@piprail/sdk 2.4.0 → 2.5.0

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [2.5.0] — 2026-06-18 — gasless NEAR `exact` rail (NEP-366 meta-transactions)
+
+Additive and backward-compatible — defaults and the zero-config 402 stay byte-identical; pure-EVM
+installs still never download a non-EVM library (NEAR + its borsh decoder stay lazy-loaded — verified:
+the built EVM bundle has zero static non-EVM imports, only lazy chunks).
+
+### Added
+
+- **NEAR `exact` rail — gasless for the buyer on a fifth family.** PipRail's `exact` scheme now covers
+  NEAR (NEP-141 tokens — USDC / USDT) via the ratified
+  [`scheme_exact_near`](https://github.com/x402-foundation/x402/blob/main/specs/schemes/exact/scheme_exact_near.md)
+  (x402 v2). The buyer signs a **NEP-366 `SignedDelegateAction`** authorizing exactly one `ft_transfer`
+  with a **full-access key** and never broadcasts it or holds any NEAR; a relayer wraps it, prepays the
+  gas + the 1 yoctoNEAR, and submits — the agent is **completely gasless**. Opt-in
+  (`schemes: ['onchain-proof', 'exact']`); native NEAR is **not** exact-payable (the scheme is over
+  `ft_transfer`) and stays `onchain-proof`. Proven on NEAR mainnet for both USDC and USDT.
+  - New `payExactNear` (buyer build/sign) and `verifyAndSettleExactNear` (seller verify + relay) driver
+    functions; `resolveExactRail` / `payExact` / `settleExactSelf` are now implemented for NEAR.
+  - **Self-settle today** (`exact: { settle: 'self', relayer: { accountId, key } }`): the merchant runs
+    a small funded relayer that pays the sub-cent settle gas — the buyer stays gasless, exactly like the
+    Solana / Algorand / Aptos self-settle. The **facilitator** path (`settle: { facilitator }`) is wired
+    and will work the moment a real NEAR x402 facilitator ships; **none does yet** (some advertise
+    `near:mainnet` in `/supported` without settling it), so `exact: true` deliberately excludes NEAR and
+    self-settle is the supported gasless-for-buyer config. See the NEAR chain doc for the caveat.
+  - **Sponsor fee-drain guard**: the relayer prepays both the gas and the attached deposit, so the gate
+    rejects any delegate whose attached `deposit` ≠ exactly 1 yoctoNEAR or whose `gas` exceeds the
+    300 TGas cap (re-derived from the trusted rail) **before** the relayer signs.
+
+### Dependencies
+
+- Added **`borsh` (`>=2 <3`) as an OPTIONAL peer dependency** — used only to decode the inbound NEAR
+  `SignedDelegateAction` during self-settle, lazy-loaded inside the NEAR driver. NEAR users already have
+  it via `near-api-js`; pure-EVM (and non-NEAR) installs never load it.
+
 ## [2.4.0] — 2026-06-17 — gasless Algorand & Aptos rails + keyless gasless on SIX chains (incl. Algorand & BNB)
 
 Additive and backward-compatible — defaults and the zero-config 402 stay byte-identical; pure-EVM
@@ -1347,6 +1381,7 @@ straight into your wallet. The API is small and self-contained.
   to your wallet; PipRail never holds funds.
 - `viem ^2.21` is a peer dependency. Node 20+ or a modern browser.
 
+[2.5.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.4.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.3.0]: https://www.npmjs.com/package/@piprail/sdk
 [2.2.0]: https://www.npmjs.com/package/@piprail/sdk

package/dist/index.cjs

@@ -1396,7 +1396,7 @@ function chainIdFromNetwork(network) {
   const match = /^eip155:(\d+)$/.exec(network);
   if (!match || !match[1]) return null;
   const n = Number(match[1]);
-  return Number.isSafeInteger(n) ? n : null;
+  return Number.isSafeInteger(n) && n > 0 ? n : null;
 }
 function buildChallengeHeader(challenge) {
   return toBase64Json(challenge);
@@ -1469,6 +1469,9 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.signedDelegateAction === "string") {
+    return { ...base2, method: "near", payload: { signedDelegateAction: payload.signedDelegateAction } };
+  }
   if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
     return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
   }
@@ -1810,6 +1813,9 @@ function makeEvmNetwork(resolved) {
       if ("paymentGroup" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
       }
+      if ("signedDelegateAction" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "A NEAR payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1906,7 +1912,7 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-DI2I3MAV.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-H5AQ253I.cjs")));
     } catch (cause) {
       throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
@@ -3242,7 +3248,7 @@ var PipRailClient = (_class2 = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana + Algorand today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand + NEAR today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3638,7 +3644,7 @@ var PipRailClient = (_class2 = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana + Algorand today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
       );
     }
     throwIfAborted(_optionalChain([init, 'optionalAccess', _48 => _48.signal]));
@@ -5061,6 +5067,17 @@ var KNOWN_FACILITATORS = {
       note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
     }
   ]
+  // NEAR (near:mainnet) — DELIBERATELY UNSEEDED: no x402 facilitator settles NEAR yet.
+  // The NEAR `exact` BUYER payload PipRail builds (drivers/near/exact.ts) is LIVE-PROVEN on mainnet —
+  // a real NEP-366 meta-transaction settles a USDC/USDT ft_transfer gaslessly (buyer 0 NEAR, single-use
+  // via the access-key nonce; relay txs CMnQJzrLvwk… USDT + BCCnVHbSCMY… USDC, 2026-06-18). What's
+  // missing is the FACILITATOR side: the public x402-rs (which Ultravioleta DAO runs) has NO NEAR chain
+  // crate (only eip155/solana/aptos), and UVD's `/verify` 400s on a near:mainnet request even though its
+  // `/supported` ADVERTISES `near:mainnet` + feePayer `uvd-facilitator.near` — i.e. the listing is
+  // aspirational, not settle-capable (verified 2026-06-18). So `exact: true` must NOT auto-pick a NEAR
+  // facilitator. Seed here ONLY after a real keyless settle through a facilitator that actually
+  // implements scheme_exact_near.md (THE RULE). Merchants can still pass an explicit
+  // `exact: { settle: { facilitator } }` for any facilitator they've confirmed settles near:mainnet.
 };
 function knownFacilitatorsFor(network) {
   return _nullishCoalesce(KNOWN_FACILITATORS[network], () => ( []));
@@ -5476,6 +5493,12 @@ function createPaymentGate(options) {
           return t;
         }
       }).join("|");
+    } else if ("signedDelegateAction" in exact.payload) {
+      try {
+        nonce = Buffer.from(exact.payload.signedDelegateAction, "base64").toString("base64");
+      } catch (e41) {
+        nonce = exact.payload.signedDelegateAction;
+      }
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5494,7 +5517,7 @@ function createPaymentGate(options) {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
         const ftMethod = accept.extra.assetTransferMethod;
-        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos";
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
         if (needsFeePayer && !accept.extra.feePayer) {
           throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
             `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
@@ -5614,7 +5637,7 @@ async function signBody(secret, body) {
     const sig = await subtle.sign("HMAC", key, enc.encode(body));
     const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
     return `sha256=${hex}`;
-  } catch (e41) {
+  } catch (e42) {
     return null;
   }
 }
@@ -5675,7 +5698,7 @@ async function deliverReceipt(receipt, options) {
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
       _optionalChain([onAttempt, 'optionalCall', _91 => _91({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
-    } catch (e42) {
+    } catch (e43) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
     if (!willRetry) {

package/dist/index.d.cts

@@ -94,8 +94,11 @@ interface X402ExactAcceptEntry {
          *  keyless facilitator) signs that fee txn + submits. **Aptos: `'aptos'`** — the payer signs a
          *  fee-payer (sponsored) `primary_fungible_store::transfer` to `payTo` (per
          *  `scheme_exact_aptos.md`); the gate (or a keyless facilitator) adds the fee-payer signature
-         *  + submits, paying gas. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
+         *  + submits, paying gas. **NEAR: `'near'`** — the payer signs a NEP-366 `SignedDelegateAction`
+         *  authorizing exactly one NEP-141 `ft_transfer` to `payTo` (per `scheme_exact_near.md`); a
+         *  facilitator-selected relayer (`feePayer` below) prepays gas + the 1 yoctoNEAR and submits, so
+         *  the buyer holds zero NEAR. PipRail self-settles ALL. */
+        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate
@@ -255,9 +258,24 @@ interface ExactAptosPaymentPayload {
     /** Base64 BCS-serialized buyer (sender) `AccountAuthenticator`. */
     senderAuth: string;
 }
+/**
+ * The `payload` a client sends for the **NEAR `exact`** variant, per `scheme_exact_near.md`:
+ * a base64-encoded, Borsh-serialized NEP-366 `SignedDelegateAction` whose single delegated action
+ * is one NEP-141 `ft_transfer` (to `payTo`, the exact `amount`, `deposit: 1` yoctoNEAR). The buyer
+ * signs the delegate action with a FULL-ACCESS key (a function-call key can't attach the 1 yocto and
+ * is rejected); a facilitator-selected relayer wraps it, prepays gas + the yocto, and submits. The
+ * signed delegate action IS the proof — there's no separate authorization object (the NEAR analogue
+ * of EIP-3009's `authorization` / SVM's `transaction`). Its single self-contained string field also
+ * distinguishes it from every other family's payload shape.
+ */
+interface ExactNearPaymentPayload {
+    /** Base64 of the Borsh-encoded NEP-366 `SignedDelegateAction` (one `ft_transfer`). */
+    signedDelegateAction: string;
+}
 /** Any `exact`-rail payload shape — EIP-3009 (`authorization`), Permit2 (`permit2Authorization`),
- *  SVM (`transaction`), Algorand (`paymentGroup`), or Aptos (`transaction` + `senderAuth`). */
-type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload;
+ *  SVM (`transaction`), Algorand (`paymentGroup`), Aptos (`transaction` + `senderAuth`), or NEAR
+ *  (`signedDelegateAction`). */
+type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload | ExactNearPaymentPayload;
 interface ParsedExactBase {
     x402Version: number;
     /** The client's claimed network (slug or CAIP-2) — for matching, not trust. */
@@ -277,7 +295,8 @@ interface ParsedExactBase {
  * (`authorization`), `'permit2'` → {@link Permit2PaymentPayload} (`permit2Authorization`),
  * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`), `'algorand'` →
  * {@link ExactAlgorandPaymentPayload} (`paymentGroup`); `'aptos'` →
- * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`).
+ * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`); `'near'` →
+ * {@link ExactNearPaymentPayload} (`signedDelegateAction`).
  */
 type ParsedExactPayment = (ParsedExactBase & {
     method: 'eip3009';
@@ -294,6 +313,9 @@ type ParsedExactPayment = (ParsedExactBase & {
 }) | (ParsedExactBase & {
     method: 'aptos';
     payload: ExactAptosPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'near';
+    payload: ExactNearPaymentPayload;
 });
 interface X402Receipt {
     scheme: 'onchain-proof' | 'exact';
@@ -4313,10 +4335,10 @@ interface DiscoverySigner {
  * chain-agnostic — it never names a family, it just merges `extra`.
  */
 interface ExactRailInfo {
-    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
+    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
     /** Family-specific `extra` keys merged into the exact accept (e.g. `{ name, version }`
      *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana, `{ feePayer }` for
-     *  Algorand/Aptos). */
+     *  Algorand/Aptos/NEAR). */
     extra?: Record<string, unknown>;
 }
 /**
@@ -6759,7 +6781,7 @@ interface KnownFacilitator {
     /** The x402 schemes it settles (today only `exact`). */
     schemes: ReadonlyArray<'exact'>;
     /** The exact transfer methods it can settle on this network. */
-    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'>;
+    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'>;
     /** A short human note (who it is / caveat). */
     note?: string;
 }
@@ -6780,7 +6802,7 @@ declare function knownFacilitatorsFor(network: Caip2): ReadonlyArray<KnownFacili
  * specific transfer `method`). Returns `undefined` when none is known — the `exact: true`
  * shorthand branches on that to throw a coverage-specific guidance error.
  */
-declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'): KnownFacilitator | undefined;
+declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'): KnownFacilitator | undefined;
 
 /**
  * Reliable receipt delivery — the durable webhook a stateless gate can't be.

package/dist/index.d.ts

@@ -94,8 +94,11 @@ interface X402ExactAcceptEntry {
          *  keyless facilitator) signs that fee txn + submits. **Aptos: `'aptos'`** — the payer signs a
          *  fee-payer (sponsored) `primary_fungible_store::transfer` to `payTo` (per
          *  `scheme_exact_aptos.md`); the gate (or a keyless facilitator) adds the fee-payer signature
-         *  + submits, paying gas. PipRail self-settles ALL. */
-        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
+         *  + submits, paying gas. **NEAR: `'near'`** — the payer signs a NEP-366 `SignedDelegateAction`
+         *  authorizing exactly one NEP-141 `ft_transfer` to `payTo` (per `scheme_exact_near.md`); a
+         *  facilitator-selected relayer (`feePayer` below) prepays gas + the 1 yoctoNEAR and submits, so
+         *  the buyer holds zero NEAR. PipRail self-settles ALL. */
+        assetTransferMethod: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
         /** EIP-712 domain name of the token. OPTIONAL per the exact-EVM scheme (only
          *  `assetTransferMethod` is required) — a foreign rail may omit it. NEVER assumed
          *  from the symbol (USDC's on-chain name() is "USD Coin", not "USDC"); a PipRail gate
@@ -255,9 +258,24 @@ interface ExactAptosPaymentPayload {
     /** Base64 BCS-serialized buyer (sender) `AccountAuthenticator`. */
     senderAuth: string;
 }
+/**
+ * The `payload` a client sends for the **NEAR `exact`** variant, per `scheme_exact_near.md`:
+ * a base64-encoded, Borsh-serialized NEP-366 `SignedDelegateAction` whose single delegated action
+ * is one NEP-141 `ft_transfer` (to `payTo`, the exact `amount`, `deposit: 1` yoctoNEAR). The buyer
+ * signs the delegate action with a FULL-ACCESS key (a function-call key can't attach the 1 yocto and
+ * is rejected); a facilitator-selected relayer wraps it, prepays gas + the yocto, and submits. The
+ * signed delegate action IS the proof — there's no separate authorization object (the NEAR analogue
+ * of EIP-3009's `authorization` / SVM's `transaction`). Its single self-contained string field also
+ * distinguishes it from every other family's payload shape.
+ */
+interface ExactNearPaymentPayload {
+    /** Base64 of the Borsh-encoded NEP-366 `SignedDelegateAction` (one `ft_transfer`). */
+    signedDelegateAction: string;
+}
 /** Any `exact`-rail payload shape — EIP-3009 (`authorization`), Permit2 (`permit2Authorization`),
- *  SVM (`transaction`), Algorand (`paymentGroup`), or Aptos (`transaction` + `senderAuth`). */
-type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload;
+ *  SVM (`transaction`), Algorand (`paymentGroup`), Aptos (`transaction` + `senderAuth`), or NEAR
+ *  (`signedDelegateAction`). */
+type ExactPaymentPayloadAny = ExactPaymentPayload | Permit2PaymentPayload | ExactSvmPaymentPayload | ExactAlgorandPaymentPayload | ExactAptosPaymentPayload | ExactNearPaymentPayload;
 interface ParsedExactBase {
     x402Version: number;
     /** The client's claimed network (slug or CAIP-2) — for matching, not trust. */
@@ -277,7 +295,8 @@ interface ParsedExactBase {
  * (`authorization`), `'permit2'` → {@link Permit2PaymentPayload} (`permit2Authorization`),
  * `'svm'` → {@link ExactSvmPaymentPayload} (`transaction`), `'algorand'` →
  * {@link ExactAlgorandPaymentPayload} (`paymentGroup`); `'aptos'` →
- * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`).
+ * {@link ExactAptosPaymentPayload} (`transaction` + `senderAuth`); `'near'` →
+ * {@link ExactNearPaymentPayload} (`signedDelegateAction`).
  */
 type ParsedExactPayment = (ParsedExactBase & {
     method: 'eip3009';
@@ -294,6 +313,9 @@ type ParsedExactPayment = (ParsedExactBase & {
 }) | (ParsedExactBase & {
     method: 'aptos';
     payload: ExactAptosPaymentPayload;
+}) | (ParsedExactBase & {
+    method: 'near';
+    payload: ExactNearPaymentPayload;
 });
 interface X402Receipt {
     scheme: 'onchain-proof' | 'exact';
@@ -4313,10 +4335,10 @@ interface DiscoverySigner {
  * chain-agnostic — it never names a family, it just merges `extra`.
  */
 interface ExactRailInfo {
-    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos';
+    method: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near';
     /** Family-specific `extra` keys merged into the exact accept (e.g. `{ name, version }`
      *  for EVM EIP-3009, `{ feePayer, tokenProgram }` for Solana, `{ feePayer }` for
-     *  Algorand/Aptos). */
+     *  Algorand/Aptos/NEAR). */
     extra?: Record<string, unknown>;
 }
 /**
@@ -6759,7 +6781,7 @@ interface KnownFacilitator {
     /** The x402 schemes it settles (today only `exact`). */
     schemes: ReadonlyArray<'exact'>;
     /** The exact transfer methods it can settle on this network. */
-    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'>;
+    settles: ReadonlyArray<'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'>;
     /** A short human note (who it is / caveat). */
     note?: string;
 }
@@ -6780,7 +6802,7 @@ declare function knownFacilitatorsFor(network: Caip2): ReadonlyArray<KnownFacili
  * specific transfer `method`). Returns `undefined` when none is known — the `exact: true`
  * shorthand branches on that to throw a coverage-specific guidance error.
  */
-declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos'): KnownFacilitator | undefined;
+declare function firstKeylessFacilitator(network: Caip2, method?: 'eip3009' | 'permit2' | 'svm' | 'algorand' | 'aptos' | 'near'): KnownFacilitator | undefined;
 
 /**
  * Reliable receipt delivery — the durable webhook a stateless gate can't be.

package/dist/index.js

@@ -1396,7 +1396,7 @@ function chainIdFromNetwork(network) {
   const match = /^eip155:(\d+)$/.exec(network);
   if (!match || !match[1]) return null;
   const n = Number(match[1]);
-  return Number.isSafeInteger(n) ? n : null;
+  return Number.isSafeInteger(n) && n > 0 ? n : null;
 }
 function buildChallengeHeader(challenge) {
   return toBase64Json(challenge);
@@ -1469,6 +1469,9 @@ function parseExactPaymentHeader(value) {
   const x402Version = typeof v.x402Version === "number" ? v.x402Version : 2;
   const asset = accepted && typeof accepted.asset === "string" ? accepted.asset : void 0;
   const base2 = { x402Version, network, ...asset ? { asset } : {}, raw: v };
+  if (typeof payload.signedDelegateAction === "string") {
+    return { ...base2, method: "near", payload: { signedDelegateAction: payload.signedDelegateAction } };
+  }
   if (typeof payload.transaction === "string" && typeof payload.senderAuth === "string") {
     return { ...base2, method: "aptos", payload: { transaction: payload.transaction, senderAuth: payload.senderAuth } };
   }
@@ -1810,6 +1813,9 @@ function makeEvmNetwork(resolved) {
       if ("paymentGroup" in payload) {
         return { ok: false, error: "signature_invalid", detail: "An Algorand payload was submitted to an EVM exact rail." };
       }
+      if ("signedDelegateAction" in payload) {
+        return { ok: false, error: "signature_invalid", detail: "A NEAR payload was submitted to an EVM exact rail." };
+      }
       return verifyAndSettleExactEvm({
         publicClient,
         walletClient: a.walletClient,
@@ -1906,7 +1912,7 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await import("./near-MTYBCUYM.js");
+      mod = await import("./near-OTPQD6BI.js");
     } catch (cause) {
       throw new MissingDriverError(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
@@ -3242,7 +3248,7 @@ var PipRailClient = class {
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
         throw new UnsupportedSchemeError(
-          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana + Algorand today), and no 'onchain-proof' rail was offered.`
+          `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand + NEAR today), and no 'onchain-proof' rail was offered.`
         );
       }
       if (!schemes.includes("exact") && exactOnNet && typeof net.payExact === "function") {
@@ -3638,7 +3644,7 @@ var PipRailClient = class {
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
       throw new UnsupportedSchemeError(
-        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana + Algorand today).`
+        `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
       );
     }
     throwIfAborted(init?.signal);
@@ -5061,6 +5067,17 @@ var KNOWN_FACILITATORS = {
       note: "Corbits \u2014 keyless, Solana-first fee-payer sponsor. LIVE-settled on Solana 2026-06-15 (tx BCreYer\u2026)."
     }
   ]
+  // NEAR (near:mainnet) — DELIBERATELY UNSEEDED: no x402 facilitator settles NEAR yet.
+  // The NEAR `exact` BUYER payload PipRail builds (drivers/near/exact.ts) is LIVE-PROVEN on mainnet —
+  // a real NEP-366 meta-transaction settles a USDC/USDT ft_transfer gaslessly (buyer 0 NEAR, single-use
+  // via the access-key nonce; relay txs CMnQJzrLvwk… USDT + BCCnVHbSCMY… USDC, 2026-06-18). What's
+  // missing is the FACILITATOR side: the public x402-rs (which Ultravioleta DAO runs) has NO NEAR chain
+  // crate (only eip155/solana/aptos), and UVD's `/verify` 400s on a near:mainnet request even though its
+  // `/supported` ADVERTISES `near:mainnet` + feePayer `uvd-facilitator.near` — i.e. the listing is
+  // aspirational, not settle-capable (verified 2026-06-18). So `exact: true` must NOT auto-pick a NEAR
+  // facilitator. Seed here ONLY after a real keyless settle through a facilitator that actually
+  // implements scheme_exact_near.md (THE RULE). Merchants can still pass an explicit
+  // `exact: { settle: { facilitator } }` for any facilitator they've confirmed settles near:mainnet.
 };
 function knownFacilitatorsFor(network) {
   return KNOWN_FACILITATORS[network] ?? [];
@@ -5476,6 +5493,12 @@ function createPaymentGate(options) {
           return t;
         }
       }).join("|");
+    } else if ("signedDelegateAction" in exact.payload) {
+      try {
+        nonce = Buffer.from(exact.payload.signedDelegateAction, "base64").toString("base64");
+      } catch {
+        nonce = exact.payload.signedDelegateAction;
+      }
     } else if ("permit2Authorization" in exact.payload) {
       evmAuth = exact.payload.permit2Authorization;
       nonce = evmAuth.nonce;
@@ -5494,7 +5517,7 @@ function createPaymentGate(options) {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
         const ftMethod = accept.extra.assetTransferMethod;
-        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos";
+        const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
         if (needsFeePayer && !accept.extra.feePayer) {
           throw new SettlementError(
             `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`

package/dist/{near-DI2I3MAV.cjs → near-H5AQ253I.cjs}

@@ -8,6 +8,8 @@
 
 
 
+
+
 var _chunkJG6KRAW6cjs = require('./chunk-JG6KRAW6.cjs');
 
 // src/drivers/near/index.ts
@@ -15,6 +17,11 @@ var _nearapijs = require('near-api-js');
 
 // src/drivers/near/chains.ts
 var NEAR_DECIMALS = 24;
+function isValidNearAccountId(id) {
+  if (id.startsWith("0x")) return false;
+  if (id.length < 2 || id.length > 64) return false;
+  return /^(([a-z\d]+[-_])*[a-z\d]+\.)*([a-z\d]+[-_])*[a-z\d]+$/.test(id);
+}
 var NEAR_MAINNET = {
   caip2: "near:mainnet",
   defaultRpc: "https://free.rpc.fastnear.com",
@@ -92,6 +99,190 @@ function isNearAffordability(err) {
   return /not enough|doesn't have enough|does not have enough|lack ?balance|exceeds .*balance|insufficient/i.test(m);
 }
 
+// src/drivers/near/exact.ts
+
+var _borsh = require('borsh');
+var FT_TRANSFER_GAS2 = 30000000000000n;
+var ONE_YOCTO2 = 1n;
+var ESTIMATED_BLOCK_SECONDS = 1;
+var NONCE_BLOCK_MULTIPLIER = 1000000n;
+async function payExactNear(input) {
+  const { signer, senderId, blockHeight, accessKeyNonce, accept } = input;
+  if (accept.asset === "native") {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+      "NEAR exact is NEP-141-only (an ft_transfer); native NEAR is not exact-payable. Pay via onchain-proof."
+    );
+  }
+  if (!isValidNearAccountId(accept.asset)) {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
+  }
+  if (!isValidNearAccountId(accept.payTo)) {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
+  }
+  if (!isValidNearAccountId(senderId)) {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
+  }
+  const t = accept.maxTimeoutSeconds;
+  if (!Number.isInteger(t) || t <= 0) {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)("NEAR exact: maxTimeoutSeconds must be a positive integer.");
+  }
+  const timeoutBlocks = BigInt(Math.max(1, Math.ceil(t / ESTIMATED_BLOCK_SECONDS)));
+  const maxBlockHeight = blockHeight + timeoutBlocks;
+  const nonce = accessKeyNonce + 1n;
+  if (nonce >= blockHeight * NONCE_BLOCK_MULTIPLIER) {
+    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+      "NEAR exact: the access-key nonce is at the protocol ceiling for this block height; cannot build a delegate action."
+    );
+  }
+  const publicKey = await signer.getPublicKey();
+  const action = _nearapijs.actions.functionCall(
+    "ft_transfer",
+    { receiver_id: accept.payTo, amount: accept.amount },
+    FT_TRANSFER_GAS2,
+    ONE_YOCTO2
+  );
+  const delegateAction = _nearapijs.buildDelegateAction.call(void 0, {
+    senderId,
+    receiverId: accept.asset,
+    actions: [action],
+    nonce,
+    maxBlockHeight,
+    publicKey
+  });
+  const { signedDelegate } = await signer.signDelegateAction(delegateAction);
+  const encoded = _nearapijs.encodeSignedDelegate.call(void 0, signedDelegate);
+  return {
+    payload: { signedDelegateAction: Buffer.from(encoded).toString("base64") },
+    payerFrom: senderId,
+    // A stable id for THIS authorization (single-use on-chain via the access-key nonce): the
+    // client records it as the spend ref and re-presents the SAME signed action on a retry.
+    nonce: `${senderId}:${nonce.toString()}`
+  };
+}
+var MAX_RELAY_GAS = 300000000000000n;
+var b64decode = (s) => new Uint8Array(Buffer.from(s, "base64"));
+function shorten(msg) {
+  const oneLine = msg.replace(/\s+/g, " ").trim();
+  return oneLine.length > 200 ? `${oneLine.slice(0, 200)}\u2026` : oneLine;
+}
+function fail(error, detail) {
+  return { ok: false, error, detail };
+}
+function verifyExactNear(payload, accept, currentBlockHeight) {
+  if (accept.asset === "native" || !isValidNearAccountId(accept.asset)) {
+    return fail("transfer_not_found", `NEAR exact rail asset "${accept.asset}" is not a NEP-141 contract.`);
+  }
+  if (typeof _optionalChain([payload, 'optionalAccess', _ => _.signedDelegateAction]) !== "string") {
+    return fail("signature_invalid", "NEAR exact payload is missing signedDelegateAction.");
+  }
+  let decoded;
+  try {
+    decoded = _borsh.deserialize.call(void 0, _nearapijs.SCHEMA.SignedDelegate, b64decode(payload.signedDelegateAction));
+  } catch (err) {
+    return fail("signature_invalid", `Unparseable SignedDelegateAction: ${shorten(err instanceof Error ? err.message : String(err))}.`);
+  }
+  const da = _optionalChain([decoded, 'optionalAccess', _2 => _2.delegateAction]);
+  const sig = _optionalChain([decoded, 'optionalAccess', _3 => _3.signature]);
+  if (!da || sig == null) return fail("signature_invalid", "SignedDelegateAction is missing its delegate action or signature.");
+  if (!Array.isArray(da.actions) || da.actions.length !== 1) {
+    return fail("transfer_not_found", `the delegate must carry exactly one action, got ${_nullishCoalesce(_optionalChain([da, 'access', _4 => _4.actions, 'optionalAccess', _5 => _5.length]), () => ( 0))}.`);
+  }
+  const fc = _optionalChain([da, 'access', _6 => _6.actions, 'access', _7 => _7[0], 'optionalAccess', _8 => _8.functionCall]);
+  if (!fc || fc.methodName !== "ft_transfer") {
+    return fail("transfer_not_found", `the delegated action is not an ft_transfer (got "${_nullishCoalesce(_optionalChain([fc, 'optionalAccess', _9 => _9.methodName]), () => ( "none"))}").`);
+  }
+  if (da.receiverId !== accept.asset) {
+    return fail("transfer_not_found", `delegate receiver ${da.receiverId} \u2260 token contract ${accept.asset}.`);
+  }
+  let args;
+  try {
+    args = JSON.parse(Buffer.from(_nullishCoalesce(fc.args, () => ( new Uint8Array()))).toString());
+  } catch (e2) {
+    return fail("transfer_not_found", "the ft_transfer args are not valid JSON.");
+  }
+  if (args.receiver_id !== accept.payTo) {
+    return fail("wrong_recipient", `ft_transfer pays ${String(args.receiver_id)}, not payTo ${accept.payTo}.`);
+  }
+  if (typeof args.amount !== "string" || !/^\d+$/.test(args.amount) || BigInt(args.amount) < BigInt(accept.amount)) {
+    return fail("amount_too_low", `ft_transfer pays ${String(args.amount)} of the token, required ${accept.amount}.`);
+  }
+  let deposit;
+  let gas;
+  try {
+    deposit = BigInt(_nullishCoalesce(fc.deposit, () => ( 0)));
+    gas = BigInt(_nullishCoalesce(fc.gas, () => ( 0)));
+  } catch (e3) {
+    return fail("signature_invalid", "the ft_transfer has a malformed gas/deposit.");
+  }
+  if (deposit !== ONE_YOCTO2) {
+    return fail("signature_invalid", `attached deposit ${deposit} \u2260 the required 1 yoctoNEAR (relayer drain guard).`);
+  }
+  if (gas > MAX_RELAY_GAS) {
+    return fail("signature_invalid", `delegated gas ${gas} exceeds the ${MAX_RELAY_GAS} cap (relayer drain guard).`);
+  }
+  if (currentBlockHeight !== null) {
+    let maxBlock;
+    try {
+      maxBlock = BigInt(_nullishCoalesce(da.maxBlockHeight, () => ( 0)));
+    } catch (e4) {
+      return fail("signature_invalid", "the delegate has a malformed max_block_height.");
+    }
+    if (maxBlock <= currentBlockHeight) {
+      return fail("payment_expired", `the delegate expired (max_block_height ${maxBlock} \u2264 current ${currentBlockHeight}).`);
+    }
+  }
+  if (!da.senderId || !isValidNearAccountId(String(da.senderId))) {
+    return fail("signature_invalid", `the delegate sender "${String(da.senderId)}" is not a valid NEAR account id.`);
+  }
+  return { ok: true, senderId: String(da.senderId), delegateAction: new (0, _nearapijs.DelegateAction)(da), signature: sig };
+}
+async function verifyAndSettleExactNear(input) {
+  const { client, payload, accept } = input;
+  let height = null;
+  try {
+    height = await client.currentBlockHeight();
+  } catch (e5) {
+  }
+  const v = verifyExactNear(payload, accept, height);
+  if (!v.ok) return v;
+  let result;
+  try {
+    result = await client.relay({ senderId: v.senderId, delegateAction: v.delegateAction, signature: v.signature });
+  } catch (err) {
+    const m = err instanceof Error ? err.message : String(err);
+    if (/invalid.*nonce|nonce.*used|DelegateActionInvalidNonce/i.test(m)) {
+      return fail("tx_already_used", `this delegate was already used (single-use nonce): ${shorten(m)}.`);
+    }
+    if (/expired|DelegateActionExpired|max_block_height|deadline/i.test(m)) {
+      return fail("payment_expired", `the delegate expired before it landed: ${shorten(m)}.`);
+    }
+    if (/not enough|insufficient|exceeded the prepaid gas|NotEnoughBalance|doesn't have enough|is not registered/i.test(m)) {
+      return fail("tx_reverted", `the ft_transfer would fail on chain: ${shorten(m)}.`);
+    }
+    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+      `NEAR exact settle: the relayer could not submit the delegate (${shorten(m)}). The buyer's signed delegate is still valid \u2014 fund/fix the relayer and the buyer can re-present it.`,
+      { cause: err }
+    );
+  }
+  if (!result.innerSuccess) {
+    return fail("tx_reverted", `the ft_transfer receipt did not succeed on chain (tx ${result.txHash}).`);
+  }
+  return {
+    ok: true,
+    receipt: {
+      scheme: "exact",
+      success: true,
+      network: accept.network,
+      transaction: result.txHash,
+      asset: accept.asset,
+      amount: accept.amount,
+      payer: v.senderId,
+      payTo: accept.payTo,
+      verifiedAt: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  };
+}
+
 // src/drivers/near/verify.ts
 function parseFtTransferEvent(line) {
   const marker = "EVENT_JSON:";
@@ -102,7 +293,7 @@ function parseFtTransferEvent(line) {
     if (ev.standard === "nep141" && ev.event === "ft_transfer" && Array.isArray(ev.data)) {
       return ev.data;
     }
-  } catch (e2) {
+  } catch (e6) {
   }
   return null;
 }
@@ -113,7 +304,7 @@ async function verifyNear(params) {
   let tx;
   try {
     tx = await reader.txStatus(hash, senderId);
-  } catch (e3) {
+  } catch (e7) {
     return txNotFound(hash);
   }
   if (!tx) return txNotFound(hash);
@@ -134,7 +325,7 @@ async function verifyNear(params) {
     let paid2;
     try {
       paid2 = BigInt(_nullishCoalesce(tx.nativeDeposit, () => ( "0")));
-    } catch (e4) {
+    } catch (e8) {
       paid2 = 0n;
     }
     if (paid2 < required) {
@@ -176,7 +367,7 @@ async function verifyNear(params) {
         if (d.new_owner_id === accept.payTo && (_nullishCoalesce(d.memo, () => ( ""))) === nonce) {
           try {
             paid += BigInt(_nullishCoalesce(d.amount, () => ( "0")));
-          } catch (e5) {
+          } catch (e9) {
           }
           if (!payer) payer = _nullishCoalesce(d.old_owner_id, () => ( ""));
         }
@@ -253,11 +444,6 @@ var nearDriver = {
     return makeNearNetwork(NEAR_MAINNET, rpcUrl);
   }
 };
-function isValidNearAccountId(id) {
-  if (id.startsWith("0x")) return false;
-  if (id.length < 2 || id.length > 64) return false;
-  return /^(([a-z\d]+[-_])*[a-z\d]+\.)*([a-z\d]+[-_])*[a-z\d]+$/.test(id);
-}
 function makeNearNetwork(preset, rpcUrl) {
   const provider = new (0, _nearapijs.JsonRpcProvider)({ url: rpcUrl });
   const network = preset.caip2;
@@ -276,18 +462,18 @@ function makeNearNetwork(preset, rpcUrl) {
         logs: _nullishCoalesce(r.outcome.logs, () => ( []))
       }));
       const txn = outcome.transaction;
-      const receiverId = _optionalChain([txn, 'optionalAccess', _ => _.receiver_id]);
-      const nativeDeposit = sumTransferDeposits(_optionalChain([txn, 'optionalAccess', _2 => _2.actions])).toString();
+      const receiverId = _optionalChain([txn, 'optionalAccess', _10 => _10.receiver_id]);
+      const nativeDeposit = sumTransferDeposits(_optionalChain([txn, 'optionalAccess', _11 => _11.actions])).toString();
       let timestampMs;
       try {
-        const blockHash = _optionalChain([outcome, 'access', _3 => _3.transaction_outcome, 'optionalAccess', _4 => _4.block_hash]);
+        const blockHash = _optionalChain([outcome, 'access', _12 => _12.transaction_outcome, 'optionalAccess', _13 => _13.block_hash]);
         if (blockHash) {
           const block = await provider.viewBlock({ blockId: blockHash });
           const header = block.header;
-          const ns = _nullishCoalesce(_optionalChain([header, 'optionalAccess', _5 => _5.timestamp_nanosec]), () => ( (_optionalChain([header, 'optionalAccess', _6 => _6.timestamp]) != null ? String(header.timestamp) : void 0)));
+          const ns = _nullishCoalesce(_optionalChain([header, 'optionalAccess', _14 => _14.timestamp_nanosec]), () => ( (_optionalChain([header, 'optionalAccess', _15 => _15.timestamp]) != null ? String(header.timestamp) : void 0)));
           if (ns != null) timestampMs = Number(BigInt(ns) / 1000000n);
         }
-      } catch (e6) {
+      } catch (e10) {
       }
       return { success, receipts, receiverId, nativeDeposit, timestampMs };
     }
@@ -349,7 +535,7 @@ function makeNearNetwork(preset, rpcUrl) {
       const { accountId, signer } = resolveNearWallet(wallet._native);
       const account = new (0, _nearapijs.Account)(accountId, provider, signer);
       const hashOf = (outcome) => {
-        const hash2 = _optionalChain([outcome, 'access', _7 => _7.transaction, 'optionalAccess', _8 => _8.hash]);
+        const hash2 = _optionalChain([outcome, 'access', _16 => _16.transaction, 'optionalAccess', _17 => _17.hash]);
         if (!hash2) throw new Error("NEAR: signAndSendTransaction returned no tx hash.");
         return hash2;
       };
@@ -379,7 +565,7 @@ function makeNearNetwork(preset, rpcUrl) {
       try {
         const tx = await reader.txStatus(hash, senderId);
         if (tx && tx.success) return { height: "0" };
-      } catch (e7) {
+      } catch (e11) {
       }
       throw new (0, _chunkJG6KRAW6cjs.ConfirmationTimeoutError)(`NEAR tx ${hash} not confirmed in time.`);
     },
@@ -396,7 +582,7 @@ function makeNearNetwork(preset, rpcUrl) {
       let accountId;
       try {
         accountId = resolveNearWallet(wallet._native).accountId;
-      } catch (e8) {
+      } catch (e12) {
         return { token: null, native: null };
       }
       let native = null;
@@ -408,7 +594,7 @@ function makeNearNetwork(preset, rpcUrl) {
         });
         native = r.amount != null ? BigInt(r.amount) : null;
       } catch (e) {
-        native = /does not exist|UNKNOWN_ACCOUNT/i.test(String(_nullishCoalesce(_optionalChain([e, 'optionalAccess', _9 => _9.message]), () => ( e)))) ? 0n : null;
+        native = /does not exist|UNKNOWN_ACCOUNT/i.test(String(_nullishCoalesce(_optionalChain([e, 'optionalAccess', _18 => _18.message]), () => ( e)))) ? 0n : null;
       }
       if (asset === "native") return { token: native, native };
       let token = null;
@@ -422,7 +608,7 @@ function makeNearNetwork(preset, rpcUrl) {
         });
         token = r.result ? BigInt(JSON.parse(Buffer.from(r.result).toString())) : null;
       } catch (e) {
-        token = /does not exist|not registered|UNKNOWN_ACCOUNT/i.test(String(_nullishCoalesce(_optionalChain([e, 'optionalAccess', _10 => _10.message]), () => ( e)))) ? 0n : null;
+        token = /does not exist|not registered|UNKNOWN_ACCOUNT/i.test(String(_nullishCoalesce(_optionalChain([e, 'optionalAccess', _19 => _19.message]), () => ( e)))) ? 0n : null;
       }
       return { token, native };
     },
@@ -438,13 +624,103 @@ function makeNearNetwork(preset, rpcUrl) {
         });
         const parsed = r.result ? JSON.parse(Buffer.from(r.result).toString()) : null;
         return parsed == null ? { ready: false, reason: "NOT_REGISTERED" } : { ready: true };
-      } catch (e9) {
+      } catch (e13) {
         return { ready: "unknown" };
       }
     },
     async verify(ref, accept) {
       const { senderId, hash } = decodeRef(ref);
       return verifyNear({ reader, hash, senderId, accept });
+    },
+    // Standard x402 `exact` rail, BUYER side — build a NEP-366 SignedDelegateAction authorizing one
+    // NEP-141 ft_transfer (per scheme_exact_near.md). The buyer signs with its FULL-ACCESS key and
+    // spends ZERO NEAR; a keyless facilitator's relayer prepays the gas + 1 yoctoNEAR and submits.
+    // NEAR exact is NEP-141-only + facilitator-settled (see ./exact.ts for why) — native NEAR isn't
+    // exact-payable. Pre-reads the access-key nonce + final block height, then defers to payExactNear.
+    async payExact(wallet, accept) {
+      const { accountId, signer } = resolveNearWallet(wallet._native);
+      const publicKey = await signer.getPublicKey();
+      const [accessKey, block] = await Promise.all([
+        provider.query({
+          request_type: "view_access_key",
+          finality: "final",
+          account_id: accountId,
+          public_key: publicKey.toString()
+        }),
+        provider.viewBlock({ finality: "final" })
+      ]);
+      const accessKeyNonce = BigInt(_nullishCoalesce(accessKey.nonce, () => ( 0)));
+      const blockHeight = BigInt(_nullishCoalesce(_optionalChain([block, 'access', _20 => _20.header, 'optionalAccess', _21 => _21.height]), () => ( 0)));
+      const { payload, payerFrom, nonce } = await payExactNear({
+        signer,
+        senderId: accountId,
+        blockHeight,
+        accessKeyNonce,
+        accept
+      });
+      return { payload, accepted: accept, payerFrom, nonce };
+    },
+    // The gate's rail-advertisement SPI. NEAR exact is NEP-141-only. The fee payer (the relayer that
+    // prepays gas + the 1 yocto, so the BUYER pays nothing) comes from EITHER the merchant's own bound
+    // `relayer` (SELF mode — what works today) OR a facilitator-provided `feePayer` (facilitator mode —
+    // for when a NEAR x402 facilitator ships; none does yet). `null` for native / non-NEP-141 / when no
+    // fee payer is available. The buyer's SignedDelegateAction is self-contained, so `feePayer` rides in
+    // `extra` only for observability + (future) facilitator forwarding.
+    async resolveExactRail({ asset, relayer, feePayer }) {
+      if (asset === "native" || !isValidNearAccountId(asset)) return null;
+      let fp = feePayer;
+      if (!fp && relayer) {
+        try {
+          fp = resolveNearWallet(relayer._native).accountId;
+        } catch (e14) {
+          return null;
+        }
+      }
+      if (!fp) return null;
+      return { method: "near", extra: { feePayer: fp } };
+    },
+    // Standard x402 `exact` rail, SELLER side (SELF-SETTLE) — decode + verify the inbound delegate
+    // against the trusted accept, then RELAY it from the merchant's own NEAR relayer (which prepays the
+    // sub-cent gas + the 1 yocto). The buyer stays gasless. THIS is how a NEAR gate gets paid today
+    // (no third-party facilitator settles NEAR yet). The drain guard (gas/deposit caps) lives in
+    // verifyAndSettleExactNear, invisible to the gate.
+    async settleExactSelf({ relayer, payload, accept }) {
+      if (!("signedDelegateAction" in payload)) {
+        return { ok: false, error: "signature_invalid", detail: "NEAR exact expects a { signedDelegateAction } payload." };
+      }
+      let relayerWallet;
+      try {
+        relayerWallet = resolveNearWallet(relayer._native);
+      } catch (err) {
+        throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+          `NEAR exact settle: the relayer wallet is invalid (${err instanceof Error ? err.message : String(err)}).`,
+          { cause: err }
+        );
+      }
+      const relayerAccount = new (0, _nearapijs.Account)(relayerWallet.accountId, provider, relayerWallet.signer);
+      const isSuccess = (s) => typeof s === "object" && s !== null && "SuccessValue" in s;
+      const client = {
+        async currentBlockHeight() {
+          try {
+            const b = await provider.viewBlock({ finality: "final" });
+            return _optionalChain([b, 'access', _22 => _22.header, 'optionalAccess', _23 => _23.height]) != null ? BigInt(b.header.height) : null;
+          } catch (e15) {
+            return null;
+          }
+        },
+        async relay({ senderId, delegateAction, signature }) {
+          const outcome = await relayerAccount.signAndSendTransaction({
+            receiverId: senderId,
+            actions: [_nearapijs.actions.signedDelegate({ delegateAction, signature })],
+            waitUntil: "FINAL"
+          });
+          const txHash = _nullishCoalesce(_optionalChain([outcome, 'access', _24 => _24.transaction, 'optionalAccess', _25 => _25.hash]), () => ( ""));
+          const tokenReceipt = (_nullishCoalesce(outcome.receipts_outcome, () => ( []))).find((r) => _optionalChain([r, 'access', _26 => _26.outcome, 'optionalAccess', _27 => _27.executor_id]) === accept.asset);
+          const innerSuccess = tokenReceipt ? isSuccess(_optionalChain([tokenReceipt, 'access', _28 => _28.outcome, 'optionalAccess', _29 => _29.status])) : isSuccess(outcome.status);
+          return { txHash, innerSuccess };
+        }
+      };
+      return verifyAndSettleExactNear({ client, payload, accept });
     }
   };
 }
@@ -456,15 +732,15 @@ function decodeRef(ref) {
   if (i < 0) return { senderId: "", hash: ref };
   return { senderId: ref.slice(0, i), hash: ref.slice(i + 1) };
 }
-function sumTransferDeposits(actions2) {
-  if (!Array.isArray(actions2)) return 0n;
+function sumTransferDeposits(actions3) {
+  if (!Array.isArray(actions3)) return 0n;
   let sum = 0n;
-  for (const a of actions2) {
+  for (const a of actions3) {
     const t = _nullishCoalesce(a.Transfer, () => ( a.transfer));
     if (t && t.deposit != null) {
       try {
         sum += BigInt(t.deposit);
-      } catch (e10) {
+      } catch (e16) {
       }
     }
   }

package/dist/{near-MTYBCUYM.js → near-OTPQD6BI.js}

@@ -2,7 +2,9 @@ import {
   ConfirmationTimeoutError,
   InsufficientFundsError,
   RecipientNotReadyError,
+  SettlementError,
   UnknownTokenError,
+  UnsupportedSchemeError,
   WrongFamilyError,
   assertNoLegacyWalletKey,
   nativeCost,
@@ -11,10 +13,15 @@ import {
 } from "./chunk-7XK22JSQ.js";
 
 // src/drivers/near/index.ts
-import { JsonRpcProvider, Account, actions } from "near-api-js";
+import { JsonRpcProvider, Account, actions as actions2 } from "near-api-js";
 
 // src/drivers/near/chains.ts
 var NEAR_DECIMALS = 24;
+function isValidNearAccountId(id) {
+  if (id.startsWith("0x")) return false;
+  if (id.length < 2 || id.length > 64) return false;
+  return /^(([a-z\d]+[-_])*[a-z\d]+\.)*([a-z\d]+[-_])*[a-z\d]+$/.test(id);
+}
 var NEAR_MAINNET = {
   caip2: "near:mainnet",
   defaultRpc: "https://free.rpc.fastnear.com",
@@ -92,6 +99,190 @@ function isNearAffordability(err) {
   return /not enough|doesn't have enough|does not have enough|lack ?balance|exceeds .*balance|insufficient/i.test(m);
 }
 
+// src/drivers/near/exact.ts
+import { actions, buildDelegateAction, encodeSignedDelegate, DelegateAction, SCHEMA } from "near-api-js";
+import { deserialize } from "borsh";
+var FT_TRANSFER_GAS2 = 30000000000000n;
+var ONE_YOCTO2 = 1n;
+var ESTIMATED_BLOCK_SECONDS = 1;
+var NONCE_BLOCK_MULTIPLIER = 1000000n;
+async function payExactNear(input) {
+  const { signer, senderId, blockHeight, accessKeyNonce, accept } = input;
+  if (accept.asset === "native") {
+    throw new UnsupportedSchemeError(
+      "NEAR exact is NEP-141-only (an ft_transfer); native NEAR is not exact-payable. Pay via onchain-proof."
+    );
+  }
+  if (!isValidNearAccountId(accept.asset)) {
+    throw new UnsupportedSchemeError(`NEAR exact: asset "${accept.asset}" must be a NEP-141 contract account id.`);
+  }
+  if (!isValidNearAccountId(accept.payTo)) {
+    throw new UnsupportedSchemeError(`NEAR exact: payTo "${accept.payTo}" is not a valid NEAR account id.`);
+  }
+  if (!isValidNearAccountId(senderId)) {
+    throw new UnsupportedSchemeError(`NEAR exact: sender "${senderId}" is not a valid NEAR account id.`);
+  }
+  const t = accept.maxTimeoutSeconds;
+  if (!Number.isInteger(t) || t <= 0) {
+    throw new UnsupportedSchemeError("NEAR exact: maxTimeoutSeconds must be a positive integer.");
+  }
+  const timeoutBlocks = BigInt(Math.max(1, Math.ceil(t / ESTIMATED_BLOCK_SECONDS)));
+  const maxBlockHeight = blockHeight + timeoutBlocks;
+  const nonce = accessKeyNonce + 1n;
+  if (nonce >= blockHeight * NONCE_BLOCK_MULTIPLIER) {
+    throw new UnsupportedSchemeError(
+      "NEAR exact: the access-key nonce is at the protocol ceiling for this block height; cannot build a delegate action."
+    );
+  }
+  const publicKey = await signer.getPublicKey();
+  const action = actions.functionCall(
+    "ft_transfer",
+    { receiver_id: accept.payTo, amount: accept.amount },
+    FT_TRANSFER_GAS2,
+    ONE_YOCTO2
+  );
+  const delegateAction = buildDelegateAction({
+    senderId,
+    receiverId: accept.asset,
+    actions: [action],
+    nonce,
+    maxBlockHeight,
+    publicKey
+  });
+  const { signedDelegate } = await signer.signDelegateAction(delegateAction);
+  const encoded = encodeSignedDelegate(signedDelegate);
+  return {
+    payload: { signedDelegateAction: Buffer.from(encoded).toString("base64") },
+    payerFrom: senderId,
+    // A stable id for THIS authorization (single-use on-chain via the access-key nonce): the
+    // client records it as the spend ref and re-presents the SAME signed action on a retry.
+    nonce: `${senderId}:${nonce.toString()}`
+  };
+}
+var MAX_RELAY_GAS = 300000000000000n;
+var b64decode = (s) => new Uint8Array(Buffer.from(s, "base64"));
+function shorten(msg) {
+  const oneLine = msg.replace(/\s+/g, " ").trim();
+  return oneLine.length > 200 ? `${oneLine.slice(0, 200)}\u2026` : oneLine;
+}
+function fail(error, detail) {
+  return { ok: false, error, detail };
+}
+function verifyExactNear(payload, accept, currentBlockHeight) {
+  if (accept.asset === "native" || !isValidNearAccountId(accept.asset)) {
+    return fail("transfer_not_found", `NEAR exact rail asset "${accept.asset}" is not a NEP-141 contract.`);
+  }
+  if (typeof payload?.signedDelegateAction !== "string") {
+    return fail("signature_invalid", "NEAR exact payload is missing signedDelegateAction.");
+  }
+  let decoded;
+  try {
+    decoded = deserialize(SCHEMA.SignedDelegate, b64decode(payload.signedDelegateAction));
+  } catch (err) {
+    return fail("signature_invalid", `Unparseable SignedDelegateAction: ${shorten(err instanceof Error ? err.message : String(err))}.`);
+  }
+  const da = decoded?.delegateAction;
+  const sig = decoded?.signature;
+  if (!da || sig == null) return fail("signature_invalid", "SignedDelegateAction is missing its delegate action or signature.");
+  if (!Array.isArray(da.actions) || da.actions.length !== 1) {
+    return fail("transfer_not_found", `the delegate must carry exactly one action, got ${da.actions?.length ?? 0}.`);
+  }
+  const fc = da.actions[0]?.functionCall;
+  if (!fc || fc.methodName !== "ft_transfer") {
+    return fail("transfer_not_found", `the delegated action is not an ft_transfer (got "${fc?.methodName ?? "none"}").`);
+  }
+  if (da.receiverId !== accept.asset) {
+    return fail("transfer_not_found", `delegate receiver ${da.receiverId} \u2260 token contract ${accept.asset}.`);
+  }
+  let args;
+  try {
+    args = JSON.parse(Buffer.from(fc.args ?? new Uint8Array()).toString());
+  } catch {
+    return fail("transfer_not_found", "the ft_transfer args are not valid JSON.");
+  }
+  if (args.receiver_id !== accept.payTo) {
+    return fail("wrong_recipient", `ft_transfer pays ${String(args.receiver_id)}, not payTo ${accept.payTo}.`);
+  }
+  if (typeof args.amount !== "string" || !/^\d+$/.test(args.amount) || BigInt(args.amount) < BigInt(accept.amount)) {
+    return fail("amount_too_low", `ft_transfer pays ${String(args.amount)} of the token, required ${accept.amount}.`);
+  }
+  let deposit;
+  let gas;
+  try {
+    deposit = BigInt(fc.deposit ?? 0);
+    gas = BigInt(fc.gas ?? 0);
+  } catch {
+    return fail("signature_invalid", "the ft_transfer has a malformed gas/deposit.");
+  }
+  if (deposit !== ONE_YOCTO2) {
+    return fail("signature_invalid", `attached deposit ${deposit} \u2260 the required 1 yoctoNEAR (relayer drain guard).`);
+  }
+  if (gas > MAX_RELAY_GAS) {
+    return fail("signature_invalid", `delegated gas ${gas} exceeds the ${MAX_RELAY_GAS} cap (relayer drain guard).`);
+  }
+  if (currentBlockHeight !== null) {
+    let maxBlock;
+    try {
+      maxBlock = BigInt(da.maxBlockHeight ?? 0);
+    } catch {
+      return fail("signature_invalid", "the delegate has a malformed max_block_height.");
+    }
+    if (maxBlock <= currentBlockHeight) {
+      return fail("payment_expired", `the delegate expired (max_block_height ${maxBlock} \u2264 current ${currentBlockHeight}).`);
+    }
+  }
+  if (!da.senderId || !isValidNearAccountId(String(da.senderId))) {
+    return fail("signature_invalid", `the delegate sender "${String(da.senderId)}" is not a valid NEAR account id.`);
+  }
+  return { ok: true, senderId: String(da.senderId), delegateAction: new DelegateAction(da), signature: sig };
+}
+async function verifyAndSettleExactNear(input) {
+  const { client, payload, accept } = input;
+  let height = null;
+  try {
+    height = await client.currentBlockHeight();
+  } catch {
+  }
+  const v = verifyExactNear(payload, accept, height);
+  if (!v.ok) return v;
+  let result;
+  try {
+    result = await client.relay({ senderId: v.senderId, delegateAction: v.delegateAction, signature: v.signature });
+  } catch (err) {
+    const m = err instanceof Error ? err.message : String(err);
+    if (/invalid.*nonce|nonce.*used|DelegateActionInvalidNonce/i.test(m)) {
+      return fail("tx_already_used", `this delegate was already used (single-use nonce): ${shorten(m)}.`);
+    }
+    if (/expired|DelegateActionExpired|max_block_height|deadline/i.test(m)) {
+      return fail("payment_expired", `the delegate expired before it landed: ${shorten(m)}.`);
+    }
+    if (/not enough|insufficient|exceeded the prepaid gas|NotEnoughBalance|doesn't have enough|is not registered/i.test(m)) {
+      return fail("tx_reverted", `the ft_transfer would fail on chain: ${shorten(m)}.`);
+    }
+    throw new SettlementError(
+      `NEAR exact settle: the relayer could not submit the delegate (${shorten(m)}). The buyer's signed delegate is still valid \u2014 fund/fix the relayer and the buyer can re-present it.`,
+      { cause: err }
+    );
+  }
+  if (!result.innerSuccess) {
+    return fail("tx_reverted", `the ft_transfer receipt did not succeed on chain (tx ${result.txHash}).`);
+  }
+  return {
+    ok: true,
+    receipt: {
+      scheme: "exact",
+      success: true,
+      network: accept.network,
+      transaction: result.txHash,
+      asset: accept.asset,
+      amount: accept.amount,
+      payer: v.senderId,
+      payTo: accept.payTo,
+      verifiedAt: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  };
+}
+
 // src/drivers/near/verify.ts
 function parseFtTransferEvent(line) {
   const marker = "EVENT_JSON:";
@@ -253,11 +444,6 @@ var nearDriver = {
     return makeNearNetwork(NEAR_MAINNET, rpcUrl);
   }
 };
-function isValidNearAccountId(id) {
-  if (id.startsWith("0x")) return false;
-  if (id.length < 2 || id.length > 64) return false;
-  return /^(([a-z\d]+[-_])*[a-z\d]+\.)*([a-z\d]+[-_])*[a-z\d]+$/.test(id);
-}
 function makeNearNetwork(preset, rpcUrl) {
   const provider = new JsonRpcProvider({ url: rpcUrl });
   const network = preset.caip2;
@@ -358,7 +544,7 @@ function makeNearNetwork(preset, rpcUrl) {
           const outcome = await account.signAndSendTransaction({
             receiverId: contractId,
             actions: [
-              actions.functionCall("ft_transfer", { receiver_id: receiverId, amount, memo }, gas, deposit)
+              actions2.functionCall("ft_transfer", { receiver_id: receiverId, amount, memo }, gas, deposit)
             ]
           });
           return { hash: hashOf(outcome) };
@@ -366,7 +552,7 @@ function makeNearNetwork(preset, rpcUrl) {
         async nativeTransfer({ receiverId, amount }) {
           const outcome = await account.signAndSendTransaction({
             receiverId,
-            actions: [actions.transfer(BigInt(amount))]
+            actions: [actions2.transfer(BigInt(amount))]
           });
           return { hash: hashOf(outcome) };
         }
@@ -445,6 +631,96 @@ function makeNearNetwork(preset, rpcUrl) {
     async verify(ref, accept) {
       const { senderId, hash } = decodeRef(ref);
       return verifyNear({ reader, hash, senderId, accept });
+    },
+    // Standard x402 `exact` rail, BUYER side — build a NEP-366 SignedDelegateAction authorizing one
+    // NEP-141 ft_transfer (per scheme_exact_near.md). The buyer signs with its FULL-ACCESS key and
+    // spends ZERO NEAR; a keyless facilitator's relayer prepays the gas + 1 yoctoNEAR and submits.
+    // NEAR exact is NEP-141-only + facilitator-settled (see ./exact.ts for why) — native NEAR isn't
+    // exact-payable. Pre-reads the access-key nonce + final block height, then defers to payExactNear.
+    async payExact(wallet, accept) {
+      const { accountId, signer } = resolveNearWallet(wallet._native);
+      const publicKey = await signer.getPublicKey();
+      const [accessKey, block] = await Promise.all([
+        provider.query({
+          request_type: "view_access_key",
+          finality: "final",
+          account_id: accountId,
+          public_key: publicKey.toString()
+        }),
+        provider.viewBlock({ finality: "final" })
+      ]);
+      const accessKeyNonce = BigInt(accessKey.nonce ?? 0);
+      const blockHeight = BigInt(block.header?.height ?? 0);
+      const { payload, payerFrom, nonce } = await payExactNear({
+        signer,
+        senderId: accountId,
+        blockHeight,
+        accessKeyNonce,
+        accept
+      });
+      return { payload, accepted: accept, payerFrom, nonce };
+    },
+    // The gate's rail-advertisement SPI. NEAR exact is NEP-141-only. The fee payer (the relayer that
+    // prepays gas + the 1 yocto, so the BUYER pays nothing) comes from EITHER the merchant's own bound
+    // `relayer` (SELF mode — what works today) OR a facilitator-provided `feePayer` (facilitator mode —
+    // for when a NEAR x402 facilitator ships; none does yet). `null` for native / non-NEP-141 / when no
+    // fee payer is available. The buyer's SignedDelegateAction is self-contained, so `feePayer` rides in
+    // `extra` only for observability + (future) facilitator forwarding.
+    async resolveExactRail({ asset, relayer, feePayer }) {
+      if (asset === "native" || !isValidNearAccountId(asset)) return null;
+      let fp = feePayer;
+      if (!fp && relayer) {
+        try {
+          fp = resolveNearWallet(relayer._native).accountId;
+        } catch {
+          return null;
+        }
+      }
+      if (!fp) return null;
+      return { method: "near", extra: { feePayer: fp } };
+    },
+    // Standard x402 `exact` rail, SELLER side (SELF-SETTLE) — decode + verify the inbound delegate
+    // against the trusted accept, then RELAY it from the merchant's own NEAR relayer (which prepays the
+    // sub-cent gas + the 1 yocto). The buyer stays gasless. THIS is how a NEAR gate gets paid today
+    // (no third-party facilitator settles NEAR yet). The drain guard (gas/deposit caps) lives in
+    // verifyAndSettleExactNear, invisible to the gate.
+    async settleExactSelf({ relayer, payload, accept }) {
+      if (!("signedDelegateAction" in payload)) {
+        return { ok: false, error: "signature_invalid", detail: "NEAR exact expects a { signedDelegateAction } payload." };
+      }
+      let relayerWallet;
+      try {
+        relayerWallet = resolveNearWallet(relayer._native);
+      } catch (err) {
+        throw new SettlementError(
+          `NEAR exact settle: the relayer wallet is invalid (${err instanceof Error ? err.message : String(err)}).`,
+          { cause: err }
+        );
+      }
+      const relayerAccount = new Account(relayerWallet.accountId, provider, relayerWallet.signer);
+      const isSuccess = (s) => typeof s === "object" && s !== null && "SuccessValue" in s;
+      const client = {
+        async currentBlockHeight() {
+          try {
+            const b = await provider.viewBlock({ finality: "final" });
+            return b.header?.height != null ? BigInt(b.header.height) : null;
+          } catch {
+            return null;
+          }
+        },
+        async relay({ senderId, delegateAction, signature }) {
+          const outcome = await relayerAccount.signAndSendTransaction({
+            receiverId: senderId,
+            actions: [actions2.signedDelegate({ delegateAction, signature })],
+            waitUntil: "FINAL"
+          });
+          const txHash = outcome.transaction?.hash ?? "";
+          const tokenReceipt = (outcome.receipts_outcome ?? []).find((r) => r.outcome?.executor_id === accept.asset);
+          const innerSuccess = tokenReceipt ? isSuccess(tokenReceipt.outcome?.status) : isSuccess(outcome.status);
+          return { txHash, innerSuccess };
+        }
+      };
+      return verifyAndSettleExactNear({ client, payload, accept });
     }
   };
 }
@@ -456,10 +732,10 @@ function decodeRef(ref) {
   if (i < 0) return { senderId: "", hash: ref };
   return { senderId: ref.slice(0, i), hash: ref.slice(i + 1) };
 }
-function sumTransferDeposits(actions2) {
-  if (!Array.isArray(actions2)) return 0n;
+function sumTransferDeposits(actions3) {
+  if (!Array.isArray(actions3)) return 0n;
   let sum = 0n;
-  for (const a of actions2) {
+  for (const a of actions3) {
     const t = a.Transfer ?? a.transfer;
     if (t && t.deposit != null) {
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piprail/sdk",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "description": "Accept x402 crypto payments across 29 chains — every major EVM chain plus Solana, TON, Tron, NEAR, Sui, Aptos, Algorand, Stellar & XRPL — in a couple of lines. No backend, no database, no fee; payments settle straight to your wallet.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -86,6 +86,7 @@
     "@ton/crypto": ">=3 <4",
     "@ton/ton": ">=15 <17",
     "algosdk": ">=3 <4",
+    "borsh": ">=2 <3",
     "bs58": "^5.0.0",
     "near-api-js": ">=7 <8",
     "tronweb": ">=6 <7",
@@ -131,6 +132,9 @@
     },
     "algosdk": {
       "optional": true
+    },
+    "borsh": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -144,6 +148,7 @@
     "@ton/ton": "^16.2.4",
     "@types/node": "^22.10.0",
     "algosdk": "^3.5.2",
+    "borsh": "^2.0.0",
     "bs58": "^5.0.0",
     "near-api-js": "^7.2.0",
     "tronweb": "^6.3.0",