@zkp2p/cash 0.4.11-rc.3 → 0.4.11-rc.4

package/AGENTS.md

@@ -6,8 +6,9 @@
 
 You are integrating Peer Cash: an offramp that routes Relay-supported EVM
 assets or NEAR Intents 1Click external deposits into Base USDC, then converts
-Base USDC to fiat (Venmo, Revolut, Wise, Zelle, ...) at the live Chainlink
-market rate. The user whose USDC you
+Base USDC to fiat (Venmo, Revolut, Wise, Alipay, Zelle, ...) at a zero-spread
+Chainlink market rate. Existing corridors bind at intent signal; Alipay/CNY
+fixes a fresh Ethereum Chainlink snapshot during deposit preparation. The user whose USDC you
 manage is the **maker**; a buyer pays them fiat and proves it with TEE-TLS; the
 protocol releases the USDC. Funds are held by the protocol, and only the maker
 can withdraw an unmatched deposit.
@@ -45,7 +46,7 @@ deposit-level integration share instead of applying maker L1/L2.
 
 **Platform caveats:**
 
-- **Venmo, Cash App, and PayPal restrict who can signal intents by default.**
+- **Venmo and PayPal restrict who can signal intents by default.**
   Signed `cashout()` confirms `createDeposit`, then submits and confirms a
   method-scoped Peer Pay merchant policy for every restricted payout leg using
   the same viem wallet. This is a deliberate non-atomic follow-up with a brief
@@ -57,7 +58,10 @@ deposit-level integration share instead of applying maker L1/L2.
   `prepareAccessPolicy(depositId, paymentMethod)` for every returned method.
   Any viem EOA works; Privy is not required.
 
-- **Wise and PayPal** carry `requiresIdentityAttestation: true`. A new curator
+- **Cash App is non-chargebackable.** Cash App cash-outs stay public, do not
+  attach a Peer Pay merchant policy, and never require dispute-protection stake.
+
+- **Wise, PayPal, and Alipay** carry `requiresIdentityAttestation: true`. A new curator
   registration needs a signed maker identity attestation this SDK cannot mint
   (first-party Peer web obtains it through the Peer TEE browser extension).
   An already-registered handle can be reused with bare payee data. A new handle
@@ -114,7 +118,7 @@ const multiCurrency = await cash.cashout(
 );
 
 // Widest reach: several platforms on one order (each platform at most once);
-// the buyer picks the leg they can pay, every leg at the live oracle rate.
+// the buyer picks the leg they can pay. Read capability pricing per corridor.
 const multiPlatform = await cash.cashout(
   {
     amount: usdc(500),
@@ -186,9 +190,11 @@ const route = await cash.nearIntentsStatus({
 
 ## Rules that prevent wrong behavior
 
-- **Never promise a rate.** `estimate()` is `kind: 'oracle-estimate'`; the
-  binding rate resolves at the oracle when a buyer fills. Do not display or
-  log it as a locked price.
+- **Respect the declared binding point.** `estimate()` is
+  `kind: 'oracle-estimate'`. Its `binding` is `intent-signal` for existing
+  on-chain oracle corridors and `deposit-creation` for Alipay/CNY. Do not call
+  an estimate locked before that point. Once Alipay/CNY is prepared, its fresh
+  Chainlink snapshot is the on-chain maker floor.
 - **Do not invent an ETA.** Use `estimate().eta`: `{ seconds, label }` backed
   by the same rolling 30-day, intent-attributed pair sample as `fillStats()`,
   measured from deposit creation to first fill. Use `order.explain()` for live
@@ -271,7 +277,7 @@ Every `CashError` carries `code`, `retryable`, `remediation`. Behavior:
 | `INVALID_INTENT_AMOUNT_RANGE`           | no        | Use a positive min, max at least min, and max no greater than amount                       |
 | `INVALID_PAYOUT_CURRENCIES`             | no        | Pass one or more unique currencies listed for the platform                                 |
 | `INVALID_PAYOUT_PLATFORMS`              | no        | Pass one leg or an array of legs, using each platform at most once                         |
-| `PAYEE_VERIFICATION_REQUIRED`           | no        | Use Peer web + TEE extension for new Wise/PayPal; reuse registered handles                 |
+| `PAYEE_VERIFICATION_REQUIRED`           | no        | Use Peer web + TEE extension for new Wise/PayPal/Alipay; reuse registered handles          |
 | `PAYEE_REGISTRATION_FAILED`             | yes       | Validate against `payeeHint`, then retry                                                   |
 | `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Deprecated compatibility code; current SDK flows never emit it                             |
 | `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | Deposit exists; inspect policy tx first, attach only if needed; never repeat the cash-out. |

package/README.md

@@ -1,9 +1,11 @@
 # @zkp2p/cash
 
 Route Relay-supported EVM assets or NEAR Intents 1Click external deposits into
-Base USDC, then cash out to fiat on Venmo, Revolut, Wise, Zelle, and more at the
-live Chainlink market rate, with zero spread and no centralized off-ramp
-provider.
+Base USDC, then cash out to fiat on Venmo, Revolut, Wise, Alipay, Zelle, and
+more at a zero-spread Chainlink market rate with no centralized off-ramp
+provider. Existing corridors bind the live oracle when a buyer signals;
+Alipay/CNY fixes a fresh Ethereum Chainlink snapshot when the SDK prepares the
+deposit.
 
 Peer Cash is an **offramp-only** SDK for the [ZKP2P](https://peer.xyz)
 protocol. The cashing-out user is the maker: their USDC becomes a deposit in
@@ -46,7 +48,7 @@ const { depositId, accessPolicyTxHashes } = await cash.cashout(
   },
   { signer }, // any viem WalletClient on Base, including an EOA
 );
-// Venmo, Cash App, and PayPal return only after their access policy confirms.
+// Venmo and PayPal return only after their access policy confirms.
 console.log(depositId, accessPolicyTxHashes);
 
 // One method can offer several currencies. The buyer chooses the fill
@@ -64,7 +66,8 @@ const fastFill = await cash.cashout(
 );
 
 // One order can also offer several platforms (each at most once). The buyer
-// picks the leg they can pay; every leg fills at the live oracle market rate.
+// picks the leg they can pay. Inspect capabilities().platforms[].pricing for
+// the exact rate-binding semantics of each corridor.
 const widestReach = await cash.cashout(
   {
     amount: usdc(1000),
@@ -76,6 +79,15 @@ const widestReach = await cash.cashout(
   { signer },
 );
 
+// Alipay/CNY is the explicit creation-time exception. New Alipay payees need
+// the identity attestation prepared by first-party Peer web.
+const alipayEstimate = await cash.estimate({
+  amount: usdc(1000),
+  platform: 'alipay',
+  currency: 'CNY',
+});
+// alipayEstimate.binding === 'deposit-creation'
+
 for await (const order of cash.watch(depositId)) {
   console.log(order.state, order.explain());
   if (order.state === 'delivered') break;
@@ -86,10 +98,10 @@ for await (const order of cash.watch(depositId)) {
 
 Peer Cash and the general ZKP2P SDK serve different integration depths:
 
-| Package       | Use it when                                       | Boundary                                                                                                                                                                                  |
-| ------------- | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `@zkp2p/cash` | Cash-out is the product                           | Offramp only. The user is always the maker, the destination is Base USDC, pricing is the live Chainlink rate at fill with zero spread, and the SDK owns the resumable order lifecycle.    |
-| `@zkp2p/sdk`  | You are composing directly with the Peer protocol | General maker and taker operations, deposits, intents, proofs, quotes, vaults, rate managers, referrals, hooks, and API helpers. Your application owns the workflow and protocol choices. |
+| Package       | Use it when                                       | Boundary                                                                                                                                                                                                           |
+| ------------- | ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `@zkp2p/cash` | Cash-out is the product                           | Offramp only. The user is always the maker, the destination is Base USDC, pricing is zero-spread Chainlink (signal-time by default; creation-time for Alipay/CNY), and the SDK owns the resumable order lifecycle. |
+| `@zkp2p/sdk`  | You are composing directly with the Peer protocol | General maker and taker operations, deposits, intents, proofs, quotes, vaults, rate managers, referrals, hooks, and API helpers. Your application owns the workflow and protocol choices.                          |
 
 Peer Cash is a narrow facade over `@zkp2p/sdk`, not a replacement for it. It
 cannot express custom spreads, buyer-side proof flows, vaults, disputes, or
@@ -107,7 +119,7 @@ arbitrary protocol operations.
 | `relayStatus(requestId)`                                       | Relay request status from the Relay SDK request path                                                                            |
 | `quoteNearIntentsSource(input)`                                | Signed 1Click quote with an origin-chain deposit address and optional memo                                                      |
 | `submitNearIntentsDeposit(input)` / `nearIntentsStatus(input)` | Optionally register an origin tx, then track 1Click delivery/refund evidence                                                    |
-| `estimate({ amount, currency }, { includeEta? })`              | Base USDC oracle estimate; optionally skip the historical ETA for progressive rendering                                         |
+| `estimate({ amount, currency, platform? }, { includeEta? })`   | Base USDC market-rate estimate with an explicit `binding`; optionally skip historical ETA                                       |
 | `cashout(input, { signer })`                                   | Creates the order with any viem wallet; restricted methods then attach the Peer Pay merchant policy                             |
 | `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare external signing, resolve the deposit, then iterate `accessPolicyPaymentMethods` for follow-ups                         |
 | `prepareAccessPolicy(depositId, paymentMethod)`                | Prepare one post-deposit, method-scoped Peer Pay merchant policy transaction                                                    |
@@ -141,8 +153,9 @@ mixed historical deposit.
 
 | Payout rail           | Access-policy behavior                                                     | New payee registration                                                                 |
 | --------------------- | -------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- |
-| Venmo / Cash App      | Peer Pay merchant policy attaches for that payment method                  | Curator validates the live handle                                                      |
+| Venmo                 | Peer Pay merchant policy attaches for that payment method                  | Curator validates the live handle                                                      |
 | PayPal                | Same method-scoped Peer Pay follow-up                                      | Requires a Peer TEE browser-extension identity attestation                             |
+| Cash App              | No access-policy follow-up; non-chargebackable and no stake required       | Curator validates the live handle                                                      |
 | Wise                  | No access-policy follow-up                                                 | Requires a Peer TEE browser-extension identity attestation                             |
 | Other supported rails | No access-policy follow-up; use `capabilities()` for currencies and format | Follow the `payeeHint`; live-validation behavior is described in the integration guide |
 
@@ -152,7 +165,7 @@ EOA; no Privy wallet or signer API is required. The deprecated
 `requiresAtomicAccessPolicy` capability remains for wire compatibility and is
 always `false`.
 
-Venmo, Cash App, and PayPal cash-outs restrict intent signaling to the Peer Pay
+Venmo and PayPal cash-outs restrict intent signaling to the Peer Pay
 merchant group by default. Each restricted payout method gets its own policy.
 Signed `cashout()` creates the deposit first, then uses the same wallet to
 submit and confirm every required policy transaction; this intentionally
@@ -307,7 +320,7 @@ they are available. A source-routed result includes both a flat
   returned no hash. Treat it as potentially broadcast. Inspect recent Base
   wallet activity and the supplied recovery action before any retry.
 - `ACCESS_POLICY_CONFIGURATION_FAILED`: the deposit exists, but its required
-  Venmo, Cash App, or PayPal policy was not confirmed. Do not cash out again;
+  Venmo or PayPal policy was not confirmed. Do not cash out again;
   inspect `recovery.transactionHash` when present, then retry
   `prepareAccessPolicy(error.recovery.depositId, error.recovery.paymentMethod)`
   only if the prior policy
@@ -333,11 +346,15 @@ awaiting-buyer ──────────► matched ───────
    returned ◄─────────────────┘
 ```
 
-- **You are the maker.** Your deposit is priced by the live Chainlink oracle
-  with `spreadBps: 0`, making it the best price a rational maker can offer.
-- **There is no quote.** The binding rate resolves at the oracle when a buyer
-  fills. `estimate()` says "approximately"; nothing in this API pretends to
-  lock a price.
+- **You are the maker.** Pricing is zero-spread. Existing corridors resolve
+  from the on-chain Chainlink oracle when a buyer signals an intent.
+- **Alipay/CNY binds earlier.** Base has no CNY oracle adapter, so the SDK reads
+  Chainlink CNY/USD on Ethereum, rejects stale or invalid data, and fixes the
+  resulting CNY-per-USDC maker floor when it prepares the deposit. A buyer may
+  signal at that floor or a better rate for the maker.
+- **Read `binding`.** `estimate().binding` is `intent-signal` by default and
+  `deposit-creation` for Alipay/CNY. An estimate remains approximate until its
+  stated binding point.
 - **ETA is historical.** `estimate().eta` is just `{ seconds, label }`, backed
   by the same rolling 30-day, intent-attributed pair sampler as `fillStats()`,
   measured from deposit creation to the first fulfilled fill through the pair.

package/dist/{chunk-JRJLMQS4.js → chunk-UIELF4TY.js}

@@ -1,7 +1,7 @@
 // src/engine/constants.ts
 var BASE_CHAIN_ID = 8453;
 var BASE_USDC_ADDRESS = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
-var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "cashapp", "paypal"]);
+var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "paypal"]);
 var CASH_ACCESS_GROUP_IDS = {
   production: ["0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"],
   preproduction: ["0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"],
@@ -50,16 +50,16 @@ function isCashError(value) {
 var errors = {
   oracleUnsupportedCurrency: (currency) => new CashError({
     code: "ORACLE_UNSUPPORTED_CURRENCY",
-    message: `${currency} has no live Chainlink oracle feed; Peer Cash is market-rate only.`,
+    message: `${currency} is not available in this Peer Cash payout corridor.`,
     retryable: false,
-    remediation: `Pick a currency listed in capabilities() - each one is priced by a live oracle feed.`
+    remediation: `Pick a platform and currency listed together in capabilities().`
   }),
   oracleReadFailed: (currency, cause) => new CashError(
     {
       code: "ORACLE_READ_FAILED",
       message: `The ${currency} market-rate oracle could not be read.`,
       retryable: true,
-      remediation: `Retry the estimate shortly or use another healthy Base RPC. Do not present a cached value as a live market rate.`
+      remediation: `Retry shortly or configure a healthy RPC for this corridor. Do not present a cached value as a fresh market rate.`
     },
     { cause }
   ),

package/dist/{createCashClient-BD8YNt-E.d.cts → createCashClient-BIAuk1Qy.d.cts}

@@ -80,9 +80,9 @@ interface CashFill {
     /** Unix seconds - when the intent expired and was pruned (returned). */
     prunedAt?: number;
 }
-/** Pricing state of one payout tuple - the zero-spread claim, verifiable from indexed data. */
+/** Pricing state of one payout tuple, reconstructed from indexed data. */
 interface CashPayoutPricing {
-    /** Depositor-configured spread markup in basis points (0 for every cash order). */
+    /** Depositor-configured oracle spread in basis points (0 on oracle Cash corridors). */
     spreadBps?: number;
     /** Oracle kind, e.g. `'oracle_chainlink'`. */
     kind?: string;
@@ -92,8 +92,12 @@ interface CashPayoutPricing {
     oracleRate?: number;
     /** Unix seconds of the last accepted oracle snapshot. */
     lastOracleUpdatedAt?: number;
-    /** True when the tuple is priced by an oracle at zero spread - the Peer Cash invariant. */
+    /** True when the tuple is priced by an oracle at zero spread. */
     marketRate: boolean;
+    /** True when the maker floor was fixed from a fresh rate snapshot at deposit creation. */
+    fixedAtCreation?: boolean;
+    /** Fixed maker floor in fiat units per USDC. */
+    fixedRate?: number;
 }
 /** One payout leg reconstructed from the chain - platform, currency, payee hash, pricing. */
 interface CashPayoutInfo {
@@ -298,7 +302,7 @@ interface RelayStatus {
  *
  * Peer Cash is an async crypto→fiat offramp built on the maker/deposit side of
  * the protocol: the cashing-out user IS the maker. They create a deposit at the
- * live oracle/market rate (0% spread); a buyer (a standard taker) signals an
+ * zero-spread market rate; a buyer (a standard taker) signals an
  * intent, pays fiat, and proves it via the standard TEE-TLS flow, releasing the
  * user's crypto. The protocol is reused in its existing direction - no proof
  * inversion, no sell-side quote.
@@ -311,9 +315,8 @@ declare const BASE_USDC_ADDRESS: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 /** USDC has 6 decimals. */
 declare const USDC_DECIMALS = 6;
 /**
- * Market rate = the live Chainlink oracle with **zero spread**. The user sets no
- * rate; selling at market is the fast-fill incentive (the deposit is the best
- * deal on the book, so buyers have reason to take it quickly).
+ * Signal-time oracle corridors use zero spread. Alipay/CNY instead fixes a
+ * fresh creation-time snapshot because Base has no CNY oracle adapter.
  */
 declare const MARKET_SPREAD_BPS = 0;
 /**
@@ -469,11 +472,21 @@ declare function readNearIntentsStatus(input: NearIntentsStatusInput, options?:
 declare const MIN_CASHOUT_AMOUNT = 10000n;
 /** Recommended floor: sub-1-USDC deposits force min==max fills and starve matching. */
 declare const RECOMMENDED_MIN_CASHOUT_AMOUNT = 1000000n;
+type CashCorridorPricing = {
+    kind: 'oracle-at-intent-signal';
+    spreadBps: 0;
+} | {
+    kind: 'fixed-at-deposit-creation';
+    source: 'chainlink-ethereum';
+    spreadBps: 0;
+};
 interface CashPlatformCapability {
     /** Platform id, e.g. `'venmo'` - the value `receive.platform` accepts. */
     platform: string;
-    /** Market-rate (oracle-priced) currencies this platform can pay out. */
+    /** Supported currencies this platform can pay out. */
     currencies: CurrencyType[];
+    /** Pricing semantics for each advertised currency. */
+    pricing: Partial<Record<CurrencyType, CashCorridorPricing>>;
     /** Human hint for the payee handle format. */
     payeeHint: string;
     /**
@@ -525,9 +538,9 @@ interface CashCapabilities {
         relay?: CashSourceCapabilities;
         nearIntents?: NearIntentsSourceCapabilities;
     };
-    /** Every payout corridor: platform × oracle-priced currencies. */
+    /** Every payout corridor supported by the Cash product. */
     platforms: CashPlatformCapability[];
-    /** All oracle-priced (market-rate) currencies across platforms. */
+    /** All supported currencies across platforms. */
     currencies: CurrencyType[];
     /** Amount bounds in USDC base units. */
     amount: {
@@ -535,7 +548,7 @@ interface CashCapabilities {
         recommendedMin: bigint;
         max: null;
     };
-    /** Pricing is always the live oracle at fill time - never a committed quote. */
+    /** Default pricing for corridors without a platform-level creation-time exception. */
     pricing: {
         kind: 'oracle-market-rate';
         spreadBps: 0;
@@ -563,11 +576,11 @@ interface CashFillEta {
 
 /**
  * Estimate - currency + amount only. No payee, no side effects, no expiry,
- * idempotent, cacheable. "≈ at whatever the oracle says when a buyer fills."
+ * idempotent, cacheable.
  *
- * Reads the same Chainlink feed the protocol prices the deposit against, so
- * there is no external FX dependency. USD is a zero-address passthrough
- * (USDC ≈ USD). The binding rate resolves on-chain at fill time.
+ * Existing corridors read the same Chainlink feed the protocol uses when an
+ * intent is signaled. Alipay/CNY reads Chainlink's Ethereum feed and the SDK
+ * fixes that fresh snapshot as the maker floor when it prepares the deposit.
  */
 
 interface EstimateInput {
@@ -578,7 +591,7 @@ interface EstimateInput {
     amount: bigint;
     /** Target fiat currency. */
     currency: CurrencyType;
-    /** Optional payout platform for platform-specific fill ETA sampling. */
+    /** Optional payout platform for pricing semantics and pair-specific ETA sampling. */
     platform?: string;
     /** Optional Relay EVM source asset. Omit for the current Base USDC default path. */
     source?: RelaySourceInput & {
@@ -598,8 +611,10 @@ interface EstimateOptions {
     includeEta?: boolean;
 }
 interface CashEstimate {
-    /** Always `'oracle-estimate'` - there is no committed quote in Peer Cash. */
+    /** Always `'oracle-estimate'`; inspect `binding` for when it becomes a maker floor. */
     kind: 'oracle-estimate';
+    /** When this estimate becomes the deposit's binding maker floor. */
+    binding?: 'intent-signal' | 'deposit-creation';
     currency: CurrencyType;
     /** Base USDC amount that Peer Cash would deposit after any source routing. */
     amount: bigint;
@@ -659,10 +674,16 @@ interface CashClientOptions {
     rpcUrl?: string;
     /** Indexer URL override. */
     indexerUrl?: string;
+    /** Optional indexer API key. */
+    indexerApiKey?: string;
     /** Curator (ZKP2P API) URL override. */
     curatorUrl?: string;
     /** Optional ZKP2P API key. */
     apiKey?: string;
+    /** Ethereum transport used only to snapshot Alipay/CNY's creation-time rate. */
+    creationRateTransport?: Transport;
+    /** Convenience alternative to `creationRateTransport`. */
+    creationRateRpcUrl?: string;
     /** Relay API configuration for source assets outside Base USDC. */
     relay?: RelayOptions;
     /** NEAR Intents 1Click configuration for externally funded source routes. */
@@ -717,7 +738,8 @@ interface CashoutInput {
     /**
      * Where the fiat should arrive. One leg, or an array of legs to offer the
      * buyer several payout platforms (each platform at most once). One method
-     * may offer multiple currencies; every leg fills at the live oracle rate.
+     * may offer multiple currencies. Inspect `capabilities().platforms[].pricing`
+     * for whether a corridor binds at intent signal or deposit preparation.
      */
     receive: CashReceiveLeg | readonly [CashReceiveLeg, ...CashReceiveLeg[]];
     /** Per-order min/max override (USDC base units). */
@@ -915,4 +937,4 @@ interface CashClient {
 }
 declare function createCashClient(options: CashClientOptions): CashClient;
 
-export { MARKET_SPREAD_BPS as $, type CashClient as A, BASE_CHAIN_ID as B, type CashPayoutInfo as C, type CashClientOptions as D, type CashFillEta as E, type CashLeg as F, type CashMultiCurrencyLeg as G, type CashNextAction as H, type IntentEntity as I, type CashOrderState as J, type CashPairFillStats as K, type CashPayeeInput as L, type CashPayout as M, type NearIntentsSourceCapabilities as N, type CashPayoutPricing as O, type PrepareResult as P, type CashPlatformCapability as Q, type RelayExecutionResult as R, type CashPreparedStepKind as S, type TopUpResult as T, type CashReceiveLeg as U, type CashoutInput as V, type WithdrawResult as W, type CashoutOptions as X, type CuratorPayeeDataInput as Y, type EstimateInput as Z, type EstimateOptions as _, type CashBuyerProfile as a, MIN_CASHOUT_AMOUNT as a0, NEAR_INTENTS_API_URL as a1, NEAR_INTENTS_BASE_USDC_ASSET_ID as a2, NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS as a3, NEAR_INTENTS_STATUSES as a4, type NearIntentsClient as a5, type NearIntentsOptions as a6, type NearIntentsQuoteRequest as a7, type NearIntentsStatusCode as a8, type NearIntentsToken as a9, type NearIntentsTradeType as aa, type NearIntentsTransaction as ab, ORACLE_MIN_CONVERSION_RATE_SENTINEL as ac, type OrdersOptions as ad, type PreparedCashoutReceipt as ae, RECOMMENDED_MIN_CASHOUT_AMOUNT as af, type RelayOptions as ag, type RelayQuoteInput as ah, type RelaySourceInput as ai, type RelayTransaction as aj, type SignerOptions as ak, USDC_DECIMALS as al, type WatchOptions as am, type WithdrawOptions as an, buildCapabilities as ao, createCashClient as ap, createNearIntentsClient as aq, normalizeCashPayee as ar, quoteNearIntentsToBaseUsdc as as, readNearIntentsSourceCapabilities as at, readNearIntentsStatus as au, submitNearIntentsDeposit as av, toCashReferralAttributionCode as aw, type CashDepositInput as b, type CreateDepositParamsArg as c, type CashOrder as d, type CashFill as e, type CashCapabilities as f, type CashoutResult as g, type CashEstimate as h, type CashFillStats as i, type NearIntentsDepositInput as j, type NearIntentsQuote as k, type NearIntentsQuoteInput as l, type NearIntentsStatus as m, type NearIntentsStatusInput as n, type CashPreparedStep as o, type RelayQuote as p, type RelayStatus as q, type CashSourceCapabilities as r, BASE_USDC_ADDRESS as s, CASH_ATTRIBUTION_CODE as t, CASH_ORDER_POLL_INTERVAL_MS as u, CASH_ORDER_STATUSES as v, CASH_REFERRAL_ATTRIBUTION_PREFIX as w, CASH_RETAIN_ON_EMPTY as x, type CashAsset as y, type CashChain as z };
+export { type EstimateOptions as $, type CashClient as A, BASE_CHAIN_ID as B, type CashPayoutInfo as C, type CashClientOptions as D, type CashCorridorPricing as E, type CashFillEta as F, type CashLeg as G, type CashMultiCurrencyLeg as H, type IntentEntity as I, type CashNextAction as J, type CashOrderState as K, type CashPairFillStats as L, type CashPayeeInput as M, type NearIntentsSourceCapabilities as N, type CashPayout as O, type PrepareResult as P, type CashPayoutPricing as Q, type RelayExecutionResult as R, type CashPlatformCapability as S, type TopUpResult as T, type CashPreparedStepKind as U, type CashReceiveLeg as V, type WithdrawResult as W, type CashoutInput as X, type CashoutOptions as Y, type CuratorPayeeDataInput as Z, type EstimateInput as _, type CashBuyerProfile as a, MARKET_SPREAD_BPS as a0, MIN_CASHOUT_AMOUNT as a1, NEAR_INTENTS_API_URL as a2, NEAR_INTENTS_BASE_USDC_ASSET_ID as a3, NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS as a4, NEAR_INTENTS_STATUSES as a5, type NearIntentsClient as a6, type NearIntentsOptions as a7, type NearIntentsQuoteRequest as a8, type NearIntentsStatusCode as a9, type NearIntentsToken as aa, type NearIntentsTradeType as ab, type NearIntentsTransaction as ac, ORACLE_MIN_CONVERSION_RATE_SENTINEL as ad, type OrdersOptions as ae, type PreparedCashoutReceipt as af, RECOMMENDED_MIN_CASHOUT_AMOUNT as ag, type RelayOptions as ah, type RelayQuoteInput as ai, type RelaySourceInput as aj, type RelayTransaction as ak, type SignerOptions as al, USDC_DECIMALS as am, type WatchOptions as an, type WithdrawOptions as ao, buildCapabilities as ap, createCashClient as aq, createNearIntentsClient as ar, normalizeCashPayee as as, quoteNearIntentsToBaseUsdc as at, readNearIntentsSourceCapabilities as au, readNearIntentsStatus as av, submitNearIntentsDeposit as aw, toCashReferralAttributionCode as ax, type CashDepositInput as b, type CreateDepositParamsArg as c, type CashOrder as d, type CashFill as e, type CashCapabilities as f, type CashoutResult as g, type CashEstimate as h, type CashFillStats as i, type NearIntentsDepositInput as j, type NearIntentsQuote as k, type NearIntentsQuoteInput as l, type NearIntentsStatus as m, type NearIntentsStatusInput as n, type CashPreparedStep as o, type RelayQuote as p, type RelayStatus as q, type CashSourceCapabilities as r, BASE_USDC_ADDRESS as s, CASH_ATTRIBUTION_CODE as t, CASH_ORDER_POLL_INTERVAL_MS as u, CASH_ORDER_STATUSES as v, CASH_REFERRAL_ATTRIBUTION_PREFIX as w, CASH_RETAIN_ON_EMPTY as x, type CashAsset as y, type CashChain as z };

package/dist/{createCashClient-BD8YNt-E.d.ts → createCashClient-BIAuk1Qy.d.ts}

@@ -80,9 +80,9 @@ interface CashFill {
     /** Unix seconds - when the intent expired and was pruned (returned). */
     prunedAt?: number;
 }
-/** Pricing state of one payout tuple - the zero-spread claim, verifiable from indexed data. */
+/** Pricing state of one payout tuple, reconstructed from indexed data. */
 interface CashPayoutPricing {
-    /** Depositor-configured spread markup in basis points (0 for every cash order). */
+    /** Depositor-configured oracle spread in basis points (0 on oracle Cash corridors). */
     spreadBps?: number;
     /** Oracle kind, e.g. `'oracle_chainlink'`. */
     kind?: string;
@@ -92,8 +92,12 @@ interface CashPayoutPricing {
     oracleRate?: number;
     /** Unix seconds of the last accepted oracle snapshot. */
     lastOracleUpdatedAt?: number;
-    /** True when the tuple is priced by an oracle at zero spread - the Peer Cash invariant. */
+    /** True when the tuple is priced by an oracle at zero spread. */
     marketRate: boolean;
+    /** True when the maker floor was fixed from a fresh rate snapshot at deposit creation. */
+    fixedAtCreation?: boolean;
+    /** Fixed maker floor in fiat units per USDC. */
+    fixedRate?: number;
 }
 /** One payout leg reconstructed from the chain - platform, currency, payee hash, pricing. */
 interface CashPayoutInfo {
@@ -298,7 +302,7 @@ interface RelayStatus {
  *
  * Peer Cash is an async crypto→fiat offramp built on the maker/deposit side of
  * the protocol: the cashing-out user IS the maker. They create a deposit at the
- * live oracle/market rate (0% spread); a buyer (a standard taker) signals an
+ * zero-spread market rate; a buyer (a standard taker) signals an
  * intent, pays fiat, and proves it via the standard TEE-TLS flow, releasing the
  * user's crypto. The protocol is reused in its existing direction - no proof
  * inversion, no sell-side quote.
@@ -311,9 +315,8 @@ declare const BASE_USDC_ADDRESS: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 /** USDC has 6 decimals. */
 declare const USDC_DECIMALS = 6;
 /**
- * Market rate = the live Chainlink oracle with **zero spread**. The user sets no
- * rate; selling at market is the fast-fill incentive (the deposit is the best
- * deal on the book, so buyers have reason to take it quickly).
+ * Signal-time oracle corridors use zero spread. Alipay/CNY instead fixes a
+ * fresh creation-time snapshot because Base has no CNY oracle adapter.
  */
 declare const MARKET_SPREAD_BPS = 0;
 /**
@@ -469,11 +472,21 @@ declare function readNearIntentsStatus(input: NearIntentsStatusInput, options?:
 declare const MIN_CASHOUT_AMOUNT = 10000n;
 /** Recommended floor: sub-1-USDC deposits force min==max fills and starve matching. */
 declare const RECOMMENDED_MIN_CASHOUT_AMOUNT = 1000000n;
+type CashCorridorPricing = {
+    kind: 'oracle-at-intent-signal';
+    spreadBps: 0;
+} | {
+    kind: 'fixed-at-deposit-creation';
+    source: 'chainlink-ethereum';
+    spreadBps: 0;
+};
 interface CashPlatformCapability {
     /** Platform id, e.g. `'venmo'` - the value `receive.platform` accepts. */
     platform: string;
-    /** Market-rate (oracle-priced) currencies this platform can pay out. */
+    /** Supported currencies this platform can pay out. */
     currencies: CurrencyType[];
+    /** Pricing semantics for each advertised currency. */
+    pricing: Partial<Record<CurrencyType, CashCorridorPricing>>;
     /** Human hint for the payee handle format. */
     payeeHint: string;
     /**
@@ -525,9 +538,9 @@ interface CashCapabilities {
         relay?: CashSourceCapabilities;
         nearIntents?: NearIntentsSourceCapabilities;
     };
-    /** Every payout corridor: platform × oracle-priced currencies. */
+    /** Every payout corridor supported by the Cash product. */
     platforms: CashPlatformCapability[];
-    /** All oracle-priced (market-rate) currencies across platforms. */
+    /** All supported currencies across platforms. */
     currencies: CurrencyType[];
     /** Amount bounds in USDC base units. */
     amount: {
@@ -535,7 +548,7 @@ interface CashCapabilities {
         recommendedMin: bigint;
         max: null;
     };
-    /** Pricing is always the live oracle at fill time - never a committed quote. */
+    /** Default pricing for corridors without a platform-level creation-time exception. */
     pricing: {
         kind: 'oracle-market-rate';
         spreadBps: 0;
@@ -563,11 +576,11 @@ interface CashFillEta {
 
 /**
  * Estimate - currency + amount only. No payee, no side effects, no expiry,
- * idempotent, cacheable. "≈ at whatever the oracle says when a buyer fills."
+ * idempotent, cacheable.
  *
- * Reads the same Chainlink feed the protocol prices the deposit against, so
- * there is no external FX dependency. USD is a zero-address passthrough
- * (USDC ≈ USD). The binding rate resolves on-chain at fill time.
+ * Existing corridors read the same Chainlink feed the protocol uses when an
+ * intent is signaled. Alipay/CNY reads Chainlink's Ethereum feed and the SDK
+ * fixes that fresh snapshot as the maker floor when it prepares the deposit.
  */
 
 interface EstimateInput {
@@ -578,7 +591,7 @@ interface EstimateInput {
     amount: bigint;
     /** Target fiat currency. */
     currency: CurrencyType;
-    /** Optional payout platform for platform-specific fill ETA sampling. */
+    /** Optional payout platform for pricing semantics and pair-specific ETA sampling. */
     platform?: string;
     /** Optional Relay EVM source asset. Omit for the current Base USDC default path. */
     source?: RelaySourceInput & {
@@ -598,8 +611,10 @@ interface EstimateOptions {
     includeEta?: boolean;
 }
 interface CashEstimate {
-    /** Always `'oracle-estimate'` - there is no committed quote in Peer Cash. */
+    /** Always `'oracle-estimate'`; inspect `binding` for when it becomes a maker floor. */
     kind: 'oracle-estimate';
+    /** When this estimate becomes the deposit's binding maker floor. */
+    binding?: 'intent-signal' | 'deposit-creation';
     currency: CurrencyType;
     /** Base USDC amount that Peer Cash would deposit after any source routing. */
     amount: bigint;
@@ -659,10 +674,16 @@ interface CashClientOptions {
     rpcUrl?: string;
     /** Indexer URL override. */
     indexerUrl?: string;
+    /** Optional indexer API key. */
+    indexerApiKey?: string;
     /** Curator (ZKP2P API) URL override. */
     curatorUrl?: string;
     /** Optional ZKP2P API key. */
     apiKey?: string;
+    /** Ethereum transport used only to snapshot Alipay/CNY's creation-time rate. */
+    creationRateTransport?: Transport;
+    /** Convenience alternative to `creationRateTransport`. */
+    creationRateRpcUrl?: string;
     /** Relay API configuration for source assets outside Base USDC. */
     relay?: RelayOptions;
     /** NEAR Intents 1Click configuration for externally funded source routes. */
@@ -717,7 +738,8 @@ interface CashoutInput {
     /**
      * Where the fiat should arrive. One leg, or an array of legs to offer the
      * buyer several payout platforms (each platform at most once). One method
-     * may offer multiple currencies; every leg fills at the live oracle rate.
+     * may offer multiple currencies. Inspect `capabilities().platforms[].pricing`
+     * for whether a corridor binds at intent signal or deposit preparation.
      */
     receive: CashReceiveLeg | readonly [CashReceiveLeg, ...CashReceiveLeg[]];
     /** Per-order min/max override (USDC base units). */
@@ -915,4 +937,4 @@ interface CashClient {
 }
 declare function createCashClient(options: CashClientOptions): CashClient;
 
-export { MARKET_SPREAD_BPS as $, type CashClient as A, BASE_CHAIN_ID as B, type CashPayoutInfo as C, type CashClientOptions as D, type CashFillEta as E, type CashLeg as F, type CashMultiCurrencyLeg as G, type CashNextAction as H, type IntentEntity as I, type CashOrderState as J, type CashPairFillStats as K, type CashPayeeInput as L, type CashPayout as M, type NearIntentsSourceCapabilities as N, type CashPayoutPricing as O, type PrepareResult as P, type CashPlatformCapability as Q, type RelayExecutionResult as R, type CashPreparedStepKind as S, type TopUpResult as T, type CashReceiveLeg as U, type CashoutInput as V, type WithdrawResult as W, type CashoutOptions as X, type CuratorPayeeDataInput as Y, type EstimateInput as Z, type EstimateOptions as _, type CashBuyerProfile as a, MIN_CASHOUT_AMOUNT as a0, NEAR_INTENTS_API_URL as a1, NEAR_INTENTS_BASE_USDC_ASSET_ID as a2, NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS as a3, NEAR_INTENTS_STATUSES as a4, type NearIntentsClient as a5, type NearIntentsOptions as a6, type NearIntentsQuoteRequest as a7, type NearIntentsStatusCode as a8, type NearIntentsToken as a9, type NearIntentsTradeType as aa, type NearIntentsTransaction as ab, ORACLE_MIN_CONVERSION_RATE_SENTINEL as ac, type OrdersOptions as ad, type PreparedCashoutReceipt as ae, RECOMMENDED_MIN_CASHOUT_AMOUNT as af, type RelayOptions as ag, type RelayQuoteInput as ah, type RelaySourceInput as ai, type RelayTransaction as aj, type SignerOptions as ak, USDC_DECIMALS as al, type WatchOptions as am, type WithdrawOptions as an, buildCapabilities as ao, createCashClient as ap, createNearIntentsClient as aq, normalizeCashPayee as ar, quoteNearIntentsToBaseUsdc as as, readNearIntentsSourceCapabilities as at, readNearIntentsStatus as au, submitNearIntentsDeposit as av, toCashReferralAttributionCode as aw, type CashDepositInput as b, type CreateDepositParamsArg as c, type CashOrder as d, type CashFill as e, type CashCapabilities as f, type CashoutResult as g, type CashEstimate as h, type CashFillStats as i, type NearIntentsDepositInput as j, type NearIntentsQuote as k, type NearIntentsQuoteInput as l, type NearIntentsStatus as m, type NearIntentsStatusInput as n, type CashPreparedStep as o, type RelayQuote as p, type RelayStatus as q, type CashSourceCapabilities as r, BASE_USDC_ADDRESS as s, CASH_ATTRIBUTION_CODE as t, CASH_ORDER_POLL_INTERVAL_MS as u, CASH_ORDER_STATUSES as v, CASH_REFERRAL_ATTRIBUTION_PREFIX as w, CASH_RETAIN_ON_EMPTY as x, type CashAsset as y, type CashChain as z };
+export { type EstimateOptions as $, type CashClient as A, BASE_CHAIN_ID as B, type CashPayoutInfo as C, type CashClientOptions as D, type CashCorridorPricing as E, type CashFillEta as F, type CashLeg as G, type CashMultiCurrencyLeg as H, type IntentEntity as I, type CashNextAction as J, type CashOrderState as K, type CashPairFillStats as L, type CashPayeeInput as M, type NearIntentsSourceCapabilities as N, type CashPayout as O, type PrepareResult as P, type CashPayoutPricing as Q, type RelayExecutionResult as R, type CashPlatformCapability as S, type TopUpResult as T, type CashPreparedStepKind as U, type CashReceiveLeg as V, type WithdrawResult as W, type CashoutInput as X, type CashoutOptions as Y, type CuratorPayeeDataInput as Z, type EstimateInput as _, type CashBuyerProfile as a, MARKET_SPREAD_BPS as a0, MIN_CASHOUT_AMOUNT as a1, NEAR_INTENTS_API_URL as a2, NEAR_INTENTS_BASE_USDC_ASSET_ID as a3, NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS as a4, NEAR_INTENTS_STATUSES as a5, type NearIntentsClient as a6, type NearIntentsOptions as a7, type NearIntentsQuoteRequest as a8, type NearIntentsStatusCode as a9, type NearIntentsToken as aa, type NearIntentsTradeType as ab, type NearIntentsTransaction as ac, ORACLE_MIN_CONVERSION_RATE_SENTINEL as ad, type OrdersOptions as ae, type PreparedCashoutReceipt as af, RECOMMENDED_MIN_CASHOUT_AMOUNT as ag, type RelayOptions as ah, type RelayQuoteInput as ai, type RelaySourceInput as aj, type RelayTransaction as ak, type SignerOptions as al, USDC_DECIMALS as am, type WatchOptions as an, type WithdrawOptions as ao, buildCapabilities as ap, createCashClient as aq, createNearIntentsClient as ar, normalizeCashPayee as as, quoteNearIntentsToBaseUsdc as at, readNearIntentsSourceCapabilities as au, readNearIntentsStatus as av, submitNearIntentsDeposit as aw, toCashReferralAttributionCode as ax, type CashDepositInput as b, type CreateDepositParamsArg as c, type CashOrder as d, type CashFill as e, type CashCapabilities as f, type CashoutResult as g, type CashEstimate as h, type CashFillStats as i, type NearIntentsDepositInput as j, type NearIntentsQuote as k, type NearIntentsQuoteInput as l, type NearIntentsStatus as m, type NearIntentsStatusInput as n, type CashPreparedStep as o, type RelayQuote as p, type RelayStatus as q, type CashSourceCapabilities as r, BASE_USDC_ADDRESS as s, CASH_ATTRIBUTION_CODE as t, CASH_ORDER_POLL_INTERVAL_MS as u, CASH_ORDER_STATUSES as v, CASH_REFERRAL_ATTRIBUTION_PREFIX as w, CASH_RETAIN_ON_EMPTY as x, type CashAsset as y, type CashChain as z };