@haven_ai/signer 0.0.0-dev.202609142053.7f40fec → 0.0.0-dev.202609142145.5df01af

package/README.md

@@ -207,7 +207,11 @@ read.** Since [#1263](https://github.com/d-hinders/Haven-AI/issues/1263) the
 authenticated, read-only `GET /x402/:payment_id/sign-context` against Haven, so
 that agents never have to relay multi-KB EIP-712 payloads through a model's
 context window. **Only the Bearer API key goes out; the delegate key is never
-part of that request or its response.** Nothing else in the package reaches the
+part of that request or its response.** Since #2985 that read is bounded:
+it aborts after `SIGN_CONTEXT_TIMEOUT_MS` (15 s) and reports a
+`HavenSigningError` naming the timeout and the `typed_data_b64` fallback,
+so a hung backend cannot hang the signer — and the agent — past the funding
+window. Nothing else in the package reaches the
 network: `haven_x402_sign_header` and `haven_sign_sweep_delegate` never fetch,
 the library surface above (`createEdgeSigner` and its six signing methods, over
 the network-free `src/core.ts`) never fetches, and passing the payload as

package/dist/cli.cjs

@@ -548,19 +548,34 @@ async function loadHavenIdentity(credentialsPath) {
     return null;
   }
 }
-async function fetchX402SignContext(identity, paymentId, fetchImpl = fetch) {
+var SIGN_CONTEXT_TIMEOUT_MS = 15e3;
+async function fetchX402SignContext(identity, paymentId, fetchImpl = fetch, timeoutMs = SIGN_CONTEXT_TIMEOUT_MS) {
   let response;
   try {
     response = await fetchImpl(
       `${identity.apiUrl}/x402/${encodeURIComponent(paymentId)}/sign-context`,
-      { headers: { Authorization: `Bearer ${identity.apiKey}` } }
+      {
+        headers: { Authorization: `Bearer ${identity.apiKey}` },
+        signal: AbortSignal.timeout(timeoutMs)
+      }
     );
   } catch (err) {
+    const timedOut = err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
     throw new sdk.HavenSigningError(
-      `Could not reach Haven to fetch the signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or pass typed_data_b64 from the quote result instead.`
+      timedOut ? `Haven did not answer the signing-context fetch for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the quote result instead.` : `Could not reach Haven to fetch the signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or pass typed_data_b64 from the quote result instead.`
     );
   }
-  const body = await response.json().catch(() => ({}));
+  let body;
+  try {
+    body = await response.json();
+  } catch (err) {
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new sdk.HavenSigningError(
+        `Haven did not finish sending the signing context for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the quote result instead.`
+      );
+    }
+    body = {};
+  }
   if (!response.ok) {
     const detail = typeof body.error === "string" ? body.error : `HTTP ${response.status}`;
     throw new sdk.HavenSigningError(
@@ -1247,7 +1262,7 @@ async function warnIfCredentialFilePermissive(path, log = (message) => process.s
 
 // src/server.ts
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.0.0-dev.202609142053.7f40fec";
+var SIGNER_VERSION = "0.0.0-dev.202609142145.5df01af";
 async function resolveSignerRuntime(options = {}) {
   assertSupportedNodeVersion(options.nodeVersion);
   if (options.delegateKey) {