@dvmkit/sdk 0.5.0-rc.1 → 0.6.0-rc.1

package/dist/{chunk-O5AT6S5T.js → chunk-IV6Q7NRW.js}

@@ -1,191 +1,15 @@
 import {
-  StepCache,
+  ContentHoldError,
+  applyContentHoldMutation,
+  isTerminal
+} from "./chunk-AFV77S4C.js";
+import {
   loggers
-} from "./chunk-6DOGTAHA.js";
+} from "./chunk-QR2EF2NI.js";
 import {
   redactUrl
 } from "./chunk-FUJ36YDV.js";
 
-// src/sdk/server/job.ts
-function toJobRecord(job) {
-  return {
-    id: job.id,
-    tags: job.tags,
-    capability: job.capability,
-    input: job.input,
-    params: job.params,
-    requesterId: job.requesterId,
-    requesterTokenHash: job.requesterTokenHash,
-    requesterToken: job.requesterToken,
-    requestFingerprint: job.requestFingerprint,
-    requesterPubkey: job.requesterPubkey,
-    requestId: job.requestId,
-    authRequestPath: job.authRequestPath,
-    status: job.status,
-    summary: job.summary,
-    timingKnown: job.timingKnown,
-    endedBy: job.endedBy,
-    terminalAtMs: job.terminalAtMs,
-    callerWaitMs: job.callerWaitMs,
-    awaitingInputAtMs: job.awaitingInputAtMs,
-    messages: job.messages,
-    seq: job.seq,
-    paidMsats: job.paidMsats,
-    paymentMint: job.paymentMint,
-    paymentRail: job.paymentRail,
-    paymentTxHash: job.paymentTxHash,
-    paymentTransactionHash: job.paymentTransactionHash,
-    nativeAmount: job.nativeAmount,
-    nativeAsset: job.nativeAsset,
-    cashuFlow: job.cashuFlow,
-    costAmountMicro: job.costAmountMicro,
-    costCurrency: job.costCurrency,
-    costRevision: job.costRevision,
-    creditId: job.creditId,
-    drawId: job.drawId,
-    fundingReceipt: job.fundingReceipt,
-    fundingCredit: job.fundingCredit,
-    receivedProofs: job.receivedProofs,
-    pendingPaymentMsats: job.pendingPaymentMsats,
-    pendingMppChallengeIds: job.pendingMppChallengeIds,
-    pendingX402Nonce: job.pendingX402Nonce,
-    pendingX402AmountUsdcMicro: job.pendingX402AmountUsdcMicro,
-    pendingPaymentFiatMicro: job.pendingPaymentFiatMicro,
-    pendingPaymentFiatCurrency: job.pendingPaymentFiatCurrency,
-    askedTopUpMicro: job.askedTopUpMicro,
-    askedTopUpCurrency: job.askedTopUpCurrency,
-    topUpCapUnenforcedReason: job.topUpCapUnenforcedReason,
-    requiredMsats: job.requiredMsats,
-    receipt: job.receipt,
-    stepCache: job.stepCache.serialize(),
-    state: job.state,
-    createdAt: job.createdAt,
-    lastActivityAt: job.lastActivityAt
-  };
-}
-function fromJobRecord(record) {
-  return {
-    id: record.id,
-    tags: record.tags,
-    capability: record.capability,
-    input: record.input,
-    params: record.params,
-    requesterId: record.requesterId,
-    requesterTokenHash: record.requesterTokenHash,
-    status: record.status,
-    summary: record.summary,
-    timingKnown: record.timingKnown,
-    endedBy: record.endedBy,
-    terminalAtMs: record.terminalAtMs,
-    callerWaitMs: record.callerWaitMs,
-    awaitingInputAtMs: record.awaitingInputAtMs,
-    messages: [...record.messages],
-    seq: record.seq,
-    paidMsats: record.paidMsats,
-    paymentMint: record.paymentMint,
-    paymentRail: record.paymentRail,
-    paymentTxHash: record.paymentTxHash,
-    paymentTransactionHash: record.paymentTransactionHash,
-    nativeAmount: record.nativeAmount,
-    nativeAsset: record.nativeAsset,
-    cashuFlow: record.cashuFlow,
-    costAmountMicro: record.costAmountMicro,
-    costCurrency: record.costCurrency,
-    costRevision: record.costRevision,
-    creditId: record.creditId,
-    drawId: record.drawId,
-    fundingReceipt: record.fundingReceipt,
-    fundingCredit: record.fundingCredit,
-    receivedProofs: [...record.receivedProofs],
-    pendingPaymentMsats: record.pendingPaymentMsats,
-    pendingMppChallengeIds: record.pendingMppChallengeIds ? [...record.pendingMppChallengeIds] : void 0,
-    requesterToken: record.requesterToken,
-    requestFingerprint: record.requestFingerprint,
-    requesterPubkey: record.requesterPubkey,
-    requestId: record.requestId,
-    authRequestPath: record.authRequestPath,
-    pendingX402Nonce: record.pendingX402Nonce,
-    pendingX402AmountUsdcMicro: record.pendingX402AmountUsdcMicro,
-    pendingPaymentFiatMicro: record.pendingPaymentFiatMicro,
-    pendingPaymentFiatCurrency: record.pendingPaymentFiatCurrency,
-    askedTopUpMicro: record.askedTopUpMicro,
-    askedTopUpCurrency: record.askedTopUpCurrency,
-    topUpCapUnenforcedReason: record.topUpCapUnenforcedReason,
-    requiredMsats: record.requiredMsats,
-    receipt: record.receipt,
-    listeners: /* @__PURE__ */ new Set(),
-    abort: new AbortController(),
-    messageAppender: void 0,
-    messageAppenderTail: void 0,
-    stepCache: StepCache.deserialize(record.stepCache),
-    state: record.state,
-    pendingPrompts: /* @__PURE__ */ new Map(),
-    pendingPayment: null,
-    replayHighSeq: null,
-    replayProviderSkip: 0,
-    replayPaymentIndex: 0,
-    createdAt: record.createdAt,
-    lastActivityAt: record.lastActivityAt
-  };
-}
-function abortJob(job, reason) {
-  job.abort.abort(new JobCancelledError(reason));
-}
-var JobCancelledError = class extends Error {
-  constructor(message = "Job cancelled") {
-    super(message);
-    this.name = "JobCancelledError";
-  }
-};
-function providerMessage(job, type, content) {
-  if (job.replayProviderSkip > 0) {
-    job.replayProviderSkip--;
-    return;
-  }
-  const msg = localMessage(job, "provider", type, content);
-  if (type === "payment-request") {
-    const paymentRequest = content;
-    const pendingPaymentDelta = typeof paymentRequest.amount_msats === "number" ? paymentRequest.amount_msats : void 0;
-    const pendingMppChallengeIds = paymentRequest.tempo?.challenges?.map((challenge) => challenge.id).filter((id) => typeof id === "string");
-    job.messageAppender?.(msg, {
-      awaitingInput: job.status === "awaiting-input",
-      pendingPaymentDelta,
-      pendingMppChallengeIds,
-      pendingX402Nonce: typeof paymentRequest.x402?.nonce === "string" ? paymentRequest.x402.nonce : void 0,
-      pendingX402AmountUsdcMicro: typeof paymentRequest.x402?.required_usdc_micro === "string" ? paymentRequest.x402.required_usdc_micro : void 0,
-      // read off the job rather than the content — the fiat envelope
-      // is ledger state, not part of the wire shape, and `requestPayment` has
-      // already pinned it on the job by the time this fires (same ordering the
-      // `pendingPaymentMsats` comment above describes).
-      pendingPaymentFiatMicro: job.pendingPaymentFiatMicro,
-      pendingPaymentFiatCurrency: job.pendingPaymentFiatCurrency
-    });
-    return;
-  }
-  job.messageAppender?.(msg, type === "prompt" ? { awaitingInput: job.status === "awaiting-input" } : void 0);
-}
-function localMessage(job, from, type, content) {
-  job.seq++;
-  const msg = {
-    seq: job.seq,
-    from,
-    timestamp: Math.floor(Date.now() / 1e3),
-    type,
-    content
-  };
-  job.messages.push(msg);
-  for (const listener of job.listeners) {
-    listener(msg);
-  }
-  return msg;
-}
-function isTerminal(status) {
-  return status === "completed" || status === "failed" || status === "cancelled";
-}
-function isYieldMessage(msg) {
-  return msg.type === "prompt" || msg.type === "payment-request" || msg.type === "working" || msg.type === "complete" || msg.type === "cancel";
-}
-
 // src/sdk/server/job-store.ts
 function accumulateAskedTopUp(prior, ask) {
   const poisoned = (reason) => ({
@@ -219,6 +43,7 @@ function isStaleJobReapable(store) {
 
 // src/sdk/server/memory-job-store.ts
 var MemoryJobStore = class {
+  contentHolds = /* @__PURE__ */ new Map();
   data = /* @__PURE__ */ new Map();
   messages = /* @__PURE__ */ new Map();
   nextSeq = /* @__PURE__ */ new Map();
@@ -290,6 +115,7 @@ var MemoryJobStore = class {
     }
     const snapshot = structuredClone(record);
     if (existing) snapshot.createdAt = existing.createdAt;
+    if (existing && isTerminal(existing.status)) snapshot.lastActivityAt = existing.lastActivityAt;
     if (existing?.receipt) snapshot.receipt = existing.receipt;
     snapshot.timingKnown = existing ? existing.timingKnown ?? false : record.timingKnown ?? true;
     applyTiming(snapshot, existing, Date.now());
@@ -302,6 +128,7 @@ var MemoryJobStore = class {
     return Promise.resolve();
   }
   delete(id) {
+    this.contentHolds.delete(id);
     this.data.delete(id);
     this.messages.delete(id);
     this.nextSeq.delete(id);
@@ -317,7 +144,7 @@ var MemoryJobStore = class {
   }
   redactJob(args) {
     const record = this.data.get(args.jobId);
-    if (!record || record.redactedAt !== void 0 || !isTerminal(record.status) || record.lastActivityAt !== args.expectedLastActivityAt) {
+    if (!record || record.redactedAt !== void 0 || !isTerminal(record.status) || this.contentHolds.get(args.jobId)?.holds.some((hold) => hold.cleared_at === null) || record.lastActivityAt !== args.expectedLastActivityAt) {
       return Promise.resolve(false);
     }
     record.input = "";
@@ -340,6 +167,17 @@ var MemoryJobStore = class {
     this.messages.delete(args.jobId);
     return Promise.resolve(true);
   }
+  getContentSnapshot(jobId) {
+    const job = this.data.get(jobId);
+    return Promise.resolve(job ? structuredClone({ job, history: this.contentHolds.get(jobId) ?? { holds: [], events: [] } }) : void 0);
+  }
+  mutateContentHold(jobId, mutation) {
+    const job = this.data.get(jobId);
+    if (!job) return Promise.reject(new ContentHoldError("job_not_found"));
+    const history = applyContentHoldMutation(job, this.contentHolds.get(jobId) ?? { holds: [], events: [] }, mutation);
+    this.contentHolds.set(jobId, history);
+    return Promise.resolve(structuredClone(history));
+  }
   claimReceiptSeq(jobId) {
     if (!this.data.has(jobId)) {
       return Promise.reject(new Error(`claimReceiptSeq: job ${jobId} not found`));
@@ -394,7 +232,7 @@ var MemoryJobStore = class {
       record.askedTopUpCurrency = asked.currency;
       record.topUpCapUnenforcedReason = asked.reason;
     }
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     if (seq > record.seq) record.seq = seq;
     this.notify(jobId, fullMessage);
     return Promise.resolve(seq);
@@ -407,7 +245,7 @@ var MemoryJobStore = class {
     const seq = this.allocateSeq(jobId);
     const fullMessage = { ...message, seq };
     this.messagesFor(jobId).push({ message: fullMessage, status: "pending-verification" });
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     if (seq > record.seq) record.seq = seq;
     this.fireNotifyOnly(jobId);
     return Promise.resolve(seq);
@@ -456,7 +294,7 @@ var MemoryJobStore = class {
         record.pendingX402AmountUsdcMicro = void 0;
       }
     }
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     this.notify(jobId, stored.message);
     return Promise.resolve({
       counters: snapshotCounters(record),
@@ -521,7 +359,7 @@ var MemoryJobStore = class {
     if (record?.status !== "awaiting-input") return Promise.resolve(false);
     applyTiming(record, structuredClone(record), Date.now(), "processing");
     record.status = "processing";
-    record.lastActivityAt = Date.now();
+    if (!isTerminal(record.status)) record.lastActivityAt = Date.now();
     return Promise.resolve(true);
   }
   async tryReactivationLock(jobId, fn) {
@@ -704,14 +542,6 @@ function mergeSignals(a, b) {
 }
 
 export {
-  toJobRecord,
-  fromJobRecord,
-  abortJob,
-  JobCancelledError,
-  providerMessage,
-  localMessage,
-  isTerminal,
-  isYieldMessage,
   accumulateAskedTopUp,
   UNCAPPABLE_ASK_TOTAL,
   isJobRetentionStore,

package/dist/{chunk-Z4KLECAC.js → chunk-N5RZ5HVB.js}

@@ -4,7 +4,7 @@ import {
   signedRequestHeaderMatchesDomain,
   signedRequestStatementHeader,
   testOnlySignedRequestDomain
-} from "./chunk-A4YFWZ7R.js";
+} from "./chunk-RCM3P2HE.js";
 import {
   diagnosticConsole
 } from "./chunk-ETXDTUJO.js";

package/dist/{chunk-TUA7PYH7.js → chunk-OQA7IHI4.js}

@@ -953,6 +953,112 @@ function generateEphemeralReceiptKey() {
   return { secret: bytesToHex(secretKey), pubkey: bytesToHex(publicKey) };
 }
 
+// src/lib/wallet-agent/keypair.ts
+import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
+var PRIVKEY_HEX_RE = /^[0-9a-f]{64}$/i;
+function derivePubkeyFromPrivkey(privkey) {
+  if (!PRIVKEY_HEX_RE.test(privkey)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey must be 64 hex characters (32 bytes).",
+      "Provide a valid secp256k1 private key as a 64-char hex string."
+    );
+  }
+  const bytes = hexToBytes2(privkey);
+  if (!secp256k12.utils.isValidSecretKey(bytes)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey is not a valid secp256k1 scalar (zero or out of curve order).",
+      "Generate a fresh key with: dvm wallet init"
+    );
+  }
+  const pub = secp256k12.getPublicKey(bytes);
+  return bytesToHex2(pub);
+}
+function bytesToHex2(bytes) {
+  return Buffer.from(bytes).toString("hex");
+}
+function hexToBytes2(hex) {
+  return Uint8Array.from(Buffer.from(hex, "hex"));
+}
+
+// src/lib/wallet-agent/sign.ts
+import { schnorr as schnorr2 } from "@noble/curves/secp256k1.js";
+var PUBKEY_COMPRESSED_HEX_RE = /^0[23][0-9a-f]{64}$/i;
+var PUBKEY_XONLY_HEX_RE = /^[0-9a-f]{64}$/i;
+var SIG_HEX_RE = /^[0-9a-f]{128}$/i;
+function signChallenge(privkeyHex, challenge) {
+  if (!PRIVKEY_HEX_RE.test(privkeyHex)) {
+    throw new DvmError(
+      "invalid_privkey",
+      "Privkey must be 64 hex characters (32 bytes).",
+      "Provide a valid secp256k1 private key as a 64-char hex string."
+    );
+  }
+  if (challenge.length !== 32) {
+    throw new DvmError(
+      "invalid_challenge",
+      `Challenge must be exactly 32 bytes; got ${challenge.length}.`,
+      "Pass the SHA-256 digest output (32 bytes)."
+    );
+  }
+  const sig = schnorr2.sign(challenge, hexToBytes3(privkeyHex));
+  return bytesToHex3(sig);
+}
+function verifyChallenge(pubkeyHex, challenge, sigHex) {
+  if (!SIG_HEX_RE.test(sigHex)) return false;
+  if (challenge.length !== 32) return false;
+  let xonly;
+  if (PUBKEY_COMPRESSED_HEX_RE.test(pubkeyHex)) {
+    xonly = hexToBytes3(pubkeyHex.slice(2));
+  } else if (PUBKEY_XONLY_HEX_RE.test(pubkeyHex)) {
+    xonly = hexToBytes3(pubkeyHex);
+  } else {
+    return false;
+  }
+  try {
+    return schnorr2.verify(hexToBytes3(sigHex), challenge, xonly);
+  } catch {
+    return false;
+  }
+}
+function hexToBytes3(hex) {
+  return Uint8Array.from(Buffer.from(hex, "hex"));
+}
+function bytesToHex3(bytes) {
+  return Buffer.from(bytes).toString("hex");
+}
+
+// src/lib/cashu/admin-auth.ts
+import { randomBytes } from "crypto";
+import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+var ADMIN_AUTH_NONCE_TTL_SECONDS = 300;
+var ADMIN_AUTH_CLOCK_SKEW_SECONDS = 30;
+var ADMIN_STATE_UNAVAILABLE = "admin_state_unavailable";
+function buildAdminChallenge(args) {
+  const msg = `dvmkit-admin:${args.method}:${args.path}:${args.dvmId}:${args.nonceHex}:${args.unixSeconds}`;
+  return sha2562(new TextEncoder().encode(msg));
+}
+function buildAdminAuthHeader(args) {
+  const nowMs = args.now ? args.now() : Date.now();
+  const unixSeconds = Math.floor(nowMs / 1e3);
+  const nonceBytes = args.randomNonce ? args.randomNonce() : Uint8Array.from(randomBytes(16));
+  const nonceHex = Buffer.from(nonceBytes).toString("hex");
+  const challenge = buildAdminChallenge({
+    method: args.method,
+    path: args.path,
+    dvmId: args.dvmId,
+    nonceHex,
+    unixSeconds
+  });
+  const sigHex = signChallenge(args.privkeyHex, challenge);
+  return {
+    header: `P2PK ${nonceHex}.${unixSeconds}.${sigHex}`,
+    nonceHex,
+    unixSeconds
+  };
+}
+
 // src/lib/builder-identity.ts
 import {
   chmodSync as chmodSync3,
@@ -964,8 +1070,8 @@ import {
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync5
 } from "fs";
-import { schnorr as schnorr2 } from "@noble/curves/secp256k1.js";
-import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
+import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
 
 // src/lib/builder-store.ts
 import {
@@ -1070,8 +1176,8 @@ function migrateV1Store(parsed) {
 
 // src/lib/builder-identity.ts
 function generateIdentity() {
-  const { secretKey, publicKey } = schnorr2.keygen();
-  return { pubkey: bytesToHex2(publicKey), secret: bytesToHex2(secretKey) };
+  const { secretKey, publicKey } = schnorr3.keygen();
+  return { pubkey: bytesToHex4(publicKey), secret: bytesToHex4(secretKey) };
 }
 function loadIdentitySecret() {
   if (!existsSync5(BUILDER_KEY_FILE)) return null;
@@ -1114,7 +1220,7 @@ function writeIdentity(keypair, opts = {}) {
   setIdentityPubkey(keypair.pubkey);
 }
 function hashCapabilities(capabilities) {
-  return bytesToHex2(sha2562(canonicaliseForSigning(capabilities)));
+  return bytesToHex4(sha2563(canonicaliseForSigning(capabilities)));
 }
 function buildAttestation(args) {
   return {
@@ -1127,14 +1233,14 @@ function buildAttestation(args) {
   };
 }
 function signAttestation(payload, secretHex) {
-  const secretBytes = hexToBytes2(secretHex);
+  const secretBytes = hexToBytes4(secretHex);
   const canonicalBytes = canonicaliseForSigning(payload);
-  return bytesToHex2(schnorr2.sign(canonicalBytes, secretBytes));
+  return bytesToHex4(schnorr3.sign(canonicalBytes, secretBytes));
 }
 function verifyAttestation(payload, signatureHex, pubkeyHex) {
   try {
     const canonicalBytes = canonicaliseForSigning(payload);
-    return schnorr2.verify(hexToBytes2(signatureHex), canonicalBytes, hexToBytes2(pubkeyHex));
+    return schnorr3.verify(hexToBytes4(signatureHex), canonicalBytes, hexToBytes4(pubkeyHex));
   } catch {
     return false;
   }
@@ -1157,12 +1263,12 @@ function warnAndTightenLooseKeyMode() {
   } catch {
   }
 }
-function bytesToHex2(bytes) {
+function bytesToHex4(bytes) {
   let s = "";
   for (const b of bytes) s += b.toString(16).padStart(2, "0");
   return s;
 }
-function hexToBytes2(hex) {
+function hexToBytes4(hex) {
   if (hex.length % 2 !== 0) {
     throw new Error(`hex string has odd length: ${String(hex.length)}`);
   }
@@ -1462,112 +1568,6 @@ function parseTraceparent(header) {
   return { traceId, parentSpanId, flags: parseInt(flagsHex, 16) };
 }
 
-// src/lib/wallet-agent/keypair.ts
-import { secp256k1 as secp256k12 } from "@noble/curves/secp256k1.js";
-var PRIVKEY_HEX_RE = /^[0-9a-f]{64}$/i;
-function derivePubkeyFromPrivkey(privkey) {
-  if (!PRIVKEY_HEX_RE.test(privkey)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey must be 64 hex characters (32 bytes).",
-      "Provide a valid secp256k1 private key as a 64-char hex string."
-    );
-  }
-  const bytes = hexToBytes3(privkey);
-  if (!secp256k12.utils.isValidSecretKey(bytes)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey is not a valid secp256k1 scalar (zero or out of curve order).",
-      "Generate a fresh key with: dvm wallet init"
-    );
-  }
-  const pub = secp256k12.getPublicKey(bytes);
-  return bytesToHex3(pub);
-}
-function bytesToHex3(bytes) {
-  return Buffer.from(bytes).toString("hex");
-}
-function hexToBytes3(hex) {
-  return Uint8Array.from(Buffer.from(hex, "hex"));
-}
-
-// src/lib/wallet-agent/sign.ts
-import { schnorr as schnorr3 } from "@noble/curves/secp256k1.js";
-var PUBKEY_COMPRESSED_HEX_RE = /^0[23][0-9a-f]{64}$/i;
-var PUBKEY_XONLY_HEX_RE = /^[0-9a-f]{64}$/i;
-var SIG_HEX_RE = /^[0-9a-f]{128}$/i;
-function signChallenge(privkeyHex, challenge) {
-  if (!PRIVKEY_HEX_RE.test(privkeyHex)) {
-    throw new DvmError(
-      "invalid_privkey",
-      "Privkey must be 64 hex characters (32 bytes).",
-      "Provide a valid secp256k1 private key as a 64-char hex string."
-    );
-  }
-  if (challenge.length !== 32) {
-    throw new DvmError(
-      "invalid_challenge",
-      `Challenge must be exactly 32 bytes; got ${challenge.length}.`,
-      "Pass the SHA-256 digest output (32 bytes)."
-    );
-  }
-  const sig = schnorr3.sign(challenge, hexToBytes4(privkeyHex));
-  return bytesToHex4(sig);
-}
-function verifyChallenge(pubkeyHex, challenge, sigHex) {
-  if (!SIG_HEX_RE.test(sigHex)) return false;
-  if (challenge.length !== 32) return false;
-  let xonly;
-  if (PUBKEY_COMPRESSED_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes4(pubkeyHex.slice(2));
-  } else if (PUBKEY_XONLY_HEX_RE.test(pubkeyHex)) {
-    xonly = hexToBytes4(pubkeyHex);
-  } else {
-    return false;
-  }
-  try {
-    return schnorr3.verify(hexToBytes4(sigHex), challenge, xonly);
-  } catch {
-    return false;
-  }
-}
-function hexToBytes4(hex) {
-  return Uint8Array.from(Buffer.from(hex, "hex"));
-}
-function bytesToHex4(bytes) {
-  return Buffer.from(bytes).toString("hex");
-}
-
-// src/lib/cashu/admin-auth.ts
-import { randomBytes } from "crypto";
-import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
-var ADMIN_AUTH_NONCE_TTL_SECONDS = 300;
-var ADMIN_AUTH_CLOCK_SKEW_SECONDS = 30;
-var ADMIN_STATE_UNAVAILABLE = "admin_state_unavailable";
-function buildAdminChallenge(args) {
-  const msg = `dvmkit-admin:${args.method}:${args.path}:${args.dvmId}:${args.nonceHex}:${args.unixSeconds}`;
-  return sha2563(new TextEncoder().encode(msg));
-}
-function buildAdminAuthHeader(args) {
-  const nowMs = args.now ? args.now() : Date.now();
-  const unixSeconds = Math.floor(nowMs / 1e3);
-  const nonceBytes = args.randomNonce ? args.randomNonce() : Uint8Array.from(randomBytes(16));
-  const nonceHex = Buffer.from(nonceBytes).toString("hex");
-  const challenge = buildAdminChallenge({
-    method: args.method,
-    path: args.path,
-    dvmId: args.dvmId,
-    nonceHex,
-    unixSeconds
-  });
-  const sigHex = signChallenge(args.privkeyHex, challenge);
-  return {
-    header: `P2PK ${nonceHex}.${unixSeconds}.${sigHex}`,
-    nonceHex,
-    unixSeconds
-  };
-}
-
 // src/lib/monotonic-clock.ts
 function createMonotonicClock() {
   let anchorWallMs = Date.now();
@@ -1662,6 +1662,14 @@ export {
   receiptPubkeyFromSecret,
   deriveReceiptKeypair,
   generateEphemeralReceiptKey,
+  PRIVKEY_HEX_RE,
+  derivePubkeyFromPrivkey,
+  verifyChallenge,
+  ADMIN_AUTH_NONCE_TTL_SECONDS,
+  ADMIN_AUTH_CLOCK_SKEW_SECONDS,
+  ADMIN_STATE_UNAVAILABLE,
+  buildAdminChallenge,
+  buildAdminAuthHeader,
   generateIdentity,
   loadIdentitySecret,
   writeIdentity,
@@ -1685,13 +1693,5 @@ export {
   receiptFailureDetail,
   isPublicRequestId,
   parseTraceparent,
-  PRIVKEY_HEX_RE,
-  derivePubkeyFromPrivkey,
-  verifyChallenge,
-  ADMIN_AUTH_NONCE_TTL_SECONDS,
-  ADMIN_AUTH_CLOCK_SKEW_SECONDS,
-  ADMIN_STATE_UNAVAILABLE,
-  buildAdminChallenge,
-  buildAdminAuthHeader,
   createMonotonicClock
 };

package/dist/{chunk-6DOGTAHA.js → chunk-QR2EF2NI.js}

@@ -10,39 +10,6 @@ import {
   projectSpanRow
 } from "./chunk-ETXDTUJO.js";
 
-// src/sdk/step-cache.ts
-var StepCache = class _StepCache {
-  cache = /* @__PURE__ */ new Map();
-  has(id) {
-    return this.cache.has(id);
-  }
-  get(id) {
-    return this.getRecord(id).value;
-  }
-  getRecord(id) {
-    const record = this.cache.get(id);
-    if (record === void 0) throw new Error(`StepCache: no cached result for step "${id}"`);
-    return record;
-  }
-  set(id, value, costs) {
-    this.cache.set(id, {
-      id,
-      value,
-      ...costs !== void 0 && costs.length > 0 ? { costs: costs.map(({ amount, currency }) => ({ amount, currency })) } : {}
-    });
-  }
-  serialize() {
-    return [...this.cache.values()];
-  }
-  static deserialize(records) {
-    const cache = new _StepCache();
-    for (const { id, value, costs } of records) {
-      cache.set(id, value, costs);
-    }
-    return cache;
-  }
-};
-
 // src/sdk/logger.ts
 function createConsoleLogger(_jobId) {
   return {
@@ -373,15 +340,15 @@ async function withSpan(opts, fn) {
 
 // src/observability/datasets.ts
 var SPANS_DATASETS = [
-  { name: "platform", retentionDays: 90 },
-  { name: "cashu", retentionDays: 90 },
-  { name: "lightning", retentionDays: 90 },
-  { name: "stripe", retentionDays: 90 },
-  { name: "x402", retentionDays: 90 },
-  { name: "tempo", retentionDays: 90 },
-  { name: "isolate", retentionDays: 90 },
-  { name: "audit", retentionDays: 365 },
-  { name: "cron", retentionDays: 30 }
+  { name: "platform", retentionDays: 730 },
+  { name: "cashu", retentionDays: 730 },
+  { name: "lightning", retentionDays: 730 },
+  { name: "stripe", retentionDays: 730 },
+  { name: "x402", retentionDays: 730 },
+  { name: "tempo", retentionDays: 730 },
+  { name: "isolate", retentionDays: 730 },
+  { name: "audit", retentionDays: 730 },
+  { name: "cron", retentionDays: 730 }
 ];
 var DATASET_NAMES = new Set(SPANS_DATASETS.map((d) => d.name));
 
@@ -485,7 +452,6 @@ function buildNoopLoggers() {
 }
 
 export {
-  StepCache,
   createConsoleLogger,
   createStdoutLogger,
   createNoopLogger,