@piprail/sdk 2.13.0 → 2.14.0

package/dist/index.cjs

@@ -31,7 +31,7 @@ var _chunkCQQI5IJXcjs = require('./chunk-CQQI5IJX.cjs');
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -60,13 +60,13 @@ function resolveNetwork(opts) {
   const family = familyForChain(opts.chain);
   const driver = byFamily.get(family);
   if (!driver) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedNetworkError)(
       `No driver registered for the "${family}" family \u2014 it may not be mounted yet (use the async resolveNetwork()).`
     );
   }
   const net = driver.resolve(opts);
   if (!net) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedNetworkError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedNetworkError)(
       `The ${family} driver didn't recognise this chain input.`
     );
   }
@@ -331,12 +331,12 @@ function resolveChain(input, rpcUrlOverride) {
 
 var _accounts = require('viem/accounts');
 function createWalletAdapter(config, resolved) {
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, config, "EVM");
+  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, config, "EVM");
   if ("key" in config) {
     const key = config.key;
     if (typeof key !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(key)) {
       const hint = typeof key === "string" && !key.startsWith("0x") ? " (got a non-0x string \u2014 a base58/seed key belongs to another family; pass { key } as the EVM chain's 0x\u2026 hex secret)." : " (expected 0x followed by 64 hex characters).";
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
         `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key${hint}`
       );
     }
@@ -344,7 +344,7 @@ function createWalletAdapter(config, resolved) {
     try {
       account = _accounts.privateKeyToAccount.call(void 0, key);
     } catch (err) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
         `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key: ${err instanceof Error ? err.message : String(err)}.`
       );
     }
@@ -354,12 +354,12 @@ function createWalletAdapter(config, resolved) {
   }
   const wc = config.walletClient;
   if (!wc.account) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       "chain is EVM; the provided walletClient has no attached account. Use `createWalletClient({ account, chain, transport })`, or pass { key }."
     );
   }
   if (wc.chain && wc.chain.id !== resolved.chainId) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongChainError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongChainError)(
       `PipRailClient: walletClient is on chain ${wc.chain.id} but the SDK was configured with chain ${resolved.chainId}. They must match.`
     );
   }
@@ -689,7 +689,7 @@ async function payExactEvm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `exact buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account (no recoverable ECDSA signature). Pay via onchain-proof.`
     );
   }
@@ -699,13 +699,13 @@ async function payExactEvm(input) {
     domain = await readExactDomain(publicClient, accept.asset);
   }
   if (!domain) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `exact: couldn't derive the EIP-712 domain for ${accept.asset} on ${accept.network}. Either it isn't an EIP-3009 token (USDT needs Permit2; native/plain ERC-20 aren't exact-payable) \u2014 pay via onchain-proof \u2014 OR your RPC couldn't read it (transient): if the gate advertised eip3009, pass a reliable rpcUrl and retry.`
     );
   }
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _5 => _5.getRandomValues])) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the exact rail needs a CSPRNG nonce."
     );
   }
@@ -962,7 +962,7 @@ async function verifyAndSettleExactEvm(input) {
       args: writeArgs
     });
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle: the merchant relayer failed to broadcast transferWithAuthorization (${shorten(err instanceof Error ? err.message : String(err))}). The payer's authorization is still valid and unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -974,7 +974,7 @@ async function verifyAndSettleExactEvm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle: broadcast ${txHash} but couldn't confirm it (${shorten(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1105,7 +1105,7 @@ function shorten2(msg) {
 function randomPermit2Nonce() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _8 => _8.getRandomValues])) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the permit2 rail needs a CSPRNG nonce."
     );
   }
@@ -1124,7 +1124,7 @@ async function ensurePermit2Allowance(input) {
       args: [account.address, PERMIT2_ADDRESS]
     });
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `permit2: couldn't read the Permit2 allowance for ${token} (${shorten2(err instanceof Error ? err.message : String(err))}).`
     );
   }
@@ -1141,7 +1141,7 @@ async function ensurePermit2Allowance(input) {
     await publicClient.waitForTransactionReceipt({ hash, confirmations: 1 });
     return hash;
   } catch (err) {
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `permit2: the one-time Permit2 approval for ${token} failed to broadcast (${shorten2(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     )));
@@ -1156,7 +1156,7 @@ async function payPermit2Evm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `permit2 buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account. Pay via onchain-proof.`
     );
   }
@@ -1331,7 +1331,7 @@ async function verifyAndSettlePermit2Evm(input) {
       args: settleArgs
     });
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `permit2 settle: the merchant relayer failed to broadcast the proxy settle (${shorten2(err instanceof Error ? err.message : String(err))}). The payer's signature is still valid and its nonce unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -1343,7 +1343,7 @@ async function verifyAndSettlePermit2Evm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `permit2 settle: broadcast ${txHash} but couldn't confirm it (${shorten2(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1441,7 +1441,7 @@ function shorten3(msg) {
 function randomPermit2Nonce2() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _9 => _9.getRandomValues])) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the upto rail needs a CSPRNG nonce."
     );
   }
@@ -1458,13 +1458,13 @@ async function payUptoEvm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `upto buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account. Pay via onchain-proof.`
     );
   }
   const facilitatorAddress = _optionalChain([accept, 'access', _10 => _10.extra, 'optionalAccess', _11 => _11.facilitatorAddress]);
   if (typeof facilitatorAddress !== "string" || facilitatorAddress.length === 0) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `upto: the rail carries no extra.facilitatorAddress to bind into witness.facilitator \u2014 refusing to sign.`
     );
   }
@@ -1685,7 +1685,7 @@ async function verifyAndSettleUptoEvm(input) {
       args: settleArgs
     });
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `upto settle: the merchant relayer failed to broadcast the proxy settle (${shorten3(err instanceof Error ? err.message : String(err))}). The payer's signature is still valid and its nonce unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -1697,7 +1697,7 @@ async function verifyAndSettleUptoEvm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `upto settle: broadcast ${txHash} but couldn't confirm it (${shorten3(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1780,6 +1780,37 @@ function buildReceiptExtension(bundle) {
   if (bundle.attestation) info.receipt = bundle.attestation;
   return { [EXT_OFFER_RECEIPT]: { info } };
 }
+var EXT_PAYMENT_IDENTIFIER = "payment-identifier";
+var PAYMENT_ID_MIN = 16;
+var PAYMENT_ID_MAX = 128;
+var PAYMENT_ID_RE = /^[A-Za-z0-9_-]+$/;
+function buildPaymentIdentifierAdvertisement() {
+  return {
+    [EXT_PAYMENT_IDENTIFIER]: {
+      info: { required: false },
+      schema: { properties: { id: { type: "string", minLength: PAYMENT_ID_MIN, maxLength: PAYMENT_ID_MAX } } }
+    }
+  };
+}
+function readPaymentIdentifier(payload) {
+  if (typeof payload !== "object" || payload === null) return null;
+  const ext = payload.extensions;
+  if (typeof ext !== "object" || ext === null) return null;
+  const block = ext[EXT_PAYMENT_IDENTIFIER];
+  if (typeof block !== "object" || block === null) return null;
+  const info = block.info;
+  if (typeof info !== "object" || info === null) return null;
+  const id = info.id;
+  if (id === void 0) return null;
+  if (typeof id !== "string") return { invalid: "payment-identifier id must be a string" };
+  if (id.length < PAYMENT_ID_MIN || id.length > PAYMENT_ID_MAX) {
+    return { invalid: `payment-identifier id must be ${PAYMENT_ID_MIN}\u2013${PAYMENT_ID_MAX} chars (got ${id.length})` };
+  }
+  if (!PAYMENT_ID_RE.test(id)) {
+    return { invalid: "payment-identifier id must match [A-Za-z0-9_-]" };
+  }
+  return id;
+}
 function buildSignatureHeader(signature) {
   return toBase64Json(signature);
 }
@@ -1806,7 +1837,10 @@ function parseReceipt(response) {
   const headerValue = _nullishCoalesce(response.headers.get(HEADER_RESPONSE), () => ( response.headers.get(HEADER_RESPONSE_V1)));
   if (!headerValue) return null;
   const parsed = fromBase64Json(headerValue);
-  return isValidReceipt(parsed) ? parsed : null;
+  if (!isValidReceipt(parsed)) return null;
+  const r = parsed;
+  if (typeof r.transaction !== "string" && typeof r.txHash === "string") r.transaction = r.txHash;
+  return r;
 }
 function parseReceiptExtension(response) {
   const headerValue = _nullishCoalesce(response.headers.get(HEADER_RESPONSE), () => ( response.headers.get(HEADER_RESPONSE_V1)));
@@ -1836,7 +1870,8 @@ function parseSettleResponse(response) {
   if (!parsed || typeof parsed !== "object" || typeof parsed.success !== "boolean") return null;
   return {
     success: parsed.success,
-    ...typeof parsed.transaction === "string" ? { transaction: parsed.transaction } : {},
+    // Tolerate the legacy v1 `txHash` alias for `transaction` (mirrors isValidReceipt/parseReceipt).
+    ...typeof parsed.transaction === "string" ? { transaction: parsed.transaction } : typeof parsed.txHash === "string" ? { transaction: parsed.txHash } : {},
     ...typeof parsed.network === "string" ? { network: parsed.network } : {},
     ...typeof parsed.payer === "string" ? { payer: parsed.payer } : {},
     ...typeof parsed.errorReason === "string" ? { errorReason: parsed.errorReason } : {},
@@ -1855,6 +1890,14 @@ function parseSignatureObject(parsed) {
   if (!payload || typeof payload.txHash !== "string" || typeof payload.nonce !== "string") {
     return null;
   }
+  if (!accepted) {
+    const synthesized = {
+      scheme: "onchain-proof",
+      ...typeof v.network === "string" ? { network: v.network } : {},
+      ...typeof v.asset === "string" ? { asset: v.asset } : {}
+    };
+    return { ...v, accepted: synthesized, payload };
+  }
   return parsed;
 }
 function parseSignatureHeader(value) {
@@ -1994,7 +2037,11 @@ var evmDriver = {
   resolve(opts) {
     if (typeof opts.chain === "string" && /^(solana|ton|stellar)/.test(opts.chain)) return null;
     if (typeof opts.chain === "string") {
-      return makeEvmNetwork(resolveChain(opts.chain, opts.rpcUrl));
+      try {
+        return makeEvmNetwork(resolveChain(opts.chain, opts.rpcUrl));
+      } catch (err) {
+        throw new (0, _chunkGYM46G5Lcjs.UnsupportedNetworkError)(err instanceof Error ? err.message : String(err), { cause: err });
+      }
     }
     let resolved;
     try {
@@ -2027,20 +2074,25 @@ function makeEvmNetwork(resolved) {
         const info = resolved.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(resolved.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
             `token "${token}" isn't built in for ${resolved.chain.name} (known: ${known}). Pass { address, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.address, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "evm", network);
+      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "evm", network);
       if (!("address" in token)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is EVM; a custom token must be { address, decimals }.`
         );
       }
+      if (!_viem.isAddress.call(void 0, token.address)) {
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+          `chain ${network} is EVM, but token address "${token.address}" is not a valid 0x address.`
+        );
+      }
       return {
-        asset: token.address,
+        asset: _viem.getAddress.call(void 0, token.address),
         decimals: token.decimals,
         ...token.symbol ? { symbol: token.symbol } : {}
       };
@@ -2067,20 +2119,20 @@ function makeEvmNetwork(resolved) {
     },
     assertValidPayTo(payTo) {
       if (!_viem.isAddress.call(void 0, payTo)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is EVM, but payTo "${payTo}" is not a valid 0x address.`
         );
       }
     },
     bindWallet(wallet) {
       if (typeof wallet !== "object" || wallet === null) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { key } (0x\u2026 hex) or { walletClient }.`
         );
       }
-      _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "EVM");
+      _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "EVM");
       if (!("key" in wallet) && !("walletClient" in wallet)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { key } (0x\u2026 hex) or { walletClient }.`
         );
       }
@@ -2097,12 +2149,12 @@ function makeEvmNetwork(resolved) {
         });
       } catch (err) {
         if (isViemInsufficientFunds(err)) {
-          throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+          throw new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
             err instanceof Error ? err.message : "Insufficient funds for payment.",
             { cause: err }
           );
         }
-        throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref, minConfirmations) {
@@ -2113,7 +2165,7 @@ function makeEvmNetwork(resolved) {
         });
         return { height: receipt.blockNumber.toString() };
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(
           `EVM tx ${ref} did not reach ${minConfirmations} confirmation(s) in time.`,
           { cause: err }
         );
@@ -2121,10 +2173,10 @@ function makeEvmNetwork(resolved) {
     },
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
-      if (accept.scheme === "exact") {
-        const m = accept.extra.assetTransferMethod;
-        const permit2 = m === "permit2" || m === "permit2-exact";
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      if (accept.scheme === "exact" || accept.scheme === "upto") {
+        const m = _optionalChain([accept, 'access', _19 => _19.extra, 'optionalAccess', _20 => _20.assetTransferMethod]);
+        const permit2 = m === "permit2" || m === "permit2-exact" || m === "permit2-upto";
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: 0n,
@@ -2135,7 +2187,7 @@ function makeEvmNetwork(resolved) {
       const gasLimit = accept.asset === "native" ? 21000n : 65000n;
       try {
         const gasPrice = await publicClient.getGasPrice();
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -2144,7 +2196,7 @@ function makeEvmNetwork(resolved) {
         });
       } catch (e23) {
         const gasPrice = 5000000000n;
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -2329,9 +2381,9 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-MYF4HBO4.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-N3UCNCYE.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
         { cause }
       );
@@ -2341,9 +2393,9 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-AOR3EURW.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-5HDVOTMR.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
         { cause }
       );
@@ -2353,9 +2405,9 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-CRWBSX4E.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-Y3SQN7S5.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
         { cause }
       );
@@ -2365,9 +2417,9 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-Y6SQNYLC.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-5TYDLQFS.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
         { cause }
       );
@@ -2377,9 +2429,9 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-OMXB6EW2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-TX2B4N2A.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
         { cause }
       );
@@ -2389,9 +2441,9 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-Y4RLKKE2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-4AL4E6XU.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
         { cause }
       );
@@ -2401,9 +2453,9 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-6KAQVVG2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-YNNK7RW7.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
         { cause }
       );
@@ -2413,9 +2465,9 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-GHJPO6JJ.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-LFTQGBBK.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
         { cause }
       );
@@ -2425,9 +2477,9 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-FCEECDG6.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-QU6G2DQZ.cjs")));
     } catch (cause) {
-      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
+      throw new (0, _chunkGYM46G5Lcjs.MissingDriverError)(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
         { cause }
       );
@@ -2788,7 +2840,7 @@ async function register402Index(input) {
     if (res.ok) {
       const body = await res.json().catch(() => ({}));
       const msg = typeof body.message === "string" && body.message.length > 0 ? body.message : void 0;
-      const live = _optionalChain([body, 'access', _19 => _19.service, 'optionalAccess', _20 => _20.status]) === "active";
+      const live = _optionalChain([body, 'access', _21 => _21.service, 'optionalAccess', _22 => _22.status]) === "active";
       return {
         source: "402index",
         ok: true,
@@ -2925,11 +2977,11 @@ async function readSiwxInfo(res) {
   try {
     const body = await res.json();
     const ext = body.extensions;
-    const siwx = _optionalChain([ext, 'optionalAccess', _21 => _21["sign-in-with-x"]]);
-    const info = _nullishCoalesce(_optionalChain([siwx, 'optionalAccess', _22 => _22.info]), () => ( siwx));
-    if (info && info.chainId == null && Array.isArray(_optionalChain([siwx, 'optionalAccess', _23 => _23.supportedChains]))) {
+    const siwx = _optionalChain([ext, 'optionalAccess', _23 => _23["sign-in-with-x"]]);
+    const info = _nullishCoalesce(_optionalChain([siwx, 'optionalAccess', _24 => _24.info]), () => ( siwx));
+    if (info && info.chainId == null && Array.isArray(_optionalChain([siwx, 'optionalAccess', _25 => _25.supportedChains]))) {
       const evm = siwx.supportedChains.find(
-        (c) => typeof _optionalChain([c, 'optionalAccess', _24 => _24.chainId]) === "string" && c.chainId.startsWith("eip155:")
+        (c) => typeof _optionalChain([c, 'optionalAccess', _26 => _26.chainId]) === "string" && c.chainId.startsWith("eip155:")
       );
       if (evm && typeof evm.chainId === "string") info.chainId = evm.chainId;
     }
@@ -3071,7 +3123,7 @@ function encodeBase642(str) {
 }
 
 // src/policy.ts
-var DENOM_PRECISION = _chunkMWBT7MCEcjs.MAX_DECIMALS;
+var DENOM_PRECISION = _chunkGYM46G5Lcjs.MAX_DECIMALS;
 var BUILTIN_DENOMS = {
   USDC: "USD",
   USDT: "USD",
@@ -3085,7 +3137,7 @@ var BUILTIN_DENOMS = {
 function denomOf(symbol, asset, policy) {
   if (asset === "native") return void 0;
   const norm = (v) => typeof v === "string" && v.trim() !== "" ? v.trim().toUpperCase() : void 0;
-  const override = _optionalChain([policy, 'optionalAccess', _25 => _25.denomFor]);
+  const override = _optionalChain([policy, 'optionalAccess', _27 => _27.denomFor]);
   if (override && typeof override === "object") {
     if (asset && asset in override) {
       const d = norm(override[asset]);
@@ -3186,7 +3238,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
     }
   }
   if (policy.maxAmount !== void 0) {
-    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
+    const cap = _chunkGYM46G5Lcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
     if (intent.amountBase > cap) {
       return deny(
         "MAX_AMOUNT",
@@ -3195,7 +3247,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
     }
   }
   if (policy.maxTotal !== void 0) {
-    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
+    const cap = _chunkGYM46G5Lcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
     if (spentForAssetBase + intent.amountBase > cap) {
       return deny(
         "MAX_TOTAL",
@@ -3214,7 +3266,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
           `token for ${denom} has more than ${DENOM_PRECISION} decimals \u2014 refusing to count it toward policy.maxTotalPerDenom.${denom} on trust (it can't be summed safely).`
         );
       }
-      const capScaled = _chunkMWBT7MCEcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
+      const capScaled = _chunkGYM46G5Lcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
       if ((_nullishCoalesce(ctx.spentInDenomScaled, () => ( 0n))) + thisScaled > capScaled) {
         return deny(
           "MAX_TOTAL_DENOM",
@@ -3232,7 +3284,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
     }
   }
   if (ctx && policy.windowTotal !== void 0 && policy.windowSeconds !== void 0) {
-    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.windowTotal, intent.decimals);
+    const cap = _chunkGYM46G5Lcjs.floorUnits.call(void 0, policy.windowTotal, intent.decimals);
     if (ctx.spentInWindowBase + intent.amountBase > cap) {
       return deny(
         "WINDOW_TOTAL",
@@ -3286,7 +3338,7 @@ var SpendLedger = (_class = class {
       } catch (e30) {
         seed = [];
       }
-      for (const r of seed) this.ingest(r, _nullishCoalesce(_optionalChain([r, 'optionalAccess', _26 => _26.decimals]), () => ( 0)), _optionalChain([r, 'optionalAccess', _27 => _27.denom]));
+      for (const r of seed) this.ingest(r, _nullishCoalesce(_optionalChain([r, 'optionalAccess', _28 => _28.decimals]), () => ( 0)), _optionalChain([r, 'optionalAccess', _29 => _29.denom]));
     }
   }
   /**
@@ -3298,7 +3350,7 @@ var SpendLedger = (_class = class {
    * read or the constructor.
    */
   isTallyable(r, decimals) {
-    return !!r && typeof r.amountBase === "string" && /^\d+$/.test(r.amountBase) && Number.isInteger(decimals) && decimals >= 0 && decimals <= _chunkMWBT7MCEcjs.MAX_DECIMALS;
+    return !!r && typeof r.amountBase === "string" && /^\d+$/.test(r.amountBase) && Number.isInteger(decimals) && decimals >= 0 && decimals <= _chunkGYM46G5Lcjs.MAX_DECIMALS;
   }
   /** Apply a record to the in-memory tallies (records + per-asset bucket + denom total).
    *  Shared by {@link record} and constructor hydration; does NOT persist. Returns the
@@ -3348,7 +3400,7 @@ var SpendLedger = (_class = class {
   }
   /** Running total (base units) already spent on this (network, asset). */
   totalFor(network, asset) {
-    return _nullishCoalesce(_optionalChain([this, 'access', _28 => _28.buckets, 'access', _29 => _29.get, 'call', _30 => _30(keyFor(network, asset)), 'optionalAccess', _31 => _31.total]), () => ( 0n));
+    return _nullishCoalesce(_optionalChain([this, 'access', _30 => _30.buckets, 'access', _31 => _31.get, 'call', _32 => _32(keyFor(network, asset)), 'optionalAccess', _33 => _33.total]), () => ( 0n));
   }
   /**
    * Running grand total for a DENOMINATION, scaled to {@link DENOM_PRECISION} (so
@@ -3435,20 +3487,38 @@ var SpendLedger = (_class = class {
         symbol: b.symbol,
         decimals: b.decimals,
         totalBase: b.total.toString(),
-        totalFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, b.total, b.decimals),
+        totalFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, b.total, b.decimals),
         count: b.count
       })),
       byDenom: [...this.denomTotals.entries()].map(([denom, scaled]) => ({
         denom,
         totalScaled: scaled.toString(),
-        totalFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, scaled, DENOM_PRECISION),
-        count: this.records.filter((r) => _optionalChain([r, 'access', _32 => _32.denom, 'optionalAccess', _33 => _33.toUpperCase, 'call', _34 => _34()]) === denom).length
+        totalFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, scaled, DENOM_PRECISION),
+        count: this.records.filter((r) => _optionalChain([r, 'access', _34 => _34.denom, 'optionalAccess', _35 => _35.toUpperCase, 'call', _36 => _36()]) === denom).length
       })),
       records: [...this.records]
     };
   }
 }, _class);
 
+// src/util/exactRecovery.ts
+function exactSettleCheckHint(family, payerFrom, nonce) {
+  switch (family) {
+    case "evm":
+      return `the EIP-3009 \`authorizationState(${payerFrom}, ${nonce})\` (or, on the Permit2 method, the Permit2 nonce bitmap)`;
+    case "solana":
+      return `the buyer's transaction signature (a duplicate signature is the chain's own replay guard; plus the SPL-Memo nonce when present)`;
+    case "algorand":
+      return `the atomic group / transaction id`;
+    case "aptos":
+      return `the sender's account sequence number`;
+    case "near":
+      return `the access-key nonce (\`${nonce}\`)`;
+    default:
+      return `the single-use marker (\`ref=${nonce}\`)`;
+  }
+}
+
 // src/client.ts
 var DEFAULT_SCHEMES = ["onchain-proof"];
 var RECIPIENT_FIX = {
@@ -3660,17 +3730,17 @@ var PipRailClient = (_class2 = class {
    * {@link ReceiptVerification}).
    */
   static async verifyReceipt(receipt, opts) {
-    const r = _optionalChain([receipt, 'optionalAccess', _35 => _35.receipt]);
+    const r = _optionalChain([receipt, 'optionalAccess', _37 => _37.receipt]);
     if (!r || typeof r !== "object") {
       return { ok: false, onChain: { payTo: "", asset: "", amount: "", payer: "" }, matchesClaims: false, ageSeconds: 0, error: "tx_not_found" };
     }
     const claimed = { payTo: _nullishCoalesce(r.payTo, () => ( "")), asset: _nullishCoalesce(r.asset, () => ( "")), amount: _nullishCoalesce(r.amount, () => ( "")), payer: _nullishCoalesce(r.payer, () => ( "")) };
     const ageSeconds = receiptAgeSeconds(r.verifiedAt);
     try {
-      const chain = chainSelectorForNetwork(r.network, _optionalChain([opts, 'optionalAccess', _36 => _36.rpcUrl]));
+      const chain = chainSelectorForNetwork(r.network, _optionalChain([opts, 'optionalAccess', _38 => _38.rpcUrl]));
       const net = await resolveNetwork2({
         chain,
-        ..._optionalChain([opts, 'optionalAccess', _37 => _37.rpcUrl]) ? { rpcUrl: opts.rpcUrl } : {}
+        ..._optionalChain([opts, 'optionalAccess', _39 => _39.rpcUrl]) ? { rpcUrl: opts.rpcUrl } : {}
       });
       const accept = {
         scheme: "onchain-proof",
@@ -3717,7 +3787,7 @@ var PipRailClient = (_class2 = class {
    * no chain libs. The JWS format defers to R3 (`{ ok:false, reason:'jws-not-loaded' }`).
    */
   static async verifyAttestation(receipt) {
-    const att = _optionalChain([receipt, 'optionalAccess', _38 => _38.attestation]);
+    const att = _optionalChain([receipt, 'optionalAccess', _40 => _40.attestation]);
     if (!att || typeof att !== "object" || typeof att.signature !== "string") {
       return { ok: false, reason: "no-attestation" };
     }
@@ -3728,7 +3798,7 @@ var PipRailClient = (_class2 = class {
     if (!r || typeof r !== "object") return { ok: false, reason: "no-receipt" };
     const payload = _nullishCoalesce(att.payload, () => ( {}));
     const network = typeof payload.network === "string" ? payload.network : r.network;
-    const resourceUrl = typeof payload.resourceUrl === "string" ? payload.resourceUrl : _nullishCoalesce(_optionalChain([receipt, 'access', _39 => _39.resource, 'optionalAccess', _40 => _40.url]), () => ( ""));
+    const resourceUrl = typeof payload.resourceUrl === "string" ? payload.resourceUrl : _nullishCoalesce(_optionalChain([receipt, 'access', _41 => _41.resource, 'optionalAccess', _42 => _42.url]), () => ( ""));
     const payer = typeof payload.payer === "string" ? payload.payer : r.payer;
     const issuedAt = typeof payload.issuedAt === "number" ? payload.issuedAt : receiptIssuedAtSeconds(r.verifiedAt);
     const transaction = typeof payload.transaction === "string" ? payload.transaction : _nullishCoalesce(r.transaction, () => ( ""));
@@ -3774,7 +3844,7 @@ var PipRailClient = (_class2 = class {
    * as-is) or a plain object (serialised as JSON).
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _41 => _41.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _43 => _43.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -3805,7 +3875,7 @@ var PipRailClient = (_class2 = class {
    * "0.05 USDC on Base, within budget → pay it." No funds move.
    */
   async quote(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _42 => _42.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _44 => _44.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     return quote;
@@ -3824,14 +3894,14 @@ var PipRailClient = (_class2 = class {
    * on Tron, where a USD₮ transfer can cost real TRX.
    */
   async estimateCost(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _43 => _43.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _45 => _45.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     try {
       const { net, accept, quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
       const cost = await net.estimateCost(accept);
       return { quote, cost };
     } catch (err) {
-      if (err instanceof _chunkMWBT7MCEcjs.InvalidEnvelopeError) return null;
+      if (err instanceof _chunkGYM46G5Lcjs.InvalidEnvelopeError) return null;
       throw err;
     }
   }
@@ -3862,8 +3932,8 @@ var PipRailClient = (_class2 = class {
     return {
       session: {
         start,
-        expiresAt: _optionalChain([view, 'optionalAccess', _44 => _44.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
-        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _45 => _45.secondsRemaining]), () => ( null))
+        expiresAt: _optionalChain([view, 'optionalAccess', _46 => _46.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
+        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _47 => _47.secondsRemaining]), () => ( null))
       },
       byAsset: this.remaining(),
       byDenom: this.denomRemaining(),
@@ -3878,19 +3948,19 @@ var PipRailClient = (_class2 = class {
    * price-converted figure (tokens grouped as one unit, each 1:1).
    */
   denomRemaining() {
-    const caps = _optionalChain([this, 'access', _46 => _46.opts, 'access', _47 => _47.policy, 'optionalAccess', _48 => _48.maxTotalPerDenom]);
+    const caps = _optionalChain([this, 'access', _48 => _48.opts, 'access', _49 => _49.policy, 'optionalAccess', _50 => _50.maxTotalPerDenom]);
     if (!caps) return [];
     return Object.entries(caps).map(([rawDenom, capStr]) => {
       const denom = rawDenom.toUpperCase();
       const spentScaled = this.ledger.totalForDenom(denom);
-      const capScaled = _chunkMWBT7MCEcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
+      const capScaled = _chunkGYM46G5Lcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
       const remainingScaled = capScaled > spentScaled ? capScaled - spentScaled : 0n;
       const fraction = capScaled === 0n ? spentScaled > 0n ? 1 : 0 : Number(spentScaled * 1000000n / capScaled) / 1e6;
       return {
         denom,
-        spentFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, spentScaled, DENOM_PRECISION),
-        capFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, capScaled, DENOM_PRECISION),
-        remainingFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, remainingScaled, DENOM_PRECISION),
+        spentFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, spentScaled, DENOM_PRECISION),
+        capFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, capScaled, DENOM_PRECISION),
+        remainingFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, remainingScaled, DENOM_PRECISION),
         fraction
       };
     });
@@ -3901,11 +3971,11 @@ var PipRailClient = (_class2 = class {
     const policy = this.opts.policy;
     const settled = this.ledger.count();
     const out = { settled };
-    if (_optionalChain([policy, 'optionalAccess', _49 => _49.maxPayments]) !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _51 => _51.maxPayments]) !== void 0) {
       out.lifetimeCap = policy.maxPayments;
       out.lifetimeRemaining = Math.max(0, policy.maxPayments - settled);
     }
-    if (_optionalChain([policy, 'optionalAccess', _50 => _50.maxPaymentsPerWindow]) !== void 0 && policy.windowSeconds !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _52 => _52.maxPaymentsPerWindow]) !== void 0 && policy.windowSeconds !== void 0) {
       const windowSettled = this.ledger.countSince(Date.now() - policy.windowSeconds * 1e3);
       out.windowCap = policy.maxPaymentsPerWindow;
       out.windowSettled = windowSettled;
@@ -3921,7 +3991,7 @@ var PipRailClient = (_class2 = class {
    * never throws, never sums across tokens (no price oracle). PROCESS-SCOPED.
    */
   remaining() {
-    const maxTotal = _optionalChain([this, 'access', _51 => _51.opts, 'access', _52 => _52.policy, 'optionalAccess', _53 => _53.maxTotal]);
+    const maxTotal = _optionalChain([this, 'access', _53 => _53.opts, 'access', _54 => _54.policy, 'optionalAccess', _55 => _55.maxTotal]);
     return this.ledger.assetBuckets().map((b) => {
       const base2 = {
         network: b.network,
@@ -3931,13 +4001,13 @@ var PipRailClient = (_class2 = class {
         spentBase: b.totalBase.toString()
       };
       if (maxTotal === void 0) return base2;
-      const capBase = _chunkMWBT7MCEcjs.floorUnits.call(void 0, maxTotal, b.decimals);
+      const capBase = _chunkGYM46G5Lcjs.floorUnits.call(void 0, maxTotal, b.decimals);
       const remainingBase = capBase > b.totalBase ? capBase - b.totalBase : 0n;
       return {
         ...base2,
         capBase: capBase.toString(),
         remainingBase: remainingBase.toString(),
-        remainingFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, remainingBase, b.decimals)
+        remainingFormatted: _chunkGYM46G5Lcjs.formatUnits.call(void 0, remainingBase, b.decimals)
       };
     });
   }
@@ -3973,15 +4043,15 @@ var PipRailClient = (_class2 = class {
    * the plan yourself. No funds move.
    */
   async planPayment(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _54 => _54.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _56 => _56.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const challenge = await parseChallenge(res);
     if (!challenge) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
     }
     const { net, wallet } = await this.ensure();
     if (!wallet) {
-      throw new (0, _chunkMWBT7MCEcjs.WalletRequiredError)(
+      throw new (0, _chunkGYM46G5Lcjs.WalletRequiredError)(
         "planPayment needs a wallet (it checks YOUR balance, gas, and recipient-readiness). This client is read-only \u2014 construct it with a `wallet` to plan or pay."
       );
     }
@@ -4014,7 +4084,8 @@ var PipRailClient = (_class2 = class {
    *   before publishing, so retry with a brief backoff if a fresh listing is missing.
    * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
    *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
+   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand
+   *   + Aptos + NEAR).
    */
   async discover(opts = {}) {
     const found = await searchOpenIndexes({
@@ -4154,31 +4225,31 @@ var PipRailClient = (_class2 = class {
    * streams throw `NonReplayableBodyError`.
    */
   async fetch(url, init) {
-    const body = _optionalChain([init, 'optionalAccess', _55 => _55.body]);
+    const body = _optionalChain([init, 'optionalAccess', _57 => _57.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
-      throw new (0, _chunkMWBT7MCEcjs.NonReplayableBodyError)(
+      throw new (0, _chunkGYM46G5Lcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
       );
     }
     const firstResponse = await fetch(url, init);
     if (firstResponse.status !== 402) return firstResponse;
-    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _56 => _56.schemes]));
+    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _58 => _58.schemes]));
     const resolved = await this.resolveChallenge(url, firstResponse, schemes);
     const { net, wallet, challenge } = resolved;
     if (!wallet) {
-      throw new (0, _chunkMWBT7MCEcjs.WalletRequiredError)(
+      throw new (0, _chunkGYM46G5Lcjs.WalletRequiredError)(
         "Paying a 402 needs a wallet to sign + settle. This client is read-only \u2014 construct it with a `wallet` to pay (quote/discover/register still work without one)."
       );
     }
     let accept = resolved.accept;
     let quote = resolved.quote;
-    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _57 => _57.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
+    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _59 => _59.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
     if (autoRoute) {
       const plan = await this.planFromChallenge(net, wallet, challenge, url, schemes);
       if (!plan.best) {
         const reason = _nullishCoalesce(plan.fundingHint, () => ( "No rail is settleable for this payment."));
         this.safeEmit({ kind: "payment-failed", reason });
-        throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(reason);
+        throw new (0, _chunkGYM46G5Lcjs.PaymentDeclinedError)(reason);
       }
       accept = plan.best.accept;
       quote = plan.best.quote;
@@ -4192,7 +4263,7 @@ var PipRailClient = (_class2 = class {
       return this.payExactRail(net, wallet, accept, url, init, quote);
     }
     if (accept.scheme !== "onchain-proof") {
-      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+      throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
         `internal: unrouted accept scheme '${accept.scheme}' reached the onchain-proof pay path.`
       );
     }
@@ -4210,7 +4281,7 @@ var PipRailClient = (_class2 = class {
   async resolveChallenge(url, response, schemes) {
     const challenge = await parseChallenge(response);
     if (!challenge) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)(
         "402 response did not include a parseable x402 challenge."
       );
     }
@@ -4221,8 +4292,8 @@ var PipRailClient = (_class2 = class {
         (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network)
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
-        throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand + NEAR today), and no 'onchain-proof' rail was offered.`
+        throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand, Aptos + NEAR today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -4230,13 +4301,13 @@ var PipRailClient = (_class2 = class {
           (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network) && net.describeAsset(a.asset) != null
         );
         if (payable) {
-          throw new (0, _chunkMWBT7MCEcjs.NoCompatibleAcceptError)(
+          throw new (0, _chunkGYM46G5Lcjs.NoCompatibleAcceptError)(
             `This 402 is payable only via the standard 'exact' rail on ${net.network}, which is OFF by default. Enable it: new PipRailClient({ \u2026, schemes: ['onchain-proof', 'exact'] }) or per call fetch(url, { schemes: ['exact'] }) (MCP: PIPRAIL_SCHEMES=onchain-proof,exact).`
           );
         }
       }
       const networks = [...new Set(challenge.accepts.map((a) => a.network))].join(", ");
-      throw new (0, _chunkMWBT7MCEcjs.NoCompatibleAcceptError)(
+      throw new (0, _chunkGYM46G5Lcjs.NoCompatibleAcceptError)(
         `No accepts[] entry payable by this client on ${net.network} (schemes: ${schemes.join(", ")}; challenge offered: ${networks || "none"}).`
       );
     }
@@ -4275,7 +4346,15 @@ var PipRailClient = (_class2 = class {
     if (schemes.includes("exact")) {
       out.push(
         ...challenge.accepts.filter(
-          (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network) && typeof net.payExact === "function" && net.describeAsset(a.asset) != null && // a foreign rail's maxTimeoutSeconds must be a usable positive integer, or
+          (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network) && typeof net.payExact === "function" && // `native` is never `exact`-payable on ANY family (exact = an EIP-3009/Permit2-style
+          // signed-authorization scheme a native coin can't support; every driver's payExact
+          // throws/returns-null for it). describeAsset('native') IS non-null (onchain-proof needs
+          // it), so without this guard a malformed 402 advertising a native `exact` rail would be
+          // gathered, planned `payable`, even chosen by autoRoute — then throw at pay time.
+          a.asset !== "native" && // the exact pay path (payExact → driver) reads `extra.assetTransferMethod`; a malformed
+          // 402 offering an exact rail for a RECOGNISED token but omitting `extra` would otherwise
+          // be planned payable then throw a raw TypeError mid-pay. Require it at gather time.
+          typeof _optionalChain([a, 'access', _60 => _60.extra, 'optionalAccess', _61 => _61.assetTransferMethod]) === "string" && net.describeAsset(a.asset) != null && // a foreign rail's maxTimeoutSeconds must be a usable positive integer, or
           // signing it would build a NaN/garbage validBefore — drop it silently
           // (symmetric with an unrecognised token) rather than leak a raw SyntaxError.
           Number.isInteger(a.maxTimeoutSeconds) && a.maxTimeoutSeconds > 0
@@ -4285,7 +4364,8 @@ var PipRailClient = (_class2 = class {
     if (schemes.includes("upto")) {
       out.push(
         ...challenge.accepts.filter(
-          (a) => a.scheme === "upto" && this.supportsNetwork(net, a.network) && typeof net.payUpto === "function" && net.describeAsset(a.asset) != null && typeof _optionalChain([a, 'access', _58 => _58.extra, 'optionalAccess', _59 => _59.facilitatorAddress]) === "string" && a.extra.facilitatorAddress.length > 0 && Number.isInteger(a.maxTimeoutSeconds) && a.maxTimeoutSeconds > 0
+          (a) => a.scheme === "upto" && this.supportsNetwork(net, a.network) && typeof net.payUpto === "function" && a.asset !== "native" && // native is not upto-payable either (same reason as exact)
+          net.describeAsset(a.asset) != null && typeof _optionalChain([a, 'access', _62 => _62.extra, 'optionalAccess', _63 => _63.facilitatorAddress]) === "string" && a.extra.facilitatorAddress.length > 0 && Number.isInteger(a.maxTimeoutSeconds) && a.maxTimeoutSeconds > 0
         )
       );
     }
@@ -4356,21 +4436,21 @@ var PipRailClient = (_class2 = class {
     if (isExact) {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkGYM46G5Lcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
     } else if (isNative) {
       if (nativeKnown && bal.native < amount + fee) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
+        shortfall.token = _chunkGYM46G5Lcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
       }
     } else {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkGYM46G5Lcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
       if (nativeKnown && bal.native < fee) {
         blockers.push("INSUFFICIENT_GAS");
-        shortfall.native = _chunkMWBT7MCEcjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
+        shortfall.native = _chunkGYM46G5Lcjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
       } else if (nativeKnown && fee > 0n && bal.native < fee * 3n / 2n) {
         warnings.push("THIN_GAS_MARGIN");
       }
@@ -4395,8 +4475,8 @@ var PipRailClient = (_class2 = class {
       blockers,
       warnings,
       balance: {
-        token: bal.token != null ? _chunkMWBT7MCEcjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
-        native: bal.native != null ? _chunkMWBT7MCEcjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
+        token: bal.token != null ? _chunkGYM46G5Lcjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
+        native: bal.native != null ? _chunkGYM46G5Lcjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
       },
       need: { token: quote.amountFormatted, native: cost.feeFormatted },
       ...shortfall.token || shortfall.native ? { shortfall } : {},
@@ -4407,30 +4487,30 @@ var PipRailClient = (_class2 = class {
    *  driver's describeAsset) + the policy verdict + a symbol-mismatch flag. */
   buildQuote(net, accept, url, description) {
     if (typeof accept.amount !== "string" || !/^\d+$/.test(accept.amount)) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)(
         `challenge amount "${String(accept.amount)}" is not a base-unit integer string.`
       );
     }
     if (typeof accept.asset !== "string" || accept.asset.length === 0) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)(
         `challenge on ${accept.network} states no (string) asset \u2014 refusing to price it.`
       );
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _60 => _60.decimals]), () => ( _optionalChain([accept, 'access', _61 => _61.extra, 'optionalAccess', _62 => _62.decimals])));
+    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _64 => _64.decimals]), () => ( _optionalChain([accept, 'access', _65 => _65.extra, 'optionalAccess', _66 => _66.decimals])));
     if (typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)(
         `challenge for ${accept.asset} on ${accept.network} states no valid decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
       );
     }
-    if (decimals > _chunkMWBT7MCEcjs.MAX_DECIMALS) {
-      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
-        `challenge for ${accept.asset} on ${accept.network} states ${decimals} decimals (> ${_chunkMWBT7MCEcjs.MAX_DECIMALS}) \u2014 refusing to price it (no real token is that deep).`
+    if (decimals > _chunkGYM46G5Lcjs.MAX_DECIMALS) {
+      throw new (0, _chunkGYM46G5Lcjs.InvalidEnvelopeError)(
+        `challenge for ${accept.asset} on ${accept.network} states ${decimals} decimals (> ${_chunkGYM46G5Lcjs.MAX_DECIMALS}) \u2014 refusing to price it (no real token is that deep).`
       );
     }
-    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _63 => _63.symbol]), () => ( _optionalChain([accept, 'access', _64 => _64.extra, 'optionalAccess', _65 => _65.symbol])));
-    const amountFormatted = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amountBase, decimals);
+    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _67 => _67.symbol]), () => ( _optionalChain([accept, 'access', _68 => _68.extra, 'optionalAccess', _69 => _69.symbol])));
+    const amountFormatted = _chunkGYM46G5Lcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf2(url),
       chain: this.opts.chain,
@@ -4471,7 +4551,7 @@ var PipRailClient = (_class2 = class {
       this.ledger.totalFor(accept.network, accept.asset),
       ctx
     );
-    const serverSymbol = _optionalChain([accept, 'access', _66 => _66.extra, 'optionalAccess', _67 => _67.symbol]);
+    const serverSymbol = _optionalChain([accept, 'access', _70 => _70.extra, 'optionalAccess', _71 => _71.symbol]);
     const symbolMismatch = intent.recognized && !!serverSymbol && !!symbol && serverSymbol.toUpperCase() !== symbol.toUpperCase();
     return {
       url,
@@ -4535,7 +4615,7 @@ var PipRailClient = (_class2 = class {
       ...opts.quote ? { quote: opts.quote } : {},
       budget: this.budget()
     });
-    throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(reason, {
+    throw new (0, _chunkGYM46G5Lcjs.PaymentDeclinedError)(reason, {
       ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {},
       ...opts.cause !== void 0 ? { cause: opts.cause } : {}
     });
@@ -4567,7 +4647,7 @@ var PipRailClient = (_class2 = class {
         const max = BigInt(quote.amount);
         const shown = claimed < max ? claimed : max;
         settledBase = shown.toString();
-        settledFormatted = _chunkMWBT7MCEcjs.formatUnits.call(void 0, shown, quote.decimals);
+        settledFormatted = _chunkGYM46G5Lcjs.formatUnits.call(void 0, shown, quote.decimals);
       } catch (e36) {
       }
     }
@@ -4603,7 +4683,7 @@ var PipRailClient = (_class2 = class {
    * `warnAtFraction` is set. Reads the just-computed {@link SessionBudget}; isolated (safeEmit).
    */
   emitThresholds(budget) {
-    const frac = _optionalChain([this, 'access', _68 => _68.opts, 'access', _69 => _69.policy, 'optionalAccess', _70 => _70.warnAtFraction]);
+    const frac = _optionalChain([this, 'access', _72 => _72.opts, 'access', _73 => _73.policy, 'optionalAccess', _74 => _74.warnAtFraction]);
     if (frac === void 0) return;
     const fire = (scope, label, spentFormatted, capFormatted, fraction) => {
       if (fraction < frac) return;
@@ -4618,8 +4698,8 @@ var PipRailClient = (_class2 = class {
       fire(
         "asset",
         `${_nullishCoalesce(r.symbol, () => ( r.asset))} on ${r.network}`,
-        _chunkMWBT7MCEcjs.formatUnits.call(void 0, spent, r.decimals),
-        _chunkMWBT7MCEcjs.formatUnits.call(void 0, cap, r.decimals),
+        _chunkGYM46G5Lcjs.formatUnits.call(void 0, spent, r.decimals),
+        _chunkGYM46G5Lcjs.formatUnits.call(void 0, cap, r.decimals),
         fraction
       );
     }
@@ -4627,17 +4707,17 @@ var PipRailClient = (_class2 = class {
       fire("denom", d.denom, d.spentFormatted, d.capFormatted, d.fraction);
     }
     const policy = this.opts.policy;
-    if (_optionalChain([policy, 'optionalAccess', _71 => _71.windowTotal]) !== void 0 && policy.windowSeconds !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _75 => _75.windowTotal]) !== void 0 && policy.windowSeconds !== void 0) {
       const since = Date.now() - policy.windowSeconds * 1e3;
       for (const r of budget.byAsset) {
-        const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.windowTotal, r.decimals);
+        const cap = _chunkGYM46G5Lcjs.floorUnits.call(void 0, policy.windowTotal, r.decimals);
         const spent = this.ledger.totalSince(r.network, r.asset, since);
         const fraction = cap === 0n ? spent > 0n ? 1 : 0 : Number(spent * 1000000n / cap) / 1e6;
         fire(
           "window",
           `${_nullishCoalesce(r.symbol, () => ( r.asset))} on ${r.network}`,
-          _chunkMWBT7MCEcjs.formatUnits.call(void 0, spent, r.decimals),
-          _chunkMWBT7MCEcjs.formatUnits.call(void 0, cap, r.decimals),
+          _chunkGYM46G5Lcjs.formatUnits.call(void 0, spent, r.decimals),
+          _chunkGYM46G5Lcjs.formatUnits.call(void 0, cap, r.decimals),
           fraction
         );
       }
@@ -4658,14 +4738,14 @@ var PipRailClient = (_class2 = class {
   }
   async payAndConfirm(net, wallet, accept) {
     if (!this.supportsNetwork(net, accept.network)) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongChainError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongChainError)(
         `Challenge expects ${accept.network} but client is on ${net.network}.`
       );
     }
     const ref = await net.send(wallet, accept);
     this.safeEmit({ kind: "payment-broadcast", ref });
     try {
-      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _72 => _72.extra, 'optionalAccess', _73 => _73.minConfirmations]), () => ( 1)));
+      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _76 => _76.extra, 'optionalAccess', _77 => _77.minConfirmations]), () => ( 1)));
       this.safeEmit({
         kind: "payment-confirmed",
         ref,
@@ -4685,9 +4765,9 @@ var PipRailClient = (_class2 = class {
     const signature = {
       x402Version: 2,
       accepted: accept,
-      payload: { nonce: _optionalChain([accept, 'access', _74 => _74.extra, 'optionalAccess', _75 => _75.nonce]), txHash: ref }
+      payload: { nonce: _optionalChain([accept, 'access', _78 => _78.extra, 'optionalAccess', _79 => _79.nonce]), txHash: ref }
     };
-    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _76 => _76.headers]));
+    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _80 => _80.headers]));
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
     let lastResponse = null;
     let lastReason = null;
@@ -4702,7 +4782,7 @@ var PipRailClient = (_class2 = class {
         () => timeoutController.abort(),
         this.retryTimeoutMs
       );
-      const signal = _optionalChain([originalInit, 'optionalAccess', _77 => _77.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
+      const signal = _optionalChain([originalInit, 'optionalAccess', _81 => _81.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
       try {
         lastResponse = await fetch(url, {
           ..._nullishCoalesce(originalInit, () => ( {})),
@@ -4711,7 +4791,7 @@ var PipRailClient = (_class2 = class {
         });
       } catch (err) {
         if (timeoutController.signal.aborted) {
-          throw new (0, _chunkMWBT7MCEcjs.PaymentTimeoutError)(
+          throw new (0, _chunkGYM46G5Lcjs.PaymentTimeoutError)(
             `Server did not respond within ${this.retryTimeoutMs}ms after broadcasting payment ${ref}. Re-verify or re-submit ref=${ref} \u2014 do NOT re-pay.`,
             { cause: err, ref }
           );
@@ -4735,7 +4815,7 @@ var PipRailClient = (_class2 = class {
       reason: `server returned 402 after broadcasting payment ${ref}${unconfirmedNote} (${why})`,
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
-    throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
+    throw new (0, _chunkGYM46G5Lcjs.MaxRetriesExceededError)(
       `Server still returned 402 after ${attempts} attempt(s) with on-chain proof ref=${ref}${unconfirmedNote}. Last server rejection: ${why}. Re-verify or re-submit ref=${ref} before retrying \u2014 never re-pay (it would double-spend).`,
       { ref }
     );
@@ -4759,17 +4839,17 @@ var PipRailClient = (_class2 = class {
    */
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
-      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
+      throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand, Aptos + NEAR today).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _78 => _78.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _82 => _82.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payExact(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _79 => _79.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _83 => _83.headers]));
     headers.set(HEADER_SIGNATURE, buildExactSignatureHeader({ accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `exact: facilitator rejected nonce=${nonce} (${why2})`, code: why2 });
-      throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
+      throw new (0, _chunkGYM46G5Lcjs.MaxRetriesExceededError)(
         `exact: the facilitator rejected the payment (${why2}). Fix the cause, then re-present the SAME signed authorization (nonce=${nonce}) \u2014 do NOT re-sign a fresh nonce. ref=${nonce}.`,
         { ref: nonce }
       );
@@ -4782,18 +4862,18 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _80 => _80.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _84 => _84.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _81 => _81.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _85 => _85.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.PaymentTimeoutError)(
-          `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain with authorizationState(${payerFrom}, ${nonce}) before re-presenting; do NOT re-pay.`,
+        throw new (0, _chunkGYM46G5Lcjs.PaymentTimeoutError)(
+          `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain via ${exactSettleCheckHint(net.family, payerFrom, nonce)} before re-presenting the SAME signed authorization; do NOT re-pay.`,
           { cause: err, ref: nonce }
         );
       } finally {
@@ -4809,7 +4889,7 @@ var PipRailClient = (_class2 = class {
         const receipt = parseReceipt(response);
         this.captureReceipt(response, url);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _82 => _82.transaction]) || _optionalChain([receipt, 'optionalAccess', _83 => _83.transaction]) || `eip3009-nonce:${nonce}`;
+        const ref = _optionalChain([settle, 'optionalAccess', _86 => _86.transaction]) || _optionalChain([receipt, 'optionalAccess', _87 => _87.transaction]) || `${net.family === "evm" ? "eip3009" : net.family}-nonce:${nonce}`;
         this.recordSpend(quote, ref);
         return response;
       }
@@ -4827,8 +4907,8 @@ var PipRailClient = (_class2 = class {
       reason: `exact: 402 after submitting authorization nonce=${nonce} (${why})`,
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
-    throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
-      `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify authorizationState(${payerFrom}, ${nonce}) first. ref=${nonce}.`,
+    throw new (0, _chunkGYM46G5Lcjs.MaxRetriesExceededError)(
+      `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify on-chain via ${exactSettleCheckHint(net.family, payerFrom, nonce)} first. ref=${nonce}.`,
       { ref: nonce }
     );
   }
@@ -4843,17 +4923,17 @@ var PipRailClient = (_class2 = class {
    */
   async payUptoRail(net, wallet, accept, url, init, quote) {
     if (!net.payUpto) {
-      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+      throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
         `the ${net.family} family can't pay a standard 'upto' rail (EVM-Permit2 only today).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _84 => _84.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _88 => _88.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payUpto(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _85 => _85.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _89 => _89.headers]));
     headers.set(HEADER_SIGNATURE, buildUptoSignatureHeader({ accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `upto: facilitator rejected nonce=${nonce} (${why2})`, code: why2 });
-      throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
+      throw new (0, _chunkGYM46G5Lcjs.MaxRetriesExceededError)(
         `upto: the server rejected the payment (${why2}). Fix the cause, then re-present the SAME signed authorization (nonce=${nonce}) \u2014 do NOT re-sign a fresh nonce. ref=${nonce}.`,
         { ref: nonce }
       );
@@ -4866,17 +4946,17 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _86 => _86.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _90 => _90.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _87 => _87.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _91 => _91.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.PaymentTimeoutError)(
+        throw new (0, _chunkGYM46G5Lcjs.PaymentTimeoutError)(
           `upto: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The merchant may have already settled it \u2014 verify on-chain before re-presenting; do NOT re-pay.`,
           { cause: err, ref: nonce }
         );
@@ -4893,8 +4973,8 @@ var PipRailClient = (_class2 = class {
         const receipt = parseReceipt(response);
         this.captureReceipt(response, url);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _88 => _88.transaction]) || _optionalChain([receipt, 'optionalAccess', _89 => _89.transaction]) || `upto-nonce:${nonce}`;
-        const settledAmount = _nullishCoalesce(_optionalChain([settle, 'optionalAccess', _90 => _90.amount]), () => ( _optionalChain([receipt, 'optionalAccess', _91 => _91.amount])));
+        const ref = _optionalChain([settle, 'optionalAccess', _92 => _92.transaction]) || _optionalChain([receipt, 'optionalAccess', _93 => _93.transaction]) || `upto-nonce:${nonce}`;
+        const settledAmount = _nullishCoalesce(_optionalChain([settle, 'optionalAccess', _94 => _94.amount]), () => ( _optionalChain([receipt, 'optionalAccess', _95 => _95.amount])));
         this.recordSpend(quote, ref, settledAmount);
         return response;
       }
@@ -4912,14 +4992,14 @@ var PipRailClient = (_class2 = class {
       reason: `upto: 402 after submitting authorization nonce=${nonce} (${why})`,
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
-    throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
+    throw new (0, _chunkGYM46G5Lcjs.MaxRetriesExceededError)(
       `upto: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce. ref=${nonce}.`,
       { ref: nonce }
     );
   }
 }, _class2);
 function throwIfAborted(signal) {
-  if (_optionalChain([signal, 'optionalAccess', _92 => _92.aborted])) {
+  if (_optionalChain([signal, 'optionalAccess', _96 => _96.aborted])) {
     throw _nullishCoalesce(signal.reason, () => ( new DOMException("This operation was aborted.", "AbortError")));
   }
 }
@@ -4989,10 +5069,10 @@ function buildFundingHint(options, chainLabel) {
     return `Couldn't fully read your wallet on ${chainLabel} (RPC throttled) \u2014 retry; you may already be able to pay ${target.quote.amountFormatted} ${sym}.`;
   }
   const parts = [];
-  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _93 => _93.shortfall, 'optionalAccess', _94 => _94.token])) {
+  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _97 => _97.shortfall, 'optionalAccess', _98 => _98.token])) {
     parts.push(`top up ${target.shortfall.token} ${sym}`);
   }
-  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _95 => _95.shortfall, 'optionalAccess', _96 => _96.native])) {
+  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _99 => _99.shortfall, 'optionalAccess', _100 => _100.native])) {
     parts.push(`add ~${target.shortfall.native} ${target.cost.feeSymbol} for gas`);
   }
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
@@ -5006,7 +5086,7 @@ async function planAcross(clients, url, init) {
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
     url,
-    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _97 => _97.accept, 'access', _98 => _98.network]), () => ( live[0].network)),
+    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _101 => _101.accept, 'access', _102 => _102.network]), () => ( live[0].network)),
     status,
     payable: best !== null,
     best,
@@ -5025,7 +5105,7 @@ async function fetchAcross(clients, url, init) {
   const best = rankAcross(live.map((p) => p.plan)).find((o) => o.state === "payable");
   if (!best) {
     const hint = mergeDeclineHint(live.map((p) => p.plan));
-    throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(hint || "No funded chain can settle this payment right now.");
+    throw new (0, _chunkGYM46G5Lcjs.PaymentDeclinedError)(hint || "No funded chain can settle this payment right now.");
   }
   const owner = live.find((p) => p.plan.options.includes(best)).client;
   return owner.fetch(url, { ..._nullishCoalesce(init, () => ( {})), autoRoute: true });
@@ -5071,8 +5151,8 @@ function isReplayableBodyInit(value) {
 async function readInvalidReason(response) {
   try {
     const body = await response.clone().json();
-    const ext = _optionalChain([body, 'optionalAccess', _99 => _99.extensions]);
-    const piprail = _optionalChain([ext, 'optionalAccess', _100 => _100.piprail]);
+    const ext = _optionalChain([body, 'optionalAccess', _103 => _103.extensions]);
+    const piprail = _optionalChain([ext, 'optionalAccess', _104 => _104.piprail]);
     if (piprail && typeof piprail.code === "string") {
       return {
         error: piprail.code,
@@ -5094,7 +5174,7 @@ async function readInvalidReason(response) {
   } catch (e40) {
   }
   const settle = parseSettleResponse(response);
-  if (_optionalChain([settle, 'optionalAccess', _101 => _101.errorReason])) return { error: settle.errorReason, detail: "" };
+  if (_optionalChain([settle, 'optionalAccess', _105 => _105.errorReason])) return { error: settle.errorReason, detail: "" };
   return null;
 }
 var EVM_PRESET_FOR_CHAINID = {
@@ -5192,7 +5272,7 @@ var MultiChainPayer = class _MultiChainPayer {
         ledger,
         ...opts.policy ? { policy: opts.policy } : {},
         ...opts.schemes ? { schemes: opts.schemes } : {},
-        ..._optionalChain([opts, 'access', _102 => _102.rpcUrls, 'optionalAccess', _103 => _103[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
+        ..._optionalChain([opts, 'access', _106 => _106.rpcUrls, 'optionalAccess', _107 => _107[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
         ...opts.onBeforePay ? { onBeforePay: opts.onBeforePay } : {},
         ...opts.onEvent ? { onEvent: opts.onEvent } : {},
         ...opts.maxPaymentRetries != null ? { maxPaymentRetries: opts.maxPaymentRetries } : {},
@@ -5250,7 +5330,7 @@ var MultiChainPayer = class _MultiChainPayer {
    * {@link PipRailClient.post}.
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _104 => _104.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _108 => _108.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -5400,14 +5480,14 @@ function buildSelfDescription(input) {
 }
 function buildEndpointInfo(input) {
   const d = input.descriptor;
-  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _105 => _105.summary]), () => ( input.description));
-  const hasInput = _optionalChain([d, 'optionalAccess', _106 => _106.queryParams]) && Object.keys(d.queryParams).length > 0;
+  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _109 => _109.summary]), () => ( input.description));
+  const hasInput = _optionalChain([d, 'optionalAccess', _110 => _110.queryParams]) && Object.keys(d.queryParams).length > 0;
   const endpoint = {
     ...summary ? { summary } : {},
-    ..._optionalChain([d, 'optionalAccess', _107 => _107.method]) ? { method: d.method.toUpperCase() } : {},
+    ..._optionalChain([d, 'optionalAccess', _111 => _111.method]) ? { method: d.method.toUpperCase() } : {},
     ...input.mimeType ? { mimeType: input.mimeType } : {},
     ...hasInput ? { input: d.queryParams } : {},
-    ..._optionalChain([d, 'optionalAccess', _108 => _108.output]) ? { output: d.output } : {}
+    ..._optionalChain([d, 'optionalAccess', _112 => _112.output]) ? { output: d.output } : {}
   };
   return Object.keys(endpoint).length > 0 ? endpoint : void 0;
 }
@@ -5425,7 +5505,7 @@ function summarizePlan(plan) {
   return `NOT payable: ${_nullishCoalesce(plan.fundingHint, () => ( `no settleable rail on ${plan.network}`))}`;
 }
 function explainDecline(err) {
-  if (!(err instanceof _chunkMWBT7MCEcjs.PipRailError)) {
+  if (!(err instanceof _chunkGYM46G5Lcjs.PipRailError)) {
     return `Payment failed: ${err instanceof Error ? err.message : String(err)}`;
   }
   switch (err.code) {
@@ -5499,8 +5579,8 @@ A 402 may offer up to three rails; you don't choose per payment \u2014 the clien
   (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.
 - exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose
   (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It
-  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand
-  fee-pooled group) is picked automatically.
+  works on EVM, Solana, Algorand, Aptos + NEAR, and the on-chain method (EIP-3009 / Permit2 / SVM /
+  Algorand fee-pooled group / Aptos fee-payer / NEAR SignedDelegateAction) is picked automatically.
 - upto (the metered/variable x402 rail, opt-in, EVM): the amount you see is a MAXIMUM \u2014 you sign
   a ceiling, the server meters real usage and settles the ACTUAL (<= the max). BUDGET AGAINST THE MAX:
   the plan/policy treat the ceiling as the spend (a server may charge up to it), so a payable plan
@@ -5577,14 +5657,14 @@ async function readBody(res) {
   }
 }
 function toToolError(err) {
-  if (!(err instanceof _chunkMWBT7MCEcjs.PipRailError)) throw err;
+  if (!(err instanceof _chunkGYM46G5Lcjs.PipRailError)) throw err;
   const out = {
     ok: false,
     code: err.code,
     reason: err.message,
     explain: explainDecline(err)
   };
-  if (err instanceof _chunkMWBT7MCEcjs.PaymentDeclinedError) {
+  if (err instanceof _chunkGYM46G5Lcjs.PaymentDeclinedError) {
     out.declined = true;
     if (err.reasonCode) out.reasonCode = err.reasonCode;
   }
@@ -5800,14 +5880,14 @@ function paymentTools(client) {
             ...verifiable ? { verifiableReceipt: { ...verifiable, resource: { url } } } : {}
           };
         } catch (err) {
-          if (err instanceof _chunkMWBT7MCEcjs.PipRailError) {
+          if (err instanceof _chunkGYM46G5Lcjs.PipRailError) {
             const out = {
               ok: false,
               code: err.code,
               reason: err.message,
               explain: explainDecline(err)
             };
-            if (err instanceof _chunkMWBT7MCEcjs.PaymentDeclinedError) {
+            if (err instanceof _chunkGYM46G5Lcjs.PaymentDeclinedError) {
               out.declined = true;
               if (err.reasonCode) out.reasonCode = err.reasonCode;
             }
@@ -6045,6 +6125,23 @@ function buildWellKnownX402(input) {
     ...input.ownershipProofs && input.ownershipProofs.length > 0 ? { ownershipProofs: input.ownershipProofs } : {}
   };
 }
+function buildWellKnownX402Manifest(input) {
+  return {
+    x402Version: 2,
+    lastUpdated: _nullishCoalesce(input.lastUpdated, () => ( Math.floor(Date.now() / 1e3))),
+    items: input.resources.map((r) => ({
+      resource: {
+        url: r.url,
+        ...r.description ? { description: r.description } : {},
+        ...r.mimeType ? { mimeType: r.mimeType } : {}
+      },
+      type: "http",
+      accepts: r.accepts,
+      input: { method: (_nullishCoalesce(r.method, () => ( "GET"))).toUpperCase() },
+      ...r.mimeType ? { output: { mimeType: r.mimeType } } : {}
+    }))
+  };
+}
 function buildX402DnsTxt(input) {
   const descriptor = input.descriptor ? `descriptor=${input.descriptor};` : "";
   return {
@@ -6114,10 +6211,10 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return void 0;
     const body = await res.json();
-    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _109 => _109.kinds])) ? body.kinds : [];
+    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _113 => _113.kinds])) ? body.kinds : [];
     const want = normalizeNetwork(network);
-    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _110 => _110.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _111 => _111.network]), () => ( "")))) === want);
-    const fp = _optionalChain([kind, 'optionalAccess', _112 => _112.extra, 'optionalAccess', _113 => _113.feePayer]);
+    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _114 => _114.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _115 => _115.network]), () => ( "")))) === want);
+    const fp = _optionalChain([kind, 'optionalAccess', _116 => _116.extra, 'optionalAccess', _117 => _117.feePayer]);
     return typeof fp === "string" ? fp : void 0;
   } catch (e43) {
     return void 0;
@@ -6126,16 +6223,16 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
   }
 }
 function parseFacilitatorSupported(body) {
-  const kinds = _optionalChain([body, 'optionalAccess', _114 => _114.kinds]);
+  const kinds = _optionalChain([body, 'optionalAccess', _118 => _118.kinds]);
   if (!Array.isArray(kinds)) return [];
   const out = [];
   for (const k of kinds) {
     if (!k || typeof k !== "object") continue;
     const o = k;
     if (typeof o.scheme !== "string" || typeof o.network !== "string") continue;
-    const fp = _optionalChain([o, 'access', _115 => _115.extra, 'optionalAccess', _116 => _116.feePayer]);
+    const fp = _optionalChain([o, 'access', _119 => _119.extra, 'optionalAccess', _120 => _120.feePayer]);
     const ver = o.x402Version;
-    const method = _optionalChain([o, 'access', _117 => _117.extra, 'optionalAccess', _118 => _118.assetTransferMethod]);
+    const method = _optionalChain([o, 'access', _121 => _121.extra, 'optionalAccess', _122 => _122.assetTransferMethod]);
     out.push({
       scheme: o.scheme,
       network: o.network,
@@ -6199,13 +6296,13 @@ async function settleViaFacilitator(input) {
   try {
     verify = await post(`${base2}/verify`, body, auth);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (verify.status !== 200) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify returned HTTP ${verify.status} (transport/auth error).`
     );
   }
@@ -6221,13 +6318,13 @@ async function settleViaFacilitator(input) {
   try {
     settle = await post(`${base2}/settle`, body, auth);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (settle.status !== 200) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle returned HTTP ${settle.status} (transport/auth error).`
     );
   }
@@ -6643,7 +6740,7 @@ function createPaymentGate(options) {
           }
           net.assertValidPayTo(payTo);
           const { asset, decimals, symbol } = net.resolveToken(a.token);
-          const amountBase = _chunkMWBT7MCEcjs.parseUnits.call(void 0, a.amount, decimals);
+          const amountBase = _chunkGYM46G5Lcjs.parseUnits.call(void 0, a.amount, decimals);
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
           if (exactOption) {
             const outcome = await resolveExactRail(net, asset);
@@ -6666,7 +6763,7 @@ function createPaymentGate(options) {
       if (exactOption && !specs.some((s) => s.exact)) {
         const why = exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme.";
         if (exactOption.settle === "keyless") {
-          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _119 => _119.env, 'optionalAccess', _120 => _120.PIPRAIL_NO_HINTS])) {
+          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _123 => _123.env, 'optionalAccess', _124 => _124.PIPRAIL_NO_HINTS])) {
             console.warn(
               `[piprail] exact: true \u2014 no offered chain has a gasless \`exact\` rail available, so this gate serves ONCHAIN-PROOF ONLY (buyers PAY GAS \u2014 the fallback when no facilitator can sponsor). ${why} To be gasless: pin \`exact: { settle: { facilitator } }\` or self-settle \`exact: { settle: 'self', relayer }\`. (Suppress with PIPRAIL_NO_HINTS=1.)`
             );
@@ -6694,7 +6791,7 @@ function createPaymentGate(options) {
           skipReason: `${net.network}: \`exact: true\` found no known keyless facilitator for this network. Pass \`exact: { settle: { facilitator } }\`, \`exact: { settle: 'self', relayer }\`, or see the coverage map (KNOWN_FACILITATORS / docs.piprail.com).`
         };
       }
-      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _121 => _121.env, 'optionalAccess', _122 => _122.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _123 => _123.env, 'optionalAccess', _124 => _124.PIPRAIL_NO_HINTS])) {
+      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _125 => _125.env, 'optionalAccess', _126 => _126.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _127 => _127.env, 'optionalAccess', _128 => _128.PIPRAIL_NO_HINTS])) {
         console.warn(
           `[piprail] exact: keyless rail on ${net.network} auto-settles via ${picked.url} (zero-config; pin \`exact.settle.facilitator\` in production).`
         );
@@ -6775,7 +6872,7 @@ function createPaymentGate(options) {
     if (hasCustomStore) {
       return options.isUsed ? Boolean(await options.isUsed(ref)) : false;
     }
-    const key = ref.toLowerCase();
+    const key = ref.startsWith("pid:") ? ref : ref.toLowerCase();
     const now = Date.now();
     pruneUsed(now);
     if (localUsed.has(key)) return true;
@@ -6787,7 +6884,7 @@ function createPaymentGate(options) {
       if (ok && options.markUsed) await options.markUsed(ref);
       return;
     }
-    if (!ok) localUsed.delete(ref.toLowerCase());
+    if (!ok) localUsed.delete(ref.startsWith("pid:") ? ref : ref.toLowerCase());
   }
   function buildAccept(s, nonce) {
     return {
@@ -6838,7 +6935,7 @@ function createPaymentGate(options) {
       extra: {
         assetTransferMethod: "permit2-upto",
         // facilitatorAddress comes from rail.extra; the spread below carries it (+ name/version).
-        facilitatorAddress: _nullishCoalesce(_optionalChain([rail, 'access', _125 => _125.extra, 'optionalAccess', _126 => _126.facilitatorAddress]), () => ( "")),
+        facilitatorAddress: _nullishCoalesce(_optionalChain([rail, 'access', _129 => _129.extra, 'optionalAccess', _130 => _130.facilitatorAddress]), () => ( "")),
         minConfirmations,
         decimals: s.decimals,
         amountFormatted: s.amountFormatted,
@@ -6860,6 +6957,7 @@ function createPaymentGate(options) {
     const specs = await ready();
     const nonce = genNonce();
     const bazaar = options.discovery ? { bazaar: buildBazaarExtension(options.discovery === true ? {} : options.discovery) } : void 0;
+    const paymentIdAd = options.paymentIdentifier ? buildPaymentIdentifierAdvertisement() : void 0;
     const accepts = buildAccepts(specs, nonce);
     const endpointInfo = buildEndpointInfo({
       ...options.description ? { description: options.description } : {},
@@ -6872,16 +6970,18 @@ function createPaymentGate(options) {
       ...endpointInfo ? { endpoint: endpointInfo } : {},
       ...receiptsOn ? { verifiableReceipts: true } : {}
     });
-    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _127 => _127.extensions]), () => ( {}));
+    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _131 => _131.extensions]), () => ( {}));
     const rejectionPiprail = _nullishCoalesce(rejectionExt.piprail, () => ( {}));
     const bodyPiprail = { ..._nullishCoalesce(selfDescribe, () => ( {})), ...rejectionPiprail };
     const bodyExtensions = {
       ...bazaar,
+      ...paymentIdAd,
       ...rejectionExt,
       ...Object.keys(bodyPiprail).length > 0 ? { piprail: bodyPiprail } : {}
     };
     const headerExtensions = {
       ...bazaar,
+      ...paymentIdAd,
       ...Object.keys(rejectionPiprail).length > 0 ? { piprail: rejectionPiprail } : {}
     };
     const challenge2 = {
@@ -6892,7 +6992,7 @@ function createPaymentGate(options) {
         ...options.mimeType ? { mimeType: options.mimeType } : {}
       },
       accepts,
-      ..._optionalChain([opts, 'optionalAccess', _128 => _128.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _132 => _132.error]) ? { error: opts.error } : {},
       ...Object.keys(bodyExtensions).length > 0 ? { extensions: bodyExtensions } : {}
     };
     const headerChallenge = {
@@ -6923,7 +7023,7 @@ function createPaymentGate(options) {
   function enrichReceipt(spec, receipt) {
     let amountFormatted = receipt.amount;
     try {
-      amountFormatted = _chunkMWBT7MCEcjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
+      amountFormatted = _chunkGYM46G5Lcjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
     } catch (e47) {
     }
     return {
@@ -7091,7 +7191,17 @@ function createPaymentGate(options) {
       await settleTx(ref, false);
       return rejection(result.error, result.detail);
     }
-    await settleTx(ref, true);
+    const verified = result.receipt.transaction;
+    if (verified && verified !== ref) {
+      if (await claimTx(verified)) {
+        await settleTx(ref, false);
+        return rejection("tx_already_used", `Payment ${verified} was already redeemed.`);
+      }
+      await settleTx(ref, false);
+      await settleTx(verified, true);
+    } else {
+      await settleTx(ref, true);
+    }
     await deliverOnPaid(spec, result.receipt);
     return await buildPaidResult(spec, result.receipt, sig.payload.nonce);
   }
@@ -7165,7 +7275,7 @@ function createPaymentGate(options) {
         const ftMethod = accept.extra.assetTransferMethod;
         const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
         if (needsFeePayer && !accept.extra.feePayer) {
-          throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+          throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
             `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
           );
         }
@@ -7213,15 +7323,15 @@ function createPaymentGate(options) {
       if (s.endsWith("%")) {
         const pct = s.slice(0, -1).trim();
         if (!/^\d+(\.\d+)?$/.test(pct)) return null;
-        const pctScaled = _chunkMWBT7MCEcjs.floorUnits.call(void 0, pct, 4);
+        const pctScaled = _chunkGYM46G5Lcjs.floorUnits.call(void 0, pct, 4);
         return maxAmount * pctScaled / (100n * 10n ** 4n);
       }
       if (s.startsWith("$")) {
         const amt = s.slice(1).trim();
-        return _chunkMWBT7MCEcjs.floorUnits.call(void 0, amt, decimals);
+        return _chunkGYM46G5Lcjs.floorUnits.call(void 0, amt, decimals);
       }
       if (/^\d+$/.test(s)) return BigInt(s);
-      return _chunkMWBT7MCEcjs.floorUnits.call(void 0, s, decimals);
+      return _chunkGYM46G5Lcjs.floorUnits.call(void 0, s, decimals);
     } catch (e56) {
       return null;
     }
@@ -7272,7 +7382,7 @@ function createPaymentGate(options) {
       result = await spec.net.settleUptoSelf({ relayer, payload: upto.payload, accept, settleAmount });
     } catch (err) {
       await settleTx(nonce, false);
-      if (err instanceof _chunkMWBT7MCEcjs.SettlementError) throw err;
+      if (err instanceof _chunkGYM46G5Lcjs.SettlementError) throw err;
       return rejection(
         "tx_reverted",
         `upto: metering/settle failed (${err instanceof Error ? err.message : String(err)}).`
@@ -7297,7 +7407,7 @@ function createPaymentGate(options) {
     if (result.kind === "invalid") await deliverOnFailed(result);
     return result;
   }
-  async function resolveVerdictObject(obj) {
+  async function routeVerdictObject(obj) {
     if (obj === void 0 || obj === null) return asChallenge();
     const sig = parseSignatureObject(obj);
     if (sig && sig.accepted && typeof sig.accepted.network === "string" && typeof sig.accepted.asset === "string") {
@@ -7309,11 +7419,49 @@ function createPaymentGate(options) {
     if (exact) return verifyExact(exact);
     return asChallenge();
   }
+  function echoPaymentIdentifier(result, id) {
+    try {
+      const decoded = decodeBase64Json(result.receiptHeader);
+      if (!decoded) return result;
+      const { extensions: existing, ...receiptOnly } = decoded;
+      const merged = {
+        ..._nullishCoalesce(existing, () => ( {})),
+        [EXT_PAYMENT_IDENTIFIER]: { info: { required: false, id } }
+      };
+      return { ...result, receiptHeader: buildReceiptHeader(receiptOnly, merged) };
+    } catch (e57) {
+      return result;
+    }
+  }
+  async function resolveVerdictObject(obj) {
+    if (!options.paymentIdentifier) return routeVerdictObject(obj);
+    const id = readPaymentIdentifier(obj);
+    if (id !== null && typeof id === "object") {
+      return rejection("signature_invalid", `payment-identifier: ${id.invalid}.`);
+    }
+    if (id === null) return routeVerdictObject(obj);
+    const idKey = "pid:" + id;
+    if (await claimTx(idKey)) {
+      return rejection(
+        "tx_already_used",
+        `Idempotency id "${id}" is already bound to a settled payment; use a fresh id for a new payment.`
+      );
+    }
+    let result;
+    try {
+      result = await routeVerdictObject(obj);
+    } catch (err) {
+      await settleTx(idKey, false);
+      throw err;
+    }
+    await settleTx(idKey, result.kind === "paid");
+    return result.kind === "paid" ? echoPaymentIdentifier(result, id) : result;
+  }
   return { challenge, verify, verifyObject, describe, landingPage };
 }
 function requirePayment(options) {
   if (options.upto) {
-    throw new (_class3 = class extends _chunkMWBT7MCEcjs.PipRailError {constructor(...args2) { super(...args2); _class3.prototype.__init7.call(this); }
+    throw new (_class3 = class extends _chunkGYM46G5Lcjs.PipRailError {constructor(...args2) { super(...args2); _class3.prototype.__init7.call(this); }
       __init7() {this.code = "UNSUPPORTED_SCHEME"}
     }, _class3)(
       "requirePayment: the 'upto' (metered) rail is unsupported through the Express middleware \u2014 it settles before the route handler serves, so metered usage is unknown at settle time. Call gate.verify() directly (createPaymentGate) and meter inside settleAmount; see docs/accepting-payments/upto-rail-seller.md."
@@ -7325,7 +7473,7 @@ function requirePayment(options) {
     try {
       result = await gate.verify(_nullishCoalesce(req.headers[HEADER_SIGNATURE], () => ( req.headers[HEADER_SIGNATURE_V1])));
     } catch (err) {
-      if (err instanceof _chunkMWBT7MCEcjs.SettlementError) {
+      if (err instanceof _chunkGYM46G5Lcjs.SettlementError) {
         res.status(502);
         res.json({
           x402Version: 2,
@@ -7373,7 +7521,7 @@ function isRetryableStatus(status) {
 }
 var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
 async function signBody(secret, body) {
-  const subtle = _optionalChain([globalThis, 'access', _129 => _129.crypto, 'optionalAccess', _130 => _130.subtle]);
+  const subtle = _optionalChain([globalThis, 'access', _133 => _133.crypto, 'optionalAccess', _134 => _134.subtle]);
   if (!subtle) return null;
   try {
     const enc = new TextEncoder();
@@ -7383,7 +7531,7 @@ async function signBody(secret, body) {
     const sig = await subtle.sign("HMAC", key, enc.encode(body));
     const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
     return `sha256=${hex}`;
-  } catch (e57) {
+  } catch (e58) {
     return null;
   }
 }
@@ -7443,8 +7591,8 @@ async function deliverReceipt(receipt, options) {
     const retryable = status === void 0 ? true : isRetryableStatus(status);
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
-      _optionalChain([onAttempt, 'optionalCall', _131 => _131({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
-    } catch (e58) {
+      _optionalChain([onAttempt, 'optionalCall', _135 => _135({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+    } catch (e59) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
     if (!willRetry) {
@@ -7532,13 +7680,13 @@ function toA2APaymentFailed(code, detail, receipts = [], network) {
   };
 }
 function fromA2APaymentRequired(task) {
-  const meta = _optionalChain([task, 'access', _132 => _132.status, 'optionalAccess', _133 => _133.message, 'optionalAccess', _134 => _134.metadata]);
-  const required = _optionalChain([meta, 'optionalAccess', _135 => _135[A2A_REQUIRED_KEY]]);
+  const meta = _optionalChain([task, 'access', _136 => _136.status, 'optionalAccess', _137 => _137.message, 'optionalAccess', _138 => _138.metadata]);
+  const required = _optionalChain([meta, 'optionalAccess', _139 => _139[A2A_REQUIRED_KEY]]);
   if (!required || typeof required !== "object") return null;
   return required;
 }
 function fromA2APaymentPayload(message) {
-  const raw = _optionalChain([message, 'access', _136 => _136.metadata, 'optionalAccess', _137 => _137[A2A_PAYLOAD_KEY]]);
+  const raw = _optionalChain([message, 'access', _140 => _140.metadata, 'optionalAccess', _141 => _141[A2A_PAYLOAD_KEY]]);
   if (raw === void 0 || raw === null) return null;
   return { raw, taskId: _nullishCoalesce(message.taskId, () => ( "")) };
 }
@@ -7571,7 +7719,7 @@ function createA2APaymentHandler(options) {
   const ttlMs = _nullishCoalesce(options.taskTtlMs, () => ( maxTimeoutSeconds * 1e3));
   const store = _nullishCoalesce(options.taskStore, () => ( defaultTaskStore()));
   function appendReceipt(taskId, entry) {
-    const prior = _nullishCoalesce(_optionalChain([store, 'access', _138 => _138.get, 'call', _139 => _139(taskId), 'optionalAccess', _140 => _140.receipts]), () => ( []));
+    const prior = _nullishCoalesce(_optionalChain([store, 'access', _142 => _142.get, 'call', _143 => _143(taskId), 'optionalAccess', _144 => _144.receipts]), () => ( []));
     const isDup = "success" in entry && entry.success === true && entry.transaction !== "" && prior.some((r) => "transaction" in r && r.transaction === entry.transaction);
     const next = isDup ? prior : [...prior, entry];
     const receipts = next.length > MAX_TASK_RECEIPTS ? next.slice(-MAX_TASK_RECEIPTS) : next;
@@ -7647,7 +7795,7 @@ function createA2APaymentHandler(options) {
     try {
       result = await gate.verifyObject(inbound.raw);
     } catch (err) {
-      if (err instanceof _chunkMWBT7MCEcjs.SettlementError) {
+      if (err instanceof _chunkGYM46G5Lcjs.SettlementError) {
         return failedTask(id, "settlement_failed", err.message, attempted);
       }
       const detail = err instanceof Error ? err.message : String(err);
@@ -7679,11 +7827,11 @@ function createA2APaymentHandler(options) {
     }
   }
   function agentCardExtension(opts) {
-    const uri = _optionalChain([opts, 'optionalAccess', _141 => _141.version]) === "v0.2" ? A2A_X402_EXTENSION_URI_V02 : A2A_X402_EXTENSION_URI_V01;
+    const uri = _optionalChain([opts, 'optionalAccess', _145 => _145.version]) === "v0.2" ? A2A_X402_EXTENSION_URI_V02 : A2A_X402_EXTENSION_URI_V01;
     return {
       uri,
       description: "Supports payments using the x402 protocol for on-chain settlement.",
-      ..._optionalChain([opts, 'optionalAccess', _142 => _142.required]) ? { required: true } : {}
+      ..._optionalChain([opts, 'optionalAccess', _146 => _146.required]) ? { required: true } : {}
     };
   }
   return { handleMessage, agentCardExtension, gate };
@@ -7694,7 +7842,7 @@ function singleNetworkOf(challenge) {
 }
 function networkFromPayload(raw) {
   const v = raw;
-  if (v && typeof _optionalChain([v, 'access', _143 => _143.accepted, 'optionalAccess', _144 => _144.network]) === "string") return v.accepted.network;
+  if (v && typeof _optionalChain([v, 'access', _147 => _147.accepted, 'optionalAccess', _148 => _148.network]) === "string") return v.accepted.network;
   if (v && typeof v.network === "string") return v.network;
   return void 0;
 }
@@ -7709,6 +7857,129 @@ function resourceUrlFromMessage(message) {
   return "";
 }
 
+// src/transports/mcp-types.ts
+var MCP_PAYMENT_META_KEY = "x402/payment";
+var MCP_PAYMENT_RESPONSE_META_KEY = "x402/payment-response";
+
+// src/transports/mcp.ts
+function toMcpPaymentRequired(challenge) {
+  const text = JSON.stringify(challenge);
+  return {
+    isError: true,
+    structuredContent: challenge,
+    content: [{ type: "text", text }]
+  };
+}
+function toMcpPaymentResponse(content, receipt) {
+  return {
+    content,
+    _meta: {
+      [MCP_PAYMENT_RESPONSE_META_KEY]: {
+        success: true,
+        transaction: receipt.transaction,
+        network: receipt.network,
+        payer: receipt.payer
+      }
+    }
+  };
+}
+function fromMcpPayment(params) {
+  const meta = _optionalChain([params, 'optionalAccess', _149 => _149._meta, 'optionalAccess', _150 => _150[MCP_PAYMENT_META_KEY]]);
+  return meta == null ? null : meta;
+}
+function fromMcpPaymentRequired(result) {
+  if (!result || result.isError !== true) return null;
+  const sc = result.structuredContent;
+  if (sc && typeof sc === "object" && typeof sc.x402Version === "number") {
+    return sc;
+  }
+  const text = _optionalChain([result, 'access', _151 => _151.content, 'optionalAccess', _152 => _152[0], 'optionalAccess', _153 => _153.text]);
+  if (typeof text === "string") {
+    try {
+      const parsed = JSON.parse(text);
+      if (parsed && typeof parsed === "object" && typeof parsed.x402Version === "number") {
+        return parsed;
+      }
+    } catch (e60) {
+    }
+  }
+  return null;
+}
+function isMcpPaymentRequired(result) {
+  return fromMcpPaymentRequired(result) != null;
+}
+function fromMcpPaymentResponse(result) {
+  const meta = _optionalChain([result, 'optionalAccess', _154 => _154._meta, 'optionalAccess', _155 => _155[MCP_PAYMENT_RESPONSE_META_KEY]]);
+  if (!meta || typeof meta !== "object") return null;
+  return meta;
+}
+function buildMcpPaymentMeta(input) {
+  return {
+    [MCP_PAYMENT_META_KEY]: {
+      x402Version: _nullishCoalesce(input.x402Version, () => ( 2)),
+      ...input.resource ? { resource: input.resource } : {},
+      accepted: input.accepted,
+      payload: input.payload
+    }
+  };
+}
+function createMcpPaymentTool(options) {
+  const gate = _nullishCoalesce(options.gate, () => ( createPaymentGate(options)));
+  function settlementFailed(code, detail) {
+    return {
+      isError: true,
+      content: [
+        {
+          type: "text",
+          text: `x402 settlement failed (${toA2AErrorCode(code)}): ${detail}. The buyer can retry, or pay the onchain-proof rail directly.`
+        }
+      ]
+    };
+  }
+  async function handleToolCall(params) {
+    const raw = fromMcpPayment(params);
+    if (raw == null) {
+      const { challenge } = await gate.challenge(_nullishCoalesce(options.resourceUrl, () => ( "")));
+      return toMcpPaymentRequired(challenge);
+    }
+    let result;
+    try {
+      result = await gate.verifyObject(raw);
+    } catch (err) {
+      if (err instanceof _chunkGYM46G5Lcjs.SettlementError) return settlementFailed("settlement_failed", err.message);
+      throw err;
+    }
+    if (result.kind === "paid") {
+      try {
+        const content = await options.fulfill({ receipt: result.receipt, params });
+        return toMcpPaymentResponse(content, result.receipt);
+      } catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return toMcpPaymentResponse(
+          [{ type: "text", text: `Payment settled (tx ${result.receipt.transaction}), but serving the result failed: ${detail}` }],
+          result.receipt
+        );
+      }
+    }
+    return toMcpPaymentRequired(result.challenge);
+  }
+  return { handleToolCall, gate };
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 
 
 
@@ -7841,4 +8112,4 @@ function resourceUrlFromMessage(message) {
 
 
 
-exports.A2A_ERROR_KEY = A2A_ERROR_KEY; exports.A2A_EXTENSIONS_HEADER = A2A_EXTENSIONS_HEADER; exports.A2A_PAYLOAD_KEY = A2A_PAYLOAD_KEY; exports.A2A_RECEIPTS_KEY = A2A_RECEIPTS_KEY; exports.A2A_REQUIRED_KEY = A2A_REQUIRED_KEY; exports.A2A_STATUS_KEY = A2A_STATUS_KEY; exports.A2A_X402_EXTENSION_URI_V01 = A2A_X402_EXTENSION_URI_V01; exports.A2A_X402_EXTENSION_URI_V02 = A2A_X402_EXTENSION_URI_V02; exports.BRAND = BRAND; exports.BUILTIN_DENOMS = BUILTIN_DENOMS; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkMWBT7MCEcjs.ConfirmationTimeoutError; exports.DENOM_PRECISION = DENOM_PRECISION; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.EXT_OFFER_RECEIPT = EXT_OFFER_RECEIPT; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkMWBT7MCEcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkMWBT7MCEcjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MaxRetriesExceededError = _chunkMWBT7MCEcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkMWBT7MCEcjs.MissingDriverError; exports.MultiChainPayer = MultiChainPayer; exports.NoCompatibleAcceptError = _chunkMWBT7MCEcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkMWBT7MCEcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_UPTO_WITNESS_TYPES = PERMIT2_UPTO_WITNESS_TYPES; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkMWBT7MCEcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkMWBT7MCEcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkMWBT7MCEcjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkMWBT7MCEcjs.RecipientNotReadyError; exports.SettlementError = _chunkMWBT7MCEcjs.SettlementError; exports.SpendLedger = SpendLedger; exports.UPTO_PROXY_CHAIN_IDS = UPTO_PROXY_CHAIN_IDS; exports.UnknownTokenError = _chunkMWBT7MCEcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkMWBT7MCEcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkMWBT7MCEcjs.UnsupportedSchemeError; exports.VERIFY_CODE_TO_A2A_ERROR = VERIFY_CODE_TO_A2A_ERROR; exports.WalletRequiredError = _chunkMWBT7MCEcjs.WalletRequiredError; exports.WrongChainError = _chunkMWBT7MCEcjs.WrongChainError; exports.WrongFamilyError = _chunkMWBT7MCEcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.X402_UPTO_PERMIT2_PROXY = X402_UPTO_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.appendKeywords = appendKeywords; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildEndpointInfo = buildEndpointInfo; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptExtension = buildReceiptExtension; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildUptoSignatureHeader = buildUptoSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createA2APaymentHandler = createA2APaymentHandler; exports.createPaymentGate = createPaymentGate; exports.decodeBase64Json = decodeBase64Json; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.denomOf = denomOf; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.fetchAcross = fetchAcross; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.fromA2APaymentPayload = fromA2APaymentPayload; exports.fromA2APaymentRequired = fromA2APaymentRequired; exports.getDirectoryInfo = getDirectoryInfo; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.isUptoProxyChain = isUptoProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.memorySpendStore = _chunkO4UQOZ4Zcjs.memorySpendStore; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactObject = parseExactObject; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseReceiptExtension = parseReceiptExtension; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.parseSignatureObject = parseSignatureObject; exports.parseUptoObject = parseUptoObject; exports.parseUptoPaymentHeader = parseUptoPaymentHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.rankResources = rankResources; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.scoreResource = scoreResource; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toA2AErrorCode = toA2AErrorCode; exports.toA2APaymentFailed = toA2APaymentFailed; exports.toA2APaymentReceipts = toA2APaymentReceipts; exports.toA2APaymentRequired = toA2APaymentRequired; exports.toInsufficientFundsError = _chunkMWBT7MCEcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;
+exports.A2A_ERROR_KEY = A2A_ERROR_KEY; exports.A2A_EXTENSIONS_HEADER = A2A_EXTENSIONS_HEADER; exports.A2A_PAYLOAD_KEY = A2A_PAYLOAD_KEY; exports.A2A_RECEIPTS_KEY = A2A_RECEIPTS_KEY; exports.A2A_REQUIRED_KEY = A2A_REQUIRED_KEY; exports.A2A_STATUS_KEY = A2A_STATUS_KEY; exports.A2A_X402_EXTENSION_URI_V01 = A2A_X402_EXTENSION_URI_V01; exports.A2A_X402_EXTENSION_URI_V02 = A2A_X402_EXTENSION_URI_V02; exports.BRAND = BRAND; exports.BUILTIN_DENOMS = BUILTIN_DENOMS; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkGYM46G5Lcjs.ConfirmationTimeoutError; exports.DENOM_PRECISION = DENOM_PRECISION; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.EXT_OFFER_RECEIPT = EXT_OFFER_RECEIPT; exports.EXT_PAYMENT_IDENTIFIER = EXT_PAYMENT_IDENTIFIER; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkGYM46G5Lcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkGYM46G5Lcjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MCP_PAYMENT_META_KEY = MCP_PAYMENT_META_KEY; exports.MCP_PAYMENT_RESPONSE_META_KEY = MCP_PAYMENT_RESPONSE_META_KEY; exports.MaxRetriesExceededError = _chunkGYM46G5Lcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkGYM46G5Lcjs.MissingDriverError; exports.MultiChainPayer = MultiChainPayer; exports.NoCompatibleAcceptError = _chunkGYM46G5Lcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkGYM46G5Lcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_UPTO_WITNESS_TYPES = PERMIT2_UPTO_WITNESS_TYPES; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkGYM46G5Lcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkGYM46G5Lcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkGYM46G5Lcjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkGYM46G5Lcjs.RecipientNotReadyError; exports.SettlementError = _chunkGYM46G5Lcjs.SettlementError; exports.SpendLedger = SpendLedger; exports.UPTO_PROXY_CHAIN_IDS = UPTO_PROXY_CHAIN_IDS; exports.UnknownTokenError = _chunkGYM46G5Lcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkGYM46G5Lcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkGYM46G5Lcjs.UnsupportedSchemeError; exports.VERIFY_CODE_TO_A2A_ERROR = VERIFY_CODE_TO_A2A_ERROR; exports.WalletRequiredError = _chunkGYM46G5Lcjs.WalletRequiredError; exports.WrongChainError = _chunkGYM46G5Lcjs.WrongChainError; exports.WrongFamilyError = _chunkGYM46G5Lcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.X402_UPTO_PERMIT2_PROXY = X402_UPTO_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.appendKeywords = appendKeywords; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildEndpointInfo = buildEndpointInfo; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildMcpPaymentMeta = buildMcpPaymentMeta; exports.buildOpenApi = buildOpenApi; exports.buildPaymentIdentifierAdvertisement = buildPaymentIdentifierAdvertisement; exports.buildReceiptExtension = buildReceiptExtension; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildUptoSignatureHeader = buildUptoSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildWellKnownX402Manifest = buildWellKnownX402Manifest; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createA2APaymentHandler = createA2APaymentHandler; exports.createMcpPaymentTool = createMcpPaymentTool; exports.createPaymentGate = createPaymentGate; exports.decodeBase64Json = decodeBase64Json; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.denomOf = denomOf; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.fetchAcross = fetchAcross; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.fromA2APaymentPayload = fromA2APaymentPayload; exports.fromA2APaymentRequired = fromA2APaymentRequired; exports.fromMcpPayment = fromMcpPayment; exports.fromMcpPaymentRequired = fromMcpPaymentRequired; exports.fromMcpPaymentResponse = fromMcpPaymentResponse; exports.getDirectoryInfo = getDirectoryInfo; exports.isMcpPaymentRequired = isMcpPaymentRequired; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.isUptoProxyChain = isUptoProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.memorySpendStore = _chunkO4UQOZ4Zcjs.memorySpendStore; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactObject = parseExactObject; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseReceiptExtension = parseReceiptExtension; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.parseSignatureObject = parseSignatureObject; exports.parseUptoObject = parseUptoObject; exports.parseUptoPaymentHeader = parseUptoPaymentHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.rankResources = rankResources; exports.readExactDomain = readExactDomain; exports.readPaymentIdentifier = readPaymentIdentifier; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.scoreResource = scoreResource; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toA2AErrorCode = toA2AErrorCode; exports.toA2APaymentFailed = toA2APaymentFailed; exports.toA2APaymentReceipts = toA2APaymentReceipts; exports.toA2APaymentRequired = toA2APaymentRequired; exports.toInsufficientFundsError = _chunkGYM46G5Lcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.toMcpPaymentRequired = toMcpPaymentRequired; exports.toMcpPaymentResponse = toMcpPaymentResponse; exports.verify402IndexDomain = verify402IndexDomain;