@dvmkit/sdk 0.1.5-rc.9 → 0.2.1-rc.9

package/dist/internal/server.js

@@ -1,18 +1,18 @@
 import {
   PostgresTempoSessionStore
-} from "../chunk-UP2F5RRT.js";
+} from "../chunk-D7YQYLLM.js";
 import {
   verifyX402Payment
-} from "../chunk-BIFLRKMO.js";
+} from "../chunk-2KGG5ORW.js";
 import {
   RevenueReporter
-} from "../chunk-EVBK675R.js";
+} from "../chunk-VA7GT6C6.js";
 import {
   PayoutReporter
-} from "../chunk-6BQM7TOW.js";
+} from "../chunk-XMDQOXHO.js";
 import {
   PostgresTempoChargeStore
-} from "../chunk-JZWELPFH.js";
+} from "../chunk-N5B66UOS.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,
@@ -65,13 +65,13 @@ import {
   verifyUpfrontPayment,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-5PBOA25N.js";
-import "../chunk-DMNLFNTW.js";
+} from "../chunk-JNKQZVZX.js";
+import "../chunk-XRLKGCAW.js";
 import {
   settleWithFacilitator,
   verifyWithFacilitator
 } from "../chunk-BQ2NMWKE.js";
-import "../chunk-KVEHHC7W.js";
+import "../chunk-U5VNEALI.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SIGNED_ENVELOPE_TYPES,
@@ -88,18 +88,18 @@ import {
   isYieldMessage,
   providerMessage,
   toJobRecord
-} from "../chunk-U6M3ATSG.js";
+} from "../chunk-MD3H3BF7.js";
 import {
   toLockPubkey
-} from "../chunk-KXCKFIJI.js";
+} from "../chunk-QX52F6IB.js";
 import "../chunk-Z4BNLUZF.js";
-import "../chunk-5URG56JJ.js";
+import "../chunk-A4CM2BD3.js";
 import "../chunk-MKI6OVW4.js";
 import "../chunk-KXZUCCEY.js";
-import "../chunk-E4EVGPDX.js";
+import "../chunk-YO56VCTQ.js";
 import "../chunk-66HGCPBU.js";
 import "../chunk-FUJ36YDV.js";
-import "../chunk-27V2ILSR.js";
+import "../chunk-4A2RAKCW.js";
 import "../chunk-AT6V3SY7.js";
 import {
   NON_CHANNEL_BITCOIN_RAILS,
@@ -110,13 +110,13 @@ import {
   isNonChannelBitcoinRail,
   lotOwedSats,
   netOwedSats
-} from "../chunk-MLRCSJYX.js";
-import "../chunk-S3XAHZQY.js";
+} from "../chunk-2D75MNNG.js";
+import "../chunk-COYKJRMM.js";
 import "../chunk-C3MTFLC6.js";
 import {
   _testing,
   wrapMppx
-} from "../chunk-M7LHFJ5K.js";
+} from "../chunk-XZ7LW4S5.js";
 export {
   DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,
   JobCancelledError,

package/dist/{job-store-BUGqvCfL.d.ts → job-store-D3CcZp_g.d.ts}

@@ -1,14 +1,12 @@
 import { ProofLike } from '@cashu/cashu-ts';
-import { a1 as Message, ah as FundingMethod, X as FundingReceipt, bO as CreditSnapshot, Y as JobReceipt, ax as StepRecord, a2 as MessageType } from './step-cache-5dljDqrQ.js';
+import { a1 as Message, ah as FundingMethod, X as FundingReceipt, bO as CreditSnapshot, Y as JobReceipt, ax as StepRecord, a2 as MessageType } from './step-cache-v2yhyhSZ.js';
 
-/** Job status values that can be persisted. */
 type JobStatus = "processing" | "completed" | "failed" | "awaiting-input" | "cancelled" | "working";
-/** Serializable snapshot of a job's persistent state. */
 interface JobRecord {
     id: string;
     tags: string[];
     /**
-     * Capability name this job dispatches to (internal-review). Populated from the
+     * Capability name this job dispatches to. Populated from the
      * `POST /v1/job` body's `capability` field at submission time; persisted
      * so reactivation on another machine routes to the same handler.
      */
@@ -18,7 +16,7 @@ interface JobRecord {
     requesterId: string;
     /**
      * SHA-256 hex of the per-job opaque token issued at creation time for
-     * anonymous requesters (internal-review). When set, all `/v1/job/:id/*` reads/writes
+     * anonymous requesters. When set, all `/v1/job/:id/*` reads/writes
      * gate on the caller presenting the matching `X-Job-Token` header — this is
      * the mechanism that prevents cross-caller transcript leaks for free DVMs
      * where every caller otherwise resolves to `requesterId === "anonymous"`.
@@ -27,7 +25,7 @@ interface JobRecord {
      */
     requesterTokenHash?: string;
     /**
-     * The `job_token` itself, in the clear (internal-review). Kept so a caller whose
+     * The `job_token` itself, in the clear. Kept so a caller whose
      * paid submit timed out can replay it and be handed back the very token the
      * lost response carried — the alternative (minting a fresh one) would be
      * rejected by whichever machine is still running the job, since its
@@ -41,14 +39,14 @@ interface JobRecord {
      */
     requesterToken?: string;
     /**
-     * Fingerprint of the submission that created this job (internal-review) — see
+     * Fingerprint of the submission that created this job — see
      * `requestFingerprint`. The replay gate: a retried paid submit is handed the
      * original job only when it reproduces this.
      */
     requestFingerprint?: string;
     /**
      * secp256k1 x-only pubkey of the caller that signed the submission, on
-     * DVMs with descriptor-level auth (internal-review). Second half of the replay
+     * DVMs with descriptor-level auth. Second half of the replay
      * gate — the signature envelope is re-minted on every resume attempt, so
      * the identity behind it is pinned here instead.
      */
@@ -58,32 +56,44 @@ interface JobRecord {
     /** HTTP path whose live auth gate accepted the persisted caller proof. */
     authRequestPath?: string;
     status: JobStatus;
+    /** False on jobs accepted before complete lifecycle timing was available. */
+    timingKnown?: boolean;
+    /** SDK terminal attribution; never accepted from a handler. */
+    endedBy?: "caller" | "provider";
+    /** Unix ms when the terminal status committed; immutable afterwards. */
+    terminalAtMs?: number;
+    /** Accumulated awaiting-input time, excluding the currently open stretch. */
+    callerWaitMs?: number;
+    /** Unix ms at which the current awaiting-input stretch began. */
+    awaitingInputAtMs?: number;
     summary?: string;
     messages: Message[];
     seq: number;
     paidMsats: number;
     paymentMint?: string;
-    /** Rail of the most recent successful credit (cashu / x402 / mpp). */
+    /** Rail of the most recent successful credit (cashu / x402 / tempo). */
     paymentRail?: FundingMethod;
     /**
      * Settlement reference threaded into the platform revenue ledger
      * (`revenue_events.tx_hash`). EVM tx hash for x402, mppx `challenge.id`
-     * for mpp (internal-review); cashu accumulator path sets this to the
-     * `X-Cashu-Request-Id` UUID (internal-review). Persisted so it survives durable
+     * for mpp; cashu accumulator path sets this to the
+     * `X-Cashu-Request-Id` UUID. Persisted so it survives durable
      * replay.
      */
     paymentTxHash?: string;
     /** Chain transaction returned to callers recovering x402 or Tempo acceptance. */
     paymentTransactionHash?: string;
-    /** Rail-native upfront amount (sats / USDC microunits). internal-review. */
+    /**
+     * Accumulated same-rail stablecoin micro-units for Tempo/x402; resets when the rail changes.
+     * Cashu revenue uses paidMsats.
+     */
     nativeAmount?: number;
-    /** Native asset tag — paired with `nativeAmount`. internal-review. */
+    /** Native asset tag paired with `nativeAmount`. */
     nativeAsset?: "sats" | "usdc" | "usdc.e" | "usd-cents";
-    /** Cashu flow discriminator written into `revenue_events.metadata.cashu_flow` (internal-review). */
     cashuFlow?: "p2pk_accumulator";
     /**
      * What this job cost the **builder** to serve, in 1e-6 of
-     * {@link JobRecord.costCurrency} (internal-review). Mirror of
+     * {@link JobRecord.costCurrency}. Mirror of
      * `ServerJob.costAmountMicro`; see that field. Absent means unreported,
      * which the platform treats differently from a declared zero.
      */
@@ -97,12 +107,12 @@ interface JobRecord {
      */
     costRevision?: number;
     /**
-     * Credit the upfront payment funded/drew (internal-review). The terminal funnel
+     * Credit the upfront payment funded/drew. The terminal funnel
      * settles the draw on success and releases it on failure/cancel, and the
      * receipt countersigns the `ReceiptCredit` block from it.
      */
     creditId?: string;
-    /** The draw placed for this job on `creditId` (internal-review). */
+    /** The draw placed for this job on `creditId`. */
     drawId?: string;
     /** Funding-time evidence returned on explicit fund-and-draw submissions. */
     fundingReceipt?: FundingReceipt;
@@ -110,11 +120,11 @@ interface JobRecord {
     receivedProofs: ProofLike[];
     pendingPaymentMsats?: number;
     /**
-     * Per-job MPP credential binding (internal-review). Challenge ids issued in the
+     * Per-job MPP credential binding. Challenge ids issued in the
      * most-recent `requestPayment` yield; the SDK rejects mid-job credentials
      * whose `challenge.id` isn't in this set.
      *
-     * Keeps its `mpp` spelling past internal-review's rail rename (internal-review). The ids
+     * Keeps its `mpp` spelling past rail rename. The ids
      * are mppx challenge ids — objects of the MPP envelope the Tempo rail rides,
      * which is not itself a rail — and this is server-internal anti-replay state
      * that is never serialised to a caller. It persists as
@@ -122,7 +132,7 @@ interface JobRecord {
      */
     pendingMppChallengeIds?: string[];
     /**
-     * Per-job x402 credential binding (internal-review). 0x-prefixed 32-byte hex nonce
+     * Per-job x402 credential binding. 0x-prefixed 32-byte hex nonce
      * issued in the most-recent `requestPayment` yield; the SDK rejects mid-job
      * x402 payments whose decoded `authorization.nonce` differs from this value.
      */
@@ -135,7 +145,7 @@ interface JobRecord {
     pendingX402AmountUsdcMicro?: string;
     /**
      * The outstanding `requestPayment` ask denominated in fiat micro-units, pinned
-     * when the payment-request was emitted (internal-review) — the mid-job analogue of
+     * when the payment-request was emitted — the mid-job analogue of
      * `resolvePriceFiat` pinning the quote. The ledger is fiat-denominated, so the
      * top-up's `fund` + `growDraw` need a figure that doesn't move with the BTC/USD
      * rate between the ask and the payment. Absent when the ask couldn't be priced
@@ -146,7 +156,7 @@ interface JobRecord {
     pendingPaymentFiatCurrency?: string;
     /**
      * What this job has **cumulatively** asked for mid-job, in fiat micro-units
-     * of {@link askedTopUpCurrency} (internal-review) — the ceiling `growDraw` caps the
+     * of {@link askedTopUpCurrency} — the ceiling `growDraw` caps the
      * job's draw growth at. Monotonic: written by the same Tx A that emits each
      * payment-request, and never decremented, which is exactly what
      * `pendingPaymentFiatMicro` is not (Tx C drains it as payments land). A cap
@@ -154,7 +164,7 @@ interface JobRecord {
      * in the window before Tx C see a full ask that the winner had already
      * bought.
      *
-     * `-1` is a sticky "not expressible" sentinel — after internal-review the one door
+     * `-1` is a sticky "not expressible" sentinel — after the one door
      * left to it is an ask the rate provider was down for. Undefined means no
      * mid-job ask has been recorded (including a row written before this
      * existed). Either way the cap is skipped and growth is unbounded, as it was
@@ -163,13 +173,13 @@ interface JobRecord {
     askedTopUpMicro?: number;
     /**
      * Currency of {@link askedTopUpMicro} (lowercase ISO-4217) — and, from
-     * internal-review, the job's own ask denomination: first-write-wins, and read back
+     * the job's own ask denomination: first-write-wins, and read back
      * by `ctx.requestPayment` so every later ask pins in it too. That is what
      * makes a mid-job currency switch unexpressible rather than merely unlikely.
      */
     askedTopUpCurrency?: string;
     /**
-     * Why this job's draw growth is **not** capped, when it isn't (internal-review) —
+     * Why this job's draw growth is **not** capped, when it isn't —
      * the durable half of the `-1` sentinel, so an operator can list the affected
      * jobs after the fact rather than reconstruct them from log lines. Sticky
      * first-writer-wins, like the sentinel itself. Null on every job whose ceiling
@@ -179,7 +189,7 @@ interface JobRecord {
     /** Price the job was charged at (msats). Used to detect overpayment for change/melt gating. */
     requiredMsats?: number;
     /**
-     * The DVM-signed proof of this job's outcome (internal-review). Written once at the
+     * The DVM-signed proof of this job's outcome. Written once at the
      * terminal transition via `saveReceipt` and never rewritten — `save` leaves
      * the column alone so a stale in-memory snapshot can't clear it. Absent on
      * non-terminal jobs, and on every job when the DVM has no receipt key wired.
@@ -194,8 +204,8 @@ interface JobRecord {
 }
 /**
  * Counter snapshot used by the NOTIFY-driven resolver and the
- * `verifyAndCredit` flow (internal-review). Carries just the handler-visible state
- * needed to decide whether a pending payment yield can resolve, plus (internal-review)
+ * `verifyAndCredit` flow. Carries just the handler-visible state
+ * needed to decide whether a pending payment yield can resolve, plus
  * the terminal reason so a machine adopting another machine's cancel can hand
  * the caller's own words to `ctx.signal.reason` and the `onCancel` hook.
  */
@@ -211,7 +221,7 @@ interface JobCounters {
     summary?: string;
 }
 /**
- * Credit delta written inside the Tx C transaction (internal-review) when an
+ * Credit delta written inside the Tx C transaction when an
  * inbound payment verifies. Fields mirror what the rails produce in
  * `payment.ts`; `paidMsatsDelta` is the only required key.
  */
@@ -230,7 +240,7 @@ interface PaymentCreditDelta {
     /** Clear the pending nonce + advertised amount after an x402 credit succeeds. */
     clearPendingX402Binding?: boolean;
     /**
-     * Credit this payment funded (internal-review). Only ever set when the mid-job
+     * Credit this payment funded. Only ever set when the mid-job
      * top-up minted a *fresh* implicit credit — a free-then-paid job whose
      * upfront leg placed no draw. Written set-if-null: a job already bound to a
      * credit keeps that binding, because the top-up grew its existing draw
@@ -242,12 +252,14 @@ interface PaymentCreditDelta {
 }
 /** Atomic side effects applied with an outgoing provider message. */
 interface AppendOutgoingOptions {
+    /** A suspending SDK prompt/payment yield; event-driven messages leave status unchanged. */
+    awaitingInput?: boolean;
     pendingPaymentDelta?: number;
     pendingMppChallengeIds?: string[];
     pendingX402Nonce?: string;
     pendingX402AmountUsdcMicro?: string;
     /**
-     * Fiat envelope pinned for this ask (internal-review). Accumulates alongside
+     * Fiat envelope pinned for this ask. Accumulates alongside
      * `pendingPaymentDelta` when the currency matches what's already recorded,
      * and replaces it when it doesn't — the same shape `pending_payment_msats`
      * uses, so stacked asks stay summable.
@@ -256,16 +268,16 @@ interface AppendOutgoingOptions {
     pendingPaymentFiatCurrency?: string;
 }
 /**
- * Why a job's cumulative ask total can't bound its draw growth (internal-review).
+ * Why a job's cumulative ask total can't bound its draw growth.
  *
  * - `ask_unpriceable` — an ask the rate provider was down for, or one whose
- *   fiat figure isn't a safe integer. The only door left after internal-review, and
- *   deliberately still open: failing the charge to protect a ledger comparison
- *   would break a payment that doesn't need the rate to be quoted or collected.
+ * fiat figure isn't a safe integer. The only door left after and
+ * deliberately still open: failing the charge to protect a ledger comparison
+ * would break a payment that doesn't need the rate to be quoted or collected.
  * - `ask_currency_switch` — two asks on one job in different denominations.
- *   Unreachable through `ctx.requestPayment`, which pins every ask in the job's
- *   own sticky denomination; kept as the backstop for a record written by an
- *   older build, and because the accumulator must not silently sum two units.
+ * Unreachable through `ctx.requestPayment`, which pins every ask in the job's
+ * own sticky denomination; kept as the backstop for a record written by an
+ * older build, and because the accumulator must not silently sum two units.
  */
 type TopUpCapUnenforcedReason = "ask_unpriceable" | "ask_currency_switch";
 /**
@@ -278,7 +290,7 @@ interface VerifyAndCreditResult {
     alreadyVerified: boolean;
     /**
      * The credit the job row holds **after** this call — the authoritative
-     * answer, read back rather than assumed (internal-review).
+     * answer, read back rather than assumed.
      *
      * {@link PaymentCreditDelta.creditId} is written set-if-null, so a caller
      * that passes one cannot know whether it won the bind: on a free-then-paid
@@ -313,12 +325,10 @@ interface RequestIdClaimResult {
     /** True when the durable identity binding existed before this lock acquisition. */
     replayed: boolean;
 }
-/** Persistent backing store for job records. */
 interface JobStore {
-    /** Retrieve a job record by ID. Returns undefined if not found. */
     get(id: string): Promise<JobRecord | undefined>;
     /**
-     * Retrieve the job a settlement reference paid for (internal-review). On the cashu
+     * Retrieve the job a settlement reference paid for. On the cashu
      * accumulator path `paymentTxHash` is the caller's `X-Cashu-Request-Id`, so
      * this is what makes a retried paid submit idempotent: the replay finds the
      * job its (already-spent) payment created instead of a bare 409.
@@ -345,9 +355,7 @@ interface JobStore {
      * durable caller/fingerprint/job binding remains retained.
      */
     releaseRequestIdClaim?(claim: RequestIdClaim): Promise<void>;
-    /** Upsert a job record. */
     save(record: JobRecord): Promise<void>;
-    /** Delete a job record. */
     delete(id: string): Promise<void>;
 }
 /** Total-order cursor for terminal job retention scans. */
@@ -356,7 +364,7 @@ interface JobRetentionCursor {
     id: string;
 }
 /**
- * JobStore extension for signed job receipts (internal-review). Implemented by both
+ * JobStore extension for signed job receipts. Implemented by both
  * container-tier stores (`MemoryJobStore`, `PostgresJobStore`); the isolate
  * tier's `IsolateJobStore` deliberately doesn't, which is what keeps the
  * out-of-scope isolate gap a compile-time fact rather than a runtime surprise.
@@ -385,24 +393,24 @@ interface ReceiptIssuingStore {
     saveReceipt(jobId: string, receipt: JobReceipt): Promise<JobReceipt | undefined>;
 }
 /**
- * JobStore extension for cross-machine message streaming + the internal-review
+ * JobStore extension for cross-machine message streaming + the
  * transactional model (Tx A / Tx B / Tx C).
  *
  * Tx A — outgoing message + immediate counter consequence (`appendOutgoing`).
- *   Single tx: server-allocate seq, append `job_messages` row with
- *   `status='verified'`, bump `pending_payment_msats` for payment-request
- *   messages, and `pg_notify`.
+ * Single tx: server-allocate seq, append `job_messages` row with
+ * `status='verified'`, bump `pending_payment_msats` for payment-request
+ * messages, and `pg_notify`.
  *
  * Tx B — incoming message marked `pending-verification` (`recordInbound`).
- *   Single tx: server-allocate seq, append `job_messages` row with
- *   `status='pending-verification'`, and `pg_notify`. External verification
- *   (Cashu mint, x402 facilitator, MPP server) runs OUTSIDE the tx.
+ * Single tx: server-allocate seq, append `job_messages` row with
+ * `status='pending-verification'`, and `pg_notify`. External verification
+ * (Cashu mint, x402 facilitator, MPP server) runs OUTSIDE the tx.
  *
  * Tx C — verification outcome + credit (`verifyAndCredit`). Single tx:
- *   flip the `job_messages.status` to `'verified'`, bump `paid_msats` /
- *   clear `pending_payment_msats` per the credit delta, and `pg_notify`.
- *   Idempotent — a repeat call returns `alreadyVerified: true` without
- *   re-crediting.
+ * flip the `job_messages.status` to `'verified'`, bump `paid_msats` /
+ * clear `pending_payment_msats` per the credit delta, and `pg_notify`.
+ * Idempotent — a repeat call returns `alreadyVerified: true` without
+ * re-crediting.
  */
 interface StreamableJobStore extends JobStore {
     /**
@@ -430,7 +438,7 @@ interface StreamableJobStore extends JobStore {
     verifyAndCredit(jobId: string, seq: number, credit: PaymentCreditDelta | null): Promise<VerifyAndCreditResult>;
     /**
      * Read back what Tx C committed for an inbound message, without opening a
-     * transaction of its own (internal-review).
+     * transaction of its own.
      *
      * A `verifyAndCredit` that throws is ambiguous: the error may have been
      * raised at or after its COMMIT, in which case the write is durable and the
@@ -454,7 +462,7 @@ interface StreamableJobStore extends JobStore {
     /** Read the counters used by the resolver (status / paid / pending). */
     getCounters(jobId: string): Promise<JobCounters | undefined>;
     /**
-     * Single-execution claim (internal-review). Atomically flip a job from
+     * Single-execution claim. Atomically flip a job from
      * `awaiting-input` to `processing`, returning `true` only for the caller
      * that won the transition. After a mid-job payment lands cross-machine, the
      * live original handler (woken via NOTIFY) and a reactivation replay on the
@@ -490,13 +498,13 @@ interface StreamableJobStore extends JobStore {
     /**
      * Subscribe to raw NOTIFY events for a job. Fires once per `pg_notify`
      * delivery; no message decoding. Used by `Context.requestPayment` to
-     * re-read counters when cross-machine credit lands (internal-review).
+     * re-read counters when cross-machine credit lands.
      */
     subscribeNotifications(jobId: string, onNotify: () => void): Promise<() => void>;
     /** Read messages from the `job_messages` table for a job. */
     getMessages(jobId: string, afterSeq: number): Promise<Message[]>;
     /**
-     * Find stale non-terminal jobs (internal-review / internal-review). Two status-aware
+     * Find stale non-terminal jobs. Two status-aware
      * cutoffs (both Unix ms): `processing`/`working` rows older than
      * `processingThresholdMs` (worker-liveness watchdog — the SDK heartbeats
      * live workers, so a frozen `last_activity_at` here means the worker died),
@@ -515,7 +523,7 @@ interface StreamableJobStore extends JobStore {
     /**
      * Atomically transition a stale job to `terminalStatus` (`failed` for a
      * dead worker, `cancelled` for an idle caller-wait) and append a final
-     * `cancel` message in the same transaction (internal-review / internal-review). The
+     * `cancel` message in the same transaction. The
      * `expectedActivityBefore` clause is an optimistic CAS — the flip only
      * lands when the job is still non-terminal AND `last_activity_at <=
      * expectedActivityBefore`. Returns true when this caller claimed the
@@ -525,8 +533,8 @@ interface StreamableJobStore extends JobStore {
      */
     cancelStaleJob(jobId: string, expectedActivityBefore: number, reason: string, terminalStatus: "failed" | "cancelled"): Promise<boolean>;
     /**
-     * Atomically cancel a job from a machine that isn't running its handler
-     * (internal-review). Same transaction shape as {@link cancelStaleJob} minus the
+     * Atomically cancel a job from a machine that isn't running its handler.
+     * Same transaction shape as {@link cancelStaleJob} minus the
      * activity cutoff — the CAS guards only on the job still being non-terminal,
      * so this replaces the read-then-`save` the DELETE route used to do (a TOCTOU
      * against a concurrent terminal write).
@@ -541,7 +549,7 @@ interface StreamableJobStore extends JobStore {
     cancelJob(jobId: string, reason: string): Promise<boolean>;
     /**
      * Bump `last_activity_at` to `now` (Unix ms) for the given jobs that are
-     * still in `processing`/`working` (internal-review worker heartbeat). Called on a
+     * still in `processing`/`working`. Called on a
      * tick by the `JobManager` for its locally-active jobs so a live worker's
      * row stays fresh and the processing watchdog only fires when the process
      * has actually died. A no-op for rows that have since gone terminal or
@@ -571,7 +579,7 @@ interface OutgoingMessage {
  */
 declare function isStreamableJobStore(store: JobStore): store is StreamableJobStore;
 /**
- * The stale-job reaper surface (internal-review) — the two methods a sweeper needs to
+ * The stale-job reaper surface — the two methods a sweeper needs to
  * find and atomically reap worker-stranded jobs. A strict subset of
  * `StreamableJobStore`: `MemoryJobStore` and `PostgresJobStore` satisfy it via
  * the full streamable interface, and the platform's `IsolateJobStore` (a plain
@@ -585,7 +593,6 @@ interface StaleJobReapable {
     /** See {@link StreamableJobStore.cancelStaleJob}. */
     cancelStaleJob(jobId: string, expectedActivityBefore: number, reason: string, terminalStatus: "failed" | "cancelled"): Promise<boolean>;
 }
-/** Runtime type guard for StaleJobReapable. */
 declare function isStaleJobReapable(store: JobStore): store is JobStore & StaleJobReapable;
 
 export { type AppendOutgoingOptions as A, type JobRecord as J, type OutgoingMessage as O, type PaymentCreditDelta as P, type ReceiptIssuingStore as R, type StaleJobReapable as S, type TopUpCapUnenforcedReason as T, type VerifyAndCreditResult as V, type JobStatus as a, type JobStore as b, type StreamableJobStore as c, type RequestIdClaim as d, type RequestIdClaimResult as e, type JobRetentionCursor as f, type JobCounters as g, isStreamableJobStore as h, isStaleJobReapable as i };