@dvmkit/sdk 0.4.0-rc.1 → 0.6.0-rc.1

package/dist/chunk-BQJIFRAZ.js

@@ -0,0 +1,36 @@
+// src/sdk/step-cache.ts
+var StepCache = class _StepCache {
+  cache = /* @__PURE__ */ new Map();
+  has(id) {
+    return this.cache.has(id);
+  }
+  get(id) {
+    return this.getRecord(id).value;
+  }
+  getRecord(id) {
+    const record = this.cache.get(id);
+    if (record === void 0) throw new Error(`StepCache: no cached result for step "${id}"`);
+    return record;
+  }
+  set(id, value, costs) {
+    this.cache.set(id, {
+      id,
+      value,
+      ...costs !== void 0 && costs.length > 0 ? { costs: costs.map(({ amount, currency }) => ({ amount, currency })) } : {}
+    });
+  }
+  serialize() {
+    return [...this.cache.values()];
+  }
+  static deserialize(records) {
+    const cache = new _StepCache();
+    for (const { id, value, costs } of records) {
+      cache.set(id, value, costs);
+    }
+    return cache;
+  }
+};
+
+export {
+  StepCache
+};

package/dist/{chunk-PB4FYZET.js → chunk-EQLA4FFY.js}

@@ -1,3 +1,7 @@
+import {
+  ContentHoldError,
+  applyContentHoldMutation
+} from "./chunk-AFV77S4C.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
@@ -228,6 +232,18 @@ var PostgresJobStore = class {
       ALTER TABLE jobs ADD COLUMN IF NOT EXISTS receipt JSONB;
       ALTER TABLE jobs ADD COLUMN IF NOT EXISTS receipt_seq BIGINT;
       ALTER TABLE jobs ADD COLUMN IF NOT EXISTS redacted_at BIGINT;
+      CREATE TABLE IF NOT EXISTS job_content_holds (
+        id TEXT PRIMARY KEY, job_id TEXT NOT NULL REFERENCES jobs(id) ON DELETE CASCADE,
+        data JSONB NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS job_content_holds_job_idx ON job_content_holds(job_id);
+      CREATE TABLE IF NOT EXISTS job_content_hold_events (
+        event_position BIGSERIAL UNIQUE,
+        id TEXT PRIMARY KEY, job_id TEXT NOT NULL REFERENCES jobs(id) ON DELETE CASCADE,
+        data JSONB NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS job_content_hold_events_job_idx ON job_content_hold_events(job_id);
+
       -- credit-ledger linkage. Written at submission alongside the
       -- payment fields; the terminal funnel settles/releases the draw and the
       -- receipt countersigns the ReceiptCredit block from it.
@@ -536,7 +552,7 @@ var PostgresJobStore = class {
         required_msats = EXCLUDED.required_msats,
         step_cache = EXCLUDED.step_cache,
         state = EXCLUDED.state,
-        last_activity_at = EXCLUDED.last_activity_at
+        last_activity_at = CASE WHEN jobs.status IN ('completed', 'failed', 'cancelled') THEN jobs.last_activity_at ELSE EXCLUDED.last_activity_at END
       -- terminal is terminal. On a multi-machine DVM a DELETE can
       -- land on a machine that isn't running the handler, which cancels the
       -- job in the store only; the handler's machine never learns of it and
@@ -737,6 +753,7 @@ var PostgresJobStore = class {
     const client = await this.pool.connect();
     try {
       await client.query("BEGIN");
+      await client.query("SELECT id FROM jobs WHERE id = $1 FOR UPDATE", [args.jobId]);
       const { rowCount } = await client.query(
         `UPDATE jobs SET
          input = '',
@@ -760,6 +777,7 @@ var PostgresJobStore = class {
          AND last_activity_at = $2
          AND redacted_at IS NULL
          AND status IN ('completed', 'failed', 'cancelled')
+         AND NOT EXISTS (SELECT 1 FROM job_content_holds h WHERE h.job_id=jobs.id AND h.data->'cleared_at' = 'null'::jsonb)
          AND ($4::boolean = false OR NOT EXISTS (
            SELECT 1 FROM job_messages m WHERE m.job_id=jobs.id
              AND m.data->>'type'='payment'
@@ -781,6 +799,38 @@ var PostgresJobStore = class {
       client.release();
     }
   }
+  async getContentSnapshot(jobId, dvmId) {
+    const { rows } = await this.pool.query(
+      `SELECT j.*, COALESCE((SELECT jsonb_agg(h.data ORDER BY h.data->>'created_at', h.id) FROM job_content_holds h WHERE h.job_id=j.id), '[]'::jsonb) AS content_holds,
+       COALESCE((SELECT jsonb_agg(e.data ORDER BY e.event_position) FROM job_content_hold_events e WHERE e.job_id=j.id), '[]'::jsonb) AS content_hold_events
+       FROM jobs j WHERE j.id=$1 AND ($2::text IS NULL OR j.dvm_id IS NULL OR j.dvm_id=$2)`,
+      [jobId, dvmId ?? null]
+    );
+    if (!rows[0]) return void 0;
+    return { job: rowToRecord(rows[0]), history: { holds: rows[0].content_holds, events: rows[0].content_hold_events } };
+  }
+  async mutateContentHold(jobId, mutation, dvmId) {
+    const client = await this.pool.connect();
+    try {
+      await client.query("BEGIN");
+      const { rows } = await client.query("SELECT * FROM jobs WHERE id=$1 AND ($2::text IS NULL OR dvm_id IS NULL OR dvm_id=$2) FOR UPDATE", [jobId, dvmId ?? null]);
+      if (!rows[0]) throw new ContentHoldError("job_not_found");
+      const holds = await client.query("SELECT data FROM job_content_holds WHERE job_id=$1 ORDER BY data->>'created_at', id", [jobId]);
+      const events = await client.query("SELECT data FROM job_content_hold_events WHERE job_id=$1 ORDER BY event_position", [jobId]);
+      const history = applyContentHoldMutation(rowToRecord(rows[0]), { holds: holds.rows.map((row) => row.data), events: events.rows.map((row) => row.data) }, mutation);
+      const event = history.events.at(-1);
+      const hold = history.holds.find((item) => item.id === event.hold_id);
+      await client.query(`INSERT INTO job_content_holds(id,job_id,data) VALUES($1,$2,$3) ON CONFLICT(id) DO UPDATE SET data=EXCLUDED.data`, [hold.id, jobId, JSON.stringify(hold)]);
+      await client.query("INSERT INTO job_content_hold_events(id,job_id,data) VALUES($1,$2,$3)", [event.id, jobId, JSON.stringify(event)]);
+      await client.query("COMMIT");
+      return history;
+    } catch (error) {
+      await client.query("ROLLBACK");
+      throw error;
+    } finally {
+      client.release();
+    }
+  }
   async claimReceiptSeq(jobId) {
     const client = await this.pool.connect();
     try {
@@ -828,7 +878,7 @@ var PostgresJobStore = class {
     try {
       await client.query("BEGIN");
       const { rows } = await client.query(
-        `UPDATE jobs SET next_seq = next_seq + 1, last_activity_at = $2,
+        `UPDATE jobs SET next_seq = next_seq + 1, last_activity_at = CASE WHEN status IN ('completed','failed','cancelled') THEN last_activity_at ELSE $2 END,
            awaiting_input_at_ms = CASE WHEN $3::boolean AND status NOT IN ('completed', 'failed', 'cancelled')
              THEN COALESCE(awaiting_input_at_ms, $2) ELSE awaiting_input_at_ms END,
            status = CASE WHEN $3::boolean AND status NOT IN ('completed', 'failed', 'cancelled')
@@ -925,7 +975,7 @@ var PostgresJobStore = class {
       await client.query("BEGIN");
       if (message.type === "payment") await this.hostingCleanupFence?.assertNewIntent(client);
       const { rows } = await client.query(
-        `UPDATE jobs SET next_seq = next_seq + 1, last_activity_at = $2
+        `UPDATE jobs SET next_seq = next_seq + 1, last_activity_at = CASE WHEN status IN ('completed','failed','cancelled') THEN last_activity_at ELSE $2 END
            WHERE id = $1 AND redacted_at IS NULL
            RETURNING (next_seq - 1) AS seq`,
         [jobId, Date.now()]
@@ -1024,7 +1074,7 @@ var PostgresJobStore = class {
              cashu_flow = COALESCE($9, cashu_flow),
              pending_x402_nonce = CASE WHEN $11::boolean THEN NULL ELSE pending_x402_nonce END,
              pending_x402_amount_usdc_micro = CASE WHEN $11::boolean THEN NULL ELSE pending_x402_amount_usdc_micro END,
-             last_activity_at = $12
+             last_activity_at = CASE WHEN status IN ('completed','failed','cancelled') THEN last_activity_at ELSE $12 END
            WHERE id = $1
            RETURNING status, paid_msats, pending_payment_msats, credit_id, draw_id`,
           params

package/dist/{chunk-74PUEZJ4.js → chunk-GFY5FRX3.js}

@@ -103,7 +103,7 @@ async function generateTempoKey(opts = {}) {
     );
   }
   if (existing && opts.force) {
-    const { assertTempoWalletIdle } = await import("./tempo-lifecycle-OTHV757Y.js");
+    const { assertTempoWalletIdle } = await import("./tempo-lifecycle-ZBBLFBMH.js");
     await assertTempoWalletIdle("replace");
   }
   const { privateKeyToAccount, generatePrivateKey } = await import("viem/accounts");

package/dist/{chunk-O3QDFPKM.js → chunk-HCLVYZUZ.js}

@@ -4,7 +4,7 @@ import {
   DEFAULT_CREDIT_TTL_SECONDS,
   DEFAULT_JOB_RETENTION_DAYS,
   isZodSchema
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-RCM3P2HE.js";
 import {
   InvalidCurrencyError,
   validateCurrency
@@ -47,7 +47,7 @@ function configureDVM(config) {
 }
 function resolveJobRetentionDays(raw) {
   const days = raw ?? DEFAULT_JOB_RETENTION_DAYS;
-  if (!Number.isSafeInteger(days) || days < 0) {
+  if (!Number.isSafeInteger(days) || days < 0 || days > Math.floor((Number.MAX_SAFE_INTEGER - Date.now()) / 864e5)) {
     throw new Error(
       `configureDVM: jobRetentionDays must be a non-negative whole number of days; received ${JSON.stringify(raw)}`
     );

package/dist/{chunk-K2YX2VRA.js → chunk-HHBDBMEO.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-FYRR2UEZ.js";
 import {
   PostgresJobStore
-} from "./chunk-PB4FYZET.js";
+} from "./chunk-EQLA4FFY.js";
 import {
   parseStoreValue
 } from "./chunk-YG7G4DPZ.js";
@@ -25,24 +25,30 @@ import {
   humanizeZodIssues,
   signedRequestInput,
   zodIssuesOf
-} from "./chunk-CE7XEHYC.js";
+} from "./chunk-N5RZ5HVB.js";
 import {
-  JobCancelledError,
   MemoryJobStore,
   UNCAPPABLE_ASK_TOTAL,
-  abortJob,
   accumulateAskedTopUp,
   createInstrumentedFetch,
-  fromJobRecord,
   isJobRetentionStore,
   isReceiptIssuingStore,
-  isStreamableJobStore,
+  isStreamableJobStore
+} from "./chunk-IV6Q7NRW.js";
+import {
+  ContentHoldError,
+  JobCancelledError,
+  abortJob,
+  baselineContentExpiry,
+  contentMetadata,
+  fromJobRecord,
+  isContentHoldStore,
   isTerminal,
   isYieldMessage,
   localMessage,
   providerMessage,
   toJobRecord
-} from "./chunk-O5AT6S5T.js";
+} from "./chunk-AFV77S4C.js";
 import {
   ADMIN_AUTH_CLOCK_SKEW_SECONDS,
   ADMIN_AUTH_NONCE_TTL_SECONDS,
@@ -52,7 +58,6 @@ import {
   attestedDvmIdentity,
   buildAdminChallenge,
   checkMintHealth,
-  computeResultHash,
   createMonotonicClock,
   getWallet,
   isPublicRequestId,
@@ -61,13 +66,10 @@ import {
   normaliseMintUrl,
   parseTraceparent,
   receiptPubkeyFromSecret,
-  signDrainReceipt,
-  signFundingReceipt,
-  signReceipt,
   toLockPubkey,
   verifyCashuToken,
   verifyChallenge
-} from "./chunk-5LR6P7WN.js";
+} from "./chunk-OQA7IHI4.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
@@ -85,28 +87,36 @@ import {
 } from "./chunk-IWQHUSMO.js";
 import {
   IMPLICIT_CREDIT_TTL_MS,
+  computeResultHash,
   formatStaleness,
   msatsToUsd,
   msatsToUsdc,
+  signDrainReceipt,
+  signFundingReceipt,
+  signReceipt,
   usdcToMsats
-} from "./chunk-3MHE725Z.js";
+} from "./chunk-PAIM66YA.js";
 import {
   resolveRpcOverride
 } from "./chunk-CZULM42S.js";
 import {
   RAIL_REFUNDABLE,
   canonicalRequestPath,
-  canonicalize,
   isZodSchema
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-RCM3P2HE.js";
+import {
+  canonicalize
+} from "./chunk-OFVV37XC.js";
 import {
-  StepCache,
   createConsoleLogger,
   loggers,
   pinDimension,
   withSpan,
   withTraceContext
-} from "./chunk-6DOGTAHA.js";
+} from "./chunk-QR2EF2NI.js";
+import {
+  StepCache
+} from "./chunk-BQJIFRAZ.js";
 import {
   FxRateUnavailableError,
   InvalidCurrencyError,
@@ -766,6 +776,15 @@ var MemoryConsumedCredentialStore = class {
     }
     return Promise.resolve(true);
   }
+  consume(realm, challengeId, ttlSeconds) {
+    const key = `${realm}:${challengeId}`;
+    const now = Date.now();
+    if ((this.data.get(key) ?? 0) > now) return Promise.resolve(false);
+    for (const [entry, expiry] of this.data) if (expiry <= now) this.data.delete(entry);
+    if (this.data.size >= this.maxEntries) return Promise.reject(new Error("Nonce store capacity exhausted"));
+    this.data.set(key, now + ttlSeconds * 1e3);
+    return Promise.resolve(true);
+  }
   mark(realm, challengeId, ttlSeconds) {
     const key = `${realm}:${challengeId}`;
     if (this.data.has(key)) this.data.delete(key);
@@ -3777,7 +3796,7 @@ async function verifyUpfrontPayment(opts) {
           x402Requirements
         });
       }
-      const { verifyX402Payment } = await import("./x402-CEDHGZDI.js");
+      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
       const receipt = await verifyX402Payment(
         x402Payment,
         x402Config,
@@ -4752,7 +4771,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
           snapshot
         });
       }
-      const { verifyX402Payment } = await import("./x402-CEDHGZDI.js");
+      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -5177,7 +5196,7 @@ async function processIncomingPayment(job, body, opts) {
     try {
       const requiredMsats = job.pendingPaymentMsats ?? 0;
       const requiredUsdcMicro = job.pendingX402AmountUsdcMicro !== void 0 ? BigInt(job.pendingX402AmountUsdcMicro) : BigInt(msatsToUsdc(requiredMsats, rate));
-      const { verifyX402Payment } = await import("./x402-CEDHGZDI.js");
+      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
       const receipt = await verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
@@ -8705,10 +8724,14 @@ async function verifyAdminAuth(opts) {
     nonceHex,
     unixSeconds: unixStr
   });
-  const matched = opts.acceptedPubkeys.some((pk) => verifyChallenge(pk, digest, sigHex));
+  const matched = opts.acceptedPubkeys.find((pk) => verifyChallenge(pk, digest, sigHex));
   if (!matched) return { ok: false, reason: "bad_signature" };
-  await opts.nonceStore.mark(NONCE_REALM, nonceHex, NONCE_TTL_SECONDS);
-  return { ok: true };
+  if (opts.nonceStore.consume) {
+    if (!await opts.nonceStore.consume(NONCE_REALM, nonceHex, NONCE_TTL_SECONDS)) return { ok: false, reason: "replay" };
+  } else {
+    await opts.nonceStore.mark(NONCE_REALM, nonceHex, NONCE_TTL_SECONDS);
+  }
+  return { ok: true, actor: matched };
 }
 function installAdminCashuRoutes(app, opts) {
   app.get("/admin/cashu/pending-batches", (c) => handlePendingBatches(c, opts));
@@ -8973,6 +8996,69 @@ async function handleRotateLockPubkey(c, opts) {
   });
 }
 
+// src/sdk/server/admin-content.ts
+function installAdminContentRoutes(app, opts) {
+  app.get("/admin/jobs/:jobId/content-holds", (c) => handle(c, opts));
+  app.post("/admin/jobs/:jobId/content-holds", (c) => handle(c, opts, "placed"));
+  app.post("/admin/jobs/:jobId/content-holds/:holdId/renew", (c) => handle(c, opts, "renewed"));
+  app.post("/admin/jobs/:jobId/content-holds/:holdId/clear", (c) => handle(c, opts, "cleared"));
+}
+async function handle(c, opts, action) {
+  const loaded = await loadAdminLockPubkeyState(c, opts);
+  if ("response" in loaded) return loaded.response;
+  const auth = await verifyAdminAuth({
+    authHeader: c.req.header("Authorization"),
+    method: c.req.method,
+    path: c.req.path,
+    dvmId: opts.dvmId,
+    acceptedPubkeys: [loaded.state.current, ...loaded.state.retired.map((item) => item.pubkey)],
+    nonceStore: opts.nonceStore,
+    now: opts.now
+  });
+  if (!auth.ok) return c.json({ error: "unauthorized", reason: auth.reason }, 401);
+  if (!isContentHoldStore(opts.store) || !opts.nonceStore.consume) {
+    return c.json({ error: "content_holds_unavailable", message: "This service requires a content-hold store and atomic admin nonce store." }, 503);
+  }
+  const jobId = c.req.param("jobId") ?? "";
+  const at = opts.now?.() ?? Date.now();
+  try {
+    if (action) {
+      let body;
+      try {
+        body = await c.req.json();
+      } catch {
+        return c.json({ error: "invalid_body", message: "Send a JSON object." }, 400);
+      }
+      if (!body || typeof body !== "object" || Array.isArray(body)) return c.json({ error: "invalid_body" }, 400);
+      const allowed = action === "placed" ? ["purpose", "reason", "review_due_at"] : action === "renewed" ? ["reason", "review_due_at"] : ["reason"];
+      if (Object.keys(body).some((key) => !allowed.includes(key))) return c.json({ error: "invalid_body", message: "Only purpose, reason and review_due_at are accepted as applicable; identity and times are server-derived." }, 400);
+      if (typeof body.reason !== "string" || body.reason.trim().length === 0 || body.reason.length > 1e3) return c.json({ error: "invalid_reason", message: "reason must contain 1..1000 characters." }, 400);
+      if (action !== "cleared" && (!Number.isSafeInteger(body.review_due_at) || body.review_due_at <= at)) return c.json({ error: "invalid_review_due_at", message: "review_due_at must be a future epoch millisecond integer." }, 400);
+      const base2 = { reason: body.reason.trim(), actor: auth.actor, at };
+      let mutation;
+      if (action === "placed") {
+        if (body.purpose !== "support" && body.purpose !== "dispute") return c.json({ error: "invalid_purpose" }, 400);
+        mutation = { ...base2, action, purpose: body.purpose, review_due_at: body.review_due_at };
+      } else if (action === "renewed") {
+        mutation = { ...base2, action, hold_id: c.req.param("holdId") ?? "", review_due_at: body.review_due_at };
+      } else mutation = { ...base2, action, hold_id: c.req.param("holdId") ?? "" };
+      await opts.store.mutateContentHold(jobId, mutation, opts.dvmId);
+    }
+    const snapshot = await opts.store.getContentSnapshot(jobId, opts.dvmId);
+    if (!snapshot) return c.json({ error: "job_not_found" }, 404);
+    return c.json({
+      job_id: jobId,
+      ...contentMetadata(snapshot.job, opts.retentionDays, snapshot.history.holds),
+      baseline_content_expires_at: baselineContentExpiry(snapshot.job, opts.retentionDays),
+      holds: snapshot.history.holds.map((hold) => ({ ...hold, review_overdue: hold.cleared_at === null && hold.review_due_at <= at })),
+      events: snapshot.history.events
+    }, action === "placed" ? 201 : 200);
+  } catch (error) {
+    if (error instanceof ContentHoldError) return c.json({ error: error.code }, error.code === "job_not_found" ? 404 : 409);
+    throw error;
+  }
+}
+
 // src/sdk/server/x402-exact-settlement.ts
 import { createHash as createHash4 } from "crypto";
 var X402ExactSettlementServer = class {
@@ -19942,6 +20028,13 @@ var DVMServer = class {
           ...payoutReporter ? { onMelted: payoutReporter.meltHook() } : {}
         });
       }
+      installAdminContentRoutes(this.app, {
+        dvmId,
+        store: this.jobManager.store,
+        retentionDays: this.descriptor.jobRetentionDays,
+        getLockPubkeyState: () => this.loadActiveLockPubkeyState(db, dvmId),
+        nonceStore: this.adminCashuNonceStore
+      });
       installAdminCreditRoutes(this.app, {
         db,
         dvmId,
@@ -20248,12 +20341,12 @@ var DVMServer = class {
   ownerDisplayBlock() {
     const owner = this.opts.owner;
     const env = this.opts.env;
-    const handle = owner?.handle ?? env.DVMKIT_OWNER_HANDLE;
-    if (!handle) return null;
+    const handle2 = owner?.handle ?? env.DVMKIT_OWNER_HANDLE;
+    if (!handle2) return null;
     const type = owner?.type ?? env.DVMKIT_OWNER_TYPE ?? "builder";
     const displayName = owner?.displayName ?? env.DVMKIT_OWNER_DISPLAY_NAME ?? null;
     const avatarUrl = owner?.avatarUrl ?? env.DVMKIT_OWNER_AVATAR_URL ?? null;
-    return { handle, display_name: displayName, avatar_url: avatarUrl, type };
+    return { handle: handle2, display_name: displayName, avatar_url: avatarUrl, type };
   }
   defaultPaymentMethods() {
     const methods = [];
@@ -21138,7 +21231,7 @@ var DVMServer = class {
     if (prior?.requestId !== requestId || prior.requesterPubkey !== authPubkey || prior.requestFingerprint !== fingerprint || prior.requesterId !== c.get("requesterId")) {
       return requestResultNotFound(c, requestId);
     }
-    return buildRequestResultResponse(c, requestId, prior);
+    return buildRequestResultResponse(c, requestId, prior, await this.contentFields(prior));
   }
   async handleCreateJob(c, resumeOnly = false) {
     if (!resumeOnly) this.maybeSweepTempoSessions();
@@ -21268,7 +21361,7 @@ var DVMServer = class {
       const prior = priorId ? await this.jobManager.store.get(priorId) : void 0;
       if (prior && prior.requestFingerprint === fingerprint && prior.requesterId === c.get("requesterId") && (!this.descriptor.auth || prior.requesterPubkey === authPubkey)) {
         await this.jobManager.ensureReceipt(prior);
-        return buildSubmitResponse(c, prior, prior.requesterToken);
+        return await this.submitResponse(c, prior, prior.requesterToken);
       }
     }
     if (!resumeOnly && this.opts.hostingControlInstance && creditEnvelope && authPubkey) {
@@ -21310,7 +21403,7 @@ var DVMServer = class {
       if (publicRequestId && authPubkey && recoveryStore) {
         const prior = await recoveryStore.findJobByRequestId(publicRequestId, authPubkey);
         if (prior) {
-          return resumeOnly ? buildSubmitResponse(c, prior, prior.requesterToken) : requestIdExists(c, publicRequestId);
+          return resumeOnly ? await this.submitResponse(c, prior, prior.requesterToken) : requestIdExists(c, publicRequestId);
         }
       }
       let jobId = publicRequestClaimResult?.jobId ?? this.jobManager.allocateJobId();
@@ -21526,7 +21619,7 @@ var DVMServer = class {
             exactAdmission.intentId
           );
           await this.jobManager.ensureReceipt(prior);
-          return buildSubmitResponse(c, prior, prior.requesterToken);
+          return await this.submitResponse(c, prior, prior.requesterToken);
         }
       }
       if (this.descriptor.auth && authEnvelope) {
@@ -21587,7 +21680,7 @@ var DVMServer = class {
           await jm.finalizeStoredTerminal(jobId);
         }
         const terminal = await store.get(jobId);
-        if (terminal) return buildSubmitResponse(c, terminal, jobToken);
+        if (terminal) return await this.submitResponse(c, terminal, jobToken);
       }
       if (exactAdmission) {
         await this.x402ExactSettlement?.completeAdmission(
@@ -21602,7 +21695,7 @@ var DVMServer = class {
         setTimeout(resolve, 0);
       });
       await awaitTerminalWork(job);
-      let response = buildSubmitResponse(c, job, jobToken);
+      let response = await this.submitResponse(c, job, jobToken);
       if (payment.x402SettleResponseHeader) {
         response = new Response(response.body, response);
         response.headers.set("PAYMENT-RESPONSE", payment.x402SettleResponseHeader);
@@ -21690,7 +21783,7 @@ var DVMServer = class {
       return void 0;
     }
     await this.jobManager.ensureReceipt(prior);
-    return buildSubmitResponse(c, prior, prior.requesterToken);
+    return await this.submitResponse(c, prior, prior.requesterToken);
   }
   /**
    * Resolve the recorded draw's job under the same fingerprint/pubkey/requester
@@ -21735,7 +21828,7 @@ var DVMServer = class {
       return void 0;
     }
     await this.jobManager.ensureReceipt(prior);
-    return buildSubmitResponse(c, prior, prior.requesterToken);
+    return await this.submitResponse(c, prior, prior.requesterToken);
   }
   /**
    * Resume the gap between a durable x402/Tempo marker+draw commit and the
@@ -21884,6 +21977,23 @@ var DVMServer = class {
       };
     }
   }
+  async submitResponse(c, job, jobToken) {
+    const snapshot = { ...job, messages: [...job.messages] };
+    return buildSubmitResponse(c, snapshot, jobToken, await this.contentFields(snapshot));
+  }
+  async contentFields(job) {
+    const store = this.jobManager.store;
+    const responseStatus = job.status;
+    if (isContentHoldStore(store)) {
+      const snapshot = await store.getContentSnapshot(job.id);
+      if (snapshot) return { ...contentMetadata({ ...snapshot.job, status: responseStatus }, this.descriptor.jobRetentionDays, snapshot.history.holds) };
+    }
+    return isContentHoldStore(store) ? { ...contentMetadata(job, this.descriptor.jobRetentionDays) } : {};
+  }
+  async messageFields(job, messages) {
+    const fields = await this.contentFields(job);
+    return { messages: fields.content_available === false ? [] : messages, ...fields };
+  }
   async handleGetJob(c) {
     if (!jobCredential.presents(c.req)) return c.json(jobCredential.body(), 401);
     const id = c.req.param("id") ?? "";
@@ -21892,7 +22002,8 @@ var DVMServer = class {
       if (!isJobOwner(c, job)) return c.json({ error: "Job not found" }, 404);
       await this.jobManager.ensureReceipt(job);
       const res2 = { job_id: job.id, status: job.status };
-      Object.assign(res2, terminalResponseFields(job));
+      Object.assign(res2, terminalResponseFields(job), await this.contentFields(job));
+      removeUnavailableContent(res2);
       return c.json(res2);
     }
     const record = await this.jobManager.store.get(id);
@@ -21900,7 +22011,8 @@ var DVMServer = class {
     if (!isJobOwner(c, record)) return c.json({ error: "Job not found" }, 404);
     await this.jobManager.ensureReceipt(record);
     const res = { job_id: record.id, status: record.status };
-    Object.assign(res, terminalResponseFields(record));
+    Object.assign(res, terminalResponseFields(record), await this.contentFields(record));
+    removeUnavailableContent(res);
     return c.json(res);
   }
   async handleGetMessages(c) {
@@ -21971,7 +22083,9 @@ var DVMServer = class {
             });
           });
         }
+        const fields = await this.contentFields(record);
         return streamSSE(c, async (stream) => {
+          if (fields.content_available === false) return;
           for (const msg of filtered) {
             await stream.writeSSE({ data: JSON.stringify(msg), event: "message" });
           }
@@ -21979,13 +22093,15 @@ var DVMServer = class {
       }
       if (isStreamableJobStore(store) && !isTerminal(record.status)) {
         const msgs = await store.getMessages(id, after);
-        if (msgs.length > 0) return c.json({ messages: msgs });
+        if (msgs.length > 0) return c.json(await this.messageFields(record, msgs));
       }
-      return c.json({ messages: filtered });
+      return c.json(await this.messageFields(record, filtered));
     }
     if (!isJobOwner(c, job)) return c.json({ error: "Job not found" }, 404);
     if (accept.includes("text/event-stream")) {
+      const fields = await this.contentFields(job);
       return streamSSE(c, async (stream) => {
+        if (fields.content_available === false) return;
         const existing = job.messages.filter((m) => m.seq > after);
         let yielded = false;
         for (const msg of existing) {
@@ -22014,7 +22130,7 @@ var DVMServer = class {
         });
       });
     }
-    return c.json({ messages: job.messages.filter((m) => m.seq > after) });
+    return c.json(await this.messageFields(job, job.messages.filter((m) => m.seq > after)));
   }
   jobNotActiveResponse(c) {
     return c.json(
@@ -22258,12 +22374,13 @@ function timingSafeEqualHex(a, b) {
   for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
   return diff === 0;
 }
-function buildSubmitResponse(c, job, jobToken) {
+function buildSubmitResponse(c, job, jobToken, contentFields) {
   const res = { job_id: job.id };
   if (jobToken) res.job_token = jobToken;
   if (job.status === "awaiting-input") res.status = "awaiting-input";
   else if (job.status === "completed") res.status = "completed";
-  Object.assign(res, terminalResponseFields(job));
+  Object.assign(res, terminalResponseFields(job), contentFields);
+  removeUnavailableContent(res);
   return c.json(res, job.status === "completed" ? 200 : 202);
 }
 function requestRecoveryStore(store) {
@@ -22319,7 +22436,7 @@ function requestNotAccepted(c, requestId) {
     409
   );
 }
-function buildRequestResultResponse(c, requestId, job) {
+function buildRequestResultResponse(c, requestId, job, contentFields) {
   const status = job.status === "working" ? "processing" : job.status;
   const res = {
     request_id: requestId,
@@ -22328,7 +22445,8 @@ function buildRequestResultResponse(c, requestId, job) {
   };
   if (job.requesterToken) res.job_token = job.requesterToken;
   if (job.paymentTransactionHash) res.transaction_hash = job.paymentTransactionHash;
-  Object.assign(res, terminalResponseFields(job));
+  Object.assign(res, terminalResponseFields(job), contentFields);
+  removeUnavailableContent(res);
   return c.json(res, isTerminal(job.status) ? 200 : 202);
 }
 function requestResultNotFound(c, requestId) {
@@ -22356,6 +22474,14 @@ async function awaitTerminalWork(job) {
   ]);
   clearTimeout(timer);
 }
+function removeUnavailableContent(fields) {
+  if (fields.content_available === false) {
+    delete fields.summary;
+    fields.has_artifacts = false;
+    delete fields.artifact_count;
+    delete fields.payload_in;
+  }
+}
 function terminalResponseFields(job) {
   const fields = {};
   if (job.status === "completed") {
@@ -22748,6 +22874,7 @@ export {
   handleCreditRequest,
   installAdminCashuRoutes,
   createAdminCashuNonceStore,
+  installAdminContentRoutes,
   X402ExactSettlementServer,
   X402ExactSettlementEvidenceMissingError,
   HostedSettlementReportObligations,