@piprail/sdk 2.13.0 → 2.14.0

package/dist/{aptos-GHJPO6JJ.cjs → aptos-LFTQGBBK.cjs}

@@ -9,7 +9,7 @@
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
 
 // src/drivers/aptos/index.ts
 var _tssdk = require('@aptos-labs/ts-sdk');
@@ -58,14 +58,14 @@ async function payAptos(params) {
     const res = await client.signSubmit({ signer, transaction });
     return res.hash;
   } catch (err) {
-    if (err instanceof _chunkMWBT7MCEcjs.InsufficientFundsError) throw err;
+    if (err instanceof _chunkGYM46G5Lcjs.InsufficientFundsError) throw err;
     if (isAptosAffordability(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+      throw new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient APT/token balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isAptosAffordability(err) {
@@ -103,24 +103,24 @@ function parseAddr(addr) {
 async function payExactAptos(input) {
   const { client, sender, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "Aptos exact is Fungible-Asset only (a primary_fungible_store transfer); native APT is not exact-payable. Pay via onchain-proof."
     );
   }
   const feePayer = accept.extra.feePayer;
   if (!feePayer) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("Aptos exact rail must advertise extra.feePayer (the gas sponsor address).");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("Aptos exact rail must advertise extra.feePayer (the gas sponsor address).");
   }
   const feePayerAddr = parseAddr(feePayer);
-  if (!feePayerAddr) throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`Aptos exact: extra.feePayer "${feePayer}" is not a valid Aptos address.`);
+  if (!feePayerAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: extra.feePayer "${feePayer}" is not a valid Aptos address.`);
   const payToAddr = parseAddr(accept.payTo);
-  if (!payToAddr) throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`Aptos exact: payTo "${accept.payTo}" is not a valid Aptos address.`);
+  if (!payToAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: payTo "${accept.payTo}" is not a valid Aptos address.`);
   const metadataAddr = parseAddr(accept.asset);
-  if (!metadataAddr) throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`Aptos exact: asset "${accept.asset}" is not a valid FA metadata address.`);
+  if (!metadataAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: asset "${accept.asset}" is not a valid FA metadata address.`);
   const senderAddr = parseAddr(sender);
-  if (!senderAddr) throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`Aptos exact: payer "${sender}" is not a valid Aptos address.`);
+  if (!senderAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: payer "${sender}" is not a valid Aptos address.`);
   if (feePayerAddr.equals(senderAddr)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "Aptos exact: the fee payer must differ from the payer \u2014 the buyer must pay ZERO APT (the sponsor pays gas)."
     );
   }
@@ -158,16 +158,16 @@ function argBytes(arg) {
 async function verifyAndSettleExactAptos(input) {
   const { client, feePayerAddr, payload, accept } = input;
   const railFeePayer = accept.extra.feePayer;
-  if (!railFeePayer) throw new (0, _chunkMWBT7MCEcjs.SettlementError)("Aptos exact: rail is missing extra.feePayer.");
+  if (!railFeePayer) throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: rail is missing extra.feePayer.");
   if (railFeePayer !== feePayerAddr) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)("Aptos exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
   }
-  if (accept.asset === "native") throw new (0, _chunkMWBT7MCEcjs.SettlementError)("Aptos exact: native APT is not exact-payable (misconfigured rail).");
+  if (accept.asset === "native") throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: native APT is not exact-payable (misconfigured rail).");
   const railFeePayerAddr = parseAddr(railFeePayer);
   const railPayTo = parseAddr(accept.payTo);
   const railMetadata = parseAddr(accept.asset);
   if (!railFeePayerAddr || !railPayTo || !railMetadata) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)("Aptos exact: rail feePayer/payTo/asset is not a valid Aptos address (misconfigured rail).");
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: rail feePayer/payTo/asset is not a valid Aptos address (misconfigured rail).");
   }
   let tx;
   let senderAuth;
@@ -241,7 +241,7 @@ async function verifyAndSettleExactAptos(input) {
   try {
     feePayerAuth = client.signAsFeePayer({ transaction: tx });
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(`Aptos exact settle: the gate could not sign as fee payer (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: the gate could not sign as fee payer (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
   }
   if (senderAuth instanceof _tssdk.AccountAuthenticatorEd25519) {
     try {
@@ -264,7 +264,7 @@ async function verifyAndSettleExactAptos(input) {
     if (/signature|invalid.*auth|INVALID_SIGNATURE/i.test(m)) return fail("signature_invalid", `Settle rejected \u2014 bad signature: ${shorten(m)}.`);
     if (/SEQUENCE_NUMBER_TOO_OLD|already.*(committed|ledger)|duplicate/i.test(m)) return fail("tx_already_used", `This payment was already settled: ${shorten(m)}.`);
     if (/EXPIRED|expired|TOO_NEW/i.test(m)) return fail("payment_expired", `Settle rejected \u2014 expired/stale: ${shorten(m)}.`);
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `Aptos exact settle: the transaction failed to submit (${shorten(m)}). The buyer's signed transaction is still valid \u2014 fund/fix the fee payer (${railFeePayer}) and the buyer can re-present it.`,
       { cause: err }
     );
@@ -273,10 +273,10 @@ async function verifyAndSettleExactAptos(input) {
   try {
     confirmed = await client.waitForConfirmation(hash);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
   }
   if (confirmed === null) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
   }
   if (!confirmed.success) {
     return fail("tx_reverted", `Settle tx ${hash} reverted on-chain (a post-simulate race).`);
@@ -312,15 +312,16 @@ async function verifyAptos(params) {
   if (!tx.success) {
     return { ok: false, error: "tx_reverted", detail: `Aptos tx ${hash} did not succeed.` };
   }
-  if (typeof tx.timestampSeconds === "number") {
-    const ageSeconds = Math.floor(Date.now() / 1e3) - tx.timestampSeconds;
-    if (ageSeconds > accept.maxTimeoutSeconds) {
-      return {
-        ok: false,
-        error: "payment_expired",
-        detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.`
-      };
-    }
+  if (!Number.isFinite(tx.timestampSeconds)) {
+    return { ok: false, error: "payment_expired", detail: `Cannot bound the age of Aptos tx ${hash} (no/invalid timestamp) \u2014 failing closed.` };
+  }
+  const ageSeconds = Math.floor(Date.now() / 1e3) - tx.timestampSeconds;
+  if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
+    return {
+      ok: false,
+      error: "payment_expired",
+      detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.`
+    };
   }
   let wantStore;
   try {
@@ -371,13 +372,13 @@ function txNotFound(hash) {
 
 function assertAptosWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Aptos");
+  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Aptos");
   if (!("key" in wallet) && !("account" in wallet)) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
@@ -389,13 +390,13 @@ function resolveAptosAccount(config) {
     try {
       return _tssdk.Account.fromPrivateKey({ privateKey: new (0, _tssdk.Ed25519PrivateKey)(config.key) });
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
         "Aptos wallet { key } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
         { cause }
       );
     }
   }
-  throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
+  throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
 }
 
 // src/drivers/aptos/index.ts
@@ -467,16 +468,16 @@ function makeAptosNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Aptos (known: ${known}). Pass { metadata, decimals } for a custom Fungible Asset, or use 'native'.`
           );
         }
         return { asset: info.metadata, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "aptos", network);
+      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "aptos", network);
       const t = token;
       if (!t.metadata || typeof t.decimals !== "number") {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Aptos; a custom token must be { metadata, decimals }.`
         );
       }
@@ -503,7 +504,7 @@ function makeAptosNetwork(preset, rpcUrl) {
         valid = false;
       }
       if (!valid || evmLike) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Aptos, but payTo "${payTo}" is not a valid Aptos address (0x + 32 bytes).`
         );
       }
@@ -525,12 +526,12 @@ function makeAptosNetwork(preset, rpcUrl) {
         const tx = await aptos.waitForTransaction({ transactionHash: ref });
         return { height: String(_nullishCoalesce(tx.version, () => ( "0"))) };
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
+        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
       }
     },
     async estimateCost(accept) {
       if (accept.scheme === "exact") {
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol: APT_SYMBOL,
           decimals: APT_DECIMALS,
           fee: 0n,
@@ -538,7 +539,7 @@ function makeAptosNetwork(preset, rpcUrl) {
           detail: "gasless \u2014 the fee payer (facilitator/relayer) sponsors gas; the buyer pays 0 APT"
         });
       }
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
         symbol: APT_SYMBOL,
         decimals: APT_DECIMALS,
         fee: 100000n,

package/dist/{chunk-MWBT7MCE.cjs → chunk-GYM46G5L.cjs}

@@ -40,10 +40,12 @@ var MaxRetriesExceededError = (_class5 = class extends PipRailError {
   /**
    * The proof ref — recover with it, don't re-pay. Its meaning depends on the
    * scheme: for `onchain-proof` it's the already-broadcast transaction ref
-   * (re-verify or re-submit it). For a standard `exact` rail it's the EIP-3009
-   * authorization NONCE (a `0x…` 32-byte value, NOT a tx hash) — re-PRESENT the
-   * same signed authorization, never re-sign a fresh nonce; check the token's
-   * `authorizationState(from, nonce)` before assuming it didn't settle.
+   * (re-verify or re-submit it). For a standard `exact` rail it's the authorization's
+   * single-use marker (NOT a tx hash) — re-PRESENT the same signed authorization, never
+   * re-sign a fresh nonce, and verify it on-chain before assuming it didn't settle. On
+   * EVM that marker is the EIP-3009 NONCE (a `0x…` value), checked via the token's
+   * `authorizationState(from, nonce)`; the non-EVM `exact` rails key off their own marker
+   * (Solana tx signature, Algorand group id, Aptos account sequence number, NEAR access-key nonce).
    */
   
   constructor(message, options) {
@@ -141,8 +143,23 @@ function assertValidDecimals(decimals, fn) {
     );
   }
 }
+function expandScientific(value) {
+  const m = /^(\d+)(?:\.(\d+))?[eE]([+-]?\d+)$/.exec(value);
+  if (!m) return value;
+  const [, whole = "", frac = "", expStr = "0"] = m;
+  const exp = Number(expStr);
+  if (!Number.isFinite(exp) || Math.abs(exp) > 1e3) {
+    throw new Error(`expandScientific: exponent out of range in "${value}".`);
+  }
+  const digits = whole + frac;
+  const pointPos = whole.length + exp;
+  if (pointPos <= 0) return `0.${"0".repeat(-pointPos)}${digits}`;
+  if (pointPos >= digits.length) return digits + "0".repeat(pointPos - digits.length);
+  return `${digits.slice(0, pointPos)}.${digits.slice(pointPos)}`;
+}
 function parseUnits(value, decimals) {
   assertValidDecimals(decimals, "parseUnits");
+  value = expandScientific(value);
   if (!/^\d+(\.\d+)?$/.test(value)) {
     throw new Error(`parseUnits: "${value}" is not a non-negative decimal amount.`);
   }
@@ -157,6 +174,7 @@ function parseUnits(value, decimals) {
 }
 function floorUnits(value, decimals) {
   assertValidDecimals(decimals, "floorUnits");
+  value = expandScientific(value);
   if (!/^\d+(\.\d+)?$/.test(value)) {
     throw new Error(`floorUnits: "${value}" is not a non-negative decimal amount.`);
   }

package/dist/{chunk-SC2ZYDHD.js → chunk-PAMKCWVW.js}

@@ -40,10 +40,12 @@ var MaxRetriesExceededError = class extends PipRailError {
   /**
    * The proof ref — recover with it, don't re-pay. Its meaning depends on the
    * scheme: for `onchain-proof` it's the already-broadcast transaction ref
-   * (re-verify or re-submit it). For a standard `exact` rail it's the EIP-3009
-   * authorization NONCE (a `0x…` 32-byte value, NOT a tx hash) — re-PRESENT the
-   * same signed authorization, never re-sign a fresh nonce; check the token's
-   * `authorizationState(from, nonce)` before assuming it didn't settle.
+   * (re-verify or re-submit it). For a standard `exact` rail it's the authorization's
+   * single-use marker (NOT a tx hash) — re-PRESENT the same signed authorization, never
+   * re-sign a fresh nonce, and verify it on-chain before assuming it didn't settle. On
+   * EVM that marker is the EIP-3009 NONCE (a `0x…` value), checked via the token's
+   * `authorizationState(from, nonce)`; the non-EVM `exact` rails key off their own marker
+   * (Solana tx signature, Algorand group id, Aptos account sequence number, NEAR access-key nonce).
    */
   ref;
   constructor(message, options) {
@@ -141,8 +143,23 @@ function assertValidDecimals(decimals, fn) {
     );
   }
 }
+function expandScientific(value) {
+  const m = /^(\d+)(?:\.(\d+))?[eE]([+-]?\d+)$/.exec(value);
+  if (!m) return value;
+  const [, whole = "", frac = "", expStr = "0"] = m;
+  const exp = Number(expStr);
+  if (!Number.isFinite(exp) || Math.abs(exp) > 1e3) {
+    throw new Error(`expandScientific: exponent out of range in "${value}".`);
+  }
+  const digits = whole + frac;
+  const pointPos = whole.length + exp;
+  if (pointPos <= 0) return `0.${"0".repeat(-pointPos)}${digits}`;
+  if (pointPos >= digits.length) return digits + "0".repeat(pointPos - digits.length);
+  return `${digits.slice(0, pointPos)}.${digits.slice(pointPos)}`;
+}
 function parseUnits(value, decimals) {
   assertValidDecimals(decimals, "parseUnits");
+  value = expandScientific(value);
   if (!/^\d+(\.\d+)?$/.test(value)) {
     throw new Error(`parseUnits: "${value}" is not a non-negative decimal amount.`);
   }
@@ -157,6 +174,7 @@ function parseUnits(value, decimals) {
 }
 function floorUnits(value, decimals) {
   assertValidDecimals(decimals, "floorUnits");
+  value = expandScientific(value);
   if (!/^\d+(\.\d+)?$/.test(value)) {
     throw new Error(`floorUnits: "${value}" is not a non-negative decimal amount.`);
   }