@haven_ai/sdk 0.0.0-dev.202609282003.b645eff → 0.0.0-dev.202609282315.dd06d7c

package/README.md

@@ -425,6 +425,7 @@ x402 tool-window failures:
 | `rejected` | The payment was rejected and cannot proceed. | yes |
 | `expired` | Payment expired before completion. | yes |
 | `failed` | Haven could not complete the payment. | yes |
+| `delivered_unverified` | **#3420: terminal.** The merchant delivered, but the settlement window and the sweep's last attribution chance have both passed with no verified on-chain evidence. Polling cannot change this; the only remedy is reporting a real settlement hash (`haven_report_settlement_evidence`). | yes |
 
 The merchant settlement leg of x402 (and the MPP retry) is the agent's own request to the merchant — it does not have a Haven `phase`. The payment is `funding_sent` until the agent retries with the payment header (`PAYMENT-SIGNATURE`, plus `X-PAYMENT` on this bridged path) (x402) or the MPP proof header; from Haven's perspective the payment becomes `executed` only after the agent successfully resumes.
 
@@ -435,10 +436,11 @@ The merchant settlement leg of x402 (and the MPP retry) is the agent's own reque
 | `sign_and_submit_payment` | Sign with the delegate key and submit the payment to Haven. |
 | `check_status_later` | Poll `getPaymentStatus(payment_id)` later. |
 | `none` | Stop polling; no more action is needed for this payment id. |
+| `awaiting_settlement_evidence` | #2970/#3420: the erc7710 settlement window passed with no verified evidence. Poll `getPaymentStatus(payment_id)` once more shortly after the payment's expiry; if it still shows nothing (or already answers the terminal `delivered_unverified` phase), tell the user the goods were delivered but unverified. |
 | `wait_for_user_approval` | **No longer produced — nothing maps to it.** Retired with the Safe rail's approval queue; kept in the exported enum for wire compatibility. The SDK's own status mapping now answers `stop_and_tell_user` for the statuses that used to yield this. |
 | `wait_for_user_to_complete_payment` | **No longer produced — nothing maps to it.** Same retirement as above. |
 | `retry_original_x402_request` | Haven's funding leg confirmed but no merchant response was ever recorded — most often because the process crashed between the funding confirmation and the merchant retry (a 15-minute grace window applies before this fires; a client-reported merchant rejection instead yields `sweep_stranded_funds`). Call `resumeX402Payment()` with the preserved `resumeState`, or rehydrate it first with `getResumeState(payment_id)`. Do not start a new payment for the same purchase. |
-| `stop_and_tell_user` | Stop retrying and tell the user the payment failed or was rejected. |
+| `stop_and_tell_user` | Stop retrying and tell the user what happened — the payment failed, was rejected, or (#3420) was delivered but its settlement can no longer be verified. |
 | `request_again_if_user_still_wants_it` | The request expired; ask again only if the user still wants the payment. |
 | `payment_window_expired` | The x402 funding/quote window expired. Re-quote the same paid MCP tool call with the same `idempotency_key`, then sign the fresh `payload_hash`. |
 | `sweep_stranded_funds` | A funding leg succeeded but the merchant/protocol leg did not settle. Stop retrying and use `haven_sweep_delegate` to recover stranded delegate funds. |

package/dist/{base64-Br8mJPgm.d.cts → base64-YC49ypsN.d.cts}

@@ -1106,6 +1106,20 @@ declare const AgentPaymentPhase: {
      * the funds.
      */
     readonly FundedButUnsettled: "funded_but_unsettled";
+    /**
+     * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+     * window AND the sweep's last attribution chance have both passed with no
+     * verified evidence. The sweep's tick (120s) only ever confirms a
+     * transaction mined inside the payment's own settlement window (the child
+     * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+     * clock-skew allowance), so once authorize + window + skew is behind the
+     * payment, no poll — and no sweep tick — can ever change the answer.
+     * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+     * were delivered but Haven holds no verified settlement evidence; reporting
+     * a real settlement hash (`haven_report_settlement_evidence`) still works
+     * at any age.
+     */
+    readonly DeliveredUnverified: "delivered_unverified";
 };
 type AgentPaymentPhase = (typeof AgentPaymentPhase)[keyof typeof AgentPaymentPhase];
 declare const AgentPaymentNextAction: {
@@ -1263,7 +1277,7 @@ declare const AgentPaymentRail: {
 type AgentPaymentRail = (typeof AgentPaymentRail)[keyof typeof AgentPaymentRail];
 type PaymentPhase = AgentPaymentPhase;
 type PaymentNextAction = AgentPaymentNextAction;
-declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled")[];
+declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled" | "delivered_unverified")[];
 declare const AGENT_PAYMENT_NEXT_ACTION_VALUES: ("sign_and_submit_payment" | "check_status_later" | "none" | "wait_for_user_approval" | "wait_for_user_to_complete_payment" | "retry_original_x402_request" | "stop_and_tell_user" | "request_again_if_user_still_wants_it" | "retry_with_explicit_context" | "payment_window_expired" | "fund_account_or_raise_allowance" | "sweep_stranded_funds" | "awaiting_settlement_evidence")[];
 declare const AGENT_PAYMENT_FAILURE_CODE_VALUES: ("PRICE_EXCEEDS_MAX" | "PAYMENT_WINDOW_EXPIRED" | "MERCHANT_REJECTED_AFTER_FUNDING" | "MERCHANT_UNRESPONSIVE_AFTER_FUNDING" | "MERCHANT_CALL_CONTEXT_UNAVAILABLE" | "AMBIGUOUS_MAX_AMOUNT" | "MAX_AMOUNT_UNCONVERTIBLE" | "MERCHANT_NOT_READY")[];
 declare const AGENT_PAYMENT_RAIL_VALUES: ("x402" | "mpp_demo" | "mpp_crypto" | "stripe_deposit" | "spt" | "direct" | "mpp")[];
@@ -1449,6 +1463,11 @@ interface PaymentStatusResult {
     expiresAt: string;
     chainId: number;
     message: string;
+    /**
+     * #3420: `true` = the merchant answered 2xx (a `machine_payment_evidence`
+     * row records its response); absent = unknown. See the raw field's doc.
+     */
+    delivered?: boolean;
     /** Platform fee surfaced so it's never silently collected (#386). */
     fee?: PaymentFee | null;
     amountAtomic?: string | null;
@@ -1995,7 +2014,7 @@ declare function buildSweepAuthorizationMessage(auth: SweepAuthorization): strin
  * This SDK's own version. Owned by `scripts/release-bump.mjs`, which rewrites
  * it with the package version on every release — never hand-edit it.
  */
-declare const SDK_VERSION = "0.0.0-dev.202609282003.b645eff";
+declare const SDK_VERSION = "0.0.0-dev.202609282315.dd06d7c";
 /** The request header every published Haven client sends. */
 declare const HAVEN_CLIENT_HEADER = "X-Haven-Client";
 /** `<package>/<version>` — the value of {@link HAVEN_CLIENT_HEADER}. */

package/dist/{base64-Br8mJPgm.d.ts → base64-YC49ypsN.d.ts}

@@ -1106,6 +1106,20 @@ declare const AgentPaymentPhase: {
      * the funds.
      */
     readonly FundedButUnsettled: "funded_but_unsettled";
+    /**
+     * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+     * window AND the sweep's last attribution chance have both passed with no
+     * verified evidence. The sweep's tick (120s) only ever confirms a
+     * transaction mined inside the payment's own settlement window (the child
+     * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+     * clock-skew allowance), so once authorize + window + skew is behind the
+     * payment, no poll — and no sweep tick — can ever change the answer.
+     * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+     * were delivered but Haven holds no verified settlement evidence; reporting
+     * a real settlement hash (`haven_report_settlement_evidence`) still works
+     * at any age.
+     */
+    readonly DeliveredUnverified: "delivered_unverified";
 };
 type AgentPaymentPhase = (typeof AgentPaymentPhase)[keyof typeof AgentPaymentPhase];
 declare const AgentPaymentNextAction: {
@@ -1263,7 +1277,7 @@ declare const AgentPaymentRail: {
 type AgentPaymentRail = (typeof AgentPaymentRail)[keyof typeof AgentPaymentRail];
 type PaymentPhase = AgentPaymentPhase;
 type PaymentNextAction = AgentPaymentNextAction;
-declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled")[];
+declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled" | "delivered_unverified")[];
 declare const AGENT_PAYMENT_NEXT_ACTION_VALUES: ("sign_and_submit_payment" | "check_status_later" | "none" | "wait_for_user_approval" | "wait_for_user_to_complete_payment" | "retry_original_x402_request" | "stop_and_tell_user" | "request_again_if_user_still_wants_it" | "retry_with_explicit_context" | "payment_window_expired" | "fund_account_or_raise_allowance" | "sweep_stranded_funds" | "awaiting_settlement_evidence")[];
 declare const AGENT_PAYMENT_FAILURE_CODE_VALUES: ("PRICE_EXCEEDS_MAX" | "PAYMENT_WINDOW_EXPIRED" | "MERCHANT_REJECTED_AFTER_FUNDING" | "MERCHANT_UNRESPONSIVE_AFTER_FUNDING" | "MERCHANT_CALL_CONTEXT_UNAVAILABLE" | "AMBIGUOUS_MAX_AMOUNT" | "MAX_AMOUNT_UNCONVERTIBLE" | "MERCHANT_NOT_READY")[];
 declare const AGENT_PAYMENT_RAIL_VALUES: ("x402" | "mpp_demo" | "mpp_crypto" | "stripe_deposit" | "spt" | "direct" | "mpp")[];
@@ -1449,6 +1463,11 @@ interface PaymentStatusResult {
     expiresAt: string;
     chainId: number;
     message: string;
+    /**
+     * #3420: `true` = the merchant answered 2xx (a `machine_payment_evidence`
+     * row records its response); absent = unknown. See the raw field's doc.
+     */
+    delivered?: boolean;
     /** Platform fee surfaced so it's never silently collected (#386). */
     fee?: PaymentFee | null;
     amountAtomic?: string | null;
@@ -1995,7 +2014,7 @@ declare function buildSweepAuthorizationMessage(auth: SweepAuthorization): strin
  * This SDK's own version. Owned by `scripts/release-bump.mjs`, which rewrites
  * it with the package version on every release — never hand-edit it.
  */
-declare const SDK_VERSION = "0.0.0-dev.202609282003.b645eff";
+declare const SDK_VERSION = "0.0.0-dev.202609282315.dd06d7c";
 /** The request header every published Haven client sends. */
 declare const HAVEN_CLIENT_HEADER = "X-Haven-Client";
 /** `<package>/<version>` — the value of {@link HAVEN_CLIENT_HEADER}. */

package/dist/{chunk-Y2Q4DZVU.js → chunk-FVLF2A66.js}

@@ -74,7 +74,21 @@ var AgentPaymentPhase = {
    * agent should stop, tell the user, and wait for the sweep flow to reclaim
    * the funds.
    */
-  FundedButUnsettled: "funded_but_unsettled"
+  FundedButUnsettled: "funded_but_unsettled",
+  /**
+   * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+   * window AND the sweep's last attribution chance have both passed with no
+   * verified evidence. The sweep's tick (120s) only ever confirms a
+   * transaction mined inside the payment's own settlement window (the child
+   * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+   * clock-skew allowance), so once authorize + window + skew is behind the
+   * payment, no poll — and no sweep tick — can ever change the answer.
+   * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+   * were delivered but Haven holds no verified settlement evidence; reporting
+   * a real settlement hash (`haven_report_settlement_evidence`) still works
+   * at any age.
+   */
+  DeliveredUnverified: "delivered_unverified"
 };
 var AgentPaymentNextAction = {
   /** Sign with the delegate key and submit the payment to Haven. */
@@ -222,7 +236,8 @@ var AgentPaymentPhaseDescriptions = {
   [AgentPaymentPhase.Expired]: "The payment expired before completion.",
   [AgentPaymentPhase.Failed]: "Haven could not complete the payment; the agent should stop and surface the failure.",
   [AgentPaymentPhase.InsufficientFunds]: "Pre-flight check determined the delegate balance plus the remaining on-chain budget cannot cover the requested amount, so no payment was created. The account must be funded or the agent budget raised before retrying.",
-  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account."
+  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account.",
+  [AgentPaymentPhase.DeliveredUnverified]: "Terminal: the merchant delivered the goods and the settlement window plus the sweep's last attribution chance have both passed with no verified on-chain evidence. The payment can no longer resolve by polling. Tell the user the goods were delivered but Haven holds no verified settlement evidence for this payment."
 };
 var AgentPaymentNextActionDescriptions = {
   [AgentPaymentNextAction.SignAndSubmitPayment]: "Sign with the delegate key and submit the payment to Haven.",
@@ -969,5 +984,5 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
 }
 
 export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CAVEAT_ENFORCERS, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DELEGATION_MANAGER, DELEGATION_TUPLE_COMPONENTS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_DOMAIN_NAME, HYBRID_DELEGATOR_DOMAIN_VERSION, HYBRID_DELEGATOR_IMPLEMENTATION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, HavenZeroSettlementHashError, MAX_SETTLEMENT_WINDOW_SECONDS, MerchantTimeoutError, PACKED_USER_OPERATION_FIELDS, REDEEM_DELEGATIONS_ABI, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SIMPLE_FACTORY_ADDRESS, SINGLE_DEFAULT_MODE, SignerRefusalCode, X402AlreadySettledError, X402Erc7710AlreadySettledError, X402TaskBudgetMismatchError, X402UnexpectedStatusError, assertRedeemsOwnBudgetDelegation, assertUserOpTypedDataBinding, chainIdForNetwork, connectorRerunCommand, connectorSpec, connectorUpgradeCommand, deriveDelegateAccountAddress, isConnectorChannel, isPackedUserOperationTypedData, isSettlementChildTypedData, packedUserOperationHash, resolveConnectorChannel, signerUpdateFallback, verifySettlementChild };
-//# sourceMappingURL=chunk-Y2Q4DZVU.js.map
-//# sourceMappingURL=chunk-Y2Q4DZVU.js.map
+//# sourceMappingURL=chunk-FVLF2A66.js.map
+//# sourceMappingURL=chunk-FVLF2A66.js.map