@dvmkit/sdk 0.2.0-rc.9 → 0.2.1-rc.9

package/dist/{chunk-JDT5LCJC.js → chunk-MD3H3BF7.js}

@@ -1,7 +1,7 @@
 import {
   StepCache,
   loggers
-} from "./chunk-XQXJKJ3P.js";
+} from "./chunk-YO56VCTQ.js";
 import {
   redactUrl
 } from "./chunk-FUJ36YDV.js";

package/dist/{chunk-KSQEFVFJ.js → chunk-MMCE7XSR.js}

@@ -1,6 +1,6 @@
 import {
   IMPLICIT_CREDIT_TTL_MS
-} from "./chunk-5URG56JJ.js";
+} from "./chunk-A4CM2BD3.js";
 import {
   CREDITS_FILE,
   DvmError,

package/dist/{chunk-MRAGS5VP.js → chunk-N5B66UOS.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-YG7G4DPZ.js";
 import {
   withSdkInitLock
-} from "./chunk-S3XAHZQY.js";
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/tempo-charge-store.ts
 var DEFAULT_TABLE_NAME = "mpp_tempo_charge_replays";
@@ -46,7 +46,6 @@ var PostgresTempoChargeStore = class {
     );
     return rows[0] ? parseStoreValue(rows[0].value_json) : null;
   }
-  /** Replace one stored value. */
   async put(key, value) {
     await this.update(key, () => ({ op: "set", value, result: void 0 }));
   }
@@ -55,19 +54,9 @@ var PostgresTempoChargeStore = class {
     await this.update(key, () => ({ op: "delete", result: void 0 }));
   }
   /**
-   * Atomic read-modify-write, linearized across every machine sharing the pool.
-   *
-   * The advisory lock is taken before the row lock because a key's *first*
-   * write is the one that matters here: `FOR UPDATE` locks nothing when no row
-   * exists, so two machines marking one hash for the first time would both read
-   * `null` and both believe they won.
-   *
-   * Replay keys are unique per credential, so they never contend. The contended
-   * key is the fee-sponsor budget — one per `(chain, sponsor)`, read-modified
-   * several times per sponsored charge — and serializing it across machines is
-   * the point of sharing the store at all. The critical section is a SELECT and
-   * an upsert, so a queue of waiters clears in tens of milliseconds; a pooled
-   * connection is held for exactly that long and never across a chain call.
+   * Advisory locking covers the absent-row first write before the row lock.
+   * Both competing presentations of one credential and the shared sponsor
+   * budget need this serialization. The transaction contains no chain call.
    */
   async update(key, fn) {
     const client = await this.pool.connect();
@@ -106,7 +95,6 @@ var PostgresTempoChargeStore = class {
       client.release();
     }
   }
-  /** The boot DDL itself — always runs under {@link withSdkInitLock}. */
   async createTables() {
     await this.pool.query(`
       CREATE TABLE IF NOT EXISTS ${this.tableName} (

package/dist/{chunk-2ATUAUAO.js → chunk-O6D72KYA.js}

@@ -4,7 +4,7 @@ import {
   listCredits,
   maxAdvertisedMicro,
   withinAdvertisedTolerance
-} from "./chunk-KSQEFVFJ.js";
+} from "./chunk-MMCE7XSR.js";
 import {
   authorizeProtectedRemoval,
   isValidEvmPrivateKey,
@@ -34,7 +34,7 @@ import {
   getLastKnownBtcRate,
   msatsToUsdc,
   usdcToMsats
-} from "./chunk-5URG56JJ.js";
+} from "./chunk-A4CM2BD3.js";
 import {
   DvmError,
   X402_CHANNELS_FILE,

package/dist/{chunk-KXCKFIJI.js → chunk-QX52F6IB.js}

@@ -2,7 +2,7 @@ import {
   costAnchor,
   formatUsd,
   msatsToUsd
-} from "./chunk-5URG56JJ.js";
+} from "./chunk-A4CM2BD3.js";
 import {
   AGENT_MNEMONIC_FILE,
   BUILDER_CONFIG_DIR,

package/dist/{chunk-PHHAYRQV.js → chunk-U5VNEALI.js}

@@ -15,7 +15,7 @@ import {
   lotOwedSats,
   netOwedSats,
   x402SettlementPending
-} from "./chunk-V7EVFLAK.js";
+} from "./chunk-2D75MNNG.js";
 
 // src/sdk/server/memory-credit-ledger.ts
 import { randomUUID } from "crypto";
@@ -42,7 +42,6 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
     fork.x402Settlements = this.x402Settlements;
     return fork;
   }
-  /** See {@link CreditLedger.useX402SettlementGate} — same contract. */
   useX402SettlementGate(gate) {
     this.x402Settlements = gate;
   }
@@ -62,12 +61,10 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
     );
     return run(() => this.drawSync(args, blocking));
   }
-  /** See {@link CreditLedger.blockingX402Refund} — same contract. */
   async blockingX402Refund(channelId, statuses) {
     if (!channelId || !this.x402Settlements) return void 0;
     return this.x402Settlements.pendingRefundSettlement(channelId, statuses);
   }
-  /** The unresolved x402 refund that must stop an effect on `creditId`. */
   blockingRefundForCredit(creditId, statuses) {
     return this.blockingX402Refund(this.credits.get(creditId)?.x402ChannelId, statuses);
   }
@@ -540,7 +537,6 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
     credit.draws.set(args.drawId, draw);
     return { ...drawResult(draw, credit), replayed: false };
   }
-  /** Mid-job top-up growth — see `CreditLedger.growDraw` for the semantics. */
   growDrawSync(args) {
     assertAmount(args.addAmountMicro, { min: 1 });
     const credit = this.requireCredit(args.creditId);
@@ -667,7 +663,6 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
     const page = after ? out.filter((d) => compareStaleDrawKey(d, after) > 0) : out;
     return Promise.resolve(page.slice(0, args.limit));
   }
-  /** Settled draws' native value for the credit an x402 channel funded. */
   earnedNativeForX402Channel(channelId) {
     for (const credit of this.credits.values()) {
       if (credit.x402ChannelId !== channelId) continue;
@@ -860,15 +855,17 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
   bitcoinDepositLiability() {
     const byRail = /* @__PURE__ */ new Map();
     const byCurrency = /* @__PURE__ */ new Map();
+    const uncoveredByCurrency = /* @__PURE__ */ new Map();
+    const unbackedByCurrency = /* @__PURE__ */ new Map();
     const liability = {
       depositSats: 0,
       credits: 0,
       byRail: [],
       byCurrency: [],
       uncoveredCredits: 0,
-      uncoveredMicro: 0,
+      uncoveredByCurrency: [],
       unbackedCredits: 0,
-      unbackedMicro: 0
+      unbackedByCurrency: []
     };
     for (const credit of this.credits.values()) {
       if (!isNonChannelBitcoinRail(credit.rail)) continue;
@@ -886,10 +883,24 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
       liability.credits++;
       if (covered < credit.balanceMicro) {
         liability.uncoveredCredits++;
-        liability.uncoveredMicro += credit.balanceMicro;
+        const currency2 = uncoveredByCurrency.get(credit.currency) ?? {
+          currency: credit.currency,
+          micro: 0,
+          credits: 0
+        };
+        currency2.micro += credit.balanceMicro;
+        currency2.credits++;
+        uncoveredByCurrency.set(credit.currency, currency2);
       } else if (basisless > 0) {
         liability.unbackedCredits++;
-        liability.unbackedMicro += credit.balanceMicro;
+        const currency2 = unbackedByCurrency.get(credit.currency) ?? {
+          currency: credit.currency,
+          micro: 0,
+          credits: 0
+        };
+        currency2.micro += credit.balanceMicro;
+        currency2.credits++;
+        unbackedByCurrency.set(credit.currency, currency2);
       }
       const rail = byRail.get(credit.rail) ?? { rail: credit.rail, sats: 0, credits: 0 };
       rail.sats += owed;
@@ -906,6 +917,8 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
     }
     liability.byRail = [...byRail.values()];
     liability.byCurrency = [...byCurrency.values()];
+    liability.uncoveredByCurrency = [...uncoveredByCurrency.values()];
+    liability.unbackedByCurrency = [...unbackedByCurrency.values()];
     return Promise.resolve(liability);
   }
   listFundingLots(creditId) {

package/dist/{chunk-JLXYOV4Y.js → chunk-V5ZRATJH.js}

@@ -1,6 +1,6 @@
 import {
   withSdkInitLock
-} from "./chunk-S3XAHZQY.js";
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/postgres-kv-store.ts
 var PostgresKVStore = class {

package/dist/{chunk-6GRIKOFB.js → chunk-VA7GT6C6.js}

@@ -1,6 +1,6 @@
 import {
   withSdkInitLock
-} from "./chunk-S3XAHZQY.js";
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/revenue-reporter.ts
 import { randomUUID } from "crypto";
@@ -166,13 +166,8 @@ var RevenueReporter = class _RevenueReporter {
     await this.insertPending(tx, "release", payload);
   }
   /**
-   * Join a credit drain to the transaction that made it terminal.
-   *
-   * Same discipline as {@link enqueueDeposit} and the same reason: no network
-   * I/O here, only the durable queue row, written through `tx` so the report
-   * and the status CAS commit or roll back together. A drain whose row was
-   * lost between the two would overstate outstanding liability forever —
-   * the mirror image of a lost deposit.
+   * Await durable queue insertion through tx so the terminal drain and its
+   * report commit or roll back together; no network I/O here.
    */
   async enqueueCreditDrain(tx, payload) {
     await this.insertPending(tx, "drain", payload);
@@ -238,14 +233,8 @@ var RevenueReporter = class _RevenueReporter {
     }
   }
   /**
-   * Join a credit-expiry release — or the revival that reverses one — to the
-   * transaction that made it true.
-   *
-   * Same discipline as {@link enqueueCreditDrain}: no network I/O, only the
-   * durable queue row written through `tx`. A release whose row was lost after
-   * the sweep committed would understate committed value forever; a lost
-   * reversal would overstate it, which is the worse direction — the builder
-   * would see money as theirs that a revived credit can still buy work with.
+   * Await durable queue insertion through tx so expiry release or reversal and
+   * its report commit together. A missing reversal would overstate builder value.
    */
   async enqueueCreditExpiryRelease(tx, payload) {
     await this.insertPending(tx, "expiry_release", payload);

package/dist/{chunk-O2X2CCKH.js → chunk-VIVXB4CD.js}

@@ -101,7 +101,7 @@ async function generateTempoKey(opts = {}) {
     );
   }
   if (existing && opts.force) {
-    const { assertTempoWalletIdle } = await import("./tempo-lifecycle-DXM7QXJQ.js");
+    const { assertTempoWalletIdle } = await import("./tempo-lifecycle-G5SB4HFC.js");
     await assertTempoWalletIdle("replace");
   }
   const { privateKeyToAccount, generatePrivateKey } = await import("viem/accounts");

package/dist/{chunk-L67WTZX2.js → chunk-XMDQOXHO.js}

@@ -1,6 +1,6 @@
 import {
   withSdkInitLock
-} from "./chunk-S3XAHZQY.js";
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/payout-reporter.ts
 import { createHash, randomUUID } from "crypto";
@@ -35,7 +35,6 @@ var PostgresX402BatchStore = class {
     this.db = db;
   }
   db;
-  /** Create the table (idempotent), under the SDK init lock like every other boot DDL. */
   async init() {
     await withSdkInitLock(this.db, async () => {
       await this.db.query(`
@@ -155,7 +154,6 @@ var PayoutReporter = class {
     this.intervalMs = opts.snapshotIntervalMs ?? PAYOUT_SNAPSHOT_INTERVAL_MS;
     this.now = opts.now ?? Date.now;
   }
-  /** Boot DDL for the durable batch store, when this reporter owns one. */
   async init() {
     if (this.ownsBatchStore && this.batches instanceof PostgresX402BatchStore) {
       await this.batches.init();
@@ -200,7 +198,6 @@ var PayoutReporter = class {
       warn("payout_flush_failed", { error: message(err) });
     }
   }
-  /** The hook `mark-melted` runs inside its transaction: the mark and its payout commit together. */
   meltHook() {
     return {
       enqueue: (event, tx) => this.cashuMelted(event, tx),
@@ -211,17 +208,9 @@ var PayoutReporter = class {
     };
   }
   /**
-   * A melt completed: the accumulator rows are SPENT at the mint and the
-   * Lightning payment reached the builder's destination. One payout per mint
-   * in the call — a `mark-melted` normally names one, since a melt quote
-   * belongs to one mint. The amount is the face value melted; the mint's fee
-   * and the Lightning amount received are builder-machine facts this DVM does
-   * not see.
-   *
-   * Queued through `tx` when the caller is inside the transaction that marks
-   * the rows, and a failure is thrown rather than swallowed so that mark rolls
-   * back with it — see {@link TransactionalPayoutHook}. Without `tx` the rows
-   * are queued on their own and delivered at once.
+   * Report melted face value per mint, not the Lightning amount received after fees. Hash the
+   * payment preimage; do not publish it. With tx, propagate enqueue failures and defer
+   * delivery until commit. Without tx, enqueue independently and start delivery.
    */
   async cashuMelted(event, tx) {
     const byMint = /* @__PURE__ */ new Map();
@@ -261,7 +250,6 @@ var PayoutReporter = class {
       void this.snapshotCashu();
     }
   }
-  /** The host attaches the session store and ledger readers once they exist. */
   attachTempo(reader) {
     this.tempo = reader;
   }
@@ -294,7 +282,6 @@ var PayoutReporter = class {
     }
     void this.snapshotTempo();
   }
-  /** The hook `reconcile-tempo-drain` runs inside its transaction: the booking and its payout commit together. */
   tempoRepairHook() {
     return {
       enqueue: (event, tx) => this.tempoCloseReconciled(event, tx),
@@ -305,14 +292,9 @@ var PayoutReporter = class {
     };
   }
   /**
-   * The operator repaired a wedged cooperative close. The close's
-   * payee side landed on chain when the close did; if the live hook reported
-   * it, this upgrades that row to `repair`, otherwise it is the row. The
-   * figure is the receipt's payee total for the channel.
-   *
-   * Queued through `tx` when the caller is inside the transaction that books
-   * the drain, and thrown rather than swallowed so that booking rolls back
-   * with it — see {@link TransactionalPayoutHook}.
+   * Report the receipt’s payee total under the live close’s transaction ID, flagged repaired.
+   * The platform upgrades a live row if one exists. Join tx and propagate enqueue failures;
+   * this does not report the caller refund.
    */
   async tempoCloseReconciled(event, tx) {
     const settled = BigInt(event.settledToPayee);
@@ -343,7 +325,6 @@ var PayoutReporter = class {
       void this.snapshotTempo();
     }
   }
-  /** The observer the batch-settlement server attaches to and routes its manager through. */
   x402Observer() {
     return {
       attach: (ctx) => {
@@ -363,13 +344,9 @@ var PayoutReporter = class {
     };
   }
   /**
-   * Wrap the upstream channel manager so every claim grows the open batch and
-   * every settle closes it. The claim delta is read off storage rather than
-   * off upstream's result, which carries only a voucher count; under the
-   * fleet lock the before/after read is consistent. A channel the claim
-   * removed on its way through — a refund's claim-then-delete —
-   * moved whatever it still owed before it went, and that value reaches
-   * `pay_to` in this batch too, so it counts at its pre-claim figure.
+   * Read claim deltas from storage because upstream returns voucher counts. Under the fleet
+   * lock, before/after reads are consistent. A deleted channel contributes its pre-claim
+   * unclaimed value, including refund claim-then-delete.
    */
   trackX402Manager(manager) {
     const claim = async (...args) => {

package/dist/{chunk-QT4ONTST.js → chunk-XRLKGCAW.js}

@@ -1,6 +1,6 @@
 import {
   withSdkInitLock
-} from "./chunk-S3XAHZQY.js";
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/processed-payment-store.ts
 var ProcessedPaymentReplayError = class extends Error {

package/dist/{chunk-KMZXTBLA.js → chunk-XZ7LW4S5.js}

@@ -75,7 +75,6 @@ var TempoSettlementReadiness = class {
     if (this.timer) clearInterval(this.timer);
     this.timer = void 0;
   }
-  /** Read and report the configured fee-token balance now. */
   async checkBalance(opts) {
     if (this.inFlight) {
       const current = await this.inFlight;

package/dist/{chunk-XQXJKJ3P.js → chunk-YO56VCTQ.js}

@@ -8,11 +8,9 @@ var StepCache = class _StepCache {
   has(id) {
     return this.cache.has(id);
   }
-  /** Get a cached step result. Throws if not present. */
   get(id) {
     return this.getRecord(id).value;
   }
-  /** Get a cached step record, including replay metadata. Throws if not present. */
   getRecord(id) {
     const record = this.cache.get(id);
     if (record === void 0) throw new Error(`StepCache: no cached result for step "${id}"`);
@@ -25,11 +23,9 @@ var StepCache = class _StepCache {
       ...costs !== void 0 && costs.length > 0 ? { costs: costs.map(({ amount, currency }) => ({ amount, currency })) } : {}
     });
   }
-  /** Export all cached steps for persistence. */
   serialize() {
     return [...this.cache.values()];
   }
-  /** Restore a StepCache from persisted records. */
   static deserialize(records) {
     const cache = new _StepCache();
     for (const { id, value, costs } of records) {

package/dist/{credit-ledger-5ZEJRI46.js → credit-ledger-MHA652TV.js}

@@ -10,8 +10,8 @@ import {
   isDrainMethod,
   isFundingRail,
   x402SettlementPending
-} from "./chunk-V7EVFLAK.js";
-import "./chunk-S3XAHZQY.js";
+} from "./chunk-2D75MNNG.js";
+import "./chunk-COYKJRMM.js";
 import "./chunk-C3MTFLC6.js";
 export {
   CreditLedger,