exports.SOCIAL_RECEIVE_GAP_LIMIT;
+/**
+ * How close to {@link SOCIAL_RECEIVE_INDEX_LIMIT} a tree is "nearly full":
+ * Orbit warns the owners once fewer fresh indices than this are left.
+ */
+exports.SOCIAL_RECEIVE_NEARLY_FULL_REMAINING = 200;

package/dist/esm/resources/payments/social.js

@@ -145,7 +145,7 @@ export const socialRoutes = [
         path: '/v1/social/{username}/next_address',
         tag: 'Social payments',
         summary: 'Reserve an address to pay a person',
-        description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`; paying yourself is refused.",
+        description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`, and one whose wallet watches no further address (every index below its watched bound is taken) 503 `faircoin_receive_tree_full`; paying yourself is refused.",
         auth: 'user',
         params: { username: 'The recipient’s Oxy username.' },
         body: socialNextAddressParams,

package/dist/esm/vocabulary/errors.js

@@ -130,6 +130,7 @@ export const ERROR_CODE_DESCRIPTIONS = {
     faircoin_wallet_missing: "The Peable wallet that receives this payment (the merchant owner's, or the seller's) isn't set up yet, so it cannot be paid in FairCoin. The other payment methods still work.",
     faircoin_network_closed: 'FairCoin payments on this network are not open on this deployment yet. The other payment methods still work.',
     faircoin_capacity_reached: 'Too many FairCoin payments to this recipient are waiting to be paid right now, so no new FairCoin address can be handed out. The other payment methods still work; try FairCoin again shortly.',
+    faircoin_receive_tree_full: "Every FairCoin address the recipient's Peable wallet watches has been handed out, so no new one can be derived for them. Nothing was reserved.",
     faircoin_amount_too_small: "One seller's share of this order is below the smallest amount the FairCoin network relays, so it cannot be paid in FairCoin. The other payment methods still work.",
     credit_note_exceeds_invoice: "The credit note's amount exceeds what the invoice can still credit.",
     test_clock_unexpected_state: 'The test clock is advancing; wait until it is ready.',

package/dist/esm/vocabulary/index.js

@@ -22,3 +22,4 @@ export * from './identity.js';
 export * from './merchants.js';
 export * from './paymentMethodConfigurations.js';
 export * from './realtime.js';
+export * from './receiveTree.js';

package/dist/esm/vocabulary/payments.js

@@ -30,17 +30,21 @@ export const PAYMENT_INTENT_STATUSES = [
     'canceled',
 ];
 /**
- * Why an intent was cancelled — Stripe's reasons, plus two FairCoin-only ones:
- * `underpaid` (a transaction paid less than the amount) and
+ * Why an intent was cancelled — Stripe's reasons, plus three FairCoin-only ones:
+ * `underpaid` (a transaction paid less than the amount),
  * `recipient_key_changed` (the recipient's identity key was replaced after the
  * address was reserved, so the address is no longer in the wallet it pays —
  * ADR 0002, amended 2026-11-06; nothing had been broadcast, and the order stays
- * open for a fresh address).
+ * open for a fresh address) and `faircoin_network_closed` (the deployment
+ * closed the payment's FairCoin network — ADR 0002's gate — before anything was
+ * broadcast; the order stays open, and FairCoin on it says the network is
+ * closed).
  */
 export const PAYMENT_INTENT_CANCELLATION_REASONS = [
     'abandoned',
     'automatic',
     'duplicate',
+    'faircoin_network_closed',
     'fraudulent',
     'recipient_key_changed',
     'requested_by_customer',

package/dist/esm/vocabulary/receiveTree.js

@@ -0,0 +1,41 @@
+/**
+ * The size of a recipient's FairCoin receive tree (ADR 0021 D9, amended
+ * 2026-11-06) — ONE answer, read by the gateway that hands out indices and by
+ * the Peable wallet that watches them.
+ *
+ * Every FairCoin address the gateway reserves for an account — a merchant
+ * payment, a marketplace seller's, an invoice's, `@username` — is index `i` of
+ * that account's identity tree (ADR 0002, ADR 0021 D5). The wallet watches a
+ * contiguous window, indices `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`, reaching
+ * {@link SOCIAL_RECEIVE_GAP_LIMIT} past the highest index reserved
+ * (`planSocialReceiveWindow` in `packages/frontend/src/wallet/social-receive.ts`),
+ * and stops offering `@username` once that reach would pass its bound. So an
+ * index is reserved only when the wallet, after reserving it, still reaches
+ * the gap above it inside its bound:
+ *
+ *     index + SOCIAL_RECEIVE_GAP_LIMIT  <=  SOCIAL_RECEIVE_MAX_WATCHED - 1
+ *     index                             <   SOCIAL_RECEIVE_INDEX_LIMIT
+ *
+ * The gateway refuses to mint `index >= SOCIAL_RECEIVE_INDEX_LIMIT` (in the
+ * reservation's own statement), so every address it hands out is inside the
+ * window the wallet watches. Zod-free and dependency-free: the wallet bundles
+ * this module alone (`@peable.to/contracts/vocabulary/receiveTree`).
+ */
+/** The most indices the wallet watches: `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`. */
+export const SOCIAL_RECEIVE_MAX_WATCHED = 2000;
+/**
+ * How many unused addresses the wallet watches beyond the highest index used
+ * or reserved — the FairCoin BIP44 external-chain gap limit.
+ */
+export const SOCIAL_RECEIVE_GAP_LIMIT = 20;
+/**
+ * The first index the gateway never mints (exclusive bound): `1 980`. Every
+ * minted index `i` satisfies `i < SOCIAL_RECEIVE_INDEX_LIMIT`, i.e.
+ * `i + SOCIAL_RECEIVE_GAP_LIMIT <= SOCIAL_RECEIVE_MAX_WATCHED - 1`.
+ */
+export const SOCIAL_RECEIVE_INDEX_LIMIT = SOCIAL_RECEIVE_MAX_WATCHED - SOCIAL_RECEIVE_GAP_LIMIT;
+/**
+ * How close to {@link SOCIAL_RECEIVE_INDEX_LIMIT} a tree is "nearly full":
+ * Orbit warns the owners once fewer fresh indices than this are left.
+ */
+export const SOCIAL_RECEIVE_NEARLY_FULL_REMAINING = 200;

package/dist/types/resources/payments/index.d.ts

@@ -178,6 +178,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -402,6 +403,7 @@ export declare const paymentsRoutes: readonly [{
                 message: import("zod").ZodString;
             }, import("zod/v4/core").$strict>>;
             cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+                faircoin_network_closed: "faircoin_network_closed";
                 duplicate: "duplicate";
                 fraudulent: "fraudulent";
                 abandoned: "abandoned";
@@ -607,6 +609,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -826,6 +829,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1075,6 +1079,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1278,6 +1283,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1486,6 +1492,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1687,6 +1694,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1888,6 +1896,7 @@ export declare const paymentsRoutes: readonly [{
                 message: import("zod").ZodString;
             }, import("zod/v4/core").$strict>>;
             cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+                faircoin_network_closed: "faircoin_network_closed";
                 duplicate: "duplicate";
                 fraudulent: "fraudulent";
                 abandoned: "abandoned";
@@ -3703,7 +3712,7 @@ export declare const paymentsRoutes: readonly [{
     readonly path: "/v1/social/{username}/next_address";
     readonly tag: "Social payments";
     readonly summary: "Reserve an address to pay a person";
-    readonly description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`; paying yourself is refused.";
+    readonly description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`, and one whose wallet watches no further address (every index below its watched bound is taken) 503 `faircoin_receive_tree_full`; paying yourself is refused.";
     readonly auth: "user";
     readonly params: {
         readonly username: "The recipient’s Oxy username.";
@@ -3911,6 +3920,7 @@ export declare const paymentsRoutes: readonly [{
             message: import("zod").ZodString;
         }, import("zod/v4/core").$strict>>;
         cancellation_reason: import("zod").ZodNullable<import("zod").ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";

package/dist/types/resources/payments/paymentIntents.d.ts

@@ -262,6 +262,7 @@ export declare const paymentIntentSchema: z.ZodObject<{
         message: z.ZodString;
     }, z.core.$strict>>;
     cancellation_reason: z.ZodNullable<z.ZodEnum<{
+        faircoin_network_closed: "faircoin_network_closed";
         duplicate: "duplicate";
         fraudulent: "fraudulent";
         abandoned: "abandoned";
@@ -770,6 +771,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -994,6 +996,7 @@ export declare const paymentIntentRoutes: readonly [{
                 message: z.ZodString;
             }, z.core.$strict>>;
             cancellation_reason: z.ZodNullable<z.ZodEnum<{
+                faircoin_network_closed: "faircoin_network_closed";
                 duplicate: "duplicate";
                 fraudulent: "fraudulent";
                 abandoned: "abandoned";
@@ -1199,6 +1202,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1418,6 +1422,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1667,6 +1672,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -1870,6 +1876,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -2078,6 +2085,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -2279,6 +2287,7 @@ export declare const paymentIntentRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";
@@ -2480,6 +2489,7 @@ export declare const paymentIntentRoutes: readonly [{
                 message: z.ZodString;
             }, z.core.$strict>>;
             cancellation_reason: z.ZodNullable<z.ZodEnum<{
+                faircoin_network_closed: "faircoin_network_closed";
                 duplicate: "duplicate";
                 fraudulent: "fraudulent";
                 abandoned: "abandoned";

package/dist/types/resources/payments/social.d.ts

@@ -166,7 +166,7 @@ export declare const socialRoutes: readonly [{
     readonly path: "/v1/social/{username}/next_address";
     readonly tag: "Social payments";
     readonly summary: "Reserve an address to pay a person";
-    readonly description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`; paying yourself is refused.";
+    readonly description: "A fresh address of the recipient's, derived from their Oxy identity key. Limited per (sender, recipient) pair; a recipient without an identity answers 409 `keyless_recipient`, and one whose wallet watches no further address (every index below its watched bound is taken) 503 `faircoin_receive_tree_full`; paying yourself is refused.";
     readonly auth: "user";
     readonly params: {
         readonly username: "The recipient’s Oxy username.";

package/dist/types/resources/payments/testHelpers.d.ts

@@ -120,6 +120,7 @@ export declare const paymentIntentTestHelperRoutes: readonly [{
             message: z.ZodString;
         }, z.core.$strict>>;
         cancellation_reason: z.ZodNullable<z.ZodEnum<{
+            faircoin_network_closed: "faircoin_network_closed";
             duplicate: "duplicate";
             fraudulent: "fraudulent";
             abandoned: "abandoned";

package/dist/types/vocabulary/errors.d.ts

@@ -109,6 +109,7 @@ export declare const ERROR_CODE_DESCRIPTIONS: {
     readonly faircoin_wallet_missing: "The Peable wallet that receives this payment (the merchant owner's, or the seller's) isn't set up yet, so it cannot be paid in FairCoin. The other payment methods still work.";
     readonly faircoin_network_closed: "FairCoin payments on this network are not open on this deployment yet. The other payment methods still work.";
     readonly faircoin_capacity_reached: "Too many FairCoin payments to this recipient are waiting to be paid right now, so no new FairCoin address can be handed out. The other payment methods still work; try FairCoin again shortly.";
+    readonly faircoin_receive_tree_full: "Every FairCoin address the recipient's Peable wallet watches has been handed out, so no new one can be derived for them. Nothing was reserved.";
     readonly faircoin_amount_too_small: "One seller's share of this order is below the smallest amount the FairCoin network relays, so it cannot be paid in FairCoin. The other payment methods still work.";
     readonly credit_note_exceeds_invoice: "The credit note's amount exceeds what the invoice can still credit.";
     readonly test_clock_unexpected_state: "The test clock is advancing; wait until it is ready.";

package/dist/types/vocabulary/index.d.ts

@@ -18,3 +18,4 @@ export * from './identity';
 export * from './merchants';
 export * from './paymentMethodConfigurations';
 export * from './realtime';
+export * from './receiveTree';

package/dist/types/vocabulary/payments.d.ts

@@ -20,14 +20,17 @@ export declare const PAYMENT_INTENT_MAX_EXPIRES_IN_SECONDS: number;
 export declare const PAYMENT_INTENT_STATUSES: readonly ["requires_payment_method", "requires_confirmation", "requires_action", "processing", "requires_capture", "succeeded", "canceled"];
 export type PaymentIntentStatus = (typeof PAYMENT_INTENT_STATUSES)[number];
 /**
- * Why an intent was cancelled — Stripe's reasons, plus two FairCoin-only ones:
- * `underpaid` (a transaction paid less than the amount) and
+ * Why an intent was cancelled — Stripe's reasons, plus three FairCoin-only ones:
+ * `underpaid` (a transaction paid less than the amount),
  * `recipient_key_changed` (the recipient's identity key was replaced after the
  * address was reserved, so the address is no longer in the wallet it pays —
  * ADR 0002, amended 2026-11-06; nothing had been broadcast, and the order stays
- * open for a fresh address).
+ * open for a fresh address) and `faircoin_network_closed` (the deployment
+ * closed the payment's FairCoin network — ADR 0002's gate — before anything was
+ * broadcast; the order stays open, and FairCoin on it says the network is
+ * closed).
  */
-export declare const PAYMENT_INTENT_CANCELLATION_REASONS: readonly ["abandoned", "automatic", "duplicate", "fraudulent", "recipient_key_changed", "requested_by_customer", "underpaid"];
+export declare const PAYMENT_INTENT_CANCELLATION_REASONS: readonly ["abandoned", "automatic", "duplicate", "faircoin_network_closed", "fraudulent", "recipient_key_changed", "requested_by_customer", "underpaid"];
 export type PaymentIntentCancellationReason = (typeof PAYMENT_INTENT_CANCELLATION_REASONS)[number];
 /** The reasons a MERCHANT may give `POST /v1/payment_intents/:id/cancel`. */
 export declare const MERCHANT_CANCELLATION_REASONS: readonly ["abandoned", "duplicate", "fraudulent", "requested_by_customer"];

package/dist/types/vocabulary/receiveTree.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The size of a recipient's FairCoin receive tree (ADR 0021 D9, amended
+ * 2026-11-06) — ONE answer, read by the gateway that hands out indices and by
+ * the Peable wallet that watches them.
+ *
+ * Every FairCoin address the gateway reserves for an account — a merchant
+ * payment, a marketplace seller's, an invoice's, `@username` — is index `i` of
+ * that account's identity tree (ADR 0002, ADR 0021 D5). The wallet watches a
+ * contiguous window, indices `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`, reaching
+ * {@link SOCIAL_RECEIVE_GAP_LIMIT} past the highest index reserved
+ * (`planSocialReceiveWindow` in `packages/frontend/src/wallet/social-receive.ts`),
+ * and stops offering `@username` once that reach would pass its bound. So an
+ * index is reserved only when the wallet, after reserving it, still reaches
+ * the gap above it inside its bound:
+ *
+ *     index + SOCIAL_RECEIVE_GAP_LIMIT  <=  SOCIAL_RECEIVE_MAX_WATCHED - 1
+ *     index                             <   SOCIAL_RECEIVE_INDEX_LIMIT
+ *
+ * The gateway refuses to mint `index >= SOCIAL_RECEIVE_INDEX_LIMIT` (in the
+ * reservation's own statement), so every address it hands out is inside the
+ * window the wallet watches. Zod-free and dependency-free: the wallet bundles
+ * this module alone (`@peable.to/contracts/vocabulary/receiveTree`).
+ */
+/** The most indices the wallet watches: `0 .. SOCIAL_RECEIVE_MAX_WATCHED - 1`. */
+export declare const SOCIAL_RECEIVE_MAX_WATCHED = 2000;
+/**
+ * How many unused addresses the wallet watches beyond the highest index used
+ * or reserved — the FairCoin BIP44 external-chain gap limit.
+ */
+export declare const SOCIAL_RECEIVE_GAP_LIMIT = 20;
+/**
+ * The first index the gateway never mints (exclusive bound): `1 980`. Every
+ * minted index `i` satisfies `i < SOCIAL_RECEIVE_INDEX_LIMIT`, i.e.
+ * `i + SOCIAL_RECEIVE_GAP_LIMIT <= SOCIAL_RECEIVE_MAX_WATCHED - 1`.
+ */
+export declare const SOCIAL_RECEIVE_INDEX_LIMIT: number;
+/**
+ * How close to {@link SOCIAL_RECEIVE_INDEX_LIMIT} a tree is "nearly full":
+ * Orbit warns the owners once fewer fresh indices than this are left.
+ */
+export declare const SOCIAL_RECEIVE_NEARLY_FULL_REMAINING = 200;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peable.to/contracts",
-  "version": "5.5.0",
+  "version": "5.6.0",
   "description": "The Peable wire, declared once: Zod contracts of every public route, the OpenAPI 3.1 generator and the closed value sets (ADR 0014 D5).",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",