@haven_ai/sdk 0.0.0-dev.202609190328.55ffe63 → 0.0.0-dev.202609190647.18526db

package/dist/index.cjs

@@ -708,7 +708,13 @@ function normalizePaymentOption(value) {
     mimeType: candidate.mimeType,
     asset: candidate.asset,
     payTo: candidate.payTo,
-    maxTimeoutSeconds: clampAuthorizationWindow(candidate.maxTimeoutSeconds),
+    // Keep the merchant offer intact for v2 `accepted` matching. Only the
+    // signing conversion may cap its authorization lifetime (#3117).
+    // Retain legacy fallback behavior for missing or unusable timeouts.
+    // Integer, because the authorize body types it `integer` and the child's
+    // timestamp caveat is built from it — the old clamp floored, so keeping a
+    // fractional value here would 400 a merchant that used to work (#3117).
+    maxTimeoutSeconds: typeof candidate.maxTimeoutSeconds === "number" && Number.isFinite(candidate.maxTimeoutSeconds) && candidate.maxTimeoutSeconds >= 1 ? Math.floor(candidate.maxTimeoutSeconds) : clampAuthorizationWindow(candidate.maxTimeoutSeconds),
     extra: candidate.extra
   };
 }
@@ -958,14 +964,11 @@ function toStandardPaymentRequirements(paymentRequired, option) {
     mimeType: option.mimeType ?? paymentRequired.resource.mimeType ?? "application/octet-stream",
     payTo: option.payTo,
     asset: option.asset,
-    // Second enforcement point (#715): the parse path clamps too, but this is
-    // the last stop before the x402 library turns the timeout into
-    // `validBefore` — options constructed without parsing are bounded here.
-    // The forward margin (#1256) is added ONLY here, at signing: the parse
-    // path keeps recording the merchant's advertised timeout unchanged, and
-    // the library's `validBefore = now + this value` then carries enough
-    // slack to satisfy the facilitator's `validBefore ≥ now + maxTimeout`
-    // verify rule after our funding leg confirms.
+    // Signing-only policy (#715/#3117): parsed and directly supplied options
+    // share this cap before the library computes validBefore. Keep the offer
+    // echoed in `accepted` unchanged. The forward margin (#1256) adds time
+    // for funding/retry, but does not guarantee a merchant timeout above the
+    // total bounded lifetime can pass facilitator verification.
     maxTimeoutSeconds: clampAuthorizationWindow(option.maxTimeoutSeconds) + X402_SETTLEMENT_FORWARD_MARGIN_SECONDS,
     extra: option.extra
   };