@haven_ai/sdk 0.6.0-alpha.0 → 0.8.0-alpha.0

package/dist/{chunk-S42QSWJY.cjs → chunk-HX34HOW4.cjs}

@@ -28,6 +28,9 @@ function connectorRerunCommand(args, options) {
   const command = `npx ${flags}${connectorSpec(channel)}`;
   return args ? `${command} ${args}` : command;
 }
+function connectorUpgradeCommand(options) {
+  return connectorRerunCommand("--doctor", { channel: options?.channel, npxFlags: "-y" });
+}
 
 // src/types.ts
 var DEFAULT_CONFIRMATION_TIMEOUT_MS = 9e4;
@@ -73,7 +76,21 @@ var AgentPaymentPhase = {
    * agent should stop, tell the user, and wait for the sweep flow to reclaim
    * the funds.
    */
-  FundedButUnsettled: "funded_but_unsettled"
+  FundedButUnsettled: "funded_but_unsettled",
+  /**
+   * #3420: TERMINAL — a `submitted` erc7710 x402 intent whose settlement
+   * window AND the sweep's last attribution chance have both passed with no
+   * verified evidence. The sweep's tick (120s) only ever confirms a
+   * transaction mined inside the payment's own settlement window (the child
+   * delegation's on-chain `timestamp` caveat, plus the verifier's 120s
+   * clock-skew allowance), so once authorize + window + skew is behind the
+   * payment, no poll — and no sweep tick — can ever change the answer.
+   * The paired `next_action` is `stop_and_tell_user`: tell the user the goods
+   * were delivered but Haven holds no verified settlement evidence; reporting
+   * a real settlement hash (`haven_report_settlement_evidence`) still works
+   * at any age.
+   */
+  DeliveredUnverified: "delivered_unverified"
 };
 var AgentPaymentNextAction = {
   /** Sign with the delegate key and submit the payment to Haven. */
@@ -221,7 +238,8 @@ var AgentPaymentPhaseDescriptions = {
   [AgentPaymentPhase.Expired]: "The payment expired before completion.",
   [AgentPaymentPhase.Failed]: "Haven could not complete the payment; the agent should stop and surface the failure.",
   [AgentPaymentPhase.InsufficientFunds]: "Pre-flight check determined the delegate balance plus the remaining on-chain budget cannot cover the requested amount, so no payment was created. The account must be funded or the agent budget raised before retrying.",
-  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account."
+  [AgentPaymentPhase.FundedButUnsettled]: "Haven's funding leg confirmed on-chain but the merchant rejected the x402 retry. The delegate wallet may hold stranded funds. The agent should stop and wait for the wallet owner to sweep the stranded funds back to the account.",
+  [AgentPaymentPhase.DeliveredUnverified]: "Terminal: the merchant delivered the goods and the settlement window plus the sweep's last attribution chance have both passed with no verified on-chain evidence. The payment can no longer resolve by polling. Tell the user the goods were delivered but Haven holds no verified settlement evidence for this payment."
 };
 var AgentPaymentNextActionDescriptions = {
   [AgentPaymentNextAction.SignAndSubmitPayment]: "Sign with the delegate key and submit the payment to Haven.",
@@ -356,6 +374,24 @@ var MerchantTimeoutError = class extends HavenApiError {
     this.name = "MerchantTimeoutError";
   }
 };
+var X402Erc7710AlreadySettledError = class extends HavenError {
+  constructor(paymentId, txHash, body) {
+    super(
+      `Payment ${paymentId} already settled on-chain (tx ${txHash}). Nothing was signed and nothing new was charged.`,
+      "PAYMENT_ALREADY_SETTLED",
+      void 0,
+      paymentId
+    );
+    this.paymentId = paymentId;
+    this.txHash = txHash;
+    this.body = body;
+    this.name = "X402Erc7710AlreadySettledError";
+  }
+  paymentId;
+  txHash;
+  body;
+  x402ErrorCode = "payment_already_settled";
+};
 var X402UnexpectedStatusError = class extends HavenApiError {
   x402ErrorCode = "unexpected_non_402_status";
   /**
@@ -402,6 +438,19 @@ var HavenPaymentStateError = class extends HavenApiError {
     return this.state.nextAction;
   }
 };
+var X402TaskBudgetMismatchError = class extends HavenError {
+  constructor(message, idempotencyKey, entryTaskBudgetId, requestedTaskBudgetId) {
+    super(message, "X402_TASK_BUDGET_MISMATCH");
+    this.idempotencyKey = idempotencyKey;
+    this.entryTaskBudgetId = entryTaskBudgetId;
+    this.requestedTaskBudgetId = requestedTaskBudgetId;
+    this.name = "X402TaskBudgetMismatchError";
+  }
+  idempotencyKey;
+  entryTaskBudgetId;
+  requestedTaskBudgetId;
+  x402ErrorCode = "task_budget_mismatch";
+};
 var HavenSigningError = class extends HavenError {
   constructor(message) {
     super(message, "SIGNING_ERROR");
@@ -426,7 +475,7 @@ var SignerRefusalCode = {
   UnsupportedSweepBindingVersion: "UNSUPPORTED_SWEEP_BINDING_VERSION"
 };
 function signerUpdateFallback(channel = HAVEN_CONNECTOR_CHANNEL) {
-  return `Update @haven_ai/signer by rerunning \`${connectorRerunCommand(void 0, { channel })}\`, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
+  return `Update @haven_ai/signer: run \`${connectorUpgradeCommand({ channel })}\` and then the repair line it prints, which reinstalls the pinned MCP runtime, then retry the same signing call. Nothing was signed or spent \u2014 the quote or payment this version came from is unaffected and does not need to be re-quoted.`;
 }
 var SIGNER_UPDATE_FALLBACK = signerUpdateFallback();
 var HavenUnsupportedSignerVersionError = class extends HavenError {
@@ -453,6 +502,7 @@ var HavenTimeoutError = class extends HavenError {
   }
 };
 var DIRECT_SIGN_CONTEXT_VERSION = 1;
+var TASK_SIGN_CONTEXT_VERSION = 1;
 var EIP712_DOMAIN_FIELDS = [
   { name: "name", type: "string" },
   { name: "version", type: "string" },
@@ -850,7 +900,7 @@ var REDEEM_DELEGATIONS_ABI = [
 var SINGLE_DEFAULT_MODE = `0x${"00".repeat(32)}`;
 function refuse3(detail) {
   throw new HavenSigningError(
-    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs one of two shapes: a single grant to the agent's own account, or a self-delegated task-budget child redeemed under it (the two-link [task child, budget] chain).`
+    `Refusing to sign: this UserOperation's redeemDelegations call ${detail}. This signer only signs one of three shapes: a single grant to the agent's own account, a self-delegated task-budget child redeemed under it (the two-link [task child, budget] chain), or a sub-budget grant redeemed under its parent's self-narrowing (the three-link [sub grant, parent child, budget] chain, #3330).`
   );
 }
 function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
@@ -894,9 +944,9 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
       "carries an EMPTY delegation chain \u2014 DelegationManager treats this as self-authorised and runs the paired execution as the account, with no caveat, budget or recipient pin"
     );
   }
-  if (delegations.length !== 1 && delegations.length !== 2) {
+  if (delegations.length !== 1 && delegations.length !== 2 && delegations.length !== 3) {
     refuse3(
-      `carries a ${delegations.length}-link delegation chain, not the single budget grant or the two-link [task child, budget] chain Haven emits`
+      `carries a ${delegations.length}-link delegation chain, not the single budget grant, the two-link [task child, budget] chain, or the three-link [sub grant, parent child, budget] chain Haven emits`
     );
   }
   const reEncodedContext = viem.encodeAbiParameters(DELEGATION_ARRAY_PARAM, [delegations]);
@@ -928,6 +978,37 @@ function assertRedeemsOwnBudgetDelegation(redeemCalldata, ownAccount) {
     }
     return;
   }
+  if (delegations.length === 3) {
+    if (leaf.delegator.toLowerCase() === ownAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose leaf is delegated by this signer's OWN account \u2014 a sub-budget grant always comes from the delegating agent, never from the sub-agent itself"
+      );
+    }
+    const parentChild = delegations[1];
+    const parentAccount = leaf.delegator;
+    if (parentChild.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link delegates to ${parentChild.delegate}, not the delegating agent's account the leaf names as its delegator (${parentAccount})`
+      );
+    }
+    if (parentChild.delegator.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose middle link is delegated by ${parentChild.delegator}, not the delegating agent's own account (${parentAccount}) \u2014 the parent link is a self-delegated narrowing`
+      );
+    }
+    const budget = delegations[2];
+    if (budget.delegate.toLowerCase() !== parentAccount.toLowerCase()) {
+      refuse3(
+        `carries a three-link chain whose budget link delegates to ${budget.delegate}, not the delegating agent's account (${parentAccount})`
+      );
+    }
+    if (budget.delegator.toLowerCase() === parentAccount.toLowerCase()) {
+      refuse3(
+        "carries a three-link chain whose budget link is granted by the delegating agent's OWN account \u2014 a real budget delegation always comes from elsewhere"
+      );
+    }
+    return;
+  }
   const root = delegations[delegations.length - 1];
   if (root.delegator.toLowerCase() === ownAccount.toLowerCase()) {
     refuse3(
@@ -981,13 +1062,17 @@ exports.SIGNER_UPDATE_FALLBACK = SIGNER_UPDATE_FALLBACK;
 exports.SIMPLE_FACTORY_ADDRESS = SIMPLE_FACTORY_ADDRESS;
 exports.SINGLE_DEFAULT_MODE = SINGLE_DEFAULT_MODE;
 exports.SignerRefusalCode = SignerRefusalCode;
+exports.TASK_SIGN_CONTEXT_VERSION = TASK_SIGN_CONTEXT_VERSION;
 exports.X402AlreadySettledError = X402AlreadySettledError;
+exports.X402Erc7710AlreadySettledError = X402Erc7710AlreadySettledError;
+exports.X402TaskBudgetMismatchError = X402TaskBudgetMismatchError;
 exports.X402UnexpectedStatusError = X402UnexpectedStatusError;
 exports.assertRedeemsOwnBudgetDelegation = assertRedeemsOwnBudgetDelegation;
 exports.assertUserOpTypedDataBinding = assertUserOpTypedDataBinding;
 exports.chainIdForNetwork = chainIdForNetwork;
 exports.connectorRerunCommand = connectorRerunCommand;
 exports.connectorSpec = connectorSpec;
+exports.connectorUpgradeCommand = connectorUpgradeCommand;
 exports.deriveDelegateAccountAddress = deriveDelegateAccountAddress;
 exports.isConnectorChannel = isConnectorChannel;
 exports.isPackedUserOperationTypedData = isPackedUserOperationTypedData;
@@ -996,5 +1081,5 @@ exports.packedUserOperationHash = packedUserOperationHash;
 exports.resolveConnectorChannel = resolveConnectorChannel;
 exports.signerUpdateFallback = signerUpdateFallback;
 exports.verifySettlementChild = verifySettlementChild;
-//# sourceMappingURL=chunk-S42QSWJY.cjs.map
-//# sourceMappingURL=chunk-S42QSWJY.cjs.map
+//# sourceMappingURL=chunk-HX34HOW4.cjs.map
+//# sourceMappingURL=chunk-HX34HOW4.cjs.map