@usdctofiat/offramp 3.0.2 → 3.1.0

package/dist/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
@@ -28,9 +38,11 @@ __export(index_exports, {
   OfframpError: () => OfframpError,
   PEER_EXTENSION_CHROME_URL: () => import_sdk7.PEER_EXTENSION_CHROME_URL,
   PLATFORMS: () => PLATFORMS,
+  PLATFORM_LIMITS: () => PLATFORM_LIMITS,
   close: () => close,
+  completePeerExtensionRegistration: () => completePeerExtensionRegistration,
   createOfframp: () => createOfframp,
-  createPeerExtensionSdk: () => import_sdk7.createPeerExtensionSdk,
+  createPeerExtensionSdk: () => createPeerExtensionSdk,
   createTelemetryContext: () => createTelemetryContext,
   delegate: () => delegate,
   deposits: () => deposits,
@@ -38,14 +50,18 @@ __export(index_exports, {
   emitEvent: () => emitEvent,
   enableOtc: () => enableOtc,
   getOtcLink: () => getOtcLink,
+  getPeerExtensionRegistrationAuthParams: () => getPeerExtensionRegistrationAuthParams,
   getPeerExtensionRegistrationInfo: () => getPeerExtensionRegistrationInfo,
-  getPeerExtensionState: () => import_sdk7.getPeerExtensionState,
-  isPeerExtensionAvailable: () => import_sdk7.isPeerExtensionAvailable,
+  getPeerExtensionState: () => getPeerExtensionState,
+  getPlatformLimits: () => getPlatformLimits,
+  isPeerExtensionAvailable: () => isPeerExtensionAvailable,
+  isPeerExtensionMetadataBridgeAvailable: () => isPeerExtensionMetadataBridgeAvailable,
   isPeerExtensionRegistrationError: () => isPeerExtensionRegistrationError,
+  isValidIBAN: () => isValidIBAN,
   normalizePaypalMeUsername: () => normalizePaypalMeUsername,
   offramp: () => offramp,
-  openPeerExtensionInstallPage: () => import_sdk7.openPeerExtensionInstallPage,
-  peerExtensionSdk: () => import_sdk7.peerExtensionSdk,
+  openPeerExtensionInstallPage: () => openPeerExtensionInstallPage,
+  peerExtensionSdk: () => peerExtensionSdk,
   sanitizeAttributionId: () => sanitizeAttributionId,
   sendTelemetryEvent: () => sendTelemetryEvent,
   undelegate: () => undelegate
@@ -59,11 +75,15 @@ var import_sdk5 = require("@zkp2p/sdk");
 
 // src/config.ts
 var import_sdk = require("@zkp2p/sdk");
-var SDK_VERSION = "3.0.2";
+var SDK_VERSION = "3.1.0";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
 var BASE_RPC_URL = "https://mainnet.base.org";
+function resolveApiBaseUrl(override) {
+  const trimmed = override?.trim();
+  return (trimmed && trimmed.length > 0 ? trimmed : API_BASE_URL).replace(/\/$/, "");
+}
 var contracts = (0, import_sdk.getContracts)(BASE_CHAIN_ID, RUNTIME_ENV);
 var addresses = contracts.addresses;
 var addrs = addresses;
@@ -80,6 +100,7 @@ var DEFAULT_INTENT_GUARDIAN_ADDRESS = "0xe29a5BD4D0CEbA6C125A0361E7D20ab4eA275C2
 var REFERRER = "galleonlabs";
 var MIN_DEPOSIT_USDC = 1;
 var MIN_ORDER_USDC = 1;
+var MAX_ORDER_USDC = 2500;
 var INDEXER_MAX_ATTEMPTS = 12;
 var INDEXER_INITIAL_DELAY_MS = 1e3;
 var INDEXER_MAX_DELAY_MS = 1e4;
@@ -88,6 +109,41 @@ var PAYEE_REGISTRATION_TIMEOUT_MS = 8e3;
 // src/platforms.ts
 var import_sdk2 = require("@zkp2p/sdk");
 var import_zod = require("zod");
+
+// src/errors.ts
+var MakersCreateError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "MakersCreateError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var OfframpError = class extends Error {
+  code;
+  step;
+  cause;
+  txHash;
+  depositId;
+  constructor(message, code, step, cause, details) {
+    super(message);
+    this.name = "OfframpError";
+    this.code = code;
+    this.step = step;
+    this.cause = cause;
+    this.txHash = details?.txHash;
+    this.depositId = details?.depositId;
+  }
+};
+function isUserCancellation(error) {
+  if (!(error instanceof Error)) return false;
+  const msg = error.message.toLowerCase();
+  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
+}
+
+// src/platforms.ts
 var PAYMENT_CATALOG = (0, import_sdk2.getPaymentMethodsCatalog)(BASE_CHAIN_ID, RUNTIME_ENV);
 var ZELLE_HASH_LOOKUP_NAMES = ["zelle", "zelle-bofa", "zelle-chase", "zelle-citi"];
 var FALLBACK_CURRENCIES = {
@@ -156,7 +212,8 @@ var FALLBACK_CURRENCIES = {
   zelle: ["USD"],
   paypal: ["USD", "EUR", "GBP", "SGD", "NZD", "AUD", "CAD"],
   monzo: ["GBP"],
-  n26: ["EUR"]
+  n26: ["EUR"],
+  luxon: ["USD", "EUR", "GBP"]
 };
 function gatherCatalogHashes(platform) {
   if (platform === "zelle") {
@@ -180,13 +237,39 @@ function resolveSupportedCurrencies(platform) {
 function normalizePaypalMeUsername(value) {
   const trimmed = value.trim();
   if (!trimmed) return "";
-  const withoutProtocol = trimmed.replace(/^https?:\/\//i, "").replace(/^www\./i, "");
-  if (/^paypal\.me(?:[?#].*)?$/i.test(withoutProtocol)) return "";
-  const withoutDomain = withoutProtocol.replace(/^paypal\.me\//i, "");
-  const [pathWithoutQuery] = withoutDomain.split(/[?#]/, 1);
+  const withoutProtocol = trimmed.replace(/^https?:\/\//i, "");
+  const [pathWithoutQuery] = withoutProtocol.split(/[?#]/, 1);
   const sanitizedPath = pathWithoutQuery.replace(/^\/+/, "");
-  const [username] = sanitizedPath.split("/", 1);
-  return username.replace(/^@+/, "").trim().toLowerCase();
+  const [host = "", ...pathSegments] = sanitizedPath.split("/");
+  const normalizedHost = host.toLowerCase().replace(/^www\./i, "");
+  if (normalizedHost === "paypal.me") {
+    const [username = ""] = pathSegments;
+    return username.replace(/^@+/, "").trim().toLowerCase();
+  }
+  if (normalizedHost === "paypal.com") {
+    const [paypalMePath = "", username = ""] = pathSegments;
+    if (paypalMePath.toLowerCase() !== "paypalme") return "";
+    return username.replace(/^@+/, "").trim().toLowerCase();
+  }
+  if (/^https?:\/\//i.test(trimmed) || trimmed.includes("/")) {
+    return trimmed;
+  }
+  return trimmed.replace(/^@+/, "").toLowerCase();
+}
+function isValidIBAN(iban) {
+  const upper = iban.toUpperCase();
+  if (!/^[A-Z]{2}[0-9]{2}[A-Z0-9]{11,30}$/.test(upper)) return false;
+  const rearranged = upper.slice(4) + upper.slice(0, 4);
+  const numeric = rearranged.split("").map((ch) => {
+    const code = ch.charCodeAt(0);
+    return code >= 65 && code <= 90 ? (code - 55).toString() : ch;
+  }).join("");
+  let remainder = numeric;
+  while (remainder.length > 2) {
+    const block = remainder.slice(0, 9);
+    remainder = (parseInt(block, 10) % 97).toString() + remainder.slice(block.length);
+  }
+  return parseInt(remainder, 10) % 97 === 1;
 }
 var BLUEPRINTS = {
   venmo: {
@@ -238,9 +321,9 @@ var BLUEPRINTS = {
     transform: (v) => v.replace(/^@+/, "").trim(),
     extensionRegistration: {
       providerId: "wise",
-      requiredPrompt: "This Wisetag is not registered yet. Verify it in the Peer extension, then refresh and retry with the same Wisetag.",
-      ctaLabel: "Install Peer Extension",
-      minExtensionVersion: "0.4.12"
+      requiredPrompt: "This Wisetag is not registered yet. Register it with PeerAuth, then retry with the same Wisetag.",
+      ctaLabel: "Register Wisetag",
+      minExtensionVersion: "0.5.0"
     }
   },
   mercadopago: {
@@ -257,7 +340,11 @@ var BLUEPRINTS = {
     identifierLabel: "Email",
     placeholder: "email",
     helperText: "Registered Zelle email",
-    validation: import_zod.z.string().email()
+    // Curator's ZelleProcessor rejects any non-lowercase email outright, so
+    // canonicalize to lowercase here rather than letting /v2/makers/create
+    // reject after the maker has already approved USDC + paid gas.
+    validation: import_zod.z.string().email(),
+    transform: (v) => v.trim().toLowerCase()
   },
   paypal: {
     id: "paypal",
@@ -265,14 +352,17 @@ var BLUEPRINTS = {
     identifierLabel: "PayPal.me Username",
     placeholder: "paypal.me/your-username",
     helperText: "Your PayPal.me username, not your email",
-    validation: import_zod.z.string().min(1, "PayPal.me username is required").regex(/^[a-z0-9._-]+$/i, "Use your PayPal.me username (letters, numbers, . _ -)"),
+    validation: import_zod.z.string().min(1, "PayPal.me username is required").regex(
+      /^[a-z0-9._-]+$/i,
+      "Use your PayPal.me username or paypal.me link, not a shortened URL."
+    ),
     transform: normalizePaypalMeUsername,
     extensionRegistration: {
       providerId: "paypal",
-      requiredPrompt: "This PayPal username is not registered yet. Verify it in the Peer extension, then refresh and retry with the same PayPal username.",
-      ctaLabel: "Install Peer Extension",
+      requiredPrompt: "This PayPal username is not registered yet. Register it with PeerAuth, then retry with the same PayPal username.",
+      ctaLabel: "Register PayPal Username",
       ctaSubtext: "PayPal Business accounts are not supported at this time.",
-      minExtensionVersion: "0.4.14"
+      minExtensionVersion: "0.5.0"
     }
   },
   monzo: {
@@ -289,8 +379,20 @@ var BLUEPRINTS = {
     identifierLabel: "IBAN",
     placeholder: "IBAN (e.g. DE89...)",
     helperText: "Your IBAN (spaces will be removed)",
-    validation: import_zod.z.string().min(15).max(34).regex(/^[A-Z]{2}[0-9]{2}[A-Z0-9]+$/i),
+    // transform runs before validation, so the schema sees a spaceless,
+    // uppercased IBAN. The MOD-97 refine mirrors curator's N26Processor so a
+    // typo'd-but-well-formed IBAN fails here, not after USDC approval + gas.
+    validation: import_zod.z.string().regex(/^[A-Z]{2}[0-9]{2}[A-Z0-9]{11,30}$/, "Enter a valid IBAN").refine(isValidIBAN, "That IBAN looks wrong \u2014 its checksum doesn't match"),
     transform: (v) => v.replace(/\s/g, "").toUpperCase()
+  },
+  luxon: {
+    id: "luxon",
+    name: "Luxon",
+    identifierLabel: "Email",
+    placeholder: "your-luxon-email@example.com",
+    helperText: "Email address registered with Luxon",
+    validation: import_zod.z.string().email(),
+    transform: (v) => v.trim()
   }
 };
 function buildPlatformEntry(bp) {
@@ -329,8 +431,18 @@ var PLATFORMS = {
   ZELLE: buildPlatformEntry(BLUEPRINTS.zelle),
   PAYPAL: buildPlatformEntry(BLUEPRINTS.paypal),
   MONZO: buildPlatformEntry(BLUEPRINTS.monzo),
-  N26: buildPlatformEntry(BLUEPRINTS.n26)
+  N26: buildPlatformEntry(BLUEPRINTS.n26),
+  LUXON: buildPlatformEntry(BLUEPRINTS.luxon)
 };
+var PLATFORM_LIMITS = {
+  venmo: { platformCapUsd: 5e3 },
+  n26: { platformCapUsd: 1e4 },
+  paypal: { minTier: "PLUS" }
+};
+function getPlatformLimits(platform) {
+  const id = platform.trim().toLowerCase();
+  return PLATFORM_LIMITS[id] ?? null;
+}
 function getPlatformById(id) {
   return Object.values(PLATFORMS).find((p) => p.id === id) ?? null;
 }
@@ -392,6 +504,146 @@ function getPeerExtensionRegistrationInfo(platform) {
   const entry = getPlatformById(platform);
   return entry?.extensionRegistration ?? null;
 }
+function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
+  const info = getPeerExtensionRegistrationInfo(platform);
+  if (!info) return null;
+  const params = {
+    actionType: `transfer_${info.providerId}`,
+    captureMode: "sellerCredential",
+    platform: info.providerId
+  };
+  if (options.attestationServiceUrl) {
+    params.attestationServiceUrl = options.attestationServiceUrl;
+  }
+  return params;
+}
+function resolveRegistrationProcessor(platform) {
+  const info = getPeerExtensionRegistrationInfo(platform.id);
+  if (info?.providerId === "paypal" || info?.providerId === "wise") {
+    return info.providerId;
+  }
+  throw new Error(`${platform.name} does not require Peer extension registration.`);
+}
+async function postMakerCreate(processorName, payload, apiBaseUrl = API_BASE_URL) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/create`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ processorName, ...payload }),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new MakersCreateError(
+        `makers/create failed (${res.status}): ${detail}`,
+        res.status,
+        txt
+      );
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject?.hashedOnchainId) {
+      throw new MakersCreateError(
+        json.message || "makers/create returned no hashedOnchainId",
+        json.statusCode ?? null,
+        ""
+      );
+    }
+    return json.responseObject.hashedOnchainId;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function requireSarCredentialCapture(capturedMetadata) {
+  const capture = capturedMetadata.sarCredentialCapture;
+  if (!capture?.credentialBundle) {
+    throw new Error("Peer metadata did not include a seller credential bundle.");
+  }
+  if (!capture.offchainId) {
+    throw new Error("Peer metadata did not include seller credential offchainId.");
+  }
+  return capture;
+}
+async function uploadSellerCredentialBundle(processorName, payeeHash, bundle) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(
+      `${API_BASE_URL}/v2/makers/${encodeURIComponent(processorName)}/${encodeURIComponent(payeeHash)}/seller-credential`,
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(bundle),
+        signal: controller.signal
+      }
+    );
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new Error(`seller-credential upload failed (${res.status}): ${detail}`);
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject) {
+      throw new Error(json.message || "seller-credential upload returned no status.");
+    }
+    return json;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function completePeerExtensionRegistration(input) {
+  const processorName = resolveRegistrationProcessor(input.platform);
+  if (input.capturedMetadata.platform !== processorName) {
+    throw new Error(
+      `Peer metadata is for ${input.capturedMetadata.platform}, not ${processorName}.`
+    );
+  }
+  const sarCredentialCapture = requireSarCredentialCapture(input.capturedMetadata);
+  const bundle = sarCredentialCapture.credentialBundle;
+  if (bundle.platform.toLowerCase() !== processorName) {
+    throw new Error("Seller credential bundle platform does not match registration platform.");
+  }
+  const validation = input.platform.validate(input.identifier);
+  if (!validation.valid) {
+    throw new Error(validation.error || "Invalid identifier");
+  }
+  const payload = buildDepositData(processorName, sarCredentialCapture.offchainId);
+  if (payload.offchainId !== validation.normalized) {
+    throw new Error("Seller credential offchainId does not match registration identifier.");
+  }
+  const hashedOnchainId = processorName === "wise" ? bundle.payeeIdHash : await postMakerCreate(processorName, payload);
+  if (hashedOnchainId.toLowerCase() !== bundle.payeeIdHash.toLowerCase()) {
+    throw new Error("Seller credential payee hash does not match registered payee details.");
+  }
+  const sellerCredentialResponse = await uploadSellerCredentialBundle(
+    processorName,
+    hashedOnchainId,
+    bundle
+  );
+  return {
+    processorName,
+    offchainId: payload.offchainId,
+    hashedOnchainId,
+    sellerCredentialResponse,
+    sellerCredentialStatus: sellerCredentialResponse.responseObject
+  };
+}
 var EXTENSION_REGISTRATION_ERROR_PATTERNS = ["creating the maker", "create the maker"];
 function isPeerExtensionRegistrationError(platform, message, statusCode) {
   const info = getPeerExtensionRegistrationInfo(platform);
@@ -403,401 +655,26 @@ function isPeerExtensionRegistrationError(platform, message, statusCode) {
   return EXTENSION_REGISTRATION_ERROR_PATTERNS.some((p) => lower.includes(p));
 }
 
-// src/errors.ts
-var MakersCreateError = class extends Error {
-  status;
-  body;
-  constructor(message, status, body) {
-    super(message);
-    this.name = "MakersCreateError";
-    this.status = status;
-    this.body = body;
-  }
-};
-var OfframpError = class extends Error {
-  code;
-  step;
-  cause;
-  txHash;
-  depositId;
-  constructor(message, code, step, cause, details) {
-    super(message);
-    this.name = "OfframpError";
-    this.code = code;
-    this.step = step;
-    this.cause = cause;
-    this.txHash = details?.txHash;
-    this.depositId = details?.depositId;
-  }
-};
-function isUserCancellation(error) {
-  if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
-}
-
 // src/otc.ts
 var import_viem = require("viem");
 var import_chains = require("viem/chains");
-
-// ../../node_modules/@zkp2p/contracts-v2/abis/base/WhitelistPreIntentHook.json
-var WhitelistPreIntentHook_default = [
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_orchestratorRegistry",
-        type: "address"
-      }
-    ],
-    stateMutability: "nonpayable",
-    type: "constructor"
-  },
-  {
-    inputs: [],
-    name: "EmptyArray",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      }
-    ],
-    name: "TakerNotInWhitelist",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      }
-    ],
-    name: "TakerNotWhitelisted",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "caller",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "owner",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "delegate",
-        type: "address"
-      }
-    ],
-    name: "UnauthorizedCallerOrDelegate",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "caller",
-        type: "address"
-      }
-    ],
-    name: "UnauthorizedOrchestratorCaller",
-    type: "error"
-  },
-  {
-    inputs: [],
-    name: "ZeroAddress",
-    type: "error"
-  },
-  {
-    anonymous: false,
-    inputs: [
-      {
-        indexed: true,
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        indexed: true,
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      },
-      {
-        indexed: true,
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      }
-    ],
-    name: "TakerRemovedFromWhitelist",
-    type: "event"
-  },
-  {
-    anonymous: false,
-    inputs: [
-      {
-        indexed: true,
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        indexed: true,
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      },
-      {
-        indexed: true,
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      }
-    ],
-    name: "TakerWhitelisted",
-    type: "event"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address[]",
-        name: "_takers",
-        type: "address[]"
-      }
-    ],
-    name: "addToWhitelist",
-    outputs: [],
-    stateMutability: "nonpayable",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address",
-        name: "_taker",
-        type: "address"
-      }
-    ],
-    name: "isWhitelisted",
-    outputs: [
-      {
-        internalType: "bool",
-        name: "",
-        type: "bool"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [],
-    name: "orchestratorRegistry",
-    outputs: [
-      {
-        internalType: "contract IOrchestratorRegistry",
-        name: "",
-        type: "address"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address[]",
-        name: "_takers",
-        type: "address[]"
-      }
-    ],
-    name: "removeFromWhitelist",
-    outputs: [],
-    stateMutability: "nonpayable",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        components: [
-          {
-            internalType: "address",
-            name: "taker",
-            type: "address"
-          },
-          {
-            internalType: "address",
-            name: "escrow",
-            type: "address"
-          },
-          {
-            internalType: "uint256",
-            name: "depositId",
-            type: "uint256"
-          },
-          {
-            internalType: "uint256",
-            name: "amount",
-            type: "uint256"
-          },
-          {
-            internalType: "address",
-            name: "to",
-            type: "address"
-          },
-          {
-            internalType: "bytes32",
-            name: "paymentMethod",
-            type: "bytes32"
-          },
-          {
-            internalType: "bytes32",
-            name: "fiatCurrency",
-            type: "bytes32"
-          },
-          {
-            internalType: "uint256",
-            name: "conversionRate",
-            type: "uint256"
-          },
-          {
-            components: [
-              {
-                internalType: "address",
-                name: "recipient",
-                type: "address"
-              },
-              {
-                internalType: "uint256",
-                name: "fee",
-                type: "uint256"
-              }
-            ],
-            internalType: "struct IReferralFee.ReferralFee[]",
-            name: "referralFees",
-            type: "tuple[]"
-          },
-          {
-            internalType: "bytes",
-            name: "preIntentHookData",
-            type: "bytes"
-          }
-        ],
-        internalType: "struct IPreIntentHook.PreIntentContext",
-        name: "_ctx",
-        type: "tuple"
-      }
-    ],
-    name: "validateSignalIntent",
-    outputs: [],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "",
-        type: "uint256"
-      },
-      {
-        internalType: "address",
-        name: "",
-        type: "address"
-      }
-    ],
-    name: "whitelist",
-    outputs: [
-      {
-        internalType: "bool",
-        name: "",
-        type: "bool"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  }
-];
+var import_WhitelistPreIntentHook = __toESM(require("@zkp2p/contracts-v2/abis/base/WhitelistPreIntentHook.json"), 1);
 
 // src/sdk-client.ts
 var import_sdk3 = require("@zkp2p/sdk");
-function createSdkClient(walletClient) {
+function createSdkClient(walletClient, apiBaseUrl = API_BASE_URL) {
   return new import_sdk3.OfframpClient({
     walletClient,
     chainId: BASE_CHAIN_ID,
     runtimeEnv: RUNTIME_ENV,
     rpcUrl: BASE_RPC_URL,
-    baseApiUrl: API_BASE_URL
+    baseApiUrl: apiBaseUrl
   });
 }
 
 // src/otc.ts
 var WHITELIST_HOOK_ADDRESS = "0xda023Ea0d789A41BcF5866F7B6BBd2CaDF9b79B8";
-var OTC_BASE_URL = "https://usdctofiat.xyz";
+var OTC_BASE_URL = "https://otc.usdctofiat.xyz";
 async function enableOtc(walletClient, depositId, takerAddress, escrowAddress) {
   if (!(0, import_viem.isAddress)(takerAddress)) {
     throw new OfframpError("Invalid taker address", "VALIDATION");
@@ -869,7 +746,7 @@ async function disableOtc(walletClient, depositId, escrowAddress) {
 }
 function getOtcLink(depositId, escrowAddress) {
   const escrow = escrowAddress || ESCROW_ADDRESS;
-  return `${OTC_BASE_URL}/deposit/${escrow}/${depositId}`;
+  return `${OTC_BASE_URL}/d/${escrow}/${depositId}`;
 }
 async function writeContract(walletClient, functionName, args) {
   const wc = walletClient;
@@ -878,7 +755,7 @@ async function writeContract(walletClient, functionName, args) {
   }
   await wc.writeContract({
     address: WHITELIST_HOOK_ADDRESS,
-    abi: WhitelistPreIntentHook_default,
+    abi: import_WhitelistPreIntentHook.default,
     functionName,
     args
   });
@@ -887,7 +764,7 @@ async function readIsWhitelisted(escrow, depositId, taker) {
   const publicClient = (0, import_viem.createPublicClient)({ chain: import_chains.base, transport: (0, import_viem.http)(BASE_RPC_URL) });
   return publicClient.readContract({
     address: WHITELIST_HOOK_ADDRESS,
-    abi: WhitelistPreIntentHook_default,
+    abi: import_WhitelistPreIntentHook.default,
     functionName: "isWhitelisted",
     args: [escrow, depositId, taker]
   });
@@ -1202,41 +1079,24 @@ function extractDepositIdFromLogs(logs) {
   }
   return null;
 }
-async function registerPayeeDetails(processorName, payload) {
+async function validatePayeeDetails(processorName, offchainId, apiBaseUrl = API_BASE_URL) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
   try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/create`, {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/validate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ processorName, ...payload }),
+      body: JSON.stringify({ processorName, offchainId }),
       signal: controller.signal
     });
-    if (!res.ok) {
-      const txt = await res.text().catch(() => "");
-      let detail = txt || res.statusText;
-      try {
-        const parsed = JSON.parse(txt);
-        if (typeof parsed.message === "string" && parsed.message.trim()) {
-          detail = parsed.message;
-        }
-      } catch {
-      }
-      throw new MakersCreateError(
-        `makers/create failed (${res.status}): ${detail}`,
-        res.status,
-        txt
-      );
-    }
+    if (!res.ok) return "unknown";
     const json = await res.json();
-    if (!json.success || !json.responseObject?.hashedOnchainId) {
-      throw new MakersCreateError(
-        json.message || "makers/create returned no hashedOnchainId",
-        json.statusCode ?? null,
-        ""
-      );
+    if (typeof json.responseObject === "boolean") {
+      return json.responseObject ? "valid" : "invalid";
     }
-    return json.responseObject.hashedOnchainId;
+    return "unknown";
+  } catch {
+    return "unknown";
   } finally {
     clearTimeout(timeout);
   }
@@ -1301,10 +1161,11 @@ async function findUndelegatedDeposit(walletAddress) {
     return null;
   }
 }
-async function offramp(walletClient, params, onProgress, telemetryContext) {
+async function offramp(walletClient, params, onProgress, telemetryContext, apiBaseUrl) {
   const { amount, platform, currency, identifier } = params;
   const platformId = platform.id;
   const currencyCode = currency.code;
+  const resolvedApiBaseUrl = resolveApiBaseUrl(apiBaseUrl);
   const telemetry = telemetryContext ?? createTelemetryContext({
     sdkVersion: SDK_VERSION,
     telemetry: true,
@@ -1349,7 +1210,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const existing = await findUndelegatedDeposit(walletAddress);
     if (existing) {
       emitProgress({ step: "resuming", depositId: existing.depositId });
-      const client2 = createSdkClient(walletClient);
+      const client2 = createSdkClient(walletClient, resolvedApiBaseUrl);
       const txOverrides2 = { referrer: [REFERRER] };
       try {
         const result2 = await client2.setRateManager({
@@ -1385,7 +1246,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const truncatedAmount = amt.toFixed(6).replace(/\.?0+$/, "");
     const amountUnits = usdcToUnits(truncatedAmount);
     const minUnits = usdcToUnits(String(MIN_ORDER_USDC));
-    const maxUnits = usdcToUnits(String(Math.min(amt, 2500)));
+    const maxUnits = usdcToUnits(String(Math.min(amt, MAX_ORDER_USDC)));
     try {
       const publicClient = (0, import_viem3.createPublicClient)({ chain: import_chains3.base, transport: (0, import_viem3.http)(BASE_RPC_URL) });
       const balance = await publicClient.readContract({
@@ -1412,7 +1273,22 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     } catch (err) {
       if (err instanceof OfframpError) throw err;
     }
-    const client = createSdkClient(walletClient);
+    const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
+    if (!getPeerExtensionRegistrationInfo(platformId)) {
+      const outcome = await validatePayeeDetails(
+        canonicalName,
+        normalizedIdentifier,
+        resolvedApiBaseUrl
+      );
+      if (outcome === "invalid") {
+        throw new OfframpError(
+          `Couldn't verify that ${platform.name} ${platform.identifier.label.toLowerCase()}. Double-check it and try again.`,
+          "VALIDATION",
+          "registering"
+        );
+      }
+    }
+    const client = createSdkClient(walletClient, resolvedApiBaseUrl);
     const txOverrides = { referrer: [REFERRER] };
     emitProgress({ step: "approving" });
     try {
@@ -1436,16 +1312,15 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     }
     emitProgress({ step: "registering" });
     let hashedOnchainId;
-    const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
     try {
       const payeePayload = buildDepositData(canonicalName, normalizedIdentifier);
-      hashedOnchainId = await registerPayeeDetails(canonicalName, payeePayload);
+      hashedOnchainId = await postMakerCreate(canonicalName, payeePayload, resolvedApiBaseUrl);
     } catch (err) {
       const status = err instanceof MakersCreateError ? err.status : null;
       const message = err instanceof Error ? err.message : String(err);
       if (isPeerExtensionRegistrationError(canonicalName, message, status)) {
         throw new OfframpError(
-          `${platform.name} maker is not yet registered in the Peer extension. Verify this handle in the extension, then retry.`,
+          `${platform.name} maker is not yet registered in the Peer extension. Register this handle with Peer, then retry.`,
           "EXTENSION_REGISTRATION_REQUIRED",
           "registering",
           err
@@ -1637,6 +1512,14 @@ var CURRENCIES = buildCurrencies();
 // src/offramp.ts
 var IDEMPOTENCY_TTL_MS = 10 * 60 * 1e3;
 var IDEMPOTENCY_STORAGE_PREFIX = "offramp:idempotency:";
+var warnedIdempotencyUnavailable = false;
+function warnIdempotencyUnavailableOnce() {
+  if (warnedIdempotencyUnavailable) return;
+  warnedIdempotencyUnavailable = true;
+  console.warn(
+    "[offramp] idempotencyKey was provided but sessionStorage is unavailable (Node/worker runtime). The idempotency cache is browser-only and no-ops here, so retries can create duplicate deposits. For server-side dedup, call deposits(walletAddress) and reuse an existing open deposit before creating one."
+  );
+}
 function getWalletAddress(walletClient) {
   const address = walletClient.account?.address;
   if (!address) {
@@ -1707,8 +1590,10 @@ function buildCurrencyGroups() {
 var Offramp = class {
   walletClient;
   telemetry;
+  apiBaseUrl;
   constructor(options) {
     this.walletClient = options.walletClient;
+    this.apiBaseUrl = options.apiBaseUrl;
     this.telemetry = createTelemetryContext({
       sdkVersion: SDK_VERSION,
       telemetry: options.telemetry,
@@ -1731,6 +1616,9 @@ var Offramp = class {
       referralId: flowTelemetry.referralId
     };
     const sanitizedKey = sanitizeAttributionId(params.idempotencyKey);
+    if (sanitizedKey && typeof sessionStorage === "undefined") {
+      warnIdempotencyUnavailableOnce();
+    }
     const walletAddress = sanitizedKey ? getWalletAddress(this.walletClient) : null;
     const storageKey = walletAddress && sanitizedKey ? getIdempotencyStorageKey(walletAddress, sanitizedKey) : null;
     if (storageKey) {
@@ -1741,7 +1629,8 @@ var Offramp = class {
       this.walletClient,
       sanitizedParams,
       onProgress,
-      flowTelemetry
+      flowTelemetry,
+      this.apiBaseUrl
     );
     if (storageKey) {
       writeIdempotencyResult(storageKey, result);
@@ -1797,8 +1686,8 @@ var OFFRAMP_ERROR_CODES = {
    * handle in the Peer extension yet. Thrown from `offramp()` for PayPal
    * and Wise when `/v2/makers/create` returns 400 or a "creating the maker"
    * message. Recover by prompting the user through the Peer extension via
-   * `usePeerExtensionRegistration(platform)` (React) or `peerExtensionSdk`
-   * directly, then call `offramp()` again.
+   * `usePeerExtensionRegistration(platform)` (React) or
+   * `completePeerExtensionRegistration(...)`, then retrying `offramp()`.
    */
   EXTENSION_REGISTRATION_REQUIRED: "EXTENSION_REGISTRATION_REQUIRED",
   DEPOSIT_FAILED: "DEPOSIT_FAILED",
@@ -1810,6 +1699,78 @@ var OFFRAMP_ERROR_CODES = {
 
 // src/extension.ts
 var import_sdk7 = require("@zkp2p/sdk");
+var resolveWindow = (options) => {
+  if (options?.window) {
+    return options.window;
+  }
+  if (typeof window === "undefined") {
+    return void 0;
+  }
+  return window;
+};
+var requirePeer = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  if (!resolvedWindow.peer) {
+    throw new Error("Peer extension not available. Install or enable the Peer extension.");
+  }
+  return resolvedWindow.peer;
+};
+var isPeerExtensionAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer);
+};
+var hasHeadlessMetadataBridge = (peer) => typeof peer.authenticate === "function" && typeof peer.onMetadataMessage === "function";
+var requirePeerMetadataBridge = (options) => {
+  const peer = requirePeer(options);
+  if (!hasHeadlessMetadataBridge(peer)) {
+    throw new Error("Peer extension metadata bridge unavailable. Install or update Peer.");
+  }
+  return peer;
+};
+var isPeerExtensionMetadataBridgeAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer && hasHeadlessMetadataBridge(resolvedWindow.peer));
+};
+var openPeerExtensionInstallPage = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  resolvedWindow.open(import_sdk7.PEER_EXTENSION_CHROME_URL, "_blank", "noopener,noreferrer");
+};
+var getPeerExtensionState = async (options) => {
+  if (!isPeerExtensionAvailable(options)) {
+    return "needs_install";
+  }
+  try {
+    const status = await requirePeer(options).checkConnectionStatus();
+    return status === "connected" ? "ready" : "needs_connection";
+  } catch {
+    return "needs_connection";
+  }
+};
+var createPeerExtensionSdk = (options = {}) => {
+  const legacySdk = (0, import_sdk7.createPeerExtensionSdk)(
+    options
+  );
+  return {
+    isAvailable: () => isPeerExtensionAvailable(options),
+    requestConnection: () => requirePeer(options).requestConnection(),
+    checkConnectionStatus: () => requirePeer(options).checkConnectionStatus(),
+    getVersion: () => requirePeer(options).getVersion(),
+    authenticate: (params) => requirePeerMetadataBridge(options).authenticate(params),
+    onMetadataMessage: (callback) => requirePeerMetadataBridge(options).onMetadataMessage(callback),
+    openSidebar: (route) => legacySdk.openSidebar(route),
+    onramp: (params, callback) => legacySdk.onramp(params, callback),
+    getOnrampTransaction: (intentHash) => legacySdk.getOnrampTransaction(intentHash),
+    openInstallPage: () => openPeerExtensionInstallPage(options),
+    getState: () => getPeerExtensionState(options)
+  };
+};
+var peerExtensionSdk = createPeerExtensionSdk();
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CURRENCIES,
@@ -1820,7 +1781,9 @@ var import_sdk7 = require("@zkp2p/sdk");
   OfframpError,
   PEER_EXTENSION_CHROME_URL,
   PLATFORMS,
+  PLATFORM_LIMITS,
   close,
+  completePeerExtensionRegistration,
   createOfframp,
   createPeerExtensionSdk,
   createTelemetryContext,
@@ -1830,10 +1793,14 @@ var import_sdk7 = require("@zkp2p/sdk");
   emitEvent,
   enableOtc,
   getOtcLink,
+  getPeerExtensionRegistrationAuthParams,
   getPeerExtensionRegistrationInfo,
   getPeerExtensionState,
+  getPlatformLimits,
   isPeerExtensionAvailable,
+  isPeerExtensionMetadataBridgeAvailable,
   isPeerExtensionRegistrationError,
+  isValidIBAN,
   normalizePaypalMeUsername,
   offramp,
   openPeerExtensionInstallPage,