@dvmkit/sdk 0.10.1 → 0.11.0-rc.1

package/dist/{step-cache--7yA5Ihr.d.ts → step-cache-d-VKen4K.d.ts}

@@ -1268,6 +1268,7 @@ declare class HostedSettlementReportObligations {
             obligationId: string;
         };
         all?: boolean;
+        channelId?: string;
     }): Promise<{
         id: string;
         channelId: string;
@@ -1687,6 +1688,8 @@ interface FundingLot {
     rail: NonChannelBitcoinRail;
     /** Sats this funding delivered. `0` on a credit funded before a rail basis was recorded. */
     satsFunded: number;
+    /** Explicit original-asset evidence, including a refund whose integer share is zero sats. */
+    satsBasisKnown?: boolean;
     /** Credit micro this funding bought — the lot's denominator, never depleted. */
     creditedMicro: number;
     remainingMicro: number;
@@ -2356,6 +2359,20 @@ interface CreditDepositPayload {
      */
     repaired?: boolean;
 }
+/** Completed-draw reversal posted to /_internal/credit-draw-refund. */
+interface CreditDrawRefundPayload {
+    dvmId: string;
+    creditId: string;
+    drawId: string;
+    jobId: string;
+    refundId: string;
+    amountMicro: number;
+    creditCurrency: string;
+    ledgerSeq: number;
+    refundedAt: number;
+    reason?: string;
+}
+type CreditDrawRefundEnqueue = (tx: RevenueReporterQuerier, payload: CreditDrawRefundPayload) => Promise<void>;
 /**
  * JSON wire shape POSTed to the platform's `/_internal/credit-draw-release`
  * endpoint. A released hold leaves the credit balance intact, but
@@ -2651,6 +2668,8 @@ declare class RevenueReporter {
      * rail transaction commits, including after a process restart.
      */
     enqueueDeposit(tx: RevenueReporterQuerier, payload: CreditDepositPayload): Promise<void>;
+    /** Persist without network delivery before the refund accounting transaction commits. */
+    enqueueCreditDrawRefund(tx: RevenueReporterQuerier, payload: CreditDrawRefundPayload): Promise<void>;
     /** Join a released draw to the transaction that made the hold terminal. */
     enqueueCreditDrawRelease(tx: RevenueReporterQuerier, payload: CreditDrawReleasePayload): Promise<void>;
     /**
@@ -2738,6 +2757,40 @@ declare class RevenueReporter {
     private markStale;
 }
 
+type CreditDrawRefundArgs = {
+    refundId: string;
+    amountMicro?: number;
+    reason?: string;
+    outbox: {
+        dvmId: string;
+        enqueue: CreditDrawRefundEnqueue;
+    };
+    /** DVM receipt key from trusted server configuration, never from job content or the request. */
+    trustedReceiptPubkey?: string;
+    nowMs?: number;
+} & ({
+    jobId: string;
+    creditId?: never;
+    drawId?: never;
+} | {
+    creditId: string;
+    drawId: string;
+    jobId?: never;
+});
+interface CreditDrawRefundResult {
+    refundId: string;
+    creditId: string;
+    drawId: string;
+    jobId: string;
+    amountMicro: number;
+    currency: string;
+    ledgerSeq: number;
+    refundedAt: number;
+    /** Persisted balance immediately after this refund, not a current balance read. */
+    balanceAfterMicro: number;
+    replayed: boolean;
+}
+
 interface TempoSessionSettlementStore {
     withDrawPlacement<value>(channelId: string, operation: (tx: CreditLedgerQuerier, lifecycle: TempoSessionLifecycle$1) => Promise<value>, tx?: CreditLedgerQuerier): Promise<value>;
     withTerminalConsumption<value>(channelId: string, operation: (tx: CreditLedgerQuerier, lifecycle: TempoSessionLifecycle$1) => Promise<{
@@ -2759,6 +2812,9 @@ interface TempoCreditLossEvidence {
     settledOnChainNative: bigint;
     highestVoucherNative: bigint;
     consumedNative: bigint;
+    /** Exact same-close cooperative refund. Omission preserves the caller's loss assertion without proving zero. */
+    refundedToPayerNative?: bigint;
+    closeKind?: "cooperative_close" | "payer_exit";
     observedAt?: number;
 }
 interface TempoCreditLoss {
@@ -2771,6 +2827,9 @@ interface TempoCreditLoss {
     highestVoucherNative: bigint;
     consumedServiceMicro: number;
     consumedNative: bigint;
+    refundedToPayerNative?: bigint | null;
+    lossNative?: bigint | null;
+    lossBasis?: "cooperative_close" | "payer_exit" | "caller_asserted" | null;
     observedAt: number;
 }
 /** Chain-proven evidence that an x402 channel no longer backs its bound credit. */
@@ -2798,7 +2857,7 @@ interface X402CreditLoss {
  *
  * The ledger is host-wide: credit_id and caller_pubkey identify rows, without a per-mount
  * dvm_id. Draws hold funds until settlement or release, and share a gap-free per-credit
- * ledger_seq with drains.
+ * ledger_seq with drains and completed-draw refunds.
  */
 declare class CreditLedger {
     private readonly pool;
@@ -2808,6 +2867,7 @@ declare class CreditLedger {
      * fleet, so this DVM may advertise credit.
      */
     readonly durable = true;
+    readonly tempoCreditLossEvidenceVersion = 1;
     private x402Settlements?;
     private expiryReleaseOutbox?;
     private hostingCleanupFence?;
@@ -2964,6 +3024,8 @@ declare class CreditLedger {
         tx?: CreditLedgerQuerier;
         nowMs?: number;
     }): Promise<GrownDrawResult>;
+    /** Restore a completed draw and its report under one durable transaction. */
+    refundDraw(args: CreditDrawRefundArgs): Promise<CreditDrawRefundResult>;
     /**
      * Finalize a pending draw: the hold becomes a real debit
      * (`balance_micro −= amount`). Available balance is unchanged — the amount
@@ -3217,7 +3279,8 @@ declare class CreditLedger {
     private terminalizeTempoCreditsLocked;
     listTempoCreditLosses(args?: {
         limit?: number;
-    }): Promise<TempoCreditLoss[]>;
+        channelId?: string;
+    }, tx?: CreditLedgerQuerier): Promise<TempoCreditLoss[]>;
     /**
      * Reconcile the credit bound to a chain-proven empty x402 channel.
      *
@@ -3284,8 +3347,8 @@ declare class CreditLedger {
      */
     listPendingDrains(): Promise<CreditDrainRecord[]>;
     /**
-     * Page pending Tempo-channel drains by (created_at, credit_id, drain_id), optionally
-     * age-bounded, excluding written-off rows. Accept the legacy mpp stored method as well as
+     * Page held Tempo-channel drains by (created_at, credit_id, drain_id), optionally
+     * age-bounded. Audit reads also include terminal operator decisions. Accept the legacy mpp stored method as well as
      * tempo so pre-migration drains remain repairable. Use the compound key for both ordering
      * and continuation.
      */
@@ -3295,6 +3358,7 @@ declare class CreditLedger {
         createdBeforeMs: number;
         rail: "tempo";
         includeResolved?: boolean;
+        includeWrittenOff?: boolean;
     }): Promise<CreditDrainRecord[]>;
     /**
      * Record that an operator reviewed a floor-refused channel drain and is not
@@ -3334,18 +3398,39 @@ declare class CreditLedger {
         drainId: string;
         tx?: CreditLedgerQuerier;
     }): Promise<DrainTransitionResult>;
+    /** Retain an exact receipt-derived refund; a later missing/zero read cannot erase payment. */
+    recordTempoDrainRefund(args: {
+        creditId: string;
+        drainId: string;
+        refundedNative: string | bigint;
+    }): Promise<void>;
+    /** Retain trusted proof that some refund was paid, without claiming an exact amount. */
+    recordTempoDrainPayment(args: {
+        creditId: string;
+        drainId: string;
+    }): Promise<void>;
+    private recordTempoDrainRefundEvidence;
+    /** Record the latest established proof refusal without changing the held debit. */
+    recordTempoDrainHold(args: {
+        creditId: string;
+        drainId: string;
+        reason: TempoDrainHoldReason;
+    }): Promise<void>;
     /**
-     * Cancel an unfulfilled Tempo cooperative drain and restore the exact
-     * balance plus rail basis it removed (`pending -> released`). This is only
-     * for a close the channel reconciliation proved cannot pay; ordinary payout
-     * rails never re-credit a liability after it has been handed to a worker.
+     * An operator attests a full off-path refund or restores the exact unpaid debit. The
+     * channel lock precedes the credit and drain locks; automatic booking shares the drain
+     * CAS, so only one terminal outcome can commit. No channel lifecycle state is reopened.
+     * Direct callers own reporting: hosted booking must join the caller's drain outbox transaction.
      */
+    decideTempoDrain(args: TempoDrainDecisionArgs): Promise<TempoDrainDecisionResult>;
+    /** Restore an unpaid pending drain; operator decisions also admit exit_required. */
     releaseDrain(args: {
         creditId: string;
         drainId: string;
         tx?: CreditLedgerQuerier;
         nowMs?: number;
     }): Promise<DrainReleaseResult>;
+    private releaseDrainLocked;
     /**
      * Attach the parked Cashu token to a pending drain (`pending → parked`).
      * A single-statement CAS on `status = 'pending'` — no credit lock needed;
@@ -3475,6 +3560,8 @@ interface CreditLedgerLike {
      * would get `credit_not_found`, so advertising credit there misadvertises.
      */
     readonly durable: boolean;
+    /** Close-aware loss arithmetic, truthful refund evidence, atomic mutation, and transaction-aware loss reads. */
+    readonly tempoCreditLossEvidenceVersion?: 1;
     /**
      * Bind the durable x402 settlement state spending is gated on.
      *
@@ -3550,6 +3637,7 @@ interface CreditLedgerLike {
         tx?: CreditLedgerQuerier;
         nowMs?: number;
     }): Promise<GrownDrawResult>;
+    refundDraw(args: CreditDrawRefundArgs): Promise<CreditDrawRefundResult>;
     settle(args: {
         creditId: string;
         drawId: string;
@@ -3681,7 +3769,8 @@ interface CreditLedgerLike {
     terminalizeTempoCredits(evidence: TempoCreditLossEvidence, tx?: CreditLedgerQuerier): Promise<TempoCreditLoss[]>;
     listTempoCreditLosses(args?: {
         limit?: number;
-    }): Promise<TempoCreditLoss[]>;
+        channelId?: string;
+    }, tx?: CreditLedgerQuerier): Promise<TempoCreditLoss[]>;
     terminalizeX402Credit(evidence: X402CreditLossEvidence, tx?: CreditLedgerQuerier): Promise<X402CreditLoss[]>;
     listX402CreditLosses(args?: {
         limit?: number;
@@ -3710,6 +3799,7 @@ interface CreditLedgerLike {
         createdBeforeMs: number;
         rail: "tempo";
         includeResolved?: boolean;
+        includeWrittenOff?: boolean;
     }): Promise<CreditDrainRecord[]>;
     writeOffDrain(args: {
         creditId: string;
@@ -3722,6 +3812,21 @@ interface CreditLedgerLike {
         drainId: string;
         tx?: CreditLedgerQuerier;
     }): Promise<void>;
+    decideTempoDrain?(args: TempoDrainDecisionArgs): Promise<TempoDrainDecisionResult>;
+    recordTempoDrainPayment?(args: {
+        creditId: string;
+        drainId: string;
+    }): Promise<void>;
+    recordTempoDrainRefund?(args: {
+        creditId: string;
+        drainId: string;
+        refundedNative: string | bigint;
+    }): Promise<void>;
+    recordTempoDrainHold?(args: {
+        creditId: string;
+        drainId: string;
+        reason: TempoDrainHoldReason;
+    }): Promise<void>;
     requireTempoDrainExit?(args: {
         creditId: string;
         drainId: string;
@@ -3900,6 +4005,29 @@ interface DrainFulfilment {
     /** Lightning routing the sending wallet reported, where it reported any. */
     routingFeeMsats: number | null;
 }
+/** Latest established refund-proof refusal; transient read failures do not replace it. */
+type TempoDrainHoldReason = "close_history_unmatched" | "collateral_missing" | "close_evidence_missing" | "refund_short";
+/** Immutable full-refund attestation or unpaid-release decision, independent of chain proof. */
+interface TempoDrainDecision {
+    source: "operator";
+    decision: "book_refunded" | "release";
+    reason: string;
+    evidence?: string;
+    decidedAt: number;
+}
+interface TempoDrainDecisionArgs {
+    creditId: string;
+    drainId: string;
+    decision: TempoDrainDecision["decision"];
+    reason: string;
+    evidence?: string;
+    nowMs?: number;
+    tx?: CreditLedgerQuerier;
+}
+interface TempoDrainDecisionResult extends DrainReleaseResult {
+    /** Effective new-draw availability, including channel lifecycle and expiry restrictions. */
+    spendableMicro: number;
+}
 /**
  * One drain liability, camel-cased, joined with its credit's `currency` and
  * `callerPubkey` so consumers (route, admin surface, batch job) never need a
@@ -3983,6 +4111,12 @@ interface CreditDrainRecord {
      */
     writeOffNote: string | null;
     writtenOffAt: number | null;
+    operatorDecision?: TempoDrainDecision | null;
+    holdReason?: TempoDrainHoldReason | null;
+    /** Exact retained refund evidence; null/absent means unknown, not zero. */
+    provenRefundNative?: string | null;
+    /** Sticky proof that some refund was paid; false/absent does not prove zero. */
+    refundPaymentProven?: boolean;
 }
 /**
  * Keyset cursor for {@link CreditLedger.listChannelDrains} — the last row of
@@ -4056,7 +4190,7 @@ interface CreditSnapshot {
     expired: boolean;
     status: CreditStatus;
     /**
-     * High-water sequence shared by draw placements and drains.
+     * High-water sequence shared by draw placements, drains, and completed-draw refunds.
      */
     lastLedgerSeq: number;
     createdAt: number;
@@ -4081,7 +4215,7 @@ interface DrawResult {
      */
     balanceAfterMicro: number;
     /**
-     * Per-credit gap-free sequence shared with drains; growth keeps the original value.
+     * Per-credit gap-free sequence shared with drains and refunds; growth keeps the original value.
      */
     ledgerSeq: number;
     status: DrawStatus;
@@ -4355,7 +4489,7 @@ interface BlockedInvoiceCursor {
     creditId: string;
     fundId: string;
 }
-type CreditLedgerErrorCode = "credit_not_found" | "credit_expired" | "credit_unbacked" | "tempo_channel_closing" | "tempo_settlement_pending" | "settlement_pending" | "insufficient_credit" | "draw_conflict" | "draw_not_found" | "invalid_draw_state" | "funding_replayed" | "currency_mismatch" | "caller_mismatch" | "rail_mismatch" | "invalid_amount" | "invalid_expiry" | "invalid_basis" | "nothing_to_drain" | "drain_below_dust" | "drain_not_found" | "drain_conflict" | "invalid_drain_state" | "invoice_not_found" | "invoice_conflict" | "invoice_not_blocked" | "below_rail_minimum";
+type CreditLedgerErrorCode = "credit_not_found" | "credit_expired" | "credit_unbacked" | "tempo_channel_closing" | "tempo_settlement_pending" | "settlement_pending" | "insufficient_credit" | "draw_conflict" | "invalid_refund" | "draw_not_completed" | "refund_conflict" | "refund_exceeds_draw" | "credit_not_open" | "credit_refund_channel_unsupported" | "credit_refund_basis_unavailable" | "credit_refund_state_unavailable" | "draw_not_found" | "invalid_draw_state" | "funding_replayed" | "currency_mismatch" | "caller_mismatch" | "rail_mismatch" | "invalid_amount" | "invalid_expiry" | "invalid_basis" | "nothing_to_drain" | "drain_below_dust" | "drain_not_found" | "drain_conflict" | "invalid_drain_state" | "tempo_drain_close_pending" | "tempo_drain_refund_paid" | "tempo_drain_refund_unknown" | "invalid_drain_decision" | "drain_not_repairable" | "drain_decision_conflict" | "invoice_not_found" | "invoice_conflict" | "invoice_not_blocked" | "below_rail_minimum";
 /**
  * Structured drain_conflict reasons select caller instructions without matching prose. A
  * refund_floor shortfall needs operator resolution, unlike duplicate payout; foreign_credit
@@ -6029,4 +6163,4 @@ declare class StepCache {
     static deserialize(records: StepRecord[]): StepCache;
 }
 
-export { type FundingReceipt as $, type ApprovalContent as A, type SignedRequestDomain as B, type Currency as C, type DVMConfig as D, SignedRequestError as E, type SignedRequestFailure as F, type SignedRequestReplayStore as G, type SignedRequestSignOpts as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestStatementHeader as M, type SignedRequestVerifier as N, createSignedRequestVerifier as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCreditConfig as R, type SDKJobContext as S, isZodSchema as T, UnsupportedCurrencyError as U, signedRequestStatementHeader as V, validateCurrency as W, type JsonValue as X, X402_BATCH_SETTLEMENT_SCHEME as Y, type ZodLike as Z, X402_EXACT_SCHEME as _, type DVMDescriptor as a, isCompleteMessage as a$, type JobReceipt as a0, type MessageType as a1, type X402Version as a2, type MppxCredential as a3, type PaymentRequired as a4, type Message as a5, type MppxChallenge as a6, type ReceiptCredit as a7, type DrainReceipt as a8, type X402Wallet as a9, type UnsignedDrainReceipt as aA, type UnsignedFundingReceipt as aB, type UnsignedJobReceipt as aC, type VerifyResponse as aD, type WorkingContent as aE, type X402Config$1 as aF, type X402ResponseBody as aG, type X402SelfRelayRpcFailureReason as aH, X402_DEFAULT_NETWORK as aI, X402_V1_VERSION as aJ, X402_VERSION as aK, buildPaymentRequiredV2 as aL, buildPaymentRequirements as aM, caip2ToX402Network as aN, canonicalRequestPath as aO, canonicaliseForSigning as aP, canonicalize as aQ, chainIdFromCaip2 as aR, computeResultHash as aS, decodePayment as aT, decodePaymentRequiredHeader as aU, encodePayment as aV, encodePaymentRequiredHeader as aW, encodeSettleResponseHeader as aX, exactEvmAuthorization as aY, isArtifactMessage as aZ, isCancelMessage as a_, type PaymentRequirementsV1 as aa, type PaymentRequirementsV2 as ab, type BuildPaymentRequirementsOpts as ac, type CapabilityDescriptor as ad, type CashuMode as ae, type CompleteContent as af, type DrainReceiptEvent as ag, type ExactEvmPayload as ah, type ExactEvmPayloadAuthorization as ai, type FundingMethod as aj, type MessageFrom as ak, type PaymentPayload as al, type PaymentPayloadV1 as am, type PaymentPayloadV2 as an, type PaymentRequestContent as ao, type PaymentRequiredV2 as ap, type PaymentRequirements as aq, type PromptContent as ar, RAIL_REFUNDABLE as as, type ReceiptOutcome as at, type ReceiptPayment as au, type ResourceInfo as av, type SettleResponse as aw, StepCache as ax, type StepRecord as ay, type TextContent as az, type ArtifactContent as b, type InvoiceReconciliation as b$, isDrainReceipt as b0, isFundingReceipt as b1, isPaymentRequestMessage as b2, isPromptMessage as b3, isSignedJobReceipt as b4, isTextMessage as b5, isWorkingMessage as b6, paymentRequiredV2FromV1 as b7, signDrainReceipt as b8, signFundingReceipt as b9, type X402TrackedChannel as bA, _testing as bB, createDefaultReplayStore as bC, depleteLots as bD, fifoOrder as bE, inKindDrawMsats as bF, isInKindDepletion as bG, isNonChannelBitcoinRail as bH, lotOwedSats as bI, netOwedSats as bJ, wrapMppx as bK, type CreditLedgerQuerier as bL, type CreditDrainEnqueue as bM, HostedSettlementReportObligations as bN, type DVMAuthScheme as bO, type CreditLedgerLike as bP, type X402RefundSettlementGate as bQ, type CreditSnapshot as bR, type DrawResult as bS, type X402SettlementStatus as bT, type X402UnresolvedRefund as bU, type GrownDrawResult as bV, type DrawResolution as bW, type FundingRecord as bX, type CreditInvoiceRecord as bY, type InvoiceSettlement as bZ, type BlockedInvoiceCursor as b_, signReceipt as ba, usdcContractByCaip2 as bb, usdcContractFor as bc, usdcDomainNameFor as bd, usdcDomainVersionFor as be, verifyDrainReceipt as bf, verifyFundingReceipt as bg, verifyReceipt as bh, x402NetworkToCaip2 as bi, type X402ExactVersionSupport as bj, type X402Receipt as bk, type TransactionalPayoutHook as bl, type CashuMeltCompleted as bm, type CreditDepositPayload as bn, type CreditDrainPayload as bo, type FundingLot as bp, type LotDebit as bq, type LotDepletion as br, type MppxServer as bs, NON_CHANNEL_BITCOIN_RAILS as bt, type NonChannelBitcoinRail as bu, PayoutReporter as bv, PostgresTempoSessionStore as bw, RevenueReporter as bx, SIGNED_ENVELOPE_FIELDS as by, SIGNED_ENVELOPE_TYPES as bz, type CancelContent as c, type HostedFundingReservation as c$, type InvoiceWriteOff as c0, type DrawRecord as c1, type StalePendingDrawCursor as c2, type TempoCreditLossEvidence as c3, type TempoCreditLoss as c4, type X402CreditLossEvidence as c5, type X402CreditLoss as c6, type DrainMethod as c7, type DrainRequestResult as c8, type BitcoinDepositLiability as c9, type HostedTempoCloseReportWriteOff as cA, type JobCostReportPayload as cB, type JobTerminalReportPayload as cC, PostgresX402ChannelStorage as cD, type ReplayStoreBackend as cE, type RevenueSkippedNoRailPayload as cF, type RevenueSkippedNoRailReason as cG, type Secp256k1AuthOpts as cH, type X402ChannelStorageOpts as cI, type X402RelayLockHolder as cJ, type X402RelaySubmissionLock as cK, X402RelaySubmissionLockError as cL, allocateDrawValue as cM, clientCompatibilityAttributes as cN, clientCompatibilityMiddleware as cO, clientUpgradeRequired as cP, parseClientCapabilities as cQ, parseClientCompatibility as cR, parseDvmClient as cS, parseProtocolVersion as cT, requireClientCompatibility as cU, retryHostedTempoCloseReport as cV, secp256k1Auth as cW, signedRequestInput as cX, writeOffHostedTempoCloseReport as cY, type HostedIntent as cZ, type X402SettlementIntent as c_, type CreditDrainRecord as ca, type ChannelDrainCursor as cb, type DrainWriteOff as cc, type DrainTransitionResult as cd, type DrainReleaseResult as ce, type DrainFulfilment as cf, HostingCleanupFence as cg, CLIENT_COMPATIBILITY_HEADERS as ch, type ClientCompatibility as ci, type ClientCompatibilityEnv as cj, type ClientCompatibilityGate as ck, type ClientCompatibilityRequirement as cl, type ClientSemVer as cm, type CreditFundingBasis as cn, type CreditInvoiceStatus as co, CreditLedger as cp, CreditLedgerError as cq, type CreditLedgerErrorCode as cr, type CreditLedgerErrorDetails as cs, type CreditLedgerPool as ct, type CreditStatus as cu, DRAIN_DELIVERY_RESERVE_SATS as cv, DVM_PROTOCOL_VERSION as cw, type DrainConflictReason as cx, type DrawRailValue as cy, type DrawStatus as cz, type CanonicalEnvelope as d, type X402SettlementCursor as d0, type X402SettlementWriteOff as d1, type X402FacilitatorAuth as d2, type X402BatchSettlementConfig as d3, type X402PayoutObserver as d4, type CreditDepositEnqueue as d5, type X402SettlementReconciliationReason as d6, type CreditDrawReleaseEnqueue as d7, type CapabilityRate as e, type CreateSignedRequestVerifierOpts as f, type CreditConfig as g, type CreditView as h, DEFAULT_CREDIT_MAX as i, DEFAULT_CREDIT_MIN as j, DEFAULT_CREDIT_TTL_SECONDS as k, DEFAULT_JOB_RETENTION_DAYS as l, type DVMRouteContext as m, type InputType as n, InvalidCurrencyError as o, type PaymentMethod as p, type PriceValue as q, type ProgressContent as r, type PromptOpts as s, type QuoteContext as t, type QuoteResult as u, type ResponseContent as v, type SDKPaymentRequestOpts as w, SIGNED_REQUEST_AUTH_ID as x, SIGNED_REQUEST_STATEMENT_VERSION as y, type SignedRequestAudience as z };
+export { type FundingReceipt as $, type ApprovalContent as A, type SignedRequestDomain as B, type Currency as C, type DVMConfig as D, SignedRequestError as E, type SignedRequestFailure as F, type SignedRequestReplayStore as G, type SignedRequestSignOpts as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestStatementHeader as M, type SignedRequestVerifier as N, createSignedRequestVerifier as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCreditConfig as R, type SDKJobContext as S, isZodSchema as T, UnsupportedCurrencyError as U, signedRequestStatementHeader as V, validateCurrency as W, type JsonValue as X, X402_BATCH_SETTLEMENT_SCHEME as Y, type ZodLike as Z, X402_EXACT_SCHEME as _, type DVMDescriptor as a, isCompleteMessage as a$, type JobReceipt as a0, type MessageType as a1, type X402Version as a2, type MppxCredential as a3, type PaymentRequired as a4, type Message as a5, type MppxChallenge as a6, type ReceiptCredit as a7, type DrainReceipt as a8, type X402Wallet as a9, type UnsignedDrainReceipt as aA, type UnsignedFundingReceipt as aB, type UnsignedJobReceipt as aC, type VerifyResponse as aD, type WorkingContent as aE, type X402Config$1 as aF, type X402ResponseBody as aG, type X402SelfRelayRpcFailureReason as aH, X402_DEFAULT_NETWORK as aI, X402_V1_VERSION as aJ, X402_VERSION as aK, buildPaymentRequiredV2 as aL, buildPaymentRequirements as aM, caip2ToX402Network as aN, canonicalRequestPath as aO, canonicaliseForSigning as aP, canonicalize as aQ, chainIdFromCaip2 as aR, computeResultHash as aS, decodePayment as aT, decodePaymentRequiredHeader as aU, encodePayment as aV, encodePaymentRequiredHeader as aW, encodeSettleResponseHeader as aX, exactEvmAuthorization as aY, isArtifactMessage as aZ, isCancelMessage as a_, type PaymentRequirementsV1 as aa, type PaymentRequirementsV2 as ab, type BuildPaymentRequirementsOpts as ac, type CapabilityDescriptor as ad, type CashuMode as ae, type CompleteContent as af, type DrainReceiptEvent as ag, type ExactEvmPayload as ah, type ExactEvmPayloadAuthorization as ai, type FundingMethod as aj, type MessageFrom as ak, type PaymentPayload as al, type PaymentPayloadV1 as am, type PaymentPayloadV2 as an, type PaymentRequestContent as ao, type PaymentRequiredV2 as ap, type PaymentRequirements as aq, type PromptContent as ar, RAIL_REFUNDABLE as as, type ReceiptOutcome as at, type ReceiptPayment as au, type ResourceInfo as av, type SettleResponse as aw, StepCache as ax, type StepRecord as ay, type TextContent as az, type ArtifactContent as b, type InvoiceSettlement as b$, isDrainReceipt as b0, isFundingReceipt as b1, isPaymentRequestMessage as b2, isPromptMessage as b3, isSignedJobReceipt as b4, isTextMessage as b5, isWorkingMessage as b6, paymentRequiredV2FromV1 as b7, signDrainReceipt as b8, signFundingReceipt as b9, type X402TrackedChannel as bA, _testing as bB, createDefaultReplayStore as bC, depleteLots as bD, fifoOrder as bE, inKindDrawMsats as bF, isInKindDepletion as bG, isNonChannelBitcoinRail as bH, lotOwedSats as bI, netOwedSats as bJ, wrapMppx as bK, type CreditLedgerQuerier as bL, type CreditDrainEnqueue as bM, HostedSettlementReportObligations as bN, type DVMAuthScheme as bO, type CreditLedgerLike as bP, type X402RefundSettlementGate as bQ, type CreditSnapshot as bR, type CreditDrawRefundArgs as bS, type CreditDrawRefundResult as bT, type DrawResult as bU, type X402SettlementStatus as bV, type X402UnresolvedRefund as bW, type GrownDrawResult as bX, type DrawResolution as bY, type FundingRecord as bZ, type CreditInvoiceRecord as b_, signReceipt as ba, usdcContractByCaip2 as bb, usdcContractFor as bc, usdcDomainNameFor as bd, usdcDomainVersionFor as be, verifyDrainReceipt as bf, verifyFundingReceipt as bg, verifyReceipt as bh, x402NetworkToCaip2 as bi, type X402ExactVersionSupport as bj, type X402Receipt as bk, type TransactionalPayoutHook as bl, type CashuMeltCompleted as bm, type CreditDepositPayload as bn, type CreditDrainPayload as bo, type FundingLot as bp, type LotDebit as bq, type LotDepletion as br, type MppxServer as bs, NON_CHANNEL_BITCOIN_RAILS as bt, type NonChannelBitcoinRail as bu, PayoutReporter as bv, PostgresTempoSessionStore as bw, RevenueReporter as bx, SIGNED_ENVELOPE_FIELDS as by, SIGNED_ENVELOPE_TYPES as bz, type CancelContent as c, retryHostedTempoCloseReport as c$, type BlockedInvoiceCursor as c0, type InvoiceReconciliation as c1, type InvoiceWriteOff as c2, type DrawRecord as c3, type StalePendingDrawCursor as c4, type TempoCreditLossEvidence as c5, type TempoCreditLoss as c6, type X402CreditLossEvidence as c7, type X402CreditLoss as c8, type DrainMethod as c9, type DrawRailValue as cA, type DrawStatus as cB, type HostedTempoCloseReportWriteOff as cC, type JobCostReportPayload as cD, type JobTerminalReportPayload as cE, PostgresX402ChannelStorage as cF, type ReplayStoreBackend as cG, type RevenueSkippedNoRailPayload as cH, type RevenueSkippedNoRailReason as cI, type Secp256k1AuthOpts as cJ, type TempoDrainDecision as cK, type TempoDrainDecisionArgs as cL, type TempoDrainDecisionResult as cM, type TempoDrainHoldReason as cN, type X402ChannelStorageOpts as cO, type X402RelayLockHolder as cP, type X402RelaySubmissionLock as cQ, X402RelaySubmissionLockError as cR, allocateDrawValue as cS, clientCompatibilityAttributes as cT, clientCompatibilityMiddleware as cU, clientUpgradeRequired as cV, parseClientCapabilities as cW, parseClientCompatibility as cX, parseDvmClient as cY, parseProtocolVersion as cZ, requireClientCompatibility as c_, type DrainRequestResult as ca, type BitcoinDepositLiability as cb, type CreditDrainRecord as cc, type ChannelDrainCursor as cd, type DrainWriteOff as ce, type DrainTransitionResult as cf, type DrainReleaseResult as cg, type DrainFulfilment as ch, HostingCleanupFence as ci, CLIENT_COMPATIBILITY_HEADERS as cj, type ClientCompatibility as ck, type ClientCompatibilityEnv as cl, type ClientCompatibilityGate as cm, type ClientCompatibilityRequirement as cn, type ClientSemVer as co, type CreditFundingBasis as cp, type CreditInvoiceStatus as cq, CreditLedger as cr, CreditLedgerError as cs, type CreditLedgerErrorCode as ct, type CreditLedgerErrorDetails as cu, type CreditLedgerPool as cv, type CreditStatus as cw, DRAIN_DELIVERY_RESERVE_SATS as cx, DVM_PROTOCOL_VERSION as cy, type DrainConflictReason as cz, type CanonicalEnvelope as d, secp256k1Auth as d0, signedRequestInput as d1, writeOffHostedTempoCloseReport as d2, type HostedIntent as d3, type X402SettlementIntent as d4, type HostedFundingReservation as d5, type X402SettlementCursor as d6, type X402SettlementWriteOff as d7, type X402FacilitatorAuth as d8, type X402BatchSettlementConfig as d9, type X402PayoutObserver as da, type CreditDepositEnqueue as db, type X402SettlementReconciliationReason as dc, type CreditDrawReleaseEnqueue as dd, type CapabilityRate as e, type CreateSignedRequestVerifierOpts as f, type CreditConfig as g, type CreditView as h, DEFAULT_CREDIT_MAX as i, DEFAULT_CREDIT_MIN as j, DEFAULT_CREDIT_TTL_SECONDS as k, DEFAULT_JOB_RETENTION_DAYS as l, type DVMRouteContext as m, type InputType as n, InvalidCurrencyError as o, type PaymentMethod as p, type PriceValue as q, type ProgressContent as r, type PromptOpts as s, type QuoteContext as t, type QuoteResult as u, type ResponseContent as v, type SDKPaymentRequestOpts as w, SIGNED_REQUEST_AUTH_ID as x, SIGNED_REQUEST_STATEMENT_VERSION as y, type SignedRequestAudience as z };

package/dist/{tempo-charge-store-5JOIYUIH.js → tempo-charge-store-7LTUAQHQ.js}

@@ -1,9 +1,9 @@
 import {
   PostgresTempoChargeStore
-} from "./chunk-LDIPVPKI.js";
+} from "./chunk-FFRTAQUW.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-QGNXYVBO.js";
+import "./chunk-Z4FOPROB.js";
 export {
   PostgresTempoChargeStore
 };

package/dist/{tempo-session-store-S6QMLQUA.js → tempo-session-store-LYAIDR2B.js}

@@ -1,11 +1,11 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-MB6R4XPZ.js";
+} from "./chunk-NS2OMIU7.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-MMGSYMIC.js";
-import "./chunk-QGNXYVBO.js";
+import "./chunk-EP7OVWI5.js";
+import "./chunk-Z4FOPROB.js";
 export {
   PostgresTempoSessionStore,
   assertMonotonicTransition

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-CrILCNxk.js';
-import { a0 as JobReceipt, a5 as Message, a1 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache--7yA5Ihr.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-92v8e1LQ.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-ySTD1wwZ.js';
+import { a0 as JobReceipt, a5 as Message, a1 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-d-VKen4K.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-DRwXCJDI.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/testing/index.js

@@ -4,22 +4,22 @@ import {
 import {
   MemoryJobStore,
   createInstrumentedFetch
-} from "../chunk-KFCEXCZM.js";
+} from "../chunk-KJZVTWMX.js";
 import {
   JobCancelledError
 } from "../chunk-AFV77S4C.js";
 import {
   createNoopLogger
-} from "../chunk-3R7NQA3Z.js";
+} from "../chunk-7KQLPVV7.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-JNECYURT.js";
+import "../chunk-D4FFS3IS.js";
 import {
   validateCurrency
-} from "../chunk-W3VGCNG6.js";
-import "../chunk-M3T5JYDJ.js";
+} from "../chunk-LDKV4UHI.js";
+import "../chunk-HNXMWHLU.js";
 import "../chunk-66HGCPBU.js";
-import "../chunk-QGNXYVBO.js";
+import "../chunk-Z4FOPROB.js";
 
 // src/sdk/testing/test-context.ts
 function createTestContext(opts) {

package/dist/{usd-C7lvLvLk.d.ts → usd-DSroMJ--.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache--7yA5Ihr.js';
+import { C as Currency } from './step-cache-d-VKen4K.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/dist/{x402-EN5LSOVM.js → x402-RUJ4LUKF.js}

@@ -6,8 +6,8 @@ import {
 } from "./chunk-WMGXJQI3.js";
 import {
   verifyX402Payment
-} from "./chunk-3Q6FTZDB.js";
-import "./chunk-VTHYQCDB.js";
+} from "./chunk-3YFFZLW7.js";
+import "./chunk-E7ZBCT5U.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -37,7 +37,7 @@ import {
   x402SupportedNetworksHint
 } from "./chunk-BPYMEMQX.js";
 import "./chunk-66HGCPBU.js";
-import "./chunk-QGNXYVBO.js";
+import "./chunk-Z4FOPROB.js";
 export {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [

package/recipes/postgres/financial-export-v1.sql

@@ -50,6 +50,15 @@ CREATE OR REPLACE FUNCTION pg_temp.scalars_v1(value jsonb, strings text[], numbe
         OR (key=ANY(numbers) AND (jsonb_typeof(val) IN ('number','null') OR (jsonb_typeof(val)='string' AND val #>> '{}' ~ '^-?[0-9]+$')))
         OR (key=ANY(booleans) AND jsonb_typeof(val) IN ('boolean','null'))) END
 $$;
+CREATE OR REPLACE FUNCTION pg_temp.draw_refund_result_v1(value jsonb) RETURNS jsonb LANGUAGE sql IMMUTABLE AS $$
+  SELECT pg_temp.scalars_v1(value, ARRAY['refundId','creditId','drawId','jobId','currency'],
+    ARRAY['amountMicro','ledgerSeq','refundedAt','balanceAfterMicro'])
+$$;
+CREATE OR REPLACE FUNCTION pg_temp.drain_decision_v1(value jsonb) RETURNS jsonb LANGUAGE sql IMMUTABLE AS $$
+  SELECT pg_temp.scalars_v1(value, ARRAY[]::text[], ARRAY['decidedAt'])
+    || CASE WHEN value->>'source'='operator' THEN jsonb_build_object('source','operator') ELSE '{}'::jsonb END
+    || CASE WHEN value->>'decision' IN ('book_refunded','release') THEN jsonb_build_object('decision',value->'decision') ELSE '{}'::jsonb END
+$$;
 CREATE OR REPLACE FUNCTION pg_temp.settlement_v1(value jsonb) RETURNS jsonb LANGUAGE sql IMMUTABLE AS $$
   SELECT pg_temp.scalars_v1(value,
     ARRAY['tx_hash','transaction','channel_id','network','repair_kind','payer'],
@@ -100,6 +109,10 @@ BEGIN
   EXECUTE format('SELECT COALESCE(jsonb_agg(projected ORDER BY projected::text), ''[]''::jsonb) FROM (
     SELECT (SELECT COALESCE(jsonb_object_agg(key,
       CASE WHEN key=ANY(ARRAY[''sent_ref'',''settle_response'']) THEN pg_temp.settlement_v1(value)
+           WHEN key=ANY(ARRAY[''proven_refund_native'',''refunded_to_payer_native'',''loss_native'']) THEN CASE WHEN value #>> ''{}'' ~ ''^[0-9]+$'' THEN to_jsonb(value #>> ''{}'') ELSE NULL END
+           WHEN key=''loss_basis'' THEN CASE WHEN value #>> ''{}'' IN (''cooperative_close'',''payer_exit'',''caller_asserted'') THEN value ELSE NULL END
+           WHEN key=''operator_decision'' THEN pg_temp.drain_decision_v1(value)
+           WHEN key=''result'' THEN pg_temp.draw_refund_result_v1(value)
            WHEN key=''fulfilment'' THEN pg_temp.fulfilment_v1(value)
            WHEN key=''lot_debits'' THEN pg_temp.lot_debits_v1(value)
            WHEN key=''state_json'' THEN pg_temp.tempo_state_v1(value)
@@ -117,11 +130,12 @@ BEGIN TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY;
 SELECT jsonb_build_object(
   'format', 'dvmkit-financial-evidence', 'version', 1,
   'jobs', pg_temp.financial_rows_v1('jobs', ARRAY['id','dvm_id','request_id','requester_pubkey','capability','status','created_at','last_activity_at','terminal_at_ms','ended_by','receipt','receipt_seq','paid_msats','payment_rail','payment_tx_hash','payment_transaction_hash','native_amount','native_asset','credit_id','draw_id','cost_amount_micro','cost_currency']),
-  'credits', pg_temp.financial_rows_v1('credits', ARRAY['credit_id','caller_pubkey','currency','balance_micro','expiry_ms','status','last_ledger_seq','created_at','rail','native_asset','funding_ref','tempo_channel_id','x402_channel_id','msats_remaining','native_remaining']),
+  'credits', pg_temp.financial_rows_v1('credits', ARRAY['credit_id','caller_pubkey','currency','balance_micro','expiry_ms','status','last_ledger_seq','last_funding_ledger_seq','created_at','rail','native_asset','funding_ref','tempo_channel_id','x402_channel_id','msats_remaining','native_remaining']),
   'fundings', pg_temp.financial_rows_v1('credit_fundings', ARRAY['credit_id','fund_id','caller_pubkey','amount_micro','rail','created_at','balance_after_micro','ledger_seq','receipt']),
-  'funding_lots', pg_temp.financial_rows_v1('credit_funding_lots', ARRAY['lot_id','credit_id','rail','sats_funded','credited_micro','remaining_micro','funding_ref','created_at']),
-  'draws', pg_temp.financial_rows_v1('credit_draws', ARRAY['credit_id','draw_id','job_id','amount_micro','ledger_seq','status','balance_after_micro','created_at','resolved_at','draw_msats','allocated_msats','draw_native','grown_micro']),
-  'drains', pg_temp.financial_rows_v1('credit_drains', ARRAY['credit_id','drain_id','method','amount_micro','balance_after_micro','drained_msats','drained_native','owed_sats','ledger_seq','status','receipts','sent_ref','fulfilment','lot_debits','created_at','parked_at','picked_up_at','sent_at','released_at','written_off_at']),
+  'funding_lots', pg_temp.financial_rows_v1('credit_funding_lots', ARRAY['lot_id','credit_id','rail','sats_funded','sats_basis_known','credited_micro','remaining_micro','funding_ref','created_at']),
+  'draws', pg_temp.financial_rows_v1('credit_draws', ARRAY['credit_id','draw_id','job_id','amount_micro','ledger_seq','status','balance_after_micro','created_at','resolved_at','draw_msats','allocated_msats','settled_sats','refund_dvm_id','draw_native','grown_micro']),
+  'draw_refunds', pg_temp.financial_rows_v1('credit_draw_refunds', ARRAY['refund_id','credit_id','draw_id','amount_micro','restored_sats','result']),
+  'drains', pg_temp.financial_rows_v1('credit_drains', ARRAY['credit_id','drain_id','method','amount_micro','balance_after_micro','drained_msats','drained_native','owed_sats','ledger_seq','status','receipts','sent_ref','fulfilment','lot_debits','created_at','parked_at','picked_up_at','sent_at','released_at','written_off_at','operator_decision','hold_reason','proven_refund_native','refund_payment_proven']),
   'invoices', pg_temp.financial_rows_v1('credit_invoices', ARRAY['credit_id','fund_id','caller_pubkey','currency','amount_micro','amount_msats','payment_hash','status','expires_at','created_at','settled_at','reconciled_credit_id','reconciled_fund_id','resolved_at']),
   'expiry_releases', pg_temp.financial_rows_v1('credit_expiry_releases', ARRAY['credit_id','release_id','caller_pubkey','currency','rail','amount_micro','expiry_ms','released_at','reversed_at']),
   'tempo_channels', pg_temp.financial_rows_v1('mpp_tempo_channels', ARRAY['channel_key','state_json','updated_at']),
@@ -131,7 +145,7 @@ SELECT jsonb_build_object(
   'x402_channel_tombstones', pg_temp.financial_rows_v1('x402_batch_channel_tombstones', ARRAY['channel_id','charged_cumulative_amount','signed_max_claimable','refund_nonce','deleted_at_ms']),
   'x402_batch_settlements', pg_temp.financial_rows_v1('x402_batch_settlements', ARRAY['settlement_id','channel_id','operation','effect_id','payment_id','status','submission_block','settle_response','created_at','updated_at','resolved_at']),
   'x402_exact_settlements', pg_temp.financial_rows_v1('x402_exact_settlement_intents', ARRAY['dvm_id','intent_id','network','asset','authorizer','recipient','value','status','effect','submission_block','transaction','settle_response','last_outcome','created_at','updated_at','resolved_at']),
-  'tempo_losses', pg_temp.financial_rows_v1('tempo_credit_losses', ARRAY['credit_id','channel_id','caller_pubkey','currency','former_balance_micro','settled_on_chain_native','highest_voucher_native','consumed_service_micro','consumed_native','observed_at']),
+  'tempo_losses', pg_temp.financial_rows_v1('tempo_credit_losses', ARRAY['credit_id','channel_id','caller_pubkey','currency','former_balance_micro','settled_on_chain_native','highest_voucher_native','consumed_service_micro','consumed_native','observed_at','refunded_to_payer_native','loss_native','loss_basis']),
   'x402_losses', pg_temp.financial_rows_v1('x402_credit_losses', ARRAY['credit_id','channel_id','caller_pubkey','currency','former_balance_micro','channel_balance_native','total_claimed_native','consumed_service_micro','observed_at'])
 );
 ROLLBACK;

package/dist/memory-credit-ledger-RP7DT5IY.js

@@ -1,11 +0,0 @@
-import {
-  MemoryCreditLedger
-} from "./chunk-YOSZIWC3.js";
-import "./chunk-STJBBVNL.js";
-import "./chunk-COYKJRMM.js";
-import "./chunk-MMGSYMIC.js";
-import "./chunk-BPYMEMQX.js";
-import "./chunk-QGNXYVBO.js";
-export {
-  MemoryCreditLedger
-};