@zkp2p/sdk 0.14.6-rc.1 → 0.14.7-rc.0

package/README.md

@@ -313,6 +313,18 @@ console.log(result.hash);
 console.log(result.depositDetails);
 ```
 
+By default, `createDeposit()` enables the trusted group bypass on Venmo and
+PayPal methods. After the deposit mines, it sends one
+`WhitelistPolicy.configureDeposit` per Venmo/PayPal method with the Peer Pay
+merchant group and returns the confirmed hashes as
+`result.accessPolicyTxHashes` (empty for other methods). Members of that group
+skip dispute-protection staking; other takers still stake, and until the policy
+mines, merchants stake too. Pass `enableTrustedGroupBypass: false` to skip it.
+If the deposit was sent but the policy was not confirmed, it throws a
+`ContractError` whose `details.hash` is the deposit transaction. `prepareCreateDeposit()` does not add
+the policy; custom senders call `client.accessPolicy.prepareConfigurePeerPayMerchantDeposit()`
+once the deposit ID is known.
+
 If you do not pass `payeeDetailsHashes`, `createDeposit()` can register the payee details for you. If you want to pre-register or reuse hashes across deposits, use `registerPayeeDetails()` first.
 
 New deposits default to the paid intent guardian deployed for the client's
@@ -538,7 +550,7 @@ For table-style liquidity UIs, the low-level `apiGetOrderbookTable()` adapter ex
 
 ## Seller Credential Status
 
-Venmo and PayPal Seller Autopilot connections use `uploadGoogleOAuthSellerCredential` for Gmail or `uploadMicrosoftOAuthSellerCredential` for personal Outlook accounts. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
+Venmo and PayPal Seller Autopilot connections use `uploadGoogleOAuthSellerCredential` for Gmail, `uploadMicrosoftOAuthSellerCredential` for personal Outlook accounts, or `uploadICloudMailSellerCredential` for iCloud Mail. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
 
 ```ts
 await client.uploadGoogleOAuthSellerCredential({
@@ -564,6 +576,19 @@ await client.uploadMicrosoftOAuthSellerCredential({
 
 Validate OAuth state in the initiating browser tab before uploading. `redirectUri` must exactly match the one in the authorization request. Both methods exchange a one-time code without retrying; start fresh consent if the response is lost. The Microsoft client secret stays server-side. See [email connection setup](../../docs/email-oauth.md).
 
+iCloud Mail has no OAuth. Pass the seller's Apple app-specific password with the registered maker hash; PayPal also passes its receiving email. For Venmo, the SDK fetches the maker's account ID from Curator (`GET /v2/makers/venmo/{payeeDetails}/payee-id`) and checks it against `payeeDetails` before any mailbox work, so sellers never enter it.
+
+```ts
+await client.uploadICloudMailSellerCredential({
+  platform: 'venmo',
+  payeeDetails: registeredMaker.hashedOnchainId,
+  mailboxEmail: 'seller@icloud.com',
+  appSpecificPassword,
+});
+```
+
+The password is encrypted to the attested enclave and posted directly to the attestor paired with `baseApiUrl`. The returned bundle is verified against the pinned enclave signer, platform and maker before it is stored unchanged; the maker is not re-registered. React Native callers pass `{ attestationRuntime: { subtle, getRandomValues } }`. Failures reject with `ICloudMailCredentialError`, whose `reason` names the condition (`payee_mismatch`, `payee_not_found`, `receipt_not_found`, `app_password_rejected`, `rate_limited` with `retryAfterMs`, and so on). The method never retries; one connection per mailbox runs at a time. `isMailboxSellerCredentialType` recognizes Gmail, Outlook and iCloud Mail credentials.
+
 ```ts
 const status = await client.getSellerCredentialStatus({
   processorName: 'venmo',
@@ -660,7 +685,8 @@ transactions for policies written before Groups were retired. Gate use on
 `client.accessPolicy.isSupported`; unsupported deployments fail closed.
 
 Existing policies remain enforced on-chain until disabled or their deposits
-close. New policies cannot be created through the SDK. Depositors can use
+close. The only new policy is the trusted group bypass that `createDeposit()`
+adds to Venmo and PayPal deposits by default. Depositors can use
 `prepareDisable`, `prepareRemoveAllowedGroups`, and
 `prepareRemoveWhitelistedAddresses` to fail open and remove historical entries.
 

package/dist/build-metadata.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "source": {
     "repository": "zkp2p/zkp2p-clients",
-    "commitSha": "9d179ea30bc910db9c1abe810f69e2e79789af92",
+    "commitSha": "702186ed22ef1102f2827501e14f12172b5acf9b",
     "kind": "github",
     "distributable": true
   },
-  "sdkPackageVersion": "0.14.6-rc.1",
+  "sdkPackageVersion": "0.14.7-rc.0",
   "contractsPackageVersion": "0.4.4-rc.2",
   "indexerSchemaPackageVersion": "0.22.0",
   "activeDisputeStack": {

package/dist/{chunk-GSQH65XT.mjs → chunk-35IHGX4I.mjs}

@@ -5,8 +5,8 @@ var __export = (target, all) => {
 };
 
 // <define:__ZKP2P_SDK_BUILD_METADATA__>
-var define_ZKP2P_SDK_BUILD_METADATA_default = { schemaVersion: 2, source: { repository: "zkp2p/zkp2p-clients", commitSha: "9d179ea30bc910db9c1abe810f69e2e79789af92", kind: "github", distributable: true }, sdkPackageVersion: "0.14.6-rc.1", contractsPackageVersion: "0.4.4-rc.2", indexerSchemaPackageVersion: "0.22.0", activeDisputeStack: { base: { version: 2, selectionHash: "ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c" }, baseStaging: { version: 2, selectionHash: "6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9" } } };
+var define_ZKP2P_SDK_BUILD_METADATA_default = { schemaVersion: 2, source: { repository: "zkp2p/zkp2p-clients", commitSha: "702186ed22ef1102f2827501e14f12172b5acf9b", kind: "github", distributable: true }, sdkPackageVersion: "0.14.7-rc.0", contractsPackageVersion: "0.4.4-rc.2", indexerSchemaPackageVersion: "0.22.0", activeDisputeStack: { base: { version: 2, selectionHash: "ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c" }, baseStaging: { version: 2, selectionHash: "6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9" } } };
 
 export { __export, define_ZKP2P_SDK_BUILD_METADATA_default };
-//# sourceMappingURL=chunk-GSQH65XT.mjs.map
-//# sourceMappingURL=chunk-GSQH65XT.mjs.map
+//# sourceMappingURL=chunk-35IHGX4I.mjs.map
+//# sourceMappingURL=chunk-35IHGX4I.mjs.map

package/dist/{chunk-GSQH65XT.mjs.map → chunk-35IHGX4I.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["%3Cdefine:__ZKP2P_SDK_BUILD_METADATA__%3E"],"names":[],"mappings":";;;;;;;AAAA,IAAA,uCAAA,GAAA,EAAC,aAAA,EAAgB,CAAA,EAAE,MAAA,EAAS,EAAC,YAAa,qBAAA,EAAsB,SAAA,EAAY,0CAAA,EAA2C,IAAA,EAAO,UAAS,aAAA,EAAgB,IAAA,EAAI,EAAE,iBAAA,EAAoB,eAAc,uBAAA,EAA0B,YAAA,EAAa,2BAAA,EAA8B,QAAA,EAAS,oBAAqB,EAAC,IAAA,EAAO,EAAC,OAAA,EAAU,GAAE,aAAA,EAAgB,kEAAA,EAAkE,EAAE,WAAA,EAAc,EAAC,OAAA,EAAU,CAAA,EAAE,aAAA,EAAgB,kEAAA,IAAmE","file":"chunk-GSQH65XT.mjs","sourcesContent":["{\"schemaVersion\":2,\"source\":{\"repository\":\"zkp2p/zkp2p-clients\",\"commitSha\":\"9d179ea30bc910db9c1abe810f69e2e79789af92\",\"kind\":\"github\",\"distributable\":true},\"sdkPackageVersion\":\"0.14.6-rc.1\",\"contractsPackageVersion\":\"0.4.4-rc.2\",\"indexerSchemaPackageVersion\":\"0.22.0\",\"activeDisputeStack\":{\"base\":{\"version\":2,\"selectionHash\":\"ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c\"},\"baseStaging\":{\"version\":2,\"selectionHash\":\"6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9\"}}}"]}
+{"version":3,"sources":["%3Cdefine:__ZKP2P_SDK_BUILD_METADATA__%3E"],"names":[],"mappings":";;;;;;;AAAA,IAAA,uCAAA,GAAA,EAAC,aAAA,EAAgB,CAAA,EAAE,MAAA,EAAS,EAAC,YAAa,qBAAA,EAAsB,SAAA,EAAY,0CAAA,EAA2C,IAAA,EAAO,UAAS,aAAA,EAAgB,IAAA,EAAI,EAAE,iBAAA,EAAoB,eAAc,uBAAA,EAA0B,YAAA,EAAa,2BAAA,EAA8B,QAAA,EAAS,oBAAqB,EAAC,IAAA,EAAO,EAAC,OAAA,EAAU,GAAE,aAAA,EAAgB,kEAAA,EAAkE,EAAE,WAAA,EAAc,EAAC,OAAA,EAAU,CAAA,EAAE,aAAA,EAAgB,kEAAA,IAAmE","file":"chunk-35IHGX4I.mjs","sourcesContent":["{\"schemaVersion\":2,\"source\":{\"repository\":\"zkp2p/zkp2p-clients\",\"commitSha\":\"702186ed22ef1102f2827501e14f12172b5acf9b\",\"kind\":\"github\",\"distributable\":true},\"sdkPackageVersion\":\"0.14.7-rc.0\",\"contractsPackageVersion\":\"0.4.4-rc.2\",\"indexerSchemaPackageVersion\":\"0.22.0\",\"activeDisputeStack\":{\"base\":{\"version\":2,\"selectionHash\":\"ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c\"},\"baseStaging\":{\"version\":2,\"selectionHash\":\"6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9\"}}}"]}

package/dist/{chunk-764TUYZW.mjs → chunk-UQ4YSOEL.mjs}

@@ -1,5 +1,5 @@
 import { currencyKeccak256, getCurrencyInfoFromHash } from './chunk-WDEEWFEU.mjs';
-import { __export } from './chunk-GSQH65XT.mjs';
+import { __export } from './chunk-35IHGX4I.mjs';
 import { hexToBytes, keccak256, toBytes, bytesToHex } from 'viem';
 
 // src/utils/bigint.ts
@@ -100446,5 +100446,5 @@ function enrichPvIntentView(view, chainId, env = "production") {
 }
 
 export { DISPUTE_PROTECTION_POLICY_ABI, DISPUTE_PROTECTION_POLICY_ABI2, DisputeNullifierRegistry_default3 as DisputeNullifierRegistry_default, DisputeProtectionPolicy_default3 as DisputeProtectionPolicy_default, DisputeVerifier_default3 as DisputeVerifier_default, IntentLifecycleHookV1_default3 as IntentLifecycleHookV1_default, METHOD_NAME_TO_HASH, MultiAttestationVerifier_default3 as MultiAttestationVerifier_default, ORCHESTRATOR_V3_ABI2 as ORCHESTRATOR_V3_ABI, OrchestratorRegistry_default3 as OrchestratorRegistry_default, OrchestratorV3_default3 as OrchestratorV3_default, PAYMENT_PLATFORMS, STAKE_VAULT_ABI2 as STAKE_VAULT_ABI, SUPPORTED_PAYMENT_METHOD_HASHES, StakeVault_default3 as StakeVault_default, WhitelistPolicy_default3 as WhitelistPolicy_default, asciiToBytes32, enrichPvDepositView, enrichPvIntentView, ensureBytes32, getContracts, getDisputeProtectionPolicyContract, getGatingServiceAddress, getIntentGuardianContract, getOrchestratorV3Contract, getPaymentMethodsCatalog, getRateManagerContracts, getStakeVaultContract, hasIntentGuardian, matchesPaymentMethodNameAndHash, matchesQuotePaymentMethod, parseBigIntLike, parseDepositView, parseIntentView, resolveFiatCurrencyBytes32, resolvePaymentMethodHash, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash };
-//# sourceMappingURL=chunk-764TUYZW.mjs.map
-//# sourceMappingURL=chunk-764TUYZW.mjs.map
+//# sourceMappingURL=chunk-UQ4YSOEL.mjs.map
+//# sourceMappingURL=chunk-UQ4YSOEL.mjs.map