@usdctofiat/offramp 3.0.2 → 3.1.0

package/dist/react.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/react.ts
@@ -30,11 +40,15 @@ var import_react = require("react");
 
 // src/config.ts
 var import_sdk = require("@zkp2p/sdk");
-var SDK_VERSION = "3.0.2";
+var SDK_VERSION = "3.1.0";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
 var BASE_RPC_URL = "https://mainnet.base.org";
+function resolveApiBaseUrl(override) {
+  const trimmed = override?.trim();
+  return (trimmed && trimmed.length > 0 ? trimmed : API_BASE_URL).replace(/\/$/, "");
+}
 var contracts = (0, import_sdk.getContracts)(BASE_CHAIN_ID, RUNTIME_ENV);
 var addresses = contracts.addresses;
 var addrs = addresses;
@@ -51,6 +65,7 @@ var DEFAULT_INTENT_GUARDIAN_ADDRESS = "0xe29a5BD4D0CEbA6C125A0361E7D20ab4eA275C2
 var REFERRER = "galleonlabs";
 var MIN_DEPOSIT_USDC = 1;
 var MIN_ORDER_USDC = 1;
+var MAX_ORDER_USDC = 2500;
 var INDEXER_MAX_ATTEMPTS = 12;
 var INDEXER_INITIAL_DELAY_MS = 1e3;
 var INDEXER_MAX_DELAY_MS = 1e4;
@@ -82,6 +97,41 @@ var import_sdk6 = require("@zkp2p/sdk");
 // src/platforms.ts
 var import_sdk3 = require("@zkp2p/sdk");
 var import_zod = require("zod");
+
+// src/errors.ts
+var MakersCreateError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "MakersCreateError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var OfframpError = class extends Error {
+  code;
+  step;
+  cause;
+  txHash;
+  depositId;
+  constructor(message, code, step, cause, details) {
+    super(message);
+    this.name = "OfframpError";
+    this.code = code;
+    this.step = step;
+    this.cause = cause;
+    this.txHash = details?.txHash;
+    this.depositId = details?.depositId;
+  }
+};
+function isUserCancellation(error) {
+  if (!(error instanceof Error)) return false;
+  const msg = error.message.toLowerCase();
+  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
+}
+
+// src/platforms.ts
 var PAYMENT_CATALOG = (0, import_sdk3.getPaymentMethodsCatalog)(BASE_CHAIN_ID, RUNTIME_ENV);
 var ZELLE_HASH_LOOKUP_NAMES = ["zelle", "zelle-bofa", "zelle-chase", "zelle-citi"];
 var FALLBACK_CURRENCIES = {
@@ -150,7 +200,8 @@ var FALLBACK_CURRENCIES = {
   zelle: ["USD"],
   paypal: ["USD", "EUR", "GBP", "SGD", "NZD", "AUD", "CAD"],
   monzo: ["GBP"],
-  n26: ["EUR"]
+  n26: ["EUR"],
+  luxon: ["USD", "EUR", "GBP"]
 };
 function gatherCatalogHashes(platform) {
   if (platform === "zelle") {
@@ -174,13 +225,39 @@ function resolveSupportedCurrencies(platform) {
 function normalizePaypalMeUsername(value) {
   const trimmed = value.trim();
   if (!trimmed) return "";
-  const withoutProtocol = trimmed.replace(/^https?:\/\//i, "").replace(/^www\./i, "");
-  if (/^paypal\.me(?:[?#].*)?$/i.test(withoutProtocol)) return "";
-  const withoutDomain = withoutProtocol.replace(/^paypal\.me\//i, "");
-  const [pathWithoutQuery] = withoutDomain.split(/[?#]/, 1);
+  const withoutProtocol = trimmed.replace(/^https?:\/\//i, "");
+  const [pathWithoutQuery] = withoutProtocol.split(/[?#]/, 1);
   const sanitizedPath = pathWithoutQuery.replace(/^\/+/, "");
-  const [username] = sanitizedPath.split("/", 1);
-  return username.replace(/^@+/, "").trim().toLowerCase();
+  const [host = "", ...pathSegments] = sanitizedPath.split("/");
+  const normalizedHost = host.toLowerCase().replace(/^www\./i, "");
+  if (normalizedHost === "paypal.me") {
+    const [username = ""] = pathSegments;
+    return username.replace(/^@+/, "").trim().toLowerCase();
+  }
+  if (normalizedHost === "paypal.com") {
+    const [paypalMePath = "", username = ""] = pathSegments;
+    if (paypalMePath.toLowerCase() !== "paypalme") return "";
+    return username.replace(/^@+/, "").trim().toLowerCase();
+  }
+  if (/^https?:\/\//i.test(trimmed) || trimmed.includes("/")) {
+    return trimmed;
+  }
+  return trimmed.replace(/^@+/, "").toLowerCase();
+}
+function isValidIBAN(iban) {
+  const upper = iban.toUpperCase();
+  if (!/^[A-Z]{2}[0-9]{2}[A-Z0-9]{11,30}$/.test(upper)) return false;
+  const rearranged = upper.slice(4) + upper.slice(0, 4);
+  const numeric = rearranged.split("").map((ch) => {
+    const code = ch.charCodeAt(0);
+    return code >= 65 && code <= 90 ? (code - 55).toString() : ch;
+  }).join("");
+  let remainder = numeric;
+  while (remainder.length > 2) {
+    const block = remainder.slice(0, 9);
+    remainder = (parseInt(block, 10) % 97).toString() + remainder.slice(block.length);
+  }
+  return parseInt(remainder, 10) % 97 === 1;
 }
 var BLUEPRINTS = {
   venmo: {
@@ -232,9 +309,9 @@ var BLUEPRINTS = {
     transform: (v) => v.replace(/^@+/, "").trim(),
     extensionRegistration: {
       providerId: "wise",
-      requiredPrompt: "This Wisetag is not registered yet. Verify it in the Peer extension, then refresh and retry with the same Wisetag.",
-      ctaLabel: "Install Peer Extension",
-      minExtensionVersion: "0.4.12"
+      requiredPrompt: "This Wisetag is not registered yet. Register it with PeerAuth, then retry with the same Wisetag.",
+      ctaLabel: "Register Wisetag",
+      minExtensionVersion: "0.5.0"
     }
   },
   mercadopago: {
@@ -251,7 +328,11 @@ var BLUEPRINTS = {
     identifierLabel: "Email",
     placeholder: "email",
     helperText: "Registered Zelle email",
-    validation: import_zod.z.string().email()
+    // Curator's ZelleProcessor rejects any non-lowercase email outright, so
+    // canonicalize to lowercase here rather than letting /v2/makers/create
+    // reject after the maker has already approved USDC + paid gas.
+    validation: import_zod.z.string().email(),
+    transform: (v) => v.trim().toLowerCase()
   },
   paypal: {
     id: "paypal",
@@ -259,14 +340,17 @@ var BLUEPRINTS = {
     identifierLabel: "PayPal.me Username",
     placeholder: "paypal.me/your-username",
     helperText: "Your PayPal.me username, not your email",
-    validation: import_zod.z.string().min(1, "PayPal.me username is required").regex(/^[a-z0-9._-]+$/i, "Use your PayPal.me username (letters, numbers, . _ -)"),
+    validation: import_zod.z.string().min(1, "PayPal.me username is required").regex(
+      /^[a-z0-9._-]+$/i,
+      "Use your PayPal.me username or paypal.me link, not a shortened URL."
+    ),
     transform: normalizePaypalMeUsername,
     extensionRegistration: {
       providerId: "paypal",
-      requiredPrompt: "This PayPal username is not registered yet. Verify it in the Peer extension, then refresh and retry with the same PayPal username.",
-      ctaLabel: "Install Peer Extension",
+      requiredPrompt: "This PayPal username is not registered yet. Register it with PeerAuth, then retry with the same PayPal username.",
+      ctaLabel: "Register PayPal Username",
       ctaSubtext: "PayPal Business accounts are not supported at this time.",
-      minExtensionVersion: "0.4.14"
+      minExtensionVersion: "0.5.0"
     }
   },
   monzo: {
@@ -283,8 +367,20 @@ var BLUEPRINTS = {
     identifierLabel: "IBAN",
     placeholder: "IBAN (e.g. DE89...)",
     helperText: "Your IBAN (spaces will be removed)",
-    validation: import_zod.z.string().min(15).max(34).regex(/^[A-Z]{2}[0-9]{2}[A-Z0-9]+$/i),
+    // transform runs before validation, so the schema sees a spaceless,
+    // uppercased IBAN. The MOD-97 refine mirrors curator's N26Processor so a
+    // typo'd-but-well-formed IBAN fails here, not after USDC approval + gas.
+    validation: import_zod.z.string().regex(/^[A-Z]{2}[0-9]{2}[A-Z0-9]{11,30}$/, "Enter a valid IBAN").refine(isValidIBAN, "That IBAN looks wrong \u2014 its checksum doesn't match"),
     transform: (v) => v.replace(/\s/g, "").toUpperCase()
+  },
+  luxon: {
+    id: "luxon",
+    name: "Luxon",
+    identifierLabel: "Email",
+    placeholder: "your-luxon-email@example.com",
+    helperText: "Email address registered with Luxon",
+    validation: import_zod.z.string().email(),
+    transform: (v) => v.trim()
   }
 };
 function buildPlatformEntry(bp) {
@@ -323,7 +419,8 @@ var PLATFORMS = {
   ZELLE: buildPlatformEntry(BLUEPRINTS.zelle),
   PAYPAL: buildPlatformEntry(BLUEPRINTS.paypal),
   MONZO: buildPlatformEntry(BLUEPRINTS.monzo),
-  N26: buildPlatformEntry(BLUEPRINTS.n26)
+  N26: buildPlatformEntry(BLUEPRINTS.n26),
+  LUXON: buildPlatformEntry(BLUEPRINTS.luxon)
 };
 function getPlatformById(id) {
   return Object.values(PLATFORMS).find((p) => p.id === id) ?? null;
@@ -386,6 +483,146 @@ function getPeerExtensionRegistrationInfo(platform) {
   const entry = getPlatformById(platform);
   return entry?.extensionRegistration ?? null;
 }
+function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
+  const info = getPeerExtensionRegistrationInfo(platform);
+  if (!info) return null;
+  const params = {
+    actionType: `transfer_${info.providerId}`,
+    captureMode: "sellerCredential",
+    platform: info.providerId
+  };
+  if (options.attestationServiceUrl) {
+    params.attestationServiceUrl = options.attestationServiceUrl;
+  }
+  return params;
+}
+function resolveRegistrationProcessor(platform) {
+  const info = getPeerExtensionRegistrationInfo(platform.id);
+  if (info?.providerId === "paypal" || info?.providerId === "wise") {
+    return info.providerId;
+  }
+  throw new Error(`${platform.name} does not require Peer extension registration.`);
+}
+async function postMakerCreate(processorName, payload, apiBaseUrl = API_BASE_URL) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/create`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ processorName, ...payload }),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new MakersCreateError(
+        `makers/create failed (${res.status}): ${detail}`,
+        res.status,
+        txt
+      );
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject?.hashedOnchainId) {
+      throw new MakersCreateError(
+        json.message || "makers/create returned no hashedOnchainId",
+        json.statusCode ?? null,
+        ""
+      );
+    }
+    return json.responseObject.hashedOnchainId;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function requireSarCredentialCapture(capturedMetadata) {
+  const capture = capturedMetadata.sarCredentialCapture;
+  if (!capture?.credentialBundle) {
+    throw new Error("Peer metadata did not include a seller credential bundle.");
+  }
+  if (!capture.offchainId) {
+    throw new Error("Peer metadata did not include seller credential offchainId.");
+  }
+  return capture;
+}
+async function uploadSellerCredentialBundle(processorName, payeeHash, bundle) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(
+      `${API_BASE_URL}/v2/makers/${encodeURIComponent(processorName)}/${encodeURIComponent(payeeHash)}/seller-credential`,
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(bundle),
+        signal: controller.signal
+      }
+    );
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new Error(`seller-credential upload failed (${res.status}): ${detail}`);
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject) {
+      throw new Error(json.message || "seller-credential upload returned no status.");
+    }
+    return json;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function completePeerExtensionRegistration(input) {
+  const processorName = resolveRegistrationProcessor(input.platform);
+  if (input.capturedMetadata.platform !== processorName) {
+    throw new Error(
+      `Peer metadata is for ${input.capturedMetadata.platform}, not ${processorName}.`
+    );
+  }
+  const sarCredentialCapture = requireSarCredentialCapture(input.capturedMetadata);
+  const bundle = sarCredentialCapture.credentialBundle;
+  if (bundle.platform.toLowerCase() !== processorName) {
+    throw new Error("Seller credential bundle platform does not match registration platform.");
+  }
+  const validation = input.platform.validate(input.identifier);
+  if (!validation.valid) {
+    throw new Error(validation.error || "Invalid identifier");
+  }
+  const payload = buildDepositData(processorName, sarCredentialCapture.offchainId);
+  if (payload.offchainId !== validation.normalized) {
+    throw new Error("Seller credential offchainId does not match registration identifier.");
+  }
+  const hashedOnchainId = processorName === "wise" ? bundle.payeeIdHash : await postMakerCreate(processorName, payload);
+  if (hashedOnchainId.toLowerCase() !== bundle.payeeIdHash.toLowerCase()) {
+    throw new Error("Seller credential payee hash does not match registered payee details.");
+  }
+  const sellerCredentialResponse = await uploadSellerCredentialBundle(
+    processorName,
+    hashedOnchainId,
+    bundle
+  );
+  return {
+    processorName,
+    offchainId: payload.offchainId,
+    hashedOnchainId,
+    sellerCredentialResponse,
+    sellerCredentialStatus: sellerCredentialResponse.responseObject
+  };
+}
 var EXTENSION_REGISTRATION_ERROR_PATTERNS = ["creating the maker", "create the maker"];
 function isPeerExtensionRegistrationError(platform, message, statusCode) {
   const info = getPeerExtensionRegistrationInfo(platform);
@@ -397,401 +634,26 @@ function isPeerExtensionRegistrationError(platform, message, statusCode) {
   return EXTENSION_REGISTRATION_ERROR_PATTERNS.some((p) => lower.includes(p));
 }
 
-// src/errors.ts
-var MakersCreateError = class extends Error {
-  status;
-  body;
-  constructor(message, status, body) {
-    super(message);
-    this.name = "MakersCreateError";
-    this.status = status;
-    this.body = body;
-  }
-};
-var OfframpError = class extends Error {
-  code;
-  step;
-  cause;
-  txHash;
-  depositId;
-  constructor(message, code, step, cause, details) {
-    super(message);
-    this.name = "OfframpError";
-    this.code = code;
-    this.step = step;
-    this.cause = cause;
-    this.txHash = details?.txHash;
-    this.depositId = details?.depositId;
-  }
-};
-function isUserCancellation(error) {
-  if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
-}
-
 // src/otc.ts
 var import_viem = require("viem");
 var import_chains = require("viem/chains");
-
-// ../../node_modules/@zkp2p/contracts-v2/abis/base/WhitelistPreIntentHook.json
-var WhitelistPreIntentHook_default = [
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_orchestratorRegistry",
-        type: "address"
-      }
-    ],
-    stateMutability: "nonpayable",
-    type: "constructor"
-  },
-  {
-    inputs: [],
-    name: "EmptyArray",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      }
-    ],
-    name: "TakerNotInWhitelist",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      }
-    ],
-    name: "TakerNotWhitelisted",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "caller",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "owner",
-        type: "address"
-      },
-      {
-        internalType: "address",
-        name: "delegate",
-        type: "address"
-      }
-    ],
-    name: "UnauthorizedCallerOrDelegate",
-    type: "error"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "caller",
-        type: "address"
-      }
-    ],
-    name: "UnauthorizedOrchestratorCaller",
-    type: "error"
-  },
-  {
-    inputs: [],
-    name: "ZeroAddress",
-    type: "error"
-  },
-  {
-    anonymous: false,
-    inputs: [
-      {
-        indexed: true,
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        indexed: true,
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      },
-      {
-        indexed: true,
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      }
-    ],
-    name: "TakerRemovedFromWhitelist",
-    type: "event"
-  },
-  {
-    anonymous: false,
-    inputs: [
-      {
-        indexed: true,
-        internalType: "address",
-        name: "escrow",
-        type: "address"
-      },
-      {
-        indexed: true,
-        internalType: "uint256",
-        name: "depositId",
-        type: "uint256"
-      },
-      {
-        indexed: true,
-        internalType: "address",
-        name: "taker",
-        type: "address"
-      }
-    ],
-    name: "TakerWhitelisted",
-    type: "event"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address[]",
-        name: "_takers",
-        type: "address[]"
-      }
-    ],
-    name: "addToWhitelist",
-    outputs: [],
-    stateMutability: "nonpayable",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address",
-        name: "_taker",
-        type: "address"
-      }
-    ],
-    name: "isWhitelisted",
-    outputs: [
-      {
-        internalType: "bool",
-        name: "",
-        type: "bool"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [],
-    name: "orchestratorRegistry",
-    outputs: [
-      {
-        internalType: "contract IOrchestratorRegistry",
-        name: "",
-        type: "address"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "_escrow",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "_depositId",
-        type: "uint256"
-      },
-      {
-        internalType: "address[]",
-        name: "_takers",
-        type: "address[]"
-      }
-    ],
-    name: "removeFromWhitelist",
-    outputs: [],
-    stateMutability: "nonpayable",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        components: [
-          {
-            internalType: "address",
-            name: "taker",
-            type: "address"
-          },
-          {
-            internalType: "address",
-            name: "escrow",
-            type: "address"
-          },
-          {
-            internalType: "uint256",
-            name: "depositId",
-            type: "uint256"
-          },
-          {
-            internalType: "uint256",
-            name: "amount",
-            type: "uint256"
-          },
-          {
-            internalType: "address",
-            name: "to",
-            type: "address"
-          },
-          {
-            internalType: "bytes32",
-            name: "paymentMethod",
-            type: "bytes32"
-          },
-          {
-            internalType: "bytes32",
-            name: "fiatCurrency",
-            type: "bytes32"
-          },
-          {
-            internalType: "uint256",
-            name: "conversionRate",
-            type: "uint256"
-          },
-          {
-            components: [
-              {
-                internalType: "address",
-                name: "recipient",
-                type: "address"
-              },
-              {
-                internalType: "uint256",
-                name: "fee",
-                type: "uint256"
-              }
-            ],
-            internalType: "struct IReferralFee.ReferralFee[]",
-            name: "referralFees",
-            type: "tuple[]"
-          },
-          {
-            internalType: "bytes",
-            name: "preIntentHookData",
-            type: "bytes"
-          }
-        ],
-        internalType: "struct IPreIntentHook.PreIntentContext",
-        name: "_ctx",
-        type: "tuple"
-      }
-    ],
-    name: "validateSignalIntent",
-    outputs: [],
-    stateMutability: "view",
-    type: "function"
-  },
-  {
-    inputs: [
-      {
-        internalType: "address",
-        name: "",
-        type: "address"
-      },
-      {
-        internalType: "uint256",
-        name: "",
-        type: "uint256"
-      },
-      {
-        internalType: "address",
-        name: "",
-        type: "address"
-      }
-    ],
-    name: "whitelist",
-    outputs: [
-      {
-        internalType: "bool",
-        name: "",
-        type: "bool"
-      }
-    ],
-    stateMutability: "view",
-    type: "function"
-  }
-];
+var import_WhitelistPreIntentHook = __toESM(require("@zkp2p/contracts-v2/abis/base/WhitelistPreIntentHook.json"), 1);
 
 // src/sdk-client.ts
 var import_sdk4 = require("@zkp2p/sdk");
-function createSdkClient(walletClient) {
+function createSdkClient(walletClient, apiBaseUrl = API_BASE_URL) {
   return new import_sdk4.OfframpClient({
     walletClient,
     chainId: BASE_CHAIN_ID,
     runtimeEnv: RUNTIME_ENV,
     rpcUrl: BASE_RPC_URL,
-    baseApiUrl: API_BASE_URL
+    baseApiUrl: apiBaseUrl
   });
 }
 
 // src/otc.ts
 var WHITELIST_HOOK_ADDRESS = "0xda023Ea0d789A41BcF5866F7B6BBd2CaDF9b79B8";
-var OTC_BASE_URL = "https://usdctofiat.xyz";
+var OTC_BASE_URL = "https://otc.usdctofiat.xyz";
 async function enableOtc(walletClient, depositId, takerAddress, escrowAddress) {
   if (!(0, import_viem.isAddress)(takerAddress)) {
     throw new OfframpError("Invalid taker address", "VALIDATION");
@@ -842,7 +704,7 @@ async function enableOtc(walletClient, depositId, takerAddress, escrowAddress) {
 }
 function getOtcLink(depositId, escrowAddress) {
   const escrow = escrowAddress || ESCROW_ADDRESS;
-  return `${OTC_BASE_URL}/deposit/${escrow}/${depositId}`;
+  return `${OTC_BASE_URL}/d/${escrow}/${depositId}`;
 }
 async function writeContract(walletClient, functionName, args) {
   const wc = walletClient;
@@ -851,7 +713,7 @@ async function writeContract(walletClient, functionName, args) {
   }
   await wc.writeContract({
     address: WHITELIST_HOOK_ADDRESS,
-    abi: WhitelistPreIntentHook_default,
+    abi: import_WhitelistPreIntentHook.default,
     functionName,
     args
   });
@@ -860,7 +722,7 @@ async function readIsWhitelisted(escrow, depositId, taker) {
   const publicClient = (0, import_viem.createPublicClient)({ chain: import_chains.base, transport: (0, import_viem.http)(BASE_RPC_URL) });
   return publicClient.readContract({
     address: WHITELIST_HOOK_ADDRESS,
-    abi: WhitelistPreIntentHook_default,
+    abi: import_WhitelistPreIntentHook.default,
     functionName: "isWhitelisted",
     args: [escrow, depositId, taker]
   });
@@ -1109,41 +971,24 @@ function extractDepositIdFromLogs(logs) {
   }
   return null;
 }
-async function registerPayeeDetails(processorName, payload) {
+async function validatePayeeDetails(processorName, offchainId, apiBaseUrl = API_BASE_URL) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
   try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/create`, {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/validate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ processorName, ...payload }),
+      body: JSON.stringify({ processorName, offchainId }),
       signal: controller.signal
     });
-    if (!res.ok) {
-      const txt = await res.text().catch(() => "");
-      let detail = txt || res.statusText;
-      try {
-        const parsed = JSON.parse(txt);
-        if (typeof parsed.message === "string" && parsed.message.trim()) {
-          detail = parsed.message;
-        }
-      } catch {
-      }
-      throw new MakersCreateError(
-        `makers/create failed (${res.status}): ${detail}`,
-        res.status,
-        txt
-      );
-    }
+    if (!res.ok) return "unknown";
     const json = await res.json();
-    if (!json.success || !json.responseObject?.hashedOnchainId) {
-      throw new MakersCreateError(
-        json.message || "makers/create returned no hashedOnchainId",
-        json.statusCode ?? null,
-        ""
-      );
+    if (typeof json.responseObject === "boolean") {
+      return json.responseObject ? "valid" : "invalid";
     }
-    return json.responseObject.hashedOnchainId;
+    return "unknown";
+  } catch {
+    return "unknown";
   } finally {
     clearTimeout(timeout);
   }
@@ -1208,10 +1053,11 @@ async function findUndelegatedDeposit(walletAddress) {
     return null;
   }
 }
-async function offramp(walletClient, params, onProgress, telemetryContext) {
+async function offramp(walletClient, params, onProgress, telemetryContext, apiBaseUrl) {
   const { amount, platform, currency, identifier } = params;
   const platformId = platform.id;
   const currencyCode = currency.code;
+  const resolvedApiBaseUrl = resolveApiBaseUrl(apiBaseUrl);
   const telemetry = telemetryContext ?? createTelemetryContext({
     sdkVersion: SDK_VERSION,
     telemetry: true,
@@ -1256,7 +1102,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const existing = await findUndelegatedDeposit(walletAddress);
     if (existing) {
       emitProgress({ step: "resuming", depositId: existing.depositId });
-      const client2 = createSdkClient(walletClient);
+      const client2 = createSdkClient(walletClient, resolvedApiBaseUrl);
       const txOverrides2 = { referrer: [REFERRER] };
       try {
         const result2 = await client2.setRateManager({
@@ -1292,7 +1138,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const truncatedAmount = amt.toFixed(6).replace(/\.?0+$/, "");
     const amountUnits = usdcToUnits(truncatedAmount);
     const minUnits = usdcToUnits(String(MIN_ORDER_USDC));
-    const maxUnits = usdcToUnits(String(Math.min(amt, 2500)));
+    const maxUnits = usdcToUnits(String(Math.min(amt, MAX_ORDER_USDC)));
     try {
       const publicClient = (0, import_viem3.createPublicClient)({ chain: import_chains3.base, transport: (0, import_viem3.http)(BASE_RPC_URL) });
       const balance = await publicClient.readContract({
@@ -1319,7 +1165,22 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     } catch (err) {
       if (err instanceof OfframpError) throw err;
     }
-    const client = createSdkClient(walletClient);
+    const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
+    if (!getPeerExtensionRegistrationInfo(platformId)) {
+      const outcome = await validatePayeeDetails(
+        canonicalName,
+        normalizedIdentifier,
+        resolvedApiBaseUrl
+      );
+      if (outcome === "invalid") {
+        throw new OfframpError(
+          `Couldn't verify that ${platform.name} ${platform.identifier.label.toLowerCase()}. Double-check it and try again.`,
+          "VALIDATION",
+          "registering"
+        );
+      }
+    }
+    const client = createSdkClient(walletClient, resolvedApiBaseUrl);
     const txOverrides = { referrer: [REFERRER] };
     emitProgress({ step: "approving" });
     try {
@@ -1343,16 +1204,15 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     }
     emitProgress({ step: "registering" });
     let hashedOnchainId;
-    const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
     try {
       const payeePayload = buildDepositData(canonicalName, normalizedIdentifier);
-      hashedOnchainId = await registerPayeeDetails(canonicalName, payeePayload);
+      hashedOnchainId = await postMakerCreate(canonicalName, payeePayload, resolvedApiBaseUrl);
     } catch (err) {
       const status = err instanceof MakersCreateError ? err.status : null;
       const message = err instanceof Error ? err.message : String(err);
       if (isPeerExtensionRegistrationError(canonicalName, message, status)) {
         throw new OfframpError(
-          `${platform.name} maker is not yet registered in the Peer extension. Verify this handle in the extension, then retry.`,
+          `${platform.name} maker is not yet registered in the Peer extension. Register this handle with Peer, then retry.`,
           "EXTENSION_REGISTRATION_REQUIRED",
           "registering",
           err
@@ -1526,6 +1386,14 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
 // src/offramp.ts
 var IDEMPOTENCY_TTL_MS = 10 * 60 * 1e3;
 var IDEMPOTENCY_STORAGE_PREFIX = "offramp:idempotency:";
+var warnedIdempotencyUnavailable = false;
+function warnIdempotencyUnavailableOnce() {
+  if (warnedIdempotencyUnavailable) return;
+  warnedIdempotencyUnavailable = true;
+  console.warn(
+    "[offramp] idempotencyKey was provided but sessionStorage is unavailable (Node/worker runtime). The idempotency cache is browser-only and no-ops here, so retries can create duplicate deposits. For server-side dedup, call deposits(walletAddress) and reuse an existing open deposit before creating one."
+  );
+}
 function getWalletAddress(walletClient) {
   const address = walletClient.account?.address;
   if (!address) {
@@ -1596,8 +1464,10 @@ function buildCurrencyGroups() {
 var Offramp = class {
   walletClient;
   telemetry;
+  apiBaseUrl;
   constructor(options) {
     this.walletClient = options.walletClient;
+    this.apiBaseUrl = options.apiBaseUrl;
     this.telemetry = createTelemetryContext({
       sdkVersion: SDK_VERSION,
       telemetry: options.telemetry,
@@ -1620,6 +1490,9 @@ var Offramp = class {
       referralId: flowTelemetry.referralId
     };
     const sanitizedKey = sanitizeAttributionId(params.idempotencyKey);
+    if (sanitizedKey && typeof sessionStorage === "undefined") {
+      warnIdempotencyUnavailableOnce();
+    }
     const walletAddress = sanitizedKey ? getWalletAddress(this.walletClient) : null;
     const storageKey = walletAddress && sanitizedKey ? getIdempotencyStorageKey(walletAddress, sanitizedKey) : null;
     if (storageKey) {
@@ -1630,7 +1503,8 @@ var Offramp = class {
       this.walletClient,
       sanitizedParams,
       onProgress,
-      flowTelemetry
+      flowTelemetry,
+      this.apiBaseUrl
     );
     if (storageKey) {
       writeIdempotencyResult(storageKey, result);
@@ -1761,25 +1635,108 @@ var import_react2 = require("react");
 
 // src/extension.ts
 var import_sdk7 = require("@zkp2p/sdk");
+var resolveWindow = (options) => {
+  if (options?.window) {
+    return options.window;
+  }
+  if (typeof window === "undefined") {
+    return void 0;
+  }
+  return window;
+};
+var requirePeer = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  if (!resolvedWindow.peer) {
+    throw new Error("Peer extension not available. Install or enable the Peer extension.");
+  }
+  return resolvedWindow.peer;
+};
+var isPeerExtensionAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer);
+};
+var hasHeadlessMetadataBridge = (peer) => typeof peer.authenticate === "function" && typeof peer.onMetadataMessage === "function";
+var requirePeerMetadataBridge = (options) => {
+  const peer = requirePeer(options);
+  if (!hasHeadlessMetadataBridge(peer)) {
+    throw new Error("Peer extension metadata bridge unavailable. Install or update Peer.");
+  }
+  return peer;
+};
+var isPeerExtensionMetadataBridgeAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer && hasHeadlessMetadataBridge(resolvedWindow.peer));
+};
+var openPeerExtensionInstallPage = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  resolvedWindow.open(import_sdk7.PEER_EXTENSION_CHROME_URL, "_blank", "noopener,noreferrer");
+};
+var getPeerExtensionState = async (options) => {
+  if (!isPeerExtensionAvailable(options)) {
+    return "needs_install";
+  }
+  try {
+    const status = await requirePeer(options).checkConnectionStatus();
+    return status === "connected" ? "ready" : "needs_connection";
+  } catch {
+    return "needs_connection";
+  }
+};
+var createPeerExtensionSdk = (options = {}) => {
+  const legacySdk = (0, import_sdk7.createPeerExtensionSdk)(
+    options
+  );
+  return {
+    isAvailable: () => isPeerExtensionAvailable(options),
+    requestConnection: () => requirePeer(options).requestConnection(),
+    checkConnectionStatus: () => requirePeer(options).checkConnectionStatus(),
+    getVersion: () => requirePeer(options).getVersion(),
+    authenticate: (params) => requirePeerMetadataBridge(options).authenticate(params),
+    onMetadataMessage: (callback) => requirePeerMetadataBridge(options).onMetadataMessage(callback),
+    openSidebar: (route) => legacySdk.openSidebar(route),
+    onramp: (params, callback) => legacySdk.onramp(params, callback),
+    getOnrampTransaction: (intentHash) => legacySdk.getOnrampTransaction(intentHash),
+    openInstallPage: () => openPeerExtensionInstallPage(options),
+    getState: () => getPeerExtensionState(options)
+  };
+};
+var peerExtensionSdk = createPeerExtensionSdk();
 
 // src/hooks/usePeerExtensionRegistration.ts
 function usePeerExtensionRegistration(platform) {
-  const info = platform ? getPeerExtensionRegistrationInfo(platform.id) : null;
+  const platformId = platform?.id ?? null;
+  const info = platformId ? getPeerExtensionRegistrationInfo(platformId) : null;
+  const authParams = (0, import_react2.useMemo)(
+    () => platformId ? getPeerExtensionRegistrationAuthParams(platformId) : null,
+    [platformId]
+  );
   const [phase, setPhase] = (0, import_react2.useState)(
     info ? "checking" : "unsupported"
   );
   const [busy, setBusy] = (0, import_react2.useState)(false);
   const [error, setError] = (0, import_react2.useState)(null);
+  const [capturedMetadata, setCapturedMetadata] = (0, import_react2.useState)(null);
   const mountedRef = (0, import_react2.useRef)(true);
   const providerId = info?.providerId ?? null;
+  const metadataPlatform = authParams?.platform ?? null;
   const refresh = (0, import_react2.useCallback)(async () => {
     if (!providerId) {
       setPhase("unsupported");
       return;
     }
     try {
-      const state = await import_sdk7.peerExtensionSdk.getState();
+      const state = await peerExtensionSdk.getState();
       if (!mountedRef.current) return;
+      if (state === "ready" && !isPeerExtensionMetadataBridgeAvailable()) {
+        setPhase("needs_install");
+        return;
+      }
       setPhase(mapSdkState(state));
     } catch {
       if (!mountedRef.current) return;
@@ -1790,6 +1747,7 @@ function usePeerExtensionRegistration(platform) {
     mountedRef.current = true;
     setError(null);
     setBusy(false);
+    setCapturedMetadata(null);
     if (!providerId) {
       setPhase("unsupported");
     } else {
@@ -1800,10 +1758,25 @@ function usePeerExtensionRegistration(platform) {
       mountedRef.current = false;
     };
   }, [providerId, refresh]);
+  (0, import_react2.useEffect)(() => {
+    setCapturedMetadata(null);
+    if (!metadataPlatform) return;
+    try {
+      return peerExtensionSdk.onMetadataMessage((message) => {
+        if (!mountedRef.current || message.platform !== metadataPlatform) return;
+        setCapturedMetadata(message);
+        if (message.errorMessage) {
+          setError(message.errorMessage);
+        }
+      });
+    } catch {
+      return;
+    }
+  }, [metadataPlatform, phase]);
   const installExtension = (0, import_react2.useCallback)(() => {
     setError(null);
     try {
-      import_sdk7.peerExtensionSdk.openInstallPage();
+      peerExtensionSdk.openInstallPage();
     } catch {
       if (typeof window !== "undefined") {
         window.open(import_sdk7.PEER_EXTENSION_CHROME_URL, "_blank", "noopener,noreferrer");
@@ -1811,15 +1784,14 @@ function usePeerExtensionRegistration(platform) {
     }
   }, []);
   const connectExtension = (0, import_react2.useCallback)(async () => {
-    if (!providerId) return false;
+    if (!authParams) return false;
     setError(null);
     setBusy(true);
     try {
-      const approved = await import_sdk7.peerExtensionSdk.requestConnection();
+      const approved = await peerExtensionSdk.requestConnection();
       if (!mountedRef.current) return approved;
       if (approved) {
-        setPhase("ready");
-        import_sdk7.peerExtensionSdk.openSidebar(`/verify/${providerId}`);
+        setPhase(isPeerExtensionMetadataBridgeAvailable() ? "ready" : "needs_install");
       } else {
         setError("Connection was not approved. Try again once you've approved Peer.");
       }
@@ -1834,40 +1806,89 @@ function usePeerExtensionRegistration(platform) {
     } finally {
       if (mountedRef.current) setBusy(false);
     }
-  }, [providerId, refresh]);
-  const openVerifySidebar = (0, import_react2.useCallback)(async () => {
-    if (!providerId) return;
+  }, [authParams, refresh]);
+  const startRegistrationCapture = (0, import_react2.useCallback)(async () => {
+    if (!authParams) return;
     setError(null);
-    const state = await import_sdk7.peerExtensionSdk.getState().catch(() => "needs_install");
-    if (!mountedRef.current) return;
-    const nextPhase = mapSdkState(state);
-    setPhase(nextPhase);
-    if (nextPhase === "needs_install") {
-      installExtension();
-      return;
-    }
-    if (nextPhase === "needs_connection") {
-      await connectExtension();
-      return;
-    }
+    setBusy(true);
     try {
-      import_sdk7.peerExtensionSdk.openSidebar(`/verify/${providerId}`);
+      const state = await peerExtensionSdk.getState().catch(() => "needs_install");
+      if (!mountedRef.current) return;
+      const nextPhase = state === "ready" && !isPeerExtensionMetadataBridgeAvailable() ? "needs_install" : mapSdkState(state);
+      setPhase(nextPhase);
+      if (nextPhase === "needs_install") {
+        installExtension();
+        return;
+      }
+      if (nextPhase === "needs_connection") {
+        const approved = await peerExtensionSdk.requestConnection();
+        if (!mountedRef.current) return;
+        if (!approved) {
+          setError("Connection was not approved. Try again once you've approved Peer.");
+          return;
+        }
+        if (!isPeerExtensionMetadataBridgeAvailable()) {
+          setPhase("needs_install");
+          installExtension();
+          return;
+        }
+        setPhase("ready");
+      }
+      setCapturedMetadata(null);
+      peerExtensionSdk.authenticate(authParams);
     } catch (err) {
       setError(
-        err instanceof Error ? err.message : "Couldn't open the Peer extension. Make sure it's enabled."
+        err instanceof Error ? err.message : "Couldn't start Peer extension registration. Make sure Peer is enabled."
       );
       refresh();
+    } finally {
+      if (mountedRef.current) setBusy(false);
     }
-  }, [connectExtension, installExtension, providerId, refresh]);
+  }, [authParams, installExtension, refresh]);
+  const openVerifySidebar = (0, import_react2.useCallback)(
+    async () => startRegistrationCapture(),
+    [startRegistrationCapture]
+  );
+  const completeRegistration = (0, import_react2.useCallback)(
+    async (walletClient, params, options = {}) => {
+      const metadata = options.capturedMetadata ?? capturedMetadata;
+      if (!metadata) {
+        const message = "No Peer metadata captured yet. Start registration first.";
+        setError(message);
+        throw new Error(message);
+      }
+      setError(null);
+      setBusy(true);
+      try {
+        await completePeerExtensionRegistration({
+          platform: params.platform,
+          identifier: params.identifier,
+          capturedMetadata: metadata
+        });
+        return await offramp(walletClient, params, options.onProgress);
+      } catch (err) {
+        setError(
+          err instanceof Error ? err.message : "Couldn't complete Peer extension registration. Try capturing metadata again."
+        );
+        throw err;
+      } finally {
+        if (mountedRef.current) setBusy(false);
+      }
+    },
+    [capturedMetadata]
+  );
   return {
     phase,
     info,
     busy,
     error,
+    capturedMetadata,
     refresh,
     installExtension,
     connectExtension,
-    openVerifySidebar
+    startRegistrationCapture,
+    openVerifySidebar,
+    completeRegistration
   };
 }
 function mapSdkState(state) {