@dvmkit/sdk 0.7.0-rc.9 → 0.8.0

package/dist/server/index.js

@@ -1,6 +1,6 @@
 import {
   PostgresReplayStore
-} from "../chunk-RJFBBEWQ.js";
+} from "../chunk-2I3OHMTY.js";
 import {
   PostgresKVStore
 } from "../chunk-V5ZRATJH.js";
@@ -18,7 +18,7 @@ import {
   parseNwcUri,
   validateX402Env,
   withNwcPool
-} from "../chunk-7RZEJJTN.js";
+} from "../chunk-55NKZQOC.js";
 import {
   MemoryKVStore
 } from "../chunk-SDK6KDJN.js";
@@ -80,32 +80,32 @@ import {
   stripProtocolEnvelope,
   toCreditView,
   unknownRouteNotFound
-} from "../chunk-G7IXOVKV.js";
+} from "../chunk-GSPV3UIM.js";
 import {
   TEMPO_MODERATO_CHAIN_ID,
   TEMPO_MODERATO_RPC,
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
   TempoSettlementReadiness,
   resolveTempoNetwork
-} from "../chunk-QN3CQOE2.js";
-import "../chunk-YNHXOONR.js";
-import "../chunk-FYETJDBB.js";
+} from "../chunk-GB5XPAA5.js";
+import "../chunk-X3JEME6P.js";
+import "../chunk-ATXDKX6F.js";
 import {
   MemoryCreditLedger
-} from "../chunk-YE53E4BT.js";
+} from "../chunk-EBCLWOKF.js";
 import {
   PostgresJobStore
-} from "../chunk-6JZDFYQL.js";
+} from "../chunk-QPXI7YPH.js";
 import "../chunk-YG7G4DPZ.js";
 import {
   SignedRequestError,
   createDefaultReplayStore,
   createSignedRequestVerifier,
   signedRequestInput
-} from "../chunk-YS6PWVCZ.js";
+} from "../chunk-5K5E6ME6.js";
 import {
   isStreamableJobStore
-} from "../chunk-2HAFZ5GC.js";
+} from "../chunk-I6PHA54S.js";
 import {
   ContentHoldError,
   baselineContentExpiry,
@@ -116,7 +116,7 @@ import {
   IMPLICIT_CREDIT_TTL_MS,
   generateEphemeralReceiptKey,
   receiptPubkeyFromSecret
-} from "../chunk-5TIFEMHJ.js";
+} from "../chunk-RTFBVXCN.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -128,13 +128,15 @@ import {
   SIGNED_REQUEST_STATEMENT_VERSION,
   signedRequestStatementHeader
 } from "../chunk-UKD3R2KU.js";
+import "../chunk-IFWUWHTW.js";
 import {
   initLoggers
-} from "../chunk-RGSWVNQG.js";
-import "../chunk-KXWROQGK.js";
+} from "../chunk-BL6LRWXD.js";
+import "../chunk-FUJ36YDV.js";
+import "../chunk-66HGCPBU.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-2GTLF74N.js";
-import "../chunk-5CSR33B5.js";
+import "../chunk-XXLUIXPO.js";
+import "../chunk-5CQKSLAU.js";
 import {
   CreditLedger,
   CreditLedgerError,
@@ -142,16 +144,16 @@ import {
   PostgresX402ChannelStorage,
   X402RelaySubmissionLockError,
   allocateDrawValue
-} from "../chunk-IOKEKMIU.js";
+} from "../chunk-VYP6ADCS.js";
 import {
   applyRetryToPool
-} from "../chunk-QM2OS3NJ.js";
+} from "../chunk-6FEHRZO7.js";
 import {
   assertSupportedX402Network
 } from "../chunk-BPYMEMQX.js";
 import {
   diagnosticConsole
-} from "../chunk-5PLQOC4B.js";
+} from "../chunk-DZQYQN2X.js";
 import {
   MemoryProcessedPaymentStore,
   PostgresProcessedPaymentStore,
@@ -1147,7 +1149,7 @@ function createDVMHost(opts = {}) {
       });
       applyRetryToPool(pool, "dvm-host");
       pgPool = pool;
-      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-IX7IUXF4.js");
+      const { PostgresJobStore: PostgresJobStore2 } = await import("../postgres-job-store-6VGFL6XE.js");
       const pgJobStore = new PostgresJobStore2(pool);
       pendingInits.push(pgJobStore.init(), pgJobStore.initStreaming());
       jobStore = pgJobStore;
@@ -1240,11 +1242,11 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     let tempoChargeBackend = "user-supplied";
     const mppTempoRecipient = envMaybe.DVMKIT_TEMPO_RECIPIENT;
     if (!mpp && mppTempoRecipient) {
-      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-KGX6PLAF.js");
+      const { createMppFromOpts, createDualKeyMppxFromOpts, parseMppMethodsAllowlist } = await import("../mpp-setup-2BKTPEK6.js");
       tempoChargeBackend = pgPool ? "postgres" : "memory";
       let tempoCharge;
       if (pgPool) {
-        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-NZJTJCUO.js");
+        const { PostgresTempoChargeStore } = await import("../tempo-charge-store-NKXJ2AXE.js");
         const chargeStore = new PostgresTempoChargeStore(pgPool);
         tempoChargeStore = chargeStore;
         pendingInits.push(chargeStore.init());
@@ -1264,7 +1266,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
           { createPublicClient, createWalletClient, erc20Abi, http },
           { tempo: tempoMainnet, tempoModerato }
         ] = await Promise.all([
-          import("../tempo-session-store-ENFDLDKC.js"),
+          import("../tempo-session-store-ZSDQIWSU.js"),
           import("viem/accounts"),
           import("viem"),
           import("viem/chains")
@@ -1417,7 +1419,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       }
     }
     const fxSource = envMaybe.DVMKIT_FX_SOURCE;
-    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-ZUEFO3CM.js");
+    const { createFxFetcher, resolveFxSourceFromEnv, warmFxSnapshot } = await import("../pricing-H2RA4X2R.js");
     const fxFetcher = opts.fx ?? createFxFetcher({ source: resolveFxSourceFromEnv(envMaybe) });
     const hostRailConfigured = (opts.paymentMethods?.length ?? 0) > 0 || (effectiveMints?.length ?? 0) > 0 || !!x402WithDualServe || !!mpp;
     if (mounts.some((entry) => mountNeedsFx(entry, hostRailConfigured))) warmFxSnapshot(fxFetcher);
@@ -1427,7 +1429,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     assertReceiptIdentity(envMaybe, opts.builder, receiptKey, cashuOpts.dvmId, opts.devMode);
     let sharedPgReplayStore;
     if (pgPool) {
-      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-Q6MEQDWZ.js");
+      const { PostgresReplayStore: PostgresReplayStore2 } = await import("../postgres-replay-store-SY26NUCI.js");
       const store2 = new PostgresReplayStore2(pgPool);
       pendingInits.push(store2.init());
       sharedPgReplayStore = store2;
@@ -1455,13 +1457,13 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
     }
     let sharedPgConsumedStore;
     if (pgPool) {
-      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-LUJ5CUJS.js");
+      const { PostgresConsumedCredentialStore } = await import("../postgres-consumed-credential-store-R7DNU6CM.js");
       const consumedStore = new PostgresConsumedCredentialStore(pgPool);
       pendingInits.push(consumedStore.init());
       sharedPgConsumedStore = consumedStore;
     }
     if (pgPool) {
-      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-F2LWQU6N.js");
+      const { CreditLedger: CreditLedger2 } = await import("../credit-ledger-AOU6S34N.js");
       const pgLedger = new CreditLedger2(pgPool, tempoSessionStore);
       pendingInits.push(pgLedger.init());
       creditLedger = pgLedger;
@@ -1470,7 +1472,7 @@ ${config.facilitatorAuth?.keyId ?? ""}`;
       pendingInits.push(pgProcessed.init());
       processedPayments = pgProcessed;
     } else {
-      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-XOOWJTBZ.js");
+      const { MemoryCreditLedger: MemoryCreditLedger2 } = await import("../memory-credit-ledger-4HWYINKJ.js");
       creditLedger = disposableCashu?.ledger ?? new MemoryCreditLedger2();
       const { MemoryProcessedPaymentStore: MemoryProcessedPaymentStore2 } = await import("../processed-payment-store-GKMAWOM3.js");
       processedPayments = new MemoryProcessedPaymentStore2();
@@ -1971,7 +1973,7 @@ function logBootSummary(s) {
   diagnosticConsole.log(`  Database:      ${s.databaseConnected ? "connected" : "(not configured)"}`);
   diagnosticConsole.log(`  Mints:         ${s.mints && s.mints.length > 0 ? s.mints.join(", ") : "(none)"}`);
   diagnosticConsole.log(`  Cashu mode:    ${s.cashuOpts.cashuMode ?? "(disabled)"}`);
-  diagnosticConsole.log(`  Tempo:         ${s.mpp ? `realm=${s.mpp.realm}` : "(unconfigured)"}`);
+  diagnosticConsole.log(`  Tempo:         ${s.mpp ? `realm=${s.mpp.realm ?? "(unset)"}` : "(unconfigured)"}`);
   if (s.mpp) {
     const rotState = !s.mppSecretState ? "single-key (no DB-backed rotation)" : s.mppSecretState.previous ? `dual-key (previous expires ${new Date(s.mppSecretState.previous.expiresAtMs).toISOString()})` : "active-only";
     diagnosticConsole.log(`  Tempo secret:  ${rotState}`);

package/dist/{step-cache-C9JRSFhM.d.ts → step-cache-BOWAn_BH.d.ts}

@@ -1228,6 +1228,12 @@ declare class HostedSettlementReportObligations {
     }): Promise<HostedEffectReservation | null>;
     reserveTempo(channelId: string, operation: "settle" | "close", drainId?: string): Promise<HostedEffectReservation>;
     findPendingTempo(channelId: string, operation: "settle" | "close"): Promise<ObligationRow | undefined>;
+    /** The original close obligation reserved for this drain, while its report is outstanding. */
+    pendingTempoClose(channelId: string, drainId: string): Promise<{
+        id: string;
+        txHash: string | null;
+        reservedAtMs: number;
+    } | undefined>;
     submittedIds(rail: Rail, operation: Operation, txHash: string, batchId?: string): Promise<string[]>;
     refundClaimDelta(txHash: string, channelId: string): Promise<bigint>;
     assertReservedTempoClose(id: string, channelId: string): Promise<void>;
@@ -4519,7 +4525,8 @@ interface MppOpts {
  * of ours can reach the un-dual-keyed door — see `createDualKeyMppxFromOpts`.
  */
 interface MppxServer {
-    realm: string;
+    /** Undefined when neither `Mppx.create` nor mppx's environment lookup names a realm. */
+    realm?: string;
     methods: readonly Method.AnyServer[];
     /** Public, non-secret Tempo bindings resolved from the exact live method configuration. */
     tempoConfiguration?: {
@@ -4531,9 +4538,9 @@ interface MppxServer {
     };
     challenge: any;
     /**
-     * Re-validate and broadcast a credential, returning a receipt. mppx 0.8.x
-     * also exposes a non-mutating `validateCredential`; accepting payment is
-     * always the mutating path, so this is the only one the SDK binds.
+     * Re-validate and broadcast a credential, returning a receipt. Accepting
+     * payment is always this mutating path; `validateCredential` below is only
+     * the hosted close's preflight.
      */
     broadcastCredential(credential: Credential.Credential | string, options?: any): Promise<Receipt.Receipt>;
     /** Non-mutating mppx HMAC, route, expiry and method preflight. */
@@ -4605,6 +4612,21 @@ interface MppxServer {
     getTempoSessionCloseIntent?: (channelId: string) => Promise<TempoSessionCloseRecord | null>;
     /** Read terminally consumed value for an exact cooperative-close challenge. */
     getTempoSessionSpent?: (channelId: string) => Promise<bigint>;
+    /**
+     * Refuse a cooperative close voucher that mppx's close would refuse before
+     * submitting, using only the stored channel: no chain read and no write.
+     * A hosted close runs it before reserving its settlement-report obligation,
+     * so a voucher that could never broadcast does not leave a reservation behind.
+     */
+    assertTempoSessionCloseVoucher?: (voucher: {
+        channelId: string;
+        cumulativeAmount: bigint;
+        signature: string;
+        /** The credential's TIP-1034 channel descriptor, unchecked. */
+        descriptor: unknown;
+        /** The HMAC-verified challenge request the credential answers. */
+        request: Record<string, unknown>;
+    }) => Promise<void>;
     /**
      * Read the immutable chain binding of a stored channel, or `null`
      * when this DVM holds no such channel. What a close event must match before
@@ -4737,6 +4759,12 @@ interface TempoSessionChainOps {
         onSessionSettlement?: NonNullable<MppOpts["tempoSession"]>["onSessionSettlement"];
     }): Promise<Hex>;
     readChannelClose(client: Client, channelId: Hex, txHash: Hex): Promise<TempoChannelCloseAmounts>;
+    /**
+     * The transaction that emitted this channel's `ChannelClosed`, searched back
+     * from the chain head no further than blocks older than `notBeforeMs`. Null
+     * only when that whole range was searched and holds no close.
+     */
+    findChannelClose(client: Client, channelId: Hex, escrowContract: `0x${string}`, notBeforeMs: number): Promise<Hex | null>;
 }
 declare function attachTempoSessionRuntime(mppx: MppxServer, config: MppOpts["tempoSession"], chainOpOverrides?: Partial<TempoSessionChainOps>): MppxServer;
 /** Test-only seams for deterministic watcher coverage without a live Tempo RPC. */

package/dist/{tempo-charge-store-NZJTJCUO.js → tempo-charge-store-NKXJ2AXE.js}

@@ -1,8 +1,8 @@
 import {
   PostgresTempoChargeStore
-} from "./chunk-ZLWPEIE2.js";
+} from "./chunk-TFYY5APM.js";
 import "./chunk-YG7G4DPZ.js";
-import "./chunk-5PLQOC4B.js";
+import "./chunk-DZQYQN2X.js";
 import "./chunk-COYKJRMM.js";
 export {
   PostgresTempoChargeStore

package/dist/{tempo-session-store-ENFDLDKC.js → tempo-session-store-ZSDQIWSU.js}

@@ -1,10 +1,10 @@
 import {
   PostgresTempoSessionStore,
   assertMonotonicTransition
-} from "./chunk-HU6ZMQDN.js";
+} from "./chunk-P5WEZXJ2.js";
 import "./chunk-YG7G4DPZ.js";
-import "./chunk-QM2OS3NJ.js";
-import "./chunk-5PLQOC4B.js";
+import "./chunk-6FEHRZO7.js";
+import "./chunk-DZQYQN2X.js";
 import "./chunk-COYKJRMM.js";
 export {
   PostgresTempoSessionStore,

package/dist/testing/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-U7dJM7Ph.js';
-import { a0 as JobReceipt, a5 as Message, a1 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-C9JRSFhM.js';
-import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-DjgN2AOk.js';
+import { C as ContentHoldHistory, a as ContentHoldMutation } from '../content-retention-D2K4MKNO.js';
+import { a0 as JobReceipt, a5 as Message, a1 as MessageType, K as KVStore, L as Logger, v as ResponseContent, P as PaymentContent, S as SDKJobContext } from '../step-cache-BOWAn_BH.js';
+import { c as StreamableJobStore, R as ReceiptIssuingStore, J as JobRecord, d as RequestIdClaim, e as RequestIdClaimResult, f as JobRetentionCursor, O as OutgoingMessage, A as AppendOutgoingOptions, P as PaymentCreditDelta, V as VerifyAndCreditResult, g as JobCounters } from '../job-store-DCvJQUX0.js';
 import 'hono';
 import 'mppx';
 import '@x402/core/server';

package/dist/testing/index.js

@@ -4,20 +4,22 @@ import {
 import {
   MemoryJobStore,
   createInstrumentedFetch
-} from "../chunk-2HAFZ5GC.js";
+} from "../chunk-I6PHA54S.js";
 import {
   JobCancelledError
 } from "../chunk-AFV77S4C.js";
 import {
   createNoopLogger
-} from "../chunk-RGSWVNQG.js";
-import "../chunk-KXWROQGK.js";
+} from "../chunk-IFWUWHTW.js";
+import "../chunk-BL6LRWXD.js";
+import "../chunk-FUJ36YDV.js";
+import "../chunk-66HGCPBU.js";
 import "../chunk-BQJIFRAZ.js";
-import "../chunk-2GTLF74N.js";
+import "../chunk-XXLUIXPO.js";
 import {
   validateCurrency
-} from "../chunk-5CSR33B5.js";
-import "../chunk-5PLQOC4B.js";
+} from "../chunk-5CQKSLAU.js";
+import "../chunk-DZQYQN2X.js";
 
 // src/sdk/testing/test-context.ts
 function createTestContext(opts) {

package/dist/{usd-DXDkHn_8.d.ts → usd-MAtMp3DB.d.ts}

@@ -1,4 +1,4 @@
-import { C as Currency } from './step-cache-C9JRSFhM.js';
+import { C as Currency } from './step-cache-BOWAn_BH.js';
 
 /**
  * Thrown by `fiatToSatsCeil` / `satsToFiat` when the supplied `ratePerBtc` is

package/dist/{x402-T7WVKDD4.js → x402-Q4S36NHQ.js}

@@ -3,11 +3,11 @@ import {
   generateX402PrivateKey,
   getX402Balance,
   resolveX402Asset
-} from "./chunk-OFSOLHRX.js";
+} from "./chunk-WMGXJQI3.js";
 import {
   verifyX402Payment
-} from "./chunk-WGK5KZ6S.js";
-import "./chunk-FYETJDBB.js";
+} from "./chunk-YPSJU3OH.js";
+import "./chunk-ATXDKX6F.js";
 import {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,
@@ -27,7 +27,8 @@ import {
   usdcContractByCaip2,
   x402NetworkToCaip2
 } from "./chunk-62FI3NJF.js";
-import "./chunk-KXWROQGK.js";
+import "./chunk-FUJ36YDV.js";
+import "./chunk-66HGCPBU.js";
 import {
   X402_NETWORKS,
   assertSupportedX402Network,
@@ -36,7 +37,7 @@ import {
   x402NetworkListForCopy,
   x402SupportedNetworksHint
 } from "./chunk-BPYMEMQX.js";
-import "./chunk-5PLQOC4B.js";
+import "./chunk-DZQYQN2X.js";
 export {
   X402_DEFAULT_FACILITATOR,
   X402_DEFAULT_NETWORK,

package/package.json

@@ -1,7 +1,20 @@
 {
   "name": "@dvmkit/sdk",
-  "version": "0.7.0-rc.9",
-  "description": "SDK for building accountless, pay-per-use Digital Vending Machines",
+  "version": "0.8.0",
+  "description": "SDK for building Digital Vending Machines: pay-per-use HTTPS services AI agents can find, pay, and call with no account or API key",
+  "author": "DVM Technologies Ltd",
+  "keywords": [
+    "dvm",
+    "digital-vending-machine",
+    "ai-agents",
+    "agent-payments",
+    "pay-per-use",
+    "x402",
+    "cashu",
+    "lightning",
+    "mpp",
+    "hono"
+  ],
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -44,6 +57,7 @@
   },
   "scripts": {
     "build": "NODE_OPTIONS=--max-old-space-size=6144 tsup --config tsup.config.ts && node scripts/write-internal-entry.mjs && node scripts/prune-sdk-dist.mjs",
+    "check:readme-quickstart": "node scripts/check-readme-quickstart.mjs",
     "check:api": "node scripts/check-api-surface.mjs && node scripts/generate-api-reference.mjs --check",
     "check:consumer": "node scripts/consumer-smoke.mjs",
     "install-published-release": "node scripts/install-published-release.mjs",
@@ -57,7 +71,8 @@
     "docs:api": "node scripts/generate-api-reference.mjs --write",
     "release:tag": "node scripts/release-tag.mjs",
     "test": "vitest run --config vitest.config.ts",
-    "test:examples": "node --test examples/quickstart/handler.test.mjs examples/authenticated-route/handler.test.mjs examples/payments-and-lifecycle/handler.test.mjs",
+    "test:examples": "node --test examples/quickstart/handler.test.ts examples/authenticated-route/handler.test.ts examples/payments-and-lifecycle/handler.test.ts",
+    "test:server": "vitest run --config vitest.server.config.ts",
     "test:db": "vitest run --config vitest.db.config.ts",
     "typecheck": "tsc --noEmit",
     "typecheck:scripts": "tsc --noEmit --project tsconfig.scripts.json",