@dvmkit/sdk 0.3.0-rc.9 → 0.3.2-rc.10

package/dist/{chunk-LTAIBLS2.js → chunk-HNIKSOI2.js}

@@ -10,10 +10,10 @@ import {
 } from "./chunk-BQ2NMWKE.js";
 import {
   MemoryCreditLedger
-} from "./chunk-U5VNEALI.js";
+} from "./chunk-PPHE7XUU.js";
 import {
   PostgresJobStore
-} from "./chunk-HHTL3ZFT.js";
+} from "./chunk-YEO5GW7U.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SignedRequestError,
@@ -21,7 +21,7 @@ import {
   humanizeZodIssues,
   signedRequestInput,
   zodIssuesOf
-} from "./chunk-H2MEFVH6.js";
+} from "./chunk-UQCK5VMA.js";
 import {
   JobCancelledError,
   MemoryJobStore,
@@ -38,7 +38,7 @@ import {
   localMessage,
   providerMessage,
   toJobRecord
-} from "./chunk-MD3H3BF7.js";
+} from "./chunk-2A33VHYM.js";
 import {
   ADMIN_AUTH_CLOCK_SKEW_SECONDS,
   ADMIN_AUTH_NONCE_TTL_SECONDS,
@@ -63,7 +63,7 @@ import {
   toLockPubkey,
   verifyCashuToken,
   verifyChallenge
-} from "./chunk-QX52F6IB.js";
+} from "./chunk-DSVGYW3B.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
@@ -103,7 +103,7 @@ import {
   pinDimension,
   withSpan,
   withTraceContext
-} from "./chunk-YO56VCTQ.js";
+} from "./chunk-BWGRKGKG.js";
 import {
   FxRateUnavailableError,
   InvalidCurrencyError,
@@ -112,7 +112,7 @@ import {
   fxRateFor,
   resolveFxSourceFromEnv,
   validateCurrency
-} from "./chunk-4A2RAKCW.js";
+} from "./chunk-IBDDIG4K.js";
 import {
   fiatToSatsCeil,
   parseUsdPrice,
@@ -133,18 +133,22 @@ import {
   isNonChannelBitcoinRail,
   netOwedSats,
   x402SettlementPending
-} from "./chunk-2D75MNNG.js";
+} from "./chunk-ZHTUITDW.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
 import {
   withPostgresRecoveryContext
-} from "./chunk-C3MTFLC6.js";
+} from "./chunk-M4RSKQAV.js";
 import {
   advertisedMethods,
   challengeMeta,
   isTempoInsufficientFundsError
-} from "./chunk-XZ7LW4S5.js";
+} from "./chunk-ZUTI56L7.js";
+import {
+  createDiagnosticCapabilityAuthority,
+  diagnosticConsole
+} from "./chunk-D42FMCLJ.js";
 
 // src/sdk/server/lock-pubkey-store.ts
 async function initLockPubkeyTable(db) {
@@ -1010,7 +1014,7 @@ var warned = /* @__PURE__ */ new Set();
 function warnOnce(event, message) {
   if (warned.has(event)) return;
   warned.add(event);
-  console.warn(JSON.stringify({ level: "warn", event, message }));
+  diagnosticConsole.warn({ level: "warn", event, message });
 }
 
 // src/sdk/server/funding.ts
@@ -1198,26 +1202,26 @@ function usableCachedRate(fx) {
 function warnStaleRate(cachedAt) {
   if (staleEpisode) return;
   staleEpisode = true;
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "btc_rate_stale_fallback",
-      message: "BTC/USD rate provider unreachable \u2014 pricing off the last rate this process saw. Amounts may have drifted.",
+      message: void 0,
       cached_at: new Date(cachedAt).toISOString(),
       age: formatStaleness(cachedAt)
-    })
+    }
   );
 }
 function warnKnownStaleRefusal(knownStale) {
   if (staleRefusalEpisode) return;
   staleRefusalEpisode = true;
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "btc_rate_stale_refused",
-      message: "Platform refused a known-stale FX snapshot \u2014 refusing to price x402/mppx off it rather than degrading to the last-known rate.",
+      message: void 0,
       stale_days: knownStale.staleDays,
       stale_source: knownStale.staleSource,
       threshold_days: knownStale.thresholdDays
-    })
+    }
   );
 }
 function rateStaleRefused(knownStale) {
@@ -1332,15 +1336,15 @@ function createX402SelfRelay(opts) {
       lowBalanceWei,
       checkedAt
     };
-    console.info(
-      JSON.stringify({
+    diagnosticConsole.info(
+      {
         level: "info",
         event: "x402_self_relay_gas_balance",
         address: observation.address,
         network: observation.network,
         balance_wei: observation.balanceWei.toString(),
         low_balance_wei: observation.lowBalanceWei.toString()
-      })
+      }
     );
     await Promise.all([
       opts.config.onBalance?.(observation),
@@ -1417,8 +1421,8 @@ function createSubmissionLock(lock, network, address) {
   };
 }
 function logSubmissionLockTimeout(error) {
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "x402_self_relay_submission_lock_timeout",
       lock_key: error.lockKey,
@@ -1430,16 +1434,16 @@ function logSubmissionLockTimeout(error) {
         ...error.holder.state ? { holder_state: error.holder.state } : {},
         ...error.holder.heldSeconds !== void 0 ? { holder_held_seconds: error.holder.heldSeconds } : {}
       } : {}
-    })
+    }
   );
 }
-function logBalanceFailure(error) {
-  console.warn(
-    JSON.stringify({
+function logBalanceFailure(_error) {
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "x402_self_relay_gas_balance_failed",
-      error_name: error instanceof Error ? error.name : "unknown"
-    })
+      error_name: void 0
+    }
   );
 }
 function classifyX402SelfRelayRpcFailure(error) {
@@ -1470,24 +1474,24 @@ async function reportRpcFailure(config, address, network, reason, checkedAt = Da
     reason,
     checkedAt
   };
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "x402_self_relay_rpc_failed",
       address,
       network,
       reason
-    })
+    }
   );
   await Promise.resolve(config.onRpcHealth?.(observation)).catch(() => {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "x402_self_relay_rpc_health_report_failed",
         address,
         network,
         reason
-      })
+      }
     );
   });
 }
@@ -1749,7 +1753,7 @@ function createX402FleetSettlementScheduler(opts) {
   });
   const report = (error) => {
     if (config.onError) config.onError(error);
-    else console.error("x402 batch-settlement scheduler failed", error);
+    else diagnosticConsole.error("x402 batch-settlement scheduler failed", error);
   };
   const runClaim = async () => {
     const results = await manager.claim({
@@ -1896,13 +1900,13 @@ async function createX402BatchSettlementServer(opts) {
   const selfRelayActive = selfRelayEnabled && !opts.config.facilitatorClient;
   const relayLockOwner = selfRelayActive ? postgres ?? (opts.db ? new PostgresX402ChannelStorage(opts.db) : void 0) : void 0;
   if (selfRelayActive && !relayLockOwner && !opts.allowInMemory) {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "x402_self_relay_unserialized",
         network: opts.network,
         detail: "no database for the fleet-wide submission lock; this relay's gas EOA is serialized in-process only"
-      })
+      }
     );
   }
   const selfRelay = opts.config.selfRelay && selfRelayActive ? createX402SelfRelay({
@@ -2278,15 +2282,15 @@ async function createX402BatchSettlementServer(opts) {
         const settlement = await resource.settlePayment(payload, matched);
         if (!settlement.success) {
           const operatorErrorMessage = selfRelayEnabled ? void 0 : settlement.errorMessage;
-          console.warn(
-            JSON.stringify({
+          diagnosticConsole.warn(
+            {
               level: "warn",
               event: "x402_settlement_submission_failed",
               network: settlement.network,
               settlement_id: intent?.settlementId,
               error_reason: settlement.errorReason,
-              ...operatorErrorMessage ? { error_message: operatorErrorMessage } : {}
-            })
+              ...operatorErrorMessage ? { error_message: void 0 } : {}
+            }
           );
           throw new X402SettlementSubmissionError(
             settlement.errorReason ?? "batch_settlement_failed",
@@ -2329,7 +2333,7 @@ async function createX402BatchSettlementServer(opts) {
           if (postgres) await postgres.withFleetSettlementLock(claim);
           else await claim();
         } catch (error) {
-          console.error("x402 batch-settlement withdrawal claim failed", error);
+          diagnosticConsole.error("x402 batch-settlement withdrawal claim failed", error);
         } finally {
           await restoreReservation(storage, funding.channelId, pendingId, channelBeforeVerify);
         }
@@ -3651,7 +3655,7 @@ async function verifyUpfrontPayment(opts) {
           x402Requirements
         });
       }
-      const { verifyX402Payment } = await import("./x402-CI6PSHNO.js");
+      const { verifyX402Payment } = await import("./x402-S47Q77UE.js");
       const receipt = await verifyX402Payment(
         x402Payment,
         x402Config,
@@ -3764,16 +3768,16 @@ async function verifyUpfrontPayment(opts) {
         const channelId = mppSessionChannelId(cred);
         const known = channelId ? await mpp.getTempoSessionBinding?.(channelId).catch(() => null) : null;
         if (!known) {
-          console.warn(
-            JSON.stringify({
+          diagnosticConsole.warn(
+            {
               level: "warn",
               event: "tempo_session_open_refused",
-              message: sessionUnavailable.message,
+              message: void 0,
               channel_id: channelId,
               // True means the credit is bound to some *other* channel — a
               // stale client, not a caller trying to open a fresh one.
               credit_channel_bound: sessionIssuable
-            })
+            }
           );
           return {
             paidMsats: 0,
@@ -4585,7 +4589,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
           snapshot
         });
       }
-      const { verifyX402Payment } = await import("./x402-CI6PSHNO.js");
+      const { verifyX402Payment } = await import("./x402-S47Q77UE.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -5002,7 +5006,7 @@ async function processIncomingPayment(job, body, opts) {
     try {
       const requiredMsats = job.pendingPaymentMsats ?? 0;
       const requiredUsdcMicro = job.pendingX402AmountUsdcMicro !== void 0 ? BigInt(job.pendingX402AmountUsdcMicro) : BigInt(msatsToUsdc(requiredMsats, rate));
-      const { verifyX402Payment } = await import("./x402-CI6PSHNO.js");
+      const { verifyX402Payment } = await import("./x402-S47Q77UE.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -5373,8 +5377,8 @@ async function resolveTopUpLedgerContext(opts, snapshot, binding) {
   if (askSatisfied && !(snapshot.creditId && snapshot.drawId)) return void 0;
   const dvmId = opts.dvmId ?? "";
   const logTopUp = (event, extra) => {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event,
         rail,
@@ -5382,7 +5386,7 @@ async function resolveTopUpLedgerContext(opts, snapshot, binding) {
         credit_id: snapshot.creditId,
         draw_id: snapshot.drawId,
         ...extra
-      })
+      }
     );
   };
   const logSkip = (reason, extra) => {
@@ -6326,25 +6330,25 @@ function oneShotCreditRefusal(instrument) {
   );
 }
 function logCreditRejected(reason, creditId, extra) {
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "credit_rejected",
       reason,
       credit_id: creditId,
       ...extra
-    })
+    }
   );
 }
 function logTempoBindingUnavailable(args) {
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "tempo_channel_binding_unavailable",
       channel_id: args.channelId,
       credit_id: args.creditId,
       dvm_id: args.dvmId
-    })
+    }
   );
 }
 async function resolveRateOrNull(fetcher) {
@@ -6372,16 +6376,16 @@ function x402NotOfferedResult(currency) {
     error: x402NotOfferedPaymentError(currency)
   };
 }
-function logCredentialRejected(rail, phase, err) {
-  console.warn(
-    JSON.stringify({
+function logCredentialRejected(rail, phase, _err) {
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: `${rail}_credential_rejected`,
       phase,
       rail,
-      error_name: err instanceof Error ? err.name : void 0,
-      error_message: err instanceof Error ? err.message : String(err)
-    })
+      error_name: void 0,
+      error_message: void 0
+    }
   );
 }
 
@@ -7978,14 +7982,14 @@ async function lightningIssue(c, deps, args) {
         }
       });
     }
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "lightning_invoice_issue_failed",
         credit_id: args.creditId,
         fund_id: args.fundId,
-        error: err instanceof Error ? err.message : String(err)
-      })
+        error: void 0
+      }
     );
     return lightningUnavailable(c, args.menu);
   }
@@ -8238,15 +8242,15 @@ async function replayedFunding(c, deps, args) {
   });
 }
 function creditFundingUnrecorded(c, args) {
-  console.warn(
-    JSON.stringify({
+  diagnosticConsole.warn(
+    {
       level: "warn",
       event: "credit_funding_unrecorded",
       credit_id: args.creditId,
       fund_id: args.fundId,
       requested_micro: args.requestedMicro,
       ...args.invoiceStatus ? { invoice_status: args.invoiceStatus } : {}
-    })
+    }
   );
   return c.json(
     {
@@ -8431,17 +8435,17 @@ async function loadAdminLockPubkeyState(c, opts) {
     return { state: await opts.getLockPubkeyState() };
   } catch (error) {
     const errorCode = safeErrorCode(error);
-    console.error(
-      JSON.stringify({
+    diagnosticConsole.error(
+      {
         level: "error",
         event: "admin_lock_state_unavailable",
-        message: "Admin authentication state could not be loaded; the request failed closed.",
+        message: void 0,
         dvm_id: opts.dvmId,
         method: c.req.method,
         route: c.req.path,
         error_kind: error instanceof Error ? "Error" : typeof error,
         ...errorCode ? { error_code: errorCode } : {}
-      })
+      }
     );
     return {
       response: c.json(
@@ -9089,7 +9093,17 @@ function safeError(err) {
 // src/sdk/server/hosting-control.ts
 import { createHmac, timingSafeEqual } from "crypto";
 function signHostingControl(secret, command) {
-  return createHmac("sha256", secret).update(JSON.stringify([
+  const signed = command.version === 2 ? [
+    "dvmkit-hosting-v2",
+    command.action,
+    command.scope,
+    command.dvmId,
+    command.generation ?? null,
+    command.leaseExpiresAtMs ?? null,
+    command.deadlineMs ?? null,
+    command.timestampMs,
+    command.nonce
+  ] : [
     "dvmkit-hosting-v1",
     command.action,
     command.scope,
@@ -9098,7 +9112,8 @@ function signHostingControl(secret, command) {
     command.deadlineMs ?? null,
     command.timestampMs,
     command.nonce
-  ])).digest("hex");
+  ];
+  return createHmac("sha256", secret).update(JSON.stringify(signed)).digest("hex");
 }
 var HostingControl = class {
   constructor(pool, dvmId, config) {
@@ -9117,7 +9132,7 @@ var HostingControl = class {
       await this.pool.query(`
       CREATE TABLE IF NOT EXISTS sdk_hosting_control (
         dvm_id TEXT NOT NULL, scope TEXT NOT NULL, state TEXT NOT NULL,
-        generation BIGINT NOT NULL, deadline_ms BIGINT,
+        generation BIGINT NOT NULL, deadline_ms BIGINT, lease_expires_at_ms BIGINT,
         PRIMARY KEY (dvm_id, scope)
       );
       CREATE TABLE IF NOT EXISTS sdk_hosting_nonces (
@@ -9135,6 +9150,7 @@ var HostingControl = class {
       ALTER TABLE sdk_hosting_admissions ADD COLUMN IF NOT EXISTS credit_id TEXT;
       ALTER TABLE sdk_hosting_admissions ADD COLUMN IF NOT EXISTS fund_id TEXT;
       ALTER TABLE sdk_hosting_admissions ADD COLUMN IF NOT EXISTS payment_artifact_hash TEXT;
+      ALTER TABLE sdk_hosting_control ADD COLUMN IF NOT EXISTS lease_expires_at_ms BIGINT;
       CREATE INDEX IF NOT EXISTS sdk_hosting_admissions_pending
         ON sdk_hosting_admissions (dvm_id, scope) WHERE outcome = 'pending';
       CREATE INDEX IF NOT EXISTS sdk_hosting_admissions_unresolved
@@ -9148,13 +9164,31 @@ var HostingControl = class {
       `);
       await this.pool.query(
         `INSERT INTO sdk_hosting_control (dvm_id, scope, state, generation)
-         VALUES ($1, $2, 'accepting', 0) ON CONFLICT DO NOTHING`,
+         VALUES ($1, $2, 'draining', 0) ON CONFLICT DO NOTHING`,
         [this.dvmId, this.config.scope]
       );
+      const client = await this.pool.connect();
+      try {
+        await client.query("BEGIN");
+        const migrated = await client.query(
+          `UPDATE sdk_hosting_control SET state='draining',
+             deadline_ms=FLOOR(EXTRACT(EPOCH FROM clock_timestamp()) * 1000)::bigint + 3600000
+           WHERE dvm_id=$1 AND scope=$2 AND state='accepting' AND lease_expires_at_ms IS NULL
+           RETURNING deadline_ms`,
+          [this.dvmId, this.config.scope]
+        );
+        if (migrated.rows[0]) await this.pinAdmissionDeadlines(client, Number(migrated.rows[0].deadline_ms));
+        await client.query("COMMIT");
+      } catch (error) {
+        await client.query("ROLLBACK").catch(() => void 0);
+        throw error;
+      } finally {
+        client.release();
+      }
     });
   }
   async authorize(command, signature) {
-    if (command.scope !== this.config.scope || command.dvmId !== this.dvmId || !Number.isSafeInteger(command.timestampMs) || Math.abs(Date.now() - command.timestampMs) > 3e5 || typeof command.nonce !== "string" || !/^[A-Za-z0-9_-]{16,128}$/.test(command.nonce) || !signature || !/^[0-9a-f]{64}$/i.test(signature)) return false;
+    if (command.version !== void 0 && command.version !== 2 || command.version === 2 && command.action !== "resume" || command.version === void 0 && command.leaseExpiresAtMs !== void 0 || command.scope !== this.config.scope || command.dvmId !== this.dvmId || !Number.isSafeInteger(command.timestampMs) || Math.abs(Date.now() - command.timestampMs) > 3e5 || typeof command.nonce !== "string" || !/^[A-Za-z0-9_-]{16,128}$/.test(command.nonce) || !signature || !/^[0-9a-f]{64}$/i.test(signature)) return false;
     const actual = Buffer.from(signature, "hex");
     const expected = Buffer.from(signHostingControl(this.config.secret, command), "hex");
     if (!timingSafeEqual(actual, expected)) return false;
@@ -9171,11 +9205,14 @@ var HostingControl = class {
     try {
       await client.query("BEGIN");
       const { rows } = await client.query(
-        `SELECT state FROM sdk_hosting_control WHERE dvm_id=$1 AND scope=$2 FOR UPDATE`,
+        `SELECT state, lease_expires_at_ms, deadline_ms FROM sdk_hosting_control WHERE dvm_id=$1 AND scope=$2 FOR UPDATE`,
         [this.dvmId, this.config.scope]
       );
-      if (rows[0]?.state !== "accepting") {
-        await client.query("ROLLBACK");
+      const now = await this.databaseNow(client);
+      const current = rows[0];
+      if (current) await this.expireIfNeeded(client, current, now);
+      if (current?.state !== "accepting" || current.lease_expires_at_ms === null || Number(current.lease_expires_at_ms) <= now) {
+        await client.query("COMMIT");
         return false;
       }
       await client.query(
@@ -9187,7 +9224,7 @@ var HostingControl = class {
           this.dvmId,
           this.config.scope,
           jobId,
-          Date.now(),
+          now,
           details?.creditId ?? null,
           details?.fundId ?? null,
           details?.paymentArtifactHash ?? null
@@ -9228,26 +9265,70 @@ var HostingControl = class {
   }
   async jobDeadline(jobId) {
     const { rows } = await this.pool.query(
-      `SELECT MAX(drain_deadline_ms)::text AS drain_deadline_ms
+      `SELECT MIN(drain_deadline_ms)::text AS drain_deadline_ms
        FROM sdk_hosting_admissions WHERE dvm_id=$1 AND scope=$2 AND job_id=$3`,
       [this.dvmId, this.config.scope, jobId]
     );
     return rows[0]?.drain_deadline_ms === null || !rows[0] ? null : Number(rows[0].drain_deadline_ms);
   }
+  async dispatchDeadlineReached(jobId) {
+    const { rows } = await this.pool.query(
+      `SELECT EXISTS (
+         SELECT 1 FROM sdk_hosting_admissions
+         WHERE dvm_id=$1 AND scope=$2 AND job_id=$3
+           AND drain_deadline_ms <= FLOOR(EXTRACT(EPOCH FROM clock_timestamp()) * 1000)::bigint
+       ) OR EXISTS (
+         SELECT 1 FROM sdk_hosting_control
+         WHERE dvm_id=$1 AND scope=$2 AND state='draining'
+           AND deadline_ms <= FLOOR(EXTRACT(EPOCH FROM clock_timestamp()) * 1000)::bigint
+       ) AS reached`,
+      [this.dvmId, this.config.scope, jobId]
+    );
+    return rows[0]?.reached ?? false;
+  }
+  async databaseNow(client) {
+    const { rows } = await client.query(
+      `SELECT FLOOR(EXTRACT(EPOCH FROM clock_timestamp()) * 1000)::bigint AS now_ms`
+    );
+    return Number(rows[0].now_ms);
+  }
+  async pinAdmissionDeadlines(client, deadlineMs) {
+    await client.query(
+      `UPDATE sdk_hosting_admissions SET drain_deadline_ms=
+         CASE WHEN drain_deadline_ms IS NULL THEN $3 ELSE LEAST(drain_deadline_ms, $3) END
+       WHERE dvm_id=$1 AND scope=$2 AND outcome <> 'failed'`,
+      [this.dvmId, this.config.scope, deadlineMs]
+    );
+  }
+  async expireIfNeeded(client, row, now) {
+    if (row.state !== "accepting" || row.lease_expires_at_ms !== null && Number(row.lease_expires_at_ms) > now) return;
+    const deadline = row.deadline_ms === null ? now + 36e5 : Number(row.deadline_ms);
+    await client.query(
+      `UPDATE sdk_hosting_control SET state='draining', deadline_ms=$3
+       WHERE dvm_id=$1 AND scope=$2`,
+      [this.dvmId, this.config.scope, deadline]
+    );
+    row.state = "draining";
+    row.deadline_ms = String(deadline);
+    await this.pinAdmissionDeadlines(client, deadline);
+  }
   async transition(command) {
-    if (command.action !== "drain" && command.action !== "resume" || !Number.isSafeInteger(command.generation) || command.generation < 1 || command.action === "drain" && !Number.isSafeInteger(command.deadlineMs) || command.action === "resume" && command.deadlineMs !== void 0) return "conflict";
+    if (command.action !== "drain" && command.action !== "resume" || !Number.isSafeInteger(command.generation) || command.generation < 1 || command.action === "drain" && (command.version !== void 0 || !Number.isSafeInteger(command.deadlineMs) || command.leaseExpiresAtMs !== void 0) || command.action === "resume" && (command.version !== 2 || !Number.isSafeInteger(command.leaseExpiresAtMs) || !Number.isSafeInteger(command.deadlineMs))) return "conflict";
     const client = await this.pool.connect();
     try {
       await client.query("BEGIN");
       const { rows } = await client.query(
-        `SELECT state, generation, deadline_ms FROM sdk_hosting_control
+        `SELECT state, generation, deadline_ms, lease_expires_at_ms FROM sdk_hosting_control
          WHERE dvm_id=$1 AND scope=$2 FOR UPDATE`,
         [this.dvmId, this.config.scope]
       );
       const prior = rows[0];
+      if (!prior) throw new Error("Hosting control was not initialized");
+      const now = await this.databaseNow(client);
+      await this.expireIfNeeded(client, prior, now);
       const generation = Number(prior.generation);
       const nextState = command.action === "drain" ? "draining" : "accepting";
-      if (command.generation === generation && prior.state === nextState && Number(prior.deadline_ms ?? 0) === (command.deadlineMs ?? 0)) {
+      if (command.generation === generation && prior.state === nextState && Number(prior.deadline_ms ?? 0) === (command.deadlineMs ?? 0) && (command.action !== "resume" || Number(prior.lease_expires_at_ms ?? 0) === command.leaseExpiresAtMs)) {
         await client.query("COMMIT");
         return "ok";
       }
@@ -9255,21 +9336,29 @@ var HostingControl = class {
         await client.query("ROLLBACK");
         return "conflict";
       }
-      if (command.action === "drain" && (command.deadlineMs <= Date.now() || command.deadlineMs > Date.now() + 864e5)) {
+      if (command.action === "drain" && (command.deadlineMs <= now || command.deadlineMs > now + 864e5)) {
+        await client.query("ROLLBACK");
+        return "conflict";
+      }
+      if (command.action === "resume" && (command.leaseExpiresAtMs <= now || command.leaseExpiresAtMs > now + 36e5 || command.deadlineMs <= command.leaseExpiresAtMs || command.deadlineMs > command.leaseExpiresAtMs + 36e5)) {
         await client.query("ROLLBACK");
         return "conflict";
       }
       await client.query(
-        `UPDATE sdk_hosting_control SET state=$3, generation=$4, deadline_ms=$5
+        `UPDATE sdk_hosting_control SET state=$3, generation=$4, deadline_ms=$5,
+           lease_expires_at_ms=$6
          WHERE dvm_id=$1 AND scope=$2`,
-        [this.dvmId, this.config.scope, nextState, command.generation, command.deadlineMs ?? null]
+        [
+          this.dvmId,
+          this.config.scope,
+          nextState,
+          command.generation,
+          command.deadlineMs ?? null,
+          command.action === "resume" ? command.leaseExpiresAtMs : null
+        ]
       );
       if (command.action === "drain") {
-        await client.query(
-          `UPDATE sdk_hosting_admissions SET drain_deadline_ms=$3
-           WHERE dvm_id=$1 AND scope=$2 AND outcome='pending'`,
-          [this.dvmId, this.config.scope, command.deadlineMs]
-        );
+        await this.pinAdmissionDeadlines(client, command.deadlineMs);
       }
       await client.query("COMMIT");
       return "ok";
@@ -9281,6 +9370,22 @@ var HostingControl = class {
     }
   }
   async status() {
+    const client = await this.pool.connect();
+    try {
+      await client.query("BEGIN");
+      const locked = await client.query(
+        `SELECT state, deadline_ms, lease_expires_at_ms FROM sdk_hosting_control
+         WHERE dvm_id=$1 AND scope=$2 FOR UPDATE`,
+        [this.dvmId, this.config.scope]
+      );
+      if (locked.rows[0]) await this.expireIfNeeded(client, locked.rows[0], await this.databaseNow(client));
+      await client.query("COMMIT");
+    } catch (error) {
+      await client.query("ROLLBACK").catch(() => void 0);
+      throw error;
+    } finally {
+      client.release();
+    }
     await this.pool.query(
       `UPDATE sdk_hosting_admissions a SET outcome='accepted'
        WHERE a.dvm_id=$1 AND a.scope=$2 AND a.outcome='pending'
@@ -9300,7 +9405,7 @@ var HostingControl = class {
       [this.dvmId, this.config.scope]
     );
     const { rows } = await this.pool.query(
-      `SELECT state, generation, deadline_ms FROM sdk_hosting_control WHERE dvm_id=$1 AND scope=$2`,
+      `SELECT state, generation, deadline_ms, lease_expires_at_ms FROM sdk_hosting_control WHERE dvm_id=$1 AND scope=$2`,
       [this.dvmId, this.config.scope]
     );
     const active = await this.pool.query(
@@ -9339,6 +9444,7 @@ var HostingControl = class {
       state: rows[0].state,
       generation: Number(rows[0].generation),
       deadlineMs: rows[0].deadline_ms === null ? null : Number(rows[0].deadline_ms),
+      leaseExpiresAtMs: rows[0].lease_expires_at_ms === null ? null : Number(rows[0].lease_expires_at_ms),
       activeJobIds: active.rows.map((row) => row.id),
       unownedActiveJobIds: unowned.rows.map((row) => row.id),
       pendingAdmissionCount: Number(pending.rows[0].pending),
@@ -10121,13 +10227,13 @@ function startAccumulatorMonitor(opts) {
           lockKey,
           graceSeconds: opts.lockPubkeyGraceSeconds ?? DEFAULT_LOCK_PUBKEY_GRACE_SECONDS
         });
-      } catch (err) {
-        console.error(
-          JSON.stringify({
+      } catch (_err) {
+        diagnosticConsole.error(
+          {
             level: "wallet_accumulator_tick_error",
             dvmId: opts.dvmId,
-            error: err instanceof Error ? err.message : String(err)
-          })
+            error: void 0
+          }
         );
       } finally {
         inFlight = null;
@@ -10163,13 +10269,13 @@ async function runTick(opts) {
         try {
           await pruneRetired(client, opts.dvmId, opts.graceSeconds * 1e3, opts.now());
           activeState = await opts.getLockPubkeyState();
-        } catch (err) {
-          console.error(
-            JSON.stringify({
+        } catch (_err) {
+          diagnosticConsole.error(
+            {
               level: "wallet_accumulator_lock_pubkey_prune_failed",
               dvmId: opts.dvmId,
-              error: err instanceof Error ? err.message : String(err)
-            })
+              error: void 0
+            }
           );
         }
       }
@@ -10213,8 +10319,8 @@ async function emitExpiryEvents(opts, db, activeState) {
   }
 }
 function emitRetiredLockPubkey(dvmId, batch, retiredAtMs) {
-  console.log(
-    JSON.stringify({
+  diagnosticConsole.log(
+    {
       level: "wallet_accumulator_batch_retired_lock_pubkey",
       dvmId,
       mintUrl: batch.mintUrl,
@@ -10222,24 +10328,24 @@ function emitRetiredLockPubkey(dvmId, batch, retiredAtMs) {
       retiredAtMs,
       totalSats: batch.totalSats,
       rowIds: batch.rowIds
-    })
+    }
   );
 }
 function emitOrphanBatch(dvmId, batch) {
-  console.log(
-    JSON.stringify({
+  diagnosticConsole.log(
+    {
       level: "wallet_accumulator_batch_orphan_lock_pubkey",
       dvmId,
       mintUrl: batch.mintUrl,
       lockPubkey: batch.lockPubkey,
       totalSats: batch.totalSats,
       rowIds: batch.rowIds
-    })
+    }
   );
 }
 function emitExpired(dvmId, batch, tExpiredAgoMs) {
-  console.log(
-    JSON.stringify({
+  diagnosticConsole.log(
+    {
       level: "wallet_accumulator_batch_expired",
       dvmId,
       mintUrl: batch.mintUrl,
@@ -10247,12 +10353,12 @@ function emitExpired(dvmId, batch, tExpiredAgoMs) {
       totalSats: batch.totalSats,
       rowIds: batch.rowIds,
       tExpiredAgoMs
-    })
+    }
   );
 }
 function emitExpiringSoon(dvmId, batch, timeToExpireMs) {
-  console.log(
-    JSON.stringify({
+  diagnosticConsole.log(
+    {
       level: "wallet_accumulator_batch_expiring_soon",
       dvmId,
       mintUrl: batch.mintUrl,
@@ -10260,7 +10366,7 @@ function emitExpiringSoon(dvmId, batch, timeToExpireMs) {
       totalSats: batch.totalSats,
       rowIds: batch.rowIds,
       timeToExpireMs
-    })
+    }
   );
 }
 async function reapExpiredKeysetRows(opts, db) {
@@ -10281,15 +10387,15 @@ async function reapExpiredKeysetRows(opts, db) {
       [opts.dvmId, mint_url, proof_keyset_id]
     );
     if ((rowCount ?? 0) > 0) {
-      console.log(
-        JSON.stringify({
+      diagnosticConsole.log(
+        {
           level: "wallet_accumulator_reaped_expired_keyset",
           dvmId: opts.dvmId,
           mintUrl: mint_url,
           keysetId: proof_keyset_id,
           finalExpiry,
           rowCount
-        })
+        }
       );
     }
   }
@@ -10403,12 +10509,12 @@ var JobManager = class {
       );
     }
     if (opts.receiptIssuer && !isReceiptIssuingStore(this.jobStore)) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "receipts_disabled_store_unsupported",
-          message: "DVMKIT_RECEIPT_KEY is set but the configured jobStore does not implement ReceiptIssuingStore (claimReceiptSeq / saveReceipt), so no receipts will be issued and /v1/info will not advertise them. Use PostgresJobStore, MemoryJobStore, or implement both methods."
-        })
+          message: void 0
+        }
       );
     }
     if (opts.cashuMode === "p2pk-accumulator" && opts.db && opts.dvmId) {
@@ -10417,12 +10523,12 @@ var JobManager = class {
           pool: opts.db,
           dvmId: opts.dvmId
         });
-      } catch (err) {
-        console.error(
-          JSON.stringify({
+      } catch (_err) {
+        diagnosticConsole.error(
+          {
             level: "wallet_accumulator_monitor_start_failed",
-            error: err instanceof Error ? err.message : String(err)
-          })
+            error: void 0
+          }
         );
       }
     }
@@ -10438,24 +10544,24 @@ var JobManager = class {
       );
       const intervalMs = opts.staleJobSweepIntervalMs ?? Math.min(6e4, Math.max(15e3, Math.floor(tightest / 4)));
       this.staleSweepTimer = setInterval(() => {
-        void this.sweepStaleJobs().catch((err) => {
-          console.error(
-            JSON.stringify({
+        void this.sweepStaleJobs().catch((_err) => {
+          diagnosticConsole.error(
+            {
               level: "stale_job_sweep_failed",
-              error: err instanceof Error ? err.message : String(err)
-            })
+              error: void 0
+            }
           );
         });
       }, intervalMs);
       this.staleSweepTimer.unref();
       if (this.processingWatchdogMs > 0 && this.heartbeatIntervalMs > 0) {
         this.heartbeatTimer = setInterval(() => {
-          void this.heartbeatActiveJobs().catch((err) => {
-            console.error(
-              JSON.stringify({
+          void this.heartbeatActiveJobs().catch((_err) => {
+            diagnosticConsole.error(
+              {
                 level: "job_heartbeat_failed",
-                error: err instanceof Error ? err.message : String(err)
-              })
+                error: void 0
+              }
             );
           });
         }, this.heartbeatIntervalMs);
@@ -10469,12 +10575,12 @@ var JobManager = class {
       ORPHAN_SWEEP_CLAIMS.add(opts.creditLedger);
       this.orphanSweepClaimed = true;
       this.orphanDrawSweepTimer = setInterval(() => {
-        void this.sweepOrphanDraws().catch((err) => {
-          console.error(
-            JSON.stringify({
+        void this.sweepOrphanDraws().catch((_err) => {
+          diagnosticConsole.error(
+            {
               level: "orphan_draw_sweep_failed",
-              error: err instanceof Error ? err.message : String(err)
-            })
+              error: void 0
+            }
           );
         });
       }, orphanIntervalMs);
@@ -10482,13 +10588,13 @@ var JobManager = class {
     }
     if (descriptor.jobRetentionDays > 0) {
       if (!isJobRetentionStore(this.jobStore)) {
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "job_retention_store_unsupported",
             dvm: descriptor.name,
             retentionDays: descriptor.jobRetentionDays
-          })
+          }
         );
       } else {
         const pass = () => {
@@ -10508,12 +10614,12 @@ var JobManager = class {
     }
     if (opts.dvmId && (opts.onJobCost || opts.onJobTerminal) && isTerminalCostRecoveryStore(this.jobStore)) {
       this.terminalCostRecoveryTimer = setInterval(() => {
-        void this.recoverTerminalCosts().catch((err) => {
-          console.error(
-            JSON.stringify({
+        void this.recoverTerminalCosts().catch((_err) => {
+          diagnosticConsole.error(
+            {
               level: "terminal_cost_recovery_failed",
-              error: err instanceof Error ? err.message : String(err)
-            })
+              error: void 0
+            }
           );
         });
       }, TERMINAL_COST_RECOVERY_INTERVAL_MS);
@@ -10885,13 +10991,13 @@ var JobManager = class {
     if (!counters || !isTerminal(counters.status) || counters.status === job.status) return false;
     const durable = await this.jobStore.get(job.id);
     if (!durable) return false;
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "job_terminal_elsewhere",
         jobId: job.id,
         durableStatus: durable.status,
         localStatus: job.status
-      })
+      }
     );
     job.status = durable.status;
     job.summary = durable.summary;
@@ -10915,7 +11021,7 @@ var JobManager = class {
       const ctx = job.sdkCtx;
       const onCancel = cap.onCancel;
       void Promise.resolve(onCancel(ctx, { reason })).catch((err) => {
-        console.error(`[${job.id}] onCancel hook failed after cross-machine cancel:`, err);
+        diagnosticConsole.error(`[${job.id}] onCancel hook failed after cross-machine cancel:`, err);
       });
     }
     this.clearIdleTimer(job.id);
@@ -10940,20 +11046,20 @@ var JobManager = class {
     }
   }
   /** Retry outside the status watcher, which correctly stops once the job is terminal. */
-  scheduleTerminalCostHandoffRetry(job, attempt, err) {
+  scheduleTerminalCostHandoffRetry(job, attempt, _err) {
     if (this.terminalCostHandoffRetryTimers.has(job.id)) return;
     const delayMs = Math.min(
       TERMINAL_COST_HANDOFF_RETRY_INITIAL_MS * 2 ** Math.min(attempt - 1, 8),
       TERMINAL_COST_HANDOFF_RETRY_MAX_MS
     );
-    console.error(
-      JSON.stringify({
+    diagnosticConsole.error(
+      {
         level: "terminal_cost_handoff_retry_scheduled",
         jobId: job.id,
         attempt,
         delayMs,
-        error: err instanceof Error ? err.message : String(err)
-      })
+        error: void 0
+      }
     );
     const timer = setTimeout(() => {
       this.terminalCostHandoffRetryTimers.delete(job.id);
@@ -11024,13 +11130,13 @@ var JobManager = class {
         return;
       }
       this.statusWatchers.set(jobId, unsubscribe);
-    }).catch((err) => {
-      console.error(
-        JSON.stringify({
+    }).catch((_err) => {
+      diagnosticConsole.error(
+        {
           level: "job_status_watch_subscribe_failed",
           jobId,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
       this.statusWatchers.delete(jobId);
     });
@@ -11067,13 +11173,13 @@ var JobManager = class {
         if (isTerminal(job.status)) return;
         if (await this.adoptDurableTerminal(job)) return;
       } while (this.statusChecksQueued.has(job.id));
-    } catch (err) {
-      console.error(
-        JSON.stringify({
+    } catch (_err) {
+      diagnosticConsole.error(
+        {
           level: "job_status_watch_check_failed",
           jobId: job.id,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
     } finally {
       this.statusChecksInFlight.delete(job.id);
@@ -11115,9 +11221,9 @@ var JobManager = class {
             content: msg.content
           },
           opts
-        ).catch((err) => {
-          console.error(
-            JSON.stringify({
+        ).catch((_err) => {
+          diagnosticConsole.error(
+            {
               level: "job_message_append_failed",
               jobId,
               // In-memory counter, NOT the authoritative DB-allocated seq:
@@ -11125,9 +11231,9 @@ var JobManager = class {
               // RETURNING` inside the transaction that just failed, so no DB
               // seq was assigned for this message.
               localSeq: msg.seq,
-              note: "localSeq is the in-process counter; the DB-allocated seq was never assigned (append rolled back)",
-              error: err instanceof Error ? err.message : String(err)
-            })
+              note: void 0,
+              error: void 0
+            }
           );
         })
       );
@@ -11267,8 +11373,8 @@ var JobManager = class {
         if (claimed) {
           swept++;
           await this.finalizeStoredTerminal(record.id);
-          console.warn(
-            JSON.stringify({
+          diagnosticConsole.warn(
+            {
               level: awaiting ? "stale_job_cancelled" : "stale_job_failed",
               jobId: record.id,
               capability: record.capability,
@@ -11286,7 +11392,7 @@ var JobManager = class {
               skewMs: skewMs > 0 ? skewMs : void 0,
               paidMsats: record.paidMsats,
               paymentRail: record.paymentRail
-            })
+            }
           );
           if (record.paidMsats > 0 && record.paymentRail && this.opts.onPaidJobDeath) {
             try {
@@ -11303,10 +11409,10 @@ var JobManager = class {
                   paymentMint: record.paymentMint
                 })
               ).catch((err) => {
-                console.error(`[${record.id}] paid-job-death report failed:`, err);
+                diagnosticConsole.error(`[${record.id}] paid-job-death report failed:`, err);
               });
             } catch (err) {
-              console.error(`[${record.id}] paid-job-death report failed:`, err);
+              diagnosticConsole.error(`[${record.id}] paid-job-death report failed:`, err);
             }
           }
           const active = this._activeJobs.get(record.id);
@@ -11319,15 +11425,15 @@ var JobManager = class {
         }
       }
       if (skewMs > 0) {
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "stale_job_sweep_clock_skew",
             skewMs,
             processingCompensatedMs: this.processingWatchdogMs > 0 ? processingCompensationMs : void 0,
             awaitingCompensatedMs: this.staleJobTimeoutMs > 0 ? awaitingCompensationMs : void 0,
             examined: stale.length,
             swept
-          })
+          }
         );
       }
       return { swept };
@@ -11420,13 +11526,13 @@ var JobManager = class {
           } catch (err) {
             const failure = err instanceof Error ? err : new Error(String(err));
             failures.push(failure);
-            console.error(
-              JSON.stringify({
+            diagnosticConsole.error(
+              {
                 level: "error",
                 event: "job_retention_candidate_failed",
                 jobId: record.id,
-                error: failure.message
-              })
+                error: void 0
+              }
             );
           }
         }
@@ -11440,8 +11546,8 @@ var JobManager = class {
         throw new AggregateError(failures, `${failures.length} job retention candidate(s) failed`);
       }
       this.jobRetentionResumeFrom = complete ? void 0 : cursor;
-      console.log(
-        JSON.stringify({
+      diagnosticConsole.log(
+        {
           level: "info",
           event: "job_retention_swept",
           retentionDays: this.descriptor.jobRetentionDays,
@@ -11449,7 +11555,7 @@ var JobManager = class {
           examined,
           redacted,
           complete
-        })
+        }
       );
       if (complete) {
         await this.notifyJobRetentionRecovered({ examined, redacted });
@@ -11458,15 +11564,15 @@ var JobManager = class {
     } catch (err) {
       this.jobRetentionResumeFrom = void 0;
       const error = err instanceof Error ? err.message : String(err);
-      console.error(
-        JSON.stringify({
+      diagnosticConsole.error(
+        {
           level: "error",
           event: "job_retention_sweep_failed",
           retentionDays: this.descriptor.jobRetentionDays,
           examined,
           redacted,
           error
-        })
+        }
       );
       await this.notifyJobRetentionFailed(error);
       throw err;
@@ -11510,13 +11616,13 @@ var JobManager = class {
         retentionDays: this.descriptor.jobRetentionDays,
         error
       });
-    } catch (callbackError) {
-      console.error(
-        JSON.stringify({
+    } catch (_callbackError) {
+      diagnosticConsole.error(
+        {
           level: "error",
           event: "job_retention_alert_failed",
-          error: callbackError instanceof Error ? callbackError.message : String(callbackError)
-        })
+          error: void 0
+        }
       );
     }
   }
@@ -11530,13 +11636,13 @@ var JobManager = class {
         retentionDays: this.descriptor.jobRetentionDays,
         ...result
       });
-    } catch (callbackError) {
-      console.error(
-        JSON.stringify({
+    } catch (_callbackError) {
+      diagnosticConsole.error(
+        {
           level: "error",
           event: "job_retention_recovery_alert_failed",
-          error: callbackError instanceof Error ? callbackError.message : String(callbackError)
-        })
+          error: void 0
+        }
       );
     }
   }
@@ -11629,8 +11735,8 @@ var JobManager = class {
               this.drawResolutionArgs(draw.creditId, draw.drawId)
             );
             if (!resolution.replayed) released++;
-            console.warn(
-              JSON.stringify({
+            diagnosticConsole.warn(
+              {
                 level: "orphan_draw_released",
                 creditId: draw.creditId,
                 drawId: draw.drawId,
@@ -11641,18 +11747,18 @@ var JobManager = class {
                 reason,
                 replayed: resolution.replayed,
                 availableMicro: resolution.availableMicro
-              })
+              }
             );
           } catch (err) {
-            console.warn(
-              JSON.stringify({
+            diagnosticConsole.warn(
+              {
                 level: "orphan_draw_release_failed",
                 creditId: draw.creditId,
                 drawId: draw.drawId,
                 jobId: draw.jobId,
                 code: err instanceof CreditLedgerError ? err.code : void 0,
-                error: err instanceof Error ? err.message : String(err)
-              })
+                error: void 0
+              }
             );
           }
         }
@@ -11669,8 +11775,8 @@ var JobManager = class {
         }
       }
       this.orphanSweepResumeFrom = cursor;
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "orphan_draw_sweep_truncated",
           examined,
           skipped,
@@ -11679,7 +11785,7 @@ var JobManager = class {
           reconciled,
           maxPages: ORPHAN_DRAW_SWEEP_MAX_PAGES,
           resumeAfterCreatedAt: cursor?.createdAt
-        })
+        }
       );
       return { released, reconciled };
     } finally {
@@ -11732,8 +11838,8 @@ var JobManager = class {
       }
     }
     const clockSkewMs = nowMs - Date.now();
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "orphan_draw_sweep_no_progress",
         examined: tally.examined,
         skipped: tally.skipped,
@@ -11745,7 +11851,7 @@ var JobManager = class {
         oldestPendingAgeMs,
         clockSkewMs: clockSkewMs > 0 ? clockSkewMs : void 0,
         probeError
-      })
+      }
     );
   }
   /**
@@ -11786,8 +11892,8 @@ var JobManager = class {
     try {
       const resolution = settle ? await ledger.settle(args) : await ledger.release(args);
       const booked = settle && !resolution.replayed ? await this.bookRevenue(record) : false;
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "credit_draw_reconciled",
           creditId: draw.creditId,
           drawId: draw.drawId,
@@ -11801,20 +11907,20 @@ var JobManager = class {
           replayed: resolution.replayed,
           availableMicro: resolution.availableMicro,
           booked
-        })
+        }
       );
       return !resolution.replayed;
     } catch (err) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "credit_draw_reconcile_failed",
           creditId: draw.creditId,
           drawId: draw.drawId,
           jobId: draw.jobId,
           jobStatus: record.status,
           code: err instanceof CreditLedgerError ? err.code : void 0,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
       return false;
     }
@@ -11962,13 +12068,13 @@ var JobManager = class {
           domain
         );
       } catch (err) {
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "auth_reverify_failed",
             jobId: record.id,
             capability: record.capability,
             sub_reason: err instanceof SignedRequestError ? err.sub_reason : "unknown"
-          })
+          }
         );
         throw err;
       }
@@ -12123,8 +12229,8 @@ var JobManager = class {
         job.drawId = result.drawId;
         if (info.creditId && result.creditId !== info.creditId) {
           unappliedCredit = this.unappliedCredit(info.funding, info.creditId, "unbound");
-          console.warn(
-            JSON.stringify({
+          diagnosticConsole.warn(
+            {
               level: "warn",
               event: "credit_topup_unbound",
               job_id: job.id,
@@ -12132,7 +12238,7 @@ var JobManager = class {
               draw_id: info.drawId,
               bound_credit_id: result.creditId,
               bound_draw_id: result.drawId
-            })
+            }
           );
         }
       } else {
@@ -12167,8 +12273,8 @@ var JobManager = class {
       unappliedCredit = this.unappliedCredit(info.funding, info.funding?.creditId, "over_ask", {
         creditedMicro: info.unappliedMicro
       });
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "credit_topup_over_ask",
           job_id: job.id,
@@ -12176,7 +12282,7 @@ var JobManager = class {
           draw_id: info.drawId,
           unapplied_micro: info.unappliedMicro,
           funded_micro: info.funding?.amountMicro
-        })
+        }
       );
     }
     this.reportCreditDeposit(info.funding);
@@ -12226,15 +12332,15 @@ var JobManager = class {
       } catch (err) {
         lastErr = err;
         if (attempt === CREDIT_INBOUND_ATTEMPTS) break;
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "credit_job_row_retry",
             job_id: jobId,
             seq,
             attempt,
-            error: errText(err)
-          })
+            error: void 0
+          }
         );
         await new Promise((resolve) => setTimeout(resolve, CREDIT_INBOUND_BACKOFF_MS * attempt));
       }
@@ -12253,16 +12359,16 @@ var JobManager = class {
       }
     }
     if (landed) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "credit_job_row_recovered",
           job_id: jobId,
           seq,
           credit_id: landed.creditId,
           draw_id: landed.drawId,
-          error: errText(lastErr)
-        })
+          error: void 0
+        }
       );
       return landed;
     }
@@ -12303,8 +12409,8 @@ var JobManager = class {
     const funding = info.funding;
     const readErr = err instanceof CreditInboundExhaustedError ? err.readError : void 0;
     const rowChecked = err instanceof CreditInboundExhaustedError && readErr === void 0;
-    console.error(
-      JSON.stringify({
+    diagnosticConsole.error(
+      {
         level: "error",
         event: "credit_job_row_unwritten",
         job_id: job.id,
@@ -12313,13 +12419,13 @@ var JobManager = class {
         paid_msats: info.paidMsats,
         credit_id: funding?.creditId ?? info.creditId,
         draw_id: info.drawId,
-        error: errText(err),
+        error: void 0,
         // `false` means the job row's credit state is unknown, not that it is
         // clean — the difference between a payment that provably didn't land and
         // one nobody could ask about.
         row_checked: rowChecked,
         ...readErr !== void 0 && { read_error: errText(readErr) }
-      })
+      }
     );
     if (isStreamableJobStore(this.jobStore)) {
       await this.jobStore.markInboundFailed(job.id, inboundSeq, "payment_unapplied").catch(() => void 0);
@@ -12366,7 +12472,7 @@ var JobManager = class {
     if (!funding || !onCreditFunded || !this.opts.dvmId) return;
     Promise.resolve(onCreditFunded(creditDepositPayload(this.opts.dvmId, funding))).catch(
       (err) => {
-        console.error(`[${funding.creditId}] Deposit reporting failed:`, err);
+        diagnosticConsole.error(`[${funding.creditId}] Deposit reporting failed:`, err);
       }
     );
   }
@@ -12465,8 +12571,8 @@ var JobManager = class {
   }
   /** Internal: structured warn for the one path that can't price a drawn job's pool. */
   warnDrawPool(job, reason, error) {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "draw_pool_unpriced",
         reason,
@@ -12474,7 +12580,7 @@ var JobManager = class {
         creditId: job.creditId,
         drawId: job.drawId,
         ...error !== void 0 && { error }
-      })
+      }
     );
   }
   /**
@@ -12501,7 +12607,7 @@ var JobManager = class {
     try {
       await callback({ jobId: record.id, rail, amountMicro: draw.amountMicro, currency, testFunds });
     } catch (error) {
-      console.error(`[${record.id}] Paid completion observer failed:`, error);
+      diagnosticConsole.error(`[${record.id}] Paid completion observer failed:`, error);
     }
   }
   async issueReceipt(record) {
@@ -12513,17 +12619,17 @@ var JobManager = class {
     let credit;
     try {
       credit = await this.resolveCreditDraw(record);
-    } catch (err) {
-      console.error(
-        JSON.stringify({
+    } catch (_err) {
+      diagnosticConsole.error(
+        {
           level: "error",
           event: "credit_resolve_failed",
           jobId: record.id,
           creditId: record.creditId,
           drawId: record.drawId,
           status: record.status,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
       return void 0;
     }
@@ -12540,15 +12646,15 @@ var JobManager = class {
       const saved = await store.saveReceipt(record.id, receipt) ?? receipt;
       await this.observePaidCompletion(record);
       return saved;
-    } catch (err) {
-      console.error(
-        JSON.stringify({
+    } catch (_err) {
+      diagnosticConsole.error(
+        {
           level: "error",
           event: "receipt_issue_failed",
           jobId: record.id,
           status: record.status,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
       return void 0;
     }
@@ -12590,8 +12696,8 @@ var JobManager = class {
       if (err instanceof CreditLedgerError && err.code === "invalid_draw_state") {
         const rec = await ledger.getDraw(args);
         if (!rec) return void 0;
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "credit_resolve_state_mismatch",
             jobId: record.id,
@@ -12599,7 +12705,7 @@ var JobManager = class {
             drawId: record.drawId,
             jobStatus: record.status,
             drawStatus: rec.status
-          })
+          }
         );
         return {
           credit_id: rec.creditId,
@@ -12727,7 +12833,7 @@ var JobManager = class {
         await this.jobStore.markTerminalReported(jobId);
       }
     } catch (error) {
-      console.error(`[${jobId}] Terminal reporting failed:`, error);
+      diagnosticConsole.error(`[${jobId}] Terminal reporting failed:`, error);
     }
   }
   terminalReportRecoveryCursor;
@@ -12787,28 +12893,28 @@ var JobManager = class {
         if (candidates.length < TERMINAL_COST_RECOVERY_BATCH) {
           this.terminalCostRecoveryResumeAfter = void 0;
           if (examined > 0) {
-            console.log(
-              JSON.stringify({
+            diagnosticConsole.log(
+              {
                 level: "info",
                 event: "terminal_cost_recovery_complete",
                 dvmId,
                 examined,
                 queued
-              })
+              }
             );
           }
           return { examined, queued, complete: true };
         }
       }
       this.terminalCostRecoveryResumeAfter = cursor;
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "terminal_cost_recovery_truncated",
           dvmId,
           examined,
           queued,
           resumeAfterJobId: cursor
-        })
+        }
       );
       return { examined, queued, complete: false };
     } finally {
@@ -12840,7 +12946,7 @@ var JobManager = class {
         }
       }
     } catch (err) {
-      console.error(`[${job.id}] Job cost reporting failed:`, err);
+      diagnosticConsole.error(`[${job.id}] Job cost reporting failed:`, err);
       return false;
     }
     return true;
@@ -12901,15 +13007,15 @@ var JobManager = class {
       const args = { creditId: job.creditId, drawId: job.drawId };
       const draw = await this.opts.creditLedger.getDraw(args).catch(() => void 0);
       if (draw?.status !== "settled") {
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "revenue_skipped_unsettled_draw",
             jobId: job.id,
             creditId: job.creditId,
             drawId: job.drawId,
             drawStatus: draw?.status ?? "missing"
-          })
+          }
         );
         return false;
       }
@@ -12933,8 +13039,8 @@ var JobManager = class {
       if (job.creditId && job.drawId) {
         const creditCurrency = typeof credit.creditCurrency === "string" ? credit.creditCurrency : void 0;
         const reason = creditRail === void 0 ? "ledger_not_configured" : creditRail === null ? "credit_rail_null" : isFundingRail(creditRail) ? "job_rail_missing" : "credit_rail_unrecognized";
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "revenue_skipped_no_rail",
             jobId: job.id,
@@ -12956,7 +13062,7 @@ var JobManager = class {
             // database one, and the only arm where the debit is reported on
             // the job row's word rather than the ledger's.
             reason
-          })
+          }
         );
         if (onRevenueSkippedNoRail) {
           Promise.resolve(
@@ -12972,7 +13078,7 @@ var JobManager = class {
               reason
             })
           ).catch((err) => {
-            console.error(`[${job.id}] Revenue skip alert reporting failed:`, err);
+            diagnosticConsole.error(`[${job.id}] Revenue skip alert reporting failed:`, err);
           });
         }
       }
@@ -13001,7 +13107,7 @@ var JobManager = class {
         ...credit
       })
     ).catch((err) => {
-      console.error(`[${job.id}] Revenue reporting failed:`, err);
+      diagnosticConsole.error(`[${job.id}] Revenue reporting failed:`, err);
     });
     return true;
   }
@@ -13274,14 +13380,14 @@ var MintHealthTracker = class {
       };
       this.state.set(key, next);
       if (previous.sick) {
-        console.log(
-          JSON.stringify({
+        diagnosticConsole.log(
+          {
             level: "cashu_mint_runtime_recovered",
             mintUrl,
             latencyMs: result.latencyMs,
             version: result.version,
             observedAt: this.nowFn()
-          })
+          }
         );
       }
       return;
@@ -13298,21 +13404,19 @@ var MintHealthTracker = class {
       errorCode: nutIncompatible ? "nut_support_missing" : result.error?.code
     });
     if (!previous.sick && sick) {
-      console.log(
-        JSON.stringify(
-          nutIncompatible ? {
-            level: "cashu_mint_nut_incompatible",
-            mintUrl,
-            version: result.version,
-            observedAt: this.nowFn()
-          } : {
-            level: "cashu_mint_runtime_sick",
-            mintUrl,
-            consecutiveFailures,
-            error: result.error,
-            observedAt: this.nowFn()
-          }
-        )
+      diagnosticConsole.log(
+        nutIncompatible ? {
+          level: "cashu_mint_nut_incompatible",
+          mintUrl,
+          version: result.version,
+          observedAt: this.nowFn()
+        } : {
+          level: "cashu_mint_runtime_sick",
+          mintUrl,
+          consecutiveFailures,
+          error: void 0,
+          observedAt: this.nowFn()
+        }
       );
     }
   }
@@ -13327,8 +13431,8 @@ var MintHealthTracker = class {
       errorCode: s.errorCode
     }));
     const healthy = mints.filter((m) => m.probeOk).length;
-    console.log(
-      JSON.stringify({
+    diagnosticConsole.log(
+      {
         level: healthy === 0 && mints.length > 0 ? "warn" : "cashu_mint_boot_health",
         event: "cashu_mint_boot_health",
         healthyMints: healthy,
@@ -13336,7 +13440,7 @@ var MintHealthTracker = class {
         allUnhealthy: healthy === 0 && mints.length > 0,
         mints,
         observedAt: this.nowFn()
-      })
+      }
     );
   }
 };
@@ -14015,16 +14119,16 @@ var X402FacilitatorHealth = class {
     if (ageMs >= this.maxStalenessMs) {
       if (this.ceilingLoggedForMs !== observedAtMs) {
         this.ceilingLoggedForMs = observedAtMs;
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "warn",
             event: "x402_facilitator_staleness_ceiling",
             facilitator: this.facilitator,
             network: this.network,
             age_ms: ageMs,
             staleness_ceiling_ms: this.maxStalenessMs,
-            message: "x402 removed from the payment menu because the facilitator capability observation is too old."
-          })
+            message: void 0
+          }
         );
       }
       return unavailableSupport(
@@ -14050,17 +14154,17 @@ var X402FacilitatorHealth = class {
     const { support } = read;
     if (support.reason === "probe_failed") {
       const observedAtMs = this.observation?.observedAtMs ?? this.startedAtMs;
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "x402_facilitator_fallback",
           facilitator: support.facilitator,
           network: support.network,
-          error: support.error,
+          error: void 0,
           age_ms: Math.max(0, this.now() - observedAtMs),
           staleness_ceiling_ms: this.maxStalenessMs,
-          message: "Facilitator capability probe failed; x402 keeps its last exact support until the staleness ceiling."
-        })
+          message: void 0
+        }
       );
       return;
     }
@@ -14068,19 +14172,19 @@ var X402FacilitatorHealth = class {
     this.lastSupportedResponse = read.response;
     this.ceilingLoggedForMs = void 0;
     if (!support.available) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "x402_facilitator_unavailable",
           facilitator: support.facilitator,
           network: support.network,
           reason: support.reason,
-          message: "Exact x402 is unavailable because the configured facilitator advertises no supported exact generation on this network. Configured batch settlement is evaluated separately; other rails are unaffected."
-        })
+          message: void 0
+        }
       );
     } else if (!support.exact.v1 || !support.exact.v2 || this.config.batchSettlement && !support.batchSettlement) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "x402_facilitator_capability_degraded",
           facilitator: support.facilitator,
@@ -14088,8 +14192,8 @@ var X402FacilitatorHealth = class {
           exact_v1: support.exact.v1,
           exact_v2: support.exact.v2,
           batch_settlement: support.batchSettlement,
-          message: "x402 is serving only the protocol generations and channel scheme advertised by the facilitator."
-        })
+          message: void 0
+        }
       );
     }
   }
@@ -14968,11 +15072,11 @@ async function handleWriteOffInvoice(c, opts) {
     );
   }
   if (outcome.written) {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "lightning_invoice_written_off",
-        message: "An operator closed a blocked Lightning funding invoice without crediting it. The received sats stay in the wallet and no caller balance was created for them.",
+        message: void 0,
         payment_hash: written.paymentHash,
         credit_id: written.creditId,
         fund_id: written.fundId,
@@ -14980,8 +15084,8 @@ async function handleWriteOffInvoice(c, opts) {
         amount_msats: written.amountMsats,
         amount_micro: written.amountMicro,
         currency: written.currency,
-        note: written.writeOffNote
-      })
+        note: void 0
+      }
     );
   }
   return c.json({
@@ -15161,19 +15265,19 @@ async function handleWriteOffX402(c, opts) {
   if ("refusal" in outcome) return x402RefusalResponse(c, outcome);
   if (outcome.written) {
     const credit = await opts.ledger.getCreditByX402Channel(outcome.intent.channelId);
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "x402_settlement_written_off",
-        message: "An operator closed a wedged x402 settlement without booking it. If the refund did reach the chain, the caller's credit balance is still on this ledger and is reclaimable with a fresh drain id.",
+        message: void 0,
         settlement_id: outcome.intent.settlementId,
         channel_id: outcome.intent.channelId,
         operation: outcome.intent.operation,
         effect_id: outcome.intent.effectId,
         credit_id: credit?.creditId ?? null,
         settled_amount: outcome.intent.response?.amount ?? null,
-        note: outcome.intent.writeOffNote
-      })
+        note: void 0
+      }
     );
   }
   return c.json({
@@ -15352,19 +15456,19 @@ async function handleWriteOffTempo(c, opts) {
     return tempoNotWedgedRefusal(c, parsed, outcome.drain.status);
   }
   if (outcome.written) {
-    console.warn(
-      JSON.stringify({
+    diagnosticConsole.warn(
+      {
         level: "warn",
         event: "tempo_drain_written_off",
-        message: "An operator closed a wedged Tempo cooperative close without booking it. The caller's on-chain refund landed short of the balance this ledger extinguished; that difference is not expressible in any dvmkit row and must be made good out of band.",
+        message: void 0,
         credit_id: outcome.drain.creditId,
         drain_id: outcome.drain.drainId,
         channel_id: outcome.drain.channelId,
         amount_micro: outcome.drain.amountMicro,
         amount_native: outcome.drain.drainedNative,
         currency: outcome.drain.currency,
-        note: outcome.drain.writeOffNote
-      })
+        note: void 0
+      }
     );
   }
   return c.json({
@@ -15998,19 +16102,19 @@ function startCreditExpirySweep(ledger, opts = {}) {
     if (stopped) return;
     void runOnce().then(({ released }) => {
       if (released.length === 0) return;
-      console.log(
-        JSON.stringify({
+      diagnosticConsole.log(
+        {
           level: "credit_expiry_released",
           count: released.length,
           credits: released.map((r) => r.creditId)
-        })
+        }
       );
-    }).catch((err) => {
-      console.error(
-        JSON.stringify({
+    }).catch((_err) => {
+      diagnosticConsole.error(
+        {
           level: "credit_expiry_sweep_failed",
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
     });
   };
@@ -16992,7 +17096,7 @@ function assertRevenueReporterReady(opts) {
   const missing = Object.entries(pieces).filter(([, v]) => !v).map(([k]) => k);
   if (missing.length === 0) return;
   const msg = `[FATAL] Platform-hosted DVM with incomplete revenue-reporter wiring. DVMKIT_PLATFORM_URL is set but missing: ${missing.join(", ")}. Either complete the configuration or unset DVMKIT_PLATFORM_URL to opt out.`;
-  console.error(msg);
+  diagnosticConsole.error(msg);
   throw new Error(msg);
 }
 function revenueReporterBannerState(s) {
@@ -17048,11 +17152,11 @@ async function createDVMServer(descriptor, opts) {
   })();
   try {
     if (opts.env.DVMKIT_CASHU_MINTS && opts.cashuMode === void 0) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "cashu_opts_env_ignored",
-          message: "DVMKIT_CASHU_MINTS is set in env but cashuMode opt is undefined \u2014 cashu is NOT active. Pass cashuMode, lockPubkey, and db via createDVMHost to enable it."
-        })
+          message: void 0
+        }
       );
     }
     const envMaybe = opts.env;
@@ -17060,12 +17164,12 @@ async function createDVMServer(descriptor, opts) {
     const platformUrl = opts.platformUrl ?? envMaybe.DVMKIT_PLATFORM_URL;
     const dvmId = opts.dvmId;
     if (!opts.onJobCompleted && platformToken && platformUrl && dvmId && opts.db) {
-      const { RevenueReporter } = await import("./revenue-reporter-O75BGYFK.js");
+      const { RevenueReporter } = await import("./revenue-reporter-VN4WYN74.js");
       const reporter = new RevenueReporter(opts.db, platformUrl, platformToken);
       revenueReporter = reporter;
       await reporter.init();
       reporter.startRetryLoop();
-      const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-KEMUXEUO.js");
+      const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-TQ3YIFLZ.js");
       payoutReporter = new PayoutReporter({
         dvmId,
         db: opts.db,
@@ -17292,8 +17396,12 @@ var DVMServer = class {
   /** Withdraws this mount's Tempo session capability from the poll. */
   undeclareSessionCapability;
   hostingSweepTimer;
+  diagnosticCapabilityAuthority;
   constructor(descriptor, opts) {
     this.descriptor = descriptor;
+    this.diagnosticCapabilityAuthority = createDiagnosticCapabilityAuthority(
+      Object.keys(descriptor.capabilities)
+    );
     this.pricingCurrency = descriptor.currency ?? "usd";
     this.opts = opts;
     this.publicOrigin = resolvePublicOrigin(opts.env.DVMKIT_PUBLIC_URL);
@@ -17378,12 +17486,12 @@ var DVMServer = class {
       if (opts.hostingControlInstance) {
         this.hostingSweepTimer = setInterval(() => {
           void this.sweepHostingDeadline().catch((error) => {
-            console.error("Hosting deadline sweep failed:", error);
+            diagnosticConsole.error("Hosting deadline sweep failed:", error);
           });
         }, 1e3);
         this.hostingSweepTimer.unref();
         void this.sweepHostingDeadline().catch((error) => {
-          console.error("Hosting deadline sweep failed:", error);
+          diagnosticConsole.error("Hosting deadline sweep failed:", error);
         });
       }
       if (this.ownsMintHealthTracker) this.mintHealthTracker?.start();
@@ -17432,12 +17540,10 @@ var DVMServer = class {
     const control = this.opts.hostingControlInstance;
     if (!control) return;
     const status = await control.status();
-    if (status.state !== "draining" || status.deadlineMs === null || Date.now() < status.deadlineMs)
-      return;
     const store = this.jobManager.store;
     if (!(store instanceof PostgresJobStore)) return;
     for (const jobId of status.activeJobIds) {
-      if (await store.cancelJobForHosting(jobId, "Hosting drain deadline reached")) {
+      if (await control.dispatchDeadlineReached(jobId) && await store.cancelJobForHosting(jobId, "Hosting drain deadline reached")) {
         await this.jobManager.finalizeStoredTerminal(jobId);
       }
     }
@@ -17466,7 +17572,6 @@ var DVMServer = class {
   }
   registerRoutes() {
     const dvmSlug = this.descriptor.name;
-    const builderPubkey = this.opts.builder?.pubkey;
     this.app.use("*", async (c, next) => {
       const raw = c.req.header("traceparent");
       const parsed = raw ? parseTraceparent(raw) : null;
@@ -17475,12 +17580,12 @@ var DVMServer = class {
         spanId: parsed ? parsed.parentSpanId : null,
         dimensions: {},
         service: `isolate-${dvmSlug}`,
-        flags: parsed?.flags ?? 1
+        flags: parsed?.flags ?? 1,
+        diagnosticCapabilityAuthority: this.diagnosticCapabilityAuthority
       };
       return withTraceContext(traceCtx, async () => {
         if (this.opts.dvmId) pinDimension("dvm_id", this.opts.dvmId);
         pinDimension("dvm_slug", dvmSlug);
-        if (builderPubkey) pinDimension("builder_id", builderPubkey);
         await next();
       });
     });
@@ -17689,21 +17794,21 @@ var DVMServer = class {
     this.tempoSweepInFlight = true;
     void sweep().then((result) => {
       if (result.settled > 0 || result.closeRequested > 0 || result.inFlight > 0) {
-        console.info(
-          JSON.stringify({
+        diagnosticConsole.info(
+          {
             level: "tempo_routine_sweep",
             dvm_id: this.opts.dvmId,
             ...result
-          })
+          }
         );
       }
-    }).catch((err) => {
-      console.warn(
-        JSON.stringify({
+    }).catch((_err) => {
+      diagnosticConsole.warn(
+        {
           level: "tempo_routine_sweep_failed",
           dvm_id: this.opts.dvmId,
-          error: err instanceof Error ? err.message : String(err)
-        })
+          error: void 0
+        }
       );
     }).finally(() => {
       this.tempoSweepInFlight = false;
@@ -17795,8 +17900,8 @@ var DVMServer = class {
         getBinding: (channelId) => recoverPostgres(channelId, () => getBinding(channelId)),
         settle: (channelId) => recoverPostgres(channelId, () => settle(channelId))
       });
-      console.info(
-        JSON.stringify({
+      diagnosticConsole.info(
+        {
           level: "tempo_close_event",
           dvm_id: this.opts.dvmId,
           chain_id: locator.chainId,
@@ -17806,10 +17911,10 @@ var DVMServer = class {
             outcome: result.outcome.outcome,
             channel_id: result.outcome.channelId,
             ...result.outcome.outcome === "retryable_failure" && {
-              error: result.outcome.error.slice(0, 500)
+              error: void 0
             }
           } : { outcome: result.status, reason: result.reason }
-        })
+        }
       );
       return c.json(
         result.status === "ok" ? { status: "ok", ...serializeTempoSettlementOutcome(result.outcome) } : {
@@ -18516,11 +18621,11 @@ var DVMServer = class {
         return c.json(res2);
       } catch (err) {
         if (err instanceof InvalidQuoteResultError) {
-          console.error("invalid QuoteResult from onQuote:", err);
+          diagnosticConsole.error("invalid QuoteResult from onQuote:", err);
           return c.json({ error: { code: err.code, message: err.message } }, 500);
         }
         if (err instanceof QuoteCurrencyMismatchError) {
-          console.error("quote currency mismatch:", err);
+          diagnosticConsole.error("quote currency mismatch:", err);
           return c.json({ error: { code: err.code, message: err.message } }, 500);
         }
         if (err instanceof InvalidCurrencyError) {
@@ -18531,7 +18636,7 @@ var DVMServer = class {
         const structured = pickStructuredError(err);
         if (structured) return c.json({ error: structured }, 400);
         const message = err instanceof Error ? err.message : String(err);
-        console.error("quote handler failed:", err);
+        diagnosticConsole.error("quote handler failed:", err);
         return c.json({ error: { code: "internal", message } }, 500);
       }
     }
@@ -18965,14 +19070,25 @@ var DVMServer = class {
         payment = recoveredPayment;
         resumedAcceptedPayment = true;
       }
-      let priceMsats = resumeOnly ? payment.paidMsats || void 0 : await this.jobManager.currentPriceMsats(capabilityName);
+      const skipPayment = devModeSkipsPaymentVerification(this.opts);
+      let priceMsats = resumeOnly ? payment.paidMsats || void 0 : void 0;
+      if (!resumeOnly && !skipPayment) {
+        try {
+          priceMsats = await this.jobManager.currentPriceMsats(capabilityName);
+        } catch (err) {
+          const fxErr = pickFxRateUnavailable(err);
+          if (fxErr) return c.json({ error: fxErr }, 503);
+          throw err;
+        }
+      }
       let dynamicUpfront;
-      if (!resumeOnly && priceMsats === void 0 && cap.onQuote) {
+      if (!resumeOnly && cap.price === void 0 && priceMsats === void 0 && cap.onQuote) {
         const dyn = await this.computeDynamicPrice(
           cap.onQuote,
           parsedInput,
           normalisedBody,
-          authPubkey
+          authPubkey,
+          skipPayment
         );
         if (dyn.error) return c.json(dyn.error.body, dyn.error.status);
         priceMsats = dyn.priceMsats;
@@ -19004,7 +19120,6 @@ var DVMServer = class {
           }
         }
       }
-      const skipPayment = devModeSkipsPaymentVerification(this.opts);
       if (!skipPayment && !resumedAcceptedPayment) {
         const railOpts = await this.railVerifyOpts(c);
         hostingPaymentMayHaveLanded = Boolean(
@@ -19193,10 +19308,8 @@ var DVMServer = class {
         await this.opts.hostingControlInstance.finishAdmission(hostingAdmissionId, "accepted", jobId);
         hostingAdmissionAccepted = true;
       }
-      const reservedDrainDeadline = this.opts.hostingControlInstance ? await this.opts.hostingControlInstance.jobDeadline(jobId) : null;
-      const hostingStatus = await this.opts.hostingControlInstance?.status();
-      const currentDrainDeadline = hostingStatus?.state === "draining" ? hostingStatus.deadlineMs : null;
-      if (reservedDrainDeadline !== null && Date.now() >= reservedDrainDeadline || currentDrainDeadline !== null && currentDrainDeadline !== void 0 && Date.now() >= currentDrainDeadline) {
+      await this.opts.hostingControlInstance?.status();
+      if (this.opts.hostingControlInstance && await this.opts.hostingControlInstance.dispatchDeadlineReached(jobId)) {
         const store = jm.store;
         if (store instanceof PostgresJobStore && await store.cancelJobForHosting(jobId, "Hosting drain deadline reached")) {
           await jm.finalizeStoredTerminal(jobId);
@@ -19247,7 +19360,7 @@ var DVMServer = class {
     if (!funding || !onCreditFunded || !this.opts.dvmId) return;
     Promise.resolve(onCreditFunded(creditDepositPayload(this.opts.dvmId, funding))).catch(
       (err) => {
-        console.error(`[${funding.creditId}] Deposit reporting failed:`, err);
+        diagnosticConsole.error(`[${funding.creditId}] Deposit reporting failed:`, err);
       }
     );
   }
@@ -19278,7 +19391,7 @@ var DVMServer = class {
         kind: "short_pay_forfeit"
       })
     ).catch((err) => {
-      console.error(`[${forfeit.paymentId}] Short-pay forfeit reporting failed:`, err);
+      diagnosticConsole.error(`[${forfeit.paymentId}] Short-pay forfeit reporting failed:`, err);
     });
   }
   /**
@@ -19294,13 +19407,13 @@ var DVMServer = class {
     const pubkeyMatches = this.descriptor.auth === void 0 || prior.requesterPubkey !== void 0 && prior.requesterPubkey === opts.callerPubkey;
     const requesterMatches = prior.requesterId === c.get("requesterId");
     if (!bodyMatches || !pubkeyMatches || !requesterMatches) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "paid_submit_replay_refused",
           jobId: prior.id,
           requestId: opts.requestId,
           reason: !bodyMatches ? "fingerprint_mismatch" : !pubkeyMatches ? "pubkey_mismatch" : "requester_mismatch"
-        })
+        }
       );
       return void 0;
     }
@@ -19323,14 +19436,14 @@ var DVMServer = class {
     }
     const prior = jobId ? await this.jobManager.store.get(jobId) : void 0;
     if (!prior) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "drawn_job_recovery_refused",
           creditId: opts.creditId,
           drawId: opts.drawId,
           jobId,
           reason: "job_not_found"
-        })
+        }
       );
       return void 0;
     }
@@ -19338,14 +19451,14 @@ var DVMServer = class {
     const pubkeyMatches = prior.requesterPubkey !== void 0 && prior.requesterPubkey === opts.callerPubkey;
     const requesterMatches = prior.requesterId === c.get("requesterId");
     if (!bodyMatches || !pubkeyMatches || !requesterMatches) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "paid_submit_replay_refused",
           jobId: prior.id,
           creditId: opts.creditId,
           drawId: opts.drawId,
           reason: !bodyMatches ? "fingerprint_mismatch" : !pubkeyMatches ? "pubkey_mismatch" : "requester_mismatch"
-        })
+        }
       );
       return void 0;
     }
@@ -19368,15 +19481,15 @@ var DVMServer = class {
       });
       if (!marker) continue;
       if (marker.jobId !== opts.jobId) {
-        console.warn(
-          JSON.stringify({
+        diagnosticConsole.warn(
+          {
             level: "request_acceptance_recovery_refused",
             rail,
             paymentId: opts.paymentId,
             expectedJobId: opts.jobId,
             recordedJobId: marker.jobId,
             reason: "job_id_mismatch"
-          })
+          }
         );
         return void 0;
       }
@@ -19407,14 +19520,14 @@ var DVMServer = class {
       paymentId: opts.paymentId
     });
     if (payment) {
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "request_acceptance_recovered",
           jobId: opts.expectedJobId,
           creditId: opts.creditId,
           drawId: opts.drawId,
           rail: payment.paymentRail
-        })
+        }
       );
     }
     return payment;
@@ -19422,9 +19535,9 @@ var DVMServer = class {
   /**
    * Recompute dynamic upfront pricing from parsed job input, applying the quote
    * schema separately. Refuse invalid input/results, currency mismatch or missing
-   * FX rather than running without a price (400/500/503 as classified below).
+   * FX when payment needs a price (400/500/503 as classified below).
    */
-  async computeDynamicPrice(onQuote, parsedInput, body, callerPubkey) {
+  async computeDynamicPrice(onQuote, parsedInput, body, callerPubkey, skipRateConversion = false) {
     let data = parsedInput;
     if (isZodSchema(onQuote.schema)) {
       const parsed = onQuote.schema.safeParse(parsedInput);
@@ -19456,6 +19569,9 @@ var DVMServer = class {
       if (!supported.includes(upfrontCurrency)) {
         throw new UnsupportedCurrencyError(upfrontCurrency, supported);
       }
+      if (skipRateConversion) {
+        return { upfront: { amount: validated.upfront.amount, currency: upfrontCurrency } };
+      }
       const fx = await this.fxFetcher.fetch();
       const priceMsats = fiatToSatsCeil(validated.upfront.amount, fxRateFor(fx, upfrontCurrency)) * 1e3;
       return {
@@ -19472,7 +19588,7 @@ var DVMServer = class {
         };
       }
       if (err instanceof QuoteCurrencyMismatchError) {
-        console.error("quote currency mismatch:", err);
+        diagnosticConsole.error("quote currency mismatch:", err);
         return {
           error: { body: { error: err.code, message: err.message }, status: 500 }
         };
@@ -20234,13 +20350,13 @@ var PlatformTempoObserverHealth = class {
   withhold(reason) {
     if (!this.withheldLogged) {
       this.withheldLogged = true;
-      console.warn(
-        JSON.stringify({
+      diagnosticConsole.warn(
+        {
           level: "warn",
           event: "tempo_session_withheld",
-          message: "Tempo session funding withheld: the platform's close observer is not confirmed healthy. tempo/charge is unaffected.",
+          message: void 0,
           reason
-        })
+        }
       );
     }
     return false;