@playmos/sdk 0.3.12 → 0.3.14

package/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to `@playmos/sdk`. This project adheres to [Semantic Version
 
 ## Unreleased
 
+## [0.3.14] — 2026-09-11
+
+### Added
+- **`settle: "server"`** on `new Playmos({ ... })` — explicit sandbox no-wallet path. `pay()` / `enterRound()` server-settle even when MetaMask is installed. Live keys throw. Default without the ask is unchanged (wallet present → player signs).
+
+## [0.3.13] — 2026-09-11
+
+### Docs
+- Same-studio key rule (`payment not found`). `payoutAddress` at mint or `POST /v1/studio/payout`. Browser `pay()` + MetaMask catch. Webhook register: `POST /v1/webhook_endpoints` (no signing secret in the response).
+- npm README + package description name the live prepare → sign → register path (**flat 1%**). Types include `bytecode` / `unsignedTx`.
+
 ## [0.3.12] — 2026-08-27
 
 ### Added

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Playmos Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,7 +2,7 @@
 
 **🧪 Beta — Playmos SDK.** Runs on Base Sepolia **testnet**. The value-movement primitives (escrow / marketplace / transfer) are proven on-chain but **not yet production-hardened**, and nothing is on mainnet. Build and integrate freely against the sandbox; don't route real user funds yet.
 
-Stablecoin payments for games on Base. One SDK for in-app purchases (**1%** Playmos — you keep 99%), **first-party** skill contests (**60/30/10**), and **in-game economies** (player · NPC · agent commerce via `transfer()`). Independent studio contests: Playmos take is **1%** and **cannot be changed**; default studio-side split is **60/30/9** — **not live yet**. Live sandbox skill entry still uses the first-party 60/30/10 shape. USD in, USDC on-chain — no crypto UX for your players.
+Stablecoin payments for games on Base. **One default path:** `pay()` → `verify()` → a real `pay_…` id with status `confirmed` (1% Playmos — you keep 99%). No game required. Contests, economies, and timers are **optional**. Skill contests are **flat 1%** on **your** pool. If `rounds.open` is refused, that is expected until you prepare → sign → register your own contest pool. USD in, USDC on-chain — no crypto UX for your players.
 
 **Changelog:** see [`CHANGELOG.md`](./CHANGELOG.md) (shipped in the npm tarball from the next publish). **Breaking in 0.3.8:** player-wallet `enterRound` requires `identity` — no silent invent.
 
@@ -23,11 +23,11 @@ The sandbox API also sends CORS headers so browser `pay()` / `enterRound()` work
 
 ## Quickstart — the no-wallet sandbox
 
-The public sandbox key `pk_test_playmos_sandbox` runs against a real Playmos test service on Base Sepolia. **You don't need a wallet:** on a `pk_test` key with no `wallet` configured, the SDK routes to a server-settle path where Playmos signs and submits the on-chain transaction for you. You still get a real, confirmed `txHash` — just signed by the service. No wallet, no gas, no crypto.
+The public sandbox key `pk_test_playmos_sandbox` runs against a real Playmos test service on Base Sepolia. **You don't need a wallet:** set `settle: "server"` (the quickstart does). The SDK then server-settles even if MetaMask is installed. You still get a real, confirmed `txHash` — signed by the service. No wallet, no gas, no crypto. Omit `settle` only when you want the player to sign.
 
-The key comes wired to two demo games: `game_sandbox_iap` (IAP) and `game_sandbox_skill` (prize pool).
+The public key is wired to `game_sandbox_iap`. Skill entry (`game_sandbox_skill`) is an optional later path — not the first-hour default.
 
-### In-app purchase — `pay()`
+### In-app purchase — `pay()` (the front door)
 
 <!-- snippet:pay -->
 ```ts
@@ -35,18 +35,25 @@ import { Playmos } from "@playmos/sdk";
 
 // Public sandbox key — client-safe, like Stripe's pk_test_.
 // No wallet needed: Playmos server-settles the test payment for you.
-const playmos = new Playmos({ apiKey: "pk_test_playmos_sandbox" });
+const playmos = new Playmos({ apiKey: "pk_test_playmos_sandbox", settle: "server" });
 
 const payment = await playmos.pay({
-  gameId: "game_sandbox_iap", // public sandbox IAP game — include it (this key spans IAP + skill)
+  gameId: "game_sandbox_iap", // required for the public sandbox key
   amount: "0.99",             // USD string — sandbox server-settle cap $1.00/request
   sku: "gems_500",            // your product id
-  playerId: "player_abc",     // your opaque user id
+  playerId: "player_" + Date.now(),
 });
 
-payment.id;     // "pay_…"     — real, server-issued (ULID)
-payment.status; // "confirmed" — real, on Base Sepolia
-payment.txHash; // 0x…         — open on sepolia.basescan.org/tx/{txHash}
+let result = await playmos.verify(payment.id);
+let tries = 30;
+while (result.status !== "confirmed" && tries !== 0) {
+  await new Promise((r) => setTimeout(r, 500));
+  result = await playmos.verify(payment.id);
+  tries -= 1;
+}
+
+console.log({ id: payment.id, status: result.status, tx: payment.txHash });
+// You won: pay_… + confirmed on Base Sepolia
 ```
 
 ### Verify before you grant
@@ -68,7 +75,7 @@ if (result.status === "confirmed") {
 }
 ```
 
-### Skill-game entry — `enterRound()`
+### Optional later — skill-game entry (`enterRound()`)
 
 ```ts
 const entry = await playmos.enterRound({
@@ -77,10 +84,21 @@ const entry = await playmos.enterRound({
   amount: "1.00",         // grows this round's pool
   playerId: "player_abc",
 });
-// entry.status === "confirmed"; entry.split is a first-party 60/30/10 *projection*
-// (sandbox / Playmos Lab — not a studio 60/30/9+1% split, not a chain read)
+// entry.status === "confirmed". Public sandbox skill is a shared Playmos pool — not your contest.
+// Your 1% contest is live only after you register your own pool (next section).
 ```
 
+### Your own contest pool — `epochs.preparePool` (you sign)
+
+`@playmos/sdk` **0.3.14** ships `epochs.preparePool` with `bytecode` / `unsignedTx` on the typed response. It calls the live API. Playmos sets `broadcast: false` and does **not** send the transaction.
+
+1. Fund your studio wallet on Base Sepolia (ETH + test USDC). Playmos has no faucet — use [Coinbase's faucet docs](https://docs.cdp.coinbase.com/faucets/introduction/welcome).
+2. Call `epochs.preparePool({ studioWallet })` or `POST /v1/epochs/pools/prepare`. Use `feeSink` from that response (`0xD84c190085aa59c48a9B478Ea333D50B8DF4aD42`).
+3. Sign `unsignedTx` in your wallet and send it.
+4. `epochs.registerPool` with `walletProof`, then open / enter **your** game — not the shared sandbox game.
+
+Full steps: https://playmos-docs-public.vercel.app/docs#studio-pool-prepare
+
 ### Move USDC between wallets — `transfer()`
 
 The base value-movement primitive: move USDC from one wallet to another with a configurable per-call fee. The **game logic is the authority** — you already decided the move is valid — so this is a direct, unconditional push (reach for `escrow`/`marketplace` when a trust boundary needs fair exchange). Settled through the on-chain `PlaymosTransfer` contract; the split is verifiable on BaseScan.
@@ -281,8 +299,8 @@ The escrow/marketplace resolve endpoints (release/refund/confirm) return a deter
 
 ## Docs
 
-Full developer docs (install, IAP `pay()`, skill `enterRound()`, agents, webhooks, REST) — **public, no login**:
+Full developer docs (install, IAP `pay()`, skill `enterRound()`, your own contest pool, agents, webhooks, REST) — **public, no login**:
 
-**https://playmos-docs-public.vercel.app/docs**
+**https://playmos-docs-public.vercel.app/docs** · contest pool: **https://playmos-docs-public.vercel.app/docs#studio-pool-prepare**
 
 That is the third-party / stranger surface while we stress-test. Production **`playmos.io/docs`** comes after Founder promote (gate still holds for production only).

package/dist/{errors-CYKgt2VU.d.cts → errors-WcDNfb4q.d.cts}

@@ -76,6 +76,13 @@ interface PlaymosConfig {
      * even mock results use the REAL status union (never a synthetic "mocked").
      */
     mock?: boolean;
+    /**
+     * Explicit sandbox no-wallet path. On a test key, `pay()` / `enterRound()`
+     * server-settle even if MetaMask (or another injected wallet) is installed.
+     * Live keys (`pk_live_` / `sk_live_`) throw — never server-settle real money.
+     * Omit to keep today's default: server-settle only when no wallet is present.
+     */
+    settle?: "server";
     /**
      * Automatic backoff/retry on HTTP 429 (throttling). Default ON (up to 2 retries,
      * honoring a `Retry-After` header). Retries are safe — reads are idempotent and

package/dist/{errors-CYKgt2VU.d.ts → errors-WcDNfb4q.d.ts}

@@ -76,6 +76,13 @@ interface PlaymosConfig {
      * even mock results use the REAL status union (never a synthetic "mocked").
      */
     mock?: boolean;
+    /**
+     * Explicit sandbox no-wallet path. On a test key, `pay()` / `enterRound()`
+     * server-settle even if MetaMask (or another injected wallet) is installed.
+     * Live keys (`pk_live_` / `sk_live_`) throw — never server-settle real money.
+     * Omit to keep today's default: server-settle only when no wallet is present.
+     */
+    settle?: "server";
     /**
      * Automatic backoff/retry on HTTP 429 (throttling). Default ON (up to 2 retries,
      * honoring a `Retry-After` header). Retries are safe — reads are idempotent and

package/dist/index.cjs

@@ -1118,7 +1118,8 @@ function mockVerifyResult(payment) {
 }
 
 // src/epochs.ts
-var PLAYMOS_FEE_SINK_DEFAULT = "0x1b8031e20ed96131a849a52290b4d640f286998d";
+var PLAYMOS_FEE_SINK_DEFAULT = "0xd84c190085aa59c48a9b478ea333d50b8df4ad42";
+var RETIRED_PLAYMOS_FEE_SINK = "0x1b8031e20ed96131a849a52290b4d640f286998d";
 var EPOCH_POOL_CONSTRUCTOR_TYPES = [
   { type: "address" },
   { type: "address" },
@@ -1305,13 +1306,17 @@ function sameAddr(a, b) {
 }
 function prepareStudioPoolLocal(input, playmosFeeSink, token, playmosAddresses = []) {
   const studio = requireAddr(input.studioWallet, "studioWallet");
-  const sink = playmosFeeSink.toLowerCase();
+  const locked = PLAYMOS_FEE_SINK_DEFAULT;
+  if (playmosFeeSink && !sameAddr(playmosFeeSink, locked)) {
+    throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
+  }
+  const sink = locked;
   const forbidden = [sink, ...playmosAddresses.map((a) => a.toLowerCase())];
   if (forbidden.some((a) => sameAddr(a, studio))) {
     throw new ConfigError("studioWallet must not be a Playmos address (Playmos never holds studio keys)");
   }
   if (input.feeSink && !sameAddr(input.feeSink, sink)) {
-    throw new ConfigError("feeSink must equal the Playmos sink; refused before broadcast");
+    throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
   }
   if (input.admin && !sameAddr(input.admin, studio)) {
     throw new ConfigError("admin must be the studio wallet from block one");
@@ -1342,6 +1347,7 @@ function prepareStudioPoolLocal(input, playmosFeeSink, token, playmosAddresses =
       feeSink: sink,
       refundTimeout
     }),
+    broadcast: false,
     constructor: "EpochPrizePool",
     studioHoldsAdmin: true,
     studioHoldsOperator: true,
@@ -1546,8 +1552,11 @@ function createEpochsApi(deps) {
     async preparePool(input) {
       const studioWallet = requireAddr(input?.studioWallet, "studioWallet");
       const cfg = deps.config();
-      const sink = (input.playmosFeeSink ?? PLAYMOS_FEE_SINK_DEFAULT).toLowerCase();
+      const sink = PLAYMOS_FEE_SINK_DEFAULT;
       const token = (input.token ?? cfg.contracts?.usdc ?? "0x036cbd53842c5426634e7929541ec2318f3dcf7e").toLowerCase();
+      if (input.playmosFeeSink && !sameAddr(input.playmosFeeSink, sink)) {
+        throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
+      }
       if (cfg.mock) {
         return prepareStudioPoolLocal({ ...input, studioWallet }, sink, token);
       }
@@ -2253,7 +2262,7 @@ var Playmos = class {
       },
       walletAddress: async () => getAccount(this.walletProvider()),
       readView: async (to, data) => {
-        if (await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+        if (!await this.shouldServerSettle() && await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
           const provider = this.walletProvider();
           return await provider.request({
             method: "eth_call",
@@ -3354,8 +3363,14 @@ var Playmos = class {
         );
       }
     }
+    if (config.settle === "server" && !this.env.isTest) {
+      throw new ConfigError(
+        'settle: "server" is sandbox-only. Live keys must use a player wallet \u2014 never server-settle real money.',
+        { field: "settle" }
+      );
+    }
     this.http = createHttpClient(this.env.apiBaseUrl, config.apiKey, config.retry);
-    if (!config.mock) {
+    if (!config.mock && config.settle !== "server") {
       try {
         resolveProvider(config.wallet, this.walletTimeoutPolicy());
       } catch {
@@ -3425,6 +3440,23 @@ var Playmos = class {
       return 0n;
     }
   }
+  /**
+   * Sandbox server-settle when the developer asked (`settle: "server"`) or when
+   * a test key has no wallet. Never calls walletAvailable if the ask is set —
+   * that is the MetaMask-hijack delete (Moonhop leftover Slice 1).
+   */
+  async shouldServerSettle() {
+    if (this.config.settle === "server") {
+      if (!this.env.isTest) {
+        throw new ConfigError(
+          'settle: "server" is sandbox-only. Live keys must use a player wallet \u2014 never server-settle real money.',
+          { field: "settle" }
+        );
+      }
+      return true;
+    }
+    return this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy());
+  }
   /**
    * Wallet timeout policy (#462 / PR #463 residual).
    * - connectTimeoutMs → eth_requestAccounts only
@@ -3552,7 +3584,7 @@ var Playmos = class {
         heldIdem ? { key: heldIdem, terms } : void 0
       );
     }
-    if (this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+    if (await this.shouldServerSettle()) {
       const res = await this.http.post(
         "/payments",
         {
@@ -3657,7 +3689,7 @@ var Playmos = class {
         heldIdem ? { key: heldIdem, terms } : void 0
       );
     }
-    const serverSettleNoWallet = this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy());
+    const serverSettleNoWallet = await this.shouldServerSettle();
     if (!serverSettleNoWallet) {
       const pinned = typeof input.identity === "string" ? input.identity.trim() : "";
       if (!pinned) {
@@ -3987,7 +4019,7 @@ var Playmos = class {
     });
     let raw;
     try {
-      if (await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+      if (!await this.shouldServerSettle() && await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
         const provider = this.walletProvider();
         raw = await provider.request({
           method: "eth_call",
@@ -4216,6 +4248,7 @@ exports.PaymentFailedError = PaymentFailedError;
 exports.PayoutError = PayoutError;
 exports.Playmos = Playmos;
 exports.PlaymosError = PlaymosError;
+exports.RETIRED_PLAYMOS_FEE_SINK = RETIRED_PLAYMOS_FEE_SINK;
 exports.USDC_ADDRESS = USDC_ADDRESS;
 exports.USDC_DECIMALS = USDC_DECIMALS;
 exports.WalletConnectionError = WalletConnectionError;

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as Call, P as PlaymosConfig, O as OnchainStatus, N as Network, W as WebhookEvent, R as RoundOpenInput, a as RoundState, b as RoundSettleInput, S as SettleRoundResult, c as RoundCancelInput, d as CancelRoundResult, e as RoundGetResult, A as ActiveSeriesRound, f as PayoutNoticesResult, g as PrizeBalance, h as WithdrawResult, i as AgentWallet, j as AgentFundResult, T as TransferResult, E as EscrowHoldInput, k as EscrowHoldResult, l as EscrowResolveResult, M as MarketplaceListInput, L as Listing, m as MarketplaceSaleResult, n as MarketplaceGetResult, o as PayInput, p as Payment, q as EnterRoundInput, r as TransferReconcile, s as WaitOptions, t as TransferInput, u as TransferConfirmOptions, V as VerifyResult, v as PayoutRule } from './errors-CYKgt2VU.cjs';
-export { w as ActiveForSeriesResult, x as AgentEconomyConfig, y as AlreadyEnteredError, z as ApiError, B as AuthError, D as ConfigError, F as ContractConfig, G as Eip1193Provider, H as GasConfig, I as GasMode, J as InsufficientGasError, K as InvalidAmountError, Q as ListingStatus, U as MarketplaceItem, X as MarketplaceSale, Y as MissingFieldError, Z as NothingToWithdrawError, _ as PaymentFailedError, $ as PaymentStatus, a0 as PayoutNotice, a1 as PayoutNoticeStatus, a2 as PlaymosError, a3 as PlaymosErrorCode, a4 as RetryOptions, a5 as RoundGetVia, a6 as RoundStatus, a7 as WalletConfig, a8 as WalletConnectionError, a9 as WalletConnector, aa as WalletTimeoutError, ab as WebhookEventType, ac as buildEpochExecuteSettlementCall } from './errors-CYKgt2VU.cjs';
+import { C as Call, P as PlaymosConfig, O as OnchainStatus, N as Network, W as WebhookEvent, R as RoundOpenInput, a as RoundState, b as RoundSettleInput, S as SettleRoundResult, c as RoundCancelInput, d as CancelRoundResult, e as RoundGetResult, A as ActiveSeriesRound, f as PayoutNoticesResult, g as PrizeBalance, h as WithdrawResult, i as AgentWallet, j as AgentFundResult, T as TransferResult, E as EscrowHoldInput, k as EscrowHoldResult, l as EscrowResolveResult, M as MarketplaceListInput, L as Listing, m as MarketplaceSaleResult, n as MarketplaceGetResult, o as PayInput, p as Payment, q as EnterRoundInput, r as TransferReconcile, s as WaitOptions, t as TransferInput, u as TransferConfirmOptions, V as VerifyResult, v as PayoutRule } from './errors-WcDNfb4q.cjs';
+export { w as ActiveForSeriesResult, x as AgentEconomyConfig, y as AlreadyEnteredError, z as ApiError, B as AuthError, D as ConfigError, F as ContractConfig, G as Eip1193Provider, H as GasConfig, I as GasMode, J as InsufficientGasError, K as InvalidAmountError, Q as ListingStatus, U as MarketplaceItem, X as MarketplaceSale, Y as MissingFieldError, Z as NothingToWithdrawError, _ as PaymentFailedError, $ as PaymentStatus, a0 as PayoutNotice, a1 as PayoutNoticeStatus, a2 as PlaymosError, a3 as PlaymosErrorCode, a4 as RetryOptions, a5 as RoundGetVia, a6 as RoundStatus, a7 as WalletConfig, a8 as WalletConnectionError, a9 as WalletConnector, aa as WalletTimeoutError, ab as WebhookEventType, ac as buildEpochExecuteSettlementCall } from './errors-WcDNfb4q.cjs';
 
 /**
  * Thin REST client for the Playmos service. Every SDK method that touches the
@@ -100,8 +100,10 @@ declare function buildEpochWithdrawCall(epochPrizePool: `0x${string}`): Call;
  * `terminal`. Live `rounds.*` / `enterRound` are a different pool and stay unchanged.
  */
 
-/** Playmos Base Sepolia feeSink (PlaymosPay / PrizePool). Service pins this. */
-declare const PLAYMOS_FEE_SINK_DEFAULT: "0x1b8031e20ed96131a849a52290b4d640f286998d";
+/** Founder-locked Playmos Base Sepolia treasury (Object 3). Prepare pins this. */
+declare const PLAYMOS_FEE_SINK_DEFAULT: "0xd84c190085aa59c48a9b478ea333d50b8df4ad42";
+/** Retired constructor sink — prepare must never hand this out. */
+declare const RETIRED_PLAYMOS_FEE_SINK: "0x1b8031e20ed96131a849a52290b4d640f286998d";
 declare function encodeEpochPoolConstructorArgs(args: {
     token: `0x${string}`;
     admin: `0x${string}`;
@@ -258,6 +260,16 @@ interface EpochPreparedPool {
     feeSink: `0x${string}`;
     refundTimeout: string;
     constructorArgs: `0x${string}`;
+    /** Creation bytecode from the service prepare path. Absent on mock. */
+    bytecode?: `0x${string}`;
+    unsignedTx?: {
+        chainId: number;
+        to: null;
+        value: "0";
+        data: `0x${string}`;
+    };
+    /** Playmos never broadcasts. Studio wallet sends. */
+    broadcast: false;
     constructor: "EpochPrizePool";
     studioHoldsAdmin: true;
     studioHoldsOperator: true;
@@ -1311,6 +1323,12 @@ declare class Playmos {
      */
     private readonly mockByIdempotencyKey;
     constructor(config: PlaymosConfig);
+    /**
+     * Sandbox server-settle when the developer asked (`settle: "server"`) or when
+     * a test key has no wallet. Never calls walletAvailable if the ask is set —
+     * that is the MetaMask-hijack delete (Moonhop leftover Slice 1).
+     */
+    private shouldServerSettle;
     /**
      * Wallet timeout policy (#462 / PR #463 residual).
      * - connectTimeoutMs → eth_requestAccounts only
@@ -1575,4 +1593,4 @@ declare function ulid(seedTime?: number): string;
 /** `${prefix}_${ulid()}` — e.g. `pay_01J…`, `entry_01J…`, `idem_01J…`. */
 declare function prefixedId(prefix: string): string;
 
-export { ActiveSeriesRound, AgentFundResult, AgentWallet, type Authorization, C1_ENTER_SPLIT_MICRO, CHAIN_ID, CancelRoundResult, type CreatePaymentRequirementInput, DEFAULT_API_BASE_URL, EnterRoundInput, type EpochAttestation, type EpochClaimRefundInput, type EpochClaimRefundResult, type EpochClaimableRefund, type EpochClaimableRefundInput, type EpochCreatePoolInput, type EpochCurrentId, type EpochCurrentIdInput, type EpochEnterInput, type EpochEntry, type EpochEntryStatus, type EpochExecuteSettlementInput, type EpochExecuteSettlementResult, type EpochGetAttestationInput, type EpochGetInput, type EpochGetSeriesInput, type EpochPoolOwnership, type EpochPoolWalletProof, type EpochPreparePoolInput, type EpochPreparedPool, type EpochPrize, type EpochPrizeInput, type EpochReadVia, type EpochRegisterPoolInput, type EpochSeriesView, type EpochSettleInput, type EpochSettleResult, type EpochSettleStatus, type EpochSettleWinner, type EpochStudioPool, type EpochTerminal, type EpochView, type EpochWinnerIn, type EpochWithdrawInput, type EpochWithdrawResult, type EpochsApi, EscrowHoldInput, EscrowHoldResult, EscrowResolveResult, Listing, MICRO_PER_USDC, MarketplaceGetResult, MarketplaceListInput, MarketplaceSaleResult, Network, PLAYMOS_FEE_SINK_DEFAULT, PayInput, Payment, type PaymentRequirement, PayoutError, PayoutNoticesResult, PayoutRule, PayoutRule as PayoutRuleCompute, Playmos, PlaymosConfig, PrizeBalance, RoundCancelInput, RoundGetResult, RoundOpenInput, RoundSettleInput, RoundState, SettleRoundResult, type SettlementAsset, type SettlementTypedData, type SettlementTypedDataInput, TransferConfirmOptions, TransferInput, TransferReconcile, TransferResult, USDC_ADDRESS, USDC_DECIMALS, VerifyResult, WaitOptions, type WalletSignatureAuthorization, WebhookEvent, WithdrawResult, type X402ChallengeInput, type X402ChallengeResult, type X402FulfillAuthorization, type X402PayInput, type X402PayloadAuthorization, type X402PayloadMode, type X402PaymentRequired, type X402SettleResult, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, identityToBytes32, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, seriesToBytes32, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };
+export { ActiveSeriesRound, AgentFundResult, AgentWallet, type Authorization, C1_ENTER_SPLIT_MICRO, CHAIN_ID, CancelRoundResult, type CreatePaymentRequirementInput, DEFAULT_API_BASE_URL, EnterRoundInput, type EpochAttestation, type EpochClaimRefundInput, type EpochClaimRefundResult, type EpochClaimableRefund, type EpochClaimableRefundInput, type EpochCreatePoolInput, type EpochCurrentId, type EpochCurrentIdInput, type EpochEnterInput, type EpochEntry, type EpochEntryStatus, type EpochExecuteSettlementInput, type EpochExecuteSettlementResult, type EpochGetAttestationInput, type EpochGetInput, type EpochGetSeriesInput, type EpochPoolOwnership, type EpochPoolWalletProof, type EpochPreparePoolInput, type EpochPreparedPool, type EpochPrize, type EpochPrizeInput, type EpochReadVia, type EpochRegisterPoolInput, type EpochSeriesView, type EpochSettleInput, type EpochSettleResult, type EpochSettleStatus, type EpochSettleWinner, type EpochStudioPool, type EpochTerminal, type EpochView, type EpochWinnerIn, type EpochWithdrawInput, type EpochWithdrawResult, type EpochsApi, EscrowHoldInput, EscrowHoldResult, EscrowResolveResult, Listing, MICRO_PER_USDC, MarketplaceGetResult, MarketplaceListInput, MarketplaceSaleResult, Network, PLAYMOS_FEE_SINK_DEFAULT, PayInput, Payment, type PaymentRequirement, PayoutError, PayoutNoticesResult, PayoutRule, PayoutRule as PayoutRuleCompute, Playmos, PlaymosConfig, PrizeBalance, RETIRED_PLAYMOS_FEE_SINK, RoundCancelInput, RoundGetResult, RoundOpenInput, RoundSettleInput, RoundState, SettleRoundResult, type SettlementAsset, type SettlementTypedData, type SettlementTypedDataInput, TransferConfirmOptions, TransferInput, TransferReconcile, TransferResult, USDC_ADDRESS, USDC_DECIMALS, VerifyResult, WaitOptions, type WalletSignatureAuthorization, WebhookEvent, WithdrawResult, type X402ChallengeInput, type X402ChallengeResult, type X402FulfillAuthorization, type X402PayInput, type X402PayloadAuthorization, type X402PayloadMode, type X402PaymentRequired, type X402SettleResult, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, identityToBytes32, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, seriesToBytes32, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as Call, P as PlaymosConfig, O as OnchainStatus, N as Network, W as WebhookEvent, R as RoundOpenInput, a as RoundState, b as RoundSettleInput, S as SettleRoundResult, c as RoundCancelInput, d as CancelRoundResult, e as RoundGetResult, A as ActiveSeriesRound, f as PayoutNoticesResult, g as PrizeBalance, h as WithdrawResult, i as AgentWallet, j as AgentFundResult, T as TransferResult, E as EscrowHoldInput, k as EscrowHoldResult, l as EscrowResolveResult, M as MarketplaceListInput, L as Listing, m as MarketplaceSaleResult, n as MarketplaceGetResult, o as PayInput, p as Payment, q as EnterRoundInput, r as TransferReconcile, s as WaitOptions, t as TransferInput, u as TransferConfirmOptions, V as VerifyResult, v as PayoutRule } from './errors-CYKgt2VU.js';
-export { w as ActiveForSeriesResult, x as AgentEconomyConfig, y as AlreadyEnteredError, z as ApiError, B as AuthError, D as ConfigError, F as ContractConfig, G as Eip1193Provider, H as GasConfig, I as GasMode, J as InsufficientGasError, K as InvalidAmountError, Q as ListingStatus, U as MarketplaceItem, X as MarketplaceSale, Y as MissingFieldError, Z as NothingToWithdrawError, _ as PaymentFailedError, $ as PaymentStatus, a0 as PayoutNotice, a1 as PayoutNoticeStatus, a2 as PlaymosError, a3 as PlaymosErrorCode, a4 as RetryOptions, a5 as RoundGetVia, a6 as RoundStatus, a7 as WalletConfig, a8 as WalletConnectionError, a9 as WalletConnector, aa as WalletTimeoutError, ab as WebhookEventType, ac as buildEpochExecuteSettlementCall } from './errors-CYKgt2VU.js';
+import { C as Call, P as PlaymosConfig, O as OnchainStatus, N as Network, W as WebhookEvent, R as RoundOpenInput, a as RoundState, b as RoundSettleInput, S as SettleRoundResult, c as RoundCancelInput, d as CancelRoundResult, e as RoundGetResult, A as ActiveSeriesRound, f as PayoutNoticesResult, g as PrizeBalance, h as WithdrawResult, i as AgentWallet, j as AgentFundResult, T as TransferResult, E as EscrowHoldInput, k as EscrowHoldResult, l as EscrowResolveResult, M as MarketplaceListInput, L as Listing, m as MarketplaceSaleResult, n as MarketplaceGetResult, o as PayInput, p as Payment, q as EnterRoundInput, r as TransferReconcile, s as WaitOptions, t as TransferInput, u as TransferConfirmOptions, V as VerifyResult, v as PayoutRule } from './errors-WcDNfb4q.js';
+export { w as ActiveForSeriesResult, x as AgentEconomyConfig, y as AlreadyEnteredError, z as ApiError, B as AuthError, D as ConfigError, F as ContractConfig, G as Eip1193Provider, H as GasConfig, I as GasMode, J as InsufficientGasError, K as InvalidAmountError, Q as ListingStatus, U as MarketplaceItem, X as MarketplaceSale, Y as MissingFieldError, Z as NothingToWithdrawError, _ as PaymentFailedError, $ as PaymentStatus, a0 as PayoutNotice, a1 as PayoutNoticeStatus, a2 as PlaymosError, a3 as PlaymosErrorCode, a4 as RetryOptions, a5 as RoundGetVia, a6 as RoundStatus, a7 as WalletConfig, a8 as WalletConnectionError, a9 as WalletConnector, aa as WalletTimeoutError, ab as WebhookEventType, ac as buildEpochExecuteSettlementCall } from './errors-WcDNfb4q.js';
 
 /**
  * Thin REST client for the Playmos service. Every SDK method that touches the
@@ -100,8 +100,10 @@ declare function buildEpochWithdrawCall(epochPrizePool: `0x${string}`): Call;
  * `terminal`. Live `rounds.*` / `enterRound` are a different pool and stay unchanged.
  */
 
-/** Playmos Base Sepolia feeSink (PlaymosPay / PrizePool). Service pins this. */
-declare const PLAYMOS_FEE_SINK_DEFAULT: "0x1b8031e20ed96131a849a52290b4d640f286998d";
+/** Founder-locked Playmos Base Sepolia treasury (Object 3). Prepare pins this. */
+declare const PLAYMOS_FEE_SINK_DEFAULT: "0xd84c190085aa59c48a9b478ea333d50b8df4ad42";
+/** Retired constructor sink — prepare must never hand this out. */
+declare const RETIRED_PLAYMOS_FEE_SINK: "0x1b8031e20ed96131a849a52290b4d640f286998d";
 declare function encodeEpochPoolConstructorArgs(args: {
     token: `0x${string}`;
     admin: `0x${string}`;
@@ -258,6 +260,16 @@ interface EpochPreparedPool {
     feeSink: `0x${string}`;
     refundTimeout: string;
     constructorArgs: `0x${string}`;
+    /** Creation bytecode from the service prepare path. Absent on mock. */
+    bytecode?: `0x${string}`;
+    unsignedTx?: {
+        chainId: number;
+        to: null;
+        value: "0";
+        data: `0x${string}`;
+    };
+    /** Playmos never broadcasts. Studio wallet sends. */
+    broadcast: false;
     constructor: "EpochPrizePool";
     studioHoldsAdmin: true;
     studioHoldsOperator: true;
@@ -1311,6 +1323,12 @@ declare class Playmos {
      */
     private readonly mockByIdempotencyKey;
     constructor(config: PlaymosConfig);
+    /**
+     * Sandbox server-settle when the developer asked (`settle: "server"`) or when
+     * a test key has no wallet. Never calls walletAvailable if the ask is set —
+     * that is the MetaMask-hijack delete (Moonhop leftover Slice 1).
+     */
+    private shouldServerSettle;
     /**
      * Wallet timeout policy (#462 / PR #463 residual).
      * - connectTimeoutMs → eth_requestAccounts only
@@ -1575,4 +1593,4 @@ declare function ulid(seedTime?: number): string;
 /** `${prefix}_${ulid()}` — e.g. `pay_01J…`, `entry_01J…`, `idem_01J…`. */
 declare function prefixedId(prefix: string): string;
 
-export { ActiveSeriesRound, AgentFundResult, AgentWallet, type Authorization, C1_ENTER_SPLIT_MICRO, CHAIN_ID, CancelRoundResult, type CreatePaymentRequirementInput, DEFAULT_API_BASE_URL, EnterRoundInput, type EpochAttestation, type EpochClaimRefundInput, type EpochClaimRefundResult, type EpochClaimableRefund, type EpochClaimableRefundInput, type EpochCreatePoolInput, type EpochCurrentId, type EpochCurrentIdInput, type EpochEnterInput, type EpochEntry, type EpochEntryStatus, type EpochExecuteSettlementInput, type EpochExecuteSettlementResult, type EpochGetAttestationInput, type EpochGetInput, type EpochGetSeriesInput, type EpochPoolOwnership, type EpochPoolWalletProof, type EpochPreparePoolInput, type EpochPreparedPool, type EpochPrize, type EpochPrizeInput, type EpochReadVia, type EpochRegisterPoolInput, type EpochSeriesView, type EpochSettleInput, type EpochSettleResult, type EpochSettleStatus, type EpochSettleWinner, type EpochStudioPool, type EpochTerminal, type EpochView, type EpochWinnerIn, type EpochWithdrawInput, type EpochWithdrawResult, type EpochsApi, EscrowHoldInput, EscrowHoldResult, EscrowResolveResult, Listing, MICRO_PER_USDC, MarketplaceGetResult, MarketplaceListInput, MarketplaceSaleResult, Network, PLAYMOS_FEE_SINK_DEFAULT, PayInput, Payment, type PaymentRequirement, PayoutError, PayoutNoticesResult, PayoutRule, PayoutRule as PayoutRuleCompute, Playmos, PlaymosConfig, PrizeBalance, RoundCancelInput, RoundGetResult, RoundOpenInput, RoundSettleInput, RoundState, SettleRoundResult, type SettlementAsset, type SettlementTypedData, type SettlementTypedDataInput, TransferConfirmOptions, TransferInput, TransferReconcile, TransferResult, USDC_ADDRESS, USDC_DECIMALS, VerifyResult, WaitOptions, type WalletSignatureAuthorization, WebhookEvent, WithdrawResult, type X402ChallengeInput, type X402ChallengeResult, type X402FulfillAuthorization, type X402PayInput, type X402PayloadAuthorization, type X402PayloadMode, type X402PaymentRequired, type X402SettleResult, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, identityToBytes32, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, seriesToBytes32, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };
+export { ActiveSeriesRound, AgentFundResult, AgentWallet, type Authorization, C1_ENTER_SPLIT_MICRO, CHAIN_ID, CancelRoundResult, type CreatePaymentRequirementInput, DEFAULT_API_BASE_URL, EnterRoundInput, type EpochAttestation, type EpochClaimRefundInput, type EpochClaimRefundResult, type EpochClaimableRefund, type EpochClaimableRefundInput, type EpochCreatePoolInput, type EpochCurrentId, type EpochCurrentIdInput, type EpochEnterInput, type EpochEntry, type EpochEntryStatus, type EpochExecuteSettlementInput, type EpochExecuteSettlementResult, type EpochGetAttestationInput, type EpochGetInput, type EpochGetSeriesInput, type EpochPoolOwnership, type EpochPoolWalletProof, type EpochPreparePoolInput, type EpochPreparedPool, type EpochPrize, type EpochPrizeInput, type EpochReadVia, type EpochRegisterPoolInput, type EpochSeriesView, type EpochSettleInput, type EpochSettleResult, type EpochSettleStatus, type EpochSettleWinner, type EpochStudioPool, type EpochTerminal, type EpochView, type EpochWinnerIn, type EpochWithdrawInput, type EpochWithdrawResult, type EpochsApi, EscrowHoldInput, EscrowHoldResult, EscrowResolveResult, Listing, MICRO_PER_USDC, MarketplaceGetResult, MarketplaceListInput, MarketplaceSaleResult, Network, PLAYMOS_FEE_SINK_DEFAULT, PayInput, Payment, type PaymentRequirement, PayoutError, PayoutNoticesResult, PayoutRule, PayoutRule as PayoutRuleCompute, Playmos, PlaymosConfig, PrizeBalance, RETIRED_PLAYMOS_FEE_SINK, RoundCancelInput, RoundGetResult, RoundOpenInput, RoundSettleInput, RoundState, SettleRoundResult, type SettlementAsset, type SettlementTypedData, type SettlementTypedDataInput, TransferConfirmOptions, TransferInput, TransferReconcile, TransferResult, USDC_ADDRESS, USDC_DECIMALS, VerifyResult, WaitOptions, type WalletSignatureAuthorization, WebhookEvent, WithdrawResult, type X402ChallengeInput, type X402ChallengeResult, type X402FulfillAuthorization, type X402PayInput, type X402PayloadAuthorization, type X402PayloadMode, type X402PaymentRequired, type X402SettleResult, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, identityToBytes32, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, seriesToBytes32, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { AuthError, InvalidAmountError, epochPrizePoolEnterAbi, seriesToBytes32, identityToBytes32, encodeApprove, epochPrizePoolRefundAbi, ConfigError, MissingFieldError, buildEpochExecuteSettlementCall, PaymentFailedError, epochPrizePoolViewAbi, ApiError, assertEnoughGas, sendCalls, waitForCalls, NothingToWithdrawError, buildWithdrawCall, WalletTimeoutError, buildIapCalls, buildEntryCalls, prizePoolAbi, WalletConnectionError, AlreadyEnteredError } from './chunk-2CW4U5YB.js';
-export { AlreadyEnteredError, ApiError, AuthError, ConfigError, InsufficientGasError, InvalidAmountError, MissingFieldError, NothingToWithdrawError, PaymentFailedError, PlaymosError, WalletConnectionError, WalletTimeoutError, buildEpochExecuteSettlementCall, identityToBytes32, seriesToBytes32 } from './chunk-2CW4U5YB.js';
+import { AuthError, InvalidAmountError, epochPrizePoolEnterAbi, seriesToBytes32, identityToBytes32, encodeApprove, epochPrizePoolRefundAbi, ConfigError, MissingFieldError, buildEpochExecuteSettlementCall, PaymentFailedError, epochPrizePoolViewAbi, ApiError, assertEnoughGas, sendCalls, waitForCalls, NothingToWithdrawError, buildWithdrawCall, WalletTimeoutError, buildIapCalls, buildEntryCalls, prizePoolAbi, WalletConnectionError, AlreadyEnteredError } from './chunk-TZFGZNXV.js';
+export { AlreadyEnteredError, ApiError, AuthError, ConfigError, InsufficientGasError, InvalidAmountError, MissingFieldError, NothingToWithdrawError, PaymentFailedError, PlaymosError, WalletConnectionError, WalletTimeoutError, buildEpochExecuteSettlementCall, identityToBytes32, seriesToBytes32 } from './chunk-TZFGZNXV.js';
 import { encodeFunctionData, encodeAbiParameters, decodeFunctionResult } from 'viem';
 
 // src/config.ts
@@ -674,7 +674,8 @@ function mockVerifyResult(payment) {
 }
 
 // src/epochs.ts
-var PLAYMOS_FEE_SINK_DEFAULT = "0x1b8031e20ed96131a849a52290b4d640f286998d";
+var PLAYMOS_FEE_SINK_DEFAULT = "0xd84c190085aa59c48a9b478ea333d50b8df4ad42";
+var RETIRED_PLAYMOS_FEE_SINK = "0x1b8031e20ed96131a849a52290b4d640f286998d";
 var EPOCH_POOL_CONSTRUCTOR_TYPES = [
   { type: "address" },
   { type: "address" },
@@ -861,13 +862,17 @@ function sameAddr(a, b) {
 }
 function prepareStudioPoolLocal(input, playmosFeeSink, token, playmosAddresses = []) {
   const studio = requireAddr(input.studioWallet, "studioWallet");
-  const sink = playmosFeeSink.toLowerCase();
+  const locked = PLAYMOS_FEE_SINK_DEFAULT;
+  if (playmosFeeSink && !sameAddr(playmosFeeSink, locked)) {
+    throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
+  }
+  const sink = locked;
   const forbidden = [sink, ...playmosAddresses.map((a) => a.toLowerCase())];
   if (forbidden.some((a) => sameAddr(a, studio))) {
     throw new ConfigError("studioWallet must not be a Playmos address (Playmos never holds studio keys)");
   }
   if (input.feeSink && !sameAddr(input.feeSink, sink)) {
-    throw new ConfigError("feeSink must equal the Playmos sink; refused before broadcast");
+    throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
   }
   if (input.admin && !sameAddr(input.admin, studio)) {
     throw new ConfigError("admin must be the studio wallet from block one");
@@ -898,6 +903,7 @@ function prepareStudioPoolLocal(input, playmosFeeSink, token, playmosAddresses =
       feeSink: sink,
       refundTimeout
     }),
+    broadcast: false,
     constructor: "EpochPrizePool",
     studioHoldsAdmin: true,
     studioHoldsOperator: true,
@@ -1102,8 +1108,11 @@ function createEpochsApi(deps) {
     async preparePool(input) {
       const studioWallet = requireAddr(input?.studioWallet, "studioWallet");
       const cfg = deps.config();
-      const sink = (input.playmosFeeSink ?? PLAYMOS_FEE_SINK_DEFAULT).toLowerCase();
+      const sink = PLAYMOS_FEE_SINK_DEFAULT;
       const token = (input.token ?? cfg.contracts?.usdc ?? "0x036cbd53842c5426634e7929541ec2318f3dcf7e").toLowerCase();
+      if (input.playmosFeeSink && !sameAddr(input.playmosFeeSink, sink)) {
+        throw new ConfigError("feeSink must equal the Playmos Sepolia treasury; refused before broadcast");
+      }
       if (cfg.mock) {
         return prepareStudioPoolLocal({ ...input, studioWallet }, sink, token);
       }
@@ -1809,7 +1818,7 @@ var Playmos = class {
       },
       walletAddress: async () => getAccount(this.walletProvider()),
       readView: async (to, data) => {
-        if (await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+        if (!await this.shouldServerSettle() && await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
           const provider = this.walletProvider();
           return await provider.request({
             method: "eth_call",
@@ -2910,8 +2919,14 @@ var Playmos = class {
         );
       }
     }
+    if (config.settle === "server" && !this.env.isTest) {
+      throw new ConfigError(
+        'settle: "server" is sandbox-only. Live keys must use a player wallet \u2014 never server-settle real money.',
+        { field: "settle" }
+      );
+    }
     this.http = createHttpClient(this.env.apiBaseUrl, config.apiKey, config.retry);
-    if (!config.mock) {
+    if (!config.mock && config.settle !== "server") {
       try {
         resolveProvider(config.wallet, this.walletTimeoutPolicy());
       } catch {
@@ -2981,6 +2996,23 @@ var Playmos = class {
       return 0n;
     }
   }
+  /**
+   * Sandbox server-settle when the developer asked (`settle: "server"`) or when
+   * a test key has no wallet. Never calls walletAvailable if the ask is set —
+   * that is the MetaMask-hijack delete (Moonhop leftover Slice 1).
+   */
+  async shouldServerSettle() {
+    if (this.config.settle === "server") {
+      if (!this.env.isTest) {
+        throw new ConfigError(
+          'settle: "server" is sandbox-only. Live keys must use a player wallet \u2014 never server-settle real money.',
+          { field: "settle" }
+        );
+      }
+      return true;
+    }
+    return this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy());
+  }
   /**
    * Wallet timeout policy (#462 / PR #463 residual).
    * - connectTimeoutMs → eth_requestAccounts only
@@ -3108,7 +3140,7 @@ var Playmos = class {
         heldIdem ? { key: heldIdem, terms } : void 0
       );
     }
-    if (this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+    if (await this.shouldServerSettle()) {
       const res = await this.http.post(
         "/payments",
         {
@@ -3213,7 +3245,7 @@ var Playmos = class {
         heldIdem ? { key: heldIdem, terms } : void 0
       );
     }
-    const serverSettleNoWallet = this.env.isTest && !await walletAvailable(this.config.wallet, this.walletTimeoutPolicy());
+    const serverSettleNoWallet = await this.shouldServerSettle();
     if (!serverSettleNoWallet) {
       const pinned = typeof input.identity === "string" ? input.identity.trim() : "";
       if (!pinned) {
@@ -3543,7 +3575,7 @@ var Playmos = class {
     });
     let raw;
     try {
-      if (await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
+      if (!await this.shouldServerSettle() && await walletAvailable(this.config.wallet, this.walletTimeoutPolicy())) {
         const provider = this.walletProvider();
         raw = await provider.request({
           method: "eth_call",
@@ -3755,4 +3787,4 @@ function isX402PayloadAuthorization(auth) {
   return auth.kind === "x402-payload";
 }
 
-export { C1_ENTER_SPLIT_MICRO, CHAIN_ID, DEFAULT_API_BASE_URL, MICRO_PER_USDC, PLAYMOS_FEE_SINK_DEFAULT, PayoutError, Playmos, USDC_ADDRESS, USDC_DECIMALS, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };
+export { C1_ENTER_SPLIT_MICRO, CHAIN_ID, DEFAULT_API_BASE_URL, MICRO_PER_USDC, PLAYMOS_FEE_SINK_DEFAULT, PayoutError, Playmos, RETIRED_PLAYMOS_FEE_SINK, USDC_ADDRESS, USDC_DECIMALS, buildEpochClaimRefundCall, buildEpochEntryCalls, buildEpochWithdrawCall, clientRuntimeSignals, computeIapSplit, computePayout, computePoolSplit, createEpochsApi, createPaymentRequirement, createX402Challenge, decodePaymentHeader, derivedEpochId, encodeEpochPoolConstructorArgs, encodePaymentHeader, epochPayableMicro, epochPoolProofMessage, formatMicroToUsd, isClientRuntime, isWalletSignatureAuthorization, isX402PayloadAuthorization, networkToCaip2, parsePaymentRequirement, parseUsdToMicro, prefixedId, prepareStudioPoolLocal, previewEscrowFee, previewIapSplit, previewMarketplaceSplit, previewPoolSplit, previewTransferSplit, resolveEnv, serializePaymentRequirement, settlementTypedData, toX402PaymentRequired, ulid, validateX402ChallengeInput };

package/dist/server.d.cts

@@ -1,5 +1,5 @@
-import { a2 as PlaymosError, W as WebhookEvent } from './errors-CYKgt2VU.cjs';
-export { ad as enterPathToBytes32 } from './errors-CYKgt2VU.cjs';
+import { a2 as PlaymosError, W as WebhookEvent } from './errors-WcDNfb4q.cjs';
+export { ad as enterPathToBytes32 } from './errors-WcDNfb4q.cjs';
 
 /**
  * Webhook signature verification (spec §6.2) — server-side only.

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { a2 as PlaymosError, W as WebhookEvent } from './errors-CYKgt2VU.js';
-export { ad as enterPathToBytes32 } from './errors-CYKgt2VU.js';
+import { a2 as PlaymosError, W as WebhookEvent } from './errors-WcDNfb4q.js';
+export { ad as enterPathToBytes32 } from './errors-WcDNfb4q.js';
 
 /**
  * Webhook signature verification (spec §6.2) — server-side only.

package/dist/server.js

@@ -1,5 +1,5 @@
-import { PlaymosError, ApiError, toBytes32 } from './chunk-2CW4U5YB.js';
-export { toBytes32 as enterPathToBytes32 } from './chunk-2CW4U5YB.js';
+import { PlaymosError, ApiError, toBytes32 } from './chunk-TZFGZNXV.js';
+export { toBytes32 as enterPathToBytes32 } from './chunk-TZFGZNXV.js';
 import { timingSafeEqual, createHmac } from 'crypto';
 import { encodeFunctionData, decodeFunctionResult } from 'viem';
 

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@playmos/sdk",
-  "version": "0.3.12",
-  "description": "Playmos SDK — stablecoin payments for games on Base. One SDK for IAP (1%), skill-game prize-pool entries (10%, 60/30/10), and agent economies. USD in, USDC on-chain, no crypto UX for players.",
-  "license": "UNLICENSED",
+  "version": "0.3.14",
+  "description": "Playmos SDK — stablecoin payments for games on Base. IAP and skill contests are flat 1%. USD in, USDC on-chain, no crypto UX for players.",
+  "license": "MIT",
   "private": false,
   "homepage": "https://playmos-docs-public.vercel.app/",
   "bugs": {
@@ -34,6 +34,7 @@
     "!dist/**/*.map",
     "README.md",
     "CHANGELOG.md",
+    "LICENSE",
     "package.json"
   ],
   "scripts": {