@haven_ai/sdk 0.5.0-alpha.1 → 0.7.0-alpha.0

package/dist/{base64-BUMXmruY.d.cts → base64-_seD1uw8.d.cts}

@@ -67,6 +67,21 @@ interface PaymentRequest {
      * second approval. Same contract as /machine-payments/send. Max 128 chars.
      */
     idempotencyKey?: string;
+    /**
+     * #3329: redeem against this open task budget's child delegation instead
+     * of the agent's budget delegation directly — `[task child, budget]`. The
+     * backend refuses (404/409) when the id is unknown, not open, or its
+     * token/recipient/parent disagree with this request.
+     */
+    taskBudgetId?: string;
+    /**
+     * #3330: redeem against this open sub-budget's grant (this agent is the
+     * sub-agent B) instead of the agent's budget delegation directly —
+     * `[grant, parent-child, budget]`. The backend refuses (404/409) when the
+     * id is unknown, not open, or its token/recipient/parent disagree with
+     * this request. Mutually exclusive with `taskBudgetId`.
+     */
+    subBudgetId?: string;
 }
 interface SignData {
     /** The hash to sign (keccak256, 0x-prefixed) */
@@ -262,6 +277,31 @@ interface X402AuthorizationOptions {
      * fetch.
      */
     delegateAddress?: string;
+    /**
+     * #3329: redeem against this open task budget's child delegation for the
+     * funding leg / erc7710 settlement child instead of the agent's budget
+     * delegation directly. Same refusal contract as `PaymentRequest.taskBudgetId`.
+     * On the EIP-3009 funding leg (`authorizeX402`, `fetch()`, `payX402Quote()`)
+     * a task budget's recipient pin is compared with the agent's own delegate
+     * wallet, so a merchant-pinned task budget is refused there
+     * (`task_budget_recipient_mismatch`); it pays through erc7710 only (#3378).
+     * #3392: the receipt cache and in-flight map record this id per entry —
+     * reusing an idempotency key under a DIFFERENT budget throws
+     * `X402TaskBudgetMismatchError` before any network call; pay again under a
+     * new key instead.
+     */
+    taskBudgetId?: string;
+    /**
+     * #3330: redeem against this open sub-budget's grant (this agent is the
+     * sub-agent B) for the funding leg / erc7710 settlement instead of the
+     * agent's budget delegation directly. Same refusal contract as
+     * `PaymentRequest.subBudgetId`; mutually exclusive with `taskBudgetId`.
+     * The receipt cache and in-flight map pin this id per entry exactly as
+     * they pin `taskBudgetId` (#3392) — a key reused under a different
+     * authorizing child throws the typed mismatch error before any network
+     * call.
+     */
+    subBudgetId?: string;
 }
 /**
  * Keyless x402 construct result.
@@ -676,7 +716,7 @@ interface HavenAgentAllowanceSummary {
     remainingAtomic: string;
     /** Human-readable remaining, e.g. "4.96 USDC". */
     remainingDisplay: string;
-    /** Configured allowance amount (atomic) the owner granted. */
+    /** Configured allowance amount in whole token units (human decimal, e.g. "1.00" — NOT atomic; on-chain.amount is the atomic figure). */
     configuredAmount: string;
     resetPeriodMin: number;
     isResetPending: boolean;
@@ -704,7 +744,105 @@ interface HavenAgentSummary extends HavenAgent {
      */
     spend_authority_readiness: HavenAgentReadiness;
     allowances: HavenAgentAllowanceSummary[];
+    /**
+     * #3329: open, unexpired task budgets — a derived VIEW, same discipline as
+     * {@link HavenAgentSummary.allowances}. Populated from
+     * `GET /task-budgets?status=open`; empty (never throws) against a backend
+     * that predates #3329's route (a 404 there is treated as "no task
+     * budgets", not a fetch failure).
+     */
+    taskBudgets: HavenTaskBudgetSummary[];
+}
+/** #3329: task-budget lifecycle status, as the wire names it. */
+type HavenTaskBudgetStatus = 'pending' | 'open' | 'closing' | 'closed';
+/** #3329: `RawTaskBudget`, camelCased — what every SDK task-budget method returns. */
+interface HavenTaskBudget {
+    id: string;
+    agentId: string;
+    chainId: number;
+    tokenAddress: string;
+    recipientAddress: string | null;
+    parentDelegationHash: string;
+    delegationHash: string;
+    label: string | null;
+    maxAtomic: string;
+    status: HavenTaskBudgetStatus;
+    expiresAt: number;
+    isExpired: boolean;
+    createdAt: string;
+    openedAt: string | null;
+    closedAt: string | null;
+    closeTxHash: string | null;
 }
+/**
+ * #3329: the condensed row `getAgentSummary()` carries per open, unexpired
+ * task budget — enough to render a "reserved by open task budgets" line and
+ * a task-budget list without a second read.
+ */
+interface HavenTaskBudgetSummary {
+    id: string;
+    label: string | null;
+    tokenAddress: string;
+    maxAtomic: string;
+    maxDisplay: string;
+    recipientAddress: string | null;
+    expiresAt: number;
+}
+/** #3329: `POST /task-budgets` and `POST /task-budgets/:id/close` — the sign-then-submit envelope. */
+interface HavenTaskBudgetSignData {
+    signature_scheme: 'eip712_delegation' | 'eip712_userop';
+    typed_data: Record<string, unknown>;
+}
+interface OpenTaskBudgetResult {
+    taskBudget: HavenTaskBudget;
+    signData: HavenTaskBudgetSignData;
+    nextAction: string;
+    instructions: string;
+}
+interface CloseTaskBudgetResult {
+    taskBudget: HavenTaskBudget;
+    status: HavenTaskBudgetStatus;
+    /** Present only when the close needed a signature (an OPEN, unexpired budget). */
+    signData?: HavenTaskBudgetSignData;
+    nextAction?: string;
+}
+interface SubmitTaskBudgetResult {
+    taskBudget: HavenTaskBudget;
+    status: HavenTaskBudgetStatus;
+    /** Present only once the close UserOp lands (`status === 'closed'` from `closing`). */
+    closeTxHash?: string;
+}
+/** #3329: `GET /task-budgets/:id/sign-context` — `purpose: 'open'` shape. */
+interface TaskBudgetOpenSignContext {
+    taskBudgetId: string;
+    purpose: 'open';
+    taskSignContextVersion: number;
+    typedData: Record<string, unknown>;
+    expected: {
+        delegateAccount: string;
+        chainId: number;
+        tokenAddress: string;
+        maxAmountAtomic: string;
+        recipientAddress: string | null;
+        expiresAt: number;
+        parentDelegationHash: string;
+    };
+}
+/** #3329: `GET /task-budgets/:id/sign-context` — `purpose: 'close'` shape. */
+interface TaskBudgetCloseSignContext {
+    taskBudgetId: string;
+    purpose: 'close';
+    taskSignContextVersion: number;
+    typedData: Record<string, unknown>;
+    userOperation: Record<string, unknown>;
+    userOpHash: string;
+    expected: {
+        delegateAccount: string;
+        chainId: number;
+        delegationHash: string;
+    };
+}
+type TaskBudgetSignContext = TaskBudgetOpenSignContext | TaskBudgetCloseSignContext;
 /**
  * #2960 — one party vocabulary for "who paid" a Haven payment, additive
  * alongside every existing lone `payer*`/`*Address` field (same discipline
@@ -716,6 +854,33 @@ interface PaymentParties {
     delegate: string | null;
     delegateAccount: string | null;
     merchant: string | null;
+    /**
+     * #3332: the paying agent's owner's company details — additive, present
+     * only when the backend has `HAVEN_OWNER_COMPANY_DETAILS` on AND the owner
+     * saved details; absent (not `undefined`-valued, the KEY is absent)
+     * otherwise. `viesStatus: 'valid'` means VIES accepted the VAT number —
+     * never render that as "verified" (see Haven's agent-passport docs on the
+     * same naming discipline).
+     *
+     * Present only on the receipt surfaces — `GET /payments/:id/receipt` and
+     * `GET /machine-payments/receipts` (`HavenClient.getReceipt()`,
+     * `listReceipts()`/`listReceiptsPage()`) — never on `GET
+     * /machine-payments/:id/status` (`getPaymentStatus`) or the evidence-attach echo,
+     * even with the feature on: those report payment/settlement state, not the
+     * buyer's company details (out of scope for #3332, see
+     * docs/product/owner-company-details.md).
+     */
+    buyer?: PaymentPartiesBuyer;
+}
+interface PaymentPartiesBuyer {
+    legalName: string;
+    /** ISO 3166-1 alpha-2. */
+    country: string;
+    /** For a sole trader this IS the personal identity number. */
+    orgNumber: string;
+    vatNumber: string | null;
+    viesStatus: 'pending' | 'valid' | 'invalid' | 'not_verifiable' | null;
+    viesCheckedAt: string | null;
 }
 /** @internal wire shape of {@link PaymentParties}. */
 interface RawPaymentParties {
@@ -723,6 +888,16 @@ interface RawPaymentParties {
     delegate: string | null;
     delegate_account: string | null;
     merchant: string | null;
+    buyer?: RawPaymentPartiesBuyer;
+}
+/** @internal wire shape of {@link PaymentPartiesBuyer}. */
+interface RawPaymentPartiesBuyer {
+    legal_name: string;
+    country: string;
+    org_number: string;
+    vat_number: string | null;
+    vies_status: 'pending' | 'valid' | 'invalid' | 'not_verifiable' | null;
+    vies_checked_at: string | null;
 }
 /**
  * #3132 (owner decision 3 on #3130): what population a list row came from and
@@ -755,8 +930,6 @@ interface HavenPaymentReceipt {
      * receipt analogue, because no protocol means no evidence row.
      */
     source: string;
-    /** @deprecated (#3134) twin of {@link source}; removed once all three release clocks have moved — see `mapPaymentReceipt`. */
-    rail: string;
     /**
      * #3134: the evidence row's recorded proof status, under the transactions
      * feed's name. Same name, different nullability: `string` here because a
@@ -764,8 +937,6 @@ interface HavenPaymentReceipt {
      * LEFT JOIN to none (#3132) — do not share a non-null-asserting helper.
      */
     paymentProofStatus: string;
-    /** @deprecated (#3134) twin of {@link paymentProofStatus}; removed once all three release clocks have moved — see `mapPaymentReceipt`. */
-    proofStatus: string;
     /**
      * @deprecated (#2998) meaning depends on the settlement scheme — the
      * account → delegate funding transaction on eip3009, the (only) settlement
@@ -785,12 +956,8 @@ interface HavenPaymentReceipt {
     chainId: number;
     /** #3134: the paid resource, under the transactions feed's protocol-prefixed name (`string | null` there; a receipt always has one). */
     x402ResourceUrl: string;
-    /** @deprecated (#3134) twin of {@link x402ResourceUrl}; removed once all three release clocks have moved — see `mapPaymentReceipt`. */
-    resourceUrl: string;
     /** #3134: the merchant paid, under the transactions feed's protocol-prefixed name. */
     x402MerchantAddress: string | null;
-    /** @deprecated (#3134) twin of {@link x402MerchantAddress}; removed once all three release clocks have moved — see `mapPaymentReceipt`. */
-    merchantAddress: string | null;
     payerAddress: string;
     /** #2960: additive alongside `payerAddress` above (`parties.treasury_account` only). */
     parties?: PaymentParties;
@@ -958,6 +1125,20 @@ declare const AgentPaymentPhase: {
      * the funds.
      */
     readonly FundedButUnsettled: "funded_but_unsettled";
+    /**
+     * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+     * window AND the sweep's last attribution chance have both passed with no
+     * verified evidence. The sweep's tick (120s) only ever confirms a
+     * transaction mined inside the payment's own settlement window (the child
+     * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+     * clock-skew allowance), so once authorize + window + skew is behind the
+     * payment, no poll — and no sweep tick — can ever change the answer.
+     * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+     * were delivered but Haven holds no verified settlement evidence; reporting
+     * a real settlement hash (`haven_report_settlement_evidence`) still works
+     * at any age.
+     */
+    readonly DeliveredUnverified: "delivered_unverified";
 };
 type AgentPaymentPhase = (typeof AgentPaymentPhase)[keyof typeof AgentPaymentPhase];
 declare const AgentPaymentNextAction: {
@@ -1115,7 +1296,7 @@ declare const AgentPaymentRail: {
 type AgentPaymentRail = (typeof AgentPaymentRail)[keyof typeof AgentPaymentRail];
 type PaymentPhase = AgentPaymentPhase;
 type PaymentNextAction = AgentPaymentNextAction;
-declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled")[];
+declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled" | "delivered_unverified")[];
 declare const AGENT_PAYMENT_NEXT_ACTION_VALUES: ("sign_and_submit_payment" | "check_status_later" | "none" | "wait_for_user_approval" | "wait_for_user_to_complete_payment" | "retry_original_x402_request" | "stop_and_tell_user" | "request_again_if_user_still_wants_it" | "retry_with_explicit_context" | "payment_window_expired" | "fund_account_or_raise_allowance" | "sweep_stranded_funds" | "awaiting_settlement_evidence")[];
 declare const AGENT_PAYMENT_FAILURE_CODE_VALUES: ("PRICE_EXCEEDS_MAX" | "PAYMENT_WINDOW_EXPIRED" | "MERCHANT_REJECTED_AFTER_FUNDING" | "MERCHANT_UNRESPONSIVE_AFTER_FUNDING" | "MERCHANT_CALL_CONTEXT_UNAVAILABLE" | "AMBIGUOUS_MAX_AMOUNT" | "MAX_AMOUNT_UNCONVERTIBLE" | "MERCHANT_NOT_READY")[];
 declare const AGENT_PAYMENT_RAIL_VALUES: ("x402" | "mpp_demo" | "mpp_crypto" | "stripe_deposit" | "spt" | "direct" | "mpp")[];
@@ -1301,6 +1482,11 @@ interface PaymentStatusResult {
     expiresAt: string;
     chainId: number;
     message: string;
+    /**
+     * #3420: `true` = the merchant answered 2xx (a `machine_payment_evidence`
+     * row records its response); absent = unknown. See the raw field's doc.
+     */
+    delivered?: boolean;
     /** Platform fee surfaced so it's never silently collected (#386). */
     fee?: PaymentFee | null;
     amountAtomic?: string | null;
@@ -1461,6 +1647,32 @@ declare class MerchantTimeoutError extends HavenApiError {
     readonly merchantErrorCode: "merchant_timeout";
     constructor(message: string);
 }
+/**
+ * #3417: an erc7710 `POST /x402` authorize replayed a key whose payment to THIS
+ * merchant for THIS resource has already settled. The backend returns
+ * `200 { status: 'confirmed', tx_hash, to, resource_url }` and, correctly, no
+ * `sign_data`, because nothing is left to sign
+ * (`packages/backend/src/modules/x402/replay.ts`). Before this class the
+ * erc7710 path read that answer as a scheme mismatch and threw a 500, which
+ * hosted callers relayed as "transient, retry". Typed so a caller can report
+ * the original settlement instead of retrying, and never signs anything.
+ *
+ * Only thrown when the confirmed row pays the merchant this request names, for
+ * the resource it asked for. The backend's replay lookup is keyed on the
+ * idempotency key alone, so a key reused for another payee or resource — or
+ * first spent on an EIP-3009 funding leg, whose confirmed `tx_hash` proves only
+ * that the delegate was funded — is refused as a 409 collision instead of read
+ * as this settlement. Amount and the MCP tool call are not compared: on an MCP
+ * merchant the resource is its endpoint, so a key reused for another tool
+ * there is answered as that merchant's earlier payment. A `HavenError`, not a `HavenApiError`: nothing failed upstream.
+ */
+declare class X402Erc7710AlreadySettledError extends HavenError {
+    readonly paymentId: string;
+    readonly txHash: string;
+    readonly body?: unknown | undefined;
+    readonly x402ErrorCode: "payment_already_settled";
+    constructor(paymentId: string, txHash: string, body?: unknown | undefined);
+}
 declare class X402UnexpectedStatusError extends HavenApiError {
     readonly x402ErrorCode: "unexpected_non_402_status";
     /**
@@ -1519,6 +1731,33 @@ declare class HavenPaymentStateError extends HavenApiError {
     get phase(): PaymentPhase;
     get nextAction(): PaymentNextAction;
 }
+/**
+ * #3392: the SDK's x402 receipt cache and in-flight map record the
+ * `taskBudgetId` each entry was created under. A call reusing an idempotency
+ * key whose cached/in-flight entry was created under a DIFFERENT task budget
+ * is refused with this typed error BEFORE any network call — the alternative
+ * was silently returning (or joining) a payment charged to another budget.
+ * Typed rather than `HavenApiError`-shaped: no request was attempted, so
+ * there is no HTTP status or response body to carry (the
+ * `HavenZeroSettlementHashError` precedent). A caller that genuinely wants to
+ * pay again under a different budget passes a new `idempotencyKey`.
+ */
+declare class X402TaskBudgetMismatchError extends HavenError {
+    /** The idempotency key whose cached entry was created under another budget. */
+    readonly idempotencyKey: string;
+    /** The budget the cached/in-flight entry was created under (undefined = none). */
+    readonly entryTaskBudgetId: string | undefined;
+    /** The budget this call named (undefined = none). */
+    readonly requestedTaskBudgetId: string | undefined;
+    readonly x402ErrorCode: "task_budget_mismatch";
+    constructor(message: string, 
+    /** The idempotency key whose cached entry was created under another budget. */
+    idempotencyKey: string, 
+    /** The budget the cached/in-flight entry was created under (undefined = none). */
+    entryTaskBudgetId: string | undefined, 
+    /** The budget this call named (undefined = none). */
+    requestedTaskBudgetId: string | undefined);
+}
 declare class HavenSigningError extends HavenError {
     constructor(message: string);
 }
@@ -1794,7 +2033,7 @@ declare function buildSweepAuthorizationMessage(auth: SweepAuthorization): strin
  * This SDK's own version. Owned by `scripts/release-bump.mjs`, which rewrites
  * it with the package version on every release — never hand-edit it.
  */
-declare const SDK_VERSION = "0.5.0-alpha.1";
+declare const SDK_VERSION = "0.7.0-alpha.0";
 /** The request header every published Haven client sends. */
 declare const HAVEN_CLIENT_HEADER = "X-Haven-Client";
 /** `<package>/<version>` — the value of {@link HAVEN_CLIENT_HEADER}. */
@@ -2013,6 +2252,28 @@ declare function connectorRerunCommand(args?: string, options?: {
     channel?: string;
     npxFlags?: string;
 }): string;
+/**
+ * The command every UPGRADE hint names (#3412): `npx -y @haven_ai/connect@<channel> --doctor`.
+ *
+ * A bare connector re-run is a SETUP command — on a machine that is already
+ * set up it stops at "Missing --setup <hv_setup_...> setup token", so an
+ * outdated signer, local MCP or connector told to "re-run the connector" was
+ * handed a dead end. The flagless doctor works as pasted on an existing
+ * install (#3210: it resolves the runtime from the setup record), diagnoses an
+ * outdated signer, and prints the exact `--doctor --repair` line for the agent
+ * it describes — with `--credentials-dir` whenever more than one agent lives on
+ * the machine, so the repair cannot land on a different agent.
+ *
+ * `-y` because an upgrade hint is often run by an agent in a non-interactive
+ * shell. `@haven_ai/core`'s `upgradeCommandFor` (the backend's
+ * `client_update.upgrade_command`) cannot import this package, so it carries a
+ * copy; `packages/backend/src/__tests__/connector-upgrade-command-parity.test.ts`
+ * fails if the two ever disagree. Setup-time hints (identity restore,
+ * mid-setup retry) legitimately stay on {@link connectorRerunCommand}.
+ */
+declare function connectorUpgradeCommand(options?: {
+    channel?: string;
+}): string;
 
 /**
  * The Node.js floor Haven's published packages support (#1161).
@@ -2365,6 +2626,19 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     symbol: string;
     decimals: number;
 } | null;
+/**
+ * #3410: token decimals from a SYMBOL + CHAIN — the same registry
+ * `resolveTokenFromAddress` reads, keyed the other way. The address-based
+ * resolver needs the token's contract address, which the consent seed path
+ * (setup-time credential files) does not carry; the symbol and chain it does
+ * carry. Null when the symbol is not registered on that chain (unknown or
+ * custom tokens) — callers must fall back to an explicit atomic label rather
+ * than reading an atomic amount as whole tokens.
+ */
+declare function resolveTokenBySymbol(chainId: number, symbol: string): {
+    symbol: string;
+    decimals: number;
+} | null;
 
 /**
  * #3271: the integrity check every client runs before signing a direct
@@ -2395,6 +2669,19 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
  */
 /** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
 declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/**
+ * #3419: version of the task-budget sign context (`GET
+ * /task-budgets/:id/sign-context`), the sign-then-submit envelope every
+ * `haven_sign { task_budget_id }` call fetches. The backend emits it
+ * (`task-budget-service.ts`, `task_sign_context_version: 1`); the signer
+ * derives its enforced set `SUPPORTED_TASK_SIGN_CONTEXT_VERSIONS` from this
+ * constant — never a second literal — and the hosted/local task-budget
+ * handoffs report it in `signer_compatibility.task_sign_context_version`.
+ * The signer could not carry the single source itself (a published package
+ * cannot host a constant the backend also serves), so it lives beside the
+ * other binding constants here, exactly as `DIRECT_SIGN_CONTEXT_VERSION` does.
+ */
+declare const TASK_SIGN_CONTEXT_VERSION = 1;
 /** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
 declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
 /**
@@ -2561,7 +2848,17 @@ interface SettlementChildTypedData {
     primaryType: string;
     message: Record<string, unknown>;
 }
-/** True when this typed data is a delegation — the shape that must never be signed unbound. */
+/**
+ * True when this typed data is a delegation — the shape that must never be
+ * signed unbound. Excludes a SELF-delegation (`delegate === delegator`,
+ * #3329): that is the shape of a task-budget child
+ * (`task-budget-guards.ts`'s `isTaskChildTypedData`), a DIFFERENT typed-data
+ * class verified by a different function against a different expectation. A
+ * real settlement child's `delegate` is always a facilitator or
+ * `ANY_BENEFICIARY` — never this account's own address — so narrowing here
+ * costs this verifier nothing and keeps the two classes from ever
+ * overlapping.
+ */
 declare function isSettlementChildTypedData(value: unknown): value is SettlementChildTypedData;
 /**
  * Map an x402 network string to a chain id. Local on purpose (#1455 review):
@@ -2674,11 +2971,13 @@ declare function assertOwnSettlementChild(typedData: unknown, expectation: Settl
  * payTo = the delegate EOA, amountRaw)`), so the single execution must be
  * exactly `encodePacked(asset, 0, transfer(delegateAddress, amount))`.
  *
- * `delegateAddress` is the signer's OWN key address — local, not from Haven —
- * so even a compromised binding key can at most move budget into the agent's
- * own EOA (the hot-delegate residual the sweep returns), never to an attacker.
- * `asset` and `amount` come from the Haven-signed expected context and keep
- * the leg consistent with what Haven declared.
+ * `delegateAddress` is the signing key's OWN address — local, not from Haven —
+ * so even a compromised Haven can at most move budget into the agent's own
+ * EOA (the hot-delegate residual the sweep returns), never to an attacker.
+ * `asset` and `amount` keep the leg consistent with what is being paid. Two
+ * callers, two sources: the signer's x402 arm (#3281) passes the Haven-signed
+ * expected context's; `HavenClient.signForData` (#3375) passes the 402 option
+ * the SDK is paying, never the `/x402` response.
  *
  * Call ONLY after `assertBoundDirectPaymentUserOp` has passed on the same
  * typed data (it proves the `execute` → `redeemDelegations` shape this reads).
@@ -2690,6 +2989,114 @@ declare function assertFundingLegPaysDelegate(typedData: Record<string, unknown>
     amount: string;
 }): void;
 
+/**
+ * Task budgets (#3329): independent verification of a task child delegation
+ * and its close UserOp, mirroring `settlement-child.ts` / `direct-payment-
+ * guard.ts` for a DIFFERENT typed-data class.
+ *
+ * A task budget's child is a SELF-delegation: the agent's own delegate
+ * account grants itself a narrower, time-boxed slice of its budget
+ * delegation (`delegate === delegator === the agent's own account`), chained
+ * under the budget via `authority`. That is what separates it from an x402
+ * settlement child, whose `delegate` is a facilitator/ANY_BENEFICIARY — never
+ * the agent's own account. `isSettlementChildTypedData` (`settlement-
+ * child.ts`) was narrowed to return `false` for a self-delegated payload so
+ * the two classes cannot be confused by either verifier; this file is the
+ * task-child counterpart, verified against a different expectation
+ * (`GET /task-budgets/:id/sign-context`, never a merchant's 402).
+ *
+ * Two shapes, two functions:
+ *  - `assertOwnTaskChild` verifies the `Delegation` typed data signed to OPEN
+ *    a task budget.
+ *  - `assertOwnTaskBudgetCloseUserOp` verifies the `PackedUserOperation`
+ *    typed data signed to CLOSE one early (an on-chain
+ *    `disableDelegation(child)` call from the agent's own account) — an
+ *    authority-REDUCING action only, never a grant.
+ *
+ * `hashDelegation` below reproduces `@metamask/smart-accounts-kit/utils`'s
+ * struct hash (via `@metamask/delegation-core`) byte-for-byte, WITHOUT taking
+ * the kit as a runtime dependency (this package installs on users' machines —
+ * same reasoning `delegate-account.ts` and `settlement-child.ts` give for
+ * their own vendored constants). `DELEGATION_TYPEHASH` / `CAVEAT_TYPEHASH`
+ * are pinned literals, cross-checked against the kit's own `hashDelegation`
+ * by a test vector in `task-budget-guards.test.ts` (which imports the kit
+ * ONLY in that test file).
+ */
+
+/** The backend's own ceiling (`MAX_TASK_BUDGET_TTL_SECONDS`), enforced again here. */
+declare const MAX_TASK_BUDGET_TTL_SECONDS = 86400;
+interface TaskChildTypedData {
+    domain: {
+        name?: string;
+        version?: string;
+        chainId?: number | string;
+        verifyingContract?: string;
+    };
+    types: Record<string, unknown>;
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/**
+ * True when this typed data is a task-budget child: a `Delegation` whose
+ * `delegate` equals its own `delegator` (self-delegation). This is the ONLY
+ * shape distinguishing it from an x402 settlement child (whose `delegate` is
+ * a facilitator or `ANY_BENEFICIARY`) — `isSettlementChildTypedData` is
+ * narrowed to return `false` for this same shape so the two verifiers never
+ * overlap.
+ */
+declare function isTaskChildTypedData(value: unknown): value is TaskChildTypedData;
+interface TaskChildExpectation {
+    chainId: number;
+    tokenAddress: string;
+    maxAmountAtomic: string;
+    recipientAddress: string | null;
+    /** unix seconds — the `TimestampEnforcer`'s `beforeThreshold`. */
+    expiresAt: number;
+    parentDelegationHash: string;
+}
+/**
+ * Verify a task-budget child delegation is EXACTLY what
+ * `GET /task-budgets/:id/sign-context` (purpose `open`) declared, AND that
+ * both `delegate` and `delegator` are this signer's OWN account. Throws
+ * `HavenTypedDataRefusedError` (never returns) on any disagreement.
+ */
+declare function assertOwnTaskChild(typedData: unknown, expected: TaskChildExpectation, delegateAddress: string, now?: number): void;
+interface TaskBudgetCloseExpectation {
+    /** The child delegation's own struct hash (`agent_task_budgets.delegation_hash`). */
+    delegationHash: string;
+}
+/**
+ * Verify a task-budget close UserOp is EXACTLY an on-chain
+ * `disableDelegation(child)` call from the agent's own delegate account —
+ * authority-REDUCING only, never a grant. Throws `HavenTypedDataRefusedError`
+ * (never returns) on any disagreement.
+ */
+declare function assertOwnTaskBudgetCloseUserOp(typedData: Record<string, unknown>, expected: TaskBudgetCloseExpectation, delegateAddress: string): void;
+/**
+ * `@metamask/delegation-core`'s `DELEGATION_TYPEHASH` — pinned, cross-checked
+ * against the kit by a test vector in `task-budget-guards.test.ts`.
+ */
+declare const DELEGATION_TYPEHASH: Hex;
+/** `@metamask/delegation-core`'s `CAVEAT_TYPEHASH` — pinned, same cross-check. */
+declare const CAVEAT_TYPEHASH: Hex;
+interface DelegationForHashing {
+    delegate: Address;
+    delegator: Address;
+    authority: Hex;
+    caveats: readonly {
+        enforcer: Address;
+        terms: Hex;
+    }[];
+    salt: bigint;
+}
+/**
+ * Reproduces `@metamask/smart-accounts-kit/utils`'s `hashDelegation`
+ * byte-for-byte, WITHOUT the kit at runtime (see the file header). Ignores
+ * `signature` — the kit's own `hashDelegation` does the same (it hashes with
+ * `signature: '0x'` regardless of what the caller passes).
+ */
+declare function hashDelegation(delegation: DelegationForHashing): Hex;
+
 /**
  * Runtime-agnostic base64 helpers — the single source of truth for the wire
  * encoding shared by the SDK and the edge signer (#325).
@@ -2728,4 +3135,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { AgentPaymentRailSchema as $, type AgentPaymentWarning as A, type X402ResumeState as B, type X402McpTransport as C, type X402MerchantCallContext as D, HavenError as E, AGENT_PAYMENT_FAILURE_CODE_VALUES as F, AGENT_PAYMENT_NEXT_ACTION_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_PHASE_VALUES as I, AGENT_PAYMENT_RAIL_VALUES as J, type AgentNextStep as K, type AgentPaymentEnumSchema as L, AgentPaymentFailureCode as M, AgentPaymentFailureCodeDescriptions as N, AgentPaymentFailureCodeSchema as O, type PaymentRequest as P, AgentPaymentNextAction as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionDescriptions as T, AgentPaymentNextActionSchema as U, AgentPaymentPhase as V, AgentPaymentPhaseDescriptions as W, type X402PaymentRequired as X, AgentPaymentPhaseSchema as Y, AgentPaymentRail as Z, AgentPaymentRailDescriptions as _, type HavenClientUpdate as a, type UnsupportedNodeVersionMessageOptions as a$, type AgentPaymentSummary as a0, AgentPaymentWarningCode as a1, type AgentPurchaseSummary as a2, CONNECTOR_PACKAGE_NAME as a3, type CatalogSubmissionAccepted as a4, DEFAULT_CONFIRMATION_TIMEOUT_MS as a5, DEFAULT_NEXT_TOOL_BY_ACTION as a6, DIRECT_SIGN_CONTEXT_VERSION as a7, ENTRY_POINT_V07 as a8, ERC7710_ASSET_TRANSFER_METHOD as a9, type NextStepTarget as aA, type NextStepTargets as aB, type NextToolServerRole as aC, PACKED_USER_OPERATION_FIELDS as aD, type PaymentFee as aE, type PaymentNextAction as aF, type PaymentPhase as aG, type PaymentStatus as aH, ROOT_AUTHORITY as aI, SDK_CLIENT_IDENTITY as aJ, SDK_VERSION as aK, SIGNER_UPDATE_FALLBACK as aL, SWEEP_BASE_CHAIN_ID as aM, SWEEP_BASE_SEPOLIA_CHAIN_ID as aN, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aO, SWEEP_BASE_USDC_ADDRESS as aP, type SettlementChildExpectation as aQ, SignerRefusalCode as aR, type SweepConfirmation as aS, type SweepEip712Domain as aT, type SweepEntry as aU, type SweepExpectedAuth as aV, type SweepPreparation as aW, type SweepSubmitResult as aX, type SweepTypedData as aY, TRANSFER_WITH_AUTHORIZATION_TYPES as aZ, TYPED_DATA_NOT_ALLOWED as a_, HAVEN_CLIENT_HEADER as aa, HAVEN_CONNECTOR_CHANNEL as ab, HAVEN_MINIMUM_NODE_VERSION as ac, HYBRID_DELEGATOR_DOMAIN_NAME as ad, HYBRID_DELEGATOR_DOMAIN_VERSION as ae, type HavenAgentAllowanceSummary as af, type HavenAgentReadiness as ag, type HavenAllowance as ah, HavenApiError as ai, type HavenCatalogMerchant as aj, type HavenListScope as ak, HavenPaymentStateError as al, HavenSigningError as am, HavenTimeoutError as an, HavenTypedDataRefusedError as ao, HavenUnsupportedSignerVersionError as ap, HavenUserOpBindingError as aq, HavenZeroSettlementHashError as ar, type MachinePaymentRail as as, MerchantTimeoutError as at, NEXT_TOOL_SERVER_NAMES as au, NEXT_TOOL_SERVER_ROLES as av, type NextStep as aw, type NextStepArguments as ax, type NextStepHandoff as ay, type NextStepInput as az, type PaymentResult as b, DELEGATION_MANAGER as b$, X402AlreadySettledError as b0, type X402ExpectedAuth as b1, type X402ExpectedContext as b2, type X402PaymentHeaderContext as b3, X402PaymentHeaderValidationError as b4, type X402PaymentOption as b5, type X402RequestSnapshot as b6, type X402SchemeSelection as b7, X402UnexpectedStatusError as b8, X402_LEGACY_PAYMENT_HEADER_NAME as b9, isSupportedNodeVersion as bA, isSweepableChain as bB, normalizePaymentRequired as bC, packedUserOperationHash as bD, parseNextTool as bE, parsePaymentRequired as bF, parsePaymentRequiredResponse as bG, readClientUpdate as bH, renderNextTool as bI, resolveConnectorChannel as bJ, resolveTokenFromAddress as bK, selectErc7710PaymentOption as bL, selectPaymentOption as bM, selectStandardPaymentOption as bN, selectX402SettlementScheme as bO, signerUpdateFallback as bP, sweepUsdcAddress as bQ, sweepUsdcDomain as bR, toStandardPaymentRequirements as bS, unsupportedNodeVersionMessage as bT, validateStandardX402PaymentHeader as bU, verifySettlementChild as bV, x402AssetTransferMethod as bW, x402AuthorizationAmount as bX, x402FacilitatorAddresses as bY, x402V2PaymentEnvelope as bZ, CAVEAT_ENFORCERS as b_, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as ba, X402_PAYMENT_HEADER_NAME as bb, X402_PAYMENT_HEADER_NAMES_SENT as bc, X402_PAYMENT_REQUIRED_HEADER_NAME as bd, X402_PAYMENT_RESPONSE_HEADER_NAME as be, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as bf, assertBoundDirectPaymentUserOp as bg, assertUserOpTypedDataBinding as bh, buildSweepAuthorizationMessage as bi, buildSweepTypedData as bj, buildX402ExpectedMessage as bk, compareNodeVersions as bl, connectorRerunCommand as bm, connectorSpec as bn, createNextStepBuilder as bo, decodeBase64Json as bp, decodeBase64Utf8 as bq, defaultNextToolFor as br, deriveDelegateAccountAddress as bs, encodeBase64Json as bt, encodeBase64Utf8 as bu, encodePaymentProof as bv, havenClientIdentity as bw, isConnectorChannel as bx, isErc7710Option as by, isPackedUserOperationTypedData as bz, type PaymentIntent as c, DIRECT_PAYMENT_CHAIN_IDS as c0, EXECUTE_ABI as c1, HYBRID_DELEGATOR_IMPLEMENTATION as c2, MAX_SETTLEMENT_WINDOW_SECONDS as c3, SIMPLE_FACTORY_ADDRESS as c4, type SettlementChildTypedData as c5, assertFundingLegPaysDelegate as c6, assertOwnSettlementChild as c7, chainIdForNetwork as c8, isSettlementChildTypedData as c9, type X402AuthorizationOptions as d, type X402Intent as e, type PaymentStatusResult as f, type HavenAgent as g, type HavenAgentSummary as h, type SweepPrepareResponse as i, type SweepAuthorization as j, type SweepSubmitResponse as k, type HavenAllowanceSummary as l, type HavenBalanceCoverage as m, type PostPurchaseAllowanceSummary as n, type HavenCatalogEntry as o, type HavenCatalogSubmission as p, type HavenPaymentReceipt as q, type HavenPaymentReceiptsPage as r, type PaymentResumeState as s, type X402Receipt as t, type X402Quote as u, type X402Erc7710Settlement as v, type X402McpCallContext as w, type SignData as x, type ResumeAuthorizedX402Input as y, type ResumeX402PaymentInput as z };
+export { AgentPaymentPhase as $, type AgentPaymentWarning as A, type ResumeAuthorizedX402Input as B, type CloseTaskBudgetResult as C, type ResumeX402PaymentInput as D, type X402ResumeState as E, type X402McpTransport as F, type X402MerchantCallContext as G, type HavenClientConfig as H, HavenError as I, AGENT_PAYMENT_FAILURE_CODE_VALUES as J, AGENT_PAYMENT_NEXT_ACTION_VALUES as K, AGENT_PAYMENT_PHASE_VALUES as L, AGENT_PAYMENT_RAIL_VALUES as M, type AgentNextStep as N, type OpenTaskBudgetResult as O, type PaymentRequest as P, type AgentPaymentEnumSchema as Q, type RawPaymentParties as R, type SweepResult as S, type TaskBudgetSignContext as T, AgentPaymentFailureCode as U, AgentPaymentFailureCodeDescriptions as V, AgentPaymentFailureCodeSchema as W, type X402PaymentRequired as X, AgentPaymentNextAction as Y, AgentPaymentNextActionDescriptions as Z, AgentPaymentNextActionSchema as _, type HavenClientUpdate as a, type SweepExpectedAuth as a$, AgentPaymentPhaseDescriptions as a0, AgentPaymentPhaseSchema as a1, AgentPaymentRail as a2, AgentPaymentRailDescriptions as a3, AgentPaymentRailSchema as a4, type AgentPaymentSummary as a5, AgentPaymentWarningCode as a6, type AgentPurchaseSummary as a7, CONNECTOR_PACKAGE_NAME as a8, type CatalogSubmissionAccepted as a9, NEXT_TOOL_SERVER_NAMES as aA, NEXT_TOOL_SERVER_ROLES as aB, type NextStep as aC, type NextStepArguments as aD, type NextStepHandoff as aE, type NextStepInput as aF, type NextStepTarget as aG, type NextStepTargets as aH, type NextToolServerRole as aI, PACKED_USER_OPERATION_FIELDS as aJ, type PaymentFee as aK, type PaymentNextAction as aL, type PaymentPhase as aM, type PaymentStatus as aN, ROOT_AUTHORITY as aO, SDK_CLIENT_IDENTITY as aP, SDK_VERSION as aQ, SIGNER_UPDATE_FALLBACK as aR, SWEEP_BASE_CHAIN_ID as aS, SWEEP_BASE_SEPOLIA_CHAIN_ID as aT, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aU, SWEEP_BASE_USDC_ADDRESS as aV, type SettlementChildExpectation as aW, SignerRefusalCode as aX, type SweepConfirmation as aY, type SweepEip712Domain as aZ, type SweepEntry as a_, DEFAULT_CONFIRMATION_TIMEOUT_MS as aa, DEFAULT_NEXT_TOOL_BY_ACTION as ab, DIRECT_SIGN_CONTEXT_VERSION as ac, ENTRY_POINT_V07 as ad, ERC7710_ASSET_TRANSFER_METHOD as ae, HAVEN_CLIENT_HEADER as af, HAVEN_CONNECTOR_CHANNEL as ag, HAVEN_MINIMUM_NODE_VERSION as ah, HYBRID_DELEGATOR_DOMAIN_NAME as ai, HYBRID_DELEGATOR_DOMAIN_VERSION as aj, type HavenAgentAllowanceSummary as ak, type HavenAgentReadiness as al, type HavenAllowance as am, HavenApiError as an, type HavenCatalogMerchant as ao, type HavenListScope as ap, HavenPaymentStateError as aq, HavenSigningError as ar, HavenTimeoutError as as, HavenTypedDataRefusedError as at, HavenUnsupportedSignerVersionError as au, HavenUserOpBindingError as av, HavenZeroSettlementHashError as aw, MAX_TASK_BUDGET_TTL_SECONDS as ax, type MachinePaymentRail as ay, MerchantTimeoutError as az, type PaymentResult as b, resolveTokenBySymbol as b$, type SweepPreparation as b0, type SweepSubmitResult as b1, type SweepTypedData as b2, TASK_SIGN_CONTEXT_VERSION as b3, TRANSFER_WITH_AUTHORIZATION_TYPES as b4, TYPED_DATA_NOT_ALLOWED as b5, type TaskBudgetCloseExpectation as b6, type TaskChildExpectation as b7, type TaskChildTypedData as b8, type UnsupportedNodeVersionMessageOptions as b9, connectorRerunCommand as bA, connectorSpec as bB, connectorUpgradeCommand as bC, createNextStepBuilder as bD, decodeBase64Json as bE, decodeBase64Utf8 as bF, defaultNextToolFor as bG, deriveDelegateAccountAddress as bH, encodeBase64Json as bI, encodeBase64Utf8 as bJ, encodePaymentProof as bK, hashDelegation as bL, havenClientIdentity as bM, isConnectorChannel as bN, isErc7710Option as bO, isPackedUserOperationTypedData as bP, isSupportedNodeVersion as bQ, isSweepableChain as bR, isTaskChildTypedData as bS, normalizePaymentRequired as bT, packedUserOperationHash as bU, parseNextTool as bV, parsePaymentRequired as bW, parsePaymentRequiredResponse as bX, readClientUpdate as bY, renderNextTool as bZ, resolveConnectorChannel as b_, X402AlreadySettledError as ba, X402Erc7710AlreadySettledError as bb, type X402ExpectedAuth as bc, type X402ExpectedContext as bd, type X402PaymentHeaderContext as be, X402PaymentHeaderValidationError as bf, type X402PaymentOption as bg, type X402RequestSnapshot as bh, type X402SchemeSelection as bi, X402TaskBudgetMismatchError as bj, X402UnexpectedStatusError as bk, X402_LEGACY_PAYMENT_HEADER_NAME as bl, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as bm, X402_PAYMENT_HEADER_NAME as bn, X402_PAYMENT_HEADER_NAMES_SENT as bo, X402_PAYMENT_REQUIRED_HEADER_NAME as bp, X402_PAYMENT_RESPONSE_HEADER_NAME as bq, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as br, assertBoundDirectPaymentUserOp as bs, assertOwnTaskBudgetCloseUserOp as bt, assertOwnTaskChild as bu, assertUserOpTypedDataBinding as bv, buildSweepAuthorizationMessage as bw, buildSweepTypedData as bx, buildX402ExpectedMessage as by, compareNodeVersions as bz, type PaymentIntent as c, resolveTokenFromAddress as c0, selectErc7710PaymentOption as c1, selectPaymentOption as c2, selectStandardPaymentOption as c3, selectX402SettlementScheme as c4, signerUpdateFallback as c5, sweepUsdcAddress as c6, sweepUsdcDomain as c7, toStandardPaymentRequirements as c8, unsupportedNodeVersionMessage as c9, validateStandardX402PaymentHeader as ca, verifySettlementChild as cb, x402AssetTransferMethod as cc, x402AuthorizationAmount as cd, x402FacilitatorAddresses as ce, x402V2PaymentEnvelope as cf, type DelegationForHashing as cg, CAVEAT_ENFORCERS as ch, CAVEAT_TYPEHASH as ci, DELEGATION_MANAGER as cj, DELEGATION_TYPEHASH as ck, DIRECT_PAYMENT_CHAIN_IDS as cl, EXECUTE_ABI as cm, HYBRID_DELEGATOR_IMPLEMENTATION as cn, MAX_SETTLEMENT_WINDOW_SECONDS as co, SIMPLE_FACTORY_ADDRESS as cp, type SettlementChildTypedData as cq, assertFundingLegPaysDelegate as cr, assertOwnSettlementChild as cs, chainIdForNetwork as ct, isSettlementChildTypedData as cu, type X402AuthorizationOptions as d, type X402Intent as e, type PaymentStatusResult as f, type HavenAgent as g, type HavenAgentSummary as h, type SweepPrepareResponse as i, type SweepAuthorization as j, type SweepSubmitResponse as k, type HavenAllowanceSummary as l, type HavenBalanceCoverage as m, type PostPurchaseAllowanceSummary as n, type HavenCatalogEntry as o, type HavenCatalogSubmission as p, type HavenPaymentReceipt as q, type HavenPaymentReceiptsPage as r, type HavenTaskBudget as s, type SubmitTaskBudgetResult as t, type PaymentResumeState as u, type X402Receipt as v, type X402Quote as w, type X402Erc7710Settlement as x, type X402McpCallContext as y, type SignData as z };