@usdctofiat/offramp 4.4.2 → 4.4.4

package/CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to `@usdctofiat/offramp` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [4.4.4] - 2026-06-27
+
+### Fixed
+
+- Prefer the branded `window.usdctofiatVerify` extension bridge when
+  USDCtoFiat Verify and PeerAuth are both installed, while preserving
+  `window.peer` as a compatibility fallback.
+
+## [4.4.3] - 2026-06-26
+
+### Added
+
+- Add `OFFRAMP_DEVELOPER_RESOURCES.upstreamSourceTruths` and
+  `OFFRAMP_UPSTREAM_SOURCE_TRUTHS` so apps, bots, and coding agents can trace
+  protocol-sensitive fields to the current ZKP2P SDK, Curator API,
+  attestation service, and contracts before guessing.
+
 ## [4.4.2] - 2026-06-26
 
 ### Fixed

package/README.md

@@ -26,12 +26,19 @@ import { OFFRAMP_DEVELOPER_RESOURCES, getOfframpDeveloperResources } from "@usdc
 OFFRAMP_DEVELOPER_RESOURCES.delegation.required; // true
 OFFRAMP_DEVELOPER_RESOURCES.delegation.feeRateBps; // 10
 OFFRAMP_DEVELOPER_RESOURCES.links.agentSkill; // https://usdctofiat.xyz/skills/usdctofiat.md
+OFFRAMP_DEVELOPER_RESOURCES.upstreamSourceTruths.map((source) => source.label);
+// ["@zkp2p/sdk 0.6.2", "Curator API", ...]
 OFFRAMP_DEVELOPER_RESOURCES.checklist.map((item) => item.title); // integration doctor
 
 const botPlaybook = getOfframpDeveloperResources("bot");
 // profile-specific steps + canonical docs/starters/webhook resources
 ```
 
+Use `upstreamSourceTruths` before generating protocol-sensitive code. It points
+agents at the current ZKP2P SDK, Curator API, attestation service, and contracts
+so they do not invent payment-method hashes, proof payload fields, or contract
+addresses.
+
 For agent-built integrations, copy the same prompt the developer console uses:
 
 ```typescript
@@ -376,12 +383,12 @@ There are **two separate webhook families** — different event vocabularies, di
 | Family                                                                              | Events                                                                                         | Emitted by                    | Register at                                                    |
 | ----------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------- | ----------------------------- | -------------------------------------------------------------- |
 | **Offramp** (this SDK)                                                              | `deposit.created`, `deposit.filled`, `deposit.partially_filled`, `deposit.closed`, `otc.taken` | usdctofiat offramp dispatcher | [usdctofiat.xyz/developers](https://usdctofiat.xyz/developers) |
-| **Integrator** ([`@peerlytics/sdk`](https://www.npmjs.com/package/@peerlytics/sdk)) | `deposit.created`, `intent.signaled`, `intent.fulfilled`, `deposit.rate_updated`               | Peerlytics cron dispatcher    | [peerlytics.xyz/developers](https://peerlytics.xyz/developers) |
+| **Integrator** ([`@peerlytics/sdk`](https://www.npmjs.com/package/@peerlytics/sdk)) | `deposit.created`, `intent.signaled`, `intent.fulfilled`                                       | Peerlytics cron dispatcher    | [peerlytics.xyz/developers](https://peerlytics.xyz/developers) |
 
-One Peerlytics API key authenticates both. The integrator family also accepts the legacy aliases `intent.created`, `intent.filled`, `rate.updated` on registration (normalized server-side).
+One Peerlytics API key authenticates both. The integrator family also accepts the legacy aliases `intent.created` and `intent.filled` on registration (normalized server-side). Rate updates are activity-feed events, not webhook fanout.
 
 ## Links
 
-[usdctofiat.xyz](https://usdctofiat.xyz) · [delegate.usdctofiat.xyz](https://delegate.usdctofiat.xyz) · [peerlytics.xyz](https://peerlytics.xyz) · [orderbook.peerlytics.xyz](https://orderbook.peerlytics.xyz)
+[usdctofiat.xyz](https://usdctofiat.xyz) · [usdctofiat.xyz/delegate](https://usdctofiat.xyz/delegate) · [peerlytics.xyz](https://peerlytics.xyz) · [peerlytics.xyz/orderbook](https://peerlytics.xyz/orderbook)
 
 [Examples & agent skills](https://github.com/ADWilkinson/usdctofiat-peerlytics-starters) · [@usdctofiat](https://x.com/usdctofiat)

package/dist/{chunk-4DWGIXLS.js → chunk-NDVYCYUC.js}

@@ -1,6 +1,6 @@
 // src/config.ts
 import { getContracts, getGatingServiceAddress } from "@zkp2p/sdk";
-var SDK_VERSION = "4.4.2";
+var SDK_VERSION = "4.4.4";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
@@ -1555,10 +1555,7 @@ function createOfframp(options) {
 }
 
 // src/extension.ts
-import {
-  PEER_EXTENSION_CHROME_URL,
-  createPeerExtensionSdk as createSdkPeerExtensionSdk
-} from "@zkp2p/sdk";
+import { PEER_EXTENSION_CHROME_URL } from "@zkp2p/sdk";
 var DEFAULT_EXTENSION_INSTALL_URL = "https://chromewebstore.google.com/detail/usdctofiat-verify/lfkmdfifolhcfjmhklmckigfngghmpdf";
 var resolveWindow = (options) => {
   if (options?.window) {
@@ -1574,14 +1571,15 @@ var requirePeer = (options) => {
   if (!resolvedWindow) {
     throw new Error("Peer extension SDK requires a browser window.");
   }
-  if (!resolvedWindow.peer) {
+  const peer = resolvedWindow.usdctofiatVerify ?? resolvedWindow.peer;
+  if (!peer) {
     throw new Error("Peer extension not available. Install or enable the Peer extension.");
   }
-  return resolvedWindow.peer;
+  return peer;
 };
 var isPeerExtensionAvailable = (options) => {
   const resolvedWindow = resolveWindow(options);
-  return Boolean(resolvedWindow?.peer);
+  return Boolean(resolvedWindow?.usdctofiatVerify ?? resolvedWindow?.peer);
 };
 var hasHeadlessMetadataBridge = (peer) => typeof peer.authenticate === "function" && typeof peer.onMetadataMessage === "function";
 var requirePeerMetadataBridge = (options) => {
@@ -1593,7 +1591,8 @@ var requirePeerMetadataBridge = (options) => {
 };
 var isPeerExtensionMetadataBridgeAvailable = (options) => {
   const resolvedWindow = resolveWindow(options);
-  return Boolean(resolvedWindow?.peer && hasHeadlessMetadataBridge(resolvedWindow.peer));
+  const peer = resolvedWindow?.usdctofiatVerify ?? resolvedWindow?.peer;
+  return Boolean(peer && hasHeadlessMetadataBridge(peer));
 };
 var openPeerExtensionInstallPage = (options) => {
   const resolvedWindow = resolveWindow(options);
@@ -1615,7 +1614,6 @@ var getPeerExtensionState = async (options) => {
   }
 };
 var createPeerExtensionSdk = (options = {}) => {
-  const sdk = createSdkPeerExtensionSdk(options);
   return {
     isAvailable: () => isPeerExtensionAvailable(options),
     requestConnection: () => requirePeer(options).requestConnection(),
@@ -1624,7 +1622,7 @@ var createPeerExtensionSdk = (options = {}) => {
     authenticate: (params) => requirePeerMetadataBridge(options).authenticate(params),
     onMetadataMessage: (callback) => requirePeerMetadataBridge(options).onMetadataMessage(callback),
     openInstallPage: () => openPeerExtensionInstallPage(options),
-    getState: () => sdk.getState()
+    getState: () => getPeerExtensionState(options)
   };
 };
 var peerExtensionSdk = createPeerExtensionSdk();
@@ -1673,4 +1671,4 @@ export {
   createPeerExtensionSdk,
   peerExtensionSdk
 };
-//# sourceMappingURL=chunk-4DWGIXLS.js.map
+//# sourceMappingURL=chunk-NDVYCYUC.js.map