@haven_ai/sdk 0.8.1-alpha.0 → 0.10.0-alpha.0

package/dist/{chunk-HFOAYTD4.cjs → chunk-22FJ4JQO.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
-var chunkHX34HOW4_cjs = require('./chunk-HX34HOW4.cjs');
+var chunkH37YVYZA_cjs = require('./chunk-H37YVYZA.cjs');
 var viem = require('viem');
 var crypto = require('crypto');
 var secp256k1 = require('@noble/curves/secp256k1');
 var accounts = require('viem/accounts');
 
 var TYPED_DATA_NOT_ALLOWED = "TYPED_DATA_NOT_ALLOWED";
-var HavenTypedDataRefusedError = class extends chunkHX34HOW4_cjs.HavenSigningError {
+var HavenTypedDataRefusedError = class extends chunkH37YVYZA_cjs.HavenSigningError {
   constructor(message) {
     super(message);
     this.code = TYPED_DATA_NOT_ALLOWED;
@@ -48,7 +48,7 @@ function assertBoundDirectPaymentUserOp(typedData, delegateAddress) {
       `This signer only signs direct payments on chains the delegation rail has pinned contracts for (${[...DIRECT_PAYMENT_CHAIN_IDS].join(", ")}); this typed data names chain ${String(domain.chainId)}. Refusing.`
     );
   }
-  const ownAccount = chunkHX34HOW4_cjs.deriveDelegateAccountAddress(delegateAddress);
+  const ownAccount = chunkH37YVYZA_cjs.deriveDelegateAccountAddress(delegateAddress);
   const sender = typeof message.sender === "string" ? message.sender : "";
   if (sender.toLowerCase() !== ownAccount.toLowerCase()) {
     throw new HavenTypedDataRefusedError(
@@ -78,9 +78,9 @@ function assertBoundDirectPaymentUserOp(typedData, delegateAddress) {
       "This UserOperation's execute() call does not re-encode to the exact callData bytes (trailing or non-canonical bytes). Refusing."
     );
   }
-  if (decoded.target.toLowerCase() !== chunkHX34HOW4_cjs.DELEGATION_MANAGER.toLowerCase()) {
+  if (decoded.target.toLowerCase() !== chunkH37YVYZA_cjs.DELEGATION_MANAGER.toLowerCase()) {
     throw new HavenTypedDataRefusedError(
-      `This UserOperation's execute() calls ${decoded.target}, not the DelegationManager (${chunkHX34HOW4_cjs.DELEGATION_MANAGER}). A direct payment only ever redeems the agent's own budget delegation \u2014 refusing what looks like a self-call (e.g. transferOwnership, updateSigners, upgradeToAndCall) or a call to an unrelated contract.`
+      `This UserOperation's execute() calls ${decoded.target}, not the DelegationManager (${chunkH37YVYZA_cjs.DELEGATION_MANAGER}). A direct payment only ever redeems the agent's own budget delegation \u2014 refusing what looks like a self-call (e.g. transferOwnership, updateSigners, upgradeToAndCall) or a call to an unrelated contract.`
     );
   }
   if (decoded.value !== 0n) {
@@ -89,20 +89,20 @@ function assertBoundDirectPaymentUserOp(typedData, delegateAddress) {
     );
   }
   try {
-    chunkHX34HOW4_cjs.assertRedeemsOwnBudgetDelegation(decoded.callData, ownAccount);
+    chunkH37YVYZA_cjs.assertRedeemsOwnBudgetDelegation(decoded.callData, ownAccount);
   } catch (err) {
     throw new HavenTypedDataRefusedError(err instanceof Error ? err.message : String(err));
   }
 }
 function assertOwnSettlementChild(typedData, expectation, delegateAddress) {
   try {
-    chunkHX34HOW4_cjs.verifySettlementChild(typedData, {
+    chunkH37YVYZA_cjs.verifySettlementChild(typedData, {
       ...expectation,
-      delegatorAccount: chunkHX34HOW4_cjs.deriveDelegateAccountAddress(delegateAddress)
+      delegatorAccount: chunkH37YVYZA_cjs.deriveDelegateAccountAddress(delegateAddress)
     });
   } catch (err) {
     if (err instanceof HavenTypedDataRefusedError) throw err;
-    if (err instanceof chunkHX34HOW4_cjs.HavenSigningError) throw new HavenTypedDataRefusedError(err.message);
+    if (err instanceof chunkH37YVYZA_cjs.HavenSigningError) throw new HavenTypedDataRefusedError(err.message);
     throw new HavenTypedDataRefusedError(
       `Refusing to sign the x402 settlement child: it is malformed (${err instanceof Error ? err.message : String(err)}).`
     );
@@ -131,7 +131,7 @@ function assertFundingLegPaysDelegate(typedData, expected) {
   try {
     const { args: executeArgs } = viem.decodeFunctionData({ abi: EXECUTE_ABI, data: message.callData });
     const inner = executeArgs[0].callData;
-    const { args } = viem.decodeFunctionData({ abi: chunkHX34HOW4_cjs.REDEEM_DELEGATIONS_ABI, data: inner });
+    const { args } = viem.decodeFunctionData({ abi: chunkH37YVYZA_cjs.REDEEM_DELEGATIONS_ABI, data: inner });
     const executions = args[2];
     executionCallData = executions[0];
   } catch {
@@ -250,7 +250,7 @@ var TRANSFER_WITH_AUTHORIZATION_TYPES = {
 function sweepUsdcAddress(chainId) {
   const address = USDC_ADDRESS_BY_CHAIN[chainId];
   if (!address) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Sweep is not supported on chain ${chainId}. Supported: ${SWEEPABLE_CHAIN_IDS.join(", ")}.`
     );
   }
@@ -259,7 +259,7 @@ function sweepUsdcAddress(chainId) {
 function sweepUsdcDomain(chainId) {
   const domain = USDC_EIP712_DOMAIN_BY_CHAIN[chainId];
   if (!domain) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Sweep is not supported on chain ${chainId}. Supported: ${SWEEPABLE_CHAIN_IDS.join(", ")}.`
     );
   }
@@ -272,12 +272,12 @@ function buildSweepTypedData(auth) {
   const domain = sweepUsdcDomain(auth.chainId);
   const expectedToken = sweepUsdcAddress(auth.chainId);
   if (!sameAddress(auth.token, expectedToken)) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Sweep token ${auth.token} is not the canonical USDC contract for chain ${auth.chainId}.`
     );
   }
   if (!/^0x[0-9a-fA-F]{64}$/.test(auth.nonce)) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError("Sweep nonce must be a 0x-prefixed 32-byte hex string.");
+    throw new chunkH37YVYZA_cjs.HavenSigningError("Sweep nonce must be a 0x-prefixed 32-byte hex string.");
   }
   return {
     domain,
@@ -448,6 +448,11 @@ function x402PaymentHeaderNamesFor(paymentHeader) {
   if (!accepted || typeof accepted !== "object" || Array.isArray(accepted)) return both;
   return isErc7710Option(accepted) ? [X402_PAYMENT_HEADER_NAME] : both;
 }
+function x402RetryHeadersFor(paymentHeader) {
+  return Object.fromEntries(
+    x402PaymentHeaderNamesFor(paymentHeader).map((name) => [name, paymentHeader])
+  );
+}
 function x402PaymentHeaderNamesSent(paymentHeader) {
   return x402PaymentHeaderNamesFor(paymentHeader).join(", ");
 }
@@ -777,7 +782,7 @@ function stableStringify2(value) {
 }
 
 // src/client-identity.ts
-var SDK_VERSION = "0.8.1-alpha.0";
+var SDK_VERSION = "0.10.0-alpha.0";
 var HAVEN_CLIENT_HEADER = "X-Haven-Client";
 function havenClientIdentity(pkg, version) {
   return `${pkg}/${version}`;
@@ -810,7 +815,7 @@ function addressFromKey(privateKey) {
   try {
     return accounts.privateKeyToAddress(`0x${hexBytes(privateKey, 32, "private key")}`);
   } catch (err) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Invalid private key: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -824,7 +829,7 @@ function signHash(privateKey, hash) {
       yParity: recovery
     });
   } catch (err) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Failed to sign hash: ${err instanceof Error ? err.message : String(err)}`
     );
   }
@@ -860,7 +865,7 @@ var TAX_DECLARATION_TYPES = {
 var X_TAX_DECLARATION_HEADER = "X-Tax-Declaration";
 function validateContent(content) {
   if (typeof content !== "object" || content === null || Array.isArray(content)) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError("Tax declaration content must be an object.");
+    throw new chunkH37YVYZA_cjs.HavenSigningError("Tax declaration content must be an object.");
   }
   const record = content;
   for (const field of ["principalId", "principalAttributionHash"]) {
@@ -913,7 +918,7 @@ function taxPrincipalId(network, delegateAddress) {
   if (network.startsWith("eip155:")) {
     return `did:pkh:${network}:${delegateAddress}`;
   }
-  const chainId = chunkHX34HOW4_cjs.chainIdForNetwork(network);
+  const chainId = chunkH37YVYZA_cjs.chainIdForNetwork(network);
   if (chainId === void 0) {
     throw new TaxDeclarationRefusedError(
       `The accepted payment option's network '${network}' is not a CAIP-2 eip155 chain this SDK can name; refusing to build a tax principal without the settlement network.`
@@ -958,18 +963,22 @@ function addressFromKeyForTax(delegateKey) {
   try {
     return addressFromKey(delegateKey);
   } catch (err) {
-    throw new chunkHX34HOW4_cjs.HavenSigningError(
+    throw new chunkH37YVYZA_cjs.HavenSigningError(
       `Invalid delegate key for tax declaration signing: ${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
-var TaxDeclarationRefusedError = class extends chunkHX34HOW4_cjs.HavenSigningError {
+var TaxDeclarationRefusedError = class extends chunkH37YVYZA_cjs.HavenSigningError {
   code = "TAX_DECLARATION_REFUSED";
   constructor(message) {
     super(message);
     this.name = "TaxDeclarationRefusedError";
   }
 };
+var X402_PAYMENT_NONCE_TAG = "haven-x402-payment-nonce:";
+function deriveX402PaymentNonce(paymentId) {
+  return viem.keccak256(viem.concatHex([viem.toHex(X402_PAYMENT_NONCE_TAG), viem.toHex(paymentId)]));
+}
 
 // src/next-step.ts
 var NEXT_TOOL_SERVER_NAMES = {
@@ -1115,10 +1124,10 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
   if (td?.primaryType !== "Delegation") {
     refuseTaskChild("it is not a Delegation payload", `primaryType was '${String(td?.primaryType)}'.`);
   }
-  if (!same(td.domain?.verifyingContract, chunkHX34HOW4_cjs.DELEGATION_MANAGER)) {
+  if (!same(td.domain?.verifyingContract, chunkH37YVYZA_cjs.DELEGATION_MANAGER)) {
     refuseTaskChild(
       "the EIP-712 domain names an unknown DelegationManager",
-      `Expected ${chunkHX34HOW4_cjs.DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
+      `Expected ${chunkH37YVYZA_cjs.DELEGATION_MANAGER}, got ${td.domain?.verifyingContract}.`
     );
   }
   if (td.domain?.name !== DELEGATION_DOMAIN_NAME || td.domain?.version !== DELEGATION_DOMAIN_VERSION) {
@@ -1146,7 +1155,7 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
       `Expected chain ${expected.chainId}; the child says ${td.domain?.chainId}.`
     );
   }
-  const ownAccount = chunkHX34HOW4_cjs.deriveDelegateAccountAddress(delegateAddress);
+  const ownAccount = chunkH37YVYZA_cjs.deriveDelegateAccountAddress(delegateAddress);
   const delegator = td.message?.delegator;
   if (typeof delegator !== "string" || !same(delegator, ownAccount)) {
     refuseTaskChild(
@@ -1165,7 +1174,7 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
   if (typeof authority !== "string" || !/^0x[0-9a-fA-F]{64}$/.test(authority)) {
     refuseTaskChild("its authority is not a 32-byte delegation hash", `Got ${String(authority)}.`);
   }
-  if (authority.toLowerCase() === chunkHX34HOW4_cjs.ROOT_AUTHORITY) {
+  if (authority.toLowerCase() === chunkH37YVYZA_cjs.ROOT_AUTHORITY) {
     refuseTaskChild(
       "it is a ROOT delegation, not a re-delegation of the agent budget",
       "A task budget always chains under the agent budget delegation."
@@ -1178,7 +1187,7 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
     );
   }
   const caveats = td.message?.caveats ?? [];
-  const transfer = findCaveat(caveats, chunkHX34HOW4_cjs.CAVEAT_ENFORCERS.erc20TransferAmount);
+  const transfer = findCaveat(caveats, chunkH37YVYZA_cjs.CAVEAT_ENFORCERS.erc20TransferAmount);
   if (!transfer) {
     refuseTaskChild(
       "it has no ERC-20 transfer-amount caveat",
@@ -1196,7 +1205,7 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
       `Expected ${expected.maxAmountAtomic}; the child allows ${amount.toString()}.`
     );
   }
-  const timestamp = findCaveat(caveats, chunkHX34HOW4_cjs.CAVEAT_ENFORCERS.timestamp);
+  const timestamp = findCaveat(caveats, chunkH37YVYZA_cjs.CAVEAT_ENFORCERS.timestamp);
   if (!timestamp) {
     refuseTaskChild("it never expires", "A task-budget child without a timestamp caveat is open-ended.");
   }
@@ -1217,7 +1226,7 @@ function assertOwnTaskChild(typedData, expected, delegateAddress, now = Date.now
       `Expected ${expected.expiresAt}; the child says ${beforeThreshold}.`
     );
   }
-  const calldata = findCaveat(caveats, chunkHX34HOW4_cjs.CAVEAT_ENFORCERS.allowedCalldata);
+  const calldata = findCaveat(caveats, chunkH37YVYZA_cjs.CAVEAT_ENFORCERS.allowedCalldata);
   if (expected.recipientAddress) {
     if (!calldata) {
       refuseTaskChild(
@@ -1254,7 +1263,7 @@ var DISABLE_DELEGATION_ABI = [
   {
     type: "function",
     name: "disableDelegation",
-    inputs: [{ name: "delegation", type: "tuple", components: chunkHX34HOW4_cjs.DELEGATION_TUPLE_COMPONENTS }],
+    inputs: [{ name: "delegation", type: "tuple", components: chunkH37YVYZA_cjs.DELEGATION_TUPLE_COMPONENTS }],
     outputs: [],
     stateMutability: "nonpayable"
   }
@@ -1273,7 +1282,7 @@ function assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress) {
       `This signer only signs a task-budget close on chains the delegation rail has pinned contracts for (${[...DIRECT_PAYMENT_CHAIN_IDS].join(", ")}); this typed data names chain ${String(domain.chainId)}. Refusing.`
     );
   }
-  const ownAccount = chunkHX34HOW4_cjs.deriveDelegateAccountAddress(delegateAddress);
+  const ownAccount = chunkH37YVYZA_cjs.deriveDelegateAccountAddress(delegateAddress);
   const sender = typeof message.sender === "string" ? message.sender : "";
   if (sender.toLowerCase() !== ownAccount.toLowerCase()) {
     throw new HavenTypedDataRefusedError(
@@ -1296,9 +1305,9 @@ function assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress) {
       "This close UserOperation's execute() call does not re-encode to the exact callData bytes (trailing or non-canonical bytes). Refusing."
     );
   }
-  if (decoded.target.toLowerCase() !== chunkHX34HOW4_cjs.DELEGATION_MANAGER.toLowerCase()) {
+  if (decoded.target.toLowerCase() !== chunkH37YVYZA_cjs.DELEGATION_MANAGER.toLowerCase()) {
     throw new HavenTypedDataRefusedError(
-      `This close UserOperation's execute() calls ${decoded.target}, not the DelegationManager (${chunkHX34HOW4_cjs.DELEGATION_MANAGER}). Refusing what looks like a self-call or a call to an unrelated contract.`
+      `This close UserOperation's execute() calls ${decoded.target}, not the DelegationManager (${chunkH37YVYZA_cjs.DELEGATION_MANAGER}). Refusing what looks like a self-call or a call to an unrelated contract.`
     );
   }
   if (decoded.value !== 0n) {
@@ -1335,7 +1344,7 @@ function assertOwnTaskBudgetCloseUserOp(typedData, expected, delegateAddress) {
       `This close UserOperation disables a delegation granted to ${delegation.delegate}, not this signer's own account (${ownAccount}) \u2014 a task-budget child is always self-delegated. Refusing.`
     );
   }
-  if (delegation.authority.toLowerCase() === chunkHX34HOW4_cjs.ROOT_AUTHORITY) {
+  if (delegation.authority.toLowerCase() === chunkH37YVYZA_cjs.ROOT_AUTHORITY) {
     throw new HavenTypedDataRefusedError(
       "This close UserOperation disables a ROOT delegation, not a re-delegation of the agent budget. A task-budget child always chains under the agent budget delegation. Refusing."
     );
@@ -1407,6 +1416,7 @@ exports.X402_MAX_AUTHORIZATION_WINDOW_SECONDS = X402_MAX_AUTHORIZATION_WINDOW_SE
 exports.X402_PAYMENT_HEADER_NAME = X402_PAYMENT_HEADER_NAME;
 exports.X402_PAYMENT_HEADER_NAMES = X402_PAYMENT_HEADER_NAMES;
 exports.X402_PAYMENT_HEADER_NAMES_SENT = X402_PAYMENT_HEADER_NAMES_SENT;
+exports.X402_PAYMENT_NONCE_TAG = X402_PAYMENT_NONCE_TAG;
 exports.X402_PAYMENT_REQUIRED_HEADER_NAME = X402_PAYMENT_REQUIRED_HEADER_NAME;
 exports.X402_PAYMENT_RESPONSE_HEADER_NAME = X402_PAYMENT_RESPONSE_HEADER_NAME;
 exports.X402_SETTLEMENT_FORWARD_MARGIN_SECONDS = X402_SETTLEMENT_FORWARD_MARGIN_SECONDS;
@@ -1427,6 +1437,7 @@ exports.createNextStepBuilder = createNextStepBuilder;
 exports.decodeBase64Json = decodeBase64Json;
 exports.decodeBase64Utf8 = decodeBase64Utf8;
 exports.defaultNextToolFor = defaultNextToolFor;
+exports.deriveX402PaymentNonce = deriveX402PaymentNonce;
 exports.encodeBase64Json = encodeBase64Json;
 exports.encodeBase64Utf8 = encodeBase64Utf8;
 exports.encodePaymentProof = encodePaymentProof;
@@ -1464,6 +1475,7 @@ exports.x402AuthorizationAmount = x402AuthorizationAmount;
 exports.x402FacilitatorAddresses = x402FacilitatorAddresses;
 exports.x402PaymentHeaderNamesFor = x402PaymentHeaderNamesFor;
 exports.x402PaymentHeaderNamesSent = x402PaymentHeaderNamesSent;
+exports.x402RetryHeadersFor = x402RetryHeadersFor;
 exports.x402V2PaymentEnvelope = x402V2PaymentEnvelope;
-//# sourceMappingURL=chunk-HFOAYTD4.cjs.map
-//# sourceMappingURL=chunk-HFOAYTD4.cjs.map
+//# sourceMappingURL=chunk-22FJ4JQO.cjs.map
+//# sourceMappingURL=chunk-22FJ4JQO.cjs.map