@usdctofiat/offramp 4.4.6 → 4.4.8

package/dist/index.cjs

@@ -85,7 +85,7 @@ var import_sdk5 = require("@zkp2p/sdk");
 
 // src/config.ts
 var import_sdk = require("@zkp2p/sdk");
-var SDK_VERSION = "4.4.6";
+var SDK_VERSION = "4.4.8";
 var BASE_CHAIN_ID = 8453;
 var RUNTIME_ENV = "production";
 var API_BASE_URL = "https://api.zkp2p.xyz";
@@ -482,6 +482,7 @@ function getPeerExtensionRegistrationInfo(platform) {
 function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
   const info = getPeerExtensionRegistrationInfo(platform);
   if (!info) return null;
+  const callerAddress = options.callerAddress?.trim();
   const params = {
     actionType: `transfer_${info.providerId}`,
     captureMode: "sellerCredential",
@@ -490,6 +491,9 @@ function getPeerExtensionRegistrationAuthParams(platform, options = {}) {
   if (options.attestationServiceUrl) {
     params.attestationServiceUrl = options.attestationServiceUrl;
   }
+  if (callerAddress) {
+    params.callerAddress = callerAddress;
+  }
   return params;
 }
 function resolveRegistrationProcessor(platform) {
@@ -591,12 +595,14 @@ async function completePeerExtensionRegistration(input) {
   };
 }
 var EXTENSION_REGISTRATION_ERROR_PATTERNS = ["creating the maker", "create the maker"];
+var isWiseIdentityAttestationRequiredError = (message) => message.toLowerCase().includes("identityattestation is required");
 function isPeerExtensionRegistrationError(platform, message, statusCode) {
   const info = getPeerExtensionRegistrationInfo(platform);
   if (!info) return false;
   if (statusCode === 400) return true;
   const normalized = (message ?? "").trim();
   if (!normalized) return false;
+  if (platform === "wise" && isWiseIdentityAttestationRequiredError(normalized)) return true;
   const lower = normalized.toLowerCase();
   return EXTENSION_REGISTRATION_ERROR_PATTERNS.some((p) => lower.includes(p));
 }
@@ -1759,7 +1765,6 @@ var OFFRAMP_RESOURCE_LINKS = {
   appGuide: "https://usdctofiat.xyz/developers/apps/",
   botGuide: "https://usdctofiat.xyz/developers/bots/",
   agentGuide: "https://usdctofiat.xyz/developers/agents/",
-  webhooksGuide: "https://usdctofiat.xyz/developers/webhooks/",
   privateOtcGuide: "https://usdctofiat.xyz/developers/private-otc/",
   peerlyticsGuide: "https://usdctofiat.xyz/developers/peerlytics/",
   agentSkill: "https://usdctofiat.xyz/skills/usdctofiat.md",
@@ -1772,7 +1777,7 @@ var OFFRAMP_RESOURCE_LINKS = {
 };
 var OFFRAMP_UPSTREAM_SOURCE_TRUTHS = [
   {
-    label: "@zkp2p/sdk 0.7.2",
+    label: "@zkp2p/sdk 0.8.0",
     href: "https://github.com/zkp2p/zkp2p-clients/tree/main/packages/sdk",
     description: "Primary upstream TypeScript SDK for contracts, Curator clients, payment-method catalogs, and the Peer extension bridge."
   },
@@ -1796,12 +1801,12 @@ var sharedResources = [
   {
     label: "Developer portal",
     href: OFFRAMP_RESOURCE_LINKS.developerPortal,
-    description: "Human-readable hub for SDK, webhooks, OTC, bots, agents, and Peerlytics."
+    description: "Human-readable hub for SDK, OTC, bots, agents, and Peerlytics."
   },
   {
     label: "Starter templates",
     href: OFFRAMP_RESOURCE_LINKS.starters,
-    description: "Next.js, Vite, Telegram-bot, scripts, and HMAC webhook receivers."
+    description: "Next.js, Vite, Telegram-bot, scripts, and agent examples."
   },
   {
     label: "Agent skill",
@@ -1829,7 +1834,7 @@ var OFFRAMP_INTEGRATION_PLAYBOOKS = [
       },
       {
         title: "Reconcile state",
-        detail: "Use deposits(address) and webhooks rather than assuming the browser stayed open."
+        detail: "Use deposits(address) or Peerlytics deposit reads rather than assuming the browser stayed open."
       }
     ],
     resources: [
@@ -1865,7 +1870,7 @@ var OFFRAMP_INTEGRATION_PLAYBOOKS = [
       },
       {
         title: "Subscribe to lifecycle state",
-        detail: "Register HMAC webhooks so fills and closes survive process restarts."
+        detail: "Poll deposits(address) or Peerlytics deposit reads so fills and closes survive process restarts."
       }
     ],
     resources: [
@@ -1874,11 +1879,6 @@ var OFFRAMP_INTEGRATION_PLAYBOOKS = [
         label: "Bot guide",
         href: OFFRAMP_RESOURCE_LINKS.botGuide,
         description: "Server-wallet, retry, idempotency, and OTC patterns."
-      },
-      {
-        label: "Webhooks guide",
-        href: OFFRAMP_RESOURCE_LINKS.webhooksGuide,
-        description: "HMAC verification and lifecycle event names."
       }
     ]
   },
@@ -1945,42 +1945,6 @@ var OFFRAMP_INTEGRATION_PLAYBOOKS = [
       }
     ]
   },
-  {
-    profile: "webhooks",
-    title: "Lifecycle webhooks",
-    summary: "Receive deposit and OTC lifecycle state with HMAC verification.",
-    steps: [
-      {
-        title: "Create a Peerlytics API key",
-        detail: "One key authenticates both Peerlytics and USDCtoFiat developer surfaces."
-      },
-      {
-        title: "Register an endpoint",
-        detail: "Point the console at an HTTPS endpoint that can read the raw request body."
-      },
-      {
-        title: "Verify before parsing",
-        detail: "Compute HMAC-SHA256 over timestamp.rawBody and compare to v1 in constant time."
-      },
-      {
-        title: "Reconcile important state",
-        detail: "Treat events as hints and call deposits(address) or your indexer for hard state."
-      }
-    ],
-    resources: [
-      ...sharedResources,
-      {
-        label: "Webhooks guide",
-        href: OFFRAMP_RESOURCE_LINKS.webhooksGuide,
-        description: "Event names, headers, and replay-window guidance."
-      },
-      {
-        label: "Peerlytics console",
-        href: OFFRAMP_RESOURCE_LINKS.peerlyticsDevelopers,
-        description: "API keys, credits, and endpoint management."
-      }
-    ]
-  },
   {
     profile: "peerlytics",
     title: "Peerlytics API",
@@ -1992,11 +1956,11 @@ var OFFRAMP_INTEGRATION_PLAYBOOKS = [
       },
       {
         title: "Add the Peerlytics API",
-        detail: "Use @peerlytics/sdk when the product needs orderbook, analytics, and webhooks."
+        detail: "Use @peerlytics/sdk when the product needs orderbook, analytics, deposits, or intents."
       },
       {
         title: "Buy credits as usage grows",
-        detail: "Peerlytics credits back deeper API calls and Pro webhook access."
+        detail: "Peerlytics credits back deeper API calls and historical analytics."
       }
     ],
     resources: [
@@ -2034,11 +1998,6 @@ var OFFRAMP_INTEGRATION_CHECKLIST = [
     title: "Server-side duplicate prevention",
     detail: "Bots and workers must call deposits(address) and use their own order database; idempotencyKey is browser-session scoped and the standalone offramp() helper ignores it.",
     required: true
-  },
-  {
-    title: "Raw-body webhook verification",
-    detail: "Verify timestamp.rawBody with HMAC-SHA256 before parsing JSON.",
-    required: true
   }
 ];
 var OFFRAMP_DEVELOPER_RESOURCES = {
@@ -2060,7 +2019,6 @@ var OFFRAMP_DEVELOPER_RESOURCES = {
     appGuide: OFFRAMP_RESOURCE_LINKS.appGuide,
     botGuide: OFFRAMP_RESOURCE_LINKS.botGuide,
     agentGuide: OFFRAMP_RESOURCE_LINKS.agentGuide,
-    webhooksGuide: OFFRAMP_RESOURCE_LINKS.webhooksGuide,
     privateOtcGuide: OFFRAMP_RESOURCE_LINKS.privateOtcGuide,
     peerlyticsGuide: OFFRAMP_RESOURCE_LINKS.peerlyticsGuide,
     agentSkill: OFFRAMP_RESOURCE_LINKS.agentSkill,
@@ -2094,7 +2052,6 @@ function getOfframpAgentPrompt(profile = "app") {
     "Do not add manual rate controls; SDK-created deposits must delegate to the Delegate vault.",
     "For PayPal, Wise, Venmo, and Cash App, recover EXTENSION_REGISTRATION_REQUIRED through the Peer extension registration flow.",
     "For bots/workers, deduplicate with deposits(address) plus your own order database; do not rely on idempotencyKey.",
-    "For webhooks, verify the raw request body before parsing JSON.",
     ...steps ?? []
   ].join("\n");
 }