@dvmkit/sdk 0.4.0-rc.1 → 0.6.0-rc.1

package/dist/{chunk-O5AT6S5T.js → chunk-IV6Q7NRW.js}

@@ -1,191 +1,15 @@
 import {
-  StepCache,
+  ContentHoldError,
+  applyContentHoldMutation,
+  isTerminal
+} from "./chunk-AFV77S4C.js";
+import {
   loggers
-} from "./chunk-6DOGTAHA.js";
+} from "./chunk-QR2EF2NI.js";
 import {
   redactUrl
 } from "./chunk-FUJ36YDV.js";
 
-// src/sdk/server/job.ts
-function toJobRecord(job) {
-  return {
-    id: job.id,
-    tags: job.tags,
-    capability: job.capability,
-    input: job.input,
-    params: job.params,
-    requesterId: job.requesterId,
-    requesterTokenHash: job.requesterTokenHash,
-    requesterToken: job.requesterToken,
-    requestFingerprint: job.requestFingerprint,
-    requesterPubkey: job.requesterPubkey,
-    requestId: job.requestId,
-    authRequestPath: job.authRequestPath,
-    status: job.status,
-    summary: job.summary,
-    timingKnown: job.timingKnown,
-    endedBy: job.endedBy,
-    terminalAtMs: job.terminalAtMs,
-    callerWaitMs: job.callerWaitMs,
-    awaitingInputAtMs: job.awaitingInputAtMs,
-    messages: job.messages,
-    seq: job.seq,
-    paidMsats: job.paidMsats,
-    paymentMint: job.paymentMint,
-    paymentRail: job.paymentRail,
-    paymentTxHash: job.paymentTxHash,
-    paymentTransactionHash: job.paymentTransactionHash,
-    nativeAmount: job.nativeAmount,
-    nativeAsset: job.nativeAsset,
-    cashuFlow: job.cashuFlow,
-    costAmountMicro: job.costAmountMicro,
-    costCurrency: job.costCurrency,
-    costRevision: job.costRevision,
-    creditId: job.creditId,
-    drawId: job.drawId,
-    fundingReceipt: job.fundingReceipt,
-    fundingCredit: job.fundingCredit,
-    receivedProofs: job.receivedProofs,
-    pendingPaymentMsats: job.pendingPaymentMsats,
-    pendingMppChallengeIds: job.pendingMppChallengeIds,
-    pendingX402Nonce: job.pendingX402Nonce,
-    pendingX402AmountUsdcMicro: job.pendingX402AmountUsdcMicro,
-    pendingPaymentFiatMicro: job.pendingPaymentFiatMicro,
-    pendingPaymentFiatCurrency: job.pendingPaymentFiatCurrency,
-    askedTopUpMicro: job.askedTopUpMicro,
-    askedTopUpCurrency: job.askedTopUpCurrency,
-    topUpCapUnenforcedReason: job.topUpCapUnenforcedReason,
-    requiredMsats: job.requiredMsats,
-    receipt: job.receipt,
-    stepCache: job.stepCache.serialize(),
-    state: job.state,
-    createdAt: job.createdAt,
-    lastActivityAt: job.lastActivityAt
-  };
-}
-function fromJobRecord(record) {
-  return {
-    id: record.id,
-    tags: record.tags,
-    capability: record.capability,
-    input: record.input,
-    params: record.params,
-    requesterId: record.requesterId,
-    requesterTokenHash: record.requesterTokenHash,
-    status: record.status,
-    summary: record.summary,
-    timingKnown: record.timingKnown,
-    endedBy: record.endedBy,
-    terminalAtMs: record.terminalAtMs,
-    callerWaitMs: record.callerWaitMs,
-    awaitingInputAtMs: record.awaitingInputAtMs,
-    messages: [...record.messages],
-    seq: record.seq,
-    paidMsats: record.paidMsats,
-    paymentMint: record.paymentMint,
-    paymentRail: record.paymentRail,
-    paymentTxHash: record.paymentTxHash,
-    paymentTransactionHash: record.paymentTransactionHash,
-    nativeAmount: record.nativeAmount,
-    nativeAsset: record.nativeAsset,
-    cashuFlow: record.cashuFlow,
-    costAmountMicro: record.costAmountMicro,
-    costCurrency: record.costCurrency,
-    costRevision: record.costRevision,
-    creditId: record.creditId,
-    drawId: record.drawId,
-    fundingReceipt: record.fundingReceipt,
-    fundingCredit: record.fundingCredit,
-    receivedProofs: [...record.receivedProofs],
-    pendingPaymentMsats: record.pendingPaymentMsats,
-    pendingMppChallengeIds: record.pendingMppChallengeIds ? [...record.pendingMppChallengeIds] : void 0,
-    requesterToken: record.requesterToken,
-    requestFingerprint: record.requestFingerprint,
-    requesterPubkey: record.requesterPubkey,
-    requestId: record.requestId,
-    authRequestPath: record.authRequestPath,
-    pendingX402Nonce: record.pendingX402Nonce,
-    pendingX402AmountUsdcMicro: record.pendingX402AmountUsdcMicro,
-    pendingPaymentFiatMicro: record.pendingPaymentFiatMicro,
-    pendingPaymentFiatCurrency: record.pendingPaymentFiatCurrency,
-    askedTopUpMicro: record.askedTopUpMicro,
-    askedTopUpCurrency: record.askedTopUpCurrency,
-    topUpCapUnenforcedReason: record.topUpCapUnenforcedReason,
-    requiredMsats: record.requiredMsats,
-    receipt: record.receipt,
-    listeners: /* @__PURE__ */ new Set(),
-    abort: new AbortController(),
-    messageAppender: void 0,
-    messageAppenderTail: void 0,
-    stepCache: StepCache.deserialize(record.stepCache),
-    state: record.state,
-    pendingPrompts: /* @__PURE__ */ new Map(),
-    pendingPayment: null,
-    replayHighSeq: null,
-    replayProviderSkip: 0,
-    replayPaymentIndex: 0,
-    createdAt: record.createdAt,
-    lastActivityAt: record.lastActivityAt
-  };
-}
-function abortJob(job, reason) {
-  job.abort.abort(new JobCancelledError(reason));
-}
-var JobCancelledError = class extends Error {
-  constructor(message = "Job cancelled") {
-    super(message);
-    this.name = "JobCancelledError";
-  }
-};
-function providerMessage(job, type, content) {
-  if (job.replayProviderSkip > 0) {
-    job.replayProviderSkip--;
-    return;
-  }
-  const msg = localMessage(job, "provider", type, content);
-  if (type === "payment-request") {
-    const paymentRequest = content;
-    const pendingPaymentDelta = typeof paymentRequest.amount_msats === "number" ? paymentRequest.amount_msats : void 0;
-    const pendingMppChallengeIds = paymentRequest.tempo?.challenges?.map((challenge) => challenge.id).filter((id) => typeof id === "string");
-    job.messageAppender?.(msg, {
-      awaitingInput: job.status === "awaiting-input",
-      pendingPaymentDelta,
-      pendingMppChallengeIds,
-      pendingX402Nonce: typeof paymentRequest.x402?.nonce === "string" ? paymentRequest.x402.nonce : void 0,
-      pendingX402AmountUsdcMicro: typeof paymentRequest.x402?.required_usdc_micro === "string" ? paymentRequest.x402.required_usdc_micro : void 0,
-      // read off the job rather than the content — the fiat envelope
-      // is ledger state, not part of the wire shape, and `requestPayment` has
-      // already pinned it on the job by the time this fires (same ordering the
-      // `pendingPaymentMsats` comment above describes).
-      pendingPaymentFiatMicro: job.pendingPaymentFiatMicro,
-      pendingPaymentFiatCurrency: job.pendingPaymentFiatCurrency
-    });
-    return;
-  }
-  job.messageAppender?.(msg, type === "prompt" ? { awaitingInput: job.status === "awaiting-input" } : void 0);
-}
-function localMessage(job, from, type, content) {
-  job.seq++;
-  const msg = {
-    seq: job.seq,
-    from,
-    timestamp: Math.floor(Date.now() / 1e3),
-    type,
-    content
-  };
-  job.messages.push(msg);
-  for (const listener of job.listeners) {
-    listener(msg);
-  }
-  return msg;
-}
-function isTerminal(status) {
-  return status === "completed" || status === "failed" || status === "cancelled";
-}
-function isYieldMessage(msg) {
-  return msg.type === "prompt" || msg.type === "payment-request" || msg.type === "working" || msg.type === "complete" || msg.type === "cancel";
-}
-
 // src/sdk/server/job-store.ts
 function accumulateAskedTopUp(prior, ask) {
   const poisoned = (reason) => ({
@@ -219,6 +43,7 @@ function isStaleJobReapable(store) {
 
 // src/sdk/server/memory-job-store.ts
 var MemoryJobStore = class {
+  contentHolds = /* @__PURE__ */ new Map();
   data = /* @__PURE__ */ new Map();
   messages = /* @__PURE__ */ new Map();
   nextSeq = /* @__PURE__ */ new Map();
@@ -290,6 +115,7 @@ var MemoryJobStore = class {
     }
     const snapshot = structuredClone(record);
     if (existing) snapshot.createdAt = existing.createdAt;
+    if (existing && isTerminal(existing.status)) snapshot.lastActivityAt = existing.lastActivityAt;
     if (existing?.receipt) snapshot.receipt = existing.receipt;
     snapshot.timingKnown = existing ? existing.timingKnown ?? false : record.timingKnown ?? true;
     applyTiming(snapshot, existing, Date.now());
@@ -302,6 +128,7 @@ var MemoryJobStore = class {
     return Promise.resolve();
   }
   delete(id) {
+    this.contentHolds.delete(id);
     this.data.delete(id);
     this.messages.delete(id);
     this.nextSeq.delete(id);
@@ -317,7 +144,7 @@ var MemoryJobStore = class {
   }
   redactJob(args) {
     const record = this.data.get(args.jobId);
-    if (!record || record.redactedAt !== void 0 || !isTerminal(record.status) || record.lastActivityAt !== args.expectedLastActivityAt) {
+    if (!record || record.redactedAt !== void 0 || !isTerminal(record.status) || this.contentHolds.get(args.jobId)?.holds.some((hold) => hold.cleared_at === null) || record.lastActivityAt !== args.expectedLastActivityAt) {
       return Promise.resolve(false);
     }
     record.input = "";
@@ -340,6 +167,17 @@ var MemoryJobStore = class {
     this.messages.delete(args.jobId);
     return Promise.resolve(true);
   }
+  getContentSnapshot(jobId) {
+    const job = this.data.get(jobId);
+    return Promise.resolve(job ? structuredClone({ job, history: this.contentHolds.get(jobId) ?? { holds: [], events: [] } }) : void 0);
+  }
+  mutateContentHold(jobId, mutation) {
+    const job = this.data.get(jobId);
+    if (!job) return Promise.reject(new ContentHoldError("job_not_found"));
+    const history = applyContentHoldMutation(job, this.contentHolds.get(jobId) ?? { holds: [], events: [] }, mutation);
+    this.contentHolds.set(jobId, history);
+    return Promise.resolve(structuredClone(history));
+  }
   claimReceiptSeq(jobId) {
     if (!this.data.has(jobId)) {
       return Promise.reject(new Error(`claimReceiptSeq: job ${jobId} not found`));
@@ -394,7 +232,7 @@ var MemoryJobStore = class {
       record.askedTopUpCurrency = asked.currency;
       record.topUpCapUnenforcedReason = asked.reason;
     }
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     if (seq > record.seq) record.seq = seq;
     this.notify(jobId, fullMessage);
     return Promise.resolve(seq);
@@ -407,7 +245,7 @@ var MemoryJobStore = class {
     const seq = this.allocateSeq(jobId);
     const fullMessage = { ...message, seq };
     this.messagesFor(jobId).push({ message: fullMessage, status: "pending-verification" });
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     if (seq > record.seq) record.seq = seq;
     this.fireNotifyOnly(jobId);
     return Promise.resolve(seq);
@@ -456,7 +294,7 @@ var MemoryJobStore = class {
         record.pendingX402AmountUsdcMicro = void 0;
       }
     }
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     this.notify(jobId, stored.message);
     return Promise.resolve({
       counters: snapshotCounters(record),
@@ -521,7 +359,7 @@ var MemoryJobStore = class {
     if (record?.status !== "awaiting-input") return Promise.resolve(false);
     applyTiming(record, structuredClone(record), Date.now(), "processing");
     record.status = "processing";
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     return Promise.resolve(true);
   }
   async tryReactivationLock(jobId, fn) {
@@ -704,14 +542,6 @@ function mergeSignals(a, b) {
 }
 
 export {
-  toJobRecord,
-  fromJobRecord,
-  abortJob,
-  JobCancelledError,
-  providerMessage,
-  localMessage,
-  isTerminal,
-  isYieldMessage,
   accumulateAskedTopUp,
   UNCAPPABLE_ASK_TOTAL,
   isJobRetentionStore,

package/dist/{chunk-W2EQGDF5.js → chunk-LE74UEV7.js}

@@ -1,10 +1,9 @@
 import {
   fundingReachableAt,
-  info,
   listCredits,
   maxAdvertisedMicro,
   withinAdvertisedTolerance
-} from "./chunk-2VGWYG4P.js";
+} from "./chunk-B2IROPQF.js";
 import {
   authorizeProtectedRemoval,
   isValidEvmPrivateKey,
@@ -31,7 +30,7 @@ import {
   getLastKnownBtcRate,
   msatsToUsdc,
   usdcToMsats
-} from "./chunk-3MHE725Z.js";
+} from "./chunk-PAIM66YA.js";
 import {
   X402_CHANNELS_FILE,
   ensureConfigDir,
@@ -72,6 +71,42 @@ function x402WrongAssetHint(asset) {
   return `This rail reads only ${asset.label} (${asset.address}) on ${asset.networkLabel}. ${wrongToken} USDC on a different chain is invisible here too \u2014 this wallet reads ${asset.networkLabel} alone. If you funded the wrong one, swap it to ${asset.label} on ${asset.networkLabel}, or bridge the funds across to ${asset.networkLabel}; either way they land where this rail can spend them.`;
 }
 
+// src/lib/output.ts
+import { writeSync } from "fs";
+var _traceId = null;
+function setOutputTraceId(id) {
+  _traceId = id;
+}
+function getOutputTraceId() {
+  return _traceId;
+}
+function json(data) {
+  const out = _traceId !== null && typeof data === "object" && data !== null && !Array.isArray(data) && !("trace_id" in data) ? { trace_id: _traceId, ...data } : data;
+  writeAllSync(1, JSON.stringify(out) + "\n");
+}
+function info(msg) {
+  writeAllSync(2, msg + "\n");
+}
+function raw(msg) {
+  writeAllSync(1, msg + "\n");
+}
+function progress(event) {
+  writeAllSync(2, JSON.stringify(event) + "\n");
+}
+function writeAllSync(fd, text) {
+  const buf = Buffer.from(text, "utf8");
+  let offset = 0;
+  while (offset < buf.length) {
+    try {
+      offset += writeSync(fd, buf, offset, buf.length - offset);
+    } catch (err) {
+      const code = err.code;
+      if (code === "EAGAIN" || code === "EINTR") continue;
+      throw err;
+    }
+  }
+}
+
 // src/lib/btc-rate.ts
 async function resolveBtcUsdRate(purpose) {
   try {
@@ -600,18 +635,18 @@ function ensureX402ChannelFile() {
 function loadFile() {
   if (!existsSync(X402_CHANNELS_FILE)) return { ...EMPTY, channels: {}, pending: [], exact: [] };
   try {
-    const raw = JSON.parse(readFileSync(X402_CHANNELS_FILE, "utf8"));
-    if (raw.version !== 1 || !raw.channels || typeof raw.channels !== "object" || Array.isArray(raw.channels) || !Array.isArray(raw.pending)) {
+    const raw2 = JSON.parse(readFileSync(X402_CHANNELS_FILE, "utf8"));
+    if (raw2.version !== 1 || !raw2.channels || typeof raw2.channels !== "object" || Array.isArray(raw2.channels) || !Array.isArray(raw2.pending)) {
       throw new Error("unsupported x402 channel store shape");
     }
     return {
       version: 1,
-      channels: raw.channels,
-      pending: raw.pending,
+      channels: raw2.channels,
+      pending: raw2.pending,
       // Tolerated rather than required, unlike its two siblings: every file
       // written before lacks the key, and failing closed on it would
       // read as a corrupt journal on a store that is perfectly intact.
-      exact: Array.isArray(raw.exact) ? raw.exact : []
+      exact: Array.isArray(raw2.exact) ? raw2.exact : []
     };
   } catch (cause) {
     throw new DvmError(
@@ -986,6 +1021,12 @@ async function priceableRate(btcRate) {
 export {
   resolveX402Asset,
   x402WrongAssetHint,
+  setOutputTraceId,
+  getOutputTraceId,
+  json,
+  info,
+  raw,
+  progress,
   resolveBtcUsdRate,
   tryResolveBtcUsdRate,
   staleRateNotice,

package/dist/{chunk-CE7XEHYC.js → chunk-N5RZ5HVB.js}

@@ -4,7 +4,7 @@ import {
   signedRequestHeaderMatchesDomain,
   signedRequestStatementHeader,
   testOnlySignedRequestDomain
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-RCM3P2HE.js";
 import {
   diagnosticConsole
 } from "./chunk-ETXDTUJO.js";

package/dist/chunk-OFVV37XC.js

@@ -0,0 +1,57 @@
+// src/lib/cast-auth/canonical-json.ts
+function canonicalize(value) {
+  return JSON.stringify(sortDeep(value));
+}
+function canonicaliseForSigning(value) {
+  return new TextEncoder().encode(canonicalize(value));
+}
+function sortDeep(value) {
+  if (value === null) return null;
+  if (typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new TypeError(`canonicalize: non-finite number is not JSON-serialisable`);
+    }
+    return value;
+  }
+  if (Array.isArray(value)) return value.map(sortDeep);
+  if (typeof value === "object") {
+    const sorted = {};
+    for (const key of Object.keys(value).sort()) {
+      const v = value[key];
+      if (v === void 0) continue;
+      sorted[key] = sortDeep(v);
+    }
+    return sorted;
+  }
+  throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);
+}
+
+// src/lib/cast-auth/verify.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+function verifyCanonicalSignedRequest(payload, signatureHex, pubkeyHex) {
+  if (!/^[0-9a-f]{64}$/i.test(pubkeyHex) || !/^[0-9a-f]{128}$/i.test(signatureHex)) {
+    return false;
+  }
+  const data = canonicaliseForSigning(payload);
+  const signature = hexToBytes(signatureHex);
+  const pubkey = hexToBytes(pubkeyHex);
+  try {
+    return schnorr.verify(signature, data, pubkey);
+  } catch {
+    return false;
+  }
+}
+function hexToBytes(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) {
+    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return out;
+}
+
+export {
+  canonicalize,
+  canonicaliseForSigning,
+  verifyCanonicalSignedRequest
+};