@piprail/sdk 3.1.0 → 3.1.1

package/CHANGELOG.md

@@ -4,6 +4,30 @@ All notable changes to `@piprail/sdk` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 versions follow [Semantic Versioning](https://semver.org/).
 
+## [3.1.1] — 2026-09-09 — XRPL payments work again
+
+### Fixed
+
+- **A facilitator's payload rejection answered 5xx instead of 402.** Every non-200 from a
+  facilitator's `/verify` was treated as a transport failure, so a **400** — a forged or
+  malformed authorization — made the gate return a server error. That tells the buyer "our
+  fault, try again" about a payment that can never succeed, and shows in the merchant's metrics
+  as an outage they do not have. Now only `400`/`422` (the payload is bad, and only the buyer
+  can fix it) reject with the facilitator's own reason; `401`/`403` (our credentials),
+  `404` (our URL), `429` and `5xx` stay `SettlementError`, because a buyer can do nothing about
+  any of them. Found by tampering with a real authorization on Base.
+
+- 🔴 **Every XRPL payment failed.** `ledger_current` is documented to return
+  `ledger_current_index`, and rippled does, but the public clusters in front of it answer with
+  `ledger_index`. Reading only the documented name returned `undefined`, `undefined + 20` became
+  `NaN`, and the transaction died in xrpl.js's serializer. Both names are now accepted, and a
+  response carrying neither is refused with a message that says nothing was signed.
+
+  Latent since XRPL shipped and intermittent by nature: it depends on which backend the cluster
+  routes to, which is why the same wallet settled all morning and then could not settle at all.
+  Caught by a post-release live sweep against the published package — the pre-flight guard added
+  in 3.1.0 is what turned an unreadable serializer error into a sentence naming the field.
+
 ## [3.1.0] — 2026-09-09 — spendable is not held, and a swap refused for no reason
 
 ### Fixed
@@ -2642,6 +2666,7 @@ straight into your wallet. The API is small and self-contained.
 [1.5.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.4.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.3.1]: https://www.npmjs.com/package/@piprail/sdk
+[3.1.1]: https://www.npmjs.com/package/@piprail/sdk
 [3.1.0]: https://www.npmjs.com/package/@piprail/sdk
 [3.0.0]: https://www.npmjs.com/package/@piprail/sdk
 [1.3.0]: https://www.npmjs.com/package/@piprail/sdk

package/dist/index.cjs

@@ -2498,7 +2498,7 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-G2FKFXRI.cjs")));
+      mod = await Promise.resolve().then(() => _interopRequireWildcard(require("./xrpl-YUGDNI2R.cjs")));
     } catch (cause) {
       throw new (0, _chunk6XTNI2OQcjs.MissingDriverError)(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
@@ -6238,6 +6238,14 @@ async function settleViaFacilitator(input) {
     );
   }
   if (verify.status !== 200) {
+    if (verify.status === 400 || verify.status === 422) {
+      const vr4 = _nullishCoalesce(verify.json, () => ( {}));
+      return {
+        ok: false,
+        error: mapReason(vr4.invalidReason),
+        detail: `Facilitator rejected the payment payload (HTTP ${verify.status})${vr4.invalidReason ? `: ${vr4.invalidReason}` : ""}${vr4.invalidMessage ? ` \u2014 ${vr4.invalidMessage}` : ""}.`
+      };
+    }
     throw new (0, _chunk6XTNI2OQcjs.SettlementError)(
       `exact settle (facilitator ${base2}): /verify returned HTTP ${verify.status} (transport/auth error).`
     );

package/dist/index.js

@@ -2498,7 +2498,7 @@ var loaders = {
   xrpl: async () => {
     let mod;
     try {
-      mod = await import("./xrpl-5K444RGX.js");
+      mod = await import("./xrpl-WIDRV2XY.js");
     } catch (cause) {
       throw new MissingDriverError(
         `XRPL selected, but its package isn't installed. Run: npm install xrpl`,
@@ -6238,6 +6238,14 @@ async function settleViaFacilitator(input) {
     );
   }
   if (verify.status !== 200) {
+    if (verify.status === 400 || verify.status === 422) {
+      const vr4 = verify.json ?? {};
+      return {
+        ok: false,
+        error: mapReason(vr4.invalidReason),
+        detail: `Facilitator rejected the payment payload (HTTP ${verify.status})${vr4.invalidReason ? `: ${vr4.invalidReason}` : ""}${vr4.invalidMessage ? ` \u2014 ${vr4.invalidMessage}` : ""}.`
+      };
+    }
     throw new SettlementError(
       `exact settle (facilitator ${base2}): /verify returned HTTP ${verify.status} (transport/auth error).`
     );

package/dist/{xrpl-5K444RGX.js → xrpl-WIDRV2XY.js}

@@ -745,7 +745,13 @@ function makeXrplNetwork(preset, rpcUrl) {
     },
     async currentLedgerIndex() {
       const r = await rpc("ledger_current", {});
-      return r.ledger_current_index;
+      const index = r.ledger_current_index ?? r.ledger_index;
+      if (typeof index !== "number") {
+        throw new Error(
+          `XRPL: ledger_current returned neither ledger_current_index nor ledger_index (got ${JSON.stringify(Object.keys(r ?? {}))}). Nothing was signed or submitted.`
+        );
+      }
+      return index;
     },
     async submit(txBlob) {
       return rpc("submit", { tx_blob: txBlob });

package/dist/{xrpl-G2FKFXRI.cjs → xrpl-YUGDNI2R.cjs}

@@ -745,7 +745,13 @@ function makeXrplNetwork(preset, rpcUrl) {
     },
     async currentLedgerIndex() {
       const r = await rpc("ledger_current", {});
-      return r.ledger_current_index;
+      const index = _nullishCoalesce(r.ledger_current_index, () => ( r.ledger_index));
+      if (typeof index !== "number") {
+        throw new Error(
+          `XRPL: ledger_current returned neither ledger_current_index nor ledger_index (got ${JSON.stringify(Object.keys(_nullishCoalesce(r, () => ( {}))))}). Nothing was signed or submitted.`
+        );
+      }
+      return index;
     },
     async submit(txBlob) {
       return rpc("submit", { tx_blob: txBlob });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@piprail/sdk",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Accept x402 crypto payments across 30 chains — every major EVM chain plus Solana, TON, Tron, NEAR, Sui, Aptos, Algorand, Stellar & XRPL — in a couple of lines. No backend, no database, no fee; payments settle straight to your wallet.",
   "type": "module",
   "main": "./dist/index.cjs",