@dvmkit/sdk 0.21.1 → 0.22.0

package/dist/card-charge-journal-SKMBEPRM.js

@@ -0,0 +1,44 @@
+// src/sdk/server/card-charge-journal.ts
+async function createPostgresCardChargeJournal(pool, opts = {}) {
+  const now = opts.now ?? Date.now;
+  await pool.query(`
+    CREATE TABLE IF NOT EXISTS card_charge_attempts (
+      challenge_id TEXT PRIMARY KEY,
+      created_at   BIGINT NOT NULL,
+      resolved_at  BIGINT,
+      outcome      TEXT
+    )
+  `);
+  await pool.query(
+    `CREATE INDEX IF NOT EXISTS idx_card_charge_attempts_open
+       ON card_charge_attempts(created_at) WHERE resolved_at IS NULL`
+  );
+  return {
+    async record(challengeId) {
+      await pool.query(
+        `INSERT INTO card_charge_attempts (challenge_id, created_at) VALUES ($1, $2)
+         ON CONFLICT (challenge_id) DO NOTHING`,
+        [challengeId, now()]
+      );
+    },
+    async listUnresolved({ olderThanMs, limit }) {
+      const { rows } = await pool.query(
+        `SELECT challenge_id, created_at FROM card_charge_attempts
+          WHERE resolved_at IS NULL AND created_at <= $1
+          ORDER BY created_at LIMIT $2`,
+        [olderThanMs, limit]
+      );
+      return rows.map((row) => ({ challengeId: row.challenge_id, createdAt: Number(row.created_at) }));
+    },
+    async resolve(challengeId, outcome) {
+      await pool.query(
+        `UPDATE card_charge_attempts SET resolved_at = $2, outcome = $3
+          WHERE challenge_id = $1 AND resolved_at IS NULL`,
+        [challengeId, now(), outcome]
+      );
+    }
+  };
+}
+export {
+  createPostgresCardChargeJournal
+};

package/dist/{chunk-ALTE7I6C.js → chunk-2WWVI32F.js}

@@ -496,7 +496,15 @@ var diagnostic_catalogue_v1_default = {
     "x402_settlement_reconciliation_chain_unreachable",
     "x402_settlement_reconciliation_facilitator_unavailable",
     "x402_settlement_submission_failed",
-    "x402_settlement_written_off"
+    "x402_settlement_written_off",
+    "card_charge_journal_failed",
+    "card_charge_stranded_refunded",
+    "card_charge_unsettled",
+    "card_refund_pending",
+    "card_refund_sweep",
+    "card_refund_expiry_failed",
+    "card_refund_sweep_failed",
+    "card_refund_sweep_step_failed"
   ],
   routeTemplates: [
     "/",
@@ -769,13 +777,23 @@ var diagnostic_catalogue_v1_default = {
     "/v1/request-resume/:requestId"
   ],
   errorCodes: [
+    "amount_too_large",
+    "api_error",
     "app_shell_detected",
     "audio_source_required",
     "auth_error",
     "auth_required",
+    "authentication_error",
+    "balance_insufficient",
     "bytes_cap",
     "capability_required",
     "captcha_unsolved",
+    "card_error",
+    "charge_already_refunded",
+    "charge_disputed",
+    "charge_expired_for_refund",
+    "charge_not_refundable",
+    "charges_exhausted",
     "cloudflare_unsolved",
     "content_rejected",
     "cover_invalid",
@@ -793,6 +811,7 @@ var diagnostic_catalogue_v1_default = {
     "extract_llm_failed",
     "extract_schema_invalid",
     "extract_validation_failed",
+    "fee_not_settled",
     "feed_full",
     "feed_not_found",
     "feed_path_invalid",
@@ -807,6 +826,8 @@ var diagnostic_catalogue_v1_default = {
     "head_status",
     "hint",
     "hosting_identity_revoke_failed",
+    "idempotency_error",
+    "idempotency_key_in_use",
     "ingest_concurrency",
     "ingest_global_concurrency",
     "ingest_ip_concurrency",
@@ -817,6 +838,7 @@ var diagnostic_catalogue_v1_default = {
     "invalid_menu",
     "invalid_payment",
     "invalid_quote_data",
+    "invalid_request_error",
     "invalid_url",
     "job_failed",
     "job_timeout",
@@ -837,6 +859,7 @@ var diagnostic_catalogue_v1_default = {
     "payment_invalid",
     "payment_required",
     "paywall_detected",
+    "permission_error",
     "polish_input_too_large",
     "polish_llm_failed",
     "presign_failed",
@@ -854,11 +877,14 @@ var diagnostic_catalogue_v1_default = {
     "provider_timeout",
     "provider_unavailable",
     "quota_exceeded",
+    "rate_limit_error",
     "rate_limited",
     "rate_limited_by_target",
+    "refund_disputed_payment",
     "region_unavailable",
     "replay_detected",
     "request_integrity_failed",
+    "resource_missing",
     "retry_hardened",
     "retry_with_bounded_wait",
     "retry_with_content_selector",
@@ -867,10 +893,12 @@ var diagnostic_catalogue_v1_default = {
     "server_error",
     "sha256_mismatch",
     "signature_invalid",
+    "signature_required",
     "size_mismatch",
     "source_unreachable",
     "ssrf_blocked",
     "string",
+    "stripe_unreachable",
     "substrate_unavailable",
     "timeout",
     "timestamp_drift",
@@ -1183,6 +1211,17 @@ var CAPABILITY_RE = /^[a-z][a-z0-9_-]{0,47}$/;
 var CLIENT_VERSION_RE = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-rc\.(?:0|[1-9]\d*))?$/;
 var HASH_RE = /^(?:[0-9a-f]{16}|[0-9a-f]{64})$/i;
 var DECIMAL_RE = /^(?:0|[1-9]\d{0,77})$/;
+var CARD_REFUND_EVENTS = /* @__PURE__ */ new Set([
+  "card_charge_stranded_refunded",
+  "card_charge_unsettled",
+  "card_refund_expiry_failed",
+  "card_refund_pending",
+  "card_refund_sweep",
+  "card_refund_sweep_step_failed"
+]);
+var CARD_REFUND_COUNTS = /* @__PURE__ */ new Set(["frozen", "unfrozen", "expiry_refunds", "completed", "pending", "stranded_refunds"]);
+var CARD_REFUND_STAGES = /* @__PURE__ */ new Set(["plan", "refund", "disputes", "expiry", "retry", "stranded"]);
+var CARD_REFUND_STATUSES = /* @__PURE__ */ new Set(["planned", "pending", "requires_action", "succeeded", "failed", "canceled", "rejected"]);
 var STRIPE_EVENT_RE = /^evt_[A-Za-z0-9]{1,64}$/;
 var REDACTED_SEGMENT_RE = /^:(?:uuid|hex|n|b58|token)$/;
 var SERVICE_NAMES = /* @__PURE__ */ new Set([
@@ -1354,6 +1393,10 @@ function projectField(key, value, dataset, authority, identityAuthority, eventNa
   const closedEnum = Object.hasOwn(PAYMENT_ENUMS, key) ? PAYMENT_ENUMS[key] : Object.hasOwn(ROUTER_ENUMS, key) ? ROUTER_ENUMS[key] : void 0;
   if (closedEnum)
     return typeof value === "string" && closedEnum.has(value) ? value : void 0;
+  if (eventName !== void 0 && CARD_REFUND_EVENTS.has(eventName)) {
+    const projected = projectCardRefundField(key, value);
+    if (projected !== void 0) return projected;
+  }
   if (dataset === "tempo") {
     if (key === "prior_status")
       return typeof value === "string" && TEMPO_CLOSE_REPORT_PRIOR_STATUSES.has(value) ? value : void 0;
@@ -1435,6 +1478,18 @@ function projectField(key, value, dataset, authority, identityAuthority, eventNa
     return typeof value === "string" && SANCTIONS_REGIONS.has(value) ? value : void 0;
   return void 0;
 }
+function projectCardRefundField(key, value) {
+  if (key === "credit_id" || key === "drain_id" || key === "challenge_id")
+    return typeof value === "string" && /^[a-zA-Z0-9_.:-]{1,512}$/.test(value) ? value : void 0;
+  if (key === "payment_intent")
+    return typeof value === "string" && /^pi_[A-Za-z0-9]{1,64}$/.test(value) ? value : void 0;
+  if (key === "stage")
+    return typeof value === "string" && CARD_REFUND_STAGES.has(value) ? value : void 0;
+  if (key === "refund_status")
+    return typeof value === "string" && CARD_REFUND_STATUSES.has(value) ? value : void 0;
+  if (CARD_REFUND_COUNTS.has(key)) return isNonnegativeSafeInteger(value) ? value : void 0;
+  return void 0;
+}
 function projectService(value) {
   if (typeof value !== "string") return "unknown";
   if (SERVICE_NAMES.has(value)) return value;

package/dist/{chunk-C65P6MGZ.js → chunk-3DGIRHP2.js}

@@ -1,12 +1,12 @@
 import {
   X402_DEFAULT_FACILITATOR
-} from "./chunk-NUDHO4HV.js";
+} from "./chunk-LABJSMSJ.js";
 import {
   callerLoggers
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/observability/payment-diagnostics.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-6RJAE332.js → chunk-5NMHZIIU.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-FUJ36YDV.js";
 import {
   loggers
-} from "./chunk-LY2JYSJS.js";
+} from "./chunk-ZH5CLGO6.js";
 
 // src/sdk/server/job-store.ts
 function accumulateAskedTopUp(prior, ask) {

package/dist/{chunk-34H4ZKBM.js → chunk-5YJWAJ4N.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   withPostgresTransactionRecovery
-} from "./chunk-INYFUPXV.js";
+} from "./chunk-L35WYOH2.js";
 
 // src/sdk/server/tempo-session-store.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-2PN4DKZW.js → chunk-CUWSJQGT.js}

@@ -4,7 +4,7 @@ import {
 import {
   diagnosticConsole,
   projectSpanRow
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/lib/x402/env.ts
 import { isAddress } from "viem";

package/dist/{chunk-A6AOE63A.js → chunk-DLRPKEAM.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-SXL44PL5.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/sdk/server/zod-error.ts
 function humanizeZodError(err, opts) {
@@ -106,6 +106,9 @@ var SIGNED_ENVELOPE_TYPES = {
 var SIGNED_ENVELOPE_FIELDS = Object.keys(
   SIGNED_ENVELOPE_TYPES
 );
+function carriesSignedEnvelope(input) {
+  return input !== null && typeof input === "object" && !Array.isArray(input) && SIGNED_ENVELOPE_FIELDS.some((field) => field in input);
+}
 var SignedRequestError = class extends Error {
   constructor(message, sub_reason, issues) {
     super(message);
@@ -371,6 +374,7 @@ export {
   zodIssuesOf,
   SIGNED_ENVELOPE_TYPES,
   SIGNED_ENVELOPE_FIELDS,
+  carriesSignedEnvelope,
   SignedRequestError,
   createSignedRequestVerifier,
   signedRequestInput,

package/dist/{chunk-KRX7VNBG.js → chunk-DY5QIHJA.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/sdk/server/payout-reporter.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-RX6FT7XA.js → chunk-EHBUAJ5M.js}

@@ -1,6 +1,6 @@
 import {
   validateCurrency
-} from "./chunk-72A4PHLD.js";
+} from "./chunk-UVRBD5GR.js";
 
 // src/sdk/pricing/upfront.ts
 function buildUpfront(input) {

package/dist/{chunk-7RWE6ELV.js → chunk-EQIP6TFD.js}

@@ -19,7 +19,7 @@ import {
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/lib/cashu/lock-pubkey.ts
 function toLockPubkey(raw) {

package/dist/{chunk-OTNHKRHA.js → chunk-GDZXGB43.js}

@@ -2,20 +2,20 @@ import {
   createX402FacilitatorAuthHeaders,
   settleWithFacilitator,
   verifyWithFacilitator
-} from "./chunk-C65P6MGZ.js";
+} from "./chunk-3DGIRHP2.js";
 import {
   buildPaymentRequirements,
   decodePayment,
   encodeSettleResponseHeader,
   exactEvmAuthorization,
   usdcToMsats
-} from "./chunk-NUDHO4HV.js";
+} from "./chunk-LABJSMSJ.js";
 import {
   callerLoggers
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/lib/x402/verify.ts
 async function verifyX402Payment(paymentHeader, config, requiredUsdcMicro, resource, btcUsdRate, exactVersions = { v1: true, v2: true }) {

package/dist/{chunk-5RLNRLLB.js → chunk-HEH7YUGE.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-COYKJRMM.js";
 import {
   diagnosticConsole
-} from "./chunk-ALTE7I6C.js";
+} from "./chunk-2WWVI32F.js";
 
 // src/sdk/server/postgres-replay-store.ts
 var DEFAULT_TABLE_NAME = "signed_request_replays";

package/dist/{chunk-DJRTYBEE.js → chunk-HVZIITWW.js}

@@ -4,12 +4,15 @@ import {
   X402_SPEND_BLOCKING_SETTLEMENT_STATUSES,
   X402_WEDGED_SETTLEMENT_STATUSES,
   allocateDrawValue,
+  assertCardDrainMatchesRail,
   assertFundingBasis,
+  cardRefundPendingConflict,
   clipEarmark,
   depleteLots,
   fifoOrder,
   growthRailValue,
   inKindDrawMsats,
+  isCardFundedRail,
   isFundingRail,
   isInKindDepletion,
   isNonChannelBitcoinRail,
@@ -18,7 +21,7 @@ import {
   refundAssetDelta,
   refundRequest,
   x402SettlementPending
-} from "./chunk-I5MXADJS.js";
+} from "./chunk-SEIMPHIP.js";
 
 // src/sdk/server/memory-credit-ledger.ts
 import { randomUUID } from "crypto";
@@ -889,6 +892,7 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
           `credit ${args.creditId} belongs to a different caller pubkey`
         );
       }
+      assertCardDrainMatchesRail(args.creditId, credit.rail, args.method);
       const existing = credit.drains.get(args.drainId);
       if (existing) {
         if (existing.method !== args.method || JSON.stringify(existing.payout) !== JSON.stringify(args.payout)) {
@@ -904,6 +908,12 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
         };
       }
       if (credit.status !== "active") throw terminalCreditError(args.creditId);
+      if (args.method === "stripe") {
+        const blocking = [...credit.drains.values()].find(
+          (drain2) => drain2.method === "stripe" && drain2.status === "pending"
+        );
+        if (blocking) throw cardRefundPendingConflict(args.creditId, blocking.drainId);
+      }
       if (x402Refund) throw x402SettlementPending(args.creditId, x402Refund);
       const pending = pendingSums(credit);
       const availableMicro = credit.balanceMicro - pending.micro;
@@ -965,7 +975,8 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
         writeOffNote: null,
         writtenOffAt: null,
         provenRefundNative: null,
-        refundPaymentProven: false
+        refundPaymentProven: false,
+        cardRefund: null
       };
       applyLotDebits(credit, drain.lotDebits, -1);
       credit.drains.set(args.drainId, drain);
@@ -1208,6 +1219,17 @@ var MemoryCreditLedger = class _MemoryCreditLedger {
       throw this.transitionRefusal(drain, "mark sent");
     });
   }
+  saveCardRefund(args) {
+    return run(() => {
+      const drain = this.credits.get(args.creditId)?.drains.get(args.drainId);
+      if (!drain) return null;
+      const writable = drain.method === "stripe" && drain.status === "pending";
+      if (writable && !(args.onlyIfUnset && drain.cardRefund)) {
+        drain.cardRefund = structuredClone(args.plan);
+      }
+      return drain.cardRefund ? structuredClone(drain.cardRefund) : null;
+    });
+  }
   appendDrainReceipt(args) {
     return run(() => {
       const drain = this.credits.get(args.creditId)?.drains.get(args.drainId);
@@ -1326,7 +1348,7 @@ function applyBasis(credit, basis) {
   }
 }
 function recordLot(credit, amountMicro, basis, nowMs) {
-  if (!isNonChannelBitcoinRail(basis.rail)) return;
+  if (!isNonChannelBitcoinRail(basis.rail) && !isCardFundedRail(basis.rail)) return;
   if (basis.tempoSession || basis.x402Channel) return;
   credit.lots.push({
     lotId: `lot:${randomUUID()}`,
@@ -1441,7 +1463,8 @@ function drainRecord(drain, credit) {
     writeOffNote: drain.writeOffNote,
     writtenOffAt: drain.writtenOffAt,
     provenRefundNative: drain.provenRefundNative,
-    refundPaymentProven: drain.refundPaymentProven
+    refundPaymentProven: drain.refundPaymentProven,
+    cardRefund: drain.cardRefund ? structuredClone(drain.cardRefund) : null
   };
 }
 function assertAmount(amountMicro, opts) {