@zkp2p/cash 0.6.3-rc.2 → 0.7.0-rc.0

package/AGENTS.md

@@ -7,8 +7,8 @@
 You are integrating Peer Cash: an offramp that routes Relay-supported EVM
 assets or NEAR Intents 1Click external deposits into Base USDC, then converts
 Base USDC to fiat (Venmo, Revolut, Wise, Alipay, Zelle, ...) at a zero-spread
-Chainlink market rate. Existing corridors bind at intent signal; Alipay/CNY
-fixes a fresh Ethereum Chainlink snapshot during deposit preparation; UPI/INR uses Polygon Chainlink. The user whose USDC you
+oracle market rate. Every corridor, including Alipay/CNY and UPI/INR, binds
+the Base oracle at intent signal. The user whose USDC you
 manage is the **maker**; a buyer pays them fiat and proves it with TEE-TLS; the
 protocol releases the USDC. Funds are held by the protocol, and only the maker
 can withdraw an unmatched deposit.
@@ -200,10 +200,8 @@ const route = await cash.nearIntentsStatus({
 ## Rules that prevent wrong behavior
 
 - **Respect the declared binding point.** `estimate()` is
-  `kind: 'oracle-estimate'`. Its `binding` is `intent-signal` for existing
-  on-chain oracle corridors and `deposit-creation` for Alipay/CNY and UPI/INR. Do not call
-  an estimate locked before that point. Once a creation-time corridor is prepared, its fresh
-  Chainlink snapshot is the on-chain maker floor.
+  `kind: 'oracle-estimate'` with `binding: 'intent-signal'` for every currency.
+  The estimate is approximate; each buyer's signal binds the live oracle rate.
 - **Do not invent an ETA.** Use `estimate().eta`: `{ seconds, label }` backed
   by the same rolling 30-day, intent-attributed pair sample as `fillStats()`,
   measured from deposit creation to first fill. Use `order.explain()` for live
@@ -340,13 +338,11 @@ wallet. Never wait on a buyer - buyer-side is out of your scope:
 If step 4 ever fails with funds stuck, stop and escalate - do not retry
 blindly.
 
-UPI/INR reads the live Chainlink Polygon mainnet proxy
-`0xDA0F8Df6F5dB15b346f4B8D1156722027E194E60` (chain 137), inverts
-USD per INR, and rounds the creation-time maker floor up. Configure its
-read-only RPC with `upiCreationRateRpcUrl` or `upiCreationRateTransport`.
-Alipay/CNY retains the Ethereum registry and `creationRateRpcUrl` /
-`creationRateTransport`. UPI rejects the wrong chain, invalid rounds, and
-observations older than 24 hours; market closures do not bypass freshness.
+UPI/INR and Alipay/CNY use ZKP2P-operated AggregatorV3-compatible feeds on Base,
+through the SDK's Chainlink oracle adapter with `invert: true` and zero spread.
+The SDK feed catalog supplies the addresses and determines oracle availability;
+Cash adds no currency exceptions. Estimates read through the normal Base
+`transport` / `rpcUrl`; deposits float until each buyer signals an intent.
 UPI is available in production, preproduction, and staging without a feature flag.
 
 ## Optional Venmo receipt linking

package/README.md

@@ -2,10 +2,9 @@
 
 Route Relay-supported EVM assets or NEAR Intents 1Click external deposits into
 Base USDC, then cash out to fiat on Venmo, Revolut, Wise, Alipay, Zelle, and
-more at a zero-spread Chainlink market rate with no centralized off-ramp
-provider. Existing corridors bind the live oracle when a buyer signals;
-Alipay/CNY and UPI/INR fix fresh Chainlink snapshots when the SDK prepares
-the deposit (Ethereum for CNY; Polygon for INR).
+more at a zero-spread on-chain oracle market rate with no centralized off-ramp
+provider. Every corridor, including Alipay/CNY and UPI/INR, binds the live
+Base oracle when a buyer signals.
 
 Peer Cash is an **offramp-only** SDK for the [ZKP2P](https://peer.xyz)
 protocol. The cashing-out user is the maker: their USDC becomes a deposit in
@@ -79,14 +78,14 @@ const widestReach = await cash.cashout(
   { signer },
 );
 
-// Alipay/CNY is the explicit creation-time exception. New Alipay payees need
+// Alipay/CNY uses the same signal-time oracle path. New Alipay payees need
 // the identity attestation prepared by first-party Peer web.
 const alipayEstimate = await cash.estimate({
   amount: usdc(1000),
   platform: 'alipay',
   currency: 'CNY',
 });
-// alipayEstimate.binding === 'deposit-creation'
+// alipayEstimate.binding === 'intent-signal'
 
 for await (const order of cash.watch(depositId)) {
   console.log(order.state, order.explain());
@@ -96,8 +95,8 @@ for await (const order of cash.watch(depositId)) {
 
 ### Staging and preproduction UPI cash-out
 
-UPI requires the canonical UPI/INR catalog from `@zkp2p/sdk` 0.14.2-rc.1
-or its approved successor; a missing catalog entry keeps the corridor disabled.
+UPI requires the canonical UPI/INR catalog and INR oracle config from the
+pinned `@zkp2p/sdk` 0.14.5-rc.2; missing oracle support disables the corridor.
 UPI is available in every environment without an opt-in. Any valid UPI ID from any bank can receive a cash-out. The seller
 does not connect a bank account, install an extension, or complete a separate
 registration flow:
@@ -120,21 +119,30 @@ Buyers pay and verify through Amazon Pay using standard UPI. UPI Lite and
 merchant payments are unsupported. The seller may receive at a valid UPI ID
 from any bank.
 
-INR pricing uses the [Chainlink Polygon INR/USD feed](https://data.chain.link/feeds/polygon/mainnet/inr-usd),
-inverted into INR per USDC and fixed at deposit preparation. The SDK rejects
-invalid rounds and readings older than 24 hours, including market-hour gaps.
-Only oracle reads use Polygon; funds and transactions stay on Base. Override
-the Polygon reader with `upiCreationRateTransport` or `upiCreationRateRpcUrl`.
-The existing `creationRateTransport`/`creationRateRpcUrl` options remain Ethereum-only for CNY.
+UPI/INR and Alipay/CNY use ZKP2P-operated AggregatorV3-compatible feeds on Base,
+through the SDK's Chainlink oracle adapter with `invert: true` and zero spread.
+The SDK feed catalog supplies the addresses and determines oracle availability;
+Cash adds no currency exceptions. Estimates read through the normal Base
+`transport` / `rpcUrl`; deposits float until each buyer signals an intent.
+UPI is available in production, preproduction, and staging without a feature flag.
+
+With `@zkp2p/sdk` 0.14.5-rc.2, Express Cash intentionally also offers
+Wise/INR, Wise/CNY, and Revolut/CNY because corridor support derives from
+oracle availability and each platform's currency catalog. The exact INR/CNY
+corridor set in production, preproduction, and staging is UPI/INR, Wise/INR,
+Alipay/CNY, Wise/CNY, and Revolut/CNY. All five use zero-spread oracle pricing
+bound at intent signal; currencies without an oracle config remain unsupported.
+
+See [the INR/CNY migration notes](docs/lifecycle-and-recovery.md#inrcny-oracle-migration-breaking) before upgrading an existing integration.
 
 ## Pick the right SDK
 
 Peer Cash and the general ZKP2P SDK serve different integration depths:
 
-| Package       | Use it when                                       | Boundary                                                                                                                                                                                                                       |
-| ------------- | ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| `@zkp2p/cash` | Cash-out is the product                           | Offramp only. The user is always the maker, the destination is Base USDC, pricing is zero-spread Chainlink (signal-time by default; creation-time for Alipay/CNY and UPI/INR), and the SDK owns the resumable order lifecycle. |
-| `@zkp2p/sdk`  | You are composing directly with the Peer protocol | General maker and taker operations, deposits, intents, proofs, quotes, vaults, rate managers, referrals, hooks, and API helpers. Your application owns the workflow and protocol choices.                                      |
+| Package       | Use it when                                       | Boundary                                                                                                                                                                                  |
+| ------------- | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `@zkp2p/cash` | Cash-out is the product                           | Offramp only. The user is always the maker, the destination is Base USDC, pricing is zero-spread Base oracles at intent signal, and the SDK owns the resumable order lifecycle.           |
+| `@zkp2p/sdk`  | You are composing directly with the Peer protocol | General maker and taker operations, deposits, intents, proofs, quotes, vaults, rate managers, referrals, hooks, and API helpers. Your application owns the workflow and protocol choices. |
 
 Peer Cash is a narrow facade over `@zkp2p/sdk`, not a replacement for it. It
 cannot express custom spreads, buyer-side proof flows, vaults, disputes, or
@@ -524,15 +532,10 @@ awaiting-buyer ──────────► matched ───────
    returned ◄─────────────────┘
 ```
 
-- **You are the maker.** Pricing is zero-spread. Existing corridors resolve
-  from the on-chain Chainlink oracle when a buyer signals an intent.
-- **Alipay/CNY binds earlier.** Base has no CNY oracle adapter, so the SDK reads
-  Chainlink CNY/USD on Ethereum, rejects stale or invalid data, and fixes the
-  resulting CNY-per-USDC maker floor when it prepares the deposit. A buyer may
-  signal at that floor or a better rate for the maker.
-- **Read `binding`.** `estimate().binding` is `intent-signal` by default and
-  `deposit-creation` for Alipay/CNY and UPI/INR. An estimate remains approximate until its
-  stated binding point.
+- **You are the maker.** Every corridor uses the live Base oracle with zero
+  spread when a buyer signals an intent, including Alipay/CNY and UPI/INR.
+- **Read `binding`.** `estimate().binding` is `intent-signal`. An estimate
+  remains approximate; each signal binds the then-current rate.
 - **ETA is historical.** `estimate().eta` is just `{ seconds, label }`, backed
   by the same rolling 30-day, intent-attributed pair sampler as `fillStats()`,
   measured from deposit creation to the first fulfilled fill through the pair.

package/dist/{createCashClient-Cwsu0xKW.d.cts → createCashClient-lYL_Vx2Z.d.cts}

@@ -314,10 +314,7 @@ declare const BASE_CHAIN_ID = 8453;
 declare const BASE_USDC_ADDRESS: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 /** USDC has 6 decimals. */
 declare const USDC_DECIMALS = 6;
-/**
- * Signal-time oracle corridors use zero spread. Alipay/CNY instead fixes a
- * fresh creation-time snapshot because Base has no CNY oracle adapter.
- */
+/** Every corridor uses the signal-time oracle rate with zero spread. */
 declare const MARKET_SPREAD_BPS = 0;
 /**
  * EscrowV2 rejects a zero `minConversionRate` even when an oracle-backed rate
@@ -475,10 +472,6 @@ declare const RECOMMENDED_MIN_CASHOUT_AMOUNT = 1000000n;
 type CashCorridorPricing = {
     kind: 'oracle-at-intent-signal';
     spreadBps: 0;
-} | {
-    kind: 'fixed-at-deposit-creation';
-    source: 'chainlink-ethereum';
-    spreadBps: 0;
 };
 interface CashPlatformCapability {
     /** Platform id, e.g. `'venmo'` - the value `receive.platform` accepts. */
@@ -548,7 +541,7 @@ interface CashCapabilities {
         recommendedMin: bigint;
         max: null;
     };
-    /** Default pricing for corridors without a platform-level creation-time exception. */
+    /** Pricing for every supported corridor. */
     pricing: {
         kind: 'oracle-market-rate';
         spreadBps: 0;
@@ -578,9 +571,7 @@ interface CashFillEta {
  * Estimate - currency + amount only. No payee, no side effects, no expiry,
  * idempotent, cacheable.
  *
- * Existing corridors read the same Chainlink feed the protocol uses when an
- * intent is signaled. Creation-rate corridors read Chainlink on Ethereum (CNY)
- * or Polygon (INR), fixing the fresh snapshot when preparing the deposit.
+ * Reads the same Base oracle feed the protocol uses when an intent is signaled.
  */
 
 interface EstimateInput {
@@ -591,7 +582,7 @@ interface EstimateInput {
     amount: bigint;
     /** Target fiat currency. */
     currency: CurrencyType;
-    /** Optional payout platform for pricing semantics and pair-specific ETA sampling. */
+    /** Optional payout platform for pair-specific ETA sampling. */
     platform?: string;
     /** Optional Relay EVM source asset. Omit for the current Base USDC default path. */
     source?: RelaySourceInput & {
@@ -614,7 +605,7 @@ interface CashEstimate {
     /** Always `'oracle-estimate'`; inspect `binding` for when it becomes a maker floor. */
     kind: 'oracle-estimate';
     /** When this estimate becomes the deposit's binding maker floor. */
-    binding?: 'intent-signal' | 'deposit-creation';
+    binding?: 'intent-signal';
     currency: CurrencyType;
     /** Base USDC amount that Peer Cash would deposit after any source routing. */
     amount: bigint;
@@ -691,14 +682,6 @@ interface CashClientOptions {
     };
     /** Optional ZKP2P API key. */
     apiKey?: string;
-    /** Ethereum transport used only to snapshot Alipay/CNY's creation-time rate. */
-    creationRateTransport?: Transport;
-    /** Convenience alternative to `creationRateTransport`. */
-    creationRateRpcUrl?: string;
-    /** Polygon transport used only to snapshot UPI/INR's creation-time rate. */
-    upiCreationRateTransport?: Transport;
-    /** Convenience alternative to `upiCreationRateTransport`; requires Polygon mainnet. */
-    upiCreationRateRpcUrl?: string;
     /** Relay API configuration for source assets outside Base USDC. */
     relay?: RelayOptions;
     /** NEAR Intents 1Click configuration for externally funded source routes. */

package/dist/{createCashClient-Cwsu0xKW.d.ts → createCashClient-lYL_Vx2Z.d.ts}

@@ -314,10 +314,7 @@ declare const BASE_CHAIN_ID = 8453;
 declare const BASE_USDC_ADDRESS: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913";
 /** USDC has 6 decimals. */
 declare const USDC_DECIMALS = 6;
-/**
- * Signal-time oracle corridors use zero spread. Alipay/CNY instead fixes a
- * fresh creation-time snapshot because Base has no CNY oracle adapter.
- */
+/** Every corridor uses the signal-time oracle rate with zero spread. */
 declare const MARKET_SPREAD_BPS = 0;
 /**
  * EscrowV2 rejects a zero `minConversionRate` even when an oracle-backed rate
@@ -475,10 +472,6 @@ declare const RECOMMENDED_MIN_CASHOUT_AMOUNT = 1000000n;
 type CashCorridorPricing = {
     kind: 'oracle-at-intent-signal';
     spreadBps: 0;
-} | {
-    kind: 'fixed-at-deposit-creation';
-    source: 'chainlink-ethereum';
-    spreadBps: 0;
 };
 interface CashPlatformCapability {
     /** Platform id, e.g. `'venmo'` - the value `receive.platform` accepts. */
@@ -548,7 +541,7 @@ interface CashCapabilities {
         recommendedMin: bigint;
         max: null;
     };
-    /** Default pricing for corridors without a platform-level creation-time exception. */
+    /** Pricing for every supported corridor. */
     pricing: {
         kind: 'oracle-market-rate';
         spreadBps: 0;
@@ -578,9 +571,7 @@ interface CashFillEta {
  * Estimate - currency + amount only. No payee, no side effects, no expiry,
  * idempotent, cacheable.
  *
- * Existing corridors read the same Chainlink feed the protocol uses when an
- * intent is signaled. Creation-rate corridors read Chainlink on Ethereum (CNY)
- * or Polygon (INR), fixing the fresh snapshot when preparing the deposit.
+ * Reads the same Base oracle feed the protocol uses when an intent is signaled.
  */
 
 interface EstimateInput {
@@ -591,7 +582,7 @@ interface EstimateInput {
     amount: bigint;
     /** Target fiat currency. */
     currency: CurrencyType;
-    /** Optional payout platform for pricing semantics and pair-specific ETA sampling. */
+    /** Optional payout platform for pair-specific ETA sampling. */
     platform?: string;
     /** Optional Relay EVM source asset. Omit for the current Base USDC default path. */
     source?: RelaySourceInput & {
@@ -614,7 +605,7 @@ interface CashEstimate {
     /** Always `'oracle-estimate'`; inspect `binding` for when it becomes a maker floor. */
     kind: 'oracle-estimate';
     /** When this estimate becomes the deposit's binding maker floor. */
-    binding?: 'intent-signal' | 'deposit-creation';
+    binding?: 'intent-signal';
     currency: CurrencyType;
     /** Base USDC amount that Peer Cash would deposit after any source routing. */
     amount: bigint;
@@ -691,14 +682,6 @@ interface CashClientOptions {
     };
     /** Optional ZKP2P API key. */
     apiKey?: string;
-    /** Ethereum transport used only to snapshot Alipay/CNY's creation-time rate. */
-    creationRateTransport?: Transport;
-    /** Convenience alternative to `creationRateTransport`. */
-    creationRateRpcUrl?: string;
-    /** Polygon transport used only to snapshot UPI/INR's creation-time rate. */
-    upiCreationRateTransport?: Transport;
-    /** Convenience alternative to `upiCreationRateTransport`; requires Polygon mainnet. */
-    upiCreationRateRpcUrl?: string;
     /** Relay API configuration for source assets outside Base USDC. */
     relay?: RelayOptions;
     /** NEAR Intents 1Click configuration for externally funded source routes. */