@piprail/sdk 2.13.0 → 2.14.0

package/dist/{ledger-mF_SoiDB.d.ts → ledger-uFtXlIHY.d.cts}

@@ -210,6 +210,13 @@ interface X402PaymentSignature {
         nonce: string;
         txHash: string;
     };
+    /**
+     * Optional v2 extensions the client attaches to its payload — e.g. the
+     * `payment-identifier` idempotency id at `extensions['payment-identifier'].info.id`
+     * (read by the gate via {@link readPaymentIdentifier}). A standard reader ignores it,
+     * and omitting it keeps the payload byte-identical.
+     */
+    extensions?: Record<string, unknown>;
 }
 /**
  * The EIP-3009 authorization a payer signs for a standard `exact` rail. All
@@ -590,6 +597,29 @@ declare function buildReceiptExtension(bundle: {
     decimals?: number;
     attestation?: SignedReceipt;
 }): Record<string, unknown>;
+/** The x402 extension key for the optional idempotency identifier (the official
+ *  `payment-identifier` extension). A client MAY attach a stable `id` so the server dedupes
+ *  retries and rejects a reused id bound to a DIFFERENT payment. */
+declare const EXT_PAYMENT_IDENTIFIER = "payment-identifier";
+/**
+ * Advertise the `payment-identifier` extension on a 402 challenge — PURE JSON, viem-free. The
+ * v2 `{ info, schema }` shape: `info.required:false` (PipRail never MANDATES an id) plus a
+ * JSON-Schema bound of {@link PAYMENT_ID_MIN}–{@link PAYMENT_ID_MAX} chars. A client reads this
+ * from the challenge and MAY echo an `id` back on its payload; the gate dedupes it on its
+ * existing used-proof set. The gate merges this into the challenge `extensions` (a sibling key,
+ * never inside `extensions.piprail`).
+ */
+declare function buildPaymentIdentifierAdvertisement(): Record<string, unknown>;
+/**
+ * Read + validate an inbound `payment-identifier` id from a decoded payment-payload object
+ * (`payload.extensions['payment-identifier'].info.id`). PURE, NEVER throws. Returns:
+ *  - the `id` string when present + valid (16–128 chars, `[A-Za-z0-9_-]`),
+ *  - `null` when ABSENT (the id is OPTIONAL — the gate proceeds exactly as without the feature),
+ *  - `{ invalid }` when PRESENT but malformed (the gate re-challenges so the buyer can fix it).
+ */
+declare function readPaymentIdentifier(payload: unknown): string | null | {
+    invalid: string;
+};
 declare function buildSignatureHeader(signature: X402PaymentSignature): string;
 /**
  * Build the v2 PAYMENT-SIGNATURE header value for a standard x402 `exact` payment:
@@ -928,4 +958,4 @@ declare class SpendLedger {
     summary(): SpendSummary;
 }
 
-export { parseSignatureObject as $, type AddressId as A, type X402PaymentSignature as B, type Caip2 as C, type X402Receipt as D, EXT_OFFER_RECEIPT as E, type X402ResourceObject as F, type X402UptoAcceptEntry as G, HEADER_REQUIRED as H, buildChallengeHeader as I, buildExactSignatureHeader as J, buildReceiptExtension as K, buildReceiptHeader as L, buildSignatureHeader as M, buildUptoSignatureHeader as N, decodeBase64Json as O, type PaidReceipt as P, memorySpendStore as Q, parseChallenge as R, type SettleOutcome as S, parseExactObject as T, parseExactPaymentHeader as U, type VerifyErrorCode as V, parseReceipt as W, type X402AcceptEntry as X, parseReceiptExtension as Y, parseSettleResponse as Z, parseSignatureHeader as _, type AssetId as a, parseUptoObject as a0, parseUptoPaymentHeader as a1, pickAccept as a2, type ExactAuthorizationWire as b, type ExactPaymentPayload as c, type ExactPaymentPayloadAny as d, HEADER_RESPONSE as e, HEADER_RESPONSE_V1 as f, HEADER_SIGNATURE as g, HEADER_SIGNATURE_V1 as h, type ParsedExactPayment as i, type ParsedUptoPayment as j, type Permit2Authorization as k, type Permit2PaymentPayload as l, type Permit2UptoAuthorization as m, type Permit2UptoPaymentPayload as n, type PipRailReceipt as o, type SignedReceipt as p, type SpendAssetTotal as q, type SpendDenomTotal as r, SpendLedger as s, type SpendRecord as t, type SpendStore as u, type SpendSummary as v, type VerifyResult as w, type X402AnyAccept as x, type X402Challenge as y, type X402ExactAcceptEntry as z };
+export { parseSettleResponse as $, type AddressId as A, type X402ExactAcceptEntry as B, type Caip2 as C, type X402PaymentSignature as D, EXT_OFFER_RECEIPT as E, type X402Receipt as F, type X402ResourceObject as G, HEADER_REQUIRED as H, type X402UptoAcceptEntry as I, buildChallengeHeader as J, buildExactSignatureHeader as K, buildPaymentIdentifierAdvertisement as L, buildReceiptExtension as M, buildReceiptHeader as N, buildSignatureHeader as O, type PaidReceipt as P, buildUptoSignatureHeader as Q, decodeBase64Json as R, type SettleOutcome as S, memorySpendStore as T, parseChallenge as U, type VerifyErrorCode as V, parseExactObject as W, type X402AcceptEntry as X, parseExactPaymentHeader as Y, parseReceipt as Z, parseReceiptExtension as _, type AssetId as a, parseSignatureHeader as a0, parseSignatureObject as a1, parseUptoObject as a2, parseUptoPaymentHeader as a3, pickAccept as a4, readPaymentIdentifier as a5, EXT_PAYMENT_IDENTIFIER as b, type ExactAuthorizationWire as c, type ExactPaymentPayload as d, type ExactPaymentPayloadAny as e, HEADER_RESPONSE as f, HEADER_RESPONSE_V1 as g, HEADER_SIGNATURE as h, HEADER_SIGNATURE_V1 as i, type ParsedExactPayment as j, type ParsedUptoPayment as k, type Permit2Authorization as l, type Permit2PaymentPayload as m, type Permit2UptoAuthorization as n, type Permit2UptoPaymentPayload as o, type PipRailReceipt as p, type SignedReceipt as q, type SpendAssetTotal as r, type SpendDenomTotal as s, SpendLedger as t, type SpendRecord as u, type SpendStore as v, type SpendSummary as w, type VerifyResult as x, type X402AnyAccept as y, type X402Challenge as z };

package/dist/{ledger-mF_SoiDB.d.cts → ledger-uFtXlIHY.d.ts}

@@ -210,6 +210,13 @@ interface X402PaymentSignature {
         nonce: string;
         txHash: string;
     };
+    /**
+     * Optional v2 extensions the client attaches to its payload — e.g. the
+     * `payment-identifier` idempotency id at `extensions['payment-identifier'].info.id`
+     * (read by the gate via {@link readPaymentIdentifier}). A standard reader ignores it,
+     * and omitting it keeps the payload byte-identical.
+     */
+    extensions?: Record<string, unknown>;
 }
 /**
  * The EIP-3009 authorization a payer signs for a standard `exact` rail. All
@@ -590,6 +597,29 @@ declare function buildReceiptExtension(bundle: {
     decimals?: number;
     attestation?: SignedReceipt;
 }): Record<string, unknown>;
+/** The x402 extension key for the optional idempotency identifier (the official
+ *  `payment-identifier` extension). A client MAY attach a stable `id` so the server dedupes
+ *  retries and rejects a reused id bound to a DIFFERENT payment. */
+declare const EXT_PAYMENT_IDENTIFIER = "payment-identifier";
+/**
+ * Advertise the `payment-identifier` extension on a 402 challenge — PURE JSON, viem-free. The
+ * v2 `{ info, schema }` shape: `info.required:false` (PipRail never MANDATES an id) plus a
+ * JSON-Schema bound of {@link PAYMENT_ID_MIN}–{@link PAYMENT_ID_MAX} chars. A client reads this
+ * from the challenge and MAY echo an `id` back on its payload; the gate dedupes it on its
+ * existing used-proof set. The gate merges this into the challenge `extensions` (a sibling key,
+ * never inside `extensions.piprail`).
+ */
+declare function buildPaymentIdentifierAdvertisement(): Record<string, unknown>;
+/**
+ * Read + validate an inbound `payment-identifier` id from a decoded payment-payload object
+ * (`payload.extensions['payment-identifier'].info.id`). PURE, NEVER throws. Returns:
+ *  - the `id` string when present + valid (16–128 chars, `[A-Za-z0-9_-]`),
+ *  - `null` when ABSENT (the id is OPTIONAL — the gate proceeds exactly as without the feature),
+ *  - `{ invalid }` when PRESENT but malformed (the gate re-challenges so the buyer can fix it).
+ */
+declare function readPaymentIdentifier(payload: unknown): string | null | {
+    invalid: string;
+};
 declare function buildSignatureHeader(signature: X402PaymentSignature): string;
 /**
  * Build the v2 PAYMENT-SIGNATURE header value for a standard x402 `exact` payment:
@@ -928,4 +958,4 @@ declare class SpendLedger {
     summary(): SpendSummary;
 }
 
-export { parseSignatureObject as $, type AddressId as A, type X402PaymentSignature as B, type Caip2 as C, type X402Receipt as D, EXT_OFFER_RECEIPT as E, type X402ResourceObject as F, type X402UptoAcceptEntry as G, HEADER_REQUIRED as H, buildChallengeHeader as I, buildExactSignatureHeader as J, buildReceiptExtension as K, buildReceiptHeader as L, buildSignatureHeader as M, buildUptoSignatureHeader as N, decodeBase64Json as O, type PaidReceipt as P, memorySpendStore as Q, parseChallenge as R, type SettleOutcome as S, parseExactObject as T, parseExactPaymentHeader as U, type VerifyErrorCode as V, parseReceipt as W, type X402AcceptEntry as X, parseReceiptExtension as Y, parseSettleResponse as Z, parseSignatureHeader as _, type AssetId as a, parseUptoObject as a0, parseUptoPaymentHeader as a1, pickAccept as a2, type ExactAuthorizationWire as b, type ExactPaymentPayload as c, type ExactPaymentPayloadAny as d, HEADER_RESPONSE as e, HEADER_RESPONSE_V1 as f, HEADER_SIGNATURE as g, HEADER_SIGNATURE_V1 as h, type ParsedExactPayment as i, type ParsedUptoPayment as j, type Permit2Authorization as k, type Permit2PaymentPayload as l, type Permit2UptoAuthorization as m, type Permit2UptoPaymentPayload as n, type PipRailReceipt as o, type SignedReceipt as p, type SpendAssetTotal as q, type SpendDenomTotal as r, SpendLedger as s, type SpendRecord as t, type SpendStore as u, type SpendSummary as v, type VerifyResult as w, type X402AnyAccept as x, type X402Challenge as y, type X402ExactAcceptEntry as z };
+export { parseSettleResponse as $, type AddressId as A, type X402ExactAcceptEntry as B, type Caip2 as C, type X402PaymentSignature as D, EXT_OFFER_RECEIPT as E, type X402Receipt as F, type X402ResourceObject as G, HEADER_REQUIRED as H, type X402UptoAcceptEntry as I, buildChallengeHeader as J, buildExactSignatureHeader as K, buildPaymentIdentifierAdvertisement as L, buildReceiptExtension as M, buildReceiptHeader as N, buildSignatureHeader as O, type PaidReceipt as P, buildUptoSignatureHeader as Q, decodeBase64Json as R, type SettleOutcome as S, memorySpendStore as T, parseChallenge as U, type VerifyErrorCode as V, parseExactObject as W, type X402AcceptEntry as X, parseExactPaymentHeader as Y, parseReceipt as Z, parseReceiptExtension as _, type AssetId as a, parseSignatureHeader as a0, parseSignatureObject as a1, parseUptoObject as a2, parseUptoPaymentHeader as a3, pickAccept as a4, readPaymentIdentifier as a5, EXT_PAYMENT_IDENTIFIER as b, type ExactAuthorizationWire as c, type ExactPaymentPayload as d, type ExactPaymentPayloadAny as e, HEADER_RESPONSE as f, HEADER_RESPONSE_V1 as g, HEADER_SIGNATURE as h, HEADER_SIGNATURE_V1 as i, type ParsedExactPayment as j, type ParsedUptoPayment as k, type Permit2Authorization as l, type Permit2PaymentPayload as m, type Permit2UptoAuthorization as n, type Permit2UptoPaymentPayload as o, type PipRailReceipt as p, type SignedReceipt as q, type SpendAssetTotal as r, type SpendDenomTotal as s, SpendLedger as t, type SpendRecord as u, type SpendStore as v, type SpendSummary as w, type VerifyResult as x, type X402AnyAccept as y, type X402Challenge as z };

package/dist/{near-FZBUICCS.js → near-5PXTVQ47.js}

@@ -10,7 +10,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-PAMKCWVW.js";
 
 // src/drivers/near/index.ts
 import { JsonRpcProvider, Account, actions as actions2 } from "near-api-js";
@@ -312,11 +312,11 @@ async function verifyNear(params) {
     return { ok: false, error: "tx_reverted", detail: `NEAR tx ${hash} failed on-chain.` };
   }
   if (accept.asset === "native") {
-    if (typeof tx.timestampMs !== "number") {
-      return { ok: false, error: "payment_expired", detail: `Cannot bound the age of native NEAR tx ${hash} (no block time) \u2014 failing closed.` };
+    if (!Number.isFinite(tx.timestampMs)) {
+      return { ok: false, error: "payment_expired", detail: `Cannot bound the age of native NEAR tx ${hash} (no/invalid block time) \u2014 failing closed.` };
     }
     const ageSeconds = Math.floor(Date.now() / 1e3) - Math.floor(tx.timestampMs / 1e3);
-    if (ageSeconds > accept.maxTimeoutSeconds) {
+    if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
       return { ok: false, error: "payment_expired", detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.` };
     }
     if (tx.receiverId !== accept.payTo) {
@@ -569,7 +569,16 @@ function makeNearNetwork(preset, rpcUrl) {
       }
       throw new ConfirmationTimeoutError(`NEAR tx ${hash} not confirmed in time.`);
     },
-    async estimateCost() {
+    async estimateCost(accept) {
+      if (accept.scheme === "exact") {
+        return nativeCost({
+          symbol: "NEAR",
+          decimals: NEAR_DECIMALS,
+          fee: 0n,
+          basis: "estimated",
+          detail: "gasless \u2014 the relayer prepays gas + the 1 yocto; the buyer pays 0 NEAR"
+        });
+      }
       return nativeCost({
         symbol: "NEAR",
         decimals: NEAR_DECIMALS,

package/dist/{near-6KAQVVG2.cjs → near-YNNK7RW7.cjs}

@@ -10,7 +10,7 @@
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
 
 // src/drivers/near/index.ts
 var _nearapijs = require('near-api-js');
@@ -61,18 +61,18 @@ async function payNear(params) {
     return res.hash;
   } catch (err) {
     if (isNearRegistrationError(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.RecipientNotReadyError)(
+      throw new (0, _chunkGYM46G5Lcjs.RecipientNotReadyError)(
         `NEAR recipient ${accept.payTo} isn't registered on token ${accept.asset} (NEP-145 storage_deposit) \u2014 register it once (\u22480.00125 NEAR) before it can receive. (NEAR: not registered)`,
         { cause: err }
       );
     }
     if (isNearAffordability(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+      throw new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 async function payNearNative(params) {
@@ -82,12 +82,12 @@ async function payNearNative(params) {
     return res.hash;
   } catch (err) {
     if (isNearAffordability(err)) {
-      throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+      throw new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient NEAR balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isNearRegistrationError(err) {
@@ -109,28 +109,28 @@ var NONCE_BLOCK_MULTIPLIER = 1000000n;
 async function payExactNear(input) {
   const { signer, senderId, blockHeight, accessKeyNonce, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "NEAR exact is NEP-141-only (an ft_transfer); native NEAR is not exact-payable. Pay via onchain-proof."
     );
   }
   if (!isValidNearAccountId(accept.asset)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
   }
   if (!isValidNearAccountId(accept.payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
   }
   if (!isValidNearAccountId(senderId)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
   }
   const t = accept.maxTimeoutSeconds;
   if (!Number.isInteger(t) || t <= 0) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("NEAR exact: maxTimeoutSeconds must be a positive integer.");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("NEAR exact: maxTimeoutSeconds must be a positive integer.");
   }
   const timeoutBlocks = BigInt(Math.max(1, Math.ceil(t / ESTIMATED_BLOCK_SECONDS)));
   const maxBlockHeight = blockHeight + timeoutBlocks;
   const nonce = accessKeyNonce + 1n;
   if (nonce >= blockHeight * NONCE_BLOCK_MULTIPLIER) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "NEAR exact: the access-key nonce is at the protocol ceiling for this block height; cannot build a delegate action."
     );
   }
@@ -259,7 +259,7 @@ async function verifyAndSettleExactNear(input) {
     if (/not enough|insufficient|exceeded the prepaid gas|NotEnoughBalance|doesn't have enough|is not registered/i.test(m)) {
       return fail("tx_reverted", `the ft_transfer would fail on chain: ${shorten(m)}.`);
     }
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `NEAR exact settle: the relayer could not submit the delegate (${shorten(m)}). The buyer's signed delegate is still valid \u2014 fund/fix the relayer and the buyer can re-present it.`,
       { cause: err }
     );
@@ -312,11 +312,11 @@ async function verifyNear(params) {
     return { ok: false, error: "tx_reverted", detail: `NEAR tx ${hash} failed on-chain.` };
   }
   if (accept.asset === "native") {
-    if (typeof tx.timestampMs !== "number") {
-      return { ok: false, error: "payment_expired", detail: `Cannot bound the age of native NEAR tx ${hash} (no block time) \u2014 failing closed.` };
+    if (!Number.isFinite(tx.timestampMs)) {
+      return { ok: false, error: "payment_expired", detail: `Cannot bound the age of native NEAR tx ${hash} (no/invalid block time) \u2014 failing closed.` };
     }
     const ageSeconds = Math.floor(Date.now() / 1e3) - Math.floor(tx.timestampMs / 1e3);
-    if (ageSeconds > accept.maxTimeoutSeconds) {
+    if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
       return { ok: false, error: "payment_expired", detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.` };
     }
     if (tx.receiverId !== accept.payTo) {
@@ -408,13 +408,13 @@ function txNotFound(hash) {
 
 function assertNearWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
+  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "NEAR");
   if (!("accountId" in wallet) || !("key" in wallet)) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is NEAR; wallet must be { accountId, key } (key = ed25519:\u2026).`
     );
   }
@@ -422,13 +422,13 @@ function assertNearWallet(wallet, network) {
 }
 function resolveNearWallet(config) {
   if (!config.accountId || !config.key) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("NEAR wallet needs { accountId, key } (key = ed25519:\u2026).");
   }
   let signer;
   try {
     signer = _nearapijs.KeyPairSigner.fromSecretKey(config.key);
   } catch (cause) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("NEAR wallet { key } is not a valid ed25519:\u2026 secret key.", {
       cause
     });
   }
@@ -490,16 +490,16 @@ function makeNearNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
             `token "${token}" isn't built in for NEAR (known: ${known}). Pass { contractId, decimals } for a custom NEP-141.`
           );
         }
         return { asset: info.contractId, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "near", network);
+      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "near", network);
       const t = token;
       if (!t.contractId || typeof t.decimals !== "number") {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is NEAR; a custom token must be { contractId, decimals }.`
         );
       }
@@ -518,12 +518,12 @@ function makeNearNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" looks like an EVM/Sui 0x address.`
         );
       }
       if (!isValidNearAccountId(payTo)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is NEAR, but payTo "${payTo}" is not a valid NEAR account id.`
         );
       }
@@ -567,10 +567,19 @@ function makeNearNetwork(preset, rpcUrl) {
         if (tx && tx.success) return { height: "0" };
       } catch (e11) {
       }
-      throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
+      throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
     },
-    async estimateCost() {
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+    async estimateCost(accept) {
+      if (accept.scheme === "exact") {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
+          symbol: "NEAR",
+          decimals: NEAR_DECIMALS,
+          fee: 0n,
+          basis: "estimated",
+          detail: "gasless \u2014 the relayer prepays gas + the 1 yocto; the buyer pays 0 NEAR"
+        });
+      }
+      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
         symbol: "NEAR",
         decimals: NEAR_DECIMALS,
         fee: 1500000000000000000000n,
@@ -692,7 +701,7 @@ function makeNearNetwork(preset, rpcUrl) {
       try {
         relayerWallet = resolveNearWallet(relayer._native);
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+        throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
           `NEAR exact settle: the relayer wallet is invalid (${err instanceof Error ? err.message : String(err)}).`,
           { cause: err }
         );

package/dist/node.d.cts

@@ -1,5 +1,5 @@
-import { u as SpendStore } from './ledger-mF_SoiDB.cjs';
-export { Q as memorySpendStore } from './ledger-mF_SoiDB.cjs';
+import { v as SpendStore } from './ledger-uFtXlIHY.cjs';
+export { T as memorySpendStore } from './ledger-uFtXlIHY.cjs';
 
 /**
  * A durable {@link SpendStore} backed by a local JSONL file (one settled payment per

package/dist/node.d.ts

@@ -1,5 +1,5 @@
-import { u as SpendStore } from './ledger-mF_SoiDB.js';
-export { Q as memorySpendStore } from './ledger-mF_SoiDB.js';
+import { v as SpendStore } from './ledger-uFtXlIHY.js';
+export { T as memorySpendStore } from './ledger-uFtXlIHY.js';
 
 /**
  * A durable {@link SpendStore} backed by a local JSONL file (one settled payment per

package/dist/{solana-ELUWO6N5.js → solana-HITVI3HF.js}

@@ -8,7 +8,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-PAMKCWVW.js";
 
 // src/drivers/solana/index.ts
 import { Connection, PublicKey as PublicKey3 } from "@solana/web3.js";
@@ -16,6 +16,7 @@ import {
   getAccount,
   getAssociatedTokenAddressSync as getAssociatedTokenAddressSync3,
   TOKEN_2022_PROGRAM_ID as TOKEN_2022_PROGRAM_ID2,
+  TOKEN_PROGRAM_ID as TOKEN_PROGRAM_ID2,
   TokenAccountNotFoundError
 } from "@solana/spl-token";
 
@@ -126,15 +127,15 @@ async function verifySolana(params) {
       detail: `Transaction ${signature} failed on-chain.`
     };
   }
-  if (typeof tx.blockTime !== "number") {
+  if (!Number.isFinite(tx.blockTime)) {
     return {
       ok: false,
       error: "payment_expired",
-      detail: `Cannot determine the age of ${signature} (no blockTime).`
+      detail: `Cannot determine the age of ${signature} (no/invalid blockTime).`
     };
   }
   const ageSeconds = Math.floor(Date.now() / 1e3) - tx.blockTime;
-  if (ageSeconds > accept.maxTimeoutSeconds) {
+  if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
     return {
       ok: false,
       error: "payment_expired",
@@ -429,6 +430,8 @@ async function verifyAndSettleExactSolana(input) {
       if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
         return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
       }
+    } else {
+      return fail("signature_invalid", `Unexpected ComputeBudget instruction (discriminator ${data[0]}) \u2014 only set-unit-limit/price are allowed (fee-payer drain guard).`);
     }
   }
   const isSignedSigner = (pubkey) => {
@@ -717,14 +720,26 @@ function makeSolanaNetwork(preset, rpcUrl) {
       if (asset === "native") return { token: native, native };
       let token;
       try {
-        const ata = getAssociatedTokenAddressSync3(new PublicKey3(asset), owner);
-        token = (await getAccount(connection, ata, "confirmed")).amount;
+        const mint = new PublicKey3(asset);
+        const info = await connection.getAccountInfo(mint);
+        const programId = info?.owner.equals(TOKEN_2022_PROGRAM_ID2) ? TOKEN_2022_PROGRAM_ID2 : TOKEN_PROGRAM_ID2;
+        const ata = getAssociatedTokenAddressSync3(mint, owner, false, programId);
+        token = (await getAccount(connection, ata, "confirmed", programId)).amount;
       } catch (e) {
         token = e instanceof TokenAccountNotFoundError ? 0n : null;
       }
       return { token, native };
     },
-    // No receive prerequisite — the payer's tx idempotently creates the recipient's ATA (pay.ts).
+    // No receive prerequisite for the DEFAULT onchain-proof rail — the payer's tx idempotently
+    // creates the recipient's ATA (pay.ts). KNOWN LIMITATION (documented, not a bug): on the opt-in
+    // `exact` rail the buyer cannot create the ATA (payExactSolana throws if payTo's token account
+    // is missing), so `planPayment`/`canAfford` can be OPTIMISTIC for an exact payment to a
+    // brand-new recipient whose ATA doesn't yet exist — marked payable, and `autoRoute` would pick
+    // it then refuse (pre-broadcast, recoverable) at pay time. Mitigations in practice: onchain-proof
+    // is always co-offered (and DOES create the ATA), `exact` + `autoRoute` are both off by default,
+    // and most merchant receive accounts already exist. 'n/a' is correct for onchain-proof; an
+    // exact-aware probe needs the token-program-correct ATA derivation (an extra mint-owner read)
+    // and is deferred as disproportionate to this opt-in edge.
     async recipientReady() {
       return { ready: "n/a" };
     },