@dvmkit/sdk 0.21.0 → 0.21.2

package/dist/server/index.js

@@ -1,6 +1,6 @@
 import {
   PostgresReplayStore
-} from "../chunk-5RLNRLLB.js";
+} from "../chunk-2HSWWHXK.js";
 import {
   PostgresKVStore
 } from "../chunk-V5ZRATJH.js";
@@ -18,7 +18,7 @@ import {
   parseNwcUri,
   validateX402Env,
   withNwcPool
-} from "../chunk-2PN4DKZW.js";
+} from "../chunk-D2MGOQIS.js";
 import {
   MemoryKVStore
 } from "../chunk-SDK6KDJN.js";
@@ -47,6 +47,7 @@ import {
   X402_BATCH_SETTLEMENT_NETWORK,
   attachCreditMenu,
   buildCreditMenu,
+  callerInputIssues,
   clientCompatibilityAttributes,
   clientCompatibilityMiddleware,
   clientUpgradeRequired,
@@ -82,29 +83,30 @@ import {
   toCreditView,
   unknownRouteNotFound,
   writeOffHostedTempoCloseReport
-} from "../chunk-VT3WUX6B.js";
+} from "../chunk-VIAMJ6GS.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
   ProcessedPaymentReplayError
 } from "../chunk-XRLKGCAW.js";
-import "../chunk-KRX7VNBG.js";
-import "../chunk-C65P6MGZ.js";
+import "../chunk-62JG4AF7.js";
+import "../chunk-3V6CSTWB.js";
 import {
   MemoryCreditLedger
-} from "../chunk-DJRTYBEE.js";
+} from "../chunk-B27E7JIR.js";
 import {
   PostgresJobStore
-} from "../chunk-QCZXKUS2.js";
+} from "../chunk-Y746QPX7.js";
 import {
   SignedRequestError,
+  carriesSignedEnvelope,
   createDefaultReplayStore,
   createSignedRequestVerifier,
   signedRequestInput
-} from "../chunk-A6AOE63A.js";
+} from "../chunk-6GZF7VDO.js";
 import {
   isStreamableJobStore
-} from "../chunk-6RJAE332.js";
+} from "../chunk-WWKFG6TM.js";
 import {
   ContentHoldError,
   baselineContentExpiry,
@@ -115,7 +117,7 @@ import {
   IMPLICIT_CREDIT_TTL_MS,
   generateEphemeralReceiptKey,
   receiptPubkeyFromSecret
-} from "../chunk-7RWE6ELV.js";
+} from "../chunk-IUFVIIPF.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -127,11 +129,11 @@ import {
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader
 } from "../chunk-SXL44PL5.js";
-import "../chunk-QTKGFG3I.js";
+import "../chunk-NRE4NOCY.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-RX6FT7XA.js";
-import "../chunk-72A4PHLD.js";
+import "../chunk-LWF4ABYF.js";
+import "../chunk-XWG54M6T.js";
 import {
   CreditLedger,
   CreditLedgerError,
@@ -139,7 +141,7 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-I5MXADJS.js";
+} from "../chunk-JOSNSNS7.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SDK_INIT_ADVISORY_LOCK,
@@ -148,7 +150,7 @@ import {
 import "../chunk-5UC7TOQC.js";
 import {
   applyRetryToPool
-} from "../chunk-INYFUPXV.js";
+} from "../chunk-LSANCGLP.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
@@ -159,14 +161,14 @@ import {
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
   TempoSettlementReadiness,
   resolveTempoNetwork
-} from "../chunk-MWDUGMN2.js";
+} from "../chunk-27QB2D3Z.js";
 import {
   initLoggers
-} from "../chunk-LY2JYSJS.js";
+} from "../chunk-7KNFEDFW.js";
 import "../chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "../chunk-ALTE7I6C.js";
+} from "../chunk-MA55LUNR.js";
 
 // src/sdk/server/cashu-env.ts
 async function resolveCashuOptsFromEnv(env, pool, cashuModeHint) {
@@ -1193,7 +1195,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-QKN5LGAH.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-POZJNFJU.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;
@@ -1286,11 +1288,11 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     let tempoChargeBackend = "user-supplied";
     const mppTempoRecipient = envMaybe.DVMKIT_TEMPO_RECIPIENT;
     if (!mpp && mppTempoRecipient) {
-      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-BLIYBORK.js");
+      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-DBYDXISN.js");
       tempoChargeBackend = pgPool ? "postgres" : "memory";
       let tempoCharge;
       if (pgPool) {
-        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-A3CDF7D5.js");
+        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-P7ZBR3GG.js");
         const chargeStore = new PostgresTempoChargeStore(pgPool);
         tempoChargeStore = chargeStore;
         pendingInits.push(chargeStore.init());
@@ -1310,7 +1312,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-XJE6GIXN.js"),
+          import("../tempo-session-store-ZVRBAMLG.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1463,7 +1465,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       }
     }
     const fxSource = envMaybe.DVMKIT_FX_SOURCE;
-    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-JJYLTTWK.js");
+    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-FGPVRNTL.js");
     const fxFetcher = opts.fx ?? createFxFetcher({ source: resolveFxSourceFromEnv(envMaybe) });
     const hostRailConfigured = (opts.paymentMethods?.length ?? 0) > 0 || (effectiveMints?.length ?? 0) > 0 || !!x402WithDualServe || !!mpp;
     if (mounts.some((entry) => mountNeedsFx(entry, hostRailConfigured))) warmFxSnapshot(fxFetcher);
@@ -1473,7 +1475,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     assertReceiptIdentity(envMaybe, opts.builder, receiptKey, cashuOpts.dvmId, opts.devMode);
     let sharedPgReplayStore;
     if (pgPool) {
-      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-GH5AINQR.js");
+      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-JQYAKG47.js");
       const store2 = new PostgresReplayStore2(pgPool);
       pendingInits.push(store2.init());
       sharedPgReplayStore = store2;
@@ -1501,13 +1503,13 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     }
     let sharedPgConsumedStore;
     if (pgPool) {
-      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-4PCJEZBD.js");
+      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-IPWPJ6V7.js");
       const consumedStore = new PostgresConsumedCredentialStore(pgPool);
       pendingInits.push(consumedStore.init());
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-ZCJXJG6R.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-M3EBVMOP.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1516,7 +1518,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-N4PZKTT5.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-WL2VKLE3.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();
@@ -2106,8 +2108,15 @@ function secp256k1Auth(opts = {}) {
     id: SIGNED_REQUEST_AUTH_ID,
     allowUnsignedPaid: opts.allowUnsignedPaid === true,
     checkAuth(schema, input, domain) {
-      const envelope = getVerifier(schema).checkAuth(input, domain);
-      return { pubkey: envelope.pubkey, envelope };
+      try {
+        const envelope = getVerifier(schema).checkAuth(input, domain);
+        return { pubkey: envelope.pubkey, envelope };
+      } catch (err) {
+        if (err instanceof SignedRequestError && err.sub_reason === "schema_invalid" && !carriesSignedEnvelope(input) && callerInputIssues(err.issues).length === 0) {
+          throw new SignedRequestError("signed request required", "signature_required");
+        }
+        throw err;
+      }
     },
     recheckSignature(schema, input, domain) {
       getVerifier(schema).verifySignature(input, domain);

package/dist/{step-cache-CcCjpZm1.d.ts → step-cache-Bx_ZybWF.d.ts}

@@ -5342,7 +5342,8 @@ interface SignedRequestVerifier<T> {
      */
     signRequest(privkey: Uint8Array, body: Record<string, unknown>, opts?: SignedRequestSignOpts, domain?: SignedRequestDomain): T & CanonicalEnvelope;
 }
-type SignedRequestFailure = "schema_invalid" | "timestamp_drift" | "signature_invalid" | "replay_detected";
+/** Authentication failure; signature_required means no envelope fields were supplied. */
+type SignedRequestFailure = "schema_invalid" | "timestamp_drift" | "signature_required" | "signature_invalid" | "replay_detected";
 /**
  * One definition of envelope field types shared by the runtime shape guard
  * and error disclosure classifier. Envelope failures stay private; violations

package/dist/{tempo-charge-store-A3CDF7D5.js → tempo-charge-store-P7ZBR3GG.js}

@@ -1,9 +1,9 @@
 import {
   PostgresTempoChargeStore
-} from "./chunk-CXRI4N4Y.js";
+} from "./chunk-2RZRYMCR.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-ALTE7I6C.js";
+import "./chunk-MA55LUNR.js";
 export {
   PostgresTempoChargeStore
 };

package/dist/{tempo-session-store-XJE6GIXN.js → tempo-session-store-ZVRBAMLG.js}

@@ -1,11 +1,11 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-34H4ZKBM.js";
+} from "./chunk-FAT57DAP.js";
 import "./chunk-YG7G4DPZ.js";
 import "./chunk-COYKJRMM.js";
-import "./chunk-INYFUPXV.js";
-import "./chunk-ALTE7I6C.js";
+import "./chunk-LSANCGLP.js";
+import "./chunk-MA55LUNR.js";
 export {
   PostgresTempoSessionStore,
   assertMonotonicTransition

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-COnj0QKi.js';
-import { a4 as JobReceipt, a9 as Message, a5 as MessageType, K as KVStore, L as Logger, x as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-CcCjpZm1.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-p45j28px.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-efjireLM.js';
+import { a4 as JobReceipt, a9 as Message, a5 as MessageType, K as KVStore, L as Logger, x as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-Bx_ZybWF.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-DWVkleH3.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/testing/index.js

@@ -4,22 +4,22 @@ import {
 import {
   MemoryJobStore,
   createInstrumentedFetch
-} from "../chunk-6RJAE332.js";
+} from "../chunk-WWKFG6TM.js";
 import {
   JobCancelledError
 } from "../chunk-KVKJ7R5V.js";
 import {
   createNoopLogger
-} from "../chunk-QTKGFG3I.js";
+} from "../chunk-NRE4NOCY.js";
 import "../chunk-FUJ36YDV.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-RX6FT7XA.js";
+import "../chunk-LWF4ABYF.js";
 import {
   validateCurrency
-} from "../chunk-72A4PHLD.js";
-import "../chunk-LY2JYSJS.js";
+} from "../chunk-XWG54M6T.js";
+import "../chunk-7KNFEDFW.js";
 import "../chunk-66HGCPBU.js";
-import "../chunk-ALTE7I6C.js";
+import "../chunk-MA55LUNR.js";
 
 // src/sdk/testing/test-context.ts
 function createTestContext(opts) {

package/dist/{usd-BnAFcUai.d.ts → usd-eOAMEO12.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-CcCjpZm1.js';
+import { C as Currency } from './step-cache-Bx_ZybWF.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/dist/{x402-XLFD43RF.js → x402-44JZJQ5F.js}

@@ -6,8 +6,8 @@ import {
 } from "./chunk-5RGZN6WQ.js";
 import {
   verifyX402Payment
-} from "./chunk-OTNHKRHA.js";
-import "./chunk-C65P6MGZ.js";
+} from "./chunk-ZBOCNF56.js";
+import "./chunk-3V6CSTWB.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -37,7 +37,7 @@ import {
   x402SupportedNetworksHint
 } from "./chunk-BPYMEMQX.js";
 import "./chunk-66HGCPBU.js";
-import "./chunk-ALTE7I6C.js";
+import "./chunk-MA55LUNR.js";
 export {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.21.0",
+  "version": "0.21.2",
   "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
   "author": "DVM Technologies Ltd",
   "keywords": [