@piprail/sdk 2.13.0 → 2.13.1

package/dist/index.d.cts

@@ -4622,10 +4622,12 @@ declare class MaxRetriesExceededError extends PipRailError {
     /**
      * The proof ref — recover with it, don't re-pay. Its meaning depends on the
      * scheme: for `onchain-proof` it's the already-broadcast transaction ref
-     * (re-verify or re-submit it). For a standard `exact` rail it's the EIP-3009
-     * authorization NONCE (a `0x…` 32-byte value, NOT a tx hash) — re-PRESENT the
-     * same signed authorization, never re-sign a fresh nonce; check the token's
-     * `authorizationState(from, nonce)` before assuming it didn't settle.
+     * (re-verify or re-submit it). For a standard `exact` rail it's the authorization's
+     * single-use marker (NOT a tx hash) — re-PRESENT the same signed authorization, never
+     * re-sign a fresh nonce, and verify it on-chain before assuming it didn't settle. On
+     * EVM that marker is the EIP-3009 NONCE (a `0x…` value), checked via the token's
+     * `authorizationState(from, nonce)`; the non-EVM `exact` rails key off their own marker
+     * (Solana tx signature, Algorand group id, Aptos account sequence number, NEAR access-key nonce).
      */
     readonly ref?: string;
     constructor(message: string, options?: ErrorOptions & {
@@ -7306,7 +7308,11 @@ interface DeliverReceiptOptions {
     url: string;
     /**
      * Shared secret. When set, the raw JSON body is signed HMAC-SHA256 and sent as
-     * `<signatureHeader>: sha256=<hex>` so the receiver can verify authenticity.
+     * `<signatureHeader>: sha256=<hex>` so the receiver can verify authenticity. Signing uses Web
+     * Crypto (`crypto.subtle`) — always present on the supported runtimes (Node ≥ 20, modern
+     * browsers). On a runtime that lacks it the body is sent **unsigned, with no signature header**,
+     * so a receiver must treat a *missing* signature as unauthenticated (reject it), never silently
+     * accept an unsigned body.
      */
     secret?: string;
     /** Extra retry attempts after the first send (default 5 → up to 6 POSTs total). */

package/dist/index.d.ts

@@ -4622,10 +4622,12 @@ declare class MaxRetriesExceededError extends PipRailError {
     /**
      * The proof ref — recover with it, don't re-pay. Its meaning depends on the
      * scheme: for `onchain-proof` it's the already-broadcast transaction ref
-     * (re-verify or re-submit it). For a standard `exact` rail it's the EIP-3009
-     * authorization NONCE (a `0x…` 32-byte value, NOT a tx hash) — re-PRESENT the
-     * same signed authorization, never re-sign a fresh nonce; check the token's
-     * `authorizationState(from, nonce)` before assuming it didn't settle.
+     * (re-verify or re-submit it). For a standard `exact` rail it's the authorization's
+     * single-use marker (NOT a tx hash) — re-PRESENT the same signed authorization, never
+     * re-sign a fresh nonce, and verify it on-chain before assuming it didn't settle. On
+     * EVM that marker is the EIP-3009 NONCE (a `0x…` value), checked via the token's
+     * `authorizationState(from, nonce)`; the non-EVM `exact` rails key off their own marker
+     * (Solana tx signature, Algorand group id, Aptos account sequence number, NEAR access-key nonce).
      */
     readonly ref?: string;
     constructor(message: string, options?: ErrorOptions & {
@@ -7306,7 +7308,11 @@ interface DeliverReceiptOptions {
     url: string;
     /**
      * Shared secret. When set, the raw JSON body is signed HMAC-SHA256 and sent as
-     * `<signatureHeader>: sha256=<hex>` so the receiver can verify authenticity.
+     * `<signatureHeader>: sha256=<hex>` so the receiver can verify authenticity. Signing uses Web
+     * Crypto (`crypto.subtle`) — always present on the supported runtimes (Node ≥ 20, modern
+     * browsers). On a runtime that lacks it the body is sent **unsigned, with no signature header**,
+     * so a receiver must treat a *missing* signature as unauthenticated (reject it), never silently
+     * accept an unsigned body.
      */
     secret?: string;
     /** Extra retry attempts after the first send (default 5 → up to 6 POSTs total). */

package/dist/index.js

@@ -31,7 +31,7 @@ import {
   parseUnits,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-O32N6MFN.js";
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -2329,7 +2329,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await import("./solana-ELUWO6N5.js");
+      mod = await import("./solana-VYLWFNAH.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -2341,7 +2341,7 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await import("./ton-7GKCTC5H.js");
+      mod = await import("./ton-NNKQFQ6U.js");
     } catch (cause) {
       throw new MissingDriverError(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
@@ -2353,7 +2353,7 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await import("./stellar-ASP2THL2.js");
+      mod = await import("./stellar-KBR4V77T.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
@@ -2365,7 +2365,7 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await import("./xrpl-DD7TJL5L.js");
+      mod = await import("./xrpl-37E23W53.js");
     } catch (cause) {
       throw new MissingDriverError(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
@@ -2377,7 +2377,7 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await import("./tron-BMCWN5SS.js");
+      mod = await import("./tron-W2D5PQXV.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
@@ -2389,7 +2389,7 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await import("./sui-FZIKZNVI.js");
+      mod = await import("./sui-BXHB6D3W.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
@@ -2401,7 +2401,7 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await import("./near-FZBUICCS.js");
+      mod = await import("./near-VDATC5AV.js");
     } catch (cause) {
       throw new MissingDriverError(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
@@ -2413,7 +2413,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await import("./aptos-LY67Q6QF.js");
+      mod = await import("./aptos-RYQOSFBQ.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -2425,7 +2425,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await import("./algorand-AA3WXKW4.js");
+      mod = await import("./algorand-TQCYK2XT.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -3449,6 +3449,24 @@ var SpendLedger = class {
   }
 };
 
+// src/util/exactRecovery.ts
+function exactSettleCheckHint(family, payerFrom, nonce) {
+  switch (family) {
+    case "evm":
+      return `the EIP-3009 \`authorizationState(${payerFrom}, ${nonce})\` (or, on the Permit2 method, the Permit2 nonce bitmap)`;
+    case "solana":
+      return `the buyer's transaction signature (a duplicate signature is the chain's own replay guard; plus the SPL-Memo nonce when present)`;
+    case "algorand":
+      return `the atomic group / transaction id`;
+    case "aptos":
+      return `the sender's account sequence number`;
+    case "near":
+      return `the access-key nonce (\`${nonce}\`)`;
+    default:
+      return `the single-use marker (\`ref=${nonce}\`)`;
+  }
+}
+
 // src/client.ts
 var DEFAULT_SCHEMES = ["onchain-proof"];
 var RECIPIENT_FIX = {
@@ -4760,7 +4778,7 @@ var PipRailClient = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new UnsupportedSchemeError(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand, Aptos + NEAR today).`
       );
     }
     throwIfAborted(init?.signal);
@@ -4793,7 +4811,7 @@ var PipRailClient = class {
         response = await fetch(url, { ...init ?? {}, headers, signal });
       } catch (err) {
         throw new PaymentTimeoutError(
-          `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain with authorizationState(${payerFrom}, ${nonce}) before re-presenting; do NOT re-pay.`,
+          `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain via ${exactSettleCheckHint(net.family, payerFrom, nonce)} before re-presenting the SAME signed authorization; do NOT re-pay.`,
           { cause: err, ref: nonce }
         );
       } finally {
@@ -4809,7 +4827,7 @@ var PipRailClient = class {
         const receipt = parseReceipt(response);
         this.captureReceipt(response, url);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = settle?.transaction || receipt?.transaction || `eip3009-nonce:${nonce}`;
+        const ref = settle?.transaction || receipt?.transaction || `${net.family === "evm" ? "eip3009" : net.family}-nonce:${nonce}`;
         this.recordSpend(quote, ref);
         return response;
       }
@@ -4828,7 +4846,7 @@ var PipRailClient = class {
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
     throw new MaxRetriesExceededError(
-      `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify authorizationState(${payerFrom}, ${nonce}) first. ref=${nonce}.`,
+      `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify on-chain via ${exactSettleCheckHint(net.family, payerFrom, nonce)} first. ref=${nonce}.`,
       { ref: nonce }
     );
   }

package/dist/{near-6KAQVVG2.cjs → near-UDPFA6SV.cjs}

@@ -10,7 +10,7 @@
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkDCOUJZPLcjs = require('./chunk-DCOUJZPL.cjs');
 
 // src/drivers/near/index.ts
 var _nearapijs = require('near-api-js');
@@ -61,18 +61,18 @@ async function payNear(params) {
     return res.hash;
   } catch (err) {
     if (isNearRegistrationError(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.RecipientNotReadyError)(
+      throw new (0, _chunkDCOUJZPLcjs.RecipientNotReadyError)(
         `NEAR recipient ${accept.payTo} isn't registered on token ${accept.asset} (NEP-145 storage_deposit) \u2014 register it once (\u22480.00125 NEAR) before it can receive. (NEAR: not registered)`,
         { cause: err }
       );
     }
     if (isNearAffordability(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+      throw new (0, _chunkDCOUJZPLcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkDCOUJZPLcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 async function payNearNative(params) {
@@ -82,12 +82,12 @@ async function payNearNative(params) {
     return res.hash;
   } catch (err) {
     if (isNearAffordability(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+      throw new (0, _chunkDCOUJZPLcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkDCOUJZPLcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isNearRegistrationError(err) {
@@ -109,28 +109,28 @@ var NONCE_BLOCK_MULTIPLIER = 1000000n;
 async function payExactNear(input) {
   const { signer, senderId, blockHeight, accessKeyNonce, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       "NEAR exact is NEP-141-only (an ft_transfer); native NEAR is not exact-payable. Pay via onchain-proof."
     );
   }
   if (!isValidNearAccountId(accept.asset)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
   }
   if (!isValidNearAccountId(accept.payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
   }
   if (!isValidNearAccountId(senderId)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
   }
   const t = accept.maxTimeoutSeconds;
   if (!Number.isInteger(t) || t <= 0) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("NEAR exact: maxTimeoutSeconds must be a positive integer.");
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)("NEAR exact: maxTimeoutSeconds must be a positive integer.");
   }
   const timeoutBlocks = BigInt(Math.max(1, Math.ceil(t / ESTIMATED_BLOCK_SECONDS)));
   const maxBlockHeight = blockHeight + timeoutBlocks;
   const nonce = accessKeyNonce + 1n;
   if (nonce >= blockHeight * NONCE_BLOCK_MULTIPLIER) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       "NEAR exact: the access-key nonce is at the protocol ceiling for this block height; cannot build a delegate action."
     );
   }
@@ -259,7 +259,7 @@ async function verifyAndSettleExactNear(input) {
     if (/not enough|insufficient|exceeded the prepaid gas|NotEnoughBalance|doesn't have enough|is not registered/i.test(m)) {
       return fail("tx_reverted", `the ft_transfer would fail on chain: ${shorten(m)}.`);
     }
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)(
       `NEAR exact settle: the relayer could not submit the delegate (${shorten(m)}). The buyer's signed delegate is still valid \u2014 fund/fix the relayer and the buyer can re-present it.`,
       { cause: err }
     );
@@ -408,13 +408,13 @@ function txNotFound(hash) {
 
 function assertNearWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
+  _chunkDCOUJZPLcjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
   if (!("accountId" in wallet) || !("key" in wallet)) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
@@ -422,13 +422,13 @@ function assertNearWallet(wallet, network) {
 }
 function resolveNearWallet(config) {
   if (!config.accountId || !config.key) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
+    throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
   }
   let signer;
   try {
     signer = _nearapijs.KeyPairSigner.fromSecretKey(config.key);
   } catch (cause) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
+    throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
       cause
     });
   }
@@ -490,16 +490,16 @@ function makeNearNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkDCOUJZPLcjs.UnknownTokenError)(
             `token "${token}" isn't built in for NEAR (known: ${known}). Pass { contractId, decimals } for a custom NEP-141.`
           );
         }
         return { asset: info.contractId, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "near", network);
+      _chunkDCOUJZPLcjs.rejectForeignToken.call(void 0, token, "near", network);
       const t = token;
       if (!t.contractId || typeof t.decimals !== "number") {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is NEAR; a custom token must be { contractId, decimals }.`
         );
       }
@@ -518,12 +518,12 @@ function makeNearNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" looks like an EVM/Sui 0x address.`
         );
       }
       if (!isValidNearAccountId(payTo)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" is not a valid NEAR account id.`
         );
       }
@@ -567,10 +567,10 @@ function makeNearNetwork(preset, rpcUrl) {
         if (tx && tx.success) return { height: "0" };
       } catch (e11) {
       }
-      throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
+      throw new (0, _chunkDCOUJZPLcjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
     },
     async estimateCost() {
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      return _chunkDCOUJZPLcjs.nativeCost.call(void 0, {
         symbol: "NEAR",
         decimals: NEAR_DECIMALS,
         fee: 1500000000000000000000n,
@@ -692,7 +692,7 @@ function makeNearNetwork(preset, rpcUrl) {
       try {
         relayerWallet = resolveNearWallet(relayer._native);
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+        throw new (0, _chunkDCOUJZPLcjs.SettlementError)(
           `NEAR exact settle: the relayer wallet is invalid (${err instanceof Error ? err.message : String(err)}).`,
           { cause: err }
         );

package/dist/{near-FZBUICCS.js → near-VDATC5AV.js}

@@ -10,7 +10,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-O32N6MFN.js";
 
 // src/drivers/near/index.ts
 import { JsonRpcProvider, Account, actions as actions2 } from "near-api-js";

package/dist/{solana-MYF4HBO4.cjs → solana-RQNXFCZO.cjs}

@@ -8,7 +8,7 @@
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkDCOUJZPLcjs = require('./chunk-DCOUJZPL.cjs');
 
 // src/drivers/solana/index.ts
 var _web3js = require('@solana/web3.js');
@@ -236,7 +236,7 @@ function isEmptySig(sig) {
 function memoRandomNonce() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _3 => _3.getRandomValues])) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); SVM exact needs a CSPRNG nonce."
     );
   }
@@ -248,7 +248,7 @@ function memoDataFor(accept) {
   if (accept.extra.memo !== void 0) {
     const bytes = Buffer.from(accept.extra.memo, "utf8");
     if (bytes.length > MAX_MEMO_BYTES) {
-      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+      throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
         `SVM exact: extra.memo is ${bytes.length} bytes; the scheme caps it at ${MAX_MEMO_BYTES}.`
       );
     }
@@ -262,15 +262,15 @@ function memoInstruction(accept) {
 async function payExactSolana(input) {
   const { connection, keypair, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       "SVM exact is SPL-token only (TransferChecked); native SOL is not exact-payable. Pay via onchain-proof."
     );
   }
   if (!accept.extra.feePayer) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.feePayer (the merchant sponsor key).");
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.feePayer (the merchant sponsor key).");
   }
   if (accept.extra.decimals === void 0) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.decimals for the TransferChecked.");
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.decimals for the TransferChecked.");
   }
   let feePayer;
   let mint;
@@ -280,12 +280,12 @@ async function payExactSolana(input) {
     mint = new (0, _web3js.PublicKey)(accept.asset);
     payTo = new (0, _web3js.PublicKey)(accept.payTo);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       `SVM exact: bad feePayer/asset/payTo (${err instanceof Error ? err.message : String(err)}).`
     );
   }
   if (feePayer.equals(payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       "SVM exact: the fee payer must differ from payTo \u2014 payTo appears in the transfer instruction, which the fee payer must not (a scheme MUST-rule). Use a separate relayer key for the gate."
     );
   }
@@ -299,7 +299,7 @@ async function payExactSolana(input) {
     destInfo = "unknown";
   }
   if (destInfo === null) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)(
       `SVM exact: the recipient's token account for ${mint.toBase58()} doesn't exist yet \u2014 the exact rail can't create it. Pay via onchain-proof (which creates it), or have ${payTo.toBase58()} create its associated token account first.`
     );
   }
@@ -330,11 +330,11 @@ async function payExactSolana(input) {
   tx.sign([keypair]);
   const buyerIndex = message.staticAccountKeys.findIndex((k) => k.equals(keypair.publicKey));
   if (buyerIndex < 1 || buyerIndex >= message.header.numRequiredSignatures) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact: could not locate the buyer signer slot.");
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)("SVM exact: could not locate the buyer signer slot.");
   }
   const buyerSig = tx.signatures[buyerIndex];
   if (!buyerSig || isEmptySig(buyerSig)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact: the wallet did not produce a buyer signature.");
+    throw new (0, _chunkDCOUJZPLcjs.UnsupportedSchemeError)("SVM exact: the wallet did not produce a buyer signature.");
   }
   const transaction = Buffer.from(tx.serialize()).toString("base64");
   return {
@@ -361,15 +361,15 @@ async function verifyAndSettleExactSolana(input) {
     if (!accept.extra.feePayer) throw new Error("rail is missing extra.feePayer");
     railFeePayer = new (0, _web3js.PublicKey)(accept.extra.feePayer);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(`SVM exact: rail has a bad payTo/asset/feePayer (${err instanceof Error ? err.message : String(err)}).`);
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)(`SVM exact: rail has a bad payTo/asset/feePayer (${err instanceof Error ? err.message : String(err)}).`);
   }
   if (!railFeePayer.equals(feePayerKeypair.publicKey)) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)(
       "SVM exact: the gate relayer key does not match the rail extra.feePayer \u2014 misconfigured rail."
     );
   }
   if (feePayerKeypair.publicKey.equals(payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)("SVM exact: the fee payer must differ from payTo \u2014 misconfigured rail.");
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)("SVM exact: the fee payer must differ from payTo \u2014 misconfigured rail.");
   }
   const program = tokenProgramFor(accept);
   let tx;
@@ -509,7 +509,7 @@ async function verifyAndSettleExactSolana(input) {
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     if (/blockhash|block height|expired/i.test(msg)) return fail("payment_expired", `Settle broadcast rejected \u2014 blockhash expired: ${shorten(msg)}.`);
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)(
       `SVM exact settle: the merchant fee payer failed to broadcast (${shorten(msg)}). The buyer's signed transaction is still valid \u2014 fund/fix the fee payer and the buyer can re-present it.`,
       { cause: err }
     );
@@ -519,7 +519,7 @@ async function verifyAndSettleExactSolana(input) {
     return fail("tx_reverted", `Settle tx ${txid} reverted on-chain (a post-simulate race).`);
   }
   if (confirmed === "timeout") {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkDCOUJZPLcjs.SettlementError)(
       `SVM exact settle: broadcast ${txid} but it did not confirm in time. It likely landed \u2014 re-verify by signature before re-presenting; do NOT re-pay.`
     );
   }
@@ -562,18 +562,18 @@ async function pollConfirmed(connection, signature) {
 
 function toKeypair(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
       `chain ${network} is Solana; wallet must be { key } (base58 secret) or { signer }.`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Solana");
+  _chunkDCOUJZPLcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Solana");
   if ("signer" in wallet) {
     return wallet.signer;
   }
   if ("key" in wallet) {
     const sk = wallet.key;
     if (typeof sk === "string" && sk.startsWith("0x")) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
         `chain ${network} is Solana, but the wallet { key } is a 0x\u2026 hex key \u2014 that's an EVM key. A Solana key is a base58 secret string (or a 64-byte Uint8Array).`
       );
     }
@@ -581,12 +581,12 @@ function toKeypair(wallet, network) {
       const bytes = typeof sk === "string" ? _bs582.default.decode(sk) : sk;
       return _web3js.Keypair.fromSecretKey(bytes);
     } catch (err) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
         `chain ${network} is Solana; the wallet { key } isn't a valid Solana secret (expected a base58 secret string or a 64-byte Uint8Array): ${err instanceof Error ? err.message : String(err)}.`
       );
     }
   }
-  throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+  throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
     `chain ${network} is Solana; wallet must be { key } (base58 secret) or { signer }.`
   );
 }
@@ -615,15 +615,15 @@ function makeSolanaNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkDCOUJZPLcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Solana (known: ${known}). Pass { mint, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.mint, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "solana", network);
+      _chunkDCOUJZPLcjs.rejectForeignToken.call(void 0, token, "solana", network);
       if (!("mint" in token)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is Solana; a custom token must be { mint, decimals }.`
         );
       }
@@ -642,14 +642,14 @@ function makeSolanaNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is Solana, but payTo "${payTo}" looks like an EVM address.`
         );
       }
       try {
         new (0, _web3js.PublicKey)(payTo);
       } catch (e7) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkDCOUJZPLcjs.WrongFamilyError)(
           `chain ${network} is Solana, but payTo "${payTo}" is not a base58 address.`
         );
       }
@@ -661,7 +661,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
       try {
         return await paySolana({ connection, keypair: wallet._native, accept });
       } catch (err) {
-        throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkDCOUJZPLcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref) {
@@ -672,19 +672,19 @@ function makeSolanaNetwork(preset, rpcUrl) {
         });
         info = value[0];
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkDCOUJZPLcjs.ConfirmationTimeoutError)(
           `Solana payment ${ref} could not be confirmed (RPC read failed).`,
           { cause: err }
         );
       }
       if (!info || info.err || info.confirmationStatus !== "confirmed" && info.confirmationStatus !== "finalized") {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`Solana payment ${ref} did not confirm in time.`);
+        throw new (0, _chunkDCOUJZPLcjs.ConfirmationTimeoutError)(`Solana payment ${ref} did not confirm in time.`);
       }
       return { height: String(info.slot) };
     },
     async estimateCost(accept) {
       if (accept.scheme === "exact") {
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkDCOUJZPLcjs.nativeCost.call(void 0, {
           symbol: "SOL",
           decimals: SOL_DECIMALS,
           fee: 0n,
@@ -694,7 +694,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
       }
       const base = 5000n;
       if (accept.asset === "native") {
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkDCOUJZPLcjs.nativeCost.call(void 0, {
           symbol: "SOL",
           decimals: SOL_DECIMALS,
           fee: base,
@@ -703,7 +703,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
         });
       }
       const ataRent = 2039280n;
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      return _chunkDCOUJZPLcjs.nativeCost.call(void 0, {
         symbol: "SOL",
         decimals: SOL_DECIMALS,
         fee: base + ataRent,

package/dist/{solana-ELUWO6N5.js → solana-VYLWFNAH.js}

@@ -8,7 +8,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-O32N6MFN.js";
 
 // src/drivers/solana/index.ts
 import { Connection, PublicKey as PublicKey3 } from "@solana/web3.js";

package/dist/{stellar-ASP2THL2.js → stellar-KBR4V77T.js}

@@ -12,7 +12,7 @@ import {
   parseUnits,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-O32N6MFN.js";
 
 // src/drivers/stellar/index.ts
 import { Horizon, StrKey as StrKey2 } from "@stellar/stellar-sdk";