@dvmkit/sdk 0.17.0 → 0.18.0

package/dist/{chunk-C5XNZLZ7.js → chunk-AYEBQDAZ.js}

@@ -18,7 +18,7 @@ import {
   refundAssetDelta,
   refundRequest,
   x402SettlementPending
-} from "./chunk-B5MPLDRC.js";
+} from "./chunk-B6T3FEVX.js";
 
 // src/sdk/server/memory-credit-ledger.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-B5MPLDRC.js → chunk-B6T3FEVX.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "./chunk-EIDRCGTY.js";
+} from "./chunk-IKMRT7O5.js";
 import {
   x402NetworkByCaip2
 } from "./chunk-BPYMEMQX.js";

package/dist/{chunk-EIDRCGTY.js → chunk-IKMRT7O5.js}

@@ -5,6 +5,7 @@ import {
 // src/lib/pg-retry.ts
 import { AsyncLocalStorage } from "async_hooks";
 var postgresRecovery = new AsyncLocalStorage();
+var queryingPool = new AsyncLocalStorage();
 function withPostgresRecoveryContext(context, operation) {
   return postgresRecovery.run(context, operation);
 }
@@ -46,18 +47,39 @@ function applyRetryToPool(pool, label = "pg-pool") {
   });
   const p = pool;
   const origQuery = p.query.bind(pool);
-  p.query = (...args) => withTransportRecovery(pool, label, "pool.query", () => origQuery(...args));
-  const origConnect = p.connect.bind(pool);
-  p.connect = async (...args) => {
-    const client = await withTransportRecovery(
-      pool,
-      label,
-      "pool.connect",
-      () => origConnect(...args)
+  p.query = (...args) => withTransportRecovery(
+    pool,
+    label,
+    "pool.query",
+    () => queryingPool.run(pool, () => origQuery(...args))
+  );
+  const origConnect = pool.connect.bind(pool);
+  pool.connect = ((callback) => {
+    if (queryingPool.getStore() === pool) {
+      return queryingPool.exit(() => callback ? origConnect(callback) : origConnect());
+    }
+    const pending = withTransportRecovery(pool, label, "pool.connect", async () => {
+      const client = await origConnect();
+      guardCheckedOutClient(client, label);
+      const remainingMs = (postgresRecovery.getStore()?.deadlineMs ?? Infinity) - Date.now();
+      const probe = {
+        text: "SELECT 1",
+        query_timeout: Math.max(1, Math.min(connectionTimeoutMs(pool), remainingMs))
+      };
+      try {
+        await client.query(probe);
+        return client;
+      } catch (error) {
+        client.release(asError(error));
+        throw error;
+      }
+    });
+    if (!callback) return pending;
+    void pending.then(
+      (client) => callback(void 0, client, client.release),
+      (error) => callback(asError(error), void 0, () => void 0)
     );
-    guardCheckedOutClient(client, label);
-    return client;
-  };
+  });
 }
 function withPostgresTransactionRecovery(pool, label, operation, callback) {
   return withTransportRecovery(pool, label, operation, async () => {
@@ -79,8 +101,9 @@ function withPostgresTransactionRecovery(pool, label, operation, callback) {
 }
 async function withTransportRecovery(pool, label, operation, callback) {
   const context = postgresRecovery.getStore();
-  const maxAttempts = context?.drainPool ? hostPoolSize(pool) + 1 : 2;
+  const maxAttempts = context?.drainPool === false ? 2 : hostPoolSize(pool) + 1;
   const startedAt = Date.now();
+  const deadlineMs = context?.deadlineMs ?? startedAt + connectionTimeoutMs(pool);
   let firstError;
   for (let attempt = 1; ; attempt += 1) {
     try {
@@ -101,7 +124,7 @@ async function withTransportRecovery(pool, label, operation, callback) {
       if (!isTransportError(error)) throw error;
       firstError ??= asError(error);
       const elapsedMs = Date.now() - startedAt;
-      if (attempt >= maxAttempts || context !== void 0 && Date.now() >= context.deadlineMs) {
+      if (attempt >= maxAttempts || Date.now() >= deadlineMs) {
         logTransportRecovery({
           context,
           label,
@@ -116,6 +139,10 @@ async function withTransportRecovery(pool, label, operation, callback) {
     }
   }
 }
+function connectionTimeoutMs(pool) {
+  const configured = pool.options.connectionTimeoutMillis;
+  return typeof configured === "number" && Number.isFinite(configured) && configured > 0 ? configured : 1e4;
+}
 function hostPoolSize(pool) {
   const configured = pool.options.max;
   return typeof configured === "number" && Number.isSafeInteger(configured) && configured > 0 ? configured : 10;

package/dist/{chunk-ORBWKYDE.js → chunk-JQ2Z3MIC.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   withPostgresTransactionRecovery
-} from "./chunk-EIDRCGTY.js";
+} from "./chunk-IKMRT7O5.js";
 
 // src/sdk/server/tempo-session-store.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-5CCQEAQV.js → chunk-MXESSBXF.js}

@@ -314,7 +314,54 @@ function createDefaultReplayStore() {
 }
 var SATURATION_WARN_INTERVAL_SECONDS = 60;
 
+// src/sdk/cashu-locktime.ts
+var CASHU_MIN_LOCKTIME_SECONDS = 604800;
+var CASHU_LOCKTIME_RESUME_MARGIN_SECONDS = 86400;
+var CASHU_LOCKTIME_FLOOR_MINIMUM_SECONDS = 3600;
+var CASHU_SIGNED_LOCKTIME_FLOOR_MINIMUM_SECONDS = CASHU_LOCKTIME_RESUME_MARGIN_SECONDS + CASHU_LOCKTIME_FLOOR_MINIMUM_SECONDS;
+var DEFAULT_CASHU_LOCK_WINDOW_SECONDS = CASHU_MIN_LOCKTIME_SECONDS - CASHU_LOCKTIME_RESUME_MARGIN_SECONDS;
+function signedCashuLockWindowSeconds(cashu) {
+  return (cashu?.minLocktimeSeconds ?? CASHU_MIN_LOCKTIME_SECONDS) - CASHU_LOCKTIME_RESUME_MARGIN_SECONDS;
+}
+function unsignedCashuLockWindowSeconds(cashu) {
+  return cashu?.unsignedMinLocktimeSeconds ?? DEFAULT_CASHU_LOCK_WINDOW_SECONDS;
+}
+function shortestCashuLockWindowSeconds(cashu, servesUnsigned) {
+  const signed = signedCashuLockWindowSeconds(cashu);
+  return servesUnsigned ? Math.min(signed, unsignedCashuLockWindowSeconds(cashu)) : signed;
+}
+function resolveCashuConfig(cashu) {
+  if (cashu === void 0) return void 0;
+  if (typeof cashu !== "object" || cashu === null || Array.isArray(cashu)) {
+    throw new Error(`configureDVM: cashu must be an object of refund-locktime floors; received ${JSON.stringify(cashu)}`);
+  }
+  const minLocktimeSeconds = validFloor(cashu.minLocktimeSeconds, "minLocktimeSeconds", CASHU_SIGNED_LOCKTIME_FLOOR_MINIMUM_SECONDS) ?? CASHU_MIN_LOCKTIME_SECONDS;
+  const unsignedMinLocktimeSeconds = validFloor(cashu.unsignedMinLocktimeSeconds, "unsignedMinLocktimeSeconds", CASHU_LOCKTIME_FLOOR_MINIMUM_SECONDS) ?? minLocktimeSeconds - CASHU_LOCKTIME_RESUME_MARGIN_SECONDS;
+  const signedWindow = minLocktimeSeconds - CASHU_LOCKTIME_RESUME_MARGIN_SECONDS;
+  if (unsignedMinLocktimeSeconds > signedWindow) {
+    throw new Error(
+      `configureDVM: cashu.unsignedMinLocktimeSeconds (${unsignedMinLocktimeSeconds}) must not exceed cashu.minLocktimeSeconds less 86400 (${signedWindow}); a payer without a signature can take the signed floor instead by sending X-Cashu-Request-Id`
+    );
+  }
+  return { minLocktimeSeconds, unsignedMinLocktimeSeconds };
+}
+function validFloor(value, field, minimum) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < minimum) {
+    throw new Error(
+      `configureDVM: cashu.${field} must be a whole number of seconds, at least ${minimum}; received ${JSON.stringify(value)}`
+    );
+  }
+  return value;
+}
+
 export {
+  CASHU_MIN_LOCKTIME_SECONDS,
+  DEFAULT_CASHU_LOCK_WINDOW_SECONDS,
+  signedCashuLockWindowSeconds,
+  unsignedCashuLockWindowSeconds,
+  shortestCashuLockWindowSeconds,
+  resolveCashuConfig,
   humanizeZodError,
   humanizeZodIssues,
   zodIssuesOf,

package/dist/{chunk-4QYADZFN.js → chunk-QNAYENWA.js}

@@ -17,18 +17,23 @@ import {
 } from "./chunk-3KRFFLAT.js";
 import {
   MemoryCreditLedger
-} from "./chunk-C5XNZLZ7.js";
+} from "./chunk-AYEBQDAZ.js";
 import {
   PostgresJobStore
 } from "./chunk-A6EY4K46.js";
 import {
+  CASHU_MIN_LOCKTIME_SECONDS,
+  DEFAULT_CASHU_LOCK_WINDOW_SECONDS,
   SIGNED_ENVELOPE_FIELDS,
   SignedRequestError,
   humanizeZodError,
   humanizeZodIssues,
+  shortestCashuLockWindowSeconds,
+  signedCashuLockWindowSeconds,
   signedRequestInput,
+  unsignedCashuLockWindowSeconds,
   zodIssuesOf
-} from "./chunk-5CCQEAQV.js";
+} from "./chunk-MXESSBXF.js";
 import {
   MemoryJobStore,
   UNCAPPABLE_ASK_TOTAL,
@@ -138,7 +143,7 @@ import {
   isNonChannelBitcoinRail,
   netOwedSats,
   x402SettlementPending
-} from "./chunk-B5MPLDRC.js";
+} from "./chunk-B6T3FEVX.js";
 import {
   parseStoreValue
 } from "./chunk-YG7G4DPZ.js";
@@ -156,7 +161,7 @@ import {
 } from "./chunk-5UC7TOQC.js";
 import {
   withPostgresRecoveryContext
-} from "./chunk-EIDRCGTY.js";
+} from "./chunk-IKMRT7O5.js";
 import {
   DvmError,
   x402NetworkByCaip2
@@ -1174,6 +1179,9 @@ function pinAskFiat(args) {
   return { currency: args.currency, amountMicro: Math.max(1, rounded) };
 }
 function fundedMicroFor(priceFiat, paidMsats, requiredMsats) {
+  if (!Number.isFinite(requiredMsats) || requiredMsats <= 0) {
+    throw new Error(`fundedMicroFor needs a positive reference price in msats (got ${requiredMsats})`);
+  }
   if (paidMsats === requiredMsats) return priceFiat.amountMicro;
   return Math.round(priceFiat.amountMicro * paidMsats / requiredMsats);
 }
@@ -3440,11 +3448,9 @@ function valueCashuFunding(wallet, proofs) {
     netMsats: netSats.multiplyBy(1e3).toNumber()
   };
 }
-var CASHU_MIN_LOCKTIME_SECONDS = 604800;
-var CASHU_LOCKTIME_RESUME_MARGIN_SECONDS = 86400;
 var P2PK_TAG_KEYS = /* @__PURE__ */ new Set(["locktime", "refund", "pubkeys", "n_sigs", "sigflag", "n_sigs_refund"]);
 var SINGLE_VALUE_TAG_KEYS = /* @__PURE__ */ new Set(["locktime", "n_sigs", "sigflag", "n_sigs_refund"]);
-function assessCashuLock(secret, lockPubkeys, nowSec) {
+function assessCashuLock(secret, lockPubkeys, nowSec, floorSec = nowSec + DEFAULT_CASHU_LOCK_WINDOW_SECONDS) {
   try {
     parseP2PKSecret(secret);
     if (getSecretKind(secret) !== "P2PK") throw new Error("not P2PK");
@@ -3515,10 +3521,9 @@ function assessCashuLock(secret, lockPubkeys, nowSec) {
   if (locktimeValue !== void 0) {
     const locktime = /^(0|[1-9][0-9]*)$/.test(locktimeValue) ? Number(locktimeValue) : NaN;
     if (!Number.isSafeInteger(locktime)) return notExclusive(`Proof's locktime ${locktimeValue} is not a unix-seconds integer.`);
-    const floor = nowSec + CASHU_MIN_LOCKTIME_SECONDS - CASHU_LOCKTIME_RESUME_MARGIN_SECONDS;
-    if (locktime < floor) {
+    if (locktime < floorSec) {
       return notExclusive(
-        `Proof locktime ${locktime} is earlier than the accepted floor ${floor} (unix seconds).`,
+        `Proof locktime ${locktime} is earlier than the accepted floor ${floorSec} (unix seconds).`,
         true
       );
     }
@@ -3589,11 +3594,12 @@ async function acceptAccumulatorPayment(opts) {
     requestId
   };
   const nowSec = Math.floor(Date.now() / 1e3);
+  const floorSec = nowSec + opts.lockWindowSeconds;
   const tExpireMsByIndex = [];
   const matchedLockPubkeyByIndex = [];
   let belowFloorMessage;
   for (const p of proofs) {
-    const lock = assessCashuLock(p.secret, accepted, nowSec);
+    const lock = assessCashuLock(p.secret, accepted, nowSec, floorSec);
     if (lock.kind === "rejected") {
       if (!lock.locktimeBelowFloor) return { kind: "rejected", code: lock.code, message: lock.message };
       belowFloorMessage ??= lock.message;
@@ -3954,7 +3960,12 @@ async function verifyUpfrontPaymentInScope(opts) {
       };
     }
     if (cashuAccumulatorReady(opts)) {
-      return verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx);
+      return verifyAccumulatorReceipt(
+        { ...opts, cashuLockWindowSeconds: lockWindowOrDefault(opts.cashuLockWindowSeconds) },
+        mints,
+        requiredMsats,
+        ledgerCtx
+      );
     }
     return {
       paidMsats: 0,
@@ -4712,6 +4723,8 @@ async function verifyTempoSessionManagementCredential(args) {
     }
   };
 }
+var LOCK_SHAPE_HINT = "Lock a fresh token with data set to cashu.lock_pubkeys[0] from /v1/info as a 33-byte compressed hex key. Use only the locktime, refund, pubkeys, n_sigs, sigflag and n_sigs_refund tags, each once and with a value: pubkeys may list only other cashu.lock_pubkeys entries, n_sigs must be 1, sigflag SIG_INPUTS, refund keys compressed and distinct, n_sigs_refund at most the number of refund keys";
+var UNSIGNED_LOCK_REFUSAL_HINT = `${LOCK_SHAPE_HINT}, and any locktime at least cashu.unsigned_min_locktime seconds in the future.`;
 var PAYMENT_ERROR_COPY = {
   payment_invalid: {
     display: "The payment couldn't be verified, so the request wasn't accepted. Nothing was charged.",
@@ -4975,7 +4988,7 @@ var PAYMENT_ERROR_COPY = {
   },
   lock_not_exclusive: {
     display: "The payment token's lock would let a key other than this service's spend it, so it wasn't accepted. Nothing was charged.",
-    hint: "Lock a fresh token with data set to cashu.lock_pubkeys[0] from /v1/info as a 33-byte compressed hex key. Use only the locktime, refund, pubkeys, n_sigs, sigflag and n_sigs_refund tags, each once and with a value: pubkeys may list only other cashu.lock_pubkeys entries, n_sigs must be 1, sigflag SIG_INPUTS, refund keys compressed and distinct, n_sigs_refund at most the number of refund keys, and any locktime at least cashu.min_locktime minus 24 hours in the future.",
+    hint: `${LOCK_SHAPE_HINT}, and any locktime at least cashu.min_locktime minus 24 hours in the future.`,
     retryable: false
   },
   proof_not_unspent: {
@@ -5107,7 +5120,8 @@ async function verifyIncomingPaymentInScope(body, opts, snapshot) {
           dvmId: opts.dvmId,
           lockPubkeys: opts.lockPubkeys,
           requestId,
-          mintHealthTracker: opts.mintHealthTracker
+          mintHealthTracker: opts.mintHealthTracker,
+          cashuLockWindowSeconds: lockWindowOrDefault(opts.cashuLockWindowSeconds)
         },
         mints,
         snapshot.pendingPaymentMsats,
@@ -5585,7 +5599,8 @@ async function processIncomingPaymentInScope(job, body, opts) {
           dvmId: opts.dvmId,
           lockPubkeys: opts.lockPubkeys,
           requestId,
-          mintHealthTracker: opts.mintHealthTracker
+          mintHealthTracker: opts.mintHealthTracker,
+          cashuLockWindowSeconds: lockWindowOrDefault(opts.cashuLockWindowSeconds)
         },
         mints,
         job.pendingPaymentMsats
@@ -5741,6 +5756,9 @@ function creditPendingPayment(job) {
     job.pendingPaymentMsats = void 0;
   }
 }
+function lockWindowOrDefault(seconds) {
+  return seconds ?? DEFAULT_CASHU_LOCK_WINDOW_SECONDS;
+}
 function cashuAccumulatorReady(opts) {
   return opts.cashuMode === "p2pk-accumulator" && Boolean(opts.accumulatorDb || opts.disposableCashu) && Boolean(opts.dvmId) && (opts.lockPubkeys?.length ?? 0) > 0;
 }
@@ -5801,11 +5819,12 @@ async function verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx) {
   let credited;
   const headerless = !opts.requestId && opts.nut24 !== void 0;
   const previousRequired = headerless ? opts.nut24?.previousRequiredMsats : void 0;
-  const requiredFor = (paidMsats) => requiredMsats !== void 0 && paidMsats < requiredMsats && previousRequired !== void 0 && paidMsats >= previousRequired ? previousRequired : requiredMsats;
-  const held = (ctx, paidMsats) => ({
-    ...ctx,
-    requiredMsats: requiredFor(paidMsats) ?? ctx.requiredMsats
-  });
+  const heldAt = (paidMsats) => requiredMsats !== void 0 && paidMsats < requiredMsats && previousRequired !== void 0 && paidMsats >= previousRequired ? previousRequired : void 0;
+  const requiredFor = (paidMsats) => heldAt(paidMsats) ?? requiredMsats;
+  const held = (ctx, paidMsats) => {
+    const previous = heldAt(paidMsats);
+    return previous === void 0 ? ctx : { ...ctx, requiredMsats: previous };
+  };
   const signedFund = ledgerCtx?.creditEnvelope?.fund;
   const beforeCommit = ledgerCtx && signedFund ? (accepted) => {
     const expected = fundedMicroFor(
@@ -5852,6 +5871,7 @@ async function verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx) {
       } : void 0,
       dvmId,
       lockPubkeys,
+      lockWindowSeconds: opts.cashuLockWindowSeconds,
       beforeCommit,
       withCommitTx
     });
@@ -5880,6 +5900,7 @@ async function verifyAccumulatorReceipt(opts, mints, requiredMsats, ledgerCtx) {
           ...headerless && result.code === "replay_rejected" && {
             hint: "These proofs already paid for an earlier request. Resend them with that request's exact body to fetch its job; a new request needs new proofs."
           },
+          ...result.code === "lock_not_exclusive" && opts.cashuLockRefusalHint !== void 0 && { hint: opts.cashuLockRefusalHint },
           extra: { mints }
         }),
         status,
@@ -13548,6 +13569,9 @@ async function getKeysetFinalExpiry(mintUrl, keysetId) {
 // src/sdk/server/wallet-accumulator-monitor.ts
 var DEFAULT_TICK_INTERVAL_MS = 3e4;
 var EXPIRING_SOON_THRESHOLD_MS = 36 * 60 * 60 * 1e3;
+function expiringSoonThresholdMs(shortestLockWindowSeconds) {
+  return Math.min(EXPIRING_SOON_THRESHOLD_MS, Math.max(0, shortestLockWindowSeconds) * 500);
+}
 function startAccumulatorMonitor(opts) {
   const tickMs = opts.tickIntervalMs ?? DEFAULT_TICK_INTERVAL_MS;
   const now = opts.now ?? (() => Date.now());
@@ -13563,7 +13587,8 @@ function startAccumulatorMonitor(opts) {
           ...opts,
           now,
           lockKey,
-          graceSeconds: opts.lockPubkeyGraceSeconds ?? DEFAULT_LOCK_PUBKEY_GRACE_SECONDS
+          graceSeconds: opts.lockPubkeyGraceSeconds ?? DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,
+          expiringSoonThresholdMs: opts.expiringSoonThresholdMs ?? EXPIRING_SOON_THRESHOLD_MS
         });
       } catch (_err) {
         diagnosticConsole.error(
@@ -13651,7 +13676,7 @@ async function emitExpiryEvents(opts, db, activeState) {
     const delta = batch.oldestTExpire - now;
     if (delta < 0) {
       emitExpired(opts.dvmId, batch, -delta);
-    } else if (delta < EXPIRING_SOON_THRESHOLD_MS) {
+    } else if (delta < opts.expiringSoonThresholdMs) {
       emitExpiringSoon(opts.dvmId, batch, delta);
     }
   }
@@ -13864,9 +13889,14 @@ var JobManager = class {
     }
     if (opts.cashuMode === "p2pk-accumulator" && opts.db && opts.dvmId) {
       try {
+        const shortestWindow = shortestCashuLockWindowSeconds(
+          descriptor.cashu,
+          !descriptor.auth || descriptor.auth.allowUnsignedPaid === true
+        );
         this.accumulatorMonitor = startAccumulatorMonitor({
           pool: opts.db,
-          dvmId: opts.dvmId
+          dvmId: opts.dvmId,
+          expiringSoonThresholdMs: expiringSoonThresholdMs(shortestWindow)
         });
       } catch (_err) {
         diagnosticConsole.error(
@@ -15672,6 +15702,7 @@ var JobManager = class {
         disposableCashu: this.opts.disposableCashu,
         dvmId: this.opts.dvmId,
         lockPubkeys: extra?.lockPubkeys,
+        cashuLockWindowSeconds: signedCashuLockWindowSeconds(this.descriptor.cashu),
         mintHealthTracker: extra?.mintHealthTracker,
         fxFetcher: this.opts.fxFetcher,
         // the ledger leg — a mid-job payment is a top-up that funds
@@ -22512,6 +22543,7 @@ var DVMServer = class {
       disposableCashu: this.opts.disposableCashu,
       dvmId: this.opts.dvmId,
       lockPubkeys,
+      cashuLockWindowSeconds: signedCashuLockWindowSeconds(this.descriptor.cashu),
       requestId: c.req.header("X-Cashu-Request-Id"),
       mintHealthTracker: this.mintHealthTracker,
       fxFetcher: this.fxFetcher,
@@ -22759,7 +22791,10 @@ var DVMServer = class {
         mints,
         lock_pubkeys: activePubkeySet(active),
         lock_pubkey_grace_seconds: this.graceSeconds(),
-        min_locktime: CASHU_MIN_LOCKTIME_SECONDS,
+        min_locktime: this.descriptor.cashu?.minLocktimeSeconds ?? CASHU_MIN_LOCKTIME_SECONDS,
+        ...this.unsignedFloorAdvertised() && {
+          unsigned_min_locktime: unsignedCashuLockWindowSeconds(this.descriptor.cashu)
+        },
         canonical_id: this.opts.canonicalDvmId ?? this.opts.dvmId ?? null
       };
     }
@@ -23117,6 +23152,14 @@ var DVMServer = class {
       402
     );
   }
+  /**
+   * Whether `/v1/info` names the unsigned refund-locktime floor. Only a DVM
+   * that configures its floors and serves unsigned paid calls does, so a DVM
+   * on the defaults advertises exactly what it did before the option existed.
+   */
+  unsignedFloorAdvertised() {
+    return this.descriptor.cashu !== void 0 && (!this.descriptor.auth || this.descriptor.auth.allowUnsignedPaid === true);
+  }
   /** Whether this DVM takes Cashu, the only rail an unsigned payer may use. */
   unsignedCashuOffered() {
     return (this.opts.mints?.length ?? 0) > 0 && this.resolvePaymentMethods().includes("cashu");
@@ -23558,6 +23601,10 @@ var DVMServer = class {
             mints: this.advertisedMints(),
             previousRequiredMsats: this.previousPriceMsats(cap, dynamicUpfront, pricedAt)
           };
+          if (!railOpts.requestId) {
+            railOpts.cashuLockWindowSeconds = unsignedCashuLockWindowSeconds(this.descriptor.cashu);
+            if (this.unsignedFloorAdvertised()) railOpts.cashuLockRefusalHint = UNSIGNED_LOCK_REFUSAL_HINT;
+          }
         }
         hostingPaymentMayHaveLanded = Boolean(
           creditEnvelope || railOpts.cashuToken || railOpts.x402Payment || railOpts.mppCredential

package/dist/{content-retention-B_hOQS36.d.ts → content-retention-Cxn-umvR.d.ts}

@@ -1,4 +1,4 @@
-import { b as JobStore, J as JobRecord } from './job-store-CgXT79tS.js';
+import { b as JobStore, J as JobRecord } from './job-store-Ci2ihiVr.js';
 
 /** Authenticated caller metadata; omitted fields on older services mean unknown. */
 interface JobContentMetadata {

package/dist/{credit-ledger-5HMJ6VUX.js → credit-ledger-SBLDJCLE.js}

@@ -10,11 +10,11 @@ import {
   isDrainMethod,
   isFundingRail,
   x402SettlementPending
-} from "./chunk-B5MPLDRC.js";
+} from "./chunk-B6T3FEVX.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-5UC7TOQC.js";
-import "./chunk-EIDRCGTY.js";
+import "./chunk-IKMRT7O5.js";
 import "./chunk-BPYMEMQX.js";
 import "./chunk-H3GGFEE5.js";
 import "./chunk-ALTE7I6C.js";

package/dist/{credit-menu-D-h0zJCZ.d.ts → credit-menu-CYjp3FA3.d.ts}

@@ -1,11 +1,11 @@
-import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-B1hRUIOb.js';
-import { cp as HostingCleanupFence, da as HostedIntent, al as FundingMethod, p as PaymentMethod, bV as CreditLedgerLike, a7 as Message, O as UpfrontPayment, a1 as FundingReceipt, bX as CreditSnapshot, a2 as JobReceipt, S as SDKJobContext, az as StepCache, v as ResponseContent, P as PaymentContent, a3 as MessageType, bq as X402Receipt, aI as X402Config, bp as X402ExactVersionSupport, db as X402SettlementIntent, ad as PaymentRequirementsV2, dc as HostedFundingReservation, bR as CreditLedgerQuerier, dd as X402SettlementCursor, b$ as X402SettlementStatus, de as X402SettlementWriteOff, bW as X402RefundSettlementGate, df as X402FacilitatorAuth, dg as X402BatchSettlementConfig, cM as PostgresX402ChannelStorage, dh as X402PayoutObserver, bT as HostedSettlementReportObligations, bt as CreditDepositPayload, by as MppxServer, ag as CashuMode, di as CreditDepositEnqueue, dj as X402SettlementReconciliationReason, as as PaymentRequirements, c3 as FundingRecord, a5 as MppxCredential, b_ as DrawResult, cz as CreditLedgerError, a9 as ReceiptCredit, ai as DrainReceiptEvent, aa as DrainReceipt, a0 as DrawFundingReceipt, K as KVStore, z as SignedRequestAudience, dk as CreditDrawReleaseEnqueue, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cO as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, ct as ClientCompatibilityGate, cr as ClientCompatibility, bC as PostgresTempoSessionStore, bB as PayoutReporter, R as ResolvedCreditConfig, h as CreditView } from './step-cache-Bezn-_ZL.js';
+import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-DMBY7PaJ.js';
+import { cr as HostingCleanupFence, dc as HostedIntent, an as FundingMethod, q as PaymentMethod, bX as CreditLedgerLike, a9 as Message, V as UpfrontPayment, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, S as SDKJobContext, aB as StepCache, x as ResponseContent, P as PaymentContent, a5 as MessageType, bs as X402Receipt, aK as X402Config, br as X402ExactVersionSupport, dd as X402SettlementIntent, af as PaymentRequirementsV2, de as HostedFundingReservation, bT as CreditLedgerQuerier, df as X402SettlementCursor, c1 as X402SettlementStatus, dg as X402SettlementWriteOff, bY as X402RefundSettlementGate, dh as X402FacilitatorAuth, di as X402BatchSettlementConfig, cO as PostgresX402ChannelStorage, dj as X402PayoutObserver, bV as HostedSettlementReportObligations, bv as CreditDepositPayload, bA as MppxServer, ai as CashuMode, dk as CreditDepositEnqueue, dl as X402SettlementReconciliationReason, au as PaymentRequirements, c5 as FundingRecord, a7 as MppxCredential, c0 as DrawResult, cB as CreditLedgerError, ab as ReceiptCredit, ak as DrainReceiptEvent, ac as DrainReceipt, a2 as DrawFundingReceipt, K as KVStore, E as SignedRequestAudience, dm as CreditDrawReleaseEnqueue, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cQ as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, cv as ClientCompatibilityGate, ct as ClientCompatibility, bE as PostgresTempoSessionStore, bD as PayoutReporter, w as ResolvedCreditConfig, i as CreditView } from './step-cache-B_18RAPb.js';
 import { ProofLike, SerializedDLEQ, Proof } from '@cashu/cashu-ts';
 import { Hono, Context } from 'hono';
 import { Pool } from 'pg';
-import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-CpqQaIfg.js';
+import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-D2w3wCvY.js';
 import { Store, Challenge } from 'mppx';
-import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-CgXT79tS.js';
+import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-Ci2ihiVr.js';
 import { SettleResponse, SupportedResponse } from '@x402/core/types';
 import { Channel, AutoSettlementConfig } from '@x402/evm/batch-settlement/server';
 import { FacilitatorClient } from '@x402/core/server';
@@ -1966,6 +1966,14 @@ interface UpfrontPaymentOpts {
     lockPubkeys?: LockPubkey[];
     /** UUIDv4 from `X-Cashu-Request-Id` header. */
     requestId?: string;
+    /**
+     * Enforced refund-locktime window; see
+     * {@link AccumulatorReceiveOpts.lockWindowSeconds}. The SDK host always
+     * sets it; a direct caller that omits it gets the default window.
+     */
+    cashuLockWindowSeconds?: number;
+    /** Replaces the `lock_not_exclusive` hint when the floor that applied is not the signed one. */
+    cashuLockRefusalHint?: string;
     /**
      * Per-call Cashu the NUT-24 way, for a `POST /v1/job` the payer could pay
      * without signing. The unpaid 402 then carries the `X-Cashu` payment request
@@ -2335,6 +2343,8 @@ interface IncomingPaymentOpts {
     dvmId?: string;
     /** Active NUT-11 P2PK lock pubkeys (current + retired-in-grace). */
     lockPubkeys?: LockPubkey[];
+    /** Enforced refund-locktime window. Mirrors {@link UpfrontPaymentOpts.cashuLockWindowSeconds}. */
+    cashuLockWindowSeconds?: number;
     /** Runtime mint-health tracker. */
     mintHealthTracker?: MintHealthTracker;
     /**

package/dist/{fx-CpqQaIfg.d.ts → fx-D2w3wCvY.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-Bezn-_ZL.js';
+import { C as Currency } from './step-cache-B_18RAPb.js';
 
 /**
  * Quote-time FX snapshot. `rates` maps configured lowercase currency codes to

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-Bezn-_ZL.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CreateSignedRequestVerifierOpts, g as CreditConfig, h as CreditView, i as DEFAULT_CREDIT_MAX, j as DEFAULT_CREDIT_MIN, k as DEFAULT_CREDIT_TTL_SECONDS, l as DEFAULT_JOB_RETENTION_DAYS, m as DVMRouteContext, I as IncomingMessage, n as InputType, o as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, p as PaymentMethod, q as PriceValue, r as ProgressContent, s as PromptOpts, Q as QuoteConfig, t as QuoteContext, u as QuoteResult, R as ResolvedCreditConfig, v as ResponseContent, S as SDKJobContext, w as SDKPaymentRequestOpts, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, z as SignedRequestAudience, B as SignedRequestDomain, E as SignedRequestError, F as SignedRequestFailure, G as SignedRequestReplayStore, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, U as UnsupportedCurrencyError, O as UpfrontPayment, T as createSignedRequestVerifier, V as isZodSchema, W as signedRequestStatementHeader, X as validateCurrency } from './step-cache-Bezn-_ZL.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-CpqQaIfg.js';
-export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-CJwU3-A4.js';
-export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-CgXT79tS.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-B_18RAPb.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CashuConfig, g as CreateSignedRequestVerifierOpts, h as CreditConfig, i as CreditView, j as DEFAULT_CREDIT_MAX, k as DEFAULT_CREDIT_MIN, l as DEFAULT_CREDIT_TTL_SECONDS, m as DEFAULT_JOB_RETENTION_DAYS, n as DVMRouteContext, I as IncomingMessage, o as InputType, p as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, q as PaymentMethod, r as PriceValue, s as ProgressContent, t as PromptOpts, Q as QuoteConfig, u as QuoteContext, v as QuoteResult, R as ResolvedCashuConfig, w as ResolvedCreditConfig, x as ResponseContent, S as SDKJobContext, y as SDKPaymentRequestOpts, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, E as SignedRequestAudience, F as SignedRequestDomain, G as SignedRequestError, H as SignedRequestFailure, M as SignedRequestReplayStore, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, U as UnsupportedCurrencyError, V as UpfrontPayment, W as createSignedRequestVerifier, X as isZodSchema, Y as signedRequestStatementHeader, _ as validateCurrency } from './step-cache-B_18RAPb.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-D2w3wCvY.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-ROzdYbbm.js';
+export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-Ci2ihiVr.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-dMooihtY.js';
 export { z } from 'zod';
 import 'hono';

package/dist/index.js

@@ -9,8 +9,9 @@ import {
 } from "./chunk-A262WVYX.js";
 import {
   SignedRequestError,
-  createSignedRequestVerifier
-} from "./chunk-5CCQEAQV.js";
+  createSignedRequestVerifier,
+  resolveCashuConfig
+} from "./chunk-MXESSBXF.js";
 import {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_MIN,
@@ -69,6 +70,7 @@ function configureDVM(config) {
     x402: config.x402,
     mpp: config.mpp,
     credit: resolveCreditConfig(config.credit),
+    cashu: resolveCashuConfig(config.cashu),
     auth: config.auth
   };
   CONFIGURED_DVM_DESCRIPTORS.add(descriptor);

package/dist/internal/caller.d.ts

@@ -1,7 +1,7 @@
-import { Y as JsonValue, B as SignedRequestDomain, M as SignedRequestStatementHeader, _ as X402_BATCH_SETTLEMENT_SCHEME, $ as X402_EXACT_SCHEME, a0 as DrawFundingReceipt, a1 as FundingReceipt, a2 as JobReceipt$1, O as UpfrontPayment, a3 as MessageType, a4 as X402Version, a5 as MppxCredential, z as SignedRequestAudience, a6 as PaymentRequired, a7 as Message, a8 as MppxChallenge, a9 as ReceiptCredit, aa as DrainReceipt, C as Currency, ab as X402Wallet, ac as PaymentRequirementsV1, ad as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-Bezn-_ZL.js';
-export { ae as BuildPaymentRequirementsOpts, af as CapabilityDescriptor, ag as CashuMode, ah as CompleteContent, ai as DrainReceiptEvent, aj as ExactEvmPayload, ak as ExactEvmPayloadAuthorization, al as FundingMethod, am as MessageFrom, an as PaymentPayload, ao as PaymentPayloadV1, ap as PaymentPayloadV2, aq as PaymentRequestContent, ar as PaymentRequiredV2, as as PaymentRequirements, at as PromptContent, au as RAIL_REFUNDABLE, av as ReceiptOutcome, aw as ReceiptPayment, ax as ResourceInfo, ay as SettleResponse, az as StepCache, aA as StepRecord, aB as TextContent, aC as UnsignedDrainReceipt, aD as UnsignedDrawFundingReceipt, aE as UnsignedFundingReceipt, aF as UnsignedJobReceipt, aG as VerifyResponse, aH as WorkingContent, aI as X402Config, aJ as X402ResponseBody, aK as X402SelfRelayRpcFailureReason, aL as X402_DEFAULT_NETWORK, aM as X402_V1_VERSION, aN as X402_VERSION, aO as buildPaymentRequiredV2, aP as buildPaymentRequirements, aQ as caip2ToX402Network, aR as canonicalRequestPath, aS as canonicaliseForSigning, aT as canonicalize, aU as chainIdFromCaip2, aV as computeResultHash, aW as decodePayment, aX as decodePaymentRequiredHeader, aY as encodePayment, aZ as encodePaymentRequiredHeader, a_ as encodeSettleResponseHeader, a$ as exactEvmAuthorization, b0 as isArtifactMessage, b1 as isCancelMessage, b2 as isCompleteMessage, b3 as isDrainReceipt, b4 as isDrawFundingReceipt, b5 as isFundingReceipt, b6 as isPaymentRequestMessage, b7 as isPromptMessage, b8 as isSignedJobReceipt, b9 as isTextMessage, ba as isWorkingMessage, bb as paymentRequiredV2FromV1, bc as signDrainReceipt, bd as signDrawFundingReceipt, be as signFundingReceipt, bf as signReceipt, bg as usdcContractByCaip2, bh as usdcContractFor, bi as usdcDomainNameFor, bj as usdcDomainVersionFor, bk as verifyDrainReceipt, bl as verifyDrawFundingReceipt, bm as verifyFundingReceipt, bn as verifyReceipt, bo as x402NetworkToCaip2 } from '../step-cache-Bezn-_ZL.js';
-import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-B1hRUIOb.js';
-export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-B1hRUIOb.js';
+import { $ as JsonValue, F as SignedRequestDomain, O as SignedRequestStatementHeader, a0 as X402_BATCH_SETTLEMENT_SCHEME, a1 as X402_EXACT_SCHEME, a2 as DrawFundingReceipt, a3 as FundingReceipt, a4 as JobReceipt$1, V as UpfrontPayment, a5 as MessageType, a6 as X402Version, a7 as MppxCredential, E as SignedRequestAudience, a8 as PaymentRequired, a9 as Message, aa as MppxChallenge, ab as ReceiptCredit, ac as DrainReceipt, C as Currency, ad as X402Wallet, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-B_18RAPb.js';
+export { ag as BuildPaymentRequirementsOpts, ah as CapabilityDescriptor, ai as CashuMode, aj as CompleteContent, ak as DrainReceiptEvent, al as ExactEvmPayload, am as ExactEvmPayloadAuthorization, an as FundingMethod, ao as MessageFrom, ap as PaymentPayload, aq as PaymentPayloadV1, ar as PaymentPayloadV2, as as PaymentRequestContent, at as PaymentRequiredV2, au as PaymentRequirements, av as PromptContent, aw as RAIL_REFUNDABLE, ax as ReceiptOutcome, ay as ReceiptPayment, az as ResourceInfo, aA as SettleResponse, aB as StepCache, aC as StepRecord, aD as TextContent, aE as UnsignedDrainReceipt, aF as UnsignedDrawFundingReceipt, aG as UnsignedFundingReceipt, aH as UnsignedJobReceipt, aI as VerifyResponse, aJ as WorkingContent, aK as X402Config, aL as X402ResponseBody, aM as X402SelfRelayRpcFailureReason, aN as X402_DEFAULT_NETWORK, aO as X402_V1_VERSION, aP as X402_VERSION, aQ as buildPaymentRequiredV2, aR as buildPaymentRequirements, aS as caip2ToX402Network, aT as canonicalRequestPath, aU as canonicaliseForSigning, aV as canonicalize, aW as chainIdFromCaip2, aX as computeResultHash, aY as decodePayment, aZ as decodePaymentRequiredHeader, a_ as encodePayment, a$ as encodePaymentRequiredHeader, b0 as encodeSettleResponseHeader, b1 as exactEvmAuthorization, b2 as isArtifactMessage, b3 as isCancelMessage, b4 as isCompleteMessage, b5 as isDrainReceipt, b6 as isDrawFundingReceipt, b7 as isFundingReceipt, b8 as isPaymentRequestMessage, b9 as isPromptMessage, ba as isSignedJobReceipt, bb as isTextMessage, bc as isWorkingMessage, bd as paymentRequiredV2FromV1, be as signDrainReceipt, bf as signDrawFundingReceipt, bg as signFundingReceipt, bh as signReceipt, bi as usdcContractByCaip2, bj as usdcContractFor, bk as usdcDomainNameFor, bl as usdcDomainVersionFor, bm as verifyDrainReceipt, bn as verifyDrawFundingReceipt, bo as verifyFundingReceipt, bp as verifyReceipt, bq as x402NetworkToCaip2 } from '../step-cache-B_18RAPb.js';
+import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-DMBY7PaJ.js';
+export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-DMBY7PaJ.js';
 import { ProofLike, MeltQuoteBolt11Response, Proof, Wallet, MintQuoteBolt11Response, MintPreview, CounterSource, CounterRange, SerializedDLEQ, OutputData, OutputDataLike } from '@cashu/cashu-ts';
 export { g as getWallet } from '../wallet-Dwjs5n_M.js';
 import { SimplePool } from 'nostr-tools/pool';
@@ -9,8 +9,8 @@ import { Session } from 'mppx/tempo';
 import { Pool } from 'pg';
 import { PaymentRequired as PaymentRequired$1 } from '@x402/core/types';
 import { ClientChannelStorage, BatchSettlementClientContext, BatchSettlementEvmScheme } from '@x402/evm/batch-settlement/client';
-export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-CpqQaIfg.js';
-export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-CJwU3-A4.js';
+export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-D2w3wCvY.js';
+export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-ROzdYbbm.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';
@@ -1635,6 +1635,8 @@ interface V1InfoResponse {
         lock_pubkeys: string[];
         lock_pubkey_grace_seconds: number;
         min_locktime: number;
+        /** Refund-locktime floor, in seconds, for an unsigned paid call; present only when the DVM configures one. */
+        unsigned_min_locktime?: number;
         canonical_id: string | null;
     };
 }
@@ -1718,6 +1720,7 @@ interface ProviderInfo {
         mints: string[];
         lock_pubkeys: string[];
         min_locktime: number;
+        unsigned_min_locktime?: number;
         canonical_id: string | null;
     };
     /** Git SHA the deployed image was built from. `"unknown"` when baked-in SHA is absent. */
@@ -3950,8 +3953,9 @@ declare function withinAdvertisedTolerance(advertisedMicro: bigint, localMicro:
 declare function withInitRetry(fn: () => Promise<void>, label: string, delays?: number[]): Promise<void>;
 /** Patches pool.query and pool.connect in-place to retry transport errors.
  * Idempotent — safe to call multiple times on the same pool instance.
- * Ordinary work retries once; a bounded recovery context may replace every
- * socket in the configured pool during a money-protection request.
+ * Recovery may replace every socket in the configured pool. The connection
+ * timeout bounds how long ordinary work starts retries; a request context can
+ * supply its own deadline.
  * Registers pool.on("error") to prevent idle-client eviction errors from crashing the process,
  * and attaches an 'error' guard to every checked-out client for the same reason (see
  * {@link guardCheckedOutClient}). */

package/dist/internal/caller.js

@@ -211,7 +211,7 @@ import {
 import {
   applyRetryToPool,
   withInitRetry
-} from "../chunk-EIDRCGTY.js";
+} from "../chunk-IKMRT7O5.js";
 import {
   DvmError,
   X402_NETWORKS,

package/dist/internal/server.d.ts

@@ -1,22 +1,22 @@
 import { FacilitatorConfig } from '@x402/core/server';
-import { an as PaymentPayload, ac as PaymentRequirementsV1, ad as PaymentRequirementsV2, aI as X402Config, ay as SettleResponse, aG as VerifyResponse, bp as X402ExactVersionSupport, bq as X402Receipt, br as TransactionalPayoutHook, bs as CashuMeltCompleted } from '../step-cache-Bezn-_ZL.js';
-export { bt as CreditDepositPayload, bu as CreditDrainPayload, bv as FundingLot, bw as LotDebit, bx as LotDepletion, by as MppxServer, bz as NON_CHANNEL_BITCOIN_RAILS, bA as NonChannelBitcoinRail, bB as PayoutReporter, bC as PostgresTempoSessionStore, bD as RevenueReporter, bE as SIGNED_ENVELOPE_FIELDS, bF as SIGNED_ENVELOPE_TYPES, bG as X402TrackedChannel, bH as _testing, bI as createDefaultReplayStore, bJ as depleteLots, bK as fifoOrder, bL as inKindDrawMsats, bM as isInKindDepletion, bN as isNonChannelBitcoinRail, bO as lotOwedSats, bP as netOwedSats, bQ as wrapMppx } from '../step-cache-Bezn-_ZL.js';
+import { ap as PaymentPayload, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, aK as X402Config, aA as SettleResponse, aI as VerifyResponse, br as X402ExactVersionSupport, bs as X402Receipt, bt as TransactionalPayoutHook, bu as CashuMeltCompleted } from '../step-cache-B_18RAPb.js';
+export { bv as CreditDepositPayload, bw as CreditDrainPayload, bx as FundingLot, by as LotDebit, bz as LotDepletion, bA as MppxServer, bB as NON_CHANNEL_BITCOIN_RAILS, bC as NonChannelBitcoinRail, bD as PayoutReporter, bE as PostgresTempoSessionStore, bF as RevenueReporter, bG as SIGNED_ENVELOPE_FIELDS, bH as SIGNED_ENVELOPE_TYPES, bI as X402TrackedChannel, bJ as _testing, bK as createDefaultReplayStore, bL as depleteLots, bM as fifoOrder, bN as inKindDrawMsats, bO as isInKindDepletion, bP as isNonChannelBitcoinRail, bQ as lotOwedSats, bR as netOwedSats, bS as wrapMppx } from '../step-cache-B_18RAPb.js';
 import { Hono } from 'hono';
 import { Env, BlankSchema } from 'hono/types';
 import { Pool } from 'pg';
 export { Pool } from 'pg';
 import { g as getWallet } from '../wallet-Dwjs5n_M.js';
-import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-D-h0zJCZ.js';
-export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-D-h0zJCZ.js';
-export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-CgXT79tS.js';
+import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-CYjp3FA3.js';
+export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-CYjp3FA3.js';
+export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-Ci2ihiVr.js';
 import { z } from 'zod';
-export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-B1hRUIOb.js';
+export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-DMBY7PaJ.js';
 import 'mppx';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
 import '@cashu/cashu-ts';
-import '../fx-CpqQaIfg.js';
+import '../fx-D2w3wCvY.js';
 
 declare function verifyWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<VerifyResponse>;
 declare function settleWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<SettleResponse>;

package/dist/internal/server.js

@@ -1,6 +1,6 @@
 import {
   PostgresTempoSessionStore
-} from "../chunk-ORBWKYDE.js";
+} from "../chunk-JQ2Z3MIC.js";
 import {
   verifyX402Payment
 } from "../chunk-VKFR5PCW.js";
@@ -61,7 +61,7 @@ import {
   verifyUpfrontPayment,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-4QYADZFN.js";
+} from "../chunk-QNAYENWA.js";
 import "../chunk-XRLKGCAW.js";
 import {
   PayoutReporter
@@ -70,14 +70,14 @@ import {
   settleWithFacilitator,
   verifyWithFacilitator
 } from "../chunk-3KRFFLAT.js";
-import "../chunk-C5XNZLZ7.js";
+import "../chunk-AYEBQDAZ.js";
 import "../chunk-A6EY4K46.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SIGNED_ENVELOPE_TYPES,
   createDefaultReplayStore,
   humanizeZodError
-} from "../chunk-5CCQEAQV.js";
+} from "../chunk-MXESSBXF.js";
 import {
   createInstrumentedFetch,
   isStaleJobReapable
@@ -110,11 +110,11 @@ import {
   isNonChannelBitcoinRail,
   lotOwedSats,
   netOwedSats
-} from "../chunk-B5MPLDRC.js";
+} from "../chunk-B6T3FEVX.js";
 import "../chunk-YG7G4DPZ.js";
 import "../chunk-COYKJRMM.js";
 import "../chunk-5UC7TOQC.js";
-import "../chunk-EIDRCGTY.js";
+import "../chunk-IKMRT7O5.js";
 import "../chunk-BPYMEMQX.js";
 import "../chunk-H3GGFEE5.js";
 import {

package/dist/{job-store-CgXT79tS.d.ts → job-store-Ci2ihiVr.d.ts}

@@ -1,4 +1,4 @@
-import { a7 as Message, O as UpfrontPayment, al as FundingMethod, a1 as FundingReceipt, bX as CreditSnapshot, a2 as JobReceipt, aA as StepRecord, a3 as MessageType } from './step-cache-Bezn-_ZL.js';
+import { a9 as Message, V as UpfrontPayment, an as FundingMethod, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, aC as StepRecord, a5 as MessageType } from './step-cache-B_18RAPb.js';
 import { ProofLike } from '@cashu/cashu-ts';
 
 type JobStatus = "processing" | "completed" | "failed" | "awaiting-input" | "cancelled" | "working";

package/dist/{lightning-backend-B1hRUIOb.d.ts → lightning-backend-DMBY7PaJ.d.ts}

@@ -1,4 +1,4 @@
-import { Y as JsonValue } from './step-cache-Bezn-_ZL.js';
+import { $ as JsonValue } from './step-cache-B_18RAPb.js';
 
 declare const lockPubkeyBrand: unique symbol;
 /**

package/dist/{memory-credit-ledger-ME6FH462.js → memory-credit-ledger-DMIGIH2H.js}

@@ -1,11 +1,11 @@
 import {
   MemoryCreditLedger
-} from "./chunk-C5XNZLZ7.js";
-import "./chunk-B5MPLDRC.js";
+} from "./chunk-AYEBQDAZ.js";
+import "./chunk-B6T3FEVX.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-5UC7TOQC.js";
-import "./chunk-EIDRCGTY.js";
+import "./chunk-IKMRT7O5.js";
 import "./chunk-BPYMEMQX.js";
 import "./chunk-H3GGFEE5.js";
 import "./chunk-ALTE7I6C.js";

package/dist/server/index.d.ts

@@ -1,15 +1,15 @@
-import { ag as CashuMode, bR as CreditLedgerQuerier, bS as CreditDrainEnqueue, bT as HostedSettlementReportObligations, R as ResolvedCreditConfig, bU as DVMAuthScheme, B as SignedRequestDomain, bV as CreditLedgerLike, bW as X402RefundSettlementGate, bX as CreditSnapshot, bY as CreditDrawRefundArgs, bZ as CreditDrawRefundResult, b_ as DrawResult, b$ as X402SettlementStatus, c0 as X402UnresolvedRefund, c1 as GrownDrawResult, c2 as DrawResolution, c3 as FundingRecord, c4 as CreditFundingEvidence, c5 as CreditInvoiceRecord, c6 as InvoiceSettlement, c7 as BlockedInvoiceCursor, c8 as InvoiceReconciliation, c9 as InvoiceWriteOff, ca as DrawRecord, cb as StalePendingDrawCursor, cc as TempoCreditLossEvidence, cd as TempoCreditLoss, ce as X402CreditLossEvidence, cf as X402CreditLoss, cg as DrainMethod, ch as DrainRequestResult, ci as BitcoinDepositLiability, bv as FundingLot, cj as CreditDrainRecord, ck as ChannelDrainCursor, cl as DrainWriteOff, cm as DrainTransitionResult, cn as DrainReleaseResult, co as DrainFulfilment, cp as HostingCleanupFence, aA as StepRecord, a2 as JobReceipt, a7 as Message, K as KVStore, G as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-Bezn-_ZL.js';
-export { cq as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cr as ClientCompatibility, cs as ClientCompatibilityEnv, ct as ClientCompatibilityGate, cu as ClientCompatibilityRequirement, cv as ClientSemVer, f as CreateSignedRequestVerifierOpts, cw as CreditFundingBasis, cx as CreditInvoiceStatus, cy as CreditLedger, cz as CreditLedgerError, cA as CreditLedgerErrorCode, cB as CreditLedgerErrorDetails, cC as CreditLedgerPool, cD as CreditStatus, cE as DRAIN_DELIVERY_RESERVE_SATS, cF as DVM_PROTOCOL_VERSION, cG as DrainConflictReason, cH as DrawRailValue, cI as DrawStatus, cJ as HostedTempoCloseReportWriteOff, cK as JobCostReportPayload, cL as JobTerminalReportPayload, cM as PostgresX402ChannelStorage, cN as ReplayStoreBackend, cO as RevenueSkippedNoRailPayload, cP as RevenueSkippedNoRailReason, x as SIGNED_REQUEST_AUTH_ID, y as SIGNED_REQUEST_STATEMENT_VERSION, cQ as Secp256k1AuthOpts, z as SignedRequestAudience, E as SignedRequestError, F as SignedRequestFailure, H as SignedRequestSignOpts, M as SignedRequestStatementHeader, N as SignedRequestVerifier, cR as TempoDrainDecision, cS as TempoDrainDecisionArgs, cT as TempoDrainDecisionResult, cU as TempoDrainHoldReason, O as UpfrontPayment, cV as X402ChannelStorageOpts, cW as X402RelayLockHolder, cX as X402RelaySubmissionLock, cY as X402RelaySubmissionLockError, cZ as allocateDrawValue, c_ as clientCompatibilityAttributes, c$ as clientCompatibilityMiddleware, d0 as clientUpgradeRequired, T as createSignedRequestVerifier, d1 as parseClientCapabilities, d2 as parseClientCompatibility, d3 as parseDvmClient, d4 as parseProtocolVersion, d5 as requireClientCompatibility, d6 as retryHostedTempoCloseReport, d7 as secp256k1Auth, d8 as signedRequestInput, W as signedRequestStatementHeader, d9 as writeOffHostedTempoCloseReport } from '../step-cache-Bezn-_ZL.js';
+import { ai as CashuMode, bT as CreditLedgerQuerier, bU as CreditDrainEnqueue, bV as HostedSettlementReportObligations, w as ResolvedCreditConfig, bW as DVMAuthScheme, F as SignedRequestDomain, bX as CreditLedgerLike, bY as X402RefundSettlementGate, bZ as CreditSnapshot, b_ as CreditDrawRefundArgs, b$ as CreditDrawRefundResult, c0 as DrawResult, c1 as X402SettlementStatus, c2 as X402UnresolvedRefund, c3 as GrownDrawResult, c4 as DrawResolution, c5 as FundingRecord, c6 as CreditFundingEvidence, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, c9 as BlockedInvoiceCursor, ca as InvoiceReconciliation, cb as InvoiceWriteOff, cc as DrawRecord, cd as StalePendingDrawCursor, ce as TempoCreditLossEvidence, cf as TempoCreditLoss, cg as X402CreditLossEvidence, ch as X402CreditLoss, ci as DrainMethod, cj as DrainRequestResult, ck as BitcoinDepositLiability, bx as FundingLot, cl as CreditDrainRecord, cm as ChannelDrainCursor, cn as DrainWriteOff, co as DrainTransitionResult, cp as DrainReleaseResult, cq as DrainFulfilment, cr as HostingCleanupFence, aC as StepRecord, a4 as JobReceipt, a9 as Message, K as KVStore, M as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-B_18RAPb.js';
+export { cs as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, ct as ClientCompatibility, cu as ClientCompatibilityEnv, cv as ClientCompatibilityGate, cw as ClientCompatibilityRequirement, cx as ClientSemVer, g as CreateSignedRequestVerifierOpts, cy as CreditFundingBasis, cz as CreditInvoiceStatus, cA as CreditLedger, cB as CreditLedgerError, cC as CreditLedgerErrorCode, cD as CreditLedgerErrorDetails, cE as CreditLedgerPool, cF as CreditStatus, cG as DRAIN_DELIVERY_RESERVE_SATS, cH as DVM_PROTOCOL_VERSION, cI as DrainConflictReason, cJ as DrawRailValue, cK as DrawStatus, cL as HostedTempoCloseReportWriteOff, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cO as PostgresX402ChannelStorage, cP as ReplayStoreBackend, cQ as RevenueSkippedNoRailPayload, cR as RevenueSkippedNoRailReason, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, cS as Secp256k1AuthOpts, E as SignedRequestAudience, G as SignedRequestError, H as SignedRequestFailure, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, cT as TempoDrainDecision, cU as TempoDrainDecisionArgs, cV as TempoDrainDecisionResult, cW as TempoDrainHoldReason, V as UpfrontPayment, cX as X402ChannelStorageOpts, cY as X402RelayLockHolder, cZ as X402RelaySubmissionLock, c_ as X402RelaySubmissionLockError, c$ as allocateDrawValue, d0 as clientCompatibilityAttributes, d1 as clientCompatibilityMiddleware, d2 as clientUpgradeRequired, W as createSignedRequestVerifier, d3 as parseClientCapabilities, d4 as parseClientCompatibility, d5 as parseDvmClient, d6 as parseProtocolVersion, d7 as requireClientCompatibility, d8 as retryHostedTempoCloseReport, d9 as secp256k1Auth, da as signedRequestInput, Y as signedRequestStatementHeader, db as writeOffHostedTempoCloseReport } from '../step-cache-B_18RAPb.js';
 import { Pool } from 'pg';
-import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-D-h0zJCZ.js';
-export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-D-h0zJCZ.js';
+import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-CYjp3FA3.js';
+export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-CYjp3FA3.js';
 import { Context, Hono } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-CpqQaIfg.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-CgXT79tS.js';
-export { a as JobStatus, h as isStreamableJobStore } from '../job-store-CgXT79tS.js';
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-B_hOQS36.js';
-export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-B_hOQS36.js';
+import { F as FxFetcher } from '../fx-D2w3wCvY.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-Ci2ihiVr.js';
+export { a as JobStatus, h as isStreamableJobStore } from '../job-store-Ci2ihiVr.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-Cxn-umvR.js';
+export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-Cxn-umvR.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-dMooihtY.js';
 import { Env, BlankSchema } from 'hono/types';
 import 'mppx';
@@ -17,7 +17,7 @@ import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
-import '../lightning-backend-B1hRUIOb.js';
+import '../lightning-backend-DMBY7PaJ.js';
 import '@cashu/cashu-ts';
 
 /** Default lifetime of a per-call implicit credit: 90 days before the ledger refuses new draws. */

package/dist/server/index.js

@@ -82,7 +82,7 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-4QYADZFN.js";
+} from "../chunk-QNAYENWA.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
@@ -92,7 +92,7 @@ import "../chunk-KRX7VNBG.js";
 import "../chunk-3KRFFLAT.js";
 import {
   MemoryCreditLedger
-} from "../chunk-C5XNZLZ7.js";
+} from "../chunk-AYEBQDAZ.js";
 import {
   PostgresJobStore
 } from "../chunk-A6EY4K46.js";
@@ -101,7 +101,7 @@ import {
   createDefaultReplayStore,
   createSignedRequestVerifier,
   signedRequestInput
-} from "../chunk-5CCQEAQV.js";
+} from "../chunk-MXESSBXF.js";
 import {
   isStreamableJobStore
 } from "../chunk-Y6JJDOGO.js";
@@ -139,7 +139,7 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-B5MPLDRC.js";
+} from "../chunk-B6T3FEVX.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SDK_INIT_ADVISORY_LOCK,
@@ -148,7 +148,7 @@ import {
 import "../chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "../chunk-EIDRCGTY.js";
+} from "../chunk-IKMRT7O5.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
@@ -1310,7 +1310,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-EWBE5HJM.js"),
+          import("../tempo-session-store-N3TFZ26X.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1507,7 +1507,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-5HMJ6VUX.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-SBLDJCLE.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1516,7 +1516,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-ME6FH462.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-DMIGIH2H.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();

package/dist/{step-cache-Bezn-_ZL.d.ts → step-cache-B_18RAPb.d.ts}

@@ -6002,6 +6002,43 @@ interface ResolvedCreditConfig {
     /** Whether Tempo `charge` and x402 `exact` may fund prepaid credit. */
     allowOneShotStablecoin: boolean;
 }
+/**
+ * Refund-locktime floors for Cashu payments. A payer may lock proofs with a
+ * NUT-11 `locktime`; the DVM refuses one that passes before the proofs can be
+ * melted. Shortening a floor below its default is safe only when the builder
+ * melts more often than the floor: once a proof's locktime passes, an
+ * unmelted proof can be spent by the payer's refund key or, when the proof
+ * names no refund key, by anyone holding it.
+ */
+interface CashuConfig {
+    /**
+     * Shortest refund `locktime`, in seconds from now, a signed caller must
+     * use. Advertised as `cashu.min_locktime` on `/v1/info`; the DVM enforces it
+     * less 24 hours so a caller resuming an unacknowledged payment still
+     * clears it. Default 604800 (7 days). A whole number of at least 90000
+     * (25 hours), so the enforced floor is always at least an hour away.
+     */
+    minLocktimeSeconds?: number;
+    /**
+     * Shortest refund `locktime`, in seconds from receipt, for an unsigned
+     * `POST /v1/job` payment sent without `X-Cashu-Request-Id` (a NUT-24
+     * wallet) to a DVM without auth or one built with
+     * `secp256k1Auth({ allowUnsignedPaid: true })`. Such a wallet cannot be
+     * told this floor and locks to its own default, so it is enforced exactly,
+     * with no resume margin, and advertised as `cashu.unsigned_min_locktime`.
+     * A payment carrying `X-Cashu-Request-Id` takes the signed floor. Default
+     * `minLocktimeSeconds` less 24 hours (518400 when that is unset). A whole
+     * number of at least 3600, and no more than `minLocktimeSeconds` less 24
+     * hours: an unsigned payer can send `X-Cashu-Request-Id` to take the signed
+     * floor instead, so a longer unsigned floor would protect nothing.
+     */
+    unsignedMinLocktimeSeconds?: number;
+}
+/** A {@link CashuConfig} with both floors filled from their defaults. */
+interface ResolvedCashuConfig {
+    minLocktimeSeconds: number;
+    unsignedMinLocktimeSeconds: number;
+}
 /** Platform default for {@link CreditConfig.min} — a dust floor below which rail fees dominate. */
 declare const DEFAULT_CREDIT_MIN: PriceValue;
 /**
@@ -6241,6 +6278,8 @@ interface DVMConfig<State = Record<string, unknown>, InputSchema extends ZodLike
      * omitting it leaves callers on per-call payment. See {@link CreditConfig}.
      */
     credit?: CreditConfig;
+    /** Cashu refund-locktime floors. See {@link CashuConfig}. */
+    cashu?: CashuConfig;
     /**
      * Register DVM-scoped non-protocol routes on the descriptor's Hono sub-app
      * Invoked once per `host.mount(dvm)` against the sub-app that
@@ -6330,6 +6369,8 @@ interface DVMDescriptor<State = Record<string, unknown>, InputSchema extends Zod
      * `credit` block — the presence check IS the opt-in gate.
      */
     readonly credit?: ResolvedCreditConfig;
+    /** Cashu refund-locktime floors, present iff `configureDVM` was given a `cashu` block. */
+    readonly cashu?: ResolvedCashuConfig;
     /**
      * Descriptor-level auth scheme. Set when `configureDVM` was
      * called with `auth: secp256k1Auth(...)` — the SDK fires this on
@@ -6362,4 +6403,4 @@ declare class StepCache {
     static deserialize(records: StepRecord[]): StepCache;
 }
 
-export { X402_EXACT_SCHEME as $, type ApprovalContent as A, type SignedRequestDomain as B, type Currency as C, type DVMConfig as D, SignedRequestError as E, type SignedRequestFailure as F, type SignedRequestReplayStore as G, type SignedRequestSignOpts as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestStatementHeader as M, type SignedRequestVerifier as N, type UpfrontPayment as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCreditConfig as R, type SDKJobContext as S, createSignedRequestVerifier as T, UnsupportedCurrencyError as U, isZodSchema as V, signedRequestStatementHeader as W, validateCurrency as X, type JsonValue as Y, type ZodLike as Z, X402_BATCH_SETTLEMENT_SCHEME as _, type DVMDescriptor as a, exactEvmAuthorization as a$, type DrawFundingReceipt as a0, type FundingReceipt as a1, type JobReceipt as a2, type MessageType as a3, type X402Version as a4, type MppxCredential as a5, type PaymentRequired as a6, type Message as a7, type MppxChallenge as a8, type ReceiptCredit as a9, type StepRecord as aA, type TextContent as aB, type UnsignedDrainReceipt as aC, type UnsignedDrawFundingReceipt as aD, type UnsignedFundingReceipt as aE, type UnsignedJobReceipt as aF, type VerifyResponse as aG, type WorkingContent as aH, type X402Config$1 as aI, type X402ResponseBody as aJ, type X402SelfRelayRpcFailureReason as aK, X402_DEFAULT_NETWORK as aL, X402_V1_VERSION as aM, X402_VERSION as aN, buildPaymentRequiredV2 as aO, buildPaymentRequirements as aP, caip2ToX402Network as aQ, canonicalRequestPath as aR, canonicaliseForSigning as aS, canonicalize as aT, chainIdFromCaip2 as aU, computeResultHash as aV, decodePayment as aW, decodePaymentRequiredHeader as aX, encodePayment as aY, encodePaymentRequiredHeader as aZ, encodeSettleResponseHeader as a_, type DrainReceipt as aa, type X402Wallet as ab, type PaymentRequirementsV1 as ac, type PaymentRequirementsV2 as ad, type BuildPaymentRequirementsOpts as ae, type CapabilityDescriptor as af, type CashuMode as ag, type CompleteContent as ah, type DrainReceiptEvent as ai, type ExactEvmPayload as aj, type ExactEvmPayloadAuthorization as ak, type FundingMethod as al, type MessageFrom as am, type PaymentPayload as an, type PaymentPayloadV1 as ao, type PaymentPayloadV2 as ap, type PaymentRequestContent as aq, type PaymentRequiredV2 as ar, type PaymentRequirements as as, type PromptContent as at, RAIL_REFUNDABLE as au, type ReceiptOutcome as av, type ReceiptPayment as aw, type ResourceInfo as ax, type SettleResponse as ay, StepCache as az, type ArtifactContent as b, type X402SettlementStatus as b$, isArtifactMessage as b0, isCancelMessage as b1, isCompleteMessage as b2, isDrainReceipt as b3, isDrawFundingReceipt as b4, isFundingReceipt as b5, isPaymentRequestMessage as b6, isPromptMessage as b7, isSignedJobReceipt as b8, isTextMessage as b9, type NonChannelBitcoinRail as bA, PayoutReporter as bB, PostgresTempoSessionStore as bC, RevenueReporter as bD, SIGNED_ENVELOPE_FIELDS as bE, SIGNED_ENVELOPE_TYPES as bF, type X402TrackedChannel as bG, _testing as bH, createDefaultReplayStore as bI, depleteLots as bJ, fifoOrder as bK, inKindDrawMsats as bL, isInKindDepletion as bM, isNonChannelBitcoinRail as bN, lotOwedSats as bO, netOwedSats as bP, wrapMppx as bQ, type CreditLedgerQuerier as bR, type CreditDrainEnqueue as bS, HostedSettlementReportObligations as bT, type DVMAuthScheme as bU, type CreditLedgerLike as bV, type X402RefundSettlementGate as bW, type CreditSnapshot as bX, type CreditDrawRefundArgs as bY, type CreditDrawRefundResult as bZ, type DrawResult as b_, isWorkingMessage as ba, paymentRequiredV2FromV1 as bb, signDrainReceipt as bc, signDrawFundingReceipt as bd, signFundingReceipt as be, signReceipt as bf, usdcContractByCaip2 as bg, usdcContractFor as bh, usdcDomainNameFor as bi, usdcDomainVersionFor as bj, verifyDrainReceipt as bk, verifyDrawFundingReceipt as bl, verifyFundingReceipt as bm, verifyReceipt as bn, x402NetworkToCaip2 as bo, type X402ExactVersionSupport as bp, type X402Receipt as bq, type TransactionalPayoutHook as br, type CashuMeltCompleted as bs, type CreditDepositPayload as bt, type CreditDrainPayload as bu, type FundingLot as bv, type LotDebit as bw, type LotDepletion as bx, type MppxServer as by, NON_CHANNEL_BITCOIN_RAILS as bz, type CancelContent as c, clientCompatibilityMiddleware as c$, type X402UnresolvedRefund as c0, type GrownDrawResult as c1, type DrawResolution as c2, type FundingRecord as c3, type CreditFundingEvidence as c4, type CreditInvoiceRecord as c5, type InvoiceSettlement as c6, type BlockedInvoiceCursor as c7, type InvoiceReconciliation as c8, type InvoiceWriteOff as c9, type CreditLedgerErrorCode as cA, type CreditLedgerErrorDetails as cB, type CreditLedgerPool as cC, type CreditStatus as cD, DRAIN_DELIVERY_RESERVE_SATS as cE, DVM_PROTOCOL_VERSION as cF, type DrainConflictReason as cG, type DrawRailValue as cH, type DrawStatus as cI, type HostedTempoCloseReportWriteOff as cJ, type JobCostReportPayload as cK, type JobTerminalReportPayload as cL, PostgresX402ChannelStorage as cM, type ReplayStoreBackend as cN, type RevenueSkippedNoRailPayload as cO, type RevenueSkippedNoRailReason as cP, type Secp256k1AuthOpts as cQ, type TempoDrainDecision as cR, type TempoDrainDecisionArgs as cS, type TempoDrainDecisionResult as cT, type TempoDrainHoldReason as cU, type X402ChannelStorageOpts as cV, type X402RelayLockHolder as cW, type X402RelaySubmissionLock as cX, X402RelaySubmissionLockError as cY, allocateDrawValue as cZ, clientCompatibilityAttributes as c_, type DrawRecord as ca, type StalePendingDrawCursor as cb, type TempoCreditLossEvidence as cc, type TempoCreditLoss as cd, type X402CreditLossEvidence as ce, type X402CreditLoss as cf, type DrainMethod as cg, type DrainRequestResult as ch, type BitcoinDepositLiability as ci, type CreditDrainRecord as cj, type ChannelDrainCursor as ck, type DrainWriteOff as cl, type DrainTransitionResult as cm, type DrainReleaseResult as cn, type DrainFulfilment as co, HostingCleanupFence as cp, CLIENT_COMPATIBILITY_HEADERS as cq, type ClientCompatibility as cr, type ClientCompatibilityEnv as cs, type ClientCompatibilityGate as ct, type ClientCompatibilityRequirement as cu, type ClientSemVer as cv, type CreditFundingBasis as cw, type CreditInvoiceStatus as cx, CreditLedger as cy, CreditLedgerError as cz, type CanonicalEnvelope as d, clientUpgradeRequired as d0, parseClientCapabilities as d1, parseClientCompatibility as d2, parseDvmClient as d3, parseProtocolVersion as d4, requireClientCompatibility as d5, retryHostedTempoCloseReport as d6, secp256k1Auth as d7, signedRequestInput as d8, writeOffHostedTempoCloseReport as d9, type HostedIntent as da, type X402SettlementIntent as db, type HostedFundingReservation as dc, type X402SettlementCursor as dd, type X402SettlementWriteOff as de, type X402FacilitatorAuth as df, type X402BatchSettlementConfig as dg, type X402PayoutObserver as dh, type CreditDepositEnqueue as di, type X402SettlementReconciliationReason as dj, type CreditDrawReleaseEnqueue as dk, type CapabilityRate as e, type CreateSignedRequestVerifierOpts as f, type CreditConfig as g, type CreditView as h, DEFAULT_CREDIT_MAX as i, DEFAULT_CREDIT_MIN as j, DEFAULT_CREDIT_TTL_SECONDS as k, DEFAULT_JOB_RETENTION_DAYS as l, type DVMRouteContext as m, type InputType as n, InvalidCurrencyError as o, type PaymentMethod as p, type PriceValue as q, type ProgressContent as r, type PromptOpts as s, type QuoteContext as t, type QuoteResult as u, type ResponseContent as v, type SDKPaymentRequestOpts as w, SIGNED_REQUEST_AUTH_ID as x, SIGNED_REQUEST_STATEMENT_VERSION as y, type SignedRequestAudience as z };
+export { type JsonValue as $, type ApprovalContent as A, SIGNED_REQUEST_STATEMENT_VERSION as B, type Currency as C, type DVMConfig as D, type SignedRequestAudience as E, type SignedRequestDomain as F, SignedRequestError as G, type SignedRequestFailure as H, type IncomingMessage as I, type JobCost as J, type KVStore as K, type Logger as L, type SignedRequestReplayStore as M, type SignedRequestSignOpts as N, type SignedRequestStatementHeader as O, type PaymentContent as P, type QuoteConfig as Q, type ResolvedCashuConfig as R, type SDKJobContext as S, type SignedRequestVerifier as T, UnsupportedCurrencyError as U, type UpfrontPayment as V, createSignedRequestVerifier as W, isZodSchema as X, signedRequestStatementHeader as Y, type ZodLike as Z, validateCurrency as _, type DVMDescriptor as a, encodePaymentRequiredHeader as a$, X402_BATCH_SETTLEMENT_SCHEME as a0, X402_EXACT_SCHEME as a1, type DrawFundingReceipt as a2, type FundingReceipt as a3, type JobReceipt as a4, type MessageType as a5, type X402Version as a6, type MppxCredential as a7, type PaymentRequired as a8, type Message as a9, type SettleResponse as aA, StepCache as aB, type StepRecord as aC, type TextContent as aD, type UnsignedDrainReceipt as aE, type UnsignedDrawFundingReceipt as aF, type UnsignedFundingReceipt as aG, type UnsignedJobReceipt as aH, type VerifyResponse as aI, type WorkingContent as aJ, type X402Config$1 as aK, type X402ResponseBody as aL, type X402SelfRelayRpcFailureReason as aM, X402_DEFAULT_NETWORK as aN, X402_V1_VERSION as aO, X402_VERSION as aP, buildPaymentRequiredV2 as aQ, buildPaymentRequirements as aR, caip2ToX402Network as aS, canonicalRequestPath as aT, canonicaliseForSigning as aU, canonicalize as aV, chainIdFromCaip2 as aW, computeResultHash as aX, decodePayment as aY, decodePaymentRequiredHeader as aZ, encodePayment as a_, type MppxChallenge as aa, type ReceiptCredit as ab, type DrainReceipt as ac, type X402Wallet as ad, type PaymentRequirementsV1 as ae, type PaymentRequirementsV2 as af, type BuildPaymentRequirementsOpts as ag, type CapabilityDescriptor as ah, type CashuMode as ai, type CompleteContent as aj, type DrainReceiptEvent as ak, type ExactEvmPayload as al, type ExactEvmPayloadAuthorization as am, type FundingMethod as an, type MessageFrom as ao, type PaymentPayload as ap, type PaymentPayloadV1 as aq, type PaymentPayloadV2 as ar, type PaymentRequestContent as as, type PaymentRequiredV2 as at, type PaymentRequirements as au, type PromptContent as av, RAIL_REFUNDABLE as aw, type ReceiptOutcome as ax, type ReceiptPayment as ay, type ResourceInfo as az, type ArtifactContent as b, type CreditDrawRefundResult as b$, encodeSettleResponseHeader as b0, exactEvmAuthorization as b1, isArtifactMessage as b2, isCancelMessage as b3, isCompleteMessage as b4, isDrainReceipt as b5, isDrawFundingReceipt as b6, isFundingReceipt as b7, isPaymentRequestMessage as b8, isPromptMessage as b9, type MppxServer as bA, NON_CHANNEL_BITCOIN_RAILS as bB, type NonChannelBitcoinRail as bC, PayoutReporter as bD, PostgresTempoSessionStore as bE, RevenueReporter as bF, SIGNED_ENVELOPE_FIELDS as bG, SIGNED_ENVELOPE_TYPES as bH, type X402TrackedChannel as bI, _testing as bJ, createDefaultReplayStore as bK, depleteLots as bL, fifoOrder as bM, inKindDrawMsats as bN, isInKindDepletion as bO, isNonChannelBitcoinRail as bP, lotOwedSats as bQ, netOwedSats as bR, wrapMppx as bS, type CreditLedgerQuerier as bT, type CreditDrainEnqueue as bU, HostedSettlementReportObligations as bV, type DVMAuthScheme as bW, type CreditLedgerLike as bX, type X402RefundSettlementGate as bY, type CreditSnapshot as bZ, type CreditDrawRefundArgs as b_, isSignedJobReceipt as ba, isTextMessage as bb, isWorkingMessage as bc, paymentRequiredV2FromV1 as bd, signDrainReceipt as be, signDrawFundingReceipt as bf, signFundingReceipt as bg, signReceipt as bh, usdcContractByCaip2 as bi, usdcContractFor as bj, usdcDomainNameFor as bk, usdcDomainVersionFor as bl, verifyDrainReceipt as bm, verifyDrawFundingReceipt as bn, verifyFundingReceipt as bo, verifyReceipt as bp, x402NetworkToCaip2 as bq, type X402ExactVersionSupport as br, type X402Receipt as bs, type TransactionalPayoutHook as bt, type CashuMeltCompleted as bu, type CreditDepositPayload as bv, type CreditDrainPayload as bw, type FundingLot as bx, type LotDebit as by, type LotDepletion as bz, type CancelContent as c, allocateDrawValue as c$, type DrawResult as c0, type X402SettlementStatus as c1, type X402UnresolvedRefund as c2, type GrownDrawResult as c3, type DrawResolution as c4, type FundingRecord as c5, type CreditFundingEvidence as c6, type CreditInvoiceRecord as c7, type InvoiceSettlement as c8, type BlockedInvoiceCursor as c9, CreditLedger as cA, CreditLedgerError as cB, type CreditLedgerErrorCode as cC, type CreditLedgerErrorDetails as cD, type CreditLedgerPool as cE, type CreditStatus as cF, DRAIN_DELIVERY_RESERVE_SATS as cG, DVM_PROTOCOL_VERSION as cH, type DrainConflictReason as cI, type DrawRailValue as cJ, type DrawStatus as cK, type HostedTempoCloseReportWriteOff as cL, type JobCostReportPayload as cM, type JobTerminalReportPayload as cN, PostgresX402ChannelStorage as cO, type ReplayStoreBackend as cP, type RevenueSkippedNoRailPayload as cQ, type RevenueSkippedNoRailReason as cR, type Secp256k1AuthOpts as cS, type TempoDrainDecision as cT, type TempoDrainDecisionArgs as cU, type TempoDrainDecisionResult as cV, type TempoDrainHoldReason as cW, type X402ChannelStorageOpts as cX, type X402RelayLockHolder as cY, type X402RelaySubmissionLock as cZ, X402RelaySubmissionLockError as c_, type InvoiceReconciliation as ca, type InvoiceWriteOff as cb, type DrawRecord as cc, type StalePendingDrawCursor as cd, type TempoCreditLossEvidence as ce, type TempoCreditLoss as cf, type X402CreditLossEvidence as cg, type X402CreditLoss as ch, type DrainMethod as ci, type DrainRequestResult as cj, type BitcoinDepositLiability as ck, type CreditDrainRecord as cl, type ChannelDrainCursor as cm, type DrainWriteOff as cn, type DrainTransitionResult as co, type DrainReleaseResult as cp, type DrainFulfilment as cq, HostingCleanupFence as cr, CLIENT_COMPATIBILITY_HEADERS as cs, type ClientCompatibility as ct, type ClientCompatibilityEnv as cu, type ClientCompatibilityGate as cv, type ClientCompatibilityRequirement as cw, type ClientSemVer as cx, type CreditFundingBasis as cy, type CreditInvoiceStatus as cz, type CanonicalEnvelope as d, clientCompatibilityAttributes as d0, clientCompatibilityMiddleware as d1, clientUpgradeRequired as d2, parseClientCapabilities as d3, parseClientCompatibility as d4, parseDvmClient as d5, parseProtocolVersion as d6, requireClientCompatibility as d7, retryHostedTempoCloseReport as d8, secp256k1Auth as d9, signedRequestInput as da, writeOffHostedTempoCloseReport as db, type HostedIntent as dc, type X402SettlementIntent as dd, type HostedFundingReservation as de, type X402SettlementCursor as df, type X402SettlementWriteOff as dg, type X402FacilitatorAuth as dh, type X402BatchSettlementConfig as di, type X402PayoutObserver as dj, type CreditDepositEnqueue as dk, type X402SettlementReconciliationReason as dl, type CreditDrawReleaseEnqueue as dm, type CapabilityRate as e, type CashuConfig as f, type CreateSignedRequestVerifierOpts as g, type CreditConfig as h, type CreditView as i, DEFAULT_CREDIT_MAX as j, DEFAULT_CREDIT_MIN as k, DEFAULT_CREDIT_TTL_SECONDS as l, DEFAULT_JOB_RETENTION_DAYS as m, type DVMRouteContext as n, type InputType as o, InvalidCurrencyError as p, type PaymentMethod as q, type PriceValue as r, type ProgressContent as s, type PromptOpts as t, type QuoteContext as u, type QuoteResult as v, type ResolvedCreditConfig as w, type ResponseContent as x, type SDKPaymentRequestOpts as y, SIGNED_REQUEST_AUTH_ID as z };

package/dist/{tempo-session-store-EWBE5HJM.js → tempo-session-store-N3TFZ26X.js}

@@ -1,10 +1,10 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-ORBWKYDE.js";
+} from "./chunk-JQ2Z3MIC.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-EIDRCGTY.js";
+import "./chunk-IKMRT7O5.js";
 import "./chunk-ALTE7I6C.js";
 export {
   PostgresTempoSessionStore,

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-B_hOQS36.js';
-import { a2 as JobReceipt, a7 as Message, a3 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-Bezn-_ZL.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-CgXT79tS.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-Cxn-umvR.js';
+import { a4 as JobReceipt, a9 as Message, a5 as MessageType, K as KVStore, L as Logger, x as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-B_18RAPb.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-Ci2ihiVr.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/{usd-CJwU3-A4.d.ts → usd-ROzdYbbm.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-Bezn-_ZL.js';
+import { C as Currency } from './step-cache-B_18RAPb.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [