@dvmkit/sdk 0.1.0-rc.7 → 0.1.1-rc.7

package/dist/{chunk-CMDI3ENK.js → chunk-Y6W5ZZTW.js}

@@ -21234,7 +21234,7 @@ async function makeInvoice(conn, params, opts = {}) {
         throw new NwcError("missing_payment_hash", "Wallet did not return a payment hash");
       }
       callerLoggers.lightning.info("lightning.make_invoice.result", {
-        payment_hash: tx.paymentHash
+        payment_hash_hash: sha256hex(tx.paymentHash).slice(0, 16)
       });
       return tx;
     }
@@ -21246,7 +21246,7 @@ async function lookupInvoice(conn, params, opts = {}) {
     {
       relays: conn.relays.join(","),
       wallet_pubkey: conn.walletPubkey,
-      payment_hash: params.paymentHash
+      payment_hash_hash: params.paymentHash ? sha256hex(params.paymentHash).slice(0, 16) : void 0
     },
     async () => {
       const body = {};
@@ -21260,6 +21260,31 @@ async function lookupInvoice(conn, params, opts = {}) {
     }
   );
 }
+async function listTransactions(conn, options, opts = {}) {
+  return callerLoggers.lightning.span(
+    "lightning.list_transactions",
+    {
+      relays: conn.relays.join(","),
+      wallet_pubkey: conn.walletPubkey,
+      from: options.from,
+      limit: options.limit
+    },
+    async () => {
+      const body = {};
+      if (options.from !== void 0) body.from = options.from;
+      if (options.limit !== void 0) body.limit = options.limit;
+      const result = await sendNwcRequest(conn, "list_transactions", body, opts);
+      if (!Array.isArray(result.transactions)) {
+        throw new NwcError("invalid_response", "Wallet did not return a transaction list.");
+      }
+      const transactions = result.transactions.map(toTransactionSnapshot);
+      callerLoggers.lightning.info("lightning.list_transactions.result", {
+        transaction_count: transactions.length
+      });
+      return transactions;
+    }
+  );
+}
 var VOLUNTEERED_BUDGET_KEYS = [
   "budget",
   "budget_renewal",
@@ -21309,6 +21334,7 @@ async function attemptPayment(conn, method, event, pool, timeoutMs) {
 async function reconcile(conn, bolt11, pool, timeoutMs) {
   try {
     const tx = await lookupInvoice(conn, { invoice: bolt11 }, { pool, timeoutMs });
+    if (tx.invoice !== bolt11) return { kind: "unknown" };
     if (tx.settledAt != null && tx.preimage) {
       return {
         kind: "settled",
@@ -21448,7 +21474,46 @@ function toTransaction(raw) {
     ...feesPaidMsats !== void 0 ? { feesPaidMsats } : {},
     createdAt: raw.created_at ?? Math.floor(Date.now() / 1e3),
     expiresAt: raw.expires_at,
-    settledAt: raw.settled_at
+    settledAt: raw.settled_at ?? void 0
+  };
+}
+function toTransactionSnapshot(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new NwcError("invalid_response", "Wallet returned a malformed transaction.");
+  }
+  const raw = value;
+  if (raw.type !== "incoming" && raw.type !== "outgoing") {
+    throw new NwcError("invalid_response", "Wallet returned an invalid transaction type.");
+  }
+  const amountMsats = requiredNonNegativeInteger(raw.amount, "amount");
+  const createdAt = requiredNonNegativeInteger(raw.created_at, "creation time");
+  const feesPaidMsats = optionalFeeMsats(raw.fees_paid);
+  if (raw.fees_paid != null && feesPaidMsats === void 0) {
+    throw new NwcError("invalid_response", "Wallet returned an invalid transaction fee.");
+  }
+  const settledAt = optionalNonNegativeInteger(raw.settled_at);
+  if (raw.settled_at != null && settledAt === void 0) {
+    throw new NwcError("invalid_response", "Wallet returned an invalid settlement time.");
+  }
+  const invoice = optionalPrivateString(raw.invoice, "invoice");
+  const paymentHash = optionalPrivateString(raw.payment_hash, "payment hash");
+  const reducedIdentity = {
+    type: raw.type,
+    invoice: invoice ?? null,
+    paymentHash: paymentHash ?? null,
+    amountMsats,
+    feesPaidMsats: feesPaidMsats ?? null,
+    createdAt,
+    settledAt: settledAt ?? null
+  };
+  return {
+    fingerprint: sha256hex(JSON.stringify(reducedIdentity)),
+    ...invoice ? { invoiceHash: sha256hex(invoice) } : {},
+    type: raw.type,
+    amountMsats,
+    ...feesPaidMsats !== void 0 ? { feesPaidMsats } : {},
+    createdAt,
+    ...settledAt !== void 0 ? { settledAt } : {}
   };
 }
 function settledOutcome(payment, outcome) {
@@ -21461,6 +21526,23 @@ function settledOutcome(payment, outcome) {
 function optionalFeeMsats(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
 }
+function optionalNonNegativeInteger(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
+}
+function requiredNonNegativeInteger(value, field) {
+  const parsed = optionalNonNegativeInteger(value);
+  if (parsed === void 0) {
+    throw new NwcError("invalid_response", `Wallet returned an invalid transaction ${field}.`);
+  }
+  return parsed;
+}
+function optionalPrivateString(value, field) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value !== "string" || value.length === 0) {
+    throw new NwcError("invalid_response", `Wallet returned an invalid transaction ${field}.`);
+  }
+  return value;
+}
 async function publishEvent(pool, relays, event) {
   const connections = await Promise.allSettled(relays.map((url) => pool.ensureRelay(url)));
   const live = connections.flatMap((c) => c.status === "fulfilled" ? [c.value] : []);
@@ -21545,6 +21627,9 @@ var NwcBackend = class {
       expiresAt: tx.expiresAt != null ? tx.expiresAt * 1e3 : void 0
     };
   }
+  async listTransactions(options) {
+    return listTransactions(this.conn, options, this.opts);
+  }
 };
 
 // src/sdk/server/tempo-observer-health.ts
@@ -21896,6 +21981,7 @@ export {
   revenueReporterBannerState,
   createDVMServer,
   unknownRouteNotFound,
+  sha256hex,
   NwcError,
   nwcTimeoutMs,
   nwcDedupWindowMs,
@@ -21906,6 +21992,7 @@ export {
   getInfo,
   makeInvoice,
   lookupInvoice,
+  listTransactions,
   NwcBackend,
   createPlatformTempoObserverHealth
 };

package/dist/{credit-menu-CYkETVM4.d.ts → credit-menu-BrTfAr7l.d.ts}

@@ -1,7 +1,7 @@
 import { Hono, Context } from 'hono';
 import { Pool } from 'pg';
-import { X as JsonValue, bR as CreditLedgerLike, b_ as CreditInvoiceRecord, d3 as CreditDepositEnqueue, b$ as InvoiceSettlement, Z as ZodLike, a as DVMDescriptor, K as KVStore, o as JobStore, ah as CashuMode, at as MppxServer, aa as X402Config, p as PaymentMethod, cu as ClientCompatibilityGate, a2 as Message, ap as FundingMethod, Y as FundingReceipt, bT as CreditSnapshot, d4 as TopUpCapUnenforcedReason, _ as JobReceipt, cn as AppendOutgoingOptions, S as SDKJobContext, aQ as StepCache, v as ResponseContent, P as PaymentContent, J as JobRecord, a3 as MessageType, ac as X402Receipt, ab as X402ExactVersionSupport, d5 as X402SettlementIntent, aE as PaymentRequirementsV2, c6 as CreditLedgerQuerier, d6 as X402SettlementCursor, bV as X402SettlementStatus, d7 as X402SettlementWriteOff, bS as X402RefundSettlementGate, d8 as X402FacilitatorAuth, d9 as X402BatchSettlementConfig, cK as PostgresX402ChannelStorage, da as X402PayoutObserver, db as X402SettlementReconciliationReason, aC as PaymentRequirements, a1 as MppxCredential, aj as CreditDepositPayload, bU as DrawResult, cA as CreditLedgerError, a7 as ReceiptCredit, al as DrainReceiptEvent, ak as DrainReceipt, z as SignedRequestAudience, dc as CreditDrawReleaseEnqueue, cM as RevenueSkippedNoRailPayload, cs as ClientCompatibility, aF as PayoutReporter, R as ResolvedCreditConfig, g as CreditView } from './job-store-BtCaLnvJ.js';
-import { F as FxFetcher, b as FxRateSnapshot } from './fx-Pf4Ey4f_.js';
+import { X as JsonValue, bR as CreditLedgerLike, b_ as CreditInvoiceRecord, d3 as CreditDepositEnqueue, b$ as InvoiceSettlement, Z as ZodLike, a as DVMDescriptor, K as KVStore, o as JobStore, ah as CashuMode, at as MppxServer, aa as X402Config, p as PaymentMethod, cu as ClientCompatibilityGate, a2 as Message, ap as FundingMethod, Y as FundingReceipt, bT as CreditSnapshot, d4 as TopUpCapUnenforcedReason, _ as JobReceipt, cn as AppendOutgoingOptions, S as SDKJobContext, aQ as StepCache, v as ResponseContent, P as PaymentContent, J as JobRecord, a3 as MessageType, ac as X402Receipt, ab as X402ExactVersionSupport, d5 as X402SettlementIntent, aE as PaymentRequirementsV2, c6 as CreditLedgerQuerier, d6 as X402SettlementCursor, bV as X402SettlementStatus, d7 as X402SettlementWriteOff, bS as X402RefundSettlementGate, d8 as X402FacilitatorAuth, d9 as X402BatchSettlementConfig, cK as PostgresX402ChannelStorage, da as X402PayoutObserver, db as X402SettlementReconciliationReason, aC as PaymentRequirements, a1 as MppxCredential, aj as CreditDepositPayload, bU as DrawResult, cA as CreditLedgerError, a7 as ReceiptCredit, al as DrainReceiptEvent, ak as DrainReceipt, z as SignedRequestAudience, dc as CreditDrawReleaseEnqueue, cM as RevenueSkippedNoRailPayload, cs as ClientCompatibility, aF as PayoutReporter, R as ResolvedCreditConfig, g as CreditView } from './job-store-DOSfYnLX.js';
+import { F as FxFetcher, b as FxRateSnapshot } from './fx-H6K6qcH1.js';
 import { ProofLike, SerializedDLEQ } from '@cashu/cashu-ts';
 import { Challenge } from 'mppx';
 import { SettleResponse, SupportedResponse } from '@x402/core/types';
@@ -400,6 +400,30 @@ interface LightningPayment {
     /** Whether the wallet answered directly, or the outcome had to be reconciled. */
     outcome: LightningPayOutcome;
 }
+/** Bounds for a read-only wallet transaction snapshot. */
+interface LightningTransactionListOptions {
+    /** Include transactions created at or after this Unix timestamp (seconds). */
+    from?: number;
+    /** Maximum number of transactions the wallet may return. */
+    limit?: number;
+}
+/**
+ * Credential-safe transaction evidence used to account for a wallet debit.
+ *
+ * Invoice, payment hash and preimage are deliberately replaced by digests or
+ * omitted. `fingerprint` identifies the complete reduced row; `invoiceHash`
+ * lets a caller bind an outgoing row to the invoice it just paid.
+ */
+interface LightningTransactionSnapshot {
+    fingerprint: string;
+    invoiceHash?: string;
+    type: "incoming" | "outgoing";
+    amountMsats: number;
+    /** Wallet-reported routing fee. Absent when the wallet omitted it. */
+    feesPaidMsats?: number;
+    createdAt: number;
+    settledAt?: number;
+}
 /** What a backend can tell us about the wallet behind it. */
 interface LightningWalletInfo {
     /** Human-readable wallet name (e.g. "Alby Hub"). */
@@ -441,6 +465,12 @@ interface LightningBackend {
     }): Promise<CreatedInvoice>;
     /** Look up an invoice's settlement status by payment hash. */
     lookupInvoice(paymentHash: string): Promise<InvoiceStatus>;
+    /**
+     * Return a bounded, credential-safe transaction snapshot when supported.
+     * Optional so existing backends remain source-compatible; without it an
+     * exact total wallet debit cannot be attributed.
+     */
+    listTransactions?(options: LightningTransactionListOptions): Promise<LightningTransactionSnapshot[]>;
 }
 
 /**
@@ -5092,4 +5122,4 @@ declare function attachCreditMenu(body: Record<string, unknown>, menu: CreditMen
  */
 declare function toCreditTerms(menu: CreditMenu): CreditTerms;
 
-export { buildPaymentErrorResponse as $, type AccumulatorPool as A, type BuilderIdentityKeypair as B, type CreatedInvoice as C, type X402SettlementRepair as D, type X402SettlementRepairRefusal as E, type FiatDenomination as F, type X402SettlementRepaired as G, type X402WedgedSettlement as H, type InvoiceStatus as I, JobCancelledError as J, type X402WedgedSettlementPage as K, type LightningBackend as L, type MintAmountBounds as M, X402_BATCH_SETTLEMENT_MAINNET_NETWORK as N, abortJob as O, PAYMENT_PROOF_KEYS as P, amountBoundsVerdict as Q, type ReporterBannerOpts as R, type SDKServerOpts as S, type TempoChannelReport as T, type UpfrontPaymentOpts as U, type VerifiedIncomingPayment as V, applyPaymentInfoToJob as W, type X402BatchChannelObservation as X, assertNutSupport as Y, assertRevenueReporterReady as Z, buildAttestation as _, type LightningPayment as a, type MemoryConsumedCredentialStoreOpts as a$, canSwap as a0, checkMintHealth as a1, clearAccumulatorForDvm as a2, createDVMServer as a3, creditDepositPayload as a4, derivedFundCreditId as a5, devModeSkipsPaymentVerification as a6, fromJobRecord as a7, fundedMicroFor as a8, generateIdentity as a9, verifyAttestation as aA, verifyIncomingPayment as aB, verifyTempoSessionManagementCredential as aC, verifyUpfrontPayment as aD, writeIdentity as aE, x402RequiredUsdcMicro as aF, x402SettledShare as aG, type CreditMenu as aH, ReceiptIssuer as aI, LightningReceive as aJ, TempoSettlementReadiness as aK, type DVMHostOpts as aL, type BuildCreditMenuArgs as aM, type BuilderIdentity as aN, CREDIT_ENVELOPE_KEYS as aO, type CreateX402BatchSettlementServerOpts as aP, type CreditEnvelope as aQ, CreditEnvelopeError as aR, type CreditFundCommitment as aS, type CreditTerms as aT, DEFAULT_INVOICE_TTL_SECONDS as aU, type DVMHost as aV, JobManager as aW, type JobManagerOpts as aX, type LightningReceiveConfig as aY, MIN_INVOICE_TTL_SECONDS as aZ, MemoryConsumedCredentialStore as a_, hasPaymentProof as aa, hashCapabilities as ab, hashLockKey as ac, implicitCreditId as ad, initWalletAccumulatorTable as ae, insertAccumulatorRows as af, isDerivedCreditId as ag, isTerminal as ah, isYieldMessage as ai, issueUpfrontChallenges as aj, loadIdentitySecret as ak, toLockPubkey as al, msatsToFiatMicro as am, paymentErrorBody as an, pinAskFiat as ao, priceFiatMicro as ap, processIncomingPayment as aq, providerMessage as ar, repairX402ExactSettlementEffect as as, resolveFxSnapshot as at, resolvePriceFiat as au, revenueReporterBannerState as av, signAttestation as aw, toCreditTerms as ax, toJobRecord as ay, unknownRouteNotFound as az, type LightningWalletInfo as b, MemoryProcessedPaymentStore as b0, MemoryX402ExactSettlementStore as b1, type MountOpts as b2, type OwnerDisplay as b3, type PlatformReporterOpts as b4, PostgresProcessedPaymentStore as b5, PostgresX402ExactSettlementStore as b6, type PriceFiat as b7, type ProcessedPaymentQuerier as b8, type ProcessedPaymentRail as b9, attachCreditMenu as bA, buildCreditMenu as bB, createDVMHost as bC, createX402BatchSettlementServer as bD, creditEnvelopeIgnoreFields as bE, drawSettlementRef as bF, extractCreditEnvelope as bG, fundingCommitment as bH, selectPrimaryCredit as bI, stripCreditEnvelope as bJ, toCreditView as bK, type ProcessedPaymentRecord as ba, ProcessedPaymentReplayError as bb, type ProcessedPaymentStore as bc, type X402BatchAcceptance as bd, type X402BatchFunding as be, type X402BatchRefusal as bf, type X402BatchSettlementServer as bg, type X402ExactAcceptance as bh, X402ExactIntentConflictError as bi, type X402ExactSettlementAttempt as bj, type X402ExactSettlementChainEvidence as bk, type X402ExactSettlementEffect as bl, X402ExactSettlementEvidenceMissingError as bm, type X402ExactSettlementEvidenceReader as bn, type X402ExactSettlementIntent as bo, X402ExactSettlementNotReadyError as bp, X402ExactSettlementServer as bq, type X402ExactSettlementServerOpts as br, type X402ExactSettlementStatus as bs, type X402ExactSettlementStore as bt, type X402SettlementChainEvidence as bu, type X402SettlementEvidenceReader as bv, X402SettlementSubmissionError as bw, X402_BATCH_AUTO_SETTLEMENT as bx, X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS as by, X402_BATCH_SETTLEMENT_NETWORK as bz, type LockPubkey as c, type AccumulatorQuerier as d, type ConsumedCredentialStore as e, type MintHealthCheckResult as f, type AppEnv as g, type AttestationPayload as h, type CheckMintHealthOptions as i, type CreditFundingReport as j, type FiatDenominationFailure as k, type FundOnlyRequest as l, type IncomingPaymentOpts as m, MintHealthTracker as n, type PaymentErrorCode as o, type PaymentErrorDetail as p, type PaymentInfo as q, type ResolvedFx as r, type RevenueBootCheckOpts as s, type ServerJob as t, type ShortPayForfeit as u, type TempoObserverHealth as v, TempoSessionChannelMismatchError as w, type VerifyIncomingSnapshot as x, X402FacilitatorHealth as y, type X402SettlementEvidenceOutcome as z };
+export { assertRevenueReporterReady as $, type AccumulatorPool as A, type BuilderIdentityKeypair as B, type CreatedInvoice as C, X402FacilitatorHealth as D, type X402SettlementEvidenceOutcome as E, type FiatDenomination as F, type X402SettlementRepair as G, type X402SettlementRepairRefusal as H, type InvoiceStatus as I, JobCancelledError as J, type X402SettlementRepaired as K, type LightningTransactionListOptions as L, type MintAmountBounds as M, type X402WedgedSettlement as N, type X402WedgedSettlementPage as O, PAYMENT_PROOF_KEYS as P, X402_BATCH_SETTLEMENT_MAINNET_NETWORK as Q, type ReporterBannerOpts as R, type SDKServerOpts as S, type TempoChannelReport as T, type UpfrontPaymentOpts as U, type VerifiedIncomingPayment as V, abortJob as W, type X402BatchChannelObservation as X, amountBoundsVerdict as Y, applyPaymentInfoToJob as Z, assertNutSupport as _, type LightningTransactionSnapshot as a, MIN_INVOICE_TTL_SECONDS as a$, buildAttestation as a0, buildPaymentErrorResponse as a1, canSwap as a2, checkMintHealth as a3, clearAccumulatorForDvm as a4, createDVMServer as a5, creditDepositPayload as a6, derivedFundCreditId as a7, devModeSkipsPaymentVerification as a8, fromJobRecord as a9, toJobRecord as aA, unknownRouteNotFound as aB, verifyAttestation as aC, verifyIncomingPayment as aD, verifyTempoSessionManagementCredential as aE, verifyUpfrontPayment as aF, writeIdentity as aG, x402RequiredUsdcMicro as aH, x402SettledShare as aI, type CreditMenu as aJ, ReceiptIssuer as aK, LightningReceive as aL, TempoSettlementReadiness as aM, type DVMHostOpts as aN, type BuildCreditMenuArgs as aO, type BuilderIdentity as aP, CREDIT_ENVELOPE_KEYS as aQ, type CreateX402BatchSettlementServerOpts as aR, type CreditEnvelope as aS, CreditEnvelopeError as aT, type CreditFundCommitment as aU, type CreditTerms as aV, DEFAULT_INVOICE_TTL_SECONDS as aW, type DVMHost as aX, JobManager as aY, type JobManagerOpts as aZ, type LightningReceiveConfig as a_, fundedMicroFor as aa, generateIdentity as ab, hasPaymentProof as ac, hashCapabilities as ad, hashLockKey as ae, implicitCreditId as af, initWalletAccumulatorTable as ag, insertAccumulatorRows as ah, isDerivedCreditId as ai, isTerminal as aj, isYieldMessage as ak, issueUpfrontChallenges as al, loadIdentitySecret as am, toLockPubkey as an, msatsToFiatMicro as ao, paymentErrorBody as ap, pinAskFiat as aq, priceFiatMicro as ar, processIncomingPayment as as, providerMessage as at, repairX402ExactSettlementEffect as au, resolveFxSnapshot as av, resolvePriceFiat as aw, revenueReporterBannerState as ax, signAttestation as ay, toCreditTerms as az, type LightningBackend as b, MemoryConsumedCredentialStore as b0, type MemoryConsumedCredentialStoreOpts as b1, MemoryProcessedPaymentStore as b2, MemoryX402ExactSettlementStore as b3, type MountOpts as b4, type OwnerDisplay as b5, type PlatformReporterOpts as b6, PostgresProcessedPaymentStore as b7, PostgresX402ExactSettlementStore as b8, type PriceFiat as b9, X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS as bA, X402_BATCH_SETTLEMENT_NETWORK as bB, attachCreditMenu as bC, buildCreditMenu as bD, createDVMHost as bE, createX402BatchSettlementServer as bF, creditEnvelopeIgnoreFields as bG, drawSettlementRef as bH, extractCreditEnvelope as bI, fundingCommitment as bJ, selectPrimaryCredit as bK, stripCreditEnvelope as bL, toCreditView as bM, type ProcessedPaymentQuerier as ba, type ProcessedPaymentRail as bb, type ProcessedPaymentRecord as bc, ProcessedPaymentReplayError as bd, type ProcessedPaymentStore as be, type X402BatchAcceptance as bf, type X402BatchFunding as bg, type X402BatchRefusal as bh, type X402BatchSettlementServer as bi, type X402ExactAcceptance as bj, X402ExactIntentConflictError as bk, type X402ExactSettlementAttempt as bl, type X402ExactSettlementChainEvidence as bm, type X402ExactSettlementEffect as bn, X402ExactSettlementEvidenceMissingError as bo, type X402ExactSettlementEvidenceReader as bp, type X402ExactSettlementIntent as bq, X402ExactSettlementNotReadyError as br, X402ExactSettlementServer as bs, type X402ExactSettlementServerOpts as bt, type X402ExactSettlementStatus as bu, type X402ExactSettlementStore as bv, type X402SettlementChainEvidence as bw, type X402SettlementEvidenceReader as bx, X402SettlementSubmissionError as by, X402_BATCH_AUTO_SETTLEMENT as bz, type LightningPayment as c, type LightningWalletInfo as d, type LockPubkey as e, type AccumulatorQuerier as f, type ConsumedCredentialStore as g, type MintHealthCheckResult as h, type AppEnv as i, type AttestationPayload as j, type CheckMintHealthOptions as k, type CreditFundingReport as l, type FiatDenominationFailure as m, type FundOnlyRequest as n, type IncomingPaymentOpts as o, MintHealthTracker as p, type PaymentErrorCode as q, type PaymentErrorDetail as r, type PaymentInfo as s, type ResolvedFx as t, type RevenueBootCheckOpts as u, type ServerJob as v, type ShortPayForfeit as w, type TempoObserverHealth as x, TempoSessionChannelMismatchError as y, type VerifyIncomingSnapshot as z };

package/dist/{fx-Pf4Ey4f_.d.ts → fx-H6K6qcH1.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './job-store-BtCaLnvJ.js';
+import { C as Currency } from './job-store-DOSfYnLX.js';
 
 /**
  * Quote-time fx snapshot. Embedded in scribe's `lockedQuote` for within-job

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './job-store-BtCaLnvJ.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DVMRouteContext, I as IncomingMessage, l as InputType, m as InvalidCurrencyError, J as JobRecord, n as JobStatus, o as JobStore, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as createSignedRequestVerifier, T as isZodSchema, V as signedRequestStatementHeader, W as validateCurrency } from './job-store-BtCaLnvJ.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PlatformFxSource, d as createFxFetcher, f as fxRateFor, r as resolveFxSourceFromEnv } from './fx-Pf4Ey4f_.js';
-export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-D7fW2S7I.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './job-store-DOSfYnLX.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DVMRouteContext, I as IncomingMessage, l as InputType, m as InvalidCurrencyError, J as JobRecord, n as JobStatus, o as JobStore, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as createSignedRequestVerifier, T as isZodSchema, V as signedRequestStatementHeader, W as validateCurrency } from './job-store-DOSfYnLX.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PlatformFxSource, d as createFxFetcher, f as fxRateFor, r as resolveFxSourceFromEnv } from './fx-H6K6qcH1.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-Civ738b3.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-DbFkpDv0.js';
 export { z } from 'zod';
 import '@cashu/cashu-ts';

package/dist/internal/index.d.ts

@@ -1,16 +1,16 @@
-import { L as LightningBackend, a as LightningPayment, b as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus, A as AccumulatorPool, c as LockPubkey, d as AccumulatorQuerier, e as ConsumedCredentialStore, M as MintAmountBounds, f as MintHealthCheckResult } from '../credit-menu-CYkETVM4.js';
-export { g as AppEnv, h as AttestationPayload, B as BuilderIdentityKeypair, i as CheckMintHealthOptions, j as CreditFundingReport, F as FiatDenomination, k as FiatDenominationFailure, l as FundOnlyRequest, m as IncomingPaymentOpts, J as JobCancelledError, n as MintHealthTracker, P as PAYMENT_PROOF_KEYS, o as PaymentErrorCode, p as PaymentErrorDetail, q as PaymentInfo, R as ReporterBannerOpts, r as ResolvedFx, s as RevenueBootCheckOpts, S as SDKServerOpts, t as ServerJob, u as ShortPayForfeit, T as TempoChannelReport, v as TempoObserverHealth, w as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, x as VerifyIncomingSnapshot, X as X402BatchChannelObservation, y as X402FacilitatorHealth, z as X402SettlementEvidenceOutcome, D as X402SettlementRepair, E as X402SettlementRepairRefusal, G as X402SettlementRepaired, H as X402WedgedSettlement, K as X402WedgedSettlementPage, N as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, O as abortJob, Q as amountBoundsVerdict, W as applyPaymentInfoToJob, Y as assertNutSupport, Z as assertRevenueReporterReady, _ as buildAttestation, $ as buildPaymentErrorResponse, a0 as canSwap, a1 as checkMintHealth, a2 as clearAccumulatorForDvm, a3 as createDVMServer, a4 as creditDepositPayload, a5 as derivedFundCreditId, a6 as devModeSkipsPaymentVerification, a7 as fromJobRecord, a8 as fundedMicroFor, a9 as generateIdentity, aa as hasPaymentProof, ab as hashCapabilities, ac as hashLockKey, ad as implicitCreditId, ae as initWalletAccumulatorTable, af as insertAccumulatorRows, ag as isDerivedCreditId, ah as isTerminal, ai as isYieldMessage, aj as issueUpfrontChallenges, ak as loadIdentitySecret, al as lockPubkeyStoreToLockPubkey, am as msatsToFiatMicro, an as paymentErrorBody, ao as pinAskFiat, ap as priceFiatMicro, aq as processIncomingPayment, ar as providerMessage, as as repairX402ExactSettlementEffect, at as resolveFxSnapshot, au as resolvePriceFiat, av as revenueReporterBannerState, aw as signAttestation, ax as toCreditTerms, ay as toJobRecord, al as toLockPubkey, az as unknownRouteNotFound, aA as verifyAttestation, aB as verifyIncomingPayment, aC as verifyTempoSessionManagementCredential, aD as verifyUpfrontPayment, aE as writeIdentity, aF as x402RequiredUsdcMicro, aG as x402SettledShare } from '../credit-menu-CYkETVM4.js';
+import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus, A as AccumulatorPool, e as LockPubkey, f as AccumulatorQuerier, g as ConsumedCredentialStore, M as MintAmountBounds, h as MintHealthCheckResult } from '../credit-menu-BrTfAr7l.js';
+export { i as AppEnv, j as AttestationPayload, B as BuilderIdentityKeypair, k as CheckMintHealthOptions, l as CreditFundingReport, F as FiatDenomination, m as FiatDenominationFailure, n as FundOnlyRequest, o as IncomingPaymentOpts, J as JobCancelledError, p as MintHealthTracker, P as PAYMENT_PROOF_KEYS, q as PaymentErrorCode, r as PaymentErrorDetail, s as PaymentInfo, R as ReporterBannerOpts, t as ResolvedFx, u as RevenueBootCheckOpts, S as SDKServerOpts, v as ServerJob, w as ShortPayForfeit, T as TempoChannelReport, x as TempoObserverHealth, y as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, z as VerifyIncomingSnapshot, X as X402BatchChannelObservation, D as X402FacilitatorHealth, E as X402SettlementEvidenceOutcome, G as X402SettlementRepair, H as X402SettlementRepairRefusal, K as X402SettlementRepaired, N as X402WedgedSettlement, O as X402WedgedSettlementPage, Q as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, W as abortJob, Y as amountBoundsVerdict, Z as applyPaymentInfoToJob, _ as assertNutSupport, $ as assertRevenueReporterReady, a0 as buildAttestation, a1 as buildPaymentErrorResponse, a2 as canSwap, a3 as checkMintHealth, a4 as clearAccumulatorForDvm, a5 as createDVMServer, a6 as creditDepositPayload, a7 as derivedFundCreditId, a8 as devModeSkipsPaymentVerification, a9 as fromJobRecord, aa as fundedMicroFor, ab as generateIdentity, ac as hasPaymentProof, ad as hashCapabilities, ae as hashLockKey, af as implicitCreditId, ag as initWalletAccumulatorTable, ah as insertAccumulatorRows, ai as isDerivedCreditId, aj as isTerminal, ak as isYieldMessage, al as issueUpfrontChallenges, am as loadIdentitySecret, an as lockPubkeyStoreToLockPubkey, ao as msatsToFiatMicro, ap as paymentErrorBody, aq as pinAskFiat, ar as priceFiatMicro, as as processIncomingPayment, at as providerMessage, au as repairX402ExactSettlementEffect, av as resolveFxSnapshot, aw as resolvePriceFiat, ax as revenueReporterBannerState, ay as signAttestation, az as toCreditTerms, aA as toJobRecord, an as toLockPubkey, aB as unknownRouteNotFound, aC as verifyAttestation, aD as verifyIncomingPayment, aE as verifyTempoSessionManagementCredential, aF as verifyUpfrontPayment, aG as writeIdentity, aH as x402RequiredUsdcMicro, aI as x402SettledShare } from '../credit-menu-BrTfAr7l.js';
 import { ProofLike, MeltQuoteBolt11Response, Proof, Wallet, SerializedDLEQ, MintQuoteBolt11Response, MintQuoteState, MintPreview, OutputDataLike, CounterSource, CounterRange } from '@cashu/cashu-ts';
-import { X as JsonValue, B as SignedRequestDomain, M as SignedRequestStatementHeader, Y as FundingReceipt, _ as JobReceipt$1, z as SignedRequestAudience, $ as PaymentRequired, a0 as X402Version, a1 as MppxCredential, a2 as Message, a3 as MessageType, a4 as MppxChallenge, a5 as X402_BATCH_SETTLEMENT_SCHEME, a6 as X402_EXACT_SCHEME, a7 as ReceiptCredit, C as Currency, a8 as X402Wallet, a9 as ResourceInfo, aa as X402Config, ab as X402ExactVersionSupport, ac as X402Receipt, L as Logger$1, ad as TransactionalPayoutHook, ae as CashuMeltCompleted, K as KVStore } from '../job-store-BtCaLnvJ.js';
-export { af as BuildPaymentRequirementsOpts, ag as CapabilityDescriptor, ah as CashuMode, ai as CompleteContent, aj as CreditDepositPayload, ak as DrainReceipt, al as DrainReceiptEvent, am as ExactEvmPayload, an as ExactEvmPayloadAuthorization, ao as FundingLot, ap as FundingMethod, aq as LotDebit, ar as LotDepletion, as as MessageFrom, at as MppxServer, au as NON_CHANNEL_BITCOIN_RAILS, av as NonChannelBitcoinRail, aw as OutgoingMessage, ax as PaymentPayload, ay as PaymentPayloadV1, az as PaymentPayloadV2, aA as PaymentRequestContent, aB as PaymentRequiredV2, aC as PaymentRequirements, aD as PaymentRequirementsV1, aE as PaymentRequirementsV2, aF as PayoutReporter, aG as PostgresTempoSessionStore, aH as PromptContent, aI as RAIL_REFUNDABLE, aJ as ReceiptOutcome, aK as ReceiptPayment, aL as RevenueReporter, aM as SIGNED_ENVELOPE_FIELDS, aN as SIGNED_ENVELOPE_TYPES, aO as SettleResponse, aP as StaleJobReapable, aQ as StepCache, aR as StepRecord, aS as TextContent, aT as UnsignedDrainReceipt, aU as UnsignedFundingReceipt, aV as UnsignedJobReceipt, aW as VerifyResponse, aX as WorkingContent, aY as X402ResponseBody, aZ as X402SelfRelayRpcFailureReason, a_ as X402TrackedChannel, a$ as X402_DEFAULT_NETWORK, b0 as X402_V1_VERSION, b1 as X402_VERSION, b2 as _testing, b3 as buildPaymentRequiredV2, b4 as buildPaymentRequirements, b5 as caip2ToX402Network, b6 as canonicalRequestPath, b7 as canonicaliseForSigning, b8 as canonicalize, b9 as chainIdFromCaip2, ba as computeResultHash, bb as createDefaultReplayStore, bc as decodePayment, bd as decodePaymentRequiredHeader, be as depleteLots, bf as encodePayment, bg as encodePaymentRequiredHeader, bh as encodeSettleResponseHeader, bi as exactEvmAuthorization, bj as fifoOrder, bk as inKindDrawMsats, bl as isArtifactMessage, bm as isCancelMessage, bn as isCompleteMessage, bo as isDrainReceipt, bp as isFundingReceipt, bq as isInKindDepletion, br as isNonChannelBitcoinRail, bs as isPaymentRequestMessage, bt as isPromptMessage, bu as isSignedJobReceipt, bv as isStaleJobReapable, bw as isTextMessage, bx as isWorkingMessage, by as lotOwedSats, bz as netOwedSats, bA as paymentRequiredV2FromV1, bB as settleWithFacilitator, bC as signDrainReceipt, bD as signFundingReceipt, bE as signReceipt, bF as usdcContractByCaip2, bG as usdcContractFor, bH as usdcDomainNameFor, bI as usdcDomainVersionFor, bJ as verifyDrainReceipt, bK as verifyFundingReceipt, bL as verifyReceipt, bM as verifyWithFacilitator, bN as wrapMppx, bO as x402NetworkToCaip2 } from '../job-store-BtCaLnvJ.js';
+import { X as JsonValue, B as SignedRequestDomain, M as SignedRequestStatementHeader, Y as FundingReceipt, _ as JobReceipt$1, z as SignedRequestAudience, $ as PaymentRequired, a0 as X402Version, a1 as MppxCredential, a2 as Message, a3 as MessageType, a4 as MppxChallenge, a5 as X402_BATCH_SETTLEMENT_SCHEME, a6 as X402_EXACT_SCHEME, a7 as ReceiptCredit, C as Currency, a8 as X402Wallet, a9 as ResourceInfo, aa as X402Config, ab as X402ExactVersionSupport, ac as X402Receipt, L as Logger$1, ad as TransactionalPayoutHook, ae as CashuMeltCompleted, K as KVStore } from '../job-store-DOSfYnLX.js';
+export { af as BuildPaymentRequirementsOpts, ag as CapabilityDescriptor, ah as CashuMode, ai as CompleteContent, aj as CreditDepositPayload, ak as DrainReceipt, al as DrainReceiptEvent, am as ExactEvmPayload, an as ExactEvmPayloadAuthorization, ao as FundingLot, ap as FundingMethod, aq as LotDebit, ar as LotDepletion, as as MessageFrom, at as MppxServer, au as NON_CHANNEL_BITCOIN_RAILS, av as NonChannelBitcoinRail, aw as OutgoingMessage, ax as PaymentPayload, ay as PaymentPayloadV1, az as PaymentPayloadV2, aA as PaymentRequestContent, aB as PaymentRequiredV2, aC as PaymentRequirements, aD as PaymentRequirementsV1, aE as PaymentRequirementsV2, aF as PayoutReporter, aG as PostgresTempoSessionStore, aH as PromptContent, aI as RAIL_REFUNDABLE, aJ as ReceiptOutcome, aK as ReceiptPayment, aL as RevenueReporter, aM as SIGNED_ENVELOPE_FIELDS, aN as SIGNED_ENVELOPE_TYPES, aO as SettleResponse, aP as StaleJobReapable, aQ as StepCache, aR as StepRecord, aS as TextContent, aT as UnsignedDrainReceipt, aU as UnsignedFundingReceipt, aV as UnsignedJobReceipt, aW as VerifyResponse, aX as WorkingContent, aY as X402ResponseBody, aZ as X402SelfRelayRpcFailureReason, a_ as X402TrackedChannel, a$ as X402_DEFAULT_NETWORK, b0 as X402_V1_VERSION, b1 as X402_VERSION, b2 as _testing, b3 as buildPaymentRequiredV2, b4 as buildPaymentRequirements, b5 as caip2ToX402Network, b6 as canonicalRequestPath, b7 as canonicaliseForSigning, b8 as canonicalize, b9 as chainIdFromCaip2, ba as computeResultHash, bb as createDefaultReplayStore, bc as decodePayment, bd as decodePaymentRequiredHeader, be as depleteLots, bf as encodePayment, bg as encodePaymentRequiredHeader, bh as encodeSettleResponseHeader, bi as exactEvmAuthorization, bj as fifoOrder, bk as inKindDrawMsats, bl as isArtifactMessage, bm as isCancelMessage, bn as isCompleteMessage, bo as isDrainReceipt, bp as isFundingReceipt, bq as isInKindDepletion, br as isNonChannelBitcoinRail, bs as isPaymentRequestMessage, bt as isPromptMessage, bu as isSignedJobReceipt, bv as isStaleJobReapable, bw as isTextMessage, bx as isWorkingMessage, by as lotOwedSats, bz as netOwedSats, bA as paymentRequiredV2FromV1, bB as settleWithFacilitator, bC as signDrainReceipt, bD as signFundingReceipt, bE as signReceipt, bF as usdcContractByCaip2, bG as usdcContractFor, bH as usdcDomainNameFor, bI as usdcDomainVersionFor, bJ as verifyDrainReceipt, bK as verifyFundingReceipt, bL as verifyReceipt, bM as verifyWithFacilitator, bN as wrapMppx, bO as x402NetworkToCaip2 } from '../job-store-DOSfYnLX.js';
 import { SimplePool } from 'nostr-tools/pool';
 import { Session } from 'mppx/tempo';
 import { Pool } from 'pg';
 export { Pool } from 'pg';
 import { PaymentRequired as PaymentRequired$1 } from '@x402/core/types';
 import { ClientChannelStorage, BatchSettlementClientContext, BatchSettlementEvmScheme } from '@x402/evm/batch-settlement/client';
-export { e as FX_CACHE_TTL_MS, g as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-Pf4Ey4f_.js';
-export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-D7fW2S7I.js';
+export { e as FX_CACHE_TTL_MS, g as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-H6K6qcH1.js';
+export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-Civ738b3.js';
 import { Hono } from 'hono';
 import { Env, BlankSchema } from 'hono/types';
 import { Store } from 'mppx';
@@ -77,7 +77,11 @@ interface BudgetLedgerEntry {
     principalMsats?: number;
     /** Wallet-reported NWC routing fee. Null means the wallet omitted it. */
     routingFeeMsats?: number | null;
-    /** Exact NWC wallet debit. Null means the routing fee, and therefore total, is unknown. */
+    /** Total NWC wallet fee from an exact debit. Null means the total is unprovable. */
+    totalWalletFeeMsats?: number | null;
+    /** Wallet fee not itemized as routing. Null means the split is unprovable. */
+    unitemizedWalletFeeMsats?: number | null;
+    /** Exact NWC wallet debit. Null means wallet evidence could not prove it. */
     walletDebitMsats?: number | null;
     /** BTC/USD rate used at spend time. */
     btcRate: number;
@@ -127,6 +131,8 @@ interface RecordSpendOptions {
     msats: number;
     principalMsats?: number;
     routingFeeMsats?: number | null;
+    totalWalletFeeMsats?: number | null;
+    unitemizedWalletFeeMsats?: number | null;
     walletDebitMsats?: number | null;
     btcRate: number;
     /** Outflow kind. Defaults to `job`. */
@@ -1213,6 +1219,13 @@ declare function lookupInvoice(conn: NwcConnection, params: {
     paymentHash?: string;
     invoice?: string;
 }, opts?: NwcRequestOptions): Promise<NwcTransaction>;
+/**
+ * List a bounded set of credential-safe wallet transactions.
+ *
+ * Raw invoices, payment hashes and preimages never cross this boundary. They
+ * contribute only to SHA-256 identities used to compare repeated snapshots.
+ */
+declare function listTransactions(conn: NwcConnection, options: LightningTransactionListOptions, opts?: NwcRequestOptions): Promise<LightningTransactionSnapshot[]>;
 
 /**
  * The caller's Lightning float (internal-review) — a budgeted NWC connection to an
@@ -1263,7 +1276,11 @@ interface FloatPayment {
     principalMsats: number;
     /** Wallet-reported routing fee in millisatoshis, or null when unreported. */
     routingFeeMsats: number | null;
-    /** Exact wallet debit in millisatoshis, or null when the routing fee is unknown. */
+    /** Total wallet fee derived from an exact balance delta, or null when unprovable. */
+    totalWalletFeeMsats: number | null;
+    /** Wallet fee not itemized as routing, or null when that split is unprovable. */
+    unitemizedWalletFeeMsats: number | null;
+    /** Exact wallet debit in millisatoshis, or null when wallet evidence is ambiguous. */
     walletDebitMsats: number | null;
 }
 /** JSON-safe representation of a float payment; intentionally excludes the preimage. */
@@ -1271,6 +1288,8 @@ interface FloatPaymentJson {
     outcome: FloatPayment["outcome"];
     principal_sats: number;
     routing_fee_sats: number | null;
+    total_wallet_fee_sats: number | null;
+    unitemized_wallet_fee_sats: number | null;
     wallet_debit_sats: number | null;
 }
 /** Convert the internal millisatoshi breakdown into the caller-facing CLI contract. */
@@ -1372,6 +1391,9 @@ declare function assertFloatBudget(plannedMsats: number): Promise<number>;
 declare function recordFloatSpend(params: {
     principalMsats: number;
     routingFeeMsats: number | null;
+    totalWalletFeeMsats?: number | null;
+    unitemizedWalletFeeMsats?: number | null;
+    walletDebitMsats?: number | null;
     btcRate: number;
     /** Stable handle for the funding — a mint quote id, or a credit reference. */
     reference: string;
@@ -3360,7 +3382,11 @@ interface CreditFundOutcome {
     principalSats?: number;
     /** Wallet-reported Lightning routing fee. Null means the wallet omitted it. */
     routingFeeSats?: number | null;
-    /** Exact Lightning wallet debit. Null means the routing fee, and total, is unknown. */
+    /** Total Lightning wallet fee. Null means the total is unprovable. */
+    totalWalletFeeSats?: number | null;
+    /** Wallet fee not itemized as routing. Null means the split is unprovable. */
+    unitemizedWalletFeeSats?: number | null;
+    /** Exact Lightning wallet debit. Null means wallet evidence could not prove it. */
     walletDebitSats?: number | null;
     /** Stablecoin micro-units committed through a Tempo charge or session. */
     spentMicro?: number;
@@ -4107,7 +4133,11 @@ interface PendingFunding {
     principalMsats?: number;
     /** Wallet-reported routing fee. Null means the wallet omitted it. */
     routingFeeMsats?: number | null;
-    /** Exact wallet debit. Null means the routing fee, and therefore total, is unknown. */
+    /** Total wallet fee from an exact debit. Null means the total is unprovable. */
+    totalWalletFeeMsats?: number | null;
+    /** Wallet fee not itemized as routing. Null means the split is unprovable. */
+    unitemizedWalletFeeMsats?: number | null;
+    /** Exact wallet debit. Null means wallet evidence could not prove it. */
     walletDebitMsats?: number | null;
     /** How the caller wallet reached settlement. */
     paymentOutcome?: "paid" | "reconciled" | "republished";
@@ -5645,6 +5675,7 @@ declare class NwcBackend implements LightningBackend {
         expirySeconds?: number;
     }): Promise<CreatedInvoice>;
     lookupInvoice(paymentHash: string): Promise<InvoiceStatus>;
+    listTransactions(options: LightningTransactionListOptions): Promise<LightningTransactionSnapshot[]>;
 }
 
 /** Maximum lifetime of an exact x402 EIP-3009 authorization after signing. */
@@ -10782,4 +10813,4 @@ declare function readX402ChannelOnChain(args: {
  */
 declare function x402ChannelControlledBy(channel: StoredX402ChannelMetadata, address: string | null | undefined): boolean;
 
-export { ADMIN_STATE_UNAVAILABLE, AGENT_MNEMONIC_FILE, AccumulatorPool, type AgentProof, type AgentWallet, type AmountLabelOptions, type AttestedDvmIdentity, BTC_RATE_FILE, BUDGET_FILE, type BudgetCaps, type BudgetSpendKind, type BudgetWindow, type BuilderLockKeypair, CAPABILITY_NAME_RE, COINGECKO_SIMPLE_PRICE_URL, CONFIG_AUDIT_FILE, CONFIG_BACKUP_FILE, CONFIG_DIR, CONFIG_FILE, CONFIG_PINNED_FILE, CREDITS_FILE, CREDIT_DRAIN_RAILS, CREDIT_FUNDING_MODES, CREDIT_FUND_RAILS, CREDIT_POSTURES, type CachedBtcRate, type CancelOptions, type CashOutMintOutcome, type CashOutQuote, type CliIdentityEntry, type CoinGeckoBtcSpot, type CoinGeckoSpot, type Config, type ConfigBackupInfo, type ConfigDirModeResult, type ConfigField, type ConfigRollbackPreview, type ConfigSnapshotSlot, CreatedInvoice, type CreditConfig, type CreditDrainRail, type CreditFundOutcome, type CreditFundRail, type CreditFundStatus, type CreditFundingMode, type CreditMenu, type CreditOpResult, type CreditPlan, type CreditPosture, type CreditRailPick, type CreditRailReason, type CreditRailSource, type CreditTerms, type CreditWire, DEFAULT_AGENT_MINT_URL, DEFAULT_CREDIT_POSTURE, DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, DEFAULT_RESERVE_LOCKTIME_SECONDS, DbTransport, type DeferredFunding, type DeliveredResult, type DescribeOptions, type DrainReceiptChecks, type DrainReceiptVerifyResult, type DrainWire, type DrawCeilingSource, type DrawSkip, DvmError, DvmX402ChannelStorage, type EffectiveFundingRail, FAVORITES_FILE, FEEDBACK_NUDGES_FILE, FEEDBACK_POSTURES, type FeedbackPosture, type Float, type FloatPayment, type FloatProbe, type FundCreditArgs, FundingReceipt, type FundingReceiptChecks, type FundingReceiptVerifyResult, IDENTITIES_FILE, IDENTITIES_VERSION, type IdentitiesFile, InvoiceStatus, JOBS_FILE, type JobCompletion, type JobEnvelope, type JobPolicy, JobReceipt$1 as JobReceipt, type JobRecord, type JobStatus, JsonValue, LightningBackend, type LightningFundingOffer, LightningPayment, LightningWalletInfo, type LnAddressParts, LockPubkey, type LockPubkeyPool, type LockPubkeyState, type LockPubkeyStateLoader, LockPubkey as LockPubkeyStoreLockPubkey, MESSAGES_DIR, type MeltQuoteInfo, type MeltSweepResult, MemoryKVStore, Message, type MessagePollOptions, MessageType, MintAmountBounds, MintHealthCheckResult, type MintSource, type MnemonicValidationResult, MppxChallenge, MppxCredential, NWC_FUNDING_FLOAT_ROLE, type NextAction, type NextActionRefund, NwcBackend, type NwcConnection, NwcError, type NwcRequestOptions, type NwcTransaction, type OutboundMessage, PAIRINGS_DIR, PRIVKEY_HEX_RE, type PayInvoiceOutcome, type PayInvoiceReconcilingOptions, type PayInvoiceResult, type PayOutcome, type Payment, type PaymentRailKey, PaymentRequired, type PendingDrain, type PendingFunding, type PendingMint, type PendingSubmission, type PendingX402ExactFunding, type PendingX402Funding, type PersistedOutputData, PersistentCounterSource, PostgresTempoChargeStore, type PreparedAgentSpend, type ProtectedTarget, type ProviderInfo, type ProviderRef, type ProviderText, type Quote, RAIL_FLAGS, RECEIPTS_FILE, RECENT_SPENDS_CAP, RECOMMENDED_MINTS, RECOVERY_MNEMONIC_FILE, REQUEST_INTENTS_DIR, RESUME_MAX_AGE_MS, RESUME_MAX_ATTEMPTS, ROUTER_FEEDBACK_CLAIM_HEADER, ROUTER_FEEDBACK_CLAIM_TTL_MS, type Rail, type RailFlag, type RailProbe, type ReceiptCapture, type ReceiptChecks, ReceiptCredit, type ReceiptInvalidReason, type ReceiptKeypair, type ReceiptParseError, type ReceiptTrustAnchor, type ReceiptVerification, type ReceiptVerifyResult, type ReleaseMintOutcome, type ResolvedBtcRate, ResourceInfo, SPANS_INSERTED_CHANNEL, STABLECOIN_FUND_RAILS, SUPPORTED_PROTOCOL_VERSION, type SelectError, type SendMessageOptions, type SpanRow, type SpanTransport, SpanWriter, type StaleRateNotice, type StatusOptions, type StoredCredit, type StoredFundingMenuSnapshot, type StoredImplicitCredit, type StoredReceipt, type StoredSiblingCredit, type StoredX402ChannelConfig, type StoredX402ChannelMetadata, type StreamOptions, type StreamResult, type SubmissionSweepOutcome, type SubmitOptions, type SuppressedPurchase, type SweepResult, TEMPO_CHAIN_ID, TEMPO_CHANNELS_FILE, TEMPO_CLOSE_DB_RECOVERY_BUDGET_MS, TEMPO_CLOSE_REQUESTED_TOPIC, TEMPO_EXIT_KEY_MISSING_HINT, type TempoAccount, type TempoChannelAssociation, type TempoChannelExitResult, type TempoChannelReconcileResult, type TerminalJobStatus, type Transport, type JobReceipt as TransportJobReceipt, type TrustAnchorRead, type TrustLadder, type V1InfoCapability, type V1InfoResponse, type VerifyJobReceiptArgs, WALLET_FILE, WALLET_VERSION, type WalletInfo, type X402Asset, type X402Balance, type X402BatchPayment, type X402ChannelChainReport, type X402ChannelClient, type X402ChannelReconciliation, X402Config, type X402ConnectedWallet, type X402CreditFlavour, type X402CreditInstrument, X402EnvValidationError, type X402Network, type X402PaymentProof, type X402RefundArgs, type X402RefundOutcome, type X402RepinnedWallet, type X402UnobservedBalanceProvenance, X402Version, X402Wallet, X402_BATCH_CHANNEL_ABI, X402_BATCH_SETTLEMENT_KEY, X402_BATCH_SETTLEMENT_SCHEME, X402_CHANNELS_FILE, X402_DEFAULT_FACILITATOR, X402_EXACT_AUTHORIZATION_TTL_SECONDS, X402_EXACT_SCHEME, X402_NETWORKS, X402_PENDING_STALE_MS, X402_RECEIVER_AUTHORIZER_KEY, X402_REFUSAL_TRANSACTION_DISCOVERY_WINDOW_MS, X402_RPC_URL_KEY, X402_SELF_RELAY_KEY, abandonPendingSubmission, acknowledgeReplayedX402Payment, acknowledgeX402ChannelOwner, activePubkeySet, addPayment, advanceTempoChannelExit, applyImplicitReceiptCredit, applyReceiptCredit, applyRetryToPool, asProviderText, asProviderTextOpt, assertAgentMnemonicReplaceable, assertFloatBudget, assertSupportedX402Network, assertTempoWalletIdle, assertValidBudget, assertX402ChannelPayer, assertX402RequirementDescribesChannel, assertX402WalletIdle, attestedDvmIdentity, authenticatedBuilderPubkey, authorizeProtectedRemoval, automaticCreditBoundRail, availableRails, backfillTrustAnchor, backupSecretFile, buildAdminAuthHeader, buildAdminChallenge, buildCompletionHintFields, buildDisplayMintInventory, buildPolicy, buildTempoCredential, builderLockPath, canReplaceExpiredX402Deposit, captureFundingReceipt, captureTransportReceipt, cashOutFromMint, cashuSubmissionBindingFingerprint, checkMeltQuoteState, checkReceiptAttestation, clearCreditSelection, clearPendingDrain, clearPendingX402ExactFunding, clearPendingX402Funding, clearRefillRailUnavailable, generateIdentity as cliIdentityStoreGenerateIdentity, commitAgentSpend, completionFromMessages, completionSnapshot, computeNextAction, computeSmartDenominations, configSnapshotPath, connectedTempoAccount, connectedX402Payer, correctPendingFundAmount, costAnchor, coveringMintsForSpend, createAdminCashuNonceStore, createInstrumentedFetch, createMonotonicClock, createNoopLogger, createStdoutLogger, createTempoCloseCredential, createX402BatchPayment, currentContext, deleteAgentMnemonic, deriveAgentMasterKeypair, deriveBuilderLockKeypair, deriveBuilderLockPubkey, deriveIdentityFromPrivkey, derivePubkeyFromPrivkey, deriveReceiptKeypair, deriveReceiptSecret, deriveTempoAddress, describeConfigBackup, describeMintBounds, drainReceiptsDisplay, drainReceiptsHint, dvmLocationIdentity, effectiveCreditPosture, effectiveFundingMint, effectiveFundingRail, effectiveMints, emitFloatBudgetWarning, enforceGlobalBudget, ensureAddress, ensureConfig, ensureConfigDir, ensureConfigSubdir, ensureProvisionalCredit, entryKind, epochMsToIso, extractBuilderHandle, fetchBtcUsdRate, fetchCoinGeckoBtcUsd, fetchCoinGeckoSpot, fetchLnurlPayInvoice, fetchMeltQuote, fetchMissingJobReceipt, fetchTrustAnchor, findSigningIdentityByPubkey, findX402Channel, floatBudgetJson, floatPaymentDisplay, floatPaymentJson, forgetCredit, formatAmount, formatAmountBestEffort, formatLocktime, formatPaymentAmount, formatSats, formatStaleness, formatUsd, formatUsdcMicrounits, fundAgentWallet, fundCredit, fundWireAmountMicro, fundingModeForTempoIntent, fundingModeForX402Flavour, fundingRailLabel, generateAgentMnemonic, generateEphemeralReceiptKey, generateTempoKey, generateX402PrivateKey, getBalance, getBalanceByMint, getFundingGuidance, getInfo, getInputFeesForProofs, getLastKnownBtcRate, getOutputTraceId, getTempoUsdcBalance, getWallet, getX402Balance, hashedCanonicalDvmId, humanizeZodError, identitiesFileExists, info, initLockPubkeyTable, initLoggers, insertSpanBatch, installAdminCashuRoutes, isAbortError, isCreditFundRail, isCreditFundingMode, isCreditPosture, isFeedbackPosture, isPaymentRailKey, isPublicRequestId, isResumable, isStablecoinFundRail, isTerminalJobStatus, isValidEvmPrivateKey, issueRouterFeedbackClaim, jobCredentialGate, json, listCredits, listFundingMenuSnapshots, listImplicitCredits, listPendingFundings, listPendingX402Fundings, listPendingX402FundingsForChannel, listResumableTempoChargeFundings, listResumableX402ExactFundings, listResumableX402Fundings, listTempoChannelAssociations, listX402Channels, loadAgentWallet, loadAllJobs, loadConfig, loadConfiguredMints, loadCredit, loadFloat, loadIdentities, loadImplicitCredits, loadJob, loadLedger, loadLockPubkeyState, loadPendingFunding, loadReceipt, loadReceipts, loadResumableX402ExactFunding, loadResumableX402Funding, loadTempoChannelAssociation, loadTempoChannelController, loadTempoChannelEntry, loadX402Wallet, loggers, looksLikeMnemonic, lookupInvoice, makeInvoice, markCredit, markImplicitCreditLost, markJobTerminal, markRefillDrainNoticed, markRefillRailUnavailable, maxKeysetDenomination, microToSats, missingDleqRecoveryDiagnostic, mnemonicFingerprint, monetaryJson, msatsToMicro, msatsToUsd, msatsToUsdCents, msatsToUsdc, needsPocketRefill, needsTopup, nextStepHint, normalizeCreditEndpoint, normalizeFeedbackEndpointHost, nwcDedupWindowMs, nwcRejectionDisplay, nwcTimeoutMs, offersTempoCreditFunding, offersX402CreditFunding, parseBudget, parseCreditMenu, parseCreditTerms, parseLnAddress, parseLocktime, parseNwcUri, parseStatedBudget, parseTraceparent, payInvoiceReconciling, payViaFloat, paymentRailLabel, pendingDrainById, pendingDrainFor, pickCreditFundRail, pinConfigSnapshot, pinDimension, planConfigReset, planCreditForQuote, planProbeDraw, pocketTargetMicro, pollNextAction, pollPendingCreditFundings, preferLightningFirst, prepareAgentSpend, prepareP2PKMint, previewConfigRollback, printFundingGuidance, probeFloat, probeRailLabel, probeWallets, processX402BatchCorrection, processX402BatchResponse, processX402BatchResponseForWallet, providerProseSources, providerTextToString, pruneRetired, railLabelAtSentenceStart, randomTraceId, rateUnavailablePaymentError, raw, readFundValuation, readX402ChannelOnChain, receiptDisplay, receiptFailureDetail, receiptHint, receiptIssuedAtIso, receiptJsonFields, receiptPubkeyFromSecret, receiptTrustFields, receiveToAgentWallet, reclaimAtMs, reconcileRefusedX402Deposits, reconcileTempoChannelOnChain, recordBalanceResponse, recordCreditX402Instrument, recordDrainReceipts, recordFloatSpend, recordFundResponse, recordFundingMenuSnapshot, recordPendingDrain, recordPendingX402ExactFunding, recordPendingX402Funding, recordRefusedDrawBalance, recordSpend, recordX402ChannelMetadata, recoverPendingSubmission, redactUrl, redactUrlsInText, refFromJob, refundX402BatchChannel, releaseAgentReserve, removeX402Wallet, renderReceiptHuman, repairConfigDirMode, repinX402WalletNetwork, replayStoredReceipt, reserveAgentWallet, resolveBtcUsdRate, resolveFundMint, resolveLnurlPayMetadataUrl, resolveRpcHttpTransportOptions, resolveRpcOverride, resolveSigningIdentity, resolveTempoAsset, resolveX402Asset, resolveX402ChannelRpc, restoreProofsFromOutputs, retireConfigBackup, retirePendingX402Funding, rollbackConfig, rotateLockPubkey, rpcEndpointLine, rpcEndpointSuffix, saveAgentWallet, saveIdentities, saveJob, saveLedger, saveX402Wallet, seedLockPubkeyState, selectProofsForSpend, serializeOutputData, setEmitter, setOutputTraceId, settleDrainEvidence, shellQuoteArg, signDvmRequestData, signRequestData, signedRequestDomain, spendableAt, staleRateNotice, statusSnapshot, swapFeeForProofs, swapSendReserve, sweepPendingMelts, sweepPendingMints, sweepPendingSubmissions, sweepStaleInFlight, tempoBalanceCheckHint, tempoChannelControlledBy, tempoCredentialAmountMicro, tempoKeyImportRoutes, tempoSessionChallenge, tempoSessionChallengeMicro, tempoTokenReference, tempoWrongAssetHint, tierCapOverrides, toAgentProof, toFloatError, transportErrorCode, trustLadderFor, trustOverrideCapMicro, tryResolveBtcUsdRate, tryResolveTempoAsset, tryX402Payment, unreachableRailDisplay, unreachableRailHint, unrecordedFloatBudgetWarning, unsignRequestData, updateConfig, updateJob, usdToMsats, usdcToMsats, validateAgentMnemonic, validateLnAddress, validateX402Env, verifyCanonicalSignedRequest, verifyChallenge, verifyDrainReceiptChain, verifyFundingReceiptChain, verifyJobReceipt, verifyRouterFeedbackClaim, verifyX402Payment, walletExists, weakestReceiptVerdict, windowStart, withIdentitiesLock, withInitRetry, withNwcPool, withTempoChannelLock, withTraceContext, withWalletLock, withX402ChannelLock, writeAgentMnemonic, x402ChannelBalanceUnreconciledAt, x402ChannelControlledBy, x402ChannelReservation, x402CreditChannelNetworks, x402CreditExactNetworks, x402ExactFundingDead, x402FlavourForInstrument, x402NetworkByCaip2, x402NetworkBySlug, x402NetworkLabel, x402NetworkListForCopy, x402PendingBlockExpiresAt, x402PendingDepositExpiresAt, x402PendingFundingJson, x402PendingRetired, x402PendingStale, x402PendingUnsettled, x402RequiredFromError, x402ReservationRelease, x402SupportedNetworksHint, x402VoucherPendingRefusal, x402WrongAssetHint };
+export { ADMIN_STATE_UNAVAILABLE, AGENT_MNEMONIC_FILE, AccumulatorPool, type AgentProof, type AgentWallet, type AmountLabelOptions, type AttestedDvmIdentity, BTC_RATE_FILE, BUDGET_FILE, type BudgetCaps, type BudgetSpendKind, type BudgetWindow, type BuilderLockKeypair, CAPABILITY_NAME_RE, COINGECKO_SIMPLE_PRICE_URL, CONFIG_AUDIT_FILE, CONFIG_BACKUP_FILE, CONFIG_DIR, CONFIG_FILE, CONFIG_PINNED_FILE, CREDITS_FILE, CREDIT_DRAIN_RAILS, CREDIT_FUNDING_MODES, CREDIT_FUND_RAILS, CREDIT_POSTURES, type CachedBtcRate, type CancelOptions, type CashOutMintOutcome, type CashOutQuote, type CliIdentityEntry, type CoinGeckoBtcSpot, type CoinGeckoSpot, type Config, type ConfigBackupInfo, type ConfigDirModeResult, type ConfigField, type ConfigRollbackPreview, type ConfigSnapshotSlot, CreatedInvoice, type CreditConfig, type CreditDrainRail, type CreditFundOutcome, type CreditFundRail, type CreditFundStatus, type CreditFundingMode, type CreditMenu, type CreditOpResult, type CreditPlan, type CreditPosture, type CreditRailPick, type CreditRailReason, type CreditRailSource, type CreditTerms, type CreditWire, DEFAULT_AGENT_MINT_URL, DEFAULT_CREDIT_POSTURE, DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, DEFAULT_RESERVE_LOCKTIME_SECONDS, DbTransport, type DeferredFunding, type DeliveredResult, type DescribeOptions, type DrainReceiptChecks, type DrainReceiptVerifyResult, type DrainWire, type DrawCeilingSource, type DrawSkip, DvmError, DvmX402ChannelStorage, type EffectiveFundingRail, FAVORITES_FILE, FEEDBACK_NUDGES_FILE, FEEDBACK_POSTURES, type FeedbackPosture, type Float, type FloatPayment, type FloatProbe, type FundCreditArgs, FundingReceipt, type FundingReceiptChecks, type FundingReceiptVerifyResult, IDENTITIES_FILE, IDENTITIES_VERSION, type IdentitiesFile, InvoiceStatus, JOBS_FILE, type JobCompletion, type JobEnvelope, type JobPolicy, JobReceipt$1 as JobReceipt, type JobRecord, type JobStatus, JsonValue, LightningBackend, type LightningFundingOffer, LightningPayment, LightningTransactionListOptions, LightningTransactionSnapshot, LightningWalletInfo, type LnAddressParts, LockPubkey, type LockPubkeyPool, type LockPubkeyState, type LockPubkeyStateLoader, LockPubkey as LockPubkeyStoreLockPubkey, MESSAGES_DIR, type MeltQuoteInfo, type MeltSweepResult, MemoryKVStore, Message, type MessagePollOptions, MessageType, MintAmountBounds, MintHealthCheckResult, type MintSource, type MnemonicValidationResult, MppxChallenge, MppxCredential, NWC_FUNDING_FLOAT_ROLE, type NextAction, type NextActionRefund, NwcBackend, type NwcConnection, NwcError, type NwcRequestOptions, type NwcTransaction, type OutboundMessage, PAIRINGS_DIR, PRIVKEY_HEX_RE, type PayInvoiceOutcome, type PayInvoiceReconcilingOptions, type PayInvoiceResult, type PayOutcome, type Payment, type PaymentRailKey, PaymentRequired, type PendingDrain, type PendingFunding, type PendingMint, type PendingSubmission, type PendingX402ExactFunding, type PendingX402Funding, type PersistedOutputData, PersistentCounterSource, PostgresTempoChargeStore, type PreparedAgentSpend, type ProtectedTarget, type ProviderInfo, type ProviderRef, type ProviderText, type Quote, RAIL_FLAGS, RECEIPTS_FILE, RECENT_SPENDS_CAP, RECOMMENDED_MINTS, RECOVERY_MNEMONIC_FILE, REQUEST_INTENTS_DIR, RESUME_MAX_AGE_MS, RESUME_MAX_ATTEMPTS, ROUTER_FEEDBACK_CLAIM_HEADER, ROUTER_FEEDBACK_CLAIM_TTL_MS, type Rail, type RailFlag, type RailProbe, type ReceiptCapture, type ReceiptChecks, ReceiptCredit, type ReceiptInvalidReason, type ReceiptKeypair, type ReceiptParseError, type ReceiptTrustAnchor, type ReceiptVerification, type ReceiptVerifyResult, type ReleaseMintOutcome, type ResolvedBtcRate, ResourceInfo, SPANS_INSERTED_CHANNEL, STABLECOIN_FUND_RAILS, SUPPORTED_PROTOCOL_VERSION, type SelectError, type SendMessageOptions, type SpanRow, type SpanTransport, SpanWriter, type StaleRateNotice, type StatusOptions, type StoredCredit, type StoredFundingMenuSnapshot, type StoredImplicitCredit, type StoredReceipt, type StoredSiblingCredit, type StoredX402ChannelConfig, type StoredX402ChannelMetadata, type StreamOptions, type StreamResult, type SubmissionSweepOutcome, type SubmitOptions, type SuppressedPurchase, type SweepResult, TEMPO_CHAIN_ID, TEMPO_CHANNELS_FILE, TEMPO_CLOSE_DB_RECOVERY_BUDGET_MS, TEMPO_CLOSE_REQUESTED_TOPIC, TEMPO_EXIT_KEY_MISSING_HINT, type TempoAccount, type TempoChannelAssociation, type TempoChannelExitResult, type TempoChannelReconcileResult, type TerminalJobStatus, type Transport, type JobReceipt as TransportJobReceipt, type TrustAnchorRead, type TrustLadder, type V1InfoCapability, type V1InfoResponse, type VerifyJobReceiptArgs, WALLET_FILE, WALLET_VERSION, type WalletInfo, type X402Asset, type X402Balance, type X402BatchPayment, type X402ChannelChainReport, type X402ChannelClient, type X402ChannelReconciliation, X402Config, type X402ConnectedWallet, type X402CreditFlavour, type X402CreditInstrument, X402EnvValidationError, type X402Network, type X402PaymentProof, type X402RefundArgs, type X402RefundOutcome, type X402RepinnedWallet, type X402UnobservedBalanceProvenance, X402Version, X402Wallet, X402_BATCH_CHANNEL_ABI, X402_BATCH_SETTLEMENT_KEY, X402_BATCH_SETTLEMENT_SCHEME, X402_CHANNELS_FILE, X402_DEFAULT_FACILITATOR, X402_EXACT_AUTHORIZATION_TTL_SECONDS, X402_EXACT_SCHEME, X402_NETWORKS, X402_PENDING_STALE_MS, X402_RECEIVER_AUTHORIZER_KEY, X402_REFUSAL_TRANSACTION_DISCOVERY_WINDOW_MS, X402_RPC_URL_KEY, X402_SELF_RELAY_KEY, abandonPendingSubmission, acknowledgeReplayedX402Payment, acknowledgeX402ChannelOwner, activePubkeySet, addPayment, advanceTempoChannelExit, applyImplicitReceiptCredit, applyReceiptCredit, applyRetryToPool, asProviderText, asProviderTextOpt, assertAgentMnemonicReplaceable, assertFloatBudget, assertSupportedX402Network, assertTempoWalletIdle, assertValidBudget, assertX402ChannelPayer, assertX402RequirementDescribesChannel, assertX402WalletIdle, attestedDvmIdentity, authenticatedBuilderPubkey, authorizeProtectedRemoval, automaticCreditBoundRail, availableRails, backfillTrustAnchor, backupSecretFile, buildAdminAuthHeader, buildAdminChallenge, buildCompletionHintFields, buildDisplayMintInventory, buildPolicy, buildTempoCredential, builderLockPath, canReplaceExpiredX402Deposit, captureFundingReceipt, captureTransportReceipt, cashOutFromMint, cashuSubmissionBindingFingerprint, checkMeltQuoteState, checkReceiptAttestation, clearCreditSelection, clearPendingDrain, clearPendingX402ExactFunding, clearPendingX402Funding, clearRefillRailUnavailable, generateIdentity as cliIdentityStoreGenerateIdentity, commitAgentSpend, completionFromMessages, completionSnapshot, computeNextAction, computeSmartDenominations, configSnapshotPath, connectedTempoAccount, connectedX402Payer, correctPendingFundAmount, costAnchor, coveringMintsForSpend, createAdminCashuNonceStore, createInstrumentedFetch, createMonotonicClock, createNoopLogger, createStdoutLogger, createTempoCloseCredential, createX402BatchPayment, currentContext, deleteAgentMnemonic, deriveAgentMasterKeypair, deriveBuilderLockKeypair, deriveBuilderLockPubkey, deriveIdentityFromPrivkey, derivePubkeyFromPrivkey, deriveReceiptKeypair, deriveReceiptSecret, deriveTempoAddress, describeConfigBackup, describeMintBounds, drainReceiptsDisplay, drainReceiptsHint, dvmLocationIdentity, effectiveCreditPosture, effectiveFundingMint, effectiveFundingRail, effectiveMints, emitFloatBudgetWarning, enforceGlobalBudget, ensureAddress, ensureConfig, ensureConfigDir, ensureConfigSubdir, ensureProvisionalCredit, entryKind, epochMsToIso, extractBuilderHandle, fetchBtcUsdRate, fetchCoinGeckoBtcUsd, fetchCoinGeckoSpot, fetchLnurlPayInvoice, fetchMeltQuote, fetchMissingJobReceipt, fetchTrustAnchor, findSigningIdentityByPubkey, findX402Channel, floatBudgetJson, floatPaymentDisplay, floatPaymentJson, forgetCredit, formatAmount, formatAmountBestEffort, formatLocktime, formatPaymentAmount, formatSats, formatStaleness, formatUsd, formatUsdcMicrounits, fundAgentWallet, fundCredit, fundWireAmountMicro, fundingModeForTempoIntent, fundingModeForX402Flavour, fundingRailLabel, generateAgentMnemonic, generateEphemeralReceiptKey, generateTempoKey, generateX402PrivateKey, getBalance, getBalanceByMint, getFundingGuidance, getInfo, getInputFeesForProofs, getLastKnownBtcRate, getOutputTraceId, getTempoUsdcBalance, getWallet, getX402Balance, hashedCanonicalDvmId, humanizeZodError, identitiesFileExists, info, initLockPubkeyTable, initLoggers, insertSpanBatch, installAdminCashuRoutes, isAbortError, isCreditFundRail, isCreditFundingMode, isCreditPosture, isFeedbackPosture, isPaymentRailKey, isPublicRequestId, isResumable, isStablecoinFundRail, isTerminalJobStatus, isValidEvmPrivateKey, issueRouterFeedbackClaim, jobCredentialGate, json, listCredits, listFundingMenuSnapshots, listImplicitCredits, listPendingFundings, listPendingX402Fundings, listPendingX402FundingsForChannel, listResumableTempoChargeFundings, listResumableX402ExactFundings, listResumableX402Fundings, listTempoChannelAssociations, listTransactions, listX402Channels, loadAgentWallet, loadAllJobs, loadConfig, loadConfiguredMints, loadCredit, loadFloat, loadIdentities, loadImplicitCredits, loadJob, loadLedger, loadLockPubkeyState, loadPendingFunding, loadReceipt, loadReceipts, loadResumableX402ExactFunding, loadResumableX402Funding, loadTempoChannelAssociation, loadTempoChannelController, loadTempoChannelEntry, loadX402Wallet, loggers, looksLikeMnemonic, lookupInvoice, makeInvoice, markCredit, markImplicitCreditLost, markJobTerminal, markRefillDrainNoticed, markRefillRailUnavailable, maxKeysetDenomination, microToSats, missingDleqRecoveryDiagnostic, mnemonicFingerprint, monetaryJson, msatsToMicro, msatsToUsd, msatsToUsdCents, msatsToUsdc, needsPocketRefill, needsTopup, nextStepHint, normalizeCreditEndpoint, normalizeFeedbackEndpointHost, nwcDedupWindowMs, nwcRejectionDisplay, nwcTimeoutMs, offersTempoCreditFunding, offersX402CreditFunding, parseBudget, parseCreditMenu, parseCreditTerms, parseLnAddress, parseLocktime, parseNwcUri, parseStatedBudget, parseTraceparent, payInvoiceReconciling, payViaFloat, paymentRailLabel, pendingDrainById, pendingDrainFor, pickCreditFundRail, pinConfigSnapshot, pinDimension, planConfigReset, planCreditForQuote, planProbeDraw, pocketTargetMicro, pollNextAction, pollPendingCreditFundings, preferLightningFirst, prepareAgentSpend, prepareP2PKMint, previewConfigRollback, printFundingGuidance, probeFloat, probeRailLabel, probeWallets, processX402BatchCorrection, processX402BatchResponse, processX402BatchResponseForWallet, providerProseSources, providerTextToString, pruneRetired, railLabelAtSentenceStart, randomTraceId, rateUnavailablePaymentError, raw, readFundValuation, readX402ChannelOnChain, receiptDisplay, receiptFailureDetail, receiptHint, receiptIssuedAtIso, receiptJsonFields, receiptPubkeyFromSecret, receiptTrustFields, receiveToAgentWallet, reclaimAtMs, reconcileRefusedX402Deposits, reconcileTempoChannelOnChain, recordBalanceResponse, recordCreditX402Instrument, recordDrainReceipts, recordFloatSpend, recordFundResponse, recordFundingMenuSnapshot, recordPendingDrain, recordPendingX402ExactFunding, recordPendingX402Funding, recordRefusedDrawBalance, recordSpend, recordX402ChannelMetadata, recoverPendingSubmission, redactUrl, redactUrlsInText, refFromJob, refundX402BatchChannel, releaseAgentReserve, removeX402Wallet, renderReceiptHuman, repairConfigDirMode, repinX402WalletNetwork, replayStoredReceipt, reserveAgentWallet, resolveBtcUsdRate, resolveFundMint, resolveLnurlPayMetadataUrl, resolveRpcHttpTransportOptions, resolveRpcOverride, resolveSigningIdentity, resolveTempoAsset, resolveX402Asset, resolveX402ChannelRpc, restoreProofsFromOutputs, retireConfigBackup, retirePendingX402Funding, rollbackConfig, rotateLockPubkey, rpcEndpointLine, rpcEndpointSuffix, saveAgentWallet, saveIdentities, saveJob, saveLedger, saveX402Wallet, seedLockPubkeyState, selectProofsForSpend, serializeOutputData, setEmitter, setOutputTraceId, settleDrainEvidence, shellQuoteArg, signDvmRequestData, signRequestData, signedRequestDomain, spendableAt, staleRateNotice, statusSnapshot, swapFeeForProofs, swapSendReserve, sweepPendingMelts, sweepPendingMints, sweepPendingSubmissions, sweepStaleInFlight, tempoBalanceCheckHint, tempoChannelControlledBy, tempoCredentialAmountMicro, tempoKeyImportRoutes, tempoSessionChallenge, tempoSessionChallengeMicro, tempoTokenReference, tempoWrongAssetHint, tierCapOverrides, toAgentProof, toFloatError, transportErrorCode, trustLadderFor, trustOverrideCapMicro, tryResolveBtcUsdRate, tryResolveTempoAsset, tryX402Payment, unreachableRailDisplay, unreachableRailHint, unrecordedFloatBudgetWarning, unsignRequestData, updateConfig, updateJob, usdToMsats, usdcToMsats, validateAgentMnemonic, validateLnAddress, validateX402Env, verifyCanonicalSignedRequest, verifyChallenge, verifyDrainReceiptChain, verifyFundingReceiptChain, verifyJobReceipt, verifyRouterFeedbackClaim, verifyX402Payment, walletExists, weakestReceiptVerdict, windowStart, withIdentitiesLock, withInitRetry, withNwcPool, withTempoChannelLock, withTraceContext, withWalletLock, withX402ChannelLock, writeAgentMnemonic, x402ChannelBalanceUnreconciledAt, x402ChannelControlledBy, x402ChannelReservation, x402CreditChannelNetworks, x402CreditExactNetworks, x402ExactFundingDead, x402FlavourForInstrument, x402NetworkByCaip2, x402NetworkBySlug, x402NetworkLabel, x402NetworkListForCopy, x402PendingBlockExpiresAt, x402PendingDepositExpiresAt, x402PendingFundingJson, x402PendingRetired, x402PendingStale, x402PendingUnsettled, x402RequiredFromError, x402ReservationRelease, x402SupportedNetworksHint, x402VoucherPendingRefusal, x402WrongAssetHint };

package/dist/internal/index.js

@@ -281,6 +281,7 @@ import {
   isX402SettlementReconciliationReason,
   issueUpfrontChallenges,
   jobCredentialGate,
+  listTransactions,
   loadAgentWallet,
   loadIdentitySecret,
   loadLockPubkeyState,
@@ -314,6 +315,7 @@ import {
   rotateLockPubkey,
   saveAgentWallet,
   seedLockPubkeyState,
+  sha256hex,
   signAttestation,
   signDrainReceipt,
   signFundingReceipt,
@@ -342,7 +344,7 @@ import {
   writeIdentity,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-CMDI3ENK.js";
+} from "../chunk-Y6W5ZZTW.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
@@ -657,6 +659,10 @@ function appendSpend(ledger, opts) {
   if (opts.kind !== void 0 && opts.kind !== "job") entry.kind = opts.kind;
   if (opts.principalMsats !== void 0) entry.principalMsats = opts.principalMsats;
   if (opts.routingFeeMsats !== void 0) entry.routingFeeMsats = opts.routingFeeMsats;
+  if (opts.totalWalletFeeMsats !== void 0)
+    entry.totalWalletFeeMsats = opts.totalWalletFeeMsats;
+  if (opts.unitemizedWalletFeeMsats !== void 0)
+    entry.unitemizedWalletFeeMsats = opts.unitemizedWalletFeeMsats;
   if (opts.walletDebitMsats !== void 0) entry.walletDebitMsats = opts.walletDebitMsats;
   if (opts.label !== void 0) entry.label = opts.label;
   if (opts.labelSource !== void 0) entry.labelSource = opts.labelSource;
@@ -860,15 +866,29 @@ function floatPaymentJson(payment) {
     outcome: payment.outcome,
     principal_sats: payment.principalMsats / 1e3,
     routing_fee_sats: payment.routingFeeMsats === null ? null : payment.routingFeeMsats / 1e3,
+    total_wallet_fee_sats: payment.totalWalletFeeMsats === null ? null : payment.totalWalletFeeMsats / 1e3,
+    unitemized_wallet_fee_sats: payment.unitemizedWalletFeeMsats === null ? null : payment.unitemizedWalletFeeMsats / 1e3,
     wallet_debit_sats: payment.walletDebitMsats === null ? null : payment.walletDebitMsats / 1e3
   };
 }
 function floatPaymentDisplay(payment) {
   const principal = formatSats2(payment.principalMsats);
-  if (payment.routingFeeMsats === null || payment.walletDebitMsats === null) {
-    return `Invoice principal ${principal}; the wallet did not report its routing fee, so the total wallet debit is unknown.`;
+  if (payment.walletDebitMsats === null) {
+    const routing2 = payment.routingFeeMsats === null ? "The wallet did not report its routing fee." : `The wallet reported ${formatSats2(payment.routingFeeMsats)} of routing fee.`;
+    return `Invoice principal ${principal}; the total wallet debit and total wallet fee are unknown. ${routing2}`;
   }
-  return `${formatSats2(payment.walletDebitMsats)} went out: invoice principal ${principal} plus ${formatSats2(payment.routingFeeMsats)} routing fee.`;
+  if (payment.totalWalletFeeMsats === null) {
+    return `${formatSats2(payment.walletDebitMsats)} went out for invoice principal ${principal}; the total wallet fee is unknown.`;
+  }
+  const totalFee = formatSats2(payment.totalWalletFeeMsats);
+  if (payment.routingFeeMsats === null) {
+    return `${formatSats2(payment.walletDebitMsats)} went out: invoice principal ${principal} and total wallet fee ${totalFee}. The wallet did not report its routing fee, so the fee split is unknown.`;
+  }
+  const routing = formatSats2(payment.routingFeeMsats);
+  if (payment.unitemizedWalletFeeMsats === null) {
+    return `${formatSats2(payment.walletDebitMsats)} went out: invoice principal ${principal} and total wallet fee ${totalFee}. The wallet reported ${routing} of routing fee; the remaining fee split is unknown.`;
+  }
+  return `${formatSats2(payment.walletDebitMsats)} went out: invoice principal ${principal} and total wallet fee ${totalFee} (${routing} wallet-reported routing fee and ${formatSats2(payment.unitemizedWalletFeeMsats)} unitemized wallet fee).`;
 }
 function unrecordedFloatBudgetWarning(float) {
   if (float.statedBudget) return void 0;
@@ -945,15 +965,17 @@ async function assertFloatBudget(plannedMsats) {
   return enforceGlobalBudget({ plannedMsats });
 }
 function recordFloatSpend(params) {
-  const walletDebitMsats = params.routingFeeMsats === null ? null : params.principalMsats + params.routingFeeMsats;
+  const walletDebitMsats = params.walletDebitMsats ?? null;
   recordSpend({
     kind: "float_fund",
     // The legacy `msats` field drives cap arithmetic. Use the exact debit when
-    // the wallet supplied its fee; otherwise retain the known principal and
+    // read-only evidence proved it; otherwise retain the known principal and
     // mark the total unknown in the component fields below.
     msats: walletDebitMsats ?? params.principalMsats,
     principalMsats: params.principalMsats,
     routingFeeMsats: params.routingFeeMsats,
+    totalWalletFeeMsats: params.totalWalletFeeMsats ?? null,
+    unitemizedWalletFeeMsats: params.unitemizedWalletFeeMsats ?? null,
     walletDebitMsats,
     btcRate: params.btcRate,
     jobId: params.reference,
@@ -963,21 +985,127 @@ function recordFloatSpend(params) {
 }
 async function payViaFloat(params) {
   try {
-    const payment = await backendFor(params.float, { timeoutMs: params.timeoutMs }).payInvoice(
-      params.bolt11,
-      params.amountMsats
+    return await withNwcPool(
+      params.float.conn,
+      (opts) => payViaLightningBackend({
+        bolt11: params.bolt11,
+        amountMsats: params.amountMsats,
+        backend: backendFor(params.float, opts)
+      }),
+      params.timeoutMs
     );
-    const routingFeeMsats = payment.feesPaidMsats ?? null;
-    return {
-      outcome: payment.outcome,
-      principalMsats: params.amountMsats,
-      routingFeeMsats,
-      walletDebitMsats: routingFeeMsats === null ? null : params.amountMsats + routingFeeMsats
-    };
   } catch (err) {
     throw toFloatError(err);
   }
 }
+var FLOAT_TRANSACTION_LIMIT = 100;
+var FLOAT_HISTORY_LOOKBACK_SECONDS = 300;
+async function payViaLightningBackend(params) {
+  const now = params.now ?? (() => Date.now());
+  const historyFrom = Math.max(
+    0,
+    Math.floor(now() / 1e3) - FLOAT_HISTORY_LOOKBACK_SECONDS
+  );
+  const before = await stableWalletSnapshot(params.backend, historyFrom);
+  const payment = await params.backend.payInvoice(params.bolt11, params.amountMsats);
+  const fallback = paymentWithoutAuthoritativeDebit(payment, params.amountMsats);
+  if (!before) return fallback;
+  const after = await stableWalletSnapshot(params.backend, historyFrom);
+  if (!after) return fallback;
+  return paymentFromEvidence(params, payment, before, after);
+}
+function paymentWithoutAuthoritativeDebit(payment, principalMsats) {
+  return {
+    outcome: payment.outcome,
+    principalMsats,
+    routingFeeMsats: payment.feesPaidMsats ?? null,
+    totalWalletFeeMsats: null,
+    unitemizedWalletFeeMsats: null,
+    walletDebitMsats: null
+  };
+}
+async function stableWalletSnapshot(backend, from) {
+  if (!backend.listTransactions) return void 0;
+  try {
+    const first = await walletSnapshot(backend, from);
+    const second = await walletSnapshot(backend, from);
+    return sameWalletSnapshot(first, second) ? second : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function walletSnapshot(backend, from) {
+  const balanceMsats = await backend.getBalance();
+  if (!Number.isSafeInteger(balanceMsats) || balanceMsats < 0) {
+    throw new NwcError("invalid_response", "Wallet returned an invalid balance.");
+  }
+  const transactions = await backend.listTransactions({
+    from,
+    limit: FLOAT_TRANSACTION_LIMIT + 1
+  });
+  if (transactions.length > FLOAT_TRANSACTION_LIMIT) {
+    throw new NwcError("invalid_response", "Wallet transaction snapshot exceeded its limit.");
+  }
+  return {
+    balanceMsats,
+    transactions: [...transactions].sort(
+      (left, right) => left.fingerprint.localeCompare(right.fingerprint)
+    )
+  };
+}
+function sameWalletSnapshot(left, right) {
+  return left.balanceMsats === right.balanceMsats && left.transactions.length === right.transactions.length && left.transactions.every(
+    (transaction, index) => transaction.fingerprint === right.transactions[index]?.fingerprint
+  );
+}
+function paymentFromEvidence(params, payment, before, after) {
+  const fallback = paymentWithoutAuthoritativeDebit(payment, params.amountMsats);
+  const appended = appendedTransactions(before.transactions, after.transactions);
+  if (appended.length !== 1) return fallback;
+  const transaction = appended[0];
+  if (transaction.type !== "outgoing" || transaction.invoiceHash !== sha256hex(params.bolt11) || transaction.amountMsats !== params.amountMsats || transaction.settledAt === void 0) {
+    return fallback;
+  }
+  const responseRoutingFee = payment.feesPaidMsats;
+  const historyRoutingFee = transaction.feesPaidMsats;
+  if (responseRoutingFee !== void 0 && historyRoutingFee !== void 0 && responseRoutingFee !== historyRoutingFee) {
+    return fallback;
+  }
+  const routingFeeMsats = historyRoutingFee ?? responseRoutingFee ?? null;
+  const walletDebitMsats = before.balanceMsats - after.balanceMsats;
+  if (!Number.isSafeInteger(walletDebitMsats) || walletDebitMsats < params.amountMsats) {
+    return fallback;
+  }
+  const totalWalletFeeMsats = walletDebitMsats - params.amountMsats;
+  if (routingFeeMsats !== null && routingFeeMsats > totalWalletFeeMsats) return fallback;
+  return {
+    outcome: payment.outcome,
+    principalMsats: params.amountMsats,
+    routingFeeMsats,
+    totalWalletFeeMsats,
+    unitemizedWalletFeeMsats: routingFeeMsats === null ? null : totalWalletFeeMsats - routingFeeMsats,
+    walletDebitMsats
+  };
+}
+function appendedTransactions(before, after) {
+  const remaining = /* @__PURE__ */ new Map();
+  for (const transaction of before) {
+    remaining.set(transaction.fingerprint, (remaining.get(transaction.fingerprint) ?? 0) + 1);
+  }
+  const nextCounts = /* @__PURE__ */ new Map();
+  for (const transaction of after) {
+    nextCounts.set(transaction.fingerprint, (nextCounts.get(transaction.fingerprint) ?? 0) + 1);
+  }
+  if ([...remaining].some(([fingerprint, count]) => (nextCounts.get(fingerprint) ?? 0) < count)) {
+    return [];
+  }
+  return after.filter((transaction) => {
+    const count = remaining.get(transaction.fingerprint) ?? 0;
+    if (count === 0) return true;
+    remaining.set(transaction.fingerprint, count - 1);
+    return false;
+  });
+}
 async function fundViaFloat(params) {
   const float = params.float ?? requireFloat();
   const btcRate = await assertFloatBudget(params.amountMsats);
@@ -990,6 +1118,9 @@ async function fundViaFloat(params) {
   recordFloatSpend({
     principalMsats: payment.principalMsats,
     routingFeeMsats: payment.routingFeeMsats,
+    totalWalletFeeMsats: payment.totalWalletFeeMsats,
+    unitemizedWalletFeeMsats: payment.unitemizedWalletFeeMsats,
+    walletDebitMsats: payment.walletDebitMsats,
     btcRate,
     reference: params.reference,
     counterparty: params.counterparty,
@@ -8338,6 +8469,8 @@ async function fundOverLightning(args, fundId, resumed) {
     ...pending,
     principalMsats: payment.principalMsats,
     routingFeeMsats: payment.routingFeeMsats,
+    totalWalletFeeMsats: payment.totalWalletFeeMsats,
+    unitemizedWalletFeeMsats: payment.unitemizedWalletFeeMsats,
     walletDebitMsats: payment.walletDebitMsats,
     paymentOutcome: payment.outcome
   };
@@ -8484,6 +8617,8 @@ function lightningSpend(payment) {
     ...walletDebitSats !== null ? { spentSats: walletDebitSats } : {},
     principalSats: payment.principalMsats / 1e3,
     routingFeeSats: payment.routingFeeMsats === null ? null : payment.routingFeeMsats / 1e3,
+    totalWalletFeeSats: payment.totalWalletFeeMsats === null ? null : payment.totalWalletFeeMsats / 1e3,
+    unitemizedWalletFeeSats: payment.unitemizedWalletFeeMsats === null ? null : payment.unitemizedWalletFeeMsats / 1e3,
     walletDebitSats,
     paymentOutcome: payment.outcome
   };
@@ -8496,16 +8631,28 @@ function lightningSpendFromPending(pending) {
     ...walletDebitSats !== null ? { spentSats: walletDebitSats } : {},
     principalSats: pending.principalMsats / 1e3,
     routingFeeSats: pending.routingFeeMsats == null ? null : pending.routingFeeMsats / 1e3,
+    totalWalletFeeSats: pending.totalWalletFeeMsats == null ? null : pending.totalWalletFeeMsats / 1e3,
+    unitemizedWalletFeeSats: pending.unitemizedWalletFeeMsats == null ? null : pending.unitemizedWalletFeeMsats / 1e3,
     walletDebitSats,
     paymentOutcome: pending.paymentOutcome
   };
 }
 function lightningSpendDisplay(spend) {
   const principal = spend.principalSats ?? 0;
-  if (spend.routingFeeSats == null || spend.walletDebitSats == null) {
-    return `Invoice principal ${String(principal)} sats; the wallet did not report its routing fee, so the total wallet debit is unknown.`;
+  if (spend.walletDebitSats == null) {
+    const routing = spend.routingFeeSats == null ? "The wallet did not report its routing fee." : `The wallet reported ${String(spend.routingFeeSats)} sats of routing fee.`;
+    return `Invoice principal ${String(principal)} sats; the total wallet debit and total wallet fee are unknown. ${routing}`;
+  }
+  if (spend.totalWalletFeeSats == null) {
+    return `${String(spend.walletDebitSats)} sats went out for invoice principal ${String(principal)} sats; the total wallet fee is unknown.`;
+  }
+  if (spend.routingFeeSats == null) {
+    return `${String(spend.walletDebitSats)} sats went out: invoice principal ${String(principal)} sats and total wallet fee ${String(spend.totalWalletFeeSats)} sats. The wallet did not report its routing fee, so the fee split is unknown.`;
+  }
+  if (spend.unitemizedWalletFeeSats == null) {
+    return `${String(spend.walletDebitSats)} sats went out: invoice principal ${String(principal)} sats and total wallet fee ${String(spend.totalWalletFeeSats)} sats. The wallet reported ${String(spend.routingFeeSats)} sats of routing fee; the remaining fee split is unknown.`;
   }
-  return `${String(spend.walletDebitSats)} sats went out: invoice principal ${String(principal)} sats plus ${String(spend.routingFeeSats)} sats routing fee.`;
+  return `${String(spend.walletDebitSats)} sats went out: invoice principal ${String(principal)} sats and total wallet fee ${String(spend.totalWalletFeeSats)} sats (${String(spend.routingFeeSats)} sats wallet-reported routing fee and ${String(spend.unitemizedWalletFeeSats)} sats unitemized wallet fee).`;
 }
 function lightningCreditBody(pending) {
   return {
@@ -9702,6 +9849,7 @@ export {
   listResumableX402ExactFundings,
   listResumableX402Fundings,
   listTempoChannelAssociations,
+  listTransactions,
   listX402Channels,
   loadAgentWallet,
   loadAllJobs,

package/dist/{job-store-BtCaLnvJ.d.ts → job-store-DOSfYnLX.d.ts}

@@ -1100,7 +1100,8 @@ declare function verifyDrainReceipt(receipt: DrainReceipt): boolean;
  * these rails, not only a reclaim: `inKindDrawMsats` turns the depletion a
  * settle already performs into the draw's booked rail value, so one credit has
  * one answer to "what were these sats" and the pooled remainder stops being a
- * second authority. See the internal-review invariant in `src/sdk/CLAUDE.md`.
+ * second authority: settled draw sats plus reclaim sats must equal the sats
+ * that credit's funding lots received.
  */
 /**
  * The rails whose credits carry a Bitcoin deposit this ledger owes back in

package/dist/server/index.d.ts

@@ -1,11 +1,11 @@
-import { ah as CashuMode, bP as CreditDrainEnqueue, R as ResolvedCreditConfig, bQ as DVMAuthScheme, B as SignedRequestDomain, bR as CreditLedgerLike, bS as X402RefundSettlementGate, bT as CreditSnapshot, bU as DrawResult, bV as X402SettlementStatus, bW as X402UnresolvedRefund, bX as GrownDrawResult, bY as DrawResolution, bZ as FundingRecord, Y as FundingReceipt, b_ as CreditInvoiceRecord, b$ as InvoiceSettlement, c0 as BlockedInvoiceCursor, c1 as InvoiceReconciliation, c2 as InvoiceWriteOff, c3 as DrawRecord, c4 as StalePendingDrawCursor, c5 as TempoCreditLossEvidence, c6 as CreditLedgerQuerier, c7 as TempoCreditLoss, c8 as X402CreditLossEvidence, c9 as X402CreditLoss, ca as DrainMethod, cb as DrainRequestResult, cc as BitcoinDepositLiability, ao as FundingLot, cd as CreditDrainRecord, ce as ChannelDrainCursor, cf as DrainWriteOff, cg as DrainReleaseResult, ch as DrainFulfilment, ci as DrainTransitionResult, cj as StreamableJobStore, ck as ReceiptIssuingStore, J as JobRecord, cl as RequestIdClaim, cm as RequestIdClaimResult, _ as JobReceipt, aw as OutgoingMessage, cn as AppendOutgoingOptions, co as PaymentCreditDelta, cp as VerifyAndCreditResult, cq as JobCounters, a2 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../job-store-BtCaLnvJ.js';
-export { cr as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cs as ClientCompatibility, ct as ClientCompatibilityEnv, cu as ClientCompatibilityGate, cv as ClientCompatibilityRequirement, cw as ClientSemVer, e as CreateSignedRequestVerifierOpts, cx as CreditFundingBasis, cy as CreditInvoiceStatus, cz as CreditLedger, cA as CreditLedgerError, cB as CreditLedgerErrorCode, cC as CreditLedgerErrorDetails, cD as CreditLedgerPool, cE as CreditStatus, cF as DRAIN_DELIVERY_RESERVE_SATS, cG as DVM_PROTOCOL_VERSION, cH as DrainConflictReason, cI as DrawRailValue, cJ as DrawStatus, n as JobStatus, o as JobStore, cK as PostgresX402ChannelStorage, cL as ReplayStoreBackend, cM as RevenueSkippedNoRailPayload, cN as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cO as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cP as X402ChannelStorageOpts, cQ as X402RelayLockHolder, cR as X402RelaySubmissionLock, cS as X402RelaySubmissionLockError, cT as allocateDrawValue, cU as clientCompatibilityAttributes, cV as clientCompatibilityMiddleware, cW as clientUpgradeRequired, O as createSignedRequestVerifier, cX as isStreamableJobStore, cY as parseClientCapabilities, cZ as parseClientCompatibility, c_ as parseDvmClient, c$ as parseProtocolVersion, d0 as requireClientCompatibility, d1 as secp256k1Auth, d2 as signedRequestInput, V as signedRequestStatementHeader } from '../job-store-BtCaLnvJ.js';
+import { ah as CashuMode, bP as CreditDrainEnqueue, R as ResolvedCreditConfig, bQ as DVMAuthScheme, B as SignedRequestDomain, bR as CreditLedgerLike, bS as X402RefundSettlementGate, bT as CreditSnapshot, bU as DrawResult, bV as X402SettlementStatus, bW as X402UnresolvedRefund, bX as GrownDrawResult, bY as DrawResolution, bZ as FundingRecord, Y as FundingReceipt, b_ as CreditInvoiceRecord, b$ as InvoiceSettlement, c0 as BlockedInvoiceCursor, c1 as InvoiceReconciliation, c2 as InvoiceWriteOff, c3 as DrawRecord, c4 as StalePendingDrawCursor, c5 as TempoCreditLossEvidence, c6 as CreditLedgerQuerier, c7 as TempoCreditLoss, c8 as X402CreditLossEvidence, c9 as X402CreditLoss, ca as DrainMethod, cb as DrainRequestResult, cc as BitcoinDepositLiability, ao as FundingLot, cd as CreditDrainRecord, ce as ChannelDrainCursor, cf as DrainWriteOff, cg as DrainReleaseResult, ch as DrainFulfilment, ci as DrainTransitionResult, cj as StreamableJobStore, ck as ReceiptIssuingStore, J as JobRecord, cl as RequestIdClaim, cm as RequestIdClaimResult, _ as JobReceipt, aw as OutgoingMessage, cn as AppendOutgoingOptions, co as PaymentCreditDelta, cp as VerifyAndCreditResult, cq as JobCounters, a2 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../job-store-DOSfYnLX.js';
+export { cr as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cs as ClientCompatibility, ct as ClientCompatibilityEnv, cu as ClientCompatibilityGate, cv as ClientCompatibilityRequirement, cw as ClientSemVer, e as CreateSignedRequestVerifierOpts, cx as CreditFundingBasis, cy as CreditInvoiceStatus, cz as CreditLedger, cA as CreditLedgerError, cB as CreditLedgerErrorCode, cC as CreditLedgerErrorDetails, cD as CreditLedgerPool, cE as CreditStatus, cF as DRAIN_DELIVERY_RESERVE_SATS, cG as DVM_PROTOCOL_VERSION, cH as DrainConflictReason, cI as DrawRailValue, cJ as DrawStatus, n as JobStatus, o as JobStore, cK as PostgresX402ChannelStorage, cL as ReplayStoreBackend, cM as RevenueSkippedNoRailPayload, cN as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cO as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cP as X402ChannelStorageOpts, cQ as X402RelayLockHolder, cR as X402RelaySubmissionLock, cS as X402RelaySubmissionLockError, cT as allocateDrawValue, cU as clientCompatibilityAttributes, cV as clientCompatibilityMiddleware, cW as clientUpgradeRequired, O as createSignedRequestVerifier, cX as isStreamableJobStore, cY as parseClientCapabilities, cZ as parseClientCompatibility, c_ as parseDvmClient, c$ as parseProtocolVersion, d0 as requireClientCompatibility, d1 as secp256k1Auth, d2 as signedRequestInput, V as signedRequestStatementHeader } from '../job-store-DOSfYnLX.js';
 import { Pool } from 'pg';
-import { aH as CreditMenu, g as AppEnv, U as UpfrontPaymentOpts, q as PaymentInfo, aI as ReceiptIssuer, aJ as LightningReceive, aK as TempoSettlementReadiness, aL as DVMHostOpts } from '../credit-menu-CYkETVM4.js';
-export { aM as BuildCreditMenuArgs, aN as BuilderIdentity, aO as CREDIT_ENVELOPE_KEYS, e as ConsumedCredentialStore, aP as CreateX402BatchSettlementServerOpts, aQ as CreditEnvelope, aR as CreditEnvelopeError, aS as CreditFundCommitment, aT as CreditTerms, aU as DEFAULT_INVOICE_TTL_SECONDS, aV as DVMHost, aW as JobManager, aX as JobManagerOpts, aY as LightningReceiveConfig, aZ as MIN_INVOICE_TTL_SECONDS, a_ as MemoryConsumedCredentialStore, a$ as MemoryConsumedCredentialStoreOpts, b0 as MemoryProcessedPaymentStore, b1 as MemoryX402ExactSettlementStore, b2 as MountOpts, b3 as OwnerDisplay, b4 as PlatformReporterOpts, b5 as PostgresProcessedPaymentStore, b6 as PostgresX402ExactSettlementStore, b7 as PriceFiat, b8 as ProcessedPaymentQuerier, b9 as ProcessedPaymentRail, ba as ProcessedPaymentRecord, bb as ProcessedPaymentReplayError, bc as ProcessedPaymentStore, bd as X402BatchAcceptance, be as X402BatchFunding, bf as X402BatchRefusal, bg as X402BatchSettlementServer, bh as X402ExactAcceptance, bi as X402ExactIntentConflictError, bj as X402ExactSettlementAttempt, bk as X402ExactSettlementChainEvidence, bl as X402ExactSettlementEffect, bm as X402ExactSettlementEvidenceMissingError, bn as X402ExactSettlementEvidenceReader, bo as X402ExactSettlementIntent, bp as X402ExactSettlementNotReadyError, bq as X402ExactSettlementServer, br as X402ExactSettlementServerOpts, bs as X402ExactSettlementStatus, bt as X402ExactSettlementStore, bu as X402SettlementChainEvidence, bv as X402SettlementEvidenceReader, bw as X402SettlementSubmissionError, bx as X402_BATCH_AUTO_SETTLEMENT, by as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bz as X402_BATCH_SETTLEMENT_NETWORK, bA as attachCreditMenu, bB as buildCreditMenu, bC as createDVMHost, bD as createX402BatchSettlementServer, bE as creditEnvelopeIgnoreFields, bF as drawSettlementRef, bG as extractCreditEnvelope, bH as fundingCommitment, bI as selectPrimaryCredit, bJ as stripCreditEnvelope, bK as toCreditView } from '../credit-menu-CYkETVM4.js';
+import { aJ as CreditMenu, i as AppEnv, U as UpfrontPaymentOpts, s as PaymentInfo, aK as ReceiptIssuer, aL as LightningReceive, aM as TempoSettlementReadiness, aN as DVMHostOpts } from '../credit-menu-BrTfAr7l.js';
+export { aO as BuildCreditMenuArgs, aP as BuilderIdentity, aQ as CREDIT_ENVELOPE_KEYS, g as ConsumedCredentialStore, aR as CreateX402BatchSettlementServerOpts, aS as CreditEnvelope, aT as CreditEnvelopeError, aU as CreditFundCommitment, aV as CreditTerms, aW as DEFAULT_INVOICE_TTL_SECONDS, aX as DVMHost, aY as JobManager, aZ as JobManagerOpts, a_ as LightningReceiveConfig, a$ as MIN_INVOICE_TTL_SECONDS, b0 as MemoryConsumedCredentialStore, b1 as MemoryConsumedCredentialStoreOpts, b2 as MemoryProcessedPaymentStore, b3 as MemoryX402ExactSettlementStore, b4 as MountOpts, b5 as OwnerDisplay, b6 as PlatformReporterOpts, b7 as PostgresProcessedPaymentStore, b8 as PostgresX402ExactSettlementStore, b9 as PriceFiat, ba as ProcessedPaymentQuerier, bb as ProcessedPaymentRail, bc as ProcessedPaymentRecord, bd as ProcessedPaymentReplayError, be as ProcessedPaymentStore, bf as X402BatchAcceptance, bg as X402BatchFunding, bh as X402BatchRefusal, bi as X402BatchSettlementServer, bj as X402ExactAcceptance, bk as X402ExactIntentConflictError, bl as X402ExactSettlementAttempt, bm as X402ExactSettlementChainEvidence, bn as X402ExactSettlementEffect, bo as X402ExactSettlementEvidenceMissingError, bp as X402ExactSettlementEvidenceReader, bq as X402ExactSettlementIntent, br as X402ExactSettlementNotReadyError, bs as X402ExactSettlementServer, bt as X402ExactSettlementServerOpts, bu as X402ExactSettlementStatus, bv as X402ExactSettlementStore, bw as X402SettlementChainEvidence, bx as X402SettlementEvidenceReader, by as X402SettlementSubmissionError, bz as X402_BATCH_AUTO_SETTLEMENT, bA as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bB as X402_BATCH_SETTLEMENT_NETWORK, bC as attachCreditMenu, bD as buildCreditMenu, bE as createDVMHost, bF as createX402BatchSettlementServer, bG as creditEnvelopeIgnoreFields, bH as drawSettlementRef, bI as extractCreditEnvelope, bJ as fundingCommitment, bK as selectPrimaryCredit, bL as stripCreditEnvelope, bM as toCreditView } from '../credit-menu-BrTfAr7l.js';
 import { Context } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-Pf4Ey4f_.js';
+import { F as FxFetcher } from '../fx-H6K6qcH1.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-DbFkpDv0.js';
 import '@cashu/cashu-ts';
 import 'mppx';

package/dist/server/index.js

@@ -74,7 +74,7 @@ import {
   unknownRouteNotFound,
   validateX402Env,
   withNwcPool
-} from "../chunk-CMDI3ENK.js";
+} from "../chunk-Y6W5ZZTW.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,

package/dist/testing/index.d.ts

@@ -1,4 +1,4 @@
-import { cj as StreamableJobStore, ck as ReceiptIssuingStore, J as JobRecord, cl as RequestIdClaim, cm as RequestIdClaimResult, _ as JobReceipt, aw as OutgoingMessage, cn as AppendOutgoingOptions, co as PaymentCreditDelta, cp as VerifyAndCreditResult, cq as JobCounters, a2 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../job-store-BtCaLnvJ.js';
+import { cj as StreamableJobStore, ck as ReceiptIssuingStore, J as JobRecord, cl as RequestIdClaim, cm as RequestIdClaimResult, _ as JobReceipt, aw as OutgoingMessage, cn as AppendOutgoingOptions, co as PaymentCreditDelta, cp as VerifyAndCreditResult, cq as JobCounters, a2 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../job-store-DOSfYnLX.js';
 import '@cashu/cashu-ts';
 import 'mppx';
 import '@x402/core/server';

package/dist/{usd-D7fW2S7I.d.ts → usd-Civ738b3.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './job-store-BtCaLnvJ.js';
+import { C as Currency } from './job-store-DOSfYnLX.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.1.0-rc.7",
+  "version": "0.1.1-rc.7",
   "description": "SDK for building accountless, pay-per-use Digital Vending Machines",
   "license": "Apache-2.0",
   "repository": {