@piprail/sdk 2.2.0 → 2.4.0

package/dist/index.js

@@ -1469,9 +1469,24 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
+    return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
+  }
   if (typeof payload.transaction === "string") {
     return { ...base2, method: "svm", payload: { transaction: payload.transaction } };
   }
+  if (Array.isArray(payload.paymentGroup)) {
+    const group = payload.paymentGroup;
+    const index = payload.paymentIndex;
+    if (group.length === 0 || group.length > 16 || !group.every((t) => typeof t === "string") || typeof index !== "number" || !Number.isInteger(index) || index < 0 || index >= group.length) {
+      return null;
+    }
+    return {
+      ...base2,
+      method: "algorand",
+      payload: { paymentIndex: index, paymentGroup: group }
+    };
+  }
   const signature = payload.signature;
   if (typeof signature !== "string") return null;
   const authorization = payload.authorization;
@@ -1792,6 +1807,9 @@ function makeEvmNetwork(resolved) {
       if ("transaction" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An SVM (Solana) payload was submitted to an EVM exact rail." };
       }
+      if ("paymentGroup" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1816,7 +1834,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await import("./solana-E4MD6JJ6.js");
+      mod = await import("./solana-3FMCWSEE.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -1900,7 +1918,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await import("./aptos-RIL56C7L.js");
+      mod = await import("./aptos-QAAXIUY3.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -1912,7 +1930,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await import("./algorand-GSFVZTBF.js");
+      mod = await import("./algorand-WB6PBJU4.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2008,7 +2026,7 @@ var SLUG_TO_CAIP2 = {
   near: "near:mainnet",
   sui: "sui:mainnet",
   aptos: "aptos:1",
-  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k",
+  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=",
   stellar: "stellar:pubnet",
   xrpl: "xrpl:0"
 };
@@ -3026,7 +3044,7 @@ var PipRailClient = class {
    *   before publishing, so retry with a brief backoff if a fresh listing is missing.
    * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
    *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
    */
   async discover(opts = {}) {
     const found = await searchOpenIndexes({
@@ -3224,7 +3242,7 @@ var PipRailClient = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new UnsupportedSchemeError(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM + Solana today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana + Algorand today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3620,7 +3638,7 @@ var PipRailClient = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new UnsupportedSchemeError(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM + Solana today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana + Algorand today).`
       );
     }
     throwIfAborted(init?.signal);
@@ -4189,7 +4207,8 @@ A 402 may offer up to two rails; you don't choose per payment \u2014 the client
   (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.
 - exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose
   (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It
-  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.
+  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand
+  fee-pooled group) is picked automatically.
 When the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest
 settleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is
 identical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);
@@ -4891,6 +4910,167 @@ async function settleViaFacilitator(input) {
   return { ok: true, receipt };
 }
 
+// src/facilitators.ts
+var KNOWN_FACILITATORS = {
+  // Base (eip155:8453). Every entry is keyless and LIVE-settled by us (a real EIP-3009
+  // exact payment, buyer paid zero ETH) — not just a /supported read — on the dated day.
+  "eip155:8453": [
+    {
+      url: "https://facilitator.payai.network",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009). Verified 2026-06-14 (/supported + live demo)."
+    },
+    {
+      url: "https://facilitator.xpay.sh",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x58a69042a4129be649c5642456752ede95a5ff921daddfd30560ae70ae5907ff). 2nd UVD validation chain (after HyperEVM)."
+    },
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0xdf030e4d5bf41a88c5a3bfe73bb433dfbb90b058d3b8ded63b68e026eedb9de8). Note: ~$0.001 dynamic floor on Base."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x2e41c581af023100429ada81f1371bef82d41dd577ed438d72ddc18676d4213d). Also seeded on Monad + Solana."
+    },
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "GoPlausible \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x9bcbc1f01fe1fd1aed2a79e5582555164cc4185e9800189df378a6b46eb9c59e). 2nd GoPlausible validation chain (after Algorand)."
+    }
+  ],
+  // Monad (eip155:143). Corbits + Ultravioleta DAO each keyless-settle the EVM EIP-3009 exact rail
+  // (Monad's native Circle USDC), buyer paid zero gas — real LIVE settles, not just /supported reads.
+  // Makes `exact: true` zero-config gasless on Monad.
+  "eip155:143": [
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x7797be27ce22c17f7433a0389bd22d46e338899b1faac505fffd068174428ae6)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0xb107576effbaceb5586c07a9ddc996ef2b6d455f1858314995ef83a7c6e64d11). 3rd UVD validation chain."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
+    }
+  ],
+  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
+  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
+  // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
+  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  "eip155:56": [
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+    }
+  ],
+  // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
+  // native Circle USDC), buyer paid zero gas — a real LIVE settle. UVD is the broadest keyless
+  // facilitator (it also lists Celo/Unichain/Optimism/Scroll + many non-EVM); only HyperEVM is
+  // seeded here because THE RULE requires a per-chain live settle, and that's the one we proved.
+  "eip155:999": [
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (HyperEVM native USDC EIP-3009). LIVE-settled on HyperEVM 2026-06-17 (tx 0x56af8148a92a291f0ce362e250919f7742074e5464ac0f315ad68abaec93bd0a)."
+    }
+  ],
+  // Algorand (mainnet, CAIP-2 = full base64 genesis hash). GoPlausible keyless-settles the ratified
+  // x402 Algorand `exact` rail (atomic-group fee pooling): its sponsor pools the whole group fee and
+  // submits, so NEITHER the buyer NOR the merchant pays ALGO — both-sides gasless. LIVE-settled by us
+  // (a real USDCa exact payment; buyer 0 ALGO AND merchant 0 ALGO) — beyond a /supported read. This
+  // makes Algorand a keyless chain (the first non-EVM/non-Solana one). GoPlausible authored the
+  // ratified Algorand scheme; PipRail's group is byte-compatible (the gate sends `amount` + the full
+  // genesis-hash network, which is all GoPlausible needs).
+  "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=": [
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["algorand"],
+      note: "GoPlausible \u2014 keyless, 100% gas-sponsored (Algorand USDCa, atomic-group fee pooling; both buyer AND merchant pay 0 ALGO). LIVE-settled on Algorand mainnet 2026-06-17 (tx PDVDVRFGJAG2K6AJ7L26OTSCSRL7AURVKEX4D4KHBAOLNSCYENXA). The only keyless Algorand x402 facilitator."
+    }
+  ],
+  // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
+  // by us (a real SPL TransferChecked, buyer paid zero SOL) on the dated day — beyond a /supported
+  // read. Daydreams + Questflow are intentionally ABSENT: their /supported is public but /verify
+  // returns 401 (an API key is required), so they are not keyless for settlement.
+  "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp": [
+    {
+      url: "https://facilitator.payai.network",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM). LIVE-settled 2026-06-14 (tx 4dL8jRKH\u2026)."
+    },
+    {
+      url: "https://pay.openfacilitator.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "OpenFacilitator \u2014 keyless (no signup), fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx 5BabDtX\u2026)."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["svm"],
+      note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
+    }
+  ]
+};
+function knownFacilitatorsFor(network) {
+  return KNOWN_FACILITATORS[network] ?? [];
+}
+function firstKeylessFacilitator(network, method) {
+  return knownFacilitatorsFor(network).find(
+    (f) => f.keyless && f.schemes.includes("exact") && (method === void 0 || f.settles.includes(method))
+  );
+}
+
 // src/server.ts
 function toInvalidBody(result) {
   return { x402Version: 2, status: "invalid", error: result.error, detail: result.detail };
@@ -4911,10 +5091,16 @@ function normaliseAccepts(options) {
     "requirePayment: provide either { chain, token, amount } or a non-empty `accept: [{ chain, token, amount }, \u2026]`."
   );
 }
+function normaliseExactOption(exact) {
+  if (!exact) return void 0;
+  if (exact === true) return { settle: "keyless" };
+  return exact;
+}
 function createPaymentGate(options) {
   const minConfirmations = options.minConfirmations ?? 1;
   const maxTimeoutSeconds = options.maxTimeoutSeconds ?? 600;
   const genNonce = options.generateNonce ?? (() => globalThis.crypto.randomUUID());
+  const exactOption = normaliseExactOption(options.exact);
   let resolved;
   function ready() {
     if (resolved) return resolved;
@@ -4934,7 +5120,7 @@ function createPaymentGate(options) {
           const { asset, decimals, symbol } = net.resolveToken(a.token);
           const amountBase = parseUnits(a.amount, decimals);
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
-          if (options.exact) {
+          if (exactOption) {
             const outcome = await resolveExactRail(net, asset);
             if (outcome.rail) spec.exact = outcome.rail;
             else if (outcome.skipReason) exactSkips.push(outcome.skipReason);
@@ -4942,10 +5128,17 @@ function createPaymentGate(options) {
           return spec;
         })
       );
-      if (options.exact && !specs.some((s) => s.exact)) {
-        throw new Error(
-          "requirePayment: `exact` was requested but none of the offered rails support it. " + (exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme. Offer an EVM ERC-20 / Solana SPL token, or drop `exact`.")
-        );
+      if (exactOption && !specs.some((s) => s.exact)) {
+        const why = exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme.";
+        if (exactOption.settle === "keyless") {
+          if (typeof process === "undefined" || !process?.env?.PIPRAIL_NO_HINTS) {
+            console.warn(
+              `[piprail] exact: true \u2014 no offered chain has a gasless \`exact\` rail available, so this gate serves ONCHAIN-PROOF ONLY (buyers PAY GAS \u2014 the fallback when no facilitator can sponsor). ${why} To be gasless: pin \`exact: { settle: { facilitator } }\` or self-settle \`exact: { settle: 'self', relayer }\`. (Suppress with PIPRAIL_NO_HINTS=1.)`
+            );
+          }
+        } else {
+          throw new Error("requirePayment: `exact` was requested but none of the offered rails support it. " + why);
+        }
       }
       return specs;
     })();
@@ -4956,9 +5149,23 @@ function createPaymentGate(options) {
     return p;
   }
   async function resolveExactRail(net, asset) {
-    const cfg = options.exact;
-    const settle = cfg.settle;
+    const cfg = exactOption;
     if (!net.resolveExactRail) return {};
+    let settle = cfg.settle;
+    if (settle === "keyless") {
+      const picked = firstKeylessFacilitator(net.network);
+      if (!picked) {
+        return {
+          skipReason: `${net.network}: \`exact: true\` found no known keyless facilitator for this network. Pass \`exact: { settle: { facilitator } }\`, \`exact: { settle: 'self', relayer }\`, or see the coverage map (KNOWN_FACILITATORS / docs.piprail.com).`
+        };
+      }
+      if (typeof process === "undefined" || process?.env?.NODE_ENV !== "production" && !process?.env?.PIPRAIL_NO_HINTS) {
+        console.warn(
+          `[piprail] exact: keyless rail on ${net.network} auto-settles via ${picked.url} (zero-config; pin \`exact.settle.facilitator\` in production).`
+        );
+      }
+      settle = { facilitator: picked.url };
+    }
     let relayer;
     let feePayer;
     if (settle === "self") {
@@ -4986,7 +5193,7 @@ function createPaymentGate(options) {
     if (settle !== "self" && info.method === "permit2") {
       if (cfg.method === "permit2") {
         throw new Error(
-          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
+          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) / Algorand schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
         );
       }
       return {
@@ -5231,7 +5438,7 @@ function createPaymentGate(options) {
     if (exactSpecs.length === 0) {
       return rejection("transfer_not_found", "This resource offers no standard `exact` rail.");
     }
-    const isCaip = exact.network.startsWith("eip155:");
+    const isCaip = exact.network.includes(":");
     let candidates = isCaip ? exactSpecs.filter((s) => s.net.network === exact.network) : exactSpecs;
     if (exact.asset) {
       candidates = candidates.filter((s) => s.asset.toLowerCase() === exact.asset.toLowerCase());
@@ -5247,12 +5454,28 @@ function createPaymentGate(options) {
     }
     let nonce;
     let evmAuth = null;
-    if ("transaction" in exact.payload) {
+    if ("senderAuth" in exact.payload && "transaction" in exact.payload) {
+      nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
+    } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
       } catch {
         nonce = exact.payload.transaction;
       }
+    } else if ("paymentGroup" in exact.payload) {
+      nonce = exact.payload.paymentGroup.map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5270,6 +5493,13 @@ function createPaymentGate(options) {
       if (mode.kind === "self") {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
+        const ftMethod = accept.extra.assetTransferMethod;
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos";
+        if (needsFeePayer && !accept.extra.feePayer) {
+          throw new SettlementError(
+            `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
+          );
+        }
         result = await settleViaFacilitator({
           url: mode.url,
           ...mode.authHeaders ? { authHeaders: mode.authHeaders } : {},
@@ -5286,9 +5516,7 @@ function createPaymentGate(options) {
             amount: accept.amount,
             payTo: accept.payTo,
             maxTimeoutSeconds: accept.maxTimeoutSeconds,
-            // The scheme's chain-specific `extra`, from the gate's OWN trusted rail: SVM forwards the
-            // facilitator's `feePayer` (the gas sponsor); EVM forwards the token's EIP-712 domain.
-            extra: accept.extra.assetTransferMethod === "svm" ? { feePayer: accept.extra.feePayer ?? "" } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
+            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
           // The buyer address, for the receipt's `payer` fallback. EVM carries it in the
@@ -5330,7 +5558,12 @@ function requirePayment(options) {
     } catch (err) {
       if (err instanceof SettlementError) {
         res.status(502);
-        res.json({ x402Version: 2, error: "settlement_failed", detail: err.message });
+        res.json({
+          x402Version: 2,
+          error: "settlement_failed",
+          detail: err.message,
+          fallback: "The gasless `exact` settlement failed. This resource also accepts the `onchain-proof` scheme \u2014 retry by paying that rail yourself (you broadcast the transfer and pay the gas). It is the fallback when no facilitator can sponsor the gas."
+        });
         return;
       }
       next(err);
@@ -5359,63 +5592,6 @@ function normaliseHeader(value) {
   return value;
 }
 
-// src/facilitators.ts
-var KNOWN_FACILITATORS = {
-  // Base (eip155:8453). Every entry is keyless and LIVE-settled by us (a real EIP-3009
-  // exact payment, buyer paid zero ETH) — not just a /supported read — on the dated day.
-  "eip155:8453": [
-    {
-      url: "https://facilitator.payai.network",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["eip3009"],
-      note: "PayAI \u2014 keyless, sponsors gas (Base USDC EIP-3009). Verified 2026-06-14 (/supported + live demo)."
-    },
-    {
-      url: "https://facilitator.xpay.sh",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["eip3009"],
-      note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
-    }
-  ],
-  // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
-  // by us (a real SPL TransferChecked, buyer paid zero SOL) on the dated day — beyond a /supported
-  // read. Daydreams + Questflow are intentionally ABSENT: their /supported is public but /verify
-  // returns 401 (an API key is required), so they are not keyless for settlement.
-  "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp": [
-    {
-      url: "https://facilitator.payai.network",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "PayAI \u2014 keyless fee-payer sponsor (Solana SPL SVM). LIVE-settled 2026-06-14 (tx 4dL8jRKH\u2026)."
-    },
-    {
-      url: "https://pay.openfacilitator.io",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "OpenFacilitator \u2014 keyless (no signup), fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx 5BabDtX\u2026)."
-    },
-    {
-      url: "https://facilitator.corbits.dev",
-      keyless: true,
-      schemes: ["exact"],
-      settles: ["svm"],
-      note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
-    }
-  ]
-};
-function knownFacilitatorsFor(network) {
-  return KNOWN_FACILITATORS[network] ?? [];
-}
-function firstKeylessFacilitator(network, method) {
-  return knownFacilitatorsFor(network).find(
-    (f) => f.keyless && f.schemes.includes("exact") && (method === void 0 || f.settles.includes(method))
-  );
-}
-
 // src/receipts.ts
 var DEFAULT_RETRIES = 5;
 var DEFAULT_TIMEOUT_MS = 1e4;

package/dist/{solana-E4MD6JJ6.js → solana-3FMCWSEE.js}

@@ -221,6 +221,10 @@ import {
 import bs58 from "bs58";
 var COMPUTE_UNIT_LIMIT = 2e4;
 var COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
+var MAX_COMPUTE_UNIT_LIMIT = 300000n;
+var MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 100000n;
+var CB_SET_UNIT_LIMIT = 2;
+var CB_SET_UNIT_PRICE = 3;
 function tokenProgramFor(accept) {
   return accept.extra.tokenProgram === "token-2022" ? TOKEN_2022_PROGRAM_ID : TOKEN_PROGRAM_ID;
 }
@@ -380,6 +384,22 @@ async function verifyAndSettleExactSolana(input) {
       }
     }
   }
+  for (const ix of message.compiledInstructions) {
+    const ixProgram = keys.get(ix.programIdIndex);
+    if (!ixProgram || !ixProgram.equals(ComputeBudgetProgram.programId)) continue;
+    const data = Buffer.from(ix.data);
+    if (data.length >= 5 && data[0] === CB_SET_UNIT_LIMIT) {
+      const limit = BigInt(data.readUInt32LE(1));
+      if (limit > MAX_COMPUTE_UNIT_LIMIT) {
+        return fail("signature_invalid", `Compute-unit limit ${limit} exceeds the ${MAX_COMPUTE_UNIT_LIMIT} cap (fee-payer drain guard).`);
+      }
+    } else if (data.length >= 9 && data[0] === CB_SET_UNIT_PRICE) {
+      const price = data.readBigUInt64LE(1);
+      if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
+        return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
+      }
+    }
+  }
   const isSignedSigner = (pubkey) => {
     const idx = message.staticAccountKeys.findIndex((k) => k.equals(pubkey));
     return idx >= 1 && idx < message.header.numRequiredSignatures && !isEmptySig(tx.signatures[idx]);

package/dist/{solana-TLHL2KNY.cjs → solana-M3VOHCMO.cjs}

@@ -221,6 +221,10 @@ function notFound(signature) {
 var _bs58 = require('bs58'); var _bs582 = _interopRequireDefault(_bs58);
 var COMPUTE_UNIT_LIMIT = 2e4;
 var COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
+var MAX_COMPUTE_UNIT_LIMIT = 300000n;
+var MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 100000n;
+var CB_SET_UNIT_LIMIT = 2;
+var CB_SET_UNIT_PRICE = 3;
 function tokenProgramFor(accept) {
   return accept.extra.tokenProgram === "token-2022" ? _spltoken.TOKEN_2022_PROGRAM_ID : _spltoken.TOKEN_PROGRAM_ID;
 }
@@ -380,6 +384,22 @@ async function verifyAndSettleExactSolana(input) {
       }
     }
   }
+  for (const ix of message.compiledInstructions) {
+    const ixProgram = keys.get(ix.programIdIndex);
+    if (!ixProgram || !ixProgram.equals(_web3js.ComputeBudgetProgram.programId)) continue;
+    const data = Buffer.from(ix.data);
+    if (data.length >= 5 && data[0] === CB_SET_UNIT_LIMIT) {
+      const limit = BigInt(data.readUInt32LE(1));
+      if (limit > MAX_COMPUTE_UNIT_LIMIT) {
+        return fail("signature_invalid", `Compute-unit limit ${limit} exceeds the ${MAX_COMPUTE_UNIT_LIMIT} cap (fee-payer drain guard).`);
+      }
+    } else if (data.length >= 9 && data[0] === CB_SET_UNIT_PRICE) {
+      const price = data.readBigUInt64LE(1);
+      if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
+        return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
+      }
+    }
+  }
   const isSignedSigner = (pubkey) => {
     const idx = message.staticAccountKeys.findIndex((k) => k.equals(pubkey));
     return idx >= 1 && idx < message.header.numRequiredSignatures && !isEmptySig(tx.signatures[idx]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piprail/sdk",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Accept x402 crypto payments across 29 chains — every major EVM chain plus Solana, TON, Tron, NEAR, Sui, Aptos, Algorand, Stellar & XRPL — in a couple of lines. No backend, no database, no fee; payments settle straight to your wallet.",
   "type": "module",
   "main": "./dist/index.cjs",