@dvmkit/sdk 0.1.0-rc.2 → 0.1.0-rc.3

package/dist/{ssrf-DZi-xJyn.d.ts → fx-Bq4cvn16.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './job-store-6gR4pZRP.js';
+import { C as Currency } from './job-store-m2pYmvbr.js';
 
 /**
  * Quote-time fx snapshot. Embedded in scribe's `lockedQuote` for within-job
@@ -60,6 +60,19 @@ interface PlatformFxSource {
     url: string;
     token: string;
 }
+/**
+ * In-process cache window for the fx snapshot. 5 minutes amortises rate-limit
+ * budget across concurrent quotes and gives a within-window quote → job pair a
+ * consistent rate without an explicit lock. Bumped from 60s in internal-review; the
+ * per-call drift remains sub-cent at typical DVM amounts (BTC's intra-5-min
+ * volatility is well under 1%). Within-job consistency is unaffected — scribe's
+ * `lockedQuote.fx` is captured once at quote-time and reused at settlement
+ * regardless of the TTL. Hosted-DVM upstream fan-out is handled by internal-review
+ * (platform-served fx endpoint) rather than this TTL.
+ */
+declare const FX_CACHE_TTL_MS = 300000;
+/** Default retry budget per `fetch()` call before raising `fx_rate_unavailable`. */
+declare const FX_RETRY_COUNT = 2;
 /** Agent-relayable copy for an {@link FxRateUnavailableError}. */
 interface FxRateUnavailableCopy {
     display?: string;
@@ -163,6 +176,28 @@ interface CreateFxFetcherOpts {
 }
 /** Build the default fx fetcher backed by `DVMKIT_FX_SOURCE` (or CoinGecko). */
 declare function createFxFetcher(opts?: CreateFxFetcherOpts): FxFetcher;
+/**
+ * Prime `fetcher`'s snapshot cache so the first priced surface to need a rate
+ * isn't the process's first fetch (internal-review).
+ *
+ * internal-review gave every fx hop in the payment layer a ladder down onto
+ * {@link FxFetcher.lastKnown}, which closes the failure for any process that
+ * has ever held a rate. A free-to-submit DVM never has: the job is free, so no
+ * quote fetches one, and the ask-time pin in `ctx.requestPayment` *is* the
+ * first fetch — a blip at the rate provider in that window has nothing to
+ * degrade onto and still costs the receipt its whole `credit` block.
+ *
+ * Fire-and-forget by construction: never awaited, so it can't slow a boot;
+ * never rethrown, so it can't fail one. A failure is deliberately **silent** —
+ * a warn on every offline `dvmctl dev` boot is worse than the gap this closes,
+ * and the first real ask walks the internal-review ladder and names its own failure
+ * there. Racing that ask costs one upstream fetch rather than two, because
+ * {@link createFxFetcher} dedupes in flight.
+ *
+ * Already-warm fetchers are left alone, so calling this twice — or against an
+ * injected fetcher a caller primed itself — is free.
+ */
+declare function warmFxSnapshot(fetcher: FxFetcher): void;
 /**
  * Look up `currency`'s rate in `snapshot`.
  *
@@ -205,121 +240,4 @@ declare function fxRateFor(snapshot: FxRateSnapshot, currency: Currency): number
  */
 declare function resolveFxSourceFromEnv(env: Record<string, string | undefined>): string | PlatformFxSource | undefined;
 
-/**
- * Why `assertSafeUrl` refused this URL. Carried on `SSRFError` so callers can
- * branch without string-matching `err.message` — DNS failures (NXDOMAIN, empty
- * resolution), unparseable URLs, and a non-https scheme each have distinct
- * recovery paths and shouldn't collapse together.
- */
-type SSRFReason = "invalid_url" | "insecure_scheme" | "private_address" | "dns_failed";
-/**
- * Thrown when an input URL points at internal infrastructure we refuse to
- * fetch from inside the cluster. Carries a `reason` discriminator so the
- * caller can map cleanly onto its public taxonomy instead of inspecting the
- * message string.
- */
-declare class SSRFError extends Error {
-    readonly code: "ssrf_blocked";
-    readonly reason: SSRFReason;
-    constructor(reason: SSRFReason, message: string);
-}
-/** Pluggable DNS resolver. Defaults to `node:dns/promises` `lookup(host, { all: true })`. */
-type SSRFResolver = (host: string) => Promise<{
-    address: string;
-    family: number;
-}[]>;
-/**
- * Configurable hooks for `assertSafeUrl`. Defaults preserve the dvmkit
- * baseline denylist; extra entries compose with (never replace) the defaults.
- */
-interface SSRFGuardOpts {
-    /** Custom DNS resolver — typically a test stub. */
-    resolver?: SSRFResolver;
-    /** Additional exact hostnames to deny on top of the defaults (lowercased on input). */
-    extraHostnamesExact?: Iterable<string>;
-    /**
-     * Additional hostname suffixes to deny on top of the defaults. Each entry
-     * should include the leading dot (e.g. `.example.invalid`) — the same shape
-     * the defaults use.
-     */
-    extraHostnameSuffixes?: Iterable<string>;
-    /** Additional IPv4 predicate. Returns true for an unsafe address. */
-    extraUnsafeIPv4?: (ipv4: string) => boolean;
-    /** Additional IPv6 predicate. Returns true for an unsafe address. */
-    extraUnsafeIPv6?: (ipv6: string) => boolean;
-    /**
-     * Underlying fetch implementation `createPinnedFetch` wraps. Defaults to
-     * `globalThis.fetch`. Pass an instrumented wrapper (e.g. scribe's
-     * `ctx.fetch` from `createInstrumentedFetch`) to keep `dvm.fetch` spans
-     * around outbound HEAD / GET — the dispatcher pin for every safe redirect
-     * hop is preserved because `init.dispatcher` flows through any thin fetch
-     * wrapper unchanged.
-     */
-    baseFetch?: typeof fetch;
-    /**
-     * Called after a redirect response is accepted and before the target is
-     * resolved or connected. Lets an outer transport refuse to replay an
-     * original request once its source has demonstrably responded.
-     */
-    onRedirectFollowed?: () => void;
-}
-/**
- * Reject URLs whose host points at internal infrastructure — private /
- * link-local IP ranges, the AWS / GCP metadata IP, Fly's `*.internal`
- * service-discovery names, and a small denylist of obviously-internal
- * hostnames. Defence-in-depth — full mitigation belongs at the egress firewall
- * and at fetch-time IP pinning (`createPinnedFetch`, internal-review).
- *
- * Throws `SSRFError` with a `reason` discriminator so callers can branch onto
- * their own typed error taxonomy.
- */
-declare function assertSafeUrl(url: string, opts?: SSRFGuardOpts): Promise<void>;
-/**
- * A `fetch`-compatible function pinned to a single pre-validated IP address.
- *
- * Returned by {@link createPinnedFetch}. Closes the DNS-rebinding window in
- * which `assertSafeUrl` validates an address but the subsequent `fetch()`
- * re-resolves DNS and lands on a different (private) address.
- *
- * Callers MUST `await close()` when done with the pin so undici's connection
- * pool is released.
- */
-interface PinnedFetch {
-    /** Fetch whose initial request and every followed redirect are pinned to their pre-validated address sets. */
-    fetch: typeof fetch;
-    /** Primary (first) validated address of the initial URL. */
-    address: string;
-    /** IP family (4 or 6) of {@link address} (the primary). */
-    family: number;
-    /** Release the undici connection pool backing this pinned fetch. */
-    close(): Promise<void>;
-}
-/**
- * Resolve the URL's host once, validate every answer against the same
- * denylist `assertSafeUrl` applies, then return a `fetch` whose `connect.lookup`
- * replays that frozen, pre-validated address set (see {@link buildPinnedLookup}).
- * Redirects are followed manually: each target URL is independently required
- * to be HTTPS, resolved once, denylist-checked, and pinned before it can be
- * requested. That prevents an automatic redirect from reusing the source
- * host's dispatcher for a different hostname, while keeping a redirect from
- * opening a DNS-rebinding window.
- *
- * Throws `SSRFError` with the same `reason` discriminator as `assertSafeUrl`,
- * so error-mapping paths (`mapSsrfError` in cast/scribe) work unchanged.
- *
- * For IP-literal URLs no dispatcher is needed, but redirects still pass
- * through the same validation loop.
- *
- * Replaying the full validated set (not just `addresses[0]`) preserves Node's
- * happy-eyeballs fallback across the answers — a host whose first address is an
- * unroutable family still connects via the others — while keeping the rebind
- * window closed, since every replayed address was already denylist-checked.
- *
- * Pass `opts.baseFetch` to wrap an instrumented fetch (e.g. scribe's
- * `ctx.fetch` from `createInstrumentedFetch`) — `dvm.fetch` spans flow
- * through because `init.dispatcher` is forwarded to the underlying
- * `globalThis.fetch` unchanged.
- */
-declare function createPinnedFetch(url: string, opts?: SSRFGuardOpts): Promise<PinnedFetch>;
-
-export { type CreateFxFetcherOpts as C, DEFAULT_FX_CURRENCIES as D, type FxFetcher as F, type PinnedFetch as P, SSRFError as S, DEFAULT_FX_RATE_SOURCE as a, type FxRateSnapshot as b, FxRateUnavailableError as c, type PlatformFxSource as d, type SSRFGuardOpts as e, type SSRFReason as f, type SSRFResolver as g, assertSafeUrl as h, createFxFetcher as i, createPinnedFetch as j, fxRateFor as k, resolveFxSourceFromEnv as r };
+export { type CreateFxFetcherOpts as C, DEFAULT_FX_CURRENCIES as D, type FxFetcher as F, type PlatformFxSource as P, DEFAULT_FX_RATE_SOURCE as a, type FxRateSnapshot as b, FxRateUnavailableError as c, createFxFetcher as d, FX_CACHE_TTL_MS as e, fxRateFor as f, FX_RETRY_COUNT as g, resolveFxSourceFromEnv as r, warmFxSnapshot as w };

package/dist/index.d.ts

@@ -1,12 +1,15 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './job-store-6gR4pZRP.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DVMRouteContext, I as IncomingMessage, l as InputType, m as InvalidCurrencyError, J as JobRecord, n as JobStatus, o as JobStore, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as createSignedRequestVerifier, T as isZodSchema, V as signedRequestStatementHeader, W as validateCurrency } from './job-store-6gR4pZRP.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PinnedFetch, d as PlatformFxSource, S as SSRFError, e as SSRFGuardOpts, f as SSRFReason, g as SSRFResolver, h as assertSafeUrl, i as createFxFetcher, j as createPinnedFetch, k as fxRateFor, r as resolveFxSourceFromEnv } from './ssrf-DZi-xJyn.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './job-store-m2pYmvbr.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DVMRouteContext, I as IncomingMessage, l as InputType, m as InvalidCurrencyError, J as JobRecord, n as JobStatus, o as JobStore, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as createSignedRequestVerifier, T as isZodSchema, V as signedRequestStatementHeader, W as validateCurrency } from './job-store-m2pYmvbr.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PlatformFxSource, d as createFxFetcher, f as fxRateFor, r as resolveFxSourceFromEnv } from './fx-Bq4cvn16.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-DjVAPMlf.js';
+export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-DbFkpDv0.js';
 export { z } from 'zod';
 import '@cashu/cashu-ts';
 import 'mppx';
-import 'hono';
 import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
+import 'hono';
+import 'viem';
 import 'pg';
 import '@x402/core/types';
 
@@ -32,67 +35,6 @@ declare function buildUpfront(input: {
     currency: string;
 }): Upfront;
 
-/**
- * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is
- * non-finite or non-positive. Surfaces a misconfigured fx fetcher loudly
- * instead of silently producing a 0-sats charge or a 0-fiat display string —
- * a silent 0 lost real money in internal-review slice-04. Callers obtain a valid rate
- * from the SDK's fx fetcher (which raises `FxRateUnavailableError` on
- * upstream failure); this error is the defence-in-depth backstop for any
- * caller that constructs a rate by other means.
- */
-declare class InvalidFxRateError extends Error {
-    readonly code = "invalid_fx_rate";
-    readonly ratePerBtc: unknown;
-    constructor(ratePerBtc: unknown);
-}
-/**
- * Convert a fiat amount to integer sats at the supplied fiat-per-BTC rate.
- * Rounds **up** so the operator never overcharges the caller (caller-friendly
- * rounding). Negative or non-finite amounts collapse to 0 (a $0 charge is
- * well-defined). A non-finite or non-positive `ratePerBtc` raises
- * `InvalidFxRateError` — a silent 0 would mask a misconfigured fetcher into
- * shipping a free charge. The math is currency-agnostic — `ratePerBtc` is the
- * number of units of *some* fiat per 1 BTC; the caller looks the right rate
- * out of an `FxRateSnapshot`.
- */
-declare function fiatToSatsCeil(amount: number, ratePerBtc: number): number;
-/**
- * Convert integer sats back to a fiat amount at the supplied fiat-per-BTC
- * rate. A non-finite or non-positive `ratePerBtc` raises
- * `InvalidFxRateError` — the silent `0` would land in display strings and
- * mislead callers about the value at hand.
- */
-declare function satsToFiat(sats: number, ratePerBtc: number): number;
-/**
- * Round a USD value to 4 decimal places (matches scribe's stored display
- * precision). This is the **storage / accounting** precision — preserves
- * sub-cent amounts so a `$0.0150` per-minute rate doesn't collapse to
- * `$0.02` before it ever reaches a multiplier. See {@link formatUsd} for the
- * human-render precision, which deliberately truncates at the cent boundary
- * for amounts ≥ $0.01.
- */
-declare function roundUsd(usd: number): number;
-/**
- * Format a USD amount with adaptive precision so sub-cent amounts don't
- * render as `$0.00`. The 2dp/4dp boundary at $0.01 is **human-render**
- * precision and is intentionally coarser than {@link roundUsd}'s storage
- * precision: a value like `0.015` keeps four decimals through `roundUsd`
- * (storage / multiplier inputs) but renders as `$0.02` here (human display).
- * Don't try to unify the two — they serve different surfaces.
- */
-declare function formatUsd(usd: number): string;
-/**
- * Format a fiat amount with currency-aware symbol, precision, and ISO code.
- * Used by the CLI to render payment-request `fiat_amount` envelopes ("$0.05
- * USD", "€0.05 EUR", "¥5 JPY"). Precision is adaptive: JPY has no sub-yen
- * denomination so renders as 0 decimals, every other currency uses 2 decimals
- * at or above 0.01 and 4 below so sub-cent figures don't collapse to 0.00.
- * Unknown currencies (anything not in {@link FIAT_SYMBOLS}) render with the
- * uppercased ISO code and no leading symbol.
- */
-declare function formatFiat(amount: number, currency: Currency): string;
-
 /** Create a typed DVM descriptor from a configuration object. */
 declare function configureDVM<State = Record<string, unknown>, InputSchema extends ZodLike | undefined = undefined>(config: DVMConfig<State, InputSchema>): DVMDescriptor<State, InputSchema>;
 /** Check whether this SDK module instance created a value through `configureDVM`. */
@@ -141,4 +83,4 @@ interface ProgressHeartbeatOpts {
  */
 declare function withProgressHeartbeat<T>(opts: ProgressHeartbeatOpts, fn: () => Promise<T>): Promise<T>;
 
-export { Currency, DVMConfig, DVMDescriptor, InvalidFxRateError, type ProgressHeartbeatOpts, type Upfront, ZodLike, buildUpfront, configureDVM, envFlag, fiatToSatsCeil, formatFiat, formatUsd, isConfiguredDVMDescriptor, roundUsd, satsToFiat, withProgressHeartbeat };
+export { Currency, DVMConfig, DVMDescriptor, type ProgressHeartbeatOpts, type Upfront, ZodLike, buildUpfront, configureDVM, envFlag, isConfiguredDVMDescriptor, withProgressHeartbeat };

package/dist/index.js

@@ -1,18 +1,24 @@
+import {
+  SSRFError,
+  assertSafeUrl,
+  createPinnedFetch,
+  envFlag
+} from "./chunk-TVI4V7GF.js";
+import {
+  configureDVM,
+  isConfiguredDVMDescriptor
+} from "./chunk-XYTSDAPH.js";
 import {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_MIN,
   DEFAULT_CREDIT_TTL_SECONDS,
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
-  SSRFError,
   SignedRequestError,
-  assertSafeUrl,
-  createPinnedFetch,
   createSignedRequestVerifier,
-  envFlag,
   isZodSchema,
   signedRequestStatementHeader
-} from "./chunk-KQAJVVZT.js";
+} from "./chunk-AZBXSXQT.js";
 import {
   DEFAULT_FX_CURRENCIES,
   DEFAULT_FX_RATE_SOURCE,
@@ -30,224 +36,10 @@ import {
   fiatToSatsCeil,
   formatFiat,
   formatUsd,
-  parseUsdPrice,
   roundUsd,
   satsToFiat
 } from "./chunk-AT6V3SY7.js";
 
-// src/lib/wire-schema.ts
-var CAPABILITY_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
-
-// src/sdk/configure.ts
-function configureDVM(config) {
-  const tags = collectTags(config);
-  const currency = resolvePricingCurrency(config.currency);
-  const capabilities = buildCapabilityMap(config, currency);
-  const onlyCapability = singleCapabilityEntry(capabilities);
-  const descriptor = {
-    name: config.name,
-    description: config.description ?? "",
-    tags,
-    currency,
-    price: onlyCapability?.price,
-    inputSchema: onlyCapability?.input,
-    state: onlyCapability?.state ?? {},
-    idleTimeout: config.idleTimeout ?? 3600,
-    processingWatchdog: config.processingWatchdog,
-    config,
-    capabilities,
-    paymentMethods: config.paymentMethods,
-    x402: config.x402,
-    mpp: config.mpp,
-    credit: resolveCreditConfig(config.credit),
-    auth: config.auth
-  };
-  CONFIGURED_DVM_DESCRIPTORS.add(descriptor);
-  return Object.freeze(descriptor);
-}
-function isConfiguredDVMDescriptor(value) {
-  return typeof value === "object" && value !== null && CONFIGURED_DVM_DESCRIPTORS.has(value);
-}
-var CONFIGURED_DVM_DESCRIPTORS = /* @__PURE__ */ new WeakSet();
-function resolvePricingCurrency(raw) {
-  if (raw === void 0) return "usd";
-  try {
-    return validateCurrency(raw);
-  } catch (err) {
-    if (err instanceof InvalidCurrencyError) {
-      throw new Error(
-        `configureDVM: currency ${JSON.stringify(raw)} is not an ISO 4217 lowercase code like "usd" or "eur". Omit the field to price in USD.`,
-        { cause: err }
-      );
-    }
-    throw err;
-  }
-}
-function resolveCreditConfig(credit) {
-  if (!credit) return void 0;
-  const min = credit.min ?? DEFAULT_CREDIT_MIN;
-  const max = credit.max ?? DEFAULT_CREDIT_MAX;
-  const ttlSeconds = credit.ttl ?? DEFAULT_CREDIT_TTL_SECONDS;
-  const minAmount = validatePriceLiteral(min, "credit.min");
-  const maxAmount = validatePriceLiteral(max, "credit.max");
-  if (minAmount > maxAmount) {
-    throw new Error(
-      `credit.min (${JSON.stringify(min)}) exceeds credit.max (${JSON.stringify(max)}) \u2014 no funding amount could satisfy both.`
-    );
-  }
-  if (!Number.isFinite(ttlSeconds) || ttlSeconds <= 0) {
-    throw new Error(`credit.ttl must be a positive number of seconds (got ${ttlSeconds}).`);
-  }
-  const allowOneShotStablecoin = credit.allowOneShotStablecoin === true;
-  return { min, max, ttlSeconds, allowOneShotStablecoin };
-}
-function validatePriceLiteral(value, field, key = field) {
-  if (typeof value === "number") {
-    throw new Error(
-      `${field} is a number (${value}). Prices are USD literals \u2014 write ${key}: "$0.01" for one cent. Callers still pay in sats; the SDK converts at request time. Omit the field for a free capability, or use \`onQuote\` for dynamic pricing.`
-    );
-  }
-  if (typeof value !== "string") {
-    throw new Error(`${field} must be a USD literal like "$0.05" (got ${JSON.stringify(value)}).`);
-  }
-  return parseUsdPrice(value, field);
-}
-function validateCapabilityPrice(price, capabilityName, currency) {
-  if (price === void 0) return;
-  if (currency !== "usd") {
-    throw new Error(
-      `configureDVM: capability "${capabilityName}" declares a static price (${JSON.stringify(price)}) but this DVM prices in ${currency}. Static prices are USD literals, so they cannot express ${currency} \u2014 price this capability with \`onQuote\` returning { amount, currency: ${JSON.stringify(currency)} }, or drop the DVM-level \`currency\` to price in USD.`
-    );
-  }
-  validatePriceLiteral(price, `configureDVM: capability "${capabilityName}" price`, "price");
-}
-function collectTags(config) {
-  const tagSet = /* @__PURE__ */ new Set();
-  if (config.tag) tagSet.add(config.tag);
-  if (config.tags) {
-    for (const t of config.tags) tagSet.add(t);
-  }
-  return [...tagSet];
-}
-function buildCapabilityMap(config, currency) {
-  const hasExplicitBlock = config.capabilities !== void 0;
-  const hasFlatCapabilityName = typeof config.capability === "string";
-  const hasFlatHandler = typeof config.onJob === "function";
-  if (hasExplicitBlock && (hasFlatCapabilityName || hasFlatHandler || flatPerCapFieldsSet(config))) {
-    throw new Error(
-      "configureDVM: pass either the flat single-capability shape (capability + onJob + ...) or the explicit `capabilities` block, not both."
-    );
-  }
-  if (hasExplicitBlock) {
-    return buildExplicitCapabilities(config.capabilities ?? {}, currency);
-  }
-  if (!hasFlatHandler) {
-    throw new Error("configureDVM: onJob handler is required");
-  }
-  const name = typeof config.capability === "string" ? config.capability : slugifyCapabilityName(config.name);
-  validateCapabilityName(name);
-  validateCapabilityPrice(config.price, name, currency);
-  validateExampleAgainstInput(name, config.input, config.example);
-  const entry = {
-    name,
-    description: config.description ?? "",
-    input: config.input,
-    example: config.example,
-    state: config.state ?? {},
-    price: config.price,
-    onQuote: config.onQuote,
-    onJob: config.onJob,
-    onResponse: config.onResponse,
-    onPayment: config.onPayment,
-    onApproval: config.onApproval,
-    onCancel: config.onCancel,
-    onMessage: config.onMessage
-  };
-  return { [name]: entry };
-}
-function buildExplicitCapabilities(capabilities, currency) {
-  const keys = Object.keys(capabilities);
-  if (keys.length === 0) {
-    throw new Error("configureDVM: `capabilities` block must declare at least one capability");
-  }
-  const out = {};
-  for (const name of keys) {
-    validateCapabilityName(name);
-    const cap = capabilities[name];
-    if (typeof cap.onJob !== "function") {
-      throw new Error(`configureDVM: capability "${name}" is missing required onJob handler`);
-    }
-    validateCapabilityPrice(cap.price, name, currency);
-    validateExampleAgainstInput(name, cap.input, cap.example);
-    const entry = {
-      name,
-      description: cap.description ?? "",
-      // Per-capability `input` is the builder's Zod schema; the `any` widening
-      // through `Record<string, CapabilityConfig<any, any>>` is unavoidable
-      // here.
-      // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
-      input: cap.input,
-      example: cap.example,
-      state: cap.state !== void 0 ? structuredClone(cap.state) : {},
-      price: cap.price,
-      onQuote: cap.onQuote,
-      onJob: cap.onJob,
-      onResponse: cap.onResponse,
-      onPayment: cap.onPayment,
-      onApproval: cap.onApproval,
-      onCancel: cap.onCancel,
-      onMessage: cap.onMessage
-    };
-    out[name] = entry;
-  }
-  return out;
-}
-function flatPerCapFieldsSet(config) {
-  return config.input !== void 0 || config.example !== void 0 || config.state !== void 0 || config.price !== void 0 || config.onQuote !== void 0 || typeof config.onResponse === "function" || typeof config.onPayment === "function" || typeof config.onApproval === "function" || typeof config.onCancel === "function" || typeof config.onMessage === "function";
-}
-function validateExampleAgainstInput(capName, input, example) {
-  if (example === void 0) return;
-  if (!isZodSchema(input)) return;
-  const result = input.safeParse(example);
-  if (result.success) return;
-  throw new Error(
-    `configureDVM: capability "${capName}" example does not satisfy its input schema. Update the example to match the schema (including any \`.refine()\` checks). Issues: ${formatZodIssues(result.error)}`
-  );
-}
-function formatZodIssues(err) {
-  if (err && typeof err === "object" && "issues" in err && Array.isArray(err.issues)) {
-    const issues = err.issues;
-    if (issues.length === 0) return "(no issues reported)";
-    return issues.map((issue) => {
-      const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
-      return `${path}: ${issue.message}`;
-    }).join("; ");
-  }
-  if (err && typeof err === "object" && "message" in err && typeof err.message === "string") {
-    return err.message.replace(/\s+/g, " ").trim();
-  }
-  try {
-    return JSON.stringify(err);
-  } catch {
-    return String(err);
-  }
-}
-function validateCapabilityName(name) {
-  if (!CAPABILITY_NAME_RE.test(name)) {
-    throw new Error(
-      `configureDVM: invalid capability name "${name}" \u2014 must be lowercase letters/digits/hyphens, must start with a letter or digit, must not contain slashes.`
-    );
-  }
-}
-function slugifyCapabilityName(name) {
-  return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-}
-function singleCapabilityEntry(capabilities) {
-  const keys = Object.keys(capabilities);
-  if (keys.length !== 1) return void 0;
-  return capabilities[keys[0]];
-}
-
 // src/sdk/heartbeat.ts
 async function withProgressHeartbeat(opts, fn) {
   const onProgress = opts.onProgress;