@piprail/sdk 1.25.0 → 2.0.1

package/CHANGELOG.md

@@ -4,6 +4,54 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [2.0.1] — 2026-06-15 — clearer typed errors (robustness; no API change)
+
+A patch release hardening error reporting at every wrong-input boundary — found by a
+repo-wide adversarial fuzzing pass. **No behaviour change for correct input**, no API change;
+every fix turns a raw/cryptic library error into a typed `PipRailError` per [`ERRORS.md`](ERRORS.md).
+
+### Fixed
+
+- **Wallet `{ key }` validation is now uniform + typed.** A malformed or wrong-family key throws a
+  clear `WrongFamilyError` instead of leaking a library error:
+  - **EVM** — a non-`0x…`/short/garbage key (e.g. a base58 secret, or one missing `0x`) →
+    `WrongFamilyError` (was viem's raw `invalid private key, expected hex or 32 bytes`).
+  - **Solana** — a `0x…` EVM key or non-base58 secret → `WrongFamilyError` (was `Non-base58 character`).
+  - **TON** — an invalid/typo'd mnemonic → `WrongFamilyError` at use (was a silent **wrong-wallet**
+    derivation that only failed later as an opaque network error); now validated via `mnemonicValidate`.
+- **A malformed 402 challenge yields a typed `InvalidEnvelopeError`, never a raw `TypeError`.** An
+  `accepts[]` entry missing its `extra` block (on an unrecognised token), or a non-string `amount`,
+  is now rejected cleanly across `quote` / `estimateCost` / `planPayment` / `canAfford` / `fetch`
+  (a recognised token still prices gracefully from the SDK's own decimals).
+- **Read-only agent tools funnel expected errors into a structured result.** `piprail_quote_payment`,
+  `piprail_plan_payment`, `piprail_discover`, `piprail_register`, and `piprail_budget` now return
+  `{ ok:false, code, reason, explain }` for a typed SDK error (e.g. `WALLET_REQUIRED` on a read-only
+  client) — mirroring `piprail_pay_request` — instead of an opaque error; a genuine non-SDK error is
+  still re-thrown.
+- **A no-gas wallet's settlement failure maps to `InsufficientFundsError`.** viem's gas-estimation
+  shortfall phrasing (`gas required exceeds allowance`) is now classified as `INSUFFICIENT_FUNDS`
+  (was a raw multi-line viem dump); an ERC-20 `insufficient allowance` (approve) is deliberately NOT
+  mis-classified.
+
+## [2.0.0] — 2026-06-15 — one wallet field: `key` (BREAKING)
+
+### Changed — the wallet secret is a single `key` field on every chain (BREAKING)
+
+- **`WalletInput` is unified.** Every chain now takes `wallet: { key }` — the chain's secret as a
+  string. NEAR also keeps `accountId`: `{ accountId, key }`. The per-chain secret field names
+  (`privateKey` · `secretKey` · `seed` · `secret` · `mnemonic`) are **removed**.
+- **Migration** — rename the field; the *value* is unchanged:
+  `{ privateKey } → { key }`, `{ secretKey } → { key }`, `{ seed } → { key }`,
+  `{ secret } → { key }`, `{ mnemonic } → { key }`, `{ accountId, privateKey } → { accountId, key }`.
+  Passing a pre-2.0 field name throws a `WrongFamilyError` whose message names the exact `{ key }` fix.
+- **Bring-your-own native signer objects are unchanged** — EVM `{ walletClient }`, Solana `{ signer }`,
+  TON `{ keyPair }`, Stellar/Sui `{ keypair }`, XRPL `{ wallet }`, Aptos/Algorand `{ account }`.
+- **Why** — one obvious shape across every chain, the whole point of "name a chain, add a wallet."
+  See [Wallets by family](https://docs.piprail.com/making-payments/wallets-by-family/).
+
+Nothing else changed: the protocol, drivers, schemes, discovery, spend policy, and every other API
+are identical. Live-verified across 11 mainnet chains with the new `{ key }` shape.
+
 ## [1.25.0] — 2026-06-15 — more keyless facilitators (live-verified)
 
 ### Added — `KNOWN_FACILITATORS` grows beyond PayAI
@@ -1083,6 +1131,8 @@ straight into your wallet. The API is small and self-contained.
   to your wallet; PipRail never holds funds.
 - `viem ^2.21` is a peer dependency. Node 20+ or a modern browser.
 
+[2.0.1]: https://www.npmjs.com/package/@piprail/sdk
+[2.0.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.25.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.24.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.15.1]: https://www.npmjs.com/package/@piprail/sdk

package/README.md

@@ -31,7 +31,7 @@ That route now costs **0.05 USDC on Base**, paid straight to your wallet. One pa
 ```ts
 import { PipRailClient } from '@piprail/sdk'
 
-const client = new PipRailClient({ chain: 'base', wallet: { privateKey: process.env.AGENT_KEY } })
+const client = new PipRailClient({ chain: 'base', wallet: { key: process.env.AGENT_KEY } })
 
 const res = await client.fetch('https://api.example.com/report') // hits the 402, pays it, retries with proof
 ```
@@ -49,9 +49,9 @@ import { MultiChainPayer } from '@piprail/sdk'
 
 const payer = MultiChainPayer.fromWallets({
   wallets: {
-    base:   { privateKey: process.env.EVM_KEY },     // one EVM key works on every EVM chain
-    solana: { secretKey:  process.env.SOLANA_KEY },
-    xrpl:   { seed:       process.env.XRPL_SEED },
+    base:   { key: process.env.EVM_KEY },     // one EVM key works on every EVM chain
+    solana: { key: process.env.SOLANA_KEY },
+    xrpl:   { key: process.env.XRPL_SEED },
   },
   policy: { maxAmount: '1.00', maxTotal: '10.00', tokens: ['USDC', 'USDT'] }, // one budget, every chain
 })

package/dist/{algorand-677ILBQS.js → algorand-GSFVZTBF.js}

@@ -4,10 +4,11 @@ import {
   RecipientNotReadyError,
   UnknownTokenError,
   WrongFamilyError,
+  assertNoLegacyWalletKey,
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-L6WQRHEZ.js";
+} from "./chunk-7XK22JSQ.js";
 
 // src/drivers/algorand/index.ts
 import algosdk2 from "algosdk";
@@ -158,22 +159,13 @@ import algosdk from "algosdk";
 function assertAlgorandWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
     throw new WrongFamilyError(
-      `chain ${network} is Algorand; wallet must be { mnemonic } (25 words) or { account }.`
+      `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
-  if ("privateKey" in wallet || "walletClient" in wallet) {
+  assertNoLegacyWalletKey(wallet, "Algorand");
+  if (!("key" in wallet) && !("account" in wallet)) {
     throw new WrongFamilyError(
-      `chain ${network} is Algorand; an EVM/Aptos wallet can't be used \u2014 pass { mnemonic } (25 words) or { account }.`
-    );
-  }
-  if ("secretKey" in wallet || "signer" in wallet || "secret" in wallet || "keypair" in wallet || "keyPair" in wallet || "seed" in wallet || "accountId" in wallet) {
-    throw new WrongFamilyError(
-      `chain ${network} is Algorand; that looks like another family's wallet \u2014 pass { mnemonic } (25 words) or { account }.`
-    );
-  }
-  if (!("mnemonic" in wallet) && !("account" in wallet)) {
-    throw new WrongFamilyError(
-      `chain ${network} is Algorand; wallet must be { mnemonic } (25 words) or { account }.`
+      `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
   return wallet;
@@ -182,18 +174,18 @@ function resolveAlgorandWallet(config) {
   if (config.account) {
     return { addr: String(config.account.addr), sk: config.account.sk };
   }
-  if (config.mnemonic != null) {
+  if (config.key != null) {
     try {
-      const { addr, sk } = algosdk.mnemonicToSecretKey(config.mnemonic);
+      const { addr, sk } = algosdk.mnemonicToSecretKey(config.key);
       return { addr: addr.toString(), sk };
     } catch (cause) {
       throw new WrongFamilyError(
-        "Algorand wallet { mnemonic } is not a valid 25-word Algorand mnemonic.",
+        "Algorand wallet { key } is not a valid 25-word Algorand mnemonic.",
         { cause }
       );
     }
   }
-  throw new WrongFamilyError("Algorand wallet needs { mnemonic } (25 words) or { account }.");
+  throw new WrongFamilyError("Algorand wallet needs { key } (25-word mnemonic) or { account }.");
 }
 
 // src/drivers/algorand/index.ts

package/dist/{algorand-ZJ53VCTN.cjs → algorand-HZS43N4P.cjs}

@@ -7,7 +7,8 @@
 
 
 
-var _chunkU35MG4TFcjs = require('./chunk-U35MG4TF.cjs');
+
+var _chunkJG6KRAW6cjs = require('./chunk-JG6KRAW6.cjs');
 
 // src/drivers/algorand/index.ts
 var _algosdk = require('algosdk'); var _algosdk2 = _interopRequireDefault(_algosdk);
@@ -55,13 +56,13 @@ async function payAlgorand(params) {
   } catch (err) {
     const mapped = mapAlgorandError(err, accept.payTo);
     if (mapped) throw mapped;
-    throw _nullishCoalesce(_chunkU35MG4TFcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function mapAlgorandError(err, payTo) {
   const m = err instanceof Error ? err.message : String(err);
   if (/must optin/i.test(m) || /missing from/i.test(m) && m.includes(payTo)) {
-    return new (0, _chunkU35MG4TFcjs.RecipientNotReadyError)(
+    return new (0, _chunkJG6KRAW6cjs.RecipientNotReadyError)(
       `Algorand recipient ${payTo} hasn't opted into this asset \u2014 it must opt in (a 0-amount asset transfer to itself) before it can receive. (Algorand: ${firstLine(m)})`,
       { cause: err }
     );
@@ -69,7 +70,7 @@ function mapAlgorandError(err, payTo) {
   if (/overspend|below min|min(imum)? balance|tried to spend|balance \d+ below|asset \d+ missing from|insufficient|underflow/i.test(
     m
   )) {
-    return new (0, _chunkU35MG4TFcjs.InsufficientFundsError)(
+    return new (0, _chunkJG6KRAW6cjs.InsufficientFundsError)(
       `Algorand payment failed: the sender can't cover it \u2014 token balance, ALGO for fees, the 0.1-ALGO minimum balance, or a missing asset opt-in on the sender. (Algorand: ${firstLine(m)})`,
       { cause: err }
     );
@@ -157,23 +158,14 @@ function rpcFailed(nonce) {
 
 function assertAlgorandWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Algorand; wallet must be { mnemonic } (25 words) or { account }.`
-    );
-  }
-  if ("privateKey" in wallet || "walletClient" in wallet) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Algorand; an EVM/Aptos wallet can't be used \u2014 pass { mnemonic } (25 words) or { account }.`
-    );
-  }
-  if ("secretKey" in wallet || "signer" in wallet || "secret" in wallet || "keypair" in wallet || "keyPair" in wallet || "seed" in wallet || "accountId" in wallet) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Algorand; that looks like another family's wallet \u2014 pass { mnemonic } (25 words) or { account }.`
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
-  if (!("mnemonic" in wallet) && !("account" in wallet)) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Algorand; wallet must be { mnemonic } (25 words) or { account }.`
+  _chunkJG6KRAW6cjs.assertNoLegacyWalletKey.call(void 0, wallet, "Algorand");
+  if (!("key" in wallet) && !("account" in wallet)) {
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
   return wallet;
@@ -182,18 +174,18 @@ function resolveAlgorandWallet(config) {
   if (config.account) {
     return { addr: String(config.account.addr), sk: config.account.sk };
   }
-  if (config.mnemonic != null) {
+  if (config.key != null) {
     try {
-      const { addr, sk } = _algosdk2.default.mnemonicToSecretKey(config.mnemonic);
+      const { addr, sk } = _algosdk2.default.mnemonicToSecretKey(config.key);
       return { addr: addr.toString(), sk };
     } catch (cause) {
-      throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-        "Algorand wallet { mnemonic } is not a valid 25-word Algorand mnemonic.",
+      throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        "Algorand wallet { key } is not a valid 25-word Algorand mnemonic.",
         { cause }
       );
     }
   }
-  throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)("Algorand wallet needs { mnemonic } (25 words) or { account }.");
+  throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)("Algorand wallet needs { key } (25-word mnemonic) or { account }.");
 }
 
 // src/drivers/algorand/index.ts
@@ -248,16 +240,16 @@ function makeAlgorandNetwork(preset, algodUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkU35MG4TFcjs.UnknownTokenError)(
+          throw new (0, _chunkJG6KRAW6cjs.UnknownTokenError)(
             `token "${token}" isn't built in for Algorand (known: ${known}). Pass { assetId, decimals } for a custom ASA, or use 'native'.`
           );
         }
         return { asset: algorandAssetId(info.assetId), decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkU35MG4TFcjs.rejectForeignToken.call(void 0, token, "algorand", network);
+      _chunkJG6KRAW6cjs.rejectForeignToken.call(void 0, token, "algorand", network);
       const t = token;
       if (typeof t.assetId !== "number" || typeof t.decimals !== "number") {
-        throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is Algorand; a custom token must be { assetId, decimals }.`
         );
       }
@@ -278,12 +270,12 @@ function makeAlgorandNetwork(preset, algodUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is Algorand, but payTo "${payTo}" looks like an EVM address.`
         );
       }
       if (!_algosdk2.default.isValidAddress(payTo)) {
-        throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is Algorand, but payTo "${payTo}" is not a valid Algorand address.`
         );
       }
@@ -300,13 +292,13 @@ function makeAlgorandNetwork(preset, algodUrl) {
         const info = await _algosdk2.default.waitForConfirmation(algod, ref, 10);
         return { height: String(_nullishCoalesce(info.confirmedRound, () => ( 0))) };
       } catch (err) {
-        throw new (0, _chunkU35MG4TFcjs.ConfirmationTimeoutError)(`Algorand tx ${ref} did not confirm in time.`, {
+        throw new (0, _chunkJG6KRAW6cjs.ConfirmationTimeoutError)(`Algorand tx ${ref} did not confirm in time.`, {
           cause: err
         });
       }
     },
     async estimateCost() {
-      return _chunkU35MG4TFcjs.nativeCost.call(void 0, {
+      return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
         symbol: ALGO_SYMBOL,
         decimals: ALGO_DECIMALS,
         fee: 1000n,

package/dist/{aptos-3TSKTI4D.js → aptos-RIL56C7L.js}

@@ -3,10 +3,11 @@ import {
   InsufficientFundsError,
   UnknownTokenError,
   WrongFamilyError,
+  assertNoLegacyWalletKey,
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-L6WQRHEZ.js";
+} from "./chunk-7XK22JSQ.js";
 
 // src/drivers/aptos/index.ts
 import { Aptos, AptosConfig, Network, AccountAddress } from "@aptos-labs/ts-sdk";
@@ -147,39 +148,30 @@ import { Account, Ed25519PrivateKey } from "@aptos-labs/ts-sdk";
 function assertAptosWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
     throw new WrongFamilyError(
-      `chain ${network} is Aptos; wallet must be { privateKey } (ed25519-priv-0x\u2026) or { account }.`
+      `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
-  if ("walletClient" in wallet) {
+  assertNoLegacyWalletKey(wallet, "Aptos");
+  if (!("key" in wallet) && !("account" in wallet)) {
     throw new WrongFamilyError(
-      `chain ${network} is Aptos; a viem { walletClient } can't be used \u2014 pass { privateKey } (ed25519-priv-0x\u2026) or { account }.`
-    );
-  }
-  if ("secretKey" in wallet || "signer" in wallet || "mnemonic" in wallet || "keypair" in wallet || "keyPair" in wallet || "secret" in wallet || "seed" in wallet || "accountId" in wallet) {
-    throw new WrongFamilyError(
-      `chain ${network} is Aptos; that looks like another family's wallet \u2014 pass { privateKey } (ed25519-priv-0x\u2026) or { account }.`
-    );
-  }
-  if (!("privateKey" in wallet) && !("account" in wallet)) {
-    throw new WrongFamilyError(
-      `chain ${network} is Aptos; wallet must be { privateKey } (ed25519-priv-0x\u2026) or { account }.`
+      `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
   return wallet;
 }
 function resolveAptosAccount(config) {
   if (config.account) return config.account;
-  if (config.privateKey != null) {
+  if (config.key != null) {
     try {
-      return Account.fromPrivateKey({ privateKey: new Ed25519PrivateKey(config.privateKey) });
+      return Account.fromPrivateKey({ privateKey: new Ed25519PrivateKey(config.key) });
     } catch (cause) {
       throw new WrongFamilyError(
-        "Aptos wallet { privateKey } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
+        "Aptos wallet { key } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
         { cause }
       );
     }
   }
-  throw new WrongFamilyError("Aptos wallet needs { privateKey } (ed25519-priv-0x\u2026) or { account }.");
+  throw new WrongFamilyError("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
 }
 
 // src/drivers/aptos/index.ts

package/dist/{aptos-XIIHPAOO.cjs → aptos-TRCCJRZA.cjs}

@@ -6,7 +6,8 @@
 
 
 
-var _chunkU35MG4TFcjs = require('./chunk-U35MG4TF.cjs');
+
+var _chunkJG6KRAW6cjs = require('./chunk-JG6KRAW6.cjs');
 
 // src/drivers/aptos/index.ts
 var _tssdk = require('@aptos-labs/ts-sdk');
@@ -55,14 +56,14 @@ async function payAptos(params) {
     const res = await client.signSubmit({ signer, transaction });
     return res.hash;
   } catch (err) {
-    if (err instanceof _chunkU35MG4TFcjs.InsufficientFundsError) throw err;
+    if (err instanceof _chunkJG6KRAW6cjs.InsufficientFundsError) throw err;
     if (isAptosAffordability(err)) {
-      throw new (0, _chunkU35MG4TFcjs.InsufficientFundsError)(
+      throw new (0, _chunkJG6KRAW6cjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient APT/token balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkU35MG4TFcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isAptosAffordability(err) {
@@ -146,40 +147,31 @@ function txNotFound(hash) {
 
 function assertAptosWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Aptos; wallet must be { privateKey } (ed25519-priv-0x\u2026) or { account }.`
-    );
-  }
-  if ("walletClient" in wallet) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Aptos; a viem { walletClient } can't be used \u2014 pass { privateKey } (ed25519-priv-0x\u2026) or { account }.`
-    );
-  }
-  if ("secretKey" in wallet || "signer" in wallet || "mnemonic" in wallet || "keypair" in wallet || "keyPair" in wallet || "secret" in wallet || "seed" in wallet || "accountId" in wallet) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Aptos; that looks like another family's wallet \u2014 pass { privateKey } (ed25519-priv-0x\u2026) or { account }.`
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
-  if (!("privateKey" in wallet) && !("account" in wallet)) {
-    throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-      `chain ${network} is Aptos; wallet must be { privateKey } (ed25519-priv-0x\u2026) or { account }.`
+  _chunkJG6KRAW6cjs.assertNoLegacyWalletKey.call(void 0, wallet, "Aptos");
+  if (!("key" in wallet) && !("account" in wallet)) {
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
   return wallet;
 }
 function resolveAptosAccount(config) {
   if (config.account) return config.account;
-  if (config.privateKey != null) {
+  if (config.key != null) {
     try {
-      return _tssdk.Account.fromPrivateKey({ privateKey: new (0, _tssdk.Ed25519PrivateKey)(config.privateKey) });
+      return _tssdk.Account.fromPrivateKey({ privateKey: new (0, _tssdk.Ed25519PrivateKey)(config.key) });
     } catch (cause) {
-      throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
-        "Aptos wallet { privateKey } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
+      throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        "Aptos wallet { key } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
         { cause }
       );
     }
   }
-  throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)("Aptos wallet needs { privateKey } (ed25519-priv-0x\u2026) or { account }.");
+  throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
 }
 
 // src/drivers/aptos/index.ts
@@ -251,16 +243,16 @@ function makeAptosNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkU35MG4TFcjs.UnknownTokenError)(
+          throw new (0, _chunkJG6KRAW6cjs.UnknownTokenError)(
             `token "${token}" isn't built in for Aptos (known: ${known}). Pass { metadata, decimals } for a custom Fungible Asset, or use 'native'.`
           );
         }
         return { asset: info.metadata, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkU35MG4TFcjs.rejectForeignToken.call(void 0, token, "aptos", network);
+      _chunkJG6KRAW6cjs.rejectForeignToken.call(void 0, token, "aptos", network);
       const t = token;
       if (!t.metadata || typeof t.decimals !== "number") {
-        throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is Aptos; a custom token must be { metadata, decimals }.`
         );
       }
@@ -287,7 +279,7 @@ function makeAptosNetwork(preset, rpcUrl) {
         valid = false;
       }
       if (!valid || evmLike) {
-        throw new (0, _chunkU35MG4TFcjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is Aptos, but payTo "${payTo}" is not a valid Aptos address (0x + 32 bytes).`
         );
       }
@@ -309,11 +301,11 @@ function makeAptosNetwork(preset, rpcUrl) {
         const tx = await aptos.waitForTransaction({ transactionHash: ref });
         return { height: String(_nullishCoalesce(tx.version, () => ( "0"))) };
       } catch (err) {
-        throw new (0, _chunkU35MG4TFcjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
+        throw new (0, _chunkJG6KRAW6cjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
       }
     },
     async estimateCost() {
-      return _chunkU35MG4TFcjs.nativeCost.call(void 0, {
+      return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
         symbol: APT_SYMBOL,
         decimals: APT_DECIMALS,
         fee: 100000n,

package/dist/{chunk-L6WQRHEZ.js → chunk-7XK22JSQ.js}

@@ -13,7 +13,7 @@ var RecipientNotReadyError = class extends PipRailError {
 };
 function toInsufficientFundsError(err) {
   const message = err instanceof Error ? err.message : String(err);
-  if (/insufficient (funds|balance|lamports|fee)|not enough|exceeds (the )?balance|underfunded|low[_ ]?reserve|debit the account/i.test(
+  if (/insufficient (funds|balance|lamports|fee)|not enough|exceeds (the )?balance|underfunded|low[_ ]?reserve|debit the account|gas required exceeds (the )?allowance/i.test(
     message
   )) {
     return new InsufficientFundsError(
@@ -174,6 +174,18 @@ function nativeCost(opts) {
   };
 }
 
+// src/drivers/wallet-migrate.ts
+var LEGACY_WALLET_FIELDS = ["privateKey", "secretKey", "seed", "secret", "mnemonic"];
+function assertNoLegacyWalletKey(wallet, family) {
+  for (const f of LEGACY_WALLET_FIELDS) {
+    if (f in wallet) {
+      throw new WrongFamilyError(
+        `${family} wallet: PipRail v2 unified the wallet secret to a single field \u2014 replace { ${f} } with { key }` + (family === "NEAR" ? " ({ accountId, key })" : "") + "."
+      );
+    }
+  }
+}
+
 export {
   PipRailError,
   InsufficientFundsError,
@@ -194,6 +206,7 @@ export {
   UnknownTokenError,
   MissingDriverError,
   UnsupportedNetworkError,
+  assertNoLegacyWalletKey,
   rejectForeignToken,
   parseUnits,
   floorUnits,

package/dist/{chunk-U35MG4TF.cjs → chunk-JG6KRAW6.cjs}

@@ -13,7 +13,7 @@ var RecipientNotReadyError = (_class2 = class extends PipRailError {constructor(
 }, _class2);
 function toInsufficientFundsError(err) {
   const message = err instanceof Error ? err.message : String(err);
-  if (/insufficient (funds|balance|lamports|fee)|not enough|exceeds (the )?balance|underfunded|low[_ ]?reserve|debit the account/i.test(
+  if (/insufficient (funds|balance|lamports|fee)|not enough|exceeds (the )?balance|underfunded|low[_ ]?reserve|debit the account|gas required exceeds (the )?allowance/i.test(
     message
   )) {
     return new InsufficientFundsError(
@@ -174,6 +174,19 @@ function nativeCost(opts) {
   };
 }
 
+// src/drivers/wallet-migrate.ts
+var LEGACY_WALLET_FIELDS = ["privateKey", "secretKey", "seed", "secret", "mnemonic"];
+function assertNoLegacyWalletKey(wallet, family) {
+  for (const f of LEGACY_WALLET_FIELDS) {
+    if (f in wallet) {
+      throw new WrongFamilyError(
+        `${family} wallet: PipRail v2 unified the wallet secret to a single field \u2014 replace { ${f} } with { key }` + (family === "NEAR" ? " ({ accountId, key })" : "") + "."
+      );
+    }
+  }
+}
+
+
 
 
 
@@ -199,4 +212,4 @@ function nativeCost(opts) {
 
 
 
-exports.PipRailError = PipRailError; exports.InsufficientFundsError = InsufficientFundsError; exports.RecipientNotReadyError = RecipientNotReadyError; exports.toInsufficientFundsError = toInsufficientFundsError; exports.WrongChainError = WrongChainError; exports.PaymentTimeoutError = PaymentTimeoutError; exports.MaxRetriesExceededError = MaxRetriesExceededError; exports.PaymentDeclinedError = PaymentDeclinedError; exports.ConfirmationTimeoutError = ConfirmationTimeoutError; exports.SettlementError = SettlementError; exports.InvalidEnvelopeError = InvalidEnvelopeError; exports.NoCompatibleAcceptError = NoCompatibleAcceptError; exports.UnsupportedSchemeError = UnsupportedSchemeError; exports.NonReplayableBodyError = NonReplayableBodyError; exports.WalletRequiredError = WalletRequiredError; exports.WrongFamilyError = WrongFamilyError; exports.UnknownTokenError = UnknownTokenError; exports.MissingDriverError = MissingDriverError; exports.UnsupportedNetworkError = UnsupportedNetworkError; exports.rejectForeignToken = rejectForeignToken; exports.parseUnits = parseUnits; exports.floorUnits = floorUnits; exports.formatUnits = formatUnits; exports.nativeCost = nativeCost;
+exports.PipRailError = PipRailError; exports.InsufficientFundsError = InsufficientFundsError; exports.RecipientNotReadyError = RecipientNotReadyError; exports.toInsufficientFundsError = toInsufficientFundsError; exports.WrongChainError = WrongChainError; exports.PaymentTimeoutError = PaymentTimeoutError; exports.MaxRetriesExceededError = MaxRetriesExceededError; exports.PaymentDeclinedError = PaymentDeclinedError; exports.ConfirmationTimeoutError = ConfirmationTimeoutError; exports.SettlementError = SettlementError; exports.InvalidEnvelopeError = InvalidEnvelopeError; exports.NoCompatibleAcceptError = NoCompatibleAcceptError; exports.UnsupportedSchemeError = UnsupportedSchemeError; exports.NonReplayableBodyError = NonReplayableBodyError; exports.WalletRequiredError = WalletRequiredError; exports.WrongFamilyError = WrongFamilyError; exports.UnknownTokenError = UnknownTokenError; exports.MissingDriverError = MissingDriverError; exports.UnsupportedNetworkError = UnsupportedNetworkError; exports.assertNoLegacyWalletKey = assertNoLegacyWalletKey; exports.rejectForeignToken = rejectForeignToken; exports.parseUnits = parseUnits; exports.floorUnits = floorUnits; exports.formatUnits = formatUnits; exports.nativeCost = nativeCost;