@haven_ai/signer 0.0.0-dev.202610071229.20ccd17 → 0.0.0-dev.202610071501.0ff4069

package/dist/cli.cjs

@@ -680,7 +680,7 @@ async function fetchTaskBudgetSignContext(identity, taskBudgetId, fetchImpl = fe
 
 // src/tools.ts
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.0.0-dev.202610071229.20ccd17";
+var SIGNER_VERSION = "0.0.0-dev.202610071501.0ff4069";
 var UNSUPPORTED_ARGUMENT_MARKER = "HavenSignerUnsupportedArgument:";
 var USEROP_BINDING_MISMATCH = "USEROP_BINDING_MISMATCH";
 var HavenUserOpBindingRefusedError = class extends edge.HavenSigningError {
@@ -881,8 +881,10 @@ var X402_SIGN_HEADER_DESCRIPTION = [
   "do not call this tool. The signer validates the merchant, amount, resource, asset, and",
   "network against the recorded funding context before signing, checks expires_at when present,",
   "and rejects mismatches or expired payment windows.",
-  "Returns { payment_header, accepted }. On your retry set BOTH PAYMENT-SIGNATURE (x402 v2) and",
-  "X-PAYMENT (v1) to <payment_header>; a strict v2 merchant reads only the first.",
+  "Returns { payment_header, retry_headers, accepted }. On your retry set EVERY header named in",
+  "retry_headers to <payment_header> \u2014 the names come from the same rule the wire uses (both",
+  "PAYMENT-SIGNATURE (x402 v2) and X-PAYMENT (v1) on the EIP-3009 bridge; a strict v2 merchant reads",
+  "only the first).",
   "Only call after haven_submit has confirmed the funding step (nextAction=none or",
   "the funding tx has a confirmed status). Next for paid MCP tools: call mcp__haven__haven_complete_mcp_tool."
 ].join(" ");
@@ -908,8 +910,8 @@ var SIGN_X402_DESCRIPTION = [
   "haven_sign, not to this one. payment_header IS the header to use.",
   "Next: for a paid MCP tool, call mcp__haven__haven_settle_mcp_tool. For a direct plain-HTTP x402",
   "merchant (the haven_pay_x402_quote path), relay signature via mcp__haven__haven_submit and then",
-  "retry the original merchant URL YOURSELF, setting BOTH PAYMENT-SIGNATURE (x402 v2) and",
-  "X-PAYMENT (v1) to payment_header \u2014 Haven never contacts that merchant."
+  "retry the original merchant URL YOURSELF, setting EVERY header the result names in",
+  "retry_headers to payment_header \u2014 Haven never contacts that merchant."
 ].join(" ");
 var SIGN_SWEEP_DELEGATE_DESCRIPTION = [
   "Sign a Haven-prepared gasless USDC sweep that recovers stranded funds from the delegate",
@@ -1250,7 +1252,13 @@ function createToolHandlers(signer, options = {}) {
         "haven_x402_sign_header",
         hashPayloadForAudit(args.payment_required)
       );
-      return { payment_header: result.paymentHeader, accepted: result.accepted };
+      return {
+        payment_header: result.paymentHeader,
+        accepted: result.accepted,
+        // #3727: the ready-made retry headers beside the prose — the names
+        // come from the SDK's live rule, never re-derived here.
+        retry_headers: edge.x402RetryHeadersFor(result.paymentHeader)
+      };
     }),
     haven_sign_x402: async (input) => runTool(async () => {
       const args = parseStrictFor("haven_sign_x402", coerceX402Expected(coercePaymentRequired(input)));
@@ -1285,6 +1293,9 @@ function createToolHandlers(signer, options = {}) {
         x402_binding: funding.x402Binding,
         payment_header: header.paymentHeader,
         accepted: header.accepted,
+        // #3727: the ready-made retry headers beside the prose — the names
+        // come from the SDK's live rule, never re-derived here.
+        retry_headers: edge.x402RetryHeadersFor(header.paymentHeader),
         ...clientUpdateField(resolved)
       };
     }),