@dvmkit/sdk 0.6.0-rc.1 → 0.7.0-rc.10

package/dist/{chunk-HHBDBMEO.js → chunk-53SNRGQQ.js}

@@ -1,20 +1,31 @@
 import {
-  MemoryProcessedPaymentStore,
-  PostgresProcessedPaymentStore,
-  ProcessedPaymentReplayError
-} from "./chunk-XRLKGCAW.js";
+  TEMPO_MODERATO_CHAIN_ID,
+  TEMPO_MODERATO_RPC,
+  advertisedMethods,
+  challengeMeta,
+  installHostedTempoChargeGuard,
+  installHostedTempoCloseGuard,
+  isTempoInsufficientFundsError,
+  resolveTempoNetwork
+} from "./chunk-R3TQSXWT.js";
+import {
+  x402EarnedCeiling
+} from "./chunk-FBQVOOYF.js";
 import {
   createX402FacilitatorAuthHeaders,
   createX402FacilitatorClient,
+  paymentFailureStage,
   settleWithFacilitator,
-  verifyWithFacilitator
-} from "./chunk-PLG4XER6.js";
+  verifyWithFacilitator,
+  withPaymentDiagnostics,
+  withPaymentStage
+} from "./chunk-2NUFE2PG.js";
 import {
   MemoryCreditLedger
-} from "./chunk-FYRR2UEZ.js";
+} from "./chunk-GLIAR7RN.js";
 import {
   PostgresJobStore
-} from "./chunk-EQLA4FFY.js";
+} from "./chunk-OHUXCAOM.js";
 import {
   parseStoreValue
 } from "./chunk-YG7G4DPZ.js";
@@ -25,7 +36,7 @@ import {
   humanizeZodIssues,
   signedRequestInput,
   zodIssuesOf
-} from "./chunk-N5RZ5HVB.js";
+} from "./chunk-X6S2CHFM.js";
 import {
   MemoryJobStore,
   UNCAPPABLE_ASK_TOTAL,
@@ -34,7 +45,7 @@ import {
   isJobRetentionStore,
   isReceiptIssuingStore,
   isStreamableJobStore
-} from "./chunk-IV6Q7NRW.js";
+} from "./chunk-C5RIQWG4.js";
 import {
   ContentHoldError,
   JobCancelledError,
@@ -53,23 +64,28 @@ import {
   ADMIN_AUTH_CLOCK_SKEW_SECONDS,
   ADMIN_AUTH_NONCE_TTL_SECONDS,
   ADMIN_STATE_UNAVAILABLE,
+  IMPLICIT_CREDIT_TTL_MS,
+  JOB_IDENTITY_HEADER,
   TEMPO_SESSION_UPDATED_REASON,
   X402_BATCH_CHANNEL_ABI,
   attestedDvmIdentity,
   buildAdminChallenge,
   checkMintHealth,
+  computeResultHash,
   createMonotonicClock,
+  formatStaleness,
   getWallet,
+  isJobIdentityValue,
   isPublicRequestId,
-  isTestMintUrl,
   isX402SettlementReconciliationReason,
-  normaliseMintUrl,
   parseTraceparent,
   receiptPubkeyFromSecret,
+  signDrainReceipt,
+  signFundingReceipt,
+  signReceipt,
   toLockPubkey,
-  verifyCashuToken,
   verifyChallenge
-} from "./chunk-OQA7IHI4.js";
+} from "./chunk-OBBVDKLE.js";
 import {
   X402_BATCH_SETTLEMENT_SCHEME,
   X402_DEFAULT_FACILITATOR,
@@ -82,38 +98,28 @@ import {
   encodePaymentRequiredHeader,
   encodeSettleResponseHeader,
   exactEvmAuthorization,
-  paymentRequiredV2FromV1,
-  x402NetworkToCaip2
-} from "./chunk-IWQHUSMO.js";
-import {
-  IMPLICIT_CREDIT_TTL_MS,
-  computeResultHash,
-  formatStaleness,
   msatsToUsd,
   msatsToUsdc,
-  signDrainReceipt,
-  signFundingReceipt,
-  signReceipt,
-  usdcToMsats
-} from "./chunk-PAIM66YA.js";
-import {
-  resolveRpcOverride
-} from "./chunk-CZULM42S.js";
+  paymentRequiredV2FromV1,
+  resolveRpcOverride,
+  usdcToMsats,
+  x402NetworkToCaip2
+} from "./chunk-62FI3NJF.js";
 import {
   RAIL_REFUNDABLE,
   canonicalRequestPath,
+  canonicalize,
   isZodSchema
-} from "./chunk-RCM3P2HE.js";
+} from "./chunk-UKD3R2KU.js";
 import {
-  canonicalize
-} from "./chunk-OFVV37XC.js";
+  createConsoleLogger
+} from "./chunk-MDW7ZR7V.js";
 import {
-  createConsoleLogger,
   loggers,
   pinDimension,
   withSpan,
   withTraceContext
-} from "./chunk-QR2EF2NI.js";
+} from "./chunk-KCQDXIJU.js";
 import {
   StepCache
 } from "./chunk-BQJIFRAZ.js";
@@ -122,16 +128,15 @@ import {
   InvalidCurrencyError,
   UnsupportedCurrencyError,
   createFxFetcher,
-  fxRateFor,
-  resolveFxSourceFromEnv,
-  validateCurrency
-} from "./chunk-BYCEKO65.js";
-import {
   fiatToSatsCeil,
+  fxRateFor,
   parseUsdPrice,
+  readFxSourceFailure,
+  resolveFxSourceFromEnv,
   roundUsd,
-  satsToFiat
-} from "./chunk-AT6V3SY7.js";
+  satsToFiat,
+  validateCurrency
+} from "./chunk-HPCXF3DV.js";
 import {
   CreditLedger,
   CreditLedgerError,
@@ -147,30 +152,26 @@ import {
   isNonChannelBitcoinRail,
   netOwedSats,
   x402SettlementPending
-} from "./chunk-JH3SX3LY.js";
-import {
-  withSdkInitLock
-} from "./chunk-COYKJRMM.js";
+} from "./chunk-IRXIH775.js";
 import {
   withPostgresRecoveryContext
-} from "./chunk-P6QON7ER.js";
+} from "./chunk-NV7Z7377.js";
 import {
+  DvmError,
   x402NetworkByCaip2
-} from "./chunk-RLTSCKRI.js";
-import {
-  TEMPO_MODERATO_CHAIN_ID,
-  TEMPO_MODERATO_RPC,
-  advertisedMethods,
-  challengeMeta,
-  installHostedTempoChargeGuard,
-  installHostedTempoCloseGuard,
-  isTempoInsufficientFundsError,
-  resolveTempoNetwork
-} from "./chunk-IXR5RFK7.js";
+} from "./chunk-BPYMEMQX.js";
 import {
   createDiagnosticCapabilityAuthority,
   diagnosticConsole
-} from "./chunk-ETXDTUJO.js";
+} from "./chunk-ZCNPIILZ.js";
+import {
+  MemoryProcessedPaymentStore,
+  PostgresProcessedPaymentStore,
+  ProcessedPaymentReplayError
+} from "./chunk-XRLKGCAW.js";
+import {
+  withSdkInitLock
+} from "./chunk-COYKJRMM.js";
 
 // src/sdk/server/lock-pubkey-store.ts
 async function initLockPubkeyTable(db) {
@@ -1073,7 +1074,8 @@ async function resolveFxSnapshot(fetcher) {
       return {
         ok: false,
         reason: "rate_stale_refused",
-        detail: `snapshot ${err.knownStale.staleDays.toString()}d stale`
+        detail: `snapshot ${err.knownStale.staleDays.toString()}d stale`,
+        sourceFailure: readFxSourceFailure(err)
       };
     }
     const cached = fetcher.lastKnown?.();
@@ -1083,7 +1085,8 @@ async function resolveFxSnapshot(fetcher) {
     return {
       ok: false,
       reason: "rate_unavailable",
-      detail: err instanceof Error ? err.message : String(err)
+      detail: err instanceof Error ? err.message : String(err),
+      sourceFailure: err instanceof FxRateUnavailableError ? readFxSourceFailure(err) ?? { category: "unknown" } : { category: "unknown" }
     };
   }
 }
@@ -1110,7 +1113,10 @@ async function msatsToFiatMicro(args) {
       // A currency the snapshot never carried is the rate source narrowing, not
       // a currency this DVM doesn't speak — `fxRateFor` separates the two.
       reason: err instanceof FxRateUnavailableError ? "rate_unavailable" : "unsupported_currency",
-      detail: err instanceof Error ? err.message : String(err)
+      detail: err instanceof Error ? err.message : String(err),
+      ...err instanceof FxRateUnavailableError && {
+        sourceFailure: readFxSourceFailure(err) ?? { category: "unknown" }
+      }
     };
   }
   const amountMicro = Math.round(amount * 1e6);
@@ -1975,9 +1981,10 @@ async function createX402BatchSettlementServer(opts) {
     throw new Error("x402 batch-settlement payTo must be a 20-byte EVM address");
   }
   const withdrawDelay = opts.config.withdrawDelay ?? X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS;
-  if (!Number.isInteger(withdrawDelay) || withdrawDelay < X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS) {
+  const minimumWithdrawDelay = opts.network === X402_BATCH_SETTLEMENT_NETWORK ? 900 : X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS;
+  if (!Number.isInteger(withdrawDelay) || withdrawDelay < minimumWithdrawDelay) {
     throw new Error(
-      `x402 batch-settlement withdrawDelay must be at least ${String(X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS)} seconds`
+      `x402 batch-settlement withdrawDelay must be at least ${String(minimumWithdrawDelay)} seconds`
     );
   }
   if (opts.config.autoSettlement !== false && opts.config.autoSettlement?.selectRefundChannels) {
@@ -2078,6 +2085,7 @@ async function createX402BatchSettlementServer(opts) {
     payTo: opts.payTo,
     network: opts.network,
     storage,
+    earnedNative: opts.earnedNative,
     settleIntervalMs: (settlementConfig.settleIntervalSecs ?? X402_BATCH_AUTO_SETTLEMENT.settleIntervalSecs ?? 300) * 1e3,
     ...postgres ? { listWedgedRefunds: () => listWedgedRefunds(postgres) } : {}
   });
@@ -2832,22 +2840,19 @@ function claimCeilingSelector(earnedNative) {
       const charged = BigInt(channel.chargedCumulativeAmount);
       const claimed = BigInt(channel.totalClaimed);
       if (charged <= claimed) continue;
-      let earned;
-      try {
-        earned = await earnedNative(channel.channelId.toLowerCase());
-      } catch (error) {
+      const resolved = await x402EarnedCeiling(channel, earnedNative);
+      if (resolved.kind === "unresolved") {
         loggers.x402.warn("x402_claim_ceiling_unresolved", {
           "channel.id": channel.channelId,
-          error: error instanceof Error ? error.message : String(error)
+          error: resolved.error instanceof Error ? resolved.error.message : String(resolved.error)
         });
         continue;
       }
-      if (earned === void 0) {
+      if (resolved.kind === "unbound") {
         loggers.x402.warn("x402_claim_ceiling_unbound", { "channel.id": channel.channelId });
         continue;
       }
-      const wanted = BigInt(earned);
-      const ceiling = wanted < charged ? wanted : charged;
+      const { ceiling } = resolved;
       if (ceiling <= claimed) continue;
       selected.push({ ...channel, chargedCumulativeAmount: ceiling.toString() });
     }
@@ -3115,6 +3120,10 @@ function decodeBatchPayment(header) {
   if (!isBatchSettlementDepositPayload2(parsed.payload) && !isBatchSettlementVoucherPayload(parsed.payload) && !isBatchSettlementRefundPayload2(parsed.payload)) {
     throw new Error("invalid batch-settlement payload");
   }
+  const voucher = parsed.payload.voucher;
+  if (typeof voucher.channelId !== "string" || typeof voucher.maxClaimableAmount !== "string" || typeof voucher.signature !== "string") {
+    throw new Error("invalid batch-settlement voucher");
+  }
   return parsed;
 }
 function batchVoucher(payload) {
@@ -3163,10 +3172,66 @@ function isRecord(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 
+// src/sdk/server/payment-diagnostics.ts
+import { Errors } from "mppx";
+function paymentFailureFields(error) {
+  let category = "unknown";
+  try {
+    if (error instanceof ProcessedPaymentReplayError) category = "replay_detected";
+    else if (error instanceof CreditLedgerError) category = "ledger_refused";
+    else if (error instanceof Errors.InvalidChallengeError) category = "invalid_challenge";
+    else if (error instanceof Errors.MalformedCredentialError || error instanceof Errors.InvalidPayloadError) category = "malformed_credential";
+    else if (error instanceof Errors.PaymentExpiredError) category = "payment_expired";
+    else if (error instanceof Errors.VerificationFailedError) category = "verification_failed";
+    else if (error instanceof Errors.PaymentInsufficientError || error instanceof Errors.InsufficientBalanceError) category = "insufficient_funds";
+    else if (error instanceof Errors.InvalidSignatureError) category = "invalid_signature";
+    else if (error instanceof Errors.PaymentMethodUnsupportedError) category = "unsupported_method";
+  } catch {
+  }
+  return { failure_category: category, failure_stage: paymentFailureStage(error) };
+}
+
 // src/sdk/server/payment.ts
-import { randomBytes, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash4, randomBytes, randomUUID as randomUUID2 } from "crypto";
 import { Challenge } from "mppx";
 
+// src/lib/cashu/verify.ts
+import { getTokenMetadata } from "@cashu/cashu-ts";
+function verifyCashuToken(token, acceptedMints) {
+  let mint, unit, totalMsats;
+  try {
+    const meta = getTokenMetadata(token);
+    mint = meta.mint;
+    unit = meta.unit;
+    totalMsats = meta.amount.toNumber() * 1e3;
+  } catch {
+    throw new DvmError(
+      "cashu_invalid_token",
+      "The Cashu token could not be decoded.",
+      "Ensure the token is a valid cashuA... or cashuB... string."
+    );
+  }
+  const normalised = acceptedMints.map(normaliseMintUrl);
+  if (!normalised.includes(normaliseMintUrl(mint))) {
+    throw new DvmError(
+      "cashu_mint_not_accepted",
+      `Mint ${mint} is not accepted by this provider.`,
+      `Accepted mints: ${acceptedMints.join(", ")}`
+    );
+  }
+  return { mint, totalMsats, unit };
+}
+function normaliseMintUrl(url) {
+  try {
+    const u = new URL(url);
+    u.hostname = u.hostname.toLowerCase();
+    u.pathname = u.pathname.replace(/\/+/g, "/").replace(/\/+$/, "") || "/";
+    return u.toString().replace(/\/$/, "");
+  } catch {
+    return url.toLowerCase().replace(/\/+$/, "");
+  }
+}
+
 // src/sdk/server/mpp-units.ts
 function decimalsFor(methodName) {
   switch (methodName) {
@@ -3221,6 +3286,22 @@ function methodNativeAmountToDecimal(amount, methodName) {
   return `${nativeAmount2 / scale}.${(nativeAmount2 % scale).toString().padStart(decimals, "0")}`;
 }
 
+// src/lib/mints.ts
+function isTestMintUrl(url) {
+  let host;
+  try {
+    host = new URL(url).hostname.toLowerCase();
+  } catch {
+    return false;
+  }
+  if (host.startsWith("[") && host.endsWith("]")) host = host.slice(1, -1);
+  if (LOOPBACK_HOSTS.has(host)) return true;
+  if (host.endsWith(".localhost")) return true;
+  return TEST_MINT_HOSTS.has(host);
+}
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "0.0.0.0", "::1"]);
+var TEST_MINT_HOSTS = /* @__PURE__ */ new Set(["testnut.cashu.space", "dvmkit-testmint.fly.dev"]);
+
 // src/sdk/server/wallet-accumulator-receive.ts
 import {
   Amount as Amount2,
@@ -3470,6 +3551,9 @@ async function issueUpfrontChallenges(mpp, requiredMsats, resourcePath, btcUsdRa
   );
 }
 async function verifyUpfrontPayment(opts) {
+  return withPaymentDiagnostics(() => verifyUpfrontPaymentInScope(opts));
+}
+async function verifyUpfrontPaymentInScope(opts) {
   const {
     cashuToken,
     requiredMsats,
@@ -3735,7 +3819,10 @@ async function verifyUpfrontPayment(opts) {
       );
     } catch (err) {
       const mapped = mapLedgerCommitError(err, x402Requirements);
-      if (mapped) return mapped;
+      if (mapped) {
+        logCredentialRejected("x402", "upfront", err);
+        return mapped;
+      }
       logCredentialRejected("x402", "upfront", err);
       return {
         paidMsats: 0,
@@ -3796,15 +3883,15 @@ async function verifyUpfrontPayment(opts) {
           x402Requirements
         });
       }
-      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
-      const receipt = await verifyX402Payment(
+      const { verifyX402Payment } = await import("./x402-3IQ3HXSG.js");
+      const receipt = await withPaymentStage("verifier_broadcast", () => verifyX402Payment(
         x402Payment,
         x402Config,
         requiredUsdcMicro,
         x402Resource ?? "/v1/job",
         rate ?? 0,
         x402ExactVersions
-      );
+      ));
       if (receipt.verified) {
         const settledUsdcMicro = receipt.amountUsdcMicro;
         const paidMsats = settledUsdcMicro === void 0 ? receipt.amountMsats : x402SettledShare(requiredMsats, Number(requiredUsdcMicro), settledUsdcMicro);
@@ -3848,7 +3935,10 @@ async function verifyUpfrontPayment(opts) {
             });
           } catch (err) {
             const mapped = mapLedgerCommitError(err, x402Requirements, true);
-            if (mapped) return mapped;
+            if (mapped) {
+              logCredentialRejected("x402", "upfront", err);
+              return mapped;
+            }
             throw err;
           }
         }
@@ -3956,6 +4046,30 @@ async function verifyUpfrontPayment(opts) {
       }
       const expectedAmount = opts.priceFiat?.currency === "usd" ? fiatMicroToMethodAmount(opts.priceFiat.amountMicro, cred.challenge.method) : msatsToMethodAmount(requiredMsats, cred.challenge.method, rate);
       const sessionBasis = mppSessionBasis(cred);
+      const replayRealm = mpp.realm ?? cred.challenge.realm;
+      if (consumedCredentialStore && await withPaymentStage("replay_store", () => consumedCredentialStore.has(replayRealm, cred.challenge.id))) {
+        const mppChallenges = await issueUpfrontChallenges(
+          mpp,
+          requiredMsats,
+          resourcePath ?? "/v1/job",
+          rate,
+          sessionIssuable,
+          opts.fundOnly?.allowOneShotStablecoin,
+          opts.priceFiat
+        );
+        return {
+          paidMsats: 0,
+          receivedProofs: [],
+          error: {
+            body: paymentErrorBody("payment_invalid", {
+              message: "MPP credential already used"
+            }),
+            status: 402,
+            mppChallenges,
+            ...x402Requirements && { x402Requirements }
+          }
+        };
+      }
       let tempoReceipt;
       const broadcast = async () => {
         const receipt = await loggers.tempo.span(
@@ -3965,7 +4079,7 @@ async function verifyUpfrontPayment(opts) {
             challenge_id: cred.challenge.id,
             amount: expectedAmount
           },
-          () => mpp.broadcastCredential(mppCredential, {
+          () => withPaymentStage("verifier_broadcast", () => mpp.broadcastCredential(mppCredential, {
             request: { amount: expectedAmount },
             ...opts.hostingAdmissionId && {
               hostedPaymentIntent: {
@@ -3984,7 +4098,8 @@ async function verifyUpfrontPayment(opts) {
               path: resourcePath ?? "/v1/job",
               nonce: challengeMeta(cred.challenge)?.nonce ?? ""
             }
-          })
+          })),
+          { onError: paymentFailureFields }
         );
         tempoReceipt = receipt;
         return receipt;
@@ -4041,7 +4156,10 @@ async function verifyUpfrontPayment(opts) {
           credited = accepted.result;
         } catch (err) {
           const mapped = mapLedgerCommitError(err, x402Requirements, true);
-          if (mapped) return mapped;
+          if (mapped) {
+            logCredentialRejected("tempo", "upfront", err);
+            return mapped;
+          }
           throw err;
         }
       } else {
@@ -4069,35 +4187,12 @@ async function verifyUpfrontPayment(opts) {
           }
         };
       }
-      if (consumedCredentialStore) {
-        const realm = mpp.realm;
-        const id = cred.challenge.id;
-        if (await consumedCredentialStore.has(realm, id)) {
-          const mppChallenges = await issueUpfrontChallenges(
-            mpp,
-            requiredMsats,
-            resourcePath ?? "/v1/job",
-            rate,
-            sessionIssuable,
-            opts.fundOnly?.allowOneShotStablecoin,
-            opts.priceFiat
-          );
-          return {
-            paidMsats: 0,
-            receivedProofs: [],
-            error: {
-              body: paymentErrorBody("payment_invalid", {
-                message: "MPP credential already used"
-              }),
-              status: 402,
-              mppChallenges,
-              ...x402Requirements && { x402Requirements }
-            }
-          };
-        }
-        if (!sessionBasis) {
-          await consumedCredentialStore.mark(realm, id, CONSUMED_CREDENTIAL_TTL_MS / 1e3);
-        }
+      if (consumedCredentialStore && !sessionBasis) {
+        await withPaymentStage("replay_store", () => consumedCredentialStore.mark(
+          replayRealm,
+          cred.challenge.id,
+          CONSUMED_CREDENTIAL_TTL_MS / 1e3
+        ));
       }
       if (ledgerCtx) {
         try {
@@ -4111,16 +4206,27 @@ async function verifyUpfrontPayment(opts) {
           });
         } catch (err) {
           const mapped = mapLedgerCommitError(err, x402Requirements, true);
-          if (mapped) return mapped;
+          if (mapped) {
+            logCredentialRejected("tempo", "upfront", err);
+            return mapped;
+          }
           throw err;
         }
       }
       if (sessionBasis && consumedCredentialStore) {
-        await consumedCredentialStore.mark(
-          mpp.realm,
+        await withPaymentStage("replay_store", () => consumedCredentialStore.mark(
+          replayRealm,
           cred.challenge.id,
           CONSUMED_CREDENTIAL_TTL_MS / 1e3
-        );
+        )).catch((error) => {
+          diagnosticConsole.warn({
+            level: "warn",
+            event: "tempo_replay_mark_failed",
+            phase: "upfront",
+            rail: "tempo",
+            ...paymentFailureFields(error)
+          });
+        });
       }
       if (credited) {
         await mpp.completeHostedTempoCharge?.(cred.challenge.id).catch((error) => {
@@ -4329,6 +4435,22 @@ async function verifyTempoSessionManagementCredential(args) {
       throw new Error("Hosted Tempo close requires non-mutating credential validation");
     }
     await args.mpp.validateCredential(credential, verifyOptions);
+    if (args.action === "close") {
+      if (!args.mpp.assertTempoSessionCloseVoucher) {
+        throw new Error("Hosted Tempo close requires stored-channel voucher validation");
+      }
+      const { cumulativeAmount, signature } = credential.payload;
+      if (typeof cumulativeAmount !== "string" || typeof signature !== "string") {
+        throw new Error("Expected a Tempo session close voucher");
+      }
+      await args.mpp.assertTempoSessionCloseVoucher({
+        channelId: payload.channelId,
+        cumulativeAmount: BigInt(cumulativeAmount),
+        signature,
+        descriptor: credential.payload.descriptor,
+        request: credential.challenge.request
+      });
+    }
   }
   await args.onBound?.();
   const receipt = await args.mpp.broadcastCredential(credential, verifyOptions);
@@ -4689,6 +4811,9 @@ function buildPaymentErrorResponse(body, challenges, x402Requirements, status, x
   return new Response(JSON.stringify(mergedBody), { status: status ?? 402, headers });
 }
 async function verifyIncomingPayment(body, opts, snapshot) {
+  return withPaymentDiagnostics(() => verifyIncomingPaymentInScope(body, opts, snapshot));
+}
+async function verifyIncomingPaymentInScope(body, opts, snapshot) {
   if (body.type !== "payment") return {};
   if (body.content.cashu_token) {
     if (opts.cashuMode === "p2pk-accumulator" && (opts.accumulatorDb || opts.disposableCashu) && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
@@ -4771,15 +4896,15 @@ async function verifyIncomingPayment(body, opts, snapshot) {
           snapshot
         });
       }
-      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
-      const receipt = await verifyX402Payment(
+      const { verifyX402Payment } = await import("./x402-3IQ3HXSG.js");
+      const receipt = await withPaymentStage("verifier_broadcast", () => verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
         requiredUsdcMicro,
         opts.resourcePath ?? "/v1/job",
         rate,
         opts.x402ExactVersions
-      );
+      ));
       if (!receipt.verified) {
         return {
           error: {
@@ -4828,6 +4953,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
         } catch (err) {
           const mapped = mapLedgerCommitError(err, void 0, true);
           if (mapped?.error) {
+            logCredentialRejected("x402", "mid-job", err);
             return { error: { body: mapped.error.body, status: mapped.error.status } };
           }
           throw err;
@@ -4935,13 +5061,14 @@ async function verifyIncomingPayment(body, opts, snapshot) {
           challenge_id: credential.challenge.id,
           amount: expectedAmount
         },
-        () => mppServer.broadcastCredential(credential, {
+        () => withPaymentStage("verifier_broadcast", () => mppServer.broadcastCredential(credential, {
           request: { amount: expectedAmount },
           ...opts.hostingPaymentSeq !== void 0 && {
             hostedPaymentIntent: { jobId: opts.jobId, paymentSeq: opts.hostingPaymentSeq }
           },
           ...expectedMeta && { meta: expectedMeta }
-        })
+        })),
+        { onError: paymentFailureFields }
       );
       let credited;
       if (ledgerCtx) {
@@ -4950,6 +5077,7 @@ async function verifyIncomingPayment(body, opts, snapshot) {
         } catch (err) {
           const mapped = mapLedgerCommitError(err, void 0, true);
           if (mapped?.error) {
+            logCredentialRejected("tempo", "mid-job", err);
             return { error: { body: mapped.error.body, status: mapped.error.status } };
           }
           throw err;
@@ -5144,6 +5272,9 @@ function applyPaymentInfoToJob(job, info) {
   creditPendingPayment(job);
 }
 async function processIncomingPayment(job, body, opts) {
+  return withPaymentDiagnostics(() => processIncomingPaymentInScope(job, body, opts));
+}
+async function processIncomingPaymentInScope(job, body, opts) {
   if (body.type !== "payment") return null;
   if (body.content.cashu_token) {
     if (opts.cashuMode === "p2pk-accumulator" && (opts.accumulatorDb || opts.disposableCashu) && opts.dvmId && opts.lockPubkeys && opts.lockPubkeys.length > 0) {
@@ -5196,15 +5327,15 @@ async function processIncomingPayment(job, body, opts) {
     try {
       const requiredMsats = job.pendingPaymentMsats ?? 0;
       const requiredUsdcMicro = job.pendingX402AmountUsdcMicro !== void 0 ? BigInt(job.pendingX402AmountUsdcMicro) : BigInt(msatsToUsdc(requiredMsats, rate));
-      const { verifyX402Payment } = await import("./x402-R6HPBY5D.js");
-      const receipt = await verifyX402Payment(
+      const { verifyX402Payment } = await import("./x402-3IQ3HXSG.js");
+      const receipt = await withPaymentStage("verifier_broadcast", () => verifyX402Payment(
         body.content.x402_payment,
         opts.x402Config,
         requiredUsdcMicro,
         opts.resourcePath ?? "/v1/job",
         rate,
         opts.x402ExactVersions
-      );
+      ));
       if (receipt.verified) {
         if (job.pendingX402Nonce !== void 0) {
           const incomingNonce = decodePayment(body.content.x402_payment).payload.authorization.nonce;
@@ -5271,13 +5402,14 @@ async function processIncomingPayment(job, body, opts) {
           challenge_id: credential.challenge.id,
           amount: expectedAmount
         },
-        () => mppHandle.broadcastCredential(credential, {
+        () => withPaymentStage("verifier_broadcast", () => mppHandle.broadcastCredential(credential, {
           request: { amount: expectedAmount },
           ...opts.hostingPaymentSeq !== void 0 && {
             hostedPaymentIntent: { jobId: opts.jobId, paymentSeq: opts.hostingPaymentSeq }
           },
           ...expectedMeta && { meta: expectedMeta }
-        })
+        })),
+        { onError: paymentFailureFields }
       );
       if (!job.pendingMppChallengeIds?.includes(credential.challenge.id)) {
         return {
@@ -5583,7 +5715,10 @@ async function resolveTopUpLedgerContext(opts, snapshot, binding) {
         job_id: opts.jobId,
         credit_id: snapshot.creditId,
         draw_id: snapshot.drawId,
-        ...extra
+        ...extra,
+        ...typeof opts.jobId === "string" && {
+          job_id_hash: createHash4("sha256").update(opts.jobId, "utf8").digest("hex")
+        }
       }
     );
   };
@@ -5646,7 +5781,10 @@ async function resolveTopUpLedgerContext(opts, snapshot, binding) {
     logSkip("denomination_unavailable", {
       currency,
       cause: denomination.reason,
-      ...denomination.detail !== void 0 && { detail: denomination.detail }
+      ...denomination.sourceFailure && {
+        source_failure: denomination.sourceFailure.category,
+        source_status: denomination.sourceFailure.httpStatus
+      }
     });
     return void 0;
   }
@@ -5795,6 +5933,9 @@ function withDrawBasis(info, ctx, committed) {
   };
 }
 async function fundAndDraw(ctx, funding, tx) {
+  return withPaymentStage("funding_ledger", () => fundAndDrawInScope(ctx, funding, tx));
+}
+async function fundAndDrawInScope(ctx, funding, tx) {
   const env = ctx.creditEnvelope;
   const fundedMicro = funding.fundedMicro ?? fundedMicroFor(ctx.priceFiat, funding.paidMsats, ctx.requiredMsats);
   const shortMidJob = ctx.midJob === true && funding.paidMsats < ctx.requiredMsats;
@@ -5833,9 +5974,11 @@ async function fundAndDraw(ctx, funding, tx) {
     throw new Error("deposit outbox enqueue requires the rail's open transaction and a DVM id");
   }
   const commitDeposit = async (result, credit) => {
+    const instrument = credit.rail ? storedCreditBinding(credit).instrument : void 0;
     const report = {
       ...deposit,
-      callerPubkey: credit.callerPubkey
+      callerPubkey: credit.callerPubkey,
+      ...instrument && { instrument }
     };
     if (createsDepositLiability && enqueue && tx) {
       await enqueue(tx, creditDepositPayload(ctx.dvmId, report));
@@ -6017,6 +6160,7 @@ function creditDepositPayload(dvmId, funding) {
     creditCurrency: funding.currency,
     fundedAt: funding.fundedAt,
     expiryMs: funding.expiryMs,
+    ...funding.instrument && { instrument: funding.instrument },
     // label a session-funded deposit as one, whether or not the chain
     // binding below could be read. `rail: "tempo"` alone does not say — a
     // `tempo/charge` one-shot funds a credit with no channel at all — so this is
@@ -6221,7 +6365,7 @@ async function commitMarkedFunding(ctx, funding, outerTx) {
     const env = ctx.creditEnvelope;
     const creditId = ctx.fundOnly?.creditId ?? ctx.topUp?.creditId ?? env?.creditId ?? implicitCreditId(funding.rail, funding.paymentId);
     const drawId = ctx.fundOnly?.fundId ?? ctx.topUp?.drawId ?? env?.drawId ?? funding.paymentId;
-    await store.record({
+    await withPaymentStage("replay_store", () => store.record({
       dvmId: ctx.dvmId,
       rail: funding.rail,
       paymentId: funding.paymentId,
@@ -6229,10 +6373,10 @@ async function commitMarkedFunding(ctx, funding, outerTx) {
       drawId,
       jobId: ctx.jobId,
       tx
-    });
+    }));
     return fundAndDraw(ctx, funding, tx);
   };
-  return outerTx ? commit(outerTx) : store.withTx(commit);
+  return outerTx ? commit(outerTx) : withPaymentStage("replay_store", () => store.withTx(commit));
 }
 async function commitMppFunding(ctx, credential, funding) {
   const session = mppSessionBasis(credential);
@@ -6594,15 +6738,14 @@ function x402NotOfferedResult(currency) {
     error: x402NotOfferedPaymentError(currency)
   };
 }
-function logCredentialRejected(rail, phase, _err) {
+function logCredentialRejected(rail, phase, err) {
   diagnosticConsole.warn(
     {
       level: "warn",
       event: `${rail}_credential_rejected`,
       phase,
       rail,
-      error_name: void 0,
-      error_message: void 0
+      ...paymentFailureFields(err)
     }
   );
 }
@@ -9060,7 +9203,7 @@ async function handle(c, opts, action) {
 }
 
 // src/sdk/server/x402-exact-settlement.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 var X402ExactSettlementServer = class {
   constructor(opts) {
     this.opts = opts;
@@ -9386,7 +9529,7 @@ function settlementMayHaveMoved(response) {
   return reason.includes("authorization_already_used") || reason.includes("authorization already used") || /facilitator_status_5\d\d/.test(reason);
 }
 function hash(parts) {
-  return createHash4("sha256").update(JSON.stringify(parts)).digest("hex");
+  return createHash5("sha256").update(JSON.stringify(parts)).digest("hex");
 }
 function safeError(err) {
   if (err instanceof Error) return err.name;
@@ -9560,7 +9703,7 @@ var HostingCleanupFence = class {
 };
 
 // src/sdk/server/hosting-settlement-report-obligations.ts
-import { createHash as createHash5, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
 import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 import { BATCH_SETTLEMENT_ADDRESS as BATCH_SETTLEMENT_ADDRESS3 } from "@x402/evm";
 import { computeChannelId as computeChannelId2 } from "@x402/evm/batch-settlement/client";
@@ -9623,7 +9766,7 @@ var TEMPO_CLOSED_EVENT = TempoSession.Precompile.escrowAbi.find(
   (item) => item.type === "event" && item.name === "ChannelClosed"
 );
 function hash2(value) {
-  return createHash5("sha256").update(JSON.stringify(value)).digest("hex");
+  return createHash6("sha256").update(JSON.stringify(value)).digest("hex");
 }
 function hex(value, bytes) {
   return typeof value === "string" && new RegExp(`^0x[0-9a-fA-F]{${bytes * 2}}$`).test(value);
@@ -9950,6 +10093,18 @@ var HostedSettlementReportObligations = class {
     );
     return result.rows[0];
   }
+  /** The original close obligation reserved for this drain, while its report is outstanding. */
+  async pendingTempoClose(channelId, drainId) {
+    const result = await this.pool.query(
+      `SELECT id,tx_hash,created_at_ms FROM sdk_hosted_settlement_report_obligations
+       WHERE dvm_id=$1 AND scope=$2 AND rail='tempo' AND operation='close' AND channel_id=$3
+         AND original->>'drainId'=$4 AND state NOT IN ('delivered','no_report')
+       ORDER BY created_at_ms DESC LIMIT 1`,
+      [this.dvmId, this.scope, channelId.toLowerCase(), drainId]
+    );
+    const row = result.rows[0];
+    return row && { id: row.id, txHash: row.tx_hash, reservedAtMs: Number(row.created_at_ms) };
+  }
   async submittedIds(rail, operation, txHash, batchId) {
     if (!hex(txHash, 32)) throw new Error("Hosted effect has no exact transaction hash");
     const result = await this.pool.query(
@@ -10089,6 +10244,10 @@ var HostedSettlementReportObligations = class {
     }));
   }
   async recoverOriginalX402Refunds() {
+    const table = await this.pool.query(
+      "SELECT to_regclass('x402_batch_settlements') IS NOT NULL AS present"
+    );
+    if (!table.rows[0]?.present) return [];
     const rows2 = await this.pool.query(
       `SELECT obligation.id,settlement.settle_response AS response
        FROM sdk_hosted_settlement_report_obligations obligation
@@ -10526,7 +10685,7 @@ var HostedSettlementReportObligations = class {
 };
 
 // src/sdk/server/hosting-channel-evidence.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { Session as TempoSession2 } from "mppx/tempo";
 import { createPublicClient as createPublicClient5, http as http5 } from "viem";
 import { BATCH_SETTLEMENT_ADDRESS as BATCH_SETTLEMENT_ADDRESS4 } from "@x402/evm";
@@ -10577,7 +10736,7 @@ async function readHostedChannelSnapshot(query) {
   };
   const x402HistoryComplete = await history(names[6]);
   const tempoHistoryComplete = await history(names[7]);
-  const digest = createHash6("sha256").update(JSON.stringify({
+  const digest = createHash7("sha256").update(JSON.stringify({
     present: [...exists].sort(),
     x402,
     x402Tombstones,
@@ -11659,7 +11818,8 @@ var HostingControl = class {
       pendingAdmissionCount: Number(pending.rows[0].pending),
       pendingAdmissions: inFlight.rows.map((row) => ({ admissionId: row.id, workId: row.job_id })),
       unresolvedAdmissionCount: Number(pending.rows[0].unresolved),
-      unresolvedAdmissions: unresolved.rows.map((row) => ({ admissionId: row.id, jobId: row.job_id }))
+      unresolvedAdmissions: unresolved.rows.map((row) => ({ admissionId: row.id, jobId: row.job_id })),
+      jobIdentityHeader: "v1"
     };
   }
 };
@@ -11726,9 +11886,9 @@ import { AsyncLocalStorage } from "async_hooks";
 import { randomBytes as randomBytes3 } from "crypto";
 
 // src/sdk/server/instrumented-kv.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 function hashKey(key) {
-  return createHash7("sha256").update(key).digest("hex").slice(0, 16);
+  return createHash8("sha256").update(key).digest("hex").slice(0, 16);
 }
 function instrumentKVStore(inner) {
   return {
@@ -16504,7 +16664,7 @@ function withWallClockDeadline(promise, timeoutMs) {
 }
 
 // src/sdk/server/app.ts
-import { createHash as createHash9, randomBytes as randomBytes5, randomUUID as randomUUID6 } from "crypto";
+import { createHash as createHash10, randomBytes as randomBytes5, randomUUID as randomUUID6 } from "crypto";
 import { Hono } from "hono";
 import { getCookie } from "hono/cookie";
 import { cors } from "hono/cors";
@@ -16526,7 +16686,7 @@ import {
   Amount as Amount3,
   CheckStateEnum as CheckStateEnum3,
   getP2PKExpectedWitnessPubkeys as getP2PKExpectedWitnessPubkeys2,
-  getTokenMetadata
+  getTokenMetadata as getTokenMetadata2
 } from "@cashu/cashu-ts";
 function installAdminCreditRoutes(app, opts) {
   app.get("/admin/credit/pending-drains", (c) => handlePendingDrains(c, opts));
@@ -16887,7 +17047,7 @@ async function handleParkDrain(c, opts) {
   }
   let parsed;
   try {
-    const meta = getTokenMetadata(token);
+    const meta = getTokenMetadata2(token);
     parsed = {
       mint: meta.mint,
       faceSats: Amount3.from(meta.amount).toNumber(),
@@ -19293,7 +19453,7 @@ initSchemaForm();
 }
 
 // src/sdk/server/request-fingerprint.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 function requestFingerprint(req, opts) {
   const canonical = canonicalize({
     capability: req.capability,
@@ -19301,7 +19461,7 @@ function requestFingerprint(req, opts) {
     params: req.params ?? {},
     data: opts.stripAuthEnvelope ? stripEnvelope(req.data) : req.data
   });
-  return createHash8("sha256").update(canonical).digest("hex");
+  return createHash9("sha256").update(canonical).digest("hex");
 }
 var ENVELOPE_KEYS = /* @__PURE__ */ new Set(["pubkey", "signature", "timestamp", "nonce", "auth_statement"]);
 function stripEnvelope(data) {
@@ -19424,7 +19584,7 @@ async function createDVMServer(descriptor, opts) {
       }
     }
     if (!opts.onJobCompleted && platformToken && platformUrl && dvmId && opts.db) {
-      const { RevenueReporter } = await import("./revenue-reporter-MAERPYGK.js");
+      const { RevenueReporter } = await import("./revenue-reporter-HV7RMS54.js");
       const reporter = new RevenueReporter(
         opts.db,
         platformUrl,
@@ -19434,7 +19594,7 @@ async function createDVMServer(descriptor, opts) {
       revenueReporter = reporter;
       await reporter.init();
       reporter.startRetryLoop();
-      const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-3Y2U55ZX.js");
+      const { MemoryX402BatchStore, PayoutReporter } = await import("./payout-reporter-7P66T77I.js");
       payoutReporter = new PayoutReporter({
         dvmId,
         db: opts.db,
@@ -19719,6 +19879,7 @@ var DVMServer = class {
         `createDVMServer: this DVM prices in ${JSON.stringify(this.pricingCurrency)} (DVMConfig.currency) but its fx fetcher only quotes [${fxCurrencies.join(", ")}]. Wire a fetcher that carries it \u2014 createFxFetcher({ currencies: [..., ${JSON.stringify(this.pricingCurrency)}] }) \u2014 or price in one of the above.`
       );
     }
+    assertCapabilityRates(descriptor.capabilities);
     if (opts.mintHealthTracker) {
       this.mintHealthTracker = opts.mintHealthTracker;
       this.ownsMintHealthTracker = false;
@@ -20299,7 +20460,7 @@ var DVMServer = class {
       const dvmId = this.opts.dvmId ?? `dev:${this.descriptor.name}`;
       return {
         dvm_id: dvmId,
-        builder_pubkey: createHash9("sha256").update(`dvmkit-dev:${dvmId}`).digest("hex")
+        builder_pubkey: createHash10("sha256").update(`dvmkit-dev:${dvmId}`).digest("hex")
       };
     }
     throw new AuthAudienceError();
@@ -20647,7 +20808,7 @@ var DVMServer = class {
         const paymentAuthorization = ctx.req.header("Authorization");
         const mppArtifact = paymentAuthorization ? (await import("mppx")).Credential.extractPaymentScheme(paymentAuthorization) : void 0;
         const attachedPayment = ctx.req.header("X-Cashu") ?? ctx.req.header("PAYMENT-SIGNATURE") ?? ctx.req.header("X-PAYMENT") ?? mppArtifact;
-        const paymentArtifactHash = attachedPayment ? createHash9("sha256").update(attachedPayment).digest("hex") : void 0;
+        const paymentArtifactHash = attachedPayment ? createHash10("sha256").update(attachedPayment).digest("hex") : void 0;
         hostingFundingArtifactHash = paymentArtifactHash;
         if (!await control.admit(admissionId, workId, {
           creditId,
@@ -20791,7 +20952,7 @@ var DVMServer = class {
         // sees only the shortened list cannot tell a DVM that never did
         // sessions from one whose observer is down for a minute.
         ...withheld.length && { withheld },
-        realm: this.opts.mpp.realm,
+        ...this.opts.mpp.realm && { realm: this.opts.mpp.realm },
         ...this.opts.mpp.tempoConfiguration && {
           recipient: this.opts.mpp.tempoConfiguration.recipient,
           payment_token: this.opts.mpp.tempoConfiguration.paymentToken,
@@ -20831,17 +20992,20 @@ var DVMServer = class {
         entry.input_schema = toJSONSchema(cap.input, { io: "input" });
       }
       if (cap.example !== void 0) entry.example = cap.example;
+      let pricing;
       if (cap.onQuote?.schema) {
         const qs = cap.onQuote.schema;
-        entry.pricing = {
+        pricing = {
           quote: {
             schema: isZodSchema(qs) ? toJSONSchema(qs, { io: "input" }) : qs
           }
         };
       } else {
         const max = this.jobManager.currentPricingMax(name);
-        if (max) entry.pricing = { max };
+        if (max) pricing = { max };
       }
+      if (cap.rates) pricing = { ...pricing, rates: cap.rates };
+      if (pricing) entry.pricing = pricing;
       out[name] = entry;
     }
     return out;
@@ -21353,7 +21517,7 @@ var DVMServer = class {
     const authorization = c.req.header("Authorization");
     const mppArtifact = authorization ? (await import("mppx")).Credential.extractPaymentScheme(authorization) : void 0;
     const attachedPayment = c.req.header("X-Cashu") ?? c.req.header("PAYMENT-SIGNATURE") ?? c.req.header("X-PAYMENT") ?? mppArtifact;
-    const hostingPaymentArtifactHash = attachedPayment ? createHash9("sha256").update(attachedPayment).digest("hex") : void 0;
+    const hostingPaymentArtifactHash = attachedPayment ? createHash10("sha256").update(attachedPayment).digest("hex") : void 0;
     if (!resumeOnly && this.opts.hostingControlInstance && hostingPaymentArtifactHash) {
       const priorId = await this.opts.hostingControlInstance.acceptedJobByPaymentArtifactHash(
         hostingPaymentArtifactHash
@@ -21651,7 +21815,7 @@ var DVMServer = class {
       }
       const isAnonymous = requesterId === "anonymous" || requesterId === "dev-anonymous";
       const jobToken = isAnonymous ? randomBytes5(32).toString("hex") : void 0;
-      const requesterTokenHash = jobToken ? createHash9("sha256").update(jobToken).digest("hex") : void 0;
+      const requesterTokenHash = jobToken ? createHash10("sha256").update(jobToken).digest("hex") : void 0;
       const job = jm.createJob(
         normalisedBody,
         requesterId,
@@ -22363,7 +22527,7 @@ function isJobOwner(c, job) {
   if (job.requesterTokenHash) {
     const token = c.req.header("X-Job-Token");
     if (!token) return false;
-    const provided = createHash9("sha256").update(token).digest("hex");
+    const provided = createHash10("sha256").update(token).digest("hex");
     return timingSafeEqualHex(provided, job.requesterTokenHash);
   }
   return c.get("requesterId") === job.requesterId;
@@ -22381,7 +22545,7 @@ function buildSubmitResponse(c, job, jobToken, contentFields) {
   else if (job.status === "completed") res.status = "completed";
   Object.assign(res, terminalResponseFields(job), contentFields);
   removeUnavailableContent(res);
-  return c.json(res, job.status === "completed" ? 200 : 202);
+  return c.json(res, job.status === "completed" ? 200 : 202, jobIdentityHeaders(job.id));
 }
 function requestRecoveryStore(store) {
   return store.findJobByRequestId && store.claimRequestId && store.resumeRequestId && store.releaseRequestIdClaim ? store : void 0;
@@ -22447,7 +22611,10 @@ function buildRequestResultResponse(c, requestId, job, contentFields) {
   if (job.paymentTransactionHash) res.transaction_hash = job.paymentTransactionHash;
   Object.assign(res, terminalResponseFields(job), contentFields);
   removeUnavailableContent(res);
-  return c.json(res, isTerminal(job.status) ? 200 : 202);
+  return c.json(res, isTerminal(job.status) ? 200 : 202, jobIdentityHeaders(job.id));
+}
+function jobIdentityHeaders(jobId) {
+  return isJobIdentityValue(jobId) ? { [JOB_IDENTITY_HEADER]: jobId } : {};
 }
 function requestResultNotFound(c, requestId) {
   return c.json(
@@ -22638,6 +22805,55 @@ function validateMessageContent(type, content, devMode) {
   }
   return null;
 }
+var MAX_RATES = 5;
+var MAX_RATE_AMOUNT_LENGTH = 12;
+var MAX_RATE_TEXT_LENGTH = 24;
+var RATE_AMOUNT_RE = /^\d+(\.\d+)?$/;
+var RATE_KEYS = /* @__PURE__ */ new Set(["label", "amount", "currency", "per"]);
+function assertCapabilityRates(capabilities) {
+  for (const [name, cap] of Object.entries(capabilities)) {
+    if (cap.rates === void 0) continue;
+    const refuse = (detail) => {
+      throw new Error(`createDVMServer: capability ${JSON.stringify(name)}: ${detail}`);
+    };
+    const rates = cap.rates;
+    if (!Array.isArray(rates) || rates.length === 0 || rates.length > MAX_RATES) {
+      refuse(`rates must be an array of 1 to ${MAX_RATES} entries`);
+    }
+    if (cap.price === void 0 && cap.onQuote === void 0) {
+      refuse("rates is declared on a free capability; set `price` or `onQuote`, or remove `rates`");
+    }
+    rates.forEach((rate, i) => {
+      const at = `rates[${i}]`;
+      if (typeof rate !== "object" || rate === null || Array.isArray(rate)) {
+        refuse(`${at} must be an object with amount, currency and per`);
+      }
+      const entry = rate;
+      for (const key of Object.keys(entry)) {
+        if (!RATE_KEYS.has(key)) refuse(`${at}.${key} is not a rate field (label, amount, currency, per)`);
+      }
+      const amount = entry.amount;
+      if (typeof amount !== "string" || amount.length > MAX_RATE_AMOUNT_LENGTH || !RATE_AMOUNT_RE.test(amount) || // Above zero without parsing to a float: some digit is non-zero.
+      !/[1-9]/.test(amount)) {
+        refuse(
+          `${at}.amount must be a decimal dollar string above zero of at most ${MAX_RATE_AMOUNT_LENGTH} characters, like "0.00015" (got ${JSON.stringify(amount)})`
+        );
+      }
+      if (entry.currency !== "USD") {
+        refuse(`${at}.currency must be "USD" (got ${JSON.stringify(entry.currency)})`);
+      }
+      assertRateText(entry.per, `${at}.per`, refuse);
+      if (entry.label !== void 0) assertRateText(entry.label, `${at}.label`, refuse);
+    });
+  }
+}
+function assertRateText(value, field, refuse) {
+  if (typeof value !== "string" || value.length === 0 || value.length > MAX_RATE_TEXT_LENGTH || value.trim() !== value) {
+    refuse(
+      `${field} must be a string of 1 to ${MAX_RATE_TEXT_LENGTH} characters with no leading or trailing whitespace (got ${JSON.stringify(value)})`
+    );
+  }
+}
 
 // src/sdk/server/tempo-observer-health.ts
 var TEMPO_OBSERVER_HEALTH_REFRESH_TTL_MS = 60 * 1e3;
@@ -22850,6 +23066,7 @@ export {
   derivedFundCreditId,
   drawSettlementRef,
   rateUnavailablePaymentError,
+  isTestMintUrl,
   X402_BATCH_SETTLEMENT_NETWORK,
   X402_BATCH_SETTLEMENT_MAINNET_NETWORK,
   X402_BATCH_MIN_WITHDRAW_DELAY_SECONDS,