@piprail/sdk 1.23.0 → 1.25.0

package/CHANGELOG.md

@@ -4,6 +4,67 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [1.25.0] — 2026-06-15 — more keyless facilitators (live-verified)
+
+### Added — `KNOWN_FACILITATORS` grows beyond PayAI
+
+- **`KNOWN_FACILITATORS`** now seeds three more keyless facilitators, each **live-settled** on mainnet
+  through PipRail (a real `exact` payment, buyer paid zero gas), not just read from `/supported`:
+  **xpay** on Base (EIP-3009), and **OpenFacilitator** + **Corbits** on Solana (SVM). So
+  `firstKeylessFacilitator()` / the `exact: true` shorthand can resolve a keyless sponsor on more
+  networks, with redundancy beyond PayAI.
+- **Daydreams** and **Questflow** are deliberately **not** seeded: their `/supported` is public but
+  `/verify` returns `401` (an API key is required), so they aren't keyless for *settlement*. A public
+  `/supported` is not proof of keyless settlement — every seeded entry carries a dated, live-verified note.
+
+### Notes
+
+- Pure data + comments; **no behaviour change** to existing rails or defaults. The full, current provider
+  matrix (incl. key-required and self-host options, with on-chain tx proofs) lives in the docs:
+  [Facilitator coverage](https://docs.piprail.com/accepting-payments/facilitator-coverage/).
+
+## [1.24.0] — 2026-06-14 — multi-chain buying (one buyer, a wallet per chain)
+
+### Added — pay a 402 on whichever chain it asks for
+
+- **`MultiChainPayer`** — a `PipRailClient` is bound to ONE chain + ONE wallet (an EVM key can't sign a
+  Solana tx). `MultiChainPayer.fromWallets({ wallets: { base: { privateKey }, solana: { secretKey }, … }, policy })`
+  carries one wallet per chain and exposes a single `fetch`/`get`/`post`/`planPayment`/`canAfford`/`quote`/
+  `discover`/`register`/`spent`/`budget`. On a 402 it surveys every funded chain and pays the FIRST chain
+  you listed that can actually settle — through each client's own spend policy, `onBeforePay`, retries, and
+  replay-protection. No price oracle, no backend, no custody; across coins the order you list the chains is
+  the preference (within a chain, the cheapest-gas rail). Also `new MultiChainPayer([...clients])` for full
+  control (e.g. custom-EVM viem `Chain`s). `schemes` (incl. the gasless `exact` rail) propagates to every
+  chain's client.
+- **`fetchAcross(clients, url, init?)`** — the EXECUTION counterpart to `planAcross`: plan across an array
+  of single-chain clients and pay, on its owning client, the rail `planAcross` reports as `best` (the first
+  funded chain that can settle). Throws `PaymentDeclinedError` with a merged, per-chain funding hint when
+  no chain can settle.
+- **`PayingClient`** — the shared read-+-pay interface `paymentTools` now accepts; both `PipRailClient` and
+  `MultiChainPayer` satisfy it, so the agent toolkit (and the MCP) wrap either unchanged.
+- **`piprail_register` agent tool** gains optional `network` + `asset` params, so a multi-chain agent can
+  advertise a listing on a specific chain instead of defaulting to the first wallet's chain.
+
+### Changed
+
+- **Cross-chain `best` selection is now your PREFERENCE order, not raw gas magnitude.** `planAcross` /
+  `fetchAcross` no longer compare gas fees across different native coins (base units aren't comparable —
+  e.g. EVM wei vs Solana lamports — and there's no oracle), which previously let a small-base-unit coin
+  win regardless of real cost. They now pay the FIRST chain you list that can settle (within a chain, the
+  cheapest-gas rail still wins) — matching the documented contract. Single-chain `PipRailClient` ranking is
+  unchanged.
+- **`planAcross` now propagates a TOTAL outage.** If EVERY client fails to reach the resource it throws
+  (like a single client) instead of returning `null` — so `canAfford`/`quote` can't report a false
+  "affordable"/"not-gated". A single chain being down still just drops that chain.
+- **Clearer multi-chain decline message.** When no funded chain can settle, `planAcross`'s `fundingHint`
+  (and the `PaymentDeclinedError` `fetchAcross` throws) now names EVERY funded chain's own blocker — "top up
+  X USDC on base · add ~Y POL gas on polygon" — instead of only the first. Chains the 402 never offered are
+  dropped as noise when another chain is close; if none of your chains are offered, it says where the 402
+  IS payable. Per-rail `blockers`/`warnings` stay machine-readable for agents that branch programmatically.
+
+Single-chain `PipRailClient` behaviour is byte-identical. Examples: `examples/multi-chain` (routing + a
+live gasless-`exact` BNB Permit2 settlement through `MultiChainPayer`).
+
 ## [1.23.0] — 2026-06-14 — self-describing endpoints + discovery reach
 
 ### Added — self-describing, more discoverable endpoints (discoverability plan: Phases 1, 2, 4, 5)
@@ -1022,6 +1083,8 @@ straight into your wallet. The API is small and self-contained.
   to your wallet; PipRail never holds funds.
 - `viem ^2.21` is a peer dependency. Node 20+ or a modern browser.
 
+[1.25.0]: https://www.npmjs.com/package/@piprail/sdk
+[1.24.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.15.1]: https://www.npmjs.com/package/@piprail/sdk
 [1.15.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.14.0]: https://www.npmjs.com/package/@piprail/sdk

package/README.md

@@ -36,6 +36,33 @@ const client = new PipRailClient({ chain: 'base', wallet: { privateKey: process.
 const res = await client.fetch('https://api.example.com/report') // hits the 402, pays it, retries with proof
 ```
 
+## Pay across chains — one buyer, a wallet per chain
+
+A client is bound to one chain (an EVM key can't sign a Solana tx). To pay a 402
+on **whatever chain it asks for**, give a `MultiChainPayer` one wallet per chain —
+it surveys every chain you hold and pays the **first one you listed** that can settle
+(your preference; within a chain, the cheapest-gas rail — there's no oracle to compare
+gas across coins):
+
+```ts
+import { MultiChainPayer } from '@piprail/sdk'
+
+const payer = MultiChainPayer.fromWallets({
+  wallets: {
+    base:   { privateKey: process.env.EVM_KEY },     // one EVM key works on every EVM chain
+    solana: { secretKey:  process.env.SOLANA_KEY },
+    xrpl:   { seed:       process.env.XRPL_SEED },
+  },
+  policy: { maxAmount: '1.00', maxTotal: '10.00', tokens: ['USDC', 'USDT'] }, // one budget, every chain
+})
+
+await payer.planPayment(url) // read-only: every chain ranked, payable-first in your listed order
+const res = await payer.get(url) // pays on the first chain that can settle — same spend policy, no manual routing
+```
+
+Built on `planAcross` / `fetchAcross` (the same composable primitives, for when you
+already hold an array of clients). See [`examples/multi-chain`](../examples/multi-chain).
+
 The same app can **take** payments and **make** them. → [Making payments](https://docs.piprail.com/making-payments/piprail-client/)
 
 ---
@@ -46,7 +73,7 @@ The same app can **take** payments and **make** them. → [Making payments](http
 |---|---|
 | **[Getting started](https://docs.piprail.com/getting-started/introduction/)** | Install · quickstart · how it works |
 | **[Accepting payments](https://docs.piprail.com/accepting-payments/require-payment-and-gate/)** | `requirePayment` · `createPaymentGate` · the `exact` rail |
-| **[Making payments](https://docs.piprail.com/making-payments/piprail-client/)** | `PipRailClient` · `quote` · `estimateCost` · `planPayment` · auto-route |
+| **[Making payments](https://docs.piprail.com/making-payments/piprail-client/)** | `PipRailClient` · `quote` · `estimateCost` · `planPayment` · auto-route · `MultiChainPayer` |
 | **[Spend controls](https://docs.piprail.com/spend-controls/payment-policy/)** | Budgets · time envelope · the spend ledger |
 | **[Agent toolkit](https://docs.piprail.com/agent-toolkit/payment-tools/)** | `paymentTools` · the agent guide · NL renderers |
 | **[Discovery](https://docs.piprail.com/discovery/discover-and-register/)** | Find & be found on the open x402 indexes ($0, no backend) |

package/dist/index.cjs

@@ -3493,6 +3493,33 @@ function rankOptions(options) {
     return 0;
   });
 }
+function rankAcross(plans) {
+  const rank = { payable: 0, unknown: 1, blocked: 2 };
+  return plans.flatMap((p) => p.options).sort((a, b) => rank[a.state] - rank[b.state]);
+}
+async function planEachClient(clients, url, init) {
+  const settled = await Promise.allSettled(clients.map((c) => c.planPayment(url, init)));
+  const live = [];
+  let anyReached = false;
+  let firstError;
+  settled.forEach((s, i) => {
+    if (s.status === "fulfilled") {
+      anyReached = true;
+      if (s.value != null) live.push({ client: clients[i], plan: s.value });
+    } else if (firstError === void 0) {
+      firstError = s.reason;
+    }
+  });
+  if (live.length === 0 && !anyReached) {
+    throw _nullishCoalesce(firstError, () => ( new Error("planAcross: every client failed to reach the resource.")));
+  }
+  return live;
+}
+function mergeDeclineHint(plans) {
+  const actionable = plans.filter((p) => p.options.length > 0 && p.fundingHint).map((p) => p.fundingHint);
+  const chosen = actionable.length ? actionable : plans.map((p) => p.fundingHint).filter(Boolean);
+  return chosen.length ? [...new Set(chosen)].join(" \xB7 ") : null;
+}
 function buildFundingHint(options, chainLabel) {
   if (options.length === 0) return null;
   const target = [...options].sort((a, b) => a.blockers.length - b.blockers.length)[0];
@@ -3519,10 +3546,10 @@ function buildFundingHint(options, chainLabel) {
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
 }
 async function planAcross(clients, url, init) {
-  const plans = await Promise.all(clients.map((c) => c.planPayment(url, init).catch(() => null)));
-  const live = plans.filter((p) => p != null);
+  if (clients.length === 0) return null;
+  const live = (await planEachClient(clients, url, init)).map((p) => p.plan);
   if (live.length === 0) return null;
-  const options = rankOptions(live.flatMap((p) => p.options));
+  const options = rankAcross(live);
   const best = _nullishCoalesce(options.find((o) => o.state === "payable"), () => ( null));
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
@@ -3532,10 +3559,25 @@ async function planAcross(clients, url, init) {
     payable: best !== null,
     best,
     options,
-    // First non-null hint across clients — each already names its chain.
-    fundingHint: best ? null : _nullishCoalesce(live.map((p) => p.fundingHint).find(Boolean), () => ( null))
+    // Merge EVERY funded chain's blocker into one clear sentence (not just the first) —
+    // see mergeDeclineHint. `null` when a rail is payable.
+    fundingHint: best ? null : mergeDeclineHint(live)
   };
 }
+async function fetchAcross(clients, url, init) {
+  if (clients.length === 0) {
+    throw new TypeError("fetchAcross needs at least one PipRailClient.");
+  }
+  const live = await planEachClient(clients, url, init);
+  if (live.length === 0) return clients[0].fetch(url, init);
+  const best = rankAcross(live.map((p) => p.plan)).find((o) => o.state === "payable");
+  if (!best) {
+    const hint = mergeDeclineHint(live.map((p) => p.plan));
+    throw new (0, _chunkU35MG4TFcjs.PaymentDeclinedError)(hint || "No funded chain can settle this payment right now.");
+  }
+  const owner = live.find((p) => p.plan.options.includes(best)).client;
+  return owner.fetch(url, { ..._nullishCoalesce(init, () => ( {})), autoRoute: true });
+}
 function railOnNetwork(rail, matches) {
   const n = normalizeNetwork(rail.network);
   return !n.includes(":") || matches(n);
@@ -3601,6 +3643,187 @@ async function readInvalidReason(response) {
   return null;
 }
 
+// src/payer.ts
+var MultiChainPayer = class _MultiChainPayer {
+  
+  /**
+   * Wrap an explicit, ordered set of single-chain clients — use this when a client
+   * needs full control (e.g. a custom EVM chain configured by a viem `Chain`). The
+   * ORDER is your chain preference: across chains the first that can settle wins. Pass
+   * at MOST one client per chain — two clients on the SAME network would double-count in
+   * `spent()`/`budget()` and waste a plan round-trip (`fromWallets` can't produce this).
+   * For the common case, prefer {@link MultiChainPayer.fromWallets}.
+   */
+  constructor(clients) {
+    if (clients.length === 0) {
+      throw new TypeError("MultiChainPayer needs at least one PipRailClient.");
+    }
+    this._clients = [...clients];
+  }
+  /**
+   * Build one client per funded chain from a `{ chain → wallet }` map — the
+   * ergonomic path. The shared `policy`/`schemes`/`onBeforePay`/`onEvent` apply to
+   * every client; `rpcUrls` are matched per chain. Iteration order of `wallets` is
+   * the chain preference.
+   *
+   * ```ts
+   * const payer = MultiChainPayer.fromWallets({
+   *   wallets: {
+   *     base:    { privateKey: process.env.EVM_KEY! },
+   *     solana:  { secretKey:  process.env.SOLANA_SECRET! },
+   *     xrpl:    { seed:       process.env.XRPL_SEED! },
+   *   },
+   *   policy: { maxAmount: '1.00', maxTotal: '20.00', tokens: ['USDC', 'USDT'] },
+   * })
+   * const res = await payer.get('https://api.example.com/paid')  // pays on the first funded chain that can settle
+   * ```
+   */
+  static fromWallets(opts) {
+    const entries = Object.entries(opts.wallets);
+    if (entries.length === 0) {
+      throw new TypeError("MultiChainPayer.fromWallets needs at least one wallet.");
+    }
+    const clients = entries.map(
+      ([chain, wallet]) => new PipRailClient({
+        chain,
+        wallet,
+        ...opts.policy ? { policy: opts.policy } : {},
+        ...opts.schemes ? { schemes: opts.schemes } : {},
+        ..._optionalChain([opts, 'access', _64 => _64.rpcUrls, 'optionalAccess', _65 => _65[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
+        ...opts.onBeforePay ? { onBeforePay: opts.onBeforePay } : {},
+        ...opts.onEvent ? { onEvent: opts.onEvent } : {},
+        ...opts.maxPaymentRetries != null ? { maxPaymentRetries: opts.maxPaymentRetries } : {},
+        ...opts.retryTimeoutMs != null ? { retryTimeoutMs: opts.retryTimeoutMs } : {}
+      })
+    );
+    return new _MultiChainPayer(clients);
+  }
+  /** The underlying single-chain clients, in preference order. Reach for one of
+   *  these for chain-specific reads (`estimateCost`, `discoverySigner`, per-chain
+   *  `budget()`) that don't make sense merged. */
+  get clients() {
+    return this._clients;
+  }
+  /** Plan a 402 across every funded chain — merged + ranked payable-first. `null`
+   *  when the URL needs no payment. (Delegates to {@link planAcross}.) */
+  planPayment(url, init) {
+    return planAcross(this._clients, url, init);
+  }
+  /** Can ANY funded chain settle this URL right now? (A free resource is trivially
+   *  "affordable".) No funds move. */
+  async canAfford(url, init) {
+    const plan = await this.planPayment(url, init);
+    return plan == null ? true : plan.payable;
+  }
+  /** Price a gated URL across funded chains — the chosen rail's quote (the first
+   *  funded chain that can settle), else the first offered rail's. `null` when the URL
+   *  needs no payment. When it IS
+   *  gated but none of your chains are offered, surfaces the same informative
+   *  `NoCompatibleAcceptError` a single client would (it names the chains the 402 is
+   *  payable on) rather than a misleading `null`. No funds move. */
+  async quote(url, init) {
+    const plan = await this.planPayment(url, init);
+    if (plan == null) return null;
+    const opt = _nullishCoalesce(plan.best, () => ( plan.options[0]));
+    if (opt) return opt.quote;
+    return this._clients[0].quote(url, init);
+  }
+  /** Pay the first funded chain (in your listed order) that can settle this URL.
+   *  Delegates to {@link fetchAcross} — full policy / approval / retry / replay path on
+   *  the owning client. The owner re-reads balances at pay time, so the rail paid is the
+   *  surfaced `best` on a best-effort basis (it can pick another rail on the SAME chain,
+   *  or decline, if balances shift between plan and pay). PROBES the URL with `init`
+   *  (method + body) per client — prefer GET / idempotent requests. */
+  fetch(url, init) {
+    return fetchAcross(this._clients, url, init);
+  }
+  /** GET that auto-pays across chains. */
+  get(url, init) {
+    return this.fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: "GET" });
+  }
+  /**
+   * POST that auto-pays across chains. `body` is a string/FormData/URLSearchParams/
+   * ArrayBuffer/Blob (sent as-is) or a plain object (serialised as JSON) — mirrors
+   * {@link PipRailClient.post}.
+   */
+  post(url, body, init) {
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _66 => _66.headers]));
+    let payload;
+    if (body === void 0 || body === null) {
+      payload = void 0;
+    } else if (isBodyInit(body)) {
+      payload = body;
+    } else if (typeof body === "object") {
+      payload = JSON.stringify(body);
+      if (!headers.has("content-type")) headers.set("content-type", "application/json");
+    } else {
+      payload = String(body);
+    }
+    return this.fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: "POST", headers, body: payload });
+  }
+  /**
+   * Find payable resources across every funded chain. With the default
+   * `network: 'self'`, each chain's own results are merged + deduped by URL (so
+   * "self" means "any chain I can pay"). A network-scoped query (a CAIP-2 id or
+   * `'any'`) is chain-independent, so one client answers it. Never throws for a
+   * read problem; moves no funds.
+   */
+  async discover(opts = {}) {
+    if (opts.network && opts.network !== "self") {
+      return this._clients[0].discover(opts);
+    }
+    const perChain = await Promise.all(
+      this._clients.map((c) => c.discover({ ...opts, network: "self" }).catch(() => []))
+    );
+    const seen = /* @__PURE__ */ new Set();
+    const merged = [];
+    for (const r of perChain.flat()) {
+      if (seen.has(r.resource)) continue;
+      seen.add(r.resource);
+      merged.push(r);
+    }
+    return merged;
+  }
+  /** List a resource YOU run on the open indexes. Registration is a merchant action
+   *  independent of which chain you pay FROM, so it goes through your first chain's
+   *  client; pass `opts.network` to advertise a specific chain. Moves no funds. */
+  register(url, opts = {}) {
+    return this._clients[0].register(url, opts);
+  }
+  /** Aggregate spend across every chain — counts summed; per-(network,asset) rows
+   *  and records concatenated (no cross-chain collisions, never a cross-token sum). */
+  spent() {
+    const summaries = this._clients.map((c) => c.spent());
+    return {
+      count: summaries.reduce((n, s) => n + s.count, 0),
+      byAsset: summaries.flatMap((s) => s.byAsset),
+      records: summaries.flatMap((s) => s.records)
+    };
+  }
+  /** A merged budget view: every chain's per-(network,asset) remaining rows, plus the
+   *  MOST-RESTRICTIVE session time envelope across chains (the soonest deadline wins).
+   *  Mirrors {@link PipRailClient.budget}'s shape so the agent toolkit reads it
+   *  unchanged; per-chain session detail is on each `clients[i].budget()`. */
+  budget() {
+    const budgets = this._clients.map((c) => c.budget());
+    const session = budgets.map((b) => b.session).reduce((soonest, s) => {
+      if (soonest.secondsRemaining == null) return s;
+      if (s.secondsRemaining == null) return soonest;
+      return s.secondsRemaining < soonest.secondsRemaining ? s : soonest;
+    });
+    return { session, byAsset: budgets.flatMap((b) => b.byAsset) };
+  }
+};
+function isBodyInit(value) {
+  if (typeof value === "string") return true;
+  if (value instanceof ArrayBuffer) return true;
+  if (ArrayBuffer.isView(value)) return true;
+  if (typeof URLSearchParams !== "undefined" && value instanceof URLSearchParams) return true;
+  if (typeof FormData !== "undefined" && value instanceof FormData) return true;
+  if (typeof Blob !== "undefined" && value instanceof Blob) return true;
+  return false;
+}
+
 // src/selfdescribe.ts
 var BRAND = {
   name: "PipRail",
@@ -4003,7 +4226,12 @@ function paymentTools(client) {
           url: { type: "string", description: "Full URL of the resource to list." },
           name: { type: "string", description: "Display name (defaults to the host)." },
           description: { type: "string", description: "What the resource offers." },
-          priceUsd: { type: "number", description: "Advertised price in USD (metadata)." }
+          priceUsd: { type: "number", description: "Advertised price in USD (metadata)." },
+          network: {
+            type: "string",
+            description: "Network slug to advertise, e.g. 'base' (defaults to the paying chain). Set it when registering from a multi-chain wallet so the listing names the right chain."
+          },
+          asset: { type: "string", description: "Payment asset symbol, e.g. 'USDC' (metadata)." }
         },
         required: ["url"],
         additionalProperties: false
@@ -4013,6 +4241,8 @@ function paymentTools(client) {
         if (typeof args.name === "string") opts.name = args.name;
         if (typeof args.description === "string") opts.description = args.description;
         if (typeof args.priceUsd === "number") opts.priceUsd = args.priceUsd;
+        if (typeof args.network === "string") opts.network = args.network;
+        if (typeof args.asset === "string") opts.asset = args.asset;
         const outcomes = await client.register(String(args.url), opts);
         return { outcomes };
       }
@@ -4215,10 +4445,10 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return void 0;
     const body = await res.json();
-    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _64 => _64.kinds])) ? body.kinds : [];
+    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _67 => _67.kinds])) ? body.kinds : [];
     const want = normalizeNetwork(network);
-    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _65 => _65.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _66 => _66.network]), () => ( "")))) === want);
-    const fp = _optionalChain([kind, 'optionalAccess', _67 => _67.extra, 'optionalAccess', _68 => _68.feePayer]);
+    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _68 => _68.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _69 => _69.network]), () => ( "")))) === want);
+    const fp = _optionalChain([kind, 'optionalAccess', _70 => _70.extra, 'optionalAccess', _71 => _71.feePayer]);
     return typeof fp === "string" ? fp : void 0;
   } catch (e32) {
     return void 0;
@@ -4227,14 +4457,14 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
   }
 }
 function parseFacilitatorSupported(body) {
-  const kinds = _optionalChain([body, 'optionalAccess', _69 => _69.kinds]);
+  const kinds = _optionalChain([body, 'optionalAccess', _72 => _72.kinds]);
   if (!Array.isArray(kinds)) return [];
   const out = [];
   for (const k of kinds) {
     if (!k || typeof k !== "object") continue;
     const o = k;
     if (typeof o.scheme !== "string" || typeof o.network !== "string") continue;
-    const fp = _optionalChain([o, 'access', _70 => _70.extra, 'optionalAccess', _71 => _71.feePayer]);
+    const fp = _optionalChain([o, 'access', _73 => _73.extra, 'optionalAccess', _74 => _74.feePayer]);
     out.push({ scheme: o.scheme, network: o.network, ...typeof fp === "string" ? { feePayer: fp } : {} });
   }
   return out;
@@ -4535,7 +4765,7 @@ function createPaymentGate(options) {
       accepts,
       instruction: describeChallenge({ x402Version: 2, resource: { url: resourceUrl }, accepts })
     });
-    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _72 => _72.extensions]), () => ( {}));
+    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _75 => _75.extensions]), () => ( {}));
     const rejectionPiprail = _nullishCoalesce(rejectionExt.piprail, () => ( {}));
     const bodyPiprail = { ..._nullishCoalesce(selfDescribe, () => ( {})), ...rejectionPiprail };
     const bodyExtensions = {
@@ -4554,7 +4784,7 @@ function createPaymentGate(options) {
         ...options.description ? { description: options.description } : {}
       },
       accepts,
-      ..._optionalChain([opts, 'optionalAccess', _73 => _73.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _76 => _76.error]) ? { error: opts.error } : {},
       ...Object.keys(bodyExtensions).length > 0 ? { extensions: bodyExtensions } : {}
     };
     const headerChallenge = {
@@ -4808,25 +5038,49 @@ function normaliseHeader(value) {
 
 // src/facilitators.ts
 var KNOWN_FACILITATORS = {
-  // PayAI — keyless (no API key), sponsors the gas. Verified 2026-06-14 against
-  // https://facilitator.payai.network/supported (exact · eip155:8453) + the live demo.
+  // Base (eip155:8453). Every entry is keyless and LIVE-settled by us (a real EIP-3009
+  // exact payment, buyer paid zero ETH) — not just a /supported read — on the dated day.
   "eip155:8453": [
     {
       url: "https://facilitator.payai.network",
       keyless: true,
       schemes: ["exact"],
       settles: ["eip3009"],
-      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009)"
+      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009). Verified 2026-06-14 (/supported + live demo)."
+    },
+    {
+      url: "https://facilitator.xpay.sh",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
     }
   ],
-  // PayAI on Solana — keyless fee-payer sponsor for the SVM exact rail. Verified 2026-06-14.
+  // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
+  // by us (a real SPL TransferChecked, buyer paid zero SOL) on the dated day — beyond a /supported
+  // read. Daydreams + Questflow are intentionally ABSENT: their /supported is public but /verify
+  // returns 401 (an API key is required), so they are not keyless for settlement.
   "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp": [
     {
       url: "https://facilitator.payai.network",
       keyless: true,
       schemes: ["exact"],
       settles: ["svm"],
-      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM)"
+      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM). LIVE-settled 2026-06-14 (tx 4dL8jRKH\u2026)."
+    },
+    {
+      url: "https://pay.openfacilitator.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "OpenFacilitator \u2014 keyless (no signup), fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx 5BabDtX\u2026)."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
     }
   ]
 };
@@ -4851,7 +5105,7 @@ function isRetryableStatus(status) {
 }
 var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
 async function signBody(secret, body) {
-  const subtle = _optionalChain([globalThis, 'access', _74 => _74.crypto, 'optionalAccess', _75 => _75.subtle]);
+  const subtle = _optionalChain([globalThis, 'access', _77 => _77.crypto, 'optionalAccess', _78 => _78.subtle]);
   if (!subtle) return null;
   try {
     const enc = new TextEncoder();
@@ -4921,7 +5175,7 @@ async function deliverReceipt(receipt, options) {
     const retryable = status === void 0 ? true : isRetryableStatus(status);
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
-      _optionalChain([onAttempt, 'optionalCall', _76 => _76({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+      _optionalChain([onAttempt, 'optionalCall', _79 => _79({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
     } catch (e39) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
@@ -5035,4 +5289,6 @@ async function deliverReceipt(receipt, options) {
 
 
 
-exports.BRAND = BRAND; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkU35MG4TFcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkU35MG4TFcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkU35MG4TFcjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MaxRetriesExceededError = _chunkU35MG4TFcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkU35MG4TFcjs.MissingDriverError; exports.NoCompatibleAcceptError = _chunkU35MG4TFcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkU35MG4TFcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkU35MG4TFcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkU35MG4TFcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkU35MG4TFcjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkU35MG4TFcjs.RecipientNotReadyError; exports.SettlementError = _chunkU35MG4TFcjs.SettlementError; exports.UnknownTokenError = _chunkU35MG4TFcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkU35MG4TFcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkU35MG4TFcjs.UnsupportedSchemeError; exports.WalletRequiredError = _chunkU35MG4TFcjs.WalletRequiredError; exports.WrongChainError = _chunkU35MG4TFcjs.WrongChainError; exports.WrongFamilyError = _chunkU35MG4TFcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkU35MG4TFcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;
+
+
+exports.BRAND = BRAND; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkU35MG4TFcjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkU35MG4TFcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkU35MG4TFcjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MaxRetriesExceededError = _chunkU35MG4TFcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkU35MG4TFcjs.MissingDriverError; exports.MultiChainPayer = MultiChainPayer; exports.NoCompatibleAcceptError = _chunkU35MG4TFcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkU35MG4TFcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkU35MG4TFcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkU35MG4TFcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkU35MG4TFcjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkU35MG4TFcjs.RecipientNotReadyError; exports.SettlementError = _chunkU35MG4TFcjs.SettlementError; exports.UnknownTokenError = _chunkU35MG4TFcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkU35MG4TFcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkU35MG4TFcjs.UnsupportedSchemeError; exports.WalletRequiredError = _chunkU35MG4TFcjs.WalletRequiredError; exports.WrongChainError = _chunkU35MG4TFcjs.WrongChainError; exports.WrongFamilyError = _chunkU35MG4TFcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.fetchAcross = fetchAcross; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkU35MG4TFcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;