@haven_ai/sdk 0.0.0-dev.202609232125.72f3d20 → 0.0.0-dev.202609241802.ea320de

package/README.md

@@ -112,8 +112,14 @@ const intent = await haven.createIntent({
   to: '0xabc...',
 })
 
-// Step 2: Sign the hash (or sign externally)
-const signature = haven.sign(intent.signData.hash)
+// Step 2: Sign externally. On the delegation rail (the only rail that pays)
+// the account validates the EIP-712 typed data in intent.signData.typed_data,
+// never the bare hash — a signature over signData.hash is rejected on-chain
+// (AA24). Sign that typed data with your delegate key (viem signTypedData),
+// after checking it with assertUserOpTypedDataBinding(typed_data, hash).
+// There is no public HavenClient method for this step yet; pay() does it
+// for you.
+const signature = await signTypedDataWithYourDelegateKey(intent.signData.typed_data)
 
 // Step 3: Submit the signature
 await haven.submitSignature(intent.paymentId, signature)
@@ -251,7 +257,7 @@ const data = await response.json()
 
 Merchant-verified x402 retries use the official EIP-3009 `exact` scheme on Base USDC (`base` / `eip155:8453`). `haven.fetch()` sends the payment under `PAYMENT-SIGNATURE` (the x402 v2 name), and on the EIP-3009 bridge also under `X-PAYMENT` (v1), so a merchant on either version reads it. **On erc7710 it sends the v2 name ALONE**: that payload is always x402 v2, and its header carries a whole delegation chain, so duplicating it overflows the merchant's header limit and the request is refused with HTTP 431. If you build the retry yourself, follow the same rule. Haven's older tx-hash proof helper remains exported for Haven-native integrations; it is a different payload that happens to have shared the v2 name, and it is not what `haven.fetch()` sends.
 
-For standard x402, the `x402-wallet` identity is the agent delegate wallet, because that is the wallet that signs and settles the merchant payment. Integrations that scope access by Haven wallet/Safe address should use a Haven-native flow instead of standard merchant x402.
+For standard x402, the `x402-wallet` identity is the agent delegate wallet, because that is the wallet that signs and settles the merchant payment. Integrations that scope access by Haven wallet address should use a Haven-native flow instead of standard merchant x402.
 
 ## AI Agent Integration
 

package/dist/{base64-CNakwKE8.d.cts → base64-CPxbmyU9.d.cts}

@@ -1,4 +1,5 @@
 import { PaymentRequirements } from 'x402/types';
+import { Hex } from 'viem';
 
 interface HavenClientConfig {
     /** Haven API key (sk_agent_xxx) */
@@ -33,7 +34,7 @@ interface HavenClientConfig {
      * JSON-RPC RPC URLs keyed by EIP-155 chain ID.
      *
      * When provided for a chain, the SDK waits for ≥1 on-chain confirmation of
-     * the AllowanceModule funding tx before retrying the merchant. This prevents
+     * the funding tx (account → delegate EOA) before retrying the merchant. This prevents
      * the race where the merchant's `balanceOf(delegate)` call runs before the
      * funding block has propagated to the merchant's RPC node.
      *
@@ -258,10 +259,10 @@ interface X402AuthorizationOptions {
  * Keyless x402 construct result.
  *
  * Returned by `createX402Intent` — the non-custodial half of an x402 payment.
- * It carries the unsigned funding hash (`signData.hash`, Safe → delegate EOA)
+ * It carries the unsigned funding payload (`signData`, account → delegate EOA)
  * plus everything the *edge* needs to build and sign the EIP-3009 merchant
  * header itself. The construct path never signs; both delegate signatures
- * (funding hash + merchant header) happen on the machine that holds the key.
+ * (funding payload + merchant header) happen on the machine that holds the key.
  */
 interface X402Intent {
     /** Haven payment id for the funding transfer. */
@@ -271,7 +272,7 @@ interface X402Intent {
     status: 'pending_signature';
     /** ISO 8601 expiry of the funding intent, if returned. */
     expiresAt?: string;
-    /** The unsigned funding hash to sign with the delegate key (Safe → delegate EOA). */
+    /** The unsigned funding payload to sign with the delegate key (account → delegate EOA). */
     signData: SignData;
     /** The selected x402 option — the edge needs this to build the EIP-3009 header. */
     accepted: X402PaymentOption;
@@ -618,12 +619,12 @@ interface HavenBalanceCoverage {
 /**
  * Affirmative spend-readiness for the authenticated agent, derived from the raw
  * agent status plus the remaining spend authority the backend reports per rail
- * (the on-chain AllowanceModule on the legacy rail; the active budget
- * delegation on the delegation rail — #1135):
+ * (the active budget delegation on the delegation rail — #1135; the retired
+ * AllowanceModule rail used an on-chain allowance instead):
  * - `ready`         — active and at least one token has remaining spend authority.
  * - `needs_approval`— active but no remaining spend authority to auto-spend.
- *                     The over-budget outcome differs by rail: on the legacy
- *                     AllowanceModule rail the payment is queued for the wallet
+ *                     The over-budget outcome differs by rail: on the retired
+ *                     AllowanceModule rail the payment was queued for the wallet
  *                     owner to approve in Haven; on the delegation rail there is
  *                     NO approval queue — an over-budget redemption reverts
  *                     on-chain, so the owner must grant or raise the budget in
@@ -835,7 +836,7 @@ declare const DEFAULT_CONFIRMATION_TIMEOUT_MS = 90000;
  * done, or as failed, are the same defect in opposite directions.
  */
 type SweepConfirmation = 
-/** A receipt was observed. The funds are in the Safe. */
+/** A receipt was observed. The funds are in the agent's Haven account. */
 'confirmed'
 /**
  * Broadcast, but no receipt within `DEFAULT_CONFIRMATION_TIMEOUT_MS` (or the
@@ -876,7 +877,7 @@ interface SweepEntry {
 interface SweepResult {
     /** Address funds were swept FROM */
     fromAddress: string;
-    /** Address funds were swept TO (always the originating Safe) */
+    /** Address funds were swept TO (always the agent's Haven account) */
     toAddress: string;
     /** Chain the sweep occurred on */
     chainId: number;
@@ -984,9 +985,9 @@ declare const AgentPaymentNextAction: {
      */
     readonly FundAccountOrRaiseAllowance: "fund_account_or_raise_allowance";
     /**
-     * The delegate wallet may hold funds that were sent from the Safe but never
-     * settled to the merchant. The wallet owner should initiate a sweep to
-     * return those funds to the originating Safe.
+     * The delegate wallet may hold funds that were sent from the agent's Haven
+     * account but never settled to the merchant. The wallet owner should initiate
+     * a sweep to return those funds to that account.
      */
     readonly SweepStrandedFunds: "sweep_stranded_funds";
     /**
@@ -1082,7 +1083,7 @@ type AgentPaymentFailureCode = (typeof AgentPaymentFailureCode)[keyof typeof Age
  * historical `mpp_demo` rows, which remain readable.
  */
 declare const AgentPaymentRail: {
-    /** Standard Haven payment from the user's Safe through an approved delegate allowance. */
+    /** Standard Haven payment from the user's account, redeemed through the agent's budget delegation. */
     readonly Direct: "direct";
     /** x402 HTTP 402 payment flow with a Haven funding leg and merchant retry leg. */
     readonly X402: "x402";
@@ -1644,7 +1645,7 @@ interface SweepEip712Domain {
 interface SweepAuthorization {
     /** Delegate EOA the funds are swept FROM. */
     from: string;
-    /** Originating Safe the funds are swept TO. */
+    /** The agent's Haven account the funds are swept TO. */
     to: string;
     /** Atomic USDC amount (decimal string). */
     value: string;
@@ -2213,7 +2214,7 @@ declare function x402FacilitatorAddresses(option: X402PaymentOption): string[] |
  * positional match and never look at `extra.assetTransferMethod`, so a merchant
  * that listed its erc7710 entry first made a Haven client echo that option
  * while signing a standard EIP-3009 authorization. The merchant rejects the
- * mismatch cleanly — but on the legacy two-leg the Safe→delegate funding
+ * mismatch cleanly — but on the two-leg bridge the account→delegate funding
  * transfer has already executed, so the visible result is a stranded delegate
  * balance for the sweep to reclaim. Only our own demo merchant's ordering was
  * holding that shut, and that pin binds our merchant, not the ones we do not
@@ -2309,6 +2310,68 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     decimals: number;
 } | null;
 
+/**
+ * #3271: the integrity check every client runs before signing a direct
+ * delegation-rail payment's typed data.
+ *
+ * A direct payment (`POST /payments`, surfaced as `haven_send` / `haven_pay`)
+ * is signed as the HybridDeleGator's EIP-712 `PackedUserOperation`, and Haven
+ * returns two things for it: that typed data, and `payload_hash` — the
+ * ERC-4337 v0.7 UserOperation hash of the same operation. Nothing used to tie
+ * the two together at signing time. The typed data is multi-KB and reaches the
+ * signer through a language model when it is relayed by hand, so one corrupted
+ * character produced a valid-looking signature over the wrong digest, and the
+ * first sign of it was `AA24 signature error` from the bundler (#3271,
+ * reproduced on dev 2026-09-24).
+ *
+ * This recomputes the v0.7 hash from the typed data's own message and domain
+ * and refuses unless it equals `payload_hash`, and it pins the parts of the
+ * typed data the hash does NOT cover (domain name/version/verifyingContract,
+ * the field list, the EntryPoint). It is a CORRUPTION check: the caller supplies
+ * both values, so it proves they describe the same operation, never that Haven
+ * prepared it. Provenance is the byte-free sign context (`payment_id`); what the
+ * signer will sign at all is #3272.
+ *
+ * Pure viem, no ethers: `@haven_ai/sdk/edge` re-exports it for the edge signer,
+ * and `edge-imports.test.ts` pins that graph.
+ */
+/** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
+declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
+declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+/**
+ * The HybridDeleGator EIP-712 domain constants and the `PackedUserOperation`
+ * field list, vendored from `@metamask/smart-accounts-kit`
+ * (`contracts.HybridDeleGator.constants`, `SIGNABLE_USER_OP_TYPED_DATA`) so the
+ * published packages need no runtime dependency on the kit. Pinned equal to the
+ * kit's values by `userop-binding.test.ts`.
+ */
+declare const HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+declare const HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+declare const PACKED_USER_OPERATION_FIELDS: ReadonlyArray<{
+    name: string;
+    type: string;
+}>;
+/** Refusal raised when UserOperation typed data (a direct payment, or the SDK's x402 funding leg) does not match its `payload_hash`. */
+declare class HavenUserOpBindingError extends HavenError {
+    constructor(message: string);
+}
+/** True when the typed data is a `PackedUserOperation` (the direct-payment shape). */
+declare function isPackedUserOperationTypedData(value: unknown): boolean;
+/**
+ * Compute the ERC-4337 v0.7 UserOperation hash from a HybridDeleGator
+ * `PackedUserOperation` typed-data object — the value Haven returns as
+ * `payload_hash` for a direct payment (`getUserOperationHash`, entryPoint 0.7).
+ */
+declare function packedUserOperationHash(typedData: unknown): Hex;
+/**
+ * Refuse (throw `HavenUserOpBindingError`) unless this `PackedUserOperation`
+ * typed data is the operation `payloadHash` names, in the HybridDeleGator
+ * domain of its own sender, against the v0.7 EntryPoint. Returns the
+ * recomputed hash.
+ */
+declare function assertUserOpTypedDataBinding(typedData: unknown, payloadHash: string): Hex;
+
 /**
  * Runtime-agnostic base64 helpers — the single source of truth for the wire
  * encoding shared by the SDK and the edge signer (#325).
@@ -2347,4 +2410,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, X402_PAYMENT_REQUIRED_HEADER_NAME as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, ERC7710_ASSET_TRANSFER_METHOD as a6, HAVEN_CONNECTOR_CHANNEL as a7, HAVEN_MINIMUM_NODE_VERSION as a8, type HavenAgentAllowanceSummary as a9, SWEEP_BASE_CHAIN_ID as aA, SWEEP_BASE_SEPOLIA_CHAIN_ID as aB, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aC, SWEEP_BASE_USDC_ADDRESS as aD, SignerRefusalCode as aE, type SweepConfirmation as aF, type SweepEip712Domain as aG, type SweepEntry as aH, type SweepExpectedAuth as aI, type SweepPreparation as aJ, type SweepSubmitResult as aK, type SweepTypedData as aL, TRANSFER_WITH_AUTHORIZATION_TYPES as aM, type UnsupportedNodeVersionMessageOptions as aN, X402AlreadySettledError as aO, type X402ExpectedAuth as aP, type X402ExpectedContext as aQ, type X402PaymentHeaderContext as aR, X402PaymentHeaderValidationError as aS, type X402PaymentOption as aT, type X402RequestSnapshot as aU, type X402SchemeSelection as aV, X402UnexpectedStatusError as aW, X402_LEGACY_PAYMENT_HEADER_NAME as aX, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as aY, X402_PAYMENT_HEADER_NAME as aZ, X402_PAYMENT_HEADER_NAMES_SENT as a_, type HavenAgentReadiness as aa, type HavenAllowance as ab, HavenApiError as ac, type HavenCatalogMerchant as ad, type HavenListScope as ae, HavenPaymentStateError as af, HavenSigningError as ag, HavenTimeoutError as ah, HavenUnsupportedSignerVersionError as ai, HavenZeroSettlementHashError as aj, type MachinePaymentRail as ak, MerchantTimeoutError as al, NEXT_TOOL_SERVER_NAMES as am, NEXT_TOOL_SERVER_ROLES as an, type NextStep as ao, type NextStepArguments as ap, type NextStepHandoff as aq, type NextStepInput as ar, type NextStepTarget as as, type NextStepTargets as at, type NextToolServerRole as au, type PaymentFee as av, type PaymentNextAction as aw, type PaymentPhase as ax, type PaymentStatus as ay, SIGNER_UPDATE_FALLBACK as az, type PaymentIntent as b, X402_PAYMENT_RESPONSE_HEADER_NAME as b0, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b1, buildSweepAuthorizationMessage as b2, buildSweepTypedData as b3, buildX402ExpectedMessage as b4, compareNodeVersions as b5, connectorRerunCommand as b6, connectorSpec as b7, createNextStepBuilder as b8, decodeBase64Json as b9, x402AssetTransferMethod as bA, x402AuthorizationAmount as bB, x402FacilitatorAddresses as bC, x402V2PaymentEnvelope as bD, decodeBase64Utf8 as ba, defaultNextToolFor as bb, encodeBase64Json as bc, encodeBase64Utf8 as bd, encodePaymentProof as be, isConnectorChannel as bf, isErc7710Option as bg, isSupportedNodeVersion as bh, isSweepableChain as bi, normalizePaymentRequired as bj, parseNextTool as bk, parsePaymentRequired as bl, parsePaymentRequiredResponse as bm, renderNextTool as bn, resolveConnectorChannel as bo, resolveTokenFromAddress as bp, selectErc7710PaymentOption as bq, selectPaymentOption as br, selectStandardPaymentOption as bs, selectX402SettlementScheme as bt, signerUpdateFallback as bu, sweepUsdcAddress as bv, sweepUsdcDomain as bw, toStandardPaymentRequirements as bx, unsupportedNodeVersionMessage as by, validateStandardX402PaymentHeader as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };
+export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, type X402SchemeSelection as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, DIRECT_SIGN_CONTEXT_VERSION as a6, ENTRY_POINT_V07 as a7, ERC7710_ASSET_TRANSFER_METHOD as a8, HAVEN_CONNECTOR_CHANNEL as a9, PACKED_USER_OPERATION_FIELDS as aA, type PaymentFee as aB, type PaymentNextAction as aC, type PaymentPhase as aD, type PaymentStatus as aE, SIGNER_UPDATE_FALLBACK as aF, SWEEP_BASE_CHAIN_ID as aG, SWEEP_BASE_SEPOLIA_CHAIN_ID as aH, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aI, SWEEP_BASE_USDC_ADDRESS as aJ, SignerRefusalCode as aK, type SweepConfirmation as aL, type SweepEip712Domain as aM, type SweepEntry as aN, type SweepExpectedAuth as aO, type SweepPreparation as aP, type SweepSubmitResult as aQ, type SweepTypedData as aR, TRANSFER_WITH_AUTHORIZATION_TYPES as aS, type UnsupportedNodeVersionMessageOptions as aT, X402AlreadySettledError as aU, type X402ExpectedAuth as aV, type X402ExpectedContext as aW, type X402PaymentHeaderContext as aX, X402PaymentHeaderValidationError as aY, type X402PaymentOption as aZ, type X402RequestSnapshot as a_, HAVEN_MINIMUM_NODE_VERSION as aa, HYBRID_DELEGATOR_DOMAIN_NAME as ab, HYBRID_DELEGATOR_DOMAIN_VERSION as ac, type HavenAgentAllowanceSummary as ad, type HavenAgentReadiness as ae, type HavenAllowance as af, HavenApiError as ag, type HavenCatalogMerchant as ah, type HavenListScope as ai, HavenPaymentStateError as aj, HavenSigningError as ak, HavenTimeoutError as al, HavenUnsupportedSignerVersionError as am, HavenUserOpBindingError as an, HavenZeroSettlementHashError as ao, type MachinePaymentRail as ap, MerchantTimeoutError as aq, NEXT_TOOL_SERVER_NAMES as ar, NEXT_TOOL_SERVER_ROLES as as, type NextStep as at, type NextStepArguments as au, type NextStepHandoff as av, type NextStepInput as aw, type NextStepTarget as ax, type NextStepTargets as ay, type NextToolServerRole as az, type PaymentIntent as b, X402UnexpectedStatusError as b0, X402_LEGACY_PAYMENT_HEADER_NAME as b1, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as b2, X402_PAYMENT_HEADER_NAME as b3, X402_PAYMENT_HEADER_NAMES_SENT as b4, X402_PAYMENT_REQUIRED_HEADER_NAME as b5, X402_PAYMENT_RESPONSE_HEADER_NAME as b6, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b7, assertUserOpTypedDataBinding as b8, buildSweepAuthorizationMessage as b9, selectPaymentOption as bA, selectStandardPaymentOption as bB, selectX402SettlementScheme as bC, signerUpdateFallback as bD, sweepUsdcAddress as bE, sweepUsdcDomain as bF, toStandardPaymentRequirements as bG, unsupportedNodeVersionMessage as bH, validateStandardX402PaymentHeader as bI, x402AssetTransferMethod as bJ, x402AuthorizationAmount as bK, x402FacilitatorAddresses as bL, x402V2PaymentEnvelope as bM, buildSweepTypedData as ba, buildX402ExpectedMessage as bb, compareNodeVersions as bc, connectorRerunCommand as bd, connectorSpec as be, createNextStepBuilder as bf, decodeBase64Json as bg, decodeBase64Utf8 as bh, defaultNextToolFor as bi, encodeBase64Json as bj, encodeBase64Utf8 as bk, encodePaymentProof as bl, isConnectorChannel as bm, isErc7710Option as bn, isPackedUserOperationTypedData as bo, isSupportedNodeVersion as bp, isSweepableChain as bq, normalizePaymentRequired as br, packedUserOperationHash as bs, parseNextTool as bt, parsePaymentRequired as bu, parsePaymentRequiredResponse as bv, renderNextTool as bw, resolveConnectorChannel as bx, resolveTokenFromAddress as by, selectErc7710PaymentOption as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };

package/dist/{base64-CNakwKE8.d.ts → base64-CPxbmyU9.d.ts}

@@ -1,4 +1,5 @@
 import { PaymentRequirements } from 'x402/types';
+import { Hex } from 'viem';
 
 interface HavenClientConfig {
     /** Haven API key (sk_agent_xxx) */
@@ -33,7 +34,7 @@ interface HavenClientConfig {
      * JSON-RPC RPC URLs keyed by EIP-155 chain ID.
      *
      * When provided for a chain, the SDK waits for ≥1 on-chain confirmation of
-     * the AllowanceModule funding tx before retrying the merchant. This prevents
+     * the funding tx (account → delegate EOA) before retrying the merchant. This prevents
      * the race where the merchant's `balanceOf(delegate)` call runs before the
      * funding block has propagated to the merchant's RPC node.
      *
@@ -258,10 +259,10 @@ interface X402AuthorizationOptions {
  * Keyless x402 construct result.
  *
  * Returned by `createX402Intent` — the non-custodial half of an x402 payment.
- * It carries the unsigned funding hash (`signData.hash`, Safe → delegate EOA)
+ * It carries the unsigned funding payload (`signData`, account → delegate EOA)
  * plus everything the *edge* needs to build and sign the EIP-3009 merchant
  * header itself. The construct path never signs; both delegate signatures
- * (funding hash + merchant header) happen on the machine that holds the key.
+ * (funding payload + merchant header) happen on the machine that holds the key.
  */
 interface X402Intent {
     /** Haven payment id for the funding transfer. */
@@ -271,7 +272,7 @@ interface X402Intent {
     status: 'pending_signature';
     /** ISO 8601 expiry of the funding intent, if returned. */
     expiresAt?: string;
-    /** The unsigned funding hash to sign with the delegate key (Safe → delegate EOA). */
+    /** The unsigned funding payload to sign with the delegate key (account → delegate EOA). */
     signData: SignData;
     /** The selected x402 option — the edge needs this to build the EIP-3009 header. */
     accepted: X402PaymentOption;
@@ -618,12 +619,12 @@ interface HavenBalanceCoverage {
 /**
  * Affirmative spend-readiness for the authenticated agent, derived from the raw
  * agent status plus the remaining spend authority the backend reports per rail
- * (the on-chain AllowanceModule on the legacy rail; the active budget
- * delegation on the delegation rail — #1135):
+ * (the active budget delegation on the delegation rail — #1135; the retired
+ * AllowanceModule rail used an on-chain allowance instead):
  * - `ready`         — active and at least one token has remaining spend authority.
  * - `needs_approval`— active but no remaining spend authority to auto-spend.
- *                     The over-budget outcome differs by rail: on the legacy
- *                     AllowanceModule rail the payment is queued for the wallet
+ *                     The over-budget outcome differs by rail: on the retired
+ *                     AllowanceModule rail the payment was queued for the wallet
  *                     owner to approve in Haven; on the delegation rail there is
  *                     NO approval queue — an over-budget redemption reverts
  *                     on-chain, so the owner must grant or raise the budget in
@@ -835,7 +836,7 @@ declare const DEFAULT_CONFIRMATION_TIMEOUT_MS = 90000;
  * done, or as failed, are the same defect in opposite directions.
  */
 type SweepConfirmation = 
-/** A receipt was observed. The funds are in the Safe. */
+/** A receipt was observed. The funds are in the agent's Haven account. */
 'confirmed'
 /**
  * Broadcast, but no receipt within `DEFAULT_CONFIRMATION_TIMEOUT_MS` (or the
@@ -876,7 +877,7 @@ interface SweepEntry {
 interface SweepResult {
     /** Address funds were swept FROM */
     fromAddress: string;
-    /** Address funds were swept TO (always the originating Safe) */
+    /** Address funds were swept TO (always the agent's Haven account) */
     toAddress: string;
     /** Chain the sweep occurred on */
     chainId: number;
@@ -984,9 +985,9 @@ declare const AgentPaymentNextAction: {
      */
     readonly FundAccountOrRaiseAllowance: "fund_account_or_raise_allowance";
     /**
-     * The delegate wallet may hold funds that were sent from the Safe but never
-     * settled to the merchant. The wallet owner should initiate a sweep to
-     * return those funds to the originating Safe.
+     * The delegate wallet may hold funds that were sent from the agent's Haven
+     * account but never settled to the merchant. The wallet owner should initiate
+     * a sweep to return those funds to that account.
      */
     readonly SweepStrandedFunds: "sweep_stranded_funds";
     /**
@@ -1082,7 +1083,7 @@ type AgentPaymentFailureCode = (typeof AgentPaymentFailureCode)[keyof typeof Age
  * historical `mpp_demo` rows, which remain readable.
  */
 declare const AgentPaymentRail: {
-    /** Standard Haven payment from the user's Safe through an approved delegate allowance. */
+    /** Standard Haven payment from the user's account, redeemed through the agent's budget delegation. */
     readonly Direct: "direct";
     /** x402 HTTP 402 payment flow with a Haven funding leg and merchant retry leg. */
     readonly X402: "x402";
@@ -1644,7 +1645,7 @@ interface SweepEip712Domain {
 interface SweepAuthorization {
     /** Delegate EOA the funds are swept FROM. */
     from: string;
-    /** Originating Safe the funds are swept TO. */
+    /** The agent's Haven account the funds are swept TO. */
     to: string;
     /** Atomic USDC amount (decimal string). */
     value: string;
@@ -2213,7 +2214,7 @@ declare function x402FacilitatorAddresses(option: X402PaymentOption): string[] |
  * positional match and never look at `extra.assetTransferMethod`, so a merchant
  * that listed its erc7710 entry first made a Haven client echo that option
  * while signing a standard EIP-3009 authorization. The merchant rejects the
- * mismatch cleanly — but on the legacy two-leg the Safe→delegate funding
+ * mismatch cleanly — but on the two-leg bridge the account→delegate funding
  * transfer has already executed, so the visible result is a stranded delegate
  * balance for the sweep to reclaim. Only our own demo merchant's ordering was
  * holding that shut, and that pin binds our merchant, not the ones we do not
@@ -2309,6 +2310,68 @@ declare function resolveTokenFromAddress(address: string, network?: string): {
     decimals: number;
 } | null;
 
+/**
+ * #3271: the integrity check every client runs before signing a direct
+ * delegation-rail payment's typed data.
+ *
+ * A direct payment (`POST /payments`, surfaced as `haven_send` / `haven_pay`)
+ * is signed as the HybridDeleGator's EIP-712 `PackedUserOperation`, and Haven
+ * returns two things for it: that typed data, and `payload_hash` — the
+ * ERC-4337 v0.7 UserOperation hash of the same operation. Nothing used to tie
+ * the two together at signing time. The typed data is multi-KB and reaches the
+ * signer through a language model when it is relayed by hand, so one corrupted
+ * character produced a valid-looking signature over the wrong digest, and the
+ * first sign of it was `AA24 signature error` from the bundler (#3271,
+ * reproduced on dev 2026-09-24).
+ *
+ * This recomputes the v0.7 hash from the typed data's own message and domain
+ * and refuses unless it equals `payload_hash`, and it pins the parts of the
+ * typed data the hash does NOT cover (domain name/version/verifyingContract,
+ * the field list, the EntryPoint). It is a CORRUPTION check: the caller supplies
+ * both values, so it proves they describe the same operation, never that Haven
+ * prepared it. Provenance is the byte-free sign context (`payment_id`); what the
+ * signer will sign at all is #3272.
+ *
+ * Pure viem, no ethers: `@haven_ai/sdk/edge` re-exports it for the edge signer,
+ * and `edge-imports.test.ts` pins that graph.
+ */
+/** Version of the direct-payment sign context (`GET /payments/:id/sign-context`). */
+declare const DIRECT_SIGN_CONTEXT_VERSION = 1;
+/** The ERC-4337 v0.7 EntryPoint — the only one the delegation rail submits to. */
+declare const ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+/**
+ * The HybridDeleGator EIP-712 domain constants and the `PackedUserOperation`
+ * field list, vendored from `@metamask/smart-accounts-kit`
+ * (`contracts.HybridDeleGator.constants`, `SIGNABLE_USER_OP_TYPED_DATA`) so the
+ * published packages need no runtime dependency on the kit. Pinned equal to the
+ * kit's values by `userop-binding.test.ts`.
+ */
+declare const HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+declare const HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+declare const PACKED_USER_OPERATION_FIELDS: ReadonlyArray<{
+    name: string;
+    type: string;
+}>;
+/** Refusal raised when UserOperation typed data (a direct payment, or the SDK's x402 funding leg) does not match its `payload_hash`. */
+declare class HavenUserOpBindingError extends HavenError {
+    constructor(message: string);
+}
+/** True when the typed data is a `PackedUserOperation` (the direct-payment shape). */
+declare function isPackedUserOperationTypedData(value: unknown): boolean;
+/**
+ * Compute the ERC-4337 v0.7 UserOperation hash from a HybridDeleGator
+ * `PackedUserOperation` typed-data object — the value Haven returns as
+ * `payload_hash` for a direct payment (`getUserOperationHash`, entryPoint 0.7).
+ */
+declare function packedUserOperationHash(typedData: unknown): Hex;
+/**
+ * Refuse (throw `HavenUserOpBindingError`) unless this `PackedUserOperation`
+ * typed data is the operation `payloadHash` names, in the HybridDeleGator
+ * domain of its own sender, against the v0.7 EntryPoint. Returns the
+ * recomputed hash.
+ */
+declare function assertUserOpTypedDataBinding(typedData: unknown, payloadHash: string): Hex;
+
 /**
  * Runtime-agnostic base64 helpers — the single source of truth for the wire
  * encoding shared by the SDK and the edge signer (#325).
@@ -2347,4 +2410,4 @@ declare function encodeBase64Json(value: unknown): string;
  */
 declare function decodeBase64Json<T>(value: string, label?: string): T;
 
-export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, X402_PAYMENT_REQUIRED_HEADER_NAME as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, ERC7710_ASSET_TRANSFER_METHOD as a6, HAVEN_CONNECTOR_CHANNEL as a7, HAVEN_MINIMUM_NODE_VERSION as a8, type HavenAgentAllowanceSummary as a9, SWEEP_BASE_CHAIN_ID as aA, SWEEP_BASE_SEPOLIA_CHAIN_ID as aB, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aC, SWEEP_BASE_USDC_ADDRESS as aD, SignerRefusalCode as aE, type SweepConfirmation as aF, type SweepEip712Domain as aG, type SweepEntry as aH, type SweepExpectedAuth as aI, type SweepPreparation as aJ, type SweepSubmitResult as aK, type SweepTypedData as aL, TRANSFER_WITH_AUTHORIZATION_TYPES as aM, type UnsupportedNodeVersionMessageOptions as aN, X402AlreadySettledError as aO, type X402ExpectedAuth as aP, type X402ExpectedContext as aQ, type X402PaymentHeaderContext as aR, X402PaymentHeaderValidationError as aS, type X402PaymentOption as aT, type X402RequestSnapshot as aU, type X402SchemeSelection as aV, X402UnexpectedStatusError as aW, X402_LEGACY_PAYMENT_HEADER_NAME as aX, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as aY, X402_PAYMENT_HEADER_NAME as aZ, X402_PAYMENT_HEADER_NAMES_SENT as a_, type HavenAgentReadiness as aa, type HavenAllowance as ab, HavenApiError as ac, type HavenCatalogMerchant as ad, type HavenListScope as ae, HavenPaymentStateError as af, HavenSigningError as ag, HavenTimeoutError as ah, HavenUnsupportedSignerVersionError as ai, HavenZeroSettlementHashError as aj, type MachinePaymentRail as ak, MerchantTimeoutError as al, NEXT_TOOL_SERVER_NAMES as am, NEXT_TOOL_SERVER_ROLES as an, type NextStep as ao, type NextStepArguments as ap, type NextStepHandoff as aq, type NextStepInput as ar, type NextStepTarget as as, type NextStepTargets as at, type NextToolServerRole as au, type PaymentFee as av, type PaymentNextAction as aw, type PaymentPhase as ax, type PaymentStatus as ay, SIGNER_UPDATE_FALLBACK as az, type PaymentIntent as b, X402_PAYMENT_RESPONSE_HEADER_NAME as b0, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b1, buildSweepAuthorizationMessage as b2, buildSweepTypedData as b3, buildX402ExpectedMessage as b4, compareNodeVersions as b5, connectorRerunCommand as b6, connectorSpec as b7, createNextStepBuilder as b8, decodeBase64Json as b9, x402AssetTransferMethod as bA, x402AuthorizationAmount as bB, x402FacilitatorAddresses as bC, x402V2PaymentEnvelope as bD, decodeBase64Utf8 as ba, defaultNextToolFor as bb, encodeBase64Json as bc, encodeBase64Utf8 as bd, encodePaymentProof as be, isConnectorChannel as bf, isErc7710Option as bg, isSupportedNodeVersion as bh, isSweepableChain as bi, normalizePaymentRequired as bj, parseNextTool as bk, parsePaymentRequired as bl, parsePaymentRequiredResponse as bm, renderNextTool as bn, resolveConnectorChannel as bo, resolveTokenFromAddress as bp, selectErc7710PaymentOption as bq, selectPaymentOption as br, selectStandardPaymentOption as bs, selectX402SettlementScheme as bt, signerUpdateFallback as bu, sweepUsdcAddress as bv, sweepUsdcDomain as bw, toStandardPaymentRequirements as bx, unsupportedNodeVersionMessage as by, validateStandardX402PaymentHeader as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };
+export { type AgentPaymentSummary as $, type AgentPaymentWarning as A, type X402McpTransport as B, type X402MerchantCallContext as C, HavenError as D, AGENT_PAYMENT_FAILURE_CODE_VALUES as E, AGENT_PAYMENT_NEXT_ACTION_VALUES as F, AGENT_PAYMENT_PHASE_VALUES as G, type HavenClientConfig as H, AGENT_PAYMENT_RAIL_VALUES as I, type AgentNextStep as J, type AgentPaymentEnumSchema as K, AgentPaymentFailureCode as L, AgentPaymentFailureCodeDescriptions as M, AgentPaymentFailureCodeSchema as N, AgentPaymentNextAction as O, type PaymentRequest as P, AgentPaymentNextActionDescriptions as Q, type RawPaymentParties as R, type SweepResult as S, AgentPaymentNextActionSchema as T, AgentPaymentPhase as U, AgentPaymentPhaseDescriptions as V, AgentPaymentPhaseSchema as W, type X402PaymentRequired as X, AgentPaymentRail as Y, AgentPaymentRailDescriptions as Z, AgentPaymentRailSchema as _, type PaymentResult as a, type X402SchemeSelection as a$, AgentPaymentWarningCode as a0, type AgentPurchaseSummary as a1, CONNECTOR_PACKAGE_NAME as a2, type CatalogSubmissionAccepted as a3, DEFAULT_CONFIRMATION_TIMEOUT_MS as a4, DEFAULT_NEXT_TOOL_BY_ACTION as a5, DIRECT_SIGN_CONTEXT_VERSION as a6, ENTRY_POINT_V07 as a7, ERC7710_ASSET_TRANSFER_METHOD as a8, HAVEN_CONNECTOR_CHANNEL as a9, PACKED_USER_OPERATION_FIELDS as aA, type PaymentFee as aB, type PaymentNextAction as aC, type PaymentPhase as aD, type PaymentStatus as aE, SIGNER_UPDATE_FALLBACK as aF, SWEEP_BASE_CHAIN_ID as aG, SWEEP_BASE_SEPOLIA_CHAIN_ID as aH, SWEEP_BASE_SEPOLIA_USDC_ADDRESS as aI, SWEEP_BASE_USDC_ADDRESS as aJ, SignerRefusalCode as aK, type SweepConfirmation as aL, type SweepEip712Domain as aM, type SweepEntry as aN, type SweepExpectedAuth as aO, type SweepPreparation as aP, type SweepSubmitResult as aQ, type SweepTypedData as aR, TRANSFER_WITH_AUTHORIZATION_TYPES as aS, type UnsupportedNodeVersionMessageOptions as aT, X402AlreadySettledError as aU, type X402ExpectedAuth as aV, type X402ExpectedContext as aW, type X402PaymentHeaderContext as aX, X402PaymentHeaderValidationError as aY, type X402PaymentOption as aZ, type X402RequestSnapshot as a_, HAVEN_MINIMUM_NODE_VERSION as aa, HYBRID_DELEGATOR_DOMAIN_NAME as ab, HYBRID_DELEGATOR_DOMAIN_VERSION as ac, type HavenAgentAllowanceSummary as ad, type HavenAgentReadiness as ae, type HavenAllowance as af, HavenApiError as ag, type HavenCatalogMerchant as ah, type HavenListScope as ai, HavenPaymentStateError as aj, HavenSigningError as ak, HavenTimeoutError as al, HavenUnsupportedSignerVersionError as am, HavenUserOpBindingError as an, HavenZeroSettlementHashError as ao, type MachinePaymentRail as ap, MerchantTimeoutError as aq, NEXT_TOOL_SERVER_NAMES as ar, NEXT_TOOL_SERVER_ROLES as as, type NextStep as at, type NextStepArguments as au, type NextStepHandoff as av, type NextStepInput as aw, type NextStepTarget as ax, type NextStepTargets as ay, type NextToolServerRole as az, type PaymentIntent as b, X402UnexpectedStatusError as b0, X402_LEGACY_PAYMENT_HEADER_NAME as b1, X402_MAX_AUTHORIZATION_WINDOW_SECONDS as b2, X402_PAYMENT_HEADER_NAME as b3, X402_PAYMENT_HEADER_NAMES_SENT as b4, X402_PAYMENT_REQUIRED_HEADER_NAME as b5, X402_PAYMENT_RESPONSE_HEADER_NAME as b6, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS as b7, assertUserOpTypedDataBinding as b8, buildSweepAuthorizationMessage as b9, selectPaymentOption as bA, selectStandardPaymentOption as bB, selectX402SettlementScheme as bC, signerUpdateFallback as bD, sweepUsdcAddress as bE, sweepUsdcDomain as bF, toStandardPaymentRequirements as bG, unsupportedNodeVersionMessage as bH, validateStandardX402PaymentHeader as bI, x402AssetTransferMethod as bJ, x402AuthorizationAmount as bK, x402FacilitatorAddresses as bL, x402V2PaymentEnvelope as bM, buildSweepTypedData as ba, buildX402ExpectedMessage as bb, compareNodeVersions as bc, connectorRerunCommand as bd, connectorSpec as be, createNextStepBuilder as bf, decodeBase64Json as bg, decodeBase64Utf8 as bh, defaultNextToolFor as bi, encodeBase64Json as bj, encodeBase64Utf8 as bk, encodePaymentProof as bl, isConnectorChannel as bm, isErc7710Option as bn, isPackedUserOperationTypedData as bo, isSupportedNodeVersion as bp, isSweepableChain as bq, normalizePaymentRequired as br, packedUserOperationHash as bs, parseNextTool as bt, parsePaymentRequired as bu, parsePaymentRequiredResponse as bv, renderNextTool as bw, resolveConnectorChannel as bx, resolveTokenFromAddress as by, selectErc7710PaymentOption as bz, type X402AuthorizationOptions as c, type X402Intent as d, type PaymentStatusResult as e, type HavenAgent as f, type HavenAgentSummary as g, type SweepPrepareResponse as h, type SweepAuthorization as i, type SweepSubmitResponse as j, type HavenAllowanceSummary as k, type HavenBalanceCoverage as l, type PostPurchaseAllowanceSummary as m, type HavenCatalogEntry as n, type HavenCatalogSubmission as o, type HavenPaymentReceipt as p, type HavenPaymentReceiptsPage as q, type PaymentResumeState as r, type X402Receipt as s, type X402Quote as t, type X402Erc7710Settlement as u, type X402McpCallContext as v, type SignData as w, type ResumeAuthorizedX402Input as x, type ResumeX402PaymentInput as y, type X402ResumeState as z };

package/dist/{chunk-7FXW3IKZ.js → chunk-FR5R26V3.js}

@@ -1,5 +1,5 @@
+import { keccak256, encodeAbiParameters, getAddress, recoverTypedDataAddress, isAddress } from 'viem';
 import { createHash } from 'crypto';
-import { recoverTypedDataAddress } from 'viem';
 
 // src/connector-channel.ts
 var CONNECTOR_PACKAGE_NAME = "@haven_ai/connect";
@@ -113,9 +113,9 @@ var AgentPaymentNextAction = {
    */
   FundAccountOrRaiseAllowance: "fund_account_or_raise_allowance",
   /**
-   * The delegate wallet may hold funds that were sent from the Safe but never
-   * settled to the merchant. The wallet owner should initiate a sweep to
-   * return those funds to the originating Safe.
+   * The delegate wallet may hold funds that were sent from the agent's Haven
+   * account but never settled to the merchant. The wallet owner should initiate
+   * a sweep to return those funds to that account.
    */
   SweepStrandedFunds: "sweep_stranded_funds",
   /**
@@ -189,7 +189,7 @@ var AgentPaymentFailureCode = {
   MerchantNotReady: "MERCHANT_NOT_READY"
 };
 var AgentPaymentRail = {
-  /** Standard Haven payment from the user's Safe through an approved delegate allowance. */
+  /** Standard Haven payment from the user's account, redeemed through the agent's budget delegation. */
   Direct: "direct",
   /** x402 HTTP 402 payment flow with a Haven funding leg and merchant retry leg. */
   X402: "x402",
@@ -451,6 +451,137 @@ var HavenTimeoutError = class extends HavenError {
     this.name = "HavenTimeoutError";
   }
 };
+var DIRECT_SIGN_CONTEXT_VERSION = 1;
+var EIP712_DOMAIN_FIELDS = [
+  { name: "name", type: "string" },
+  { name: "version", type: "string" },
+  { name: "chainId", type: "uint256" },
+  { name: "verifyingContract", type: "address" }
+];
+var ENTRY_POINT_V07 = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+var HYBRID_DELEGATOR_DOMAIN_NAME = "HybridDeleGator";
+var HYBRID_DELEGATOR_DOMAIN_VERSION = "1";
+var PACKED_USER_OPERATION_FIELDS = [
+  { name: "sender", type: "address" },
+  { name: "nonce", type: "uint256" },
+  { name: "initCode", type: "bytes" },
+  { name: "callData", type: "bytes" },
+  { name: "accountGasLimits", type: "bytes32" },
+  { name: "preVerificationGas", type: "uint256" },
+  { name: "gasFees", type: "bytes32" },
+  { name: "paymasterAndData", type: "bytes" },
+  { name: "entryPoint", type: "address" }
+];
+var HavenUserOpBindingError = class extends HavenError {
+  constructor(message) {
+    super(message, "USEROP_BINDING_MISMATCH");
+    this.name = "HavenUserOpBindingError";
+  }
+};
+function isPackedUserOperationTypedData(value) {
+  return typeof value === "object" && value !== null && value.primaryType === "PackedUserOperation";
+}
+var HEX = /^0x[0-9a-fA-F]*$/;
+var BYTES32 = /^0x[0-9a-fA-F]{64}$/;
+function refuse(detail) {
+  throw new HavenUserOpBindingError(
+    `Refusing to sign: this UserOperation typed data does not match its payload_hash (${detail}). The payload was altered between the Haven result and this call \u2014 sign by payment_id so the signer fetches the exact bytes, or pass typed_data_b64 from the result unchanged.`
+  );
+}
+function hexField(message, key, pattern) {
+  const value = message[key];
+  if (typeof value !== "string" || !pattern.test(value)) refuse(`message.${key} is not well-formed`);
+  return value;
+}
+function uintField(message, key) {
+  const value = message[key];
+  try {
+    if (typeof value === "bigint") return value;
+    if (typeof value === "string" && /^(0x[0-9a-fA-F]+|[0-9]+)$/.test(value) || typeof value === "number") {
+      const n = BigInt(value);
+      if (n >= 0n) return n;
+    }
+  } catch {
+  }
+  return refuse(`message.${key} is not an unsigned integer`);
+}
+function addressField(value, where) {
+  if (typeof value !== "string" || !isAddress(value, { strict: false })) refuse(`${where} is not an address`);
+  return getAddress(value);
+}
+function packedUserOperationHash(typedData) {
+  if (!isPackedUserOperationTypedData(typedData)) refuse("primaryType is not PackedUserOperation");
+  const td = typedData;
+  const message = td.message;
+  if (!message || typeof message !== "object") refuse("message is missing");
+  const chainId = uintField({ chainId: td.domain?.chainId }, "chainId");
+  const inner = keccak256(
+    encodeAbiParameters(
+      [
+        { type: "address" },
+        { type: "uint256" },
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "bytes32" },
+        { type: "uint256" },
+        { type: "bytes32" },
+        { type: "bytes32" }
+      ],
+      [
+        addressField(message.sender, "message.sender"),
+        uintField(message, "nonce"),
+        keccak256(hexField(message, "initCode", HEX)),
+        keccak256(hexField(message, "callData", HEX)),
+        hexField(message, "accountGasLimits", BYTES32),
+        uintField(message, "preVerificationGas"),
+        hexField(message, "gasFees", BYTES32),
+        keccak256(hexField(message, "paymasterAndData", HEX))
+      ]
+    )
+  );
+  return keccak256(
+    encodeAbiParameters(
+      [{ type: "bytes32" }, { type: "address" }, { type: "uint256" }],
+      [inner, addressField(message.entryPoint, "message.entryPoint"), chainId]
+    )
+  );
+}
+function assertUserOpTypedDataBinding(typedData, payloadHash) {
+  if (typeof payloadHash !== "string" || !BYTES32.test(payloadHash)) refuse("payload_hash is not a 32-byte hex string");
+  if (!isPackedUserOperationTypedData(typedData)) refuse("primaryType is not PackedUserOperation");
+  const td = typedData;
+  const domain = td.domain ?? {};
+  const message = td.message ?? {};
+  if (domain.name !== HYBRID_DELEGATOR_DOMAIN_NAME) refuse("domain.name is not HybridDeleGator");
+  if (domain.version !== HYBRID_DELEGATOR_DOMAIN_VERSION) refuse("domain.version is not 1");
+  if (addressField(domain.verifyingContract, "domain.verifyingContract") !== addressField(message.sender, "message.sender")) {
+    refuse("domain.verifyingContract is not message.sender");
+  }
+  if (addressField(message.entryPoint, "message.entryPoint") !== getAddress(ENTRY_POINT_V07)) {
+    refuse("message.entryPoint is not the v0.7 EntryPoint");
+  }
+  const fields = (td.types ?? {}).PackedUserOperation;
+  if (!Array.isArray(fields) || fields.length !== PACKED_USER_OPERATION_FIELDS.length || fields.some(
+    (f, i) => !f || f.name !== PACKED_USER_OPERATION_FIELDS[i].name || f.type !== PACKED_USER_OPERATION_FIELDS[i].type
+  )) {
+    refuse("types.PackedUserOperation is not the HybridDeleGator field list");
+  }
+  const extraTypes = Object.keys(td.types ?? {}).filter((k) => k !== "PackedUserOperation" && k !== "EIP712Domain");
+  if (extraTypes.length > 0) refuse(`unexpected types: ${extraTypes.join(", ")}`);
+  const domainKeys = Object.keys(domain).sort();
+  if (domainKeys.join(",") !== [...EIP712_DOMAIN_FIELDS.map((f) => f.name)].sort().join(",")) {
+    refuse(`domain keys are not exactly ${EIP712_DOMAIN_FIELDS.map((f) => f.name).join(", ")}`);
+  }
+  const declaredDomain = (td.types ?? {}).EIP712Domain;
+  if (declaredDomain !== void 0 && (!Array.isArray(declaredDomain) || declaredDomain.length !== EIP712_DOMAIN_FIELDS.length || declaredDomain.some(
+    (f, i) => !f || f.name !== EIP712_DOMAIN_FIELDS[i].name || f.type !== EIP712_DOMAIN_FIELDS[i].type
+  ))) {
+    refuse("types.EIP712Domain is not the canonical name/version/chainId/verifyingContract list");
+  }
+  const recomputed = packedUserOperationHash(typedData);
+  if (recomputed.toLowerCase() !== payloadHash.toLowerCase()) refuse("recomputed UserOperation hash differs");
+  return recomputed;
+}
 
 // src/base64.ts
 function normalizeBase64(value) {
@@ -1160,6 +1291,6 @@ function major(version) {
   return String(parseNodeVersion(version)[0]);
 }
 
-export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DEFAULT_NEXT_TOOL_BY_ACTION, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CONNECTOR_CHANNEL, HAVEN_MINIMUM_NODE_VERSION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenZeroSettlementHashError, MerchantTimeoutError, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, SIGNER_UPDATE_FALLBACK, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, SignerRefusalCode, TRANSFER_WITH_AUTHORIZATION_TYPES, X402AlreadySettledError, X402PaymentHeaderValidationError, X402UnexpectedStatusError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, buildX402IdempotencyKey, compareNodeVersions, connectorRerunCommand, connectorSpec, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, isConnectorChannel, isErc7710Option, isSupportedNodeVersion, isSweepableChain, normalizePaymentRequired, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, renderNextTool, resolveConnectorChannel, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, signerUpdateFallback, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402PaymentHeaderNamesFor, x402PaymentHeaderNamesSent, x402V2PaymentEnvelope };
-//# sourceMappingURL=chunk-7FXW3IKZ.js.map
-//# sourceMappingURL=chunk-7FXW3IKZ.js.map
+export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DEFAULT_NEXT_TOOL_BY_ACTION, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CONNECTOR_CHANNEL, HAVEN_MINIMUM_NODE_VERSION, HYBRID_DELEGATOR_DOMAIN_NAME, HYBRID_DELEGATOR_DOMAIN_VERSION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, HavenZeroSettlementHashError, MerchantTimeoutError, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, PACKED_USER_OPERATION_FIELDS, SIGNER_UPDATE_FALLBACK, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, SignerRefusalCode, TRANSFER_WITH_AUTHORIZATION_TYPES, X402AlreadySettledError, X402PaymentHeaderValidationError, X402UnexpectedStatusError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, assertUserOpTypedDataBinding, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, buildX402IdempotencyKey, compareNodeVersions, connectorRerunCommand, connectorSpec, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, isConnectorChannel, isErc7710Option, isPackedUserOperationTypedData, isSupportedNodeVersion, isSweepableChain, normalizePaymentRequired, packedUserOperationHash, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, renderNextTool, resolveConnectorChannel, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, signerUpdateFallback, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402PaymentHeaderNamesFor, x402PaymentHeaderNamesSent, x402V2PaymentEnvelope };
+//# sourceMappingURL=chunk-FR5R26V3.js.map
+//# sourceMappingURL=chunk-FR5R26V3.js.map