@piprail/sdk 2.10.0 → 2.12.0

package/CHANGELOG.md

@@ -4,6 +4,46 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [2.12.0] — 2026-06-21 — BNB: the `U` (United Stables) token + Binance `permit2-exact` interop
+
+BNB Chain max-out — full token parity with Binance's own x402 set, plus tolerance for Binance's
+Permit2 dialect. Additive; no default changes, every other chain/rail byte-identical to 2.11.0.
+
+- **feat(bnb): add `U` (United Stables) as a built-in BNB token.** `0xcE24439F2D9C6a2289F741120FE202248B666666`
+  (18dp) — the **first-listed token in Binance's own x402 set** (U/USD1/USDT/USDC) and the BNB Agent
+  Survival Pack settlement unit. Native **EIP-3009** (domain name `"United Stables"`, version `"1"`
+  derived from `DOMAIN_SEPARATOR`, no `version()`), so it routes onto the existing gasless
+  `transferWithAuthorization` rail with **no new protocol code** — like FDUSD/USD1. On-chain-verified,
+  and **live-proven on BNB mainnet**: a keyless facilitator (Pieverse) sponsored the gas — buyer AND
+  merchant paid **zero BNB** (settle tx `0x2b3b8c51ae81df441551301c44a64652c84c796af3b9d03ec58ea38f1cb013d5`).
+  Dexter + Pieverse both accept `U`; self-settle gasless also works. Grouped as `USD` for budget policy.
+- **feat(x402): the buyer tolerates the `permit2-exact` `assetTransferMethod` label.** Binance's x402
+  facilitator ("b402") labels its EVM-Permit2 exact rail `permit2-exact` (the coinbase/x402 spec uses
+  bare `permit2`). PipRail still **emits** `permit2`; the buyer now treats `permit2-exact` as the same
+  Permit2 rail, so it can pay a Binance-issued 402. The gate/seller side already discriminates on
+  payload shape, so it was unaffected. Additive — no existing `permit2`/`eip3009` rail changes.
+
+## [2.11.0] — 2026-06-21 — A2A interop hardening: spec-correct merchant status + verified x402-V2 conformance
+
+A2A transport correctness, after a **live cross-check against Google's official `x402` / `x402_a2a`
+libraries** (reproducible harness + verdict in `examples/a2a-interop/`). One behavior fix on the A2A rejection path;
+HTTP and every other rail are byte-identical to 2.10.0.
+
+- **fix(a2a): a rejected proof now re-challenges as `payment-required`, not the client-only
+  `payment-rejected`.** Per the A2A x402 spec §5.1 and Google's reference merchant executor, a MERCHANT
+  emits only `payment-required` / `payment-completed` / `payment-failed`; `payment-rejected` and
+  `payment-submitted` are CLIENT→merchant statuses. A rejection is now signalled by the appended failure
+  receipt + the `x402.payment.error` code — the retry loop and the `input-required` state are unchanged.
+- **interop: PipRail's A2A envelopes are byte-conformant with the current x402 V2 standard.** The
+  canonical `x402` lib parses our `PaymentRequired` + `PaymentPayload` (CAIP-2 networks, `amount`,
+  `x402Version: 2`, nested `accepted`); the five `x402.payment.*` keys + the extension URI match
+  `x402_a2a` verbatim. The deferred emit-version question is resolved — **v2** (the live standard; the
+  legacy v0.1 `x402-a2a` package is bitrotted and not targeted). New always-on guard:
+  `test/transports/a2a-wire-conformance.test.ts`; reproducible cross-check harness: `examples/a2a-interop/`.
+- **docs(a2a):** the A2A guide is now fully runnable — a real `@a2a-js/sdk` `AgentExecutor` mount, a
+  complete AgentCard, where the buyer's payload comes from, and the co-resident one-gate pattern.
+- No public API change. A2A remains seller-side (the `A2APayer` buyer + AP2 mandate carriage stay deferred).
+
 ## [2.10.0] — 2026-06-20 — x402 parity: verifiable receipts · the `upto` metered rail · A2A transport
 
 Four ratified-x402 capabilities, all **additive and opt-in** — omit the new options and the 402, the
@@ -1589,6 +1629,10 @@ straight into your wallet. The API is small and self-contained.
   to your wallet; PipRail never holds funds.
 - `viem ^2.21` is a peer dependency. Node 20+ or a modern browser.
 
+[2.12.0]: https://www.npmjs.com/package/@piprail/sdk
+[2.11.0]: https://www.npmjs.com/package/@piprail/sdk
+[2.10.0]: https://www.npmjs.com/package/@piprail/sdk
+[2.9.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.8.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.7.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.6.0]: https://www.npmjs.com/package/@piprail/sdk

package/dist/index.cjs

@@ -149,11 +149,15 @@ var CHAINS = {
       // Binance-Peg (NOT EIP-3009) → the `exact` rail uses Permit2.
       USDC: { address: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d", decimals: 18, symbol: "USDC" },
       USDT: { address: "0x55d398326f99059fF775485246999027B3197955", decimals: 18, symbol: "USDT" },
-      // FDUSD + USD1 ARE EIP-3009 (transferWithAuthorization) → the `exact` rail uses the gasless,
-      // no-Permit2-approve path. Both hardcode EIP-712 domain version "1" (no version() — the SDK
-      // derives it from DOMAIN_SEPARATOR). Verified on-chain (symbol/decimals/domain match).
+      // FDUSD, USD1 + U ARE EIP-3009 (transferWithAuthorization) → the `exact` rail uses the gasless,
+      // no-Permit2-approve path. All three hardcode EIP-712 domain version "1" (no version() — the
+      // SDK derives it from DOMAIN_SEPARATOR). Verified on-chain (symbol/decimals/domain match).
       FDUSD: { address: "0xc5f0f7b66764F6ec8C8Dff7BA683102295E16409", decimals: 18, symbol: "FDUSD" },
-      USD1: { address: "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", decimals: 18, symbol: "USD1" }
+      USD1: { address: "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", decimals: 18, symbol: "USD1" },
+      // U (United Stables) — the first-listed token in Binance's own x402 set (U/USD1/USDT/USDC) and
+      // the BNB Agent Survival Pack settlement unit. EIP-3009 (domain name "United Stables",
+      // version "1" derived from DOMAIN_SEPARATOR 0x358738…1679b6). On-chain-verified 2026-06-21.
+      U: { address: "0xcE24439F2D9C6a2289F741120FE202248B666666", decimals: 18, symbol: "U" }
     }
   },
   avalanche: {
@@ -2118,7 +2122,8 @@ function makeEvmNetwork(resolved) {
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact") {
-        const permit2 = accept.extra.assetTransferMethod === "permit2";
+        const m = accept.extra.assetTransferMethod;
+        const permit2 = m === "permit2" || m === "permit2-exact";
         return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
@@ -2198,10 +2203,12 @@ function makeEvmNetwork(resolved) {
     // `assetTransferMethod`: `permit2` (any ERC-20 — e.g. Binance-Peg USDC on BNB, signs a
     // Permit2 witness transfer + lazily does the one-time approval) or `eip3009` (re-derives
     // the token's EIP-712 domain on-chain + signs transferWithAuthorization). Never broadcasts.
+    // `permit2-exact` is Binance b402's foreign-dialect alias for `permit2` — treated identically.
     // Throws UnsupportedSchemeError for a contract signer (or a non-EIP-3009 token on the eip3009 path).
     async payExact(wallet, accept) {
       const a = wallet._native;
-      if (accept.extra.assetTransferMethod === "permit2") {
+      const method = accept.extra.assetTransferMethod;
+      if (method === "permit2" || method === "permit2-exact") {
         const { payload: payload2, payerFrom: payerFrom2, nonce: nonce2 } = await payPermit2Evm({
           publicClient,
           walletClient: a.walletClient,
@@ -3070,6 +3077,8 @@ var BUILTIN_DENOMS = {
   USDT: "USD",
   USD1: "USD",
   FDUSD: "USD",
+  U: "USD",
+  // United Stables — BNB EIP-3009 stablecoin (1:1 USDC/USDT/USD1-backed)
   RLUSD: "USD",
   EURC: "EUR"
 };
@@ -6332,25 +6341,25 @@ var KNOWN_FACILITATORS = {
       note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
     }
   ],
-  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
-  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // BNB Chain (eip155:56). Dexter + Pieverse keyless-settle the EVM EIP-3009 exact rail for BNB's
+  // EIP-3009 tokens (FDUSD / USD1 / U); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
   // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
   // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
-  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  // FDUSD + U, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
   "eip155:56": [
     {
       url: "https://x402.dexter.cash",
       keyless: true,
       schemes: ["exact"],
       settles: ["eip3009"],
-      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1/U (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e); accepts U (verify confirmed 2026-06-21)."
     },
     {
       url: "https://facilitator.pieverse.io",
       keyless: true,
       schemes: ["exact"],
       settles: ["eip3009"],
-      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1/U (same Binance-Peg caveat as Dexter). LIVE-settled on BNB with FDUSD 2026-06-17 (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) AND with the U / United Stables token 2026-06-21 (tx 0x2b3b8c51ae81df441551301c44a64652c84c796af3b9d03ec58ea38f1cb013d5, buyer 0 BNB) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
     }
   ],
   // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
@@ -7586,7 +7595,7 @@ function createA2APaymentHandler(options) {
     const network = _nullishCoalesce(attempted, () => ( singleNetworkOf(result.challenge)));
     const receipts = appendReceiptFailed(taskId, result.error, result.detail, network);
     const metadata = {
-      [A2A_STATUS_KEY]: "payment-rejected",
+      [A2A_STATUS_KEY]: "payment-required",
       [A2A_ERROR_KEY]: toA2AErrorCode(result.error),
       [A2A_REQUIRED_KEY]: result.challenge,
       ...toA2APaymentReceipts(receipts)

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as Caip2, X as X402AcceptEntry, x as X402AnyAccept, z as X402ExactAcceptEntry, d as ExactPaymentPayloadAny, p as SignedReceipt, w as VerifyResult, G as X402UptoAcceptEntry, n as Permit2UptoPaymentPayload, v as SpendSummary, y as X402Challenge, D as X402Receipt, S as SettleOutcome, u as SpendStore, s as SpendLedger, t as SpendRecord, o as PipRailReceipt, V as VerifyErrorCode, a as AssetId, A as AddressId, P as PaidReceipt } from './ledger-OQos-tmj.cjs';
-export { E as EXT_OFFER_RECEIPT, b as ExactAuthorizationWire, c as ExactPaymentPayload, H as HEADER_REQUIRED, e as HEADER_RESPONSE, f as HEADER_RESPONSE_V1, g as HEADER_SIGNATURE, h as HEADER_SIGNATURE_V1, i as ParsedExactPayment, j as ParsedUptoPayment, k as Permit2Authorization, l as Permit2PaymentPayload, m as Permit2UptoAuthorization, q as SpendAssetTotal, r as SpendDenomTotal, B as X402PaymentSignature, F as X402ResourceObject, I as buildChallengeHeader, J as buildExactSignatureHeader, K as buildReceiptExtension, L as buildReceiptHeader, M as buildSignatureHeader, N as buildUptoSignatureHeader, O as decodeBase64Json, Q as memorySpendStore, R as parseChallenge, T as parseExactObject, U as parseExactPaymentHeader, W as parseReceipt, Y as parseReceiptExtension, Z as parseSettleResponse, _ as parseSignatureHeader, $ as parseSignatureObject, a0 as parseUptoObject, a1 as parseUptoPaymentHeader, a2 as pickAccept } from './ledger-OQos-tmj.cjs';
+import { C as Caip2, X as X402AcceptEntry, x as X402AnyAccept, z as X402ExactAcceptEntry, d as ExactPaymentPayloadAny, p as SignedReceipt, w as VerifyResult, G as X402UptoAcceptEntry, n as Permit2UptoPaymentPayload, v as SpendSummary, y as X402Challenge, D as X402Receipt, S as SettleOutcome, u as SpendStore, s as SpendLedger, t as SpendRecord, o as PipRailReceipt, V as VerifyErrorCode, a as AssetId, A as AddressId, P as PaidReceipt } from './ledger-mF_SoiDB.cjs';
+export { E as EXT_OFFER_RECEIPT, b as ExactAuthorizationWire, c as ExactPaymentPayload, H as HEADER_REQUIRED, e as HEADER_RESPONSE, f as HEADER_RESPONSE_V1, g as HEADER_SIGNATURE, h as HEADER_SIGNATURE_V1, i as ParsedExactPayment, j as ParsedUptoPayment, k as Permit2Authorization, l as Permit2PaymentPayload, m as Permit2UptoAuthorization, q as SpendAssetTotal, r as SpendDenomTotal, B as X402PaymentSignature, F as X402ResourceObject, I as buildChallengeHeader, J as buildExactSignatureHeader, K as buildReceiptExtension, L as buildReceiptHeader, M as buildSignatureHeader, N as buildUptoSignatureHeader, O as decodeBase64Json, Q as memorySpendStore, R as parseChallenge, T as parseExactObject, U as parseExactPaymentHeader, W as parseReceipt, Y as parseReceiptExtension, Z as parseSettleResponse, _ as parseSignatureHeader, $ as parseSignatureObject, a0 as parseUptoObject, a1 as parseUptoPaymentHeader, a2 as pickAccept } from './ledger-mF_SoiDB.cjs';
 import * as viem_zksync from 'viem/zksync';
 import * as abitype from 'abitype';
 import * as viem_chains from 'viem/chains';
@@ -740,9 +740,7 @@ declare const CHAINS: {
                     } | {
                         blockHash: `0x${string}` | null;
                         blockNumber: bigint | null;
-                        blockTimestamp
-                        /** EVM chain id, e.g. 5000 for Mantle. */
-                        ? /** EVM chain id, e.g. 5000 for Mantle. */: bigint | undefined;
+                        blockTimestamp?: bigint | undefined;
                         from: abitype.Address;
                         gas: bigint;
                         hash: viem.Hash;
@@ -986,6 +984,11 @@ declare const CHAINS: {
                 decimals: number;
                 symbol: string;
             };
+            U: {
+                address: "0xcE24439F2D9C6a2289F741120FE202248B666666";
+                decimals: number;
+                symbol: string;
+            };
         };
     };
     avalanche: {
@@ -2454,9 +2457,7 @@ declare const CHAINS: {
                         chainId: number;
                         type: "eip7702";
                         gasPrice?: undefined | undefined;
-                        maxFeePerBlobGas
-                        /** JSON-RPC endpoint. */
-                        ? /** JSON-RPC endpoint. */: undefined | undefined;
+                        maxFeePerBlobGas?: undefined | undefined;
                         maxFeePerGas: bigint;
                         maxPriorityFeePerGas: bigint;
                         l1BatchNumber: bigint | null;
@@ -3293,7 +3294,15 @@ declare const CHAINS: {
                         maxPriorityFeePerGas: bigint;
                         isSystemTx?: undefined | undefined;
                         mint?: undefined | undefined;
-                        sourceHash?: undefined | undefined;
+                        sourceHash
+                        /**
+                         * Normalise a `ChainInput` (+ optional rpc override) into the
+                         * `{ chain, chainId, rpcUrl, tokens }` the wallet and verifier need.
+                         */
+                        ? /**
+                         * Normalise a `ChainInput` (+ optional rpc override) into the
+                         * `{ chain, chainId, rpcUrl, tokens }` the wallet and verifier need.
+                         */: undefined | undefined;
                     } | {
                         blockHash: `0x${string}` | null;
                         blockNumber: bigint | null;
@@ -7964,15 +7973,21 @@ interface A2ATaskRecord {
  *  • B7 — `receipts[]` is the UNION `(X402Receipt | SettleOutcome)[]` (it carries FAILED
  *    attempts); a fulfill-throws-AFTER-settle ends the Task `completed` with the successful
  *    receipt + an error annotation (NEVER re-challenge / failed — the money already moved).
- *  • Emit strict `x402Version: 2` (the inbound object-cores absorb v1). The emit version is
- *    the deferred B8 live-interop ship-gate — do NOT change it here.
+ *  • Emit `x402Version: 2` — RESOLVED 2026-06-21: v2 IS the live x402 standard. A live cross-check
+ *    against Google's official libs (reproducible harness in `examples/a2a-interop/`) showed the canonical
+ *    `x402` lib (2.13.1, V2: `amount` / CAIP-2 / nested `accepted`) parses our PaymentRequired +
+ *    PaymentPayload byte-identically, while the legacy v0.1 `x402_a2a` package (x402Version 1,
+ *    `maxAmountRequired`, chain slugs) is bitrotted. Inbound v1 object-cores are absorbed for the
+ *    standard `exact` scheme; PipRail-native `onchain-proof` is always v2 (never sent v1-flat).
+ *  • Merchant statuses are spec-bounded: `payment-required` (incl. a retryable re-challenge of a
+ *    rejected proof) / `payment-completed` / `payment-failed`. `payment-rejected` + `payment-submitted`
+ *    are CLIENT→merchant statuses we never emit.
  *
  * ── DEFERRED (NOT built here — see the x402-parity/03-a2a-transport plan) ──────
- *  • Phase 4 — the A2A BUYER (`A2APayer`): trails on live interop.
- *  • Phase 5 — AP2 `CartMandate`/`PaymentMandate` carriage (payment-carriage only, no
- *    mandate-trust machinery).
- *  • B8 ship-gate — the live Google `adk-demo` reference-client run + the final v1-vs-v2
- *    emit-version decision (a live-runtime gate, not buildable offline).
+ *  • Phase 4 — the A2A BUYER (`A2APayer`): the HTTP buyer mints the payload that rides A2A today.
+ *  • Phase 5 — AP2 `CartMandate`/`PaymentMandate` carriage (the Embedded Flow; no mandate-trust machinery).
+ *  • B8 ship-gate — RESOLVED at the wire level (above). A live `adk-demo` AGENT run is blocked by that
+ *    package's dependency bitrot (won't import on current `x402`/`a2a-sdk`), not by PipRail.
  */
 
 /** The x402 A2A extension URI the x402-foundation doc + ALL Google reference code cite

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as Caip2, X as X402AcceptEntry, x as X402AnyAccept, z as X402ExactAcceptEntry, d as ExactPaymentPayloadAny, p as SignedReceipt, w as VerifyResult, G as X402UptoAcceptEntry, n as Permit2UptoPaymentPayload, v as SpendSummary, y as X402Challenge, D as X402Receipt, S as SettleOutcome, u as SpendStore, s as SpendLedger, t as SpendRecord, o as PipRailReceipt, V as VerifyErrorCode, a as AssetId, A as AddressId, P as PaidReceipt } from './ledger-OQos-tmj.js';
-export { E as EXT_OFFER_RECEIPT, b as ExactAuthorizationWire, c as ExactPaymentPayload, H as HEADER_REQUIRED, e as HEADER_RESPONSE, f as HEADER_RESPONSE_V1, g as HEADER_SIGNATURE, h as HEADER_SIGNATURE_V1, i as ParsedExactPayment, j as ParsedUptoPayment, k as Permit2Authorization, l as Permit2PaymentPayload, m as Permit2UptoAuthorization, q as SpendAssetTotal, r as SpendDenomTotal, B as X402PaymentSignature, F as X402ResourceObject, I as buildChallengeHeader, J as buildExactSignatureHeader, K as buildReceiptExtension, L as buildReceiptHeader, M as buildSignatureHeader, N as buildUptoSignatureHeader, O as decodeBase64Json, Q as memorySpendStore, R as parseChallenge, T as parseExactObject, U as parseExactPaymentHeader, W as parseReceipt, Y as parseReceiptExtension, Z as parseSettleResponse, _ as parseSignatureHeader, $ as parseSignatureObject, a0 as parseUptoObject, a1 as parseUptoPaymentHeader, a2 as pickAccept } from './ledger-OQos-tmj.js';
+import { C as Caip2, X as X402AcceptEntry, x as X402AnyAccept, z as X402ExactAcceptEntry, d as ExactPaymentPayloadAny, p as SignedReceipt, w as VerifyResult, G as X402UptoAcceptEntry, n as Permit2UptoPaymentPayload, v as SpendSummary, y as X402Challenge, D as X402Receipt, S as SettleOutcome, u as SpendStore, s as SpendLedger, t as SpendRecord, o as PipRailReceipt, V as VerifyErrorCode, a as AssetId, A as AddressId, P as PaidReceipt } from './ledger-mF_SoiDB.js';
+export { E as EXT_OFFER_RECEIPT, b as ExactAuthorizationWire, c as ExactPaymentPayload, H as HEADER_REQUIRED, e as HEADER_RESPONSE, f as HEADER_RESPONSE_V1, g as HEADER_SIGNATURE, h as HEADER_SIGNATURE_V1, i as ParsedExactPayment, j as ParsedUptoPayment, k as Permit2Authorization, l as Permit2PaymentPayload, m as Permit2UptoAuthorization, q as SpendAssetTotal, r as SpendDenomTotal, B as X402PaymentSignature, F as X402ResourceObject, I as buildChallengeHeader, J as buildExactSignatureHeader, K as buildReceiptExtension, L as buildReceiptHeader, M as buildSignatureHeader, N as buildUptoSignatureHeader, O as decodeBase64Json, Q as memorySpendStore, R as parseChallenge, T as parseExactObject, U as parseExactPaymentHeader, W as parseReceipt, Y as parseReceiptExtension, Z as parseSettleResponse, _ as parseSignatureHeader, $ as parseSignatureObject, a0 as parseUptoObject, a1 as parseUptoPaymentHeader, a2 as pickAccept } from './ledger-mF_SoiDB.js';
 import * as viem_zksync from 'viem/zksync';
 import * as abitype from 'abitype';
 import * as viem_chains from 'viem/chains';
@@ -740,9 +740,7 @@ declare const CHAINS: {
                     } | {
                         blockHash: `0x${string}` | null;
                         blockNumber: bigint | null;
-                        blockTimestamp
-                        /** EVM chain id, e.g. 5000 for Mantle. */
-                        ? /** EVM chain id, e.g. 5000 for Mantle. */: bigint | undefined;
+                        blockTimestamp?: bigint | undefined;
                         from: abitype.Address;
                         gas: bigint;
                         hash: viem.Hash;
@@ -986,6 +984,11 @@ declare const CHAINS: {
                 decimals: number;
                 symbol: string;
             };
+            U: {
+                address: "0xcE24439F2D9C6a2289F741120FE202248B666666";
+                decimals: number;
+                symbol: string;
+            };
         };
     };
     avalanche: {
@@ -2454,9 +2457,7 @@ declare const CHAINS: {
                         chainId: number;
                         type: "eip7702";
                         gasPrice?: undefined | undefined;
-                        maxFeePerBlobGas
-                        /** JSON-RPC endpoint. */
-                        ? /** JSON-RPC endpoint. */: undefined | undefined;
+                        maxFeePerBlobGas?: undefined | undefined;
                         maxFeePerGas: bigint;
                         maxPriorityFeePerGas: bigint;
                         l1BatchNumber: bigint | null;
@@ -3293,7 +3294,15 @@ declare const CHAINS: {
                         maxPriorityFeePerGas: bigint;
                         isSystemTx?: undefined | undefined;
                         mint?: undefined | undefined;
-                        sourceHash?: undefined | undefined;
+                        sourceHash
+                        /**
+                         * Normalise a `ChainInput` (+ optional rpc override) into the
+                         * `{ chain, chainId, rpcUrl, tokens }` the wallet and verifier need.
+                         */
+                        ? /**
+                         * Normalise a `ChainInput` (+ optional rpc override) into the
+                         * `{ chain, chainId, rpcUrl, tokens }` the wallet and verifier need.
+                         */: undefined | undefined;
                     } | {
                         blockHash: `0x${string}` | null;
                         blockNumber: bigint | null;
@@ -7964,15 +7973,21 @@ interface A2ATaskRecord {
  *  • B7 — `receipts[]` is the UNION `(X402Receipt | SettleOutcome)[]` (it carries FAILED
  *    attempts); a fulfill-throws-AFTER-settle ends the Task `completed` with the successful
  *    receipt + an error annotation (NEVER re-challenge / failed — the money already moved).
- *  • Emit strict `x402Version: 2` (the inbound object-cores absorb v1). The emit version is
- *    the deferred B8 live-interop ship-gate — do NOT change it here.
+ *  • Emit `x402Version: 2` — RESOLVED 2026-06-21: v2 IS the live x402 standard. A live cross-check
+ *    against Google's official libs (reproducible harness in `examples/a2a-interop/`) showed the canonical
+ *    `x402` lib (2.13.1, V2: `amount` / CAIP-2 / nested `accepted`) parses our PaymentRequired +
+ *    PaymentPayload byte-identically, while the legacy v0.1 `x402_a2a` package (x402Version 1,
+ *    `maxAmountRequired`, chain slugs) is bitrotted. Inbound v1 object-cores are absorbed for the
+ *    standard `exact` scheme; PipRail-native `onchain-proof` is always v2 (never sent v1-flat).
+ *  • Merchant statuses are spec-bounded: `payment-required` (incl. a retryable re-challenge of a
+ *    rejected proof) / `payment-completed` / `payment-failed`. `payment-rejected` + `payment-submitted`
+ *    are CLIENT→merchant statuses we never emit.
  *
  * ── DEFERRED (NOT built here — see the x402-parity/03-a2a-transport plan) ──────
- *  • Phase 4 — the A2A BUYER (`A2APayer`): trails on live interop.
- *  • Phase 5 — AP2 `CartMandate`/`PaymentMandate` carriage (payment-carriage only, no
- *    mandate-trust machinery).
- *  • B8 ship-gate — the live Google `adk-demo` reference-client run + the final v1-vs-v2
- *    emit-version decision (a live-runtime gate, not buildable offline).
+ *  • Phase 4 — the A2A BUYER (`A2APayer`): the HTTP buyer mints the payload that rides A2A today.
+ *  • Phase 5 — AP2 `CartMandate`/`PaymentMandate` carriage (the Embedded Flow; no mandate-trust machinery).
+ *  • B8 ship-gate — RESOLVED at the wire level (above). A live `adk-demo` AGENT run is blocked by that
+ *    package's dependency bitrot (won't import on current `x402`/`a2a-sdk`), not by PipRail.
  */
 
 /** The x402 A2A extension URI the x402-foundation doc + ALL Google reference code cite

package/dist/index.js

@@ -149,11 +149,15 @@ var CHAINS = {
       // Binance-Peg (NOT EIP-3009) → the `exact` rail uses Permit2.
       USDC: { address: "0x8AC76a51cc950d9822D68b83fE1Ad97B32Cd580d", decimals: 18, symbol: "USDC" },
       USDT: { address: "0x55d398326f99059fF775485246999027B3197955", decimals: 18, symbol: "USDT" },
-      // FDUSD + USD1 ARE EIP-3009 (transferWithAuthorization) → the `exact` rail uses the gasless,
-      // no-Permit2-approve path. Both hardcode EIP-712 domain version "1" (no version() — the SDK
-      // derives it from DOMAIN_SEPARATOR). Verified on-chain (symbol/decimals/domain match).
+      // FDUSD, USD1 + U ARE EIP-3009 (transferWithAuthorization) → the `exact` rail uses the gasless,
+      // no-Permit2-approve path. All three hardcode EIP-712 domain version "1" (no version() — the
+      // SDK derives it from DOMAIN_SEPARATOR). Verified on-chain (symbol/decimals/domain match).
       FDUSD: { address: "0xc5f0f7b66764F6ec8C8Dff7BA683102295E16409", decimals: 18, symbol: "FDUSD" },
-      USD1: { address: "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", decimals: 18, symbol: "USD1" }
+      USD1: { address: "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", decimals: 18, symbol: "USD1" },
+      // U (United Stables) — the first-listed token in Binance's own x402 set (U/USD1/USDT/USDC) and
+      // the BNB Agent Survival Pack settlement unit. EIP-3009 (domain name "United Stables",
+      // version "1" derived from DOMAIN_SEPARATOR 0x358738…1679b6). On-chain-verified 2026-06-21.
+      U: { address: "0xcE24439F2D9C6a2289F741120FE202248B666666", decimals: 18, symbol: "U" }
     }
   },
   avalanche: {
@@ -2118,7 +2122,8 @@ function makeEvmNetwork(resolved) {
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact") {
-        const permit2 = accept.extra.assetTransferMethod === "permit2";
+        const m = accept.extra.assetTransferMethod;
+        const permit2 = m === "permit2" || m === "permit2-exact";
         return nativeCost({
           symbol,
           decimals,
@@ -2198,10 +2203,12 @@ function makeEvmNetwork(resolved) {
     // `assetTransferMethod`: `permit2` (any ERC-20 — e.g. Binance-Peg USDC on BNB, signs a
     // Permit2 witness transfer + lazily does the one-time approval) or `eip3009` (re-derives
     // the token's EIP-712 domain on-chain + signs transferWithAuthorization). Never broadcasts.
+    // `permit2-exact` is Binance b402's foreign-dialect alias for `permit2` — treated identically.
     // Throws UnsupportedSchemeError for a contract signer (or a non-EIP-3009 token on the eip3009 path).
     async payExact(wallet, accept) {
       const a = wallet._native;
-      if (accept.extra.assetTransferMethod === "permit2") {
+      const method = accept.extra.assetTransferMethod;
+      if (method === "permit2" || method === "permit2-exact") {
         const { payload: payload2, payerFrom: payerFrom2, nonce: nonce2 } = await payPermit2Evm({
           publicClient,
           walletClient: a.walletClient,
@@ -3070,6 +3077,8 @@ var BUILTIN_DENOMS = {
   USDT: "USD",
   USD1: "USD",
   FDUSD: "USD",
+  U: "USD",
+  // United Stables — BNB EIP-3009 stablecoin (1:1 USDC/USDT/USD1-backed)
   RLUSD: "USD",
   EURC: "EUR"
 };
@@ -6332,25 +6341,25 @@ var KNOWN_FACILITATORS = {
       note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
     }
   ],
-  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
-  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // BNB Chain (eip155:56). Dexter + Pieverse keyless-settle the EVM EIP-3009 exact rail for BNB's
+  // EIP-3009 tokens (FDUSD / USD1 / U); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
   // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
   // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
-  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  // FDUSD + U, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
   "eip155:56": [
     {
       url: "https://x402.dexter.cash",
       keyless: true,
       schemes: ["exact"],
       settles: ["eip3009"],
-      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1/U (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e); accepts U (verify confirmed 2026-06-21)."
     },
     {
       url: "https://facilitator.pieverse.io",
       keyless: true,
       schemes: ["exact"],
       settles: ["eip3009"],
-      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1/U (same Binance-Peg caveat as Dexter). LIVE-settled on BNB with FDUSD 2026-06-17 (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) AND with the U / United Stables token 2026-06-21 (tx 0x2b3b8c51ae81df441551301c44a64652c84c796af3b9d03ec58ea38f1cb013d5, buyer 0 BNB) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
     }
   ],
   // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
@@ -7586,7 +7595,7 @@ function createA2APaymentHandler(options) {
     const network = attempted ?? singleNetworkOf(result.challenge);
     const receipts = appendReceiptFailed(taskId, result.error, result.detail, network);
     const metadata = {
-      [A2A_STATUS_KEY]: "payment-rejected",
+      [A2A_STATUS_KEY]: "payment-required",
       [A2A_ERROR_KEY]: toA2AErrorCode(result.error),
       [A2A_REQUIRED_KEY]: result.challenge,
       ...toA2APaymentReceipts(receipts)

package/dist/{ledger-OQos-tmj.d.cts → ledger-mF_SoiDB.d.cts}

@@ -92,7 +92,13 @@ interface X402ExactAcceptEntry {
          *  authorizing exactly one NEP-141 `ft_transfer` to `payTo` (per `scheme_exact_near.md`); a
          *  facilitator-selected relayer (`feePayer` below) prepays gas + the 1 yoctoNEAR and submits, so
          *  the buyer holds zero NEAR. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
+        assetTransferMethod: 'eip3009' | 'permit2'
+        /** A FOREIGN-dialect alias for `'permit2'` — Binance's x402 ("b402") facilitator labels its
+         *  EVM-Permit2 exact rail `'permit2-exact'` (the coinbase/x402 spec uses bare `'permit2'`).
+         *  PipRail EMITS only `'permit2'`; it TOLERATES `'permit2-exact'` inbound so the buyer pays a
+         *  Binance-issued 402 (the buyer treats the two as one rail). NB: settlement still requires the
+         *  rail to bind PipRail's canonical x402ExactPermit2Proxy — see the buyer in drivers/evm. */
+         | 'permit2-exact' | 'svm' | 'algorand' | 'aptos' | 'near';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate

package/dist/{ledger-OQos-tmj.d.ts → ledger-mF_SoiDB.d.ts}

@@ -92,7 +92,13 @@ interface X402ExactAcceptEntry {
          *  authorizing exactly one NEP-141 `ft_transfer` to `payTo` (per `scheme_exact_near.md`); a
          *  facilitator-selected relayer (`feePayer` below) prepays gas + the 1 yoctoNEAR and submits, so
          *  the buyer holds zero NEAR. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
+        assetTransferMethod: 'eip3009' | 'permit2'
+        /** A FOREIGN-dialect alias for `'permit2'` — Binance's x402 ("b402") facilitator labels its
+         *  EVM-Permit2 exact rail `'permit2-exact'` (the coinbase/x402 spec uses bare `'permit2'`).
+         *  PipRail EMITS only `'permit2'`; it TOLERATES `'permit2-exact'` inbound so the buyer pays a
+         *  Binance-issued 402 (the buyer treats the two as one rail). NB: settlement still requires the
+         *  rail to bind PipRail's canonical x402ExactPermit2Proxy — see the buyer in drivers/evm. */
+         | 'permit2-exact' | 'svm' | 'algorand' | 'aptos' | 'near';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate

package/dist/node.d.cts

@@ -1,5 +1,5 @@
-import { u as SpendStore } from './ledger-OQos-tmj.cjs';
-export { Q as memorySpendStore } from './ledger-OQos-tmj.cjs';
+import { u as SpendStore } from './ledger-mF_SoiDB.cjs';
+export { Q as memorySpendStore } from './ledger-mF_SoiDB.cjs';
 
 /**
  * A durable {@link SpendStore} backed by a local JSONL file (one settled payment per

package/dist/node.d.ts

@@ -1,5 +1,5 @@
-import { u as SpendStore } from './ledger-OQos-tmj.js';
-export { Q as memorySpendStore } from './ledger-OQos-tmj.js';
+import { u as SpendStore } from './ledger-mF_SoiDB.js';
+export { Q as memorySpendStore } from './ledger-mF_SoiDB.js';
 
 /**
  * A durable {@link SpendStore} backed by a local JSONL file (one settled payment per

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piprail/sdk",
-  "version": "2.10.0",
+  "version": "2.12.0",
   "description": "Accept x402 crypto payments across 29 chains — every major EVM chain plus Solana, TON, Tron, NEAR, Sui, Aptos, Algorand, Stellar & XRPL — in a couple of lines. No backend, no database, no fee; payments settle straight to your wallet.",
   "type": "module",
   "main": "./dist/index.cjs",