@dvmkit/sdk 0.16.2 → 0.17.1

package/dist/server/index.d.ts

@@ -1,15 +1,15 @@
-import { ag as CashuMode, bR as CreditLedgerQuerier, bS as CreditDrainEnqueue, bT as HostedSettlementReportObligations, R as ResolvedCreditConfig, bU as DVMAuthScheme, B as SignedRequestDomain, bV as CreditLedgerLike, bW as X402RefundSettlementGate, bX as CreditSnapshot, bY as CreditDrawRefundArgs, bZ as CreditDrawRefundResult, b_ as DrawResult, b$ as X402SettlementStatus, c0 as X402UnresolvedRefund, c1 as GrownDrawResult, c2 as DrawResolution, c3 as FundingRecord, c4 as CreditFundingEvidence, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, c7 as BlockedInvoiceCursor, c8 as InvoiceReconciliation, c9 as InvoiceWriteOff, ca as DrawRecord, cb as StalePendingDrawCursor, cc as TempoCreditLossEvidence, cd as TempoCreditLoss, ce as X402CreditLossEvidence, cf as X402CreditLoss, cg as DrainMethod, ch as DrainRequestResult, ci as BitcoinDepositLiability, bv as FundingLot, cj as CreditDrainRecord, ck as ChannelDrainCursor, cl as DrainWriteOff, cm as DrainTransitionResult, cn as DrainReleaseResult, co as DrainFulfilment, cp as HostingCleanupFence, aA as StepRecord, a2 as JobReceipt, a7 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-BCRHimiY.js';
-export { cq as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cr as ClientCompatibility, cs as ClientCompatibilityEnv, ct as ClientCompatibilityGate, cu as ClientCompatibilityRequirement, cv as ClientSemVer, f as CreateSignedRequestVerifierOpts, cw as CreditFundingBasis, cx as CreditInvoiceStatus, cy as CreditLedger, cz as CreditLedgerError, cA as CreditLedgerErrorCode, cB as CreditLedgerErrorDetails, cC as CreditLedgerPool, cD as CreditStatus, cE as DRAIN_DELIVERY_RESERVE_SATS, cF as DVM_PROTOCOL_VERSION, cG as DrainConflictReason, cH as DrawRailValue, cI as DrawStatus, cJ as HostedTempoCloseReportWriteOff, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cM as PostgresX402ChannelStorage, cN as ReplayStoreBackend, cO as RevenueSkippedNoRailPayload, cP as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cQ as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cR as TempoDrainDecision, cS as TempoDrainDecisionArgs, cT as TempoDrainDecisionResult, cU as TempoDrainHoldReason, O as UpfrontPayment, cV as X402ChannelStorageOpts, cW as X402RelayLockHolder, cX as X402RelaySubmissionLock, cY as X402RelaySubmissionLockError, cZ as allocateDrawValue, c_ as clientCompatibilityAttributes, c$ as clientCompatibilityMiddleware, d0 as clientUpgradeRequired, T as createSignedRequestVerifier, d1 as parseClientCapabilities, d2 as parseClientCompatibility, d3 as parseDvmClient, d4 as parseProtocolVersion, d5 as requireClientCompatibility, d6 as retryHostedTempoCloseReport, d7 as secp256k1Auth, d8 as signedRequestInput, W as signedRequestStatementHeader, d9 as writeOffHostedTempoCloseReport } from '../step-cache-BCRHimiY.js';
+import { ag as CashuMode, bR as CreditLedgerQuerier, bS as CreditDrainEnqueue, bT as HostedSettlementReportObligations, R as ResolvedCreditConfig, bU as DVMAuthScheme, B as SignedRequestDomain, bV as CreditLedgerLike, bW as X402RefundSettlementGate, bX as CreditSnapshot, bY as CreditDrawRefundArgs, bZ as CreditDrawRefundResult, b_ as DrawResult, b$ as X402SettlementStatus, c0 as X402UnresolvedRefund, c1 as GrownDrawResult, c2 as DrawResolution, c3 as FundingRecord, c4 as CreditFundingEvidence, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, c7 as BlockedInvoiceCursor, c8 as InvoiceReconciliation, c9 as InvoiceWriteOff, ca as DrawRecord, cb as StalePendingDrawCursor, cc as TempoCreditLossEvidence, cd as TempoCreditLoss, ce as X402CreditLossEvidence, cf as X402CreditLoss, cg as DrainMethod, ch as DrainRequestResult, ci as BitcoinDepositLiability, bv as FundingLot, cj as CreditDrainRecord, ck as ChannelDrainCursor, cl as DrainWriteOff, cm as DrainTransitionResult, cn as DrainReleaseResult, co as DrainFulfilment, cp as HostingCleanupFence, aA as StepRecord, a2 as JobReceipt, a7 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-Bezn-_ZL.js';
+export { cq as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cr as ClientCompatibility, cs as ClientCompatibilityEnv, ct as ClientCompatibilityGate, cu as ClientCompatibilityRequirement, cv as ClientSemVer, f as CreateSignedRequestVerifierOpts, cw as CreditFundingBasis, cx as CreditInvoiceStatus, cy as CreditLedger, cz as CreditLedgerError, cA as CreditLedgerErrorCode, cB as CreditLedgerErrorDetails, cC as CreditLedgerPool, cD as CreditStatus, cE as DRAIN_DELIVERY_RESERVE_SATS, cF as DVM_PROTOCOL_VERSION, cG as DrainConflictReason, cH as DrawRailValue, cI as DrawStatus, cJ as HostedTempoCloseReportWriteOff, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cM as PostgresX402ChannelStorage, cN as ReplayStoreBackend, cO as RevenueSkippedNoRailPayload, cP as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cQ as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cR as TempoDrainDecision, cS as TempoDrainDecisionArgs, cT as TempoDrainDecisionResult, cU as TempoDrainHoldReason, O as UpfrontPayment, cV as X402ChannelStorageOpts, cW as X402RelayLockHolder, cX as X402RelaySubmissionLock, cY as X402RelaySubmissionLockError, cZ as allocateDrawValue, c_ as clientCompatibilityAttributes, c$ as clientCompatibilityMiddleware, d0 as clientUpgradeRequired, T as createSignedRequestVerifier, d1 as parseClientCapabilities, d2 as parseClientCompatibility, d3 as parseDvmClient, d4 as parseProtocolVersion, d5 as requireClientCompatibility, d6 as retryHostedTempoCloseReport, d7 as secp256k1Auth, d8 as signedRequestInput, W as signedRequestStatementHeader, d9 as writeOffHostedTempoCloseReport } from '../step-cache-Bezn-_ZL.js';
 import { Pool } from 'pg';
-import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-BfXaeHgR.js';
-export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-BfXaeHgR.js';
+import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-D-h0zJCZ.js';
+export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-D-h0zJCZ.js';
 import { Context, Hono } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-BmvWGISH.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-CA7u1nHV.js';
-export { a as JobStatus, h as isStreamableJobStore } from '../job-store-CA7u1nHV.js';
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-BASsjgKw.js';
-export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-BASsjgKw.js';
+import { F as FxFetcher } from '../fx-CpqQaIfg.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-CgXT79tS.js';
+export { a as JobStatus, h as isStreamableJobStore } from '../job-store-CgXT79tS.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-B_hOQS36.js';
+export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-B_hOQS36.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-dMooihtY.js';
 import { Env, BlankSchema } from 'hono/types';
 import 'mppx';
@@ -17,7 +17,7 @@ import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
-import '../lightning-backend-BOcopzXk.js';
+import '../lightning-backend-B1hRUIOb.js';
 import '@cashu/cashu-ts';
 
 /** Default lifetime of a per-call implicit credit: 90 days before the ledger refuses new draws. */

package/dist/server/index.js

@@ -1,6 +1,6 @@
 import {
   PostgresReplayStore
-} from "../chunk-4IFZHJQK.js";
+} from "../chunk-5RLNRLLB.js";
 import {
   PostgresKVStore
 } from "../chunk-V5ZRATJH.js";
@@ -18,7 +18,7 @@ import {
   parseNwcUri,
   validateX402Env,
   withNwcPool
-} from "../chunk-XSF5YTEY.js";
+} from "../chunk-2PN4DKZW.js";
 import {
   MemoryKVStore
 } from "../chunk-SDK6KDJN.js";
@@ -82,29 +82,29 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-KERFCBT7.js";
+} from "../chunk-YRQMDRI4.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
   ProcessedPaymentReplayError
 } from "../chunk-XRLKGCAW.js";
-import "../chunk-ICHC4VDZ.js";
-import "../chunk-F2LNWZCV.js";
+import "../chunk-KRX7VNBG.js";
+import "../chunk-3KRFFLAT.js";
 import {
   MemoryCreditLedger
-} from "../chunk-PP5WHB6T.js";
+} from "../chunk-C5XNZLZ7.js";
 import {
   PostgresJobStore
-} from "../chunk-N4SBDUVD.js";
+} from "../chunk-A6EY4K46.js";
 import {
   SignedRequestError,
   createDefaultReplayStore,
   createSignedRequestVerifier,
   signedRequestInput
-} from "../chunk-V73WRF46.js";
+} from "../chunk-5CCQEAQV.js";
 import {
   isStreamableJobStore
-} from "../chunk-V4CBI5HB.js";
+} from "../chunk-Y6JJDOGO.js";
 import {
   ContentHoldError,
   baselineContentExpiry,
@@ -115,7 +115,7 @@ import {
   IMPLICIT_CREDIT_TTL_MS,
   generateEphemeralReceiptKey,
   receiptPubkeyFromSecret
-} from "../chunk-XBQTFOIT.js";
+} from "../chunk-7RWE6ELV.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -127,11 +127,11 @@ import {
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader
 } from "../chunk-SXL44PL5.js";
-import "../chunk-VQHBJXBL.js";
+import "../chunk-QTKGFG3I.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-PBT3H2LZ.js";
-import "../chunk-7QGS27UT.js";
+import "../chunk-RX6FT7XA.js";
+import "../chunk-72A4PHLD.js";
 import {
   CreditLedger,
   CreditLedgerError,
@@ -139,7 +139,7 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-K4ZQE7IB.js";
+} from "../chunk-B5MPLDRC.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SDK_INIT_ADVISORY_LOCK,
@@ -148,7 +148,7 @@ import {
 import "../chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "../chunk-ELNWQS24.js";
+} from "../chunk-EIDRCGTY.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
@@ -159,14 +159,14 @@ import {
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
   TempoSettlementReadiness,
   resolveTempoNetwork
-} from "../chunk-7N5VDCG3.js";
+} from "../chunk-MWDUGMN2.js";
 import {
   initLoggers
-} from "../chunk-TN6MWTZI.js";
+} from "../chunk-LY2JYSJS.js";
 import "../chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "../chunk-5U2RG3ZW.js";
+} from "../chunk-ALTE7I6C.js";
 
 // src/sdk/server/cashu-env.ts
 async function resolveCashuOptsFromEnv(env, pool, cashuModeHint) {
@@ -310,7 +310,7 @@ function createDisposableCashuStore() {
   let current = new MemoryCreditLedger();
   let tail = Promise.resolve();
   const requests = /* @__PURE__ */ new Set();
-  const secrets = /* @__PURE__ */ new Set();
+  const secrets = /* @__PURE__ */ new Map();
   function exclusive(operation) {
     const result = tail.then(operation);
     tail = result.then(() => void 0, () => void 0);
@@ -340,11 +340,11 @@ function createDisposableCashuStore() {
           await account(staged);
           current = staged;
           requests.add(requestId);
-          for (const secret of incoming) secrets.add(secret);
+          for (const secret of incoming) secrets.set(secret, requestId);
         });
       },
-      hasAccepted(incoming) {
-        return exclusive(() => Promise.resolve(incoming.some((secret) => secrets.has(secret))));
+      acceptedRequestIds(incoming) {
+        return exclusive(() => Promise.resolve(incoming.map((secret) => secrets.get(secret))));
       }
     }
   };
@@ -1193,7 +1193,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-JRSG54VJ.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-E5GXLRB4.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;
@@ -1286,11 +1286,11 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     let tempoChargeBackend = "user-supplied";
     const mppTempoRecipient = envMaybe.DVMKIT_TEMPO_RECIPIENT;
     if (!mpp && mppTempoRecipient) {
-      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-3NJY354I.js");
+      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-BLIYBORK.js");
       tempoChargeBackend = pgPool ? "postgres" : "memory";
       let tempoCharge;
       if (pgPool) {
-        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-2LK6IDLS.js");
+        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-A3CDF7D5.js");
         const chargeStore = new PostgresTempoChargeStore(pgPool);
         tempoChargeStore = chargeStore;
         pendingInits.push(chargeStore.init());
@@ -1310,7 +1310,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-5MHCH3YW.js"),
+          import("../tempo-session-store-EWBE5HJM.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1463,7 +1463,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       }
     }
     const fxSource = envMaybe.DVMKIT_FX_SOURCE;
-    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-3P7KAONY.js");
+    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-JJYLTTWK.js");
     const fxFetcher = opts.fx ?? createFxFetcher({ source: resolveFxSourceFromEnv(envMaybe) });
     const hostRailConfigured = (opts.paymentMethods?.length ?? 0) > 0 || (effectiveMints?.length ?? 0) > 0 || !!x402WithDualServe || !!mpp;
     if (mounts.some((entry) => mountNeedsFx(entry, hostRailConfigured))) warmFxSnapshot(fxFetcher);
@@ -1473,7 +1473,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     assertReceiptIdentity(envMaybe, opts.builder, receiptKey, cashuOpts.dvmId, opts.devMode);
     let sharedPgReplayStore;
     if (pgPool) {
-      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-ZPILIJIW.js");
+      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-GH5AINQR.js");
       const store2 = new PostgresReplayStore2(pgPool);
       pendingInits.push(store2.init());
       sharedPgReplayStore = store2;
@@ -1501,13 +1501,13 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     }
     let sharedPgConsumedStore;
     if (pgPool) {
-      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-S2CBQ4NO.js");
+      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-4PCJEZBD.js");
       const consumedStore = new PostgresConsumedCredentialStore(pgPool);
       pendingInits.push(consumedStore.init());
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-VWZ5NP7V.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-5HMJ6VUX.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1516,7 +1516,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-DZWRQGSF.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-ME6FH462.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();
@@ -2104,6 +2104,7 @@ function secp256k1Auth(opts = {}) {
   }
   return {
     id: SIGNED_REQUEST_AUTH_ID,
+    allowUnsignedPaid: opts.allowUnsignedPaid === true,
     checkAuth(schema, input, domain) {
       const envelope = getVerifier(schema).checkAuth(input, domain);
       return { pubkey: envelope.pubkey, envelope };

package/dist/{step-cache-BCRHimiY.d.ts → step-cache-Bezn-_ZL.d.ts}

@@ -5421,6 +5421,12 @@ type ReplayStoreBackend = "postgres" | "memory" | "user-supplied" | "disabled";
 interface DVMAuthScheme {
     /** Wire-level identifier surfaced on `/v1/info#auth`. */
     readonly id: typeof SIGNED_REQUEST_AUTH_ID;
+    /**
+     * Also serve `POST /v1/job` bodies carrying no envelope field when the job
+     * is paid per call. Such jobs run as the anonymous requester with no
+     * `ctx.auth`, credit fields or recovery id; free capabilities stay signed-only.
+     */
+    readonly allowUnsignedPaid?: boolean;
     /** Schema + drift + signature check at request entry. No replay-store touch. */
     checkAuth<T>(schema: ZodLike<T>, input: unknown, domain?: SignedRequestDomain): {
         pubkey: string;
@@ -5456,6 +5462,33 @@ interface Secp256k1AuthOpts {
     driftSeconds?: number;
     /** Current Unix-seconds source. Defaults to `() => Math.floor(Date.now() / 1000)`. */
     now?: () => number;
+    /**
+     * Accept an unsigned `POST /v1/job` (no `pubkey`, `signature`, `timestamp`,
+     * `nonce` or `auth_statement`) when the job requires a per-call Cashu
+     * payment, and advertise `["secp256k1-schnorr-v2", "none"]` on `/v1/info#auth`. A body
+     * carrying any envelope field is verified as before and never falls back.
+     * Unsigned calls take Cashu only: their 402 and mid-job asks offer Cashu
+     * alone, with no credit menu, and an attached x402 or Tempo payment (upfront
+     * or mid-job) is refused with `payment_method_requires_signature` before any
+     * settlement. A Cashu token is the payment, so a failed job keeping it is
+     * ordinary Cashu behaviour; this SDK settles x402 before the job runs, so an
+     * anonymous x402 payer would lose money a standard x402 server would not
+     * take, and Tempo is held back until checked. A DVM without Cashu serves no
+     * unsigned calls. Signed callers keep every rail.
+     * Unsigned jobs run as the anonymous requester: the handler sees no
+     * `ctx.auth`, the input omits the envelope fields, prepaid credit and
+     * `request_id` recovery are refused, a payer whose response is lost recovers
+     * the job only by retrying with the same Cashu proofs, `X-Cashu-Request-Id`
+     * and body (a request id belongs to the first proofs banked under it, and a
+     * signed caller's job never recovers unsigned), and money released by a failed job
+     * lands on the shared anonymous requester. A dynamic-priced capability's `onQuote`
+     * handler runs for these anonymous callers with no `callerPubkey`, so an
+     * unauthenticated request can now trigger it, including any upstream calls
+     * it makes. The capability input must be a plain
+     * `z.object` schema so its envelope fields can be removed; any other schema
+     * keeps that capability signed-only. Defaults to false.
+     */
+    allowUnsignedPaid?: boolean;
 }
 /**
  * One scheme covers all capabilities and shares their replay store. Per-schema
@@ -5573,7 +5606,8 @@ interface SDKJobContext<State = Record<string, unknown>, Input = string> {
     /**
      * Verified caller identity from the descriptor's `auth` scheme.
      * Present when the DVM declares `auth: secp256k1Auth(...)`; undefined for
-     * DVMs without descriptor-level auth. The envelope is the same `T &
+     * DVMs without descriptor-level auth and for unsigned paid jobs admitted by
+     * `secp256k1Auth({ allowUnsignedPaid: true })`. The envelope is the same `T &
      * CanonicalEnvelope` the auth scheme produced — handlers can read
      * `ctx.auth.envelope.<field>` instead of re-parsing the input.
      */
@@ -5733,7 +5767,10 @@ interface QuoteContext<QuoteData = Record<string, unknown>> {
      * the descriptor declares an auth scheme and the
      * envelope verified — `/v1/quote` runs `checkAuth` before the handler, so by
      * the time this is set the signature is good. Undefined on unauthenticated
-     * DVMs; quote handlers that price per-caller must handle that.
+     * DVMs and for unsigned paid requests on a
+     * `secp256k1Auth({ allowUnsignedPaid: true })` DVM, where any anonymous
+     * caller can make the handler run while pricing `POST /v1/job`; quote
+     * handlers that price per-caller or call paid upstreams must handle that.
      */
     callerPubkey?: string;
     /**
@@ -6164,7 +6201,8 @@ interface DVMConfig<State = Record<string, unknown>, InputSchema extends ZodLike
      *
      * When set, the active capability's `input` schema is reused for
      * verification; one scheme covers every capability under the DVM.
-     * Advertised on `/v1/info#auth` as `[scheme.id]`.
+     * Advertised on `/v1/info#auth` as `[scheme.id]`, or `[scheme.id, "none"]`
+     * when the scheme also admits unsigned paid jobs.
      */
     auth?: DVMAuthScheme;
     /** Run once when the server starts, before accepting jobs. Use for validation or initialization. */

package/dist/{tempo-charge-store-2LK6IDLS.js → tempo-charge-store-A3CDF7D5.js}

@@ -1,9 +1,9 @@
 import {
   PostgresTempoChargeStore
-} from "./chunk-MD34LE6M.js";
+} from "./chunk-CXRI4N4Y.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-5U2RG3ZW.js";
+import "./chunk-ALTE7I6C.js";
 export {
   PostgresTempoChargeStore
 };

package/dist/{tempo-session-store-5MHCH3YW.js → tempo-session-store-EWBE5HJM.js}

@@ -1,11 +1,11 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-FRGKANTZ.js";
+} from "./chunk-ORBWKYDE.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-ELNWQS24.js";
-import "./chunk-5U2RG3ZW.js";
+import "./chunk-EIDRCGTY.js";
+import "./chunk-ALTE7I6C.js";
 export {
   PostgresTempoSessionStore,
   assertMonotonicTransition

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-BASsjgKw.js';
-import { a2 as JobReceipt, a7 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-BCRHimiY.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-CA7u1nHV.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-B_hOQS36.js';
+import { a2 as JobReceipt, a7 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-Bezn-_ZL.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-CgXT79tS.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/testing/index.js

@@ -4,22 +4,22 @@ import {
 import {
   MemoryJobStore,
   createInstrumentedFetch
-} from "../chunk-V4CBI5HB.js";
+} from "../chunk-Y6JJDOGO.js";
 import {
   JobCancelledError
 } from "../chunk-KVKJ7R5V.js";
 import {
   createNoopLogger
-} from "../chunk-VQHBJXBL.js";
+} from "../chunk-QTKGFG3I.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-PBT3H2LZ.js";
+import "../chunk-RX6FT7XA.js";
 import {
   validateCurrency
-} from "../chunk-7QGS27UT.js";
-import "../chunk-TN6MWTZI.js";
+} from "../chunk-72A4PHLD.js";
+import "../chunk-LY2JYSJS.js";
 import "../chunk-66HGCPBU.js";
-import "../chunk-5U2RG3ZW.js";
+import "../chunk-ALTE7I6C.js";
 
 // src/sdk/testing/test-context.ts
 function createTestContext(opts) {

package/dist/{usd-B8_WMfHT.d.ts → usd-CJwU3-A4.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-BCRHimiY.js';
+import { C as Currency } from './step-cache-Bezn-_ZL.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/dist/{x402-6T73AZQ6.js → x402-HVCUEWWU.js}

@@ -6,8 +6,8 @@ import {
 } from "./chunk-WMGXJQI3.js";
 import {
   verifyX402Payment
-} from "./chunk-OYBSDJR6.js";
-import "./chunk-F2LNWZCV.js";
+} from "./chunk-VKFR5PCW.js";
+import "./chunk-3KRFFLAT.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -37,7 +37,7 @@ import {
   x402SupportedNetworksHint
 } from "./chunk-BPYMEMQX.js";
 import "./chunk-66HGCPBU.js";
-import "./chunk-5U2RG3ZW.js";
+import "./chunk-ALTE7I6C.js";
 export {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.16.2",
+  "version": "0.17.1",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [