@haven_ai/sdk 0.10.0-alpha.0 → 0.12.0-alpha.0

package/dist/index.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunk22FJ4JQO_cjs = require('./chunk-22FJ4JQO.cjs');
-var chunk6LEXYQ7J_cjs = require('./chunk-6LEXYQ7J.cjs');
-var chunkH37YVYZA_cjs = require('./chunk-H37YVYZA.cjs');
+var chunkV2ODMLDD_cjs = require('./chunk-V2ODMLDD.cjs');
+var chunk4JTLJVBS_cjs = require('./chunk-4JTLJVBS.cjs');
+var chunkZA3NOSO2_cjs = require('./chunk-ZA3NOSO2.cjs');
 var viem = require('viem');
 var ethers = require('ethers');
 var async_hooks = require('async_hooks');
@@ -15,7 +15,7 @@ function signHash(privateKey, hash) {
     const sig = signingKey.sign(hash);
     return sig.serialized;
   } catch (err) {
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -31,7 +31,7 @@ async function signTypedDataVerbatim(privateKey, typedData, label) {
       typedData.message
     );
   } catch (err) {
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `Failed to sign ${label}: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -46,7 +46,7 @@ function addressFromKey(privateKey) {
   try {
     return new ethers.ethers.Wallet(privateKey).address;
   } catch (err) {
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `Invalid private key: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -62,7 +62,7 @@ function verifySignature(hash, signature, expectedAddress) {
 var DEFAULT_BASE_URL = "http://localhost:3001";
 var DEFAULT_REQUEST_TIMEOUT = 3e4;
 function withoutClientHeader(headers) {
-  const target = chunk22FJ4JQO_cjs.HAVEN_CLIENT_HEADER.toLowerCase();
+  const target = chunkV2ODMLDD_cjs.HAVEN_CLIENT_HEADER.toLowerCase();
   return Object.fromEntries(Object.entries(headers).filter(([name]) => name.toLowerCase() !== target));
 }
 var HavenApiTransport = class {
@@ -78,7 +78,7 @@ var HavenApiTransport = class {
     this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
     this.requestTimeout = config.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT;
     this.defaultHeaders = { ...config.defaultHeaders ?? {} };
-    this.clientIdentity = config.clientIdentity ?? chunk22FJ4JQO_cjs.SDK_CLIENT_IDENTITY;
+    this.clientIdentity = config.clientIdentity ?? chunkV2ODMLDD_cjs.SDK_CLIENT_IDENTITY;
   }
   /**
    * The newest `client_update` the backend sent (#3303): inside a
@@ -91,7 +91,7 @@ var HavenApiTransport = class {
   }
   recordClientUpdate(data) {
     if (data === null || typeof data !== "object" || Array.isArray(data)) return;
-    const hint = chunk22FJ4JQO_cjs.readClientUpdate(data.client_update);
+    const hint = chunkV2ODMLDD_cjs.readClientUpdate(data.client_update);
     if (!hint) return;
     this.lastClientUpdate = hint;
     const store = this.requestContext.getStore();
@@ -124,7 +124,7 @@ var HavenApiTransport = class {
           // JOIN `x-haven-client` and `X-Haven-Client` into one unparseable
           // value), so neither `defaultHeaders` nor a dispatch context can
           // misname the client; `clientIdentity` is the one way to set it.
-          [chunk22FJ4JQO_cjs.HAVEN_CLIENT_HEADER]: this.clientIdentity
+          [chunkV2ODMLDD_cjs.HAVEN_CLIENT_HEADER]: this.clientIdentity
         },
         body: body ? JSON.stringify(body) : void 0,
         signal: controller.signal
@@ -137,17 +137,21 @@ var HavenApiTransport = class {
         const rawDetails = record.details ?? record.detail;
         const detailsText = typeof rawDetails === "string" ? rawDetails : rawDetails != null ? JSON.stringify(rawDetails) : void 0;
         const message = errorText && detailsText ? `${errorText}: ${detailsText}` : errorText ?? detailsText ?? "API request failed";
-        throw new chunkH37YVYZA_cjs.HavenApiError(message, res.status, data);
+        throw new chunkZA3NOSO2_cjs.HavenApiError(message, res.status, data);
       }
       return data;
     } catch (err) {
-      if (err instanceof chunkH37YVYZA_cjs.HavenApiError) throw err;
+      if (err instanceof chunkZA3NOSO2_cjs.HavenApiError) throw err;
+      const failureCause = { kind: "no_answer", method };
       if (err instanceof Error && err.name === "AbortError") {
-        throw new chunkH37YVYZA_cjs.HavenApiError(`Request to ${path} timed out`, 408);
+        throw new chunkZA3NOSO2_cjs.HavenApiError(`Request to ${path} timed out`, 408, void 0, void 0, failureCause);
       }
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `Request to ${path} failed: ${err instanceof Error ? err.message : String(err)}`,
-        0
+        0,
+        void 0,
+        void 0,
+        failureCause
       );
     } finally {
       clearTimeout(timeout);
@@ -168,13 +172,13 @@ async function fetchUnsignedTaxDeclaration(client) {
   if (reason === "feature_disabled" || reason === "disabled" || reason === "no_company_details" || reason === "vies_not_valid") {
     return { available: false, reason };
   }
-  throw new chunkH37YVYZA_cjs.HavenApiError(
+  throw new chunkZA3NOSO2_cjs.HavenApiError(
     "The tax-declaration endpoint answered a body that is neither the \xA72.1 content nor a named unavailability reason.",
     502
   );
 }
 async function resolveTaxDeclarationHeader(client, input) {
-  if (chunk22FJ4JQO_cjs.isErc7710Option(input.accepted)) {
+  if (chunkV2ODMLDD_cjs.isErc7710Option(input.accepted)) {
     return { header: void 0 };
   }
   let content;
@@ -186,7 +190,7 @@ async function resolveTaxDeclarationHeader(client, input) {
   if (!content.available) {
     return { header: void 0 };
   }
-  const signed = chunk22FJ4JQO_cjs.buildSignedTaxDeclaration({
+  const signed = chunkV2ODMLDD_cjs.buildSignedTaxDeclaration({
     content: content.declaration,
     network: input.accepted.network,
     delegateKey: input.delegateKey
@@ -195,19 +199,19 @@ async function resolveTaxDeclarationHeader(client, input) {
     `[haven-sdk] signing x402 tax declaration taxId=${JSON.stringify(content.declaration.taxId)} jurisdiction=${JSON.stringify(content.declaration.jurisdiction)} principalId=${signed.declaration.principalId}
 `
   );
-  return { header: chunk22FJ4JQO_cjs.encodeTaxDeclarationHeader(signed) };
+  return { header: chunkV2ODMLDD_cjs.encodeTaxDeclarationHeader(signed) };
 }
 function withTaxDeclarationHeader(init, header) {
   if (!header) {
-    if (init?.headers && new Headers(init.headers).has(chunk22FJ4JQO_cjs.X_TAX_DECLARATION_HEADER)) {
+    if (init?.headers && new Headers(init.headers).has(chunkV2ODMLDD_cjs.X_TAX_DECLARATION_HEADER)) {
       const headers2 = new Headers(init.headers);
-      headers2.delete(chunk22FJ4JQO_cjs.X_TAX_DECLARATION_HEADER);
+      headers2.delete(chunkV2ODMLDD_cjs.X_TAX_DECLARATION_HEADER);
       return { ...init, headers: headers2 };
     }
     return init ?? {};
   }
   const headers = new Headers(init?.headers);
-  headers.set(chunk22FJ4JQO_cjs.X_TAX_DECLARATION_HEADER, header);
+  headers.set(chunkV2ODMLDD_cjs.X_TAX_DECLARATION_HEADER, header);
   return { ...init, headers };
 }
 
@@ -353,6 +357,24 @@ function mapPaymentReceipt(raw) {
   if ("approval_request_id" in raw) {
     receipt.approvalRequestId = raw.approval_request_id ?? null;
   }
+  if ("settlement_scheme" in raw) {
+    receipt.settlementScheme = raw.settlement_scheme ?? null;
+  }
+  if ("budget_delegation_hash" in raw) {
+    receipt.budgetDelegationHash = raw.budget_delegation_hash ?? null;
+  }
+  if ("delivery_quality" in raw) {
+    receipt.deliveryQuality = raw.delivery_quality ?? null;
+  }
+  if ("delivery_note" in raw) {
+    receipt.deliveryNote = raw.delivery_note ?? null;
+  }
+  if ("delivery_reported_at" in raw) {
+    receipt.deliveryReportedAt = raw.delivery_reported_at ?? null;
+  }
+  if ("delivery_reference" in raw) {
+    receipt.deliveryReference = raw.delivery_reference ?? null;
+  }
   return receipt;
 }
 
@@ -373,29 +395,29 @@ function paymentStateStatusCode(status, fallback = 502) {
   return PAYMENT_STATE_STATUS_CODES[status] ?? fallback;
 }
 function phaseForStatus(status) {
-  if (status === "pending_signature") return chunkH37YVYZA_cjs.AgentPaymentPhase.AgentSignatureRequired;
-  if (status === "submitted") return chunkH37YVYZA_cjs.AgentPaymentPhase.PaymentSubmitted;
-  if (status === "confirmed") return chunkH37YVYZA_cjs.AgentPaymentPhase.PaymentConfirmed;
-  if (status === "pending" || status === "pending_approval") return chunkH37YVYZA_cjs.AgentPaymentPhase.UserApprovalRequired;
-  if (status === "approved") return chunkH37YVYZA_cjs.AgentPaymentPhase.UserExecutionRequired;
-  if (status === "proposed") return chunkH37YVYZA_cjs.AgentPaymentPhase.WaitingForAdditionalApprovals;
-  if (status === "executed") return chunkH37YVYZA_cjs.AgentPaymentPhase.FundingSent;
-  if (status === "rejected") return chunkH37YVYZA_cjs.AgentPaymentPhase.Rejected;
-  if (status === "expired") return chunkH37YVYZA_cjs.AgentPaymentPhase.Expired;
-  if (status === "failed") return chunkH37YVYZA_cjs.AgentPaymentPhase.Failed;
+  if (status === "pending_signature") return chunkZA3NOSO2_cjs.AgentPaymentPhase.AgentSignatureRequired;
+  if (status === "submitted") return chunkZA3NOSO2_cjs.AgentPaymentPhase.PaymentSubmitted;
+  if (status === "confirmed") return chunkZA3NOSO2_cjs.AgentPaymentPhase.PaymentConfirmed;
+  if (status === "pending" || status === "pending_approval") return chunkZA3NOSO2_cjs.AgentPaymentPhase.UserApprovalRequired;
+  if (status === "approved") return chunkZA3NOSO2_cjs.AgentPaymentPhase.UserExecutionRequired;
+  if (status === "proposed") return chunkZA3NOSO2_cjs.AgentPaymentPhase.WaitingForAdditionalApprovals;
+  if (status === "executed") return chunkZA3NOSO2_cjs.AgentPaymentPhase.FundingSent;
+  if (status === "rejected") return chunkZA3NOSO2_cjs.AgentPaymentPhase.Rejected;
+  if (status === "expired") return chunkZA3NOSO2_cjs.AgentPaymentPhase.Expired;
+  if (status === "failed") return chunkZA3NOSO2_cjs.AgentPaymentPhase.Failed;
   return null;
 }
 function nextActionForStatus(status) {
-  if (status === "pending_signature") return chunkH37YVYZA_cjs.AgentPaymentNextAction.SignAndSubmitPayment;
-  if (status === "submitted") return chunkH37YVYZA_cjs.AgentPaymentNextAction.CheckStatusLater;
-  if (status === "confirmed") return chunkH37YVYZA_cjs.AgentPaymentNextAction.None;
-  if (status === "pending" || status === "pending_approval") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
-  if (status === "approved") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
-  if (status === "proposed") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
-  if (status === "executed") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
-  if (status === "rejected") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
-  if (status === "expired") return chunkH37YVYZA_cjs.AgentPaymentNextAction.RequestAgainIfUserStillWantsIt;
-  if (status === "failed") return chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "pending_signature") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.SignAndSubmitPayment;
+  if (status === "submitted") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.CheckStatusLater;
+  if (status === "confirmed") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.None;
+  if (status === "pending" || status === "pending_approval") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "approved") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "proposed") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "executed") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "rejected") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
+  if (status === "expired") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.RequestAgainIfUserStillWantsIt;
+  if (status === "failed") return chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser;
   return null;
 }
 function messageForState(label, status, paymentId, nextAction) {
@@ -469,17 +491,17 @@ function throwPaymentStateError(label, raw) {
   const statusCode = paymentStateStatusCode(raw.status);
   const state = paymentStateFromRaw(label, raw);
   if (state) {
-    throw new chunkH37YVYZA_cjs.HavenPaymentStateError(state.message, statusCode, state, raw);
+    throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(state.message, statusCode, state, raw);
   }
   if (raw.status === "pending_approval") {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw chunkZA3NOSO2_cjs.HavenApiError.deterministic(
       `${label} exceeds the agent's on-chain budget and was declined; no approval is pending and none will arrive (payment_id: ${raw.payment_id}).`,
       statusCode,
       raw
     );
   }
   if (raw.status === "expired") {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       `${label} expired before it could be completed (payment_id: ${raw.payment_id}).`,
       statusCode,
       raw
@@ -487,7 +509,8 @@ function throwPaymentStateError(label, raw) {
   }
   const paymentId = raw.payment_id ? ` (payment_id: ${raw.payment_id})` : "";
   const message = raw.error ?? `${label} ${raw.status}${paymentId}`;
-  throw new chunkH37YVYZA_cjs.HavenApiError(message, statusCode, raw);
+  if (statusCode >= 500) throw chunkZA3NOSO2_cjs.HavenApiError.deterministic(message, statusCode, raw);
+  throw new chunkZA3NOSO2_cjs.HavenApiError(message, statusCode, raw);
 }
 
 // src/x402-retry-target.ts
@@ -519,7 +542,7 @@ function isSecureX402RetryTarget(url) {
   return RESERVED_SUFFIXES.some((suffix) => host.endsWith(suffix));
 }
 var INSECURE_RETRY_TARGET_CODE = "INSECURE_RETRY_TARGET";
-var HavenInsecureRetryTargetError = class extends chunkH37YVYZA_cjs.HavenError {
+var HavenInsecureRetryTargetError = class extends chunkZA3NOSO2_cjs.HavenError {
   constructor(url) {
     super(
       `Refusing to send a payment header to ${url}: the paid x402 retry must go to an https URL (or a loopback / reserved test host). The merchant's challenge declared this resource URL; retry with the https URL you quoted (pass it as \`url\`), and report a merchant whose challenge downgrades the scheme.`,
@@ -537,20 +560,38 @@ function assertSecureX402RetryTarget(url) {
 
 // src/merchant-egress.ts
 var MERCHANT_EGRESS_REFUSED_CODE = "MERCHANT_EGRESS_REFUSED";
-var MerchantEgressRefusedError = class extends chunkH37YVYZA_cjs.HavenError {
+var MerchantEgressRefusedError = class extends chunkZA3NOSO2_cjs.HavenError {
   url;
   refusal;
   beforeRequest;
-  constructor(message, url, refusal, beforeRequest) {
-    super(message, MERCHANT_EGRESS_REFUSED_CODE, 400);
+  /** #4257: the redirect status that was not followed, when a redirect was refused. */
+  redirectStatus;
+  /**
+   * #4257: set only when `url` IS the redirect target (a cross-origin body
+   * re-send, a spent hop budget, a hop `assertUrl` refused). A refusal that
+   * stopped at the answering URL itself (a non-GET redirect, a missing or
+   * unresolvable Location) leaves it unset, and `url` is that answering URL.
+   */
+  redirectTarget;
+  /**
+   * #4257: set when the refusal interrupted a PAID delivery and the local
+   * completion has re-thrown it with the payment it belongs to — the funded,
+   * undelivered state, never "nothing happened".
+   */
+  settlementScheme;
+  constructor(message, url, refusal, beforeRequest, extra = {}) {
+    super(message, MERCHANT_EGRESS_REFUSED_CODE, 400, extra.paymentId);
     this.name = "MerchantEgressRefusedError";
     this.url = url;
     this.refusal = refusal;
     this.beforeRequest = beforeRequest;
+    this.redirectStatus = extra.redirectStatus;
+    this.redirectTarget = extra.redirectTarget;
+    this.settlementScheme = extra.settlementScheme;
   }
 };
 var MERCHANT_EGRESS_RESPONSE_CAP_CODE = "MERCHANT_EGRESS_RESPONSE_CAP";
-var MerchantEgressResponseCapError = class extends chunkH37YVYZA_cjs.HavenError {
+var MerchantEgressResponseCapError = class extends chunkZA3NOSO2_cjs.HavenError {
   url;
   limitBytes;
   constructor(message, limitBytes, url) {
@@ -661,6 +702,29 @@ var MCP_X402_PAYMENT_META_KEY = "x402/payment";
 var MCP_X402_PAYMENT_RESPONSE_META_KEY = "x402/payment-response";
 var X402_RETRY_REJECTED_STATUS = 402;
 var SESSION_NOT_FOUND_NEXT_ACTION = "reinitialize_then_retry_same_payment_header";
+var CROSS_ORIGIN_REDIRECT_HEADERS = /* @__PURE__ */ new Set([
+  "accept",
+  "accept-language",
+  "user-agent",
+  "x402-wallet"
+]);
+function crossOriginRedirectHeaders(headers) {
+  const kept = new Headers();
+  for (const [name, value] of new Headers(headers)) {
+    if (CROSS_ORIGIN_REDIRECT_HEADERS.has(name)) kept.set(name, value);
+  }
+  return kept;
+}
+var NO_POLICY_MAX_REDIRECTS = 20;
+var REQUEST_BODY_HEADERS = ["content-encoding", "content-language", "content-location", "content-type", "content-length"];
+function redirectedInit(init, status) {
+  const method = (init.method ?? "GET").toUpperCase();
+  const toGet = (status === 301 || status === 302) && method === "POST" || status === 303 && method !== "GET" && method !== "HEAD";
+  if (!toGet) return init;
+  const headers = new Headers(init.headers);
+  for (const name of REQUEST_BODY_HEADERS) headers.delete(name);
+  return { ...init, method: "GET", body: null, headers };
+}
 var McpMerchantTransport = class {
   merchantTimeout;
   fetchImpl;
@@ -691,99 +755,169 @@ var McpMerchantTransport = class {
   }
   /** Fetch a merchant with a settlement-sized timeout and caller cancellation. */
   async fetch(url, init = {}, timeoutMs = this.merchantTimeout, maxBytes) {
+    return this.send(url, init, timeoutMs, maxBytes, false);
+  }
+  /**
+   * `fetch`, plus whether this request is the paid delivery (#4257). A paid
+   * delivery, or any body carrying an x402 payment in `_meta`, is never
+   * re-sent to another origin by a redirect that keeps the body; without a policy every other
+   * request follows that redirect as the platform would, headers reduced.
+   */
+  async send(url, init, timeoutMs, maxBytes, paidDelivery) {
+    const carriesPayment = paidDelivery || bodyCarriesX402Payment(init.body);
     if (!this.egress) {
       const timeoutSignal = AbortSignal.timeout(timeoutMs);
       const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal;
       try {
-        return await this.fetchImpl(url, { ...init, signal });
+        if (init.redirect === "manual" || init.redirect === "error") {
+          return await this.fetchImpl(url, { ...init, signal });
+        }
+        return await this.followRedirects(url, init, signal, void 0, carriesPayment);
       } catch (err) {
         if (timeoutSignal.aborted) {
-          throw new chunkH37YVYZA_cjs.MerchantTimeoutError(`Merchant request timed out after ${timeoutMs}ms: ${url}`);
+          throw new chunkZA3NOSO2_cjs.MerchantTimeoutError(`Merchant request timed out after ${timeoutMs}ms: ${url}`);
         }
         throw err;
       }
     }
-    return this.fetchUnderPolicy(url, init, timeoutMs, maxBytes);
+    return this.fetchUnderPolicy(url, init, timeoutMs, maxBytes, carriesPayment);
   }
   /**
    * #3747: the policy path. Every URL — the initial request and each redirect
    * hop — is `assertUrl`-checked BEFORE it connects; redirects run `manual`
    * so nothing is ever followed un-checked; GET redirects are followed up to
-   * `maxGetRedirects` (a redirect on any other method is refused); response
-   * bodies are capped WHILE being read, not after buffering. The timeout
+   * `maxGetRedirects` (a redirect on any other method is refused); a hop to
+   * another origin carries only `CROSS_ORIGIN_REDIRECT_HEADERS` (#4244);
+   * response bodies are capped WHILE being read, not after buffering. The timeout
    * signal spans the WHOLE redirect chain, and `MerchantTimeoutError`
    * classification is preserved.
    */
-  async fetchUnderPolicy(url, init, timeoutMs, maxBytes) {
+  async fetchUnderPolicy(url, init, timeoutMs, maxBytes, carriesPayment) {
     const egress = this.egress;
     try {
       egress.assertUrl(url);
     } catch (err) {
       throw asRefusal(err, url, true);
     }
-    const method = (init.method ?? "GET").toUpperCase();
     const timeoutSignal = AbortSignal.timeout(timeoutMs);
     const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal;
-    const maxRedirects = egress.maxGetRedirects ?? 0;
+    let finalUrl = url;
+    try {
+      const response = await this.followRedirects(url, init, signal, egress, carriesPayment, (hopUrl) => {
+        finalUrl = hopUrl;
+      });
+      return this.capResponse(response, finalUrl, maxBytes);
+    } catch (err) {
+      if (timeoutSignal.aborted) {
+        throw new chunkZA3NOSO2_cjs.MerchantTimeoutError(`Merchant request timed out after ${timeoutMs}ms: ${finalUrl}`);
+      }
+      throw err;
+    }
+  }
+  /**
+   * The redirect follower both paths share (#3747, #4244, #4257). Redirects
+   * run `manual` and every hop is decided here:
+   *
+   * - Under a `policy`, every hop is `assertUrl`-checked before it connects,
+   *   only GET redirects are followed (any other method is refused), up to
+   *   `maxGetRedirects`; a missing or unresolvable Location is refused.
+   * - Without one, the platform's rules are kept: up to
+   *   `NO_POLICY_MAX_REDIRECTS` hops, the Fetch spec's method/body rewrite,
+   *   and a 3xx with no Location returned as the answer.
+   * - On both, a hop to another origin carries only
+   *   `CROSS_ORIGIN_REDIRECT_HEADERS`, never restored on a later hop.
+   * - A hop that would re-send a request body to another origin is refused
+   *   under a policy (which follows GET alone, so this is unreachable there),
+   *   and without one only when `carriesPayment`: the paid delivery, or a body
+   *   carrying an x402 payment in `_meta` (#4257). Any other body-keeping redirect is
+   *   followed with its body, as the platform did, headers reduced.
+   *
+   * `onHop` sees every URL a request goes to, so the caller can name the hop
+   * it was on when the chain stops.
+   */
+  async followRedirects(url, init, signal, policy, carriesPayment, onHop) {
+    const maxRedirects = policy ? policy.maxGetRedirects ?? 0 : NO_POLICY_MAX_REDIRECTS;
     let currentUrl = url;
+    let hopInit = init;
     let hops = 0;
-    try {
-      while (true) {
-        const response = await this.fetchImpl(currentUrl, {
-          ...init,
-          redirect: init.redirect === "error" ? "error" : "manual",
-          signal
-        });
-        if (!isRedirectStatus(response.status)) return this.capResponse(response, currentUrl, maxBytes);
-        if (method !== "GET") {
-          throw new MerchantEgressRefusedError(
-            `Hosted egress policy refuses the ${response.status} redirect from ${currentUrl}: redirects are followed for GET requests only, and this was a ${method}. The request itself was already sent to the checked URL; nothing was sent to the redirect target.`,
-            currentUrl,
-            "redirect_on_non_get",
-            false
-          );
-        }
-        const location = response.headers.get("location");
-        if (!location) {
-          throw new MerchantEgressRefusedError(
-            `Hosted egress policy refuses the ${response.status} redirect from ${currentUrl}: it carries no Location header, so there is no checked target to follow.`,
-            currentUrl,
-            "redirect_missing_location",
-            false
-          );
-        }
-        let next;
+    while (true) {
+      onHop?.(currentUrl);
+      const response = await this.fetchImpl(currentUrl, {
+        ...hopInit,
+        redirect: init.redirect === "error" ? "error" : "manual",
+        signal
+      });
+      if (!isRedirectStatus(response.status)) return response;
+      const method = (hopInit.method ?? "GET").toUpperCase();
+      if (policy && method !== "GET") {
+        throw new MerchantEgressRefusedError(
+          `Hosted egress policy refuses the ${response.status} redirect from ${currentUrl}: redirects are followed for GET requests only, and this was a ${method}. The request itself was already sent to the checked URL; nothing was sent to the redirect target.`,
+          currentUrl,
+          "redirect_on_non_get",
+          false,
+          { redirectStatus: response.status }
+        );
+      }
+      const location = response.headers.get("location");
+      if (!location) {
+        if (!policy) return response;
+        throw new MerchantEgressRefusedError(
+          `Hosted egress policy refuses the ${response.status} redirect from ${currentUrl}: it carries no Location header, so there is no checked target to follow.`,
+          currentUrl,
+          "redirect_missing_location",
+          false,
+          { redirectStatus: response.status }
+        );
+      }
+      let next;
+      try {
+        next = new URL(location, currentUrl).toString();
+      } catch {
+        if (!policy) throw new TypeError(`fetch failed: the redirect from ${currentUrl} has an unresolvable Location header`);
+        throw new MerchantEgressRefusedError(
+          `Hosted egress policy refuses the redirect from ${currentUrl}: its Location header is not a resolvable URL.`,
+          currentUrl,
+          "redirect_invalid_location",
+          false,
+          { redirectStatus: response.status }
+        );
+      }
+      if (!policy && !/^https?:$/.test(new URL(next).protocol)) {
+        throw new TypeError(`fetch failed: the redirect from ${currentUrl} names a non-HTTP(S) URL`);
+      }
+      if (hops >= maxRedirects) {
+        if (!policy) throw new TypeError(`fetch failed: redirect count exceeded (${maxRedirects}) at ${currentUrl}`);
+        throw new MerchantEgressRefusedError(
+          `Hosted egress policy refuses the redirect from ${currentUrl} to ${next}: the ${maxRedirects}-redirect budget for this request is spent.`,
+          next,
+          "redirect_budget_exceeded",
+          false,
+          { redirectStatus: response.status, redirectTarget: next }
+        );
+      }
+      if (policy) {
         try {
-          next = new URL(location, currentUrl).toString();
-        } catch {
-          throw new MerchantEgressRefusedError(
-            `Hosted egress policy refuses the redirect from ${currentUrl}: its Location header is not a resolvable URL.`,
-            currentUrl,
-            "redirect_invalid_location",
-            false
-          );
+          policy.assertUrl(next);
+        } catch (err) {
+          throw asRefusal(err, next, false, { redirectStatus: response.status, redirectTarget: next });
         }
-        if (hops >= maxRedirects) {
+      }
+      hopInit = redirectedInit(hopInit, response.status);
+      if (new URL(next).origin !== new URL(currentUrl).origin) {
+        if (hopInit.body != null && (policy || carriesPayment)) {
           throw new MerchantEgressRefusedError(
-            `Hosted egress policy refuses the redirect from ${currentUrl} to ${next}: the ${maxRedirects}-redirect budget for this request is spent.`,
+            carriesPayment ? `The ${response.status} redirect of a paid request from ${currentUrl} to ${next} was not followed: following it would re-send the paid request to a different origin. The paid request, payment header and body included, was already delivered to ${currentUrl}; nothing was sent to ${next}.` : `Refusing the ${response.status} redirect from ${currentUrl} to ${next}: it would re-send the request body to a different origin. The request was already sent to the first URL; nothing was sent to the redirect target.`,
             next,
-            "redirect_budget_exceeded",
-            false
+            "redirect_cross_origin_body",
+            false,
+            { redirectStatus: response.status, redirectTarget: next }
           );
         }
-        try {
-          egress.assertUrl(next);
-        } catch (err) {
-          throw asRefusal(err, next, false);
-        }
-        hops++;
-        currentUrl = next;
+        hopInit = { ...hopInit, headers: crossOriginRedirectHeaders(hopInit.headers) };
       }
-    } catch (err) {
-      if (timeoutSignal.aborted) {
-        throw new chunkH37YVYZA_cjs.MerchantTimeoutError(`Merchant request timed out after ${timeoutMs}ms: ${currentUrl}`);
-      }
-      throw err;
+      await response.body?.cancel().catch(() => void 0);
+      hops++;
+      currentUrl = next;
     }
   }
   /**
@@ -869,7 +1003,7 @@ var McpMerchantTransport = class {
       text = await response.clone().text();
     } catch (err) {
       if (err instanceof MerchantEgressResponseCapError) throw err;
-      if (isBodyPhaseTimeout(err)) throw new chunkH37YVYZA_cjs.MerchantTimeoutError(`Merchant response body read timed out.`);
+      if (isBodyPhaseTimeout(err)) throw new chunkZA3NOSO2_cjs.MerchantTimeoutError(`Merchant response body read timed out.`);
       return void 0;
     }
     if ((response.headers.get("content-type") ?? "").includes("text/event-stream")) {
@@ -894,7 +1028,7 @@ var McpMerchantTransport = class {
       text = await response.clone().text();
     } catch (err) {
       if (err instanceof MerchantEgressResponseCapError) throw err;
-      if (isBodyPhaseTimeout(err)) throw new chunkH37YVYZA_cjs.MerchantTimeoutError(`Merchant response body read timed out.`);
+      if (isBodyPhaseTimeout(err)) throw new chunkZA3NOSO2_cjs.MerchantTimeoutError(`Merchant response body read timed out.`);
       return response;
     }
     const message = selectJsonRpcResult(parseSseJsonRpcMessages(text));
@@ -956,12 +1090,12 @@ var McpMerchantTransport = class {
   async deliverPayment(url, init, paymentHeader) {
     assertSecureX402RetryTarget(url);
     const headers = new Headers(init?.headers);
-    const send = chunk22FJ4JQO_cjs.x402PaymentHeaderNamesFor(paymentHeader);
-    for (const name of chunk22FJ4JQO_cjs.X402_PAYMENT_HEADER_NAMES) {
+    const send = chunkV2ODMLDD_cjs.x402PaymentHeaderNamesFor(paymentHeader);
+    for (const name of chunkV2ODMLDD_cjs.X402_PAYMENT_HEADER_NAMES) {
       if (send.includes(name)) headers.set(name, paymentHeader);
       else headers.delete(name);
     }
-    return this.fetch(url, withMcpPaymentMeta({ ...init, headers }, paymentHeader), this.budgetFor("delivery"), this.capFor("delivery"));
+    return this.send(url, withMcpPaymentMeta({ ...init, headers }, paymentHeader), this.budgetFor("delivery"), this.capFor("delivery"), true);
   }
   /**
    * #3171: deliver the payment; if the merchant answers its unknown-session
@@ -1044,7 +1178,7 @@ function mcpToolResultOf(value) {
 function extractMcpPaymentRequired(toolResult) {
   if (toolResult.isError !== true) return void 0;
   if (isRecord(toolResult.structuredContent)) {
-    const parsed = chunk22FJ4JQO_cjs.normalizePaymentRequired(toolResult.structuredContent);
+    const parsed = chunkV2ODMLDD_cjs.normalizePaymentRequired(toolResult.structuredContent);
     if (parsed) return parsed;
   }
   if (Array.isArray(toolResult.content)) {
@@ -1056,7 +1190,7 @@ function extractMcpPaymentRequired(toolResult) {
       } catch {
         continue;
       }
-      const parsed = chunk22FJ4JQO_cjs.normalizePaymentRequired(candidate);
+      const parsed = chunkV2ODMLDD_cjs.normalizePaymentRequired(candidate);
       if (parsed) return parsed;
     }
   }
@@ -1080,7 +1214,7 @@ function withMcpPaymentMeta(init, paymentHeader) {
   if (!request) return init;
   let envelope;
   try {
-    envelope = chunk22FJ4JQO_cjs.decodeBase64Json(paymentHeader);
+    envelope = chunkV2ODMLDD_cjs.decodeBase64Json(paymentHeader);
   } catch {
     return init;
   }
@@ -1096,7 +1230,28 @@ function withMcpPaymentMeta(init, paymentHeader) {
   };
 }
 function encodeMcpSettlementReceipt(settlement) {
-  return chunk22FJ4JQO_cjs.encodeBase64Json(settlement);
+  return chunkV2ODMLDD_cjs.encodeBase64Json(settlement);
+}
+function bodyCarriesX402Payment(body) {
+  let text;
+  if (typeof body === "string") text = body;
+  else if (body instanceof Uint8Array || body instanceof ArrayBuffer) {
+    try {
+      text = new TextDecoder("utf-8", { fatal: true }).decode(body);
+    } catch {
+      return false;
+    }
+  } else return false;
+  let request;
+  try {
+    request = JSON.parse(text);
+  } catch {
+    return false;
+  }
+  return Array.isArray(request) ? request.some(messageCarriesX402Payment) : messageCarriesX402Payment(request);
+}
+function messageCarriesX402Payment(message) {
+  return isRecord(message) && isRecord(message.params) && isRecord(message.params._meta) && message.params._meta[MCP_X402_PAYMENT_META_KEY] !== void 0;
 }
 function parseJsonRpcToolsCall(body) {
   if (typeof body !== "string") return void 0;
@@ -1136,10 +1291,10 @@ function isRecord(value) {
 function isRedirectStatus(status) {
   return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
 }
-function asRefusal(err, url, beforeRequest) {
+function asRefusal(err, url, beforeRequest, redirect) {
   if (!(err instanceof MerchantEgressRefusedError)) return err;
-  if (err.beforeRequest === beforeRequest) return err;
-  return new MerchantEgressRefusedError(err.message, url, err.refusal, beforeRequest);
+  if (err.beforeRequest === beforeRequest && !redirect) return err;
+  return new MerchantEgressRefusedError(err.message, url, err.refusal, beforeRequest, redirect);
 }
 async function captureMerchantResponse(response) {
   const merchant_body = await response.text().catch((err) => {
@@ -1213,8 +1368,19 @@ function deriveReadiness(status, allowances) {
   if (status !== "active") return "revoked";
   return allowances.some((allowance) => safeBigInt(allowance.remainingAtomic) > 0n) ? "ready" : "needs_approval";
 }
+function deriveBudgetRefillsAt(readiness, allowances) {
+  if (readiness !== "needs_approval" || allowances.length === 0) return null;
+  const times = allowances.map((allowance) => allowance.nextRefillAt).filter((at) => at !== null && !Number.isNaN(Date.parse(at)));
+  if (times.length === 0) return null;
+  return times.reduce((earliest, at) => Date.parse(at) < Date.parse(earliest) ? at : earliest);
+}
+function deriveBudgetEndedAt(readiness, allowances, budgetEndedAt) {
+  if (readiness !== "needs_approval" || allowances.length > 0) return null;
+  if (!budgetEndedAt || Number.isNaN(Date.parse(budgetEndedAt))) return null;
+  return budgetEndedAt;
+}
 function formatRemainingDisplay(tokenAddress, tokenSymbol, remainingAtomic) {
-  const token = chunk22FJ4JQO_cjs.resolveTokenFromAddress(tokenAddress);
+  const token = chunkV2ODMLDD_cjs.resolveTokenFromAddress(tokenAddress);
   return token ? `${formatAtomicAmount(safeBigInt(remainingAtomic), token.decimals)} ${tokenSymbol}` : `${remainingAtomic} ${tokenSymbol} (atomic; unknown decimals)`;
 }
 function formatTokenAmount(atomic, decimals) {
@@ -1234,7 +1400,7 @@ function mapSupersession(raw) {
     replacementAgentId,
     supersededAt,
     warning: `This agent was replaced on its machine by agent ${replacementAgentId} at ${supersededAt}. This session is still running as the old agent: restart the agent runtime so it loads the new agent, and ask the user to remove this agent on its Haven agent page if it is no longer used \u2014 it keeps any budget it still holds until then.`,
-    nextAction: chunkH37YVYZA_cjs.AgentPaymentNextAction.StopAndTellUser,
+    nextAction: chunkZA3NOSO2_cjs.AgentPaymentNextAction.StopAndTellUser,
     nextToolOmittedReason: "The next step is the user's: restart this session, and remove the superseded agent in the Haven dashboard. No Haven tool does either."
   };
 }
@@ -1259,6 +1425,7 @@ function mapTaskBudget(raw) {
     status: raw.status,
     expiresAt: raw.expires_at,
     isExpired: raw.is_expired,
+    ...raw.is_live === void 0 ? {} : { isLive: raw.is_live },
     createdAt: raw.created_at,
     openedAt: raw.opened_at,
     closedAt: raw.closed_at,
@@ -1303,7 +1470,7 @@ function summarizePendingSubBudget(row) {
   };
 }
 function summarizeTaskBudget(taskBudget) {
-  const token = chunk22FJ4JQO_cjs.resolveTokenFromAddress(taskBudget.tokenAddress);
+  const token = chunkV2ODMLDD_cjs.resolveTokenFromAddress(taskBudget.tokenAddress);
   const maxDisplay = token ? `${formatAtomicAmount(safeBigInt(taskBudget.maxAtomic), token.decimals)} ${token.symbol}` : `${taskBudget.maxAtomic} (atomic; unknown decimals)`;
   const spendDisplay = (atomic) => {
     if (atomic === null) return null;
@@ -1380,11 +1547,23 @@ var AccountReads = class {
         isResetPending: allowance.onchain.isResetPending,
         // #3731: same provenance as the detailed read's field — the compact
         // row is a projection of the same allowance, never a second source.
-        fundsCoverRemaining: allowance.fundsCoverRemaining
+        fundsCoverRemaining: allowance.fundsCoverRemaining,
+        nextRefillAt: allowance.nextRefillAt
       };
     });
     const readiness = deriveReadiness(agent.status, allowances);
-    return { ...agent, readiness, spend_authority_readiness: readiness, allowances, taskBudgets, pendingSubBudgetSignatures };
+    const budgetRefillsAt = deriveBudgetRefillsAt(readiness, allowances);
+    const budgetEndedAt = deriveBudgetEndedAt(readiness, allowances, allowanceSummary.budgetEndedAt);
+    return {
+      ...agent,
+      readiness,
+      spend_authority_readiness: readiness,
+      budgetRefillsAt,
+      budgetEndedAt,
+      allowances,
+      taskBudgets,
+      pendingSubBudgetSignatures
+    };
   }
   /**
    * #3329: `GET /task-budgets?status=open`, mapped to the condensed summary
@@ -1412,7 +1591,8 @@ var AccountReads = class {
    * an agent can still act on, and read-by-id (`haven_get_task_budget`) is
    * the any-status surface for everything else:
    *
-   * - `closing` ALWAYS stays visible, expired or not — the close submit is
+   * - `closing` stays visible until its expiry (#3773; an expired `closing`
+   *   row drops, #3923) — the close submit is
    *   in flight and the signer's close refusal tells the caller to re-check
    *   exactly this row's status;
    * - `closed` rows drop (terminal — `closed_at` names what happened, and
@@ -1421,24 +1601,30 @@ var AccountReads = class {
    *   budget reserves nothing and pays nothing);
    * - unexpired `pending` and `open` rows stay.
    *
-   * The same filter also runs here, client-side: it is what keeps the list
-   * bounded against a backend that predates `status=live`, which refuses the
-   * value with a 400 — that refusal (and only that) falls back to
-   * `status=all`. A row whose wire carries
+   * A filter also runs here, client-side. A row carrying the backend's
+   * `is_live` (#3922) is kept exactly when it is true — the server's own
+   * `status=live` verdict. A row without it (an older backend) is derived by
+   * the same rule: `closing` stays until its expiry, then drops (#3923), as
+   * the backend does since #3773. That is
+   * what keeps the list bounded against a backend that predates `status=live`,
+   * which refuses the value with a 400 — that refusal (and only that) falls
+   * back to `status=all`. A row whose wire carries
    * no `is_expired` is treated as unexpired — the degraded read errs toward
    * KEEPING rows, never toward hiding one the agent could still act on.
    */
   async listTaskBudgetsSummary() {
     try {
       const raw = await this.transport.get("/task-budgets?status=live").catch((error) => {
-        if (error instanceof chunkH37YVYZA_cjs.HavenApiError && error.statusCode === 400) {
+        if (error instanceof chunkZA3NOSO2_cjs.HavenApiError && error.statusCode === 400) {
           return this.transport.get("/task-budgets?status=all");
         }
         throw error;
       });
       const rows = raw?.task_budgets;
       if (!Array.isArray(rows)) return [];
-      return rows.map((row) => mapTaskBudget(row)).filter((tb) => tb.status === "closing" || !tb.isExpired && tb.status !== "closed").map((tb) => summarizeTaskBudget(tb));
+      return rows.map((row) => mapTaskBudget(row)).filter(
+        (tb) => tb.isLive !== void 0 ? tb.isLive : !tb.isExpired && tb.status !== "closed"
+      ).map((tb) => summarizeTaskBudget(tb));
     } catch {
       return [];
     }
@@ -1473,6 +1659,9 @@ var AccountReads = class {
       accountAddress: raw.account_address,
       delegateAddress: raw.delegate_address,
       chainId: raw.chain_id,
+      // #4352: a non-empty parseable date → itself; anything else (absent on
+      // an older backend, null when no budget has ended) → null.
+      budgetEndedAt: typeof raw.budget_ended_at === "string" && !Number.isNaN(Date.parse(raw.budget_ended_at)) ? raw.budget_ended_at : null,
       supersededBy: mapSupersession(raw.superseded_by),
       allowances: raw.allowances.map((allowance) => ({
         id: allowance.id,
@@ -1491,6 +1680,9 @@ var AccountReads = class {
         // "unverifiable", not a missing key. The key is absent on the wire
         // when the remaining is 0; that maps to null here too.
         fundsCoverRemaining: allowance.funds_cover_remaining === true || allowance.funds_cover_remaining === false ? allowance.funds_cover_remaining : null,
+        // #4355: a non-empty string → itself; anything else (absent on an
+        // older backend, null when the budget never refills) → null.
+        nextRefillAt: typeof allowance.next_refill_at === "string" && allowance.next_refill_at !== "" ? allowance.next_refill_at : null,
         remainingDisplay: formatRemainingDisplay(allowance.token_address, allowance.token_symbol, allowance.onchain.remaining),
         onchain: {
           amount: allowance.onchain.amount,
@@ -1539,7 +1731,7 @@ var AccountReads = class {
       payment: payment2,
       allowance: null,
       warnings: [{
-        code: chunkH37YVYZA_cjs.AgentPaymentWarningCode.AllowanceCheckUnavailable,
+        code: chunkZA3NOSO2_cjs.AgentPaymentWarningCode.AllowanceCheckUnavailable,
         message: `Could not read the post-purchase allowance/budget for payment ${paymentId} (${detail}). The payment itself succeeded \u2014 the on-chain policy remains the actual spend gate; this only affects the remaining-budget figure reported here.`
       }]
     });
@@ -1632,7 +1824,7 @@ var AccountReads = class {
    */
   async getReceipt(paymentId) {
     const { receipt } = await this.transport.get(`/payments/${paymentId}/receipt`);
-    return { receipt, verification: chunk6LEXYQ7J_cjs.verifyPaymentReceipt(receipt) };
+    return { receipt, verification: chunk4JTLJVBS_cjs.verifyPaymentReceipt(receipt) };
   }
   async fetchAgent() {
     const raw = await this.transport.get("/machine-payments/agent");
@@ -1668,7 +1860,7 @@ function isWaitTimeout(err) {
 async function waitForSweepTx(tx) {
   let receipt;
   try {
-    receipt = await tx.wait(1, chunkH37YVYZA_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS);
+    receipt = await tx.wait(1, chunkZA3NOSO2_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS);
   } catch (err) {
     if (!isWaitTimeout(err)) throw err;
     return { txHash: tx.hash, confirmation: "unconfirmed" };
@@ -1682,16 +1874,16 @@ var DelegateSweepApi = class {
   }
   options;
   async sweepDelegate() {
-    if (!this.options.delegateKey) throw new chunkH37YVYZA_cjs.HavenSigningError("delegateKey is required for sweepDelegate.");
+    if (!this.options.delegateKey) throw new chunkZA3NOSO2_cjs.HavenSigningError("delegateKey is required for sweepDelegate.");
     const agent = await this.options.getAgent();
-    if (!agent.delegateAddress) throw new chunkH37YVYZA_cjs.HavenApiError("Agent has no delegate address.", 422);
+    if (!agent.delegateAddress) throw new chunkZA3NOSO2_cjs.HavenApiError("Agent has no delegate address.", 422);
     const rpcUrl = this.options.chainRpcs[agent.chainId];
-    if (!rpcUrl) throw new chunkH37YVYZA_cjs.HavenApiError(`chainRpcs[${agent.chainId}] must be configured to sweep the delegate wallet.`, 422);
+    if (!rpcUrl) throw new chunkZA3NOSO2_cjs.HavenApiError(`chainRpcs[${agent.chainId}] must be configured to sweep the delegate wallet.`, 422);
     const provider = createJsonRpcProvider(rpcUrl);
     const wallet = createWallet(this.options.delegateKey, provider);
     const transfers = [];
-    if (chunk22FJ4JQO_cjs.isSweepableChain(agent.chainId)) {
-      const contract = createErc20Contract(chunk22FJ4JQO_cjs.sweepUsdcAddress(agent.chainId), ["function balanceOf(address) view returns (uint256)", "function transfer(address to, uint256 amount) returns (bool)"], wallet);
+    if (chunkV2ODMLDD_cjs.isSweepableChain(agent.chainId)) {
+      const contract = createErc20Contract(chunkV2ODMLDD_cjs.sweepUsdcAddress(agent.chainId), ["function balanceOf(address) view returns (uint256)", "function transfer(address to, uint256 amount) returns (bool)"], wallet);
       const balance2 = await contract.balanceOf(agent.delegateAddress);
       if (balance2 > 0n) {
         const tx = await contract.transfer(agent.accountAddress, balance2);
@@ -1779,7 +1971,7 @@ function snapshotRequestBody(body) {
   if (body == null) return void 0;
   if (typeof body === "string") return body;
   if (body instanceof URLSearchParams) return body.toString();
-  throw new chunkH37YVYZA_cjs.HavenApiError(
+  throw new chunkZA3NOSO2_cjs.HavenApiError(
     "Quote helpers can only capture resumable request bodies that are strings or URLSearchParams. For streams, blobs, or binary bodies, preserve the original request yourself and call the matching resume method with fresh init.",
     400
   );
@@ -1800,12 +1992,12 @@ function requestInitFromSnapshot(request) {
   };
 }
 function noCompatiblePaymentOptionError(accepts) {
-  const erc7710Only = chunk22FJ4JQO_cjs.selectErc7710PaymentOption(accepts) !== null;
+  const erc7710Only = chunkV2ODMLDD_cjs.selectErc7710PaymentOption(accepts) !== null;
   const unsupportedOnly = !erc7710Only && accepts.some(
-    (opt) => opt !== null && typeof opt === "object" && !chunk22FJ4JQO_cjs.isErc7710Option(opt) && (chunk22FJ4JQO_cjs.x402AssetTransferMethod(opt) !== null || opt.extra?.paymentFlow !== void 0)
+    (opt) => opt !== null && typeof opt === "object" && !chunkV2ODMLDD_cjs.isErc7710Option(opt) && (chunkV2ODMLDD_cjs.x402AssetTransferMethod(opt) !== null || opt.extra?.paymentFlow !== void 0)
   );
   const offeredSchemes = nonExactSchemesOnly(accepts);
-  return new chunkH37YVYZA_cjs.HavenApiError(
+  return new chunkZA3NOSO2_cjs.HavenApiError(
     "No compatible payment option found in x402 requirements. Haven supports standard x402 exact payments on Base USDC." + (offeredSchemes ? ` The merchant offered only ${offeredSchemes}; Haven pays only the 'exact' scheme. For a request with a body, this often means the body or its Content-Type was missing or invalid: send the full request again (method, body, and Content-Type: application/json for a JSON API).` : erc7710Only ? " The only Haven-compatible option this merchant advertises is tagged extra.assetTransferMethod: 'erc7710' (direct settlement), which this EIP-3009 payment path cannot settle \u2014 the limitation is the settlement scheme, not the asset. Paying this merchant requires a delegation-rail erc7710 flow (settleX402Erc7710, or the hosted MCP purchase tools)." : unsupportedOnly ? " Every option this merchant advertises asks for a transfer method or payment flow Haven cannot construct (for example extra.assetTransferMethod: 'permit2', or an unrecognized extra.paymentFlow). No payment intent was created and no funds moved." : ""),
     400
   );
@@ -1824,15 +2016,15 @@ function nonExactSchemesOnly(accepts) {
   return schemes.map((s) => `'${s}'`).join(", ");
 }
 function buildX402Quote(paymentRequired, request, idempotencyKey, mcpTransport) {
-  const standard = chunk22FJ4JQO_cjs.selectStandardPaymentOption(paymentRequired.accepts);
-  const option = standard ?? chunk22FJ4JQO_cjs.selectErc7710PaymentOption(paymentRequired.accepts);
+  const standard = chunkV2ODMLDD_cjs.selectStandardPaymentOption(paymentRequired.accepts);
+  const option = standard ?? chunkV2ODMLDD_cjs.selectErc7710PaymentOption(paymentRequired.accepts);
   if (!option) {
     throw noCompatiblePaymentOptionError(paymentRequired.accepts);
   }
-  const token = chunk22FJ4JQO_cjs.resolveTokenFromAddress(option.asset, option.network);
+  const token = chunkV2ODMLDD_cjs.resolveTokenFromAddress(option.asset, option.network);
   return {
     rail: "x402",
-    idempotencyKey: idempotencyKey ?? chunk22FJ4JQO_cjs.buildX402IdempotencyKey(paymentRequired, option),
+    idempotencyKey: idempotencyKey ?? chunkV2ODMLDD_cjs.buildX402IdempotencyKey(paymentRequired, option),
     paymentRequired,
     accepted: option,
     acceptedScheme: standard ? "standard" : "erc7710",
@@ -1846,8 +2038,8 @@ function buildX402Quote(paymentRequired, request, idempotencyKey, mcpTransport)
     resourceUrlDiffersFromRequest: paymentRequired.resource.url !== request.url,
     description: paymentRequired.resource.description ?? option.description ?? null,
     mimeType: paymentRequired.resource.mimeType ?? option.mimeType ?? null,
-    amountAtomic: chunk22FJ4JQO_cjs.x402AuthorizationAmount(option),
-    amount: decimalFromUsdcAtomic(chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)),
+    amountAtomic: chunkV2ODMLDD_cjs.x402AuthorizationAmount(option),
+    amount: decimalFromUsdcAtomic(chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)),
     token: token?.symbol ?? "USDC",
     // #1351: null when the asset is unrecognised on this network — the
     // `token` fallback above is a LABEL, not evidence of 6 decimals, and a
@@ -1886,7 +2078,7 @@ function buildX402Receipt(input) {
       payTo: input.merchantTo ?? input.accepted.payTo
     },
     x402: {
-      amount: chunk22FJ4JQO_cjs.x402AuthorizationAmount(input.accepted),
+      amount: chunkV2ODMLDD_cjs.x402AuthorizationAmount(input.accepted),
       token: input.token,
       network: input.accepted.network,
       asset: input.accepted.asset,
@@ -1895,7 +2087,7 @@ function buildX402Receipt(input) {
   };
 }
 function buildX402ResumeState(input) {
-  const token = chunk22FJ4JQO_cjs.resolveTokenFromAddress(input.accepted.asset, input.accepted.network);
+  const token = chunkV2ODMLDD_cjs.resolveTokenFromAddress(input.accepted.asset, input.accepted.network);
   return {
     rail: "x402",
     paymentId: input.paymentId,
@@ -1906,8 +2098,8 @@ function buildX402ResumeState(input) {
     request: input.request,
     resourceUrl: input.paymentRequired.resource.url,
     description: input.paymentRequired.resource.description ?? input.accepted.description ?? null,
-    amountAtomic: chunk22FJ4JQO_cjs.x402AuthorizationAmount(input.accepted),
-    amount: decimalFromUsdcAtomic(chunk22FJ4JQO_cjs.x402AuthorizationAmount(input.accepted)),
+    amountAtomic: chunkV2ODMLDD_cjs.x402AuthorizationAmount(input.accepted),
+    amount: decimalFromUsdcAtomic(chunkV2ODMLDD_cjs.x402AuthorizationAmount(input.accepted)),
     token: token?.symbol ?? "USDC",
     asset: input.accepted.asset,
     network: input.accepted.network,
@@ -1916,7 +2108,7 @@ function buildX402ResumeState(input) {
   };
 }
 function attachX402ResumeState(err, paymentRequired, accepted, idempotencyKey, request) {
-  if (!(err instanceof chunkH37YVYZA_cjs.HavenPaymentStateError)) return;
+  if (!(err instanceof chunkZA3NOSO2_cjs.HavenPaymentStateError)) return;
   if (err.state.rail !== "x402") return;
   err.resumeState = buildX402ResumeState({
     paymentId: err.state.paymentId,
@@ -1937,17 +2129,17 @@ function attachResumeState(err, input) {
 }
 function assertCanResumeX402(status, paymentRequired, option) {
   if (status.rail !== "x402") {
-    throw new chunkH37YVYZA_cjs.HavenPaymentStateError(
+    throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(
       `Payment ${status.paymentId} is ${status.rail}, not x402.`,
       409,
       status
     );
   }
-  if (status.nextAction !== chunkH37YVYZA_cjs.AgentPaymentNextAction.RetryOriginalX402Request) {
-    throw new chunkH37YVYZA_cjs.HavenPaymentStateError(status.message, paymentStateStatusCode(status.status, 409), status);
+  if (status.nextAction !== chunkZA3NOSO2_cjs.AgentPaymentNextAction.RetryOriginalX402Request) {
+    throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(status.message, paymentStateStatusCode(status.status, 409), status);
   }
   if (!status.txHash) {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       `x402 payment ${status.paymentId} is ready to retry but has no Haven transaction hash.`,
       502,
       status,
@@ -1955,7 +2147,7 @@ function assertCanResumeX402(status, paymentRequired, option) {
     );
   }
   if (status.resourceUrl && status.resourceUrl !== paymentRequired.resource.url) {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       "x402 resume request does not match the approved resource URL.",
       409,
       { status, paymentRequired },
@@ -1963,7 +2155,7 @@ function assertCanResumeX402(status, paymentRequired, option) {
     );
   }
   if (status.merchantAddress && !sameAddress(status.merchantAddress, option.payTo)) {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       "x402 resume request does not match the approved merchant.",
       409,
       { status, selectedPayment: option },
@@ -1972,7 +2164,7 @@ function assertCanResumeX402(status, paymentRequired, option) {
   }
   const optionChainId = chainIdFromNetwork(option.network);
   if (status.chainId && optionChainId && status.chainId !== optionChainId) {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       "x402 resume request does not match the approved network.",
       409,
       { status, selectedPayment: option },
@@ -1980,7 +2172,7 @@ function assertCanResumeX402(status, paymentRequired, option) {
     );
   }
   if (status.token && status.token !== "USDC") {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       "x402 resume request does not match the approved token.",
       409,
       { status, selectedPayment: option },
@@ -1988,9 +2180,9 @@ function assertCanResumeX402(status, paymentRequired, option) {
     );
   }
   const approvedAmount = status.amount ? normalizeDecimal(status.amount) : "";
-  const requestedAmount = normalizeDecimal(decimalFromUsdcAtomic(chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)));
+  const requestedAmount = normalizeDecimal(decimalFromUsdcAtomic(chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)));
   if (approvedAmount && approvedAmount !== requestedAmount) {
-    throw new chunkH37YVYZA_cjs.HavenApiError(
+    throw new chunkZA3NOSO2_cjs.HavenApiError(
       "x402 resume request does not match the approved amount.",
       409,
       { status, selectedPayment: option },
@@ -2046,7 +2238,7 @@ var X402FundingLeg = class {
     const cached = this.receiptCache.get(idempotencyKey);
     if (!cached || cached.expiresAt <= Date.now()) return void 0;
     if (!sameX402TaskBudget(cached.taskBudgetId, taskBudgetId) || !sameX402TaskBudget(cached.subBudgetId, subBudgetId)) {
-      throw new chunkH37YVYZA_cjs.X402TaskBudgetMismatchError(
+      throw new chunkZA3NOSO2_cjs.X402TaskBudgetMismatchError(
         `The x402 idempotency key '${idempotencyKey}' was already used under a different authorizing budget (task '${cached.taskBudgetId ?? "none"}' vs '${taskBudgetId ?? "none"}', sub '${cached.subBudgetId ?? "none"}' vs '${subBudgetId ?? "none"}'). Pass a new idempotencyKey to pay under this budget.`,
         idempotencyKey,
         cached.taskBudgetId,
@@ -2067,7 +2259,7 @@ var X402FundingLeg = class {
       url: paymentRequired.resource.url,
       payTo: this.delegateAddress,
       merchantPayTo: option.payTo,
-      amount: chunk22FJ4JQO_cjs.x402AuthorizationAmount(option),
+      amount: chunkV2ODMLDD_cjs.x402AuthorizationAmount(option),
       asset: option.asset,
       network: option.network,
       description: paymentRequired.resource.description,
@@ -2086,17 +2278,17 @@ var X402FundingLeg = class {
       ...subBudgetId ? { subBudgetId } : {}
     });
     const state = paymentStateFromRaw("x402 payment", raw);
-    const executedReplay = raw.success && raw.tx_hash ? "idempotency-collision" : state?.nextAction === chunkH37YVYZA_cjs.AgentPaymentNextAction.RetryOriginalX402Request ? "approval-resume" : null;
+    const executedReplay = raw.success && raw.tx_hash ? "idempotency-collision" : state?.nextAction === chunkZA3NOSO2_cjs.AgentPaymentNextAction.RetryOriginalX402Request ? "approval-resume" : null;
     if (executedReplay) {
       const canFund = await this.delegateCanFund(
         raw.chain_id ?? state?.chainId ?? chainIdFromNetwork(option.network),
         option.asset,
-        chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)
+        chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)
       );
       const refuse = executedReplay === "idempotency-collision" ? canFund !== true : canFund === false;
       if (refuse) {
         const settledReceipt = state && executedReplay === "approval-resume" ? this.receiptFromStatus(paymentRequired, option, void 0, state) : this.receiptFromAuthorization(paymentRequired, option, void 0, raw);
-        throw new chunkH37YVYZA_cjs.X402AlreadySettledError(
+        throw new chunkZA3NOSO2_cjs.X402AlreadySettledError(
           canFund === false ? "This x402 payment already settled \u2014 the delegate no longer holds the funds to authorize it again. To buy the same item a second time, pass a distinct `idempotencyKey`; the synthesised key intentionally collapses repeat calls for the same product within a 5-minute window so a retried request cannot pay twice." : "This x402 payment already settled, and whether the delegate can still fund a new authorization could not be verified (no `chainRpcs` entry for this chain). Refusing rather than issue an authorization that may be unfundable. To buy the same item a second time, pass a distinct `idempotencyKey`; to finish an interrupted payment, resume it by `paymentId`.",
           settledReceipt,
           canFund === false ? "settled" : "unverifiable"
@@ -2109,18 +2301,18 @@ var X402FundingLeg = class {
       this.cacheReceipt(idempotencyKey, paymentHeader, receipt2, taskBudgetId, subBudgetId);
       return receipt2;
     }
-    if (state?.nextAction === chunkH37YVYZA_cjs.AgentPaymentNextAction.RetryOriginalX402Request) {
+    if (state?.nextAction === chunkZA3NOSO2_cjs.AgentPaymentNextAction.RetryOriginalX402Request) {
       const receipt2 = this.receiptFromStatus(paymentRequired, option, paymentHeader, state);
       this.cacheReceipt(idempotencyKey, paymentHeader, receipt2, taskBudgetId, subBudgetId);
       return receipt2;
     }
     this.assertSignableAuthorizationState("x402 payment", raw);
     if (!raw.sign_data?.hash) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No sign_hash returned from x402/authorize", 500, raw);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No sign_hash returned from x402/authorize", 500, raw);
     }
     const sig = await this.signForData(raw.sign_data, {
       asset: option.asset,
-      amount: chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)
+      amount: chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)
     });
     const execResult = await this.post(
       `/payments/${raw.payment_id}/sign`,
@@ -2155,10 +2347,10 @@ var X402FundingLeg = class {
    */
   async createPaymentHeader(paymentRequired, option, paymentId) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError("delegateKey is required to sign x402 payment headers.");
+      throw new chunkZA3NOSO2_cjs.HavenSigningError("delegateKey is required to sign x402 payment headers.");
     }
     const account = accounts.privateKeyToAccount(this.delegateKey);
-    const requirements = chunk22FJ4JQO_cjs.toStandardPaymentRequirements(paymentRequired, option);
+    const requirements = chunkV2ODMLDD_cjs.toStandardPaymentRequirements(paymentRequired, option);
     let header;
     if (paymentId) {
       const unsigned = schemes.exact.evm.preparePaymentHeader(
@@ -2166,7 +2358,7 @@ var X402FundingLeg = class {
         paymentRequired.x402Version,
         requirements
       );
-      unsigned.payload.authorization.nonce = chunk22FJ4JQO_cjs.deriveX402PaymentNonce(paymentId);
+      unsigned.payload.authorization.nonce = chunkV2ODMLDD_cjs.deriveX402PaymentNonce(paymentId);
       const signed = await schemes.exact.evm.signPaymentHeader(account, requirements, unsigned);
       header = schemes.exact.evm.encodePayment(signed);
     } else {
@@ -2177,15 +2369,15 @@ var X402FundingLeg = class {
       );
     }
     if (paymentRequired.x402Version < 2) return header;
-    const payment = chunk22FJ4JQO_cjs.decodeBase64Json(header);
-    return chunk22FJ4JQO_cjs.encodeBase64Json(chunk22FJ4JQO_cjs.x402V2PaymentEnvelope(paymentRequired, option, payment.payload));
+    const payment = chunkV2ODMLDD_cjs.decodeBase64Json(header);
+    return chunkV2ODMLDD_cjs.encodeBase64Json(chunkV2ODMLDD_cjs.x402V2PaymentEnvelope(paymentRequired, option, payment.payload));
   }
   // ── Receipt mapping ──────────────────────────────────────────────
   receiptFromAuthorization(paymentRequired, option, paymentHeader, raw, execResult) {
     const txHash = execResult?.tx_hash ?? raw.tx_hash ?? "";
     const chainId = execResult?.chain_id ?? raw.chain_id ?? chainIdFromNetwork(option.network);
     const token = execResult?.token ?? raw.token ?? "USDC";
-    const amount = execResult?.amount ?? raw.amount ?? decimalFromUsdcAtomic(chunk22FJ4JQO_cjs.x402AuthorizationAmount(option));
+    const amount = execResult?.amount ?? raw.amount ?? decimalFromUsdcAtomic(chunkV2ODMLDD_cjs.x402AuthorizationAmount(option));
     const to = execResult?.to ?? raw.to ?? this.delegateAddress ?? "";
     const explorerUrl = execResult?.explorer_url ?? raw.explorer_url ?? explorerUrlOrEmpty(chainId, txHash);
     const merchantTo = execResult?.merchant_to ?? raw.merchant_to ?? option.payTo;
@@ -2207,7 +2399,7 @@ var X402FundingLeg = class {
   }
   receiptFromStatus(paymentRequired, option, paymentHeader, status) {
     if (!status.txHash) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `x402 payment ${status.paymentId} is ready to retry but has no Haven transaction hash.`,
         502,
         status,
@@ -2218,7 +2410,7 @@ var X402FundingLeg = class {
       paymentId: status.paymentId,
       txHash: status.txHash,
       token: status.token || "USDC",
-      amount: status.amount || decimalFromUsdcAtomic(chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)),
+      amount: status.amount || decimalFromUsdcAtomic(chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)),
       to: this.delegateAddress ?? "",
       resourceUrl: paymentRequired.resource.url,
       explorerUrl: explorerUrlOrEmpty(status.chainId, status.txHash),
@@ -2238,20 +2430,27 @@ var X402FundingLeg = class {
    * Skipped when `chainRpcs` does not include the chain; in that case Haven's
    * backend has already confirmed on-chain submission and callers accept the
    * small propagation window as a trade-off for not configuring an RPC URL.
+   *
+   * #4470: the two outcomes are typed apart. ethers 6 `waitForTransaction`
+   * REJECTS on its timeout (and on an RPC failure) rather than resolving
+   * null, so that path is `FundingConfirmationUnknownError` — funding may
+   * have moved. A mined receipt with `status !== 1` is `FundingRevertedError`.
    */
   async waitForFundingTx(txHash, chainId, timeoutMs = 3e4) {
     if (!txHash || !chainId) return;
     const rpcUrl = this.chainRpcs[chainId];
     if (!rpcUrl) return;
     const provider = createJsonRpcProvider(rpcUrl);
-    const onChainReceipt = await provider.waitForTransaction(txHash, 1, timeoutMs);
-    if (!onChainReceipt || onChainReceipt.status !== 1) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
-        "Funding tx did not confirm on-chain within the timeout window.",
-        500,
-        { txHash, chainId }
-      );
+    let onChainReceipt;
+    try {
+      onChainReceipt = await provider.waitForTransaction(txHash, 1, timeoutMs);
+    } catch (err) {
+      throw new chunkZA3NOSO2_cjs.FundingConfirmationUnknownError(txHash, chainId, err instanceof Error ? err.message : String(err));
+    }
+    if (!onChainReceipt) {
+      throw new chunkZA3NOSO2_cjs.FundingConfirmationUnknownError(txHash, chainId, "no receipt within the timeout window");
     }
+    if (onChainReceipt.status !== 1) throw new chunkZA3NOSO2_cjs.FundingRevertedError(txHash, chainId);
   }
   /**
    * Can the delegate EOA still fund an authorization for `amountAtomic`?
@@ -2295,7 +2494,7 @@ var X402FundingLeg = class {
 };
 function getPaymentHeaderValidBefore(paymentHeader) {
   try {
-    const payment = chunk22FJ4JQO_cjs.decodeBase64Json(
+    const payment = chunkV2ODMLDD_cjs.decodeBase64Json(
       paymentHeader
     );
     const payload = payment.payload;
@@ -2350,7 +2549,7 @@ var X402Erc7710 = class {
    */
   async settle(paymentRequired, options = {}) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "delegateKey is required for x402 payments. Pass it in the HavenClient config."
       );
     }
@@ -2375,21 +2574,21 @@ var X402Erc7710 = class {
   async prepare(paymentRequired, options = {}) {
     const delegationRail = options.delegationRail ?? (await this.getAgent()).executionRail === "delegation";
     if (!delegationRail) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         "erc7710 settlement requires a delegation-rail account; this one is not on it. Use authorizeX402() for the standard EIP-3009 path.",
         400
       );
     }
-    const selection = chunk22FJ4JQO_cjs.selectX402SettlementScheme(paymentRequired.accepts, { delegationRail });
+    const selection = chunkV2ODMLDD_cjs.selectX402SettlementScheme(paymentRequired.accepts, { delegationRail });
     if (!selection || selection.scheme !== "erc7710") {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         "This merchant does not advertise an erc7710 settlement option (no accepts[] entry carries extra.assetTransferMethod: 'erc7710'). Use authorizeX402() for the standard EIP-3009 path.",
         400
       );
     }
     const option = selection.option;
     const merchantPayTo = option.payTo;
-    const amountAtomic = chunk22FJ4JQO_cjs.x402AuthorizationAmount(option);
+    const amountAtomic = chunkV2ODMLDD_cjs.x402AuthorizationAmount(option);
     const raw = await this.post("/x402", {
       url: options.resourceUrl ?? paymentRequired.resource?.url,
       // #2373: the full 402 challenge, persisted verbatim by the backend
@@ -2433,24 +2632,24 @@ var X402Erc7710 = class {
       ...options.subBudgetId ? { subBudgetId: options.subBudgetId } : {}
     });
     if (!raw.payment_id) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No payment_id returned from x402/authorize", 500, raw);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No payment_id returned from x402/authorize", 500, raw);
     }
     if (raw.status === "confirmed" && raw.tx_hash) {
       const requestedUrl = options.resourceUrl ?? paymentRequired.resource?.url;
       const samePurchase = typeof raw.to === "string" && raw.to.toLowerCase() === merchantPayTo.toLowerCase() && raw.resource_url === requestedUrl;
       if (!samePurchase) {
-        throw new chunkH37YVYZA_cjs.HavenApiError(
+        throw new chunkZA3NOSO2_cjs.HavenApiError(
           `Idempotency key already belongs to confirmed payment ${raw.payment_id}, which is not this erc7710 purchase (different payee or resource). Nothing was signed and nothing was charged. Check that payment's status before buying again: a funded but undelivered EIP-3009 payment is recovered, not paid twice. Otherwise use a new idempotency key for this purchase.`,
           409,
           raw,
           raw.payment_id
         );
       }
-      throw new chunkH37YVYZA_cjs.X402Erc7710AlreadySettledError(raw.payment_id, raw.tx_hash, raw);
+      throw new chunkZA3NOSO2_cjs.X402Erc7710AlreadySettledError(raw.payment_id, raw.tx_hash, raw);
     }
     const signData = raw.sign_data;
     if (signData?.signature_scheme !== "eip712_delegation" || !signData.typed_data) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic(
         `x402/authorize did not return an erc7710 settlement child (signature_scheme was ${JSON.stringify(signData?.signature_scheme)}). Refusing to sign a payload this path did not ask for.`,
         500,
         raw
@@ -2482,9 +2681,9 @@ var X402Erc7710 = class {
     try {
       settled = await this.post(`/x402/${paymentId}/settle`, { signature });
     } catch (err) {
-      const body = err instanceof chunkH37YVYZA_cjs.HavenApiError ? err.body : void 0;
-      if (err instanceof chunkH37YVYZA_cjs.HavenApiError && err.statusCode === 409 && body?.code === "payment_already_settled" && typeof body.tx_hash === "string") {
-        throw new chunkH37YVYZA_cjs.X402Erc7710AlreadySettledError(
+      const body = err instanceof chunkZA3NOSO2_cjs.HavenApiError ? err.body : void 0;
+      if (err instanceof chunkZA3NOSO2_cjs.HavenApiError && err.statusCode === 409 && body?.code === "payment_already_settled" && typeof body.tx_hash === "string") {
+        throw new chunkZA3NOSO2_cjs.X402Erc7710AlreadySettledError(
           typeof body.payment_id === "string" ? body.payment_id : paymentId,
           body.tx_hash,
           body
@@ -2493,7 +2692,7 @@ var X402Erc7710 = class {
       throw err;
     }
     if (!settled.payment_header) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic(
         "x402 settle returned no payment_header \u2014 the merchant cannot be retried.",
         500,
         settled
@@ -2503,9 +2702,9 @@ var X402Erc7710 = class {
   }
 };
 function settlementExpectationFromQuote(settlement) {
-  const chainId = chunkH37YVYZA_cjs.chainIdForNetwork(settlement.network);
+  const chainId = chunkZA3NOSO2_cjs.chainIdForNetwork(settlement.network);
   if (chainId === void 0) {
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `Refusing to sign the x402 settlement child: the merchant's network ${JSON.stringify(settlement.network)} is not one this SDK can verify a settlement child on.`
     );
   }
@@ -2555,7 +2754,7 @@ function x402ToolReceipt(receipt) {
   };
 }
 function toolError(err) {
-  if (err instanceof chunkH37YVYZA_cjs.HavenPaymentStateError) {
+  if (err instanceof chunkZA3NOSO2_cjs.HavenPaymentStateError) {
     return {
       success: false,
       payment_id: err.state.paymentId,
@@ -2600,7 +2799,7 @@ function toolError(err) {
       error: err.message
     };
   }
-  if (err instanceof chunkH37YVYZA_cjs.HavenApiError) {
+  if (err instanceof chunkZA3NOSO2_cjs.HavenApiError) {
     return {
       success: false,
       status_code: err.statusCode,
@@ -2614,6 +2813,26 @@ function toolError(err) {
   };
 }
 
+// src/merchant-answer.ts
+function decidePostFundingMerchantAnswer(input) {
+  const inBandChallenge = input.toolResult ? extractMcpPaymentRequired(input.toolResult) : void 0;
+  const headerReceipt = input.paymentResponseHeader;
+  const protocolReceiptHeaderName = headerReceipt ? "PAYMENT-RESPONSE" : input.metaSettlement ? `_meta.${MCP_X402_PAYMENT_RESPONSE_META_KEY}` : void 0;
+  const protocolReceiptHeader = headerReceipt ?? (input.metaSettlement ? encodeMcpSettlementReceipt(input.metaSettlement) : void 0);
+  const settlement = parseMerchantSettlement(headerReceipt ?? null);
+  const settlementTxHash = settlement.settlementTxHash ?? (typeof input.metaSettlement?.transaction === "string" ? input.metaSettlement.transaction : void 0);
+  const plainToolErrorAfterFunding = input.toolResult?.isError === true && inBandChallenge === void 0 && !settlementTxHash;
+  const inBandRejection = inBandChallenge !== void 0 || input.metaSettlement?.success === false || plainToolErrorAfterFunding;
+  return {
+    accepted: input.httpOk && !inBandRejection,
+    inBandRejection,
+    plainToolErrorAfterFunding,
+    settlementTxHash,
+    protocolReceiptHeader,
+    protocolReceiptHeaderName
+  };
+}
+
 // src/merchant-completion.ts
 var MERCHANT_BODY_SNIPPET_LIMIT = 1e3;
 var EVIDENCE_RETRY_DELAYS_MS = [1e3, 2e3, 4e3];
@@ -2644,14 +2863,14 @@ var MerchantCompletion = class {
   }
   async retryRequest(url, initialInit, paymentRequired, receipt) {
     if (!receipt.accepted) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No accepted x402 option was recorded for payment retry", 500);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No accepted x402 option was recorded for payment retry", 500);
     }
     if (!receipt.paymentHeader) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No x402 payment header was returned for payment retry", 500);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No x402 payment header was returned for payment retry", 500);
     }
     let retryInit = initialInit;
     if (this.getTaxDeclarationHeader && this.delegateKey) {
-      const scheme = chunk22FJ4JQO_cjs.x402PaymentHeaderNamesFor(receipt.paymentHeader);
+      const scheme = chunkV2ODMLDD_cjs.x402PaymentHeaderNamesFor(receipt.paymentHeader);
       const isEip3009 = scheme.length > 1;
       if (isEip3009) {
         const resolved = await this.getTaxDeclarationHeader({
@@ -2663,16 +2882,31 @@ var MerchantCompletion = class {
         retryInit = withTaxDeclarationHeader(initialInit, void 0);
       }
     }
-    const retryResponse = await this.merchantTransport.deliverPaymentRecoveringSession(
-      url,
-      retryInit,
-      receipt.paymentHeader,
-      () => this.merchantTransport.initialize(url, initialInit)
-    );
+    let retryResponse;
+    try {
+      retryResponse = await this.merchantTransport.deliverPaymentRecoveringSession(
+        url,
+        retryInit,
+        receipt.paymentHeader,
+        () => this.merchantTransport.initialize(url, initialInit)
+      );
+    } catch (err) {
+      if (err instanceof MerchantEgressRefusedError && !err.beforeRequest) {
+        throw await this.paidDeliveryInterrupted(err, url, receipt, receipt.paymentHeader, retryInit?.body != null);
+      }
+      throw err;
+    }
     const toolResult = retryResponse.ok ? await this.merchantTransport.readToolResult(retryResponse) : void 0;
-    const inBandChallenge = toolResult ? extractMcpPaymentRequired(toolResult) : void 0;
     const metaSettlement = toolResult ? mcpSettlementFromToolResult(toolResult) : void 0;
-    const inBandRejection = inBandChallenge !== void 0 || metaSettlement?.success === false;
+    const headerReceipt = retryResponse.headers.get("PAYMENT-RESPONSE");
+    const answer = decidePostFundingMerchantAnswer({
+      toolResult,
+      httpOk: retryResponse.ok,
+      paymentResponseHeader: headerReceipt ?? void 0,
+      metaSettlement
+    });
+    const reportedSettlementTxHash = answer.settlementTxHash;
+    const inBandRejection = answer.inBandRejection;
     if (!retryResponse.ok || inBandRejection) {
       const merchant = await captureMerchantResponse(retryResponse);
       await this.recordRetryRejected({
@@ -2686,8 +2920,8 @@ var MerchantCompletion = class {
           delegate_to: receipt.to
         }
       });
-      throw new chunkH37YVYZA_cjs.HavenApiError(
-        "x402 retry failed after Haven funded the delegate wallet; reconciliation may be required.",
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
+        "x402 retry failed after Haven funded the delegate wallet; reconciliation may be required. The merchant may still settle late: check the payment status before sweeping the delegate.",
         inBandRejection ? X402_RETRY_REJECTED_STATUS : merchant.merchant_status,
         {
           marker: "x402_retry_rejected_after_funding",
@@ -2700,10 +2934,10 @@ var MerchantCompletion = class {
         }
       );
     }
-    const headerReceipt = retryResponse.headers.get("PAYMENT-RESPONSE");
-    const protocolReceiptHeader = headerReceipt ?? (metaSettlement ? encodeMcpSettlementReceipt(metaSettlement) : void 0);
-    const protocolReceiptHeaderName = headerReceipt ? "PAYMENT-RESPONSE" : metaSettlement ? `_meta.${MCP_X402_PAYMENT_RESPONSE_META_KEY}` : void 0;
-    const merchantSettlement = parseMerchantSettlement(protocolReceiptHeader ?? null);
+    const { protocolReceiptHeader, protocolReceiptHeaderName } = answer;
+    const merchantSettlement = {
+      settlementTxHash: reportedSettlementTxHash ?? null
+    };
     if (receipt.merchant && merchantSettlement.settlementTxHash) {
       receipt.merchant.settlementTxHash = merchantSettlement.settlementTxHash;
       receipt.merchant.settlementExplorerUrl = buildExplorerUrl(receipt.chainId, merchantSettlement.settlementTxHash) || null;
@@ -2716,14 +2950,19 @@ var MerchantCompletion = class {
       merchantStatus: retryResponse.status,
       challengePayload: paymentRequired,
       selectedPayment: receipt.accepted,
-      paymentProofHeaderName: chunk22FJ4JQO_cjs.x402PaymentHeaderNamesSent(receipt.paymentHeader),
+      paymentProofHeaderName: chunkV2ODMLDD_cjs.x402PaymentHeaderNamesSent(receipt.paymentHeader),
       paymentProofHeader: receipt.paymentHeader,
       protocolReceiptHeaderName,
       protocolReceiptHeader
     });
     const settlementCandidate = merchantSettlement.settlementTxHash;
     if (settlementCandidate && isWellFormedSettlementTxHash(settlementCandidate) && !isZeroSettlementTxHash(settlementCandidate) && settlementCandidate.toLowerCase() !== receipt.txHash.toLowerCase()) {
-      await this.reportSettlementEvidenceOnce(receipt.paymentId, settlementCandidate);
+      await this.reportEvidence({
+        paymentId: receipt.paymentId,
+        rail: "x402",
+        txHash: settlementCandidate,
+        ...settlementProofFields(receipt.paymentHeader)
+      });
     }
     await this.reportMerchantReceipt(receipt.paymentId, retryResponse);
     return retryResponse;
@@ -2775,18 +3014,18 @@ var MerchantCompletion = class {
   async resolveCompletionContext(input) {
     const status = await this.getPaymentStatus(input.paymentId);
     if (status.rail !== "x402") {
-      throw new chunkH37YVYZA_cjs.HavenPaymentStateError(
+      throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(
         `Payment ${status.paymentId} is ${status.rail}, not x402.`,
         409,
         status
       );
     }
-    const readyForMerchantCompletion = input.noFundingLeg ? status.kind === "payment_intent" && status.status === "submitted" : status.nextAction === chunkH37YVYZA_cjs.AgentPaymentNextAction.RetryOriginalX402Request || status.kind === "payment_intent" && status.status === "confirmed" && status.phase === chunkH37YVYZA_cjs.AgentPaymentPhase.PaymentConfirmed && status.nextAction === chunkH37YVYZA_cjs.AgentPaymentNextAction.None;
+    const readyForMerchantCompletion = input.noFundingLeg ? status.kind === "payment_intent" && status.status === "submitted" : status.nextAction === chunkZA3NOSO2_cjs.AgentPaymentNextAction.RetryOriginalX402Request || status.kind === "payment_intent" && status.status === "confirmed" && status.phase === chunkZA3NOSO2_cjs.AgentPaymentPhase.PaymentConfirmed && status.nextAction === chunkZA3NOSO2_cjs.AgentPaymentNextAction.None;
     if (!readyForMerchantCompletion) {
-      throw new chunkH37YVYZA_cjs.HavenPaymentStateError(status.message, paymentStateStatusCode(status.status, 409), status);
+      throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(status.message, paymentStateStatusCode(status.status, 409), status);
     }
     if (!input.noFundingLeg && !status.txHash) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `x402 payment ${status.paymentId} is ready for merchant completion but has no Haven transaction hash.`,
         502,
         status,
@@ -2795,7 +3034,7 @@ var MerchantCompletion = class {
     }
     const approvedResourceUrl = status.resourceUrl ?? status.x402?.resourceUrl ?? null;
     if (approvedResourceUrl && approvedResourceUrl !== input.url) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         "x402 merchant completion does not match the approved resource URL.",
         409,
         { status, url: input.url },
@@ -2826,6 +3065,51 @@ var MerchantCompletion = class {
   // and MACHINE-PAYMENT-CHALLENGE was never produced by any other Haven
   // surface. Use the x402 flow (authorizeX402 / fetch / quoteX402 / payX402Quote)
   // for agent-to-merchant payments.
+  /**
+   * #4257: record a paid delivery that a refused redirect interrupted, and
+   * return the refusal re-thrown with its payment and an accurate account:
+   * the payment header (and the body, when there is one) reached `url`, the
+   * merchant answered with a redirect Haven did not follow, and the merchant
+   * may still settle. The record is the same
+   * `merchant_retry_rejected_after_payment` event a non-2xx answer writes: its
+   * `retry_status` is the redirect status, `retry_body` is null, and `details`
+   * carry `refusal` plus `redirect_location` when the refusal names a redirect
+   * target, or `refused_url` (the URL that answered) otherwise. The payment
+   * reads as funded and undelivered.
+   */
+  async paidDeliveryInterrupted(err, url, receipt, paymentHeader, hasBody) {
+    const scheme = chunkV2ODMLDD_cjs.x402PaymentHeaderNamesFor(paymentHeader).length > 1 ? "eip3009" : "erc7710";
+    const status = err.redirectStatus ?? 0;
+    await this.recordRetryRejected({
+      rail: "x402",
+      paymentId: receipt.paymentId,
+      txHash: receipt.txHash,
+      resourceUrl: receipt.resourceUrl,
+      merchant: {
+        merchant_status: status,
+        merchant_status_text: "redirect not followed",
+        merchant_headers: {},
+        merchant_body: ""
+      },
+      details: {
+        merchant_to: receipt.merchantTo,
+        delegate_to: receipt.to,
+        refusal: err.refusal,
+        // The refusal's url is the redirect target only when it carries one;
+        // otherwise it is the URL that answered (a non-GET redirect, a missing
+        // or unresolvable Location), recorded under a neutral key.
+        ...err.redirectTarget ? { redirect_location: err.redirectTarget } : { refused_url: err.url }
+      }
+    });
+    const what = `The paid request was delivered to ${url}, ${hasBody ? "payment header and body" : "payment header"} included, and the merchant answered ${status ? `HTTP ${status} ` : ""}with a redirect${unfollowedRedirect(err)} Do not pay again: `;
+    const next = scheme === "erc7710" ? "erc7710 has no funding leg, so there is no delegate balance to strand or sweep. The merchant may still redeem the settlement authorization within its window: check haven_get_payment_status after that window and re-quote only if it shows no settlement." : "the funding leg is confirmed on-chain and the merchant may still settle late. Check haven_get_payment_status before anything else, and sweep the delegate only if no settlement appears.";
+    return new MerchantEgressRefusedError(what + next, err.url, err.refusal, false, {
+      redirectStatus: err.redirectStatus,
+      redirectTarget: err.redirectTarget,
+      paymentId: receipt.paymentId,
+      settlementScheme: scheme
+    });
+  }
   async recordRetryRejected(input) {
     try {
       await this.post("/machine-payments/reconciliation-events", {
@@ -2881,7 +3165,7 @@ var MerchantCompletion = class {
    */
   async reportMerchantOutcome(input) {
     if (!Number.isInteger(input.merchantStatus) || input.merchantStatus < 100 || input.merchantStatus > 599) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `merchant_status must be an integer HTTP status from 100 to 599 (received ${input.merchantStatus}).`,
         400,
         void 0,
@@ -2890,7 +3174,7 @@ var MerchantCompletion = class {
     }
     const looksAccepted = input.merchantStatus >= 200 && input.merchantStatus < 300;
     if (looksAccepted !== (input.outcome === "accepted")) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `outcome "${input.outcome}" contradicts merchant_status ${input.merchantStatus}: report "accepted" only for a 2xx and "rejected" only for a non-2xx.`,
         400,
         void 0,
@@ -2899,14 +3183,14 @@ var MerchantCompletion = class {
     }
     const status = await this.getPaymentStatus(input.paymentId);
     if (status.rail !== "x402") {
-      throw new chunkH37YVYZA_cjs.HavenPaymentStateError(
+      throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(
         `Payment ${status.paymentId} is ${status.rail}, not x402 \u2014 there is no merchant retry to report.`,
         409,
         status
       );
     }
     if (status.status !== "confirmed" || !status.txHash) {
-      throw new chunkH37YVYZA_cjs.HavenPaymentStateError(
+      throw new chunkZA3NOSO2_cjs.HavenPaymentStateError(
         `Payment ${status.paymentId} has no confirmed Haven funding transaction to anchor a merchant report to (status ${status.status}). ${status.message}`,
         paymentStateStatusCode(status.status, 409),
         status
@@ -2914,7 +3198,7 @@ var MerchantCompletion = class {
     }
     const resourceUrl = status.resourceUrl ?? status.x402?.resourceUrl ?? null;
     if (!resourceUrl) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         `Payment ${status.paymentId} has no recorded resource URL, so a merchant report cannot be stored.`,
         409,
         status,
@@ -2968,30 +3252,35 @@ var MerchantCompletion = class {
     };
     for (let attempt = 0; ; attempt += 1) {
       const result = await this.postEvidenceOnce(body);
-      if (result.outcome !== "retryable" || attempt >= EVIDENCE_RETRY_DELAYS_MS.length) {
+      if (result.outcome !== "retryable" || result.statusCode !== EVIDENCE_RETRYABLE_STATUS || attempt >= EVIDENCE_RETRY_DELAYS_MS.length) {
         return result;
       }
       await this.sleep(EVIDENCE_RETRY_DELAYS_MS[attempt]);
     }
   }
   /**
-   * ONE evidence attempt — the body of `reportEvidence`'s loop above, and the
-   * whole of the #3764 settlement report below. A 503 answers `retryable`
-   * immediately; the caller decides whether to sleep and re-attempt
-   * (`reportEvidence`) or hand the outcome to its consumer (#3764 D2).
+   * ONE evidence attempt — the body of `reportEvidence`'s loop above. A 503,
+   * or no verdict at all (a non-answer or a 408, #4470), answers `retryable`
+   * immediately; the caller decides whether to sleep and
+   * re-attempt (`reportEvidence`, and — #4215 — the local settlement report
+   * in `retryRequest`) or hand the outcome to its consumer (#3764 D2, the
+   * hosted settlement report).
    */
   async postEvidenceOnce(body) {
     try {
       await this.post("/machine-payments/evidence", body);
       return { outcome: "confirmed" };
     } catch (err) {
-      const statusCode = err instanceof chunkH37YVYZA_cjs.HavenApiError ? err.statusCode : void 0;
-      if (statusCode !== EVIDENCE_RETRYABLE_STATUS) {
+      const statusCode = err instanceof chunkZA3NOSO2_cjs.HavenApiError ? err.statusCode : void 0;
+      const noVerdict = statusCode === 408 || err instanceof chunkZA3NOSO2_cjs.HavenApiError && err.failureCause?.kind === "no_answer";
+      if (statusCode !== EVIDENCE_RETRYABLE_STATUS && !noVerdict) {
         const reason = refusalReasonFromBody(err);
+        const errorCode = refusalErrorCodeFromBody(err);
         return {
           outcome: "refused",
           statusCode: statusCode ?? 0,
-          ...reason ? { reason } : {}
+          ...reason ? { reason } : {},
+          ...errorCode ? { errorCode } : {}
         };
       }
       return { outcome: "retryable", statusCode };
@@ -3028,46 +3317,78 @@ var MerchantCompletion = class {
    * gate uses, so a caller cannot "fix" a missing hash by reporting the demo
    * merchant's own marker and getting a different verdict than the settle
    * path already gave it.
+   *
+   * #4061: `options.paymentHeader` is the payment header the caller sent to
+   * the merchant on its paid retry. On eip3009 it is REQUIRED for the record
+   * (#3925): its signed authorization proves the nonce the settlement burned
+   * is this payment's, and a report without it is refused with
+   * `errorCode: 'settlement_proof_header_missing'`. It is forwarded exactly
+   * as the funding report forwards it (`paymentProofHeader` plus the names
+   * `x402PaymentHeaderNamesSent` derives from the same payload). erc7710
+   * needs none — Haven assembled that header itself.
    */
-  async reportSettlementEvidence(paymentId, settlementTxHash) {
+  async reportSettlementEvidence(paymentId, settlementTxHash, options = {}) {
     if (isZeroSettlementTxHash(settlementTxHash)) {
-      throw new chunkH37YVYZA_cjs.HavenZeroSettlementHashError(paymentId);
+      throw new chunkZA3NOSO2_cjs.HavenZeroSettlementHashError(paymentId);
     }
     return this.reportEvidence({
       paymentId,
       rail: "x402",
-      txHash: settlementTxHash
+      txHash: settlementTxHash,
+      ...settlementProofFields(options.paymentHeader)
     });
   }
   /**
    * #3764: report the merchant's OWN EIP-3009 settlement transaction right
-   * after a completed purchase — the second leg of a payment that already has
-   * a funding-evidence row. Same endpoint and payload shape as
+   * after a completed hosted purchase — the second leg of a payment that
+   * already has a funding-evidence row. Same endpoint and payload shape as
    * `reportSettlementEvidence` above, but with #3764's D2 budget: exactly ONE
    * attempt, no `EVIDENCE_RETRY_DELAYS_MS` backoff. The resource is already
    * paid for and delivered, so a retryable answer must not stretch the
    * completed purchase — the HOSTED tools hand the outcome to the agent
-   * (`settlementEvidenceOutcome` → `haven_report_settlement_evidence`), and
-   * the local caller swallows it by design (D1). Callers validate the hash
-   * before this call (well-formed, non-zero, different from the funding hash
+   * (`settlementEvidenceOutcome` → `haven_report_settlement_evidence`). Since
+   * #4215 this ONE-attempt form serves the HOSTED path only
+   * (`completeX402MerchantCall`); the local `retryRequest` posts the same
+   * report through `reportEvidence`, whose bounded loop re-attempts while
+   * Haven answers `retryable`. Callers validate the hash before this call
+   * (well-formed, non-zero, different from the funding hash
    * case-insensitively), so there is no client-side refusal here — the
    * backend verifies on-chain and is the only judge.
+   *
+   * #4061: `paymentHeader` is the header the paid retry sent — the #3925
+   * nonce proof, forwarded as `reportSettlementEvidence` forwards it. Both
+   * callers hold it; without it the backend refuses the record.
    */
-  async reportSettlementEvidenceOnce(paymentId, settlementTxHash) {
+  async reportSettlementEvidenceOnce(paymentId, settlementTxHash, paymentHeader) {
     return this.postEvidenceOnce({
       paymentId,
       rail: "x402",
-      txHash: settlementTxHash
+      txHash: settlementTxHash,
+      ...settlementProofFields(paymentHeader)
     });
   }
 };
+function settlementProofFields(paymentHeader) {
+  if (!paymentHeader || !paymentHeader.trim()) return {};
+  return {
+    paymentProofHeaderName: chunkV2ODMLDD_cjs.x402PaymentHeaderNamesSent(paymentHeader),
+    paymentProofHeader: paymentHeader
+  };
+}
 function refusalReasonFromBody(err) {
-  if (!(err instanceof chunkH37YVYZA_cjs.HavenApiError)) return void 0;
+  if (!(err instanceof chunkZA3NOSO2_cjs.HavenApiError)) return void 0;
   const body = err.body;
   if (body === null || typeof body !== "object" || Array.isArray(body)) return void 0;
   const reason = body.reason;
   return typeof reason === "string" && reason.length > 0 ? reason : void 0;
 }
+function refusalErrorCodeFromBody(err) {
+  if (!(err instanceof chunkZA3NOSO2_cjs.HavenApiError)) return void 0;
+  const body = err.body;
+  if (body === null || typeof body !== "object" || Array.isArray(body)) return void 0;
+  const code = body.error_code;
+  return typeof code === "string" && code.length > 0 ? code : void 0;
+}
 function isZeroSettlementTxHash(hash) {
   return typeof hash === "string" && /^0x0+$/i.test(hash);
 }
@@ -3079,7 +3400,7 @@ function parseMerchantSettlement(header) {
 }
 function parseProtocolReceiptHeader(value) {
   try {
-    return chunk22FJ4JQO_cjs.decodeBase64Json(value);
+    return chunkV2ODMLDD_cjs.decodeBase64Json(value);
   } catch {
     try {
       return JSON.parse(value);
@@ -3088,6 +3409,25 @@ function parseProtocolReceiptHeader(value) {
     }
   }
 }
+function unfollowedRedirect(err) {
+  const target = err.redirectTarget ?? err.url;
+  switch (err.refusal) {
+    case "redirect_cross_origin_body":
+      return ` to a different origin (${target}). Haven did not follow it, so the payment was not re-sent there.`;
+    case "redirect_on_non_get":
+      return ". Under the egress policy only GET redirects are followed, so Haven did not follow it and nothing was sent to the redirect target.";
+    case "redirect_missing_location":
+      return " that named no target (no Location header). Haven did not follow it.";
+    case "redirect_invalid_location":
+      return " whose Location header is not a resolvable URL. Haven did not follow it.";
+    case "redirect_budget_exceeded":
+      return ` past the redirect budget. The chain stopped before ${target}, and nothing was sent there.`;
+    case "url_not_allowed":
+      return ` to a URL the egress policy does not allow (${target}). Haven did not follow it, so nothing was sent there.`;
+    default:
+      return ". Haven did not follow it.";
+  }
+}
 
 // src/client.ts
 var DEFAULT_POLLING_INTERVAL = 3e3;
@@ -3096,7 +3436,7 @@ function x402TypedDataDigest(typedData) {
   try {
     return viem.hashTypedData(typedData);
   } catch (err) {
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `The x402 funding intent carried a sign_data.typed_data that is not a valid EIP-712 payload (needs domain, types, primaryType, message), so its digest cannot be derived and no signer could accept it. Underlying error: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -3211,7 +3551,7 @@ var HavenClient = class {
     this.x402Wallet = config.x402Wallet;
     this.egressPolicy = config.merchantEgress;
     this.merchantTransport = new McpMerchantTransport({ merchantTimeout: config.merchantTimeout, egress: config.merchantEgress });
-    this.confirmationTimeout = config.confirmationTimeout ?? chunkH37YVYZA_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS;
+    this.confirmationTimeout = config.confirmationTimeout ?? chunkZA3NOSO2_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS;
     this.pollingInterval = config.pollingInterval ?? DEFAULT_POLLING_INTERVAL;
     this.chainRpcs = config.chainRpcs ?? {};
     if (this.delegateKey) {
@@ -3292,7 +3632,7 @@ var HavenClient = class {
    */
   async pay(request) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "Cannot use pay() without a delegateKey. Use createIntent() + submitSignature() for manual signing."
       );
     }
@@ -3348,15 +3688,15 @@ var HavenClient = class {
    * on-chain allowance — there is nothing to sign until the user approves.
    */
   async createX402Intent(paymentRequired, options = {}) {
-    const option = chunk22FJ4JQO_cjs.selectStandardPaymentOption(paymentRequired.accepts);
+    const option = chunkV2ODMLDD_cjs.selectStandardPaymentOption(paymentRequired.accepts);
     if (!option) {
       throw noCompatiblePaymentOptionError(paymentRequired.accepts);
     }
     const fundingTo = options.delegateAddress ?? (await this.getAgent()).delegateAddress;
     if (!fundingTo) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("Authenticated agent has no delegate address registered.", 502);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("Authenticated agent has no delegate address registered.", 502);
     }
-    const idempotencyKey = options.idempotencyKey ?? chunk22FJ4JQO_cjs.buildX402IdempotencyKey(paymentRequired, option);
+    const idempotencyKey = options.idempotencyKey ?? chunkV2ODMLDD_cjs.buildX402IdempotencyKey(paymentRequired, option);
     const raw = await this.post("/x402", {
       url: paymentRequired.resource.url,
       payTo: fundingTo,
@@ -3367,7 +3707,7 @@ var HavenClient = class {
       // of a silent reroute to the erc7710 settlement branch (the #1358
       // review's open-budget misroute). Legacy-rail backends ignore the field.
       settlementScheme: "eip3009",
-      amount: chunk22FJ4JQO_cjs.x402AuthorizationAmount(option),
+      amount: chunkV2ODMLDD_cjs.x402AuthorizationAmount(option),
       asset: option.asset,
       network: option.network,
       description: paymentRequired.resource.description,
@@ -3392,15 +3732,15 @@ var HavenClient = class {
       throwPaymentStateError("x402 payment", raw);
     }
     if (!raw.sign_data?.hash) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No sign_hash returned from x402/authorize", 500, raw);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No sign_hash returned from x402/authorize", 500, raw);
     }
     if (raw.sign_data.signature_scheme !== void 0 && !raw.sign_data.typed_data) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         `This account's x402 funding intent declares signature scheme '${raw.sign_data.signature_scheme}' but carried no typed_data to sign. Refusing to fall back to the bare hash \u2014 the account would reject that signature on-chain. This is a backend contract violation; report it rather than working around it.`
       );
     }
     if (!raw.x402_expected_auth) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("No x402 expected-context binding returned from x402/authorize", 500, raw);
+      throw chunkZA3NOSO2_cjs.HavenApiError.deterministic("No x402 expected-context binding returned from x402/authorize", 500, raw);
     }
     return {
       paymentId: raw.payment_id,
@@ -3411,7 +3751,7 @@ var HavenClient = class {
       accepted: option,
       resourceUrl: paymentRequired.resource.url,
       merchantTo: raw.merchant_to ?? option.payTo,
-      amountAtomic: chunk22FJ4JQO_cjs.x402AuthorizationAmount(option),
+      amountAtomic: chunkV2ODMLDD_cjs.x402AuthorizationAmount(option),
       asset: option.asset,
       network: option.network,
       expectedAuth: raw.x402_expected_auth,
@@ -3436,13 +3776,13 @@ var HavenClient = class {
    */
   sign(hash) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "Cannot sign without a delegateKey. Pass the private key in HavenClient config, or sign externally."
       );
     }
     const signature = signHash(this.delegateKey, hash);
     if (!verifySignature(hash, signature, this.delegateAddress)) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "Local signature verification failed \u2014 recovered address does not match delegate key."
       );
     }
@@ -3460,29 +3800,29 @@ var HavenClient = class {
    */
   async signForData(signData, settlementExpectation, fundingExpectation) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "Cannot sign without a delegateKey. Pass the private key in HavenClient config, or sign externally."
       );
     }
     const scheme = signData.signature_scheme;
     if (scheme === "eip191_userop") {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "The session rail is retired \u2014 'eip191_userop' intents can no longer be signed. Re-onboard the account on the delegation rail."
       );
     }
     if (scheme === "eip712_userop") {
       if (!signData.typed_data) {
-        throw new chunkH37YVYZA_cjs.HavenSigningError(
+        throw new chunkZA3NOSO2_cjs.HavenSigningError(
           "sign_data.signature_scheme is eip712_userop but typed_data is missing \u2014 refusing to sign the bare hash (the account would reject it)."
         );
       }
-      chunkH37YVYZA_cjs.assertUserOpTypedDataBinding(signData.typed_data, signData.hash);
-      chunk22FJ4JQO_cjs.assertBoundDirectPaymentUserOp(
+      chunkZA3NOSO2_cjs.assertUserOpTypedDataBinding(signData.typed_data, signData.hash);
+      chunkV2ODMLDD_cjs.assertBoundDirectPaymentUserOp(
         signData.typed_data,
         this.delegateAddress
       );
       if (fundingExpectation) {
-        chunk22FJ4JQO_cjs.assertFundingLegPaysDelegate(signData.typed_data, {
+        chunkV2ODMLDD_cjs.assertFundingLegPaysDelegate(signData.typed_data, {
           delegateAddress: this.delegateAddress,
           asset: fundingExpectation.asset,
           amount: fundingExpectation.amount
@@ -3492,24 +3832,24 @@ var HavenClient = class {
     }
     if (scheme === "eip712_delegation") {
       if (!signData.typed_data) {
-        throw new chunkH37YVYZA_cjs.HavenSigningError(
+        throw new chunkZA3NOSO2_cjs.HavenSigningError(
           "sign_data.signature_scheme is eip712_delegation but typed_data is missing \u2014 refusing to sign the bare hash (the settlement would be rejected on redemption)."
         );
       }
       if (!settlementExpectation) {
-        throw new chunk22FJ4JQO_cjs.HavenTypedDataRefusedError(
+        throw new chunkV2ODMLDD_cjs.HavenTypedDataRefusedError(
           "Refusing to sign an x402 settlement child without an independent expectation of what it must pay (the merchant's 402). Pay erc7710 merchants through settleX402Erc7710(), which supplies it."
         );
       }
-      chunk22FJ4JQO_cjs.assertOwnSettlementChild(signData.typed_data, settlementExpectation, this.delegateAddress);
+      chunkV2ODMLDD_cjs.assertOwnSettlementChild(signData.typed_data, settlementExpectation, this.delegateAddress);
       return signSettlementDelegationTypedData(this.delegateKey, signData.typed_data);
     }
     if (scheme === void 0) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "sign_data.signature_scheme is required \u2014 the legacy AllowanceModule rail that signed the bare hash is retired (#2850). Refusing to guess a signing scheme."
       );
     }
-    throw new chunkH37YVYZA_cjs.HavenSigningError(
+    throw new chunkZA3NOSO2_cjs.HavenSigningError(
       `Unknown sign_data.signature_scheme '${scheme}' \u2014 refusing to guess a signing scheme. Update @haven_ai/sdk.`
     );
   }
@@ -3630,6 +3970,12 @@ var HavenClient = class {
    * degrade-to-warning path and the ledger row would still land while the
    * purchase proceeded.
    *
+   * #4458: an agent whose only budget for the token has ENDED is refused the
+   * same way with `error_code: 'delegation_expired'` and `budget_ended_at`
+   * (ISO 8601) — also thrown, also recorded (`source: 'hosted_prepare'`).
+   * The remedy differs: the owner sets a NEW budget, waiting for a period to
+   * reset cannot help.
+   *
    * #3518: without `merchantTo`, an agent whose budgets for the token are all
    * merchant-locked gets 409 `budget_requires_recipient` (thrown, nothing
    * recorded) naming the pins in `budget_recipient_addresses` — repeat the
@@ -3647,18 +3993,20 @@ var HavenClient = class {
       amountAtomic: input.amountAtomic,
       ...input.merchantTo !== void 0 ? { merchantTo: input.merchantTo } : {},
       ...input.resourceUrl !== void 0 ? { resourceUrl: input.resourceUrl } : {},
-      ...input.idempotencyKey !== void 0 ? { idempotencyKey: input.idempotencyKey } : {}
+      ...input.idempotencyKey !== void 0 ? { idempotencyKey: input.idempotencyKey } : {},
+      ...input.recordRefusal !== void 0 ? { recordRefusal: input.recordRefusal } : {}
     });
   }
   /**
    * Post-purchase allowance/budget summary for a settled payment (#1310).
    *
-   * Reuses the EXACT rail-aware read path {@link getAllowances} / #1306's
-   * catalog-purchase preflight `allowance` block use — `GET
-   * /machine-payments/allowances`, with delegation-rail values coming from
-   * the #1090 `deriveDelegationBudgets`-backed enforcer read, never
+   * Reuses the EXACT rail-aware read path {@link getAllowances} uses —
+   * `GET /machine-payments/allowances`, with delegation-rail values coming
+   * from the #1090 `deriveDelegationBudgets`-backed enforcer read, never
    * `agent_allowances` — so this can never disagree with
-   * {@link getAllowances} for the same fixture. The settled token is
+   * {@link getAllowances} for the same fixture. (#1306's catalog-purchase
+   * preflight read the same path until #3054; it now calls
+   * `POST /machine-payments/budget-precheck` instead.) The settled token is
    * resolved from {@link getPaymentStatus} so callers pass only
    * `paymentId`, never a second haven_get_agent-style round trip.
    *
@@ -3699,7 +4047,7 @@ var HavenClient = class {
    */
   async getPaymentStatusWithPostPurchaseAllowance(paymentId) {
     const status = await this.getPaymentStatus(paymentId);
-    if (status.rail === chunkH37YVYZA_cjs.AgentPaymentRail.X402 && status.phase === chunkH37YVYZA_cjs.AgentPaymentPhase.PaymentConfirmed) {
+    if (status.rail === chunkZA3NOSO2_cjs.AgentPaymentRail.X402 && status.phase === chunkZA3NOSO2_cjs.AgentPaymentPhase.PaymentConfirmed) {
       const { allowance, warnings } = await this.getPostPurchaseAllowanceSummary(paymentId);
       return { ...status, allowance, ...warnings.length > 0 ? { warnings } : {} };
     }
@@ -3754,10 +4102,10 @@ var HavenClient = class {
     return this.get(`/catalog/submit/${encodeURIComponent(id)}`);
   }
   /**
-   * Fetch one curated catalog entry by id (#1306).
+   * Fetch one catalog entry by id (#1306).
    *
    * Chain-scoped for free by the backend's SQL when the client is
-   * agent-authenticated (#1299): an unknown id and an id curated for a
+   * agent-authenticated (#1299): an unknown id and an id listed for a
    * DIFFERENT chain than this agent's both 404 identically — this method does
    * not (and must not) re-filter by chain in JS. Read-only, like
    * {@link discoverTools}.
@@ -3913,9 +4261,10 @@ var HavenClient = class {
     return this.accountReads.listPendingSubBudgetSignatures();
   }
   /**
-   * Close a sub-budget row (delegating agent only). A `pending` or expired row
-   * closes immediately; a live child returns `signData` for the on-chain
-   * revocation — sign it (`haven_sign` with `sub_budget_id`) and call
+   * Close a sub-budget row (delegating agent only). A `pending` row, or an
+   * `open` one already expired, closes immediately; otherwise (a live child, or
+   * any `closing` row — its disable is still owed, #3923) it returns `signData`
+   * for the on-chain revocation — sign it (`haven_sign` with `sub_budget_id`) and call
    * `submitSubBudget`.
    */
   async closeSubBudget(id) {
@@ -3949,7 +4298,7 @@ var HavenClient = class {
       }
       await sleep(this.pollingInterval);
     }
-    throw new chunkH37YVYZA_cjs.HavenTimeoutError(paymentId);
+    throw new chunkZA3NOSO2_cjs.HavenTimeoutError(paymentId);
   }
   // ── x402 Protocol Support ────────────────────────────────────────
   /**
@@ -3963,24 +4312,24 @@ var HavenClient = class {
    */
   async authorizeX402(paymentRequired, options = {}) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "delegateKey is required for x402 payments. Pass it in the HavenClient config."
       );
     }
     if (!this.delegateAddress) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError("delegateAddress could not be derived from delegateKey.");
+      throw new chunkZA3NOSO2_cjs.HavenSigningError("delegateAddress could not be derived from delegateKey.");
     }
-    const option = chunk22FJ4JQO_cjs.selectStandardPaymentOption(paymentRequired.accepts);
+    const option = chunkV2ODMLDD_cjs.selectStandardPaymentOption(paymentRequired.accepts);
     if (!option) {
       throw noCompatiblePaymentOptionError(paymentRequired.accepts);
     }
-    const idempotencyKey = options.idempotencyKey ?? chunk22FJ4JQO_cjs.buildX402IdempotencyKey(paymentRequired, option);
+    const idempotencyKey = options.idempotencyKey ?? chunkV2ODMLDD_cjs.buildX402IdempotencyKey(paymentRequired, option);
     const cached = this.fundingLeg.cachedReceipt(idempotencyKey, options.taskBudgetId, options.subBudgetId);
     if (cached) return cached;
     const inFlight = this.inFlightX402.get(idempotencyKey);
     if (inFlight) {
       if (!sameX402TaskBudget(this.inFlightX402TaskBudget.get(idempotencyKey), options.taskBudgetId) || !sameX402TaskBudget(this.inFlightX402SubBudget.get(idempotencyKey), options.subBudgetId)) {
-        throw new chunkH37YVYZA_cjs.X402TaskBudgetMismatchError(
+        throw new chunkZA3NOSO2_cjs.X402TaskBudgetMismatchError(
           `The x402 idempotency key '${idempotencyKey}' has an in-flight payment created under a different authorizing budget (task '${this.inFlightX402TaskBudget.get(idempotencyKey) ?? "none"}' vs '${options.taskBudgetId ?? "none"}', sub '${this.inFlightX402SubBudget.get(idempotencyKey) ?? "none"}' vs '${options.subBudgetId ?? "none"}'). Pass a new idempotencyKey to pay under this budget.`,
           idempotencyKey,
           this.inFlightX402TaskBudget.get(idempotencyKey),
@@ -4035,16 +4384,16 @@ var HavenClient = class {
         if (err instanceof MerchantEgressResponseCapError) throw err;
         body = void 0;
       }
-      throw new chunkH37YVYZA_cjs.X402UnexpectedStatusError(
+      throw new chunkZA3NOSO2_cjs.X402UnexpectedStatusError(
         `Expected an x402 quote response with HTTP 402, got HTTP ${response.status}.`,
         response.status || 400,
         body
       );
     }
     if (response.headers.get("MACHINE-PAYMENT-CHALLENGE")) {
-      throw new chunkH37YVYZA_cjs.HavenApiError("quoteX402 only supports standard x402 Payment Required responses.", 400);
+      throw new chunkZA3NOSO2_cjs.HavenApiError("quoteX402 only supports standard x402 Payment Required responses.", 400);
     }
-    const paymentRequired = await chunk22FJ4JQO_cjs.parsePaymentRequiredResponse(response);
+    const paymentRequired = await chunkV2ODMLDD_cjs.parsePaymentRequiredResponse(response);
     const mcpTransport = await this.merchantTransport.detect(url, paymentRequired, response);
     return buildX402Quote(paymentRequired, request, options.idempotencyKey, mcpTransport);
   }
@@ -4062,7 +4411,7 @@ var HavenClient = class {
     const wallet = await this.merchantCompletion.resolveWalletForMerchantCall();
     const sessionId = await this.merchantTransport.initialize(url, init, wallet);
     if (!sessionId) {
-      throw new chunkH37YVYZA_cjs.HavenApiError(
+      throw new chunkZA3NOSO2_cjs.HavenApiError(
         "The merchant did not establish an MCP session before the x402 quote. No payment was created.",
         502,
         { mcpSessionNotEstablished: true }
@@ -4136,18 +4485,18 @@ var HavenClient = class {
   }
   async resumeAuthorizedX402(input) {
     if (!this.delegateKey) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError(
+      throw new chunkZA3NOSO2_cjs.HavenSigningError(
         "delegateKey is required for x402 payments. Pass it in the HavenClient config."
       );
     }
     if (!this.delegateAddress) {
-      throw new chunkH37YVYZA_cjs.HavenSigningError("delegateAddress could not be derived from delegateKey.");
+      throw new chunkZA3NOSO2_cjs.HavenSigningError("delegateAddress could not be derived from delegateKey.");
     }
-    const option = chunk22FJ4JQO_cjs.selectStandardPaymentOption(input.paymentRequired.accepts);
+    const option = chunkV2ODMLDD_cjs.selectStandardPaymentOption(input.paymentRequired.accepts);
     if (!option) {
       throw noCompatiblePaymentOptionError(input.paymentRequired.accepts);
     }
-    const idempotencyKey = input.idempotencyKey ?? chunk22FJ4JQO_cjs.buildX402IdempotencyKey(input.paymentRequired, option);
+    const idempotencyKey = input.idempotencyKey ?? chunkV2ODMLDD_cjs.buildX402IdempotencyKey(input.paymentRequired, option);
     const cached = this.fundingLeg.cachedReceipt(idempotencyKey, input.taskBudgetId);
     if (cached) return cached;
     const status = await this.getPaymentStatus(input.paymentId);
@@ -4155,10 +4504,10 @@ var HavenClient = class {
     const canFund = await this.fundingLeg.delegateCanFund(
       status.chainId ?? chainIdFromNetwork(option.network),
       option.asset,
-      chunk22FJ4JQO_cjs.x402AuthorizationAmount(option)
+      chunkV2ODMLDD_cjs.x402AuthorizationAmount(option)
     );
     if (canFund === false) {
-      throw new chunkH37YVYZA_cjs.X402AlreadySettledError(
+      throw new chunkZA3NOSO2_cjs.X402AlreadySettledError(
         `x402 payment ${status.paymentId} has already settled \u2014 the delegate no longer holds the funds to authorize it again, so there is nothing left to resume.`,
         this.fundingLeg.receiptFromStatus(input.paymentRequired, option, void 0, status),
         "settled"
@@ -4179,13 +4528,13 @@ var HavenClient = class {
     const url = input.url ?? input.request?.url;
     if (!paymentRequired) {
       if (!url) {
-        throw new chunkH37YVYZA_cjs.HavenApiError("x402 resume requires the original URL or a captured request snapshot.", 400);
+        throw new chunkZA3NOSO2_cjs.HavenApiError("x402 resume requires the original URL or a captured request snapshot.", 400);
       }
       const response = await this.merchantTransport.fetch(url, initialInit, this.merchantTransport.budgetFor("quote"), this.merchantTransport.capFor("quote"));
       if (response.status !== 402) {
-        throw new chunkH37YVYZA_cjs.HavenApiError("Expected the original x402 request to return HTTP 402 before resuming.", 400);
+        throw new chunkZA3NOSO2_cjs.HavenApiError("Expected the original x402 request to return HTTP 402 before resuming.", 400);
       }
-      paymentRequired = await chunk22FJ4JQO_cjs.parsePaymentRequiredResponse(response);
+      paymentRequired = await chunkV2ODMLDD_cjs.parsePaymentRequiredResponse(response);
     }
     const receipt = await this.resumeAuthorizedX402({
       paymentId: input.paymentId,
@@ -4238,7 +4587,7 @@ var HavenClient = class {
       nativeChallenge = true;
     } else {
       try {
-        paymentRequired = await chunk22FJ4JQO_cjs.parsePaymentRequiredResponse(response);
+        paymentRequired = await chunkV2ODMLDD_cjs.parsePaymentRequiredResponse(response);
       } catch (err) {
         if (err instanceof MerchantEgressResponseCapError) throw err;
         return response;
@@ -4249,8 +4598,8 @@ var HavenClient = class {
       if (mcpSessionId) requestInit = this.merchantTransport.withSessionHeaders(requestInit, mcpSessionId);
     }
     const request = snapshotX402Request(url, requestInit);
-    const option = chunk22FJ4JQO_cjs.selectStandardPaymentOption(paymentRequired.accepts);
-    const idempotencyKey = options.idempotencyKey ?? (option ? chunk22FJ4JQO_cjs.buildX402IdempotencyKey(paymentRequired, option) : void 0);
+    const option = chunkV2ODMLDD_cjs.selectStandardPaymentOption(paymentRequired.accepts);
+    const idempotencyKey = options.idempotencyKey ?? (option ? chunkV2ODMLDD_cjs.buildX402IdempotencyKey(paymentRequired, option) : void 0);
     let receipt;
     try {
       receipt = await this.authorizeX402(paymentRequired, options);
@@ -4341,13 +4690,15 @@ var HavenClient = class {
       body = text;
     }
     const toolResult = mcpToolResultOf(body);
-    const inBandChallenge = toolResult ? extractMcpPaymentRequired(toolResult) : void 0;
     const metaSettlement = toolResult ? mcpSettlementFromToolResult(toolResult) : void 0;
     const headerReceipt = surfaced.headers.get("PAYMENT-RESPONSE") ?? void 0;
-    const protocolReceiptHeaderName = headerReceipt ? "PAYMENT-RESPONSE" : metaSettlement ? `_meta.${MCP_X402_PAYMENT_RESPONSE_META_KEY}` : void 0;
-    const protocolReceiptHeader = headerReceipt ?? (metaSettlement ? encodeMcpSettlementReceipt(metaSettlement) : void 0);
-    const settlement = parseMerchantSettlement(protocolReceiptHeader ?? null);
-    const merchantAccepted = surfaced.ok && inBandChallenge === void 0 && metaSettlement?.success !== false;
+    const answer = decidePostFundingMerchantAnswer({
+      toolResult,
+      httpOk: surfaced.ok,
+      paymentResponseHeader: headerReceipt,
+      metaSettlement
+    });
+    const merchantAccepted = answer.accepted;
     let evidenceOutcome;
     let settlementEvidenceOutcome;
     if (!merchantAccepted) {
@@ -4369,7 +4720,7 @@ var HavenClient = class {
         });
       }
     } else {
-      const rawEvidenceTxHash = input.noFundingLeg ? settlement.settlementTxHash ?? void 0 : fundingTxHash ?? void 0;
+      const rawEvidenceTxHash = input.noFundingLeg ? answer.settlementTxHash ?? void 0 : fundingTxHash ?? void 0;
       const evidenceTxHash = rawEvidenceTxHash && !isZeroSettlementTxHash(rawEvidenceTxHash) ? rawEvidenceTxHash : void 0;
       if (evidenceTxHash) {
         evidenceOutcome = await this.merchantCompletion.reportEvidence({
@@ -4378,21 +4729,22 @@ var HavenClient = class {
           txHash: evidenceTxHash,
           resourceUrl: evidenceContext.resourceUrl,
           merchantStatus: surfaced.status,
-          paymentProofHeaderName: chunk22FJ4JQO_cjs.x402PaymentHeaderNamesSent(input.paymentHeader),
+          paymentProofHeaderName: chunkV2ODMLDD_cjs.x402PaymentHeaderNamesSent(input.paymentHeader),
           paymentProofHeader: input.paymentHeader,
-          protocolReceiptHeaderName,
-          protocolReceiptHeader,
+          protocolReceiptHeaderName: answer.protocolReceiptHeaderName,
+          protocolReceiptHeader: answer.protocolReceiptHeader,
           // #3778: the delivery pointer rides the accepted arm's evidence
           // report — a rejection delivered nothing to point at.
           ...input.deliveryReference ? { deliveryReference: input.deliveryReference } : {}
         });
       }
       if (!input.noFundingLeg) {
-        const settlementCandidate = settlement.settlementTxHash;
+        const settlementCandidate = answer.settlementTxHash;
         if (settlementCandidate && isWellFormedSettlementTxHash(settlementCandidate) && !isZeroSettlementTxHash(settlementCandidate) && fundingTxHash && settlementCandidate.toLowerCase() !== fundingTxHash.toLowerCase()) {
           settlementEvidenceOutcome = await this.merchantCompletion.reportSettlementEvidenceOnce(
             evidenceContext.paymentId,
-            settlementCandidate
+            settlementCandidate,
+            input.paymentHeader
           );
         }
       }
@@ -4403,7 +4755,7 @@ var HavenClient = class {
       ok: merchantAccepted,
       body,
       // #3155 review S3: a transaction beside a rejection is not a settlement.
-      settlementTxHash: merchantAccepted ? settlement.settlementTxHash ?? void 0 : void 0,
+      settlementTxHash: merchantAccepted ? answer.settlementTxHash ?? void 0 : void 0,
       evidenceOutcome,
       settlementEvidenceOutcome
     };
@@ -4436,9 +4788,15 @@ var HavenClient = class {
    * Haven verifies the delegate → merchant transfer on-chain
    * (`observeEip3009MerchantSettlement`) and records it beside the funding
    * hash, so receipts name the merchant's settlement.
+   *
+   * #4061: on eip3009 pass `options.paymentHeader` — the payment header you
+   * sent the merchant on your paid retry. Since #3925 it is the proof the
+   * settlement is recorded against; without it the report is `refused` with
+   * `errorCode: 'settlement_proof_header_missing'`, and repeating it WITH the
+   * header can succeed.
    */
-  async reportSettlementEvidence(paymentId, settlementTxHash) {
-    return await this.merchantCompletion.reportSettlementEvidence(paymentId, settlementTxHash);
+  async reportSettlementEvidence(paymentId, settlementTxHash, options = {}) {
+    return await this.merchantCompletion.reportSettlementEvidence(paymentId, settlementTxHash, options);
   }
   /**
    * #3770: record the agent's evidence-only delivery verdict on a settled
@@ -4497,7 +4855,7 @@ var HavenClient = class {
     try {
       raw = await this.get(`/x402/by-idempotency-key/${encodeURIComponent(key)}`);
     } catch (err) {
-      if (err instanceof chunkH37YVYZA_cjs.HavenApiError && err.statusCode === 404) return null;
+      if (err instanceof chunkZA3NOSO2_cjs.HavenApiError && err.statusCode === 404) return null;
       throw err;
     }
     return {
@@ -4673,7 +5031,7 @@ var toolDescriptions = {
   getAgent: {
     summary: "Return the authenticated agent identity AND its live spend authority in one call: Haven wallet, delegate, chain, raw status, spend_authority_readiness, per-token remaining allowance (atomic + human-readable). The recommended first call in a new session.",
     selectionGuidance: "Use this as the session bootstrap, or to confirm identity together with whether the agent has spend authority right now. For per-token detail (configured vs spent vs reset window) use haven_get_allowances.",
-    behavior: `Reads identity plus the live spend-authority snapshot \u2014 the active on-chain budget delegation. spend_authority_readiness (readiness is a deprecated alias, same value) is "ready" when at least one token has remaining spend authority, "needs_approval" when the agent is active but has none, and "revoked" when the credential is not active. Readiness is AUTHORITY: it says a budget is live, not that the account holds funds. Each allowances[] row carries fundsCoverRemaining: false when the account's balance cannot back that row's whole remaining budget \u2014 a heads-up to mention to the user, not a refusal (budgets above the balance are a normal setup; an owner may top up weekly) \u2014 and null when the coverage read failed or the remaining figure was not read live; the key is absent when the remaining is 0, and rows for one token are compared alone. It covers hosted identity + on-chain spend authority ONLY \u2014 the hosted server cannot see the LOCAL signer, so "ready" does not mean the signer can start; verify the signer with a signer tool call or connect --doctor. An over-budget payment is declined before any money moves; there is no approval queue \u2014 ask the owner to grant or raise the budget in Haven. allowances[] carries id, tokenAddress, remainingAtomic, remainingDisplay per token. taskBudgets[] rows carry maxAtomic/maxDisplay plus spentAtomic/remainingAtomic/remainingDisplay \u2014 what the chain still allows that budget \u2014 and remainingIsFromChain: false marks a failed read (figures null, never the full cap); only live rows are listed (closed and expired omitted), each with its status (pending | open | closing) and isExpired, so a closing budget stays visible. pendingSubBudgetSignatures[] lists sub-budget rows awaiting YOUR signature, each with its haven_sign next step. Identity fields: id, name, status, accountAddress, delegateAddress, chainId.`,
+    behavior: `Reads identity plus the live spend-authority snapshot \u2014 the active on-chain budget delegation. spend_authority_readiness (readiness is a deprecated alias, same value) is "ready" when at least one token has remaining spend authority, "needs_approval" when the agent is active but has none, and "revoked" when the credential is not active. needs_approval with no allowances[] rows and budgetEndedAt set: the budget ENDED on that date \u2014 ask the owner to set a new one, waiting will not help; with no rows and no budgetEndedAt: nothing approved yet; with rows: spent for this period, refilling at budgetRefillsAt (null: it ends first). Readiness is AUTHORITY \u2014 a budget is live, not that funds are held. Each allowances[] row carries fundsCoverRemaining: false when the account's balance cannot back that row's whole remaining budget \u2014 a heads-up to mention, not a refusal (budgets above the balance are normal; an owner may top up weekly) \u2014 and null when the coverage read failed or the remaining was not read live; the key is absent at remaining 0, and rows for one token are compared alone. Covers hosted identity + on-chain spend authority ONLY \u2014 the hosted server cannot see the LOCAL signer, so "ready" does not mean the signer can start; verify it with a signer tool call or connect --doctor. An over-budget payment is declined before any money moves; there is no approval queue \u2014 ask the owner to grant or raise the budget. allowances[] carries id, tokenAddress, remainingAtomic, remainingDisplay, nextRefillAt per token. taskBudgets[] rows carry maxAtomic/maxDisplay plus spentAtomic/remainingAtomic/remainingDisplay \u2014 what the chain still allows that budget \u2014 and remainingIsFromChain: false marks a failed read (figures null, never the cap); only live rows are listed, each with its status (pending | open | closing) and isExpired. pendingSubBudgetSignatures[] lists sub-budget rows awaiting YOUR signature, with the haven_sign step. Identity fields: id, name, status, accountAddress, delegateAddress, chainId.`,
     nextActionGuidance: ""
   },
   getAllowances: {
@@ -4687,7 +5045,7 @@ var toolDescriptions = {
   checkFunds: {
     summary: "Check whether the agent's account actually holds at least the given amount of a token \u2014 funds held, not spend permitted.",
     selectionGuidance: "Use this before attempting a payment when it matters whether the money is really there: allowance answers say what you are PERMITTED to spend, never whether the account HOLDS it. For allowance, budget, spend-limit, remaining-budget, reset-period, or what-can-I-spend questions use the allowance lookup tool instead.",
-    behavior: "Returns covered: true (the account holds at least the checked amount), false (a live chain read reports less \u2014 the budget is backed by an empty account; stop and tell the user funds are missing), or null (the chain read failed \u2014 unverifiable, never treat it as absence; coverageError says why). The account balance itself is deliberately not returned: this is a sufficiency signal, not a balance read. budget_remaining_atomic is the permitted figure from the allowance lookup (the SDK spells it budgetRemainingAtomic), named so it can never be confused with holdings.",
+    behavior: "Returns covered: true (the account holds at least the checked amount), false (a live chain read reports the account holds less than the checked amount; stop and tell the user it is short), or null (the chain read failed \u2014 unverifiable, never treat it as absence; coverageError says why). The account balance itself is deliberately not returned: this is a sufficiency signal, not a balance read. budget_remaining_atomic is the permitted figure from the allowance lookup (the SDK spells it budgetRemainingAtomic), named so it can never be confused with holdings.",
     nextActionGuidance: "On covered=false, do not attempt the payment \u2014 tell the user the account is short and let them fund it; on covered=null, retry the check shortly or proceed knowing the payment may fail on-chain."
   },
   listReceipts: {
@@ -4715,9 +5073,9 @@ var toolDescriptions = {
     nextActionGuidance: "On a decline, report the reason to the user and ask them to raise the budget in Haven \u2014 there is no approval queue to wait on. This tool retries the merchant itself while it runs, so do not wait on a signal mid-call. If the process crashes after payment, a later haven_get_payment_status call may report nextAction=retry_original_x402_request \u2014 resume via haven_resume_x402_payment instead of paying again."
   },
   discoverTools: {
-    summary: "Step 1 of a purchase: discover payable services from Haven's curated merchant catalog \u2014 names, prices, the next call.",
-    selectionGuidance: "Use this when the user asks what the agent can buy, pay for, or which paid services exist \u2014 or when you need a resource URL for a service the user described. Use verified=verified for entries Haven watched pass a live quote probe (operator-curated or self-submitted) \u2014 domain_verified is the only ownership claim; never treat these badges as proof of merchant honesty, quality, or reliability. Do NOT use for balance, budget, or spend-limit questions \u2014 use haven_get_allowances. Do NOT use to pay \u2014 each returned entry names the next tool to call.",
-    behavior: "Use each entry's suggested_tool + suggested_arguments first; an entry without them says why. Read-only lookup against Haven's curated catalog; entries are periodically re-verified against the live merchant and degraded entries are flagged. Use category for a case-insensitive category filter (for example, VPN or vpn), or search for a product name, category, or description term. Returns name, description, price, rail, resource URL, tool_name, tool_arguments, the hint, and the provenance badges source/domain_verified/verified_payable. " + FUNDING_LEG_DISCOVERY_GUIDANCE + " The catalog price (price_display/price_atomic, marked price_is_indicative) is a last-verified hint, NOT authoritative \u2014 the real price comes from the merchant's live 402 at pay time. Never creates a payment, signature, or approval.",
+    summary: "Step 1 of a purchase: discover payable services from Haven's merchant catalog \u2014 names, prices, the next call.",
+    selectionGuidance: "Use this when the user asks what the agent can buy, pay for, or which paid services exist \u2014 or when you need a resource URL for a service the user described. Use verified=verified for entries Haven watched pass a live quote probe (any source; bazaar seller-asserted) \u2014 domain_verified is the only ownership claim; never treat these badges as proof of merchant honesty, quality, or reliability. Do NOT use for balance, budget, or spend-limit questions \u2014 use haven_get_allowances. Do NOT use to pay \u2014 each returned entry names the next tool to call.",
+    behavior: "Use each entry's suggested_tool + suggested_arguments first; an entry without them says why. Read-only lookup against Haven's catalog; entries are periodically re-verified against the live merchant and degraded entries are flagged. Use category for a case-insensitive category filter (for example, VPN or vpn), or search for a product name, category, or description term. Returns name, description, price, rail, resource URL, tool_name, tool_arguments, the hint, and the provenance badges source/domain_verified/verified_payable. " + FUNDING_LEG_DISCOVERY_GUIDANCE + " The catalog price (price_display/price_atomic, marked price_is_indicative) is a last-verified hint, NOT authoritative \u2014 the real price comes from the merchant's live 402 at pay time. Never creates a payment, signature, or approval.",
     nextActionGuidance: `Call suggested_tool with suggested_arguments VERBATIM (no hint: read suggested_tool_omitted_reason). Confirm the price from the live quote or pay result, not the catalog; if the next tool takes a cap, pass the user's cap as max_amount_human in whole tokens ("no more than 1 USDC" \u2192 max_amount_human: "1"), never atomic units by hand.`
   },
   submitCatalogEntry: {
@@ -4740,8 +5098,8 @@ var toolDescriptions = {
   },
   reportSettlementEvidence: {
     summary: "Report a payment's real merchant settlement transaction hash so Haven can verify it on-chain and record it.",
-    behavior: "Pass payment_id and, when you hold one, settlement_tx_hash (0x + 64 hex chars) \u2014 from PAYMENT-RESPONSE or a prior settlement_tx_hash. Omitting settlement_tx_hash succeeds as a no-op \u2014 nothing is checked or recorded, and no network call is made. Haven verifies on-chain before recording a hash; a zero, mismatched, or reverted hash is refused. Your own payments only.",
-    nextActionGuidance: "code SETTLEMENT_NOT_RECORDED (refusal_reason present): the payment's funding is confirmed and this hash was not accepted for it \u2014 do not retry it; refusal_reason carries why, verbatim. code DELIVERED_UNSETTLED: not verified, do not retry \u2014 poll haven_get_payment_status. code SETTLEMENT_PENDING (retryable:true): not mined or RPC unreachable \u2014 report the same hash again shortly."
+    behavior: "Pass payment_id and, when you hold one, settlement_tx_hash (0x + 64 hex chars) \u2014 from PAYMENT-RESPONSE or a prior settlement_tx_hash. On EIP-3009 also pass payment_header (the header you retried the merchant with) or the report is refused. Omitting settlement_tx_hash succeeds as a no-op \u2014 nothing is checked or recorded, and no network call is made. Haven verifies on-chain before recording a hash; a zero, mismatched, or reverted hash is refused. Your own payments only.",
+    nextActionGuidance: "code SETTLEMENT_PROOF_HEADER_MISSING: call again adding payment_header. code SETTLEMENT_NOT_RECORDED (refusal_reason present): the payment's funding is confirmed and this hash was not accepted for it \u2014 do not retry it; refusal_reason carries why, verbatim. code DELIVERED_UNSETTLED: not verified, do not retry \u2014 poll haven_get_payment_status. code SETTLEMENT_PENDING (retryable:true): not mined or RPC unreachable \u2014 report the same hash again shortly."
   }
 };
 
@@ -4995,13 +5353,13 @@ You are an AI agent whose user has no Haven account yet, or has one but has not
 
 ## What Haven is, in three sentences
 
-Your user gives you a **budget on their own account** \u2014 not their wallet, and not a key to their funds. The budget is a delegation they sign, enforced on-chain: a payment over it, to the wrong recipient, or past its expiry is refused at execution time, not by a dashboard promise. Haven constructs and relays the payments; you get an agent credential and a signing key made on your machine, and your user can revoke the budget without you and without Haven.
+Your user gives you a **budget on their own account** \u2014 not their wallet, and not a key to their funds. The budget is a delegation they sign, enforced on-chain: a payment over it, to the wrong recipient, or past its expiry is refused at execution time, not by a dashboard promise. The budget also ENDS on a date your user chooses \u2014 30, 90 (default), 180 or 365 days out \u2014 and that day is enforced on-chain too. When the budget ends, your authority to pay ends with it; ask your user to renew it (a new approval on the agent's page, or a new \`budget grant\`). Haven constructs and relays the payments; you get an agent credential and a signing key made on your machine, and your user can revoke the budget without you and without Haven.
 
 ## The sequence
 
 Four of the six steps are your user's \u2014 each needs a human signature or a human decision. The rest is yours. If they already have a funded account, start at step 3.
 
-1. **HUMAN \u2014 create the account.** Name, email, password, then a passkey (Face ID / Touch ID) or a wallet. Never offer to enter any of it: you must not have their password, and the passkey is bound to their device. With a terminal, \`<packages.cli.one_liner> login --api <api-url>\` afterwards gets you a scoped session for steps 3-4 (that flag or \`HAVEN_API_URL\`, on the first command \u2014 the session then remembers the backend; **the CLI's built-in default is Haven's hosted production backend**, so on any other deployment an omitted flag connects you somewhere real and wrong rather than failing) \u2014 they approve a code in the browser, you never hold their password. That command is the manifest's \`packages.cli.one_liner\` (\`/.well-known/haven.json\`) \u2014 run it as given: \`packages.cli.channel\` serves the full spec. Do not hold the process open while you wait: under \`--json\`, pass \`--no-wait\` to get the link object back at once, then poll it with \`haven login --poll <device_code>\` \u2014 one round per invocation, exit 3 while it is still pending, 0 once approved. It can set up agents and read the account; it cannot sign, approve a budget, move funds, or rotate any agent's keys.
+1. **HUMAN \u2014 create the account.** Name, email, password, then a passkey or a wallet. Never offer to enter any of it: you must not have their password, and the passkey is bound to their device. With a terminal, \`<packages.cli.one_liner> login --api <api-url>\` afterwards gets you a scoped session for steps 3-4 (that flag or \`HAVEN_API_URL\`, on the first command \u2014 the session then remembers the backend; **the CLI's built-in default is Haven's hosted production backend**, so on any other deployment an omitted flag connects you somewhere real and wrong rather than failing) \u2014 they approve a code in the browser, you never hold their password. That command is the manifest's \`packages.cli.one_liner\` (\`/.well-known/haven.json\`) \u2014 run it as given: \`packages.cli.channel\` serves the full spec. Do not hold the process open while you wait: under \`--json\`, pass \`--no-wait\` to get the link object back at once, then poll it with \`haven login --poll <device_code>\` \u2014 one round per invocation, exit 3 while it is still pending, 0 once approved. It can set up agents and read the account; it cannot sign, approve a budget, move funds, or rotate any agent's keys.
 2. **HUMAN \u2014 fund it.** USDC only, no ETH: Haven sponsors the gas. \`/.well-known/haven.json\` names \`chains.default\` as the deployment's expected chain, but after login \`haven wallets funding\` prints the address, the amount and which chain in one place; confirm that chain before you message your user. Without a CLI session, the dashboard's funding card shows the address and amount and its Receive-funds screen names the chain; never assume one: a testnet deployment and production both call themselves Haven. Before you write that message, read the manifest: \`environment\` says whether this deployment is \`production\`, and each \`chains.supported\` entry says whether that chain is a \`testnet\`. Real money is at stake only on a non-testnet chain of a \`production\` deployment \u2014 tell your user which case theirs is.
 3. **HUMAN \u2014 create the agent, set its budget**, and paste you the **setup prompt** it hands back. With a CLI session (step 1) you can do this step yourself: \`haven agents connect --name <n> --budget <amount> --token USDC --period <minutes>\` prints the same connector command and approval link; add \`--run\` to do step 4 too.
 4. **YOU \u2014 run the connector command** in that prompt (see What you run). It makes your signing key locally, registering only the public address.
@@ -5025,7 +5383,7 @@ Send these as your own message, \`<host>\` replaced by the host you fetched this
 
 **Before signup** (step 1):
 
-> I can do everything except the parts that need your signature. Please open \`<host>/signup?next=/agents&via=agent\` \u2014 name, email, password, then a passkey (Face ID / Touch ID) or a wallet. That is your account's key: I should not have it, and I will never ask for your password. Already have one? \`<host>/login?next=/agents\`.
+> I can do everything except the parts that need your signature. Please open \`<host>/signup?next=/agents&via=agent\` \u2014 name, email, password, then a passkey or a wallet. That is your account's key: I should not have it, and I will never ask for your password. Already have one? \`<host>/login?next=/agents\`.
 
 **At the passkey step:**
 
@@ -5068,7 +5426,7 @@ If the approval wait times out, nothing is lost \u2014 your agent is registered
 Call \`haven_get_agent\`, one of the Haven MCP tools the connector wires into your runtime in step 4. It returns identity plus \`spend_authority_readiness\`:
 
 - \`ready\` \u2014 a budget is live: you have the authority to pay. It does not say the account holds funds \u2014 the \`allowances[]\` rows carry \`funds_cover_remaining\`, and \`false\` there is a heads-up to mention to your user, not a refusal.
-- \`needs_approval\` \u2014 the connector finished, nobody approved yet. Ask your user again, in their Haven tab; there is no queue to wait in.
+- \`needs_approval\` \u2014 no budget can pay. \`allowances[]\` empty with \`budgetEndedAt\` set: your budget ENDED on that date; waiting will not help \u2014 ask your user to set a new one in their Haven tab. \`allowances[]\` empty with \`budgetEndedAt\` null: nobody approved one yet; ask your user again \u2014 there is no queue. Rows, all spent: it refills at \`budgetRefillsAt\`; tell your user, then wait or ask them to raise it (\`null\`: it ends first; ask them to renew it).
 - \`revoked\` \u2014 the credential is not active; ask your user to create a new agent.
 
 \`ready\` covers hosted identity and the budget only, not your local signer. Check that with \`npx -y @haven_ai/connect@<channel> --doctor\`, the same tag your prompt named \u2014 a separate command, so the command-modification rule does not bind it.
@@ -5104,7 +5462,7 @@ Then:
 1. Run \`<packages.cli.one_liner> login\`. That command is the manifest's \`packages.cli.one_liner\` (\`/.well-known/haven.json\`) \u2014 run it as given: \`packages.cli.channel\` serves the full spec. It prints a link and a code and does not need my password \u2014 it must never ask for it. Give me the link straight away and wait for me to approve it in my browser.
 2. Once I have approved, run \`haven agents connect --name <a name you choose> --budget <amount> --token USDC --period <minutes>\` with the budget I tell you. If I have not given you one, ask me before running it. Add \`--run\` to complete the connection in the same step.
 3. ${AGENT_APPROVAL_RELAY_JSON_SENTENCE}
-4. Once I have approved the budget, verify with the \`haven_get_agent\` tool: \`ready\` means I have given you the authority to pay \u2014 it does not confirm the account holds funds, so if its allowances rows carry \`funds_cover_remaining: false\`, tell me and still try the payment; \`needs_approval\` means my approval has not landed yet.
+4. Once I have approved the budget, verify with the \`haven_get_agent\` tool: \`ready\` means I have given you the authority to pay \u2014 it does not confirm the account holds funds, so if its allowances rows carry \`funds_cover_remaining: false\`, tell me and still try the payment; \`needs_approval\` with no allowances rows and \`budgetEndedAt\` set means my budget ended on that date \u2014 tell me, and I will set a new one; with no rows and no \`budgetEndedAt\`, my approval has not landed yet; with rows, the budget is spent \u2014 it refills at \`budgetRefillsAt\` (\`null\`: it ends first), so tell me, and I can raise or renew it.
 
 Two things only I can do: approving that budget with my passkey, and funding the account with USDC \u2014 no ETH, Haven sponsors the gas. Tell me if either is missing rather than working around it.
 
@@ -5224,8 +5582,10 @@ Do not guess the wallet address, network, or budget.
 
 For instant orientation at the start of a session, read the non-secret
 \`agent.json\` the connector wrote to your Haven credential directory (typically
-\`~/.haven/agents/<agent-id>/agent.json\` \u2014 if you don't know the agent id, list
-\`~/.haven/agents/\` to find the folder). It
+\`~/.haven/agents/<slug>/agent.json\`, where \`<slug>\` is the wiring name of the
+\`haven-<slug>\` pair \u2014 only a \`--bare\` run, or a \`--replace\` without \`--name\`,
+names the directory by the agent id instead; if you don't know the folder, list
+\`~/.haven/agents/\` to find it). It
 holds your agent id, Haven wallet address, network, and *configured* per-token
 budget, and contains no keys \u2014 the fastest way to answer "who am I and what may
 I spend" with no round trip. If that file is absent (some setups don't write
@@ -5246,7 +5606,13 @@ spending:
   the user, not a refusal \u2014 a budget above the balance is a normal setup, so
   still try the payment; \`null\` means the coverage read failed or the remaining
   figure was not read live; the key is absent when the remaining is 0. Rows for
-  one token are compared alone.
+  one token are compared alone. \`needs_approval\` with no \`allowances[]\`
+  rows and \`budgetEndedAt\` set means the budget ENDED on that date \u2014 waiting
+  will not help, ask the owner to set a new one; with no rows and no
+  \`budgetEndedAt\`, nobody approved a budget yet; with rows (all at remaining 0) the
+  budget is spent for this period, and \`budgetRefillsAt\` says when it refills
+  (\`null\`: it ends before it refills) \u2014 tell the user, then wait or ask them
+  to raise it.
 - \`mcp__haven__haven_get_allowances\` \u2014 detailed per-token breakdown
   (configured, spent, reset window) when you need more than the summary.
 - \`mcp__haven__haven_check_funds\` \u2014 whether the account actually HOLDS at
@@ -5393,10 +5759,13 @@ request, this is the only way it can learn the purchase failed \u2014 without it
 failed purchase reads as complete for fifteen minutes. If the merchant's
 \`PAYMENT-RESPONSE\` header names a \`transaction\`, pass that raw header as
 \`payment_response\` on the SAME \`mcp__haven__haven_report_x402_outcome\`
-call: Haven decodes it, verifies the settlement on-chain, and the receipt then
-shows the merchant's settlement, not only the funding transaction. Call
+call, together with \`payment_header\`: the exact header you retried the
+merchant with. Haven records a reported settlement only with that header,
+which proves the settlement is this payment's. It decodes the response,
+verifies the settlement on-chain, and the receipt then shows the merchant's
+settlement, not only the funding transaction. Call
 \`mcp__haven__haven_report_settlement_evidence\` only when the outcome answer
-names it as the next step. On the **erc7710** scheme (the pay result says
+names it as the next step, and pass the same \`payment_header\` there too. On the **erc7710** scheme (the pay result says
 \`settlement_scheme: "erc7710"\`), sign with \`mcp__haven-signer__haven_sign\`,
 then \`mcp__haven__haven_submit\` with \`settlement_scheme: "erc7710"\`
 returns the \`payment_header\`; retry the merchant yourself with it as
@@ -5426,7 +5795,9 @@ for example, an invoice carrying an \`x402_payment_url\` to POST with its
 \`invoice_id\`, beside a raw deposit address and a web payment link.
 - **Quote the exact request:** \`mcp__haven__haven_quote_x402\` with \`url\`,
   \`method\`, \`headers\` and \`body\`, exactly as the merchant described it.
-  \`body\` is a JSON **string**, not an object. On a JSON POST always pass
+  \`body\` is a JSON **string**, not an object. When the price is stated up
+  front (an invoice total, say), also pass \`expected_amount\` \u2014 the price you
+  expect, in whole tokens (\`"0.10"\`). On a JSON POST always pass
   \`headers: {"Content-Type": "application/json"}\` \u2014 the tool does not infer
   it, and a merchant may answer a request without it with a generic challenge
   Haven cannot pay (for example, only the \`upto\` scheme).
@@ -5455,6 +5826,18 @@ for example, an invoice carrying an \`x402_payment_url\` to POST with its
   report it, the merchant's settlement evidence. (A deposit transfer is bound
   to its payee and amount on-chain too; the difference is the record, not
   the binding.)
+- **If the quote says stop, stop.** The hosted quote checks the agent's
+  remaining budget at quote time, and it can check a price you state
+  (\`expected_amount\`). On the local runtime (\`@haven_ai/mcp\`) the quote
+  checks only a price you state; the budget is checked when you pay.
+  When it returns \`safe_to_continue: false\` \u2014 the amount exceeds the budget, or
+  the price does not match what you expected \u2014 it prefills no cap and names no
+  next tool: stop and tell the user. If the x402 challenge itself is wrong (a
+  price wildly off the invoice) and NOTHING has been paid via x402, the
+  invoice's own deposit address MAY be an alternative, but only with the
+  user's explicit go-ahead \u2014 never automatically. Once an x402 payment has
+  been attempted or refused, never pay the deposit address: it can pay the
+  invoice twice.
 - **Pay exactly one route, and never fall back silently.** If the x402 route
   is refused or fails, do not then pay the deposit address \u2014 that pays the
   invoice twice. Follow the result's guidance fields instead: on EIP-3009, a
@@ -5591,8 +5974,8 @@ only part of it was usable), and an optional \`note\` (max 2000 characters)
 saying what was wrong. It is evidence only: it moves no money, never changes
 \`settled\` or any money field, and works only on your own settled
 payments \u2014 another agent's payment is refused. A re-report replaces your
-earlier verdict; the receipt then carries it beside the payment, so the
-owner does not read a junk delivery as a success.
+earlier verdict; the receipt then carries it beside the payment, so a junk
+delivery does not read as a success.
 ### Relay a delivered code or credential to the owner \u2014 immediately, verbatim
 
 If a merchant response carries what the user PAID FOR \u2014 a redemption code, gift
@@ -5664,7 +6047,7 @@ async function discoverMerchantMcpUrl(inputUrl, egress) {
     } catch (err) {
       if (err instanceof MerchantEgressRefusedError || err instanceof MerchantEgressResponseCapError) throw err;
       if (isBodyPhaseTimeout(err)) {
-        throw new chunkH37YVYZA_cjs.MerchantTimeoutError(`Merchant discovery document read timed out after ${timeoutMs}ms.`);
+        throw new chunkZA3NOSO2_cjs.MerchantTimeoutError(`Merchant discovery document read timed out after ${timeoutMs}ms.`);
       }
       continue;
     }
@@ -5683,499 +6066,507 @@ function sameUrl(a, b) {
 
 Object.defineProperty(exports, "DEFAULT_NEXT_TOOL_BY_ACTION", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.DEFAULT_NEXT_TOOL_BY_ACTION; }
+  get: function () { return chunkV2ODMLDD_cjs.DEFAULT_NEXT_TOOL_BY_ACTION; }
 });
 Object.defineProperty(exports, "ERC7710_ASSET_TRANSFER_METHOD", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.ERC7710_ASSET_TRANSFER_METHOD; }
+  get: function () { return chunkV2ODMLDD_cjs.ERC7710_ASSET_TRANSFER_METHOD; }
 });
 Object.defineProperty(exports, "HAVEN_CLIENT_HEADER", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.HAVEN_CLIENT_HEADER; }
+  get: function () { return chunkV2ODMLDD_cjs.HAVEN_CLIENT_HEADER; }
 });
 Object.defineProperty(exports, "HAVEN_MINIMUM_NODE_VERSION", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.HAVEN_MINIMUM_NODE_VERSION; }
+  get: function () { return chunkV2ODMLDD_cjs.HAVEN_MINIMUM_NODE_VERSION; }
 });
 Object.defineProperty(exports, "HavenTypedDataRefusedError", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.HavenTypedDataRefusedError; }
+  get: function () { return chunkV2ODMLDD_cjs.HavenTypedDataRefusedError; }
 });
 Object.defineProperty(exports, "MAX_TASK_BUDGET_TTL_SECONDS", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
+  get: function () { return chunkV2ODMLDD_cjs.MAX_TASK_BUDGET_TTL_SECONDS; }
 });
 Object.defineProperty(exports, "NEXT_TOOL_SERVER_NAMES", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.NEXT_TOOL_SERVER_NAMES; }
+  get: function () { return chunkV2ODMLDD_cjs.NEXT_TOOL_SERVER_NAMES; }
 });
 Object.defineProperty(exports, "NEXT_TOOL_SERVER_ROLES", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.NEXT_TOOL_SERVER_ROLES; }
+  get: function () { return chunkV2ODMLDD_cjs.NEXT_TOOL_SERVER_ROLES; }
 });
 Object.defineProperty(exports, "SDK_CLIENT_IDENTITY", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SDK_CLIENT_IDENTITY; }
+  get: function () { return chunkV2ODMLDD_cjs.SDK_CLIENT_IDENTITY; }
 });
 Object.defineProperty(exports, "SDK_VERSION", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SDK_VERSION; }
+  get: function () { return chunkV2ODMLDD_cjs.SDK_VERSION; }
 });
 Object.defineProperty(exports, "SWEEP_BASE_CHAIN_ID", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SWEEP_BASE_CHAIN_ID; }
+  get: function () { return chunkV2ODMLDD_cjs.SWEEP_BASE_CHAIN_ID; }
 });
 Object.defineProperty(exports, "SWEEP_BASE_SEPOLIA_CHAIN_ID", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SWEEP_BASE_SEPOLIA_CHAIN_ID; }
+  get: function () { return chunkV2ODMLDD_cjs.SWEEP_BASE_SEPOLIA_CHAIN_ID; }
 });
 Object.defineProperty(exports, "SWEEP_BASE_SEPOLIA_USDC_ADDRESS", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SWEEP_BASE_SEPOLIA_USDC_ADDRESS; }
+  get: function () { return chunkV2ODMLDD_cjs.SWEEP_BASE_SEPOLIA_USDC_ADDRESS; }
 });
 Object.defineProperty(exports, "SWEEP_BASE_USDC_ADDRESS", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.SWEEP_BASE_USDC_ADDRESS; }
+  get: function () { return chunkV2ODMLDD_cjs.SWEEP_BASE_USDC_ADDRESS; }
 });
 Object.defineProperty(exports, "TRANSFER_WITH_AUTHORIZATION_TYPES", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.TRANSFER_WITH_AUTHORIZATION_TYPES; }
+  get: function () { return chunkV2ODMLDD_cjs.TRANSFER_WITH_AUTHORIZATION_TYPES; }
 });
 Object.defineProperty(exports, "TYPED_DATA_NOT_ALLOWED", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.TYPED_DATA_NOT_ALLOWED; }
+  get: function () { return chunkV2ODMLDD_cjs.TYPED_DATA_NOT_ALLOWED; }
 });
 Object.defineProperty(exports, "X402PaymentHeaderValidationError", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402PaymentHeaderValidationError; }
+  get: function () { return chunkV2ODMLDD_cjs.X402PaymentHeaderValidationError; }
 });
 Object.defineProperty(exports, "X402_LEGACY_PAYMENT_HEADER_NAME", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_LEGACY_PAYMENT_HEADER_NAME; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_LEGACY_PAYMENT_HEADER_NAME; }
 });
 Object.defineProperty(exports, "X402_MAX_AUTHORIZATION_WINDOW_SECONDS", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_MAX_AUTHORIZATION_WINDOW_SECONDS; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_MAX_AUTHORIZATION_WINDOW_SECONDS; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_HEADER_NAME", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_PAYMENT_HEADER_NAME; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_PAYMENT_HEADER_NAME; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_HEADER_NAMES_SENT", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_PAYMENT_HEADER_NAMES_SENT; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_PAYMENT_HEADER_NAMES_SENT; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_NONCE_TAG", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_PAYMENT_NONCE_TAG; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_PAYMENT_NONCE_TAG; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_REQUIRED_HEADER_NAME", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_PAYMENT_REQUIRED_HEADER_NAME; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_PAYMENT_REQUIRED_HEADER_NAME; }
 });
 Object.defineProperty(exports, "X402_PAYMENT_RESPONSE_HEADER_NAME", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_PAYMENT_RESPONSE_HEADER_NAME; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_PAYMENT_RESPONSE_HEADER_NAME; }
 });
 Object.defineProperty(exports, "X402_SETTLEMENT_FORWARD_MARGIN_SECONDS", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.X402_SETTLEMENT_FORWARD_MARGIN_SECONDS; }
+  get: function () { return chunkV2ODMLDD_cjs.X402_SETTLEMENT_FORWARD_MARGIN_SECONDS; }
 });
 Object.defineProperty(exports, "assertBoundDirectPaymentUserOp", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.assertBoundDirectPaymentUserOp; }
+  get: function () { return chunkV2ODMLDD_cjs.assertBoundDirectPaymentUserOp; }
 });
 Object.defineProperty(exports, "assertOwnTaskBudgetCloseUserOp", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.assertOwnTaskBudgetCloseUserOp; }
+  get: function () { return chunkV2ODMLDD_cjs.assertOwnTaskBudgetCloseUserOp; }
 });
 Object.defineProperty(exports, "assertOwnTaskChild", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.assertOwnTaskChild; }
+  get: function () { return chunkV2ODMLDD_cjs.assertOwnTaskChild; }
 });
 Object.defineProperty(exports, "buildSweepAuthorizationMessage", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.buildSweepAuthorizationMessage; }
+  get: function () { return chunkV2ODMLDD_cjs.buildSweepAuthorizationMessage; }
 });
 Object.defineProperty(exports, "buildSweepTypedData", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.buildSweepTypedData; }
+  get: function () { return chunkV2ODMLDD_cjs.buildSweepTypedData; }
 });
 Object.defineProperty(exports, "buildX402ExpectedMessage", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.buildX402ExpectedMessage; }
+  get: function () { return chunkV2ODMLDD_cjs.buildX402ExpectedMessage; }
 });
 Object.defineProperty(exports, "compareNodeVersions", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.compareNodeVersions; }
+  get: function () { return chunkV2ODMLDD_cjs.compareNodeVersions; }
 });
 Object.defineProperty(exports, "createNextStepBuilder", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.createNextStepBuilder; }
+  get: function () { return chunkV2ODMLDD_cjs.createNextStepBuilder; }
 });
 Object.defineProperty(exports, "decodeBase64Json", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.decodeBase64Json; }
+  get: function () { return chunkV2ODMLDD_cjs.decodeBase64Json; }
 });
 Object.defineProperty(exports, "decodeBase64Utf8", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.decodeBase64Utf8; }
+  get: function () { return chunkV2ODMLDD_cjs.decodeBase64Utf8; }
 });
 Object.defineProperty(exports, "defaultNextToolFor", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.defaultNextToolFor; }
+  get: function () { return chunkV2ODMLDD_cjs.defaultNextToolFor; }
 });
 Object.defineProperty(exports, "deriveX402PaymentNonce", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.deriveX402PaymentNonce; }
+  get: function () { return chunkV2ODMLDD_cjs.deriveX402PaymentNonce; }
 });
 Object.defineProperty(exports, "encodeBase64Json", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.encodeBase64Json; }
+  get: function () { return chunkV2ODMLDD_cjs.encodeBase64Json; }
 });
 Object.defineProperty(exports, "encodeBase64Utf8", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.encodeBase64Utf8; }
+  get: function () { return chunkV2ODMLDD_cjs.encodeBase64Utf8; }
 });
 Object.defineProperty(exports, "encodePaymentProof", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.encodePaymentProof; }
+  get: function () { return chunkV2ODMLDD_cjs.encodePaymentProof; }
 });
 Object.defineProperty(exports, "hashDelegation", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.hashDelegation; }
+  get: function () { return chunkV2ODMLDD_cjs.hashDelegation; }
 });
 Object.defineProperty(exports, "havenClientIdentity", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.havenClientIdentity; }
+  get: function () { return chunkV2ODMLDD_cjs.havenClientIdentity; }
 });
 Object.defineProperty(exports, "isErc7710Option", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.isErc7710Option; }
+  get: function () { return chunkV2ODMLDD_cjs.isErc7710Option; }
 });
 Object.defineProperty(exports, "isSupportedNodeVersion", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.isSupportedNodeVersion; }
+  get: function () { return chunkV2ODMLDD_cjs.isSupportedNodeVersion; }
 });
 Object.defineProperty(exports, "isSweepableChain", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.isSweepableChain; }
+  get: function () { return chunkV2ODMLDD_cjs.isSweepableChain; }
 });
 Object.defineProperty(exports, "isTaskChildTypedData", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.isTaskChildTypedData; }
+  get: function () { return chunkV2ODMLDD_cjs.isTaskChildTypedData; }
 });
 Object.defineProperty(exports, "normalizePaymentRequired", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.normalizePaymentRequired; }
+  get: function () { return chunkV2ODMLDD_cjs.normalizePaymentRequired; }
 });
 Object.defineProperty(exports, "parseNextTool", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.parseNextTool; }
+  get: function () { return chunkV2ODMLDD_cjs.parseNextTool; }
 });
 Object.defineProperty(exports, "parsePaymentRequired", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.parsePaymentRequired; }
+  get: function () { return chunkV2ODMLDD_cjs.parsePaymentRequired; }
 });
 Object.defineProperty(exports, "parsePaymentRequiredResponse", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.parsePaymentRequiredResponse; }
+  get: function () { return chunkV2ODMLDD_cjs.parsePaymentRequiredResponse; }
 });
 Object.defineProperty(exports, "readClientUpdate", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.readClientUpdate; }
+  get: function () { return chunkV2ODMLDD_cjs.readClientUpdate; }
 });
 Object.defineProperty(exports, "renderNextTool", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.renderNextTool; }
+  get: function () { return chunkV2ODMLDD_cjs.renderNextTool; }
 });
 Object.defineProperty(exports, "resolveTokenBySymbol", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.resolveTokenBySymbol; }
+  get: function () { return chunkV2ODMLDD_cjs.resolveTokenBySymbol; }
 });
 Object.defineProperty(exports, "resolveTokenFromAddress", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.resolveTokenFromAddress; }
+  get: function () { return chunkV2ODMLDD_cjs.resolveTokenFromAddress; }
 });
 Object.defineProperty(exports, "selectErc7710PaymentOption", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.selectErc7710PaymentOption; }
+  get: function () { return chunkV2ODMLDD_cjs.selectErc7710PaymentOption; }
 });
 Object.defineProperty(exports, "selectPaymentOption", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.selectPaymentOption; }
+  get: function () { return chunkV2ODMLDD_cjs.selectPaymentOption; }
 });
 Object.defineProperty(exports, "selectStandardPaymentOption", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.selectStandardPaymentOption; }
+  get: function () { return chunkV2ODMLDD_cjs.selectStandardPaymentOption; }
 });
 Object.defineProperty(exports, "selectX402SettlementScheme", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.selectX402SettlementScheme; }
+  get: function () { return chunkV2ODMLDD_cjs.selectX402SettlementScheme; }
 });
 Object.defineProperty(exports, "sweepUsdcAddress", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.sweepUsdcAddress; }
+  get: function () { return chunkV2ODMLDD_cjs.sweepUsdcAddress; }
 });
 Object.defineProperty(exports, "sweepUsdcDomain", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.sweepUsdcDomain; }
+  get: function () { return chunkV2ODMLDD_cjs.sweepUsdcDomain; }
 });
 Object.defineProperty(exports, "toStandardPaymentRequirements", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.toStandardPaymentRequirements; }
+  get: function () { return chunkV2ODMLDD_cjs.toStandardPaymentRequirements; }
 });
 Object.defineProperty(exports, "unsupportedNodeVersionMessage", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.unsupportedNodeVersionMessage; }
+  get: function () { return chunkV2ODMLDD_cjs.unsupportedNodeVersionMessage; }
 });
 Object.defineProperty(exports, "validateStandardX402PaymentHeader", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.validateStandardX402PaymentHeader; }
+  get: function () { return chunkV2ODMLDD_cjs.validateStandardX402PaymentHeader; }
 });
 Object.defineProperty(exports, "x402AssetTransferMethod", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402AssetTransferMethod; }
+  get: function () { return chunkV2ODMLDD_cjs.x402AssetTransferMethod; }
 });
 Object.defineProperty(exports, "x402AuthorizationAmount", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402AuthorizationAmount; }
+  get: function () { return chunkV2ODMLDD_cjs.x402AuthorizationAmount; }
 });
 Object.defineProperty(exports, "x402FacilitatorAddresses", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402FacilitatorAddresses; }
+  get: function () { return chunkV2ODMLDD_cjs.x402FacilitatorAddresses; }
 });
 Object.defineProperty(exports, "x402PaymentHeaderNamesFor", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402PaymentHeaderNamesFor; }
+  get: function () { return chunkV2ODMLDD_cjs.x402PaymentHeaderNamesFor; }
 });
 Object.defineProperty(exports, "x402RetryHeadersFor", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402RetryHeadersFor; }
+  get: function () { return chunkV2ODMLDD_cjs.x402RetryHeadersFor; }
 });
 Object.defineProperty(exports, "x402V2PaymentEnvelope", {
   enumerable: true,
-  get: function () { return chunk22FJ4JQO_cjs.x402V2PaymentEnvelope; }
+  get: function () { return chunkV2ODMLDD_cjs.x402V2PaymentEnvelope; }
 });
 Object.defineProperty(exports, "RECEIPT_VERSION", {
   enumerable: true,
-  get: function () { return chunk6LEXYQ7J_cjs.RECEIPT_VERSION; }
+  get: function () { return chunk4JTLJVBS_cjs.RECEIPT_VERSION; }
 });
 Object.defineProperty(exports, "verifyPaymentReceipt", {
   enumerable: true,
-  get: function () { return chunk6LEXYQ7J_cjs.verifyPaymentReceipt; }
+  get: function () { return chunk4JTLJVBS_cjs.verifyPaymentReceipt; }
 });
 Object.defineProperty(exports, "AGENT_PAYMENT_FAILURE_CODE_VALUES", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AGENT_PAYMENT_FAILURE_CODE_VALUES; }
+  get: function () { return chunkZA3NOSO2_cjs.AGENT_PAYMENT_FAILURE_CODE_VALUES; }
 });
 Object.defineProperty(exports, "AGENT_PAYMENT_NEXT_ACTION_VALUES", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AGENT_PAYMENT_NEXT_ACTION_VALUES; }
+  get: function () { return chunkZA3NOSO2_cjs.AGENT_PAYMENT_NEXT_ACTION_VALUES; }
 });
 Object.defineProperty(exports, "AGENT_PAYMENT_PHASE_VALUES", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AGENT_PAYMENT_PHASE_VALUES; }
+  get: function () { return chunkZA3NOSO2_cjs.AGENT_PAYMENT_PHASE_VALUES; }
 });
 Object.defineProperty(exports, "AGENT_PAYMENT_RAIL_VALUES", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AGENT_PAYMENT_RAIL_VALUES; }
+  get: function () { return chunkZA3NOSO2_cjs.AGENT_PAYMENT_RAIL_VALUES; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCode", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentFailureCode; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentFailureCode; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCodeDescriptions", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentFailureCodeDescriptions; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentFailureCodeDescriptions; }
 });
 Object.defineProperty(exports, "AgentPaymentFailureCodeSchema", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentFailureCodeSchema; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentFailureCodeSchema; }
 });
 Object.defineProperty(exports, "AgentPaymentNextAction", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentNextAction; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentNextAction; }
 });
 Object.defineProperty(exports, "AgentPaymentNextActionDescriptions", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentNextActionDescriptions; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentNextActionDescriptions; }
 });
 Object.defineProperty(exports, "AgentPaymentNextActionSchema", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentNextActionSchema; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentNextActionSchema; }
 });
 Object.defineProperty(exports, "AgentPaymentPhase", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentPhase; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentPhase; }
 });
 Object.defineProperty(exports, "AgentPaymentPhaseDescriptions", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentPhaseDescriptions; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentPhaseDescriptions; }
 });
 Object.defineProperty(exports, "AgentPaymentPhaseSchema", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentPhaseSchema; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentPhaseSchema; }
 });
 Object.defineProperty(exports, "AgentPaymentRail", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentRail; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentRail; }
 });
 Object.defineProperty(exports, "AgentPaymentRailDescriptions", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentRailDescriptions; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentRailDescriptions; }
 });
 Object.defineProperty(exports, "AgentPaymentRailSchema", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentRailSchema; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentRailSchema; }
 });
 Object.defineProperty(exports, "AgentPaymentWarningCode", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.AgentPaymentWarningCode; }
+  get: function () { return chunkZA3NOSO2_cjs.AgentPaymentWarningCode; }
 });
 Object.defineProperty(exports, "CONNECTOR_PACKAGE_NAME", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.CONNECTOR_PACKAGE_NAME; }
+  get: function () { return chunkZA3NOSO2_cjs.CONNECTOR_PACKAGE_NAME; }
 });
 Object.defineProperty(exports, "DEFAULT_CONFIRMATION_TIMEOUT_MS", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS; }
+  get: function () { return chunkZA3NOSO2_cjs.DEFAULT_CONFIRMATION_TIMEOUT_MS; }
 });
 Object.defineProperty(exports, "DIRECT_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunkZA3NOSO2_cjs.DIRECT_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "ENTRY_POINT_V07", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.ENTRY_POINT_V07; }
+  get: function () { return chunkZA3NOSO2_cjs.ENTRY_POINT_V07; }
+});
+Object.defineProperty(exports, "FundingConfirmationUnknownError", {
+  enumerable: true,
+  get: function () { return chunkZA3NOSO2_cjs.FundingConfirmationUnknownError; }
+});
+Object.defineProperty(exports, "FundingRevertedError", {
+  enumerable: true,
+  get: function () { return chunkZA3NOSO2_cjs.FundingRevertedError; }
 });
 Object.defineProperty(exports, "HAVEN_CONNECTOR_CHANNEL", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HAVEN_CONNECTOR_CHANNEL; }
+  get: function () { return chunkZA3NOSO2_cjs.HAVEN_CONNECTOR_CHANNEL; }
 });
 Object.defineProperty(exports, "HYBRID_DELEGATOR_DOMAIN_NAME", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HYBRID_DELEGATOR_DOMAIN_NAME; }
+  get: function () { return chunkZA3NOSO2_cjs.HYBRID_DELEGATOR_DOMAIN_NAME; }
 });
 Object.defineProperty(exports, "HYBRID_DELEGATOR_DOMAIN_VERSION", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HYBRID_DELEGATOR_DOMAIN_VERSION; }
+  get: function () { return chunkZA3NOSO2_cjs.HYBRID_DELEGATOR_DOMAIN_VERSION; }
 });
 Object.defineProperty(exports, "HavenApiError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenApiError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenApiError; }
 });
 Object.defineProperty(exports, "HavenError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenError; }
 });
 Object.defineProperty(exports, "HavenPaymentStateError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenPaymentStateError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenPaymentStateError; }
 });
 Object.defineProperty(exports, "HavenSigningError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenSigningError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenSigningError; }
 });
 Object.defineProperty(exports, "HavenTimeoutError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenTimeoutError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenTimeoutError; }
 });
 Object.defineProperty(exports, "HavenUnsupportedSignerVersionError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenUnsupportedSignerVersionError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenUnsupportedSignerVersionError; }
 });
 Object.defineProperty(exports, "HavenUserOpBindingError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenUserOpBindingError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenUserOpBindingError; }
 });
 Object.defineProperty(exports, "HavenZeroSettlementHashError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.HavenZeroSettlementHashError; }
+  get: function () { return chunkZA3NOSO2_cjs.HavenZeroSettlementHashError; }
 });
 Object.defineProperty(exports, "MerchantTimeoutError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.MerchantTimeoutError; }
+  get: function () { return chunkZA3NOSO2_cjs.MerchantTimeoutError; }
 });
 Object.defineProperty(exports, "PACKED_USER_OPERATION_FIELDS", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.PACKED_USER_OPERATION_FIELDS; }
+  get: function () { return chunkZA3NOSO2_cjs.PACKED_USER_OPERATION_FIELDS; }
 });
 Object.defineProperty(exports, "ROOT_AUTHORITY", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.ROOT_AUTHORITY; }
+  get: function () { return chunkZA3NOSO2_cjs.ROOT_AUTHORITY; }
 });
 Object.defineProperty(exports, "SIGNER_UPDATE_FALLBACK", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.SIGNER_UPDATE_FALLBACK; }
+  get: function () { return chunkZA3NOSO2_cjs.SIGNER_UPDATE_FALLBACK; }
 });
 Object.defineProperty(exports, "SignerRefusalCode", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.SignerRefusalCode; }
+  get: function () { return chunkZA3NOSO2_cjs.SignerRefusalCode; }
 });
 Object.defineProperty(exports, "TASK_SIGN_CONTEXT_VERSION", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.TASK_SIGN_CONTEXT_VERSION; }
+  get: function () { return chunkZA3NOSO2_cjs.TASK_SIGN_CONTEXT_VERSION; }
 });
 Object.defineProperty(exports, "X402AlreadySettledError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.X402AlreadySettledError; }
+  get: function () { return chunkZA3NOSO2_cjs.X402AlreadySettledError; }
 });
 Object.defineProperty(exports, "X402Erc7710AlreadySettledError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.X402Erc7710AlreadySettledError; }
+  get: function () { return chunkZA3NOSO2_cjs.X402Erc7710AlreadySettledError; }
 });
 Object.defineProperty(exports, "X402TaskBudgetMismatchError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.X402TaskBudgetMismatchError; }
+  get: function () { return chunkZA3NOSO2_cjs.X402TaskBudgetMismatchError; }
 });
 Object.defineProperty(exports, "X402UnexpectedStatusError", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.X402UnexpectedStatusError; }
+  get: function () { return chunkZA3NOSO2_cjs.X402UnexpectedStatusError; }
 });
 Object.defineProperty(exports, "assertUserOpTypedDataBinding", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.assertUserOpTypedDataBinding; }
+  get: function () { return chunkZA3NOSO2_cjs.assertUserOpTypedDataBinding; }
 });
 Object.defineProperty(exports, "connectorRerunCommand", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.connectorRerunCommand; }
+  get: function () { return chunkZA3NOSO2_cjs.connectorRerunCommand; }
 });
 Object.defineProperty(exports, "connectorSpec", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.connectorSpec; }
+  get: function () { return chunkZA3NOSO2_cjs.connectorSpec; }
 });
 Object.defineProperty(exports, "connectorUpgradeCommand", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.connectorUpgradeCommand; }
+  get: function () { return chunkZA3NOSO2_cjs.connectorUpgradeCommand; }
 });
 Object.defineProperty(exports, "deriveDelegateAccountAddress", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.deriveDelegateAccountAddress; }
+  get: function () { return chunkZA3NOSO2_cjs.deriveDelegateAccountAddress; }
 });
 Object.defineProperty(exports, "isConnectorChannel", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.isConnectorChannel; }
+  get: function () { return chunkZA3NOSO2_cjs.isConnectorChannel; }
 });
 Object.defineProperty(exports, "isPackedUserOperationTypedData", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.isPackedUserOperationTypedData; }
+  get: function () { return chunkZA3NOSO2_cjs.isPackedUserOperationTypedData; }
 });
 Object.defineProperty(exports, "packedUserOperationHash", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.packedUserOperationHash; }
+  get: function () { return chunkZA3NOSO2_cjs.packedUserOperationHash; }
 });
 Object.defineProperty(exports, "resolveConnectorChannel", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.resolveConnectorChannel; }
+  get: function () { return chunkZA3NOSO2_cjs.resolveConnectorChannel; }
 });
 Object.defineProperty(exports, "signerUpdateFallback", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.signerUpdateFallback; }
+  get: function () { return chunkZA3NOSO2_cjs.signerUpdateFallback; }
 });
 Object.defineProperty(exports, "verifySettlementChild", {
   enumerable: true,
-  get: function () { return chunkH37YVYZA_cjs.verifySettlementChild; }
+  get: function () { return chunkZA3NOSO2_cjs.verifySettlementChild; }
 });
 exports.AGENT_APPROVAL_RELAY_JSON_SENTENCE = AGENT_APPROVAL_RELAY_JSON_SENTENCE;
 exports.AGENT_APPROVAL_RELAY_PROSE_SENTENCE = AGENT_APPROVAL_RELAY_PROSE_SENTENCE;