@haven_ai/sdk 0.0.0-dev.202609231741.b88d644 → 0.0.0-dev.202609241737.2d2b91b

package/README.md

@@ -112,8 +112,14 @@ const intent = await haven.createIntent({
   to: '0xabc...',
 })
 
-// Step 2: Sign the hash (or sign externally)
-const signature = haven.sign(intent.signData.hash)
+// Step 2: Sign externally. On the delegation rail (the only rail that pays)
+// the account validates the EIP-712 typed data in intent.signData.typed_data,
+// never the bare hash — a signature over signData.hash is rejected on-chain
+// (AA24). Sign that typed data with your delegate key (viem signTypedData),
+// after checking it with assertUserOpTypedDataBinding(typed_data, hash).
+// There is no public HavenClient method for this step yet; pay() does it
+// for you.
+const signature = await signTypedDataWithYourDelegateKey(intent.signData.typed_data)
 
 // Step 3: Submit the signature
 await haven.submitSignature(intent.paymentId, signature)

package/dist/{base64-CNakwKE8.d.cts → base64-fVc9Cnn-.d.cts}

@@ -1,4 +1,5 @@
 import { PaymentRequirements } from 'x402/types';
+import { Hex } from 'viem';
 
 interface HavenClientConfig {
     /** Haven API key (sk_agent_xxx) */
@@ -2309,6 +2310,68 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     decimals: number;
 } | null;
 
+/**
+ * #3271: the integrity check every client runs before signing a direct
+ * delegation-rail payment's typed data.
+ *
+ * A direct payment (`POST /payments`, surfaced as `haven_send` / `haven_pay`)
+ * is signed as the HybridDeleGator's EIP-712 `PackedUserOperation`, and Haven
+ * returns two things for it: that typed data, and `payload_hash` — the
+ * ERC-4337 v0.7 UserOperation hash of the same operation. Nothing used to tie
+ * the two together at signing time. The typed data is multi-KB and reaches the
+ * signer through a language model when it is relayed by hand, so one corrupted
+ * character produced a valid-looking signature over the wrong digest, and the
+ * first sign of it was `AA24 signature error` from the bundler (#3271,
+ * reproduced on dev 2026-09-24).
+ *
+ * This recomputes the v0.7 hash from the typed data's own message and domain
+ * and refuses unless it equals `payload_hash`, and it pins the parts of the
+ * typed data the hash does NOT cover (domain name/version/verifyingContract,
+ * the field list, the EntryPoint). It is a CORRUPTION check: the caller supplies
+ * both values, so it proves they describe the same operation, never that Haven
+ * prepared it. Provenance is the byte-free sign context (`payment_id`); what the
+ * signer will sign at all is #3272.
+ *
+ * Pure viem, no ethers: `@haven_ai/sdk/edge` re-exports it for the edge signer,
+ * and `edge-imports.test.ts` pins that graph.
+ */
+/** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
+declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
+declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+/**
+ * The HybridDeleGator EIP-712 domain constants and the `PackedUserOperation`
+ * field list, vendored from `@metamask/smart-accounts-kit`
+ * (`contracts.HybridDeleGator.constants`, `SIGNABLE_USER_OP_TYPED_DATA`) so the
+ * published packages need no runtime dependency on the kit. Pinned equal to the
+ * kit's values by `userop-binding.test.ts`.
+ */
+declare const HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+declare const HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+declare const PACKED_USER_OPERATION_FIELDS: ReadonlyArray<{
+    name: string;
+    type: string;
+}>;
+/** Refusal raised when UserOperation typed data (a direct payment, or the SDK's x402 funding leg) does not match its `payload_hash`. */
+declare class HavenUserOpBindingError extends HavenError {
+    constructor(message: string);
+}
+/** True when the typed data is a `PackedUserOperation` (the direct-payment shape). */
+declare function isPackedUserOperationTypedData(value: unknown): boolean;
+/**
+ * Compute the ERC-4337 v0.7 UserOperation hash from a HybridDeleGator
+ * `PackedUserOperation` typed-data object — the value Haven returns as
+ * `payload_hash` for a direct payment (`getUserOperationHash`, entryPoint 0.7).
+ */
+declare function packedUserOperationHash(typedData: unknown): Hex;
+/**
+ * Refuse (throw `HavenUserOpBindingError`) unless this `PackedUserOperation`
+ * typed data is the operation `payloadHash` names, in the HybridDeleGator
+ * domain of its own sender, against the v0.7 EntryPoint. Returns the
+ * recomputed hash.
+ */
+declare function assertUserOpTypedDataBinding(typedData: unknown, payloadHash: string): Hex;
+
 /**
  * Runtime-agnostic base64 helpers — the single source of truth for the wire
  * encoding shared by the SDK and the edge signer (#325).
@@ -2347,4 +2410,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, X402_PAYMENT_REQUIRED_HEADER_NAME as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, ERC7710_ASSET_TRANSFER_METHOD as a6, HAVEN_CONNECTOR_CHANNEL as a7, HAVEN_MINIMUM_NODE_VERSION as a8, type HavenAgentAllowanceSummary as a9, SWEEP_BASE_CHAIN_ID as aA, SWEEP_BASE_SEPOLIA_CHAIN_ID as aB, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aC, SWEEP_BASE_USDC_ADDRESS as aD, SignerRefusalCode as aE, type SweepConfirmation as aF, type SweepEip712Domain as aG, type SweepEntry as aH, type SweepExpectedAuth as aI, type SweepPreparation as aJ, type SweepSubmitResult as aK, type SweepTypedData as aL, TRANSFER_WITH_AUTHORIZATION_TYPES as aM, type UnsupportedNodeVersionMessageOptions as aN, X402AlreadySettledError as aO, type X402ExpectedAuth as aP, type X402ExpectedContext as aQ, type X402PaymentHeaderContext as aR, X402PaymentHeaderValidationError as aS, type X402PaymentOption as aT, type X402RequestSnapshot as aU, type X402SchemeSelection as aV, X402UnexpectedStatusError as aW, X402_LEGACY_PAYMENT_HEADER_NAME as aX, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as aY, X402_PAYMENT_HEADER_NAME as aZ, X402_PAYMENT_HEADER_NAMES_SENT as a_, type HavenAgentReadiness as aa, type HavenAllowance as ab, HavenApiError as ac, type HavenCatalogMerchant as ad, type HavenListScope as ae, HavenPaymentStateError as af, HavenSigningError as ag, HavenTimeoutError as ah, HavenUnsupportedSignerVersionError as ai, HavenZeroSettlementHashError as aj, type MachinePaymentRail as ak, MerchantTimeoutError as al, NEXT_TOOL_SERVER_NAMES as am, NEXT_TOOL_SERVER_ROLES as an, type NextStep as ao, type NextStepArguments as ap, type NextStepHandoff as aq, type NextStepInput as ar, type NextStepTarget as as, type NextStepTargets as at, type NextToolServerRole as au, type PaymentFee as av, type PaymentNextAction as aw, type PaymentPhase as ax, type PaymentStatus as ay, SIGNER_UPDATE_FALLBACK as az, type PaymentIntent as b, X402_PAYMENT_RESPONSE_HEADER_NAME as b0, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b1, buildSweepAuthorizationMessage as b2, buildSweepTypedData as b3, buildX402ExpectedMessage as b4, compareNodeVersions as b5, connectorRerunCommand as b6, connectorSpec as b7, createNextStepBuilder as b8, decodeBase64Json as b9, x402AssetTransferMethod as bA, x402AuthorizationAmount as bB, x402FacilitatorAddresses as bC, x402V2PaymentEnvelope as bD, decodeBase64Utf8 as ba, defaultNextToolFor as bb, encodeBase64Json as bc, encodeBase64Utf8 as bd, encodePaymentProof as be, isConnectorChannel as bf, isErc7710Option as bg, isSupportedNodeVersion as bh, isSweepableChain as bi, normalizePaymentRequired as bj, parseNextTool as bk, parsePaymentRequired as bl, parsePaymentRequiredResponse as bm, renderNextTool as bn, resolveConnectorChannel as bo, resolveTokenFromAddress as bp, selectErc7710PaymentOption as bq, selectPaymentOption as br, selectStandardPaymentOption as bs, selectX402SettlementScheme as bt, signerUpdateFallback as bu, sweepUsdcAddress as bv, sweepUsdcDomain as bw, toStandardPaymentRequirements as bx, unsupportedNodeVersionMessage as by, validateStandardX402PaymentHeader as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };
+export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, type X402SchemeSelection as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, DIRECT_SIGN_CONTEXT_VERSION as a6, ENTRY_POINT_V07 as a7, ERC7710_ASSET_TRANSFER_METHOD as a8, HAVEN_CONNECTOR_CHANNEL as a9, PACKED_USER_OPERATION_FIELDS as aA, type PaymentFee as aB, type PaymentNextAction as aC, type PaymentPhase as aD, type PaymentStatus as aE, SIGNER_UPDATE_FALLBACK as aF, SWEEP_BASE_CHAIN_ID as aG, SWEEP_BASE_SEPOLIA_CHAIN_ID as aH, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aI, SWEEP_BASE_USDC_ADDRESS as aJ, SignerRefusalCode as aK, type SweepConfirmation as aL, type SweepEip712Domain as aM, type SweepEntry as aN, type SweepExpectedAuth as aO, type SweepPreparation as aP, type SweepSubmitResult as aQ, type SweepTypedData as aR, TRANSFER_WITH_AUTHORIZATION_TYPES as aS, type UnsupportedNodeVersionMessageOptions as aT, X402AlreadySettledError as aU, type X402ExpectedAuth as aV, type X402ExpectedContext as aW, type X402PaymentHeaderContext as aX, X402PaymentHeaderValidationError as aY, type X402PaymentOption as aZ, type X402RequestSnapshot as a_, HAVEN_MINIMUM_NODE_VERSION as aa, HYBRID_DELEGATOR_DOMAIN_NAME as ab, HYBRID_DELEGATOR_DOMAIN_VERSION as ac, type HavenAgentAllowanceSummary as ad, type HavenAgentReadiness as ae, type HavenAllowance as af, HavenApiError as ag, type HavenCatalogMerchant as ah, type HavenListScope as ai, HavenPaymentStateError as aj, HavenSigningError as ak, HavenTimeoutError as al, HavenUnsupportedSignerVersionError as am, HavenUserOpBindingError as an, HavenZeroSettlementHashError as ao, type MachinePaymentRail as ap, MerchantTimeoutError as aq, NEXT_TOOL_SERVER_NAMES as ar, NEXT_TOOL_SERVER_ROLES as as, type NextStep as at, type NextStepArguments as au, type NextStepHandoff as av, type NextStepInput as aw, type NextStepTarget as ax, type NextStepTargets as ay, type NextToolServerRole as az, type PaymentIntent as b, X402UnexpectedStatusError as b0, X402_LEGACY_PAYMENT_HEADER_NAME as b1, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as b2, X402_PAYMENT_HEADER_NAME as b3, X402_PAYMENT_HEADER_NAMES_SENT as b4, X402_PAYMENT_REQUIRED_HEADER_NAME as b5, X402_PAYMENT_RESPONSE_HEADER_NAME as b6, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b7, assertUserOpTypedDataBinding as b8, buildSweepAuthorizationMessage as b9, selectPaymentOption as bA, selectStandardPaymentOption as bB, selectX402SettlementScheme as bC, signerUpdateFallback as bD, sweepUsdcAddress as bE, sweepUsdcDomain as bF, toStandardPaymentRequirements as bG, unsupportedNodeVersionMessage as bH, validateStandardX402PaymentHeader as bI, x402AssetTransferMethod as bJ, x402AuthorizationAmount as bK, x402FacilitatorAddresses as bL, x402V2PaymentEnvelope as bM, buildSweepTypedData as ba, buildX402ExpectedMessage as bb, compareNodeVersions as bc, connectorRerunCommand as bd, connectorSpec as be, createNextStepBuilder as bf, decodeBase64Json as bg, decodeBase64Utf8 as bh, defaultNextToolFor as bi, encodeBase64Json as bj, encodeBase64Utf8 as bk, encodePaymentProof as bl, isConnectorChannel as bm, isErc7710Option as bn, isPackedUserOperationTypedData as bo, isSupportedNodeVersion as bp, isSweepableChain as bq, normalizePaymentRequired as br, packedUserOperationHash as bs, parseNextTool as bt, parsePaymentRequired as bu, parsePaymentRequiredResponse as bv, renderNextTool as bw, resolveConnectorChannel as bx, resolveTokenFromAddress as by, selectErc7710PaymentOption as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };

package/dist/{base64-CNakwKE8.d.ts → base64-fVc9Cnn-.d.ts}

@@ -1,4 +1,5 @@
 import { PaymentRequirements } from 'x402/types';
+import { Hex } from 'viem';
 
 interface HavenClientConfig {
     /** Haven API key (sk_agent_xxx) */
@@ -2309,6 +2310,68 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     decimals: number;
 } | null;
 
+/**
+ * #3271: the integrity check every client runs before signing a direct
+ * delegation-rail payment's typed data.
+ *
+ * A direct payment (`POST /payments`, surfaced as `haven_send` / `haven_pay`)
+ * is signed as the HybridDeleGator's EIP-712 `PackedUserOperation`, and Haven
+ * returns two things for it: that typed data, and `payload_hash` — the
+ * ERC-4337 v0.7 UserOperation hash of the same operation. Nothing used to tie
+ * the two together at signing time. The typed data is multi-KB and reaches the
+ * signer through a language model when it is relayed by hand, so one corrupted
+ * character produced a valid-looking signature over the wrong digest, and the
+ * first sign of it was `AA24 signature error` from the bundler (#3271,
+ * reproduced on dev 2026-09-24).
+ *
+ * This recomputes the v0.7 hash from the typed data's own message and domain
+ * and refuses unless it equals `payload_hash`, and it pins the parts of the
+ * typed data the hash does NOT cover (domain name/version/verifyingContract,
+ * the field list, the EntryPoint). It is a CORRUPTION check: the caller supplies
+ * both values, so it proves they describe the same operation, never that Haven
+ * prepared it. Provenance is the byte-free sign context (`payment_id`); what the
+ * signer will sign at all is #3272.
+ *
+ * Pure viem, no ethers: `@haven_ai/sdk/edge` re-exports it for the edge signer,
+ * and `edge-imports.test.ts` pins that graph.
+ */
+/** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
+declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
+declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+/**
+ * The HybridDeleGator EIP-712 domain constants and the `PackedUserOperation`
+ * field list, vendored from `@metamask/smart-accounts-kit`
+ * (`contracts.HybridDeleGator.constants`, `SIGNABLE_USER_OP_TYPED_DATA`) so the
+ * published packages need no runtime dependency on the kit. Pinned equal to the
+ * kit's values by `userop-binding.test.ts`.
+ */
+declare const HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+declare const HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+declare const PACKED_USER_OPERATION_FIELDS: ReadonlyArray<{
+    name: string;
+    type: string;
+}>;
+/** Refusal raised when UserOperation typed data (a direct payment, or the SDK's x402 funding leg) does not match its `payload_hash`. */
+declare class HavenUserOpBindingError extends HavenError {
+    constructor(message: string);
+}
+/** True when the typed data is a `PackedUserOperation` (the direct-payment shape). */
+declare function isPackedUserOperationTypedData(value: unknown): boolean;
+/**
+ * Compute the ERC-4337 v0.7 UserOperation hash from a HybridDeleGator
+ * `PackedUserOperation` typed-data object — the value Haven returns as
+ * `payload_hash` for a direct payment (`getUserOperationHash`, entryPoint 0.7).
+ */
+declare function packedUserOperationHash(typedData: unknown): Hex;
+/**
+ * Refuse (throw `HavenUserOpBindingError`) unless this `PackedUserOperation`
+ * typed data is the operation `payloadHash` names, in the HybridDeleGator
+ * domain of its own sender, against the v0.7 EntryPoint. Returns the
+ * recomputed hash.
+ */
+declare function assertUserOpTypedDataBinding(typedData: unknown, payloadHash: string): Hex;
+
 /**
  * Runtime-agnostic base64 helpers — the single source of truth for the wire
  * encoding shared by the SDK and the edge signer (#325).
@@ -2347,4 +2410,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, X402_PAYMENT_REQUIRED_HEADER_NAME as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, ERC7710_ASSET_TRANSFER_METHOD as a6, HAVEN_CONNECTOR_CHANNEL as a7, HAVEN_MINIMUM_NODE_VERSION as a8, type HavenAgentAllowanceSummary as a9, SWEEP_BASE_CHAIN_ID as aA, SWEEP_BASE_SEPOLIA_CHAIN_ID as aB, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aC, SWEEP_BASE_USDC_ADDRESS as aD, SignerRefusalCode as aE, type SweepConfirmation as aF, type SweepEip712Domain as aG, type SweepEntry as aH, type SweepExpectedAuth as aI, type SweepPreparation as aJ, type SweepSubmitResult as aK, type SweepTypedData as aL, TRANSFER_WITH_AUTHORIZATION_TYPES as aM, type UnsupportedNodeVersionMessageOptions as aN, X402AlreadySettledError as aO, type X402ExpectedAuth as aP, type X402ExpectedContext as aQ, type X402PaymentHeaderContext as aR, X402PaymentHeaderValidationError as aS, type X402PaymentOption as aT, type X402RequestSnapshot as aU, type X402SchemeSelection as aV, X402UnexpectedStatusError as aW, X402_LEGACY_PAYMENT_HEADER_NAME as aX, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as aY, X402_PAYMENT_HEADER_NAME as aZ, X402_PAYMENT_HEADER_NAMES_SENT as a_, type HavenAgentReadiness as aa, type HavenAllowance as ab, HavenApiError as ac, type HavenCatalogMerchant as ad, type HavenListScope as ae, HavenPaymentStateError as af, HavenSigningError as ag, HavenTimeoutError as ah, HavenUnsupportedSignerVersionError as ai, HavenZeroSettlementHashError as aj, type MachinePaymentRail as ak, MerchantTimeoutError as al, NEXT_TOOL_SERVER_NAMES as am, NEXT_TOOL_SERVER_ROLES as an, type NextStep as ao, type NextStepArguments as ap, type NextStepHandoff as aq, type NextStepInput as ar, type NextStepTarget as as, type NextStepTargets as at, type NextToolServerRole as au, type PaymentFee as av, type PaymentNextAction as aw, type PaymentPhase as ax, type PaymentStatus as ay, SIGNER_UPDATE_FALLBACK as az, type PaymentIntent as b, X402_PAYMENT_RESPONSE_HEADER_NAME as b0, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b1, buildSweepAuthorizationMessage as b2, buildSweepTypedData as b3, buildX402ExpectedMessage as b4, compareNodeVersions as b5, connectorRerunCommand as b6, connectorSpec as b7, createNextStepBuilder as b8, decodeBase64Json as b9, x402AssetTransferMethod as bA, x402AuthorizationAmount as bB, x402FacilitatorAddresses as bC, x402V2PaymentEnvelope as bD, decodeBase64Utf8 as ba, defaultNextToolFor as bb, encodeBase64Json as bc, encodeBase64Utf8 as bd, encodePaymentProof as be, isConnectorChannel as bf, isErc7710Option as bg, isSupportedNodeVersion as bh, isSweepableChain as bi, normalizePaymentRequired as bj, parseNextTool as bk, parsePaymentRequired as bl, parsePaymentRequiredResponse as bm, renderNextTool as bn, resolveConnectorChannel as bo, resolveTokenFromAddress as bp, selectErc7710PaymentOption as bq, selectPaymentOption as br, selectStandardPaymentOption as bs, selectX402SettlementScheme as bt, signerUpdateFallback as bu, sweepUsdcAddress as bv, sweepUsdcDomain as bw, toStandardPaymentRequirements as bx, unsupportedNodeVersionMessage as by, validateStandardX402PaymentHeader as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };
+export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, type X402SchemeSelection as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, DIRECT_SIGN_CONTEXT_VERSION as a6, ENTRY_POINT_V07 as a7, ERC7710_ASSET_TRANSFER_METHOD as a8, HAVEN_CONNECTOR_CHANNEL as a9, PACKED_USER_OPERATION_FIELDS as aA, type PaymentFee as aB, type PaymentNextAction as aC, type PaymentPhase as aD, type PaymentStatus as aE, SIGNER_UPDATE_FALLBACK as aF, SWEEP_BASE_CHAIN_ID as aG, SWEEP_BASE_SEPOLIA_CHAIN_ID as aH, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aI, SWEEP_BASE_USDC_ADDRESS as aJ, SignerRefusalCode as aK, type SweepConfirmation as aL, type SweepEip712Domain as aM, type SweepEntry as aN, type SweepExpectedAuth as aO, type SweepPreparation as aP, type SweepSubmitResult as aQ, type SweepTypedData as aR, TRANSFER_WITH_AUTHORIZATION_TYPES as aS, type UnsupportedNodeVersionMessageOptions as aT, X402AlreadySettledError as aU, type X402ExpectedAuth as aV, type X402ExpectedContext as aW, type X402PaymentHeaderContext as aX, X402PaymentHeaderValidationError as aY, type X402PaymentOption as aZ, type X402RequestSnapshot as a_, HAVEN_MINIMUM_NODE_VERSION as aa, HYBRID_DELEGATOR_DOMAIN_NAME as ab, HYBRID_DELEGATOR_DOMAIN_VERSION as ac, type HavenAgentAllowanceSummary as ad, type HavenAgentReadiness as ae, type HavenAllowance as af, HavenApiError as ag, type HavenCatalogMerchant as ah, type HavenListScope as ai, HavenPaymentStateError as aj, HavenSigningError as ak, HavenTimeoutError as al, HavenUnsupportedSignerVersionError as am, HavenUserOpBindingError as an, HavenZeroSettlementHashError as ao, type MachinePaymentRail as ap, MerchantTimeoutError as aq, NEXT_TOOL_SERVER_NAMES as ar, NEXT_TOOL_SERVER_ROLES as as, type NextStep as at, type NextStepArguments as au, type NextStepHandoff as av, type NextStepInput as aw, type NextStepTarget as ax, type NextStepTargets as ay, type NextToolServerRole as az, type PaymentIntent as b, X402UnexpectedStatusError as b0, X402_LEGACY_PAYMENT_HEADER_NAME as b1, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as b2, X402_PAYMENT_HEADER_NAME as b3, X402_PAYMENT_HEADER_NAMES_SENT as b4, X402_PAYMENT_REQUIRED_HEADER_NAME as b5, X402_PAYMENT_RESPONSE_HEADER_NAME as b6, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b7, assertUserOpTypedDataBinding as b8, buildSweepAuthorizationMessage as b9, selectPaymentOption as bA, selectStandardPaymentOption as bB, selectX402SettlementScheme as bC, signerUpdateFallback as bD, sweepUsdcAddress as bE, sweepUsdcDomain as bF, toStandardPaymentRequirements as bG, unsupportedNodeVersionMessage as bH, validateStandardX402PaymentHeader as bI, x402AssetTransferMethod as bJ, x402AuthorizationAmount as bK, x402FacilitatorAddresses as bL, x402V2PaymentEnvelope as bM, buildSweepTypedData as ba, buildX402ExpectedMessage as bb, compareNodeVersions as bc, connectorRerunCommand as bd, connectorSpec as be, createNextStepBuilder as bf, decodeBase64Json as bg, decodeBase64Utf8 as bh, defaultNextToolFor as bi, encodeBase64Json as bj, encodeBase64Utf8 as bk, encodePaymentProof as bl, isConnectorChannel as bm, isErc7710Option as bn, isPackedUserOperationTypedData as bo, isSupportedNodeVersion as bp, isSweepableChain as bq, normalizePaymentRequired as br, packedUserOperationHash as bs, parseNextTool as bt, parsePaymentRequired as bu, parsePaymentRequiredResponse as bv, renderNextTool as bw, resolveConnectorChannel as bx, resolveTokenFromAddress as by, selectErc7710PaymentOption as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };

package/dist/{chunk-AS6BCA42.cjs → chunk-CSWZXQ2L.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var crypto = require('crypto');
 var viem = require('viem');
+var crypto = require('crypto');
 
 // src/connector-channel.ts
 var CONNECTOR_PACKAGE_NAME = "@haven_ai/connect";
@@ -453,6 +453,137 @@ var HavenTimeoutError = class extends HavenError {
     this.name = "HavenTimeoutError";
   }
 };
+var DIRECT_SIGN_CONTEXT_VERSION = 1;
+var EIP712_DOMAIN_FIELDS = [
+  { name: "name", type: "string" },
+  { name: "version", type: "string" },
+  { name: "chainId", type: "uint256" },
+  { name: "verifyingContract", type: "address" }
+];
+var ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+var HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+var HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+var PACKED_USER_OPERATION_FIELDS = [
+  { name: "sender", type: "address" },
+  { name: "nonce", type: "uint256" },
+  { name: "initCode", type: "bytes" },
+  { name: "callData", type: "bytes" },
+  { name: "accountGasLimits", type: "bytes32" },
+  { name: "preVerificationGas", type: "uint256" },
+  { name: "gasFees", type: "bytes32" },
+  { name: "paymasterAndData", type: "bytes" },
+  { name: "entryPoint", type: "address" }
+];
+var HavenUserOpBindingError = class extends HavenError {
+  constructor(message) {
+    super(message, "USEROP_BINDING_MISMATCH");
+    this.name = "HavenUserOpBindingError";
+  }
+};
+function isPackedUserOperationTypedData(value) {
+  return typeof value === "object" && value !== null && value.primaryType === "PackedUserOperation";
+}
+var HEX = /^0x[0-9a-fA-F]*$/;
+var BYTES32 = /^0x[0-9a-fA-F]{64}$/;
+function refuse(detail) {
+  throw new HavenUserOpBindingError(
+    `Refusing to sign: this UserOperation typed data does not match its payload_hash (${detail}). The payload was altered between the Haven result and this call \u2014 sign by payment_id so the signer fetches the exact bytes, or pass typed_data_b64 from the result unchanged.`
+  );
+}
+function hexField(message, key, pattern) {
+  const value = message[key];
+  if (typeof value !== "string" || !pattern.test(value)) refuse(`message.${key} is not well-formed`);
+  return value;
+}
+function uintField(message, key) {
+  const value = message[key];
+  try {
+    if (typeof value === "bigint") return value;
+    if (typeof value === "string" && /^(0x[0-9a-fA-F]+|[0-9]+)$/.test(value) || typeof value === "number") {
+      const n = BigInt(value);
+      if (n >= 0n) return n;
+    }
+  } catch {
+  }
+  return refuse(`message.${key} is not an unsigned integer`);
+}
+function addressField(value, where) {
+  if (typeof value !== "string" || !viem.isAddress(value, { strict: false })) refuse(`${where} is not an address`);
+  return viem.getAddress(value);
+}
+function packedUserOperationHash(typedData) {
+  if (!isPackedUserOperationTypedData(typedData)) refuse("primaryType is not PackedUserOperation");
+  const td = typedData;
+  const message = td.message;
+  if (!message || typeof message !== "object") refuse("message is missing");
+  const chainId = uintField({ chainId: td.domain?.chainId }, "chainId");
+  const inner = viem.keccak256(
+    viem.encodeAbiParameters(
+      [
+        { type: "address" },
+        { type: "uint256" },
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "uint256" },
+        { type: "bytes32" },
+        { type: "bytes32" }
+      ],
+      [
+        addressField(message.sender, "message.sender"),
+        uintField(message, "nonce"),
+        viem.keccak256(hexField(message, "initCode", HEX)),
+        viem.keccak256(hexField(message, "callData", HEX)),
+        hexField(message, "accountGasLimits", BYTES32),
+        uintField(message, "preVerificationGas"),
+        hexField(message, "gasFees", BYTES32),
+        viem.keccak256(hexField(message, "paymasterAndData", HEX))
+      ]
+    )
+  );
+  return viem.keccak256(
+    viem.encodeAbiParameters(
+      [{ type: "bytes32" }, { type: "address" }, { type: "uint256" }],
+      [inner, addressField(message.entryPoint, "message.entryPoint"), chainId]
+    )
+  );
+}
+function assertUserOpTypedDataBinding(typedData, payloadHash) {
+  if (typeof payloadHash !== "string" || !BYTES32.test(payloadHash)) refuse("payload_hash is not a 32-byte hex string");
+  if (!isPackedUserOperationTypedData(typedData)) refuse("primaryType is not PackedUserOperation");
+  const td = typedData;
+  const domain = td.domain ?? {};
+  const message = td.message ?? {};
+  if (domain.name !== HYBRID_DELEGATOR_DOMAIN_NAME) refuse("domain.name is not HybridDeleGator");
+  if (domain.version !== HYBRID_DELEGATOR_DOMAIN_VERSION) refuse("domain.version is not 1");
+  if (addressField(domain.verifyingContract, "domain.verifyingContract") !== addressField(message.sender, "message.sender")) {
+    refuse("domain.verifyingContract is not message.sender");
+  }
+  if (addressField(message.entryPoint, "message.entryPoint") !== viem.getAddress(ENTRY_POINT_V07)) {
+    refuse("message.entryPoint is not the v0.7 EntryPoint");
+  }
+  const fields = (td.types ?? {}).PackedUserOperation;
+  if (!Array.isArray(fields) || fields.length !== PACKED_USER_OPERATION_FIELDS.length || fields.some(
+    (f, i) => !f || f.name !== PACKED_USER_OPERATION_FIELDS[i].name || f.type !== PACKED_USER_OPERATION_FIELDS[i].type
+  )) {
+    refuse("types.PackedUserOperation is not the HybridDeleGator field list");
+  }
+  const extraTypes = Object.keys(td.types ?? {}).filter((k) => k !== "PackedUserOperation" && k !== "EIP712Domain");
+  if (extraTypes.length > 0) refuse(`unexpected types: ${extraTypes.join(", ")}`);
+  const domainKeys = Object.keys(domain).sort();
+  if (domainKeys.join(",") !== [...EIP712_DOMAIN_FIELDS.map((f) => f.name)].sort().join(",")) {
+    refuse(`domain keys are not exactly ${EIP712_DOMAIN_FIELDS.map((f) => f.name).join(", ")}`);
+  }
+  const declaredDomain = (td.types ?? {}).EIP712Domain;
+  if (declaredDomain !== void 0 && (!Array.isArray(declaredDomain) || declaredDomain.length !== EIP712_DOMAIN_FIELDS.length || declaredDomain.some(
+    (f, i) => !f || f.name !== EIP712_DOMAIN_FIELDS[i].name || f.type !== EIP712_DOMAIN_FIELDS[i].type
+  ))) {
+    refuse("types.EIP712Domain is not the canonical name/version/chainId/verifyingContract list");
+  }
+  const recomputed = packedUserOperationHash(typedData);
+  if (recomputed.toLowerCase() !== payloadHash.toLowerCase()) refuse("recomputed UserOperation hash differs");
+  return recomputed;
+}
 
 // src/base64.ts
 function normalizeBase64(value) {
@@ -1182,19 +1313,25 @@ exports.AgentPaymentWarningCode = AgentPaymentWarningCode;
 exports.CONNECTOR_PACKAGE_NAME = CONNECTOR_PACKAGE_NAME;
 exports.DEFAULT_CONFIRMATION_TIMEOUT_MS = DEFAULT_CONFIRMATION_TIMEOUT_MS;
 exports.DEFAULT_NEXT_TOOL_BY_ACTION = DEFAULT_NEXT_TOOL_BY_ACTION;
+exports.DIRECT_SIGN_CONTEXT_VERSION = DIRECT_SIGN_CONTEXT_VERSION;
+exports.ENTRY_POINT_V07 = ENTRY_POINT_V07;
 exports.ERC7710_ASSET_TRANSFER_METHOD = ERC7710_ASSET_TRANSFER_METHOD;
 exports.HAVEN_CONNECTOR_CHANNEL = HAVEN_CONNECTOR_CHANNEL;
 exports.HAVEN_MINIMUM_NODE_VERSION = HAVEN_MINIMUM_NODE_VERSION;
+exports.HYBRID_DELEGATOR_DOMAIN_NAME = HYBRID_DELEGATOR_DOMAIN_NAME;
+exports.HYBRID_DELEGATOR_DOMAIN_VERSION = HYBRID_DELEGATOR_DOMAIN_VERSION;
 exports.HavenApiError = HavenApiError;
 exports.HavenError = HavenError;
 exports.HavenPaymentStateError = HavenPaymentStateError;
 exports.HavenSigningError = HavenSigningError;
 exports.HavenTimeoutError = HavenTimeoutError;
 exports.HavenUnsupportedSignerVersionError = HavenUnsupportedSignerVersionError;
+exports.HavenUserOpBindingError = HavenUserOpBindingError;
 exports.HavenZeroSettlementHashError = HavenZeroSettlementHashError;
 exports.MerchantTimeoutError = MerchantTimeoutError;
 exports.NEXT_TOOL_SERVER_NAMES = NEXT_TOOL_SERVER_NAMES;
 exports.NEXT_TOOL_SERVER_ROLES = NEXT_TOOL_SERVER_ROLES;
+exports.PACKED_USER_OPERATION_FIELDS = PACKED_USER_OPERATION_FIELDS;
 exports.SIGNER_UPDATE_FALLBACK = SIGNER_UPDATE_FALLBACK;
 exports.SWEEP_BASE_CHAIN_ID = SWEEP_BASE_CHAIN_ID;
 exports.SWEEP_BASE_SEPOLIA_CHAIN_ID = SWEEP_BASE_SEPOLIA_CHAIN_ID;
@@ -1213,6 +1350,7 @@ exports.X402_PAYMENT_HEADER_NAMES_SENT = X402_PAYMENT_HEADER_NAMES_SENT;
 exports.X402_PAYMENT_REQUIRED_HEADER_NAME = X402_PAYMENT_REQUIRED_HEADER_NAME;
 exports.X402_PAYMENT_RESPONSE_HEADER_NAME = X402_PAYMENT_RESPONSE_HEADER_NAME;
 exports.X402_SETTLEMENT_FORWARD_MARGIN_SECONDS = X402_SETTLEMENT_FORWARD_MARGIN_SECONDS;
+exports.assertUserOpTypedDataBinding = assertUserOpTypedDataBinding;
 exports.buildSweepAuthorizationMessage = buildSweepAuthorizationMessage;
 exports.buildSweepTypedData = buildSweepTypedData;
 exports.buildX402ExpectedMessage = buildX402ExpectedMessage;
@@ -1229,9 +1367,11 @@ exports.encodeBase64Utf8 = encodeBase64Utf8;
 exports.encodePaymentProof = encodePaymentProof;
 exports.isConnectorChannel = isConnectorChannel;
 exports.isErc7710Option = isErc7710Option;
+exports.isPackedUserOperationTypedData = isPackedUserOperationTypedData;
 exports.isSupportedNodeVersion = isSupportedNodeVersion;
 exports.isSweepableChain = isSweepableChain;
 exports.normalizePaymentRequired = normalizePaymentRequired;
+exports.packedUserOperationHash = packedUserOperationHash;
 exports.parseNextTool = parseNextTool;
 exports.parsePaymentRequired = parsePaymentRequired;
 exports.parsePaymentRequiredResponse = parsePaymentRequiredResponse;
@@ -1254,5 +1394,5 @@ exports.x402FacilitatorAddresses = x402FacilitatorAddresses;
 exports.x402PaymentHeaderNamesFor = x402PaymentHeaderNamesFor;
 exports.x402PaymentHeaderNamesSent = x402PaymentHeaderNamesSent;
 exports.x402V2PaymentEnvelope = x402V2PaymentEnvelope;
-//# sourceMappingURL=chunk-AS6BCA42.cjs.map
-//# sourceMappingURL=chunk-AS6BCA42.cjs.map
+//# sourceMappingURL=chunk-CSWZXQ2L.cjs.map
+//# sourceMappingURL=chunk-CSWZXQ2L.cjs.map