@dvmkit/sdk 0.4.0-rc.1 → 0.6.0-rc.1

package/dist/{chunk-5LR6P7WN.js → chunk-OQA7IHI4.js}

@@ -1,8 +1,14 @@
 import {
+  computeResultHash,
   costAnchor,
   formatUsd,
-  msatsToUsd
-} from "./chunk-3MHE725Z.js";
+  isDrainReceipt,
+  isFundingReceipt,
+  msatsToUsd,
+  verifyDrainReceipt,
+  verifyFundingReceipt,
+  verifyReceipt
+} from "./chunk-PAIM66YA.js";
 import {
   AGENT_MNEMONIC_FILE,
   BUILDER_CONFIG_DIR,
@@ -13,7 +19,7 @@ import {
 } from "./chunk-CZULM42S.js";
 import {
   canonicaliseForSigning
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-OFVV37XC.js";
 import {
   callerLoggers
 } from "./chunk-66HGCPBU.js";
@@ -947,6 +953,112 @@ function generateEphemeralReceiptKey() {
   return { secret: bytesToHex(secretKey), pubkey: bytesToHex(publicKey) };
 }
 
+// src/lib/wallet-agent/keypair.ts
+import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
+var PRIVKEY_HEX_RE = /^[0-9a-f]{64}$/i;
+function derivePubkeyFromPrivkey(privkey) {
+  if (!PRIVKEY_HEX_RE.test(privkey)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey must be 64 hex characters (32 bytes).",
+      "Provide a valid secp256k1 private key as a 64-char hex string."
+    );
+  }
+  const bytes = hexToBytes2(privkey);
+  if (!secp256k12.utils.isValidSecretKey(bytes)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey is not a valid secp256k1 scalar (zero or out of curve order).",
+      "Generate a fresh key with: dvm wallet init"
+    );
+  }
+  const pub = secp256k12.getPublicKey(bytes);
+  return bytesToHex2(pub);
+}
+function bytesToHex2(bytes) {
+  return Buffer.from(bytes).toString("hex");
+}
+function hexToBytes2(hex) {
+  return Uint8Array.from(Buffer.from(hex, "hex"));
+}
+
+// src/lib/wallet-agent/sign.ts
+import { schnorr as schnorr2 } from "@noble/curves/secp256k1.js";
+var PUBKEY_COMPRESSED_HEX_RE = /^0[23][0-9a-f]{64}$/i;
+var PUBKEY_XONLY_HEX_RE = /^[0-9a-f]{64}$/i;
+var SIG_HEX_RE = /^[0-9a-f]{128}$/i;
+function signChallenge(privkeyHex, challenge) {
+  if (!PRIVKEY_HEX_RE.test(privkeyHex)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey must be 64 hex characters (32 bytes).",
+      "Provide a valid secp256k1 private key as a 64-char hex string."
+    );
+  }
+  if (challenge.length !== 32) {
+    throw new DvmError(
+      "invalid_challenge",
+      `Challenge must be exactly 32 bytes; got ${challenge.length}.`,
+      "Pass the SHA-256 digest output (32 bytes)."
+    );
+  }
+  const sig = schnorr2.sign(challenge, hexToBytes3(privkeyHex));
+  return bytesToHex3(sig);
+}
+function verifyChallenge(pubkeyHex, challenge, sigHex) {
+  if (!SIG_HEX_RE.test(sigHex)) return false;
+  if (challenge.length !== 32) return false;
+  let xonly;
+  if (PUBKEY_COMPRESSED_HEX_RE.test(pubkeyHex)) {
+    xonly = hexToBytes3(pubkeyHex.slice(2));
+  } else if (PUBKEY_XONLY_HEX_RE.test(pubkeyHex)) {
+    xonly = hexToBytes3(pubkeyHex);
+  } else {
+    return false;
+  }
+  try {
+    return schnorr2.verify(hexToBytes3(sigHex), challenge, xonly);
+  } catch {
+    return false;
+  }
+}
+function hexToBytes3(hex) {
+  return Uint8Array.from(Buffer.from(hex, "hex"));
+}
+function bytesToHex3(bytes) {
+  return Buffer.from(bytes).toString("hex");
+}
+
+// src/lib/cashu/admin-auth.ts
+import { randomBytes } from "crypto";
+import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+var ADMIN_AUTH_NONCE_TTL_SECONDS = 300;
+var ADMIN_AUTH_CLOCK_SKEW_SECONDS = 30;
+var ADMIN_STATE_UNAVAILABLE = "admin_state_unavailable";
+function buildAdminChallenge(args) {
+  const msg = `dvmkit-admin:${args.method}:${args.path}:${args.dvmId}:${args.nonceHex}:${args.unixSeconds}`;
+  return sha2562(new TextEncoder().encode(msg));
+}
+function buildAdminAuthHeader(args) {
+  const nowMs = args.now ? args.now() : Date.now();
+  const unixSeconds = Math.floor(nowMs / 1e3);
+  const nonceBytes = args.randomNonce ? args.randomNonce() : Uint8Array.from(randomBytes(16));
+  const nonceHex = Buffer.from(nonceBytes).toString("hex");
+  const challenge = buildAdminChallenge({
+    method: args.method,
+    path: args.path,
+    dvmId: args.dvmId,
+    nonceHex,
+    unixSeconds
+  });
+  const sigHex = signChallenge(args.privkeyHex, challenge);
+  return {
+    header: `P2PK ${nonceHex}.${unixSeconds}.${sigHex}`,
+    nonceHex,
+    unixSeconds
+  };
+}
+
 // src/lib/builder-identity.ts
 import {
   chmodSync as chmodSync3,
@@ -958,8 +1070,8 @@ import {
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync5
 } from "fs";
-import { schnorr as schnorr2 } from "@noble/curves/secp256k1.js";
-import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
+import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
 
 // src/lib/builder-store.ts
 import {
@@ -1064,8 +1176,8 @@ function migrateV1Store(parsed) {
 
 // src/lib/builder-identity.ts
 function generateIdentity() {
-  const { secretKey, publicKey } = schnorr2.keygen();
-  return { pubkey: bytesToHex2(publicKey), secret: bytesToHex2(secretKey) };
+  const { secretKey, publicKey } = schnorr3.keygen();
+  return { pubkey: bytesToHex4(publicKey), secret: bytesToHex4(secretKey) };
 }
 function loadIdentitySecret() {
   if (!existsSync5(BUILDER_KEY_FILE)) return null;
@@ -1108,7 +1220,7 @@ function writeIdentity(keypair, opts = {}) {
   setIdentityPubkey(keypair.pubkey);
 }
 function hashCapabilities(capabilities) {
-  return bytesToHex2(sha2562(canonicaliseForSigning(capabilities)));
+  return bytesToHex4(sha2563(canonicaliseForSigning(capabilities)));
 }
 function buildAttestation(args) {
   return {
@@ -1121,14 +1233,14 @@ function buildAttestation(args) {
   };
 }
 function signAttestation(payload, secretHex) {
-  const secretBytes = hexToBytes2(secretHex);
+  const secretBytes = hexToBytes4(secretHex);
   const canonicalBytes = canonicaliseForSigning(payload);
-  return bytesToHex2(schnorr2.sign(canonicalBytes, secretBytes));
+  return bytesToHex4(schnorr3.sign(canonicalBytes, secretBytes));
 }
 function verifyAttestation(payload, signatureHex, pubkeyHex) {
   try {
     const canonicalBytes = canonicaliseForSigning(payload);
-    return schnorr2.verify(hexToBytes2(signatureHex), canonicalBytes, hexToBytes2(pubkeyHex));
+    return schnorr3.verify(hexToBytes4(signatureHex), canonicalBytes, hexToBytes4(pubkeyHex));
   } catch {
     return false;
   }
@@ -1151,12 +1263,12 @@ function warnAndTightenLooseKeyMode() {
   } catch {
   }
 }
-function bytesToHex2(bytes) {
+function bytesToHex4(bytes) {
   let s = "";
   for (const b of bytes) s += b.toString(16).padStart(2, "0");
   return s;
 }
-function hexToBytes2(hex) {
+function hexToBytes4(hex) {
   if (hex.length % 2 !== 0) {
     throw new Error(`hex string has odd length: ${String(hex.length)}`);
   }
@@ -1167,82 +1279,6 @@ function hexToBytes2(hex) {
   return out;
 }
 
-// src/lib/receipt.ts
-import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
-import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
-import { bytesToHex as bytesToHex3, hexToBytes as hexToBytes3 } from "@noble/hashes/utils.js";
-function computeResultHash(summary, artifactContents) {
-  const artifactHashes = artifactContents.map(
-    (content) => bytesToHex3(sha2563(canonicaliseForSigning(content)))
-  );
-  return bytesToHex3(
-    sha2563(
-      canonicaliseForSigning({
-        summary: summary ?? null,
-        artifact_hashes: artifactHashes
-      })
-    )
-  );
-}
-function signReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function verifyReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-function isSignedJobReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  const paid = r.paid;
-  return r.v === 1 && typeof r.job_id === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.capability === "string" && (r.outcome === "completed" || r.outcome === "failed" || r.outcome === "cancelled") && typeof r.seq === "number" && typeof r.issued_at === "number" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string" && !!paid && typeof paid === "object" && !Array.isArray(paid) && typeof paid.msats === "number";
-}
-function signDrainReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function signFundingReceipt(unsigned, secretHex) {
-  const bytes = canonicaliseForSigning(unsigned);
-  const signature = bytesToHex3(schnorr3.sign(bytes, hexToBytes3(secretHex)));
-  return { ...unsigned, signature };
-}
-function isFundingReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  return r.v === 1 && r.kind === "credit_funding" && typeof r.credit_id === "string" && typeof r.fund_id === "string" && typeof r.funded_micro === "number" && typeof r.balance_after_micro === "number" && typeof r.ledger_seq === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
-}
-function verifyFundingReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-function isDrainReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const r = value;
-  return r.v === 1 && r.kind === "credit_drain" && typeof r.credit_id === "string" && typeof r.drain_id === "string" && (r.event === "requested" || r.event === "parked" || r.event === "picked_up" || r.event === "sent" || r.event === "released") && typeof r.method === "string" && typeof r.amount_micro === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
-}
-function verifyDrainReceipt(receipt) {
-  try {
-    const { signature, ...unsigned } = receipt;
-    const bytes = canonicaliseForSigning(unsigned);
-    return schnorr3.verify(hexToBytes3(signature), bytes, hexToBytes3(receipt.receipt_pubkey));
-  } catch {
-    return false;
-  }
-}
-
 // src/lib/receipt-verify.ts
 function attestedDvmIdentity(builder) {
   const builderPubkey = authenticatedBuilderPubkey(builder);
@@ -1532,112 +1568,6 @@ function parseTraceparent(header) {
   return { traceId, parentSpanId, flags: parseInt(flagsHex, 16) };
 }
 
-// src/lib/wallet-agent/keypair.ts
-import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
-var PRIVKEY_HEX_RE = /^[0-9a-f]{64}$/i;
-function derivePubkeyFromPrivkey(privkey) {
-  if (!PRIVKEY_HEX_RE.test(privkey)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey must be 64 hex characters (32 bytes).",
-      "Provide a valid secp256k1 private key as a 64-char hex string."
-    );
-  }
-  const bytes = hexToBytes4(privkey);
-  if (!secp256k12.utils.isValidSecretKey(bytes)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey is not a valid secp256k1 scalar (zero or out of curve order).",
-      "Generate a fresh key with: dvm wallet init"
-    );
-  }
-  const pub = secp256k12.getPublicKey(bytes);
-  return bytesToHex4(pub);
-}
-function bytesToHex4(bytes) {
-  return Buffer.from(bytes).toString("hex");
-}
-function hexToBytes4(hex) {
-  return Uint8Array.from(Buffer.from(hex, "hex"));
-}
-
-// src/lib/wallet-agent/sign.ts
-import { schnorr as schnorr4 } from "@noble/curves/secp256k1.js";
-var PUBKEY_COMPRESSED_HEX_RE = /^0[23][0-9a-f]{64}$/i;
-var PUBKEY_XONLY_HEX_RE = /^[0-9a-f]{64}$/i;
-var SIG_HEX_RE = /^[0-9a-f]{128}$/i;
-function signChallenge(privkeyHex, challenge) {
-  if (!PRIVKEY_HEX_RE.test(privkeyHex)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey must be 64 hex characters (32 bytes).",
-      "Provide a valid secp256k1 private key as a 64-char hex string."
-    );
-  }
-  if (challenge.length !== 32) {
-    throw new DvmError(
-      "invalid_challenge",
-      `Challenge must be exactly 32 bytes; got ${challenge.length}.`,
-      "Pass the SHA-256 digest output (32 bytes)."
-    );
-  }
-  const sig = schnorr4.sign(challenge, hexToBytes5(privkeyHex));
-  return bytesToHex5(sig);
-}
-function verifyChallenge(pubkeyHex, challenge, sigHex) {
-  if (!SIG_HEX_RE.test(sigHex)) return false;
-  if (challenge.length !== 32) return false;
-  let xonly;
-  if (PUBKEY_COMPRESSED_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes5(pubkeyHex.slice(2));
-  } else if (PUBKEY_XONLY_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes5(pubkeyHex);
-  } else {
-    return false;
-  }
-  try {
-    return schnorr4.verify(hexToBytes5(sigHex), challenge, xonly);
-  } catch {
-    return false;
-  }
-}
-function hexToBytes5(hex) {
-  return Uint8Array.from(Buffer.from(hex, "hex"));
-}
-function bytesToHex5(bytes) {
-  return Buffer.from(bytes).toString("hex");
-}
-
-// src/lib/cashu/admin-auth.ts
-import { randomBytes } from "crypto";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
-var ADMIN_AUTH_NONCE_TTL_SECONDS = 300;
-var ADMIN_AUTH_CLOCK_SKEW_SECONDS = 30;
-var ADMIN_STATE_UNAVAILABLE = "admin_state_unavailable";
-function buildAdminChallenge(args) {
-  const msg = `dvmkit-admin:${args.method}:${args.path}:${args.dvmId}:${args.nonceHex}:${args.unixSeconds}`;
-  return sha2564(new TextEncoder().encode(msg));
-}
-function buildAdminAuthHeader(args) {
-  const nowMs = args.now ? args.now() : Date.now();
-  const unixSeconds = Math.floor(nowMs / 1e3);
-  const nonceBytes = args.randomNonce ? args.randomNonce() : Uint8Array.from(randomBytes(16));
-  const nonceHex = Buffer.from(nonceBytes).toString("hex");
-  const challenge = buildAdminChallenge({
-    method: args.method,
-    path: args.path,
-    dvmId: args.dvmId,
-    nonceHex,
-    unixSeconds
-  });
-  const sigHex = signChallenge(args.privkeyHex, challenge);
-  return {
-    header: `P2PK ${nonceHex}.${unixSeconds}.${sigHex}`,
-    nonceHex,
-    unixSeconds
-  };
-}
-
 // src/lib/monotonic-clock.ts
 function createMonotonicClock() {
   let anchorWallMs = Date.now();
@@ -1732,6 +1662,14 @@ export {
   receiptPubkeyFromSecret,
   deriveReceiptKeypair,
   generateEphemeralReceiptKey,
+  PRIVKEY_HEX_RE,
+  derivePubkeyFromPrivkey,
+  verifyChallenge,
+  ADMIN_AUTH_NONCE_TTL_SECONDS,
+  ADMIN_AUTH_CLOCK_SKEW_SECONDS,
+  ADMIN_STATE_UNAVAILABLE,
+  buildAdminChallenge,
+  buildAdminAuthHeader,
   generateIdentity,
   loadIdentitySecret,
   writeIdentity,
@@ -1739,16 +1677,6 @@ export {
   buildAttestation,
   signAttestation,
   verifyAttestation,
-  computeResultHash,
-  signReceipt,
-  verifyReceipt,
-  isSignedJobReceipt,
-  signDrainReceipt,
-  signFundingReceipt,
-  isFundingReceipt,
-  verifyFundingReceipt,
-  isDrainReceipt,
-  verifyDrainReceipt,
   attestedDvmIdentity,
   authenticatedBuilderPubkey,
   verifyJobReceipt,
@@ -1765,13 +1693,5 @@ export {
   receiptFailureDetail,
   isPublicRequestId,
   parseTraceparent,
-  PRIVKEY_HEX_RE,
-  derivePubkeyFromPrivkey,
-  verifyChallenge,
-  ADMIN_AUTH_NONCE_TTL_SECONDS,
-  ADMIN_AUTH_CLOCK_SKEW_SECONDS,
-  ADMIN_STATE_UNAVAILABLE,
-  buildAdminChallenge,
-  buildAdminAuthHeader,
   createMonotonicClock
 };

package/dist/{chunk-3MHE725Z.js → chunk-PAIM66YA.js}

@@ -2,6 +2,9 @@ import {
   BTC_RATE_FILE,
   ensureConfigSubdir
 } from "./chunk-CZULM42S.js";
+import {
+  canonicaliseForSigning
+} from "./chunk-OFVV37XC.js";
 import {
   formatFiat
 } from "./chunk-AT6V3SY7.js";
@@ -232,6 +235,82 @@ async function fetchFromApi() {
   return rate;
 }
 
+// src/lib/receipt.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { bytesToHex, hexToBytes } from "@noble/hashes/utils.js";
+function computeResultHash(summary, artifactContents) {
+  const artifactHashes = artifactContents.map(
+    (content) => bytesToHex(sha256(canonicaliseForSigning(content)))
+  );
+  return bytesToHex(
+    sha256(
+      canonicaliseForSigning({
+        summary: summary ?? null,
+        artifact_hashes: artifactHashes
+      })
+    )
+  );
+}
+function signReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function verifyReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+function isSignedJobReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  const paid = r.paid;
+  return r.v === 1 && typeof r.job_id === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.capability === "string" && (r.outcome === "completed" || r.outcome === "failed" || r.outcome === "cancelled") && typeof r.seq === "number" && typeof r.issued_at === "number" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string" && !!paid && typeof paid === "object" && !Array.isArray(paid) && typeof paid.msats === "number";
+}
+function signDrainReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function signFundingReceipt(unsigned, secretHex) {
+  const bytes = canonicaliseForSigning(unsigned);
+  const signature = bytesToHex(schnorr.sign(bytes, hexToBytes(secretHex)));
+  return { ...unsigned, signature };
+}
+function isFundingReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  return r.v === 1 && r.kind === "credit_funding" && typeof r.credit_id === "string" && typeof r.fund_id === "string" && typeof r.funded_micro === "number" && typeof r.balance_after_micro === "number" && typeof r.ledger_seq === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
+}
+function verifyFundingReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+function isDrainReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const r = value;
+  return r.v === 1 && r.kind === "credit_drain" && typeof r.credit_id === "string" && typeof r.drain_id === "string" && (r.event === "requested" || r.event === "parked" || r.event === "picked_up" || r.event === "sent" || r.event === "released") && typeof r.method === "string" && typeof r.amount_micro === "number" && typeof r.issued_at === "number" && typeof r.caller_pubkey === "string" && typeof r.dvm_id === "string" && typeof r.dvm === "string" && typeof r.receipt_pubkey === "string" && typeof r.signature === "string";
+}
+function verifyDrainReceipt(receipt) {
+  try {
+    const { signature, ...unsigned } = receipt;
+    const bytes = canonicaliseForSigning(unsigned);
+    return schnorr.verify(hexToBytes(signature), bytes, hexToBytes(receipt.receipt_pubkey));
+  } catch {
+    return false;
+  }
+}
+
 export {
   IMPLICIT_CREDIT_TTL_MS,
   COINGECKO_SIMPLE_PRICE_URL,
@@ -254,5 +333,15 @@ export {
   fetchBtcUsdRate,
   getLastKnownBtcRate,
   formatStaleness,
-  formatAmountBestEffort
+  formatAmountBestEffort,
+  computeResultHash,
+  signReceipt,
+  verifyReceipt,
+  isSignedJobReceipt,
+  signDrainReceipt,
+  signFundingReceipt,
+  isFundingReceipt,
+  verifyFundingReceipt,
+  isDrainReceipt,
+  verifyDrainReceipt
 };

package/dist/{chunk-6DOGTAHA.js → chunk-QR2EF2NI.js}

@@ -10,39 +10,6 @@ import {
   projectSpanRow
 } from "./chunk-ETXDTUJO.js";
 
-// src/sdk/step-cache.ts
-var StepCache = class _StepCache {
-  cache = /* @__PURE__ */ new Map();
-  has(id) {
-    return this.cache.has(id);
-  }
-  get(id) {
-    return this.getRecord(id).value;
-  }
-  getRecord(id) {
-    const record = this.cache.get(id);
-    if (record === void 0) throw new Error(`StepCache: no cached result for step "${id}"`);
-    return record;
-  }
-  set(id, value, costs) {
-    this.cache.set(id, {
-      id,
-      value,
-      ...costs !== void 0 && costs.length > 0 ? { costs: costs.map(({ amount, currency }) => ({ amount, currency })) } : {}
-    });
-  }
-  serialize() {
-    return [...this.cache.values()];
-  }
-  static deserialize(records) {
-    const cache = new _StepCache();
-    for (const { id, value, costs } of records) {
-      cache.set(id, value, costs);
-    }
-    return cache;
-  }
-};
-
 // src/sdk/logger.ts
 function createConsoleLogger(_jobId) {
   return {
@@ -373,15 +340,15 @@ async function withSpan(opts, fn) {
 
 // src/observability/datasets.ts
 var SPANS_DATASETS = [
-  { name: "platform", retentionDays: 90 },
-  { name: "cashu", retentionDays: 90 },
-  { name: "lightning", retentionDays: 90 },
-  { name: "stripe", retentionDays: 90 },
-  { name: "x402", retentionDays: 90 },
-  { name: "tempo", retentionDays: 90 },
-  { name: "isolate", retentionDays: 90 },
-  { name: "audit", retentionDays: 365 },
-  { name: "cron", retentionDays: 30 }
+  { name: "platform", retentionDays: 730 },
+  { name: "cashu", retentionDays: 730 },
+  { name: "lightning", retentionDays: 730 },
+  { name: "stripe", retentionDays: 730 },
+  { name: "x402", retentionDays: 730 },
+  { name: "tempo", retentionDays: 730 },
+  { name: "isolate", retentionDays: 730 },
+  { name: "audit", retentionDays: 730 },
+  { name: "cron", retentionDays: 730 }
 ];
 var DATASET_NAMES = new Set(SPANS_DATASETS.map((d) => d.name));
 
@@ -485,7 +452,6 @@ function buildNoopLoggers() {
 }
 
 export {
-  StepCache,
   createConsoleLogger,
   createStdoutLogger,
   createNoopLogger,