@haven_ai/signer 0.2.0-alpha.0 → 0.2.1-alpha.0

package/dist/index.d.cts

@@ -420,9 +420,17 @@ interface ToolFailure {
     /**
      * #1309: precise recovery guidance as DATA, not just prose inside `message`
      * — the same text the hosted quote's advisory `signer_compatibility.fallback`
-     * carries when the refusal is an out-of-date signer.
+     * carries when the refusal is an out-of-date signer. #3001 reuses this same
+     * field for every sign-context refusal (`'typed_data_b64'`).
      */
     fallback?: string;
+    /**
+     * #3001: present on `SIGN_CONTEXT_REFUSED` — the HTTP status the backend
+     * answered the `/x402/:id/sign-context` fetch with (404, 410, …).
+     */
+    http_status?: number;
+    /** #3001: the backend's own `error_code` on `SIGN_CONTEXT_REFUSED` (`expired`, `already_executed`, `not_signable`, `sign_context_unavailable`). */
+    backend_error_code?: string;
 }
 type ToolPayload<T = unknown> = ToolSuccess<T> | ToolFailure;
 interface ToolHandlerOptions {
@@ -468,7 +476,7 @@ declare function renderSignerConsentBlock(input: SignerConsentInput, hash: strin
 declare function ensureSignerConsent(input: SignerConsentInput, options?: SignerConsentOptions): Promise<SignerConsentDecision>;
 
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.2.0-alpha.0";
+declare const SIGNER_VERSION = "0.2.1-alpha.0";
 interface SignerOptions {
     /** Path to a Haven credential JSON file (delegate_key is read from it). */
     credentialsPath?: string;

package/dist/index.d.ts

@@ -420,9 +420,17 @@ interface ToolFailure {
     /**
      * #1309: precise recovery guidance as DATA, not just prose inside `message`
      * — the same text the hosted quote's advisory `signer_compatibility.fallback`
-     * carries when the refusal is an out-of-date signer.
+     * carries when the refusal is an out-of-date signer. #3001 reuses this same
+     * field for every sign-context refusal (`'typed_data_b64'`).
      */
     fallback?: string;
+    /**
+     * #3001: present on `SIGN_CONTEXT_REFUSED` — the HTTP status the backend
+     * answered the `/x402/:id/sign-context` fetch with (404, 410, …).
+     */
+    http_status?: number;
+    /** #3001: the backend's own `error_code` on `SIGN_CONTEXT_REFUSED` (`expired`, `already_executed`, `not_signable`, `sign_context_unavailable`). */
+    backend_error_code?: string;
 }
 type ToolPayload<T = unknown> = ToolSuccess<T> | ToolFailure;
 interface ToolHandlerOptions {
@@ -468,7 +476,7 @@ declare function renderSignerConsentBlock(input: SignerConsentInput, hash: strin
 declare function ensureSignerConsent(input: SignerConsentInput, options?: SignerConsentOptions): Promise<SignerConsentDecision>;
 
 declare const SIGNER_NAME = "@haven_ai/signer";
-declare const SIGNER_VERSION = "0.2.0-alpha.0";
+declare const SIGNER_VERSION = "0.2.1-alpha.0";
 interface SignerOptions {
     /** Path to a Haven credential JSON file (delegate_key is read from it). */
     credentialsPath?: string;

package/dist/index.js

@@ -627,6 +627,49 @@ function stableStringify(value) {
   const object = value;
   return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableStringify(object[key])}`).join(",")}}`;
 }
+var HavenSignContextError = class extends HavenSigningError {
+  /**
+   * #3001 / #3010 review: the recovery path, when signing OTHER bytes is
+   * actually a remedy — a transport failure (timeout, unreachable) or a
+   * body this signer could not read. `typed_data_b64` is NOT in the default
+   * quote result since #1272: obtain it by re-running the SAME quote tool
+   * with the SAME idempotency_key plus `include_signing_payload: true`.
+   * Absent on a backend REFUSAL: an expired, executed or unsignable intent
+   * cannot be rescued by re-signing its bytes.
+   */
+  fallback;
+  /**
+   * #3001: `AgentPaymentNextAction` values the signer already emits — the
+   * version-mismatch refusal's `stop_and_tell_user` for the classes where
+   * retrying the same call cannot help, and `payment_window_expired` (with
+   * `retry_with_new_quote`) for the backend's 410 `expired`, exactly as the
+   * plain `HavenError` branch already does for that code.
+   */
+  next_action;
+  retry_with_new_quote;
+  /** Present only for `SIGN_CONTEXT_REFUSED` (the backend's HTTP status). */
+  http_status;
+  /** Present only for `SIGN_CONTEXT_REFUSED`: the backend's own `error_code`. */
+  backend_error_code;
+  constructor(message, code, refusal) {
+    super(message);
+    this.code = code;
+    this.name = "HavenSignContextError";
+    if (code === "SIGN_CONTEXT_REFUSED") {
+      this.http_status = refusal?.httpStatus;
+      this.backend_error_code = refusal?.errorCode;
+      if (refusal?.httpStatus === 410 || refusal?.errorCode === "expired") {
+        this.next_action = AgentPaymentNextAction.PaymentWindowExpired;
+        this.retry_with_new_quote = true;
+      } else {
+        this.next_action = AgentPaymentNextAction.StopAndTellUser;
+      }
+    } else {
+      this.fallback = "typed_data_b64";
+      this.next_action = AgentPaymentNextAction.StopAndTellUser;
+    }
+  }
+};
 async function loadHavenIdentity(credentialsPath) {
   if (!credentialsPath) return null;
   try {
@@ -641,30 +684,50 @@ async function loadHavenIdentity(credentialsPath) {
     return null;
   }
 }
-async function fetchX402SignContext(identity, paymentId, fetchImpl = fetch) {
+var SIGN_CONTEXT_TIMEOUT_MS = 15e3;
+async function fetchX402SignContext(identity, paymentId, fetchImpl = fetch, timeoutMs = SIGN_CONTEXT_TIMEOUT_MS) {
   let response;
   try {
     response = await fetchImpl(
       `${identity.apiUrl}/x402/${encodeURIComponent(paymentId)}/sign-context`,
-      { headers: { Authorization: `Bearer ${identity.apiKey}` } }
+      {
+        headers: { Authorization: `Bearer ${identity.apiKey}` },
+        signal: AbortSignal.timeout(timeoutMs)
+      }
     );
   } catch (err) {
-    throw new HavenSigningError(
-      `Could not reach Haven to fetch the signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or pass typed_data_b64 from the quote result instead.`
+    const timedOut = err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError");
+    throw new HavenSignContextError(
+      timedOut ? `Haven did not answer the signing-context fetch for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the quote result instead.` : `Could not reach Haven to fetch the signing context for ${paymentId}: ${err instanceof Error ? err.message : String(err)}. Retry, or pass typed_data_b64 from the quote result instead.`,
+      timedOut ? "SIGN_CONTEXT_TIMEOUT" : "SIGN_CONTEXT_UNREACHABLE"
     );
   }
-  const body = await response.json().catch(() => ({}));
+  let body;
+  try {
+    body = await response.json();
+  } catch (err) {
+    if (err instanceof Error && (err.name === "TimeoutError" || err.name === "AbortError")) {
+      throw new HavenSignContextError(
+        `Haven did not finish sending the signing context for ${paymentId} within ${timeoutMs} ms. Retry, or pass typed_data_b64 from the quote result instead.`,
+        "SIGN_CONTEXT_TIMEOUT"
+      );
+    }
+    body = {};
+  }
   if (!response.ok) {
     const detail = typeof body.error === "string" ? body.error : `HTTP ${response.status}`;
-    throw new HavenSigningError(
-      `Haven refused the signing-context fetch for ${paymentId}: ${detail}` + (response.status === 404 ? " \u2014 check the payment_id came from this agent\u2019s own quote." : response.status === 410 ? " Re-run the quote with the same idempotency key, then sign the fresh payment_id." : "")
+    throw new HavenSignContextError(
+      `Haven refused the signing-context fetch for ${paymentId}: ${detail}` + (response.status === 404 ? " \u2014 check the payment_id came from this agent\u2019s own quote." : response.status === 410 ? " Re-run the quote with the same idempotency key, then sign the fresh payment_id." : ""),
+      "SIGN_CONTEXT_REFUSED",
+      { httpStatus: response.status, errorCode: typeof body.error_code === "string" ? body.error_code : void 0 }
     );
   }
   const signData = body.sign_data;
   const x402Expected = body.x402_expected;
   if (!signData || typeof signData.hash !== "string" || !signData.typed_data || typeof signData.typed_data !== "object" || !x402Expected) {
-    throw new HavenSigningError(
-      "The Haven sign-context response is missing sign_data.typed_data or x402_expected \u2014 the backend may predate #1263. Pass typed_data_b64 from the quote result instead."
+    throw new HavenSignContextError(
+      "The Haven sign-context response is missing sign_data.typed_data or x402_expected \u2014 the backend may predate #1263. Pass typed_data_b64 from the quote result instead.",
+      "SIGN_CONTEXT_MALFORMED"
     );
   }
   const paymentRequired = body.payment_required;
@@ -1095,6 +1158,18 @@ function normalizeError(err) {
       next_action: AgentPaymentNextAction.StopAndTellUser
     };
   }
+  if (err instanceof HavenSignContextError) {
+    return {
+      success: false,
+      code: err.code,
+      message: err.message,
+      next_action: err.next_action,
+      ...err.fallback !== void 0 ? { fallback: err.fallback } : {},
+      ...err.retry_with_new_quote ? { retry_with_new_quote: true } : {},
+      ...err.http_status !== void 0 ? { http_status: err.http_status } : {},
+      ...err.backend_error_code !== void 0 ? { backend_error_code: err.backend_error_code } : {}
+    };
+  }
   if (err instanceof HavenSigningError) {
     return { success: false, code: err.code, message: err.message };
   }
@@ -1241,7 +1316,7 @@ async function writeAckFile(path, hash) {
   );
 }
 var SIGNER_NAME = "@haven_ai/signer";
-var SIGNER_VERSION = "0.2.0-alpha.0";
+var SIGNER_VERSION = "0.2.1-alpha.0";
 async function resolveEdgeSigner(options = {}) {
   const { signer } = await resolveSignerRuntime(options);
   return signer;