@piprail/sdk 2.3.0 → 2.5.0

package/dist/index.d.ts

@@ -88,8 +88,17 @@ interface X402ExactAcceptEntry {
          *  `spender` is the canonical x402ExactPermit2Proxy and whose `witness.to` binds the
          *  recipient. **Solana (SVM): `'svm'`** — the payer partial-signs an SPL
          *  `TransferChecked` transaction whose fee payer is the merchant (`feePayer` below),
-         *  and the gate co-signs as fee payer + broadcasts. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm';
+         *  and the gate co-signs as fee payer + broadcasts. **Algorand: `'algorand'`** — the payer
+         *  signs an ASA `axfer` to `payTo` at fee 0, atomically grouped with a 0-ALGO `pay` from
+         *  the `feePayer` that pools the group fee (per `scheme_exact_algo.md`); the gate (or a
+         *  keyless facilitator) signs that fee txn + submits. **Aptos: `'aptos'`** — the payer signs a
+         *  fee-payer (sponsored) `primary_fungible_store::transfer` to `payTo` (per
+         *  `scheme_exact_aptos.md`); the gate (or a keyless facilitator) adds the fee-payer signature
+         *  + submits, paying gas. **NEAR: `'near'`** — the payer signs a NEP-366 `SignedDelegateAction`
+         *  authorizing exactly one NEP-141 `ft_transfer` to `payTo` (per `scheme_exact_near.md`); a
+         *  facilitator-selected relayer (`feePayer` below) prepays gas + the 1 yoctoNEAR and submits, so
+         *  the buyer holds zero NEAR. PipRail self-settles ALL. */
+        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate
@@ -97,11 +106,12 @@ interface X402ExactAcceptEntry {
         name?: string;
         /** EIP-712 domain version of the token (USDC: "2"). OPTIONAL (see `name`); read/re-derived on-chain. */
         version?: string;
-        /** **SVM only** — the merchant's fee-payer (sponsor) public key (base58), per the
-         *  x402 `exact` SVM scheme. The buyer compiles the transaction with this account as
-         *  the fee payer (so the buyer spends zero SOL on the network fee), leaving its
-         *  signature slot empty; the gate fills it and broadcasts. Distinct from `payTo` —
-         *  the fee payer must never appear in any instruction's accounts (a MUST-rule). */
+        /** **SVM / Algorand / Aptos** — the fee-payer (gas sponsor) address. The buyer builds the
+         *  transaction with this account as the gas payer (so the buyer spends ZERO native coin),
+         *  leaving its signature for whoever sponsors; the gate (self mode) or a keyless facilitator
+         *  fills it and submits. On **SVM** it must differ from `payTo` (the fee payer must never
+         *  appear in an instruction — a MUST-rule); on **Algorand/Aptos** the fee txn/signature is
+         *  separate from the transfer, so `feePayer === payTo` is allowed. */
         feePayer?: string;
         /** **SVM only, OPTIONAL** — a ≤256-byte reconciliation memo the buyer attaches to the
          *  transaction (the SVM scheme's optional `extra.memo`). */
@@ -216,9 +226,56 @@ interface Permit2PaymentPayload {
 interface ExactSvmPaymentPayload {
     transaction: string;
 }
+/**
+ * The `payload` a client sends for the **Algorand `exact`** variant, per
+ * `scheme_exact_algo.md`: an atomically-grouped set of base64-encoded msgpack transactions,
+ * and the index within it of the transaction that pays the resource server. The buyer's ASA
+ * `axfer` (to `payTo`, fee 0) is SIGNED; a 0-ALGO `pay` from the `feePayer` that pools the
+ * group fee is left UNSIGNED for whoever sponsors (the gate's relayer in self mode, or a
+ * keyless facilitator). The group itself IS the proof — there's no separate authorization
+ * object (the Algorand analogue of EIP-3009's `authorization` / SVM's `transaction`).
+ */
+interface ExactAlgorandPaymentPayload {
+    /** Index into `paymentGroup` of the txn that pays the resource server (the buyer's `axfer`). */
+    paymentIndex: number;
+    /** The atomic group: each element is a base64-encoded, msgpack-encoded (signed or unsigned)
+     *  Algorand transaction. ≤ 16 elements (the protocol's atomic-group cap). */
+    paymentGroup: string[];
+}
+/**
+ * The `payload` a client sends for the **Aptos `exact`** variant, per `scheme_exact_aptos.md`:
+ * a fee-payer (sponsored, AIP-39) `primary_fungible_store::transfer`. `transaction` is the base64
+ * BCS-serialized `SimpleTransaction` (raw tx + the bound `feePayerAddress`); `senderAuth` is the
+ * base64 BCS-serialized buyer (sender) authenticator. The buyer leaves the fee-payer signature for
+ * whoever sponsors (the gate's relayer in self mode, or a keyless facilitator), who adds it +
+ * submits. The (tx + sender authenticator) IS the proof — there's no separate `authorization`
+ * object (the Aptos analogue of EIP-3009's `authorization` / SVM's `transaction`). The two-field
+ * shape (a `senderAuth` alongside `transaction`) also distinguishes it from the SVM payload.
+ */
+interface ExactAptosPaymentPayload {
+    /** Base64 BCS-serialized `SimpleTransaction` (raw transaction + the bound `feePayerAddress`). */
+    transaction: string;
+    /** Base64 BCS-serialized buyer (sender) `AccountAuthenticator`. */
+    senderAuth: string;
+}
+/**
+ * The `payload` a client sends for the **NEAR `exact`** variant, per `scheme_exact_near.md`:
+ * a base64-encoded, Borsh-serialized NEP-366 `SignedDelegateAction` whose single delegated action
+ * is one NEP-141 `ft_transfer` (to `payTo`, the exact `amount`, `deposit: 1` yoctoNEAR). The buyer
+ * signs the delegate action with a FULL-ACCESS key (a function-call key can't attach the 1 yocto and
+ * is rejected); a facilitator-selected relayer wraps it, prepays gas + the yocto, and submits. The
+ * signed delegate action IS the proof — there's no separate authorization object (the NEAR analogue
+ * of EIP-3009's `authorization` / SVM's `transaction`). Its single self-contained string field also
+ * distinguishes it from every other family's payload shape.
+ */
+interface ExactNearPaymentPayload {
+    /** Base64 of the Borsh-encoded NEP-366 `SignedDelegateAction` (one `ft_transfer`). */
+    signedDelegateAction: string;
+}
 /** Any `exact`-rail payload shape — EIP-3009 (`authorization`), Permit2 (`permit2Authorization`),
- *  or SVM (`transaction`). */
-type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload;
+ *  SVM (`transaction`), Algorand (`paymentGroup`), Aptos (`transaction` + `senderAuth`), or NEAR
+ *  (`signedDelegateAction`). */
+type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload | ExactNearPaymentPayload;
 interface ParsedExactBase {
     x402Version: number;
     /** The client's claimed network (slug or CAIP-2) — for matching, not trust. */
@@ -236,7 +293,10 @@ interface ParsedExactBase {
  * re-derives every verified field from its own trusted rail. A discriminated union on
  * `method`, so narrowing on `method` narrows `payload`: `'eip3009'` → {@link ExactPaymentPayload}
  * (`authorization`), `'permit2'` → {@link Permit2PaymentPayload} (`permit2Authorization`),
- * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`).
+ * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`), `'algorand'` →
+ * {@link ExactAlgorandPaymentPayload} (`paymentGroup`); `'aptos'` →
+ * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`); `'near'` →
+ * {@link ExactNearPaymentPayload} (`signedDelegateAction`).
  */
 type ParsedExactPayment = (ParsedExactBase & {
     method: 'eip3009';
@@ -247,6 +307,15 @@ type ParsedExactPayment = (ParsedExactBase & {
 }) | (ParsedExactBase & {
     method: 'svm';
     payload: ExactSvmPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'algorand';
+    payload: ExactAlgorandPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'aptos';
+    payload: ExactAptosPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'near';
+    payload: ExactNearPaymentPayload;
 });
 interface X402Receipt {
     scheme: 'onchain-proof' | 'exact';
@@ -4266,9 +4335,10 @@ interface DiscoverySigner {
  * chain-agnostic — it never names a family, it just merges `extra`.
  */
 interface ExactRailInfo {
-    method: 'eip3009' | 'permit2' | 'svm';
+    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
     /** Family-specific `extra` keys merged into the exact accept (e.g. `{ name, version }`
-     *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana). */
+     *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana, `{ feePayer }` for
+     *  Algorand/Aptos/NEAR). */
     extra?: Record<string, unknown>;
 }
 /**
@@ -4349,7 +4419,7 @@ interface ResolvedNetwork {
         reason?: RecipientReason;
     }>;
     /**
-     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM) — the BUYER counterpart to {@link settleExactSelf}.
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM + Algorand + Aptos) — the BUYER counterpart to {@link settleExactSelf}.
      * Build + EIP-712-sign an EIP-3009 `transferWithAuthorization` for a standard x402
      * `exact` rail, so a PipRail agent can PAY any standard x402 server (not just PipRail's
      * own `onchain-proof` gates). The client frames the returned `payload` + `accepted` echo
@@ -4404,7 +4474,7 @@ interface ResolvedNetwork {
      * (the merchant's own bound self-settle wallet, in self mode); `feePayer` takes precedence.
      * RPC-read (EVM reads the token's EIP-712 domain; Solana reads the mint's token program); MAY
      * throw a typed config error for an explicitly-requested-but-unsupported method (EVM does). A
-     * family that omits this method offers no `exact` rail (today: every non-EVM, non-Solana family).
+     * family that omits this method offers no `exact` rail (today: every family except EVM, Solana, Algorand, and Aptos).
      */
     resolveExactRail?(input: {
         asset: string;
@@ -4438,10 +4508,12 @@ interface ResolvedNetwork {
      */
     exactPermit2Supported?(): boolean;
     /**
-     * OPTIONAL (EVM-only today) — verify a standard x402 `exact` (EIP-3009) payment
-     * locally, then SELF-SETTLE it by broadcasting `transferWithAuthorization` from the
-     * merchant's own `relayer` wallet (the merchant pays gas to receive; the signature
-     * binds `to`, so no redirect risk). RETURNS a `VerifyResult`:
+     * OPTIONAL (EVM EIP-3009/Permit2 + Solana SVM + Algorand + Aptos) — verify a standard x402 `exact`
+     * payment locally, then SELF-SETTLE it by broadcasting from the merchant's own `relayer`
+     * wallet (the merchant pays the network fee to receive; EVM broadcasts
+     * `transferWithAuthorization`, Solana co-signs the fee payer, Algorand signs the pooled fee
+     * txn + submits the group, Aptos adds the fee-payer signature + submits — the transfer
+     * binds `payTo`, so no redirect risk). RETURNS a `VerifyResult`:
      *   - `{ ok:false, error }` for a CLIENT-fixable fault (bad signature, expired,
      *     wrong recipient/amount, used nonce, simulation revert) → gate replies 402;
      *   - `{ ok:true, receipt }` once the settle tx is mined.
@@ -4930,7 +5002,7 @@ interface SpendSummary {
 }
 
 /** The payment schemes a client can settle: PipRail's native `onchain-proof` (the
- *  default) and the standard x402 `exact` rail (EVM EIP-3009/Permit2 + Solana SVM, opt-in). */
+ *  default) and the standard x402 `exact` rail (EVM EIP-3009/Permit2 + Solana SVM + Algorand, opt-in). */
 type PaymentScheme = 'onchain-proof' | 'exact';
 
 /** Observability events. `ref` is the proof — a chain-specific id (EVM tx hash, Solana signature, TON locator, Stellar tx hash). */
@@ -5485,7 +5557,7 @@ declare class PipRailClient {
      *   before publishing, so retry with a brief backoff if a fresh listing is missing.
      * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
      *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-     *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+     *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
      */
     discover(opts?: DiscoverOptions): Promise<DiscoveredResource[]>;
     /**
@@ -5902,7 +5974,7 @@ declare function describeChallenge(challenge: X402Challenge): string;
  * literally, so a wrong name or order actively misleads. A test pins the load-
  * bearing phrases.
  */
-declare const PIPRAIL_AGENT_GUIDE = "# Paying with PipRail \u2014 the agent contract\n\nYou can pay for x402 \"402 Payment Required\" resources autonomously. Money moves\nstraight from your wallet to the server; PipRail custodies nothing. Follow this.\n\n## Landing cold \u2014 read the self-description\nEvery PipRail 402 self-describes. Read challenge.extensions.piprail for { name, what, pay[]\n(each rail's how-to-pay), sdk.install, mcp, docs } \u2014 never guess what an endpoint is. If your\ntooling can't pay a rail (e.g. a stock x402 client can't pay the onchain-proof scheme), the\nblock says how: install @piprail/sdk (npm i @piprail/sdk) or run the MCP (npx -y @piprail/mcp)\nand pay with the tools below.\n\n## The loop: quote \u2192 plan \u2192 pay\n1. piprail_quote_payment(url) \u2014 PRICE it. Returns the amount, token, chain, and\n   whether it is within your spend policy. No funds move. Use it to decide if a\n   resource is worth buying.\n2. piprail_plan_payment(url) \u2014 can I afford it NOW? Reads your balance, native gas,\n   and recipient-readiness across every rail, and returns { payable, best,\n   fundingHint, session? }. If payable is false, do NOT attempt the payment \u2014\n   fundingHint says exactly what to fix.\n3. piprail_pay_request(url, method?, body?) \u2014 PAY (only if the plan was payable)\n   and return the result.\nAlways plan before you pay so you never commit to a payment you cannot finish.\n\n## Gasless \u2014 the exact rail (zero gas for you)\nA 402 may offer up to two rails; you don't choose per payment \u2014 the client does, automatically:\n- onchain-proof (PipRail's default): you broadcast the payment yourself and pay the network gas\n  (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.\n- exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose\n  (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It\n  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.\nWhen the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest\nsettleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is\nidentical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);\nyou can't enable it yourself, but you can report when a 402 needs it (see UNSUPPORTED_SCHEME below).\n\n## Reading a refusal \u2014 never crash, never double-spend\nA failed pay returns a STRUCTURED object, never a thrown error you must catch:\n  { ok:false, code, reason, explain, ref?, reasonCode?, declined? }\nBranch on `code` (always reliable). Key cases:\n- declined:true with reasonCode:'SESSION_EXPIRED' \u2014 your time budget is over. This\n  is TERMINAL: STOP. Do not retry ANY payment this process; it cannot be undone\n  without a restart / a longer TTL.\n- declined:true with reasonCode:'APPROVAL' \u2014 a human (or hook) declined this\n  payment. Terminal for this pay: do NOT auto-retry \u2014 they said no, or no one\n  answered.\n- declined:true with reasonCode:'OUTSIDE_WINDOW' \u2014 your rolling rate-limit is\n  exhausted. Wait for it to free, then retry; do not raise the amount.\n- declined:true with reasonCode:'POLICY' or 'BUDGET' \u2014 a spend cap or allowlist\n  refused it. Don't retry the same payment; pick a cheaper/allowed one.\n- code:'INSUFFICIENT_FUNDS' \u2014 top up the wallet (token and/or native gas), retry.\n- code:'PAYMENT_TIMEOUT' / 'MAX_RETRIES_EXCEEDED' / 'CONFIRMATION_TIMEOUT' \u2014 the\n  payment may ALREADY be on-chain. Recover using the proof on `.ref` (re-verify\n  or re-submit it); never re-pay \u2014 a fresh payment would double-spend. On a gasless\n  exact rail `.ref` is the authorization NONCE, not a tx hash: re-present the SAME\n  signed authorization, never sign a fresh one (that would risk a double-spend).\n- code:'NO_COMPATIBLE_ACCEPT' / 'UNSUPPORTED_SCHEME' \u2014 the 402 isn't payable on\n  your chain/scheme; `explain` says whether it's the wrong chain or a scheme to enable.\n  If it's a standard x402 server offering an exact rail, that's a config fix the operator makes\n  once (enable the exact scheme); report it, don't retry the same call blindly.\n\n## Knowing your leash \u2014 call piprail_budget\npiprail_budget tells you how much budget and time you have left, per\n(network, asset), plus your spend so far. Read-only; moves no funds. Use it in\nMode A to self-check before paying.\n\n## Two modes\n- Mode A (headless, default): you run FREE inside a pre-set budget + time\n  envelope. The policy IS the consent \u2014 there is no per-payment prompt. Stay\n  inside it; piprail_budget shows what's left.\n- Mode B (supervised): the host may ask a human to approve each payment. A\n  decline/cancel/timeout comes back as declined:true (reasonCode:'APPROVAL') \u2014\n  do NOT retry it as if it were a transient error.\n\n## Hard facts\n- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014\n  budgets aren't summed across tokens (no price oracle).\n- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart\n  (a convenience, not a durable ledger).\n";
+declare const PIPRAIL_AGENT_GUIDE = "# Paying with PipRail \u2014 the agent contract\n\nYou can pay for x402 \"402 Payment Required\" resources autonomously. Money moves\nstraight from your wallet to the server; PipRail custodies nothing. Follow this.\n\n## Landing cold \u2014 read the self-description\nEvery PipRail 402 self-describes. Read challenge.extensions.piprail for { name, what, pay[]\n(each rail's how-to-pay), sdk.install, mcp, docs } \u2014 never guess what an endpoint is. If your\ntooling can't pay a rail (e.g. a stock x402 client can't pay the onchain-proof scheme), the\nblock says how: install @piprail/sdk (npm i @piprail/sdk) or run the MCP (npx -y @piprail/mcp)\nand pay with the tools below.\n\n## The loop: quote \u2192 plan \u2192 pay\n1. piprail_quote_payment(url) \u2014 PRICE it. Returns the amount, token, chain, and\n   whether it is within your spend policy. No funds move. Use it to decide if a\n   resource is worth buying.\n2. piprail_plan_payment(url) \u2014 can I afford it NOW? Reads your balance, native gas,\n   and recipient-readiness across every rail, and returns { payable, best,\n   fundingHint, session? }. If payable is false, do NOT attempt the payment \u2014\n   fundingHint says exactly what to fix.\n3. piprail_pay_request(url, method?, body?) \u2014 PAY (only if the plan was payable)\n   and return the result.\nAlways plan before you pay so you never commit to a payment you cannot finish.\n\n## Gasless \u2014 the exact rail (zero gas for you)\nA 402 may offer up to two rails; you don't choose per payment \u2014 the client does, automatically:\n- onchain-proof (PipRail's default): you broadcast the payment yourself and pay the network gas\n  (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.\n- exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose\n  (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It\n  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand\n  fee-pooled group) is picked automatically.\nWhen the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest\nsettleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is\nidentical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);\nyou can't enable it yourself, but you can report when a 402 needs it (see UNSUPPORTED_SCHEME below).\n\n## Reading a refusal \u2014 never crash, never double-spend\nA failed pay returns a STRUCTURED object, never a thrown error you must catch:\n  { ok:false, code, reason, explain, ref?, reasonCode?, declined? }\nBranch on `code` (always reliable). Key cases:\n- declined:true with reasonCode:'SESSION_EXPIRED' \u2014 your time budget is over. This\n  is TERMINAL: STOP. Do not retry ANY payment this process; it cannot be undone\n  without a restart / a longer TTL.\n- declined:true with reasonCode:'APPROVAL' \u2014 a human (or hook) declined this\n  payment. Terminal for this pay: do NOT auto-retry \u2014 they said no, or no one\n  answered.\n- declined:true with reasonCode:'OUTSIDE_WINDOW' \u2014 your rolling rate-limit is\n  exhausted. Wait for it to free, then retry; do not raise the amount.\n- declined:true with reasonCode:'POLICY' or 'BUDGET' \u2014 a spend cap or allowlist\n  refused it. Don't retry the same payment; pick a cheaper/allowed one.\n- code:'INSUFFICIENT_FUNDS' \u2014 top up the wallet (token and/or native gas), retry.\n- code:'PAYMENT_TIMEOUT' / 'MAX_RETRIES_EXCEEDED' / 'CONFIRMATION_TIMEOUT' \u2014 the\n  payment may ALREADY be on-chain. Recover using the proof on `.ref` (re-verify\n  or re-submit it); never re-pay \u2014 a fresh payment would double-spend. On a gasless\n  exact rail `.ref` is the authorization NONCE, not a tx hash: re-present the SAME\n  signed authorization, never sign a fresh one (that would risk a double-spend).\n- code:'NO_COMPATIBLE_ACCEPT' / 'UNSUPPORTED_SCHEME' \u2014 the 402 isn't payable on\n  your chain/scheme; `explain` says whether it's the wrong chain or a scheme to enable.\n  If it's a standard x402 server offering an exact rail, that's a config fix the operator makes\n  once (enable the exact scheme); report it, don't retry the same call blindly.\n\n## Knowing your leash \u2014 call piprail_budget\npiprail_budget tells you how much budget and time you have left, per\n(network, asset), plus your spend so far. Read-only; moves no funds. Use it in\nMode A to self-check before paying.\n\n## Two modes\n- Mode A (headless, default): you run FREE inside a pre-set budget + time\n  envelope. The policy IS the consent \u2014 there is no per-payment prompt. Stay\n  inside it; piprail_budget shows what's left.\n- Mode B (supervised): the host may ask a human to approve each payment. A\n  decline/cancel/timeout comes back as declined:true (reasonCode:'APPROVAL') \u2014\n  do NOT retry it as if it were a transient error.\n\n## Hard facts\n- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014\n  budgets aren't summed across tokens (no price oracle).\n- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart\n  (a convenience, not a durable ledger).\n";
 /** Returns {@link PIPRAIL_AGENT_GUIDE} (a parity accessor for callers that prefer a function). */
 declare function agentGuide(): string;
 
@@ -6709,7 +6781,7 @@ interface KnownFacilitator {
     /** The x402 schemes it settles (today only `exact`). */
     schemes: ReadonlyArray<'exact'>;
     /** The exact transfer methods it can settle on this network. */
-    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm'>;
+    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'>;
     /** A short human note (who it is / caveat). */
     note?: string;
 }
@@ -6730,7 +6802,7 @@ declare function knownFacilitatorsFor(network: Caip2): ReadonlyArray<KnownFacili
  * specific transfer `method`). Returns `undefined` when none is known — the `exact: true`
  * shorthand branches on that to throw a coverage-specific guidance error.
  */
-declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm'): KnownFacilitator | undefined;
+declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'): KnownFacilitator | undefined;
 
 /**
  * Reliable receipt delivery — the durable webhook a stateless gate can't be.

package/dist/index.js

@@ -1396,7 +1396,7 @@ function chainIdFromNetwork(network) {
   const match = /^eip155:(\d+)$/.exec(network);
   if (!match || !match[1]) return null;
   const n = Number(match[1]);
-  return Number.isSafeInteger(n) ? n : null;
+  return Number.isSafeInteger(n) && n > 0 ? n : null;
 }
 function buildChallengeHeader(challenge) {
   return toBase64Json(challenge);
@@ -1469,9 +1469,27 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.signedDelegateAction === "string") {
+    return { ...base2, method: "near", payload: { signedDelegateAction: payload.signedDelegateAction } };
+  }
+  if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
+    return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
+  }
   if (typeof payload.transaction === "string") {
     return { ...base2, method: "svm", payload: { transaction: payload.transaction } };
   }
+  if (Array.isArray(payload.paymentGroup)) {
+    const group = payload.paymentGroup;
+    const index = payload.paymentIndex;
+    if (group.length === 0 || group.length > 16 || !group.every((t) => typeof t === "string") || typeof index !== "number" || !Number.isInteger(index) || index < 0 || index >= group.length) {
+      return null;
+    }
+    return {
+      ...base2,
+      method: "algorand",
+      payload: { paymentIndex: index, paymentGroup: group }
+    };
+  }
   const signature = payload.signature;
   if (typeof signature !== "string") return null;
   const authorization = payload.authorization;
@@ -1792,6 +1810,12 @@ function makeEvmNetwork(resolved) {
       if ("transaction" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An SVM (Solana) payload was submitted to an EVM exact rail." };
       }
+      if ("paymentGroup" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
+      }
+      if ("signedDelegateAction" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "A NEAR payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1816,7 +1840,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await import("./solana-E4MD6JJ6.js");
+      mod = await import("./solana-3FMCWSEE.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -1888,7 +1912,7 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await import("./near-MTYBCUYM.js");
+      mod = await import("./near-OTPQD6BI.js");
     } catch (cause) {
       throw new MissingDriverError(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
@@ -1900,7 +1924,7 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await import("./aptos-RIL56C7L.js");
+      mod = await import("./aptos-QAAXIUY3.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
@@ -1912,7 +1936,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await import("./algorand-GSFVZTBF.js");
+      mod = await import("./algorand-WB6PBJU4.js");
     } catch (cause) {
       throw new MissingDriverError(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2008,7 +2032,7 @@ var SLUG_TO_CAIP2 = {
   near: "near:mainnet",
   sui: "sui:mainnet",
   aptos: "aptos:1",
-  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73k",
+  algorand: "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=",
   stellar: "stellar:pubnet",
   xrpl: "xrpl:0"
 };
@@ -3026,7 +3050,7 @@ var PipRailClient = class {
    *   before publishing, so retry with a brief backoff if a fresh listing is missing.
    * - Results are cross-scheme (mostly the mainstream `exact` scheme); `fetch()` pays
    *   `onchain-proof` rails by default, and standard `exact` rails too once you opt in
-   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM).
+   *   with `schemes: ['onchain-proof', 'exact']` (EVM EIP-3009/Permit2 + Solana SVM + Algorand).
    */
   async discover(opts = {}) {
     const found = await searchOpenIndexes({
@@ -3224,7 +3248,7 @@ var PipRailClient = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new UnsupportedSchemeError(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM + Solana today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand + NEAR today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3620,7 +3644,7 @@ var PipRailClient = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new UnsupportedSchemeError(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM + Solana today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
       );
     }
     throwIfAborted(init?.signal);
@@ -4189,7 +4213,8 @@ A 402 may offer up to two rails; you don't choose per payment \u2014 the client
   (the native coin \u2014 ETH/SOL/\u2026). Works on every chain.
 - exact (the ratified x402 rail, opt-in): you only SIGN; the server \u2014 or a facilitator it chose
   (e.g. PayAI) \u2014 broadcasts it, so you pay ZERO gas (you need only the token, no native coin). It
-  works on EVM + Solana, and the on-chain method (EIP-3009 / Permit2 / SVM) is picked automatically.
+  works on EVM, Solana + Algorand, and the on-chain method (EIP-3009 / Permit2 / SVM / Algorand
+  fee-pooled group) is picked automatically.
 When the exact scheme is enabled AND balance-aware routing is on, paying picks the cheapest
 settleable rail \u2014 i.e. the gasless exact one. Nothing changes in your loop: quote \u2192 plan \u2192 pay is
 identical. The exact scheme is OPT-IN by the operator (MCP: PIPRAIL_SCHEMES=onchain-proof,exact);
@@ -4909,6 +4934,110 @@ var KNOWN_FACILITATORS = {
       schemes: ["exact"],
       settles: ["eip3009"],
       note: "xpay \u2014 keyless, zero-fee, sponsors gas. LIVE-settled on Base 2026-06-15 (tx 0x2273d5\u2026)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x58a69042a4129be649c5642456752ede95a5ff921daddfd30560ae70ae5907ff). 2nd UVD validation chain (after HyperEVM)."
+    },
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0xdf030e4d5bf41a88c5a3bfe73bb433dfbb90b058d3b8ded63b68e026eedb9de8). Note: ~$0.001 dynamic floor on Base."
+    },
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x2e41c581af023100429ada81f1371bef82d41dd577ed438d72ddc18676d4213d). Also seeded on Monad + Solana."
+    },
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "GoPlausible \u2014 keyless, sponsors gas (Base USDC EIP-3009). LIVE-settled on Base 2026-06-17 (tx 0x9bcbc1f01fe1fd1aed2a79e5582555164cc4185e9800189df378a6b46eb9c59e). 2nd GoPlausible validation chain (after Algorand)."
+    }
+  ],
+  // Monad (eip155:143). Corbits + Ultravioleta DAO each keyless-settle the EVM EIP-3009 exact rail
+  // (Monad's native Circle USDC), buyer paid zero gas — real LIVE settles, not just /supported reads.
+  // Makes `exact: true` zero-config gasless on Monad.
+  "eip155:143": [
+    {
+      url: "https://facilitator.corbits.dev",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Corbits (Faremeter) \u2014 keyless, sponsors gas (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x7797be27ce22c17f7433a0389bd22d46e338899b1faac505fffd068174428ae6)."
+    },
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (Monad native USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0xb107576effbaceb5586c07a9ddc996ef2b6d455f1858314995ef83a7c6e64d11). 3rd UVD validation chain."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas (Monad USDC EIP-3009). LIVE-settled on Monad 2026-06-17 (tx 0x00cfeb93876e5ef57dcb002510038b7304913233ca286d7ab33c72a8b119eb0d)."
+    }
+  ],
+  // BNB Chain (eip155:56). Dexter keyless-settles the EVM EIP-3009 exact rail — but ONLY for BNB's
+  // EIP-3009 tokens (FDUSD / USD1); BNB's USDC/USDT are Binance-Peg (Permit2), which no facilitator
+  // settles. Dexter also enforces a ~$0.003 dynamic settlement floor on BNB, so a sub-$0.003 payment
+  // is rejected (amount_too_low) — fine for real prices, but the floor is real. LIVE-settled with
+  // FDUSD, buyer paid zero BNB — this beats the BNB token-overlap wall that blocked AEON/Pieverse.
+  "eip155:56": [
+    {
+      url: "https://x402.dexter.cash",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Dexter \u2014 keyless, gas-sponsored. BNB EIP-3009 tokens FDUSD/USD1 ONLY (Binance-Peg USDC/USDT are Permit2 \u2192 not facilitator-settleable); ~$0.003 dynamic floor. LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0x6d9eb4e4939f3f3c74cb19424cc7822d66ec8ed5c5c7c330d9f88a5f9ad59e9e)."
+    },
+    {
+      url: "https://facilitator.pieverse.io",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Pieverse \u2014 keyless, sponsors gas. BNB EIP-3009 tokens FDUSD/USD1 (same Binance-Peg caveat as Dexter). LIVE-settled on BNB 2026-06-17 with FDUSD (tx 0xb9c76affc45bd07a51559efd813ca71516fc30625478724476c2cf42fc2203d3) \u2014 a 2nd keyless BNB facilitator (failover for Dexter)."
+    }
+  ],
+  // HyperEVM (eip155:999). Ultravioleta DAO keyless-settles the EVM EIP-3009 exact rail (HyperEVM's
+  // native Circle USDC), buyer paid zero gas — a real LIVE settle. UVD is the broadest keyless
+  // facilitator (it also lists Celo/Unichain/Optimism/Scroll + many non-EVM); only HyperEVM is
+  // seeded here because THE RULE requires a per-chain live settle, and that's the one we proved.
+  "eip155:999": [
+    {
+      url: "https://facilitator.ultravioletadao.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["eip3009"],
+      note: "Ultravioleta DAO \u2014 keyless, 100% gas-sponsored (HyperEVM native USDC EIP-3009). LIVE-settled on HyperEVM 2026-06-17 (tx 0x56af8148a92a291f0ce362e250919f7742074e5464ac0f315ad68abaec93bd0a)."
+    }
+  ],
+  // Algorand (mainnet, CAIP-2 = full base64 genesis hash). GoPlausible keyless-settles the ratified
+  // x402 Algorand `exact` rail (atomic-group fee pooling): its sponsor pools the whole group fee and
+  // submits, so NEITHER the buyer NOR the merchant pays ALGO — both-sides gasless. LIVE-settled by us
+  // (a real USDCa exact payment; buyer 0 ALGO AND merchant 0 ALGO) — beyond a /supported read. This
+  // makes Algorand a keyless chain (the first non-EVM/non-Solana one). GoPlausible authored the
+  // ratified Algorand scheme; PipRail's group is byte-compatible (the gate sends `amount` + the full
+  // genesis-hash network, which is all GoPlausible needs).
+  "algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=": [
+    {
+      url: "https://facilitator.goplausible.xyz",
+      keyless: true,
+      schemes: ["exact"],
+      settles: ["algorand"],
+      note: "GoPlausible \u2014 keyless, 100% gas-sponsored (Algorand USDCa, atomic-group fee pooling; both buyer AND merchant pay 0 ALGO). LIVE-settled on Algorand mainnet 2026-06-17 (tx PDVDVRFGJAG2K6AJ7L26OTSCSRL7AURVKEX4D4KHBAOLNSCYENXA). The only keyless Algorand x402 facilitator."
     }
   ],
   // Solana (mainnet-beta). Keyless fee-payer sponsors for the SVM exact rail, each LIVE-settled
@@ -4938,6 +5067,17 @@ var KNOWN_FACILITATORS = {
       note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
     }
   ]
+  // NEAR (near:mainnet) — DELIBERATELY UNSEEDED: no x402 facilitator settles NEAR yet.
+  // The NEAR `exact` BUYER payload PipRail builds (drivers/near/exact.ts) is LIVE-PROVEN on mainnet —
+  // a real NEP-366 meta-transaction settles a USDC/USDT ft_transfer gaslessly (buyer 0 NEAR, single-use
+  // via the access-key nonce; relay txs CMnQJzrLvwk… USDT + BCCnVHbSCMY… USDC, 2026-06-18). What's
+  // missing is the FACILITATOR side: the public x402-rs (which Ultravioleta DAO runs) has NO NEAR chain
+  // crate (only eip155/solana/aptos), and UVD's `/verify` 400s on a near:mainnet request even though its
+  // `/supported` ADVERTISES `near:mainnet` + feePayer `uvd-facilitator.near` — i.e. the listing is
+  // aspirational, not settle-capable (verified 2026-06-18). So `exact: true` must NOT auto-pick a NEAR
+  // facilitator. Seed here ONLY after a real keyless settle through a facilitator that actually
+  // implements scheme_exact_near.md (THE RULE). Merchants can still pass an explicit
+  // `exact: { settle: { facilitator } }` for any facilitator they've confirmed settles near:mainnet.
 };
 function knownFacilitatorsFor(network) {
   return KNOWN_FACILITATORS[network] ?? [];
@@ -5070,7 +5210,7 @@ function createPaymentGate(options) {
     if (settle !== "self" && info.method === "permit2") {
       if (cfg.method === "permit2") {
         throw new Error(
-          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
+          "requirePayment: exact `method: 'permit2'` can't be settled by a third-party facilitator \u2014 facilitators settle the standard EIP-3009 (EVM) / SVM (Solana) / Algorand schemes, not PipRail\u2019s Permit2 proxy. Use an EIP-3009 token (USDC / EURC) with the facilitator, or `settle: 'self'` (your own relayer) to settle Permit2 yourself."
         );
       }
       return {
@@ -5315,7 +5455,7 @@ function createPaymentGate(options) {
     if (exactSpecs.length === 0) {
       return rejection("transfer_not_found", "This resource offers no standard `exact` rail.");
     }
-    const isCaip = exact.network.startsWith("eip155:");
+    const isCaip = exact.network.includes(":");
     let candidates = isCaip ? exactSpecs.filter((s) => s.net.network === exact.network) : exactSpecs;
     if (exact.asset) {
       candidates = candidates.filter((s) => s.asset.toLowerCase() === exact.asset.toLowerCase());
@@ -5331,12 +5471,34 @@ function createPaymentGate(options) {
     }
     let nonce;
     let evmAuth = null;
-    if ("transaction" in exact.payload) {
+    if ("senderAuth" in exact.payload && "transaction" in exact.payload) {
+      nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
+    } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
       } catch {
         nonce = exact.payload.transaction;
       }
+    } else if ("paymentGroup" in exact.payload) {
+      nonce = exact.payload.paymentGroup.map((t) => {
+        try {
+          return Buffer.from(t, "base64").toString("base64");
+        } catch {
+          return t;
+        }
+      }).join("|");
+    } else if ("signedDelegateAction" in exact.payload) {
+      try {
+        nonce = Buffer.from(exact.payload.signedDelegateAction, "base64").toString("base64");
+      } catch {
+        nonce = exact.payload.signedDelegateAction;
+      }
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5354,6 +5516,13 @@ function createPaymentGate(options) {
       if (mode.kind === "self") {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
+        const ftMethod = accept.extra.assetTransferMethod;
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
+        if (needsFeePayer && !accept.extra.feePayer) {
+          throw new SettlementError(
+            `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
+          );
+        }
         result = await settleViaFacilitator({
           url: mode.url,
           ...mode.authHeaders ? { authHeaders: mode.authHeaders } : {},
@@ -5370,9 +5539,7 @@ function createPaymentGate(options) {
             amount: accept.amount,
             payTo: accept.payTo,
             maxTimeoutSeconds: accept.maxTimeoutSeconds,
-            // The scheme's chain-specific `extra`, from the gate's OWN trusted rail: SVM forwards the
-            // facilitator's `feePayer` (the gas sponsor); EVM forwards the token's EIP-712 domain.
-            extra: accept.extra.assetTransferMethod === "svm" ? { feePayer: accept.extra.feePayer ?? "" } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
+            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: accept.extra.name ?? "", version: accept.extra.version ?? "" }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
           // The buyer address, for the receipt's `payer` fallback. EVM carries it in the