@dvmkit/sdk 0.18.0 → 0.19.1

package/dist/{content-retention-Cxn-umvR.d.ts → content-retention-C_TToHCi.d.ts}

@@ -1,4 +1,4 @@
-import { b as JobStore, J as JobRecord } from './job-store-Ci2ihiVr.js';
+import { b as JobStore, J as JobRecord } from './job-store-D4-18IKm.js';
 
 /** Authenticated caller metadata; omitted fields on older services mean unknown. */
 interface JobContentMetadata {

package/dist/{credit-ledger-SBLDJCLE.js → credit-ledger-ZCJXJG6R.js}

@@ -10,11 +10,11 @@ import {
   isDrainMethod,
   isFundingRail,
   x402SettlementPending
-} from "./chunk-B6T3FEVX.js";
+} from "./chunk-I5MXADJS.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-5UC7TOQC.js";
-import "./chunk-IKMRT7O5.js";
+import "./chunk-INYFUPXV.js";
 import "./chunk-BPYMEMQX.js";
 import "./chunk-H3GGFEE5.js";
 import "./chunk-ALTE7I6C.js";

package/dist/{credit-menu-CYjp3FA3.d.ts → credit-menu-BlODG4E7.d.ts}

@@ -1,11 +1,11 @@
-import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-DMBY7PaJ.js';
-import { cr as HostingCleanupFence, dc as HostedIntent, an as FundingMethod, q as PaymentMethod, bX as CreditLedgerLike, a9 as Message, V as UpfrontPayment, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, S as SDKJobContext, aB as StepCache, x as ResponseContent, P as PaymentContent, a5 as MessageType, bs as X402Receipt, aK as X402Config, br as X402ExactVersionSupport, dd as X402SettlementIntent, af as PaymentRequirementsV2, de as HostedFundingReservation, bT as CreditLedgerQuerier, df as X402SettlementCursor, c1 as X402SettlementStatus, dg as X402SettlementWriteOff, bY as X402RefundSettlementGate, dh as X402FacilitatorAuth, di as X402BatchSettlementConfig, cO as PostgresX402ChannelStorage, dj as X402PayoutObserver, bV as HostedSettlementReportObligations, bv as CreditDepositPayload, bA as MppxServer, ai as CashuMode, dk as CreditDepositEnqueue, dl as X402SettlementReconciliationReason, au as PaymentRequirements, c5 as FundingRecord, a7 as MppxCredential, c0 as DrawResult, cB as CreditLedgerError, ab as ReceiptCredit, ak as DrainReceiptEvent, ac as DrainReceipt, a2 as DrawFundingReceipt, K as KVStore, E as SignedRequestAudience, dm as CreditDrawReleaseEnqueue, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cQ as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, cv as ClientCompatibilityGate, ct as ClientCompatibility, bE as PostgresTempoSessionStore, bD as PayoutReporter, w as ResolvedCreditConfig, i as CreditView } from './step-cache-B_18RAPb.js';
+import { f as LockPubkey, e as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-B2wMBR-x.js';
+import { cr as HostingCleanupFence, dc as HostedIntent, an as FundingMethod, q as PaymentMethod, bX as CreditLedgerLike, a9 as Message, V as UpfrontPayment, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, S as SDKJobContext, aB as StepCache, x as ResponseContent, P as PaymentContent, a5 as MessageType, bs as X402Receipt, aK as X402Config, br as X402ExactVersionSupport, ap as PaymentPayload, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, dd as X402SettlementIntent, de as HostedFundingReservation, bT as CreditLedgerQuerier, df as X402SettlementCursor, c1 as X402SettlementStatus, dg as X402SettlementWriteOff, bY as X402RefundSettlementGate, dh as X402FacilitatorAuth, di as X402BatchSettlementConfig, cO as PostgresX402ChannelStorage, dj as X402PayoutObserver, bV as HostedSettlementReportObligations, bv as CreditDepositPayload, bA as MppxServer, ai as CashuMode, dk as CreditDepositEnqueue, dl as X402SettlementReconciliationReason, au as PaymentRequirements, c5 as FundingRecord, a7 as MppxCredential, c0 as DrawResult, cB as CreditLedgerError, ab as ReceiptCredit, ak as DrainReceiptEvent, ac as DrainReceipt, a2 as DrawFundingReceipt, K as KVStore, E as SignedRequestAudience, dm as CreditDrawReleaseEnqueue, cM as JobCostReportPayload, cN as JobTerminalReportPayload, cQ as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, c7 as CreditInvoiceRecord, c8 as InvoiceSettlement, cv as ClientCompatibilityGate, ct as ClientCompatibility, bE as PostgresTempoSessionStore, bD as PayoutReporter, w as ResolvedCreditConfig, i as CreditView } from './step-cache-B83Y9T9p.js';
 import { ProofLike, SerializedDLEQ, Proof } from '@cashu/cashu-ts';
 import { Hono, Context } from 'hono';
 import { Pool } from 'pg';
-import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-D2w3wCvY.js';
+import { d as FxSourceFailure, b as FxRateSnapshot, F as FxFetcher } from './fx-QoVA2oBc.js';
 import { Store, Challenge } from 'mppx';
-import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-Ci2ihiVr.js';
+import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-D4-18IKm.js';
 import { SettleResponse, SupportedResponse } from '@x402/core/types';
 import { Channel, AutoSettlementConfig } from '@x402/evm/batch-settlement/server';
 import { FacilitatorClient } from '@x402/core/server';
@@ -1163,7 +1163,7 @@ declare class MemoryProcessedPaymentStore implements ProcessedPaymentStore {
  */
 type AccumulatorRejectionCode = "missing_request_id" | "reserved_request_id" | "missing_lock_pubkey" | "not_p2pk_locked" | "wrong_lock_pubkey" | "lock_not_exclusive" | "proof_not_unspent" | "proof_pending" | "replay_rejected" | "request_id_reused" | "mint_unreachable" | "invalid_token";
 
-type X402ExactSettlementStatus = "prepared" | "submitting" | "settled" | "local_committed" | "ambiguous" | "rejected" | "complete";
+type X402ExactSettlementStatus = "prepared" | "submitting" | "settled" | "local_committed" | "ambiguous" | "rejected" | "released" | "complete";
 /** Serializable local economic effect that follows an exact settlement. */
 interface X402ExactSettlementEffect {
     priceFiat: {
@@ -1239,6 +1239,15 @@ interface X402ExactSettlementAttempt {
 /** Persistence contract for exact x402 settlement recovery. */
 interface X402ExactSettlementStore {
     prepare(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<X402ExactSettlementIntent>;
+    /**
+     * Same binding checks as {@link prepare}, but reports whether this call
+     * created the row. Concurrent callers presenting one authorization race to
+     * insert it, so exactly one sees `inserted: true`.
+     */
+    claim(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<{
+        intent: X402ExactSettlementIntent;
+        inserted: boolean;
+    }>;
     get(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent | undefined>;
     markSubmitting(args: {
         dvmId: string;
@@ -1259,6 +1268,16 @@ interface X402ExactSettlementStore {
         value?: T;
         replayed: boolean;
     }>;
+    /**
+     * Retire a `prepared` intent whose work did not succeed so it is never sent
+     * for settlement. Returns false for any other status, which keeps a
+     * submitted or settled authorization from being disowned.
+     */
+    release(args: {
+        dvmId: string;
+        intentId: string;
+        reason: string;
+    }): Promise<boolean>;
     markAdmissionComplete(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent>;
     list(args: {
         dvmId: string;
@@ -1274,6 +1293,10 @@ declare class PostgresX402ExactSettlementStore implements X402ExactSettlementSto
     constructor(pool: Pick<Pool, "query" | "connect">);
     init(): Promise<void>;
     prepare(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<X402ExactSettlementIntent>;
+    claim(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<{
+        intent: X402ExactSettlementIntent;
+        inserted: boolean;
+    }>;
     get(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent | undefined>;
     markSubmitting(args: {
         dvmId: string;
@@ -1294,6 +1317,11 @@ declare class PostgresX402ExactSettlementStore implements X402ExactSettlementSto
         value?: T;
         replayed: boolean;
     }>;
+    release(args: {
+        dvmId: string;
+        intentId: string;
+        reason: string;
+    }): Promise<boolean>;
     markAdmissionComplete(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent>;
     list(args: {
         dvmId: string;
@@ -1310,6 +1338,10 @@ declare class MemoryX402ExactSettlementStore implements X402ExactSettlementStore
     private readonly authBindings;
     private readonly locks;
     prepare(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<X402ExactSettlementIntent>;
+    claim(intent: Omit<X402ExactSettlementIntent, "status" | "createdAt" | "updatedAt" | "resolvedAt">): Promise<{
+        intent: X402ExactSettlementIntent;
+        inserted: boolean;
+    }>;
     get(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent | undefined>;
     markSubmitting(args: {
         dvmId: string;
@@ -1330,6 +1362,11 @@ declare class MemoryX402ExactSettlementStore implements X402ExactSettlementStore
         value?: T;
         replayed: boolean;
     }>;
+    release(args: {
+        dvmId: string;
+        intentId: string;
+        reason: string;
+    }): Promise<boolean>;
     markAdmissionComplete(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent>;
     list(args: {
         dvmId: string;
@@ -1402,6 +1439,61 @@ declare class X402ExactSettlementServer {
         effect?: X402ExactSettlementEffect;
         commit: (receipt: X402Receipt, tx?: ProcessedPaymentQuerier, effect?: X402ExactSettlementEffect) => Promise<T>;
     }): Promise<X402ExactAcceptance<T>>;
+    /**
+     * Verify an authorization and record it as `prepared` without settling it.
+     * The caller must run {@link settlePrepared} once the work it pays for has
+     * succeeded, or {@link release} when it has not. A presentation whose
+     * intent already exists is reported as `replayed` and neither verified nor
+     * prepared again, so one authorization admits one piece of work.
+     */
+    verifyAndPrepare(args: {
+        paymentHeader: string;
+        config: X402Config;
+        requiredUsdcMicro: bigint;
+        resource: string;
+        exactVersions?: X402ExactVersionSupport;
+        dvmId: string;
+        effect: X402ExactSettlementEffect;
+        /** Refuse, before any facilitator call, an authorization that expires sooner than this. */
+        minValidSeconds: number;
+        maxTimeoutSeconds: number;
+        nowMs?: number;
+    }): Promise<{
+        outcome: "prepared";
+        intentId: string;
+        payload: PaymentPayload;
+        requirements: PaymentRequirementsV1 | PaymentRequirementsV2;
+        validBeforeMs: number;
+    } | {
+        outcome: "replayed";
+        intentId: string;
+    } | {
+        outcome: "authorization_too_short";
+        intentId: string;
+        validBefore: string;
+    } | {
+        outcome: "rejected";
+        intentId?: string;
+        reason: string;
+    }>;
+    /** Settle an authorization recorded by {@link verifyAndPrepare} and commit its local effect. */
+    settlePrepared<T>(args: {
+        dvmId: string;
+        intentId: string;
+        payload: PaymentPayload;
+        requirements: PaymentRequirementsV1 | PaymentRequirementsV2;
+        config: X402Config;
+        btcUsdRate: number;
+        commit: (receipt: X402Receipt, tx?: ProcessedPaymentQuerier, effect?: X402ExactSettlementEffect) => Promise<T>;
+    }): Promise<X402ExactAcceptance<T>>;
+    /**
+     * Abandon a prepared authorization whose work did not succeed. The
+     * authorization is never sent to the facilitator, so it expires unspent.
+     * Returns false when the intent is no longer `prepared`.
+     */
+    release(dvmId: string, intentId: string, reason: string): Promise<boolean>;
+    private advance;
+    get(dvmId: string, intentId: string): Promise<X402ExactSettlementIntent | undefined>;
     list(args: {
         dvmId: string;
         limit: number;
@@ -1424,6 +1516,28 @@ declare class X402ExactSettlementEvidenceMissingError extends Error {
     readonly intentId: string;
     constructor(intentId: string);
 }
+/** A verified authorization kept in memory until its job finishes. */
+interface HeldX402Authorization {
+    payload: PaymentPayload;
+    requirements: PaymentRequirementsV1 | PaymentRequirementsV2;
+    config: X402Config;
+    btcUsdRate: number;
+    validBeforeMs: number;
+}
+/** How a finished job's deferred authorization ended. */
+type DeferredX402Outcome = "settled" | "unpaid";
+interface DeferredX402Settler {
+    hold(intentId: string, held: HeldX402Authorization): void;
+    /**
+     * Settle the job's authorization. Resolves `settled` once the funding is
+     * committed (also when an earlier call already did) and `unpaid` when the
+     * payment is definitively not collected. Rejects while the outcome is still
+     * unknown, so the caller retries.
+     */
+    settle(intentId: string): Promise<DeferredX402Outcome>;
+    /** Give up the authorization without sending it to the facilitator. */
+    release(intentId: string, reason: string): Promise<void>;
+}
 
 /** Exact successful chain action recovered for one ambiguous settlement attempt. */
 interface X402SettlementChainEvidence {
@@ -1909,6 +2023,15 @@ interface UpfrontPaymentOpts {
     x402ExactSettlement?: X402ExactSettlementServer;
     /** Exact generations the facilitator currently advertises. Defaults to both. */
     x402ExactVersions?: X402ExactVersionSupport;
+    /**
+     * Unsigned caller paying with exact x402: verify the authorization now and
+     * send it for settlement only when the job succeeds. Requires
+     * {@link x402ExactSettlement} and a credit ledger.
+     */
+    x402Deferred?: {
+        maxRuntimeSeconds: number;
+        settler: DeferredX402Settler;
+    };
     /** Reusable channel acceptor. Only consulted for fund-only `/v1/credit` requests. */
     x402BatchSettlement?: X402BatchSettlementServer;
     /**
@@ -2287,7 +2410,7 @@ declare function verifyTempoSessionManagementCredential(args: {
  * here: the former is already complete, the latter is a challenge envelope, not
  * an error report.
  */
-type PaymentErrorCode = "payment_invalid" | "x402_not_offered" | "payment_method_requires_signature" | "x402_settlement_ambiguous" | "cashu_unavailable" | "cashu_not_p2pk_locked" | "mint_health_pending" | "cashu_mint_sick" | "payment_insufficient" | "payment_unapplied" | "insufficient_credit" | "credit_expired" | "credit_unbacked" | "credit_not_found" | "tempo_channel_closing" | "settlement_pending" | "draw_conflict" | "funding_commitment_mismatch" | "credit_not_supported" | "one_shot_credit_not_supported" | "credit_below_min" | "below_rail_minimum" | "credit_over_max" | "credit_id_unavailable" | "nothing_to_drain" | "drain_below_dust" | "drain_not_found" | "drain_conflict" | "drain_method_unsupported" | "tempo_channel_exit_required" | "x402_settlement_submission_failed" | X402SettlementReconciliationReason | "lightning_settlement_pending" | "lightning_invoice_expired" | "lightning_unavailable" | AccumulatorRejectionCode;
+type PaymentErrorCode = "payment_invalid" | "x402_not_offered" | "payment_method_requires_signature" | "payment_authorization_too_short" | "x402_settlement_ambiguous" | "cashu_unavailable" | "cashu_not_p2pk_locked" | "mint_health_pending" | "cashu_mint_sick" | "payment_insufficient" | "payment_unapplied" | "insufficient_credit" | "credit_expired" | "credit_unbacked" | "credit_not_found" | "tempo_channel_closing" | "settlement_pending" | "draw_conflict" | "funding_commitment_mismatch" | "credit_not_supported" | "one_shot_credit_not_supported" | "credit_below_min" | "below_rail_minimum" | "credit_over_max" | "credit_id_unavailable" | "nothing_to_drain" | "drain_below_dust" | "drain_not_found" | "drain_conflict" | "drain_method_unsupported" | "tempo_channel_exit_required" | "x402_settlement_submission_failed" | X402SettlementReconciliationReason | "lightning_settlement_pending" | "lightning_invoice_expired" | "lightning_unavailable" | AccumulatorRejectionCode;
 /**
  * Per-code display, hint and retryability may be overridden for a particular
  * refusal. Keep the hint and retry decision consistent. Extra fields merge
@@ -2764,6 +2887,11 @@ interface JobManagerOpts {
     enqueueCreditDeposit?: CreditDepositEnqueue;
     /** Reporter outbox inserted atomically with a terminal draw release. */
     enqueueCreditDrawRelease?: CreditDrawReleaseEnqueue;
+    /**
+     * Settles or releases the x402 authorization behind an unsigned job once the
+     * job is terminal. Absent on a DVM that takes no unsigned x402.
+     */
+    deferredX402?: DeferredX402Settler;
     /** Credit lifetime a top-up mints with, from the DVM's advertised `credit.ttl`. */
     creditTtlMs?: number;
     /**
@@ -3002,6 +3130,12 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
     private readonly jobStore;
     private readonly idleTimers;
     private readonly cleanupTimers;
+    private readonly terminalReadRepairs;
+    private readonly terminalSnapshots;
+    private readonly terminalFailures;
+    private readonly terminalPersistenceRetries;
+    private terminalPersistenceStopped;
+    private readonly outgoingQueues;
     /** Cost revisions held only by a terminal handler owner until its durable merge succeeds. */
     private readonly terminalCostHandoffRetryTimers;
     /** Per-job NOTIFY unsubscribe handles for the durable-status watch. */
@@ -3194,6 +3328,9 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
      * subscriber's NOTIFY-driven fetch can see it).
      */
     persistJob(job: ServerJob): Promise<void>;
+    private scheduleTerminalPersistenceRetry;
+    private persistTerminalSnapshot;
+    private persistSnapshot;
     /**
      * Cross-machine terminal guard. `buildContext`'s guard reads the
      * in-memory `job.status`, so on its own it only protects the machine running
@@ -3278,6 +3415,7 @@ declare class JobManager<State, InputSchema extends ZodLike | undefined> {
      * `artifact`'s NOTIFY silently drops the artifact.
      */
     private wireMessageAppender;
+    private flushOutgoing;
     startIdleTimer(job: ServerJob, deadline?: number | undefined): void;
     clearIdleTimer(id: string): void;
     /** Cancel a job due to idle timeout. Exposed for the reactivation path's idle-expiry guard. */

package/dist/{fx-D2w3wCvY.d.ts → fx-QoVA2oBc.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-B_18RAPb.js';
+import { C as Currency } from './step-cache-B83Y9T9p.js';
 
 /**
  * Quote-time FX snapshot. `rates` maps configured lowercase currency codes to

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-B_18RAPb.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CashuConfig, g as CreateSignedRequestVerifierOpts, h as CreditConfig, i as CreditView, j as DEFAULT_CREDIT_MAX, k as DEFAULT_CREDIT_MIN, l as DEFAULT_CREDIT_TTL_SECONDS, m as DEFAULT_JOB_RETENTION_DAYS, n as DVMRouteContext, I as IncomingMessage, o as InputType, p as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, q as PaymentMethod, r as PriceValue, s as ProgressContent, t as PromptOpts, Q as QuoteConfig, u as QuoteContext, v as QuoteResult, R as ResolvedCashuConfig, w as ResolvedCreditConfig, x as ResponseContent, S as SDKJobContext, y as SDKPaymentRequestOpts, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, E as SignedRequestAudience, F as SignedRequestDomain, G as SignedRequestError, H as SignedRequestFailure, M as SignedRequestReplayStore, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, U as UnsupportedCurrencyError, V as UpfrontPayment, W as createSignedRequestVerifier, X as isZodSchema, Y as signedRequestStatementHeader, _ as validateCurrency } from './step-cache-B_18RAPb.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-D2w3wCvY.js';
-export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-ROzdYbbm.js';
-export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-Ci2ihiVr.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-B83Y9T9p.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CapabilityRate, f as CashuConfig, g as CreateSignedRequestVerifierOpts, h as CreditConfig, i as CreditView, j as DEFAULT_CREDIT_MAX, k as DEFAULT_CREDIT_MIN, l as DEFAULT_CREDIT_TTL_SECONDS, m as DEFAULT_JOB_RETENTION_DAYS, n as DVMRouteContext, I as IncomingMessage, o as InputType, p as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, q as PaymentMethod, r as PriceValue, s as ProgressContent, t as PromptOpts, Q as QuoteConfig, u as QuoteContext, v as QuoteResult, R as ResolvedCashuConfig, w as ResolvedCreditConfig, x as ResponseContent, S as SDKJobContext, y as SDKPaymentRequestOpts, z as SIGNED_REQUEST_AUTH_ID, B as SIGNED_REQUEST_STATEMENT_VERSION, E as SignedRequestAudience, F as SignedRequestDomain, G as SignedRequestError, H as SignedRequestFailure, M as SignedRequestReplayStore, N as SignedRequestSignOpts, O as SignedRequestStatementHeader, T as SignedRequestVerifier, U as UnsupportedCurrencyError, V as UpfrontPayment, W as createSignedRequestVerifier, X as isZodSchema, Y as signedRequestStatementHeader, _ as validateCurrency } from './step-cache-B83Y9T9p.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, d as FxSourceFailure, e as FxSourceFailureCategory, P as PlatformFxSource, f as createFxFetcher, g as fxRateFor, r as resolveFxSourceFromEnv } from './fx-QoVA2oBc.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-g9kCw86F.js';
+export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-D4-18IKm.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-dMooihtY.js';
 export { z } from 'zod';
 import 'hono';

package/dist/index.js

@@ -148,6 +148,15 @@ function validateCapabilityPrice(price, capabilityName, currency) {
   }
   validatePriceLiteral(price, `configureDVM: capability "${capabilityName}" price`, "price");
 }
+var MAX_RUNTIME_SECONDS_LIMIT = 600;
+function validateMaxRuntimeSeconds(value, capabilityName) {
+  if (value === void 0) return;
+  if (!Number.isInteger(value) || value < 1 || value > MAX_RUNTIME_SECONDS_LIMIT) {
+    throw new Error(
+      `configureDVM: capability "${capabilityName}" maxRuntimeSeconds must be a whole number of seconds from 1 to ${MAX_RUNTIME_SECONDS_LIMIT}, got ${JSON.stringify(value)}`
+    );
+  }
+}
 function collectTags(config) {
   const tagSet = /* @__PURE__ */ new Set();
   if (config.tag) tagSet.add(config.tag);
@@ -174,6 +183,7 @@ function buildCapabilityMap(config, currency) {
   const name = typeof config.capability === "string" ? config.capability : slugifyCapabilityName(config.name);
   validateCapabilityName(name);
   validateCapabilityPrice(config.price, name, currency);
+  validateMaxRuntimeSeconds(config.maxRuntimeSeconds, name);
   validateExampleAgainstInput(name, config.input, config.example);
   const entry = {
     name,
@@ -184,6 +194,7 @@ function buildCapabilityMap(config, currency) {
     price: config.price,
     onQuote: config.onQuote,
     rates: snapshotRates(config.rates),
+    maxRuntimeSeconds: config.maxRuntimeSeconds,
     onJob: config.onJob,
     onResponse: config.onResponse,
     onPayment: config.onPayment,
@@ -206,6 +217,7 @@ function buildExplicitCapabilities(capabilities, currency) {
       throw new Error(`configureDVM: capability "${name}" is missing required onJob handler`);
     }
     validateCapabilityPrice(cap.price, name, currency);
+    validateMaxRuntimeSeconds(cap.maxRuntimeSeconds, name);
     validateExampleAgainstInput(name, cap.input, cap.example);
     const entry = {
       name,
@@ -220,6 +232,7 @@ function buildExplicitCapabilities(capabilities, currency) {
       price: cap.price,
       onQuote: cap.onQuote,
       rates: snapshotRates(cap.rates),
+      maxRuntimeSeconds: cap.maxRuntimeSeconds,
       onJob: cap.onJob,
       onResponse: cap.onResponse,
       onPayment: cap.onPayment,
@@ -232,7 +245,7 @@ function buildExplicitCapabilities(capabilities, currency) {
   return out;
 }
 function flatPerCapFieldsSet(config) {
-  return config.input !== void 0 || config.example !== void 0 || config.state !== void 0 || config.price !== void 0 || config.onQuote !== void 0 || config.rates !== void 0 || typeof config.onResponse === "function" || typeof config.onPayment === "function" || typeof config.onApproval === "function" || typeof config.onCancel === "function" || typeof config.onMessage === "function";
+  return config.input !== void 0 || config.example !== void 0 || config.state !== void 0 || config.price !== void 0 || config.onQuote !== void 0 || config.rates !== void 0 || config.maxRuntimeSeconds !== void 0 || typeof config.onResponse === "function" || typeof config.onPayment === "function" || typeof config.onApproval === "function" || typeof config.onCancel === "function" || typeof config.onMessage === "function";
 }
 function validateExampleAgainstInput(capName, input, example) {
   if (example === void 0) return;

package/dist/internal/caller.d.ts

@@ -1,7 +1,7 @@
-import { $ as JsonValue, F as SignedRequestDomain, O as SignedRequestStatementHeader, a0 as X402_BATCH_SETTLEMENT_SCHEME, a1 as X402_EXACT_SCHEME, a2 as DrawFundingReceipt, a3 as FundingReceipt, a4 as JobReceipt$1, V as UpfrontPayment, a5 as MessageType, a6 as X402Version, a7 as MppxCredential, E as SignedRequestAudience, a8 as PaymentRequired, a9 as Message, aa as MppxChallenge, ab as ReceiptCredit, ac as DrainReceipt, C as Currency, ad as X402Wallet, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-B_18RAPb.js';
-export { ag as BuildPaymentRequirementsOpts, ah as CapabilityDescriptor, ai as CashuMode, aj as CompleteContent, ak as DrainReceiptEvent, al as ExactEvmPayload, am as ExactEvmPayloadAuthorization, an as FundingMethod, ao as MessageFrom, ap as PaymentPayload, aq as PaymentPayloadV1, ar as PaymentPayloadV2, as as PaymentRequestContent, at as PaymentRequiredV2, au as PaymentRequirements, av as PromptContent, aw as RAIL_REFUNDABLE, ax as ReceiptOutcome, ay as ReceiptPayment, az as ResourceInfo, aA as SettleResponse, aB as StepCache, aC as StepRecord, aD as TextContent, aE as UnsignedDrainReceipt, aF as UnsignedDrawFundingReceipt, aG as UnsignedFundingReceipt, aH as UnsignedJobReceipt, aI as VerifyResponse, aJ as WorkingContent, aK as X402Config, aL as X402ResponseBody, aM as X402SelfRelayRpcFailureReason, aN as X402_DEFAULT_NETWORK, aO as X402_V1_VERSION, aP as X402_VERSION, aQ as buildPaymentRequiredV2, aR as buildPaymentRequirements, aS as caip2ToX402Network, aT as canonicalRequestPath, aU as canonicaliseForSigning, aV as canonicalize, aW as chainIdFromCaip2, aX as computeResultHash, aY as decodePayment, aZ as decodePaymentRequiredHeader, a_ as encodePayment, a$ as encodePaymentRequiredHeader, b0 as encodeSettleResponseHeader, b1 as exactEvmAuthorization, b2 as isArtifactMessage, b3 as isCancelMessage, b4 as isCompleteMessage, b5 as isDrainReceipt, b6 as isDrawFundingReceipt, b7 as isFundingReceipt, b8 as isPaymentRequestMessage, b9 as isPromptMessage, ba as isSignedJobReceipt, bb as isTextMessage, bc as isWorkingMessage, bd as paymentRequiredV2FromV1, be as signDrainReceipt, bf as signDrawFundingReceipt, bg as signFundingReceipt, bh as signReceipt, bi as usdcContractByCaip2, bj as usdcContractFor, bk as usdcDomainNameFor, bl as usdcDomainVersionFor, bm as verifyDrainReceipt, bn as verifyDrawFundingReceipt, bo as verifyFundingReceipt, bp as verifyReceipt, bq as x402NetworkToCaip2 } from '../step-cache-B_18RAPb.js';
-import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-DMBY7PaJ.js';
-export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-DMBY7PaJ.js';
+import { $ as JsonValue, F as SignedRequestDomain, O as SignedRequestStatementHeader, a0 as X402_BATCH_SETTLEMENT_SCHEME, a1 as X402_EXACT_SCHEME, a2 as DrawFundingReceipt, a3 as FundingReceipt, a4 as JobReceipt$1, V as UpfrontPayment, a5 as MessageType, a6 as X402Version, a7 as MppxCredential, E as SignedRequestAudience, a8 as PaymentRequired, a9 as Message, aa as MppxChallenge, ab as ReceiptCredit, ac as DrainReceipt, C as Currency, ad as X402Wallet, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, L as Logger$1, K as KVStore } from '../step-cache-B83Y9T9p.js';
+export { ag as BuildPaymentRequirementsOpts, ah as CapabilityDescriptor, ai as CashuMode, aj as CompleteContent, ak as DrainReceiptEvent, al as ExactEvmPayload, am as ExactEvmPayloadAuthorization, an as FundingMethod, ao as MessageFrom, ap as PaymentPayload, aq as PaymentPayloadV1, ar as PaymentPayloadV2, as as PaymentRequestContent, at as PaymentRequiredV2, au as PaymentRequirements, av as PromptContent, aw as RAIL_REFUNDABLE, ax as ReceiptOutcome, ay as ReceiptPayment, az as ResourceInfo, aA as SettleResponse, aB as StepCache, aC as StepRecord, aD as TextContent, aE as UnsignedDrainReceipt, aF as UnsignedDrawFundingReceipt, aG as UnsignedFundingReceipt, aH as UnsignedJobReceipt, aI as VerifyResponse, aJ as WorkingContent, aK as X402Config, aL as X402ResponseBody, aM as X402SelfRelayRpcFailureReason, aN as X402_DEFAULT_NETWORK, aO as X402_V1_VERSION, aP as X402_VERSION, aQ as buildPaymentRequiredV2, aR as buildPaymentRequirements, aS as caip2ToX402Network, aT as canonicalRequestPath, aU as canonicaliseForSigning, aV as canonicalize, aW as chainIdFromCaip2, aX as computeResultHash, aY as decodePayment, aZ as decodePaymentRequiredHeader, a_ as encodePayment, a$ as encodePaymentRequiredHeader, b0 as encodeSettleResponseHeader, b1 as exactEvmAuthorization, b2 as isArtifactMessage, b3 as isCancelMessage, b4 as isCompleteMessage, b5 as isDrainReceipt, b6 as isDrawFundingReceipt, b7 as isFundingReceipt, b8 as isPaymentRequestMessage, b9 as isPromptMessage, ba as isSignedJobReceipt, bb as isTextMessage, bc as isWorkingMessage, bd as paymentRequiredV2FromV1, be as signDrainReceipt, bf as signDrawFundingReceipt, bg as signFundingReceipt, bh as signReceipt, bi as usdcContractByCaip2, bj as usdcContractFor, bk as usdcDomainNameFor, bl as usdcDomainVersionFor, bm as verifyDrainReceipt, bn as verifyDrawFundingReceipt, bo as verifyFundingReceipt, bp as verifyReceipt, bq as x402NetworkToCaip2 } from '../step-cache-B83Y9T9p.js';
+import { L as LightningTransactionListOptions, a as LightningTransactionSnapshot, b as LightningBackend, c as LightningPayment, d as LightningWalletInfo, C as CreatedInvoice, I as InvoiceStatus } from '../lightning-backend-B2wMBR-x.js';
+export { A as AttestationPayload, B as BuilderIdentityKeypair, e as CheckMintHealthOptions, f as LockPubkey, M as MintAmountBounds, g as MintHealthCheckResult, h as amountBoundsVerdict, i as assertNutSupport, j as buildAttestation, k as canSwap, l as checkMintHealth, m as generateIdentity, n as hashCapabilities, o as loadIdentitySecret, p as meltAmountBounds, s as signAttestation, t as toLockPubkey, v as verifyAttestation, w as writeIdentity } from '../lightning-backend-B2wMBR-x.js';
 import { ProofLike, MeltQuoteBolt11Response, Proof, Wallet, MintQuoteBolt11Response, MintPreview, CounterSource, CounterRange, SerializedDLEQ, OutputData, OutputDataLike } from '@cashu/cashu-ts';
 export { g as getWallet } from '../wallet-Dwjs5n_M.js';
 import { SimplePool } from 'nostr-tools/pool';
@@ -9,8 +9,8 @@ import { Session } from 'mppx/tempo';
 import { Pool } from 'pg';
 import { PaymentRequired as PaymentRequired$1 } from '@x402/core/types';
 import { ClientChannelStorage, BatchSettlementClientContext, BatchSettlementEvmScheme } from '@x402/evm/batch-settlement/client';
-export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-D2w3wCvY.js';
-export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-ROzdYbbm.js';
+export { h as FX_CACHE_TTL_MS, i as FX_RETRY_COUNT, w as warmFxSnapshot } from '../fx-QoVA2oBc.js';
+export { c as InvalidUsdPriceError, p as parseUsdPrice } from '../usd-g9kCw86F.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/internal/caller.js

@@ -4,7 +4,7 @@ import {
   getX402Balance,
   isValidEvmPrivateKey,
   resolveX402Asset
-} from "../chunk-WMGXJQI3.js";
+} from "../chunk-5RGZN6WQ.js";
 import {
   CAPABILITY_NAME_RE
 } from "../chunk-A262WVYX.js";
@@ -167,7 +167,7 @@ import {
   usdcDomainVersionFor,
   usdcToMsats,
   x402NetworkToCaip2
-} from "../chunk-62FI3NJF.js";
+} from "../chunk-NUDHO4HV.js";
 import {
   RAIL_REFUNDABLE,
   SIGNED_REQUEST_AUTH_ID,
@@ -211,7 +211,7 @@ import {
 import {
   applyRetryToPool,
   withInitRetry
-} from "../chunk-IKMRT7O5.js";
+} from "../chunk-INYFUPXV.js";
 import {
   DvmError,
   X402_NETWORKS,

package/dist/internal/server.d.ts

@@ -1,22 +1,22 @@
 import { FacilitatorConfig } from '@x402/core/server';
-import { ap as PaymentPayload, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, aK as X402Config, aA as SettleResponse, aI as VerifyResponse, br as X402ExactVersionSupport, bs as X402Receipt, bt as TransactionalPayoutHook, bu as CashuMeltCompleted } from '../step-cache-B_18RAPb.js';
-export { bv as CreditDepositPayload, bw as CreditDrainPayload, bx as FundingLot, by as LotDebit, bz as LotDepletion, bA as MppxServer, bB as NON_CHANNEL_BITCOIN_RAILS, bC as NonChannelBitcoinRail, bD as PayoutReporter, bE as PostgresTempoSessionStore, bF as RevenueReporter, bG as SIGNED_ENVELOPE_FIELDS, bH as SIGNED_ENVELOPE_TYPES, bI as X402TrackedChannel, bJ as _testing, bK as createDefaultReplayStore, bL as depleteLots, bM as fifoOrder, bN as inKindDrawMsats, bO as isInKindDepletion, bP as isNonChannelBitcoinRail, bQ as lotOwedSats, bR as netOwedSats, bS as wrapMppx } from '../step-cache-B_18RAPb.js';
+import { ap as PaymentPayload, ae as PaymentRequirementsV1, af as PaymentRequirementsV2, aK as X402Config, aA as SettleResponse, aI as VerifyResponse, br as X402ExactVersionSupport, bs as X402Receipt, bt as TransactionalPayoutHook, bu as CashuMeltCompleted } from '../step-cache-B83Y9T9p.js';
+export { bv as CreditDepositPayload, bw as CreditDrainPayload, bx as FundingLot, by as LotDebit, bz as LotDepletion, bA as MppxServer, bB as NON_CHANNEL_BITCOIN_RAILS, bC as NonChannelBitcoinRail, bD as PayoutReporter, bE as PostgresTempoSessionStore, bF as RevenueReporter, bG as SIGNED_ENVELOPE_FIELDS, bH as SIGNED_ENVELOPE_TYPES, bI as X402TrackedChannel, bJ as _testing, bK as createDefaultReplayStore, bL as depleteLots, bM as fifoOrder, bN as inKindDrawMsats, bO as isInKindDepletion, bP as isNonChannelBitcoinRail, bQ as lotOwedSats, bR as netOwedSats, bS as wrapMppx } from '../step-cache-B83Y9T9p.js';
 import { Hono } from 'hono';
 import { Env, BlankSchema } from 'hono/types';
 import { Pool } from 'pg';
 export { Pool } from 'pg';
 import { g as getWallet } from '../wallet-Dwjs5n_M.js';
-import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-CYjp3FA3.js';
-export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-CYjp3FA3.js';
-export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-Ci2ihiVr.js';
+import { C as ConsumedCredentialStore, L as LockPubkeyStateLoader } from '../credit-menu-BlODG4E7.js';
+export { A as AccumulatorPool, a as AppEnv, b as CreditFundingReport, D as DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, F as FiatDenomination, c as FiatDenominationFailure, d as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, e as LockPubkeyPool, f as LockPubkeyState, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, g as PaymentErrorCode, h as PaymentErrorDetail, i as PaymentInfo, j as PostgresTempoChargeStore, R as ReporterBannerOpts, k as ResolvedFx, l as RevenueBootCheckOpts, S as SDKServerOpts, m as ServerJob, n as ShortPayForfeit, T as TempoChannelReport, o as TempoObserverHealth, p as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, q as VerifyIncomingSnapshot, X as X402BatchChannelObservation, r as X402FacilitatorHealth, s as X402SettlementEvidenceOutcome, t as X402SettlementRepair, u as X402SettlementRepairRefusal, v as X402SettlementRepaired, w as X402WedgedSettlement, x as X402WedgedSettlementPage, y as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, z as abortJob, B as activePubkeySet, E as applyPaymentInfoToJob, G as assertRevenueReporterReady, H as buildPaymentErrorResponse, K as clearAccumulatorForDvm, N as createDVMServer, O as creditDepositPayload, Q as derivedFundCreditId, W as devModeSkipsPaymentVerification, Y as fromJobRecord, Z as fundedMicroFor, _ as hasPaymentProof, $ as hashLockKey, a0 as implicitCreditId, a1 as initLockPubkeyTable, a2 as initWalletAccumulatorTable, a3 as insertAccumulatorRows, a4 as isDerivedCreditId, a5 as isTerminal, a6 as isYieldMessage, a7 as issueUpfrontChallenges, a8 as loadLockPubkeyState, a9 as msatsToFiatMicro, aa as paymentErrorBody, ab as pinAskFiat, ac as priceFiatMicro, ad as processIncomingPayment, ae as providerMessage, af as pruneRetired, ag as repairX402ExactSettlementEffect, ah as resolveFxSnapshot, ai as resolvePriceFiat, aj as revenueReporterBannerState, ak as rotateLockPubkey, al as seedLockPubkeyState, am as toCreditTerms, an as toJobRecord, ao as unknownRouteNotFound, ap as verifyIncomingPayment, aq as verifyTempoSessionManagementCredential, ar as verifyUpfrontPayment, as as x402RequiredUsdcMicro, at as x402SettledShare } from '../credit-menu-BlODG4E7.js';
+export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-D4-18IKm.js';
 import { z } from 'zod';
-export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-DMBY7PaJ.js';
+export { f as LockPubkeyStoreLockPubkey, t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-B2wMBR-x.js';
 import 'mppx';
 import '@x402/evm/batch-settlement/server';
 import '@x402/core/types';
 import 'viem';
 import '@cashu/cashu-ts';
-import '../fx-D2w3wCvY.js';
+import '../fx-QoVA2oBc.js';
 
 declare function verifyWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<VerifyResponse>;
 declare function settleWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<SettleResponse>;

package/dist/internal/server.js

@@ -1,9 +1,9 @@
 import {
   PostgresTempoSessionStore
-} from "../chunk-JQ2Z3MIC.js";
+} from "../chunk-34H4ZKBM.js";
 import {
   verifyX402Payment
-} from "../chunk-VKFR5PCW.js";
+} from "../chunk-OTNHKRHA.js";
 import {
   RevenueReporter
 } from "../chunk-CVN2YNMG.js";
@@ -61,7 +61,7 @@ import {
   verifyUpfrontPayment,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-QNAYENWA.js";
+} from "../chunk-RPJKEWRR.js";
 import "../chunk-XRLKGCAW.js";
 import {
   PayoutReporter
@@ -69,9 +69,9 @@ import {
 import {
   settleWithFacilitator,
   verifyWithFacilitator
-} from "../chunk-3KRFFLAT.js";
-import "../chunk-AYEBQDAZ.js";
-import "../chunk-A6EY4K46.js";
+} from "../chunk-C65P6MGZ.js";
+import "../chunk-DJRTYBEE.js";
+import "../chunk-QCZXKUS2.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SIGNED_ENVELOPE_TYPES,
@@ -81,7 +81,7 @@ import {
 import {
   createInstrumentedFetch,
   isStaleJobReapable
-} from "../chunk-Y6JJDOGO.js";
+} from "../chunk-6RJAE332.js";
 import {
   JobCancelledError,
   abortJob,
@@ -94,7 +94,7 @@ import {
 import {
   toLockPubkey
 } from "../chunk-7RWE6ELV.js";
-import "../chunk-62FI3NJF.js";
+import "../chunk-NUDHO4HV.js";
 import "../chunk-SXL44PL5.js";
 import "../chunk-QTKGFG3I.js";
 import "../chunk-FUJ36YDV.js";
@@ -110,11 +110,11 @@ import {
   isNonChannelBitcoinRail,
   lotOwedSats,
   netOwedSats
-} from "../chunk-B6T3FEVX.js";
+} from "../chunk-I5MXADJS.js";
 import "../chunk-YG7G4DPZ.js";
 import "../chunk-COYKJRMM.js";
 import "../chunk-5UC7TOQC.js";
-import "../chunk-IKMRT7O5.js";
+import "../chunk-INYFUPXV.js";
 import "../chunk-BPYMEMQX.js";
 import "../chunk-H3GGFEE5.js";
 import {

package/dist/{job-store-Ci2ihiVr.d.ts → job-store-D4-18IKm.d.ts}

@@ -1,4 +1,4 @@
-import { a9 as Message, V as UpfrontPayment, an as FundingMethod, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, aC as StepRecord, a5 as MessageType } from './step-cache-B_18RAPb.js';
+import { a9 as Message, V as UpfrontPayment, an as FundingMethod, a3 as FundingReceipt, bZ as CreditSnapshot, a4 as JobReceipt, aC as StepRecord, a5 as MessageType } from './step-cache-B83Y9T9p.js';
 import { ProofLike } from '@cashu/cashu-ts';
 
 type JobStatus = "processing" | "completed" | "failed" | "awaiting-input" | "cancelled" | "working";
@@ -256,6 +256,8 @@ interface PaymentCreditDelta {
 }
 /** Atomic side effects applied with an outgoing provider message. */
 interface AppendOutgoingOptions {
+    /** Stable identity for retrying an append whose commit acknowledgement was lost. */
+    appendId?: string;
     /** A suspending SDK prompt/payment yield; event-driven messages leave status unchanged. */
     awaitingInput?: boolean;
     pendingPaymentDelta?: number;
@@ -567,6 +569,8 @@ interface StreamableJobStore extends JobStore {
      * machine won).
      */
     cancelJob(jobId: string, reason: string): Promise<boolean>;
+    /** Atomically fail a nonterminal job with its final reason and durable message history. */
+    failJob?(jobId: string, reason: string): Promise<boolean>;
     /**
      * Bump `last_activity_at` to `now` (Unix ms) for the given jobs that are
      * still in `processing`/`working`. Called on a

package/dist/{lightning-backend-DMBY7PaJ.d.ts → lightning-backend-B2wMBR-x.d.ts}

@@ -1,4 +1,4 @@
-import { $ as JsonValue } from './step-cache-B_18RAPb.js';
+import { $ as JsonValue } from './step-cache-B83Y9T9p.js';
 
 declare const lockPubkeyBrand: unique symbol;
 /**

package/dist/{memory-credit-ledger-DMIGIH2H.js → memory-credit-ledger-N4PZKTT5.js}

@@ -1,11 +1,11 @@
 import {
   MemoryCreditLedger
-} from "./chunk-AYEBQDAZ.js";
-import "./chunk-B6T3FEVX.js";
+} from "./chunk-DJRTYBEE.js";
+import "./chunk-I5MXADJS.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-5UC7TOQC.js";
-import "./chunk-IKMRT7O5.js";
+import "./chunk-INYFUPXV.js";
 import "./chunk-BPYMEMQX.js";
 import "./chunk-H3GGFEE5.js";
 import "./chunk-ALTE7I6C.js";

package/dist/{postgres-job-store-E5GXLRB4.js → postgres-job-store-QKN5LGAH.js}

@@ -1,6 +1,6 @@
 import {
   PostgresJobStore
-} from "./chunk-A6EY4K46.js";
+} from "./chunk-QCZXKUS2.js";
 import "./chunk-KVKJ7R5V.js";
 import "./chunk-BQJIFRAZ.js";
 import "./chunk-COYKJRMM.js";