@dvmkit/sdk 0.3.4-rc.10 → 0.4.0-rc.1

package/dist/internal/caller.js

@@ -55,7 +55,7 @@ import {
   withIdentitiesLock,
   withTempoChannelLock,
   withholdsTempoCreditSession
-} from "../chunk-Z3EHBW2G.js";
+} from "../chunk-R4DQZFAL.js";
 import {
   TEMPO_CHAIN_ID,
   TEMPO_MODERATO_CHAIN_ID,
@@ -71,7 +71,7 @@ import {
   tempoTokenReference,
   tempoWrongAssetHint,
   tryResolveTempoAsset
-} from "../chunk-YYQG4R7T.js";
+} from "../chunk-74PUEZJ4.js";
 import {
   DvmX402ChannelStorage,
   X402_EXACT_AUTHORIZATION_TTL_SECONDS,
@@ -116,7 +116,7 @@ import {
   x402PendingStale,
   x402PendingUnsettled,
   x402WrongAssetHint
-} from "../chunk-YRDA7EWN.js";
+} from "../chunk-W2EQGDF5.js";
 import {
   RAIL_FLAGS,
   SUPPORTED_PROTOCOL_VERSION,
@@ -163,7 +163,7 @@ import {
   setOutputTraceId,
   settleDrainEvidence,
   withinAdvertisedTolerance
-} from "../chunk-C2AGARLM.js";
+} from "../chunk-2VGWYG4P.js";
 import {
   CREDIT_POSTURES,
   FEEDBACK_POSTURES,
@@ -181,7 +181,7 @@ import {
   retireConfigBackup,
   rollbackConfig,
   updateConfig
-} from "../chunk-MG67KXU7.js";
+} from "../chunk-MZRJR2CW.js";
 import {
   CAPABILITY_NAME_RE
 } from "../chunk-O3QDFPKM.js";
@@ -289,16 +289,14 @@ import {
   withWalletLock,
   writeAgentMnemonic,
   writeIdentity
-} from "../chunk-VAMSJRJT.js";
+} from "../chunk-5LR6P7WN.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
   X402_EXACT_SCHEME,
-  X402_NETWORKS,
   X402_V1_VERSION,
   X402_VERSION,
-  assertSupportedX402Network,
   buildPaymentRequiredV2,
   buildPaymentRequirements,
   caip2ToX402Network,
@@ -314,13 +312,8 @@ import {
   usdcContractFor,
   usdcDomainNameFor,
   usdcDomainVersionFor,
-  x402NetworkByCaip2,
-  x402NetworkBySlug,
-  x402NetworkLabel,
-  x402NetworkListForCopy,
-  x402NetworkToCaip2,
-  x402SupportedNetworksHint
-} from "../chunk-Z4BNLUZF.js";
+  x402NetworkToCaip2
+} from "../chunk-IWQHUSMO.js";
 import {
   COINGECKO_SIMPLE_PRICE_URL,
   assertValidBudget,
@@ -343,7 +336,7 @@ import {
   parseBudget,
   usdToMsats,
   usdcToMsats
-} from "../chunk-A4CM2BD3.js";
+} from "../chunk-3MHE725Z.js";
 import {
   AGENT_MNEMONIC_FILE,
   BTC_RATE_FILE,
@@ -354,7 +347,6 @@ import {
   CONFIG_FILE,
   CONFIG_PINNED_FILE,
   CREDITS_FILE,
-  DvmError,
   FAVORITES_FILE,
   FEEDBACK_NUDGES_FILE,
   IDENTITIES_FILE,
@@ -369,13 +361,10 @@ import {
   X402_CHANNELS_FILE,
   ensureConfigDir,
   ensureConfigSubdir,
-  isAbortError,
-  providerProseSources,
   repairConfigDirMode,
   resolveRpcHttpTransportOptions,
-  resolveRpcOverride,
-  transportErrorCode
-} from "../chunk-MKI6OVW4.js";
+  resolveRpcOverride
+} from "../chunk-CZULM42S.js";
 import {
   RAIL_REFUNDABLE,
   SIGNED_REQUEST_AUTH_ID,
@@ -417,6 +406,21 @@ import {
   applyRetryToPool,
   withInitRetry
 } from "../chunk-P6QON7ER.js";
+import {
+  X402_NETWORKS,
+  assertSupportedX402Network,
+  x402NetworkByCaip2,
+  x402NetworkBySlug,
+  x402NetworkLabel,
+  x402NetworkListForCopy,
+  x402SupportedNetworksHint
+} from "../chunk-RLTSCKRI.js";
+import {
+  DvmError,
+  isAbortError,
+  providerProseSources,
+  transportErrorCode
+} from "../chunk-LIRAHP7B.js";
 import {
   DIAGNOSTIC_CATALOGUE_VERSION,
   bindDiagnosticCapabilityAuthority,
@@ -9435,7 +9439,7 @@ async function probeX402(x402, timeoutMs) {
   let network;
   let address;
   try {
-    const { loadX402Wallet: loadX402Wallet2, getX402Balance: getX402Balance2, ensureAddress: ensureAddress2, usdcContractByCaip2: usdcContractByCaip22 } = await import("../x402-S47Q77UE.js");
+    const { loadX402Wallet: loadX402Wallet2, getX402Balance: getX402Balance2, ensureAddress: ensureAddress2, usdcContractByCaip2: usdcContractByCaip22 } = await import("../x402-CEDHGZDI.js");
     const wallet = loadX402Wallet2();
     if (!wallet) {
       const storedKey = x402.privateKey;
@@ -9487,7 +9491,7 @@ async function probeMpp(mpp, timeoutMs) {
   if (!mpp) return null;
   if (mpp.method === "tempo") {
     try {
-      const { connectedTempoAccount: connectedTempoAccount2, getTempoUsdcBalance: getTempoUsdcBalance2, resolveTempoNetwork: resolveTempoNetwork2 } = await import("../tempo-wallet-RCGBBAJH.js");
+      const { connectedTempoAccount: connectedTempoAccount2, getTempoUsdcBalance: getTempoUsdcBalance2, resolveTempoNetwork: resolveTempoNetwork2 } = await import("../tempo-wallet-32JWQZKQ.js");
       const account = await connectedTempoAccount2();
       if (!account) {
         return {

package/dist/internal/server.d.ts

@@ -1,23 +1,23 @@
 import { FacilitatorConfig } from '@x402/core/server';
-import { aj as PaymentPayload, ap as PaymentRequirementsV1, aq as PaymentRequirementsV2, aE as X402Config, av as SettleResponse, aC as VerifyResponse, bi as X402ExactVersionSupport, bj as X402Receipt, bk as TransactionalPayoutHook, bl as CashuMeltCompleted } from '../step-cache-v2yhyhSZ.js';
-export { bm as CreditDepositPayload, bn as CreditDrainPayload, bo as FundingLot, bp as LotDebit, bq as LotDepletion, br as MppxServer, bs as NON_CHANNEL_BITCOIN_RAILS, bt as NonChannelBitcoinRail, bu as PayoutReporter, bv as PostgresTempoSessionStore, bw as RevenueReporter, bx as SIGNED_ENVELOPE_FIELDS, by as SIGNED_ENVELOPE_TYPES, bz as X402TrackedChannel, bA as _testing, bB as createDefaultReplayStore, bC as depleteLots, bD as fifoOrder, bE as inKindDrawMsats, bF as isInKindDepletion, bG as isNonChannelBitcoinRail, bH as lotOwedSats, bI as netOwedSats, bJ as wrapMppx } from '../step-cache-v2yhyhSZ.js';
+import { aj as PaymentPayload, ap as PaymentRequirementsV1, aq as PaymentRequirementsV2, aE as X402Config, av as SettleResponse, aC as VerifyResponse, bi as X402ExactVersionSupport, bj as X402Receipt, bk as TransactionalPayoutHook, bl as CashuMeltCompleted } from '../step-cache-Bi43A0JN.js';
+export { bm as CreditDepositPayload, bn as CreditDrainPayload, bo as FundingLot, bp as LotDebit, bq as LotDepletion, br as MppxServer, bs as NON_CHANNEL_BITCOIN_RAILS, bt as NonChannelBitcoinRail, bu as PayoutReporter, bv as PostgresTempoSessionStore, bw as RevenueReporter, bx as SIGNED_ENVELOPE_FIELDS, by as SIGNED_ENVELOPE_TYPES, bz as X402TrackedChannel, bA as _testing, bB as createDefaultReplayStore, bC as depleteLots, bD as fifoOrder, bE as inKindDrawMsats, bF as isInKindDepletion, bG as isNonChannelBitcoinRail, bH as lotOwedSats, bI as netOwedSats, bJ as wrapMppx } from '../step-cache-Bi43A0JN.js';
 import { Hono } from 'hono';
 import { Env, BlankSchema } from 'hono/types';
 import { Pool } from 'pg';
 export { Pool } from 'pg';
 import { g as getWallet } from '../wallet-Dwjs5n_M.js';
-import { A as AccumulatorPool, a as AccumulatorQuerier, C as ConsumedCredentialStore } from '../credit-menu-0-UtJ3hh.js';
-export { b as AppEnv, c as CreditFundingReport, F as FiatDenomination, d as FiatDenominationFailure, e as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, f as PaymentErrorCode, g as PaymentErrorDetail, h as PaymentInfo, R as ReporterBannerOpts, i as ResolvedFx, j as RevenueBootCheckOpts, S as SDKServerOpts, k as ServerJob, l as ShortPayForfeit, T as TempoChannelReport, m as TempoObserverHealth, n as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, o as VerifyIncomingSnapshot, X as X402BatchChannelObservation, p as X402FacilitatorHealth, q as X402SettlementEvidenceOutcome, r as X402SettlementRepair, s as X402SettlementRepairRefusal, t as X402SettlementRepaired, u as X402WedgedSettlement, v as X402WedgedSettlementPage, w as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, x as abortJob, y as applyPaymentInfoToJob, z as assertRevenueReporterReady, B as buildPaymentErrorResponse, D as clearAccumulatorForDvm, E as createDVMServer, G as creditDepositPayload, H as derivedFundCreditId, K as devModeSkipsPaymentVerification, L as fromJobRecord, N as fundedMicroFor, O as hasPaymentProof, Q as hashLockKey, W as implicitCreditId, Y as initWalletAccumulatorTable, Z as insertAccumulatorRows, _ as isDerivedCreditId, $ as isTerminal, a0 as isYieldMessage, a1 as issueUpfrontChallenges, a2 as msatsToFiatMicro, a3 as paymentErrorBody, a4 as pinAskFiat, a5 as priceFiatMicro, a6 as processIncomingPayment, a7 as providerMessage, a8 as repairX402ExactSettlementEffect, a9 as resolveFxSnapshot, aa as resolvePriceFiat, ab as revenueReporterBannerState, ac as toCreditTerms, ad as toJobRecord, ae as unknownRouteNotFound, af as verifyIncomingPayment, ag as verifyTempoSessionManagementCredential, ah as verifyUpfrontPayment, ai as x402RequiredUsdcMicro, aj as x402SettledShare } from '../credit-menu-0-UtJ3hh.js';
-import { g as LockPubkey } from '../lightning-backend-BhsyrBLa.js';
-export { t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-BhsyrBLa.js';
-export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-D3CcZp_g.js';
-import { Store } from 'mppx';
+import { A as AccumulatorPool, a as AccumulatorQuerier, C as ConsumedCredentialStore } from '../credit-menu-B8_p_vUz.js';
+export { b as AppEnv, c as CreditFundingReport, F as FiatDenomination, d as FiatDenominationFailure, e as FundOnlyRequest, I as IncomingPaymentOpts, J as JobCancelledError, M as MintHealthTracker, P as PAYMENT_PROOF_KEYS, f as PaymentErrorCode, g as PaymentErrorDetail, h as PaymentInfo, i as PostgresTempoChargeStore, R as ReporterBannerOpts, j as ResolvedFx, k as RevenueBootCheckOpts, S as SDKServerOpts, l as ServerJob, m as ShortPayForfeit, T as TempoChannelReport, n as TempoObserverHealth, o as TempoSessionChannelMismatchError, U as UpfrontPaymentOpts, V as VerifiedIncomingPayment, p as VerifyIncomingSnapshot, X as X402BatchChannelObservation, q as X402FacilitatorHealth, r as X402SettlementEvidenceOutcome, s as X402SettlementRepair, t as X402SettlementRepairRefusal, u as X402SettlementRepaired, v as X402WedgedSettlement, w as X402WedgedSettlementPage, x as X402_BATCH_SETTLEMENT_MAINNET_NETWORK, y as abortJob, z as applyPaymentInfoToJob, B as assertRevenueReporterReady, D as buildPaymentErrorResponse, E as clearAccumulatorForDvm, G as createDVMServer, H as creditDepositPayload, K as derivedFundCreditId, L as devModeSkipsPaymentVerification, N as fromJobRecord, O as fundedMicroFor, Q as hasPaymentProof, W as hashLockKey, Y as implicitCreditId, Z as initWalletAccumulatorTable, _ as insertAccumulatorRows, $ as isDerivedCreditId, a0 as isTerminal, a1 as isYieldMessage, a2 as issueUpfrontChallenges, a3 as msatsToFiatMicro, a4 as paymentErrorBody, a5 as pinAskFiat, a6 as priceFiatMicro, a7 as processIncomingPayment, a8 as providerMessage, a9 as repairX402ExactSettlementEffect, aa as resolveFxSnapshot, ab as resolvePriceFiat, ac as revenueReporterBannerState, ad as toCreditTerms, ae as toJobRecord, af as unknownRouteNotFound, ag as verifyIncomingPayment, ah as verifyTempoSessionManagementCredential, ai as verifyUpfrontPayment, aj as x402RequiredUsdcMicro, ak as x402SettledShare } from '../credit-menu-B8_p_vUz.js';
+import { g as LockPubkey } from '../lightning-backend-BaeCPmx7.js';
+export { t as lockPubkeyStoreToLockPubkey } from '../lightning-backend-BaeCPmx7.js';
+export { O as OutgoingMessage, S as StaleJobReapable, i as isStaleJobReapable } from '../job-store-D6Rjj5Oi.js';
 import { z } from 'zod';
+import 'mppx';
 import '@x402/evm/batch-settlement/server';
-import 'viem';
 import '@x402/core/types';
+import 'viem';
 import '@cashu/cashu-ts';
-import '../fx-DhyT1Cjh.js';
+import '../fx-DuaYHvVn.js';
 
 declare function verifyWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<VerifyResponse>;
 declare function settleWithFacilitator(payload: PaymentPayload, requirements: PaymentRequirementsV1 | PaymentRequirementsV2, config?: Pick<X402Config, "facilitator" | "facilitatorAuth">, createAuthHeaders?: FacilitatorConfig["createAuthHeaders"] | undefined): Promise<SettleResponse>;
@@ -237,80 +237,6 @@ declare function jobCredentialGate(opts: {
     acceptsBearer: boolean;
 }): JobCredentialGate;
 
-interface PostgresTempoChargeStoreOpts {
-    /** Table name. Defaults to `"mpp_tempo_charge_replays"`. Must match `/^[a-zA-Z_][a-zA-Z0-9_]*$/`. */
-    tableName?: string;
-    /**
-     * How long a row survives its last write, in milliseconds. Defaults to one
-     * hour — see the class doc for why that is both generous and safe.
-     */
-    retentionMs?: number;
-    /**
-     * Probability (per write) of firing a fire-and-forget GC sweep that deletes
-     * expired rows. Defaults to 0.01 — every ~100 writes runs one DELETE. Set to
-     * 0 to disable GC entirely (rely on an external sweeper).
-     */
-    gcSampleRate?: number;
-    /** Clock source (ms). Defaults to `Date.now`. Test seam for deterministic TTL. */
-    now?: () => number;
-}
-/**
- * Postgres implementation of the atomic store mppx's `tempo.charge` uses for
- * replay protection.
- *
- * mppx refuses a charge credential whose transaction hash it has already taken
- * (`markHashUsed`), and refuses a zero-dollar proof credential whose challenge
- * id it has already taken — but only against the store it is handed. Omitting
- * one leaves it on `Store.memory()`: per-process, lost on restart, invisible to
- * sibling machines. A replayed credential then reaches a broadcast the chain
- * rejects instead of the cheap `Transaction hash has already been used`.
- *
- * {@link PostgresTempoSessionStore} cannot serve this keyspace — its `update`
- * asserts a monotonic *channel-state object*, and a replay marker is the number
- * `Date.now()`. Values here are deliberately opaque JSON: mppx writes a number
- * for a replay marker and a `SponsorBudget.State` object for the fee-sponsor
- * budget, which shares this store unprefixed so aggregate in-flight fee
- * exposure is sponsor-wide rather than per-process.
- *
- * **Retention is ours — mppx has no TTL at any layer of `Store`.** Every row
- * carries an `expires_at` refreshed on each write, swept by a sampled in-line
- * DELETE. The window is uniform rather than per-keyspace because it is safe for
- * both kinds of row: a replay marker guards a credential whose transaction is
- * settleable for about twenty-five seconds and whose challenge expires in
- * minutes, and a sponsor-budget reservation is bounded by that same expiring
- * nonce (plus a thirty-second lease while it is `prepared`), so an hour-idle
- * budget row holds only reservations `SponsorBudget.reconcile` would release on
- * sight. Sweeping such a row is equivalent to reconciling it, and the next
- * reservation recreates it. Keeping the rule uniform is what lets this store
- * stay ignorant of mppx's key naming across version bumps.
- *
- * `expires_at` is a GC marker only: reads do not filter on it, so protection
- * lapses when a row is swept and never before.
- */
-declare class PostgresTempoChargeStore implements Store.AtomicStore {
-    private readonly pool;
-    private readonly tableName;
-    private readonly retentionMs;
-    private readonly gcSampleRate;
-    private readonly now;
-    constructor(pool: Pool, opts?: PostgresTempoChargeStoreOpts);
-    /** Run the CREATE TABLE migration. Idempotent — safe to call repeatedly. */
-    init(): Promise<void>;
-    /** Read one stored value, or `null` when absent — mppx's miss sentinel. */
-    get(key: string): Promise<unknown>;
-    put(key: string, value: unknown): Promise<void>;
-    /** Delete one stored value — mppx's compensating release on a failed broadcast. */
-    delete(key: string): Promise<void>;
-    /**
-     * Advisory locking covers the absent-row first write before the row lock.
-     * Both competing presentations of one credential and the shared sponsor
-     * budget need this serialization. The transaction contains no chain call.
-     */
-    update<result>(key: string, fn: (current: unknown) => Store.Change<unknown, result>): Promise<result>;
-    private createTables;
-    private maybeSweep;
-}
-
 /**
  * `topics[0]` of a `CloseRequested` log.
  *
@@ -351,4 +277,4 @@ declare function humanizeZodError(err: z.ZodError, opts: {
     schemaUrl: string;
 }): HumanizedZodError;
 
-export { AccumulatorPool, DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, type LockPubkeyPool, type LockPubkeyState, type LockPubkeyStateLoader, LockPubkey as LockPubkeyStoreLockPubkey, PostgresTempoChargeStore, TEMPO_CLOSE_DB_RECOVERY_BUDGET_MS, TEMPO_CLOSE_REQUESTED_TOPIC, activePubkeySet, createAdminCashuNonceStore, createInstrumentedFetch, humanizeZodError, initLockPubkeyTable, installAdminCashuRoutes, jobCredentialGate, loadLockPubkeyState, pruneRetired, rateUnavailablePaymentError, rotateLockPubkey, seedLockPubkeyState, settleWithFacilitator, verifyWithFacilitator, verifyX402Payment };
+export { AccumulatorPool, DEFAULT_LOCK_PUBKEY_GRACE_SECONDS, type LockPubkeyPool, type LockPubkeyState, type LockPubkeyStateLoader, LockPubkey as LockPubkeyStoreLockPubkey, TEMPO_CLOSE_DB_RECOVERY_BUDGET_MS, TEMPO_CLOSE_REQUESTED_TOPIC, activePubkeySet, createAdminCashuNonceStore, createInstrumentedFetch, humanizeZodError, initLockPubkeyTable, installAdminCashuRoutes, jobCredentialGate, loadLockPubkeyState, pruneRetired, rateUnavailablePaymentError, rotateLockPubkey, seedLockPubkeyState, settleWithFacilitator, verifyWithFacilitator, verifyX402Payment };

package/dist/internal/server.js

@@ -1,19 +1,18 @@
 import {
   PostgresTempoSessionStore
-} from "../chunk-EAMZZ2B4.js";
+} from "../chunk-X7EZ5CLI.js";
 import {
   verifyX402Payment
-} from "../chunk-2KGG5ORW.js";
+} from "../chunk-TXX4GOUB.js";
 import {
   RevenueReporter
-} from "../chunk-7X6UDVCQ.js";
+} from "../chunk-Z4ZT5LNT.js";
 import {
   PayoutReporter
-} from "../chunk-4UZN2GP5.js";
+} from "../chunk-GAOAYHZA.js";
 import {
   PostgresTempoChargeStore
-} from "../chunk-YHN3WMMF.js";
-import "../chunk-YG7G4DPZ.js";
+} from "../chunk-KA6VN5FK.js";
 import {
   DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,
   MintHealthTracker,
@@ -65,14 +64,15 @@ import {
   verifyUpfrontPayment,
   x402RequiredUsdcMicro,
   x402SettledShare
-} from "../chunk-UZC4A4DM.js";
+} from "../chunk-K2YX2VRA.js";
 import "../chunk-XRLKGCAW.js";
 import {
   settleWithFacilitator,
   verifyWithFacilitator
-} from "../chunk-BQ2NMWKE.js";
-import "../chunk-M4QDXD2A.js";
-import "../chunk-JDFLRNAZ.js";
+} from "../chunk-PLG4XER6.js";
+import "../chunk-FYRR2UEZ.js";
+import "../chunk-PB4FYZET.js";
+import "../chunk-YG7G4DPZ.js";
 import {
   SIGNED_ENVELOPE_FIELDS,
   SIGNED_ENVELOPE_TYPES,
@@ -92,10 +92,10 @@ import {
 } from "../chunk-O5AT6S5T.js";
 import {
   toLockPubkey
-} from "../chunk-VAMSJRJT.js";
-import "../chunk-Z4BNLUZF.js";
-import "../chunk-A4CM2BD3.js";
-import "../chunk-MKI6OVW4.js";
+} from "../chunk-5LR6P7WN.js";
+import "../chunk-IWQHUSMO.js";
+import "../chunk-3MHE725Z.js";
+import "../chunk-CZULM42S.js";
 import "../chunk-KXZUCCEY.js";
 import "../chunk-6DOGTAHA.js";
 import "../chunk-66HGCPBU.js";
@@ -111,13 +111,15 @@ import {
   isNonChannelBitcoinRail,
   lotOwedSats,
   netOwedSats
-} from "../chunk-2SD2W2BG.js";
+} from "../chunk-JH3SX3LY.js";
 import "../chunk-COYKJRMM.js";
 import "../chunk-P6QON7ER.js";
+import "../chunk-RLTSCKRI.js";
+import "../chunk-LIRAHP7B.js";
 import {
   _testing,
   wrapMppx
-} from "../chunk-4J32DTLT.js";
+} from "../chunk-IXR5RFK7.js";
 import "../chunk-ETXDTUJO.js";
 export {
   DEFAULT_LOCK_PUBKEY_GRACE_SECONDS,

package/dist/{job-store-D3CcZp_g.d.ts → job-store-D6Rjj5Oi.d.ts}

@@ -1,5 +1,5 @@
 import { ProofLike } from '@cashu/cashu-ts';
-import { a1 as Message, ah as FundingMethod, X as FundingReceipt, bO as CreditSnapshot, Y as JobReceipt, ax as StepRecord, a2 as MessageType } from './step-cache-v2yhyhSZ.js';
+import { a1 as Message, ah as FundingMethod, X as FundingReceipt, bP as CreditSnapshot, Y as JobReceipt, ax as StepRecord, a2 as MessageType } from './step-cache-Bi43A0JN.js';
 
 type JobStatus = "processing" | "completed" | "failed" | "awaiting-input" | "cancelled" | "working";
 interface JobRecord {

package/dist/{lightning-backend-BhsyrBLa.d.ts → lightning-backend-BaeCPmx7.d.ts}

@@ -1,4 +1,4 @@
-import { W as JsonValue } from './step-cache-v2yhyhSZ.js';
+import { W as JsonValue } from './step-cache-Bi43A0JN.js';
 
 declare const lockPubkeyBrand: unique symbol;
 /**

package/dist/{memory-credit-ledger-2LBZVMKJ.js → memory-credit-ledger-W2BAUYJP.js}

@@ -1,9 +1,11 @@
 import {
   MemoryCreditLedger
-} from "./chunk-M4QDXD2A.js";
-import "./chunk-2SD2W2BG.js";
+} from "./chunk-FYRR2UEZ.js";
+import "./chunk-JH3SX3LY.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-P6QON7ER.js";
+import "./chunk-RLTSCKRI.js";
+import "./chunk-LIRAHP7B.js";
 import "./chunk-ETXDTUJO.js";
 export {
   MemoryCreditLedger

package/dist/{mpp-setup-7CGBKNUP.js → mpp-setup-RF5FXGGV.js}

@@ -14,10 +14,12 @@ import {
   challengeMeta,
   createDualKeyMppxFromOpts,
   createMppFromOpts,
+  installHostedTempoChargeGuard,
+  installHostedTempoCloseGuard,
   parseMppMethodsAllowlist,
   resolveTempoNetwork,
   wrapMppx
-} from "./chunk-4J32DTLT.js";
+} from "./chunk-IXR5RFK7.js";
 import "./chunk-ETXDTUJO.js";
 export {
   MPPX_HMAC_MISMATCH_REASON,
@@ -35,6 +37,8 @@ export {
   challengeMeta,
   createDualKeyMppxFromOpts,
   createMppFromOpts,
+  installHostedTempoChargeGuard,
+  installHostedTempoCloseGuard,
   parseMppMethodsAllowlist,
   resolveTempoNetwork,
   wrapMppx

package/dist/{payout-reporter-ZMOA37GN.js → payout-reporter-3Y2U55ZX.js}

@@ -3,7 +3,7 @@ import {
   PAYOUT_SNAPSHOT_INTERVAL_MS,
   PayoutReporter,
   PostgresX402BatchStore
-} from "./chunk-4UZN2GP5.js";
+} from "./chunk-GAOAYHZA.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-ETXDTUJO.js";
 export {

package/dist/{postgres-job-store-MSD2HZOI.js → postgres-job-store-VLXLWXUQ.js}

@@ -1,6 +1,6 @@
 import {
   PostgresJobStore
-} from "./chunk-JDFLRNAZ.js";
+} from "./chunk-PB4FYZET.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-ETXDTUJO.js";
 export {

package/dist/{revenue-reporter-EKJOGQYR.js → revenue-reporter-MAERPYGK.js}

@@ -1,6 +1,6 @@
 import {
   RevenueReporter
-} from "./chunk-7X6UDVCQ.js";
+} from "./chunk-Z4ZT5LNT.js";
 import "./chunk-COYKJRMM.js";
 import "./chunk-ETXDTUJO.js";
 export {

package/dist/server/index.d.ts

@@ -1,21 +1,21 @@
-import { ab as CashuMode, bK as CreditDrainEnqueue, R as ResolvedCreditConfig, bL as DVMAuthScheme, z as SignedRequestDomain, bM as CreditLedgerLike, bN as X402RefundSettlementGate, bO as CreditSnapshot, bP as DrawResult, bQ as X402SettlementStatus, bR as X402UnresolvedRefund, bS as GrownDrawResult, bT as DrawResolution, bU as FundingRecord, X as FundingReceipt, bV as CreditInvoiceRecord, bW as InvoiceSettlement, bX as BlockedInvoiceCursor, bY as InvoiceReconciliation, bZ as InvoiceWriteOff, b_ as DrawRecord, b$ as StalePendingDrawCursor, c0 as TempoCreditLossEvidence, c1 as CreditLedgerQuerier, c2 as TempoCreditLoss, c3 as X402CreditLossEvidence, c4 as X402CreditLoss, c5 as DrainMethod, c6 as DrainRequestResult, c7 as BitcoinDepositLiability, bo as FundingLot, c8 as CreditDrainRecord, c9 as ChannelDrainCursor, ca as DrainWriteOff, cb as DrainReleaseResult, cc as DrainFulfilment, cd as DrainTransitionResult, Y as JobReceipt, a1 as Message, K as KVStore, F as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-v2yhyhSZ.js';
-export { ce as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, cf as ClientCompatibility, cg as ClientCompatibilityEnv, ch as ClientCompatibilityGate, ci as ClientCompatibilityRequirement, cj as ClientSemVer, e as CreateSignedRequestVerifierOpts, ck as CreditFundingBasis, cl as CreditInvoiceStatus, cm as CreditLedger, cn as CreditLedgerError, co as CreditLedgerErrorCode, cp as CreditLedgerErrorDetails, cq as CreditLedgerPool, cr as CreditStatus, cs as DRAIN_DELIVERY_RESERVE_SATS, ct as DVM_PROTOCOL_VERSION, cu as DrainConflictReason, cv as DrawRailValue, cw as DrawStatus, cx as JobCostReportPayload, cy as JobTerminalReportPayload, cz as PostgresX402ChannelStorage, cA as ReplayStoreBackend, cB as RevenueSkippedNoRailPayload, cC as RevenueSkippedNoRailReason, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, cD as Secp256k1AuthOpts, y as SignedRequestAudience, B as SignedRequestError, E as SignedRequestFailure, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, M as SignedRequestVerifier, cE as X402ChannelStorageOpts, cF as X402RelayLockHolder, cG as X402RelaySubmissionLock, cH as X402RelaySubmissionLockError, cI as allocateDrawValue, cJ as clientCompatibilityAttributes, cK as clientCompatibilityMiddleware, cL as clientUpgradeRequired, N as createSignedRequestVerifier, cM as parseClientCapabilities, cN as parseClientCompatibility, cO as parseDvmClient, cP as parseProtocolVersion, cQ as requireClientCompatibility, cR as secp256k1Auth, cS as signedRequestInput, T as signedRequestStatementHeader } from '../step-cache-v2yhyhSZ.js';
+import { ab as CashuMode, bK as CreditDrainEnqueue, bL as HostedSettlementReportObligations, R as ResolvedCreditConfig, bM as DVMAuthScheme, z as SignedRequestDomain, bN as CreditLedgerLike, bO as X402RefundSettlementGate, bP as CreditSnapshot, bQ as DrawResult, bR as X402SettlementStatus, bS as X402UnresolvedRefund, bT as GrownDrawResult, bU as DrawResolution, bV as FundingRecord, X as FundingReceipt, bW as CreditInvoiceRecord, bX as InvoiceSettlement, bY as BlockedInvoiceCursor, bZ as InvoiceReconciliation, b_ as InvoiceWriteOff, b$ as DrawRecord, c0 as StalePendingDrawCursor, c1 as TempoCreditLossEvidence, c2 as CreditLedgerQuerier, c3 as TempoCreditLoss, c4 as X402CreditLossEvidence, c5 as X402CreditLoss, c6 as DrainMethod, c7 as DrainRequestResult, c8 as BitcoinDepositLiability, bo as FundingLot, c9 as CreditDrainRecord, ca as ChannelDrainCursor, cb as DrainWriteOff, cc as DrainReleaseResult, cd as DrainFulfilment, ce as DrainTransitionResult, cf as HostingCleanupFence, Y as JobReceipt, a1 as Message, K as KVStore, F as SignedRequestReplayStore, Z as ZodLike, a as DVMDescriptor } from '../step-cache-Bi43A0JN.js';
+export { cg as CLIENT_COMPATIBILITY_HEADERS, d as CanonicalEnvelope, ch as ClientCompatibility, ci as ClientCompatibilityEnv, cj as ClientCompatibilityGate, ck as ClientCompatibilityRequirement, cl as ClientSemVer, e as CreateSignedRequestVerifierOpts, cm as CreditFundingBasis, cn as CreditInvoiceStatus, co as CreditLedger, cp as CreditLedgerError, cq as CreditLedgerErrorCode, cr as CreditLedgerErrorDetails, cs as CreditLedgerPool, ct as CreditStatus, cu as DRAIN_DELIVERY_RESERVE_SATS, cv as DVM_PROTOCOL_VERSION, cw as DrainConflictReason, cx as DrawRailValue, cy as DrawStatus, cz as JobCostReportPayload, cA as JobTerminalReportPayload, cB as PostgresX402ChannelStorage, cC as ReplayStoreBackend, cD as RevenueSkippedNoRailPayload, cE as RevenueSkippedNoRailReason, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, cF as Secp256k1AuthOpts, y as SignedRequestAudience, B as SignedRequestError, E as SignedRequestFailure, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, M as SignedRequestVerifier, cG as X402ChannelStorageOpts, cH as X402RelayLockHolder, cI as X402RelaySubmissionLock, cJ as X402RelaySubmissionLockError, cK as allocateDrawValue, cL as clientCompatibilityAttributes, cM as clientCompatibilityMiddleware, cN as clientUpgradeRequired, N as createSignedRequestVerifier, cO as parseClientCapabilities, cP as parseClientCompatibility, cQ as parseDvmClient, cR as parseProtocolVersion, cS as requireClientCompatibility, cT as secp256k1Auth, cU as signedRequestInput, T as signedRequestStatementHeader } from '../step-cache-Bi43A0JN.js';
 import { Pool } from 'pg';
-import { ak as CreditMenu, b as AppEnv, U as UpfrontPaymentOpts, h as PaymentInfo, al as ReceiptIssuer, am as LightningReceive, an as TempoSettlementReadiness, ao as DVMHostOpts, ap as DVMServeResult } from '../credit-menu-0-UtJ3hh.js';
-export { aq as BuildCreditMenuArgs, ar as BuilderIdentity, as as CREDIT_ENVELOPE_KEYS, C as ConsumedCredentialStore, at as CreateX402BatchSettlementServerOpts, au as CreditEnvelope, av as CreditEnvelopeError, aw as CreditFundCommitment, ax as CreditTerms, ay as DEFAULT_INVOICE_TTL_SECONDS, az as DVMHost, aA as HostingControlCommand, aB as HostingControlConfig, aC as HostingControlStatus, aD as JobManager, aE as JobManagerOpts, aF as LightningReceiveConfig, aG as MIN_INVOICE_TTL_SECONDS, aH as MemoryConsumedCredentialStore, aI as MemoryConsumedCredentialStoreOpts, aJ as MemoryProcessedPaymentStore, aK as MemoryX402ExactSettlementStore, aL as MountOpts, aM as OwnerDisplay, aN as PaidJobCompletion, aO as PaymentMode, aP as PlatformReporterOpts, aQ as PostgresProcessedPaymentStore, aR as PostgresX402ExactSettlementStore, aS as PriceFiat, aT as ProcessedPaymentQuerier, aU as ProcessedPaymentRail, aV as ProcessedPaymentRecord, aW as ProcessedPaymentReplayError, aX as ProcessedPaymentStore, aY as X402BatchAcceptance, aZ as X402BatchFunding, a_ as X402BatchRefusal, a$ as X402BatchSettlementServer, b0 as X402ExactAcceptance, b1 as X402ExactIntentConflictError, b2 as X402ExactSettlementAttempt, b3 as X402ExactSettlementChainEvidence, b4 as X402ExactSettlementEffect, b5 as X402ExactSettlementEvidenceMissingError, b6 as X402ExactSettlementEvidenceReader, b7 as X402ExactSettlementIntent, b8 as X402ExactSettlementNotReadyError, b9 as X402ExactSettlementServer, ba as X402ExactSettlementServerOpts, bb as X402ExactSettlementStatus, bc as X402ExactSettlementStore, bd as X402SettlementChainEvidence, be as X402SettlementEvidenceReader, bf as X402SettlementSubmissionError, bg as X402_BATCH_AUTO_SETTLEMENT, bh as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bi as X402_BATCH_SETTLEMENT_NETWORK, bj as attachCreditMenu, bk as buildCreditMenu, bl as createDVMHost, bm as createX402BatchSettlementServer, bn as creditEnvelopeIgnoreFields, bo as drawSettlementRef, bp as extractCreditEnvelope, bq as fundingCommitment, br as selectPrimaryCredit, bs as signHostingControl, bt as stripCreditEnvelope, bu as toCreditView } from '../credit-menu-0-UtJ3hh.js';
+import { al as CreditMenu, b as AppEnv, U as UpfrontPaymentOpts, h as PaymentInfo, am as ReceiptIssuer, an as LightningReceive, ao as TempoSettlementReadiness, ap as DVMHostOpts, aq as DVMServeResult } from '../credit-menu-B8_p_vUz.js';
+export { ar as BuildCreditMenuArgs, as as BuilderIdentity, at as CREDIT_ENVELOPE_KEYS, C as ConsumedCredentialStore, au as CreateX402BatchSettlementServerOpts, av as CreditEnvelope, aw as CreditEnvelopeError, ax as CreditFundCommitment, ay as CreditTerms, az as DEFAULT_INVOICE_TTL_SECONDS, aA as DVMHost, aB as HostingClosureCommand, aC as HostingClosureEvidence, aD as HostingControlCommand, aE as HostingControlConfig, aF as HostingControlStatus, aG as JobManager, aH as JobManagerOpts, aI as LightningReceiveConfig, aJ as MIN_INVOICE_TTL_SECONDS, aK as MemoryConsumedCredentialStore, aL as MemoryConsumedCredentialStoreOpts, aM as MemoryProcessedPaymentStore, aN as MemoryX402ExactSettlementStore, aO as MountOpts, aP as OwnerDisplay, aQ as PaidJobCompletion, aR as PaymentMode, aS as PlatformReporterOpts, aT as PostgresProcessedPaymentStore, aU as PostgresX402ExactSettlementStore, aV as PriceFiat, aW as ProcessedPaymentQuerier, aX as ProcessedPaymentRail, aY as ProcessedPaymentRecord, aZ as ProcessedPaymentReplayError, a_ as ProcessedPaymentStore, a$ as X402BatchAcceptance, b0 as X402BatchFunding, b1 as X402BatchRefusal, b2 as X402BatchSettlementServer, b3 as X402ExactAcceptance, b4 as X402ExactIntentConflictError, b5 as X402ExactSettlementAttempt, b6 as X402ExactSettlementChainEvidence, b7 as X402ExactSettlementEffect, b8 as X402ExactSettlementEvidenceMissingError, b9 as X402ExactSettlementEvidenceReader, ba as X402ExactSettlementIntent, bb as X402ExactSettlementNotReadyError, bc as X402ExactSettlementServer, bd as X402ExactSettlementServerOpts, be as X402ExactSettlementStatus, bf as X402ExactSettlementStore, bg as X402SettlementChainEvidence, bh as X402SettlementEvidenceReader, bi as X402SettlementSubmissionError, bj as X402_BATCH_AUTO_SETTLEMENT, bk as X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS, bl as X402_BATCH_SETTLEMENT_NETWORK, bm as attachCreditMenu, bn as buildCreditMenu, bo as createDVMHost, bp as createX402BatchSettlementServer, bq as creditEnvelopeIgnoreFields, br as drawSettlementRef, bs as extractCreditEnvelope, bt as fundingCommitment, bu as selectPrimaryCredit, bv as signHostingClosure, bw as signHostingControl, bx as stripCreditEnvelope, by as toCreditView } from '../credit-menu-B8_p_vUz.js';
 import { Context } from 'hono';
 import { z } from 'zod';
-import { F as FxFetcher } from '../fx-DhyT1Cjh.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-D3CcZp_g.js';
-export { a as JobStatus, b as JobStore, h as isStreamableJobStore } from '../job-store-D3CcZp_g.js';
+import { F as FxFetcher } from '../fx-DuaYHvVn.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-D6Rjj5Oi.js';
+export { a as JobStatus, b as JobStore, h as isStreamableJobStore } from '../job-store-D6Rjj5Oi.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from '../ssrf-dMooihtY.js';
 import 'mppx';
 import '@x402/core/server';
 import '@x402/evm/batch-settlement/server';
-import 'viem';
 import '@x402/core/types';
+import 'viem';
 import '@cashu/cashu-ts';
-import '../lightning-backend-BhsyrBLa.js';
+import '../lightning-backend-BaeCPmx7.js';
 
 /** Lifetime of a per-call implicit credit before the ledger refuses new draws. */
 declare const IMPLICIT_CREDIT_TTL_MS: number;
@@ -58,9 +58,9 @@ interface DrainReportWiring {
  */
 declare const CREDIT_REQUEST_SCHEMA: z.ZodObject<{
     op: z.ZodEnum<{
-        drain: "drain";
         balance: "balance";
         fund: "fund";
+        drain: "drain";
     }>;
     credit_id: z.ZodOptional<z.ZodString>;
     fund: z.ZodOptional<z.ZodObject<{
@@ -91,6 +91,7 @@ declare const CREDIT_REQUEST_SCHEMA: z.ZodObject<{
 }, z.core.$strip>;
 type CreditRequest = z.infer<typeof CREDIT_REQUEST_SCHEMA>;
 interface CreditRouteDeps {
+    hostedSettlementReports?: HostedSettlementReportObligations;
     menu: () => Promise<CreditMenu | undefined>;
     creditConfig: ResolvedCreditConfig | undefined;
     auth: DVMAuthScheme | undefined;
@@ -339,11 +340,13 @@ declare class MemoryCreditLedger implements CreditLedgerLike {
 /** Postgres-backed JobStore with cross-machine message streaming via LISTEN/NOTIFY. */
 declare class PostgresJobStore implements StreamableJobStore, ReceiptIssuingStore {
     private pool;
+    private hostingCleanupFence?;
     private listenChannel;
     private messageSubscribers;
     private notifySubscribers;
     private requestIdClaimLocks;
     constructor(pool: Pool);
+    useHostingCleanupFence(fence: HostingCleanupFence): void;
     /** Run the CREATE TABLE migration. Call once at startup. */
     init(): Promise<void>;
     private createTables;
@@ -433,6 +436,7 @@ declare class PostgresJobStore implements StreamableJobStore, ReceiptIssuingStor
      * visible.
      */
     private terminateJob;
+    private deleteResolvedMessages;
     private fetchCountersTx;
     /**
      * The credit binding on the job row, read inside Tx C. Used on the