@piprail/sdk 2.13.0 → 2.14.0

package/dist/{solana-MYF4HBO4.cjs → solana-N3UCNCYE.cjs}

@@ -8,7 +8,7 @@
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
 
 // src/drivers/solana/index.ts
 var _web3js = require('@solana/web3.js');
@@ -17,6 +17,7 @@ var _web3js = require('@solana/web3.js');
 
 
 
+
 var _spltoken = require('@solana/spl-token');
 
 // src/drivers/solana/chains.ts
@@ -126,15 +127,15 @@ async function verifySolana(params) {
       detail: `Transaction ${signature} failed on-chain.`
     };
   }
-  if (typeof tx.blockTime !== "number") {
+  if (!Number.isFinite(tx.blockTime)) {
     return {
       ok: false,
       error: "payment_expired",
-      detail: `Cannot determine the age of ${signature} (no blockTime).`
+      detail: `Cannot determine the age of ${signature} (no/invalid blockTime).`
     };
   }
   const ageSeconds = Math.floor(Date.now() / 1e3) - tx.blockTime;
-  if (ageSeconds > accept.maxTimeoutSeconds) {
+  if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
     return {
       ok: false,
       error: "payment_expired",
@@ -236,7 +237,7 @@ function isEmptySig(sig) {
 function memoRandomNonce() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _3 => _3.getRandomValues])) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); SVM exact needs a CSPRNG nonce."
     );
   }
@@ -248,7 +249,7 @@ function memoDataFor(accept) {
   if (accept.extra.memo !== void 0) {
     const bytes = Buffer.from(accept.extra.memo, "utf8");
     if (bytes.length > MAX_MEMO_BYTES) {
-      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+      throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
         `SVM exact: extra.memo is ${bytes.length} bytes; the scheme caps it at ${MAX_MEMO_BYTES}.`
       );
     }
@@ -262,15 +263,15 @@ function memoInstruction(accept) {
 async function payExactSolana(input) {
   const { connection, keypair, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "SVM exact is SPL-token only (TransferChecked); native SOL is not exact-payable. Pay via onchain-proof."
     );
   }
   if (!accept.extra.feePayer) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.feePayer (the merchant sponsor key).");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.feePayer (the merchant sponsor key).");
   }
   if (accept.extra.decimals === void 0) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.decimals for the TransferChecked.");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("SVM exact rail must advertise extra.decimals for the TransferChecked.");
   }
   let feePayer;
   let mint;
@@ -280,12 +281,12 @@ async function payExactSolana(input) {
     mint = new (0, _web3js.PublicKey)(accept.asset);
     payTo = new (0, _web3js.PublicKey)(accept.payTo);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `SVM exact: bad feePayer/asset/payTo (${err instanceof Error ? err.message : String(err)}).`
     );
   }
   if (feePayer.equals(payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       "SVM exact: the fee payer must differ from payTo \u2014 payTo appears in the transfer instruction, which the fee payer must not (a scheme MUST-rule). Use a separate relayer key for the gate."
     );
   }
@@ -299,7 +300,7 @@ async function payExactSolana(input) {
     destInfo = "unknown";
   }
   if (destInfo === null) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
       `SVM exact: the recipient's token account for ${mint.toBase58()} doesn't exist yet \u2014 the exact rail can't create it. Pay via onchain-proof (which creates it), or have ${payTo.toBase58()} create its associated token account first.`
     );
   }
@@ -330,11 +331,11 @@ async function payExactSolana(input) {
   tx.sign([keypair]);
   const buyerIndex = message.staticAccountKeys.findIndex((k) => k.equals(keypair.publicKey));
   if (buyerIndex < 1 || buyerIndex >= message.header.numRequiredSignatures) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact: could not locate the buyer signer slot.");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("SVM exact: could not locate the buyer signer slot.");
   }
   const buyerSig = tx.signatures[buyerIndex];
   if (!buyerSig || isEmptySig(buyerSig)) {
-    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)("SVM exact: the wallet did not produce a buyer signature.");
+    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("SVM exact: the wallet did not produce a buyer signature.");
   }
   const transaction = Buffer.from(tx.serialize()).toString("base64");
   return {
@@ -361,15 +362,15 @@ async function verifyAndSettleExactSolana(input) {
     if (!accept.extra.feePayer) throw new Error("rail is missing extra.feePayer");
     railFeePayer = new (0, _web3js.PublicKey)(accept.extra.feePayer);
   } catch (err) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(`SVM exact: rail has a bad payTo/asset/feePayer (${err instanceof Error ? err.message : String(err)}).`);
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`SVM exact: rail has a bad payTo/asset/feePayer (${err instanceof Error ? err.message : String(err)}).`);
   }
   if (!railFeePayer.equals(feePayerKeypair.publicKey)) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       "SVM exact: the gate relayer key does not match the rail extra.feePayer \u2014 misconfigured rail."
     );
   }
   if (feePayerKeypair.publicKey.equals(payTo)) {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)("SVM exact: the fee payer must differ from payTo \u2014 misconfigured rail.");
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("SVM exact: the fee payer must differ from payTo \u2014 misconfigured rail.");
   }
   const program = tokenProgramFor(accept);
   let tx;
@@ -429,6 +430,8 @@ async function verifyAndSettleExactSolana(input) {
       if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
         return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
       }
+    } else {
+      return fail("signature_invalid", `Unexpected ComputeBudget instruction (discriminator ${data[0]}) \u2014 only set-unit-limit/price are allowed (fee-payer drain guard).`);
     }
   }
   const isSignedSigner = (pubkey) => {
@@ -509,7 +512,7 @@ async function verifyAndSettleExactSolana(input) {
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     if (/blockhash|block height|expired/i.test(msg)) return fail("payment_expired", `Settle broadcast rejected \u2014 blockhash expired: ${shorten(msg)}.`);
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `SVM exact settle: the merchant fee payer failed to broadcast (${shorten(msg)}). The buyer's signed transaction is still valid \u2014 fund/fix the fee payer and the buyer can re-present it.`,
       { cause: err }
     );
@@ -519,7 +522,7 @@ async function verifyAndSettleExactSolana(input) {
     return fail("tx_reverted", `Settle tx ${txid} reverted on-chain (a post-simulate race).`);
   }
   if (confirmed === "timeout") {
-    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
+    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
       `SVM exact settle: broadcast ${txid} but it did not confirm in time. It likely landed \u2014 re-verify by signature before re-presenting; do NOT re-pay.`
     );
   }
@@ -562,18 +565,18 @@ async function pollConfirmed(connection, signature) {
 
 function toKeypair(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is Solana; wallet must be { key } (base58 secret) or { signer }.`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Solana");
+  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Solana");
   if ("signer" in wallet) {
     return wallet.signer;
   }
   if ("key" in wallet) {
     const sk = wallet.key;
     if (typeof sk === "string" && sk.startsWith("0x")) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
         `chain ${network} is Solana, but the wallet { key } is a 0x\u2026 hex key \u2014 that's an EVM key. A Solana key is a base58 secret string (or a 64-byte Uint8Array).`
       );
     }
@@ -581,12 +584,12 @@ function toKeypair(wallet, network) {
       const bytes = typeof sk === "string" ? _bs582.default.decode(sk) : sk;
       return _web3js.Keypair.fromSecretKey(bytes);
     } catch (err) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
         `chain ${network} is Solana; the wallet { key } isn't a valid Solana secret (expected a base58 secret string or a 64-byte Uint8Array): ${err instanceof Error ? err.message : String(err)}.`
       );
     }
   }
-  throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+  throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
     `chain ${network} is Solana; wallet must be { key } (base58 secret) or { signer }.`
   );
 }
@@ -615,15 +618,15 @@ function makeSolanaNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Solana (known: ${known}). Pass { mint, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.mint, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "solana", network);
+      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "solana", network);
       if (!("mint" in token)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Solana; a custom token must be { mint, decimals }.`
         );
       }
@@ -642,14 +645,14 @@ function makeSolanaNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Solana, but payTo "${payTo}" looks like an EVM address.`
         );
       }
       try {
         new (0, _web3js.PublicKey)(payTo);
       } catch (e7) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Solana, but payTo "${payTo}" is not a base58 address.`
         );
       }
@@ -661,7 +664,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
       try {
         return await paySolana({ connection, keypair: wallet._native, accept });
       } catch (err) {
-        throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref) {
@@ -672,19 +675,19 @@ function makeSolanaNetwork(preset, rpcUrl) {
         });
         info = value[0];
       } catch (err) {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(
           `Solana payment ${ref} could not be confirmed (RPC read failed).`,
           { cause: err }
         );
       }
       if (!info || info.err || info.confirmationStatus !== "confirmed" && info.confirmationStatus !== "finalized") {
-        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`Solana payment ${ref} did not confirm in time.`);
+        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`Solana payment ${ref} did not confirm in time.`);
       }
       return { height: String(info.slot) };
     },
     async estimateCost(accept) {
       if (accept.scheme === "exact") {
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol: "SOL",
           decimals: SOL_DECIMALS,
           fee: 0n,
@@ -694,7 +697,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
       }
       const base = 5000n;
       if (accept.asset === "native") {
-        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
           symbol: "SOL",
           decimals: SOL_DECIMALS,
           fee: base,
@@ -703,7 +706,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
         });
       }
       const ataRent = 2039280n;
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
         symbol: "SOL",
         decimals: SOL_DECIMALS,
         fee: base + ataRent,
@@ -717,14 +720,26 @@ function makeSolanaNetwork(preset, rpcUrl) {
       if (asset === "native") return { token: native, native };
       let token;
       try {
-        const ata = _spltoken.getAssociatedTokenAddressSync.call(void 0, new (0, _web3js.PublicKey)(asset), owner);
-        token = (await _spltoken.getAccount.call(void 0, connection, ata, "confirmed")).amount;
+        const mint = new (0, _web3js.PublicKey)(asset);
+        const info = await connection.getAccountInfo(mint);
+        const programId = _optionalChain([info, 'optionalAccess', _8 => _8.owner, 'access', _9 => _9.equals, 'call', _10 => _10(_spltoken.TOKEN_2022_PROGRAM_ID)]) ? _spltoken.TOKEN_2022_PROGRAM_ID : _spltoken.TOKEN_PROGRAM_ID;
+        const ata = _spltoken.getAssociatedTokenAddressSync.call(void 0, mint, owner, false, programId);
+        token = (await _spltoken.getAccount.call(void 0, connection, ata, "confirmed", programId)).amount;
       } catch (e) {
         token = e instanceof _spltoken.TokenAccountNotFoundError ? 0n : null;
       }
       return { token, native };
     },
-    // No receive prerequisite — the payer's tx idempotently creates the recipient's ATA (pay.ts).
+    // No receive prerequisite for the DEFAULT onchain-proof rail — the payer's tx idempotently
+    // creates the recipient's ATA (pay.ts). KNOWN LIMITATION (documented, not a bug): on the opt-in
+    // `exact` rail the buyer cannot create the ATA (payExactSolana throws if payTo's token account
+    // is missing), so `planPayment`/`canAfford` can be OPTIMISTIC for an exact payment to a
+    // brand-new recipient whose ATA doesn't yet exist — marked payable, and `autoRoute` would pick
+    // it then refuse (pre-broadcast, recoverable) at pay time. Mitigations in practice: onchain-proof
+    // is always co-offered (and DOES create the ATA), `exact` + `autoRoute` are both off by default,
+    // and most merchant receive accounts already exist. 'n/a' is correct for onchain-proof; an
+    // exact-aware probe needs the token-program-correct ATA derivation (an extra mint-owner read)
+    // and is deferred as disproportionate to this opt-in edge.
     async recipientReady() {
       return { ready: "n/a" };
     },
@@ -771,7 +786,7 @@ function makeSolanaNetwork(preset, rpcUrl) {
       let tokenProgram = "spl-token";
       try {
         const info = await connection.getAccountInfo(new (0, _web3js.PublicKey)(asset));
-        if (_optionalChain([info, 'optionalAccess', _8 => _8.owner, 'access', _9 => _9.equals, 'call', _10 => _10(_spltoken.TOKEN_2022_PROGRAM_ID)])) tokenProgram = "token-2022";
+        if (_optionalChain([info, 'optionalAccess', _11 => _11.owner, 'access', _12 => _12.equals, 'call', _13 => _13(_spltoken.TOKEN_2022_PROGRAM_ID)])) tokenProgram = "token-2022";
       } catch (e9) {
       }
       return { method: "svm", extra: { feePayer: fp, tokenProgram } };

package/dist/{stellar-ASP2THL2.js → stellar-2QT6YYKN.js}

@@ -12,7 +12,7 @@ import {
   parseUnits,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-SC2ZYDHD.js";
+} from "./chunk-PAMKCWVW.js";
 
 // src/drivers/stellar/index.ts
 import { Horizon, StrKey as StrKey2 } from "@stellar/stellar-sdk";
@@ -147,7 +147,7 @@ async function verifyStellar(params) {
   const wantAsset = parseStellarAssetId(accept.asset);
   let txs;
   try {
-    txs = await reader.transactionsForAccount(accept.payTo, 50);
+    txs = await reader.transactionsForAccount(accept.payTo, 200);
   } catch {
     return rpcFailed(nonce);
   }
@@ -163,11 +163,11 @@ async function verifyStellar(params) {
     };
   }
   const ageSeconds = Math.floor(Date.now() / 1e3) - Math.floor(Date.parse(tx.created_at) / 1e3);
-  if (Number.isFinite(ageSeconds) && ageSeconds > accept.maxTimeoutSeconds) {
+  if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
     return {
       ok: false,
       error: "payment_expired",
-      detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.`
+      detail: Number.isFinite(ageSeconds) ? `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.` : `Cannot determine the age of ${tx.hash} (unparseable created_at "${tx.created_at}") \u2014 fail closed.`
     };
   }
   let payments;

package/dist/{stellar-CRWBSX4E.cjs → stellar-Y3SQN7S5.cjs}

@@ -12,7 +12,7 @@ var _chunkCQREG5LEcjs = require('./chunk-CQREG5LE.cjs');
 
 
 
-var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
+var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
 
 // src/drivers/stellar/index.ts
 var _stellarsdk = require('@stellar/stellar-sdk');
@@ -98,30 +98,30 @@ function mapSubmitError(err) {
   const seen = codes.join(", ");
   const has = (re) => codes.some((c) => re.test(c));
   if (has(/op_no_destination/i)) {
-    return new (0, _chunkMWBT7MCEcjs.RecipientNotReadyError)(
+    return new (0, _chunkGYM46G5Lcjs.RecipientNotReadyError)(
       `Stellar destination account doesn't exist yet \u2014 create it with \u22651 XLM (the base reserve) before it can receive. (Stellar: ${seen})`,
       { cause: err }
     );
   }
   if (has(/op_(no_trust|line_full|not_authorized)/i) && !has(/src_no_trust/i)) {
-    return new (0, _chunkMWBT7MCEcjs.RecipientNotReadyError)(
+    return new (0, _chunkGYM46G5Lcjs.RecipientNotReadyError)(
       `Stellar destination can't hold this asset \u2014 it needs a trustline for it (and to be authorized) before it can receive. (Stellar: ${seen})`,
       { cause: err }
     );
   }
   if (has(/underfunded|insufficient|low_reserve|src_no_trust/i)) {
-    return new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+    return new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
       `Stellar payment failed: the sender can't cover it \u2014 balance, base reserve, or no trustline to send this asset. (Stellar: ${seen})`,
       { cause: err }
     );
   }
   if (isAccountNotFound(err)) {
-    return new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
+    return new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
       "Stellar source account not found on-chain \u2014 fund the sender (\u2265 base reserve) before it can pay.",
       { cause: err }
     );
   }
-  return _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+  return _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
 }
 function isAccountNotFound(err) {
   const e = err;
@@ -147,7 +147,7 @@ async function verifyStellar(params) {
   const wantAsset = parseStellarAssetId(accept.asset);
   let txs;
   try {
-    txs = await reader.transactionsForAccount(accept.payTo, 50);
+    txs = await reader.transactionsForAccount(accept.payTo, 200);
   } catch (e2) {
     return rpcFailed(nonce);
   }
@@ -163,11 +163,11 @@ async function verifyStellar(params) {
     };
   }
   const ageSeconds = Math.floor(Date.now() / 1e3) - Math.floor(Date.parse(tx.created_at) / 1e3);
-  if (Number.isFinite(ageSeconds) && ageSeconds > accept.maxTimeoutSeconds) {
+  if (!Number.isFinite(ageSeconds) || ageSeconds > accept.maxTimeoutSeconds) {
     return {
       ok: false,
       error: "payment_expired",
-      detail: `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.`
+      detail: Number.isFinite(ageSeconds) ? `Payment is ${ageSeconds}s old; max allowed is ${accept.maxTimeoutSeconds}s.` : `Cannot determine the age of ${tx.hash} (unparseable created_at "${tx.created_at}") \u2014 fail closed.`
     };
   }
   let payments;
@@ -218,7 +218,7 @@ function assetMatches(p, want) {
 }
 function parseAmount(amount, decimals) {
   try {
-    return _chunkMWBT7MCEcjs.parseUnits.call(void 0, amount, decimals);
+    return _chunkGYM46G5Lcjs.parseUnits.call(void 0, amount, decimals);
   } catch (e4) {
     return 0n;
   }
@@ -242,13 +242,13 @@ function rpcFailed(nonce) {
 
 function assertStellarWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is Stellar; wallet must be { key } (S\u2026 seed) or { keypair }.`
     );
   }
-  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Stellar");
+  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Stellar");
   if (!("key" in wallet) && !("keypair" in wallet)) {
-    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
       `chain ${network} is Stellar; wallet must be { key } (S\u2026 seed) or { keypair }.`
     );
   }
@@ -258,11 +258,11 @@ function resolveStellarWallet(config) {
   if (config.keypair) return config.keypair;
   if (config.key) {
     if (!_stellarsdk.StrKey.isValidEd25519SecretSeed(config.key)) {
-      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("Stellar wallet { key } is not a valid S\u2026 secret seed.");
+      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("Stellar wallet { key } is not a valid S\u2026 secret seed.");
     }
     return _stellarsdk.Keypair.fromSecret(config.key);
   }
-  throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)("Stellar wallet needs { key } (S\u2026 seed) or { keypair }.");
+  throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("Stellar wallet needs { key } (S\u2026 seed) or { keypair }.");
 }
 
 // src/drivers/stellar/index.ts
@@ -317,7 +317,7 @@ function makeStellarNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
+          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Stellar (known: ${known}). Pass { issuer, code, decimals } for a custom asset, or use 'native'.`
           );
         }
@@ -327,10 +327,10 @@ function makeStellarNetwork(preset, rpcUrl) {
           symbol: info.symbol
         };
       }
-      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "stellar", network);
+      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "stellar", network);
       const t = token;
       if (!t.issuer || !t.code || typeof t.decimals !== "number") {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Stellar; a custom token must be { issuer, code, decimals }.`
         );
       }
@@ -351,12 +351,12 @@ function makeStellarNetwork(preset, rpcUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Stellar, but payTo "${payTo}" looks like an EVM address.`
         );
       }
       if (!_stellarsdk.StrKey.isValidEd25519PublicKey(payTo)) {
-        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
+        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
           `chain ${network} is Stellar, but payTo "${payTo}" is not a valid Stellar account (G\u2026).`
         );
       }
@@ -377,10 +377,10 @@ function makeStellarNetwork(preset, rpcUrl) {
           await _chunkCQREG5LEcjs.delay.call(void 0, 1500);
         }
       }
-      throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(`Stellar tx ${ref} not visible on Horizon in time.`);
+      throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`Stellar tx ${ref} not visible on Horizon in time.`);
     },
     async estimateCost() {
-      return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
+      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
         symbol: XLM_SYMBOL,
         decimals: STELLAR_DECIMALS,
         fee: 100n,
@@ -404,7 +404,7 @@ function makeStellarNetwork(preset, rpcUrl) {
       }
       const toBase = (s) => {
         try {
-          return s != null ? _chunkMWBT7MCEcjs.parseUnits.call(void 0, s, STELLAR_DECIMALS) : 0n;
+          return s != null ? _chunkGYM46G5Lcjs.parseUnits.call(void 0, s, STELLAR_DECIMALS) : 0n;
         } catch (e7) {
           return 0n;
         }