@haven_ai/sdk 0.10.0-alpha.0 → 0.12.0-alpha.0

package/dist/{receipt-q7ez8Zb2.d.cts → receipt-Dy77vCea.d.cts}

@@ -1,4 +1,4 @@
-import { aW as RawPaymentParties } from './types-BKgqzvnk.cjs';
+import { aZ as RawPaymentParties } from './types-CAvsjRKi.cjs';
 
 /**
  * Verifiable payment receipts.
@@ -56,7 +56,7 @@ interface PaymentReceipt {
          * #2960: one party vocabulary for "who paid", additive alongside `account`
          * above (which is `parties.treasury_account` only). Optional: a server
          * from before #2960 emits neither. Ignored by `verifyPaymentReceipt`,
-         * which reads only `authorization`.
+         * which reads only the bundle's `authorization` and `onChain.chainId`.
          */
         parties?: RawPaymentParties;
         chainId: number;
@@ -67,8 +67,9 @@ interface PaymentReceipt {
          * merchant DELIVERED (`ok` / `unusable` / `partial`, plus a bounded
          * note). Additive and OPTIONAL: a server from before #3770 emits
          * neither, and `null` means the agent has not reported. Ignored by
-         * `verifyPaymentReceipt`, which reads only `authorization` — the same
-         * rule `parties` follows. Evidence only: it never changes what the
+         * `verifyPaymentReceipt`, which reads only the bundle's `authorization`
+         * and `onChain.chainId` — the same rule `parties` follows. Evidence
+         * only: it never changes what the
          * payment itself is, and `settled`/amounts are untouched by a report.
          */
         deliveryQuality?: {

package/dist/{receipt-Cg9a5Seq.d.ts → receipt-DyUInpvF.d.ts}

@@ -1,4 +1,4 @@
-import { aW as RawPaymentParties } from './types-BKgqzvnk.js';
+import { aZ as RawPaymentParties } from './types-CAvsjRKi.js';
 
 /**
  * Verifiable payment receipts.
@@ -56,7 +56,7 @@ interface PaymentReceipt {
          * #2960: one party vocabulary for "who paid", additive alongside `account`
          * above (which is `parties.treasury_account` only). Optional: a server
          * from before #2960 emits neither. Ignored by `verifyPaymentReceipt`,
-         * which reads only `authorization`.
+         * which reads only the bundle's `authorization` and `onChain.chainId`.
          */
         parties?: RawPaymentParties;
         chainId: number;
@@ -67,8 +67,9 @@ interface PaymentReceipt {
          * merchant DELIVERED (`ok` / `unusable` / `partial`, plus a bounded
          * note). Additive and OPTIONAL: a server from before #3770 emits
          * neither, and `null` means the agent has not reported. Ignored by
-         * `verifyPaymentReceipt`, which reads only `authorization` — the same
-         * rule `parties` follows. Evidence only: it never changes what the
+         * `verifyPaymentReceipt`, which reads only the bundle's `authorization`
+         * and `onChain.chainId` — the same rule `parties` follows. Evidence
+         * only: it never changes what the
          * payment itself is, and `settled`/amounts are untouched by a report.
          */
         deliveryQuality?: {

package/dist/test-support.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunk6LEXYQ7J_cjs = require('./chunk-6LEXYQ7J.cjs');
-var chunkH37YVYZA_cjs = require('./chunk-H37YVYZA.cjs');
+var chunk4JTLJVBS_cjs = require('./chunk-4JTLJVBS.cjs');
+var chunkZA3NOSO2_cjs = require('./chunk-ZA3NOSO2.cjs');
 var viem = require('viem');
 var ethers = require('ethers');
 
@@ -9,7 +9,7 @@ var ZERO_BYTES32 = `0x${"00".repeat(32)}`;
 var ROOT_AUTHORITY = `0x${"ff".repeat(32)}`;
 var DEFAULT_DELEGATOR = "0x98989898989898989898989898989898989898De";
 var DELEGATION_ARRAY_PARAM = [
-  { type: "tuple[]", components: chunkH37YVYZA_cjs.DELEGATION_TUPLE_COMPONENTS }
+  { type: "tuple[]", components: chunkZA3NOSO2_cjs.DELEGATION_TUPLE_COMPONENTS }
 ];
 var EXECUTE_ABI = [
   {
@@ -85,16 +85,16 @@ function buildBoundRedeemDelegationsCallData(options) {
     10000n
   );
   return viem.encodeFunctionData({
-    abi: chunkH37YVYZA_cjs.REDEEM_DELEGATIONS_ABI,
+    abi: chunkZA3NOSO2_cjs.REDEEM_DELEGATIONS_ABI,
     functionName: "redeemDelegations",
-    args: [[permissionContext], [chunkH37YVYZA_cjs.SINGLE_DEFAULT_MODE], [executionCallData]]
+    args: [[permissionContext], [chunkZA3NOSO2_cjs.SINGLE_DEFAULT_MODE], [executionCallData]]
   });
 }
 function buildEmptyPermissionContextRedemption(selfCallCallData) {
   return viem.encodeFunctionData({
-    abi: chunkH37YVYZA_cjs.REDEEM_DELEGATIONS_ABI,
+    abi: chunkZA3NOSO2_cjs.REDEEM_DELEGATIONS_ABI,
     functionName: "redeemDelegations",
-    args: [[buildEmptyPermissionContext()], [chunkH37YVYZA_cjs.SINGLE_DEFAULT_MODE], [selfCallCallData]]
+    args: [[buildEmptyPermissionContext()], [chunkZA3NOSO2_cjs.SINGLE_DEFAULT_MODE], [selfCallCallData]]
   });
 }
 function buildExecuteCallData(target, value, innerCallData) {
@@ -106,20 +106,20 @@ function buildExecuteCallData(target, value, innerCallData) {
 }
 function buildBoundDirectUserOp(options) {
   const chainId = options.chainId ?? 84532;
-  const sender = options.sender ?? chunkH37YVYZA_cjs.deriveDelegateAccountAddress(options.delegate);
+  const sender = options.sender ?? chunkZA3NOSO2_cjs.deriveDelegateAccountAddress(options.delegate);
   const callData = options.callData ?? buildExecuteCallData(
-    options.target ?? chunkH37YVYZA_cjs.DELEGATION_MANAGER,
+    options.target ?? chunkZA3NOSO2_cjs.DELEGATION_MANAGER,
     options.value ?? 0n,
     buildBoundRedeemDelegationsCallData({ delegate: sender, delegator: options.delegator })
   );
   const typedData = {
     domain: {
-      name: chunkH37YVYZA_cjs.HYBRID_DELEGATOR_DOMAIN_NAME,
-      version: chunkH37YVYZA_cjs.HYBRID_DELEGATOR_DOMAIN_VERSION,
+      name: chunkZA3NOSO2_cjs.HYBRID_DELEGATOR_DOMAIN_NAME,
+      version: chunkZA3NOSO2_cjs.HYBRID_DELEGATOR_DOMAIN_VERSION,
       chainId,
       verifyingContract: sender
     },
-    types: { PackedUserOperation: chunkH37YVYZA_cjs.PACKED_USER_OPERATION_FIELDS.map((field) => ({ ...field })) },
+    types: { PackedUserOperation: chunkZA3NOSO2_cjs.PACKED_USER_OPERATION_FIELDS.map((field) => ({ ...field })) },
     primaryType: "PackedUserOperation",
     message: {
       sender,
@@ -130,10 +130,10 @@ function buildBoundDirectUserOp(options) {
       preVerificationGas: "0",
       gasFees: ZERO_BYTES32,
       paymasterAndData: "0x",
-      entryPoint: chunkH37YVYZA_cjs.ENTRY_POINT_V07
+      entryPoint: chunkZA3NOSO2_cjs.ENTRY_POINT_V07
     }
   };
-  const payloadHash = chunkH37YVYZA_cjs.packedUserOperationHash(typedData);
+  const payloadHash = chunkZA3NOSO2_cjs.packedUserOperationHash(typedData);
   return { typedData, payloadHash, sender };
 }
 function buildSelfCallCallData(sender) {
@@ -151,7 +151,7 @@ function rebuildDirectUserOpForSender(fixtureTypedData, newSender) {
   const originalCallData = fixtureTypedData.message.callData;
   const { args: executeArgs } = viem.decodeFunctionData({ abi: EXECUTE_ABI, data: originalCallData });
   const execution = executeArgs[0];
-  const { args: redeemArgs } = viem.decodeFunctionData({ abi: chunkH37YVYZA_cjs.REDEEM_DELEGATIONS_ABI, data: execution.callData });
+  const { args: redeemArgs } = viem.decodeFunctionData({ abi: chunkZA3NOSO2_cjs.REDEEM_DELEGATIONS_ABI, data: execution.callData });
   const [permissionContexts, modes, executionCallDatas] = redeemArgs;
   const [delegations] = viem.decodeAbiParameters(DELEGATION_ARRAY_PARAM, permissionContexts[0]);
   const adjustedDelegations = delegations.map(
@@ -159,7 +159,7 @@ function rebuildDirectUserOpForSender(fixtureTypedData, newSender) {
   );
   const adjustedPermissionContext = viem.encodeAbiParameters(DELEGATION_ARRAY_PARAM, [adjustedDelegations]);
   const adjustedRedeemCallData = viem.encodeFunctionData({
-    abi: chunkH37YVYZA_cjs.REDEEM_DELEGATIONS_ABI,
+    abi: chunkZA3NOSO2_cjs.REDEEM_DELEGATIONS_ABI,
     functionName: "redeemDelegations",
     args: [[adjustedPermissionContext], modes, executionCallDatas]
   });
@@ -173,13 +173,13 @@ function rebuildDirectUserOpForSender(fixtureTypedData, newSender) {
     domain: { ...fixtureTypedData.domain, verifyingContract: newSender },
     message: { ...fixtureTypedData.message, sender: newSender, callData: adjustedCallData }
   };
-  const payloadHash = chunkH37YVYZA_cjs.packedUserOperationHash(typedData);
+  const payloadHash = chunkZA3NOSO2_cjs.packedUserOperationHash(typedData);
   return { typedData, payloadHash };
 }
 function buildFundingLegUserOp(options) {
-  const sender = chunkH37YVYZA_cjs.deriveDelegateAccountAddress(options.delegate);
+  const sender = chunkZA3NOSO2_cjs.deriveDelegateAccountAddress(options.delegate);
   const callData = buildExecuteCallData(
-    chunkH37YVYZA_cjs.DELEGATION_MANAGER,
+    chunkZA3NOSO2_cjs.DELEGATION_MANAGER,
     0n,
     buildBoundRedeemDelegationsCallData({
       delegate: sender,
@@ -212,7 +212,7 @@ function delegationDigest(signHash, chainId) {
         viem.keccak256(viem.toBytes("DelegationManager")),
         viem.keccak256(viem.toBytes("1")),
         BigInt(chainId),
-        chunkH37YVYZA_cjs.DELEGATION_MANAGER
+        chunkZA3NOSO2_cjs.DELEGATION_MANAGER
       ]
     )
   );
@@ -224,7 +224,7 @@ function signedErc7710Receipt(options = {}) {
   const delegate = new ethers.Wallet(options.delegateKey ?? RECEIPT_DELEGATE_KEY);
   const signature = delegate.signingKey.sign(delegationDigest(signHash, chainId)).serialized;
   return {
-    version: chunk6LEXYQ7J_cjs.RECEIPT_VERSION,
+    version: chunk4JTLJVBS_cjs.RECEIPT_VERSION,
     paymentId: options.paymentId ?? "pay_3723",
     payment: {
       token: "USDC",

package/dist/test-support.d.cts

@@ -1,6 +1,6 @@
 import { Address, Hex } from 'viem';
-import { P as PaymentReceipt } from './receipt-q7ez8Zb2.cjs';
-import './types-BKgqzvnk.cjs';
+import { P as PaymentReceipt } from './receipt-Dy77vCea.cjs';
+import './types-CAvsjRKi.cjs';
 
 /**
  * #3272 — a real-shaped, BOUND direct-payment `PackedUserOperation` for

package/dist/test-support.d.ts

@@ -1,6 +1,6 @@
 import { Address, Hex } from 'viem';
-import { P as PaymentReceipt } from './receipt-Cg9a5Seq.js';
-import './types-BKgqzvnk.js';
+import { P as PaymentReceipt } from './receipt-DyUInpvF.js';
+import './types-CAvsjRKi.js';
 
 /**
  * #3272 — a real-shaped, BOUND direct-payment `PackedUserOperation` for

package/dist/test-support.js

@@ -1,5 +1,5 @@
-import { RECEIPT_VERSION } from './chunk-EWTHDEIW.js';
-import { DELEGATION_TUPLE_COMPONENTS, SINGLE_DEFAULT_MODE, REDEEM_DELEGATIONS_ABI, deriveDelegateAccountAddress, DELEGATION_MANAGER, PACKED_USER_OPERATION_FIELDS, packedUserOperationHash, ENTRY_POINT_V07, HYBRID_DELEGATOR_DOMAIN_VERSION, HYBRID_DELEGATOR_DOMAIN_NAME } from './chunk-TD2PHUYP.js';
+import { RECEIPT_VERSION } from './chunk-WFTGZS24.js';
+import { DELEGATION_TUPLE_COMPONENTS, SINGLE_DEFAULT_MODE, REDEEM_DELEGATIONS_ABI, deriveDelegateAccountAddress, DELEGATION_MANAGER, PACKED_USER_OPERATION_FIELDS, packedUserOperationHash, ENTRY_POINT_V07, HYBRID_DELEGATOR_DOMAIN_VERSION, HYBRID_DELEGATOR_DOMAIN_NAME } from './chunk-UPEDQLAL.js';
 import { keccak256, toBytes, encodeAbiParameters, encodePacked, encodeFunctionData, decodeFunctionData, decodeAbiParameters, hashTypedData, concatHex } from 'viem';
 import { Wallet } from 'ethers';
 

package/dist/{types-BKgqzvnk.d.ts → types-CAvsjRKi.d.cts}

@@ -14,9 +14,14 @@
  *    it is a string check. A public host name whose DNS ANSWER points at
  *    private space is NOT blocked here — that needs the resolution-time
  *    checks parked in #3742–#3744 (owner-accepted residual, 2026-10-07).
- *  - Without `merchantEgress`, NOTHING in the SDK changes: no `redirect:
- *    'manual'`, no body capping, no extra refusals. SDK, local-MCP and
- *    embedder callers keep today's behaviour byte for byte.
+ *  - Without `merchantEgress` there is no URL check, no body capping and no
+ *    per-use budget. Redirects are still followed by the transport (#4257),
+ *    under the platform's rules (20 hops, the Fetch spec's method/body
+ *    rewrite), plus the one rule both paths share: a hop to another origin
+ *    carries only the cross-origin header allow-list. A paid request (the
+ *    delivery, or a body with an x402 payment in `_meta`) is never re-sent
+ *    to another origin by a redirect that keeps the body (307/308, or 301/302
+ *    on a method other than POST); any other request follows as before.
  *  - The policy is network policy, not spend control. It never gates a
  *    payment's authority — the on-chain allowance stays the real control
  *    (CASP: off-chain policy is never the spend control).
@@ -48,7 +53,10 @@ interface MerchantEgressPolicy {
     /**
      * How many GET redirects may be followed; EVERY hop is re-asserted against
      * `assertUrl` before it connects. A redirect on any other method is
-     * refused outright. `undefined` = no redirect following.
+     * refused outright. A hop to a different origin carries only the
+     * transport's cross-origin header allow-list (#4244): credentials and other
+     * caller headers stay with the origin they were sent to.
+     * `undefined` = no redirect following.
      */
     maxGetRedirects?: number;
     /** Per-use timeouts (ms). The effective deadline is `min(this, merchantTimeout)`. */
@@ -59,7 +67,14 @@ interface MerchantEgressPolicy {
      */
     responseByteCaps?: Partial<Record<MerchantEgressUse, number>>;
 }
-type MerchantEgressRefusalReason = 'url_not_allowed' | 'redirect_on_non_get' | 'redirect_missing_location' | 'redirect_invalid_location' | 'redirect_budget_exceeded';
+type MerchantEgressRefusalReason = 'url_not_allowed' | 'redirect_on_non_get' | 'redirect_missing_location' | 'redirect_invalid_location' | 'redirect_budget_exceeded'
+/**
+ * #4257: a redirect that keeps the body (307/308, or 301/302 on a method
+ * other than POST) would re-send it to another origin. Under a
+ * policy (GET only) this is unreachable; without one it fires for a paid
+ * delivery, or a body carrying an x402 payment in `_meta`.
+ */
+ | 'redirect_cross_origin_body';
 declare const MERCHANT_EGRESS_REFUSED_CODE = "MERCHANT_EGRESS_REFUSED";
 /**
  * The policy refused a merchant request. `beforeRequest` is true when the
@@ -73,7 +88,27 @@ declare class MerchantEgressRefusedError extends HavenError {
     readonly url: string;
     readonly refusal: MerchantEgressRefusalReason;
     readonly beforeRequest: boolean;
-    constructor(message: string, url: string, refusal: MerchantEgressRefusalReason, beforeRequest: boolean);
+    /** #4257: the redirect status that was not followed, when a redirect was refused. */
+    readonly redirectStatus?: number;
+    /**
+     * #4257: set only when `url` IS the redirect target (a cross-origin body
+     * re-send, a spent hop budget, a hop `assertUrl` refused). A refusal that
+     * stopped at the answering URL itself (a non-GET redirect, a missing or
+     * unresolvable Location) leaves it unset, and `url` is that answering URL.
+     */
+    readonly redirectTarget?: string;
+    /**
+     * #4257: set when the refusal interrupted a PAID delivery and the local
+     * completion has re-thrown it with the payment it belongs to — the funded,
+     * undelivered state, never "nothing happened".
+     */
+    readonly settlementScheme?: 'eip3009' | 'erc7710';
+    constructor(message: string, url: string, refusal: MerchantEgressRefusalReason, beforeRequest: boolean, extra?: {
+        redirectStatus?: number;
+        redirectTarget?: string;
+        paymentId?: string;
+        settlementScheme?: 'eip3009' | 'erc7710';
+    });
 }
 declare const MERCHANT_EGRESS_RESPONSE_CAP_CODE = "MERCHANT_EGRESS_RESPONSE_CAP";
 /**
@@ -752,6 +787,14 @@ interface HavenAllowance {
      * compared alone — they do not add up. Never a balance figure.
      */
     fundsCoverRemaining: boolean | null;
+    /**
+     * #4355: when THIS budget next refills — the end of its current period
+     * (ISO 8601), or its start for a budget not yet started. `null` when it
+     * never refills again (it ends first), and on a backend that predates the
+     * field. With a remaining of 0 it says the budget is spent for this period
+     * and when it comes back — not that nobody approved one.
+     */
+    nextRefillAt: string | null;
     /**
      * #3518: this budget's SCOPE, so an agent holding more than one budget
      * for a token can name the merchant-locked one before paying. The
@@ -806,6 +849,14 @@ interface HavenAllowanceSummary {
     delegateAddress: string;
     chainId: number;
     allowances: HavenAllowance[];
+    /**
+     * #4352 (additive, decision 5): when the agent's only budgets for this
+     * chain have ENDED, the latest ended budget's expiry (ISO 8601) — read by
+     * the same narrow expired-row query the refusal answers use. `null` when no
+     * expired row exists; the field NEVER reports a live budget. `null` on a
+     * backend that predates the field.
+     */
+    budgetEndedAt: string | null;
     /** #3772: see {@link HavenAgent.supersededBy}. */
     supersededBy: HavenAgentSupersession | null;
 }
@@ -1005,6 +1056,8 @@ interface HavenAgentAllowanceSummary {
      * read: any non-boolean wire value maps to `null`, never `undefined`.
      */
     fundsCoverRemaining: boolean | null;
+    /** #4355: the {@link HavenAllowance.nextRefillAt} projection. */
+    nextRefillAt: string | null;
 }
 /**
  * One-shot "am I ready?" bootstrap: identity + live spend authority + a
@@ -1028,6 +1081,27 @@ interface HavenAgentSummary extends HavenAgent {
      * renders from `HAVEN_CONNECTOR_CHANNEL` — see `connector-channel.ts`).
      */
     spend_authority_readiness: HavenAgentReadiness;
+    /**
+     * #4355 (additive; the readiness values are unchanged — #4349 decision 5):
+     * set only when readiness is `needs_approval` BECAUSE every live budget is
+     * spent for its period — `allowances[]` has rows, all at remaining 0. It is
+     * the earliest {@link HavenAgentAllowanceSummary.nextRefillAt} among them:
+     * wait until then, or ask the owner to raise the budget. `null` otherwise:
+     * ready, revoked, no budget approved (`allowances[]` empty), or a spent
+     * budget that ends before it would refill.
+     */
+    budgetRefillsAt: string | null;
+    /**
+     * #4352 (additive; the readiness values are unchanged — #4349 decision 5):
+     * set only when readiness is `needs_approval` BECAUSE the agent's only
+     * budget(s) have ENDED — `allowances[]` is empty and the server's
+     * expired-row read found one. The ended budget's expiry (ISO 8601): waiting
+     * will not help; ask the owner to set a new one. `null` otherwise — ready,
+     * revoked, no budget approved at all, live rows present (whether spendable
+     * or all spent — the latter is {@link HavenAgentSummary.budgetRefillsAt}'s
+     * case), or a backend that predates the field.
+     */
+    budgetEndedAt: string | null;
     allowances: HavenAgentAllowanceSummary[];
     /**
      * #3329: open, unexpired task budgets — a derived VIEW, same discipline as
@@ -1107,9 +1181,9 @@ interface HavenSubBudgetCloseSignData {
 /** #3506: `POST /sub-budgets/:id/close`. */
 interface CloseSubBudgetResult {
     subBudget: HavenSubBudget;
-    /** `closed` on a trivial close (never signed, or already expired); absent when a close signature is pending. */
+    /** `closed` on a trivial close (never signed, or `open` and already expired) or when the chain already shows it disabled; absent when a close signature is pending. */
     status?: 'closed';
-    /** Present only when the close needed a signature (a live child). */
+    /** Present only when the close needed a signature (a live child, or any `closing` row — #3923). */
     signData?: HavenSubBudgetCloseSignData;
     nextAction?: string;
 }
@@ -1145,6 +1219,8 @@ interface HavenTaskBudget {
     status: HavenTaskBudgetStatus;
     expiresAt: number;
     isExpired: boolean;
+    /** #3922: camelCase `is_live`; absent when the backend predates it (presence preserved). */
+    isLive?: boolean;
     createdAt: string;
     openedAt: string | null;
     closedAt: string | null;
@@ -1352,6 +1428,23 @@ interface HavenPaymentReceipt {
     paymentId: string;
     paymentIntentId?: string | null;
     approvalRequestId?: string | null;
+    /**
+     * #4469: which settlement branch moved the money (`eip3009` | `erc7710`),
+     * from the intent (#946). The receipts wire declares this as raw text with
+     * no enum (`packages/backend/src/openapi/spec.ts`), so it is typed
+     * `string | null` here rather than narrowed: a value this SDK does not know
+     * is still the backend's record, and narrowing it to `null` would erase it.
+     * Absent on an older backend; `null` when the backend states no scheme
+     * (legacy-rail receipts).
+     */
+    settlementScheme?: string | null;
+    /**
+     * #4469: the budget delegation that METERED this payment (#3518), uniform
+     * across schemes. `string | null` on receipts — the backend sends
+     * `?? null` — unlike {@link PaymentStatusResult.budgetDelegationHash}, which
+     * is `string` and absent when unknown. Absent on an older backend.
+     */
+    budgetDelegationHash?: string | null;
     /**
      * #3134: the payment protocol this receipt settled on — one of the
      * evidence-eligible rails (`x402`, `mpp_demo`, `mpp_crypto`, `spt`) — under the
@@ -1427,6 +1520,23 @@ interface HavenPaymentReceipt {
      */
     protocolReceiptPayload?: Record<string, unknown> | null;
     merchantStatus: number | null;
+    /**
+     * #4469: the paying agent's own delivery verdict (#3770), when it reported
+     * one — `ok` | `unusable` | `partial`. Evidence only: it never gates
+     * anything and the payment itself is unchanged. Absent on an older backend;
+     * `null` when the backend states "not reported".
+     */
+    deliveryQuality?: 'ok' | 'unusable' | 'partial' | null;
+    /** #4469: the agent's optional note (max 2000 chars) saying what was wrong. Absent on an older backend. */
+    deliveryNote?: string | null;
+    /** #4469: when the agent reported the verdict (ISO 8601). Absent on an older backend. */
+    deliveryReportedAt?: string | null;
+    /**
+     * #4469: the NON-SECRET pointer to a delivered good (#3778) — merchant,
+     * product, value, order id. Never a redemption code or other credential:
+     * those are refused at write. Absent on an older backend.
+     */
+    deliveryReference?: string | null;
     confirmedAt: string | null;
     createdAt: string;
     updatedAt: string;
@@ -1793,6 +1903,34 @@ declare const AgentPaymentWarningCode: {
      * settlement can no longer land at all.
      */
     readonly SettlementUnconfirmed: "SETTLEMENT_UNCONFIRMED";
+    /**
+     * #3967: the quote-time budget pre-check decided the quoted amount does NOT
+     * fit the agent's remaining delegation budget — the same server-side compare
+     * the payment path runs before funding. Travels beside
+     * `budget_check.sufficient: false` and, on `haven_quote_x402`,
+     * `safe_to_continue: false` with no prefilled cap. The on-chain policy
+     * remains the actual gate either way.
+     */
+    readonly QuoteExceedsRemainingBudget: "QUOTE_EXCEEDS_REMAINING_BUDGET";
+    /**
+     * #4458: the agent's only budget for the token has ENDED — the quote-time
+     * pre-check answered the typed 403 `delegation_expired`, not an over-budget
+     * compare. Travels beside `budget_check.sufficient: false` and, on
+     * `haven_quote_x402`, `safe_to_continue: false` with no prefilled cap. The
+     * remedy is the owner setting a NEW budget: waiting for a period to reset
+     * cannot help, which is why this is its own code rather than
+     * {@link AgentPaymentWarningCode.QuoteExceedsRemainingBudget}. Additive: an
+     * older backend never emits it, and the on-chain policy remains the actual
+     * gate either way.
+     */
+    readonly QuoteBudgetEnded: "QUOTE_BUDGET_ENDED";
+    /**
+     * #3967: the MERCHANT reported a denial on one of its x402 payment options —
+     * a known denial key (starting with `issuanceDenied`) in `accepts[].extra`.
+     * Strictly informational: it flips neither `safe_to_continue` nor
+     * `expected_settleable`; the agent should surface it to the user.
+     */
+    readonly MerchantReportedDenial: "MERCHANT_REPORTED_DENIAL";
 };
 type AgentPaymentWarningCode = (typeof AgentPaymentWarningCode)[keyof typeof AgentPaymentWarningCode];
 interface AgentPaymentWarning {
@@ -2053,9 +2191,11 @@ interface HavenCatalogEntry {
      * (the operator vouches for the listing; the catalog refresh probe still
      * checks the endpoint, see `verifiedPayable`). `ingestion` = submitted
      * through the Verified Payable Directory and passed domain-ownership proof
-     * plus the read-only quote probe.
+     * plus the read-only quote probe. `bazaar` = written by the x402 Bazaar
+     * discovery cron (#4245): seller-chosen name and description, no operator
+     * review, no ownership proof.
      */
-    source: 'operator' | 'ingestion';
+    source: 'operator' | 'ingestion' | 'bazaar';
     /** True only for `ingestion` entries — the one ownership claim. See the epic's trust claim (never merchant honesty or quality). */
     domainVerified: boolean;
     /**
@@ -2117,9 +2257,66 @@ declare class HavenError extends Error {
     readonly paymentId?: string | undefined;
     constructor(message: string, code: string, statusCode?: number | undefined, paymentId?: string | undefined);
 }
+/**
+ * #4470: why a `HavenApiError` happened, where its status alone cannot say.
+ *
+ * - `no_answer` — the transport got no usable answer: the request timed out
+ *   (status 408), `fetch` threw, or the body was not JSON (status 0). Whether
+ *   the call took effect is unknown, so a `GET` may be retried and a `POST`
+ *   must not be; `method` says which it was.
+ * - `deterministic` — the SDK refused an answer it cannot use (a missing
+ *   field, the wrong shape). Repeating the same call gets the same answer,
+ *   whatever the status says.
+ *
+ * Absent on every other error, which keeps the status rule. A readonly field
+ * rather than a subclass, so `name`, `code` and `statusCode` stay what
+ * consumers already match on.
+ */
+type HavenApiFailureCause = {
+    readonly kind: 'no_answer';
+    readonly method: 'GET' | 'POST';
+} | {
+    readonly kind: 'deterministic';
+};
 declare class HavenApiError extends HavenError {
     readonly body?: unknown | undefined;
-    constructor(message: string, statusCode: number, body?: unknown | undefined, paymentId?: string);
+    readonly failureCause?: HavenApiFailureCause | undefined;
+    constructor(message: string, statusCode: number, body?: unknown | undefined, paymentId?: string, failureCause?: HavenApiFailureCause | undefined);
+    /**
+     * #4470: an error a retry cannot change. The census in
+     * `haven-api-error-census.test.ts` requires every literal 5xx site to use
+     * this or be allowlisted there with a reason.
+     */
+    static deterministic(message: string, statusCode: number, body?: unknown, paymentId?: string): HavenApiError;
+}
+/**
+ * #4470: the funding transaction's confirmation could not be read — ethers'
+ * `waitForTransaction` rejected (its `TIMEOUT`, or an RPC failure). Haven had
+ * already submitted the funding leg, so funds may have reached the delegate:
+ * the answer is check-status, never "tell the user it failed" and never a new
+ * payment. The merchant was not called.
+ *
+ * Deliberately carries no `failureCause`: it is not a transport non-answer
+ * (no Haven request went unanswered) and not deterministic (a later read may
+ * see the receipt). Callers answer the class itself — the hosted delivery
+ * step does in `ensureFundingConfirmedOrRefuse`; unwrapped, its 504 reads
+ * "re-call once", which re-runs the same wait.
+ */
+declare class FundingConfirmationUnknownError extends HavenApiError {
+    readonly txHash: string;
+    readonly chainId: number;
+    readonly fundingErrorCode: "funding_confirmation_unknown";
+    constructor(txHash: string, chainId: number, reason: string);
+}
+/**
+ * #4470: the funding transaction was mined and reverted, so nothing reached
+ * the delegate. Repeating the wait gets the same receipt.
+ */
+declare class FundingRevertedError extends HavenApiError {
+    readonly txHash: string;
+    readonly chainId: number;
+    readonly fundingErrorCode: "funding_reverted";
+    constructor(txHash: string, chainId: number);
 }
 /**
  * #1300: quoteX402 hit a URL that answered something other than 402 — the
@@ -2325,4 +2522,4 @@ declare class HavenTimeoutError extends HavenError {
     constructor(paymentId: string);
 }
 
-export { AgentPaymentNextActionSchema as $, type AgentPaymentWarning as A, type BudgetPrecheckResult as B, type CloseTaskBudgetResult as C, type X402ResumeState as D, type X402McpTransport as E, type X402MerchantCallContext as F, type X402IntentByKey as G, type HavenClientConfig as H, HavenError as I, AGENT_PAYMENT_FAILURE_CODE_VALUES as J, AGENT_PAYMENT_NEXT_ACTION_VALUES as K, AGENT_PAYMENT_PHASE_VALUES as L, type MerchantEgressPolicy as M, AGENT_PAYMENT_RAIL_VALUES as N, type OpenTaskBudgetResult as O, type PaymentRequest as P, type AgentNextStep as Q, type ResumeAuthorizedX402Input as R, type SweepResult as S, type TaskBudgetSignContext as T, type AgentPaymentEnumSchema as U, AgentPaymentFailureCode as V, AgentPaymentFailureCodeDescriptions as W, type X402PaymentRequired as X, AgentPaymentFailureCodeSchema as Y, AgentPaymentNextAction as Z, AgentPaymentNextActionDescriptions as _, type PaymentResult as a, AgentPaymentPhase as a0, AgentPaymentPhaseDescriptions as a1, AgentPaymentPhaseSchema as a2, AgentPaymentRail as a3, AgentPaymentRailDescriptions as a4, AgentPaymentRailSchema as a5, type AgentPaymentSummary as a6, AgentPaymentWarningCode as a7, type AgentPurchaseSummary as a8, type CatalogSubmissionAccepted as a9, type PaymentFee as aA, type PaymentNextAction as aB, type PaymentPhase as aC, type PaymentStatus as aD, SIGNER_UPDATE_FALLBACK as aE, SignerRefusalCode as aF, type SweepConfirmation as aG, type SweepEntry as aH, X402AlreadySettledError as aI, X402Erc7710AlreadySettledError as aJ, type X402ExpectedAuth as aK, type X402ExpectedContext as aL, type X402PaymentOption as aM, type X402RequestSnapshot as aN, X402TaskBudgetMismatchError as aO, X402UnexpectedStatusError as aP, assertPublicHttpsMerchantUrl as aQ, isPublicHttpsMerchantUrl as aR, publicHttpsMerchantUrlRefusal as aS, readBodyCapped as aT, signerUpdateFallback as aU, strictMerchantEgressPolicy as aV, type RawPaymentParties as aW, DEFAULT_CONFIRMATION_TIMEOUT_MS as aa, HOSTED_DISCOVERY_TIMEOUT_MS as ab, HOSTED_EGRESS_TIMEOUTS as ac, HOSTED_MAX_GET_REDIRECTS as ad, HOSTED_RESPONSE_BYTE_CAPS as ae, type HavenAgentAllowanceSummary as af, type HavenAgentReadiness as ag, type HavenAgentSupersession as ah, type HavenAllowance as ai, HavenApiError as aj, type HavenCatalogMerchant as ak, type HavenListScope as al, HavenPaymentStateError as am, HavenSigningError as an, HavenTimeoutError as ao, HavenUnsupportedSignerVersionError as ap, HavenZeroSettlementHashError as aq, MERCHANT_EGRESS_REFUSED_CODE as ar, MERCHANT_EGRESS_RESPONSE_CAP_CODE as as, type MachinePaymentRail as at, type MerchantEgressRefusalReason as au, MerchantEgressRefusedError as av, MerchantEgressResponseCapError as aw, type MerchantEgressTimeouts as ax, type MerchantEgressUse as ay, MerchantTimeoutError as az, type PaymentIntent as b, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type HavenAllowanceSummary as h, type HavenBalanceCoverage as i, type PostPurchaseAllowanceSummary as j, type HavenCatalogEntry as k, type HavenCatalogSubmission as l, type HavenPaymentReceipt as m, type HavenPaymentReceiptsPage as n, type HavenTaskBudget as o, type SubmitTaskBudgetResult as p, type SubmitSubBudgetResult as q, type HavenPendingSubBudgetSignature as r, type CloseSubBudgetResult as s, type PaymentResumeState as t, type X402Receipt as u, type X402Quote as v, type X402Erc7710Settlement as w, type X402McpCallContext as x, type SignData as y, type ResumeX402PaymentInput as z };
+export { AgentPaymentNextActionSchema as $, type AgentPaymentWarning as A, type BudgetPrecheckResult as B, type CloseTaskBudgetResult as C, type X402ResumeState as D, type X402McpTransport as E, type X402MerchantCallContext as F, type X402IntentByKey as G, type HavenClientConfig as H, HavenError as I, AGENT_PAYMENT_FAILURE_CODE_VALUES as J, AGENT_PAYMENT_NEXT_ACTION_VALUES as K, AGENT_PAYMENT_PHASE_VALUES as L, type MerchantEgressPolicy as M, AGENT_PAYMENT_RAIL_VALUES as N, type OpenTaskBudgetResult as O, type PaymentRequest as P, type AgentNextStep as Q, type ResumeAuthorizedX402Input as R, type SweepResult as S, type TaskBudgetSignContext as T, type AgentPaymentEnumSchema as U, AgentPaymentFailureCode as V, AgentPaymentFailureCodeDescriptions as W, type X402PaymentRequired as X, AgentPaymentFailureCodeSchema as Y, AgentPaymentNextAction as Z, AgentPaymentNextActionDescriptions as _, type PaymentResult as a, AgentPaymentPhase as a0, AgentPaymentPhaseDescriptions as a1, AgentPaymentPhaseSchema as a2, AgentPaymentRail as a3, AgentPaymentRailDescriptions as a4, AgentPaymentRailSchema as a5, type AgentPaymentSummary as a6, AgentPaymentWarningCode as a7, type AgentPurchaseSummary as a8, type CatalogSubmissionAccepted as a9, type MerchantEgressTimeouts as aA, type MerchantEgressUse as aB, MerchantTimeoutError as aC, type PaymentFee as aD, type PaymentNextAction as aE, type PaymentPhase as aF, type PaymentStatus as aG, SIGNER_UPDATE_FALLBACK as aH, SignerRefusalCode as aI, type SweepConfirmation as aJ, type SweepEntry as aK, X402AlreadySettledError as aL, X402Erc7710AlreadySettledError as aM, type X402ExpectedAuth as aN, type X402ExpectedContext as aO, type X402PaymentOption as aP, type X402RequestSnapshot as aQ, X402TaskBudgetMismatchError as aR, X402UnexpectedStatusError as aS, assertPublicHttpsMerchantUrl as aT, isPublicHttpsMerchantUrl as aU, publicHttpsMerchantUrlRefusal as aV, readBodyCapped as aW, signerUpdateFallback as aX, strictMerchantEgressPolicy as aY, type RawPaymentParties as aZ, DEFAULT_CONFIRMATION_TIMEOUT_MS as aa, FundingConfirmationUnknownError as ab, FundingRevertedError as ac, HOSTED_DISCOVERY_TIMEOUT_MS as ad, HOSTED_EGRESS_TIMEOUTS as ae, HOSTED_MAX_GET_REDIRECTS as af, HOSTED_RESPONSE_BYTE_CAPS as ag, type HavenAgentAllowanceSummary as ah, type HavenAgentReadiness as ai, type HavenAgentSupersession as aj, type HavenAllowance as ak, HavenApiError as al, type HavenApiFailureCause as am, type HavenCatalogMerchant as an, type HavenListScope as ao, HavenPaymentStateError as ap, HavenSigningError as aq, HavenTimeoutError as ar, HavenUnsupportedSignerVersionError as as, HavenZeroSettlementHashError as at, MERCHANT_EGRESS_REFUSED_CODE as au, MERCHANT_EGRESS_RESPONSE_CAP_CODE as av, type MachinePaymentRail as aw, type MerchantEgressRefusalReason as ax, MerchantEgressRefusedError as ay, MerchantEgressResponseCapError as az, type PaymentIntent as b, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type HavenAllowanceSummary as h, type HavenBalanceCoverage as i, type PostPurchaseAllowanceSummary as j, type HavenCatalogEntry as k, type HavenCatalogSubmission as l, type HavenPaymentReceipt as m, type HavenPaymentReceiptsPage as n, type HavenTaskBudget as o, type SubmitTaskBudgetResult as p, type SubmitSubBudgetResult as q, type HavenPendingSubBudgetSignature as r, type CloseSubBudgetResult as s, type PaymentResumeState as t, type X402Receipt as u, type X402Quote as v, type X402Erc7710Settlement as w, type X402McpCallContext as x, type SignData as y, type ResumeX402PaymentInput as z };