@dvmkit/sdk 0.10.1 → 0.12.0-rc.1

package/dist/{chunk-3Q6FTZDB.js → chunk-3YFFZLW7.js}

@@ -2,7 +2,7 @@ import {
   createX402FacilitatorAuthHeaders,
   settleWithFacilitator,
   verifyWithFacilitator
-} from "./chunk-VTHYQCDB.js";
+} from "./chunk-E7ZBCT5U.js";
 import {
   buildPaymentRequirements,
   decodePayment,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/lib/x402/verify.ts
 async function verifyX402Payment(paymentHeader, config, requiredUsdcMicro, resource, btcUsdRate, exactVersions = { v1: true, v2: true }) {

package/dist/{chunk-VMHYGKWT.js → chunk-566CFXGU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/sdk/server/revenue-reporter.ts
 import { randomUUID } from "crypto";
@@ -13,6 +13,7 @@ var ENDPOINTS = {
   cost: "/_internal/job-cost",
   deposit: "/_internal/credit-deposit",
   release: "/_internal/credit-draw-release",
+  refund: "/_internal/credit-draw-refund",
   drain: "/_internal/credit-drain",
   payout: "/_internal/payout",
   expiry_release: "/_internal/credit-expiry-release"
@@ -166,6 +167,10 @@ var RevenueReporter = class _RevenueReporter {
   async enqueueDeposit(tx, payload) {
     await this.insertPending(tx, "deposit", payload);
   }
+  /** Persist without network delivery before the refund accounting transaction commits. */
+  async enqueueCreditDrawRefund(tx, payload) {
+    await this.insertPending(tx, "refund", payload);
+  }
   /** Join a released draw to the transaction that made the hold terminal. */
   async enqueueCreditDrawRelease(tx, payload) {
     await this.insertPending(tx, "release", payload);
@@ -620,6 +625,9 @@ var RevenueReporter = class _RevenueReporter {
       diagnosticConsole.log(`[revenue-reporter] reported ${kind} ${label}`);
       return;
     }
+    if (kind === "refund" && res.status === 409) {
+      throw new Error("Original draw revenue has not arrived yet");
+    }
     if (res.status === 401) {
       await this.markStale(id, "token_rotated");
       diagnosticConsole.warn(

package/dist/chunk-5H7P3ORL.js

@@ -0,0 +1,92 @@
+import {
+  canonicaliseForSigning
+} from "./chunk-H3GGFEE5.js";
+
+// src/lib/receipt.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { bytesToHex, hexToBytes } from "@noble/hashes/utils.js";
+function computeResultHash(summary, artifactContents) {
+  const artifactHashes = artifactContents.map(
+    (content) => bytesToHex(sha256(canonicaliseForSigning(content)))
+  );
+  return bytesToHex(
+    sha256(
+      canonicaliseForSigning({
+        summary: summary ?? null,
+        artifact_hashes: artifactHashes
+      })
+    )
+  );
+}
+function signReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function verifyReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+function isSignedJobReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  const paid = r.paid;
+  return r.v === 1 && typeof r.job_id === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.capability === "string" && (r.outcome === "completed" || r.outcome === "failed" || r.outcome === "cancelled") && typeof r.seq === "number" && typeof r.issued_at === "number" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string" && !!paid && typeof paid === "object" && !Array.isArray(paid) && typeof paid.msats === "number";
+}
+function signDrainReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function signFundingReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function isFundingReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  return r.v === 1 && r.kind === "credit_funding" && typeof r.credit_id === "string" && typeof r.fund_id === "string" && typeof r.funded_micro === "number" && typeof r.balance_after_micro === "number" && typeof r.ledger_seq === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
+}
+function verifyFundingReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+function isDrainReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  return r.v === 1 && r.kind === "credit_drain" && typeof r.credit_id === "string" && typeof r.drain_id === "string" && (r.event === "requested" || r.event === "parked" || r.event === "picked_up" || r.event === "sent" || r.event === "released") && typeof r.method === "string" && typeof r.amount_micro === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
+}
+function verifyDrainReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+
+export {
+  computeResultHash,
+  signReceipt,
+  verifyReceipt,
+  isSignedJobReceipt,
+  signDrainReceipt,
+  signFundingReceipt,
+  isFundingReceipt,
+  verifyFundingReceipt,
+  isDrainReceipt,
+  verifyDrainReceipt
+};

package/dist/{chunk-3R7NQA3Z.js → chunk-7KQLPVV7.js}

@@ -1,7 +1,7 @@
 import {
   emitDiagnostic,
   projectDiagnosticFields
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/sdk/logger.ts
 function createConsoleLogger(_jobId) {

package/dist/{chunk-JNECYURT.js → chunk-D4FFS3IS.js}

@@ -1,6 +1,6 @@
 import {
   validateCurrency
-} from "./chunk-W3VGCNG6.js";
+} from "./chunk-LDKV4UHI.js";
 
 // src/sdk/pricing/upfront.ts
 function buildUpfront(input) {

package/dist/{chunk-VTHYQCDB.js → chunk-E7ZBCT5U.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/observability/payment-diagnostics.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-MMGSYMIC.js → chunk-EP7OVWI5.js}

@@ -1,6 +1,6 @@
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/lib/pg-retry.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-LDIPVPKI.js → chunk-FFRTAQUW.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/sdk/server/tempo-charge-store.ts
 import { Credential } from "mppx";

package/dist/chunk-H3GGFEE5.js

@@ -0,0 +1,57 @@
+// src/lib/cast-auth/canonical-json.ts
+function canonicalize(value) {
+  return JSON.stringify(sortDeep(value));
+}
+function canonicaliseForSigning(value) {
+  return new TextEncoder().encode(canonicalize(value));
+}
+function sortDeep(value) {
+  if (value === null) return null;
+  if (typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new TypeError(`canonicalize: non-finite number is not JSON-serialisable`);
+    }
+    return value;
+  }
+  if (Array.isArray(value)) return value.map(sortDeep);
+  if (typeof value === "object") {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      const v = value[key];
+      if (v === void 0) continue;
+      sorted[key] = sortDeep(v);
+    }
+    return sorted;
+  }
+  throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);
+}
+
+// src/lib/cast-auth/verify.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+function verifyCanonicalSignedRequest(payload, signatureHex, pubkeyHex) {
+  if (!/^[0-9a-f]{64}$/i.test(pubkeyHex) || !/^[0-9a-f]{128}$/i.test(signatureHex)) {
+    return false;
+  }
+  const data = canonicaliseForSigning(payload);
+  const signature = hexToBytes(signatureHex);
+  const pubkey = hexToBytes(pubkeyHex);
+  try {
+    return schnorr.verify(signature, data, pubkey);
+  } catch {
+    return false;
+  }
+}
+function hexToBytes(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) {
+    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return out;
+}
+
+export {
+  canonicalize,
+  canonicaliseForSigning,
+  verifyCanonicalSignedRequest
+};

package/dist/{chunk-M3T5JYDJ.js → chunk-HNXMWHLU.js}

@@ -7,7 +7,7 @@ import {
   extendDiagnosticIdentityAuthority,
   projectDiagnosticFields,
   projectSpanRow
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/observability/context.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-UKD3R2KU.js → chunk-HW2UCOOC.js}

@@ -1,3 +1,7 @@
+import {
+  canonicaliseForSigning
+} from "./chunk-H3GGFEE5.js";
+
 // src/sdk/types.ts
 function isZodSchema(value) {
   return typeof value === "object" && value !== null && "_zod" in value && "parse" in value && "safeParse" in value;
@@ -12,58 +16,6 @@ var DEFAULT_CREDIT_MAX = "$5.00";
 var DEFAULT_CREDIT_TTL_SECONDS = 30 * 24 * 60 * 60;
 var DEFAULT_JOB_RETENTION_DAYS = 730;
 
-// src/lib/cast-auth/canonical-json.ts
-function canonicalize(value) {
-  return JSON.stringify(sortDeep(value));
-}
-function canonicaliseForSigning(value) {
-  return new TextEncoder().encode(canonicalize(value));
-}
-function sortDeep(value) {
-  if (value === null) return null;
-  if (typeof value === "string" || typeof value === "boolean") return value;
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) {
-      throw new TypeError(`canonicalize: non-finite number is not JSON-serialisable`);
-    }
-    return value;
-  }
-  if (Array.isArray(value)) return value.map(sortDeep);
-  if (typeof value === "object") {
-    const sorted = {};
-    for (const key of Object.keys(value).sort()) {
-      const v = value[key];
-      if (v === void 0) continue;
-      sorted[key] = sortDeep(v);
-    }
-    return sorted;
-  }
-  throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);
-}
-
-// src/lib/cast-auth/verify.ts
-import { schnorr } from "@noble/curves/secp256k1.js";
-function verifyCanonicalSignedRequest(payload, signatureHex, pubkeyHex) {
-  if (!/^[0-9a-f]{64}$/i.test(pubkeyHex) || !/^[0-9a-f]{128}$/i.test(signatureHex)) {
-    return false;
-  }
-  const data = canonicaliseForSigning(payload);
-  const signature = hexToBytes(signatureHex);
-  const pubkey = hexToBytes(pubkeyHex);
-  try {
-    return schnorr.verify(signature, data, pubkey);
-  } catch {
-    return false;
-  }
-}
-function hexToBytes(hex) {
-  const out = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return out;
-}
-
 // src/lib/signed-request-statement.ts
 var SIGNED_REQUEST_AUTH_ID = "secp256k1-schnorr-v2";
 var SIGNED_REQUEST_STATEMENT_VERSION = 2;
@@ -129,9 +81,6 @@ export {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_TTL_SECONDS,
   DEFAULT_JOB_RETENTION_DAYS,
-  canonicalize,
-  canonicaliseForSigning,
-  verifyCanonicalSignedRequest,
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader,

package/dist/{chunk-FFXXGCVG.js → chunk-ITRSITFP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   diagnosticConsole
-} from "./chunk-QGNXYVBO.js";
+} from "./chunk-Z4FOPROB.js";
 
 // src/sdk/server/payout-reporter.ts
 import { createHash, randomUUID } from "crypto";