@haven_ai/sdk 0.5.0-alpha.1 → 0.7.0-alpha.0

package/dist/{chunk-JKUIE45B.cjs → chunk-3SVPI4LS.cjs}

@@ -28,6 +28,9 @@ function connectorRerunCommand(args, options) {
   const command = `npx ${flags}${connectorSpec(channel)}`;
   return args ? `${command} ${args}` : command;
 }
+function connectorUpgradeCommand(options) {
+  return connectorRerunCommand("--doctor", { channel: options?.channel, npxFlags: "-y" });
+}
 
 // src/types.ts
 var DEFAULT_CONFIRMATION_TIMEOUT_MS = 9e4;
@@ -73,7 +76,21 @@ var AgentPaymentPhase = {
    * agent should stop, tell the user, and wait for the sweep flow to reclaim
    * the funds.
    */
-  FundedButUnsettled: "funded_but_unsettled"
+  FundedButUnsettled: "funded_but_unsettled",
+  /**
+   * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+   * window AND the sweep's last attribution chance have both passed with no
+   * verified evidence. The sweep's tick (120s) only ever confirms a
+   * transaction mined inside the payment's own settlement window (the child
+   * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+   * clock-skew allowance), so once authorize + window + skew is behind the
+   * payment, no poll — and no sweep tick — can ever change the answer.
+   * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+   * were delivered but Haven holds no verified settlement evidence; reporting
+   * a real settlement hash (`haven_report_settlement_evidence`) still works
+   * at any age.
+   */
+  DeliveredUnverified: "delivered_unverified"
 };
 var AgentPaymentNextAction = {
   /** Sign with the delegate key and submit the payment to Haven. */
@@ -221,7 +238,8 @@ var AgentPaymentPhaseDescriptions = {
   [AgentPaymentPhase.Expired]: "The payment expired before completion.",
   [AgentPaymentPhase.Failed]: "Haven could not complete the payment; the agent should stop and surface the failure.",
   [AgentPaymentPhase.InsufficientFunds]: "Pre-flight check determined the delegate balance plus the remaining on-chain budget cannot cover the requested amount, so no payment was created. The account must be funded or the agent budget raised before retrying.",
-  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account."
+  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account.",
+  [AgentPaymentPhase.DeliveredUnverified]: "Terminal: the merchant delivered the goods and the settlement window plus the sweep's last attribution chance have both passed with no verified on-chain evidence. The payment can no longer resolve by polling. Tell the user the goods were delivered but Haven holds no verified settlement evidence for this payment."
 };
 var AgentPaymentNextActionDescriptions = {
   [AgentPaymentNextAction.SignAndSubmitPayment]: "Sign with the delegate key and submit the payment to Haven.",
@@ -356,6 +374,24 @@ var MerchantTimeoutError = class extends HavenApiError {
     this.name = "MerchantTimeoutError";
   }
 };
+var X402Erc7710AlreadySettledError = class extends HavenError {
+  constructor(paymentId, txHash, body) {
+    super(
+      `Payment ${paymentId} already settled on-chain (tx ${txHash}). Nothing was signed and nothing new was charged.`,
+      "PAYMENT_ALREADY_SETTLED",
+      void 0,
+      paymentId
+    );
+    this.paymentId = paymentId;
+    this.txHash = txHash;
+    this.body = body;
+    this.name = "X402Erc7710AlreadySettledError";
+  }
+  paymentId;
+  txHash;
+  body;
+  x402ErrorCode = "payment_already_settled";
+};
 var X402UnexpectedStatusError = class extends HavenApiError {
   x402ErrorCode = "unexpected_non_402_status";
   /**
@@ -402,6 +438,19 @@ var HavenPaymentStateError = class extends HavenApiError {
     return this.state.nextAction;
   }
 };
+var X402TaskBudgetMismatchError = class extends HavenError {
+  constructor(message, idempotencyKey, entryTaskBudgetId, requestedTaskBudgetId) {
+    super(message, "X402_TASK_BUDGET_MISMATCH");
+    this.idempotencyKey = idempotencyKey;
+    this.entryTaskBudgetId = entryTaskBudgetId;
+    this.requestedTaskBudgetId = requestedTaskBudgetId;
+    this.name = "X402TaskBudgetMismatchError";
+  }
+  idempotencyKey;
+  entryTaskBudgetId;
+  requestedTaskBudgetId;
+  x402ErrorCode = "task_budget_mismatch";
+};
 var HavenSigningError = class extends HavenError {
   constructor(message) {
     super(message, "SIGNING_ERROR");
@@ -426,7 +475,7 @@ var SignerRefusalCode = {
   UnsupportedSweepBindingVersion: "UNSUPPORTED_SWEEP_BINDING_VERSION"
 };
 function signerUpdateFallback(channel = HAVEN_CONNECTOR_CHANNEL) {
-  return `Update @haven_ai/signer by rerunning \`${connectorRerunCommand(void 0, { channel })}\`, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
+  return `Update @haven_ai/signer: run \`${connectorUpgradeCommand({ channel })}\` and then the repair line it prints, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
 }
 var SIGNER_UPDATE_FALLBACK = signerUpdateFallback();
 var HavenUnsupportedSignerVersionError = class extends HavenError {
@@ -453,6 +502,7 @@ var HavenTimeoutError = class extends HavenError {
   }
 };
 var DIRECT_SIGN_CONTEXT_VERSION = 1;
+var TASK_SIGN_CONTEXT_VERSION = 1;
 var EIP712_DOMAIN_FIELDS = [
   { name: "name", type: "string" },
   { name: "version", type: "string" },
@@ -595,7 +645,15 @@ var CAVEAT_ENFORCERS = {
 var MAX_SETTLEMENT_WINDOW_SECONDS = 600;
 function isSettlementChildTypedData(value) {
   const td = value;
-  return !!td && td.primaryType === "Delegation" && typeof td.domain?.verifyingContract === "string" && Array.isArray(td.message?.caveats);
+  if (!td || td.primaryType !== "Delegation" || typeof td.domain?.verifyingContract !== "string" || !Array.isArray(td.message?.caveats)) {
+    return false;
+  }
+  const delegate = td.message?.delegate;
+  const delegator = td.message?.delegator;
+  if (typeof delegate === "string" && typeof delegator === "string" && delegate.toLowerCase() === delegator.toLowerCase()) {
+    return false;
+  }
+  return true;
 }
 function same(a, b) {
   return !!a && !!b && a.toLowerCase() === b.toLowerCase();
@@ -659,6 +717,13 @@ function verifySettlementChild(typedData, expected, now = Date.now()) {
         `Expected delegator ${expected.delegatorAccount}; the child names ${String(delegator)}.`
       );
     }
+    const delegate = typedData.message?.delegate;
+    if (typeof delegate === "string" && same(delegate, delegator)) {
+      refuse2(
+        "its delegate is the same account as its delegator (a self-delegation)",
+        "A settlement child is always redeemed by a facilitator or left open to any redeemer \u2014 never redeemable only by the account that granted it. This is the shape of a task-budget child, a different typed-data class Haven never signs through this path."
+      );
+    }
   }
   const caveats = typedData.message?.caveats ?? [];
   if (caveats.length === 0) {
@@ -835,7 +900,7 @@ var REDEEM_DELEGATIONS_ABI = [
 var SINGLE_DEFAULT_MODE = `0x${"00".repeat(32)}`;
 function refuse3(detail) {
   throw new HavenSigningError(
-    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs a redemption of a single delegation granted to the agent's own account.`
+    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs one of three shapes: a single grant to the agent's own account, a self-delegated task-budget child redeemed under it (the two-link [task child, budget] chain), or a sub-budget grant redeemed under its parent's self-narrowing (the three-link [sub grant, parent child, budget] chain, #3330).`
   );
 }
 function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
@@ -879,8 +944,10 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
       "carries an EMPTY delegation chain \u2014 DelegationManager treats this as self-authorised and runs the paired execution as the account, with no caveat, budget or recipient pin"
     );
   }
-  if (delegations.length !== 1) {
-    refuse3(`carries a ${delegations.length}-link delegation chain, not the single budget grant Haven emits`);
+  if (delegations.length !== 1 && delegations.length !== 2 && delegations.length !== 3) {
+    refuse3(
+      `carries a ${delegations.length}-link delegation chain, not the single budget grant, the two-link [task child, budget] chain, or the three-link [sub grant, parent child, budget] chain Haven emits`
+    );
   }
   const reEncodedContext = viem.encodeAbiParameters(DELEGATION_ARRAY_PARAM, [delegations]);
   if (reEncodedContext.toLowerCase() !== permissionContexts[0].toLowerCase()) {
@@ -892,6 +959,56 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
       `is redeemed for delegate ${leaf.delegate}, not this signer's own account (${ownAccount})`
     );
   }
+  if (delegations.length === 2) {
+    if (leaf.delegator.toLowerCase() !== ownAccount.toLowerCase()) {
+      refuse3(
+        `carries a two-link chain whose leaf is delegated by ${leaf.delegator}, not this signer's own account (${ownAccount}) \u2014 a task-budget child is always self-delegated`
+      );
+    }
+    const budget = delegations[1];
+    if (budget.delegate.toLowerCase() !== ownAccount.toLowerCase()) {
+      refuse3(
+        `carries a two-link chain whose second link delegates to ${budget.delegate}, not this signer's own account (${ownAccount})`
+      );
+    }
+    if (budget.delegator.toLowerCase() === ownAccount.toLowerCase()) {
+      refuse3(
+        "carries a two-link chain whose budget link is granted by this signer's OWN account \u2014 a real budget delegation always comes from elsewhere"
+      );
+    }
+    return;
+  }
+  if (delegations.length === 3) {
+    if (leaf.delegator.toLowerCase() === ownAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose leaf is delegated by this signer's OWN account \u2014 a sub-budget grant always comes from the delegating agent, never from the sub-agent itself"
+      );
+    }
+    const parentChild = delegations[1];
+    const parentAccount = leaf.delegator;
+    if (parentChild.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link delegates to ${parentChild.delegate}, not the delegating agent's account the leaf names as its delegator (${parentAccount})`
+      );
+    }
+    if (parentChild.delegator.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link is delegated by ${parentChild.delegator}, not the delegating agent's own account (${parentAccount}) \u2014 the parent link is a self-delegated narrowing`
+      );
+    }
+    const budget = delegations[2];
+    if (budget.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose budget link delegates to ${budget.delegate}, not the delegating agent's account (${parentAccount})`
+      );
+    }
+    if (budget.delegator.toLowerCase() === parentAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose budget link is granted by the delegating agent's OWN account \u2014 a real budget delegation always comes from elsewhere"
+      );
+    }
+    return;
+  }
   const root = delegations[delegations.length - 1];
   if (root.delegator.toLowerCase() === ownAccount.toLowerCase()) {
     refuse3(
@@ -945,13 +1062,17 @@ exports.SIGNER_UPDATE_FALLBACK = SIGNER_UPDATE_FALLBACK;
 exports.SIMPLE_FACTORY_ADDRESS = SIMPLE_FACTORY_ADDRESS;
 exports.SINGLE_DEFAULT_MODE = SINGLE_DEFAULT_MODE;
 exports.SignerRefusalCode = SignerRefusalCode;
+exports.TASK_SIGN_CONTEXT_VERSION = TASK_SIGN_CONTEXT_VERSION;
 exports.X402AlreadySettledError = X402AlreadySettledError;
+exports.X402Erc7710AlreadySettledError = X402Erc7710AlreadySettledError;
+exports.X402TaskBudgetMismatchError = X402TaskBudgetMismatchError;
 exports.X402UnexpectedStatusError = X402UnexpectedStatusError;
 exports.assertRedeemsOwnBudgetDelegation = assertRedeemsOwnBudgetDelegation;
 exports.assertUserOpTypedDataBinding = assertUserOpTypedDataBinding;
 exports.chainIdForNetwork = chainIdForNetwork;
 exports.connectorRerunCommand = connectorRerunCommand;
 exports.connectorSpec = connectorSpec;
+exports.connectorUpgradeCommand = connectorUpgradeCommand;
 exports.deriveDelegateAccountAddress = deriveDelegateAccountAddress;
 exports.isConnectorChannel = isConnectorChannel;
 exports.isPackedUserOperationTypedData = isPackedUserOperationTypedData;
@@ -960,5 +1081,5 @@ exports.packedUserOperationHash = packedUserOperationHash;
 exports.resolveConnectorChannel = resolveConnectorChannel;
 exports.signerUpdateFallback = signerUpdateFallback;
 exports.verifySettlementChild = verifySettlementChild;
-//# sourceMappingURL=chunk-JKUIE45B.cjs.map
-//# sourceMappingURL=chunk-JKUIE45B.cjs.map
+//# sourceMappingURL=chunk-3SVPI4LS.cjs.map
+//# sourceMappingURL=chunk-3SVPI4LS.cjs.map