@dvmkit/sdk 0.8.1 → 0.9.0

package/dist/{chunk-ALWVJ2RB.js → chunk-BAQRUYRL.js}

@@ -1,9 +1,9 @@
-import {
-  diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  diagnosticConsole
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/postgres-replay-store.ts
 var DEFAULT_TABLE_NAME = "signed_request_replays";

package/dist/{chunk-AVV5SYGO.js → chunk-GAZBBMAA.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/observability/payment-diagnostics.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-G3MPHW5I.js → chunk-GODOH2AF.js}

@@ -2,12 +2,12 @@ import {
   ContentHoldError,
   applyContentHoldMutation
 } from "./chunk-AFV77S4C.js";
-import {
-  diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  diagnosticConsole
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/postgres-job-store.ts
 import { createHash } from "crypto";

package/dist/{chunk-2U6LAASN.js → chunk-HC4I7LAV.js}

@@ -1,6 +1,6 @@
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/pricing/currency.ts
 var InvalidCurrencyError = class extends Error {

package/dist/{chunk-7PM4R4GD.js → chunk-IBX2ORBV.js}

@@ -1,6 +1,6 @@
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/lib/pg-retry.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-NA2KOR6G.js → chunk-IYQQXEHV.js}

@@ -2,12 +2,12 @@ import {
   parseStoreValue,
   stringifyStoreValue
 } from "./chunk-YG7G4DPZ.js";
-import {
-  diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  diagnosticConsole
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/tempo-charge-store.ts
 import { Credential } from "mppx";

package/dist/{chunk-J5J63WDC.js → chunk-K2MSIKMM.js}

@@ -1,9 +1,9 @@
-import {
-  diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  diagnosticConsole
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/payout-reporter.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-RSNC5T6C.js → chunk-KGL3YMZA.js}

@@ -4,7 +4,7 @@ import {
 import {
   diagnosticConsole,
   projectSpanRow
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/lib/x402/env.ts
 import { isAddress } from "viem";

package/dist/{chunk-UVS7MRJX.js → chunk-LCCG5HQM.js}

@@ -2,7 +2,7 @@ import {
   createX402FacilitatorAuthHeaders,
   settleWithFacilitator,
   verifyWithFacilitator
-} from "./chunk-AVV5SYGO.js";
+} from "./chunk-GAZBBMAA.js";
 import {
   buildPaymentRequirements,
   decodePayment,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/lib/x402/verify.ts
 async function verifyX402Payment(paymentHeader, config, requiredUsdcMicro, resource, btcUsdRate, exactVersions = { v1: true, v2: true }) {

package/dist/{chunk-QKE5NDPF.js → chunk-LFVIZH2G.js}

@@ -1,9 +1,9 @@
 import {
   loggers
-} from "./chunk-IOQIXRGM.js";
+} from "./chunk-QSZW2I5Y.js";
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/mpp-setup.ts
 import { createHash, randomUUID } from "crypto";
@@ -313,6 +313,15 @@ function logStateFailure(_error) {
 }
 
 // src/sdk/server/mpp-setup.ts
+var TempoDrainRefundUnprovenError = class extends Error {
+  constructor(reason, message) {
+    super(message);
+    this.reason = reason;
+  }
+  reason;
+};
+var TempoCloseDescriptorError = class extends MppxErrors.VerificationFailedError {
+};
 var MPPX_HMAC_MISMATCH_REASON = "challenge was not issued by this server";
 var TEMPO_SETTLEMENT_LEASE_FIELD = "settlementLeaseUntil";
 var TEMPO_SETTLEMENT_LEASE_OWNER_FIELD = "settlementLeaseOwner";
@@ -717,9 +726,11 @@ var DEFAULT_TEMPO_SESSION_CHAIN_OPS = {
 };
 function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
   let creditLedger;
+  let finalizeDrain;
   Object.assign(mppx, {
-    useTempoCreditLedger: (ledger) => {
+    useTempoCreditLedger: (ledger, finalizer) => {
       creditLedger = ledger;
+      finalizeDrain = finalizer;
     }
   });
   const chainOps = {
@@ -737,7 +748,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
       assertTempoSessionCloseVoucher: async (voucher) => {
         const descriptor = readChannelDescriptor(voucher.descriptor);
         if (!descriptor) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "descriptor required for TIP-1034 session action"
           });
         }
@@ -755,22 +766,22 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
           escrow
         });
         if (computed.toLowerCase() !== voucher.channelId.toLowerCase()) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "channel descriptor does not match channelId"
           });
         }
         if (!sameHex(descriptor.payee, voucher.request.recipient)) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "channel descriptor payee does not match server destination"
           });
         }
         if (!sameHex(descriptor.token, voucher.request.currency)) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "channel descriptor token does not match server token"
           });
         }
         if (!sameHex(descriptor.operator, details.operator ?? ZERO_ADDRESS)) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "channel descriptor operator does not match server operator"
           });
         }
@@ -784,7 +795,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
         }
         const storedDescriptor = readChannelDescriptor(stored.descriptor);
         if (!storedDescriptor || !sameDescriptor(descriptor, storedDescriptor)) {
-          throw new MppxErrors.VerificationFailedError({
+          throw new TempoCloseDescriptorError({
             reason: "credential descriptor does not match stored channel"
           });
         }
@@ -886,6 +897,9 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
         value: {
           ...value,
           finalized: active.finalized || chainFinalized,
+          ...chainFinalized && !active.finalized && {
+            depositBeforeFinalization: active.deposit
+          },
           closeRequestedAt: chainFinalized ? 0n : BigInt(chainState.closeRequestedAt),
           deposit: chainFinalized ? 0n : maxBigInt(active.deposit, chainState.deposit),
           settledOnChain: maxBigInt(active.settledOnChain, chainState.settled)
@@ -914,6 +928,9 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
         value: {
           ...current,
           finalized: active.finalized || chainFinalized,
+          ...chainFinalized && !active.finalized && {
+            depositBeforeFinalization: active.deposit
+          },
           closeRequestedAt: chainFinalized ? 0n : BigInt(chainState.closeRequestedAt),
           deposit: chainFinalized ? 0n : maxBigInt(active.deposit, chainState.deposit),
           settledOnChain: maxBigInt(active.settledOnChain, chainState.settled)
@@ -1151,7 +1168,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
         }
       }
     }
-    await reconcileUnsubmittedCloses();
+    await reconcileTempoSessionCloses();
     return { scanned: rows.length, closeRequested, settled, inFlight };
   };
   const recoverTempoSessionClose = async (channelId, drainId) => {
@@ -1177,7 +1194,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
     const pending = await config.hostedObligations?.pendingTempoClose(channelId, drainId);
     const selfHostedReport = !config.hostedObligations && !!config.onSessionSettlement && !!store.claimCloseReference && !!store.getCloseRecovery;
     let reference = pending?.txHash ?? void 0;
-    if (pending && !reference || selfHostedReport) {
+    if (pending && pending.state !== "unmatched" && !reference || selfHostedReport) {
       const recovery = await store.getCloseRecovery?.(channelId);
       const notBeforeMs = pending?.reservedAtMs ?? recovery?.updatedAtMs;
       if (notBeforeMs === void 0) throw new Error(`Tempo session close intent ${channelId} not found`);
@@ -1192,15 +1209,18 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
       if (pending) {
         reference = await settleUnsubmittedClose(current.channelId, drainId, pending.id, found);
       } else if (found.outcome === "ours") {
+        const client = await getClient({ chainId: current.chainId });
+        const { settledToPayee } = await chainOps.readChannelClose(client, current.channelId, found.txHash);
         const claimed = await store.claimCloseReference(channelId, drainId, found.txHash);
         if (claimed.claimed) {
-          await reportRecoveredClose(current, found.txHash, recovery?.settledBeforeClose ?? null);
+          await reportRecoveredClose(current, found.txHash, recovery?.settledBeforeClose ?? null, settledToPayee);
         }
         return claimed.reference;
       } else if (found.outcome === "none") {
         loggers.tempo.warn("tempo_session_close_recovery_unmatched", {
           channel_id: current.channelId,
-          drain_id: drainId
+          drain_id: drainId,
+          amount_at_stake_native: (current.highestVoucherAmount - (recovery?.settledBeforeClose ?? current.settledOnChain)).toString()
         });
       }
     }
@@ -1234,7 +1254,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
     }
     if (search.outcome === "exit_requested") return { outcome: "exit" };
     if (search.stoppedAt !== void 0) await cursor.save(search.stoppedAt);
-    return { outcome: "none" };
+    return { outcome: "none", terminal: search.stoppedAt !== void 0 };
   };
   const settleUnsubmittedClose = async (channelId, drainId, obligationId, found) => {
     const obligations = config.hostedObligations;
@@ -1247,16 +1267,20 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
         loggers.tempo.warn("tempo_session_close_exit_resolved", {
           channel_id: channelId,
           drain_id: drainId,
-          obligation_id: obligationId
+          obligation_id: obligationId,
+          amount_at_stake_native: await obligations.tempoCloseAmountAtStake(obligationId)
         });
       }
       return void 0;
     }
-    loggers.tempo.warn("tempo_session_close_recovery_unmatched", {
-      channel_id: channelId,
-      drain_id: drainId,
-      obligation_id: obligationId
-    });
+    if (found.terminal && await obligations.markTempoCloseUnmatched(obligationId)) {
+      loggers.tempo.warn("tempo_session_close_recovery_unmatched", {
+        channel_id: channelId,
+        drain_id: drainId,
+        obligation_id: obligationId,
+        amount_at_stake_native: await obligations.tempoCloseAmountAtStake(obligationId)
+      });
+    }
     return void 0;
   };
   const reconcileUnsubmittedCloses = async () => {
@@ -1292,13 +1316,129 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
       }
     }
   };
-  const reportRecoveredClose = async (channel, txHash, settledBeforeClose) => {
-    const client = await getClient({ chainId: channel.chainId });
-    const { settledToPayee } = await chainOps.readChannelClose(client, channel.channelId, txHash);
+  const reconcileFinalizedDrains = async () => {
+    const ledger = creditLedger;
+    if (!ledger || !finalizeDrain) return;
+    let after;
+    do {
+      const page = await ledger.listChannelDrains({
+        limit: 100,
+        after,
+        createdBeforeMs: Date.now(),
+        rail: "tempo",
+        includeResolved: true
+      });
+      for (const drain of page) {
+        if (drain.status !== "exit_required" || !drain.channelId) continue;
+        try {
+          const stored = await store.get(drain.channelId);
+          const current = readTempoSessionState(stored);
+          if (!current) throw new Error("Channel history is unavailable");
+          const client = await getClient({ chainId: current.chainId });
+          const [chainState] = await chainOps.getChannelStatesBatch(client, [current.channelId], current.escrowContract);
+          if (!chainState || chainState.deposit !== 0n) continue;
+          await terminalizeLostBacking(current, chainState);
+          await writeBackChainState(current, chainState);
+          const pending = await config.hostedObligations?.pendingTempoClose(drain.channelId, drain.drainId);
+          if (pending && !pending.txHash) {
+            if (pending.state === "unmatched") throw new TempoDrainRefundUnprovenError("close_history_unmatched", "Close history requires an operator retry");
+            continue;
+          }
+          const recovery = await store.getCloseRecovery?.(drain.channelId);
+          const found = pending?.txHash ? { outcome: "ours", txHash: pending.txHash } : await findFinalizedClose(current, stored, drain.drainId, drain.createdAt, {
+            from: recovery?.searchBefore ?? null,
+            save: (resumeAt) => store.recordCloseSearch?.(drain.channelId, drain.drainId, resumeAt)
+          });
+          let refundedNative;
+          let reference;
+          if (found.outcome === "ours") {
+            reference = found.txHash;
+            const receipt = await chainOps.readChannelClose(client, current.channelId, found.txHash);
+            refundedNative = receipt.refundedToPayer;
+            if (!config.hostedObligations && config.onSessionSettlement && store.claimCloseReference) {
+              const claimed = await store.claimCloseReference(drain.channelId, drain.drainId, found.txHash);
+              if (claimed.claimed) {
+                await reportRecoveredClose(current, found.txHash, recovery?.settledBeforeClose ?? null, receipt.settledToPayee);
+              }
+            }
+          } else if (found.outcome === "exit") {
+            const snapshot = stored;
+            const deposit = typeof snapshot.depositBeforeFinalization === "bigint" ? snapshot.depositBeforeFinalization : current.deposit;
+            if (deposit <= 0n) throw new TempoDrainRefundUnprovenError("collateral_missing", "The pre-exit collateral is unavailable");
+            refundedNative = deposit - maxBigInt(current.settledOnChain, chainState.settled);
+            reference = `channel:${current.channelId}`;
+          } else {
+            throw new TempoDrainRefundUnprovenError("close_evidence_missing", "Channel finalization has no matching refund evidence");
+          }
+          if (drain.drainedNative === null || refundedNative < BigInt(drain.drainedNative)) {
+            throw new TempoDrainRefundUnprovenError("refund_short", "Proven refund is below the drain debit");
+          }
+          const creditUnbacked = (await ledger.get(drain.creditId))?.status === "unbacked";
+          await store.confirmClose?.(drain.channelId, drain.drainId, reference);
+          const changed = await finalizeDrain(drain, {
+            reference,
+            refundedNative,
+            outcome: found.outcome === "ours" ? "cooperative_close" : "payer_exit",
+            creditUnbacked
+          });
+          if (changed) {
+            loggers.tempo.warn(creditUnbacked ? "tempo_session_drain_unbacked_resolved" : "tempo_session_drain_finalized", {
+              channel_id: drain.channelId,
+              credit_id: drain.creditId,
+              drain_id: drain.drainId,
+              amount_at_stake_native: drain.drainedNative.toString(),
+              refund_native: refundedNative.toString(),
+              builder_loss_native: (current.highestVoucherAmount > maxBigInt(current.settledOnChain, chainState.settled) ? current.highestVoucherAmount - maxBigInt(current.settledOnChain, chainState.settled) : 0n).toString()
+            });
+          }
+        } catch (error) {
+          let failure = error;
+          if (error instanceof TempoDrainRefundUnprovenError) {
+            try {
+              await store.update(drain.channelId, (current) => {
+                if (!isStateRecord(current)) throw new Error("Channel history is unavailable");
+                const key = JSON.stringify([drain.creditId, drain.drainId, error.reason]);
+                const seen = Array.isArray(current.drainRefundWarnings) ? current.drainRefundWarnings : [];
+                if (seen.includes(key)) return { op: "noop", result: false };
+                loggers.tempo.warn("tempo_session_drain_refund_unproven", {
+                  channel_id: drain.channelId,
+                  credit_id: drain.creditId,
+                  drain_id: drain.drainId,
+                  amount_at_stake_native: drain.drainedNative?.toString() ?? null,
+                  amount_at_stake_micro: drain.amountMicro,
+                  currency: drain.currency,
+                  reason: error.reason,
+                  error: error.message
+                });
+                return { op: "set", value: { ...current, drainRefundWarnings: [...seen, key] }, result: true };
+              });
+              continue;
+            } catch (claimError) {
+              failure = claimError;
+            }
+          }
+          loggers.tempo.warn("tempo_session_close_reconcile_failed", {
+            channel_id: drain.channelId,
+            credit_id: drain.creditId,
+            drain_id: drain.drainId,
+            error: failure instanceof Error ? failure.message : String(failure)
+          });
+        }
+      }
+      const last = page.at(-1);
+      after = page.length === 100 && last ? { createdAt: last.createdAt, creditId: last.creditId, drainId: last.drainId } : void 0;
+    } while (after);
+  };
+  const reconcileTempoSessionCloses = async () => {
+    await reconcileUnsubmittedCloses();
+    await reconcileFinalizedDrains();
+  };
+  const reportRecoveredClose = async (channel, txHash, settledBeforeClose, settledToPayee) => {
     if (settledBeforeClose === null || settledToPayee < settledBeforeClose) {
       loggers.tempo.warn("tempo_session_close_settlement_unreported", {
         channel_id: channel.channelId,
-        tx_hash: txHash
+        tx_hash: txHash,
+        amount_at_stake_native: settledToPayee.toString()
       });
       return;
     }
@@ -1314,6 +1454,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
       loggers.tempo.warn("tempo_session_close_settlement_callback_failed", {
         channel_id: channel.channelId,
         tx_hash: txHash,
+        amount_at_stake_native: (settledToPayee - settledBeforeClose).toString(),
         error: error instanceof Error ? error.message : String(error)
       });
     }
@@ -1326,7 +1467,7 @@ function attachTempoSessionRuntime(mppx, config, chainOpOverrides = {}) {
   const confirmClose = store.confirmClose?.bind(store);
   return Object.assign(mppx, {
     sweepTempoSessions,
-    ...config?.hostedObligations && { reconcileTempoSessionCloses: reconcileUnsubmittedCloses },
+    ...config?.hostedObligations && { reconcileTempoSessionCloses },
     ...beginClose && {
       beginTempoSessionClose: async (channelId, drainId) => {
         await beginClose(channelId, drainId);
@@ -1417,6 +1558,7 @@ export {
   TEMPO_SETTLEMENT_DEFAULT_LOW_BALANCE_MICRO,
   TempoSettlementReadiness,
   isTempoInsufficientFundsError,
+  TempoCloseDescriptorError,
   MPPX_HMAC_MISMATCH_REASON,
   TEMPO_SETTLEMENT_LEASE_FIELD,
   TEMPO_SETTLEMENT_LEASE_OWNER_FIELD,

package/dist/{chunk-ZEPJF4JC.js → chunk-LW7KZQHG.js}

@@ -1,15 +1,15 @@
 import {
   canonicaliseForSigning
 } from "./chunk-UKD3R2KU.js";
-import {
-  callerLoggers
-} from "./chunk-66HGCPBU.js";
 import {
   DvmError
 } from "./chunk-BPYMEMQX.js";
+import {
+  callerLoggers
+} from "./chunk-66HGCPBU.js";
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/lib/cashu/lock-pubkey.ts
 function toLockPubkey(raw) {

package/dist/{chunk-BFGQG4WY.js → chunk-OIP44KBB.js}

@@ -418,6 +418,7 @@ var diagnostic_catalogue_v1_default = {
     "tempo_session_advertised_refresh_failed",
     "tempo_session_close_attempts_exhausted",
     "tempo_session_close_challenge_failed",
+    "tempo_session_close_descriptor_refused",
     "tempo_session_close_exit_resolved",
     "tempo_session_close_failed",
     "tempo_session_close_failure_reconcile_failed",
@@ -425,9 +426,13 @@ var diagnostic_catalogue_v1_default = {
     "tempo_session_close_recovery_failed",
     "tempo_session_close_recovery_search_paused",
     "tempo_session_close_recovery_unmatched",
+    "tempo_session_close_report_written_off",
     "tempo_session_close_reservation_released",
     "tempo_session_close_settlement_callback_failed",
     "tempo_session_close_settlement_unreported",
+    "tempo_session_drain_finalized",
+    "tempo_session_drain_refund_unproven",
+    "tempo_session_drain_unbacked_resolved",
     "tempo_session_open_refused",
     "tempo_session_settled",
     "tempo_session_withheld",

package/dist/{chunk-UWGBI5WK.js → chunk-Q3VYRU5R.js}

@@ -2,12 +2,12 @@ import {
   parseStoreValue,
   stringifyStoreValue
 } from "./chunk-YG7G4DPZ.js";
-import {
-  withPostgresTransactionRecovery
-} from "./chunk-7PM4R4GD.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  withPostgresTransactionRecovery
+} from "./chunk-IBX2ORBV.js";
 
 // src/sdk/server/tempo-session-store.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-IOQIXRGM.js → chunk-QSZW2I5Y.js}

@@ -7,7 +7,7 @@ import {
   extendDiagnosticIdentityAuthority,
   projectDiagnosticFields,
   projectSpanRow
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/observability/context.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-IHQUBATH.js → chunk-TFDR2YP2.js}

@@ -3,12 +3,12 @@ import {
   applyContentHoldMutation,
   isTerminal
 } from "./chunk-AFV77S4C.js";
-import {
-  loggers
-} from "./chunk-IOQIXRGM.js";
 import {
   redactUrl
 } from "./chunk-FUJ36YDV.js";
+import {
+  loggers
+} from "./chunk-QSZW2I5Y.js";
 
 // src/sdk/server/job-store.ts
 function accumulateAskedTopUp(prior, ask) {

package/dist/{chunk-OP7VCGQR.js → chunk-TRY7BJA4.js}

@@ -1,7 +1,7 @@
 import {
   emitDiagnostic,
   projectDiagnosticFields
-} from "./chunk-BFGQG4WY.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/logger.ts
 function createConsoleLogger(_jobId) {

package/dist/{chunk-NU5RWJ5B.js → chunk-WB3E7KE7.js}

@@ -1,9 +1,9 @@
-import {
-  diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
 import {
   withSdkInitLock
 } from "./chunk-COYKJRMM.js";
+import {
+  diagnosticConsole
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/revenue-reporter.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-UDJNZ3UG.js → chunk-WLPLHXNP.js}

@@ -1,6 +1,6 @@
 import {
   validateCurrency
-} from "./chunk-2U6LAASN.js";
+} from "./chunk-HC4I7LAV.js";
 
 // src/sdk/pricing/upfront.ts
 function buildUpfront(input) {

package/dist/{chunk-FM6QAGJC.js → chunk-YYRY32NR.js}

@@ -1,15 +1,15 @@
+import {
+  withSdkInitLock
+} from "./chunk-COYKJRMM.js";
 import {
   applyRetryToPool
-} from "./chunk-7PM4R4GD.js";
+} from "./chunk-IBX2ORBV.js";
 import {
   x402NetworkByCaip2
 } from "./chunk-BPYMEMQX.js";
 import {
   diagnosticConsole
-} from "./chunk-BFGQG4WY.js";
-import {
-  withSdkInitLock
-} from "./chunk-COYKJRMM.js";
+} from "./chunk-OIP44KBB.js";
 
 // src/sdk/server/credit-ledger.ts
 import { randomUUID } from "crypto";
@@ -3153,7 +3153,7 @@ var CreditLedger = class {
     const { rows } = await this.pool.query(
       `SELECT d.*, ${DRAIN_CREDIT_COLUMNS} FROM credit_drains d
        JOIN credits c ON c.credit_id = d.credit_id
-       WHERE d.status = 'pending' ORDER BY d.created_at, d.credit_id, d.drain_id`
+       WHERE d.status IN ('pending','exit_required') ORDER BY d.created_at, d.credit_id, d.drain_id`
     );
     return rows.map(drainRecordFromJoinRow);
   }
@@ -3173,7 +3173,7 @@ var CreditLedger = class {
     const { rows } = await this.pool.query(
       `SELECT d.*, ${DRAIN_CREDIT_COLUMNS} FROM credit_drains d
        JOIN credits c ON c.credit_id = d.credit_id
-       WHERE d.status = 'pending'
+       WHERE d.status IN ('pending','exit_required')
          AND d.method = 'tempo'
          AND c.tempo_channel_id IS NOT NULL
          AND d.created_at <= $1
@@ -3225,6 +3225,22 @@ var CreditLedger = class {
       [args.creditId, args.drainId]
     );
   }
+  /** Keep the debit and close intent while the caller uses its timed channel exit. */
+  async requireTempoDrainExit(args) {
+    const q = args.tx ?? this.pool;
+    const { rows } = await q.query(
+      `UPDATE credit_drains d SET status='exit_required'
+       FROM credits c WHERE d.credit_id=c.credit_id AND d.credit_id=$1 AND d.drain_id=$2
+         AND d.status='pending' AND d.method='tempo' AND c.tempo_channel_id IS NOT NULL
+       RETURNING d.*`,
+      [args.creditId, args.drainId]
+    );
+    if (rows.length) return { drain: await this.rejoin(q, rows[0]), replayed: false };
+    return this.refuseTransition(q, args.creditId, args.drainId, {
+      idempotentWhen: (row) => row.status === "exit_required" || row.status === "sent",
+      verb: "require timed exit"
+    });
+  }
   /**
    * Cancel an unfulfilled Tempo cooperative drain and restore the exact
    * balance plus rail basis it removed (`pending -> released`). This is only
@@ -3366,7 +3382,7 @@ var CreditLedger = class {
     const nowMs = args.nowMs ?? Date.now();
     const { rows } = await q.query(
       `UPDATE credit_drains SET status = 'sent', sent_ref = $3, sent_at = $4
-       WHERE credit_id = $1 AND drain_id = $2 AND status = 'pending' AND method <> 'cashu'
+       WHERE credit_id = $1 AND drain_id = $2 AND status IN ('pending','exit_required') AND method <> 'cashu'
        RETURNING *`,
       [args.creditId, args.drainId, JSON.stringify(args.sentRef), nowMs]
     );