@piprail/sdk 2.0.0 → 2.0.2

package/dist/index.d.cts

@@ -4349,7 +4349,7 @@ interface ResolvedNetwork {
         reason?: RecipientReason;
     }>;
     /**
-     * OPTIONAL (EVM + EIP-3009 only) — the BUYER counterpart to {@link settleExactSelf}.
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM) — the BUYER counterpart to {@link settleExactSelf}.
      * Build + EIP-712-sign an EIP-3009 `transferWithAuthorization` for a standard x402
      * `exact` rail, so a PipRail agent can PAY any standard x402 server (not just PipRail's
      * own `onchain-proof` gates). The client frames the returned `payload` + `accepted` echo
@@ -4881,7 +4881,7 @@ type PipRailEvent = {
  * Wallet for the chosen chain family. **One field, every chain: `{ key }`** — the
  * chain's secret as a string (the `chain` selector routes; each driver validates the
  * format). NEAR also needs `{ accountId }`. What `key` is, per chain:
- *   - EVM / Tron     → a 0x… hex private key (secp256k1)
+ *   - EVM / Tron     → a 0x… hex private key (secp256k1; Tron also accepts it without the 0x prefix)
  *   - Sui            → a `suiprivkey1…` bech32 secret
  *   - Aptos          → an AIP-80 `ed25519-priv-0x…` (or raw `0x…`) secret
  *   - Solana         → a base58 secret key (or a `Uint8Array`)
@@ -5226,6 +5226,15 @@ declare class PipRailClient {
     private readonly ledger;
     private bound?;
     constructor(opts: PipRailClientOptions);
+    /**
+     * Fail LOUDLY at construction on a malformed amount cap — a security boundary
+     * must never silently half-arm, and a misconfigured cap is a programmer error
+     * (→ `TypeError`, no new SDK code). Each cap (`maxAmount` / `maxTotal` /
+     * `windowTotal`) must be a non-negative decimal STRING (the same grammar
+     * {@link floorUnits} accepts), so a typo like `'0.01abc'` fails fast here instead
+     * of lazily throwing a raw `floorUnits` error out of the never-throw read methods.
+     */
+    private assertPolicyAmountCaps;
     /**
      * Fail LOUDLY at construction on a misconfigured time policy — a security
      * boundary must never silently half-arm. Two invariants (a misconfiguration is

package/dist/index.d.ts

@@ -4349,7 +4349,7 @@ interface ResolvedNetwork {
         reason?: RecipientReason;
     }>;
     /**
-     * OPTIONAL (EVM + EIP-3009 only) — the BUYER counterpart to {@link settleExactSelf}.
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM) — the BUYER counterpart to {@link settleExactSelf}.
      * Build + EIP-712-sign an EIP-3009 `transferWithAuthorization` for a standard x402
      * `exact` rail, so a PipRail agent can PAY any standard x402 server (not just PipRail's
      * own `onchain-proof` gates). The client frames the returned `payload` + `accepted` echo
@@ -4881,7 +4881,7 @@ type PipRailEvent = {
  * Wallet for the chosen chain family. **One field, every chain: `{ key }`** — the
  * chain's secret as a string (the `chain` selector routes; each driver validates the
  * format). NEAR also needs `{ accountId }`. What `key` is, per chain:
- *   - EVM / Tron     → a 0x… hex private key (secp256k1)
+ *   - EVM / Tron     → a 0x… hex private key (secp256k1; Tron also accepts it without the 0x prefix)
  *   - Sui            → a `suiprivkey1…` bech32 secret
  *   - Aptos          → an AIP-80 `ed25519-priv-0x…` (or raw `0x…`) secret
  *   - Solana         → a base58 secret key (or a `Uint8Array`)
@@ -5226,6 +5226,15 @@ declare class PipRailClient {
     private readonly ledger;
     private bound?;
     constructor(opts: PipRailClientOptions);
+    /**
+     * Fail LOUDLY at construction on a malformed amount cap — a security boundary
+     * must never silently half-arm, and a misconfigured cap is a programmer error
+     * (→ `TypeError`, no new SDK code). Each cap (`maxAmount` / `maxTotal` /
+     * `windowTotal`) must be a non-negative decimal STRING (the same grammar
+     * {@link floorUnits} accepts), so a typo like `'0.01abc'` fails fast here instead
+     * of lazily throwing a raw `floorUnits` error out of the never-throw read methods.
+     */
+    private assertPolicyAmountCaps;
     /**
      * Fail LOUDLY at construction on a misconfigured time policy — a security
      * boundary must never silently half-arm. Two invariants (a misconfiguration is

package/dist/index.js

@@ -24,7 +24,7 @@ import {
   parseUnits,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-47VEOHZN.js";
+} from "./chunk-7XK22JSQ.js";
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -322,7 +322,21 @@ import { privateKeyToAccount } from "viem/accounts";
 function createWalletAdapter(config, resolved) {
   assertNoLegacyWalletKey(config, "EVM");
   if ("key" in config) {
-    const account = privateKeyToAccount(config.key);
+    const key = config.key;
+    if (typeof key !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(key)) {
+      const hint = typeof key === "string" && !key.startsWith("0x") ? " (got a non-0x string \u2014 a base58/seed key belongs to another family; pass { key } as the EVM chain's 0x\u2026 hex secret)." : " (expected 0x followed by 64 hex characters).";
+      throw new WrongFamilyError(
+        `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key${hint}`
+      );
+    }
+    let account;
+    try {
+      account = privateKeyToAccount(key);
+    } catch (err) {
+      throw new WrongFamilyError(
+        `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key: ${err instanceof Error ? err.message : String(err)}.`
+      );
+    }
     const transport = http(resolved.rpcUrl);
     const walletClient = createWalletClient({ account, chain: resolved.chain, transport });
     return { account, walletClient };
@@ -1494,6 +1508,7 @@ function isValidChallenge(value) {
   const v = value;
   if (v.x402Version !== 2) return false;
   if (!Array.isArray(v.accepts) || v.accepts.length === 0) return false;
+  if (!v.accepts.every((a) => a !== null && typeof a === "object")) return false;
   if (!v.resource || typeof v.resource !== "object") return false;
   return true;
 }
@@ -1801,7 +1816,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await import("./solana-DTO2R3AT.js");
+      mod = await import("./solana-E4MD6JJ6.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -1813,7 +1828,7 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await import("./ton-CPK57L2O.js");
+      mod = await import("./ton-5ZPT5PSP.js");
     } catch (cause) {
       throw new MissingDriverError(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
@@ -1825,7 +1840,7 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await import("./stellar-T5VONOEO.js");
+      mod = await import("./stellar-U5NCRIOJ.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
@@ -1837,7 +1852,7 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await import("./xrpl-AH4FFC2C.js");
+      mod = await import("./xrpl-2MZEOIFY.js");
     } catch (cause) {
       throw new MissingDriverError(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
@@ -1849,7 +1864,7 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await import("./tron-LZRCDRZC.js");
+      mod = await import("./tron-WYS4X2I5.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
@@ -1861,7 +1876,7 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await import("./sui-J53NYMVL.js");
+      mod = await import("./sui-Y53M4GUM.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
@@ -1873,7 +1888,7 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await import("./near-CHE7B2CY.js");
+      mod = await import("./near-MTYBCUYM.js");
     } catch (cause) {
       throw new MissingDriverError(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
@@ -1885,7 +1900,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await import("./aptos-SMEQXIYJ.js");
+      mod = await import("./aptos-RIL56C7L.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -1897,7 +1912,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await import("./algorand-RJ4DRWHV.js");
+      mod = await import("./algorand-GSFVZTBF.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2585,8 +2600,29 @@ var PipRailClient = class {
     this.maxRetries = Math.max(1, opts.maxPaymentRetries ?? 3);
     this.retryTimeoutMs = opts.retryTimeoutMs ?? 3e4;
     this.onEvent = opts.onEvent ?? (() => void 0);
+    this.assertPolicyAmountCaps(opts.policy);
     this.assertPolicyTimeOptions(opts.policy);
   }
+  /**
+   * Fail LOUDLY at construction on a malformed amount cap — a security boundary
+   * must never silently half-arm, and a misconfigured cap is a programmer error
+   * (→ `TypeError`, no new SDK code). Each cap (`maxAmount` / `maxTotal` /
+   * `windowTotal`) must be a non-negative decimal STRING (the same grammar
+   * {@link floorUnits} accepts), so a typo like `'0.01abc'` fails fast here instead
+   * of lazily throwing a raw `floorUnits` error out of the never-throw read methods.
+   */
+  assertPolicyAmountCaps(policy) {
+    if (!policy) return;
+    for (const field of ["maxAmount", "maxTotal", "windowTotal"]) {
+      const v = policy[field];
+      if (v === void 0) continue;
+      if (typeof v !== "string" || !/^\d+(\.\d+)?$/.test(v)) {
+        throw new TypeError(
+          `policy.${field} must be a non-negative decimal string (e.g. '0.10'); got ${JSON.stringify(v)}.`
+        );
+      }
+    }
+  }
   /**
    * Fail LOUDLY at construction on a misconfigured time policy — a security
    * boundary must never silently half-arm. Two invariants (a misconfiguration is
@@ -3189,20 +3225,25 @@ var PipRailClient = class {
   /** Build the agent-facing quote for an accept: TRUE decimals/symbol (via the
    *  driver's describeAsset) + the policy verdict + a symbol-mismatch flag. */
   buildQuote(net, accept, url, description) {
-    if (!/^\d+$/.test(accept.amount)) {
+    if (typeof accept.amount !== "string" || !/^\d+$/.test(accept.amount)) {
+      throw new InvalidEnvelopeError(
+        `challenge amount "${String(accept.amount)}" is not a base-unit integer string.`
+      );
+    }
+    if (typeof accept.asset !== "string" || accept.asset.length === 0) {
       throw new InvalidEnvelopeError(
-        `challenge amount "${accept.amount}" is not a base-unit integer.`
+        `challenge on ${accept.network} states no (string) asset \u2014 refusing to price it.`
       );
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = described?.decimals ?? accept.extra.decimals;
-    if (decimals === void 0) {
+    const decimals = described?.decimals ?? accept.extra?.decimals;
+    if (typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0) {
       throw new InvalidEnvelopeError(
-        `challenge for ${accept.asset} on ${accept.network} states no decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
+        `challenge for ${accept.asset} on ${accept.network} states no valid decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
       );
     }
-    const symbol = described?.symbol ?? accept.extra.symbol;
+    const symbol = described?.symbol ?? accept.extra?.symbol;
     const amountFormatted = formatUnits(amountBase, decimals);
     const intent = {
       host: hostOf2(url),
@@ -3234,7 +3275,7 @@ var PipRailClient = class {
       this.ledger.totalFor(accept.network, accept.asset),
       ctx
     );
-    const serverSymbol = accept.extra.symbol;
+    const serverSymbol = accept.extra?.symbol;
     const symbolMismatch = intent.recognized && !!serverSymbol && !!symbol && serverSymbol.toUpperCase() !== symbol.toUpperCase();
     return {
       url,
@@ -3310,7 +3351,7 @@ var PipRailClient = class {
     const ref = await net.send(wallet, accept);
     this.safeEmit({ kind: "payment-broadcast", ref });
     try {
-      const { height } = await net.confirm(ref, accept.extra.minConfirmations ?? 1);
+      const { height } = await net.confirm(ref, accept.extra?.minConfirmations ?? 1);
       this.safeEmit({
         kind: "payment-confirmed",
         ref,
@@ -3330,7 +3371,7 @@ var PipRailClient = class {
     const signature = {
       x402Version: 2,
       accepted: accept,
-      payload: { nonce: accept.extra.nonce, txHash: ref }
+      payload: { nonce: accept.extra?.nonce, txHash: ref }
     };
     const headers = new Headers(originalInit?.headers);
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
@@ -4023,6 +4064,22 @@ async function readBody(res) {
     return text;
   }
 }
+function toToolError(err) {
+  if (!(err instanceof PipRailError)) throw err;
+  const out = {
+    ok: false,
+    code: err.code,
+    reason: err.message,
+    explain: explainDecline(err)
+  };
+  if (err instanceof PaymentDeclinedError) {
+    out.declined = true;
+    if (err.reasonCode) out.reasonCode = err.reasonCode;
+  }
+  const ref = err.ref;
+  if (typeof ref === "string") out.ref = ref;
+  return out;
+}
 function paymentTools(client) {
   return [
     {
@@ -4049,23 +4106,27 @@ function paymentTools(client) {
         additionalProperties: false
       },
       invoke: async (args) => {
-        const opts = {};
-        if (typeof args.query === "string") opts.query = args.query;
-        if (typeof args.network === "string") opts.network = args.network;
-        if (typeof args.maxPrice === "number") opts.maxPrice = args.maxPrice;
-        if (typeof args.limit === "number") opts.limit = args.limit;
-        const found = await client.discover(opts);
-        return {
-          count: found.length,
-          resources: found.map((r) => ({
-            resource: r.resource,
-            name: r.name,
-            description: r.description,
-            source: r.source,
-            priceUsd: r.priceUsd,
-            networks: [...new Set(r.rails.map((rail) => rail.network))]
-          }))
-        };
+        try {
+          const opts = {};
+          if (typeof args.query === "string") opts.query = args.query;
+          if (typeof args.network === "string") opts.network = args.network;
+          if (typeof args.maxPrice === "number") opts.maxPrice = args.maxPrice;
+          if (typeof args.limit === "number") opts.limit = args.limit;
+          const found = await client.discover(opts);
+          return {
+            count: found.length,
+            resources: found.map((r) => ({
+              resource: r.resource,
+              name: r.name,
+              description: r.description,
+              source: r.source,
+              priceUsd: r.priceUsd,
+              networks: [...new Set(r.rails.map((rail) => rail.network))]
+            }))
+          };
+        } catch (err) {
+          return toToolError(err);
+        }
       }
     },
     {
@@ -4088,8 +4149,12 @@ function paymentTools(client) {
       },
       outputSchema: OPEN_OBJECT,
       invoke: async (args) => {
-        const quote = await client.quote(String(args.url));
-        return quote ? { gated: true, ...quote } : { gated: false, url: String(args.url) };
+        try {
+          const quote = await client.quote(String(args.url));
+          return quote ? { gated: true, ...quote } : { gated: false, url: String(args.url) };
+        } catch (err) {
+          return toToolError(err);
+        }
       }
     },
     {
@@ -4112,34 +4177,38 @@ function paymentTools(client) {
       },
       outputSchema: OPEN_OBJECT,
       invoke: async (args) => {
-        const plan = await client.planPayment(String(args.url));
-        if (plan == null) return { gated: false, url: String(args.url) };
-        return {
-          gated: true,
-          payable: plan.payable,
-          status: plan.status,
-          fundingHint: plan.fundingHint,
-          // One model-readable line distilling the whole plan.
-          summary: summarizePlan(plan),
-          best: plan.best ? {
-            network: plan.best.accept.network,
-            symbol: plan.best.quote.symbol,
-            amount: plan.best.quote.amountFormatted,
-            gasCoin: plan.best.cost.feeSymbol,
-            gas: plan.best.cost.feeFormatted
-          } : null,
-          options: plan.options.map((o) => ({
-            network: o.accept.network,
-            symbol: o.quote.symbol,
-            amount: o.quote.amountFormatted,
-            state: o.state,
-            blockers: o.blockers,
-            warnings: o.warnings,
-            recipientReady: o.recipient.ready
-          })),
-          // The session's time leash, present only when a time policy is configured.
-          ...plan.session ? { session: plan.session } : {}
-        };
+        try {
+          const plan = await client.planPayment(String(args.url));
+          if (plan == null) return { gated: false, url: String(args.url) };
+          return {
+            gated: true,
+            payable: plan.payable,
+            status: plan.status,
+            fundingHint: plan.fundingHint,
+            // One model-readable line distilling the whole plan.
+            summary: summarizePlan(plan),
+            best: plan.best ? {
+              network: plan.best.accept.network,
+              symbol: plan.best.quote.symbol,
+              amount: plan.best.quote.amountFormatted,
+              gasCoin: plan.best.cost.feeSymbol,
+              gas: plan.best.cost.feeFormatted
+            } : null,
+            options: plan.options.map((o) => ({
+              network: o.accept.network,
+              symbol: o.quote.symbol,
+              amount: o.quote.amountFormatted,
+              state: o.state,
+              blockers: o.blockers,
+              warnings: o.warnings,
+              recipientReady: o.recipient.ready
+            })),
+            // The session's time leash, present only when a time policy is configured.
+            ...plan.session ? { session: plan.session } : {}
+          };
+        } catch (err) {
+          return toToolError(err);
+        }
       }
     },
     {
@@ -4245,14 +4314,18 @@ function paymentTools(client) {
         additionalProperties: false
       },
       invoke: async (args) => {
-        const opts = {};
-        if (typeof args.name === "string") opts.name = args.name;
-        if (typeof args.description === "string") opts.description = args.description;
-        if (typeof args.priceUsd === "number") opts.priceUsd = args.priceUsd;
-        if (typeof args.network === "string") opts.network = args.network;
-        if (typeof args.asset === "string") opts.asset = args.asset;
-        const outcomes = await client.register(String(args.url), opts);
-        return { outcomes };
+        try {
+          const opts = {};
+          if (typeof args.name === "string") opts.name = args.name;
+          if (typeof args.description === "string") opts.description = args.description;
+          if (typeof args.priceUsd === "number") opts.priceUsd = args.priceUsd;
+          if (typeof args.network === "string") opts.network = args.network;
+          if (typeof args.asset === "string") opts.asset = args.asset;
+          const outcomes = await client.register(String(args.url), opts);
+          return { outcomes };
+        } catch (err) {
+          return toToolError(err);
+        }
       }
     },
     {
@@ -4268,14 +4341,18 @@ function paymentTools(client) {
       parameters: { type: "object", properties: {}, additionalProperties: false },
       outputSchema: OPEN_OBJECT,
       invoke: async () => {
-        const spent = client.spent();
-        const budget = client.budget();
-        return {
-          spent,
-          remaining: budget.byAsset,
-          session: budget.session,
-          report: formatSpendReport(spent)
-        };
+        try {
+          const spent = client.spent();
+          const budget = client.budget();
+          return {
+            spent,
+            remaining: budget.byAsset,
+            session: budget.session,
+            report: formatSpendReport(spent)
+          };
+        } catch (err) {
+          return toToolError(err);
+        }
       }
     },
     {

package/dist/{near-VWBV3SUW.cjs → near-DI2I3MAV.cjs}

@@ -8,7 +8,7 @@
 
 
 
-var _chunkDKQXW454cjs = require('./chunk-DKQXW454.cjs');
+var _chunkJG6KRAW6cjs = require('./chunk-JG6KRAW6.cjs');
 
 // src/drivers/near/index.ts
 var _nearapijs = require('near-api-js');
@@ -54,18 +54,18 @@ async function payNear(params) {
     return res.hash;
   } catch (err) {
     if (isNearRegistrationError(err)) {
-      throw new (0, _chunkDKQXW454cjs.RecipientNotReadyError)(
+      throw new (0, _chunkJG6KRAW6cjs.RecipientNotReadyError)(
         `NEAR recipient ${accept.payTo} isn't registered on token ${accept.asset} (NEP-145 storage_deposit) \u2014 register it once (\u22480.00125 NEAR) before it can receive. (NEAR: not registered)`,
         { cause: err }
       );
     }
     if (isNearAffordability(err)) {
-      throw new (0, _chunkDKQXW454cjs.InsufficientFundsError)(
+      throw new (0, _chunkJG6KRAW6cjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkDKQXW454cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 async function payNearNative(params) {
@@ -75,12 +75,12 @@ async function payNearNative(params) {
     return res.hash;
   } catch (err) {
     if (isNearAffordability(err)) {
-      throw new (0, _chunkDKQXW454cjs.InsufficientFundsError)(
+      throw new (0, _chunkJG6KRAW6cjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkDKQXW454cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isNearRegistrationError(err) {
@@ -217,13 +217,13 @@ function txNotFound(hash) {
 
 function assertNearWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkDKQXW454cjs.WrongFamilyError)(
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
-  _chunkDKQXW454cjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
+  _chunkJG6KRAW6cjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
   if (!("accountId" in wallet) || !("key" in wallet)) {
-    throw new (0, _chunkDKQXW454cjs.WrongFamilyError)(
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
@@ -231,13 +231,13 @@ function assertNearWallet(wallet, network) {
 }
 function resolveNearWallet(config) {
   if (!config.accountId || !config.key) {
-    throw new (0, _chunkDKQXW454cjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
   }
   let signer;
   try {
     signer = _nearapijs.KeyPairSigner.fromSecretKey(config.key);
   } catch (cause) {
-    throw new (0, _chunkDKQXW454cjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
+    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
       cause
     });
   }
@@ -304,16 +304,16 @@ function makeNearNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkDKQXW454cjs.UnknownTokenError)(
+          throw new (0, _chunkJG6KRAW6cjs.UnknownTokenError)(
             `token "${token}" isn't built in for NEAR (known: ${known}). Pass { contractId, decimals } for a custom NEP-141.`
           );
         }
         return { asset: info.contractId, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkDKQXW454cjs.rejectForeignToken.call(void 0, token, "near", network);
+      _chunkJG6KRAW6cjs.rejectForeignToken.call(void 0, token, "near", network);
       const t = token;
       if (!t.contractId || typeof t.decimals !== "number") {
-        throw new (0, _chunkDKQXW454cjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is NEAR; a custom token must be { contractId, decimals }.`
         );
       }
@@ -332,12 +332,12 @@ function makeNearNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkDKQXW454cjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" looks like an EVM/Sui 0x address.`
         );
       }
       if (!isValidNearAccountId(payTo)) {
-        throw new (0, _chunkDKQXW454cjs.WrongFamilyError)(
+        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" is not a valid NEAR account id.`
         );
       }
@@ -381,10 +381,10 @@ function makeNearNetwork(preset, rpcUrl) {
         if (tx && tx.success) return { height: "0" };
       } catch (e7) {
       }
-      throw new (0, _chunkDKQXW454cjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
+      throw new (0, _chunkJG6KRAW6cjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
     },
     async estimateCost() {
-      return _chunkDKQXW454cjs.nativeCost.call(void 0, {
+      return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
         symbol: "NEAR",
         decimals: NEAR_DECIMALS,
         fee: 1500000000000000000000n,

package/dist/{near-CHE7B2CY.js → near-MTYBCUYM.js}

@@ -8,7 +8,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-47VEOHZN.js";
+} from "./chunk-7XK22JSQ.js";
 
 // src/drivers/near/index.ts
 import { JsonRpcProvider, Account, actions } from "near-api-js";

package/dist/{solana-DTO2R3AT.js → solana-E4MD6JJ6.js}

@@ -8,7 +8,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-47VEOHZN.js";
+} from "./chunk-7XK22JSQ.js";
 
 // src/drivers/solana/index.ts
 import { Connection, PublicKey as PublicKey3 } from "@solana/web3.js";
@@ -521,8 +521,19 @@ function toKeypair(wallet, network) {
   }
   if ("key" in wallet) {
     const sk = wallet.key;
-    const bytes = typeof sk === "string" ? bs582.decode(sk) : sk;
-    return Keypair3.fromSecretKey(bytes);
+    if (typeof sk === "string" && sk.startsWith("0x")) {
+      throw new WrongFamilyError(
+        `chain ${network} is Solana, but the wallet { key } is a 0x\u2026 hex key \u2014 that's an EVM key. A Solana key is a base58 secret string (or a 64-byte Uint8Array).`
+      );
+    }
+    try {
+      const bytes = typeof sk === "string" ? bs582.decode(sk) : sk;
+      return Keypair3.fromSecretKey(bytes);
+    } catch (err) {
+      throw new WrongFamilyError(
+        `chain ${network} is Solana; the wallet { key } isn't a valid Solana secret (expected a base58 secret string or a 64-byte Uint8Array): ${err instanceof Error ? err.message : String(err)}.`
+      );
+    }
   }
   throw new WrongFamilyError(
     `chain ${network} is Solana; wallet must be { key } (base58 secret) or { signer }.`