@parallel-protocol/x402 0.7.0 → 0.8.0

package/dist/{chunk-AENXD4OC.js → chunk-SA5ULSG2.js}

@@ -1,4 +1,4 @@
-import { X402_ERROR_CODES, X402RuntimeError, X402ConfigError, isPriceRejection } from './chunk-AFRDHGDT.js';
+import { X402_ERROR_CODES, X402RuntimeError, X402ConfigError, isPriceRejection } from './chunk-QAECRSWF.js';
 import { getTokenDecimals as getTokenDecimals$1 } from '@parallel-protocol/chains';
 import { z } from 'zod';
 
@@ -170,26 +170,32 @@ var facilitatorResponseSchema = z.discriminatedUnion("success", [
     chain: z.string(),
     gasSponsored: z.boolean(),
     networkId: z.string(),
-    amountSettled: z.string().optional()
+    amountSettled: z.string().optional(),
+    alreadySettled: z.boolean().optional()
   }),
   z.object({
     success: z.literal(false),
     error: z.object({
       code: z.string(),
       message: z.string(),
-      hint: z.string().optional()
+      hint: z.string().optional(),
+      status: z.number().optional(),
+      retryAfter: z.string().optional()
     })
   })
 ]);
 var verifyResponseSchema = z.object({
-  isValid: z.literal(true)
+  isValid: z.literal(true),
+  settleToken: z.string().min(1)
 });
 var settleSuccessSchema = z.object({
   txHash: txHashSchema,
   route: z.string(),
   gasSponsored: z.boolean(),
   // Metered routes: the amount actually charged (smallest unit).
-  amountSettled: z.string().optional()
+  amountSettled: z.string().optional(),
+  // The facilitator answered from a recorded outcome, nothing was broadcast.
+  alreadySettled: z.boolean().optional()
 });
 var settleErrorSchema = z.object({
   error: z.string(),
@@ -203,6 +209,20 @@ var settleResponseSchema = z.union([
 // src/client.ts
 var FACILITATOR_TIMEOUT_MS = 1e4;
 var SETTLE_TIMEOUT_MS = 6e4;
+var RETRY_AFTER_SHAPE = /^(?:\d{1,10}|[A-Z][a-z]{2}, \d{2} [A-Z][a-z]{2} \d{4} \d{2}:\d{2}:\d{2} GMT)$/;
+async function readErrorBody(response) {
+  const json = await response.json().catch(() => null);
+  if (typeof json !== "object" || json === null) return {};
+  const { error, message } = json;
+  return {
+    ...typeof error === "string" && { error },
+    ...typeof message === "string" && { message }
+  };
+}
+function retryAfterOf(response) {
+  const value = response.headers.get("retry-after");
+  return value !== null && RETRY_AFTER_SHAPE.test(value) ? value : void 0;
+}
 function decodePaymentHeader(paymentHeader) {
   try {
     return decodeBase64(paymentHeader);
@@ -226,9 +246,15 @@ var FacilitatorClient = class {
         signal: AbortSignal.timeout(FACILITATOR_TIMEOUT_MS)
       });
       if (!response.ok) {
-        const errorBody = await response.json().catch(() => null);
-        const code = errorBody?.error ?? X402_ERROR_CODES.FACILITATOR_UNAVAILABLE;
-        throw new X402RuntimeError(code);
+        const body = await readErrorBody(response);
+        throw new X402RuntimeError(
+          body.error ?? X402_ERROR_CODES.FACILITATOR_UNAVAILABLE,
+          {
+            detail: body.message,
+            status: response.status,
+            retryAfter: retryAfterOf(response)
+          }
+        );
       }
       json = await response.json();
     } catch (e) {
@@ -236,7 +262,8 @@ var FacilitatorClient = class {
       throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
     }
     try {
-      verifyResponseSchema.parse(json);
+      const { settleToken } = verifyResponseSchema.parse(json);
+      return { settleToken };
     } catch {
       throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_INVALID_RESPONSE);
     }
@@ -248,25 +275,42 @@ var FacilitatorClient = class {
       const response = await fetch(`${this.config.url}/x402/settle`, {
         method: "POST",
         headers: this.buildHeaders(),
-        // settleAmount only travels for metered routes — exact bodies are unchanged.
+        // settleAmount only travels for metered routes; the settle token
+        // travels whenever verify issued one.
         body: JSON.stringify({
           paymentPayload,
           paymentRequirements,
           ...options?.amount !== void 0 && {
             settleAmount: options.amount
+          },
+          ...options?.settleToken !== void 0 && {
+            settleToken: options.settleToken
           }
         }),
         signal: AbortSignal.timeout(SETTLE_TIMEOUT_MS)
       });
       if (!response.ok) {
-        const errorBody = await response.json().catch(() => null);
-        const code = errorBody?.error ?? "SUBMISSION_FAILED";
-        const message = errorBody?.message ?? "Settlement failed";
-        return { success: false, error: { code, message } };
+        const body = await readErrorBody(response);
+        if (body.error === void 0 && response.status >= 500) {
+          throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
+        }
+        const retryAfter = retryAfterOf(response);
+        return {
+          success: false,
+          error: {
+            code: body.error ?? "SUBMISSION_FAILED",
+            message: body.message ?? "Settlement failed",
+            status: response.status,
+            ...retryAfter !== void 0 && { retryAfter }
+          }
+        };
       }
       json = await response.json();
     } catch (e) {
       if (e instanceof X402RuntimeError) throw e;
+      if (e instanceof Error && e.name === "TimeoutError") {
+        throw new X402RuntimeError(X402_ERROR_CODES.SETTLE_TIMEOUT);
+      }
       throw new X402RuntimeError(X402_ERROR_CODES.FACILITATOR_UNAVAILABLE);
     }
     try {
@@ -281,7 +325,8 @@ var FacilitatorClient = class {
           networkId: toEip155Network(paymentRequirements.network),
           ...parsed.amountSettled !== void 0 && {
             amountSettled: parsed.amountSettled
-          }
+          },
+          ...parsed.alreadySettled && { alreadySettled: true }
         };
       }
       return {
@@ -379,10 +424,21 @@ async function resolvePrice(config, ctx) {
 }
 var SETTLE_AMOUNT_HEADER = "payment-settle-amount";
 var DEFAULT_MAX_TIMEOUT_SECONDS = 300;
+var SETTLEMENT_RESERVE_SECONDS = 120;
 function handlerTimeoutFor(config) {
   if ((config.scheme ?? "exact") !== "upto") return HANDLER_TIMEOUT_MS;
   const seconds = config.maxTimeoutSeconds ?? DEFAULT_MAX_TIMEOUT_SECONDS;
-  return Math.max(HANDLER_TIMEOUT_MS, (seconds - 60) * 1e3);
+  return Math.max(
+    HANDLER_TIMEOUT_MS,
+    (seconds - SETTLEMENT_RESERVE_SECONDS) * 1e3
+  );
+}
+function jsonResult(status, body, headers = {}) {
+  return {
+    status,
+    headers: { "Content-Type": "application/json", ...headers },
+    body
+  };
 }
 function resolveSettleAmount(raw, maxAmount, decimals) {
   if (raw === void 0)
@@ -410,7 +466,10 @@ var INVALID_METER_RESPONSE = {
   message: "The route's meter function failed or returned something that is not an amount; the response was discarded and nothing was charged."
 };
 function invalidSettleAmountResponse(reason) {
-  return reason === "meter" ? INVALID_METER_RESPONSE : INVALID_SETTLE_AMOUNT_RESPONSE;
+  return jsonResult(
+    402,
+    reason === "meter" ? INVALID_METER_RESPONSE : INVALID_SETTLE_AMOUNT_RESPONSE
+  );
 }
 var AMOUNT_FORMAT = /^\d+(?:\.\d+)?$/;
 async function resolveCharge(verified, settleHeader, response) {
@@ -558,23 +617,37 @@ function buildFacilitatorRequirements(config, asset, price) {
     }
   };
 }
-function paymentRequiredResponse(url, config, resolvedTokens, price, error) {
+var CODE_SHAPE = /^[A-Z][A-Z0-9_]{2,63}$/;
+var MESSAGE_MAX_LENGTH = 300;
+function shapedCode(code) {
+  return typeof code === "string" && CODE_SHAPE.test(code) ? code : void 0;
+}
+function boundedMessage(message) {
+  if (typeof message !== "string") return void 0;
+  const oneLine = message.replace(/[\p{Cc}\p{Cf}]+/gu, " ").replace(/\s+/g, " ").trim();
+  if (!oneLine) return void 0;
+  const chars = Array.from(oneLine);
+  return chars.length > MESSAGE_MAX_LENGTH ? `${chars.slice(0, MESSAGE_MAX_LENGTH).join("")}\u2026` : oneLine;
+}
+function paymentRequiredResponse(url, config, resolvedTokens, price, refusal) {
   const paymentRequired = buildPaymentRequired(
     url,
     config,
     resolvedTokens,
     price
   );
-  if (error) paymentRequired.error = error;
-  return {
-    status: 402,
-    headers: {
-      "Content-Type": "application/json",
-      "payment-required": encodeBase64(paymentRequired),
-      "access-control-expose-headers": "payment-required"
-    },
-    body: paymentRequired
-  };
+  if (refusal) {
+    paymentRequired.error = shapedCode(refusal.code) ?? X402_ERROR_CODES.FACILITATOR_INVALID_RESPONSE;
+    const message = boundedMessage(refusal.detail);
+    if (message) paymentRequired.message = message;
+  }
+  return jsonResult(402, paymentRequired, {
+    "payment-required": encodeBase64(paymentRequired),
+    "access-control-expose-headers": "payment-required",
+    ...refusal?.retryAfter !== void 0 && {
+      "Retry-After": refusal.retryAfter
+    }
+  });
 }
 function createPaymentGate(config) {
   try {
@@ -630,10 +703,11 @@ function createPaymentGate(config) {
       asset,
       price
     );
+    let settleToken;
     try {
-      await client.verify(paymentHeader, requirements);
+      ({ settleToken } = await client.verify(paymentHeader, requirements));
     } catch (e) {
-      const code = e instanceof X402RuntimeError ? e.code : X402_ERROR_CODES.FACILITATOR_UNAVAILABLE;
+      const refusal = e instanceof X402RuntimeError ? { code: e.code, detail: e.detail, retryAfter: e.retryAfter } : { code: X402_ERROR_CODES.FACILITATOR_UNAVAILABLE };
       return {
         type: "error",
         result: paymentRequiredResponse(
@@ -641,7 +715,7 @@ function createPaymentGate(config) {
           routeConfig,
           resolvedTokens,
           price,
-          code
+          refusal
         )
       };
     }
@@ -652,12 +726,71 @@ function createPaymentGate(config) {
       maxAmount: BigInt(requirements.maxAmountRequired),
       decimals: resolveDecimals(routeConfig, asset),
       handlerTimeoutMs: handlerTimeoutFor(routeConfig),
-      // Exact routes keep the historical two-argument client call.
-      settle: (options) => options ? client.settle(paymentHeader, requirements, options) : client.settle(paymentHeader, requirements),
+      settle: (options) => client.settle(paymentHeader, requirements, { ...options, settleToken }),
       ...routeConfig.meter && { meter: routeConfig.meter, request }
     };
   };
 }
+var UNKNOWN_SETTLEMENT_MESSAGE = "The payment could not be settled.";
+var MERCHANT_SETTLEMENT_MESSAGE = "The merchant could not complete the settlement of this payment. The payment was not taken: do not sign another payment for this request before checking with the merchant.";
+var AGENT_MESSAGES = {
+  [X402_ERROR_CODES.SETTLE_TIMEOUT]: "The facilitator did not confirm the settlement in time. The payment may still settle: do not sign another payment for this request before checking with the merchant.",
+  [X402_ERROR_CODES.FACILITATOR_UNAVAILABLE]: "The facilitator could not be reached to settle the payment. It may still have settled: do not sign another payment for this request before checking with the merchant.",
+  [X402_ERROR_CODES.FACILITATOR_INVALID_RESPONSE]: "The facilitator answered the settlement with an unexpected response. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
+  SETTLE_IN_PROGRESS: "The facilitator is still settling this payment. Do not sign another payment for this request before checking with the merchant.",
+  RECEIPT_UNAVAILABLE: "The facilitator sent the transaction but could not read its confirmation. The payment may have settled: do not sign another payment for this request before checking with the merchant.",
+  SETTLE_TOKEN_INVALID: MERCHANT_SETTLEMENT_MESSAGE,
+  SETTLE_TOKEN_REQUIRED: MERCHANT_SETTLEMENT_MESSAGE,
+  AMOUNT_MISMATCH: "The facilitator settled a different amount than this request asked for. The response was not served: do not sign another payment for this request before checking with the merchant.",
+  UNKNOWN: UNKNOWN_SETTLEMENT_MESSAGE
+};
+function settlementFailure(code, failure) {
+  const reason = shapedCode(code) ?? "UNKNOWN";
+  return {
+    settled: false,
+    reason,
+    message: AGENT_MESSAGES[reason] ?? boundedMessage(failure?.message) ?? UNKNOWN_SETTLEMENT_MESSAGE,
+    ...failure?.retryAfter !== void 0 && {
+      retryAfter: failure.retryAfter
+    }
+  };
+}
+var RETRY_ONCE_CODES = /* @__PURE__ */ new Set([
+  X402_ERROR_CODES.SETTLE_TIMEOUT,
+  X402_ERROR_CODES.FACILITATOR_UNAVAILABLE
+]);
+async function settleVerified(verified, options) {
+  let response;
+  for (let attempt = 0; response === void 0; attempt++) {
+    try {
+      response = await verified.settle(options);
+    } catch (e) {
+      const code = e instanceof X402RuntimeError ? e.code : "UNKNOWN";
+      if (attempt > 0 || !RETRY_ONCE_CODES.has(code)) {
+        return settlementFailure(code);
+      }
+    }
+  }
+  if (!response.success) {
+    return settlementFailure(response.error.code, response.error);
+  }
+  if (options?.amount !== void 0 && response.amountSettled !== options.amount) {
+    return settlementFailure("AMOUNT_MISMATCH");
+  }
+  return { settled: true, confirmation: response };
+}
+function settlementFailureResponse(failure) {
+  const body = {
+    error: "PAYMENT_SETTLEMENT_FAILED",
+    reason: failure.reason,
+    message: failure.message
+  };
+  return jsonResult(402, body, {
+    ...failure.retryAfter !== void 0 && {
+      "Retry-After": failure.retryAfter
+    }
+  });
+}
 function createPaymentMiddleware(config) {
   const gate = createPaymentGate(config);
   return async (adapter) => {
@@ -687,11 +820,7 @@ function createPaymentMiddleware(config) {
         });
         if (resolved.kind === "invalid") {
           handlerResult.discardResponse();
-          return {
-            status: 402,
-            headers: { "Content-Type": "application/json" },
-            body: invalidSettleAmountResponse(resolved.reason)
-          };
+          return invalidSettleAmountResponse(resolved.reason);
         }
         if (resolved.kind === "skip") {
           handlerResult.sendResponse();
@@ -699,37 +828,23 @@ function createPaymentMiddleware(config) {
         }
         settleOptions = { amount: resolved.amount };
       }
-      let settled = false;
-      try {
-        const settleResponse = settleOptions ? await gateResult.settle(settleOptions) : await gateResult.settle();
-        if (settleResponse.success) {
-          handlerResult.setResponseHeader(
-            "payment-response",
-            encodeBase64(settleResponse)
-          );
-          handlerResult.setResponseHeader(
-            "access-control-expose-headers",
-            "payment-response"
-          );
-          settled = true;
-        }
-      } catch {
-      }
-      if (!settled) {
+      const outcome = await settleVerified(gateResult, settleOptions);
+      if (!outcome.settled) {
         handlerResult.discardResponse();
-        return {
-          status: 402,
-          headers: { "Content-Type": "application/json" },
-          body: {
-            error: "PAYMENT_SETTLEMENT_FAILED",
-            message: "Payment could not be confirmed after multiple attempts. Please retry."
-          }
-        };
+        return settlementFailureResponse(outcome);
       }
+      handlerResult.setResponseHeader(
+        "payment-response",
+        encodeBase64(outcome.confirmation)
+      );
+      handlerResult.setResponseHeader(
+        "access-control-expose-headers",
+        "payment-response"
+      );
     }
     handlerResult.sendResponse();
     return { pass: true, handlerRan: true };
   };
 }
 
-export { FacilitatorClient, HANDLER_TIMEOUT, PARALLEL_TOKENS, SETTLE_AMOUNT_HEADER, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, invalidSettleAmountResponse, isJsonContentType, jsonFromResponse, matchRoute, parseJsonBody, parsePrice, raceTimeout, resolveCharge, resolveSettleAmount, toEip155Network, validateAddress };
+export { FacilitatorClient, HANDLER_TIMEOUT, PARALLEL_TOKENS, SETTLE_AMOUNT_HEADER, createPaymentGate, createPaymentMiddleware, encodeBase64, getDefaultAcceptedTokens, invalidSettleAmountResponse, isJsonContentType, jsonFromResponse, matchRoute, parseJsonBody, parsePrice, raceTimeout, resolveCharge, resolveSettleAmount, settleVerified, settlementFailureResponse, toEip155Network, validateAddress };

package/dist/express.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkPOU7EH3E_cjs = require('./chunk-POU7EH3E.cjs');
-require('./chunk-JPMK5YBU.cjs');
+var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+require('./chunk-KZZY5LS6.cjs');
 
 // src/express/adapter.ts
 function chunkBytes(args) {
@@ -108,8 +108,8 @@ var ExpressAdapter = class {
       return originalEnd(...args);
     });
     next();
-    const outcome = await chunkPOU7EH3E_cjs.raceTimeout(endPromise, options?.timeoutMs);
-    if (outcome === chunkPOU7EH3E_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkNA7245L5_cjs.raceTimeout(endPromise, options?.timeoutMs);
+    if (outcome === chunkNA7245L5_cjs.HANDLER_TIMEOUT) {
       discarded = true;
       return {
         status: 504,
@@ -146,7 +146,7 @@ var ExpressAdapter = class {
           const chunk = chunkBytes(args);
           if (chunk) bytes.push(chunk);
         }
-        return chunkPOU7EH3E_cjs.parseJsonBody(
+        return chunkNA7245L5_cjs.parseJsonBody(
           contentType,
           Buffer.concat(bytes).toString("utf8")
         );
@@ -170,7 +170,7 @@ var ExpressAdapter = class {
 
 // src/express/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkPOU7EH3E_cjs.createPaymentMiddleware(config);
+  const middleware = chunkNA7245L5_cjs.createPaymentMiddleware(config);
   return async (req, res, next) => {
     const result = await middleware(new ExpressAdapter(req, res, next));
     if ("pass" in result) {

package/dist/express.d.cts

@@ -1,5 +1,5 @@
 import { Request, Response, NextFunction } from 'express';
-import { H as HTTPAdapter, R as RunHandlerOptions, a as RunHandlerResult, P as PaymentMiddlewareConfig } from './types-q_gu5wjz.cjs';
+import { H as HTTPAdapter, R as RunHandlerOptions, a as RunHandlerResult, P as PaymentMiddlewareConfig } from './types-BkGQ2lPA.cjs';
 import 'viem';
 
 declare class ExpressAdapter implements HTTPAdapter {

package/dist/express.d.ts

@@ -1,5 +1,5 @@
 import { Request, Response, NextFunction } from 'express';
-import { H as HTTPAdapter, R as RunHandlerOptions, a as RunHandlerResult, P as PaymentMiddlewareConfig } from './types-q_gu5wjz.js';
+import { H as HTTPAdapter, R as RunHandlerOptions, a as RunHandlerResult, P as PaymentMiddlewareConfig } from './types-BkGQ2lPA.js';
 import 'viem';
 
 declare class ExpressAdapter implements HTTPAdapter {

package/dist/express.js

@@ -1,5 +1,5 @@
-import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-AENXD4OC.js';
-import './chunk-AFRDHGDT.js';
+import { raceTimeout, HANDLER_TIMEOUT, parseJsonBody, createPaymentMiddleware } from './chunk-SA5ULSG2.js';
+import './chunk-QAECRSWF.js';
 
 // src/express/adapter.ts
 function chunkBytes(args) {

package/dist/fastify.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkPOU7EH3E_cjs = require('./chunk-POU7EH3E.cjs');
-require('./chunk-JPMK5YBU.cjs');
+var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+require('./chunk-KZZY5LS6.cjs');
 var fp = require('fastify-plugin');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
@@ -37,12 +37,14 @@ var FastifyAdapter = class {
 // src/fastify/index.ts
 function payloadJson(contentType, payload) {
   const text = typeof payload === "string" ? payload : payload instanceof Uint8Array ? Buffer.from(payload).toString("utf8") : void 0;
-  return chunkPOU7EH3E_cjs.parseJsonBody(contentType, text);
+  return chunkNA7245L5_cjs.parseJsonBody(contentType, text);
 }
-function refuse(reply, body) {
-  const json = JSON.stringify(body);
-  reply.status(402);
-  reply.header("Content-Type", "application/json");
+function refuse(reply, result) {
+  const json = JSON.stringify(result.body);
+  reply.status(result.status);
+  for (const [name, value] of Object.entries(result.headers)) {
+    reply.header(name, value);
+  }
   reply.header("Content-Length", Buffer.byteLength(json));
   return json;
 }
@@ -52,11 +54,11 @@ function headerValue(value) {
 }
 function paymentMiddleware(config) {
   return fp__default.default(async (fastify) => {
-    const gate = chunkPOU7EH3E_cjs.createPaymentGate(config);
+    const gate = chunkNA7245L5_cjs.createPaymentGate(config);
     const verifiedMap = /* @__PURE__ */ new WeakMap();
     const rawWriters = /* @__PURE__ */ new WeakMap();
     const needsBody = (req) => {
-      const route = chunkPOU7EH3E_cjs.matchRoute(
+      const route = chunkNA7245L5_cjs.matchRoute(
         new FastifyAdapter(req).getPath(),
         config.routes
       );
@@ -109,41 +111,30 @@ function paymentMiddleware(config) {
       if (!verified) return payload;
       let raw;
       if (verified.scheme === "upto") {
-        raw = headerValue(reply.getHeader(chunkPOU7EH3E_cjs.SETTLE_AMOUNT_HEADER));
-        reply.removeHeader(chunkPOU7EH3E_cjs.SETTLE_AMOUNT_HEADER);
+        raw = headerValue(reply.getHeader(chunkNA7245L5_cjs.SETTLE_AMOUNT_HEADER));
+        reply.removeHeader(chunkNA7245L5_cjs.SETTLE_AMOUNT_HEADER);
       }
       if (reply.statusCode < 200 || reply.statusCode >= 300) {
         return payload;
       }
       let settleOptions;
       if (verified.scheme === "upto") {
-        const resolved = await chunkPOU7EH3E_cjs.resolveCharge(verified, raw, {
+        const resolved = await chunkNA7245L5_cjs.resolveCharge(verified, raw, {
           status: reply.statusCode,
           header: (name) => headerValue(reply.getHeader(name)),
           body: async () => payloadJson(headerValue(reply.getHeader("content-type")), payload)
         });
         if (resolved.kind === "invalid") {
-          return refuse(reply, chunkPOU7EH3E_cjs.invalidSettleAmountResponse(resolved.reason));
+          return refuse(reply, chunkNA7245L5_cjs.invalidSettleAmountResponse(resolved.reason));
         }
         if (resolved.kind === "skip") return payload;
         settleOptions = { amount: resolved.amount };
       }
-      let settled = false;
-      try {
-        const settleResponse = settleOptions ? await verified.settle(settleOptions) : await verified.settle();
-        if (settleResponse.success) {
-          reply.header("payment-response", chunkPOU7EH3E_cjs.encodeBase64(settleResponse));
-          reply.header("access-control-expose-headers", "payment-response");
-          settled = true;
-        }
-      } catch {
-      }
-      if (!settled) {
-        return refuse(reply, {
-          error: "PAYMENT_SETTLEMENT_FAILED",
-          message: "Payment could not be confirmed after multiple attempts. Please retry."
-        });
-      }
+      const outcome = await chunkNA7245L5_cjs.settleVerified(verified, settleOptions);
+      if (!outcome.settled)
+        return refuse(reply, chunkNA7245L5_cjs.settlementFailureResponse(outcome));
+      reply.header("payment-response", chunkNA7245L5_cjs.encodeBase64(outcome.confirmation));
+      reply.header("access-control-expose-headers", "payment-response");
       return payload;
     });
   });

package/dist/fastify.d.cts

@@ -1,5 +1,5 @@
 import { FastifyRequest, FastifyPluginAsync } from 'fastify';
-import { H as HTTPAdapter, P as PaymentMiddlewareConfig } from './types-q_gu5wjz.cjs';
+import { H as HTTPAdapter, P as PaymentMiddlewareConfig } from './types-BkGQ2lPA.cjs';
 import 'viem';
 
 declare class FastifyAdapter implements HTTPAdapter {

package/dist/fastify.d.ts

@@ -1,5 +1,5 @@
 import { FastifyRequest, FastifyPluginAsync } from 'fastify';
-import { H as HTTPAdapter, P as PaymentMiddlewareConfig } from './types-q_gu5wjz.js';
+import { H as HTTPAdapter, P as PaymentMiddlewareConfig } from './types-BkGQ2lPA.js';
 import 'viem';
 
 declare class FastifyAdapter implements HTTPAdapter {

package/dist/fastify.js

@@ -1,5 +1,5 @@
-import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-AENXD4OC.js';
-import './chunk-AFRDHGDT.js';
+import { createPaymentGate, SETTLE_AMOUNT_HEADER, resolveCharge, invalidSettleAmountResponse, settleVerified, settlementFailureResponse, encodeBase64, matchRoute, parseJsonBody } from './chunk-SA5ULSG2.js';
+import './chunk-QAECRSWF.js';
 import fp from 'fastify-plugin';
 
 // src/fastify/adapter.ts
@@ -33,10 +33,12 @@ function payloadJson(contentType, payload) {
   const text = typeof payload === "string" ? payload : payload instanceof Uint8Array ? Buffer.from(payload).toString("utf8") : void 0;
   return parseJsonBody(contentType, text);
 }
-function refuse(reply, body) {
-  const json = JSON.stringify(body);
-  reply.status(402);
-  reply.header("Content-Type", "application/json");
+function refuse(reply, result) {
+  const json = JSON.stringify(result.body);
+  reply.status(result.status);
+  for (const [name, value] of Object.entries(result.headers)) {
+    reply.header(name, value);
+  }
   reply.header("Content-Length", Buffer.byteLength(json));
   return json;
 }
@@ -122,22 +124,11 @@ function paymentMiddleware(config) {
         if (resolved.kind === "skip") return payload;
         settleOptions = { amount: resolved.amount };
       }
-      let settled = false;
-      try {
-        const settleResponse = settleOptions ? await verified.settle(settleOptions) : await verified.settle();
-        if (settleResponse.success) {
-          reply.header("payment-response", encodeBase64(settleResponse));
-          reply.header("access-control-expose-headers", "payment-response");
-          settled = true;
-        }
-      } catch {
-      }
-      if (!settled) {
-        return refuse(reply, {
-          error: "PAYMENT_SETTLEMENT_FAILED",
-          message: "Payment could not be confirmed after multiple attempts. Please retry."
-        });
-      }
+      const outcome = await settleVerified(verified, settleOptions);
+      if (!outcome.settled)
+        return refuse(reply, settlementFailureResponse(outcome));
+      reply.header("payment-response", encodeBase64(outcome.confirmation));
+      reply.header("access-control-expose-headers", "payment-response");
       return payload;
     });
   });

package/dist/hono.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkPOU7EH3E_cjs = require('./chunk-POU7EH3E.cjs');
-require('./chunk-JPMK5YBU.cjs');
+var chunkNA7245L5_cjs = require('./chunk-NA7245L5.cjs');
+require('./chunk-KZZY5LS6.cjs');
 
 // src/hono/adapter.ts
 var TIMEOUT_BODY = JSON.stringify({
@@ -30,7 +30,7 @@ var HonoAdapter = class {
   // Hono caches the parsed body on the request, so the handler can still read
   // it after the price function did.
   async getBody() {
-    if (!chunkPOU7EH3E_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
+    if (!chunkNA7245L5_cjs.isJsonContentType(this.c.req.header("content-type"))) return void 0;
     try {
       return await this.c.req.json();
     } catch {
@@ -38,8 +38,8 @@ var HonoAdapter = class {
     }
   }
   async runHandler(options) {
-    const outcome = await chunkPOU7EH3E_cjs.raceTimeout(this.next(), options?.timeoutMs);
-    if (outcome === chunkPOU7EH3E_cjs.HANDLER_TIMEOUT) {
+    const outcome = await chunkNA7245L5_cjs.raceTimeout(this.next(), options?.timeoutMs);
+    if (outcome === chunkNA7245L5_cjs.HANDLER_TIMEOUT) {
       return {
         status: 504,
         setResponseHeader: () => {
@@ -64,7 +64,7 @@ var HonoAdapter = class {
       getResponseHeader: (name) => res.headers.get(name) ?? void 0,
       removeResponseHeader: (name) => res.headers.delete(name),
       // Read from a clone: the response body streams once, to the client.
-      getResponseBody: () => chunkPOU7EH3E_cjs.jsonFromResponse(res),
+      getResponseBody: () => chunkNA7245L5_cjs.jsonFromResponse(res),
       sendResponse: () => {
       },
       // The response is replaced: release its body (and whatever upstream
@@ -79,7 +79,7 @@ var HonoAdapter = class {
 
 // src/hono/index.ts
 function paymentMiddleware(config) {
-  const middleware = chunkPOU7EH3E_cjs.createPaymentMiddleware(config);
+  const middleware = chunkNA7245L5_cjs.createPaymentMiddleware(config);
   return async (c, next) => {
     const result = await middleware(new HonoAdapter(c, next));
     if ("pass" in result) {