@dvmkit/sdk 0.3.4-rc.10 → 0.5.0-rc.1

package/dist/{chunk-JDFLRNAZ.js → chunk-PB4FYZET.js}

@@ -131,6 +131,7 @@ var JOB_MESSAGES_CHANNEL = "job_messages";
 var JOB_DVM_ID = /* @__PURE__ */ Symbol("jobDvmId");
 var PostgresJobStore = class {
   pool;
+  hostingCleanupFence;
   listenChannel = null;
   messageSubscribers = /* @__PURE__ */ new Map();
   notifySubscribers = /* @__PURE__ */ new Map();
@@ -138,6 +139,9 @@ var PostgresJobStore = class {
   constructor(pool) {
     this.pool = pool;
   }
+  useHostingCleanupFence(fence) {
+    this.hostingCleanupFence = fence;
+  }
   /** Run the CREATE TABLE migration. Call once at startup. */
   async init() {
     await withSdkInitLock(this.pool, () => this.createTables());
@@ -298,9 +302,11 @@ var PostgresJobStore = class {
         seq     INTEGER NOT NULL,
         data    JSONB NOT NULL,
         status  TEXT NOT NULL DEFAULT 'verified',
+        created_at_ms BIGINT,
         PRIMARY KEY (job_id, seq)
       );
       ALTER TABLE job_messages ADD COLUMN IF NOT EXISTS status TEXT NOT NULL DEFAULT 'verified';
+      ALTER TABLE job_messages ADD COLUMN IF NOT EXISTS created_at_ms BIGINT;
 
       -- per-DVM monotonic receipt counter. Single row by
       -- construction (the CHECK pins the key), and per-DVM by construction
@@ -356,6 +362,7 @@ var PostgresJobStore = class {
     const client = await this.pool.connect();
     const lockKey = requestIdAdvisoryLockKey(claim.requesterPubkey, claim.requestId);
     let locked = false;
+    let transactional = false;
     try {
       const lock = await client.query(
         "SELECT pg_try_advisory_lock($1::bigint) AS acquired",
@@ -363,6 +370,11 @@ var PostgresJobStore = class {
       );
       if (!lock.rows[0]?.acquired) return void 0;
       locked = true;
+      if (createBinding && this.hostingCleanupFence) {
+        await client.query("BEGIN");
+        transactional = true;
+        await this.hostingCleanupFence.assertNewIntent(client);
+      }
       const now = Date.now();
       const inserted = createBinding ? await client.query(
         `INSERT INTO request_id_claims (
@@ -395,6 +407,10 @@ var PostgresJobStore = class {
           result = { jobId: row.job_id, replayed: true };
         }
       }
+      if (transactional) {
+        await client.query("COMMIT");
+        transactional = false;
+      }
       if (!result) return void 0;
       this.requestIdClaimLocks.set(claim.claimToken, {
         client,
@@ -403,6 +419,9 @@ var PostgresJobStore = class {
         requestId: claim.requestId
       });
       return result;
+    } catch (error) {
+      if (transactional) await client.query("ROLLBACK").catch(() => void 0);
+      throw error;
     } finally {
       if (!this.requestIdClaimLocks.has(claim.claimToken)) {
         let discard = false;
@@ -452,7 +471,7 @@ var PostgresJobStore = class {
   }
   async saveRecord(record, dvmId) {
     const now = Date.now();
-    const { rowCount } = await this.pool.query(
+    const write = (q) => q.query(
       `INSERT INTO jobs (
         id, tags, capability, input, params, requester_id, status, summary,
         messages, seq, paid_msats, payment_mint, payment_rail,
@@ -596,6 +615,33 @@ var PostgresJobStore = class {
         record.timingKnown ?? true
       ]
     );
+    let rowCount;
+    if (this.hostingCleanupFence) {
+      const tx = await this.pool.connect();
+      try {
+        await tx.query("BEGIN");
+        const existing = await tx.query(
+          "SELECT dvm_id FROM jobs WHERE id=$1 FOR UPDATE",
+          [record.id]
+        );
+        if (existing.rows[0]) {
+          if (existing.rows[0].dvm_id !== null && existing.rows[0].dvm_id !== this.hostingCleanupFence.dvmId) {
+            throw new Error("Hosted job belongs to another DVM");
+          }
+        } else {
+          await this.hostingCleanupFence.assertNewIntent(tx, { jobId: record.id });
+        }
+        ({ rowCount } = await write(tx));
+        await tx.query("COMMIT");
+      } catch (error) {
+        await tx.query("ROLLBACK").catch(() => void 0);
+        throw error;
+      } finally {
+        tx.release();
+      }
+    } else {
+      ({ rowCount } = await write(this.pool));
+    }
     if (rowCount === 0) {
       diagnosticConsole.warn(
         {
@@ -607,7 +653,7 @@ var PostgresJobStore = class {
       return;
     }
     if (record.status === "completed" || record.status === "failed" || record.status === "cancelled") {
-      await this.pool.query("DELETE FROM job_messages WHERE job_id = $1", [record.id]).catch(() => void 0);
+      await this.deleteResolvedMessages(record.id).catch(() => void 0);
     }
   }
   /** Advance only after the reporter durably enqueued or deduplicated the event. */
@@ -658,8 +704,11 @@ var PostgresJobStore = class {
     return rowCount === 1;
   }
   async delete(id) {
+    if (this.hostingCleanupFence) {
+      throw new Error("Hosted job deletion cannot discard obligation evidence");
+    }
     await this.pool.query("DELETE FROM jobs WHERE id = $1", [id]);
-    await this.pool.query("DELETE FROM job_messages WHERE job_id = $1", [id]).catch(() => void 0);
+    await this.deleteResolvedMessages(id).catch(() => void 0);
   }
   async listJobsForRetention(args) {
     const after = args.after;
@@ -710,8 +759,12 @@ var PostgresJobStore = class {
        WHERE id = $1
          AND last_activity_at = $2
          AND redacted_at IS NULL
-         AND status IN ('completed', 'failed', 'cancelled')`,
-        [args.jobId, args.expectedLastActivityAt, args.redactedAt]
+         AND status IN ('completed', 'failed', 'cancelled')
+         AND ($4::boolean = false OR NOT EXISTS (
+           SELECT 1 FROM job_messages m WHERE m.job_id=jobs.id
+             AND m.data->>'type'='payment'
+             AND m.status IN ('pending-verification','failed-verify')))`,
+        [args.jobId, args.expectedLastActivityAt, args.redactedAt, !!this.hostingCleanupFence]
       );
       if (rowCount === 1) {
         await client.query("DELETE FROM job_messages WHERE job_id = $1", [args.jobId]);
@@ -870,6 +923,7 @@ var PostgresJobStore = class {
     const client = await this.pool.connect();
     try {
       await client.query("BEGIN");
+      if (message.type === "payment") await this.hostingCleanupFence?.assertNewIntent(client);
       const { rows } = await client.query(
         `UPDATE jobs SET next_seq = next_seq + 1, last_activity_at = $2
            WHERE id = $1 AND redacted_at IS NULL
@@ -883,7 +937,9 @@ var PostgresJobStore = class {
       const seq = rows[0].seq;
       const fullMessage = { ...message, seq };
       await client.query(
-        "INSERT INTO job_messages (job_id, seq, data, status) VALUES ($1, $2, $3, 'pending-verification')",
+        `INSERT INTO job_messages (job_id, seq, data, status, created_at_ms)
+         VALUES ($1, $2, $3, 'pending-verification',
+           FLOOR(EXTRACT(EPOCH FROM clock_timestamp()) * 1000)::bigint)`,
         [jobId, seq, JSON.stringify(fullMessage)]
       );
       await client.query("SELECT pg_notify('job_messages', $1)", [jobId]);
@@ -1272,9 +1328,13 @@ var PostgresJobStore = class {
     } finally {
       client.release();
     }
-    await this.pool.query("DELETE FROM job_messages WHERE job_id = $1", [jobId]).catch(() => void 0);
+    await this.deleteResolvedMessages(jobId).catch(() => void 0);
     return true;
   }
+  async deleteResolvedMessages(jobId) {
+    await this.pool.query(this.hostingCleanupFence ? `DELETE FROM job_messages WHERE job_id=$1 AND NOT (
+           data->>'type'='payment' AND status IN ('pending-verification','failed-verify'))` : "DELETE FROM job_messages WHERE job_id=$1", [jobId]);
+  }
   async fetchCountersTx(client, jobId) {
     const { rows } = await client.query(
       "SELECT status, paid_msats, pending_payment_msats, summary FROM jobs WHERE id = $1",

package/dist/{chunk-BQ2NMWKE.js → chunk-PLG4XER6.js}

@@ -1,6 +1,6 @@
 import {
   X402_DEFAULT_FACILITATOR
-} from "./chunk-Z4BNLUZF.js";
+} from "./chunk-IWQHUSMO.js";
 import {
   callerLoggers
 } from "./chunk-66HGCPBU.js";

package/dist/chunk-RLTSCKRI.js

@@ -0,0 +1,109 @@
+import {
+  DvmError
+} from "./chunk-LIRAHP7B.js";
+
+// src/lib/x402/networks.ts
+var X402_NETWORKS = [
+  {
+    caip2: "eip155:8453",
+    slug: "base",
+    label: "Base",
+    usdc: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+    domainName: "USD Coin",
+    domainVersion: "2",
+    viemChain: "base",
+    nativeGas: "ETH",
+    confusable: "USDbC"
+  },
+  {
+    caip2: "eip155:84532",
+    slug: "base-sepolia",
+    label: "Base Sepolia",
+    usdc: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    domainName: "USDC",
+    domainVersion: "2",
+    viemChain: "baseSepolia",
+    nativeGas: "ETH",
+    confusable: null
+  },
+  {
+    caip2: "eip155:43114",
+    slug: "avalanche",
+    label: "Avalanche",
+    usdc: "0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E",
+    domainName: "USD Coin",
+    domainVersion: "2",
+    viemChain: "avalanche",
+    nativeGas: "AVAX",
+    confusable: "USDC.e"
+  },
+  {
+    caip2: "eip155:43113",
+    slug: "avalanche-fuji",
+    label: "Avalanche Fuji",
+    usdc: "0x5425890298aed601595a70AB815c96711a31Bc65",
+    domainName: "USD Coin",
+    domainVersion: "2",
+    viemChain: "avalancheFuji",
+    nativeGas: "AVAX",
+    confusable: null
+  },
+  {
+    caip2: "eip155:137",
+    slug: "polygon",
+    label: "Polygon",
+    usdc: "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
+    domainName: "USD Coin (PoS)",
+    domainVersion: "2",
+    viemChain: "polygon",
+    nativeGas: "POL",
+    confusable: "USDC.e"
+  },
+  {
+    caip2: "eip155:80002",
+    slug: "polygon-amoy",
+    label: "Polygon Amoy",
+    usdc: "0x41E94Eb019C0762f9Bfcf9Fb1E58725BfB0e7582",
+    domainName: "USDC",
+    domainVersion: "2",
+    viemChain: "polygonAmoy",
+    nativeGas: "POL",
+    confusable: null
+  }
+];
+function x402NetworkByCaip2(caip2) {
+  return BY_CAIP2.get(caip2);
+}
+function x402NetworkBySlug(slug) {
+  return BY_SLUG.get(slug);
+}
+function x402NetworkLabel(network) {
+  const spec = x402NetworkByCaip2(network);
+  return spec ? `${spec.label} (${network})` : network;
+}
+function x402NetworkListForCopy() {
+  return X402_NETWORKS.map((n) => `${n.caip2} (${n.label})`).join(", ");
+}
+function assertSupportedX402Network(network) {
+  if (x402NetworkByCaip2(network)) return;
+  throw new DvmError(
+    "unsupported_network",
+    `Unsupported x402 network: ${network}.`,
+    `${x402SupportedNetworksHint()} If a wallet is connected, run 'dvm wallet x402-network <caip2>'. For a first connection, pass --network to 'dvm wallet x402-connect'.`
+  );
+}
+function x402SupportedNetworksHint() {
+  return `This rail settles native USDC on: ${x402NetworkListForCopy()}.`;
+}
+var BY_CAIP2 = new Map(X402_NETWORKS.map((n) => [n.caip2, n]));
+var BY_SLUG = new Map(X402_NETWORKS.map((n) => [n.slug, n]));
+
+export {
+  X402_NETWORKS,
+  x402NetworkByCaip2,
+  x402NetworkBySlug,
+  x402NetworkLabel,
+  x402NetworkListForCopy,
+  assertSupportedX402Network,
+  x402SupportedNetworksHint
+};

package/dist/{chunk-VAMSJRJT.js → chunk-TUA7PYH7.js}

@@ -1,23 +1,31 @@
 import {
+  computeResultHash,
   costAnchor,
   formatUsd,
-  msatsToUsd
-} from "./chunk-A4CM2BD3.js";
+  isDrainReceipt,
+  isFundingReceipt,
+  msatsToUsd,
+  verifyDrainReceipt,
+  verifyFundingReceipt,
+  verifyReceipt
+} from "./chunk-PAIM66YA.js";
 import {
   AGENT_MNEMONIC_FILE,
   BUILDER_CONFIG_DIR,
   BUILDER_FILE,
   BUILDER_KEY_FILE,
-  DvmError,
   WALLET_FILE,
   ensureConfigDir
-} from "./chunk-MKI6OVW4.js";
+} from "./chunk-CZULM42S.js";
 import {
   canonicaliseForSigning
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-OFVV37XC.js";
 import {
   callerLoggers
 } from "./chunk-66HGCPBU.js";
+import {
+  DvmError
+} from "./chunk-LIRAHP7B.js";
 import {
   diagnosticConsole
 } from "./chunk-ETXDTUJO.js";
@@ -1165,82 +1173,6 @@ function hexToBytes2(hex) {
   return out;
 }
 
-// src/lib/receipt.ts
-import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
-import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
-import { bytesToHex as bytesToHex3, hexToBytes as hexToBytes3 } from "@noble/hashes/utils.js";
-function computeResultHash(summary, artifactContents) {
-  const artifactHashes = artifactContents.map(
-    (content) => bytesToHex3(sha2563(canonicaliseForSigning(content)))
-  );
-  return bytesToHex3(
-    sha2563(
-      canonicaliseForSigning({
-        summary: summary ?? null,
-        artifact_hashes: artifactHashes
-      })
-    )
-  );
-}
-function signReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function verifyReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-function isSignedJobReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  const paid = r.paid;
-  return r.v === 1 && typeof r.job_id === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.capability === "string" && (r.outcome === "completed" || r.outcome === "failed" || r.outcome === "cancelled") && typeof r.seq === "number" && typeof r.issued_at === "number" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string" && !!paid && typeof paid === "object" && !Array.isArray(paid) && typeof paid.msats === "number";
-}
-function signDrainReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function signFundingReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function isFundingReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  return r.v === 1 && r.kind === "credit_funding" && typeof r.credit_id === "string" && typeof r.fund_id === "string" && typeof r.funded_micro === "number" && typeof r.balance_after_micro === "number" && typeof r.ledger_seq === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
-}
-function verifyFundingReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-function isDrainReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  return r.v === 1 && r.kind === "credit_drain" && typeof r.credit_id === "string" && typeof r.drain_id === "string" && (r.event === "requested" || r.event === "parked" || r.event === "picked_up" || r.event === "sent" || r.event === "released") && typeof r.method === "string" && typeof r.amount_micro === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
-}
-function verifyDrainReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-
 // src/lib/receipt-verify.ts
 function attestedDvmIdentity(builder) {
   const builderPubkey = authenticatedBuilderPubkey(builder);
@@ -1541,7 +1473,7 @@ function derivePubkeyFromPrivkey(privkey) {
       "Provide a valid secp256k1 private key as a 64-char hex string."
     );
   }
-  const bytes = hexToBytes4(privkey);
+  const bytes = hexToBytes3(privkey);
   if (!secp256k12.utils.isValidSecretKey(bytes)) {
     throw new DvmError(
       "invalid_privkey",
@@ -1550,17 +1482,17 @@ function derivePubkeyFromPrivkey(privkey) {
     );
   }
   const pub = secp256k12.getPublicKey(bytes);
-  return bytesToHex4(pub);
+  return bytesToHex3(pub);
 }
-function bytesToHex4(bytes) {
+function bytesToHex3(bytes) {
   return Buffer.from(bytes).toString("hex");
 }
-function hexToBytes4(hex) {
+function hexToBytes3(hex) {
   return Uint8Array.from(Buffer.from(hex, "hex"));
 }
 
 // src/lib/wallet-agent/sign.ts
-import { schnorr as schnorr4 } from "@noble/curves/secp256k1.js";
+import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
 var PUBKEY_COMPRESSED_HEX_RE = /^0[23][0-9a-f]{64}$/i;
 var PUBKEY_XONLY_HEX_RE = /^[0-9a-f]{64}$/i;
 var SIG_HEX_RE = /^[0-9a-f]{128}$/i;
@@ -1579,42 +1511,42 @@ function signChallenge(privkeyHex, challenge) {
       "Pass the SHA-256 digest output (32 bytes)."
     );
   }
-  const sig = schnorr4.sign(challenge, hexToBytes5(privkeyHex));
-  return bytesToHex5(sig);
+  const sig = schnorr3.sign(challenge, hexToBytes4(privkeyHex));
+  return bytesToHex4(sig);
 }
 function verifyChallenge(pubkeyHex, challenge, sigHex) {
   if (!SIG_HEX_RE.test(sigHex)) return false;
   if (challenge.length !== 32) return false;
   let xonly;
   if (PUBKEY_COMPRESSED_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes5(pubkeyHex.slice(2));
+    xonly = hexToBytes4(pubkeyHex.slice(2));
   } else if (PUBKEY_XONLY_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes5(pubkeyHex);
+    xonly = hexToBytes4(pubkeyHex);
   } else {
     return false;
   }
   try {
-    return schnorr4.verify(hexToBytes5(sigHex), challenge, xonly);
+    return schnorr3.verify(hexToBytes4(sigHex), challenge, xonly);
   } catch {
     return false;
   }
 }
-function hexToBytes5(hex) {
+function hexToBytes4(hex) {
   return Uint8Array.from(Buffer.from(hex, "hex"));
 }
-function bytesToHex5(bytes) {
+function bytesToHex4(bytes) {
   return Buffer.from(bytes).toString("hex");
 }
 
 // src/lib/cashu/admin-auth.ts
 import { randomBytes } from "crypto";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
 var ADMIN_AUTH_NONCE_TTL_SECONDS = 300;
 var ADMIN_AUTH_CLOCK_SKEW_SECONDS = 30;
 var ADMIN_STATE_UNAVAILABLE = "admin_state_unavailable";
 function buildAdminChallenge(args) {
   const msg = `dvmkit-admin:${args.method}:${args.path}:${args.dvmId}:${args.nonceHex}:${args.unixSeconds}`;
-  return sha2564(new TextEncoder().encode(msg));
+  return sha2563(new TextEncoder().encode(msg));
 }
 function buildAdminAuthHeader(args) {
   const nowMs = args.now ? args.now() : Date.now();
@@ -1737,16 +1669,6 @@ export {
   buildAttestation,
   signAttestation,
   verifyAttestation,
-  computeResultHash,
-  signReceipt,
-  verifyReceipt,
-  isSignedJobReceipt,
-  signDrainReceipt,
-  signFundingReceipt,
-  isFundingReceipt,
-  verifyFundingReceipt,
-  isDrainReceipt,
-  verifyDrainReceipt,
   attestedDvmIdentity,
   authenticatedBuilderPubkey,
   verifyJobReceipt,

package/dist/{chunk-O3QDFPKM.js → chunk-TZ2WKCDD.js}

@@ -4,7 +4,7 @@ import {
   DEFAULT_CREDIT_TTL_SECONDS,
   DEFAULT_JOB_RETENTION_DAYS,
   isZodSchema
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-A4YFWZ7R.js";
 import {
   InvalidCurrencyError,
   validateCurrency

package/dist/{chunk-Z3EHBW2G.js → chunk-UOCZXO2Z.js}

@@ -2,31 +2,33 @@ import {
   connectedTempoAccount,
   tempoBalanceCheckHint,
   tempoTokenReference
-} from "./chunk-YYQG4R7T.js";
+} from "./chunk-GFY5FRX3.js";
 import {
   fundingReachableAt,
   listCredits,
   maxAdvertisedMicro,
   normalizeCreditEndpoint,
   withinAdvertisedTolerance
-} from "./chunk-C2AGARLM.js";
+} from "./chunk-B2IROPQF.js";
 import {
   costAnchor,
   formatUsd,
   formatUsdcMicrounits
-} from "./chunk-A4CM2BD3.js";
+} from "./chunk-PAIM66YA.js";
 import {
-  DvmError,
   IDENTITIES_FILE,
   TEMPO_CHANNELS_FILE,
   ensureConfigDir,
   resolveRpcHttpTransportOptions,
   resolveRpcOverride
-} from "./chunk-MKI6OVW4.js";
+} from "./chunk-CZULM42S.js";
 import {
   redactUrl,
   redactUrlsInText
 } from "./chunk-FUJ36YDV.js";
+import {
+  DvmError
+} from "./chunk-LIRAHP7B.js";
 
 // src/lib/cli-identity-store.ts
 import { schnorr } from "@noble/curves/secp256k1.js";

package/dist/{chunk-EAMZZ2B4.js → chunk-X7EZ5CLI.js}

@@ -17,9 +17,16 @@ var PostgresTempoSessionStore = class {
     this.update = this.update.bind(this);
   }
   pool;
+  hostingCleanupFence;
+  useHostingCleanupFence(fence) {
+    this.hostingCleanupFence = fence;
+  }
   acceptance = new AsyncLocalStorage();
   async init() {
     await withSdkInitLock(this.pool, async () => {
+      const before = await this.pool.query(
+        "SELECT to_regclass('mpp_tempo_channels') IS NOT NULL AS existed"
+      );
       await this.pool.query(`
         CREATE TABLE IF NOT EXISTS mpp_tempo_channels (
           channel_key TEXT PRIMARY KEY,
@@ -31,6 +38,24 @@ var PostgresTempoSessionStore = class {
         `CREATE INDEX IF NOT EXISTS idx_mpp_tempo_channels_updated
            ON mpp_tempo_channels(updated_at)`
       );
+      await this.pool.query(`
+        CREATE TABLE IF NOT EXISTS mpp_tempo_channel_tombstones (
+          channel_key TEXT PRIMARY KEY,
+          state_json TEXT NOT NULL,
+          deleted_at_ms BIGINT NOT NULL
+        )
+      `);
+      await this.pool.query(`
+        CREATE TABLE IF NOT EXISTS mpp_tempo_channel_history (
+          singleton BOOLEAN PRIMARY KEY CHECK (singleton),
+          complete BOOLEAN NOT NULL
+        )
+      `);
+      await this.pool.query(
+        `INSERT INTO mpp_tempo_channel_history (singleton,complete) VALUES (TRUE,$1)
+         ON CONFLICT (singleton) DO NOTHING`,
+        [!before.rows[0].existed]
+      );
       await this.pool.query(`
         CREATE TABLE IF NOT EXISTS mpp_tempo_close_intents (
           channel_id      TEXT PRIMARY KEY,
@@ -75,6 +100,17 @@ var PostgresTempoSessionStore = class {
   }
   /** Compose voucher acceptance and its ledger mutation under the channel-row lock. */
   async withVoucherAcceptance(voucher, commit, operation) {
+    if (this.hostingCleanupFence) {
+      if (!voucher.hostingFunding) throw new Error("Hosted Tempo voucher has no original funding admission");
+      const reservation = voucher.hostingFunding;
+      await this.hostingCleanupFence.withNewIntent({
+        admissionId: reservation.admissionId,
+        creditId: reservation.creditId,
+        fundId: reservation.fundId,
+        callerPubkey: reservation.callerPubkey,
+        fundingCommitment: reservation.commitment
+      }, (tx) => this.hostingCleanupFence.assertFundingReservation(tx, reservation));
+    }
     const context = {
       commit,
       channelId: voucher.channelId.toLowerCase(),
@@ -365,6 +401,16 @@ var PostgresTempoSessionStore = class {
         };
       }
       assertMonotonicTransition(current, value);
+      if (current === null) {
+        const prior = await client.query(
+          "SELECT state_json FROM mpp_tempo_channel_tombstones WHERE channel_key=$1 FOR UPDATE",
+          [key]
+        );
+        if (prior.rows[0]) assertMonotonicTransition(parseStoreValue(prior.rows[0].state_json), value);
+      }
+      if (!acceptance && this.hostingCleanupFence && (current === null || (asBigInt(value.highestVoucherAmount) ?? 0n) > (isRecord(current) ? asBigInt(current.highestVoucherAmount) ?? 0n : 0n))) {
+        await this.hostingCleanupFence.assertNewIntent(client);
+      }
       await client.query(
         `INSERT INTO mpp_tempo_channels (channel_key, state_json, updated_at)
          VALUES ($1, $2, $3)
@@ -382,6 +428,19 @@ var PostgresTempoSessionStore = class {
         });
       }
     } else if (change.op === "delete") {
+      if (current !== null) {
+        const prior = await client.query(
+          "SELECT state_json FROM mpp_tempo_channel_tombstones WHERE channel_key=$1 FOR UPDATE",
+          [key]
+        );
+        if (prior.rows[0]) assertMonotonicTransition(parseStoreValue(prior.rows[0].state_json), current);
+        await client.query(
+          `INSERT INTO mpp_tempo_channel_tombstones (channel_key,state_json,deleted_at_ms)
+           VALUES ($1,$2,$3) ON CONFLICT (channel_key) DO UPDATE
+             SET state_json=EXCLUDED.state_json,deleted_at_ms=EXCLUDED.deleted_at_ms`,
+          [key, rows[0].state_json, Date.now()]
+        );
+      }
       await client.query(`DELETE FROM mpp_tempo_channels WHERE channel_key = $1`, [key]);
     }
     return change.result;

package/dist/{chunk-CE7XEHYC.js → chunk-Z4KLECAC.js}

@@ -4,7 +4,7 @@ import {
   signedRequestHeaderMatchesDomain,
   signedRequestStatementHeader,
   testOnlySignedRequestDomain
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-A4YFWZ7R.js";
 import {
   diagnosticConsole
 } from "./chunk-ETXDTUJO.js";