@rozoai/checkout 0.1.2 → 0.1.3

package/README.md

@@ -32,7 +32,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Polygon | `usdt-polygon` `usdc-polygon` | `137` | 6 decimals |
 | Base | `usdc-base` | `8453` | 6 decimals |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL; native SOL not supported |
-| Stellar | `usdc-stellar` | `1500` | memo required — shown in the deposit block |
+| Stellar | `usdc-stellar` | `1500` | `MEMO_TEXT` memo required — shown in the deposit block |
 | Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; amounts in satoshis |
 
 Native gas coins (SOL, BNB, ETH, MATIC) and on-chain BTC are not accepted.
@@ -169,7 +169,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -183,7 +184,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -197,7 +199,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -211,7 +214,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -226,7 +230,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -240,7 +245,8 @@ openclaw agent exec "Pay this OpenRouter link with USDT on Solana by running: np
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -255,7 +261,8 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 <details>
@@ -304,7 +311,8 @@ If the agent has no shell but can make HTTP requests, it can drive the four
 public endpoints directly — see [how it works](docs/how-it-works.md).
 
 Wallet: any wallet, no key. `--send` signs locally using your Solana CLI
-keypair or an encrypted keystore.
+keypair or an encrypted keystore, and supports EVM chains and Solana only —
+Stellar and Lightning are Mode A only.
 </details>
 
 ## Three rules worth knowing
@@ -313,6 +321,10 @@ keypair or an encrypted keystore.
   cached response or a screenshot.
 - **Send the exact amount shown.** It is normally larger than the invoice — it
   includes the bridge and network fees.
+- **Stellar deposits carry a memo, and it is `MEMO_TEXT`** — even when it looks
+  like a number (`65371582` is text, not an id). Sending it as `MEMO_ID`
+  produces a different memo and the payment will not be matched. The deposit
+  block states the type as `receiverMemoType`.
 - **Never pay a funded order twice.** If a payment has already been detected,
   stop and get a human to reconcile it; a second payment to a one-time address
   is not guaranteed to be credited.
@@ -331,6 +343,15 @@ The full list of what this refuses to do, and why, is in
 
 ## Changelog
 
+- **0.1.3** — fixes found by the first real payment. The built bundles no
+  longer crash with `__filename is not defined` on Node 22+ (the esbuild banner
+  now shims `__filename`/`__dirname` as well as `require`, and every bundle is
+  now executed by the test suite). Stellar deposits state their memo type
+  (`MEMO_TEXT`, even when the memo looks numeric). Orders show remaining
+  validity as a duration ("expires in 47m") in the deposit block and in
+  `status`, with the exact command to make a fresh one. Reusing an existing
+  unpaid order, and asking for a coin that differs from it, are both explained
+  instead of reading as errors.
 - **0.1.2** — Mode B no longer needs a raw private key in an environment
   variable. On Solana it uses the `~/.config/solana/id.json` that
   `solana-keygen` already wrote; on EVM an encrypted V3 keystore whose

package/docs/QUICKSTART.es.md

@@ -159,6 +159,7 @@ exigen los scripts de envío.
 ```
 
 Enviar exactamente los campos que entrega este bloque. Para Lightning,
+En Stellar el memo es **`MEMO_TEXT`** aunque parezca numérico: enviarlo como `MEMO_ID` no coincidirá. `deposit.expiresIn` indica cuánto sigue siendo válida la orden.
 `deposit.lnInvoice` contiene la cadena BOLT11 que hay que escanear, y
 `deposit.amount` está en satoshis.
 
@@ -182,8 +183,9 @@ Eso es todo el Modo A. Continuar en el paso 5.
 
 ### La forma opcional: dejar que el script pague (Modo B)
 
-Solo si se quiere que esta máquina firme, y únicamente en cadenas EVM y Solana.
-Esta es la única parte que necesita una clave.
+Solo si se quiere que esta máquina firme, y únicamente en **cadenas EVM y
+Solana**: no hay `--send` para Stellar ni Lightning, que se pagan desde la
+propia billetera. Esta es la única parte que necesita una clave.
 
 **Solana: usar el par de claves que ya se tiene.** Si alguna vez se ejecutó
 `solana-keygen`, `~/.config/solana/id.json` ya existe y se usa automáticamente:

package/docs/QUICKSTART.ja.md

@@ -141,6 +141,7 @@ node scripts/dist/create-order.js --url "$LINK" --chain 900 --token USDT --confi
 ```
 
 このブロックが示すフィールドを、そのとおりに送金してください。Lightning の場合、
+Stellar の memo は数字に見えても**常に `MEMO_TEXT`** です — `MEMO_ID` として送ると一致しません。`deposit.expiresIn` に残りの有効時間が出ます。
 `deposit.lnInvoice` にスキャン用の BOLT11 文字列が入り、`deposit.amount` は
 satoshi 単位になります。
 
@@ -163,8 +164,8 @@ satoshi 単位になります。
 
 ### 任意の方法: スクリプトに支払わせる（モード B）
 
-このマシンに署名させたい場合のみで、対象は EVM チェーンと Solana だけです。鍵が
-必要なのはこの部分だけです。
+このマシンに署名させたい場合のみで、対象は **EVM チェーンと Solana だけ**です。Stellar と
+Lightning に `--send` はなく、自分のウォレットから支払います。鍵が必要なのはこの部分だけです。
 
 **Solana — すでにある鍵ペアをそのまま使います。** `solana-keygen` を一度でも実行して
 いれば `~/.config/solana/id.json` が既に存在し、自動的に使われます:

package/docs/QUICKSTART.md

@@ -151,7 +151,10 @@ scripts require.
 }
 ```
 
-Send exactly the fields this block gives you. For Lightning,
+Send exactly the fields this block gives you. On Stellar the memo is
+**`MEMO_TEXT`** even when it looks numeric — sending it as `MEMO_ID` will not
+match. `deposit.expiresIn` tells you how long the order stays valid. For
+Lightning,
 `deposit.lnInvoice` holds the BOLT11 string to scan, and `deposit.amount` is
 in satoshis.
 
@@ -174,8 +177,9 @@ That is the whole of Mode A. Skip to step 5.
 
 ### The optional way: let the script pay (Mode B)
 
-Only if you want this machine to sign for you, and only on EVM chains and
-Solana. This is the only part that needs a key.
+Only if you want this machine to sign for you, and only on **EVM chains and
+Solana** — there is no `--send` for Stellar or Lightning, which are paid from
+your own wallet. This is the only part that needs a key.
 
 **Solana — use the keypair you already have.** If you have ever run
 `solana-keygen`, `~/.config/solana/id.json` already exists and is used

package/docs/QUICKSTART.zh.md

@@ -129,7 +129,7 @@ node scripts/dist/create-order.js --url "$LINK" --chain 900 --token USDT --confi
 }
 ```
 
-严格按这个信息块给出的字段来发送。对于 Lightning，`deposit.lnInvoice` 里是供扫码的
+严格按这个信息块给出的字段来发送。Stellar 上的 memo 即使看起来是纯数字，也**始终是 `MEMO_TEXT`** —— 按 `MEMO_ID` 发送不会被匹配上。`deposit.expiresIn` 会告诉你订单还有多久过期。对于 Lightning，`deposit.lnInvoice` 里是供扫码的
 BOLT11 字符串，`deposit.amount` 的单位是聪 (satoshis)。
 
 ## 4. 付款
@@ -150,8 +150,8 @@ BOLT11 字符串，`deposit.amount` 的单位是聪 (satoshis)。
 
 ### 可选的方式：让脚本替你付（模式 B）
 
-只有当你想让这台机器替你签名时才需要，而且只支持 EVM 链和 Solana。这是整个流程里
-唯一需要私钥的部分。
+只有当你想让这台机器替你签名时才需要，而且**只支持 EVM 链和 Solana** —— Stellar 和
+闪电网络没有 `--send`，只能用你自己的钱包付。这是整个流程里唯一需要私钥的部分。
 
 **Solana —— 直接用你已有的密钥对。** 只要你跑过 `solana-keygen`，
 `~/.config/solana/id.json` 就已经存在，脚本会自动使用它：

package/docs/README.es.md

@@ -34,7 +34,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Polygon | `usdt-polygon` `usdc-polygon` | `137` | 6 decimales |
 | Base | `usdc-base` | `8453` | 6 decimales |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL; SOL nativo no admitido |
-| Stellar | `usdc-stellar` | `1500` | memo obligatorio — se muestra en el bloque de depósito |
+| Stellar | `usdc-stellar` | `1500` | memo `MEMO_TEXT` obligatorio — se muestra en el bloque de depósito |
 | Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; importes en satoshis |
 
 Las monedas de gas nativas (SOL, BNB, ETH, MATIC) y el BTC on-chain no se aceptan.
@@ -103,7 +103,7 @@ Para pagar un enlace de pago de OpenRouter / Coinbase, ejecuta:
 npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
-Billetera: cualquier billetera, **sin clave**. Solo `--send` la necesita: firma localmente con el par de claves de la CLI de Solana o un keystore cifrado.
+Billetera: cualquier billetera, **sin clave**. Solo `--send` la necesita: firma localmente con el par de claves de la CLI de Solana o un keystore cifrado, y solo admite cadenas EVM y Solana (Stellar y Lightning son solo Modo A).
 </details>
 
 <details>
@@ -329,6 +329,14 @@ La lista completa de lo que esta herramienta se niega a hacer, y por qué, está
 
 ## Registro de cambios
 
+- **0.1.3** — Correcciones surgidas del primer pago real. Los bundles ya no fallan
+  con `__filename is not defined` en Node 22+ (el banner de esbuild ahora define
+  `__filename`/`__dirname` además de `require`, y las pruebas ejecutan cada bundle
+  de verdad). Los depósitos de Stellar indican el tipo de memo (`MEMO_TEXT`, aunque
+  el memo parezca numérico). Las órdenes muestran la validez restante como duración
+  ("expires in 47m") en el bloque de depósito y en `status`, con el comando exacto
+  para crear una nueva. Reutilizar una orden impaga existente, y pedir una moneda
+  distinta a la suya, ahora se explican en lugar de parecer errores.
 - **0.1.2** — El Modo B ya no necesita una clave privada en bruto en una variable
   de entorno. En Solana usa el `~/.config/solana/id.json` que `solana-keygen` ya
   creó; en EVM un keystore V3 cifrado cuya frase de contraseña se solicita.

package/docs/README.ja.md

@@ -33,7 +33,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Polygon | `usdt-polygon` `usdc-polygon` | `137` | 小数点以下 6 桁 |
 | Base | `usdc-base` | `8453` | 小数点以下 6 桁 |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL。ネイティブの SOL は非対応 |
-| Stellar | `usdc-stellar` | `1500` | メモが必須 — 入金ブロックに表示されます |
+| Stellar | `usdc-stellar` | `1500` | `MEMO_TEXT` のメモが必須 — 入金ブロックに表示されます |
 | Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11。金額は satoshi 単位 |
 
 ネイティブのガス通貨（SOL、BNB、ETH、MATIC）およびオンチェーンの BTC は受け付けません。
@@ -89,7 +89,7 @@ OpenRouter / Coinbase の決済リンクを支払うには、次を実行して
 npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
-ウォレット: どのウォレットでも構いません。**鍵は不要です。** Solana CLI の鍵ペアまたは暗号化された keystore を使う `--send` の場合だけ
+ウォレット: どのウォレットでも構いません。**鍵は不要です。** Solana CLI の鍵ペアまたは暗号化された keystore を使う `--send`（EVM チェーンと Solana のみ、Stellar と Lightning はモード A 専用）の場合だけ
 環境変数の鍵が必要です。
 </details>
 
@@ -320,6 +320,13 @@ WalletConnect 専用のモバイルウォレット、取引所アカウント。
 
 ## 変更履歴
 
+- **0.1.3** — 最初の実際の支払いで見つかった不具合の修正。ビルド済みバンドルが Node 22 以降で
+  `__filename is not defined` により停止しなくなりました（esbuild の banner が `require` に加えて
+  `__filename`/`__dirname` も定義し、テストが各バンドルを実際に実行するようになりました）。Stellar の
+  入金では memo の種類（`MEMO_TEXT`。memo が数字に見える場合も同様）を明示します。注文の残り有効時間を
+  入金ブロックと `status` の両方で継続時間として表示し（"expires in 47m"）、期限切れ時には新しい注文を
+  作るコマンドをそのまま示します。既存の未払い注文の再利用と、それと異なる通貨を指定した場合の双方を、
+  エラーではなく説明として提示します。
 - **0.1.2** — モード B で環境変数に生の秘密鍵を置く必要がなくなりました。Solana では
   `solana-keygen` が既に作成した `~/.config/solana/id.json` を、EVM では暗号化された
   V3 keystore（パスフレーズは対話的に入力）を使います。`--keyfile` でどちらも明示でき、

package/docs/README.zh.md

@@ -30,7 +30,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Polygon | `usdt-polygon` `usdc-polygon` | `137` | 6 位小数 |
 | Base | `usdc-base` | `8453` | 6 位小数 |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL；不支持原生 SOL |
-| Stellar | `usdc-stellar` | `1500` | 必须带 memo —— 会在充值信息块里给出 |
+| Stellar | `usdc-stellar` | `1500` | 必须带 `MEMO_TEXT` memo —— 会在充值信息块里给出 |
 | Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11；金额单位为聪 |
 
 原生 gas 币（SOL、BNB、ETH、MATIC）以及链上 BTC 均不接受。
@@ -82,7 +82,7 @@ Codex 会读取项目根目录的 `AGENTS.md`。加一条常驻指令，它就
 npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 ```
 
-钱包：任意钱包，**无需私钥**。只有 `--send` 需要，它用你的 Solana CLI 密钥对或加密 keystore 在本地签名。
+钱包：任意钱包，**无需私钥**。只有 `--send` 需要，它用你的 Solana CLI 密钥对或加密 keystore 在本地签名；仅支持 EVM 链和 Solana —— Stellar 与闪电网络只能用模式 A。
 </details>
 
 <details>
@@ -292,6 +292,12 @@ echo '.env' >> .gitignore
 
 ## 更新日志
 
+- **0.1.3** —— 第一笔真实付款暴露出来的问题修复。构建产物在 Node 22+ 上不再因
+  `__filename is not defined` 崩溃（esbuild banner 现在同时注入 `__filename`/`__dirname`
+  和 `require`，并且测试会真正执行每一个构建产物）。Stellar 充值现在会明确标出 memo
+  类型（`MEMO_TEXT`，即使 memo 看起来是纯数字）。订单在充值信息块和 `status` 里都会以
+  时长显示剩余有效期（"expires in 47m"），过期时给出重新下单的完整命令。复用已有的未付
+  订单、以及所选币种与已有订单不一致这两种情况，现在都会被解释清楚，而不是看起来像报错。
 - **0.1.2** —— 模式 B 不再需要把原始私钥放进环境变量。Solana 直接用 `solana-keygen`
   已经写好的 `~/.config/solana/id.json`；EVM 用加密的 V3 keystore，口令交互式提示输入。
   `--keyfile` 可以显式指定其中任一种，相关设置也可以放进已 gitignore 的 `.env`。

package/llms.txt

@@ -54,6 +54,8 @@ Where the material comes from:
   `cast wallet import <name> --interactive` writes a V3 keystore to
   ~/.foundry/keystores/<name>; `geth account import` also writes one. Browser
   wallets do not export keystores, only raw keys.
+- --send supports EVM chains and Solana ONLY. Stellar and Lightning are paid
+  from the user's own wallet (Mode A); there is no local signing for them.
 - Hardware wallets, WalletConnect-only wallets and exchange accounts CANNOT be
   used with --send. Those users take the default keyless path, which works with
   any wallet.
@@ -108,7 +110,11 @@ private key (EVM and Solana only); every other path is keyless.
    Pay EXACTLY source.amount of the requested token on the requested chain to
    source.receiverAddress, including every other field the block carries (Stellar
    routes on a shared hub address plus source.receiverMemo, so omitting the memo
-   loses the payment).
+   loses the payment). The Stellar memo is ALWAYS MEMO_TEXT, even when it is all
+   digits (e.g. 65371582) — sending it as MEMO_ID produces a different memo and
+   the payment will not match. The deposit block reports this as
+   receiverMemoType. Orders expire: deposit.expiresIn / status expiry.expiresIn
+   give the remaining validity as a duration.
    For Lightning, pay the BOLT11 in source.lnInvoice (receiverAddress is empty).
 
 4) Poll until settled:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rozoai/checkout",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "description": "Pay an OpenRouter Coinbase Payment Link with BTC Lightning, or USDT/USDC on Solana, BNB Chain, Ethereum, Polygon, Base or Stellar.",
   "license": "MIT",

package/scripts/dist/cli.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -41655,6 +41659,7 @@ function formatAmount(source) {
 function chainName(chainId) {
   return CHAIN_NAMES[String(chainId)] || CHAIN_NAMES[chainId] || `chain ${chainId}`;
 }
+var STELLAR_MEMO_TYPE = "MEMO_TEXT";
 function chainFamily(chainId) {
   return CHAIN_FAMILY[String(chainId)] || CHAIN_FAMILY[chainId] || null;
 }
@@ -42701,6 +42706,16 @@ var MARGINS_MS = {
 };
 var BOLT11_MIN_VALIDITY_MS = 10 * MINUTE;
 var DEFAULT_MARGIN_MS = 10 * MINUTE;
+function formatRemaining(ms) {
+  if (!Number.isFinite(ms)) return "unknown";
+  if (ms <= 0) return "expired";
+  const totalMinutes = Math.floor(ms / 6e4);
+  if (totalMinutes < 1) return `${Math.floor(ms / 1e3)}s`;
+  if (totalMinutes < 60) return `${totalMinutes}m`;
+  const h = Math.floor(totalMinutes / 60);
+  const m = totalMinutes % 60;
+  return m ? `${h}h ${m}m` : `${h}h`;
+}
 function marginFor(chainId) {
   const key = String(chainId);
   return MARGINS_MS[key] ?? MARGINS_MS[chainId] ?? DEFAULT_MARGIN_MS;
@@ -43342,6 +43357,33 @@ async function main2(argv) {
   const rozoPaymentId = assertRozoPaymentId(created.rozoPaymentId);
   const verify = verifyCreateAgainstQuote({ snapshot: snapshot2, created, requested });
   if (!verify.ok) {
+    const onlySourceDrift = verify.drift.length > 0 && verify.drift.every((d) => d.field.startsWith("source."));
+    if (created.reused && onlySourceDrift) {
+      const existing = created.source || {};
+      const remainingMs = created.expiresAt ? Date.parse(created.expiresAt) - Date.now() : NaN;
+      emit(
+        {
+          success: false,
+          step: "reuse-source-mismatch",
+          error: {
+            code: "REUSED_SOURCE_MISMATCH",
+            message: `This link already has an unpaid order, created for ${existing.tokenSymbol ?? "?"} on chain ${existing.chainId ?? "?"}. You asked for ${tokenSymbol} on chain ${chainId}. Only one order exists per link at a time, so nothing new was created.`
+          },
+          linkId: created.linkId ?? parsedLinkId,
+          rozoPaymentId,
+          paymentLink: created.paymentLink ?? null,
+          existingOrder: {
+            rozoPaymentId,
+            chainId: existing.chainId ?? null,
+            tokenSymbol: existing.tokenSymbol ?? null,
+            expiresAt: created.expiresAt ?? null,
+            expiresIn: Number.isFinite(remainingMs) ? formatRemaining(remainingMs) : null
+          },
+          guidance: `Either pay the existing order with ${existing.tokenSymbol ?? "its own coin"} (re-run with --chain ${existing.chainId} --token ${existing.tokenSymbol}), or wait ${Number.isFinite(remainingMs) ? formatRemaining(remainingMs) : "for it to expire"} for it to expire and then create a new one. Unpaid orders cost nothing.`
+        },
+        EXIT_ERROR
+      );
+    }
     emit(
       {
         success: false,
@@ -43463,7 +43505,8 @@ async function main2(argv) {
     step: "create-order",
     confirmed,
     reused: Boolean(created.reused),
-    reusedNote: created.reused ? "An existing unfunded order for this link was reused; it passed the funded-check above." : null,
+    reusedNote: created.reused ? `An existing unpaid order for this link was reused (${rozoPaymentId}), valid for another ${formatRemaining(expiry.msRemaining)}. Nothing new was created.` : null,
+    orderCost: "Creating an order moves no money. An order you never fund simply expires and costs nothing.",
     linkId: created.linkId ?? parsedLinkId,
     rozoPaymentId,
     paymentLink: created.paymentLink ?? null,
@@ -43481,12 +43524,16 @@ async function main2(argv) {
       // Lightning has no deposit address: the BOLT11 IS the instruction.
       receiverAddress: lightning ? null : source.receiverAddress,
       receiverMemo: source.receiverMemo ?? null,
+      // Stellar memos are TEXT even when they look numeric. Sending one as
+      // MEMO_ID produces a different memo and the payment will not match.
+      receiverMemoType: source.receiverMemo ? STELLAR_MEMO_TYPE : null,
       amount: source.amount,
       amountUnit: source.amountUnit ?? null,
       isSats: isSatsUnit(source.amountUnit),
       lnInvoice: bolt11 || null,
       payTo: depositInfo.payTo,
-      expiresAt: payment?.expiresAt ?? null
+      expiresAt: payment?.expiresAt ?? null,
+      expiresIn: formatRemaining(expiry.msRemaining)
     } : null,
     depositWithheld: !confirmed,
     // Safe for prose / chat.
@@ -43498,12 +43545,16 @@ async function main2(argv) {
       payToMasked: maskAddress2(depositInfo.payTo),
       receiverMemoMasked: maskMemo(source.receiverMemo),
       hasMemo: Boolean(source.receiverMemo),
+      memoType: source.receiverMemo ? STELLAR_MEMO_TYPE : null,
       memoRequirement
     },
     expiry: {
       intentExpiresAt: payment?.expiresAt ?? null,
       coinbaseExpiry: snapshot2?.coinbase?.preApprovalExpiry ?? null,
       effectiveDeadlineIso: new Date(expiry.effectiveDeadlineMs).toISOString(),
+      // A duration, not just a timestamp: this is what a payer actually needs.
+      expiresIn: formatRemaining(expiry.msRemaining),
+      msRemaining: expiry.msRemaining,
       marginMinutes: Math.round(expiry.marginMs / 6e4),
       minutesOfSlack: Math.floor(expiry.msOfSlack / 6e4)
     },
@@ -43599,6 +43650,16 @@ async function snapshot({ rozoPaymentId, linkId }) {
       senderAddressMasked: source.senderAddress ? maskAddress2(source.senderAddress) : null,
       chain: source.chainId ? chainName(source.chainId) : null
     },
+    expiry: (() => {
+      const iso = payment?.expiresAt ?? status?.rozoPayment?.expiresAt ?? null;
+      if (!iso) return { expiresAt: null, expiresIn: null, msRemaining: null };
+      const ms = Date.parse(iso) - Date.now();
+      return {
+        expiresAt: iso,
+        expiresIn: formatRemaining(ms),
+        msRemaining: Number.isFinite(ms) ? ms : null
+      };
+    })(),
     payout: {
       txHash: payment?.destination?.txHash ?? status?.rozoPayment?.destination?.txHash ?? null,
       confirmedAt: payment?.destination?.confirmedAt ?? status?.rozoPayment?.destination?.confirmedAt ?? null
@@ -43624,7 +43685,7 @@ async function main3(argv) {
     if (next.state !== result.state) history.push({ at: (/* @__PURE__ */ new Date()).toISOString(), state: next.state });
     result = next;
   }
-  const guidance = result.escalate ? "MONEY DETECTED and the order is not on a healthy path. Do NOT pay again and do NOT create a new order for this link. Preserve linkId, rozoPaymentId and every tx hash, then escalate to the operator for manual reconciliation." : result.unknown ? "The order state could not be established. This is NOT evidence that nothing was paid \u2014 do not create a new order and do not send again on the strength of it. Retry, or pass --rozo-payment-id so the authoritative pay-in view can be read." : !result.authoritativeView ? "Only the fulfilment view was readable; the pay-in view is unavailable, so the money-detected rule cannot be enforced. Pass --rozo-payment-id for a complete answer." : result.state === "expired_unfunded" ? "Nothing was funded. It is safe to start over with a fresh link." : result.terminal ? "Done." : "Still in flight. Poll again in ~10s.";
+  const guidance = result.escalate ? "MONEY DETECTED and the order is not on a healthy path. Do NOT pay again and do NOT create a new order for this link. Preserve linkId, rozoPaymentId and every tx hash, then escalate to the operator for manual reconciliation." : result.unknown ? "The order state could not be established. This is NOT evidence that nothing was paid \u2014 do not create a new order and do not send again on the strength of it. Retry, or pass --rozo-payment-id so the authoritative pay-in view can be read." : !result.authoritativeView ? "Only the fulfilment view was readable; the pay-in view is unavailable, so the money-detected rule cannot be enforced. Pass --rozo-payment-id for a complete answer." : result.state === "expired_unfunded" ? "Nothing was funded, so nothing was lost. Start a fresh order with: rozo-checkout pay <coinbase-link> --with <coin>  (or create-order.js --url <link> --chain <id> --token <SYMBOL>)" : result.terminal ? "Done." : "Still in flight. Poll again in ~10s.";
   const unresolved = watch && !result.terminal && !result.escalate && !result.unknown;
   const failed = result.escalate || result.unknown || !result.authoritativeView;
   emit(
@@ -57910,6 +57971,9 @@ async function cmdStatus(opts) {
   out();
   out(`  State   ${stateLabel(payload.state)}`);
   if (payload.detail) out(`  ${dim(payload.detail)}`);
+  if (payload.expiry?.expiresIn && !payload.terminal) {
+    out(`  Expires in ${payload.expiry.expiresIn}`);
+  }
   if (payload.payin?.txHash) out(`  Pay-in  ${payload.payin.txHash}`);
   if (payload.guidance) out(`  ${payload.escalate ? red(payload.guidance) : dim(payload.guidance)}`);
   printMoneyWarning(payload);
@@ -57996,9 +58060,14 @@ async function cmdPay(opts) {
     out(`  Invoice   ${bold(`${p.invoice?.amount} ${p.invoice?.currency ?? "USD"}`)}`);
     out(`  You send  ${bold(p.display?.amount)} on ${bold(p.display?.chain)}`);
     out(`  To        ${p.display?.payToMasked} ${dim("(full address shown after you confirm)")}`);
-    if (p.display?.hasMemo) out(`  Memo      ${p.display.receiverMemoMasked}`);
-    out(`  Expires   ${p.expiry?.effectiveDeadlineIso} ${dim(`(${p.expiry?.minutesOfSlack} min of slack)`)}`);
-    if (p.reused) out(`  ${dim("Reused an existing unfunded order for this link.")}`);
+    if (p.display?.hasMemo) {
+      out(`  Memo      ${p.display.receiverMemoMasked} ${dim(`(${p.display.memoType})`)}`);
+    }
+    out(`  Expires   in ${bold(p.expiry?.expiresIn ?? "?")} ${dim(`(${p.expiry?.effectiveDeadlineIso})`)}`);
+    if (p.reused) {
+      out(`  ${dim(`Reusing the existing unpaid order ${p.rozoPaymentId} \u2014 nothing new was created.`)}`);
+    }
+    out(`  ${dim("An order you never fund simply expires and costs nothing.")}`);
     out();
     out(dim(`  The amount you send includes bridge and network fees, so it is`));
     out(dim(`  normally larger than the invoice.`));
@@ -58127,7 +58196,12 @@ function printDeposit(deposit, opts) {
     out(`    Amount   ${bold(`${deposit.amount} ${deposit.tokenSymbol}`)}`);
     out(`    Chain    ${bold(deposit.chain)}`);
     out(`    Address  ${bold(deposit.receiverAddress)}`);
-    if (deposit.receiverMemo) out(`    Memo     ${bold(deposit.receiverMemo)} ${red("(required)")}`);
+    if (deposit.receiverMemo) {
+      out(
+        `    Memo     ${bold(deposit.receiverMemo)}  ${red(`(required, ${deposit.receiverMemoType})`)}`
+      );
+    }
+    if (deposit.expiresIn) out(`    Expires  in ${bold(deposit.expiresIn)}`);
   }
   out();
   const unit = isSatsUnit(deposit.amountUnit) ? "sats" : deposit.tokenSymbol;

package/scripts/dist/create-order.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 
 // scripts/src/lib/output.mjs
 var EXIT_OK = 0;
@@ -396,6 +400,7 @@ function formatAmount(source) {
 function chainName(chainId) {
   return CHAIN_NAMES[String(chainId)] || CHAIN_NAMES[chainId] || `chain ${chainId}`;
 }
+var STELLAR_MEMO_TYPE = "MEMO_TEXT";
 function chainFamily(chainId) {
   return CHAIN_FAMILY[String(chainId)] || CHAIN_FAMILY[chainId] || null;
 }
@@ -418,6 +423,16 @@ var MARGINS_MS = {
 };
 var BOLT11_MIN_VALIDITY_MS = 10 * MINUTE;
 var DEFAULT_MARGIN_MS = 10 * MINUTE;
+function formatRemaining(ms) {
+  if (!Number.isFinite(ms)) return "unknown";
+  if (ms <= 0) return "expired";
+  const totalMinutes = Math.floor(ms / 6e4);
+  if (totalMinutes < 1) return `${Math.floor(ms / 1e3)}s`;
+  if (totalMinutes < 60) return `${totalMinutes}m`;
+  const h = Math.floor(totalMinutes / 60);
+  const m = totalMinutes % 60;
+  return m ? `${h}h ${m}m` : `${h}h`;
+}
 function marginFor(chainId) {
   const key = String(chainId);
   return MARGINS_MS[key] ?? MARGINS_MS[chainId] ?? DEFAULT_MARGIN_MS;
@@ -1135,6 +1150,33 @@ async function main(argv) {
   const rozoPaymentId = assertRozoPaymentId(created.rozoPaymentId);
   const verify = verifyCreateAgainstQuote({ snapshot, created, requested });
   if (!verify.ok) {
+    const onlySourceDrift = verify.drift.length > 0 && verify.drift.every((d) => d.field.startsWith("source."));
+    if (created.reused && onlySourceDrift) {
+      const existing = created.source || {};
+      const remainingMs = created.expiresAt ? Date.parse(created.expiresAt) - Date.now() : NaN;
+      emit(
+        {
+          success: false,
+          step: "reuse-source-mismatch",
+          error: {
+            code: "REUSED_SOURCE_MISMATCH",
+            message: `This link already has an unpaid order, created for ${existing.tokenSymbol ?? "?"} on chain ${existing.chainId ?? "?"}. You asked for ${tokenSymbol} on chain ${chainId}. Only one order exists per link at a time, so nothing new was created.`
+          },
+          linkId: created.linkId ?? parsedLinkId,
+          rozoPaymentId,
+          paymentLink: created.paymentLink ?? null,
+          existingOrder: {
+            rozoPaymentId,
+            chainId: existing.chainId ?? null,
+            tokenSymbol: existing.tokenSymbol ?? null,
+            expiresAt: created.expiresAt ?? null,
+            expiresIn: Number.isFinite(remainingMs) ? formatRemaining(remainingMs) : null
+          },
+          guidance: `Either pay the existing order with ${existing.tokenSymbol ?? "its own coin"} (re-run with --chain ${existing.chainId} --token ${existing.tokenSymbol}), or wait ${Number.isFinite(remainingMs) ? formatRemaining(remainingMs) : "for it to expire"} for it to expire and then create a new one. Unpaid orders cost nothing.`
+        },
+        EXIT_ERROR
+      );
+    }
     emit(
       {
         success: false,
@@ -1256,7 +1298,8 @@ async function main(argv) {
     step: "create-order",
     confirmed,
     reused: Boolean(created.reused),
-    reusedNote: created.reused ? "An existing unfunded order for this link was reused; it passed the funded-check above." : null,
+    reusedNote: created.reused ? `An existing unpaid order for this link was reused (${rozoPaymentId}), valid for another ${formatRemaining(expiry.msRemaining)}. Nothing new was created.` : null,
+    orderCost: "Creating an order moves no money. An order you never fund simply expires and costs nothing.",
     linkId: created.linkId ?? parsedLinkId,
     rozoPaymentId,
     paymentLink: created.paymentLink ?? null,
@@ -1274,12 +1317,16 @@ async function main(argv) {
       // Lightning has no deposit address: the BOLT11 IS the instruction.
       receiverAddress: lightning ? null : source.receiverAddress,
       receiverMemo: source.receiverMemo ?? null,
+      // Stellar memos are TEXT even when they look numeric. Sending one as
+      // MEMO_ID produces a different memo and the payment will not match.
+      receiverMemoType: source.receiverMemo ? STELLAR_MEMO_TYPE : null,
       amount: source.amount,
       amountUnit: source.amountUnit ?? null,
       isSats: isSatsUnit(source.amountUnit),
       lnInvoice: bolt11 || null,
       payTo: depositInfo.payTo,
-      expiresAt: payment?.expiresAt ?? null
+      expiresAt: payment?.expiresAt ?? null,
+      expiresIn: formatRemaining(expiry.msRemaining)
     } : null,
     depositWithheld: !confirmed,
     // Safe for prose / chat.
@@ -1291,12 +1338,16 @@ async function main(argv) {
       payToMasked: maskAddress(depositInfo.payTo),
       receiverMemoMasked: maskMemo(source.receiverMemo),
       hasMemo: Boolean(source.receiverMemo),
+      memoType: source.receiverMemo ? STELLAR_MEMO_TYPE : null,
       memoRequirement
     },
     expiry: {
       intentExpiresAt: payment?.expiresAt ?? null,
       coinbaseExpiry: snapshot?.coinbase?.preApprovalExpiry ?? null,
       effectiveDeadlineIso: new Date(expiry.effectiveDeadlineMs).toISOString(),
+      // A duration, not just a timestamp: this is what a payer actually needs.
+      expiresIn: formatRemaining(expiry.msRemaining),
+      msRemaining: expiry.msRemaining,
       marginMinutes: Math.round(expiry.marginMs / 6e4),
       minutesOfSlack: Math.floor(expiry.msOfSlack / 6e4)
     },

package/scripts/dist/quote.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 
 // scripts/src/lib/output.mjs
 var EXIT_OK = 0;

package/scripts/dist/send-evm.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __esm = (fn, res) => function __init() {

package/scripts/dist/send-sol.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

package/scripts/dist/status.js

@@ -1,6 +1,10 @@
 #!/usr/bin/env node
 import { createRequire as __rozoCreateRequire } from 'node:module';
+import { fileURLToPath as __rozoFileURLToPath } from 'node:url';
+import { dirname as __rozoDirname } from 'node:path';
 const require = __rozoCreateRequire(import.meta.url);
+const __filename = __rozoFileURLToPath(import.meta.url);
+const __dirname = __rozoDirname(__filename);
 
 // scripts/src/lib/output.mjs
 var EXIT_OK = 0;
@@ -428,6 +432,30 @@ function classifyStatus({ payment, routerState, coinbase, now = Date.now(), view
   );
 }
 
+// scripts/src/lib/expiry.mjs
+var MINUTE = 6e4;
+var MARGINS_MS = {
+  1: 10 * MINUTE,
+  56: 10 * MINUTE,
+  137: 10 * MINUTE,
+  8453: 10 * MINUTE,
+  900: 5 * MINUTE,
+  1500: 10 * MINUTE,
+  lightning: 10 * MINUTE
+};
+var BOLT11_MIN_VALIDITY_MS = 10 * MINUTE;
+var DEFAULT_MARGIN_MS = 10 * MINUTE;
+function formatRemaining(ms) {
+  if (!Number.isFinite(ms)) return "unknown";
+  if (ms <= 0) return "expired";
+  const totalMinutes = Math.floor(ms / 6e4);
+  if (totalMinutes < 1) return `${Math.floor(ms / 1e3)}s`;
+  if (totalMinutes < 60) return `${totalMinutes}m`;
+  const h = Math.floor(totalMinutes / 60);
+  const m = totalMinutes % 60;
+  return m ? `${h}h ${m}m` : `${h}h`;
+}
+
 // scripts/src/lib/state.mjs
 import fs from "node:fs";
 import path from "node:path";
@@ -519,6 +547,16 @@ async function snapshot({ rozoPaymentId, linkId }) {
       senderAddressMasked: source.senderAddress ? maskAddress(source.senderAddress) : null,
       chain: source.chainId ? chainName(source.chainId) : null
     },
+    expiry: (() => {
+      const iso = payment?.expiresAt ?? status?.rozoPayment?.expiresAt ?? null;
+      if (!iso) return { expiresAt: null, expiresIn: null, msRemaining: null };
+      const ms = Date.parse(iso) - Date.now();
+      return {
+        expiresAt: iso,
+        expiresIn: formatRemaining(ms),
+        msRemaining: Number.isFinite(ms) ? ms : null
+      };
+    })(),
     payout: {
       txHash: payment?.destination?.txHash ?? status?.rozoPayment?.destination?.txHash ?? null,
       confirmedAt: payment?.destination?.confirmedAt ?? status?.rozoPayment?.destination?.confirmedAt ?? null
@@ -544,7 +582,7 @@ async function main(argv) {
     if (next.state !== result.state) history.push({ at: (/* @__PURE__ */ new Date()).toISOString(), state: next.state });
     result = next;
   }
-  const guidance = result.escalate ? "MONEY DETECTED and the order is not on a healthy path. Do NOT pay again and do NOT create a new order for this link. Preserve linkId, rozoPaymentId and every tx hash, then escalate to the operator for manual reconciliation." : result.unknown ? "The order state could not be established. This is NOT evidence that nothing was paid \u2014 do not create a new order and do not send again on the strength of it. Retry, or pass --rozo-payment-id so the authoritative pay-in view can be read." : !result.authoritativeView ? "Only the fulfilment view was readable; the pay-in view is unavailable, so the money-detected rule cannot be enforced. Pass --rozo-payment-id for a complete answer." : result.state === "expired_unfunded" ? "Nothing was funded. It is safe to start over with a fresh link." : result.terminal ? "Done." : "Still in flight. Poll again in ~10s.";
+  const guidance = result.escalate ? "MONEY DETECTED and the order is not on a healthy path. Do NOT pay again and do NOT create a new order for this link. Preserve linkId, rozoPaymentId and every tx hash, then escalate to the operator for manual reconciliation." : result.unknown ? "The order state could not be established. This is NOT evidence that nothing was paid \u2014 do not create a new order and do not send again on the strength of it. Retry, or pass --rozo-payment-id so the authoritative pay-in view can be read." : !result.authoritativeView ? "Only the fulfilment view was readable; the pay-in view is unavailable, so the money-detected rule cannot be enforced. Pass --rozo-payment-id for a complete answer." : result.state === "expired_unfunded" ? "Nothing was funded, so nothing was lost. Start a fresh order with: rozo-checkout pay <coinbase-link> --with <coin>  (or create-order.js --url <link> --chain <id> --token <SYMBOL>)" : result.terminal ? "Done." : "Still in flight. Poll again in ~10s.";
   const unresolved = watch && !result.terminal && !result.escalate && !result.unknown;
   const failed = result.escalate || result.unknown || !result.authoritativeView;
   emit(