@haven_ai/sdk 0.6.0-alpha.0 → 0.7.0-alpha.0

package/dist/{base64-cD9kR4JL.d.ts → base64-_seD1uw8.d.ts}

@@ -74,6 +74,14 @@ interface PaymentRequest {
      * token/recipient/parent disagree with this request.
      */
     taskBudgetId?: string;
+    /**
+     * #3330: redeem against this open sub-budget's grant (this agent is the
+     * sub-agent B) instead of the agent's budget delegation directly —
+     * `[grant, parent-child, budget]`. The backend refuses (404/409) when the
+     * id is unknown, not open, or its token/recipient/parent disagree with
+     * this request. Mutually exclusive with `taskBudgetId`.
+     */
+    subBudgetId?: string;
 }
 interface SignData {
     /** The hash to sign (keccak256, 0x-prefixed) */
@@ -277,8 +285,23 @@ interface X402AuthorizationOptions {
      * a task budget's recipient pin is compared with the agent's own delegate
      * wallet, so a merchant-pinned task budget is refused there
      * (`task_budget_recipient_mismatch`); it pays through erc7710 only (#3378).
+     * #3392: the receipt cache and in-flight map record this id per entry —
+     * reusing an idempotency key under a DIFFERENT budget throws
+     * `X402TaskBudgetMismatchError` before any network call; pay again under a
+     * new key instead.
      */
     taskBudgetId?: string;
+    /**
+     * #3330: redeem against this open sub-budget's grant (this agent is the
+     * sub-agent B) for the funding leg / erc7710 settlement instead of the
+     * agent's budget delegation directly. Same refusal contract as
+     * `PaymentRequest.subBudgetId`; mutually exclusive with `taskBudgetId`.
+     * The receipt cache and in-flight map pin this id per entry exactly as
+     * they pin `taskBudgetId` (#3392) — a key reused under a different
+     * authorizing child throws the typed mismatch error before any network
+     * call.
+     */
+    subBudgetId?: string;
 }
 /**
  * Keyless x402 construct result.
@@ -693,7 +716,7 @@ interface HavenAgentAllowanceSummary {
     remainingAtomic: string;
     /** Human-readable remaining, e.g. "4.96 USDC". */
     remainingDisplay: string;
-    /** Configured allowance amount (atomic) the owner granted. */
+    /** Configured allowance amount in whole token units (human decimal, e.g. "1.00" — NOT atomic; on-chain.amount is the atomic figure). */
     configuredAmount: string;
     resetPeriodMin: number;
     isResetPending: boolean;
@@ -831,6 +854,33 @@ interface PaymentParties {
     delegate: string | null;
     delegateAccount: string | null;
     merchant: string | null;
+    /**
+     * #3332: the paying agent's owner's company details — additive, present
+     * only when the backend has `HAVEN_OWNER_COMPANY_DETAILS` on AND the owner
+     * saved details; absent (not `undefined`-valued, the KEY is absent)
+     * otherwise. `viesStatus: 'valid'` means VIES accepted the VAT number —
+     * never render that as "verified" (see Haven's agent-passport docs on the
+     * same naming discipline).
+     *
+     * Present only on the receipt surfaces — `GET /payments/:id/receipt` and
+     * `GET /machine-payments/receipts` (`HavenClient.getReceipt()`,
+     * `listReceipts()`/`listReceiptsPage()`) — never on `GET
+     * /machine-payments/:id/status` (`getPaymentStatus`) or the evidence-attach echo,
+     * even with the feature on: those report payment/settlement state, not the
+     * buyer's company details (out of scope for #3332, see
+     * docs/product/owner-company-details.md).
+     */
+    buyer?: PaymentPartiesBuyer;
+}
+interface PaymentPartiesBuyer {
+    legalName: string;
+    /** ISO 3166-1 alpha-2. */
+    country: string;
+    /** For a sole trader this IS the personal identity number. */
+    orgNumber: string;
+    vatNumber: string | null;
+    viesStatus: 'pending' | 'valid' | 'invalid' | 'not_verifiable' | null;
+    viesCheckedAt: string | null;
 }
 /** @internal wire shape of {@link PaymentParties}. */
 interface RawPaymentParties {
@@ -838,6 +888,16 @@ interface RawPaymentParties {
     delegate: string | null;
     delegate_account: string | null;
     merchant: string | null;
+    buyer?: RawPaymentPartiesBuyer;
+}
+/** @internal wire shape of {@link PaymentPartiesBuyer}. */
+interface RawPaymentPartiesBuyer {
+    legal_name: string;
+    country: string;
+    org_number: string;
+    vat_number: string | null;
+    vies_status: 'pending' | 'valid' | 'invalid' | 'not_verifiable' | null;
+    vies_checked_at: string | null;
 }
 /**
  * #3132 (owner decision 3 on #3130): what population a list row came from and
@@ -1065,6 +1125,20 @@ declare const AgentPaymentPhase: {
      * the funds.
      */
     readonly FundedButUnsettled: "funded_but_unsettled";
+    /**
+     * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+     * window AND the sweep's last attribution chance have both passed with no
+     * verified evidence. The sweep's tick (120s) only ever confirms a
+     * transaction mined inside the payment's own settlement window (the child
+     * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+     * clock-skew allowance), so once authorize + window + skew is behind the
+     * payment, no poll — and no sweep tick — can ever change the answer.
+     * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+     * were delivered but Haven holds no verified settlement evidence; reporting
+     * a real settlement hash (`haven_report_settlement_evidence`) still works
+     * at any age.
+     */
+    readonly DeliveredUnverified: "delivered_unverified";
 };
 type AgentPaymentPhase = (typeof AgentPaymentPhase)[keyof typeof AgentPaymentPhase];
 declare const AgentPaymentNextAction: {
@@ -1222,7 +1296,7 @@ declare const AgentPaymentRail: {
 type AgentPaymentRail = (typeof AgentPaymentRail)[keyof typeof AgentPaymentRail];
 type PaymentPhase = AgentPaymentPhase;
 type PaymentNextAction = AgentPaymentNextAction;
-declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled")[];
+declare const AGENT_PAYMENT_PHASE_VALUES: ("rejected" | "expired" | "failed" | "agent_signature_required" | "payment_submitted" | "payment_confirmed" | "user_approval_required" | "user_execution_required" | "waiting_for_additional_approvals" | "funding_sent" | "insufficient_funds" | "funded_but_unsettled" | "delivered_unverified")[];
 declare const AGENT_PAYMENT_NEXT_ACTION_VALUES: ("sign_and_submit_payment" | "check_status_later" | "none" | "wait_for_user_approval" | "wait_for_user_to_complete_payment" | "retry_original_x402_request" | "stop_and_tell_user" | "request_again_if_user_still_wants_it" | "retry_with_explicit_context" | "payment_window_expired" | "fund_account_or_raise_allowance" | "sweep_stranded_funds" | "awaiting_settlement_evidence")[];
 declare const AGENT_PAYMENT_FAILURE_CODE_VALUES: ("PRICE_EXCEEDS_MAX" | "PAYMENT_WINDOW_EXPIRED" | "MERCHANT_REJECTED_AFTER_FUNDING" | "MERCHANT_UNRESPONSIVE_AFTER_FUNDING" | "MERCHANT_CALL_CONTEXT_UNAVAILABLE" | "AMBIGUOUS_MAX_AMOUNT" | "MAX_AMOUNT_UNCONVERTIBLE" | "MERCHANT_NOT_READY")[];
 declare const AGENT_PAYMENT_RAIL_VALUES: ("x402" | "mpp_demo" | "mpp_crypto" | "stripe_deposit" | "spt" | "direct" | "mpp")[];
@@ -1408,6 +1482,11 @@ interface PaymentStatusResult {
     expiresAt: string;
     chainId: number;
     message: string;
+    /**
+     * #3420: `true` = the merchant answered 2xx (a `machine_payment_evidence`
+     * row records its response); absent = unknown. See the raw field's doc.
+     */
+    delivered?: boolean;
     /** Platform fee surfaced so it's never silently collected (#386). */
     fee?: PaymentFee | null;
     amountAtomic?: string | null;
@@ -1568,6 +1647,32 @@ declare class MerchantTimeoutError extends HavenApiError {
     readonly merchantErrorCode: "merchant_timeout";
     constructor(message: string);
 }
+/**
+ * #3417: an erc7710 `POST /x402` authorize replayed a key whose payment to THIS
+ * merchant for THIS resource has already settled. The backend returns
+ * `200 { status: 'confirmed', tx_hash, to, resource_url }` and, correctly, no
+ * `sign_data`, because nothing is left to sign
+ * (`packages/backend/src/modules/x402/replay.ts`). Before this class the
+ * erc7710 path read that answer as a scheme mismatch and threw a 500, which
+ * hosted callers relayed as "transient, retry". Typed so a caller can report
+ * the original settlement instead of retrying, and never signs anything.
+ *
+ * Only thrown when the confirmed row pays the merchant this request names, for
+ * the resource it asked for. The backend's replay lookup is keyed on the
+ * idempotency key alone, so a key reused for another payee or resource — or
+ * first spent on an EIP-3009 funding leg, whose confirmed `tx_hash` proves only
+ * that the delegate was funded — is refused as a 409 collision instead of read
+ * as this settlement. Amount and the MCP tool call are not compared: on an MCP
+ * merchant the resource is its endpoint, so a key reused for another tool
+ * there is answered as that merchant's earlier payment. A `HavenError`, not a `HavenApiError`: nothing failed upstream.
+ */
+declare class X402Erc7710AlreadySettledError extends HavenError {
+    readonly paymentId: string;
+    readonly txHash: string;
+    readonly body?: unknown | undefined;
+    readonly x402ErrorCode: "payment_already_settled";
+    constructor(paymentId: string, txHash: string, body?: unknown | undefined);
+}
 declare class X402UnexpectedStatusError extends HavenApiError {
     readonly x402ErrorCode: "unexpected_non_402_status";
     /**
@@ -1626,6 +1731,33 @@ declare class HavenPaymentStateError extends HavenApiError {
     get phase(): PaymentPhase;
     get nextAction(): PaymentNextAction;
 }
+/**
+ * #3392: the SDK's x402 receipt cache and in-flight map record the
+ * `taskBudgetId` each entry was created under. A call reusing an idempotency
+ * key whose cached/in-flight entry was created under a DIFFERENT task budget
+ * is refused with this typed error BEFORE any network call — the alternative
+ * was silently returning (or joining) a payment charged to another budget.
+ * Typed rather than `HavenApiError`-shaped: no request was attempted, so
+ * there is no HTTP status or response body to carry (the
+ * `HavenZeroSettlementHashError` precedent). A caller that genuinely wants to
+ * pay again under a different budget passes a new `idempotencyKey`.
+ */
+declare class X402TaskBudgetMismatchError extends HavenError {
+    /** The idempotency key whose cached entry was created under another budget. */
+    readonly idempotencyKey: string;
+    /** The budget the cached/in-flight entry was created under (undefined = none). */
+    readonly entryTaskBudgetId: string | undefined;
+    /** The budget this call named (undefined = none). */
+    readonly requestedTaskBudgetId: string | undefined;
+    readonly x402ErrorCode: "task_budget_mismatch";
+    constructor(message: string, 
+    /** The idempotency key whose cached entry was created under another budget. */
+    idempotencyKey: string, 
+    /** The budget the cached/in-flight entry was created under (undefined = none). */
+    entryTaskBudgetId: string | undefined, 
+    /** The budget this call named (undefined = none). */
+    requestedTaskBudgetId: string | undefined);
+}
 declare class HavenSigningError extends HavenError {
     constructor(message: string);
 }
@@ -1901,7 +2033,7 @@ declare function buildSweepAuthorizationMessage(auth: SweepAuthorization): strin
  * This SDK's own version. Owned by `scripts/release-bump.mjs`, which rewrites
  * it with the package version on every release — never hand-edit it.
  */
-declare const SDK_VERSION = "0.6.0-alpha.0";
+declare const SDK_VERSION = "0.7.0-alpha.0";
 /** The request header every published Haven client sends. */
 declare const HAVEN_CLIENT_HEADER = "X-Haven-Client";
 /** `<package>/<version>` — the value of {@link HAVEN_CLIENT_HEADER}. */
@@ -2120,6 +2252,28 @@ declare function connectorRerunCommand(args?: string, options?: {
     channel?: string;
     npxFlags?: string;
 }): string;
+/**
+ * The command every UPGRADE hint names (#3412): `npx -y @haven_ai/connect@<channel> --doctor`.
+ *
+ * A bare connector re-run is a SETUP command — on a machine that is already
+ * set up it stops at "Missing --setup <hv_setup_...> setup token", so an
+ * outdated signer, local MCP or connector told to "re-run the connector" was
+ * handed a dead end. The flagless doctor works as pasted on an existing
+ * install (#3210: it resolves the runtime from the setup record), diagnoses an
+ * outdated signer, and prints the exact `--doctor --repair` line for the agent
+ * it describes — with `--credentials-dir` whenever more than one agent lives on
+ * the machine, so the repair cannot land on a different agent.
+ *
+ * `-y` because an upgrade hint is often run by an agent in a non-interactive
+ * shell. `@haven_ai/core`'s `upgradeCommandFor` (the backend's
+ * `client_update.upgrade_command`) cannot import this package, so it carries a
+ * copy; `packages/backend/src/__tests__/connector-upgrade-command-parity.test.ts`
+ * fails if the two ever disagree. Setup-time hints (identity restore,
+ * mid-setup retry) legitimately stay on {@link connectorRerunCommand}.
+ */
+declare function connectorUpgradeCommand(options?: {
+    channel?: string;
+}): string;
 
 /**
  * The Node.js floor Haven's published packages support (#1161).
@@ -2472,6 +2626,19 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     symbol: string;
     decimals: number;
 } | null;
+/**
+ * #3410: token decimals from a SYMBOL + CHAIN — the same registry
+ * `resolveTokenFromAddress` reads, keyed the other way. The address-based
+ * resolver needs the token's contract address, which the consent seed path
+ * (setup-time credential files) does not carry; the symbol and chain it does
+ * carry. Null when the symbol is not registered on that chain (unknown or
+ * custom tokens) — callers must fall back to an explicit atomic label rather
+ * than reading an atomic amount as whole tokens.
+ */
+declare function resolveTokenBySymbol(chainId: number, symbol: string): {
+    symbol: string;
+    decimals: number;
+} | null;
 
 /**
  * #3271: the integrity check every client runs before signing a direct
@@ -2502,6 +2669,19 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
  */
 /** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
 declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/**
+ * #3419: version of the task-budget sign context (`GET
+ * /task-budgets/:id/sign-context`), the sign-then-submit envelope every
+ * `haven_sign { task_budget_id }` call fetches. The backend emits it
+ * (`task-budget-service.ts`, `task_sign_context_version: 1`); the signer
+ * derives its enforced set `SUPPORTED_TASK_SIGN_CONTEXT_VERSIONS` from this
+ * constant — never a second literal — and the hosted/local task-budget
+ * handoffs report it in `signer_compatibility.task_sign_context_version`.
+ * The signer could not carry the single source itself (a published package
+ * cannot host a constant the backend also serves), so it lives beside the
+ * other binding constants here, exactly as `DIRECT_SIGN_CONTEXT_VERSION` does.
+ */
+declare const TASK_SIGN_CONTEXT_VERSION = 1;
 /** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
 declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
 /**
@@ -2955,4 +3135,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { AgentPaymentPhase as $, type AgentPaymentWarning as A, type ResumeAuthorizedX402Input as B, type CloseTaskBudgetResult as C, type ResumeX402PaymentInput as D, type X402ResumeState as E, type X402McpTransport as F, type X402MerchantCallContext as G, type HavenClientConfig as H, HavenError as I, AGENT_PAYMENT_FAILURE_CODE_VALUES as J, AGENT_PAYMENT_NEXT_ACTION_VALUES as K, AGENT_PAYMENT_PHASE_VALUES as L, AGENT_PAYMENT_RAIL_VALUES as M, type AgentNextStep as N, type OpenTaskBudgetResult as O, type PaymentRequest as P, type AgentPaymentEnumSchema as Q, type RawPaymentParties as R, type SweepResult as S, type TaskBudgetSignContext as T, AgentPaymentFailureCode as U, AgentPaymentFailureCodeDescriptions as V, AgentPaymentFailureCodeSchema as W, type X402PaymentRequired as X, AgentPaymentNextAction as Y, AgentPaymentNextActionDescriptions as Z, AgentPaymentNextActionSchema as _, type HavenClientUpdate as a, type SweepExpectedAuth as a$, AgentPaymentPhaseDescriptions as a0, AgentPaymentPhaseSchema as a1, AgentPaymentRail as a2, AgentPaymentRailDescriptions as a3, AgentPaymentRailSchema as a4, type AgentPaymentSummary as a5, AgentPaymentWarningCode as a6, type AgentPurchaseSummary as a7, CONNECTOR_PACKAGE_NAME as a8, type CatalogSubmissionAccepted as a9, NEXT_TOOL_SERVER_NAMES as aA, NEXT_TOOL_SERVER_ROLES as aB, type NextStep as aC, type NextStepArguments as aD, type NextStepHandoff as aE, type NextStepInput as aF, type NextStepTarget as aG, type NextStepTargets as aH, type NextToolServerRole as aI, PACKED_USER_OPERATION_FIELDS as aJ, type PaymentFee as aK, type PaymentNextAction as aL, type PaymentPhase as aM, type PaymentStatus as aN, ROOT_AUTHORITY as aO, SDK_CLIENT_IDENTITY as aP, SDK_VERSION as aQ, SIGNER_UPDATE_FALLBACK as aR, SWEEP_BASE_CHAIN_ID as aS, SWEEP_BASE_SEPOLIA_CHAIN_ID as aT, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aU, SWEEP_BASE_USDC_ADDRESS as aV, type SettlementChildExpectation as aW, SignerRefusalCode as aX, type SweepConfirmation as aY, type SweepEip712Domain as aZ, type SweepEntry as a_, DEFAULT_CONFIRMATION_TIMEOUT_MS as aa, DEFAULT_NEXT_TOOL_BY_ACTION as ab, DIRECT_SIGN_CONTEXT_VERSION as ac, ENTRY_POINT_V07 as ad, ERC7710_ASSET_TRANSFER_METHOD as ae, HAVEN_CLIENT_HEADER as af, HAVEN_CONNECTOR_CHANNEL as ag, HAVEN_MINIMUM_NODE_VERSION as ah, HYBRID_DELEGATOR_DOMAIN_NAME as ai, HYBRID_DELEGATOR_DOMAIN_VERSION as aj, type HavenAgentAllowanceSummary as ak, type HavenAgentReadiness as al, type HavenAllowance as am, HavenApiError as an, type HavenCatalogMerchant as ao, type HavenListScope as ap, HavenPaymentStateError as aq, HavenSigningError as ar, HavenTimeoutError as as, HavenTypedDataRefusedError as at, HavenUnsupportedSignerVersionError as au, HavenUserOpBindingError as av, HavenZeroSettlementHashError as aw, MAX_TASK_BUDGET_TTL_SECONDS as ax, type MachinePaymentRail as ay, MerchantTimeoutError as az, type PaymentResult as b, selectX402SettlementScheme as b$, type SweepPreparation as b0, type SweepSubmitResult as b1, type SweepTypedData as b2, TRANSFER_WITH_AUTHORIZATION_TYPES as b3, TYPED_DATA_NOT_ALLOWED as b4, type TaskBudgetCloseExpectation as b5, type TaskChildExpectation as b6, type TaskChildTypedData as b7, type UnsupportedNodeVersionMessageOptions as b8, X402AlreadySettledError as b9, decodeBase64Json as bA, decodeBase64Utf8 as bB, defaultNextToolFor as bC, deriveDelegateAccountAddress as bD, encodeBase64Json as bE, encodeBase64Utf8 as bF, encodePaymentProof as bG, hashDelegation as bH, havenClientIdentity as bI, isConnectorChannel as bJ, isErc7710Option as bK, isPackedUserOperationTypedData as bL, isSupportedNodeVersion as bM, isSweepableChain as bN, isTaskChildTypedData as bO, normalizePaymentRequired as bP, packedUserOperationHash as bQ, parseNextTool as bR, parsePaymentRequired as bS, parsePaymentRequiredResponse as bT, readClientUpdate as bU, renderNextTool as bV, resolveConnectorChannel as bW, resolveTokenFromAddress as bX, selectErc7710PaymentOption as bY, selectPaymentOption as bZ, selectStandardPaymentOption as b_, type X402ExpectedAuth as ba, type X402ExpectedContext as bb, type X402PaymentHeaderContext as bc, X402PaymentHeaderValidationError as bd, type X402PaymentOption as be, type X402RequestSnapshot as bf, type X402SchemeSelection as bg, X402UnexpectedStatusError as bh, X402_LEGACY_PAYMENT_HEADER_NAME as bi, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as bj, X402_PAYMENT_HEADER_NAME as bk, X402_PAYMENT_HEADER_NAMES_SENT as bl, X402_PAYMENT_REQUIRED_HEADER_NAME as bm, X402_PAYMENT_RESPONSE_HEADER_NAME as bn, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as bo, assertBoundDirectPaymentUserOp as bp, assertOwnTaskBudgetCloseUserOp as bq, assertOwnTaskChild as br, assertUserOpTypedDataBinding as bs, buildSweepAuthorizationMessage as bt, buildSweepTypedData as bu, buildX402ExpectedMessage as bv, compareNodeVersions as bw, connectorRerunCommand as bx, connectorSpec as by, createNextStepBuilder as bz, type PaymentIntent as c, signerUpdateFallback as c0, sweepUsdcAddress as c1, sweepUsdcDomain as c2, toStandardPaymentRequirements as c3, unsupportedNodeVersionMessage as c4, validateStandardX402PaymentHeader as c5, verifySettlementChild as c6, x402AssetTransferMethod as c7, x402AuthorizationAmount as c8, x402FacilitatorAddresses as c9, x402V2PaymentEnvelope as ca, CAVEAT_ENFORCERS as cb, CAVEAT_TYPEHASH as cc, DELEGATION_MANAGER as cd, DELEGATION_TYPEHASH as ce, DIRECT_PAYMENT_CHAIN_IDS as cf, type DelegationForHashing as cg, EXECUTE_ABI as ch, HYBRID_DELEGATOR_IMPLEMENTATION as ci, MAX_SETTLEMENT_WINDOW_SECONDS as cj, SIMPLE_FACTORY_ADDRESS as ck, type SettlementChildTypedData as cl, assertFundingLegPaysDelegate as cm, assertOwnSettlementChild as cn, chainIdForNetwork as co, isSettlementChildTypedData as cp, type X402AuthorizationOptions as d, type X402Intent as e, type PaymentStatusResult as f, type HavenAgent as g, type HavenAgentSummary as h, type SweepPrepareResponse as i, type SweepAuthorization as j, type SweepSubmitResponse as k, type HavenAllowanceSummary as l, type HavenBalanceCoverage as m, type PostPurchaseAllowanceSummary as n, type HavenCatalogEntry as o, type HavenCatalogSubmission as p, type HavenPaymentReceipt as q, type HavenPaymentReceiptsPage as r, type HavenTaskBudget as s, type SubmitTaskBudgetResult as t, type PaymentResumeState as u, type X402Receipt as v, type X402Quote as w, type X402Erc7710Settlement as x, type X402McpCallContext as y, type SignData as z };
+export { AgentPaymentPhase as $, type AgentPaymentWarning as A, type ResumeAuthorizedX402Input as B, type CloseTaskBudgetResult as C, type ResumeX402PaymentInput as D, type X402ResumeState as E, type X402McpTransport as F, type X402MerchantCallContext as G, type HavenClientConfig as H, HavenError as I, AGENT_PAYMENT_FAILURE_CODE_VALUES as J, AGENT_PAYMENT_NEXT_ACTION_VALUES as K, AGENT_PAYMENT_PHASE_VALUES as L, AGENT_PAYMENT_RAIL_VALUES as M, type AgentNextStep as N, type OpenTaskBudgetResult as O, type PaymentRequest as P, type AgentPaymentEnumSchema as Q, type RawPaymentParties as R, type SweepResult as S, type TaskBudgetSignContext as T, AgentPaymentFailureCode as U, AgentPaymentFailureCodeDescriptions as V, AgentPaymentFailureCodeSchema as W, type X402PaymentRequired as X, AgentPaymentNextAction as Y, AgentPaymentNextActionDescriptions as Z, AgentPaymentNextActionSchema as _, type HavenClientUpdate as a, type SweepExpectedAuth as a$, AgentPaymentPhaseDescriptions as a0, AgentPaymentPhaseSchema as a1, AgentPaymentRail as a2, AgentPaymentRailDescriptions as a3, AgentPaymentRailSchema as a4, type AgentPaymentSummary as a5, AgentPaymentWarningCode as a6, type AgentPurchaseSummary as a7, CONNECTOR_PACKAGE_NAME as a8, type CatalogSubmissionAccepted as a9, NEXT_TOOL_SERVER_NAMES as aA, NEXT_TOOL_SERVER_ROLES as aB, type NextStep as aC, type NextStepArguments as aD, type NextStepHandoff as aE, type NextStepInput as aF, type NextStepTarget as aG, type NextStepTargets as aH, type NextToolServerRole as aI, PACKED_USER_OPERATION_FIELDS as aJ, type PaymentFee as aK, type PaymentNextAction as aL, type PaymentPhase as aM, type PaymentStatus as aN, ROOT_AUTHORITY as aO, SDK_CLIENT_IDENTITY as aP, SDK_VERSION as aQ, SIGNER_UPDATE_FALLBACK as aR, SWEEP_BASE_CHAIN_ID as aS, SWEEP_BASE_SEPOLIA_CHAIN_ID as aT, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aU, SWEEP_BASE_USDC_ADDRESS as aV, type SettlementChildExpectation as aW, SignerRefusalCode as aX, type SweepConfirmation as aY, type SweepEip712Domain as aZ, type SweepEntry as a_, DEFAULT_CONFIRMATION_TIMEOUT_MS as aa, DEFAULT_NEXT_TOOL_BY_ACTION as ab, DIRECT_SIGN_CONTEXT_VERSION as ac, ENTRY_POINT_V07 as ad, ERC7710_ASSET_TRANSFER_METHOD as ae, HAVEN_CLIENT_HEADER as af, HAVEN_CONNECTOR_CHANNEL as ag, HAVEN_MINIMUM_NODE_VERSION as ah, HYBRID_DELEGATOR_DOMAIN_NAME as ai, HYBRID_DELEGATOR_DOMAIN_VERSION as aj, type HavenAgentAllowanceSummary as ak, type HavenAgentReadiness as al, type HavenAllowance as am, HavenApiError as an, type HavenCatalogMerchant as ao, type HavenListScope as ap, HavenPaymentStateError as aq, HavenSigningError as ar, HavenTimeoutError as as, HavenTypedDataRefusedError as at, HavenUnsupportedSignerVersionError as au, HavenUserOpBindingError as av, HavenZeroSettlementHashError as aw, MAX_TASK_BUDGET_TTL_SECONDS as ax, type MachinePaymentRail as ay, MerchantTimeoutError as az, type PaymentResult as b, resolveTokenBySymbol as b$, type SweepPreparation as b0, type SweepSubmitResult as b1, type SweepTypedData as b2, TASK_SIGN_CONTEXT_VERSION as b3, TRANSFER_WITH_AUTHORIZATION_TYPES as b4, TYPED_DATA_NOT_ALLOWED as b5, type TaskBudgetCloseExpectation as b6, type TaskChildExpectation as b7, type TaskChildTypedData as b8, type UnsupportedNodeVersionMessageOptions as b9, connectorRerunCommand as bA, connectorSpec as bB, connectorUpgradeCommand as bC, createNextStepBuilder as bD, decodeBase64Json as bE, decodeBase64Utf8 as bF, defaultNextToolFor as bG, deriveDelegateAccountAddress as bH, encodeBase64Json as bI, encodeBase64Utf8 as bJ, encodePaymentProof as bK, hashDelegation as bL, havenClientIdentity as bM, isConnectorChannel as bN, isErc7710Option as bO, isPackedUserOperationTypedData as bP, isSupportedNodeVersion as bQ, isSweepableChain as bR, isTaskChildTypedData as bS, normalizePaymentRequired as bT, packedUserOperationHash as bU, parseNextTool as bV, parsePaymentRequired as bW, parsePaymentRequiredResponse as bX, readClientUpdate as bY, renderNextTool as bZ, resolveConnectorChannel as b_, X402AlreadySettledError as ba, X402Erc7710AlreadySettledError as bb, type X402ExpectedAuth as bc, type X402ExpectedContext as bd, type X402PaymentHeaderContext as be, X402PaymentHeaderValidationError as bf, type X402PaymentOption as bg, type X402RequestSnapshot as bh, type X402SchemeSelection as bi, X402TaskBudgetMismatchError as bj, X402UnexpectedStatusError as bk, X402_LEGACY_PAYMENT_HEADER_NAME as bl, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as bm, X402_PAYMENT_HEADER_NAME as bn, X402_PAYMENT_HEADER_NAMES_SENT as bo, X402_PAYMENT_REQUIRED_HEADER_NAME as bp, X402_PAYMENT_RESPONSE_HEADER_NAME as bq, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as br, assertBoundDirectPaymentUserOp as bs, assertOwnTaskBudgetCloseUserOp as bt, assertOwnTaskChild as bu, assertUserOpTypedDataBinding as bv, buildSweepAuthorizationMessage as bw, buildSweepTypedData as bx, buildX402ExpectedMessage as by, compareNodeVersions as bz, type PaymentIntent as c, resolveTokenFromAddress as c0, selectErc7710PaymentOption as c1, selectPaymentOption as c2, selectStandardPaymentOption as c3, selectX402SettlementScheme as c4, signerUpdateFallback as c5, sweepUsdcAddress as c6, sweepUsdcDomain as c7, toStandardPaymentRequirements as c8, unsupportedNodeVersionMessage as c9, validateStandardX402PaymentHeader as ca, verifySettlementChild as cb, x402AssetTransferMethod as cc, x402AuthorizationAmount as cd, x402FacilitatorAddresses as ce, x402V2PaymentEnvelope as cf, type DelegationForHashing as cg, CAVEAT_ENFORCERS as ch, CAVEAT_TYPEHASH as ci, DELEGATION_MANAGER as cj, DELEGATION_TYPEHASH as ck, DIRECT_PAYMENT_CHAIN_IDS as cl, EXECUTE_ABI as cm, HYBRID_DELEGATOR_IMPLEMENTATION as cn, MAX_SETTLEMENT_WINDOW_SECONDS as co, SIMPLE_FACTORY_ADDRESS as cp, type SettlementChildTypedData as cq, assertFundingLegPaysDelegate as cr, assertOwnSettlementChild as cs, chainIdForNetwork as ct, isSettlementChildTypedData as cu, type X402AuthorizationOptions as d, type X402Intent as e, type PaymentStatusResult as f, type HavenAgent as g, type HavenAgentSummary as h, type SweepPrepareResponse as i, type SweepAuthorization as j, type SweepSubmitResponse as k, type HavenAllowanceSummary as l, type HavenBalanceCoverage as m, type PostPurchaseAllowanceSummary as n, type HavenCatalogEntry as o, type HavenCatalogSubmission as p, type HavenPaymentReceipt as q, type HavenPaymentReceiptsPage as r, type HavenTaskBudget as s, type SubmitTaskBudgetResult as t, type PaymentResumeState as u, type X402Receipt as v, type X402Quote as w, type X402Erc7710Settlement as x, type X402McpCallContext as y, type SignData as z };

package/dist/{chunk-S42QSWJY.cjs → chunk-3SVPI4LS.cjs}

@@ -28,6 +28,9 @@ function connectorRerunCommand(args, options) {
   const command = `npx ${flags}${connectorSpec(channel)}`;
   return args ? `${command} ${args}` : command;
 }
+function connectorUpgradeCommand(options) {
+  return connectorRerunCommand("--doctor", { channel: options?.channel, npxFlags: "-y" });
+}
 
 // src/types.ts
 var DEFAULT_CONFIRMATION_TIMEOUT_MS = 9e4;
@@ -73,7 +76,21 @@ var AgentPaymentPhase = {
    * agent should stop, tell the user, and wait for the sweep flow to reclaim
    * the funds.
    */
-  FundedButUnsettled: "funded_but_unsettled"
+  FundedButUnsettled: "funded_but_unsettled",
+  /**
+   * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+   * window AND the sweep's last attribution chance have both passed with no
+   * verified evidence. The sweep's tick (120s) only ever confirms a
+   * transaction mined inside the payment's own settlement window (the child
+   * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+   * clock-skew allowance), so once authorize + window + skew is behind the
+   * payment, no poll — and no sweep tick — can ever change the answer.
+   * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+   * were delivered but Haven holds no verified settlement evidence; reporting
+   * a real settlement hash (`haven_report_settlement_evidence`) still works
+   * at any age.
+   */
+  DeliveredUnverified: "delivered_unverified"
 };
 var AgentPaymentNextAction = {
   /** Sign with the delegate key and submit the payment to Haven. */
@@ -221,7 +238,8 @@ var AgentPaymentPhaseDescriptions = {
   [AgentPaymentPhase.Expired]: "The payment expired before completion.",
   [AgentPaymentPhase.Failed]: "Haven could not complete the payment; the agent should stop and surface the failure.",
   [AgentPaymentPhase.InsufficientFunds]: "Pre-flight check determined the delegate balance plus the remaining on-chain budget cannot cover the requested amount, so no payment was created. The account must be funded or the agent budget raised before retrying.",
-  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account."
+  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account.",
+  [AgentPaymentPhase.DeliveredUnverified]: "Terminal: the merchant delivered the goods and the settlement window plus the sweep's last attribution chance have both passed with no verified on-chain evidence. The payment can no longer resolve by polling. Tell the user the goods were delivered but Haven holds no verified settlement evidence for this payment."
 };
 var AgentPaymentNextActionDescriptions = {
   [AgentPaymentNextAction.SignAndSubmitPayment]: "Sign with the delegate key and submit the payment to Haven.",
@@ -356,6 +374,24 @@ var MerchantTimeoutError = class extends HavenApiError {
     this.name = "MerchantTimeoutError";
   }
 };
+var X402Erc7710AlreadySettledError = class extends HavenError {
+  constructor(paymentId, txHash, body) {
+    super(
+      `Payment ${paymentId} already settled on-chain (tx ${txHash}). Nothing was signed and nothing new was charged.`,
+      "PAYMENT_ALREADY_SETTLED",
+      void 0,
+      paymentId
+    );
+    this.paymentId = paymentId;
+    this.txHash = txHash;
+    this.body = body;
+    this.name = "X402Erc7710AlreadySettledError";
+  }
+  paymentId;
+  txHash;
+  body;
+  x402ErrorCode = "payment_already_settled";
+};
 var X402UnexpectedStatusError = class extends HavenApiError {
   x402ErrorCode = "unexpected_non_402_status";
   /**
@@ -402,6 +438,19 @@ var HavenPaymentStateError = class extends HavenApiError {
     return this.state.nextAction;
   }
 };
+var X402TaskBudgetMismatchError = class extends HavenError {
+  constructor(message, idempotencyKey, entryTaskBudgetId, requestedTaskBudgetId) {
+    super(message, "X402_TASK_BUDGET_MISMATCH");
+    this.idempotencyKey = idempotencyKey;
+    this.entryTaskBudgetId = entryTaskBudgetId;
+    this.requestedTaskBudgetId = requestedTaskBudgetId;
+    this.name = "X402TaskBudgetMismatchError";
+  }
+  idempotencyKey;
+  entryTaskBudgetId;
+  requestedTaskBudgetId;
+  x402ErrorCode = "task_budget_mismatch";
+};
 var HavenSigningError = class extends HavenError {
   constructor(message) {
     super(message, "SIGNING_ERROR");
@@ -426,7 +475,7 @@ var SignerRefusalCode = {
   UnsupportedSweepBindingVersion: "UNSUPPORTED_SWEEP_BINDING_VERSION"
 };
 function signerUpdateFallback(channel = HAVEN_CONNECTOR_CHANNEL) {
-  return `Update @haven_ai/signer by rerunning \`${connectorRerunCommand(void 0, { channel })}\`, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
+  return `Update @haven_ai/signer: run \`${connectorUpgradeCommand({ channel })}\` and then the repair line it prints, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
 }
 var SIGNER_UPDATE_FALLBACK = signerUpdateFallback();
 var HavenUnsupportedSignerVersionError = class extends HavenError {
@@ -453,6 +502,7 @@ var HavenTimeoutError = class extends HavenError {
   }
 };
 var DIRECT_SIGN_CONTEXT_VERSION = 1;
+var TASK_SIGN_CONTEXT_VERSION = 1;
 var EIP712_DOMAIN_FIELDS = [
   { name: "name", type: "string" },
   { name: "version", type: "string" },
@@ -850,7 +900,7 @@ var REDEEM_DELEGATIONS_ABI = [
 var SINGLE_DEFAULT_MODE = `0x${"00".repeat(32)}`;
 function refuse3(detail) {
   throw new HavenSigningError(
-    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs one of two shapes: a single grant to the agent's own account, or a self-delegated task-budget child redeemed under it (the two-link [task child, budget] chain).`
+    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs one of three shapes: a single grant to the agent's own account, a self-delegated task-budget child redeemed under it (the two-link [task child, budget] chain), or a sub-budget grant redeemed under its parent's self-narrowing (the three-link [sub grant, parent child, budget] chain, #3330).`
   );
 }
 function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
@@ -894,9 +944,9 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
       "carries an EMPTY delegation chain \u2014 DelegationManager treats this as self-authorised and runs the paired execution as the account, with no caveat, budget or recipient pin"
     );
   }
-  if (delegations.length !== 1 && delegations.length !== 2) {
+  if (delegations.length !== 1 && delegations.length !== 2 && delegations.length !== 3) {
     refuse3(
-      `carries a ${delegations.length}-link delegation chain, not the single budget grant or the two-link [task child, budget] chain Haven emits`
+      `carries a ${delegations.length}-link delegation chain, not the single budget grant, the two-link [task child, budget] chain, or the three-link [sub grant, parent child, budget] chain Haven emits`
     );
   }
   const reEncodedContext = viem.encodeAbiParameters(DELEGATION_ARRAY_PARAM, [delegations]);
@@ -928,6 +978,37 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
     }
     return;
   }
+  if (delegations.length === 3) {
+    if (leaf.delegator.toLowerCase() === ownAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose leaf is delegated by this signer's OWN account \u2014 a sub-budget grant always comes from the delegating agent, never from the sub-agent itself"
+      );
+    }
+    const parentChild = delegations[1];
+    const parentAccount = leaf.delegator;
+    if (parentChild.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link delegates to ${parentChild.delegate}, not the delegating agent's account the leaf names as its delegator (${parentAccount})`
+      );
+    }
+    if (parentChild.delegator.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link is delegated by ${parentChild.delegator}, not the delegating agent's own account (${parentAccount}) \u2014 the parent link is a self-delegated narrowing`
+      );
+    }
+    const budget = delegations[2];
+    if (budget.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose budget link delegates to ${budget.delegate}, not the delegating agent's account (${parentAccount})`
+      );
+    }
+    if (budget.delegator.toLowerCase() === parentAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose budget link is granted by the delegating agent's OWN account \u2014 a real budget delegation always comes from elsewhere"
+      );
+    }
+    return;
+  }
   const root = delegations[delegations.length - 1];
   if (root.delegator.toLowerCase() === ownAccount.toLowerCase()) {
     refuse3(
@@ -981,13 +1062,17 @@ exports.SIGNER_UPDATE_FALLBACK = SIGNER_UPDATE_FALLBACK;
 exports.SIMPLE_FACTORY_ADDRESS = SIMPLE_FACTORY_ADDRESS;
 exports.SINGLE_DEFAULT_MODE = SINGLE_DEFAULT_MODE;
 exports.SignerRefusalCode = SignerRefusalCode;
+exports.TASK_SIGN_CONTEXT_VERSION = TASK_SIGN_CONTEXT_VERSION;
 exports.X402AlreadySettledError = X402AlreadySettledError;
+exports.X402Erc7710AlreadySettledError = X402Erc7710AlreadySettledError;
+exports.X402TaskBudgetMismatchError = X402TaskBudgetMismatchError;
 exports.X402UnexpectedStatusError = X402UnexpectedStatusError;
 exports.assertRedeemsOwnBudgetDelegation = assertRedeemsOwnBudgetDelegation;
 exports.assertUserOpTypedDataBinding = assertUserOpTypedDataBinding;
 exports.chainIdForNetwork = chainIdForNetwork;
 exports.connectorRerunCommand = connectorRerunCommand;
 exports.connectorSpec = connectorSpec;
+exports.connectorUpgradeCommand = connectorUpgradeCommand;
 exports.deriveDelegateAccountAddress = deriveDelegateAccountAddress;
 exports.isConnectorChannel = isConnectorChannel;
 exports.isPackedUserOperationTypedData = isPackedUserOperationTypedData;
@@ -996,5 +1081,5 @@ exports.packedUserOperationHash = packedUserOperationHash;
 exports.resolveConnectorChannel = resolveConnectorChannel;
 exports.signerUpdateFallback = signerUpdateFallback;
 exports.verifySettlementChild = verifySettlementChild;
-//# sourceMappingURL=chunk-S42QSWJY.cjs.map
-//# sourceMappingURL=chunk-S42QSWJY.cjs.map
+//# sourceMappingURL=chunk-3SVPI4LS.cjs.map
+//# sourceMappingURL=chunk-3SVPI4LS.cjs.map