@rozoai/checkout 0.1.5 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rozoai/checkout",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "type": "module",
   "description": "Pay an OpenRouter Coinbase Payment Link with BTC Lightning, or USDT/USDC on Solana, BNB Chain, Ethereum, Polygon, Base or Stellar.",
   "license": "MIT",

package/scripts/dist/cli.js

@@ -24789,14 +24789,14 @@ var require_node_gyp_build = __commonJS({
   "node_modules/node-gyp-build/node-gyp-build.js"(exports, module) {
     var fs7 = __require("fs");
     var path7 = __require("path");
-    var os4 = __require("os");
+    var os5 = __require("os");
     var runtimeRequire = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
     var vars = process.config && process.config.variables || {};
     var prebuildsOnly = !!process.env.PREBUILDS_ONLY;
     var abi2 = process.versions.modules;
     var runtime = isElectron() ? "electron" : isNwjs() ? "node-webkit" : "node";
-    var arch = process.env.npm_config_arch || os4.arch();
-    var platform = process.env.npm_config_platform || os4.platform();
+    var arch = process.env.npm_config_arch || os5.arch();
+    var platform = process.env.npm_config_platform || os5.platform();
     var libc = process.env.LIBC || (isAlpine(platform) ? "musl" : "glibc");
     var armv = process.env.ARM_VERSION || (arch === "arm64" ? "8" : vars.arm_version) || "";
     var uv = (process.versions.uv || "").split(".")[0];
@@ -42588,10 +42588,147 @@ function maskMemo(memo) {
   return `${s.slice(0, 4)}...${s.slice(-3)}`;
 }
 
+// scripts/src/lib/expiry.mjs
+var MINUTE = 6e4;
+var MARGINS_MS = {
+  1: 10 * MINUTE,
+  56: 10 * MINUTE,
+  137: 10 * MINUTE,
+  8453: 10 * MINUTE,
+  900: 5 * MINUTE,
+  1500: 10 * MINUTE,
+  lightning: 10 * MINUTE
+};
+var BOLT11_MIN_VALIDITY_MS = 10 * MINUTE;
+var DEFAULT_MARGIN_MS = 10 * MINUTE;
+function formatRemaining(ms) {
+  if (!Number.isFinite(ms)) return "unknown";
+  if (ms <= 0) return "expired";
+  const totalMinutes = Math.floor(ms / 6e4);
+  if (totalMinutes < 1) return `${Math.floor(ms / 1e3)}s`;
+  if (totalMinutes < 60) return `${totalMinutes}m`;
+  const h = Math.floor(totalMinutes / 60);
+  const m = totalMinutes % 60;
+  return m ? `${h}h ${m}m` : `${h}h`;
+}
+function formatDeadline(iso, { now = Date.now(), locale, timeZone } = {}) {
+  if (!iso) return null;
+  const at = new Date(iso);
+  if (Number.isNaN(at.getTime())) return null;
+  const msLeft = at.getTime() - now;
+  if (msLeft <= 0) return "expired";
+  const minutes = Math.round(msLeft / 6e4);
+  const human = minutes < 1 ? "less than a minute" : minutes < 60 ? `about ${minutes} minute${minutes === 1 ? "" : "s"}` : `about ${Math.floor(minutes / 60)}h ${minutes % 60}m`;
+  const clock = at.toLocaleTimeString(locale, {
+    hour: "numeric",
+    minute: "2-digit",
+    ...timeZone ? { timeZone } : {}
+  });
+  return `in ${human}, at ${clock} local time`;
+}
+function marginFor(chainId) {
+  const key = String(chainId);
+  return MARGINS_MS[key] ?? MARGINS_MS[chainId] ?? DEFAULT_MARGIN_MS;
+}
+function parseDeadline(value) {
+  if (value === null || value === void 0 || value === "") return null;
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return value < 1e12 ? Math.round(value * 1e3) : Math.round(value);
+  }
+  const s = String(value).trim();
+  if (/^\d+$/.test(s)) {
+    const n = Number(s);
+    return n < 1e12 ? n * 1e3 : n;
+  }
+  const t = Date.parse(s);
+  return Number.isFinite(t) ? t : null;
+}
+function checkExpiry({
+  now,
+  chainId,
+  intentExpiresAt,
+  coinbaseExpiry,
+  bolt11ExpiresAt = void 0
+}) {
+  const marginMs = marginFor(chainId);
+  const intentMs = parseDeadline(intentExpiresAt);
+  const coinbaseMs = parseDeadline(coinbaseExpiry);
+  const bolt11Ms = bolt11ExpiresAt === void 0 ? void 0 : parseDeadline(bolt11ExpiresAt);
+  const deadlines = { intentMs, coinbaseMs, bolt11Ms: bolt11Ms ?? null };
+  const base = {
+    marginMs,
+    effectiveDeadlineMs: null,
+    msRemaining: null,
+    msOfSlack: null,
+    deadlines
+  };
+  if (intentMs === null) {
+    return {
+      ...base,
+      ok: false,
+      code: "EXPIRY_UNPARSABLE",
+      reason: "Intent expiresAt is missing or unparsable."
+    };
+  }
+  if (coinbaseMs === null) {
+    return {
+      ...base,
+      ok: false,
+      code: "EXPIRY_UNPARSABLE",
+      reason: "Coinbase preApprovalExpiry is missing or unparsable."
+    };
+  }
+  const effective = Math.min(intentMs, coinbaseMs);
+  const msRemaining = effective - now;
+  const msOfSlack = msRemaining - marginMs;
+  const withDeadline = {
+    ...base,
+    effectiveDeadlineMs: effective,
+    msRemaining,
+    msOfSlack
+  };
+  if (msRemaining <= 0) {
+    return {
+      ...withDeadline,
+      ok: false,
+      code: "EXPIRED",
+      reason: "The order or the Coinbase link has already expired."
+    };
+  }
+  if (msOfSlack <= 0) {
+    return {
+      ...withDeadline,
+      ok: false,
+      code: "EXPIRY_MARGIN",
+      reason: `Only ${Math.floor(msRemaining / 1e3)}s left before the earliest deadline; this chain needs a ${Math.floor(marginMs / 6e4)} min safety margin.`
+    };
+  }
+  if (bolt11ExpiresAt !== void 0) {
+    if (bolt11Ms === null) {
+      return {
+        ...withDeadline,
+        ok: false,
+        code: "EXPIRY_UNPARSABLE",
+        reason: "BOLT11 invoice expiry is missing or unparsable."
+      };
+    }
+    const bolt11Remaining = bolt11Ms - now;
+    if (bolt11Remaining < BOLT11_MIN_VALIDITY_MS) {
+      return {
+        ...withDeadline,
+        ok: false,
+        code: "BOLT11_TOO_SHORT",
+        reason: `BOLT11 invoice has ${Math.max(0, Math.floor(bolt11Remaining / 1e3))}s of validity left; at least 10 min is required. Request a fresh invoice.`
+      };
+    }
+  }
+  return { ...withDeadline, ok: true, code: null, reason: null };
+}
+
 // scripts/src/lib/key-source.mjs
-import fs5 from "node:fs";
-import path5 from "node:path";
-import os3 from "node:os";
+import fs6 from "node:fs";
+import path6 from "node:path";
+import os4 from "node:os";
 import crypto5 from "node:crypto";
 
 // node_modules/viem/_esm/utils/getAction.js
@@ -53655,18 +53792,121 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
   return { checked: true, tracked: false, candidates };
 }
 
+// scripts/src/lib/dotenv.mjs
+import fs5 from "node:fs";
+import os3 from "node:os";
+import path5 from "node:path";
+var ALLOWED_KEYS = [
+  "ROZO_CHECKOUT_EVM_KEY",
+  "ROZO_CHECKOUT_SOL_KEY",
+  "ROZO_CHECKOUT_EVM_KEYSTORE",
+  "ROZO_CHECKOUT_KEYSTORE_PASSPHRASE"
+];
+var ALLOWED_PATTERN = /^ROZO_CHECKOUT_RPC_[A-Za-z0-9_]+$/;
+function isAllowedKey(key) {
+  return ALLOWED_KEYS.includes(key) || ALLOWED_PATTERN.test(key);
+}
+function parseDotenv(text) {
+  const vars = {};
+  const lines = String(text).split(/\r?\n/);
+  lines.forEach((rawLine, i) => {
+    const lineNo = i + 1;
+    const line = rawLine.trim();
+    if (!line || line.startsWith("#")) return;
+    const withoutExport = line.startsWith("export ") ? line.slice(7).trim() : line;
+    const eq = withoutExport.indexOf("=");
+    if (eq === -1) {
+      throw new SkillError(
+        "BAD_ENV_FILE",
+        `Malformed .env: line ${lineNo} is not KEY=VALUE. (Content withheld \u2014 it may be a secret.)`
+      );
+    }
+    const key = withoutExport.slice(0, eq).trim();
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      throw new SkillError(
+        "BAD_ENV_FILE",
+        `Malformed .env: line ${lineNo} has an invalid key name. (Content withheld.)`
+      );
+    }
+    let value = withoutExport.slice(eq + 1).trim();
+    if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) {
+      value = value.slice(1, -1);
+    }
+    vars[key] = value;
+  });
+  return vars;
+}
+function filterAllowed(vars) {
+  const out2 = {};
+  for (const [k, v] of Object.entries(vars)) if (isAllowedKey(k)) out2[k] = v;
+  return out2;
+}
+function envFileCandidates({ cwd = process.cwd(), home = os3.homedir() } = {}) {
+  const candidates = [path5.join(cwd, ".env")];
+  const owned = path5.join(home, ".rozo-checkout", ".env");
+  if (owned !== candidates[0]) candidates.push(owned);
+  return candidates;
+}
+function resolveEnvFile({ file, cwd = process.cwd(), home = os3.homedir() } = {}) {
+  if (file) {
+    const p = path5.resolve(file);
+    if (!fs5.existsSync(p)) {
+      throw new SkillError("ENV_FILE_MISSING", `No such env file: ${file}`);
+    }
+    return p;
+  }
+  return envFileCandidates({ cwd, home }).find((p) => fs5.existsSync(p)) ?? null;
+}
+function applyDotenv({
+  file,
+  cwd = process.cwd(),
+  home = os3.homedir(),
+  env = process.env
+} = {}) {
+  const target = resolveEnvFile({ file, cwd, home });
+  if (!target) return null;
+  let stat;
+  try {
+    stat = fs5.statSync(target);
+  } catch (err) {
+    throw new SkillError("ENV_FILE_MISSING", `Cannot read env file (${err.code || "error"}).`);
+  }
+  if (process.platform !== "win32" && stat.mode & 63) {
+    const mode = (stat.mode & 511).toString(8).padStart(3, "0");
+    throw new SkillError(
+      "ENV_FILE_PERMISSIONS",
+      `That .env is readable by other users (mode ${mode}). Run: chmod 600 ${target}`
+    );
+  }
+  assertNotTrackedByGit(target);
+  const parsed = parseDotenv(fs5.readFileSync(target, "utf8"));
+  const allowed = filterAllowed(parsed);
+  const applied = [];
+  for (const [k, v] of Object.entries(allowed)) {
+    const existing = env[k];
+    if (existing !== void 0 && String(existing).trim() !== "") continue;
+    env[k] = v;
+    applied.push(k);
+  }
+  return {
+    path: target,
+    applied,
+    ignored: Object.keys(parsed).length - Object.keys(allowed).length
+  };
+}
+
 // scripts/src/lib/key-source.mjs
 var EVM_KEY_ENV = "ROZO_CHECKOUT_EVM_KEY";
 var SOL_KEY_ENV = "ROZO_CHECKOUT_SOL_KEY";
 var EVM_KEYSTORE_ENV = "ROZO_CHECKOUT_EVM_KEYSTORE";
 var KEYSTORE_PASSPHRASE_ENV = "ROZO_CHECKOUT_KEYSTORE_PASSPHRASE";
 function defaultSolanaKeypairPath() {
-  return path5.join(os3.homedir(), ".config", "solana", "id.json");
+  return path6.join(os4.homedir(), ".config", "solana", "id.json");
 }
 function assertKeyfileSafe(file) {
   let stat;
   try {
-    stat = fs5.statSync(file);
+    stat = fs6.statSync(file);
   } catch (err) {
     throw new SkillError(
       "KEYFILE_UNREADABLE",
@@ -53843,12 +54083,16 @@ function looksLikeKeystore(text) {
     return false;
   }
 }
-function planKeySource({ family, keyfile, env = process.env }) {
+function searchedSuffix(searched) {
+  if (!searched || !searched.length) return "";
+  return ` Looked for a .env in: ${searched.map(displayPath).join(", ")}.`;
+}
+function planKeySource({ family, keyfile, env = process.env, searched }) {
   if (keyfile) {
     const resolved = expandHome(keyfile);
     let text;
     try {
-      text = fs5.readFileSync(resolved, "utf8");
+      text = fs6.readFileSync(resolved, "utf8");
     } catch (err) {
       throw new SkillError(
         "KEYFILE_UNREADABLE",
@@ -53872,13 +54116,13 @@ function planKeySource({ family, keyfile, env = process.env }) {
   }
   if (family === "solana") {
     const standard = defaultSolanaKeypairPath();
-    if (fs5.existsSync(standard)) {
+    if (fs6.existsSync(standard)) {
       return { kind: "keypair-file", path: standard, label: displayPath(standard) };
     }
     if (env[SOL_KEY_ENV]) return { kind: "env", label: SOL_KEY_ENV };
     throw new SkillError(
       "NO_KEY_SOURCE",
-      `No signing key found. Either create one with solana-keygen (writes ${displayPath(standard)}), pass --keyfile <path>, or set ${SOL_KEY_ENV}.`
+      `No signing key found. Either create one with solana-keygen (writes ${displayPath(standard)}), pass --keyfile <path>, or set ${SOL_KEY_ENV}.` + searchedSuffix(searched)
     );
   }
   if (family === "evm") {
@@ -53890,7 +54134,7 @@ function planKeySource({ family, keyfile, env = process.env }) {
     if (env[EVM_KEY_ENV]) return { kind: "env", label: EVM_KEY_ENV };
     throw new SkillError(
       "NO_KEY_SOURCE",
-      `No signing key found. Either point ${EVM_KEYSTORE_ENV} at an encrypted JSON keystore, pass --keyfile <path>, or set ${EVM_KEY_ENV}.`
+      `No signing key found. Either point ${EVM_KEYSTORE_ENV} at an encrypted JSON keystore, pass --keyfile <path>, or set ${EVM_KEY_ENV}.${searchedSuffix(searched)}`
     );
   }
   throw new SkillError("NO_KEY_SOURCE", `No key source for family "${family}".`);
@@ -53908,7 +54152,7 @@ async function loadKeySource(plan, { family, env = process.env, askPassphrase }
     return { secretKey: decodeSolanaEnvKey(raw), label: plan.label, kind: plan.kind };
   }
   assertKeyfileSafe(plan.path);
-  const text = fs5.readFileSync(plan.path, "utf8");
+  const text = fs6.readFileSync(plan.path, "utf8");
   if (plan.kind === "keypair-file") {
     return { secretKey: parseSolanaKeypairJson(text), label: plan.label, kind: plan.kind };
   }
@@ -53935,110 +54179,19 @@ function planSignability({
 }) {
   const probeEnv = { ...env };
   if (applyEnvFile) applyEnvFile({ file: envFile, cwd, env: probeEnv });
-  return planKeySource({ family, keyfile, env: probeEnv });
+  const searched = envFile ? null : envFileCandidates({ cwd });
+  return planKeySource({ family, keyfile, env: probeEnv, searched });
 }
 function expandHome(p) {
   const s = String(p);
-  if (s === "~") return os3.homedir();
-  if (s.startsWith("~/")) return path5.join(os3.homedir(), s.slice(2));
+  if (s === "~") return os4.homedir();
+  if (s.startsWith("~/")) return path6.join(os4.homedir(), s.slice(2));
   return s;
 }
 function displayPath(p) {
-  const home = os3.homedir();
+  const home = os4.homedir();
   const s = String(p);
-  return s.startsWith(home + path5.sep) ? `~${s.slice(home.length)}` : s;
-}
-
-// scripts/src/lib/dotenv.mjs
-import fs6 from "node:fs";
-import path6 from "node:path";
-var ALLOWED_KEYS = [
-  "ROZO_CHECKOUT_EVM_KEY",
-  "ROZO_CHECKOUT_SOL_KEY",
-  "ROZO_CHECKOUT_EVM_KEYSTORE",
-  "ROZO_CHECKOUT_KEYSTORE_PASSPHRASE"
-];
-var ALLOWED_PATTERN = /^ROZO_CHECKOUT_RPC_[A-Za-z0-9_]+$/;
-function isAllowedKey(key) {
-  return ALLOWED_KEYS.includes(key) || ALLOWED_PATTERN.test(key);
-}
-function parseDotenv(text) {
-  const vars = {};
-  const lines = String(text).split(/\r?\n/);
-  lines.forEach((rawLine, i) => {
-    const lineNo = i + 1;
-    const line = rawLine.trim();
-    if (!line || line.startsWith("#")) return;
-    const withoutExport = line.startsWith("export ") ? line.slice(7).trim() : line;
-    const eq = withoutExport.indexOf("=");
-    if (eq === -1) {
-      throw new SkillError(
-        "BAD_ENV_FILE",
-        `Malformed .env: line ${lineNo} is not KEY=VALUE. (Content withheld \u2014 it may be a secret.)`
-      );
-    }
-    const key = withoutExport.slice(0, eq).trim();
-    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
-      throw new SkillError(
-        "BAD_ENV_FILE",
-        `Malformed .env: line ${lineNo} has an invalid key name. (Content withheld.)`
-      );
-    }
-    let value = withoutExport.slice(eq + 1).trim();
-    if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) {
-      value = value.slice(1, -1);
-    }
-    vars[key] = value;
-  });
-  return vars;
-}
-function filterAllowed(vars) {
-  const out2 = {};
-  for (const [k, v] of Object.entries(vars)) if (isAllowedKey(k)) out2[k] = v;
-  return out2;
-}
-function resolveEnvFile({ file, cwd = process.cwd() } = {}) {
-  if (file) {
-    const p = path6.resolve(file);
-    if (!fs6.existsSync(p)) {
-      throw new SkillError("ENV_FILE_MISSING", `No such env file: ${file}`);
-    }
-    return p;
-  }
-  const fallback = path6.join(cwd, ".env");
-  return fs6.existsSync(fallback) ? fallback : null;
-}
-function applyDotenv({ file, cwd = process.cwd(), env = process.env } = {}) {
-  const target = resolveEnvFile({ file, cwd });
-  if (!target) return null;
-  let stat;
-  try {
-    stat = fs6.statSync(target);
-  } catch (err) {
-    throw new SkillError("ENV_FILE_MISSING", `Cannot read env file (${err.code || "error"}).`);
-  }
-  if (process.platform !== "win32" && stat.mode & 63) {
-    const mode = (stat.mode & 511).toString(8).padStart(3, "0");
-    throw new SkillError(
-      "ENV_FILE_PERMISSIONS",
-      `That .env is readable by other users (mode ${mode}). Run: chmod 600 ${target}`
-    );
-  }
-  assertNotTrackedByGit(target);
-  const parsed = parseDotenv(fs6.readFileSync(target, "utf8"));
-  const allowed = filterAllowed(parsed);
-  const applied = [];
-  for (const [k, v] of Object.entries(allowed)) {
-    const existing = env[k];
-    if (existing !== void 0 && String(existing).trim() !== "") continue;
-    env[k] = v;
-    applied.push(k);
-  }
-  return {
-    path: target,
-    applied,
-    ignored: Object.keys(parsed).length - Object.keys(allowed).length
-  };
+  return s.startsWith(home + path6.sep) ? `~${s.slice(home.length)}` : s;
 }
 
 // scripts/src/lib/http.mjs
@@ -54155,128 +54308,6 @@ function snapshotFromQuote(quote) {
   };
 }
 
-// scripts/src/lib/expiry.mjs
-var MINUTE = 6e4;
-var MARGINS_MS = {
-  1: 10 * MINUTE,
-  56: 10 * MINUTE,
-  137: 10 * MINUTE,
-  8453: 10 * MINUTE,
-  900: 5 * MINUTE,
-  1500: 10 * MINUTE,
-  lightning: 10 * MINUTE
-};
-var BOLT11_MIN_VALIDITY_MS = 10 * MINUTE;
-var DEFAULT_MARGIN_MS = 10 * MINUTE;
-function formatRemaining(ms) {
-  if (!Number.isFinite(ms)) return "unknown";
-  if (ms <= 0) return "expired";
-  const totalMinutes = Math.floor(ms / 6e4);
-  if (totalMinutes < 1) return `${Math.floor(ms / 1e3)}s`;
-  if (totalMinutes < 60) return `${totalMinutes}m`;
-  const h = Math.floor(totalMinutes / 60);
-  const m = totalMinutes % 60;
-  return m ? `${h}h ${m}m` : `${h}h`;
-}
-function marginFor(chainId) {
-  const key = String(chainId);
-  return MARGINS_MS[key] ?? MARGINS_MS[chainId] ?? DEFAULT_MARGIN_MS;
-}
-function parseDeadline(value) {
-  if (value === null || value === void 0 || value === "") return null;
-  if (typeof value === "number" && Number.isFinite(value)) {
-    return value < 1e12 ? Math.round(value * 1e3) : Math.round(value);
-  }
-  const s = String(value).trim();
-  if (/^\d+$/.test(s)) {
-    const n = Number(s);
-    return n < 1e12 ? n * 1e3 : n;
-  }
-  const t = Date.parse(s);
-  return Number.isFinite(t) ? t : null;
-}
-function checkExpiry({
-  now,
-  chainId,
-  intentExpiresAt,
-  coinbaseExpiry,
-  bolt11ExpiresAt = void 0
-}) {
-  const marginMs = marginFor(chainId);
-  const intentMs = parseDeadline(intentExpiresAt);
-  const coinbaseMs = parseDeadline(coinbaseExpiry);
-  const bolt11Ms = bolt11ExpiresAt === void 0 ? void 0 : parseDeadline(bolt11ExpiresAt);
-  const deadlines = { intentMs, coinbaseMs, bolt11Ms: bolt11Ms ?? null };
-  const base = {
-    marginMs,
-    effectiveDeadlineMs: null,
-    msRemaining: null,
-    msOfSlack: null,
-    deadlines
-  };
-  if (intentMs === null) {
-    return {
-      ...base,
-      ok: false,
-      code: "EXPIRY_UNPARSABLE",
-      reason: "Intent expiresAt is missing or unparsable."
-    };
-  }
-  if (coinbaseMs === null) {
-    return {
-      ...base,
-      ok: false,
-      code: "EXPIRY_UNPARSABLE",
-      reason: "Coinbase preApprovalExpiry is missing or unparsable."
-    };
-  }
-  const effective = Math.min(intentMs, coinbaseMs);
-  const msRemaining = effective - now;
-  const msOfSlack = msRemaining - marginMs;
-  const withDeadline = {
-    ...base,
-    effectiveDeadlineMs: effective,
-    msRemaining,
-    msOfSlack
-  };
-  if (msRemaining <= 0) {
-    return {
-      ...withDeadline,
-      ok: false,
-      code: "EXPIRED",
-      reason: "The order or the Coinbase link has already expired."
-    };
-  }
-  if (msOfSlack <= 0) {
-    return {
-      ...withDeadline,
-      ok: false,
-      code: "EXPIRY_MARGIN",
-      reason: `Only ${Math.floor(msRemaining / 1e3)}s left before the earliest deadline; this chain needs a ${Math.floor(marginMs / 6e4)} min safety margin.`
-    };
-  }
-  if (bolt11ExpiresAt !== void 0) {
-    if (bolt11Ms === null) {
-      return {
-        ...withDeadline,
-        ok: false,
-        code: "EXPIRY_UNPARSABLE",
-        reason: "BOLT11 invoice expiry is missing or unparsable."
-      };
-    }
-    const bolt11Remaining = bolt11Ms - now;
-    if (bolt11Remaining < BOLT11_MIN_VALIDITY_MS) {
-      return {
-        ...withDeadline,
-        ok: false,
-        code: "BOLT11_TOO_SHORT",
-        reason: `BOLT11 invoice has ${Math.max(0, Math.floor(bolt11Remaining / 1e3))}s of validity left; at least 10 min is required. Request a fresh invoice.`
-      };
-    }
-  }
-  return { ...withDeadline, ok: true, code: null, reason: null };
-}
-
 // scripts/src/lib/guards.mjs
 var UNPAID_STATUS = "payment_unpaid";
 function receiptSignal(source) {
@@ -55577,7 +55608,11 @@ async function main4(argv) {
   const rozoPaymentId = assertRozoPaymentId(args["rozo-payment-id"] || args._[0]);
   assertNoTrackedDotEnv();
   const dotenv = applyDotenv({ file: args["env-file"] });
-  const plan = planKeySource({ family: "evm", keyfile: args.keyfile });
+  const plan = planKeySource({
+    family: "evm",
+    keyfile: args.keyfile,
+    searched: args["env-file"] ? null : envFileCandidates()
+  });
   const loaded = await loadKeySource(plan, { family: "evm", askPassphrase: promptPassphrase });
   const account = privateKeyToAccount(loaded.privateKey);
   const sender = account.address;
@@ -57521,7 +57556,11 @@ async function main5(argv) {
   const rozoPaymentId = assertRozoPaymentId(args["rozo-payment-id"] || args._[0]);
   assertNoTrackedDotEnv();
   const dotenv = applyDotenv({ file: args["env-file"] });
-  const plan = planKeySource({ family: "solana", keyfile: args.keyfile });
+  const plan = planKeySource({
+    family: "solana",
+    keyfile: args.keyfile,
+    searched: args["env-file"] ? null : envFileCandidates()
+  });
   const loaded = await loadKeySource(plan, { family: "solana", askPassphrase: promptPassphrase });
   const secret = loaded.secretKey;
   const keypair = secret.length === 64 ? import_web36.Keypair.fromSecretKey(secret) : import_web36.Keypair.fromSeed(secret);
@@ -58057,6 +58096,16 @@ async function cmdPay(opts) {
     }
     if (!result.ok && !opts.json) {
       out(`  ${yellow(`Could not check balances (${result.reason}). Continuing.`)}`);
+    } else if (result.ok && !opts.json) {
+      const hit = (result.options ?? []).find(
+        (o) => o.chainId === String(opts.source.chainId) && o.tokenSymbol === String(opts.source.tokenSymbol).toUpperCase()
+      );
+      const short = `${opts.payer.slice(0, 6)}\u2026${opts.payer.slice(-4)}`;
+      if (hit?.balanceUsd != null) {
+        out(`  ${dim(`Payer ${short} holds about $${hit.balanceUsd} of ${opts.source.tokenSymbol} \u2014 enough for this invoice.`)}`);
+      } else {
+        out(`  ${dim(`Payer ${short}: balance not reported for this coin, so it was not verified.`)}`);
+      }
     }
     payer = { address: opts.payer, family };
   }
@@ -58099,10 +58148,12 @@ async function cmdPay(opts) {
     if (p.display?.hasMemo) {
       out(`  Memo      ${p.display.receiverMemoMasked} ${dim(`(${p.display.memoType})`)}`);
     }
-    out(`  Expires   in ${bold(p.expiry?.expiresIn ?? "?")} ${dim(`(${p.expiry?.effectiveDeadlineIso})`)}`);
-    if (p.reused) {
-      out(`  ${dim(`Reusing the existing unpaid order ${p.rozoPaymentId} \u2014 nothing new was created.`)}`);
-    }
+    const deadline = formatDeadline(p.expiry?.effectiveDeadlineIso);
+    out(`  Expires   ${bold(deadline ?? `in ${p.expiry?.expiresIn ?? "?"}`)}`);
+    out(`  ${dim("After that this order cannot be used and a new one must be created.")}`);
+    out(
+      p.reused ? `  ${dim(`Reusing existing unpaid order ${p.rozoPaymentId} \u2014 nothing new was created.`)}` : `  ${dim(`Order created: ${p.rozoPaymentId}`)}`
+    );
     out(`  ${dim("An order you never fund simply expires and costs nothing.")}`);
     out();
     out(dim(`  The amount you send includes bridge and network fees, so it is`));
@@ -58138,6 +58189,9 @@ async function cmdPay(opts) {
     return confirmed.exitCode;
   }
   const deposit = confirmed.payload.deposit;
+  if (!opts.json) {
+    out(`  ${dim(`Confirming order ${rozoPaymentId} \u2014 no second order was created.`)}`);
+  }
   if (opts.send) {
     const family = chainFamily(deposit.chainId);
     const sender = family === "evm" ? run4 : family === "solana" ? run5 : null;