@haven_ai/sdk 0.5.0-alpha.1 → 0.6.0-alpha.0

package/dist/index.js

@@ -1,7 +1,7 @@
-import { selectStandardPaymentOption, buildX402IdempotencyKey, x402AuthorizationAmount, assertBoundDirectPaymentUserOp, HavenTypedDataRefusedError, assertOwnSettlementChild, parsePaymentRequiredResponse, x402PaymentHeaderNamesSent, SDK_CLIENT_IDENTITY, readClientUpdate, HAVEN_CLIENT_HEADER, resolveTokenFromAddress, isSweepableChain, sweepUsdcAddress, x402PaymentHeaderNamesFor, X402_PAYMENT_HEADER_NAMES, toStandardPaymentRequirements, decodeBase64Json, encodeBase64Json, x402V2PaymentEnvelope, selectX402SettlementScheme, selectErc7710PaymentOption, isErc7710Option, x402AssetTransferMethod, normalizePaymentRequired } from './chunk-KQ7JXKTV.js';
-export { DEFAULT_NEXT_TOOL_BY_ACTION, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, SDK_CLIENT_IDENTITY, SDK_VERSION, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, TRANSFER_WITH_AUTHORIZATION_TYPES, TYPED_DATA_NOT_ALLOWED, X402PaymentHeaderValidationError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, assertBoundDirectPaymentUserOp, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, compareNodeVersions, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, havenClientIdentity, isErc7710Option, isSupportedNodeVersion, isSweepableChain, normalizePaymentRequired, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, readClientUpdate, renderNextTool, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402V2PaymentEnvelope } from './chunk-KQ7JXKTV.js';
-import { HavenSigningError, HavenError, DEFAULT_CONFIRMATION_TIMEOUT_MS, HavenApiError, assertUserOpTypedDataBinding, AgentPaymentRail, AgentPaymentPhase, HavenTimeoutError, X402UnexpectedStatusError, X402AlreadySettledError, AgentPaymentWarningCode, MerchantTimeoutError, AgentPaymentNextAction, HavenPaymentStateError, HavenZeroSettlementHashError, chainIdForNetwork } from './chunk-GLNG2GF7.js';
-export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_DOMAIN_NAME, HYBRID_DELEGATOR_DOMAIN_VERSION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, HavenZeroSettlementHashError, MerchantTimeoutError, PACKED_USER_OPERATION_FIELDS, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SignerRefusalCode, X402AlreadySettledError, X402UnexpectedStatusError, assertUserOpTypedDataBinding, connectorRerunCommand, connectorSpec, deriveDelegateAccountAddress, isConnectorChannel, isPackedUserOperationTypedData, packedUserOperationHash, resolveConnectorChannel, signerUpdateFallback, verifySettlementChild } from './chunk-GLNG2GF7.js';
+import { selectStandardPaymentOption, buildX402IdempotencyKey, x402AuthorizationAmount, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, HavenTypedDataRefusedError, assertOwnSettlementChild, parsePaymentRequiredResponse, x402PaymentHeaderNamesSent, SDK_CLIENT_IDENTITY, readClientUpdate, HAVEN_CLIENT_HEADER, resolveTokenFromAddress, isSweepableChain, sweepUsdcAddress, x402PaymentHeaderNamesFor, X402_PAYMENT_HEADER_NAMES, toStandardPaymentRequirements, decodeBase64Json, encodeBase64Json, x402V2PaymentEnvelope, selectX402SettlementScheme, selectErc7710PaymentOption, isErc7710Option, x402AssetTransferMethod, normalizePaymentRequired } from './chunk-3WSEX3GW.js';
+export { DEFAULT_NEXT_TOOL_BY_ACTION, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, MAX_TASK_BUDGET_TTL_SECONDS, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, SDK_CLIENT_IDENTITY, SDK_VERSION, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, TRANSFER_WITH_AUTHORIZATION_TYPES, TYPED_DATA_NOT_ALLOWED, X402PaymentHeaderValidationError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, assertBoundDirectPaymentUserOp, assertOwnTaskBudgetCloseUserOp, assertOwnTaskChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, compareNodeVersions, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, hashDelegation, havenClientIdentity, isErc7710Option, isSupportedNodeVersion, isSweepableChain, isTaskChildTypedData, normalizePaymentRequired, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, readClientUpdate, renderNextTool, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402V2PaymentEnvelope } from './chunk-3WSEX3GW.js';
+import { HavenSigningError, HavenError, DEFAULT_CONFIRMATION_TIMEOUT_MS, HavenApiError, assertUserOpTypedDataBinding, AgentPaymentRail, AgentPaymentPhase, HavenTimeoutError, X402UnexpectedStatusError, X402AlreadySettledError, AgentPaymentWarningCode, MerchantTimeoutError, AgentPaymentNextAction, HavenPaymentStateError, HavenZeroSettlementHashError, chainIdForNetwork } from './chunk-63GPTEEY.js';
+export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_DOMAIN_NAME, HYBRID_DELEGATOR_DOMAIN_VERSION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, HavenZeroSettlementHashError, MerchantTimeoutError, PACKED_USER_OPERATION_FIELDS, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SignerRefusalCode, X402AlreadySettledError, X402UnexpectedStatusError, assertUserOpTypedDataBinding, connectorRerunCommand, connectorSpec, deriveDelegateAccountAddress, isConnectorChannel, isPackedUserOperationTypedData, packedUserOperationHash, resolveConnectorChannel, signerUpdateFallback, verifySettlementChild } from './chunk-63GPTEEY.js';
 import { hashTypedData } from 'viem';
 import { ethers } from 'ethers';
 import { AsyncLocalStorage } from 'async_hooks';
@@ -232,17 +232,13 @@ function mapPaymentReceipt(raw) {
     id: raw.id,
     paymentId: raw.payment_id,
     source: raw.rail,
-    rail: raw.rail,
     paymentProofStatus: raw.proof_status,
-    proofStatus: raw.proof_status,
     txHash: raw.tx_hash,
     fundingTxHash: raw.funding_tx_hash ?? null,
     settlementTxHash: raw.settlement_tx_hash ?? null,
     chainId: raw.chain_id,
     x402ResourceUrl: raw.resource_url,
-    resourceUrl: raw.resource_url,
     x402MerchantAddress: raw.merchant_address,
-    merchantAddress: raw.merchant_address,
     payerAddress: raw.payer_address,
     parties: mapParties(raw.parties),
     settlementAddress: raw.settlement_address,
@@ -883,6 +879,39 @@ function formatRemainingDisplay(tokenAddress, tokenSymbol, remainingAtomic) {
   const token = resolveTokenFromAddress(tokenAddress);
   return token ? `${formatAtomicAmount(safeBigInt(remainingAtomic), token.decimals)} ${tokenSymbol}` : `${remainingAtomic} ${tokenSymbol} (atomic; unknown decimals)`;
 }
+function mapTaskBudget(raw) {
+  return {
+    id: raw.id,
+    agentId: raw.agent_id,
+    chainId: raw.chain_id,
+    tokenAddress: raw.token_address,
+    recipientAddress: raw.recipient_address,
+    parentDelegationHash: raw.parent_delegation_hash,
+    delegationHash: raw.delegation_hash,
+    label: raw.label,
+    maxAtomic: raw.max_atomic,
+    status: raw.status,
+    expiresAt: raw.expires_at,
+    isExpired: raw.is_expired,
+    createdAt: raw.created_at,
+    openedAt: raw.opened_at,
+    closedAt: raw.closed_at,
+    closeTxHash: raw.close_tx_hash
+  };
+}
+function summarizeTaskBudget(taskBudget) {
+  const token = resolveTokenFromAddress(taskBudget.tokenAddress);
+  const maxDisplay = token ? `${formatAtomicAmount(safeBigInt(taskBudget.maxAtomic), token.decimals)} ${token.symbol}` : `${taskBudget.maxAtomic} (atomic; unknown decimals)`;
+  return {
+    id: taskBudget.id,
+    label: taskBudget.label,
+    tokenAddress: taskBudget.tokenAddress,
+    maxAtomic: taskBudget.maxAtomic,
+    maxDisplay,
+    recipientAddress: taskBudget.recipientAddress,
+    expiresAt: taskBudget.expiresAt
+  };
+}
 var AccountReads = class {
   transport;
   getPaymentStatus;
@@ -902,7 +931,11 @@ var AccountReads = class {
     return request;
   }
   async getAgentSummary() {
-    const [agent, allowanceSummary] = await Promise.all([this.getAgent(), this.getAllowances()]);
+    const [agent, allowanceSummary, taskBudgets] = await Promise.all([
+      this.getAgent(),
+      this.getAllowances(),
+      this.listOpenTaskBudgetsSummary()
+    ]);
     const allowances = allowanceSummary.allowances.map((allowance) => {
       return {
         id: allowance.id,
@@ -916,7 +949,30 @@ var AccountReads = class {
       };
     });
     const readiness = deriveReadiness(agent.status, allowances);
-    return { ...agent, readiness, spend_authority_readiness: readiness, allowances };
+    return { ...agent, readiness, spend_authority_readiness: readiness, allowances, taskBudgets };
+  }
+  /**
+   * #3329: `GET /task-budgets?status=open`, mapped to the condensed summary
+   * row `getAgentSummary()` carries. Fails SOFT per the #3093 rule (default
+   * every array wire key to `[]` so an absent/malformed key degrades instead
+   * of taking the route down): a 404 (a backend that predates #3329's
+   * route), ANY other transport error, an undefined/null body, or a missing
+   * or non-array `task_budgets` key all return `[]` rather than throwing —
+   * `getAgentSummary`'s identity + readiness + allowances fields are what
+   * callers depend on, and this read must never be why the whole summary
+   * fails.
+   */
+  async listOpenTaskBudgetsSummary() {
+    try {
+      const raw = await this.transport.get(
+        "/task-budgets?status=open"
+      );
+      const rows = raw?.task_budgets;
+      if (!Array.isArray(rows)) return [];
+      return rows.map((row) => summarizeTaskBudget(mapTaskBudget(row)));
+    } catch {
+      return [];
+    }
   }
   async getAllowances() {
     const raw = await this.transport.get("/machine-payments/allowances");
@@ -1446,7 +1502,7 @@ var X402FundingLeg = class {
     }
   }
   // ── Authorization ────────────────────────────────────────────────
-  async authorize(paymentRequired, option, idempotencyKey) {
+  async authorize(paymentRequired, option, idempotencyKey, taskBudgetId) {
     const raw = await this.post("/x402", {
       url: paymentRequired.resource.url,
       payTo: this.delegateAddress,
@@ -1459,7 +1515,10 @@ var X402FundingLeg = class {
       // #1360: same explicit funding-leg declaration as createX402Intent —
       // this local-key path derives payTo from the key (never stale), but the
       // declaration keeps both writers of the 3009 shape loud-by-default.
-      settlementScheme: "eip3009"
+      settlementScheme: "eip3009",
+      // #3329: `/x402` bodies are camelCase (`X402AuthorizeRequest`) — do not
+      // switch this to `task_budget_id`, which is only the `POST /payments` key.
+      ...taskBudgetId ? { taskBudgetId } : {}
     });
     const state = paymentStateFromRaw("x402 payment", raw);
     const executedReplay = raw.success && raw.tx_hash ? "idempotency-collision" : state?.nextAction === AgentPaymentNextAction.RetryOriginalX402Request ? "approval-resume" : null;
@@ -1494,7 +1553,10 @@ var X402FundingLeg = class {
     if (!raw.sign_data?.hash) {
       throw new HavenApiError("No sign_hash returned from x402/authorize", 500, raw);
     }
-    const sig = await this.signForData(raw.sign_data);
+    const sig = await this.signForData(raw.sign_data, {
+      asset: option.asset,
+      amount: x402AuthorizationAmount(option)
+    });
     const execResult = await this.post(
       `/payments/${raw.payment_id}/sign`,
       { signature: sig }
@@ -1770,7 +1832,10 @@ var X402Erc7710 = class {
       ...selection.facilitatorAddresses ? { facilitatorAddresses: selection.facilitatorAddresses } : {},
       // #1307/#1547: persisted so the settle leg can rehydrate the merchant
       // call by payment_id on this scheme too, not only on the 3009 bridge.
-      ...options.mcpCallContext ? { mcpCallContext: options.mcpCallContext } : {}
+      ...options.mcpCallContext ? { mcpCallContext: options.mcpCallContext } : {},
+      // #3329: `/x402` bodies are camelCase (`X402AuthorizeRequest`) — do not
+      // switch this to `task_budget_id`, which is only the `POST /payments` key.
+      ...options.taskBudgetId ? { taskBudgetId: options.taskBudgetId } : {}
     });
     if (!raw.payment_id) {
       throw new HavenApiError("No payment_id returned from x402/authorize", 500, raw);
@@ -2416,7 +2481,7 @@ var HavenClient = class {
       x402Wallet: this.x402Wallet,
       chainRpcs: this.chainRpcs,
       post: (path, body) => this.post(path, body),
-      signForData: (signData) => this.signForData(signData),
+      signForData: (signData, fundingExpectation) => this.signForData(signData, void 0, fundingExpectation),
       assertSignableAuthorizationState: (label, raw) => this.throwIfNonSignableAuthorizationState(label, raw)
     });
     this.merchantCompletion = new MerchantCompletion({
@@ -2493,7 +2558,8 @@ var HavenClient = class {
       token: request.token,
       amount: request.amount,
       to: request.to,
-      ...request.idempotencyKey ? { idempotency_key: request.idempotencyKey } : {}
+      ...request.idempotencyKey ? { idempotency_key: request.idempotencyKey } : {},
+      ...request.taskBudgetId ? { task_budget_id: request.taskBudgetId } : {}
     });
     if (raw.status === "pending_approval") {
       throwPaymentStateError("Payment", raw);
@@ -2553,7 +2619,11 @@ var HavenClient = class {
       // the agent passes only payment_id. Bounded: the backend rejects >64KB,
       // so an oversized blob is omitted here (signer falls back to the
       // caller-supplied copy) rather than failing the intent.
-      ...new TextEncoder().encode(JSON.stringify(paymentRequired)).length <= 65536 ? { paymentRequired } : {}
+      ...new TextEncoder().encode(JSON.stringify(paymentRequired)).length <= 65536 ? { paymentRequired } : {},
+      // #3329: `/x402` bodies are camelCase (`X402AuthorizeRequest`), unlike
+      // `POST /payments`'s snake_case `task_budget_id` above — the two
+      // surfaces use different conventions, so this key is NOT `task_budget_id`.
+      ...options.taskBudgetId ? { taskBudgetId: options.taskBudgetId } : {}
     });
     if (raw.status !== "pending_signature") {
       throwPaymentStateError("x402 payment", raw);
@@ -2625,7 +2695,7 @@ var HavenClient = class {
    * (#834) — the backend refuses those intents with HTTP 410 before any
    * sign_data reaches a client, so encountering it here is a hard error too.
    */
-  async signForData(signData, settlementExpectation) {
+  async signForData(signData, settlementExpectation, fundingExpectation) {
     if (!this.delegateKey) {
       throw new HavenSigningError(
         "Cannot sign without a delegateKey. Pass the private key in HavenClient config, or sign externally."
@@ -2648,6 +2718,13 @@ var HavenClient = class {
         signData.typed_data,
         this.delegateAddress
       );
+      if (fundingExpectation) {
+        assertFundingLegPaysDelegate(signData.typed_data, {
+          delegateAddress: this.delegateAddress,
+          asset: fundingExpectation.asset,
+          amount: fundingExpectation.amount
+        });
+      }
       return signUserOpTypedDataForDelegation(this.delegateKey, signData.typed_data);
     }
     if (scheme === "eip712_delegation") {
@@ -2939,6 +3016,96 @@ var HavenClient = class {
   async getReceipt(paymentId) {
     return this.accountReads.getReceipt(paymentId);
   }
+  // ── Task Budgets (#3329) ────────────────────────────────────────────
+  /**
+   * Open a task budget: a self-delegated, time-boxed slice of the agent's own
+   * budget delegation. Returns the pending row plus the child delegation's
+   * `sign_data` — sign it (via `signForData` / `haven_sign` with
+   * `task_budget_id`) and pass the signature to `submitTaskBudget` to make it
+   * OPEN. Nothing is on-chain until then.
+   */
+  async openTaskBudget(request) {
+    const raw = await this.post("/task-budgets", {
+      ...request.tokenAddress ? { token_address: request.tokenAddress } : {},
+      max_amount_atomic: request.maxAmountAtomic,
+      ttl_seconds: request.ttlSeconds,
+      ...request.recipientAddress ? { recipient_address: request.recipientAddress } : {},
+      ...request.label ? { label: request.label } : {}
+    });
+    return {
+      taskBudget: mapTaskBudget(raw.task_budget),
+      signData: raw.sign_data,
+      nextAction: raw.next_action,
+      instructions: raw.instructions
+    };
+  }
+  /** Read one task budget by id. */
+  async getTaskBudget(id) {
+    const raw = await this.get(`/task-budgets/${encodeURIComponent(id)}`);
+    return mapTaskBudget(raw.task_budget);
+  }
+  /** List this agent's task budgets — `status: 'open'` (default; unexpired only) or `'all'`. */
+  async listTaskBudgets(options = {}) {
+    const query = options.status ? `?status=${encodeURIComponent(options.status)}` : "";
+    const raw = await this.get(`/task-budgets${query}`);
+    return raw.task_budgets.map(mapTaskBudget);
+  }
+  /**
+   * The exact signing payload for a pending (purpose `open`) or closing
+   * (purpose `close`) task budget — the `task_budget_id` counterpart of
+   * `getResumeState` / the payment sign-context reads. `haven_sign` with
+   * `task_budget_id` fetches this itself; call it directly only for manual
+   * signing.
+   */
+  async getTaskBudgetSignContext(id) {
+    const raw = await this.get(`/task-budgets/${encodeURIComponent(id)}/sign-context`);
+    if (raw.purpose === "close") {
+      return {
+        taskBudgetId: raw.task_budget_id,
+        purpose: "close",
+        taskSignContextVersion: raw.task_sign_context_version,
+        typedData: raw.typed_data,
+        userOperation: raw.user_operation,
+        userOpHash: raw.user_op_hash,
+        expected: raw.expected
+      };
+    }
+    return {
+      taskBudgetId: raw.task_budget_id,
+      purpose: "open",
+      taskSignContextVersion: raw.task_sign_context_version,
+      typedData: raw.typed_data,
+      expected: raw.expected
+    };
+  }
+  /** Submit a signature for a pending (open) or closing task budget. */
+  async submitTaskBudget(id, signature) {
+    const raw = await this.post(
+      `/task-budgets/${encodeURIComponent(id)}/submit`,
+      { signature }
+    );
+    return {
+      taskBudget: mapTaskBudget(raw.task_budget),
+      status: raw.status,
+      ...raw.close_tx_hash ? { closeTxHash: raw.close_tx_hash } : {}
+    };
+  }
+  /**
+   * Close a task budget early. A `pending` or already-expired `open` budget
+   * closes immediately (nothing was ever signed or is on-chain). A live
+   * `open` budget returns `sign_data` for an on-chain `disableDelegation`
+   * UserOp — sign it (`haven_sign` with `task_budget_id`) and call
+   * `submitTaskBudget`.
+   */
+  async closeTaskBudget(id) {
+    const raw = await this.post(`/task-budgets/${encodeURIComponent(id)}/close`, {});
+    return {
+      taskBudget: mapTaskBudget(raw.task_budget),
+      status: raw.status,
+      ...raw.sign_data ? { signData: raw.sign_data } : {},
+      ...raw.next_action ? { nextAction: raw.next_action } : {}
+    };
+  }
   /**
    * Rehydrate the x402 resume-state bundle for a payment id (#1328: the MPP
    * resume-state variant retired along with the rest of the mpp_demo surface).
@@ -2991,7 +3158,7 @@ var HavenClient = class {
     if (cached) return cached;
     const inFlight = this.inFlightX402.get(idempotencyKey);
     if (inFlight) return inFlight;
-    const promise = this.fundingLeg.authorize(paymentRequired, option, idempotencyKey);
+    const promise = this.fundingLeg.authorize(paymentRequired, option, idempotencyKey, options.taskBudgetId);
     this.inFlightX402.set(idempotencyKey, promise);
     try {
       return await promise;
@@ -3073,7 +3240,7 @@ var HavenClient = class {
   async payX402Quote(quote, options = {}) {
     const idempotencyKey = options.idempotencyKey ?? quote.idempotencyKey;
     try {
-      const receipt = await this.authorizeX402(quote.paymentRequired, { idempotencyKey });
+      const receipt = await this.authorizeX402(quote.paymentRequired, { ...options, idempotencyKey });
       return this.merchantCompletion.retryRequest(
         quote.request.url,
         requestInitFromSnapshot(quote.request),
@@ -3651,7 +3818,7 @@ var toolDescriptions = {
   send: {
     summary: "Send ETH or USDC directly from the agent's Haven wallet to a recipient address.",
     selectionGuidance: "Use this for plain transfers \u2014 refunding a user, paying a freelancer, topping up a co-agent's wallet, or moving funds between addresses. Do NOT use for x402 paid endpoints \u2014 use haven_pay_x402 instead. Do NOT use for read-only allowance, budget, or what-can-I-spend questions \u2014 use haven_get_allowances. Do NOT use to check whether funds are held before sending \u2014 use haven_check_funds.",
-    behavior: "Sends the amount by redeeming the agent's on-chain budget delegation, account to recipient with no funding leg. Budget, recipient and expiry are enforced on-chain while the transfer is prepared, so a request outside them is declined before any money moves or any signing \u2014 never queued for a human to approve. The agent's signing key signs the account's typed data, refusing any that mismatches the payment's hash; Haven never receives the key.",
+    behavior: "Sends the amount by redeeming the agent's on-chain budget delegation, account to recipient with no funding leg. Budget, recipient and expiry are enforced on-chain while the transfer is prepared, so a request outside them is declined before any money moves or any signing \u2014 never queued for a human to approve. The agent's signing key signs the account's typed data; a current signer refuses any that does not match the payment's hash (USEROP_BINDING_MISMATCH), an older signer signs it and the account rejects it on-chain. Haven never receives the key.",
     nextActionGuidance: "On a decline, report the reason to the user and ask them to grant or raise the budget in Haven \u2014 there is nothing to poll and no approval will arrive. After a successful send, poll haven_get_payment_status until nextAction=none."
   },
   reportSettlementEvidence: {
@@ -3984,6 +4151,10 @@ Call \`haven_get_agent\`, one of the Haven MCP tools the connector wires into yo
 
 Nothing here needs you to. Steps 1-3 are links: hand your user the full \`<host>/\u2026\` URL and ask them to say when it is done. Step 5 is a link only when your run reported one in \`approval.url\` \u2014 otherwise it is the tab they already have open, as above. Then poll \`haven_get_agent\` until it reads \`ready\`. Do not route around the sign-in wall \u2014 it makes the account theirs, not yours.
 
+## If something breaks
+
+If a Haven result carries \`client_update\`, that client is out of date: update it \u2014 \`upgrade_command\` names the package and channel \u2014 then retry. \`required: true\` means payments are refused until you do. What changed: [/releases](/releases).
+
 ## Vocabulary
 
 | Term | What it is |