@piprail/sdk 3.0.0 → 3.1.0

package/dist/index.cjs

@@ -401,6 +401,11 @@ function resolveChain(input, rpcUrlOverride) {
     }
     return { chain: input, chainId: input.id, rpcUrl: rpcUrl2, tokens: knownTokensForId(input.id) };
   }
+  if (!Number.isSafeInteger(input.id) || input.id <= 0) {
+    throw new Error(
+      `resolveChain: chain id must be a positive safe integer (EIP-155), got ${String(input.id)}.`
+    );
+  }
   const rpcUrl = _nullishCoalesce(rpcUrlOverride, () => ( input.rpcUrl));
   if (!rpcUrl) {
     throw new Error(`resolveChain: chain ${input.id} needs an rpcUrl.`);
@@ -574,12 +579,29 @@ async function quoteEvmSwap(p) {
   } catch (e3) {
     return null;
   }
-  const real = await route(needIn);
-  const summary = _optionalChain([real, 'optionalAccess', _5 => _5.data, 'optionalAccess', _6 => _6.routeSummary]);
-  if (!_optionalChain([summary, 'optionalAccess', _7 => _7.amountOut]) || !_optionalChain([real, 'optionalAccess', _8 => _8.data, 'optionalAccess', _9 => _9.routerAddress])) return null;
+  const MAX_REFINEMENTS = 3;
+  let real = await route(needIn);
+  let summary = _optionalChain([real, 'optionalAccess', _5 => _5.data, 'optionalAccess', _6 => _6.routeSummary]);
+  for (let attempt = 0; attempt < MAX_REFINEMENTS; attempt++) {
+    if (!_optionalChain([summary, 'optionalAccess', _7 => _7.amountOut])) break;
+    let out;
+    try {
+      out = BigInt(summary.amountOut);
+    } catch (e4) {
+      return null;
+    }
+    if (out >= p.wantAmount) break;
+    if (out <= 0n) return null;
+    const next = _chunkMZXVXC3Ccjs.applySlippage.call(void 0, (needIn * p.wantAmount + out - 1n) / out, p.slippageBps);
+    if (next <= needIn) break;
+    needIn = next;
+    real = await route(needIn);
+    summary = _optionalChain([real, 'optionalAccess', _8 => _8.data, 'optionalAccess', _9 => _9.routeSummary]);
+  }
+  if (!_optionalChain([summary, 'optionalAccess', _10 => _10.amountOut]) || !_optionalChain([real, 'optionalAccess', _11 => _11.data, 'optionalAccess', _12 => _12.routerAddress])) return null;
   try {
     if (BigInt(summary.amountOut) < p.wantAmount) return null;
-  } catch (e4) {
+  } catch (e5) {
     return null;
   }
   const needsApproval = p.from.asset !== "native";
@@ -606,7 +628,7 @@ async function quoteEvmSwap(p) {
 async function swapEvm(p) {
   const { publicClient, walletClient, account, chain, quote } = p;
   const route = quote.route;
-  if (!_optionalChain([route, 'optionalAccess', _10 => _10.routerAddress]) || !route.routeSummary) {
+  if (!_optionalChain([route, 'optionalAccess', _13 => _13.routerAddress]) || !route.routeSummary) {
     throw new Error("EVM: swap quote is missing its routing data \u2014 re-quote before swapping.");
   }
   const router = route.routerAddress;
@@ -621,7 +643,7 @@ async function swapEvm(p) {
         functionName: "allowance",
         args: [account.address, router]
       });
-    } catch (e5) {
+    } catch (e6) {
       allowance = 0n;
     }
     if (allowance < spend) {
@@ -661,7 +683,7 @@ async function swapEvm(p) {
       })
     }
   );
-  if (!_optionalChain([built, 'optionalAccess', _11 => _11.data, 'optionalAccess', _12 => _12.data])) {
+  if (!_optionalChain([built, 'optionalAccess', _14 => _14.data, 'optionalAccess', _15 => _15.data])) {
     throw new (0, _chunk6XTNI2OQcjs.InsufficientFundsError)(
       "KyberSwap could not build this swap (the route went stale, or the market moved). Nothing was spent \u2014 re-quote and retry."
     );
@@ -701,7 +723,7 @@ async function swapEvm(p) {
       to: quote.to
     };
   } catch (err) {
-    const msg = String(_nullishCoalesce(_optionalChain([err, 'optionalAccess', _13 => _13.message]), () => ( err)));
+    const msg = String(_nullishCoalesce(_optionalChain([err, 'optionalAccess', _16 => _16.message]), () => ( err)));
     if (/TRANSFER_FROM_FAILED/i.test(msg)) {
       throw new (0, _chunk6XTNI2OQcjs.InsufficientFundsError)(
         "EVM swap reverted moving the token: the router allowance was rejected or the balance is short. Nothing was swapped. Some tokens refuse a non-zero to non-zero approve; re-quote and retry, which resets the allowance first.",
@@ -733,7 +755,7 @@ async function verifyEvm(params) {
   let receipt;
   try {
     receipt = await publicClient.getTransactionReceipt({ hash: txHash });
-  } catch (e6) {
+  } catch (e7) {
     return {
       ok: false,
       error: "tx_not_found",
@@ -752,7 +774,7 @@ async function verifyEvm(params) {
   try {
     latestBlock = await publicClient.getBlockNumber();
     block = await publicClient.getBlock({ blockNumber: receipt.blockNumber });
-  } catch (e7) {
+  } catch (e8) {
     return {
       ok: false,
       error: "tx_not_found",
@@ -780,7 +802,7 @@ async function verifyEvm(params) {
     let tx;
     try {
       tx = await publicClient.getTransaction({ hash: txHash });
-    } catch (e8) {
+    } catch (e9) {
       return {
         ok: false,
         error: "tx_not_found",
@@ -846,7 +868,7 @@ function sumTransfersTo(logs, asset, payTo) {
       if (_viem.getAddress.call(void 0, args.to) !== payTo) continue;
       total += args.value;
       from = _viem.getAddress.call(void 0, args.from);
-    } catch (e9) {
+    } catch (e10) {
     }
   }
   return { total, from };
@@ -969,8 +991,8 @@ async function buildExactAuthorization(params) {
   };
   const signature = await account.signTypedData({
     domain: {
-      name: _nullishCoalesce(_optionalChain([accept, 'access', _14 => _14.extra, 'optionalAccess', _15 => _15.name]), () => ( "USD Coin")),
-      version: _nullishCoalesce(_optionalChain([accept, 'access', _16 => _16.extra, 'optionalAccess', _17 => _17.version]), () => ( "2")),
+      name: _nullishCoalesce(_optionalChain([accept, 'access', _17 => _17.extra, 'optionalAccess', _18 => _18.name]), () => ( "USD Coin")),
+      version: _nullishCoalesce(_optionalChain([accept, 'access', _19 => _19.extra, 'optionalAccess', _20 => _20.version]), () => ( "2")),
       chainId,
       verifyingContract: accept.asset
     },
@@ -1011,7 +1033,7 @@ async function payExactEvm(input) {
   let code;
   try {
     code = await publicClient.getCode({ address: account.address });
-  } catch (e10) {
+  } catch (e11) {
     code = void 0;
   }
   if (code && code !== "0x") {
@@ -1030,7 +1052,7 @@ async function payExactEvm(input) {
     );
   }
   const g = globalThis.crypto;
-  if (!_optionalChain([g, 'optionalAccess', _18 => _18.getRandomValues])) {
+  if (!_optionalChain([g, 'optionalAccess', _21 => _21.getRandomValues])) {
     throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the exact rail needs a CSPRNG nonce."
     );
@@ -1125,7 +1147,7 @@ async function readExactDomain(publicClient, asset) {
   let token;
   try {
     token = _viem.getAddress.call(void 0, asset);
-  } catch (e11) {
+  } catch (e12) {
     return null;
   }
   let name;
@@ -1141,13 +1163,13 @@ async function readExactDomain(publicClient, asset) {
     ]);
     if (typeof n !== "string" || !n) return null;
     name = n;
-  } catch (e12) {
+  } catch (e13) {
     return null;
   }
   try {
     const version = await publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "version" });
     if (typeof version === "string" && version) return { name, version };
-  } catch (e13) {
+  } catch (e14) {
   }
   return deriveExactDomainVersion(publicClient, token, name);
 }
@@ -1156,8 +1178,8 @@ async function deriveExactDomainVersion(publicClient, token, name) {
   let chainId;
   try {
     onchain = await publicClient.readContract({ address: token, abi: eip3009Abi, functionName: "DOMAIN_SEPARATOR" });
-    chainId = await _asyncNullishCoalesce(await _asyncOptionalChain([publicClient, 'access', async _19 => _19.chain, 'optionalAccess', async _20 => _20.id]), async () => ( await publicClient.getChainId()));
-  } catch (e14) {
+    chainId = await _asyncNullishCoalesce(await _asyncOptionalChain([publicClient, 'access', async _22 => _22.chain, 'optionalAccess', async _23 => _23.id]), async () => ( await publicClient.getChainId()));
+  } catch (e15) {
     return null;
   }
   const target = onchain.toLowerCase();
@@ -1212,7 +1234,7 @@ async function verifyAndSettleExactEvm(input) {
   let fromCode;
   try {
     fromCode = await publicClient.getCode({ address: from });
-  } catch (e15) {
+  } catch (e16) {
     return { ok: false, error: "tx_not_found", detail: `Could not read code at ${from} (transient RPC) \u2014 retry.` };
   }
   const isContractWallet = Boolean(fromCode && fromCode !== "0x");
@@ -1221,8 +1243,8 @@ async function verifyAndSettleExactEvm(input) {
     try {
       recovered = await _viem.recoverTypedDataAddress.call(void 0, {
         domain: {
-          name: _optionalChain([accept, 'access', _21 => _21.extra, 'optionalAccess', _22 => _22.name]),
-          version: _optionalChain([accept, 'access', _23 => _23.extra, 'optionalAccess', _24 => _24.version]),
+          name: _optionalChain([accept, 'access', _24 => _24.extra, 'optionalAccess', _25 => _25.name]),
+          version: _optionalChain([accept, 'access', _26 => _26.extra, 'optionalAccess', _27 => _27.version]),
           chainId: chain.id,
           verifyingContract: token
         },
@@ -1248,7 +1270,7 @@ async function verifyAndSettleExactEvm(input) {
     if (used) {
       return { ok: false, error: "tx_already_used", detail: `Authorization nonce ${nonce} already used or canceled on-chain.` };
     }
-  } catch (e16) {
+  } catch (e17) {
     return { ok: false, error: "tx_not_found", detail: "Could not read authorizationState (transient RPC) \u2014 retry." };
   }
   const baseArgs = [from, to, value, validAfter, validBefore, nonce];
@@ -1294,7 +1316,7 @@ async function verifyAndSettleExactEvm(input) {
     );
   }
   try {
-    const confirmations = _nullishCoalesce(_optionalChain([accept, 'access', _25 => _25.extra, 'optionalAccess', _26 => _26.minConfirmations]), () => ( 1));
+    const confirmations = _nullishCoalesce(_optionalChain([accept, 'access', _28 => _28.extra, 'optionalAccess', _29 => _29.minConfirmations]), () => ( 1));
     const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash, confirmations });
     if (receipt.status !== "success") {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
@@ -1430,7 +1452,7 @@ function shorten2(msg) {
 }
 function randomPermit2Nonce() {
   const g = globalThis.crypto;
-  if (!_optionalChain([g, 'optionalAccess', _27 => _27.getRandomValues])) {
+  if (!_optionalChain([g, 'optionalAccess', _30 => _30.getRandomValues])) {
     throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the permit2 rail needs a CSPRNG nonce."
     );
@@ -1478,7 +1500,7 @@ async function payPermit2Evm(input) {
   let code;
   try {
     code = await publicClient.getCode({ address: account.address });
-  } catch (e17) {
+  } catch (e18) {
     code = void 0;
   }
   if (code && code !== "0x") {
@@ -1582,7 +1604,7 @@ async function verifyAndSettlePermit2Evm(input) {
   let fromCode;
   try {
     fromCode = await publicClient.getCode({ address: from });
-  } catch (e18) {
+  } catch (e19) {
     return { ok: false, error: "tx_not_found", detail: `Could not read code at ${from} (transient RPC) \u2014 retry.` };
   }
   if (!(fromCode && fromCode !== "0x")) {
@@ -1620,7 +1642,7 @@ async function verifyAndSettlePermit2Evm(input) {
     if ((bitmap >> bit & 1n) === 1n) {
       return { ok: false, error: "tx_already_used", detail: `Permit2 nonce ${nonce} already used or invalidated for ${from}.` };
     }
-  } catch (e19) {
+  } catch (e20) {
     return { ok: false, error: "tx_not_found", detail: "Could not read the Permit2 nonce bitmap (transient RPC) \u2014 retry." };
   }
   const settleArgs = [
@@ -1663,7 +1685,7 @@ async function verifyAndSettlePermit2Evm(input) {
     );
   }
   try {
-    const confirmations = _nullishCoalesce(_optionalChain([accept, 'access', _28 => _28.extra, 'optionalAccess', _29 => _29.minConfirmations]), () => ( 1));
+    const confirmations = _nullishCoalesce(_optionalChain([accept, 'access', _31 => _31.extra, 'optionalAccess', _32 => _32.minConfirmations]), () => ( 1));
     const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash, confirmations });
     if (receipt.status !== "success") {
       return { ok: false, error: "tx_reverted", detail: `Settlement tx ${txHash} reverted on-chain.` };
@@ -1766,7 +1788,7 @@ function shorten3(msg) {
 }
 function randomPermit2Nonce2() {
   const g = globalThis.crypto;
-  if (!_optionalChain([g, 'optionalAccess', _30 => _30.getRandomValues])) {
+  if (!_optionalChain([g, 'optionalAccess', _33 => _33.getRandomValues])) {
     throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
       "this runtime lacks Web Crypto (globalThis.crypto.getRandomValues); the upto rail needs a CSPRNG nonce."
     );
@@ -1780,7 +1802,7 @@ async function payUptoEvm(input) {
   let code;
   try {
     code = await publicClient.getCode({ address: account.address });
-  } catch (e20) {
+  } catch (e21) {
     code = void 0;
   }
   if (code && code !== "0x") {
@@ -1788,7 +1810,7 @@ async function payUptoEvm(input) {
       `upto buyer rail requires an EOA signer; ${account.address} is a contract / EIP-1271 / EIP-7702-delegated account. Pay via onchain-proof.`
     );
   }
-  const facilitatorAddress = _optionalChain([accept, 'access', _31 => _31.extra, 'optionalAccess', _32 => _32.facilitatorAddress]);
+  const facilitatorAddress = _optionalChain([accept, 'access', _34 => _34.extra, 'optionalAccess', _35 => _35.facilitatorAddress]);
   if (typeof facilitatorAddress !== "string" || facilitatorAddress.length === 0) {
     throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
       `upto: the rail carries no extra.facilitatorAddress to bind into witness.facilitator \u2014 refusing to sign.`
@@ -1917,7 +1939,7 @@ async function verifyAndSettleUptoEvm(input) {
   let fromCode;
   try {
     fromCode = await publicClient.getCode({ address: from });
-  } catch (e21) {
+  } catch (e22) {
     return { ok: false, error: "tx_not_found", detail: `Could not read code at ${from} (transient RPC) \u2014 retry.` };
   }
   if (!(fromCode && fromCode !== "0x")) {
@@ -1971,7 +1993,7 @@ async function verifyAndSettleUptoEvm(input) {
     if ((bitmap >> bit & 1n) === 1n) {
       return { ok: false, error: "tx_already_used", detail: `Permit2 nonce ${nonce} already used or invalidated for ${from}.` };
     }
-  } catch (e22) {
+  } catch (e23) {
     return { ok: false, error: "tx_not_found", detail: "Could not read the Permit2 nonce bitmap (transient RPC) \u2014 retry." };
   }
   const settleArgs = [
@@ -2060,7 +2082,7 @@ var evmDriver = {
     let resolved;
     try {
       resolved = resolveChain(opts.chain, opts.rpcUrl);
-    } catch (e23) {
+    } catch (e24) {
       return null;
     }
     return makeEvmNetwork(resolved);
@@ -2121,7 +2143,7 @@ function makeEvmNetwork(resolved) {
       let normalized;
       try {
         normalized = _viem.getAddress.call(void 0, asset);
-      } catch (e24) {
+      } catch (e25) {
         return null;
       }
       for (const info of Object.values(resolved.tokens)) {
@@ -2188,7 +2210,7 @@ function makeEvmNetwork(resolved) {
     async estimateCost(accept) {
       const { decimals, symbol } = resolved.chain.nativeCurrency;
       if (accept.scheme === "exact" || accept.scheme === "upto") {
-        const m = _optionalChain([accept, 'access', _33 => _33.extra, 'optionalAccess', _34 => _34.assetTransferMethod]);
+        const m = _optionalChain([accept, 'access', _36 => _36.extra, 'optionalAccess', _37 => _37.assetTransferMethod]);
         const permit2 = m === "permit2" || m === "permit2-exact" || m === "permit2-upto";
         return _chunk6XTNI2OQcjs.nativeCost.call(void 0, {
           symbol,
@@ -2208,7 +2230,7 @@ function makeEvmNetwork(resolved) {
           basis: "estimated",
           detail: `~${gasLimit} gas @ ${gasPrice} wei/gas`
         });
-      } catch (e25) {
+      } catch (e26) {
         const gasPrice = 5000000000n;
         return _chunk6XTNI2OQcjs.nativeCost.call(void 0, {
           symbol,
@@ -2236,7 +2258,7 @@ function makeEvmNetwork(resolved) {
           functionName: "balanceOf",
           args: [owner]
         });
-      } catch (e26) {
+      } catch (e27) {
         token = null;
       }
       return { token, native };
@@ -2269,7 +2291,7 @@ function makeEvmNetwork(resolved) {
         publicClient,
         chainId: resolved.chainId,
         network,
-        nativeSymbol: _nullishCoalesce(_optionalChain([resolved, 'access', _35 => _35.chain, 'access', _36 => _36.nativeCurrency, 'optionalAccess', _37 => _37.symbol]), () => ( "ETH")),
+        nativeSymbol: _nullishCoalesce(_optionalChain([resolved, 'access', _38 => _38.chain, 'access', _39 => _39.nativeCurrency, 'optionalAccess', _40 => _40.symbol]), () => ( "ETH")),
         owner: a.account.address,
         from,
         to,
@@ -2440,7 +2462,7 @@ var loaders = {
   solana: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-EBV6PUCU.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./solana-TIEJV742.cjs")));
     } catch (cause) {
       throw new (0, _chunk6XTNI2OQcjs.MissingDriverError)(
         `Solana selected, but its packages aren't installed. Run: npm install @solana/web3.js @solana/spl-token bs58`,
@@ -2464,7 +2486,7 @@ var loaders = {
   stellar: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-5C7FQLPS.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./stellar-5GMZJBTA.cjs")));
     } catch (cause) {
       throw new (0, _chunk6XTNI2OQcjs.MissingDriverError)(
         `Stellar selected, but its package isn't installed. Run: npm install @stellar/stellar-sdk`,
@@ -2476,7 +2498,7 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-YS3IXPLV.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-G2FKFXRI.cjs")));
     } catch (cause) {
       throw new (0, _chunk6XTNI2OQcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
@@ -2536,7 +2558,7 @@ var loaders = {
   algorand: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-W776EEM2.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./algorand-4FTTEV7X.cjs")));
     } catch (cause) {
       throw new (0, _chunk6XTNI2OQcjs.MissingDriverError)(
         `Algorand selected, but its package isn't installed. Run: npm install algosdk`,
@@ -2584,7 +2606,7 @@ var BUILTIN_DENOMS = {
 function denomOf(symbol, asset, policy) {
   if (asset === "native") return void 0;
   const norm = (v) => typeof v === "string" && v.trim() !== "" ? v.trim().toUpperCase() : void 0;
-  const override = _optionalChain([policy, 'optionalAccess', _38 => _38.denomFor]);
+  const override = _optionalChain([policy, 'optionalAccess', _41 => _41.denomFor]);
   if (override && typeof override === "object") {
     if (asset && asset in override) {
       const d = norm(override[asset]);
@@ -2776,16 +2798,16 @@ var SpendLedger = (_class = class {
    *   `append()`s every settled payment. A throwing/absent store fails SAFE to an
    *   empty in-memory ledger — it never blocks construction (ERRORS.md: never throw).
    */
-  constructor(store) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this);_class.prototype.__init4.call(this);_class.prototype.__init5.call(this);
+  constructor(store) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);_class.prototype.__init3.call(this);_class.prototype.__init4.call(this);_class.prototype.__init5.call(this);_class.prototype.__init6.call(this);_class.prototype.__init7.call(this);
     this.store = store;
     if (store) {
       let seed = [];
       try {
         seed = _nullishCoalesce(store.load(), () => ( []));
-      } catch (e27) {
+      } catch (e28) {
         seed = [];
       }
-      for (const r of seed) this.ingest(r, _nullishCoalesce(_optionalChain([r, 'optionalAccess', _39 => _39.decimals]), () => ( 0)), _optionalChain([r, 'optionalAccess', _40 => _40.denom]));
+      for (const r of seed) this.ingest(r, _nullishCoalesce(_optionalChain([r, 'optionalAccess', _42 => _42.decimals]), () => ( 0)), _optionalChain([r, 'optionalAccess', _43 => _43.denom]));
     }
   }
   /**
@@ -2841,13 +2863,44 @@ var SpendLedger = (_class = class {
     if (rec && this.store) {
       try {
         this.store.append(rec);
-      } catch (e28) {
+      } catch (e29) {
       }
     }
   }
   /** Running total (base units) already spent on this (network, asset). */
+  /*
+   * ── IN-FLIGHT RESERVATIONS ─────────────────────────────────────────────────────────
+   *
+   * A cap is read when a quote is priced and written when the payment settles, and a whole
+   * network round trip sits between the two. Without a reservation, N concurrent payments all
+   * price against the same "spent so far", all pass, and all settle: an agent with a 2.50 cap
+   * spends 4.00 and every individual check was correct. It is the same read-await-write shape
+   * that let one proof be redeemed N times, on the other side of the wire.
+   *
+   * A reservation is taken SYNCHRONOUSLY by the client before it pays, counts toward every
+   * total below while it is outstanding, and is released the moment the payment either settles
+   * (the real record replaces it) or fails (so a refused payment never consumes the leash).
+   */
+  __init6() {this.pending = /* @__PURE__ */ new Map()}
+  __init7() {this.pendingSeq = 0}
+  /** Reserve budget for a payment about to be attempted. Returns the token to settle it with. */
+  reserve(network, asset, amountBase, decimals, denom) {
+    const token = `r${++this.pendingSeq}`;
+    const scaled = denom ? _nullishCoalesce(scaleToDenom(amountBase, decimals), () => ( 0n)) : 0n;
+    this.pending.set(token, { network, asset, amountBase, denom: _optionalChain([denom, 'optionalAccess', _44 => _44.toUpperCase, 'call', _45 => _45()]), scaled, at: Date.now() });
+    return token;
+  }
+  /** Drop a reservation: the payment settled (its real record now counts) or it failed. */
+  release(token) {
+    if (token) this.pending.delete(token);
+  }
+  pendingFor(network, asset) {
+    let sum = 0n;
+    for (const p of this.pending.values()) if (p.network === network && p.asset === asset) sum += p.amountBase;
+    return sum;
+  }
   totalFor(network, asset) {
-    return _nullishCoalesce(_optionalChain([this, 'access', _41 => _41.buckets, 'access', _42 => _42.get, 'call', _43 => _43(keyFor(network, asset)), 'optionalAccess', _44 => _44.total]), () => ( 0n));
+    return (_nullishCoalesce(_optionalChain([this, 'access', _46 => _46.buckets, 'access', _47 => _47.get, 'call', _48 => _48(keyFor(network, asset)), 'optionalAccess', _49 => _49.total]), () => ( 0n))) + this.pendingFor(network, asset);
   }
   /**
    * Running grand total for a DENOMINATION, scaled to {@link DENOM_PRECISION} (so
@@ -2856,11 +2909,14 @@ var SpendLedger = (_class = class {
    * `0n` for a denomination never spent on. Case-insensitive.
    */
   totalForDenom(denom) {
-    return _nullishCoalesce(this.denomTotals.get(denom.toUpperCase()), () => ( 0n));
+    const key = denom.toUpperCase();
+    let pending = 0n;
+    for (const p of this.pending.values()) if (p.denom === key) pending += p.scaled;
+    return (_nullishCoalesce(this.denomTotals.get(key), () => ( 0n))) + pending;
   }
   /** Total number of settled payments (across every chain + token). Powers `maxPayments`. */
   count() {
-    return this.records.length;
+    return this.records.length + this.pending.size;
   }
   /** Mark a `warnAtFraction` threshold key as fired; returns `true` the FIRST time (so the
    *  caller emits the `budget-threshold` event once) and `false` thereafter. Shared across
@@ -2878,6 +2934,7 @@ var SpendLedger = (_class = class {
    */
   countSince(sinceMs) {
     let n = 0;
+    for (const p of this.pending.values()) if (p.at >= sinceMs) n += 1;
     for (const r of this.records) {
       const t = Date.parse(r.at);
       if (Number.isNaN(t) || t >= sinceMs) n += 1;
@@ -2893,6 +2950,9 @@ var SpendLedger = (_class = class {
    */
   totalSince(network, asset, sinceMs) {
     let sum = 0n;
+    for (const p of this.pending.values()) {
+      if (p.network === network && p.asset === asset && p.at >= sinceMs) sum += p.amountBase;
+    }
     for (const r of this.records) {
       if (r.network !== network || r.asset !== asset) continue;
       const t = Date.parse(r.at);
@@ -2941,7 +3001,7 @@ var SpendLedger = (_class = class {
         denom,
         totalScaled: scaled.toString(),
         totalFormatted: _chunk6XTNI2OQcjs.formatUnits.call(void 0, scaled, DENOM_PRECISION),
-        count: this.records.filter((r) => _optionalChain([r, 'access', _45 => _45.denom, 'optionalAccess', _46 => _46.toUpperCase, 'call', _47 => _47()]) === denom).length
+        count: this.records.filter((r) => _optionalChain([r, 'access', _50 => _50.denom, 'optionalAccess', _51 => _51.toUpperCase, 'call', _52 => _52()]) === denom).length
       })),
       records: [...this.records]
     };
@@ -3287,8 +3347,8 @@ var PipRailClient = (_class2 = class {
   // The verifiable receipt from the most recent settled fetch (null if the server emitted
   // none). Captured pure (no chain read) and surfaced via lastReceipt(); the resource URL is
   // stamped from the URL this client actually fetched (authoritative over the gate's default).
-  __init6() {this.lastReceiptValue = null}
-  constructor(opts) {;_class2.prototype.__init6.call(this);
+  __init8() {this.lastReceiptValue = null}
+  constructor(opts) {;_class2.prototype.__init8.call(this);
     this.opts = opts;
     this.maxRetries = Math.max(1, _nullishCoalesce(opts.maxPaymentRetries, () => ( 3)));
     this.retryTimeoutMs = _nullishCoalesce(opts.retryTimeoutMs, () => ( 3e4));
@@ -3303,6 +3363,32 @@ var PipRailClient = (_class2 = class {
     this.assertPolicyTimeOptions(opts.policy);
     this.assertPolicySpendControls(opts.policy);
     this.assertModeIsHonest(opts);
+    this.sealAuthority();
+  }
+  /**
+   * Pin the three authority accessors to THIS instance, non-writable and non-configurable.
+   *
+   * `paymentTools()` decides which tools a model is handed by calling `canAgentSell()` /
+   * `canAgentSwap()`, which read `mode()`. Those were plain prototype methods, so any code
+   * holding the client could reassign one — `client.mode = () => 'sovereign'` turned a
+   * budgeted client's eight tools into sovereign's fourteen.
+   *
+   * A MODEL could never do that (it sends JSON tool arguments; it does not hold the object),
+   * so this is not a path a model can walk. It is defence in depth for the case where a
+   * client passes through code that is not the operator's own: an agent framework, a plugin,
+   * some middleware that wraps or proxies objects. Authority is set once, by whoever
+   * provisioned the key, and nothing downstream gets to revise it.
+   */
+  sealAuthority() {
+    const mode = _nullishCoalesce(this.opts.mode, () => ( _chunkMZXVXC3Ccjs.DEFAULT_AGENT_MODE));
+    const sovereign = mode === "sovereign";
+    for (const [name, fn] of [
+      ["mode", () => mode],
+      ["canAgentSell", () => sovereign],
+      ["canAgentSwap", () => sovereign]
+    ]) {
+      Object.defineProperty(this, name, { value: fn, writable: false, configurable: false, enumerable: false });
+    }
   }
   /**
    * Fail LOUDLY at construction on a malformed amount cap — a security boundary
@@ -3432,7 +3518,7 @@ var PipRailClient = (_class2 = class {
   safeEmit(event) {
     try {
       this.onEvent(event);
-    } catch (e29) {
+    } catch (e30) {
     }
   }
   /**
@@ -3445,7 +3531,7 @@ var PipRailClient = (_class2 = class {
     try {
       const parsed = _chunk6ZRAIQXFcjs.parseReceiptExtension.call(void 0, response);
       this.lastReceiptValue = parsed ? { ...parsed, resource: { url } } : null;
-    } catch (e30) {
+    } catch (e31) {
       this.lastReceiptValue = null;
     }
   }
@@ -3471,17 +3557,17 @@ var PipRailClient = (_class2 = class {
    * {@link ReceiptVerification}).
    */
   static async verifyReceipt(receipt, opts) {
-    const r = _optionalChain([receipt, 'optionalAccess', _48 => _48.receipt]);
+    const r = _optionalChain([receipt, 'optionalAccess', _53 => _53.receipt]);
     if (!r || typeof r !== "object") {
       return { ok: false, onChain: { payTo: "", asset: "", amount: "", payer: "" }, matchesClaims: false, ageSeconds: 0, error: "tx_not_found" };
     }
     const claimed = { payTo: _nullishCoalesce(r.payTo, () => ( "")), asset: _nullishCoalesce(r.asset, () => ( "")), amount: _nullishCoalesce(r.amount, () => ( "")), payer: _nullishCoalesce(r.payer, () => ( "")) };
     const ageSeconds = receiptAgeSeconds(r.verifiedAt);
     try {
-      const chain = chainSelectorForNetwork(r.network, _optionalChain([opts, 'optionalAccess', _49 => _49.rpcUrl]));
+      const chain = chainSelectorForNetwork(r.network, _optionalChain([opts, 'optionalAccess', _54 => _54.rpcUrl]));
       const net = await resolveNetwork2({
         chain,
-        ..._optionalChain([opts, 'optionalAccess', _50 => _50.rpcUrl]) ? { rpcUrl: opts.rpcUrl } : {}
+        ..._optionalChain([opts, 'optionalAccess', _55 => _55.rpcUrl]) ? { rpcUrl: opts.rpcUrl } : {}
       });
       const accept = {
         scheme: "onchain-proof",
@@ -3508,7 +3594,7 @@ var PipRailClient = (_class2 = class {
       const onChain = { payTo: oc.payTo, asset: oc.asset, amount: oc.amount, payer: oc.payer };
       const matchesClaims = sameAddress(oc.payer, r.payer);
       return { ok: true, onChain, matchesClaims, ageSeconds };
-    } catch (e31) {
+    } catch (e32) {
       return { ok: false, onChain: claimed, matchesClaims: false, ageSeconds, error: "tx_not_found" };
     }
   }
@@ -3528,7 +3614,7 @@ var PipRailClient = (_class2 = class {
    * no chain libs. The JWS format defers to R3 (`{ ok:false, reason:'jws-not-loaded' }`).
    */
   static async verifyAttestation(receipt) {
-    const att = _optionalChain([receipt, 'optionalAccess', _51 => _51.attestation]);
+    const att = _optionalChain([receipt, 'optionalAccess', _56 => _56.attestation]);
     if (!att || typeof att !== "object" || typeof att.signature !== "string") {
       return { ok: false, reason: "no-attestation" };
     }
@@ -3539,7 +3625,7 @@ var PipRailClient = (_class2 = class {
     if (!r || typeof r !== "object") return { ok: false, reason: "no-receipt" };
     const payload = _nullishCoalesce(att.payload, () => ( {}));
     const network = typeof payload.network === "string" ? payload.network : r.network;
-    const resourceUrl = typeof payload.resourceUrl === "string" ? payload.resourceUrl : _nullishCoalesce(_optionalChain([receipt, 'access', _52 => _52.resource, 'optionalAccess', _53 => _53.url]), () => ( ""));
+    const resourceUrl = typeof payload.resourceUrl === "string" ? payload.resourceUrl : _nullishCoalesce(_optionalChain([receipt, 'access', _57 => _57.resource, 'optionalAccess', _58 => _58.url]), () => ( ""));
     const payer = typeof payload.payer === "string" ? payload.payer : r.payer;
     const issuedAt = typeof payload.issuedAt === "number" ? payload.issuedAt : receiptIssuedAtSeconds(r.verifiedAt);
     const transaction = typeof payload.transaction === "string" ? payload.transaction : _nullishCoalesce(r.transaction, () => ( ""));
@@ -3554,7 +3640,7 @@ var PipRailClient = (_class2 = class {
         transaction,
         signature: att.signature
       });
-    } catch (e32) {
+    } catch (e33) {
       return { ok: false, reason: "verify-failed" };
     }
   }
@@ -3585,7 +3671,7 @@ var PipRailClient = (_class2 = class {
    * as-is) or a plain object (serialised as JSON).
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _54 => _54.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _59 => _59.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -3616,7 +3702,7 @@ var PipRailClient = (_class2 = class {
    * "0.05 USDC on Base, within budget → pay it." No funds move.
    */
   async quote(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _55 => _55.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _60 => _60.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const { quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
     return quote;
@@ -3635,7 +3721,7 @@ var PipRailClient = (_class2 = class {
    * on Tron, where a USD₮ transfer can cost real TRX.
    */
   async estimateCost(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _56 => _56.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _61 => _61.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     try {
       const { net, accept, quote } = await this.resolveChallenge(url, res, this.resolveSchemes());
@@ -3672,7 +3758,7 @@ var PipRailClient = (_class2 = class {
         "mode: 'supervised' needs an `onBeforePay` hook \u2014 it is the only thing that can pause a payment for a human, so without it this client would pay without asking anyone, which is exactly what 'supervised' promises not to do. Add onBeforePay, or use 'budgeted' if the policy is meant to be the consent. (@piprail/mcp wires this for you from PIPRAIL_MODE.)"
       );
     }
-    if (mode === "sovereign" && _optionalChain([opts, 'access', _57 => _57.swapPolicy, 'optionalAccess', _58 => _58.maxPerSwap]) === void 0) {
+    if (mode === "sovereign" && _optionalChain([opts, 'access', _62 => _62.swapPolicy, 'optionalAccess', _63 => _63.maxPerSwap]) === void 0) {
       throw new TypeError(
         "mode: 'sovereign' needs `swapPolicy.maxPerSwap` \u2014 it hands a model the swap tools, and your payment caps do NOT bound a swap (they count payments; a swap is not one), so without a ceiling nothing limits what one swap may spend. Set a ceiling, e.g. swapPolicy: { maxPerSwap: '25.00' }. Selling needs no ceiling: it takes money rather than spending it."
       );
@@ -3741,7 +3827,7 @@ var PipRailClient = (_class2 = class {
         asset = t.asset;
         decimals = t.decimals;
         resolvedSymbol = t.symbol;
-      } catch (e33) {
+      } catch (e34) {
         out.push({ symbol, asset: null, decimals: null, known: false, amount: null, amountFormatted: null });
         continue;
       }
@@ -3802,8 +3888,8 @@ var PipRailClient = (_class2 = class {
     return {
       session: {
         start,
-        expiresAt: _optionalChain([view, 'optionalAccess', _59 => _59.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
-        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _60 => _60.secondsRemaining]), () => ( null))
+        expiresAt: _optionalChain([view, 'optionalAccess', _64 => _64.expiresAt]) != null ? new Date(view.expiresAt).toISOString() : null,
+        secondsRemaining: _nullishCoalesce(_optionalChain([view, 'optionalAccess', _65 => _65.secondsRemaining]), () => ( null))
       },
       byAsset: this.remaining(),
       byDenom: this.denomRemaining(),
@@ -3818,7 +3904,7 @@ var PipRailClient = (_class2 = class {
    * price-converted figure (tokens grouped as one unit, each 1:1).
    */
   denomRemaining() {
-    const caps = _optionalChain([this, 'access', _61 => _61.opts, 'access', _62 => _62.policy, 'optionalAccess', _63 => _63.maxTotalPerDenom]);
+    const caps = _optionalChain([this, 'access', _66 => _66.opts, 'access', _67 => _67.policy, 'optionalAccess', _68 => _68.maxTotalPerDenom]);
     if (!caps) return [];
     return Object.entries(caps).map(([rawDenom, capStr]) => {
       const denom = rawDenom.toUpperCase();
@@ -3841,11 +3927,11 @@ var PipRailClient = (_class2 = class {
     const policy = this.opts.policy;
     const settled = this.ledger.count();
     const out = { settled };
-    if (_optionalChain([policy, 'optionalAccess', _64 => _64.maxPayments]) !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _69 => _69.maxPayments]) !== void 0) {
       out.lifetimeCap = policy.maxPayments;
       out.lifetimeRemaining = Math.max(0, policy.maxPayments - settled);
     }
-    if (_optionalChain([policy, 'optionalAccess', _65 => _65.maxPaymentsPerWindow]) !== void 0 && policy.windowSeconds !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _70 => _70.maxPaymentsPerWindow]) !== void 0 && policy.windowSeconds !== void 0) {
       const windowSettled = this.ledger.countSince(Date.now() - policy.windowSeconds * 1e3);
       out.windowCap = policy.maxPaymentsPerWindow;
       out.windowSettled = windowSettled;
@@ -3861,7 +3947,7 @@ var PipRailClient = (_class2 = class {
    * never throws, never sums across tokens (no price oracle). PROCESS-SCOPED.
    */
   remaining() {
-    const maxTotal = _optionalChain([this, 'access', _66 => _66.opts, 'access', _67 => _67.policy, 'optionalAccess', _68 => _68.maxTotal]);
+    const maxTotal = _optionalChain([this, 'access', _71 => _71.opts, 'access', _72 => _72.policy, 'optionalAccess', _73 => _73.maxTotal]);
     return this.ledger.assetBuckets().map((b) => {
       const base2 = {
         network: b.network,
@@ -3913,7 +3999,7 @@ var PipRailClient = (_class2 = class {
    * the plan yourself. No funds move.
    */
   async planPayment(url, init) {
-    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _69 => _69.method]), () => ( "GET")) });
+    const res = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), method: _nullishCoalesce(_optionalChain([init, 'optionalAccess', _74 => _74.method]), () => ( "GET")) });
     if (res.status !== 402) return null;
     const challenge = await _chunk6ZRAIQXFcjs.parseChallenge.call(void 0, res);
     if (!challenge) {
@@ -3960,7 +4046,7 @@ var PipRailClient = (_class2 = class {
   async quoteSwap(req) {
     const slippageBps = _chunkMZXVXC3Ccjs.resolveSlippageBps.call(void 0, req.slippageBps);
     const sp = this.opts.swapPolicy;
-    if (_optionalChain([sp, 'optionalAccess', _70 => _70.maxSlippageBps]) !== void 0 && slippageBps > sp.maxSlippageBps) {
+    if (_optionalChain([sp, 'optionalAccess', _75 => _75.maxSlippageBps]) !== void 0 && slippageBps > sp.maxSlippageBps) {
       throw new (0, _chunk6XTNI2OQcjs.PaymentDeclinedError)(
         `slippageBps ${slippageBps} exceeds this agent's swapPolicy.maxSlippageBps of ${sp.maxSlippageBps}.`,
         { reasonCode: "POLICY" }
@@ -3975,12 +4061,12 @@ var PipRailClient = (_class2 = class {
       from = net.resolveToken(req.from);
       to = net.resolveToken(req.to);
       wantAmount = _chunk6XTNI2OQcjs.parseUnits.call(void 0, req.wantAmount, to.decimals);
-    } catch (e34) {
+    } catch (e35) {
       return null;
     }
     try {
       return await net.quoteSwap({ from, to, wantAmount, slippageBps, wallet });
-    } catch (e35) {
+    } catch (e36) {
       return null;
     }
   }
@@ -4018,7 +4104,7 @@ var PipRailClient = (_class2 = class {
       );
     }
     const sp = this.opts.swapPolicy;
-    if (_optionalChain([sp, 'optionalAccess', _71 => _71.maxPerSwap]) !== void 0) {
+    if (_optionalChain([sp, 'optionalAccess', _76 => _76.maxPerSwap]) !== void 0) {
       const cap = _chunk6XTNI2OQcjs.parseUnits.call(void 0, sp.maxPerSwap, quote.from.decimals);
       if (BigInt(quote.maxSpend) > cap) {
         throw new (0, _chunk6XTNI2OQcjs.PaymentDeclinedError)(
@@ -4027,7 +4113,7 @@ var PipRailClient = (_class2 = class {
         );
       }
     }
-    if (_optionalChain([sp, 'optionalAccess', _72 => _72.allowTo, 'optionalAccess', _73 => _73.length])) {
+    if (_optionalChain([sp, 'optionalAccess', _77 => _77.allowTo, 'optionalAccess', _78 => _78.length])) {
       const want = quote.to.symbol;
       if (!sp.allowTo.some((t) => t.toUpperCase() === want.toUpperCase())) {
         throw new (0, _chunk6XTNI2OQcjs.PaymentDeclinedError)(
@@ -4215,7 +4301,7 @@ var PipRailClient = (_class2 = class {
    * streams throw `NonReplayableBodyError`.
    */
   async fetch(url, init) {
-    const body = _optionalChain([init, 'optionalAccess', _74 => _74.body]);
+    const body = _optionalChain([init, 'optionalAccess', _79 => _79.body]);
     if (body !== void 0 && body !== null && !isReplayableBodyInit(body)) {
       throw new (0, _chunk6XTNI2OQcjs.NonReplayableBodyError)(
         "fetch(): init.body is not replayable. Pass a string, FormData, URLSearchParams, ArrayBuffer, or Blob \u2014 not a ReadableStream."
@@ -4223,7 +4309,7 @@ var PipRailClient = (_class2 = class {
     }
     const firstResponse = await fetch(url, init);
     if (firstResponse.status !== 402) return firstResponse;
-    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _75 => _75.schemes]));
+    const schemes = this.resolveSchemes(_optionalChain([init, 'optionalAccess', _80 => _80.schemes]));
     const resolved = await this.resolveChallenge(url, firstResponse, schemes);
     const { net, wallet, challenge } = resolved;
     if (!wallet) {
@@ -4233,7 +4319,7 @@ var PipRailClient = (_class2 = class {
     }
     let accept = resolved.accept;
     let quote = resolved.quote;
-    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _76 => _76.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
+    const autoRoute = _nullishCoalesce(_nullishCoalesce(_optionalChain([init, 'optionalAccess', _81 => _81.autoRoute]), () => ( this.opts.autoRoute)), () => ( false));
     if (autoRoute) {
       const plan = await this.planFromChallenge(net, wallet, challenge, url, schemes);
       if (!plan.best) {
@@ -4245,22 +4331,35 @@ var PipRailClient = (_class2 = class {
       quote = plan.best.quote;
     }
     this.safeEmit({ kind: "payment-required", challenge, accept });
-    await this.authorize(quote);
+    const reservation = await this.authorize(quote);
     if (accept.scheme === "upto") {
-      return this.payUptoRail(net, wallet, accept, url, init, quote);
+      try {
+        return await this.payUptoRail(net, wallet, accept, url, init, quote, reservation);
+      } finally {
+        this.ledger.release(reservation);
+      }
     }
     if (accept.scheme === "exact") {
-      return this.payExactRail(net, wallet, accept, url, init, quote, challenge.x402Version);
+      try {
+        return await this.payExactRail(net, wallet, accept, url, init, quote, challenge.x402Version, reservation);
+      } finally {
+        this.ledger.release(reservation);
+      }
     }
     if (accept.scheme !== "onchain-proof") {
+      this.ledger.release(reservation);
       throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
         `internal: unrouted accept scheme '${accept.scheme}' reached the onchain-proof pay path.`
       );
     }
-    const { ref, confirmed } = await this.payAndConfirm(net, wallet, accept);
-    const response = await this.retryWithProof(url, init, accept, ref, confirmed);
-    this.recordSpend(quote, ref);
-    return response;
+    try {
+      const { ref, confirmed } = await this.payAndConfirm(net, wallet, accept);
+      const response = await this.retryWithProof(url, init, accept, ref, confirmed);
+      this.recordSpend(quote, ref, void 0, reservation);
+      return response;
+    } finally {
+      this.ledger.release(reservation);
+    }
   }
   /* ------------------------- internals ------------------------- */
   /**
@@ -4375,7 +4474,7 @@ var PipRailClient = (_class2 = class {
       out.push(
         ...challenge.accepts.filter(
           (a) => a.scheme === "upto" && this.supportsNetwork(net, a.network) && typeof net.payUpto === "function" && a.asset !== "native" && // native is not upto-payable either (same reason as exact)
-          net.describeAsset(a.asset) != null && typeof _optionalChain([a, 'access', _77 => _77.extra, 'optionalAccess', _78 => _78.facilitatorAddress]) === "string" && a.extra.facilitatorAddress.length > 0 && Number.isInteger(a.maxTimeoutSeconds) && a.maxTimeoutSeconds > 0
+          net.describeAsset(a.asset) != null && typeof _optionalChain([a, 'access', _82 => _82.extra, 'optionalAccess', _83 => _83.facilitatorAddress]) === "string" && a.extra.facilitatorAddress.length > 0 && Number.isInteger(a.maxTimeoutSeconds) && a.maxTimeoutSeconds > 0
         )
       );
     }
@@ -4449,9 +4548,11 @@ var PipRailClient = (_class2 = class {
         shortfall.token = _chunk6XTNI2OQcjs.formatUnits.call(void 0, amount - bal.token, quote.decimals);
       }
     } else if (isNative) {
-      if (nativeKnown && bal.native < amount + fee) {
+      const spendable = _nullishCoalesce(bal.token, () => ( bal.native));
+      const spendableKnown = spendable != null;
+      if (spendableKnown && spendable < amount + fee) {
         blockers.push("INSUFFICIENT_TOKEN");
-        shortfall.token = _chunk6XTNI2OQcjs.formatUnits.call(void 0, amount + fee - bal.native, quote.decimals);
+        shortfall.token = _chunk6XTNI2OQcjs.formatUnits.call(void 0, amount + fee - spendable, quote.decimals);
       }
     } else {
       if (tokenKnown && bal.token < amount) {
@@ -4486,7 +4587,7 @@ var PipRailClient = (_class2 = class {
       // why a domain-only rail is payable and gasless. The default is PER FAMILY: a Solana rail
       // naming nothing means `svm`, never `eip3009`.
       ...accept.scheme === "exact" ? {
-        method: _optionalChain([accept, 'access', _79 => _79.extra, 'optionalAccess', _80 => _80.assetTransferMethod]) ? _chunk6ZRAIQXFcjs.exactTransferMethod.call(void 0, accept) : `${_chunk6ZRAIQXFcjs.exactTransferMethod.call(void 0, accept, net.family)} (default)`
+        method: _optionalChain([accept, 'access', _84 => _84.extra, 'optionalAccess', _85 => _85.assetTransferMethod]) ? _chunk6ZRAIQXFcjs.exactTransferMethod.call(void 0, accept) : `${_chunk6ZRAIQXFcjs.exactTransferMethod.call(void 0, accept, net.family)} (default)`
       } : {},
       ...accept.scheme === "upto" ? { method: "permit2-upto" } : {},
       state,
@@ -4516,7 +4617,7 @@ var PipRailClient = (_class2 = class {
     }
     const amountBase = BigInt(accept.amount);
     const described = net.describeAsset(accept.asset);
-    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _81 => _81.decimals]), () => ( _optionalChain([accept, 'access', _82 => _82.extra, 'optionalAccess', _83 => _83.decimals])));
+    const decimals = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _86 => _86.decimals]), () => ( _optionalChain([accept, 'access', _87 => _87.extra, 'optionalAccess', _88 => _88.decimals])));
     if (typeof decimals !== "number" || !Number.isInteger(decimals) || decimals < 0) {
       throw new (0, _chunk6XTNI2OQcjs.InvalidEnvelopeError)(
         `challenge for ${accept.asset} on ${accept.network} states no valid decimals and the SDK doesn't recognise the token \u2014 refusing to price it.`
@@ -4527,7 +4628,7 @@ var PipRailClient = (_class2 = class {
         `challenge for ${accept.asset} on ${accept.network} states ${decimals} decimals (> ${_chunk6XTNI2OQcjs.MAX_DECIMALS}) \u2014 refusing to price it (no real token is that deep).`
       );
     }
-    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _84 => _84.symbol]), () => ( _optionalChain([accept, 'access', _85 => _85.extra, 'optionalAccess', _86 => _86.symbol])));
+    const symbol = _nullishCoalesce(_optionalChain([described, 'optionalAccess', _89 => _89.symbol]), () => ( _optionalChain([accept, 'access', _90 => _90.extra, 'optionalAccess', _91 => _91.symbol])));
     const amountFormatted = _chunk6XTNI2OQcjs.formatUnits.call(void 0, amountBase, decimals);
     const intent = {
       host: hostOf(url),
@@ -4569,7 +4670,7 @@ var PipRailClient = (_class2 = class {
       this.ledger.totalFor(accept.network, accept.asset),
       ctx
     );
-    const serverSymbol = _optionalChain([accept, 'access', _87 => _87.extra, 'optionalAccess', _88 => _88.symbol]);
+    const serverSymbol = _optionalChain([accept, 'access', _92 => _92.extra, 'optionalAccess', _93 => _93.symbol]);
     const symbolMismatch = intent.recognized && !!serverSymbol && !!symbol && serverSymbol.toUpperCase() !== symbol.toUpperCase();
     return {
       url,
@@ -4603,18 +4704,28 @@ var PipRailClient = (_class2 = class {
         quote
       });
     }
+    const reservation = this.ledger.reserve(
+      quote.network,
+      quote.asset,
+      BigInt(quote.amount),
+      quote.decimals,
+      denomOf(quote.symbol, quote.asset, this.opts.policy)
+    );
     const hook = this.opts.onBeforePay;
-    if (!hook) return;
+    if (!hook) return reservation;
     let approved;
     try {
       approved = await hook(quote);
     } catch (err) {
+      this.ledger.release(reservation);
       this.refuse("onBeforePay threw \u2014 refusing to pay.", { reasonCode: "APPROVAL", quote, cause: err });
     }
     if (!approved) {
+      this.ledger.release(reservation);
       const reason = `onBeforePay declined ${quote.amountFormatted} ${_nullishCoalesce(quote.symbol, () => ( ""))}`.trimEnd() + ` on ${quote.network}.`;
       this.refuse(reason, { reasonCode: "APPROVAL", quote });
     }
+    return reservation;
   }
   /**
    * Refuse a payment BEFORE any send: emit BOTH the legacy `payment-failed` (so existing
@@ -4653,7 +4764,7 @@ var PipRailClient = (_class2 = class {
    *  spend (POL-1). So the cap-bearing `amountBase` is the MAX; the clamped actual is surfaced
    *  separately on `settledBase`/`settledFormatted` for transparency (it equals the receipt's
    *  amount). When absent (onchain-proof/exact) this is byte-identical to before. */
-  recordSpend(quote, ref, settledAmountBase) {
+  recordSpend(quote, ref, settledAmountBase, reservation) {
     const denom = denomOf(quote.symbol, quote.asset, this.opts.policy);
     const amountBase = quote.amount;
     const amountFormatted = quote.amountFormatted;
@@ -4666,7 +4777,7 @@ var PipRailClient = (_class2 = class {
         const shown = claimed < max ? claimed : max;
         settledBase = shown.toString();
         settledFormatted = _chunk6XTNI2OQcjs.formatUnits.call(void 0, shown, quote.decimals);
-      } catch (e36) {
+      } catch (e37) {
       }
     }
     const record = {
@@ -4684,11 +4795,12 @@ var PipRailClient = (_class2 = class {
       at: (/* @__PURE__ */ new Date()).toISOString()
     };
     this.ledger.record(record, quote.decimals, denom);
+    this.ledger.release(reservation);
     const budget = this.budget();
     if (this.opts.onSpend) {
       try {
         this.opts.onSpend(record, budget);
-      } catch (e37) {
+      } catch (e38) {
       }
     }
     this.emitThresholds(budget);
@@ -4701,7 +4813,7 @@ var PipRailClient = (_class2 = class {
    * `warnAtFraction` is set. Reads the just-computed {@link SessionBudget}; isolated (safeEmit).
    */
   emitThresholds(budget) {
-    const frac = _optionalChain([this, 'access', _89 => _89.opts, 'access', _90 => _90.policy, 'optionalAccess', _91 => _91.warnAtFraction]);
+    const frac = _optionalChain([this, 'access', _94 => _94.opts, 'access', _95 => _95.policy, 'optionalAccess', _96 => _96.warnAtFraction]);
     if (frac === void 0) return;
     const fire = (scope, label, spentFormatted, capFormatted, fraction) => {
       if (fraction < frac) return;
@@ -4725,7 +4837,7 @@ var PipRailClient = (_class2 = class {
       fire("denom", d.denom, d.spentFormatted, d.capFormatted, d.fraction);
     }
     const policy = this.opts.policy;
-    if (_optionalChain([policy, 'optionalAccess', _92 => _92.windowTotal]) !== void 0 && policy.windowSeconds !== void 0) {
+    if (_optionalChain([policy, 'optionalAccess', _97 => _97.windowTotal]) !== void 0 && policy.windowSeconds !== void 0) {
       const since = Date.now() - policy.windowSeconds * 1e3;
       for (const r of budget.byAsset) {
         const cap = _chunk6XTNI2OQcjs.floorUnits.call(void 0, policy.windowTotal, r.decimals);
@@ -4763,7 +4875,7 @@ var PipRailClient = (_class2 = class {
     const ref = await net.send(wallet, accept);
     this.safeEmit({ kind: "payment-broadcast", ref });
     try {
-      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _93 => _93.extra, 'optionalAccess', _94 => _94.minConfirmations]), () => ( 1)));
+      const { height } = await net.confirm(ref, _nullishCoalesce(_optionalChain([accept, 'access', _98 => _98.extra, 'optionalAccess', _99 => _99.minConfirmations]), () => ( 1)));
       this.safeEmit({
         kind: "payment-confirmed",
         ref,
@@ -4783,9 +4895,9 @@ var PipRailClient = (_class2 = class {
     const signature = {
       x402Version: 2,
       accepted: accept,
-      payload: { nonce: _optionalChain([accept, 'access', _95 => _95.extra, 'optionalAccess', _96 => _96.nonce]), txHash: ref }
+      payload: { nonce: _optionalChain([accept, 'access', _100 => _100.extra, 'optionalAccess', _101 => _101.nonce]), txHash: ref }
     };
-    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _97 => _97.headers]));
+    const headers = new Headers(_optionalChain([originalInit, 'optionalAccess', _102 => _102.headers]));
     headers.set(_chunk6ZRAIQXFcjs.HEADER_SIGNATURE, _chunk6ZRAIQXFcjs.buildSignatureHeader.call(void 0, signature));
     let lastResponse = null;
     let lastReason = null;
@@ -4800,7 +4912,7 @@ var PipRailClient = (_class2 = class {
         () => timeoutController.abort(),
         this.retryTimeoutMs
       );
-      const signal = _optionalChain([originalInit, 'optionalAccess', _98 => _98.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
+      const signal = _optionalChain([originalInit, 'optionalAccess', _103 => _103.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, originalInit.signal]) : timeoutController.signal;
       try {
         lastResponse = await fetch(url, {
           ..._nullishCoalesce(originalInit, () => ( {})),
@@ -4855,15 +4967,15 @@ var PipRailClient = (_class2 = class {
    *   • a 200 whose SettleResponse says `success:false` → a rejection, NEVER a spend;
    *   • the spend is recorded EXACTLY ONCE, on an affirmative settlement only.
    */
-  async payExactRail(net, wallet, accept, url, init, quote, x402Version = 2) {
+  async payExactRail(net, wallet, accept, url, init, quote, x402Version = 2, reservation) {
     if (!net.payExact) {
       throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
         `the ${net.family} family can't pay a standard 'exact' rail (supported on EVM, Solana, Algorand, Aptos + NEAR today).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _99 => _99.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _104 => _104.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payExact(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _100 => _100.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _105 => _105.headers]));
     if (x402Version === 1) {
       headers.set(
         _chunk6ZRAIQXFcjs.HEADER_SIGNATURE_V1,
@@ -4891,12 +5003,12 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _101 => _101.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _106 => _106.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _102 => _102.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _107 => _107.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
@@ -4918,8 +5030,8 @@ var PipRailClient = (_class2 = class {
         const receipt = _chunk6ZRAIQXFcjs.parseReceipt.call(void 0, response);
         this.captureReceipt(response, url);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _103 => _103.transaction]) || _optionalChain([receipt, 'optionalAccess', _104 => _104.transaction]) || `${net.family === "evm" ? "eip3009" : net.family}-nonce:${nonce}`;
-        this.recordSpend(quote, ref);
+        const ref = _optionalChain([settle, 'optionalAccess', _108 => _108.transaction]) || _optionalChain([receipt, 'optionalAccess', _109 => _109.transaction]) || `${net.family === "evm" ? "eip3009" : net.family}-nonce:${nonce}`;
+        this.recordSpend(quote, ref, void 0, reservation);
         return response;
       }
       if (response.status >= 500) {
@@ -4950,15 +5062,15 @@ var PipRailClient = (_class2 = class {
    * `settle.amount` FAILS SAFE to the MAX (over-counts, never under-counts). The buyer SIGNS, the
    * merchant self-settles — the buyer never broadcasts.
    */
-  async payUptoRail(net, wallet, accept, url, init, quote) {
+  async payUptoRail(net, wallet, accept, url, init, quote, reservation) {
     if (!net.payUpto) {
       throw new (0, _chunk6XTNI2OQcjs.UnsupportedSchemeError)(
         `the ${net.family} family can't pay a standard 'upto' rail (EVM-Permit2 only today).`
       );
     }
-    throwIfAborted(_optionalChain([init, 'optionalAccess', _105 => _105.signal]));
+    throwIfAborted(_optionalChain([init, 'optionalAccess', _110 => _110.signal]));
     const { payload, accepted, payerFrom, nonce } = await net.payUpto(wallet, accept);
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _106 => _106.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _111 => _111.headers]));
     headers.set(_chunk6ZRAIQXFcjs.HEADER_SIGNATURE, _chunk6ZRAIQXFcjs.buildUptoSignatureHeader.call(void 0, { accepted, payload }));
     const rejectDefinitive = (why2) => {
       this.safeEmit({ kind: "payment-failed", reason: `upto: facilitator rejected nonce=${nonce} (${why2})`, code: why2 });
@@ -4975,12 +5087,12 @@ var PipRailClient = (_class2 = class {
         if (Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, Math.min(2e3, 400 * 2 ** (attempt - 1))));
       }
-      throwIfAborted(_optionalChain([init, 'optionalAccess', _107 => _107.signal]));
+      throwIfAborted(_optionalChain([init, 'optionalAccess', _112 => _112.signal]));
       const budget = Math.min(this.retryTimeoutMs, deadline - Date.now());
       if (budget <= 0) break;
       const timeoutController = new AbortController();
       const timeoutId = setTimeout(() => timeoutController.abort(), budget);
-      const signal = _optionalChain([init, 'optionalAccess', _108 => _108.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
+      const signal = _optionalChain([init, 'optionalAccess', _113 => _113.signal]) && typeof AbortSignal.any === "function" ? AbortSignal.any([timeoutController.signal, init.signal]) : timeoutController.signal;
       let response;
       try {
         response = await fetch(url, { ..._nullishCoalesce(init, () => ( {})), headers, signal });
@@ -5002,9 +5114,9 @@ var PipRailClient = (_class2 = class {
         const receipt = _chunk6ZRAIQXFcjs.parseReceipt.call(void 0, response);
         this.captureReceipt(response, url);
         this.safeEmit({ kind: "payment-settled", receipt, ...settle ? { settle } : {} });
-        const ref = _optionalChain([settle, 'optionalAccess', _109 => _109.transaction]) || _optionalChain([receipt, 'optionalAccess', _110 => _110.transaction]) || `upto-nonce:${nonce}`;
-        const settledAmount = _nullishCoalesce(_optionalChain([settle, 'optionalAccess', _111 => _111.amount]), () => ( _optionalChain([receipt, 'optionalAccess', _112 => _112.amount])));
-        this.recordSpend(quote, ref, settledAmount);
+        const ref = _optionalChain([settle, 'optionalAccess', _114 => _114.transaction]) || _optionalChain([receipt, 'optionalAccess', _115 => _115.transaction]) || `upto-nonce:${nonce}`;
+        const settledAmount = _nullishCoalesce(_optionalChain([settle, 'optionalAccess', _116 => _116.amount]), () => ( _optionalChain([receipt, 'optionalAccess', _117 => _117.amount])));
+        this.recordSpend(quote, ref, settledAmount, reservation);
         return response;
       }
       if (response.status >= 500) {
@@ -5028,14 +5140,14 @@ var PipRailClient = (_class2 = class {
   }
 }, _class2);
 function throwIfAborted(signal) {
-  if (_optionalChain([signal, 'optionalAccess', _113 => _113.aborted])) {
+  if (_optionalChain([signal, 'optionalAccess', _118 => _118.aborted])) {
     throw _nullishCoalesce(signal.reason, () => ( new DOMException("This operation was aborted.", "AbortError")));
   }
 }
 function safeBig(s) {
   try {
     return BigInt(s);
-  } catch (e38) {
+  } catch (e39) {
     return 0n;
   }
 }
@@ -5098,10 +5210,10 @@ function buildFundingHint(options, chainLabel) {
     return `Couldn't fully read your wallet on ${chainLabel} (RPC throttled) \u2014 retry; you may already be able to pay ${target.quote.amountFormatted} ${sym}.`;
   }
   const parts = [];
-  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _114 => _114.shortfall, 'optionalAccess', _115 => _115.token])) {
+  if (target.blockers.includes("INSUFFICIENT_TOKEN") && _optionalChain([target, 'access', _119 => _119.shortfall, 'optionalAccess', _120 => _120.token])) {
     parts.push(`top up ${target.shortfall.token} ${sym}`);
   }
-  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _116 => _116.shortfall, 'optionalAccess', _117 => _117.native])) {
+  if (target.blockers.includes("INSUFFICIENT_GAS") && _optionalChain([target, 'access', _121 => _121.shortfall, 'optionalAccess', _122 => _122.native])) {
     parts.push(`add ~${target.shortfall.native} ${target.cost.feeSymbol} for gas`);
   }
   return parts.length ? `Can't settle on ${chainLabel}: ${parts.join(" and ")} (to pay ${target.quote.amountFormatted} ${sym}).` : `Can't settle on ${chainLabel} for ${target.quote.amountFormatted} ${sym}.`;
@@ -5115,7 +5227,7 @@ async function planAcross(clients, url, init) {
   const status = best ? "ready" : options.some((o) => o.state === "unknown") ? "unknown" : "blocked";
   return {
     url,
-    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _118 => _118.accept, 'access', _119 => _119.network]), () => ( live[0].network)),
+    network: _nullishCoalesce(_optionalChain([best, 'optionalAccess', _123 => _123.accept, 'access', _124 => _124.network]), () => ( live[0].network)),
     status,
     payable: best !== null,
     best,
@@ -5163,7 +5275,7 @@ function reasonCodeForPolicy(code) {
 function hostOf(url) {
   try {
     return new URL(url).hostname;
-  } catch (e39) {
+  } catch (e40) {
     return url;
   }
 }
@@ -5180,8 +5292,8 @@ function isReplayableBodyInit(value) {
 async function readInvalidReason(response) {
   try {
     const body = await response.clone().json();
-    const ext = _optionalChain([body, 'optionalAccess', _120 => _120.extensions]);
-    const piprail = _optionalChain([ext, 'optionalAccess', _121 => _121.piprail]);
+    const ext = _optionalChain([body, 'optionalAccess', _125 => _125.extensions]);
+    const piprail = _optionalChain([ext, 'optionalAccess', _126 => _126.piprail]);
     if (piprail && typeof piprail.code === "string") {
       return {
         error: piprail.code,
@@ -5200,10 +5312,10 @@ async function readInvalidReason(response) {
         detail: typeof body.invalidMessage === "string" ? body.invalidMessage : ""
       };
     }
-  } catch (e40) {
+  } catch (e41) {
   }
   const settle = _chunk6ZRAIQXFcjs.parseSettleResponse.call(void 0, response);
-  if (_optionalChain([settle, 'optionalAccess', _122 => _122.errorReason])) return { error: settle.errorReason, detail: "" };
+  if (_optionalChain([settle, 'optionalAccess', _127 => _127.errorReason])) return { error: settle.errorReason, detail: "" };
   return null;
 }
 var EVM_PRESET_FOR_CHAINID = {
@@ -5301,7 +5413,7 @@ var MultiChainPayer = class _MultiChainPayer {
         ledger,
         ...opts.policy ? { policy: opts.policy } : {},
         ...opts.schemes ? { schemes: opts.schemes } : {},
-        ..._optionalChain([opts, 'access', _123 => _123.rpcUrls, 'optionalAccess', _124 => _124[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
+        ..._optionalChain([opts, 'access', _128 => _128.rpcUrls, 'optionalAccess', _129 => _129[chain]]) ? { rpcUrl: opts.rpcUrls[chain] } : {},
         ...opts.onBeforePay ? { onBeforePay: opts.onBeforePay } : {},
         ...opts.onEvent ? { onEvent: opts.onEvent } : {},
         ...opts.maxPaymentRetries != null ? { maxPaymentRetries: opts.maxPaymentRetries } : {},
@@ -5359,7 +5471,7 @@ var MultiChainPayer = class _MultiChainPayer {
    * {@link PipRailClient.post}.
    */
   post(url, body, init) {
-    const headers = new Headers(_optionalChain([init, 'optionalAccess', _125 => _125.headers]));
+    const headers = new Headers(_optionalChain([init, 'optionalAccess', _130 => _130.headers]));
     let payload;
     if (body === void 0 || body === null) {
       payload = void 0;
@@ -5503,7 +5615,7 @@ var MultiChainPayer = class _MultiChainPayer {
       try {
         return await c.swap(quote);
       } catch (err) {
-        if (err instanceof _chunk6XTNI2OQcjs.WrongChainError || _optionalChain([err, 'optionalAccess', _126 => _126.name]) === "UnsupportedNetworkError") {
+        if (err instanceof _chunk6XTNI2OQcjs.WrongChainError || _optionalChain([err, 'optionalAccess', _131 => _131.name]) === "UnsupportedNetworkError") {
           firstRefusal ??= err;
           continue;
         }
@@ -5574,14 +5686,14 @@ function buildSelfDescription(input) {
 }
 function buildEndpointInfo(input) {
   const d = input.descriptor;
-  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _127 => _127.summary]), () => ( input.description));
-  const hasInput = _optionalChain([d, 'optionalAccess', _128 => _128.queryParams]) && Object.keys(d.queryParams).length > 0;
+  const summary = _nullishCoalesce(_optionalChain([d, 'optionalAccess', _132 => _132.summary]), () => ( input.description));
+  const hasInput = _optionalChain([d, 'optionalAccess', _133 => _133.queryParams]) && Object.keys(d.queryParams).length > 0;
   const endpoint = {
     ...summary ? { summary } : {},
-    ..._optionalChain([d, 'optionalAccess', _129 => _129.method]) ? { method: d.method.toUpperCase() } : {},
+    ..._optionalChain([d, 'optionalAccess', _134 => _134.method]) ? { method: d.method.toUpperCase() } : {},
     ...input.mimeType ? { mimeType: input.mimeType } : {},
     ...hasInput ? { input: d.queryParams } : {},
-    ..._optionalChain([d, 'optionalAccess', _130 => _130.output]) ? { output: d.output } : {}
+    ..._optionalChain([d, 'optionalAccess', _135 => _135.output]) ? { output: d.output } : {}
   };
   return Object.keys(endpoint).length > 0 ? endpoint : void 0;
 }
@@ -5632,16 +5744,16 @@ function formatSpendReport(summary) {
 function describeChallenge(challenge) {
   const generic = `${BRAND.name} x402 payment endpoint. Pay with @piprail/sdk (${BRAND.sdkInstall}). Docs: ${BRAND.home}.`;
   try {
-    const accepts = Array.isArray(_optionalChain([challenge, 'optionalAccess', _131 => _131.accepts])) ? challenge.accepts : [];
+    const accepts = Array.isArray(_optionalChain([challenge, 'optionalAccess', _136 => _136.accepts])) ? challenge.accepts : [];
     const first = accepts[0];
     if (!first) return generic;
     const extra = _nullishCoalesce(first.extra, () => ( {}));
     const amount = _nullishCoalesce(extra.amountFormatted, () => ( first.amount));
     const token = _nullishCoalesce(extra.symbol, () => ( first.asset));
-    const hasExact = accepts.some((a) => _optionalChain([a, 'optionalAccess', _132 => _132.scheme]) === "exact");
+    const hasExact = accepts.some((a) => _optionalChain([a, 'optionalAccess', _137 => _137.scheme]) === "exact");
     const standard = hasExact ? "; or any standard x402 client (an exact rail is offered)" : "";
     return `${BRAND.name} x402 payment endpoint \u2014 pay ${amount} ${token} on ${first.network} to ${first.payTo}. Programmatic: ${BRAND.sdkInstall} then client.fetch(url)${standard}. Docs: ${BRAND.home}.`;
-  } catch (e41) {
+  } catch (e42) {
     return generic;
   }
 }
@@ -5884,12 +5996,12 @@ function buildBazaarExtension(descriptor = {}) {
 function pathOf(url) {
   try {
     return new URL(url).pathname || "/";
-  } catch (e42) {
+  } catch (e43) {
     return url.startsWith("/") ? url : `/${url}`;
   }
 }
 function buildOpenApi(input) {
-  assertResourceList(_optionalChain([input, 'optionalAccess', _133 => _133.resources]), "buildOpenApi");
+  assertResourceList(_optionalChain([input, 'optionalAccess', _138 => _138.resources]), "buildOpenApi");
   const paths = {};
   for (const r of input.resources) {
     const path = pathOf(r.url);
@@ -5919,7 +6031,7 @@ function buildOpenApi(input) {
   };
 }
 function buildWellKnownX402(input) {
-  assertResourceList(_optionalChain([input, 'optionalAccess', _134 => _134.resources]), "buildWellKnownX402");
+  assertResourceList(_optionalChain([input, 'optionalAccess', _139 => _139.resources]), "buildWellKnownX402");
   return {
     version: 1,
     resources: input.resources.map((r) => r.url),
@@ -5939,7 +6051,7 @@ function assertResourceList(resources, fn) {
   });
 }
 function buildWellKnownX402Manifest(input) {
-  assertResourceList(_optionalChain([input, 'optionalAccess', _135 => _135.resources]), "buildWellKnownX402Manifest");
+  assertResourceList(_optionalChain([input, 'optionalAccess', _140 => _140.resources]), "buildWellKnownX402Manifest");
   const lastUpdated = typeof input.lastUpdated === "number" && Number.isFinite(input.lastUpdated) ? input.lastUpdated : Math.floor(Date.now() / 1e3);
   return {
     x402Version: 2,
@@ -6018,7 +6130,7 @@ function renderLandingPage(sd) {
 }
 
 // src/facilitator.ts
-async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
+async function fetchFacilitatorFeePayer(url, network, timeoutMs = 15e3) {
   const base2 = url.replace(/\/+$/, "");
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), timeoutMs);
@@ -6026,28 +6138,28 @@ async function fetchFacilitatorFeePayer(url, network, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return void 0;
     const body = await res.json();
-    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _136 => _136.kinds])) ? body.kinds : [];
+    const kinds = Array.isArray(_optionalChain([body, 'optionalAccess', _141 => _141.kinds])) ? body.kinds : [];
     const want = _chunkMZAJQYM3cjs.normalizeNetwork.call(void 0, network);
-    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _137 => _137.scheme]) === "exact" && _chunkMZAJQYM3cjs.normalizeNetwork.call(void 0, String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _138 => _138.network]), () => ( "")))) === want);
-    const fp = _optionalChain([kind, 'optionalAccess', _139 => _139.extra, 'optionalAccess', _140 => _140.feePayer]);
+    const kind = kinds.find((k) => _optionalChain([k, 'optionalAccess', _142 => _142.scheme]) === "exact" && _chunkMZAJQYM3cjs.normalizeNetwork.call(void 0, String(_nullishCoalesce(_optionalChain([k, 'optionalAccess', _143 => _143.network]), () => ( "")))) === want);
+    const fp = _optionalChain([kind, 'optionalAccess', _144 => _144.extra, 'optionalAccess', _145 => _145.feePayer]);
     return typeof fp === "string" ? fp : void 0;
-  } catch (e43) {
+  } catch (e44) {
     return void 0;
   } finally {
     clearTimeout(timer);
   }
 }
 function parseFacilitatorSupported(body) {
-  const kinds = _optionalChain([body, 'optionalAccess', _141 => _141.kinds]);
+  const kinds = _optionalChain([body, 'optionalAccess', _146 => _146.kinds]);
   if (!Array.isArray(kinds)) return [];
   const out = [];
   for (const k of kinds) {
     if (!k || typeof k !== "object") continue;
     const o = k;
     if (typeof o.scheme !== "string" || typeof o.network !== "string") continue;
-    const fp = _optionalChain([o, 'access', _142 => _142.extra, 'optionalAccess', _143 => _143.feePayer]);
+    const fp = _optionalChain([o, 'access', _147 => _147.extra, 'optionalAccess', _148 => _148.feePayer]);
     const ver = o.x402Version;
-    const method = _optionalChain([o, 'access', _144 => _144.extra, 'optionalAccess', _145 => _145.assetTransferMethod]);
+    const method = _optionalChain([o, 'access', _149 => _149.extra, 'optionalAccess', _150 => _150.assetTransferMethod]);
     out.push({
       scheme: o.scheme,
       network: o.network,
@@ -6058,7 +6170,7 @@ function parseFacilitatorSupported(body) {
   }
   return out;
 }
-async function facilitatorCoverage(url, timeoutMs = 8e3) {
+async function facilitatorCoverage(url, timeoutMs = 15e3) {
   const base2 = url.replace(/\/+$/, "");
   const ctrl = new AbortController();
   const timer = setTimeout(() => ctrl.abort(), timeoutMs);
@@ -6066,7 +6178,7 @@ async function facilitatorCoverage(url, timeoutMs = 8e3) {
     const res = await fetch(`${base2}/supported`, { signal: ctrl.signal });
     if (!res.ok) return [];
     return parseFacilitatorSupported(await res.json());
-  } catch (e44) {
+  } catch (e45) {
     return [];
   } finally {
     clearTimeout(timer);
@@ -6095,7 +6207,7 @@ async function post(url, body, headers) {
   let json = null;
   try {
     json = await res.json();
-  } catch (e45) {
+  } catch (e46) {
   }
   return { status: res.status, json };
 }
@@ -6109,9 +6221,9 @@ async function settleViaFacilitator(input) {
     ...v2 ? {
       accepted: input.paymentRequirements,
       resource: {
-        url: _optionalChain([input, 'access', _146 => _146.resource, 'optionalAccess', _147 => _147.url]) || "https://piprail.com/x402/resource",
-        description: _optionalChain([input, 'access', _148 => _148.resource, 'optionalAccess', _149 => _149.description]) || "Paid resource",
-        mimeType: _optionalChain([input, 'access', _150 => _150.resource, 'optionalAccess', _151 => _151.mimeType]) || "application/json"
+        url: _optionalChain([input, 'access', _151 => _151.resource, 'optionalAccess', _152 => _152.url]) || "https://piprail.com/x402/resource",
+        description: _optionalChain([input, 'access', _153 => _153.resource, 'optionalAccess', _154 => _154.description]) || "Paid resource",
+        mimeType: _optionalChain([input, 'access', _155 => _155.resource, 'optionalAccess', _156 => _156.mimeType]) || "application/json"
       }
     } : {}
   };
@@ -6558,7 +6670,7 @@ function createPaymentGate(options) {
     attestWarned = true;
     try {
       console.warn(`[piprail] receipts.attest ${reason}; emitting an unsigned Tier-1 receipt instead.`);
-    } catch (e46) {
+    } catch (e47) {
     }
   }
   let resolved;
@@ -6580,6 +6692,11 @@ function createPaymentGate(options) {
           net.assertValidPayTo(payTo);
           const { asset, decimals, symbol } = net.resolveToken(a.token);
           const amountBase = _chunk6XTNI2OQcjs.parseUnits.call(void 0, a.amount, decimals);
+          if (amountBase <= 0n) {
+            throw new (0, _chunk6XTNI2OQcjs.InvalidConfigError)(
+              `requirePayment: amount must be greater than zero, got "${a.amount}" on ${net.network}. A gate that charges nothing gates nothing; omit the gate instead.`
+            );
+          }
           const spec = { net, asset, decimals, symbol, amountBase, amountFormatted: a.amount, payTo };
           if (exactOption) {
             const outcome = await resolveExactRail(net, asset);
@@ -6602,7 +6719,7 @@ function createPaymentGate(options) {
       if (exactOption && !specs.some((s) => s.exact)) {
         const why = exactSkips.length > 0 ? exactSkips.join(" ") : "The standard `exact` rail is EVM ERC-20 (EIP-3009 \u2014 USDC / EURC \u2014 or Permit2, e.g. Binance-Peg USDC on BNB) or a Solana SPL token (SVM) \u2014 NOT native coins, NOT families without a standard `exact` scheme.";
         if (exactOption.settle === "keyless") {
-          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _152 => _152.env, 'optionalAccess', _153 => _153.PIPRAIL_NO_HINTS])) {
+          if (typeof process === "undefined" || !_optionalChain([process, 'optionalAccess', _157 => _157.env, 'optionalAccess', _158 => _158.PIPRAIL_NO_HINTS])) {
             console.warn(
               `[piprail] exact: true \u2014 no offered chain has a gasless \`exact\` rail available, so this gate serves ONCHAIN-PROOF ONLY (buyers PAY GAS \u2014 the fallback when no facilitator can sponsor). ${why} To be gasless: pin \`exact: { settle: { facilitator } }\` or self-settle \`exact: { settle: 'self', relayer }\`. (Suppress with PIPRAIL_NO_HINTS=1.)`
             );
@@ -6630,7 +6747,7 @@ function createPaymentGate(options) {
           skipReason: `${net.network}: \`exact: true\` found no known keyless facilitator for this network. Pass \`exact: { settle: { facilitator } }\`, \`exact: { settle: 'self', relayer }\`, or see the coverage map (KNOWN_FACILITATORS / docs.piprail.com).`
         };
       }
-      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _154 => _154.env, 'optionalAccess', _155 => _155.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _156 => _156.env, 'optionalAccess', _157 => _157.PIPRAIL_NO_HINTS])) {
+      if (typeof process === "undefined" || _optionalChain([process, 'optionalAccess', _159 => _159.env, 'optionalAccess', _160 => _160.NODE_ENV]) !== "production" && !_optionalChain([process, 'optionalAccess', _161 => _161.env, 'optionalAccess', _162 => _162.PIPRAIL_NO_HINTS])) {
         console.warn(
           `[piprail] exact: keyless rail on ${net.network} auto-settles via ${picked.url} (zero-config; pin \`exact.settle.facilitator\` in production).`
         );
@@ -6698,6 +6815,11 @@ function createPaymentGate(options) {
       "requirePayment/createPaymentGate: `isUsed` and `markUsed` must be provided TOGETHER \u2014 a custom replay store needs both a read and a write. Supplying only " + (hasIsUsed ? "`isUsed`" : "`markUsed`") + " silently disables replay protection (double-spend). Provide both, or neither (the built-in in-memory store)."
     );
   }
+  if (typeof options.releaseUsed === "function" && !(hasIsUsed && hasMarkUsed)) {
+    throw new Error(
+      "requirePayment/createPaymentGate: `releaseUsed` needs `isUsed` + `markUsed` too \u2014 it releases a reservation a CUSTOM store made, so without one it would never fire. Provide all three, or none (the built-in store already releases on failure)."
+    );
+  }
   const hasCustomStore = hasIsUsed && hasMarkUsed;
   const localUsed = /* @__PURE__ */ new Map();
   const replayWindowMs = maxTimeoutSeconds * 1e3;
@@ -6707,23 +6829,35 @@ function createPaymentGate(options) {
       localUsed.delete(key);
     }
   }
+  const localKey = (ref) => ref.startsWith("pid:") ? ref : ref.toLowerCase();
   async function claimTx(ref) {
-    if (hasCustomStore) {
-      return options.isUsed ? Boolean(await options.isUsed(ref)) : false;
-    }
-    const key = ref.startsWith("pid:") ? ref : ref.toLowerCase();
+    const key = localKey(ref);
     const now = Date.now();
     pruneUsed(now);
     if (localUsed.has(key)) return true;
     localUsed.set(key, now + replayWindowMs);
+    if (hasCustomStore) {
+      try {
+        if (options.isUsed && await options.isUsed(ref)) return true;
+      } catch (err) {
+        localUsed.delete(key);
+        throw err;
+      }
+    }
     return false;
   }
   async function settleTx(ref, ok) {
-    if (hasCustomStore) {
-      if (ok && options.markUsed) await options.markUsed(ref);
+    if (!ok) {
+      localUsed.delete(localKey(ref));
+      if (hasCustomStore && options.releaseUsed) {
+        try {
+          await options.releaseUsed(ref);
+        } catch (e48) {
+        }
+      }
       return;
     }
-    if (!ok) localUsed.delete(ref.startsWith("pid:") ? ref : ref.toLowerCase());
+    if (hasCustomStore && options.markUsed) await options.markUsed(ref);
   }
   function buildAccept(s, nonce) {
     return {
@@ -6774,7 +6908,7 @@ function createPaymentGate(options) {
       extra: {
         assetTransferMethod: "permit2-upto",
         // facilitatorAddress comes from rail.extra; the spread below carries it (+ name/version).
-        facilitatorAddress: _nullishCoalesce(_optionalChain([rail, 'access', _158 => _158.extra, 'optionalAccess', _159 => _159.facilitatorAddress]), () => ( "")),
+        facilitatorAddress: _nullishCoalesce(_optionalChain([rail, 'access', _163 => _163.extra, 'optionalAccess', _164 => _164.facilitatorAddress]), () => ( "")),
         minConfirmations,
         decimals: s.decimals,
         amountFormatted: s.amountFormatted,
@@ -6809,7 +6943,7 @@ function createPaymentGate(options) {
       ...endpointInfo ? { endpoint: endpointInfo } : {},
       ...receiptsOn ? { verifiableReceipts: true } : {}
     });
-    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _160 => _160.extensions]), () => ( {}));
+    const rejectionExt = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _165 => _165.extensions]), () => ( {}));
     const rejectionPiprail = _nullishCoalesce(rejectionExt.piprail, () => ( {}));
     const bodyPiprail = { ..._nullishCoalesce(selfDescribe, () => ( {})), ...rejectionPiprail };
     const bodyExtensions = {
@@ -6831,7 +6965,7 @@ function createPaymentGate(options) {
         ...options.mimeType ? { mimeType: options.mimeType } : {}
       },
       accepts,
-      ..._optionalChain([opts, 'optionalAccess', _161 => _161.error]) ? { error: opts.error } : {},
+      ..._optionalChain([opts, 'optionalAccess', _166 => _166.error]) ? { error: opts.error } : {},
       ...Object.keys(bodyExtensions).length > 0 ? { extensions: bodyExtensions } : {}
     };
     const headerChallenge = {
@@ -6863,7 +6997,7 @@ function createPaymentGate(options) {
     let amountFormatted = receipt.amount;
     try {
       amountFormatted = _chunk6XTNI2OQcjs.formatUnits.call(void 0, BigInt(receipt.amount), spec.decimals);
-    } catch (e47) {
+    } catch (e49) {
     }
     return {
       ...receipt,
@@ -6877,7 +7011,7 @@ function createPaymentGate(options) {
     if (!options.onPaidError) return;
     try {
       options.onPaidError(error, receipt);
-    } catch (e48) {
+    } catch (e50) {
     }
   }
   function fireOnPaid(receipt) {
@@ -6917,7 +7051,7 @@ function createPaymentGate(options) {
         ...attestation ? { attestation } : {}
       });
       return { kind: "paid", receipt: stamped, receiptHeader: _chunk6ZRAIQXFcjs.buildReceiptHeader.call(void 0, stamped, extensions) };
-    } catch (e49) {
+    } catch (e51) {
       return { kind: "paid", receipt, receiptHeader: _chunk6ZRAIQXFcjs.buildReceiptHeader.call(void 0, receipt) };
     }
   }
@@ -6942,7 +7076,7 @@ function createPaymentGate(options) {
         // §5.3: the signed message carries the empty string for a suppressed tx, never omitted.
         transaction: receiptIncludeTxHash ? stamped.transaction : ""
       });
-    } catch (e50) {
+    } catch (e52) {
       warnAttestDegrade("signing failed");
       return void 0;
     }
@@ -6951,7 +7085,7 @@ function createPaymentGate(options) {
     if (!options.onFailedError) return;
     try {
       options.onFailedError(error, failure);
-    } catch (e51) {
+    } catch (e53) {
     }
   }
   function fireOnFailed(failure) {
@@ -7071,28 +7205,28 @@ function createPaymentGate(options) {
       nonce = [exact.payload.transaction, exact.payload.senderAuth].map((t) => {
         try {
           return Buffer.from(t, "base64").toString("base64");
-        } catch (e52) {
+        } catch (e54) {
           return t;
         }
       }).join("|");
     } else if ("transaction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.transaction, "base64").toString("base64");
-      } catch (e53) {
+      } catch (e55) {
         nonce = exact.payload.transaction;
       }
     } else if ("paymentGroup" in exact.payload) {
       nonce = exact.payload.paymentGroup.map((t) => {
         try {
           return Buffer.from(t, "base64").toString("base64");
-        } catch (e54) {
+        } catch (e56) {
           return t;
         }
       }).join("|");
     } else if ("signedDelegateAction" in exact.payload) {
       try {
         nonce = Buffer.from(exact.payload.signedDelegateAction, "base64").toString("base64");
-      } catch (e55) {
+      } catch (e57) {
         nonce = exact.payload.signedDelegateAction;
       }
     } else if ("signedTxBlob" in exact.payload) {
@@ -7114,9 +7248,9 @@ function createPaymentGate(options) {
       if (mode.kind === "self") {
         result = await spec.net.settleExactSelf({ relayer: mode.relayer, payload: exact.payload, accept });
       } else {
-        const ftMethod = _optionalChain([accept, 'access', _162 => _162.extra, 'optionalAccess', _163 => _163.assetTransferMethod]);
+        const ftMethod = _optionalChain([accept, 'access', _167 => _167.extra, 'optionalAccess', _168 => _168.assetTransferMethod]);
         const needsFeePayer = ftMethod === "svm" || ftMethod === "algorand" || ftMethod === "aptos" || ftMethod === "near";
-        if (needsFeePayer && !_optionalChain([accept, 'access', _164 => _164.extra, 'optionalAccess', _165 => _165.feePayer])) {
+        if (needsFeePayer && !_optionalChain([accept, 'access', _169 => _169.extra, 'optionalAccess', _170 => _170.feePayer])) {
           throw new (0, _chunk6XTNI2OQcjs.SettlementError)(
             `exact settle: the ${ftMethod} facilitator rail is missing extra.feePayer (the gas sponsor) \u2014 cannot settle.`
           );
@@ -7137,7 +7271,7 @@ function createPaymentGate(options) {
             amount: accept.amount,
             payTo: accept.payTo,
             maxTimeoutSeconds: accept.maxTimeoutSeconds,
-            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: _nullishCoalesce(_optionalChain([accept, 'access', _166 => _166.extra, 'optionalAccess', _167 => _167.name]), () => ( "")), version: _nullishCoalesce(_optionalChain([accept, 'access', _168 => _168.extra, 'optionalAccess', _169 => _169.version]), () => ( "")) }
+            extra: needsFeePayer ? { feePayer: accept.extra.feePayer } : { name: _nullishCoalesce(_optionalChain([accept, 'access', _171 => _171.extra, 'optionalAccess', _172 => _172.name]), () => ( "")), version: _nullishCoalesce(_optionalChain([accept, 'access', _173 => _173.extra, 'optionalAccess', _174 => _174.version]), () => ( "")) }
           },
           receipt: { network: accept.network, asset: accept.asset, payTo: accept.payTo, amount: accept.amount },
           // From the merchant's own config, never the client's echo — same rule as `accept`.
@@ -7180,7 +7314,7 @@ function createPaymentGate(options) {
       }
       if (/^\d+$/.test(s)) return BigInt(s);
       return _chunk6XTNI2OQcjs.floorUnits.call(void 0, s, decimals);
-    } catch (e56) {
+    } catch (e58) {
       return null;
     }
   }
@@ -7278,7 +7412,7 @@ function createPaymentGate(options) {
         [_chunk6ZRAIQXFcjs.EXT_PAYMENT_IDENTIFIER]: { info: { required: false, id } }
       };
       return { ...result, receiptHeader: _chunk6ZRAIQXFcjs.buildReceiptHeader.call(void 0, receiptOnly, merged) };
-    } catch (e57) {
+    } catch (e59) {
       return result;
     }
   }
@@ -7339,8 +7473,8 @@ function createPaymentGate(options) {
 }
 function requirePayment(options) {
   if (options.upto) {
-    throw new (_class3 = class extends _chunk6XTNI2OQcjs.PipRailError {constructor(...args2) { super(...args2); _class3.prototype.__init7.call(this); }
-      __init7() {this.code = "UNSUPPORTED_SCHEME"}
+    throw new (_class3 = class extends _chunk6XTNI2OQcjs.PipRailError {constructor(...args2) { super(...args2); _class3.prototype.__init9.call(this); }
+      __init9() {this.code = "UNSUPPORTED_SCHEME"}
     }, _class3)(
       "requirePayment: the 'upto' (metered) rail is unsupported through the Express middleware \u2014 it settles before the route handler serves, so metered usage is unknown at settle time. Call gate.verify() directly (createPaymentGate) and meter inside settleAmount; see docs/accepting-payments/upto-rail-seller.md."
     );
@@ -7394,15 +7528,15 @@ async function readBody(res) {
   if (!text) return null;
   try {
     return JSON.parse(text);
-  } catch (e58) {
+  } catch (e60) {
     return text;
   }
 }
 function canSwap(client) {
-  return _optionalChain([client, 'access', _170 => _170.canAgentSwap, 'optionalCall', _171 => _171()]) === true && typeof client.quoteSwap === "function";
+  return _optionalChain([client, 'access', _175 => _175.canAgentSwap, 'optionalCall', _176 => _176()]) === true && typeof client.quoteSwap === "function";
 }
 function canSell(client) {
-  return _optionalChain([client, 'access', _172 => _172.canAgentSell, 'optionalCall', _173 => _173()]) === true && typeof client.address === "function";
+  return _optionalChain([client, 'access', _177 => _177.canAgentSell, 'optionalCall', _178 => _178()]) === true && typeof client.address === "function";
 }
 function nonceIn(payload) {
   if (typeof payload !== "object" || payload === null) return void 0;
@@ -7410,9 +7544,15 @@ function nonceIn(payload) {
   const inner = p.payload;
   const fromPayload = inner && typeof inner.nonce === "string" ? inner.nonce : void 0;
   const accepted = p.accepted;
-  const fromAccept = typeof _optionalChain([accepted, 'optionalAccess', _174 => _174.extra, 'optionalAccess', _175 => _175.nonce]) === "string" ? accepted.extra.nonce : void 0;
+  const fromAccept = typeof _optionalChain([accepted, 'optionalAccess', _179 => _179.extra, 'optionalAccess', _180 => _180.nonce]) === "string" ? accepted.extra.nonce : void 0;
   return _nullishCoalesce(fromPayload, () => ( fromAccept));
 }
+function refIn(payload) {
+  if (typeof payload !== "object" || payload === null) return void 0;
+  const inner = payload.payload;
+  const ref = inner && typeof inner.txHash === "string" ? inner.txHash.trim() : void 0;
+  return ref ? ref.toLowerCase() : void 0;
+}
 function toToolError(err) {
   if (!(err instanceof _chunk6XTNI2OQcjs.PipRailError)) throw err;
   const out = {
@@ -7817,7 +7957,7 @@ function paymentTools(client) {
         invoke: async (args) => {
           const a = args;
           try {
-            const quote = await _optionalChain([client, 'access', _176 => _176.quoteSwap, 'optionalCall', _177 => _177({
+            const quote = await _optionalChain([client, 'access', _181 => _181.quoteSwap, 'optionalCall', _182 => _182({
               from: a.from,
               to: a.to,
               wantAmount: a.wantAmount,
@@ -7866,7 +8006,7 @@ function paymentTools(client) {
         invoke: async (args) => {
           const a = args;
           try {
-            const receipt = await _optionalChain([client, 'access', _178 => _178.swap, 'optionalCall', _179 => _179(a.quote)]);
+            const receipt = await _optionalChain([client, 'access', _183 => _183.swap, 'optionalCall', _184 => _184(a.quote)]);
             if (!receipt) return { ok: false, reason: "unsupported", explain: "This client cannot swap." };
             return {
               ok: true,
@@ -7935,7 +8075,7 @@ function paymentTools(client) {
           if (!description) return { ok: false, reason: "sell needs a `description` \u2014 it is what the buyer sees and what you owe them." };
           if (!price) return { ok: false, reason: "sell needs a `price`, human-readable, e.g. '2.50'." };
           const token = typeof args.token === "string" && args.token.trim() ? args.token.trim() : "USDC";
-          const chain = typeof args.chain === "string" && args.chain.trim() ? args.chain.trim() : _optionalChain([client, 'access', _180 => _180.chain, 'optionalCall', _181 => _181()]);
+          const chain = typeof args.chain === "string" && args.chain.trim() ? args.chain.trim() : _optionalChain([client, 'access', _185 => _185.chain, 'optionalCall', _186 => _186()]);
           if (chain === void 0) {
             return { ok: false, reason: "sell needs a `chain` \u2014 this wallet cannot report one of its own." };
           }
@@ -7953,16 +8093,12 @@ function paymentTools(client) {
           const railSchemes = (t) => [
             ...new Set((_nullishCoalesce(t.rails, () => ( []))).flatMap((r) => [..._nullishCoalesce(r.schemes, () => ( []))]))
           ];
-          const shared = {
-            isUsed: (ref) => spentProofs.has(ref),
-            markUsed: (ref) => void spentProofs.add(ref)
-          };
-          let gate = createPaymentGate({ ...base3, ...shared, exact: true });
+          let gate = createPaymentGate({ ...base3, exact: true });
           let check = await gate.selfTest();
           const warnings = [];
           if (!check.ok || !railSchemes(check).includes("exact")) {
             const why = _nullishCoalesce(check.error, () => ( "it did not resolve on this RPC"));
-            gate = createPaymentGate({ ...base3, ...shared });
+            gate = createPaymentGate({ ...base3 });
             check = await gate.selfTest();
             warnings.push(
               `This offer carries onchain-proof ONLY, so a standard x402 agent-buyer cannot pay it. A PipRail buyer (piprail_pay_request) and a human still can. The gasless exact rail was dropped because ${why} Two things cause this: the token or family has no exact scheme (a native coin never does, so price in USDC), or the token domain read failed on a busy public RPC, which is transient. Retrying on a dedicated rpcUrl is worth one attempt before you settle for this.`
@@ -7974,7 +8110,7 @@ function paymentTools(client) {
           for (const w of _nullishCoalesce(check.warnings, () => ( []))) warnings.push(String(w));
           const { challenge, requiredHeader } = await gate.challenge(resource);
           const schemes = railSchemes(check);
-          const nonce = _optionalChain([challenge, 'access', _182 => _182.accepts, 'access', _183 => _183.find, 'call', _184 => _184((a) => a.scheme === "onchain-proof"), 'optionalAccess', _185 => _185.extra, 'optionalAccess', _186 => _186.nonce]);
+          const nonce = _optionalChain([challenge, 'access', _187 => _187.accepts, 'access', _188 => _188.find, 'call', _189 => _189((a) => a.scheme === "onchain-proof"), 'optionalAccess', _190 => _190.extra, 'optionalAccess', _191 => _191.nonce]);
           const offer = {
             id,
             nonce: typeof nonce === "string" ? nonce : void 0,
@@ -8059,7 +8195,30 @@ function paymentTools(client) {
               next: "Do NOT deliver. Ask the buyer to pay THIS offer's challenge."
             };
           }
-          const result = asObject !== void 0 ? await offer.gate.verifyObject(asObject) : await offer.gate.verify(raw);
+          const proofRef = refIn(_nullishCoalesce(asObject, () => ( _chunk6ZRAIQXFcjs.decodeBase64Json.call(void 0, raw))));
+          let reservedHere;
+          if (proofRef) {
+            if (spentProofs.has(proofRef)) {
+              return {
+                ok: true,
+                paid: false,
+                offerId: offer.id,
+                reason: "this settlement was already collected \u2014 one payment settles exactly one offer.",
+                code: "tx_already_used",
+                next: "Do NOT deliver. Ask the buyer to pay THIS offer's challenge."
+              };
+            }
+            spentProofs.add(proofRef);
+            reservedHere = proofRef;
+          }
+          let result;
+          try {
+            result = asObject !== void 0 ? await offer.gate.verifyObject(asObject) : await offer.gate.verify(raw);
+          } catch (err) {
+            if (reservedHere) spentProofs.delete(reservedHere);
+            throw err;
+          }
+          if (result.kind !== "paid" && reservedHere) spentProofs.delete(reservedHere);
           if (result.kind === "paid") {
             const r = result.receipt;
             const entry = {
@@ -8191,20 +8350,20 @@ function paymentTools(client) {
 // src/classify.ts
 function classifyChallenge(challenge, opts) {
   try {
-    const accepts = Array.isArray(_optionalChain([challenge, 'optionalAccess', _187 => _187.accepts])) ? challenge.accepts : [];
-    const network = _optionalChain([opts, 'optionalAccess', _188 => _188.network]);
-    const schemes = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _189 => _189.schemes]), () => ( []));
+    const accepts = Array.isArray(_optionalChain([challenge, 'optionalAccess', _192 => _192.accepts])) ? challenge.accepts : [];
+    const network = _optionalChain([opts, 'optionalAccess', _193 => _193.network]);
+    const schemes = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _194 => _194.schemes]), () => ( []));
     const offeredSchemes = [
-      ...new Set(accepts.map((a) => _optionalChain([a, 'optionalAccess', _190 => _190.scheme])).filter((s) => s != null))
+      ...new Set(accepts.map((a) => _optionalChain([a, 'optionalAccess', _195 => _195.scheme])).filter((s) => s != null))
     ];
-    const offeredNetworks = [...new Set(accepts.map((a) => _optionalChain([a, 'optionalAccess', _191 => _191.network])).filter((n) => n != null))];
-    const onClientChain = accepts.some((a) => _optionalChain([a, 'optionalAccess', _192 => _192.network]) === network);
+    const offeredNetworks = [...new Set(accepts.map((a) => _optionalChain([a, 'optionalAccess', _196 => _196.network])).filter((n) => n != null))];
+    const onClientChain = accepts.some((a) => _optionalChain([a, 'optionalAccess', _197 => _197.network]) === network);
     const payableScheme = accepts.some(
-      (a) => _optionalChain([a, 'optionalAccess', _193 => _193.network]) === network && schemes.includes(_optionalChain([a, 'optionalAccess', _194 => _194.scheme]))
+      (a) => _optionalChain([a, 'optionalAccess', _198 => _198.network]) === network && schemes.includes(_optionalChain([a, 'optionalAccess', _199 => _199.scheme]))
     );
     const verdict = accepts.length === 0 ? "NO_RAIL" : payableScheme ? "PAYABLE_RAIL" : onClientChain ? "UNPAYABLE_SCHEME" : "WRONG_CHAIN";
     return { onClientChain, payableScheme, offeredSchemes, offeredNetworks, verdict };
-  } catch (e59) {
+  } catch (e61) {
     return {
       onClientChain: false,
       payableScheme: false,
@@ -8308,7 +8467,7 @@ function isRetryableStatus(status) {
 }
 var sleep = (ms) => ms > 0 ? new Promise((resolve) => setTimeout(resolve, ms)) : Promise.resolve();
 async function signBody(secret, body) {
-  const subtle = _optionalChain([globalThis, 'access', _195 => _195.crypto, 'optionalAccess', _196 => _196.subtle]);
+  const subtle = _optionalChain([globalThis, 'access', _200 => _200.crypto, 'optionalAccess', _201 => _201.subtle]);
   if (!subtle) return null;
   try {
     const enc = new TextEncoder();
@@ -8318,7 +8477,7 @@ async function signBody(secret, body) {
     const sig = await subtle.sign("HMAC", key, enc.encode(body));
     const hex = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
     return `sha256=${hex}`;
-  } catch (e60) {
+  } catch (e62) {
     return null;
   }
 }
@@ -8378,8 +8537,8 @@ async function deliverReceipt(receipt, options) {
     const retryable = status === void 0 ? true : isRetryableStatus(status);
     const willRetry = !ok && retryable && attempt < maxAttempts;
     try {
-      _optionalChain([onAttempt, 'optionalCall', _197 => _197({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
-    } catch (e61) {
+      _optionalChain([onAttempt, 'optionalCall', _202 => _202({ attempt, ok, ...status !== void 0 ? { status } : {}, ...error ? { error } : {}, willRetry })]);
+    } catch (e63) {
     }
     if (ok) return { delivered: true, attempts: attempt, status };
     if (!willRetry) {
@@ -8467,13 +8626,13 @@ function toA2APaymentFailed(code, detail, receipts = [], network) {
   };
 }
 function fromA2APaymentRequired(task) {
-  const meta = _optionalChain([task, 'access', _198 => _198.status, 'optionalAccess', _199 => _199.message, 'optionalAccess', _200 => _200.metadata]);
-  const required = _optionalChain([meta, 'optionalAccess', _201 => _201[A2A_REQUIRED_KEY]]);
+  const meta = _optionalChain([task, 'access', _203 => _203.status, 'optionalAccess', _204 => _204.message, 'optionalAccess', _205 => _205.metadata]);
+  const required = _optionalChain([meta, 'optionalAccess', _206 => _206[A2A_REQUIRED_KEY]]);
   if (!required || typeof required !== "object") return null;
   return required;
 }
 function fromA2APaymentPayload(message) {
-  const raw = _optionalChain([message, 'access', _202 => _202.metadata, 'optionalAccess', _203 => _203[A2A_PAYLOAD_KEY]]);
+  const raw = _optionalChain([message, 'access', _207 => _207.metadata, 'optionalAccess', _208 => _208[A2A_PAYLOAD_KEY]]);
   if (raw === void 0 || raw === null) return null;
   return { raw, taskId: _nullishCoalesce(message.taskId, () => ( "")) };
 }
@@ -8506,7 +8665,7 @@ function createA2APaymentHandler(options) {
   const ttlMs = _nullishCoalesce(options.taskTtlMs, () => ( maxTimeoutSeconds * 1e3));
   const store = _nullishCoalesce(options.taskStore, () => ( defaultTaskStore()));
   function appendReceipt(taskId, entry) {
-    const prior = _nullishCoalesce(_optionalChain([store, 'access', _204 => _204.get, 'call', _205 => _205(taskId), 'optionalAccess', _206 => _206.receipts]), () => ( []));
+    const prior = _nullishCoalesce(_optionalChain([store, 'access', _209 => _209.get, 'call', _210 => _210(taskId), 'optionalAccess', _211 => _211.receipts]), () => ( []));
     const isDup = "success" in entry && entry.success === true && entry.transaction !== "" && prior.some((r) => "transaction" in r && r.transaction === entry.transaction);
     const next = isDup ? prior : [...prior, entry];
     const receipts = next.length > MAX_TASK_RECEIPTS ? next.slice(-MAX_TASK_RECEIPTS) : next;
@@ -8614,11 +8773,11 @@ function createA2APaymentHandler(options) {
     }
   }
   function agentCardExtension(opts) {
-    const uri = _optionalChain([opts, 'optionalAccess', _207 => _207.version]) === "v0.2" ? A2A_X402_EXTENSION_URI_V02 : A2A_X402_EXTENSION_URI_V01;
+    const uri = _optionalChain([opts, 'optionalAccess', _212 => _212.version]) === "v0.2" ? A2A_X402_EXTENSION_URI_V02 : A2A_X402_EXTENSION_URI_V01;
     return {
       uri,
       description: "Supports payments using the x402 protocol for on-chain settlement.",
-      ..._optionalChain([opts, 'optionalAccess', _208 => _208.required]) ? { required: true } : {}
+      ..._optionalChain([opts, 'optionalAccess', _213 => _213.required]) ? { required: true } : {}
     };
   }
   return { handleMessage, agentCardExtension, gate };
@@ -8629,7 +8788,7 @@ function singleNetworkOf(challenge) {
 }
 function networkFromPayload(raw) {
   const v = raw;
-  if (v && typeof _optionalChain([v, 'access', _209 => _209.accepted, 'optionalAccess', _210 => _210.network]) === "string") return v.accepted.network;
+  if (v && typeof _optionalChain([v, 'access', _214 => _214.accepted, 'optionalAccess', _215 => _215.network]) === "string") return v.accepted.network;
   if (v && typeof v.network === "string") return v.network;
   return void 0;
 }
@@ -8671,7 +8830,7 @@ function toMcpPaymentResponse(content, receipt) {
   };
 }
 function fromMcpPayment(params) {
-  const meta = _optionalChain([params, 'optionalAccess', _211 => _211._meta, 'optionalAccess', _212 => _212[MCP_PAYMENT_META_KEY]]);
+  const meta = _optionalChain([params, 'optionalAccess', _216 => _216._meta, 'optionalAccess', _217 => _217[MCP_PAYMENT_META_KEY]]);
   return meta == null ? null : meta;
 }
 function fromMcpPaymentRequired(result) {
@@ -8680,14 +8839,14 @@ function fromMcpPaymentRequired(result) {
   if (sc && typeof sc === "object" && typeof sc.x402Version === "number") {
     return sc;
   }
-  const text = _optionalChain([result, 'access', _213 => _213.content, 'optionalAccess', _214 => _214[0], 'optionalAccess', _215 => _215.text]);
+  const text = _optionalChain([result, 'access', _218 => _218.content, 'optionalAccess', _219 => _219[0], 'optionalAccess', _220 => _220.text]);
   if (typeof text === "string") {
     try {
       const parsed = JSON.parse(text);
       if (parsed && typeof parsed === "object" && typeof parsed.x402Version === "number") {
         return parsed;
       }
-    } catch (e62) {
+    } catch (e64) {
     }
   }
   return null;
@@ -8696,7 +8855,7 @@ function isMcpPaymentRequired(result) {
   return fromMcpPaymentRequired(result) != null;
 }
 function fromMcpPaymentResponse(result) {
-  const meta = _optionalChain([result, 'optionalAccess', _216 => _216._meta, 'optionalAccess', _217 => _217[MCP_PAYMENT_RESPONSE_META_KEY]]);
+  const meta = _optionalChain([result, 'optionalAccess', _221 => _221._meta, 'optionalAccess', _222 => _222[MCP_PAYMENT_RESPONSE_META_KEY]]);
   if (!meta || typeof meta !== "object") return null;
   return meta;
 }