@zkp2p/sdk 0.14.8 → 0.14.10

package/README.md

@@ -79,6 +79,23 @@ hosts and custom window handling with account-status polling at least ten second
 apart. Deploy the hosted page before using the SDK helper. See the
 [flow specification](https://github.com/zkp2p/zkp2p-clients/blob/main/docs/venmo-gmail-connect.md).
 
+### X Money receipt linking
+
+`getXMoneyConnectUrl` and `openXMoneyConnect` use the same mailbox flow at
+`/connect/xmoney`. Pass the registered `payeeDetails` hash and `payeeUsername`.
+The normalized X username must hash to that identity. Both stay in the URL
+fragment. X Money email notifications must be enabled and the inbox must contain
+a signed received-payment receipt for that account. Gmail, personal Outlook and
+iCloud Mail are supported. Deploy the hosted page before enabling this helper.
+
+```ts
+import { openXMoneyConnect } from '@zkp2p/sdk';
+await openXMoneyConnect({ payeeDetails, payeeUsername: 'seller' });
+```
+
+The URL builder also accepts `returnUrl` for native hosts. Re-check the mailbox
+credential status after return or dismissal, as with Venmo.
+
 ### Native app return
 
 SDK `0.14.3` adds optional `returnUrl` to the URL builder. Partners
@@ -292,9 +309,10 @@ bundle `payeeIdHash`, and store the encrypted bundle with curator. Plaintext
 seller session material is never returned to the page.
 
 `Zkp2pClient.uploadSellerCredential()` supports Cash App, Wise, and Amazon Pay UPI
-plaintext input from trusted runtimes. Venmo and PayPal use the Google OAuth helper. Internally it
-creates the encrypted bundle, then uses the same
-`apiUploadSellerCredentialBundle()` storage helper.
+plaintext input from trusted runtimes. It creates the encrypted bundle, then uses
+`apiUploadSellerCredentialBundle()` for storage. Venmo, PayPal, and X Money use
+the [mailbox upload helpers](#seller-credential-status) for Gmail, personal
+Outlook, or iCloud Mail.
 
 ## Create a Deposit
 
@@ -551,7 +569,7 @@ For table-style liquidity UIs, the low-level `apiGetOrderbookTable()` adapter ex
 
 ## Seller Credential Status
 
-Venmo and PayPal Seller Autopilot connections use `uploadGoogleOAuthSellerCredential` for Gmail, `uploadMicrosoftOAuthSellerCredential` for personal Outlook accounts, or `uploadICloudMailSellerCredential` for iCloud Mail. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
+Venmo, PayPal and X Money Seller Autopilot connections use `uploadGoogleOAuthSellerCredential` for Gmail, `uploadMicrosoftOAuthSellerCredential` for personal Outlook accounts, or `uploadICloudMailSellerCredential` for iCloud Mail. The normal `uploadSellerCredential` and extension seller-capture paths support Cash App, Wise (token upload only), and Amazon Pay UPI. Existing backend Venmo cookie bundles remain usable through status/verification and low-level encrypted-bundle APIs.
 
 ```ts
 await client.uploadGoogleOAuthSellerCredential({
@@ -575,9 +593,11 @@ await client.uploadMicrosoftOAuthSellerCredential({
 });
 ```
 
+X Money mailbox uploads require SDK 0.14.9 or later. For Gmail and Outlook, pass `platform: 'xmoney'` with the registered maker hash and the same OAuth code fields; no `payeeEmail` is needed. Enable X Money email notifications and receive a payment before connecting. The server accepts a credential only after validating a received-payment email for the registered X account. A historical receipt establishes delivery, not the current notification-setting state; keep notifications enabled for future payments. A missing or invalid receipt returns `XMONEY_EMAIL_RECEIPT_NOT_FOUND`.
+
 Validate OAuth state in the initiating browser tab before uploading. `redirectUri` must exactly match the one in the authorization request. Both methods exchange a one-time code without retrying; start fresh consent if the response is lost. The Microsoft client secret stays server-side. See [email connection setup](../../docs/email-oauth.md).
 
-iCloud Mail has no OAuth. Pass the seller's Apple app-specific password with the registered maker hash; PayPal also passes its receiving email. For Venmo, the SDK fetches the maker's account ID from Curator (`GET /v2/makers/venmo/{payeeDetails}/payee-id`) and checks it against `payeeDetails` before any mailbox work, so sellers never enter it.
+iCloud Mail has no OAuth. Pass the seller's Apple app-specific password with the registered maker hash; PayPal also passes its receiving email, and X Money passes `payeeUsername` (normalized lowercase and checked against the maker hash). For Venmo, the SDK fetches the maker's account ID from Curator (`GET /v2/makers/venmo/{payeeDetails}/payee-id`) and checks it against `payeeDetails` before any mailbox work, so sellers never enter it.
 
 ```ts
 await client.uploadICloudMailSellerCredential({

package/dist/build-metadata.json

@@ -2,11 +2,11 @@
   "schemaVersion": 2,
   "source": {
     "repository": "zkp2p/zkp2p-clients",
-    "commitSha": "46efc268b38382bdd6c66bbd7fd9b91f9368a79d",
+    "commitSha": "561ca15adeac3e97e582647c818656e69289020d",
     "kind": "github",
     "distributable": true
   },
-  "sdkPackageVersion": "0.14.8",
+  "sdkPackageVersion": "0.14.10",
   "contractsPackageVersion": "0.4.4-rc.2",
   "indexerSchemaPackageVersion": "0.22.0",
   "activeDisputeStack": {

package/dist/chunk-DIHRDN2W.mjs

@@ -0,0 +1,12 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// <define:__ZKP2P_SDK_BUILD_METADATA__>
+var define_ZKP2P_SDK_BUILD_METADATA_default = { schemaVersion: 2, source: { repository: "zkp2p/zkp2p-clients", commitSha: "561ca15adeac3e97e582647c818656e69289020d", kind: "github", distributable: true }, sdkPackageVersion: "0.14.10", contractsPackageVersion: "0.4.4-rc.2", indexerSchemaPackageVersion: "0.22.0", activeDisputeStack: { base: { version: 2, selectionHash: "ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c" }, baseStaging: { version: 2, selectionHash: "6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9" } } };
+
+export { __export, define_ZKP2P_SDK_BUILD_METADATA_default };
+//# sourceMappingURL=chunk-DIHRDN2W.mjs.map
+//# sourceMappingURL=chunk-DIHRDN2W.mjs.map

package/dist/chunk-DIHRDN2W.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["%3Cdefine:__ZKP2P_SDK_BUILD_METADATA__%3E"],"names":[],"mappings":";;;;;;;AAAA,IAAA,uCAAA,GAAA,EAAC,aAAA,EAAgB,CAAA,EAAE,MAAA,EAAS,EAAC,YAAa,qBAAA,EAAsB,SAAA,EAAY,0CAAA,EAA2C,IAAA,EAAO,UAAS,aAAA,EAAgB,IAAA,EAAI,EAAE,iBAAA,EAAoB,WAAU,uBAAA,EAA0B,YAAA,EAAa,2BAAA,EAA8B,QAAA,EAAS,oBAAqB,EAAC,IAAA,EAAO,EAAC,OAAA,EAAU,GAAE,aAAA,EAAgB,kEAAA,EAAkE,EAAE,WAAA,EAAc,EAAC,OAAA,EAAU,CAAA,EAAE,aAAA,EAAgB,kEAAA,IAAmE","file":"chunk-DIHRDN2W.mjs","sourcesContent":["{\"schemaVersion\":2,\"source\":{\"repository\":\"zkp2p/zkp2p-clients\",\"commitSha\":\"561ca15adeac3e97e582647c818656e69289020d\",\"kind\":\"github\",\"distributable\":true},\"sdkPackageVersion\":\"0.14.10\",\"contractsPackageVersion\":\"0.4.4-rc.2\",\"indexerSchemaPackageVersion\":\"0.22.0\",\"activeDisputeStack\":{\"base\":{\"version\":2,\"selectionHash\":\"ba40c2954b408d0c658881a8d28e5bfcc9bade5cc3d953fd17eae1eca69d841c\"},\"baseStaging\":{\"version\":2,\"selectionHash\":\"6c49c1ce51eec594a22385c4efcab08aa9926b6b63a725e14a0027ec5d2f4fc9\"}}}"]}

package/dist/{chunk-Q33OEQMR.mjs → chunk-PLUTAOT5.mjs}

@@ -1,5 +1,5 @@
 import { currencyKeccak256, getCurrencyInfoFromHash } from './chunk-WDEEWFEU.mjs';
-import { __export } from './chunk-HG27KAGT.mjs';
+import { __export } from './chunk-DIHRDN2W.mjs';
 import { hexToBytes, keccak256, toBytes, bytesToHex } from 'viem';
 
 // src/utils/bigint.ts
@@ -100446,5 +100446,5 @@ function enrichPvIntentView(view, chainId, env = "production") {
 }
 
 export { DISPUTE_PROTECTION_POLICY_ABI, DISPUTE_PROTECTION_POLICY_ABI2, DisputeNullifierRegistry_default3 as DisputeNullifierRegistry_default, DisputeProtectionPolicy_default3 as DisputeProtectionPolicy_default, DisputeVerifier_default3 as DisputeVerifier_default, IntentLifecycleHookV1_default3 as IntentLifecycleHookV1_default, METHOD_NAME_TO_HASH, MultiAttestationVerifier_default3 as MultiAttestationVerifier_default, ORCHESTRATOR_V3_ABI2 as ORCHESTRATOR_V3_ABI, OrchestratorRegistry_default3 as OrchestratorRegistry_default, OrchestratorV3_default3 as OrchestratorV3_default, PAYMENT_PLATFORMS, STAKE_VAULT_ABI2 as STAKE_VAULT_ABI, SUPPORTED_PAYMENT_METHOD_HASHES, StakeVault_default3 as StakeVault_default, WhitelistPolicy_default3 as WhitelistPolicy_default, asciiToBytes32, enrichPvDepositView, enrichPvIntentView, ensureBytes32, getContracts, getDisputeProtectionPolicyContract, getGatingServiceAddress, getIntentGuardianContract, getOrchestratorV3Contract, getPaymentMethodsCatalog, getRateManagerContracts, getStakeVaultContract, hasIntentGuardian, matchesPaymentMethodNameAndHash, matchesQuotePaymentMethod, parseBigIntLike, parseDepositView, parseIntentView, resolveFiatCurrencyBytes32, resolvePaymentMethodHash, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash };
-//# sourceMappingURL=chunk-Q33OEQMR.mjs.map
-//# sourceMappingURL=chunk-Q33OEQMR.mjs.map
+//# sourceMappingURL=chunk-PLUTAOT5.mjs.map
+//# sourceMappingURL=chunk-PLUTAOT5.mjs.map