@piprail/sdk 2.14.0 → 2.14.1

package/CHANGELOG.md

@@ -4,6 +4,45 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [2.14.1] — 2026-06-24 — robustness & typed-error polish from a live-artifact break-it pass
+
+A small, fully-additive patch. After 2.14.0 shipped, the published npm artifact was put through an
+adversarial **break-it** pass from the examples (10 new suites, ~1,000+ assertions, run against the
+real `npm i @piprail/sdk` — not the workspace build; see
+`examples/basics/x402-parity-sandbox/FINDINGS.md`). Every security-critical and happy-path property
+held; this release tightens the robustness/contract edges it surfaced. **No default changes, no
+settled-payment outcome changes** — safe to bump.
+
+### Fixed
+
+- **`classifyChallenge` / `describeChallenge` now honour their documented "never throws" contract.**
+  A nullish or shapeless challenge (a *foreign* 402 reaching the self-describe / landing-page path)
+  previously threw a raw `TypeError` instead of degrading to a verdict / generic pointer. Both now
+  guard `accepts` and degrade gracefully. (F-A1/F-A2)
+- **A scientific-notation `amount` is rejected, not silently 1000×'d.** `createPaymentGate({ amount:
+  '1e3' })` used to be read as **1000 tokens**; `parseUnits` no longer expands scientific notation
+  for merchant amounts (`floorUnits` still does, for RPC dust reads) and throws on it. (F-B1)
+- **Typed config errors (ERRORS.md §5).** A new **`InvalidConfigError`** (`code: 'INVALID_CONFIG'`)
+  replaces the raw `viem`/`TypeError`s thrown for an invalid `amount` (non-string or non-decimal), a
+  missing `payTo`, or a non-array `resources` in `buildWellKnownX402Manifest`. (F-C1/F-C2)
+- **`buildWellKnownX402Manifest` no longer passes a non-finite `lastUpdated` through** to serialize
+  as JSON `null` — a `NaN`/`Infinity` falls back to now. (F-D4)
+- **`DIRECTORY_INFO` is now `Object.freeze`'d** at runtime, matching its `Readonly<>` type. (F-D2)
+- **The `exports` map now exposes `./package.json`**, so `require('@piprail/sdk/package.json')` (used
+  by version-introspection tooling) no longer throws `ERR_PACKAGE_PATH_NOT_EXPORTED`. (F-D3)
+
+### Added
+
+- **`InvalidConfigError`** — exported typed error for invalid merchant gate/manifest config.
+
+### Notes (verified by-design, not changed)
+
+- `client.estimateCost(url)` still **throws `NoCompatibleAcceptError`** when the client can't pay any
+  offered rail — a deliberate "this 402 isn't for you" signal (it returns `null` only for a non-402
+  or a malformed envelope). Docs clarified. (F-A3)
+- TON's native gas symbol is **`GRAM`** (the ticker after TON's 2026-06-15 governance rebrand), not a
+  bug. (F-D1)
+
 ## [2.14.0] — 2026-06-23 — x402-over-MCP transport, payment-identifier idempotency, the `.well-known/x402.json` manifest — and a deep three-pass security hardening of every chain
 
 A feature **and** hardening release. It adds the third official x402 transport, an opt-in

package/dist/{algorand-QU6G2DQZ.cjs → algorand-ICJNXO5V.cjs}

@@ -10,7 +10,7 @@
 
 
 
-var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
+var _chunk57V5DNJTcjs = require('./chunk-57V5DNJT.cjs');
 
 // src/drivers/algorand/index.ts
 var _algosdk = require('algosdk'); var _algosdk2 = _interopRequireDefault(_algosdk);
@@ -58,13 +58,13 @@ async function payAlgorand(params) {
   } catch (err) {
     const mapped = mapAlgorandError(err, accept.payTo);
     if (mapped) throw mapped;
-    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunk57V5DNJTcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function mapAlgorandError(err, payTo) {
   const m = err instanceof Error ? err.message : String(err);
   if (/must optin/i.test(m) || /missing from/i.test(m) && m.includes(payTo)) {
-    return new (0, _chunkGYM46G5Lcjs.RecipientNotReadyError)(
+    return new (0, _chunk57V5DNJTcjs.RecipientNotReadyError)(
       `Algorand recipient ${payTo} hasn't opted into this asset \u2014 it must opt in (a 0-amount asset transfer to itself) before it can receive. (Algorand: ${firstLine(m)})`,
       { cause: err }
     );
@@ -72,7 +72,7 @@ function mapAlgorandError(err, payTo) {
   if (/overspend|below min|min(imum)? balance|tried to spend|balance \d+ below|asset \d+ missing from|insufficient|underflow/i.test(
     m
   )) {
-    return new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
+    return new (0, _chunk57V5DNJTcjs.InsufficientFundsError)(
       `Algorand payment failed: the sender can't cover it \u2014 token balance, ALGO for fees, the 0.1-ALGO minimum balance, or a missing asset opt-in on the sender. (Algorand: ${firstLine(m)})`,
       { cause: err }
     );
@@ -99,33 +99,33 @@ function isSet(addr) {
 function randomNote() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _ => _.getRandomValues])) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("Algorand exact: no Web Crypto CSPRNG available to generate a unique note.");
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)("Algorand exact: no Web Crypto CSPRNG available to generate a unique note.");
   }
   return g.getRandomValues(new Uint8Array(32));
 }
 async function payExactAlgorand(input) {
   const { suggestedParams, sk, sender, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(
       "Algorand exact is ASA-only (an asset transfer); native ALGO is not exact-payable. Pay via onchain-proof."
     );
   }
   const feePayer = accept.extra.feePayer;
   if (!feePayer) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("Algorand exact rail must advertise extra.feePayer (the fee sponsor address).");
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)("Algorand exact rail must advertise extra.feePayer (the fee sponsor address).");
   }
   const assetId = parseAlgorandAssetId(accept.asset);
   if (assetId === null) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Algorand exact rail asset "${accept.asset}" must be a numeric ASA id.`);
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Algorand exact rail asset "${accept.asset}" must be a numeric ASA id.`);
   }
   if (!_algosdk2.default.isValidAddress(feePayer)) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Algorand exact: extra.feePayer "${feePayer}" is not a valid Algorand address.`);
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Algorand exact: extra.feePayer "${feePayer}" is not a valid Algorand address.`);
   }
   if (!_algosdk2.default.isValidAddress(accept.payTo)) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Algorand exact: payTo "${accept.payTo}" is not a valid Algorand address.`);
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Algorand exact: payTo "${accept.payTo}" is not a valid Algorand address.`);
   }
   if (feePayer === sender) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(
       "Algorand exact: the fee payer must differ from the payer \u2014 the buyer must pay ZERO ALGO (the sponsor pays the pooled fee)."
     );
   }
@@ -172,13 +172,13 @@ function decodeElement(bytes) {
 async function verifyAndSettleExactAlgorand(input) {
   const { client, feePayerSk, feePayerAddr, payload, accept } = input;
   const railFeePayer = accept.extra.feePayer;
-  if (!railFeePayer) throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Algorand exact: rail is missing extra.feePayer.");
+  if (!railFeePayer) throw new (0, _chunk57V5DNJTcjs.SettlementError)("Algorand exact: rail is missing extra.feePayer.");
   if (railFeePayer !== feePayerAddr) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Algorand exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)("Algorand exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
   }
   const assetId = parseAlgorandAssetId(accept.asset);
-  if (assetId === null) throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Algorand exact: rail asset "${accept.asset}" is not a numeric ASA id.`);
-  if (!_algosdk2.default.isValidAddress(accept.payTo)) throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Algorand exact: rail payTo "${accept.payTo}" is invalid.`);
+  if (assetId === null) throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Algorand exact: rail asset "${accept.asset}" is not a numeric ASA id.`);
+  if (!_algosdk2.default.isValidAddress(accept.payTo)) throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Algorand exact: rail payTo "${accept.payTo}" is invalid.`);
   const { paymentIndex, paymentGroup } = payload;
   if (paymentGroup.length !== GROUP_SIZE) {
     return fail("signature_invalid", `Algorand exact expects a ${GROUP_SIZE}-transaction group (payment + fee), got ${paymentGroup.length}.`);
@@ -244,7 +244,7 @@ async function verifyAndSettleExactAlgorand(input) {
   try {
     feeSigned = fee.signTxn(feePayerSk);
   } catch (err) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Algorand exact settle: the gate could not sign the fee transaction (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Algorand exact settle: the gate could not sign the fee transaction (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
   }
   const signedGroup = elements.map((el, i) => i === paymentIndex ? payElement.raw : feeSigned);
   try {
@@ -266,7 +266,7 @@ async function verifyAndSettleExactAlgorand(input) {
     if (/signature|sig|auth|malformed/i.test(m)) return fail("signature_invalid", `Settle rejected \u2014 bad signature: ${shorten(m)}.`);
     if (/already in ledger|already committed|duplicate/i.test(m)) return fail("tx_already_used", `This payment was already settled: ${shorten(m)}.`);
     if (/\bround\b|expired|lifetime|stale|validity/i.test(m)) return fail("payment_expired", `Settle rejected \u2014 validity window expired: ${shorten(m)}.`);
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(
       `Algorand exact settle: the group failed to submit (${shorten(m)}). The buyer's signed transaction is still valid \u2014 fund/fix the fee payer (${railFeePayer}) and the buyer can re-present it.`,
       { cause: err }
     );
@@ -275,10 +275,10 @@ async function verifyAndSettleExactAlgorand(input) {
   try {
     round = await client.waitForConfirmation(buyerTxid);
   } catch (err) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Algorand exact settle: submitted ${buyerTxid} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Algorand exact settle: submitted ${buyerTxid} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
   }
   if (round === null) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Algorand exact settle: submitted ${buyerTxid} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Algorand exact settle: submitted ${buyerTxid} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
   }
   return {
     ok: true,
@@ -374,13 +374,13 @@ function rpcFailed(nonce) {
 
 function assertAlgorandWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+    throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
       `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
-  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Algorand");
+  _chunk57V5DNJTcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Algorand");
   if (!("key" in wallet) && !("account" in wallet)) {
-    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+    throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
       `chain ${network} is Algorand; wallet must be { key } (25-word mnemonic) or { account }.`
     );
   }
@@ -395,13 +395,13 @@ function resolveAlgorandWallet(config) {
       const { addr, sk } = _algosdk2.default.mnemonicToSecretKey(config.key);
       return { addr: addr.toString(), sk };
     } catch (cause) {
-      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+      throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
         "Algorand wallet { key } is not a valid 25-word Algorand mnemonic.",
         { cause }
       );
     }
   }
-  throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("Algorand wallet needs { key } (25-word mnemonic) or { account }.");
+  throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)("Algorand wallet needs { key } (25-word mnemonic) or { account }.");
 }
 
 // src/drivers/algorand/index.ts
@@ -472,16 +472,16 @@ function makeAlgorandNetwork(preset, algodUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
+          throw new (0, _chunk57V5DNJTcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Algorand (known: ${known}). Pass { assetId, decimals } for a custom ASA, or use 'native'.`
           );
         }
         return { asset: algorandAssetId(info.assetId), decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "algorand", network);
+      _chunk57V5DNJTcjs.rejectForeignToken.call(void 0, token, "algorand", network);
       const t = token;
       if (typeof t.assetId !== "number" || typeof t.decimals !== "number") {
-        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+        throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
           `chain ${network} is Algorand; a custom token must be { assetId, decimals }.`
         );
       }
@@ -502,12 +502,12 @@ function makeAlgorandNetwork(preset, algodUrl) {
     },
     assertValidPayTo(payTo) {
       if (payTo.startsWith("0x")) {
-        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+        throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
           `chain ${network} is Algorand, but payTo "${payTo}" looks like an EVM address.`
         );
       }
       if (!_algosdk2.default.isValidAddress(payTo)) {
-        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+        throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
           `chain ${network} is Algorand, but payTo "${payTo}" is not a valid Algorand address.`
         );
       }
@@ -524,14 +524,14 @@ function makeAlgorandNetwork(preset, algodUrl) {
         const info = await _algosdk2.default.waitForConfirmation(algod, ref, 10);
         return { height: String(_nullishCoalesce(info.confirmedRound, () => ( 0))) };
       } catch (err) {
-        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`Algorand tx ${ref} did not confirm in time.`, {
+        throw new (0, _chunk57V5DNJTcjs.ConfirmationTimeoutError)(`Algorand tx ${ref} did not confirm in time.`, {
           cause: err
         });
       }
     },
     async estimateCost(accept) {
       if (accept.scheme === "exact") {
-        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
+        return _chunk57V5DNJTcjs.nativeCost.call(void 0, {
           symbol: ALGO_SYMBOL,
           decimals: ALGO_DECIMALS,
           fee: 0n,
@@ -539,7 +539,7 @@ function makeAlgorandNetwork(preset, algodUrl) {
           detail: "gasless \u2014 the fee payer (facilitator/relayer) pools the group fee; the buyer pays 0 ALGO"
         });
       }
-      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
+      return _chunk57V5DNJTcjs.nativeCost.call(void 0, {
         symbol: ALGO_SYMBOL,
         decimals: ALGO_DECIMALS,
         fee: 1000n,

package/dist/{algorand-6J3IABVF.js → algorand-RM7MP4PK.js}

@@ -10,7 +10,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-PAMKCWVW.js";
+} from "./chunk-NUPCFNC5.js";
 
 // src/drivers/algorand/index.ts
 import algosdk3 from "algosdk";

package/dist/{aptos-DHOMTBLZ.js → aptos-2FIRTMQX.js}

@@ -9,7 +9,7 @@ import {
   nativeCost,
   rejectForeignToken,
   toInsufficientFundsError
-} from "./chunk-PAMKCWVW.js";
+} from "./chunk-NUPCFNC5.js";
 
 // src/drivers/aptos/index.ts
 import { Aptos, AptosConfig, Network, AccountAddress as AccountAddress2 } from "@aptos-labs/ts-sdk";

package/dist/{aptos-LFTQGBBK.cjs → aptos-MVEG5ZPS.cjs}

@@ -9,7 +9,7 @@
 
 
 
-var _chunkGYM46G5Lcjs = require('./chunk-GYM46G5L.cjs');
+var _chunk57V5DNJTcjs = require('./chunk-57V5DNJT.cjs');
 
 // src/drivers/aptos/index.ts
 var _tssdk = require('@aptos-labs/ts-sdk');
@@ -58,14 +58,14 @@ async function payAptos(params) {
     const res = await client.signSubmit({ signer, transaction });
     return res.hash;
   } catch (err) {
-    if (err instanceof _chunkGYM46G5Lcjs.InsufficientFundsError) throw err;
+    if (err instanceof _chunk57V5DNJTcjs.InsufficientFundsError) throw err;
     if (isAptosAffordability(err)) {
-      throw new (0, _chunkGYM46G5Lcjs.InsufficientFundsError)(
+      throw new (0, _chunk57V5DNJTcjs.InsufficientFundsError)(
         err instanceof Error ? err.message : "Insufficient APT/token balance for the payment.",
         { cause: err }
       );
     }
-    throw _nullishCoalesce(_chunkGYM46G5Lcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+    throw _nullishCoalesce(_chunk57V5DNJTcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
   }
 }
 function isAptosAffordability(err) {
@@ -103,24 +103,24 @@ function parseAddr(addr) {
 async function payExactAptos(input) {
   const { client, sender, accept } = input;
   if (accept.asset === "native") {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(
       "Aptos exact is Fungible-Asset only (a primary_fungible_store transfer); native APT is not exact-payable. Pay via onchain-proof."
     );
   }
   const feePayer = accept.extra.feePayer;
   if (!feePayer) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)("Aptos exact rail must advertise extra.feePayer (the gas sponsor address).");
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)("Aptos exact rail must advertise extra.feePayer (the gas sponsor address).");
   }
   const feePayerAddr = parseAddr(feePayer);
-  if (!feePayerAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: extra.feePayer "${feePayer}" is not a valid Aptos address.`);
+  if (!feePayerAddr) throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Aptos exact: extra.feePayer "${feePayer}" is not a valid Aptos address.`);
   const payToAddr = parseAddr(accept.payTo);
-  if (!payToAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: payTo "${accept.payTo}" is not a valid Aptos address.`);
+  if (!payToAddr) throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Aptos exact: payTo "${accept.payTo}" is not a valid Aptos address.`);
   const metadataAddr = parseAddr(accept.asset);
-  if (!metadataAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: asset "${accept.asset}" is not a valid FA metadata address.`);
+  if (!metadataAddr) throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Aptos exact: asset "${accept.asset}" is not a valid FA metadata address.`);
   const senderAddr = parseAddr(sender);
-  if (!senderAddr) throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(`Aptos exact: payer "${sender}" is not a valid Aptos address.`);
+  if (!senderAddr) throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(`Aptos exact: payer "${sender}" is not a valid Aptos address.`);
   if (feePayerAddr.equals(senderAddr)) {
-    throw new (0, _chunkGYM46G5Lcjs.UnsupportedSchemeError)(
+    throw new (0, _chunk57V5DNJTcjs.UnsupportedSchemeError)(
       "Aptos exact: the fee payer must differ from the payer \u2014 the buyer must pay ZERO APT (the sponsor pays gas)."
     );
   }
@@ -158,16 +158,16 @@ function argBytes(arg) {
 async function verifyAndSettleExactAptos(input) {
   const { client, feePayerAddr, payload, accept } = input;
   const railFeePayer = accept.extra.feePayer;
-  if (!railFeePayer) throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: rail is missing extra.feePayer.");
+  if (!railFeePayer) throw new (0, _chunk57V5DNJTcjs.SettlementError)("Aptos exact: rail is missing extra.feePayer.");
   if (railFeePayer !== feePayerAddr) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)("Aptos exact: the gate relayer address does not match the rail extra.feePayer \u2014 misconfigured rail.");
   }
-  if (accept.asset === "native") throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: native APT is not exact-payable (misconfigured rail).");
+  if (accept.asset === "native") throw new (0, _chunk57V5DNJTcjs.SettlementError)("Aptos exact: native APT is not exact-payable (misconfigured rail).");
   const railFeePayerAddr = parseAddr(railFeePayer);
   const railPayTo = parseAddr(accept.payTo);
   const railMetadata = parseAddr(accept.asset);
   if (!railFeePayerAddr || !railPayTo || !railMetadata) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)("Aptos exact: rail feePayer/payTo/asset is not a valid Aptos address (misconfigured rail).");
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)("Aptos exact: rail feePayer/payTo/asset is not a valid Aptos address (misconfigured rail).");
   }
   let tx;
   let senderAuth;
@@ -241,7 +241,7 @@ async function verifyAndSettleExactAptos(input) {
   try {
     feePayerAuth = client.signAsFeePayer({ transaction: tx });
   } catch (err) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: the gate could not sign as fee payer (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Aptos exact settle: the gate could not sign as fee payer (${shorten(err instanceof Error ? err.message : String(err))}).`, { cause: err });
   }
   if (senderAuth instanceof _tssdk.AccountAuthenticatorEd25519) {
     try {
@@ -264,7 +264,7 @@ async function verifyAndSettleExactAptos(input) {
     if (/signature|invalid.*auth|INVALID_SIGNATURE/i.test(m)) return fail("signature_invalid", `Settle rejected \u2014 bad signature: ${shorten(m)}.`);
     if (/SEQUENCE_NUMBER_TOO_OLD|already.*(committed|ledger)|duplicate/i.test(m)) return fail("tx_already_used", `This payment was already settled: ${shorten(m)}.`);
     if (/EXPIRED|expired|TOO_NEW/i.test(m)) return fail("payment_expired", `Settle rejected \u2014 expired/stale: ${shorten(m)}.`);
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(
       `Aptos exact settle: the transaction failed to submit (${shorten(m)}). The buyer's signed transaction is still valid \u2014 fund/fix the fee payer (${railFeePayer}) and the buyer can re-present it.`,
       { cause: err }
     );
@@ -273,10 +273,10 @@ async function verifyAndSettleExactAptos(input) {
   try {
     confirmed = await client.waitForConfirmation(hash);
   } catch (err) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but confirmation read failed (${shorten(err instanceof Error ? err.message : String(err))}). It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`, { cause: err });
   }
   if (confirmed === null) {
-    throw new (0, _chunkGYM46G5Lcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
+    throw new (0, _chunk57V5DNJTcjs.SettlementError)(`Aptos exact settle: submitted ${hash} but it did not confirm in time. It likely landed \u2014 re-verify before re-presenting; do NOT re-pay.`);
   }
   if (!confirmed.success) {
     return fail("tx_reverted", `Settle tx ${hash} reverted on-chain (a post-simulate race).`);
@@ -372,13 +372,13 @@ function txNotFound(hash) {
 
 function assertAptosWallet(wallet, network) {
   if (typeof wallet !== "object" || wallet === null) {
-    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+    throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
       `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
-  _chunkGYM46G5Lcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Aptos");
+  _chunk57V5DNJTcjs.assertNoLegacyWalletKey.call(void 0, wallet, "Aptos");
   if (!("key" in wallet) && !("account" in wallet)) {
-    throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+    throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
       `chain ${network} is Aptos; wallet must be { key } (ed25519-priv-0x\u2026) or { account }.`
     );
   }
@@ -390,13 +390,13 @@ function resolveAptosAccount(config) {
     try {
       return _tssdk.Account.fromPrivateKey({ privateKey: new (0, _tssdk.Ed25519PrivateKey)(config.key) });
     } catch (cause) {
-      throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+      throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
         "Aptos wallet { key } is not a valid ed25519 secret (ed25519-priv-0x\u2026 or 0x\u2026 hex).",
         { cause }
       );
     }
   }
-  throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
+  throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)("Aptos wallet needs { key } (ed25519-priv-0x\u2026) or { account }.");
 }
 
 // src/drivers/aptos/index.ts
@@ -468,16 +468,16 @@ function makeAptosNetwork(preset, rpcUrl) {
         const info = preset.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(preset.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkGYM46G5Lcjs.UnknownTokenError)(
+          throw new (0, _chunk57V5DNJTcjs.UnknownTokenError)(
             `token "${token}" isn't built in for Aptos (known: ${known}). Pass { metadata, decimals } for a custom Fungible Asset, or use 'native'.`
           );
         }
         return { asset: info.metadata, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkGYM46G5Lcjs.rejectForeignToken.call(void 0, token, "aptos", network);
+      _chunk57V5DNJTcjs.rejectForeignToken.call(void 0, token, "aptos", network);
       const t = token;
       if (!t.metadata || typeof t.decimals !== "number") {
-        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+        throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
           `chain ${network} is Aptos; a custom token must be { metadata, decimals }.`
         );
       }
@@ -504,7 +504,7 @@ function makeAptosNetwork(preset, rpcUrl) {
         valid = false;
       }
       if (!valid || evmLike) {
-        throw new (0, _chunkGYM46G5Lcjs.WrongFamilyError)(
+        throw new (0, _chunk57V5DNJTcjs.WrongFamilyError)(
           `chain ${network} is Aptos, but payTo "${payTo}" is not a valid Aptos address (0x + 32 bytes).`
         );
       }
@@ -526,12 +526,12 @@ function makeAptosNetwork(preset, rpcUrl) {
         const tx = await aptos.waitForTransaction({ transactionHash: ref });
         return { height: String(_nullishCoalesce(tx.version, () => ( "0"))) };
       } catch (err) {
-        throw new (0, _chunkGYM46G5Lcjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
+        throw new (0, _chunk57V5DNJTcjs.ConfirmationTimeoutError)(`Aptos tx ${ref} did not finalize in time.`, { cause: err });
       }
     },
     async estimateCost(accept) {
       if (accept.scheme === "exact") {
-        return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
+        return _chunk57V5DNJTcjs.nativeCost.call(void 0, {
           symbol: APT_SYMBOL,
           decimals: APT_DECIMALS,
           fee: 0n,
@@ -539,7 +539,7 @@ function makeAptosNetwork(preset, rpcUrl) {
           detail: "gasless \u2014 the fee payer (facilitator/relayer) sponsors gas; the buyer pays 0 APT"
         });
       }
-      return _chunkGYM46G5Lcjs.nativeCost.call(void 0, {
+      return _chunk57V5DNJTcjs.nativeCost.call(void 0, {
         symbol: APT_SYMBOL,
         decimals: APT_DECIMALS,
         fee: 100000n,

package/dist/{chunk-GYM46G5L.cjs → chunk-57V5DNJT.cjs}

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7; var _class8; var _class9; var _class10; var _class11; var _class12; var _class13; var _class14; var _class15; var _class16; var _class17;// src/errors.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2; var _class3; var _class4; var _class5; var _class6; var _class7; var _class8; var _class9; var _class10; var _class11; var _class12; var _class13; var _class14; var _class15; var _class16; var _class17; var _class18;// src/errors.ts
 var PipRailError = class extends Error {
   constructor(message, options) {
     super(message, options);
@@ -71,30 +71,33 @@ var SettlementError = (_class8 = class extends PipRailError {constructor(...args
 var InvalidEnvelopeError = (_class9 = class extends PipRailError {constructor(...args6) { super(...args6); _class9.prototype.__init9.call(this); }
   __init9() {this.code = "INVALID_ENVELOPE"}
 }, _class9);
-var NoCompatibleAcceptError = (_class10 = class extends PipRailError {constructor(...args7) { super(...args7); _class10.prototype.__init10.call(this); }
-  __init10() {this.code = "NO_COMPATIBLE_ACCEPT"}
+var InvalidConfigError = (_class10 = class extends PipRailError {constructor(...args7) { super(...args7); _class10.prototype.__init10.call(this); }
+  __init10() {this.code = "INVALID_CONFIG"}
 }, _class10);
-var UnsupportedSchemeError = (_class11 = class extends PipRailError {constructor(...args8) { super(...args8); _class11.prototype.__init11.call(this); }
-  __init11() {this.code = "UNSUPPORTED_SCHEME"}
+var NoCompatibleAcceptError = (_class11 = class extends PipRailError {constructor(...args8) { super(...args8); _class11.prototype.__init11.call(this); }
+  __init11() {this.code = "NO_COMPATIBLE_ACCEPT"}
 }, _class11);
-var NonReplayableBodyError = (_class12 = class extends PipRailError {constructor(...args9) { super(...args9); _class12.prototype.__init12.call(this); }
-  __init12() {this.code = "NON_REPLAYABLE_BODY"}
+var UnsupportedSchemeError = (_class12 = class extends PipRailError {constructor(...args9) { super(...args9); _class12.prototype.__init12.call(this); }
+  __init12() {this.code = "UNSUPPORTED_SCHEME"}
 }, _class12);
-var WalletRequiredError = (_class13 = class extends PipRailError {constructor(...args10) { super(...args10); _class13.prototype.__init13.call(this); }
-  __init13() {this.code = "WALLET_REQUIRED"}
+var NonReplayableBodyError = (_class13 = class extends PipRailError {constructor(...args10) { super(...args10); _class13.prototype.__init13.call(this); }
+  __init13() {this.code = "NON_REPLAYABLE_BODY"}
 }, _class13);
-var WrongFamilyError = (_class14 = class extends PipRailError {constructor(...args11) { super(...args11); _class14.prototype.__init14.call(this); }
-  __init14() {this.code = "WRONG_FAMILY"}
+var WalletRequiredError = (_class14 = class extends PipRailError {constructor(...args11) { super(...args11); _class14.prototype.__init14.call(this); }
+  __init14() {this.code = "WALLET_REQUIRED"}
 }, _class14);
-var UnknownTokenError = (_class15 = class extends PipRailError {constructor(...args12) { super(...args12); _class15.prototype.__init15.call(this); }
-  __init15() {this.code = "UNKNOWN_TOKEN"}
+var WrongFamilyError = (_class15 = class extends PipRailError {constructor(...args12) { super(...args12); _class15.prototype.__init15.call(this); }
+  __init15() {this.code = "WRONG_FAMILY"}
 }, _class15);
-var MissingDriverError = (_class16 = class extends PipRailError {constructor(...args13) { super(...args13); _class16.prototype.__init16.call(this); }
-  __init16() {this.code = "MISSING_DRIVER"}
+var UnknownTokenError = (_class16 = class extends PipRailError {constructor(...args13) { super(...args13); _class16.prototype.__init16.call(this); }
+  __init16() {this.code = "UNKNOWN_TOKEN"}
 }, _class16);
-var UnsupportedNetworkError = (_class17 = class extends PipRailError {constructor(...args14) { super(...args14); _class17.prototype.__init17.call(this); }
-  __init17() {this.code = "UNSUPPORTED_NETWORK"}
+var MissingDriverError = (_class17 = class extends PipRailError {constructor(...args14) { super(...args14); _class17.prototype.__init17.call(this); }
+  __init17() {this.code = "MISSING_DRIVER"}
 }, _class17);
+var UnsupportedNetworkError = (_class18 = class extends PipRailError {constructor(...args15) { super(...args15); _class18.prototype.__init18.call(this); }
+  __init18() {this.code = "UNSUPPORTED_NETWORK"}
+}, _class18);
 
 // src/drivers/shared.ts
 var FAMILY_LABEL = {
@@ -159,9 +162,15 @@ function expandScientific(value) {
 }
 function parseUnits(value, decimals) {
   assertValidDecimals(decimals, "parseUnits");
-  value = expandScientific(value);
+  if (typeof value !== "string") {
+    throw new InvalidConfigError(
+      `parseUnits: amount must be a decimal STRING, got ${typeof value}. Pass '0.05', not 0.05.`
+    );
+  }
   if (!/^\d+(\.\d+)?$/.test(value)) {
-    throw new Error(`parseUnits: "${value}" is not a non-negative decimal amount.`);
+    throw new InvalidConfigError(
+      `parseUnits: "${value}" is not a plain non-negative decimal amount (scientific notation like '1e3' is rejected \u2014 write the number out, e.g. '1000').`
+    );
   }
   const [whole, frac = ""] = value.split(".");
   if (frac.length > decimals) {
@@ -242,4 +251,5 @@ function assertNoLegacyWalletKey(wallet, family) {
 
 
 
-exports.PipRailError = PipRailError; exports.InsufficientFundsError = InsufficientFundsError; exports.RecipientNotReadyError = RecipientNotReadyError; exports.toInsufficientFundsError = toInsufficientFundsError; exports.WrongChainError = WrongChainError; exports.PaymentTimeoutError = PaymentTimeoutError; exports.MaxRetriesExceededError = MaxRetriesExceededError; exports.PaymentDeclinedError = PaymentDeclinedError; exports.ConfirmationTimeoutError = ConfirmationTimeoutError; exports.SettlementError = SettlementError; exports.InvalidEnvelopeError = InvalidEnvelopeError; exports.NoCompatibleAcceptError = NoCompatibleAcceptError; exports.UnsupportedSchemeError = UnsupportedSchemeError; exports.NonReplayableBodyError = NonReplayableBodyError; exports.WalletRequiredError = WalletRequiredError; exports.WrongFamilyError = WrongFamilyError; exports.UnknownTokenError = UnknownTokenError; exports.MissingDriverError = MissingDriverError; exports.UnsupportedNetworkError = UnsupportedNetworkError; exports.assertNoLegacyWalletKey = assertNoLegacyWalletKey; exports.rejectForeignToken = rejectForeignToken; exports.MAX_DECIMALS = MAX_DECIMALS; exports.parseUnits = parseUnits; exports.floorUnits = floorUnits; exports.formatUnits = formatUnits; exports.nativeCost = nativeCost;
+
+exports.PipRailError = PipRailError; exports.InsufficientFundsError = InsufficientFundsError; exports.RecipientNotReadyError = RecipientNotReadyError; exports.toInsufficientFundsError = toInsufficientFundsError; exports.WrongChainError = WrongChainError; exports.PaymentTimeoutError = PaymentTimeoutError; exports.MaxRetriesExceededError = MaxRetriesExceededError; exports.PaymentDeclinedError = PaymentDeclinedError; exports.ConfirmationTimeoutError = ConfirmationTimeoutError; exports.SettlementError = SettlementError; exports.InvalidEnvelopeError = InvalidEnvelopeError; exports.InvalidConfigError = InvalidConfigError; exports.NoCompatibleAcceptError = NoCompatibleAcceptError; exports.UnsupportedSchemeError = UnsupportedSchemeError; exports.NonReplayableBodyError = NonReplayableBodyError; exports.WalletRequiredError = WalletRequiredError; exports.WrongFamilyError = WrongFamilyError; exports.UnknownTokenError = UnknownTokenError; exports.MissingDriverError = MissingDriverError; exports.UnsupportedNetworkError = UnsupportedNetworkError; exports.assertNoLegacyWalletKey = assertNoLegacyWalletKey; exports.rejectForeignToken = rejectForeignToken; exports.MAX_DECIMALS = MAX_DECIMALS; exports.parseUnits = parseUnits; exports.floorUnits = floorUnits; exports.formatUnits = formatUnits; exports.nativeCost = nativeCost;

package/dist/{chunk-PAMKCWVW.js → chunk-NUPCFNC5.js}

@@ -71,6 +71,9 @@ var SettlementError = class extends PipRailError {
 var InvalidEnvelopeError = class extends PipRailError {
   code = "INVALID_ENVELOPE";
 };
+var InvalidConfigError = class extends PipRailError {
+  code = "INVALID_CONFIG";
+};
 var NoCompatibleAcceptError = class extends PipRailError {
   code = "NO_COMPATIBLE_ACCEPT";
 };
@@ -159,9 +162,15 @@ function expandScientific(value) {
 }
 function parseUnits(value, decimals) {
   assertValidDecimals(decimals, "parseUnits");
-  value = expandScientific(value);
+  if (typeof value !== "string") {
+    throw new InvalidConfigError(
+      `parseUnits: amount must be a decimal STRING, got ${typeof value}. Pass '0.05', not 0.05.`
+    );
+  }
   if (!/^\d+(\.\d+)?$/.test(value)) {
-    throw new Error(`parseUnits: "${value}" is not a non-negative decimal amount.`);
+    throw new InvalidConfigError(
+      `parseUnits: "${value}" is not a plain non-negative decimal amount (scientific notation like '1e3' is rejected \u2014 write the number out, e.g. '1000').`
+    );
   }
   const [whole, frac = ""] = value.split(".");
   if (frac.length > decimals) {
@@ -227,6 +236,7 @@ export {
   ConfirmationTimeoutError,
   SettlementError,
   InvalidEnvelopeError,
+  InvalidConfigError,
   NoCompatibleAcceptError,
   UnsupportedSchemeError,
   NonReplayableBodyError,