@zkp2p/cash 0.4.2 → 0.4.4

package/README.md

@@ -141,8 +141,9 @@ console.log(source?.transactions?.origin, source?.transactions?.destination);
 | `quoteSource(input)` / `executeSourceQuote(quote, { signer })` | Relay SDK EVM source routing into Base USDC before cashout                                                                      |
 | `relayStatus(requestId)`                                       | Relay request status from the Relay SDK request path                                                                            |
 | `estimate({ amount, currency }, { includeEta? })`              | Base USDC oracle estimate; optionally skip the historical ETA for progressive rendering                                         |
-| `cashout(input, { signer })`                                   | Registers your payee, creates the protocol-held order, returns the `depositId`                                                  |
+| `cashout(input, { signer })`                                   | Registers the payee and creates the order; Venmo, Cash App, and PayPal also confirm the required four-group access policy       |
 | `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare external signing, then resolve the confirmed createDeposit receipt into a resumable result                              |
+| `prepareAccessPolicy(depositId)`                               | Prepare the required Plus, Pro, Peer Makers, and Peer Pay follow-up for an externally signed restricted-rail cash-out           |
 | `order(depositId)` / `orders(owner)`                           | Resume any order from its id alone; list all orders for a wallet                                                                |
 | `watch(depositId)`                                             | Async iterator: yields on every state change until terminal, abort, or timeout                                                  |
 | `withdraw(depositId, { signer, amount? })`                     | The ONE unwind verb - partial with an `amount` (live intents don't block it), full close without (prunes expired intents first) |
@@ -164,6 +165,14 @@ Peer Cash transaction, including approves, carries ERC-8021 attribution:
 `peer-cash` first, optional `peer-ref-XXXXXX` from `referralCode` next, and your
 analytics-only `referrer` code(s) after it.
 
+Signer-backed Venmo, Cash App, and PayPal cash-outs require one additional
+wallet transaction after deposit creation. The SDK configures Plus, Pro, Peer
+Makers, and Peer Pay using the canonical group IDs for the selected environment
+and returns only after that policy transaction confirms. Its hash is available
+as `accessPolicyTxHash`. If configuration cannot be confirmed, the SDK throws
+`ACCESS_POLICY_CONFIGURATION_FAILED` with the already-created `depositId` and
+exact `groupIds`; never repeat `cashout()` for that error.
+
 ```ts
 const prepared = await cash.prepare({
   amount: 5_000_000n,
@@ -184,6 +193,9 @@ for (const [index, transaction] of prepared.txs.entries()) {
 if (!createDepositReceipt) throw new Error('createDeposit receipt missing');
 
 const result = cash.finalizePreparedCashout(createDepositReceipt);
+if (prepared.accessPolicyRequired) {
+  await externalRuntime.sendAndWait(cash.prepareAccessPolicy(result.depositId));
+}
 await persistDepositId(result.depositId);
 const liveOrder = await cash.order(result.depositId);
 ```

package/dist/{chunk-EIEGWWNX.js → chunk-ORCJKOT6.js}

@@ -1,6 +1,28 @@
 // src/engine/constants.ts
 var BASE_CHAIN_ID = 8453;
 var BASE_USDC_ADDRESS = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
+var CASH_INTENT_GUARDIAN_ADDRESS = "0x83671606454fA72ba1e2831E18C5090D25629414";
+var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "cashapp", "paypal"]);
+var CASH_ACCESS_GROUP_IDS = {
+  production: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  preproduction: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  staging: [
+    "0xf6133c227eab8ae7da1ee143945bf7f31204394f3ba801dc9691f8af6ca8efa5",
+    "0xa6beb459bc621e7b050e431736c1c3298da26356d7095719185e859d68f70d9e",
+    "0x9cded1332f25c3ee0a9a822a4c827d3fbd081a8d7b2ba39c49917ec1983b8d6c",
+    "0xc82c20c00033046a2f017b65532d7148a337282f17c73296663a530e49ba00f7"
+  ]
+};
 var USDC_DECIMALS = 6;
 var MARKET_SPREAD_BPS = 0;
 var ORACLE_MIN_CONVERSION_RATE_SENTINEL = 1n;
@@ -378,6 +400,21 @@ var errors = {
     },
     { cause }
   ),
+  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+    {
+      code: "ACCESS_POLICY_CONFIGURATION_FAILED",
+      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      retryable: false,
+      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      recovery: {
+        kind: "configure-cashout-access-policy",
+        depositId,
+        groupIds: [...groupIds],
+        ...transactionHash ? { transactionHash } : {}
+      }
+    },
+    { cause }
+  ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",
     message: `The escrow contract is paused; deposits are temporarily disabled.`,
@@ -445,4 +482,4 @@ function isUserRejectedError(value) {
   return text.some(hasUserRejectionText);
 }
 
-export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError, mapChainError };
+export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ACCESS_GROUP_IDS, CASH_INTENT_GUARDIAN_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RESTRICTED_PLATFORMS, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError, mapChainError };

package/dist/{createCashClient-CYSM84-K.d.cts → createCashClient-C5YKh7cv.d.cts}

@@ -582,6 +582,8 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
+    /** Confirmed policy transaction for Venmo, Cash App, or PayPal cash-outs. */
+    accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
         /** Conservative Base USDC amount deposited (Relay's guaranteed minimum output). */
@@ -608,6 +610,8 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
+    /** Submit `prepareAccessPolicy(depositId)` after creation when true. */
+    accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
 interface PreparedCashoutReceipt {
@@ -670,6 +674,8 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
+    /** Prepare the required four-group policy for an externally created cash-out. */
+    prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;
     /**

package/dist/{createCashClient-CYSM84-K.d.ts → createCashClient-C5YKh7cv.d.ts}

@@ -582,6 +582,8 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
+    /** Confirmed policy transaction for Venmo, Cash App, or PayPal cash-outs. */
+    accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
         /** Conservative Base USDC amount deposited (Relay's guaranteed minimum output). */
@@ -608,6 +610,8 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
+    /** Submit `prepareAccessPolicy(depositId)` after creation when true. */
+    accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
 interface PreparedCashoutReceipt {
@@ -670,6 +674,8 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
+    /** Prepare the required four-group policy for an externally created cash-out. */
+    prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;
     /**

package/dist/index.cjs

@@ -12,6 +12,28 @@ var zod = require('zod');
 // src/engine/constants.ts
 var BASE_CHAIN_ID = 8453;
 var BASE_USDC_ADDRESS = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
+var CASH_INTENT_GUARDIAN_ADDRESS = "0x83671606454fA72ba1e2831E18C5090D25629414";
+var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "cashapp", "paypal"]);
+var CASH_ACCESS_GROUP_IDS = {
+  production: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  preproduction: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  staging: [
+    "0xf6133c227eab8ae7da1ee143945bf7f31204394f3ba801dc9691f8af6ca8efa5",
+    "0xa6beb459bc621e7b050e431736c1c3298da26356d7095719185e859d68f70d9e",
+    "0x9cded1332f25c3ee0a9a822a4c827d3fbd081a8d7b2ba39c49917ec1983b8d6c",
+    "0xc82c20c00033046a2f017b65532d7148a337282f17c73296663a530e49ba00f7"
+  ]
+};
 var USDC_DECIMALS = 6;
 var MARKET_SPREAD_BPS = 0;
 var ORACLE_MIN_CONVERSION_RATE_SENTINEL = 1n;
@@ -121,6 +143,7 @@ async function prepareCashDepositParams(client, input, adapters) {
     paymentMethodsOverride,
     paymentMethodDataOverride,
     currenciesOverride,
+    intentGuardian: CASH_INTENT_GUARDIAN_ADDRESS,
     retainOnEmpty: CASH_RETAIN_ON_EMPTY
   };
 }
@@ -859,6 +882,21 @@ var errors = {
     },
     { cause }
   ),
+  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+    {
+      code: "ACCESS_POLICY_CONFIGURATION_FAILED",
+      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      retryable: false,
+      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      recovery: {
+        kind: "configure-cashout-access-policy",
+        depositId,
+        groupIds: [...groupIds],
+        ...transactionHash ? { transactionHash } : {}
+      }
+    },
+    { cause }
+  ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",
     message: `The escrow contract is paused; deposits are temporarily disabled.`,
@@ -2113,6 +2151,64 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
+  async function configureCashoutAccess(client, signer, depositInput, depositId) {
+    if (!depositInput.payouts.some(
+      (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
+    )) {
+      return void 0;
+    }
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    const prepared = prepareCashoutAccess(depositId, client);
+    let hash;
+    try {
+      hash = await signer.sendTransaction({
+        account: signer.account,
+        chain: signer.chain,
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value
+      });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err);
+    }
+    let receipt;
+    try {
+      receipt = await client.publicClient.waitForTransactionReceipt({ hash });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err, hash);
+    }
+    if (receipt.status === "reverted") {
+      throw errors.accessPolicyConfigurationFailed(
+        depositId,
+        groupIds,
+        errors.transactionFailed(hash),
+        hash
+      );
+    }
+    return hash;
+  }
+  function prepareCashoutAccess(depositId, client = readClient) {
+    const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    try {
+      const prepared = client.accessPolicy.prepareConfigureDeposit({
+        escrow: escrowAddress,
+        depositId: onchainDepositId,
+        enabled: true,
+        groupIds,
+        takers: [],
+        txOverrides: attribution
+      });
+      return {
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value,
+        chainId: prepared.chainId
+      };
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(compositeId, groupIds, err);
+    }
+  }
   return {
     capabilities,
     async sourceCapabilities() {
@@ -2247,6 +2343,12 @@ function createCashClient(options) {
         const abi2 = client.escrowV2Abi ?? client.escrowAbi;
         const resolved2 = resolveCashDepositId({ logs: receipt2.logs, abi: abi2 });
         if (!resolved2) throw errors.depositResolutionFailed(hash2);
+        const accessPolicyTxHash2 = await configureCashoutAccess(
+          client,
+          opts.signer,
+          depositInput2,
+          resolved2.compositeId
+        );
         const order2 = deriveCashOrder(resolved2.compositeId, [], {
           remainingAmount: depositInput2.amount,
           status: "ACTIVE"
@@ -2257,6 +2359,7 @@ function createCashClient(options) {
           escrowAddress: resolved2.escrowAddress,
           onchainDepositId: resolved2.onchainDepositId,
           order: order2,
+          ...accessPolicyTxHash2 ? { accessPolicyTxHash: accessPolicyTxHash2 } : {},
           source: routedSource
         };
       }
@@ -2301,6 +2404,12 @@ function createCashClient(options) {
       const abi = client.escrowV2Abi ?? client.escrowAbi;
       const resolved = resolveCashDepositId({ logs: receipt.logs, abi });
       if (!resolved) throw errors.depositResolutionFailed(hash);
+      const accessPolicyTxHash = await configureCashoutAccess(
+        client,
+        opts.signer,
+        depositInput,
+        resolved.compositeId
+      );
       const order = deriveCashOrder(resolved.compositeId, [], {
         remainingAmount: depositInput.amount,
         status: "ACTIVE"
@@ -2311,6 +2420,7 @@ function createCashClient(options) {
         escrowAddress: resolved.escrowAddress,
         onchainDepositId: resolved.onchainDepositId,
         order,
+        ...accessPolicyTxHash ? { accessPolicyTxHash } : {},
         ...sourceResult ? { source: sourceResult } : {}
       };
     },
@@ -2348,7 +2458,10 @@ function createCashClient(options) {
             description: "Create the protocol-held cash-out order."
           }
         ],
-        register: { hashedOnchainIds }
+        register: { hashedOnchainIds },
+        accessPolicyRequired: depositInput.payouts.some(
+          (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
+        )
       };
     },
     finalizePreparedCashout(receipt) {
@@ -2377,6 +2490,7 @@ function createCashClient(options) {
         })
       };
     },
+    prepareAccessPolicy: prepareCashoutAccess,
     async order(depositId) {
       return fetchOrder(depositId);
     },
@@ -2831,6 +2945,7 @@ var cashoutResultJsonSchema = zod.z.object({
   escrowAddress: zod.z.string(),
   onchainDepositId: nonNegativeBigintString,
   order: cashOrderJsonSchema,
+  accessPolicyTxHash: zod.z.string().optional(),
   source: zod.z.object({
     amount: nonNegativeBigintString,
     requestId: zod.z.string().optional(),
@@ -2841,7 +2956,8 @@ var cashoutResultJsonSchema = zod.z.object({
 var prepareResultJsonSchema = zod.z.object({
   txs: zod.z.array(preparedTransactionJsonSchema),
   steps: zod.z.array(cashPreparedStepJsonSchema),
-  register: zod.z.object({ hashedOnchainIds: zod.z.array(zod.z.string()) })
+  register: zod.z.object({ hashedOnchainIds: zod.z.array(zod.z.string()) }),
+  accessPolicyRequired: zod.z.boolean()
 });
 var withdrawResultJsonSchema = zod.z.object({
   depositId: zod.z.string(),
@@ -2919,6 +3035,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "SOURCE_CASHOUT_SUBMISSION_UNKNOWN",
   "SOURCE_CASHOUT_STATUS_UNKNOWN",
   "DEPOSIT_RESOLUTION_FAILED",
+  "ACCESS_POLICY_CONFIGURATION_FAILED",
   "ALLOWANCE_NOT_VISIBLE",
   "SIGNER_REQUIRED",
   "SIGNER_CHAIN_MISMATCH",
@@ -2964,6 +3081,12 @@ var cashErrorRecoveryJsonSchema = zod.z.discriminatedUnion("kind", [
     kind: zod.z.literal("inspect-base-transaction"),
     transactionHash: zod.z.string(),
     operation: zod.z.string()
+  }).strict(),
+  zod.z.object({
+    kind: zod.z.literal("configure-cashout-access-policy"),
+    depositId: zod.z.string(),
+    groupIds: zod.z.array(zod.z.string()),
+    transactionHash: zod.z.string().optional()
   }).strict()
 ]);
 var cashErrorJsonSchema = zod.z.object({
@@ -3221,6 +3344,7 @@ function cashoutResultToJson(result) {
     escrowAddress: result.escrowAddress,
     onchainDepositId: result.onchainDepositId.toString(),
     order: orderToJson(result.order),
+    accessPolicyTxHash: result.accessPolicyTxHash,
     source: result.source ? {
       ...result.source,
       amount: result.source.amount.toString()
@@ -3235,6 +3359,7 @@ function cashoutResultFromJson(json) {
     escrowAddress: parsed.escrowAddress,
     onchainDepositId: BigInt(parsed.onchainDepositId),
     order: orderFromJson(parsed.order),
+    accessPolicyTxHash: parsed.accessPolicyTxHash,
     source: parsed.source ? {
       ...parsed.source,
       amount: BigInt(parsed.source.amount)
@@ -3245,7 +3370,8 @@ function prepareResultToJson(result) {
   return {
     txs: result.txs.map(preparedTxToJson),
     steps: result.steps.map(preparedStepToJson),
-    register: result.register
+    register: result.register,
+    accessPolicyRequired: result.accessPolicyRequired
   };
 }
 function prepareResultFromJson(json) {
@@ -3253,7 +3379,8 @@ function prepareResultFromJson(json) {
   return {
     txs: parsed.txs.map(preparedTxFromJson),
     steps: parsed.steps.map(preparedStepFromJson),
-    register: parsed.register
+    register: parsed.register,
+    accessPolicyRequired: parsed.accessPolicyRequired
   };
 }
 function withdrawResultToJson(result) {
@@ -3333,6 +3460,13 @@ function cashErrorFromJson(json) {
         transactionHash: parsed.recovery.transactionHash,
         operation: parsed.recovery.operation
       };
+    } else if (parsed.recovery.kind === "configure-cashout-access-policy") {
+      recovery = {
+        kind: parsed.recovery.kind,
+        depositId: parsed.recovery.depositId,
+        groupIds: parsed.recovery.groupIds,
+        ...parsed.recovery.transactionHash !== void 0 ? { transactionHash: parsed.recovery.transactionHash } : {}
+      };
     } else if (parsed.recovery.kind === "inspect-base-operation-submission") {
       recovery = {
         kind: parsed.recovery.kind,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-CYSM84-K.cjs';
-export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-CYSM84-K.cjs';
+import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-C5YKh7cv.cjs';
+export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-C5YKh7cv.cjs';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';
@@ -10,7 +10,7 @@ import '@relayprotocol/relay-sdk';
  * Typed errors - every failure carries a `code`, whether it is `retryable`,
  * and a `remediation` sentence so agents can self-drive recovery.
  */
-type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
+type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
 interface CashErrorShape {
     code: CashErrorCode;
     message: string;
@@ -56,6 +56,11 @@ type CashErrorRecovery = (CashSourceRecoveryBase & {
     kind: 'inspect-base-transaction';
     transactionHash: string;
     operation: string;
+} | {
+    kind: 'configure-cashout-access-policy';
+    depositId: string;
+    groupIds: string[];
+    transactionHash?: string;
 };
 declare class CashError extends Error implements CashErrorShape {
     readonly code: CashErrorCode;
@@ -130,6 +135,7 @@ declare const errors: {
     transactionRejected: (verb: string, cause?: unknown) => CashError;
     transactionSubmissionUnknown: (operation: string, cause?: unknown, recovery?: CashErrorRecovery) => CashError;
     transactionStatusUnknown: (txHash: string, cause?: unknown, operation?: string) => CashError;
+    accessPolicyConfigurationFailed: (depositId: string, groupIds: readonly string[], cause?: unknown, transactionHash?: string) => CashError;
     escrowPaused: () => CashError;
     /** Generic fallback for an on-chain call that failed for an unrecognized reason. */
     chainCallFailed: (verb: string, cause?: unknown) => CashError;
@@ -1994,6 +2000,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         intentCount?: number | undefined;
         withdrawn?: boolean | undefined;
     }>;
+    accessPolicyTxHash: z.ZodOptional<z.ZodString>;
     source: z.ZodOptional<z.ZodObject<{
         amount: z.ZodString;
         requestId: z.ZodOptional<z.ZodString>;
@@ -2158,6 +2165,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         } | undefined;
         requestId?: string | undefined;
     } | undefined;
+    accessPolicyTxHash?: string | undefined;
 }, {
     depositId: string;
     escrowAddress: string;
@@ -2235,6 +2243,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         } | undefined;
         requestId?: string | undefined;
     } | undefined;
+    accessPolicyTxHash?: string | undefined;
 }>;
 declare const prepareResultJsonSchema: z.ZodObject<{
     txs: z.ZodArray<z.ZodObject<{
@@ -2270,6 +2279,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     }, {
         hashedOnchainIds: string[];
     }>;
+    accessPolicyRequired: z.ZodBoolean;
 }, "strip", z.ZodTypeAny, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2284,6 +2294,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     register: {
         hashedOnchainIds: string[];
     };
+    accessPolicyRequired: boolean;
 }, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2298,6 +2309,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     register: {
         hashedOnchainIds: string[];
     };
+    accessPolicyRequired: boolean;
 }>;
 declare const withdrawResultJsonSchema: z.ZodObject<{
     depositId: z.ZodString;
@@ -3184,9 +3196,24 @@ declare const cashErrorRecoveryJsonSchema: z.ZodDiscriminatedUnion<"kind", [z.Zo
     kind: "inspect-base-transaction";
     transactionHash: string;
     operation: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"configure-cashout-access-policy">;
+    depositId: z.ZodString;
+    groupIds: z.ZodArray<z.ZodString, "many">;
+    transactionHash: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    depositId: string;
+    kind: "configure-cashout-access-policy";
+    groupIds: string[];
+    transactionHash?: string | undefined;
+}, {
+    depositId: string;
+    kind: "configure-cashout-access-policy";
+    groupIds: string[];
+    transactionHash?: string | undefined;
 }>]>;
 declare const cashErrorJsonSchema: z.ZodObject<{
-    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
+    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
     message: z.ZodString;
     retryable: z.ZodBoolean;
     remediation: z.ZodString;
@@ -3570,10 +3597,25 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"configure-cashout-access-policy">;
+        depositId: z.ZodString;
+        groupIds: z.ZodArray<z.ZodString, "many">;
+        transactionHash: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
+    }, {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     }>]>>;
 }, "strict", z.ZodTypeAny, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3652,10 +3694,15 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    } | {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     } | undefined;
 }, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3734,6 +3781,11 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    } | {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     } | undefined;
 }>;
 type CashOrderJson = z.infer<typeof cashOrderJsonSchema>;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-CYSM84-K.js';
-export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-CYSM84-K.js';
+import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-C5YKh7cv.js';
+export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-C5YKh7cv.js';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';
@@ -10,7 +10,7 @@ import '@relayprotocol/relay-sdk';
  * Typed errors - every failure carries a `code`, whether it is `retryable`,
  * and a `remediation` sentence so agents can self-drive recovery.
  */
-type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
+type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
 interface CashErrorShape {
     code: CashErrorCode;
     message: string;
@@ -56,6 +56,11 @@ type CashErrorRecovery = (CashSourceRecoveryBase & {
     kind: 'inspect-base-transaction';
     transactionHash: string;
     operation: string;
+} | {
+    kind: 'configure-cashout-access-policy';
+    depositId: string;
+    groupIds: string[];
+    transactionHash?: string;
 };
 declare class CashError extends Error implements CashErrorShape {
     readonly code: CashErrorCode;
@@ -130,6 +135,7 @@ declare const errors: {
     transactionRejected: (verb: string, cause?: unknown) => CashError;
     transactionSubmissionUnknown: (operation: string, cause?: unknown, recovery?: CashErrorRecovery) => CashError;
     transactionStatusUnknown: (txHash: string, cause?: unknown, operation?: string) => CashError;
+    accessPolicyConfigurationFailed: (depositId: string, groupIds: readonly string[], cause?: unknown, transactionHash?: string) => CashError;
     escrowPaused: () => CashError;
     /** Generic fallback for an on-chain call that failed for an unrecognized reason. */
     chainCallFailed: (verb: string, cause?: unknown) => CashError;
@@ -1994,6 +2000,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         intentCount?: number | undefined;
         withdrawn?: boolean | undefined;
     }>;
+    accessPolicyTxHash: z.ZodOptional<z.ZodString>;
     source: z.ZodOptional<z.ZodObject<{
         amount: z.ZodString;
         requestId: z.ZodOptional<z.ZodString>;
@@ -2158,6 +2165,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         } | undefined;
         requestId?: string | undefined;
     } | undefined;
+    accessPolicyTxHash?: string | undefined;
 }, {
     depositId: string;
     escrowAddress: string;
@@ -2235,6 +2243,7 @@ declare const cashoutResultJsonSchema: z.ZodObject<{
         } | undefined;
         requestId?: string | undefined;
     } | undefined;
+    accessPolicyTxHash?: string | undefined;
 }>;
 declare const prepareResultJsonSchema: z.ZodObject<{
     txs: z.ZodArray<z.ZodObject<{
@@ -2270,6 +2279,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     }, {
         hashedOnchainIds: string[];
     }>;
+    accessPolicyRequired: z.ZodBoolean;
 }, "strip", z.ZodTypeAny, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2284,6 +2294,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     register: {
         hashedOnchainIds: string[];
     };
+    accessPolicyRequired: boolean;
 }, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2298,6 +2309,7 @@ declare const prepareResultJsonSchema: z.ZodObject<{
     register: {
         hashedOnchainIds: string[];
     };
+    accessPolicyRequired: boolean;
 }>;
 declare const withdrawResultJsonSchema: z.ZodObject<{
     depositId: z.ZodString;
@@ -3184,9 +3196,24 @@ declare const cashErrorRecoveryJsonSchema: z.ZodDiscriminatedUnion<"kind", [z.Zo
     kind: "inspect-base-transaction";
     transactionHash: string;
     operation: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"configure-cashout-access-policy">;
+    depositId: z.ZodString;
+    groupIds: z.ZodArray<z.ZodString, "many">;
+    transactionHash: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    depositId: string;
+    kind: "configure-cashout-access-policy";
+    groupIds: string[];
+    transactionHash?: string | undefined;
+}, {
+    depositId: string;
+    kind: "configure-cashout-access-policy";
+    groupIds: string[];
+    transactionHash?: string | undefined;
 }>]>;
 declare const cashErrorJsonSchema: z.ZodObject<{
-    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
+    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
     message: z.ZodString;
     retryable: z.ZodBoolean;
     remediation: z.ZodString;
@@ -3570,10 +3597,25 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"configure-cashout-access-policy">;
+        depositId: z.ZodString;
+        groupIds: z.ZodArray<z.ZodString, "many">;
+        transactionHash: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
+    }, {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     }>]>>;
 }, "strict", z.ZodTypeAny, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3652,10 +3694,15 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    } | {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     } | undefined;
 }, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3734,6 +3781,11 @@ declare const cashErrorJsonSchema: z.ZodObject<{
         kind: "inspect-base-transaction";
         transactionHash: string;
         operation: string;
+    } | {
+        depositId: string;
+        kind: "configure-cashout-access-policy";
+        groupIds: string[];
+        transactionHash?: string | undefined;
     } | undefined;
 }>;
 type CashOrderJson = z.infer<typeof cashOrderJsonSchema>;

package/dist/index.js

@@ -1,5 +1,5 @@
-import { MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, CASH_RETAIN_ON_EMPTY, BASE_USDC_ADDRESS, USDC_DECIMALS, BASE_CHAIN_ID, errors, isCashError, CASH_ORDER_STATUSES, mapChainError, CashError } from './chunk-EIEGWWNX.js';
-export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError } from './chunk-EIEGWWNX.js';
+import { MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, CASH_RETAIN_ON_EMPTY, CASH_INTENT_GUARDIAN_ADDRESS, BASE_USDC_ADDRESS, USDC_DECIMALS, BASE_CHAIN_ID, errors, isCashError, CASH_ORDER_STATUSES, CASH_RESTRICTED_PLATFORMS, mapChainError, CashError, CASH_ACCESS_GROUP_IDS } from './chunk-ORCJKOT6.js';
+export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError } from './chunk-ORCJKOT6.js';
 import { parseAbi, parseEventLogs, isAddress, http, createWalletClient, encodeFunctionData } from 'viem';
 import { base } from 'viem/chains';
 import { getSpreadOracleConfig, currencyInfo, getPaymentMethodsCatalog, getGatingServiceAddress, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash, getCurrencyCodeFromHash, createCompositeDepositId, appendAttributionToCalldata, Zkp2pClient, CHAINLINK_ORACLE_FEEDS } from '@zkp2p/sdk';
@@ -105,6 +105,7 @@ async function prepareCashDepositParams(client, input, adapters) {
     paymentMethodsOverride,
     paymentMethodDataOverride,
     currenciesOverride,
+    intentGuardian: CASH_INTENT_GUARDIAN_ADDRESS,
     retainOnEmpty: CASH_RETAIN_ON_EMPTY
   };
 }
@@ -1665,6 +1666,64 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
+  async function configureCashoutAccess(client, signer, depositInput, depositId) {
+    if (!depositInput.payouts.some(
+      (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
+    )) {
+      return void 0;
+    }
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    const prepared = prepareCashoutAccess(depositId, client);
+    let hash;
+    try {
+      hash = await signer.sendTransaction({
+        account: signer.account,
+        chain: signer.chain,
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value
+      });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err);
+    }
+    let receipt;
+    try {
+      receipt = await client.publicClient.waitForTransactionReceipt({ hash });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err, hash);
+    }
+    if (receipt.status === "reverted") {
+      throw errors.accessPolicyConfigurationFailed(
+        depositId,
+        groupIds,
+        errors.transactionFailed(hash),
+        hash
+      );
+    }
+    return hash;
+  }
+  function prepareCashoutAccess(depositId, client = readClient) {
+    const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    try {
+      const prepared = client.accessPolicy.prepareConfigureDeposit({
+        escrow: escrowAddress,
+        depositId: onchainDepositId,
+        enabled: true,
+        groupIds,
+        takers: [],
+        txOverrides: attribution
+      });
+      return {
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value,
+        chainId: prepared.chainId
+      };
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(compositeId, groupIds, err);
+    }
+  }
   return {
     capabilities,
     async sourceCapabilities() {
@@ -1799,6 +1858,12 @@ function createCashClient(options) {
         const abi2 = client.escrowV2Abi ?? client.escrowAbi;
         const resolved2 = resolveCashDepositId({ logs: receipt2.logs, abi: abi2 });
         if (!resolved2) throw errors.depositResolutionFailed(hash2);
+        const accessPolicyTxHash2 = await configureCashoutAccess(
+          client,
+          opts.signer,
+          depositInput2,
+          resolved2.compositeId
+        );
         const order2 = deriveCashOrder(resolved2.compositeId, [], {
           remainingAmount: depositInput2.amount,
           status: "ACTIVE"
@@ -1809,6 +1874,7 @@ function createCashClient(options) {
           escrowAddress: resolved2.escrowAddress,
           onchainDepositId: resolved2.onchainDepositId,
           order: order2,
+          ...accessPolicyTxHash2 ? { accessPolicyTxHash: accessPolicyTxHash2 } : {},
           source: routedSource
         };
       }
@@ -1853,6 +1919,12 @@ function createCashClient(options) {
       const abi = client.escrowV2Abi ?? client.escrowAbi;
       const resolved = resolveCashDepositId({ logs: receipt.logs, abi });
       if (!resolved) throw errors.depositResolutionFailed(hash);
+      const accessPolicyTxHash = await configureCashoutAccess(
+        client,
+        opts.signer,
+        depositInput,
+        resolved.compositeId
+      );
       const order = deriveCashOrder(resolved.compositeId, [], {
         remainingAmount: depositInput.amount,
         status: "ACTIVE"
@@ -1863,6 +1935,7 @@ function createCashClient(options) {
         escrowAddress: resolved.escrowAddress,
         onchainDepositId: resolved.onchainDepositId,
         order,
+        ...accessPolicyTxHash ? { accessPolicyTxHash } : {},
         ...sourceResult ? { source: sourceResult } : {}
       };
     },
@@ -1900,7 +1973,10 @@ function createCashClient(options) {
             description: "Create the protocol-held cash-out order."
           }
         ],
-        register: { hashedOnchainIds }
+        register: { hashedOnchainIds },
+        accessPolicyRequired: depositInput.payouts.some(
+          (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
+        )
       };
     },
     finalizePreparedCashout(receipt) {
@@ -1929,6 +2005,7 @@ function createCashClient(options) {
         })
       };
     },
+    prepareAccessPolicy: prepareCashoutAccess,
     async order(depositId) {
       return fetchOrder(depositId);
     },
@@ -2383,6 +2460,7 @@ var cashoutResultJsonSchema = z.object({
   escrowAddress: z.string(),
   onchainDepositId: nonNegativeBigintString,
   order: cashOrderJsonSchema,
+  accessPolicyTxHash: z.string().optional(),
   source: z.object({
     amount: nonNegativeBigintString,
     requestId: z.string().optional(),
@@ -2393,7 +2471,8 @@ var cashoutResultJsonSchema = z.object({
 var prepareResultJsonSchema = z.object({
   txs: z.array(preparedTransactionJsonSchema),
   steps: z.array(cashPreparedStepJsonSchema),
-  register: z.object({ hashedOnchainIds: z.array(z.string()) })
+  register: z.object({ hashedOnchainIds: z.array(z.string()) }),
+  accessPolicyRequired: z.boolean()
 });
 var withdrawResultJsonSchema = z.object({
   depositId: z.string(),
@@ -2471,6 +2550,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "SOURCE_CASHOUT_SUBMISSION_UNKNOWN",
   "SOURCE_CASHOUT_STATUS_UNKNOWN",
   "DEPOSIT_RESOLUTION_FAILED",
+  "ACCESS_POLICY_CONFIGURATION_FAILED",
   "ALLOWANCE_NOT_VISIBLE",
   "SIGNER_REQUIRED",
   "SIGNER_CHAIN_MISMATCH",
@@ -2516,6 +2596,12 @@ var cashErrorRecoveryJsonSchema = z.discriminatedUnion("kind", [
     kind: z.literal("inspect-base-transaction"),
     transactionHash: z.string(),
     operation: z.string()
+  }).strict(),
+  z.object({
+    kind: z.literal("configure-cashout-access-policy"),
+    depositId: z.string(),
+    groupIds: z.array(z.string()),
+    transactionHash: z.string().optional()
   }).strict()
 ]);
 var cashErrorJsonSchema = z.object({
@@ -2773,6 +2859,7 @@ function cashoutResultToJson(result) {
     escrowAddress: result.escrowAddress,
     onchainDepositId: result.onchainDepositId.toString(),
     order: orderToJson(result.order),
+    accessPolicyTxHash: result.accessPolicyTxHash,
     source: result.source ? {
       ...result.source,
       amount: result.source.amount.toString()
@@ -2787,6 +2874,7 @@ function cashoutResultFromJson(json) {
     escrowAddress: parsed.escrowAddress,
     onchainDepositId: BigInt(parsed.onchainDepositId),
     order: orderFromJson(parsed.order),
+    accessPolicyTxHash: parsed.accessPolicyTxHash,
     source: parsed.source ? {
       ...parsed.source,
       amount: BigInt(parsed.source.amount)
@@ -2797,7 +2885,8 @@ function prepareResultToJson(result) {
   return {
     txs: result.txs.map(preparedTxToJson),
     steps: result.steps.map(preparedStepToJson),
-    register: result.register
+    register: result.register,
+    accessPolicyRequired: result.accessPolicyRequired
   };
 }
 function prepareResultFromJson(json) {
@@ -2805,7 +2894,8 @@ function prepareResultFromJson(json) {
   return {
     txs: parsed.txs.map(preparedTxFromJson),
     steps: parsed.steps.map(preparedStepFromJson),
-    register: parsed.register
+    register: parsed.register,
+    accessPolicyRequired: parsed.accessPolicyRequired
   };
 }
 function withdrawResultToJson(result) {
@@ -2885,6 +2975,13 @@ function cashErrorFromJson(json) {
         transactionHash: parsed.recovery.transactionHash,
         operation: parsed.recovery.operation
       };
+    } else if (parsed.recovery.kind === "configure-cashout-access-policy") {
+      recovery = {
+        kind: parsed.recovery.kind,
+        depositId: parsed.recovery.depositId,
+        groupIds: parsed.recovery.groupIds,
+        ...parsed.recovery.transactionHash !== void 0 ? { transactionHash: parsed.recovery.transactionHash } : {}
+      };
     } else if (parsed.recovery.kind === "inspect-base-operation-submission") {
       recovery = {
         kind: parsed.recovery.kind,

package/dist/react.d.cts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-CYSM84-K.cjs';
+import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-C5YKh7cv.cjs';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-CYSM84-K.js';
+import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-C5YKh7cv.js';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/react.js

@@ -1,4 +1,4 @@
-import { isCashError, CASH_ORDER_POLL_INTERVAL_MS } from './chunk-EIEGWWNX.js';
+import { isCashError, CASH_ORDER_POLL_INTERVAL_MS } from './chunk-ORCJKOT6.js';
 import { useState, useRef, useCallback, useEffect, useMemo } from 'react';
 
 function useEstimate({

package/dist/tools.cjs

@@ -2,7 +2,7 @@
 
 // package.json
 var package_default = {
-  version: "0.4.2"};
+  version: "0.4.4"};
 
 // src/tools/index.ts
 var bigintString = {

package/dist/tools.js

@@ -1,6 +1,6 @@
 // package.json
 var package_default = {
-  version: "0.4.2"};
+  version: "0.4.4"};
 
 // src/tools/index.ts
 var bigintString = {

package/docs/lifecycle-and-recovery.md

@@ -64,6 +64,10 @@ but the host or a signer-backed client must execute the route before
 `cash_cashout` prepares the Base-USDC order. Once the prepared `createDeposit`
 transaction confirms, call `finalizePreparedCashout(receipt)` to decode it with
 the environment-correct escrow ABI and obtain the resumable `CashoutResult`.
+When `prepare()` returned `accessPolicyRequired: true`, submit and confirm
+`prepareAccessPolicy(depositId)` before treating the cash-out as complete. It
+attaches Plus, Pro, Peer Makers, and Peer Pay using the selected environment's
+canonical registry IDs.
 
 There is no static chain/token allowlist in Peer Cash. Relay decides source
 support through its metadata and quote execution, filtered to the viem/EVM
@@ -308,6 +312,7 @@ explicit override.
 | `TRANSACTION_SUBMISSION_UNKNOWN`        | no        | A Base mutation returned no hash but may have broadcast. Inspect wallet/protocol state and its recovery action before any retry.             |
 | `TRANSACTION_STATUS_UNKNOWN`            | no        | A transaction was submitted but its receipt is unknown. Inspect `recovery.transactionHash` before resubmitting.                              |
 | `DEPOSIT_RESOLUTION_FAILED`             | no        | Base tx succeeded but no `DepositReceived` was decoded. Inspect its logs and recover the composite id.                                       |
+| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | The cash-out exists, but its required four-group policy was not confirmed. Use `recovery.depositId` and `groupIds`; never create it again.   |
 | `INVALID_DEPOSIT_ID`                    | no        | The id is not `escrowAddress_onchainId`. A bare number cannot cold-hydrate; use the value returned by `cashout()`.                           |
 | `ORDER_NOT_FOUND`                       | yes       | Unknown id or immediate indexer lag. Verify the id and retry shortly after creation.                                                         |
 | `INDEXER_LAG`                           | yes       | Indexer trails the chain. Retry the read shortly.                                                                                            |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkp2p/cash",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Peer Cash - offramp-only SDK for routing crypto to Base USDC, then cashing out to fiat at the live oracle market rate.",
   "license": "MIT",
   "author": "Peer (https://peer.xyz)",