@zkp2p/cash 0.4.7 → 0.4.8

package/AGENTS.md

@@ -9,9 +9,9 @@ can withdraw an unmatched deposit.
 
 ## Decision tree: pick your entry point
 
-1. **You control a signer in-process** (viem `WalletClient`, e.g. a local
-   key or embedded wallet) → use `cashout()` / `topUp()` / `withdraw()`
-   directly.
+1. **You control a signer in-process** (any viem `WalletClient`, including a
+   local or externally connected EOA) → use `cashout()` / `topUp()` /
+   `withdraw()` directly. No Privy wallet is required.
 2. **Signing happens elsewhere** (AA bundler, policy engine, custody service,
    human approval step) → use `prepare()` / `prepareTopUp()` /
    `prepareWithdraw()`. Each returns unsigned `txs[]`
@@ -34,11 +34,13 @@ deposit-level integration share instead of applying maker L1/L2.
 
 **Platform caveats, all surfaced in `capabilities()`:**
 
-- **Venmo, Cash App, and PayPal** carry
-  `requiresAtomicAccessPolicy: true`. Generic `cashout()` and `prepare()` reject
-  them with `ATOMIC_ACCESS_POLICY_REQUIRED` before any side effect. Use Peer
-  web's Curator-backed atomic flow or a host with the same atomic guarantee;
-  never create the deposit and attach the group policy sequentially.
+- **Venmo, Cash App, and PayPal attach access groups by default.** Signed
+  `cashout()` confirms `createDeposit`, then submits and confirms the Plus, Pro,
+  Peer Makers, and Peer Pay policy using the same viem wallet. This is a
+  deliberate non-atomic follow-up with a brief unprotected interval. For
+  `prepare()`, check `accessPolicyRequired`; after `createDeposit` confirms,
+  finalize its receipt and submit `prepareAccessPolicy(depositId)` with the
+  depositor. Any viem EOA works; Privy is not required.
 
 - **Wise and PayPal** carry `requiresIdentityAttestation: true`. A new curator
   registration needs a signed maker identity attestation this SDK cannot mint
@@ -214,8 +216,8 @@ Every `CashError` carries `code`, `retryable`, `remediation`. Behavior:
 | `INVALID_PAYOUT_PLATFORMS`              | no        | Pass one leg or an array of legs, using each platform at most once                         |
 | `PAYEE_VERIFICATION_REQUIRED`           | no        | Register a new Wise/PayPal payee through Peer; an existing registered handle can be reused |
 | `PAYEE_REGISTRATION_FAILED`             | yes       | Validate against `payeeHint`, then retry                                                   |
-| `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Use Peer web or an equivalent atomic host for Venmo, Cash App, or PayPal; nothing moved    |
-| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | Recover an existing `0.4.4` deposit from its policy recovery data; do not create it again  |
+| `ATOMIC_ACCESS_POLICY_REQUIRED`         | no        | Deprecated compatibility code; current SDK flows never emit it                             |
+| `ACCESS_POLICY_CONFIGURATION_FAILED`    | no        | Deposit exists; retry its policy with `recovery.depositId`, never create another cash-out  |
 | `SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE`   | no        | Execute Relay with a signer first, then prepare a Base-USDC cashout                        |
 | `SOURCE_RECIPIENT_MISMATCH`             | no        | Route Base USDC to the cashout depositor                                                   |
 | `SOURCE_CAPABILITIES_FAILED`            | yes       | Retry discovery or fall back to Base USDC                                                  |

package/README.md

@@ -46,9 +46,9 @@ const multiCurrencyStats = fillStats['revolut:EUR+GBP+USD'];
 const { depositId } = await cash.cashout(
   {
     amount: usdc(1000),
-    receive: { platform: 'chime', currency: 'USD', payee: '$you' },
+    receive: { platform: 'venmo', currency: 'USD', payee: '@you' },
   },
-  { signer }, // any viem WalletClient on Base
+  { signer }, // any viem WalletClient on Base, including an EOA
 );
 
 // One method can offer several currencies. The buyer chooses the fill
@@ -71,7 +71,7 @@ const widestReach = await cash.cashout(
   {
     amount: usdc(1000),
     receive: [
-      { platform: 'chime', currency: 'USD', payee: '$you' },
+      { platform: 'venmo', currency: 'USD', payee: '@you' },
       { platform: 'revolut', currencies: ['EUR', 'GBP'], payee: { offchainId: 'revtag' } },
     ],
   },
@@ -120,7 +120,7 @@ const { depositId, source } = await cash.cashout(
       currency: '0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48',
       tradeType: 'EXACT_INPUT',
     },
-    receive: { platform: 'chime', currency: 'USD', payee: { offchainId: '$you' } },
+    receive: { platform: 'venmo', currency: 'USD', payee: { offchainId: '@you' } },
   },
   { signer, sourceSigner },
 );
@@ -141,9 +141,9 @@ console.log(source?.transactions?.origin, source?.transactions?.destination);
 | `quoteSource(input)` / `executeSourceQuote(quote, { signer })` | Relay SDK EVM source routing into Base USDC before cashout                                                                      |
 | `relayStatus(requestId)`                                       | Relay request status from the Relay SDK request path                                                                            |
 | `estimate({ amount, currency }, { includeEta? })`              | Base USDC oracle estimate; optionally skip the historical ETA for progressive rendering                                         |
-| `cashout(input, { signer })`                                   | Registers the payee and creates an unrestricted-rail order; protected rails fail before any side effect                         |
-| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare unrestricted-rail external signing, then resolve the confirmed createDeposit receipt into resumable state               |
-| `prepareAccessPolicy(depositId)`                               | Recover a restricted-rail deposit created by the unsafe `0.4.4` sequential flow; never use it to create a new order             |
+| `cashout(input, { signer })`                                   | Creates the order with any viem wallet; Venmo, Cash App, and PayPal then attach the canonical access groups                     |
+| `prepare(input)` / `finalizePreparedCashout(receipt)`          | Prepare external signing, resolve the deposit, then check `accessPolicyRequired` for the follow-up                              |
+| `prepareAccessPolicy(depositId)`                               | Prepare the post-deposit Plus, Pro, Peer Makers, and Peer Pay policy transaction                                                |
 | `order(depositId)` / `orders(owner)`                           | Resume any order from its id alone; list all orders for a wallet                                                                |
 | `watch(depositId)`                                             | Async iterator: yields on every state change until terminal, abort, or timeout                                                  |
 | `withdraw(depositId, { signer, amount? })`                     | The ONE unwind verb - partial with an `amount` (live intents don't block it), full close without (prunes expired intents first) |
@@ -165,21 +165,22 @@ Peer Cash transaction, including approves, carries ERC-8021 attribution:
 `peer-cash` first, optional `peer-ref-XXXXXX` from `referralCode` next, and your
 analytics-only `referrer` code(s) after it.
 
-Venmo, Cash App, and PayPal must attach Plus, Pro, Peer Makers, and Peer Pay in
-the same atomic operation that creates the deposit. A create-then-configure
-sequence leaves a public interval in which an unapproved taker can signal an
-intent. The generic `cashout()` and `prepare()` paths therefore throw
-`ATOMIC_ACCESS_POLICY_REQUIRED` before wallet access, Relay quoting, payee
-registration, allowance, or deposit submission. Peer web supports these rails
-through its atomic Curator-backed flow. Other hosts must provide an equivalent
-atomic batch rather than composing the two public SDK calls sequentially.
-`capabilities()` marks these platforms with
-`requiresAtomicAccessPolicy: true`.
-
-`prepareAccessPolicy(depositId)` remains available only to recover a restricted
-deposit already created by `0.4.4`. Configure that existing deposit immediately;
-do not call `cashout()` again and do not use this recovery helper as a new-order
-flow.
+No platform requires an atomic access-policy flow. `cashout()` and `prepare()`
+work with any viem `WalletClient`, including a local or externally connected
+EOA; no Privy wallet or signer API is required. The deprecated
+`requiresAtomicAccessPolicy` capability remains for wire compatibility and is
+always `false`.
+
+Venmo, Cash App, and PayPal cash-outs attach Plus, Pro, Peer Makers, and Peer
+Pay groups by default. Signed `cashout()` creates the deposit first, then uses
+the same wallet to submit and confirm the policy transaction; this intentionally
+leaves a brief non-atomic interval. Prepared integrations receive
+`accessPolicyRequired: true` for those platforms and, after confirming
+`createDeposit`, must call `finalizePreparedCashout(receipt)` followed by
+`prepareAccessPolicy(depositId)`. Other platforms do not need the follow-up.
+If policy attachment fails, `ACCESS_POLICY_CONFIGURATION_FAILED.recovery`
+identifies the existing deposit and any submitted policy transaction. Do not
+create another cash-out; resume the policy step with the same depositor wallet.
 
 `capabilities()` presents Zelle as one platform. A cashout with
 `receive.platform: 'zelle'` attaches only the generic Zelle payment method to
@@ -239,6 +240,9 @@ they are available. A source-routed result includes both a flat
 - `TRANSACTION_SUBMISSION_UNKNOWN`: a Base-only cashout or another mutation
   returned no hash. Treat it as potentially broadcast. Inspect recent Base
   wallet activity and the supplied recovery action before any retry.
+- `ACCESS_POLICY_CONFIGURATION_FAILED`: the deposit exists, but its required
+  Venmo, Cash App, or PayPal policy was not confirmed. Do not cash out again;
+  retry `prepareAccessPolicy(error.recovery.depositId)` with the depositor.
 
 Wallet clients pinned to the wrong chain fail with `SIGNER_CHAIN_MISMATCH`
 before a quote or transaction is submitted. Chainless wallets are checked

package/dist/{chunk-SYE25ICW.js → chunk-CSDSJVI7.js}

@@ -198,11 +198,12 @@ var errors = {
     },
     { cause }
   ),
+  /** @deprecated Cash-outs no longer require an atomic access-policy flow. */
   atomicAccessPolicyRequired: (platforms) => new CashError({
     code: "ATOMIC_ACCESS_POLICY_REQUIRED",
-    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    message: `Atomic access-policy enforcement for ${platforms.join(", ")} is deprecated.`,
     retryable: false,
-    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+    remediation: `Upgrade @zkp2p/cash; current cash-out flows do not require atomic access-policy configuration.`
   }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
@@ -405,20 +406,28 @@ var errors = {
     },
     { cause }
   ),
-  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+  accessPolicyConfigurationFailed: (depositId, groupIds, context = {}) => new CashError(
     {
       code: "ACCESS_POLICY_CONFIGURATION_FAILED",
-      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      message: `Cash-out deposit ${depositId} was created, but its access policy could not be confirmed.`,
       retryable: false,
-      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      remediation: `Do not create another cash-out. Submit prepareAccessPolicy(recovery.depositId) with the same depositor wallet, then confirm that transaction.`,
       recovery: {
         kind: "configure-cashout-access-policy",
         depositId,
         groupIds: [...groupIds],
-        ...transactionHash ? { transactionHash } : {}
+        ...context.transactionHash ? { transactionHash: context.transactionHash } : {},
+        ...context.source ? {
+          source: {
+            amount: context.source.amount.toString(),
+            ...context.source.requestId ? { requestId: context.source.requestId } : {},
+            txHashes: context.source.txHashes,
+            ...context.source.transactions ? { transactions: context.source.transactions } : {}
+          }
+        } : {}
       }
     },
-    { cause }
+    { cause: context.cause }
   ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",

package/dist/{createCashClient-CL1SCbqF.d.cts → createCashClient-BJmz3v4_.d.cts}

@@ -311,10 +311,7 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
-    /**
-     * When true, the platform needs deposit creation and access-policy setup in
-     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
-     */
+    /** @deprecated Always false. Restricted-platform policies are attached sequentially. */
     requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
@@ -549,7 +546,7 @@ interface CashoutInput {
     };
 }
 interface SignerOptions {
-    /** A viem WalletClient with an account, on Base. */
+    /** Any viem WalletClient with a Base account, including a local or external EOA. */
     signer: WalletClient;
 }
 interface CashoutOptions extends SignerOptions {
@@ -587,7 +584,7 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
-    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
+    /** Confirmed access-policy transaction for Venmo, Cash App, or PayPal cash-outs. */
     accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
@@ -615,7 +612,7 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
-    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
+    /** Whether the host must submit `prepareAccessPolicy(depositId)` after `createDeposit`. */
     accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
@@ -679,7 +676,7 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
-    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
+    /** Prepare the required four-group follow-up for a restricted cash-out. */
     prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;

package/dist/{createCashClient-CL1SCbqF.d.ts → createCashClient-BJmz3v4_.d.ts}

@@ -311,10 +311,7 @@ interface CashPlatformCapability {
      * `PAYEE_VERIFICATION_REQUIRED`.
      */
     requiresIdentityAttestation: boolean;
-    /**
-     * When true, the platform needs deposit creation and access-policy setup in
-     * one atomic host operation. Generic `cashout()` and `prepare()` fail closed.
-     */
+    /** @deprecated Always false. Restricted-platform policies are attached sequentially. */
     requiresAtomicAccessPolicy: boolean;
 }
 interface CashCapabilities {
@@ -549,7 +546,7 @@ interface CashoutInput {
     };
 }
 interface SignerOptions {
-    /** A viem WalletClient with an account, on Base. */
+    /** Any viem WalletClient with a Base account, including a local or external EOA. */
     signer: WalletClient;
 }
 interface CashoutOptions extends SignerOptions {
@@ -587,7 +584,7 @@ interface CashoutResult {
     onchainDepositId: bigint;
     /** Optimistic snapshot (`awaiting-buyer`); poll `order(depositId)` for live state. */
     order: CashOrder;
-    /** @deprecated Only present in recovery data produced by the unsafe 0.4.4 sequential flow. */
+    /** Confirmed access-policy transaction for Venmo, Cash App, or PayPal cash-outs. */
     accessPolicyTxHash?: Hash;
     /** Present when `cashout()` first routed a source asset through Relay. */
     source?: {
@@ -615,7 +612,7 @@ interface PrepareResult {
     register: {
         hashedOnchainIds: string[];
     };
-    /** @deprecated Always false for new plans; restricted rails require an atomic host flow. */
+    /** Whether the host must submit `prepareAccessPolicy(depositId)` after `createDeposit`. */
     accessPolicyRequired: boolean;
 }
 /** Confirmed createDeposit receipt from an externally executed prepare() plan. */
@@ -679,7 +676,7 @@ interface CashClient {
     prepare(input: CashoutInput): Promise<PrepareResult>;
     /** Resolve an externally executed createDeposit receipt into resumable cash-out state. */
     finalizePreparedCashout(receipt: PreparedCashoutReceipt): CashoutResult;
-    /** Recover an existing 0.4.4 restricted-rail deposit by preparing its four-group policy. */
+    /** Prepare the required four-group follow-up for a restricted cash-out. */
     prepareAccessPolicy(depositId: string): PreparedTransaction;
     /** 3 - Observe: resumable from `depositId` alone; no session state anywhere. */
     order(depositId: string): Promise<CashOrder>;

package/dist/index.cjs

@@ -498,7 +498,7 @@ function buildCapabilities(environment) {
       currencies: [...new Set(currencies2)].sort(),
       payeeHint: PAYEE_HINTS[platform] ?? "Your payment handle for this platform",
       requiresIdentityAttestation: IDENTITY_ATTESTATION_PLATFORMS.has(platform),
-      requiresAtomicAccessPolicy: CASH_RESTRICTED_PLATFORMS.has(platform)
+      requiresAtomicAccessPolicy: false
     };
   }).filter((p) => p.currencies.length > 0).sort((a, b) => a.platform.localeCompare(b.platform));
   const currencies = [...new Set(platforms.flatMap((p) => p.currencies))].sort();
@@ -680,11 +680,12 @@ var errors = {
     },
     { cause }
   ),
+  /** @deprecated Cash-outs no longer require an atomic access-policy flow. */
   atomicAccessPolicyRequired: (platforms) => new CashError({
     code: "ATOMIC_ACCESS_POLICY_REQUIRED",
-    message: `${platforms.join(", ")} cash-outs require atomic deposit creation and access-policy configuration.`,
+    message: `Atomic access-policy enforcement for ${platforms.join(", ")} is deprecated.`,
     retryable: false,
-    remediation: `Use Peer web or a host that atomically batches guard-before, createDeposit, guard-after, and configureDeposit. Nothing was submitted by this call.`
+    remediation: `Upgrade @zkp2p/cash; current cash-out flows do not require atomic access-policy configuration.`
   }),
   sourceRouteUnsupportedInPrepare: () => new CashError({
     code: "SOURCE_ROUTE_UNSUPPORTED_IN_PREPARE",
@@ -887,20 +888,28 @@ var errors = {
     },
     { cause }
   ),
-  accessPolicyConfigurationFailed: (depositId, groupIds, cause, transactionHash) => new CashError(
+  accessPolicyConfigurationFailed: (depositId, groupIds, context = {}) => new CashError(
     {
       code: "ACCESS_POLICY_CONFIGURATION_FAILED",
-      message: `Cash-out deposit ${depositId} was created, but its required access policy was not confirmed.`,
+      message: `Cash-out deposit ${depositId} was created, but its access policy could not be confirmed.`,
       retryable: false,
-      remediation: `Do not call cashout() again. Inspect the existing deposit and any access-policy transaction, then configure that deposit with recovery.groupIds through @zkp2p/sdk accessPolicy.`,
+      remediation: `Do not create another cash-out. Submit prepareAccessPolicy(recovery.depositId) with the same depositor wallet, then confirm that transaction.`,
       recovery: {
         kind: "configure-cashout-access-policy",
         depositId,
         groupIds: [...groupIds],
-        ...transactionHash ? { transactionHash } : {}
+        ...context.transactionHash ? { transactionHash: context.transactionHash } : {},
+        ...context.source ? {
+          source: {
+            amount: context.source.amount.toString(),
+            ...context.source.requestId ? { requestId: context.source.requestId } : {},
+            txHashes: context.source.txHashes,
+            ...context.source.transactions ? { transactions: context.source.transactions } : {}
+          }
+        } : {}
       }
     },
-    { cause }
+    { cause: context.cause }
   ),
   escrowPaused: () => new CashError({
     code: "ESCROW_PAUSED",
@@ -1786,6 +1795,11 @@ async function submitAndConfirm(client, verb, send) {
 function isKnownPreBroadcastFailure(mapped) {
   return mapped.code === "TRANSACTION_REJECTED" || mapped.code === "INSUFFICIENT_TOKEN_BALANCE" || mapped.code === "ALLOWANCE_NOT_VISIBLE" || mapped.code === "ESCROW_PAUSED";
 }
+function requiresCashoutAccessPolicy(depositInput) {
+  return depositInput.payouts.some(
+    (payout) => CASH_RESTRICTED_PLATFORMS.has(payout.processorName.toLowerCase())
+  );
+}
 function depositOrderOptions(deposit) {
   const remaining = toBigIntOrUndefined(deposit.remainingDeposits);
   const outstanding = toBigIntOrUndefined(deposit.outstandingIntentAmount);
@@ -1917,12 +1931,6 @@ function createCashClient(options) {
       ...range ? { intentAmountRange: range } : {}
     };
   }
-  function assertGenericCashoutSupported(payoutInput) {
-    const restrictedPlatforms = payoutInput.payouts.map((payout) => payout.processorName.toLowerCase()).filter((platform) => CASH_RESTRICTED_PLATFORMS.has(platform));
-    if (restrictedPlatforms.length > 0) {
-      throw errors.atomicAccessPolicyRequired(restrictedPlatforms);
-    }
-  }
   function isCashPayoutSet(payouts) {
     return payouts.length > 0 && payouts.every((payout) => payout.pricing.marketRate && payout.pricing.spreadBps === 0);
   }
@@ -2162,7 +2170,7 @@ function createCashClient(options) {
     if (lastNonceError) throw lastNonceError;
     throw new Error(`Signer provider did not observe Relay nonce ${afterRelay - 1}`);
   }
-  function prepareCashoutAccess(depositId, client = readClient) {
+  function prepareCashoutAccess(depositId, client = readClient, source) {
     const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
     const groupIds = CASH_ACCESS_GROUP_IDS[environment];
     try {
@@ -2181,9 +2189,50 @@ function createCashClient(options) {
         chainId: prepared.chainId
       };
     } catch (err) {
-      throw errors.accessPolicyConfigurationFailed(compositeId, groupIds, err);
+      throw errors.accessPolicyConfigurationFailed(compositeId, groupIds, {
+        cause: err,
+        ...source ? { source } : {}
+      });
     }
   }
+  async function configureCashoutAccess(client, signer, depositInput, depositId, source) {
+    if (!requiresCashoutAccessPolicy(depositInput)) return void 0;
+    const groupIds = CASH_ACCESS_GROUP_IDS[environment];
+    const prepared = prepareCashoutAccess(depositId, client, source);
+    let hash;
+    try {
+      hash = await signer.sendTransaction({
+        account: signer.account,
+        chain: signer.chain,
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value
+      });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, {
+        cause: err,
+        ...source ? { source } : {}
+      });
+    }
+    let receipt;
+    try {
+      receipt = await client.publicClient.waitForTransactionReceipt({ hash });
+    } catch (err) {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, {
+        cause: err,
+        transactionHash: hash,
+        ...source ? { source } : {}
+      });
+    }
+    if (receipt.status === "reverted") {
+      throw errors.accessPolicyConfigurationFailed(depositId, groupIds, {
+        cause: errors.transactionFailed(hash),
+        transactionHash: hash,
+        ...source ? { source } : {}
+      });
+    }
+    return hash;
+  }
   return {
     capabilities,
     async sourceCapabilities() {
@@ -2221,7 +2270,6 @@ function createCashClient(options) {
     },
     async cashout(input, opts) {
       const payoutInput = validatePayout(input);
-      assertGenericCashoutSupported(payoutInput);
       const client = await signingClient("cashout", opts);
       const owner = opts.signer.account.address;
       let sourceResult;
@@ -2319,6 +2367,13 @@ function createCashClient(options) {
         const abi2 = client.escrowV2Abi ?? client.escrowAbi;
         const resolved2 = resolveCashDepositId({ logs: receipt2.logs, abi: abi2 });
         if (!resolved2) throw errors.depositResolutionFailed(hash2);
+        const accessPolicyTxHash2 = await configureCashoutAccess(
+          client,
+          opts.signer,
+          depositInput2,
+          resolved2.compositeId,
+          routedSource
+        );
         const order2 = deriveCashOrder(resolved2.compositeId, [], {
           remainingAmount: depositInput2.amount,
           status: "ACTIVE"
@@ -2329,6 +2384,7 @@ function createCashClient(options) {
           escrowAddress: resolved2.escrowAddress,
           onchainDepositId: resolved2.onchainDepositId,
           order: order2,
+          ...accessPolicyTxHash2 ? { accessPolicyTxHash: accessPolicyTxHash2 } : {},
           source: routedSource
         };
       }
@@ -2373,6 +2429,12 @@ function createCashClient(options) {
       const abi = client.escrowV2Abi ?? client.escrowAbi;
       const resolved = resolveCashDepositId({ logs: receipt.logs, abi });
       if (!resolved) throw errors.depositResolutionFailed(hash);
+      const accessPolicyTxHash = await configureCashoutAccess(
+        client,
+        opts.signer,
+        depositInput,
+        resolved.compositeId
+      );
       const order = deriveCashOrder(resolved.compositeId, [], {
         remainingAmount: depositInput.amount,
         status: "ACTIVE"
@@ -2383,13 +2445,13 @@ function createCashClient(options) {
         escrowAddress: resolved.escrowAddress,
         onchainDepositId: resolved.onchainDepositId,
         order,
+        ...accessPolicyTxHash ? { accessPolicyTxHash } : {},
         ...sourceResult ? { source: sourceResult } : {}
       };
     },
     async prepare(input) {
       if (input.source) throw errors.sourceRouteUnsupportedInPrepare();
       const depositInput = validateDepositInput(input.amount, input);
-      assertGenericCashoutSupported(depositInput);
       const params = await buildDepositParams(readClient, depositInput);
       const { prepared } = await readClient.prepareCreateDeposit({
         ...params,
@@ -2422,7 +2484,7 @@ function createCashClient(options) {
           }
         ],
         register: { hashedOnchainIds },
-        accessPolicyRequired: false
+        accessPolicyRequired: requiresCashoutAccessPolicy(depositInput)
       };
     },
     finalizePreparedCashout(receipt) {
@@ -3049,7 +3111,8 @@ var cashErrorRecoveryJsonSchema = zod.z.discriminatedUnion("kind", [
     kind: zod.z.literal("configure-cashout-access-policy"),
     depositId: zod.z.string(),
     groupIds: zod.z.array(zod.z.string()),
-    transactionHash: zod.z.string().optional()
+    transactionHash: zod.z.string().optional(),
+    source: zod.z.object(cashSourceRecoveryJsonShape).strict().optional()
   }).strict()
 ]);
 var cashErrorJsonSchema = zod.z.object({
@@ -3377,6 +3440,10 @@ function topUpResultFromJson(json) {
 function capabilitiesToJson(caps) {
   return {
     ...caps,
+    platforms: caps.platforms.map((platform) => ({
+      ...platform,
+      requiresAtomicAccessPolicy: false
+    })),
     amount: {
       min: caps.amount.min.toString(),
       recommendedMin: caps.amount.recommendedMin.toString(),
@@ -3395,7 +3462,7 @@ function capabilitiesFromJson(json) {
     platforms: parsed.platforms.map((p) => ({
       ...p,
       currencies: p.currencies,
-      requiresAtomicAccessPolicy: p.requiresAtomicAccessPolicy ?? CASH_RESTRICTED_PLATFORMS.has(p.platform)
+      requiresAtomicAccessPolicy: false
     })),
     currencies: parsed.currencies,
     amount: {
@@ -3429,7 +3496,15 @@ function cashErrorFromJson(json) {
         kind: parsed.recovery.kind,
         depositId: parsed.recovery.depositId,
         groupIds: parsed.recovery.groupIds,
-        ...parsed.recovery.transactionHash !== void 0 ? { transactionHash: parsed.recovery.transactionHash } : {}
+        ...parsed.recovery.transactionHash !== void 0 ? { transactionHash: parsed.recovery.transactionHash } : {},
+        ...parsed.recovery.source !== void 0 ? {
+          source: {
+            amount: parsed.recovery.source.amount,
+            txHashes: parsed.recovery.source.txHashes,
+            ...parsed.recovery.source.requestId !== void 0 ? { requestId: parsed.recovery.source.requestId } : {},
+            ...parsed.recovery.source.transactions !== void 0 ? { transactions: parsed.recovery.source.transactions } : {}
+          }
+        } : {}
       };
     } else if (parsed.recovery.kind === "inspect-base-operation-submission") {
       recovery = {