@zkp2p/sdk 0.5.0 → 0.5.4

package/dist/index.mjs

@@ -1,14 +1,15 @@
-export { ZERO_RATE_MANAGER_ID, classifyDelegationState, getDelegationRoute, isZeroRateManagerId, normalizeRateManagerId, normalizeRegistry } from './chunk-LPJE2MN7.mjs';
+export { TAKER_TIER_CAPS, TAKER_TIER_ORDER, TAKER_TIER_SCHEDULE, ZERO_RATE_MANAGER_ID, classifyDelegationState, getDelegationRoute, getNextTakerTier, isZeroRateManagerId, normalizeRateManagerId, normalizeRegistry } from './chunk-TGMRXUP2.mjs';
 import { APIError, NetworkError, ValidationError } from './chunk-GHQK65J2.mjs';
 export { APIError, ContractError, ErrorCode, NetworkError, ValidationError, ZKP2PError } from './chunk-GHQK65J2.mjs';
-import { getContracts, getRateManagerContracts, getPaymentMethodsCatalog, resolvePaymentMethodHashFromCatalog, getGatingServiceAddress, parseBigIntLike, resolveFiatCurrencyBytes32, resolvePaymentMethodNameFromHash } from './chunk-L526MKG3.mjs';
-export { asciiToBytes32, enrichPvDepositView, enrichPvIntentView, ensureBytes32, getContracts, getGatingServiceAddress, getPaymentMethodsCatalog, getRateManagerContracts, parseDepositView, parseIntentView, resolveFiatCurrencyBytes32, resolvePaymentMethodHash, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash } from './chunk-L526MKG3.mjs';
+import { getContracts, getRateManagerContracts, getPaymentMethodsCatalog, resolvePaymentMethodHashFromCatalog, getGatingServiceAddress, parseBigIntLike, resolveFiatCurrencyBytes32, resolvePaymentMethodNameFromHash } from './chunk-VJ33XYCV.mjs';
+export { asciiToBytes32, enrichPvDepositView, enrichPvIntentView, ensureBytes32, getContracts, getGatingServiceAddress, getPaymentMethodsCatalog, getRateManagerContracts, parseDepositView, parseIntentView, resolveFiatCurrencyBytes32, resolvePaymentMethodHash, resolvePaymentMethodHashFromCatalog, resolvePaymentMethodNameFromHash } from './chunk-VJ33XYCV.mjs';
 import { Currency, currencyKeccak256 } from './chunk-ZFBH4HD7.mjs';
 export { Currency, currencyInfo, getCurrencyCodeFromHash, getCurrencyInfoFromCountryCode, getCurrencyInfoFromHash, isSupportedCurrencyHash, mapConversionRatesToOnchainMinRate } from './chunk-ZFBH4HD7.mjs';
 import './chunk-J5LGTIGS.mjs';
 import { concatHex, encodeFunctionData, encodeAbiParameters, createPublicClient, http, formatUnits } from 'viem';
 import { hardhat, base } from 'viem/chains';
 import { createEncryptedBuyerTeeSessionMaterial as createEncryptedBuyerTeeSessionMaterial$1, createEncryptedSellerCredentialUpload } from '@zkp2p/zkp2p-attestation';
+export { createNitroAttestationClient } from '@zkp2p/zkp2p-attestation';
 import { AbiCoder } from 'ethers';
 import { Attribution } from 'ox/erc8021';
 
@@ -364,13 +365,6 @@ async function withRetry(fn, maxRetries = 3, delayMs = 1e3, timeoutMs) {
 }
 
 // src/adapters/verification.ts
-function createHeaders(apiKey, authorizationToken) {
-  const headers2 = { "Content-Type": "application/json" };
-  if (apiKey) headers2["x-api-key"] = apiKey;
-  if (authorizationToken)
-    headers2["Authorization"] = authorizationToken.startsWith("Bearer ") ? authorizationToken : `Bearer ${authorizationToken}`;
-  return headers2;
-}
 async function apiSignIntentV3(request, opts) {
   const url = `${opts.baseApiUrl.replace(/\/$/, "")}/v3/intent/sign`;
   const json = await withRetry(
@@ -379,7 +373,7 @@ async function apiSignIntentV3(request, opts) {
       try {
         res = await fetch(url, {
           method: "POST",
-          headers: createHeaders(opts.apiKey, opts.authorizationToken),
+          headers: { "Content-Type": "application/json" },
           body: JSON.stringify(request)
         });
       } catch (error) {
@@ -468,29 +462,6 @@ async function createEncryptedSellerCredentialUploadForPlatform({
     ...attestationRuntime?.getRandomValues ? { getRandomValues: attestationRuntime.getRandomValues } : {}
   });
 }
-async function apiCreatePaymentAttestation(payload, attestationServiceUrl, platform, actionType) {
-  return withRetry(async () => {
-    let res;
-    try {
-      const endpoint = `/verify/${encodeURIComponent(platform)}/${encodeURIComponent(actionType)}`;
-      res = await fetch(`${attestationServiceUrl}${endpoint}`, {
-        method: "POST",
-        headers: headers(),
-        body: JSON.stringify(payload)
-      });
-    } catch (error) {
-      throw new NetworkError("Failed to connect to Attestation Service", {
-        endpoint: `/verify/${platform}/${actionType}`,
-        error
-      });
-    }
-    if (!res.ok) {
-      const errorText = await res.text();
-      throw parseAPIError(res, errorText);
-    }
-    return res.json();
-  });
-}
 async function apiVerifyBuyerTeePayment(payload, attestationServiceUrl, platform, actionType) {
   return withRetry(async () => {
     let res;
@@ -528,6 +499,7 @@ async function apiRequestIdentityAttestation(payload, attestationServiceUrl, pla
         body: JSON.stringify({
           platform,
           actionType,
+          callerAddress: payload.callerAddress,
           encryptedSessionMaterial: payload.encryptedSessionMaterial,
           params: payload.params
         })
@@ -744,7 +716,7 @@ var PAYMENT_PLATFORMS = [
 // src/utils/constants.ts
 var DEFAULT_BASE_API_URL = "https://api.zkp2p.xyz";
 
-// ../../node_modules/.pnpm/@zkp2p+contracts-v2@0.2.2_ethers@6.16.0_bufferutil@4.1.0_utf-8-validate@5.0.10__typescript@5.9.3_zod@4.2.1/node_modules/@zkp2p/contracts-v2/oracleFeeds/chainlink.json
+// ../../node_modules/.pnpm/@zkp2p+contracts-v2@0.2.4_ethers@6.16.0_bufferutil@4.1.0_utf-8-validate@5.0.10__typescript@5.9.3_zod@4.2.1/node_modules/@zkp2p/contracts-v2/oracleFeeds/chainlink.json
 var chainlink_default = {
   feeds: [
     {
@@ -1034,6 +1006,11 @@ var PLATFORM_ATTESTATION_CONFIG = {
 };
 function resolvePlatformAttestationConfig(platformName) {
   const normalized = platformName.toLowerCase();
+  if (normalized === "zelle") {
+    throw new Error(
+      "Generic Zelle buyer TEE fulfillment requires a bank-specific actionType override."
+    );
+  }
   const config = PLATFORM_ATTESTATION_CONFIG[normalized];
   if (!config) {
     throw new Error(`Unknown payment platform: ${platformName}`);
@@ -1042,6 +1019,38 @@ function resolvePlatformAttestationConfig(platformName) {
 }
 
 // src/client/IntentOperations.ts
+var INTENT_MIN_AT_SIGNAL_ABI = [
+  {
+    type: "function",
+    name: "getIntentMinAtSignal",
+    stateMutability: "view",
+    inputs: [{ name: "_intentHash", type: "bytes32" }],
+    outputs: [{ name: "", type: "uint256" }]
+  }
+];
+var GENERIC_ZELLE_ATTESTATION_ACTION_TYPES = /* @__PURE__ */ new Set([
+  "transfer_zelle_bofa",
+  "transfer_zelle_chase",
+  "transfer_zelle_citi"
+]);
+function resolveBuyerTeeAttestationRoute(platformName, buyerTeeProof) {
+  if (platformName.toLowerCase() !== "zelle") {
+    const platformConfig = resolvePlatformAttestationConfig(platformName);
+    return {
+      actionPlatform: buyerTeeProof.actionPlatform ?? platformConfig.actionPlatform,
+      actionType: buyerTeeProof.actionType ?? platformConfig.actionType
+    };
+  }
+  if (buyerTeeProof.actionPlatform !== "zelle" || !buyerTeeProof.actionType || !GENERIC_ZELLE_ATTESTATION_ACTION_TYPES.has(buyerTeeProof.actionType)) {
+    throw new Error(
+      'Generic Zelle buyer TEE fulfillment requires actionPlatform "zelle" and a bank-specific transfer_zelle_* actionType.'
+    );
+  }
+  return {
+    actionPlatform: buyerTeeProof.actionPlatform,
+    actionType: buyerTeeProof.actionType
+  };
+}
 var IntentOperations = class {
   constructor(config) {
     this.config = config;
@@ -1086,13 +1095,9 @@ var IntentOperations = class {
     let { gatingServiceSignature, signatureExpiration } = params;
     let preIntentHookData = params.preIntentHookData;
     const baseApiUrl = this.config.getBaseApiUrl();
-    const apiKey = this.config.getApiKey();
-    const authorizationToken = this.config.getAuthorizationToken();
-    if ((!gatingServiceSignature || !signatureExpiration) && baseApiUrl && (apiKey || authorizationToken)) {
+    if ((!gatingServiceSignature || !signatureExpiration) && baseApiUrl) {
       const apiOpts = {
         baseApiUrl,
-        apiKey,
-        authorizationToken,
         timeoutMs: this.config.getApiTimeoutMs()
       };
       const response = await apiSignIntentV3(
@@ -1328,8 +1333,7 @@ var IntentOperations = class {
       paymentProof = precomputed.paymentProof;
       verificationData = precomputed.verificationData;
     } else {
-      const { proof } = params;
-      const buyerTeeProof = parseBuyerTeePaymentProofInput(proof);
+      const buyerTeeProof = parseBuyerTeePaymentProofInput(params.proof);
       const attestationServiceUrl = params.attestationServiceUrl ?? this.defaultAttestationService();
       const inputs = await this.config.host.getFulfillIntentInputs(intentHash, {
         orchestratorAddress: orchestratorContext.address
@@ -1343,7 +1347,7 @@ var IntentOperations = class {
       if (!platformName) {
         throw new Error("Unknown paymentMethodHash for this network/env; update SDK catalogs.");
       }
-      const platformConfig = resolvePlatformAttestationConfig(platformName);
+      const attestationRoute = resolveBuyerTeeAttestationRoute(platformName, buyerTeeProof);
       const intent = {
         intentHash,
         amount: inputs.amount,
@@ -1354,7 +1358,7 @@ var IntentOperations = class {
         payeeDetails: inputs.payeeDetails,
         timestampBufferMs: params.timestampBufferMs ?? "300000"
       };
-      const attestation = buyerTeeProof ? await apiVerifyBuyerTeePayment(
+      const attestation = await apiVerifyBuyerTeePayment(
         {
           encryptedSessionMaterial: buyerTeeProof.encryptedSessionMaterial,
           params: buyerTeeProof.params,
@@ -1362,19 +1366,10 @@ var IntentOperations = class {
           intent
         },
         attestationServiceUrl,
-        buyerTeeProof.actionPlatform ?? platformConfig.actionPlatform,
-        buyerTeeProof.actionType ?? platformConfig.actionType
-      ) : await apiCreatePaymentAttestation(
-        {
-          proofType: "reclaim",
-          proof: typeof proof === "string" ? proof : serializeProofInput(proof),
-          chainId: this.config.getChainId(),
-          intent
-        },
-        attestationServiceUrl,
-        platformConfig.actionPlatform,
-        platformConfig.actionType
+        attestationRoute.actionPlatform,
+        attestationRoute.actionType
       );
+      assertReleaseAmountMeetsMinimum(attestation, inputs.minimumReleaseAmount);
       paymentProof = encodePaymentAttestation(attestation);
       verificationData = encodeVerifyPaymentData({
         intentHash,
@@ -1425,13 +1420,19 @@ var IntentOperations = class {
           );
           const payee2 = matched?.verificationData?.payeeDetails;
           if (payee2) {
+            const minimumReleaseAmount2 = await this.resolveIntentMinimumReleaseAmount(
+              intentHash,
+              options?.orchestratorAddress,
+              view.deposit.deposit.intentAmountRange.min
+            );
             return {
               amount: view.intent.amount.toString(),
               fiatCurrency: view.intent.fiatCurrency,
               conversionRate: view.intent.conversionRate.toString(),
               payeeDetails: payee2,
               intentTimestampMs: (BigInt(view.intent.timestamp) * 1000n).toString(),
-              paymentMethodHash: view.intent.paymentMethod
+              paymentMethodHash: view.intent.paymentMethod,
+              ...minimumReleaseAmount2 ? { minimumReleaseAmount: minimumReleaseAmount2 } : {}
             };
           }
         }
@@ -1451,6 +1452,8 @@ var IntentOperations = class {
             depositId
             signalTimestamp
             verifier
+            status
+            isExpired
           }
         }
       `
@@ -1459,19 +1462,39 @@ var IntentOperations = class {
     });
     const record = response?.Intent?.[0];
     if (!record) throw new Error("Intent not found on indexer");
+    if (record.status && record.status !== "SIGNALED") {
+      throw new ValidationError(
+        `Intent not found or no longer fulfillable (status: ${record.status})`,
+        "intentHash",
+        { intentHash, status: record.status }
+      );
+    }
+    if (record.isExpired) {
+      throw new ValidationError("Intent expired and can no longer be fulfilled", "intentHash", {
+        intentHash
+      });
+    }
     if (!record.signalTimestamp) throw new Error("Intent signal timestamp not found on indexer");
     const deposit = await this.config.getIndexerService().fetchDepositWithRelations(record.depositId, {
       includeIntents: false
     });
+    if (!deposit) {
+      throw new Error(`Deposit ${record.depositId} not found on indexer for intent ${intentHash}`);
+    }
     let payee;
     const paymentMethodHashLower = (record.paymentMethodHash || "").toLowerCase();
-    for (const paymentMethod of deposit?.paymentMethods || []) {
+    for (const paymentMethod of deposit.paymentMethods || []) {
       if ((paymentMethod.paymentMethodHash || "").toLowerCase() === paymentMethodHashLower) {
         payee = paymentMethod.payeeDetailsHash;
         break;
       }
     }
     if (!payee) throw new Error("Payee details not found for intent");
+    const minimumReleaseAmount = await this.resolveIntentMinimumReleaseAmount(
+      intentHash,
+      options?.orchestratorAddress,
+      deposit.intentAmountMin
+    );
     return {
       amount: record.amount,
       fiatCurrency: record.fiatCurrency,
@@ -1479,14 +1502,49 @@ var IntentOperations = class {
       payeeDetails: payee,
       intentTimestampMs: (BigInt(record.signalTimestamp) * 1000n).toString(),
       paymentMethodHash: record.paymentMethodHash || "0x0000000000000000000000000000000000000000000000000000000000000000",
-      paymentVerifier: record.verifier || void 0
+      paymentVerifier: record.verifier || void 0,
+      ...minimumReleaseAmount ? { minimumReleaseAmount } : {}
     };
   }
+  async resolveIntentMinimumReleaseAmount(intentHash, orchestratorAddress, fallbackMinimum) {
+    const snapshotMinimum = await this.readIntentMinAtSignal(intentHash, orchestratorAddress);
+    if (snapshotMinimum && snapshotMinimum !== "0") {
+      return snapshotMinimum;
+    }
+    if (fallbackMinimum === void 0 || fallbackMinimum === null) {
+      return snapshotMinimum;
+    }
+    return BigInt(fallbackMinimum).toString();
+  }
+  async readIntentMinAtSignal(intentHash, orchestratorAddress) {
+    const address = orchestratorAddress ?? this.config.getOrchestratorV2Address();
+    if (!address) return void 0;
+    try {
+      const value = await this.config.getPublicClient().readContract({
+        address,
+        abi: INTENT_MIN_AT_SIGNAL_ABI,
+        functionName: "getIntentMinAtSignal",
+        args: [intentHash]
+      });
+      return value.toString();
+    } catch {
+      return void 0;
+    }
+  }
 };
-function serializeProofInput(proof) {
-  return JSON.stringify(
-    proof,
-    (_key, value) => typeof value === "bigint" ? value.toString() : value
+function assertReleaseAmountMeetsMinimum(attestation, minimumReleaseAmount) {
+  if (!minimumReleaseAmount) return;
+  const minimum = BigInt(minimumReleaseAmount);
+  if (minimum === 0n) return;
+  const releaseAmount = BigInt(attestation.responseObject.typedDataValue.releaseAmount);
+  if (releaseAmount >= minimum) return;
+  throw new ValidationError(
+    `Payment amount is below the minimum required for this intent. Release amount ${releaseAmount.toString()} is below minimum ${minimum.toString()}.`,
+    "releaseAmount",
+    {
+      releaseAmount: releaseAmount.toString(),
+      minimumReleaseAmount: minimum.toString()
+    }
   );
 }
 function isRecord(value) {
@@ -1499,7 +1557,9 @@ function isBuyerTeeParams(value) {
 }
 function parseBuyerTeePaymentProofInput(proof) {
   if (!isRecord(proof) || proof.proofType !== "buyerTee") {
-    return null;
+    throw new Error(
+      "Buyer TEE proof input is required; legacy proof inputs are no longer supported."
+    );
   }
   if (typeof proof.encryptedSessionMaterial !== "string" || !isBuyerTeeParams(proof.params)) {
     throw new Error("Buyer TEE proof requires encryptedSessionMaterial and params.");
@@ -1753,7 +1813,7 @@ var ProtocolViewerReader = class {
       if (inputCount === null) {
         throw new Error("Configured ProtocolViewer ABI does not expose getDeposit");
       }
-      const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-GGSM2243.mjs');
+      const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-XN63B2S5.mjs');
       if (inputCount >= 3) {
         return tryContexts(
           protocolViewerContexts,
@@ -1832,7 +1892,7 @@ var ProtocolViewerReader = class {
       return Promise.all(ids.map((id) => this.config.host.getPvDepositById(id)));
     }
     const bn = ids.map((id) => typeof id === "bigint" ? id : parseRawDepositId(id));
-    const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-GGSM2243.mjs');
+    const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-XN63B2S5.mjs');
     if (inputCount >= 2) {
       const requests = ids.map((id, index) => ({
         index,
@@ -1937,7 +1997,7 @@ var ProtocolViewerReader = class {
     if (!protocolViewerAddress || !protocolViewerAbi || inputCount === null) {
       return this.config.host.getPvAccountDepositsFromIndexer(owner);
     }
-    const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-GGSM2243.mjs');
+    const { parseDepositView: parseDepositView2 } = await import('./protocolViewerParsers-XN63B2S5.mjs');
     const { address, abi } = this.config.host.requireProtocolViewer();
     if (inputCount >= 2) {
       const readAndFilter = async (raw2) => {
@@ -2008,7 +2068,7 @@ var ProtocolViewerReader = class {
     if (protocolViewerEntries.length === 0) {
       throw new Error("ProtocolViewer not available for this network");
     }
-    const { parseIntentView: parseIntentView2 } = await import('./protocolViewerParsers-GGSM2243.mjs');
+    const { parseIntentView: parseIntentView2 } = await import('./protocolViewerParsers-XN63B2S5.mjs');
     const intentsByHash = /* @__PURE__ */ new Map();
     let attemptedRead = false;
     let hadSuccessfulRead = false;
@@ -2116,7 +2176,7 @@ var ProtocolViewerReader = class {
     if (protocolViewerEntries.length === 0) {
       throw new Error("ProtocolViewer not available for this network");
     }
-    const { parseIntentView: parseIntentView2 } = await import('./protocolViewerParsers-GGSM2243.mjs');
+    const { parseIntentView: parseIntentView2 } = await import('./protocolViewerParsers-XN63B2S5.mjs');
     let lastError;
     for (const pvEntry of protocolViewerEntries) {
       const inputCount = this.pvEntryFunctionInputCount(pvEntry, "getIntent");
@@ -4975,12 +5035,48 @@ async function fetchFulfillmentAndPayment(client, intentHash) {
   });
 }
 
+// src/utils/logger.ts
+var currentLevel = "info";
+function setLogLevel(level) {
+  currentLevel = level;
+}
+function shouldLog(level) {
+  switch (currentLevel) {
+    case "debug":
+      return true;
+    case "info":
+      return level !== "debug";
+    case "error":
+      return level === "error";
+    default:
+      return true;
+  }
+}
+var logger = {
+  debug: (...args) => {
+    if (shouldLog("debug")) {
+      console.log("[DEBUG]", ...args);
+    }
+  },
+  info: (...args) => {
+    if (shouldLog("info")) {
+      console.log("[INFO]", ...args);
+    }
+  },
+  warn: (...args) => {
+    if (shouldLog("info")) {
+      console.warn("[WARN]", ...args);
+    }
+  },
+  error: (...args) => {
+    console.error("[ERROR]", ...args);
+  }
+};
+
 // src/adapters/api.ts
-function createHeaders2(apiKey, authToken) {
+function createHeaders(apiKey) {
   const headers2 = { "Content-Type": "application/json" };
   if (apiKey) headers2["x-api-key"] = apiKey;
-  if (authToken)
-    headers2["Authorization"] = authToken.startsWith("Bearer ") ? authToken : `Bearer ${authToken}`;
   return headers2;
 }
 function withApiBase(baseApiUrl) {
@@ -4995,7 +5091,6 @@ async function apiFetch({
   method = "GET",
   body,
   apiKey,
-  authToken,
   timeoutMs,
   retryCount = 3,
   retryDelayMs = 1e3
@@ -5007,7 +5102,7 @@ async function apiFetch({
       try {
         const options = {
           method,
-          headers: createHeaders2(apiKey, authToken)
+          headers: createHeaders(apiKey)
         };
         if (body && method !== "GET") {
           options.body = JSON.stringify(body);
@@ -5082,10 +5177,17 @@ function buildLegacyVerifierCurrencies(deposit) {
   const currenciesByMethod = /* @__PURE__ */ new Map();
   for (const currency of deposit.currencies ?? []) {
     const methodHash = currency.paymentMethodHash;
+    const resolvedConversionRate = currency.conversionRate ?? currency.minConversionRate;
+    if (resolvedConversionRate === null || resolvedConversionRate === void 0) {
+      logger.warn(
+        `[sdk] Skipping currency with missing conversion rate (deposit ${deposit.depositId}, currency ${currency.currencyCode})`
+      );
+      continue;
+    }
     const bucket = currenciesByMethod.get(methodHash) ?? [];
     bucket.push({
       currencyCode: currency.currencyCode,
-      conversionRate: currency.conversionRate ?? currency.minConversionRate,
+      conversionRate: resolvedConversionRate,
       minConversionRate: currency.minConversionRate,
       managerRate: currency.managerRate ?? null,
       rateManagerId: currency.rateManagerId ?? null
@@ -5137,7 +5239,7 @@ function convertIndexerDepositToLegacyApiDeposit(deposit) {
     verifiers
   };
 }
-async function apiPostDepositDetails(req, baseApiUrl, timeoutMs, _apiKey, _authToken) {
+async function apiPostDepositDetails(req, baseApiUrl, timeoutMs) {
   return apiFetch({
     url: `${withApiBase(baseApiUrl)}/v2/makers/create`,
     method: "POST",
@@ -5145,7 +5247,7 @@ async function apiPostDepositDetails(req, baseApiUrl, timeoutMs, _apiKey, _authT
     timeoutMs
   });
 }
-async function apiGetQuote(req, baseApiUrl, timeoutMs, apiKey, authToken) {
+async function apiGetQuote(req, baseApiUrl, timeoutMs) {
   if (req.quotesToReturn !== void 0) {
     if (!Number.isInteger(req.quotesToReturn) || req.quotesToReturn < 1) {
       throw new ValidationError("quotesToReturn must be a positive integer", "quotesToReturn");
@@ -5180,12 +5282,10 @@ async function apiGetQuote(req, baseApiUrl, timeoutMs, apiKey, authToken) {
     url,
     method: "POST",
     body: requestBody,
-    apiKey,
-    authToken,
     timeoutMs
   });
 }
-async function apiGetQuotesBestByPlatform(req, baseApiUrl, timeoutMs, apiKey, authToken) {
+async function apiGetQuotesBestByPlatform(req, baseApiUrl, timeoutMs) {
   const isExactFiat = req.isExactFiat !== false;
   const endpoint = isExactFiat ? "best-by-platform" : "best-by-platform-exact-token";
   const url = `${withApiBase(baseApiUrl)}/v2/quote/${endpoint}`;
@@ -5203,17 +5303,13 @@ async function apiGetQuotesBestByPlatform(req, baseApiUrl, timeoutMs, apiKey, au
     url,
     method: "POST",
     body: requestBody,
-    apiKey,
-    authToken,
     timeoutMs
   });
 }
-async function apiGetPayeeDetails(req, apiKey, baseApiUrl, authToken, timeoutMs) {
+async function apiGetPayeeDetails(req, baseApiUrl, timeoutMs) {
   return apiFetch({
     url: `${baseApiUrl.replace(/\/$/, "")}/v2/makers/${req.processorName}/${req.hashedOnchainId}`,
     method: "GET",
-    apiKey,
-    authToken,
     timeoutMs
   });
 }
@@ -5264,7 +5360,7 @@ async function apiGetOwnerDeposits(req, apiKey, baseApiUrl, authToken, timeoutMs
     statusCode: 200
   };
 }
-async function apiGetTakerTier(req, apiKey, baseApiUrl, timeoutMs) {
+async function apiGetTakerTier(req, baseApiUrl, timeoutMs) {
   const normalizedOwner = req.owner.toLowerCase();
   const query = new URLSearchParams({
     owner: normalizedOwner,
@@ -5288,19 +5384,6 @@ async function apiUploadSellerCredential(processorName, payeeDetails, bundle, ba
     timeoutMs
   });
 }
-async function apiConfirmPayPalForwarding(payeeDetails, body, baseApiUrl, opts) {
-  const endpoint = `/v2/makers/paypal/${encodeURIComponent(
-    payeeDetails
-  )}/seller-credential/forwarding-confirmation`;
-  return apiFetch({
-    url: `${withApiBase(baseApiUrl)}${endpoint}`,
-    method: "POST",
-    body,
-    apiKey: opts?.apiKey,
-    authToken: opts?.authToken,
-    timeoutMs: opts?.timeoutMs
-  });
-}
 async function apiUploadGoogleOAuthSellerCredential(processorName, payeeDetails, body, baseApiUrl, opts) {
   const endpoint = `/v2/makers/${encodeURIComponent(processorName)}/${encodeURIComponent(
     payeeDetails
@@ -5309,8 +5392,6 @@ async function apiUploadGoogleOAuthSellerCredential(processorName, payeeDetails,
     url: `${withApiBase(baseApiUrl)}${endpoint}`,
     method: "POST",
     body,
-    apiKey: opts?.apiKey,
-    authToken: opts?.authToken,
     timeoutMs: opts?.timeoutMs
   });
 }
@@ -5324,7 +5405,7 @@ async function apiGetSellerCredentialStatus(processorName, payeeDetails, baseApi
     timeoutMs
   });
 }
-async function apiVerifySellerPayment(platform, req, baseApiUrl, timeoutMs, apiKey, authToken) {
+async function apiVerifySellerPayment(platform, req, baseApiUrl, timeoutMs, apiKey) {
   const body = {
     txId: req.txId,
     chainId: req.chainId,
@@ -5336,15 +5417,13 @@ async function apiVerifySellerPayment(platform, req, baseApiUrl, timeoutMs, apiK
     method: "POST",
     body,
     apiKey,
-    authToken,
     timeoutMs
   });
 }
-async function apiGetOrderbook(params, optsOrBaseApiUrl, timeoutMs, apiKey) {
+async function apiGetOrderbook(params, optsOrBaseApiUrl, timeoutMs) {
   const opts = typeof optsOrBaseApiUrl === "string" ? {
     baseApiUrl: optsOrBaseApiUrl,
-    timeoutMs,
-    apiKey
+    timeoutMs
   } : optsOrBaseApiUrl;
   const query = new URLSearchParams();
   Object.entries(params).forEach(([key, value]) => {
@@ -5354,17 +5433,14 @@ async function apiGetOrderbook(params, optsOrBaseApiUrl, timeoutMs, apiKey) {
   const response = await apiFetch({
     url: `${withApiBase(opts.baseApiUrl)}/v2/orderbook?${query.toString()}`,
     method: "GET",
-    apiKey: opts.apiKey,
-    authToken: opts.authToken,
     timeoutMs: opts.timeoutMs
   });
   return response.responseObject;
 }
-async function apiGetDepositBundle(params, optsOrBaseApiUrl, timeoutMs, apiKey) {
+async function apiGetDepositBundle(params, optsOrBaseApiUrl, timeoutMs) {
   const opts = typeof optsOrBaseApiUrl === "string" ? {
     baseApiUrl: optsOrBaseApiUrl,
-    timeoutMs,
-    apiKey
+    timeoutMs
   } : optsOrBaseApiUrl;
   const escrowAddress = requireEscrowAddress(
     params.escrowAddress,
@@ -5377,8 +5453,6 @@ async function apiGetDepositBundle(params, optsOrBaseApiUrl, timeoutMs, apiKey)
   const response = await apiFetch({
     url: `${withApiBase(opts.baseApiUrl)}/v2/deposits/${params.depositId}/bundle?${query.toString()}`,
     method: "GET",
-    apiKey: opts.apiKey,
-    authToken: opts.authToken,
     timeoutMs: opts.timeoutMs
   });
   return response.responseObject;
@@ -6214,9 +6288,9 @@ var Zkp2pClient = class {
      * sending fiat payment to the deposit's payee.
      *
      * If `gatingServiceSignature` is not provided, the SDK will automatically
-     * fetch one from curator `/v3/intent/sign` when `apiKey` or `authorizationToken`
-     * is available. Otherwise you must provide `gatingServiceSignature` and
-     * `signatureExpiration` yourself.
+     * fetch one from curator `/v3/intent/sign` when `baseApiUrl` is configured.
+     * Otherwise you must provide `gatingServiceSignature` and `signatureExpiration`
+     * yourself.
      *
      * **Prepare Mode**: Use `.prepare()` to get the transaction calldata without sending:
      * ```typescript
@@ -6437,7 +6511,7 @@ var Zkp2pClient = class {
      * ```
      *
      * @param params.intentHash - The intent hash to fulfill (0x-prefixed, 32 bytes)
-     * @param params.proof - Payment proof from Reclaim (object or JSON string) or buyer TEE proof input
+     * @param params.proof - Buyer TEE payment proof input
      * @param params.timestampBufferMs - Allowed timestamp variance (default: 300000ms)
      * @param params.attestationServiceUrl - Override attestation service URL
      * @param params.postIntentHookData - Data to pass to post-intent hook
@@ -6646,8 +6720,6 @@ var Zkp2pClient = class {
       getChainId: () => this.chainId,
       getRuntimeEnv: () => this.runtimeEnv,
       getBaseApiUrl: () => this.baseApiUrl,
-      getApiKey: () => this.apiKey,
-      getAuthorizationToken: () => this.authorizationToken,
       getApiTimeoutMs: () => this.apiTimeoutMs,
       getProtocolViewerAddress: () => this.protocolViewerAddress,
       getProtocolViewerAbi: () => this.protocolViewerAbi,
@@ -7903,13 +7975,7 @@ var Zkp2pClient = class {
         reqWithEscrow.escrowAddresses = configuredEscrows;
       }
     }
-    const quote = await apiGetQuote(
-      reqWithEscrow,
-      baseApiUrl,
-      timeoutMs,
-      this.apiKey,
-      this.authorizationToken
-    );
+    const quote = await apiGetQuote(reqWithEscrow, baseApiUrl, timeoutMs);
     const quotes = quote?.responseObject?.quotes ?? [];
     for (const q of quotes) {
       const maker = q?.maker;
@@ -7923,8 +7989,8 @@ var Zkp2pClient = class {
   /**
    * **Supporting Method** - Fetches the best available quote per supported payment platform.
    *
-   * Returns one quote per platform when available. When authenticated, the API
-   * returns payee details in each platform's best quote.
+   * Returns one quote per platform when available. The API returns payee details
+   * in each platform's best quote when available.
    *
    * @param req - Best-by-platform quote request parameters
    * @param opts - Optional overrides for API URL and timeout
@@ -7947,13 +8013,7 @@ var Zkp2pClient = class {
         reqWithEscrow.escrowAddresses = configuredEscrows;
       }
     }
-    const quote = await apiGetQuotesBestByPlatform(
-      reqWithEscrow,
-      baseApiUrl,
-      timeoutMs,
-      this.apiKey,
-      this.authorizationToken
-    );
+    const quote = await apiGetQuotesBestByPlatform(reqWithEscrow, baseApiUrl, timeoutMs);
     const enrichedQuote = quote ? {
       ...quote,
       responseObject: {
@@ -7990,7 +8050,7 @@ var Zkp2pClient = class {
       ""
     );
     const timeoutMs = opts?.timeoutMs ?? this.apiTimeoutMs;
-    return apiGetTakerTier(req, void 0, baseApiUrl, timeoutMs);
+    return apiGetTakerTier(req, baseApiUrl, timeoutMs);
   }
   /**
    * The signed `credentialValidatedAt` field is an upload-time freshness witness minted by
@@ -8068,32 +8128,6 @@ var Zkp2pClient = class {
     const timeoutMs = opts?.timeoutMs ?? this.apiTimeoutMs;
     return apiUploadSellerCredentialBundle(params, baseApiUrl, timeoutMs);
   }
-  /**
-   * Confirms the PayPal Gmail-forwarding setup for an existing maker payee hash.
-   *
-   * Uses curator's `/forwarding-confirmation` route and forwards both API key and
-   * bearer token so either auth strategy can satisfy the hybrid gate. The endpoint
-   * is rate-limited server-side; callers should surface retry guidance from APIError.
-   */
-  async confirmPayPalForwarding(params, opts) {
-    const baseApiUrl = this.stripTrailingSlash(
-      opts?.baseApiUrl ?? this.baseApiUrl ?? DEFAULT_BASE_API_URL
-    );
-    const timeoutMs = opts?.timeoutMs ?? this.apiTimeoutMs;
-    return apiConfirmPayPalForwarding(
-      params.payeeDetails,
-      {
-        payeeEmail: params.payeeEmail,
-        forwardingInitiatorEmail: params.forwardingInitiatorEmail
-      },
-      baseApiUrl,
-      {
-        apiKey: this.apiKey,
-        authToken: this.authorizationToken,
-        timeoutMs
-      }
-    );
-  }
   /**
    * Upload a seller Gmail OAuth authorization code through curator.
    *
@@ -8116,8 +8150,6 @@ var Zkp2pClient = class {
         },
         baseApiUrl,
         {
-          apiKey: this.apiKey,
-          authToken: this.authorizationToken,
           timeoutMs
         }
       );
@@ -8132,8 +8164,6 @@ var Zkp2pClient = class {
       },
       baseApiUrl,
       {
-        apiKey: this.apiKey,
-        authToken: this.authorizationToken,
         timeoutMs
       }
     );
@@ -8160,8 +8190,8 @@ var Zkp2pClient = class {
     );
   }
   /**
-   * Internal-use endpoint. The curator route requires an internal `x-api-key`; standard SDK consumer
-   * API keys will be rejected with 401. Returns 410 GONE when curator has marked the credential inactive
+   * Internal-use endpoint. The curator route requires an internal `x-api-key`; non-internal
+   * API keys will be rejected. Returns 410 GONE when curator has marked the credential inactive
    * or a stale credential fails its synchronous re-probe.
    *
    * Verify a seller payment via curator's seller-credential proxy.
@@ -8181,8 +8211,7 @@ var Zkp2pClient = class {
       },
       baseApiUrl,
       timeoutMs,
-      this.apiKey,
-      this.authorizationToken
+      this.apiKey
     );
   }
   // ╔═══════════════════════════════════════════════════════════════════════════╗
@@ -8377,44 +8406,6 @@ var createPeerExtensionSdk = (options = {}) => ({
 });
 var peerExtensionSdk = createPeerExtensionSdk();
 
-// src/utils/logger.ts
-var currentLevel = "info";
-function setLogLevel(level) {
-  currentLevel = level;
-}
-function shouldLog(level) {
-  switch (currentLevel) {
-    case "debug":
-      return true;
-    case "info":
-      return level !== "debug";
-    case "error":
-      return level === "error";
-    default:
-      return true;
-  }
-}
-var logger = {
-  debug: (...args) => {
-    if (shouldLog("debug")) {
-      console.log("[DEBUG]", ...args);
-    }
-  },
-  info: (...args) => {
-    if (shouldLog("info")) {
-      console.log("[INFO]", ...args);
-    }
-  },
-  warn: (...args) => {
-    if (shouldLog("info")) {
-      console.warn("[WARN]", ...args);
-    }
-  },
-  error: (...args) => {
-    console.error("[ERROR]", ...args);
-  }
-};
-
-export { BASE_BUILDER_CODE, CHAINLINK_ORACLE_ADAPTER, CHAINLINK_ORACLE_FEEDS, ContractRouter, DEFAULT_ORACLE_MAX_STALENESS_SECONDS, IndexerClient, IndexerDepositService, IndexerRateManagerService, Zkp2pClient as OfframpClient, PAYMENT_PLATFORMS, PEER_EXTENSION_CHROME_URL, PLATFORM_METADATA, PYTH_CONTRACT_BASE, PYTH_ORACLE_ADAPTER, PYTH_ORACLE_FEEDS, SPREAD_ORACLE_FEEDS, SUPPORTED_CHAIN_IDS, TOKEN_METADATA, ZKP2P_ANDROID_REFERRER, ZKP2P_IOS_REFERRER, Zkp2pClient, apiConfirmPayPalForwarding, apiCreateSellerCredentialBundle, apiGetDepositBundle, apiGetOrderbook, apiGetOwnerDeposits, apiGetPayeeDetails, apiGetQuotesBestByPlatform, apiGetTakerTier, apiPostDepositDetails, apiRequestIdentityAttestation, apiUploadGoogleOAuthSellerCredential, apiUploadSellerCredentialBundle, apiValidatePayeeDetails, appendAttributionToCalldata, assertValidReferrerFeeConfig, compareEventCursorIdsByRecency, convertDepositsForLiquidity, convertIndexerDepositToEscrowView, convertIndexerIntentsToEscrowViews, createCompositeDepositId, createEncryptedBuyerTeeSessionMaterial, createPeerExtensionSdk, defaultIndexerEndpoint, encodePythAdapterConfig, encodeSpreadOracleAdapterConfig, encodeWithAttribution, fetchFulfillmentAndPayment as fetchIndexerFulfillmentAndPayment, getAttributionDataSuffix, getPeerExtensionState, getSpreadOracleConfig, isPeerExtensionAvailable, isValidReferrerFeeBps, isValidReferrerFeeRecipient, logger, openPeerExtensionInstallPage, parseReferrerFeeConfig, peerExtensionSdk, referrerFeeConfigToPreciseUnits, sendTransactionWithAttribution, setLogLevel, validateOracleFeedsOnChain };
+export { BASE_BUILDER_CODE, CHAINLINK_ORACLE_ADAPTER, CHAINLINK_ORACLE_FEEDS, ContractRouter, DEFAULT_ORACLE_MAX_STALENESS_SECONDS, IndexerClient, IndexerDepositService, IndexerRateManagerService, Zkp2pClient as OfframpClient, PAYMENT_PLATFORMS, PEER_EXTENSION_CHROME_URL, PLATFORM_METADATA, PYTH_CONTRACT_BASE, PYTH_ORACLE_ADAPTER, PYTH_ORACLE_FEEDS, SPREAD_ORACLE_FEEDS, SUPPORTED_CHAIN_IDS, TOKEN_METADATA, ZKP2P_ANDROID_REFERRER, ZKP2P_IOS_REFERRER, Zkp2pClient, apiCreateSellerCredentialBundle, apiGetDepositBundle, apiGetOrderbook, apiGetOwnerDeposits, apiGetPayeeDetails, apiGetQuotesBestByPlatform, apiGetTakerTier, apiPostDepositDetails, apiRequestIdentityAttestation, apiUploadGoogleOAuthSellerCredential, apiUploadSellerCredentialBundle, apiValidatePayeeDetails, appendAttributionToCalldata, assertValidReferrerFeeConfig, compareEventCursorIdsByRecency, convertDepositsForLiquidity, convertIndexerDepositToEscrowView, convertIndexerIntentsToEscrowViews, createCompositeDepositId, createEncryptedBuyerTeeSessionMaterial, createPeerExtensionSdk, defaultIndexerEndpoint, encodePythAdapterConfig, encodeSpreadOracleAdapterConfig, encodeWithAttribution, fetchFulfillmentAndPayment as fetchIndexerFulfillmentAndPayment, getAttributionDataSuffix, getPeerExtensionState, getSpreadOracleConfig, isPeerExtensionAvailable, isValidReferrerFeeBps, isValidReferrerFeeRecipient, logger, openPeerExtensionInstallPage, parseReferrerFeeConfig, peerExtensionSdk, referrerFeeConfigToPreciseUnits, sendTransactionWithAttribution, setLogLevel, validateOracleFeedsOnChain };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map