@piprail/sdk 1.14.0 → 1.15.0

package/dist/index.cjs

@@ -22,7 +22,7 @@
 
 
 
-var _chunkFTKVCP6Kcjs = require('./chunk-FTKVCP6K.cjs');
+var _chunkPA6YD3HLcjs = require('./chunk-PA6YD3HL.cjs');
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -51,13 +51,13 @@ function resolveNetwork(opts) {
   const family = familyForChain(opts.chain);
   const driver = byFamily.get(family);
   if (!driver) {
-    throw new (0, _chunkFTKVCP6Kcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedNetworkError)(
       `No driver registered for the "${family}" family \u2014 it may not be mounted yet (use the async resolveNetwork()).`
     );
   }
   const net = driver.resolve(opts);
   if (!net) {
-    throw new (0, _chunkFTKVCP6Kcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedNetworkError)(
       `The ${family} driver didn't recognise this chain input.`
     );
   }
@@ -320,12 +320,12 @@ function createWalletAdapter(config, resolved) {
   }
   const wc = config.walletClient;
   if (!wc.account) {
-    throw new (0, _chunkFTKVCP6Kcjs.WrongFamilyError)(
+    throw new (0, _chunkPA6YD3HLcjs.WrongFamilyError)(
       "chain is EVM; the provided walletClient has no attached account. Use `createWalletClient({ account, chain, transport })`, or pass { privateKey }."
     );
   }
   if (wc.chain && wc.chain.id !== resolved.chainId) {
-    throw new (0, _chunkFTKVCP6Kcjs.WrongChainError)(
+    throw new (0, _chunkPA6YD3HLcjs.WrongChainError)(
       `PipRailClient: walletClient is on chain ${wc.chain.id} but the SDK was configured with chain ${resolved.chainId}. They must match.`
     );
   }
@@ -608,19 +608,19 @@ async function payExactEvm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkFTKVCP6Kcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
       `exact buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account (no recoverable ECDSA signature). Pay via onchain-proof.`
     );
   }
   const domain = await readExactDomain(publicClient, accept.asset);
   if (!domain) {
-    throw new (0, _chunkFTKVCP6Kcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
       `exact: ${accept.asset} on ${accept.network} isn't an EIP-3009 token (USDT needs Permit2; native coin and plain ERC-20s aren't exact-payable). Pay via onchain-proof.`
     );
   }
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _5 => _5.getRandomValues])) {
-    throw new (0, _chunkFTKVCP6Kcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the exact rail needs a CSPRNG nonce."
     );
   }
@@ -841,7 +841,7 @@ async function verifyAndSettleExactEvm(input) {
       args: writeArgs
     });
   } catch (err) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle: the merchant relayer failed to broadcast transferWithAuthorization (${shorten(err instanceof Error ? err.message : String(err))}). The payer's authorization is still valid and unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -853,7 +853,7 @@ async function verifyAndSettleExactEvm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle: broadcast ${txHash} but couldn't confirm it (${shorten(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1068,15 +1068,15 @@ function makeEvmNetwork(resolved) {
         const info = resolved.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(resolved.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkFTKVCP6Kcjs.UnknownTokenError)(
+          throw new (0, _chunkPA6YD3HLcjs.UnknownTokenError)(
             `token "${token}" isn't built in for ${resolved.chain.name} (known: ${known}). Pass { address, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.address, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkFTKVCP6Kcjs.rejectForeignToken.call(void 0, token, "evm", network);
+      _chunkPA6YD3HLcjs.rejectForeignToken.call(void 0, token, "evm", network);
       if (!("address" in token)) {
-        throw new (0, _chunkFTKVCP6Kcjs.WrongFamilyError)(
+        throw new (0, _chunkPA6YD3HLcjs.WrongFamilyError)(
           `chain ${network} is EVM; a custom token must be { address, decimals }.`
         );
       }
@@ -1108,14 +1108,14 @@ function makeEvmNetwork(resolved) {
     },
     assertValidPayTo(payTo) {
       if (!_viem.isAddress.call(void 0, payTo)) {
-        throw new (0, _chunkFTKVCP6Kcjs.WrongFamilyError)(
+        throw new (0, _chunkPA6YD3HLcjs.WrongFamilyError)(
           `chain ${network} is EVM, but payTo "${payTo}" is not a valid 0x address.`
         );
       }
     },
     bindWallet(wallet) {
       if (typeof wallet !== "object" || wallet === null || !("privateKey" in wallet) && !("walletClient" in wallet)) {
-        throw new (0, _chunkFTKVCP6Kcjs.WrongFamilyError)(
+        throw new (0, _chunkPA6YD3HLcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { privateKey } or { walletClient }.`
         );
       }
@@ -1132,12 +1132,12 @@ function makeEvmNetwork(resolved) {
         });
       } catch (err) {
         if (isViemInsufficientFunds(err)) {
-          throw new (0, _chunkFTKVCP6Kcjs.InsufficientFundsError)(
+          throw new (0, _chunkPA6YD3HLcjs.InsufficientFundsError)(
             err instanceof Error ? err.message : "Insufficient funds for payment.",
             { cause: err }
           );
         }
-        throw _nullishCoalesce(_chunkFTKVCP6Kcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkPA6YD3HLcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref, minConfirmations) {
@@ -1148,7 +1148,7 @@ function makeEvmNetwork(resolved) {
         });
         return { height: receipt.blockNumber.toString() };
       } catch (err) {
-        throw new (0, _chunkFTKVCP6Kcjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkPA6YD3HLcjs.ConfirmationTimeoutError)(
           `EVM tx ${ref} did not reach ${minConfirmations} confirmation(s) in time.`,
           { cause: err }
         );
@@ -1157,7 +1157,7 @@ function makeEvmNetwork(resolved) {
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact") {
-        return _chunkFTKVCP6Kcjs.nativeCost.call(void 0, {
+        return _chunkPA6YD3HLcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: 0n,
@@ -1168,7 +1168,7 @@ function makeEvmNetwork(resolved) {
       const gasLimit = accept.asset === "native" ? 21000n : 65000n;
       try {
         const gasPrice = await publicClient.getGasPrice();
-        return _chunkFTKVCP6Kcjs.nativeCost.call(void 0, {
+        return _chunkPA6YD3HLcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -1177,7 +1177,7 @@ function makeEvmNetwork(resolved) {
         });
       } catch (e15) {
         const gasPrice = 5000000000n;
-        return _chunkFTKVCP6Kcjs.nativeCost.call(void 0, {
+        return _chunkPA6YD3HLcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -1271,9 +1271,9 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-QUVXPKBZ.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-MPPE6K24.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
         { cause }
       );
@@ -1283,9 +1283,9 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-5DLKKOFE.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-RNEFN25G.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
         { cause }
       );
@@ -1295,9 +1295,9 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-APZEBFAD.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-XHLLNHQP.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
         { cause }
       );
@@ -1307,9 +1307,9 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-USEG4AHX.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-XN2NBNGI.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
         { cause }
       );
@@ -1319,9 +1319,9 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-HHIT6WKY.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-TKJHNFGM.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
         { cause }
       );
@@ -1331,9 +1331,9 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-L7BQNJWO.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-6CVLEXLA.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
         { cause }
       );
@@ -1343,9 +1343,9 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-FUH3VAXT.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-ZJLZE26R.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
         { cause }
       );
@@ -1355,9 +1355,9 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-WDWZOU25.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-GJGIZHNI.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
         { cause }
       );
@@ -1367,9 +1367,9 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-OIHGJN5S.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-EJ3S2V7E.cjs")));
     } catch (cause) {
-      throw new (0, _chunkFTKVCP6Kcjs.MissingDriverError)(
+      throw new (0, _chunkPA6YD3HLcjs.MissingDriverError)(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
         { cause }
       );
@@ -1842,7 +1842,18 @@ function encodeBase642(str) {
 
 // src/policy.ts
 var ALLOW = { allowed: true };
-var deny = (reason) => ({ allowed: false, reason });
+var deny = (code, reason) => ({
+  allowed: false,
+  reason,
+  code
+});
+function resolveDeadline(policy, sessionStart) {
+  const fromTtl = policy.ttlSeconds != null && Number.isSafeInteger(sessionStart + policy.ttlSeconds * 1e3) ? sessionStart + policy.ttlSeconds * 1e3 : null;
+  const fromAbs = policy.expiresAt != null ? policy.expiresAt : null;
+  if (fromTtl == null) return fromAbs;
+  if (fromAbs == null) return fromTtl;
+  return Math.min(fromTtl, fromAbs);
+}
 function hostMatches(host, pattern) {
   if (pattern.startsWith("*.")) {
     const suffix = pattern.slice(1);
@@ -1858,18 +1869,26 @@ function chainMatches(intent, allowed) {
   const id = "id" in allowed ? allowed.id : void 0;
   return id !== void 0 && intent.network === `eip155:${id}`;
 }
-function evaluatePolicy(intent, policy, spentForAssetBase) {
+function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
   if (!policy) return ALLOW;
+  if (ctx) {
+    const deadline = resolveDeadline(policy, ctx.sessionStart);
+    if (deadline != null && ctx.now >= deadline) {
+      return deny("SESSION_EXPIRED", "session expired (TTL elapsed) \u2014 refusing to pay.");
+    }
+  }
   if (policy.chains && !policy.chains.some((c) => chainMatches(intent, c))) {
     return deny(
+      "CHAIN",
       `chain ${intent.network} is not in the allowed set (policy.chains).`
     );
   }
   if (policy.hosts && !policy.hosts.some((h) => hostMatches(intent.host, h))) {
-    return deny(`host ${intent.host} is not in the allowed set (policy.hosts).`);
+    return deny("HOST", `host ${intent.host} is not in the allowed set (policy.hosts).`);
   }
   if (!intent.recognized && !policy.allowUnknownTokens) {
     return deny(
+      "UNKNOWN_TOKEN",
       `asset ${intent.asset} on ${intent.network} isn't a token the SDK can price; refusing to pay it on trust. Set policy.allowUnknownTokens to override.`
     );
   }
@@ -1882,34 +1901,52 @@ function evaluatePolicy(intent, policy, spentForAssetBase) {
     });
     if (!matches) {
       return deny(
+        "TOKEN",
         `token ${_nullishCoalesce(intent.symbol, () => ( intent.asset))} is not in the allowed set (policy.tokens).`
       );
     }
   }
   if (policy.maxAmount !== void 0) {
-    const cap = _chunkFTKVCP6Kcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
+    const cap = _chunkPA6YD3HLcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
     if (intent.amountBase > cap) {
       return deny(
+        "MAX_AMOUNT",
         `payment of ${intent.amountBase} base units exceeds policy.maxAmount ` + `(${policy.maxAmount} ${_nullishCoalesce(intent.symbol, () => ( ""))}).`.trimEnd()
       );
     }
   }
   if (policy.maxTotal !== void 0) {
-    const cap = _chunkFTKVCP6Kcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
+    const cap = _chunkPA6YD3HLcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
     if (spentForAssetBase + intent.amountBase > cap) {
       return deny(
+        "MAX_TOTAL",
         `this payment would push spend on ${_nullishCoalesce(intent.symbol, () => ( intent.asset))} past policy.maxTotal (${policy.maxTotal}); already spent ${spentForAssetBase} base units.`
       );
     }
   }
+  if (ctx && policy.windowTotal !== void 0 && policy.windowSeconds !== void 0) {
+    const cap = _chunkPA6YD3HLcjs.floorUnits.call(void 0, policy.windowTotal, intent.decimals);
+    if (ctx.spentInWindowBase + intent.amountBase > cap) {
+      return deny(
+        "WINDOW_TOTAL",
+        `this payment would exceed policy.windowTotal (${policy.windowTotal}) within the last ${policy.windowSeconds}s on ${_nullishCoalesce(intent.symbol, () => ( intent.asset))}.`
+      );
+    }
+  }
   return ALLOW;
 }
 
 // src/ledger.ts
 var keyFor = (network, asset) => `${network}|${asset}`;
-var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(this);_class.prototype.__init2.call(this); }
+var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this); }
   __init() {this.records = []}
   __init2() {this.buckets = /* @__PURE__ */ new Map()}
+  /**
+   * Session clock origin (epoch-ms) — process/session start = ledger
+   * construction. In-memory; a new process is a new session. The client reads it
+   * to compute the `ttlSeconds` deadline and the rolling-window slice.
+   */
+  __init3() {this.sessionStart = Date.now()}
   /** Record a settled payment. `decimals` is the TRUE token decimals (for the
    *  per-asset running total used by maxTotal + the formatted summary). */
   record(r, decimals) {
@@ -1935,6 +1972,38 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
   totalFor(network, asset) {
     return _nullishCoalesce(_optionalChain([this, 'access', _25 => _25.buckets, 'access', _26 => _26.get, 'call', _27 => _27(keyFor(network, asset)), 'optionalAccess', _28 => _28.total]), () => ( 0n));
   }
+  /**
+   * Sum of base-unit amounts for (network, asset) whose record `at` (ISO
+   * timestamp) is at or after `sinceMs` (epoch-ms). Backs the rolling window
+   * (`sinceMs = now - windowSeconds*1000`). A linear scan of `records` —
+   * agent-session cardinality is small (tens), and it only runs when a window
+   * policy is set, so it's negligible against the network round-trip.
+   */
+  totalSince(network, asset, sinceMs) {
+    let sum = 0n;
+    for (const r of this.records) {
+      if (r.network === network && r.asset === asset && Date.parse(r.at) >= sinceMs) {
+        sum += BigInt(r.amountBase);
+      }
+    }
+    return sum;
+  }
+  /**
+   * The per-(network, asset) buckets, as read-only tuples — `network`, `asset`,
+   * `symbol`, the TRUE `decimals` (frozen from the first record), and the running
+   * `totalBase`. Lets the client compose a budget view WITHOUT coupling the ledger
+   * to the policy (the cap math lives in the client). Decimals only exist for a
+   * pair once it's been spent on — a never-spent pair simply isn't a bucket.
+   */
+  assetBuckets() {
+    return [...this.buckets.values()].map((b) => ({
+      network: b.network,
+      asset: b.asset,
+      ...b.symbol ? { symbol: b.symbol } : {},
+      decimals: b.decimals,
+      totalBase: b.total
+    }));
+  }
   /** An immutable snapshot of all spend so far. */
   summary() {
     return {
@@ -1945,7 +2014,7 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
         symbol: b.symbol,
         decimals: b.decimals,
         totalBase: b.total.toString(),
-        totalFormatted: _chunkFTKVCP6Kcjs.formatUnits.call(void 0, b.total, b.decimals),
+        totalFormatted: _chunkPA6YD3HLcjs.formatUnits.call(void 0, b.total, b.decimals),
         count: b.count
       })),
       records: [...this.records]
@@ -1968,15 +2037,46 @@ var PipRailClient = (_class2 = class {
   
   // Per-asset tally of everything this client has paid (powers spent() and the
   // policy's maxTotal cap).
-  __init3() {this.ledger = new SpendLedger()}
+  __init4() {this.ledger = new SpendLedger()}
   // Resolved lazily on first request — this is what lets Solana (and future
   // families) auto-mount with no setup call.
   
-  constructor(opts) {;_class2.prototype.__init3.call(this);
+  constructor(opts) {;_class2.prototype.__init4.call(this);
     this.opts = opts;
     this.maxRetries = Math.max(1, _nullishCoalesce(opts.maxPaymentRetries, () => ( 3)));
     this.retryTimeoutMs = _nullishCoalesce(opts.retryTimeoutMs, () => ( 3e4));
     this.onEvent = _nullishCoalesce(opts.onEvent, () => ( (() => void 0)));
+    this.assertPolicyTimeOptions(opts.policy);
+  }
+  /**
+   * Fail LOUDLY at construction on a misconfigured time policy — a security
+   * boundary must never silently half-arm. Two invariants (a misconfiguration is
+   * a programmer error → `TypeError`, no new SDK error code):
+   *   - the rolling window needs BOTH `windowTotal` and `windowSeconds`, or NEITHER
+   *     (one alone is a leash that silently doesn't bite);
+   *   - `ttlSeconds` must be a positive, safe integer whose `*1000` deadline stays
+   *     within `Number.MAX_SAFE_INTEGER` (else the arithmetic would lose precision).
+   */
+  assertPolicyTimeOptions(policy) {
+    if (!policy) return;
+    const hasWindowTotal = policy.windowTotal !== void 0;
+    const hasWindowSeconds = policy.windowSeconds !== void 0;
+    if (hasWindowTotal !== hasWindowSeconds) {
+      throw new TypeError(
+        "policy.windowTotal and policy.windowSeconds must be set together \u2014 a rolling-window cap can't be half-armed (set both, or neither)."
+      );
+    }
+    if (hasWindowSeconds && !(Number.isSafeInteger(policy.windowSeconds) && policy.windowSeconds > 0)) {
+      throw new TypeError("policy.windowSeconds must be a positive integer number of seconds.");
+    }
+    if (policy.ttlSeconds !== void 0) {
+      const ttl = policy.ttlSeconds;
+      if (!Number.isSafeInteger(ttl) || ttl <= 0 || !Number.isSafeInteger(this.ledger.sessionStart + ttl * 1e3)) {
+        throw new TypeError(
+          "policy.ttlSeconds must be a positive integer number of seconds small enough that the resulting deadline stays a safe integer."
+        );
+      }
+    }
   }
   /** Emit an observability event, never letting a throwing handler break the
    * payment flow (mirrors the server gate's `onPaid` isolation). */
@@ -2074,6 +2174,64 @@ var PipRailClient = (_class2 = class {
   spent() {
     return this.ledger.summary();
   }
+  /**
+   * Read-only budget + time leash for a Mode-A (headless) agent — the policy IS
+   * the consent, and this is how the agent SEES what's left of it before paying.
+   * Composes the in-memory ledger with the configured policy; never throws, moves
+   * no funds. PROCESS-SCOPED — every figure resets on restart (see {@link SessionBudget}).
+   */
+  budget() {
+    const view = this.sessionView();
+    const start = new Date(this.ledger.sessionStart).toISOString();
+    return {
+      session: {
+        start,
+        expiresAt: _optionalChain([view, 'optionalAccess', _32 => _32.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
+        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _33 => _33.secondsRemaining]), () => ( null))
+      },
+      byAsset: this.remaining()
+    };
+  }
+  /**
+   * Per-(network, asset) remaining budget — ONE row per pair the ledger already
+   * holds (decimals are known only after the first spend), so a fresh client with
+   * a `maxTotal` set returns `[]` until its first payment. `cap`/`remaining` are
+   * `undefined` when no `maxTotal` is configured (unbounded). Pure + in-memory;
+   * never throws, never sums across tokens (no price oracle). PROCESS-SCOPED.
+   */
+  remaining() {
+    const maxTotal = _optionalChain([this, 'access', _34 => _34.opts, 'access', _35 => _35.policy, 'optionalAccess', _36 => _36.maxTotal]);
+    return this.ledger.assetBuckets().map((b) => {
+      const base2 = {
+        network: b.network,
+        asset: b.asset,
+        ...b.symbol ? { symbol: b.symbol } : {},
+        decimals: b.decimals,
+        spentBase: b.totalBase.toString()
+      };
+      if (maxTotal === void 0) return base2;
+      const capBase = _chunkPA6YD3HLcjs.floorUnits.call(void 0, maxTotal, b.decimals);
+      const remainingBase = capBase > b.totalBase ? capBase - b.totalBase : 0n;
+      return {
+        ...base2,
+        capBase: capBase.toString(),
+        remainingBase: remainingBase.toString(),
+        remainingFormatted: _chunkPA6YD3HLcjs.formatUnits.call(void 0, remainingBase, b.decimals)
+      };
+    });
+  }
+  /** The read-only TIME envelope for the plan/budget surfaces, or `undefined`
+   *  when no session deadline (`ttlSeconds`/`expiresAt`) is set. `secondsRemaining`
+   *  is clamped ≥ 0 — a best-effort host wall-clock estimate. */
+  sessionView(now = Date.now()) {
+    const policy = this.opts.policy;
+    if (!policy || policy.ttlSeconds == null && policy.expiresAt == null) return void 0;
+    const deadline = resolveDeadline(policy, this.ledger.sessionStart);
+    return {
+      expiresAt: deadline,
+      secondsRemaining: deadline == null ? null : Math.max(0, Math.floor((deadline - now) / 1e3))
+    };
+  }
   /**
    * Plan a payment for a gated URL — WITHOUT paying. The read-only completion of
    * the `quote()` → `estimateCost()` → **`planPayment()`** trio: it surveys every
@@ -2094,11 +2252,11 @@ var PipRailClient = (_class2 = class {
    * the plan yourself. No funds move.
    */
   async planPayment(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _32 => _32.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _37 => _37.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const challenge = await parseChallenge(res);
     if (!challenge) {
-      throw new (0, _chunkFTKVCP6Kcjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
+      throw new (0, _chunkPA6YD3HLcjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
     }
     const { net, wallet } = await this.ensure();
     return this.planFromChallenge(net, wallet, challenge, url, this.resolveSchemes());
@@ -2261,24 +2419,24 @@ var PipRailClient = (_class2 = class {
    * streams throw `NonReplayableBodyError`.
    */
   async fetch(url, init) {
-    const body = _optionalChain([init, 'optionalAccess', _33 => _33.body]);
+    const body = _optionalChain([init, 'optionalAccess', _38 => _38.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
-      throw new (0, _chunkFTKVCP6Kcjs.NonReplayableBodyError)(
+      throw new (0, _chunkPA6YD3HLcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
       );
     }
     const firstResponse = await fetch(url, init);
     if (firstResponse.status !== 402) return firstResponse;
-    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _34 => _34.schemes]));
+    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _39 => _39.schemes]));
     const resolved = await this.resolveChallenge(url, firstResponse, schemes);
     const { net, wallet, challenge } = resolved;
     let accept = resolved.accept;
     let quote = resolved.quote;
-    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _35 => _35.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
+    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _40 => _40.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
     if (autoRoute) {
       const plan = await this.planFromChallenge(net, wallet, challenge, url, schemes);
       if (!plan.best) {
-        throw new (0, _chunkFTKVCP6Kcjs.PaymentDeclinedError)(_nullishCoalesce(plan.fundingHint, () => ( "No rail is settleable for this payment.")));
+        throw new (0, _chunkPA6YD3HLcjs.PaymentDeclinedError)(_nullishCoalesce(plan.fundingHint, () => ( "No rail is settleable for this payment.")));
       }
       accept = plan.best.accept;
       quote = plan.best.quote;
@@ -2302,7 +2460,7 @@ var PipRailClient = (_class2 = class {
   async resolveChallenge(url, response, schemes) {
     const challenge = await parseChallenge(response);
     if (!challenge) {
-      throw new (0, _chunkFTKVCP6Kcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkPA6YD3HLcjs.InvalidEnvelopeError)(
         "402 response did not include a parseable x402 challenge."
       );
     }
@@ -2313,7 +2471,7 @@ var PipRailClient = (_class2 = class {
         (a) => a.scheme === "exact" && net.supports(a.network)
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
-        throw new (0, _chunkFTKVCP6Kcjs.UnsupportedSchemeError)(
+        throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
           `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (EVM + EIP-3009 only), and no 'onchain-proof' rail was offered.`
         );
       }
@@ -2322,13 +2480,13 @@ var PipRailClient = (_class2 = class {
           (a) => a.scheme === "exact" && net.supports(a.network) && net.describeAsset(a.asset) != null
         );
         if (payable) {
-          throw new (0, _chunkFTKVCP6Kcjs.NoCompatibleAcceptError)(
+          throw new (0, _chunkPA6YD3HLcjs.NoCompatibleAcceptError)(
             `This 402 is payable only via the standard 'exact' rail on ${net.network}, which is OFF by default. Enable it: new PipRailClient({ \u2026, schemes: ['onchain-proof', 'exact'] }) or per call fetch(url, { schemes: ['exact'] }) (MCP: PIPRAIL_SCHEMES=onchain-proof,exact).`
           );
         }
       }
       const networks = [...new Set(challenge.accepts.map((a) => a.network))].join(", ");
-      throw new (0, _chunkFTKVCP6Kcjs.NoCompatibleAcceptError)(
+      throw new (0, _chunkPA6YD3HLcjs.NoCompatibleAcceptError)(
         `No accepts[] entry payable by this client on ${net.network} (schemes: ${schemes.join(", ")}; challenge offered: ${networks || "none"}).`
       );
     }
@@ -2369,6 +2527,7 @@ var PipRailClient = (_class2 = class {
    *  net/wallet. Shared by `planPayment` (read-only) and `fetch`'s autoRoute. */
   async planFromChallenge(net, wallet, challenge, url, schemes) {
     const chainLabel = typeof this.opts.chain === "string" ? this.opts.chain : net.network;
+    const session = this.sessionView();
     const candidates = this.gatherCandidates(net, challenge, schemes);
     if (candidates.length === 0) {
       const offered = [...new Set(challenge.accepts.map((a) => a.network))].join(", ") || "none";
@@ -2379,7 +2538,8 @@ var PipRailClient = (_class2 = class {
         payable: false,
         best: null,
         options: [],
-        fundingHint: `This 402 isn't offered on your chain (${chainLabel}); it's payable on: ${offered}.`
+        fundingHint: `This 402 isn't offered on your chain (${chainLabel}); it's payable on: ${offered}.`,
+        ...session ? { session } : {}
       };
     }
     const analysed = await Promise.all(
@@ -2397,7 +2557,8 @@ var PipRailClient = (_class2 = class {
       payable: best !== null,
       best,
       options,
-      fundingHint: best ? null : buildFundingHint(options, chainLabel)
+      fundingHint: best ? null : buildFundingHint(options, chainLabel),
+      ...session ? { session } : {}
     };
   }
   /** Analyse ONE rail against the wallet's holdings — quote (existing) + gas
@@ -2414,7 +2575,11 @@ var PipRailClient = (_class2 = class {
     const blockers = [];
     const warnings = [];
     const shortfall = {};
-    if (!quote.withinPolicy) blockers.push("OUTSIDE_POLICY");
+    if (!quote.withinPolicy) {
+      blockers.push(
+        quote.policyCode === "SESSION_EXPIRED" || quote.policyCode === "WINDOW_TOTAL" ? "OUTSIDE_WINDOW" : "OUTSIDE_POLICY"
+      );
+    }
     if (quote.symbolMismatch) warnings.push("SYMBOL_MISMATCH");
     if (!isExact && cost.basis === "heuristic") warnings.push("GAS_HEURISTIC");
     const tokenKnown = bal.token != null;
@@ -2423,21 +2588,21 @@ var PipRailClient = (_class2 = class {
     if (isExact) {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkFTKVCP6Kcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkPA6YD3HLcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
     } else if (isNative) {
       if (nativeKnown && bal.native < amount + fee) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkFTKVCP6Kcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
+        shortfall.token = _chunkPA6YD3HLcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
       }
     } else {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkFTKVCP6Kcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkPA6YD3HLcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
       if (nativeKnown && bal.native < fee) {
         blockers.push("INSUFFICIENT_GAS");
-        shortfall.native = _chunkFTKVCP6Kcjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
+        shortfall.native = _chunkPA6YD3HLcjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
       } else if (nativeKnown && fee > 0n && bal.native < fee * 3n / 2n) {
         warnings.push("THIN_GAS_MARGIN");
       }
@@ -2462,8 +2627,8 @@ var PipRailClient = (_class2 = class {
       blockers,
       warnings,
       balance: {
-        token: bal.token != null ? _chunkFTKVCP6Kcjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
-        native: bal.native != null ? _chunkFTKVCP6Kcjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
+        token: bal.token != null ? _chunkPA6YD3HLcjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
+        native: bal.native != null ? _chunkPA6YD3HLcjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
       },
       need: { token: quote.amountFormatted, native: cost.feeFormatted },
       ...shortfall.token || shortfall.native ? { shortfall } : {},
@@ -2474,20 +2639,20 @@ var PipRailClient = (_class2 = class {
    *  driver's describeAsset) + the policy verdict + a symbol-mismatch flag. */
   buildQuote(net, accept, url, description) {
     if (!/^\d+$/.test(accept.amount)) {
-      throw new (0, _chunkFTKVCP6Kcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkPA6YD3HLcjs.InvalidEnvelopeError)(
         `challenge amount "${accept.amount}" is not a base-unit integer.`
       );
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _36 => _36.decimals]), () => ( accept.extra.decimals));
+    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _41 => _41.decimals]), () => ( accept.extra.decimals));
     if (decimals === void 0) {
-      throw new (0, _chunkFTKVCP6Kcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkPA6YD3HLcjs.InvalidEnvelopeError)(
         `challenge for ${accept.asset} on ${accept.network} states no decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
       );
     }
-    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _37 => _37.symbol]), () => ( accept.extra.symbol));
-    const amountFormatted = _chunkFTKVCP6Kcjs.formatUnits.call(void 0, amountBase, decimals);
+    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _42 => _42.symbol]), () => ( accept.extra.symbol));
+    const amountFormatted = _chunkPA6YD3HLcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf2(url),
       chain: this.opts.chain,
@@ -2498,10 +2663,25 @@ var PipRailClient = (_class2 = class {
       symbol,
       recognized: described != null
     };
+    const policy = this.opts.policy;
+    const hasWindow = !!policy && policy.windowTotal != null && policy.windowSeconds != null;
+    const hasTimePolicy = !!policy && (policy.ttlSeconds != null || policy.expiresAt != null || hasWindow);
+    const now = Date.now();
+    const ctx = hasTimePolicy ? {
+      now,
+      sessionStart: this.ledger.sessionStart,
+      // Window slice ONLY when BOTH fields are set — never a `?? 0` width.
+      spentInWindowBase: hasWindow ? this.ledger.totalSince(
+        accept.network,
+        accept.asset,
+        now - policy.windowSeconds * 1e3
+      ) : 0n
+    } : void 0;
     const decision = evaluatePolicy(
       intent,
       this.opts.policy,
-      this.ledger.totalFor(accept.network, accept.asset)
+      this.ledger.totalFor(accept.network, accept.asset),
+      ctx
     );
     const serverSymbol = accept.extra.symbol;
     const symbolMismatch = intent.recognized && !!serverSymbol && !!symbol && serverSymbol.toUpperCase() !== symbol.toUpperCase();
@@ -2520,15 +2700,19 @@ var PipRailClient = (_class2 = class {
       recognized: intent.recognized,
       symbolMismatch,
       withinPolicy: decision.allowed,
-      ...decision.reason ? { policyReason: decision.reason } : {}
+      ...decision.reason ? { policyReason: decision.reason } : {},
+      ...decision.code ? { policyCode: decision.code } : {}
     };
   }
   /** Enforce the spend policy and the onBeforePay hook — both refuse by
-   *  throwing PaymentDeclinedError, before any funds move. */
+   *  throwing PaymentDeclinedError, before any funds move. Every refusal carries
+   *  a typed `reasonCode` so an agent can branch on the cause (and spot a
+   *  TERMINAL expiry/approval decline it must not retry) without parsing prose. */
   async authorize(quote) {
     if (!quote.withinPolicy) {
-      throw new (0, _chunkFTKVCP6Kcjs.PaymentDeclinedError)(
-        `Payment refused by policy: ${_nullishCoalesce(quote.policyReason, () => ( "not allowed"))}`
+      throw new (0, _chunkPA6YD3HLcjs.PaymentDeclinedError)(
+        `Payment refused by policy: ${_nullishCoalesce(quote.policyReason, () => ( "not allowed"))}`,
+        { reasonCode: reasonCodeForPolicy(quote.policyCode) }
       );
     }
     const hook = this.opts.onBeforePay;
@@ -2537,13 +2721,15 @@ var PipRailClient = (_class2 = class {
     try {
       approved = await hook(quote);
     } catch (err) {
-      throw new (0, _chunkFTKVCP6Kcjs.PaymentDeclinedError)("onBeforePay threw \u2014 refusing to pay.", {
-        cause: err
+      throw new (0, _chunkPA6YD3HLcjs.PaymentDeclinedError)("onBeforePay threw \u2014 refusing to pay.", {
+        cause: err,
+        reasonCode: "APPROVAL"
       });
     }
     if (!approved) {
-      throw new (0, _chunkFTKVCP6Kcjs.PaymentDeclinedError)(
-        `onBeforePay declined ${quote.amountFormatted} ${_nullishCoalesce(quote.symbol, () => ( ""))}`.trimEnd() + ` on ${quote.network}.`
+      throw new (0, _chunkPA6YD3HLcjs.PaymentDeclinedError)(
+        `onBeforePay declined ${quote.amountFormatted} ${_nullishCoalesce(quote.symbol, () => ( ""))}`.trimEnd() + ` on ${quote.network}.`,
+        { reasonCode: "APPROVAL" }
       );
     }
   }
@@ -2566,7 +2752,7 @@ var PipRailClient = (_class2 = class {
   }
   async payAndConfirm(net, wallet, accept) {
     if (!net.supports(accept.network)) {
-      throw new (0, _chunkFTKVCP6Kcjs.WrongChainError)(
+      throw new (0, _chunkPA6YD3HLcjs.WrongChainError)(
         `Challenge expects ${accept.network} but client is on ${net.network}.`
       );
     }
@@ -2595,7 +2781,7 @@ var PipRailClient = (_class2 = class {
       accepted: accept,
       payload: { nonce: accept.extra.nonce, txHash: ref }
     };
-    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _38 => _38.headers]));
+    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _43 => _43.headers]));
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
     let lastResponse = null;
     let lastReason = null;
@@ -2610,7 +2796,7 @@ var PipRailClient = (_class2 = class {
         () => timeoutController.abort(),
         this.retryTimeoutMs
       );
-      const signal = _optionalChain([originalInit, 'optionalAccess', _39 => _39.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
+      const signal = _optionalChain([originalInit, 'optionalAccess', _44 => _44.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
       try {
         lastResponse = await fetch(url, {
           ..._nullishCoalesce(originalInit, () => ( {})),
@@ -2619,7 +2805,7 @@ var PipRailClient = (_class2 = class {
         });
       } catch (err) {
         if (timeoutController.signal.aborted) {
-          throw new (0, _chunkFTKVCP6Kcjs.PaymentTimeoutError)(
+          throw new (0, _chunkPA6YD3HLcjs.PaymentTimeoutError)(
             `Server did not respond within ${this.retryTimeoutMs}ms after broadcasting payment ${ref}. Re-verify or re-submit ref=${ref} \u2014 do NOT re-pay.`,
             { cause: err, ref }
           );
@@ -2641,7 +2827,7 @@ var PipRailClient = (_class2 = class {
       kind: "payment-failed",
       reason: `server returned 402 after broadcasting payment ${ref}${unconfirmedNote} (${why})`
     });
-    throw new (0, _chunkFTKVCP6Kcjs.MaxRetriesExceededError)(
+    throw new (0, _chunkPA6YD3HLcjs.MaxRetriesExceededError)(
       `Server still returned 402 after ${attempts} attempt(s) with on-chain proof ref=${ref}${unconfirmedNote}. Last server rejection: ${why}. Re-verify or re-submit ref=${ref} before retrying \u2014 never re-pay (it would double-spend).`,
       { ref }
     );
@@ -2665,17 +2851,17 @@ var PipRailClient = (_class2 = class {
    */
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
-      throw new (0, _chunkFTKVCP6Kcjs.UnsupportedSchemeError)(
+      throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
         `the ${net.family} family can't pay a standard 'exact' rail (EVM + EIP-3009 only).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _40 => _40.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _45 => _45.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payExact(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _41 => _41.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _46 => _46.headers]));
     headers.set(HEADER_SIGNATURE, buildExactSignatureHeader({ accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `exact: facilitator rejected nonce=${nonce} (${why2})` });
-      throw new (0, _chunkFTKVCP6Kcjs.MaxRetriesExceededError)(
+      throw new (0, _chunkPA6YD3HLcjs.MaxRetriesExceededError)(
         `exact: the facilitator rejected the payment (${why2}). Fix the cause, then re-present the SAME signed authorization (nonce=${nonce}) \u2014 do NOT re-sign a fresh nonce. ref=${nonce}.`,
         { ref: nonce }
       );
@@ -2688,17 +2874,17 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _42 => _42.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _47 => _47.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _43 => _43.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _48 => _48.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
       } catch (err) {
-        throw new (0, _chunkFTKVCP6Kcjs.PaymentTimeoutError)(
+        throw new (0, _chunkPA6YD3HLcjs.PaymentTimeoutError)(
           `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain with authorizationState(${payerFrom}, ${nonce}) before re-presenting; do NOT re-pay.`,
           { cause: err, ref: nonce }
         );
@@ -2714,7 +2900,7 @@ var PipRailClient = (_class2 = class {
       if (response.ok && !(settle && settle.success === false)) {
         const receipt = parseReceipt(response);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _44 => _44.transaction]) || _optionalChain([receipt, 'optionalAccess', _45 => _45.transaction]) || `eip3009-nonce:${nonce}`;
+        const ref = _optionalChain([settle, 'optionalAccess', _49 => _49.transaction]) || _optionalChain([receipt, 'optionalAccess', _50 => _50.transaction]) || `eip3009-nonce:${nonce}`;
         this.recordSpend(quote, ref);
         return response;
       }
@@ -2731,14 +2917,14 @@ var PipRailClient = (_class2 = class {
       kind: "payment-failed",
       reason: `exact: 402 after submitting authorization nonce=${nonce} (${why})`
     });
-    throw new (0, _chunkFTKVCP6Kcjs.MaxRetriesExceededError)(
+    throw new (0, _chunkPA6YD3HLcjs.MaxRetriesExceededError)(
       `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify authorizationState(${payerFrom}, ${nonce}) first. ref=${nonce}.`,
       { ref: nonce }
     );
   }
 }, _class2);
 function throwIfAborted(signal) {
-  if (_optionalChain([signal, 'optionalAccess', _46 => _46.aborted])) {
+  if (_optionalChain([signal, 'optionalAccess', _51 => _51.aborted])) {
     throw _nullishCoalesce(signal.reason, () => ( new DOMException("This operation was aborted.", "AbortError")));
   }
 }
@@ -2771,6 +2957,9 @@ function buildFundingHint(options, chainLabel) {
   if (target.blockers.includes("RECIPIENT_NOT_READY")) {
     return `Recipient ${shortAddr(target.accept.payTo)} can't receive on ${chainLabel} yet \u2014 ${_nullishCoalesce(target.recipient.fix, () => ( "recipient not ready"))}.`;
   }
+  if (target.blockers.includes("OUTSIDE_WINDOW")) {
+    return target.quote.policyCode === "SESSION_EXPIRED" ? `Session is over on ${chainLabel} \u2014 restart the process or extend the TTL; no retry will succeed.` : `Budget window exhausted on ${chainLabel} \u2014 wait for it to free, or raise policy.windowTotal.`;
+  }
   if (target.blockers.includes("OUTSIDE_POLICY")) {
     return `Refused by spend policy: ${_nullishCoalesce(target.quote.policyReason, () => ( "not allowed"))}.`;
   }
@@ -2778,10 +2967,10 @@ function buildFundingHint(options, chainLabel) {
     return `Couldn't fully read your wallet on ${chainLabel} (RPC throttled) \u2014 retry; you may already be able to pay ${target.quote.amountFormatted} ${sym}.`;
   }
   const parts = [];
-  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _47 => _47.shortfall, 'optionalAccess', _48 => _48.token])) {
+  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _52 => _52.shortfall, 'optionalAccess', _53 => _53.token])) {
     parts.push(`top up ${target.shortfall.token} ${sym}`);
   }
-  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _49 => _49.shortfall, 'optionalAccess', _50 => _50.native])) {
+  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _54 => _54.shortfall, 'optionalAccess', _55 => _55.native])) {
     parts.push(`add ~${target.shortfall.native} ${target.cost.feeSymbol} for gas`);
   }
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
@@ -2795,7 +2984,7 @@ async function planAcross(clients, url, init) {
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
     url,
-    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _51 => _51.accept, 'access', _52 => _52.network]), () => ( live[0].network)),
+    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _56 => _56.accept, 'access', _57 => _57.network]), () => ( live[0].network)),
     status,
     payable: best !== null,
     best,
@@ -2808,6 +2997,20 @@ function railOnNetwork(rail, matches) {
   const n = normalizeNetwork(rail.network);
   return !n.includes(":") || matches(n);
 }
+function reasonCodeForPolicy(code) {
+  switch (code) {
+    case "SESSION_EXPIRED":
+      return "SESSION_EXPIRED";
+    case "WINDOW_TOTAL":
+      return "OUTSIDE_WINDOW";
+    case "MAX_TOTAL":
+      return "BUDGET";
+    case void 0:
+      return void 0;
+    default:
+      return "POLICY";
+  }
+}
 function hostOf2(url) {
   try {
     return new URL(url).hostname;
@@ -2828,8 +3031,8 @@ function isReplayableBodyInit(value) {
 async function readInvalidReason(response) {
   try {
     const body = await response.clone().json();
-    const ext = _optionalChain([body, 'optionalAccess', _53 => _53.extensions]);
-    const piprail = _optionalChain([ext, 'optionalAccess', _54 => _54.piprail]);
+    const ext = _optionalChain([body, 'optionalAccess', _58 => _58.extensions]);
+    const piprail = _optionalChain([ext, 'optionalAccess', _59 => _59.piprail]);
     if (piprail && typeof piprail.code === "string") {
       return {
         error: piprail.code,
@@ -2851,11 +3054,115 @@ async function readInvalidReason(response) {
   } catch (e24) {
   }
   const settle = parseSettleResponse(response);
-  if (_optionalChain([settle, 'optionalAccess', _55 => _55.errorReason])) return { error: settle.errorReason, detail: "" };
+  if (_optionalChain([settle, 'optionalAccess', _60 => _60.errorReason])) return { error: settle.errorReason, detail: "" };
   return null;
 }
 
+// src/render.ts
+function summarizePlan(plan) {
+  if (plan == null) return "No payment required \u2014 the URL is not payment-gated.";
+  if (plan.payable && plan.best) {
+    const q = plan.best.quote;
+    const c = plan.best.cost;
+    const otherRails = plan.options.length - 1;
+    const note = otherRails > 0 ? ` ${otherRails} other rail(s) not settleable.` : "";
+    return `Payable: ${q.amountFormatted} ${_nullishCoalesce(q.symbol, () => ( q.asset))} on ${plan.best.accept.network} (gas ~${c.feeFormatted} ${c.feeSymbol}).${note}`;
+  }
+  return `NOT payable: ${_nullishCoalesce(plan.fundingHint, () => ( `no settleable rail on ${plan.network}`))}`;
+}
+function explainDecline(err) {
+  if (!(err instanceof _chunkPA6YD3HLcjs.PipRailError)) {
+    return `Payment failed: ${err instanceof Error ? err.message : String(err)}`;
+  }
+  switch (err.code) {
+    case "PAYMENT_DECLINED":
+      return err.message;
+    case "PAYMENT_TIMEOUT":
+    case "MAX_RETRIES_EXCEEDED":
+    case "CONFIRMATION_TIMEOUT":
+      return `${err.message} Recover using the proof on .ref (re-verify or re-submit it); never re-pay \u2014 a fresh payment would double-spend.`;
+    case "INSUFFICIENT_FUNDS":
+      return "The wallet cannot cover the payment + gas \u2014 top up the payer (token and/or native gas) and retry.";
+    case "RECIPIENT_NOT_READY":
+      return `${err.message} The fix is on the RECIPIENT (trustline / registration / opt-in / activation), not your balance.`;
+    case "NO_COMPATIBLE_ACCEPT":
+    case "UNSUPPORTED_SCHEME":
+      return err.message;
+    default:
+      return `Payment failed: ${err.message}`;
+  }
+}
+function formatSpendReport(summary) {
+  if (summary.count === 0) return "No payments yet.";
+  return summary.byAsset.map(
+    (a) => `${a.totalFormatted} ${_nullishCoalesce(a.symbol, () => ( a.asset))} on ${a.network} (${a.count} payment${a.count === 1 ? "" : "s"})`
+  ).join("; ");
+}
+
+// src/agentGuide.ts
+var PIPRAIL_AGENT_GUIDE = `# Paying with PipRail \u2014 the agent contract
+
+You can pay for x402 "402 Payment Required" resources autonomously. Money moves
+straight from your wallet to the server; PipRail custodies nothing. Follow this.
+
+## The loop: quote \u2192 plan \u2192 pay
+1. piprail_quote_payment(url) \u2014 PRICE it. Returns the amount, token, chain, and
+   whether it is within your spend policy. No funds move. Use it to decide if a
+   resource is worth buying.
+2. piprail_plan_payment(url) \u2014 can I afford it NOW? Reads your balance, native gas,
+   and recipient-readiness across every rail, and returns { payable, best,
+   fundingHint, session? }. If payable is false, do NOT attempt the payment \u2014
+   fundingHint says exactly what to fix.
+3. piprail_pay_request(url, method?, body?) \u2014 PAY (only if the plan was payable)
+   and return the result.
+Always plan before you pay so you never commit to a payment you cannot finish.
+
+## Reading a refusal \u2014 never crash, never double-spend
+A failed pay returns a STRUCTURED object, never a thrown error you must catch:
+  { ok:false, code, reason, explain, ref?, reasonCode?, declined? }
+Branch on \`code\` (always reliable). Key cases:
+- declined:true with reasonCode:'SESSION_EXPIRED' \u2014 your time budget is over. This
+  is TERMINAL: STOP. Do not retry ANY payment this process; it cannot be undone
+  without a restart / a longer TTL.
+- declined:true with reasonCode:'APPROVAL' \u2014 a human (or hook) declined this
+  payment. Terminal for this pay: do NOT auto-retry \u2014 they said no, or no one
+  answered.
+- declined:true with reasonCode:'OUTSIDE_WINDOW' \u2014 your rolling rate-limit is
+  exhausted. Wait for it to free, then retry; do not raise the amount.
+- declined:true with reasonCode:'POLICY' or 'BUDGET' \u2014 a spend cap or allowlist
+  refused it. Don't retry the same payment; pick a cheaper/allowed one.
+- code:'INSUFFICIENT_FUNDS' \u2014 top up the wallet (token and/or native gas), retry.
+- code:'PAYMENT_TIMEOUT' / 'MAX_RETRIES_EXCEEDED' / 'CONFIRMATION_TIMEOUT' \u2014 the
+  payment may ALREADY be on-chain. Recover using the proof on \`.ref\` (re-verify
+  or re-submit it); never re-pay \u2014 a fresh payment would double-spend.
+- code:'NO_COMPATIBLE_ACCEPT' / 'UNSUPPORTED_SCHEME' \u2014 the 402 isn't payable on
+  your chain/scheme; \`explain\` says whether it's the wrong chain or a scheme to enable.
+
+## Knowing your leash \u2014 call piprail_budget
+piprail_budget tells you how much budget and time you have left, per
+(network, asset), plus your spend so far. Read-only; moves no funds. Use it in
+Mode A to self-check before paying.
+
+## Two modes
+- Mode A (headless, default): you run FREE inside a pre-set budget + time
+  envelope. The policy IS the consent \u2014 there is no per-payment prompt. Stay
+  inside it; piprail_budget shows what's left.
+- Mode B (supervised): the host may ask a human to approve each payment. A
+  decline/cancel/timeout comes back as declined:true (reasonCode:'APPROVAL') \u2014
+  do NOT retry it as if it were a transient error.
+
+## Hard facts
+- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014
+  budgets aren't summed across tokens (no price oracle).
+- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart
+  (a convenience, not a durable ledger).
+`;
+function agentGuide() {
+  return PIPRAIL_AGENT_GUIDE;
+}
+
 // src/agent.ts
+var OPEN_OBJECT = { type: "object", additionalProperties: true };
 async function readBody(res) {
   const text = await res.text();
   if (!text) return null;
@@ -2928,6 +3235,7 @@ function paymentTools(client) {
         required: ["url"],
         additionalProperties: false
       },
+      outputSchema: OPEN_OBJECT,
       invoke: async (args) => {
         const quote = await client.quote(String(args.url));
         return quote ? { gated: true, ...quote } : { gated: false, url: String(args.url) };
@@ -2951,6 +3259,7 @@ function paymentTools(client) {
         required: ["url"],
         additionalProperties: false
       },
+      outputSchema: OPEN_OBJECT,
       invoke: async (args) => {
         const plan = await client.planPayment(String(args.url));
         if (plan == null) return { gated: false, url: String(args.url) };
@@ -2959,6 +3268,8 @@ function paymentTools(client) {
           payable: plan.payable,
           status: plan.status,
           fundingHint: plan.fundingHint,
+          // One model-readable line distilling the whole plan.
+          summary: summarizePlan(plan),
           best: plan.best ? {
             network: plan.best.accept.network,
             symbol: plan.best.quote.symbol,
@@ -2974,7 +3285,9 @@ function paymentTools(client) {
             blockers: o.blockers,
             warnings: o.warnings,
             recipientReady: o.recipient.ready
-          }))
+          })),
+          // The session's time leash, present only when a time policy is configured.
+          ...plan.session ? { session: plan.session } : {}
         };
       }
     },
@@ -3032,8 +3345,20 @@ function paymentTools(client) {
             receipt: parseReceipt(res)
           };
         } catch (err) {
-          if (err instanceof _chunkFTKVCP6Kcjs.PaymentDeclinedError) {
-            return { declined: true, reason: err.message };
+          if (err instanceof _chunkPA6YD3HLcjs.PipRailError) {
+            const out = {
+              ok: false,
+              code: err.code,
+              reason: err.message,
+              explain: explainDecline(err)
+            };
+            if (err instanceof _chunkPA6YD3HLcjs.PaymentDeclinedError) {
+              out.declined = true;
+              if (err.reasonCode) out.reasonCode = err.reasonCode;
+            }
+            const ref = err.ref;
+            if (typeof ref === "string") out.ref = ref;
+            return out;
           }
           throw err;
         }
@@ -3071,10 +3396,57 @@ function paymentTools(client) {
         const outcomes = await client.register(String(args.url), opts);
         return { outcomes };
       }
+    },
+    {
+      name: "piprail_budget",
+      description: "Read how much of your spend budget and time leash is left \u2014 per (network, asset) remaining, the session time envelope, and your spend so far. Use it in Mode A (headless) to self-check BEFORE paying, so you never discover the leash by hitting a decline. Read-only; moves no funds. NOTE: totals and the time envelope are in-memory for THIS process and reset on restart.",
+      annotations: {
+        title: "Check remaining budget",
+        readOnlyHint: true,
+        // reads the in-memory ledger + policy; never pays
+        idempotentHint: true
+        // a pure read
+      },
+      parameters: { type: "object", properties: {}, additionalProperties: false },
+      outputSchema: OPEN_OBJECT,
+      invoke: async () => {
+        const spent = client.spent();
+        const budget = client.budget();
+        return {
+          spent,
+          remaining: budget.byAsset,
+          session: budget.session,
+          report: formatSpendReport(spent)
+        };
+      }
+    },
+    {
+      name: "piprail_guide",
+      description: "Read the PipRail agent contract \u2014 the quote \u2192 plan \u2192 pay loop, how to read a refusal (and which declines are TERMINAL), the never-re-pay rule for broadcast-but-unconfirmed payments, and Mode A (headless) vs Mode B (supervised). Read-only; call it once if unsure how to use these tools.",
+      annotations: {
+        title: "How to use PipRail",
+        readOnlyHint: true,
+        idempotentHint: true
+      },
+      parameters: { type: "object", properties: {}, additionalProperties: false },
+      invoke: async () => ({ guide: PIPRAIL_AGENT_GUIDE })
     }
   ];
 }
 
+// src/classify.ts
+function classifyChallenge(challenge, opts) {
+  const accepts = _nullishCoalesce(challenge.accepts, () => ( []));
+  const offeredSchemes = [...new Set(accepts.map((a) => a.scheme))];
+  const offeredNetworks = [...new Set(accepts.map((a) => a.network))];
+  const onClientChain = accepts.some((a) => a.network === opts.network);
+  const payableScheme = accepts.some(
+    (a) => a.network === opts.network && opts.schemes.includes(a.scheme)
+  );
+  const verdict = accepts.length === 0 ? "NO_RAIL" : payableScheme ? "PAYABLE_RAIL" : onClientChain ? "UNPAYABLE_SCHEME" : "WRONG_CHAIN";
+  return { onClientChain, payableScheme, offeredSchemes, offeredNetworks, verdict };
+}
+
 // src/discovery.ts
 var GENERATOR = "@piprail/sdk \xB7 https://piprail.com";
 function buildBazaarExtension(descriptor = {}) {
@@ -3196,13 +3568,13 @@ async function settleViaFacilitator(input) {
   try {
     verify = await post(`${base2}/verify`, body, auth);
   } catch (err) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (verify.status !== 200) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify returned HTTP ${verify.status} (transport/auth error).`
     );
   }
@@ -3218,13 +3590,13 @@ async function settleViaFacilitator(input) {
   try {
     settle = await post(`${base2}/settle`, body, auth);
   } catch (err) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (settle.status !== 200) {
-    throw new (0, _chunkFTKVCP6Kcjs.SettlementError)(
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle returned HTTP ${settle.status} (transport/auth error).`
     );
   }
@@ -3290,7 +3662,7 @@ function createPaymentGate(options) {
           }
           net.assertValidPayTo(payTo);
           const { asset, decimals, symbol } = net.resolveToken(a.token);
-          const amountBase = _chunkFTKVCP6Kcjs.parseUnits.call(void 0, a.amount, decimals);
+          const amountBase = _chunkPA6YD3HLcjs.parseUnits.call(void 0, a.amount, decimals);
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
           if (options.exact) spec.exact = await resolveExactRail(net, asset);
           return spec;
@@ -3405,7 +3777,7 @@ function createPaymentGate(options) {
     const specs = await ready();
     const nonce = genNonce();
     const bazaar = options.discovery ? { bazaar: buildBazaarExtension(options.discovery === true ? {} : options.discovery) } : void 0;
-    const extensions = { ...bazaar, ..._optionalChain([opts, 'optionalAccess', _56 => _56.extensions]) };
+    const extensions = { ...bazaar, ..._optionalChain([opts, 'optionalAccess', _61 => _61.extensions]) };
     const challenge2 = {
       x402Version: 2,
       resource: {
@@ -3413,7 +3785,7 @@ function createPaymentGate(options) {
         ...options.description ? { description: options.description } : {}
       },
       accepts: buildAccepts(specs, nonce),
-      ..._optionalChain([opts, 'optionalAccess', _57 => _57.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _62 => _62.error]) ? { error: opts.error } : {},
       ...Object.keys(extensions).length > 0 ? { extensions } : {}
     };
     return { challenge: challenge2, requiredHeader: buildChallengeHeader(challenge2) };
@@ -3572,7 +3944,7 @@ function requirePayment(options) {
     try {
       result = await gate.verify(_nullishCoalesce(req.headers[HEADER_SIGNATURE], () => ( req.headers[HEADER_SIGNATURE_V1])));
     } catch (err) {
-      if (err instanceof _chunkFTKVCP6Kcjs.SettlementError) {
+      if (err instanceof _chunkPA6YD3HLcjs.SettlementError) {
         res.status(502);
         res.json({ x402Version: 2, error: "settlement_failed", detail: err.message });
         return;
@@ -3669,4 +4041,10 @@ function normaliseHeader(value) {
 
 
 
-exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkFTKVCP6Kcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkFTKVCP6Kcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkFTKVCP6Kcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkFTKVCP6Kcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkFTKVCP6Kcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkFTKVCP6Kcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkFTKVCP6Kcjs.NonReplayableBodyError; exports.PaymentDeclinedError = _chunkFTKVCP6Kcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkFTKVCP6Kcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkFTKVCP6Kcjs.PipRailError; exports.RecipientNotReadyError = _chunkFTKVCP6Kcjs.RecipientNotReadyError; exports.SettlementError = _chunkFTKVCP6Kcjs.SettlementError; exports.UnknownTokenError = _chunkFTKVCP6Kcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkFTKVCP6Kcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkFTKVCP6Kcjs.UnsupportedSchemeError; exports.WrongChainError = _chunkFTKVCP6Kcjs.WrongChainError; exports.WrongFamilyError = _chunkFTKVCP6Kcjs.WrongFamilyError; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.getDirectoryInfo = getDirectoryInfo; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.toInsufficientFundsError = _chunkFTKVCP6Kcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;
+
+
+
+
+
+
+exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkPA6YD3HLcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkPA6YD3HLcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkPA6YD3HLcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkPA6YD3HLcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkPA6YD3HLcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkPA6YD3HLcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkPA6YD3HLcjs.NonReplayableBodyError; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.PaymentDeclinedError = _chunkPA6YD3HLcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkPA6YD3HLcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkPA6YD3HLcjs.PipRailError; exports.RecipientNotReadyError = _chunkPA6YD3HLcjs.RecipientNotReadyError; exports.SettlementError = _chunkPA6YD3HLcjs.SettlementError; exports.UnknownTokenError = _chunkPA6YD3HLcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkPA6YD3HLcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkPA6YD3HLcjs.UnsupportedSchemeError; exports.WrongChainError = _chunkPA6YD3HLcjs.WrongChainError; exports.WrongFamilyError = _chunkPA6YD3HLcjs.WrongFamilyError; exports.agentGuide = agentGuide; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkPA6YD3HLcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;