@dvmkit/sdk 0.18.0 → 0.19.0

package/dist/server/index.d.ts

@@ -1,15 +1,15 @@
-import { ai as CashuMode, bT as CreditLedgerQuerier, bU as CreditDrainEnqueue, bV as HostedSettlementReportObligations, w as ResolvedCreditConfig, bW as DVMAuthScheme, F as SignedRequestDomain, bX as CreditLedgerLike, bY as X402RefundSettlementGate, bZ as CreditSnapshot, b_ as CreditDrawRefundArgs, b$ as CreditDrawRefundResult, c0 as DrawResult, c1 as X402SettlementStatus, c2 as X402UnresolvedRefund, c3 as GrownDrawResult, c4 as DrawResolution, c5 as FundingRecord, c6 as CreditFundingEvidence, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, c9 as BlockedInvoiceCursor, ca as InvoiceReconciliation, cb as InvoiceWriteOff, cc as DrawRecord, cd as StalePendingDrawCursor, ce as TempoCreditLossEvidence, cf as TempoCreditLoss, cg as X402CreditLossEvidence, ch as X402CreditLoss, ci as DrainMethod, cj as DrainRequestResult, ck as BitcoinDepositLiability, bx as FundingLot, cl as CreditDrainRecord, cm as ChannelDrainCursor, cn as DrainWriteOff, co as DrainTransitionResult, cp as DrainReleaseResult, cq as DrainFulfilment, cr as HostingCleanupFence, aC as StepRecord, a4 as JobReceipt, a9 as Message, K as KVStore, M as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-B_18RAPb.js';
-export { cs as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, ct as ClientCompatibility, cu as ClientCompatibilityEnv, cv as ClientCompatibilityGate, cw as ClientCompatibilityRequirement, cx as ClientSemVer, g as CreateSignedRequestVerifierOpts, cy as CreditFundingBasis, cz as CreditInvoiceStatus, cA as CreditLedger, cB as CreditLedgerError, cC as CreditLedgerErrorCode, cD as CreditLedgerErrorDetails, cE as CreditLedgerPool, cF as CreditStatus, cG as DRAIN_DELIVERY_RESERVE_SATS, cH as DVM_PROTOCOL_VERSION, cI as DrainConflictReason, cJ as DrawRailValue, cK as DrawStatus, cL as HostedTempoCloseReportWriteOff, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cO as PostgresX402ChannelStorage, cP as ReplayStoreBackend, cQ as RevenueSkippedNoRailPayload, cR as RevenueSkippedNoRailReason, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, cS as Secp256k1AuthOpts, E as SignedRequestAudience, G as SignedRequestError, H as SignedRequestFailure, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, cT as TempoDrainDecision, cU as TempoDrainDecisionArgs, cV as TempoDrainDecisionResult, cW as TempoDrainHoldReason, V as UpfrontPayment, cX as X402ChannelStorageOpts, cY as X402RelayLockHolder, cZ as X402RelaySubmissionLock, c_ as X402RelaySubmissionLockError, c$ as allocateDrawValue, d0 as clientCompatibilityAttributes, d1 as clientCompatibilityMiddleware, d2 as clientUpgradeRequired, W as createSignedRequestVerifier, d3 as parseClientCapabilities, d4 as parseClientCompatibility, d5 as parseDvmClient, d6 as parseProtocolVersion, d7 as requireClientCompatibility, d8 as retryHostedTempoCloseReport, d9 as secp256k1Auth, da as signedRequestInput, Y as signedRequestStatementHeader, db as writeOffHostedTempoCloseReport } from '../step-cache-B_18RAPb.js';
+import { ai as CashuMode, bT as CreditLedgerQuerier, bU as CreditDrainEnqueue, bV as HostedSettlementReportObligations, w as ResolvedCreditConfig, bW as DVMAuthScheme, F as SignedRequestDomain, bX as CreditLedgerLike, bY as X402RefundSettlementGate, bZ as CreditSnapshot, b_ as CreditDrawRefundArgs, b$ as CreditDrawRefundResult, c0 as DrawResult, c1 as X402SettlementStatus, c2 as X402UnresolvedRefund, c3 as GrownDrawResult, c4 as DrawResolution, c5 as FundingRecord, c6 as CreditFundingEvidence, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, c9 as BlockedInvoiceCursor, ca as InvoiceReconciliation, cb as InvoiceWriteOff, cc as DrawRecord, cd as StalePendingDrawCursor, ce as TempoCreditLossEvidence, cf as TempoCreditLoss, cg as X402CreditLossEvidence, ch as X402CreditLoss, ci as DrainMethod, cj as DrainRequestResult, ck as BitcoinDepositLiability, bx as FundingLot, cl as CreditDrainRecord, cm as ChannelDrainCursor, cn as DrainWriteOff, co as DrainTransitionResult, cp as DrainReleaseResult, cq as DrainFulfilment, cr as HostingCleanupFence, aC as StepRecord, a4 as JobReceipt, a9 as Message, K as KVStore, M as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-B83Y9T9p.js';
+export { cs as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, ct as ClientCompatibility, cu as ClientCompatibilityEnv, cv as ClientCompatibilityGate, cw as ClientCompatibilityRequirement, cx as ClientSemVer, g as CreateSignedRequestVerifierOpts, cy as CreditFundingBasis, cz as CreditInvoiceStatus, cA as CreditLedger, cB as CreditLedgerError, cC as CreditLedgerErrorCode, cD as CreditLedgerErrorDetails, cE as CreditLedgerPool, cF as CreditStatus, cG as DRAIN_DELIVERY_RESERVE_SATS, cH as DVM_PROTOCOL_VERSION, cI as DrainConflictReason, cJ as DrawRailValue, cK as DrawStatus, cL as HostedTempoCloseReportWriteOff, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cO as PostgresX402ChannelStorage, cP as ReplayStoreBackend, cQ as RevenueSkippedNoRailPayload, cR as RevenueSkippedNoRailReason, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, cS as Secp256k1AuthOpts, E as SignedRequestAudience, G as SignedRequestError, H as SignedRequestFailure, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, cT as TempoDrainDecision, cU as TempoDrainDecisionArgs, cV as TempoDrainDecisionResult, cW as TempoDrainHoldReason, V as UpfrontPayment, cX as X402ChannelStorageOpts, cY as X402RelayLockHolder, cZ as X402RelaySubmissionLock, c_ as X402RelaySubmissionLockError, c$ as allocateDrawValue, d0 as clientCompatibilityAttributes, d1 as clientCompatibilityMiddleware, d2 as clientUpgradeRequired, W as createSignedRequestVerifier, d3 as parseClientCapabilities, d4 as parseClientCompatibility, d5 as parseDvmClient, d6 as parseProtocolVersion, d7 as requireClientCompatibility, d8 as retryHostedTempoCloseReport, d9 as secp256k1Auth, da as signedRequestInput, Y as signedRequestStatementHeader, db as writeOffHostedTempoCloseReport } from '../step-cache-B83Y9T9p.js';
 import { Pool } from 'pg';
-import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-CYjp3FA3.js';
-export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-CYjp3FA3.js';
+import { au as CreditMenu, a as AppEnv, U as UpfrontPaymentOpts, i as PaymentInfo, av as ReceiptIssuer, aw as LightningReceive, ax as TempoSettlementReadiness, ay as DVMHostOpts, az as DVMServeResult, L as LockPubkeyStateLoader, C as ConsumedCredentialStore } from '../credit-menu-D88XuTLU.js';
+export { aA as BuildCreditMenuArgs, aB as BuilderIdentity, aC as CREDIT_ENVELOPE_KEYS, aD as CreateX402BatchSettlementServerOpts, aE as CreditEnvelope, aF as CreditEnvelopeError, aG as CreditFundCommitment, aH as CreditTerms, aI as DEFAULT_INVOICE_TTL_SECONDS, aJ as DVMHost, aK as HostingClosureCommand, aL as HostingClosureEvidence, aM as HostingControlCommand, aN as HostingControlConfig, aO as HostingControlStatus, aP as JobManager, aQ as JobManagerOpts, aR as LightningReceiveConfig, aS as MIN_INVOICE_TTL_SECONDS, aT as MemoryConsumedCredentialStore, aU as MemoryConsumedCredentialStoreOpts, aV as MemoryProcessedPaymentStore, aW as MemoryX402ExactSettlementStore, aX as MountOpts, aY as OwnerDisplay, aZ as PaidJobCompletion, a_ as PaymentMode, a$ as PlatformReporterOpts, b0 as PostgresProcessedPaymentStore, b1 as PostgresX402ExactSettlementStore, b2 as PriceFiat, b3 as ProcessedPaymentQuerier, b4 as ProcessedPaymentRail, b5 as ProcessedPaymentRecord, b6 as ProcessedPaymentReplayError, b7 as ProcessedPaymentStore, b8 as X402BatchAcceptance, b9 as X402BatchFunding, ba as X402BatchRefusal, bb as X402BatchSettlementServer, bc as X402ExactAcceptance, bd as X402ExactIntentConflictError, be as X402ExactSettlementAttempt, bf as X402ExactSettlementChainEvidence, bg as X402ExactSettlementEffect, bh as X402ExactSettlementEvidenceMissingError, bi as X402ExactSettlementEvidenceReader, bj as X402ExactSettlementIntent, bk as X402ExactSettlementNotReadyError, bl as X402ExactSettlementServer, bm as X402ExactSettlementServerOpts, bn as X402ExactSettlementStatus, bo as X402ExactSettlementStore, bp as X402SettlementChainEvidence, bq as X402SettlementEvidenceReader, br as X402SettlementSubmissionError, bs as X402_BATCH_AUTO_SETTLEMENT, bt as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bu as X402_BATCH_SETTLEMENT_NETWORK, bv as attachCreditMenu, bw as buildCreditMenu, bx as createDVMHost, by as createX402BatchSettlementServer, bz as creditEnvelopeIgnoreFields, bA as drawSettlementRef, bB as extractCreditEnvelope, bC as fundingCommitment, bD as selectPrimaryCredit, bE as signHostingClosure, bF as signHostingControl, bG as stripCreditEnvelope, bH as toCreditView } from '../credit-menu-D88XuTLU.js';
 import { Context, Hono } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-D2w3wCvY.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-Ci2ihiVr.js';
-export { a as JobStatus, h as isStreamableJobStore } from '../job-store-Ci2ihiVr.js';
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-Cxn-umvR.js';
-export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-Cxn-umvR.js';
+import { F as FxFetcher } from '../fx-QoVA2oBc.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters, b as JobStore } from '../job-store-Dy-ogco6.js';
+export { a as JobStatus, h as isStreamableJobStore } from '../job-store-Dy-ogco6.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-sUCPlA1J.js';
+export { b as ContentHold, c as ContentHoldError, d as ContentHoldEvent, e as ContentHoldStore, f as ContentHoldsResponse, J as JobContentMetadata, g as baselineContentExpiry, h as contentMetadata, i as isContentHoldStore } from '../content-retention-sUCPlA1J.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-dMooihtY.js';
 import { Env, BlankSchema } from 'hono/types';
 import 'mppx';
@@ -17,7 +17,7 @@ import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
-import '../lightning-backend-DMBY7PaJ.js';
+import '../lightning-backend-B2wMBR-x.js';
 import '@cashu/cashu-ts';
 
 /** Default lifetime of a per-call implicit credit: 90 days before the ledger refuses new draws. */

package/dist/server/index.js

@@ -82,17 +82,17 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-QNAYENWA.js";
+} from "../chunk-NLMRNLKA.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
   ProcessedPaymentReplayError
 } from "../chunk-XRLKGCAW.js";
 import "../chunk-KRX7VNBG.js";
-import "../chunk-3KRFFLAT.js";
+import "../chunk-C65P6MGZ.js";
 import {
   MemoryCreditLedger
-} from "../chunk-AYEBQDAZ.js";
+} from "../chunk-DJRTYBEE.js";
 import {
   PostgresJobStore
 } from "../chunk-A6EY4K46.js";
@@ -121,7 +121,7 @@ import {
   X402_DEFAULT_NETWORK,
   resolveRpcOverride,
   x402NetworkToCaip2
-} from "../chunk-62FI3NJF.js";
+} from "../chunk-NUDHO4HV.js";
 import {
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
@@ -139,7 +139,7 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-B6T3FEVX.js";
+} from "../chunk-I5MXADJS.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SDK_INIT_ADVISORY_LOCK,
@@ -148,7 +148,7 @@ import {
 import "../chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "../chunk-IKMRT7O5.js";
+} from "../chunk-INYFUPXV.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
@@ -1310,7 +1310,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-N3TFZ26X.js"),
+          import("../tempo-session-store-XJE6GIXN.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1507,7 +1507,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-SBLDJCLE.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-ZCJXJG6R.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1516,7 +1516,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-DMIGIH2H.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-N4PZKTT5.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();

package/dist/{step-cache-B_18RAPb.d.ts → step-cache-B83Y9T9p.d.ts}

@@ -384,6 +384,12 @@ interface BuildPaymentRequirementsOpts {
     description?: string;
     mimeType?: string;
     version?: X402Version;
+    /**
+     * Validity window, in seconds, a compliant client gives its authorization.
+     * Facilitators do not enforce it; a server that settles after the work must
+     * read the signed `validBefore` instead.
+     */
+    maxTimeoutSeconds?: number;
 }
 /**
  * V1 carries the resource URL in each requirement; v2 carries it in the outer
@@ -5467,14 +5473,17 @@ interface Secp256k1AuthOpts {
      * `nonce` or `auth_statement`) when the job requires a per-call Cashu
      * payment, and advertise `["secp256k1-schnorr-v2", "none"]` on `/v1/info#auth`. A body
      * carrying any envelope field is verified as before and never falls back.
-     * Unsigned calls take Cashu only: their 402 and mid-job asks offer Cashu
-     * alone, with no credit menu, and an attached x402 or Tempo payment (upfront
-     * or mid-job) is refused with `payment_method_requires_signature` before any
-     * settlement. A Cashu token is the payment, so a failed job keeping it is
-     * ordinary Cashu behaviour; this SDK settles x402 before the job runs, so an
-     * anonymous x402 payer would lose money a standard x402 server would not
-     * take, and Tempo is held back until checked. A DVM without Cashu serves no
-     * unsigned calls. Signed callers keep every rail.
+     * Unsigned calls take Cashu, plus exact x402 on a capability that sets
+     * `maxRuntimeSeconds` when the DVM has Postgres: that payment is verified
+     * before the job and sent for settlement only if the job succeeds, so a
+     * failed or timed-out job costs the payer nothing. Their 402 and mid-job
+     * asks offer no credit menu (mid-job asks offer Cashu alone), and any other
+     * x402 payment, or a Tempo payment, is refused with
+     * `payment_method_requires_signature` before any settlement. A Cashu token is
+     * the payment, so a failed job keeping it is ordinary Cashu behaviour.
+     * Tempo stays signed-only: a push-mode credential is already broadcast when
+     * the DVM sees it. A DVM with neither unsigned rail serves no unsigned
+     * calls. Signed callers keep every rail.
      * Unsigned jobs run as the anonymous requester: the handler sees no
      * `ctx.auth`, the input omits the envelope fields, prepaid credit and
      * `request_id` recovery are refused, a payer whose response is lost recovers
@@ -6091,6 +6100,16 @@ interface CapabilityConfig<State = Record<string, unknown>, InputSchema extends
      * change the quote itself.
      */
     rates?: CapabilityRate[];
+    /**
+     * Longest this capability's handler may run, in whole seconds (1 to 600).
+     * The SDK fails a job that is still running when the bound passes and aborts
+     * `ctx.signal`. Setting it lets an unsigned caller pay this capability with
+     * x402 on a DVM configured with `secp256k1Auth({ allowUnsignedPaid: true })`
+     * and Postgres: the payment is verified before the job and settled only if
+     * it succeeds, so the bound also sets how long an authorization must stay
+     * valid. Leave it unset for long, multi-step or metered capabilities.
+     */
+    maxRuntimeSeconds?: number;
     /** Handle a newly submitted job for this capability (required). */
     onJob: (ctx: SDKJobContext<State, InputType<InputSchema>>) => void | Promise<void>;
     /** Handle a client response to a prompt within a job of this capability. */
@@ -6124,6 +6143,8 @@ interface CapabilityDescriptor<State = unknown, InputSchema extends ZodLike | un
     readonly onQuote?: QuoteConfig;
     /** Rate card published on `/v1/info`. See `CapabilityConfig.rates`. */
     readonly rates?: CapabilityRate[];
+    /** Runtime bound in seconds. See `CapabilityConfig.maxRuntimeSeconds`. */
+    readonly maxRuntimeSeconds?: number;
     readonly onJob: (ctx: SDKJobContext<State, InputType<InputSchema>>) => void | Promise<void>;
     /** Handle a client response to a prompt. */
     readonly onResponse?: (ctx: SDKJobContext<State, InputType<InputSchema>>, content: ResponseContent) => void | Promise<void>;
@@ -6266,6 +6287,8 @@ interface DVMConfig<State = Record<string, unknown>, InputSchema extends ZodLike
     onQuote?: QuoteConfig;
     /** Rate card published on `/v1/info`. Flat shape only — see `CapabilityConfig.rates`. */
     rates?: CapabilityRate[];
+    /** Runtime bound in seconds. Flat shape only — see `CapabilityConfig.maxRuntimeSeconds`. */
+    maxRuntimeSeconds?: number;
     /** Payment methods this DVM accepts. Default: derived from configured rails — adds "cashu" when `mints` is set, "x402" when `x402` is set, "tempo" when `tempo` is set. */
     paymentMethods?: PaymentMethod[];
     /** x402 stablecoin payment configuration (provider-side). */

package/dist/{tempo-session-store-N3TFZ26X.js → tempo-session-store-XJE6GIXN.js}

@@ -1,10 +1,10 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-JQ2Z3MIC.js";
+} from "./chunk-34H4ZKBM.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-IKMRT7O5.js";
+import "./chunk-INYFUPXV.js";
 import "./chunk-ALTE7I6C.js";
 export {
   PostgresTempoSessionStore,

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-Cxn-umvR.js';
-import { a4 as JobReceipt, a9 as Message, a5 as MessageType, K as KVStore, L as Logger, x as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-B_18RAPb.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-Ci2ihiVr.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-sUCPlA1J.js';
+import { a4 as JobReceipt, a9 as Message, a5 as MessageType, K as KVStore, L as Logger, x as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-B83Y9T9p.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-Dy-ogco6.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/{usd-ROzdYbbm.d.ts → usd-g9kCw86F.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-B_18RAPb.js';
+import { C as Currency } from './step-cache-B83Y9T9p.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/dist/{x402-HVCUEWWU.js → x402-XLFD43RF.js}

@@ -3,11 +3,11 @@ import {
   generateX402PrivateKey,
   getX402Balance,
   resolveX402Asset
-} from "./chunk-WMGXJQI3.js";
+} from "./chunk-5RGZN6WQ.js";
 import {
   verifyX402Payment
-} from "./chunk-VKFR5PCW.js";
-import "./chunk-3KRFFLAT.js";
+} from "./chunk-OTNHKRHA.js";
+import "./chunk-C65P6MGZ.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -26,7 +26,7 @@ import {
   paymentRequiredV2FromV1,
   usdcContractByCaip2,
   x402NetworkToCaip2
-} from "./chunk-62FI3NJF.js";
+} from "./chunk-NUDHO4HV.js";
 import "./chunk-FUJ36YDV.js";
 import {
   X402_NETWORKS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [