@zkp2p/sdk 0.14.7-rc.0 → 0.14.8-rc.0

package/README.md

@@ -35,14 +35,15 @@ and chargeback-risk surface. The workspace version lives in `package.json`.
 
 ## Optional Venmo Gmail connection
 
-For partner cash-out integrations, prefer stable `@zkp2p/cash@0.6.2` and its
+For partner cash-out integrations, prefer stable `@zkp2p/cash@0.7.2` and its
 [prepare/open/status flow](https://docs.peer.xyz/developer/peer-cash/guide#optional-venmo-receipt-linking).
 It selects the matching environment and keeps linking separate from cash-out.
 The direct SDK helpers below require `@zkp2p/sdk@0.14.2` or later.
 
 Open Peer's **Link your Venmo** popup for an already-registered account.
-The host passes the selected account hash; the user selects Connect Gmail or
-Connect Outlook, then chooses their receipt inbox with that provider.
+The host passes the selected account hash; the user picks Gmail or Outlook,
+which opens that provider's consent, or iCloud Mail, which takes an Apple
+app-specific password on the Peer page.
 
 ```ts
 import { openVenmoGmailConnect, VenmoGmailConnectError } from '@zkp2p/sdk';
@@ -54,8 +55,8 @@ try {
 } catch (error) {
   if (error instanceof VenmoGmailConnectError) {
     // Preserve error.code for host UI handling and display error.message.
-    // Missing receipts: venmo_google_oauth_receipt_not_found or
-    // VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND.
+    // Missing receipts: venmo_google_oauth_receipt_not_found,
+    // VENMO_MICROSOFT_OAUTH_RECEIPT_NOT_FOUND or icloud_receipt_not_found.
   }
 }
 ```
@@ -67,9 +68,9 @@ Mobile widths request a normal browser tab; desktop requests a popup. The SDK
 also reports blocked popups, closure, and a ten-minute timeout. Browser
 opener isolation or a lost response can interrupt notification; reconcile with
 `client.getSellerCredentialStatus()` or `apiGetSellerCredentialStatus()` before
-retrying. Only `active` with `credentialType` `'google_oauth'` or
-`'microsoft_oauth'` means an inbox is linked. An already-linked inbox needs no
-reconnect. Linking is optional and never gates deposits.
+retrying. Only `active` with a mailbox `credentialType`
+(`isMailboxSellerCredentialType`, 0.14.7+: Gmail, Outlook or iCloud Mail) means
+an inbox is linked. An already-linked inbox needs no reconnect. Linking is optional and never gates deposits.
 
 Use matching Peer/Curator environments and configure Curator CORS for your host.
 `peerOrigin` accepts HTTPS origins or HTTP localhost for development; Google must
@@ -105,8 +106,8 @@ before navigating to `returnUrl` unchanged. No OAuth codes, tokens, email,
 account hash, or success flag are appended. If automatic navigation is blocked,
 select **Return to your app**. Consent or verification errors stay visible and
 also offer a manual return. A return, dismissal, or cancellation is not proof of
-linking: only an active `google_oauth` or `microsoft_oauth` credential from the
-status API is linked.
+linking: only an active mailbox credential (`isMailboxSellerCredentialType`)
+from the status API is linked.
 
 Apps that need no SDK can build the same URL themselves:
 `https://app.peer.xyz/connect/venmo?returnUrl=<URL-encoded-callback>#<payeeDetails>`.
@@ -589,6 +590,8 @@ await client.uploadICloudMailSellerCredential({
 
 The password is encrypted to the attested enclave and posted directly to the attestor paired with `baseApiUrl`. The returned bundle is verified against the pinned enclave signer, platform and maker before it is stored unchanged; the maker is not re-registered. React Native callers pass `{ attestationRuntime: { subtle, getRandomValues } }`. Failures reject with `ICloudMailCredentialError`, whose `reason` names the condition (`payee_mismatch`, `payee_not_found`, `receipt_not_found`, `app_password_rejected`, `rate_limited` with `retryAfterMs`, and so on). The method never retries; one connection per mailbox runs at a time. `isMailboxSellerCredentialType` recognizes Gmail, Outlook and iCloud Mail credentials.
 
+To store the bundle through another Curator route, such as an App Clip's request-scoped SAR connection, call `client.attestICloudMailSellerCredential` with the same arguments. It runs the same checks, enclave upload and verification, then returns the verified `SellerCredentialBundleUpload` without storing it, so it needs no Curator session. Walletless callers use the exported `attestICloudMailSellerCredential(params, { attestationServiceUrl, baseApiUrl, timeoutMs, attestationRuntime })` and name the attestor themselves. Errors, the mailbox lock and rate-limit delays match the upload.
+
 ```ts
 const status = await client.getSellerCredentialStatus({
   processorName: 'venmo',

package/dist/build-metadata.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "source": {
     "repository": "zkp2p/zkp2p-clients",
-    "commitSha": "702186ed22ef1102f2827501e14f12172b5acf9b",
+    "commitSha": "959ea2fdca3a9938c97be98f96f66f1e74ec144d",
     "kind": "github",
     "distributable": true
   },
-  "sdkPackageVersion": "0.14.7-rc.0",
+  "sdkPackageVersion": "0.14.8-rc.0",
   "contractsPackageVersion": "0.4.4-rc.2",
   "indexerSchemaPackageVersion": "0.22.0",
   "activeDisputeStack": {

package/dist/{chunk-UQ4YSOEL.mjs → chunk-7MZINJ6Z.mjs}

@@ -1,5 +1,5 @@
 import { currencyKeccak256, getCurrencyInfoFromHash } from './chunk-WDEEWFEU.mjs';
-import { __export } from './chunk-35IHGX4I.mjs';
+import { __export } from './chunk-KQT4XYPO.mjs';
 import { hexToBytes, keccak256, toBytes, bytesToHex } from 'viem';
 
 // src/utils/bigint.ts
@@ -100446,5 +100446,5 @@ function enrichPvIntentView(view, chainId, env = "production") {
 }
 
 export { DISPUTE_PROTECTION_POLICY_ABI, DISPUTE_PROTECTION_POLICY_ABI2, DisputeNullifierRegistry_default3 as DisputeNullifierRegistry_default, DisputeProtectionPolicy_default3 as DisputeProtectionPolicy_default, DisputeVerifier_default3 as DisputeVerifier_default, IntentLifecycleHookV1_default3 as IntentLifecycleHookV1_default, METHOD_NAME_TO_HASH, MultiAttestationVerifier_default3 as MultiAttestationVerifier_default, ORCHESTRATOR_V3_ABI2 as ORCHESTRATOR_V3_ABI, OrchestratorRegistry_default3 as OrchestratorRegistry_default, OrchestratorV3_default3 as OrchestratorV3_default, PAYMENT_PLATFORMS, STAKE_VAULT_ABI2 as STAKE_VAULT_ABI, SUPPORTED_PAYMENT_METHOD_HASHES, StakeVault_default3 as StakeVault_default, WhitelistPolicy_default3 as WhitelistPolicy_default, asciiToBytes32, enrichPvDepositView, enrichPvIntentView, ensureBytes32, getContracts, getDisputeProtectionPolicyContract, getGatingServiceAddress, getIntentGuardianContract, getOrchestratorV3Contract, getPaymentMethodsCatalog, getRateManagerContracts, getStakeVaultContract, hasIntentGuardian, matchesPaymentMethodNameAndHash, matchesQuotePaymentMethod, parseBigIntLike, parseDepositView, parseIntentView, resolveFiatCurrencyBytes32, resolvePaymentMethodHash, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash };
-//# sourceMappingURL=chunk-UQ4YSOEL.mjs.map
-//# sourceMappingURL=chunk-UQ4YSOEL.mjs.map
+//# sourceMappingURL=chunk-7MZINJ6Z.mjs.map
+//# sourceMappingURL=chunk-7MZINJ6Z.mjs.map