@haven_ai/sdk 0.1.24-alpha.0 → 0.1.25-alpha.0

package/dist/index.d.cts

@@ -1758,8 +1758,18 @@ declare class HavenClient {
      * balance — otherwise it rejects with "Payment verification failed". The
      * SDK's local path already does this (see authorizeStandardX402); the hosted
      * split flow regressed when the 5→3 collapse removed the incidental
-     * inter-call latency that used to mask it. No-op when the funding tx hash or
-     * a chain RPC (chainRpcs[chainId]) is unavailable.
+     * inter-call latency that used to mask it.
+     *
+     * **NOT a no-op when the funding tx hash is absent** (#1508). The WAIT is
+     * skipped without a hash or a chain RPC, but the `GET /payments/:id` read
+     * below runs UNCONDITIONALLY — it is how the fallback hash and the chainId
+     * are obtained. That distinction is load-bearing: this method must never be
+     * called on a scheme with no funding leg, because the read itself fails once
+     * the intent reaches a status the backend maps to a non-2xx (`submitted` is a
+     * 409), turning a settled payment into a reported error. The previous wording
+     * here said "No-op when the funding tx hash ... is unavailable", and the
+     * hosted erc7710 path was written against that promise — see
+     * `deliverMerchantPayment`'s `noFundingLeg` option.
      */
     ensureFundingConfirmed(paymentId: string, fundingTxHash?: string): Promise<void>;
     completeX402MerchantCall(input: {
@@ -1768,6 +1778,16 @@ declare class HavenClient {
         paymentId: string;
         paymentHeader: string;
         mcpTransport?: X402McpTransport;
+        /**
+         * #1508: the payment settles with NO funding leg (erc7710). This method was
+         * written for EIP-3009 and encodes that lifecycle in two places — the
+         * readiness gate wants `confirmed`, and a Haven funding tx hash is
+         * mandatory. Neither is reachable on a scheme where the MERCHANT redeems
+         * the delegation chain: the intent sits at `submitted` by design, and there
+         * is no Haven-submitted transaction at all. Set this to take the
+         * no-funding-leg path through both.
+         */
+        noFundingLeg?: boolean;
     }): Promise<{
         status: number;
         ok: boolean;

package/dist/index.d.ts

@@ -1758,8 +1758,18 @@ declare class HavenClient {
      * balance — otherwise it rejects with "Payment verification failed". The
      * SDK's local path already does this (see authorizeStandardX402); the hosted
      * split flow regressed when the 5→3 collapse removed the incidental
-     * inter-call latency that used to mask it. No-op when the funding tx hash or
-     * a chain RPC (chainRpcs[chainId]) is unavailable.
+     * inter-call latency that used to mask it.
+     *
+     * **NOT a no-op when the funding tx hash is absent** (#1508). The WAIT is
+     * skipped without a hash or a chain RPC, but the `GET /payments/:id` read
+     * below runs UNCONDITIONALLY — it is how the fallback hash and the chainId
+     * are obtained. That distinction is load-bearing: this method must never be
+     * called on a scheme with no funding leg, because the read itself fails once
+     * the intent reaches a status the backend maps to a non-2xx (`submitted` is a
+     * 409), turning a settled payment into a reported error. The previous wording
+     * here said "No-op when the funding tx hash ... is unavailable", and the
+     * hosted erc7710 path was written against that promise — see
+     * `deliverMerchantPayment`'s `noFundingLeg` option.
      */
     ensureFundingConfirmed(paymentId: string, fundingTxHash?: string): Promise<void>;
     completeX402MerchantCall(input: {
@@ -1768,6 +1778,16 @@ declare class HavenClient {
         paymentId: string;
         paymentHeader: string;
         mcpTransport?: X402McpTransport;
+        /**
+         * #1508: the payment settles with NO funding leg (erc7710). This method was
+         * written for EIP-3009 and encodes that lifecycle in two places — the
+         * readiness gate wants `confirmed`, and a Haven funding tx hash is
+         * mandatory. Neither is reachable on a scheme where the MERCHANT redeems
+         * the delegation chain: the intent sits at `submitted` by design, and there
+         * is no Haven-submitted transaction at all. Set this to take the
+         * no-funding-leg path through both.
+         */
+        noFundingLeg?: boolean;
     }): Promise<{
         status: number;
         ok: boolean;

package/dist/index.js

@@ -2463,8 +2463,18 @@ var HavenClient = class {
    * balance — otherwise it rejects with "Payment verification failed". The
    * SDK's local path already does this (see authorizeStandardX402); the hosted
    * split flow regressed when the 5→3 collapse removed the incidental
-   * inter-call latency that used to mask it. No-op when the funding tx hash or
-   * a chain RPC (chainRpcs[chainId]) is unavailable.
+   * inter-call latency that used to mask it.
+   *
+   * **NOT a no-op when the funding tx hash is absent** (#1508). The WAIT is
+   * skipped without a hash or a chain RPC, but the `GET /payments/:id` read
+   * below runs UNCONDITIONALLY — it is how the fallback hash and the chainId
+   * are obtained. That distinction is load-bearing: this method must never be
+   * called on a scheme with no funding leg, because the read itself fails once
+   * the intent reaches a status the backend maps to a non-2xx (`submitted` is a
+   * 409), turning a settled payment into a reported error. The previous wording
+   * here said "No-op when the funding tx hash ... is unavailable", and the
+   * hosted erc7710 path was written against that promise — see
+   * `deliverMerchantPayment`'s `noFundingLeg` option.
    */
   async ensureFundingConfirmed(paymentId, fundingTxHash) {
     const status = await this.getPaymentStatus(paymentId);
@@ -2473,8 +2483,10 @@ var HavenClient = class {
   async completeX402MerchantCall(input) {
     const evidenceContext = await this.resolveX402MerchantCompletionContext({
       paymentId: input.paymentId,
-      url: input.url
+      url: input.url,
+      noFundingLeg: input.noFundingLeg === true
     });
+    const fundingTxHash = evidenceContext.txHash;
     const shouldHandshakeMcp = isMcpUrl(input.url) || input.mcpTransport?.handshakeRequired === true;
     const x402Wallet = shouldHandshakeMcp ? await this.resolveX402WalletForMerchantCall() : this.x402PayerAddress();
     let mcpSessionId;
@@ -2498,33 +2510,37 @@ var HavenClient = class {
       body = text;
     }
     if (!surfaced.ok) {
-      await this.recordMerchantRetryRejected({
-        rail: "x402",
-        paymentId: evidenceContext.paymentId,
-        txHash: evidenceContext.txHash,
-        resourceUrl: evidenceContext.resourceUrl,
-        merchant: {
-          merchant_status: surfaced.status,
-          merchant_status_text: surfaced.statusText,
-          merchant_headers: Object.fromEntries(surfaced.headers.entries()),
-          merchant_body: text
-        },
-        details: {
-          merchant_to: evidenceContext.merchantAddress
-        }
-      });
+      if (!input.noFundingLeg && fundingTxHash) {
+        await this.recordMerchantRetryRejected({
+          rail: "x402",
+          paymentId: evidenceContext.paymentId,
+          txHash: fundingTxHash,
+          resourceUrl: evidenceContext.resourceUrl,
+          merchant: {
+            merchant_status: surfaced.status,
+            merchant_status_text: surfaced.statusText,
+            merchant_headers: Object.fromEntries(surfaced.headers.entries()),
+            merchant_body: text
+          },
+          details: {
+            merchant_to: evidenceContext.merchantAddress
+          }
+        });
+      }
     } else {
-      await this.reportMachinePaymentEvidence({
-        paymentId: evidenceContext.paymentId,
-        rail: "x402",
-        txHash: evidenceContext.txHash,
-        resourceUrl: evidenceContext.resourceUrl,
-        merchantStatus: surfaced.status,
-        paymentProofHeaderName: "X-PAYMENT",
-        paymentProofHeader: input.paymentHeader,
-        protocolReceiptHeaderName: protocolReceiptHeader ? "PAYMENT-RESPONSE" : void 0,
-        protocolReceiptHeader
-      });
+      if (!input.noFundingLeg && fundingTxHash) {
+        await this.reportMachinePaymentEvidence({
+          paymentId: evidenceContext.paymentId,
+          rail: "x402",
+          txHash: fundingTxHash,
+          resourceUrl: evidenceContext.resourceUrl,
+          merchantStatus: surfaced.status,
+          paymentProofHeaderName: "X-PAYMENT",
+          paymentProofHeader: input.paymentHeader,
+          protocolReceiptHeaderName: protocolReceiptHeader ? "PAYMENT-RESPONSE" : void 0,
+          protocolReceiptHeader
+        });
+      }
       await this.reportMerchantReceipt(evidenceContext.paymentId, surfaced);
     }
     return {
@@ -2570,11 +2586,11 @@ var HavenClient = class {
         status
       );
     }
-    const readyForMerchantCompletion = status.nextAction === AgentPaymentNextAction.RetryOriginalX402Request || status.kind === "payment_intent" && status.status === "confirmed" && status.phase === AgentPaymentPhase.PaymentConfirmed && status.nextAction === AgentPaymentNextAction.None;
+    const readyForMerchantCompletion = input.noFundingLeg ? status.kind === "payment_intent" && status.status === "submitted" : status.nextAction === AgentPaymentNextAction.RetryOriginalX402Request || status.kind === "payment_intent" && status.status === "confirmed" && status.phase === AgentPaymentPhase.PaymentConfirmed && status.nextAction === AgentPaymentNextAction.None;
     if (!readyForMerchantCompletion) {
       throw new HavenPaymentStateError(status.message, PAYMENT_STATE_STATUS_CODES[status.status] ?? 409, status);
     }
-    if (!status.txHash) {
+    if (!input.noFundingLeg && !status.txHash) {
       throw new HavenApiError(
         `x402 payment ${status.paymentId} is ready for merchant completion but has no Haven transaction hash.`,
         502,