@piprail/sdk 2.3.0 → 2.4.0

package/dist/index.d.ts

@@ -88,8 +88,14 @@ interface X402ExactAcceptEntry {
          *  `spender` is the canonical x402ExactPermit2Proxy and whose `witness.to` binds the
          *  recipient. **Solana (SVM): `'svm'`** — the payer partial-signs an SPL
          *  `TransferChecked` transaction whose fee payer is the merchant (`feePayer` below),
-         *  and the gate co-signs as fee payer + broadcasts. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm';
+         *  and the gate co-signs as fee payer + broadcasts. **Algorand: `'algorand'`** — the payer
+         *  signs an ASA `axfer` to `payTo` at fee 0, atomically grouped with a 0-ALGO `pay` from
+         *  the `feePayer` that pools the group fee (per `scheme_exact_algo.md`); the gate (or a
+         *  keyless facilitator) signs that fee txn + submits. **Aptos: `'aptos'`** — the payer signs a
+         *  fee-payer (sponsored) `primary_fungible_store::transfer` to `payTo` (per
+         *  `scheme_exact_aptos.md`); the gate (or a keyless facilitator) adds the fee-payer signature
+         *  + submits, paying gas. PipRail self-settles ALL. */
+        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate
@@ -97,11 +103,12 @@ interface X402ExactAcceptEntry {
         name?: string;
         /** EIP-712 domain version of the token (USDC: "2"). OPTIONAL (see `name`); read/re-derived on-chain. */
         version?: string;
-        /** **SVM only** — the merchant's fee-payer (sponsor) public key (base58), per the
-         *  x402 `exact` SVM scheme. The buyer compiles the transaction with this account as
-         *  the fee payer (so the buyer spends zero SOL on the network fee), leaving its
-         *  signature slot empty; the gate fills it and broadcasts. Distinct from `payTo` —
-         *  the fee payer must never appear in any instruction's accounts (a MUST-rule). */
+        /** **SVM / Algorand / Aptos** — the fee-payer (gas sponsor) address. The buyer builds the
+         *  transaction with this account as the gas payer (so the buyer spends ZERO native coin),
+         *  leaving its signature for whoever sponsors; the gate (self mode) or a keyless facilitator
+         *  fills it and submits. On **SVM** it must differ from `payTo` (the fee payer must never
+         *  appear in an instruction — a MUST-rule); on **Algorand/Aptos** the fee txn/signature is
+         *  separate from the transfer, so `feePayer === payTo` is allowed. */
         feePayer?: string;
         /** **SVM only, OPTIONAL** — a ≤256-byte reconciliation memo the buyer attaches to the
          *  transaction (the SVM scheme's optional `extra.memo`). */
@@ -216,9 +223,41 @@ interface Permit2PaymentPayload {
 interface ExactSvmPaymentPayload {
     transaction: string;
 }
+/**
+ * The `payload` a client sends for the **Algorand `exact`** variant, per
+ * `scheme_exact_algo.md`: an atomically-grouped set of base64-encoded msgpack transactions,
+ * and the index within it of the transaction that pays the resource server. The buyer's ASA
+ * `axfer` (to `payTo`, fee 0) is SIGNED; a 0-ALGO `pay` from the `feePayer` that pools the
+ * group fee is left UNSIGNED for whoever sponsors (the gate's relayer in self mode, or a
+ * keyless facilitator). The group itself IS the proof — there's no separate authorization
+ * object (the Algorand analogue of EIP-3009's `authorization` / SVM's `transaction`).
+ */
+interface ExactAlgorandPaymentPayload {
+    /** Index into `paymentGroup` of the txn that pays the resource server (the buyer's `axfer`). */
+    paymentIndex: number;
+    /** The atomic group: each element is a base64-encoded, msgpack-encoded (signed or unsigned)
+     *  Algorand transaction. ≤ 16 elements (the protocol's atomic-group cap). */
+    paymentGroup: string[];
+}
+/**
+ * The `payload` a client sends for the **Aptos `exact`** variant, per `scheme_exact_aptos.md`:
+ * a fee-payer (sponsored, AIP-39) `primary_fungible_store::transfer`. `transaction` is the base64
+ * BCS-serialized `SimpleTransaction` (raw tx + the bound `feePayerAddress`); `senderAuth` is the
+ * base64 BCS-serialized buyer (sender) authenticator. The buyer leaves the fee-payer signature for
+ * whoever sponsors (the gate's relayer in self mode, or a keyless facilitator), who adds it +
+ * submits. The (tx + sender authenticator) IS the proof — there's no separate `authorization`
+ * object (the Aptos analogue of EIP-3009's `authorization` / SVM's `transaction`). The two-field
+ * shape (a `senderAuth` alongside `transaction`) also distinguishes it from the SVM payload.
+ */
+interface ExactAptosPaymentPayload {
+    /** Base64 BCS-serialized `SimpleTransaction` (raw transaction + the bound `feePayerAddress`). */
+    transaction: string;
+    /** Base64 BCS-serialized buyer (sender) `AccountAuthenticator`. */
+    senderAuth: string;
+}
 /** Any `exact`-rail payload shape — EIP-3009 (`authorization`), Permit2 (`permit2Authorization`),
- *  or SVM (`transaction`). */
-type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload;
+ *  SVM (`transaction`), Algorand (`paymentGroup`), or Aptos (`transaction` + `senderAuth`). */
+type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload;
 interface ParsedExactBase {
     x402Version: number;
     /** The client's claimed network (slug or CAIP-2) — for matching, not trust. */
@@ -236,7 +275,9 @@ interface ParsedExactBase {
  * re-derives every verified field from its own trusted rail. A discriminated union on
  * `method`, so narrowing on `method` narrows `payload`: `'eip3009'` → {@link ExactPaymentPayload}
  * (`authorization`), `'permit2'` → {@link Permit2PaymentPayload} (`permit2Authorization`),
- * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`).
+ * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`), `'algorand'` →
+ * {@link ExactAlgorandPaymentPayload} (`paymentGroup`); `'aptos'` →
+ * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`).
  */
 type ParsedExactPayment = (ParsedExactBase & {
     method: 'eip3009';
@@ -247,6 +288,12 @@ type ParsedExactPayment = (ParsedExactBase & {
 }) | (ParsedExactBase & {
     method: 'svm';
     payload: ExactSvmPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'algorand';
+    payload: ExactAlgorandPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'aptos';
+    payload: ExactAptosPaymentPayload;
 });
 interface X402Receipt {
     scheme: 'onchain-proof' | 'exact';
@@ -4266,9 +4313,10 @@ interface DiscoverySigner {
  * chain-agnostic — it never names a family, it just merges `extra`.
  */
 interface ExactRailInfo {
-    method: 'eip3009' | 'permit2' | 'svm';
+    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
     /** Family-specific `extra` keys merged into the exact accept (e.g. `{ name, version }`
-     *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana). */
+     *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana, `{ feePayer }` for
+     *  Algorand/Aptos). */
     extra?: Record<string, unknown>;
 }
 /**
@@ -4349,7 +4397,7 @@ interface ResolvedNetwork {
         reason?: RecipientReason;
     }>;
     /**
-     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM) — the BUYER counterpart to {@link settleExactSelf}.
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM + Algorand + Aptos) — the BUYER counterpart to {@link settleExactSelf}.
      * Build + EIP-712-sign an EIP-3009 `transferWithAuthorization` for a standard x402
      * `exact` rail, so a PipRail agent can PAY any standard x402 server (not just PipRail's
      * own `onchain-proof` gates). The client frames the returned `payload` + `accepted` echo
@@ -4404,7 +4452,7 @@ interface ResolvedNetwork {
      * (the merchant's own bound self-settle wallet, in self mode); `feePayer` takes precedence.
      * RPC-read (EVM reads the token's EIP-712 domain; Solana reads the mint's token program); MAY
      * throw a typed config error for an explicitly-requested-but-unsupported method (EVM does). A
-     * family that omits this method offers no `exact` rail (today: every non-EVM, non-Solana family).
+     * family that omits this method offers no `exact` rail (today: every family except EVM, Solana, Algorand, and Aptos).
      */
     resolveExactRail?(input: {
         asset: string;
@@ -4438,10 +4486,12 @@ interface ResolvedNetwork {
      */
     exactPermit2Supported?(): boolean;
     /**
-     * OPTIONAL (EVM-only today) — verify a standard x402 `exact` (EIP-3009) payment
-     * locally, then SELF-SETTLE it by broadcasting `transferWithAuthorization` from the
-     * merchant's own `relayer` wallet (the merchant pays gas to receive; the signature
-     * binds `to`, so no redirect risk). RETURNS a `VerifyResult`:
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM + Algorand + Aptos) — verify a standard x402 `exact`
+     * payment locally, then SELF-SETTLE it by broadcasting from the merchant's own `relayer`
+     * wallet (the merchant pays the network fee to receive; EVM broadcasts
+     * `transferWithAuthorization`, Solana co-signs the fee payer, Algorand signs the pooled fee
+     * txn + submits the group, Aptos adds the fee-payer signature + submits — the transfer
+     * binds `payTo`, so no redirect risk). RETURNS a `VerifyResult`:
      *   - `{ ok:false, error }` for a CLIENT-fixable fault (bad signature, expired,
      *     wrong recipient/amount, used nonce, simulation revert) → gate replies 402;
      *   - `{ ok:true, receipt }` once the settle tx is mined.
@@ -4930,7 +4980,7 @@ interface SpendSummary {
 }
 
 /** The payment schemes a client can settle: PipRail's native `onchain-proof` (the
- *  default) and the standard x402 `exact` rail (EVM EIP-3009/Permit2 + Solana SVM, opt-in). */
+ *  default) and the standard x402 `exact` rail (EVM EIP-3009/Permit2 + Solana SVM + Algorand, opt-in). */
 type PaymentScheme = 'onchain-proof' | 'exact';
 
 /** Observability events. `ref` is the proof — a chain-specific id (EVM tx hash, Solana signature, TON locator, Stellar tx hash). */
@@ -5485,7 +5535,7 @@ declare class PipRailClient {
      *   before publishing, so retry with a brief backoff if a fresh listing is missing.
      * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
      *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-     *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+     *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
      */
     discover(opts?: DiscoverOptions): Promise<DiscoveredResource[]>;
     /**
@@ -5902,7 +5952,7 @@ declare function describeChallenge(challenge: X402Challenge): string;
  * literally, so a wrong name or order actively misleads. A test pins the load-
  * bearing phrases.
  */
-declare const PIPRAIL_AGENT_GUIDE = "# Paying with PipRail \u2014 the agent contract\n\nYou can pay for x402 \"402 Payment Required\" resources autonomously. Money moves\nstraight from your wallet to the server; PipRail custodies nothing. Follow this.\n\n## Landing cold \u2014 read the self-description\nEvery PipRail 402 self-describes. Read challenge.extensions.piprail for { name, what, pay[]\n(each rail's how-to-pay), sdk.install, mcp, docs } \u2014 never guess what an endpoint is. If your\ntooling can't pay a rail (e.g. a stock x402 client can't pay the onchain-proof scheme), the\nblock says how: install @piprail/sdk (npm i @piprail/sdk) or run the MCP (npx -y @piprail/mcp)\nand pay with the tools below.\n\n## The loop: quote \u2192 plan \u2192 pay\n1. piprail_quote_payment(url) \u2014 PRICE it. Returns the amount, token, chain, and\n   whether it is within your spend policy. No funds move. Use it to decide if a\n   resource is worth buying.\n2. piprail_plan_payment(url) \u2014 can I afford it NOW? Reads your balance, native gas,\n   and recipient-readiness across every rail, and returns { payable, best,\n   fundingHint, session? }. If payable is false, do NOT attempt the payment \u2014\n   fundingHint says exactly what to fix.\n3. piprail_pay_request(url, method?, body?) \u2014 PAY (only if the plan was payable)\n   and return the result.\nAlways plan before you pay so you never commit to a payment you cannot finish.\n\n## Gasless \u2014 the exact rail (zero gas for you)\nA 402 may offer up to two rails; you don't choose per payment \u2014 the client does, automatically:\n- onchain-proof (PipRail's default): you broadcast the payment yourself and pay the network gas\n  (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.\n- exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose\n  (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It\n  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.\nWhen the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest\nsettleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is\nidentical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);\nyou can't enable it yourself, but you can report when a 402 needs it (see UNSUPPORTED_SCHEME below).\n\n## Reading a refusal \u2014 never crash, never double-spend\nA failed pay returns a STRUCTURED object, never a thrown error you must catch:\n  { ok:false, code, reason, explain, ref?, reasonCode?, declined? }\nBranch on `code` (always reliable). Key cases:\n- declined:true with reasonCode:'SESSION_EXPIRED' \u2014 your time budget is over. This\n  is TERMINAL: STOP. Do not retry ANY payment this process; it cannot be undone\n  without a restart / a longer TTL.\n- declined:true with reasonCode:'APPROVAL' \u2014 a human (or hook) declined this\n  payment. Terminal for this pay: do NOT auto-retry \u2014 they said no, or no one\n  answered.\n- declined:true with reasonCode:'OUTSIDE_WINDOW' \u2014 your rolling rate-limit is\n  exhausted. Wait for it to free, then retry; do not raise the amount.\n- declined:true with reasonCode:'POLICY' or 'BUDGET' \u2014 a spend cap or allowlist\n  refused it. Don't retry the same payment; pick a cheaper/allowed one.\n- code:'INSUFFICIENT_FUNDS' \u2014 top up the wallet (token and/or native gas), retry.\n- code:'PAYMENT_TIMEOUT' / 'MAX_RETRIES_EXCEEDED' / 'CONFIRMATION_TIMEOUT' \u2014 the\n  payment may ALREADY be on-chain. Recover using the proof on `.ref` (re-verify\n  or re-submit it); never re-pay \u2014 a fresh payment would double-spend. On a gasless\n  exact rail `.ref` is the authorization NONCE, not a tx hash: re-present the SAME\n  signed authorization, never sign a fresh one (that would risk a double-spend).\n- code:'NO_COMPATIBLE_ACCEPT' / 'UNSUPPORTED_SCHEME' \u2014 the 402 isn't payable on\n  your chain/scheme; `explain` says whether it's the wrong chain or a scheme to enable.\n  If it's a standard x402 server offering an exact rail, that's a config fix the operator makes\n  once (enable the exact scheme); report it, don't retry the same call blindly.\n\n## Knowing your leash \u2014 call piprail_budget\npiprail_budget tells you how much budget and time you have left, per\n(network, asset), plus your spend so far. Read-only; moves no funds. Use it in\nMode A to self-check before paying.\n\n## Two modes\n- Mode A (headless, default): you run FREE inside a pre-set budget + time\n  envelope. The policy IS the consent \u2014 there is no per-payment prompt. Stay\n  inside it; piprail_budget shows what's left.\n- Mode B (supervised): the host may ask a human to approve each payment. A\n  decline/cancel/timeout comes back as declined:true (reasonCode:'APPROVAL') \u2014\n  do NOT retry it as if it were a transient error.\n\n## Hard facts\n- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014\n  budgets aren't summed across tokens (no price oracle).\n- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart\n  (a convenience, not a durable ledger).\n";
+declare const PIPRAIL_AGENT_GUIDE = "# Paying with PipRail \u2014 the agent contract\n\nYou can pay for x402 \"402 Payment Required\" resources autonomously. Money moves\nstraight from your wallet to the server; PipRail custodies nothing. Follow this.\n\n## Landing cold \u2014 read the self-description\nEvery PipRail 402 self-describes. Read challenge.extensions.piprail for { name, what, pay[]\n(each rail's how-to-pay), sdk.install, mcp, docs } \u2014 never guess what an endpoint is. If your\ntooling can't pay a rail (e.g. a stock x402 client can't pay the onchain-proof scheme), the\nblock says how: install @piprail/sdk (npm i @piprail/sdk) or run the MCP (npx -y @piprail/mcp)\nand pay with the tools below.\n\n## The loop: quote \u2192 plan \u2192 pay\n1. piprail_quote_payment(url) \u2014 PRICE it. Returns the amount, token, chain, and\n   whether it is within your spend policy. No funds move. Use it to decide if a\n   resource is worth buying.\n2. piprail_plan_payment(url) \u2014 can I afford it NOW? Reads your balance, native gas,\n   and recipient-readiness across every rail, and returns { payable, best,\n   fundingHint, session? }. If payable is false, do NOT attempt the payment \u2014\n   fundingHint says exactly what to fix.\n3. piprail_pay_request(url, method?, body?) \u2014 PAY (only if the plan was payable)\n   and return the result.\nAlways plan before you pay so you never commit to a payment you cannot finish.\n\n## Gasless \u2014 the exact rail (zero gas for you)\nA 402 may offer up to two rails; you don't choose per payment \u2014 the client does, automatically:\n- onchain-proof (PipRail's default): you broadcast the payment yourself and pay the network gas\n  (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.\n- exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose\n  (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It\n  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand\n  fee-pooled group) is picked automatically.\nWhen the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest\nsettleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is\nidentical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);\nyou can't enable it yourself, but you can report when a 402 needs it (see UNSUPPORTED_SCHEME below).\n\n## Reading a refusal \u2014 never crash, never double-spend\nA failed pay returns a STRUCTURED object, never a thrown error you must catch:\n  { ok:false, code, reason, explain, ref?, reasonCode?, declined? }\nBranch on `code` (always reliable). Key cases:\n- declined:true with reasonCode:'SESSION_EXPIRED' \u2014 your time budget is over. This\n  is TERMINAL: STOP. Do not retry ANY payment this process; it cannot be undone\n  without a restart / a longer TTL.\n- declined:true with reasonCode:'APPROVAL' \u2014 a human (or hook) declined this\n  payment. Terminal for this pay: do NOT auto-retry \u2014 they said no, or no one\n  answered.\n- declined:true with reasonCode:'OUTSIDE_WINDOW' \u2014 your rolling rate-limit is\n  exhausted. Wait for it to free, then retry; do not raise the amount.\n- declined:true with reasonCode:'POLICY' or 'BUDGET' \u2014 a spend cap or allowlist\n  refused it. Don't retry the same payment; pick a cheaper/allowed one.\n- code:'INSUFFICIENT_FUNDS' \u2014 top up the wallet (token and/or native gas), retry.\n- code:'PAYMENT_TIMEOUT' / 'MAX_RETRIES_EXCEEDED' / 'CONFIRMATION_TIMEOUT' \u2014 the\n  payment may ALREADY be on-chain. Recover using the proof on `.ref` (re-verify\n  or re-submit it); never re-pay \u2014 a fresh payment would double-spend. On a gasless\n  exact rail `.ref` is the authorization NONCE, not a tx hash: re-present the SAME\n  signed authorization, never sign a fresh one (that would risk a double-spend).\n- code:'NO_COMPATIBLE_ACCEPT' / 'UNSUPPORTED_SCHEME' \u2014 the 402 isn't payable on\n  your chain/scheme; `explain` says whether it's the wrong chain or a scheme to enable.\n  If it's a standard x402 server offering an exact rail, that's a config fix the operator makes\n  once (enable the exact scheme); report it, don't retry the same call blindly.\n\n## Knowing your leash \u2014 call piprail_budget\npiprail_budget tells you how much budget and time you have left, per\n(network, asset), plus your spend so far. Read-only; moves no funds. Use it in\nMode A to self-check before paying.\n\n## Two modes\n- Mode A (headless, default): you run FREE inside a pre-set budget + time\n  envelope. The policy IS the consent \u2014 there is no per-payment prompt. Stay\n  inside it; piprail_budget shows what's left.\n- Mode B (supervised): the host may ask a human to approve each payment. A\n  decline/cancel/timeout comes back as declined:true (reasonCode:'APPROVAL') \u2014\n  do NOT retry it as if it were a transient error.\n\n## Hard facts\n- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014\n  budgets aren't summed across tokens (no price oracle).\n- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart\n  (a convenience, not a durable ledger).\n";
 /** Returns {@link PIPRAIL_AGENT_GUIDE} (a parity accessor for callers that prefer a function). */
 declare function agentGuide(): string;
 
@@ -6709,7 +6759,7 @@ interface KnownFacilitator {
     /** The x402 schemes it settles (today only `exact`). */
     schemes: ReadonlyArray<'exact'>;
     /** The exact transfer methods it can settle on this network. */
-    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm'>;
+    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'>;
     /** A short human note (who it is / caveat). */
     note?: string;
 }
@@ -6730,7 +6780,7 @@ declare function knownFacilitatorsFor(network: Caip2): ReadonlyArray<KnownFacili
  * specific transfer `method`). Returns `undefined` when none is known — the `exact: true`
  * shorthand branches on that to throw a coverage-specific guidance error.
  */
-declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm'): KnownFacilitator | undefined;
+declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'): KnownFacilitator | undefined;
 
 /**
  * Reliable receipt delivery — the durable webhook a stateless gate can't be.

package/dist/index.js

@@ -1469,9 +1469,24 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
+    return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
+  }
   if (typeof payload.transaction === "string") {
     return { ...base2, method: "svm", payload: { transaction: payload.transaction } };
   }
+  if (Array.isArray(payload.paymentGroup)) {
+    const group = payload.paymentGroup;
+    const index = payload.paymentIndex;
+    if (group.length === 0 || group.length > 16 || !group.every((t) => typeof t === "string") || typeof index !== "number" || !Number.isInteger(index) || index < 0 || index >= group.length) {
+      return null;
+    }
+    return {
+      ...base2,
+      method: "algorand",
+      payload: { paymentIndex: index, paymentGroup: group }
+    };
+  }
   const signature = payload.signature;
   if (typeof signature !== "string") return null;
   const authorization = payload.authorization;
@@ -1792,6 +1807,9 @@ function makeEvmNetwork(resolved) {
       if ("transaction" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An SVM (Solana) payload was submitted to an EVM exact rail." };
       }
+      if ("paymentGroup" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1816,7 +1834,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await import("./solana-E4MD6JJ6.js");
+      mod = await import("./solana-3FMCWSEE.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -1900,7 +1918,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await import("./aptos-RIL56C7L.js");
+      mod = await import("./aptos-QAAXIUY3.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -1912,7 +1930,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await import("./algorand-GSFVZTBF.js");
+      mod = await import("./algorand-WB6PBJU4.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2008,7 +2026,7 @@ var SLUG_TO_CAIP2 = {
   near: "near:mainnet",
   sui: "sui:mainnet",
   aptos: "aptos:1",
-  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k",
+  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=",
   stellar: "stellar:pubnet",
   xrpl: "xrpl:0"
 };
@@ -3026,7 +3044,7 @@ var PipRailClient = class {
    *   before publishing, so retry with a brief backoff if a fresh listing is missing.
    * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
    *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
    */
   async discover(opts = {}) {
     const found = await searchOpenIndexes({
@@ -3224,7 +3242,7 @@ var PipRailClient = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new UnsupportedSchemeError(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM + Solana today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana + Algorand today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3620,7 +3638,7 @@ var PipRailClient = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new UnsupportedSchemeError(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM + Solana today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana + Algorand today).`
       );
     }
     throwIfAborted(init?.signal);
@@ -4189,7 +4207,8 @@ A 402 may offer up to two rails; you don't choose per payment \u2014 the client
   (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.
 - exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose
   (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It
-  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.
+  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand
+  fee-pooled group) is picked automatically.
 When the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest
 settleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is
 identical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);
@@ -4909,6 +4928,110 @@ var KNOWN_FACILITATORS = {
       schemes: ["exact"],
       settles: ["eip3009"],
       note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x58a69042a4129be649c5642456752ede95a5ff921daddfd30560ae70ae5907ff). 2nd UVD validation chain (after HyperEVM)."
+    },
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0xdf030e4d5bf41a88c5a3bfe73bb433dfbb90b058d3b8ded63b68e026eedb9de8). Note: ~$0.001 dynamic floor on Base."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x2e41c581af023100429ada81f1371bef82d41dd577ed438d72ddc18676d4213d). Also seeded on Monad + Solana."
+    },
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "GoPlausible \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x9bcbc1f01fe1fd1aed2a79e5582555164cc4185e9800189df378a6b46eb9c59e). 2nd GoPlausible validation chain (after Algorand)."
+    }
+  ],
+  // Monad (eip155:143). Corbits + Ultravioleta DAO each keyless-settle the EVM EIP-3009 exact rail
+  // (Monad's native Circle USDC), buyer paid zero gas — real LIVE settles, not just /supported reads.
+  // Makes `exact: true` zero-config gasless on Monad.
+  "eip155:143": [
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x7797be27ce22c17f7433a0389bd22d46e338899b1faac505fffd068174428ae6)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0xb107576effbaceb5586c07a9ddc996ef2b6d455f1858314995ef83a7c6e64d11). 3rd UVD validation chain."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
+    }
+  ],
+  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
+  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
+  // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
+  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  "eip155:56": [
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+    }
+  ],
+  // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
+  // native Circle USDC), buyer paid zero gas — a real LIVE settle. UVD is the broadest keyless
+  // facilitator (it also lists Celo/Unichain/Optimism/Scroll + many non-EVM); only HyperEVM is
+  // seeded here because THE RULE requires a per-chain live settle, and that's the one we proved.
+  "eip155:999": [
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (HyperEVM native USDC EIP-3009). LIVE-settled on HyperEVM 2026-06-17 (tx 0x56af8148a92a291f0ce362e250919f7742074e5464ac0f315ad68abaec93bd0a)."
+    }
+  ],
+  // Algorand (mainnet, CAIP-2 = full base64 genesis hash). GoPlausible keyless-settles the ratified
+  // x402 Algorand `exact` rail (atomic-group fee pooling): its sponsor pools the whole group fee and
+  // submits, so NEITHER the buyer NOR the merchant pays ALGO — both-sides gasless. LIVE-settled by us
+  // (a real USDCa exact payment; buyer 0 ALGO AND merchant 0 ALGO) — beyond a /supported read. This
+  // makes Algorand a keyless chain (the first non-EVM/non-Solana one). GoPlausible authored the
+  // ratified Algorand scheme; PipRail's group is byte-compatible (the gate sends `amount` + the full
+  // genesis-hash network, which is all GoPlausible needs).
+  "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=": [
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["algorand"],
+      note: "GoPlausible \u2014 keyless, 100% gas-sponsored (Algorand USDCa, atomic-group fee pooling; both buyer AND merchant pay 0 ALGO). LIVE-settled on Algorand mainnet 2026-06-17 (tx PDVDVRFGJAG2K6AJ7L26OTSCSRL7AURVKEX4D4KHBAOLNSCYENXA). The only keyless Algorand x402 facilitator."
     }
   ],
   // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
@@ -5070,7 +5193,7 @@ function createPaymentGate(options) {
     if (settle !== "self" && info.method === "permit2") {
       if (cfg.method === "permit2") {
         throw new Error(
-          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
+          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) / Algorand schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
         );
       }
       return {
@@ -5315,7 +5438,7 @@ function createPaymentGate(options) {
     if (exactSpecs.length === 0) {
       return rejection("transfer_not_found", "This resource offers no standard `exact` rail.");
     }
-    const isCaip = exact.network.startsWith("eip155:");
+    const isCaip = exact.network.includes(":");
     let candidates = isCaip ? exactSpecs.filter((s) => s.net.network === exact.network) : exactSpecs;
     if (exact.asset) {
       candidates = candidates.filter((s) => s.asset.toLowerCase() === exact.asset.toLowerCase());
@@ -5331,12 +5454,28 @@ function createPaymentGate(options) {
     }
     let nonce;
     let evmAuth = null;
-    if ("transaction" in exact.payload) {
+    if ("senderAuth" in exact.payload && "transaction" in exact.payload) {
+      nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
+    } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
       } catch {
         nonce = exact.payload.transaction;
       }
+    } else if ("paymentGroup" in exact.payload) {
+      nonce = exact.payload.paymentGroup.map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5354,6 +5493,13 @@ function createPaymentGate(options) {
       if (mode.kind === "self") {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
+        const ftMethod = accept.extra.assetTransferMethod;
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos";
+        if (needsFeePayer && !accept.extra.feePayer) {
+          throw new SettlementError(
+            `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
+          );
+        }
         result = await settleViaFacilitator({
           url: mode.url,
           ...mode.authHeaders ? { authHeaders: mode.authHeaders } : {},
@@ -5370,9 +5516,7 @@ function createPaymentGate(options) {
             amount: accept.amount,
             payTo: accept.payTo,
             maxTimeoutSeconds: accept.maxTimeoutSeconds,
-            // The scheme's chain-specific `extra`, from the gate's OWN trusted rail: SVM forwards the
-            // facilitator's `feePayer` (the gas sponsor); EVM forwards the token's EIP-712 domain.
-            extra: accept.extra.assetTransferMethod === "svm" ? { feePayer: accept.extra.feePayer ?? "" } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
+            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
           // The buyer address, for the receipt's `payer` fallback. EVM carries it in the

package/dist/{solana-E4MD6JJ6.js → solana-3FMCWSEE.js}

@@ -221,6 +221,10 @@ import {
 import bs58 from "bs58";
 var COMPUTE_UNIT_LIMIT = 2e4;
 var COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
+var MAX_COMPUTE_UNIT_LIMIT = 300000n;
+var MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 100000n;
+var CB_SET_UNIT_LIMIT = 2;
+var CB_SET_UNIT_PRICE = 3;
 function tokenProgramFor(accept) {
   return accept.extra.tokenProgram === "token-2022" ? TOKEN_2022_PROGRAM_ID : TOKEN_PROGRAM_ID;
 }
@@ -380,6 +384,22 @@ async function verifyAndSettleExactSolana(input) {
       }
     }
   }
+  for (const ix of message.compiledInstructions) {
+    const ixProgram = keys.get(ix.programIdIndex);
+    if (!ixProgram || !ixProgram.equals(ComputeBudgetProgram.programId)) continue;
+    const data = Buffer.from(ix.data);
+    if (data.length >= 5 && data[0] === CB_SET_UNIT_LIMIT) {
+      const limit = BigInt(data.readUInt32LE(1));
+      if (limit > MAX_COMPUTE_UNIT_LIMIT) {
+        return fail("signature_invalid", `Compute-unit limit ${limit} exceeds the ${MAX_COMPUTE_UNIT_LIMIT} cap (fee-payer drain guard).`);
+      }
+    } else if (data.length >= 9 && data[0] === CB_SET_UNIT_PRICE) {
+      const price = data.readBigUInt64LE(1);
+      if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
+        return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
+      }
+    }
+  }
   const isSignedSigner = (pubkey) => {
     const idx = message.staticAccountKeys.findIndex((k) => k.equals(pubkey));
     return idx >= 1 && idx < message.header.numRequiredSignatures && !isEmptySig(tx.signatures[idx]);

package/dist/{solana-TLHL2KNY.cjs → solana-M3VOHCMO.cjs}

@@ -221,6 +221,10 @@ function notFound(signature) {
 var _bs58 = require('bs58'); var _bs582 = _interopRequireDefault(_bs58);
 var COMPUTE_UNIT_LIMIT = 2e4;
 var COMPUTE_UNIT_PRICE_MICROLAMPORTS = 1;
+var MAX_COMPUTE_UNIT_LIMIT = 300000n;
+var MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS = 100000n;
+var CB_SET_UNIT_LIMIT = 2;
+var CB_SET_UNIT_PRICE = 3;
 function tokenProgramFor(accept) {
   return accept.extra.tokenProgram === "token-2022" ? _spltoken.TOKEN_2022_PROGRAM_ID : _spltoken.TOKEN_PROGRAM_ID;
 }
@@ -380,6 +384,22 @@ async function verifyAndSettleExactSolana(input) {
       }
     }
   }
+  for (const ix of message.compiledInstructions) {
+    const ixProgram = keys.get(ix.programIdIndex);
+    if (!ixProgram || !ixProgram.equals(_web3js.ComputeBudgetProgram.programId)) continue;
+    const data = Buffer.from(ix.data);
+    if (data.length >= 5 && data[0] === CB_SET_UNIT_LIMIT) {
+      const limit = BigInt(data.readUInt32LE(1));
+      if (limit > MAX_COMPUTE_UNIT_LIMIT) {
+        return fail("signature_invalid", `Compute-unit limit ${limit} exceeds the ${MAX_COMPUTE_UNIT_LIMIT} cap (fee-payer drain guard).`);
+      }
+    } else if (data.length >= 9 && data[0] === CB_SET_UNIT_PRICE) {
+      const price = data.readBigUInt64LE(1);
+      if (price > MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS) {
+        return fail("signature_invalid", `Compute-unit price ${price} \xB5lamports exceeds the ${MAX_COMPUTE_UNIT_PRICE_MICROLAMPORTS} cap (fee-payer drain guard).`);
+      }
+    }
+  }
   const isSignedSigner = (pubkey) => {
     const idx = message.staticAccountKeys.findIndex((k) => k.equals(pubkey));
     return idx >= 1 && idx < message.header.numRequiredSignatures && !isEmptySig(tx.signatures[idx]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piprail/sdk",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "description": "Accept x402 crypto payments across 29 chains — every major EVM chain plus Solana, TON, Tron, NEAR, Sui, Aptos, Algorand, Stellar & XRPL — in a couple of lines. No backend, no database, no fee; payments settle straight to your wallet.",
   "type": "module",
   "main": "./dist/index.cjs",