@dvmkit/sdk 0.4.0-rc.1 → 0.6.0-rc.1

package/dist/{chunk-KXZUCCEY.js → chunk-RCM3P2HE.js}

@@ -1,3 +1,7 @@
+import {
+  canonicaliseForSigning
+} from "./chunk-OFVV37XC.js";
+
 // src/sdk/types.ts
 function isZodSchema(value) {
   return typeof value === "object" && value !== null && "_zod" in value && "parse" in value && "safeParse" in value;
@@ -10,59 +14,7 @@ var RAIL_REFUNDABLE = {
 var DEFAULT_CREDIT_MIN = "$0.10";
 var DEFAULT_CREDIT_MAX = "$5.00";
 var DEFAULT_CREDIT_TTL_SECONDS = 30 * 24 * 60 * 60;
-var DEFAULT_JOB_RETENTION_DAYS = 90;
-
-// src/lib/cast-auth/canonical-json.ts
-function canonicalize(value) {
-  return JSON.stringify(sortDeep(value));
-}
-function canonicaliseForSigning(value) {
-  return new TextEncoder().encode(canonicalize(value));
-}
-function sortDeep(value) {
-  if (value === null) return null;
-  if (typeof value === "string" || typeof value === "boolean") return value;
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) {
-      throw new TypeError(`canonicalize: non-finite number is not JSON-serialisable`);
-    }
-    return value;
-  }
-  if (Array.isArray(value)) return value.map(sortDeep);
-  if (typeof value === "object") {
-    const sorted = {};
-    for (const key of Object.keys(value).sort()) {
-      const v = value[key];
-      if (v === void 0) continue;
-      sorted[key] = sortDeep(v);
-    }
-    return sorted;
-  }
-  throw new TypeError(`canonicalize: unsupported value of type ${typeof value}`);
-}
-
-// src/lib/cast-auth/verify.ts
-import { schnorr } from "@noble/curves/secp256k1.js";
-function verifyCanonicalSignedRequest(payload, signatureHex, pubkeyHex) {
-  if (!/^[0-9a-f]{64}$/i.test(pubkeyHex) || !/^[0-9a-f]{128}$/i.test(signatureHex)) {
-    return false;
-  }
-  const data = canonicaliseForSigning(payload);
-  const signature = hexToBytes(signatureHex);
-  const pubkey = hexToBytes(pubkeyHex);
-  try {
-    return schnorr.verify(signature, data, pubkey);
-  } catch {
-    return false;
-  }
-}
-function hexToBytes(hex) {
-  const out = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < out.length; i++) {
-    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return out;
-}
+var DEFAULT_JOB_RETENTION_DAYS = 730;
 
 // src/lib/signed-request-statement.ts
 var SIGNED_REQUEST_AUTH_ID = "secp256k1-schnorr-v2";
@@ -129,9 +81,6 @@ export {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_TTL_SECONDS,
   DEFAULT_JOB_RETENTION_DAYS,
-  canonicalize,
-  canonicaliseForSigning,
-  verifyCanonicalSignedRequest,
   SIGNED_REQUEST_AUTH_ID,
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader,

package/dist/{chunk-R4DQZFAL.js → chunk-UOCZXO2Z.js}

@@ -2,19 +2,19 @@ import {
   connectedTempoAccount,
   tempoBalanceCheckHint,
   tempoTokenReference
-} from "./chunk-74PUEZJ4.js";
+} from "./chunk-GFY5FRX3.js";
 import {
   fundingReachableAt,
   listCredits,
   maxAdvertisedMicro,
   normalizeCreditEndpoint,
   withinAdvertisedTolerance
-} from "./chunk-2VGWYG4P.js";
+} from "./chunk-B2IROPQF.js";
 import {
   costAnchor,
   formatUsd,
   formatUsdcMicrounits
-} from "./chunk-3MHE725Z.js";
+} from "./chunk-PAIM66YA.js";
 import {
   IDENTITIES_FILE,
   TEMPO_CHANNELS_FILE,

package/dist/content-retention-BTGSQRfP.d.ts

@@ -0,0 +1,78 @@
+import { b as JobStore, J as JobRecord } from './job-store-BVeF5_Jq.js';
+
+/** Authenticated caller metadata; omitted fields on older services mean unknown. */
+interface JobContentMetadata {
+    content_expires_at: number | null;
+    content_available: boolean;
+}
+/** Admin-only history; reasons and signer identities never appear on caller responses. */
+interface ContentHoldsResponse extends JobContentMetadata {
+    job_id: string;
+    baseline_content_expires_at: number | null;
+    holds: (ContentHold & {
+        review_overdue: boolean;
+    })[];
+    events: ContentHoldEvent[];
+}
+interface ContentHoldEvent {
+    id: string;
+    hold_id: string;
+    job_id: string;
+    action: "placed" | "renewed" | "cleared";
+    actor: string;
+    reason: string;
+    at: number;
+    review_due_at: number;
+}
+interface ContentHold {
+    id: string;
+    job_id: string;
+    purpose: "support" | "dispute";
+    reason: string;
+    actor: string;
+    created_at: number;
+    review_due_at: number;
+    cleared_at: number | null;
+}
+interface ContentHoldHistory {
+    holds: ContentHold[];
+    events: ContentHoldEvent[];
+}
+type ContentHoldMutation = {
+    action: "placed";
+    purpose: "support" | "dispute";
+    reason: string;
+    review_due_at: number;
+    actor: string;
+    at: number;
+} | {
+    action: "renewed";
+    hold_id: string;
+    reason: string;
+    review_due_at: number;
+    actor: string;
+    at: number;
+} | {
+    action: "cleared";
+    hold_id: string;
+    reason: string;
+    actor: string;
+    at: number;
+};
+/** Mutations and redaction must serialize on the same job, including across processes. */
+interface ContentHoldStore extends JobStore {
+    getContentSnapshot(jobId: string, dvmId?: string): Promise<{
+        job: JobRecord;
+        history: ContentHoldHistory;
+    } | undefined>;
+    mutateContentHold(jobId: string, mutation: ContentHoldMutation, dvmId?: string): Promise<ContentHoldHistory>;
+}
+declare class ContentHoldError extends Error {
+    readonly code: "job_not_found" | "content_unavailable" | "hold_not_active";
+    constructor(code: "job_not_found" | "content_unavailable" | "hold_not_active");
+}
+declare function isContentHoldStore(store: JobStore): store is ContentHoldStore;
+declare function contentMetadata(job: Pick<JobRecord, "status" | "lastActivityAt" | "redactedAt">, retentionDays: number, holds?: ContentHold[]): JobContentMetadata;
+declare function baselineContentExpiry(job: Pick<JobRecord, "status" | "lastActivityAt">, retentionDays: number): number | null;
+
+export { type ContentHoldHistory as C, type JobContentMetadata as J, type ContentHoldMutation as a, type ContentHold as b, ContentHoldError as c, type ContentHoldEvent as d, type ContentHoldStore as e, type ContentHoldsResponse as f, baselineContentExpiry as g, contentMetadata as h, isContentHoldStore as i };

package/dist/{credit-menu-B8_p_vUz.d.ts → credit-menu-BAsrRu3z.d.ts}

@@ -1,11 +1,11 @@
-import { cf as HostingCleanupFence, cV as HostedIntent, ah as FundingMethod, o as PaymentMethod, bN as CreditLedgerLike, a1 as Message, X as FundingReceipt, bP as CreditSnapshot, Y as JobReceipt, S as SDKJobContext, aw as StepCache, u as ResponseContent, P as PaymentContent, a2 as MessageType, bj as X402Receipt, aE as X402Config, bi as X402ExactVersionSupport, cW as X402SettlementIntent, aq as PaymentRequirementsV2, cX as HostedFundingReservation, c2 as CreditLedgerQuerier, cY as X402SettlementCursor, bR as X402SettlementStatus, cZ as X402SettlementWriteOff, bO as X402RefundSettlementGate, c_ as X402FacilitatorAuth, c$ as X402BatchSettlementConfig, cB as PostgresX402ChannelStorage, d0 as X402PayoutObserver, bL as HostedSettlementReportObligations, br as MppxServer, ab as CashuMode, d1 as CreditDepositEnqueue, d2 as X402SettlementReconciliationReason, ao as PaymentRequirements, a0 as MppxCredential, bm as CreditDepositPayload, bQ as DrawResult, cp as CreditLedgerError, a6 as ReceiptCredit, ae as DrainReceiptEvent, ad as DrainReceipt, K as KVStore, y as SignedRequestAudience, d3 as CreditDrawReleaseEnqueue, cz as JobCostReportPayload, cA as JobTerminalReportPayload, cD as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, bW as CreditInvoiceRecord, bX as InvoiceSettlement, cj as ClientCompatibilityGate, ch as ClientCompatibility, bv as PostgresTempoSessionStore, bu as PayoutReporter, R as ResolvedCreditConfig, g as CreditView } from './step-cache-Bi43A0JN.js';
+import { g as LockPubkey, f as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-40fIzz1W.js';
+import { cf as HostingCleanupFence, cV as HostedIntent, ah as FundingMethod, o as PaymentMethod, bN as CreditLedgerLike, a1 as Message, X as FundingReceipt, bP as CreditSnapshot, Y as JobReceipt, S as SDKJobContext, aw as StepCache, u as ResponseContent, P as PaymentContent, a2 as MessageType, bj as X402Receipt, aE as X402Config, bi as X402ExactVersionSupport, cW as X402SettlementIntent, aq as PaymentRequirementsV2, cX as HostedFundingReservation, c2 as CreditLedgerQuerier, cY as X402SettlementCursor, bR as X402SettlementStatus, cZ as X402SettlementWriteOff, bO as X402RefundSettlementGate, c_ as X402FacilitatorAuth, c$ as X402BatchSettlementConfig, cB as PostgresX402ChannelStorage, d0 as X402PayoutObserver, bL as HostedSettlementReportObligations, br as MppxServer, ac as CashuMode, d1 as CreditDepositEnqueue, d2 as X402SettlementReconciliationReason, ao as PaymentRequirements, a0 as MppxCredential, bm as CreditDepositPayload, bQ as DrawResult, cp as CreditLedgerError, a7 as ReceiptCredit, ae as DrainReceiptEvent, a6 as DrainReceipt, K as KVStore, y as SignedRequestAudience, d3 as CreditDrawReleaseEnqueue, cz as JobCostReportPayload, cA as JobTerminalReportPayload, cD as RevenueSkippedNoRailPayload, Z as ZodLike, a as DVMDescriptor, bW as CreditInvoiceRecord, bX as InvoiceSettlement, cj as ClientCompatibilityGate, ch as ClientCompatibility, bv as PostgresTempoSessionStore, bu as PayoutReporter, R as ResolvedCreditConfig, g as CreditView } from './step-cache-CPdH1hei.js';
 import { ProofLike, SerializedDLEQ, Proof } from '@cashu/cashu-ts';
 import { Hono, Context } from 'hono';
 import { Pool } from 'pg';
-import { b as FxRateSnapshot, F as FxFetcher } from './fx-DuaYHvVn.js';
+import { b as FxRateSnapshot, F as FxFetcher } from './fx-BgDmyTdd.js';
 import { Store, Challenge } from 'mppx';
-import { g as LockPubkey, f as CheckMintHealthOptions, b as LightningBackend, A as AttestationPayload } from './lightning-backend-BaeCPmx7.js';
-import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-D6Rjj5Oi.js';
+import { T as TopUpCapUnenforcedReason, A as AppendOutgoingOptions, J as JobRecord, b as JobStore } from './job-store-BVeF5_Jq.js';
 import { SettleResponse, SupportedResponse } from '@x402/core/types';
 import { Channel, AutoSettlementConfig } from '@x402/evm/batch-settlement/server';
 import { FacilitatorClient } from '@x402/core/server';
@@ -195,6 +195,8 @@ declare function hashLockKey(input: string): bigint;
  * `pendingMppChallengeIds`.
  */
 interface ConsumedCredentialStore {
+    /** Atomically consume a nonce only if no unexpired mark exists. */
+    consume?(realm: string, challengeId: string, ttlSeconds: number): Promise<boolean>;
     /** True iff `(realm, challengeId)` was marked and the entry has not expired. */
     has(realm: string, challengeId: string): Promise<boolean>;
     /** Mark `(realm, challengeId)` as consumed for `ttlSeconds`. */
@@ -219,9 +221,100 @@ declare class MemoryConsumedCredentialStore implements ConsumedCredentialStore {
     private readonly data;
     constructor(opts?: MemoryConsumedCredentialStoreOpts);
     has(realm: string, challengeId: string): Promise<boolean>;
+    consume(realm: string, challengeId: string, ttlSeconds: number): Promise<boolean>;
     mark(realm: string, challengeId: string, ttlSeconds: number): Promise<void>;
 }
 
+/**
+ * Snapshot of a DVM's published lock-pubkey state at a point in time. `current`
+ * is what the SDK advertises as `cashu.lock_pubkeys[0]`; `retired` are the
+ * pubkeys inside the rotation grace window plus legacy sentinel-0 entries
+ * kept until explicitly cleaned up. Both halves are needed by the
+ * receive path (accept proofs locked to any entry) and the admin auth verifier
+ * (accept signatures from any entry during grace).
+ */
+interface LockPubkeyState {
+    current: LockPubkey;
+    retired: {
+        pubkey: LockPubkey;
+        retiredAtMs: number;
+    }[];
+}
+/**
+ * Lazy accessor for the DVM's lock-pubkey state. Threaded through the SDK
+ * server so call sites (info handler, accept flow, admin auth) read the fresh
+ * state on every invocation — rotation propagation has to be visible without
+ * a process restart.
+ */
+type LockPubkeyStateLoader = () => Promise<LockPubkeyState>;
+type LockPubkeyPool = AccumulatorPool;
+/**
+ * Create the `dvm_lock_pubkeys` table if absent. Each row is one entry in a
+ * DVM's lock-pubkey lifecycle: `retired_at_ms IS NULL` is the current pubkey,
+ * any non-null value is a retired pubkey that the rotation walker can still
+ * derive privkeys for. One current row per `dvm_id` is enforced via a partial
+ * unique index — keeps `rotateLockPubkey` honest under concurrent calls.
+ */
+declare function initLockPubkeyTable(db: LockPubkeyPool): Promise<void>;
+/**
+ * Idempotent first-boot seed. Inserts `pubkey` as the current row for `dvmId`
+ * only when no current row exists. Reseeding with a different pubkey is a
+ * no-op — once the DB has state, `rotateLockPubkey` is the only sanctioned
+ * mutator, so a stale `DVMKIT_CASHU_LOCK_PUBKEY` env on a redeploy can't
+ * silently reset the DVM's view of "what's current".
+ *
+ * Also backfills any distinct `lock_pubkey` values found in
+ * `wallet_accumulator` for this DVM that aren't yet in `dvm_lock_pubkeys`,
+ * inserting them as retired rows with `retired_at_ms = 0` — the
+ * "long-retired-still-meltable" sentinel. This handles legacy batches
+ * that would otherwise trip the monitor's `orphan_lock_pubkey` alarm every
+ * tick. Sentinel-0 rows are exempt from grace-window filtering and
+ * `pruneRetired` so they stay visible until the operator melts the legacy
+ * batches and the receive path keeps accepting in-flight tokens locked to
+ * them.
+ *
+ * `ON CONFLICT DO NOTHING` protects concurrent seeds invoked reentrantly from
+ * one guarded callback. Nested calls bypass the queue to avoid deadlock, so
+ * both inserts can pass `WHERE NOT EXISTS` before either commits.
+ */
+declare function seedLockPubkeyState(db: LockPubkeyPool, dvmId: string, pubkey: string, now?: number): Promise<void>;
+/**
+ * Read the active lock-pubkey state for a DVM. Retired rows older than the
+ * grace window are filtered out; aged-out rows linger physically until
+ * `pruneRetired` deletes them on a monitor tick. Sentinel-0 rows (the
+ * `retired_at_ms = 0` legacy backfill from `seedLockPubkeyState`) are always
+ * included regardless of grace. Throws when no current row exists — the SDK's
+ * accept/info/admin paths must not run before `seedLockPubkeyState` has been
+ * called.
+ */
+declare function loadLockPubkeyState(db: AccumulatorQuerier, dvmId: string, graceMs: number, now?: number): Promise<LockPubkeyState>;
+/**
+ * Atomically demote the current pubkey to retired (stamping `retired_at_ms`)
+ * and insert `newPubkey` as the new current row. Wrapped in a transaction so
+ * the partial unique index never has two current rows visible mid-rotation.
+ * Returns the post-rotation state filtered by the supplied grace window.
+ */
+declare function rotateLockPubkey(db: LockPubkeyPool, dvmId: string, newPubkey: string, graceMs: number, now?: number): Promise<LockPubkeyState>;
+/**
+ * Delete retired rows whose `retired_at_ms` is older than `now - graceMs`.
+ * Called from the monitor tick so aged-out entries don't accumulate.
+ * `wallet_accumulator` rows pointing at those pubkeys remain meltable (the
+ * builder can still derive the privkey from the mnemonic + rotation_index) —
+ * pruning only affects what the DVM advertises and accepts.
+ *
+ * Sentinel-0 rows (the legacy backfill from `seedLockPubkeyState`) are
+ * exempted from pruning — they exist precisely so the monitor keeps treating
+ * legacy `wallet_accumulator` batches as retired-still-meltable rather than
+ * orphan.
+ */
+declare function pruneRetired(db: AccumulatorQuerier, dvmId: string, graceMs: number, now?: number): Promise<number>;
+/**
+ * Default rotation grace window in seconds. Override through
+ * `SDKServerOpts.lockPubkeyGraceSeconds`.
+ */
+declare const DEFAULT_LOCK_PUBKEY_GRACE_SECONDS = 86400;
+declare function activePubkeySet(state: LockPubkeyState): LockPubkey[];
+
 /** Effective boot-time payment configuration for one mounted DVM. Health may change later. */
 interface PaymentMode {
     mount: string;
@@ -4539,4 +4632,4 @@ declare function attachCreditMenu(body: Record<string, unknown>, menu: CreditMen
  */
 declare function toCreditTerms(menu: CreditMenu): CreditTerms;
 
-export { isDerivedCreditId as $, type AccumulatorPool as A, assertRevenueReporterReady as B, type ConsumedCredentialStore as C, buildPaymentErrorResponse as D, clearAccumulatorForDvm as E, type FiatDenomination as F, createDVMServer as G, creditDepositPayload as H, type IncomingPaymentOpts as I, JobCancelledError as J, derivedFundCreditId as K, devModeSkipsPaymentVerification as L, MintHealthTracker as M, fromJobRecord as N, fundedMicroFor as O, PAYMENT_PROOF_KEYS as P, hasPaymentProof as Q, type ReporterBannerOpts as R, type SDKServerOpts as S, type TempoChannelReport as T, type UpfrontPaymentOpts as U, type VerifiedIncomingPayment as V, hashLockKey as W, type X402BatchChannelObservation as X, implicitCreditId as Y, initWalletAccumulatorTable as Z, insertAccumulatorRows as _, type AccumulatorQuerier as a, type X402BatchAcceptance as a$, isTerminal as a0, isYieldMessage as a1, issueUpfrontChallenges as a2, msatsToFiatMicro as a3, paymentErrorBody as a4, pinAskFiat as a5, priceFiatMicro as a6, processIncomingPayment as a7, providerMessage as a8, repairX402ExactSettlementEffect as a9, type DVMHost as aA, type HostingClosureCommand as aB, type HostingClosureEvidence as aC, type HostingControlCommand as aD, type HostingControlConfig as aE, type HostingControlStatus as aF, JobManager as aG, type JobManagerOpts as aH, type LightningReceiveConfig as aI, MIN_INVOICE_TTL_SECONDS as aJ, MemoryConsumedCredentialStore as aK, type MemoryConsumedCredentialStoreOpts as aL, MemoryProcessedPaymentStore as aM, MemoryX402ExactSettlementStore as aN, type MountOpts as aO, type OwnerDisplay as aP, type PaidJobCompletion as aQ, type PaymentMode as aR, type PlatformReporterOpts as aS, PostgresProcessedPaymentStore as aT, PostgresX402ExactSettlementStore as aU, type PriceFiat as aV, type ProcessedPaymentQuerier as aW, type ProcessedPaymentRail as aX, type ProcessedPaymentRecord as aY, ProcessedPaymentReplayError as aZ, type ProcessedPaymentStore as a_, resolveFxSnapshot as aa, resolvePriceFiat as ab, revenueReporterBannerState as ac, toCreditTerms as ad, toJobRecord as ae, unknownRouteNotFound as af, verifyIncomingPayment as ag, verifyTempoSessionManagementCredential as ah, verifyUpfrontPayment as ai, x402RequiredUsdcMicro as aj, x402SettledShare as ak, type CreditMenu as al, ReceiptIssuer as am, LightningReceive as an, TempoSettlementReadiness as ao, type DVMHostOpts as ap, type DVMServeResult as aq, type BuildCreditMenuArgs as ar, type BuilderIdentity as as, CREDIT_ENVELOPE_KEYS as at, type CreateX402BatchSettlementServerOpts as au, type CreditEnvelope as av, CreditEnvelopeError as aw, type CreditFundCommitment as ax, type CreditTerms as ay, DEFAULT_INVOICE_TTL_SECONDS as az, type AppEnv as b, type X402BatchFunding as b0, type X402BatchRefusal as b1, type X402BatchSettlementServer as b2, type X402ExactAcceptance as b3, X402ExactIntentConflictError as b4, type X402ExactSettlementAttempt as b5, type X402ExactSettlementChainEvidence as b6, type X402ExactSettlementEffect as b7, X402ExactSettlementEvidenceMissingError as b8, type X402ExactSettlementEvidenceReader as b9, type X402ExactSettlementIntent as ba, X402ExactSettlementNotReadyError as bb, X402ExactSettlementServer as bc, type X402ExactSettlementServerOpts as bd, type X402ExactSettlementStatus as be, type X402ExactSettlementStore as bf, type X402SettlementChainEvidence as bg, type X402SettlementEvidenceReader as bh, X402SettlementSubmissionError as bi, X402_BATCH_AUTO_SETTLEMENT as bj, X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS as bk, X402_BATCH_SETTLEMENT_NETWORK as bl, attachCreditMenu as bm, buildCreditMenu as bn, createDVMHost as bo, createX402BatchSettlementServer as bp, creditEnvelopeIgnoreFields as bq, drawSettlementRef as br, extractCreditEnvelope as bs, fundingCommitment as bt, selectPrimaryCredit as bu, signHostingClosure as bv, signHostingControl as bw, stripCreditEnvelope as bx, toCreditView as by, type CreditFundingReport as c, type FiatDenominationFailure as d, type FundOnlyRequest as e, type PaymentErrorCode as f, type PaymentErrorDetail as g, type PaymentInfo as h, PostgresTempoChargeStore as i, type ResolvedFx as j, type RevenueBootCheckOpts as k, type ServerJob as l, type ShortPayForfeit as m, type TempoObserverHealth as n, TempoSessionChannelMismatchError as o, type VerifyIncomingSnapshot as p, X402FacilitatorHealth as q, type X402SettlementEvidenceOutcome as r, type X402SettlementRepair as s, type X402SettlementRepairRefusal as t, type X402SettlementRepaired as u, type X402WedgedSettlement as v, type X402WedgedSettlementPage as w, X402_BATCH_SETTLEMENT_MAINNET_NETWORK as x, abortJob as y, applyPaymentInfoToJob as z };
+export { hashLockKey as $, type AccumulatorPool as A, activePubkeySet as B, type ConsumedCredentialStore as C, DEFAULT_LOCK_PUBKEY_GRACE_SECONDS as D, applyPaymentInfoToJob as E, type FiatDenomination as F, assertRevenueReporterReady as G, buildPaymentErrorResponse as H, type IncomingPaymentOpts as I, JobCancelledError as J, clearAccumulatorForDvm as K, type LockPubkeyStateLoader as L, MintHealthTracker as M, createDVMServer as N, creditDepositPayload as O, PAYMENT_PROOF_KEYS as P, derivedFundCreditId as Q, type ReporterBannerOpts as R, type SDKServerOpts as S, type TempoChannelReport as T, type UpfrontPaymentOpts as U, type VerifiedIncomingPayment as V, devModeSkipsPaymentVerification as W, type X402BatchChannelObservation as X, fromJobRecord as Y, fundedMicroFor as Z, hasPaymentProof as _, type AppEnv as a, type PlatformReporterOpts as a$, implicitCreditId as a0, initLockPubkeyTable as a1, initWalletAccumulatorTable as a2, insertAccumulatorRows as a3, isDerivedCreditId as a4, isTerminal as a5, isYieldMessage as a6, issueUpfrontChallenges as a7, loadLockPubkeyState as a8, msatsToFiatMicro as a9, type BuildCreditMenuArgs as aA, type BuilderIdentity as aB, CREDIT_ENVELOPE_KEYS as aC, type CreateX402BatchSettlementServerOpts as aD, type CreditEnvelope as aE, CreditEnvelopeError as aF, type CreditFundCommitment as aG, type CreditTerms as aH, DEFAULT_INVOICE_TTL_SECONDS as aI, type DVMHost as aJ, type HostingClosureCommand as aK, type HostingClosureEvidence as aL, type HostingControlCommand as aM, type HostingControlConfig as aN, type HostingControlStatus as aO, JobManager as aP, type JobManagerOpts as aQ, type LightningReceiveConfig as aR, MIN_INVOICE_TTL_SECONDS as aS, MemoryConsumedCredentialStore as aT, type MemoryConsumedCredentialStoreOpts as aU, MemoryProcessedPaymentStore as aV, MemoryX402ExactSettlementStore as aW, type MountOpts as aX, type OwnerDisplay as aY, type PaidJobCompletion as aZ, type PaymentMode as a_, paymentErrorBody as aa, pinAskFiat as ab, priceFiatMicro as ac, processIncomingPayment as ad, providerMessage as ae, pruneRetired as af, repairX402ExactSettlementEffect as ag, resolveFxSnapshot as ah, resolvePriceFiat as ai, revenueReporterBannerState as aj, rotateLockPubkey as ak, seedLockPubkeyState as al, toCreditTerms as am, toJobRecord as an, unknownRouteNotFound as ao, verifyIncomingPayment as ap, verifyTempoSessionManagementCredential as aq, verifyUpfrontPayment as ar, x402RequiredUsdcMicro as as, x402SettledShare as at, type CreditMenu as au, ReceiptIssuer as av, LightningReceive as aw, TempoSettlementReadiness as ax, type DVMHostOpts as ay, type DVMServeResult as az, type CreditFundingReport as b, PostgresProcessedPaymentStore as b0, PostgresX402ExactSettlementStore as b1, type PriceFiat as b2, type ProcessedPaymentQuerier as b3, type ProcessedPaymentRail as b4, type ProcessedPaymentRecord as b5, ProcessedPaymentReplayError as b6, type ProcessedPaymentStore as b7, type X402BatchAcceptance as b8, type X402BatchFunding as b9, drawSettlementRef as bA, extractCreditEnvelope as bB, fundingCommitment as bC, selectPrimaryCredit as bD, signHostingClosure as bE, signHostingControl as bF, stripCreditEnvelope as bG, toCreditView as bH, type X402BatchRefusal as ba, type X402BatchSettlementServer as bb, type X402ExactAcceptance as bc, X402ExactIntentConflictError as bd, type X402ExactSettlementAttempt as be, type X402ExactSettlementChainEvidence as bf, type X402ExactSettlementEffect as bg, X402ExactSettlementEvidenceMissingError as bh, type X402ExactSettlementEvidenceReader as bi, type X402ExactSettlementIntent as bj, X402ExactSettlementNotReadyError as bk, X402ExactSettlementServer as bl, type X402ExactSettlementServerOpts as bm, type X402ExactSettlementStatus as bn, type X402ExactSettlementStore as bo, type X402SettlementChainEvidence as bp, type X402SettlementEvidenceReader as bq, X402SettlementSubmissionError as br, X402_BATCH_AUTO_SETTLEMENT as bs, X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS as bt, X402_BATCH_SETTLEMENT_NETWORK as bu, attachCreditMenu as bv, buildCreditMenu as bw, createDVMHost as bx, createX402BatchSettlementServer as by, creditEnvelopeIgnoreFields as bz, type FiatDenominationFailure as c, type FundOnlyRequest as d, type LockPubkeyPool as e, type LockPubkeyState as f, type PaymentErrorCode as g, type PaymentErrorDetail as h, type PaymentInfo as i, PostgresTempoChargeStore as j, type ResolvedFx as k, type RevenueBootCheckOpts as l, type ServerJob as m, type ShortPayForfeit as n, type TempoObserverHealth as o, TempoSessionChannelMismatchError as p, type VerifyIncomingSnapshot as q, X402FacilitatorHealth as r, type X402SettlementEvidenceOutcome as s, type X402SettlementRepair as t, type X402SettlementRepairRefusal as u, type X402SettlementRepaired as v, type X402WedgedSettlement as w, type X402WedgedSettlementPage as x, X402_BATCH_SETTLEMENT_MAINNET_NETWORK as y, abortJob as z };

package/dist/{fx-DuaYHvVn.d.ts → fx-BgDmyTdd.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-Bi43A0JN.js';
+import { C as Currency } from './step-cache-CPdH1hei.js';
 
 /**
  * Quote-time FX snapshot. `rates` maps configured lowercase currency codes to

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-Bi43A0JN.js';
-export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DEFAULT_JOB_RETENTION_DAYS, l as DVMRouteContext, I as IncomingMessage, m as InputType, n as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, o as PaymentMethod, p as PriceValue, q as ProgressContent, r as PromptOpts, Q as QuoteConfig, s as QuoteContext, t as QuoteResult, R as ResolvedCreditConfig, u as ResponseContent, S as SDKJobContext, v as SDKPaymentRequestOpts, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, y as SignedRequestAudience, z as SignedRequestDomain, B as SignedRequestError, E as SignedRequestFailure, F as SignedRequestReplayStore, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, M as SignedRequestVerifier, U as UnsupportedCurrencyError, N as createSignedRequestVerifier, O as isZodSchema, T as signedRequestStatementHeader, V as validateCurrency } from './step-cache-Bi43A0JN.js';
-export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PlatformFxSource, d as createFxFetcher, f as fxRateFor, r as resolveFxSourceFromEnv } from './fx-DuaYHvVn.js';
-export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-AZPVq4eU.js';
-export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-D6Rjj5Oi.js';
+import { C as Currency, Z as ZodLike, D as DVMConfig, a as DVMDescriptor } from './step-cache-CPdH1hei.js';
+export { A as ApprovalContent, b as ArtifactContent, c as CancelContent, d as CanonicalEnvelope, e as CreateSignedRequestVerifierOpts, f as CreditConfig, g as CreditView, h as DEFAULT_CREDIT_MAX, i as DEFAULT_CREDIT_MIN, j as DEFAULT_CREDIT_TTL_SECONDS, k as DEFAULT_JOB_RETENTION_DAYS, l as DVMRouteContext, I as IncomingMessage, m as InputType, n as InvalidCurrencyError, J as JobCost, K as KVStore, L as Logger, P as PaymentContent, o as PaymentMethod, p as PriceValue, q as ProgressContent, r as PromptOpts, Q as QuoteConfig, s as QuoteContext, t as QuoteResult, R as ResolvedCreditConfig, u as ResponseContent, S as SDKJobContext, v as SDKPaymentRequestOpts, w as SIGNED_REQUEST_AUTH_ID, x as SIGNED_REQUEST_STATEMENT_VERSION, y as SignedRequestAudience, z as SignedRequestDomain, B as SignedRequestError, E as SignedRequestFailure, F as SignedRequestReplayStore, G as SignedRequestSignOpts, H as SignedRequestStatementHeader, M as SignedRequestVerifier, U as UnsupportedCurrencyError, N as createSignedRequestVerifier, O as isZodSchema, T as signedRequestStatementHeader, V as validateCurrency } from './step-cache-CPdH1hei.js';
+export { C as CreateFxFetcherOpts, D as DEFAULT_FX_CURRENCIES, a as DEFAULT_FX_RATE_SOURCE, F as FxFetcher, b as FxRateSnapshot, c as FxRateUnavailableError, P as PlatformFxSource, d as createFxFetcher, f as fxRateFor, r as resolveFxSourceFromEnv } from './fx-BgDmyTdd.js';
+export { I as InvalidFxRateError, f as fiatToSatsCeil, a as formatFiat, b as formatUsd, r as roundUsd, s as satsToFiat } from './usd-AWlrwlM5.js';
+export { J as JobRecord, a as JobStatus, b as JobStore } from './job-store-BVeF5_Jq.js';
 export { P as PinnedFetch, S as SSRFError, a as SSRFGuardOpts, b as SSRFReason, c as SSRFResolver, d as assertSafeUrl, e as createPinnedFetch } from './ssrf-dMooihtY.js';
 export { z } from 'zod';
 import 'hono';

package/dist/index.js

@@ -7,11 +7,11 @@ import {
 import {
   configureDVM,
   isConfiguredDVMDescriptor
-} from "./chunk-O3QDFPKM.js";
+} from "./chunk-HCLVYZUZ.js";
 import {
   SignedRequestError,
   createSignedRequestVerifier
-} from "./chunk-CE7XEHYC.js";
+} from "./chunk-N5RZ5HVB.js";
 import {
   DEFAULT_CREDIT_MAX,
   DEFAULT_CREDIT_MIN,
@@ -21,7 +21,8 @@ import {
   SIGNED_REQUEST_STATEMENT_VERSION,
   isZodSchema,
   signedRequestStatementHeader
-} from "./chunk-KXZUCCEY.js";
+} from "./chunk-RCM3P2HE.js";
+import "./chunk-OFVV37XC.js";
 import {
   DEFAULT_FX_CURRENCIES,
   DEFAULT_FX_RATE_SOURCE,