@usdctofiat/offramp 3.0.3 → 4.0.0

package/dist/index.cjs

@@ -40,8 +40,9 @@ __export(index_exports, {
   PLATFORMS: () => PLATFORMS,
   PLATFORM_LIMITS: () => PLATFORM_LIMITS,
   close: () => close,
+  completePeerExtensionRegistration: () => completePeerExtensionRegistration,
   createOfframp: () => createOfframp,
-  createPeerExtensionSdk: () => import_sdk7.createPeerExtensionSdk,
+  createPeerExtensionSdk: () => createPeerExtensionSdk,
   createTelemetryContext: () => createTelemetryContext,
   delegate: () => delegate,
   deposits: () => deposits,
@@ -49,16 +50,18 @@ __export(index_exports, {
   emitEvent: () => emitEvent,
   enableOtc: () => enableOtc,
   getOtcLink: () => getOtcLink,
+  getPeerExtensionRegistrationAuthParams: () => getPeerExtensionRegistrationAuthParams,
   getPeerExtensionRegistrationInfo: () => getPeerExtensionRegistrationInfo,
-  getPeerExtensionState: () => import_sdk7.getPeerExtensionState,
+  getPeerExtensionState: () => getPeerExtensionState,
   getPlatformLimits: () => getPlatformLimits,
-  isPeerExtensionAvailable: () => import_sdk7.isPeerExtensionAvailable,
+  isPeerExtensionAvailable: () => isPeerExtensionAvailable,
+  isPeerExtensionMetadataBridgeAvailable: () => isPeerExtensionMetadataBridgeAvailable,
   isPeerExtensionRegistrationError: () => isPeerExtensionRegistrationError,
   isValidIBAN: () => isValidIBAN,
   normalizePaypalMeUsername: () => normalizePaypalMeUsername,
   offramp: () => offramp,
-  openPeerExtensionInstallPage: () => import_sdk7.openPeerExtensionInstallPage,
-  peerExtensionSdk: () => import_sdk7.peerExtensionSdk,
+  openPeerExtensionInstallPage: () => openPeerExtensionInstallPage,
+  peerExtensionSdk: () => peerExtensionSdk,
   sanitizeAttributionId: () => sanitizeAttributionId,
   sendTelemetryEvent: () => sendTelemetryEvent,
   undelegate: () => undelegate
@@ -72,11 +75,15 @@ var import_sdk5 = require("@zkp2p/sdk");
 
 // src/config.ts
 var import_sdk = require("@zkp2p/sdk");
-var SDK_VERSION = "3.0.3";
+var SDK_VERSION = "4.0.0";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
 var BASE_RPC_URL = "https://mainnet.base.org";
+function resolveApiBaseUrl(override) {
+  const trimmed = override?.trim();
+  return (trimmed && trimmed.length > 0 ? trimmed : API_BASE_URL).replace(/\/$/, "");
+}
 var contracts = (0, import_sdk.getContracts)(BASE_CHAIN_ID, RUNTIME_ENV);
 var addresses = contracts.addresses;
 var addrs = addresses;
@@ -93,6 +100,7 @@ var DEFAULT_INTENT_GUARDIAN_ADDRESS = "0xe29a5BD4D0CEbA6C125A0361E7D20ab4eA275C2
 var REFERRER = "galleonlabs";
 var MIN_DEPOSIT_USDC = 1;
 var MIN_ORDER_USDC = 1;
+var MAX_ORDER_USDC = 2500;
 var INDEXER_MAX_ATTEMPTS = 12;
 var INDEXER_INITIAL_DELAY_MS = 1e3;
 var INDEXER_MAX_DELAY_MS = 1e4;
@@ -101,6 +109,41 @@ var PAYEE_REGISTRATION_TIMEOUT_MS = 8e3;
 // src/platforms.ts
 var import_sdk2 = require("@zkp2p/sdk");
 var import_zod = require("zod");
+
+// src/errors.ts
+var MakersCreateError = class extends Error {
+  status;
+  body;
+  constructor(message, status, body) {
+    super(message);
+    this.name = "MakersCreateError";
+    this.status = status;
+    this.body = body;
+  }
+};
+var OfframpError = class extends Error {
+  code;
+  step;
+  cause;
+  txHash;
+  depositId;
+  constructor(message, code, step, cause, details) {
+    super(message);
+    this.name = "OfframpError";
+    this.code = code;
+    this.step = step;
+    this.cause = cause;
+    this.txHash = details?.txHash;
+    this.depositId = details?.depositId;
+  }
+};
+function isUserCancellation(error) {
+  if (!(error instanceof Error)) return false;
+  const msg = error.message.toLowerCase();
+  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
+}
+
+// src/platforms.ts
 var PAYMENT_CATALOG = (0, import_sdk2.getPaymentMethodsCatalog)(BASE_CHAIN_ID, RUNTIME_ENV);
 var ZELLE_HASH_LOOKUP_NAMES = ["zelle", "zelle-bofa", "zelle-chase", "zelle-citi"];
 var FALLBACK_CURRENCIES = {
@@ -461,6 +504,113 @@ function getPeerExtensionRegistrationInfo(platform) {
   const entry = getPlatformById(platform);
   return entry?.extensionRegistration ?? null;
 }
+function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
+  const info = getPeerExtensionRegistrationInfo(platform);
+  if (!info) return null;
+  const params = {
+    actionType: `transfer_${info.providerId}`,
+    captureMode: "sellerCredential",
+    platform: info.providerId
+  };
+  if (options.attestationServiceUrl) {
+    params.attestationServiceUrl = options.attestationServiceUrl;
+  }
+  return params;
+}
+function resolveRegistrationProcessor(platform) {
+  const info = getPeerExtensionRegistrationInfo(platform.id);
+  if (info?.providerId === "paypal" || info?.providerId === "wise") {
+    return info.providerId;
+  }
+  throw new Error(`${platform.name} does not require Peer extension registration.`);
+}
+async function postMakerCreate(processorName, payload, apiBaseUrl = API_BASE_URL) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/create`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ processorName, ...payload }),
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      const txt = await res.text().catch(() => "");
+      let detail = txt || res.statusText;
+      try {
+        const parsed = JSON.parse(txt);
+        if (typeof parsed.message === "string" && parsed.message.trim()) {
+          detail = parsed.message;
+        }
+      } catch {
+      }
+      throw new MakersCreateError(
+        `makers/create failed (${res.status}): ${detail}`,
+        res.status,
+        txt
+      );
+    }
+    const json = await res.json();
+    if (!json.success || !json.responseObject?.hashedOnchainId) {
+      throw new MakersCreateError(
+        json.message || "makers/create returned no hashedOnchainId",
+        json.statusCode ?? null,
+        ""
+      );
+    }
+    return json.responseObject.hashedOnchainId;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function requireSarCredentialCapture(capturedMetadata) {
+  const capture = capturedMetadata.sarCredentialCapture;
+  if (!capture?.credentialBundle) {
+    throw new Error("Peer metadata did not include a seller credential bundle.");
+  }
+  if (!capture.offchainId) {
+    throw new Error("Peer metadata did not include seller credential offchainId.");
+  }
+  return capture;
+}
+async function uploadSellerCredentialBundle(processorName, offchainId, bundle) {
+  const params = processorName === "wise" ? { platform: "wise", bundle } : { platform: processorName, offchainId, bundle };
+  return (0, import_sdk2.apiUploadSellerCredentialBundle)(params, API_BASE_URL, PAYEE_REGISTRATION_TIMEOUT_MS);
+}
+async function completePeerExtensionRegistration(input) {
+  const processorName = resolveRegistrationProcessor(input.platform);
+  if (input.capturedMetadata.platform !== processorName) {
+    throw new Error(
+      `Peer metadata is for ${input.capturedMetadata.platform}, not ${processorName}.`
+    );
+  }
+  const sarCredentialCapture = requireSarCredentialCapture(input.capturedMetadata);
+  const bundle = sarCredentialCapture.credentialBundle;
+  if (bundle.platform.toLowerCase() !== processorName) {
+    throw new Error("Seller credential bundle platform does not match registration platform.");
+  }
+  const validation = input.platform.validate(input.identifier);
+  if (!validation.valid) {
+    throw new Error(validation.error || "Invalid identifier");
+  }
+  const payload = buildDepositData(processorName, sarCredentialCapture.offchainId);
+  if (payload.offchainId !== validation.normalized) {
+    throw new Error("Seller credential offchainId does not match registration identifier.");
+  }
+  const hashedOnchainId = bundle.payeeIdHash;
+  const sellerCredentialResponse = await uploadSellerCredentialBundle(
+    processorName,
+    payload.offchainId,
+    bundle
+  );
+  return {
+    processorName,
+    offchainId: payload.offchainId,
+    hashedOnchainId,
+    sellerCredentialResponse,
+    sellerCredentialStatus: sellerCredentialResponse.responseObject
+  };
+}
 var EXTENSION_REGISTRATION_ERROR_PATTERNS = ["creating the maker", "create the maker"];
 function isPeerExtensionRegistrationError(platform, message, statusCode) {
   const info = getPeerExtensionRegistrationInfo(platform);
@@ -472,39 +622,6 @@ function isPeerExtensionRegistrationError(platform, message, statusCode) {
   return EXTENSION_REGISTRATION_ERROR_PATTERNS.some((p) => lower.includes(p));
 }
 
-// src/errors.ts
-var MakersCreateError = class extends Error {
-  status;
-  body;
-  constructor(message, status, body) {
-    super(message);
-    this.name = "MakersCreateError";
-    this.status = status;
-    this.body = body;
-  }
-};
-var OfframpError = class extends Error {
-  code;
-  step;
-  cause;
-  txHash;
-  depositId;
-  constructor(message, code, step, cause, details) {
-    super(message);
-    this.name = "OfframpError";
-    this.code = code;
-    this.step = step;
-    this.cause = cause;
-    this.txHash = details?.txHash;
-    this.depositId = details?.depositId;
-  }
-};
-function isUserCancellation(error) {
-  if (!(error instanceof Error)) return false;
-  const msg = error.message.toLowerCase();
-  return msg.includes("user rejected") || msg.includes("user denied") || msg.includes("user cancelled") || msg.includes("rejected the request") || msg.includes("action_rejected");
-}
-
 // src/otc.ts
 var import_viem = require("viem");
 var import_chains = require("viem/chains");
@@ -512,13 +629,13 @@ var import_WhitelistPreIntentHook = __toESM(require("@zkp2p/contracts-v2/abis/ba
 
 // src/sdk-client.ts
 var import_sdk3 = require("@zkp2p/sdk");
-function createSdkClient(walletClient) {
+function createSdkClient(walletClient, apiBaseUrl = API_BASE_URL) {
   return new import_sdk3.OfframpClient({
     walletClient,
     chainId: BASE_CHAIN_ID,
     runtimeEnv: RUNTIME_ENV,
     rpcUrl: BASE_RPC_URL,
-    baseApiUrl: API_BASE_URL
+    baseApiUrl: apiBaseUrl
   });
 }
 
@@ -929,50 +1046,11 @@ function extractDepositIdFromLogs(logs) {
   }
   return null;
 }
-async function registerPayeeDetails(processorName, payload) {
+async function validatePayeeDetails(processorName, offchainId, apiBaseUrl = API_BASE_URL) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
   try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/create`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ processorName, ...payload }),
-      signal: controller.signal
-    });
-    if (!res.ok) {
-      const txt = await res.text().catch(() => "");
-      let detail = txt || res.statusText;
-      try {
-        const parsed = JSON.parse(txt);
-        if (typeof parsed.message === "string" && parsed.message.trim()) {
-          detail = parsed.message;
-        }
-      } catch {
-      }
-      throw new MakersCreateError(
-        `makers/create failed (${res.status}): ${detail}`,
-        res.status,
-        txt
-      );
-    }
-    const json = await res.json();
-    if (!json.success || !json.responseObject?.hashedOnchainId) {
-      throw new MakersCreateError(
-        json.message || "makers/create returned no hashedOnchainId",
-        json.statusCode ?? null,
-        ""
-      );
-    }
-    return json.responseObject.hashedOnchainId;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-async function validatePayeeDetails(processorName, offchainId) {
-  const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), PAYEE_REGISTRATION_TIMEOUT_MS);
-  try {
-    const res = await fetch(`${API_BASE_URL}/v2/makers/validate`, {
+    const res = await fetch(`${apiBaseUrl}/v2/makers/validate`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ processorName, offchainId }),
@@ -1050,10 +1128,11 @@ async function findUndelegatedDeposit(walletAddress) {
     return null;
   }
 }
-async function offramp(walletClient, params, onProgress, telemetryContext) {
+async function offramp(walletClient, params, onProgress, telemetryContext, apiBaseUrl) {
   const { amount, platform, currency, identifier } = params;
   const platformId = platform.id;
   const currencyCode = currency.code;
+  const resolvedApiBaseUrl = resolveApiBaseUrl(apiBaseUrl);
   const telemetry = telemetryContext ?? createTelemetryContext({
     sdkVersion: SDK_VERSION,
     telemetry: true,
@@ -1098,7 +1177,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const existing = await findUndelegatedDeposit(walletAddress);
     if (existing) {
       emitProgress({ step: "resuming", depositId: existing.depositId });
-      const client2 = createSdkClient(walletClient);
+      const client2 = createSdkClient(walletClient, resolvedApiBaseUrl);
       const txOverrides2 = { referrer: [REFERRER] };
       try {
         const result2 = await client2.setRateManager({
@@ -1134,7 +1213,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     const truncatedAmount = amt.toFixed(6).replace(/\.?0+$/, "");
     const amountUnits = usdcToUnits(truncatedAmount);
     const minUnits = usdcToUnits(String(MIN_ORDER_USDC));
-    const maxUnits = usdcToUnits(String(Math.min(amt, 2500)));
+    const maxUnits = usdcToUnits(String(Math.min(amt, MAX_ORDER_USDC)));
     try {
       const publicClient = (0, import_viem3.createPublicClient)({ chain: import_chains3.base, transport: (0, import_viem3.http)(BASE_RPC_URL) });
       const balance = await publicClient.readContract({
@@ -1163,7 +1242,11 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     }
     const canonicalName = platformId.startsWith("zelle") ? "zelle" : platformId;
     if (!getPeerExtensionRegistrationInfo(platformId)) {
-      const outcome = await validatePayeeDetails(canonicalName, normalizedIdentifier);
+      const outcome = await validatePayeeDetails(
+        canonicalName,
+        normalizedIdentifier,
+        resolvedApiBaseUrl
+      );
       if (outcome === "invalid") {
         throw new OfframpError(
           `Couldn't verify that ${platform.name} ${platform.identifier.label.toLowerCase()}. Double-check it and try again.`,
@@ -1172,7 +1255,7 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
         );
       }
     }
-    const client = createSdkClient(walletClient);
+    const client = createSdkClient(walletClient, resolvedApiBaseUrl);
     const txOverrides = { referrer: [REFERRER] };
     emitProgress({ step: "approving" });
     try {
@@ -1198,13 +1281,13 @@ async function offramp(walletClient, params, onProgress, telemetryContext) {
     let hashedOnchainId;
     try {
       const payeePayload = buildDepositData(canonicalName, normalizedIdentifier);
-      hashedOnchainId = await registerPayeeDetails(canonicalName, payeePayload);
+      hashedOnchainId = await postMakerCreate(canonicalName, payeePayload, resolvedApiBaseUrl);
     } catch (err) {
       const status = err instanceof MakersCreateError ? err.status : null;
       const message = err instanceof Error ? err.message : String(err);
       if (isPeerExtensionRegistrationError(canonicalName, message, status)) {
         throw new OfframpError(
-          `${platform.name} maker is not yet registered in the Peer extension. Verify this handle in the extension, then retry.`,
+          `${platform.name} maker is not yet registered in the Peer extension. Register this handle with Peer, then retry.`,
           "EXTENSION_REGISTRATION_REQUIRED",
           "registering",
           err
@@ -1396,6 +1479,14 @@ var CURRENCIES = buildCurrencies();
 // src/offramp.ts
 var IDEMPOTENCY_TTL_MS = 10 * 60 * 1e3;
 var IDEMPOTENCY_STORAGE_PREFIX = "offramp:idempotency:";
+var warnedIdempotencyUnavailable = false;
+function warnIdempotencyUnavailableOnce() {
+  if (warnedIdempotencyUnavailable) return;
+  warnedIdempotencyUnavailable = true;
+  console.warn(
+    "[offramp] idempotencyKey was provided but sessionStorage is unavailable (Node/worker runtime). The idempotency cache is browser-only and no-ops here, so retries can create duplicate deposits. For server-side dedup, call deposits(walletAddress) and reuse an existing open deposit before creating one."
+  );
+}
 function getWalletAddress(walletClient) {
   const address = walletClient.account?.address;
   if (!address) {
@@ -1466,8 +1557,10 @@ function buildCurrencyGroups() {
 var Offramp = class {
   walletClient;
   telemetry;
+  apiBaseUrl;
   constructor(options) {
     this.walletClient = options.walletClient;
+    this.apiBaseUrl = options.apiBaseUrl;
     this.telemetry = createTelemetryContext({
       sdkVersion: SDK_VERSION,
       telemetry: options.telemetry,
@@ -1490,6 +1583,9 @@ var Offramp = class {
       referralId: flowTelemetry.referralId
     };
     const sanitizedKey = sanitizeAttributionId(params.idempotencyKey);
+    if (sanitizedKey && typeof sessionStorage === "undefined") {
+      warnIdempotencyUnavailableOnce();
+    }
     const walletAddress = sanitizedKey ? getWalletAddress(this.walletClient) : null;
     const storageKey = walletAddress && sanitizedKey ? getIdempotencyStorageKey(walletAddress, sanitizedKey) : null;
     if (storageKey) {
@@ -1500,7 +1596,8 @@ var Offramp = class {
       this.walletClient,
       sanitizedParams,
       onProgress,
-      flowTelemetry
+      flowTelemetry,
+      this.apiBaseUrl
     );
     if (storageKey) {
       writeIdempotencyResult(storageKey, result);
@@ -1556,8 +1653,8 @@ var OFFRAMP_ERROR_CODES = {
    * handle in the Peer extension yet. Thrown from `offramp()` for PayPal
    * and Wise when `/v2/makers/create` returns 400 or a "creating the maker"
    * message. Recover by prompting the user through the Peer extension via
-   * `usePeerExtensionRegistration(platform)` (React) or `peerExtensionSdk`
-   * directly, then call `offramp()` again.
+   * `usePeerExtensionRegistration(platform)` (React) or
+   * `completePeerExtensionRegistration(...)`, then retrying `offramp()`.
    */
   EXTENSION_REGISTRATION_REQUIRED: "EXTENSION_REGISTRATION_REQUIRED",
   DEPOSIT_FAILED: "DEPOSIT_FAILED",
@@ -1569,6 +1666,73 @@ var OFFRAMP_ERROR_CODES = {
 
 // src/extension.ts
 var import_sdk7 = require("@zkp2p/sdk");
+var resolveWindow = (options) => {
+  if (options?.window) {
+    return options.window;
+  }
+  if (typeof window === "undefined") {
+    return void 0;
+  }
+  return window;
+};
+var requirePeer = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  if (!resolvedWindow.peer) {
+    throw new Error("Peer extension not available. Install or enable the Peer extension.");
+  }
+  return resolvedWindow.peer;
+};
+var isPeerExtensionAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer);
+};
+var hasHeadlessMetadataBridge = (peer) => typeof peer.authenticate === "function" && typeof peer.onMetadataMessage === "function";
+var requirePeerMetadataBridge = (options) => {
+  const peer = requirePeer(options);
+  if (!hasHeadlessMetadataBridge(peer)) {
+    throw new Error("Peer extension metadata bridge unavailable. Install or update Peer.");
+  }
+  return peer;
+};
+var isPeerExtensionMetadataBridgeAvailable = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  return Boolean(resolvedWindow?.peer && hasHeadlessMetadataBridge(resolvedWindow.peer));
+};
+var openPeerExtensionInstallPage = (options) => {
+  const resolvedWindow = resolveWindow(options);
+  if (!resolvedWindow) {
+    throw new Error("Peer extension SDK requires a browser window.");
+  }
+  resolvedWindow.open(import_sdk7.PEER_EXTENSION_CHROME_URL, "_blank", "noopener,noreferrer");
+};
+var getPeerExtensionState = async (options) => {
+  if (!isPeerExtensionAvailable(options)) {
+    return "needs_install";
+  }
+  try {
+    const status = await requirePeer(options).checkConnectionStatus();
+    return status === "connected" ? "ready" : "needs_connection";
+  } catch {
+    return "needs_connection";
+  }
+};
+var createPeerExtensionSdk = (options = {}) => {
+  const sdk = (0, import_sdk7.createPeerExtensionSdk)(options);
+  return {
+    isAvailable: () => isPeerExtensionAvailable(options),
+    requestConnection: () => requirePeer(options).requestConnection(),
+    checkConnectionStatus: () => requirePeer(options).checkConnectionStatus(),
+    getVersion: () => requirePeer(options).getVersion(),
+    authenticate: (params) => requirePeerMetadataBridge(options).authenticate(params),
+    onMetadataMessage: (callback) => requirePeerMetadataBridge(options).onMetadataMessage(callback),
+    openInstallPage: () => sdk.openInstallPage(),
+    getState: () => sdk.getState()
+  };
+};
+var peerExtensionSdk = createPeerExtensionSdk();
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CURRENCIES,
@@ -1581,6 +1745,7 @@ var import_sdk7 = require("@zkp2p/sdk");
   PLATFORMS,
   PLATFORM_LIMITS,
   close,
+  completePeerExtensionRegistration,
   createOfframp,
   createPeerExtensionSdk,
   createTelemetryContext,
@@ -1590,10 +1755,12 @@ var import_sdk7 = require("@zkp2p/sdk");
   emitEvent,
   enableOtc,
   getOtcLink,
+  getPeerExtensionRegistrationAuthParams,
   getPeerExtensionRegistrationInfo,
   getPeerExtensionState,
   getPlatformLimits,
   isPeerExtensionAvailable,
+  isPeerExtensionMetadataBridgeAvailable,
   isPeerExtensionRegistrationError,
   isValidIBAN,
   normalizePaypalMeUsername,