@haven_ai/sdk 0.0.0-dev.202609282003.b645eff → 0.0.0-dev.202609282018.d7956ad

package/dist/index.d.cts

@@ -1,20 +1,41 @@
-import { R as RawPaymentParties, H as HavenClientConfig, a as HavenClientUpdate, P as PaymentRequest, b as PaymentResult, c as PaymentIntent, X as X402PaymentRequired, d as X402AuthorizationOptions, e as X402Intent, f as PaymentStatusResult, g as HavenAgent, h as HavenAgentSummary, S as SweepResult, i as SweepPrepareResponse, j as SweepAuthorization, k as SweepSubmitResponse, l as HavenAllowanceSummary, m as HavenBalanceCoverage, n as PostPurchaseAllowanceSummary, A as AgentPaymentWarning, o as HavenCatalogEntry, p as HavenCatalogSubmission, q as HavenPaymentReceipt, r as HavenPaymentReceiptsPage, O as OpenTaskBudgetResult, s as HavenTaskBudget, T as TaskBudgetSignContext, t as SubmitTaskBudgetResult, C as CloseTaskBudgetResult, u as PaymentResumeState, v as X402Receipt, w as X402Quote, x as X402Erc7710Settlement, y as X402McpCallContext, z as SignData, B as ResumeAuthorizedX402Input, D as ResumeX402PaymentInput, E as X402ResumeState, F as X402McpTransport, G as X402MerchantCallContext, I as HavenError } from './base64-Br8mJPgm.cjs';
-export { J as AGENT_PAYMENT_FAILURE_CODE_VALUES, K as AGENT_PAYMENT_NEXT_ACTION_VALUES, L as AGENT_PAYMENT_PHASE_VALUES, M as AGENT_PAYMENT_RAIL_VALUES, N as AgentNextStep, Q as AgentPaymentEnumSchema, U as AgentPaymentFailureCode, V as AgentPaymentFailureCodeDescriptions, W as AgentPaymentFailureCodeSchema, Y as AgentPaymentNextAction, Z as AgentPaymentNextActionDescriptions, _ as AgentPaymentNextActionSchema, $ as AgentPaymentPhase, a0 as AgentPaymentPhaseDescriptions, a1 as AgentPaymentPhaseSchema, a2 as AgentPaymentRail, a3 as AgentPaymentRailDescriptions, a4 as AgentPaymentRailSchema, a5 as AgentPaymentSummary, a6 as AgentPaymentWarningCode, a7 as AgentPurchaseSummary, a8 as CONNECTOR_PACKAGE_NAME, a9 as CatalogSubmissionAccepted, aa as DEFAULT_CONFIRMATION_TIMEOUT_MS, ab as DEFAULT_NEXT_TOOL_BY_ACTION, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, ae as ERC7710_ASSET_TRANSFER_METHOD, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ai as HYBRID_DELEGATOR_DOMAIN_NAME, aj as HYBRID_DELEGATOR_DOMAIN_VERSION, ak as HavenAgentAllowanceSummary, al as HavenAgentReadiness, am as HavenAllowance, an as HavenApiError, ao as HavenCatalogMerchant, ap as HavenListScope, aq as HavenPaymentStateError, ar as HavenSigningError, as as HavenTimeoutError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, aw as HavenZeroSettlementHashError, ax as MAX_TASK_BUDGET_TTL_SECONDS, ay as MachinePaymentRail, az as MerchantTimeoutError, aA as NEXT_TOOL_SERVER_NAMES, aB as NEXT_TOOL_SERVER_ROLES, aC as NextStep, aD as NextStepArguments, aE as NextStepHandoff, aF as NextStepInput, aG as NextStepTarget, aH as NextStepTargets, aI as NextToolServerRole, aJ as PACKED_USER_OPERATION_FIELDS, aK as PaymentFee, aL as PaymentNextAction, aM as PaymentPhase, aN as PaymentStatus, aO as ROOT_AUTHORITY, aP as SDK_CLIENT_IDENTITY, aQ as SDK_VERSION, aR as SIGNER_UPDATE_FALLBACK, aS as SWEEP_BASE_CHAIN_ID, aT as SWEEP_BASE_SEPOLIA_CHAIN_ID, aU as SWEEP_BASE_SEPOLIA_USDC_ADDRESS, aV as SWEEP_BASE_USDC_ADDRESS, aW as SettlementChildExpectation, aX as SignerRefusalCode, aY as SweepConfirmation, aZ as SweepEip712Domain, a_ as SweepEntry, a$ as SweepExpectedAuth, b0 as SweepPreparation, b1 as SweepSubmitResult, b2 as SweepTypedData, b3 as TRANSFER_WITH_AUTHORIZATION_TYPES, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, b8 as UnsupportedNodeVersionMessageOptions, b9 as X402AlreadySettledError, ba as X402Erc7710AlreadySettledError, bb as X402ExpectedAuth, bc as X402ExpectedContext, bd as X402PaymentHeaderContext, be as X402PaymentHeaderValidationError, bf as X402PaymentOption, bg as X402RequestSnapshot, bh as X402SchemeSelection, bi as X402TaskBudgetMismatchError, bj as X402UnexpectedStatusError, bk as X402_LEGACY_PAYMENT_HEADER_NAME, bl as X402_MAX_AUTHORIZATION_WINDOW_SECONDS, bm as X402_PAYMENT_HEADER_NAME, bn as X402_PAYMENT_HEADER_NAMES_SENT, bo as X402_PAYMENT_REQUIRED_HEADER_NAME, bp as X402_PAYMENT_RESPONSE_HEADER_NAME, bq as X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, br as assertBoundDirectPaymentUserOp, bs as assertOwnTaskBudgetCloseUserOp, bt as assertOwnTaskChild, bu as assertUserOpTypedDataBinding, bv as buildSweepAuthorizationMessage, bw as buildSweepTypedData, bx as buildX402ExpectedMessage, by as compareNodeVersions, bz as connectorRerunCommand, bA as connectorSpec, bB as connectorUpgradeCommand, bC as createNextStepBuilder, bD as decodeBase64Json, bE as decodeBase64Utf8, bF as defaultNextToolFor, bG as deriveDelegateAccountAddress, bH as encodeBase64Json, bI as encodeBase64Utf8, bJ as encodePaymentProof, bK as hashDelegation, bL as havenClientIdentity, bM as isConnectorChannel, bN as isErc7710Option, bO as isPackedUserOperationTypedData, bP as isSupportedNodeVersion, bQ as isSweepableChain, bR as isTaskChildTypedData, bS as normalizePaymentRequired, bT as packedUserOperationHash, bU as parseNextTool, bV as parsePaymentRequired, bW as parsePaymentRequiredResponse, bX as readClientUpdate, bY as renderNextTool, bZ as resolveConnectorChannel, b_ as resolveTokenBySymbol, b$ as resolveTokenFromAddress, c0 as selectErc7710PaymentOption, c1 as selectPaymentOption, c2 as selectStandardPaymentOption, c3 as selectX402SettlementScheme, c4 as signerUpdateFallback, c5 as sweepUsdcAddress, c6 as sweepUsdcDomain, c7 as toStandardPaymentRequirements, c8 as unsupportedNodeVersionMessage, c9 as validateStandardX402PaymentHeader, ca as verifySettlementChild, cb as x402AssetTransferMethod, cc as x402AuthorizationAmount, cd as x402FacilitatorAddresses, ce as x402V2PaymentEnvelope } from './base64-Br8mJPgm.cjs';
+import { R as RawPaymentParties, H as HavenClientConfig, a as HavenClientUpdate, P as PaymentRequest, b as PaymentResult, c as PaymentIntent, X as X402PaymentRequired, d as X402AuthorizationOptions, e as X402Intent, f as PaymentStatusResult, g as HavenAgent, h as HavenAgentSummary, S as SweepResult, i as SweepPrepareResponse, j as SweepAuthorization, k as SweepSubmitResponse, l as HavenAllowanceSummary, m as HavenBalanceCoverage, n as PostPurchaseAllowanceSummary, A as AgentPaymentWarning, o as HavenCatalogEntry, p as HavenCatalogSubmission, q as HavenPaymentReceipt, r as HavenPaymentReceiptsPage, O as OpenTaskBudgetResult, s as HavenTaskBudget, T as TaskBudgetSignContext, t as SubmitTaskBudgetResult, C as CloseTaskBudgetResult, u as PaymentResumeState, v as X402Receipt, w as X402Quote, x as X402Erc7710Settlement, y as X402McpCallContext, z as SignData, B as ResumeAuthorizedX402Input, D as ResumeX402PaymentInput, E as X402ResumeState, F as X402McpTransport, G as X402MerchantCallContext, I as HavenError } from './base64-BFXCO54F.cjs';
+export { J as AGENT_PAYMENT_FAILURE_CODE_VALUES, K as AGENT_PAYMENT_NEXT_ACTION_VALUES, L as AGENT_PAYMENT_PHASE_VALUES, M as AGENT_PAYMENT_RAIL_VALUES, N as AgentNextStep, Q as AgentPaymentEnumSchema, U as AgentPaymentFailureCode, V as AgentPaymentFailureCodeDescriptions, W as AgentPaymentFailureCodeSchema, Y as AgentPaymentNextAction, Z as AgentPaymentNextActionDescriptions, _ as AgentPaymentNextActionSchema, $ as AgentPaymentPhase, a0 as AgentPaymentPhaseDescriptions, a1 as AgentPaymentPhaseSchema, a2 as AgentPaymentRail, a3 as AgentPaymentRailDescriptions, a4 as AgentPaymentRailSchema, a5 as AgentPaymentSummary, a6 as AgentPaymentWarningCode, a7 as AgentPurchaseSummary, a8 as CONNECTOR_PACKAGE_NAME, a9 as CatalogSubmissionAccepted, aa as DEFAULT_CONFIRMATION_TIMEOUT_MS, ab as DEFAULT_NEXT_TOOL_BY_ACTION, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, ae as ERC7710_ASSET_TRANSFER_METHOD, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ai as HYBRID_DELEGATOR_DOMAIN_NAME, aj as HYBRID_DELEGATOR_DOMAIN_VERSION, ak as HavenAgentAllowanceSummary, al as HavenAgentReadiness, am as HavenAllowance, an as HavenApiError, ao as HavenCatalogMerchant, ap as HavenListScope, aq as HavenPaymentStateError, ar as HavenSigningError, as as HavenTimeoutError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, aw as HavenZeroSettlementHashError, ax as MAX_TASK_BUDGET_TTL_SECONDS, ay as MachinePaymentRail, az as MerchantTimeoutError, aA as NEXT_TOOL_SERVER_NAMES, aB as NEXT_TOOL_SERVER_ROLES, aC as NextStep, aD as NextStepArguments, aE as NextStepHandoff, aF as NextStepInput, aG as NextStepTarget, aH as NextStepTargets, aI as NextToolServerRole, aJ as PACKED_USER_OPERATION_FIELDS, aK as PaymentFee, aL as PaymentNextAction, aM as PaymentPhase, aN as PaymentStatus, aO as ROOT_AUTHORITY, aP as SDK_CLIENT_IDENTITY, aQ as SDK_VERSION, aR as SIGNER_UPDATE_FALLBACK, aS as SWEEP_BASE_CHAIN_ID, aT as SWEEP_BASE_SEPOLIA_CHAIN_ID, aU as SWEEP_BASE_SEPOLIA_USDC_ADDRESS, aV as SWEEP_BASE_USDC_ADDRESS, aW as SettlementChildExpectation, aX as SignerRefusalCode, aY as SweepConfirmation, aZ as SweepEip712Domain, a_ as SweepEntry, a$ as SweepExpectedAuth, b0 as SweepPreparation, b1 as SweepSubmitResult, b2 as SweepTypedData, b3 as TRANSFER_WITH_AUTHORIZATION_TYPES, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, b8 as UnsupportedNodeVersionMessageOptions, b9 as X402AlreadySettledError, ba as X402Erc7710AlreadySettledError, bb as X402ExpectedAuth, bc as X402ExpectedContext, bd as X402PaymentHeaderContext, be as X402PaymentHeaderValidationError, bf as X402PaymentOption, bg as X402RequestSnapshot, bh as X402SchemeSelection, bi as X402TaskBudgetMismatchError, bj as X402UnexpectedStatusError, bk as X402_LEGACY_PAYMENT_HEADER_NAME, bl as X402_MAX_AUTHORIZATION_WINDOW_SECONDS, bm as X402_PAYMENT_HEADER_NAME, bn as X402_PAYMENT_HEADER_NAMES_SENT, bo as X402_PAYMENT_REQUIRED_HEADER_NAME, bp as X402_PAYMENT_RESPONSE_HEADER_NAME, bq as X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, br as assertBoundDirectPaymentUserOp, bs as assertOwnTaskBudgetCloseUserOp, bt as assertOwnTaskChild, bu as assertUserOpTypedDataBinding, bv as buildSweepAuthorizationMessage, bw as buildSweepTypedData, bx as buildX402ExpectedMessage, by as compareNodeVersions, bz as connectorRerunCommand, bA as connectorSpec, bB as connectorUpgradeCommand, bC as createNextStepBuilder, bD as decodeBase64Json, bE as decodeBase64Utf8, bF as defaultNextToolFor, bG as deriveDelegateAccountAddress, bH as encodeBase64Json, bI as encodeBase64Utf8, bJ as encodePaymentProof, bK as hashDelegation, bL as havenClientIdentity, bM as isConnectorChannel, bN as isErc7710Option, bO as isPackedUserOperationTypedData, bP as isSupportedNodeVersion, bQ as isSweepableChain, bR as isTaskChildTypedData, bS as normalizePaymentRequired, bT as packedUserOperationHash, bU as parseNextTool, bV as parsePaymentRequired, bW as parsePaymentRequiredResponse, bX as readClientUpdate, bY as renderNextTool, bZ as resolveConnectorChannel, b_ as resolveTokenBySymbol, b$ as resolveTokenFromAddress, c0 as selectErc7710PaymentOption, c1 as selectPaymentOption, c2 as selectStandardPaymentOption, c3 as selectX402SettlementScheme, c4 as signerUpdateFallback, c5 as sweepUsdcAddress, c6 as sweepUsdcDomain, c7 as toStandardPaymentRequirements, c8 as unsupportedNodeVersionMessage, c9 as validateStandardX402PaymentHeader, ca as verifySettlementChild, cb as x402AssetTransferMethod, cc as x402AuthorizationAmount, cd as x402FacilitatorAddresses, ce as x402V2PaymentEnvelope } from './base64-BFXCO54F.cjs';
 import 'x402/types';
 import 'viem';
 
 /**
  * Verifiable payment receipts.
  *
- * A self-contained proof bundle for a settled Haven payment that anyone can
- * verify **independently of Haven**. The anchor is the agent delegate's
- * signature over the on-chain transfer hash: recover the signer and confirm it
- * is the agent's delegate, and you have cryptographic proof the agent authorised
- * exactly this transfer — no need to trust Haven's backend. The on-chain
- * `txHash` is the settlement source of truth (verify on any explorer).
+ * A self-contained bundle for a settled Haven payment whose agent
+ * authorisation can be checked offline. What `verifyPaymentReceipt` proves is
+ * deliberately narrow: the `payment` block (amount, recipient) is
+ * Haven-asserted and is NOT bound by the signature, and `verified: true` never
+ * proves the payment settled on-chain — settlement stays an explorer check on
+ * `onChain.txHash` / `settlementTxHash`.
  *
- * This lives in the SDK so agents and users can verify receipts client-side
- * with zero Haven trust.
+ * What `verified: true` means, per scheme:
+ *
+ * - erc7710 (`authorization.signatureScheme: 'eip712_delegation'`): the bundle
+ *   carries the settlement child's EIP-712 struct hash as `signHash`. The
+ *   verifier rebuilds the digest the delegate actually signed —
+ *   `keccak256(0x1901 ‖ domainSeparator(DelegationManager, chainId) ‖ signHash)`
+ *   — from the DelegationManager address the SDK pins and the bundle's
+ *   `onChain.chainId`, never from a value the receipt itself vouches for.
+ *   `verified: true` means the delegate key signed that settlement delegation
+ *   (`verifiedOver: 'delegation_digest'`).
+ * - direct payments and the eip3009 funding leg
+ *   (`signatureScheme: 'eip712_userop'`) sign an ERC-4337 user operation the
+ *   bundle does not carry: they return `not_verifiable_offline` rather than a
+ *   false accusation.
+ * - retired-rail bundles (no scheme) carry a raw-signed `signHash`; the
+ *   verifier recovers over it directly, then over the delegation digest when
+ *   the chain allows rebuilding it.
+ *
+ * Anything that is not a signed bundle — including a `haven_list_receipts`
+ * history row, which carries no signature at all — returns
+ * `not_a_signed_receipt`. Verification never throws.
+ *
+ * This lives in the SDK so agents and users can verify receipts client-side.
  */
 declare const RECEIPT_VERSION = "haven-receipt-1";
 interface PaymentReceipt {
@@ -44,6 +65,17 @@ interface PaymentReceipt {
         delegate: string;
         signHash: string;
         signature: string | null;
+        /**
+         * #3418: which digest the delegate signed — selects what offline
+         * verification rebuilds. `'eip712_delegation'`: the settlement
+         * delegation's EIP-712 digest (erc7710). `'eip712_userop'`: an ERC-4337
+         * user-operation digest the bundle does not carry (direct payments, the
+         * eip3009 funding leg) — not verifiable offline. Absent on retired-rail
+         * bundles and on backends older than #3418, whose `signHash` was signed
+         * raw. The value is only a selector: a lying one cannot make a forged
+         * signature verify, because recovery must still return `delegate`.
+         */
+        signatureScheme?: 'eip712_delegation' | 'eip712_userop';
     };
     onChain: {
         txHash: string | null;
@@ -53,17 +85,27 @@ interface PaymentReceipt {
 type ReceiptVerification = {
     verified: true;
     recoveredSigner: string;
+    verifiedOver: 'sign_hash' | 'delegation_digest';
 } | {
     verified: false;
-    reason: 'missing_signature' | 'bad_signature' | 'signer_mismatch';
+    reason: 
+    /** #3418: the input is not a haven-receipt-1 bundle (a haven_list_receipts row, null, undefined, a non-object). */
+    'not_a_signed_receipt'
+    /** #3418: eip712_userop bundle; or a delegation bundle on a chain the SDK pins no DelegationManager for. */
+     | 'not_verifiable_offline' | 'missing_signature' | 'bad_signature' | 'signer_mismatch';
     recoveredSigner?: string;
 };
+type RecoverFn = (hash: string, signature: string) => string;
 /**
- * Verify a receipt independently: recover the signer from the authorisation and
- * confirm it is the agent's delegate. Pure — `recover` is injectable but
- * defaults to standard ECDSA recovery, so this runs anywhere (no Haven backend).
+ * Verify a receipt's agent authorisation offline: recover the signer and
+ * confirm it is the agent delegate, over whichever digest the bundle's scheme
+ * names (see the module doc for what that proves — and what it does not).
+ * Never throws: anything that is not a signed receipt — a
+ * `haven_list_receipts` history row, null, undefined, a non-object — returns
+ * `not_a_signed_receipt`. Pure — `recover` is injectable but defaults to
+ * standard ECDSA recovery, so this runs anywhere (no Haven backend).
  */
-declare function verifyPaymentReceipt(receipt: PaymentReceipt, recover?: (hash: string, signature: string) => string): ReceiptVerification;
+declare function verifyPaymentReceipt(receipt: unknown, recover?: RecoverFn): ReceiptVerification;
 
 /**
  * Merchant delivery and the evidence trail behind it (#1620, epic #1613).
@@ -982,9 +1024,9 @@ declare const toolDescriptions: {
         readonly nextActionGuidance: "";
     };
     readonly verifyReceipt: {
-        readonly summary: "Verify a payment receipt offline — confirm the agent authorised the transfer.";
-        readonly selectionGuidance: "Use this to check a receipt you already hold; it needs no network and does not trust Haven. Use the history tool to fetch receipts in the first place.";
-        readonly behavior: "Recovers the signer from the receipt authorisation and confirms it matches the agent delegate. Returns verified true/false with the recovered signer or a reason. Pure and local — no backend call.";
+        readonly summary: "Verify a signed payment receipt offline — confirm the agent delegate signed its authorisation.";
+        readonly selectionGuidance: "Takes the signed bundle from GET /payments/{id}/receipt, not a haven_list_receipts row — a row carries no signature and returns not_a_signed_receipt. No network.";
+        readonly behavior: "Never throws. An erc7710 bundle verifies over the delegation digest the delegate signed; a direct or eip3009 bundle returns not_verifiable_offline. verified true means only that the delegate signed the hash named by verifiedOver — payment facts are Haven-asserted and settlement is not proven; check settlementTxHash on an explorer.";
         readonly nextActionGuidance: "";
     };
     readonly payMcpTool: {

package/dist/index.d.ts

@@ -1,20 +1,41 @@
-import { R as RawPaymentParties, H as HavenClientConfig, a as HavenClientUpdate, P as PaymentRequest, b as PaymentResult, c as PaymentIntent, X as X402PaymentRequired, d as X402AuthorizationOptions, e as X402Intent, f as PaymentStatusResult, g as HavenAgent, h as HavenAgentSummary, S as SweepResult, i as SweepPrepareResponse, j as SweepAuthorization, k as SweepSubmitResponse, l as HavenAllowanceSummary, m as HavenBalanceCoverage, n as PostPurchaseAllowanceSummary, A as AgentPaymentWarning, o as HavenCatalogEntry, p as HavenCatalogSubmission, q as HavenPaymentReceipt, r as HavenPaymentReceiptsPage, O as OpenTaskBudgetResult, s as HavenTaskBudget, T as TaskBudgetSignContext, t as SubmitTaskBudgetResult, C as CloseTaskBudgetResult, u as PaymentResumeState, v as X402Receipt, w as X402Quote, x as X402Erc7710Settlement, y as X402McpCallContext, z as SignData, B as ResumeAuthorizedX402Input, D as ResumeX402PaymentInput, E as X402ResumeState, F as X402McpTransport, G as X402MerchantCallContext, I as HavenError } from './base64-Br8mJPgm.js';
-export { J as AGENT_PAYMENT_FAILURE_CODE_VALUES, K as AGENT_PAYMENT_NEXT_ACTION_VALUES, L as AGENT_PAYMENT_PHASE_VALUES, M as AGENT_PAYMENT_RAIL_VALUES, N as AgentNextStep, Q as AgentPaymentEnumSchema, U as AgentPaymentFailureCode, V as AgentPaymentFailureCodeDescriptions, W as AgentPaymentFailureCodeSchema, Y as AgentPaymentNextAction, Z as AgentPaymentNextActionDescriptions, _ as AgentPaymentNextActionSchema, $ as AgentPaymentPhase, a0 as AgentPaymentPhaseDescriptions, a1 as AgentPaymentPhaseSchema, a2 as AgentPaymentRail, a3 as AgentPaymentRailDescriptions, a4 as AgentPaymentRailSchema, a5 as AgentPaymentSummary, a6 as AgentPaymentWarningCode, a7 as AgentPurchaseSummary, a8 as CONNECTOR_PACKAGE_NAME, a9 as CatalogSubmissionAccepted, aa as DEFAULT_CONFIRMATION_TIMEOUT_MS, ab as DEFAULT_NEXT_TOOL_BY_ACTION, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, ae as ERC7710_ASSET_TRANSFER_METHOD, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ai as HYBRID_DELEGATOR_DOMAIN_NAME, aj as HYBRID_DELEGATOR_DOMAIN_VERSION, ak as HavenAgentAllowanceSummary, al as HavenAgentReadiness, am as HavenAllowance, an as HavenApiError, ao as HavenCatalogMerchant, ap as HavenListScope, aq as HavenPaymentStateError, ar as HavenSigningError, as as HavenTimeoutError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, aw as HavenZeroSettlementHashError, ax as MAX_TASK_BUDGET_TTL_SECONDS, ay as MachinePaymentRail, az as MerchantTimeoutError, aA as NEXT_TOOL_SERVER_NAMES, aB as NEXT_TOOL_SERVER_ROLES, aC as NextStep, aD as NextStepArguments, aE as NextStepHandoff, aF as NextStepInput, aG as NextStepTarget, aH as NextStepTargets, aI as NextToolServerRole, aJ as PACKED_USER_OPERATION_FIELDS, aK as PaymentFee, aL as PaymentNextAction, aM as PaymentPhase, aN as PaymentStatus, aO as ROOT_AUTHORITY, aP as SDK_CLIENT_IDENTITY, aQ as SDK_VERSION, aR as SIGNER_UPDATE_FALLBACK, aS as SWEEP_BASE_CHAIN_ID, aT as SWEEP_BASE_SEPOLIA_CHAIN_ID, aU as SWEEP_BASE_SEPOLIA_USDC_ADDRESS, aV as SWEEP_BASE_USDC_ADDRESS, aW as SettlementChildExpectation, aX as SignerRefusalCode, aY as SweepConfirmation, aZ as SweepEip712Domain, a_ as SweepEntry, a$ as SweepExpectedAuth, b0 as SweepPreparation, b1 as SweepSubmitResult, b2 as SweepTypedData, b3 as TRANSFER_WITH_AUTHORIZATION_TYPES, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, b8 as UnsupportedNodeVersionMessageOptions, b9 as X402AlreadySettledError, ba as X402Erc7710AlreadySettledError, bb as X402ExpectedAuth, bc as X402ExpectedContext, bd as X402PaymentHeaderContext, be as X402PaymentHeaderValidationError, bf as X402PaymentOption, bg as X402RequestSnapshot, bh as X402SchemeSelection, bi as X402TaskBudgetMismatchError, bj as X402UnexpectedStatusError, bk as X402_LEGACY_PAYMENT_HEADER_NAME, bl as X402_MAX_AUTHORIZATION_WINDOW_SECONDS, bm as X402_PAYMENT_HEADER_NAME, bn as X402_PAYMENT_HEADER_NAMES_SENT, bo as X402_PAYMENT_REQUIRED_HEADER_NAME, bp as X402_PAYMENT_RESPONSE_HEADER_NAME, bq as X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, br as assertBoundDirectPaymentUserOp, bs as assertOwnTaskBudgetCloseUserOp, bt as assertOwnTaskChild, bu as assertUserOpTypedDataBinding, bv as buildSweepAuthorizationMessage, bw as buildSweepTypedData, bx as buildX402ExpectedMessage, by as compareNodeVersions, bz as connectorRerunCommand, bA as connectorSpec, bB as connectorUpgradeCommand, bC as createNextStepBuilder, bD as decodeBase64Json, bE as decodeBase64Utf8, bF as defaultNextToolFor, bG as deriveDelegateAccountAddress, bH as encodeBase64Json, bI as encodeBase64Utf8, bJ as encodePaymentProof, bK as hashDelegation, bL as havenClientIdentity, bM as isConnectorChannel, bN as isErc7710Option, bO as isPackedUserOperationTypedData, bP as isSupportedNodeVersion, bQ as isSweepableChain, bR as isTaskChildTypedData, bS as normalizePaymentRequired, bT as packedUserOperationHash, bU as parseNextTool, bV as parsePaymentRequired, bW as parsePaymentRequiredResponse, bX as readClientUpdate, bY as renderNextTool, bZ as resolveConnectorChannel, b_ as resolveTokenBySymbol, b$ as resolveTokenFromAddress, c0 as selectErc7710PaymentOption, c1 as selectPaymentOption, c2 as selectStandardPaymentOption, c3 as selectX402SettlementScheme, c4 as signerUpdateFallback, c5 as sweepUsdcAddress, c6 as sweepUsdcDomain, c7 as toStandardPaymentRequirements, c8 as unsupportedNodeVersionMessage, c9 as validateStandardX402PaymentHeader, ca as verifySettlementChild, cb as x402AssetTransferMethod, cc as x402AuthorizationAmount, cd as x402FacilitatorAddresses, ce as x402V2PaymentEnvelope } from './base64-Br8mJPgm.js';
+import { R as RawPaymentParties, H as HavenClientConfig, a as HavenClientUpdate, P as PaymentRequest, b as PaymentResult, c as PaymentIntent, X as X402PaymentRequired, d as X402AuthorizationOptions, e as X402Intent, f as PaymentStatusResult, g as HavenAgent, h as HavenAgentSummary, S as SweepResult, i as SweepPrepareResponse, j as SweepAuthorization, k as SweepSubmitResponse, l as HavenAllowanceSummary, m as HavenBalanceCoverage, n as PostPurchaseAllowanceSummary, A as AgentPaymentWarning, o as HavenCatalogEntry, p as HavenCatalogSubmission, q as HavenPaymentReceipt, r as HavenPaymentReceiptsPage, O as OpenTaskBudgetResult, s as HavenTaskBudget, T as TaskBudgetSignContext, t as SubmitTaskBudgetResult, C as CloseTaskBudgetResult, u as PaymentResumeState, v as X402Receipt, w as X402Quote, x as X402Erc7710Settlement, y as X402McpCallContext, z as SignData, B as ResumeAuthorizedX402Input, D as ResumeX402PaymentInput, E as X402ResumeState, F as X402McpTransport, G as X402MerchantCallContext, I as HavenError } from './base64-BFXCO54F.js';
+export { J as AGENT_PAYMENT_FAILURE_CODE_VALUES, K as AGENT_PAYMENT_NEXT_ACTION_VALUES, L as AGENT_PAYMENT_PHASE_VALUES, M as AGENT_PAYMENT_RAIL_VALUES, N as AgentNextStep, Q as AgentPaymentEnumSchema, U as AgentPaymentFailureCode, V as AgentPaymentFailureCodeDescriptions, W as AgentPaymentFailureCodeSchema, Y as AgentPaymentNextAction, Z as AgentPaymentNextActionDescriptions, _ as AgentPaymentNextActionSchema, $ as AgentPaymentPhase, a0 as AgentPaymentPhaseDescriptions, a1 as AgentPaymentPhaseSchema, a2 as AgentPaymentRail, a3 as AgentPaymentRailDescriptions, a4 as AgentPaymentRailSchema, a5 as AgentPaymentSummary, a6 as AgentPaymentWarningCode, a7 as AgentPurchaseSummary, a8 as CONNECTOR_PACKAGE_NAME, a9 as CatalogSubmissionAccepted, aa as DEFAULT_CONFIRMATION_TIMEOUT_MS, ab as DEFAULT_NEXT_TOOL_BY_ACTION, ac as DIRECT_SIGN_CONTEXT_VERSION, ad as ENTRY_POINT_V07, ae as ERC7710_ASSET_TRANSFER_METHOD, af as HAVEN_CLIENT_HEADER, ag as HAVEN_CONNECTOR_CHANNEL, ah as HAVEN_MINIMUM_NODE_VERSION, ai as HYBRID_DELEGATOR_DOMAIN_NAME, aj as HYBRID_DELEGATOR_DOMAIN_VERSION, ak as HavenAgentAllowanceSummary, al as HavenAgentReadiness, am as HavenAllowance, an as HavenApiError, ao as HavenCatalogMerchant, ap as HavenListScope, aq as HavenPaymentStateError, ar as HavenSigningError, as as HavenTimeoutError, at as HavenTypedDataRefusedError, au as HavenUnsupportedSignerVersionError, av as HavenUserOpBindingError, aw as HavenZeroSettlementHashError, ax as MAX_TASK_BUDGET_TTL_SECONDS, ay as MachinePaymentRail, az as MerchantTimeoutError, aA as NEXT_TOOL_SERVER_NAMES, aB as NEXT_TOOL_SERVER_ROLES, aC as NextStep, aD as NextStepArguments, aE as NextStepHandoff, aF as NextStepInput, aG as NextStepTarget, aH as NextStepTargets, aI as NextToolServerRole, aJ as PACKED_USER_OPERATION_FIELDS, aK as PaymentFee, aL as PaymentNextAction, aM as PaymentPhase, aN as PaymentStatus, aO as ROOT_AUTHORITY, aP as SDK_CLIENT_IDENTITY, aQ as SDK_VERSION, aR as SIGNER_UPDATE_FALLBACK, aS as SWEEP_BASE_CHAIN_ID, aT as SWEEP_BASE_SEPOLIA_CHAIN_ID, aU as SWEEP_BASE_SEPOLIA_USDC_ADDRESS, aV as SWEEP_BASE_USDC_ADDRESS, aW as SettlementChildExpectation, aX as SignerRefusalCode, aY as SweepConfirmation, aZ as SweepEip712Domain, a_ as SweepEntry, a$ as SweepExpectedAuth, b0 as SweepPreparation, b1 as SweepSubmitResult, b2 as SweepTypedData, b3 as TRANSFER_WITH_AUTHORIZATION_TYPES, b4 as TYPED_DATA_NOT_ALLOWED, b5 as TaskBudgetCloseExpectation, b6 as TaskChildExpectation, b7 as TaskChildTypedData, b8 as UnsupportedNodeVersionMessageOptions, b9 as X402AlreadySettledError, ba as X402Erc7710AlreadySettledError, bb as X402ExpectedAuth, bc as X402ExpectedContext, bd as X402PaymentHeaderContext, be as X402PaymentHeaderValidationError, bf as X402PaymentOption, bg as X402RequestSnapshot, bh as X402SchemeSelection, bi as X402TaskBudgetMismatchError, bj as X402UnexpectedStatusError, bk as X402_LEGACY_PAYMENT_HEADER_NAME, bl as X402_MAX_AUTHORIZATION_WINDOW_SECONDS, bm as X402_PAYMENT_HEADER_NAME, bn as X402_PAYMENT_HEADER_NAMES_SENT, bo as X402_PAYMENT_REQUIRED_HEADER_NAME, bp as X402_PAYMENT_RESPONSE_HEADER_NAME, bq as X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, br as assertBoundDirectPaymentUserOp, bs as assertOwnTaskBudgetCloseUserOp, bt as assertOwnTaskChild, bu as assertUserOpTypedDataBinding, bv as buildSweepAuthorizationMessage, bw as buildSweepTypedData, bx as buildX402ExpectedMessage, by as compareNodeVersions, bz as connectorRerunCommand, bA as connectorSpec, bB as connectorUpgradeCommand, bC as createNextStepBuilder, bD as decodeBase64Json, bE as decodeBase64Utf8, bF as defaultNextToolFor, bG as deriveDelegateAccountAddress, bH as encodeBase64Json, bI as encodeBase64Utf8, bJ as encodePaymentProof, bK as hashDelegation, bL as havenClientIdentity, bM as isConnectorChannel, bN as isErc7710Option, bO as isPackedUserOperationTypedData, bP as isSupportedNodeVersion, bQ as isSweepableChain, bR as isTaskChildTypedData, bS as normalizePaymentRequired, bT as packedUserOperationHash, bU as parseNextTool, bV as parsePaymentRequired, bW as parsePaymentRequiredResponse, bX as readClientUpdate, bY as renderNextTool, bZ as resolveConnectorChannel, b_ as resolveTokenBySymbol, b$ as resolveTokenFromAddress, c0 as selectErc7710PaymentOption, c1 as selectPaymentOption, c2 as selectStandardPaymentOption, c3 as selectX402SettlementScheme, c4 as signerUpdateFallback, c5 as sweepUsdcAddress, c6 as sweepUsdcDomain, c7 as toStandardPaymentRequirements, c8 as unsupportedNodeVersionMessage, c9 as validateStandardX402PaymentHeader, ca as verifySettlementChild, cb as x402AssetTransferMethod, cc as x402AuthorizationAmount, cd as x402FacilitatorAddresses, ce as x402V2PaymentEnvelope } from './base64-BFXCO54F.js';
 import 'x402/types';
 import 'viem';
 
 /**
  * Verifiable payment receipts.
  *
- * A self-contained proof bundle for a settled Haven payment that anyone can
- * verify **independently of Haven**. The anchor is the agent delegate's
- * signature over the on-chain transfer hash: recover the signer and confirm it
- * is the agent's delegate, and you have cryptographic proof the agent authorised
- * exactly this transfer — no need to trust Haven's backend. The on-chain
- * `txHash` is the settlement source of truth (verify on any explorer).
+ * A self-contained bundle for a settled Haven payment whose agent
+ * authorisation can be checked offline. What `verifyPaymentReceipt` proves is
+ * deliberately narrow: the `payment` block (amount, recipient) is
+ * Haven-asserted and is NOT bound by the signature, and `verified: true` never
+ * proves the payment settled on-chain — settlement stays an explorer check on
+ * `onChain.txHash` / `settlementTxHash`.
  *
- * This lives in the SDK so agents and users can verify receipts client-side
- * with zero Haven trust.
+ * What `verified: true` means, per scheme:
+ *
+ * - erc7710 (`authorization.signatureScheme: 'eip712_delegation'`): the bundle
+ *   carries the settlement child's EIP-712 struct hash as `signHash`. The
+ *   verifier rebuilds the digest the delegate actually signed —
+ *   `keccak256(0x1901 ‖ domainSeparator(DelegationManager, chainId) ‖ signHash)`
+ *   — from the DelegationManager address the SDK pins and the bundle's
+ *   `onChain.chainId`, never from a value the receipt itself vouches for.
+ *   `verified: true` means the delegate key signed that settlement delegation
+ *   (`verifiedOver: 'delegation_digest'`).
+ * - direct payments and the eip3009 funding leg
+ *   (`signatureScheme: 'eip712_userop'`) sign an ERC-4337 user operation the
+ *   bundle does not carry: they return `not_verifiable_offline` rather than a
+ *   false accusation.
+ * - retired-rail bundles (no scheme) carry a raw-signed `signHash`; the
+ *   verifier recovers over it directly, then over the delegation digest when
+ *   the chain allows rebuilding it.
+ *
+ * Anything that is not a signed bundle — including a `haven_list_receipts`
+ * history row, which carries no signature at all — returns
+ * `not_a_signed_receipt`. Verification never throws.
+ *
+ * This lives in the SDK so agents and users can verify receipts client-side.
  */
 declare const RECEIPT_VERSION = "haven-receipt-1";
 interface PaymentReceipt {
@@ -44,6 +65,17 @@ interface PaymentReceipt {
         delegate: string;
         signHash: string;
         signature: string | null;
+        /**
+         * #3418: which digest the delegate signed — selects what offline
+         * verification rebuilds. `'eip712_delegation'`: the settlement
+         * delegation's EIP-712 digest (erc7710). `'eip712_userop'`: an ERC-4337
+         * user-operation digest the bundle does not carry (direct payments, the
+         * eip3009 funding leg) — not verifiable offline. Absent on retired-rail
+         * bundles and on backends older than #3418, whose `signHash` was signed
+         * raw. The value is only a selector: a lying one cannot make a forged
+         * signature verify, because recovery must still return `delegate`.
+         */
+        signatureScheme?: 'eip712_delegation' | 'eip712_userop';
     };
     onChain: {
         txHash: string | null;
@@ -53,17 +85,27 @@ interface PaymentReceipt {
 type ReceiptVerification = {
     verified: true;
     recoveredSigner: string;
+    verifiedOver: 'sign_hash' | 'delegation_digest';
 } | {
     verified: false;
-    reason: 'missing_signature' | 'bad_signature' | 'signer_mismatch';
+    reason: 
+    /** #3418: the input is not a haven-receipt-1 bundle (a haven_list_receipts row, null, undefined, a non-object). */
+    'not_a_signed_receipt'
+    /** #3418: eip712_userop bundle; or a delegation bundle on a chain the SDK pins no DelegationManager for. */
+     | 'not_verifiable_offline' | 'missing_signature' | 'bad_signature' | 'signer_mismatch';
     recoveredSigner?: string;
 };
+type RecoverFn = (hash: string, signature: string) => string;
 /**
- * Verify a receipt independently: recover the signer from the authorisation and
- * confirm it is the agent's delegate. Pure — `recover` is injectable but
- * defaults to standard ECDSA recovery, so this runs anywhere (no Haven backend).
+ * Verify a receipt's agent authorisation offline: recover the signer and
+ * confirm it is the agent delegate, over whichever digest the bundle's scheme
+ * names (see the module doc for what that proves — and what it does not).
+ * Never throws: anything that is not a signed receipt — a
+ * `haven_list_receipts` history row, null, undefined, a non-object — returns
+ * `not_a_signed_receipt`. Pure — `recover` is injectable but defaults to
+ * standard ECDSA recovery, so this runs anywhere (no Haven backend).
  */
-declare function verifyPaymentReceipt(receipt: PaymentReceipt, recover?: (hash: string, signature: string) => string): ReceiptVerification;
+declare function verifyPaymentReceipt(receipt: unknown, recover?: RecoverFn): ReceiptVerification;
 
 /**
  * Merchant delivery and the evidence trail behind it (#1620, epic #1613).
@@ -982,9 +1024,9 @@ declare const toolDescriptions: {
         readonly nextActionGuidance: "";
     };
     readonly verifyReceipt: {
-        readonly summary: "Verify a payment receipt offline — confirm the agent authorised the transfer.";
-        readonly selectionGuidance: "Use this to check a receipt you already hold; it needs no network and does not trust Haven. Use the history tool to fetch receipts in the first place.";
-        readonly behavior: "Recovers the signer from the receipt authorisation and confirms it matches the agent delegate. Returns verified true/false with the recovered signer or a reason. Pure and local — no backend call.";
+        readonly summary: "Verify a signed payment receipt offline — confirm the agent delegate signed its authorisation.";
+        readonly selectionGuidance: "Takes the signed bundle from GET /payments/{id}/receipt, not a haven_list_receipts row — a row carries no signature and returns not_a_signed_receipt. No network.";
+        readonly behavior: "Never throws. An erc7710 bundle verifies over the delegation digest the delegate signed; a direct or eip3009 bundle returns not_verifiable_offline. verified true means only that the delegate signed the hash named by verifiedOver — payment facts are Haven-asserted and settlement is not proven; check settlementTxHash on an explorer.";
         readonly nextActionGuidance: "";
     };
     readonly payMcpTool: {

package/dist/index.js

@@ -1,8 +1,8 @@
-import { selectStandardPaymentOption, buildX402IdempotencyKey, x402AuthorizationAmount, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, HavenTypedDataRefusedError, assertOwnSettlementChild, parsePaymentRequiredResponse, x402PaymentHeaderNamesSent, SDK_CLIENT_IDENTITY, readClientUpdate, HAVEN_CLIENT_HEADER, resolveTokenFromAddress, isSweepableChain, sweepUsdcAddress, x402PaymentHeaderNamesFor, X402_PAYMENT_HEADER_NAMES, toStandardPaymentRequirements, decodeBase64Json, encodeBase64Json, x402V2PaymentEnvelope, selectX402SettlementScheme, selectErc7710PaymentOption, isErc7710Option, x402AssetTransferMethod, normalizePaymentRequired } from './chunk-AFJ7XDDI.js';
-export { DEFAULT_NEXT_TOOL_BY_ACTION, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, MAX_TASK_BUDGET_TTL_SECONDS, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, SDK_CLIENT_IDENTITY, SDK_VERSION, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, TRANSFER_WITH_AUTHORIZATION_TYPES, TYPED_DATA_NOT_ALLOWED, X402PaymentHeaderValidationError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, assertBoundDirectPaymentUserOp, assertOwnTaskBudgetCloseUserOp, assertOwnTaskChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, compareNodeVersions, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, hashDelegation, havenClientIdentity, isErc7710Option, isSupportedNodeVersion, isSweepableChain, isTaskChildTypedData, normalizePaymentRequired, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, readClientUpdate, renderNextTool, resolveTokenBySymbol, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402V2PaymentEnvelope } from './chunk-AFJ7XDDI.js';
-import { HavenSigningError, HavenError, DEFAULT_CONFIRMATION_TIMEOUT_MS, HavenApiError, assertUserOpTypedDataBinding, AgentPaymentRail, AgentPaymentPhase, HavenTimeoutError, X402TaskBudgetMismatchError, X402UnexpectedStatusError, X402AlreadySettledError, AgentPaymentWarningCode, MerchantTimeoutError, AgentPaymentNextAction, HavenPaymentStateError, HavenZeroSettlementHashError, X402Erc7710AlreadySettledError, chainIdForNetwork } from './chunk-Y2Q4DZVU.js';
+import { selectStandardPaymentOption, buildX402IdempotencyKey, x402AuthorizationAmount, assertBoundDirectPaymentUserOp, assertFundingLegPaysDelegate, HavenTypedDataRefusedError, assertOwnSettlementChild, parsePaymentRequiredResponse, x402PaymentHeaderNamesSent, SDK_CLIENT_IDENTITY, readClientUpdate, HAVEN_CLIENT_HEADER, resolveTokenFromAddress, isSweepableChain, sweepUsdcAddress, x402PaymentHeaderNamesFor, X402_PAYMENT_HEADER_NAMES, toStandardPaymentRequirements, decodeBase64Json, encodeBase64Json, x402V2PaymentEnvelope, selectX402SettlementScheme, selectErc7710PaymentOption, isErc7710Option, x402AssetTransferMethod, normalizePaymentRequired } from './chunk-LKWXAYWW.js';
+export { DEFAULT_NEXT_TOOL_BY_ACTION, ERC7710_ASSET_TRANSFER_METHOD, HAVEN_CLIENT_HEADER, HAVEN_MINIMUM_NODE_VERSION, HavenTypedDataRefusedError, MAX_TASK_BUDGET_TTL_SECONDS, NEXT_TOOL_SERVER_NAMES, NEXT_TOOL_SERVER_ROLES, SDK_CLIENT_IDENTITY, SDK_VERSION, SWEEP_BASE_CHAIN_ID, SWEEP_BASE_SEPOLIA_CHAIN_ID, SWEEP_BASE_SEPOLIA_USDC_ADDRESS, SWEEP_BASE_USDC_ADDRESS, TRANSFER_WITH_AUTHORIZATION_TYPES, TYPED_DATA_NOT_ALLOWED, X402PaymentHeaderValidationError, X402_LEGACY_PAYMENT_HEADER_NAME, X402_MAX_AUTHORIZATION_WINDOW_SECONDS, X402_PAYMENT_HEADER_NAME, X402_PAYMENT_HEADER_NAMES_SENT, X402_PAYMENT_REQUIRED_HEADER_NAME, X402_PAYMENT_RESPONSE_HEADER_NAME, X402_SETTLEMENT_FORWARD_MARGIN_SECONDS, assertBoundDirectPaymentUserOp, assertOwnTaskBudgetCloseUserOp, assertOwnTaskChild, buildSweepAuthorizationMessage, buildSweepTypedData, buildX402ExpectedMessage, compareNodeVersions, createNextStepBuilder, decodeBase64Json, decodeBase64Utf8, defaultNextToolFor, encodeBase64Json, encodeBase64Utf8, encodePaymentProof, hashDelegation, havenClientIdentity, isErc7710Option, isSupportedNodeVersion, isSweepableChain, isTaskChildTypedData, normalizePaymentRequired, parseNextTool, parsePaymentRequired, parsePaymentRequiredResponse, readClientUpdate, renderNextTool, resolveTokenBySymbol, resolveTokenFromAddress, selectErc7710PaymentOption, selectPaymentOption, selectStandardPaymentOption, selectX402SettlementScheme, sweepUsdcAddress, sweepUsdcDomain, toStandardPaymentRequirements, unsupportedNodeVersionMessage, validateStandardX402PaymentHeader, x402AssetTransferMethod, x402AuthorizationAmount, x402FacilitatorAddresses, x402V2PaymentEnvelope } from './chunk-LKWXAYWW.js';
+import { HavenSigningError, HavenError, DEFAULT_CONFIRMATION_TIMEOUT_MS, HavenApiError, assertUserOpTypedDataBinding, AgentPaymentRail, AgentPaymentPhase, HavenTimeoutError, X402TaskBudgetMismatchError, X402UnexpectedStatusError, X402AlreadySettledError, AgentPaymentWarningCode, MerchantTimeoutError, AgentPaymentNextAction, HavenPaymentStateError, HavenZeroSettlementHashError, X402Erc7710AlreadySettledError, DELEGATION_MANAGER, chainIdForNetwork } from './chunk-Y2Q4DZVU.js';
 export { AGENT_PAYMENT_FAILURE_CODE_VALUES, AGENT_PAYMENT_NEXT_ACTION_VALUES, AGENT_PAYMENT_PHASE_VALUES, AGENT_PAYMENT_RAIL_VALUES, AgentPaymentFailureCode, AgentPaymentFailureCodeDescriptions, AgentPaymentFailureCodeSchema, AgentPaymentNextAction, AgentPaymentNextActionDescriptions, AgentPaymentNextActionSchema, AgentPaymentPhase, AgentPaymentPhaseDescriptions, AgentPaymentPhaseSchema, AgentPaymentRail, AgentPaymentRailDescriptions, AgentPaymentRailSchema, AgentPaymentWarningCode, CONNECTOR_PACKAGE_NAME, DEFAULT_CONFIRMATION_TIMEOUT_MS, DIRECT_SIGN_CONTEXT_VERSION, ENTRY_POINT_V07, HAVEN_CONNECTOR_CHANNEL, HYBRID_DELEGATOR_DOMAIN_NAME, HYBRID_DELEGATOR_DOMAIN_VERSION, HavenApiError, HavenError, HavenPaymentStateError, HavenSigningError, HavenTimeoutError, HavenUnsupportedSignerVersionError, HavenUserOpBindingError, HavenZeroSettlementHashError, MerchantTimeoutError, PACKED_USER_OPERATION_FIELDS, ROOT_AUTHORITY, SIGNER_UPDATE_FALLBACK, SignerRefusalCode, X402AlreadySettledError, X402Erc7710AlreadySettledError, X402TaskBudgetMismatchError, X402UnexpectedStatusError, assertUserOpTypedDataBinding, connectorRerunCommand, connectorSpec, connectorUpgradeCommand, deriveDelegateAccountAddress, isConnectorChannel, isPackedUserOperationTypedData, packedUserOperationHash, resolveConnectorChannel, signerUpdateFallback, verifySettlementChild } from './chunk-Y2Q4DZVU.js';
-import { hashTypedData } from 'viem';
+import { keccak256, toBytes, concatHex, hashTypedData, encodeAbiParameters } from 'viem';
 import { ethers } from 'ethers';
 import { AsyncLocalStorage } from 'async_hooks';
 import { exact } from 'x402/schemes';
@@ -849,22 +849,93 @@ function selectJsonRpcResult(messages) {
   return messages.find((message) => "result" in message || "error" in message) ?? messages.at(-1);
 }
 var RECEIPT_VERSION = "haven-receipt-1";
+var DELEGATION_MANAGER_CHAIN_IDS = /* @__PURE__ */ new Set([8453, 84532]);
+var EIP712_DOMAIN_TYPEHASH = keccak256(
+  toBytes("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)")
+);
+function delegationDomainSeparator(chainId) {
+  return keccak256(
+    encodeAbiParameters(
+      [{ type: "bytes32" }, { type: "bytes32" }, { type: "bytes32" }, { type: "uint256" }, { type: "address" }],
+      [
+        EIP712_DOMAIN_TYPEHASH,
+        keccak256(toBytes("DelegationManager")),
+        keccak256(toBytes("1")),
+        BigInt(chainId),
+        DELEGATION_MANAGER
+      ]
+    )
+  );
+}
+function delegationDigest(structHash, chainId) {
+  return keccak256(concatHex(["0x1901", delegationDomainSeparator(chainId), structHash]));
+}
 function defaultRecover(hash, signature) {
   return ethers.recoverAddress(hash, signature);
 }
-function verifyPaymentReceipt(receipt, recover = defaultRecover) {
-  const { delegate, signHash: signHash2, signature } = receipt.authorization;
-  if (!signature) return { verified: false, reason: "missing_signature" };
+var NOT_A_SIGNED_RECEIPT = { verified: false, reason: "not_a_signed_receipt" };
+function match(delegate, hash, signature, recover) {
   let recovered;
   try {
-    recovered = recover(signHash2, signature);
+    recovered = recover(hash, signature);
   } catch {
-    return { verified: false, reason: "bad_signature" };
+    return { ok: false, reason: "bad_signature" };
   }
   if (recovered.toLowerCase() !== delegate.toLowerCase()) {
-    return { verified: false, reason: "signer_mismatch", recoveredSigner: recovered };
+    return { ok: false, reason: "signer_mismatch", recoveredSigner: recovered };
+  }
+  return { ok: true, recoveredSigner: recovered };
+}
+function finish(result, verifiedOver) {
+  if (result.ok) {
+    return { verified: true, recoveredSigner: result.recoveredSigner, verifiedOver };
+  }
+  return result.recoveredSigner !== void 0 ? { verified: false, reason: result.reason, recoveredSigner: result.recoveredSigner } : { verified: false, reason: result.reason };
+}
+function verifyPaymentReceipt(receipt, recover = defaultRecover) {
+  if (typeof receipt !== "object" || receipt === null) return NOT_A_SIGNED_RECEIPT;
+  const source = receipt;
+  if (typeof source.authorization !== "object" || source.authorization === null) {
+    return NOT_A_SIGNED_RECEIPT;
+  }
+  const auth = source.authorization;
+  const { delegate, signHash: signHash2, signature, signatureScheme } = auth;
+  if (typeof delegate !== "string" || delegate === "" || typeof signHash2 !== "string" || signHash2 === "") {
+    return NOT_A_SIGNED_RECEIPT;
+  }
+  if (typeof signature !== "string" || signature === "") {
+    return { verified: false, reason: "missing_signature" };
+  }
+  const chainId = typeof source.onChain?.chainId === "number" ? source.onChain.chainId : void 0;
+  const digestVerifiable = chainId !== void 0 && DELEGATION_MANAGER_CHAIN_IDS.has(chainId);
+  if (signatureScheme === "eip712_userop") {
+    return { verified: false, reason: "not_verifiable_offline" };
+  }
+  if (signatureScheme === "eip712_delegation") {
+    if (!digestVerifiable) {
+      return { verified: false, reason: "not_verifiable_offline" };
+    }
+    let digest;
+    try {
+      digest = delegationDigest(signHash2, chainId);
+    } catch {
+      return { verified: false, reason: "bad_signature" };
+    }
+    return finish(match(delegate, digest, signature, recover), "delegation_digest");
+  }
+  const raw = match(delegate, signHash2, signature, recover);
+  if (raw.ok) return finish(raw, "sign_hash");
+  if (digestVerifiable) {
+    let digest;
+    try {
+      digest = delegationDigest(signHash2, chainId);
+    } catch {
+      return finish(raw, "sign_hash");
+    }
+    const delegated = match(delegate, digest, signature, recover);
+    if (delegated.ok) return finish(delegated, "delegation_digest");
   }
-  return { verified: true, recoveredSigner: recovered };
+  return finish(raw, "sign_hash");
 }
 
 // src/account-reads.ts
@@ -1081,22 +1152,22 @@ var AccountReads = class {
     try {
       const tokenAddress = payment.asset ?? payment.x402?.asset ?? null;
       if (!tokenAddress) return unavailable("the settled payment does not carry a resolvable token address", payment);
-      const match = allowanceResult.value.allowances.find(
+      const match2 = allowanceResult.value.allowances.find(
         (allowance) => allowance.tokenAddress.toLowerCase() === tokenAddress.toLowerCase()
       );
-      if (!match) return unavailable("no allowance/budget row matches the settled token", payment);
-      const token = resolveTokenFromAddress(match.tokenAddress);
-      const remainingDisplay = token ? `${formatAtomicAmount(safeBigInt(match.onchain.remaining), token.decimals)} ${match.tokenSymbol}` : void 0;
+      if (!match2) return unavailable("no allowance/budget row matches the settled token", payment);
+      const token = resolveTokenFromAddress(match2.tokenAddress);
+      const remainingDisplay = token ? `${formatAtomicAmount(safeBigInt(match2.onchain.remaining), token.decimals)} ${match2.tokenSymbol}` : void 0;
       const rail = agentResult.value.executionRail;
       return {
         payment,
         allowance: {
           rail,
-          remaining_atomic: match.onchain.remaining,
+          remaining_atomic: match2.onchain.remaining,
           ...remainingDisplay ? { remaining_display: remainingDisplay } : {},
-          token_symbol: match.tokenSymbol,
-          token_address: match.tokenAddress,
-          reset_period: match.resetPeriodMin,
+          token_symbol: match2.tokenSymbol,
+          token_address: match2.tokenAddress,
+          reset_period: match2.resetPeriodMin,
           source: rail === "delegation" ? "active_delegations" : "allowance_module"
         },
         warnings: []
@@ -3855,9 +3926,9 @@ var toolDescriptions = {
     nextActionGuidance: ""
   },
   verifyReceipt: {
-    summary: "Verify a payment receipt offline \u2014 confirm the agent authorised the transfer.",
-    selectionGuidance: "Use this to check a receipt you already hold; it needs no network and does not trust Haven. Use the history tool to fetch receipts in the first place.",
-    behavior: "Recovers the signer from the receipt authorisation and confirms it matches the agent delegate. Returns verified true/false with the recovered signer or a reason. Pure and local \u2014 no backend call.",
+    summary: "Verify a signed payment receipt offline \u2014 confirm the agent delegate signed its authorisation.",
+    selectionGuidance: "Takes the signed bundle from GET /payments/{id}/receipt, not a haven_list_receipts row \u2014 a row carries no signature and returns not_a_signed_receipt. No network.",
+    behavior: "Never throws. An erc7710 bundle verifies over the delegation digest the delegate signed; a direct or eip3009 bundle returns not_verifiable_offline. verified true means only that the delegate signed the hash named by verifiedOver \u2014 payment facts are Haven-asserted and settlement is not proven; check settlementTxHash on an explorer.",
     nextActionGuidance: ""
   },
   payMcpTool: {