@dvmkit/sdk 0.1.3-rc.7 → 0.1.5-rc.7

package/dist/server/index.d.ts

@@ -1,21 +1,21 @@
-import { aa as CashuMode, bJ as CreditDrainEnqueue, R as ResolvedCreditConfig, bK as DVMAuthScheme, z as SignedRequestDomain, bL as CreditLedgerLike, bM as X402RefundSettlementGate, bN as CreditSnapshot, bO as DrawResult, bP as X402SettlementStatus, bQ as X402UnresolvedRefund, bR as GrownDrawResult, bS as DrawResolution, bT as FundingRecord, W as FundingReceipt, bU as CreditInvoiceRecord, bV as InvoiceSettlement, bW as BlockedInvoiceCursor, bX as InvoiceReconciliation, bY as InvoiceWriteOff, bZ as DrawRecord, b_ as StalePendingDrawCursor, b$ as TempoCreditLossEvidence, c0 as CreditLedgerQuerier, c1 as TempoCreditLoss, c2 as X402CreditLossEvidence, c3 as X402CreditLoss, c4 as DrainMethod, c5 as DrainRequestResult, c6 as BitcoinDepositLiability, bn as FundingLot, c7 as CreditDrainRecord, c8 as ChannelDrainCursor, c9 as DrainWriteOff, ca as DrainReleaseResult, cb as DrainFulfilment, cc as DrainTransitionResult, X as JobReceipt, a0 as Message, K as KVStore, F as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-3cT4Shk0.js';
-export { cd as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, ce as ClientCompatibility, cf as ClientCompatibilityEnv, cg as ClientCompatibilityGate, ch as ClientCompatibilityRequirement, ci as ClientSemVer, e as CreateSignedRequestVerifierOpts, cj as CreditFundingBasis, ck as CreditInvoiceStatus, cl as CreditLedger, cm as CreditLedgerError, cn as CreditLedgerErrorCode, co as CreditLedgerErrorDetails, cp as CreditLedgerPool, cq as CreditStatus, cr as DRAIN_DELIVERY_RESERVE_SATS, cs as DVM_PROTOCOL_VERSION, ct as DrainConflictReason, cu as DrawRailValue, cv as DrawStatus, cw as PostgresX402ChannelStorage, cx as ReplayStoreBackend, cy as RevenueSkippedNoRailPayload, cz as RevenueSkippedNoRailReason, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, cA as Secp256k1AuthOpts, y as SignedRequestAudience, B as SignedRequestError, E as SignedRequestFailure, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, J as SignedRequestVerifier, cB as X402ChannelStorageOpts, cC as X402RelayLockHolder, cD as X402RelaySubmissionLock, cE as X402RelaySubmissionLockError, cF as allocateDrawValue, cG as clientCompatibilityAttributes, cH as clientCompatibilityMiddleware, cI as clientUpgradeRequired, M as createSignedRequestVerifier, cJ as parseClientCapabilities, cK as parseClientCompatibility, cL as parseDvmClient, cM as parseProtocolVersion, cN as requireClientCompatibility, cO as secp256k1Auth, cP as signedRequestInput, O as signedRequestStatementHeader } from '../step-cache-3cT4Shk0.js';
+import { ab as CashuMode, bK as CreditDrainEnqueue, R as ResolvedCreditConfig, bL as DVMAuthScheme, z as SignedRequestDomain, bM as CreditLedgerLike, bN as X402RefundSettlementGate, bO as CreditSnapshot, bP as DrawResult, bQ as X402SettlementStatus, bR as X402UnresolvedRefund, bS as GrownDrawResult, bT as DrawResolution, bU as FundingRecord, X as FundingReceipt, bV as CreditInvoiceRecord, bW as InvoiceSettlement, bX as BlockedInvoiceCursor, bY as InvoiceReconciliation, bZ as InvoiceWriteOff, b_ as DrawRecord, b$ as StalePendingDrawCursor, c0 as TempoCreditLossEvidence, c1 as CreditLedgerQuerier, c2 as TempoCreditLoss, c3 as X402CreditLossEvidence, c4 as X402CreditLoss, c5 as DrainMethod, c6 as DrainRequestResult, c7 as BitcoinDepositLiability, bo as FundingLot, c8 as CreditDrainRecord, c9 as ChannelDrainCursor, ca as DrainWriteOff, cb as DrainReleaseResult, cc as DrainFulfilment, cd as DrainTransitionResult, Y as JobReceipt, a1 as Message, K as KVStore, F as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-CwM_Q8rK.js';
+export { ce as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cf as ClientCompatibility, cg as ClientCompatibilityEnv, ch as ClientCompatibilityGate, ci as ClientCompatibilityRequirement, cj as ClientSemVer, e as CreateSignedRequestVerifierOpts, ck as CreditFundingBasis, cl as CreditInvoiceStatus, cm as CreditLedger, cn as CreditLedgerError, co as CreditLedgerErrorCode, cp as CreditLedgerErrorDetails, cq as CreditLedgerPool, cr as CreditStatus, cs as DRAIN_DELIVERY_RESERVE_SATS, ct as DVM_PROTOCOL_VERSION, cu as DrainConflictReason, cv as DrawRailValue, cw as DrawStatus, cx as JobCostReportPayload, cy as PostgresX402ChannelStorage, cz as ReplayStoreBackend, cA as RevenueSkippedNoRailPayload, cB as RevenueSkippedNoRailReason, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, cC as Secp256k1AuthOpts, y as SignedRequestAudience, B as SignedRequestError, E as SignedRequestFailure, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, M as SignedRequestVerifier, cD as X402ChannelStorageOpts, cE as X402RelayLockHolder, cF as X402RelaySubmissionLock, cG as X402RelaySubmissionLockError, cH as allocateDrawValue, cI as clientCompatibilityAttributes, cJ as clientCompatibilityMiddleware, cK as clientUpgradeRequired, N as createSignedRequestVerifier, cL as parseClientCapabilities, cM as parseClientCompatibility, cN as parseDvmClient, cO as parseProtocolVersion, cP as requireClientCompatibility, cQ as secp256k1Auth, cR as signedRequestInput, T as signedRequestStatementHeader } from '../step-cache-CwM_Q8rK.js';
 import { Pool } from 'pg';
-import { ak as CreditMenu, b as AppEnv, U as UpfrontPaymentOpts, h as PaymentInfo, al as ReceiptIssuer, am as LightningReceive, an as TempoSettlementReadiness, ao as DVMHostOpts } from '../credit-menu-C7zAJElJ.js';
-export { ap as BuildCreditMenuArgs, aq as BuilderIdentity, ar as CREDIT_ENVELOPE_KEYS, C as ConsumedCredentialStore, as as CreateX402BatchSettlementServerOpts, at as CreditEnvelope, au as CreditEnvelopeError, av as CreditFundCommitment, aw as CreditTerms, ax as DEFAULT_INVOICE_TTL_SECONDS, ay as DVMHost, az as JobManager, aA as JobManagerOpts, aB as LightningReceiveConfig, aC as MIN_INVOICE_TTL_SECONDS, aD as MemoryConsumedCredentialStore, aE as MemoryConsumedCredentialStoreOpts, aF as MemoryProcessedPaymentStore, aG as MemoryX402ExactSettlementStore, aH as MountOpts, aI as OwnerDisplay, aJ as PlatformReporterOpts, aK as PostgresProcessedPaymentStore, aL as PostgresX402ExactSettlementStore, aM as PriceFiat, aN as ProcessedPaymentQuerier, aO as ProcessedPaymentRail, aP as ProcessedPaymentRecord, aQ as ProcessedPaymentReplayError, aR as ProcessedPaymentStore, aS as X402BatchAcceptance, aT as X402BatchFunding, aU as X402BatchRefusal, aV as X402BatchSettlementServer, aW as X402ExactAcceptance, aX as X402ExactIntentConflictError, aY as X402ExactSettlementAttempt, aZ as X402ExactSettlementChainEvidence, a_ as X402ExactSettlementEffect, a$ as X402ExactSettlementEvidenceMissingError, b0 as X402ExactSettlementEvidenceReader, b1 as X402ExactSettlementIntent, b2 as X402ExactSettlementNotReadyError, b3 as X402ExactSettlementServer, b4 as X402ExactSettlementServerOpts, b5 as X402ExactSettlementStatus, b6 as X402ExactSettlementStore, b7 as X402SettlementChainEvidence, b8 as X402SettlementEvidenceReader, b9 as X402SettlementSubmissionError, ba as X402_BATCH_AUTO_SETTLEMENT, bb as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bc as X402_BATCH_SETTLEMENT_NETWORK, bd as attachCreditMenu, be as buildCreditMenu, bf as createDVMHost, bg as createX402BatchSettlementServer, bh as creditEnvelopeIgnoreFields, bi as drawSettlementRef, bj as extractCreditEnvelope, bk as fundingCommitment, bl as selectPrimaryCredit, bm as stripCreditEnvelope, bn as toCreditView } from '../credit-menu-C7zAJElJ.js';
+import { ak as CreditMenu, b as AppEnv, U as UpfrontPaymentOpts, h as PaymentInfo, al as ReceiptIssuer, am as LightningReceive, an as TempoSettlementReadiness, ao as DVMHostOpts, ap as DVMServeResult } from '../credit-menu-B-e3vZGo.js';
+export { aq as BuildCreditMenuArgs, ar as BuilderIdentity, as as CREDIT_ENVELOPE_KEYS, C as ConsumedCredentialStore, at as CreateX402BatchSettlementServerOpts, au as CreditEnvelope, av as CreditEnvelopeError, aw as CreditFundCommitment, ax as CreditTerms, ay as DEFAULT_INVOICE_TTL_SECONDS, az as DVMHost, aA as JobManager, aB as JobManagerOpts, aC as LightningReceiveConfig, aD as MIN_INVOICE_TTL_SECONDS, aE as MemoryConsumedCredentialStore, aF as MemoryConsumedCredentialStoreOpts, aG as MemoryProcessedPaymentStore, aH as MemoryX402ExactSettlementStore, aI as MountOpts, aJ as OwnerDisplay, aK as PaidJobCompletion, aL as PaymentMode, aM as PlatformReporterOpts, aN as PostgresProcessedPaymentStore, aO as PostgresX402ExactSettlementStore, aP as PriceFiat, aQ as ProcessedPaymentQuerier, aR as ProcessedPaymentRail, aS as ProcessedPaymentRecord, aT as ProcessedPaymentReplayError, aU as ProcessedPaymentStore, aV as X402BatchAcceptance, aW as X402BatchFunding, aX as X402BatchRefusal, aY as X402BatchSettlementServer, aZ as X402ExactAcceptance, a_ as X402ExactIntentConflictError, a$ as X402ExactSettlementAttempt, b0 as X402ExactSettlementChainEvidence, b1 as X402ExactSettlementEffect, b2 as X402ExactSettlementEvidenceMissingError, b3 as X402ExactSettlementEvidenceReader, b4 as X402ExactSettlementIntent, b5 as X402ExactSettlementNotReadyError, b6 as X402ExactSettlementServer, b7 as X402ExactSettlementServerOpts, b8 as X402ExactSettlementStatus, b9 as X402ExactSettlementStore, ba as X402SettlementChainEvidence, bb as X402SettlementEvidenceReader, bc as X402SettlementSubmissionError, bd as X402_BATCH_AUTO_SETTLEMENT, be as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bf as X402_BATCH_SETTLEMENT_NETWORK, bg as attachCreditMenu, bh as buildCreditMenu, bi as createDVMHost, bj as createX402BatchSettlementServer, bk as creditEnvelopeIgnoreFields, bl as drawSettlementRef, bm as extractCreditEnvelope, bn as fundingCommitment, bo as selectPrimaryCredit, bp as stripCreditEnvelope, bq as toCreditView } from '../credit-menu-B-e3vZGo.js';
 import { Context } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-BF_SG2i0.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-Bn23V3QU.js';
-export { a as JobStatus, b as JobStore, h as isStreamableJobStore } from '../job-store-Bn23V3QU.js';
+import { F as FxFetcher } from '../fx-CGRJE8rm.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-Cnlv9pOx.js';
+export { a as JobStatus, b as JobStore, h as isStreamableJobStore } from '../job-store-Cnlv9pOx.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-DbFkpDv0.js';
 import 'mppx';
 import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
 import 'viem';
 import '@x402/core/types';
-import '../lightning-backend-C04nH94l.js';
 import '@cashu/cashu-ts';
+import '../lightning-backend-KvQM0YHi.js';
 
 /** Lifetime of a per-call implicit credit before the ledger refuses new draws. */
 declare const IMPLICIT_CREDIT_TTL_MS: number;
@@ -265,6 +265,8 @@ declare class MemoryCreditLedger implements CreditLedgerLike {
     private readonly tempoLosses;
     private readonly x402Losses;
     private x402Settlements?;
+    /** Internal disposable transaction snapshot. The caller must serialize every ledger access. */
+    forkForTransaction(): MemoryCreditLedger;
     /** See {@link CreditLedger.useX402SettlementGate} — same contract (internal-review). */
     useX402SettlementGate(gate: X402RefundSettlementGate): void;
     fund(args: Parameters<CreditLedgerLike["fund"]>[0]): Promise<CreditSnapshot>;
@@ -450,6 +452,20 @@ declare class PostgresJobStore implements StreamableJobStore, ReceiptIssuingStor
     private acquireRequestIdClaim;
     releaseRequestIdClaim(claim: RequestIdClaim): Promise<void>;
     save(record: JobRecord): Promise<void>;
+    /** Persist a job while retaining its mount identity for cost-report recovery. */
+    saveForDvm(record: JobRecord, dvmId: string): Promise<void>;
+    private saveRecord;
+    /**
+     * Read terminal zero-revenue jobs whose latest declared-cost revision has
+     * not yet reached the durable reporter outbox.
+     */
+    listUnreportedTerminalCosts(args: {
+        dvmId: string;
+        limit: number;
+        afterJobId?: string;
+    }): Promise<JobRecord[]>;
+    /** Mark one revision only after its report has reached durable enqueue. */
+    markTerminalCostReported(jobId: string, costRevision: number): Promise<boolean>;
     delete(id: string): Promise<void>;
     listJobsForRetention(args: {
         lastActivityBeforeMs: number;
@@ -600,9 +616,6 @@ declare function hasInvalidRequestId(data: unknown): boolean;
  * exposed to the wiring-drift bug class fixed in internal-review/485/511, which was
  * about bypassing the host entirely. There is no migration to do.
  */
-declare function serve<State, InputSchema extends ZodLike | undefined = undefined>(descriptor: DVMDescriptor<State, InputSchema>, opts?: DVMHostOpts): Promise<{
-    url: string;
-    close: () => Promise<void>;
-}>;
+declare function serve<State, InputSchema extends ZodLike | undefined = undefined>(descriptor: DVMDescriptor<State, InputSchema>, opts?: DVMHostOpts): Promise<DVMServeResult>;
 
-export { BlockedInvoiceCursor, CREDIT_REQUEST_SCHEMA, CreditInvoiceRecord, CreditLedgerLike, CreditLedgerQuerier, CreditMenu, type CreditRequest, type CreditRouteDeps, CreditSnapshot, DVMAuthScheme, DVMHostOpts, DrawRecord, DrawResolution, DrawResult, FundingRecord, GrownDrawResult, IMPLICIT_CREDIT_TTL_MS, type InitLockPool, InvoiceReconciliation, InvoiceSettlement, InvoiceWriteOff, JobRecord, LightningReceive, MemoryCreditLedger, PostgresJobStore, PostgresKVStore, PostgresReplayStore, type PostgresReplayStoreOpts, REQUEST_ID_FIELD, type ResolvedCashuOpts, SDK_INIT_ADVISORY_LOCK, SignedRequestDomain, SignedRequestReplayStore, StalePendingDrawCursor, StreamableJobStore, handleCreditRequest, hasInvalidRequestId, protocolEnvelopeIgnoreFields, requestIdFromEnvelope, resolveCashuOptsFromEnv, serve, stripProtocolEnvelope, withSdkInitLock };
+export { BlockedInvoiceCursor, CREDIT_REQUEST_SCHEMA, CreditInvoiceRecord, CreditLedgerLike, CreditLedgerQuerier, CreditMenu, type CreditRequest, type CreditRouteDeps, CreditSnapshot, DVMAuthScheme, DVMHostOpts, DVMServeResult, DrawRecord, DrawResolution, DrawResult, FundingRecord, GrownDrawResult, IMPLICIT_CREDIT_TTL_MS, type InitLockPool, InvoiceReconciliation, InvoiceSettlement, InvoiceWriteOff, JobRecord, LightningReceive, MemoryCreditLedger, PostgresJobStore, PostgresKVStore, PostgresReplayStore, type PostgresReplayStoreOpts, REQUEST_ID_FIELD, type ResolvedCashuOpts, SDK_INIT_ADVISORY_LOCK, SignedRequestDomain, SignedRequestReplayStore, StalePendingDrawCursor, StreamableJobStore, handleCreditRequest, hasInvalidRequestId, protocolEnvelopeIgnoreFields, requestIdFromEnvelope, resolveCashuOptsFromEnv, serve, stripProtocolEnvelope, withSdkInitLock };

package/dist/server/index.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-L4OYF4DQ.js";
 import {
   PostgresJobStore
-} from "../chunk-LLXV32HA.js";
+} from "../chunk-SSSZUVWM.js";
 import {
   PostgresKVStore
 } from "../chunk-FROTD5XQ.js";
@@ -18,15 +18,15 @@ import {
   NwcBackend,
   NwcError,
   SpanWriter,
-  isTestMintUrl,
   parseNwcUri,
   validateX402Env,
   withNwcPool
-} from "../chunk-EPNDZ5DH.js";
+} from "../chunk-CEOAHV2I.js";
 import {
   MemoryKVStore
 } from "../chunk-RW5LP57K.js";
 import {
+  AccumulatorReplayError,
   CLIENT_COMPATIBILITY_HEADERS,
   CREDIT_ENVELOPE_KEYS,
   CREDIT_REQUEST_SCHEMA,
@@ -56,6 +56,7 @@ import {
   createPlatformTempoObserverHealth,
   createX402BatchSettlementServer,
   creditEnvelopeIgnoreFields,
+  devModeSkipsPaymentVerification,
   drawSettlementRef,
   extractCreditEnvelope,
   fundingCommitment,
@@ -77,7 +78,7 @@ import {
   stripProtocolEnvelope,
   toCreditView,
   unknownRouteNotFound
-} from "../chunk-3ZHMQCYP.js";
+} from "../chunk-NJFOV36R.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
@@ -86,7 +87,7 @@ import {
 import "../chunk-BQ2NMWKE.js";
 import {
   MemoryCreditLedger
-} from "../chunk-DBCLBYHP.js";
+} from "../chunk-KVEHHC7W.js";
 import {
   SignedRequestError,
   createDefaultReplayStore,
@@ -95,11 +96,12 @@ import {
 } from "../chunk-H2MEFVH6.js";
 import {
   isStreamableJobStore
-} from "../chunk-4B56DEEV.js";
+} from "../chunk-U6M3ATSG.js";
 import {
   generateEphemeralReceiptKey,
+  isTestMintUrl,
   receiptPubkeyFromSecret
-} from "../chunk-2K7E3N2D.js";
+} from "../chunk-KXCKFIJI.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -119,7 +121,7 @@ import {
 } from "../chunk-KXZUCCEY.js";
 import {
   initLoggers
-} from "../chunk-YDIYXGYL.js";
+} from "../chunk-E4EVGPDX.js";
 import "../chunk-66HGCPBU.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-27V2ILSR.js";
@@ -140,10 +142,12 @@ import {
   applyRetryToPool
 } from "../chunk-C3MTFLC6.js";
 import {
+  TEMPO_MODERATO_CHAIN_ID,
+  TEMPO_MODERATO_RPC,
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
-  TEMPO_USDC_MAINNET,
-  TempoSettlementReadiness
-} from "../chunk-5GFED3GJ.js";
+  TempoSettlementReadiness,
+  resolveTempoNetwork
+} from "../chunk-NPIW5VR5.js";
 
 // src/sdk/server/cashu-env.ts
 async function resolveCashuOptsFromEnv(env, pool, cashuModeHint) {
@@ -223,6 +227,69 @@ async function resolveCashuOptsFromEnv(env, pool, cashuModeHint) {
   return { cashuMode, lockPubkey, lockPubkeyGraceSeconds, db, dvmId, canonicalDvmId };
 }
 
+// src/sdk/server/payment-mode.ts
+function resolvePaymentMode(opts) {
+  const active = (rail, configured, ready) => ({
+    status: !configured && !opts.paymentMethods?.includes(rail) ? "absent" : ready && (!opts.paymentMethods || opts.paymentMethods.includes(rail)) ? "verifying" : "unavailable",
+    testFunds: rail === "cashu" ? opts.mints?.length ? opts.mints.every(isTestMintUrl) : null : rail === "x402" ? opts.x402 ? ["base-sepolia", "eip155:84532"].includes(opts.x402.network) : null : opts.mpp?.tempoConfiguration ? opts.mpp.tempoConfiguration.chainId === TEMPO_MODERATO_CHAIN_ID : null
+  });
+  return {
+    mount: opts.mount,
+    verification: devModeSkipsPaymentVerification(opts) ? "skipped" : "required",
+    storage: opts.durable ? "durable" : "disposable",
+    rails: {
+      cashu: active("cashu", opts.mints !== void 0, opts.cashuReady),
+      x402: active("x402", !!opts.x402, !!opts.x402 && opts.x402Available),
+      tempo: active("tempo", !!opts.mpp, !!opts.mpp?.methods.some((method) => method.name === "tempo"))
+    }
+  };
+}
+
+// src/sdk/server/host.ts
+import { randomUUID as randomUUID2 } from "crypto";
+
+// src/sdk/server/disposable-cashu-store.ts
+function createDisposableCashuStore() {
+  let current = new MemoryCreditLedger();
+  let tail = Promise.resolve();
+  const requests = /* @__PURE__ */ new Set();
+  const secrets = /* @__PURE__ */ new Set();
+  function exclusive(operation) {
+    const result = tail.then(operation);
+    tail = result.then(() => void 0, () => void 0);
+    return result;
+  }
+  const ledger = new Proxy(current, {
+    get(_target, key) {
+      const member = Reflect.get(current, key);
+      if (typeof member !== "function") return member;
+      if (key === "useX402SettlementGate") return member.bind(current);
+      return (...args) => exclusive(async () => {
+        const method = Reflect.get(current, key);
+        return await method.apply(current, args);
+      });
+    }
+  });
+  return {
+    ledger,
+    accumulator: {
+      commit(requestId, proofs, account) {
+        return exclusive(async () => {
+          const incoming = proofs.map((proof) => proof.secret);
+          if (requests.has(requestId) || new Set(incoming).size !== incoming.length || incoming.some((secret) => secrets.has(secret))) {
+            throw new AccumulatorReplayError("disposable", requestId);
+          }
+          const staged = current.forkForTransaction();
+          await account(staged);
+          current = staged;
+          requests.add(requestId);
+          for (const secret of incoming) secrets.add(secret);
+        });
+      }
+    }
+  };
+}
+
 // src/sdk/server/host.ts
 import { serve as honoServe } from "@hono/node-server";
 import { Hono } from "hono";
@@ -1079,6 +1146,7 @@ function createDVMHost(opts = {}) {
   app.use("*", clientCompatibilityMiddleware());
   const routeClientCompatibility = opts.wrapRouteClientCompatibility?.(requireClientCompatibility) ?? requireClientCompatibility;
   const mounts = [];
+  const paymentModes = [];
   const ownsPool = !opts.pool;
   let pgPool;
   let creditLedger;
@@ -1091,10 +1159,12 @@ function createDVMHost(opts = {}) {
   let pgStreamStore;
   let nodeServer;
   let spanWriter;
+  let shutdownPromise;
+  let serveAttempted = false;
   function mount(descriptor, mountOpts) {
-    mounts.push({ descriptor, prefix: mountOpts?.prefix });
+    mounts.push({ descriptor, prefix: mountOpts?.prefix, bootCompleted: false });
   }
-  async function serveFn(serveOpts) {
+  async function boot(serveOpts) {
     const env = opts.env ?? Object.fromEntries(
       Object.entries(process.env).filter(
         (entry) => entry[1] !== void 0
@@ -1130,7 +1200,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-TAONYLIF.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-3RAXMNSY.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;
@@ -1143,11 +1213,25 @@ function createDVMHost(opts = {}) {
         kvBackend = "postgres";
       }
     }
-    const cashuOpts = await resolveCashuOptsFromEnv(env, pgPool, opts.cashuMode);
     const mintsFromEnv = envMaybe.DVMKIT_CASHU_MINTS?.split(",").map((m) => m.trim()).filter(Boolean);
-    let effectiveMints = opts.mints ?? mintsFromEnv;
-    if (cashuOpts.cashuMode === "p2pk-accumulator" && !cashuOpts.db) {
-      effectiveMints = void 0;
+    const effectiveMints = opts.mints ?? mintsFromEnv;
+    const disposableCashu = opts.devMode && !pgPool && (effectiveMints?.length ?? 0) > 0 ? createDisposableCashuStore() : void 0;
+    if (disposableCashu && !effectiveMints.every(isTestMintUrl)) {
+      throw new Error("Disposable development Cashu accepts only known test or loopback mints. Real or unknown mints require durable PostgreSQL storage.");
+    }
+    if (disposableCashu && opts.cashuMode === void 0) {
+      console.log(JSON.stringify({ level: "info", message: "Cashu mode: p2pk-accumulator (default)" }));
+    }
+    const cashuOpts = disposableCashu ? {
+      cashuMode: "p2pk-accumulator",
+      lockPubkey: `02${generateEphemeralReceiptKey().pubkey}`,
+      lockPubkeyGraceSeconds: 0,
+      dvmId: randomUUID2(),
+      canonicalDvmId: void 0,
+      db: void 0
+    } : await resolveCashuOptsFromEnv(env, pgPool, opts.cashuMode);
+    if (envMaybe.BUILDER_LOCK_PRIVKEY) {
+      throw new Error("BUILDER_LOCK_PRIVKEY must not be set on a DVM machine.");
     }
     if (!opts.devMode && effectiveMints && effectiveMints.length > 0 && envMaybe.DVMKIT_PLATFORM_URL) {
       const testMints = effectiveMints.filter(isTestMintUrl);
@@ -1207,7 +1291,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     let tempoChargeBackend = "user-supplied";
     const mppTempoRecipient = envMaybe.DVMKIT_TEMPO_RECIPIENT;
     if (!mpp && mppTempoRecipient) {
-      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-MOBWGTWJ.js");
+      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-SPBOF5AM.js");
       tempoChargeBackend = pgPool ? "postgres" : "memory";
       let tempoCharge;
       if (pgPool) {
@@ -1240,11 +1324,14 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         tempoPayoutReader.listActive = (limit, cursor) => sessionStore.listActive(limit, cursor);
         pendingInits.push(sessionStore.init());
         const operator = privateKeyToAccount2(tempoOperatorKey);
-        const tempoCurrency = envMaybe.DVMKIT_TEMPO_CURRENCY ?? TEMPO_USDC_MAINNET;
-        const mainnetRpc = resolveRpcOverride(envMaybe.DVMKIT_TEMPO_RPC_URL).url;
+        const tempoNetwork = resolveTempoNetwork(envMaybe);
+        const tempoCurrency = tempoNetwork.currency;
+        const selectedChain = tempoNetwork.chainId === tempoModerato.id ? tempoModerato : tempoNetwork.chainId === tempoMainnet.id ? tempoMainnet : { ...tempoNetwork.testnet ? tempoModerato : tempoMainnet, id: tempoNetwork.chainId };
+        const bundledRpc = tempoNetwork.chainId === TEMPO_MODERATO_CHAIN_ID ? TEMPO_MODERATO_RPC : selectedChain.rpcUrls.default.http[0];
+        const tempoRpc = resolveRpcOverride(envMaybe.DVMKIT_TEMPO_RPC_URL, bundledRpc).url;
         const publicClient = createPublicClient({
-          chain: tempoMainnet,
-          transport: http(mainnetRpc)
+          chain: selectedChain,
+          transport: http(tempoRpc)
         });
         if (envMaybe.DVMKIT_PLATFORM_URL) {
           if (!cashuOpts.dvmId) {
@@ -1258,7 +1345,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           pendingInits.push(readinessStore.init());
           tempoSettlementReadiness = new TempoSettlementReadiness({
             address: operator.address,
-            network: `eip155:${tempoMainnet.id}`,
+            network: `eip155:${tempoNetwork.chainId}`,
             token: tempoCurrency,
             lowBalanceMicro: parseTempoSettlementFloor(envMaybe),
             stateStore: readinessStore,
@@ -1273,15 +1360,20 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         tempoSession = {
           store: sessionStore,
           account: operator,
+          chainId: tempoNetwork.chainId,
           getClient: ({ chainId }) => {
-            const chain = chainId === tempoModerato.id ? tempoModerato : tempoMainnet;
+            if (chainId !== void 0 && chainId !== tempoNetwork.chainId) {
+              throw new Error(
+                `Tempo session requested chain ${chainId}, but the host is configured for chain ${tempoNetwork.chainId}.`
+              );
+            }
             return createWalletClient({
               account: operator,
-              chain,
+              chain: selectedChain,
               // Trimmed, so a blank DVMKIT_TEMPO_RPC_URL falls back to the
               // chain's bundled endpoint rather than becoming the transport
               // target (internal-review).
-              transport: http(resolveRpcOverride(envMaybe.DVMKIT_TEMPO_RPC_URL).url)
+              transport: http(tempoRpc)
             });
           },
           settlementSchedule: { intervalMs: 24 * 60 * 60 * 1e3 },
@@ -1406,8 +1498,8 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-OP24Z2KO.js");
-      creditLedger = new MemoryCreditLedger2();
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-MNUOTQO5.js");
+      creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-HAA4SFNK.js");
       processedPayments = new MemoryProcessedPaymentStore2();
     }
@@ -1477,6 +1569,33 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       const descX402Support = descX402Health?.support();
       if (!bootX402Support && descX402Support) bootX402Support = descX402Support;
       const descMpp = descriptor.mpp ?? mpp;
+      const x402Settleable = isConfiguredX402Settleable(
+        descX402Support,
+        descX402WithDualServe
+      );
+      if (descX402Support && !x402Settleable) {
+        const message = `x402 network ${descX402Support.network} has no settleable kind at facilitator ${descX402Support.facilitator}. Use eip155:84532 (Base Sepolia) with x402.org for test funds, or a facilitator supporting your configured mainnet. No network was changed.`;
+        if (failFast) throw new Error(message);
+        console.warn(JSON.stringify({ level: "warn", event: "x402_network_unsupported", message }));
+      }
+      const paymentMode = resolvePaymentMode({
+        mount: descriptor.name,
+        devMode: opts.devMode,
+        mints: effectiveMints,
+        x402: descX402WithDualServe,
+        mpp: descMpp,
+        paymentMethods: opts.paymentMethods ?? descriptor.paymentMethods,
+        cashuReady: !!cashuOpts.lockPubkey && !!(cashuOpts.db || disposableCashu) && !!effectiveMints?.length,
+        x402Available: x402Settleable,
+        durable: !!pgPool
+      });
+      paymentModes.push(paymentMode);
+      console.log(JSON.stringify({
+        level: "info",
+        event: "payment_mode",
+        ...paymentMode,
+        ...disposableCashu ? { message: "Test funds only. Proofs, balances and jobs are lost on shutdown; the next boot uses a fresh Cashu lock identity." } : {}
+      }));
       const {
         app: subApp,
         shutdown,
@@ -1488,6 +1607,8 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         mints: effectiveMints,
         jobStore,
         devMode: opts.devMode,
+        onPaidJobCompleted: opts.onPaidJobCompleted,
+        paymentMode,
         paymentMethods: opts.paymentMethods ?? descriptor.paymentMethods,
         x402: descX402WithDualServe,
         x402FacilitatorHealth: descX402Health,
@@ -1495,6 +1616,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         consumedCredentialStore: opts.consumedCredentialStore ?? sharedPgConsumedStore,
         adminCashuNonceStore: sharedPgConsumedStore,
         cashuMode: cashuOpts.cashuMode,
+        disposableCashu: disposableCashu?.accumulator,
         lockPubkey: cashuOpts.lockPubkey,
         lockPubkeyGraceSeconds: cashuOpts.lockPubkeyGraceSeconds,
         canonicalDvmId: cashuOpts.canonicalDvmId,
@@ -1546,6 +1668,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       if (entry.descriptor.config.onBoot) {
         await entry.descriptor.config.onBoot(env);
       }
+      entry.bootCompleted = true;
     }
     mark("onboot");
     logBootSummary({
@@ -1593,21 +1716,63 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
         console.log(`DVM host running at ${url}`);
         resolvePromise({
           url,
-          async close() {
-            await shutdownInternal();
+          paymentModes,
+          close() {
+            return shutdownInternal();
           }
         });
       });
     });
   }
-  async function shutdownInternal() {
+  async function serveFn(serveOpts) {
+    if (serveAttempted) {
+      throw new Error("A DVM host can only serve once. Create a new host to retry after shutdown.");
+    }
+    serveAttempted = true;
+    try {
+      return await boot(serveOpts);
+    } catch (bootError) {
+      await shutdownInternal().catch(() => void 0);
+      throw bootError;
+    }
+  }
+  function shutdownInternal() {
+    return shutdownPromise ??= performShutdown();
+  }
+  async function performShutdown() {
+    const errors = [];
+    const capture = async (operation) => {
+      try {
+        await operation();
+      } catch (error) {
+        errors.push(error);
+      }
+    };
+    if (nodeServer) {
+      const server = nodeServer;
+      await capture(
+        () => new Promise((resolve) => {
+          const idleSweep = setInterval(() => {
+            server.closeIdleConnections();
+          }, IDLE_CONNECTION_SWEEP_MS);
+          idleSweep.unref();
+          server.close(() => {
+            clearInterval(idleSweep);
+            resolve();
+          });
+          server.closeIdleConnections();
+        })
+      );
+      nodeServer = void 0;
+    }
     if (spanWriter) {
-      await spanWriter.shutdown();
+      const writer = spanWriter;
       spanWriter = void 0;
+      await capture(() => writer.shutdown());
     }
     for (let i = mounts.length - 1; i >= 0; i--) {
       const entry = mounts[i];
-      if (entry.descriptor.config.onShutdown) {
+      if (entry.bootCompleted && entry.descriptor.config.onShutdown) {
         try {
           await entry.descriptor.config.onShutdown();
         } catch (err) {
@@ -1617,34 +1782,27 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           );
         }
       }
-      entry.shutdown?.();
-    }
-    if (nodeServer) {
-      const server = nodeServer;
-      await new Promise((resolve) => {
-        const idleSweep = setInterval(() => {
-          server.closeIdleConnections();
-        }, IDLE_CONNECTION_SWEEP_MS);
-        idleSweep.unref();
-        server.close(() => {
-          clearInterval(idleSweep);
-          resolve();
-        });
-        server.closeIdleConnections();
-      });
-      nodeServer = void 0;
+      await capture(() => entry.shutdown?.());
     }
     if (pgStreamStore && isStreamableJobStore(pgStreamStore)) {
-      await pgStreamStore.shutdownStreaming();
+      await capture(() => pgStreamStore?.shutdownStreaming());
     }
     if (pgPool && ownsPool) {
-      await pgPool.end();
+      const ownedPool = pgPool;
+      await capture(() => ownedPool.end());
     }
     pgPool = void 0;
     creditLedger = void 0;
     processedPayments = void 0;
-    tempoSettlementReadiness?.stop();
-    tempoSettlementReadiness = void 0;
+    if (tempoSettlementReadiness) {
+      const readiness = tempoSettlementReadiness;
+      tempoSettlementReadiness = void 0;
+      await capture(() => readiness.stop());
+    }
+    if (errors.length === 1) throw errors[0];
+    if (errors.length > 1) {
+      throw new AggregateError(errors, `${String(errors.length)} host shutdown operations failed`);
+    }
   }
   return {
     app,
@@ -1659,6 +1817,12 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     shutdown: shutdownInternal
   };
 }
+function isConfiguredX402Settleable(support, config) {
+  if (!support || !config) return false;
+  if (support.available) return true;
+  const batch = config.batchSettlement;
+  return !!batch && (support.batchSettlement || !!batch.selfRelay);
+}
 function mountNeedsFx(entry, hostRailConfigured) {
   const descriptor = entry.descriptor;
   if (descriptor.credit || descriptor.price) return true;
@@ -1837,7 +2001,7 @@ function logBootSummary(s) {
     console.log(`  Tempo secret:  ${rotState}`);
   }
   console.log(
-    `  x402:          ${s.x402 ? `${s.x402.network} \u2192 ${s.x402.payTo}${s.x402Support?.available === false ? " (facilitator unavailable \u2014 omitted)" : ""}` : "(unconfigured)"}`
+    `  x402:          ${s.x402 ? `${s.x402.network} \u2192 ${s.x402.payTo}${s.x402Support?.available === false ? isConfiguredX402Settleable(s.x402Support, s.x402) ? " (exact unavailable \u2014 batch configured)" : " (no configured settleable path)" : ""}` : "(unconfigured)"}`
   );
   console.log(
     `  LN receive:    ${s.lightningReceive ? `receive-only NWC (${s.lightningReceive.available() ? "reachable" : "unreachable \u2014 omitted from the funding menu"})` : "(unconfigured)"}`