@zkp2p/cash 0.4.3 → 0.4.5

package/AGENTS.md

@@ -32,7 +32,13 @@ Every transaction (including approves) carries ERC-8021 attribution:
 code. The namespaced referral marker gives its Peer Privy wallet the direct
 deposit-level integration share instead of applying maker L1/L2.
 
-**Two platform caveats, both surfaced in `capabilities()`:**
+**Platform caveats, all surfaced in `capabilities()`:**
+
+- **Venmo, Cash App, and PayPal** carry
+  `requiresAtomicAccessPolicy: true`. Generic `cashout()` and `prepare()` reject
+  them with `ATOMIC_ACCESS_POLICY_REQUIRED` before any side effect. Use Peer
+  web's Curator-backed atomic flow or a host with the same atomic guarantee;
+  never create the deposit and attach the group policy sequentially.
 
 - **Wise and PayPal** carry `requiresIdentityAttestation: true`. A new curator
   registration needs a signed maker identity attestation this SDK cannot mint
@@ -93,7 +99,7 @@ const multiPlatform = await cash.cashout(
   {
     amount: usdc(500),
     receive: [
-      { platform: 'venmo', currency: 'USD', payee: '@handle' },
+      { platform: 'chime', currency: 'USD', payee: '$handle' },
       { platform: 'revolut', currencies: ['EUR', 'GBP'], payee: { offchainId: 'revtag' } },
     ],
   },
@@ -208,6 +214,8 @@ Every `CashError` carries `code`, `retryable`, `remediation`. Behavior:
 | `INVALID_PAYOUT_PLATFORMS`              | no        | Pass one leg or an array of legs, using each platform at most once                         |
 | `PAYEE_VERIFICATION_REQUIRED`           | no        | Register a new Wise/PayPal payee through Peer; an existing registered handle can be reused |
 | `PAYEE_REGISTRATION_FAILED`             | yes       | Validate against `payeeHint`, then retry                                                   |
+| `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Use Peer web or an equivalent atomic host for Venmo, Cash App, or PayPal; nothing moved    |
+| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | Recover an existing `0.4.4` deposit from its policy recovery data; do not create it again  |
 | `SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE`   | no        | Execute Relay with a signer first, then prepare a Base-USDC cashout                        |
 | `SOURCE_RECIPIENT_MISMATCH`             | no        | Route Base USDC to the cashout depositor                                                   |
 | `SOURCE_CAPABILITIES_FAILED`            | yes       | Retry discovery or fall back to Base USDC                                                  |

package/README.md

@@ -46,7 +46,7 @@ const multiCurrencyStats = fillStats['revolut:EUR+GBP+USD'];
 const { depositId } = await cash.cashout(
   {
     amount: usdc(1000),
-    receive: { platform: 'venmo', currency: 'USD', payee: '@you' },
+    receive: { platform: 'chime', currency: 'USD', payee: '$you' },
   },
   { signer }, // any viem WalletClient on Base
 );
@@ -71,7 +71,7 @@ const widestReach = await cash.cashout(
   {
     amount: usdc(1000),
     receive: [
-      { platform: 'venmo', currency: 'USD', payee: '@you' },
+      { platform: 'chime', currency: 'USD', payee: '$you' },
       { platform: 'revolut', currencies: ['EUR', 'GBP'], payee: { offchainId: 'revtag' } },
     ],
   },
@@ -120,7 +120,7 @@ const { depositId, source } = await cash.cashout(
       currency: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48',
       tradeType: 'EXACT_INPUT',
     },
-    receive: { platform: 'venmo', currency: 'USD', payee: { offchainId: '@you' } },
+    receive: { platform: 'chime', currency: 'USD', payee: { offchainId: '$you' } },
   },
   { signer, sourceSigner },
 );
@@ -141,8 +141,9 @@ console.log(source?.transactions?.origin, source?.transactions?.destination);
 | `quoteSource(input)` / `executeSourceQuote(quote, { signer })` | Relay SDK EVM source routing into Base USDC before cashout                                                                      |
 | `relayStatus(requestId)`                                       | Relay request status from the Relay SDK request path                                                                            |
 | `estimate({ amount, currency }, { includeEta? })`              | Base USDC oracle estimate; optionally skip the historical ETA for progressive rendering                                         |
-| `cashout(input, { signer })`                                   | Registers your payee, creates the protocol-held order, returns the `depositId`                                                  |
-| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare external signing, then resolve the confirmed createDeposit receipt into a resumable result                              |
+| `cashout(input, { signer })`                                   | Registers the payee and creates an unrestricted-rail order; protected rails fail before any side effect                         |
+| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare unrestricted-rail external signing, then resolve the confirmed createDeposit receipt into resumable state               |
+| `prepareAccessPolicy(depositId)`                               | Recover a restricted-rail deposit created by the unsafe `0.4.4` sequential flow; never use it to create a new order             |
 | `order(depositId)` / `orders(owner)`                           | Resume any order from its id alone; list all orders for a wallet                                                                |
 | `watch(depositId)`                                             | Async iterator: yields on every state change until terminal, abort, or timeout                                                  |
 | `withdraw(depositId, { signer, amount? })`                     | The ONE unwind verb - partial with an `amount` (live intents don't block it), full close without (prunes expired intents first) |
@@ -164,29 +165,21 @@ Peer Cash transaction, including approves, carries ERC-8021 attribution:
 `peer-cash` first, optional `peer-ref-XXXXXX` from `referralCode` next, and your
 analytics-only `referrer` code(s) after it.
 
-```ts
-const prepared = await cash.prepare({
-  amount: 5_000_000n,
-  receive: {
-    platform: 'venmo',
-    currency: 'USD',
-    payee: { offchainId: '@maker' },
-  },
-});
-
-let createDepositReceipt;
-for (const [index, transaction] of prepared.txs.entries()) {
-  const receipt = await externalRuntime.sendAndWait(transaction);
-  if (prepared.steps[index]?.kind === 'createDeposit') {
-    createDepositReceipt = receipt;
-  }
-}
-if (!createDepositReceipt) throw new Error('createDeposit receipt missing');
-
-const result = cash.finalizePreparedCashout(createDepositReceipt);
-await persistDepositId(result.depositId);
-const liveOrder = await cash.order(result.depositId);
-```
+Venmo, Cash App, and PayPal must attach Plus, Pro, Peer Makers, and Peer Pay in
+the same atomic operation that creates the deposit. A create-then-configure
+sequence leaves a public interval in which an unapproved taker can signal an
+intent. The generic `cashout()` and `prepare()` paths therefore throw
+`ATOMIC_ACCESS_POLICY_REQUIRED` before wallet access, Relay quoting, payee
+registration, allowance, or deposit submission. Peer web supports these rails
+through its atomic Curator-backed flow. Other hosts must provide an equivalent
+atomic batch rather than composing the two public SDK calls sequentially.
+`capabilities()` marks these platforms with
+`requiresAtomicAccessPolicy: true`.
+
+`prepareAccessPolicy(depositId)` remains available only to recover a restricted
+deposit already created by `0.4.4`. Configure that existing deposit immediately;
+do not call `cashout()` again and do not use this recovery helper as a new-order
+flow.
 
 `capabilities()` presents Zelle as one platform. A cashout with
 `receive.platform: 'zelle'` attaches only the generic Zelle payment method to

package/dist/{chunk-IHEOGLAS.js → chunk-YD5VHZXR.js}

@@ -2,6 +2,27 @@
 var BASE_CHAIN_ID = 8453;
 var BASE_USDC_ADDRESS = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 var CASH_INTENT_GUARDIAN_ADDRESS = "0x83671606454fA72ba1e2831E18C5090D25629414";
+var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "cashapp", "paypal"]);
+var CASH_ACCESS_GROUP_IDS = {
+  production: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  preproduction: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  staging: [
+    "0xf6133c227eab8ae7da1ee143945bf7f31204394f3ba801dc9691f8af6ca8efa5",
+    "0xa6beb459bc621e7b050e431736c1c3298da26356d7095719185e859d68f70d9e",
+    "0x9cded1332f25c3ee0a9a822a4c827d3fbd081a8d7b2ba39c49917ec1983b8d6c",
+    "0xc82c20c00033046a2f017b65532d7148a337282f17c73296663a530e49ba00f7"
+  ]
+};
 var USDC_DECIMALS = 6;
 var MARKET_SPREAD_BPS = 0;
 var ORACLE_MIN_CONVERSION_RATE_SENTINEL = 1n;
@@ -178,6 +199,12 @@ var errors = {
     },
     { cause }
   ),
+  atomicAccessPolicyRequired: (platforms) => new CashError({
+    code: "ATOMIC_ACCESS_POLICY_REQUIRED",
+    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    retryable: false,
+    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+  }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
     message: `prepare() cannot execute a Relay source route before creating the Base USDC cash-out.`,
@@ -379,6 +406,21 @@ var errors = {
     },
     { cause }
   ),
+  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+    {
+      code: "ACCESS_POLICY_CONFIGURATION_FAILED",
+      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      retryable: false,
+      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      recovery: {
+        kind: "configure-cashout-access-policy",
+        depositId,
+        groupIds: [...groupIds],
+        ...transactionHash ? { transactionHash } : {}
+      }
+    },
+    { cause }
+  ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",
     message: `The escrow contract is paused; deposits are temporarily disabled.`,
@@ -446,4 +488,4 @@ function isUserRejectedError(value) {
   return text.some(hasUserRejectionText);
 }
 
-export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_INTENT_GUARDIAN_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError, mapChainError };
+export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ACCESS_GROUP_IDS, CASH_INTENT_GUARDIAN_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RESTRICTED_PLATFORMS, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError, mapChainError };

package/dist/{createCashClient-CYSM84-K.d.cts → createCashClient-CL1SCbqF.d.cts}

@@ -311,6 +311,11 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
+    /**
+     * When true, the platform needs deposit creation and access-policy setup in
+     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
+     */
+    requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
     chainId: number;
@@ -582,6 +587,8 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
+    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
+    accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
         /** Conservative Base USDC amount deposited (Relay's guaranteed minimum output). */
@@ -608,6 +615,8 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
+    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
+    accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
 interface PreparedCashoutReceipt {
@@ -670,6 +679,8 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
+    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
+    prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;
     /**

package/dist/{createCashClient-CYSM84-K.d.ts → createCashClient-CL1SCbqF.d.ts}

@@ -311,6 +311,11 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
+    /**
+     * When true, the platform needs deposit creation and access-policy setup in
+     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
+     */
+    requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
     chainId: number;
@@ -582,6 +587,8 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
+    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
+    accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
         /** Conservative Base USDC amount deposited (Relay's guaranteed minimum output). */
@@ -608,6 +615,8 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
+    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
+    accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
 interface PreparedCashoutReceipt {
@@ -670,6 +679,8 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
+    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
+    prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;
     /**

package/dist/index.cjs

@@ -13,6 +13,27 @@ var zod = require('zod');
 var BASE_CHAIN_ID = 8453;
 var BASE_USDC_ADDRESS = "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 var CASH_INTENT_GUARDIAN_ADDRESS = "0x83671606454fA72ba1e2831E18C5090D25629414";
+var CASH_RESTRICTED_PLATFORMS = /* @__PURE__ */ new Set(["venmo", "cashapp", "paypal"]);
+var CASH_ACCESS_GROUP_IDS = {
+  production: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  preproduction: [
+    "0xb8747401b308d4891385620071b5916e9c61284f25c4611541c529703de5babf",
+    "0xf030f72e772f954059ca28f94974088aaf6ba37bb1f264df48843a3d0c221dc3",
+    "0xdf1c64c54745aa1ce00642a5874f97e3183bf5e993c1f559d0a37a4df0b803c7",
+    "0x174b8a29536721a3eae290bfd55651b85a53fc334b971d993fa93ed8dde15e48"
+  ],
+  staging: [
+    "0xf6133c227eab8ae7da1ee143945bf7f31204394f3ba801dc9691f8af6ca8efa5",
+    "0xa6beb459bc621e7b050e431736c1c3298da26356d7095719185e859d68f70d9e",
+    "0x9cded1332f25c3ee0a9a822a4c827d3fbd081a8d7b2ba39c49917ec1983b8d6c",
+    "0xc82c20c00033046a2f017b65532d7148a337282f17c73296663a530e49ba00f7"
+  ]
+};
 var USDC_DECIMALS = 6;
 var MARKET_SPREAD_BPS = 0;
 var ORACLE_MIN_CONVERSION_RATE_SENTINEL = 1n;
@@ -478,7 +499,8 @@ function buildCapabilities(environment) {
       platform,
       currencies: [...new Set(currencies2)].sort(),
       payeeHint: PAYEE_HINTS[platform] ?? "Your payment handle for this platform",
-      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform)
+      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform),
+      requiresAtomicAccessPolicy: CASH_RESTRICTED_PLATFORMS.has(platform)
     };
   }).filter((p) => p.currencies.length > 0).sort((a, b) => a.platform.localeCompare(b.platform));
   const currencies = [...new Set(platforms.flatMap((p) => p.currencies))].sort();
@@ -660,6 +682,12 @@ var errors = {
     },
     { cause }
   ),
+  atomicAccessPolicyRequired: (platforms) => new CashError({
+    code: "ATOMIC_ACCESS_POLICY_REQUIRED",
+    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    retryable: false,
+    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+  }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
     message: `prepare() cannot execute a Relay source route before creating the Base USDC cash-out.`,
@@ -861,6 +889,21 @@ var errors = {
     },
     { cause }
   ),
+  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+    {
+      code: "ACCESS_POLICY_CONFIGURATION_FAILED",
+      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      retryable: false,
+      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      recovery: {
+        kind: "configure-cashout-access-policy",
+        depositId,
+        groupIds: [...groupIds],
+        ...transactionHash ? { transactionHash } : {}
+      }
+    },
+    { cause }
+  ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",
     message: `The escrow contract is paused; deposits are temporarily disabled.`,
@@ -1876,6 +1919,12 @@ function createCashClient(options) {
       ...range ? { intentAmountRange: range } : {}
     };
   }
+  function assertGenericCashoutSupported(payoutInput) {
+    const restrictedPlatforms = payoutInput.payouts.map((payout) => payout.processorName.toLowerCase()).filter((platform) => CASH_RESTRICTED_PLATFORMS.has(platform));
+    if (restrictedPlatforms.length > 0) {
+      throw errors.atomicAccessPolicyRequired(restrictedPlatforms);
+    }
+  }
   function isCashPayoutSet(payouts) {
     return payouts.length > 0 && payouts.every((payout) => payout.pricing.marketRate && payout.pricing.spreadBps === 0);
   }
@@ -2115,6 +2164,28 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
+  function prepareCashoutAccess(depositId, client = readClient) {
+    const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    try {
+      const prepared = client.accessPolicy.prepareConfigureDeposit({
+        escrow: escrowAddress,
+        depositId: onchainDepositId,
+        enabled: true,
+        groupIds,
+        takers: [],
+        txOverrides: attribution
+      });
+      return {
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value,
+        chainId: prepared.chainId
+      };
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(compositeId, groupIds, err);
+    }
+  }
   return {
     capabilities,
     async sourceCapabilities() {
@@ -2152,6 +2223,7 @@ function createCashClient(options) {
     },
     async cashout(input, opts) {
       const payoutInput = validatePayout(input);
+      assertGenericCashoutSupported(payoutInput);
       const client = await signingClient("cashout", opts);
       const owner = opts.signer.account.address;
       let sourceResult;
@@ -2319,6 +2391,7 @@ function createCashClient(options) {
     async prepare(input) {
       if (input.source) throw errors.sourceRouteUnsupportedInPrepare();
       const depositInput = validateDepositInput(input.amount, input);
+      assertGenericCashoutSupported(depositInput);
       const params = await buildDepositParams(readClient, depositInput);
       const { prepared } = await readClient.prepareCreateDeposit({
         ...params,
@@ -2350,7 +2423,8 @@ function createCashClient(options) {
             description: "Create the protocol-held cash-out order."
           }
         ],
-        register: { hashedOnchainIds }
+        register: { hashedOnchainIds },
+        accessPolicyRequired: false
       };
     },
     finalizePreparedCashout(receipt) {
@@ -2379,6 +2453,7 @@ function createCashClient(options) {
         })
       };
     },
+    prepareAccessPolicy: prepareCashoutAccess,
     async order(depositId) {
       return fetchOrder(depositId);
     },
@@ -2833,6 +2908,7 @@ var cashoutResultJsonSchema = zod.z.object({
   escrowAddress: zod.z.string(),
   onchainDepositId: nonNegativeBigintString,
   order: cashOrderJsonSchema,
+  accessPolicyTxHash: zod.z.string().optional(),
   source: zod.z.object({
     amount: nonNegativeBigintString,
     requestId: zod.z.string().optional(),
@@ -2843,7 +2919,8 @@ var cashoutResultJsonSchema = zod.z.object({
 var prepareResultJsonSchema = zod.z.object({
   txs: zod.z.array(preparedTransactionJsonSchema),
   steps: zod.z.array(cashPreparedStepJsonSchema),
-  register: zod.z.object({ hashedOnchainIds: zod.z.array(zod.z.string()) })
+  register: zod.z.object({ hashedOnchainIds: zod.z.array(zod.z.string()) }),
+  accessPolicyRequired: zod.z.boolean()
 });
 var withdrawResultJsonSchema = zod.z.object({
   depositId: zod.z.string(),
@@ -2874,7 +2951,8 @@ var cashCapabilitiesJsonSchema = zod.z.object({
       platform: zod.z.string(),
       currencies: zod.z.array(zod.z.string()),
       payeeHint: zod.z.string(),
-      requiresIdentityAttestation: zod.z.boolean()
+      requiresIdentityAttestation: zod.z.boolean(),
+      requiresAtomicAccessPolicy: zod.z.boolean().optional()
     })
   ),
   currencies: zod.z.array(zod.z.string()),
@@ -2910,6 +2988,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "ORDER_NOT_FOUND",
   "PAYEE_REGISTRATION_FAILED",
   "PAYEE_VERIFICATION_REQUIRED",
+  "ATOMIC_ACCESS_POLICY_REQUIRED",
   "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
   "SOURCE_RECIPIENT_MISMATCH",
   "SOURCE_CAPABILITIES_FAILED",
@@ -2921,6 +3000,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "SOURCE_CASHOUT_SUBMISSION_UNKNOWN",
   "SOURCE_CASHOUT_STATUS_UNKNOWN",
   "DEPOSIT_RESOLUTION_FAILED",
+  "ACCESS_POLICY_CONFIGURATION_FAILED",
   "ALLOWANCE_NOT_VISIBLE",
   "SIGNER_REQUIRED",
   "SIGNER_CHAIN_MISMATCH",
@@ -2966,6 +3046,12 @@ var cashErrorRecoveryJsonSchema = zod.z.discriminatedUnion("kind", [
     kind: zod.z.literal("inspect-base-transaction"),
     transactionHash: zod.z.string(),
     operation: zod.z.string()
+  }).strict(),
+  zod.z.object({
+    kind: zod.z.literal("configure-cashout-access-policy"),
+    depositId: zod.z.string(),
+    groupIds: zod.z.array(zod.z.string()),
+    transactionHash: zod.z.string().optional()
   }).strict()
 ]);
 var cashErrorJsonSchema = zod.z.object({
@@ -3223,6 +3309,7 @@ function cashoutResultToJson(result) {
     escrowAddress: result.escrowAddress,
     onchainDepositId: result.onchainDepositId.toString(),
     order: orderToJson(result.order),
+    accessPolicyTxHash: result.accessPolicyTxHash,
     source: result.source ? {
       ...result.source,
       amount: result.source.amount.toString()
@@ -3237,6 +3324,7 @@ function cashoutResultFromJson(json) {
     escrowAddress: parsed.escrowAddress,
     onchainDepositId: BigInt(parsed.onchainDepositId),
     order: orderFromJson(parsed.order),
+    accessPolicyTxHash: parsed.accessPolicyTxHash,
     source: parsed.source ? {
       ...parsed.source,
       amount: BigInt(parsed.source.amount)
@@ -3247,7 +3335,8 @@ function prepareResultToJson(result) {
   return {
     txs: result.txs.map(preparedTxToJson),
     steps: result.steps.map(preparedStepToJson),
-    register: result.register
+    register: result.register,
+    accessPolicyRequired: result.accessPolicyRequired
   };
 }
 function prepareResultFromJson(json) {
@@ -3255,7 +3344,8 @@ function prepareResultFromJson(json) {
   return {
     txs: parsed.txs.map(preparedTxFromJson),
     steps: parsed.steps.map(preparedStepFromJson),
-    register: parsed.register
+    register: parsed.register,
+    accessPolicyRequired: parsed.accessPolicyRequired
   };
 }
 function withdrawResultToJson(result) {
@@ -3306,7 +3396,8 @@ function capabilitiesFromJson(json) {
     },
     platforms: parsed.platforms.map((p) => ({
       ...p,
-      currencies: p.currencies
+      currencies: p.currencies,
+      requiresAtomicAccessPolicy: p.requiresAtomicAccessPolicy ?? CASH_RESTRICTED_PLATFORMS.has(p.platform)
     })),
     currencies: parsed.currencies,
     amount: {
@@ -3335,6 +3426,13 @@ function cashErrorFromJson(json) {
         transactionHash: parsed.recovery.transactionHash,
         operation: parsed.recovery.operation
       };
+    } else if (parsed.recovery.kind === "configure-cashout-access-policy") {
+      recovery = {
+        kind: parsed.recovery.kind,
+        depositId: parsed.recovery.depositId,
+        groupIds: parsed.recovery.groupIds,
+        ...parsed.recovery.transactionHash !== void 0 ? { transactionHash: parsed.recovery.transactionHash } : {}
+      };
     } else if (parsed.recovery.kind === "inspect-base-operation-submission") {
       recovery = {
         kind: parsed.recovery.kind,