@haven_ai/sdk 0.1.18-alpha.0 → 0.1.19-alpha.0

package/dist/index.cjs

@@ -349,6 +349,7 @@ function optionAuthorizationAmount(option) {
   return option.maxAmountRequired ?? option.amount;
 }
 var X402_MAX_AUTHORIZATION_WINDOW_SECONDS = 600;
+var X402_SETTLEMENT_FORWARD_MARGIN_SECONDS = 300;
 function clampAuthorizationWindow(seconds) {
   const requested = typeof seconds === "number" && Number.isFinite(seconds) ? seconds : 30;
   return Math.min(Math.max(Math.floor(requested), 1), X402_MAX_AUTHORIZATION_WINDOW_SECONDS);
@@ -546,7 +547,12 @@ function toStandardPaymentRequirements(paymentRequired, option) {
     // Second enforcement point (#715): the parse path clamps too, but this is
     // the last stop before the x402 library turns the timeout into
     // `validBefore` — options constructed without parsing are bounded here.
-    maxTimeoutSeconds: clampAuthorizationWindow(option.maxTimeoutSeconds),
+    // The forward margin (#1256) is added ONLY here, at signing: the parse
+    // path keeps recording the merchant's advertised timeout unchanged, and
+    // the library's `validBefore = now + this value` then carries enough
+    // slack to satisfy the facilitator's `validBefore ≥ now + maxTimeout`
+    // verify rule after our funding leg confirms.
+    maxTimeoutSeconds: clampAuthorizationWindow(option.maxTimeoutSeconds) + X402_SETTLEMENT_FORWARD_MARGIN_SECONDS,
     extra: option.extra
   };
 }
@@ -3608,6 +3614,45 @@ for that credential.
 `;
 var SKILL_FOLDER_NAME = "haven-pay";
 
+// src/node-version.ts
+var HAVEN_MINIMUM_NODE_VERSION = "24.0.0";
+function parseNodeVersion(value) {
+  const match = value.trim().match(/^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?/);
+  if (!match) return [0, 0, 0];
+  return [Number(match[1] ?? 0), Number(match[2] ?? 0), Number(match[3] ?? 0)];
+}
+function compareNodeVersions(left, right) {
+  const leftParts = parseNodeVersion(left);
+  const rightParts = parseNodeVersion(right);
+  for (let i = 0; i < 3; i += 1) {
+    if (leftParts[i] !== rightParts[i]) return leftParts[i] > rightParts[i] ? 1 : -1;
+  }
+  return 0;
+}
+function isSupportedNodeVersion(nodeVersion = process.versions.node, minimumNodeVersion = HAVEN_MINIMUM_NODE_VERSION) {
+  return compareNodeVersions(nodeVersion, minimumNodeVersion) >= 0;
+}
+function unsupportedNodeVersionMessage(options) {
+  const nodeVersion = options.nodeVersion ?? process.versions.node;
+  const minimum = options.minimumNodeVersion ?? HAVEN_MINIMUM_NODE_VERSION;
+  const lines = [
+    `${options.subject} requires Node.js >=${minimum}, but this is Node.js ${nodeVersion}.`,
+    "",
+    "Upgrade Node, then try again:",
+    `  nvm install ${major(minimum)} && nvm use ${major(minimum)}      (nvm)`,
+    `  fnm install ${major(minimum)} && fnm use ${major(minimum)}      (fnm)`,
+    `  volta install node@${major(minimum)}                 (volta)`,
+    `  or download Node ${major(minimum)} from https://nodejs.org`,
+    "",
+    "If you use a version manager, check that the agent runtime launching Haven picks up the same version \u2014 upgrading your shell does not always change what a desktop app spawns."
+  ];
+  if (options.retryHint) lines.push("", options.retryHint);
+  return lines.join("\n");
+}
+function major(version) {
+  return String(parseNodeVersion(version)[0]);
+}
+
 // src/sweep.ts
 var SWEEP_BASE_CHAIN_ID = 8453;
 var SWEEP_BASE_SEPOLIA_CHAIN_ID = 84532;
@@ -3729,6 +3774,7 @@ exports.AgentPaymentPhaseSchema = AgentPaymentPhaseSchema;
 exports.AgentPaymentRail = AgentPaymentRail;
 exports.AgentPaymentRailDescriptions = AgentPaymentRailDescriptions;
 exports.AgentPaymentRailSchema = AgentPaymentRailSchema;
+exports.HAVEN_MINIMUM_NODE_VERSION = HAVEN_MINIMUM_NODE_VERSION;
 exports.HAVEN_SKILL_MD = HAVEN_SKILL_MD;
 exports.HavenApiError = HavenApiError;
 exports.HavenClient = HavenClient;
@@ -3743,11 +3789,14 @@ exports.SWEEP_BASE_SEPOLIA_CHAIN_ID = SWEEP_BASE_SEPOLIA_CHAIN_ID;
 exports.SWEEP_BASE_SEPOLIA_USDC_ADDRESS = SWEEP_BASE_SEPOLIA_USDC_ADDRESS;
 exports.SWEEP_BASE_USDC_ADDRESS = SWEEP_BASE_USDC_ADDRESS;
 exports.TRANSFER_WITH_AUTHORIZATION_TYPES = TRANSFER_WITH_AUTHORIZATION_TYPES;
+exports.X402_MAX_AUTHORIZATION_WINDOW_SECONDS = X402_MAX_AUTHORIZATION_WINDOW_SECONDS;
+exports.X402_SETTLEMENT_FORWARD_MARGIN_SECONDS = X402_SETTLEMENT_FORWARD_MARGIN_SECONDS;
 exports.addressFromKey = addressFromKey;
 exports.buildMachinePaymentIdempotencyKey = buildMachinePaymentIdempotencyKey;
 exports.buildSweepAuthorizationMessage = buildSweepAuthorizationMessage;
 exports.buildSweepTypedData = buildSweepTypedData;
 exports.buildX402ExpectedMessage = buildX402ExpectedMessage;
+exports.compareNodeVersions = compareNodeVersions;
 exports.composeDescription = composeDescription;
 exports.decodeBase64Json = decodeBase64Json;
 exports.decodeBase64Utf8 = decodeBase64Utf8;
@@ -3756,6 +3805,7 @@ exports.encodeBase64Utf8 = encodeBase64Utf8;
 exports.encodeMachinePaymentProof = encodeMachinePaymentProof;
 exports.encodePaymentProof = encodePaymentProof;
 exports.havenTools = havenTools;
+exports.isSupportedNodeVersion = isSupportedNodeVersion;
 exports.isSweepableChain = isSweepableChain;
 exports.parseMachinePaymentChallenge = parseMachinePaymentChallenge;
 exports.parseMachinePaymentChallengeResponse = parseMachinePaymentChallengeResponse;
@@ -3769,6 +3819,7 @@ exports.sweepUsdcAddress = sweepUsdcAddress;
 exports.sweepUsdcDomain = sweepUsdcDomain;
 exports.toStandardPaymentRequirements = toStandardPaymentRequirements;
 exports.toolDescriptions = toolDescriptions;
+exports.unsupportedNodeVersionMessage = unsupportedNodeVersionMessage;
 exports.verifyPaymentReceipt = verifyPaymentReceipt;
 exports.verifySignature = verifySignature;
 exports.x402AuthorizationAmount = x402AuthorizationAmount;