@piprail/sdk 2.7.0 → 2.9.0

package/dist/index.cjs

@@ -1,5 +1,6 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class; var _class2;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } async function _asyncOptionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = await fn(value); } else if (op === 'call' || op === 'optionalCall') { value = await fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
+var _chunkO4UQOZ4Zcjs = require('./chunk-O4UQOZ4Z.cjs');
 
 
 
@@ -24,7 +25,10 @@
 
 
 
-var _chunkJG6KRAW6cjs = require('./chunk-JG6KRAW6.cjs');
+
+
+
+var _chunkMWBT7MCEcjs = require('./chunk-MWBT7MCE.cjs');
 
 // src/drivers/registry.ts
 var byFamily = /* @__PURE__ */ new Map();
@@ -53,13 +57,13 @@ function resolveNetwork(opts) {
   const family = familyForChain(opts.chain);
   const driver = byFamily.get(family);
   if (!driver) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedNetworkError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedNetworkError)(
       `No driver registered for the "${family}" family \u2014 it may not be mounted yet (use the async resolveNetwork()).`
     );
   }
   const net = driver.resolve(opts);
   if (!net) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedNetworkError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedNetworkError)(
       `The ${family} driver didn't recognise this chain input.`
     );
   }
@@ -320,12 +324,12 @@ function resolveChain(input, rpcUrlOverride) {
 
 var _accounts = require('viem/accounts');
 function createWalletAdapter(config, resolved) {
-  _chunkJG6KRAW6cjs.assertNoLegacyWalletKey.call(void 0, config, "EVM");
+  _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, config, "EVM");
   if ("key" in config) {
     const key = config.key;
     if (typeof key !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(key)) {
       const hint = typeof key === "string" && !key.startsWith("0x") ? " (got a non-0x string \u2014 a base58/seed key belongs to another family; pass { key } as the EVM chain's 0x\u2026 hex secret)." : " (expected 0x followed by 64 hex characters).";
-      throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
         `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key${hint}`
       );
     }
@@ -333,7 +337,7 @@ function createWalletAdapter(config, resolved) {
     try {
       account = _accounts.privateKeyToAccount.call(void 0, key);
     } catch (err) {
-      throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+      throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
         `chain is EVM; the wallet { key } is not a valid 0x\u2026 32-byte hex private key: ${err instanceof Error ? err.message : String(err)}.`
       );
     }
@@ -343,12 +347,12 @@ function createWalletAdapter(config, resolved) {
   }
   const wc = config.walletClient;
   if (!wc.account) {
-    throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+    throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
       "chain is EVM; the provided walletClient has no attached account. Use `createWalletClient({ account, chain, transport })`, or pass { key }."
     );
   }
   if (wc.chain && wc.chain.id !== resolved.chainId) {
-    throw new (0, _chunkJG6KRAW6cjs.WrongChainError)(
+    throw new (0, _chunkMWBT7MCEcjs.WrongChainError)(
       `PipRailClient: walletClient is on chain ${wc.chain.id} but the SDK was configured with chain ${resolved.chainId}. They must match.`
     );
   }
@@ -678,7 +682,7 @@ async function payExactEvm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       `exact buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account (no recoverable ECDSA signature). Pay via onchain-proof.`
     );
   }
@@ -688,13 +692,13 @@ async function payExactEvm(input) {
     domain = await readExactDomain(publicClient, accept.asset);
   }
   if (!domain) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       `exact: couldn't derive the EIP-712 domain for ${accept.asset} on ${accept.network}. Either it isn't an EIP-3009 token (USDT needs Permit2; native/plain ERC-20 aren't exact-payable) \u2014 pay via onchain-proof \u2014 OR your RPC couldn't read it (transient): if the gate advertised eip3009, pass a reliable rpcUrl and retry.`
     );
   }
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _5 => _5.getRandomValues])) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the exact rail needs a CSPRNG nonce."
     );
   }
@@ -951,7 +955,7 @@ async function verifyAndSettleExactEvm(input) {
       args: writeArgs
     });
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle: the merchant relayer failed to broadcast transferWithAuthorization (${shorten(err instanceof Error ? err.message : String(err))}). The payer's authorization is still valid and unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -963,7 +967,7 @@ async function verifyAndSettleExactEvm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle: broadcast ${txHash} but couldn't confirm it (${shorten(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1094,7 +1098,7 @@ function shorten2(msg) {
 function randomPermit2Nonce() {
   const g = globalThis.crypto;
   if (!_optionalChain([g, 'optionalAccess', _8 => _8.getRandomValues])) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the permit2 rail needs a CSPRNG nonce."
     );
   }
@@ -1113,7 +1117,7 @@ async function ensurePermit2Allowance(input) {
       args: [account.address, PERMIT2_ADDRESS]
     });
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       `permit2: couldn't read the Permit2 allowance for ${token} (${shorten2(err instanceof Error ? err.message : String(err))}).`
     );
   }
@@ -1130,7 +1134,7 @@ async function ensurePermit2Allowance(input) {
     await publicClient.waitForTransactionReceipt({ hash, confirmations: 1 });
     return hash;
   } catch (err) {
-    throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `permit2: the one-time Permit2 approval for ${token} failed to broadcast (${shorten2(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     )));
@@ -1145,7 +1149,7 @@ async function payPermit2Evm(input) {
     code = void 0;
   }
   if (code && code !== "0x") {
-    throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+    throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
       `permit2 buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account. Pay via onchain-proof.`
     );
   }
@@ -1320,7 +1324,7 @@ async function verifyAndSettlePermit2Evm(input) {
       args: settleArgs
     });
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `permit2 settle: the merchant relayer failed to broadcast the proxy settle (${shorten2(err instanceof Error ? err.message : String(err))}). The payer's signature is still valid and its nonce unused \u2014 fund/fix the relayer and the payer can retry.`,
       { cause: err }
     );
@@ -1332,7 +1336,7 @@ async function verifyAndSettlePermit2Evm(input) {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
     }
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `permit2 settle: broadcast ${txHash} but couldn't confirm it (${shorten2(err instanceof Error ? err.message : String(err))}).`,
       { cause: err }
     );
@@ -1584,15 +1588,15 @@ function makeEvmNetwork(resolved) {
         const info = resolved.tokens[token.toUpperCase()];
         if (!info) {
           const known = Object.keys(resolved.tokens).join(", ") || "(none built in)";
-          throw new (0, _chunkJG6KRAW6cjs.UnknownTokenError)(
+          throw new (0, _chunkMWBT7MCEcjs.UnknownTokenError)(
             `token "${token}" isn't built in for ${resolved.chain.name} (known: ${known}). Pass { address, decimals } instead, or use 'native'.`
           );
         }
         return { asset: info.address, decimals: info.decimals, symbol: info.symbol };
       }
-      _chunkJG6KRAW6cjs.rejectForeignToken.call(void 0, token, "evm", network);
+      _chunkMWBT7MCEcjs.rejectForeignToken.call(void 0, token, "evm", network);
       if (!("address" in token)) {
-        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
           `chain ${network} is EVM; a custom token must be { address, decimals }.`
         );
       }
@@ -1624,20 +1628,20 @@ function makeEvmNetwork(resolved) {
     },
     assertValidPayTo(payTo) {
       if (!_viem.isAddress.call(void 0, payTo)) {
-        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
           `chain ${network} is EVM, but payTo "${payTo}" is not a valid 0x address.`
         );
       }
     },
     bindWallet(wallet) {
       if (typeof wallet !== "object" || wallet === null) {
-        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { key } (0x\u2026 hex) or { walletClient }.`
         );
       }
-      _chunkJG6KRAW6cjs.assertNoLegacyWalletKey.call(void 0, wallet, "EVM");
+      _chunkMWBT7MCEcjs.assertNoLegacyWalletKey.call(void 0, wallet, "EVM");
       if (!("key" in wallet) && !("walletClient" in wallet)) {
-        throw new (0, _chunkJG6KRAW6cjs.WrongFamilyError)(
+        throw new (0, _chunkMWBT7MCEcjs.WrongFamilyError)(
           `chain ${network} is EVM; wallet must be { key } (0x\u2026 hex) or { walletClient }.`
         );
       }
@@ -1654,12 +1658,12 @@ function makeEvmNetwork(resolved) {
         });
       } catch (err) {
         if (isViemInsufficientFunds(err)) {
-          throw new (0, _chunkJG6KRAW6cjs.InsufficientFundsError)(
+          throw new (0, _chunkMWBT7MCEcjs.InsufficientFundsError)(
             err instanceof Error ? err.message : "Insufficient funds for payment.",
             { cause: err }
           );
         }
-        throw _nullishCoalesce(_chunkJG6KRAW6cjs.toInsufficientFundsError.call(void 0, err), () => ( err));
+        throw _nullishCoalesce(_chunkMWBT7MCEcjs.toInsufficientFundsError.call(void 0, err), () => ( err));
       }
     },
     async confirm(ref, minConfirmations) {
@@ -1670,7 +1674,7 @@ function makeEvmNetwork(resolved) {
         });
         return { height: receipt.blockNumber.toString() };
       } catch (err) {
-        throw new (0, _chunkJG6KRAW6cjs.ConfirmationTimeoutError)(
+        throw new (0, _chunkMWBT7MCEcjs.ConfirmationTimeoutError)(
           `EVM tx ${ref} did not reach ${minConfirmations} confirmation(s) in time.`,
           { cause: err }
         );
@@ -1680,7 +1684,7 @@ function makeEvmNetwork(resolved) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact") {
         const permit2 = accept.extra.assetTransferMethod === "permit2";
-        return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
+        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: 0n,
@@ -1691,7 +1695,7 @@ function makeEvmNetwork(resolved) {
       const gasLimit = accept.asset === "native" ? 21000n : 65000n;
       try {
         const gasPrice = await publicClient.getGasPrice();
-        return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
+        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -1700,7 +1704,7 @@ function makeEvmNetwork(resolved) {
         });
       } catch (e20) {
         const gasPrice = 5000000000n;
-        return _chunkJG6KRAW6cjs.nativeCost.call(void 0, {
+        return _chunkMWBT7MCEcjs.nativeCost.call(void 0, {
           symbol,
           decimals,
           fee: gasPrice * gasLimit,
@@ -1840,9 +1844,9 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-M3VOHCMO.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-MYF4HBO4.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
         { cause }
       );
@@ -1852,9 +1856,9 @@ var loaders = {
   ton: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-MMPKWT6N.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./ton-AOR3EURW.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `TON selected, but its packages aren't installed. Run: npm install @ton/ton @ton/core @ton/crypto`,
         { cause }
       );
@@ -1864,9 +1868,9 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-FW6C6FBE.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-SUKASK4N.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
         { cause }
       );
@@ -1876,9 +1880,9 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-PECT4IMX.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-Y6SQNYLC.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
         { cause }
       );
@@ -1888,9 +1892,9 @@ var loaders = {
   tron: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-JOT4STIG.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./tron-EMFXDFHW.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Tron selected, but its package isn't installed. Run: npm install tronweb`,
         { cause }
       );
@@ -1900,9 +1904,9 @@ var loaders = {
   sui: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-47C2KEZI.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./sui-VE5LT7BL.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Sui selected, but its package isn't installed. Run: npm install @mysten/sui`,
         { cause }
       );
@@ -1912,9 +1916,9 @@ var loaders = {
   near: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-H5AQ253I.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./near-6KAQVVG2.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `NEAR selected, but its package isn't installed. Run: npm install near-api-js`,
         { cause }
       );
@@ -1924,9 +1928,9 @@ var loaders = {
   aptos: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-JQMZNTMD.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./aptos-GHJPO6JJ.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Aptos selected, but its package isn't installed. Run: npm install @aptos-labs/ts-sdk`,
         { cause }
       );
@@ -1936,9 +1940,9 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-TMA62DN2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-FCEECDG6.cjs")));
     } catch (cause) {
-      throw new (0, _chunkJG6KRAW6cjs.MissingDriverError)(
+      throw new (0, _chunkMWBT7MCEcjs.MissingDriverError)(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
         { cause }
       );
@@ -2027,7 +2031,7 @@ var SLUG_TO_CAIP2 = {
   bsc: "eip155:56",
   // non-EVM families — values mirror each driver's bound caip2 exactly
   solana: "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
-  ton: "ton:-239",
+  ton: "tvm:-239",
   tron: "tron:mainnet",
   near: "near:mainnet",
   sui: "sui:mainnet",
@@ -2036,7 +2040,12 @@ var SLUG_TO_CAIP2 = {
   stellar: "stellar:pubnet",
   xrpl: "xrpl:0"
 };
+var LEGACY_CAIP2_ALIAS = {
+  "ton:-239": "tvm:-239"
+};
 function normalizeNetwork(network) {
+  const legacy = LEGACY_CAIP2_ALIAS[network];
+  if (legacy) return legacy;
   if (network.includes(":")) return network;
   return _nullishCoalesce(SLUG_TO_CAIP2[network.toLowerCase()], () => ( network));
 }
@@ -2577,6 +2586,53 @@ function encodeBase642(str) {
 }
 
 // src/policy.ts
+var DENOM_PRECISION = _chunkMWBT7MCEcjs.MAX_DECIMALS;
+var BUILTIN_DENOMS = {
+  USDC: "USD",
+  USDT: "USD",
+  USD1: "USD",
+  FDUSD: "USD",
+  RLUSD: "USD",
+  EURC: "EUR"
+};
+function denomOf(symbol, asset, policy) {
+  if (asset === "native") return void 0;
+  const norm = (v) => typeof v === "string" && v.trim() !== "" ? v.trim().toUpperCase() : void 0;
+  const override = _optionalChain([policy, 'optionalAccess', _18 => _18.denomFor]);
+  if (override && typeof override === "object") {
+    if (asset && asset in override) {
+      const d = norm(override[asset]);
+      if (d) return d;
+    }
+    if (symbol) {
+      const hit = Object.entries(override).find(([k]) => k.trim().toUpperCase() === symbol.trim().toUpperCase());
+      if (hit) {
+        const d = norm(hit[1]);
+        if (d) return d;
+      }
+    }
+  }
+  if (symbol) {
+    const builtin = BUILTIN_DENOMS[symbol.trim().toUpperCase()];
+    if (builtin) return builtin;
+  }
+  return void 0;
+}
+function scaleToDenom(amountBase, decimals) {
+  if (!Number.isSafeInteger(decimals) || decimals < 0 || decimals > DENOM_PRECISION) return null;
+  return amountBase * 10n ** BigInt(DENOM_PRECISION - decimals);
+}
+function capForDenom(caps, denom) {
+  if (!caps || typeof caps !== "object") return void 0;
+  const target = denom.trim().toUpperCase();
+  let best;
+  for (const [k, v] of Object.entries(caps)) {
+    if (typeof k !== "string" || typeof v !== "string") continue;
+    if (k.trim().toUpperCase() !== target) continue;
+    if (best === void 0 || Number(v) < Number(best)) best = v;
+  }
+  return best;
+}
 var ALLOW = { allowed: true };
 var deny = (code, reason) => ({
   allowed: false,
@@ -2643,7 +2699,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
     }
   }
   if (policy.maxAmount !== void 0) {
-    const cap = _chunkJG6KRAW6cjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
+    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.maxAmount, intent.decimals);
     if (intent.amountBase > cap) {
       return deny(
         "MAX_AMOUNT",
@@ -2652,7 +2708,7 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
     }
   }
   if (policy.maxTotal !== void 0) {
-    const cap = _chunkJG6KRAW6cjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
+    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.maxTotal, intent.decimals);
     if (spentForAssetBase + intent.amountBase > cap) {
       return deny(
         "MAX_TOTAL",
@@ -2660,8 +2716,36 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
       );
     }
   }
+  if (ctx && policy.maxTotalPerDenom) {
+    const denom = denomOf(intent.symbol, intent.asset, policy);
+    const capStr = denom ? capForDenom(policy.maxTotalPerDenom, denom) : void 0;
+    if (denom && capStr !== void 0) {
+      const thisScaled = scaleToDenom(intent.amountBase, intent.decimals);
+      if (thisScaled === null) {
+        return deny(
+          "MAX_TOTAL_DENOM",
+          `token for ${denom} has more than ${DENOM_PRECISION} decimals \u2014 refusing to count it toward policy.maxTotalPerDenom.${denom} on trust (it can't be summed safely).`
+        );
+      }
+      const capScaled = _chunkMWBT7MCEcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
+      if ((_nullishCoalesce(ctx.spentInDenomScaled, () => ( 0n))) + thisScaled > capScaled) {
+        return deny(
+          "MAX_TOTAL_DENOM",
+          `this payment would push total ${denom} spend past policy.maxTotalPerDenom.${denom} (${capStr}) \u2014 summed across every ${denom} token and chain.`
+        );
+      }
+    }
+  }
+  if (ctx && policy.maxPayments !== void 0) {
+    if ((_nullishCoalesce(ctx.paymentCount, () => ( 0))) + 1 > policy.maxPayments) {
+      return deny(
+        "MAX_PAYMENTS",
+        `this payment would exceed policy.maxPayments (${policy.maxPayments}); already settled ${_nullishCoalesce(ctx.paymentCount, () => ( 0))}.`
+      );
+    }
+  }
   if (ctx && policy.windowTotal !== void 0 && policy.windowSeconds !== void 0) {
-    const cap = _chunkJG6KRAW6cjs.floorUnits.call(void 0, policy.windowTotal, intent.decimals);
+    const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.windowTotal, intent.decimals);
     if (ctx.spentInWindowBase + intent.amountBase > cap) {
       return deny(
         "WINDOW_TOTAL",
@@ -2669,44 +2753,150 @@ function evaluatePolicy(intent, policy, spentForAssetBase, ctx) {
       );
     }
   }
+  if (ctx && policy.maxPaymentsPerWindow !== void 0 && policy.windowSeconds !== void 0) {
+    if ((_nullishCoalesce(ctx.paymentCountInWindow, () => ( 0))) + 1 > policy.maxPaymentsPerWindow) {
+      return deny(
+        "WINDOW_COUNT",
+        `this payment would exceed policy.maxPaymentsPerWindow (${policy.maxPaymentsPerWindow}) within the last ${policy.windowSeconds}s.`
+      );
+    }
+  }
   return ALLOW;
 }
 
 // src/ledger.ts
 var keyFor = (network, asset) => `${network}|${asset}`;
-var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this); }
+var SpendLedger = (_class = class {
   __init() {this.records = []}
   __init2() {this.buckets = /* @__PURE__ */ new Map()}
+  /** Per-denomination running total, scaled to {@link DENOM_PRECISION}. Keyed by the
+   *  UPPERCASE denomination so lookups are case-insensitive. */
+  __init3() {this.denomTotals = /* @__PURE__ */ new Map()}
+  /** Threshold keys already warned (`warnAtFraction` fires once per crossing per cap).
+   *  Lives on the LEDGER — not the client — so clients SHARING one (a cross-chain
+   *  MultiChainPayer) dedupe together: a denomination/count threshold fires once across the
+   *  whole shared budget, not once per chain. */
+  __init4() {this.warned = /* @__PURE__ */ new Set()}
+  
   /**
    * Session clock origin (epoch-ms) — process/session start = ledger
    * construction. In-memory; a new process is a new session. The client reads it
    * to compute the `ttlSeconds` deadline and the rolling-window slice.
    */
-  __init3() {this.sessionStart = Date.now()}
-  /** Record a settled payment. `decimals` is the TRUE token decimals (for the
-   *  per-asset running total used by maxTotal + the formatted summary). */
-  record(r, decimals) {
-    this.records.push(r);
-    const key = keyFor(r.network, r.asset);
+  __init5() {this.sessionStart = Date.now()}
+  /**
+   * @param store Optional durable {@link SpendStore}. When supplied, the ledger
+   *   HYDRATES from `store.load()` here (so prior spend resumes after a restart) and
+   *   `append()`s every settled payment. A throwing/absent store fails SAFE to an
+   *   empty in-memory ledger — it never blocks construction (ERRORS.md: never throw).
+   */
+  constructor(store) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this);_class.prototype.__init4.call(this);_class.prototype.__init5.call(this);
+    this.store = store;
+    if (store) {
+      let seed = [];
+      try {
+        seed = _nullishCoalesce(store.load(), () => ( []));
+      } catch (e27) {
+        seed = [];
+      }
+      for (const r of seed) this.ingest(r, _nullishCoalesce(_optionalChain([r, 'optionalAccess', _19 => _19.decimals]), () => ( 0)), _optionalChain([r, 'optionalAccess', _20 => _20.denom]));
+    }
+  }
+  /**
+   * A record is safe to tally iff its `amountBase` is a non-negative integer STRING and its
+   * `decimals` is an integer in `[0, MAX_DECIMALS]`. The live `record()` path always passes
+   * (the client validated the quote), but a hydrated record comes from an UNTRUSTED store
+   * (a tampered/corrupt/future-version JSONL line), so we gate it here — a bad record is
+   * dropped rather than allowed to throw `BigInt(...)`/`formatUnits(...)` later and brick a
+   * read or the constructor.
+   */
+  isTallyable(r, decimals) {
+    return !!r && typeof r.amountBase === "string" && /^\d+$/.test(r.amountBase) && Number.isInteger(decimals) && decimals >= 0 && decimals <= _chunkMWBT7MCEcjs.MAX_DECIMALS;
+  }
+  /** Apply a record to the in-memory tallies (records + per-asset bucket + denom total).
+   *  Shared by {@link record} and constructor hydration; does NOT persist. Returns the
+   *  stored record, or `null` when the record is corrupt and was skipped. */
+  ingest(r, decimals, denom) {
+    if (!this.isTallyable(r, decimals)) return null;
+    const denomStr = typeof denom === "string" && denom.trim() !== "" ? denom : void 0;
+    const rec = { ...r, decimals, ...denomStr ? { denom: denomStr } : {} };
+    this.records.push(rec);
+    const key = keyFor(rec.network, rec.asset);
     const bucket = this.buckets.get(key);
     if (bucket) {
-      bucket.total += BigInt(r.amountBase);
+      bucket.total += BigInt(rec.amountBase);
       bucket.count += 1;
-      if (!bucket.symbol && r.symbol) bucket.symbol = r.symbol;
+      if (!bucket.symbol && rec.symbol) bucket.symbol = rec.symbol;
     } else {
       this.buckets.set(key, {
-        network: r.network,
-        asset: r.asset,
-        symbol: r.symbol,
+        network: rec.network,
+        asset: rec.asset,
+        symbol: rec.symbol,
         decimals,
-        total: BigInt(r.amountBase),
+        total: BigInt(rec.amountBase),
         count: 1
       });
     }
+    if (denomStr) {
+      const scaled = scaleToDenom(BigInt(rec.amountBase), decimals);
+      if (scaled !== null) {
+        const k = denomStr.toUpperCase();
+        this.denomTotals.set(k, (_nullishCoalesce(this.denomTotals.get(k), () => ( 0n))) + scaled);
+      }
+    }
+    return rec;
+  }
+  /** Record a settled payment. `decimals` is the TRUE token decimals (for the
+   *  per-asset running total + the formatted summary). `denom` is the unit-of-account
+   *  the payment counts toward in the grand total (or omit for none). Persists to the
+   *  {@link SpendStore} when one is configured (a failed append never throws). */
+  record(r, decimals, denom) {
+    const rec = this.ingest(r, decimals, denom);
+    if (rec && this.store) {
+      try {
+        this.store.append(rec);
+      } catch (e28) {
+      }
+    }
   }
   /** Running total (base units) already spent on this (network, asset). */
   totalFor(network, asset) {
-    return _nullishCoalesce(_optionalChain([this, 'access', _18 => _18.buckets, 'access', _19 => _19.get, 'call', _20 => _20(keyFor(network, asset)), 'optionalAccess', _21 => _21.total]), () => ( 0n));
+    return _nullishCoalesce(_optionalChain([this, 'access', _21 => _21.buckets, 'access', _22 => _22.get, 'call', _23 => _23(keyFor(network, asset)), 'optionalAccess', _24 => _24.total]), () => ( 0n));
+  }
+  /**
+   * Running grand total for a DENOMINATION, scaled to {@link DENOM_PRECISION} (so
+   * tokens of different decimals add up exactly). Summed across every token of that
+   * denomination and every chain this ledger has seen. Powers `maxTotalPerDenom`.
+   * `0n` for a denomination never spent on. Case-insensitive.
+   */
+  totalForDenom(denom) {
+    return _nullishCoalesce(this.denomTotals.get(denom.toUpperCase()), () => ( 0n));
+  }
+  /** Total number of settled payments (across every chain + token). Powers `maxPayments`. */
+  count() {
+    return this.records.length;
+  }
+  /** Mark a `warnAtFraction` threshold key as fired; returns `true` the FIRST time (so the
+   *  caller emits the `budget-threshold` event once) and `false` thereafter. Shared across
+   *  every client on this ledger, so a cross-chain threshold fires once for the whole budget. */
+  markWarned(key) {
+    if (this.warned.has(key)) return false;
+    this.warned.add(key);
+    return true;
+  }
+  /**
+   * Number of settled payments whose `at` (ISO) is at or after `sinceMs` (epoch-ms),
+   * across every chain + token. Backs the rolling payment-count cap
+   * (`maxPaymentsPerWindow`, `sinceMs = now - windowSeconds*1000`). Linear scan —
+   * negligible at agent-session cardinality and only when a window count cap is set.
+   */
+  countSince(sinceMs) {
+    let n = 0;
+    for (const r of this.records) {
+      const t = Date.parse(r.at);
+      if (Number.isNaN(t) || t >= sinceMs) n += 1;
+    }
+    return n;
   }
   /**
    * Sum of base-unit amounts for (network, asset) whose record `at` (ISO
@@ -2718,9 +2908,9 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
   totalSince(network, asset, sinceMs) {
     let sum = 0n;
     for (const r of this.records) {
-      if (r.network === network && r.asset === asset && Date.parse(r.at) >= sinceMs) {
-        sum += BigInt(r.amountBase);
-      }
+      if (r.network !== network || r.asset !== asset) continue;
+      const t = Date.parse(r.at);
+      if (Number.isNaN(t) || t >= sinceMs) sum += BigInt(r.amountBase);
     }
     return sum;
   }
@@ -2740,6 +2930,14 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
       totalBase: b.total
     }));
   }
+  /**
+   * The per-denomination grand totals, as read-only tuples — `denom` and the running
+   * `totalScaled` (at {@link DENOM_PRECISION}). Lets the client compose the grand-total
+   * budget view; the cap math lives in the client. A never-spent denomination is absent.
+   */
+  denomBuckets() {
+    return [...this.denomTotals.entries()].map(([denom, totalScaled]) => ({ denom, totalScaled }));
+  }
   /** An immutable snapshot of all spend so far. */
   summary() {
     return {
@@ -2750,9 +2948,15 @@ var SpendLedger = (_class = class {constructor() { _class.prototype.__init.call(
         symbol: b.symbol,
         decimals: b.decimals,
         totalBase: b.total.toString(),
-        totalFormatted: _chunkJG6KRAW6cjs.formatUnits.call(void 0, b.total, b.decimals),
+        totalFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, b.total, b.decimals),
         count: b.count
       })),
+      byDenom: [...this.denomTotals.entries()].map(([denom, scaled]) => ({
+        denom,
+        totalScaled: scaled.toString(),
+        totalFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, scaled, DENOM_PRECISION),
+        count: this.records.filter((r) => _optionalChain([r, 'access', _25 => _25.denom, 'optionalAccess', _26 => _26.toUpperCase, 'call', _27 => _27()]) === denom).length
+      })),
       records: [...this.records]
     };
   }
@@ -2766,24 +2970,36 @@ var RECIPIENT_FIX = {
   NOT_OPTED_IN: "the recipient must opt into this asset once (a 0-amount self-transfer)",
   INACTIVE: "the recipient account doesn't exist yet \u2014 fund it with the chain's base reserve to activate it"
 };
-var PipRailClient = (_class2 = class {
+var PipRailClient = class {
+  
   
   
   
+  // Per-asset (+ per-denomination + count) tally of everything this client has paid —
+  // powers spent()/budget() and the maxTotal/maxTotalPerDenom/maxPayments caps. Either
+  // its own (optionally store-backed) ledger, or a SHARED one injected so the grand
+  // total + count caps span several chains (MultiChainPayer.fromWallets).
   
-  // Per-asset tally of everything this client has paid (powers spent() and the
-  // policy's maxTotal cap).
-  __init4() {this.ledger = new SpendLedger()}
+  // `warnAtFraction` threshold dedup lives on the LEDGER (`ledger.markWarned`), so clients
+  // sharing one ledger (a cross-chain MultiChainPayer) fire each threshold once for the whole
+  // shared budget — not once per chain.
   // Resolved lazily on first request — this is what lets Solana (and future
   // families) auto-mount with no setup call.
   
-  constructor(opts) {;_class2.prototype.__init4.call(this);
+  constructor(opts) {
     this.opts = opts;
     this.maxRetries = Math.max(1, _nullishCoalesce(opts.maxPaymentRetries, () => ( 3)));
     this.retryTimeoutMs = _nullishCoalesce(opts.retryTimeoutMs, () => ( 3e4));
     this.onEvent = _nullishCoalesce(opts.onEvent, () => ( (() => void 0)));
+    if (opts.ledger && opts.spendStore) {
+      throw new TypeError(
+        "Pass either `ledger` (a shared SpendLedger) or `spendStore`, not both \u2014 a shared ledger already owns its store."
+      );
+    }
+    this.ledger = _nullishCoalesce(opts.ledger, () => ( new SpendLedger(opts.spendStore)));
     this.assertPolicyAmountCaps(opts.policy);
     this.assertPolicyTimeOptions(opts.policy);
+    this.assertPolicySpendControls(opts.policy);
   }
   /**
    * Fail LOUDLY at construction on a malformed amount cap — a security boundary
@@ -2804,6 +3020,65 @@ var PipRailClient = (_class2 = class {
         );
       }
     }
+    if (policy.maxTotalPerDenom !== void 0) {
+      const m = policy.maxTotalPerDenom;
+      const proto = m && typeof m === "object" ? Object.getPrototypeOf(m) : false;
+      if (!m || typeof m !== "object" || Array.isArray(m) || proto !== Object.prototype && proto !== null) {
+        throw new TypeError(
+          `policy.maxTotalPerDenom must be a plain { DENOM: amount } object (e.g. { USD: '20.00' }); got ${JSON.stringify(policy.maxTotalPerDenom)}.`
+        );
+      }
+      for (const [denom, v] of Object.entries(policy.maxTotalPerDenom)) {
+        if (denom.trim() === "") {
+          throw new TypeError("policy.maxTotalPerDenom has a blank denomination key.");
+        }
+        if (typeof v !== "string" || !/^\d+(\.\d+)?$/.test(v)) {
+          throw new TypeError(
+            `policy.maxTotalPerDenom.${denom} must be a non-negative decimal string (e.g. '20.00'); got ${JSON.stringify(v)}.`
+          );
+        }
+      }
+    }
+    if (policy.denomFor !== void 0) {
+      const m = policy.denomFor;
+      if (!m || typeof m !== "object" || Array.isArray(m)) {
+        throw new TypeError(`policy.denomFor must be a { token: DENOM } object; got ${JSON.stringify(m)}.`);
+      }
+      for (const [k, v] of Object.entries(policy.denomFor)) {
+        if (typeof v !== "string" || v.trim() === "") {
+          throw new TypeError(`policy.denomFor.${k} must be a non-empty denomination string; got ${JSON.stringify(v)}.`);
+        }
+      }
+    }
+  }
+  /**
+   * Fail LOUDLY at construction on a misconfigured count / threshold control (a
+   * programmer error → `TypeError`): payment counts must be positive safe integers,
+   * `maxPaymentsPerWindow` needs `windowSeconds` (it shares the window), and
+   * `warnAtFraction` must be in (0, 1].
+   */
+  assertPolicySpendControls(policy) {
+    if (!policy) return;
+    for (const field of ["maxPayments", "maxPaymentsPerWindow"]) {
+      const v = policy[field];
+      if (v === void 0) continue;
+      if (!Number.isSafeInteger(v) || v <= 0) {
+        throw new TypeError(`policy.${field} must be a positive integer; got ${JSON.stringify(v)}.`);
+      }
+    }
+    if (policy.maxPaymentsPerWindow !== void 0 && policy.windowSeconds === void 0) {
+      throw new TypeError(
+        "policy.maxPaymentsPerWindow needs policy.windowSeconds (the rolling window it counts within) \u2014 set both, or neither."
+      );
+    }
+    if (policy.warnAtFraction !== void 0) {
+      const f = policy.warnAtFraction;
+      if (typeof f !== "number" || !(f > 0 && f <= 1)) {
+        throw new TypeError(
+          `policy.warnAtFraction must be a number in (0, 1] (e.g. 0.8); got ${JSON.stringify(f)}.`
+        );
+      }
+    }
   }
   /**
    * Fail LOUDLY at construction on a misconfigured time policy — a security
@@ -2818,11 +3093,17 @@ var PipRailClient = (_class2 = class {
     if (!policy) return;
     const hasWindowTotal = policy.windowTotal !== void 0;
     const hasWindowSeconds = policy.windowSeconds !== void 0;
-    if (hasWindowTotal !== hasWindowSeconds) {
+    const hasWindowCount = policy.maxPaymentsPerWindow !== void 0;
+    if (hasWindowTotal && !hasWindowSeconds) {
       throw new TypeError(
         "policy.windowTotal and policy.windowSeconds must be set together \u2014 a rolling-window cap can't be half-armed (set both, or neither)."
       );
     }
+    if (hasWindowSeconds && !hasWindowTotal && !hasWindowCount) {
+      throw new TypeError(
+        "policy.windowSeconds must be set together with policy.windowTotal and/or policy.maxPaymentsPerWindow \u2014 a window width alone bounds nothing."
+      );
+    }
     if (hasWindowSeconds && !(Number.isSafeInteger(policy.windowSeconds) && policy.windowSeconds > 0)) {
       throw new TypeError("policy.windowSeconds must be a positive integer number of seconds.");
     }
@@ -2834,13 +3115,21 @@ var PipRailClient = (_class2 = class {
         );
       }
     }
+    if (policy.expiresAt !== void 0) {
+      const at = policy.expiresAt;
+      if (!Number.isSafeInteger(at) || Math.abs(at) > 864e13) {
+        throw new TypeError(
+          `policy.expiresAt must be an absolute epoch-MILLISECONDS integer (like Date.now()); got ${JSON.stringify(at)}.`
+        );
+      }
+    }
   }
   /** Emit an observability event, never letting a throwing handler break the
    * payment flow (mirrors the server gate's `onPaid` isolation). */
   safeEmit(event) {
     try {
       this.onEvent(event);
-    } catch (e27) {
+    } catch (e29) {
     }
   }
   /** Auto-mount the chain's driver, resolve the network, and bind the wallet — once. */
@@ -2870,7 +3159,7 @@ var PipRailClient = (_class2 = class {
    * as-is) or a plain object (serialised as JSON).
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _22 => _22.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _28 => _28.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -2901,7 +3190,7 @@ var PipRailClient = (_class2 = class {
    * "0.05 USDC on Base, within budget → pay it." No funds move.
    */
   async quote(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _23 => _23.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _29 => _29.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     return quote;
@@ -2920,22 +3209,32 @@ var PipRailClient = (_class2 = class {
    * on Tron, where a USD₮ transfer can cost real TRX.
    */
   async estimateCost(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _24 => _24.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _30 => _30.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { net, accept, quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     const cost = await net.estimateCost(accept);
     return { quote, cost };
   }
   /** Aggregated snapshot of every payment this client has settled — total
-   *  count, cumulative spend per token, and the individual records. */
+   *  count, cumulative spend per token, cumulative spend per denomination (the
+   *  cross-token grand total), and the individual records. */
   spent() {
     return this.ledger.summary();
   }
+  /** The CONFIGURED spend policy, read back unchanged — so an agent can self-check
+   *  its WHOLE leash (caps, allowlists, time, denom + count limits) without hitting a
+   *  decline. `undefined` when no policy is set. Pure; never throws. */
+  policy() {
+    return this.opts.policy;
+  }
   /**
    * Read-only budget + time leash for a Mode-A (headless) agent — the policy IS
    * the consent, and this is how the agent SEES what's left of it before paying.
-   * Composes the in-memory ledger with the configured policy; never throws, moves
-   * no funds. PROCESS-SCOPED — every figure resets on restart (see {@link SessionBudget}).
+   * Composes the ledger with the configured policy: the per-asset money leash
+   * (`byAsset`), the cross-token GRAND TOTAL per denomination (`byDenom`, present
+   * from the start), and the payment-COUNT leash (`counts`). Never throws, moves no
+   * funds. The money/count figures persist if a `spendStore` is set; the time
+   * envelope is process-scoped (see {@link SessionBudget}).
    */
   budget() {
     const view = this.sessionView();
@@ -2943,12 +3242,57 @@ var PipRailClient = (_class2 = class {
     return {
       session: {
         start,
-        expiresAt: _optionalChain([view, 'optionalAccess', _25 => _25.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
-        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _26 => _26.secondsRemaining]), () => ( null))
+        expiresAt: _optionalChain([view, 'optionalAccess', _31 => _31.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
+        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _32 => _32.secondsRemaining]), () => ( null))
       },
-      byAsset: this.remaining()
+      byAsset: this.remaining(),
+      byDenom: this.denomRemaining(),
+      counts: this.countStatus()
     };
   }
+  /**
+   * The cross-token GRAND-TOTAL leash — one row per denomination capped by
+   * `policy.maxTotalPerDenom`. Unlike `remaining()`, rows exist from the START
+   * (the cap is a single declared number, so headroom is previewable before any
+   * spend). `[]` when no `maxTotalPerDenom` is set. Pure; never throws; never a
+   * price-converted figure (tokens grouped as one unit, each 1:1).
+   */
+  denomRemaining() {
+    const caps = _optionalChain([this, 'access', _33 => _33.opts, 'access', _34 => _34.policy, 'optionalAccess', _35 => _35.maxTotalPerDenom]);
+    if (!caps) return [];
+    return Object.entries(caps).map(([rawDenom, capStr]) => {
+      const denom = rawDenom.toUpperCase();
+      const spentScaled = this.ledger.totalForDenom(denom);
+      const capScaled = _chunkMWBT7MCEcjs.floorUnits.call(void 0, capStr, DENOM_PRECISION);
+      const remainingScaled = capScaled > spentScaled ? capScaled - spentScaled : 0n;
+      const fraction = capScaled === 0n ? spentScaled > 0n ? 1 : 0 : Number(spentScaled * 1000000n / capScaled) / 1e6;
+      return {
+        denom,
+        spentFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, spentScaled, DENOM_PRECISION),
+        capFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, capScaled, DENOM_PRECISION),
+        remainingFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, remainingScaled, DENOM_PRECISION),
+        fraction
+      };
+    });
+  }
+  /** The payment-COUNT leash — settled count so far + the configured lifetime/window
+   *  caps and what's left. Pure; never throws. */
+  countStatus() {
+    const policy = this.opts.policy;
+    const settled = this.ledger.count();
+    const out = { settled };
+    if (_optionalChain([policy, 'optionalAccess', _36 => _36.maxPayments]) !== void 0) {
+      out.lifetimeCap = policy.maxPayments;
+      out.lifetimeRemaining = Math.max(0, policy.maxPayments - settled);
+    }
+    if (_optionalChain([policy, 'optionalAccess', _37 => _37.maxPaymentsPerWindow]) !== void 0 && policy.windowSeconds !== void 0) {
+      const windowSettled = this.ledger.countSince(Date.now() - policy.windowSeconds * 1e3);
+      out.windowCap = policy.maxPaymentsPerWindow;
+      out.windowSettled = windowSettled;
+      out.windowRemaining = Math.max(0, policy.maxPaymentsPerWindow - windowSettled);
+    }
+    return out;
+  }
   /**
    * Per-(network, asset) remaining budget — ONE row per pair the ledger already
    * holds (decimals are known only after the first spend), so a fresh client with
@@ -2957,7 +3301,7 @@ var PipRailClient = (_class2 = class {
    * never throws, never sums across tokens (no price oracle). PROCESS-SCOPED.
    */
   remaining() {
-    const maxTotal = _optionalChain([this, 'access', _27 => _27.opts, 'access', _28 => _28.policy, 'optionalAccess', _29 => _29.maxTotal]);
+    const maxTotal = _optionalChain([this, 'access', _38 => _38.opts, 'access', _39 => _39.policy, 'optionalAccess', _40 => _40.maxTotal]);
     return this.ledger.assetBuckets().map((b) => {
       const base2 = {
         network: b.network,
@@ -2967,13 +3311,13 @@ var PipRailClient = (_class2 = class {
         spentBase: b.totalBase.toString()
       };
       if (maxTotal === void 0) return base2;
-      const capBase = _chunkJG6KRAW6cjs.floorUnits.call(void 0, maxTotal, b.decimals);
+      const capBase = _chunkMWBT7MCEcjs.floorUnits.call(void 0, maxTotal, b.decimals);
       const remainingBase = capBase > b.totalBase ? capBase - b.totalBase : 0n;
       return {
         ...base2,
         capBase: capBase.toString(),
         remainingBase: remainingBase.toString(),
-        remainingFormatted: _chunkJG6KRAW6cjs.formatUnits.call(void 0, remainingBase, b.decimals)
+        remainingFormatted: _chunkMWBT7MCEcjs.formatUnits.call(void 0, remainingBase, b.decimals)
       };
     });
   }
@@ -3009,15 +3353,15 @@ var PipRailClient = (_class2 = class {
    * the plan yourself. No funds move.
    */
   async planPayment(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _30 => _30.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _41 => _41.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const challenge = await parseChallenge(res);
     if (!challenge) {
-      throw new (0, _chunkJG6KRAW6cjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)("402 response did not include a parseable x402 challenge.");
     }
     const { net, wallet } = await this.ensure();
     if (!wallet) {
-      throw new (0, _chunkJG6KRAW6cjs.WalletRequiredError)(
+      throw new (0, _chunkMWBT7MCEcjs.WalletRequiredError)(
         "planPayment needs a wallet (it checks YOUR balance, gas, and recipient-readiness). This client is read-only \u2014 construct it with a `wallet` to plan or pay."
       );
     }
@@ -3190,31 +3534,31 @@ var PipRailClient = (_class2 = class {
    * streams throw `NonReplayableBodyError`.
    */
   async fetch(url, init) {
-    const body = _optionalChain([init, 'optionalAccess', _31 => _31.body]);
+    const body = _optionalChain([init, 'optionalAccess', _42 => _42.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
-      throw new (0, _chunkJG6KRAW6cjs.NonReplayableBodyError)(
+      throw new (0, _chunkMWBT7MCEcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
       );
     }
     const firstResponse = await fetch(url, init);
     if (firstResponse.status !== 402) return firstResponse;
-    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _32 => _32.schemes]));
+    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _43 => _43.schemes]));
     const resolved = await this.resolveChallenge(url, firstResponse, schemes);
     const { net, wallet, challenge } = resolved;
     if (!wallet) {
-      throw new (0, _chunkJG6KRAW6cjs.WalletRequiredError)(
+      throw new (0, _chunkMWBT7MCEcjs.WalletRequiredError)(
         "Paying a 402 needs a wallet to sign + settle. This client is read-only \u2014 construct it with a `wallet` to pay (quote/discover/register still work without one)."
       );
     }
     let accept = resolved.accept;
     let quote = resolved.quote;
-    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _33 => _33.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
+    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _44 => _44.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
     if (autoRoute) {
       const plan = await this.planFromChallenge(net, wallet, challenge, url, schemes);
       if (!plan.best) {
         const reason = _nullishCoalesce(plan.fundingHint, () => ( "No rail is settleable for this payment."));
         this.safeEmit({ kind: "payment-failed", reason });
-        throw new (0, _chunkJG6KRAW6cjs.PaymentDeclinedError)(reason);
+        throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(reason);
       }
       accept = plan.best.accept;
       quote = plan.best.quote;
@@ -3238,7 +3582,7 @@ var PipRailClient = (_class2 = class {
   async resolveChallenge(url, response, schemes) {
     const challenge = await parseChallenge(response);
     if (!challenge) {
-      throw new (0, _chunkJG6KRAW6cjs.InvalidEnvelopeError)(
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
         "402 response did not include a parseable x402 challenge."
       );
     }
@@ -3249,7 +3593,7 @@ var PipRailClient = (_class2 = class {
         (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network)
       );
       if (schemes.includes("exact") && exactOnNet && typeof net.payExact !== "function") {
-        throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+        throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
           `This 402 offers a standard 'exact' rail on ${net.network}, but the ${net.family} family can't pay 'exact' (supported on EVM, Solana, Algorand + NEAR today), and no 'onchain-proof' rail was offered.`
         );
       }
@@ -3258,13 +3602,13 @@ var PipRailClient = (_class2 = class {
           (a) => a.scheme === "exact" && this.supportsNetwork(net, a.network) && net.describeAsset(a.asset) != null
         );
         if (payable) {
-          throw new (0, _chunkJG6KRAW6cjs.NoCompatibleAcceptError)(
+          throw new (0, _chunkMWBT7MCEcjs.NoCompatibleAcceptError)(
             `This 402 is payable only via the standard 'exact' rail on ${net.network}, which is OFF by default. Enable it: new PipRailClient({ \u2026, schemes: ['onchain-proof', 'exact'] }) or per call fetch(url, { schemes: ['exact'] }) (MCP: PIPRAIL_SCHEMES=onchain-proof,exact).`
           );
         }
       }
       const networks = [...new Set(challenge.accepts.map((a) => a.network))].join(", ");
-      throw new (0, _chunkJG6KRAW6cjs.NoCompatibleAcceptError)(
+      throw new (0, _chunkMWBT7MCEcjs.NoCompatibleAcceptError)(
         `No accepts[] entry payable by this client on ${net.network} (schemes: ${schemes.join(", ")}; challenge offered: ${networks || "none"}).`
       );
     }
@@ -3366,7 +3710,7 @@ var PipRailClient = (_class2 = class {
     const shortfall = {};
     if (!quote.withinPolicy) {
       blockers.push(
-        quote.policyCode === "SESSION_EXPIRED" || quote.policyCode === "WINDOW_TOTAL" ? "OUTSIDE_WINDOW" : "OUTSIDE_POLICY"
+        quote.policyCode === "SESSION_EXPIRED" || quote.policyCode === "WINDOW_TOTAL" || quote.policyCode === "WINDOW_COUNT" ? "OUTSIDE_WINDOW" : "OUTSIDE_POLICY"
       );
     }
     if (quote.symbolMismatch) warnings.push("SYMBOL_MISMATCH");
@@ -3377,21 +3721,21 @@ var PipRailClient = (_class2 = class {
     if (isExact) {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkJG6KRAW6cjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
     } else if (isNative) {
       if (nativeKnown && bal.native < amount + fee) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkJG6KRAW6cjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
+        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
       }
     } else {
       if (tokenKnown && bal.token < amount) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunkJG6KRAW6cjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
+        shortfall.token = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
       if (nativeKnown && bal.native < fee) {
         blockers.push("INSUFFICIENT_GAS");
-        shortfall.native = _chunkJG6KRAW6cjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
+        shortfall.native = _chunkMWBT7MCEcjs.formatUnits.call(void 0, fee - bal.native, cost.feeDecimals);
       } else if (nativeKnown && fee > 0n && bal.native < fee * 3n / 2n) {
         warnings.push("THIN_GAS_MARGIN");
       }
@@ -3416,8 +3760,8 @@ var PipRailClient = (_class2 = class {
       blockers,
       warnings,
       balance: {
-        token: bal.token != null ? _chunkJG6KRAW6cjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
-        native: bal.native != null ? _chunkJG6KRAW6cjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
+        token: bal.token != null ? _chunkMWBT7MCEcjs.formatUnits.call(void 0, bal.token, quote.decimals) : null,
+        native: bal.native != null ? _chunkMWBT7MCEcjs.formatUnits.call(void 0, bal.native, cost.feeDecimals) : null
       },
       need: { token: quote.amountFormatted, native: cost.feeFormatted },
       ...shortfall.token || shortfall.native ? { shortfall } : {},
@@ -3428,25 +3772,30 @@ var PipRailClient = (_class2 = class {
    *  driver's describeAsset) + the policy verdict + a symbol-mismatch flag. */
   buildQuote(net, accept, url, description) {
     if (typeof accept.amount !== "string" || !/^\d+$/.test(accept.amount)) {
-      throw new (0, _chunkJG6KRAW6cjs.InvalidEnvelopeError)(
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
         `challenge amount "${String(accept.amount)}" is not a base-unit integer string.`
       );
     }
     if (typeof accept.asset !== "string" || accept.asset.length === 0) {
-      throw new (0, _chunkJG6KRAW6cjs.InvalidEnvelopeError)(
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
         `challenge on ${accept.network} states no (string) asset \u2014 refusing to price it.`
       );
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _34 => _34.decimals]), () => ( _optionalChain([accept, 'access', _35 => _35.extra, 'optionalAccess', _36 => _36.decimals])));
+    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _45 => _45.decimals]), () => ( _optionalChain([accept, 'access', _46 => _46.extra, 'optionalAccess', _47 => _47.decimals])));
     if (typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0) {
-      throw new (0, _chunkJG6KRAW6cjs.InvalidEnvelopeError)(
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
         `challenge for ${accept.asset} on ${accept.network} states no valid decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
       );
     }
-    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _37 => _37.symbol]), () => ( _optionalChain([accept, 'access', _38 => _38.extra, 'optionalAccess', _39 => _39.symbol])));
-    const amountFormatted = _chunkJG6KRAW6cjs.formatUnits.call(void 0, amountBase, decimals);
+    if (decimals > _chunkMWBT7MCEcjs.MAX_DECIMALS) {
+      throw new (0, _chunkMWBT7MCEcjs.InvalidEnvelopeError)(
+        `challenge for ${accept.asset} on ${accept.network} states ${decimals} decimals (> ${_chunkMWBT7MCEcjs.MAX_DECIMALS}) \u2014 refusing to price it (no real token is that deep).`
+      );
+    }
+    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _48 => _48.symbol]), () => ( _optionalChain([accept, 'access', _49 => _49.extra, 'optionalAccess', _50 => _50.symbol])));
+    const amountFormatted = _chunkMWBT7MCEcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf2(url),
       chain: this.opts.chain,
@@ -3459,9 +3808,14 @@ var PipRailClient = (_class2 = class {
     };
     const policy = this.opts.policy;
     const hasWindow = !!policy && policy.windowTotal != null && policy.windowSeconds != null;
+    const hasWindowCount = !!policy && policy.maxPaymentsPerWindow != null && policy.windowSeconds != null;
+    const hasDenomCap = !!policy && policy.maxTotalPerDenom != null && Object.keys(policy.maxTotalPerDenom).length > 0;
+    const hasCountCap = !!policy && policy.maxPayments != null;
     const hasTimePolicy = !!policy && (policy.ttlSeconds != null || policy.expiresAt != null || hasWindow);
+    const needsCtx = hasTimePolicy || hasWindowCount || hasDenomCap || hasCountCap;
+    const denom = hasDenomCap ? denomOf(intent.symbol, intent.asset, policy) : void 0;
     const now = Date.now();
-    const ctx = hasTimePolicy ? {
+    const ctx = needsCtx ? {
       now,
       sessionStart: this.ledger.sessionStart,
       // Window slice ONLY when BOTH fields are set — never a `?? 0` width.
@@ -3469,7 +3823,12 @@ var PipRailClient = (_class2 = class {
         accept.network,
         accept.asset,
         now - policy.windowSeconds * 1e3
-      ) : 0n
+      ) : 0n,
+      // Running grand total on this intent's denomination, across the (shared) ledger.
+      spentInDenomScaled: denom ? this.ledger.totalForDenom(denom) : 0n,
+      // Settled-payment counts (lifetime + window) for the count caps.
+      paymentCount: hasCountCap ? this.ledger.count() : 0,
+      paymentCountInWindow: hasWindowCount ? this.ledger.countSince(now - policy.windowSeconds * 1e3) : 0
     } : void 0;
     const decision = evaluatePolicy(
       intent,
@@ -3477,7 +3836,7 @@ var PipRailClient = (_class2 = class {
       this.ledger.totalFor(accept.network, accept.asset),
       ctx
     );
-    const serverSymbol = _optionalChain([accept, 'access', _40 => _40.extra, 'optionalAccess', _41 => _41.symbol]);
+    const serverSymbol = _optionalChain([accept, 'access', _51 => _51.extra, 'optionalAccess', _52 => _52.symbol]);
     const symbolMismatch = intent.recognized && !!serverSymbol && !!symbol && serverSymbol.toUpperCase() !== symbol.toUpperCase();
     return {
       url,
@@ -3505,9 +3864,11 @@ var PipRailClient = (_class2 = class {
   async authorize(quote) {
     if (!quote.withinPolicy) {
       const reason = `Payment refused by policy: ${_nullishCoalesce(quote.policyReason, () => ( "not allowed"))}`;
-      const reasonCode = reasonCodeForPolicy(quote.policyCode);
-      this.safeEmit({ kind: "payment-failed", reason, code: reasonCode });
-      throw new (0, _chunkJG6KRAW6cjs.PaymentDeclinedError)(reason, { reasonCode });
+      this.refuse(reason, {
+        reasonCode: reasonCodeForPolicy(quote.policyCode),
+        policyCode: quote.policyCode,
+        quote
+      });
     }
     const hook = this.opts.onBeforePay;
     if (!hook) return;
@@ -3515,43 +3876,136 @@ var PipRailClient = (_class2 = class {
     try {
       approved = await hook(quote);
     } catch (err) {
-      const reason = "onBeforePay threw \u2014 refusing to pay.";
-      this.safeEmit({ kind: "payment-failed", reason, code: "APPROVAL" });
-      throw new (0, _chunkJG6KRAW6cjs.PaymentDeclinedError)(reason, { cause: err, reasonCode: "APPROVAL" });
+      this.refuse("onBeforePay threw \u2014 refusing to pay.", { reasonCode: "APPROVAL", quote, cause: err });
     }
     if (!approved) {
       const reason = `onBeforePay declined ${quote.amountFormatted} ${_nullishCoalesce(quote.symbol, () => ( ""))}`.trimEnd() + ` on ${quote.network}.`;
-      this.safeEmit({ kind: "payment-failed", reason, code: "APPROVAL" });
-      throw new (0, _chunkJG6KRAW6cjs.PaymentDeclinedError)(reason, { reasonCode: "APPROVAL" });
+      this.refuse(reason, { reasonCode: "APPROVAL", quote });
     }
   }
-  /** Record a settled payment in the ledger (true decimals for the running total). */
+  /**
+   * Refuse a payment BEFORE any send: emit BOTH the legacy `payment-failed` (so existing
+   * `onEvent` consumers are unaffected) AND the richer, dedicated `payment-declined`
+   * (typed reasonCode + fine PolicyDenyCode + the quote + a budget snapshot), then throw
+   * the typed {@link PaymentDeclinedError}. Returns `never` so callers' control flow is
+   * exhaustive.
+   */
+  refuse(reason, opts) {
+    this.safeEmit({ kind: "payment-failed", reason, ...opts.reasonCode ? { code: opts.reasonCode } : {} });
+    this.safeEmit({
+      kind: "payment-declined",
+      reason,
+      ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {},
+      ...opts.policyCode ? { code: opts.policyCode } : {},
+      ...opts.quote ? { quote: opts.quote } : {},
+      budget: this.budget()
+    });
+    throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(reason, {
+      ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {},
+      ...opts.cause !== void 0 ? { cause: opts.cause } : {}
+    });
+  }
+  /** Record a settled payment in the ledger (TRUE decimals for the running total + the
+   *  denomination it counts toward in the grand total). Then fire the `onSpend` callback
+   *  with the record + the post-payment budget, and emit any `warnAtFraction` thresholds
+   *  this payment just crossed. All observability is isolated — a throwing hook never
+   *  affects the (already-settled) payment. */
   recordSpend(quote, ref) {
-    this.ledger.record(
-      {
-        url: quote.url,
-        host: hostOf2(quote.url),
-        network: quote.network,
-        asset: quote.asset,
-        amountBase: quote.amount,
-        amountFormatted: quote.amountFormatted,
-        ...quote.symbol ? { symbol: quote.symbol } : {},
-        ref,
-        at: (/* @__PURE__ */ new Date()).toISOString()
-      },
-      quote.decimals
-    );
+    const denom = denomOf(quote.symbol, quote.asset, this.opts.policy);
+    const record = {
+      url: quote.url,
+      host: hostOf2(quote.url),
+      network: quote.network,
+      asset: quote.asset,
+      amountBase: quote.amount,
+      amountFormatted: quote.amountFormatted,
+      ...quote.symbol ? { symbol: quote.symbol } : {},
+      decimals: quote.decimals,
+      ...denom ? { denom } : {},
+      ref,
+      at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    this.ledger.record(record, quote.decimals, denom);
+    const budget = this.budget();
+    if (this.opts.onSpend) {
+      try {
+        this.opts.onSpend(record, budget);
+      } catch (e30) {
+      }
+    }
+    this.emitThresholds(budget);
+  }
+  /**
+   * Emit a `budget-threshold` event for each cap whose used-fraction just reached
+   * `policy.warnAtFraction` — the early warning before a hard decline. Fires ONCE per
+   * crossing per cap (deduped on the shared ledger via `markWarned`, so a cross-chain
+   * threshold fires once for the whole budget, not once per chain). No-op when no
+   * `warnAtFraction` is set. Reads the just-computed {@link SessionBudget}; isolated (safeEmit).
+   */
+  emitThresholds(budget) {
+    const frac = _optionalChain([this, 'access', _53 => _53.opts, 'access', _54 => _54.policy, 'optionalAccess', _55 => _55.warnAtFraction]);
+    if (frac === void 0) return;
+    const fire = (scope, label, spentFormatted, capFormatted, fraction) => {
+      if (fraction < frac) return;
+      if (!this.ledger.markWarned(`${scope}:${label}`)) return;
+      this.safeEmit({ kind: "budget-threshold", scope, label, spentFormatted, capFormatted, fraction });
+    };
+    for (const r of budget.byAsset) {
+      if (r.capBase === void 0) continue;
+      const cap = BigInt(r.capBase);
+      const spent = BigInt(r.spentBase);
+      const fraction = cap === 0n ? spent > 0n ? 1 : 0 : Number(spent * 1000000n / cap) / 1e6;
+      fire(
+        "asset",
+        `${_nullishCoalesce(r.symbol, () => ( r.asset))} on ${r.network}`,
+        _chunkMWBT7MCEcjs.formatUnits.call(void 0, spent, r.decimals),
+        _chunkMWBT7MCEcjs.formatUnits.call(void 0, cap, r.decimals),
+        fraction
+      );
+    }
+    for (const d of budget.byDenom) {
+      fire("denom", d.denom, d.spentFormatted, d.capFormatted, d.fraction);
+    }
+    const policy = this.opts.policy;
+    if (_optionalChain([policy, 'optionalAccess', _56 => _56.windowTotal]) !== void 0 && policy.windowSeconds !== void 0) {
+      const since = Date.now() - policy.windowSeconds * 1e3;
+      for (const r of budget.byAsset) {
+        const cap = _chunkMWBT7MCEcjs.floorUnits.call(void 0, policy.windowTotal, r.decimals);
+        const spent = this.ledger.totalSince(r.network, r.asset, since);
+        const fraction = cap === 0n ? spent > 0n ? 1 : 0 : Number(spent * 1000000n / cap) / 1e6;
+        fire(
+          "window",
+          `${_nullishCoalesce(r.symbol, () => ( r.asset))} on ${r.network}`,
+          _chunkMWBT7MCEcjs.formatUnits.call(void 0, spent, r.decimals),
+          _chunkMWBT7MCEcjs.formatUnits.call(void 0, cap, r.decimals),
+          fraction
+        );
+      }
+    }
+    const c = budget.counts;
+    if (c.lifetimeCap !== void 0 && c.lifetimeCap > 0) {
+      fire("count", "maxPayments", String(c.settled), String(c.lifetimeCap), c.settled / c.lifetimeCap);
+    }
+    if (c.windowCap !== void 0 && c.windowCap > 0 && c.windowSettled !== void 0) {
+      fire(
+        "window-count",
+        "maxPaymentsPerWindow",
+        String(c.windowSettled),
+        String(c.windowCap),
+        c.windowSettled / c.windowCap
+      );
+    }
   }
   async payAndConfirm(net, wallet, accept) {
     if (!this.supportsNetwork(net, accept.network)) {
-      throw new (0, _chunkJG6KRAW6cjs.WrongChainError)(
+      throw new (0, _chunkMWBT7MCEcjs.WrongChainError)(
         `Challenge expects ${accept.network} but client is on ${net.network}.`
       );
     }
     const ref = await net.send(wallet, accept);
     this.safeEmit({ kind: "payment-broadcast", ref });
     try {
-      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _42 => _42.extra, 'optionalAccess', _43 => _43.minConfirmations]), () => ( 1)));
+      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _57 => _57.extra, 'optionalAccess', _58 => _58.minConfirmations]), () => ( 1)));
       this.safeEmit({
         kind: "payment-confirmed",
         ref,
@@ -3571,9 +4025,9 @@ var PipRailClient = (_class2 = class {
     const signature = {
       x402Version: 2,
       accepted: accept,
-      payload: { nonce: _optionalChain([accept, 'access', _44 => _44.extra, 'optionalAccess', _45 => _45.nonce]), txHash: ref }
+      payload: { nonce: _optionalChain([accept, 'access', _59 => _59.extra, 'optionalAccess', _60 => _60.nonce]), txHash: ref }
     };
-    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _46 => _46.headers]));
+    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _61 => _61.headers]));
     headers.set(HEADER_SIGNATURE, buildSignatureHeader(signature));
     let lastResponse = null;
     let lastReason = null;
@@ -3588,7 +4042,7 @@ var PipRailClient = (_class2 = class {
         () => timeoutController.abort(),
         this.retryTimeoutMs
       );
-      const signal = _optionalChain([originalInit, 'optionalAccess', _47 => _47.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
+      const signal = _optionalChain([originalInit, 'optionalAccess', _62 => _62.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
       try {
         lastResponse = await fetch(url, {
           ..._nullishCoalesce(originalInit, () => ( {})),
@@ -3597,7 +4051,7 @@ var PipRailClient = (_class2 = class {
         });
       } catch (err) {
         if (timeoutController.signal.aborted) {
-          throw new (0, _chunkJG6KRAW6cjs.PaymentTimeoutError)(
+          throw new (0, _chunkMWBT7MCEcjs.PaymentTimeoutError)(
             `Server did not respond within ${this.retryTimeoutMs}ms after broadcasting payment ${ref}. Re-verify or re-submit ref=${ref} \u2014 do NOT re-pay.`,
             { cause: err, ref }
           );
@@ -3620,7 +4074,7 @@ var PipRailClient = (_class2 = class {
       reason: `server returned 402 after broadcasting payment ${ref}${unconfirmedNote} (${why})`,
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
-    throw new (0, _chunkJG6KRAW6cjs.MaxRetriesExceededError)(
+    throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
       `Server still returned 402 after ${attempts} attempt(s) with on-chain proof ref=${ref}${unconfirmedNote}. Last server rejection: ${why}. Re-verify or re-submit ref=${ref} before retrying \u2014 never re-pay (it would double-spend).`,
       { ref }
     );
@@ -3644,17 +4098,17 @@ var PipRailClient = (_class2 = class {
    */
   async payExactRail(net, wallet, accept, url, init, quote) {
     if (!net.payExact) {
-      throw new (0, _chunkJG6KRAW6cjs.UnsupportedSchemeError)(
+      throw new (0, _chunkMWBT7MCEcjs.UnsupportedSchemeError)(
         `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand + NEAR today).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _48 => _48.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _63 => _63.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payExact(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _49 => _49.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _64 => _64.headers]));
     headers.set(HEADER_SIGNATURE, buildExactSignatureHeader({ accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `exact: facilitator rejected nonce=${nonce} (${why2})`, code: why2 });
-      throw new (0, _chunkJG6KRAW6cjs.MaxRetriesExceededError)(
+      throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
         `exact: the facilitator rejected the payment (${why2}). Fix the cause, then re-present the SAME signed authorization (nonce=${nonce}) \u2014 do NOT re-sign a fresh nonce. ref=${nonce}.`,
         { ref: nonce }
       );
@@ -3667,17 +4121,17 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _50 => _50.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _65 => _65.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _51 => _51.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _66 => _66.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
       } catch (err) {
-        throw new (0, _chunkJG6KRAW6cjs.PaymentTimeoutError)(
+        throw new (0, _chunkMWBT7MCEcjs.PaymentTimeoutError)(
           `exact: no response after submitting the authorization (nonce=${nonce}) to ${hostOf2(url)}. The facilitator may have already settled it \u2014 verify on-chain with authorizationState(${payerFrom}, ${nonce}) before re-presenting; do NOT re-pay.`,
           { cause: err, ref: nonce }
         );
@@ -3693,7 +4147,7 @@ var PipRailClient = (_class2 = class {
       if (response.ok && !(settle && settle.success === false)) {
         const receipt = parseReceipt(response);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _52 => _52.transaction]) || _optionalChain([receipt, 'optionalAccess', _53 => _53.transaction]) || `eip3009-nonce:${nonce}`;
+        const ref = _optionalChain([settle, 'optionalAccess', _67 => _67.transaction]) || _optionalChain([receipt, 'optionalAccess', _68 => _68.transaction]) || `eip3009-nonce:${nonce}`;
         this.recordSpend(quote, ref);
         return response;
       }
@@ -3711,21 +4165,21 @@ var PipRailClient = (_class2 = class {
       reason: `exact: 402 after submitting authorization nonce=${nonce} (${why})`,
       ...lastReason ? { code: lastReason.error, detail: lastReason.detail } : {}
     });
-    throw new (0, _chunkJG6KRAW6cjs.MaxRetriesExceededError)(
+    throw new (0, _chunkMWBT7MCEcjs.MaxRetriesExceededError)(
       `exact: server still returned 402 after submitting the signed authorization (nonce=${nonce}). Last rejection: ${why}. Re-present the SAME authorization \u2014 do NOT re-sign a fresh nonce; verify authorizationState(${payerFrom}, ${nonce}) first. ref=${nonce}.`,
       { ref: nonce }
     );
   }
-}, _class2);
+};
 function throwIfAborted(signal) {
-  if (_optionalChain([signal, 'optionalAccess', _54 => _54.aborted])) {
+  if (_optionalChain([signal, 'optionalAccess', _69 => _69.aborted])) {
     throw _nullishCoalesce(signal.reason, () => ( new DOMException("This operation was aborted.", "AbortError")));
   }
 }
 function safeBig(s) {
   try {
     return BigInt(s);
-  } catch (e28) {
+  } catch (e31) {
     return 0n;
   }
 }
@@ -3788,10 +4242,10 @@ function buildFundingHint(options, chainLabel) {
     return `Couldn't fully read your wallet on ${chainLabel} (RPC throttled) \u2014 retry; you may already be able to pay ${target.quote.amountFormatted} ${sym}.`;
   }
   const parts = [];
-  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _55 => _55.shortfall, 'optionalAccess', _56 => _56.token])) {
+  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _70 => _70.shortfall, 'optionalAccess', _71 => _71.token])) {
     parts.push(`top up ${target.shortfall.token} ${sym}`);
   }
-  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _57 => _57.shortfall, 'optionalAccess', _58 => _58.native])) {
+  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _72 => _72.shortfall, 'optionalAccess', _73 => _73.native])) {
     parts.push(`add ~${target.shortfall.native} ${target.cost.feeSymbol} for gas`);
   }
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
@@ -3805,7 +4259,7 @@ async function planAcross(clients, url, init) {
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
     url,
-    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _59 => _59.accept, 'access', _60 => _60.network]), () => ( live[0].network)),
+    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _74 => _74.accept, 'access', _75 => _75.network]), () => ( live[0].network)),
     status,
     payable: best !== null,
     best,
@@ -3824,7 +4278,7 @@ async function fetchAcross(clients, url, init) {
   const best = rankAcross(live.map((p) => p.plan)).find((o) => o.state === "payable");
   if (!best) {
     const hint = mergeDeclineHint(live.map((p) => p.plan));
-    throw new (0, _chunkJG6KRAW6cjs.PaymentDeclinedError)(hint || "No funded chain can settle this payment right now.");
+    throw new (0, _chunkMWBT7MCEcjs.PaymentDeclinedError)(hint || "No funded chain can settle this payment right now.");
   }
   const owner = live.find((p) => p.plan.options.includes(best)).client;
   return owner.fetch(url, { ..._nullishCoalesce(init, () => ( {})), autoRoute: true });
@@ -3838,8 +4292,11 @@ function reasonCodeForPolicy(code) {
     case "SESSION_EXPIRED":
       return "SESSION_EXPIRED";
     case "WINDOW_TOTAL":
+    case "WINDOW_COUNT":
       return "OUTSIDE_WINDOW";
     case "MAX_TOTAL":
+    case "MAX_TOTAL_DENOM":
+    case "MAX_PAYMENTS":
       return "BUDGET";
     case void 0:
       return void 0;
@@ -3850,7 +4307,7 @@ function reasonCodeForPolicy(code) {
 function hostOf2(url) {
   try {
     return new URL(url).hostname;
-  } catch (e29) {
+  } catch (e32) {
     return url;
   }
 }
@@ -3867,8 +4324,8 @@ function isReplayableBodyInit(value) {
 async function readInvalidReason(response) {
   try {
     const body = await response.clone().json();
-    const ext = _optionalChain([body, 'optionalAccess', _61 => _61.extensions]);
-    const piprail = _optionalChain([ext, 'optionalAccess', _62 => _62.piprail]);
+    const ext = _optionalChain([body, 'optionalAccess', _76 => _76.extensions]);
+    const piprail = _optionalChain([ext, 'optionalAccess', _77 => _77.piprail]);
     if (piprail && typeof piprail.code === "string") {
       return {
         error: piprail.code,
@@ -3887,16 +4344,20 @@ async function readInvalidReason(response) {
         detail: typeof body.invalidMessage === "string" ? body.invalidMessage : ""
       };
     }
-  } catch (e30) {
+  } catch (e33) {
   }
   const settle = parseSettleResponse(response);
-  if (_optionalChain([settle, 'optionalAccess', _63 => _63.errorReason])) return { error: settle.errorReason, detail: "" };
+  if (_optionalChain([settle, 'optionalAccess', _78 => _78.errorReason])) return { error: settle.errorReason, detail: "" };
   return null;
 }
 
 // src/payer.ts
 var MultiChainPayer = class _MultiChainPayer {
   
+  /** True when every client shares ONE ledger (the `fromWallets` path) — so spend +
+   *  budget are read from that single source, never concatenated (which would
+   *  double-count a shared ledger). */
+  
   /**
    * Wrap an explicit, ordered set of single-chain clients — use this when a client
    * needs full control (e.g. a custom EVM chain configured by a viem `Chain`). The
@@ -3904,12 +4365,18 @@ var MultiChainPayer = class _MultiChainPayer {
    * at MOST one client per chain — two clients on the SAME network would double-count in
    * `spent()`/`budget()` and waste a plan round-trip (`fromWallets` can't produce this).
    * For the common case, prefer {@link MultiChainPayer.fromWallets}.
+   *
+   * For a cross-chain grand total / count cap via this path, build the clients with a
+   * SHARED `ledger` (`new SpendLedger(store?)` passed to each client's `ledger` option)
+   * and set `opts.shared = true` so reads come from that one ledger. `fromWallets` does
+   * this for you.
    */
-  constructor(clients) {
+  constructor(clients, opts = {}) {
     if (clients.length === 0) {
       throw new TypeError("MultiChainPayer needs at least one PipRailClient.");
     }
     this._clients = [...clients];
+    this._shared = _nullishCoalesce(opts.shared, () => ( false));
   }
   /**
    * Build one client per funded chain from a `{ chain → wallet }` map — the
@@ -3924,30 +4391,36 @@ var MultiChainPayer = class _MultiChainPayer {
    *     solana:  { key: process.env.SOLANA_SECRET! },
    *     xrpl:    { key: process.env.XRPL_SEED! },
    *   },
-   *   policy: { maxAmount: '1.00', maxTotal: '20.00', tokens: ['USDC', 'USDT'] },
+   *   // ONE budget across all three chains: $20 total + at most 100 payments.
+   *   policy: { maxAmount: '1.00', maxTotalPerDenom: { USD: '20.00' }, maxPayments: 100 },
    * })
    * const res = await payer.get('https://api.example.com/paid')  // pays on the first funded chain that can settle
    * ```
+   *
+   * Every client shares ONE {@link SpendLedger} (optionally backed by `spendStore`), so
+   * the cross-token grand total + the count caps span all chains as a single budget.
    */
   static fromWallets(opts) {
     const entries = Object.entries(opts.wallets);
     if (entries.length === 0) {
       throw new TypeError("MultiChainPayer.fromWallets needs at least one wallet.");
     }
+    const ledger = new SpendLedger(opts.spendStore);
     const clients = entries.map(
       ([chain, wallet]) => new PipRailClient({
         chain,
         wallet,
+        ledger,
         ...opts.policy ? { policy: opts.policy } : {},
         ...opts.schemes ? { schemes: opts.schemes } : {},
-        ..._optionalChain([opts, 'access', _64 => _64.rpcUrls, 'optionalAccess', _65 => _65[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
+        ..._optionalChain([opts, 'access', _79 => _79.rpcUrls, 'optionalAccess', _80 => _80[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
         ...opts.onBeforePay ? { onBeforePay: opts.onBeforePay } : {},
         ...opts.onEvent ? { onEvent: opts.onEvent } : {},
         ...opts.maxPaymentRetries != null ? { maxPaymentRetries: opts.maxPaymentRetries } : {},
         ...opts.retryTimeoutMs != null ? { retryTimeoutMs: opts.retryTimeoutMs } : {}
       })
     );
-    return new _MultiChainPayer(clients);
+    return new _MultiChainPayer(clients, { shared: true });
   }
   /** The underlying single-chain clients, in preference order. Reach for one of
    *  these for chain-specific reads (`estimateCost`, `discoverySigner`, per-chain
@@ -3998,7 +4471,7 @@ var MultiChainPayer = class _MultiChainPayer {
    * {@link PipRailClient.post}.
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _66 => _66.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _81 => _81.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -4041,28 +4514,50 @@ var MultiChainPayer = class _MultiChainPayer {
   register(url, opts = {}) {
     return this._clients[0].register(url, opts);
   }
-  /** Aggregate spend across every chain — counts summed; per-(network,asset) rows
-   *  and records concatenated (no cross-chain collisions, never a cross-token sum). */
+  /**
+   * Aggregate spend across every chain. With a SHARED ledger (`fromWallets`), this reads
+   * that single ledger ONCE (its records already span every chain) — so the count and the
+   * cross-token `byDenom` grand total are correct and never double-counted. With
+   * independent clients (the explicit constructor), it concatenates: counts summed,
+   * per-(network,asset) `byAsset` + `byDenom` + records concatenated.
+   */
   spent() {
+    if (this._shared) return this._clients[0].spent();
     const summaries = this._clients.map((c) => c.spent());
     return {
       count: summaries.reduce((n, s) => n + s.count, 0),
       byAsset: summaries.flatMap((s) => s.byAsset),
+      byDenom: summaries.flatMap((s) => s.byDenom),
       records: summaries.flatMap((s) => s.records)
     };
   }
-  /** A merged budget view: every chain's per-(network,asset) remaining rows, plus the
-   *  MOST-RESTRICTIVE session time envelope across chains (the soonest deadline wins).
-   *  Mirrors {@link PipRailClient.budget}'s shape so the agent toolkit reads it
-   *  unchanged; per-chain session detail is on each `clients[i].budget()`. */
+  /**
+   * A merged budget view. With a SHARED ledger (`fromWallets`) it's the single source of
+   * truth — `byAsset`/`byDenom`/`counts` already span every chain, so the grand-total and
+   * count leashes read as ONE budget. With independent clients it merges: per-(network,
+   * asset) rows + per-denom rows concatenated, counts summed, and the MOST-RESTRICTIVE
+   * session time envelope (the soonest deadline wins). Per-chain detail is on each
+   * `clients[i].budget()`.
+   */
   budget() {
+    if (this._shared) return this._clients[0].budget();
     const budgets = this._clients.map((c) => c.budget());
     const session = budgets.map((b) => b.session).reduce((soonest, s) => {
       if (soonest.secondsRemaining == null) return s;
       if (s.secondsRemaining == null) return soonest;
       return s.secondsRemaining < soonest.secondsRemaining ? s : soonest;
     });
-    return { session, byAsset: budgets.flatMap((b) => b.byAsset) };
+    return {
+      session,
+      byAsset: budgets.flatMap((b) => b.byAsset),
+      byDenom: budgets.flatMap((b) => b.byDenom),
+      counts: { settled: budgets.reduce((n, b) => n + b.counts.settled, 0) }
+    };
+  }
+  /** The CONFIGURED spend policy (the shared policy `fromWallets` applies to every chain;
+   *  the first client's for the explicit constructor). `undefined` when none is set. */
+  policy() {
+    return this._clients[0].policy();
   }
 };
 function isBodyInit(value) {
@@ -4119,14 +4614,14 @@ function buildSelfDescription(input) {
 }
 function buildEndpointInfo(input) {
   const d = input.descriptor;
-  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _67 => _67.summary]), () => ( input.description));
-  const hasInput = _optionalChain([d, 'optionalAccess', _68 => _68.queryParams]) && Object.keys(d.queryParams).length > 0;
+  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _82 => _82.summary]), () => ( input.description));
+  const hasInput = _optionalChain([d, 'optionalAccess', _83 => _83.queryParams]) && Object.keys(d.queryParams).length > 0;
   const endpoint = {
     ...summary ? { summary } : {},
-    ..._optionalChain([d, 'optionalAccess', _69 => _69.method]) ? { method: d.method.toUpperCase() } : {},
+    ..._optionalChain([d, 'optionalAccess', _84 => _84.method]) ? { method: d.method.toUpperCase() } : {},
     ...input.mimeType ? { mimeType: input.mimeType } : {},
     ...hasInput ? { input: d.queryParams } : {},
-    ..._optionalChain([d, 'optionalAccess', _70 => _70.output]) ? { output: d.output } : {}
+    ..._optionalChain([d, 'optionalAccess', _85 => _85.output]) ? { output: d.output } : {}
   };
   return Object.keys(endpoint).length > 0 ? endpoint : void 0;
 }
@@ -4144,7 +4639,7 @@ function summarizePlan(plan) {
   return `NOT payable: ${_nullishCoalesce(plan.fundingHint, () => ( `no settleable rail on ${plan.network}`))}`;
 }
 function explainDecline(err) {
-  if (!(err instanceof _chunkJG6KRAW6cjs.PipRailError)) {
+  if (!(err instanceof _chunkMWBT7MCEcjs.PipRailError)) {
     return `Payment failed: ${err instanceof Error ? err.message : String(err)}`;
   }
   switch (err.code) {
@@ -4167,9 +4662,12 @@ function explainDecline(err) {
 }
 function formatSpendReport(summary) {
   if (summary.count === 0) return "No payments yet.";
-  return summary.byAsset.map(
+  const perAsset = summary.byAsset.map(
     (a) => `${a.totalFormatted} ${_nullishCoalesce(a.symbol, () => ( a.asset))} on ${a.network} (${a.count} payment${a.count === 1 ? "" : "s"})`
   ).join("; ");
+  if (summary.byDenom.length === 0) return perAsset;
+  const grand = summary.byDenom.map((d) => `${d.totalFormatted} ${d.denom} total`).join("; ");
+  return `${perAsset} \u2014 grand total: ${grand}`;
 }
 function describeChallenge(challenge) {
   const first = challenge.accepts[0];
@@ -4248,9 +4746,11 @@ Branch on \`code\` (always reliable). Key cases:
   once (enable the exact scheme); report it, don't retry the same call blindly.
 
 ## Knowing your leash \u2014 call piprail_budget
-piprail_budget tells you how much budget and time you have left, per
-(network, asset), plus your spend so far. Read-only; moves no funds. Use it in
-Mode A to self-check before paying.
+piprail_budget tells you how much budget and time you have left: per (network,
+asset) remaining, the cross-token GRAND TOTAL per denomination (e.g. how much
+USD you can still spend across every stablecoin and chain), the payment-count
+leash, the session time envelope, your spend so far, and the configured policy
+read back. Read-only; moves no funds. Use it in Mode A to self-check before paying.
 
 ## Two modes
 - Mode A (headless, default): you run FREE inside a pre-set budget + time
@@ -4261,10 +4761,15 @@ Mode A to self-check before paying.
   do NOT retry it as if it were a transient error.
 
 ## Hard facts
-- Spend caps are PER (network, asset). There is no single cross-token dollar cap \u2014
-  budgets aren't summed across tokens (no price oracle).
-- Spend totals and the time envelope live IN-MEMORY for THIS process; they reset on restart
-  (a convenience, not a durable ledger).
+- Per-payment + per-(network, asset) caps always apply. A cross-token GRAND TOTAL per
+  denomination (maxTotalPerDenom, e.g. "$20 across every USD stablecoin + chain") is
+  OPTIONAL \u2014 it sums tokens declared as one unit, each 1:1; it is NOT a price oracle and
+  never prices a volatile native coin. Payment-COUNT caps (maxPayments / per-window) also
+  span every chain + token.
+- The time envelope lives IN-MEMORY for THIS process (resets on restart). The money + count
+  totals also reset on restart UNLESS a durable spend store is configured \u2014 then they resume.
+- A refusal arrives as declined:true with a reasonCode; 'BUDGET' covers the lifetime, denom,
+  and count caps; 'OUTSIDE_WINDOW' covers both the rolling money and rolling count windows.
 `;
 function agentGuide() {
   return PIPRAIL_AGENT_GUIDE;
@@ -4277,19 +4782,19 @@ async function readBody(res) {
   if (!text) return null;
   try {
     return JSON.parse(text);
-  } catch (e31) {
+  } catch (e34) {
     return text;
   }
 }
 function toToolError(err) {
-  if (!(err instanceof _chunkJG6KRAW6cjs.PipRailError)) throw err;
+  if (!(err instanceof _chunkMWBT7MCEcjs.PipRailError)) throw err;
   const out = {
     ok: false,
     code: err.code,
     reason: err.message,
     explain: explainDecline(err)
   };
-  if (err instanceof _chunkJG6KRAW6cjs.PaymentDeclinedError) {
+  if (err instanceof _chunkMWBT7MCEcjs.PaymentDeclinedError) {
     out.declined = true;
     if (err.reasonCode) out.reasonCode = err.reasonCode;
   }
@@ -4503,14 +5008,14 @@ function paymentTools(client) {
             receipt: parseReceipt(res)
           };
         } catch (err) {
-          if (err instanceof _chunkJG6KRAW6cjs.PipRailError) {
+          if (err instanceof _chunkMWBT7MCEcjs.PipRailError) {
             const out = {
               ok: false,
               code: err.code,
               reason: err.message,
               explain: explainDecline(err)
             };
-            if (err instanceof _chunkJG6KRAW6cjs.PaymentDeclinedError) {
+            if (err instanceof _chunkMWBT7MCEcjs.PaymentDeclinedError) {
               out.declined = true;
               if (err.reasonCode) out.reasonCode = err.reasonCode;
             }
@@ -4579,11 +5084,11 @@ function paymentTools(client) {
     },
     {
       name: "piprail_budget",
-      description: "Read how much of your spend budget and time leash is left \u2014 per (network, asset) remaining, the session time envelope, and your spend so far. Use it in Mode A (headless) to self-check BEFORE paying, so you never discover the leash by hitting a decline. Read-only; moves no funds. NOTE: totals and the time envelope are in-memory for THIS process and reset on restart.",
+      description: "Read how much of your spend budget and time leash is left \u2014 per (network, asset) remaining, the cross-token GRAND TOTAL per denomination (e.g. how much USD you can still spend across every stablecoin and chain), the payment-count leash, the session time envelope, and your spend so far. Use it in Mode A (headless) to self-check BEFORE paying, so you never discover the leash by hitting a decline. Read-only; moves no funds. NOTE: the time envelope is in-memory for THIS process; the money/count totals persist only if a spend store is configured.",
       annotations: {
         title: "Check remaining budget",
         readOnlyHint: true,
-        // reads the in-memory ledger + policy; never pays
+        // reads the ledger + policy; never pays
         idempotentHint: true
         // a pure read
       },
@@ -4596,7 +5101,13 @@ function paymentTools(client) {
           return {
             spent,
             remaining: budget.byAsset,
+            grandTotal: budget.byDenom,
+            // cross-token spend cap per denomination (USD/EUR/…)
+            counts: budget.counts,
+            // payment-count leash (settled + lifetime/window caps)
             session: budget.session,
+            policy: _nullishCoalesce(client.policy(), () => ( null)),
+            // the configured leash, read back
             report: formatSpendReport(spent)
           };
         } catch (err) {
@@ -4670,7 +5181,7 @@ function buildBazaarExtension(descriptor = {}) {
 function pathOf(url) {
   try {
     return new URL(url).pathname || "/";
-  } catch (e32) {
+  } catch (e35) {
     return url.startsWith("/") ? url : `/${url}`;
   }
 }
@@ -4779,28 +5290,28 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return void 0;
     const body = await res.json();
-    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _71 => _71.kinds])) ? body.kinds : [];
+    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _86 => _86.kinds])) ? body.kinds : [];
     const want = normalizeNetwork(network);
-    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _72 => _72.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _73 => _73.network]), () => ( "")))) === want);
-    const fp = _optionalChain([kind, 'optionalAccess', _74 => _74.extra, 'optionalAccess', _75 => _75.feePayer]);
+    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _87 => _87.scheme]) === "exact" && normalizeNetwork(String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _88 => _88.network]), () => ( "")))) === want);
+    const fp = _optionalChain([kind, 'optionalAccess', _89 => _89.extra, 'optionalAccess', _90 => _90.feePayer]);
     return typeof fp === "string" ? fp : void 0;
-  } catch (e33) {
+  } catch (e36) {
     return void 0;
   } finally {
     clearTimeout(timer);
   }
 }
 function parseFacilitatorSupported(body) {
-  const kinds = _optionalChain([body, 'optionalAccess', _76 => _76.kinds]);
+  const kinds = _optionalChain([body, 'optionalAccess', _91 => _91.kinds]);
   if (!Array.isArray(kinds)) return [];
   const out = [];
   for (const k of kinds) {
     if (!k || typeof k !== "object") continue;
     const o = k;
     if (typeof o.scheme !== "string" || typeof o.network !== "string") continue;
-    const fp = _optionalChain([o, 'access', _77 => _77.extra, 'optionalAccess', _78 => _78.feePayer]);
+    const fp = _optionalChain([o, 'access', _92 => _92.extra, 'optionalAccess', _93 => _93.feePayer]);
     const ver = o.x402Version;
-    const method = _optionalChain([o, 'access', _79 => _79.extra, 'optionalAccess', _80 => _80.assetTransferMethod]);
+    const method = _optionalChain([o, 'access', _94 => _94.extra, 'optionalAccess', _95 => _95.assetTransferMethod]);
     out.push({
       scheme: o.scheme,
       network: o.network,
@@ -4819,7 +5330,7 @@ async function facilitatorCoverage(url, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return [];
     return parseFacilitatorSupported(await res.json());
-  } catch (e34) {
+  } catch (e37) {
     return [];
   } finally {
     clearTimeout(timer);
@@ -4848,7 +5359,7 @@ async function post(url, body, headers) {
   let json = null;
   try {
     json = await res.json();
-  } catch (e35) {
+  } catch (e38) {
   }
   return { status: res.status, json };
 }
@@ -4864,13 +5375,13 @@ async function settleViaFacilitator(input) {
   try {
     verify = await post(`${base2}/verify`, body, auth);
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (verify.status !== 200) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify returned HTTP ${verify.status} (transport/auth error).`
     );
   }
@@ -4886,13 +5397,13 @@ async function settleViaFacilitator(input) {
   try {
     settle = await post(`${base2}/settle`, body, auth);
   } catch (err) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle request failed (${err instanceof Error ? err.message : String(err)}).`,
       { cause: err }
     );
   }
   if (settle.status !== 200) {
-    throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+    throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /settle returned HTTP ${settle.status} (transport/auth error).`
     );
   }
@@ -5285,7 +5796,7 @@ function createPaymentGate(options) {
           }
           net.assertValidPayTo(payTo);
           const { asset, decimals, symbol } = net.resolveToken(a.token);
-          const amountBase = _chunkJG6KRAW6cjs.parseUnits.call(void 0, a.amount, decimals);
+          const amountBase = _chunkMWBT7MCEcjs.parseUnits.call(void 0, a.amount, decimals);
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
           if (exactOption) {
             const outcome = await resolveExactRail(net, asset);
@@ -5298,7 +5809,7 @@ function createPaymentGate(options) {
       if (exactOption && !specs.some((s) => s.exact)) {
         const why = exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme.";
         if (exactOption.settle === "keyless") {
-          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _81 => _81.env, 'optionalAccess', _82 => _82.PIPRAIL_NO_HINTS])) {
+          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _96 => _96.env, 'optionalAccess', _97 => _97.PIPRAIL_NO_HINTS])) {
             console.warn(
               `[piprail] exact: true \u2014 no offered chain has a gasless \`exact\` rail available, so this gate serves ONCHAIN-PROOF ONLY (buyers PAY GAS \u2014 the fallback when no facilitator can sponsor). ${why} To be gasless: pin \`exact: { settle: { facilitator } }\` or self-settle \`exact: { settle: 'self', relayer }\`. (Suppress with PIPRAIL_NO_HINTS=1.)`
             );
@@ -5326,7 +5837,7 @@ function createPaymentGate(options) {
           skipReason: `${net.network}: \`exact: true\` found no known keyless facilitator for this network. Pass \`exact: { settle: { facilitator } }\`, \`exact: { settle: 'self', relayer }\`, or see the coverage map (KNOWN_FACILITATORS / docs.piprail.com).`
         };
       }
-      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _83 => _83.env, 'optionalAccess', _84 => _84.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _85 => _85.env, 'optionalAccess', _86 => _86.PIPRAIL_NO_HINTS])) {
+      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _98 => _98.env, 'optionalAccess', _99 => _99.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _100 => _100.env, 'optionalAccess', _101 => _101.PIPRAIL_NO_HINTS])) {
         console.warn(
           `[piprail] exact: keyless rail on ${net.network} auto-settles via ${picked.url} (zero-config; pin \`exact.settle.facilitator\` in production).`
         );
@@ -5460,7 +5971,7 @@ function createPaymentGate(options) {
       instruction: describeChallenge({ x402Version: 2, resource: { url: resourceUrl }, accepts }),
       ...endpointInfo ? { endpoint: endpointInfo } : {}
     });
-    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _87 => _87.extensions]), () => ( {}));
+    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _102 => _102.extensions]), () => ( {}));
     const rejectionPiprail = _nullishCoalesce(rejectionExt.piprail, () => ( {}));
     const bodyPiprail = { ..._nullishCoalesce(selfDescribe, () => ( {})), ...rejectionPiprail };
     const bodyExtensions = {
@@ -5480,7 +5991,7 @@ function createPaymentGate(options) {
         ...options.mimeType ? { mimeType: options.mimeType } : {}
       },
       accepts,
-      ..._optionalChain([opts, 'optionalAccess', _88 => _88.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _103 => _103.error]) ? { error: opts.error } : {},
       ...Object.keys(bodyExtensions).length > 0 ? { extensions: bodyExtensions } : {}
     };
     const headerChallenge = {
@@ -5511,8 +6022,8 @@ function createPaymentGate(options) {
   function enrichReceipt(spec, receipt) {
     let amountFormatted = receipt.amount;
     try {
-      amountFormatted = _chunkJG6KRAW6cjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
-    } catch (e36) {
+      amountFormatted = _chunkMWBT7MCEcjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
+    } catch (e39) {
     }
     return {
       ...receipt,
@@ -5526,7 +6037,7 @@ function createPaymentGate(options) {
     if (!options.onPaidError) return;
     try {
       options.onPaidError(error, receipt);
-    } catch (e37) {
+    } catch (e40) {
     }
   }
   function fireOnPaid(receipt) {
@@ -5551,7 +6062,7 @@ function createPaymentGate(options) {
     if (!options.onFailedError) return;
     try {
       options.onFailedError(error, failure);
-    } catch (e38) {
+    } catch (e41) {
     }
   }
   function fireOnFailed(failure) {
@@ -5651,28 +6162,28 @@ function createPaymentGate(options) {
       nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
         try {
           return Buffer.from(t, "base64").toString("base64");
-        } catch (e39) {
+        } catch (e42) {
           return t;
         }
       }).join("|");
     } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
-      } catch (e40) {
+      } catch (e43) {
         nonce = exact.payload.transaction;
       }
     } else if ("paymentGroup" in exact.payload) {
       nonce = exact.payload.paymentGroup.map((t) => {
         try {
           return Buffer.from(t, "base64").toString("base64");
-        } catch (e41) {
+        } catch (e44) {
           return t;
         }
       }).join("|");
     } else if ("signedDelegateAction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.signedDelegateAction, "base64").toString("base64");
-      } catch (e42) {
+      } catch (e45) {
         nonce = exact.payload.signedDelegateAction;
       }
     } else if ("permit2Authorization" in exact.payload) {
@@ -5695,7 +6206,7 @@ function createPaymentGate(options) {
         const ftMethod = accept.extra.assetTransferMethod;
         const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
         if (needsFeePayer && !accept.extra.feePayer) {
-          throw new (0, _chunkJG6KRAW6cjs.SettlementError)(
+          throw new (0, _chunkMWBT7MCEcjs.SettlementError)(
             `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
           );
         }
@@ -5760,7 +6271,7 @@ function requirePayment(options) {
     try {
       result = await gate.verify(_nullishCoalesce(req.headers[HEADER_SIGNATURE], () => ( req.headers[HEADER_SIGNATURE_V1])));
     } catch (err) {
-      if (err instanceof _chunkJG6KRAW6cjs.SettlementError) {
+      if (err instanceof _chunkMWBT7MCEcjs.SettlementError) {
         res.status(502);
         res.json({
           x402Version: 2,
@@ -5808,7 +6319,7 @@ function isRetryableStatus(status) {
 }
 var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
 async function signBody(secret, body) {
-  const subtle = _optionalChain([globalThis, 'access', _89 => _89.crypto, 'optionalAccess', _90 => _90.subtle]);
+  const subtle = _optionalChain([globalThis, 'access', _104 => _104.crypto, 'optionalAccess', _105 => _105.subtle]);
   if (!subtle) return null;
   try {
     const enc = new TextEncoder();
@@ -5818,7 +6329,7 @@ async function signBody(secret, body) {
     const sig = await subtle.sign("HMAC", key, enc.encode(body));
     const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
     return `sha256=${hex}`;
-  } catch (e43) {
+  } catch (e46) {
     return null;
   }
 }
@@ -5878,8 +6389,8 @@ async function deliverReceipt(receipt, options) {
     const retryable = status === void 0 ? true : isRetryableStatus(status);
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
-      _optionalChain([onAttempt, 'optionalCall', _91 => _91({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
-    } catch (e44) {
+      _optionalChain([onAttempt, 'optionalCall', _106 => _106({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+    } catch (e47) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
     if (!willRetry) {
@@ -5998,4 +6509,9 @@ async function deliverReceipt(receipt, options) {
 
 
 
-exports.BRAND = BRAND; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkJG6KRAW6cjs.ConfirmationTimeoutError; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkJG6KRAW6cjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkJG6KRAW6cjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MaxRetriesExceededError = _chunkJG6KRAW6cjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkJG6KRAW6cjs.MissingDriverError; exports.MultiChainPayer = MultiChainPayer; exports.NoCompatibleAcceptError = _chunkJG6KRAW6cjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkJG6KRAW6cjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkJG6KRAW6cjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkJG6KRAW6cjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkJG6KRAW6cjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkJG6KRAW6cjs.RecipientNotReadyError; exports.SettlementError = _chunkJG6KRAW6cjs.SettlementError; exports.UnknownTokenError = _chunkJG6KRAW6cjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkJG6KRAW6cjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkJG6KRAW6cjs.UnsupportedSchemeError; exports.WalletRequiredError = _chunkJG6KRAW6cjs.WalletRequiredError; exports.WrongChainError = _chunkJG6KRAW6cjs.WrongChainError; exports.WrongFamilyError = _chunkJG6KRAW6cjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.appendKeywords = appendKeywords; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildEndpointInfo = buildEndpointInfo; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.fetchAcross = fetchAcross; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.rankResources = rankResources; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.scoreResource = scoreResource; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkJG6KRAW6cjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;
+
+
+
+
+
+exports.BRAND = BRAND; exports.BUILTIN_DENOMS = BUILTIN_DENOMS; exports.CHAINS = CHAINS; exports.ConfirmationTimeoutError = _chunkMWBT7MCEcjs.ConfirmationTimeoutError; exports.DENOM_PRECISION = DENOM_PRECISION; exports.DIRECTORY_INFO = DIRECTORY_INFO; exports.EIP3009_TYPES = EIP3009_TYPES; exports.EXACT_NETWORK_SLUGS = EXACT_NETWORK_SLUGS; exports.GENERATOR = GENERATOR; exports.HEADER_REQUIRED = HEADER_REQUIRED; exports.HEADER_RESPONSE = HEADER_RESPONSE; exports.HEADER_RESPONSE_V1 = HEADER_RESPONSE_V1; exports.HEADER_SIGNATURE = HEADER_SIGNATURE; exports.HEADER_SIGNATURE_V1 = HEADER_SIGNATURE_V1; exports.InsufficientFundsError = _chunkMWBT7MCEcjs.InsufficientFundsError; exports.InvalidEnvelopeError = _chunkMWBT7MCEcjs.InvalidEnvelopeError; exports.KNOWN_FACILITATORS = KNOWN_FACILITATORS; exports.MaxRetriesExceededError = _chunkMWBT7MCEcjs.MaxRetriesExceededError; exports.MissingDriverError = _chunkMWBT7MCEcjs.MissingDriverError; exports.MultiChainPayer = MultiChainPayer; exports.NoCompatibleAcceptError = _chunkMWBT7MCEcjs.NoCompatibleAcceptError; exports.NonReplayableBodyError = _chunkMWBT7MCEcjs.NonReplayableBodyError; exports.PERMIT2_ADDRESS = PERMIT2_ADDRESS; exports.PERMIT2_PROXY_CHAIN_IDS = PERMIT2_PROXY_CHAIN_IDS; exports.PERMIT2_WITNESS_TYPES = PERMIT2_WITNESS_TYPES; exports.PIPRAIL_AGENT_GUIDE = PIPRAIL_AGENT_GUIDE; exports.POWERED_BY = POWERED_BY; exports.PaymentDeclinedError = _chunkMWBT7MCEcjs.PaymentDeclinedError; exports.PaymentTimeoutError = _chunkMWBT7MCEcjs.PaymentTimeoutError; exports.PipRailClient = PipRailClient; exports.PipRailError = _chunkMWBT7MCEcjs.PipRailError; exports.REGISTER_ATTRIBUTION = REGISTER_ATTRIBUTION; exports.RecipientNotReadyError = _chunkMWBT7MCEcjs.RecipientNotReadyError; exports.SettlementError = _chunkMWBT7MCEcjs.SettlementError; exports.SpendLedger = SpendLedger; exports.UnknownTokenError = _chunkMWBT7MCEcjs.UnknownTokenError; exports.UnsupportedNetworkError = _chunkMWBT7MCEcjs.UnsupportedNetworkError; exports.UnsupportedSchemeError = _chunkMWBT7MCEcjs.UnsupportedSchemeError; exports.WalletRequiredError = _chunkMWBT7MCEcjs.WalletRequiredError; exports.WrongChainError = _chunkMWBT7MCEcjs.WrongChainError; exports.WrongFamilyError = _chunkMWBT7MCEcjs.WrongFamilyError; exports.X402_EXACT_PERMIT2_PROXY = X402_EXACT_PERMIT2_PROXY; exports.agentGuide = agentGuide; exports.appendAttribution = appendAttribution; exports.appendKeywords = appendKeywords; exports.buildBazaarExtension = buildBazaarExtension; exports.buildChallengeHeader = buildChallengeHeader; exports.buildEndpointInfo = buildEndpointInfo; exports.buildExactAuthorization = buildExactAuthorization; exports.buildExactSignatureHeader = buildExactSignatureHeader; exports.buildOpenApi = buildOpenApi; exports.buildReceiptHeader = buildReceiptHeader; exports.buildSelfDescription = buildSelfDescription; exports.buildSignatureHeader = buildSignatureHeader; exports.buildWellKnownX402 = buildWellKnownX402; exports.buildX402DnsTxt = buildX402DnsTxt; exports.chainIdForExactNetwork = chainIdForExactNetwork; exports.claim402IndexDomain = claim402IndexDomain; exports.classifyChallenge = classifyChallenge; exports.createPaymentGate = createPaymentGate; exports.decorateOutcome = decorateOutcome; exports.deliverReceipt = deliverReceipt; exports.denomOf = denomOf; exports.describeChallenge = describeChallenge; exports.discoveryHeaders = discoveryHeaders; exports.eip3009Abi = eip3009Abi; exports.encodeXPaymentHeader = encodeXPaymentHeader; exports.evaluatePolicy = evaluatePolicy; exports.explainDecline = explainDecline; exports.facilitatorCoverage = facilitatorCoverage; exports.fetchAcross = fetchAcross; exports.firstKeylessFacilitator = firstKeylessFacilitator; exports.formatSpendReport = formatSpendReport; exports.getDirectoryInfo = getDirectoryInfo; exports.isPermit2ProxyChain = isPermit2ProxyChain; exports.knownFacilitatorsFor = knownFacilitatorsFor; exports.memorySpendStore = _chunkO4UQOZ4Zcjs.memorySpendStore; exports.normalizeNetwork = normalizeNetwork; exports.parseChallenge = parseChallenge; exports.parseExactPaymentHeader = parseExactPaymentHeader; exports.parseExactRequirements = parseExactRequirements; exports.parseFacilitatorSupported = parseFacilitatorSupported; exports.parseReceipt = parseReceipt; exports.parseSettleResponse = parseSettleResponse; exports.parseSignatureHeader = parseSignatureHeader; exports.paymentTools = paymentTools; exports.pickAccept = pickAccept; exports.planAcross = planAcross; exports.rankResources = rankResources; exports.readExactDomain = readExactDomain; exports.register402Index = register402Index; exports.registerDriver = registerDriver; exports.registerX402Scan = registerX402Scan; exports.renderLandingPage = renderLandingPage; exports.requirePayment = requirePayment; exports.resolveChain = resolveChain; exports.scoreResource = scoreResource; exports.searchOpenIndexes = searchOpenIndexes; exports.settleViaFacilitator = settleViaFacilitator; exports.summarizePlan = summarizePlan; exports.toInsufficientFundsError = _chunkMWBT7MCEcjs.toInsufficientFundsError; exports.toInvalidBody = toInvalidBody; exports.verify402IndexDomain = verify402IndexDomain;