@zkp2p/sdk 0.14.5-rc.1 → 0.14.5

package/README.md

@@ -41,8 +41,8 @@ It selects the matching environment and keeps linking separate from cash-out.
 The direct SDK helpers below require `@zkp2p/sdk@0.14.2` or later.
 
 Open Peer's **Link your Venmo** popup for an already-registered account.
-The host passes the selected account hash; the user selects Connect Gmail,
-then chooses their receipt inbox through Google.
+The host passes the selected account hash; the user selects Connect Gmail or
+Connect Outlook, then chooses their receipt inbox with that provider.
 
 ```ts
 import { openVenmoGmailConnect, VenmoGmailConnectError } from '@zkp2p/sdk';
@@ -54,19 +54,22 @@ try {
 } catch (error) {
   if (error instanceof VenmoGmailConnectError) {
     // Preserve error.code for host UI handling and display error.message.
-    // Missing receipts: venmo_google_oauth_receipt_not_found.
+    // Missing receipts: venmo_google_oauth_receipt_not_found or
+    // VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND.
   }
 }
 ```
 
-Google-hosted school and custom domains can attempt verification; no email
-suffix check runs. Missing receipts produce a recoverable verification error.
+Google-hosted school and custom domains can attempt verification; Outlook
+supports personal Microsoft accounts. No email suffix check runs. Missing
+receipts produce a recoverable verification error.
 Mobile widths request a normal browser tab; desktop requests a popup. The SDK
 also reports blocked popups, closure, and a ten-minute timeout. Browser
 opener isolation or a lost response can interrupt notification; reconcile with
 `client.getSellerCredentialStatus()` or `apiGetSellerCredentialStatus()` before
-retrying. Only `active` with `credentialType: 'google_oauth'` means Gmail is linked.
-Already-active Gmail needs no reconnect. Linking is optional and never gates deposits.
+retrying. Only `active` with `credentialType` `'google_oauth'` or
+`'microsoft_oauth'` means an inbox is linked. An already-linked inbox needs no
+reconnect. Linking is optional and never gates deposits.
 
 Use matching Peer/Curator environments and configure Curator CORS for your host.
 `peerOrigin` accepts HTTPS origins or HTTP localhost for development; Google must
@@ -97,12 +100,13 @@ for testing your app's callback. See Expo's
 [`openAuthSessionAsync` documentation](https://docs.expo.dev/versions/latest/sdk/webbrowser/#webbrowseropenauthsessionasyncurl-redirecturl-options).
 The browser popup helper remains browser-only; native hosts use the URL builder.
 
-Peer keeps Google's OAuth callback on Peer and verifies the selected account
-before navigating to `returnUrl` unchanged. No Google codes, tokens, email,
+Peer keeps the OAuth callback on Peer and verifies the selected account
+before navigating to `returnUrl` unchanged. No OAuth codes, tokens, email,
 account hash, or success flag are appended. If automatic navigation is blocked,
 select **Return to your app**. Consent or verification errors stay visible and
 also offer a manual return. A return, dismissal, or cancellation is not proof of
-linking: only an active `google_oauth` credential from the status API is linked.
+linking: only an active `google_oauth` or `microsoft_oauth` credential from the
+status API is linked.
 
 Apps that need no SDK can build the same URL themselves:
 `https://app.peer.xyz/connect/venmo?returnUrl=<URL-encoded-callback>#<payeeDetails>`.
@@ -155,9 +159,9 @@ Choose contrasting text, button and focus colors.
 
 Popup width supports 320–1200 px and height 480–1600 px. Mobile still requests a
 regular tab, whose size and presentation are controlled by the browser. Branding
-and styles survive the existing Google callback; account binding, consent copy,
-receipt verification and error codes remain unchanged. Google controls its own
-consent page's appearance.
+and styles survive the OAuth callback; account binding, consent copy,
+receipt verification and error codes remain unchanged. Google and Microsoft
+control their own consent pages' appearance.
 
 ## Installation
 
@@ -406,8 +410,17 @@ const activity = await client.indexer.getStakeActivity({
   limit: 50,
 });
 
+// merchant is optional: omit it for the vault-wide activity feed.
+// When supplied, it matches the event stake owner or taker.
 // Keep orderDirection unchanged when passing activity.nextCursor for older pages.
 
+const totals = await client.indexer.getStakeTotals({
+  chainId: 8453,
+  vaultAddress: client.getStakeVaultContract().address,
+});
+// totals.totalStaked and totals.totalLocked are decimal strings in token base units.
+// totals.stakerCount counts owners whose stake balance is greater than zero.
+
 const finalizedDisputes = await client.indexer.getDisputeProtectionIntents({
   chainId: 8453,
   policyAddress: client.getDisputeProtectionPolicyContract().address,
@@ -525,7 +538,7 @@ For table-style liquidity UIs, the low-level `apiGetOrderbookTable()` adapter ex
 
 ## Seller Credential Status
 
-Venmo and PayPal Seller Autopilot connections use `uploadGoogleOAuthSellerCredential`. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
+Venmo and PayPal Seller Autopilot connections use `uploadGoogleOAuthSellerCredential` for Gmail or `uploadMicrosoftOAuthSellerCredential` for personal Outlook accounts. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
 
 ```ts
 await client.uploadGoogleOAuthSellerCredential({
@@ -536,6 +549,21 @@ await client.uploadGoogleOAuthSellerCredential({
 });
 ```
 
+Microsoft uses the same payment identity and adds the PKCE verifier from the authorization request:
+
+```ts
+await client.uploadMicrosoftOAuthSellerCredential({
+  platform: 'paypal',
+  payeeDetails: registeredMaker.hashedOnchainId,
+  payeeEmail: 'seller@example.com',
+  authorizationCode,
+  redirectUri,
+  codeVerifier,
+});
+```
+
+Validate OAuth state in the initiating browser tab before uploading. `redirectUri` must exactly match the one in the authorization request. Both methods exchange a one-time code without retrying; start fresh consent if the response is lost. The Microsoft client secret stays server-side. See [email connection setup](../../docs/email-oauth.md).
+
 ```ts
 const status = await client.getSellerCredentialStatus({
   processorName: 'venmo',

package/dist/build-metadata.json

@@ -2,12 +2,12 @@
   "schemaVersion": 2,
   "source": {
     "repository": "zkp2p/zkp2p-clients",
-    "commitSha": "296778084b841cae5fd3f78a549d8aa58c609ce4",
+    "commitSha": "5261b0adcee018c238be2064ad2c06e8918cb309",
     "kind": "github",
     "distributable": true
   },
-  "sdkPackageVersion": "0.14.5-rc.1",
-  "contractsPackageVersion": "0.4.2",
+  "sdkPackageVersion": "0.14.5",
+  "contractsPackageVersion": "0.4.3",
   "indexerSchemaPackageVersion": "0.22.0",
   "activeDisputeStack": {
     "base": {

package/dist/chunk-2K2ATNTY.mjs

@@ -0,0 +1,12 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// <define:__ZKP2P_SDK_BUILD_METADATA__>
+var define_ZKP2P_SDK_BUILD_METADATA_default = { schemaVersion: 2, source: { repository: "zkp2p/zkp2p-clients", commitSha: "5261b0adcee018c238be2064ad2c06e8918cb309", kind: "github", distributable: true }, sdkPackageVersion: "0.14.5", contractsPackageVersion: "0.4.3", indexerSchemaPackageVersion: "0.22.0", activeDisputeStack: { base: { version: 2, selectionHash: "ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c" }, baseStaging: { version: 2, selectionHash: "6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9" } } };
+
+export { __export, define_ZKP2P_SDK_BUILD_METADATA_default };
+//# sourceMappingURL=chunk-2K2ATNTY.mjs.map
+//# sourceMappingURL=chunk-2K2ATNTY.mjs.map

package/dist/chunk-2K2ATNTY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["%3Cdefine:__ZKP2P_SDK_BUILD_METADATA__%3E"],"names":[],"mappings":";;;;;;;AAAA,IAAA,uCAAA,GAAA,EAAC,aAAA,EAAgB,CAAA,EAAE,MAAA,EAAS,EAAC,YAAa,qBAAA,EAAsB,SAAA,EAAY,0CAAA,EAA2C,IAAA,EAAO,UAAS,aAAA,EAAgB,IAAA,EAAI,EAAE,iBAAA,EAAoB,UAAS,uBAAA,EAA0B,OAAA,EAAQ,2BAAA,EAA8B,QAAA,EAAS,oBAAqB,EAAC,IAAA,EAAO,EAAC,OAAA,EAAU,GAAE,aAAA,EAAgB,kEAAA,EAAkE,EAAE,WAAA,EAAc,EAAC,OAAA,EAAU,CAAA,EAAE,aAAA,EAAgB,kEAAA,IAAmE","file":"chunk-2K2ATNTY.mjs","sourcesContent":["{\"schemaVersion\":2,\"source\":{\"repository\":\"zkp2p/zkp2p-clients\",\"commitSha\":\"5261b0adcee018c238be2064ad2c06e8918cb309\",\"kind\":\"github\",\"distributable\":true},\"sdkPackageVersion\":\"0.14.5\",\"contractsPackageVersion\":\"0.4.3\",\"indexerSchemaPackageVersion\":\"0.22.0\",\"activeDisputeStack\":{\"base\":{\"version\":2,\"selectionHash\":\"ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c\"},\"baseStaging\":{\"version\":2,\"selectionHash\":\"6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9\"}}}"]}