@zkp2p/cash 0.7.0 → 0.7.2

package/AGENTS.md

@@ -352,8 +352,9 @@ Run `cash.prepareVenmoGmailConnect(handle)` when the user selects Venmo, then
 call `cash.openVenmoGmailConnect(link.payeeDetails)` directly from a separate
 button click. Re-prepare when the selected handle changes. Use
 `cash.isVenmoGmailConnected(link.payeeDetails)` after returning from a mobile
-tab or an ambiguous closure; service errors reject, and only an active Gmail or
-Outlook credential counts as connected. Persist the hash with its environment and user.
+tab or an ambiguous closure; service errors reject, and any active Gmail,
+Outlook or iCloud Mail credential counts as connected (`@zkp2p/sdk` 0.14.7
+`isMailboxSellerCredentialType`). Persist the hash with its environment and user.
 
 For native apps, use `prepareVenmoGmailConnect(handle, { returnUrl })` and
 open `link.url` with Expo's `openAuthSessionAsync(link.url, returnUrl)`.
@@ -361,9 +362,10 @@ Register the scheme in your app binary; no registration with Peer is needed.
 Peer appends no data to the callback. Omitted/empty callbacks attempt closure;
 tabs that block it keep the success page. Always re-check status on return.
 
-The hosted flow offers Gmail, including Google-hosted custom domains, and
-personal Outlook, then verifies actual Venmo receipts. `VenmoGmailConnectError`
-is separate from `CashError`; no emails or mailbox tokens reach the partner. Configure `venmoGmail: { appearance, popup }`
+The hosted flow offers Gmail, including Google-hosted custom domains, personal
+Outlook, and iCloud Mail, then verifies actual Venmo receipts.
+`VenmoGmailConnectError` is separate from `CashError`; no emails, mailbox
+tokens or app-specific passwords reach the partner. Configure `venmoGmail: { appearance, popup }`
 for branding and desktop dimensions; omission keeps Peer defaults.
 See the README for error codes, native callbacks, package-free URLs, and
 customization, plus `examples/venmo-link.ts`.

package/README.md

@@ -154,7 +154,7 @@ arbitrary protocol operations.
 | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
 | `prepareVenmoGmailConnect(payee, { returnUrl }?)`              | Optional Venmo handle registration; returns the payee hash and hosted URL, with an optional app callback                        |
 | `openVenmoGmailConnect(payeeDetails)`                          | Optional browser popup/tab; call directly from a click                                                                          |
-| `isVenmoGmailConnected(payeeDetails)`                          | Read whether an active Gmail or Outlook receipt credential exists                                                               |
+| `isVenmoGmailConnected(payeeDetails)`                          | Read whether an active Gmail, Outlook or iCloud Mail receipt credential exists                                                  |
 | `capabilities()`                                               | Sync discovery: Base USDC destination/default source, platforms × currencies × payee hints × amount bounds                      |
 | `capabilities({ includeRelaySources: true })`                  | Async discovery: adds live Relay SDK EVM source chains/tokens                                                                   |
 | `capabilities({ includeNearIntentsSources: true })`            | Async discovery: adds live NEAR Intents 1Click source assets                                                                    |
@@ -196,7 +196,7 @@ mixed historical deposit.
 ## Optional Venmo receipt linking
 
 Partners such as Tailgate can offer **Link Venmo** separately from cash-out.
-`cashout()` and `prepare()` never open Gmail or Outlook, check receipt
+`cashout()` and `prepare()` never open a mailbox, check receipt
 credentials, or require this step. Skipping or cancelling linking leaves cash-out available.
 
 ```ts
@@ -233,19 +233,23 @@ Preparation and status reads also work on the server.
 Desktop opens a popup; mobile requests a new browser tab (including Safari).
 The browser controls presentation and may sever the opener connection. In that
 case check status rather than assuming `connection_closed` or
-`connection_timeout` means verification failed. Status is true only for an
-active `google_oauth` or `microsoft_oauth` credential; lookup failures reject.
-Versions before `0.6.3-rc.2` count only `google_oauth`.
+`connection_timeout` means verification failed. Status is true for any active
+mailbox credential (`google_oauth`, `microsoft_oauth` or `icloud_mail`, per
+`isMailboxSellerCredentialType` in `@zkp2p/sdk` 0.14.7); lookup failures
+reject. Versions before `0.7.2` do not count `icloud_mail`, and versions before
+`0.6.3-rc.2` count only `google_oauth`.
 
 The hosted page offers Gmail, including Google-hosted school/custom-domain
-inboxes, and personal Outlook. It verifies actual receipts; there is no
-email-domain precheck. A missing receipt reports
-`venmo_google_oauth_receipt_not_found` (Gmail) or
-`VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND` (Outlook) through
-`VenmoGmailConnectError.code`. Cancellation, popup blocking, and other hosted
-errors retain their codes. This error class is separate from `CashError`;
-registration and status service errors also reject. Emails and mailbox tokens
-never pass through the partner app or Cash SDK.
+inboxes, personal Outlook, and iCloud Mail (with an Apple app-specific
+password). It verifies actual receipts; there is no email-domain precheck. A
+missing receipt reports `venmo_google_oauth_receipt_not_found` (Gmail),
+`VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND` (Outlook) or
+`icloud_receipt_not_found` (iCloud Mail) through `VenmoGmailConnectError.code`;
+other iCloud Mail failures use `icloud_<reason>` codes. Cancellation, popup
+blocking, and other hosted errors retain their codes. This error class is
+separate from `CashError`; registration and status service errors also reject.
+Emails, mailbox tokens and app-specific passwords never pass through the
+partner app or Cash SDK.
 
 See [the browser example](examples/venmo-link.ts). JSON codecs are exported for
 `PreparedVenmoGmailConnect` and `VenmoGmailConnectResult`.

package/dist/{createCashClient-lYL_Vx2Z.d.cts → createCashClient-Dtqz4TXw.d.cts}

@@ -850,7 +850,7 @@ interface CashClient {
     }): Promise<PreparedVenmoGmailConnect>;
     /** Optional, browser-only: call directly from a click handler with the prepared payee hash. */
     openVenmoGmailConnect(payeeDetails: Hash): Promise<VenmoGmailConnectResult>;
-    /** True only for an active Gmail or Outlook receipt credential; errors reject instead of reporting unlinked. */
+    /** True only for an active Gmail, Outlook or iCloud Mail receipt credential; errors reject instead of reporting unlinked. */
     isVenmoGmailConnected(payeeDetails: Hash): Promise<boolean>;
     /** 0 - Discovery: sync, static. */
     capabilities(): CashCapabilities;

package/dist/{createCashClient-lYL_Vx2Z.d.ts → createCashClient-Dtqz4TXw.d.ts}

@@ -850,7 +850,7 @@ interface CashClient {
     }): Promise<PreparedVenmoGmailConnect>;
     /** Optional, browser-only: call directly from a click handler with the prepared payee hash. */
     openVenmoGmailConnect(payeeDetails: Hash): Promise<VenmoGmailConnectResult>;
-    /** True only for an active Gmail or Outlook receipt credential; errors reject instead of reporting unlinked. */
+    /** True only for an active Gmail, Outlook or iCloud Mail receipt credential; errors reject instead of reporting unlinked. */
     isVenmoGmailConnected(payeeDetails: Hash): Promise<boolean>;
     /** 0 - Discovery: sync, static. */
     capabilities(): CashCapabilities;

package/dist/index.cjs

@@ -3154,20 +3154,12 @@ function createCashClient(options) {
     const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
     const groupIds = CASH_ACCESS_GROUP_IDS[environment];
     try {
-      const accessPolicy = client.accessPolicy;
-      const merchantPolicyParams = {
+      const prepared = client.accessPolicy.prepareConfigurePeerPayMerchantDeposit({
         escrow: escrowAddress,
         depositId: onchainDepositId,
         paymentMethod,
         txOverrides: attribution
-      };
-      const prepared = accessPolicy.prepareConfigurePeerPayMerchantDeposit ? accessPolicy.prepareConfigurePeerPayMerchantDeposit(merchantPolicyParams) : accessPolicy.prepareConfigureDeposit?.({
-        ...merchantPolicyParams,
-        enabled: true,
-        groupIds,
-        takers: []
       });
-      if (!prepared) throw new Error("SDK access-policy preparation is unavailable");
       return {
         to: prepared.to,
         data: prepared.data,
@@ -3254,7 +3246,7 @@ function createCashClient(options) {
         processorName: "venmo",
         payeeDetails
       });
-      return responseObject.status === "active" && (responseObject.credentialType === "google_oauth" || responseObject.credentialType === "microsoft_oauth");
+      return responseObject.status === "active" && sdk.isMailboxSellerCredentialType(responseObject.credentialType);
     },
     capabilities,
     async sourceCapabilities() {
@@ -3359,7 +3351,11 @@ function createCashClient(options) {
             mapChainError("resolve same-chain Relay nonce", err)
           );
         }
-        const attributedParams2 = { ...params2, txOverrides: attribution };
+        const attributedParams2 = {
+          ...params2,
+          txOverrides: attribution,
+          enableTrustedGroupBypass: false
+        };
         const send2 = async () => {
           try {
             return (await client.createDeposit(attributedParams2)).hash;
@@ -3426,7 +3422,11 @@ function createCashClient(options) {
       const params = await buildDepositParams(client, depositInput);
       const escrow = client.escrowV2Address ?? client.escrowAddress;
       await settleAllowance(client, params.token, owner, escrow, depositInput.amount);
-      const attributedParams = { ...params, txOverrides: attribution };
+      const attributedParams = {
+        ...params,
+        txOverrides: attribution,
+        enableTrustedGroupBypass: false
+      };
       const send = async () => {
         try {
           return (await client.createDeposit(attributedParams)).hash;

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as CashPayoutInfo, I as IntentEntity, a as CashBuyerProfile, b as CashDepositInput, c as CreateDepositParamsArg, d as CashOrder, e as CashFill, f as CashCapabilities, g as CashoutResult, h as CashEstimate, i as CashFillStats, N as NearIntentsSourceCapabilities, j as NearIntentsDepositInput, k as NearIntentsQuote, l as NearIntentsQuoteInput, m as NearIntentsStatus, n as NearIntentsStatusInput, P as PrepareResult, o as CashPreparedStep, p as PreparedVenmoGmailConnect, R as RelayExecutionResult, q as RelayQuote, r as RelayStatus, s as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-lYL_Vx2Z.cjs';
-export { B as BASE_CHAIN_ID, t as BASE_USDC_ADDRESS, u as CASH_ATTRIBUTION_CODE, v as CASH_ORDER_POLL_INTERVAL_MS, w as CASH_ORDER_STATUSES, x as CASH_REFERRAL_ATTRIBUTION_PREFIX, y as CASH_RETAIN_ON_EMPTY, z as CashAsset, A as CashChain, D as CashClient, E as CashClientOptions, F as CashCorridorPricing, G as CashFillEta, H as CashLeg, J as CashMultiCurrencyLeg, K as CashNextAction, L as CashOrderState, M as CashPairFillStats, O as CashPayeeInput, Q as CashPayout, S as CashPayoutPricing, U as CashPlatformCapability, V as CashPreparedStepKind, X as CashReceiveLeg, Y as CashoutInput, Z as CashoutOptions, _ as CuratorPayeeDataInput, $ as EstimateInput, a0 as EstimateOptions, a1 as MARKET_SPREAD_BPS, a2 as MIN_CASHOUT_AMOUNT, a3 as NEAR_INTENTS_API_URL, a4 as NEAR_INTENTS_BASE_USDC_ASSET_ID, a5 as NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS, a6 as NEAR_INTENTS_STATUSES, a7 as NearIntentsClient, a8 as NearIntentsOptions, a9 as NearIntentsQuoteRequest, aa as NearIntentsStatusCode, ab as NearIntentsToken, ac as NearIntentsTradeType, ad as NearIntentsTransaction, ae as ORACLE_MIN_CONVERSION_RATE_SENTINEL, af as OrdersOptions, ag as PreparedCashoutReceipt, ah as RECOMMENDED_MIN_CASHOUT_AMOUNT, ai as RelayOptions, aj as RelayQuoteInput, ak as RelaySourceInput, al as RelayTransaction, am as SignerOptions, an as USDC_DECIMALS, ao as WatchOptions, ap as WithdrawOptions, aq as buildCapabilities, ar as createCashClient, as as createNearIntentsClient, at as normalizeCashPayee, au as quoteNearIntentsToBaseUsdc, av as readNearIntentsSourceCapabilities, aw as readNearIntentsStatus, ax as submitNearIntentsDeposit, ay as toCashReferralAttributionCode } from './createCashClient-lYL_Vx2Z.cjs';
+import { C as CashPayoutInfo, I as IntentEntity, a as CashBuyerProfile, b as CashDepositInput, c as CreateDepositParamsArg, d as CashOrder, e as CashFill, f as CashCapabilities, g as CashoutResult, h as CashEstimate, i as CashFillStats, N as NearIntentsSourceCapabilities, j as NearIntentsDepositInput, k as NearIntentsQuote, l as NearIntentsQuoteInput, m as NearIntentsStatus, n as NearIntentsStatusInput, P as PrepareResult, o as CashPreparedStep, p as PreparedVenmoGmailConnect, R as RelayExecutionResult, q as RelayQuote, r as RelayStatus, s as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-Dtqz4TXw.cjs';
+export { B as BASE_CHAIN_ID, t as BASE_USDC_ADDRESS, u as CASH_ATTRIBUTION_CODE, v as CASH_ORDER_POLL_INTERVAL_MS, w as CASH_ORDER_STATUSES, x as CASH_REFERRAL_ATTRIBUTION_PREFIX, y as CASH_RETAIN_ON_EMPTY, z as CashAsset, A as CashChain, D as CashClient, E as CashClientOptions, F as CashCorridorPricing, G as CashFillEta, H as CashLeg, J as CashMultiCurrencyLeg, K as CashNextAction, L as CashOrderState, M as CashPairFillStats, O as CashPayeeInput, Q as CashPayout, S as CashPayoutPricing, U as CashPlatformCapability, V as CashPreparedStepKind, X as CashReceiveLeg, Y as CashoutInput, Z as CashoutOptions, _ as CuratorPayeeDataInput, $ as EstimateInput, a0 as EstimateOptions, a1 as MARKET_SPREAD_BPS, a2 as MIN_CASHOUT_AMOUNT, a3 as NEAR_INTENTS_API_URL, a4 as NEAR_INTENTS_BASE_USDC_ASSET_ID, a5 as NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS, a6 as NEAR_INTENTS_STATUSES, a7 as NearIntentsClient, a8 as NearIntentsOptions, a9 as NearIntentsQuoteRequest, aa as NearIntentsStatusCode, ab as NearIntentsToken, ac as NearIntentsTradeType, ad as NearIntentsTransaction, ae as ORACLE_MIN_CONVERSION_RATE_SENTINEL, af as OrdersOptions, ag as PreparedCashoutReceipt, ah as RECOMMENDED_MIN_CASHOUT_AMOUNT, ai as RelayOptions, aj as RelayQuoteInput, ak as RelaySourceInput, al as RelayTransaction, am as SignerOptions, an as USDC_DECIMALS, ao as WatchOptions, ap as WithdrawOptions, aq as buildCapabilities, ar as createCashClient, as as createNearIntentsClient, at as normalizeCashPayee, au as quoteNearIntentsToBaseUsdc, av as readNearIntentsSourceCapabilities, aw as readNearIntentsStatus, ax as submitNearIntentsDeposit, ay as toCashReferralAttributionCode } from './createCashClient-Dtqz4TXw.cjs';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction, VenmoGmailConnectResult } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv, VenmoGmailAppearance, VenmoGmailConnectError, VenmoGmailConnectResult, VenmoGmailPopupOptions } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CashPayoutInfo, I as IntentEntity, a as CashBuyerProfile, b as CashDepositInput, c as CreateDepositParamsArg, d as CashOrder, e as CashFill, f as CashCapabilities, g as CashoutResult, h as CashEstimate, i as CashFillStats, N as NearIntentsSourceCapabilities, j as NearIntentsDepositInput, k as NearIntentsQuote, l as NearIntentsQuoteInput, m as NearIntentsStatus, n as NearIntentsStatusInput, P as PrepareResult, o as CashPreparedStep, p as PreparedVenmoGmailConnect, R as RelayExecutionResult, q as RelayQuote, r as RelayStatus, s as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-lYL_Vx2Z.js';
-export { B as BASE_CHAIN_ID, t as BASE_USDC_ADDRESS, u as CASH_ATTRIBUTION_CODE, v as CASH_ORDER_POLL_INTERVAL_MS, w as CASH_ORDER_STATUSES, x as CASH_REFERRAL_ATTRIBUTION_PREFIX, y as CASH_RETAIN_ON_EMPTY, z as CashAsset, A as CashChain, D as CashClient, E as CashClientOptions, F as CashCorridorPricing, G as CashFillEta, H as CashLeg, J as CashMultiCurrencyLeg, K as CashNextAction, L as CashOrderState, M as CashPairFillStats, O as CashPayeeInput, Q as CashPayout, S as CashPayoutPricing, U as CashPlatformCapability, V as CashPreparedStepKind, X as CashReceiveLeg, Y as CashoutInput, Z as CashoutOptions, _ as CuratorPayeeDataInput, $ as EstimateInput, a0 as EstimateOptions, a1 as MARKET_SPREAD_BPS, a2 as MIN_CASHOUT_AMOUNT, a3 as NEAR_INTENTS_API_URL, a4 as NEAR_INTENTS_BASE_USDC_ASSET_ID, a5 as NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS, a6 as NEAR_INTENTS_STATUSES, a7 as NearIntentsClient, a8 as NearIntentsOptions, a9 as NearIntentsQuoteRequest, aa as NearIntentsStatusCode, ab as NearIntentsToken, ac as NearIntentsTradeType, ad as NearIntentsTransaction, ae as ORACLE_MIN_CONVERSION_RATE_SENTINEL, af as OrdersOptions, ag as PreparedCashoutReceipt, ah as RECOMMENDED_MIN_CASHOUT_AMOUNT, ai as RelayOptions, aj as RelayQuoteInput, ak as RelaySourceInput, al as RelayTransaction, am as SignerOptions, an as USDC_DECIMALS, ao as WatchOptions, ap as WithdrawOptions, aq as buildCapabilities, ar as createCashClient, as as createNearIntentsClient, at as normalizeCashPayee, au as quoteNearIntentsToBaseUsdc, av as readNearIntentsSourceCapabilities, aw as readNearIntentsStatus, ax as submitNearIntentsDeposit, ay as toCashReferralAttributionCode } from './createCashClient-lYL_Vx2Z.js';
+import { C as CashPayoutInfo, I as IntentEntity, a as CashBuyerProfile, b as CashDepositInput, c as CreateDepositParamsArg, d as CashOrder, e as CashFill, f as CashCapabilities, g as CashoutResult, h as CashEstimate, i as CashFillStats, N as NearIntentsSourceCapabilities, j as NearIntentsDepositInput, k as NearIntentsQuote, l as NearIntentsQuoteInput, m as NearIntentsStatus, n as NearIntentsStatusInput, P as PrepareResult, o as CashPreparedStep, p as PreparedVenmoGmailConnect, R as RelayExecutionResult, q as RelayQuote, r as RelayStatus, s as CashSourceCapabilities, T as TopUpResult, W as WithdrawResult } from './createCashClient-Dtqz4TXw.js';
+export { B as BASE_CHAIN_ID, t as BASE_USDC_ADDRESS, u as CASH_ATTRIBUTION_CODE, v as CASH_ORDER_POLL_INTERVAL_MS, w as CASH_ORDER_STATUSES, x as CASH_REFERRAL_ATTRIBUTION_PREFIX, y as CASH_RETAIN_ON_EMPTY, z as CashAsset, A as CashChain, D as CashClient, E as CashClientOptions, F as CashCorridorPricing, G as CashFillEta, H as CashLeg, J as CashMultiCurrencyLeg, K as CashNextAction, L as CashOrderState, M as CashPairFillStats, O as CashPayeeInput, Q as CashPayout, S as CashPayoutPricing, U as CashPlatformCapability, V as CashPreparedStepKind, X as CashReceiveLeg, Y as CashoutInput, Z as CashoutOptions, _ as CuratorPayeeDataInput, $ as EstimateInput, a0 as EstimateOptions, a1 as MARKET_SPREAD_BPS, a2 as MIN_CASHOUT_AMOUNT, a3 as NEAR_INTENTS_API_URL, a4 as NEAR_INTENTS_BASE_USDC_ASSET_ID, a5 as NEAR_INTENTS_DEFAULT_SLIPPAGE_BPS, a6 as NEAR_INTENTS_STATUSES, a7 as NearIntentsClient, a8 as NearIntentsOptions, a9 as NearIntentsQuoteRequest, aa as NearIntentsStatusCode, ab as NearIntentsToken, ac as NearIntentsTradeType, ad as NearIntentsTransaction, ae as ORACLE_MIN_CONVERSION_RATE_SENTINEL, af as OrdersOptions, ag as PreparedCashoutReceipt, ah as RECOMMENDED_MIN_CASHOUT_AMOUNT, ai as RelayOptions, aj as RelayQuoteInput, ak as RelaySourceInput, al as RelayTransaction, am as SignerOptions, an as USDC_DECIMALS, ao as WatchOptions, ap as WithdrawOptions, aq as buildCapabilities, ar as createCashClient, as as createNearIntentsClient, at as normalizeCashPayee, au as quoteNearIntentsToBaseUsdc, av as readNearIntentsSourceCapabilities, aw as readNearIntentsStatus, ax as submitNearIntentsDeposit, ay as toCashReferralAttributionCode } from './createCashClient-Dtqz4TXw.js';
 import { PaymentMethodCatalog, CurrencyType, OracleAdapterOverrides, OnchainCurrency, Zkp2pClient, PreparedTransaction, VenmoGmailConnectResult } from '@zkp2p/sdk';
 export { CurrencyType, PreparedTransaction, RuntimeEnv, VenmoGmailAppearance, VenmoGmailConnectError, VenmoGmailConnectResult, VenmoGmailPopupOptions } from '@zkp2p/sdk';
 import { Log, Abi } from 'viem';

package/dist/index.js

@@ -2,7 +2,7 @@ import { MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, CASH_RETAIN_ON_
 export { BASE_CHAIN_ID, BASE_USDC_ADDRESS, CASH_ORDER_POLL_INTERVAL_MS, CASH_ORDER_STATUSES, CASH_RETAIN_ON_EMPTY, CashError, MARKET_SPREAD_BPS, ORACLE_MIN_CONVERSION_RATE_SENTINEL, USDC_DECIMALS, errors, isCashError, isUserRejectedError } from './chunk-UIELF4TY.js';
 import { parseAbi, parseEventLogs, isAddress, http, createWalletClient, encodeFunctionData } from 'viem';
 import { base } from 'viem/chains';
-import { getSpreadOracleConfig, currencyInfo, getGatingServiceAddress, resolvePaymentMethodNameFromHash, getCurrencyCodeFromHash, createCompositeDepositId, appendAttributionToCalldata, openVenmoGmailConnect, getVenmoGmailConnectUrl, Zkp2pClient, getPaymentMethodsCatalog, resolvePaymentMethodHashFromCatalog, defaultIndexerEndpoint, IndexerClient, CHAINLINK_ORACLE_FEEDS } from '@zkp2p/sdk';
+import { getSpreadOracleConfig, currencyInfo, getGatingServiceAddress, resolvePaymentMethodNameFromHash, getCurrencyCodeFromHash, createCompositeDepositId, appendAttributionToCalldata, isMailboxSellerCredentialType, openVenmoGmailConnect, getVenmoGmailConnectUrl, Zkp2pClient, getPaymentMethodsCatalog, resolvePaymentMethodHashFromCatalog, defaultIndexerEndpoint, IndexerClient, CHAINLINK_ORACLE_FEEDS } from '@zkp2p/sdk';
 export { VenmoGmailConnectError } from '@zkp2p/sdk';
 import { createClient, MAINNET_RELAY_API } from '@relayprotocol/relay-sdk';
 import { fetchChainConfigs, configureDynamicChains } from '@relayprotocol/relay-sdk/chain-utils';
@@ -2661,20 +2661,12 @@ function createCashClient(options) {
     const { compositeId, escrowAddress, onchainDepositId } = parseDepositId(depositId);
     const groupIds = CASH_ACCESS_GROUP_IDS[environment];
     try {
-      const accessPolicy = client.accessPolicy;
-      const merchantPolicyParams = {
+      const prepared = client.accessPolicy.prepareConfigurePeerPayMerchantDeposit({
         escrow: escrowAddress,
         depositId: onchainDepositId,
         paymentMethod,
         txOverrides: attribution
-      };
-      const prepared = accessPolicy.prepareConfigurePeerPayMerchantDeposit ? accessPolicy.prepareConfigurePeerPayMerchantDeposit(merchantPolicyParams) : accessPolicy.prepareConfigureDeposit?.({
-        ...merchantPolicyParams,
-        enabled: true,
-        groupIds,
-        takers: []
       });
-      if (!prepared) throw new Error("SDK access-policy preparation is unavailable");
       return {
         to: prepared.to,
         data: prepared.data,
@@ -2761,7 +2753,7 @@ function createCashClient(options) {
         processorName: "venmo",
         payeeDetails
       });
-      return responseObject.status === "active" && (responseObject.credentialType === "google_oauth" || responseObject.credentialType === "microsoft_oauth");
+      return responseObject.status === "active" && isMailboxSellerCredentialType(responseObject.credentialType);
     },
     capabilities,
     async sourceCapabilities() {
@@ -2866,7 +2858,11 @@ function createCashClient(options) {
             mapChainError("resolve same-chain Relay nonce", err)
           );
         }
-        const attributedParams2 = { ...params2, txOverrides: attribution };
+        const attributedParams2 = {
+          ...params2,
+          txOverrides: attribution,
+          enableTrustedGroupBypass: false
+        };
         const send2 = async () => {
           try {
             return (await client.createDeposit(attributedParams2)).hash;
@@ -2933,7 +2929,11 @@ function createCashClient(options) {
       const params = await buildDepositParams(client, depositInput);
       const escrow = client.escrowV2Address ?? client.escrowAddress;
       await settleAllowance(client, params.token, owner, escrow, depositInput.amount);
-      const attributedParams = { ...params, txOverrides: attribution };
+      const attributedParams = {
+        ...params,
+        txOverrides: attribution,
+        enableTrustedGroupBypass: false
+      };
       const send = async () => {
         try {
           return (await client.createDeposit(attributedParams)).hash;

package/dist/react.d.cts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { D as CashClient, $ as EstimateInput, h as CashEstimate, Z as CashoutOptions, g as CashoutResult, Y as CashoutInput, T as TopUpResult, W as WithdrawResult, d as CashOrder } from './createCashClient-lYL_Vx2Z.cjs';
+import { D as CashClient, $ as EstimateInput, h as CashEstimate, Z as CashoutOptions, g as CashoutResult, Y as CashoutInput, T as TopUpResult, W as WithdrawResult, d as CashOrder } from './createCashClient-Dtqz4TXw.cjs';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { CurrencyType } from '@zkp2p/sdk';
-import { D as CashClient, $ as EstimateInput, h as CashEstimate, Z as CashoutOptions, g as CashoutResult, Y as CashoutInput, T as TopUpResult, W as WithdrawResult, d as CashOrder } from './createCashClient-lYL_Vx2Z.js';
+import { D as CashClient, $ as EstimateInput, h as CashEstimate, Z as CashoutOptions, g as CashoutResult, Y as CashoutInput, T as TopUpResult, W as WithdrawResult, d as CashOrder } from './createCashClient-Dtqz4TXw.js';
 import { WalletClient } from 'viem';
 import '@relayprotocol/relay-sdk';
 

package/dist/tools.cjs

@@ -2,7 +2,7 @@
 
 // package.json
 var package_default = {
-  version: "0.7.0"};
+  version: "0.7.2"};
 
 // src/tools/index.ts
 var bigintString = {

package/dist/tools.js

@@ -1,6 +1,6 @@
 // package.json
 var package_default = {
-  version: "0.7.0"};
+  version: "0.7.2"};
 
 // src/tools/index.ts
 var bigintString = {

package/docs/partner-integrations.md

@@ -147,8 +147,9 @@ Run `cash.prepareVenmoGmailConnect(handle)` when the user selects Venmo, then
 call `cash.openVenmoGmailConnect(link.payeeDetails)` directly from a separate
 button click. Re-prepare when the selected handle changes. Use
 `cash.isVenmoGmailConnected(link.payeeDetails)` after returning from a mobile
-tab or an ambiguous closure; service errors reject, and only an active Gmail or
-Outlook credential counts as connected. Persist the hash with its environment and user.
+tab or an ambiguous closure; service errors reject, and any active Gmail,
+Outlook or iCloud Mail credential counts as connected (`@zkp2p/sdk` 0.14.7
+`isMailboxSellerCredentialType`). Persist the hash with its environment and user.
 
 For native apps, use `prepareVenmoGmailConnect(handle, { returnUrl })` and
 open `link.url` with Expo's `openAuthSessionAsync(link.url, returnUrl)`.
@@ -156,9 +157,10 @@ Register the scheme in your app binary; no registration with Peer is needed.
 Peer appends no data to the callback. Omitted/empty callbacks attempt closure;
 tabs that block it keep the success page. Always re-check status on return.
 
-The hosted flow offers Gmail, including Google-hosted custom domains, and
-personal Outlook, then verifies actual Venmo receipts. `VenmoGmailConnectError`
-is separate from `CashError`; no emails or mailbox tokens reach the partner. Configure `venmoGmail: { appearance, popup }`
+The hosted flow offers Gmail, including Google-hosted custom domains, personal
+Outlook, and iCloud Mail, then verifies actual Venmo receipts.
+`VenmoGmailConnectError` is separate from `CashError`; no emails, mailbox
+tokens or app-specific passwords reach the partner. Configure `venmoGmail: { appearance, popup }`
 for branding and desktop dimensions; omission keeps Peer defaults.
 See the README for error codes, native callbacks, package-free URLs, and
 customization, plus `examples/venmo-link.ts`.

package/examples/onchain-demo/package.json

@@ -4,7 +4,7 @@
   "type": "module",
   "description": "Peer Cash Demo: the express sell flow stored entirely onchain on Base, after zSwap by z0r0z",
   "dependencies": {
-    "@zkp2p/cash": "0.7.0",
+    "@zkp2p/cash": "0.7.2",
     "esbuild": "0.28.2",
     "solc": "0.8.36",
     "viem": "2.55.18"

package/llms.txt

@@ -15,19 +15,22 @@ Key facts:
 - Optional Venmo receipt linking: prepareVenmoGmailConnect(handle) registers
   the selected handle and returns { payeeDetails, url }. From a separate click,
   openVenmoGmailConnect(payeeDetails) opens the environment's hosted flow.
-  isVenmoGmailConnected(payeeDetails) checks for an active Gmail or Outlook
-  credential;
-  lookup errors reject. Cashout and prepare never call or require these steps.
+  isVenmoGmailConnected(payeeDetails) is true for any active mailbox
+  credential (Gmail, Outlook or iCloud Mail, per @zkp2p/sdk 0.14.7
+  isMailboxSellerCredentialType); lookup errors reject. Cashout and prepare
+  never call or require these steps.
   Native hosts use prepareVenmoGmailConnect(handle, { returnUrl }) and open
   link.url with Expo openAuthSessionAsync(link.url, returnUrl). Register the
   app scheme in the binary; Peer needs no callback registration and appends
   no data. Omitted/empty callbacks attempt closure; blocked tabs keep the
   success page. Always check status on return or ambiguous popup closure.
   The hosted page offers Gmail, including Google-hosted school/custom domains,
-  and personal Outlook. Receipt failures use VenmoGmailConnectError.code:
-  venmo_google_oauth_receipt_not_found or VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND.
-  Partner apps receive neither emails nor mailbox tokens. Re-prepare when the
-  handle changes; persist payee hash with environment and user account.
+  personal Outlook, and iCloud Mail (Apple app-specific password). Receipt
+  failures use VenmoGmailConnectError.code: venmo_google_oauth_receipt_not_found,
+  VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND or icloud_receipt_not_found.
+  Partner apps receive no emails, mailbox tokens or app-specific passwords.
+  Re-prepare when the handle changes; persist payee hash with environment and
+  user account.
   Optional createCashClient({ venmoGmail: { appearance, popup } }) shares branding
   between the prepared URL and popup. Defaults use Peer branding; desktop popup
   dimensions do not control mobile tab sizing. See the README customization example.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkp2p/cash",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Peer Cash - offramp-only SDK for routing Relay or NEAR Intents assets to Base USDC, then cashing out to fiat at zero-spread on-chain oracle market rates.",
   "license": "MIT",
   "author": "Peer (https://peer.xyz)",
@@ -108,7 +108,7 @@
   },
   "dependencies": {
     "@relayprotocol/relay-sdk": "^7.0.1",
-    "@zkp2p/sdk": "0.14.5",
+    "@zkp2p/sdk": "0.14.7",
     "zod": "^4.4.3"
   },
   "peerDependencies": {

package/skills/peer-cash-integration/SKILL.md

@@ -291,8 +291,9 @@ Run `cash.prepareVenmoGmailConnect(handle)` when the user selects Venmo, then
 call `cash.openVenmoGmailConnect(link.payeeDetails)` directly from a separate
 button click. Re-prepare when the selected handle changes. Use
 `cash.isVenmoGmailConnected(link.payeeDetails)` after returning from a mobile
-tab or an ambiguous closure; service errors reject, and only an active Gmail or
-Outlook credential counts as connected. Persist the hash with its environment and user.
+tab or an ambiguous closure; service errors reject, and any active Gmail,
+Outlook or iCloud Mail credential counts as connected (`@zkp2p/sdk` 0.14.7
+`isMailboxSellerCredentialType`). Persist the hash with its environment and user.
 
 For native apps, use `prepareVenmoGmailConnect(handle, { returnUrl })` and
 open `link.url` with Expo's `openAuthSessionAsync(link.url, returnUrl)`.
@@ -300,9 +301,10 @@ Register the scheme in your app binary; no registration with Peer is needed.
 Peer appends no data to the callback. Omitted/empty callbacks attempt closure;
 tabs that block it keep the success page. Always re-check status on return.
 
-The hosted flow offers Gmail, including Google-hosted custom domains, and
-personal Outlook, then verifies actual Venmo receipts. `VenmoGmailConnectError`
-is separate from `CashError`; no emails or mailbox tokens reach the partner. Configure `venmoGmail: { appearance, popup }`
+The hosted flow offers Gmail, including Google-hosted custom domains, personal
+Outlook, and iCloud Mail, then verifies actual Venmo receipts.
+`VenmoGmailConnectError` is separate from `CashError`; no emails, mailbox
+tokens or app-specific passwords reach the partner. Configure `venmoGmail: { appearance, popup }`
 for branding and desktop dimensions; omission keeps Peer defaults.
 See the README for error codes, native callbacks, package-free URLs, and
 customization, plus `examples/venmo-link.ts`.