@zkp2p/cash 0.4.4 → 0.4.5

package/AGENTS.md

@@ -32,7 +32,13 @@ Every transaction (including approves) carries ERC-8021 attribution:
 code. The namespaced referral marker gives its Peer Privy wallet the direct
 deposit-level integration share instead of applying maker L1/L2.
 
-**Two platform caveats, both surfaced in `capabilities()`:**
+**Platform caveats, all surfaced in `capabilities()`:**
+
+- **Venmo, Cash App, and PayPal** carry
+  `requiresAtomicAccessPolicy: true`. Generic `cashout()` and `prepare()` reject
+  them with `ATOMIC_ACCESS_POLICY_REQUIRED` before any side effect. Use Peer
+  web's Curator-backed atomic flow or a host with the same atomic guarantee;
+  never create the deposit and attach the group policy sequentially.
 
 - **Wise and PayPal** carry `requiresIdentityAttestation: true`. A new curator
   registration needs a signed maker identity attestation this SDK cannot mint
@@ -93,7 +99,7 @@ const multiPlatform = await cash.cashout(
   {
     amount: usdc(500),
     receive: [
-      { platform: 'venmo', currency: 'USD', payee: '@handle' },
+      { platform: 'chime', currency: 'USD', payee: '$handle' },
       { platform: 'revolut', currencies: ['EUR', 'GBP'], payee: { offchainId: 'revtag' } },
     ],
   },
@@ -208,6 +214,8 @@ Every `CashError` carries `code`, `retryable`, `remediation`. Behavior:
 | `INVALID_PAYOUT_PLATFORMS`              | no        | Pass one leg or an array of legs, using each platform at most once                         |
 | `PAYEE_VERIFICATION_REQUIRED`           | no        | Register a new Wise/PayPal payee through Peer; an existing registered handle can be reused |
 | `PAYEE_REGISTRATION_FAILED`             | yes       | Validate against `payeeHint`, then retry                                                   |
+| `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Use Peer web or an equivalent atomic host for Venmo, Cash App, or PayPal; nothing moved    |
+| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | Recover an existing `0.4.4` deposit from its policy recovery data; do not create it again  |
 | `SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE`   | no        | Execute Relay with a signer first, then prepare a Base-USDC cashout                        |
 | `SOURCE_RECIPIENT_MISMATCH`             | no        | Route Base USDC to the cashout depositor                                                   |
 | `SOURCE_CAPABILITIES_FAILED`            | yes       | Retry discovery or fall back to Base USDC                                                  |

package/README.md

@@ -46,7 +46,7 @@ const multiCurrencyStats = fillStats['revolut:EUR+GBP+USD'];
 const { depositId } = await cash.cashout(
   {
     amount: usdc(1000),
-    receive: { platform: 'venmo', currency: 'USD', payee: '@you' },
+    receive: { platform: 'chime', currency: 'USD', payee: '$you' },
   },
   { signer }, // any viem WalletClient on Base
 );
@@ -71,7 +71,7 @@ const widestReach = await cash.cashout(
   {
     amount: usdc(1000),
     receive: [
-      { platform: 'venmo', currency: 'USD', payee: '@you' },
+      { platform: 'chime', currency: 'USD', payee: '$you' },
       { platform: 'revolut', currencies: ['EUR', 'GBP'], payee: { offchainId: 'revtag' } },
     ],
   },
@@ -120,7 +120,7 @@ const { depositId, source } = await cash.cashout(
       currency: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48',
       tradeType: 'EXACT_INPUT',
     },
-    receive: { platform: 'venmo', currency: 'USD', payee: { offchainId: '@you' } },
+    receive: { platform: 'chime', currency: 'USD', payee: { offchainId: '$you' } },
   },
   { signer, sourceSigner },
 );
@@ -141,9 +141,9 @@ console.log(source?.transactions?.origin, source?.transactions?.destination);
 | `quoteSource(input)` / `executeSourceQuote(quote, { signer })` | Relay SDK EVM source routing into Base USDC before cashout                                                                      |
 | `relayStatus(requestId)`                                       | Relay request status from the Relay SDK request path                                                                            |
 | `estimate({ amount, currency }, { includeEta? })`              | Base USDC oracle estimate; optionally skip the historical ETA for progressive rendering                                         |
-| `cashout(input, { signer })`                                   | Registers the payee and creates the order; Venmo, Cash App, and PayPal also confirm the required four-group access policy       |
-| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare external signing, then resolve the confirmed createDeposit receipt into a resumable result                              |
-| `prepareAccessPolicy(depositId)`                               | Prepare the required Plus, Pro, Peer Makers, and Peer Pay follow-up for an externally signed restricted-rail cash-out           |
+| `cashout(input, { signer })`                                   | Registers the payee and creates an unrestricted-rail order; protected rails fail before any side effect                         |
+| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare unrestricted-rail external signing, then resolve the confirmed createDeposit receipt into resumable state               |
+| `prepareAccessPolicy(depositId)`                               | Recover a restricted-rail deposit created by the unsafe `0.4.4` sequential flow; never use it to create a new order             |
 | `order(depositId)` / `orders(owner)`                           | Resume any order from its id alone; list all orders for a wallet                                                                |
 | `watch(depositId)`                                             | Async iterator: yields on every state change until terminal, abort, or timeout                                                  |
 | `withdraw(depositId, { signer, amount? })`                     | The ONE unwind verb - partial with an `amount` (live intents don't block it), full close without (prunes expired intents first) |
@@ -165,40 +165,21 @@ Peer Cash transaction, including approves, carries ERC-8021 attribution:
 `peer-cash` first, optional `peer-ref-XXXXXX` from `referralCode` next, and your
 analytics-only `referrer` code(s) after it.
 
-Signer-backed Venmo, Cash App, and PayPal cash-outs require one additional
-wallet transaction after deposit creation. The SDK configures Plus, Pro, Peer
-Makers, and Peer Pay using the canonical group IDs for the selected environment
-and returns only after that policy transaction confirms. Its hash is available
-as `accessPolicyTxHash`. If configuration cannot be confirmed, the SDK throws
-`ACCESS_POLICY_CONFIGURATION_FAILED` with the already-created `depositId` and
-exact `groupIds`; never repeat `cashout()` for that error.
-
-```ts
-const prepared = await cash.prepare({
-  amount: 5_000_000n,
-  receive: {
-    platform: 'venmo',
-    currency: 'USD',
-    payee: { offchainId: '@maker' },
-  },
-});
-
-let createDepositReceipt;
-for (const [index, transaction] of prepared.txs.entries()) {
-  const receipt = await externalRuntime.sendAndWait(transaction);
-  if (prepared.steps[index]?.kind === 'createDeposit') {
-    createDepositReceipt = receipt;
-  }
-}
-if (!createDepositReceipt) throw new Error('createDeposit receipt missing');
-
-const result = cash.finalizePreparedCashout(createDepositReceipt);
-if (prepared.accessPolicyRequired) {
-  await externalRuntime.sendAndWait(cash.prepareAccessPolicy(result.depositId));
-}
-await persistDepositId(result.depositId);
-const liveOrder = await cash.order(result.depositId);
-```
+Venmo, Cash App, and PayPal must attach Plus, Pro, Peer Makers, and Peer Pay in
+the same atomic operation that creates the deposit. A create-then-configure
+sequence leaves a public interval in which an unapproved taker can signal an
+intent. The generic `cashout()` and `prepare()` paths therefore throw
+`ATOMIC_ACCESS_POLICY_REQUIRED` before wallet access, Relay quoting, payee
+registration, allowance, or deposit submission. Peer web supports these rails
+through its atomic Curator-backed flow. Other hosts must provide an equivalent
+atomic batch rather than composing the two public SDK calls sequentially.
+`capabilities()` marks these platforms with
+`requiresAtomicAccessPolicy: true`.
+
+`prepareAccessPolicy(depositId)` remains available only to recover a restricted
+deposit already created by `0.4.4`. Configure that existing deposit immediately;
+do not call `cashout()` again and do not use this recovery helper as a new-order
+flow.
 
 `capabilities()` presents Zelle as one platform. A cashout with
 `receive.platform: 'zelle'` attaches only the generic Zelle payment method to

package/dist/{chunk-ORCJKOT6.js → chunk-YD5VHZXR.js}

@@ -199,6 +199,12 @@ var errors = {
     },
     { cause }
   ),
+  atomicAccessPolicyRequired: (platforms) => new CashError({
+    code: "ATOMIC_ACCESS_POLICY_REQUIRED",
+    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    retryable: false,
+    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+  }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
     message: `prepare() cannot execute a Relay source route before creating the Base USDC cash-out.`,

package/dist/{createCashClient-C5YKh7cv.d.cts → createCashClient-CL1SCbqF.d.cts}

@@ -311,6 +311,11 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
+    /**
+     * When true, the platform needs deposit creation and access-policy setup in
+     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
+     */
+    requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
     chainId: number;
@@ -582,7 +587,7 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
-    /** Confirmed policy transaction for Venmo, Cash App, or PayPal cash-outs. */
+    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
     accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
@@ -610,7 +615,7 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
-    /** Submit `prepareAccessPolicy(depositId)` after creation when true. */
+    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
     accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
@@ -674,7 +679,7 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
-    /** Prepare the required four-group policy for an externally created cash-out. */
+    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
     prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;

package/dist/{createCashClient-C5YKh7cv.d.ts → createCashClient-CL1SCbqF.d.ts}

@@ -311,6 +311,11 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
+    /**
+     * When true, the platform needs deposit creation and access-policy setup in
+     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
+     */
+    requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
     chainId: number;
@@ -582,7 +587,7 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
-    /** Confirmed policy transaction for Venmo, Cash App, or PayPal cash-outs. */
+    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
     accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
@@ -610,7 +615,7 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
-    /** Submit `prepareAccessPolicy(depositId)` after creation when true. */
+    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
     accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
@@ -674,7 +679,7 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
-    /** Prepare the required four-group policy for an externally created cash-out. */
+    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
     prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;

package/dist/index.cjs

@@ -499,7 +499,8 @@ function buildCapabilities(environment) {
       platform,
       currencies: [...new Set(currencies2)].sort(),
       payeeHint: PAYEE_HINTS[platform] ?? "Your payment handle for this platform",
-      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform)
+      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform),
+      requiresAtomicAccessPolicy: CASH_RESTRICTED_PLATFORMS.has(platform)
     };
   }).filter((p) => p.currencies.length > 0).sort((a, b) => a.platform.localeCompare(b.platform));
   const currencies = [...new Set(platforms.flatMap((p) => p.currencies))].sort();
@@ -681,6 +682,12 @@ var errors = {
     },
     { cause }
   ),
+  atomicAccessPolicyRequired: (platforms) => new CashError({
+    code: "ATOMIC_ACCESS_POLICY_REQUIRED",
+    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    retryable: false,
+    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+  }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
     message: `prepare() cannot execute a Relay source route before creating the Base USDC cash-out.`,
@@ -1912,6 +1919,12 @@ function createCashClient(options) {
       ...range ? { intentAmountRange: range } : {}
     };
   }
+  function assertGenericCashoutSupported(payoutInput) {
+    const restrictedPlatforms = payoutInput.payouts.map((payout) => payout.processorName.toLowerCase()).filter((platform) => CASH_RESTRICTED_PLATFORMS.has(platform));
+    if (restrictedPlatforms.length > 0) {
+      throw errors.atomicAccessPolicyRequired(restrictedPlatforms);
+    }
+  }
   function isCashPayoutSet(payouts) {
     return payouts.length > 0 && payouts.every((payout) => payout.pricing.marketRate && payout.pricing.spreadBps === 0);
   }
@@ -2151,42 +2164,6 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
-  async function configureCashoutAccess(client, signer, depositInput, depositId) {
-    if (!depositInput.payouts.some(
-      (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
-    )) {
-      return void 0;
-    }
-    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
-    const prepared = prepareCashoutAccess(depositId, client);
-    let hash;
-    try {
-      hash = await signer.sendTransaction({
-        account: signer.account,
-        chain: signer.chain,
-        to: prepared.to,
-        data: prepared.data,
-        value: prepared.value
-      });
-    } catch (err) {
-      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err);
-    }
-    let receipt;
-    try {
-      receipt = await client.publicClient.waitForTransactionReceipt({ hash });
-    } catch (err) {
-      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err, hash);
-    }
-    if (receipt.status === "reverted") {
-      throw errors.accessPolicyConfigurationFailed(
-        depositId,
-        groupIds,
-        errors.transactionFailed(hash),
-        hash
-      );
-    }
-    return hash;
-  }
   function prepareCashoutAccess(depositId, client = readClient) {
     const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
     const groupIds = CASH_ACCESS_GROUP_IDS[environment];
@@ -2246,6 +2223,7 @@ function createCashClient(options) {
     },
     async cashout(input, opts) {
       const payoutInput = validatePayout(input);
+      assertGenericCashoutSupported(payoutInput);
       const client = await signingClient("cashout", opts);
       const owner = opts.signer.account.address;
       let sourceResult;
@@ -2343,12 +2321,6 @@ function createCashClient(options) {
         const abi2 = client.escrowV2Abi ?? client.escrowAbi;
         const resolved2 = resolveCashDepositId({ logs: receipt2.logs, abi: abi2 });
         if (!resolved2) throw errors.depositResolutionFailed(hash2);
-        const accessPolicyTxHash2 = await configureCashoutAccess(
-          client,
-          opts.signer,
-          depositInput2,
-          resolved2.compositeId
-        );
         const order2 = deriveCashOrder(resolved2.compositeId, [], {
           remainingAmount: depositInput2.amount,
           status: "ACTIVE"
@@ -2359,7 +2331,6 @@ function createCashClient(options) {
           escrowAddress: resolved2.escrowAddress,
           onchainDepositId: resolved2.onchainDepositId,
           order: order2,
-          ...accessPolicyTxHash2 ? { accessPolicyTxHash: accessPolicyTxHash2 } : {},
           source: routedSource
         };
       }
@@ -2404,12 +2375,6 @@ function createCashClient(options) {
       const abi = client.escrowV2Abi ?? client.escrowAbi;
       const resolved = resolveCashDepositId({ logs: receipt.logs, abi });
       if (!resolved) throw errors.depositResolutionFailed(hash);
-      const accessPolicyTxHash = await configureCashoutAccess(
-        client,
-        opts.signer,
-        depositInput,
-        resolved.compositeId
-      );
       const order = deriveCashOrder(resolved.compositeId, [], {
         remainingAmount: depositInput.amount,
         status: "ACTIVE"
@@ -2420,13 +2385,13 @@ function createCashClient(options) {
         escrowAddress: resolved.escrowAddress,
         onchainDepositId: resolved.onchainDepositId,
         order,
-        ...accessPolicyTxHash ? { accessPolicyTxHash } : {},
         ...sourceResult ? { source: sourceResult } : {}
       };
     },
     async prepare(input) {
       if (input.source) throw errors.sourceRouteUnsupportedInPrepare();
       const depositInput = validateDepositInput(input.amount, input);
+      assertGenericCashoutSupported(depositInput);
       const params = await buildDepositParams(readClient, depositInput);
       const { prepared } = await readClient.prepareCreateDeposit({
         ...params,
@@ -2459,9 +2424,7 @@ function createCashClient(options) {
           }
         ],
         register: { hashedOnchainIds },
-        accessPolicyRequired: depositInput.payouts.some(
-          (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
-        )
+        accessPolicyRequired: false
       };
     },
     finalizePreparedCashout(receipt) {
@@ -2988,7 +2951,8 @@ var cashCapabilitiesJsonSchema = zod.z.object({
       platform: zod.z.string(),
       currencies: zod.z.array(zod.z.string()),
       payeeHint: zod.z.string(),
-      requiresIdentityAttestation: zod.z.boolean()
+      requiresIdentityAttestation: zod.z.boolean(),
+      requiresAtomicAccessPolicy: zod.z.boolean().optional()
     })
   ),
   currencies: zod.z.array(zod.z.string()),
@@ -3024,6 +2988,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "ORDER_NOT_FOUND",
   "PAYEE_REGISTRATION_FAILED",
   "PAYEE_VERIFICATION_REQUIRED",
+  "ATOMIC_ACCESS_POLICY_REQUIRED",
   "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
   "SOURCE_RECIPIENT_MISMATCH",
   "SOURCE_CAPABILITIES_FAILED",
@@ -3431,7 +3396,8 @@ function capabilitiesFromJson(json) {
     },
     platforms: parsed.platforms.map((p) => ({
       ...p,
-      currencies: p.currencies
+      currencies: p.currencies,
+      requiresAtomicAccessPolicy: p.requiresAtomicAccessPolicy ?? CASH_RESTRICTED_PLATFORMS.has(p.platform)
     })),
     currencies: parsed.currencies,
     amount: {

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-C5YKh7cv.cjs';
-export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-C5YKh7cv.cjs';
+import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-CL1SCbqF.cjs';
+export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-CL1SCbqF.cjs';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';
@@ -10,7 +10,7 @@ import '@relayprotocol/relay-sdk';
  * Typed errors - every failure carries a `code`, whether it is `retryable`,
  * and a `remediation` sentence so agents can self-drive recovery.
  */
-type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
+type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'ATOMIC_ACCESS_POLICY_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
 interface CashErrorShape {
     code: CashErrorCode;
     message: string;
@@ -96,6 +96,7 @@ declare const errors: {
     indexerUnavailable: (operation: string, cause?: unknown) => CashError;
     payeeRegistrationFailed: (cause: unknown) => CashError;
     payeeVerificationRequired: (platform: string, cause?: unknown) => CashError;
+    atomicAccessPolicyRequired: (platforms: readonly string[]) => CashError;
     sourceRouteUnsupportedInPrepare: () => CashError;
     sourceRecipientMismatch: (recipient: string, owner: string) => CashError;
     sourceCapabilitiesFailed: (cause?: unknown) => CashError;
@@ -2291,10 +2292,10 @@ declare const prepareResultJsonSchema: z.ZodObject<{
         to: string;
         value: string;
     }[];
+    accessPolicyRequired: boolean;
     register: {
         hashedOnchainIds: string[];
     };
-    accessPolicyRequired: boolean;
 }, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2306,10 +2307,10 @@ declare const prepareResultJsonSchema: z.ZodObject<{
         to: string;
         value: string;
     }[];
+    accessPolicyRequired: boolean;
     register: {
         hashedOnchainIds: string[];
     };
-    accessPolicyRequired: boolean;
 }>;
 declare const withdrawResultJsonSchema: z.ZodObject<{
     depositId: z.ZodString;
@@ -2638,16 +2639,19 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: z.ZodArray<z.ZodString, "many">;
         payeeHint: z.ZodString;
         requiresIdentityAttestation: z.ZodBoolean;
+        requiresAtomicAccessPolicy: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         platform: string;
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }, {
         platform: string;
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }>, "many">;
     currencies: z.ZodArray<z.ZodString, "many">;
     amount: z.ZodObject<{
@@ -2739,6 +2743,7 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }[];
     pricing: {
         spreadBps: 0;
@@ -2810,6 +2815,7 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }[];
     pricing: {
         spreadBps: 0;
@@ -3213,7 +3219,7 @@ declare const cashErrorRecoveryJsonSchema: z.ZodDiscriminatedUnion<"kind", [z.Zo
     transactionHash?: string | undefined;
 }>]>;
 declare const cashErrorJsonSchema: z.ZodObject<{
-    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
+    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "ATOMIC_ACCESS_POLICY_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
     message: z.ZodString;
     retryable: z.ZodBoolean;
     remediation: z.ZodString;
@@ -3615,7 +3621,7 @@ declare const cashErrorJsonSchema: z.ZodObject<{
     }>]>>;
 }, "strict", z.ZodTypeAny, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "ATOMIC_ACCESS_POLICY_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3702,7 +3708,7 @@ declare const cashErrorJsonSchema: z.ZodObject<{
     } | undefined;
 }, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "ATOMIC_ACCESS_POLICY_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-C5YKh7cv.js';
-export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-C5YKh7cv.js';
+import { I as IntentStatus, C as CashPayoutInfo, a as IntentEntity, b as CashBuyerProfile, c as CashDepositInput, d as CreateDepositParamsArg, e as CashOrder, f as CashFill, g as CashCapabilities, h as CashoutResult, i as CashEstimate, j as CashFillStats, P as PrepareResult, k as CashPreparedStep, R as RelayExecutionResult, l as RelayQuote, m as RelayStatus, n as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-CL1SCbqF.js';
+export { o as CASH_ATTRIBUTION_CODE, p as CASH_REFERRAL_ATTRIBUTION_PREFIX, q as CashAsset, r as CashChain, s as CashClient, t as CashClientOptions, u as CashFillEta, v as CashLeg, w as CashMultiCurrencyLeg, x as CashNextAction, y as CashOrderState, z as CashPairFillStats, A as CashPayeeInput, B as CashPayout, D as CashPayoutPricing, E as CashPlatformCapability, F as CashPreparedStepKind, G as CashReceiveLeg, H as CashoutInput, J as CashoutOptions, K as CuratorPayeeDataInput, L as EstimateInput, M as EstimateOptions, N as MIN_CASHOUT_AMOUNT, O as OrdersOptions, Q as PreparedCashoutReceipt, S as RECOMMENDED_MIN_CASHOUT_AMOUNT, U as RelayOptions, V as RelayQuoteInput, X as RelaySourceInput, Y as RelayTransaction, Z as SignerOptions, _ as WatchOptions, $ as WithdrawOptions, a0 as buildCapabilities, a1 as createCashClient, a2 as normalizeCashPayee, a3 as toCashReferralAttributionCode } from './createCashClient-CL1SCbqF.js';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';
@@ -10,7 +10,7 @@ import '@relayprotocol/relay-sdk';
  * Typed errors - every failure carries a `code`, whether it is `retryable`,
  * and a `remediation` sentence so agents can self-drive recovery.
  */
-type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
+type CashErrorCode = 'ORACLE_UNSUPPORTED_CURRENCY' | 'ORACLE_READ_FAILED' | 'UNSUPPORTED_PLATFORM' | 'UNSUPPORTED_PLATFORM_CURRENCY' | 'AMOUNT_BELOW_MINIMUM' | 'INVALID_INTENT_AMOUNT_RANGE' | 'INVALID_PAYOUT_CURRENCIES' | 'INVALID_PAYOUT_PLATFORMS' | 'INVALID_REFERRAL_CODE' | 'ACTIVE_INTENT_BLOCKS_WITHDRAWAL' | 'NOTHING_TO_WITHDRAW' | 'INSUFFICIENT_AVAILABLE_FUNDS' | 'INSUFFICIENT_TOKEN_BALANCE' | 'ORDER_NOT_ACTIVE' | 'INVALID_DEPOSIT_ID' | 'ESCROW_PAUSED' | 'INDEXER_LAG' | 'INDEXER_UNAVAILABLE' | 'ORDER_NOT_FOUND' | 'PAYEE_REGISTRATION_FAILED' | 'PAYEE_VERIFICATION_REQUIRED' | 'ATOMIC_ACCESS_POLICY_REQUIRED' | 'SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE' | 'SOURCE_RECIPIENT_MISMATCH' | 'SOURCE_CAPABILITIES_FAILED' | 'SOURCE_QUOTE_FAILED' | 'SOURCE_NONCE_MANAGER_REQUIRED' | 'SOURCE_EXECUTION_FAILED' | 'SOURCE_STATUS_FAILED' | 'SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED' | 'SOURCE_CASHOUT_SUBMISSION_UNKNOWN' | 'SOURCE_CASHOUT_STATUS_UNKNOWN' | 'DEPOSIT_RESOLUTION_FAILED' | 'ACCESS_POLICY_CONFIGURATION_FAILED' | 'ALLOWANCE_NOT_VISIBLE' | 'SIGNER_REQUIRED' | 'SIGNER_CHAIN_MISMATCH' | 'SIGNER_CHAIN_UNAVAILABLE' | 'WATCH_TIMEOUT' | 'TRANSACTION_REJECTED' | 'TRANSACTION_FAILED' | 'TRANSACTION_SUBMISSION_UNKNOWN' | 'TRANSACTION_STATUS_UNKNOWN';
 interface CashErrorShape {
     code: CashErrorCode;
     message: string;
@@ -96,6 +96,7 @@ declare const errors: {
     indexerUnavailable: (operation: string, cause?: unknown) => CashError;
     payeeRegistrationFailed: (cause: unknown) => CashError;
     payeeVerificationRequired: (platform: string, cause?: unknown) => CashError;
+    atomicAccessPolicyRequired: (platforms: readonly string[]) => CashError;
     sourceRouteUnsupportedInPrepare: () => CashError;
     sourceRecipientMismatch: (recipient: string, owner: string) => CashError;
     sourceCapabilitiesFailed: (cause?: unknown) => CashError;
@@ -2291,10 +2292,10 @@ declare const prepareResultJsonSchema: z.ZodObject<{
         to: string;
         value: string;
     }[];
+    accessPolicyRequired: boolean;
     register: {
         hashedOnchainIds: string[];
     };
-    accessPolicyRequired: boolean;
 }, {
     steps: {
         kind: "createDeposit" | "approve" | "pruneExpiredIntents" | "withdrawDeposit" | "removeFunds" | "addFunds";
@@ -2306,10 +2307,10 @@ declare const prepareResultJsonSchema: z.ZodObject<{
         to: string;
         value: string;
     }[];
+    accessPolicyRequired: boolean;
     register: {
         hashedOnchainIds: string[];
     };
-    accessPolicyRequired: boolean;
 }>;
 declare const withdrawResultJsonSchema: z.ZodObject<{
     depositId: z.ZodString;
@@ -2638,16 +2639,19 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: z.ZodArray<z.ZodString, "many">;
         payeeHint: z.ZodString;
         requiresIdentityAttestation: z.ZodBoolean;
+        requiresAtomicAccessPolicy: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         platform: string;
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }, {
         platform: string;
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }>, "many">;
     currencies: z.ZodArray<z.ZodString, "many">;
     amount: z.ZodObject<{
@@ -2739,6 +2743,7 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }[];
     pricing: {
         spreadBps: 0;
@@ -2810,6 +2815,7 @@ declare const cashCapabilitiesJsonSchema: z.ZodObject<{
         currencies: string[];
         payeeHint: string;
         requiresIdentityAttestation: boolean;
+        requiresAtomicAccessPolicy?: boolean | undefined;
     }[];
     pricing: {
         spreadBps: 0;
@@ -3213,7 +3219,7 @@ declare const cashErrorRecoveryJsonSchema: z.ZodDiscriminatedUnion<"kind", [z.Zo
     transactionHash?: string | undefined;
 }>]>;
 declare const cashErrorJsonSchema: z.ZodObject<{
-    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
+    code: z.ZodEnum<["ORACLE_UNSUPPORTED_CURRENCY", "ORACLE_READ_FAILED", "UNSUPPORTED_PLATFORM", "UNSUPPORTED_PLATFORM_CURRENCY", "AMOUNT_BELOW_MINIMUM", "INVALID_INTENT_AMOUNT_RANGE", "INVALID_PAYOUT_CURRENCIES", "INVALID_PAYOUT_PLATFORMS", "INVALID_REFERRAL_CODE", "ACTIVE_INTENT_BLOCKS_WITHDRAWAL", "NOTHING_TO_WITHDRAW", "INSUFFICIENT_AVAILABLE_FUNDS", "INSUFFICIENT_TOKEN_BALANCE", "ORDER_NOT_ACTIVE", "INVALID_DEPOSIT_ID", "ESCROW_PAUSED", "INDEXER_LAG", "INDEXER_UNAVAILABLE", "ORDER_NOT_FOUND", "PAYEE_REGISTRATION_FAILED", "PAYEE_VERIFICATION_REQUIRED", "ATOMIC_ACCESS_POLICY_REQUIRED", "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE", "SOURCE_RECIPIENT_MISMATCH", "SOURCE_CAPABILITIES_FAILED", "SOURCE_QUOTE_FAILED", "SOURCE_NONCE_MANAGER_REQUIRED", "SOURCE_EXECUTION_FAILED", "SOURCE_STATUS_FAILED", "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED", "SOURCE_CASHOUT_SUBMISSION_UNKNOWN", "SOURCE_CASHOUT_STATUS_UNKNOWN", "DEPOSIT_RESOLUTION_FAILED", "ACCESS_POLICY_CONFIGURATION_FAILED", "ALLOWANCE_NOT_VISIBLE", "SIGNER_REQUIRED", "SIGNER_CHAIN_MISMATCH", "SIGNER_CHAIN_UNAVAILABLE", "WATCH_TIMEOUT", "TRANSACTION_REJECTED", "TRANSACTION_FAILED", "TRANSACTION_SUBMISSION_UNKNOWN", "TRANSACTION_STATUS_UNKNOWN"]>;
     message: z.ZodString;
     retryable: z.ZodBoolean;
     remediation: z.ZodString;
@@ -3615,7 +3621,7 @@ declare const cashErrorJsonSchema: z.ZodObject<{
     }>]>>;
 }, "strict", z.ZodTypeAny, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "ATOMIC_ACCESS_POLICY_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {
@@ -3702,7 +3708,7 @@ declare const cashErrorJsonSchema: z.ZodObject<{
     } | undefined;
 }, {
     message: string;
-    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
+    code: "ORACLE_UNSUPPORTED_CURRENCY" | "ORACLE_READ_FAILED" | "UNSUPPORTED_PLATFORM" | "UNSUPPORTED_PLATFORM_CURRENCY" | "AMOUNT_BELOW_MINIMUM" | "INVALID_INTENT_AMOUNT_RANGE" | "INVALID_PAYOUT_CURRENCIES" | "INVALID_PAYOUT_PLATFORMS" | "INVALID_REFERRAL_CODE" | "ACTIVE_INTENT_BLOCKS_WITHDRAWAL" | "NOTHING_TO_WITHDRAW" | "INSUFFICIENT_AVAILABLE_FUNDS" | "INSUFFICIENT_TOKEN_BALANCE" | "ORDER_NOT_ACTIVE" | "INVALID_DEPOSIT_ID" | "ESCROW_PAUSED" | "INDEXER_LAG" | "INDEXER_UNAVAILABLE" | "ORDER_NOT_FOUND" | "PAYEE_REGISTRATION_FAILED" | "PAYEE_VERIFICATION_REQUIRED" | "ATOMIC_ACCESS_POLICY_REQUIRED" | "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE" | "SOURCE_RECIPIENT_MISMATCH" | "SOURCE_CAPABILITIES_FAILED" | "SOURCE_QUOTE_FAILED" | "SOURCE_NONCE_MANAGER_REQUIRED" | "SOURCE_EXECUTION_FAILED" | "SOURCE_STATUS_FAILED" | "SOURCE_ROUTE_COMPLETED_CASHOUT_FAILED" | "SOURCE_CASHOUT_SUBMISSION_UNKNOWN" | "SOURCE_CASHOUT_STATUS_UNKNOWN" | "DEPOSIT_RESOLUTION_FAILED" | "ACCESS_POLICY_CONFIGURATION_FAILED" | "ALLOWANCE_NOT_VISIBLE" | "SIGNER_REQUIRED" | "SIGNER_CHAIN_MISMATCH" | "SIGNER_CHAIN_UNAVAILABLE" | "WATCH_TIMEOUT" | "TRANSACTION_REJECTED" | "TRANSACTION_FAILED" | "TRANSACTION_SUBMISSION_UNKNOWN" | "TRANSACTION_STATUS_UNKNOWN";
     retryable: boolean;
     remediation: string;
     recovery?: {

package/dist/index.js

@@ -1,5 +1,5 @@
-import { MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, CASH_RETAIN_ON_EMPTY, CASH_INTENT_GUARDIAN_ADDRESS, BASE_USDC_ADDRESS, USDC_DECIMALS, BASE_CHAIN_ID, errors, isCashError, CASH_ORDER_STATUSES, CASH_RESTRICTED_PLATFORMS, mapChainError, CashError, CASH_ACCESS_GROUP_IDS } from './chunk-ORCJKOT6.js';
-export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError } from './chunk-ORCJKOT6.js';
+import { MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, CASH_RETAIN_ON_EMPTY, CASH_INTENT_GUARDIAN_ADDRESS, BASE_USDC_ADDRESS, USDC_DECIMALS, BASE_CHAIN_ID, CASH_RESTRICTED_PLATFORMS, errors, isCashError, CASH_ORDER_STATUSES, mapChainError, CashError, CASH_ACCESS_GROUP_IDS } from './chunk-YD5VHZXR.js';
+export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError } from './chunk-YD5VHZXR.js';
 import { parseAbi, parseEventLogs, isAddress, http, createWalletClient, encodeFunctionData } from 'viem';
 import { base } from 'viem/chains';
 import { getSpreadOracleConfig, currencyInfo, getPaymentMethodsCatalog, getGatingServiceAddress, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash, getCurrencyCodeFromHash, createCompositeDepositId, appendAttributionToCalldata, Zkp2pClient, CHAINLINK_ORACLE_FEEDS } from '@zkp2p/sdk';
@@ -461,7 +461,8 @@ function buildCapabilities(environment) {
       platform,
       currencies: [...new Set(currencies2)].sort(),
       payeeHint: PAYEE_HINTS[platform] ?? "Your payment handle for this platform",
-      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform)
+      requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform),
+      requiresAtomicAccessPolicy: CASH_RESTRICTED_PLATFORMS.has(platform)
     };
   }).filter((p) => p.currencies.length > 0).sort((a, b) => a.platform.localeCompare(b.platform));
   const currencies = [...new Set(platforms.flatMap((p) => p.currencies))].sort();
@@ -1427,6 +1428,12 @@ function createCashClient(options) {
       ...range ? { intentAmountRange: range } : {}
     };
   }
+  function assertGenericCashoutSupported(payoutInput) {
+    const restrictedPlatforms = payoutInput.payouts.map((payout) => payout.processorName.toLowerCase()).filter((platform) => CASH_RESTRICTED_PLATFORMS.has(platform));
+    if (restrictedPlatforms.length > 0) {
+      throw errors.atomicAccessPolicyRequired(restrictedPlatforms);
+    }
+  }
   function isCashPayoutSet(payouts) {
     return payouts.length > 0 && payouts.every((payout) => payout.pricing.marketRate && payout.pricing.spreadBps === 0);
   }
@@ -1666,42 +1673,6 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
-  async function configureCashoutAccess(client, signer, depositInput, depositId) {
-    if (!depositInput.payouts.some(
-      (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
-    )) {
-      return void 0;
-    }
-    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
-    const prepared = prepareCashoutAccess(depositId, client);
-    let hash;
-    try {
-      hash = await signer.sendTransaction({
-        account: signer.account,
-        chain: signer.chain,
-        to: prepared.to,
-        data: prepared.data,
-        value: prepared.value
-      });
-    } catch (err) {
-      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err);
-    }
-    let receipt;
-    try {
-      receipt = await client.publicClient.waitForTransactionReceipt({ hash });
-    } catch (err) {
-      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, err, hash);
-    }
-    if (receipt.status === "reverted") {
-      throw errors.accessPolicyConfigurationFailed(
-        depositId,
-        groupIds,
-        errors.transactionFailed(hash),
-        hash
-      );
-    }
-    return hash;
-  }
   function prepareCashoutAccess(depositId, client = readClient) {
     const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
     const groupIds = CASH_ACCESS_GROUP_IDS[environment];
@@ -1761,6 +1732,7 @@ function createCashClient(options) {
     },
     async cashout(input, opts) {
       const payoutInput = validatePayout(input);
+      assertGenericCashoutSupported(payoutInput);
       const client = await signingClient("cashout", opts);
       const owner = opts.signer.account.address;
       let sourceResult;
@@ -1858,12 +1830,6 @@ function createCashClient(options) {
         const abi2 = client.escrowV2Abi ?? client.escrowAbi;
         const resolved2 = resolveCashDepositId({ logs: receipt2.logs, abi: abi2 });
         if (!resolved2) throw errors.depositResolutionFailed(hash2);
-        const accessPolicyTxHash2 = await configureCashoutAccess(
-          client,
-          opts.signer,
-          depositInput2,
-          resolved2.compositeId
-        );
         const order2 = deriveCashOrder(resolved2.compositeId, [], {
           remainingAmount: depositInput2.amount,
           status: "ACTIVE"
@@ -1874,7 +1840,6 @@ function createCashClient(options) {
           escrowAddress: resolved2.escrowAddress,
           onchainDepositId: resolved2.onchainDepositId,
           order: order2,
-          ...accessPolicyTxHash2 ? { accessPolicyTxHash: accessPolicyTxHash2 } : {},
           source: routedSource
         };
       }
@@ -1919,12 +1884,6 @@ function createCashClient(options) {
       const abi = client.escrowV2Abi ?? client.escrowAbi;
       const resolved = resolveCashDepositId({ logs: receipt.logs, abi });
       if (!resolved) throw errors.depositResolutionFailed(hash);
-      const accessPolicyTxHash = await configureCashoutAccess(
-        client,
-        opts.signer,
-        depositInput,
-        resolved.compositeId
-      );
       const order = deriveCashOrder(resolved.compositeId, [], {
         remainingAmount: depositInput.amount,
         status: "ACTIVE"
@@ -1935,13 +1894,13 @@ function createCashClient(options) {
         escrowAddress: resolved.escrowAddress,
         onchainDepositId: resolved.onchainDepositId,
         order,
-        ...accessPolicyTxHash ? { accessPolicyTxHash } : {},
         ...sourceResult ? { source: sourceResult } : {}
       };
     },
     async prepare(input) {
       if (input.source) throw errors.sourceRouteUnsupportedInPrepare();
       const depositInput = validateDepositInput(input.amount, input);
+      assertGenericCashoutSupported(depositInput);
       const params = await buildDepositParams(readClient, depositInput);
       const { prepared } = await readClient.prepareCreateDeposit({
         ...params,
@@ -1974,9 +1933,7 @@ function createCashClient(options) {
           }
         ],
         register: { hashedOnchainIds },
-        accessPolicyRequired: depositInput.payouts.some(
-          (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
-        )
+        accessPolicyRequired: false
       };
     },
     finalizePreparedCashout(receipt) {
@@ -2503,7 +2460,8 @@ var cashCapabilitiesJsonSchema = z.object({
       platform: z.string(),
       currencies: z.array(z.string()),
       payeeHint: z.string(),
-      requiresIdentityAttestation: z.boolean()
+      requiresIdentityAttestation: z.boolean(),
+      requiresAtomicAccessPolicy: z.boolean().optional()
     })
   ),
   currencies: z.array(z.string()),
@@ -2539,6 +2497,7 @@ var CASH_ERROR_CODES = defineCashErrorCodes([
   "ORDER_NOT_FOUND",
   "PAYEE_REGISTRATION_FAILED",
   "PAYEE_VERIFICATION_REQUIRED",
+  "ATOMIC_ACCESS_POLICY_REQUIRED",
   "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
   "SOURCE_RECIPIENT_MISMATCH",
   "SOURCE_CAPABILITIES_FAILED",
@@ -2946,7 +2905,8 @@ function capabilitiesFromJson(json) {
     },
     platforms: parsed.platforms.map((p) => ({
       ...p,
-      currencies: p.currencies
+      currencies: p.currencies,
+      requiresAtomicAccessPolicy: p.requiresAtomicAccessPolicy ?? CASH_RESTRICTED_PLATFORMS.has(p.platform)
     })),
     currencies: parsed.currencies,
     amount: {

package/dist/react.d.cts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-C5YKh7cv.cjs';
+import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-CL1SCbqF.cjs';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-C5YKh7cv.js';
+import { s as CashClient, L as EstimateInput, i as CashEstimate, J as CashoutOptions, h as CashoutResult, H as CashoutInput, T as TopUpResult, W as WithdrawResult, e as CashOrder } from './createCashClient-CL1SCbqF.js';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/react.js

@@ -1,4 +1,4 @@
-import { isCashError, CASH_ORDER_POLL_INTERVAL_MS } from './chunk-ORCJKOT6.js';
+import { isCashError, CASH_ORDER_POLL_INTERVAL_MS } from './chunk-YD5VHZXR.js';
 import { useState, useRef, useCallback, useEffect, useMemo } from 'react';
 
 function useEstimate({

package/dist/tools.cjs

@@ -2,7 +2,7 @@
 
 // package.json
 var package_default = {
-  version: "0.4.4"};
+  version: "0.4.5"};
 
 // src/tools/index.ts
 var bigintString = {
@@ -164,7 +164,7 @@ var builtInCashTools = [
   },
   {
     name: "cash_cashout",
-    description: "Start a Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.",
+    description: "Start an unrestricted-rail Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. Platforms marked requiresAtomicAccessPolicy fail closed because this tool cannot safely prepare them. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.",
     inputSchema: {
       type: "object",
       properties: {

package/dist/tools.d.cts

@@ -145,7 +145,7 @@ declare const builtInCashTools: readonly [{
     };
 }, {
     readonly name: "cash_cashout";
-    readonly description: "Start a Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.";
+    readonly description: "Start an unrestricted-rail Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. Platforms marked requiresAtomicAccessPolicy fail closed because this tool cannot safely prepare them. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.";
     readonly inputSchema: {
         readonly type: "object";
         readonly properties: {

package/dist/tools.d.ts

@@ -145,7 +145,7 @@ declare const builtInCashTools: readonly [{
     };
 }, {
     readonly name: "cash_cashout";
-    readonly description: "Start a Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.";
+    readonly description: "Start an unrestricted-rail Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. Platforms marked requiresAtomicAccessPolicy fail closed because this tool cannot safely prepare them. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.";
     readonly inputSchema: {
         readonly type: "object";
         readonly properties: {

package/dist/tools.js

@@ -1,6 +1,6 @@
 // package.json
 var package_default = {
-  version: "0.4.4"};
+  version: "0.4.5"};
 
 // src/tools/index.ts
 var bigintString = {
@@ -162,7 +162,7 @@ var builtInCashTools = [
   },
   {
     name: "cash_cashout",
-    description: "Start a Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.",
+    description: "Start an unrestricted-rail Base-USDC cash-out using the custody-separated prepare path. Returns UNSIGNED transactions plus same-index steps [approve, createDeposit]; signing and ordered submission stay host-side. Platforms marked requiresAtomicAccessPolicy fail closed because this tool cannot safely prepare them. For another source asset, complete cash_source_quote and cash_source_status first, then pass the guaranteed Base USDC output amount here.",
     inputSchema: {
       type: "object",
       properties: {

package/docs/lifecycle-and-recovery.md

@@ -64,10 +64,16 @@ but the host or a signer-backed client must execute the route before
 `cash_cashout` prepares the Base-USDC order. Once the prepared `createDeposit`
 transaction confirms, call `finalizePreparedCashout(receipt)` to decode it with
 the environment-correct escrow ABI and obtain the resumable `CashoutResult`.
-When `prepare()` returned `accessPolicyRequired: true`, submit and confirm
-`prepareAccessPolicy(depositId)` before treating the cash-out as complete. It
-attaches Plus, Pro, Peer Makers, and Peer Pay using the selected environment's
-canonical registry IDs.
+
+Venmo, Cash App, and PayPal require atomic deposit creation and access-policy
+configuration. The generic `cashout()` and `prepare()` paths reject these rails
+with `ATOMIC_ACCESS_POLICY_REQUIRED` before wallet access, Relay work, payee
+registration, allowance, or deposit submission. Peer web performs the required
+guard-before, create, guard-after, and policy configuration in one Curator-backed
+batch. A host must provide the same atomic guarantee to support these rails.
+Discovery marks them with `requiresAtomicAccessPolicy: true`.
+`prepareAccessPolicy(depositId)` is retained only to recover a restricted
+deposit already created by `0.4.4`; it is not a safe new-order sequence.
 
 There is no static chain/token allowlist in Peer Cash. Relay decides source
 support through its metadata and quote execution, filtered to the viem/EVM
@@ -295,6 +301,7 @@ explicit override.
 | `INVALID_PAYOUT_PLATFORMS`              | no        | The payout leg set is empty or repeats a platform. Pass one leg, or an array of legs using each platform at most once.                       |
 | `PAYEE_VERIFICATION_REQUIRED`           | no        | A new Wise/PayPal payee needs an attestation. Register it through Peer first; an existing registration can be reused.                        |
 | `PAYEE_REGISTRATION_FAILED`             | yes       | Curator rejected the handle or was unavailable. Check `payeeHint` and retry.                                                                 |
+| `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Venmo, Cash App, or PayPal needs atomic creation and group policy setup. Use Peer web or an equivalent atomic host; nothing was submitted.   |
 | `SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE`   | no        | `prepare()` accepts Base USDC only. Use signed source execution, or complete Relay first and then prepare the Base cashout.                  |
 | `SOURCE_RECIPIENT_MISMATCH`             | no        | Relay output recipient differs from the cashout depositor. Use the depositor address.                                                        |
 | `SOURCE_CAPABILITIES_FAILED`            | yes       | Relay source discovery failed. Retry or use Base USDC.                                                                                       |
@@ -312,7 +319,7 @@ explicit override.
 | `TRANSACTION_SUBMISSION_UNKNOWN`        | no        | A Base mutation returned no hash but may have broadcast. Inspect wallet/protocol state and its recovery action before any retry.             |
 | `TRANSACTION_STATUS_UNKNOWN`            | no        | A transaction was submitted but its receipt is unknown. Inspect `recovery.transactionHash` before resubmitting.                              |
 | `DEPOSIT_RESOLUTION_FAILED`             | no        | Base tx succeeded but no `DepositReceived` was decoded. Inspect its logs and recover the composite id.                                       |
-| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | The cash-out exists, but its required four-group policy was not confirmed. Use `recovery.depositId` and `groupIds`; never create it again.   |
+| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | A `0.4.4` cash-out exists without confirmed group policy. Configure that existing deposit from recovery data; never create it again.         |
 | `INVALID_DEPOSIT_ID`                    | no        | The id is not `escrowAddress_onchainId`. A bare number cannot cold-hydrate; use the value returned by `cashout()`.                           |
 | `ORDER_NOT_FOUND`                       | yes       | Unknown id or immediate indexer lag. Verify the id and retry shortly after creation.                                                         |
 | `INDEXER_LAG`                           | yes       | Indexer trails the chain. Retry the read shortly.                                                                                            |

package/examples/agent-tool-use.ts

@@ -104,10 +104,16 @@ console.log(`manifest: ${cashToolManifest.name}@${cashToolManifest.version}`);
 console.log(`tools: ${cashToolManifest.tools.map((t) => t.name).join(', ')}\n`);
 
 const caps = (await executeTool('cash_capabilities', {})) as {
-  platforms: { platform: string; currencies: string[]; payeeHint: string }[];
+  platforms: {
+    platform: string;
+    currencies: string[];
+    payeeHint: string;
+    requiresAtomicAccessPolicy: boolean;
+  }[];
 };
-console.log(`agent sees ${caps.platforms.length} platforms; venmo hint:`);
-console.log(`  "${caps.platforms.find((p) => p.platform === 'venmo')?.payeeHint}"\n`);
+const venmo = caps.platforms.find((p) => p.platform === 'venmo');
+console.log(`agent sees ${caps.platforms.length} platforms; venmo capability:`);
+console.log(`  hint="${venmo?.payeeHint}" atomic=${venmo?.requiresAtomicAccessPolicy}\n`);
 
 const est = await executeTool('cash_estimate', {
   amount: usdc(250).toString(),

package/examples/node-cashout.ts

@@ -11,8 +11,10 @@
  * The curator validates supported handles against the live platform, so the
  * payee must be a real account. A new Wise/PayPal registration also needs the
  * identity attestation created by Peer; an existing registered handle can be
- * reused. Override the demo corridor with:
- *   CASH_PLATFORM=venmo CASH_CURRENCY=USD CASH_PAYEE=@your-venmo
+ * reused. Venmo, Cash App, and PayPal require Peer web or another host that
+ * creates the deposit and access policy atomically, so this generic demo uses
+ * Chime by default. Override the demo corridor with:
+ *   CASH_PLATFORM=revolut CASH_CURRENCY=EUR CASH_PAYEE=your-revtag
  */
 import { createWalletClient, http } from 'viem';
 import { privateKeyToAccount } from 'viem/accounts';
@@ -26,9 +28,9 @@ const signer = createWalletClient({ account, chain: base, transport: http() });
 // One leg here; `receive` also accepts an array of legs to offer several
 // platforms on one order (each platform at most once, all at the oracle rate).
 const receive = {
-  platform: process.env.CASH_PLATFORM ?? 'venmo',
+  platform: process.env.CASH_PLATFORM ?? 'chime',
   currency: (process.env.CASH_CURRENCY ?? 'USD') as CurrencyType,
-  payee: { offchainId: process.env.CASH_PAYEE ?? '@your-venmo' },
+  payee: { offchainId: process.env.CASH_PAYEE ?? '$your-chime-sign' },
 };
 
 const cash = createCashClient({ environment: 'staging' });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkp2p/cash",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "Peer Cash - offramp-only SDK for routing crypto to Base USDC, then cashing out to fiat at the live oracle market rate.",
   "license": "MIT",
   "author": "Peer (https://peer.xyz)",