@dvmkit/sdk 0.1.4-rc.7 → 0.1.5-rc.8

package/dist/{chunk-QK3VJNCK.js → chunk-UB5FZ43T.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-BQ2NMWKE.js";
 import {
   MemoryCreditLedger
-} from "./chunk-DBCLBYHP.js";
+} from "./chunk-KVEHHC7W.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SignedRequestError,
@@ -49,6 +49,7 @@ import {
   createMonotonicClock,
   getWallet,
   isPublicRequestId,
+  isTestMintUrl,
   isX402SettlementReconciliationReason,
   normaliseMintUrl,
   parseTraceparent,
@@ -59,7 +60,7 @@ import {
   toLockPubkey,
   verifyCashuToken,
   verifyChallenge
-} from "./chunk-VRQDX5P4.js";
+} from "./chunk-KXCKFIJI.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
@@ -140,7 +141,7 @@ import {
   advertisedMethods,
   challengeMeta,
   isTempoInsufficientFundsError
-} from "./chunk-5GFED3GJ.js";
+} from "./chunk-M7LHFJ5K.js";
 
 // src/sdk/server/lock-pubkey-store.ts
 async function initLockPubkeyTable(db) {
@@ -3074,7 +3075,8 @@ import {
   Amount as Amount2,
   CheckStateEnum,
   getP2PKExpectedWitnessPubkeys,
-  getTagInt
+  getTagInt,
+  verifyDleqIfPresent
 } from "@cashu/cashu-ts";
 function valueCashuFunding(wallet, proofs) {
   let grossSats = Amount2.zero();
@@ -3091,6 +3093,9 @@ function valueCashuFunding(wallet, proofs) {
   };
 }
 async function acceptAccumulatorPayment(opts) {
+  if (opts.disposable && !opts.mints.every(isTestMintUrl)) {
+    throw new Error("Disposable Cashu accepts only known test or loopback mints.");
+  }
   if (!opts.requestId) {
     return {
       kind: "rejected",
@@ -3115,6 +3120,16 @@ async function acceptAccumulatorPayment(opts) {
     const walletProvider = opts.walletProvider ?? getWallet;
     const wallet = await walletProvider(mintUrl);
     proofs = wallet.decodeToken(opts.cashuToken).proofs;
+    if (meta.unit !== "sat" || proofs.length === 0) {
+      throw new Error("Cashu payment requires nonempty sat proofs.");
+    }
+    for (const proof of proofs) {
+      if (!proof.dleq || !verifyDleqIfPresent(proof, wallet.getKeyset(proof.id))) {
+        throw new Error(
+          "Cashu payment requires valid mint-provided NUT-12 DLEQ evidence for every proof. Request a fresh token from a compatible mint."
+        );
+      }
+    }
     valuation = valueCashuFunding(wallet, proofs);
   } catch (err) {
     return {
@@ -3149,6 +3164,9 @@ async function acceptAccumulatorPayment(opts) {
       };
     }
     const allowedNormalised = allowed.map(toLockPubkey);
+    if (opts.disposable && (allowedNormalised.length !== 1 || (getTagInt(p.secret, "n_sigs") ?? 1) !== 1)) {
+      return { kind: "rejected", code: "not_p2pk_locked", message: "Disposable Cashu requires an exclusive single-signature P2PK lock." };
+    }
     const match = accepted.find((pk) => allowedNormalised.includes(pk));
     if (!match) {
       return {
@@ -3185,6 +3203,9 @@ async function acceptAccumulatorPayment(opts) {
         message: "One or more proofs are pending at the mint \u2014 retry shortly."
       };
     }
+    if (states.some((state) => state.state !== CheckStateEnum.UNSPENT)) {
+      return { kind: "rejected", code: "mint_unreachable", message: "Mint returned an unknown proof state." };
+    }
   } catch (err) {
     return {
       kind: "rejected",
@@ -3202,7 +3223,13 @@ async function acceptAccumulatorPayment(opts) {
     tExpireMsByIndex
   };
   try {
-    if (opts.withCommitTx) {
+    if (opts.disposable) {
+      const account = opts.withDisposableLedger;
+      if (!account) throw new Error("Disposable Cashu requires atomic credit accounting.");
+      await opts.disposable.commit(opts.requestId, proofs, (ledger) => account(ledger, acceptedValue));
+    } else if (!opts.db) {
+      throw new Error("Cashu accumulator requires a storage backend.");
+    } else if (opts.withCommitTx) {
       const withCommitTx = opts.withCommitTx;
       const client = await opts.db.connect();
       try {
@@ -3254,7 +3281,7 @@ function parseNut11LocktimeMs(secret) {
 var UPFRONT_CHALLENGE_TTL_MS = 5 * 60 * 1e3;
 var CONSUMED_CREDENTIAL_TTL_MS = 2 * UPFRONT_CHALLENGE_TTL_MS;
 function devModeSkipsPaymentVerification(opts) {
-  return Boolean(opts.devMode) && !opts.mints;
+  return Boolean(opts.devMode) && !opts.mints && !opts.x402 && !opts.mpp && !opts.paymentMethods?.some((method) => method === "cashu" || method === "x402" || method === "tempo");
 }
 var PAYMENT_PROOF_KEYS = ["cashu_token", "x402_payment", "tempo_credential"];
 function hasPaymentProof(content) {
@@ -3457,7 +3484,7 @@ async function verifyUpfrontPayment(opts) {
         }
       };
     }
-    if (opts.cashuMode === "p2pk-accumulator" && opts.accumulatorDb && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
+    if (opts.cashuMode === "p2pk-accumulator" && (opts.accumulatorDb || opts.disposableCashu) && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
       return verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx);
     }
     return {
@@ -3605,7 +3632,7 @@ async function verifyUpfrontPayment(opts) {
           x402Requirements
         });
       }
-      const { verifyX402Payment } = await import("./x402-T2C5MX3T.js");
+      const { verifyX402Payment } = await import("./x402-5H27DCBE.js");
       const receipt = await verifyX402Payment(
         x402Payment,
         x402Config,
@@ -4454,7 +4481,7 @@ function buildPaymentErrorResponse(body, challenges, x402Requirements, status, x
 async function verifyIncomingPayment(body, opts, snapshot) {
   if (body.type !== "payment") return {};
   if (body.content.cashu_token) {
-    if (opts.cashuMode === "p2pk-accumulator" && opts.accumulatorDb && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
+    if (opts.cashuMode === "p2pk-accumulator" && (opts.accumulatorDb || opts.disposableCashu) && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
       const mints = opts.mints ?? [];
       if (mints.length === 0) {
         return {
@@ -4472,6 +4499,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
         {
           cashuToken: body.content.cashu_token,
           accumulatorDb: opts.accumulatorDb,
+          disposableCashu: opts.disposableCashu,
           dvmId: opts.dvmId,
           lockPubkeys: opts.lockPubkeys,
           requestId,
@@ -4533,7 +4561,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
           snapshot
         });
       }
-      const { verifyX402Payment } = await import("./x402-T2C5MX3T.js");
+      const { verifyX402Payment } = await import("./x402-5H27DCBE.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -4897,7 +4925,7 @@ function applyPaymentInfoToJob(job, info) {
 async function processIncomingPayment(job, body, opts) {
   if (body.type !== "payment") return null;
   if (body.content.cashu_token) {
-    if (opts.cashuMode === "p2pk-accumulator" && opts.accumulatorDb && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
+    if (opts.cashuMode === "p2pk-accumulator" && (opts.accumulatorDb || opts.disposableCashu) && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
       const mints = opts.mints ?? [];
       if (mints.length === 0) {
         return {
@@ -4912,6 +4940,7 @@ async function processIncomingPayment(job, body, opts) {
         {
           cashuToken: body.content.cashu_token,
           accumulatorDb: opts.accumulatorDb,
+          disposableCashu: opts.disposableCashu,
           dvmId: opts.dvmId,
           lockPubkeys: opts.lockPubkeys,
           requestId,
@@ -4946,7 +4975,7 @@ async function processIncomingPayment(job, body, opts) {
     try {
       const requiredMsats = job.pendingPaymentMsats ?? 0;
       const requiredUsdcMicro = job.pendingX402AmountUsdcMicro !== void 0 ? BigInt(job.pendingX402AmountUsdcMicro) : BigInt(msatsToUsdc(requiredMsats, rate));
-      const { verifyX402Payment } = await import("./x402-T2C5MX3T.js");
+      const { verifyX402Payment } = await import("./x402-5H27DCBE.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -5066,7 +5095,7 @@ function creditPendingPayment(job) {
 }
 async function verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx) {
   const { cashuToken, accumulatorDb, dvmId, lockPubkeys, mintHealthTracker } = opts;
-  if (!cashuToken || !accumulatorDb || !dvmId || !lockPubkeys || lockPubkeys.length === 0) {
+  if (!cashuToken || !accumulatorDb && !opts.disposableCashu || !dvmId || !lockPubkeys || lockPubkeys.length === 0) {
     return {
       paidMsats: 0,
       receivedProofs: [],
@@ -5145,6 +5174,17 @@ async function verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx) {
       requestId: opts.requestId,
       mints,
       db: accumulatorDb,
+      disposable: opts.disposableCashu,
+      withDisposableLedger: ledgerCtx && requestId ? async (ledger, accepted) => {
+        credited = await fundAndDraw({ ...ledgerCtx, ledger }, {
+          rail: "cashu",
+          paymentId: requestId,
+          paidMsats: accepted.paidMsats,
+          grossPaidMsats: accepted.grossMsats,
+          cashuInputFeeMsats: accepted.inputFeeMsats,
+          mint: tokenMint
+        });
+      } : void 0,
       dvmId,
       lockPubkeys,
       beforeCommit,
@@ -11696,6 +11736,7 @@ var JobManager = class {
         resourcePath: `/v1/job/${job.id}/messages`,
         cashuMode: this.opts.cashuMode,
         accumulatorDb: this.opts.cashuMode === "p2pk-accumulator" ? this.opts.db : void 0,
+        disposableCashu: this.opts.disposableCashu,
         dvmId: this.opts.dvmId,
         lockPubkeys: extra?.lockPubkeys,
         mintHealthTracker: extra?.mintHealthTracker,
@@ -12134,8 +12175,25 @@ var JobManager = class {
    * `context.ts`). The gap is visible to callers — the `seq` series skips a
    * number — which is precisely the completeness signal receipts exist for.
    */
+  async observePaidCompletion(record) {
+    const callback = this.opts.onPaidJobCompleted;
+    if (!callback || record.status !== "completed" || !record.paymentRail || !record.creditId || !record.drawId || !this.opts.creditLedger) return;
+    const draw = await this.opts.creditLedger.getDraw({ creditId: record.creditId, drawId: record.drawId }).catch(() => void 0);
+    const rail = draw?.railValue.rail;
+    const currency = draw?.railValue.creditCurrency;
+    if (draw?.status !== "settled" || draw.amountMicro <= 0 || !currency || !rail || !isFundingRail(rail)) return;
+    const testFunds = rail === "lightning" ? null : this.opts.paymentMode?.rails[rail].testFunds ?? null;
+    try {
+      await callback({ jobId: record.id, rail, amountMicro: draw.amountMicro, currency, testFunds });
+    } catch (error) {
+      console.error(`[${record.id}] Paid completion observer failed:`, error);
+    }
+  }
   async issueReceipt(record) {
-    if (record.receipt) return record.receipt;
+    if (record.receipt) {
+      await this.observePaidCompletion(record);
+      return record.receipt;
+    }
     if (!isReceiptableStatus(record.status)) return void 0;
     let credit;
     try {
@@ -12155,13 +12213,18 @@ var JobManager = class {
       return void 0;
     }
     const issuer = this.opts.receiptIssuer;
-    if (!issuer) return void 0;
+    if (!issuer) {
+      await this.observePaidCompletion(record);
+      return void 0;
+    }
     if (!isReceiptIssuingStore(this.jobStore)) return void 0;
     const store = this.jobStore;
     try {
       const seq = await store.claimReceiptSeq(record.id);
       const receipt = issuer.issue(record, seq, void 0, credit);
-      return await store.saveReceipt(record.id, receipt) ?? receipt;
+      const saved = await store.saveReceipt(record.id, receipt) ?? receipt;
+      await this.observePaidCompletion(record);
+      return saved;
     } catch (err) {
       console.error(
         JSON.stringify({
@@ -13654,7 +13717,7 @@ var X402FacilitatorHealth = class {
           facilitator: support.facilitator,
           network: support.network,
           reason: support.reason,
-          message: "x402 omitted because the configured facilitator advertises no supported exact generation on this network. Other rails are unaffected."
+          message: "Exact x402 is unavailable because the configured facilitator advertises no supported exact generation on this network. Configured batch settlement is evaluated separately; other rails are unaffected."
         })
       );
     } else if (!support.exact.v1 || !support.exact.v2 || this.config.batchSettlement && !support.batchSettlement) {
@@ -16599,197 +16662,236 @@ function revenueReporterBannerState(s) {
   return s.devMode ? "(dev \u2014 not reporting)" : "misconfigured";
 }
 async function createDVMServer(descriptor, opts) {
-  if (process.env.DVMKIT_CASHU_MINTS && opts.cashuMode === void 0) {
-    console.warn(
-      JSON.stringify({
-        level: "cashu_opts_env_ignored",
-        message: "DVMKIT_CASHU_MINTS is set in env but cashuMode opt is undefined \u2014 cashu is NOT active. Pass cashuMode, lockPubkey, and db via createDVMHost to enable it."
-      })
-    );
-  }
-  const envMaybe = opts.env;
-  const platformToken = opts.platformToken ?? envMaybe.DVMKIT_PLATFORM_TOKEN;
-  const platformUrl = opts.platformUrl ?? envMaybe.DVMKIT_PLATFORM_URL;
-  const dvmId = opts.dvmId;
   let revenueReporter;
   let payoutReporter;
-  if (!opts.onJobCompleted && platformToken && platformUrl && dvmId && opts.db) {
-    const { RevenueReporter } = await import("./revenue-reporter-ASZ7SHHH.js");
-    const reporter = new RevenueReporter(opts.db, platformUrl, platformToken);
-    await reporter.init();
-    reporter.startRetryLoop();
-    revenueReporter = reporter;
-    const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-RG6XNGPI.js");
-    payoutReporter = new PayoutReporter({
+  let unsubscribeTempoSettlementReadiness;
+  let creditExpirySweep;
+  let x402ChannelStorage;
+  let x402BatchSettlement;
+  let server;
+  let shutdownPromise;
+  const shutdown = () => shutdownPromise ??= (async () => {
+    const errors = [];
+    const capture = async (operation) => {
+      try {
+        await operation();
+      } catch (error) {
+        errors.push(error);
+      }
+    };
+    let settlementStopped;
+    if (server) {
+      try {
+        settlementStopped = server.shutdown();
+      } catch (error) {
+        errors.push(error);
+      }
+    } else if (x402BatchSettlement) {
+      try {
+        settlementStopped = x402BatchSettlement.stop();
+      } catch (error) {
+        errors.push(error);
+      }
+    }
+    await capture(() => payoutReporter?.stop());
+    await capture(() => revenueReporter?.stop());
+    await capture(() => creditExpirySweep?.stop());
+    await capture(() => unsubscribeTempoSettlementReadiness?.());
+    if (settlementStopped) await capture(() => settlementStopped);
+    if (x402ChannelStorage) {
+      await capture(() => x402ChannelStorage?.close());
+    }
+    if (errors.length === 1) throw errors[0];
+    if (errors.length > 1) {
+      throw new AggregateError(errors, `${String(errors.length)} DVM shutdown operations failed`);
+    }
+  })();
+  try {
+    if (process.env.DVMKIT_CASHU_MINTS && opts.cashuMode === void 0) {
+      console.warn(
+        JSON.stringify({
+          level: "cashu_opts_env_ignored",
+          message: "DVMKIT_CASHU_MINTS is set in env but cashuMode opt is undefined \u2014 cashu is NOT active. Pass cashuMode, lockPubkey, and db via createDVMHost to enable it."
+        })
+      );
+    }
+    const envMaybe = opts.env;
+    const platformToken = opts.platformToken ?? envMaybe.DVMKIT_PLATFORM_TOKEN;
+    const platformUrl = opts.platformUrl ?? envMaybe.DVMKIT_PLATFORM_URL;
+    const dvmId = opts.dvmId;
+    if (!opts.onJobCompleted && platformToken && platformUrl && dvmId && opts.db) {
+      const { RevenueReporter } = await import("./revenue-reporter-ASZ7SHHH.js");
+      const reporter = new RevenueReporter(opts.db, platformUrl, platformToken);
+      revenueReporter = reporter;
+      await reporter.init();
+      reporter.startRetryLoop();
+      const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-RG6XNGPI.js");
+      payoutReporter = new PayoutReporter({
+        dvmId,
+        db: opts.db,
+        transport: reporter,
+        // The same condition the admin routes and the accumulator monitor mount on.
+        cashu: opts.cashuMode === "p2pk-accumulator" && !!opts.lockPubkey,
+        ...typeof opts.db.connect === "function" ? {} : { batchStore: new MemoryX402BatchStore() }
+      });
+      await payoutReporter.init();
+      payoutReporter.start();
+    }
+    assertRevenueReporterReady({
+      failFast: opts.failFast ?? false,
+      devMode: opts.devMode,
+      platformToken,
+      platformUrl,
       dvmId,
-      db: opts.db,
-      transport: reporter,
-      // The same condition the admin routes and the accumulator monitor mount on.
-      cashu: opts.cashuMode === "p2pk-accumulator" && !!opts.lockPubkey,
-      ...typeof opts.db.connect === "function" ? {} : { batchStore: new MemoryX402BatchStore() }
+      hasPgPool: !!opts.db
     });
-    await payoutReporter.init();
-    payoutReporter.start();
-  }
-  assertRevenueReporterReady({
-    failFast: opts.failFast ?? false,
-    devMode: opts.devMode,
-    platformToken,
-    platformUrl,
-    dvmId,
-    hasPgPool: !!opts.db
-  });
-  const effectiveOnJobCompleted = opts.onJobCompleted ?? (revenueReporter ? (info) => revenueReporter.report(info) : void 0);
-  const effectiveOnJobCost = opts.onJobCost ?? (revenueReporter ? (info) => revenueReporter.reportCost(info) : void 0);
-  const effectiveOnPaidJobDeath = opts.onPaidJobDeath ?? (revenueReporter ? (info) => revenueReporter.reportPaidJobDeath(info) : void 0);
-  const effectiveOnRevenueSkippedNoRail = opts.onRevenueSkippedNoRail ?? (revenueReporter ? (info) => revenueReporter.reportRevenueSkippedNoRail(info) : void 0);
-  const enqueueCreditDeposit = !opts.onCreditFunded && revenueReporter ? revenueReporter.enqueueDeposit.bind(revenueReporter) : void 0;
-  const enqueueCreditDrain = revenueReporter ? revenueReporter.enqueueCreditDrain.bind(revenueReporter) : void 0;
-  const enqueueCreditDrawRelease = revenueReporter ? revenueReporter.enqueueCreditDrawRelease.bind(revenueReporter) : void 0;
-  const unsubscribeTempoSettlementReadiness = opts.tempoSettlementReadiness?.subscribe({
-    onBalance: (observation) => revenueReporter && dvmId ? revenueReporter.reportTempoSettlementBalance({
-      dvmId,
-      address: observation.address,
-      network: observation.network,
-      token: observation.token,
-      balanceMicro: observation.balanceMicro.toString(),
-      lowBalanceMicro: observation.lowBalanceMicro.toString(),
-      checkedAt: observation.checkedAt,
-      ready: observation.ready
-    }) : void 0,
-    onFailure: (observation) => revenueReporter && dvmId ? revenueReporter.reportTempoSettlementFailure({
-      dvmId,
-      address: observation.address,
-      network: observation.network,
-      token: observation.token,
-      operation: observation.operation,
-      errorClass: observation.errorClass,
-      checkedAt: observation.checkedAt,
-      ...observation.balanceMicro !== void 0 ? { balanceMicro: observation.balanceMicro.toString() } : {},
-      ...observation.channelId ? { channelId: observation.channelId } : {},
-      ...observation.creditId ? { creditId: observation.creditId } : {},
-      ...observation.drainId ? { drainId: observation.drainId } : {}
-    }) : void 0
-  });
-  opts.tempoSettlementReadiness?.start();
-  const creditLedger = opts.creditLedger ?? new MemoryCreditLedger();
-  if (revenueReporter && dvmId) {
-    creditLedger.useCreditExpiryReleaseOutbox?.({
-      dvmId,
-      enqueue: revenueReporter.enqueueCreditExpiryRelease.bind(revenueReporter)
+    const activeRevenueReporter = revenueReporter;
+    const effectiveOnJobCompleted = opts.onJobCompleted ?? (activeRevenueReporter ? (info) => activeRevenueReporter.report(info) : void 0);
+    const effectiveOnJobCost = opts.onJobCost ?? (activeRevenueReporter ? (info) => activeRevenueReporter.reportCost(info) : void 0);
+    const effectiveOnPaidJobDeath = opts.onPaidJobDeath ?? (activeRevenueReporter ? (info) => activeRevenueReporter.reportPaidJobDeath(info) : void 0);
+    const effectiveOnRevenueSkippedNoRail = opts.onRevenueSkippedNoRail ?? (activeRevenueReporter ? (info) => activeRevenueReporter.reportRevenueSkippedNoRail(info) : void 0);
+    const enqueueCreditDeposit = !opts.onCreditFunded && activeRevenueReporter ? activeRevenueReporter.enqueueDeposit.bind(activeRevenueReporter) : void 0;
+    const enqueueCreditDrain = activeRevenueReporter ? activeRevenueReporter.enqueueCreditDrain.bind(activeRevenueReporter) : void 0;
+    const enqueueCreditDrawRelease = activeRevenueReporter ? activeRevenueReporter.enqueueCreditDrawRelease.bind(activeRevenueReporter) : void 0;
+    unsubscribeTempoSettlementReadiness = opts.tempoSettlementReadiness?.subscribe({
+      onBalance: (observation) => activeRevenueReporter && dvmId ? activeRevenueReporter.reportTempoSettlementBalance({
+        dvmId,
+        address: observation.address,
+        network: observation.network,
+        token: observation.token,
+        balanceMicro: observation.balanceMicro.toString(),
+        lowBalanceMicro: observation.lowBalanceMicro.toString(),
+        checkedAt: observation.checkedAt,
+        ready: observation.ready
+      }) : void 0,
+      onFailure: (observation) => activeRevenueReporter && dvmId ? activeRevenueReporter.reportTempoSettlementFailure({
+        dvmId,
+        address: observation.address,
+        network: observation.network,
+        token: observation.token,
+        operation: observation.operation,
+        errorClass: observation.errorClass,
+        checkedAt: observation.checkedAt,
+        ...observation.balanceMicro !== void 0 ? { balanceMicro: observation.balanceMicro.toString() } : {},
+        ...observation.channelId ? { channelId: observation.channelId } : {},
+        ...observation.creditId ? { creditId: observation.creditId } : {},
+        ...observation.drainId ? { drainId: observation.drainId } : {}
+      }) : void 0
     });
-  }
-  const creditExpirySweep = startCreditExpirySweep(creditLedger, opts.creditExpirySweep);
-  const processedPayments = opts.processedPayments ?? new MemoryProcessedPaymentStore();
-  const bootX402Support = opts.x402 ? opts.x402FacilitatorHealth?.support() ?? configuredX402FacilitatorSupport(opts.x402) : void 0;
-  const x402Config = opts.x402;
-  const x402BatchConfig = x402Config?.batchSettlement;
-  const selfRelayEnabled = !!x402BatchConfig?.selfRelay;
-  const effectiveX402BatchConfig = x402BatchConfig?.selfRelay ? {
-    ...x402BatchConfig,
-    selfRelay: {
-      ...x402BatchConfig.selfRelay,
-      onBalance: async (observation) => {
-        if (revenueReporter && dvmId) {
-          await revenueReporter.reportX402SelfRelayGasBalance({
-            dvmId,
-            address: observation.address,
-            network: observation.network,
-            balanceWei: observation.balanceWei.toString(),
-            lowBalanceWei: observation.lowBalanceWei.toString(),
-            checkedAt: observation.checkedAt
-          });
-        }
-        await x402BatchConfig.selfRelay?.onBalance?.(observation);
-      },
-      onRpcHealth: async (observation) => {
-        if (revenueReporter && dvmId) {
-          await revenueReporter.reportX402SelfRelayRpcHealth({
-            dvmId,
-            ...observation
-          });
-        }
-        await x402BatchConfig.selfRelay?.onRpcHealth?.(observation);
-      }
-    }
-  } : x402BatchConfig;
-  const x402ChannelStorage = opts.db && x402Config && effectiveX402BatchConfig && !effectiveX402BatchConfig.storage ? new PostgresX402ChannelStorage(opts.db, {
-    terminalizeUnbackedCredit: (evidence, tx) => creditLedger.terminalizeX402Credit(evidence, tx)
-  }) : void 0;
-  if (x402ChannelStorage) {
-    await x402ChannelStorage.init();
-    creditLedger.useX402SettlementGate?.(x402ChannelStorage);
-  }
-  const x402BatchSettlementFactory = x402Config && effectiveX402BatchConfig ? () => createX402BatchSettlementServer({
-    channelStorage: x402ChannelStorage,
-    network: x402Config.network,
-    payTo: x402Config.payTo,
-    facilitator: x402Config.facilitator,
-    ...x402Config.facilitatorAuth ? { facilitatorAuth: x402Config.facilitatorAuth } : {},
-    config: effectiveX402BatchConfig,
-    db: opts.db,
-    allowInMemory: opts.devMode,
-    earnedNative: (channelId) => creditLedger.earnedNativeForX402Channel(channelId),
-    supportedResponse: selfRelayEnabled ? void 0 : opts.x402FacilitatorHealth?.supportedResponse?.(),
-    payout: payoutReporter?.x402Observer()
-  }) : void 0;
-  const x402BatchSettlement = x402BatchSettlementFactory && (bootX402Support?.batchSettlement || selfRelayEnabled) ? await x402BatchSettlementFactory() : void 0;
-  const x402ExactStore = x402Config && opts.db && typeof opts.db.connect === "function" ? new PostgresX402ExactSettlementStore(opts.db) : void 0;
-  await x402ExactStore?.init();
-  const x402ExactEvidence = x402Config && x402ExactStore ? await createX402SettlementEvidenceReader({
-    network: x402Config.network,
-    ...x402BatchConfig?.rpcUrl ? { rpcUrl: x402BatchConfig.rpcUrl } : {}
-  }) : void 0;
-  const x402ExactSettlement = x402Config && x402ExactStore ? new X402ExactSettlementServer({
-    store: x402ExactStore,
-    evidence: x402ExactEvidence,
-    repair: async (effect, receipt, tx) => {
-      if (!receipt.txHash) throw new Error("settled exact x402 intent has no transaction");
-      await repairX402ExactSettlementEffect({
-        effect,
-        paymentId: receipt.txHash,
-        ledger: creditLedger,
-        processedPayments,
-        enqueueCreditDeposit,
-        tx
+    opts.tempoSettlementReadiness?.start();
+    const creditLedger = opts.creditLedger ?? new MemoryCreditLedger();
+    if (activeRevenueReporter && dvmId) {
+      creditLedger.useCreditExpiryReleaseOutbox?.({
+        dvmId,
+        enqueue: activeRevenueReporter.enqueueCreditExpiryRelease.bind(activeRevenueReporter)
       });
     }
-  }) : void 0;
-  const server = new DVMServer(descriptor, {
-    ...opts,
-    creditLedger,
-    processedPayments,
-    onJobCompleted: effectiveOnJobCompleted,
-    onJobCost: effectiveOnJobCost,
-    onPaidJobDeath: effectiveOnPaidJobDeath,
-    onRevenueSkippedNoRail: effectiveOnRevenueSkippedNoRail,
-    onCreditFunded: opts.onCreditFunded,
-    enqueueCreditDeposit,
-    enqueueCreditDrain,
-    enqueueCreditDrawRelease,
-    x402BatchSettlement,
-    x402BatchSettlementFactory,
-    x402ExactSettlement,
-    payoutReporter
-  });
-  await server.jobManager.recoverTerminalCosts();
-  return {
-    app: server.app,
-    authAudience: server.authAudience,
-    shutdown() {
-      const settlementStopped = server.shutdown();
-      payoutReporter?.stop();
-      revenueReporter?.stop();
-      creditExpirySweep?.stop();
-      unsubscribeTempoSettlementReadiness?.();
-      if (x402ChannelStorage) {
-        void settlementStopped.then(() => x402ChannelStorage.close()).catch(() => void 0);
+    creditExpirySweep = startCreditExpirySweep(creditLedger, opts.creditExpirySweep);
+    const processedPayments = opts.processedPayments ?? new MemoryProcessedPaymentStore();
+    const bootX402Support = opts.x402 ? opts.x402FacilitatorHealth?.support() ?? configuredX402FacilitatorSupport(opts.x402) : void 0;
+    const x402Config = opts.x402;
+    const x402BatchConfig = x402Config?.batchSettlement;
+    const selfRelayEnabled = !!x402BatchConfig?.selfRelay;
+    const effectiveX402BatchConfig = x402BatchConfig?.selfRelay ? {
+      ...x402BatchConfig,
+      selfRelay: {
+        ...x402BatchConfig.selfRelay,
+        onBalance: async (observation) => {
+          if (activeRevenueReporter && dvmId) {
+            await activeRevenueReporter.reportX402SelfRelayGasBalance({
+              dvmId,
+              address: observation.address,
+              network: observation.network,
+              balanceWei: observation.balanceWei.toString(),
+              lowBalanceWei: observation.lowBalanceWei.toString(),
+              checkedAt: observation.checkedAt
+            });
+          }
+          await x402BatchConfig.selfRelay?.onBalance?.(observation);
+        },
+        onRpcHealth: async (observation) => {
+          if (activeRevenueReporter && dvmId) {
+            await activeRevenueReporter.reportX402SelfRelayRpcHealth({
+              dvmId,
+              ...observation
+            });
+          }
+          await x402BatchConfig.selfRelay?.onRpcHealth?.(observation);
+        }
       }
-    },
-    jobManager: server.jobManager,
-    revenueReporterActive: !!revenueReporter,
-    payoutReporter
-  };
+    } : x402BatchConfig;
+    x402ChannelStorage = opts.db && x402Config && effectiveX402BatchConfig && !effectiveX402BatchConfig.storage ? new PostgresX402ChannelStorage(opts.db, {
+      terminalizeUnbackedCredit: (evidence, tx) => creditLedger.terminalizeX402Credit(evidence, tx)
+    }) : void 0;
+    if (x402ChannelStorage) {
+      await x402ChannelStorage.init();
+      creditLedger.useX402SettlementGate?.(x402ChannelStorage);
+    }
+    const x402BatchSettlementFactory = x402Config && effectiveX402BatchConfig ? () => createX402BatchSettlementServer({
+      channelStorage: x402ChannelStorage,
+      network: x402Config.network,
+      payTo: x402Config.payTo,
+      facilitator: x402Config.facilitator,
+      ...x402Config.facilitatorAuth ? { facilitatorAuth: x402Config.facilitatorAuth } : {},
+      config: effectiveX402BatchConfig,
+      db: opts.db,
+      allowInMemory: opts.devMode,
+      earnedNative: (channelId) => creditLedger.earnedNativeForX402Channel(channelId),
+      supportedResponse: selfRelayEnabled ? void 0 : opts.x402FacilitatorHealth?.supportedResponse?.(),
+      payout: payoutReporter?.x402Observer()
+    }) : void 0;
+    x402BatchSettlement = x402BatchSettlementFactory && (bootX402Support?.batchSettlement || selfRelayEnabled) ? await x402BatchSettlementFactory() : void 0;
+    const x402ExactStore = x402Config && opts.db && typeof opts.db.connect === "function" ? new PostgresX402ExactSettlementStore(opts.db) : void 0;
+    await x402ExactStore?.init();
+    const x402ExactEvidence = x402Config && x402ExactStore ? await createX402SettlementEvidenceReader({
+      network: x402Config.network,
+      ...x402BatchConfig?.rpcUrl ? { rpcUrl: x402BatchConfig.rpcUrl } : {}
+    }) : void 0;
+    const x402ExactSettlement = x402Config && x402ExactStore ? new X402ExactSettlementServer({
+      store: x402ExactStore,
+      evidence: x402ExactEvidence,
+      repair: async (effect, receipt, tx) => {
+        if (!receipt.txHash) throw new Error("settled exact x402 intent has no transaction");
+        await repairX402ExactSettlementEffect({
+          effect,
+          paymentId: receipt.txHash,
+          ledger: creditLedger,
+          processedPayments,
+          enqueueCreditDeposit,
+          tx
+        });
+      }
+    }) : void 0;
+    server = new DVMServer(descriptor, {
+      ...opts,
+      creditLedger,
+      processedPayments,
+      onJobCompleted: effectiveOnJobCompleted,
+      onJobCost: effectiveOnJobCost,
+      onPaidJobDeath: effectiveOnPaidJobDeath,
+      onRevenueSkippedNoRail: effectiveOnRevenueSkippedNoRail,
+      onCreditFunded: opts.onCreditFunded,
+      enqueueCreditDeposit,
+      enqueueCreditDrain,
+      enqueueCreditDrawRelease,
+      x402BatchSettlement,
+      x402BatchSettlementFactory,
+      x402ExactSettlement,
+      payoutReporter
+    });
+    await server.jobManager.recoverTerminalCosts();
+    return {
+      app: server.app,
+      authAudience: server.authAudience,
+      shutdown,
+      jobManager: server.jobManager,
+      revenueReporterActive: !!activeRevenueReporter,
+      payoutReporter
+    };
+  } catch (initializationError) {
+    await shutdown().catch(() => void 0);
+    throw initializationError;
+  }
 }
 function unknownRouteNotFound(c) {
   c.set("unknownRoute", true);
@@ -16865,7 +16967,6 @@ var DVMServer = class {
       this.ownsMintHealthTracker = false;
     } else if (opts.mints && opts.mints.length > 0) {
       this.mintHealthTracker = new MintHealthTracker({ mints: opts.mints });
-      this.mintHealthTracker.start();
       this.ownsMintHealthTracker = true;
     } else {
       this.ownsMintHealthTracker = false;
@@ -16878,12 +16979,6 @@ var DVMServer = class {
     this.creditLedger = opts.creditLedger ?? new MemoryCreditLedger();
     this.opts.mpp?.useTempoCreditLedger?.(this.creditLedger);
     this.processedPayments = opts.processedPayments ?? new MemoryProcessedPaymentStore();
-    if (this.opts.tempoObserverHealth?.declareSessionCapability) {
-      this.undeclareSessionCapability = this.opts.tempoObserverHealth.declareSessionCapability(
-        () => this.tempoSessionCapability()
-      );
-      void this.opts.tempoObserverHealth.refresh?.();
-    }
     this.jobManager = new JobManager(descriptor, {
       receiptIssuer: this.receiptIssuer,
       creditLedger: this.creditLedger,
@@ -16912,6 +17007,7 @@ var DVMServer = class {
       mpp: opts.mpp,
       cashuMode: opts.cashuMode,
       lockPubkey: opts.lockPubkey,
+      disposableCashu: opts.disposableCashu,
       db: opts.db,
       dvmId: opts.dvmId,
       authAudience: this.authAudience,
@@ -16928,6 +17024,8 @@ var DVMServer = class {
       pricingCurrency: this.pricingCurrency,
       onCreditFunded: opts.onCreditFunded,
       onJobCompleted: opts.onJobCompleted,
+      onPaidJobCompleted: opts.onPaidJobCompleted,
+      paymentMode: opts.paymentMode,
       onJobCost: opts.onJobCost,
       onPaidJobDeath: opts.onPaidJobDeath,
       onRevenueSkippedNoRail: opts.onRevenueSkippedNoRail,
@@ -16936,19 +17034,44 @@ var DVMServer = class {
       reactivationClaimGraceMs: opts.reactivationClaimGraceMs
     });
     this.app = new Hono();
-    this.registerRoutes();
+    try {
+      this.registerRoutes();
+      if (this.ownsMintHealthTracker) this.mintHealthTracker?.start();
+      if (this.opts.tempoObserverHealth?.declareSessionCapability) {
+        this.undeclareSessionCapability = this.opts.tempoObserverHealth.declareSessionCapability(
+          () => this.tempoSessionCapability()
+        );
+        void this.opts.tempoObserverHealth.refresh?.();
+      }
+    } catch (error) {
+      try {
+        this.jobManager.shutdown();
+      } catch {
+      }
+      try {
+        if (this.ownsMintHealthTracker) this.mintHealthTracker?.stop();
+      } catch {
+      }
+      try {
+        this.undeclareSessionCapability?.();
+      } catch {
+      }
+      this.undeclareSessionCapability = void 0;
+      throw error;
+    }
   }
   /**
    * Tear down this mount. Every leg is synchronous except the batch-settlement
    * server's own `stop()`; the returned promise settles once that has finished,
    * so a caller holding a resource behind it — the settlement pool the spend
    * gate's store owns (internal-review) — can sequence its close instead of pulling it
-   * out from under an in-flight stop. It never rejects, so ignoring it is safe.
+   * out from under an in-flight stop. A rejection remains observable so the app
+   * and host teardown layers can finish later cleanup before surfacing it.
    */
   shutdown() {
     this.jobManager.shutdown();
     const settlement = this.x402BatchSettlementInit ?? Promise.resolve(this.x402BatchSettlement);
-    const stopped = settlement.then((s) => s?.stop()).catch(() => void 0);
+    const stopped = settlement.then((s) => s?.stop());
     if (this.ownsMintHealthTracker) this.mintHealthTracker?.stop();
     this.undeclareSessionCapability?.();
     this.undeclareSessionCapability = void 0;
@@ -17145,6 +17268,7 @@ var DVMServer = class {
    * `cashu_not_p2pk_locked`).
    */
   async resolveLockPubkeysForReceive() {
+    if (this.opts.disposableCashu && this.opts.lockPubkey) return [toLockPubkey(this.opts.lockPubkey)];
     if (this.opts.cashuMode !== "p2pk-accumulator" || !this.opts.db || !this.opts.dvmId || !this.opts.lockPubkey) {
       return void 0;
     }
@@ -17463,7 +17587,7 @@ var DVMServer = class {
   defaultPaymentMethods() {
     const methods = [];
     if (this.opts.mints?.length) {
-      const accumulatorReady = this.opts.cashuMode === "p2pk-accumulator" && !!this.opts.lockPubkey && !!this.opts.db;
+      const accumulatorReady = this.opts.cashuMode === "p2pk-accumulator" && !!this.opts.lockPubkey && (!!this.opts.db || !!this.opts.disposableCashu);
       if (accumulatorReady) methods.push("cashu");
     }
     if (this.opts.x402 && this.x402CurrencySupported()) methods.push("x402");
@@ -17648,7 +17772,7 @@ var DVMServer = class {
     const authHeader = c.req.header("Authorization");
     const { Credential } = await import("mppx");
     const mppCredential = authHeader ? Credential.extractPaymentScheme(authHeader) ?? void 0 : void 0;
-    let lockPubkeys;
+    let lockPubkeys = this.opts.disposableCashu && this.opts.lockPubkey ? [toLockPubkey(this.opts.lockPubkey)] : void 0;
     if (this.opts.cashuMode === "p2pk-accumulator" && this.opts.db && this.opts.dvmId && this.opts.lockPubkey) {
       const active = await this.lockPubkeyStateForRead(this.opts.db, this.opts.dvmId);
       lockPubkeys = activePubkeySet(active);
@@ -17682,6 +17806,7 @@ var DVMServer = class {
       consumedCredentialStore: this.consumedCredentialStore,
       cashuMode: this.opts.cashuMode,
       accumulatorDb: this.opts.cashuMode === "p2pk-accumulator" ? this.opts.db : void 0,
+      disposableCashu: this.opts.disposableCashu,
       dvmId: this.opts.dvmId,
       lockPubkeys,
       requestId: c.req.header("X-Cashu-Request-Id"),
@@ -17868,6 +17993,7 @@ var DVMServer = class {
         ...this.opts.mpp.tempoConfiguration && {
           recipient: this.opts.mpp.tempoConfiguration.recipient,
           payment_token: this.opts.mpp.tempoConfiguration.paymentToken,
+          chain_id: this.opts.mpp.tempoConfiguration.chainId,
           ...this.opts.mpp.tempoConfiguration.operator && {
             operator: this.opts.mpp.tempoConfiguration.operator
           },
@@ -19846,6 +19972,7 @@ export {
   pruneRetired,
   DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,
   activePubkeySet,
+  AccumulatorReplayError,
   initWalletAccumulatorTable,
   insertAccumulatorRows,
   clearAccumulatorForDvm,