@zkp2p/zkp2p-attestation 1.5.0 → 1.5.1

package/CHANGELOG.md

@@ -1,8 +1,12 @@
 # Changelog
 
+## 1.5.1
+
+- Change Venmo identity registration to derive the stories URL from `params.SENDER_ID`. Venmo identity session material now requires only `Cookie`, while the service verifies the authenticated account id before replaying the derived stories request.
+
 ## 1.5.0
 
-- Change Venmo identity registration to require the captured stories URL in session material. Venmo identity session material now requires `url`, `params` only requires `SENDER_ID`, and `params.SENDER_ID` must match the URL `externalId`.
+- Require the captured Venmo identity stories URL in session material. This release was superseded by `1.5.1` because the runtime no longer requires `sessionMaterial.url`.
 - Require `callerAddress` on identity attestation requests and bind it into the signed `IdentityAttestation`; `verifyIdentityAttestation` now requires `expectedCallerAddress`.
 
 ## 1.4.0

package/README.md

@@ -191,13 +191,13 @@ Identity platform matrix:
 
 | Platform | `actionType` | Required encrypted session material | Public params fields |
 |---|---|---|---|
-| `venmo` | `register_venmo` | `url`, `Cookie` | `SENDER_ID` |
+| `venmo` | `register_venmo` | `Cookie` | `SENDER_ID` |
 | `paypal` | `register_paypal` | `Cookie` | `{}` |
 | `wise` | `register_wise` | `Cookie`, `X-Access-Token` | `PROFILE_ID` |
 
-For Venmo identity, pass the captured `https://account.venmo.com/api/stories?feedType=me&externalId=...` request URL
-inside encrypted `sessionMaterial.url`; the service validates that `params.SENDER_ID` matches the URL `externalId` and
-that Venmo returns a valid stories response with an explicit `stories` array.
+For Venmo identity, pass `SENDER_ID` in public params and include a replayable `Cookie` header in encrypted session
+material. The service verifies the authenticated account id, derives the stories URL from `SENDER_ID`, and requires
+Venmo to return a valid stories response with an explicit `stories` array.
 
 Buyer TEE and identity expose discriminated unions keyed by `platform` and `actionType`, including per-platform
 `params`, so invalid pairings fail during TypeScript compilation. Seller credential upload keeps its existing

package/dist/index.d.cts

@@ -39,10 +39,8 @@ type ChaseBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie" | "x-jpmc-c
 type BankOfAmericaBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured PayPal request headers; type requires `Cookie`. */
 type PayPalBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
-/** Captured Venmo identity stories request URL and headers; type requires `url` and `Cookie`. */
-type VenmoIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie"> & {
-    url: string;
-};
+/** Captured Venmo identity request headers; type requires `Cookie`. */
+type VenmoIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured PayPal identity request headers; type requires `Cookie`. */
 type PayPalIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured Wise identity request headers; type requires `Cookie` and `X-Access-Token`. */

package/dist/index.d.ts

@@ -39,10 +39,8 @@ type ChaseBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie" | "x-jpmc-c
 type BankOfAmericaBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured PayPal request headers; type requires `Cookie`. */
 type PayPalBuyerTeeSessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
-/** Captured Venmo identity stories request URL and headers; type requires `url` and `Cookie`. */
-type VenmoIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie"> & {
-    url: string;
-};
+/** Captured Venmo identity request headers; type requires `Cookie`. */
+type VenmoIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured PayPal identity request headers; type requires `Cookie`. */
 type PayPalIdentitySessionMaterial = RequiredBuyerTeeHeaders<"Cookie">;
 /** Captured Wise identity request headers; type requires `Cookie` and `X-Access-Token`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkp2p/zkp2p-attestation",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "type": "module",
   "description": "Browser, React Native, and Node verifier/encrypter for ZKP2P Nitro attested uploads",
   "packageManager": "yarn@3.6.3",