@piprail/sdk 2.2.0 → 2.4.0

package/dist/index.cjs

@@ -1469,9 +1469,24 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
+    return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
+  }
   if (typeof payload.transaction === "string") {
     return { ...base2, method: "svm", payload: { transaction: payload.transaction } };
   }
+  if (Array.isArray(payload.paymentGroup)) {
+    const group = payload.paymentGroup;
+    const index = payload.paymentIndex;
+    if (group.length === 0 || group.length > 16 || !group.every((t) => typeof t === "string") || typeof index !== "number" || !Number.isInteger(index) || index < 0 || index >= group.length) {
+      return null;
+    }
+    return {
+      ...base2,
+      method: "algorand",
+      payload: { paymentIndex: index, paymentGroup: group }
+    };
+  }
   const signature = payload.signature;
   if (typeof signature !== "string") return null;
   const authorization = payload.authorization;
@@ -1792,6 +1807,9 @@ function makeEvmNetwork(resolved) {
       if ("transaction" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An SVM (Solana) payload was submitted to an EVM exact rail." };
       }
+      if ("paymentGroup" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1816,7 +1834,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-TLHL2KNY.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-M3VOHCMO.cjs")));
     } catch (cause) {
       throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -1900,7 +1918,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-TRCCJRZA.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-JQMZNTMD.cjs")));
     } catch (cause) {
       throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -1912,7 +1930,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-HZS43N4P.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-TMA62DN2.cjs")));
     } catch (cause) {
       throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2008,7 +2026,7 @@ var SLUG_TO_CAIP2 = {
   near: "near:mainnet",
   sui: "sui:mainnet",
   aptos: "aptos:1",
-  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k",
+  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=",
   stellar: "stellar:pubnet",
   xrpl: "xrpl:0"
 };
@@ -3026,7 +3044,7 @@ var PipRailClient = (_class2 = class {
    *   before publishing, so retry with a brief backoff if a fresh listing is missing.
    * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
    *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
    */
   async discover(opts = {}) {
     const found = await searchOpenIndexes({
@@ -3224,7 +3242,7 @@ var PipRailClient = (_class2 = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM + Solana today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana + Algorand today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3620,7 +3638,7 @@ var PipRailClient = (_class2 = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM + Solana today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana + Algorand today).`
       );
     }
     throwIfAborted(_optionalChain([init, 'optionalAccess', _48 => _48.signal]));
@@ -4189,7 +4207,8 @@ A 402 may offer up to two rails; you don't choose per payment \u2014 the client
   (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.
 - exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose
   (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It
-  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.
+  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand
+  fee-pooled group) is picked automatically.
 When the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest
 settleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is
 identical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);
@@ -4891,6 +4910,167 @@ async function settleViaFacilitator(input) {
   return { ok: true, receipt };
 }
 
+// src/facilitators.ts
+var KNOWN_FACILITATORS = {
+  // Base (eip155:8453). Every entry is keyless and LIVE-settled by us (a real EIP-3009
+  // exact payment, buyer paid zero ETH) — not just a /supported read — on the dated day.
+  "eip155:8453": [
+    {
+      url: "https://facilitator.payai.network",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009). Verified 2026-06-14 (/supported + live demo)."
+    },
+    {
+      url: "https://facilitator.xpay.sh",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x58a69042a4129be649c5642456752ede95a5ff921daddfd30560ae70ae5907ff). 2nd UVD validation chain (after HyperEVM)."
+    },
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0xdf030e4d5bf41a88c5a3bfe73bb433dfbb90b058d3b8ded63b68e026eedb9de8). Note: ~$0.001 dynamic floor on Base."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x2e41c581af023100429ada81f1371bef82d41dd577ed438d72ddc18676d4213d). Also seeded on Monad + Solana."
+    },
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "GoPlausible \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x9bcbc1f01fe1fd1aed2a79e5582555164cc4185e9800189df378a6b46eb9c59e). 2nd GoPlausible validation chain (after Algorand)."
+    }
+  ],
+  // Monad (eip155:143). Corbits + Ultravioleta DAO each keyless-settle the EVM EIP-3009 exact rail
+  // (Monad's native Circle USDC), buyer paid zero gas — real LIVE settles, not just /supported reads.
+  // Makes `exact: true` zero-config gasless on Monad.
+  "eip155:143": [
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x7797be27ce22c17f7433a0389bd22d46e338899b1faac505fffd068174428ae6)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0xb107576effbaceb5586c07a9ddc996ef2b6d455f1858314995ef83a7c6e64d11). 3rd UVD validation chain."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
+    }
+  ],
+  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
+  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
+  // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
+  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  "eip155:56": [
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+    }
+  ],
+  // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
+  // native Circle USDC), buyer paid zero gas — a real LIVE settle. UVD is the broadest keyless
+  // facilitator (it also lists Celo/Unichain/Optimism/Scroll + many non-EVM); only HyperEVM is
+  // seeded here because THE RULE requires a per-chain live settle, and that's the one we proved.
+  "eip155:999": [
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (HyperEVM native USDC EIP-3009). LIVE-settled on HyperEVM 2026-06-17 (tx 0x56af8148a92a291f0ce362e250919f7742074e5464ac0f315ad68abaec93bd0a)."
+    }
+  ],
+  // Algorand (mainnet, CAIP-2 = full base64 genesis hash). GoPlausible keyless-settles the ratified
+  // x402 Algorand `exact` rail (atomic-group fee pooling): its sponsor pools the whole group fee and
+  // submits, so NEITHER the buyer NOR the merchant pays ALGO — both-sides gasless. LIVE-settled by us
+  // (a real USDCa exact payment; buyer 0 ALGO AND merchant 0 ALGO) — beyond a /supported read. This
+  // makes Algorand a keyless chain (the first non-EVM/non-Solana one). GoPlausible authored the
+  // ratified Algorand scheme; PipRail's group is byte-compatible (the gate sends `amount` + the full
+  // genesis-hash network, which is all GoPlausible needs).
+  "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=": [
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["algorand"],
+      note: "GoPlausible \u2014 keyless, 100% gas-sponsored (Algorand USDCa, atomic-group fee pooling; both buyer AND merchant pay 0 ALGO). LIVE-settled on Algorand mainnet 2026-06-17 (tx PDVDVRFGJAG2K6AJ7L26OTSCSRL7AURVKEX4D4KHBAOLNSCYENXA). The only keyless Algorand x402 facilitator."
+    }
+  ],
+  // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
+  // by us (a real SPL TransferChecked, buyer paid zero SOL) on the dated day — beyond a /supported
+  // read. Daydreams + Questflow are intentionally ABSENT: their /supported is public but /verify
+  // returns 401 (an API key is required), so they are not keyless for settlement.
+  "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp": [
+    {
+      url: "https://facilitator.payai.network",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM). LIVE-settled 2026-06-14 (tx 4dL8jRKH\u2026)."
+    },
+    {
+      url: "https://pay.openfacilitator.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "OpenFacilitator \u2014 keyless (no signup), fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx 5BabDtX\u2026)."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
+    }
+  ]
+};
+function knownFacilitatorsFor(network) {
+  return _nullishCoalesce(KNOWN_FACILITATORS[network], () => ( []));
+}
+function firstKeylessFacilitator(network, method) {
+  return knownFacilitatorsFor(network).find(
+    (f) => f.keyless && f.schemes.includes("exact") && (method === void 0 || f.settles.includes(method))
+  );
+}
+
 // src/server.ts
 function toInvalidBody(result) {
   return { x402Version: 2, status: "invalid", error: result.error, detail: result.detail };
@@ -4911,10 +5091,16 @@ function normaliseAccepts(options) {
     "requirePayment: provide either { chain, token, amount } or a non-empty `accept: [{ chain, token, amount }, \u2026]`."
   );
 }
+function normaliseExactOption(exact) {
+  if (!exact) return void 0;
+  if (exact === true) return { settle: "keyless" };
+  return exact;
+}
 function createPaymentGate(options) {
   const minConfirmations = _nullishCoalesce(options.minConfirmations, () => ( 1));
   const maxTimeoutSeconds = _nullishCoalesce(options.maxTimeoutSeconds, () => ( 600));
   const genNonce = _nullishCoalesce(options.generateNonce, () => ( (() => globalThis.crypto.randomUUID())));
+  const exactOption = normaliseExactOption(options.exact);
   let resolved;
   function ready() {
     if (resolved) return resolved;
@@ -4934,7 +5120,7 @@ function createPaymentGate(options) {
           const { asset, decimals, symbol } = net.resolveToken(a.token);
           const amountBase = _chunkJG6KRAW6cjs.parseUnits.call(void 0, a.amount, decimals);
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
-          if (options.exact) {
+          if (exactOption) {
             const outcome = await resolveExactRail(net, asset);
             if (outcome.rail) spec.exact = outcome.rail;
             else if (outcome.skipReason) exactSkips.push(outcome.skipReason);
@@ -4942,10 +5128,17 @@ function createPaymentGate(options) {
           return spec;
         })
       );
-      if (options.exact && !specs.some((s) => s.exact)) {
-        throw new Error(
-          "requirePayment: `exact` was requested but none of the offered rails support it. " + (exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme. Offer an EVM ERC-20 / Solana SPL token, or drop `exact`.")
-        );
+      if (exactOption && !specs.some((s) => s.exact)) {
+        const why = exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme.";
+        if (exactOption.settle === "keyless") {
+          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _81 => _81.env, 'optionalAccess', _82 => _82.PIPRAIL_NO_HINTS])) {
+            console.warn(
+              `[piprail] exact: true \u2014 no offered chain has a gasless \`exact\` rail available, so this gate serves ONCHAIN-PROOF ONLY (buyers PAY GAS \u2014 the fallback when no facilitator can sponsor). ${why} To be gasless: pin \`exact: { settle: { facilitator } }\` or self-settle \`exact: { settle: 'self', relayer }\`. (Suppress with PIPRAIL_NO_HINTS=1.)`
+            );
+          }
+        } else {
+          throw new Error("requirePayment: `exact` was requested but none of the offered rails support it. " + why);
+        }
       }
       return specs;
     })();
@@ -4956,9 +5149,23 @@ function createPaymentGate(options) {
     return p;
   }
   async function resolveExactRail(net, asset) {
-    const cfg = options.exact;
-    const settle = cfg.settle;
+    const cfg = exactOption;
     if (!net.resolveExactRail) return {};
+    let settle = cfg.settle;
+    if (settle === "keyless") {
+      const picked = firstKeylessFacilitator(net.network);
+      if (!picked) {
+        return {
+          skipReason: `${net.network}: \`exact: true\` found no known keyless facilitator for this network. Pass \`exact: { settle: { facilitator } }\`, \`exact: { settle: 'self', relayer }\`, or see the coverage map (KNOWN_FACILITATORS / docs.piprail.com).`
+        };
+      }
+      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _83 => _83.env, 'optionalAccess', _84 => _84.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _85 => _85.env, 'optionalAccess', _86 => _86.PIPRAIL_NO_HINTS])) {
+        console.warn(
+          `[piprail] exact: keyless rail on ${net.network} auto-settles via ${picked.url} (zero-config; pin \`exact.settle.facilitator\` in production).`
+        );
+      }
+      settle = { facilitator: picked.url };
+    }
     let relayer;
     let feePayer;
     if (settle === "self") {
@@ -4986,7 +5193,7 @@ function createPaymentGate(options) {
     if (settle !== "self" && info.method === "permit2") {
       if (cfg.method === "permit2") {
         throw new Error(
-          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
+          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) / Algorand schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
         );
       }
       return {
@@ -5086,7 +5293,7 @@ function createPaymentGate(options) {
       instruction: describeChallenge({ x402Version: 2, resource: { url: resourceUrl }, accepts }),
       ...endpointInfo ? { endpoint: endpointInfo } : {}
     });
-    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _81 => _81.extensions]), () => ( {}));
+    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _87 => _87.extensions]), () => ( {}));
     const rejectionPiprail = _nullishCoalesce(rejectionExt.piprail, () => ( {}));
     const bodyPiprail = { ..._nullishCoalesce(selfDescribe, () => ( {})), ...rejectionPiprail };
     const bodyExtensions = {
@@ -5106,7 +5313,7 @@ function createPaymentGate(options) {
         ...options.mimeType ? { mimeType: options.mimeType } : {}
       },
       accepts,
-      ..._optionalChain([opts, 'optionalAccess', _82 => _82.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _88 => _88.error]) ? { error: opts.error } : {},
       ...Object.keys(bodyExtensions).length > 0 ? { extensions: bodyExtensions } : {}
     };
     const headerChallenge = {
@@ -5231,7 +5438,7 @@ function createPaymentGate(options) {
     if (exactSpecs.length === 0) {
       return rejection("transfer_not_found", "This resource offers no standard `exact` rail.");
     }
-    const isCaip = exact.network.startsWith("eip155:");
+    const isCaip = exact.network.includes(":");
     let candidates = isCaip ? exactSpecs.filter((s) => s.net.network === exact.network) : exactSpecs;
     if (exact.asset) {
       candidates = candidates.filter((s) => s.asset.toLowerCase() === exact.asset.toLowerCase());
@@ -5247,12 +5454,28 @@ function createPaymentGate(options) {
     }
     let nonce;
     let evmAuth = null;
-    if ("transaction" in exact.payload) {
+    if ("senderAuth" in exact.payload && "transaction" in exact.payload) {
+      nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch (e38) {
+          return t;
+        }
+      }).join("|");
+    } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
-      } catch (e38) {
+      } catch (e39) {
         nonce = exact.payload.transaction;
       }
+    } else if ("paymentGroup" in exact.payload) {
+      nonce = exact.payload.paymentGroup.map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch (e40) {
+          return t;
+        }
+      }).join("|");
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5270,6 +5493,13 @@ function createPaymentGate(options) {
       if (mode.kind === "self") {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
+        const ftMethod = accept.extra.assetTransferMethod;
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos";
+        if (needsFeePayer && !accept.extra.feePayer) {
+          throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+            `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
+          );
+        }
         result = await settleViaFacilitator({
           url: mode.url,
           ...mode.authHeaders ? { authHeaders: mode.authHeaders } : {},
@@ -5286,9 +5516,7 @@ function createPaymentGate(options) {
             amount: accept.amount,
             payTo: accept.payTo,
             maxTimeoutSeconds: accept.maxTimeoutSeconds,
-            // The scheme's chain-specific `extra`, from the gate's OWN trusted rail: SVM forwards the
-            // facilitator's `feePayer` (the gas sponsor); EVM forwards the token's EIP-712 domain.
-            extra: accept.extra.assetTransferMethod === "svm" ? { feePayer: _nullishCoalesce(accept.extra.feePayer, () => ( "")) } : { name: _nullishCoalesce(accept.extra.name, () => ( "")), version: _nullishCoalesce(accept.extra.version, () => ( "")) }
+            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: _nullishCoalesce(accept.extra.name, () => ( "")), version: _nullishCoalesce(accept.extra.version, () => ( "")) }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
           // The buyer address, for the receipt's `payer` fallback. EVM carries it in the
@@ -5330,7 +5558,12 @@ function requirePayment(options) {
     } catch (err) {
       if (err instanceof _chunkJG6KRAW6cjs.SettlementError) {
         res.status(502);
-        res.json({ x402Version: 2, error: "settlement_failed", detail: err.message });
+        res.json({
+          x402Version: 2,
+          error: "settlement_failed",
+          detail: err.message,
+          fallback: "The gasless `exact` settlement failed. This resource also accepts the `onchain-proof` scheme \u2014 retry by paying that rail yourself (you broadcast the transfer and pay the gas). It is the fallback when no facilitator can sponsor the gas."
+        });
         return;
       }
       next(err);
@@ -5359,63 +5592,6 @@ function normaliseHeader(value) {
   return value;
 }
 
-// src/facilitators.ts
-var KNOWN_FACILITATORS = {
-  // Base (eip155:8453). Every entry is keyless and LIVE-settled by us (a real EIP-3009
-  // exact payment, buyer paid zero ETH) — not just a /supported read — on the dated day.
-  "eip155:8453": [
-    {
-      url: "https://facilitator.payai.network",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["eip3009"],
-      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009). Verified 2026-06-14 (/supported + live demo)."
-    },
-    {
-      url: "https://facilitator.xpay.sh",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["eip3009"],
-      note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
-    }
-  ],
-  // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
-  // by us (a real SPL TransferChecked, buyer paid zero SOL) on the dated day — beyond a /supported
-  // read. Daydreams + Questflow are intentionally ABSENT: their /supported is public but /verify
-  // returns 401 (an API key is required), so they are not keyless for settlement.
-  "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp": [
-    {
-      url: "https://facilitator.payai.network",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM). LIVE-settled 2026-06-14 (tx 4dL8jRKH\u2026)."
-    },
-    {
-      url: "https://pay.openfacilitator.io",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "OpenFacilitator \u2014 keyless (no signup), fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx 5BabDtX\u2026)."
-    },
-    {
-      url: "https://facilitator.corbits.dev",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
-    }
-  ]
-};
-function knownFacilitatorsFor(network) {
-  return _nullishCoalesce(KNOWN_FACILITATORS[network], () => ( []));
-}
-function firstKeylessFacilitator(network, method) {
-  return knownFacilitatorsFor(network).find(
-    (f) => f.keyless && f.schemes.includes("exact") && (method === void 0 || f.settles.includes(method))
-  );
-}
-
 // src/receipts.ts
 var DEFAULT_RETRIES = 5;
 var DEFAULT_TIMEOUT_MS = 1e4;
@@ -5428,7 +5604,7 @@ function isRetryableStatus(status) {
 }
 var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
 async function signBody(secret, body) {
-  const subtle = _optionalChain([globalThis, 'access', _83 => _83.crypto, 'optionalAccess', _84 => _84.subtle]);
+  const subtle = _optionalChain([globalThis, 'access', _89 => _89.crypto, 'optionalAccess', _90 => _90.subtle]);
   if (!subtle) return null;
   try {
     const enc = new TextEncoder();
@@ -5438,7 +5614,7 @@ async function signBody(secret, body) {
     const sig = await subtle.sign("HMAC", key, enc.encode(body));
     const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
     return `sha256=${hex}`;
-  } catch (e39) {
+  } catch (e41) {
     return null;
   }
 }
@@ -5498,8 +5674,8 @@ async function deliverReceipt(receipt, options) {
     const retryable = status === void 0 ? true : isRetryableStatus(status);
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
-      _optionalChain([onAttempt, 'optionalCall', _85 => _85({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
-    } catch (e40) {
+      _optionalChain([onAttempt, 'optionalCall', _91 => _91({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+    } catch (e42) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
     if (!willRetry) {