@piprail/sdk 1.15.1 → 1.17.0

package/dist/index.cjs

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2;
 
 
 
@@ -136,9 +136,15 @@ var CHAINS = {
   bnb: {
     chain: _chains.bsc,
     tokens: {
-      // Binance-Peg tokens on BNB Chain are 18 decimals (not the usual 6).
+      // Binance-Peg tokens on BNB Chain are 18 decimals (not the usual 6). USDC/USDT here are
+      // Binance-Peg (NOT EIP-3009) → the `exact` rail uses Permit2.
       USDC: { address: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d", decimals: 18, symbol: "USDC" },
-      USDT: { address: "0x55d398326f99059fF775485246999027B3197955", decimals: 18, symbol: "USDT" }
+      USDT: { address: "0x55d398326f99059fF775485246999027B3197955", decimals: 18, symbol: "USDT" },
+      // FDUSD + USD1 ARE EIP-3009 (transferWithAuthorization) → the `exact` rail uses the gasless,
+      // no-Permit2-approve path. Both hardcode EIP-712 domain version "1" (no version() — the SDK
+      // derives it from DOMAIN_SEPARATOR). Verified on-chain (symbol/decimals/domain match).
+      FDUSD: { address: "0xc5f0f7b66764F6ec8C8Dff7BA683102295E16409", decimals: 18, symbol: "FDUSD" },
+      USD1: { address: "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", decimals: 18, symbol: "USD1" }
     }
   },
   avalanche: {
@@ -498,6 +504,9 @@ function sumTransfersTo(logs, asset, payTo) {
 
 
 
+
+
+
 var EXACT_NETWORK_SLUGS = {
   ethereum: 1,
   base: 8453,
@@ -505,7 +514,9 @@ var EXACT_NETWORK_SLUGS = {
   arbitrum: 42161,
   optimism: 10,
   polygon: 137,
-  avalanche: 43114
+  avalanche: 43114,
+  bnb: 56,
+  bsc: 56
 };
 function chainIdForExactNetwork(slug) {
   return _nullishCoalesce(EXACT_NETWORK_SLUGS[slug], () => ( null));
@@ -690,10 +701,25 @@ var eip3009Abi = [
     outputs: [{ type: "bool" }]
   },
   { type: "function", name: "name", stateMutability: "view", inputs: [], outputs: [{ type: "string" }] },
-  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ type: "string" }] }
+  { type: "function", name: "version", stateMutability: "view", inputs: [], outputs: [{ type: "string" }] },
+  // EIP-3009 tokens that DON'T expose version() still expose DOMAIN_SEPARATOR — we match it to
+  // DERIVE the hardcoded domain version (e.g. FDUSD / USD1 on BNB Chain both use "1").
+  { type: "function", name: "DOMAIN_SEPARATOR", stateMutability: "view", inputs: [], outputs: [{ type: "bytes32" }] }
 ];
 var ZERO_ADDR = "0x0000000000000000000000000000000000000000";
 var ZERO_NONCE = `0x${"00".repeat(32)}`;
+var EIP712_DOMAIN_TYPEHASH = _viem.keccak256.call(void 0, 
+  _viem.toHex.call(void 0, "EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
+);
+var EXACT_DOMAIN_VERSION_CANDIDATES = ["1", "2"];
+function eip712DomainSeparator(name, version, chainId, verifyingContract) {
+  return _viem.keccak256.call(void 0, 
+    _viem.encodeAbiParameters.call(void 0, 
+      [{ type: "bytes32" }, { type: "bytes32" }, { type: "bytes32" }, { type: "uint256" }, { type: "address" }],
+      [EIP712_DOMAIN_TYPEHASH, _viem.keccak256.call(void 0, _viem.toHex.call(void 0, name)), _viem.keccak256.call(void 0, _viem.toHex.call(void 0, version)), BigInt(chainId), verifyingContract]
+    )
+  );
+}
 async function readExactDomain(publicClient, asset) {
   if (asset === "native") return null;
   let token;
@@ -702,12 +728,10 @@ async function readExactDomain(publicClient, asset) {
   } catch (e7) {
     return null;
   }
+  let name;
   try {
-    const [name, version] = await Promise.all([
+    const [n] = await Promise.all([
       publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "name" }),
-      publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "version" }),
-      // The EIP-3009 probe: this view exists only on EIP-3009 tokens; it reverts on
-      // a plain ERC-20 / USDT, marking the token as not exact-payable.
       publicClient.readContract({
         address: token,
         abi: eip3009Abi,
@@ -715,11 +739,34 @@ async function readExactDomain(publicClient, asset) {
         args: [ZERO_ADDR, ZERO_NONCE]
       })
     ]);
-    if (typeof name !== "string" || typeof version !== "string" || !name || !version) return null;
-    return { name, version };
+    if (typeof n !== "string" || !n) return null;
+    name = n;
   } catch (e8) {
     return null;
   }
+  try {
+    const version = await publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "version" });
+    if (typeof version === "string" && version) return { name, version };
+  } catch (e9) {
+  }
+  return deriveExactDomainVersion(publicClient, token, name);
+}
+async function deriveExactDomainVersion(publicClient, token, name) {
+  let onchain;
+  let chainId;
+  try {
+    onchain = await publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "DOMAIN_SEPARATOR" });
+    chainId = await _asyncNullishCoalesce(await _asyncOptionalChain([publicClient, 'access', async _6 => _6.chain, 'optionalAccess', async _7 => _7.id]), async () => ( await publicClient.getChainId()));
+  } catch (e10) {
+    return null;
+  }
+  const target = onchain.toLowerCase();
+  for (const version of EXACT_DOMAIN_VERSION_CANDIDATES) {
+    if (eip712DomainSeparator(name, version, chainId, token).toLowerCase() === target) {
+      return { name, version };
+    }
+  }
+  return null;
 }
 function shorten(msg) {
   const oneLine = msg.replace(/\s+/g, " ").trim();
@@ -765,7 +812,7 @@ async function verifyAndSettleExactEvm(input) {
   let fromCode;
   try {
     fromCode = await publicClient.getCode({ address: from });
-  } catch (e9) {
+  } catch (e11) {
     return { ok: false, error: "tx_not_found", detail: `Could not read code at ${from} (transient RPC) \u2014 retry.` };
   }
   const isContractWallet = Boolean(fromCode && fromCode !== "0x");
@@ -801,7 +848,7 @@ async function verifyAndSettleExactEvm(input) {
     if (used) {
       return { ok: false, error: "tx_already_used", detail: `Authorization nonce ${nonce} already used or canceled on-chain.` };
     }
-  } catch (e10) {
+  } catch (e12) {
     return { ok: false, error: "tx_not_found", detail: "Could not read authorizationState (transient RPC) \u2014 retry." };
   }
   const baseArgs = [from, to, value, validAfter, validBefore, nonce];
@@ -874,6 +921,346 @@ async function verifyAndSettleExactEvm(input) {
   };
 }
 
+// src/drivers/evm/permit2.ts
+
+
+
+
+
+
+var PERMIT2_ADDRESS = "0x000000000022D473030F116dDEE9F6B43aC78BA3";
+var X402_EXACT_PERMIT2_PROXY = "0x402085c248EeA27D92E8b30b2C58ed07f9E20001";
+var PERMIT2_WITNESS_TYPES = {
+  PermitWitnessTransferFrom: [
+    { name: "permitted", type: "TokenPermissions" },
+    { name: "spender", type: "address" },
+    { name: "nonce", type: "uint256" },
+    { name: "deadline", type: "uint256" },
+    { name: "witness", type: "Witness" }
+  ],
+  TokenPermissions: [
+    { name: "token", type: "address" },
+    { name: "amount", type: "uint256" }
+  ],
+  Witness: [
+    { name: "to", type: "address" },
+    { name: "validAfter", type: "uint256" }
+  ]
+};
+var x402Permit2ProxyAbi = [
+  {
+    type: "function",
+    name: "settle",
+    stateMutability: "nonpayable",
+    outputs: [],
+    inputs: [
+      {
+        name: "permit",
+        type: "tuple",
+        components: [
+          {
+            name: "permitted",
+            type: "tuple",
+            components: [
+              { name: "token", type: "address" },
+              { name: "amount", type: "uint256" }
+            ]
+          },
+          { name: "nonce", type: "uint256" },
+          { name: "deadline", type: "uint256" }
+        ]
+      },
+      { name: "owner", type: "address" },
+      {
+        name: "witness",
+        type: "tuple",
+        components: [
+          { name: "to", type: "address" },
+          { name: "validAfter", type: "uint256" }
+        ]
+      },
+      { name: "signature", type: "bytes" }
+    ]
+  }
+];
+var permit2NonceBitmapAbi = [
+  {
+    type: "function",
+    name: "nonceBitmap",
+    stateMutability: "view",
+    inputs: [
+      { name: "owner", type: "address" },
+      { name: "word", type: "uint256" }
+    ],
+    outputs: [{ type: "uint256" }]
+  }
+];
+function shorten2(msg) {
+  const oneLine = msg.replace(/\s+/g, " ").trim();
+  return oneLine.length > 200 ? `${oneLine.slice(0, 200)}\u2026` : oneLine;
+}
+function randomPermit2Nonce() {
+  const g = globalThis.crypto;
+  if (!_optionalChain([g, 'optionalAccess', _8 => _8.getRandomValues])) {
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
+      "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the permit2 rail needs a CSPRNG nonce."
+    );
+  }
+  const raw = new Uint8Array(32);
+  g.getRandomValues(raw);
+  return BigInt(`0x${[...raw].map((b) => b.toString(16).padStart(2, "0")).join("")}`);
+}
+async function ensurePermit2Allowance(input) {
+  const { publicClient, walletClient, account, chain, token, amount } = input;
+  let allowance;
+  try {
+    allowance = await publicClient.readContract({
+      address: token,
+      abi: _viem.erc20Abi,
+      functionName: "allowance",
+      args: [account.address, PERMIT2_ADDRESS]
+    });
+  } catch (err) {
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
+      `permit2: couldn't read the Permit2 allowance for ${token} (${shorten2(err instanceof Error ? err.message : String(err))}).`
+    );
+  }
+  if (allowance >= amount) return void 0;
+  try {
+    const hash = await walletClient.writeContract({
+      account,
+      chain,
+      address: token,
+      abi: _viem.erc20Abi,
+      functionName: "approve",
+      args: [PERMIT2_ADDRESS, _viem.maxUint256]
+    });
+    await publicClient.waitForTransactionReceipt({ hash, confirmations: 1 });
+    return hash;
+  } catch (err) {
+    throw _nullishCoalesce(_chunkPA6YD3HLcjs.toInsufficientFundsError.call(void 0, err), () => ( new (0, _chunkPA6YD3HLcjs.SettlementError)(
+      `permit2: the one-time Permit2 approval for ${token} failed to broadcast (${shorten2(err instanceof Error ? err.message : String(err))}).`,
+      { cause: err }
+    )));
+  }
+}
+async function payPermit2Evm(input) {
+  const { publicClient, walletClient, account, chainId, chain, accept } = input;
+  let code;
+  try {
+    code = await publicClient.getCode({ address: account.address });
+  } catch (e13) {
+    code = void 0;
+  }
+  if (code && code !== "0x") {
+    throw new (0, _chunkPA6YD3HLcjs.UnsupportedSchemeError)(
+      `permit2 buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account. Pay via onchain-proof.`
+    );
+  }
+  const token = _viem.getAddress.call(void 0, accept.asset);
+  const payTo = _viem.getAddress.call(void 0, accept.payTo);
+  const value = BigInt(accept.amount);
+  const approvalTx = await ensurePermit2Allowance({
+    publicClient,
+    walletClient,
+    account,
+    chain,
+    token,
+    amount: value
+  });
+  const nonce = randomPermit2Nonce();
+  const deadline = BigInt(Math.floor(Date.now() / 1e3) + accept.maxTimeoutSeconds);
+  const validAfter = 0n;
+  const spender = _viem.getAddress.call(void 0, X402_EXACT_PERMIT2_PROXY);
+  const from = account.address;
+  const signature = await walletClient.signTypedData({
+    account,
+    domain: { name: "Permit2", chainId, verifyingContract: PERMIT2_ADDRESS },
+    types: PERMIT2_WITNESS_TYPES,
+    primaryType: "PermitWitnessTransferFrom",
+    message: {
+      permitted: { token, amount: value },
+      spender,
+      nonce,
+      deadline,
+      witness: { to: payTo, validAfter }
+    }
+  });
+  const permit2Authorization = {
+    permitted: { token, amount: value.toString() },
+    from,
+    spender,
+    nonce: nonce.toString(),
+    deadline: deadline.toString(),
+    witness: { to: payTo, validAfter: validAfter.toString() }
+  };
+  return {
+    payload: { signature, permit2Authorization },
+    payerFrom: from,
+    nonce: nonce.toString(),
+    ...approvalTx ? { approvalTx } : {}
+  };
+}
+async function verifyAndSettlePermit2Evm(input) {
+  const { publicClient, walletClient, account, chain, payload, accept } = input;
+  const token = _viem.getAddress.call(void 0, accept.asset);
+  const payTo = _viem.getAddress.call(void 0, accept.payTo);
+  const requiredAmount = BigInt(accept.amount);
+  const proxy = _viem.getAddress.call(void 0, X402_EXACT_PERMIT2_PROXY);
+  let from;
+  let spender;
+  let permittedToken;
+  let witnessTo;
+  let permittedAmount;
+  let nonce;
+  let deadline;
+  let validAfter;
+  const signature = payload.signature;
+  try {
+    const pa = payload.permit2Authorization;
+    from = _viem.getAddress.call(void 0, pa.from);
+    spender = _viem.getAddress.call(void 0, pa.spender);
+    permittedToken = _viem.getAddress.call(void 0, pa.permitted.token);
+    witnessTo = _viem.getAddress.call(void 0, pa.witness.to);
+    permittedAmount = BigInt(pa.permitted.amount);
+    nonce = BigInt(pa.nonce);
+    deadline = BigInt(pa.deadline);
+    validAfter = BigInt(pa.witness.validAfter);
+    if (!/^0x[0-9a-fA-F]+$/.test(signature)) throw new Error("signature must be hex");
+  } catch (err) {
+    return {
+      ok: false,
+      error: "signature_invalid",
+      detail: `Malformed permit2 authorization: ${err instanceof Error ? err.message : String(err)}.`
+    };
+  }
+  if (witnessTo !== payTo) {
+    return { ok: false, error: "wrong_recipient", detail: `Authorization pays witness.to ${witnessTo}, not ${payTo}.` };
+  }
+  if (permittedToken !== token) {
+    return { ok: false, error: "signature_invalid", detail: `Authorization permits token ${permittedToken}, not the rail's ${token}.` };
+  }
+  if (spender !== proxy) {
+    return { ok: false, error: "signature_invalid", detail: `Authorization spender ${spender} is not the x402ExactPermit2Proxy ${proxy}; it can't be settled here.` };
+  }
+  if (permittedAmount < requiredAmount) {
+    return { ok: false, error: "amount_too_low", detail: `Permitted ${permittedAmount}, required ${requiredAmount}.` };
+  }
+  const now = BigInt(Math.floor(Date.now() / 1e3));
+  if (deadline <= now) {
+    return { ok: false, error: "payment_expired", detail: `Permit2 deadline ${deadline} <= now ${now}.` };
+  }
+  let fromCode;
+  try {
+    fromCode = await publicClient.getCode({ address: from });
+  } catch (e14) {
+    return { ok: false, error: "tx_not_found", detail: `Could not read code at ${from} (transient RPC) \u2014 retry.` };
+  }
+  if (!(fromCode && fromCode !== "0x")) {
+    let recovered;
+    try {
+      recovered = await _viem.recoverTypedDataAddress.call(void 0, {
+        domain: { name: "Permit2", chainId: chain.id, verifyingContract: PERMIT2_ADDRESS },
+        types: PERMIT2_WITNESS_TYPES,
+        primaryType: "PermitWitnessTransferFrom",
+        message: {
+          permitted: { token: permittedToken, amount: permittedAmount },
+          spender,
+          nonce,
+          deadline,
+          witness: { to: witnessTo, validAfter }
+        },
+        signature
+      });
+    } catch (err) {
+      return { ok: false, error: "signature_invalid", detail: `Not a valid EIP-712 signature: ${shorten2(err instanceof Error ? err.message : String(err))}.` };
+    }
+    if (recovered !== from) {
+      return { ok: false, error: "signature_invalid", detail: `Signature recovered to ${recovered}, not the authorizer ${from}.` };
+    }
+  }
+  try {
+    const word = nonce >> 8n;
+    const bit = nonce & 0xffn;
+    const bitmap = await publicClient.readContract({
+      address: PERMIT2_ADDRESS,
+      abi: permit2NonceBitmapAbi,
+      functionName: "nonceBitmap",
+      args: [from, word]
+    });
+    if ((bitmap >> bit & 1n) === 1n) {
+      return { ok: false, error: "tx_already_used", detail: `Permit2 nonce ${nonce} already used or invalidated for ${from}.` };
+    }
+  } catch (e15) {
+    return { ok: false, error: "tx_not_found", detail: "Could not read the Permit2 nonce bitmap (transient RPC) \u2014 retry." };
+  }
+  const settleArgs = [
+    { permitted: { token: permittedToken, amount: permittedAmount }, nonce, deadline },
+    from,
+    { to: witnessTo, validAfter },
+    signature
+  ];
+  try {
+    await publicClient.simulateContract({
+      account,
+      address: proxy,
+      abi: x402Permit2ProxyAbi,
+      functionName: "settle",
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      args: settleArgs
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (/nonce|invalidated|used/i.test(msg)) return { ok: false, error: "tx_already_used", detail: "Permit2 nonce is used or invalidated." };
+    if (/expired|deadline|too early|not yet/i.test(msg)) return { ok: false, error: "payment_expired", detail: shorten2(msg) };
+    if (/signature/i.test(msg)) return { ok: false, error: "signature_invalid", detail: shorten2(msg) };
+    return { ok: false, error: "tx_reverted", detail: `permit2 settle would revert: ${shorten2(msg)}` };
+  }
+  let txHash;
+  try {
+    txHash = await walletClient.writeContract({
+      account,
+      chain,
+      address: proxy,
+      abi: x402Permit2ProxyAbi,
+      functionName: "settle",
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      args: settleArgs
+    });
+  } catch (err) {
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
+      `permit2 settle: the merchant relayer failed to broadcast the proxy settle (${shorten2(err instanceof Error ? err.message : String(err))}). The payer's signature is still valid and its nonce unused \u2014 fund/fix the relayer and the payer can retry.`,
+      { cause: err }
+    );
+  }
+  try {
+    const confirmations = _nullishCoalesce(accept.extra.minConfirmations, () => ( 1));
+    const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash, confirmations });
+    if (receipt.status !== "success") {
+      return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
+    }
+  } catch (err) {
+    throw new (0, _chunkPA6YD3HLcjs.SettlementError)(
+      `permit2 settle: broadcast ${txHash} but couldn't confirm it (${shorten2(err instanceof Error ? err.message : String(err))}).`,
+      { cause: err }
+    );
+  }
+  return {
+    ok: true,
+    receipt: {
+      scheme: "exact",
+      success: true,
+      network: accept.network,
+      transaction: txHash,
+      asset: accept.asset,
+      amount: accept.amount,
+      payer: from,
+      payTo: accept.payTo,
+      verifiedAt: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  };
+}
+
 // src/x402.ts
 var HEADER_REQUIRED = "payment-required";
 var HEADER_SIGNATURE = "payment-signature";
@@ -903,7 +1290,7 @@ function decodeBase64(b64) {
 function fromBase64Json(b64) {
   try {
     return JSON.parse(decodeBase64(b64));
-  } catch (e11) {
+  } catch (e16) {
     return null;
   }
 }
@@ -940,7 +1327,7 @@ async function parseChallenge(response) {
   try {
     const body = await response.clone().json();
     if (isValidChallenge(body)) return body;
-  } catch (e12) {
+  } catch (e17) {
   }
   return null;
 }
@@ -968,7 +1355,7 @@ function parseSignatureHeader(value) {
   if (!parsed || typeof parsed !== "object") return null;
   const v = parsed;
   const accepted = v.accepted;
-  const scheme = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _6 => _6.scheme]), () => ( v.scheme));
+  const scheme = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _9 => _9.scheme]), () => ( v.scheme));
   if (scheme !== "onchain-proof") return null;
   const payload = v.payload;
   if (!payload || typeof payload.txHash !== "string" || typeof payload.nonce !== "string") {
@@ -981,30 +1368,45 @@ function parseExactPaymentHeader(value) {
   if (!parsed || typeof parsed !== "object") return null;
   const v = parsed;
   const accepted = _nullishCoalesce(v.accepted, () => ( null));
-  const scheme = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _7 => _7.scheme]), () => ( v.scheme));
+  const scheme = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _10 => _10.scheme]), () => ( v.scheme));
   if (scheme !== "exact") return null;
-  const network = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _8 => _8.network]), () => ( v.network));
+  const network = _nullishCoalesce(_optionalChain([accepted, 'optionalAccess', _11 => _11.network]), () => ( v.network));
   if (typeof network !== "string") return null;
   const payload = v.payload;
   if (!payload || typeof payload !== "object") return null;
   const signature = payload.signature;
-  const authorization = payload.authorization;
-  if (typeof signature !== "string" || !authorization || typeof authorization !== "object") return null;
-  for (const k of ["from", "to", "value", "validAfter", "validBefore", "nonce"]) {
-    if (typeof authorization[k] !== "string") return null;
-  }
+  if (typeof signature !== "string") return null;
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
-  return {
-    x402Version,
-    network,
-    ...asset ? { asset } : {},
-    payload: {
-      signature,
-      authorization
-    },
-    raw: v
-  };
+  const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  const authorization = payload.authorization;
+  if (authorization && typeof authorization === "object") {
+    for (const k of ["from", "to", "value", "validAfter", "validBefore", "nonce"]) {
+      if (typeof authorization[k] !== "string") return null;
+    }
+    return {
+      ...base2,
+      method: "eip3009",
+      payload: { signature, authorization }
+    };
+  }
+  const p2 = payload.permit2Authorization;
+  if (p2 && typeof p2 === "object") {
+    const permitted = p2.permitted;
+    const witness = p2.witness;
+    if (!permitted || typeof permitted !== "object" || !witness || typeof witness !== "object") return null;
+    if (typeof permitted.token !== "string" || typeof permitted.amount !== "string") return null;
+    if (typeof witness.to !== "string" || typeof witness.validAfter !== "string") return null;
+    for (const k of ["from", "spender", "nonce", "deadline"]) {
+      if (typeof p2[k] !== "string") return null;
+    }
+    return {
+      ...base2,
+      method: "permit2",
+      payload: { signature, permit2Authorization: p2 }
+    };
+  }
+  return null;
 }
 function isValidChallenge(value) {
   if (!value || typeof value !== "object") return false;
@@ -1040,7 +1442,7 @@ var evmDriver = {
     let resolved;
     try {
       resolved = resolveChain(opts.chain, opts.rpcUrl);
-    } catch (e13) {
+    } catch (e18) {
       return null;
     }
     return makeEvmNetwork(resolved);
@@ -1096,7 +1498,7 @@ function makeEvmNetwork(resolved) {
       let normalized;
       try {
         normalized = _viem.getAddress.call(void 0, asset);
-      } catch (e14) {
+      } catch (e19) {
         return null;
       }
       for (const info of Object.values(resolved.tokens)) {
@@ -1157,12 +1559,13 @@ function makeEvmNetwork(resolved) {
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact") {
+        const permit2 = accept.extra.assetTransferMethod === "permit2";
         return _chunkPA6YD3HLcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: 0n,
           basis: "estimated",
-          detail: "gasless \u2014 the server/facilitator settles the signed authorization"
+          detail: permit2 ? "gasless after a one-time Permit2 approval; the server/facilitator settles the signed authorization" : "gasless \u2014 the server/facilitator settles the signed authorization"
         });
       }
       const gasLimit = accept.asset === "native" ? 21000n : 65000n;
@@ -1175,7 +1578,7 @@ function makeEvmNetwork(resolved) {
           basis: "estimated",
           detail: `~${gasLimit} gas @ ${gasPrice} wei/gas`
         });
-      } catch (e15) {
+      } catch (e20) {
         const gasPrice = 5000000000n;
         return _chunkPA6YD3HLcjs.nativeCost.call(void 0, {
           symbol,
@@ -1198,7 +1601,7 @@ function makeEvmNetwork(resolved) {
           functionName: "balanceOf",
           args: [owner]
         });
-      } catch (e16) {
+      } catch (e21) {
         token = null;
       }
       return { token, native };
@@ -1226,12 +1629,24 @@ function makeEvmNetwork(resolved) {
         minConfirmations: accept.extra.minConfirmations
       });
     },
-    // Standard x402 `exact` rail (EIP-3009), BUYER side — EVM only. Re-derives the
-    // token's EIP-712 domain on-chain, signs an authorization with the agent's own
-    // key, and returns it for the client to frame into PAYMENT-SIGNATURE. Never
-    // broadcasts. Throws UnsupportedSchemeError for a non-EIP-3009 token / contract signer.
+    // Standard x402 `exact` rail, BUYER side — EVM only. Routes on the rail's
+    // `assetTransferMethod`: `permit2` (any ERC-20 — e.g. Binance-Peg USDC on BNB, signs a
+    // Permit2 witness transfer + lazily does the one-time approval) or `eip3009` (re-derives
+    // the token's EIP-712 domain on-chain + signs transferWithAuthorization). Never broadcasts.
+    // Throws UnsupportedSchemeError for a contract signer (or a non-EIP-3009 token on the eip3009 path).
     async payExact(wallet, accept) {
       const a = wallet._native;
+      if (accept.extra.assetTransferMethod === "permit2") {
+        const { payload: payload2, payerFrom: payerFrom2, nonce: nonce2 } = await payPermit2Evm({
+          publicClient,
+          walletClient: a.walletClient,
+          account: a.account,
+          chainId: resolved.chainId,
+          chain: resolved.chain,
+          accept
+        });
+        return { payload: payload2, accepted: accept, payerFrom: payerFrom2, nonce: nonce2 };
+      }
       const { payload, payerFrom, nonce } = await payExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1247,6 +1662,16 @@ function makeEvmNetwork(resolved) {
     },
     async settleExactSelf({ relayer, payload, accept }) {
       const a = relayer._native;
+      if ("permit2Authorization" in payload) {
+        return verifyAndSettlePermit2Evm({
+          publicClient,
+          walletClient: a.walletClient,
+          account: a.account,
+          chain: resolved.chain,
+          payload,
+          accept
+        });
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1486,7 +1911,7 @@ async function searchOpenIndexes(opts = {}) {
 async function safeSearch(run) {
   try {
     return await run();
-  } catch (e17) {
+  } catch (e22) {
     return [];
   }
 }
@@ -1592,7 +2017,7 @@ async function register402Index(input) {
     if (res.ok) {
       const body = await res.json().catch(() => ({}));
       const msg = typeof body.message === "string" && body.message.length > 0 ? body.message : void 0;
-      const live = _optionalChain([body, 'access', _9 => _9.service, 'optionalAccess', _10 => _10.status]) === "active";
+      const live = _optionalChain([body, 'access', _12 => _12.service, 'optionalAccess', _13 => _13.status]) === "active";
       return {
         source: "402index",
         ok: true,
@@ -1619,7 +2044,7 @@ async function readIndexError(res) {
       (p) => typeof p === "string" && p.length > 0
     );
     return parts.length ? [...new Set(parts)].join(" \u2014 ") : void 0;
-  } catch (e18) {
+  } catch (e23) {
     return void 0;
   }
 }
@@ -1729,11 +2154,11 @@ async function readSiwxInfo(res) {
   try {
     const body = await res.json();
     const ext = body.extensions;
-    const siwx = _optionalChain([ext, 'optionalAccess', _11 => _11["sign-in-with-x"]]);
-    const info = _nullishCoalesce(_optionalChain([siwx, 'optionalAccess', _12 => _12.info]), () => ( siwx));
-    if (info && info.chainId == null && Array.isArray(_optionalChain([siwx, 'optionalAccess', _13 => _13.supportedChains]))) {
+    const siwx = _optionalChain([ext, 'optionalAccess', _14 => _14["sign-in-with-x"]]);
+    const info = _nullishCoalesce(_optionalChain([siwx, 'optionalAccess', _15 => _15.info]), () => ( siwx));
+    if (info && info.chainId == null && Array.isArray(_optionalChain([siwx, 'optionalAccess', _16 => _16.supportedChains]))) {
       const evm = siwx.supportedChains.find(
-        (c) => typeof _optionalChain([c, 'optionalAccess', _14 => _14.chainId]) === "string" && c.chainId.startsWith("eip155:")
+        (c) => typeof _optionalChain([c, 'optionalAccess', _17 => _17.chainId]) === "string" && c.chainId.startsWith("eip155:")
       );
       if (evm && typeof evm.chainId === "string") info.chainId = evm.chainId;
     }
@@ -1741,7 +2166,7 @@ async function readSiwxInfo(res) {
       return info;
     }
     return null;
-  } catch (e19) {
+  } catch (e24) {
     return null;
   }
 }
@@ -1789,7 +2214,7 @@ function mapRails(accepts) {
 }
 function matchesQuery(r, query) {
   const q = query.toLowerCase();
-  return r.resource.toLowerCase().includes(q) || (_nullishCoalesce(_optionalChain([r, 'access', _15 => _15.name, 'optionalAccess', _16 => _16.toLowerCase, 'call', _17 => _17(), 'access', _18 => _18.includes, 'call', _19 => _19(q)]), () => ( false))) || (_nullishCoalesce(_optionalChain([r, 'access', _20 => _20.description, 'optionalAccess', _21 => _21.toLowerCase, 'call', _22 => _22(), 'access', _23 => _23.includes, 'call', _24 => _24(q)]), () => ( false)));
+  return r.resource.toLowerCase().includes(q) || (_nullishCoalesce(_optionalChain([r, 'access', _18 => _18.name, 'optionalAccess', _19 => _19.toLowerCase, 'call', _20 => _20(), 'access', _21 => _21.includes, 'call', _22 => _22(q)]), () => ( false))) || (_nullishCoalesce(_optionalChain([r, 'access', _23 => _23.description, 'optionalAccess', _24 => _24.toLowerCase, 'call', _25 => _25(), 'access', _26 => _26.includes, 'call', _27 => _27(q)]), () => ( false)));
 }
 function pickString(o, ...keys) {
   for (const k of keys) {
@@ -1822,7 +2247,7 @@ function hostOf(url) {
   try {
     const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(url) ? url : `https://${url}`;
     return new URL(withScheme).hostname || url;
-  } catch (e20) {
+  } catch (e25) {
     return url;
   }
 }
@@ -1970,7 +2395,7 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
   }
   /** Running total (base units) already spent on this (network, asset). */
   totalFor(network, asset) {
-    return _nullishCoalesce(_optionalChain([this, 'access', _25 => _25.buckets, 'access', _26 => _26.get, 'call', _27 => _27(keyFor(network, asset)), 'optionalAccess', _28 => _28.total]), () => ( 0n));
+    return _nullishCoalesce(_optionalChain([this, 'access', _28 => _28.buckets, 'access', _29 => _29.get, 'call', _30 => _30(keyFor(network, asset)), 'optionalAccess', _31 => _31.total]), () => ( 0n));
   }
   /**
    * Sum of base-unit amounts for (network, asset) whose record `at` (ISO
@@ -2083,7 +2508,7 @@ var PipRailClient = (_class2 = class {
   safeEmit(event) {
     try {
       this.onEvent(event);
-    } catch (e21) {
+    } catch (e26) {
     }
   }
   /** Auto-mount the chain's driver, resolve the network, and bind the wallet — once. */
@@ -2113,7 +2538,7 @@ var PipRailClient = (_class2 = class {
    * as-is) or a plain object (serialised as JSON).
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _29 => _29.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _32 => _32.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -2144,7 +2569,7 @@ var PipRailClient = (_class2 = class {
    * "0.05 USDC on Base, within budget → pay it." No funds move.
    */
   async quote(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _30 => _30.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _33 => _33.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     return quote;
@@ -2163,7 +2588,7 @@ var PipRailClient = (_class2 = class {
    * on Tron, where a USD₮ transfer can cost real TRX.
    */
   async estimateCost(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _31 => _31.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _34 => _34.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { net, accept, quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     const cost = await net.estimateCost(accept);
@@ -2186,8 +2611,8 @@ var PipRailClient = (_class2 = class {
     return {
       session: {
         start,
-        expiresAt: _optionalChain([view, 'optionalAccess', _32 => _32.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
-        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _33 => _33.secondsRemaining]), () => ( null))
+        expiresAt: _optionalChain([view, 'optionalAccess', _35 => _35.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
+        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _36 => _36.secondsRemaining]), () => ( null))
       },
       byAsset: this.remaining()
     };
@@ -2200,7 +2625,7 @@ var PipRailClient = (_class2 = class {
    * never throws, never sums across tokens (no price oracle). PROCESS-SCOPED.
    */
   remaining() {
-    const maxTotal = _optionalChain([this, 'access', _34 => _34.opts, 'access', _35 => _35.policy, 'optionalAccess', _36 => _36.maxTotal]);
+    const maxTotal = _optionalChain([this, 'access', _37 => _37.opts, 'access', _38 => _38.policy, 'optionalAccess', _39 => _39.maxTotal]);
     return this.ledger.assetBuckets().map((b) => {
       const base2 = {
         network: b.network,
@@ -2252,7 +2677,7 @@ var PipRailClient = (_class2 = class {
    * the plan yourself. No funds move.
    */
   async planPayment(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _37 => _37.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _40 => _40.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const challenge = await parseChallenge(res);
     if (!challenge) {
@@ -2419,7 +2844,7 @@ var PipRailClient = (_class2 = class {
    * streams throw `NonReplayableBodyError`.
    */
   async fetch(url, init) {
-    const body = _optionalChain([init, 'optionalAccess', _38 => _38.body]);
+    const body = _optionalChain([init, 'optionalAccess', _41 => _41.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
       throw new (0, _chunkPA6YD3HLcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
@@ -2427,12 +2852,12 @@ var PipRailClient = (_class2 = class {
     }
     const firstResponse = await fetch(url, init);
     if (firstResponse.status !== 402) return firstResponse;
-    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _39 => _39.schemes]));
+    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _42 => _42.schemes]));
     const resolved = await this.resolveChallenge(url, firstResponse, schemes);
     const { net, wallet, challenge } = resolved;
     let accept = resolved.accept;
     let quote = resolved.quote;
-    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _40 => _40.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
+    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _43 => _43.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
     if (autoRoute) {
       const plan = await this.planFromChallenge(net, wallet, challenge, url, schemes);
       if (!plan.best) {
@@ -2645,13 +3070,13 @@ var PipRailClient = (_class2 = class {
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _41 => _41.decimals]), () => ( accept.extra.decimals));
+    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _44 => _44.decimals]), () => ( accept.extra.decimals));
     if (decimals === void 0) {
       throw new (0, _chunkPA6YD3HLcjs.InvalidEnvelopeError)(
         `challenge for ${accept.asset} on ${accept.network} states no decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
       );
     }
-    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _42 => _42.symbol]), () => ( accept.extra.symbol));
+    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _45 => _45.symbol]), () => ( accept.extra.symbol));
     const amountFormatted = _chunkPA6YD3HLcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf2(url),
@@ -2781,7 +3206,7 @@ var PipRailClient = (_class2 = class {
       accepted: accept,
       payload: { nonce: accept.extra.nonce, txHash: ref }
     };
-    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _43 => _43.headers]));
+    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _46 => _46.headers]));
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
     let lastResponse = null;
     let lastReason = null;
@@ -2796,7 +3221,7 @@ var PipRailClient = (_class2 = class {
         () => timeoutController.abort(),
         this.retryTimeoutMs
       );
-      const signal = _optionalChain([originalInit, 'optionalAccess', _44 => _44.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
+      const signal = _optionalChain([originalInit, 'optionalAccess', _47 => _47.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
       try {
         lastResponse = await fetch(url, {
           ..._nullishCoalesce(originalInit, () => ( {})),
@@ -2855,9 +3280,9 @@ var PipRailClient = (_class2 = class {
         `the ${net.family} family can't pay a standard 'exact' rail (EVM + EIP-3009 only).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _45 => _45.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _48 => _48.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payExact(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _46 => _46.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _49 => _49.headers]));
     headers.set(HEADER_SIGNATURE, buildExactSignatureHeader({ accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `exact: facilitator rejected nonce=${nonce} (${why2})` });
@@ -2874,12 +3299,12 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _47 => _47.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _50 => _50.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _48 => _48.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _51 => _51.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
@@ -2900,7 +3325,7 @@ var PipRailClient = (_class2 = class {
       if (response.ok && !(settle && settle.success === false)) {
         const receipt = parseReceipt(response);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _49 => _49.transaction]) || _optionalChain([receipt, 'optionalAccess', _50 => _50.transaction]) || `eip3009-nonce:${nonce}`;
+        const ref = _optionalChain([settle, 'optionalAccess', _52 => _52.transaction]) || _optionalChain([receipt, 'optionalAccess', _53 => _53.transaction]) || `eip3009-nonce:${nonce}`;
         this.recordSpend(quote, ref);
         return response;
       }
@@ -2924,14 +3349,14 @@ var PipRailClient = (_class2 = class {
   }
 }, _class2);
 function throwIfAborted(signal) {
-  if (_optionalChain([signal, 'optionalAccess', _51 => _51.aborted])) {
+  if (_optionalChain([signal, 'optionalAccess', _54 => _54.aborted])) {
     throw _nullishCoalesce(signal.reason, () => ( new DOMException("This operation was aborted.", "AbortError")));
   }
 }
 function safeBig(s) {
   try {
     return BigInt(s);
-  } catch (e22) {
+  } catch (e27) {
     return 0n;
   }
 }
@@ -2967,10 +3392,10 @@ function buildFundingHint(options, chainLabel) {
     return `Couldn't fully read your wallet on ${chainLabel} (RPC throttled) \u2014 retry; you may already be able to pay ${target.quote.amountFormatted} ${sym}.`;
   }
   const parts = [];
-  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _52 => _52.shortfall, 'optionalAccess', _53 => _53.token])) {
+  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _55 => _55.shortfall, 'optionalAccess', _56 => _56.token])) {
     parts.push(`top up ${target.shortfall.token} ${sym}`);
   }
-  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _54 => _54.shortfall, 'optionalAccess', _55 => _55.native])) {
+  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _57 => _57.shortfall, 'optionalAccess', _58 => _58.native])) {
     parts.push(`add ~${target.shortfall.native} ${target.cost.feeSymbol} for gas`);
   }
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
@@ -2984,7 +3409,7 @@ async function planAcross(clients, url, init) {
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
     url,
-    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _56 => _56.accept, 'access', _57 => _57.network]), () => ( live[0].network)),
+    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _59 => _59.accept, 'access', _60 => _60.network]), () => ( live[0].network)),
     status,
     payable: best !== null,
     best,
@@ -3014,7 +3439,7 @@ function reasonCodeForPolicy(code) {
 function hostOf2(url) {
   try {
     return new URL(url).hostname;
-  } catch (e23) {
+  } catch (e28) {
     return url;
   }
 }
@@ -3031,8 +3456,8 @@ function isReplayableBodyInit(value) {
 async function readInvalidReason(response) {
   try {
     const body = await response.clone().json();
-    const ext = _optionalChain([body, 'optionalAccess', _58 => _58.extensions]);
-    const piprail = _optionalChain([ext, 'optionalAccess', _59 => _59.piprail]);
+    const ext = _optionalChain([body, 'optionalAccess', _61 => _61.extensions]);
+    const piprail = _optionalChain([ext, 'optionalAccess', _62 => _62.piprail]);
     if (piprail && typeof piprail.code === "string") {
       return {
         error: piprail.code,
@@ -3051,10 +3476,10 @@ async function readInvalidReason(response) {
         detail: typeof body.invalidMessage === "string" ? body.invalidMessage : ""
       };
     }
-  } catch (e24) {
+  } catch (e29) {
   }
   const settle = parseSettleResponse(response);
-  if (_optionalChain([settle, 'optionalAccess', _60 => _60.errorReason])) return { error: settle.errorReason, detail: "" };
+  if (_optionalChain([settle, 'optionalAccess', _63 => _63.errorReason])) return { error: settle.errorReason, detail: "" };
   return null;
 }
 
@@ -3168,7 +3593,7 @@ async function readBody(res) {
   if (!text) return null;
   try {
     return JSON.parse(text);
-  } catch (e25) {
+  } catch (e30) {
     return text;
   }
 }
@@ -3479,7 +3904,7 @@ function buildBazaarExtension(descriptor = {}) {
 function pathOf(url) {
   try {
     return new URL(url).pathname || "/";
-  } catch (e26) {
+  } catch (e31) {
     return url.startsWith("/") ? url : `/${url}`;
   }
 }
@@ -3552,7 +3977,7 @@ async function post(url, body, headers) {
   let json = null;
   try {
     json = await res.json();
-  } catch (e27) {
+  } catch (e32) {
   }
   return { status: res.status, json };
 }
@@ -3670,7 +4095,7 @@ function createPaymentGate(options) {
       );
       if (options.exact && !specs.some((s) => s.exact)) {
         throw new Error(
-          "requirePayment: `exact` was requested but none of the offered rails support it. The standard `exact` rail is EVM + EIP-3009 only (USDC / EURC) \u2014 not native coins, not USDT, not non-EVM chains. Offer an EVM EIP-3009 token, or drop `exact`."
+          "requirePayment: `exact` was requested but none of the offered rails support it. The standard `exact` rail is EVM ERC-20 only \u2014 EIP-3009 (USDC / EURC) or Permit2 (any ERC-20, e.g. Binance-Peg USDC on BNB) \u2014 NOT native coins, NOT non-EVM chains. Offer an EVM ERC-20 token, or drop `exact`."
         );
       }
       return specs;
@@ -3683,26 +4108,39 @@ function createPaymentGate(options) {
   }
   async function resolveExactRail(net, asset) {
     const cfg = options.exact;
-    if (net.family !== "evm" || asset === "native" || !net.exactDomain || !net.settleExactSelf) {
+    if (net.family !== "evm" || asset === "native" || !net.settleExactSelf) {
       return void 0;
     }
-    const domain = await net.exactDomain(asset);
-    if (!domain) {
-      throw new Error(
-        `requirePayment: \`exact\` requested for asset ${asset} on ${net.network}, but it isn't an EIP-3009 token (couldn't read name()/version()/authorizationState). The exact rail supports USDC / EURC and other EIP-3009 tokens \u2014 USDT and native coins need onchain-proof. (Or check your rpcUrl is reachable.)`
-      );
+    const want = _nullishCoalesce(cfg.method, () => ( "auto"));
+    let method;
+    let domain;
+    if (want === "permit2") {
+      method = "permit2";
+    } else {
+      const d = net.exactDomain ? await net.exactDomain(asset) : null;
+      if (d) {
+        method = "eip3009";
+        domain = d;
+      } else if (want === "eip3009") {
+        throw new Error(
+          `requirePayment: exact \`method: 'eip3009'\` requested for ${asset} on ${net.network}, but it isn't an EIP-3009 token (no name()/version()/authorizationState). Use \`method: 'permit2'\` (any ERC-20, e.g. Binance-Peg USDC on BNB) or \`'auto'\`. (Or check your rpcUrl is reachable.)`
+        );
+      } else {
+        method = "permit2";
+      }
     }
     if (cfg.settle === "self") {
       if (cfg.relayer === void 0) {
         throw new Error(
-          "requirePayment: exact `settle: 'self'` needs a `relayer` wallet (the gas-paying key that broadcasts transferWithAuthorization), e.g. exact: { settle: 'self', relayer: { privateKey } }."
+          "requirePayment: exact `settle: 'self'` needs a `relayer` wallet (the gas-paying key that broadcasts the settle), e.g. exact: { settle: 'self', relayer: { privateKey } }."
         );
       }
       const relayer = net.bindWallet(cfg.relayer);
-      return { domain, mode: { kind: "self", relayer } };
+      return { method, ...domain ? { domain } : {}, mode: { kind: "self", relayer } };
     }
     return {
-      domain,
+      method,
+      ...domain ? { domain } : {},
       mode: {
         kind: "facilitator",
         url: cfg.settle.facilitator,
@@ -3746,7 +4184,7 @@ function createPaymentGate(options) {
     };
   }
   function buildExactAccept(s) {
-    const d = s.exact.domain;
+    const rail = s.exact;
     return {
       scheme: "exact",
       network: s.net.network,
@@ -3755,9 +4193,8 @@ function createPaymentGate(options) {
       payTo: s.payTo,
       maxTimeoutSeconds,
       extra: {
-        assetTransferMethod: "eip3009",
-        name: d.name,
-        version: d.version,
+        assetTransferMethod: rail.method,
+        ...rail.domain ? { name: rail.domain.name, version: rail.domain.version } : {},
         minConfirmations,
         decimals: s.decimals,
         amountFormatted: s.amountFormatted,
@@ -3777,7 +4214,7 @@ function createPaymentGate(options) {
     const specs = await ready();
     const nonce = genNonce();
     const bazaar = options.discovery ? { bazaar: buildBazaarExtension(options.discovery === true ? {} : options.discovery) } : void 0;
-    const extensions = { ...bazaar, ..._optionalChain([opts, 'optionalAccess', _61 => _61.extensions]) };
+    const extensions = { ...bazaar, ..._optionalChain([opts, 'optionalAccess', _64 => _64.extensions]) };
     const challenge2 = {
       x402Version: 2,
       resource: {
@@ -3785,7 +4222,7 @@ function createPaymentGate(options) {
         ...options.description ? { description: options.description } : {}
       },
       accepts: buildAccepts(specs, nonce),
-      ..._optionalChain([opts, 'optionalAccess', _62 => _62.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _65 => _65.error]) ? { error: opts.error } : {},
       ...Object.keys(extensions).length > 0 ? { extensions } : {}
     };
     return { challenge: challenge2, requiredHeader: buildChallengeHeader(challenge2) };
@@ -3804,13 +4241,44 @@ function createPaymentGate(options) {
     });
     return { kind: "invalid", error: code, detail, challenge: c, requiredHeader, statusCode: 402 };
   }
+  function enrichReceipt(spec, receipt) {
+    let amountFormatted = receipt.amount;
+    try {
+      amountFormatted = _chunkPA6YD3HLcjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
+    } catch (e33) {
+    }
+    return {
+      ...receipt,
+      decimals: spec.decimals,
+      ...spec.symbol ? { symbol: spec.symbol } : {},
+      amountFormatted,
+      idempotencyKey: receipt.transaction
+    };
+  }
+  function reportOnPaidError(error, receipt) {
+    if (!options.onPaidError) return;
+    try {
+      options.onPaidError(error, receipt);
+    } catch (e34) {
+    }
+  }
   function fireOnPaid(receipt) {
-    if (options.onPaid) {
-      try {
-        options.onPaid(receipt);
-      } catch (e28) {
-      }
+    if (!options.onPaid) return;
+    let outcome;
+    try {
+      outcome = options.onPaid(receipt);
+    } catch (err) {
+      reportOnPaidError(err, receipt);
+      return;
     }
+    if (outcome != null && typeof outcome.then === "function") {
+      return Promise.resolve(outcome).catch((err) => reportOnPaidError(err, receipt));
+    }
+  }
+  async function deliverOnPaid(spec, receipt) {
+    const paid = enrichReceipt(spec, receipt);
+    if (options.awaitOnPaid) await fireOnPaid(paid);
+    else void fireOnPaid(paid);
   }
   async function describe(resourceUrl = "") {
     const specs = await ready();
@@ -3854,7 +4322,7 @@ function createPaymentGate(options) {
       return rejection(result.error, result.detail);
     }
     await settleTx(ref, true);
-    fireOnPaid(result.receipt);
+    await deliverOnPaid(spec, result.receipt);
     return { kind: "paid", receipt: result.receipt, receiptHeader: buildReceiptHeader(result.receipt) };
   }
   async function verifyExact(exact) {
@@ -3877,7 +4345,8 @@ function createPaymentGate(options) {
         `No \`exact\` rail offered for ${exact.network}${exact.asset ? `/${exact.asset}` : ""} (offered: ${exactSpecs.map((s) => `${s.asset}@${s.net.network}`).join(", ")}).`
       );
     }
-    const nonce = exact.payload.authorization.nonce;
+    const auth = "permit2Authorization" in exact.payload ? exact.payload.permit2Authorization : exact.payload.authorization;
+    const nonce = auth.nonce;
     if (await claimTx(nonce)) {
       return rejection("tx_already_used", `Authorization nonce ${nonce} was already redeemed.`);
     }
@@ -3909,7 +4378,7 @@ function createPaymentGate(options) {
             extra: { name: _nullishCoalesce(accept.extra.name, () => ( "")), version: _nullishCoalesce(accept.extra.version, () => ( "")) }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
-          payerHint: exact.payload.authorization.from
+          payerHint: auth.from
         });
       }
     } catch (err) {
@@ -3921,7 +4390,7 @@ function createPaymentGate(options) {
       return rejection(result.error, result.detail);
     }
     await settleTx(nonce, true);
-    fireOnPaid(result.receipt);
+    await deliverOnPaid(spec, result.receipt);
     return { kind: "paid", receipt: result.receipt, receiptHeader: buildReceiptHeader(result.receipt) };
   }
   async function verify(paymentSignature) {
@@ -3975,6 +4444,114 @@ function normaliseHeader(value) {
   return value;
 }
 
+// src/receipts.ts
+var DEFAULT_RETRIES = 5;
+var DEFAULT_TIMEOUT_MS = 1e4;
+function defaultBackoff(attempt) {
+  const base2 = Math.min(3e4, 2 ** (attempt - 1) * 500);
+  return Math.round(base2 * (0.5 + Math.random()));
+}
+function isRetryableStatus(status) {
+  return status === 408 || status === 429 || status >= 500;
+}
+var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
+async function signBody(secret, body) {
+  const subtle = _optionalChain([globalThis, 'access', _66 => _66.crypto, 'optionalAccess', _67 => _67.subtle]);
+  if (!subtle) return null;
+  try {
+    const enc = new TextEncoder();
+    const key = await subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, [
+      "sign"
+    ]);
+    const sig = await subtle.sign("HMAC", key, enc.encode(body));
+    const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+    return `sha256=${hex}`;
+  } catch (e35) {
+    return null;
+  }
+}
+async function deliverReceipt(receipt, options) {
+  const {
+    url,
+    secret,
+    retries = DEFAULT_RETRIES,
+    timeoutMs = DEFAULT_TIMEOUT_MS,
+    headers = {},
+    signatureHeader = "piprail-signature",
+    idempotencyHeader = "idempotency-key",
+    backoff = defaultBackoff,
+    fetchImpl = globalThis.fetch,
+    onAttempt
+  } = options;
+  if (typeof fetchImpl !== "function") {
+    return { delivered: false, attempts: 0, error: "no fetch implementation available" };
+  }
+  const body = JSON.stringify(receipt);
+  const signature = secret ? await signBody(secret, body) : null;
+  const baseHeaders = {
+    ...headers,
+    "content-type": "application/json",
+    [idempotencyHeader]: receipt.idempotencyKey,
+    ...signature ? { [signatureHeader]: signature } : {}
+  };
+  const maxAttempts = Math.max(1, retries + 1);
+  let lastStatus;
+  let lastError;
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let ok = false;
+    let status;
+    let error;
+    try {
+      const res = await fetchImpl(url, {
+        method: "POST",
+        headers: baseHeaders,
+        body,
+        signal: controller.signal
+      });
+      status = res.status;
+      lastStatus = status;
+      ok = res.ok;
+      if (!ok) {
+        error = `HTTP ${status}`;
+        lastError = error;
+      }
+    } catch (err) {
+      error = err instanceof Error ? err.message : String(err);
+      lastError = error;
+    } finally {
+      clearTimeout(timer);
+    }
+    const retryable = status === void 0 ? true : isRetryableStatus(status);
+    const willRetry = !ok && retryable && attempt < maxAttempts;
+    try {
+      _optionalChain([onAttempt, 'optionalCall', _68 => _68({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+    } catch (e36) {
+    }
+    if (ok) return { delivered: true, attempts: attempt, status };
+    if (!willRetry) {
+      return {
+        delivered: false,
+        attempts: attempt,
+        ...lastStatus !== void 0 ? { status: lastStatus } : {},
+        ...lastError ? { error: lastError } : {}
+      };
+    }
+    await sleep(backoff(attempt));
+  }
+  return {
+    delivered: false,
+    attempts: maxAttempts,
+    ...lastStatus !== void 0 ? { status: lastStatus } : {},
+    ...lastError ? { error: lastError } : {}
+  };
+}
+
+
+
+
+
 
 
 
@@ -4047,4 +4624,4 @@ function normaliseHeader(value) {
 
 
 
-exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkPA6YD3HLcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkPA6YD3HLcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkPA6YD3HLcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkPA6YD3HLcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkPA6YD3HLcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkPA6YD3HLcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkPA6YD3HLcjs.NonReplayableBodyError; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.PaymentDeclinedError = _chunkPA6YD3HLcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkPA6YD3HLcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkPA6YD3HLcjs.PipRailError; exports.RecipientNotReadyError = _chunkPA6YD3HLcjs.RecipientNotReadyError; exports.SettlementError = _chunkPA6YD3HLcjs.SettlementError; exports.UnknownTokenError = _chunkPA6YD3HLcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkPA6YD3HLcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkPA6YD3HLcjs.UnsupportedSchemeError; exports.WrongChainError = _chunkPA6YD3HLcjs.WrongChainError; exports.WrongFamilyError = _chunkPA6YD3HLcjs.WrongFamilyError; exports.agentGuide = agentGuide; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkPA6YD3HLcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;
+exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkPA6YD3HLcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkPA6YD3HLcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkPA6YD3HLcjs.InvalidEnvelopeError; exports.MaxRetriesExceededError = _chunkPA6YD3HLcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkPA6YD3HLcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkPA6YD3HLcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkPA6YD3HLcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.PaymentDeclinedError = _chunkPA6YD3HLcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkPA6YD3HLcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkPA6YD3HLcjs.PipRailError; exports.RecipientNotReadyError = _chunkPA6YD3HLcjs.RecipientNotReadyError; exports.SettlementError = _chunkPA6YD3HLcjs.SettlementError; exports.UnknownTokenError = _chunkPA6YD3HLcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkPA6YD3HLcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkPA6YD3HLcjs.UnsupportedSchemeError; exports.WrongChainError = _chunkPA6YD3HLcjs.WrongChainError; exports.WrongFamilyError = _chunkPA6YD3HLcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkPA6YD3HLcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;