@openzeppelin/relayer-plugin-channels 0.4.0 → 0.6.0

package/dist/plugin/management.js

@@ -2,9 +2,13 @@
 /**
  * management.ts
  *
- * Payload-based management API for channel relayerIds.
+ * Payload-based management API for channel relayerIds and fee limits.
  * - listChannelAccounts: returns relayerIds from KV
  * - setChannelAccounts: replaces relayerIds array in KV (checks lock conflicts)
+ * - getFeeUsage: returns fee consumption for an API key
+ * - getFeeLimit: returns custom limit for an API key (if set)
+ * - setFeeLimit: sets custom limit for an API key
+ * - deleteFeeLimit: removes custom limit for an API key
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isManagementRequest = isManagementRequest;
@@ -12,16 +16,7 @@ exports.handleManagement = handleManagement;
 const relayer_sdk_1 = require("@openzeppelin/relayer-sdk");
 const config_1 = require("./config");
 const constants_1 = require("./constants");
-function timingSafeEqual(a, b) {
-    // Basic constant-time comparison without crypto dep
-    if (a.length !== b.length)
-        return false;
-    let result = 0;
-    for (let i = 0; i < a.length; i++) {
-        result |= a.charCodeAt(i) ^ b.charCodeAt(i);
-    }
-    return result === 0;
-}
+const fee_tracking_1 = require("./fee-tracking");
 function isManagementRequest(params) {
     return Boolean(params &&
         typeof params === "object" &&
@@ -30,8 +25,8 @@ function isManagementRequest(params) {
 }
 async function handleManagement(context) {
     const { kv, params } = context;
-    const adminSecretEnv = (0, config_1.getAdminSecret)();
-    if (!adminSecretEnv) {
+    const config = (0, config_1.loadConfig)();
+    if (!config.adminSecret) {
         throw (0, relayer_sdk_1.pluginError)("Management API disabled", {
             code: "MANAGEMENT_DISABLED",
             status: constants_1.HTTP_STATUS.FORBIDDEN,
@@ -39,20 +34,26 @@ async function handleManagement(context) {
     }
     const m = params?.management || {};
     const provided = (m.adminSecret ?? "").toString();
-    if (!provided || !timingSafeEqual(provided, adminSecretEnv)) {
+    if (!provided || provided !== config.adminSecret) {
         throw (0, relayer_sdk_1.pluginError)("Unauthorized", {
             code: "UNAUTHORIZED",
             status: constants_1.HTTP_STATUS.UNAUTHORIZED,
         });
     }
     const action = String(m.action || "");
-    // Load config (requires env like STELLAR_NETWORK) after auth
-    const cfg = (0, config_1.loadConfig)();
     switch (action) {
         case "listChannelAccounts":
-            return await listChannelAccounts(kv, cfg.network);
+            return await listChannelAccounts(kv, config.network);
         case "setChannelAccounts":
-            return await setChannelAccounts(kv, cfg.network, m);
+            return await setChannelAccounts(kv, config.network, m);
+        case "getFeeUsage":
+            return await getFeeUsage(kv, config.network, config.feeLimit, config.feeResetPeriodMs, m);
+        case "getFeeLimit":
+            return await getFeeLimit(kv, config.network, config.feeLimit, m);
+        case "setFeeLimit":
+            return await setFeeLimit(kv, config.network, m);
+        case "deleteFeeLimit":
+            return await deleteFeeLimit(kv, config.network, m);
         default:
             throw (0, relayer_sdk_1.pluginError)("Invalid management action", {
                 code: "INVALID_ACTION",
@@ -76,6 +77,100 @@ async function listChannelAccounts(kv, network) {
         });
     }
 }
+async function getFeeUsage(kv, network, defaultLimit, resetPeriodMs, payload) {
+    const apiKey = payload?.apiKey;
+    if (!apiKey || typeof apiKey !== "string") {
+        throw (0, relayer_sdk_1.pluginError)("Invalid payload: apiKey is required", {
+            code: "INVALID_PAYLOAD",
+            status: constants_1.HTTP_STATUS.BAD_REQUEST,
+        });
+    }
+    try {
+        const tracker = new fee_tracking_1.FeeTracker({
+            kv,
+            network,
+            apiKey,
+            defaultLimit,
+            resetPeriodMs,
+        });
+        return await tracker.getUsageInfo();
+    }
+    catch (e) {
+        throw (0, relayer_sdk_1.pluginError)("KV error while reading fee usage", {
+            code: "KV_ERROR",
+            status: constants_1.HTTP_STATUS.INTERNAL_SERVER_ERROR,
+        });
+    }
+}
+async function getFeeLimit(kv, network, defaultLimit, payload) {
+    const apiKey = payload?.apiKey;
+    if (!apiKey || typeof apiKey !== "string") {
+        throw (0, relayer_sdk_1.pluginError)("Invalid payload: apiKey is required", {
+            code: "INVALID_PAYLOAD",
+            status: constants_1.HTTP_STATUS.BAD_REQUEST,
+        });
+    }
+    try {
+        const tracker = new fee_tracking_1.FeeTracker({ kv, network, apiKey, defaultLimit });
+        const customLimit = await tracker.getCustomLimit();
+        return {
+            limit: customLimit ?? defaultLimit,
+        };
+    }
+    catch (e) {
+        throw (0, relayer_sdk_1.pluginError)("KV error while reading fee limit", {
+            code: "KV_ERROR",
+            status: constants_1.HTTP_STATUS.INTERNAL_SERVER_ERROR,
+        });
+    }
+}
+async function setFeeLimit(kv, network, payload) {
+    const apiKey = payload?.apiKey;
+    const limit = payload?.limit;
+    if (!apiKey || typeof apiKey !== "string") {
+        throw (0, relayer_sdk_1.pluginError)("Invalid payload: apiKey is required", {
+            code: "INVALID_PAYLOAD",
+            status: constants_1.HTTP_STATUS.BAD_REQUEST,
+        });
+    }
+    if (typeof limit !== "number" || !Number.isFinite(limit) || limit < 0) {
+        throw (0, relayer_sdk_1.pluginError)("Invalid payload: limit must be a non-negative number", {
+            code: "INVALID_PAYLOAD",
+            status: constants_1.HTTP_STATUS.BAD_REQUEST,
+        });
+    }
+    try {
+        const tracker = new fee_tracking_1.FeeTracker({ kv, network, apiKey });
+        await tracker.setCustomLimit(Math.floor(limit));
+        return { ok: true, limit: Math.floor(limit) };
+    }
+    catch (e) {
+        throw (0, relayer_sdk_1.pluginError)("KV error while setting fee limit", {
+            code: "KV_ERROR",
+            status: constants_1.HTTP_STATUS.INTERNAL_SERVER_ERROR,
+        });
+    }
+}
+async function deleteFeeLimit(kv, network, payload) {
+    const apiKey = payload?.apiKey;
+    if (!apiKey || typeof apiKey !== "string") {
+        throw (0, relayer_sdk_1.pluginError)("Invalid payload: apiKey is required", {
+            code: "INVALID_PAYLOAD",
+            status: constants_1.HTTP_STATUS.BAD_REQUEST,
+        });
+    }
+    try {
+        const tracker = new fee_tracking_1.FeeTracker({ kv, network, apiKey });
+        await tracker.deleteCustomLimit();
+        return { ok: true };
+    }
+    catch (e) {
+        throw (0, relayer_sdk_1.pluginError)("KV error while deleting fee limit", {
+            code: "KV_ERROR",
+            status: constants_1.HTTP_STATUS.INTERNAL_SERVER_ERROR,
+        });
+    }
+}
 async function setChannelAccounts(kv, network, payload) {
     const incoming = payload?.relayerIds;
     if (!Array.isArray(incoming)) {

package/dist/plugin/pool.d.ts

@@ -17,7 +17,7 @@ export declare class ChannelPool {
     private readonly channelLockTtlSec;
     private readonly mutexTtlSec;
     private readonly kv;
-    constructor(network: "testnet" | "mainnet", kv: PluginKVStore);
+    constructor(network: "testnet" | "mainnet", kv: PluginKVStore, lockTtlSeconds: number);
     /** Acquire a relayerId with a token lock */
     acquire(): Promise<PoolLock>;
     private withGlobalMutex;

package/dist/plugin/pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../src/plugin/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAe,MAAM,2BAA2B,CAAC;AAKvE,MAAM,MAAM,QAAQ,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5D,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;gBAEvB,OAAO,EAAE,SAAS,GAAG,SAAS,EAAE,EAAE,EAAE,aAAa;IAQ7D,4CAA4C;IACtC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;YAuBpB,eAAe;YASf,iBAAiB;IAwB/B,oCAAoC;IAC9B,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5C,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,OAAO;YAID,mBAAmB;CAWlC"}
+{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../../src/plugin/pool.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAe,MAAM,2BAA2B,CAAC;AAIvE,MAAM,MAAM,QAAQ,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5D,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;gBAGjC,OAAO,EAAE,SAAS,GAAG,SAAS,EAC9B,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM;IASxB,4CAA4C;IACtC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;YAuBpB,eAAe;YAQf,iBAAiB;IAwB/B,oCAAoC;IAC9B,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAY5C,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,OAAO;YAID,mBAAmB;CAWlC"}

package/dist/plugin/pool.js

@@ -14,14 +14,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChannelPool = void 0;
 const relayer_sdk_1 = require("@openzeppelin/relayer-sdk");
 const crypto_1 = __importDefault(require("crypto"));
-const config_1 = require("./config");
 const constants_1 = require("./constants");
 class ChannelPool {
-    constructor(network, kv) {
+    constructor(network, kv, lockTtlSeconds) {
         this.network = network;
         this.kv = kv;
         this.globalLockKey = `${this.network}:channel-pool-lock`;
-        this.channelLockTtlSec = (0, config_1.getLockTtlSeconds)();
+        this.channelLockTtlSec = lockTtlSeconds;
         this.mutexTtlSec = constants_1.POOL.MUTEX_TTL_SECONDS;
     }
     /** Acquire a relayerId with a token lock */
@@ -45,11 +44,10 @@ class ChannelPool {
     }
     // Run a function under the short-lived global mutex; returns null if busy
     async withGlobalMutex(fn) {
-        const r = (await this.kv.withLock(this.globalLockKey, fn, {
+        return this.kv.withLock(this.globalLockKey, fn, {
             ttlSec: this.mutexTtlSec,
             onBusy: "skip",
-        }));
-        return r;
+        });
     }
     // Inside the mutex: pick an available relayer and set its channel lock
     async tryLockAnyRelayer() {

package/dist/plugin/simulation.d.ts

@@ -12,4 +12,6 @@ export interface ChannelAccount {
     sequence: string;
 }
 export declare function simulateAndBuildWithChannel(func: xdr.HostFunction, auth: xdr.SorobanAuthorizationEntry[] | undefined, channel: ChannelAccount, _fundAddress: string, relayer: Relayer, networkPassphrase: string): Promise<Transaction>;
+/** Extract human-readable message + error type from simulation error diagnostic events */
+export declare function parseSimulationError(error: string): string;
 //# sourceMappingURL=simulation.d.ts.map

package/dist/plugin/simulation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"simulation.d.ts","sourceRoot":"","sources":["../../src/plugin/simulation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAIL,WAAW,EAEX,GAAG,EACJ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,OAAO,EACR,MAAM,2BAA2B,CAAC;AAGnC,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,GAAG,CAAC,YAAY,EACtB,IAAI,EAAE,GAAG,CAAC,yBAAyB,EAAE,GAAG,SAAS,EACjD,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,EAChB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC,CA8FtB"}
+{"version":3,"file":"simulation.d.ts","sourceRoot":"","sources":["../../src/plugin/simulation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAIL,WAAW,EAEX,GAAG,EACJ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,OAAO,EACR,MAAM,2BAA2B,CAAC;AAGnC,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,GAAG,CAAC,YAAY,EACtB,IAAI,EAAE,GAAG,CAAC,yBAAyB,EAAE,GAAG,SAAS,EACjD,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,EAChB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC,CAoGtB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D"}

package/dist/plugin/simulation.js

@@ -8,6 +8,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.simulateAndBuildWithChannel = simulateAndBuildWithChannel;
+exports.parseSimulationError = parseSimulationError;
 const stellar_sdk_1 = require("@stellar/stellar-sdk");
 const relayer_sdk_1 = require("@openzeppelin/relayer-sdk");
 const constants_1 = require("./constants");
@@ -51,23 +52,26 @@ async function simulateAndBuildWithChannel(func, auth, channel, _fundAddress, re
     }
     if (rpcResponse.error) {
         const { code, message, description, data } = rpcResponse.error;
-        throw (0, relayer_sdk_1.pluginError)("Simulation RPC execution failed", {
+        console.error(`[channels] RPC error: code=${code}, message=${message}, detail=${description || data}`);
+        throw (0, relayer_sdk_1.pluginError)("Simulation RPC failed", {
             code: "SIMULATION_RPC_FAILURE",
+            status: constants_1.HTTP_STATUS.BAD_GATEWAY,
+            details: { message: "RPC provider error" },
+        });
+    }
+    const simResult = {
+        id: String(rpcResponse.id ?? "1"),
+        ...rpcResponse.result,
+    };
+    if ("error" in simResult && simResult.error) {
+        console.error(`[channels] Simulation error: ${simResult.error}`);
+        throw (0, relayer_sdk_1.pluginError)("Simulation failed", {
+            code: "SIMULATION_FAILED",
             status: constants_1.HTTP_STATUS.BAD_REQUEST,
-            details: {
-                rpcCode: code,
-                message,
-                description: description || data,
-            },
+            details: { error: parseSimulationError(simResult.error) },
         });
     }
     try {
-        // Format simulation result for SDK's assembleTransaction
-        const simResult = {
-            id: String(rpcResponse.id ?? "1"),
-            ...rpcResponse.result,
-        };
-        console.debug(`[channels] Simulation result:`, JSON.stringify(simResult, null, 2));
         // Use SDK's assembleTransaction to apply simulation results
         const prepared = stellar_sdk_1.rpc
             .assembleTransaction(transaction, simResult)
@@ -83,7 +87,8 @@ async function simulateAndBuildWithChannel(func, auth, channel, _fundAddress, re
         return prepared;
     }
     catch (err) {
-        throw (0, relayer_sdk_1.pluginError)("Simulation result processing failed", {
+        console.error(`[channels] Assembly error: ${err instanceof Error ? err.message : String(err)}`);
+        throw (0, relayer_sdk_1.pluginError)("Simulation failed", {
             code: "SIMULATION_FAILED",
             status: constants_1.HTTP_STATUS.INTERNAL_SERVER_ERROR,
             details: {
@@ -92,3 +97,17 @@ async function simulateAndBuildWithChannel(func, auth, channel, _fundAddress, re
         });
     }
 }
+/** Extract human-readable message + error type from simulation error diagnostic events */
+function parseSimulationError(error) {
+    const firstLine = error.split("\n")[0]?.trim() || "Simulation failed";
+    const errorType = firstLine.match(/Error\(([^)]+)\)/)?.[1];
+    const arrayMatch = error.match(/data:\s*\["((?:[^"\\]|\\.)*)"/);
+    if (arrayMatch?.[1] && arrayMatch[1].length > 3) {
+        return errorType ? `${arrayMatch[1]} (${errorType})` : arrayMatch[1];
+    }
+    const stringMatch = error.match(/data:\s*"((?:[^"\\]|\\.)*)"/);
+    if (stringMatch?.[1] && stringMatch[1].length > 3) {
+        return errorType ? `${stringMatch[1]} (${errorType})` : stringMatch[1];
+    }
+    return firstLine;
+}

package/dist/plugin/submit.d.ts

@@ -6,6 +6,7 @@
 import { Transaction } from "@stellar/stellar-sdk";
 import { Relayer, PluginAPI } from "@openzeppelin/relayer-sdk";
 import { ChannelAccountsResponse } from "./types";
+import { FeeTracker } from "./fee-tracking";
 /**
  * Sign transaction with both channel and fund relayers
  * - First sign with channel account
@@ -16,5 +17,7 @@ export declare function signWithChannelAndFund(transaction: Transaction, channel
 /**
  * Submit transaction with fee bump and wait for confirmation
  */
-export declare function submitWithFeeBumpAndWait(fundRelayer: Relayer, signedXdr: string, network: "testnet" | "mainnet", maxFee: number, api: PluginAPI): Promise<ChannelAccountsResponse>;
+export declare function submitWithFeeBumpAndWait(fundRelayer: Relayer, signedXdr: string, network: "testnet" | "mainnet", maxFee: number, api: PluginAPI, tracker?: FeeTracker): Promise<ChannelAccountsResponse>;
+/** Strip provider wrapper text, extract last segment (e.g., "TxInsufficientBalance") */
+export declare function sanitizeReason(reason: string): string;
 //# sourceMappingURL=submit.d.ts.map

package/dist/plugin/submit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"submit.d.ts","sourceRoot":"","sources":["../../src/plugin/submit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAEL,OAAO,EAGP,SAAS,EACV,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,OAAO,EACvB,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC,CA2BtB;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}
+{"version":3,"file":"submit.d.ts","sourceRoot":"","sources":["../../src/plugin/submit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAEL,OAAO,EAGP,SAAS,EACV,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,OAAO,EACvB,YAAY,EAAE,OAAO,EACrB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,CAAC,CA2BtB;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,SAAS,EACd,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,uBAAuB,CAAC,CAoElC;AAgBD,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOrD"}

package/dist/plugin/submit.js

@@ -7,6 +7,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.signWithChannelAndFund = signWithChannelAndFund;
 exports.submitWithFeeBumpAndWait = submitWithFeeBumpAndWait;
+exports.sanitizeReason = sanitizeReason;
 const stellar_sdk_1 = require("@stellar/stellar-sdk");
 const relayer_sdk_1 = require("@openzeppelin/relayer-sdk");
 const constants_1 = require("./constants");
@@ -39,7 +40,7 @@ async function signWithChannelAndFund(transaction, channelRelayer, _fundRelayer,
 /**
  * Submit transaction with fee bump and wait for confirmation
  */
-async function submitWithFeeBumpAndWait(fundRelayer, signedXdr, network, maxFee, api) {
+async function submitWithFeeBumpAndWait(fundRelayer, signedXdr, network, maxFee, api, tracker) {
     // Submit with fee bump
     console.debug(`[channels] Sending fee bump tx: network=${network}, maxFee=${maxFee}, xdr_len=${signedXdr.length}`);
     const payload = {
@@ -58,17 +59,28 @@ async function submitWithFeeBumpAndWait(fundRelayer, signedXdr, network, maxFee,
         }));
         // Check if transaction actually succeeded
         if (final.status === "failed") {
-            throw (0, relayer_sdk_1.pluginError)(final.status_reason || "Transaction failed", {
+            // Record fee on on-chain failure (transaction was still submitted and consumed fees)
+            if (tracker) {
+                await tracker.recordUsage(maxFee);
+            }
+            const rawReason = final.status_reason || "Transaction failed";
+            console.error(`[channels] Transaction failed: ${rawReason}`);
+            const reason = sanitizeReason(rawReason);
+            throw (0, relayer_sdk_1.pluginError)(reason, {
                 code: "ONCHAIN_FAILED",
                 status: constants_1.HTTP_STATUS.BAD_REQUEST,
                 details: {
                     status: String(final.status),
-                    reason: final.status_reason ?? null,
+                    reason,
                     id: final.id,
                     hash: final.hash ?? null,
                 },
             });
         }
+        // Record fee on success
+        if (tracker) {
+            await tracker.recordUsage(maxFee);
+        }
         return {
             transactionId: final.id,
             status: final.status,
@@ -80,7 +92,7 @@ async function submitWithFeeBumpAndWait(fundRelayer, signedXdr, network, maxFee,
         if (error.code === "ONCHAIN_FAILED") {
             throw error;
         }
-        // Otherwise, it's a timeout
+        // Otherwise, it's a timeout - don't track fees (status unknown)
         throw (0, relayer_sdk_1.pluginError)("Transaction wait timeout. It may still submit.", {
             code: "WAIT_TIMEOUT",
             status: constants_1.HTTP_STATUS.GATEWAY_TIMEOUT,
@@ -100,3 +112,12 @@ function isSignTransactionResponseStellar(data) {
         "signature" in data &&
         "signedXdr" in data);
 }
+/** Strip provider wrapper text, extract last segment (e.g., "TxInsufficientBalance") */
+function sanitizeReason(reason) {
+    const segments = reason.split(/:\s*/);
+    const last = segments[segments.length - 1]?.trim();
+    if (last && last.length > 2 && !last.toLowerCase().includes("provider")) {
+        return last;
+    }
+    return reason.length > 100 ? reason.slice(0, 100) + "..." : reason;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/relayer-plugin-channels",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "OpenZeppelin Relayer Plugin for Stellar Channel Accounts",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,23 +19,23 @@
   "author": "OpenZeppelin <contact@openzeppelin.com>",
   "license": "MIT",
   "dependencies": {
-    "@openzeppelin/relayer-sdk": "^1.7.0",
-    "@stellar/stellar-sdk": "^14.3.3",
     "@actions/exec": "^1.1.1",
-    "axios": "^1.6.0"
+    "@openzeppelin/relayer-sdk": "^1.8.0",
+    "@stellar/stellar-sdk": "^14.4.0",
+    "axios": "^1.13.2"
   },
   "devDependencies": {
-    "@changesets/cli": "^2.27.7",
-    "@types/node": "^22.13.14",
-    "@typescript-eslint/eslint-plugin": "^8.38.0",
-    "@typescript-eslint/parser": "^8.38.0",
-    "eslint": "^9.22.0",
-    "eslint-config-prettier": "^9.0.0",
-    "eslint-plugin-prettier": "^5.0.0",
-    "prettier": "^3.0.0",
+    "@changesets/cli": "^2.29.8",
+    "@types/node": "^22.19.1",
+    "@typescript-eslint/eslint-plugin": "^8.48.1",
+    "@typescript-eslint/parser": "^8.48.1",
+    "eslint": "^9.39.1",
+    "eslint-config-prettier": "^9.1.2",
+    "eslint-plugin-prettier": "^5.5.4",
+    "prettier": "^3.7.4",
     "typescript": "5.8.3",
     "typescript-eslint": "8.27.0",
-    "vitest": "^4.0.4"
+    "vitest": "^4.0.15"
   },
   "engines": {
     "node": ">=22.18.0",