@dvmkit/sdk 0.14.2 → 0.15.0

package/dist/{chunk-FL6Q3JNJ.js → chunk-KVKJ7R5V.js}

@@ -26,6 +26,7 @@ function toJobRecord(job) {
     awaitingInputAtMs: job.awaitingInputAtMs,
     messages: job.messages,
     seq: job.seq,
+    upfrontPayment: job.upfrontPayment,
     paidMsats: job.paidMsats,
     paymentMint: job.paymentMint,
     paymentRail: job.paymentRail,
@@ -77,6 +78,7 @@ function fromJobRecord(record) {
     awaitingInputAtMs: record.awaitingInputAtMs,
     messages: [...record.messages],
     seq: record.seq,
+    upfrontPayment: record.upfrontPayment,
     paidMsats: record.paidMsats,
     paymentMint: record.paymentMint,
     paymentRail: record.paymentRail,
@@ -163,7 +165,51 @@ function providerMessage(job, type, content) {
   }
   job.messageAppender?.(msg, type === "prompt" ? { awaitingInput: job.status === "awaiting-input" } : void 0);
 }
+var historyHolds = /* @__PURE__ */ new WeakMap();
+var heldNotifications = /* @__PURE__ */ new WeakMap();
+function holdJobHistory(job, seq) {
+  let holds = historyHolds.get(job);
+  if (!holds) {
+    holds = /* @__PURE__ */ new Set();
+    historyHolds.set(job, holds);
+  }
+  holds.add(seq);
+}
+function visibleJobMessages(job) {
+  const holds = historyHolds.get(job);
+  if (!holds?.size) return job.messages;
+  const boundary = Math.min(...holds);
+  return job.messages.filter((message) => message.seq < boundary);
+}
+function releaseJobHistory(job, seq, accepted) {
+  const holds = historyHolds.get(job);
+  const wasPending = holds?.delete(seq);
+  if (accepted && wasPending) {
+    const next = job.messages.findIndex((existing) => existing.seq > accepted.seq);
+    job.messages.splice(next < 0 ? job.messages.length : next, 0, accepted);
+    const queued = heldNotifications.get(job) ?? [];
+    queued.push(accepted);
+    heldNotifications.set(job, queued);
+  }
+  flushJobHistory(job);
+}
+function flushJobHistory(job) {
+  const holds = historyHolds.get(job);
+  const boundary = holds?.size ? Math.min(...holds) : Infinity;
+  const queued = heldNotifications.get(job) ?? [];
+  queued.sort((a, b) => a.seq - b.seq);
+  heldNotifications.set(job, queued.filter((message) => message.seq >= boundary));
+  for (const message of queued) {
+    if (message.seq < boundary) {
+      for (const listener of job.listeners) listener(message);
+    }
+  }
+}
 function localMessage(job, from, type, content) {
+  if (type === "cancel" || type === "complete") {
+    historyHolds.get(job)?.clear();
+    flushJobHistory(job);
+  }
   job.seq++;
   const msg = {
     seq: job.seq,
@@ -173,8 +219,13 @@ function localMessage(job, from, type, content) {
     content
   };
   job.messages.push(msg);
-  for (const listener of job.listeners) {
-    listener(msg);
+  const holds = historyHolds.get(job);
+  if (holds?.size && msg.seq >= Math.min(...holds)) {
+    const queued = heldNotifications.get(job) ?? [];
+    queued.push(msg);
+    heldNotifications.set(job, queued);
+  } else {
+    for (const listener of job.listeners) listener(msg);
   }
   return msg;
 }
@@ -270,6 +321,9 @@ export {
   abortJob,
   JobCancelledError,
   providerMessage,
+  holdJobHistory,
+  visibleJobMessages,
+  releaseJobHistory,
   localMessage,
   isTerminal,
   isYieldMessage,

package/dist/{chunk-R3FSW66G.js → chunk-PKLNMMKF.js}

@@ -4,7 +4,7 @@ import {
   callerDeadline,
   hasCallerDeadline,
   isTerminal
-} from "./chunk-FL6Q3JNJ.js";
+} from "./chunk-KVKJ7R5V.js";
 import {
   redactUrl
 } from "./chunk-FUJ36YDV.js";
@@ -116,7 +116,10 @@ var MemoryJobStore = class {
       return Promise.resolve();
     }
     const snapshot = structuredClone(record);
-    if (existing) snapshot.createdAt = existing.createdAt;
+    if (existing) {
+      snapshot.createdAt = existing.createdAt;
+      snapshot.upfrontPayment = structuredClone(existing.upfrontPayment);
+    }
     if (existing && isTerminal(existing.status)) snapshot.lastActivityAt = existing.lastActivityAt;
     if (existing?.receipt) snapshot.receipt = existing.receipt;
     snapshot.timingKnown = existing ? existing.timingKnown ?? false : record.timingKnown ?? true;
@@ -125,6 +128,7 @@ var MemoryJobStore = class {
     const cur = this.nextSeq.get(record.id) ?? 1;
     this.nextSeq.set(record.id, Math.max(cur, record.seq + 1));
     if (isTerminal(record.status)) {
+      this.notify(record.id);
       this.messages.delete(record.id);
     }
     return Promise.resolve();
@@ -236,7 +240,7 @@ var MemoryJobStore = class {
     }
     if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     if (seq > record.seq) record.seq = seq;
-    this.notify(jobId, fullMessage);
+    this.notify(jobId);
     return Promise.resolve(seq);
   }
   recordInbound(jobId, message) {
@@ -297,7 +301,7 @@ var MemoryJobStore = class {
       }
     }
     if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
-    this.notify(jobId, stored.message);
+    this.notify(jobId);
     return Promise.resolve({
       counters: snapshotCounters(record),
       alreadyVerified: false,
@@ -318,6 +322,7 @@ var MemoryJobStore = class {
     const stored = this.messagesFor(jobId).find((m) => m.message.seq === seq);
     if (stored?.status === "pending-verification") {
       stored.status = "failed-verify";
+      this.notify(jobId);
     }
     return Promise.resolve();
   }
@@ -408,11 +413,8 @@ var MemoryJobStore = class {
       if (subSet.size === 0) this.notifySubscribers.delete(jobId);
     });
   }
-  getMessages(jobId, afterSeq) {
-    const stored = this.messagesFor(jobId);
-    return Promise.resolve(
-      stored.filter((m) => m.status === "verified" && m.message.seq > afterSeq).map((m) => m.message)
-    );
+  getMessages(jobId, afterSeq, options) {
+    return Promise.resolve(this.visibleMessages(jobId, afterSeq, options?.includeHeld));
   }
   initStreaming() {
     return Promise.resolve();
@@ -458,7 +460,7 @@ var MemoryJobStore = class {
     record.messages = [...terminalMessages, cancelMsg];
     record.seq = seq;
     record.lastActivityAt = Date.now();
-    this.notify(jobId, cancelMsg);
+    this.notify(jobId);
     this.messages.delete(jobId);
     return Promise.resolve(true);
   }
@@ -475,11 +477,35 @@ var MemoryJobStore = class {
     }
     return list;
   }
-  notify(jobId, message) {
+  visibleMessages(jobId, afterSeq, includeHeld = false) {
+    const stored = this.messagesFor(jobId);
+    const record = this.data.get(jobId);
+    const terminal = record && isTerminal(record.status);
+    const terminalMessage = stored.some((entry) => entry.status === "verified" && entry.message.from === "provider" && (entry.message.type === "complete" || entry.message.type === "cancel"));
+    let boundary = Infinity;
+    if (!includeHeld && !terminal && !terminalMessage) {
+      for (const entry of stored) {
+        if (entry.status === "pending-verification" && entry.message.type === "payment") {
+          boundary = Math.min(boundary, entry.message.seq);
+        }
+      }
+    }
+    const messages = /* @__PURE__ */ new Map();
+    if (terminal) {
+      for (const message of record.messages) if (message.seq > afterSeq) messages.set(message.seq, message);
+    }
+    for (const entry of stored) {
+      if (entry.status === "verified" && entry.message.seq > afterSeq && entry.message.seq < boundary) {
+        messages.set(entry.message.seq, entry.message);
+      }
+    }
+    return [...messages.values()].sort((a, b) => a.seq - b.seq);
+  }
+  notify(jobId) {
     const subs = this.messageSubscribers.get(jobId);
     if (subs) {
       for (const sub of subs) {
-        if (message.seq > sub.afterSeq) {
+        for (const message of this.visibleMessages(jobId, sub.afterSeq)) {
           sub.afterSeq = message.seq;
           sub.cb(message);
         }

package/dist/{chunk-PJAKJD2U.js → chunk-YMMCRQ2H.js}

@@ -3,7 +3,7 @@ import {
   applyContentHoldMutation,
   callerDeadline,
   hasCallerDeadline
-} from "./chunk-FL6Q3JNJ.js";
+} from "./chunk-KVKJ7R5V.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
@@ -263,6 +263,7 @@ var PostgresJobStore = class {
       -- with a fund-and-draw response. INSERT-only for replay stability.
       ALTER TABLE jobs ADD COLUMN IF NOT EXISTS funding_receipt JSONB;
       ALTER TABLE jobs ADD COLUMN IF NOT EXISTS funding_credit JSONB;
+      ALTER TABLE jobs ADD COLUMN IF NOT EXISTS upfront_payment JSONB;
       -- the outstanding mid-job ask, denominated in fiat micro at the
       -- instant it was emitted. The top-up's ledger leg funds and grows the
       -- draw in this figure, so it must not move with the BTC/USD rate between
@@ -550,8 +551,8 @@ var PostgresJobStore = class {
         last_activity_at, next_seq, requester_token_hash, requester_token,
         request_fingerprint, requester_pubkey, request_id, credit_id, draw_id,
         pending_payment_fiat_micro, pending_payment_fiat_currency, auth_request_path,
-        funding_receipt, funding_credit, dvm_id, terminal_at_ms, caller_wait_ms, awaiting_input_at_ms, ended_by, timing_known
-      ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28,$29,$30,$31,$32,$33,$34,$35,$36,$37,$38,$39,$40,$41,$42,$43,$44,$45,$46,$47,$48,$49,$51)
+        funding_receipt, funding_credit, dvm_id, terminal_at_ms, caller_wait_ms, awaiting_input_at_ms, ended_by, timing_known, upfront_payment
+      ) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28,$29,$30,$31,$32,$33,$34,$35,$36,$37,$38,$39,$40,$41,$42,$43,$44,$45,$46,$47,$48,$49,$51,$52)
       ON CONFLICT (id) DO UPDATE SET
         terminal_at_ms = COALESCE(jobs.terminal_at_ms, EXCLUDED.terminal_at_ms),
         ended_by = CASE WHEN jobs.status IN ('completed', 'failed', 'cancelled') THEN jobs.ended_by ELSE EXCLUDED.ended_by END,
@@ -690,7 +691,8 @@ var PostgresJobStore = class {
         record.status === "awaiting-input" ? record.awaitingInputAtMs ?? now : null,
         isTerminalStatus(record.status) && record.status !== "completed" ? record.endedBy ?? "provider" : null,
         now,
-        record.timingKnown ?? true
+        record.timingKnown ?? true,
+        record.upfrontPayment ? JSON.stringify(record.upfrontPayment) : null
       ]
     );
     let rowCount;
@@ -729,6 +731,7 @@ var PostgresJobStore = class {
       return;
     }
     if (record.status === "completed" || record.status === "failed" || record.status === "cancelled") {
+      await this.pool.query("SELECT pg_notify('job_messages', $1)", [record.id]).catch(() => void 0);
       await this.deleteResolvedMessages(record.id).catch(() => void 0);
     }
   }
@@ -1197,7 +1200,11 @@ var PostgresJobStore = class {
   }
   async markInboundFailed(jobId, seq, _reason) {
     await this.pool.query(
-      "UPDATE job_messages SET status='failed-verify' WHERE job_id = $1 AND seq = $2 AND status = 'pending-verification'",
+      `WITH failed AS (
+         UPDATE job_messages SET status='failed-verify'
+         WHERE job_id = $1 AND seq = $2 AND status = 'pending-verification'
+         RETURNING job_id
+       ) SELECT pg_notify('job_messages', job_id) FROM failed`,
       [jobId, seq]
     );
   }
@@ -1316,10 +1323,24 @@ var PostgresJobStore = class {
       if (subSet.size === 0) this.notifySubscribers.delete(jobId);
     });
   }
-  async getMessages(jobId, afterSeq) {
+  async getMessages(jobId, afterSeq, options) {
     const { rows } = await this.pool.query(
-      "SELECT data FROM job_messages WHERE job_id = $1 AND seq > $2 AND status = 'verified' ORDER BY seq",
-      [jobId, afterSeq]
+      `WITH terminal AS (
+         SELECT messages FROM jobs WHERE id = $1 AND status IN ('completed', 'failed', 'cancelled')
+       ), history AS (
+         SELECT seq, data, 0 AS origin FROM job_messages
+         WHERE job_id = $1 AND seq > $2 AND status = 'verified'
+           AND ($3::boolean OR EXISTS (SELECT 1 FROM terminal)
+             OR EXISTS (SELECT 1 FROM job_messages WHERE job_id = $1 AND status = 'verified'
+               AND data->>'from' = 'provider' AND data->>'type' IN ('complete', 'cancel'))
+             OR seq < COALESCE((SELECT MIN(seq) FROM job_messages
+               WHERE job_id = $1 AND status = 'pending-verification' AND data->>'type' = 'payment'), 9223372036854775807))
+         UNION ALL
+         SELECT (message->>'seq')::bigint, message, 1 AS origin
+         FROM terminal CROSS JOIN LATERAL jsonb_array_elements(terminal.messages) AS snapshot(message)
+         WHERE (message->>'seq')::bigint > $2
+       ) SELECT DISTINCT ON (seq) data FROM history ORDER BY seq, origin`,
+      [jobId, afterSeq, options?.includeHeld ?? false]
     );
     return rows.map((r) => typeof r.data === "string" ? JSON.parse(r.data) : r.data);
   }
@@ -1547,6 +1568,7 @@ function rowToRecord(row) {
     summary: row.summary,
     messages: row.messages,
     seq: row.seq,
+    upfrontPayment: row.upfront_payment ?? void 0,
     paidMsats: Number(row.paid_msats),
     paymentMint: row.payment_mint,
     paymentRail: row.payment_rail ?? void 0,

package/dist/{chunk-VG74TVFF.js → chunk-ZJRGORJ3.js}

@@ -20,7 +20,7 @@ import {
 } from "./chunk-33J3NQDZ.js";
 import {
   PostgresJobStore
-} from "./chunk-PJAKJD2U.js";
+} from "./chunk-YMMCRQ2H.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SignedRequestError,
@@ -37,7 +37,7 @@ import {
   isJobRetentionStore,
   isReceiptIssuingStore,
   isStreamableJobStore
-} from "./chunk-R3FSW66G.js";
+} from "./chunk-PKLNMMKF.js";
 import {
   ContentHoldError,
   JobCancelledError,
@@ -47,13 +47,16 @@ import {
   contentMetadata,
   fromJobRecord,
   hasCallerDeadline,
+  holdJobHistory,
   isContentHoldStore,
   isTerminal,
   isYieldMessage,
   localMessage,
   providerMessage,
-  toJobRecord
-} from "./chunk-FL6Q3JNJ.js";
+  releaseJobHistory,
+  toJobRecord,
+  visibleJobMessages
+} from "./chunk-KVKJ7R5V.js";
 import {
   ADMIN_AUTH_CLOCK_SKEW_SECONDS,
   ADMIN_AUTH_NONCE_TTL_SECONDS,
@@ -3183,6 +3186,26 @@ function isRecord(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 
+// src/sdk/server/upfront-payment.ts
+function upfrontPaymentFromDraw(draw) {
+  const value = draw.railValue;
+  const rail = value.rail;
+  return {
+    amount_msats: value.drawMsats,
+    ...value.creditCurrency !== null && {
+      amount_micro: draw.amountMicro,
+      currency: value.creditCurrency
+    },
+    ...rail === "cashu" || rail === "x402" || rail === "tempo" || rail === "lightning" ? { rail } : {},
+    ...value.drawNative !== null && value.nativeAsset !== null && {
+      native_amount: value.drawNative,
+      native_asset: value.nativeAsset
+    },
+    credit_id: draw.creditId,
+    draw_id: draw.drawId
+  };
+}
+
 // src/sdk/server/payment-diagnostics.ts
 import { Errors } from "mppx";
 function paymentFailureFields(error) {
@@ -3562,7 +3585,18 @@ async function issueUpfrontChallenges(mpp, requiredMsats, resourcePath, btcUsdRa
   );
 }
 async function verifyUpfrontPayment(opts) {
-  return withPaymentDiagnostics(() => verifyUpfrontPaymentInScope(opts));
+  const result = await withPaymentDiagnostics(() => verifyUpfrontPaymentInScope(opts));
+  if (!result.error && !result.replayedDraw && !result.upfrontPayment && !opts.fundOnly) {
+    result.upfrontPayment = {
+      amount_msats: result.paidMsats,
+      ...result.paymentRail && { rail: result.paymentRail },
+      ...result.nativeAmount !== void 0 && result.nativeAsset !== void 0 && {
+        native_amount: result.nativeAmount,
+        native_asset: result.nativeAsset
+      }
+    };
+  }
+  return result;
 }
 async function verifyUpfrontPaymentInScope(opts) {
   const {
@@ -4330,7 +4364,8 @@ async function verifyUpfrontPaymentInScope(opts) {
         creditId: draw.creditId,
         drawId: draw.drawId,
         drawAmountMicro: draw.amountMicro,
-        creditCurrency: ledgerCtx.priceFiat.currency
+        creditCurrency: ledgerCtx.priceFiat.currency,
+        upfrontPayment: upfrontPaymentFromDraw(draw)
       };
     } catch (err) {
       if (err instanceof CreditLedgerError) return creditLedgerErrorResult(err, x402Requirements);
@@ -5157,7 +5192,9 @@ async function verifyIncomingPaymentInScope(body, opts, snapshot) {
       };
     }
   }
-  return {};
+  return { error: { status: 402, body: paymentErrorBody("payment_invalid", {
+    message: "Payment method is not configured"
+  }) } };
 }
 function midJobFundedMsats(snapshot, railMsats) {
   const pending = snapshot.pendingPaymentMsats ?? 0;
@@ -5966,7 +6003,8 @@ function withDrawBasis(info, ctx, committed) {
   const withDraw = {
     ...base2,
     drawId,
-    drawAmountMicro: draw.amountMicro
+    drawAmountMicro: draw.amountMicro,
+    ...!ctx.midJob && !ctx.fundOnly && { upfrontPayment: upfrontPaymentFromDraw(draw) }
   };
   if (!ctx.drawBasis) return withDraw;
   const { drawMsats, drawNative } = committed.added ?? draw.railValue;
@@ -13474,6 +13512,7 @@ var JobManager = class {
   // Bind live resolvers and recovery scaffolds to the store-allocated ask identity.
   paymentAskSeqs = /* @__PURE__ */ new WeakMap();
   reactivationAskSeqs = /* @__PURE__ */ new WeakMap();
+  pendingPaymentMessages = /* @__PURE__ */ new WeakMap();
   // Every local input resume holds this queue through its durable wait update.
   // A prompt response and a payment NOTIFY must not mistake each other for a
   // different machine's successful claim.
@@ -13799,6 +13838,7 @@ var JobManager = class {
       status: "processing",
       messages: [],
       seq: 0,
+      upfrontPayment: payment.upfrontPayment ? structuredClone(payment.upfrontPayment) : void 0,
       paidMsats: payment.paidMsats,
       paymentMint: payment.paymentMint,
       paymentRail: payment.paymentRail,
@@ -14050,7 +14090,7 @@ var JobManager = class {
     if (await this.adoptDurableTerminal(job)) return;
     const record = toJobRecord(job);
     if (isTerminal(job.status) && isStreamableJobStore(this.jobStore)) {
-      const durable = await this.jobStore.getMessages(job.id, 0);
+      const durable = await this.jobStore.getMessages(job.id, 0, { includeHeld: true });
       if (durable.length >= record.messages.length) {
         record.messages = durable;
         const highSeq = durable.length ? durable[durable.length - 1].seq : record.seq;
@@ -15139,8 +15179,9 @@ var JobManager = class {
     }
   }
   /**
-   * Record an inbound client message durably via Tx B and append
-   * it to the in-memory `job.messages` array. Returns the DB-allocated seq
+   * Record an inbound client message durably via Tx B. Payments stay outside
+   * visible history until processPayment accepts them; other messages append
+   * to `job.messages` immediately. Returns the DB-allocated seq
    * (`null` when the store isn't streamable — non-Postgres test fallback).
    *
    * Status starts as `pending-verification`; a follow-up Tx C call
@@ -15159,13 +15200,24 @@ var JobManager = class {
       });
     }
     job.seq++;
-    job.messages.push({
+    const message = {
       seq: job.seq,
       from: "requester",
       timestamp,
       type: msgType,
       content: msgContent
-    });
+    };
+    if (msgType === "payment") {
+      let pending = this.pendingPaymentMessages.get(job);
+      if (!pending) {
+        pending = /* @__PURE__ */ new Map();
+        this.pendingPaymentMessages.set(job, pending);
+      }
+      pending.set(txSeq ?? msgContent, message);
+      holdJobHistory(job, message.seq);
+    } else {
+      job.messages.push(message);
+    }
     job.lastActivityAt = Date.now();
     return txSeq;
   }
@@ -15274,6 +15326,22 @@ var JobManager = class {
    * 500. See `creditInbound`.
    */
   async processPayment(job, body, inboundSeq, extra) {
+    const pending = this.pendingPaymentMessages.get(job);
+    const key = inboundSeq ?? body.content;
+    const message = pending?.get(key);
+    let accepted;
+    try {
+      const outcome = await this.processPaymentAndCredit(job, body, inboundSeq, extra);
+      if (!outcome.error && message && pending?.get(key) === message) {
+        accepted = message;
+      }
+      return outcome;
+    } finally {
+      pending?.delete(key);
+      if (message) releaseJobHistory(job, message.seq, accepted);
+    }
+  }
+  async processPaymentAndCredit(job, body, inboundSeq, extra) {
     if (body.type !== "payment") return {};
     const devAuto = this.opts.devMode === true && body.content.dev_auto === true && !hasPaymentProof(body.content);
     if (devAuto || devModeSkipsPaymentVerification(this.opts)) {
@@ -15358,7 +15426,7 @@ var JobManager = class {
       };
     }
     const info = verifyResult.verified;
-    if (!info) return {};
+    if (!info) return { error: { status: 402, body: { error: "payment_invalid", message: "Payment was not accepted" } } };
     const drawFundingReceipt = await this.drawFundingReceiptFor(info.drawFunding, info.funding?.currency);
     let unappliedCredit;
     const fullyUnapplied = info.unappliedMicro !== void 0 && info.funding !== void 0 && info.unappliedMicro >= info.funding.amountMicro;
@@ -23610,14 +23678,21 @@ var DVMServer = class {
     const job = this.jobManager.activeJobs.get(id);
     const after = Number(c.req.query("after") ?? "0");
     const accept = c.req.header("Accept") ?? "";
-    if (!job) {
-      const store = this.jobManager.store;
+    const store = this.jobManager.store;
+    if (job && !isJobOwner(c, job)) return c.json({ error: "Job not found" }, 404);
+    if (!job || isStreamableJobStore(store)) {
+      if (job) await job.messageAppenderTail;
       const record = await store.get(id);
       if (!record) return c.json({ error: "Job not found" }, 404);
       if (!isJobOwner(c, record)) return c.json({ error: "Job not found" }, 404);
-      const filtered = record.messages.filter((m) => m.seq > after);
+      const terminal = isTerminal(record.status) || job !== void 0 && isTerminal(job.status);
+      let filtered = record.messages.filter((m) => m.seq > after);
+      if (isStreamableJobStore(store)) {
+        const durable = await store.getMessages(id, after, { includeHeld: terminal });
+        if (durable.length > 0 || !terminal) filtered = durable;
+      }
       if (accept.includes("text/event-stream")) {
-        if (isStreamableJobStore(store) && !isTerminal(record.status)) {
+        if (isStreamableJobStore(store) && !terminal) {
           return streamSSE(c, async (stream) => {
             let unsubFn;
             await new Promise((resolve) => {
@@ -23680,10 +23755,6 @@ var DVMServer = class {
           }
         });
       }
-      if (isStreamableJobStore(store) && !isTerminal(record.status)) {
-        const msgs = await store.getMessages(id, after);
-        if (msgs.length > 0) return c.json(await this.messageFields(record, msgs));
-      }
       return c.json(await this.messageFields(record, filtered));
     }
     if (!isJobOwner(c, job)) return c.json({ error: "Job not found" }, 404);
@@ -23691,7 +23762,7 @@ var DVMServer = class {
       const fields = await this.contentFields(job);
       return streamSSE(c, async (stream) => {
         if (fields.content_available === false) return;
-        const existing = job.messages.filter((m) => m.seq > after);
+        const existing = visibleJobMessages(job).filter((m) => m.seq > after);
         let yielded = false;
         for (const msg of existing) {
           await stream.writeSSE({ data: JSON.stringify(msg), event: "message" });
@@ -23719,7 +23790,7 @@ var DVMServer = class {
         });
       });
     }
-    return c.json(await this.messageFields(job, job.messages.filter((m) => m.seq > after)));
+    return c.json(await this.messageFields(job, visibleJobMessages(job).filter((m) => m.seq > after)));
   }
   jobNotActiveResponse(c) {
     return c.json(
@@ -24095,6 +24166,7 @@ function recordedDrawPayment(draw, opts) {
     ...rail === "cashu" ? { cashuFlow: "p2pk_accumulator" } : {},
     creditId: draw.creditId,
     drawId: draw.drawId,
+    upfrontPayment: upfrontPaymentFromDraw(draw),
     drawAmountMicro: draw.amountMicro,
     ...draw.railValue.creditCurrency ? { creditCurrency: draw.railValue.creditCurrency } : {}
   };
@@ -24180,6 +24252,7 @@ function removeUnavailableContent(fields) {
 }
 function terminalResponseFields(job) {
   const fields = {};
+  if (job.upfrontPayment !== void 0) fields.upfront_payment = job.upfrontPayment;
   if (job.status === "completed") {
     if (job.summary !== void 0) fields.summary = job.summary;
     const artifactCount = job.messages.filter((m) => m.type === "artifact").length;

package/dist/{content-retention-DA2mlW31.d.ts → content-retention-BASsjgKw.d.ts}

@@ -1,4 +1,4 @@
-import { b as JobStore, J as JobRecord } from './job-store-AxjHh5Gp.js';
+import { b as JobStore, J as JobRecord } from './job-store-CA7u1nHV.js';
 
 /** Authenticated caller metadata; omitted fields on older services mean unknown. */
 interface JobContentMetadata {

package/dist/{credit-menu-BXHL3jHA.d.ts → credit-menu-B239nIY5.d.ts}

@@ -1,11 +1,11 @@
-import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-C5_GKiKR.js';
-import { co as HostingCleanupFence, d9 as HostedIntent, ak as FundingMethod, p as PaymentMethod, bU as CreditLedgerLike, a6 as Message, a0 as FundingReceipt, bW as CreditSnapshot, a1 as JobReceipt, S as SDKJobContext, ay as StepCache, v as ResponseContent, P as PaymentContent, a2 as MessageType, bp as X402Receipt, aH as X402Config, bo as X402ExactVersionSupport, da as X402SettlementIntent, ac as PaymentRequirementsV2, db as HostedFundingReservation, bQ as CreditLedgerQuerier, dc as X402SettlementCursor, b_ as X402SettlementStatus, dd as X402SettlementWriteOff, bV as X402RefundSettlementGate, de as X402FacilitatorAuth, df as X402BatchSettlementConfig, cL as PostgresX402ChannelStorage, dg as X402PayoutObserver, bS as HostedSettlementReportObligations, bs as CreditDepositPayload, bx as MppxServer, af as CashuMode, dh as CreditDepositEnqueue, di as X402SettlementReconciliationReason, ar as PaymentRequirements, c2 as FundingRecord, a4 as MppxCredential, bZ as DrawResult, cy as CreditLedgerError, a8 as ReceiptCredit, ah as DrainReceiptEvent, a9 as DrainReceipt, $ as DrawFundingReceipt, K as KVStore, z as SignedRequestAudience, dj as CreditDrawReleaseEnqueue, cJ as JobCostReportPayload, cK as JobTerminalReportPayload, cN as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c4 as CreditInvoiceRecord, c5 as InvoiceSettlement, cs as ClientCompatibilityGate, cq as ClientCompatibility, bB as PostgresTempoSessionStore, bA as PayoutReporter, R as ResolvedCreditConfig, h as CreditView } from './step-cache-MA3hpa7F.js';
+import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-BOcopzXk.js';
+import { cp as HostingCleanupFence, da as HostedIntent, al as FundingMethod, p as PaymentMethod, bV as CreditLedgerLike, a7 as Message, O as UpfrontPayment, a1 as FundingReceipt, bX as CreditSnapshot, a2 as JobReceipt, S as SDKJobContext, az as StepCache, v as ResponseContent, P as PaymentContent, a3 as MessageType, bq as X402Receipt, aI as X402Config, bp as X402ExactVersionSupport, db as X402SettlementIntent, ad as PaymentRequirementsV2, dc as HostedFundingReservation, bR as CreditLedgerQuerier, dd as X402SettlementCursor, b$ as X402SettlementStatus, de as X402SettlementWriteOff, bW as X402RefundSettlementGate, df as X402FacilitatorAuth, dg as X402BatchSettlementConfig, cM as PostgresX402ChannelStorage, dh as X402PayoutObserver, bT as HostedSettlementReportObligations, bt as CreditDepositPayload, by as MppxServer, ag as CashuMode, di as CreditDepositEnqueue, dj as X402SettlementReconciliationReason, as as PaymentRequirements, c3 as FundingRecord, a5 as MppxCredential, b_ as DrawResult, cz as CreditLedgerError, a9 as ReceiptCredit, ai as DrainReceiptEvent, aa as DrainReceipt, a0 as DrawFundingReceipt, K as KVStore, z as SignedRequestAudience, dk as CreditDrawReleaseEnqueue, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cO as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, ct as ClientCompatibilityGate, cr as ClientCompatibility, bC as PostgresTempoSessionStore, bB as PayoutReporter, R as ResolvedCreditConfig, h as CreditView } from './step-cache-BCRHimiY.js';
 import { ProofLike, SerializedDLEQ, Proof } from '@cashu/cashu-ts';
 import { Hono, Context } from 'hono';
 import { Pool } from 'pg';
-import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-UnO-P6Cj.js';
+import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-BmvWGISH.js';
 import { Store, Challenge } from 'mppx';
-import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-AxjHh5Gp.js';
+import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-CA7u1nHV.js';
 import { SettleResponse, SupportedResponse } from '@x402/core/types';
 import { Channel, AutoSettlementConfig } from '@x402/evm/batch-settlement/server';
 import { FacilitatorClient } from '@x402/core/server';
@@ -477,6 +477,8 @@ interface ServerJob {
     summary?: string;
     messages: Message[];
     seq: number;
+    /** Original acceptance snapshot; absent for historical records. INSERT-only. */
+    upfrontPayment?: UpfrontPayment;
     paidMsats: number;
     paymentMint?: string;
     /** Rail of the most recent successful credit. Set on each credit branch in payment processing. */
@@ -1750,6 +1752,8 @@ interface CreateX402BatchSettlementServerOpts {
 declare function createX402BatchSettlementServer(opts: CreateX402BatchSettlementServerOpts): Promise<X402BatchSettlementServer>;
 
 interface PaymentInfo {
+    /** Immutable acceptance fact, separate from cumulative job accounting. */
+    upfrontPayment?: UpfrontPayment;
     /**
      * Rail value this payment contributes to the job, in millisatoshis.
      *
@@ -2977,6 +2981,7 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
     private readonly statusChecksQueued;
     private readonly paymentAskSeqs;
     private readonly reactivationAskSeqs;
+    private readonly pendingPaymentMessages;
     private readonly inputResumeTails;
     private readonly claimedPaymentResumes;
     private readonly sessionId;
@@ -3476,8 +3481,9 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
      */
     claimAwaitingInputForReactivation(jobId: string): Promise<boolean>;
     /**
-     * Record an inbound client message durably via Tx B and append
-     * it to the in-memory `job.messages` array. Returns the DB-allocated seq
+     * Record an inbound client message durably via Tx B. Payments stay outside
+     * visible history until processPayment accepts them; other messages append
+     * to `job.messages` immediately. Returns the DB-allocated seq
      * (`null` when the store isn't streamable — non-Postgres test fallback).
      *
      * Status starts as `pending-verification`; a follow-up Tx C call
@@ -3555,6 +3561,7 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
         lockPubkeys?: LockPubkey[];
         mintHealthTracker?: MintHealthTracker;
     }): Promise<ProcessPaymentOutcome>;
+    private processPaymentAndCredit;
     /** Issue (or reuse) the signed draw funding receipt for a committed funding row; never throws. */
     private drawFundingReceiptFor;
     /**

package/dist/{fx-UnO-P6Cj.d.ts → fx-BmvWGISH.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-MA3hpa7F.js';
+import { C as Currency } from './step-cache-BCRHimiY.js';
 
 /**
  * Quote-time FX snapshot. `rates` maps configured lowercase currency codes to

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-MA3hpa7F.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CreateSignedRequestVerifierOpts, g as CreditConfig, h as CreditView, i as DEFAULT_CREDIT_MAX, j as DEFAULT_CREDIT_MIN, k as DEFAULT_CREDIT_TTL_SECONDS, l as DEFAULT_JOB_RETENTION_DAYS, m as DVMRouteContext, I as IncomingMessage, n as InputType, o as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as createSignedRequestVerifier, T as isZodSchema, V as signedRequestStatementHeader, W as validateCurrency } from './step-cache-MA3hpa7F.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-UnO-P6Cj.js';
-export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-CLGrKw9p.js';
-export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-AxjHh5Gp.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-BCRHimiY.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CreateSignedRequestVerifierOpts, g as CreditConfig, h as CreditView, i as DEFAULT_CREDIT_MAX, j as DEFAULT_CREDIT_MIN, k as DEFAULT_CREDIT_TTL_SECONDS, l as DEFAULT_JOB_RETENTION_DAYS, m as DVMRouteContext, I as IncomingMessage, n as InputType, o as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as UpfrontPayment, T as createSignedRequestVerifier, V as isZodSchema, W as signedRequestStatementHeader, X as validateCurrency } from './step-cache-BCRHimiY.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-BmvWGISH.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-B8_WMfHT.js';
+export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-CA7u1nHV.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-dMooihtY.js';
 export { z } from 'zod';
 import 'hono';

package/dist/internal/caller.d.ts

@@ -1,16 +1,16 @@
-import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-C5_GKiKR.js';
-export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-C5_GKiKR.js';
+import { Y as JsonValue, B as SignedRequestDomain, M as SignedRequestStatementHeader, _ as X402_BATCH_SETTLEMENT_SCHEME, $ as X402_EXACT_SCHEME, a0 as DrawFundingReceipt, a1 as FundingReceipt, a2 as JobReceipt$1, O as UpfrontPayment, a3 as MessageType, a4 as X402Version, a5 as MppxCredential, z as SignedRequestAudience, a6 as PaymentRequired, a7 as Message, a8 as MppxChallenge, a9 as ReceiptCredit, aa as DrainReceipt, C as Currency, ab as X402Wallet, ac as PaymentRequirementsV1, ad as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-BCRHimiY.js';
+export { ae as BuildPaymentRequirementsOpts, af as CapabilityDescriptor, ag as CashuMode, ah as CompleteContent, ai as DrainReceiptEvent, aj as ExactEvmPayload, ak as ExactEvmPayloadAuthorization, al as FundingMethod, am as MessageFrom, an as PaymentPayload, ao as PaymentPayloadV1, ap as PaymentPayloadV2, aq as PaymentRequestContent, ar as PaymentRequiredV2, as as PaymentRequirements, at as PromptContent, au as RAIL_REFUNDABLE, av as ReceiptOutcome, aw as ReceiptPayment, ax as ResourceInfo, ay as SettleResponse, az as StepCache, aA as StepRecord, aB as TextContent, aC as UnsignedDrainReceipt, aD as UnsignedDrawFundingReceipt, aE as UnsignedFundingReceipt, aF as UnsignedJobReceipt, aG as VerifyResponse, aH as WorkingContent, aI as X402Config, aJ as X402ResponseBody, aK as X402SelfRelayRpcFailureReason, aL as X402_DEFAULT_NETWORK, aM as X402_V1_VERSION, aN as X402_VERSION, aO as buildPaymentRequiredV2, aP as buildPaymentRequirements, aQ as caip2ToX402Network, aR as canonicalRequestPath, aS as canonicaliseForSigning, aT as canonicalize, aU as chainIdFromCaip2, aV as computeResultHash, aW as decodePayment, aX as decodePaymentRequiredHeader, aY as encodePayment, aZ as encodePaymentRequiredHeader, a_ as encodeSettleResponseHeader, a$ as exactEvmAuthorization, b0 as isArtifactMessage, b1 as isCancelMessage, b2 as isCompleteMessage, b3 as isDrainReceipt, b4 as isDrawFundingReceipt, b5 as isFundingReceipt, b6 as isPaymentRequestMessage, b7 as isPromptMessage, b8 as isSignedJobReceipt, b9 as isTextMessage, ba as isWorkingMessage, bb as paymentRequiredV2FromV1, bc as signDrainReceipt, bd as signDrawFundingReceipt, be as signFundingReceipt, bf as signReceipt, bg as usdcContractByCaip2, bh as usdcContractFor, bi as usdcDomainNameFor, bj as usdcDomainVersionFor, bk as verifyDrainReceipt, bl as verifyDrawFundingReceipt, bm as verifyFundingReceipt, bn as verifyReceipt, bo as x402NetworkToCaip2 } from '../step-cache-BCRHimiY.js';
+import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-BOcopzXk.js';
+export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-BOcopzXk.js';
 import { ProofLike, MeltQuoteBolt11Response, Proof, Wallet, MintQuoteBolt11Response, MintPreview, CounterSource, CounterRange, SerializedDLEQ, OutputData, OutputDataLike } from '@cashu/cashu-ts';
 export { g as getWallet } from '../wallet-Dwjs5n_M.js';
-import { X as JsonValue, B as SignedRequestDomain, M as SignedRequestStatementHeader, Y as X402_BATCH_SETTLEMENT_SCHEME, _ as X402_EXACT_SCHEME, $ as DrawFundingReceipt, a0 as FundingReceipt, a1 as JobReceipt$1, a2 as MessageType, a3 as X402Version, a4 as MppxCredential, z as SignedRequestAudience, a5 as PaymentRequired, a6 as Message, a7 as MppxChallenge, a8 as ReceiptCredit, a9 as DrainReceipt, C as Currency, aa as X402Wallet, ab as PaymentRequirementsV1, ac as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-MA3hpa7F.js';
-export { ad as BuildPaymentRequirementsOpts, ae as CapabilityDescriptor, af as CashuMode, ag as CompleteContent, ah as DrainReceiptEvent, ai as ExactEvmPayload, aj as ExactEvmPayloadAuthorization, ak as FundingMethod, al as MessageFrom, am as PaymentPayload, an as PaymentPayloadV1, ao as PaymentPayloadV2, ap as PaymentRequestContent, aq as PaymentRequiredV2, ar as PaymentRequirements, as as PromptContent, at as RAIL_REFUNDABLE, au as ReceiptOutcome, av as ReceiptPayment, aw as ResourceInfo, ax as SettleResponse, ay as StepCache, az as StepRecord, aA as TextContent, aB as UnsignedDrainReceipt, aC as UnsignedDrawFundingReceipt, aD as UnsignedFundingReceipt, aE as UnsignedJobReceipt, aF as VerifyResponse, aG as WorkingContent, aH as X402Config, aI as X402ResponseBody, aJ as X402SelfRelayRpcFailureReason, aK as X402_DEFAULT_NETWORK, aL as X402_V1_VERSION, aM as X402_VERSION, aN as buildPaymentRequiredV2, aO as buildPaymentRequirements, aP as caip2ToX402Network, aQ as canonicalRequestPath, aR as canonicaliseForSigning, aS as canonicalize, aT as chainIdFromCaip2, aU as computeResultHash, aV as decodePayment, aW as decodePaymentRequiredHeader, aX as encodePayment, aY as encodePaymentRequiredHeader, aZ as encodeSettleResponseHeader, a_ as exactEvmAuthorization, a$ as isArtifactMessage, b0 as isCancelMessage, b1 as isCompleteMessage, b2 as isDrainReceipt, b3 as isDrawFundingReceipt, b4 as isFundingReceipt, b5 as isPaymentRequestMessage, b6 as isPromptMessage, b7 as isSignedJobReceipt, b8 as isTextMessage, b9 as isWorkingMessage, ba as paymentRequiredV2FromV1, bb as signDrainReceipt, bc as signDrawFundingReceipt, bd as signFundingReceipt, be as signReceipt, bf as usdcContractByCaip2, bg as usdcContractFor, bh as usdcDomainNameFor, bi as usdcDomainVersionFor, bj as verifyDrainReceipt, bk as verifyDrawFundingReceipt, bl as verifyFundingReceipt, bm as verifyReceipt, bn as x402NetworkToCaip2 } from '../step-cache-MA3hpa7F.js';
 import { SimplePool } from 'nostr-tools/pool';
 import { Session } from 'mppx/tempo';
 import { Pool } from 'pg';
 import { PaymentRequired as PaymentRequired$1 } from '@x402/core/types';
 import { ClientChannelStorage, BatchSettlementClientContext, BatchSettlementEvmScheme } from '@x402/evm/batch-settlement/client';
-export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-UnO-P6Cj.js';
-export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-CLGrKw9p.js';
+export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-BmvWGISH.js';
+export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-B8_WMfHT.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';
@@ -1346,6 +1346,8 @@ interface CreditOpResult {
  * response; that one is a single block inside it.
  */
 interface JobReceipt {
+    /** Original accepted payment/hold. Absent means unknown, never zero. */
+    upfrontPayment?: UpfrontPayment;
     jobId: string;
     status: "completed" | "processing" | "payment-required" | "failed" | "cancelled" | "awaiting-input";
     /** Tempo settlement transaction from the validated `Payment-Receipt` header. */
@@ -1421,6 +1423,8 @@ interface OutboundMessage {
     content: Record<string, unknown>;
 }
 interface JobStatus {
+    /** Original accepted payment/hold, unchanged by later payments or settlement. */
+    upfrontPayment?: UpfrontPayment;
     jobId: string;
     status: "processing" | "completed" | "failed" | "awaiting-input" | "cancelled";
     /** Human-readable summary of the completed job (one-liner; not the payload). Present when status is `completed`. */
@@ -6500,4 +6504,4 @@ declare class MemoryKVStore implements KVStore {
     list(prefix?: string): Promise<string[]>;
 }
 
-export { ADMIN_STATE_UNAVAILABLE, AGENT_MNEMONIC_FILE, type AgentProof, type AgentRecentSpend, type AgentWallet, type AttestedDvmIdentity, BTC_RATE_FILE, BUDGET_FILE, type BudgetCaps, type BudgetCheckResult, type BudgetLedger, type BudgetLedgerEntry, type BudgetSpendBreakdown, type BudgetSpendKind, type BudgetWindow, type BuilderLockKeypair, CAPABILITY_NAME_RE, COINGECKO_SIMPLE_PRICE_URL, CONFIG_AUDIT_FILE, CONFIG_BACKUP_FILE, CONFIG_DIR, CONFIG_FILE, CONFIG_PINNED_FILE, CREDITS_FILE, CREDIT_DRAIN_RAILS, CREDIT_FUNDING_MODES, CREDIT_FUND_RAILS, type CachedBtcRate, type CancelOptions, type CliIdentityEntry, type CoinGeckoBtcSpot, type CoinGeckoSpot, type CompletedCreditHistoryPage, type CompletedCreditHistoryQuery, type CompletedCreditHistoryRecord, type CompletedRefundHistoryRecord, type ConfigDirModeResult, CreatedInvoice, type CreditDrainRail, type CreditFundRail, type CreditFundingMode, type CreditMenu, type CreditOpResult, type CreditTerms, type CreditWire, DEFAULT_AGENT_MINT_URL, DIAGNOSTIC_CATALOGUE_VERSION, DbTransport, type DeliveredResult, type DescribeOptions, type DiagnosticCapabilityAuthority, type DiagnosticIdentityAuthority, DrainReceipt, type DrainReceiptChecks, type DrainReceiptVerifyResult, type DrainWire, DrawFundingReceipt, type DrawFundingReceiptChecks, type DrawFundingReceiptVerifyResult, type DrawFundingRejection, DvmError, DvmX402ChannelStorage, type ExpiredCreditLossHistoryRecord, FAVORITES_FILE, FEEDBACK_NUDGES_FILE, type FundValuation, FundingReceipt, type FundingReceiptChecks, type FundingReceiptVerifyResult, IDENTITIES_FILE, IDENTITIES_VERSION, type IdentitiesFile, InvoiceStatus, JOBS_FILE, JOB_IDENTITY_HEADER, type JobEnvelope, type JobIdentityHeaderResult, type JobPolicy, JobReceipt$1 as JobReceipt, type JobStatus, JsonValue, LightningBackend, type LightningFundingOffer, LightningPayment, LightningTransactionListOptions, LightningTransactionSnapshot, LightningWalletInfo, type LnAddressParts, MESSAGES_DIR, type MeltQuoteInfo, MemoryKVStore, Message, type MessagePollOptions, MessageType, type MnemonicValidationResult, MppxChallenge, MppxCredential, NwcBackend, type NwcConnection, NwcError, type NwcRequestOptions, type NwcTransaction, type OutboundMessage, PAIRINGS_DIR, PRIVKEY_HEX_RE, type PayInvoiceOutcome, type PayInvoiceReconcilingOptions, type PayInvoiceResult, type PayOutcome, type Payment, PaymentRequired, PaymentRequirementsV1, PaymentRequirementsV2, type PendingDrain, type PendingFunding, type PendingMelt, type PendingMint, type PendingMintMintingState, type PendingSubmission, type PendingSubmissionAcceptedUnresolved, type PendingSubmissionContext, type PendingTempoChargeFunding, type PendingX402ExactFunding, type PendingX402Funding, type PersistedOutputData, PersistentCounterSource, type ProviderInfo, type ProviderRef, type ProviderText, type Quote, RAIL_FLAGS, RECEIPTS_FILE, RECENT_SPENDS_CAP, RECOVERY_MNEMONIC_FILE, REQUEST_INTENTS_DIR, ROUTER_FEEDBACK_CLAIM_HEADER, ROUTER_FEEDBACK_CLAIM_TTL_MS, type Rail, type RailAsset, type RailFlag, type ReceiptChecks, ReceiptCredit, type ReceiptInvalidReason, type ReceiptKeypair, type ReceiptParseError, type ReceiptTrustAnchor, type ReceiptVerification, type ReceiptVerifyResult, type RecordDrawFundingResult, type RecordSpendOptions, type RpcSource, SPANS_INSERTED_CHANNEL, STABLECOIN_FUND_RAILS, SUPPORTED_PROTOCOL_VERSION, type SelectError, type SendMessageOptions, type SendMessageResult, type SpanProjectionResult, type SpanRow, type SpanTransport, SpanWriter, type StatusOptions, type StoredCredit, type StoredCreditX402Binding, type StoredDrawFunding, type StoredFundingMenuSnapshot, type StoredImplicitCredit, type StoredReceipt, type StoredSiblingCredit, type StoredX402ChannelConfig, type StoredX402ChannelMetadata, type StreamOptions, type StreamResult, type SubmitOptions, type SwapSendReserve, TEMPO_CHAIN_ID, TEMPO_CHANNELS_FILE, TEMPO_CHARGE_PENDING_STALE_MS, TEMPO_MODERATO_CHAIN_ID, TEMPO_MODERATO_RPC, TEMPO_PATH_USD_MODERATO, TEMPO_SESSION_UPDATED_REASON, type TempoAccount, type TempoChannelAssociation, type TempoChannelController, type TempoChannelDescriptor, type TempoChannelExitResult, type TempoChannelReconcileResult, type TempoChannelStoreContext, type TempoCredentialAccount, type TempoNetwork, type TempoSessionClientResolver, type Transport, type JobReceipt as TransportJobReceipt, type TrustAnchorRead, type V1InfoCapability, type V1InfoResponse, type VerifyJobReceiptArgs, WALLET_FILE, WALLET_VERSION, type WalletCredentialConfig, type WalletInfo, type X402Asset, type X402Balance, type X402BatchPayment, type X402ChannelChainReport, type X402ChannelClient, type X402ChannelReconciliation, type X402ConnectedWallet, type X402CreditFlavour, type X402CreditInstrument, X402EnvValidationError, type X402Network, type X402RefundArgs, type X402RefundOutcome, type X402RepinnedWallet, type X402UnobservedBalanceProvenance, X402Version, type X402VoucherPendingState, X402Wallet, X402_BATCH_CHANNEL_ABI, X402_BATCH_SETTLEMENT_KEY, X402_BATCH_SETTLEMENT_SCHEME, X402_CHANNELS_FILE, X402_DEFAULT_FACILITATOR, X402_EXACT_AUTHORIZATION_TTL_SECONDS, X402_EXACT_SCHEME, X402_NETWORKS, X402_PENDING_STALE_MS, X402_RECEIVER_AUTHORIZER_KEY, X402_REFUSAL_TRANSACTION_DISCOVERY_WINDOW_MS, X402_RPC_URL_KEY, X402_SELF_RELAY_KEY, acknowledgeReplayedX402Payment, acknowledgeX402ChannelOwner, advanceTempoChannelExit, appendBudgetSpend, appendFundingReceipt, appendReceipt, applyImplicitReceiptCredit, applyReceiptCredit, applyRetryToPool, asProviderText, asProviderTextOpt, assertAgentMnemonicReplaceable, assertNoRivalX402Voucher, assertSupportedX402Network, assertTempoSessionChallengeWithinAsk, assertTempoSessionDepositWithinCap, assertTempoSessionVoucherWithinAsk, assertX402ChannelPayer, assertX402RequirementDescribesChannel, attestedDvmIdentity, authenticatedBuilderPubkey, backupSecretFile, bindCashuTokenToSubmissionContext, bindDiagnosticCapabilityAuthority, bindDiagnosticIdentityAuthority, breakdownSince, buildAdminAuthHeader, buildAdminChallenge, builderLockPath, canReplaceExpiredX402Deposit, capFor, cashuSubmissionBindingFingerprint, cashuSubmissionBindingFromContext, checkBudgetForLedger, checkMeltQuoteState, checkReceiptAttestation, clearCreditSelection, clearPendingDrain, clearPendingFunding, clearPendingTempoChargeFunding, clearPendingX402ExactFunding, clearPendingX402Funding, clearRefillRailUnavailable, generateIdentity as cliIdentityStoreGenerateIdentity, computeSmartDenominations, costAnchor, coveringMintsForSpend, createDiagnosticCapabilityAuthority, createMintQuoteRetryState, createMonotonicClock, createNoopLogger, createStdoutLogger, createTempoChannelStore, createTempoCloseCredential, createTempoCreditSession, createTempoSessionPaymentFetch, createX402BatchPayment, currentContext, deleteAgentMnemonic, deriveAgentMasterKeypair, deriveAgentRefundSubkey, deriveAgentRefundSubkeyPubkey, deriveBuilderLockKeypair, deriveBuilderLockPubkey, deriveIdentityFromPrivkey, derivePubkeyFromPrivkey, deriveReceiptKeypair, deriveReceiptSecret, deriveTempoAddress, dvmLocationIdentity, effectiveFundingMint, effectiveMints, ensureAddress, ensureConfigDir, ensureConfigSubdir, ensureProvisionalCredit, entryKind, extendDiagnosticIdentityAuthority, fetchBtcUsdRate, fetchCoinGeckoBtcUsd, fetchCoinGeckoSpot, fetchLnurlPayInvoice, fetchMeltQuote, findX402Channel, forgetCredit, formatStaleness, formatUsd, formatUsdcMicrounits, fundWireAmountMicro, fundingModeForTempoIntent, fundingModeForX402Flavour, generateAgentMnemonic, generateEphemeralReceiptKey, generateX402PrivateKey, getBalance, getBalanceByMint, getInfo, getInputFeesForProofs, getLastKnownBtcRate, getTempoUsdcBalance, getX402Balance, hashedCanonicalDvmId, identitiesFileExists, initLoggers, insertSpanBatch, isAbortError, isCreditFundRail, isCreditFundingMode, isJobIdentityValue, isPublicRequestId, isSignableExactRequirement, isStablecoinFundRail, isStorableJobId, isValidEvmPrivateKey, issueRouterFeedbackClaim, listCredits, listFundingMenuSnapshots, listImplicitCredits, listPendingFundings, listPendingX402Fundings, listPendingX402FundingsForChannel, listResumableTempoChargeFundings, listResumableX402ExactFundings, listResumableX402Fundings, listTempoChannelAssociations, listTransactions, listX402Channels, loadAgentWallet, loadBudgetLedger, loadCredit, loadCreditX402Binding, loadIdentities, loadImplicitCredits, loadPendingFunding, loadReceipt, loadReceipts, loadResumableTempoChargeFunding, loadResumableX402ExactFunding, loadResumableX402Funding, loadTempoChannelAssociation, loadTempoChannelAssociationByKey, loadTempoChannelController, loadTempoChannelEntry, loadWalletConfiguredMints, loggers, looksLikeMnemonic, lookupInvoice, makeInvoice, markCredit, markImplicitCreditLost, markRefillDrainNoticed, markRefillRailUnavailable, maxAdvertisedMicro, maxKeysetDenomination, microToSats, missingDleqRecoveryDiagnostic, mnemonicFingerprint, msatsToMicro, msatsToUsd, msatsToUsdCents, msatsToUsdc, normalizeCreditEndpoint, normalizeFeedbackEndpointHost, nwcDedupWindowMs, nwcTimeoutMs, offersTempoCreditCharge, offersTempoCreditFunding, offersTempoCreditSession, offersX402CreditChannel, offersX402CreditFlavour, offersX402CreditFunding, parseCreditMenu, parseCreditTerms, parseJobIdentityHeader, parseLnAddress, parseNwcUri, parseTraceparent, payInvoiceReconciling, pendingDrainById, pendingDrainFor, persistTempoOpenCredential, pinDimension, prepareP2PKMint, processX402BatchCorrection, processX402BatchResponse, processX402BatchResponseForWallet, projectDiagnosticFields, projectEventName, projectSpanRow, providerProseSources, providerTextToString, randomTraceId, readAgentMnemonic, readCompletedCreditHistory, readFundValuation, readX402ChannelGuardFacts, readX402ChannelOnChain, receiptPubkeyFromSecret, receiveToAgentWallet, reconcileRefusedX402Deposits, reconcileTempoChannelOnChain, recordBalanceResponse, recordCreditX402Instrument, recordDrainReceipts, recordDrawFunding, recordFundResponse, recordFundingMenuSnapshot, recordPendingDrain, recordPendingFunding, recordPendingTempoChargeFunding, recordPendingX402ExactFunding, recordPendingX402Funding, recordRefusedDrawBalance, recordX402ChannelMetadata, redactUrl, redactUrlsInText, refundX402BatchChannel, rehydrateOutputData, repairConfigDirMode, resolveLnurlPayMetadataUrl, resolveRpcHttpTransportOptions, resolveRpcOverride, resolveTempoAsset, resolveTempoNetwork, resolveX402Asset, resolveX402ChannelRpc, restoreProofsFromOutputs, retirePendingX402Funding, retireTempoChannel, retireTempoChannelScope, retryMintQuoteOperation, saveAgentWallet, saveBudgetLedger, saveIdentities, selectProofsForSpend, serializeOutputData, setEmitter, settleDrainEvidence, sha256hex, shellQuoteArg, signDvmRequestData, signRequestData, signedRequestDomain, spendEntry, swapFeeForProofs, swapSendReserve, tempoAccountFromConfig, tempoBalanceCheckHint, tempoChallengeAmountMicro, tempoChannelControlledBy, tempoChargeCredentialSettleable, tempoCredentialAmountMicro, tempoCredentialValidBefore, tempoDescriptorController, tempoSessionAssociationByKey, tempoSessionChallenge, tempoSessionChallengeChannelScope, tempoSessionChallengeMicro, tempoSessionCredentialChannelScope, tempoSessionCredentialCumulativeMicro, tempoSessionCumulativeCapMicro, tempoSessionPriorCumulativeMicro, tempoTokenReference, toAgentProof, toCashuProofs, transportErrorCode, tryResolveTempoAsset, unsignRequestData, usdToMsats, usdcToMsats, validateAgentMnemonic, validateLnAddress, validateX402Env, verifyCanonicalSignedRequest, verifyChallenge, verifyDrainReceiptChain, verifyDrawFundingReceiptChain, verifyFundingReceiptChain, verifyJobReceipt, verifyRouterFeedbackClaim, walletExists, weakestReceiptVerdict, windowEnd, windowStart, withIdentitiesLock, withInitRetry, withNwcPool, withTempoChannelLock, withTraceContext, withWalletLock, withX402ChannelLock, withholdsTempoCreditSession, withinAdvertisedTolerance, writeAgentMnemonic, x402ChannelBalanceUnreconciledAt, x402ChannelControlledBy, x402ChannelReservation, x402CreditChannelNetworks, x402CreditExactNetworks, x402CreditFlavour, x402CreditFundingNetworks, x402ExactFundingDead, x402FlavourForInstrument, x402InstrumentForFlavour, x402NetworkByCaip2, x402NetworkBySlug, x402NetworkLabel, x402NetworkListForCopy, x402PendingBlockExpiresAt, x402PendingDepositExpiresAt, x402PendingFundingJson, x402PendingRetired, x402PendingStale, x402PendingUnsettled, x402RequiredFromError, x402ReservationRelease, x402SupportedNetworksHint, x402VoucherPendingState, x402WalletFromConfig };
+export { ADMIN_STATE_UNAVAILABLE, AGENT_MNEMONIC_FILE, type AgentProof, type AgentRecentSpend, type AgentWallet, type AttestedDvmIdentity, BTC_RATE_FILE, BUDGET_FILE, type BudgetCaps, type BudgetCheckResult, type BudgetLedger, type BudgetLedgerEntry, type BudgetSpendBreakdown, type BudgetSpendKind, type BudgetWindow, type BuilderLockKeypair, CAPABILITY_NAME_RE, COINGECKO_SIMPLE_PRICE_URL, CONFIG_AUDIT_FILE, CONFIG_BACKUP_FILE, CONFIG_DIR, CONFIG_FILE, CONFIG_PINNED_FILE, CREDITS_FILE, CREDIT_DRAIN_RAILS, CREDIT_FUNDING_MODES, CREDIT_FUND_RAILS, type CachedBtcRate, type CancelOptions, type CliIdentityEntry, type CoinGeckoBtcSpot, type CoinGeckoSpot, type CompletedCreditHistoryPage, type CompletedCreditHistoryQuery, type CompletedCreditHistoryRecord, type CompletedRefundHistoryRecord, type ConfigDirModeResult, CreatedInvoice, type CreditDrainRail, type CreditFundRail, type CreditFundingMode, type CreditMenu, type CreditOpResult, type CreditTerms, type CreditWire, DEFAULT_AGENT_MINT_URL, DIAGNOSTIC_CATALOGUE_VERSION, DbTransport, type DeliveredResult, type DescribeOptions, type DiagnosticCapabilityAuthority, type DiagnosticIdentityAuthority, DrainReceipt, type DrainReceiptChecks, type DrainReceiptVerifyResult, type DrainWire, DrawFundingReceipt, type DrawFundingReceiptChecks, type DrawFundingReceiptVerifyResult, type DrawFundingRejection, DvmError, DvmX402ChannelStorage, type ExpiredCreditLossHistoryRecord, FAVORITES_FILE, FEEDBACK_NUDGES_FILE, type FundValuation, FundingReceipt, type FundingReceiptChecks, type FundingReceiptVerifyResult, IDENTITIES_FILE, IDENTITIES_VERSION, type IdentitiesFile, InvoiceStatus, JOBS_FILE, JOB_IDENTITY_HEADER, type JobEnvelope, type JobIdentityHeaderResult, type JobPolicy, JobReceipt$1 as JobReceipt, type JobStatus, JsonValue, LightningBackend, type LightningFundingOffer, LightningPayment, LightningTransactionListOptions, LightningTransactionSnapshot, LightningWalletInfo, type LnAddressParts, MESSAGES_DIR, type MeltQuoteInfo, MemoryKVStore, Message, type MessagePollOptions, MessageType, type MnemonicValidationResult, MppxChallenge, MppxCredential, NwcBackend, type NwcConnection, NwcError, type NwcRequestOptions, type NwcTransaction, type OutboundMessage, PAIRINGS_DIR, PRIVKEY_HEX_RE, type PayInvoiceOutcome, type PayInvoiceReconcilingOptions, type PayInvoiceResult, type PayOutcome, type Payment, PaymentRequired, PaymentRequirementsV1, PaymentRequirementsV2, type PendingDrain, type PendingFunding, type PendingMelt, type PendingMint, type PendingMintMintingState, type PendingSubmission, type PendingSubmissionAcceptedUnresolved, type PendingSubmissionContext, type PendingTempoChargeFunding, type PendingX402ExactFunding, type PendingX402Funding, type PersistedOutputData, PersistentCounterSource, type ProviderInfo, type ProviderRef, type ProviderText, type Quote, RAIL_FLAGS, RECEIPTS_FILE, RECENT_SPENDS_CAP, RECOVERY_MNEMONIC_FILE, REQUEST_INTENTS_DIR, ROUTER_FEEDBACK_CLAIM_HEADER, ROUTER_FEEDBACK_CLAIM_TTL_MS, type Rail, type RailAsset, type RailFlag, type ReceiptChecks, ReceiptCredit, type ReceiptInvalidReason, type ReceiptKeypair, type ReceiptParseError, type ReceiptTrustAnchor, type ReceiptVerification, type ReceiptVerifyResult, type RecordDrawFundingResult, type RecordSpendOptions, type RpcSource, SPANS_INSERTED_CHANNEL, STABLECOIN_FUND_RAILS, SUPPORTED_PROTOCOL_VERSION, type SelectError, type SendMessageOptions, type SendMessageResult, type SpanProjectionResult, type SpanRow, type SpanTransport, SpanWriter, type StatusOptions, type StoredCredit, type StoredCreditX402Binding, type StoredDrawFunding, type StoredFundingMenuSnapshot, type StoredImplicitCredit, type StoredReceipt, type StoredSiblingCredit, type StoredX402ChannelConfig, type StoredX402ChannelMetadata, type StreamOptions, type StreamResult, type SubmitOptions, type SwapSendReserve, TEMPO_CHAIN_ID, TEMPO_CHANNELS_FILE, TEMPO_CHARGE_PENDING_STALE_MS, TEMPO_MODERATO_CHAIN_ID, TEMPO_MODERATO_RPC, TEMPO_PATH_USD_MODERATO, TEMPO_SESSION_UPDATED_REASON, type TempoAccount, type TempoChannelAssociation, type TempoChannelController, type TempoChannelDescriptor, type TempoChannelExitResult, type TempoChannelReconcileResult, type TempoChannelStoreContext, type TempoCredentialAccount, type TempoNetwork, type TempoSessionClientResolver, type Transport, type JobReceipt as TransportJobReceipt, type TrustAnchorRead, UpfrontPayment, type V1InfoCapability, type V1InfoResponse, type VerifyJobReceiptArgs, WALLET_FILE, WALLET_VERSION, type WalletCredentialConfig, type WalletInfo, type X402Asset, type X402Balance, type X402BatchPayment, type X402ChannelChainReport, type X402ChannelClient, type X402ChannelReconciliation, type X402ConnectedWallet, type X402CreditFlavour, type X402CreditInstrument, X402EnvValidationError, type X402Network, type X402RefundArgs, type X402RefundOutcome, type X402RepinnedWallet, type X402UnobservedBalanceProvenance, X402Version, type X402VoucherPendingState, X402Wallet, X402_BATCH_CHANNEL_ABI, X402_BATCH_SETTLEMENT_KEY, X402_BATCH_SETTLEMENT_SCHEME, X402_CHANNELS_FILE, X402_DEFAULT_FACILITATOR, X402_EXACT_AUTHORIZATION_TTL_SECONDS, X402_EXACT_SCHEME, X402_NETWORKS, X402_PENDING_STALE_MS, X402_RECEIVER_AUTHORIZER_KEY, X402_REFUSAL_TRANSACTION_DISCOVERY_WINDOW_MS, X402_RPC_URL_KEY, X402_SELF_RELAY_KEY, acknowledgeReplayedX402Payment, acknowledgeX402ChannelOwner, advanceTempoChannelExit, appendBudgetSpend, appendFundingReceipt, appendReceipt, applyImplicitReceiptCredit, applyReceiptCredit, applyRetryToPool, asProviderText, asProviderTextOpt, assertAgentMnemonicReplaceable, assertNoRivalX402Voucher, assertSupportedX402Network, assertTempoSessionChallengeWithinAsk, assertTempoSessionDepositWithinCap, assertTempoSessionVoucherWithinAsk, assertX402ChannelPayer, assertX402RequirementDescribesChannel, attestedDvmIdentity, authenticatedBuilderPubkey, backupSecretFile, bindCashuTokenToSubmissionContext, bindDiagnosticCapabilityAuthority, bindDiagnosticIdentityAuthority, breakdownSince, buildAdminAuthHeader, buildAdminChallenge, builderLockPath, canReplaceExpiredX402Deposit, capFor, cashuSubmissionBindingFingerprint, cashuSubmissionBindingFromContext, checkBudgetForLedger, checkMeltQuoteState, checkReceiptAttestation, clearCreditSelection, clearPendingDrain, clearPendingFunding, clearPendingTempoChargeFunding, clearPendingX402ExactFunding, clearPendingX402Funding, clearRefillRailUnavailable, generateIdentity as cliIdentityStoreGenerateIdentity, computeSmartDenominations, costAnchor, coveringMintsForSpend, createDiagnosticCapabilityAuthority, createMintQuoteRetryState, createMonotonicClock, createNoopLogger, createStdoutLogger, createTempoChannelStore, createTempoCloseCredential, createTempoCreditSession, createTempoSessionPaymentFetch, createX402BatchPayment, currentContext, deleteAgentMnemonic, deriveAgentMasterKeypair, deriveAgentRefundSubkey, deriveAgentRefundSubkeyPubkey, deriveBuilderLockKeypair, deriveBuilderLockPubkey, deriveIdentityFromPrivkey, derivePubkeyFromPrivkey, deriveReceiptKeypair, deriveReceiptSecret, deriveTempoAddress, dvmLocationIdentity, effectiveFundingMint, effectiveMints, ensureAddress, ensureConfigDir, ensureConfigSubdir, ensureProvisionalCredit, entryKind, extendDiagnosticIdentityAuthority, fetchBtcUsdRate, fetchCoinGeckoBtcUsd, fetchCoinGeckoSpot, fetchLnurlPayInvoice, fetchMeltQuote, findX402Channel, forgetCredit, formatStaleness, formatUsd, formatUsdcMicrounits, fundWireAmountMicro, fundingModeForTempoIntent, fundingModeForX402Flavour, generateAgentMnemonic, generateEphemeralReceiptKey, generateX402PrivateKey, getBalance, getBalanceByMint, getInfo, getInputFeesForProofs, getLastKnownBtcRate, getTempoUsdcBalance, getX402Balance, hashedCanonicalDvmId, identitiesFileExists, initLoggers, insertSpanBatch, isAbortError, isCreditFundRail, isCreditFundingMode, isJobIdentityValue, isPublicRequestId, isSignableExactRequirement, isStablecoinFundRail, isStorableJobId, isValidEvmPrivateKey, issueRouterFeedbackClaim, listCredits, listFundingMenuSnapshots, listImplicitCredits, listPendingFundings, listPendingX402Fundings, listPendingX402FundingsForChannel, listResumableTempoChargeFundings, listResumableX402ExactFundings, listResumableX402Fundings, listTempoChannelAssociations, listTransactions, listX402Channels, loadAgentWallet, loadBudgetLedger, loadCredit, loadCreditX402Binding, loadIdentities, loadImplicitCredits, loadPendingFunding, loadReceipt, loadReceipts, loadResumableTempoChargeFunding, loadResumableX402ExactFunding, loadResumableX402Funding, loadTempoChannelAssociation, loadTempoChannelAssociationByKey, loadTempoChannelController, loadTempoChannelEntry, loadWalletConfiguredMints, loggers, looksLikeMnemonic, lookupInvoice, makeInvoice, markCredit, markImplicitCreditLost, markRefillDrainNoticed, markRefillRailUnavailable, maxAdvertisedMicro, maxKeysetDenomination, microToSats, missingDleqRecoveryDiagnostic, mnemonicFingerprint, msatsToMicro, msatsToUsd, msatsToUsdCents, msatsToUsdc, normalizeCreditEndpoint, normalizeFeedbackEndpointHost, nwcDedupWindowMs, nwcTimeoutMs, offersTempoCreditCharge, offersTempoCreditFunding, offersTempoCreditSession, offersX402CreditChannel, offersX402CreditFlavour, offersX402CreditFunding, parseCreditMenu, parseCreditTerms, parseJobIdentityHeader, parseLnAddress, parseNwcUri, parseTraceparent, payInvoiceReconciling, pendingDrainById, pendingDrainFor, persistTempoOpenCredential, pinDimension, prepareP2PKMint, processX402BatchCorrection, processX402BatchResponse, processX402BatchResponseForWallet, projectDiagnosticFields, projectEventName, projectSpanRow, providerProseSources, providerTextToString, randomTraceId, readAgentMnemonic, readCompletedCreditHistory, readFundValuation, readX402ChannelGuardFacts, readX402ChannelOnChain, receiptPubkeyFromSecret, receiveToAgentWallet, reconcileRefusedX402Deposits, reconcileTempoChannelOnChain, recordBalanceResponse, recordCreditX402Instrument, recordDrainReceipts, recordDrawFunding, recordFundResponse, recordFundingMenuSnapshot, recordPendingDrain, recordPendingFunding, recordPendingTempoChargeFunding, recordPendingX402ExactFunding, recordPendingX402Funding, recordRefusedDrawBalance, recordX402ChannelMetadata, redactUrl, redactUrlsInText, refundX402BatchChannel, rehydrateOutputData, repairConfigDirMode, resolveLnurlPayMetadataUrl, resolveRpcHttpTransportOptions, resolveRpcOverride, resolveTempoAsset, resolveTempoNetwork, resolveX402Asset, resolveX402ChannelRpc, restoreProofsFromOutputs, retirePendingX402Funding, retireTempoChannel, retireTempoChannelScope, retryMintQuoteOperation, saveAgentWallet, saveBudgetLedger, saveIdentities, selectProofsForSpend, serializeOutputData, setEmitter, settleDrainEvidence, sha256hex, shellQuoteArg, signDvmRequestData, signRequestData, signedRequestDomain, spendEntry, swapFeeForProofs, swapSendReserve, tempoAccountFromConfig, tempoBalanceCheckHint, tempoChallengeAmountMicro, tempoChannelControlledBy, tempoChargeCredentialSettleable, tempoCredentialAmountMicro, tempoCredentialValidBefore, tempoDescriptorController, tempoSessionAssociationByKey, tempoSessionChallenge, tempoSessionChallengeChannelScope, tempoSessionChallengeMicro, tempoSessionCredentialChannelScope, tempoSessionCredentialCumulativeMicro, tempoSessionCumulativeCapMicro, tempoSessionPriorCumulativeMicro, tempoTokenReference, toAgentProof, toCashuProofs, transportErrorCode, tryResolveTempoAsset, unsignRequestData, usdToMsats, usdcToMsats, validateAgentMnemonic, validateLnAddress, validateX402Env, verifyCanonicalSignedRequest, verifyChallenge, verifyDrainReceiptChain, verifyDrawFundingReceiptChain, verifyFundingReceiptChain, verifyJobReceipt, verifyRouterFeedbackClaim, walletExists, weakestReceiptVerdict, windowEnd, windowStart, withIdentitiesLock, withInitRetry, withNwcPool, withTempoChannelLock, withTraceContext, withWalletLock, withX402ChannelLock, withholdsTempoCreditSession, withinAdvertisedTolerance, writeAgentMnemonic, x402ChannelBalanceUnreconciledAt, x402ChannelControlledBy, x402ChannelReservation, x402CreditChannelNetworks, x402CreditExactNetworks, x402CreditFlavour, x402CreditFundingNetworks, x402ExactFundingDead, x402FlavourForInstrument, x402InstrumentForFlavour, x402NetworkByCaip2, x402NetworkBySlug, x402NetworkLabel, x402NetworkListForCopy, x402PendingBlockExpiresAt, x402PendingDepositExpiresAt, x402PendingFundingJson, x402PendingRetired, x402PendingStale, x402PendingUnsettled, x402RequiredFromError, x402ReservationRelease, x402SupportedNetworksHint, x402VoucherPendingState, x402WalletFromConfig };

package/dist/internal/server.d.ts

@@ -1,22 +1,22 @@
 import { FacilitatorConfig } from '@x402/core/server';
-import { am as PaymentPayload, ab as PaymentRequirementsV1, ac as PaymentRequirementsV2, aH as X402Config, ax as SettleResponse, aF as VerifyResponse, bo as X402ExactVersionSupport, bp as X402Receipt, bq as TransactionalPayoutHook, br as CashuMeltCompleted } from '../step-cache-MA3hpa7F.js';
-export { bs as CreditDepositPayload, bt as CreditDrainPayload, bu as FundingLot, bv as LotDebit, bw as LotDepletion, bx as MppxServer, by as NON_CHANNEL_BITCOIN_RAILS, bz as NonChannelBitcoinRail, bA as PayoutReporter, bB as PostgresTempoSessionStore, bC as RevenueReporter, bD as SIGNED_ENVELOPE_FIELDS, bE as SIGNED_ENVELOPE_TYPES, bF as X402TrackedChannel, bG as _testing, bH as createDefaultReplayStore, bI as depleteLots, bJ as fifoOrder, bK as inKindDrawMsats, bL as isInKindDepletion, bM as isNonChannelBitcoinRail, bN as lotOwedSats, bO as netOwedSats, bP as wrapMppx } from '../step-cache-MA3hpa7F.js';
+import { an as PaymentPayload, ac as PaymentRequirementsV1, ad as PaymentRequirementsV2, aI as X402Config, ay as SettleResponse, aG as VerifyResponse, bp as X402ExactVersionSupport, bq as X402Receipt, br as TransactionalPayoutHook, bs as CashuMeltCompleted } from '../step-cache-BCRHimiY.js';
+export { bt as CreditDepositPayload, bu as CreditDrainPayload, bv as FundingLot, bw as LotDebit, bx as LotDepletion, by as MppxServer, bz as NON_CHANNEL_BITCOIN_RAILS, bA as NonChannelBitcoinRail, bB as PayoutReporter, bC as PostgresTempoSessionStore, bD as RevenueReporter, bE as SIGNED_ENVELOPE_FIELDS, bF as SIGNED_ENVELOPE_TYPES, bG as X402TrackedChannel, bH as _testing, bI as createDefaultReplayStore, bJ as depleteLots, bK as fifoOrder, bL as inKindDrawMsats, bM as isInKindDepletion, bN as isNonChannelBitcoinRail, bO as lotOwedSats, bP as netOwedSats, bQ as wrapMppx } from '../step-cache-BCRHimiY.js';
 import { Hono } from 'hono';
 import { Env, BlankSchema } from 'hono/types';
 import { Pool } from 'pg';
 export { Pool } from 'pg';
 import { g as getWallet } from '../wallet-Dwjs5n_M.js';
-import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-BXHL3jHA.js';
-export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-BXHL3jHA.js';
-export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-AxjHh5Gp.js';
+import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-B239nIY5.js';
+export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-B239nIY5.js';
+export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-CA7u1nHV.js';
 import { z } from 'zod';
-export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-C5_GKiKR.js';
+export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-BOcopzXk.js';
 import 'mppx';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
 import '@cashu/cashu-ts';
-import '../fx-UnO-P6Cj.js';
+import '../fx-BmvWGISH.js';
 
 declare function verifyWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<VerifyResponse>;
 declare function settleWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<SettleResponse>;

package/dist/internal/server.js

@@ -61,7 +61,7 @@ import {
   verifyUpfrontPayment,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-VG74TVFF.js";
+} from "../chunk-ZJRGORJ3.js";
 import "../chunk-XRLKGCAW.js";
 import {
   PayoutReporter
@@ -71,7 +71,7 @@ import {
   verifyWithFacilitator
 } from "../chunk-I2H2XYQV.js";
 import "../chunk-33J3NQDZ.js";
-import "../chunk-PJAKJD2U.js";
+import "../chunk-YMMCRQ2H.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SIGNED_ENVELOPE_TYPES,
@@ -81,7 +81,7 @@ import {
 import {
   createInstrumentedFetch,
   isStaleJobReapable
-} from "../chunk-R3FSW66G.js";
+} from "../chunk-PKLNMMKF.js";
 import {
   JobCancelledError,
   abortJob,
@@ -90,7 +90,7 @@ import {
   isYieldMessage,
   providerMessage,
   toJobRecord
-} from "../chunk-FL6Q3JNJ.js";
+} from "../chunk-KVKJ7R5V.js";
 import {
   toLockPubkey
 } from "../chunk-LZFZGY7L.js";

package/dist/{job-store-AxjHh5Gp.d.ts → job-store-CA7u1nHV.d.ts}

@@ -1,5 +1,5 @@
+import { a7 as Message, O as UpfrontPayment, al as FundingMethod, a1 as FundingReceipt, bX as CreditSnapshot, a2 as JobReceipt, aA as StepRecord, a3 as MessageType } from './step-cache-BCRHimiY.js';
 import { ProofLike } from '@cashu/cashu-ts';
-import { a6 as Message, ak as FundingMethod, a0 as FundingReceipt, bW as CreditSnapshot, a1 as JobReceipt, az as StepRecord, a2 as MessageType } from './step-cache-MA3hpa7F.js';
 
 type JobStatus = "processing" | "completed" | "failed" | "awaiting-input" | "cancelled" | "working";
 interface JobRecord {
@@ -69,6 +69,8 @@ interface JobRecord {
     summary?: string;
     messages: Message[];
     seq: number;
+    /** Original acceptance snapshot; absent for historical records. INSERT-only. */
+    upfrontPayment?: UpfrontPayment;
     paidMsats: number;
     paymentMint?: string;
     /** Rail of the most recent successful credit (cashu / x402 / tempo). */
@@ -510,8 +512,14 @@ interface StreamableJobStore extends JobStore {
      * re-read counters when cross-machine credit lands.
      */
     subscribeNotifications(jobId: string, onNotify: () => void): Promise<() => void>;
-    /** Read messages from the `job_messages` table for a job. */
-    getMessages(jobId: string, afterSeq: number): Promise<Message[]>;
+    /**
+     * Read verified history without advancing past a pending payment. Terminal
+     * output releases the cutoff. Snapshot reconstruction uses includeHeld to
+     * retain every verified message, independently of incremental delivery.
+     */
+    getMessages(jobId: string, afterSeq: number, options?: {
+        includeHeld?: boolean;
+    }): Promise<Message[]>;
     /**
      * Find stale non-terminal jobs. Two status-aware
      * cutoffs (both Unix ms): `processing`/`working` rows older than

package/dist/{lightning-backend-C5_GKiKR.d.ts → lightning-backend-BOcopzXk.d.ts}

@@ -1,4 +1,4 @@
-import { X as JsonValue } from './step-cache-MA3hpa7F.js';
+import { Y as JsonValue } from './step-cache-BCRHimiY.js';
 
 declare const lockPubkeyBrand: unique symbol;
 /**

package/dist/{postgres-job-store-VDSDXCHR.js → postgres-job-store-IXTNWT4K.js}

@@ -1,7 +1,7 @@
 import {
   PostgresJobStore
-} from "./chunk-PJAKJD2U.js";
-import "./chunk-FL6Q3JNJ.js";
+} from "./chunk-YMMCRQ2H.js";
+import "./chunk-KVKJ7R5V.js";
 import "./chunk-BQJIFRAZ.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-BAHZK334.js";

package/dist/server/index.d.ts

@@ -1,15 +1,15 @@
-import { af as CashuMode, bQ as CreditLedgerQuerier, bR as CreditDrainEnqueue, bS as HostedSettlementReportObligations, R as ResolvedCreditConfig, bT as DVMAuthScheme, B as SignedRequestDomain, bU as CreditLedgerLike, bV as X402RefundSettlementGate, bW as CreditSnapshot, bX as CreditDrawRefundArgs, bY as CreditDrawRefundResult, bZ as DrawResult, b_ as X402SettlementStatus, b$ as X402UnresolvedRefund, c0 as GrownDrawResult, c1 as DrawResolution, c2 as FundingRecord, c3 as CreditFundingEvidence, c4 as CreditInvoiceRecord, c5 as InvoiceSettlement, c6 as BlockedInvoiceCursor, c7 as InvoiceReconciliation, c8 as InvoiceWriteOff, c9 as DrawRecord, ca as StalePendingDrawCursor, cb as TempoCreditLossEvidence, cc as TempoCreditLoss, cd as X402CreditLossEvidence, ce as X402CreditLoss, cf as DrainMethod, cg as DrainRequestResult, ch as BitcoinDepositLiability, bu as FundingLot, ci as CreditDrainRecord, cj as ChannelDrainCursor, ck as DrainWriteOff, cl as DrainTransitionResult, cm as DrainReleaseResult, cn as DrainFulfilment, co as HostingCleanupFence, az as StepRecord, a1 as JobReceipt, a6 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-MA3hpa7F.js';
-export { cp as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cq as ClientCompatibility, cr as ClientCompatibilityEnv, cs as ClientCompatibilityGate, ct as ClientCompatibilityRequirement, cu as ClientSemVer, f as CreateSignedRequestVerifierOpts, cv as CreditFundingBasis, cw as CreditInvoiceStatus, cx as CreditLedger, cy as CreditLedgerError, cz as CreditLedgerErrorCode, cA as CreditLedgerErrorDetails, cB as CreditLedgerPool, cC as CreditStatus, cD as DRAIN_DELIVERY_RESERVE_SATS, cE as DVM_PROTOCOL_VERSION, cF as DrainConflictReason, cG as DrawRailValue, cH as DrawStatus, cI as HostedTempoCloseReportWriteOff, cJ as JobCostReportPayload, cK as JobTerminalReportPayload, cL as PostgresX402ChannelStorage, cM as ReplayStoreBackend, cN as RevenueSkippedNoRailPayload, cO as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cP as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cQ as TempoDrainDecision, cR as TempoDrainDecisionArgs, cS as TempoDrainDecisionResult, cT as TempoDrainHoldReason, cU as X402ChannelStorageOpts, cV as X402RelayLockHolder, cW as X402RelaySubmissionLock, cX as X402RelaySubmissionLockError, cY as allocateDrawValue, cZ as clientCompatibilityAttributes, c_ as clientCompatibilityMiddleware, c$ as clientUpgradeRequired, O as createSignedRequestVerifier, d0 as parseClientCapabilities, d1 as parseClientCompatibility, d2 as parseDvmClient, d3 as parseProtocolVersion, d4 as requireClientCompatibility, d5 as retryHostedTempoCloseReport, d6 as secp256k1Auth, d7 as signedRequestInput, V as signedRequestStatementHeader, d8 as writeOffHostedTempoCloseReport } from '../step-cache-MA3hpa7F.js';
+import { ag as CashuMode, bR as CreditLedgerQuerier, bS as CreditDrainEnqueue, bT as HostedSettlementReportObligations, R as ResolvedCreditConfig, bU as DVMAuthScheme, B as SignedRequestDomain, bV as CreditLedgerLike, bW as X402RefundSettlementGate, bX as CreditSnapshot, bY as CreditDrawRefundArgs, bZ as CreditDrawRefundResult, b_ as DrawResult, b$ as X402SettlementStatus, c0 as X402UnresolvedRefund, c1 as GrownDrawResult, c2 as DrawResolution, c3 as FundingRecord, c4 as CreditFundingEvidence, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, c7 as BlockedInvoiceCursor, c8 as InvoiceReconciliation, c9 as InvoiceWriteOff, ca as DrawRecord, cb as StalePendingDrawCursor, cc as TempoCreditLossEvidence, cd as TempoCreditLoss, ce as X402CreditLossEvidence, cf as X402CreditLoss, cg as DrainMethod, ch as DrainRequestResult, ci as BitcoinDepositLiability, bv as FundingLot, cj as CreditDrainRecord, ck as ChannelDrainCursor, cl as DrainWriteOff, cm as DrainTransitionResult, cn as DrainReleaseResult, co as DrainFulfilment, cp as HostingCleanupFence, aA as StepRecord, a2 as JobReceipt, a7 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-BCRHimiY.js';
+export { cq as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cr as ClientCompatibility, cs as ClientCompatibilityEnv, ct as ClientCompatibilityGate, cu as ClientCompatibilityRequirement, cv as ClientSemVer, f as CreateSignedRequestVerifierOpts, cw as CreditFundingBasis, cx as CreditInvoiceStatus, cy as CreditLedger, cz as CreditLedgerError, cA as CreditLedgerErrorCode, cB as CreditLedgerErrorDetails, cC as CreditLedgerPool, cD as CreditStatus, cE as DRAIN_DELIVERY_RESERVE_SATS, cF as DVM_PROTOCOL_VERSION, cG as DrainConflictReason, cH as DrawRailValue, cI as DrawStatus, cJ as HostedTempoCloseReportWriteOff, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cM as PostgresX402ChannelStorage, cN as ReplayStoreBackend, cO as RevenueSkippedNoRailPayload, cP as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cQ as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cR as TempoDrainDecision, cS as TempoDrainDecisionArgs, cT as TempoDrainDecisionResult, cU as TempoDrainHoldReason, O as UpfrontPayment, cV as X402ChannelStorageOpts, cW as X402RelayLockHolder, cX as X402RelaySubmissionLock, cY as X402RelaySubmissionLockError, cZ as allocateDrawValue, c_ as clientCompatibilityAttributes, c$ as clientCompatibilityMiddleware, d0 as clientUpgradeRequired, T as createSignedRequestVerifier, d1 as parseClientCapabilities, d2 as parseClientCompatibility, d3 as parseDvmClient, d4 as parseProtocolVersion, d5 as requireClientCompatibility, d6 as retryHostedTempoCloseReport, d7 as secp256k1Auth, d8 as signedRequestInput, W as signedRequestStatementHeader, d9 as writeOffHostedTempoCloseReport } from '../step-cache-BCRHimiY.js';
 import { Pool } from 'pg';
-import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-BXHL3jHA.js';
-export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-BXHL3jHA.js';
+import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-B239nIY5.js';
+export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-B239nIY5.js';
 import { Context, Hono } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-UnO-P6Cj.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-AxjHh5Gp.js';
-export { a as JobStatus, h as isStreamableJobStore } from '../job-store-AxjHh5Gp.js';
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-DA2mlW31.js';
-export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-DA2mlW31.js';
+import { F as FxFetcher } from '../fx-BmvWGISH.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-CA7u1nHV.js';
+export { a as JobStatus, h as isStreamableJobStore } from '../job-store-CA7u1nHV.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-BASsjgKw.js';
+export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-BASsjgKw.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-dMooihtY.js';
 import { Env, BlankSchema } from 'hono/types';
 import 'mppx';
@@ -17,7 +17,7 @@ import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
-import '../lightning-backend-C5_GKiKR.js';
+import '../lightning-backend-BOcopzXk.js';
 import '@cashu/cashu-ts';
 
 /** Default lifetime of a per-call implicit credit: 90 days before the ledger refuses new draws. */
@@ -100,8 +100,8 @@ declare const CREDIT_REQUEST_SCHEMA: z.ZodObject<{
         fund_id: z.ZodString;
         commitment: z.ZodOptional<z.ZodString>;
         method: z.ZodOptional<z.ZodEnum<{
-            lightning: "lightning";
             tempo: "tempo";
+            lightning: "lightning";
         }>>;
         intent: z.ZodOptional<z.ZodEnum<{
             charge: "charge";
@@ -483,7 +483,9 @@ declare class PostgresJobStore implements StreamableJobStore, ReceiptIssuingStor
     }>;
     subscribeMessages(jobId: string, afterSeq: number, onMessage: (msg: Message) => void): Promise<() => void>;
     subscribeNotifications(jobId: string, onNotify: () => void): Promise<() => void>;
-    getMessages(jobId: string, afterSeq: number): Promise<Message[]>;
+    getMessages(jobId: string, afterSeq: number, options?: {
+        includeHeld?: boolean;
+    }): Promise<Message[]>;
     initStreaming(): Promise<void>;
     shutdownStreaming(): Promise<void>;
     private dispatch;

package/dist/server/index.js

@@ -82,7 +82,7 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-VG74TVFF.js";
+} from "../chunk-ZJRGORJ3.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
@@ -95,7 +95,7 @@ import {
 } from "../chunk-33J3NQDZ.js";
 import {
   PostgresJobStore
-} from "../chunk-PJAKJD2U.js";
+} from "../chunk-YMMCRQ2H.js";
 import {
   SignedRequestError,
   createDefaultReplayStore,
@@ -104,13 +104,13 @@ import {
 } from "../chunk-ZO2ZAPG3.js";
 import {
   isStreamableJobStore
-} from "../chunk-R3FSW66G.js";
+} from "../chunk-PKLNMMKF.js";
 import {
   ContentHoldError,
   baselineContentExpiry,
   contentMetadata,
   isContentHoldStore
-} from "../chunk-FL6Q3JNJ.js";
+} from "../chunk-KVKJ7R5V.js";
 import {
   IMPLICIT_CREDIT_TTL_MS,
   generateEphemeralReceiptKey,
@@ -1190,7 +1190,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-VDSDXCHR.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-IXTNWT4K.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;

package/dist/{step-cache-MA3hpa7F.d.ts → step-cache-BCRHimiY.d.ts}

@@ -7,6 +7,28 @@ import { PaymentPayload as PaymentPayload$1, PaymentRequirements as PaymentRequi
 import { Account, Client, Hex } from 'viem';
 import { z } from 'zod';
 
+/**
+ * Original accepted job payment, fixed before handler execution. Snake_case is
+ * the wire shape. Absence means unknown, while `amount_msats: 0` is known zero.
+ * A credit-backed payment describes a pending hold at acceptance, not fresh
+ * funding or final settlement: completion settles it, failure/cancellation
+ * releases it. Later draw growth and settlement repricing do not change this fact.
+ */
+interface UpfrontPayment {
+    amount_msats: number;
+    /** Exact accepted draw in millionths of `currency`, when recorded. */
+    amount_micro?: number;
+    currency?: string;
+    /** Funding rail for a credit hold, or the accepted per-call rail. */
+    rail?: "cashu" | "x402" | "tempo" | "lightning";
+    /** Allocated rail-native atomic units, distinct from credit denomination. */
+    native_amount?: number;
+    native_asset?: string;
+    /** Together these identify credit consumption; neither is a spending credential. */
+    credit_id?: string;
+    draw_id?: string;
+}
+
 /** Auth identifier advertised by DVMs using audience-bound caller proofs. */
 declare const SIGNED_REQUEST_AUTH_ID: "secp256k1-schnorr-v2";
 /** Version of the canonical audience-bound caller statement. */
@@ -6302,4 +6324,4 @@ declare class StepCache {
     static deserialize(records: StepRecord[]): StepCache;
 }
 
-export { type DrawFundingReceipt as $, type ApprovalContent as A, type SignedRequestDomain as B, type Currency as C, type DVMConfig as D, SignedRequestError as E, type SignedRequestFailure as F, type SignedRequestReplayStore as G, type SignedRequestSignOpts as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestStatementHeader as M, type SignedRequestVerifier as N, createSignedRequestVerifier as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCreditConfig as R, type SDKJobContext as S, isZodSchema as T, UnsupportedCurrencyError as U, signedRequestStatementHeader as V, validateCurrency as W, type JsonValue as X, X402_BATCH_SETTLEMENT_SCHEME as Y, type ZodLike as Z, X402_EXACT_SCHEME as _, type DVMDescriptor as a, isArtifactMessage as a$, type FundingReceipt as a0, type JobReceipt as a1, type MessageType as a2, type X402Version as a3, type MppxCredential as a4, type PaymentRequired as a5, type Message as a6, type MppxChallenge as a7, type ReceiptCredit as a8, type DrainReceipt as a9, type TextContent as aA, type UnsignedDrainReceipt as aB, type UnsignedDrawFundingReceipt as aC, type UnsignedFundingReceipt as aD, type UnsignedJobReceipt as aE, type VerifyResponse as aF, type WorkingContent as aG, type X402Config$1 as aH, type X402ResponseBody as aI, type X402SelfRelayRpcFailureReason as aJ, X402_DEFAULT_NETWORK as aK, X402_V1_VERSION as aL, X402_VERSION as aM, buildPaymentRequiredV2 as aN, buildPaymentRequirements as aO, caip2ToX402Network as aP, canonicalRequestPath as aQ, canonicaliseForSigning as aR, canonicalize as aS, chainIdFromCaip2 as aT, computeResultHash as aU, decodePayment as aV, decodePaymentRequiredHeader as aW, encodePayment as aX, encodePaymentRequiredHeader as aY, encodeSettleResponseHeader as aZ, exactEvmAuthorization as a_, type X402Wallet as aa, type PaymentRequirementsV1 as ab, type PaymentRequirementsV2 as ac, type BuildPaymentRequirementsOpts as ad, type CapabilityDescriptor as ae, type CashuMode as af, type CompleteContent as ag, type DrainReceiptEvent as ah, type ExactEvmPayload as ai, type ExactEvmPayloadAuthorization as aj, type FundingMethod as ak, type MessageFrom as al, type PaymentPayload as am, type PaymentPayloadV1 as an, type PaymentPayloadV2 as ao, type PaymentRequestContent as ap, type PaymentRequiredV2 as aq, type PaymentRequirements as ar, type PromptContent as as, RAIL_REFUNDABLE as at, type ReceiptOutcome as au, type ReceiptPayment as av, type ResourceInfo as aw, type SettleResponse as ax, StepCache as ay, type StepRecord as az, type ArtifactContent as b, type X402UnresolvedRefund as b$, isCancelMessage as b0, isCompleteMessage as b1, isDrainReceipt as b2, isDrawFundingReceipt as b3, isFundingReceipt as b4, isPaymentRequestMessage as b5, isPromptMessage as b6, isSignedJobReceipt as b7, isTextMessage as b8, isWorkingMessage as b9, PayoutReporter as bA, PostgresTempoSessionStore as bB, RevenueReporter as bC, SIGNED_ENVELOPE_FIELDS as bD, SIGNED_ENVELOPE_TYPES as bE, type X402TrackedChannel as bF, _testing as bG, createDefaultReplayStore as bH, depleteLots as bI, fifoOrder as bJ, inKindDrawMsats as bK, isInKindDepletion as bL, isNonChannelBitcoinRail as bM, lotOwedSats as bN, netOwedSats as bO, wrapMppx as bP, type CreditLedgerQuerier as bQ, type CreditDrainEnqueue as bR, HostedSettlementReportObligations as bS, type DVMAuthScheme as bT, type CreditLedgerLike as bU, type X402RefundSettlementGate as bV, type CreditSnapshot as bW, type CreditDrawRefundArgs as bX, type CreditDrawRefundResult as bY, type DrawResult as bZ, type X402SettlementStatus as b_, paymentRequiredV2FromV1 as ba, signDrainReceipt as bb, signDrawFundingReceipt as bc, signFundingReceipt as bd, signReceipt as be, usdcContractByCaip2 as bf, usdcContractFor as bg, usdcDomainNameFor as bh, usdcDomainVersionFor as bi, verifyDrainReceipt as bj, verifyDrawFundingReceipt as bk, verifyFundingReceipt as bl, verifyReceipt as bm, x402NetworkToCaip2 as bn, type X402ExactVersionSupport as bo, type X402Receipt as bp, type TransactionalPayoutHook as bq, type CashuMeltCompleted as br, type CreditDepositPayload as bs, type CreditDrainPayload as bt, type FundingLot as bu, type LotDebit as bv, type LotDepletion as bw, type MppxServer as bx, NON_CHANNEL_BITCOIN_RAILS as by, type NonChannelBitcoinRail as bz, type CancelContent as c, clientUpgradeRequired as c$, type GrownDrawResult as c0, type DrawResolution as c1, type FundingRecord as c2, type CreditFundingEvidence as c3, type CreditInvoiceRecord as c4, type InvoiceSettlement as c5, type BlockedInvoiceCursor as c6, type InvoiceReconciliation as c7, type InvoiceWriteOff as c8, type DrawRecord as c9, type CreditLedgerErrorDetails as cA, type CreditLedgerPool as cB, type CreditStatus as cC, DRAIN_DELIVERY_RESERVE_SATS as cD, DVM_PROTOCOL_VERSION as cE, type DrainConflictReason as cF, type DrawRailValue as cG, type DrawStatus as cH, type HostedTempoCloseReportWriteOff as cI, type JobCostReportPayload as cJ, type JobTerminalReportPayload as cK, PostgresX402ChannelStorage as cL, type ReplayStoreBackend as cM, type RevenueSkippedNoRailPayload as cN, type RevenueSkippedNoRailReason as cO, type Secp256k1AuthOpts as cP, type TempoDrainDecision as cQ, type TempoDrainDecisionArgs as cR, type TempoDrainDecisionResult as cS, type TempoDrainHoldReason as cT, type X402ChannelStorageOpts as cU, type X402RelayLockHolder as cV, type X402RelaySubmissionLock as cW, X402RelaySubmissionLockError as cX, allocateDrawValue as cY, clientCompatibilityAttributes as cZ, clientCompatibilityMiddleware as c_, type StalePendingDrawCursor as ca, type TempoCreditLossEvidence as cb, type TempoCreditLoss as cc, type X402CreditLossEvidence as cd, type X402CreditLoss as ce, type DrainMethod as cf, type DrainRequestResult as cg, type BitcoinDepositLiability as ch, type CreditDrainRecord as ci, type ChannelDrainCursor as cj, type DrainWriteOff as ck, type DrainTransitionResult as cl, type DrainReleaseResult as cm, type DrainFulfilment as cn, HostingCleanupFence as co, CLIENT_COMPATIBILITY_HEADERS as cp, type ClientCompatibility as cq, type ClientCompatibilityEnv as cr, type ClientCompatibilityGate as cs, type ClientCompatibilityRequirement as ct, type ClientSemVer as cu, type CreditFundingBasis as cv, type CreditInvoiceStatus as cw, CreditLedger as cx, CreditLedgerError as cy, type CreditLedgerErrorCode as cz, type CanonicalEnvelope as d, parseClientCapabilities as d0, parseClientCompatibility as d1, parseDvmClient as d2, parseProtocolVersion as d3, requireClientCompatibility as d4, retryHostedTempoCloseReport as d5, secp256k1Auth as d6, signedRequestInput as d7, writeOffHostedTempoCloseReport as d8, type HostedIntent as d9, type X402SettlementIntent as da, type HostedFundingReservation as db, type X402SettlementCursor as dc, type X402SettlementWriteOff as dd, type X402FacilitatorAuth as de, type X402BatchSettlementConfig as df, type X402PayoutObserver as dg, type CreditDepositEnqueue as dh, type X402SettlementReconciliationReason as di, type CreditDrawReleaseEnqueue as dj, type CapabilityRate as e, type CreateSignedRequestVerifierOpts as f, type CreditConfig as g, type CreditView as h, DEFAULT_CREDIT_MAX as i, DEFAULT_CREDIT_MIN as j, DEFAULT_CREDIT_TTL_SECONDS as k, DEFAULT_JOB_RETENTION_DAYS as l, type DVMRouteContext as m, type InputType as n, InvalidCurrencyError as o, type PaymentMethod as p, type PriceValue as q, type ProgressContent as r, type PromptOpts as s, type QuoteContext as t, type QuoteResult as u, type ResponseContent as v, type SDKPaymentRequestOpts as w, SIGNED_REQUEST_AUTH_ID as x, SIGNED_REQUEST_STATEMENT_VERSION as y, type SignedRequestAudience as z };
+export { X402_EXACT_SCHEME as $, type ApprovalContent as A, type SignedRequestDomain as B, type Currency as C, type DVMConfig as D, SignedRequestError as E, type SignedRequestFailure as F, type SignedRequestReplayStore as G, type SignedRequestSignOpts as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestStatementHeader as M, type SignedRequestVerifier as N, type UpfrontPayment as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCreditConfig as R, type SDKJobContext as S, createSignedRequestVerifier as T, UnsupportedCurrencyError as U, isZodSchema as V, signedRequestStatementHeader as W, validateCurrency as X, type JsonValue as Y, type ZodLike as Z, X402_BATCH_SETTLEMENT_SCHEME as _, type DVMDescriptor as a, exactEvmAuthorization as a$, type DrawFundingReceipt as a0, type FundingReceipt as a1, type JobReceipt as a2, type MessageType as a3, type X402Version as a4, type MppxCredential as a5, type PaymentRequired as a6, type Message as a7, type MppxChallenge as a8, type ReceiptCredit as a9, type StepRecord as aA, type TextContent as aB, type UnsignedDrainReceipt as aC, type UnsignedDrawFundingReceipt as aD, type UnsignedFundingReceipt as aE, type UnsignedJobReceipt as aF, type VerifyResponse as aG, type WorkingContent as aH, type X402Config$1 as aI, type X402ResponseBody as aJ, type X402SelfRelayRpcFailureReason as aK, X402_DEFAULT_NETWORK as aL, X402_V1_VERSION as aM, X402_VERSION as aN, buildPaymentRequiredV2 as aO, buildPaymentRequirements as aP, caip2ToX402Network as aQ, canonicalRequestPath as aR, canonicaliseForSigning as aS, canonicalize as aT, chainIdFromCaip2 as aU, computeResultHash as aV, decodePayment as aW, decodePaymentRequiredHeader as aX, encodePayment as aY, encodePaymentRequiredHeader as aZ, encodeSettleResponseHeader as a_, type DrainReceipt as aa, type X402Wallet as ab, type PaymentRequirementsV1 as ac, type PaymentRequirementsV2 as ad, type BuildPaymentRequirementsOpts as ae, type CapabilityDescriptor as af, type CashuMode as ag, type CompleteContent as ah, type DrainReceiptEvent as ai, type ExactEvmPayload as aj, type ExactEvmPayloadAuthorization as ak, type FundingMethod as al, type MessageFrom as am, type PaymentPayload as an, type PaymentPayloadV1 as ao, type PaymentPayloadV2 as ap, type PaymentRequestContent as aq, type PaymentRequiredV2 as ar, type PaymentRequirements as as, type PromptContent as at, RAIL_REFUNDABLE as au, type ReceiptOutcome as av, type ReceiptPayment as aw, type ResourceInfo as ax, type SettleResponse as ay, StepCache as az, type ArtifactContent as b, type X402SettlementStatus as b$, isArtifactMessage as b0, isCancelMessage as b1, isCompleteMessage as b2, isDrainReceipt as b3, isDrawFundingReceipt as b4, isFundingReceipt as b5, isPaymentRequestMessage as b6, isPromptMessage as b7, isSignedJobReceipt as b8, isTextMessage as b9, type NonChannelBitcoinRail as bA, PayoutReporter as bB, PostgresTempoSessionStore as bC, RevenueReporter as bD, SIGNED_ENVELOPE_FIELDS as bE, SIGNED_ENVELOPE_TYPES as bF, type X402TrackedChannel as bG, _testing as bH, createDefaultReplayStore as bI, depleteLots as bJ, fifoOrder as bK, inKindDrawMsats as bL, isInKindDepletion as bM, isNonChannelBitcoinRail as bN, lotOwedSats as bO, netOwedSats as bP, wrapMppx as bQ, type CreditLedgerQuerier as bR, type CreditDrainEnqueue as bS, HostedSettlementReportObligations as bT, type DVMAuthScheme as bU, type CreditLedgerLike as bV, type X402RefundSettlementGate as bW, type CreditSnapshot as bX, type CreditDrawRefundArgs as bY, type CreditDrawRefundResult as bZ, type DrawResult as b_, isWorkingMessage as ba, paymentRequiredV2FromV1 as bb, signDrainReceipt as bc, signDrawFundingReceipt as bd, signFundingReceipt as be, signReceipt as bf, usdcContractByCaip2 as bg, usdcContractFor as bh, usdcDomainNameFor as bi, usdcDomainVersionFor as bj, verifyDrainReceipt as bk, verifyDrawFundingReceipt as bl, verifyFundingReceipt as bm, verifyReceipt as bn, x402NetworkToCaip2 as bo, type X402ExactVersionSupport as bp, type X402Receipt as bq, type TransactionalPayoutHook as br, type CashuMeltCompleted as bs, type CreditDepositPayload as bt, type CreditDrainPayload as bu, type FundingLot as bv, type LotDebit as bw, type LotDepletion as bx, type MppxServer as by, NON_CHANNEL_BITCOIN_RAILS as bz, type CancelContent as c, clientCompatibilityMiddleware as c$, type X402UnresolvedRefund as c0, type GrownDrawResult as c1, type DrawResolution as c2, type FundingRecord as c3, type CreditFundingEvidence as c4, type CreditInvoiceRecord as c5, type InvoiceSettlement as c6, type BlockedInvoiceCursor as c7, type InvoiceReconciliation as c8, type InvoiceWriteOff as c9, type CreditLedgerErrorCode as cA, type CreditLedgerErrorDetails as cB, type CreditLedgerPool as cC, type CreditStatus as cD, DRAIN_DELIVERY_RESERVE_SATS as cE, DVM_PROTOCOL_VERSION as cF, type DrainConflictReason as cG, type DrawRailValue as cH, type DrawStatus as cI, type HostedTempoCloseReportWriteOff as cJ, type JobCostReportPayload as cK, type JobTerminalReportPayload as cL, PostgresX402ChannelStorage as cM, type ReplayStoreBackend as cN, type RevenueSkippedNoRailPayload as cO, type RevenueSkippedNoRailReason as cP, type Secp256k1AuthOpts as cQ, type TempoDrainDecision as cR, type TempoDrainDecisionArgs as cS, type TempoDrainDecisionResult as cT, type TempoDrainHoldReason as cU, type X402ChannelStorageOpts as cV, type X402RelayLockHolder as cW, type X402RelaySubmissionLock as cX, X402RelaySubmissionLockError as cY, allocateDrawValue as cZ, clientCompatibilityAttributes as c_, type DrawRecord as ca, type StalePendingDrawCursor as cb, type TempoCreditLossEvidence as cc, type TempoCreditLoss as cd, type X402CreditLossEvidence as ce, type X402CreditLoss as cf, type DrainMethod as cg, type DrainRequestResult as ch, type BitcoinDepositLiability as ci, type CreditDrainRecord as cj, type ChannelDrainCursor as ck, type DrainWriteOff as cl, type DrainTransitionResult as cm, type DrainReleaseResult as cn, type DrainFulfilment as co, HostingCleanupFence as cp, CLIENT_COMPATIBILITY_HEADERS as cq, type ClientCompatibility as cr, type ClientCompatibilityEnv as cs, type ClientCompatibilityGate as ct, type ClientCompatibilityRequirement as cu, type ClientSemVer as cv, type CreditFundingBasis as cw, type CreditInvoiceStatus as cx, CreditLedger as cy, CreditLedgerError as cz, type CanonicalEnvelope as d, clientUpgradeRequired as d0, parseClientCapabilities as d1, parseClientCompatibility as d2, parseDvmClient as d3, parseProtocolVersion as d4, requireClientCompatibility as d5, retryHostedTempoCloseReport as d6, secp256k1Auth as d7, signedRequestInput as d8, writeOffHostedTempoCloseReport as d9, type HostedIntent as da, type X402SettlementIntent as db, type HostedFundingReservation as dc, type X402SettlementCursor as dd, type X402SettlementWriteOff as de, type X402FacilitatorAuth as df, type X402BatchSettlementConfig as dg, type X402PayoutObserver as dh, type CreditDepositEnqueue as di, type X402SettlementReconciliationReason as dj, type CreditDrawReleaseEnqueue as dk, type CapabilityRate as e, type CreateSignedRequestVerifierOpts as f, type CreditConfig as g, type CreditView as h, DEFAULT_CREDIT_MAX as i, DEFAULT_CREDIT_MIN as j, DEFAULT_CREDIT_TTL_SECONDS as k, DEFAULT_JOB_RETENTION_DAYS as l, type DVMRouteContext as m, type InputType as n, InvalidCurrencyError as o, type PaymentMethod as p, type PriceValue as q, type ProgressContent as r, type PromptOpts as s, type QuoteContext as t, type QuoteResult as u, type ResponseContent as v, type SDKPaymentRequestOpts as w, SIGNED_REQUEST_AUTH_ID as x, SIGNED_REQUEST_STATEMENT_VERSION as y, type SignedRequestAudience as z };

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-DA2mlW31.js';
-import { a1 as JobReceipt, a6 as Message, a2 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-MA3hpa7F.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-AxjHh5Gp.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-BASsjgKw.js';
+import { a2 as JobReceipt, a7 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-BCRHimiY.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-CA7u1nHV.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';
@@ -72,7 +72,9 @@ declare class MemoryJobStore implements StreamableJobStore, ReceiptIssuingStore
     }>;
     subscribeMessages(jobId: string, afterSeq: number, onMessage: (msg: Message) => void): Promise<() => void>;
     subscribeNotifications(jobId: string, onNotify: () => void): Promise<() => void>;
-    getMessages(jobId: string, afterSeq: number): Promise<Message[]>;
+    getMessages(jobId: string, afterSeq: number, options?: {
+        includeHeld?: boolean;
+    }): Promise<Message[]>;
     initStreaming(): Promise<void>;
     shutdownStreaming(): Promise<void>;
     /**
@@ -84,6 +86,7 @@ declare class MemoryJobStore implements StreamableJobStore, ReceiptIssuingStore
     private terminateJob;
     private allocateSeq;
     private messagesFor;
+    private visibleMessages;
     private notify;
     private fireNotifyOnly;
 }

package/dist/testing/index.js

@@ -4,10 +4,10 @@ import {
 import {
   MemoryJobStore,
   createInstrumentedFetch
-} from "../chunk-R3FSW66G.js";
+} from "../chunk-PKLNMMKF.js";
 import {
   JobCancelledError
-} from "../chunk-FL6Q3JNJ.js";
+} from "../chunk-KVKJ7R5V.js";
 import {
   createNoopLogger
 } from "../chunk-7NZRJPEP.js";

package/dist/{usd-CLGrKw9p.d.ts → usd-B8_WMfHT.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-MA3hpa7F.js';
+import { C as Currency } from './step-cache-BCRHimiY.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [