@piprail/sdk 1.0.0 → 1.1.1

package/dist/chunk-NK64H3RM.cjs

@@ -0,0 +1,173 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7; var _class8; var _class9; var _class10; var _class11; var _class12; var _class13; var _class14;// src/errors.ts
+var PipRailError = class extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = this.constructor.name;
+  }
+};
+var InsufficientFundsError = (_class = class extends PipRailError {constructor(...args) { super(...args); _class.prototype.__init.call(this); }
+  __init() {this.code = "INSUFFICIENT_FUNDS"}
+}, _class);
+var RecipientNotReadyError = (_class2 = class extends PipRailError {constructor(...args2) { super(...args2); _class2.prototype.__init2.call(this); }
+  __init2() {this.code = "RECIPIENT_NOT_READY"}
+}, _class2);
+function toInsufficientFundsError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  if (/insufficient (funds|balance|lamports|fee)|not enough|exceeds (the )?balance|underfunded|low[_ ]?reserve|debit the account/i.test(
+    message
+  )) {
+    return new InsufficientFundsError(
+      err instanceof Error ? err.message : "Insufficient funds for the payment.",
+      { cause: err }
+    );
+  }
+  return null;
+}
+var WrongChainError = (_class3 = class extends PipRailError {constructor(...args3) { super(...args3); _class3.prototype.__init3.call(this); }
+  __init3() {this.code = "WRONG_CHAIN"}
+}, _class3);
+var PaymentTimeoutError = (_class4 = class extends PipRailError {
+  __init4() {this.code = "PAYMENT_TIMEOUT"}
+  /** The already-broadcast proof ref — recover with it, don't re-pay. */
+  
+  constructor(message, options) {
+    super(message, options);_class4.prototype.__init4.call(this);;
+    this.ref = _optionalChain([options, 'optionalAccess', _ => _.ref]);
+  }
+}, _class4);
+var MaxRetriesExceededError = (_class5 = class extends PipRailError {
+  __init5() {this.code = "MAX_RETRIES_EXCEEDED"}
+  /** The already-broadcast proof ref — recover with it, don't re-pay. */
+  
+  constructor(message, options) {
+    super(message, options);_class5.prototype.__init5.call(this);;
+    this.ref = _optionalChain([options, 'optionalAccess', _2 => _2.ref]);
+  }
+}, _class5);
+var PaymentDeclinedError = (_class6 = class extends PipRailError {constructor(...args4) { super(...args4); _class6.prototype.__init6.call(this); }
+  __init6() {this.code = "PAYMENT_DECLINED"}
+}, _class6);
+var ConfirmationTimeoutError = (_class7 = class extends PipRailError {constructor(...args5) { super(...args5); _class7.prototype.__init7.call(this); }
+  __init7() {this.code = "CONFIRMATION_TIMEOUT"}
+}, _class7);
+var InvalidEnvelopeError = (_class8 = class extends PipRailError {constructor(...args6) { super(...args6); _class8.prototype.__init8.call(this); }
+  __init8() {this.code = "INVALID_ENVELOPE"}
+}, _class8);
+var NoCompatibleAcceptError = (_class9 = class extends PipRailError {constructor(...args7) { super(...args7); _class9.prototype.__init9.call(this); }
+  __init9() {this.code = "NO_COMPATIBLE_ACCEPT"}
+}, _class9);
+var NonReplayableBodyError = (_class10 = class extends PipRailError {constructor(...args8) { super(...args8); _class10.prototype.__init10.call(this); }
+  __init10() {this.code = "NON_REPLAYABLE_BODY"}
+}, _class10);
+var WrongFamilyError = (_class11 = class extends PipRailError {constructor(...args9) { super(...args9); _class11.prototype.__init11.call(this); }
+  __init11() {this.code = "WRONG_FAMILY"}
+}, _class11);
+var UnknownTokenError = (_class12 = class extends PipRailError {constructor(...args10) { super(...args10); _class12.prototype.__init12.call(this); }
+  __init12() {this.code = "UNKNOWN_TOKEN"}
+}, _class12);
+var MissingDriverError = (_class13 = class extends PipRailError {constructor(...args11) { super(...args11); _class13.prototype.__init13.call(this); }
+  __init13() {this.code = "MISSING_DRIVER"}
+}, _class13);
+var UnsupportedNetworkError = (_class14 = class extends PipRailError {constructor(...args12) { super(...args12); _class14.prototype.__init14.call(this); }
+  __init14() {this.code = "UNSUPPORTED_NETWORK"}
+}, _class14);
+
+// src/drivers/shared.ts
+var FAMILY_LABEL = {
+  evm: "EVM",
+  solana: "Solana",
+  ton: "TON",
+  stellar: "Stellar",
+  xrpl: "XRPL",
+  tron: "Tron",
+  sui: "Sui",
+  near: "NEAR"
+};
+var FAMILY_TOKEN = {
+  evm: { key: "address", shape: "{ address }", hint: "{ address, decimals }" },
+  solana: { key: "mint", shape: "{ mint }", hint: "{ mint, decimals }" },
+  ton: { key: "master", shape: "{ master }", hint: "{ master, decimals }" },
+  stellar: { key: "code", shape: "{ issuer, code }", hint: "{ issuer, code, decimals }" },
+  xrpl: { key: "currencyHex", shape: "{ issuer, currencyHex }", hint: "{ issuer, currencyHex, decimals }" },
+  tron: { key: "address", shape: "{ address }", hint: "{ address, decimals }" },
+  sui: { key: "coinType", shape: "{ coinType }", hint: "{ coinType, decimals }" },
+  near: { key: "contractId", shape: "{ contractId }", hint: "{ contractId, decimals }" }
+};
+function rejectForeignToken(token, family, network) {
+  const own = FAMILY_TOKEN[family];
+  for (const fam of Object.keys(FAMILY_TOKEN)) {
+    if (fam === family) continue;
+    if (FAMILY_TOKEN[fam].key === own.key) continue;
+    if (FAMILY_TOKEN[fam].key in token) {
+      throw new WrongFamilyError(
+        `chain ${network} is ${FAMILY_LABEL[family]}; a ${FAMILY_LABEL[fam]} ${FAMILY_TOKEN[fam].shape} token can't be used \u2014 pass ${own.hint}.`
+      );
+    }
+  }
+}
+
+// src/util/units.ts
+function parseUnits(value, decimals) {
+  if (!/^\d+(\.\d+)?$/.test(value)) {
+    throw new Error(`parseUnits: "${value}" is not a non-negative decimal amount.`);
+  }
+  const [whole, frac = ""] = value.split(".");
+  if (frac.length > decimals) {
+    throw new Error(
+      `parseUnits: "${value}" has more than ${decimals} decimal places.`
+    );
+  }
+  const fracPadded = frac.padEnd(decimals, "0");
+  return BigInt(whole + fracPadded);
+}
+function floorUnits(value, decimals) {
+  if (!/^\d+(\.\d+)?$/.test(value)) {
+    throw new Error(`floorUnits: "${value}" is not a non-negative decimal amount.`);
+  }
+  const [whole, frac = ""] = value.split(".");
+  const fracTrunc = frac.slice(0, decimals).padEnd(decimals, "0");
+  return BigInt(whole + fracTrunc);
+}
+function formatUnits(value, decimals) {
+  const negative = value < 0n;
+  const digits = (negative ? -value : value).toString().padStart(decimals + 1, "0");
+  const whole = digits.slice(0, digits.length - decimals);
+  const frac = digits.slice(digits.length - decimals).replace(/0+$/, "");
+  return `${negative ? "-" : ""}${whole}${frac ? `.${frac}` : ""}`;
+}
+
+// src/util/cost.ts
+function nativeCost(opts) {
+  return {
+    feeSymbol: opts.symbol,
+    feeDecimals: opts.decimals,
+    fee: opts.fee.toString(),
+    feeFormatted: formatUnits(opts.fee, opts.decimals),
+    basis: opts.basis,
+    ...opts.detail ? { detail: opts.detail } : {}
+  };
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.PipRailError = PipRailError; exports.InsufficientFundsError = InsufficientFundsError; exports.RecipientNotReadyError = RecipientNotReadyError; exports.toInsufficientFundsError = toInsufficientFundsError; exports.WrongChainError = WrongChainError; exports.PaymentTimeoutError = PaymentTimeoutError; exports.MaxRetriesExceededError = MaxRetriesExceededError; exports.PaymentDeclinedError = PaymentDeclinedError; exports.ConfirmationTimeoutError = ConfirmationTimeoutError; exports.InvalidEnvelopeError = InvalidEnvelopeError; exports.NoCompatibleAcceptError = NoCompatibleAcceptError; exports.NonReplayableBodyError = NonReplayableBodyError; exports.WrongFamilyError = WrongFamilyError; exports.UnknownTokenError = UnknownTokenError; exports.MissingDriverError = MissingDriverError; exports.UnsupportedNetworkError = UnsupportedNetworkError; exports.rejectForeignToken = rejectForeignToken; exports.parseUnits = parseUnits; exports.floorUnits = floorUnits; exports.formatUnits = formatUnits; exports.nativeCost = nativeCost;

package/dist/index.cjs

@@ -19,7 +19,8 @@
 
 
 
-var _chunkWQWNPAYQcjs = require('./chunk-WQWNPAYQ.cjs');
+
+var _chunkNK64H3RMcjs = require('./chunk-NK64H3RM.cjs');
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -46,13 +47,13 @@ function resolveNetwork(opts) {
   const family = familyForChain(opts.chain);
   const driver = byFamily.get(family);
   if (!driver) {
-    throw new (0, _chunkWQWNPAYQcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkNK64H3RMcjs.UnsupportedNetworkError)(
       `No driver registered for the "${family}" family \u2014 it may not be mounted yet (use the async resolveNetwork()).`
     );
   }
   const net = driver.resolve(opts);
   if (!net) {
-    throw new (0, _chunkWQWNPAYQcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkNK64H3RMcjs.UnsupportedNetworkError)(
       `The ${family} driver didn't recognise this chain input.`
     );
   }
@@ -272,12 +273,12 @@ function createWalletAdapter(config, resolved) {
   }
   const wc = config.walletClient;
   if (!wc.account) {
-    throw new (0, _chunkWQWNPAYQcjs.WrongFamilyError)(
+    throw new (0, _chunkNK64H3RMcjs.WrongFamilyError)(
       "chain is EVM; the provided walletClient has no attached account. Use `createWalletClient({ account, chain, transport })`, or pass { privateKey }."
     );
   }
   if (wc.chain && wc.chain.id !== resolved.chainId) {
-    throw new (0, _chunkWQWNPAYQcjs.WrongChainError)(
+    throw new (0, _chunkNK64H3RMcjs.WrongChainError)(
       `PipRailClient: walletClient is on chain ${wc.chain.id} but the SDK was configured with chain ${resolved.chainId}. They must match.`
     );
   }
@@ -580,15 +581,15 @@ function makeEvmNetwork(resolved) {
         const info = resolved.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(resolved.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkWQWNPAYQcjs.UnknownTokenError)(
+          throw new (0, _chunkNK64H3RMcjs.UnknownTokenError)(
             `token "${token}" isn't built in for ${resolved.chain.name} (known: ${known}). Pass { address, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.address, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkWQWNPAYQcjs.rejectForeignToken.call(void 0, token, "evm", network);
+      _chunkNK64H3RMcjs.rejectForeignToken.call(void 0, token, "evm", network);
       if (!("address" in token)) {
-        throw new (0, _chunkWQWNPAYQcjs.WrongFamilyError)(
+        throw new (0, _chunkNK64H3RMcjs.WrongFamilyError)(
           `chain ${network} is EVM; a custom token must be { address, decimals }.`
         );
       }
@@ -620,14 +621,14 @@ function makeEvmNetwork(resolved) {
     },
     assertValidPayTo(payTo) {
       if (!_viem.isAddress.call(void 0, payTo)) {
-        throw new (0, _chunkWQWNPAYQcjs.WrongFamilyError)(
+        throw new (0, _chunkNK64H3RMcjs.WrongFamilyError)(
           `chain ${network} is EVM, but payTo "${payTo}" is not a valid 0x address.`
         );
       }
     },
     bindWallet(wallet) {
       if (typeof wallet !== "object" || wallet === null || !("privateKey" in wallet) && !("walletClient" in wallet)) {
-        throw new (0, _chunkWQWNPAYQcjs.WrongFamilyError)(
+        throw new (0, _chunkNK64H3RMcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { privateKey } or { walletClient }.`
         );
       }
@@ -644,12 +645,12 @@ function makeEvmNetwork(resolved) {
         });
       } catch (err) {
         if (isViemInsufficientFunds(err)) {
-          throw new (0, _chunkWQWNPAYQcjs.InsufficientFundsError)(
+          throw new (0, _chunkNK64H3RMcjs.InsufficientFundsError)(
             err instanceof Error ? err.message : "Insufficient funds for payment.",
             { cause: err }
           );
         }
-        throw _nullishCoalesce(_chunkWQWNPAYQcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkNK64H3RMcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref, minConfirmations) {
@@ -660,7 +661,7 @@ function makeEvmNetwork(resolved) {
         });
         return { height: receipt.blockNumber.toString() };
       } catch (err) {
-        throw new (0, _chunkWQWNPAYQcjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkNK64H3RMcjs.ConfirmationTimeoutError)(
           `EVM tx ${ref} did not reach ${minConfirmations} confirmation(s) in time.`,
           { cause: err }
         );
@@ -671,7 +672,7 @@ function makeEvmNetwork(resolved) {
       const gasLimit = accept.asset === "native" ? 21000n : 65000n;
       try {
         const gasPrice = await publicClient.getGasPrice();
-        return _chunkWQWNPAYQcjs.nativeCost.call(void 0, {
+        return _chunkNK64H3RMcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -680,7 +681,7 @@ function makeEvmNetwork(resolved) {
         });
       } catch (e10) {
         const gasPrice = 5000000000n;
-        return _chunkWQWNPAYQcjs.nativeCost.call(void 0, {
+        return _chunkNK64H3RMcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -712,9 +713,9 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-F7H4YDW5.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-CRLWAM7C.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
         { cause }
       );
@@ -724,9 +725,9 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-E5RLUPD2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-OVSQZ4OM.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
         { cause }
       );
@@ -736,9 +737,9 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-BPPQTLNI.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-LIGJKRRK.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
         { cause }
       );
@@ -748,9 +749,9 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-6NRFT5CA.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-QECPQCFS.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
         { cause }
       );
@@ -760,9 +761,9 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-3UDH7KGF.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-V3A6L3X3.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
         { cause }
       );
@@ -772,9 +773,9 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-XV4YYSGV.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-JLVWFDOS.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
         { cause }
       );
@@ -784,9 +785,9 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-4P5XNMMB.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-VZ6XGVNJ.cjs")));
     } catch (cause) {
-      throw new (0, _chunkWQWNPAYQcjs.MissingDriverError)(
+      throw new (0, _chunkNK64H3RMcjs.MissingDriverError)(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
         { cause }
       );
@@ -858,7 +859,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase) {
     }
   }
   if (policy.maxAmount !== void 0) {
-    const cap = _chunkWQWNPAYQcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
+    const cap = _chunkNK64H3RMcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
     if (intent.amountBase > cap) {
       return deny(
         `payment of ${intent.amountBase} base units exceeds policy.maxAmount ` + `(${policy.maxAmount} ${_nullishCoalesce(intent.symbol, () => ( ""))}).`.trimEnd()
@@ -866,7 +867,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase) {
     }
   }
   if (policy.maxTotal !== void 0) {
-    const cap = _chunkWQWNPAYQcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
+    const cap = _chunkNK64H3RMcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
     if (spentForAssetBase + intent.amountBase > cap) {
       return deny(
         `this payment would push spend on ${_nullishCoalesce(intent.symbol, () => ( intent.asset))} past policy.maxTotal (${policy.maxTotal}); already spent ${spentForAssetBase} base units.`
@@ -916,7 +917,7 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
         symbol: b.symbol,
         decimals: b.decimals,
         totalBase: b.total.toString(),
-        totalFormatted: _chunkWQWNPAYQcjs.formatUnits.call(void 0, b.total, b.decimals),
+        totalFormatted: _chunkNK64H3RMcjs.formatUnits.call(void 0, b.total, b.decimals),
         count: b.count
       })),
       records: [...this.records]
@@ -1043,7 +1044,7 @@ var PipRailClient = (_class2 = class {
   async fetch(url, init) {
     const body = _optionalChain([init, 'optionalAccess', _9 => _9.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
-      throw new (0, _chunkWQWNPAYQcjs.NonReplayableBodyError)(
+      throw new (0, _chunkNK64H3RMcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
       );
     }
@@ -1055,8 +1056,8 @@ var PipRailClient = (_class2 = class {
     );
     this.safeEmit({ kind: "payment-required", challenge, accept });
     await this.authorize(quote);
-    const ref = await this.payAndConfirm(net, wallet, accept);
-    const response = await this.retryWithProof(url, init, accept, ref);
+    const { ref, confirmed } = await this.payAndConfirm(net, wallet, accept);
+    const response = await this.retryWithProof(url, init, accept, ref, confirmed);
     this.recordSpend(quote, ref);
     return response;
   }
@@ -1069,7 +1070,7 @@ var PipRailClient = (_class2 = class {
   async resolveChallenge(url, response) {
     const challenge = await parseChallenge(response);
     if (!challenge) {
-      throw new (0, _chunkWQWNPAYQcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkNK64H3RMcjs.InvalidEnvelopeError)(
         "402 response did not include a parseable x402 challenge."
       );
     }
@@ -1079,7 +1080,7 @@ var PipRailClient = (_class2 = class {
     );
     if (candidates.length === 0) {
       const networks = challenge.accepts.map((a) => a.network).join(", ");
-      throw new (0, _chunkWQWNPAYQcjs.NoCompatibleAcceptError)(
+      throw new (0, _chunkNK64H3RMcjs.NoCompatibleAcceptError)(
         `No accepts[] entry for ${net.network} (challenge offered: ${networks || "none"}).`
       );
     }
@@ -1094,7 +1095,7 @@ var PipRailClient = (_class2 = class {
    *  driver's describeAsset) + the policy verdict + a symbol-mismatch flag. */
   buildQuote(net, accept, url, description) {
     if (!/^\d+$/.test(accept.amount)) {
-      throw new (0, _chunkWQWNPAYQcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkNK64H3RMcjs.InvalidEnvelopeError)(
         `challenge amount "${accept.amount}" is not a base-unit integer.`
       );
     }
@@ -1102,7 +1103,7 @@ var PipRailClient = (_class2 = class {
     const described = net.describeAsset(accept.asset);
     const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _10 => _10.decimals]), () => ( accept.extra.decimals));
     const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _11 => _11.symbol]), () => ( accept.extra.symbol));
-    const amountFormatted = _chunkWQWNPAYQcjs.formatUnits.call(void 0, amountBase, decimals);
+    const amountFormatted = _chunkNK64H3RMcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf(url),
       chain: this.opts.chain,
@@ -1142,7 +1143,7 @@ var PipRailClient = (_class2 = class {
    *  throwing PaymentDeclinedError, before any funds move. */
   async authorize(quote) {
     if (!quote.withinPolicy) {
-      throw new (0, _chunkWQWNPAYQcjs.PaymentDeclinedError)(
+      throw new (0, _chunkNK64H3RMcjs.PaymentDeclinedError)(
         `Payment refused by policy: ${_nullishCoalesce(quote.policyReason, () => ( "not allowed"))}`
       );
     }
@@ -1152,12 +1153,12 @@ var PipRailClient = (_class2 = class {
     try {
       approved = await hook(quote);
     } catch (err) {
-      throw new (0, _chunkWQWNPAYQcjs.PaymentDeclinedError)("onBeforePay threw \u2014 refusing to pay.", {
+      throw new (0, _chunkNK64H3RMcjs.PaymentDeclinedError)("onBeforePay threw \u2014 refusing to pay.", {
         cause: err
       });
     }
     if (!approved) {
-      throw new (0, _chunkWQWNPAYQcjs.PaymentDeclinedError)(
+      throw new (0, _chunkNK64H3RMcjs.PaymentDeclinedError)(
         `onBeforePay declined ${quote.amountFormatted} ${_nullishCoalesce(quote.symbol, () => ( ""))}`.trimEnd() + ` on ${quote.network}.`
       );
     }
@@ -1181,21 +1182,30 @@ var PipRailClient = (_class2 = class {
   }
   async payAndConfirm(net, wallet, accept) {
     if (!net.supports(accept.network)) {
-      throw new (0, _chunkWQWNPAYQcjs.WrongChainError)(
+      throw new (0, _chunkNK64H3RMcjs.WrongChainError)(
         `Challenge expects ${accept.network} but client is on ${net.network}.`
       );
     }
     const ref = await net.send(wallet, accept);
     this.safeEmit({ kind: "payment-broadcast", ref });
-    const { height } = await net.confirm(ref, _nullishCoalesce(accept.extra.minConfirmations, () => ( 1)));
-    this.safeEmit({
-      kind: "payment-confirmed",
-      ref,
-      blockNumber: BigInt(height)
-    });
-    return ref;
+    try {
+      const { height } = await net.confirm(ref, _nullishCoalesce(accept.extra.minConfirmations, () => ( 1)));
+      this.safeEmit({
+        kind: "payment-confirmed",
+        ref,
+        blockNumber: BigInt(height)
+      });
+      return { ref, confirmed: true };
+    } catch (err) {
+      this.safeEmit({
+        kind: "payment-unconfirmed",
+        ref,
+        reason: err instanceof Error ? err.message : String(err)
+      });
+      return { ref, confirmed: false };
+    }
   }
-  async retryWithProof(url, originalInit, accept, ref) {
+  async retryWithProof(url, originalInit, accept, ref, confirmed) {
     const signature = {
       x402Version: 2,
       accepted: accept,
@@ -1205,9 +1215,11 @@ var PipRailClient = (_class2 = class {
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
     let lastResponse = null;
     let lastReason = null;
-    for (let attempt = 0; attempt < this.maxRetries; attempt += 1) {
+    const attempts = confirmed ? this.maxRetries : Math.max(this.maxRetries, 6);
+    const backoffCap = confirmed ? 2e3 : 5e3;
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
       if (attempt > 0) {
-        await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
+        await new Promise((r) => setTimeout(r, Math.min(backoffCap, 400 * 2 ** (attempt - 1))));
       }
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(
@@ -1223,9 +1235,9 @@ var PipRailClient = (_class2 = class {
         });
       } catch (err) {
         if (timeoutController.signal.aborted) {
-          throw new (0, _chunkWQWNPAYQcjs.PaymentTimeoutError)(
-            `Server did not respond within ${this.retryTimeoutMs}ms after on-chain payment ${ref} confirmed.`,
-            { cause: err }
+          throw new (0, _chunkNK64H3RMcjs.PaymentTimeoutError)(
+            `Server did not respond within ${this.retryTimeoutMs}ms after broadcasting payment ${ref}. Re-verify or re-submit ref=${ref} \u2014 do NOT re-pay.`,
+            { cause: err, ref }
           );
         }
         throw err;
@@ -1240,12 +1252,14 @@ var PipRailClient = (_class2 = class {
       lastReason = await _asyncNullishCoalesce(await readInvalidReason(lastResponse), async () => ( lastReason));
     }
     const why = lastReason ? `${lastReason.error}${lastReason.detail ? ` \u2014 ${lastReason.detail}` : ""}` : "server gave no reason";
+    const unconfirmedNote = confirmed ? "" : " (broadcast but NOT locally confirmed \u2014 it may still have settled on-chain)";
     this.safeEmit({
       kind: "payment-failed",
-      reason: `server returned 402 after on-chain payment ${ref} confirmed (${why})`
+      reason: `server returned 402 after broadcasting payment ${ref}${unconfirmedNote} (${why})`
     });
-    throw new (0, _chunkWQWNPAYQcjs.MaxRetriesExceededError)(
-      `Server still returned 402 after ${this.maxRetries} retry attempt(s) with on-chain proof ref=${ref}. Last server rejection: ${why}.`
+    throw new (0, _chunkNK64H3RMcjs.MaxRetriesExceededError)(
+      `Server still returned 402 after ${attempts} attempt(s) with on-chain proof ref=${ref}${unconfirmedNote}. Last server rejection: ${why}. Re-verify or re-submit ref=${ref} before retrying \u2014 never re-pay (it would double-spend).`,
+      { ref }
     );
   }
 }, _class2);
@@ -1351,7 +1365,7 @@ function paymentTools(client) {
             receipt: parseReceipt(res)
           };
         } catch (err) {
-          if (err instanceof _chunkWQWNPAYQcjs.PaymentDeclinedError) {
+          if (err instanceof _chunkNK64H3RMcjs.PaymentDeclinedError) {
             return { declined: true, reason: err.message };
           }
           throw err;
@@ -1400,7 +1414,7 @@ function createPaymentGate(options) {
           }
           net.assertValidPayTo(payTo);
           const { asset, decimals, symbol } = net.resolveToken(a.token);
-          const amountBase = _chunkWQWNPAYQcjs.parseUnits.call(void 0, a.amount, decimals);
+          const amountBase = _chunkNK64H3RMcjs.parseUnits.call(void 0, a.amount, decimals);
           return { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
         })
       );
@@ -1678,4 +1692,5 @@ function encodeXPaymentHeader(input) {
 
 
 
-exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkWQWNPAYQcjs.ConfirmationTimeoutError; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.InsufficientFundsError = _chunkWQWNPAYQcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkWQWNPAYQcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkWQWNPAYQcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkWQWNPAYQcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkWQWNPAYQcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkWQWNPAYQcjs.NonReplayableBodyError; exports.PaymentDeclinedError = _chunkWQWNPAYQcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkWQWNPAYQcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkWQWNPAYQcjs.PipRailError; exports.UnknownTokenError = _chunkWQWNPAYQcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkWQWNPAYQcjs.UnsupportedNetworkError; exports.WrongChainError = _chunkWQWNPAYQcjs.WrongChainError; exports.WrongFamilyError = _chunkWQWNPAYQcjs.WrongFamilyError; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.createPaymentGate = createPaymentGate; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.parseChallenge = parseChallenge; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.registerDriver = registerDriver; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.toInsufficientFundsError = _chunkWQWNPAYQcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody;
+
+exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkNK64H3RMcjs.ConfirmationTimeoutError; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.InsufficientFundsError = _chunkNK64H3RMcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkNK64H3RMcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkNK64H3RMcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkNK64H3RMcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkNK64H3RMcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkNK64H3RMcjs.NonReplayableBodyError; exports.PaymentDeclinedError = _chunkNK64H3RMcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkNK64H3RMcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkNK64H3RMcjs.PipRailError; exports.RecipientNotReadyError = _chunkNK64H3RMcjs.RecipientNotReadyError; exports.UnknownTokenError = _chunkNK64H3RMcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkNK64H3RMcjs.UnsupportedNetworkError; exports.WrongChainError = _chunkNK64H3RMcjs.WrongChainError; exports.WrongFamilyError = _chunkNK64H3RMcjs.WrongFamilyError; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.createPaymentGate = createPaymentGate; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.parseChallenge = parseChallenge; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.registerDriver = registerDriver; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.toInsufficientFundsError = _chunkNK64H3RMcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody;