@usdctofiat/offramp 3.0.3 → 3.1.0

package/dist/{chunk-4KKKDDES.js → chunk-XQ7HOLLB.js}

@@ -1,10 +1,14 @@
 // src/config.ts
 import { getContracts, getGatingServiceAddress } from "@zkp2p/sdk";
-var SDK_VERSION = "3.0.3";
+var SDK_VERSION = "3.1.0";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
 var BASE_RPC_URL = "https://mainnet.base.org";
+function resolveApiBaseUrl(override) {
+  const trimmed = override?.trim();
+  return (trimmed && trimmed.length > 0 ? trimmed : API_BASE_URL).replace(/\/$/, "");
+}
 var contracts = getContracts(BASE_CHAIN_ID, RUNTIME_ENV);
 var addresses = contracts.addresses;
 var addrs = addresses;
@@ -21,11 +25,45 @@ var DEFAULT_INTENT_GUARDIAN_ADDRESS = "0xe29a5BD4D0CEbA6C125A0361E7D20ab4eA275C2
 var REFERRER = "galleonlabs";
 var MIN_DEPOSIT_USDC = 1;
 var MIN_ORDER_USDC = 1;
+var MAX_ORDER_USDC = 2500;
 var INDEXER_MAX_ATTEMPTS = 12;
 var INDEXER_INITIAL_DELAY_MS = 1e3;
 var INDEXER_MAX_DELAY_MS = 1e4;
 var PAYEE_REGISTRATION_TIMEOUT_MS = 8e3;
 
+// src/errors.ts
+var MakersCreateError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "MakersCreateError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var OfframpError = class extends Error {
+  code;
+  step;
+  cause;
+  txHash;
+  depositId;
+  constructor(message, code, step, cause, details) {
+    super(message);
+    this.name = "OfframpError";
+    this.code = code;
+    this.step = step;
+    this.cause = cause;
+    this.txHash = details?.txHash;
+    this.depositId = details?.depositId;
+  }
+};
+function isUserCancellation(error) {
+  if (!(error instanceof Error)) return false;
+  const msg = error.message.toLowerCase();
+  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
+}
+
 // src/platforms.ts
 import {
   currencyInfo,
@@ -394,6 +432,146 @@ function getPeerExtensionRegistrationInfo(platform) {
   const entry = getPlatformById(platform);
   return entry?.extensionRegistration ?? null;
 }
+function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
+  const info = getPeerExtensionRegistrationInfo(platform);
+  if (!info) return null;
+  const params = {
+    actionType: `transfer_${info.providerId}`,
+    captureMode: "sellerCredential",
+    platform: info.providerId
+  };
+  if (options.attestationServiceUrl) {
+    params.attestationServiceUrl = options.attestationServiceUrl;
+  }
+  return params;
+}
+function resolveRegistrationProcessor(platform) {
+  const info = getPeerExtensionRegistrationInfo(platform.id);
+  if (info?.providerId === "paypal" || info?.providerId === "wise") {
+    return info.providerId;
+  }
+  throw new Error(`${platform.name} does not require Peer extension registration.`);
+}
+async function postMakerCreate(processorName, payload, apiBaseUrl = API_BASE_URL) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/create`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ processorName, ...payload }),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new MakersCreateError(
+        `makers/create failed (${res.status}): ${detail}`,
+        res.status,
+        txt
+      );
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject?.hashedOnchainId) {
+      throw new MakersCreateError(
+        json.message || "makers/create returned no hashedOnchainId",
+        json.statusCode ?? null,
+        ""
+      );
+    }
+    return json.responseObject.hashedOnchainId;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function requireSarCredentialCapture(capturedMetadata) {
+  const capture = capturedMetadata.sarCredentialCapture;
+  if (!capture?.credentialBundle) {
+    throw new Error("Peer metadata did not include a seller credential bundle.");
+  }
+  if (!capture.offchainId) {
+    throw new Error("Peer metadata did not include seller credential offchainId.");
+  }
+  return capture;
+}
+async function uploadSellerCredentialBundle(processorName, payeeHash, bundle) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(
+      `${API_BASE_URL}/v2/makers/${encodeURIComponent(processorName)}/${encodeURIComponent(payeeHash)}/seller-credential`,
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(bundle),
+        signal: controller.signal
+      }
+    );
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new Error(`seller-credential upload failed (${res.status}): ${detail}`);
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject) {
+      throw new Error(json.message || "seller-credential upload returned no status.");
+    }
+    return json;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function completePeerExtensionRegistration(input) {
+  const processorName = resolveRegistrationProcessor(input.platform);
+  if (input.capturedMetadata.platform !== processorName) {
+    throw new Error(
+      `Peer metadata is for ${input.capturedMetadata.platform}, not ${processorName}.`
+    );
+  }
+  const sarCredentialCapture = requireSarCredentialCapture(input.capturedMetadata);
+  const bundle = sarCredentialCapture.credentialBundle;
+  if (bundle.platform.toLowerCase() !== processorName) {
+    throw new Error("Seller credential bundle platform does not match registration platform.");
+  }
+  const validation = input.platform.validate(input.identifier);
+  if (!validation.valid) {
+    throw new Error(validation.error || "Invalid identifier");
+  }
+  const payload = buildDepositData(processorName, sarCredentialCapture.offchainId);
+  if (payload.offchainId !== validation.normalized) {
+    throw new Error("Seller credential offchainId does not match registration identifier.");
+  }
+  const hashedOnchainId = processorName === "wise" ? bundle.payeeIdHash : await postMakerCreate(processorName, payload);
+  if (hashedOnchainId.toLowerCase() !== bundle.payeeIdHash.toLowerCase()) {
+    throw new Error("Seller credential payee hash does not match registered payee details.");
+  }
+  const sellerCredentialResponse = await uploadSellerCredentialBundle(
+    processorName,
+    hashedOnchainId,
+    bundle
+  );
+  return {
+    processorName,
+    offchainId: payload.offchainId,
+    hashedOnchainId,
+    sellerCredentialResponse,
+    sellerCredentialStatus: sellerCredentialResponse.responseObject
+  };
+}
 var EXTENSION_REGISTRATION_ERROR_PATTERNS = ["creating the maker", "create the maker"];
 function isPeerExtensionRegistrationError(platform, message, statusCode) {
   const info = getPeerExtensionRegistrationInfo(platform);
@@ -405,39 +583,6 @@ function isPeerExtensionRegistrationError(platform, message, statusCode) {
   return EXTENSION_REGISTRATION_ERROR_PATTERNS.some((p) => lower.includes(p));
 }
 
-// src/errors.ts
-var MakersCreateError = class extends Error {
-  status;
-  body;
-  constructor(message, status, body) {
-    super(message);
-    this.name = "MakersCreateError";
-    this.status = status;
-    this.body = body;
-  }
-};
-var OfframpError = class extends Error {
-  code;
-  step;
-  cause;
-  txHash;
-  depositId;
-  constructor(message, code, step, cause, details) {
-    super(message);
-    this.name = "OfframpError";
-    this.code = code;
-    this.step = step;
-    this.cause = cause;
-    this.txHash = details?.txHash;
-    this.depositId = details?.depositId;
-  }
-};
-function isUserCancellation(error) {
-  if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
-}
-
 // src/otc.ts
 import { createPublicClient, http, isAddress, zeroAddress } from "viem";
 import { base } from "viem/chains";
@@ -445,13 +590,13 @@ import WhitelistPreIntentHookABI from "@zkp2p/contracts-v2/abis/base/WhitelistPr
 
 // src/sdk-client.ts
 import { OfframpClient } from "@zkp2p/sdk";
-function createSdkClient(walletClient) {
+function createSdkClient(walletClient, apiBaseUrl = API_BASE_URL) {
   return new OfframpClient({
     walletClient,
     chainId: BASE_CHAIN_ID,
     runtimeEnv: RUNTIME_ENV,
     rpcUrl: BASE_RPC_URL,
-    baseApiUrl: API_BASE_URL
+    baseApiUrl: apiBaseUrl
   });
 }
 
@@ -875,50 +1020,11 @@ function extractDepositIdFromLogs(logs) {
   }
   return null;
 }
-async function registerPayeeDetails(processorName, payload) {
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
-  try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/create`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ processorName, ...payload }),
-      signal: controller.signal
-    });
-    if (!res.ok) {
-      const txt = await res.text().catch(() => "");
-      let detail = txt || res.statusText;
-      try {
-        const parsed = JSON.parse(txt);
-        if (typeof parsed.message === "string" && parsed.message.trim()) {
-          detail = parsed.message;
-        }
-      } catch {
-      }
-      throw new MakersCreateError(
-        `makers/create failed (${res.status}): ${detail}`,
-        res.status,
-        txt
-      );
-    }
-    const json = await res.json();
-    if (!json.success || !json.responseObject?.hashedOnchainId) {
-      throw new MakersCreateError(
-        json.message || "makers/create returned no hashedOnchainId",
-        json.statusCode ?? null,
-        ""
-      );
-    }
-    return json.responseObject.hashedOnchainId;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-async function validatePayeeDetails(processorName, offchainId) {
+async function validatePayeeDetails(processorName, offchainId, apiBaseUrl = API_BASE_URL) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
   try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/validate`, {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/validate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ processorName, offchainId }),
@@ -996,10 +1102,11 @@ async function findUndelegatedDeposit(walletAddress) {
     return null;
   }
 }
-async function offramp(walletClient, params, onProgress, telemetryContext) {
+async function offramp(walletClient, params, onProgress, telemetryContext, apiBaseUrl) {
   const { amount, platform, currency, identifier } = params;
   const platformId = platform.id;
   const currencyCode = currency.code;
+  const resolvedApiBaseUrl = resolveApiBaseUrl(apiBaseUrl);
   const telemetry = telemetryContext ?? createTelemetryContext({
     sdkVersion: SDK_VERSION,
     telemetry: true,
@@ -1044,7 +1151,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const existing = await findUndelegatedDeposit(walletAddress);
     if (existing) {
       emitProgress({ step: "resuming", depositId: existing.depositId });
-      const client2 = createSdkClient(walletClient);
+      const client2 = createSdkClient(walletClient, resolvedApiBaseUrl);
       const txOverrides2 = { referrer: [REFERRER] };
       try {
         const result2 = await client2.setRateManager({
@@ -1080,7 +1187,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const truncatedAmount = amt.toFixed(6).replace(/\.?0+$/, "");
     const amountUnits = usdcToUnits(truncatedAmount);
     const minUnits = usdcToUnits(String(MIN_ORDER_USDC));
-    const maxUnits = usdcToUnits(String(Math.min(amt, 2500)));
+    const maxUnits = usdcToUnits(String(Math.min(amt, MAX_ORDER_USDC)));
     try {
       const publicClient = createPublicClient3({ chain: base3, transport: http3(BASE_RPC_URL) });
       const balance = await publicClient.readContract({
@@ -1109,7 +1216,11 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     }
     const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
     if (!getPeerExtensionRegistrationInfo(platformId)) {
-      const outcome = await validatePayeeDetails(canonicalName, normalizedIdentifier);
+      const outcome = await validatePayeeDetails(
+        canonicalName,
+        normalizedIdentifier,
+        resolvedApiBaseUrl
+      );
       if (outcome === "invalid") {
         throw new OfframpError(
           `Couldn't verify that ${platform.name} ${platform.identifier.label.toLowerCase()}. Double-check it and try again.`,
@@ -1118,7 +1229,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
         );
       }
     }
-    const client = createSdkClient(walletClient);
+    const client = createSdkClient(walletClient, resolvedApiBaseUrl);
     const txOverrides = { referrer: [REFERRER] };
     emitProgress({ step: "approving" });
     try {
@@ -1144,13 +1255,13 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     let hashedOnchainId;
     try {
       const payeePayload = buildDepositData(canonicalName, normalizedIdentifier);
-      hashedOnchainId = await registerPayeeDetails(canonicalName, payeePayload);
+      hashedOnchainId = await postMakerCreate(canonicalName, payeePayload, resolvedApiBaseUrl);
     } catch (err) {
       const status = err instanceof MakersCreateError ? err.status : null;
       const message = err instanceof Error ? err.message : String(err);
       if (isPeerExtensionRegistrationError(canonicalName, message, status)) {
         throw new OfframpError(
-          `${platform.name} maker is not yet registered in the Peer extension. Verify this handle in the extension, then retry.`,
+          `${platform.name} maker is not yet registered in the Peer extension. Register this handle with Peer, then retry.`,
           "EXTENSION_REGISTRATION_REQUIRED",
           "registering",
           err
@@ -1342,6 +1453,14 @@ var CURRENCIES = buildCurrencies();
 // src/offramp.ts
 var IDEMPOTENCY_TTL_MS = 10 * 60 * 1e3;
 var IDEMPOTENCY_STORAGE_PREFIX = "offramp:idempotency:";
+var warnedIdempotencyUnavailable = false;
+function warnIdempotencyUnavailableOnce() {
+  if (warnedIdempotencyUnavailable) return;
+  warnedIdempotencyUnavailable = true;
+  console.warn(
+    "[offramp] idempotencyKey was provided but sessionStorage is unavailable (Node/worker runtime). The idempotency cache is browser-only and no-ops here, so retries can create duplicate deposits. For server-side dedup, call deposits(walletAddress) and reuse an existing open deposit before creating one."
+  );
+}
 function getWalletAddress(walletClient) {
   const address = walletClient.account?.address;
   if (!address) {
@@ -1412,8 +1531,10 @@ function buildCurrencyGroups() {
 var Offramp = class {
   walletClient;
   telemetry;
+  apiBaseUrl;
   constructor(options) {
     this.walletClient = options.walletClient;
+    this.apiBaseUrl = options.apiBaseUrl;
     this.telemetry = createTelemetryContext({
       sdkVersion: SDK_VERSION,
       telemetry: options.telemetry,
@@ -1436,6 +1557,9 @@ var Offramp = class {
       referralId: flowTelemetry.referralId
     };
     const sanitizedKey = sanitizeAttributionId(params.idempotencyKey);
+    if (sanitizedKey && typeof sessionStorage === "undefined") {
+      warnIdempotencyUnavailableOnce();
+    }
     const walletAddress = sanitizedKey ? getWalletAddress(this.walletClient) : null;
     const storageKey = walletAddress && sanitizedKey ? getIdempotencyStorageKey(walletAddress, sanitizedKey) : null;
     if (storageKey) {
@@ -1446,7 +1570,8 @@ var Offramp = class {
       this.walletClient,
       sanitizedParams,
       onProgress,
-      flowTelemetry
+      flowTelemetry,
+      this.apiBaseUrl
     );
     if (storageKey) {
       writeIdempotencyResult(storageKey, result);
@@ -1495,24 +1620,94 @@ function createOfframp(options) {
 // src/extension.ts
 import {
   PEER_EXTENSION_CHROME_URL,
-  peerExtensionSdk,
-  createPeerExtensionSdk,
-  isPeerExtensionAvailable,
-  openPeerExtensionInstallPage,
-  getPeerExtensionState
+  createPeerExtensionSdk as createLegacyPeerExtensionSdk
 } from "@zkp2p/sdk";
+var resolveWindow = (options) => {
+  if (options?.window) {
+    return options.window;
+  }
+  if (typeof window === "undefined") {
+    return void 0;
+  }
+  return window;
+};
+var requirePeer = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  if (!resolvedWindow.peer) {
+    throw new Error("Peer extension not available. Install or enable the Peer extension.");
+  }
+  return resolvedWindow.peer;
+};
+var isPeerExtensionAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer);
+};
+var hasHeadlessMetadataBridge = (peer) => typeof peer.authenticate === "function" && typeof peer.onMetadataMessage === "function";
+var requirePeerMetadataBridge = (options) => {
+  const peer = requirePeer(options);
+  if (!hasHeadlessMetadataBridge(peer)) {
+    throw new Error("Peer extension metadata bridge unavailable. Install or update Peer.");
+  }
+  return peer;
+};
+var isPeerExtensionMetadataBridgeAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer && hasHeadlessMetadataBridge(resolvedWindow.peer));
+};
+var openPeerExtensionInstallPage = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  resolvedWindow.open(PEER_EXTENSION_CHROME_URL, "_blank", "noopener,noreferrer");
+};
+var getPeerExtensionState = async (options) => {
+  if (!isPeerExtensionAvailable(options)) {
+    return "needs_install";
+  }
+  try {
+    const status = await requirePeer(options).checkConnectionStatus();
+    return status === "connected" ? "ready" : "needs_connection";
+  } catch {
+    return "needs_connection";
+  }
+};
+var createPeerExtensionSdk = (options = {}) => {
+  const legacySdk = createLegacyPeerExtensionSdk(
+    options
+  );
+  return {
+    isAvailable: () => isPeerExtensionAvailable(options),
+    requestConnection: () => requirePeer(options).requestConnection(),
+    checkConnectionStatus: () => requirePeer(options).checkConnectionStatus(),
+    getVersion: () => requirePeer(options).getVersion(),
+    authenticate: (params) => requirePeerMetadataBridge(options).authenticate(params),
+    onMetadataMessage: (callback) => requirePeerMetadataBridge(options).onMetadataMessage(callback),
+    openSidebar: (route) => legacySdk.openSidebar(route),
+    onramp: (params, callback) => legacySdk.onramp(params, callback),
+    getOnrampTransaction: (intentHash) => legacySdk.getOnrampTransaction(intentHash),
+    openInstallPage: () => openPeerExtensionInstallPage(options),
+    getState: () => getPeerExtensionState(options)
+  };
+};
+var peerExtensionSdk = createPeerExtensionSdk();
 
 export {
   ESCROW_ADDRESS,
+  MakersCreateError,
+  OfframpError,
   normalizePaypalMeUsername,
   isValidIBAN,
   PLATFORMS,
   PLATFORM_LIMITS,
   getPlatformLimits,
   getPeerExtensionRegistrationInfo,
+  getPeerExtensionRegistrationAuthParams,
+  completePeerExtensionRegistration,
   isPeerExtensionRegistrationError,
-  MakersCreateError,
-  OfframpError,
   enableOtc,
   disableOtc,
   getOtcLink,
@@ -1529,10 +1724,11 @@ export {
   Offramp,
   createOfframp,
   PEER_EXTENSION_CHROME_URL,
-  peerExtensionSdk,
-  createPeerExtensionSdk,
   isPeerExtensionAvailable,
+  isPeerExtensionMetadataBridgeAvailable,
   openPeerExtensionInstallPage,
-  getPeerExtensionState
+  getPeerExtensionState,
+  createPeerExtensionSdk,
+  peerExtensionSdk
 };
-//# sourceMappingURL=chunk-4KKKDDES.js.map
+//# sourceMappingURL=chunk-XQ7HOLLB.js.map